Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Vista 64 won't boot


  • This topic is locked This topic is locked
26 replies to this topic

#16 blurry eyes

blurry eyes
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:04:42 AM

Posted 11 October 2011 - 12:57 PM

This first log is the one that removed the rootkit. The second log represents the second running after the rootkit removal. The third and fourth logs are the requested logs from OTL.

TDSS first log:
09:16:51.0967 4924 TDSS rootkit removing tool 2.6.7.0 Oct 10 2011 09:40:06
09:16:52.0940 4924 ============================================================
09:16:52.0940 4924 Current date / time: 2011/10/11 09:16:52.0940
09:16:52.0940 4924 SystemInfo:
09:16:52.0940 4924
09:16:52.0940 4924 OS Version: 6.0.6002 ServicePack: 2.0
09:16:52.0940 4924 Product type: Workstation
09:16:52.0940 4924 ComputerName: OWNER-PC
09:16:52.0940 4924 UserName: Owner
09:16:52.0940 4924 Windows directory: C:\Windows
09:16:52.0940 4924 System windows directory: C:\Windows
09:16:52.0940 4924 Running under WOW64
09:16:52.0940 4924 Processor architecture: Intel x64
09:16:52.0940 4924 Number of processors: 8
09:16:52.0940 4924 Page size: 0x1000
09:16:52.0940 4924 Boot type: Normal boot
09:16:52.0940 4924 ============================================================
09:16:53.0523 4924 Initialize success
09:16:59.0445 2052 ============================================================
09:16:59.0445 2052 Scan started
09:16:59.0445 2052 Mode: Manual;
09:16:59.0445 2052 ============================================================
09:16:59.0796 2052 61883 (78e902fb660bd5003fe726b9bef300b6) C:\Windows\system32\DRIVERS\61883.sys
09:16:59.0798 2052 61883 - ok
09:16:59.0842 2052 ACPI (1965aaffab07e3fb03c77f81beba3547) C:\Windows\system32\drivers\acpi.sys
09:16:59.0846 2052 ACPI - ok
09:16:59.0935 2052 adp94xx (f14215e37cf124104575073f782111d2) C:\Windows\system32\drivers\adp94xx.sys
09:16:59.0943 2052 adp94xx - ok
09:16:59.0973 2052 adpahci (7d05a75e3066861a6610f7ee04ff085c) C:\Windows\system32\drivers\adpahci.sys
09:16:59.0979 2052 adpahci - ok
09:17:00.0005 2052 adpu160m (820a201fe08a0c345b3bedbc30e1a77c) C:\Windows\system32\drivers\adpu160m.sys
09:17:00.0007 2052 adpu160m - ok
09:17:00.0040 2052 adpu320 (9b4ab6854559dc168fbb4c24fc52e794) C:\Windows\system32\drivers\adpu320.sys
09:17:00.0043 2052 adpu320 - ok
09:17:00.0148 2052 AFD (0cc146c4addea45791b18b1e2659f4a9) C:\Windows\system32\drivers\afd.sys
09:17:00.0154 2052 AFD - ok
09:17:00.0266 2052 AgereSoftModem (385471f8147e1bd6a08c031e3aad3910) C:\Windows\system32\DRIVERS\agrsm64.sys
09:17:00.0283 2052 AgereSoftModem - ok
09:17:00.0353 2052 agp440 (f6f6793b7f17b550ecfdbd3b229173f7) C:\Windows\system32\drivers\agp440.sys
09:17:00.0355 2052 agp440 - ok
09:17:00.0389 2052 aic78xx (222cb641b4b8a1d1126f8033f9fd6a00) C:\Windows\system32\drivers\djsvs.sys
09:17:00.0391 2052 aic78xx - ok
09:17:00.0415 2052 aliide (157d0898d4b73f075ce9fa26b482df98) C:\Windows\system32\drivers\aliide.sys
09:17:00.0416 2052 aliide - ok
09:17:00.0447 2052 amdide (970fa5059e61e30d25307b99903e991e) C:\Windows\system32\drivers\amdide.sys
09:17:00.0448 2052 amdide - ok
09:17:00.0493 2052 AmdK8 (cdc3632a3a5ea4dbb83e46076a3165a1) C:\Windows\system32\drivers\amdk8.sys
09:17:00.0494 2052 AmdK8 - ok
09:17:00.0589 2052 arc (ba8417d4765f3988ff921f30f630e303) C:\Windows\system32\drivers\arc.sys
09:17:00.0591 2052 arc - ok
09:17:00.0633 2052 arcsas (9d41c435619733b34cc16a511e644b11) C:\Windows\system32\drivers\arcsas.sys
09:17:00.0647 2052 arcsas - ok
09:17:00.0735 2052 AsyncMac (22d13ff3dafec2a80634752b1eaa2de6) C:\Windows\system32\DRIVERS\asyncmac.sys
09:17:00.0736 2052 AsyncMac - ok
09:17:00.0771 2052 atapi (e68d9b3a3905619732f7fe039466a623) C:\Windows\system32\drivers\atapi.sys
09:17:00.0772 2052 atapi - ok
09:17:00.0936 2052 atikmdag (0adc170bcac8260539df29032a2e9d8d) C:\Windows\system32\DRIVERS\atikmdag.sys
09:17:00.0995 2052 atikmdag - ok
09:17:01.0044 2052 Avc (295fa2878ff499c0edfa0ebcc8c6ec66) C:\Windows\system32\DRIVERS\avc.sys
09:17:01.0046 2052 Avc - ok
09:17:01.0098 2052 AVCSTRM (044320c8073293e02d000671e1e7a592) C:\Windows\system32\DRIVERS\avcstrm.sys
09:17:01.0100 2052 AVCSTRM - ok
09:17:01.0112 2052 Beep - ok
09:17:01.0475 2052 BHDrvx64 (9e064b36ac74fb81ad04e0074c17b6be) C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.0.0.125\Definitions\BASHDefs\20110929.001\BHDrvx64.sys
09:17:01.0493 2052 BHDrvx64 - ok
09:17:01.0603 2052 blbdrive (79feeb40056683f8f61398d81dda65d2) C:\Windows\system32\drivers\blbdrive.sys
09:17:01.0604 2052 blbdrive - ok
09:17:01.0652 2052 bowser (2348447a80920b2493a9b582a23e81e1) C:\Windows\system32\DRIVERS\bowser.sys
09:17:01.0654 2052 bowser - ok
09:17:01.0708 2052 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\drivers\brfiltlo.sys
09:17:01.0709 2052 BrFiltLo - ok
09:17:01.0728 2052 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\drivers\brfiltup.sys
09:17:01.0729 2052 BrFiltUp - ok
09:17:01.0754 2052 Brserid (f0f0ba4d815be446aa6a4583ca3bca9b) C:\Windows\system32\drivers\brserid.sys
09:17:01.0756 2052 Brserid - ok
09:17:01.0770 2052 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\system32\drivers\brserwdm.sys
09:17:01.0771 2052 BrSerWdm - ok
09:17:01.0789 2052 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\system32\drivers\brusbmdm.sys
09:17:01.0790 2052 BrUsbMdm - ok
09:17:01.0854 2052 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\system32\drivers\brusbser.sys
09:17:01.0855 2052 BrUsbSer - ok
09:17:01.0917 2052 BTHMODEM (e0777b34e05f8a82a21856efc900c29f) C:\Windows\system32\drivers\bthmodem.sys
09:17:01.0919 2052 BTHMODEM - ok
09:17:01.0945 2052 catchme - ok
09:17:01.0988 2052 cdfs (b4d787db8d30793a4d4df9feed18f136) C:\Windows\system32\DRIVERS\cdfs.sys
09:17:01.0990 2052 cdfs - ok
09:17:02.0051 2052 cdrom (c025aa69be3d0d25c7a2e746ef6f94fc) C:\Windows\system32\DRIVERS\cdrom.sys
09:17:02.0053 2052 cdrom - ok
09:17:02.0138 2052 circlass (02ea568d498bbdd4ba55bf3fce34d456) C:\Windows\system32\DRIVERS\circlass.sys
09:17:02.0139 2052 circlass - ok
09:17:02.0218 2052 CLBStor (fe9e7b984796a2d2198abb04910d16ad) C:\Windows\system32\DRIVERS\CLBStor.sys
09:17:02.0219 2052 CLBStor - ok
09:17:02.0255 2052 CLBUDF (f9693138bacdfa4513a7f464bd6663fd) C:\Windows\system32\DRIVERS\CLBUDF.sys
09:17:02.0260 2052 CLBUDF - ok
09:17:02.0286 2052 CLFS (3dca9a18b204939cfb24bea53e31eb48) C:\Windows\system32\CLFS.sys
09:17:02.0291 2052 CLFS - ok
09:17:02.0614 2052 cmdide (e5d5499a1c50a54b5161296b6afe6192) C:\Windows\system32\drivers\cmdide.sys
09:17:02.0615 2052 cmdide - ok
09:17:02.0714 2052 Compbatt (7fb8ad01db0eabe60c8a861531a8f431) C:\Windows\system32\drivers\compbatt.sys
09:17:02.0715 2052 Compbatt - ok
09:17:02.0791 2052 crcdisk (a8585b6412253803ce8efcbd6d6dc15c) C:\Windows\system32\drivers\crcdisk.sys
09:17:02.0792 2052 crcdisk - ok
09:17:02.0980 2052 DfsC (8b722ba35205c71e7951cdc4cdbade19) C:\Windows\system32\Drivers\dfsc.sys
09:17:02.0996 2052 DfsC - ok
09:17:03.0229 2052 disk (b0107e40ecdb5fa692ebf832f295d905) C:\Windows\system32\drivers\disk.sys
09:17:03.0248 2052 disk - ok
09:17:03.0387 2052 drmkaud (f1a78a98cfc2ee02144c6bec945447e6) C:\Windows\system32\drivers\drmkaud.sys
09:17:03.0398 2052 drmkaud - ok
09:17:03.0475 2052 DXGKrnl (b8e554e502d5123bc111f99d6a2181b4) C:\Windows\System32\drivers\dxgkrnl.sys
09:17:03.0501 2052 DXGKrnl - ok
09:17:03.0721 2052 E1G60 (264cee7b031a9d6c827f3d0cb031f2fe) C:\Windows\system32\DRIVERS\E1G6032E.sys
09:17:03.0724 2052 E1G60 - ok
09:17:03.0752 2052 e1yexpress (b37f6853d6e0c6f5f8efde33e831b5f8) C:\Windows\system32\DRIVERS\e1y60x64.sys
09:17:03.0756 2052 e1yexpress - ok
09:17:03.0853 2052 Ecache (5f94962be5a62db6e447ff6470c4f48a) C:\Windows\system32\drivers\ecache.sys
09:17:03.0855 2052 Ecache - ok
09:17:03.0956 2052 eeCtrl (5e3a50930447f464c66032e05a4632f5) C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys
09:17:04.0012 2052 eeCtrl - ok
09:17:04.0130 2052 elxstor (c4636d6e10469404ab5308d9fd45ed07) C:\Windows\system32\drivers\elxstor.sys
09:17:04.0189 2052 elxstor - ok
09:17:04.0369 2052 EraserUtilRebootDrv (dcb76ecc6b50a266fdc16e1963ab98ce) C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys
09:17:04.0391 2052 EraserUtilRebootDrv - ok
09:17:04.0471 2052 ErrDev (bc3a58e938bb277e46bf4b3003b01abd) C:\Windows\system32\drivers\errdev.sys
09:17:04.0473 2052 ErrDev - ok
09:17:04.0804 2052 exfat (486844f47b6636044a42454614ed4523) C:\Windows\system32\drivers\exfat.sys
09:17:04.0808 2052 exfat - ok
09:17:04.0846 2052 fastfat (1a4bee34277784619ddaf0422c0c6e23) C:\Windows\system32\drivers\fastfat.sys
09:17:04.0850 2052 fastfat - ok
09:17:04.0933 2052 fdc (81b79b6df71fa1d2c6d688d830616e39) C:\Windows\system32\DRIVERS\fdc.sys
09:17:04.0934 2052 fdc - ok
09:17:04.0964 2052 FileInfo (457b7d1d533e4bd62a99aed9c7bb4c59) C:\Windows\system32\drivers\fileinfo.sys
09:17:04.0965 2052 FileInfo - ok
09:17:04.0999 2052 Filetrace (d421327fd6efccaf884a54c58e1b0d7f) C:\Windows\system32\drivers\filetrace.sys
09:17:05.0000 2052 Filetrace - ok
09:17:05.0033 2052 flpydisk (230923ea2b80f79b0f88d90f87b87ebd) C:\Windows\system32\DRIVERS\flpydisk.sys
09:17:05.0034 2052 flpydisk - ok
09:17:05.0094 2052 FltMgr (e3041bc26d6930d61f42aedb79c91720) C:\Windows\system32\drivers\fltmgr.sys
09:17:05.0098 2052 FltMgr - ok
09:17:05.0175 2052 Fs_Rec (29d99e860a1ca0a03c6a733fdd0da703) C:\Windows\system32\drivers\Fs_Rec.sys
09:17:05.0176 2052 Fs_Rec - ok
09:17:05.0214 2052 gagp30kx (c8e416668d3dc2be3d4fe4c79224997f) C:\Windows\system32\drivers\gagp30kx.sys
09:17:05.0215 2052 gagp30kx - ok
09:17:05.0334 2052 GEARAspiWDM (e403aacf8c7bb11375122d2464560311) C:\Windows\system32\Drivers\GEARAspiWDM.sys
09:17:05.0335 2052 GEARAspiWDM - ok
09:17:05.0411 2052 GIDv2 (9ba22aee7f531ef9ce085cc2e1112bc4) C:\Windows\system32\drivers\GIDv2.sys
09:17:05.0412 2052 GIDv2 - ok
09:17:05.0481 2052 gwfilt64 (5e114600f350f3bee3f92516e51144f1) C:\Windows\system32\drivers\gwfilt64.sys
09:17:05.0482 2052 gwfilt64 - ok
09:17:05.0564 2052 HdAudAddService (df45f8142dc6df9d18c39b3effbd0409) C:\Windows\system32\drivers\HdAudio.sys
09:17:05.0569 2052 HdAudAddService - ok
09:17:05.0676 2052 HDAudBus (f942c5820205f2fb453243edfec82a3d) C:\Windows\system32\DRIVERS\HDAudBus.sys
09:17:05.0688 2052 HDAudBus - ok
09:17:05.0737 2052 HidBth (b4881c84a180e75b8c25dc1d726c375f) C:\Windows\system32\drivers\hidbth.sys
09:17:05.0738 2052 HidBth - ok
09:17:05.0770 2052 HidIr (5f47839455d01ff6403b008d481a6f5b) C:\Windows\system32\DRIVERS\hidir.sys
09:17:05.0771 2052 HidIr - ok
09:17:05.0854 2052 HidUsb (443bdd2d30bb4f00795c797e2cf99edf) C:\Windows\system32\DRIVERS\hidusb.sys
09:17:05.0854 2052 HidUsb - ok
09:17:05.0925 2052 HpCISSs (d7109a1e6bd2dfdbcba72a6bc626a13b) C:\Windows\system32\drivers\hpcisss.sys
09:17:05.0926 2052 HpCISSs - ok
09:17:06.0181 2052 HTTP (098f1e4e5c9cb5b0063a959063631610) C:\Windows\system32\drivers\HTTP.sys
09:17:06.0207 2052 HTTP - ok
09:17:06.0246 2052 i2omp (da94c854cea5fac549d4e1f6e88349e8) C:\Windows\system32\drivers\i2omp.sys
09:17:06.0247 2052 i2omp - ok
09:17:06.0314 2052 i8042prt (cbb597659a2713ce0c9cc20c88c7591f) C:\Windows\system32\DRIVERS\i8042prt.sys
09:17:06.0316 2052 i8042prt - ok
09:17:06.0384 2052 iaStor (fc28e90f2204d8fd147fa9bfa8a51c01) C:\Windows\system32\DRIVERS\iaStor.sys
09:17:06.0387 2052 iaStor - ok
09:17:06.0483 2052 iaStorV (3e3bf3627d886736d0b4e90054f929f6) C:\Windows\system32\drivers\iastorv.sys
09:17:06.0487 2052 iaStorV - ok
09:17:06.0807 2052 IDSVia64 (0b97f1a640ad3d159a7b5d2164c42e50) C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.0.0.125\Definitions\IPSDefs\20111010.030\IDSvia64.sys
09:17:06.0809 2052 IDSVia64 - ok
09:17:06.0912 2052 iirsp (8c3951ad2fe886ef76c7b5027c3125d3) C:\Windows\system32\drivers\iirsp.sys
09:17:06.0914 2052 iirsp - ok
09:17:07.0022 2052 int15 (8c7fa71cb1ebcd3ede8958d27b1bf0b4) C:\Windows\SysWOW64\drivers\int15_64.sys
09:17:07.0023 2052 int15 - ok
09:17:07.0123 2052 IntcAzAudAddService (6fdf709500c20362ffc5057f0d1e0c8d) C:\Windows\system32\drivers\RTKVHD64.sys
09:17:07.0701 2052 IntcAzAudAddService - ok
09:17:07.0780 2052 intelide (df797a12176f11b2d301c5b234bb200e) C:\Windows\system32\drivers\intelide.sys
09:17:07.0782 2052 intelide - ok
09:17:07.0823 2052 intelppm (bfd84af32fa1bad6231c4585cb469630) C:\Windows\system32\DRIVERS\intelppm.sys
09:17:07.0823 2052 intelppm - ok
09:17:07.0905 2052 IpFilterDriver (d8aabc341311e4780d6fce8c73c0ad81) C:\Windows\system32\DRIVERS\ipfltdrv.sys
09:17:07.0907 2052 IpFilterDriver - ok
09:17:07.0917 2052 IpInIp - ok
09:17:07.0961 2052 IPMIDRV (9c2ee2e6e5a7203bfae15c299475ec67) C:\Windows\system32\drivers\ipmidrv.sys
09:17:07.0963 2052 IPMIDRV - ok
09:17:08.0006 2052 IPNAT (b7e6212f581ea5f6ab0c3a6ceeeb89be) C:\Windows\system32\DRIVERS\ipnat.sys
09:17:08.0008 2052 IPNAT - ok
09:17:08.0069 2052 IRENUM (8c42ca155343a2f11d29feca67faa88d) C:\Windows\system32\drivers\irenum.sys
09:17:08.0070 2052 IRENUM - ok
09:17:08.0147 2052 isapnp (0672bfcedc6fc468a2b0500d81437f4f) C:\Windows\system32\drivers\isapnp.sys
09:17:08.0147 2052 isapnp - ok
09:17:08.0229 2052 iScsiPrt (e4fdf99599f27ec25d2cf6d754243520) C:\Windows\system32\DRIVERS\msiscsi.sys
09:17:08.0231 2052 iScsiPrt - ok
09:17:08.0285 2052 iteatapi (63c766cdc609ff8206cb447a65abba4a) C:\Windows\system32\drivers\iteatapi.sys
09:17:08.0286 2052 iteatapi - ok
09:17:08.0352 2052 iteraid (1281fe73b17664631d12f643cbea3f59) C:\Windows\system32\drivers\iteraid.sys
09:17:08.0353 2052 iteraid - ok
09:17:08.0387 2052 kbdclass (423696f3ba6472dd17699209b933bc26) C:\Windows\system32\DRIVERS\kbdclass.sys
09:17:08.0388 2052 kbdclass - ok
09:17:08.0419 2052 kbdhid (dbdf75d51464fbc47d0104ec3d572c05) C:\Windows\system32\DRIVERS\kbdhid.sys
09:17:08.0420 2052 kbdhid - ok
09:17:08.0484 2052 KSecDD (476e2c1dcea45895994bef11c2a98715) C:\Windows\system32\Drivers\ksecdd.sys
09:17:08.0492 2052 KSecDD - ok
09:17:08.0525 2052 ksthunk (1d419cf43db29396ecd7113d129d94eb) C:\Windows\system32\drivers\ksthunk.sys
09:17:08.0526 2052 ksthunk - ok
09:17:08.0544 2052 lltdio (96ece2659b6654c10a0c310ae3a6d02c) C:\Windows\system32\DRIVERS\lltdio.sys
09:17:08.0546 2052 lltdio - ok
09:17:08.0570 2052 LSI_FC (acbe1af32d3123e330a07bfbc5ec4a9b) C:\Windows\system32\drivers\lsi_fc.sys
09:17:08.0573 2052 LSI_FC - ok
09:17:08.0591 2052 LSI_SAS (799ffb2fc4729fa46d2157c0065b3525) C:\Windows\system32\drivers\lsi_sas.sys
09:17:08.0593 2052 LSI_SAS - ok
09:17:08.0611 2052 LSI_SCSI (f445ff1daad8a226366bfaf42551226b) C:\Windows\system32\drivers\lsi_scsi.sys
09:17:08.0613 2052 LSI_SCSI - ok
09:17:08.0639 2052 luafv (52f87b9cc8932c2a7375c3b2a9be5e3e) C:\Windows\system32\drivers\luafv.sys
09:17:08.0641 2052 luafv - ok
09:17:08.0672 2052 megasas (5c5cd6aaced32fb26c3fb34b3dcf972f) C:\Windows\system32\drivers\megasas.sys
09:17:08.0673 2052 megasas - ok
09:17:08.0707 2052 MegaSR (859bc2436b076c77c159ed694acfe8f8) C:\Windows\system32\drivers\megasr.sys
09:17:08.0714 2052 MegaSR - ok
09:17:08.0771 2052 Modem (59848d5cc74606f0ee7557983bb73c2e) C:\Windows\system32\drivers\modem.sys
09:17:08.0772 2052 Modem - ok
09:17:08.0803 2052 monitor (c247cc2a57e0a0c8c6dccf7807b3e9e5) C:\Windows\system32\DRIVERS\monitor.sys
09:17:08.0804 2052 monitor - ok
09:17:08.0815 2052 mouclass (9367304e5e412b120cf5f4ea14e4e4f1) C:\Windows\system32\DRIVERS\mouclass.sys
09:17:08.0816 2052 mouclass - ok
09:17:08.0847 2052 mouhid (c2c2bd5c5ce5aaf786ddd74b75d2ac69) C:\Windows\system32\DRIVERS\mouhid.sys
09:17:08.0848 2052 mouhid - ok
09:17:08.0864 2052 MountMgr (11bc9b1e8801b01f7f6adb9ead30019b) C:\Windows\system32\drivers\mountmgr.sys
09:17:08.0866 2052 MountMgr - ok
09:17:08.0887 2052 mpio (f8276eb8698142884498a528dfea8478) C:\Windows\system32\drivers\mpio.sys
09:17:08.0889 2052 mpio - ok
09:17:08.0915 2052 mpsdrv (c92b9abdb65a5991e00c28f13491dba2) C:\Windows\system32\drivers\mpsdrv.sys
09:17:08.0917 2052 mpsdrv - ok
09:17:08.0950 2052 Mraid35x (3c200630a89ef2c0864d515b7a75802e) C:\Windows\system32\drivers\mraid35x.sys
09:17:08.0952 2052 Mraid35x - ok
09:17:08.0995 2052 MRxDAV (7c1de4aa96dc0c071611f9e7de02a68d) C:\Windows\system32\drivers\mrxdav.sys
09:17:08.0998 2052 MRxDAV - ok
09:17:09.0032 2052 mrxsmb (1485811b320ff8c7edad1caebb1c6c2b) C:\Windows\system32\DRIVERS\mrxsmb.sys
09:17:09.0035 2052 mrxsmb - ok
09:17:09.0064 2052 mrxsmb10 (3b929a60c833fc615fd97fba82bc7632) C:\Windows\system32\DRIVERS\mrxsmb10.sys
09:17:09.0068 2052 mrxsmb10 - ok
09:17:09.0102 2052 mrxsmb20 (c64ab3e1f53b4f5b5bb6d796b2d7bec3) C:\Windows\system32\DRIVERS\mrxsmb20.sys
09:17:09.0103 2052 mrxsmb20 - ok
09:17:09.0172 2052 msahci (aa459f2ab3ab603c357ff117cae3d818) C:\Windows\system32\drivers\msahci.sys
09:17:09.0173 2052 msahci - ok
09:17:09.0201 2052 msdsm (264bbb4aaf312a485f0e44b65a6b7202) C:\Windows\system32\drivers\msdsm.sys
09:17:09.0203 2052 msdsm - ok
09:17:09.0249 2052 MSDV (df674ba7da5a4753d839a905b66d2fd9) C:\Windows\system32\DRIVERS\msdv.sys
09:17:09.0257 2052 MSDV - ok
09:17:09.0289 2052 Msfs (704f59bfc4512d2bb0146aec31b10a7c) C:\Windows\system32\drivers\Msfs.sys
09:17:09.0290 2052 Msfs - ok
09:17:09.0353 2052 msisadrv (00ebc952961664780d43dca157e79b27) C:\Windows\system32\drivers\msisadrv.sys
09:17:09.0354 2052 msisadrv - ok
09:17:09.0390 2052 MSKSSRV (0ea73e498f53b96d83dbfca074ad4cf8) C:\Windows\system32\drivers\MSKSSRV.sys
09:17:09.0391 2052 MSKSSRV - ok
09:17:09.0434 2052 MSPCLOCK (52e59b7e992a58e740aa63f57edbae8b) C:\Windows\system32\drivers\MSPCLOCK.sys
09:17:09.0435 2052 MSPCLOCK - ok
09:17:09.0501 2052 MSPQM (49084a75bae043ae02d5b44d02991bb2) C:\Windows\system32\drivers\MSPQM.sys
09:17:09.0502 2052 MSPQM - ok
09:17:09.0543 2052 MsRPC (dc6ccf440cdede4293db41c37a5060a5) C:\Windows\system32\drivers\MsRPC.sys
09:17:09.0548 2052 MsRPC - ok
09:17:09.0577 2052 mssmbios (855796e59df77ea93af46f20155bf55b) C:\Windows\system32\DRIVERS\mssmbios.sys
09:17:09.0578 2052 mssmbios - ok
09:17:09.0606 2052 MSTAPE (7d1f9672aa6d98d896fe22314442c36f) C:\Windows\system32\DRIVERS\mstape.sys
09:17:09.0608 2052 MSTAPE - ok
09:17:09.0639 2052 MSTEE (86d632d75d05d5b7c7c043fa3564ae86) C:\Windows\system32\drivers\MSTEE.sys
09:17:09.0652 2052 MSTEE - ok
09:17:09.0681 2052 Mup (0cc49f78d8aca0877d885f149084e543) C:\Windows\system32\Drivers\mup.sys
09:17:09.0682 2052 Mup - ok
09:17:09.0751 2052 NativeWifiP (2007b826c4acd94ae32232b41f0842b9) C:\Windows\system32\DRIVERS\nwifi.sys
09:17:09.0754 2052 NativeWifiP - ok
09:17:09.0971 2052 NAVENG (2dbe90210de76be6e1653bb20ec70ec2) C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.0.0.125\Definitions\VirusDefs\20111010.038\ENG64.SYS
09:17:09.0973 2052 NAVENG - ok
09:17:10.0034 2052 NAVEX15 (346da70e203b8e2c850277713de8f71b) C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.0.0.125\Definitions\VirusDefs\20111010.038\EX64.SYS
09:17:10.0058 2052 NAVEX15 - ok
09:17:10.0145 2052 NDIS (65950e07329fcee8e6516b17c8d0abb6) C:\Windows\system32\drivers\ndis.sys
09:17:10.0155 2052 NDIS - ok
09:17:10.0230 2052 NdisTapi (64df698a425478e321981431ac171334) C:\Windows\system32\DRIVERS\ndistapi.sys
09:17:10.0231 2052 NdisTapi - ok
09:17:10.0307 2052 Ndisuio (8baa43196d7b5bb972c9a6b2bbf61a19) C:\Windows\system32\DRIVERS\ndisuio.sys
09:17:10.0307 2052 Ndisuio - ok
09:17:10.0375 2052 NdisWan (f8158771905260982ce724076419ef19) C:\Windows\system32\DRIVERS\ndiswan.sys
09:17:10.0378 2052 NdisWan - ok
09:17:10.0405 2052 NDProxy (9cb77ed7cb72850253e973a2d6afdf49) C:\Windows\system32\drivers\NDProxy.sys
09:17:10.0407 2052 NDProxy - ok
09:17:10.0427 2052 NetBIOS (a499294f5029a7862adc115bda7371ce) C:\Windows\system32\DRIVERS\netbios.sys
09:17:10.0428 2052 NetBIOS - ok
09:17:10.0462 2052 netbt (fc2c792ebddc8e28df939d6a92c83d61) C:\Windows\system32\DRIVERS\netbt.sys
09:17:10.0466 2052 netbt - ok
09:17:10.0495 2052 nfrd960 (4ac08bd6af2df42e0c3196d826c8aea7) C:\Windows\system32\drivers\nfrd960.sys
09:17:10.0497 2052 nfrd960 - ok
09:17:10.0536 2052 Npfs (b298874f8e0ea93f06ec40aa8d146478) C:\Windows\system32\drivers\Npfs.sys
09:17:10.0537 2052 Npfs - ok
09:17:10.0558 2052 nsiproxy (1523af19ee8b030ba682f7a53537eaeb) C:\Windows\system32\drivers\nsiproxy.sys
09:17:10.0559 2052 nsiproxy - ok
09:17:10.0625 2052 Ntfs (bac869dfb98e499ba4d9bb1fb43270e1) C:\Windows\system32\drivers\Ntfs.sys
09:17:10.0659 2052 Ntfs - ok
09:17:10.0676 2052 Null (dd5d684975352b85b52e3fd5347c20cb) C:\Windows\system32\drivers\Null.sys
09:17:10.0676 2052 Null - ok
09:17:10.0705 2052 nvraid (2c040b7ada5b06f6facadac8514aa034) C:\Windows\system32\drivers\nvraid.sys
09:17:10.0708 2052 nvraid - ok
09:17:10.0735 2052 nvstor (f7ea0fe82842d05eda3efdd376dbfdba) C:\Windows\system32\drivers\nvstor.sys
09:17:10.0736 2052 nvstor - ok
09:17:10.0764 2052 nv_agp (19067ca93075ef4823e3938a686f532f) C:\Windows\system32\drivers\nv_agp.sys
09:17:10.0765 2052 nv_agp - ok
09:17:10.0773 2052 NwlnkFlt - ok
09:17:10.0782 2052 NwlnkFwd - ok
09:17:10.0815 2052 ohci1394 (b5b1ce65ac15bbd11c0619e3ef7cfc28) C:\Windows\system32\DRIVERS\ohci1394.sys
09:17:10.0816 2052 ohci1394 - ok
09:17:10.0856 2052 Parport (aecd57f94c887f58919f307c35498ea0) C:\Windows\system32\drivers\parport.sys
09:17:10.0858 2052 Parport - ok
09:17:10.0889 2052 partmgr (f9b5eda4c17a2be7663f064dbf0fe254) C:\Windows\system32\drivers\partmgr.sys
09:17:10.0890 2052 partmgr - ok
09:17:10.0923 2052 pci (47ab1e0fc9d0e12bb53ba246e3a0906d) C:\Windows\system32\drivers\pci.sys
09:17:10.0925 2052 pci - ok
09:17:10.0993 2052 pciide (8d618c829034479985a9ed56106cc732) C:\Windows\system32\drivers\pciide.sys
09:17:10.0994 2052 pciide - ok
09:17:11.0018 2052 pcmcia (037661f3d7c507c9993b7010ceee6288) C:\Windows\system32\drivers\pcmcia.sys
09:17:11.0022 2052 pcmcia - ok
09:17:11.0051 2052 pcouffin (af7ce12c4f3dc8cb2b07685c916bbcfe) C:\Windows\system32\Drivers\pcouffin.sys
09:17:11.0053 2052 pcouffin - ok
09:17:11.0080 2052 PEAUTH (58865916f53592a61549b04941bfd80d) C:\Windows\system32\drivers\peauth.sys
09:17:11.0089 2052 PEAUTH - ok
09:17:11.0181 2052 PptpMiniport (23386e9952025f5f21c368971e2e7301) C:\Windows\system32\DRIVERS\raspptp.sys
09:17:11.0182 2052 PptpMiniport - ok
09:17:11.0209 2052 Processor (5080e59ecee0bc923f14018803aa7a01) C:\Windows\system32\drivers\processr.sys
09:17:11.0210 2052 Processor - ok
09:17:11.0251 2052 PSched (c5ab7f0809392d0da027f4a2a81bfa31) C:\Windows\system32\DRIVERS\pacer.sys
09:17:11.0258 2052 PSched - ok
09:17:11.0359 2052 PxHlpa64 (901dba98359966a62a6548596988e931) C:\Windows\system32\Drivers\PxHlpa64.sys
09:17:11.0361 2052 PxHlpa64 - ok
09:17:11.0403 2052 ql2300 (0b83f4e681062f3839be2ec1d98fd94a) C:\Windows\system32\drivers\ql2300.sys
09:17:11.0419 2052 ql2300 - ok
09:17:11.0442 2052 ql40xx (e1c80f8d4d1e39ef9595809c1369bf2a) C:\Windows\system32\drivers\ql40xx.sys
09:17:11.0445 2052 ql40xx - ok
09:17:11.0489 2052 QWAVEdrv (e8d76edab77ec9c634c27b8eac33adc5) C:\Windows\system32\drivers\qwavedrv.sys
09:17:11.0490 2052 QWAVEdrv - ok
09:17:11.0508 2052 RasAcd (1013b3b663a56d3ddd784f581c1bd005) C:\Windows\system32\DRIVERS\rasacd.sys
09:17:11.0509 2052 RasAcd - ok
09:17:11.0552 2052 Rasl2tp (ac7bc4d42a7e558718dfdec599bbfc2c) C:\Windows\system32\DRIVERS\rasl2tp.sys
09:17:11.0554 2052 Rasl2tp - ok
09:17:11.0598 2052 RasPppoe (4517fbf8b42524afe4ede1de102aae3e) C:\Windows\system32\DRIVERS\raspppoe.sys
09:17:11.0599 2052 RasPppoe - ok
09:17:11.0643 2052 RasSstp (c6a593b51f34c33e5474539544072527) C:\Windows\system32\DRIVERS\rassstp.sys
09:17:11.0661 2052 RasSstp - ok
09:17:11.0714 2052 rdbss (322db5c6b55e8d8ee8d6f358b2aaabb1) C:\Windows\system32\DRIVERS\rdbss.sys
09:17:11.0719 2052 rdbss - ok
09:17:11.0733 2052 RDPCDD (603900cc05f6be65ccbf373800af3716) C:\Windows\system32\DRIVERS\RDPCDD.sys
09:17:11.0734 2052 RDPCDD - ok
09:17:11.0800 2052 rdpdr (c045d1fb111c28df0d1be8d4bda22c06) C:\Windows\system32\drivers\rdpdr.sys
09:17:11.0804 2052 rdpdr - ok
09:17:11.0812 2052 RDPENCDD (cab9421daf3d97b33d0d055858e2c3ab) C:\Windows\system32\drivers\rdpencdd.sys
09:17:11.0813 2052 RDPENCDD - ok
09:17:11.0841 2052 RDPWD (b1d741c87cea8d7282146366cc9c3f81) C:\Windows\system32\drivers\RDPWD.sys
09:17:11.0845 2052 RDPWD - ok
09:17:11.0894 2052 rspndr (22a9cb08b1a6707c1550c6bf099aae73) C:\Windows\system32\DRIVERS\rspndr.sys
09:17:11.0895 2052 rspndr - ok
09:17:11.0962 2052 RSUSBSTOR (1807ea271c9685a25571d94ae4e3a8dd) C:\Windows\system32\Drivers\RTS5121.sys
09:17:11.0964 2052 RSUSBSTOR - ok
09:17:12.0032 2052 RTHDMIAzAudService (f8da8fc39ce5859c0d8c0fe6524ce465) C:\Windows\system32\drivers\RtHDMIVX.sys
09:17:12.0033 2052 RTHDMIAzAudService - ok
09:17:12.0083 2052 RTL8187Se (462308d94e4e3318503267991b0cdc7f) C:\Windows\system32\DRIVERS\RTL8187Se.sys
09:17:12.0088 2052 RTL8187Se - ok
09:17:12.0095 2052 Rts516xIR - ok
09:17:12.0127 2052 sbp2port (cd9c693589c60ad59bbbcfb0e524e01b) C:\Windows\system32\drivers\sbp2port.sys
09:17:12.0129 2052 sbp2port - ok
09:17:12.0158 2052 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys
09:17:12.0159 2052 secdrv - ok
09:17:12.0170 2052 Serenum (2449316316411d65bd2c761a6ffb2ce2) C:\Windows\system32\DRIVERS\serenum.sys
09:17:12.0170 2052 Serenum - ok
09:17:12.0188 2052 Serial (4b438170be2fc8e0bd35ee87a960f84f) C:\Windows\system32\DRIVERS\serial.sys
09:17:12.0190 2052 Serial - ok
09:17:12.0215 2052 sermouse (a842f04833684bceea7336211be478df) C:\Windows\system32\drivers\sermouse.sys
09:17:12.0216 2052 sermouse - ok
09:17:12.0295 2052 sffdisk (14d4b4465193a87c127933978e8c4106) C:\Windows\system32\drivers\sffdisk.sys
09:17:12.0296 2052 sffdisk - ok
09:17:12.0317 2052 sffp_mmc (7073aee3f82f3d598e3825962aa98ab2) C:\Windows\system32\drivers\sffp_mmc.sys
09:17:12.0318 2052 sffp_mmc - ok
09:17:12.0349 2052 sffp_sd (35e59ebe4a01a0532ed67975161c7b82) C:\Windows\system32\drivers\sffp_sd.sys
09:17:12.0351 2052 sffp_sd - ok
09:17:12.0377 2052 sfloppy (6b7838c94135768bd455cbdc23e39e5f) C:\Windows\system32\drivers\sfloppy.sys
09:17:12.0378 2052 sfloppy - ok
09:17:12.0395 2052 SiSRaid2 (7a5de502aeb719d4594c6471060a78b3) C:\Windows\system32\drivers\sisraid2.sys
09:17:12.0396 2052 SiSRaid2 - ok
09:17:12.0428 2052 SiSRaid4 (3a2f769fab9582bc720e11ea1dfb184d) C:\Windows\system32\drivers\sisraid4.sys
09:17:12.0430 2052 SiSRaid4 - ok
09:17:12.0498 2052 Smb (290b6f6a0ec4fcdfc90f5cb6d7020473) C:\Windows\system32\DRIVERS\smb.sys
09:17:12.0499 2052 Smb - ok
09:17:12.0543 2052 spldr (386c3c63f00a7040c7ec5e384217e89d) C:\Windows\system32\drivers\spldr.sys
09:17:12.0546 2052 spldr - ok
09:17:12.0728 2052 SRTSP (90ef30c3867bcde4579c01a6d6e75a7a) C:\Windows\System32\Drivers\N360x64\0501000.01D\SRTSP64.SYS
09:17:12.0732 2052 SRTSP - ok
09:17:12.0780 2052 SRTSPX (c513e8a5e7978da49077f5484344ee1b) C:\Windows\system32\drivers\N360x64\0501000.01D\SRTSPX64.SYS
09:17:12.0780 2052 SRTSPX - ok
09:17:12.0840 2052 srv (880a57fccb571ebd063d4dd50e93e46d) C:\Windows\system32\DRIVERS\srv.sys
09:17:12.0846 2052 srv - ok
09:17:12.0901 2052 srv2 (a1ad14a6d7a37891fffeca35ebbb0730) C:\Windows\system32\DRIVERS\srv2.sys
09:17:12.0904 2052 srv2 - ok
09:17:12.0961 2052 srvnet (4bed62f4fa4d8300973f1151f4c4d8a7) C:\Windows\system32\DRIVERS\srvnet.sys
09:17:12.0964 2052 srvnet - ok
09:17:13.0004 2052 swenum (8a851ca908b8b974f89c50d2e18d4f0c) C:\Windows\system32\DRIVERS\swenum.sys
09:17:13.0005 2052 swenum - ok
09:17:13.0024 2052 Symc8xx (2f26a2c6fc96b29beff5d8ed74e6625b) C:\Windows\system32\drivers\symc8xx.sys
09:17:13.0026 2052 Symc8xx - ok
09:17:13.0075 2052 SymDS (6160145c7a87fc7672e8e3b886888176) C:\Windows\system32\drivers\N360x64\0501000.01D\SYMDS64.SYS
09:17:13.0081 2052 SymDS - ok
09:17:13.0117 2052 SymEFA (96aeed40d4d3521568b42027687e69e0) C:\Windows\system32\drivers\N360x64\0501000.01D\SYMEFA64.SYS
09:17:13.0129 2052 SymEFA - ok
09:17:13.0168 2052 SymEvent (21a1c2d694c3cf962d31f5e873ab3d6f) C:\Windows\system32\Drivers\SYMEVENT64x86.SYS
09:17:13.0169 2052 SymEvent - ok
09:17:13.0197 2052 SymIRON (bd0d711d8cbfcaa19ca123306eaf53a5) C:\Windows\system32\drivers\N360x64\0501000.01D\Ironx64.SYS
09:17:13.0198 2052 SymIRON - ok
09:17:13.0247 2052 SYMTDIv (6cb70a5d30e4322bab4ad52866b0a4b8) C:\Windows\System32\Drivers\N360x64\0501000.01D\SYMTDIV.SYS
09:17:13.0250 2052 SYMTDIv - ok
09:17:13.0317 2052 Sym_hi (a909667976d3bccd1df813fed517d837) C:\Windows\system32\drivers\sym_hi.sys
09:17:13.0319 2052 Sym_hi - ok
09:17:13.0361 2052 Sym_u3 (36887b56ec2d98b9c362f6ae4de5b7b0) C:\Windows\system32\drivers\sym_u3.sys
09:17:13.0363 2052 Sym_u3 - ok
09:17:13.0452 2052 Tcpip (4dad14118fbcf7c609f2a4ce21fbcc5f) C:\Windows\system32\drivers\tcpip.sys
09:17:13.0470 2052 Tcpip - ok
09:17:13.0535 2052 Tcpip6 (4dad14118fbcf7c609f2a4ce21fbcc5f) C:\Windows\system32\DRIVERS\tcpip.sys
09:17:13.0542 2052 Tcpip6 - ok
09:17:13.0580 2052 tcpipreg (c7e72a4071ee0200e3c075dacfb2b334) C:\Windows\system32\drivers\tcpipreg.sys
09:17:13.0581 2052 tcpipreg - ok
09:17:13.0602 2052 TDPIPE (1d8bf4aaa5fb7a2761475781dc1195bc) C:\Windows\system32\drivers\tdpipe.sys
09:17:13.0603 2052 TDPIPE - ok
09:17:13.0630 2052 TDTCP (7f7e00cdf609df657f4cda02dd1c9bb1) C:\Windows\system32\drivers\tdtcp.sys
09:17:13.0643 2052 TDTCP - ok
09:17:13.0709 2052 tdx (458919c8c42e398dc4802178d5ffee27) C:\Windows\system32\DRIVERS\tdx.sys
09:17:13.0711 2052 tdx - ok
09:17:13.0754 2052 TermDD (8c19678d22649ec002ef2282eae92f98) C:\Windows\system32\DRIVERS\termdd.sys
09:17:13.0755 2052 TermDD - ok
09:17:13.0782 2052 tssecsrv (9e5409cd17c8bef193aad498f3bc2cb8) C:\Windows\system32\DRIVERS\tssecsrv.sys
09:17:13.0783 2052 tssecsrv - ok
09:17:13.0843 2052 tunmp (89ec74a9e602d16a75a4170511029b3c) C:\Windows\system32\DRIVERS\tunmp.sys
09:17:13.0844 2052 tunmp - ok
09:17:13.0881 2052 tunnel (30a9b3f45ad081bffc3bcaa9c812b609) C:\Windows\system32\DRIVERS\tunnel.sys
09:17:13.0881 2052 tunnel - ok
09:17:13.0903 2052 uagp35 (fec266ef401966311744bd0f359f7f56) C:\Windows\system32\drivers\uagp35.sys
09:17:13.0904 2052 uagp35 - ok
09:17:13.0950 2052 udfs (faf2640a2a76ed03d449e443194c4c34) C:\Windows\system32\DRIVERS\udfs.sys
09:17:13.0955 2052 udfs - ok
09:17:13.0985 2052 uliagpkx (4ec9447ac3ab462647f60e547208ca00) C:\Windows\system32\drivers\uliagpkx.sys
09:17:13.0987 2052 uliagpkx - ok
09:17:14.0014 2052 uliahci (697f0446134cdc8f99e69306184fbbb4) C:\Windows\system32\drivers\uliahci.sys
09:17:14.0019 2052 uliahci - ok
09:17:14.0042 2052 UlSata (31707f09846056651ea2c37858f5ddb0) C:\Windows\system32\drivers\ulsata.sys
09:17:14.0045 2052 UlSata - ok
09:17:14.0063 2052 ulsata2 (85e5e43ed5b48c8376281bab519271b7) C:\Windows\system32\drivers\ulsata2.sys
09:17:14.0066 2052 ulsata2 - ok
09:17:14.0087 2052 umbus (46e9a994c4fed537dd951f60b86ad3f4) C:\Windows\system32\DRIVERS\umbus.sys
09:17:14.0088 2052 umbus - ok
09:17:14.0113 2052 usbccgp (07e3498fc60834219d2356293da0fecc) C:\Windows\system32\DRIVERS\usbccgp.sys
09:17:14.0115 2052 usbccgp - ok
09:17:14.0123 2052 USBCCID - ok
09:17:14.0155 2052 usbcir (8c39d53e1a343f4c47ee8f3c052126d8) C:\Windows\system32\DRIVERS\usbcir.sys
09:17:14.0157 2052 usbcir - ok
09:17:14.0212 2052 usbehci (827e44de934a736ea31e91d353eb126f) C:\Windows\system32\DRIVERS\usbehci.sys
09:17:14.0213 2052 usbehci - ok
09:17:14.0259 2052 usbhub (bb35cd80a2ececfadc73569b3d70c7d1) C:\Windows\system32\DRIVERS\usbhub.sys
09:17:14.0264 2052 usbhub - ok
09:17:14.0297 2052 usbohci (eba14ef0c07cec233f1529c698d0d154) C:\Windows\system32\drivers\usbohci.sys
09:17:14.0298 2052 usbohci - ok
09:17:14.0369 2052 usbprint (28b693b6d31e7b9332c1bdcefef228c1) C:\Windows\system32\DRIVERS\usbprint.sys
09:17:14.0370 2052 usbprint - ok
09:17:14.0412 2052 USBSTOR (b854c1558fca0c269a38663e8b59b581) C:\Windows\system32\DRIVERS\USBSTOR.SYS
09:17:14.0414 2052 USBSTOR - ok
09:17:14.0452 2052 usbuhci (b2872cbf9f47316abd0e0c74a1aba507) C:\Windows\system32\DRIVERS\usbuhci.sys
09:17:14.0453 2052 usbuhci - ok
09:17:14.0504 2052 vga (916b94bcf1e09873fff2d5fb11767bbc) C:\Windows\system32\DRIVERS\vgapnp.sys
09:17:14.0505 2052 vga - ok
09:17:14.0528 2052 VgaSave (b83ab16b51feda65dd81b8c59d114d63) C:\Windows\System32\drivers\vga.sys
09:17:14.0529 2052 VgaSave - ok
09:17:14.0546 2052 viaide (8294b6c3fdb6c33f24e150de647ecdaa) C:\Windows\system32\drivers\viaide.sys
09:17:14.0546 2052 viaide - ok
09:17:14.0581 2052 volmgr (2b7e885ed951519a12c450d24535dfca) C:\Windows\system32\drivers\volmgr.sys
09:17:14.0582 2052 volmgr - ok
09:17:14.0628 2052 volmgrx (cec5ac15277d75d9e5dec2e1c6eaf877) C:\Windows\system32\drivers\volmgrx.sys
09:17:14.0657 2052 volmgrx - ok
09:17:14.0689 2052 volsnap (5280aada24ab36b01a84a6424c475c8d) C:\Windows\system32\drivers\volsnap.sys
09:17:14.0693 2052 volsnap - ok
09:17:14.0723 2052 vsmraid (a68f455ed2673835209318dd61bfbb0e) C:\Windows\system32\drivers\vsmraid.sys
09:17:14.0727 2052 vsmraid - ok
09:17:14.0754 2052 WacomPen (fef8fe5923fead2cee4dfabfce3393a7) C:\Windows\system32\drivers\wacompen.sys
09:17:14.0755 2052 WacomPen - ok
09:17:14.0800 2052 Wanarp (b8e7049622300d20ba6d8be0c47c0cfd) C:\Windows\system32\DRIVERS\wanarp.sys
09:17:14.0802 2052 Wanarp - ok
09:17:14.0806 2052 Wanarpv6 (b8e7049622300d20ba6d8be0c47c0cfd) C:\Windows\system32\DRIVERS\wanarp.sys
09:17:14.0806 2052 Wanarpv6 - ok
09:17:14.0836 2052 Wd (0c17a0816f65b89e362e682ad5e7266e) C:\Windows\system32\drivers\wd.sys
09:17:14.0837 2052 Wd - ok
09:17:14.0876 2052 Wdf01000 (d02e7e4567da1e7582fbf6a91144b0df) C:\Windows\system32\drivers\Wdf01000.sys
09:17:14.0887 2052 Wdf01000 - ok
09:17:14.0942 2052 WmiAcpi (e18aebaaa5a773fe11aa2c70f65320f5) C:\Windows\system32\DRIVERS\wmiacpi.sys
09:17:14.0942 2052 WmiAcpi - ok
09:17:14.0981 2052 WpdUsb (5e2401b3fc1089c90e081291357371a9) C:\Windows\system32\DRIVERS\wpdusb.sys
09:17:14.0982 2052 WpdUsb - ok
09:17:15.0023 2052 ws2ifsl (8a900348370e359b6bff6a550e4649e1) C:\Windows\system32\drivers\ws2ifsl.sys
09:17:15.0024 2052 ws2ifsl - ok
09:17:15.0124 2052 WUDFRd (501a65252617b495c0f1832f908d54d8) C:\Windows\system32\DRIVERS\WUDFRd.sys
09:17:15.0126 2052 WUDFRd - ok
09:17:15.0216 2052 {95808DC4-FA4A-4C74-92FE-5B863F82066B} (74983addca2d9618512c088d856d6615) C:\Program Files (x86)\CyberLink\PowerDVD\000.fcl
09:17:15.0218 2052 {95808DC4-FA4A-4C74-92FE-5B863F82066B} - ok
09:17:15.0221 2052 MBR (0x1B8) (7557511a3531e58059c29908427f69a5) \Device\Harddisk0\DR0
09:17:15.0222 2052 \Device\Harddisk0\DR0 ( Rootkit.Win32.TDSS.tdl4 ) - infected
09:17:15.0222 2052 \Device\Harddisk0\DR0 - detected Rootkit.Win32.TDSS.tdl4 (0)
09:17:15.0234 2052 Boot (0x1200) (818f2330ebc30d89cf751151749e0e67) \Device\Harddisk0\DR0\Partition0
09:17:15.0235 2052 \Device\Harddisk0\DR0\Partition0 - ok
09:17:15.0235 2052 ============================================================
09:17:15.0235 2052 Scan finished
09:17:15.0235 2052 ============================================================
09:17:15.0246 4040 Detected object count: 1
09:17:15.0246 4040 Actual detected object count: 1
09:19:10.0479 4040 \Device\Harddisk0\DR0 ( Rootkit.Win32.TDSS.tdl4 ) - will be cured on reboot
09:19:10.0480 4040 \Device\Harddisk0\DR0 - ok
09:19:10.0481 4040 \Device\Harddisk0\DR0 ( Rootkit.Win32.TDSS.tdl4 ) - User select action: Cure
09:19:15.0753 4620 Deinitialize success

