Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Computer Running Slow and random website redirecting upon starting browser


  • This topic is locked This topic is locked
7 replies to this topic

#1 TheBatosai

TheBatosai

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:08:29 PM

Posted 21 October 2011 - 06:37 PM

So I was recently hit by a bunch of malware programs such as Cloud Securtiy and so on and so forth and was able to basically get rid of all of them on my own, thanks in large part to your guides, but recently my wife having seen an add on TV for Myfreecleanpc or w.e took it upon herself to go ahead and download this scam of a program, not knowing the effects it would have, thinking it was a regular malware i just went through the typical steps to remove it and was unsuccessful after many hours i finally managed to start it up. but now my Mbam Pro software keeps notifying me that ping.exe and scvhost.exe as well as firefox.exe are malicious programs and will block them. not only have i been unable to fix this problem yet i turn to you, as well as this problem everytime i open up my browser i get redirected to random sites trying to sell me stuff, much like the google redirected but without the google part again i have yet to find an answer to this so any help will be greatly appreciated. and as fars as gmer log i run Windows 7 x64 bit and your guide told me not to run it. so any more information i will be more than happy to give. Thank you


DDS (Ver_2011-08-26.01) - NTFSAMD64
Internet Explorer: 8.0.7601.17514
Run by Joey at 16:07:26 on 2011-10-21
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.3950.1345 [GMT -7:00]
.
AV: Norton Internet Security *Enabled/Updated* {88C95A36-8C3B-2F2C-1B8B-30FCCFDC4855}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Norton Internet Security *Enabled/Updated* {33A8BBD2-AA01-20A2-213B-0B8EB45B02E8}
FW: Norton Internet Security *Enabled* {B0F2DB13-C654-2E74-30D4-99C9310F0F2E}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe
C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Windows\system32\WUDFHost.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Windows\system32\SearchIndexer.exe
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files\Sony\VAIO Power Management\SPMService.exe
C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Windows\system32\svchost.exe -k SDRSVC
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Windows\system32\atieclxx.exe
C:\Windows\system32\taskhost.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Program Files\Sony\VAIO Care\VAIOCareService.exe
C:\Windows\Explorer.EXE
C:\Program Files\Sony\VAIO Power Management\SPMgr.exe
C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVH.EXE
C:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe
C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SHTtray.exe
C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe
C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
Q:\140066.enu\Office14\MSOSYNC.EXE
C:\Program Files\Sony\VAIO Update 5\VAIOUpdt.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files (x86)\Common Files\microsoft shared\virtualization handler\OfficeVirt.exe
C:\Program Files\Sony\VAIO Care\VCsystray.exe
C:\Program Files (x86)\Sony\SmartWi Connection Utility\CCP.exe
C:\Program Files (x86)\Sony\SmartWi Connection Utility\ThirdPartyAppMgr.exe
C:\Program Files (x86)\Sony\SmartWi Connection Utility\PowerManager.exe
C:\Program Files (x86)\Sony\SmartWi Connection Utility\SmartWi.exe
C:\Program Files (x86)\iTunes\iTunes.exe
C:\Windows\SysWOW64\ping.exe
C:\Windows\system32\conhost.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Windows\System32\svchost.exe -k swprv
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\taskhost.exe
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\conhost.exe
C:\Windows\SysWOW64\cscript.exe
C:\Windows\system32\wbem\wmiprvse.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.ask.com?o=14196&l=dis
mStart Page = hxxp://www.google.com/ig/redirectdomain?brand=SNNT&bmod=SNNT
uInternet Settings,ProxyOverride = *.local
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO: Skype Browser Helper: {ae805869-2e5c-4ed4-8f7b-f1f7851a4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
TB: {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
TB: {472734EA-242A-422B-ADF8-83D1E48CC825} - No File
TB: {0123B506-0AD9-43AA-B0CF-916C122AD4C5} - No File
uRun: [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
uRun: [OfficeSyncProcess] "C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVH.EXE" /quietlaunch "MSOSYNC 9014006604090000"
mRun: [WinampAgent] "C:\Program Files (x86)\Winamp\winampa.exe"
mRun: [TkBellExe] "C:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe" -osboot
mRun: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
mRun: [SmartWiHelper] "C:\Program Files (x86)\Sony\SmartWi Connection Utility\SmartWiHelper.exe" /WindowsStartup
mRun: [SHTtray.exe] C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SHTtray.exe
mRun: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
mRun: [PMBVolumeWatcher] C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe
mRun: [Malwarebytes' Anti-Malware] "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
mRun: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
mRun: [ISBMgr.exe] "C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe"
mRun: [IAStorIcon] C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe
mRun: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
mRun: [AmazonGSDownloaderTray] C:\Program Files (x86)\Amazon\Amazon Games & Software Downloader\AmazonGSDownloaderTray.exe
mRun: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
StartupFolder: C:\Users\Joey\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\ADVANC~1.LNK - C:\Program Files (x86)\Advanced Registry Optimizer\ARO.exe
mPolicies-system: ConsentPromptBehaviorAdmin = 0 (0x0)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableLUA = 0 (0x0)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
mPolicies-system: PromptOnSecureDesktop = 0 (0x0)
IE: Google Sidewiki... - C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_D183CA64F05FDD98.dll/cmsidewiki.html
IE: Send image to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Send page to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
IE: {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
IE: {E0B8C461-F8FB-49b4-8373-FE32E92528A6} - {BC0E0A5D-AB5A-4fa4-A5FA-280E1D58EEEE} - C:\Program Files (x86)\Evernote\Evernote3.5\enbar.dll
LSP: mswsock.dll
Trusted Zone: clonewarsadventures.com
Trusted Zone: freerealms.com
Trusted Zone: soe.com
Trusted Zone: sony.com
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
TCP: DhcpNameServer = 209.18.47.61 209.18.47.62
TCP: Interfaces\{4AB0AA7B-FB97-447D-A360-D75C081357C9} : DhcpNameServer = 192.168.42.129
TCP: Interfaces\{F1AB48D3-620A-412A-B77D-05020B395317} : DhcpNameServer = 209.18.47.61 209.18.47.62
TCP: Interfaces\{F1AB48D3-620A-412A-B77D-05020B395317}\642756567596669623 : DhcpNameServer = 10.5.50.1 68.94.156.1 68.94.157.1
TCP: Interfaces\{F1AB48D3-620A-412A-B77D-05020B395317}\8445340205F627471626C6560284F6473707F647 : DhcpNameServer = 192.168.1.1
TCP: Interfaces\{F1AB48D3-620A-412A-B77D-05020B395317}\C696E6B6379737 : DhcpNameServer = 209.18.47.61 209.18.47.62
TCP: Interfaces\{F1AB48D3-620A-412A-B77D-05020B395317}\E4544574541425 : DhcpNameServer = 10.0.0.1
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
Notify: VESWinlogon - VESWinlogon.dll
SubSystems: Windows = basesrv,1 winsrv:UserServerDllInitialization,3 consrv:ConServerDllInitialization,2 sxssrv,4
BHO-X64: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO-X64: AcroIEHelperStub - No File
BHO-X64: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO-X64: Skype Browser Helper: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
BHO-X64: SkypeIEPluginBHO - No File
BHO-X64: Java™ Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
TB-X64: {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
TB-X64: {472734EA-242A-422B-ADF8-83D1E48CC825} - No File
TB-X64: {0123B506-0AD9-43AA-B0CF-916C122AD4C5} - No File
mRun-x64: [WinampAgent] "C:\Program Files (x86)\Winamp\winampa.exe"
mRun-x64: [TkBellExe] "C:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe" -osboot
mRun-x64: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
mRun-x64: [SmartWiHelper] "C:\Program Files (x86)\Sony\SmartWi Connection Utility\SmartWiHelper.exe" /WindowsStartup
mRun-x64: [SHTtray.exe] C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SHTtray.exe
mRun-x64: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
mRun-x64: [PMBVolumeWatcher] C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe
mRun-x64: [Malwarebytes' Anti-Malware] "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
mRun-x64: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
mRun-x64: [ISBMgr.exe] "C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe"
mRun-x64: [IAStorIcon] C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe
mRun-x64: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
mRun-x64: [AmazonGSDownloaderTray] C:\Program Files (x86)\Amazon\Amazon Games & Software Downloader\AmazonGSDownloaderTray.exe
mRun-x64: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
mRun-x64: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
IE-X64: {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
.
================= FIREFOX ===================
.
FF - ProfilePath - C:\Users\Joey\AppData\Roaming\Mozilla\Firefox\Profiles\a35mx5po.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://lds.org/
FF - prefs.js: keyword.URL - hxxp://www.bing.com/search?pc=ZUGO&form=ZGAADF&q=
FF - prefs.js: network.proxy.http - 127.0.0.1
FF - prefs.js: network.proxy.http_port - 58485
FF - prefs.js: network.proxy.type - 0
FF - plugin: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL
FF - plugin: C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll
FF - plugin: C:\Program Files (x86)\Google\Update\1.3.21.79\npGoogleUpdate3.dll
FF - plugin: c:\Program Files (x86)\Microsoft Silverlight\4.0.60831.0\npctrlui.dll
FF - plugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll
FF - plugin: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
FF - plugin: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll
FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll
.
---- FIREFOX POLICIES ----
FF - user.js: network.cookie.cookieBehavior - 0
FF - user.js: privacy.clearOnShutdown.cookies - false
FF - user.js: security.warn_viewing_mixed - false
FF - user.js: security.warn_viewing_mixed.show_once - false
FF - user.js: security.warn_submit_insecure - false
FF - user.js: security.warn_submit_insecure.show_once - false
.
============= SERVICES / DRIVERS ===============
.
R0 PxHlpa64;PxHlpa64;C:\Windows\system32\Drivers\PxHlpa64.sys --> C:\Windows\system32\Drivers\PxHlpa64.sys [?]
R1 vwififlt;Virtual WiFi Filter Driver;C:\Windows\system32\DRIVERS\vwififlt.sys --> C:\Windows\system32\DRIVERS\vwififlt.sys [?]
R2 AMD External Events Utility;AMD External Events Utility;C:\Windows\system32\atiesrxx.exe --> C:\Windows\system32\atiesrxx.exe [?]
R2 cvhsvc;Client Virtualization Handler;C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE [2010-10-20 821664]
R2 IAStorDataMgrSvc;Intel® Rapid Storage Technology;C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-4-26 13336]
R2 MBAMService;MBAMService;C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2011-5-23 366152]
R2 PassThru Service;Internet Pass-Through Service;C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [2010-9-16 80896]
R2 PMBDeviceInfoProvider;PMBDeviceInfoProvider;C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe [2009-10-24 360224]
R2 rimspci;rimspci;C:\Windows\system32\drivers\rimssne64.sys --> C:\Windows\system32\drivers\rimssne64.sys [?]
R2 risdsnpe;risdsnpe;C:\Windows\system32\drivers\risdsne64.sys --> C:\Windows\system32\drivers\risdsne64.sys [?]
R2 sftlist;Application Virtualization Client;C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2010-9-14 508264]
R3 ArcSoftKsUFilter;ArcSoft Magic-I Visual Effect;C:\Windows\system32\DRIVERS\ArcSoftKsUFilter.sys --> C:\Windows\system32\DRIVERS\ArcSoftKsUFilter.sys [?]
R3 HECIx64;Intel® Management Engine Interface;C:\Windows\system32\drivers\HECIx64.sys --> C:\Windows\system32\drivers\HECIx64.sys [?]
R3 MBAMProtector;MBAMProtector;\??\C:\Windows\system32\drivers\mbam.sys --> C:\Windows\system32\drivers\mbam.sys [?]
R3 SFEP;Sony Firmware Extension Parser;C:\Windows\system32\drivers\SFEP.sys --> C:\Windows\system32\drivers\SFEP.sys [?]
R3 Sftfs;Sftfs;C:\Windows\system32\DRIVERS\Sftfslh.sys --> C:\Windows\system32\DRIVERS\Sftfslh.sys [?]
R3 Sftplay;Sftplay;C:\Windows\system32\DRIVERS\Sftplaylh.sys --> C:\Windows\system32\DRIVERS\Sftplaylh.sys [?]