This is the second log ran after the first removal.

11:24:24.0481 4184 TDSS rootkit removing tool 2.6.7.0 Oct 10 2011 09:40:06
11:24:24.0942 4184 ============================================================
11:24:24.0942 4184 Current date / time: 2011/10/11 11:24:24.0942
11:24:24.0942 4184 SystemInfo:
11:24:24.0942 4184
11:24:24.0942 4184 OS Version: 6.0.6002 ServicePack: 2.0
11:24:24.0942 4184 Product type: Workstation
11:24:24.0942 4184 ComputerName: OWNER-PC
11:24:24.0942 4184 UserName: Owner
11:24:24.0942 4184 Windows directory: C:\Windows
11:24:24.0942 4184 System windows directory: C:\Windows
11:24:24.0942 4184 Running under WOW64
11:24:24.0942 4184 Processor architecture: Intel x64
11:24:24.0942 4184 Number of processors: 8
11:24:24.0942 4184 Page size: 0x1000
11:24:24.0942 4184 Boot type: Normal boot
11:24:24.0942 4184 ============================================================
11:24:25.0408 4184 Initialize success
11:24:27.0687 4284 ============================================================
11:24:27.0687 4284 Scan started
11:24:27.0687 4284 Mode: Manual;
11:24:27.0687 4284 ============================================================
11:24:28.0116 4284 61883 (78e902fb660bd5003fe726b9bef300b6) C:\Windows\system32\DRIVERS\61883.sys
11:24:28.0117 4284 61883 - ok
11:24:28.0162 4284 ACPI (1965aaffab07e3fb03c77f81beba3547) C:\Windows\system32\drivers\acpi.sys
11:24:28.0163 4284 ACPI - ok
11:24:28.0246 4284 adp94xx (f14215e37cf124104575073f782111d2) C:\Windows\system32\drivers\adp94xx.sys
11:24:28.0248 4284 adp94xx - ok
11:24:28.0310 4284 adpahci (7d05a75e3066861a6610f7ee04ff085c) C:\Windows\system32\drivers\adpahci.sys
11:24:28.0311 4284 adpahci - ok
11:24:28.0341 4284 adpu160m (820a201fe08a0c345b3bedbc30e1a77c) C:\Windows\system32\drivers\adpu160m.sys
11:24:28.0342 4284 adpu160m - ok
11:24:28.0375 4284 adpu320 (9b4ab6854559dc168fbb4c24fc52e794) C:\Windows\system32\drivers\adpu320.sys
11:24:28.0376 4284 adpu320 - ok
11:24:28.0501 4284 AFD (0cc146c4addea45791b18b1e2659f4a9) C:\Windows\system32\drivers\afd.sys
11:24:28.0503 4284 AFD - ok
11:24:28.0601 4284 AgereSoftModem (385471f8147e1bd6a08c031e3aad3910) C:\Windows\system32\DRIVERS\agrsm64.sys
11:24:28.0609 4284 AgereSoftModem - ok
11:24:28.0682 4284 agp440 (f6f6793b7f17b550ecfdbd3b229173f7) C:\Windows\system32\drivers\agp440.sys
11:24:28.0682 4284 agp440 - ok
11:24:28.0725 4284 aic78xx (222cb641b4b8a1d1126f8033f9fd6a00) C:\Windows\system32\drivers\djsvs.sys
11:24:28.0725 4284 aic78xx - ok
11:24:28.0826 4284 aliide (157d0898d4b73f075ce9fa26b482df98) C:\Windows\system32\drivers\aliide.sys
11:24:28.0826 4284 aliide - ok
11:24:28.0892 4284 amdide (970fa5059e61e30d25307b99903e991e) C:\Windows\system32\drivers\amdide.sys
11:24:28.0892 4284 amdide - ok
11:24:28.0929 4284 AmdK8 (cdc3632a3a5ea4dbb83e46076a3165a1) C:\Windows\system32\drivers\amdk8.sys
11:24:28.0930 4284 AmdK8 - ok
11:24:29.0017 4284 arc (ba8417d4765f3988ff921f30f630e303) C:\Windows\system32\drivers\arc.sys
11:24:29.0018 4284 arc - ok
11:24:29.0078 4284 arcsas (9d41c435619733b34cc16a511e644b11) C:\Windows\system32\drivers\arcsas.sys
11:24:29.0079 4284 arcsas - ok
11:24:29.0171 4284 AsyncMac (22d13ff3dafec2a80634752b1eaa2de6) C:\Windows\system32\DRIVERS\asyncmac.sys
11:24:29.0172 4284 AsyncMac - ok
11:24:29.0198 4284 atapi (e68d9b3a3905619732f7fe039466a623) C:\Windows\system32\drivers\atapi.sys
11:24:29.0199 4284 atapi - ok
11:24:29.0347 4284 atikmdag (0adc170bcac8260539df29032a2e9d8d) C:\Windows\system32\DRIVERS\atikmdag.sys
11:24:29.0390 4284 atikmdag - ok
11:24:29.0464 4284 Avc (295fa2878ff499c0edfa0ebcc8c6ec66) C:\Windows\system32\DRIVERS\avc.sys
11:24:29.0465 4284 Avc - ok
11:24:29.0501 4284 AVCSTRM (044320c8073293e02d000671e1e7a592) C:\Windows\system32\DRIVERS\avcstrm.sys
11:24:29.0502 4284 AVCSTRM - ok
11:24:29.0511 4284 Beep - ok
11:24:30.0019 4284 BHDrvx64 (9e064b36ac74fb81ad04e0074c17b6be) C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.0.0.125\Definitions\BASHDefs\20110929.001\BHDrvx64.sys
11:24:30.0025 4284 BHDrvx64 - ok
11:24:30.0114 4284 blbdrive (79feeb40056683f8f61398d81dda65d2) C:\Windows\system32\drivers\blbdrive.sys
11:24:30.0115 4284 blbdrive - ok
11:24:30.0164 4284 bowser (2348447a80920b2493a9b582a23e81e1) C:\Windows\system32\DRIVERS\bowser.sys
11:24:30.0164 4284 bowser - ok
11:24:30.0227 4284 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\drivers\brfiltlo.sys
11:24:30.0228 4284 BrFiltLo - ok
11:24:30.0272 4284 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\drivers\brfiltup.sys
11:24:30.0272 4284 BrFiltUp - ok
11:24:30.0332 4284 Brserid (f0f0ba4d815be446aa6a4583ca3bca9b) C:\Windows\system32\drivers\brserid.sys
11:24:30.0333 4284 Brserid - ok
11:24:30.0373 4284 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\system32\drivers\brserwdm.sys
11:24:30.0374 4284 BrSerWdm - ok
11:24:30.0418 4284 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\system32\drivers\brusbmdm.sys
11:24:30.0418 4284 BrUsbMdm - ok
11:24:30.0457 4284 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\system32\drivers\brusbser.sys
11:24:30.0457 4284 BrUsbSer - ok
11:24:30.0487 4284 BTHMODEM (e0777b34e05f8a82a21856efc900c29f) C:\Windows\system32\drivers\bthmodem.sys
11:24:30.0488 4284 BTHMODEM - ok
11:24:30.0512 4284 catchme - ok
11:24:30.0549 4284 cdfs (b4d787db8d30793a4d4df9feed18f136) C:\Windows\system32\DRIVERS\cdfs.sys
11:24:30.0550 4284 cdfs - ok
11:24:30.0612 4284 cdrom (c025aa69be3d0d25c7a2e746ef6f94fc) C:\Windows\system32\DRIVERS\cdrom.sys
11:24:30.0613 4284 cdrom - ok
11:24:30.0682 4284 circlass (02ea568d498bbdd4ba55bf3fce34d456) C:\Windows\system32\DRIVERS\circlass.sys
11:24:30.0682 4284 circlass - ok
11:24:30.0762 4284 CLBStor (fe9e7b984796a2d2198abb04910d16ad) C:\Windows\system32\DRIVERS\CLBStor.sys
11:24:30.0763 4284 CLBStor - ok
11:24:30.0805 4284 CLBUDF (f9693138bacdfa4513a7f464bd6663fd) C:\Windows\system32\DRIVERS\CLBUDF.sys
11:24:30.0807 4284 CLBUDF - ok
11:24:30.0846 4284 CLFS (3dca9a18b204939cfb24bea53e31eb48) C:\Windows\system32\CLFS.sys
11:24:30.0848 4284 CLFS - ok
11:24:30.0917 4284 cmdide (e5d5499a1c50a54b5161296b6afe6192) C:\Windows\system32\drivers\cmdide.sys
11:24:30.0917 4284 cmdide - ok
11:24:30.0968 4284 Compbatt (7fb8ad01db0eabe60c8a861531a8f431) C:\Windows\system32\drivers\compbatt.sys
11:24:30.0968 4284 Compbatt - ok
11:24:31.0044 4284 crcdisk (a8585b6412253803ce8efcbd6d6dc15c) C:\Windows\system32\drivers\crcdisk.sys
11:24:31.0045 4284 crcdisk - ok
11:24:31.0116 4284 DfsC (8b722ba35205c71e7951cdc4cdbade19) C:\Windows\system32\Drivers\dfsc.sys
11:24:31.0118 4284 DfsC - ok
11:24:31.0207 4284 disk (b0107e40ecdb5fa692ebf832f295d905) C:\Windows\system32\drivers\disk.sys
11:24:31.0208 4284 disk - ok
11:24:31.0299 4284 drmkaud (f1a78a98cfc2ee02144c6bec945447e6) C:\Windows\system32\drivers\drmkaud.sys
11:24:31.0299 4284 drmkaud - ok
11:24:31.0369 4284 DXGKrnl (b8e554e502d5123bc111f99d6a2181b4) C:\Windows\System32\drivers\dxgkrnl.sys
11:24:31.0373 4284 DXGKrnl - ok
11:24:31.0399 4284 E1G60 (264cee7b031a9d6c827f3d0cb031f2fe) C:\Windows\system32\DRIVERS\E1G6032E.sys
11:24:31.0400 4284 E1G60 - ok
11:24:31.0463 4284 e1yexpress (b37f6853d6e0c6f5f8efde33e831b5f8) C:\Windows\system32\DRIVERS\e1y60x64.sys
11:24:31.0465 4284 e1yexpress - ok
11:24:31.0506 4284 Ecache (5f94962be5a62db6e447ff6470c4f48a) C:\Windows\system32\drivers\ecache.sys
11:24:31.0507 4284 Ecache - ok
11:24:31.0609 4284 eeCtrl (5e3a50930447f464c66032e05a4632f5) C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys
11:24:31.0611 4284 eeCtrl - ok
11:24:31.0634 4284 elxstor (c4636d6e10469404ab5308d9fd45ed07) C:\Windows\system32\drivers\elxstor.sys
11:24:31.0635 4284 elxstor - ok
11:24:31.0697 4284 EraserUtilRebootDrv (dcb76ecc6b50a266fdc16e1963ab98ce) C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys
11:24:31.0698 4284 EraserUtilRebootDrv - ok
11:24:31.0717 4284 ErrDev (bc3a58e938bb277e46bf4b3003b01abd) C:\Windows\system32\drivers\errdev.sys
11:24:31.0717 4284 ErrDev - ok
11:24:31.0766 4284 exfat (486844f47b6636044a42454614ed4523) C:\Windows\system32\drivers\exfat.sys
11:24:31.0767 4284 exfat - ok
11:24:31.0849 4284 fastfat (1a4bee34277784619ddaf0422c0c6e23) C:\Windows\system32\drivers\fastfat.sys
11:24:31.0850 4284 fastfat - ok
11:24:31.0885 4284 fdc (81b79b6df71fa1d2c6d688d830616e39) C:\Windows\system32\DRIVERS\fdc.sys
11:24:31.0886 4284 fdc - ok
11:24:31.0909 4284 FileInfo (457b7d1d533e4bd62a99aed9c7bb4c59) C:\Windows\system32\drivers\fileinfo.sys
11:24:31.0909 4284 FileInfo - ok
11:24:31.0936 4284 Filetrace (d421327fd6efccaf884a54c58e1b0d7f) C:\Windows\system32\drivers\filetrace.sys
11:24:31.0936 4284 Filetrace - ok
11:24:31.0962 4284 flpydisk (230923ea2b80f79b0f88d90f87b87ebd) C:\Windows\system32\DRIVERS\flpydisk.sys
11:24:31.0962 4284 flpydisk - ok
11:24:31.0997 4284 FltMgr (e3041bc26d6930d61f42aedb79c91720) C:\Windows\system32\drivers\fltmgr.sys
11:24:31.0998 4284 FltMgr - ok
11:24:32.0062 4284 Fs_Rec (29d99e860a1ca0a03c6a733fdd0da703) C:\Windows\system32\drivers\Fs_Rec.sys
11:24:32.0062 4284 Fs_Rec - ok
11:24:32.0092 4284 gagp30kx (c8e416668d3dc2be3d4fe4c79224997f) C:\Windows\system32\drivers\gagp30kx.sys
11:24:32.0092 4284 gagp30kx - ok
11:24:32.0137 4284 GEARAspiWDM (e403aacf8c7bb11375122d2464560311) C:\Windows\system32\Drivers\GEARAspiWDM.sys
11:24:32.0137 4284 GEARAspiWDM - ok
11:24:32.0181 4284 GIDv2 (9ba22aee7f531ef9ce085cc2e1112bc4) C:\Windows\system32\drivers\GIDv2.sys
11:24:32.0182 4284 GIDv2 - ok
11:24:32.0243 4284 gwfilt64 (5e114600f350f3bee3f92516e51144f1) C:\Windows\system32\drivers\gwfilt64.sys
11:24:32.0243 4284 gwfilt64 - ok
11:24:32.0309 4284 HdAudAddService (df45f8142dc6df9d18c39b3effbd0409) C:\Windows\system32\drivers\HdAudio.sys
11:24:32.0310 4284 HdAudAddService - ok
11:24:32.0354 4284 HDAudBus (f942c5820205f2fb453243edfec82a3d) C:\Windows\system32\DRIVERS\HDAudBus.sys
11:24:32.0358 4284 HDAudBus - ok
11:24:32.0382 4284 HidBth (b4881c84a180e75b8c25dc1d726c375f) C:\Windows\system32\drivers\hidbth.sys
11:24:32.0382 4284 HidBth - ok
11:24:32.0407 4284 HidIr (5f47839455d01ff6403b008d481a6f5b) C:\Windows\system32\DRIVERS\hidir.sys
11:24:32.0408 4284 HidIr - ok
11:24:32.0532 4284 HidUsb (443bdd2d30bb4f00795c797e2cf99edf) C:\Windows\system32\DRIVERS\hidusb.sys
11:24:32.0532 4284 HidUsb - ok
11:24:32.0587 4284 HpCISSs (d7109a1e6bd2dfdbcba72a6bc626a13b) C:\Windows\system32\drivers\hpcisss.sys
11:24:32.0587 4284 HpCISSs - ok
11:24:32.0634 4284 HTTP (098f1e4e5c9cb5b0063a959063631610) C:\Windows\system32\drivers\HTTP.sys
11:24:32.0643 4284 HTTP - ok
11:24:32.0666 4284 i2omp (da94c854cea5fac549d4e1f6e88349e8) C:\Windows\system32\drivers\i2omp.sys
11:24:32.0667 4284 i2omp - ok
11:24:32.0709 4284 i8042prt (cbb597659a2713ce0c9cc20c88c7591f) C:\Windows\system32\DRIVERS\i8042prt.sys
11:24:32.0710 4284 i8042prt - ok
11:24:32.0746 4284 iaStor (fc28e90f2204d8fd147fa9bfa8a51c01) C:\Windows\system32\DRIVERS\iaStor.sys
11:24:32.0748 4284 iaStor - ok
11:24:32.0777 4284 iaStorV (3e3bf3627d886736d0b4e90054f929f6) C:\Windows\system32\drivers\iastorv.sys
11:24:32.0779 4284 iaStorV - ok
11:24:32.0951 4284 IDSVia64 (0b97f1a640ad3d159a7b5d2164c42e50) C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.0.0.125\Definitions\IPSDefs\20111010.030\IDSvia64.sys
11:24:32.0959 4284 IDSVia64 - ok
11:24:32.0983 4284 iirsp (8c3951ad2fe886ef76c7b5027c3125d3) C:\Windows\system32\drivers\iirsp.sys
11:24:32.0983 4284 iirsp - ok
11:24:33.0058 4284 int15 (8c7fa71cb1ebcd3ede8958d27b1bf0b4) C:\Windows\SysWOW64\drivers\int15_64.sys
11:24:33.0059 4284 int15 - ok
11:24:33.0176 4284 IntcAzAudAddService (6fdf709500c20362ffc5057f0d1e0c8d) C:\Windows\system32\drivers\RTKVHD64.sys
11:24:33.0195 4284 IntcAzAudAddService - ok
11:24:33.0217 4284 intelide (df797a12176f11b2d301c5b234bb200e) C:\Windows\system32\drivers\intelide.sys
11:24:33.0217 4284 intelide - ok
11:24:33.0235 4284 intelppm (bfd84af32fa1bad6231c4585cb469630) C:\Windows\system32\DRIVERS\intelppm.sys
11:24:33.0235 4284 intelppm - ok
11:24:33.0300 4284 IpFilterDriver (d8aabc341311e4780d6fce8c73c0ad81) C:\Windows\system32\DRIVERS\ipfltdrv.sys
11:24:33.0300 4284 IpFilterDriver - ok
11:24:33.0319 4284 IpInIp - ok
11:24:33.0347 4284 IPMIDRV (9c2ee2e6e5a7203bfae15c299475ec67) C:\Windows\system32\drivers\ipmidrv.sys
11:24:33.0348 4284 IPMIDRV - ok
11:24:33.0393 4284 IPNAT (b7e6212f581ea5f6ab0c3a6ceeeb89be) C:\Windows\system32\DRIVERS\ipnat.sys
11:24:33.0393 4284 IPNAT - ok
11:24:33.0415 4284 IRENUM (8c42ca155343a2f11d29feca67faa88d) C:\Windows\system32\drivers\irenum.sys
11:24:33.0416 4284 IRENUM - ok
11:24:33.0442 4284 isapnp (0672bfcedc6fc468a2b0500d81437f4f) C:\Windows\system32\drivers\isapnp.sys
11:24:33.0442 4284 isapnp - ok
11:24:33.0491 4284 iScsiPrt (e4fdf99599f27ec25d2cf6d754243520) C:\Windows\system32\DRIVERS\msiscsi.sys
11:24:33.0492 4284 iScsiPrt - ok
11:24:33.0514 4284 iteatapi (63c766cdc609ff8206cb447a65abba4a) C:\Windows\system32\drivers\iteatapi.sys
11:24:33.0514 4284 iteatapi - ok
11:24:33.0538 4284 iteraid (1281fe73b17664631d12f643cbea3f59) C:\Windows\system32\drivers\iteraid.sys
11:24:33.0539 4284 iteraid - ok
11:24:33.0574 4284 kbdclass (423696f3ba6472dd17699209b933bc26) C:\Windows\system32\DRIVERS\kbdclass.sys
11:24:33.0575 4284 kbdclass - ok
11:24:33.0598 4284 kbdhid (dbdf75d51464fbc47d0104ec3d572c05) C:\Windows\system32\DRIVERS\kbdhid.sys
11:24:33.0598 4284 kbdhid - ok
11:24:33.0663 4284 KSecDD (476e2c1dcea45895994bef11c2a98715) C:\Windows\system32\Drivers\ksecdd.sys
11:24:33.0666 4284 KSecDD - ok
11:24:33.0696 4284 ksthunk (1d419cf43db29396ecd7113d129d94eb) C:\Windows\system32\drivers\ksthunk.sys
11:24:33.0696 4284 ksthunk - ok
11:24:33.0714 4284 lltdio (96ece2659b6654c10a0c310ae3a6d02c) C:\Windows\system32\DRIVERS\lltdio.sys
11:24:33.0715 4284 lltdio - ok
11:24:33.0741 4284 LSI_FC (acbe1af32d3123e330a07bfbc5ec4a9b) C:\Windows\system32\drivers\lsi_fc.sys
11:24:33.0743 4284 LSI_FC - ok
11:24:33.0761 4284 LSI_SAS (799ffb2fc4729fa46d2157c0065b3525) C:\Windows\system32\drivers\lsi_sas.sys
11:24:33.0762 4284 LSI_SAS - ok
11:24:33.0782 4284 LSI_SCSI (f445ff1daad8a226366bfaf42551226b) C:\Windows\system32\drivers\lsi_scsi.sys
11:24:33.0782 4284 LSI_SCSI - ok
11:24:33.0842 4284 luafv (52f87b9cc8932c2a7375c3b2a9be5e3e) C:\Windows\system32\drivers\luafv.sys
11:24:33.0844 4284 luafv - ok
11:24:33.0876 4284 megasas (5c5cd6aaced32fb26c3fb34b3dcf972f) C:\Windows\system32\drivers\megasas.sys
11:24:33.0877 4284 megasas - ok
11:24:33.0920 4284 MegaSR (859bc2436b076c77c159ed694acfe8f8) C:\Windows\system32\drivers\megasr.sys
11:24:33.0921 4284 MegaSR - ok
11:24:33.0959 4284 Modem (59848d5cc74606f0ee7557983bb73c2e) C:\Windows\system32\drivers\modem.sys
11:24:33.0959 4284 Modem - ok
11:24:34.0015 4284 monitor (c247cc2a57e0a0c8c6dccf7807b3e9e5) C:\Windows\system32\DRIVERS\monitor.sys
11:24:34.0015 4284 monitor - ok
11:24:34.0028 4284 mouclass (9367304e5e412b120cf5f4ea14e4e4f1) C:\Windows\system32\DRIVERS\mouclass.sys
11:24:34.0028 4284 mouclass - ok
11:24:34.0085 4284 mouhid (c2c2bd5c5ce5aaf786ddd74b75d2ac69) C:\Windows\system32\DRIVERS\mouhid.sys
11:24:34.0085 4284 mouhid - ok
11:24:34.0101 4284 MountMgr (11bc9b1e8801b01f7f6adb9ead30019b) C:\Windows\system32\drivers\mountmgr.sys
11:24:34.0103 4284 MountMgr - ok
11:24:34.0124 4284 mpio (f8276eb8698142884498a528dfea8478) C:\Windows\system32\drivers\mpio.sys
11:24:34.0125 4284 mpio - ok
11:24:34.0152 4284 mpsdrv (c92b9abdb65a5991e00c28f13491dba2) C:\Windows\system32\drivers\mpsdrv.sys
11:24:34.0154 4284 mpsdrv - ok
11:24:34.0188 4284 Mraid35x (3c200630a89ef2c0864d515b7a75802e) C:\Windows\system32\drivers\mraid35x.sys
11:24:34.0188 4284 Mraid35x - ok
11:24:34.0233 4284 MRxDAV (7c1de4aa96dc0c071611f9e7de02a68d) C:\Windows\system32\drivers\mrxdav.sys
11:24:34.0235 4284 MRxDAV - ok
11:24:34.0269 4284 mrxsmb (1485811b320ff8c7edad1caebb1c6c2b) C:\Windows\system32\DRIVERS\mrxsmb.sys
11:24:34.0271 4284 mrxsmb - ok
11:24:34.0301 4284 mrxsmb10 (3b929a60c833fc615fd97fba82bc7632) C:\Windows\system32\DRIVERS\mrxsmb10.sys
11:24:34.0305 4284 mrxsmb10 - ok
11:24:34.0338 4284 mrxsmb20 (c64ab3e1f53b4f5b5bb6d796b2d7bec3) C:\Windows\system32\DRIVERS\mrxsmb20.sys
11:24:34.0340 4284 mrxsmb20 - ok
11:24:34.0409 4284 msahci (aa459f2ab3ab603c357ff117cae3d818) C:\Windows\system32\drivers\msahci.sys
11:24:34.0409 4284 msahci - ok
11:24:34.0438 4284 msdsm (264bbb4aaf312a485f0e44b65a6b7202) C:\Windows\system32\drivers\msdsm.sys
11:24:34.0439 4284 msdsm - ok
11:24:34.0477 4284 MSDV (df674ba7da5a4753d839a905b66d2fd9) C:\Windows\system32\DRIVERS\msdv.sys
11:24:34.0479 4284 MSDV - ok
11:24:34.0543 4284 Msfs (704f59bfc4512d2bb0146aec31b10a7c) C:\Windows\system32\drivers\Msfs.sys
11:24:34.0543 4284 Msfs - ok
11:24:34.0590 4284 msisadrv (00ebc952961664780d43dca157e79b27) C:\Windows\system32\drivers\msisadrv.sys
11:24:34.0590 4284 msisadrv - ok
11:24:34.0610 4284 MSKSSRV (0ea73e498f53b96d83dbfca074ad4cf8) C:\Windows\system32\drivers\MSKSSRV.sys
11:24:34.0611 4284 MSKSSRV - ok
11:24:34.0637 4284 MSPCLOCK (52e59b7e992a58e740aa63f57edbae8b) C:\Windows\system32\drivers\MSPCLOCK.sys
11:24:34.0638 4284 MSPCLOCK - ok
11:24:34.0671 4284 MSPQM (49084a75bae043ae02d5b44d02991bb2) C:\Windows\system32\drivers\MSPQM.sys
11:24:34.0672 4284 MSPQM - ok
11:24:34.0713 4284 MsRPC (dc6ccf440cdede4293db41c37a5060a5) C:\Windows\system32\drivers\MsRPC.sys
11:24:34.0718 4284 MsRPC - ok
11:24:34.0740 4284 mssmbios (855796e59df77ea93af46f20155bf55b) C:\Windows\system32\DRIVERS\mssmbios.sys
11:24:34.0740 4284 mssmbios - ok
11:24:34.0768 4284 MSTAPE (7d1f9672aa6d98d896fe22314442c36f) C:\Windows\system32\DRIVERS\mstape.sys
11:24:34.0770 4284 MSTAPE - ok
11:24:34.0800 4284 MSTEE (86d632d75d05d5b7c7c043fa3564ae86) C:\Windows\system32\drivers\MSTEE.sys
11:24:34.0801 4284 MSTEE - ok
11:24:34.0834 4284 Mup (0cc49f78d8aca0877d885f149084e543) C:\Windows\system32\Drivers\mup.sys
11:24:34.0834 4284 Mup - ok
11:24:34.0921 4284 NativeWifiP (2007b826c4acd94ae32232b41f0842b9) C:\Windows\system32\DRIVERS\nwifi.sys
11:24:34.0924 4284 NativeWifiP - ok
11:24:35.0149 4284 NAVENG (2dbe90210de76be6e1653bb20ec70ec2) C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.0.0.125\Definitions\VirusDefs\20111010.038\ENG64.SYS
11:24:35.0150 4284 NAVENG - ok
11:24:35.0212 4284 NAVEX15 (346da70e203b8e2c850277713de8f71b) C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.0.0.125\Definitions\VirusDefs\20111010.038\EX64.SYS
11:24:35.0221 4284 NAVEX15 - ok
11:24:35.0349 4284 NDIS (65950e07329fcee8e6516b17c8d0abb6) C:\Windows\system32\drivers\ndis.sys
11:24:35.0353 4284 NDIS - ok
11:24:35.0443 4284 NdisTapi (64df698a425478e321981431ac171334) C:\Windows\system32\DRIVERS\ndistapi.sys
11:24:35.0443 4284 NdisTapi - ok
11:24:35.0519 4284 Ndisuio (8baa43196d7b5bb972c9a6b2bbf61a19) C:\Windows\system32\DRIVERS\ndisuio.sys
11:24:35.0519 4284 Ndisuio - ok
11:24:35.0612 4284 NdisWan (f8158771905260982ce724076419ef19) C:\Windows\system32\DRIVERS\ndiswan.sys
11:24:35.0615 4284 NdisWan - ok
11:24:35.0667 4284 NDProxy (9cb77ed7cb72850253e973a2d6afdf49) C:\Windows\system32\drivers\NDProxy.sys
11:24:35.0668 4284 NDProxy - ok
11:24:35.0730 4284 NetBIOS (a499294f5029a7862adc115bda7371ce) C:\Windows\system32\DRIVERS\netbios.sys
11:24:35.0731 4284 NetBIOS - ok
11:24:35.0765 4284 netbt (fc2c792ebddc8e28df939d6a92c83d61) C:\Windows\system32\DRIVERS\netbt.sys
11:24:35.0769 4284 netbt - ok
11:24:35.0799 4284 nfrd960 (4ac08bd6af2df42e0c3196d826c8aea7) C:\Windows\system32\drivers\nfrd960.sys
11:24:35.0799 4284 nfrd960 - ok
11:24:35.0839 4284 Npfs (b298874f8e0ea93f06ec40aa8d146478) C:\Windows\system32\drivers\Npfs.sys
11:24:35.0840 4284 Npfs - ok
11:24:35.0862 4284 nsiproxy (1523af19ee8b030ba682f7a53537eaeb) C:\Windows\system32\drivers\nsiproxy.sys
11:24:35.0863 4284 nsiproxy - ok
11:24:35.0929 4284 Ntfs (bac869dfb98e499ba4d9bb1fb43270e1) C:\Windows\system32\drivers\Ntfs.sys
11:24:35.0947 4284 Ntfs - ok
11:24:35.0962 4284 Null (dd5d684975352b85b52e3fd5347c20cb) C:\Windows\system32\drivers\Null.sys
11:24:35.0963 4284 Null - ok
11:24:35.0984 4284 nvraid (2c040b7ada5b06f6facadac8514aa034) C:\Windows\system32\drivers\nvraid.sys
11:24:35.0985 4284 nvraid - ok
11:24:36.0014 4284 nvstor (f7ea0fe82842d05eda3efdd376dbfdba) C:\Windows\system32\drivers\nvstor.sys
11:24:36.0014 4284 nvstor - ok
11:24:36.0041 4284 nv_agp (19067ca93075ef4823e3938a686f532f) C:\Windows\system32\drivers\nv_agp.sys
11:24:36.0042 4284 nv_agp - ok
11:24:36.0050 4284 NwlnkFlt - ok
11:24:36.0059 4284 NwlnkFwd - ok
11:24:36.0119 4284 ohci1394 (b5b1ce65ac15bbd11c0619e3ef7cfc28) C:\Windows\system32\DRIVERS\ohci1394.sys
11:24:36.0119 4284 ohci1394 - ok
11:24:36.0185 4284 Parport (aecd57f94c887f58919f307c35498ea0) C:\Windows\system32\drivers\parport.sys
11:24:36.0185 4284 Parport - ok
11:24:36.0217 4284 partmgr (f9b5eda4c17a2be7663f064dbf0fe254) C:\Windows\system32\drivers\partmgr.sys
11:24:36.0218 4284 partmgr - ok
11:24:36.0285 4284 pci (47ab1e0fc9d0e12bb53ba246e3a0906d) C:\Windows\system32\drivers\pci.sys
11:24:36.0286 4284 pci - ok
11:24:36.0330 4284 pciide (8d618c829034479985a9ed56106cc732) C:\Windows\system32\drivers\pciide.sys
11:24:36.0330 4284 pciide - ok
11:24:36.0356 4284 pcmcia (037661f3d7c507c9993b7010ceee6288) C:\Windows\system32\drivers\pcmcia.sys
11:24:36.0357 4284 pcmcia - ok
11:24:36.0413 4284 pcouffin (af7ce12c4f3dc8cb2b07685c916bbcfe) C:\Windows\system32\Drivers\pcouffin.sys
11:24:36.0413 4284 pcouffin - ok
11:24:36.0442 4284 PEAUTH (58865916f53592a61549b04941bfd80d) C:\Windows\system32\drivers\peauth.sys
11:24:36.0451 4284 PEAUTH - ok
11:24:36.0551 4284 PptpMiniport (23386e9952025f5f21c368971e2e7301) C:\Windows\system32\DRIVERS\raspptp.sys
11:24:36.0553 4284 PptpMiniport - ok
11:24:36.0579 4284 Processor (5080e59ecee0bc923f14018803aa7a01) C:\Windows\system32\drivers\processr.sys
11:24:36.0579 4284 Processor - ok
11:24:36.0621 4284 PSched (c5ab7f0809392d0da027f4a2a81bfa31) C:\Windows\system32\DRIVERS\pacer.sys
11:24:36.0622 4284 PSched - ok
11:24:36.0680 4284 PxHlpa64 (901dba98359966a62a6548596988e931) C:\Windows\system32\Drivers\PxHlpa64.sys
11:24:36.0680 4284 PxHlpa64 - ok
11:24:36.0723 4284 ql2300 (0b83f4e681062f3839be2ec1d98fd94a) C:\Windows\system32\drivers\ql2300.sys
11:24:36.0739 4284 ql2300 - ok
11:24:36.0763 4284 ql40xx (e1c80f8d4d1e39ef9595809c1369bf2a) C:\Windows\system32\drivers\ql40xx.sys
11:24:36.0763 4284 ql40xx - ok
11:24:36.0792 4284 QWAVEdrv (e8d76edab77ec9c634c27b8eac33adc5) C:\Windows\system32\drivers\qwavedrv.sys
11:24:36.0793 4284 QWAVEdrv - ok
11:24:36.0812 4284 RasAcd (1013b3b663a56d3ddd784f581c1bd005) C:\Windows\system32\DRIVERS\rasacd.sys
11:24:36.0812 4284 RasAcd - ok
11:24:36.0855 4284 Rasl2tp (ac7bc4d42a7e558718dfdec599bbfc2c) C:\Windows\system32\DRIVERS\rasl2tp.sys
11:24:36.0857 4284 Rasl2tp - ok
11:24:36.0911 4284 RasPppoe (4517fbf8b42524afe4ede1de102aae3e) C:\Windows\system32\DRIVERS\raspppoe.sys
11:24:36.0911 4284 RasPppoe - ok
11:24:36.0997 4284 RasSstp (c6a593b51f34c33e5474539544072527) C:\Windows\system32\DRIVERS\rassstp.sys
11:24:36.0998 4284 RasSstp - ok
11:24:37.0059 4284 rdbss (322db5c6b55e8d8ee8d6f358b2aaabb1) C:\Windows\system32\DRIVERS\rdbss.sys
11:24:37.0064 4284 rdbss - ok
11:24:37.0087 4284 RDPCDD (603900cc05f6be65ccbf373800af3716) C:\Windows\system32\DRIVERS\RDPCDD.sys
11:24:37.0087 4284 RDPCDD - ok
11:24:37.0119 4284 rdpdr (c045d1fb111c28df0d1be8d4bda22c06) C:\Windows\system32\drivers\rdpdr.sys
11:24:37.0121 4284 rdpdr - ok
11:24:37.0130 4284 RDPENCDD (cab9421daf3d97b33d0d055858e2c3ab) C:\Windows\system32\drivers\rdpencdd.sys
11:24:37.0130 4284 RDPENCDD - ok
11:24:37.0161 4284 RDPWD (b1d741c87cea8d7282146366cc9c3f81) C:\Windows\system32\drivers\RDPWD.sys
11:24:37.0164 4284 RDPWD - ok
11:24:37.0214 4284 rspndr (22a9cb08b1a6707c1550c6bf099aae73) C:\Windows\system32\DRIVERS\rspndr.sys
11:24:37.0216 4284 rspndr - ok
11:24:37.0274 4284 RSUSBSTOR (1807ea271c9685a25571d94ae4e3a8dd) C:\Windows\system32\Drivers\RTS5121.sys
11:24:37.0275 4284 RSUSBSTOR - ok
11:24:37.0344 4284 RTHDMIAzAudService (f8da8fc39ce5859c0d8c0fe6524ce465) C:\Windows\system32\drivers\RtHDMIVX.sys
11:24:37.0345 4284 RTHDMIAzAudService - ok
11:24:37.0411 4284 RTL8187Se (462308d94e4e3318503267991b0cdc7f) C:\Windows\system32\DRIVERS\RTL8187Se.sys
11:24:37.0412 4284 RTL8187Se - ok
11:24:37.0421 4284 Rts516xIR - ok
11:24:37.0463 4284 sbp2port (cd9c693589c60ad59bbbcfb0e524e01b) C:\Windows\system32\drivers\sbp2port.sys
11:24:37.0464 4284 sbp2port - ok
11:24:37.0503 4284 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys
11:24:37.0504 4284 secdrv - ok
11:24:37.0516 4284 Serenum (2449316316411d65bd2c761a6ffb2ce2) C:\Windows\system32\DRIVERS\serenum.sys
11:24:37.0517 4284 Serenum - ok
11:24:37.0567 4284 Serial (4b438170be2fc8e0bd35ee87a960f84f) C:\Windows\system32\DRIVERS\serial.sys
11:24:37.0569 4284 Serial - ok
11:24:37.0593 4284 sermouse (a842f04833684bceea7336211be478df) C:\Windows\system32\drivers\sermouse.sys
11:24:37.0594 4284 sermouse - ok
11:24:37.0623 4284 sffdisk (14d4b4465193a87c127933978e8c4106) C:\Windows\system32\drivers\sffdisk.sys
11:24:37.0623 4284 sffdisk - ok
11:24:37.0637 4284 sffp_mmc (7073aee3f82f3d598e3825962aa98ab2) C:\Windows\system32\drivers\sffp_mmc.sys
11:24:37.0637 4284 sffp_mmc - ok
11:24:37.0661 4284 sffp_sd (35e59ebe4a01a0532ed67975161c7b82) C:\Windows\system32\drivers\sffp_sd.sys
11:24:37.0662 4284 sffp_sd - ok
11:24:37.0689 4284 sfloppy (6b7838c94135768bd455cbdc23e39e5f) C:\Windows\system32\drivers\sfloppy.sys
11:24:37.0689 4284 sfloppy - ok
11:24:37.0748 4284 SiSRaid2 (7a5de502aeb719d4594c6471060a78b3) C:\Windows\system32\drivers\sisraid2.sys
11:24:37.0749 4284 SiSRaid2 - ok
11:24:37.0790 4284 SiSRaid4 (3a2f769fab9582bc720e11ea1dfb184d) C:\Windows\system32\drivers\sisraid4.sys
11:24:37.0790 4284 SiSRaid4 - ok
11:24:37.0834 4284 Smb (290b6f6a0ec4fcdfc90f5cb6d7020473) C:\Windows\system32\DRIVERS\smb.sys
11:24:37.0836 4284 Smb - ok
11:24:37.0888 4284 spldr (386c3c63f00a7040c7ec5e384217e89d) C:\Windows\system32\drivers\spldr.sys
11:24:37.0889 4284 spldr - ok
11:24:38.0007 4284 SRTSP (90ef30c3867bcde4579c01a6d6e75a7a) C:\Windows\System32\Drivers\N360x64\0501000.01D\SRTSP64.SYS
11:24:38.0010 4284 SRTSP - ok
11:24:38.0042 4284 SRTSPX (c513e8a5e7978da49077f5484344ee1b) C:\Windows\system32\drivers\N360x64\0501000.01D\SRTSPX64.SYS
11:24:38.0042 4284 SRTSPX - ok
11:24:38.0126 4284 srv (880a57fccb571ebd063d4dd50e93e46d) C:\Windows\system32\DRIVERS\srv.sys
11:24:38.0133 4284 srv - ok
11:24:38.0197 4284 srv2 (a1ad14a6d7a37891fffeca35ebbb0730) C:\Windows\system32\DRIVERS\srv2.sys
11:24:38.0200 4284 srv2 - ok
11:24:38.0248 4284 srvnet (4bed62f4fa4d8300973f1151f4c4d8a7) C:\Windows\system32\DRIVERS\srvnet.sys
11:24:38.0250 4284 srvnet - ok
11:24:38.0358 4284 swenum (8a851ca908b8b974f89c50d2e18d4f0c) C:\Windows\system32\DRIVERS\swenum.sys
11:24:38.0358 4284 swenum - ok
11:24:38.0395 4284 Symc8xx (2f26a2c6fc96b29beff5d8ed74e6625b) C:\Windows\system32\drivers\symc8xx.sys
11:24:38.0396 4284 Symc8xx - ok
11:24:38.0445 4284 SymDS (6160145c7a87fc7672e8e3b886888176) C:\Windows\system32\drivers\N360x64\0501000.01D\SYMDS64.SYS
11:24:38.0448 4284 SymDS - ok
11:24:38.0487 4284 SymEFA (96aeed40d4d3521568b42027687e69e0) C:\Windows\system32\drivers\N360x64\0501000.01D\SYMEFA64.SYS
11:24:38.0490 4284 SymEFA - ok
11:24:38.0530 4284 SymEvent (21a1c2d694c3cf962d31f5e873ab3d6f) C:\Windows\system32\Drivers\SYMEVENT64x86.SYS
11:24:38.0531 4284 SymEvent - ok
11:24:38.0550 4284 SymIRON (bd0d711d8cbfcaa19ca123306eaf53a5) C:\Windows\system32\drivers\N360x64\0501000.01D\Ironx64.SYS
11:24:38.0551 4284 SymIRON - ok
11:24:38.0595 4284 SYMTDIv (6cb70a5d30e4322bab4ad52866b0a4b8) C:\Windows\System32\Drivers\N360x64\0501000.01D\SYMTDIV.SYS
11:24:38.0597 4284 SYMTDIv - ok
11:24:38.0671 4284 Sym_hi (a909667976d3bccd1df813fed517d837) C:\Windows\system32\drivers\sym_hi.sys
11:24:38.0671 4284 Sym_hi - ok
11:24:38.0715 4284 Sym_u3 (36887b56ec2d98b9c362f6ae4de5b7b0) C:\Windows\system32\drivers\sym_u3.sys
11:24:38.0715 4284 Sym_u3 - ok
11:24:38.0780 4284 Tcpip (4dad14118fbcf7c609f2a4ce21fbcc5f) C:\Windows\system32\drivers\tcpip.sys
11:24:38.0797 4284 Tcpip - ok
11:24:38.0819 4284 Tcpip6 (4dad14118fbcf7c609f2a4ce21fbcc5f) C:\Windows\system32\DRIVERS\tcpip.sys
11:24:38.0824 4284 Tcpip6 - ok
11:24:38.0874 4284 tcpipreg (c7e72a4071ee0200e3c075dacfb2b334) C:\Windows\system32\drivers\tcpipreg.sys
11:24:38.0875 4284 tcpipreg - ok
11:24:38.0922 4284 TDPIPE (1d8bf4aaa5fb7a2761475781dc1195bc) C:\Windows\system32\drivers\tdpipe.sys
11:24:38.0923 4284 TDPIPE - ok
11:24:38.0967 4284 TDTCP (7f7e00cdf609df657f4cda02dd1c9bb1) C:\Windows\system32\drivers\tdtcp.sys
11:24:38.0968 4284 TDTCP - ok
11:24:39.0012 4284 tdx (458919c8c42e398dc4802178d5ffee27) C:\Windows\system32\DRIVERS\tdx.sys
11:24:39.0014 4284 tdx - ok
11:24:39.0057 4284 TermDD (8c19678d22649ec002ef2282eae92f98) C:\Windows\system32\DRIVERS\termdd.sys
11:24:39.0058 4284 TermDD - ok
11:24:39.0085 4284 tssecsrv (9e5409cd17c8bef193aad498f3bc2cb8) C:\Windows\system32\DRIVERS\tssecsrv.sys
11:24:39.0086 4284 tssecsrv - ok
11:24:39.0147 4284 tunmp (89ec74a9e602d16a75a4170511029b3c) C:\Windows\system32\DRIVERS\tunmp.sys
11:24:39.0147 4284 tunmp - ok
11:24:39.0176 4284 tunnel (30a9b3f45ad081bffc3bcaa9c812b609) C:\Windows\system32\DRIVERS\tunnel.sys
11:24:39.0177 4284 tunnel - ok
11:24:39.0197 4284 uagp35 (fec266ef401966311744bd0f359f7f56) C:\Windows\system32\drivers\uagp35.sys
11:24:39.0198 4284 uagp35 - ok
11:24:39.0245 4284 udfs (faf2640a2a76ed03d449e443194c4c34) C:\Windows\system32\DRIVERS\udfs.sys
11:24:39.0250 4284 udfs - ok
11:24:39.0280 4284 uliagpkx (4ec9447ac3ab462647f60e547208ca00) C:\Windows\system32\drivers\uliagpkx.sys
11:24:39.0281 4284 uliagpkx - ok
11:24:39.0310 4284 uliahci (697f0446134cdc8f99e69306184fbbb4) C:\Windows\system32\drivers\uliahci.sys
11:24:39.0311 4284 uliahci - ok
11:24:39.0337 4284 UlSata (31707f09846056651ea2c37858f5ddb0) C:\Windows\system32\drivers\ulsata.sys
11:24:39.0338 4284 UlSata - ok
11:24:39.0366 4284 ulsata2 (85e5e43ed5b48c8376281bab519271b7) C:\Windows\system32\drivers\ulsata2.sys
11:24:39.0367 4284 ulsata2 - ok
11:24:39.0399 4284 umbus (46e9a994c4fed537dd951f60b86ad3f4) C:\Windows\system32\DRIVERS\umbus.sys
11:24:39.0400 4284 umbus - ok
11:24:39.0484 4284 usbccgp (07e3498fc60834219d2356293da0fecc) C:\Windows\system32\DRIVERS\usbccgp.sys
11:24:39.0485 4284 usbccgp - ok
11:24:39.0506 4284 USBCCID - ok
11:24:39.0526 4284 usbcir (8c39d53e1a343f4c47ee8f3c052126d8) C:\Windows\system32\DRIVERS\usbcir.sys
11:24:39.0526 4284 usbcir - ok
11:24:39.0540 4284 usbehci (827e44de934a736ea31e91d353eb126f) C:\Windows\system32\DRIVERS\usbehci.sys
11:24:39.0541 4284 usbehci - ok
11:24:39.0582 4284 usbhub (bb35cd80a2ececfadc73569b3d70c7d1) C:\Windows\system32\DRIVERS\usbhub.sys
11:24:39.0586 4284 usbhub - ok
11:24:39.0617 4284 usbohci (eba14ef0c07cec233f1529c698d0d154) C:\Windows\system32\drivers\usbohci.sys
11:24:39.0617 4284 usbohci - ok
11:24:39.0647 4284 usbprint (28b693b6d31e7b9332c1bdcefef228c1) C:\Windows\system32\DRIVERS\usbprint.sys
11:24:39.0648 4284 usbprint - ok
11:24:39.0674 4284 USBSTOR (b854c1558fca0c269a38663e8b59b581) C:\Windows\system32\DRIVERS\USBSTOR.SYS
11:24:39.0674 4284 USBSTOR - ok
11:24:39.0696 4284 usbuhci (b2872cbf9f47316abd0e0c74a1aba507) C:\Windows\system32\DRIVERS\usbuhci.sys
11:24:39.0697 4284 usbuhci - ok
11:24:39.0749 4284 vga (916b94bcf1e09873fff2d5fb11767bbc) C:\Windows\system32\DRIVERS\vgapnp.sys
11:24:39.0751 4284 vga - ok
11:24:39.0774 4284 VgaSave (b83ab16b51feda65dd81b8c59d114d63) C:\Windows\System32\drivers\vga.sys
11:24:39.0775 4284 VgaSave - ok
11:24:39.0791 4284 viaide (8294b6c3fdb6c33f24e150de647ecdaa) C:\Windows\system32\drivers\viaide.sys
11:24:39.0791 4284 viaide - ok
11:24:39.0825 4284 volmgr (2b7e885ed951519a12c450d24535dfca) C:\Windows\system32\drivers\volmgr.sys
11:24:39.0826 4284 volmgr - ok
11:24:39.0873 4284 volmgrx (cec5ac15277d75d9e5dec2e1c6eaf877) C:\Windows\system32\drivers\volmgrx.sys
11:24:39.0878 4284 volmgrx - ok
11:24:39.0918 4284 volsnap (5280aada24ab36b01a84a6424c475c8d) C:\Windows\system32\drivers\volsnap.sys
11:24:39.0921 4284 volsnap - ok
11:24:39.0969 4284 vsmraid (a68f455ed2673835209318dd61bfbb0e) C:\Windows\system32\drivers\vsmraid.sys
11:24:39.0970 4284 vsmraid - ok
11:24:39.0999 4284 WacomPen (fef8fe5923fead2cee4dfabfce3393a7) C:\Windows\system32\drivers\wacompen.sys
11:24:40.0000 4284 WacomPen - ok
11:24:40.0046 4284 Wanarp (b8e7049622300d20ba6d8be0c47c0cfd) C:\Windows\system32\DRIVERS\wanarp.sys
11:24:40.0048 4284 Wanarp - ok
11:24:40.0051 4284 Wanarpv6 (b8e7049622300d20ba6d8be0c47c0cfd) C:\Windows\system32\DRIVERS\wanarp.sys
11:24:40.0051 4284 Wanarpv6 - ok
11:24:40.0080 4284 Wd (0c17a0816f65b89e362e682ad5e7266e) C:\Windows\system32\drivers\wd.sys
11:24:40.0081 4284 Wd - ok
11:24:40.0112 4284 Wdf01000 (d02e7e4567da1e7582fbf6a91144b0df) C:\Windows\system32\drivers\Wdf01000.sys
11:24:40.0123 4284 Wdf01000 - ok
11:24:40.0187 4284 WmiAcpi (e18aebaaa5a773fe11aa2c70f65320f5) C:\Windows\system32\DRIVERS\wmiacpi.sys
11:24:40.0188 4284 WmiAcpi - ok
11:24:40.0277 4284 WpdUsb (5e2401b3fc1089c90e081291357371a9) C:\Windows\system32\DRIVERS\wpdusb.sys
11:24:40.0277 4284 WpdUsb - ok
11:24:40.0310 4284 ws2ifsl (8a900348370e359b6bff6a550e4649e1) C:\Windows\system32\drivers\ws2ifsl.sys
11:24:40.0311 4284 ws2ifsl - ok
11:24:40.0360 4284 WUDFRd (501a65252617b495c0f1832f908d54d8) C:\Windows\system32\DRIVERS\WUDFRd.sys
11:24:40.0362 4284 WUDFRd - ok
11:24:40.0453 4284 {95808DC4-FA4A-4C74-92FE-5B863F82066B} (74983addca2d9618512c088d856d6615) C:\Program Files (x86)\CyberLink\PowerDVD\000.fcl
11:24:40.0454 4284 {95808DC4-FA4A-4C74-92FE-5B863F82066B} - ok
11:24:40.0463 4284 MBR (0x1B8) (b751af1acddd7a1a71313731839f4ecb) \Device\Harddisk0\DR0
11:24:40.0965 4284 \Device\Harddisk0\DR0 - ok
11:24:40.0979 4284 Boot (0x1200) (818f2330ebc30d89cf751151749e0e67) \Device\Harddisk0\DR0\Partition0
11:24:40.0980 4284 \Device\Harddisk0\DR0\Partition0 - ok
11:24:40.0981 4284 ============================================================
11:24:40.0981 4284 Scan finished
11:24:40.0981 4284 ============================================================
11:24:40.0987 5108 Detected object count: 0
11:24:40.0987 5108 Actual detected object count: 0
11:25:23.0103 4476 Deinitialize success