R3 Sftredir;Sftredir;C:\Windows\system32\DRIVERS\Sftredirlh.sys --> C:\Windows\system32\DRIVERS\Sftredirlh.sys [?]
R3 Sftvol;Sftvol;C:\Windows\system32\DRIVERS\Sftvollh.sys --> C:\Windows\system32\DRIVERS\Sftvollh.sys [?]
R3 sftvsa;Application Virtualization Service Agent;C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2010-9-14 219496]
R3 VAIO Power Management;VAIO Power Management;C:\Program Files\Sony\VAIO Power Management\SPMService.exe [2010-5-5 571248]
R3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;C:\Windows\system32\DRIVERS\yk62x64.sys --> C:\Windows\system32\DRIVERS\yk62x64.sys [?]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]
S2 gupdate;Google Update Service (gupdate);C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-5-5 135664]
S2 Roxio Upnp Server 10;Roxio Upnp Server 10;C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUpnpService10.exe [2009-8-31 362992]
S3 amdkmdag;amdkmdag;C:\Windows\system32\DRIVERS\atikmdag.sys --> C:\Windows\system32\DRIVERS\atikmdag.sys [?]
S3 amdkmdap;amdkmdap;C:\Windows\system32\DRIVERS\atikmpag.sys --> C:\Windows\system32\DRIVERS\atikmpag.sys [?]
S3 btusbflt;Bluetooth USB Filter;C:\Windows\system32\drivers\btusbflt.sys --> C:\Windows\system32\drivers\btusbflt.sys [?]
S3 btwl2cap;Bluetooth L2CAP Service;C:\Windows\system32\DRIVERS\btwl2cap.sys --> C:\Windows\system32\DRIVERS\btwl2cap.sys [?]
S3 ewusbnet;HUAWEI USB-NDIS miniport;C:\Windows\system32\DRIVERS\ewusbnet.sys --> C:\Windows\system32\DRIVERS\ewusbnet.sys [?]
S3 gupdatem;Google Update Service (gupdatem);C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-5-5 135664]
S3 HTCAND64;HTC Device Driver;C:\Windows\system32\Drivers\ANDROIDUSB.sys --> C:\Windows\system32\Drivers\ANDROIDUSB.sys [?]
S3 htcnprot;HTC NDIS Protocol Driver;C:\Windows\system32\DRIVERS\htcnprot.sys --> C:\Windows\system32\DRIVERS\htcnprot.sys [?]
S3 hwusbdev;Huawei DataCard USB PNP Device;C:\Windows\system32\DRIVERS\ewusbdev.sys --> C:\Windows\system32\DRIVERS\ewusbdev.sys [?]
S3 MotioninJoyXFilter;MotioninJoy Virtual Xinput device Filter Driver;C:\Windows\system32\DRIVERS\MijXfilt.sys --> C:\Windows\system32\DRIVERS\MijXfilt.sys [?]
S3 osppsvc;Office Software Protection Platform;C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-1-9 4925184]
S3 Roxio UPnP Renderer 10;Roxio UPnP Renderer 10;C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUPnPRenderer10.exe [2009-8-31 313840]
S3 SampleCollector;Intel® Sample Collector;C:\Program Files\Sony\VAIO Care\collsvc.exe [2010-5-5 167424]
S3 TsUsbFlt;TsUsbFlt;C:\Windows\system32\drivers\tsusbflt.sys --> C:\Windows\system32\drivers\tsusbflt.sys [?]
S3 TVICHW64;TVICHW64;\??\C:\Windows\system32\DRIVERS\TVICHW64.SYS --> C:\Windows\system32\DRIVERS\TVICHW64.SYS [?]
S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\system32\Wat\WatAdminSvc.exe --> C:\Windows\system32\Wat\WatAdminSvc.exe [?]
S4 Amazon Download Agent;Amazon Download Agent;C:\Program Files (x86)\Amazon\Amazon Games & Software Downloader\AmazonGSDownloaderService.exe [2011-1-11 401920]
S4 SOHCImp;VAIO Media plus Content Importer;C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe [2010-5-5 120104]
S4 SOHDBSvr;VAIO Media plus Database Manager;C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDBSvr.exe [2010-5-5 70952]
S4 SOHDms;VAIO Media plus Digital Media Server;C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe [2010-5-5 427304]
S4 SOHDs;VAIO Media plus Device Searcher;C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe [2010-5-5 75048]
S4 SOHPlMgr;VAIO Media plus Playlist Manager;C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHPlMgr.exe [2010-5-5 91432]
S4 uCamMonitor;CamMonitor;C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [2010-5-5 104960]
S4 UNS;Intel® Management & Security Application User Notification Service;C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe [2010-4-26 2320920]
S4 VCFw;VAIO Content Folder Watcher;C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [2009-9-14 642416]
S4 VcmINSMgr;VAIO Content Metadata Intelligent Network Service Manager;C:\Program Files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe [2010-2-19 386416]
S4 VcmXmlIfHelper;VAIO Content Metadata XML Interface;C:\Program Files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper64.exe [2010-2-19 115568]
S4 VUAgent;VUAgent;C:\Program Files\Sony\VAIO Update 5\VUAgent.exe [2010-5-5 1223024]
.
=============== Created Last 30 ================
.
2011-10-21 23:02:30 -------- d-sh--w- C:\$RECYCLE.BIN
2011-10-18 00:24:48 -------- dc----w- C:\Program Files (x86)\CyberDefender
2011-10-18 00:17:30 -------- dc----w- C:\ProgramData\T-Mobile
2011-10-17 02:46:02 -------- d-sh--w- C:\found.000
2011-10-12 18:45:03 -------- dc----w- C:\Program Files\iPod
2011-10-12 18:45:02 -------- dc----w- C:\Program Files\iTunes
2011-10-12 18:42:35 -------- dc----w- C:\Program Files\Bonjour
2011-10-12 18:42:35 -------- dc----w- C:\Program Files (x86)\Bonjour
2011-10-12 04:06:33 1693184 ----a-w- C:\Windows\SysWow64\v1Dnp5JKR9XUltN.exe
2011-10-12 04:05:59 -------- dc----w- C:\Users\Joey\AppData\Roaming\v5dR9XjCIzNAv2F
2011-10-12 04:04:59 -------- dc----w- C:\Users\Joey\AppData\Roaming\cqCUrBx0y
2011-10-12 04:03:59 -------- dc----w- C:\Users\Joey\AppData\Roaming\rVDQTPF6hI0p
2011-10-12 04:02:59 -------- dc----w- C:\Users\Joey\AppData\Roaming\xNxvo3pGQd8LhXj
2011-10-12 04:01:59 -------- dc----w- C:\Users\Joey\AppData\Roaming\taWLhVtSoHd8Zhw
2011-10-12 04:00:59 -------- dc----w- C:\Users\Joey\AppData\Roaming\HNAci3GQs7EgqC
2011-10-12 03:59:59 -------- dc----w- C:\Users\Joey\AppData\Roaming\s9XUIzy1vo4GQd8
2011-10-12 03:58:59 -------- dc----w- C:\Users\Joey\AppData\Roaming\Umsd8qXVOPyAi24
2011-10-12 03:49:17 1693184 ----a-w- C:\Windows\SysWow64\r1ibD3onGaHsJfL.exe
2011-10-12 03:48:59 -------- dc----w- C:\Users\Joey\AppData\Roaming\ZpHQd8gRZ
2011-10-12 03:47:46 -------- dc----w- C:\Users\Joey\AppData\Roaming\lCx36qOcnJhlAn7
2011-10-12 03:46:58 -------- dc----w- C:\Users\Joey\AppData\Roaming\S8ZYwVlItNAuo
2011-10-12 03:45:51 -------- dc----w- C:\Users\Joey\AppData\Roaming\CPdxhFIW1UJiUdS
2011-10-12 03:44:59 -------- dc----w- C:\Users\Joey\AppData\Roaming\WEXrvGLIb7eu4Tt
2011-10-12 03:43:59 -------- dc----w- C:\Users\Joey\AppData\Roaming\SL9hXqUCkr
2011-10-12 03:42:59 -------- dc----w- C:\Users\Joey\AppData\Roaming\JgRZqhYXw
2011-10-12 03:41:53 -------- dc----w- C:\Users\Joey\AppData\Roaming\CrSmglvQYPF8euQ
2011-10-12 00:58:26 1693184 ----a-w- C:\Windows\SysWow64\DLL99gTZZqYCwIV.exe
2011-10-12 00:27:40 254464 ----a-w- C:\Windows\System32\drivers\windrvr6.sys
2011-10-12 00:25:30 -------- dc----w- C:\ProgramData\Medtronic
2011-10-12 00:14:43 1693184 ----a-w- C:\Windows\SysWow64\ippmmH55QJ7EKgZ.exe
2011-10-11 20:17:14 -------- d-----we C:\Windows\system64
2011-10-08 19:52:35 289296 ----a-w- C:\Windows\System32\winsfinst.exe
2011-10-08 19:49:10 95568 ----a-w- C:\Windows\System32\vetredir.dll
2011-10-08 19:49:10 141136 ----a-w- C:\Windows\System32\isafeif64.dll
2011-10-08 19:49:10 128336 ----a-w- C:\Windows\System32\isafeif.dll
2011-10-08 19:49:10 103760 ----a-w- C:\Windows\System32\vetredir64.dll
2011-10-04 23:07:21 -------- dc----w- C:\Program Files (x86)\TuneUpMedia
2011-09-30 20:14:30 -------- dc----w- C:\Users\Joey\AppData\Roaming\Sypou
2011-09-30 20:14:30 -------- dc----w- C:\Users\Joey\AppData\Roaming\Fojura
2011-09-30 16:21:20 -------- dc----w- C:\Users\Joey\AppData\Roaming\Evij
2011-09-30 16:21:20 -------- dc----w- C:\Users\Joey\AppData\Roaming\Atwama
2011-09-30 16:21:07 -------- dc----w- C:\Users\Joey\AppData\Roaming\Uxisiz
2011-09-30 16:21:07 -------- dc----w- C:\Users\Joey\AppData\Roaming\Afmaba
2011-09-30 16:21:05 -------- dc----w- C:\Users\Joey\AppData\Roaming\Ibysug