BC AdBot (Login to Remove)

 


#17 blurry eyes

blurry eyes
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:04:42 AM

Posted 11 October 2011 - 01:00 PM

My logs were too long so here's the OTL text log:
OTL logfile created on: 10/11/2011 11:39:48 AM - Run 1
OTL by OldTimer - Version 3.2.29.1 Folder = C:\Users\Public\Equipment\Software Downloads\OTL
64bit-Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6002.18005)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

2.99 Gb Total Physical Memory | 1.50 Gb Available Physical Memory | 50.26% Memory free
6.19 Gb Paging File | 4.42 Gb Available in Paging File | 71.52% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 688.87 Gb Total Space | 94.33 Gb Free Space | 13.69% Space Free | Partition Type: NTFS

Computer Name: OWNER-PC | User Name: Owner | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2011/10/11 11:35:38 | 000,582,656 | ---- | M] (OldTimer Tools) -- C:\Users\Public\Equipment\Software Downloads\OTL\OTL.exe
PRC - [2011/09/30 10:27:21 | 000,140,952 | ---- | M] (Google Inc.) -- C:\Users\Owner\AppData\Local\Google\Update\1.3.21.69\GoogleCrashHandler.exe
PRC - [2011/09/19 07:33:37 | 000,062,536 | ---- | M] (White Sky, Inc.) -- C:\Program Files (x86)\Constant Guard Protection Suite\IDVaultSvc.exe
PRC - [2011/09/19 07:33:33 | 003,508,296 | ---- | M] (White Sky, Inc.) -- C:\Program Files (x86)\Constant Guard Protection Suite\IDVault.exe
PRC - [2011/07/05 10:24:06 | 000,395,528 | ---- | M] (StrikeForce Technologies Inc.) -- C:\Program Files (x86)\SFT\GuardedID\GIDD.exe
PRC - [2011/04/16 18:45:11 | 000,130,008 | R--- | M] (Symantec Corporation) -- C:\Program Files (x86)\Norton Security Suite\Engine\5.1.0.29\ccsvchst.exe
PRC - [2009/09/04 13:16:16 | 000,075,048 | ---- | M] (cyberlink) -- C:\Program Files (x86)\CyberLink\Shared Files\brs.exe
PRC - [2008/12/09 18:40:16 | 000,464,264 | ---- | M] () -- C:\Program Files (x86)\AskBarDis\bar\bin\AskService.exe
PRC - [2008/12/09 18:40:16 | 000,234,888 | ---- | M] () -- C:\Program Files (x86)\AskBarDis\bar\bin\ASKUpgrade.exe
PRC - [2008/07/20 18:45:06 | 000,354,840 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe
PRC - [2008/07/10 15:15:42 | 000,225,396 | ---- | M] (Creative Technology Ltd) -- C:\Program Files (x86)\Creative\SB X-Fi MB\Volume Panel\VolPanlu.exe
PRC - [2008/05/30 11:50:28 | 000,581,120 | ---- | M] () -- C:\Windows\mHotkey.exe
PRC - [2008/04/29 20:27:50 | 000,417,792 | ---- | M] (Creative Technology Ltd) -- C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
PRC - [2008/02/01 12:04:50 | 000,057,344 | ---- | M] (Chicony) -- C:\Windows\ChiFuncExt.exe
PRC - [2007/06/04 19:24:44 | 000,599,600 | ---- | M] (CyberLink Corporation.) -- C:\Program Files (x86)\CyberLink\InstantBurn\Win2K\IBurn.exe


========== Modules (No Company Name) ==========

MOD - [2011/10/04 08:23:35 | 000,060,928 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\a6485a160959fbed092dc2ddbed3509e\UIAutomationProvider.ni.dll
MOD - [2011/10/04 08:23:24 | 000,998,400 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\4117485024b0f652b9fbb66ff5025896\System.Management.ni.dll
MOD - [2011/10/04 08:19:34 | 017,404,416 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\beab37721e12fef7fc1e8f2ff130fa31\System.ServiceModel.ni.dll
MOD - [2011/10/04 08:19:18 | 000,212,992 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\1cc11918d8dd561391bba05c61de7573\System.ServiceProcess.ni.dll
MOD - [2011/10/04 08:19:15 | 001,840,640 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\5534465ace7f8b214a31a34f56280602\System.Web.Services.ni.dll
MOD - [2011/10/04 08:19:09 | 011,804,672 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web\5aa9131000876de66160ff713b543d99\System.Web.ni.dll
MOD - [2011/10/04 08:19:03 | 002,346,496 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\9ea6cff5cccb649eb8ad7cc6e3f03c88\System.Runtime.Serialization.ni.dll
MOD - [2011/10/04 08:19:00 | 001,070,080 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\21c45e88bbc379aaed3baadd0bd14a8b\System.IdentityModel.ni.dll
MOD - [2011/10/04 08:18:59 | 000,679,936 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Security\ccd064df52eb5479bf745ec2a7b74952\System.Security.ni.dll
MOD - [2011/10/04 08:18:55 | 000,971,264 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\29c6ef7f07d89496c72a1bbf718aed5d\System.Configuration.ni.dll
MOD - [2011/10/04 08:18:54 | 000,256,000 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\ca54e016986a14796591228eaa80cce1\SMDiagnostics.ni.dll
MOD - [2011/10/04 08:18:52 | 005,450,752 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\4c3cda96b8f12220da20f2f8d1b9439c\System.Xml.ni.dll
MOD - [2011/10/04 08:18:35 | 012,430,848 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c50d9d540acecdef29c31201e203a331\System.Windows.Forms.ni.dll
MOD - [2011/10/04 08:18:26 | 001,587,200 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\d8d83838f9840bde901df516ba3de588\System.Drawing.ni.dll
MOD - [2011/10/04 08:18:12 | 006,621,696 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Data\7ae4f4dbbfd301d5b5f3897b6ea433bf\System.Data.ni.dll
MOD - [2011/10/04 08:18:03 | 000,368,128 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\6a38f370d4e68b65106d1065d0b77067\PresentationFramework.Aero.ni.dll
MOD - [2011/10/04 08:18:00 | 014,328,832 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\180849cb54aab0bc77a229c41f967c90\PresentationFramework.ni.dll
MOD - [2011/10/04 08:17:43 | 012,216,832 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\cbe5fbb2e20534d89c0588cc05418840\PresentationCore.ni.dll
MOD - [2011/10/04 08:17:31 | 003,325,952 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\9afe86eee3ddf79c5f6cf5d85873c464\WindowsBase.ni.dll
MOD - [2011/10/04 08:17:25 | 007,950,848 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\b9ea0d414c4861120bfb7365d8ec0939\System.ni.dll
MOD - [2011/10/04 08:17:08 | 011,490,816 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\f6deb187f24bb3185841092b89fbfdbb\mscorlib.ni.dll
MOD - [2011/09/19 07:33:36 | 000,091,720 | ---- | M] () -- C:\Program Files (x86)\Constant Guard Protection Suite\IdVaultCore.XmlSerializers.dll
MOD - [2009/10/07 20:14:08 | 000,200,704 | ---- | M] () -- C:\Program Files (x86)\ImageConverter Plus\gpgate.dll
MOD - [2009/10/07 20:10:04 | 001,339,392 | ---- | M] () -- C:\Program Files (x86)\ImageConverter Plus\fcnv.dll
MOD - [2009/10/07 20:08:08 | 006,803,456 | ---- | M] () -- C:\Program Files (x86)\ImageConverter Plus\fpdf.dll
MOD - [2009/10/07 20:08:02 | 001,183,744 | ---- | M] () -- C:\Program Files (x86)\ImageConverter Plus\fcrtl.dll
MOD - [2009/10/07 20:04:58 | 000,020,992 | ---- | M] () -- C:\Program Files (x86)\ImageConverter Plus\MemHandler.dll
MOD - [2009/08/07 05:50:00 | 000,479,232 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.WorkflowServices\3.5.0.0__31bf3856ad364e35\System.WorkflowServices.dll
MOD - [2009/08/07 05:49:59 | 000,491,520 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.ServiceModel.Web\3.5.0.0__31bf3856ad364e35\System.ServiceModel.Web.dll
MOD - [2009/06/12 15:32:16 | 000,104,456 | ---- | M] () -- C:\Windows\SysWOW64\EasyHook32.dll
MOD - [2009/03/29 22:42:17 | 002,933,760 | ---- | M] () -- C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
MOD - [2009/02/18 12:39:19 | 000,094,208 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\WindowsFormsIntegration\3.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll
MOD - [2008/09/12 12:51:44 | 000,145,408 | ---- | M] () -- C:\Windows\SysWOW64\APOMngr.DLL
MOD - [2008/09/02 11:07:18 | 000,071,680 | ---- | M] () -- C:\Windows\SysWOW64\CmdRtr.DLL
MOD - [2008/05/30 11:50:28 | 000,581,120 | ---- | M] () -- C:\Windows\mHotkey.exe
MOD - [2008/05/01 22:15:37 | 000,010,240 | ---- | M] () -- C:\Program Files (x86)\Unlocker\UnlockerCOM.dll
MOD - [2008/01/09 19:04:38 | 008,007,680 | ---- | M] () -- C:\Windows\assembly\GAC\Microsoft.mshtml\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.mshtml.dll
MOD - [2007/04/10 17:27:40 | 008,357,424 | ---- | M] () -- C:\Program Files (x86)\CyberLink\InstantBurn\Win2K\Res.dll
MOD - [1998/10/17 08:00:00 | 000,033,792 | ---- | M] () -- C:\Program Files (x86)\WinZip\WZSHLEXT.DLL


========== Win32 Services (SafeList) ==========

SRV:64bit: - [2008/07/22 20:54:06 | 000,015,872 | ---- | M] (Agere Systems) [Auto | Running] -- C:\Windows\SysNative\agr64svc.exe -- (AgereModemAudio)
SRV:64bit: - [2008/07/03 09:36:38 | 000,901,120 | ---- | M] (ATI Technologies Inc.) [Auto | Running] -- C:\Windows\SysNative\Ati2evxx.exe -- (Ati External Event Utility)
SRV:64bit: - [2008/06/11 12:18:30 | 000,024,576 | ---- | M] () [Auto | Running] -- C:\Program Files\GATEWAY\Gateway Recovery Management\Service\ETService.exe -- (ETService)
SRV:64bit: - [2008/01/20 20:47:32 | 000,383,544 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2011/09/19 07:33:37 | 000,062,536 | ---- | M] (White Sky, Inc.) [Auto | Running] -- C:\Program Files (x86)\Constant Guard Protection Suite\IDVaultSvc.exe -- (IDVaultSvc)
SRV - [2011/04/16 18:45:11 | 000,130,008 | R--- | M] (Symantec Corporation) [Unknown | Running] -- C:\Program Files (x86)\Norton Security Suite\Engine\5.1.0.29\ccSvcHst.exe -- (N360)
SRV - [2010/03/18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2009/05/09 14:33:07 | 000,068,096 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe -- (Macromedia Licensing Service)
SRV - [2009/03/29 22:42:14 | 000,066,368 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2009/03/13 15:02:20 | 000,655,624 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2008/12/09 18:40:16 | 000,464,264 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\AskBarDis\bar\bin\AskService.exe -- (ASKService)
SRV - [2008/12/09 18:40:16 | 000,234,888 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\AskBarDis\bar\bin\ASKUpgrade.exe -- (ASKUpgrade)
SRV - [2008/10/30 19:57:33 | 000,079,360 | ---- | M] (Creative Labs) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe -- (Creative ALchemy AL6 Licensing Service)
SRV - [2008/07/20 18:45:06 | 000,354,840 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe -- (IAANTMON) Intel®
SRV - [2008/05/05 16:25:46 | 000,165,416 | ---- | M] (WildTangent, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\Gateway Games\Gateway Game Console\GameConsoleService.exe -- (GameConsoleService)
SRV - [2008/04/29 20:27:50 | 000,417,792 | ---- | M] (Creative Technology Ltd) [Auto | Running] -- C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe -- (CTAudSvcService)
SRV - [2008/01/09 18:27:56 | 000,079,360 | ---- | M] (Creative Labs) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe -- (Creative Audio Engine Licensing Service)
SRV - [2007/01/11 04:02:00 | 000,126,464 | ---- | M] (SEIKO EPSON CORPORATION) [Auto | Running] -- C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE -- (EPSON_PM_RPCV4_01) EPSON V3 Service4(01)


========== Driver Services (SafeList) ==========

DRV:64bit: - [2011/10/03 16:16:49 | 000,174,200 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\SYMEVENT64x86.SYS -- (SymEvent)
DRV:64bit: - [2011/07/05 10:18:38 | 000,029,288 | ---- | M] (StrikeForce Technologies, Inc.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\gidv2.sys -- (GIDv2)
DRV:64bit: - [2011/03/30 21:00:09 | 000,744,568 | ---- | M] (Symantec Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\Drivers\N360x64\0501000.01D\SRTSP64.SYS -- (SRTSP)
DRV:64bit: - [2011/03/30 21:00:09 | 000,040,568 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\N360x64\0501000.01D\SRTSPX64.SYS -- (SRTSPX) Symantec Real Time Storage Protection (PEL)
DRV:64bit: - [2011/03/21 18:39:49 | 000,432,760 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\N360x64\0501000.01D\SYMTDIV.SYS -- (SYMTDIv)
DRV:64bit: - [2011/03/14 20:31:23 | 000,912,504 | ---- | M] (Symantec Corporation) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\N360x64\0501000.01D\SYMEFA64.SYS -- (SymEFA)
DRV:64bit: - [2011/01/27 00:47:10 | 000,450,680 | ---- | M] (Symantec Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\N360x64\0501000.01D\SYMDS64.SYS -- (SymDS)
DRV:64bit: - [2010/11/15 19:45:33 | 000,171,128 | R--- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\N360x64\0501000.01D\Ironx64.SYS -- (SymIRON)
DRV:64bit: - [2010/08/20 22:59:12 | 000,034,152 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\GEARAspiWDM.sys -- (GEARAspiWDM)
DRV:64bit: - [2009/09/30 18:51:42 | 000,046,592 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\wpdusb.sys -- (WpdUsb)
DRV:64bit: - [2009/02/20 11:53:47 | 000,082,816 | ---- | M] (VSO Software) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\pcouffin.sys -- (pcouffin)
DRV:64bit: - [2008/08/14 15:30:10 | 000,335,360 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\RTL8187Se.sys -- (RTL8187Se)
DRV:64bit: - [2008/08/12 18:13:23 | 000,181,024 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RtHDMIVX.sys -- (RTHDMIAzAudService)
DRV:64bit: - [2008/07/22 20:54:33 | 001,253,376 | ---- | M] (Agere Systems) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\agrsm64.sys -- (AgereSoftModem)
DRV:64bit: - [2008/07/20 18:44:54 | 000,402,456 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\DRIVERS\iaStor.sys -- (iaStor)
DRV:64bit: - [2008/07/03 12:36:02 | 004,598,272 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\atikmdag.sys -- (atikmdag)
DRV:64bit: - [2008/06/13 02:41:54 | 000,316,544 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\e1y60x64.sys -- (e1yexpress) Intel®
DRV:64bit: - [2008/06/04 00:06:54 | 000,204,288 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\RTS5121.sys -- (RSUSBSTOR)
DRV:64bit: - [2008/04/10 02:20:00 | 000,028,160 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\gwfilt64.sys -- (gwfilt64)
DRV:64bit: - [2008/02/06 04:00:00 | 000,054,480 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\PxHlpa64.sys -- (PxHlpa64)
DRV:64bit: - [2008/01/20 20:47:28 | 000,048,768 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\avc.sys -- (Avc)
DRV:64bit: - [2008/01/20 20:47:28 | 000,017,536 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\avcstrm.sys -- (AVCSTRM)
DRV:64bit: - [2008/01/20 20:47:01 | 000,056,448 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\mstape.sys -- (MSTAPE)
DRV:64bit: - [2008/01/20 20:46:57 | 000,058,496 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\61883.sys -- (61883)
DRV:64bit: - [2008/01/20 20:46:53 | 000,061,568 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\msdv.sys -- (MSDV)
DRV:64bit: - [2007/06/04 19:11:16 | 000,024,824 | ---- | M] (Cyberlink Co.,Ltd.) [Kernel | System | Running] -- C:\Windows\SysNative\DRIVERS\CLBStor.sys -- (CLBStor)
DRV:64bit: - [2007/06/04 19:11:10 | 000,369,912 | ---- | M] (CyberLink Corporation.) [File_System | Auto | Running] -- C:\Windows\SysNative\DRIVERS\CLBUDF.sys -- (CLBUDF)
DRV - [2011/10/02 01:00:00 | 002,048,632 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.0.0.125\Definitions\VirusDefs\20111010.038\EX64.SYS -- (NAVEX15)
DRV - [2011/10/02 01:00:00 | 000,481,912 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys -- (eeCtrl)
DRV - [2011/10/02 01:00:00 | 000,136,824 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys -- (EraserUtilRebootDrv)
DRV - [2011/10/02 01:00:00 | 000,117,880 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.0.0.125\Definitions\VirusDefs\20111010.038\ENG64.SYS -- (NAVENG)
DRV - [2011/09/30 08:07:42 | 000,488,568 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.0.0.125\Definitions\IPSDefs\20111010.030\IDSviA64.sys -- (IDSVia64)
DRV - [2011/09/29 21:38:50 | 001,152,632 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.0.0.125\Definitions\BASHDefs\20110929.001\BHDrvx64.sys -- (BHDrvx64)
DRV - [2009/09/01 17:51:32 | 000,146,928 | ---- | M] (CyberLink Corp.) [2010/09/21 16:48:36] [Kernel | Auto | Running] -- C:\Program Files (x86)\CyberLink\PowerDVD\000.fcl -- ({95808DC4-FA4A-4C74-92FE-5B863F82066B})
DRV - [2008/06/11 12:13:24 | 000,017,952 | ---- | M] (Acer, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysWOW64\drivers\int15_64.sys -- (int15)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://homepage.gateway.com/rdr.aspx?b=ACGW&l=0409&s=1&o=vp64&d=1008&m=fx6800-01e&c=BB
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://homepage.gateway.com/rdr.aspx?b=ACGW&l=0409&s=1&o=vp64&d=1008&m=fx6800-01e&c=BB


IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



IE - HKU\S-1-5-21-2960005529-3494219434-145418510-1000\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1
IE - HKU\S-1-5-21-2960005529-3494219434-145418510-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.mygiftbasket.us/
IE - HKU\S-1-5-21-2960005529-3494219434-145418510-1000\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKU\S-1-5-21-2960005529-3494219434-145418510-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "Google"
FF - prefs.js..browser.search.defaulturl: "http://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q="
FF - prefs.js..browser.search.selectedEngine: "Yahoo"
FF - prefs.js..browser.startup.homepage: "http://home.iwon.com/iwon-homepage/home.jhtml"
FF - prefs.js..extensions.enabledItems: {BBDA0591-3099-440a-AA10-41764D9DB4DB}:2.0
FF - prefs.js..extensions.enabledItems: {2D3F3651-74B9-4795-BDEC-6DA2F431CB62}:4.6
FF - prefs.js..extensions.enabledItems: {AB2CE124-6272-4b12-94A9-7303C7397BD1}:5.0.0.6778
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\4.0.60531.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Owner\AppData\Local\Google\Update\1.3.21.69\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Owner\AppData\Local\Google\Update\1.3.21.69\npGoogleUpdate3.dll (Google Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{BBDA0591-3099-440a-AA10-41764D9DB4DB}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.0.0.125\IPSFFPlgn\ [2011/10/10 13:09:56 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.0.0.125\coFFPlgn_2011_7_2_3 [2011/10/11 09:30:20 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2011/09/30 10:14:45 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2011/05/06 07:35:24 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.15\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2011/09/30 10:14:45 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.15\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2011/05/06 07:35:24 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.16\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2011/09/30 10:14:45 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.16\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2011/05/06 07:35:24 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.17\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2011/09/30 10:14:45 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.17\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2011/05/06 07:35:24 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 4.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2011/09/30 10:14:45 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 4.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2011/05/06 07:35:24 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 7.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2011/09/30 10:14:45 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 7.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2011/05/06 07:35:24 | 000,000,000 | ---D | M]

[2009/01/11 14:44:34 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Owner\AppData\Roaming\Mozilla\Extensions
[2011/09/29 16:09:49 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\r6km5nx6.default\extensions
[2010/04/27 13:02:10 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\r6km5nx6.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2011/04/16 10:16:29 | 000,000,000 | ---D | M] (Google Toolbar for Firefox) -- C:\Users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\r6km5nx6.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}
[2009/07/03 11:58:21 | 000,000,000 | ---D | M] (IE Tab) -- C:\Users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\r6km5nx6.default\extensions\{77b819fa-95ad-4f2c-ac7c-486b356188a9}
[2009/04/24 10:03:00 | 000,000,000 | ---D | M] ("PPC Web Spy Toolbar") -- C:\Users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\r6km5nx6.default\extensions\{ec9CEB59-8266-438b-91D9-82F56D595E15}(148)
[2011/03/16 16:07:35 | 000,000,000 | ---D | M] ("RankChecker") -- C:\Users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\r6km5nx6.default\extensions\rankchecker@seobook(104).com
[2009/04/23 20:37:36 | 000,000,000 | ---D | M] ("RankChecker") -- C:\Users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\r6km5nx6.default\extensions\rankchecker@seobook(147).com
[2009/09/07 09:46:59 | 000,000,000 | ---D | M] ("RankChecker") -- C:\Users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\r6km5nx6.default\extensions\rankchecker@seobook(455).com
[2009/09/21 09:42:14 | 000,000,000 | ---D | M] ("RankChecker") -- C:\Users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\r6km5nx6.default\extensions\rankchecker@seobook(559).com
[2011/04/23 17:57:09 | 000,000,000 | ---D | M] ("RankChecker") -- C:\Users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\r6km5nx6.default\extensions\rankchecker@seobook(71).com
[2009/04/23 15:55:27 | 000,000,000 | ---D | M] ("RankChecker") -- C:\Users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\r6km5nx6.default\extensions\rankchecker@seobook(95).com
[2009/09/21 09:26:18 | 000,000,000 | ---D | M] ("SEO For Firefox") -- C:\Users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\r6km5nx6.default\extensions\seo4firefox@seobook(560).com
[2009/04/21 13:38:42 | 000,000,000 | ---D | M] ("SEO For Firefox") -- C:\Users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\r6km5nx6.default\extensions\seo4firefox@seobook(96).com
[2011/09/21 16:14:03 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions
[2011/02/10 12:37:14 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
[2011/03/01 18:40:15 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
[2011/10/11 09:30:20 | 000,000,000 | ---D | M] (Norton Toolbar) -- C:\PROGRAMDATA\NORTON\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.0.0.125\COFFPLGN_2011_7_2_3
[2011/10/10 13:09:56 | 000,000,000 | ---D | M] (Symantec IPS) -- C:\PROGRAMDATA\NORTON\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.0.0.125\IPSFFPLGN
[2011/10/03 12:29:26 | 000,000,000 | ---D | M] (CGPS Extension) -- C:\PROGRAMDATA\WHITE SKY, INC\ID VAULT\XPCOM6
() (No name found) -- C:\USERS\OWNER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\R6KM5NX6.DEFAULT\EXTENSIONS\COMPATIBILITY@ADDONS.MOZILLA.ORG.XPI
() (No name found) -- C:\USERS\OWNER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\R6KM5NX6.DEFAULT\EXTENSIONS\RANKCHECKER@SEOBOOK.COM.XPI
[2011/09/29 00:53:40 | 000,134,104 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2011/03/01 18:39:56 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll
[2011/09/28 18:26:50 | 000,002,252 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?client=chrome&hl={language}&q={searchTerms}
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Owner\AppData\Local\Google\Chrome\Application\14.0.835.163\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll
CHR - plugin: QuickTime Plug-in 7.6.6 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.6.6 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.6.6 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.6.6 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.6.6 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.6.6 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.6.6 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin7.dll
CHR - plugin: Java Deployment Toolkit 6.0.220.4 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll
CHR - plugin: Java™ Platform SE 6 U22 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll
CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files (x86)\Microsoft Silverlight\4.0.60531.0\npctrl.dll
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Users\Owner\AppData\Local\Google\Chrome\Application\14.0.835.163\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\Owner\AppData\Local\Google\Chrome\Application\14.0.835.163\pdf.dll
CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files (x86)\Adobe\Reader 8.0\Reader\Browser\nppdf32.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll
CHR - plugin: Google Update (Enabled) = C:\Users\Owner\AppData\Local\Google\Update\1.3.21.65\npGoogleUpdate3.dll
CHR - plugin: Windows Presentation Foundation (Enabled) = c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
CHR - plugin: Default Plug-in (Enabled) = default_plugin
CHR - Extension: AT_ChuckAnderson = C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegkoiakifeoejnjkbnnojkkdoegeofp\3_0\