2011-09-30 16:21:05 -------- dc----w- C:\Users\Joey\AppData\Roaming\Hyqo
2011-09-30 12:54:27 -------- dc----w- C:\ProgramData\Symantec
2011-09-30 06:26:34 -------- dc----w- C:\Users\Joey\AppData\Roaming\Yroht
2011-09-30 05:32:01 -------- dc----w- C:\Users\Joey\AppData\Roaming\AA0uvS2ib3n5Q6W
2011-09-30 05:30:57 -------- dc----w- C:\Users\Joey\AppData\Roaming\gBrPyx1So3m5QWf
2011-09-30 05:29:59 -------- dc----w- C:\Users\Joey\AppData\Roaming\U5Qd8LTjeBOx0S
2011-09-30 05:12:29 -------- dc----w- C:\Users\Joey\AppData\Roaming\cyxA0uvS2b3n
2011-09-30 05:12:16 -------- dc----w- C:\Users\Joey\AppData\Roaming\xXqjUCekIrOyAu
2011-09-30 05:12:14 -------- dc----w- C:\Users\Joey\AppData\Roaming\EfRL9hTXqU
2011-09-30 05:12:06 -------- dc----w- C:\Users\Joey\AppData\Roaming\QWJ7fEL8gZhCkVl
2011-09-30 05:12:04 -------- dc----w- C:\Users\Joey\AppData\Roaming\jNyxA1uvSoFpGaJ
2011-09-30 05:12:04 -------- dc----w- C:\Users\Joey\AppData\Roaming\AzPNyxA1uSoFpGa
2011-09-30 05:10:58 -------- dc----w- C:\Users\Joey\AppData\Roaming\kS2ibnG46KE
2011-09-30 05:09:58 -------- dc----w- C:\Users\Joey\AppData\Roaming\JqUCkIBrzNxpGHd
2011-09-30 05:09:58 -------- dc----w- C:\Users\Joey\AppData\Roaming\Ix1So3GQ6W8R9TU
2011-09-30 05:09:52 -------- dc----w- C:\Users\Joey\AppData\Roaming\R7EK8gRZ9YwUeIt
2011-09-30 05:09:52 -------- dc----w- C:\Users\Joey\AppData\Roaming\eH5sQJ7EKgZhXjV
2011-09-30 05:09:51 -------- dc----w- C:\Users\Joey\AppData\Roaming\SHsWJE8ZhC
2011-09-30 05:09:47 -------- dc----w- C:\Users\Joey\AppData\Roaming\wK8Z9hVtPyAvo4G
2011-09-30 05:09:42 -------- dc----w- C:\Users\Joey\AppData\Roaming\BZ9hYjUVlBzNAuD
2011-09-30 05:09:38 -------- dc----w- C:\Users\Joey\AppData\Roaming\RelIBrrzNx1uSoF
2011-09-30 05:09:35 -------- dc----w- C:\Users\Joey\AppData\Roaming\zfEL9gTZqYwIr
2011-09-30 05:09:35 -------- dc----w- C:\Users\Joey\AppData\Roaming\tD3pnGaQHsKfLZj
2011-09-30 04:55:07 -------- dc----w- C:\Users\Joey\AppData\Roaming\btzP0ycA1vv
2011-09-30 04:55:06 -------- dc----w- C:\Users\Joey\AppData\Roaming\UdEL8gRZqYwUeO
2011-09-30 04:54:55 -------- dc----w- C:\Users\Joey\AppData\Roaming\RZqjYCwkIrOtPuS
2011-09-30 04:50:54 -------- dc----w- C:\Users\Joey\AppData\Roaming\XjUVelIBtPyAu
2011-09-30 04:49:59 -------- dc----w- C:\Users\Joey\AppData\Roaming\UJ7E8gRZqYwUeO
2011-09-30 04:48:59 -------- dc----w- C:\Users\Joey\AppData\Roaming\k5aQL9hBrSiQfL
2011-09-30 04:48:59 -------- dc----w- C:\Users\Joey\AppData\Roaming\dfRL9gTXqYeIrOt
2011-09-30 04:48:58 -------- dc----w- C:\Users\Joey\AppData\Roaming\zUlrNAvo3Ga6K
2011-09-30 04:48:54 -------- dc----w- C:\Users\Joey\AppData\Roaming\VfRLTjCeIrNx
2011-09-30 04:48:50 -------- dc----w- C:\Users\Joey\AppData\Roaming\NcS2ibD3pGaHsKf
2011-09-30 04:48:49 -------- dc----w- C:\Users\Joey\AppData\Roaming\B6dWK8fRLh
2011-09-30 04:48:48 -------- dc----w- C:\Users\Joey\AppData\Roaming\NmG5Qd8fRhw
2011-09-30 04:48:48 -------- dc----w- C:\Users\Joey\AppData\Roaming\jIBrzPNyx1
2011-09-30 04:34:08 -------- dc----w- C:\Users\Joey\AppData\Roaming\zcS1iJ6dE8R9TwU
2011-09-30 04:33:57 -------- dc----w- C:\Users\Joey\AppData\Roaming\GcS1ivD3oF
2011-09-30 04:30:43 -------- dc----w- C:\Users\Joey\AppData\Roaming\ObF4pmG5sJdKfZh
2011-09-30 04:30:27 -------- dc----w- C:\Users\Joey\AppData\Roaming\UWK7fEL9gZjCkVl
2011-09-30 04:30:12 -------- dc----w- C:\Users\Joey\AppData\Roaming\JH6sW7fELgZhCkV
2011-09-30 04:30:12 -------- dc----w- C:\Users\Joey\AppData\Roaming\AONtxP0uc
2011-09-30 04:30:11 -------- dc----w- C:\Users\Joey\AppData\Roaming\xONx0SiFnaHW7LT
2011-09-30 04:30:10 -------- dc----w- C:\Users\Joey\AppData\Roaming\vqCkBOA0uS
2011-09-30 04:30:10 -------- dc----w- C:\Users\Joey\AppData\Roaming\ifZTlrNAu2
2011-09-30 04:30:09 -------- dc----w- C:\Users\Joey\AppData\Roaming\SXwjltPcuo4msJd
2011-09-30 04:30:04 -------- dc----w- C:\Users\Joey\AppData\Roaming\P57LRhXwkt0
2011-09-30 04:30:00 -------- dc----w- C:\Users\Joey\AppData\Roaming\XjUCelIBrP
2011-09-30 04:30:00 -------- dc----w- C:\Users\Joey\AppData\Roaming\OIzNAv2ob4m5Q6E
2011-09-30 04:28:59 -------- dc----w- C:\Users\Joey\AppData\Roaming\EjVx2n6EqItS3
2011-09-30 04:27:53 -------- dc----w- C:\Users\Joey\AppData\Roaming\J2onF4m7dKZY
2011-09-30 04:26:58 -------- dc----w- C:\Users\Joey\AppData\Roaming\i3onF4amHsJdLgq
2011-09-30 04:26:57 -------- dc----w- C:\Users\Joey\AppData\Roaming\z0ucS2ibDp
2011-09-30 04:26:56 -------- dc----w- C:\Users\Joey\AppData\Roaming\UqjUCekIBzNx0v2
2011-09-30 04:13:23 -------- dc----w- C:\Users\Joey\AppData\Roaming\X9hYXwjUVlBzNc1
2011-09-30 04:13:09 -------- dc----w- C:\Users\Joey\AppData\Roaming\DpmG5aQJ6W8R9Tq
2011-09-30 04:12:11 -------- dc----w- C:\Users\Joey\AppData\Roaming\orzONyxA0v2
2011-09-30 04:12:03 -------- dc----w- C:\Users\Joey\AppData\Roaming\qD3onG4am
2011-09-30 04:12:00 -------- dc----w- C:\Users\Joey\AppData\Roaming\ujUCelIBr
2011-09-30 04:10:59 -------- dc----w- C:\Users\Joey\AppData\Roaming\pbFm5JW8tPuSboG
2011-09-30 04:09:59 -------- dc----w- C:\Users\Joey\AppData\Roaming\wpmGdEKhTwUeI
2011-09-30 03:53:53 -------- dc----w- C:\Users\Joey\AppData\Roaming\gNtxA0ucSiD
2011-09-30 03:53:45 -------- dc----w- C:\Users\Joey\AppData\Roaming\mmH5sQJ7dKgZhXj
2011-09-30 03:53:44 -------- dc----w- C:\Users\Joey\AppData\Roaming\vibD3onG4m
2011-09-30 03:53:36 -------- dc----w- C:\Users\Joey\AppData\Roaming\r2onF4pmHsJd
2011-09-30 03:53:20 -------- dc----w- C:\Users\Joey\AppData\Roaming\NVrlOBtxPySiDoF
2011-09-30 03:53:15 -------- dc----w- C:\Users\Joey\AppData\Roaming\WVrlONtxPuSiDoG
2011-09-30 03:53:11 -------- dc----w- C:\Users\Joey\AppData\Roaming\KelOBtzP0c1v2n4
2011-09-30 03:53:01 -------- dc----w- C:\Users\Joey\AppData\Roaming\zmH6sWJ7fLgZhCk
2011-09-30 03:53:00 -------- dc----w- C:\Users\Joey\AppData\Roaming\VuvS2obF3mE9
2011-09-30 03:51:57 -------- dc----w- C:\Users\Joey\AppData\Roaming\ut0SboGms
2011-09-30 03:50:57 -------- dc----w- C:\Users\Joey\AppData\Roaming\hBPxu2Fma6KLTeN
2011-09-30 03:49:56 -------- dc----w- C:\Users\Joey\AppData\Roaming\GJ7fEL8gTq
2011-09-30 03:49:56 -------- dc----w- C:\Users\Joey\AppData\Roaming\fmH6sWJ7fLgZhCk
2011-09-30 03:49:54 -------- dc----w- C:\Users\Joey\AppData\Roaming\l5aQH6dWKfLgXjC
2011-09-30 03:49:53 -------- dc----w- C:\Users\Joey\AppData\Roaming\KPNyD2oG5Q8R9
2011-09-30 03:49:50 -------- dc----w- C:\Users\Joey\AppData\Roaming\qONA0ucS2bpG
2011-09-30 03:49:48 -------- dc----w- C:\Users\Joey\AppData\Roaming\BZ9hYXUVeItPAuD
2011-09-30 03:38:27 -------- dc----w- C:\Users\Joey\AppData\Roaming\telIBtzPNc1v2b4
2011-09-30 03:38:14 -------- dc----w- C:\Users\Joey\AppData\Roaming\TjYCekIVrOtAuSi
2011-09-30 03:38:10 -------- dc----w- C:\Users\Joey\AppData\Roaming\fibD3onG4m6W7E8
2011-09-30 03:38:05 -------- dc----w- C:\Users\Joey\AppData\Roaming\qEL9gTYCwIrOtPu
2011-09-30 03:38:02 -------- dc----w- C:\Users\Joey\AppData\Roaming\msWJ7dEL8RqYwUe
2011-09-30 03:38:02 -------- dc----w- C:\Users\Joey\AppData\Roaming\FXwkUVelO
2011-09-30 03:37:56 -------- dc----w- C:\Users\Joey\AppData\Roaming\EVrlOBtxPySiD
2011-09-30 03:37:51 -------- dc----w- C:\Users\Joey\AppData\Roaming\dP0ucS1ib3n4m6W
2011-09-30 03:37:48 -------- dc----w- C:\Users\Joey\AppData\Roaming\wycA1uvD2b4m5Q6
2011-09-30 03:37:41 -------- dc----w- C:\Users\Joey\AppData\Roaming\axP0ucS1iDoGaHs
2011-09-30 03:35:58 -------- dc----w- C:\Users\Joey\AppData\Roaming\kCekIVONtAuSiDp
2011-09-30 03:34:59 -------- dc----w- C:\Users\Joey\AppData\Roaming\cqCIzy0Si3GQ
2011-09-30 03:33:44 -------- dc----w- C:\Users\Joey\AppData\Roaming\VgTZqhYCwUrOtPy
2011-09-30 03:32:54 -------- dc----w- C:\Users\Joey\AppData\Roaming\m3onG4amHsJfLgZ
2011-09-30 03:15:38 -------- dc----w- C:\Users\Joey\AppData\Roaming\AekIVrzONx0c
2011-09-30 03:15:28 -------- dc----w- C:\Users\Joey\AppData\Roaming\mYCekIVrzNx0c2b
2011-09-30 03:15:25 -------- dc----w- C:\Users\Joey\AppData\Roaming\QYCwUVrlOtPySiD
2011-09-30 03:15:22 -------- dc----w- C:\Users\Joey\AppData\Roaming\CdWK8fRL9TqUeIr
2011-09-30 03:15:14 -------- dc----w- C:\Users\Joey\AppData\Roaming\DlONxP0uc1b3n4
2011-09-30 03:15:13 -------- dc----w- C:\Users\Joey\AppData\Roaming\hrzONtxA0c2b3n4
2011-09-30 03:15:11 -------- dc----w- C:\Users\Joey\AppData\Roaming\e2onF4pmHsJ
2011-09-30 03:15:07 -------- dc----w- C:\Users\Joey\AppData\Roaming\ykUVrlOBtPy1Dna
2011-09-30 03:15:01 -------- dc----w- C:\Users\Joey\AppData\Roaming\wlOBtxP0ySiDo4m
2011-09-30 03:15:00 -------- dc----w- C:\Users\Joey\AppData\Roaming\US1ibonG4m6
2011-09-30 03:14:55 -------- dc----w- C:\Users\Joey\AppData\Roaming\mtxP0ucS1b3n4m6
2011-09-30 03:14:52 -------- dc----w- C:\Users\Joey\AppData\Roaming\AmHQJ7dEKgZhXjV
2011-09-30 03:14:13 -------- dc----w- C:\Users\Joey\AppData\Roaming\i1uvD2obFpGsJdK
2011-09-30 03:13:44 -------- dc----w- C:\Users\Joey\AppData\Roaming\FBtzPNycAuDoFpG
2011-09-30 03:13:34 -------- dc----w- C:\Users\Joey\AppData\Roaming\KH5sQJ7dE8R9Y
2011-09-30 03:13:12 -------- dc----w- C:\Users\Joey\AppData\Roaming\X3pnG4aQHsKfL
2011-09-30 03:13:02 -------- dc----w- C:\Users\Joey\AppData\Roaming\US2ibF3pn5Q6W7R
2011-09-30 03:11:59 -------- dc----w- C:\Users\Joey\AppData\Roaming\gVrzONtxAuS
2011-09-30 03:10:57 -------- dc----w- C:\Users\Joey\AppData\Roaming\OBtxP0ycSiDoFaH
2011-09-30 03:09:58 -------- dc----w- C:\Users\Joey\AppData\Roaming\ZamH6sWJ7E8TqYw
2011-09-30 03:08:24 -------- dc----w- C:\Users\Joey\AppData\Roaming\kIBrzPNyx1v2b3m
2011-09-30 03:08:24 -------- dc----w- C:\Users\Joey\AppData\Roaming\HfRL9hTXqUeIrOy
2011-09-30 03:08:23 -------- dc----w- C:\Users\Joey\AppData\Roaming\l8fRZ9hTXjCl
2011-09-30 03:08:22 -------- dc----w- C:\Users\Joey\AppData\Roaming\UBt0ycivDopHJd
2011-09-30 03:08:00 -------- dc----w- C:\Users\Joey\AppData\Roaming\v5aQJ6dWKfLhXjC
2011-09-30 02:48:55 -------- dc----w- C:\Users\Joey\AppData\Roaming\XH5sWJ7dE8RqY
2011-09-30 02:48:49 -------- dc----w- C:\Users\Joey\AppData\Roaming\PamH6sWJ7E8TqYw
2011-09-30 02:48:13 -------- dc----w- C:\Users\Joey\AppData\Roaming\azPNyxA1uSoF5Jd
2011-09-30 02:48:01 -------- dc----w- C:\Users\Joey\AppData\Roaming\rycS1ivD3
2011-09-30 02:47:58 -------- dc----w- C:\Users\Joey\AppData\Roaming\fjUelIBrzNAuSo3
2011-09-30 02:47:55 -------- dc----w- C:\Users\Joey\AppData\Roaming\LA0ucibD3n46W7
2011-09-30 02:47:42 -------- dc----w- C:\Users\Joey\AppData\Roaming\rOBtzP0yc
2011-09-30 02:47:36 -------- dc----w- C:\Users\Joey\AppData\Roaming\y7ELgqhYCkVlBx
2011-09-30 02:47:36 -------- dc----w- C:\Users\Joey\AppData\Roaming\qCekIBrzOyAuSiF
2011-09-30 02:47:25 -------- dc----w- C:\Users\Joey\AppData\Roaming\HjUekIBrzx0
2011-09-30 02:47:16 -------- dc----w- C:\Users\Joey\AppData\Roaming\V3pnG4aQHsKfLgZ
2011-09-30 02:47:13 -------- dc----w- C:\Users\Joey\AppData\Roaming\Byc1ivD2o4m5Q
2011-09-30 02:47:05 -------- dc----w- C:\Users\Joey\AppData\Roaming\kRL9hTXqjCkrOy
2011-09-30 02:47:03 -------- dc----w- C:\Users\Joey\AppData\Roaming\tlOBtxP0ySiDoFa
2011-09-30 02:47:03 -------- dc----w- C:\Users\Joey\AppData\Roaming\PBtxP0ycSiDoFaH
2011-09-30 02:46:49 -------- dc----w- C:\Users\Joey\AppData\Roaming\C5sWJ7dELgZ
2011-09-30 02:46:29 -------- dc----w- C:\Users\Joey\AppData\Roaming\sQH6dWK7fLgqY1
2011-09-30 02:46:26 -------- dc----w- C:\Users\Joey\AppData\Roaming\dpG5a6Kf9TqUkBz
2011-09-30 02:46:24 -------- dc----w- C:\Users\Joey\AppData\Roaming\ZOBtxP0yc1v3n4m
2011-09-30 02:46:15 -------- dc----w- C:\Users\Joey\AppData\Roaming\A5sQJ7dEK
2011-09-30 02:46:12 -------- dc----w- C:\Users\Joey\AppData\Roaming\j7fRL9gTXjCkV
2011-09-30 02:44:06 -------- dc----w- C:\Users\Joey\AppData\Roaming\TWK7fEL9gZjCkVl
2011-09-30 02:44:06 -------- dc----w- C:\Users\Joey\AppData\Roaming\eTZqjYCwkVl
2011-09-30 02:43:27 -------- dc----w- C:\Users\Joey\AppData\Roaming\TYCekIVrzNx0
2011-09-30 02:43:25 -------- dc----w- C:\Users\Joey\AppData\Roaming\B1voF4pmHsdKgZh
2011-09-30 02:43:18 -------- dc----w- C:\Users\Joey\AppData\Roaming\JbDpnG4aQ6W7E9Z
2011-09-30 02:43:14 -------- dc----w- C:\Users\Joey\AppData\Roaming\kCwkUVrlOtP
2011-09-30 02:43:14 -------- dc----w- C:\Users\Joey\AppData\Roaming\aK8fRL9hTqUeIrO
2011-09-30 02:43:08 -------- dc----w- C:\Users\Joey\AppData\Roaming\O6dEK8fRZhXjClW
2011-09-30 02:43:03 -------- dc----w- C:\Users\Joey\AppData\Roaming\ApnG4aQH6W7E9Tq
2011-09-30 02:43:01 -------- dc----w- C:\Users\Joey\AppData\Roaming\NwjUVelIBzN
2011-09-30 02:43:00 -------- dc----w- C:\Users\Joey\AppData\Roaming\KsWK7fEL9TqYwIl
2011-09-30 02:42:57 -------- dc----w- C:\Users\Joey\AppData\Roaming\BONyxA0uv2b3n5Q
2011-09-30 02:42:55 -------- dc----w- C:\Users\Joey\AppData\Roaming\mvD3onF4aHWdL
2011-09-30 02:42:52 -------- dc----w- C:\Users\Joey\AppData\Roaming\LK8fRL9hTqUeIrO
2011-09-30 02:42:46 -------- dc----w- C:\Users\Joey\AppData\Roaming\YP0uc1ibDna6JEg
2011-09-30 02:42:44 -------- dc----w- C:\Users\Joey\AppData\Roaming\q2ibD3pnGaHKfLg
2011-09-30 02:42:41 -------- dc----w- C:\Users\Joey\AppData\Roaming\z2onF4pmHsJdKgZ
2011-09-30 02:42:33 -------- dc----w- C:\Users\Joey\AppData\Roaming\fobF3pmG5Q6W8R9
2011-09-30 02:42:15 -------- dc----w- C:\Users\Joey\AppData\Roaming\UwkIVrlONPuSiDo
2011-09-30 02:42:05 -------- dc----w- C:\Users\Joey\AppData\Roaming\k2ibD3pnGaHsKf
2011-09-30 02:40:59 -------- dc----w- C:\Users\Joey\AppData\Roaming\NSbpa6ECtbmgliW
2011-09-30 02:39:56 -------- dc----w- C:\Users\Joey\AppData\Roaming\Z5sQJ7dEKgZhXjV
2011-09-30 02:38:56 -------- dc----w- C:\Users\Joey\AppData\Roaming\XG5aQH6dW7R9TqY
2011-09-30 02:37:59 -------- dc----w- C:\Users\Joey\AppData\Roaming\RkNuDaJgCrPiFsE
2011-09-30 02:36:58 -------- dc----w- C:\Users\Joey\AppData\Roaming\eymfUupWTBvn7j
2011-09-30 02:35:18 -------- dc----w- C:\Users\Joey\AppData\Roaming\e1ivD2onFpH
2011-09-30 02:35:11 -------- dc----w- C:\Users\Joey\AppData\Roaming\nBrzONyxAuSiFpG
2011-09-30 02:35:10 -------- dc----w- C:\Users\Joey\AppData\Roaming\HdEK8fRZ9Tw
2011-09-30 02:35:10 -------- dc----w- C:\Users\Joey\AppData\Roaming\gJ6K8fRZ9TwUeIr
2011-09-30 02:35:09 -------- dc----w- C:\Users\Joey\AppData\Roaming\FzPyu2Fm5QdK
2011-09-30 02:34:56 -------- dc----w- C:\Users\Joey\AppData\Roaming\y2obF3pmGaJdKfL
2011-09-30 02:26:37 64000 ----a-w- C:\Windows\SysWow64\zIVr4amH5W7EgZh.exe
2011-09-30 02:26:37 64000 ----a-w- C:\Windows\SysWow64\up5Hf9TjCI4m5W7.exe
2011-09-30 02:26:37 64000 ----a-w- C:\Windows\SysWow64\nWf9TjCIrNAc.exe
2011-09-30 02:26:37 64000 ----a-w- C:\Windows\SysWow64\dsQJ6dEK8.exe
2011-09-30 02:26:37 64000 ----a-w- C:\Windows\SysWow64\dJ7dEL8gRqYwUeO.exe
2011-09-30 02:25:38 -------- dc----w- C:\Users\Joey\AppData\Roaming\EYCekIVrzNx0c
2011-09-30 02:25:37 -------- dc----w- C:\Users\Joey\AppData\Roaming\EzONyxA0uSi3n5Q
2011-09-30 02:24:25 -------- dc----w- C:\Users\Joey\AppData\Roaming\IbD3pnG4aHsKfLg
2011-09-30 02:23:19 -------- dc----w- C:\Users\Joey\AppData\Roaming\aF4pmG5sQ6E8R9T
2011-09-30 02:23:16 -------- dc----w- C:\Users\Joey\AppData\Roaming\CrzONyxA0v2b3n
2011-09-30 02:23:14 -------- dc----w- C:\Users\Joey\AppData\Roaming\LOBtzP0yc1v
2011-09-30 02:23:11 -------- dc----w- C:\Users\Joey\AppData\Roaming\LyxA0uvS2b3n5Q
2011-09-30 02:23:10 -------- dc----w- C:\Users\Joey\AppData\Roaming\xNyxA1uvSoFpGaJ
2011-09-30 02:23:10 -------- dc----w- C:\Users\Joey\AppData\Roaming\dNycA1uvDoFpGsJ
2011-09-30 02:23:08 -------- dc----w- C:\Users\Joey\AppData\Roaming\LS1ivD3on4m5W7E
2011-09-30 02:23:07 -------- dc----w- C:\Users\Joey\AppData\Roaming\vTXqjYCekVzNx
2011-09-30 02:21:59 -------- dc----w- C:\Users\Joey\AppData\Roaming\o7fRL9gTXjCkVzN
2011-09-30 02:20:54 -------- dc----w- C:\Users\Joey\AppData\Roaming\ZgRZ9hYXwUeItPy
2011-09-30 02:19:59 -------- dc----w- C:\Users\Joey\AppData\Roaming\wTqhYCwkUOcvFmW
2011-09-30 02:18:59 -------- dc----w- C:\Users\Joey\AppData\Roaming\Sf9XYkrNAc2Dna6