O1 HOSTS File: ([2011/10/10 14:58:39 | 000,000,027 | ---- | M]) - C:\Windows\SysNative\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O2:64bit: - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5612.1312\swg64.dll (Google Inc.)
O2 - BHO: (Symantec NCO BHO) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Security Suite\Engine\5.1.0.29\coieplg.dll (Symantec Corporation)
O2 - BHO: (Symantec Intrusion Prevention) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Security Suite\Engine\5.1.0.29\ips\ipsbho.dll (Symantec Corporation)
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar.dll ()
O2 - BHO: (Skype Plug-In) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Constant Guard Protection Suite (COM)) - {B84CDBE7-1B46-494B-A188-01D4C52DEB61} - C:\Program Files (x86)\Constant Guard Protection Suite\NativeBHO.dll (WhiteSky)
O2 - BHO: (Google Dictionary Compression sdch) - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files (x86)\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll (Google Inc.)
O2 - BHO: (no name) - MRI_DISABLED - No CLSID value found.
O3 - HKLM\..\Toolbar: (&Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar.dll ()
O3 - HKLM\..\Toolbar: (Ask Toolbar) - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files (x86)\AskBarDis\bar\bin\askBar.dll (Ask.com)
O3 - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Security Suite\Engine\5.1.0.29\coieplg.dll (Symantec Corporation)
O3 - HKU\S-1-5-21-2960005529-3494219434-145418510-1000\..\Toolbar\WebBrowser: (&Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar.dll ()
O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Windows\RAVCpl64.exe (Realtek Semiconductor)
O4:64bit: - HKLM..\Run: [Skytel] Skytel.exe File not found
O4 - HKLM..\Run: [BDRegion] C:\Program Files (x86)\Cyberlink\Shared Files\brs.exe (cyberlink)
O4 - HKLM..\Run: [GIDDesktop] C:\Program Files (x86)\SFT\GuardedID\gidd.exe (StrikeForce Technologies Inc.)
O4 - HKLM..\Run: [InstantBurn] C:\Program Files (x86)\CyberLink\InstantBurn\Win2K\IBurn.exe (CyberLink Corporation.)
O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [StorageGuard] C:\Program Files (x86)\VERITAS Software\Update Manager\sgtray.exe (VERITAS Software, Inc.)
O4 - HKLM..\Run: [VolPanel] C:\Program Files (x86)\Creative\SB X-Fi MB\Volume Panel\VolPanlu.exe (Creative Technology Ltd)
O4 - HKU\.DEFAULT..\RunOnce: [StartMSu] C:\Program Files (x86)\Creative\MediaSource5\Startmsu.exe (Creative Technology Ltd)
O4 - HKU\S-1-5-18..\RunOnce: [StartMSu] C:\Program Files (x86)\Creative\MediaSource5\Startmsu.exe (Creative Technology Ltd)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-2960005529-3494219434-145418510-1000\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-2960005529-3494219434-145418510-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDesktopCleanupWizard = 1
O7 - HKU\S-1-5-21-2960005529-3494219434-145418510-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O9 - Extra Button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O16 - DPF: {CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_12-windows-i586.cab (Java Plug-in 1.6.0_12)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_12-windows-i586.cab (Java Plug-in 1.6.0_12)
O16 - DPF: {3860DD98-0549-4D50-AA72-5D17D200EE10} http://cdn.scan.onecare.live.com/resource/download/scanner/en-us/wlscctrl2.cab (Windows Live OneCare safety scanner control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab (Java Plug-in 1.6.0_05)
O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 68.87.85.98 68.87.69.146 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{6020FDBA-421D-4CA5-B6AF-37495DFFAA66}: DhcpNameServer = 68.87.85.98 68.87.69.146 192.168.0.1
O18:64bit: - Protocol\Handler\ipp - No CLSID value found
O18:64bit: - Protocol\Handler\ipp\0x00000001 - No CLSID value found
O18:64bit: - Protocol\Handler\msdaipp - No CLSID value found
O18:64bit: - Protocol\Handler\msdaipp\0x00000001 - No CLSID value found
O18:64bit: - Protocol\Handler\msdaipp\oledb - No CLSID value found
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O18:64bit: - Protocol\Handler\skype-ie-addon-data - No CLSID value found
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20:64bit: - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) -C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) -C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Windows\Web\Wallpaper\img27.jpg
O24 - Desktop BackupWallPaper: C:\Windows\Web\Wallpaper\img27.jpg
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = ComFile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2011/10/11 08:08:31 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN
[2011/10/11 08:08:31 | 000,000,000 | -HSD | C] -- \$RECYCLE.BIN
[2011/10/10 16:55:40 | 000,000,000 | ---D | C] -- C:\Windows\temp
[2011/10/10 16:55:40 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Local\temp
[2011/10/10 14:02:08 | 000,518,144 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe
[2011/10/10 14:02:08 | 000,406,528 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe
[2011/10/10 14:02:08 | 000,060,416 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe
[2011/10/10 14:02:03 | 000,000,000 | ---D | C] -- C:\Windows\ERDNT
[2011/10/10 13:57:14 | 000,000,000 | ---D | C] -- C:\Qoobox
[2011/10/10 13:57:14 | 000,000,000 | ---D | C] -- \Qoobox
[2011/10/10 10:02:22 | 000,000,000 | ---D | C] -- C:\ProgramData\{3C0AACBF-B491-4BE5-BAF9-AA46E0629E42}
[2011/10/10 08:25:09 | 001,653,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XpsPrint.dll
[2011/10/10 08:25:09 | 000,876,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XpsPrint.dll
[2011/10/06 21:53:00 | 000,000,000 | ---D | C] -- C:\FRST
[2011/10/06 21:53:00 | 000,000,000 | ---D | C] -- \FRST
[2011/10/04 10:39:46 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysWow64\drivers\mbamswissarmy.sys
[2011/10/04 10:39:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2011/10/04 10:39:43 | 000,024,152 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2011/10/04 10:39:43 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2011/10/04 08:06:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Windows Portable Devices
[2011/10/04 08:06:22 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Portable Devices
[2011/10/04 07:47:56 | 000,449,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMPhoto.dll
[2011/10/04 07:47:56 | 000,369,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMPhoto.dll
[2011/10/04 07:47:54 | 001,209,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WindowsCodecs.dll
[2011/10/04 07:47:54 | 000,792,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d11.dll
[2011/10/04 07:47:54 | 000,519,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3d11.dll
[2011/10/04 07:47:54 | 000,411,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PhotoMetadataHandler.dll
[2011/10/04 07:47:54 | 000,328,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxdiag.exe
[2011/10/04 07:47:54 | 000,321,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PhotoMetadataHandler.dll
[2011/10/04 07:47:54 | 000,262,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxdiagn.dll
[2011/10/04 07:47:54 | 000,252,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dxdiag.exe
[2011/10/04 07:47:54 | 000,245,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WindowsCodecsExt.dll
[2011/10/04 07:47:54 | 000,195,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dxdiagn.dll
[2011/10/04 07:47:07 | 000,037,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\BthMtpContextHandler.dll
[2011/10/04 07:47:07 | 000,034,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WPDShextAutoplay.exe
[2011/10/04 07:47:07 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WPDShextAutoplay.exe
[2011/10/04 07:47:05 | 002,727,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wpdshext.dll
[2011/10/04 07:47:05 | 000,573,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wpd_ci.dll
[2011/10/04 07:47:05 | 000,453,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PortableDeviceApi.dll
[2011/10/04 07:47:05 | 000,433,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WPDSp.dll
[2011/10/04 07:47:05 | 000,350,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WPDSp.dll
[2011/10/04 07:47:05 | 000,295,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WpdMtp.dll
[2011/10/04 07:47:05 | 000,218,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PortableDeviceWMDRM.dll
[2011/10/04 07:47:05 | 000,214,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PortableDeviceTypes.dll
[2011/10/04 07:47:05 | 000,196,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PortableDeviceWMDRM.dll
[2011/10/04 07:47:05 | 000,113,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PortableDeviceClassExtension.dll
[2011/10/04 07:47:05 | 000,110,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WPDShServiceObj.dll
[2011/10/04 07:47:05 | 000,100,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PortableDeviceClassExtension.dll
[2011/10/04 07:47:05 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PortableDeviceConnectApi.dll
[2011/10/04 07:47:05 | 000,075,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WpdMtpUS.dll
[2011/10/04 07:47:05 | 000,060,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PortableDeviceConnectApi.dll
[2011/10/04 07:47:05 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\WpdUsb.sys
[2011/10/04 07:47:05 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WpdConns.dll
[2011/10/04 07:45:54 | 000,315,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\oleacc.dll
[2011/10/04 07:45:54 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\oleaccrc.dll
[2011/10/04 07:45:54 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\oleaccrc.dll
[2011/10/04 07:45:53 | 000,736,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\UIAutomationCore.dll
[2011/10/04 07:45:53 | 000,555,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\UIAutomationCore.dll
[2011/10/04 07:31:30 | 003,815,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\UIRibbon.dll
[2011/10/04 07:31:30 | 001,164,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\UIRibbonRes.dll
[2011/10/04 07:31:30 | 001,164,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\UIRibbonRes.dll
[2011/10/04 07:31:30 | 000,103,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\UIAnimation.dll
[2011/10/04 07:31:30 | 000,092,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\UIAnimation.dll
[2011/10/04 07:31:29 | 003,023,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\UIRibbon.dll
[2011/10/04 07:26:47 | 000,000,000 | ---D | C] -- C:\Config.Msi
[2011/10/04 07:26:47 | 000,000,000 | ---D | C] -- \Config.Msi
[2011/10/03 14:26:33 | 000,479,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XpsGdiConverter.dll
[2011/10/03 14:26:33 | 000,288,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XpsGdiConverter.dll
[2011/10/03 14:26:32 | 001,555,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DWrite.dll
[2011/10/03 14:26:25 | 000,316,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msshsq.dll
[2011/10/03 14:26:20 | 000,451,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winsrv.dll
[2011/10/03 14:26:18 | 000,834,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d2d1.dll
[2011/10/03 14:26:18 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XpsRasterService.dll
[2011/10/03 14:26:17 | 003,068,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xpsservices.dll
[2011/10/03 14:26:17 | 002,002,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10warp.dll
[2011/10/03 14:26:17 | 001,257,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MFH264Dec.dll
[2011/10/03 14:26:17 | 000,979,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MFH264Dec.dll
[2011/10/03 14:26:17 | 000,566,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10level9.dll
[2011/10/03 14:26:17 | 000,327,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10_1core.dll
[2011/10/03 14:26:17 | 000,287,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10core.dll
[2011/10/03 14:26:17 | 000,047,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cdd.dll
[2011/10/03 14:26:16 | 001,461,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\OpcServices.dll
[2011/10/03 14:26:16 | 001,268,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10.dll
[2011/10/03 14:26:16 | 000,625,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxgi.dll
[2011/10/03 14:26:16 | 000,196,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10_1.dll
[2011/10/03 14:26:16 | 000,135,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XpsRasterService.dll
[2011/10/03 14:26:15 | 001,554,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xpsservices.dll
[2011/10/03 14:26:15 | 001,032,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\printfilterpipelinesvc.exe
[2011/10/03 14:26:15 | 000,847,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\OpcServices.dll
[2011/10/03 14:26:15 | 000,428,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MFHEAACdec.dll
[2011/10/03 14:26:15 | 000,377,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfmp4src.dll
[2011/10/03 14:26:15 | 000,366,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winspool.drv
[2011/10/03 14:26:15 | 000,357,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MFHEAACdec.dll
[2011/10/03 14:26:15 | 000,345,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfreadwrite.dll
[2011/10/03 14:26:15 | 000,302,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfmp4src.dll
[2011/10/03 14:26:15 | 000,261,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfreadwrite.dll
[2011/10/03 14:26:14 | 003,548,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mf.dll
[2011/10/03 14:26:14 | 002,873,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mf.dll
[2011/10/03 14:26:14 | 001,204,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\shdocvw.dll
[2011/10/03 14:26:14 | 000,278,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfplat.dll
[2011/10/03 14:26:13 | 000,748,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\stobject.dll
[2011/10/03 14:26:13 | 000,209,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfplat.dll
[2011/10/03 14:26:12 | 000,195,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfps.dll
[2011/10/03 14:26:12 | 000,098,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfps.dll
[2011/10/03 14:26:12 | 000,035,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\printfilterpipelineprxy.dll
[2011/10/03 14:26:12 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfpmp.exe
[2011/10/03 14:25:36 | 000,180,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xmllite.dll
[2011/10/03 14:24:49 | 000,759,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
[2011/10/03 14:24:49 | 000,478,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
[2011/10/03 14:24:49 | 000,108,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\url.dll
[2011/10/03 14:24:49 | 000,106,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\url.dll
[2011/10/03 14:24:47 | 000,590,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
[2011/10/03 14:24:47 | 000,485,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\html.iec
[2011/10/03 14:24:47 | 000,422,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dll
[2011/10/03 14:24:47 | 000,389,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\html.iec
[2011/10/03 14:24:47 | 000,380,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dll
[2011/10/03 14:24:47 | 000,249,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iepeers.dll
[2011/10/03 14:24:47 | 000,193,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iepeers.dll
[2011/10/03 11:30:10 | 000,034,152 | ---- | C] (GEAR Software Inc.) -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys
[2011/10/03 11:30:09 | 000,174,200 | ---- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\SYMEVENT64x86.SYS
[2011/10/03 11:30:09 | 000,000,000 | ---D | C] -- C:\Program Files\Symantec
[2011/10/03 11:29:46 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Security Suite
[2011/10/03 11:29:46 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Norton Security Suite
[2011/10/03 11:29:40 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\NortonInstaller
[2011/10/03 11:23:23 | 000,029,288 | ---- | C] (StrikeForce Technologies, Inc.) -- C:\Windows\SysNative\drivers\gidv2.sys
[2011/10/03 11:23:21 | 000,467,224 | ---- | C] (StrikeForce Technologies Inc.) -- C:\Windows\SysNative\GIDHOOK64.DLL
[2011/10/03 11:23:21 | 000,446,752 | ---- | C] (StrikeForce Technologies Inc.) -- C:\Windows\SysNative\GIDHookLogon64.dll
[2011/10/03 11:23:21 | 000,206,608 | ---- | C] (StrikeForce Technologies Inc.) -- C:\Windows\SysNative\GIDBIN1.DLL
[2011/10/03 11:23:21 | 000,102,160 | ---- | C] (StrikeForce Technologies Inc.) -- C:\Windows\SysNative\GIDBIN3.DLL
[2011/10/03 11:20:16 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink PowerDVD
[2011/10/03 08:54:34 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\vi-VN
[2011/10/03 08:54:34 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\eu-ES
[2011/10/03 08:54:34 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\eu-ES
[2011/10/03 08:54:34 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\ca-ES
[2011/10/03 08:54:34 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\ca-ES
[2011/10/03 08:54:33 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\vi-VN
[2011/09/30 13:09:48 | 000,000,000 | ---D | C] -- C:\Windows\system64
[2011/09/29 15:57:53 | 000,065,816 | ---- | C] (StrikeForce Technologies Inc.) -- C:\Windows\SysNative\GIDLogonCP64.dll
[2011/09/29 15:24:48 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\Gl0v4W9YrAoGdZk
[2011/09/29 15:24:47 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\GUlB0cv34mWf9Ye
[2011/09/29 15:24:46 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\BosTBumKXtiQLCN
[2011/09/29 15:24:44 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\OiQLecF7jO2aRVy
[2011/09/29 15:24:43 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\xQ8YrPiQ8TePiFs
[2011/09/29 15:24:42 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\fCIzy1Dbp5JEgqC
[2011/09/29 15:24:41 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\UcahznLzbEU1sje
[2011/09/29 15:24:40 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\Zet01Dna6JEgqCI
[2011/09/29 15:24:40 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\FLTjeVOxu2Fms6K
[2011/09/29 15:24:39 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\Qv4Wd8ZYkrNAci3
[2011/09/29 15:24:37 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\Tna6KEgqCIzy1Sb
[2011/09/29 15:24:37 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\bSvna6KEgqCIzy1
[2011/09/29 15:24:36 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\i6RwIyDaJgCzupJ
[2011/09/29 15:24:35 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\rEgqCIzt0
[2011/09/29 15:24:34 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\o7LTjeBPxu2Fms7
[2011/09/29 15:24:26 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\Obo4HWf9XCBPxu2
[2011/09/29 15:24:26 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\Jt01Dna67LXUkrN
[2011/09/29 15:24:25 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\IrzONyxA0v2b3m5
[2011/09/29 15:24:21 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\krzONtxA0v2b3m5
[2011/09/29 15:24:20 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ywkIVrzONx0v2b3
[2011/09/29 15:24:20 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\VONtxA0uv
[2011/09/29 15:24:20 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\pRLweBzci2Fmsf8
[2011/09/29 15:24:20 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\fd8LTjCBPci2nms
[2011/09/29 15:24:15 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\rwUVrOx0uSiDpGa
[2011/09/29 15:24:15 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\Qt0ucS1ib3n4Q6W
[2011/09/29 15:24:12 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\HTXwjUCelBzNc1v
[2011/09/29 15:24:12 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\GNycA1ivDo
[2011/09/29 15:21:00 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\HzONyxA1uSoFpGs
[2011/09/29 15:20:37 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\s2ibF3pmGaJdKfZ
[2011/09/29 15:20:31 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\WkIBrzONyAuS
[2011/09/29 15:20:31 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\CCekIBrzOyA
[2011/09/29 15:20:30 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\YYCekIBrzN
[2011/09/29 15:20:30 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\E7fEL9gTXjCkBzN
[2011/09/29 15:20:29 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\jjYCekIBrO
[2011/09/29 15:20:13 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\wEL8gTZqjCkVzNx
[2011/09/29 15:16:44 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\LJSULncrU9J3cOw
[2011/09/29 15:16:44 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\L7brkZWQD1Owfmy
[2011/09/29 15:16:40 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\oxr9ZJSCEbrZQF
[2011/09/29 15:16:34 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\yQVGqDq2hDqbwGI
[2011/09/29 15:16:33 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\WGqDq2hDq
[2011/09/29 15:16:31 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\xDYnlE3zgGuqJF
[2011/09/29 15:16:31 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\nAZ3eWAZ3Ar9
[2011/09/29 15:16:29 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\nPE081T2XGeQ
[2011/09/29 15:16:29 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\B0Z19uRSLiguKtm
[2011/09/29 15:16:28 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\dHrduTFIJyXmO8v
[2011/09/29 15:16:27 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\RXb9okQPLSwQNR3
[2011/09/29 15:16:22 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\sSKS9DhGz7ARoI5
[2011/09/29 15:16:21 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\N5woqD8PHBHrmX
[2011/09/29 15:16:17 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\RJUvfrpq0HUvZiw
[2011/09/29 15:16:13 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\pYcWCvEr3
[2011/09/29 15:16:09 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\hpLyExWPs
[2011/09/29 15:16:04 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\FEIS6wyaTN4glbW
[2011/09/29 15:16:02 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\KTBvH8kuGXz3sqA
[2011/09/29 15:15:58 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\nnfVbEUSH
[2011/09/29 15:15:58 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\BGfjt1FJgIt2m6R
[2011/09/29 15:15:56 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\DTB1aEeu6wy49ro
[2011/09/29 15:15:55 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\NwIyDm7YOvm8k0o
[2011/09/29 15:15:51 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\YDm7TeOu4sgXl
[2011/09/29 15:15:49 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\lXlNv4W8Y
[2011/09/29 15:15:48 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\LHWfLqerNxv
[2011/09/29 15:15:47 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\yySGdZkBcDGQs79
[2011/09/29 15:15:47 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\gfZkNv3JgXly3Hf
[2011/09/29 15:15:46 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\cJWf9XUlt0Av
[2011/09/29 15:15:44 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ZFGQdKqXUlt0SDn
[2011/09/29 15:15:40 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\T1ibD3onGaHsKfL
[2011/09/29 15:15:40 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\JibD3onG4Q6W7R9
[2011/09/29 15:15:36 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\VbD3pnG4aHdK
[2011/09/29 15:15:36 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ROBtxP0uc1b3n4Q
[2011/09/29 15:15:33 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\sucS2ibD3n5Q6W8
[2011/09/29 15:15:28 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\P1ivD3onGaHsKf
[2011/09/29 15:15:25 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ojUCekIBrPyAuDo
[2011/09/29 15:15:22 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\xF4pmH5sW7E8Tq
[2011/09/29 15:15:21 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\H5sQJ7dEKgZ
[2011/09/29 15:15:08 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\TIBtzP0yc1v3n4m
[2011/09/29 15:15:04 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\pF4amH5sW7E8
[2011/09/29 15:15:04 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\HK8fRZ9hYwUeOt
[2011/09/29 15:15:04 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\eZ9hYXwjUeOtPyS
[2011/09/29 15:15:03 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\GS2ibD3pn5Q6W
[2011/09/29 15:15:02 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\vEL8gRZqhCkVl
[2011/09/29 15:15:02 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\sOP0c1bDna6KRgq
[2011/09/29 15:15:02 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\oQd8ZhYkeOP1bnQ
[2011/09/29 15:15:02 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\eW7RTUCIBzNuDo
[2011/09/29 15:15:02 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\bhkeOP01bGQ
[2011/09/29 15:15:01 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\Rv3GQd8ZhkeOPci
[2011/09/29 15:15:01 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\QYIzy0Sbp5JEg9Y
[2011/09/29 15:15:01 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\HeIrxoGdhwVOx0i
[2011/09/29 15:14:59 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\cxiGdLjBA
[2011/09/29 15:14:58 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\rQdZkBcDQ
[2011/09/29 15:14:58 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\l3mfXkNFd
[2011/09/29 15:14:56 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\Q7LTjwVOxu2
[2011/09/29 15:14:54 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\dLTjeVx2m6RwVOx
[2011/09/29 15:14:52 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ti3GQd8ZTjVBPyi
[2011/09/29 15:14:52 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\mCwkIVrlOtAu2Fn
[2011/09/29 15:14:51 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\XZYUlt01in
[2011/09/29 15:14:51 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\HPSbp4HdRhqCIzy
[2011/09/29 15:14:49 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\YEgqCIzt0Sbp5JE
[2011/09/29 15:14:49 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\RtNAvo4HW8wNvpJ
[2011/09/29 15:14:48 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\RPci2Fms7LTjwVO
[2011/09/29 15:14:45 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\zPci3Fms7LTjerN
[2011/09/29 15:14:45 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\sqIx2n6Rwlt
[2011/09/29 15:14:44 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\Ep5JE8qYIlt0Sbp
[2011/09/29 15:14:44 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\aqCzAvomWEgqCIl
[2011/09/29 15:14:43 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\YLCOv4QKhVxi4W9
[2011/09/29 15:14:40 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\zL9XjUCelz
[2011/09/29 15:14:40 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\NO2sRVcGfex47YN
[2011/09/29 15:14:40 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\JCelIBtzPyAiDoF
[2011/09/29 15:14:37 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\htASbp5JWf9XUlt
[2011/09/29 15:14:37 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ht0Sbpa6WRhjeBP
[2011/09/29 15:14:36 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\wSbp4HWf9XUlr
[2011/09/29 15:14:36 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\gZkBc3Q7XlNv4W
[2011/09/29 15:14:32 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\jgRZqhYCwU
[2011/09/29 15:14:31 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\o3onG4aQHsKfLgX
[2011/09/29 15:14:30 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ZTwOubaKhVz1n6E
[2011/09/29 15:14:29 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ZLThkrNAci3GQd8
[2011/09/29 15:14:29 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ZdEgqCklt0cipa6
[2011/09/29 15:12:13 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\rmmGG5sQJ6dE
[2011/09/29 15:12:05 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\yRZZ9hhTXwjVeIB
[2011/09/29 15:11:57 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\nwwkkIVrlONt
[2011/09/29 15:11:49 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\zssWWJ7dEL8gZ
[2011/09/29 15:11:41 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\E5ssWWJ7dEL8TZh
[2011/09/29 15:11:34 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\OWWJJ7ddELgTZhC
[2011/09/29 15:11:25 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\oOOBBtxP0ucSib3
[2011/09/29 15:11:17 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\SVVrllOBtxP0c
[2011/09/29 15:11:13 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\Jeud
[2011/09/29 15:11:10 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\XUVVrllOBtx0uS1
[2011/09/29 15:11:01 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\EWKK7ffEL9gXq
[2011/09/29 15:10:54 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\RLL99gTXqjY
[2011/09/29 15:10:46 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\DEEEL9ggTXjYCkB
[2011/09/29 15:10:39 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\jekkIIBrzONyA1v
[2011/09/29 15:10:31 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\p111uvvS2
[2011/09/29 15:10:23 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\SmGG55sQJ7
[2011/09/29 15:10:16 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\OEEKK8gRZq
[2011/09/29 15:10:08 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\KdEEKK8gRZqhXwU
[2011/09/29 15:10:01 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\VrrllOBtx
[2011/09/29 15:09:54 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\fPPP0uccS1bD3n4
[2011/09/29 15:09:46 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\S4aaQQH6dW
[2011/09/29 15:09:38 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\zKKK7fRRL9
[2011/09/29 15:09:31 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\x99hhTXqqUCelBz
[2011/09/29 15:09:23 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ErrrzPPNyc
[2011/09/29 15:09:16 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\gyccAA1uvD2oF4m
[2011/09/29 15:09:08 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\JF44pmmH5
[2011/09/29 15:09:01 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\WqhhYYCwkIVrONx
[2011/09/29 15:08:54 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\tOOONtxxA0cS2b3
[2011/09/29 15:08:46 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\uYYCCwkIVrlOtx0
[2011/09/29 15:08:39 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\zNNNtxxA0uc2iF3
[2011/09/29 15:08:31 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\PcccS22ibF3nGaQ
[2011/09/29 15:08:23 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\pJJ66dWKK
[2011/09/29 15:08:16 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\RWWWK88fRZ9TXjU
[2011/09/29 15:08:08 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\X99hhTXXwjVelBz
[2011/09/29 15:08:01 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\FBttzzP0ycA1vDo
[2011/09/29 15:07:53 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\EnnF44amH6
[2011/09/29 15:07:46 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\BammHH6sWJ7fL9T
[2011/09/29 15:07:39 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\aEEEL9ggTZjYCkV
[2011/09/29 15:07:31 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\sZZZqjjYCekVrON
[2011/09/29 15:07:23 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\LIIIVrrzONyA0vS
[2011/09/29 15:07:16 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\VbFF3ppmG
[2011/09/29 15:07:09 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\BGG55sQQJ6EK8R9
[2011/09/29 15:07:01 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\iZZZ9hhYXw
[2011/09/29 15:06:54 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\JyyycS11ib3on4Q
[2011/09/29 15:06:46 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\P44aQQH6sWK7RLg
[2011/09/29 15:06:39 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\U77ffRL9gTXqUCk
[2011/09/29 15:06:31 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\LAAA1uuvD2o
[2011/09/29 15:06:24 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\NCCeekIBrzPNxA
[2011/09/29 15:06:16 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\cffRLL9gTXqjCeI
[2011/09/29 15:06:08 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\KG44aQQH6sW7fL9
[2011/09/29 15:06:00 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\SBBttxP0ycS1bDo
[2011/09/29 15:05:52 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\p5ssQJJ6dEKgR9h
[2011/09/29 15:05:44 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\PAAA0uuvS2oF3mG
[2011/09/29 15:05:37 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\VOOONyxxA0vS
[2011/09/29 15:05:29 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\zqqjjYCekIVrONx
[2011/09/29 15:05:21 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\pjjYYCekkVrz
[2011/09/29 15:05:13 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\jiivvD3onF4aH6W
[2011/09/29 15:05:05 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\DfRRZZ9hTXwjVeI
[2011/09/29 15:04:58 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\IbbbF33pnG5QJdW
[2011/09/29 15:04:50 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\yTZZqhhYCwkVrO
[2011/09/29 15:04:42 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\TppmmH5ssJ7dE8T
[2011/09/29 15:04:34 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\UuuvvD2onF4pH5W
[2011/09/29 15:04:26 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\iCCCellIBrzNyA1
[2011/09/29 15:04:18 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\SHHH6ddWK7fL9TX
[2011/09/29 15:04:11 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\CQHH66dWK7fR9hX
[2011/09/29 15:04:03 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\vuuccS1ibD3pG4Q
[2011/09/29 15:03:55 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\zppnnG4aaH6dW7R
[2011/09/29 15:03:48 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\OqqjjUCelI
[2011/09/29 15:03:40 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\WNyyccA1uvD2
[2011/09/29 15:03:33 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\HBBrrzPPNyA1uDo
[2011/09/29 15:03:25 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\TnnnF44pm
[2011/09/29 15:03:18 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\vdddELL8gT
[2011/09/29 15:03:10 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\tqqhhYCwwI
[2011/09/29 15:03:03 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\GwwkkIVrrONtx0c
[2011/09/29 15:02:55 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\uOONNtxA0ucSib3
[2011/09/29 15:02:48 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\KA00uccS2ib3pG5
[2011/09/29 15:02:40 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\GF33ppnG5aQJdW8
[2011/09/29 15:02:33 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\w666dWWK8fR9hXw
[2011/09/29 15:02:25 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\mjjjUVVelIBzPyc
[2011/09/29 15:02:18 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\DPP0yycA1ivDon4
[2011/09/29 15:02:11 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\rWWWJ7ffELgTZjC
[2011/09/29 15:02:03 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\a00uuvS22b
[2011/09/29 15:01:56 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\jvvvS22obF3mGsQ
[2011/09/29 15:01:48 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\p00uuvS2obF3mGs
[2011/09/29 15:01:41 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\uggRRZ9hY
[2011/09/29 15:01:33 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\atttxPP0ycSib
[2011/09/29 15:01:26 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\FllOBBtxP0yc1iD
[2011/09/29 15:01:18 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\BKK88gRZ9hYXkUe
[2011/09/29 15:01:10 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\W66ddEK8gRZ9YXk
[2011/09/29 15:01:03 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\IEEEK88gRZ9Y
[2011/09/29 15:00:55 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\OZZ99hYXwk
[2011/09/29 15:00:48 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\zXwwkkUVelOBxPy
[2011/09/29 15:00:40 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\yVVVellOBtx0yS1
[2011/09/29 15:00:32 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\rYXXwwkUVelO
[2011/09/29 15:00:24 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\gAA00uvS2obFpm5
[2011/09/29 15:00:17 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\XbFF3ppmG5sJ6EK
[2011/09/29 15:00:09 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\oJJ6ddEK8gRZhYw
[2011/09/29 15:00:02 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\nOOOBttxP0yS
[2011/09/29 14:59:55 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\donnG44aQH6WKfR
[2011/09/29 14:59:47 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\cffRRL9ggXqjUeI
[2011/09/29 14:59:40 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\J99ggTXqjUCeIBz
[2011/09/29 14:59:31 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\etttxPP0ycSib3o
[2011/09/29 14:59:23 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\LGG55sQJ6dEKgR9
[2011/09/29 14:59:16 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ozzOONyxA0uv2oF
[2011/09/29 14:59:08 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\eEELL9gTTqjYCkV
[2011/09/29 14:59:00 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\RBBBtzPP0yA
[2011/09/29 14:58:52 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\pbbFF3pnn5aQJdK
[2011/09/29 14:58:43 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\q888gTTZqhYw
[2011/09/29 14:58:35 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\fnnGG4aQQ6dWKfL
[2011/09/29 14:58:27 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\RbbbF44pmG5QJdE
[2011/09/29 14:58:19 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\YxxAA1uuvSobFpG
[2011/09/29 14:58:11 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\b66ssWK7fEL9TXj
[2011/09/29 14:58:03 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\m33oonGG4aH6sKf
[2011/09/29 14:57:55 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\EYYYXwwjUVeOBzP
[2011/09/29 14:57:47 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\TEEKK8fRZ
[2011/09/29 14:57:40 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\G22ibbF3pm
[2011/09/29 14:57:32 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\uttxxA0uvS2iF3m
[2011/09/29 14:57:24 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\VqjjYYCwkIVrONx
[2011/09/29 14:57:17 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\BkkkIVVrzONxAuv
[2011/09/29 14:57:09 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\xL88ggTZqjYCkIr
[2011/09/29 14:57:01 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\PeeelIBBtzN
[2011/09/29 14:56:53 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\g6ddWWK8fRL
[2011/09/29 14:56:45 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ZYYCCwkkUVlONx0
[2011/09/29 14:56:37 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\hkUUVVrlONtx0uS
[2011/09/29 14:56:29 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\bBBrrzPPNyA1uDo
[2011/09/29 14:56:21 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\cssWWK7fRL9gXqU
[2011/09/29 14:56:13 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\hHH66sWK7
[2011/09/29 14:56:05 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\JwwkkUVVelBtx0c
[2011/09/29 14:55:57 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\RbbbF33pmG5QJd
[2011/09/29 14:55:50 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\O3ppmGG5sQ
[2011/09/29 14:55:41 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\QSSS2ibbF3n
[2011/09/29 14:55:33 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\pZZqqhYCC
[2011/09/29 14:55:24 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\BOONNyxAAu
[2011/09/29 14:55:16 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\jCCeekIBrzONxAu
[2011/09/29 14:55:08 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\BgggTXXqjYCkIrz
[2011/09/29 14:55:00 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\UvvDD3oonGamHsK
[2011/09/29 14:54:51 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\VBBttzPNNcA1iDo
[2011/09/29 14:54:43 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\fVVVrllONtx0uS2
[2011/09/29 14:54:36 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\I33ppnG5aQH6WKf
[2011/09/29 14:54:27 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\n66ssWK7fRL9TXj
[2011/09/29 14:54:19 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\KRZZ99hYXwkUelB
[2011/09/29 14:54:11 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\E00yycS1ib
[2011/09/29 14:54:04 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\m3oonnG4aQ
[2011/09/29 14:53:56 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\I7ffRRL9gTXq
[2011/09/29 14:53:49 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\JeeekIIBrzPyx1u
[2011/09/29 14:53:41 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\WrrrzPNNyx1u
[2011/09/29 14:53:34 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ZjjjUCCekIBzPyx
[2011/09/29 14:53:26 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\dRRLL9gTX
[2011/09/29 14:53:18 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\v33oonG4aQ
[2011/09/29 14:53:10 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\LxPP0yycS1iD3n
[2011/09/29 14:53:03 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ettxxP0ycS1iD3n
[2011/09/29 14:52:55 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\iP00yycS1ibDon4
[2011/09/29 14:52:47 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\EcSS11ibD3on4aH
[2011/09/29 14:52:40 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\SyccSS1ibD
[2011/09/29 14:52:32 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\QoobbF33pm5sQ6
[2011/09/29 14:52:23 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ZHHH6sWWJ7EL9Tq
[2011/09/29 14:52:15 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\edWWKK8fRZ9hXwU
[2011/09/29 14:52:07 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\E22ibbF3pnG5QJd
[2011/09/29 14:51:59 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\VyyycAA1uvDon4p
[2011/09/29 14:51:51 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\K444aQQH6d
[2011/09/29 14:51:43 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\BQQQH6ddWKfRLhX
[2011/09/29 14:51:36 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\SqjjUCCelI
[2011/09/29 14:51:29 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\TNNyycA1uvD2
[2011/09/29 14:51:21 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\orrrzPPNycAuv2o
[2011/09/29 14:51:13 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\W6ddWWK7fRL9TXj
[2011/09/29 14:51:06 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\irrzzPNycA
[2011/09/29 14:50:58 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\VzzPPNycA1uv2oF
[2011/09/29 14:50:50 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\XeeelIBBrzNyc
[2011/09/29 14:50:43 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\dPPNNycAAuvD
[2011/09/29 14:50:35 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\wNyycAA1uvDon4p
[2011/09/29 14:50:28 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\sPPNyycA1uvDon4
[2011/09/29 14:50:20 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\RWKK77fRL9hTqj
[2011/09/29 14:50:12 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\LuccSS1ibD3pG4
[2011/09/29 14:50:04 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\HBBttxP0ucS1bDp
[2011/09/29 14:49:56 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\GddEEK8gRZqhXwU
[2011/09/29 14:49:48 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\vG55sQQJ7d
[2011/09/29 14:49:41 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\IyyxxA1uuS2o
[2011/09/29 14:49:33 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\LaaamHH6sWKfE9g
[2011/09/29 14:49:24 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\E88ffRZZ9h
[2011/09/29 14:49:16 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\oIVVrzzONtx0uS2
[2011/09/29 14:49:08 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\u55ssWJ77EL8gZj
[2011/09/29 14:49:01 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\Y55ssWJ7fE
[2011/09/29 14:48:53 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ijjjUCCelIBzPyc
[2011/09/29 14:48:45 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\HnnGG5aQH6dW8fL
[2011/09/29 14:48:37 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\fYYCwwkUVrlOt
[2011/09/29 14:48:29 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\X888gRZZqhCwkVl
[2011/09/29 14:48:21 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\wppmmH5sQJ7dL8R
[2011/09/29 14:48:14 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\zvvDD2obb4pmH
[2011/09/29 14:48:06 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\dssQQJ77dE8gRqY
[2011/09/29 14:47:58 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\TrrzPPNyxA1u
[2011/09/29 14:47:50 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\HRRLL9gTXqjUek
[2011/09/29 14:47:43 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\iHHH6ssWK7fL9TX
[2011/09/29 14:47:35 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\QOOOBtxxP0cS1b3
[2011/09/29 14:47:27 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\wgggRZZ9hYXkUel
[2011/09/29 14:47:19 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\a8ggRZZ9hYXkU
[2011/09/29 14:47:11 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\Q7ffEEL9gTZ
[2011/09/29 14:47:03 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\CLL99gTZqjYCkIr
[2011/09/29 14:46:56 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ImmmH66sWJ7E
[2011/09/29 14:46:48 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\f99hhTXwjUVeIBz
[2011/09/29 14:46:40 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\JffRRZ9hTXwj
[2011/09/29 14:46:32 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\EhhTTXwjjV
[2011/09/29 14:46:25 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\peeelIBBt
[2011/09/29 14:46:17 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\azzzP0yycAivDoF
[2011/09/29 14:46:10 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\tBBBtzPP0yA1iDo
[2011/09/29 14:46:02 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\eUUUVeelIBtP0cA
[2011/09/29 14:45:54 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\sjUUVeelIBtP0cA
[2011/09/29 14:45:47 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\cwwjjUVelIBt
[2011/09/29 14:45:39 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\SIIBttzP0y
[2011/09/29 14:45:31 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\zccAA1ivD3
[2011/09/29 14:45:24 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\qonnFF4am
[2011/09/29 14:45:17 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ATTZZqjYCekIrzN
[2011/09/29 14:45:09 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\SCCCekIIVrONy
[2011/09/29 14:45:01 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\bEEEL99gTZqYCkI
[2011/09/29 14:44:54 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\SWJJ7ffEL9
[2011/09/29 14:44:46 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\J777fEEL9gTqjCe
[2011/09/29 14:44:39 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\qeeekIVVr
[2011/09/29 14:44:31 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\VyyyxA00u
[2011/09/29 14:44:23 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\gkkkIVrrzOyxAu
[2011/09/29 14:44:16 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\oCCCekIIVrONyAu
[2011/09/29 14:44:08 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\iaaamH66sW7fE9T
[2011/09/29 14:44:00 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\oWWJ77fEL9gTqjC
[2011/09/29 14:43:53 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\gDDD3oonF4aH6WJ
[2011/09/29 14:43:44 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\QbbbF33pnG5QJdW
[2011/09/29 14:43:36 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\pYYYCwwkIVrONxA
[2011/09/29 14:43:28 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\GyccAA1uvD2oF
[2011/09/29 14:43:21 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\c22oonF44mH5
[2011/09/29 14:43:13 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\RnnnG44aQH6WKf
[2011/09/29 14:43:04 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\JNNyyxA1uvS2bFp
[2011/09/29 14:42:56 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\WlllOBttzPycSiD
[2011/09/29 14:42:48 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\F66ssWK7fEL9
[2011/09/29 14:42:39 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\KcAA1iivD2oF4mH
[2011/09/29 14:42:32 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ZlllIBBtzPNc
[2011/09/29 14:42:21 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\C666sWJJ7fL9gZ
[2011/09/29 14:42:13 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\b66ddWK8fRZ9TX
[2011/09/29 14:42:05 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\zCCwwkIVrlONxAu
[2011/09/29 14:41:56 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\GGGG4aaQH6
[2011/09/29 14:41:49 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\IRLL99hTXqjU
[2011/09/29 14:41:41 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\vssQQJ7dEK8gZqY
[2011/09/29 14:41:32 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\QoonnG44am6sW7E
[2011/09/29 14:41:23 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\pLL88gTZqjYCkIr
[2011/09/29 14:41:16 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\QjjjYCCwkIVzOt
[2011/09/29 14:41:08 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\jssWWJ7fEL8gZqY
[2011/09/29 14:41:00 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\KUUUCeelIB
[2011/09/29 14:40:51 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\OPPPNyxxA1vD2b4
[2011/09/29 14:40:44 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\dBrrzPPNyxAu
[2011/09/29 14:40:36 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\aUUCCekIIrzPNx1
[2011/09/29 14:40:28 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\Z222obbF4
[2011/09/29 14:40:21 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\WHHH5ssQJ
[2011/09/29 14:40:13 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\cNNNyxAA1
[2011/09/29 14:40:06 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ussQQJ7dEL8gZqY
[2011/09/29 14:39:58 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\XCCwwkUUVrONtPu
[2011/09/29 14:39:51 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ittxxP00uc2ib3n
[2011/09/29 14:39:44 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\rWWWK88fRL9T
[2011/09/29 14:39:36 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\KeellIBBtzNyc1v
[2011/09/29 14:39:29 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\z55ssWJ77E
[2011/09/29 14:39:22 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\xIIVVrzONtxAuv2
[2011/09/29 14:39:14 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\oiibbF3pmG5aJ6E
[2011/09/29 14:39:07 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\kddEKK8fRZ9hXwU
[2011/09/29 14:38:59 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ItttzPP0ycSiv3o
[2011/09/29 14:38:52 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\unnGG4aamHsWKfL
[2011/09/29 14:38:45 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\DssWWK7ffL9gTqY
[2011/09/29 14:38:37 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\o777fEEL9gTqjC
[2011/09/29 14:38:29 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\mTTTXqqjYCeIB
[2011/09/29 14:38:22 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\gyxxAA1uvS2oF4m
[2011/09/29 14:38:15 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\l55ssQJ77EK8gZh
[2011/09/29 14:38:07 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\PEEKK8ggRZhYXkV
[2011/09/29 14:38:00 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\qxxxP00ucS1b
[2011/09/29 14:37:52 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\taaQQH6dWK7fL9T
[2011/09/29 14:37:45 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\fhTTXqqjUCeIBzP
[2011/09/29 14:37:37 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\IqjjUUCelIBrPNc
[2011/09/29 14:37:30 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\QNyycAA1uvDon4p
[2011/09/29 14:37:23 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\YHHH5sWWJ7EL8Tq
[2011/09/29 14:37:15 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\wWJJ77dEL8gTqhC
[2011/09/29 14:37:08 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\UONNttxA0uc
[2011/09/29 14:37:00 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\mbFF33pnG5aQ6
[2011/09/29 14:36:53 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\yTTXXwjUVelItz0
[2011/09/29 14:36:45 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\JUUVeelIBtzPyc1
[2011/09/29 14:36:38 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\WIBBttzP0ycAiv3
[2011/09/29 14:36:30 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ZXwwjUUVelItz0y
[2011/09/29 14:36:23 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\vzPP00ycA1iv3oF
[2011/09/29 14:36:15 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\tiivDD3onF4aH6W
[2011/09/29 14:36:07 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\e000yccA1iv3oF
[2011/09/29 14:36:00 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\OD33oonF4amHs
[2011/09/29 14:35:52 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\WWWJJ7fEL9gTqjC
[2011/09/29 14:35:45 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\qCCeekIVrzONxAu
[2011/09/29 14:35:37 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ykkIIVrzONyx0u
[2011/09/29 14:35:30 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\exxxA0uuvSobFp
[2011/09/29 14:35:22 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\LjYYCCekIVrzNyA
[2011/09/29 14:35:14 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\IYYYCeekIVrO
[2011/09/29 14:35:07 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\YgggTZZqjYCkIrz
[2011/09/29 14:34:59 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\H999gTZZqjCekV
[2011/09/29 14:34:51 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\JjjYYCekIVrz
[2011/09/29 14:34:44 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\rONNyxxA0uv2
[2011/09/29 14:34:37 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ommG55sQJ6dE8gZ
[2011/09/29 14:34:29 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\jRRZZ9hYXwkUelB
[2011/09/29 14:34:22 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\fUUVVelOBtxPyc1
[2011/09/29 14:34:14 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\lellOBBtxP0cSib
[2011/09/29 14:34:06 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\p8ggRRZ9hYXwUVl
[2011/09/29 14:33:58 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\bSS22obF3pmGsQ6
[2011/09/29 14:33:51 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\eYYCeekIVrzOyx0
[2011/09/29 14:33:43 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\EssWWJ7fEL9gZqY
[2011/09/29 14:33:35 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\JammH66sWJ7E
[2011/09/29 14:33:27 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\nD33onnF4am6sJ7
[2011/09/29 14:33:19 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\zVeelIIBtzPyc1i
[2011/09/29 14:33:12 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\LWWWK88fRZ9TXjU
[2011/09/29 14:33:04 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\rdWWKK8fRZ9hXwU
[2011/09/29 14:32:56 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\KWKK88fRZ9
[2011/09/29 14:32:49 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\edddWKK8fRZhTwj
[2011/09/29 14:32:41 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\iK88fRRZ9hTwjVe
[2011/09/29 14:32:33 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\wddWWK8ffZ
[2011/09/29 14:32:26 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\HWKK88fRZ9hTwjV
[2011/09/29 14:32:18 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\w2iibFF3pnGaQ6d
[2011/09/29 14:32:10 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\AHH55sWJ7dEL
[2011/09/29 14:32:01 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\dooobF44pm5s
[2011/09/29 14:31:53 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\muvvS22obF4mGsQ
[2011/09/29 14:31:46 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\l55ssQJJ7dK8gZh
[2011/09/29 14:31:38 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\zddEEK8ggZqhYwU
[2011/09/29 14:31:31 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\yggRRZqhYXwkVrO
[2011/09/29 14:31:23 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\rSS22obF4pmGsQ7
[2011/09/29 14:31:15 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\mrzzONNyxA1vSob
[2011/09/29 14:31:07 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\KjjjYCCekI
[2011/09/29 14:30:59 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\gvvDD3onn4amHsK
[2011/09/29 14:30:51 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\lGG55aQJ6
[2011/09/29 14:30:43 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\DfffEL88gTqjYw
[2011/09/29 14:30:35 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\BlllIBBtzPNcAiv
[2011/09/29 14:30:25 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\gYYYCeekIVrONxA
[2011/09/29 14:30:16 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\PZZ99hTXXjUVeI
[2011/09/29 14:30:09 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\AwwwjUUVelIt
[2011/09/29 14:30:00 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\BWWWJ77dEL8TZhY
[2011/09/29 14:29:52 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\qnnnF4ppm
[2011/09/29 14:29:45 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\nLLL8gTTZqYC
[2011/09/29 14:29:37 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\guuccS1ibD3pG4
[2011/09/29 14:29:28 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\fS11ivvD3on4aH6
[2011/09/29 14:29:20 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\uyyccS1ivD3o
[2011/09/29 14:29:12 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ivvvD33onG
[2011/09/29 14:29:05 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\VDD3oonG4amHsW7
[2011/09/29 14:28:57 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\uvvD33onG4am6sK
[2011/09/29 14:28:50 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\tyccS11ivD3nGam
[2011/09/29 14:28:42 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\g000yccS1iv3oG4
[2011/09/29 14:28:34 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\YeelOOBtzP0yS1v
[2011/09/29 14:28:27 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\f0yyccS1ivD3nGa
[2011/09/29 14:28:19 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\XlllOBttzPycS
[2011/09/29 14:28:11 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\Q222ibbF3pm5aJ6
[2011/09/29 14:28:03 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\u99hYYXwjUVe
[2011/09/29 14:27:56 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\kmmGG5aQJ6dE8f
[2011/09/29 14:27:48 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\pfRRZ99hYXwUVlO
[2011/09/29 14:27:41 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\eellOOBtzP0yS1v
[2011/09/29 14:27:33 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\voonnG4amH6sK7E
[2011/09/29 14:27:26 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\zssWWK7fEL9gXqY
[2011/09/29 14:27:19 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\qzOONNyxA1uv2oF
[2011/09/29 14:27:11 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\d777dEEK8
[2011/09/29 14:27:04 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\WBBBtxPP0uS1iDp
[2011/09/29 14:26:57 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\pSSS1ibbD3nG4Q6
[2011/09/29 14:26:49 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\YrrllOBtxP0uS1b
[2011/09/29 14:26:41 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\oSSS1ibbD3nG4Q6
[2011/09/29 14:26:33 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\PS22oobF4pmGsQ7
[2011/09/29 14:26:26 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\GEEKK8gRRq
[2011/09/29 14:26:18 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\kwwkkUVrlOB
[2011/09/29 14:26:10 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\jmmGG5ssQJ
[2011/09/29 14:26:03 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\c55ssQJ7dEK8RZh
[2011/09/29 14:25:55 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ssQQJJ7dEK8gZqY
[2011/09/29 14:25:48 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\JlllOBttx
[2011/09/29 14:25:40 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\FcccS1iib
[2011/09/29 14:25:32 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\aVrrllOBtxP0c
[2011/09/29 14:25:25 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\AEEKK8gRZqhYwkV
[2011/09/29 14:25:17 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\H8ggRZZqhYX
[2011/09/29 14:25:09 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\FJJ77dEK8gRZhYw
[2011/09/29 14:25:02 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\LddEEK8gRZqhXw
[2011/09/29 14:24:54 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\kUVVrrlOBtxPuc1
[2011/09/29 14:24:47 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\vbbDD3pnn4aQHdK
[2011/09/29 14:24:39 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\jUUVVrlOBtxPuc1
[2011/09/29 14:24:31 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\YssQQJ7ddK8gRqY
[2011/09/29 14:24:24 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\nGG55sQJ7dEKgRq
[2011/09/29 14:24:16 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\g555sQQJ7dE
[2011/09/29 14:24:08 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\pyyyxAA1uvSo
[2011/09/29 14:24:00 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\XCCeekIIBrONyAu
[2011/09/29 14:23:53 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\w7ffELL9gTXjYek
[2011/09/29 14:23:45 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\r44aamH6s
[2011/09/29 14:23:37 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\AvvvD33onG4mHsW
[2011/09/29 14:23:29 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\xYYYXwwjUVeOBz
[2011/09/29 14:23:21 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\aQQJJ6dEK8fR9hX
[2011/09/29 14:23:14 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\EF33ppmG5aQJdE8
[2011/09/29 14:23:06 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\Z00uuvS2ibF3
[2011/09/29 14:22:58 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\XiibbF33pm
[2011/09/29 14:22:50 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\J77ffEL8gTZqYCk
[2011/09/29 14:22:42 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\yAA11ivD2onFam5
[2011/09/29 14:22:35 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\CUUUCeelIBtPNcA
[2011/09/29 14:22:27 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\mXXXwjjUCelBt
[2011/09/29 14:22:19 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ifffRLL9hTXjUel
[2011/09/29 14:22:11 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ebDD3ppnG5aH6WK
[2011/09/29 14:22:03 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ErllONNtxP0cSib
[2011/09/29 14:21:56 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ukUUVrrlONtP0cS
[2011/09/29 14:21:48 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\GmHH55sQJ7dE8
[2011/09/29 14:21:40 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ebFF44pmH5sQ7dL
[2011/09/29 14:21:32 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\cjUUCeekIBrPNxA
[2011/09/29 14:21:24 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\C666sWWK7fR9gXq
[2011/09/29 14:21:17 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\HQQHH6sWK7fR9g
[2011/09/29 14:21:09 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\rnnGG4aQH6sW7fL
[2011/09/29 14:21:01 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\toobbF3pmG5sJ6E
[2011/09/29 14:20:53 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\pFF3ppmG5sQJdE8
[2011/09/29 14:20:45 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\XxAA00uvS2ob3pG
[2011/09/29 14:20:38 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\LrrzOONyxA0
[2011/09/29 14:20:30 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\TyyyxAA0u
[2011/09/29 14:20:22 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\tZZqqjYCCk
[2011/09/29 14:20:15 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\O999gTTZqjYekVr
[2011/09/29 14:20:07 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\jWJJ7ffEL9
[2011/09/29 14:19:59 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ztttzPP0ycAiv3o
[2011/09/29 14:19:51 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\q1iivvD3onF4mHs
[2011/09/29 14:19:44 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\EmmHH6sWJ7fE9gZ
[2011/09/29 14:19:36 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\TvDD3oonF4aH
[2011/09/29 14:19:28 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\HWWWK8ffRZhTXjV
[2011/09/29 14:19:20 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\pxAA0uucS2iF3nG
[2011/09/29 14:19:12 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\fDD22onnF4mH5W7
[2011/09/29 14:19:05 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\RppmmH55sW7dE8T
[2011/09/29 14:18:57 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\onFF44pmH5sW7d
[2011/09/29 14:18:50 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\qIIVVrlON
[2011/09/29 14:18:42 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\yrllONNtxA0cSib
[2011/09/29 14:18:34 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\b55ssWJ7dEL8TZh
[2011/09/29 14:18:25 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\PoobFF4pmG5sJ7E
[2011/09/29 14:18:17 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\aBrrzzONyxA1vSo
[2011/09/29 14:18:09 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\t777fELL9gXqjCk
[2011/09/29 14:18:01 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\YlllOBBtzP0cS
[2011/09/29 14:17:54 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\RwwjjUVelOBtP0c
[2011/09/29 14:17:46 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\Y8ffRZZ9hY
[2011/09/29 14:17:38 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\nVeellOBtzP0
[2011/09/29 14:17:31 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\mtzzP00ycS
[2011/09/29 14:17:23 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\dQQJJ6dEK8fR9hX
[2011/09/29 14:17:15 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\sNNttxA0uvS2bFp
[2011/09/29 14:17:07 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\cggTTZqqjYwkIrO
[2011/09/29 14:16:59 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\qoonnF4amH5sJ7E
[2011/09/29 14:16:51 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\OjUUCeelIBtPNcA
[2011/09/29 14:16:44 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\LHH66dWKKfRL9Tw
[2011/09/29 14:16:28 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\sTTXXwjjUClIBzN
[2011/09/29 14:16:21 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\EeellIBtzPNyA1v
[2011/09/29 14:16:12 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\B555sQJJ7dL8gZh
[2011/09/29 14:16:05 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\JZZZqhhYCwkVrON
[2011/09/29 14:15:57 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\bUUVVrlONtxPuc2
[2011/09/29 14:15:50 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\GtttxP00uc2ib3n
[2011/09/29 14:15:42 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\kD33pnnG5aQ6dK8
[2011/09/29 14:15:35 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\YS22iibD3pnGa
[2011/09/29 14:15:27 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ySS22ibD3pnGaQ6
[2011/09/29 14:15:20 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\TSS22ibD3pnGaQ6
[2011/09/29 14:15:12 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\VRRRZqqhYCwUVlO
[2011/09/29 14:15:04 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\sEEEL88gRZqYCkU
[2011/09/29 14:14:56 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\EqqhhYCwkUVrONx
[2011/09/29 14:14:48 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\NuvvD22obF4mHsQ
[2011/09/29 14:14:41 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\AooobFF4pmHsQ7d
[2011/09/29 14:14:33 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\u4ppmHH5sQJd
[2011/09/29 14:14:26 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\NbbFF4pmH5sQ7dL
[2011/09/29 14:14:17 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\i4aaQQH6sWK7RLg
[2011/09/29 14:14:10 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\wnnnG44aQH6WKfR
[2011/09/29 14:14:02 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\gKK77fRL9gTXjUe
[2011/09/29 14:13:55 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\r777fRRL9gTq
[2011/09/29 14:13:47 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\SQQHH6ssWKfRLgX
[2011/09/29 14:13:39 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\XaaQQH6sWK7fL
[2011/09/29 14:13:31 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\U111ibbD3on4aH6
[2011/09/29 14:13:24 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\IooonGG4aQHsW7f
[2011/09/29 14:13:16 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\LOBBtxxP0yc1iD3
[2011/09/29 14:13:08 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\lOOBBtxP0ycS
[2011/09/29 14:13:01 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\E88ggRZ9hYXwU
[2011/09/29 14:12:53 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\T555sQQJ6dE8gZ9
[2011/09/29 14:12:45 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\K33pmmG5sQ
[2011/09/29 14:12:38 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\pQQJJ6ddE
[2011/09/29 14:12:30 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\JgggRZZ9h
[2011/09/29 14:12:23 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\YRZZ99hYXwkUelB
[2011/09/29 14:12:15 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\RddEEK8gRZ9
[2011/09/29 14:12:06 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ZssWJJ7fE
[2011/09/29 14:11:59 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\cUUUVellIBzP0c1
[2011/09/29 14:11:51 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\FnGG55aQJ6dW8fZ
[2011/09/29 14:11:43 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\v222ibbF3pn5aJ6
[2011/09/29 14:11:35 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\FtttxAA0ucSi
[2011/09/29 14:11:28 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\BNttxAA0ucSib3p
[2011/09/29 14:11:20 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\tqqqhYCCwk
[2011/09/29 14:11:12 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\QWWJJ7dEL8gTqh
[2011/09/29 14:11:04 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\EnnFF4pmH5sW7dL
[2011/09/29 14:10:56 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\c222onnF4pm5
[2011/09/29 14:10:49 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\zAA11uvD2onFpm5
[2011/09/29 14:10:41 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\IPPNNyccA1vD
[2011/09/29 14:10:33 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\jKKK7ffRL9
[2011/09/29 14:10:26 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\adWWK77fRL9TXjU
[2011/09/29 14:10:18 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\xSS11ibbD3nG4Q6
[2011/09/29 14:10:10 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\guuucSS1ibDpn4
[2011/09/29 14:10:02 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\WtxxPP0ucS1iD3n
[2011/09/29 14:09:55 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\wtttxP00uc1ib3n
[2011/09/29 14:09:47 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\JxxPP0ucS1ib
[2011/09/29 14:09:39 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ARRRZqqhYXwU
[2011/09/29 14:09:32 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\XgRRZqqhYXwUVlO
[2011/09/29 14:09:24 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\L777dEEK8gRqhX
[2011/09/29 14:09:16 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\lS22oobF4pmGsQ7
[2011/09/29 14:09:08 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ANNyyxA11vS2oFp
[2011/09/29 14:09:01 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ZONNyxxA1uv2oF4
[2011/09/29 14:08:53 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\jqjjYYCekIBrONx
[2011/09/29 14:08:44 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\RQQJJ6dEK8f
[2011/09/29 14:08:37 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\CFF33pmGGaQJ6E8
[2011/09/29 14:08:29 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\OqqjYYCwkIVrO
[2011/09/29 14:08:21 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\xJJ7ffEL8gTZjYw
[2011/09/29 14:08:13 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\uLLL8ggTZqjCwIV
[2011/09/29 14:08:06 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\iqqjjYCwkIVrO
[2011/09/29 14:07:58 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\p777fELL8gZqjCk
[2011/09/29 14:07:50 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\DssWWJ7fEL8
[2011/09/29 14:07:43 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\JwwwkIIVrzOtx0u
[2011/09/29 14:07:36 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\nNNtxxA0uvS2bFp
[2011/09/29 14:07:28 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\RxxxA00uvS2
[2011/09/29 14:07:20 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\hvvSS2ibF
[2011/09/29 14:07:13 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\tSSS2ibbF3mG5Q6
[2011/09/29 14:07:05 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\piibFF3pmG5aJ6E
[2011/09/29 14:06:58 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\XpppmG55aQ6dE
[2011/09/29 14:06:50 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\fvvvS22ibF3mGaQ
[2011/09/29 14:06:43 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\SJ66ddEK8fRZhYw
[2011/09/29 14:06:35 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\vKKK8ffRZ9hXwUV
[2011/09/29 14:06:27 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\b9hhYXXwjUVlOtz
[2011/09/29 14:06:20 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\V9hhYYXwjUVe
[2011/09/29 14:06:12 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\TVVVelOOBtP0
[2011/09/29 14:06:05 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\owwwjUUVelOtz0y
[2011/09/29 14:05:57 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\KvDD3oonG4
[2011/09/29 14:05:50 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\dEELL9ggTXjYCkB
[2011/09/29 14:05:42 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ZjjjYCeekIrzOyA
[2011/09/29 14:05:35 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\QrrrzONNyx1uv2
[2011/09/29 14:05:28 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\issQQJ7dEK8gZqY
[2011/09/29 14:05:20 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\lBBttxP0ucS1bDp
[2011/09/29 14:05:12 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\kddEEK8gRZqhXw
[2011/09/29 14:05:05 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ZuuccS1ib
[2011/09/29 14:04:58 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\XbDD3ppnG4aH6WK
[2011/09/29 14:04:50 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\RYYYXwwkUVrOBxP
[2011/09/29 14:04:42 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\pDDD3ppnG4aH
[2011/09/29 14:04:35 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\RLLL9hhTXqjCeIB
[2011/09/29 14:04:27 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\P44aQQH6dWK7RLh
[2011/09/29 14:04:20 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\qCCCellIBrzN
[2011/09/29 14:04:13 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\CpmmH55sWJ7ELgT
[2011/09/29 14:04:05 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\yggTTZqhhCwkIrO
[2011/09/29 14:03:57 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\DJJ77dELLgTZqY
[2011/09/29 14:03:49 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\uPNNyccA1uv2
[2011/09/29 14:03:42 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\kddEEL88gTqhYwI
[2011/09/29 14:03:34 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\qHHH5sWWJ7EL
[2011/09/29 14:03:27 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\eDDD2oonF4pH5WJ
[2011/09/29 14:03:19 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\TsssWJ77dE8gTqY
[2011/09/29 14:03:12 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\bqqqhYYCwkIrlNt
[2011/09/29 14:03:04 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\xrrllONtxA0uS2b
[2011/09/29 14:02:57 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\A555aQQJ6dW8
[2011/09/29 14:02:50 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\FyyccA1iv
[2011/09/29 14:02:42 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\t777fELL9gZqjCk
[2011/09/29 14:02:35 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\oVVrrzONyxA0vSo
[2011/09/29 14:02:28 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\wSS22obFFpmG5Q6
[2011/09/29 14:02:20 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\uEEKK8gRZ9hY
[2011/09/29 14:02:13 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\gUVVeelOBtxPyc
[2011/09/29 14:02:05 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\zbbDD3onn4aQHsK
[2011/09/29 14:01:58 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\bffRRL99gTqjUeI
[2011/09/29 14:01:51 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\FyyyxA11uv2ob4m
[2011/09/29 14:01:43 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\yDD22obF4pmHsQ
[2011/09/29 14:01:36 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\fJJ7ddEL8gRZhYw
[2011/09/29 14:01:28 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\NLL88gRZZhYCwU
[2011/09/29 14:01:20 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\y4ppmmH5sQJ7ELg
[2011/09/29 14:01:13 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\LRRZqqhYCwkUrlN
[2011/09/29 14:01:05 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\zppmmH55sQ7dE8R
[2011/09/29 14:00:57 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\BrrzzPNyxA1uD2b
[2011/09/29 14:00:50 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\r44ppmH5sQJ7
[2011/09/29 14:00:42 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\RPPPNyxxA1vD2b
[2011/09/29 14:00:35 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ImmHH5sQQ7dELgZ
[2011/09/29 14:00:27 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\W4ppmmH5sQJ7
[2011/09/29 14:00:19 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\VxxAA1uvv2obFpH
[2011/09/29 14:00:12 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ZLL88gRZq
[2011/09/29 14:00:05 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\pPPP0uccS2bD3n5
[2011/09/29 13:59:57 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\WVVrrlONNxP0uSi
[2011/09/29 13:59:49 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\FQQHH6dWK8fR9hX
[2011/09/29 13:59:42 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\hzzzPNyyc
[2011/09/29 13:59:34 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\kjjUUCelIBtzNy
[2011/09/29 13:59:27 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\u1iivvD2onF4mHs
[2011/09/29 13:59:20 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\zaammH5ssJ7fE8T
[2011/09/29 13:59:12 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\j2oonFF4am
[2011/09/29 13:59:04 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\XCCeelIBtz
[2011/09/29 13:58:56 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\oyccA11ivD2
[2011/09/29 13:58:49 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\VHHH5ssWJ7fL8TZ
[2011/09/29 13:58:42 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\HTTZZqjYCwkIrzN
[2011/09/29 13:58:34 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\m0uuvSS2ibFpm5a
[2011/09/29 13:58:27 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\Z6ddEKK8fRZh
[2011/09/29 13:58:19 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\EmGG55aQJ6dE8fZ
[2011/09/29 13:58:11 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\B000uvvS2ib3pG5
[2011/09/29 13:58:04 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\FuuvSS2ibF3pG5Q
[2011/09/29 13:57:56 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\K666dEEK8fR9hXw
[2011/09/29 13:57:49 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\VVeelOOBtzPy
[2011/09/29 13:57:42 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\AvDD33onG4am6sK
[2011/09/29 13:57:34 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\aK77ffEL9gTXjYe
[2011/09/29 13:57:27 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ZrrrzOONy
[2011/09/29 13:57:19 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\JuuuvSS2o
[2011/09/29 13:57:12 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\i88ggRZZqhXwkVl
[2011/09/29 13:57:04 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\LqqhYYXwkUVrOB
[2011/09/29 13:56:57 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\iF44ppmG5sQJd
[2011/09/29 13:56:49 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\nssQQJ7dEK8g
[2011/09/29 13:56:41 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\BsssQJ77dE8gRqY
[2011/09/29 13:56:34 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\T88gRRZqhYXwUVl
[2011/09/29 13:56:26 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\hxPP00ucS1ib
[2011/09/29 13:56:19 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\AuuucSS1i
[2011/09/29 13:56:11 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\wD33ppnG4aQHdW7
[2011/09/29 13:56:04 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\m77ffRL9hT
[2011/09/29 13:55:56 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\tdddWKK7fRLhTqj
[2011/09/29 13:55:49 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\RdWWKK7fRL9hXq
[2011/09/29 13:55:41 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ziibbD3pnG4aH6W
[2011/09/29 13:55:34 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\P999hTXXqjCelBz
[2011/09/29 13:55:26 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\q111uvvD2on4pH5
[2011/09/29 13:55:19 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\UF44pmmH5sW7dL
[2011/09/29 13:55:11 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\pIIVVrlON
[2011/09/29 13:55:04 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\SuuccS22ib
[2011/09/29 13:54:56 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\PNttxxA0ucS2bFp
[2011/09/29 13:54:48 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ZgTTZZqhYCwkVrO
[2011/09/29 13:54:41 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\GnFF44pmH5sW7dL
[2011/09/29 13:54:33 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\zlIIBrrzPNyA1vD
[2011/09/29 13:54:25 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\L7ffRLL9hTXjUel
[2011/09/29 13:54:17 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\FibbDD3pnG4aH6W
[2011/09/29 13:54:09 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\JZZqqhYXwkUVlOt
[2011/09/29 13:54:01 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\GEEKK8ggRZ
[2011/09/29 13:53:54 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\JmmmG55sQJ7EKgR
[2011/09/29 13:53:46 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\GooobFF4pmGsQ7d
[2011/09/29 13:53:38 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\B22oobF4pmG5QJd
[2011/09/29 13:53:30 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\kXqqjYYCekIrzN
[2011/09/29 13:53:23 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\JXXXqjjYC
[2011/09/29 13:53:15 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\UHH6ssWK7fE
[2011/09/29 13:53:07 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\lvvvD3oonGamHsK
[2011/09/29 13:53:00 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\FooonG44am6s
[2011/09/29 13:52:52 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ZG44aamH6
[2011/09/29 13:52:44 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\u777fELL9
[2011/09/29 13:52:37 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\GyyycSS1ivDon4a
[2011/09/29 13:52:29 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\o888fRZZ9hXwjVl
[2011/09/29 13:52:21 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\VfffRZZ9hYXjUel
[2011/09/29 13:52:13 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\YJJJ6ddEK8fZ9YX
[2011/09/29 13:52:05 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\S222ibbF3p
[2011/09/29 13:51:58 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\KrrzzONtxA0uS
[2011/09/29 13:51:50 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\gTTTZqqjYCwIVzO
[2011/09/29 13:51:42 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\xHH55sWJJfEL8Tq
[2011/09/29 13:51:34 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\S222onnF4a
[2011/09/29 13:51:27 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\jiiivDD2onFam5s
[2011/09/29 13:51:19 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\QUCCeelIBtzPyc1
[2011/09/29 13:51:11 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ryccAA1ivD2oF4m
[2011/09/29 13:51:04 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\i55ssWJ7fE
[2011/09/29 13:50:56 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\wmmHH5sWJ7fE8gZ
[2011/09/29 13:50:49 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\l7ffELL8gTZjYwk
[2011/09/29 13:50:41 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\K777fEEL8gTqj
[2011/09/29 13:50:33 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\lDD22onFFamH5W7
[2011/09/29 13:50:26 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\PaaamHH5sWJfE8
[2011/09/29 13:50:18 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\gtzzPNNycA1vDo
[2011/09/29 13:50:11 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\DnnFF4amm5sWJfL
[2011/09/29 13:50:03 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\FHH55sWJ7fELgTq
[2011/09/29 13:49:55 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\nJ77fEEL8gTq
[2011/09/29 13:49:48 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\cZqqjjYCwkIV
[2011/09/29 13:49:41 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ZttxxA00uv2ib3m
[2011/09/29 13:49:33 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ibbFF3pmm5aQJdK
[2011/09/29 13:49:25 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\yuuuvSS2ibFpm5a
[2011/09/29 13:49:18 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ubbbF33pmG5QJdE
[2011/09/29 13:49:10 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\YbbFF3pmG5aQ6dK
[2011/09/29 13:49:02 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\urzzONNtxA0vSib
[2011/09/29 13:48:54 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\LmHH5ssWJ7fL8T
[2011/09/29 13:48:47 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\vFF44amH5sWJfE8
[2011/09/29 13:48:39 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\q22oonF44mH5sJf
[2011/09/29 13:48:31 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\HooonFF4amH
[2011/09/29 13:48:24 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\CzzPPNycA1iv2o
[2011/09/29 13:48:16 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\uLL9hhTXwjUClIt
[2011/09/29 13:48:08 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\xKKK8ffRL9hXwUC
[2011/09/29 13:48:00 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\eaaaQHH6dWKfR9
[2011/09/29 13:47:53 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\iHH6ddWK8f
[2011/09/29 13:47:45 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\S555aQHH6dK8fLh
[2011/09/29 13:47:38 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\uwwjjUCee
[2011/09/29 13:47:30 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\LbbbD33pnG5QHdW
[2011/09/29 13:47:22 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\iwwkkUVrlONtP0c
[2011/09/29 13:47:12 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\sIIIBtzzP0cA1v3
[2011/09/29 13:47:03 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\kssWWJ7ddL8gTqY
[2011/09/29 13:46:56 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\eddELL8gTZqhCwI
[2011/09/29 13:46:47 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\Y3ppnnG4aQH6W
[2011/09/29 13:46:39 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\kPP0uucS1ibDpn4
[2011/09/29 13:46:30 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\immG55aQJ6dE8fZ
[2011/09/29 13:46:23 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\leellOBtzP0y
[2011/09/29 13:46:15 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\CSS1iivD3onGam
[2011/09/29 13:46:08 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\FXXXqjjYC
[2011/09/29 13:46:00 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\YwjjUVVelO
[2011/09/29 13:45:49 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\XwwwkUVVelBtx
[2011/09/29 13:45:39 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ODDD2onnF4mH5W7
[2011/09/29 13:45:31 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\NSS1iibD3pnGaQ6
[2011/09/29 13:45:23 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\q333pnnG4aQ6dK7
[2011/09/29 13:45:15 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\iZqqhYYXwkUrl
[2011/09/29 13:45:08 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\dhhYYXwkU
[2011/09/29 13:45:00 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\PvvSS2obb4pmGsJ
[2011/09/29 13:44:52 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\sKK77fEEL9TXqY
[2011/09/29 13:44:44 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\d99ggTXqqYCe
[2011/09/29 13:44:37 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\GIIBBrzONyxAu
[2011/09/29 13:44:29 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\gIIIBrrzONyA1vS
[2011/09/29 13:44:22 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\lbbbF44pmG5Q
[2011/09/29 13:44:14 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\rZZqqhYYXwUVrOt
[2011/09/29 13:44:06 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\E1iivDD3onGam6s
[2011/09/29 13:43:58 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\oQJJ66dEK8f
[2011/09/29 13:43:49 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\qppnnG5aaH6d
[2011/09/29 13:43:41 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\X88ggRZqhYCwUVl
[2011/09/29 13:43:33 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ZvvvD2oobFpmHsJ
[2011/09/29 13:43:25 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\BdEEL88gRZqYCkU
[2011/09/29 13:43:18 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ZP00uccS2ib3pG5
[2011/09/29 13:43:10 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\TrrrzPPNyxAu
[2011/09/29 13:43:01 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\EggRRZ9hhXwkUeO
[2011/09/29 13:42:53 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\SyyycAA1ivDon4a
[2011/09/29 13:42:44 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\rZZqqhYYC
[2011/09/29 13:42:37 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\EZZqqhYYCwIVrOt
[2011/09/29 13:42:29 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\lqqhhYCwkIVrONx
[2011/09/29 13:42:22 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\HG55aaQJ6dW
[2011/09/29 13:42:14 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\GA11iivD3o
[2011/09/29 13:42:07 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\CVVeelIBBzP0yA
[2011/09/29 13:41:59 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\X000ucSS2iF3pGa
[2011/09/29 13:41:51 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\mZZZqhhYCwkVrON
[2011/09/29 13:41:43 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\HLL99hTTXqUCeIr
[2011/09/29 13:41:35 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\DCCeelIBrzPNcAu
[2011/09/29 13:41:28 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\KD22onnF4pm5sJ7
[2011/09/29 13:41:20 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\RzzzPNNycA1
[2011/09/29 13:41:12 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\wQQQH6ddWKfRLhX
[2011/09/29 13:41:04 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\u66ddWK7fRL9TXj
[2011/09/29 13:40:56 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\tCCeekIIBrONyAu
[2011/09/29 13:40:46 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\QWKK8ffRL9hXwUC
[2011/09/29 13:40:37 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\nDD22obbF
[2011/09/29 13:40:29 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\HkUUVeelOBtP0c
[2011/09/29 13:40:21 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\gSS11ibDDonG4Q6
[2011/09/29 13:40:12 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\mBttzPP0ycAiv3o
[2011/09/29 13:40:05 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\WXwwjUUVelItz0y
[2011/09/29 13:39:55 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\aEKK88gRZq
[2011/09/29 13:39:47 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\wrrzzONyxA1uS2b
[2011/09/29 13:39:38 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\yELL88gTZqjYwk
[2011/09/29 13:39:31 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\IvvSS2iib
[2011/09/29 13:39:23 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\D22iibFF3pG5aJd
[2011/09/29 13:39:15 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\xxAA00uvS2i
[2011/09/29 13:39:05 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\qRLL99gTX
[2011/09/29 13:38:56 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\LUUUVeelIBtP0cA
[2011/09/29 13:38:46 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\QH66ssWK7fE
[2011/09/29 13:38:38 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\GGG44amH6sWKfE9
[2011/09/29 13:38:30 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\eDDD3oonG4a
[2011/09/29 13:38:22 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\BEKK88fRZ9hYwjV
[2011/09/29 13:38:15 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\pyyycSS1ivDo
[2011/09/29 13:38:08 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ImmHH6sWW7fELgX
[2011/09/29 13:37:57 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\uQQJJ7dEL8gRqhC
[2011/09/29 13:37:50 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\BPP00ucS2i
[2011/09/29 13:37:43 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\hibbDD3pn
[2011/09/23 14:35:13 | 000,000,000 | ---D | C] -- C:\Users\Owner\Documents\Mozilla
[2009/02/20 11:53:47 | 000,082,816 | ---- | C] (VSO Software) -- C:\Users\Owner\AppData\Roaming\pcouffin.sys
[5 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2011/10/11 11:31:59 | 000,000,908 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2960005529-3494219434-145418510-1000UA.job
[2011/10/11 11:26:30 | 000,004,784 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2011/10/11 11:26:30 | 000,004,784 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2011/10/11 10:32:00 | 000,000,856 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2960005529-3494219434-145418510-1000Core.job
[2011/10/11 09:27:19 | 000,000,000 | ---- | M] () -- C:\Windows\SysNative\LogConfigTemp.xml
[2011/10/11 09:26:23 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011/10/11 09:26:04 | 3211,968,512 | -HS- | M] () -- C:\hiberfil.sys
[2011/10/11 09:14:00 | 001,540,270 | ---- | M] () -- C:\Users\Owner\Desktop\tdsskiller.zip
[2011/10/11 08:34:19 | 000,002,046 | ---- | M] () -- C:\Users\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2011/10/11 08:34:18 | 000,002,084 | ---- | M] () -- C:\Users\Owner\Desktop\Google Chrome.lnk
[2011/10/10 20:30:31 | 647,752,083 | ---- | M] () -- C:\Windows\MEMORY.DMP
[2011/10/10 17:35:24 | 000,703,388 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2011/10/10 17:35:24 | 000,604,264 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2011/10/10 17:35:24 | 000,103,964 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2011/10/10 14:58:39 | 000,000,027 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\hosts
[2011/10/10 10:47:31 | 000,107,008 | ---- | M] () -- C:\Users\Owner\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/10/10 08:18:35 | 002,890,446 | ---- | M] () -- C:\Windows\SysNative\drivers\N360x64\0501000.01D\Cat.DB
[2011/10/04 08:10:39 | 002,949,120 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2011/10/04 08:05:53 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdMtpDr_01_07_00.Wdf
[2011/10/04 08:05:43 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_07_00.Wdf
[2011/10/04 07:10:36 | 000,002,363 | ---- | M] () -- C:\Users\Public\Desktop\Norton Security Suite.lnk
[2011/10/03 16:16:49 | 000,174,200 | ---- | M] (Symantec Corporation) -- C:\Windows\SysNative\drivers\SYMEVENT64x86.SYS
[2011/10/03 16:16:49 | 000,007,488 | ---- | M] () -- C:\Windows\SysNative\drivers\SYMEVENT64x86.CAT
[2011/10/03 16:16:49 | 000,000,855 | ---- | M] () -- C:\Windows\SysNative\drivers\SYMEVENT64x86.INF
[2011/10/03 12:28:17 | 000,002,180 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Constant Guard.lnk
[2011/10/03 12:28:16 | 000,002,162 | ---- | M] () -- C:\Users\Public\Desktop\Constant Guard.lnk
[2011/10/03 11:28:03 | 000,000,943 | ---- | M] () -- C:\Users\Owner\Desktop\Norton Installation Files.lnk
[2011/10/03 10:42:05 | 000,920,384 | ---- | M] () -- C:\Users\Owner\Desktop\Norton_Removal_Tool.exe
[2011/10/03 09:05:19 | 000,001,009 | ---- | M] () -- C:\Users\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2011/09/30 10:14:46 | 000,000,948 | ---- | M] () -- C:\Users\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2011/09/30 10:14:46 | 000,000,924 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2011/09/29 15:29:39 | 000,000,732 | ---- | M] () -- C:\Users\Owner\AppData\Local\d3d9caps64.dat
[5 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files Created - No Company Name ==========