2011-09-30 02:17:59 -------- dc----w- C:\Users\Joey\AppData\Roaming\pt1a7ZkOyvF5EZe
2011-09-30 02:16:59 -------- dc----w- C:\Users\Joey\AppData\Roaming\O7fEgZYklPSvo4H
2011-09-30 02:15:58 -------- dc----w- C:\Users\Joey\AppData\Roaming\YUc4dYIvJjAJC
2011-09-30 02:14:59 -------- dc----w- C:\Users\Joey\AppData\Roaming\AGQd8TePub5dLXe
2011-09-30 02:13:57 -------- dc----w- C:\Users\Joey\AppData\Roaming\cHgeAmfUzSQTObd
2011-09-30 02:13:55 -------- dc----w- C:\Users\Joey\AppData\Roaming\bt1mEkP4Ewt
2011-09-30 02:13:47 -------- dc----w- C:\Users\Joey\AppData\Roaming\RRL9gTXqjCkVzNx
2011-09-30 02:13:42 -------- dc----w- C:\Users\Joey\AppData\Roaming\n1iDo4pmHsJdKgZ
2011-09-30 02:13:41 -------- dc----w- C:\Users\Joey\AppData\Roaming\xvD2onF4pHsJdKg
2011-09-30 02:13:41 -------- dc----w- C:\Users\Joey\AppData\Roaming\PvDo4pmH5Q7E8R9
2011-09-30 02:13:41 -------- dc----w- C:\Users\Joey\AppData\Roaming\imH5sQJ7dK
2011-09-30 02:13:41 -------- dc----w- C:\Users\Joey\AppData\Roaming\h2oF4mHsQ7E8R9Y
2011-09-30 02:13:41 -------- dc----w- C:\Users\Joey\AppData\Roaming\FivD2onF4m5Q7E8
2011-09-30 02:13:40 -------- dc----w- C:\Users\Joey\AppData\Roaming\W4pmH5sQJ
2011-09-30 02:13:33 -------- dc----w- C:\Users\Joey\AppData\Roaming\RuF5WRqByv3aKgj
2011-09-30 02:13:29 -------- dc----w- C:\Users\Joey\AppData\Roaming\KqCkrOt0Sbo4Hs7
2011-09-30 02:13:29 -------- dc----w- C:\Users\Joey\AppData\Roaming\FZCIlt0Sb
2011-09-29 22:36:59 1024000 ----a-w- C:\Windows\SysWow64\TH5sWJ7dE8RqXkV.exe
2011-09-29 22:35:59 -------- dc----w- C:\Users\Joey\AppData\Roaming\Z7w0nfwPFEUcmge
2011-09-29 22:34:57 -------- dc----w- C:\Users\Joey\AppData\Roaming\FkIBrzONyAuS
2011-09-29 22:33:57 -------- dc----w- C:\Users\Joey\AppData\Roaming\fN1afCPFEkyF7he
2011-09-29 22:32:58 -------- dc----w- C:\Users\Joey\AppData\Roaming\ViHZt3Jhx
2011-09-29 22:31:58 -------- dc----w- C:\Users\Joey\AppData\Roaming\ulP1b5W9Urup
2011-09-29 22:30:59 -------- dc----w- C:\Users\Joey\AppData\Roaming\DhCz1b5W9jB
2011-09-29 20:18:17 -------- dc----w- C:\Users\Joey\AppData\Roaming\BEK8fRZ9hXUeIrP
2011-09-29 20:17:43 -------- dc----w- C:\Users\Joey\AppData\Roaming\UcA1uvD2oFpGsJd
2011-09-29 20:17:35 -------- dc----w- C:\Users\Joey\AppData\Roaming\DgTZqhYCwUrOtPy
2011-09-29 20:17:31 -------- dc----w- C:\Users\Joey\AppData\Roaming\ulOBtxP0y
2011-09-29 20:17:19 -------- dc----w- C:\Users\Joey\AppData\Roaming\GUCelIBrzNx1v2b
2011-09-29 20:17:09 -------- dc----w- C:\Users\Joey\AppData\Roaming\OWK8fRL9hXjCk
2011-09-29 20:15:53 -------- dc----w- C:\Users\Joey\AppData\Roaming\qVrlONtxP
2011-09-29 20:15:33 -------- dc----w- C:\Users\Joey\AppData\Roaming\sZqjYCwkIlN
2011-09-29 20:15:31 -------- dc----w- C:\Users\Joey\AppData\Roaming\rBtzPNycAuDoFpG
2011-09-29 20:14:47 -------- dc----w- C:\Users\Joey\AppData\Roaming\DdEK8gRZ9YwUeI
2011-09-29 20:14:44 -------- dc----w- C:\Users\Joey\AppData\Roaming\cVrzONtxA
2011-09-29 20:14:37 -------- dc----w- C:\Users\Joey\AppData\Roaming\kH5sQJ7dE8R9YwU
2011-09-29 20:14:30 -------- dc----w- C:\Users\Joey\AppData\Roaming\RH6sWJ7fE8TqYw
2011-09-29 20:14:28 -------- dc----w- C:\Users\Joey\AppData\Roaming\W1uvS2obFpGaJdK
2011-09-29 20:14:23 -------- dc----w- C:\Users\Joey\AppData\Roaming\ECelIBrzPy1v2b3
2011-09-29 20:14:07 -------- dc----w- C:\Users\Joey\AppData\Roaming\xEL8gRZqhXkVlB
2011-09-29 20:14:04 -------- dc----w- C:\Users\Joey\AppData\Roaming\ZsQJ6dEK8R9TwUe
2011-09-29 20:14:02 -------- dc----w- C:\Users\Joey\AppData\Roaming\zlONtxP0uSiDo
2011-09-29 20:12:55 -------- dc----w- C:\Users\Joey\AppData\Roaming\yelIBrzPNx1
2011-09-29 20:11:57 -------- dc----w- C:\Users\Joey\AppData\Roaming\Q99hYwjUeItPyAu
2011-09-29 20:10:41 -------- dc----w- C:\Users\Joey\AppData\Roaming\oIIVVrzzONx
2011-09-29 20:09:59 -------- dc----w- C:\Users\Joey\AppData\Roaming\srunWTV0osgUPD
2011-09-29 20:08:45 -------- dc----w- C:\Users\Joey\AppData\Roaming\CuSiDn4Q6KEgZkV
2011-09-29 20:07:55 -------- dc----w- C:\Users\Joey\AppData\Roaming\FlryuSoFm5Q6
2011-09-29 20:05:14 -------- dc----w- C:\Users\Joey\AppData\Roaming\TfffRRZ9hTXwUCl
2011-09-29 20:05:14 -------- dc----w- C:\Users\Joey\AppData\Roaming\h8ffRRZ9hTXwjCl
2011-09-29 20:00:40 -------- dc----w- C:\Users\Joey\AppData\Roaming\wZqhYXwkUeOtP
2011-09-29 20:00:27 -------- dc----w- C:\Users\Joey\AppData\Roaming\HIBrzONyx0v2b3n
2011-09-29 19:58:59 -------- dc----w- C:\Users\Joey\AppData\Roaming\LH5sQJ7dE8R
2011-09-29 19:57:59 -------- dc----w- C:\Users\Joey\AppData\Roaming\P9TjwVlNxuSi3G
2011-09-29 19:56:59 -------- dc----w- C:\Users\Joey\AppData\Roaming\lFmQdKLTjerNASi
2011-09-29 19:55:58 -------- dc----w- C:\Users\Joey\AppData\Roaming\H7qIxG7ZCltP1n
2011-09-29 19:54:58 -------- dc----w- C:\Users\Joey\AppData\Roaming\BaQH6dWK7R9TqYe
2011-09-29 19:53:59 -------- dc----w- C:\Users\Joey\AppData\Roaming\f0JrD8zmj2fNGTN
2011-09-29 19:52:59 -------- dc----w- C:\Users\Joey\AppData\Roaming\HwzvHgUNoQZ
2011-09-29 19:51:59 -------- dc----w- C:\Users\Joey\AppData\Roaming\nnKXrcG7Yxnf
2011-09-29 19:51:56 -------- dc----w- C:\Users\Joey\AppData\Roaming\m3sgkP3sRU0ndwP
2011-09-29 19:51:56 -------- dc----w- C:\Users\Joey\AppData\Roaming\Cs8wxvHLwtD58XB
2011-09-29 19:51:55 -------- dc----w- C:\Users\Joey\AppData\Roaming\N8YUtc3aW8Y
2011-09-29 19:51:49 -------- dc----w- C:\Users\Joey\AppData\Roaming\U6fXkOub4WL
2011-09-29 19:51:46 -------- dc----w- C:\Users\Joey\AppData\Roaming\DBPy12Fm5Qd
2011-09-29 19:51:46 -------- dc----w- C:\Users\Joey\AppData\Roaming\a1vo4HQdKRhXUeB
2011-09-29 19:51:43 -------- dc----w- C:\Users\Joey\AppData\Roaming\xXjeIBrzOyAv2Fp
2011-09-29 19:51:43 -------- dc----w- C:\Users\Joey\AppData\Roaming\wdKRhXqjUeIrOyA
2011-09-29 19:43:58 -------- dc----w- C:\Users\Joey\AppData\Roaming\bNyxA0uvSiFpGaH
2011-09-29 19:43:46 -------- dc----w- C:\Users\Joey\AppData\Roaming\tvD2onF4pHsJdKg
2011-09-29 19:43:34 -------- dc----w- C:\Users\Joey\AppData\Roaming\bIVrzONtx0c2b3
2011-09-29 19:43:23 -------- dc----w- C:\Users\Joey\AppData\Roaming\X7dEK8gRZh
2011-09-29 19:43:10 -------- dc----w- C:\Users\Joey\AppData\Roaming\EaQH6sWK7E9TqYw
2011-09-29 19:42:57 -------- dc----w- C:\Users\Joey\AppData\Roaming\q0ycS1ivDoFaHsJ
2011-09-29 19:42:43 -------- dc----w- C:\Users\Joey\AppData\Roaming\hYXwjUVelBzNc1v
2011-09-29 19:42:27 -------- dc----w- C:\Users\Joey\AppData\Roaming\tucS2ibD3n4Q6W7
2011-09-29 19:42:15 -------- dc----w- C:\Users\Joey\AppData\Roaming\tEK8gRZ9hXjVlBz
2011-09-29 19:42:02 -------- dc----w- C:\Users\Joey\AppData\Roaming\SH6sWK7fE9TqY
2011-09-29 19:41:48 -------- dc----w- C:\Users\Joey\AppData\Roaming\OIVrlONtx0c1b3n
2011-09-29 19:41:36 -------- dc----w- C:\Users\Joey\AppData\Roaming\szPNycA1uDoFpGs
2011-09-29 19:41:22 -------- dc----w- C:\Users\Joey\AppData\Roaming\lL9hTXqjUeIrOyA
2011-09-29 19:41:08 -------- dc----w- C:\Users\Joey\AppData\Roaming\iVrzONtxAuSiDpG
2011-09-29 19:40:56 -------- dc----w- C:\Users\Joey\AppData\Roaming\LP0ycA1iv2n4m5Q
2011-09-29 19:40:44 -------- dc----w- C:\Users\Joey\AppData\Roaming\TvS2ibF3pGaHdKf
2011-09-29 19:40:32 -------- dc----w- C:\Users\Joey\AppData\Roaming\E0ycA1ivDoFpHsJ
2011-09-29 19:40:20 -------- dc----w- C:\Users\Joey\AppData\Roaming\jaQH6dWK7R
2011-09-29 19:40:08 -------- dc----w- C:\Users\Joey\AppData\Roaming\GhYXwjUVeItPy
2011-09-29 19:39:56 -------- dc----w- C:\Users\Joey\AppData\Roaming\kONtxA0uc2b3n4
2011-09-29 19:39:44 -------- dc----w- C:\Users\Joey\AppData\Roaming\O1ivD2onFpHsJ
2011-09-29 19:39:31 -------- dc----w- C:\Users\Joey\AppData\Roaming\P3pnG4aQHsK
2011-09-29 19:39:20 -------- dc----w- C:\Users\Joey\AppData\Roaming\XjUVelIBtPyAuDo
2011-09-29 19:38:52 -------- dc----w- C:\Users\Joey\AppData\Roaming\NIVrzONtx0c
2011-09-29 19:38:41 -------- dc----w- C:\Users\Joey\AppData\Roaming\EjUCelIBrP
2011-09-29 19:38:17 -------- dc----w- C:\Users\Joey\AppData\Roaming\gmG5aQJ6dKfLhX