[2011/10/11 09:13:58 | 001,540,270 | ---- | C] () -- C:\Users\Owner\Desktop\tdsskiller.zip
[2011/10/10 14:02:08 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe
[2011/10/10 14:02:08 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe
[2011/10/10 14:02:08 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe
[2011/10/10 14:02:08 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe
[2011/10/10 14:02:08 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe
[2011/10/05 08:24:22 | 3211,968,512 | -HS- | C] () -- C:\hiberfil.sys
[2011/10/05 08:24:22 | 3211,968,512 | -HS- | C] () -- \hiberfil.sys
[2011/10/04 08:05:53 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdMtpDr_01_07_00.Wdf
[2011/10/04 08:05:43 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_07_00.Wdf
[2011/10/03 11:30:09 | 000,007,488 | ---- | C] () -- C:\Windows\SysNative\drivers\SYMEVENT64x86.CAT
[2011/10/03 11:30:09 | 000,000,855 | ---- | C] () -- C:\Windows\SysNative\drivers\SYMEVENT64x86.INF
[2011/10/03 11:30:07 | 000,002,363 | ---- | C] () -- C:\Users\Public\Desktop\Norton Security Suite.lnk
[2011/10/03 11:28:03 | 000,000,943 | ---- | C] () -- C:\Users\Owner\Desktop\Norton Installation Files.lnk
[2011/10/03 11:23:21 | 000,109,064 | ---- | C] () -- C:\Windows\SysNative\EasyHook64.dll
[2011/10/03 11:22:58 | 000,002,180 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Constant Guard.lnk
[2011/10/03 11:22:58 | 000,002,174 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Constant Guard.lnk
[2011/10/03 11:22:58 | 000,002,162 | ---- | C] () -- C:\Users\Public\Desktop\Constant Guard.lnk
[2011/10/03 10:42:01 | 000,920,384 | ---- | C] () -- C:\Users\Owner\Desktop\Norton_Removal_Tool.exe
[2011/09/30 10:14:46 | 000,000,924 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2011/09/21 16:14:04 | 000,000,936 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
[2011/05/20 17:15:59 | 000,004,314 | ---- | C] () -- \Movie.mds
[2011/05/20 17:14:40 | 517,701,632 | ---- | C] () -- \Movie.iso
[2011/05/18 16:00:08 | 000,001,940 | ---- | C] () -- C:\Users\Owner\AppData\Local\{96C87F53-AC72-4604-A9CC-186A49F17F3C}.ini
[2011/05/16 17:05:32 | 000,004,314 | ---- | C] () -- \SONY_DVD_RECORDER_VOLUME.MDS
[2011/05/16 16:57:34 | 4207,411,200 | ---- | C] () -- \SONY_DVD_RECORDER_VOLUME.ISO
[2010/12/24 07:01:19 | 000,001,411 | ---- | C] () -- \New Artist - New Title.cue
[2010/12/24 07:01:19 | 000,000,702 | ---- | C] () -- \New Artist - New Title.cdt
[2010/12/24 06:51:12 | 761,309,472 | ---- | C] () -- \New Artist - New Title.bin
[2010/10/29 21:21:33 | 000,000,618 | ---- | C] () -- \Public - Shortcut.lnk
[2010/06/30 07:31:05 | 000,004,314 | ---- | C] () -- \Untitled Project.mds
[2010/06/30 07:23:20 | 363,102,207 | ---- | C] () -- \Untitled Project.iso
[2010/06/28 12:22:41 | 000,004,314 | ---- | C] () -- \A 360 28 May 10.mds
[2010/06/28 12:17:24 | 2748,678,144 | ---- | C] () -- \A 360 28 May 10.iso
[2010/04/06 13:21:13 | 000,008,214 | -HS- | C] () -- C:\Users\Owner\AppData\Local\aPH03i
[2009/12/18 20:53:27 | 000,000,680 | ---- | C] () -- C:\Users\Owner\AppData\Local\d3d9caps.dat
[2009/12/16 07:20:31 | 000,000,732 | ---- | C] () -- C:\Users\Owner\AppData\Local\d3d9caps64.dat
[2009/12/06 01:45:01 | 000,000,379 | ---- | C] () -- \ITB.iss
[2009/08/10 06:44:24 | 000,117,248 | ---- | C] () -- C:\Windows\SysWow64\EhStorAuthn.dll
[2009/08/10 06:43:43 | 000,107,612 | ---- | C] () -- C:\Windows\SysWow64\StructuredQuerySchema.bin
[2009/08/10 06:43:01 | 000,368,640 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
[2009/07/09 13:49:14 | 000,001,025 | ---- | C] () -- C:\Windows\SysWow64\sysprs7.dll
[2009/07/09 13:49:14 | 000,001,025 | ---- | C] () -- C:\Windows\SysWow64\clauth2.dll
[2009/07/09 13:49:14 | 000,001,025 | ---- | C] () -- C:\Windows\SysWow64\clauth1.dll
[2009/07/09 13:49:14 | 000,000,205 | ---- | C] () -- C:\Windows\SysWow64\lsprst7.dll
[2009/07/09 13:49:14 | 000,000,073 | ---- | C] () -- C:\Windows\SysWow64\ssprs.dll
[2009/07/09 13:49:14 | 000,000,021 | ---- | C] () -- C:\Windows\SurCode.INI
[2009/06/12 15:32:16 | 000,104,456 | ---- | C] () -- C:\Windows\SysWow64\EasyHook32.dll
[2009/05/12 13:04:21 | 000,524,288 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll
[2009/05/12 13:04:21 | 000,139,264 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll
[2009/04/30 00:36:07 | 000,000,070 | ---- | C] () -- C:\Windows\sbwin.ini
[2009/03/25 19:42:31 | 000,000,000 | ---- | C] () -- C:\Windows\lgfwup.ini
[2009/02/24 11:58:52 | 000,000,048 | ---- | C] () -- C:\Windows\winfile.ini
[2009/02/20 11:53:47 | 000,007,859 | ---- | C] () -- C:\Users\Owner\AppData\Roaming\pcouffin.cat
[2009/02/20 11:53:47 | 000,001,167 | ---- | C] () -- C:\Users\Owner\AppData\Roaming\pcouffin.inf
[2009/02/09 14:47:11 | 000,000,036 | -H-- | C] () -- C:\Windows\SysWow64\f9t.dat
[2009/02/09 12:00:10 | 000,000,038 | ---- | C] () -- C:\Windows\Approach.ini
[2009/01/28 14:24:33 | 000,060,565 | ---- | C] () -- C:\Windows\SysWow64\EPPICPrinterDB.dat
[2009/01/28 14:24:33 | 000,029,114 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern1.dat
[2009/01/28 14:24:33 | 000,021,021 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern3.dat
[2009/01/28 14:24:33 | 000,015,670 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern5.dat
[2009/01/28 14:24:33 | 000,013,280 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern2.dat
[2009/01/28 14:24:33 | 000,010,673 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern4.dat
[2009/01/28 14:24:33 | 000,004,943 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern6.dat
[2009/01/28 14:24:33 | 000,001,140 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_PT.dat
[2009/01/28 14:24:33 | 000,001,140 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_BP.dat
[2009/01/28 14:24:33 | 000,001,137 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_ES.dat
[2009/01/28 14:24:33 | 000,001,130 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_FR.dat
[2009/01/28 14:24:33 | 000,001,130 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_CF.dat
[2009/01/28 14:24:33 | 000,001,104 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_EN.dat
[2009/01/28 14:24:33 | 000,000,097 | ---- | C] () -- C:\Windows\SysWow64\PICSDK.ini
[2009/01/28 14:20:01 | 000,000,044 | ---- | C] () -- C:\Windows\EPR220.ini
[2009/01/23 08:43:28 | 405,403,648 | ---- | C] () -- \~cevts0 (13)
[2009/01/23 08:39:47 | 2147,483,648 | ---- | C] () -- \~cevts0 (12)
[2009/01/23 08:34:19 | 2147,483,648 | ---- | C] () -- \~cevts0 (11)
[2009/01/23 08:34:15 | 000,001,530 | ---- | C] () -- \~cevts0
[2009/01/21 13:35:45 | 000,000,094 | ---- | C] () -- C:\Users\Owner\AppData\Roaming\wklnhst.dat
[2009/01/21 13:23:46 | 000,000,376 | ---- | C] () -- C:\Windows\ODBC.INI
[2009/01/16 08:19:25 | 000,018,904 | ---- | C] () -- C:\Windows\SysWow64\StructuredQuerySchemaTrivial.bin
[2009/01/11 17:41:53 | 000,107,008 | ---- | C] () -- C:\Users\Owner\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009/01/11 14:44:34 | 000,000,000 | ---- | C] () -- C:\Windows\nsreg.dat
[2008/10/30 20:02:53 | 000,581,120 | ---- | C] () -- C:\Windows\mHotkey.exe
[2008/10/30 20:02:53 | 000,294,912 | ---- | C] () -- C:\Windows\PIC.dll
[2008/10/30 20:02:53 | 000,036,864 | ---- | C] () -- C:\Windows\LchDrvKey.exe
[2008/10/30 20:02:53 | 000,000,870 | ---- | C] () -- C:\Windows\mhotkey_reg.ini
[2008/10/30 19:54:14 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2008/01/20 20:50:05 | 000,060,124 | ---- | C] () -- C:\Windows\SysWow64\tcpmon.ini
[2008/01/09 18:29:25 | 000,001,324 | ---- | C] () -- C:\Windows\FF08_not_Spk_Hp.ini
[2008/01/09 18:29:25 | 000,001,269 | ---- | C] () -- C:\Windows\FF08_Render_Spk_Hp.ini
[2008/01/09 18:28:57 | 000,145,408 | ---- | C] () -- C:\Windows\SysWow64\APOMngr.DLL
[2008/01/09 18:28:57 | 000,071,680 | ---- | C] () -- C:\Windows\SysWow64\CmdRtr.DLL
[2008/01/09 17:37:33 | 000,008,192 | R-S- | C] () -- \BOOTSECT.BAK
[2008/01/09 17:37:32 | 000,333,257 | RHS- | C] () -- \bootmgr
[2008/01/09 17:34:38 | 003,107,788 | ---- | C] () -- C:\Windows\SysWow64\atiumdva.dat
[2007/11/07 08:53:12 | 000,242,176 | ---- | C] () -- \VC_RED.MSI
[2007/11/07 08:50:40 | 001,927,956 | ---- | C] () -- \VC_RED.cab
[2007/11/07 08:44:20 | 000,096,272 | ---- | C] () -- \install.res.1036.dll
[2007/11/07 08:44:20 | 000,095,248 | ---- | C] () -- \install.res.3082.dll
[2007/11/07 08:44:20 | 000,095,248 | ---- | C] () -- \install.res.1031.dll
[2007/11/07 08:44:20 | 000,094,224 | ---- | C] () -- \install.res.1040.dll
[2007/11/07 08:44:20 | 000,090,128 | ---- | C] () -- \install.res.1033.dll
[2007/11/07 08:44:20 | 000,080,400 | ---- | C] () -- \install.res.1041.dll
[2007/11/07 08:44:20 | 000,078,864 | ---- | C] () -- \install.res.1042.dll
[2007/11/07 08:44:20 | 000,075,280 | ---- | C] () -- \install.res.1028.dll
[2007/11/07 08:44:20 | 000,074,768 | ---- | C] () -- \install.res.2052.dll
[2007/11/07 08:00:40 | 000,005,686 | ---- | C] () -- \vcredist.bmp
[2007/11/07 08:00:40 | 000,001,110 | ---- | C] () -- \globdata.ini
[2007/11/07 08:00:40 | 000,000,843 | ---- | C] () -- \install.ini
[2006/11/02 09:37:05 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2006/11/02 06:37:14 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat
[2006/11/02 06:24:17 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT
[2006/11/02 06:18:17 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat
[2006/11/02 03:47:54 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2005/09/23 01:39:38 | 000,894,976 | ---- | C] () -- \msdia80.dll
[2004/08/26 06:13:00 | 000,159,744 | ---- | C] () -- C:\Windows\SysWow64\EPSPTDV.DLL
[2002/12/17 22:49:30 | 000,000,000 | ---- | C] () -- C:\Windows\SysWow64\px.ini
[2002/12/09 17:27:50 | 000,425,984 | ---- | C] () -- C:\Windows\SysWow64\vxdmdcdlg.dll
[2002/05/24 01:00:00 | 000,208,896 | ---- | C] () -- C:\Windows\SysWow64\lockout.dll
[2002/05/24 01:00:00 | 000,045,056 | ---- | C] () -- C:\Windows\SysWow64\lockres.dll
[1997/11/14 19:23:00 | 000,031,008 | ---- | C] () -- C:\Windows\SysWow64\ivtrn09.dll
[1997/08/14 01:00:00 | 000,094,208 | ---- | C] () -- C:\Windows\SysWow64\MSENCODE.DLL
[1997/08/14 01:00:00 | 000,031,232 | ---- | C] () -- C:\Windows\SysWow64\XLREC.DLL
[1997/08/14 01:00:00 | 000,025,600 | ---- | C] () -- C:\Windows\SysWow64\RECNCL.DLL
[1997/08/14 01:00:00 | 000,022,016 | ---- | C] () -- C:\Windows\SysWow64\DOCOBJ.DLL
[1997/08/14 01:00:00 | 000,012,288 | ---- | C] () -- C:\Windows\SysWow64\HLINKPRX.DLL
[1996/02/22 19:23:00 | 000,222,928 | ---- | C] () -- C:\Windows\SysWow64\lobas09.dll
[1996/01/15 19:23:00 | 000,334,016 | ---- | C] () -- C:\Windows\SysWow64\loflt09.dll

========== Alternate Data Streams ==========

@Alternate Data Stream - 110 bytes -> C:\ProgramData\TEMP:888AFB86

< End of report >

And here finally is the Extra text file:

OTL Extras logfile created on: 10/11/2011 11:39:48 AM - Run 1
OTL by OldTimer - Version 3.2.29.1 Folder = C:\Users\Public\Equipment\Software Downloads\OTL
64bit-Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6002.18005)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

2.99 Gb Total Physical Memory | 1.50 Gb Available Physical Memory | 50.26% Memory free
6.19 Gb Paging File | 4.42 Gb Available in Paging File | 71.52% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 688.87 Gb Total Space | 94.33 Gb Free Space | 13.69% Space Free | Partition Type: NTFS

Computer Name: OWNER-PC | User Name: Owner | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.html[@ = Opera.HTML] -- C:\Program Files (x86)\Opera\Opera.exe (Opera Software)
.url [@ = InternetShortcut] -- rundll32.exe ieframe.dll,OpenURL %l

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.html [@ = Opera.HTML] -- C:\Program Files (x86)\Opera\Opera.exe (Opera Software)
.url [@ = InternetShortcut] -- rundll32.exe ieframe.dll,OpenURL %l

[HKEY_USERS\S-1-5-21-2960005529-3494219434-145418510-1000\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %SystemRoot%\system32\mshtml.dll,PrintHTML "%1" (Microsoft Corporation)
https [open] -- "C:\Program Files (x86)\Opera\Opera.exe" "%1" (Opera Software)
inffile [install] -- %SystemRoot%\System32\rundll32.exe setupapi,InstallHinfSection DefaultInstall 132 %1 (Microsoft Corporation)
InternetShortcut [open] -- rundll32.exe ieframe.dll,OpenURL %l
InternetShortcut [print] -- rundll32.exe C:\Windows\system32\mshtml.dll,PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
https [open] -- "C:\Program Files (x86)\Opera\Opera.exe" "%1" (Opera Software)
InternetShortcut [open] -- rundll32.exe ieframe.dll,OpenURL %l
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
"FirewallDisableNotify" = 0
"AntiVirusDisableNotify" = 0
"UpdatesDisableNotify" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = 9F 9E 16 8C DC 5B C8 01 [binary data]
"VistaSp2" = 57 EE DC DC DD 81 CC 01 [binary data]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirewallDisableNotify" = 0
"AntiVirusDisableNotify" = 0
"UpdatesDisableNotify" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"oobe_av" = 1

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

========== Firewall Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 0
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 0
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 0
"DisableNotifications" = 0

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{1D01704B-F2A5-4A2F-94F7-5487C136DAA8}" = rport=139 | protocol=6 | dir=out | app=system |
"{2C37AFC0-997D-464E-B6F2-088CB61341F2}" = lport=137 | protocol=17 | dir=in | app=system |
"{4F6F4C51-1C4D-4A10-940D-8924F0F766BF}" = rport=137 | protocol=17 | dir=out | app=system |
"{523CB3EC-05D8-4738-9C9A-19706A3AB4F3}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=c:\windows\system32\spoolsv.exe |
"{7BA90A7F-CB99-4525-8A0E-90B90B3DC019}" = lport=138 | protocol=17 | dir=in | app=system |
"{8A2E2620-A53E-4D06-AE24-BE6E182E9F28}" = lport=139 | protocol=6 | dir=in | app=system |
"{8B88345E-221A-4B55-B26C-F53E524A689E}" = rport=138 | protocol=17 | dir=out | app=system |
"{A26A2AE3-8953-445C-830E-30E621C4F2A3}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=file and printer sharing (spooler service - rpc-epmap) |
"{C3F2B14E-241D-4E65-9E13-5E6D121E0E3D}" = rport=445 | protocol=6 | dir=out | app=system |
"{F0FEC56A-98A5-4F59-B2C0-761A67CBD728}" = lport=445 | protocol=6 | dir=in | app=system |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{1D619347-49A7-420F-A14E-168ACD17D56D}" = protocol=17 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |
"{271B9BDE-3FB1-4AC8-AD7B-74DE71C478B0}" = protocol=1 | dir=in | name=file and printer sharing (echo request - icmpv4-in) |
"{35B84AE9-D75B-45A3-8769-7CA9241A1CC4}" = protocol=58 | dir=in | name=file and printer sharing (echo request - icmpv6-in) |
"{4A6F1177-95F1-464A-A0E1-023A8311C1EE}" = protocol=6 | dir=in | app=c:\program files (x86)\itunes\itunes.exe |
"{606A4D8D-647C-41AA-A129-22EED03AFFAF}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office12\onenote.exe |
"{7D9101D5-3DE5-4B01-99C3-598A81E372D5}" = protocol=58 | dir=out | name=file and printer sharing (echo request - icmpv6-out) |
"{8F50363E-A6C8-4B57-93A3-7A36CCC80904}" = protocol=17 | dir=in | app=c:\program files (x86)\opera\opera.exe |
"{997C0047-DA46-49AC-BCA6-030992E82135}" = protocol=6 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |
"{A87AE242-915F-4522-A0DD-1C1F155D5D6C}" = protocol=1 | dir=out | name=file and printer sharing (echo request - icmpv4-out) |
"{AD8B880F-3D59-46D4-AF8F-AE6411CEC2B4}" = dir=in | app=c:\program files (x86)\cyberlink\powerdvd\powerdvd.exe |
"{B730E29A-B260-40E2-A493-23D01537A97A}" = protocol=6 | dir=in | app=c:\program files (x86)\opera\opera.exe |
"{E85DAA67-5CDE-4C74-AD98-E1D905864D1B}" = protocol=17 | dir=in | app=c:\program files (x86)\itunes\itunes.exe |
"{ED9E1735-55EC-41E9-9715-F3E602694CB8}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\onenote.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{071c9b48-7c32-4621-a0ac-3f809523288f}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{26A24AE4-039D-4CA4-87B4-2F86416012FF}" = Java™ 6 Update 12 (64-bit)
"{350AA351-21FA-3270-8B7A-835434E766AD}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022
"{53D50160-8037-FA21-535E-FBBA185E484F}" = ATI Catalyst Install Manager
"{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{90120000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2007
"{90120000-002A-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (English) 2007
"{90120000-0116-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2007
"{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}" = Intel® Matrix Storage Manager
"{9EFC40E3-5F31-4F75-8445-286273F74D8E}" = Apple Mobile Device Support
"{A5F59952-475D-4DCC-BEAD-C216FC68E05C}" = iTunes
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{DAE239CE-EB9D-4EB3-B0D4-528D6BAA48FD}" = Bonjour
"{E533CFC9-6596-4C4B-8DC7-682247FB2D23}" = SmartFTP Client
"{F353AC1D-6DBB-BF6B-7455-DE9E8B0F428D}" = ccc-utility64
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"Agere Systems Soft Modem" = Agere Systems PCI-SV92EX Soft Modem
"EPSON Printer and Utilities" = EPSON Printer Software
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"PROSet" = Intel® Network Connections Drivers

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{00170409-78E1-11D2-B60F-006097C998E7}" = Microsoft Word 2000
"{05308C4E-7285-4066-BAE3-6B50DA6ED755}" = Adobe Update Manager CS4
"{054EFA56-2AC1-48F4-A883-0AB89874B972}" = Adobe Extension Manager CS4
"{05BB2EC5-6BEF-4DDC-9E75-BEE7B161157A}" = Macromedia Dreamweaver MX 2004
"{09DA4F91-2A09-4232-AB8C-6BC740096DE3}" = VERITAS RecordNow DX Update Manager
"{0BCB3480-B90B-E4D2-01B1-0691956F546D}" = Catalyst Control Center Localization Dutch
"{0C0397CC-6B00-F6DE-484F-067EAD723280}" = Catalyst Control Center Localization French
"{0DB93918-2A77-11D3-805A-00C04FA329AA}" = Word in Works Suite add-in
"{0F0623E1-42EA-D7F8-6CB2-4E1D9F116450}" = Catalyst Control Center Localization Korean
"{1618734A-3957-4ADD-8199-F973763109A8}" = Adobe Anchor Service CS4
"{16E6D2C1-7C90-4309-8EC4-D2212690AAA4}" = AdobeColorCommonSetRGB
"{19C64880-BBCA-11D4-9EEE-0004ACDDDB3B}" = CyberLink InstantBurn
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1FA0F991-B8B2-0B9E-9CB1-FA083AB9FB7F}" = Skins
"{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = CyberLink Hi-Def Suite
"{20340F3D-CF28-3E04-E731-DA97C24C631A}" = Catalyst Control Center Graphics Previews Vista
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{2496A5EB-C299-05C7-86EC-FB36922B9E4B}" = Catalyst Control Center Localization Chinese Standard
"{26A24AE4-039D-4CA4-87B4-2F83216022FF}" = Java™ 6 Update 22
"{282D49E2-8C4A-664D-7F68-AAC8326CCE55}" = CCC Help Swedish
"{28BE306E-5DA6-4F9C-BDB0-DBA3C8C6FFFD}" = QuickTime
"{297190A1-4B0D-4CD6-8B9F-3907F15C3FD8}" = Adobe CS4 American English Speech Analysis Models
"{2B014A14-1717-85C5-BA08-0A3EB33CA34D}" = CCC Help Portuguese
"{2D8519EC-3A59-4EBE-87C7-80C907E4E9D8}" = CCC Help Dutch
"{3248F0A8-6813-11D6-A77B-00B0D0160050}" = Java™ 6 Update 5
"{34FF0741-EC67-4C05-AC2A-6D257123DF2E}" = BigFix
"{39F6E2B4-CFE8-C30A-66E8-489651F0F34C}" = Adobe Media Player
"{3A4E8896-C2E7-4084-A4A4-B8FD1894E739}" = Adobe XMP Panels CS4
"{3D303495-0ADF-5E80-F30E-732C987E3876}" = CCC Help Japanese
"{3E171899-0175-47CC-84C4-562ACDD4C021}" = OpenOffice.org 3.3
"{40BF1E83-20EB-11D8-97C5-0009C5020658}" = Power2Go 5.0
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4A425F14-0561-11D4-9027-0060089CDAE1}" = FileMaker Pro 5.5
"{4BC14A37-586A-4AB3-A458-874AAE29337C}" = Adobe Setup
"{512B3AB2-DEC6-6DB2-ABA2-2990A23826A7}" = Catalyst Control Center Core Implementation
"{553255F3-78FD-40F1-A6F8-6882140265FE}" = Apple Application Support
"{561968FD-56A1-49FD-9ED0-F55482C7C5BC}" = Adobe Media Encoder CS4 Exporter
"{56364334-9530-11D2-BFFC-00C04FA329AA}" = Microsoft Works 2000
"{566BB41D-F006-4956-A5D3-94D8DFFA7F51}" = Adobe Setup
"{57634571-FD82-4BEC-B822-A1ED7765474F}_is1" = SmartLauncher
"{583295F2-E5C3-1952-65AA-EBBD22A647BB}" = Catalyst Control Center Graphics Full Existing
"{59EA4927-E297-1166-E2CC-7278B5DAC905}" = Catalyst Control Center Localization Swedish
"{5B9B654F-44F0-26DC-9A40-B10908BD5846}" = Catalyst Control Center Graphics Full New
"{5D390B2B-80A1-EB40-B6A5-4421E49BB685}" = ccc-core-static
"{5EAD5443-7194-46CC-A055-428E6ABB1BAF}" = Adobe Encore CS4
"{60DB5894-B5A1-4B62-B0F3-669A22C0EE5D}" = Adobe Dynamiclink Support
"{64D3527E-7EC9-BC78-61F8-FA2289D5628C}" = Catalyst Control Center Localization Japanese
"{676D83E9-191E-2FAD-BF23-711D0B7100CE}" = Catalyst Control Center Localization German
"{67F0E67A-8E93-4C2C-B29D-47C48262738A}" = Adobe Device Central CS4
"{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = CyberLink PowerDVD
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{698AC01B-DF0C-4BCE-940C-EB29AD23A560}" = Stamps.com
"{6997841F-154D-287D-E494-C5BB316C3457}" = Catalyst Control Center Graphics Light
"{6C639DFB-026D-F97C-0F5B-CB26FA4DD95C}" = Catalyst Control Center Localization Chinese Traditional
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{72C1EAC0-580D-1654-AA5F-0232E91EC0F2}" = CCC Help Chinese Traditional
"{7406DF60-016D-476B-A2C7-55D997592047}" = Adobe OnLocation CS4
"{7E465479-6C8B-1165-CCD8-E47018F4AC8F}" = CCC Help French
"{7F811A54-5A09-4579-90E1-C93498E230D9}" = Gateway Recovery Management
"{8186FF34-D389-4B7E-9A2F-C197585BCFBD}" = Adobe Media Encoder CS4 Importer
"{819E24AA-DB15-4BA8-8D76-92BDF710610B}" = Adobe Setup
"{820D3F45-F6EE-4AAF-81EF-CE21FF21D230}" = Adobe Type Support CS4
"{83877DB1-8B77-45BC-AB43-2BAC22E093E0}" = Adobe Bridge CS4
"{842B4B72-9E8F-4962-B3C1-1C422A5C4434}" = Suite Shared Configuration CS4
"{880A1EDC-52F8-C6F6-C326-70BAB366787F}" = Catalyst Control Center Localization Italian
"{8855FF30-19CE-4CB1-A654-87B38369CCE1}" = VERITAS RecordNow DX
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8BC1557D-1EBC-FCB9-E1B7-986F3587C3C7}" = Catalyst Control Center Localization Spanish
"{8DCE550C-CA43-4E82-92DF-FFC4A48F5BE1}" = Napster Burn Engine
"{8F1CC85D-3598-0B55-EBCE-36BDBEA74C33}" = CCC Help Korean
"{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007
"{90120000-0016-0409-0000-0000000FF1CE}_HOMESTUDENTR_{4CA4ECC1-DBD4-4591-8F4C-AA12AD2D3E59}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007
"{90120000-0018-0409-0000-0000000FF1CE}_HOMESTUDENTR_{4CA4ECC1-DBD4-4591-8F4C-AA12AD2D3E59}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007
"{90120000-001B-0409-0000-0000000FF1CE}_HOMESTUDENTR_{4CA4ECC1-DBD4-4591-8F4C-AA12AD2D3E59}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{3EC77D26-799B-4CD8-914F-C1565E796173}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_HOMESTUDENTR_{430971B1-C31E-45DA-81E0-72C095BAB72C}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}_HOMESTUDENTR_{F7A31780-33C4-4E39-951A-5EC9B91D7BF1}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-0020-0409-0000-0000000FF1CE}" = Compatibility Pack for the 2007 Office system
"{90120000-002A-0000-1000-0000000FF1CE}_HOMESTUDENTR_{00C5525B-3CB3-467D-8100-2E6FB306CD86}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-002A-0409-1000-0000000FF1CE}_HOMESTUDENTR_{FAD8A83E-9BAC-4179-9268-A35948034D85}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}_HOMESTUDENTR_{FAD8A83E-9BAC-4179-9268-A35948034D85}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2007
"{90120000-00A1-0409-0000-0000000FF1CE}_HOMESTUDENTR_{4CA4ECC1-DBD4-4591-8F4C-AA12AD2D3E59}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007
"{90120000-0115-0409-0000-0000000FF1CE}_HOMESTUDENTR_{FAD8A83E-9BAC-4179-9268-A35948034D85}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-0116-0409-1000-0000000FF1CE}_HOMESTUDENTR_{FAD8A83E-9BAC-4179-9268-A35948034D85}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{91120000-002F-0000-0000-0000000FF1CE}" = Microsoft Office Home and Student 2007
"{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{BEE75E01-DD3F-4D5F-B96C-609E6538D419}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{9191979D-821C-4EA8-B021-2DA1D859A7C5}" = GuardedID
"{9475D6BB-2C73-DBFC-23C1-A92045BF98B0}" = CCC Help English
"{94D398EB-D2FD-4FD1-B8C4-592635E8A191}" = Adobe CMaps CS4
"{9C169DD7-9660-6701-FBA5-E79C9B4E9B77}" = CCC Help German
"{9F8FDE1A-FA91-43F2-887B-CF080156D57E}" = Adobe Setup
"{AC76BA86-7AD7-1033-7B44-A81200000003}" = Adobe Reader 8.1.2
"{ADD5DB49-72CF-11D8-9D75-000129760D75}" = PowerBackup
"{AFF7E080-1974-45BF-9310-10DE1A1F5ED0}" = Adobe AIR
"{B095B0A4-50A5-46D7-9988-D038FEB040C0}" = Adobe Encore CS4 Library
"{B169BC97-B8AA-4ACA-9CF2-9D0FF5BABDF7}" = Adobe Premiere Pro CS4 Functional Content
"{B21BDC7C-49A1-4155-9425-2F9DED3CD5ED}" = Adobe Setup
"{B7A0CE06-068E-11D6-97FD-0050BACBF861}" = PowerProducer
"{B7BD291B-D415-4484-89A4-82077504BE93}_is1" = SmartCopy
"{BB4E33EC-8181-4685-96F7-8554293DEC6A}" = Adobe Output Module
"{BBBCAE4B-B416-4182-A6F2-438180894A81}" = Napster
"{BE9CEAAA-F069-4331-BF2F-8D350F6504F4}" = Adobe Media Encoder CS4 Additional Exporter
"{BEEFC4F8-2909-48B3-AFAA-55D3533FDEDD}" = Creative MediaSource 5
"{BFF7847C-0749-341A-98C3-C5053283CD4B}" = CCC Help Chinese Standard
"{C52E3EC1-048C-45E1-8D53-10B0C6509683}" = Adobe Default Language CS4
"{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = LabelPrint
"{C7E99FEB-A620-40B0-9B37-4410738B351E}" = Sound Blaster X-Fi MB
"{C938BE91-3BB5-4B84-9EF6-88F0505D0038}" = Adobe Premiere Pro CS4 Third Party Content
"{CB84F0F2-927B-458D-9DC5-87832E3DC653}" = GearDrvs
"{CC75AB5C-2110-4A7F-AF52-708680D22FE8}" = Photoshop Camera Raw
"{CD95D125-2992-4858-B3EF-5F6FB52FBAD6}" = Skype Toolbars
"{CE26D792-E227-34D6-EE84-2938FDD19266}" = Catalyst Control Center Localization Portuguese
"{CFF61765-ED60-86C5-4FE2-8FFCE45E3FAD}" = CCC Help Italian
"{D499F8DE-3F31-4900-9157-61061613704B}" = Adobe Premiere Pro CS4
"{DE3BB35E-C0CE-4CA1-9CB4-CD9E69364BD9}" = Adobe Premiere Pro CS4
"{DEB90B8E-0DCB-48CE-B90E-8842A2BD643E}" = Adobe Media Encoder CS4
"{EC68232E-C74E-4F1A-B296-DFD2E1944E10}" = Adobe Setup
"{ED5DCA6F-5FEA-47CB-83DB-210A468C298B}" = KB0817 Keyboard Driver
"{EE353798-E875-42E0-B58D-7E6696182EA8}" = Adobe Media Encoder CS4 Dolby
"{EFC1B3CA-9B90-458D-AD7A-A0F2CD6F4A84}" = Realtek Card Reader
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F4121770-5CAA-77F0-B6E6-CA89CBF8F55F}" = CCC Help Spanish
"{F8EF2B3F-C345-4F20-8FE4-791A20333CD5}" = Adobe ExtendScript Toolkit CS4
"{F93C84A6-0DC6-42AF-89FA-776F7C377353}" = Adobe PDF Library Files CS4
"{FB2A5FCC-B81B-48C2-A009-7804694D83E9}" = Adobe Encore CS4 Codecs
"{FCDD51BB-CAD0-4BB1-B7DF-CE86D1032794}" = Adobe Fonts All
"{FE0646A7-19D0-41B4-A2BB-2C35D644270D}" = Windows Live OneCare safety scanner
"{FF477885-5EA8-40D0-ADF3-D4C1B86FAEA4}" = EPSON Print CD
"1Click DVD Copy Pro_is1" = 1Click DVD Copy Pro 3.1.3.9
"7-Zip 9.20" = 7-Zip 9.20
"ActiveTouchMeetingClient" = WebEx
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe_0b36ff97a89684768f1da4defc9f237" = Adobe Encore CS4 Codecs
"Adobe_1f3d5fcc5fe78dc374b6ccbd2d399ba" = Adobe Encore CS4 Library
"Adobe_26b63376f4efc354dae41af6b5e3343" = Adobe Premiere Pro CS4
"Adobe_5eba9bbdf1514a06b1a4c79a2920188" = Adobe Media Encoder CS4 Exporter
"Adobe_6e02d32c7e5a9d9fc86bc91618cafda" = Adobe Premiere Pro CS4 Third Party Content
"Adobe_7774cb1e022c49962995a9014500066" = Adobe Media Encoder CS4 Importer
"ALchemy" = Creative ALchemy
"Ask Toolbar_is1" = Vuze Toolbar
"AVerMedia M791 PCIe Combo NTSC/ATSC" = AVerMedia M791 PCIe Combo NTSC/ATSC 6.104.64.5
"AVS Update Manager_is1" = AVS Update Manager 1.0
"AVS Video to Flash_is1" = AVS Video to Flash
"AVS4YOU Software Navigator_is1" = AVS4YOU Software Navigator 1.3
"com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Media Player
"CuteRank" = CuteRank 2.9.1
"EPSON Printer and Utilities" = EPSON Printer Software
"Excel" = Microsoft Excel 97
"ffdshow" = ffdshow (remove only)
"Free Video to Flash Converter_is1" = Free Video to Flash Converter version 4.2
"GearDrivers" = GearDrivers
"HOMESTUDENTR" = Microsoft Office Home and Student 2007
"ID Vault" = Constant Guard Protection Suite
"ImageConverter Plus_is1" = ImageConverter Plus 8.0
"ImgBurn" = ImgBurn
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Microsoft Streets & Trips 2000" = Microsoft Expedia Streets & Trips 2000
"Mozilla Firefox 7.0.1 (x86 en-US)" = Mozilla Firefox 7.0.1 (x86 en-US)
"N360" = Norton Security Suite
"Opera 11.10.2092" = Opera 11.10
"PC Magazine Shred 3_is1" = PC Magazine Shred 3.0
"Silent Package Run-Time Sample" = EPSON ESPR220 Reference Guide
"SmartFTP Client 3.0 (x64) Setup Files" = SmartFTP Client Setup Files 3.0 (x64) (remove only)
"SmartSuite V98.0" = Lotus SmartSuite Release 9
"Stamps.com" = Stamps.com
"Uninstall_is1" = Uninstall 1.0.0.1
"Unlocker" = Unlocker 1.8.7
"Vuze" = Vuze
"WildTangent gateway Master Uninstall" = Gateway Games
"Windows Live OneCare safety scanner" = Windows Live OneCare safety scanner
"WinGimp-2.0_is1" = GIMP 2.6.10
"WinZip" = WinZip
"Works2kSetup" = Microsoft Works 2000 Setup Launcher

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-2960005529-3494219434-145418510-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Google Chrome" = Google Chrome
"GoToMeeting" = GoToMeeting 4.5.0.457

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 10/11/2011 1:04:12 PM | Computer Name = Owner-PC | Source = Windows Search Service | ID = 3083
Description =

Error - 10/11/2011 1:22:39 PM | Computer Name = Owner-PC | Source = Windows Search Service | ID = 3083
Description =

Error - 10/11/2011 1:25:24 PM | Computer Name = Owner-PC | Source = Windows Search Service | ID = 3083
Description =

Error - 10/11/2011 1:32:19 PM | Computer Name = Owner-PC | Source = Windows Search Service | ID = 3083
Description =

Error - 10/11/2011 1:34:33 PM | Computer Name = Owner-PC | Source = Windows Search Service | ID = 3083
Description =

Error - 10/11/2011 1:35:39 PM | Computer Name = Owner-PC | Source = Windows Search Service | ID = 3013
Description =

Error - 10/11/2011 1:35:39 PM | Computer Name = Owner-PC | Source = Windows Search Service | ID = 3013
Description =

Error - 10/11/2011 1:38:11 PM | Computer Name = Owner-PC | Source = Windows Search Service | ID = 3083
Description =

Error - 10/11/2011 1:39:32 PM | Computer Name = Owner-PC | Source = Application Hang | ID = 1002
Description = The program OTL.exe version 3.2.29.1 stopped interacting with Windows
and was closed. To see if more information about the problem is available, check
the problem history in the Problem Reports and Solutions control panel. Process
ID: 1148 Start Time: 01cc883c96fe1f32 Termination Time: 33

Error - 10/11/2011 1:45:31 PM | Computer Name = Owner-PC | Source = Windows Search Service | ID = 3083
Description =

[ System Events ]
Error - 10/10/2011 10:33:16 PM | Computer Name = Owner-PC | Source = Service Control Manager | ID = 7009
Description =

Error - 10/10/2011 10:33:16 PM | Computer Name = Owner-PC | Source = Service Control Manager | ID = 7000
Description =

Error - 10/10/2011 10:33:24 PM | Computer Name = Owner-PC | Source = Service Control Manager | ID = 7026
Description =

Error - 10/10/2011 10:46:58 PM | Computer Name = Owner-PC | Source = Service Control Manager | ID = 7026
Description =

Error - 10/11/2011 9:36:44 AM | Computer Name = Owner-PC | Source = Service Control Manager | ID = 7026
Description =

Error - 10/11/2011 9:44:21 AM | Computer Name = Owner-PC | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
Description =

Error - 10/11/2011 10:08:24 AM | Computer Name = Owner-PC | Source = Print | ID = 19
Description = The print spooler failed to share printer EPSON Stylus Photo R220
Series with shared resource name EPSON Stylus Photo R220 Series. Error 2114. The
printer cannot be used by others on the network.

Error - 10/11/2011 10:09:12 AM | Computer Name = Owner-PC | Source = Service Control Manager | ID = 7026
Description =

Error - 10/11/2011 11:26:39 AM | Computer Name = Owner-PC | Source = Print | ID = 19
Description = The print spooler failed to share printer EPSON Stylus Photo R220
Series with shared resource name EPSON Stylus Photo R220 Series. Error 2114. The
printer cannot be used by others on the network.

Error - 10/11/2011 11:27:51 AM | Computer Name = Owner-PC | Source = Service Control Manager | ID = 7026
Description =


< End of report >

#18 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 61,316 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:11:42 AM

Posted 11 October 2011 - 01:12 PM

Hi again, how are things running at this point?

OTL FIX
------------
We need to run an OTL Fix
  • Please reopen Posted Image on your desktop.
  • Copy and Paste the following code into the Posted Image textbox.
    :otl
    [2011/09/29 15:24:48 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\Gl0v4W9YrAoGdZk
    [2011/09/29 15:24:47 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\GUlB0cv34mWf9Ye
    [2011/09/29 15:24:46 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\BosTBumKXtiQLCN
    [2011/09/29 15:24:44 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\OiQLecF7jO2aRVy
    [2011/09/29 15:24:43 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\xQ8YrPiQ8TePiFs
    [2011/09/29 15:24:42 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\fCIzy1Dbp5JEgqC
    [2011/09/29 15:24:41 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\UcahznLzbEU1sje
    [2011/09/29 15:24:40 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\Zet01Dna6JEgqCI
    [2011/09/29 15:24:40 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\FLTjeVOxu2Fms6K
    [2011/09/29 15:24:39 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\Qv4Wd8ZYkrNAci3
    [2011/09/29 15:24:37 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\Tna6KEgqCIzy1Sb
    [2011/09/29 15:24:37 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\bSvna6KEgqCIzy1
    [2011/09/29 15:24:36 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\i6RwIyDaJgCzupJ
    [2011/09/29 15:24:35 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\rEgqCIzt0
    [2011/09/29 15:24:34 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\o7LTjeBPxu2Fms7
    [2011/09/29 15:24:26 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\Obo4HWf9XCBPxu2
    [2011/09/29 15:24:26 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\Jt01Dna67LXUkrN
    [2011/09/29 15:24:25 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\IrzONyxA0v2b3m5
    [2011/09/29 15:24:21 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\krzONtxA0v2b3m5
    [2011/09/29 15:24:20 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ywkIVrzONx0v2b3
    [2011/09/29 15:24:20 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\VONtxA0uv
    [2011/09/29 15:24:20 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\pRLweBzci2Fmsf8
    [2011/09/29 15:24:20 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\fd8LTjCBPci2nms
    [2011/09/29 15:24:15 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\rwUVrOx0uSiDpGa
    [2011/09/29 15:24:15 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\Qt0ucS1ib3n4Q6W
    [2011/09/29 15:24:12 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\HTXwjUCelBzNc1v
    [2011/09/29 15:24:12 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\GNycA1ivDo
    [2011/09/29 15:21:00 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\HzONyxA1uSoFpGs
    [2011/09/29 15:20:37 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\s2ibF3pmGaJdKfZ
    [2011/09/29 15:20:31 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\WkIBrzONyAuS
    [2011/09/29 15:20:31 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\CCekIBrzOyA
    [2011/09/29 15:20:30 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\YYCekIBrzN
    [2011/09/29 15:20:30 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\E7fEL9gTXjCkBzN
    [2011/09/29 15:20:29 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\jjYCekIBrO
    [2011/09/29 15:20:13 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\wEL8gTZqjCkVzNx
    [2011/09/29 15:16:44 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\LJSULncrU9J3cOw
    [2011/09/29 15:16:44 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\L7brkZWQD1Owfmy
    [2011/09/29 15:16:40 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\oxr9ZJSCEbrZQF
    [2011/09/29 15:16:34 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\yQVGqDq2hDqbwGI
    [2011/09/29 15:16:33 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\WGqDq2hDq
    [2011/09/29 15:16:31 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\xDYnlE3zgGuqJF
    [2011/09/29 15:16:31 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\nAZ3eWAZ3Ar9
    [2011/09/29 15:16:29 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\nPE081T2XGeQ
    [2011/09/29 15:16:29 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\B0Z19uRSLiguKtm
    [2011/09/29 15:16:28 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\dHrduTFIJyXmO8v
    [2011/09/29 15:16:27 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\RXb9okQPLSwQNR3
    [2011/09/29 15:16:22 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\sSKS9DhGz7ARoI5
    [2011/09/29 15:16:21 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\N5woqD8PHBHrmX
    [2011/09/29 15:16:17 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\RJUvfrpq0HUvZiw
    [2011/09/29 15:16:13 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\pYcWCvEr3
    [2011/09/29 15:16:09 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\hpLyExWPs
    [2011/09/29 15:16:04 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\FEIS6wyaTN4glbW
    [2011/09/29 15:16:02 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\KTBvH8kuGXz3sqA
    [2011/09/29 15:15:58 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\nnfVbEUSH
    [2011/09/29 15:15:58 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\BGfjt1FJgIt2m6R
    [2011/09/29 15:15:56 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\DTB1aEeu6wy49ro
    [2011/09/29 15:15:55 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\NwIyDm7YOvm8k0o
    [2011/09/29 15:15:51 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\YDm7TeOu4sgXl
    [2011/09/29 15:15:49 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\lXlNv4W8Y
    [2011/09/29 15:15:48 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\LHWfLqerNxv
    [2011/09/29 15:15:47 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\yySGdZkBcDGQs79
    [2011/09/29 15:15:47 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\gfZkNv3JgXly3Hf
    [2011/09/29 15:15:46 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\cJWf9XUlt0Av
    [2011/09/29 15:15:44 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ZFGQdKqXUlt0SDn
    [2011/09/29 15:15:40 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\T1ibD3onGaHsKfL
    [2011/09/29 15:15:40 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\JibD3onG4Q6W7R9
    [2011/09/29 15:15:36 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\VbD3pnG4aHdK
    [2011/09/29 15:15:36 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ROBtxP0uc1b3n4Q
    [2011/09/29 15:15:33 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\sucS2ibD3n5Q6W8
    [2011/09/29 15:15:28 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\P1ivD3onGaHsKf
    [2011/09/29 15:15:25 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ojUCekIBrPyAuDo
    [2011/09/29 15:15:22 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\xF4pmH5sW7E8Tq
    [2011/09/29 15:15:21 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\H5sQJ7dEKgZ
    [2011/09/29 15:15:08 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\TIBtzP0yc1v3n4m
    [2011/09/29 15:15:04 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\pF4amH5sW7E8
    [2011/09/29 15:15:04 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\HK8fRZ9hYwUeOt
    [2011/09/29 15:15:04 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\eZ9hYXwjUeOtPyS
    [2011/09/29 15:15:03 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\GS2ibD3pn5Q6W
    [2011/09/29 15:15:02 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\vEL8gRZqhCkVl
    [2011/09/29 15:15:02 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\sOP0c1bDna6KRgq
    [2011/09/29 15:15:02 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\oQd8ZhYkeOP1bnQ
    [2011/09/29 15:15:02 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\eW7RTUCIBzNuDo
    [2011/09/29 15:15:02 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\bhkeOP01bGQ
    [2011/09/29 15:15:01 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\Rv3GQd8ZhkeOPci
    [2011/09/29 15:15:01 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\QYIzy0Sbp5JEg9Y
    [2011/09/29 15:15:01 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\HeIrxoGdhwVOx0i
    [2011/09/29 15:14:59 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\cxiGdLjBA
    [2011/09/29 15:14:58 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\rQdZkBcDQ
    [2011/09/29 15:14:58 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\l3mfXkNFd
    [2011/09/29 15:14:56 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\Q7LTjwVOxu2
    [2011/09/29 15:14:54 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\dLTjeVx2m6RwVOx
    [2011/09/29 15:14:52 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ti3GQd8ZTjVBPyi
    [2011/09/29 15:14:52 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\mCwkIVrlOtAu2Fn
    [2011/09/29 15:14:51 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\XZYUlt01in
    [2011/09/29 15:14:51 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\HPSbp4HdRhqCIzy
    [2011/09/29 15:14:49 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\YEgqCIzt0Sbp5JE
    [2011/09/29 15:14:49 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\RtNAvo4HW8wNvpJ
    [2011/09/29 15:14:48 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\RPci2Fms7LTjwVO
    [2011/09/29 15:14:45 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\zPci3Fms7LTjerN
    [2011/09/29 15:14:45 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\sqIx2n6Rwlt
    [2011/09/29 15:14:44 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\Ep5JE8qYIlt0Sbp
    [2011/09/29 15:14:44 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\aqCzAvomWEgqCIl
    [2011/09/29 15:14:43 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\YLCOv4QKhVxi4W9
    [2011/09/29 15:14:40 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\zL9XjUCelz
    [2011/09/29 15:14:40 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\NO2sRVcGfex47YN
    [2011/09/29 15:14:40 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\JCelIBtzPyAiDoF
    [2011/09/29 15:14:37 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\htASbp5JWf9XUlt
    [2011/09/29 15:14:37 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ht0Sbpa6WRhjeBP
    [2011/09/29 15:14:36 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\wSbp4HWf9XUlr
    [2011/09/29 15:14:36 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\gZkBc3Q7XlNv4W
    [2011/09/29 15:14:32 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\jgRZqhYCwU
    [2011/09/29 15:14:31 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\o3onG4aQHsKfLgX
    [2011/09/29 15:14:30 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ZTwOubaKhVz1n6E
    [2011/09/29 15:14:29 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ZLThkrNAci3GQd8
    [2011/09/29 15:14:29 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ZdEgqCklt0cipa6
    [2011/09/29 15:12:13 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\rmmGG5sQJ6dE
    [2011/09/29 15:12:05 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\yRZZ9hhTXwjVeIB
    [2011/09/29 15:11:57 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\nwwkkIVrlONt
    [2011/09/29 15:11:49 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\zssWWJ7dEL8gZ
    [2011/09/29 15:11:41 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\E5ssWWJ7dEL8TZh
    [2011/09/29 15:11:34 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\OWWJJ7ddELgTZhC
    [2011/09/29 15:11:25 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\oOOBBtxP0ucSib3
    [2011/09/29 15:11:17 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\SVVrllOBtxP0c
    [2011/09/29 15:11:13 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\Jeud
    [2011/09/29 15:11:10 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\XUVVrllOBtx0uS1
    [2011/09/29 15:11:01 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\EWKK7ffEL9gXq
    [2011/09/29 15:10:54 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\RLL99gTXqjY
    [2011/09/29 15:10:46 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\DEEEL9ggTXjYCkB
    [2011/09/29 15:10:39 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\jekkIIBrzONyA1v
    [2011/09/29 15:10:31 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\p111uvvS2
    [2011/09/29 15:10:23 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\SmGG55sQJ7
    [2011/09/29 15:10:16 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\OEEKK8gRZq
    [2011/09/29 15:10:08 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\KdEEKK8gRZqhXwU
    [2011/09/29 15:10:01 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\VrrllOBtx
    [2011/09/29 15:09:54 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\fPPP0uccS1bD3n4
    [2011/09/29 15:09:46 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\S4aaQQH6dW
    [2011/09/29 15:09:38 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\zKKK7fRRL9
    [2011/09/29 15:09:31 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\x99hhTXqqUCelBz
    [2011/09/29 15:09:23 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ErrrzPPNyc
    [2011/09/29 15:09:16 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\gyccAA1uvD2oF4m
    [2011/09/29 15:09:08 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\JF44pmmH5
    [2011/09/29 15:09:01 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\WqhhYYCwkIVrONx
    [2011/09/29 15:08:54 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\tOOONtxxA0cS2b3
    [2011/09/29 15:08:46 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\uYYCCwkIVrlOtx0
    [2011/09/29 15:08:39 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\zNNNtxxA0uc2iF3
    [2011/09/29 15:08:31 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\PcccS22ibF3nGaQ
    [2011/09/29 15:08:23 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\pJJ66dWKK
    [2011/09/29 15:08:16 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\RWWWK88fRZ9TXjU
    [2011/09/29 15:08:08 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\X99hhTXXwjVelBz
    [2011/09/29 15:08:01 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\FBttzzP0ycA1vDo
    [2011/09/29 15:07:53 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\EnnF44amH6
    [2011/09/29 15:07:46 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\BammHH6sWJ7fL9T
    [2011/09/29 15:07:39 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\aEEEL9ggTZjYCkV
    [2011/09/29 15:07:31 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\sZZZqjjYCekVrON
    [2011/09/29 15:07:23 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\LIIIVrrzONyA0vS
    [2011/09/29 15:07:16 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\VbFF3ppmG
    [2011/09/29 15:07:09 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\BGG55sQQJ6EK8R9
    [2011/09/29 15:07:01 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\iZZZ9hhYXw
    [2011/09/29 15:06:54 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\JyyycS11ib3on4Q
    [2011/09/29 15:06:46 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\P44aQQH6sWK7RLg
    [2011/09/29 15:06:39 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\U77ffRL9gTXqUCk
    [2011/09/29 15:06:31 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\LAAA1uuvD2o
    [2011/09/29 15:06:24 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\NCCeekIBrzPNxA
    [2011/09/29 15:06:16 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\cffRLL9gTXqjCeI
    [2011/09/29 15:06:08 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\KG44aQQH6sW7fL9
    [2011/09/29 15:06:00 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\SBBttxP0ycS1bDo
    [2011/09/29 15:05:52 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\p5ssQJJ6dEKgR9h
    [2011/09/29 15:05:44 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\PAAA0uuvS2oF3mG
    [2011/09/29 15:05:37 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\VOOONyxxA0vS
    [2011/09/29 15:05:29 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\zqqjjYCekIVrONx
    [2011/09/29 15:05:21 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\pjjYYCekkVrz
    [2011/09/29 15:05:13 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\jiivvD3onF4aH6W
    [2011/09/29 15:05:05 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\DfRRZZ9hTXwjVeI
    [2011/09/29 15:04:58 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\IbbbF33pnG5QJdW
    [2011/09/29 15:04:50 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\yTZZqhhYCwkVrO
    [2011/09/29 15:04:42 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\TppmmH5ssJ7dE8T
    [2011/09/29 15:04:34 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\UuuvvD2onF4pH5W
    [2011/09/29 15:04:26 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\iCCCellIBrzNyA1
    [2011/09/29 15:04:18 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\SHHH6ddWK7fL9TX
    [2011/09/29 15:04:11 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\CQHH66dWK7fR9hX
    [2011/09/29 15:04:03 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\vuuccS1ibD3pG4Q
    [2011/09/29 15:03:55 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\zppnnG4aaH6dW7R
    [2011/09/29 15:03:48 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\OqqjjUCelI
    [2011/09/29 15:03:40 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\WNyyccA1uvD2
    [2011/09/29 15:03:33 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\HBBrrzPPNyA1uDo
    [2011/09/29 15:03:25 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\TnnnF44pm
    [2011/09/29 15:03:18 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\vdddELL8gT
    [2011/09/29 15:03:10 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\tqqhhYCwwI
    [2011/09/29 15:03:03 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\GwwkkIVrrONtx0c
    [2011/09/29 15:02:55 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\uOONNtxA0ucSib3
    [2011/09/29 15:02:48 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\KA00uccS2ib3pG5
    [2011/09/29 15:02:40 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\GF33ppnG5aQJdW8
    [2011/09/29 15:02:33 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\w666dWWK8fR9hXw
    [2011/09/29 15:02:25 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\mjjjUVVelIBzPyc
    [2011/09/29 15:02:18 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\DPP0yycA1ivDon4
    [2011/09/29 15:02:11 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\rWWWJ7ffELgTZjC
    [2011/09/29 15:02:03 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\a00uuvS22b
    [2011/09/29 15:01:56 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\jvvvS22obF3mGsQ
    [2011/09/29 15:01:48 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\p00uuvS2obF3mGs
    [2011/09/29 15:01:41 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\uggRRZ9hY
    [2011/09/29 15:01:33 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\atttxPP0ycSib
    [2011/09/29 15:01:26 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\FllOBBtxP0yc1iD
    [2011/09/29 15:01:18 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\BKK88gRZ9hYXkUe
    [2011/09/29 15:01:10 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\W66ddEK8gRZ9YXk
    [2011/09/29 15:01:03 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\IEEEK88gRZ9Y
    [2011/09/29 15:00:55 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\OZZ99hYXwk
    [2011/09/29 15:00:48 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\zXwwkkUVelOBxPy
    [2011/09/29 15:00:40 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\yVVVellOBtx0yS1
    [2011/09/29 15:00:32 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\rYXXwwkUVelO
    [2011/09/29 15:00:24 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\gAA00uvS2obFpm5
    [2011/09/29 15:00:17 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\XbFF3ppmG5sJ6EK
    [2011/09/29 15:00:09 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\oJJ6ddEK8gRZhYw
    [2011/09/29 15:00:02 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\nOOOBttxP0yS
    [2011/09/29 14:59:55 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\donnG44aQH6WKfR
    [2011/09/29 14:59:47 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\cffRRL9ggXqjUeI
    [2011/09/29 14:59:40 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\J99ggTXqjUCeIBz
    [2011/09/29 14:59:31 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\etttxPP0ycSib3o
    [2011/09/29 14:59:23 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\LGG55sQJ6dEKgR9
    [2011/09/29 14:59:16 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ozzOONyxA0uv2oF
    [2011/09/29 14:59:08 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\eEELL9gTTqjYCkV
    [2011/09/29 14:59:00 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\RBBBtzPP0yA
    [2011/09/29 14:58:52 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\pbbFF3pnn5aQJdK
    [2011/09/29 14:58:43 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\q888gTTZqhYw
    [2011/09/29 14:58:35 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\fnnGG4aQQ6dWKfL
    [2011/09/29 14:58:27 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\RbbbF44pmG5QJdE
    [2011/09/29 14:58:19 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\YxxAA1uuvSobFpG
    [2011/09/29 14:58:11 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\b66ssWK7fEL9TXj
    [2011/09/29 14:58:03 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\m33oonGG4aH6sKf
    [2011/09/29 14:57:55 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\EYYYXwwjUVeOBzP
    [2011/09/29 14:57:47 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\TEEKK8fRZ
    [2011/09/29 14:57:40 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\G22ibbF3pm
    [2011/09/29 14:57:32 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\uttxxA0uvS2iF3m
    [2011/09/29 14:57:24 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\VqjjYYCwkIVrONx
    [2011/09/29 14:57:17 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\BkkkIVVrzONxAuv
    [2011/09/29 14:57:09 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\xL88ggTZqjYCkIr
    [2011/09/29 14:57:01 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\PeeelIBBtzN
    [2011/09/29 14:56:53 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\g6ddWWK8fRL
    [2011/09/29 14:56:45 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ZYYCCwkkUVlONx0
    [2011/09/29 14:56:37 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\hkUUVVrlONtx0uS
    [2011/09/29 14:56:29 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\bBBrrzPPNyA1uDo
    [2011/09/29 14:56:21 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\cssWWK7fRL9gXqU
    [2011/09/29 14:56:13 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\hHH66sWK7
    [2011/09/29 14:56:05 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\JwwkkUVVelBtx0c
    [2011/09/29 14:55:57 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\RbbbF33pmG5QJd
    [2011/09/29 14:55:50 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\O3ppmGG5sQ
    [2011/09/29 14:55:41 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\QSSS2ibbF3n
    [2011/09/29 14:55:33 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\pZZqqhYCC
    [2011/09/29 14:55:24 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\BOONNyxAAu
    [2011/09/29 14:55:16 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\jCCeekIBrzONxAu
    [2011/09/29 14:55:08 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\BgggTXXqjYCkIrz
    [2011/09/29 14:55:00 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\UvvDD3oonGamHsK
    [2011/09/29 14:54:51 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\VBBttzPNNcA1iDo
    [2011/09/29 14:54:43 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\fVVVrllONtx0uS2
    [2011/09/29 14:54:36 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\I33ppnG5aQH6WKf
    [2011/09/29 14:54:27 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\n66ssWK7fRL9TXj
    [2011/09/29 14:54:19 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\KRZZ99hYXwkUelB
    [2011/09/29 14:54:11 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\E00yycS1ib
    [2011/09/29 14:54:04 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\m3oonnG4aQ
    [2011/09/29 14:53:56 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\I7ffRRL9gTXq
    [2011/09/29 14:53:49 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\JeeekIIBrzPyx1u
    [2011/09/29 14:53:41 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\WrrrzPNNyx1u
    [2011/09/29 14:53:34 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ZjjjUCCekIBzPyx
    [2011/09/29 14:53:26 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\dRRLL9gTX
    [2011/09/29 14:53:18 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\v33oonG4aQ
    [2011/09/29 14:53:10 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\LxPP0yycS1iD3n
    [2011/09/29 14:53:03 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ettxxP0ycS1iD3n
    [2011/09/29 14:52:55 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\iP00yycS1ibDon4
    [2011/09/29 14:52:47 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\EcSS11ibD3on4aH
    [2011/09/29 14:52:40 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\SyccSS1ibD
    [2011/09/29 14:52:32 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\QoobbF33pm5sQ6
    [2011/09/29 14:52:23 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ZHHH6sWWJ7EL9Tq
    [2011/09/29 14:52:15 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\edWWKK8fRZ9hXwU
    [2011/09/29 14:52:07 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\E22ibbF3pnG5QJd
    [2011/09/29 14:51:59 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\VyyycAA1uvDon4p
    [2011/09/29 14:51:51 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\K444aQQH6d
    [2011/09/29 14:51:43 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\BQQQH6ddWKfRLhX
    [2011/09/29 14:51:36 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\SqjjUCCelI
    [2011/09/29 14:51:29 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\TNNyycA1uvD2
    [2011/09/29 14:51:21 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\orrrzPPNycAuv2o
    [2011/09/29 14:51:13 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\W6ddWWK7fRL9TXj
    [2011/09/29 14:51:06 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\irrzzPNycA
    [2011/09/29 14:50:58 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\VzzPPNycA1uv2oF
    [2011/09/29 14:50:50 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\XeeelIBBrzNyc
    [2011/09/29 14:50:43 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\dPPNNycAAuvD
    [2011/09/29 14:50:35 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\wNyycAA1uvDon4p
    [2011/09/29 14:50:28 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\sPPNyycA1uvDon4
    [2011/09/29 14:50:20 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\RWKK77fRL9hTqj
    [2011/09/29 14:50:12 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\LuccSS1ibD3pG4
    [2011/09/29 14:50:04 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\HBBttxP0ucS1bDp
    [2011/09/29 14:49:56 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\GddEEK8gRZqhXwU
    [2011/09/29 14:49:48 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\vG55sQQJ7d
    [2011/09/29 14:49:41 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\IyyxxA1uuS2o
    [2011/09/29 14:49:33 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\LaaamHH6sWKfE9g
    [2011/09/29 14:49:24 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\E88ffRZZ9h
    [2011/09/29 14:49:16 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\oIVVrzzONtx0uS2
    [2011/09/29 14:49:08 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\u55ssWJ77EL8gZj
    [2011/09/29 14:49:01 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\Y55ssWJ7fE
    [2011/09/29 14:48:53 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ijjjUCCelIBzPyc
    [2011/09/29 14:48:45 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\HnnGG5aQH6dW8fL
    [2011/09/29 14:48:37 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\fYYCwwkUVrlOt
    [2011/09/29 14:48:29 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\X888gRZZqhCwkVl
    [2011/09/29 14:48:21 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\wppmmH5sQJ7dL8R
    [2011/09/29 14:48:14 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\zvvDD2obb4pmH
    [2011/09/29 14:48:06 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\dssQQJ77dE8gRqY
    [2011/09/29 14:47:58 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\TrrzPPNyxA1u
    [2011/09/29 14:47:50 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\HRRLL9gTXqjUek
    [2011/09/29 14:47:43 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\iHHH6ssWK7fL9TX
    [2011/09/29 14:47:35 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\QOOOBtxxP0cS1b3
    [2011/09/29 14:47:27 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\wgggRZZ9hYXkUel
    [2011/09/29 14:47:19 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\a8ggRZZ9hYXkU
    [2011/09/29 14:47:11 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\Q7ffEEL9gTZ
    [2011/09/29 14:47:03 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\CLL99gTZqjYCkIr
    [2011/09/29 14:46:56 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ImmmH66sWJ7E
    [2011/09/29 14:46:48 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\f99hhTXwjUVeIBz
    [2011/09/29 14:46:40 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\JffRRZ9hTXwj
    [2011/09/29 14:46:32 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\EhhTTXwjjV
    [2011/09/29 14:46:25 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\peeelIBBt
    [2011/09/29 14:46:17 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\azzzP0yycAivDoF
    [2011/09/29 14:46:10 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\tBBBtzPP0yA1iDo
    [2011/09/29 14:46:02 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\eUUUVeelIBtP0cA
    [2011/09/29 14:45:54 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\sjUUVeelIBtP0cA
    [2011/09/29 14:45:47 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\cwwjjUVelIBt
    [2011/09/29 14:45:39 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\SIIBttzP0y
    [2011/09/29 14:45:31 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\zccAA1ivD3
    [2011/09/29 14:45:24 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\qonnFF4am
    [2011/09/29 14:45:17 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ATTZZqjYCekIrzN
    [2011/09/29 14:45:09 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\SCCCekIIVrONy
    [2011/09/29 14:45:01 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\bEEEL99gTZqYCkI
    [2011/09/29 14:44:54 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\SWJJ7ffEL9
    [2011/09/29 14:44:46 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\J777fEEL9gTqjCe
    [2011/09/29 14:44:39 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\qeeekIVVr
    [2011/09/29 14:44:31 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\VyyyxA00u
    [2011/09/29 14:44:23 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\gkkkIVrrzOyxAu
    [2011/09/29 14:44:16 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\oCCCekIIVrONyAu
    [2011/09/29 14:44:08 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\iaaamH66sW7fE9T
    [2011/09/29 14:44:00 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\oWWJ77fEL9gTqjC
    [2011/09/29 14:43:53 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\gDDD3oonF4aH6WJ
    [2011/09/29 14:43:44 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\QbbbF33pnG5QJdW
    [2011/09/29 14:43:36 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\pYYYCwwkIVrONxA
    [2011/09/29 14:43:28 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\GyccAA1uvD2oF
    [2011/09/29 14:43:21 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\c22oonF44mH5
    [2011/09/29 14:43:13 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\RnnnG44aQH6WKf
    [2011/09/29 14:43:04 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\JNNyyxA1uvS2bFp
    [2011/09/29 14:42:56 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\WlllOBttzPycSiD
    [2011/09/29 14:42:48 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\F66ssWK7fEL9
    [2011/09/29 14:42:39 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\KcAA1iivD2oF4mH
    [2011/09/29 14:42:32 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ZlllIBBtzPNc
    [2011/09/29 14:42:21 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\C666sWJJ7fL9gZ
    [2011/09/29 14:42:13 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\b66ddWK8fRZ9TX
    [2011/09/29 14:42:05 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\zCCwwkIVrlONxAu
    [2011/09/29 14:41:56 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\GGGG4aaQH6
    [2011/09/29 14:41:49 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\IRLL99hTXqjU
    [2011/09/29 14:41:41 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\vssQQJ7dEK8gZqY
    [2011/09/29 14:41:32 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\QoonnG44am6sW7E
    [2011/09/29 14:41:23 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\pLL88gTZqjYCkIr
    [2011/09/29 14:41:16 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\QjjjYCCwkIVzOt
    [2011/09/29 14:41:08 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\jssWWJ7fEL8gZqY
    [2011/09/29 14:41:00 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\KUUUCeelIB
    [2011/09/29 14:40:51 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\OPPPNyxxA1vD2b4
    [2011/09/29 14:40:44 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\dBrrzPPNyxAu
    [2011/09/29 14:40:36 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\aUUCCekIIrzPNx1
    [2011/09/29 14:40:28 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\Z222obbF4
    [2011/09/29 14:40:21 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\WHHH5ssQJ
    [2011/09/29 14:40:13 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\cNNNyxAA1
    [2011/09/29 14:40:06 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ussQQJ7dEL8gZqY
    [2011/09/29 14:39:58 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\XCCwwkUUVrONtPu
    [2011/09/29 14:39:51 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ittxxP00uc2ib3n
    [2011/09/29 14:39:44 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\rWWWK88fRL9T
    [2011/09/29 14:39:36 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\KeellIBBtzNyc1v
    [2011/09/29 14:39:29 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\z55ssWJ77E
    [2011/09/29 14:39:22 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\xIIVVrzONtxAuv2
    [2011/09/29 14:39:14 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\oiibbF3pmG5aJ6E
    [2011/09/29 14:39:07 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\kddEKK8fRZ9hXwU
    [2011/09/29 14:38:59 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ItttzPP0ycSiv3o
    [2011/09/29 14:38:52 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\unnGG4aamHsWKfL
    [2011/09/29 14:38:45 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\DssWWK7ffL9gTqY
    [2011/09/29 14:38:37 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\o777fEEL9gTqjC
    [2011/09/29 14:38:29 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\mTTTXqqjYCeIB
    [2011/09/29 14:38:22 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\gyxxAA1uvS2oF4m
    [2011/09/29 14:38:15 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\l55ssQJ77EK8gZh
    [2011/09/29 14:38:07 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\PEEKK8ggRZhYXkV
    [2011/09/29 14:38:00 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\qxxxP00ucS1b
    [2011/09/29 14:37:52 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\taaQQH6dWK7fL9T
    [2011/09/29 14:37:45 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\fhTTXqqjUCeIBzP
    [2011/09/29 14:37:37 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\IqjjUUCelIBrPNc
    [2011/09/29 14:37:30 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\QNyycAA1uvDon4p
    [2011/09/29 14:37:23 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\YHHH5sWWJ7EL8Tq
    [2011/09/29 14:37:15 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\wWJJ77dEL8gTqhC
    [2011/09/29 14:37:08 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\UONNttxA0uc
    [2011/09/29 14:37:00 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\mbFF33pnG5aQ6
    [2011/09/29 14:36:53 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\yTTXXwjUVelItz0
    [2011/09/29 14:36:45 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\JUUVeelIBtzPyc1
    [2011/09/29 14:36:38 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\WIBBttzP0ycAiv3
    [2011/09/29 14:36:30 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ZXwwjUUVelItz0y
    [2011/09/29 14:36:23 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\vzPP00ycA1iv3oF
    [2011/09/29 14:36:15 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\tiivDD3onF4aH6W
    [2011/09/29 14:36:07 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\e000yccA1iv3oF
    [2011/09/29 14:36:00 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\OD33oonF4amHs
    [2011/09/29 14:35:52 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\WWWJJ7fEL9gTqjC
    [2011/09/29 14:35:45 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\qCCeekIVrzONxAu
    [2011/09/29 14:35:37 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ykkIIVrzONyx0u
    [2011/09/29 14:35:30 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\exxxA0uuvSobFp
    [2011/09/29 14:35:22 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\LjYYCCekIVrzNyA
    [2011/09/29 14:35:14 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\IYYYCeekIVrO
    [2011/09/29 14:35:07 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\YgggTZZqjYCkIrz
    [2011/09/29 14:34:59 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\H999gTZZqjCekV
    [2011/09/29 14:34:51 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\JjjYYCekIVrz
    [2011/09/29 14:34:44 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\rONNyxxA0uv2
    [2011/09/29 14:34:37 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ommG55sQJ6dE8gZ
    [2011/09/29 14:34:29 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\jRRZZ9hYXwkUelB
    [2011/09/29 14:34:22 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\fUUVVelOBtxPyc1
    [2011/09/29 14:34:14 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\lellOBBtxP0cSib
    [2011/09/29 14:34:06 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\p8ggRRZ9hYXwUVl
    [2011/09/29 14:33:58 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\bSS22obF3pmGsQ6
    [2011/09/29 14:33:51 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\eYYCeekIVrzOyx0
    [2011/09/29 14:33:43 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\EssWWJ7fEL9gZqY
    [2011/09/29 14:33:35 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\JammH66sWJ7E
    [2011/09/29 14:33:27 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\nD33onnF4am6sJ7
    [2011/09/29 14:33:19 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\zVeelIIBtzPyc1i
    [2011/09/29 14:33:12 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\LWWWK88fRZ9TXjU
    [2011/09/29 14:33:04 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\rdWWKK8fRZ9hXwU
    [2011/09/29 14:32:56 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\KWKK88fRZ9
    [2011/09/29 14:32:49 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\edddWKK8fRZhTwj
    [2011/09/29 14:32:41 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\iK88fRRZ9hTwjVe
    [2011/09/29 14:32:33 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\wddWWK8ffZ
    [2011/09/29 14:32:26 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\HWKK88fRZ9hTwjV
    [2011/09/29 14:32:18 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\w2iibFF3pnGaQ6d
    [2011/09/29 14:32:10 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\AHH55sWJ7dEL
    [2011/09/29 14:32:01 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\dooobF44pm5s
    [2011/09/29 14:31:53 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\muvvS22obF4mGsQ
    [2011/09/29 14:31:46 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\l55ssQJJ7dK8gZh
    [2011/09/29 14:31:38 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\zddEEK8ggZqhYwU
    [2011/09/29 14:31:31 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\yggRRZqhYXwkVrO
    [2011/09/29 14:31:23 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\rSS22obF4pmGsQ7
    [2011/09/29 14:31:15 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\mrzzONNyxA1vSob
    [2011/09/29 14:31:07 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\KjjjYCCekI
    [2011/09/29 14:30:59 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\gvvDD3onn4amHsK
    [2011/09/29 14:30:51 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\lGG55aQJ6
    [2011/09/29 14:30:43 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\DfffEL88gTqjYw
    [2011/09/29 14:30:35 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\BlllIBBtzPNcAiv
    [2011/09/29 14:30:25 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\gYYYCeekIVrONxA
    [2011/09/29 14:30:16 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\PZZ99hTXXjUVeI
    [2011/09/29 14:30:09 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\AwwwjUUVelIt
    [2011/09/29 14:30:00 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\BWWWJ77dEL8TZhY
    [2011/09/29 14:29:52 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\qnnnF4ppm
    [2011/09/29 14:29:45 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\nLLL8gTTZqYC
    [2011/09/29 14:29:37 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\guuccS1ibD3pG4
    [2011/09/29 14:29:28 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\fS11ivvD3on4aH6
    [2011/09/29 14:29:20 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\uyyccS1ivD3o
    [2011/09/29 14:29:12 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ivvvD33onG
    [2011/09/29 14:29:05 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\VDD3oonG4amHsW7
    [2011/09/29 14:28:57 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\uvvD33onG4am6sK
    [2011/09/29 14:28:50 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\tyccS11ivD3nGam
    [2011/09/29 14:28:42 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\g000yccS1iv3oG4
    [2011/09/29 14:28:34 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\YeelOOBtzP0yS1v
    [2011/09/29 14:28:27 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\f0yyccS1ivD3nGa
    [2011/09/29 14:28:19 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\XlllOBttzPycS
    [2011/09/29 14:28:11 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\Q222ibbF3pm5aJ6
    [2011/09/29 14:28:03 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\u99hYYXwjUVe
    [2011/09/29 14:27:56 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\kmmGG5aQJ6dE8f
    [2011/09/29 14:27:48 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\pfRRZ99hYXwUVlO
    [2011/09/29 14:27:41 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\eellOOBtzP0yS1v
    [2011/09/29 14:27:33 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\voonnG4amH6sK7E
    [2011/09/29 14:27:26 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\zssWWK7fEL9gXqY
    [2011/09/29 14:27:19 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\qzOONNyxA1uv2oF
    [2011/09/29 14:27:11 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\d777dEEK8
    [2011/09/29 14:27:04 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\WBBBtxPP0uS1iDp
    [2011/09/29 14:26:57 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\pSSS1ibbD3nG4Q6
    [2011/09/29 14:26:49 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\YrrllOBtxP0uS1b
    [2011/09/29 14:26:41 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\oSSS1ibbD3nG4Q6
    [2011/09/29 14:26:33 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\PS22oobF4pmGsQ7
    [2011/09/29 14:26:26 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\GEEKK8gRRq
    [2011/09/29 14:26:18 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\kwwkkUVrlOB
    [2011/09/29 14:26:10 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\jmmGG5ssQJ
    [2011/09/29 14:26:03 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\c55ssQJ7dEK8RZh
    [2011/09/29 14:25:55 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ssQQJJ7dEK8gZqY
    [2011/09/29 14:25:48 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\JlllOBttx
    [2011/09/29 14:25:40 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\FcccS1iib
    [2011/09/29 14:25:32 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\aVrrllOBtxP0c
    [2011/09/29 14:25:25 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\AEEKK8gRZqhYwkV
    [2011/09/29 14:25:17 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\H8ggRZZqhYX
    [2011/09/29 14:25:09 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\FJJ77dEK8gRZhYw
    [2011/09/29 14:25:02 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\LddEEK8gRZqhXw
    [2011/09/29 14:24:54 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\kUVVrrlOBtxPuc1
    [2011/09/29 14:24:47 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\vbbDD3pnn4aQHdK
    [2011/09/29 14:24:39 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\jUUVVrlOBtxPuc1
    [2011/09/29 14:24:31 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\YssQQJ7ddK8gRqY
    [2011/09/29 14:24:24 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\nGG55sQJ7dEKgRq
    [2011/09/29 14:24:16 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\g555sQQJ7dE
    [2011/09/29 14:24:08 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\pyyyxAA1uvSo
    [2011/09/29 14:24:00 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\XCCeekIIBrONyAu
    [2011/09/29 14:23:53 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\w7ffELL9gTXjYek
    [2011/09/29 14:23:45 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\r44aamH6s
    [2011/09/29 14:23:37 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\AvvvD33onG4mHsW
    [2011/09/29 14:23:29 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\xYYYXwwjUVeOBz
    [2011/09/29 14:23:21 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\aQQJJ6dEK8fR9hX
    [2011/09/29 14:23:14 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\EF33ppmG5aQJdE8
    [2011/09/29 14:23:06 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\Z00uuvS2ibF3
    [2011/09/29 14:22:58 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\XiibbF33pm
    [2011/09/29 14:22:50 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\J77ffEL8gTZqYCk
    [2011/09/29 14:22:42 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\yAA11ivD2onFam5
    [2011/09/29 14:22:35 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\CUUUCeelIBtPNcA
    [2011/09/29 14:22:27 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\mXXXwjjUCelBt
    [2011/09/29 14:22:19 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ifffRLL9hTXjUel
    [2011/09/29 14:22:11 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ebDD3ppnG5aH6WK
    [2011/09/29 14:22:03 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ErllONNtxP0cSib
    [2011/09/29 14:21:56 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ukUUVrrlONtP0cS
    [2011/09/29 14:21:48 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\GmHH55sQJ7dE8
    [2011/09/29 14:21:40 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ebFF44pmH5sQ7dL
    [2011/09/29 14:21:32 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\cjUUCeekIBrPNxA
    [2011/09/29 14:21:24 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\C666sWWK7fR9gXq
    [2011/09/29 14:21:17 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\HQQHH6sWK7fR9g
    [2011/09/29 14:21:09 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\rnnGG4aQH6sW7fL
    [2011/09/29 14:21:01 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\toobbF3pmG5sJ6E
    [2011/09/29 14:20:53 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\pFF3ppmG5sQJdE8
    [2011/09/29 14:20:45 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\XxAA00uvS2ob3pG
    [2011/09/29 14:20:38 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\LrrzOONyxA0
    [2011/09/29 14:20:30 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\TyyyxAA0u
    [2011/09/29 14:20:22 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\tZZqqjYCCk
    [2011/09/29 14:20:15 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\O999gTTZqjYekVr
    [2011/09/29 14:20:07 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\jWJJ7ffEL9
    [2011/09/29 14:19:59 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ztttzPP0ycAiv3o
    [2011/09/29 14:19:51 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\q1iivvD3onF4mHs
    [2011/09/29 14:19:44 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\EmmHH6sWJ7fE9gZ
    [2011/09/29 14:19:36 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\TvDD3oonF4aH
    [2011/09/29 14:19:28 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\HWWWK8ffRZhTXjV
    [2011/09/29 14:19:20 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\pxAA0uucS2iF3nG
    [2011/09/29 14:19:12 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\fDD22onnF4mH5W7
    [2011/09/29 14:19:05 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\RppmmH55sW7dE8T
    [2011/09/29 14:18:57 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\onFF44pmH5sW7d
    [2011/09/29 14:18:50 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\qIIVVrlON
    [2011/09/29 14:18:42 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\yrllONNtxA0cSib
    [2011/09/29 14:18:34 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\b55ssWJ7dEL8TZh
    [2011/09/29 14:18:25 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\PoobFF4pmG5sJ7E
    [2011/09/29 14:18:17 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\aBrrzzONyxA1vSo
    [2011/09/29 14:18:09 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\t777fELL9gXqjCk
    [2011/09/29 14:18:01 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\YlllOBBtzP0cS
    [2011/09/29 14:17:54 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\RwwjjUVelOBtP0c
    [2011/09/29 14:17:46 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\Y8ffRZZ9hY
    [2011/09/29 14:17:38 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\nVeellOBtzP0
    [2011/09/29 14:17:31 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\mtzzP00ycS
    [2011/09/29 14:17:23 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\dQQJJ6dEK8fR9hX
    [2011/09/29 14:17:15 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\sNNttxA0uvS2bFp
    [2011/09/29 14:17:07 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\cggTTZqqjYwkIrO
    [2011/09/29 14:16:59 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\qoonnF4amH5sJ7E
    [2011/09/29 14:16:51 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\OjUUCeelIBtPNcA
    [2011/09/29 14:16:44 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\LHH66dWKKfRL9Tw
    [2011/09/29 14:16:28 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\sTTXXwjjUClIBzN
    [2011/09/29 14:16:21 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\EeellIBtzPNyA1v
    [2011/09/29 14:16:12 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\B555sQJJ7dL8gZh
    [2011/09/29 14:16:05 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\JZZZqhhYCwkVrON
    [2011/09/29 14:15:57 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\bUUVVrlONtxPuc2
    [2011/09/29 14:15:50 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\GtttxP00uc2ib3n
    [2011/09/29 14:15:42 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\kD33pnnG5aQ6dK8
    [2011/09/29 14:15:35 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\YS22iibD3pnGa
    [2011/09/29 14:15:27 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ySS22ibD3pnGaQ6
    [2011/09/29 14:15:20 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\TSS22ibD3pnGaQ6
    [2011/09/29 14:15:12 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\VRRRZqqhYCwUVlO
    [2011/09/29 14:15:04 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\sEEEL88gRZqYCkU
    [2011/09/29 14:14:56 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\EqqhhYCwkUVrONx
    [2011/09/29 14:14:48 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\NuvvD22obF4mHsQ
    [2011/09/29 14:14:41 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\AooobFF4pmHsQ7d
    [2011/09/29 14:14:33 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\u4ppmHH5sQJd
    [2011/09/29 14:14:26 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\NbbFF4pmH5sQ7dL
    [2011/09/29 14:14:17 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\i4aaQQH6sWK7RLg
    [2011/09/29 14:14:10 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\wnnnG44aQH6WKfR
    [2011/09/29 14:14:02 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\gKK77fRL9gTXjUe
    [2011/09/29 14:13:55 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\r777fRRL9gTq
    [2011/09/29 14:13:47 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\SQQHH6ssWKfRLgX
    [2011/09/29 14:13:39 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\XaaQQH6sWK7fL
    [2011/09/29 14:13:31 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\U111ibbD3on4aH6
    [2011/09/29 14:13:24 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\IooonGG4aQHsW7f
    [2011/09/29 14:13:16 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\LOBBtxxP0yc1iD3
    [2011/09/29 14:13:08 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\lOOBBtxP0ycS
    [2011/09/29 14:13:01 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\E88ggRZ9hYXwU
    [2011/09/29 14:12:53 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\T555sQQJ6dE8gZ9
    [2011/09/29 14:12:45 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\K33pmmG5sQ
    [2011/09/29 14:12:38 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\pQQJJ6ddE
    [2011/09/29 14:12:30 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\JgggRZZ9h
    [2011/09/29 14:12:23 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\YRZZ99hYXwkUelB
    [2011/09/29 14:12:15 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\RddEEK8gRZ9
    [2011/09/29 14:12:06 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ZssWJJ7fE
    [2011/09/29 14:11:59 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\cUUUVellIBzP0c1
    [2011/09/29 14:11:51 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\FnGG55aQJ6dW8fZ
    [2011/09/29 14:11:43 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\v222ibbF3pn5aJ6
    [2011/09/29 14:11:35 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\FtttxAA0ucSi
    [2011/09/29 14:11:28 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\BNttxAA0ucSib3p
    [2011/09/29 14:11:20 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\tqqqhYCCwk
    [2011/09/29 14:11:12 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\QWWJJ7dEL8gTqh
    [2011/09/29 14:11:04 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\EnnFF4pmH5sW7dL
    [2011/09/29 14:10:56 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\c222onnF4pm5
    [2011/09/29 14:10:49 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\zAA11uvD2onFpm5
    [2011/09/29 14:10:41 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\IPPNNyccA1vD
    [2011/09/29 14:10:33 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\jKKK7ffRL9
    [2011/09/29 14:10:26 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\adWWK77fRL9TXjU
    [2011/09/29 14:10:18 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\xSS11ibbD3nG4Q6
    [2011/09/29 14:10:10 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\guuucSS1ibDpn4
    [2011/09/29 14:10:02 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\WtxxPP0ucS1iD3n
    [2011/09/29 14:09:55 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\wtttxP00uc1ib3n
    [2011/09/29 14:09:47 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\JxxPP0ucS1ib
    [2011/09/29 14:09:39 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ARRRZqqhYXwU
    [2011/09/29 14:09:32 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\XgRRZqqhYXwUVlO
    [2011/09/29 14:09:24 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\L777dEEK8gRqhX
    [2011/09/29 14:09:16 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\lS22oobF4pmGsQ7
    [2011/09/29 14:09:08 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ANNyyxA11vS2oFp
    [2011/09/29 14:09:01 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ZONNyxxA1uv2oF4
    [2011/09/29 14:08:53 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\jqjjYYCekIBrONx
    [2011/09/29 14:08:44 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\RQQJJ6dEK8f
    [2011/09/29 14:08:37 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\CFF33pmGGaQJ6E8
    [2011/09/29 14:08:29 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\OqqjYYCwkIVrO
    [2011/09/29 14:08:21 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\xJJ7ffEL8gTZjYw
    [2011/09/29 14:08:13 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\uLLL8ggTZqjCwIV
    [2011/09/29 14:08:06 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\iqqjjYCwkIVrO
    [2011/09/29 14:07:58 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\p777fELL8gZqjCk
    [2011/09/29 14:07:50 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\DssWWJ7fEL8
    [2011/09/29 14:07:43 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\JwwwkIIVrzOtx0u
    [2011/09/29 14:07:36 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\nNNtxxA0uvS2bFp
    [2011/09/29 14:07:28 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\RxxxA00uvS2
    [2011/09/29 14:07:20 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\hvvSS2ibF
    [2011/09/29 14:07:13 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\tSSS2ibbF3mG5Q6
    [2011/09/29 14:07:05 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\piibFF3pmG5aJ6E
    [2011/09/29 14:06:58 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\XpppmG55aQ6dE
    [2011/09/29 14:06:50 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\fvvvS22ibF3mGaQ
    [2011/09/29 14:06:43 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\SJ66ddEK8fRZhYw
    [2011/09/29 14:06:35 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\vKKK8ffRZ9hXwUV
    [2011/09/29 14:06:27 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\b9hhYXXwjUVlOtz
    [2011/09/29 14:06:20 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\V9hhYYXwjUVe
    [2011/09/29 14:06:12 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\TVVVelOOBtP0
    [2011/09/29 14:06:05 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\owwwjUUVelOtz0y
    [2011/09/29 14:05:57 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\KvDD3oonG4
    [2011/09/29 14:05:50 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\dEELL9ggTXjYCkB
    [2011/09/29 14:05:42 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ZjjjYCeekIrzOyA
    [2011/09/29 14:05:35 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\QrrrzONNyx1uv2
    [2011/09/29 14:05:28 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\issQQJ7dEK8gZqY
    [2011/09/29 14:05:20 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\lBBttxP0ucS1bDp
    [2011/09/29 14:05:12 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\kddEEK8gRZqhXw
    [2011/09/29 14:05:05 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ZuuccS1ib
    [2011/09/29 14:04:58 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\XbDD3ppnG4aH6WK
    [2011/09/29 14:04:50 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\RYYYXwwkUVrOBxP
    [2011/09/29 14:04:42 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\pDDD3ppnG4aH
    [2011/09/29 14:04:35 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\RLLL9hhTXqjCeIB
    [2011/09/29 14:04:27 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\P44aQQH6dWK7RLh
    [2011/09/29 14:04:20 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\qCCCellIBrzN
    [2011/09/29 14:04:13 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\CpmmH55sWJ7ELgT
    [2011/09/29 14:04:05 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\yggTTZqhhCwkIrO
    [2011/09/29 14:03:57 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\DJJ77dELLgTZqY
    [2011/09/29 14:03:49 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\uPNNyccA1uv2
    [2011/09/29 14:03:42 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\kddEEL88gTqhYwI
    [2011/09/29 14:03:34 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\qHHH5sWWJ7EL
    [2011/09/29 14:03:27 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\eDDD2oonF4pH5WJ
    [2011/09/29 14:03:19 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\TsssWJ77dE8gTqY
    [2011/09/29 14:03:12 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\bqqqhYYCwkIrlNt
    [2011/09/29 14:03:04 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\xrrllONtxA0uS2b
    [2011/09/29 14:02:57 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\A555aQQJ6dW8
    [2011/09/29 14:02:50 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\FyyccA1iv
    [2011/09/29 14:02:42 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\t777fELL9gZqjCk
    [2011/09/29 14:02:35 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\oVVrrzONyxA0vSo
    [2011/09/29 14:02:28 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\wSS22obFFpmG5Q6
    [2011/09/29 14:02:20 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\uEEKK8gRZ9hY
    [2011/09/29 14:02:13 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\gUVVeelOBtxPyc
    [2011/09/29 14:02:05 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\zbbDD3onn4aQHsK
    [2011/09/29 14:01:58 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\bffRRL99gTqjUeI
    [2011/09/29 14:01:51 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\FyyyxA11uv2ob4m
    [2011/09/29 14:01:43 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\yDD22obF4pmHsQ
    [2011/09/29 14:01:36 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\fJJ7ddEL8gRZhYw
    [2011/09/29 14:01:28 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\NLL88gRZZhYCwU
    [2011/09/29 14:01:20 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\y4ppmmH5sQJ7ELg
    [2011/09/29 14:01:13 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\LRRZqqhYCwkUrlN
    [2011/09/29 14:01:05 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\zppmmH55sQ7dE8R
    [2011/09/29 14:00:57 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\BrrzzPNyxA1uD2b
    [2011/09/29 14:00:50 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\r44ppmH5sQJ7
    [2011/09/29 14:00:42 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\RPPPNyxxA1vD2b
    [2011/09/29 14:00:35 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ImmHH5sQQ7dELgZ
    [2011/09/29 14:00:27 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\W4ppmmH5sQJ7
    [2011/09/29 14:00:19 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\VxxAA1uvv2obFpH
    [2011/09/29 14:00:12 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ZLL88gRZq
    [2011/09/29 14:00:05 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\pPPP0uccS2bD3n5
    [2011/09/29 13:59:57 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\WVVrrlONNxP0uSi
    [2011/09/29 13:59:49 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\FQQHH6dWK8fR9hX
    [2011/09/29 13:59:42 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\hzzzPNyyc
    [2011/09/29 13:59:34 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\kjjUUCelIBtzNy
    [2011/09/29 13:59:27 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\u1iivvD2onF4mHs
    [2011/09/29 13:59:20 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\zaammH5ssJ7fE8T
    [2011/09/29 13:59:12 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\j2oonFF4am
    [2011/09/29 13:59:04 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\XCCeelIBtz
    [2011/09/29 13:58:56 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\oyccA11ivD2
    [2011/09/29 13:58:49 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\VHHH5ssWJ7fL8TZ
    [2011/09/29 13:58:42 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\HTTZZqjYCwkIrzN
    [2011/09/29 13:58:34 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\m0uuvSS2ibFpm5a
    [2011/09/29 13:58:27 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\Z6ddEKK8fRZh
    [2011/09/29 13:58:19 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\EmGG55aQJ6dE8fZ
    [2011/09/29 13:58:11 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\B000uvvS2ib3pG5
    [2011/09/29 13:58:04 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\FuuvSS2ibF3pG5Q
    [2011/09/29 13:57:56 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\K666dEEK8fR9hXw
    [2011/09/29 13:57:49 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\VVeelOOBtzPy
    [2011/09/29 13:57:42 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\AvDD33onG4am6sK
    [2011/09/29 13:57:34 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\aK77ffEL9gTXjYe
    [2011/09/29 13:57:27 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ZrrrzOONy
    [2011/09/29 13:57:19 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\JuuuvSS2o
    [2011/09/29 13:57:12 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\i88ggRZZqhXwkVl
    [2011/09/29 13:57:04 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\LqqhYYXwkUVrOB
    [2011/09/29 13:56:57 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\iF44ppmG5sQJd
    [2011/09/29 13:56:49 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\nssQQJ7dEK8g
    [2011/09/29 13:56:41 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\BsssQJ77dE8gRqY
    [2011/09/29 13:56:34 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\T88gRRZqhYXwUVl
    [2011/09/29 13:56:26 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\hxPP00ucS1ib
    [2011/09/29 13:56:19 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\AuuucSS1i
    [2011/09/29 13:56:11 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\wD33ppnG4aQHdW7
    [2011/09/29 13:56:04 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\m77ffRL9hT
    [2011/09/29 13:55:56 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\tdddWKK7fRLhTqj
    [2011/09/29 13:55:49 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\RdWWKK7fRL9hXq
    [2011/09/29 13:55:41 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ziibbD3pnG4aH6W
    [2011/09/29 13:55:34 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\P999hTXXqjCelBz
    [2011/09/29 13:55:26 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\q111uvvD2on4pH5
    [2011/09/29 13:55:19 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\UF44pmmH5sW7dL
    [2011/09/29 13:55:11 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\pIIVVrlON
    [2011/09/29 13:55:04 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\SuuccS22ib
    [2011/09/29 13:54:56 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\PNttxxA0ucS2bFp
    [2011/09/29 13:54:48 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ZgTTZZqhYCwkVrO
    [2011/09/29 13:54:41 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\GnFF44pmH5sW7dL
    [2011/09/29 13:54:33 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\zlIIBrrzPNyA1vD
    [2011/09/29 13:54:25 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\L7ffRLL9hTXjUel
    [2011/09/29 13:54:17 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\FibbDD3pnG4aH6W
    [2011/09/29 13:54:09 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\JZZqqhYXwkUVlOt
    [2011/09/29 13:54:01 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\GEEKK8ggRZ
    [2011/09/29 13:53:54 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\JmmmG55sQJ7EKgR
    [2011/09/29 13:53:46 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\GooobFF4pmGsQ7d
    [2011/09/29 13:53:38 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\B22oobF4pmG5QJd
    [2011/09/29 13:53:30 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\kXqqjYYCekIrzN
    [2011/09/29 13:53:23 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\JXXXqjjYC
    [2011/09/29 13:53:15 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\UHH6ssWK7fE
    [2011/09/29 13:53:07 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\lvvvD3oonGamHsK
    [2011/09/29 13:53:00 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\FooonG44am6s
    [2011/09/29 13:52:52 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ZG44aamH6
    [2011/09/29 13:52:44 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\u777fELL9
    [2011/09/29 13:52:37 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\GyyycSS1ivDon4a
    [2011/09/29 13:52:29 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\o888fRZZ9hXwjVl
    [2011/09/29 13:52:21 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\VfffRZZ9hYXjUel
    [2011/09/29 13:52:13 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\YJJJ6ddEK8fZ9YX
    [2011/09/29 13:52:05 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\S222ibbF3p
    [2011/09/29 13:51:58 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\KrrzzONtxA0uS
    [2011/09/29 13:51:50 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\gTTTZqqjYCwIVzO
    [2011/09/29 13:51:42 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\xHH55sWJJfEL8Tq
    [2011/09/29 13:51:34 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\S222onnF4a
    [2011/09/29 13:51:27 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\jiiivDD2onFam5s
    [2011/09/29 13:51:19 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\QUCCeelIBtzPyc1
    [2011/09/29 13:51:11 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ryccAA1ivD2oF4m
    [2011/09/29 13:51:04 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\i55ssWJ7fE
    [2011/09/29 13:50:56 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\wmmHH5sWJ7fE8gZ
    [2011/09/29 13:50:49 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\l7ffELL8gTZjYwk
    [2011/09/29 13:50:41 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\K777fEEL8gTqj
    [2011/09/29 13:50:33 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\lDD22onFFamH5W7
    [2011/09/29 13:50:26 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\PaaamHH5sWJfE8
    [2011/09/29 13:50:18 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\gtzzPNNycA1vDo
    [2011/09/29 13:50:11 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\DnnFF4amm5sWJfL
    [2011/09/29 13:50:03 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\FHH55sWJ7fELgTq
    [2011/09/29 13:49:55 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\nJ77fEEL8gTq
    [2011/09/29 13:49:48 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\cZqqjjYCwkIV
    [2011/09/29 13:49:41 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ZttxxA00uv2ib3m
    [2011/09/29 13:49:33 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ibbFF3pmm5aQJdK
    [2011/09/29 13:49:25 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\yuuuvSS2ibFpm5a
    [2011/09/29 13:49:18 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ubbbF33pmG5QJdE
    [2011/09/29 13:49:10 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\YbbFF3pmG5aQ6dK
    [2011/09/29 13:49:02 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\urzzONNtxA0vSib
    [2011/09/29 13:48:54 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\LmHH5ssWJ7fL8T
    [2011/09/29 13:48:47 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\vFF44amH5sWJfE8
    [2011/09/29 13:48:39 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\q22oonF44mH5sJf
    [2011/09/29 13:48:31 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\HooonFF4amH
    [2011/09/29 13:48:24 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\CzzPPNycA1iv2o
    [2011/09/29 13:48:16 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\uLL9hhTXwjUClIt
    [2011/09/29 13:48:08 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\xKKK8ffRL9hXwUC
    [2011/09/29 13:48:00 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\eaaaQHH6dWKfR9
    [2011/09/29 13:47:53 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\iHH6ddWK8f
    [2011/09/29 13:47:45 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\S555aQHH6dK8fLh
    [2011/09/29 13:47:38 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\uwwjjUCee
    [2011/09/29 13:47:30 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\LbbbD33pnG5QHdW
    [2011/09/29 13:47:22 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\iwwkkUVrlONtP0c
    [2011/09/29 13:47:12 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\sIIIBtzzP0cA1v3
    [2011/09/29 13:47:03 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\kssWWJ7ddL8gTqY
    [2011/09/29 13:46:56 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\eddELL8gTZqhCwI
    [2011/09/29 13:46:47 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\Y3ppnnG4aQH6W
    [2011/09/29 13:46:39 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\kPP0uucS1ibDpn4
    [2011/09/29 13:46:30 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\immG55aQJ6dE8fZ
    [2011/09/29 13:46:23 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\leellOBtzP0y
    [2011/09/29 13:46:15 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\CSS1iivD3onGam
    [2011/09/29 13:46:08 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\FXXXqjjYC
    [2011/09/29 13:46:00 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\YwjjUVVelO
    [2011/09/29 13:45:49 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\XwwwkUVVelBtx
    [2011/09/29 13:45:39 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ODDD2onnF4mH5W7
    [2011/09/29 13:45:31 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\NSS1iibD3pnGaQ6
    [2011/09/29 13:45:23 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\q333pnnG4aQ6dK7
    [2011/09/29 13:45:15 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\iZqqhYYXwkUrl
    [2011/09/29 13:45:08 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\dhhYYXwkU
    [2011/09/29 13:45:00 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\PvvSS2obb4pmGsJ
    [2011/09/29 13:44:52 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\sKK77fEEL9TXqY
    [2011/09/29 13:44:44 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\d99ggTXqqYCe
    [2011/09/29 13:44:37 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\GIIBBrzONyxAu
    [2011/09/29 13:44:29 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\gIIIBrrzONyA1vS
    [2011/09/29 13:44:22 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\lbbbF44pmG5Q
    [2011/09/29 13:44:14 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\rZZqqhYYXwUVrOt
    [2011/09/29 13:44:06 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\E1iivDD3onGam6s
    [2011/09/29 13:43:58 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\oQJJ66dEK8f
    [2011/09/29 13:43:49 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\qppnnG5aaH6d
    [2011/09/29 13:43:41 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\X88ggRZqhYCwUVl
    [2011/09/29 13:43:33 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ZvvvD2oobFpmHsJ
    [2011/09/29 13:43:25 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\BdEEL88gRZqYCkU
    [2011/09/29 13:43:18 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ZP00uccS2ib3pG5
    [2011/09/29 13:43:10 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\TrrrzPPNyxAu
    [2011/09/29 13:43:01 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\EggRRZ9hhXwkUeO
    [2011/09/29 13:42:53 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\SyyycAA1ivDon4a
    [2011/09/29 13:42:44 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\rZZqqhYYC
    [2011/09/29 13:42:37 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\EZZqqhYYCwIVrOt
    [2011/09/29 13:42:29 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\lqqhhYCwkIVrONx
    [2011/09/29 13:42:22 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\HG55aaQJ6dW
    [2011/09/29 13:42:14 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\GA11iivD3o
    [2011/09/29 13:42:07 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\CVVeelIBBzP0yA
    [2011/09/29 13:41:59 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\X000ucSS2iF3pGa
    [2011/09/29 13:41:51 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\mZZZqhhYCwkVrON
    [2011/09/29 13:41:43 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\HLL99hTTXqUCeIr
    [2011/09/29 13:41:35 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\DCCeelIBrzPNcAu
    [2011/09/29 13:41:28 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\KD22onnF4pm5sJ7
    [2011/09/29 13:41:20 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\RzzzPNNycA1
    [2011/09/29 13:41:12 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\wQQQH6ddWKfRLhX
    [2011/09/29 13:41:04 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\u66ddWK7fRL9TXj
    [2011/09/29 13:40:56 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\tCCeekIIBrONyAu
    [2011/09/29 13:40:46 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\QWKK8ffRL9hXwUC
    [2011/09/29 13:40:37 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\nDD22obbF
    [2011/09/29 13:40:29 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\HkUUVeelOBtP0c
    [2011/09/29 13:40:21 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\gSS11ibDDonG4Q6
    [2011/09/29 13:40:12 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\mBttzPP0ycAiv3o
    [2011/09/29 13:40:05 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\WXwwjUUVelItz0y
    [2011/09/29 13:39:55 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\aEKK88gRZq
    [2011/09/29 13:39:47 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\wrrzzONyxA1uS2b
    [2011/09/29 13:39:38 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\yELL88gTZqjYwk
    [2011/09/29 13:39:31 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\IvvSS2iib
    [2011/09/29 13:39:23 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\D22iibFF3pG5aJd
    [2011/09/29 13:39:15 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\xxAA00uvS2i
    [2011/09/29 13:39:05 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\qRLL99gTX
    [2011/09/29 13:38:56 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\LUUUVeelIBtP0cA
    [2011/09/29 13:38:46 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\QH66ssWK7fE
    [2011/09/29 13:38:38 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\GGG44amH6sWKfE9
    [2011/09/29 13:38:30 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\eDDD3oonG4a
    [2011/09/29 13:38:22 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\BEKK88fRZ9hYwjV
    [2011/09/29 13:38:15 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\pyyycSS1ivDo
    [2011/09/29 13:38:08 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\ImmHH6sWW7fELgX
    [2011/09/29 13:37:57 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\uQQJJ7dEL8gRqhC
    [2011/09/29 13:37:50 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\BPP00ucS2i
    [2011/09/29 13:37:43 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\hibbDD3pn
    