2011-09-29 19:38:05 -------- dc----w- C:\Users\Joey\AppData\Roaming\RNtxP0ucSiDoGa
2011-09-29 19:37:53 -------- dc----w- C:\Users\Joey\AppData\Roaming\tWK8fRL9hXjCkBz
2011-09-29 19:37:41 -------- dc----w- C:\Users\Joey\AppData\Roaming\bD3onF4am5W7E8R
2011-09-29 19:37:18 -------- dc----w- C:\Users\Joey\AppData\Roaming\REK8gRZ9hXjVlB
2011-09-29 19:37:06 -------- dc----w- C:\Users\Joey\AppData\Roaming\iWK7fRL9gXjCkVz
2011-09-29 19:36:53 -------- dc----w- C:\Users\Joey\AppData\Roaming\RWJ7dEL8gZhXkVl
2011-09-29 19:36:41 -------- dc----w- C:\Users\Joey\AppData\Roaming\vfRL9gTXqYeIr
2011-09-29 19:36:29 -------- dc----w- C:\Users\Joey\AppData\Roaming\C8gRZ9hYXjVlBzN
2011-09-29 19:36:17 -------- dc----w- C:\Users\Joey\AppData\Roaming\dA0ucS2ib3n4Q6W
2011-09-29 19:36:05 -------- dc----w- C:\Users\Joey\AppData\Roaming\zZ9hYXwjUe
2011-09-29 19:35:53 -------- dc----w- C:\Users\Joey\AppData\Roaming\zucS1ibD3n4m6W7
2011-09-29 19:35:41 -------- dc----w- C:\Users\Joey\AppData\Roaming\nvD2obF4pGsJ
2011-09-29 19:35:28 -------- dc----w- C:\Users\Joey\AppData\Roaming\RQH6sWK7fLgXjCk
2011-09-29 19:35:15 -------- dc----w- C:\Users\Joey\AppData\Roaming\vEL8gRZqhXkVlBz
2011-09-29 19:35:03 -------- dc----w- C:\Users\Joey\AppData\Roaming\ZxA1uvS2oFpGaJd
2011-09-29 19:34:50 -------- dc----w- C:\Users\Joey\AppData\Roaming\LkIVrlONtPuSiDo
2011-09-29 19:34:36 -------- dc----w- C:\Users\Joey\AppData\Roaming\pamH5sWJ7
2011-09-29 19:34:21 -------- dc----w- C:\Users\Joey\AppData\Roaming\tS1ivD3on4m5W
2011-09-29 19:34:08 -------- dc----w- C:\Users\Joey\AppData\Roaming\lBtzPNycAuDoFpG
2011-09-29 19:33:56 -------- dc----w- C:\Users\Joey\AppData\Roaming\J3pnG4aQH
2011-09-29 19:33:45 -------- dc----w- C:\Users\Joey\AppData\Roaming\DwjUCelIBzNx1v2
2011-09-29 19:33:32 -------- dc----w- C:\Users\Joey\AppData\Roaming\QpnG4aQH6W7E9T
2011-09-29 19:33:18 -------- dc----w- C:\Users\Joey\AppData\Roaming\ZrlOBtxP0c1v3n4
2011-09-29 19:33:06 -------- dc----w- C:\Users\Joey\AppData\Roaming\GaQJ6dWK8R9Tq
2011-09-29 19:32:54 -------- dc----w- C:\Users\Joey\AppData\Roaming\wOBtxP0yc1v3n4m
2011-09-29 19:32:43 -------- dc----w- C:\Users\Joey\AppData\Roaming\cS2ibD3pn4Q6W7E
2011-09-29 19:32:31 -------- dc----w- C:\Users\Joey\AppData\Roaming\nUVelIBtzNc1v2b
2011-09-29 19:32:20 -------- dc----w- C:\Users\Joey\AppData\Roaming\ukUVrlOBtPySiDo
2011-09-29 19:32:08 -------- dc----w- C:\Users\Joey\AppData\Roaming\yaQH6dWK7R9
2011-09-29 19:31:57 -------- dc----w- C:\Users\Joey\AppData\Roaming\ncA1ivD2o
2011-09-29 19:31:45 -------- dc----w- C:\Users\Joey\AppData\Roaming\q9gTZqjYCkVlNx0
2011-09-29 19:31:31 -------- dc----w- C:\Users\Joey\AppData\Roaming\KBtxP0ycSiDoF
2011-09-29 19:31:19 -------- dc----w- C:\Users\Joey\AppData\Roaming\r9hTXwjUClBzNx1
2011-09-29 19:31:08 -------- dc----w- C:\Users\Joey\AppData\Roaming\zBtzP0ycAiDoF
2011-09-29 19:30:56 -------- dc----w- C:\Users\Joey\AppData\Roaming\fA0ucS2ib3n4Q6W
2011-09-29 19:30:45 -------- dc----w- C:\Users\Joey\AppData\Roaming\TyxA1uvS2b3m
2011-09-29 19:30:33 -------- dc----w- C:\Users\Joey\AppData\Roaming\NonF4amH5W7E8Rq
2011-09-29 19:30:22 -------- dc----w- C:\Users\Joey\AppData\Roaming\nQH6dWK7fLgXjCk
2011-09-29 19:30:11 -------- dc----w- C:\Users\Joey\AppData\Roaming\dlIBrzPNyAuSoFp
2011-09-29 19:29:59 -------- dc----w- C:\Users\Joey\AppData\Roaming\KvD3onF4aHsJdLg
2011-09-29 19:29:48 -------- dc----w- C:\Users\Joey\AppData\Roaming\ZS2ibF3pn
2011-09-29 19:29:36 -------- dc----w- C:\Users\Joey\AppData\Roaming\NmG5sQJ6dKfZhXj
2011-09-29 19:29:25 -------- dc----w- C:\Users\Joey\AppData\Roaming\dH6sWJ7fE8Tq
2011-09-29 19:29:14 -------- dc----w- C:\Users\Joey\AppData\Roaming\hVrzONtxAuSiDpG
2011-09-29 19:29:02 -------- dc----w- C:\Users\Joey\AppData\Roaming\s5sQJ7dEKgZhXjV
2011-09-29 19:28:50 -------- dc----w- C:\Users\Joey\AppData\Roaming\p6sWK7fELgZjCkV
2011-09-29 19:28:38 -------- dc----w- C:\Users\Joey\AppData\Roaming\W4pmG5sQJdKfZhX
2011-09-29 19:28:26 -------- dc----w- C:\Users\Joey\AppData\Roaming\tmH6sWJ7fLgZh
2011-09-29 19:28:15 -------- dc----w- C:\Users\Joey\AppData\Roaming\mRL9hTXqjC
2011-09-29 19:28:04 -------- dc----w- C:\Users\Joey\AppData\Roaming\ZUVelIBtzNc1v2b
2011-09-29 19:27:52 -------- dc----w- C:\Users\Joey\AppData\Roaming\qqjYCwkIV
2011-09-29 19:27:40 -------- dc----w- C:\Users\Joey\AppData\Roaming\DG5aQJ6dW8R9TqU
2011-09-29 19:27:28 -------- dc----w- C:\Users\Joey\AppData\Roaming\wnG4amH6sJfLg
2011-09-29 19:27:15 -------- dc----w- C:\Users\Joey\AppData\Roaming\delOBtzP0c1v2n4
2011-09-29 19:27:03 -------- dc----w- C:\Users\Joey\AppData\Roaming\sL9gTZqjYwIrOt
2011-09-29 19:26:50 -------- dc----w- C:\Users\Joey\AppData\Roaming\ERZqhYXwkVlBz
2011-09-29 19:26:37 -------- dc----w- C:\Users\Joey\AppData\Roaming\gL9hTXqjUeI
2011-09-29 19:26:24 -------- dc----w- C:\Users\Joey\AppData\Roaming\dqjYCwkIVlNx
2011-09-29 19:26:12 -------- dc----w- C:\Users\Joey\AppData\Roaming\rJ7dEK8gR9YwUeI
2011-09-29 19:26:00 -------- dc----w- C:\Users\Joey\AppData\Roaming\sYCwkIVrlNx0c1b
2011-09-29 19:25:45 -------- dc----w- C:\Users\Joey\AppData\Roaming\iaQH6sWK7E9Tq
2011-09-29 19:25:33 -------- dc----w- C:\Users\Joey\AppData\Roaming\dQJ6dEK8f
2011-09-29 19:25:20 -------- dc----w- C:\Users\Joey\AppData\Roaming\m7fRL9gTXj
2011-09-29 19:25:09 -------- dc----w- C:\Users\Joey\AppData\Roaming\qEK8fRZ9hXjC
2011-09-29 19:24:58 -------- dc----w- C:\Users\Joey\AppData\Roaming\avD2onF4pHsJdKg
2011-09-29 19:24:47 -------- dc----w- C:\Users\Joey\AppData\Roaming\P1ibD3onGaHsJfL
2011-09-29 19:24:37 -------- dc----w- C:\Users\Joey\AppData\Roaming\LQH6dWK7fLgXjC
2011-09-29 19:24:26 -------- dc----w- C:\Users\Joey\AppData\Roaming\VXqjUCekI
2011-09-29 19:24:15 -------- dc----w- C:\Users\Joey\AppData\Roaming\hEK8gRZ9hXjVlBz
2011-09-29 19:24:04 -------- dc----w- C:\Users\Joey\AppData\Roaming\nJ7fEL8gTqYwUrO
2011-09-29 19:23:53 -------- dc----w- C:\Users\Joey\AppData\Roaming\s3pnG4aQHsKfLgZ
2011-09-29 19:23:42 -------- dc----w- C:\Users\Joey\AppData\Roaming\UpmG5aQJ6W8R9Tq
2011-09-29 19:23:32 -------- dc----w- C:\Users\Joey\AppData\Roaming\hzPNycA1u
2011-09-29 19:23:21 -------- dc----w- C:\Users\Joey\AppData\Roaming\vdEK8gRZ9Y
2011-09-29 19:23:11 -------- dc----w- C:\Users\Joey\AppData\Roaming\zZqhYCwkUrOtPyS
2011-09-29 19:22:49 -------- dc----w- C:\Users\Joey\AppData\Roaming\NhTXqjUCeIrOyAu
2011-09-29 19:22:37 -------- dc----w- C:\Users\Joey\AppData\Roaming\NBtzP0ycAiDoFpH
2011-09-29 19:22:27 -------- dc----w- C:\Users\Joey\AppData\Roaming\OF4amH5sW7E8R
2011-09-29 19:22:16 -------- dc----w- C:\Users\Joey\AppData\Roaming\j6sWK7fELgZjCkV
2011-09-29 19:22:05 -------- dc----w- C:\Users\Joey\AppData\Roaming\a5aQJ6dWKfLhXjC
2011-09-29 19:21:54 -------- dc----w- C:\Users\Joey\AppData\Roaming\ghTXwjUCeIrPyA
2011-09-29 19:21:43 -------- dc----w- C:\Users\Joey\AppData\Roaming\AsWJ7dEL8
2011-09-29 19:21:32 -------- dc----w- C:\Users\Joey\AppData\Roaming\bbD3pnG4aHsKfLg
2011-09-29 19:21:21 -------- dc----w- C:\Users\Joey\AppData\Roaming\PaQH6dWK7R9
2011-09-29 19:21:10 -------- dc----w- C:\Users\Joey\AppData\Roaming\rIBtzPNyc1v2b4m
2011-09-29 19:20:59 -------- dc----w- C:\Users\Joey\AppData\Roaming\JmH6sWJ7fLgZhCk
2011-09-29 19:20:48 -------- dc----w- C:\Users\Joey\AppData\Roaming\fcS2ibD3pGaHs
2011-09-29 19:20:37 -------- dc----w- C:\Users\Joey\AppData\Roaming\HdEK8fRZ9TwUeI
2011-09-29 19:20:26 -------- dc----w- C:\Users\Joey\AppData\Roaming\A1ivD3onFaHsJdL
2011-09-29 19:20:14 -------- dc----w- C:\Users\Joey\AppData\Roaming\xTZqjYCwkVl
2011-09-29 19:20:03 -------- dc----w- C:\Users\Joey\AppData\Roaming\O8fRL9hTXj
2011-09-29 19:19:53 -------- dc----w- C:\Users\Joey\AppData\Roaming\AmH5sQJ7dKgZhXj
2011-09-29 19:19:41 -------- dc----w- C:\Users\Joey\AppData\Roaming\hS1ibD3on4m6W7E
2011-09-29 19:19:30 -------- dc----w- C:\Users\Joey\AppData\Roaming\ZqjUCekIBzNx