    :commands
    [reboot]
  • Push Posted Image
  • OTL may ask to reboot the machine. Please do so if asked.
  • Click the OK button.
  • A report will open. Copy and Paste that report in your next reply.

regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft


#19 blurry eyes

blurry eyes
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:04:42 AM

Posted 11 October 2011 - 02:47 PM

Hello Elise,

Since I have issues when trying to restart (my computer hangs on restart but will boot if I do a cold boot), I could not find a log generated for the last OTL fix.

I have repeatedly turned off and rebooted my computer. It appears we have fixed my problem.

The ONLY weird thing was, I originally knew I had a problem last week because, before I had a boot issue, I was doing a Google search and instead of the normal search returns, I would get about 10 results on one page (no other options) that are not related to my search in bold large text (they didn't even look like normal results). I only mention this because a few restarts ago today, I typed in the bleepingcomputer URL and saw returns like I did last week.

I did several searches since and have seen no evidence of this happening again, not sure why it happened but that is the ONLY anamoly, and I'm not concerned since I haven't seen it since.

I can't thank you enough for all of your perseverance and expertise. Please let me know if there is a way to compensate you or bleepingcomputer.

Thanks Elise,
Chris

#20 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 61,316 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:11:42 AM

Posted 12 October 2011 - 12:45 AM

Hi again, glad to hear things are better now!

P2P WARNING
-------------------
Going over your logs I noticed that you have Vuze installed.
  • Avoid gaming sites, pirated software, cracking tools, keygens, and peer-to-peer (P2P) file sharing programs.
  • They are a security risk which can make your computer susceptible to a smörgåsbord of malware infections, remote attacks, exposure of personal information, and identity theft. Many malicious worms and Trojans spread across P2P file sharing networks, gaming and underground sites.
  • Users visiting such pages may see innocuous-looking banner ads containing code which can trigger pop-up ads and malicious Flash ads that install viruses, Trojans and spyware. Ads are a target for hackers because they offer a stealthy way to distribute malware to a wide range of Internet users.
  • The best way to reduce the risk of infection is to avoid these types of web sites and not use any P2P applications.
It is pretty much certain that if you continue to use P2P programs, you will get infected again.
I would recommend that you uninstall Vuze, however that choice is up to you. If you choose to remove these programs, you can do so via Start > Control Panel > Add/Remove Programs.

If you wish to keep it, please do not use it until your computer is cleaned.


Your version of Java is out of date. Older versions have vulnerabilities that malicious sites can use to exploit and infect your system.
  • Download the latest version of Java Runtime Environment (JRE) Version 7.
  • Look for "JDK 7 (JDK or JRE).
  • Click the "Download JRE" button at the right.
  • Read the License Agreement, and then check the box that says: "Accept License Agreement".
    • Select "Windows x86 Offline" and click on jre-7-windows-i586.exe
  • Save it to your desktop
  • Close any programs you may have running - especially your web browser.
  • Uninstall all older versions of Java (any item with Java Runtime Environment, JRE or J2SE in the name).
  • Reboot your computer once all Java components are removed.
  • Install the newest version by double clicking (run as Administrator for Windows Vista/Seven) the downloaded file.


Finally, please launch Malwarebytes antimalware, update it and run a full scan. Post me the resulting log.

regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft


#21 blurry eyes

blurry eyes
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:04:42 AM

Posted 12 October 2011 - 01:44 PM

Hi Elise,

Here is the Malwarebytes log. It says there is one infected file. I didn't take action on it yet until I heard from you on cleaning the infected file.

Malwarebytes' Anti-Malware 1.51.2.1300
www.malwarebytes.org

Database version: 7929

Windows 6.0.6002 Service Pack 2
Internet Explorer 7.0.6002.18005

10/12/2011 12:41:28 PM
mbam-log-2011-10-12 (12-41-12).txt

Scan type: Full scan (C:\|)
Objects scanned: 548029
Time elapsed: 2 hour(s), 9 minute(s), 37 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 1

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
c:\Users\Public\equipment\software downloads\intel pro set wireless utility driver\Drivers.exe (PUP.Adware.Agent) -> No action taken.

#22 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 61,316 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:11:42 AM

Posted 12 October 2011 - 03:29 PM

You can just delete that as you won't need it anyway. :) Do you have any problem left?

ESET ONLINE SCANNER
----------------------------
I'd like us to scan your machine with ESET OnlineScan
  • Hold down Control and click on this link to open ESET OnlineScan in a new window.
  • Click the Posted Image button.
  • For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
    • Click on esetsmartinstaller_enu.exe to download the ESET Smart Installer. Save it to your desktop.
    • Double click on the Posted Image
      icon on your desktop.
  • Check "YES, I accept the Terms of Use."
  • Click the Start button.
  • Accept any security warnings from your browser.
  • Under scan settings, check "Scan Archives" and "Remove found threats"
  • Click Advanced settings and select the following:
    • Scan potentially unwanted applications
    • Scan for potentially unsafe applications
    • Enable Anti-Stealth technology
  • ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
  • When the scan completes, click List Threats
  • Click Export, and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
  • Click the Back button.
  • Click the Finish button.

regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft


#23 blurry eyes

blurry eyes
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:04:42 AM

Posted 12 October 2011 - 11:19 PM

Hi Elise,

I seem to be booting up just fine. Here is the last ESETScan log.

C:\Program Files (x86)\Unlocker\eBay_shortcuts_1016.exe Win32/Adware.ADON application deleted - quarantined
C:\Users\Owner\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\54\36fe39b6-5e06891e a variant of Java/TrojanDownloader.OpenStream.NBV trojan deleted - quarantined
C:\Users\Owner\Downloads\unlocker1.8.7.exe Win32/Adware.ADON application deleted - quarantined
C:\Users\Public\Cust bkp\Cust My Docs Bkp 1 19 08\Equipment\Software Downloads\Nero Software\Nero-8.1.1.4_eng_trial_wch.exe Win32/Toolbar.AskSBar application deleted - quarantined
C:\Users\Public\Equipment\Software Downloads\Registry Booster\registrybooster.exe Win32/RegistryBooster application deleted - quarantined

Thanks so much!

#24 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 61,316 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:11:42 AM

Posted 13 October 2011 - 01:02 AM

Nothing serious there, just some remnants, which means you are good to go. :)

ALL CLEAN
--------------
Your machine appears to be clean, please take the time to read below on how to secure the machine and take the necessary steps to keep it clean :)

Please do the following to remove the remaining programs from your PC:
  • Delete the tools used during the disinfection:
  • Click start > run and type combofix /uninstall, press enter. This will remove Combofix from your computer.
Please read these advices, in order to prevent reinfecting your PC:
  • Install and update the following programs regularly:
    • an outbound firewall. If you are connected to the internet through a router, you are already behind a hardware firewall and as such you do not need an extra software firewall.
      A comprehensive tutorial and a list of possible firewalls can be found here.
    • an AntiVirus Software
      It is imperative that you update your AntiVirus Software on regular basis.If you do not update your AntiVirus Software then it will not be able to catch the latest threats.
    • an Anti-Spyware program
      Malware Byte's Anti Malware is an excellent Anti-Spyware scanner. It's scan times are usually under ten minutes, and has excellent detection and removal rates.
      SUPERAntiSpyware is another good scanner with high detection and removal rates.
      Both programs are free for non commercial home use but provide a resident and do not nag if you purchase the paid versions.
    • Spyware Blaster
      A tutorial for Spywareblaster can be found here. If you wish, the commercial version provides automatic updating.
  • Keep Windows (and your other Microsoft software) up to date!
    I cannot stress how important this is enough. Often holes are found in Internet Explorer or Windows itself that require patching. Sometimes these holes will allow an attacker unrestricted access to your computer.
    Therefore, please, visit the Microsoft Update Website and follow the on screen instructions to setup Microsoft Update. Also follow the instructions to update your system. Please REBOOT and repeat this process until there are no more updates to install!!
  • Keep your other software up to date as well
    Software does not need to be made by Microsoft to be insecure. You can use the Secunia Online Software occasionally to help you check for out of date software on yourmachine.
  • Stay up to date!
    The MOST IMPORTANT part of any security setup is keeping the software up to date. Malware writers release new variants every single day. If your software updates don't keep up, then the malware will always be one step ahead. Not a good thing.
Some more links you might find of interest:
Please reply to this topic if you have read the above information. If your computer is working fine, this topic will be closed afterwards.

regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft


#25 blurry eyes

blurry eyes
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:04:42 AM

Posted 13 October 2011 - 10:18 AM

Hi Elise,

Everything seems great except for one thing. I'm on Vista so if I type combofix/uninstall into either the "search" box or type windows+r, then combofix/uninstall, my computer says windows can't find this, so I have as yet been unable to uninstall combofix.

I've read and taken the other steps you suggested.

Thanks again,
Chris

#26 blurry eyes

blurry eyes
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:04:42 AM

Posted 13 October 2011 - 10:24 AM

OOPS!!!

Never mind. I Googled my problem and realized I wasn't putting a space after "combo" and before "/uninstall". I got combofix uninstalled, windows updated and my anti-virus software on and up to date and Maywarebytes loaded.

I can't thank you enough. Is there any way to compensate bleeping computer or the bleeping blonde????

Thanks so very much,
Chris

#27 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 61,316 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:11:42 AM

Posted 13 October 2011 - 11:08 AM

It appears that this issue is resolved, therefore I am closing the topic. If that is not the case and you need or wish to continue with this topic, please send me or any Moderator a Personal Message (PM) that you would like this topic re-opened.

regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users