2011-09-29 19:19:19 -------- dc----w- C:\Users\Joey\AppData\Roaming\BobF4pmG5Q6E8R9
2011-09-29 19:19:07 -------- dc----w- C:\Users\Joey\AppData\Roaming\o0ucS1ibDoGaHsJ
2011-09-29 19:18:55 -------- dc----w- C:\Users\Joey\AppData\Roaming\BrzPNyxA1v2b3m5
2011-09-29 19:18:44 -------- dc----w- C:\Users\Joey\AppData\Roaming\g2onF4pmHsJdKgZ
2011-09-29 19:18:33 -------- dc----w- C:\Users\Joey\AppData\Roaming\cONtxP0uc1b3
2011-09-29 19:18:21 -------- dc----w- C:\Users\Joey\AppData\Roaming\u2obF3pmG
2011-09-29 19:18:10 -------- dc----w- C:\Users\Joey\AppData\Roaming\NF4pmH5sQ7E8R9Y
2011-09-29 19:17:58 -------- dc----w- C:\Users\Joey\AppData\Roaming\xK7fEL9gTqYwIr
2011-09-29 19:17:45 -------- dc----w- C:\Users\Joey\AppData\Roaming\XnF4amH5sJ
2011-09-29 19:17:33 -------- dc----w- C:\Users\Joey\AppData\Roaming\nbF3pmG5aJdKfLh
2011-09-29 19:17:20 -------- dc----w- C:\Users\Joey\AppData\Roaming\VjYCwkIVrOtPuSi
2011-09-29 19:17:08 -------- dc----w- C:\Users\Joey\AppData\Roaming\YJ6dWK8fR9TqU
2011-09-29 19:16:56 -------- dc----w- C:\Users\Joey\AppData\Roaming\ixP0ycS1iDoFaHs
2011-09-29 19:16:45 -------- dc----w- C:\Users\Joey\AppData\Roaming\HXqjYCekIrOtAuS
2011-09-29 19:16:33 -------- dc----w- C:\Users\Joey\AppData\Roaming\pobF4pmG5
2011-09-29 19:16:22 -------- dc----w- C:\Users\Joey\AppData\Roaming\FxP0ucS1i
2011-09-29 19:16:10 -------- dc----w- C:\Users\Joey\AppData\Roaming\BekIBrzONx
2011-09-29 19:15:58 -------- dc----w- C:\Users\Joey\AppData\Roaming\d8gRZqhYX
2011-09-29 19:15:44 -------- dc----w- C:\Users\Joey\AppData\Roaming\WWJ7dEL8gZhX
2011-09-29 19:15:29 -------- dc----w- C:\Users\Joey\AppData\Roaming\OivD2onF4m
2011-09-29 19:15:18 -------- dc----w- C:\Users\Joey\AppData\Roaming\W3pnG4aQHsKfLgZ
2011-09-29 19:15:06 -------- dc----w- C:\Users\Joey\AppData\Roaming\jQJ6dWK8fLhXj
2011-09-29 19:14:55 -------- dc----w- C:\Users\Joey\AppData\Roaming\T4pmH5sQJdKg
2011-09-29 19:14:44 -------- dc----w- C:\Users\Joey\AppData\Roaming\JTZqjYCwkVlN
2011-09-29 19:14:33 -------- dc----w- C:\Users\Joey\AppData\Roaming\j9gTXqjYCkVzN
2011-09-29 19:14:23 -------- dc----w- C:\Users\Joey\AppData\Roaming\kXwjUCelIrPyAuS
2011-09-29 19:14:12 -------- dc----w- C:\Users\Joey\AppData\Roaming\wA1ivD2on4m5Q
2011-09-29 19:14:01 -------- dc----w- C:\Users\Joey\AppData\Roaming\s0ycS1ivDoFaHs
2011-09-29 19:13:49 -------- dc----w- C:\Users\Joey\AppData\Roaming\ExA0uvS2iFpGaHd
2011-09-29 19:13:38 -------- dc----w- C:\Users\Joey\AppData\Roaming\zXwjUVelItPyA
2011-09-29 19:13:27 -------- dc----w- C:\Users\Joey\AppData\Roaming\O4amH5sWJdLgZhX
2011-09-29 19:13:17 -------- dc----w- C:\Users\Joey\AppData\Roaming\gYCwkIVrlNx0c1b
2011-09-29 19:13:06 -------- dc----w- C:\Users\Joey\AppData\Roaming\A9gTZqjYCkVl
2011-09-29 19:12:56 -------- dc----w- C:\Users\Joey\AppData\Roaming\OnG5aQH6dKfLgXj
2011-09-29 19:12:45 -------- dc----w- C:\Users\Joey\AppData\Roaming\hwjUCelIBzNx1v2
2011-09-29 19:12:35 -------- dc----w- C:\Users\Joey\AppData\Roaming\bPNycA1uv2b4m5Q
2011-09-29 19:12:24 -------- dc----w- C:\Users\Joey\AppData\Roaming\zWJ7dEL8gZhXkVl
2011-09-29 19:12:14 -------- dc----w- C:\Users\Joey\AppData\Roaming\OVrlONtxPuSiDoG
2011-09-29 19:12:03 -------- dc----w- C:\Users\Joey\AppData\Roaming\Z4aQH6sWKfLgZjC
2011-09-29 19:11:52 -------- dc----w- C:\Users\Joey\AppData\Roaming\QUCekIBrzNx0v2b
2011-09-29 19:11:42 -------- dc----w- C:\Users\Joey\AppData\Roaming\RsQJ6dEK8R9TwUe
2011-09-29 19:11:31 -------- dc----w- C:\Users\Joey\AppData\Roaming\tIBtzPNyc1v2b4m
2011-09-29 19:11:21 -------- dc----w- C:\Users\Joey\AppData\Roaming\aXwkUVelOtPyA
2011-09-29 19:11:11 -------- dc----w- C:\Users\Joey\AppData\Roaming\Z6sWJ7fELgZhCkV
2011-09-29 19:11:00 -------- dc----w- C:\Users\Joey\AppData\Roaming\EucS1ibD3n4m6W7
2011-09-29 19:10:50 -------- dc----w- C:\Users\Joey\AppData\Roaming\G3pnG5aQHdKfL
2011-09-29 19:10:39 -------- dc----w- C:\Users\Joey\AppData\Roaming\HG5sQJ6dE8R9TwU
2011-09-29 19:10:28 -------- dc----w- C:\Users\Joey\AppData\Roaming\HXwjUVelItPyAu
2011-09-29 19:10:18 -------- dc----w- C:\Users\Joey\AppData\Roaming\e3onF4amHsJdLg
2011-09-29 19:10:07 -------- dc----w- C:\Users\Joey\AppData\Roaming\l4aQH6sWKfLgZjC
2011-09-29 19:09:56 -------- dc----w- C:\Users\Joey\AppData\Roaming\n5aQH6dWKfLgXjC
2011-09-29 19:09:45 -------- dc----w- C:\Users\Joey\AppData\Roaming\w8fRZ9hTXjClB
2011-09-29 19:09:34 -------- dc----w- C:\Users\Joey\AppData\Roaming\hWJ7dEL8gZhX
2011-09-29 19:09:23 -------- dc----w- C:\Users\Joey\AppData\Roaming\k3onG4amHsJfLgZ
2011-09-29 19:09:12 -------- dc----w- C:\Users\Joey\AppData\Roaming\XS2ibF3pn5Q6W7R
2011-09-29 19:09:02 -------- dc----w- C:\Users\Joey\AppData\Roaming\tsQJ6dEK8R9TwUe
2011-09-29 19:08:51 -------- dc----w- C:\Users\Joey\AppData\Roaming\VpmH5sQJ7E8R9Yw
2011-09-29 19:08:40 -------- dc----w- C:\Users\Joey\AppData\Roaming\RCwkUVrlOtPySi
2011-09-29 19:08:29 -------- dc----w- C:\Users\Joey\AppData\Roaming\gkIVrzONtAuSiDp
2011-09-29 19:08:19 -------- dc----w- C:\Users\Joey\AppData\Roaming\nL9gTXqjY
2011-09-29 19:08:08 -------- dc----w- C:\Users\Joey\AppData\Roaming\txA1uvS2oFpGaJd
2011-09-29 19:07:58 -------- dc----w- C:\Users\Joey\AppData\Roaming\OjUVelIBtPyAu
2011-09-29 19:07:48 -------- dc----w- C:\Users\Joey\AppData\Roaming\vH5sQJ7dE8R9YwU
2011-09-29 19:07:36 -------- dc----w- C:\Users\Joey\AppData\Roaming\o1ibD3onGaH
2011-09-29 19:07:26 -------- dc----w- C:\Users\Joey\AppData\Roaming\PgTXqjYCeIr
2011-09-29 19:07:14 -------- dc----w- C:\Users\Joey\AppData\Roaming\IhTXwjUCeIrPyAu
2011-09-29 19:07:04 -------- dc----w- C:\Users\Joey\AppData\Roaming\DhYXwkUVeOtPyAi
2011-09-29 19:06:53 -------- dc----w- C:\Users\Joey\AppData\Roaming\CNtxP0ucSiDoGa
2011-09-29 19:06:42 -------- dc----w- C:\Users\Joey\AppData\Roaming\qpnG4aQH6
2011-09-29 19:06:32 -------- dc----w- C:\Users\Joey\AppData\Roaming\EdWK8fRL9TqUeIr
2011-09-29 19:06:21 -------- dc----w- C:\Users\Joey\AppData\Roaming\delIBtzPNc1v
2011-09-29 19:06:10 -------- dc----w- C:\Users\Joey\AppData\Roaming\gRZqhYXwkVlBz0c
2011-09-29 19:05:59 -------- dc----w- C:\Users\Joey\AppData\Roaming\E7fEL9gTZjCkVlN
2011-09-29 19:05:48 -------- dc----w- C:\Users\Joey\AppData\Roaming\gRL9gTXqjCk
2011-09-29 19:05:36 -------- dc----w- C:\Users\Joey\AppData\Roaming\WdEL8gRZqYwUeOt
2011-09-29 19:05:24 -------- dc----w- C:\Users\Joey\AppData\Roaming\NS2ibF3pn5Q6W7
2011-09-29 19:05:13 -------- dc----w- C:\Users\Joey\AppData\Roaming\qbF3pmG5aJdKfLh
2011-09-29 19:05:03 -------- dc----w- C:\Users\Joey\AppData\Roaming\I2obF4pmGsJdKfZ
2011-09-29 19:04:52 -------- dc----w- C:\Users\Joey\AppData\Roaming\znF4amH5sJdLgZh
2011-09-29 19:04:41 -------- dc----w- C:\Users\Joey\AppData\Roaming\j6sWJ7fELg
2011-09-29 19:04:31 -------- dc----w- C:\Users\Joey\AppData\Roaming\KzONtxA0uS
2011-09-29 19:04:20 -------- dc----w- C:\Users\Joey\AppData\Roaming\STXqjUCekBzNx0v
2011-09-29 19:04:10 -------- dc----w- C:\Users\Joey\AppData\Roaming\uyxA1uvS2b3m
2011-09-29 19:03:59 -------- dc----w- C:\Users\Joey\AppData\Roaming\GhYXwjUVeItPyAu
2011-09-29 19:03:49 -------- dc----w- C:\Users\Joey\AppData\Roaming\sL8gRZqhYwU
2011-09-29 19:03:39 -------- dc----w- C:\Users\Joey\AppData\Roaming\BivD3onF4m5W7
2011-09-29 19:03:28 -------- dc----w- C:\Users\Joey\AppData\Roaming\UkIVrlONtPuSiDo
2011-09-29 19:03:18 -------- dc----w- C:\Users\Joey\AppData\Roaming\lqjYCekIVzNx
2011-09-29 19:02:52 -------- dc----w- C:\Users\Joey\AppData\Roaming\UvS2obF3pGaJdKf
2011-09-29 19:02:42 -------- dc----w- C:\Users\Joey\AppData\Roaming\G5sQJ6dEKfZhX
2011-09-29 19:02:32 -------- dc----w- C:\Users\Joey\AppData\Roaming\g7dEK8gRZhXjVl
2011-09-29 19:02:21 -------- dc----w- C:\Users\Joey\AppData\Roaming\dvD3onF4aHsJdLg
2011-09-29 19:02:11 -------- dc----w- C:\Users\Joey\AppData\Roaming\ogTZqhYCwUrOtPy
2011-09-29 19:02:00 -------- dc----w- C:\Users\Joey\AppData\Roaming\WpnG4aQH6W7E9Tq
2011-09-29 19:01:50 -------- dc----w- C:\Users\Joey\AppData\Roaming\rUCekIBrzNx0v2b
2011-09-29 19:01:40 -------- dc----w- C:\Users\Joey\AppData\Roaming\Q2ibF3pnGaHdKf
2011-09-29 19:01:30 -------- dc----w- C:\Users\Joey\AppData\Roaming\kekIBrzONx0v2b
2011-09-29 19:01:20 -------- dc----w- C:\Users\Joey\AppData\Roaming\mobF3pmG5Q6W8R9
2011-09-29 19:01:10 -------- dc----w- C:\Users\Joey\AppData\Roaming\PCelIBrzPyAuSoF
2011-09-29 19:01:00 -------- dc----w- C:\Users\Joey\AppData\Roaming\K2obF3pmGaJdK
2011-09-29 19:00:50 -------- dc----w- C:\Users\Joey\AppData\Roaming\JTXwjUCel
2011-09-29 19:00:41 -------- dc----w- C:\Users\Joey\AppData\Roaming\JobF4pmG5Q6E8R9
2011-09-29 19:00:31 -------- dc----w- C:\Users\Joey\AppData\Roaming\pPNyxA1uv
2011-09-29 19:00:21 -------- dc----w- C:\Users\Joey\AppData\Roaming\sXwjUCelIrP
2011-09-29 19:00:12 -------- dc----w- C:\Users\Joey\AppData\Roaming\IQJ6dEK8fZhX
2011-09-29 19:00:02 -------- dc----w- C:\Users\Joey\AppData\Roaming\G1uvS2obFpGaJ
2011-09-29 18:59:52 -------- dc----w- C:\Users\Joey\AppData\Roaming\JelIBrzPNx1v2b3
2011-09-29 18:59:42 -------- dc----w- C:\Users\Joey\AppData\Roaming\delIBrzPN
2011-09-29 18:59:32 -------- dc----w- C:\Users\Joey\AppData\Roaming\melIBrzPNx1v2b3
2011-09-29 18:59:22 -------- dc----w- C:\Users\Joey\AppData\Roaming\lcA1ivD2oFpHsJd
2011-09-29 18:59:11 -------- dc----w- C:\Users\Joey\AppData\Roaming\UwkUVrlOBx0c1v3
2011-09-29 18:59:01 -------- dc----w- C:\Users\Joey\AppData\Roaming\hsWJ7fEL8
2011-09-29 18:58:51 -------- dc----w- C:\Users\Joey\AppData\Roaming\LWK7fEL9gZjCkVl
2011-09-29 18:58:41 -------- dc----w- C:\Users\Joey\AppData\Roaming\GYCekIVrzNx0c
2011-09-29 18:58:30 -------- dc----w- C:\Users\Joey\AppData\Roaming\zWK7fRL9gXjCkVz
2011-09-29 18:58:20 -------- dc----w- C:\Users\Joey\AppData\Roaming\kdWK8fRL9TqUeIr
2011-09-29 18:58:10 -------- dc----w- C:\Users\Joey\AppData\Roaming\zsQJ6dEK8R9Tw
2011-09-29 18:58:00 -------- dc----w- C:\Users\Joey\AppData\Roaming\j5sQJ6dEKf
2011-09-29 18:57:50 -------- dc----w- C:\Users\Joey\AppData\Roaming\H7dEK8gRZhX
2011-09-29 18:57:40 -------- dc----w- C:\Users\Joey\AppData\Roaming\SwkUVelOBz0c1v2
2011-09-29 18:57:29 -------- dc----w- C:\Users\Joey\AppData\Roaming\qJ7dEL8gRqYwUeO
2011-09-29 18:57:19 -------- dc----w- C:\Users\Joey\AppData\Roaming\r3onF4amH
2011-09-29 18:57:09 -------- dc----w- C:\Users\Joey\AppData\Roaming\YonG4amH6W7E8Tq
2011-09-29 18:56:49 -------- dc----w- C:\Users\Joey\AppData\Roaming\bS1ibD3on4m
2011-09-29 18:56:40 -------- dc----w- C:\Users\Joey\AppData\Roaming\QEL9gTZqjCkVlNx
2011-09-29 18:56:30 -------- dc----w- C:\Users\Joey\AppData\Roaming\TxA0ucS2iDpGaHs
2011-09-29 18:56:20 -------- dc----w- C:\Users\Joey\AppData\Roaming\X3pnG4aQHsKfLgZ
2011-09-29 18:56:10 -------- dc----w- C:\Users\Joey\AppData\Roaming\cVrzONtxAuSiDpG
2011-09-29 18:56:00 -------- dc----w- C:\Users\Joey\AppData\Roaming\u0uvS2ibFpGaHdK
2011-09-29 18:55:50 -------- dc----w- C:\Users\Joey\AppData\Roaming\qvS2ibF3pGaHdKf
2011-09-29 18:55:39 -------- dc----w- C:\Users\Joey\AppData\Roaming\fNycA1uvDoFpGsJ
2011-09-29 18:55:29 -------- dc----w- C:\Users\Joey\AppData\Roaming\dVelIBtzP
2011-09-29 18:55:19 -------- dc----w- C:\Users\Joey\AppData\Roaming\e6dEK8fRZhXjClB
2011-09-29 18:55:10 -------- dc----w- C:\Users\Joey\AppData\Roaming\fA1uvD2ob4m5Q6E
2011-09-29 18:55:00 -------- dc----w- C:\Users\Joey\AppData\Roaming\kEK8gRZ9hXjVlBz
2011-09-29 18:54:35 -------- dc----w- C:\Users\Joey\AppData\Roaming\QivD2onF4m5
2011-09-29 18:54:25 -------- dc----w- C:\Users\Joey\AppData\Roaming\ElOBtzP0yAiDo
2011-09-29 18:54:16 -------- dc----w- C:\Users\Joey\AppData\Roaming\GNycA1uvDo
2011-09-29 18:54:07 -------- dc----w- C:\Users\Joey\AppData\Roaming\evD2obF4pGsJdKf
2011-09-29 18:53:42 -------- dc----w- C:\Users\Joey\AppData\Roaming\BzPNycA1uDoFpGs
2011-09-29 18:53:32 -------- dc----w- C:\Users\Joey\AppData\Roaming\lF4pmG5sQ
2011-09-29 18:53:23 -------- dc----w- C:\Users\Joey\AppData\Roaming\t4pmG5sQJdKfZhX
2011-09-29 18:53:13 -------- dc----w- C:\Users\Joey\AppData\Roaming\PK8fRZ9hTwUeIrP
2011-09-29 18:53:03 -------- dc----w- C:\Users\Joey\AppData\Roaming\CelIBtzPNc1v2b
2011-09-29 18:52:53 -------- dc----w- C:\Users\Joey\AppData\Roaming\yBtzP0ycAiDoFp
2011-09-29 18:52:43 -------- dc----w- C:\Users\Joey\AppData\Roaming\pH5sQJ7dE
2011-09-29 18:52:33 -------- dc----w- C:\Users\Joey\AppData\Roaming\zivD3onF4m5W7E8
2011-09-29 18:52:20 -------- dc----w- C:\Users\Joey\AppData\Roaming\uelIBtzPNc1v2b4
2011-09-29 18:52:04 -------- dc----w- C:\Users\Joey\AppData\Roaming\T4amH5sWJdLgZhX
2011-09-29 18:51:50 -------- dc----w- C:\Users\Joey\AppData\Roaming\vUVelOBtz0
2011-09-29 18:51:38 -------- dc----w- C:\Users\Joey\AppData\Roaming\psWK7fEL9TqYwIr
2011-09-29 18:51:28 -------- dc----w- C:\Users\Joey\AppData\Roaming\HqjYCekIVzN
2011-09-29 18:51:18 -------- dc----w- C:\Users\Joey\AppData\Roaming\k5aQH6dWKfL
2011-09-29 18:51:08 -------- dc----w- C:\Users\Joey\AppData\Roaming\X0uvS2ibFpGaHdK
2011-09-29 18:50:57 -------- dc----w- C:\Users\Joey\AppData\Roaming\WEK8fRZ9hXjClBz
2011-09-29 18:50:47 -------- dc----w- C:\Users\Joey\AppData\Roaming\p7dEK8gRZhXj
2011-09-29 18:50:37 -------- dc----w- C:\Users\Joey\AppData\Roaming\phYXwjUVeItPyAu
2011-09-29 18:50:27 -------- dc----w- C:\Users\Joey\AppData\Roaming\BUVelOBtz0c1v2n
2011-09-29 18:50:17 -------- dc----w- C:\Users\Joey\AppData\Roaming\uD3onF4am
2011-09-29 18:50:07 -------- dc----w- C:\Users\Joey\AppData\Roaming\QmH5sWJ7dLg
2011-09-29 18:49:57 -------- dc----w- C:\Users\Joey\AppData\Roaming\EnG4amH6sJfLgZh
2011-09-29 18:49:47 -------- dc----w- C:\Users\Joey\AppData\Roaming\xgTZqjYCwIrOtP
2011-09-29 18:49:36 -------- dc----w- C:\Users\Joey\AppData\Roaming\eL9gTZqjYwI
2011-09-29 18:49:26 -------- dc----w- C:\Users\Joey\AppData\Roaming\PfRL9gTXqYeIrOt
2011-09-29 18:49:16 -------- dc----w- C:\Users\Joey\AppData\Roaming\c6dWK8fRLhXjCkB
2011-09-29 18:49:05 -------- dc----w- C:\Users\Joey\AppData\Roaming\sJ6dEK8fR9TwUeI
2011-09-29 18:48:53 -------- dc----w- C:\Users\Joey\AppData\Roaming\dL9gTZqjYwIrOtP
2011-09-29 18:48:42 -------- dc----w- C:\Users\Joey\AppData\Roaming\LqjUCekIBzNx0v2
2011-09-29 18:48:32 -------- dc----w- C:\Users\Joey\AppData\Roaming\RrzONyxA0v2
2011-09-29 18:48:22 -------- dc----w- C:\Users\Joey\AppData\Roaming\uF3pmG5aQ6W8R9T
2011-09-29 18:48:12 -------- dc----w- C:\Users\Joey\AppData\Roaming\u6dEK8fRZhXjClB
2011-09-29 18:48:02 -------- dc----w- C:\Users\Joey\AppData\Roaming\ES2obF3pm5Q6W8R
2011-09-29 18:47:52 -------- dc----w- C:\Users\Joey\AppData\Roaming\R5sQJ6dEKfZ
2011-09-29 18:47:42 -------- dc----w- C:\Users\Joey\AppData\Roaming\isQJ7dEK8R
2011-09-29 18:47:32 -------- dc----w- C:\Users\Joey\AppData\Roaming\gjUVelIBtPyAuDo
2011-09-29 18:47:22 -------- dc----w- C:\Users\Joey\AppData\Roaming\S7dEK8gRZhXjVlB
2011-09-29 18:46:58 -------- dc----w- C:\Users\Joey\AppData\Roaming\uD2onF4pm5Q7E8R
2011-09-29 18:46:48 -------- dc----w- C:\Users\Joey\AppData\Roaming\bnF4pmH5sJd
2011-09-29 18:46:38 -------- dc----w- C:\Users\Joey\AppData\Roaming\TRZqhYXwkVlBz0c
2011-09-29 18:46:29 -------- dc----w- C:\Users\Joey\AppData\Roaming\p7dEK8gRZ
2011-09-29 18:46:19 -------- dc----w- C:\Users\Joey\AppData\Roaming\JF4pmH5sQ7E8
2011-09-29 18:46:09 -------- dc----w- C:\Users\Joey\AppData\Roaming\y1ivD2onFpHsJdK
2011-09-29 18:46:00 -------- dc----w- C:\Users\Joey\AppData\Roaming\ielIBtzPNc1v2b4
2011-09-29 18:45:50 -------- dc----w- C:\Users\Joey\AppData\Roaming\XF4pmH5sQ7E8R
2011-09-29 18:45:40 -------- dc----w- C:\Users\Joey\AppData\Roaming\CpmH5sQJ7E8R9Yw
2011-09-29 18:45:31 -------- dc----w- C:\Users\Joey\AppData\Roaming\GdEK8fRZ9TwUeIr
2011-09-29 18:45:21 -------- dc----w- C:\Users\Joey\AppData\Roaming\lG5sQJ6dE8R9
2011-09-29 18:45:12 -------- dc----w- C:\Users\Joey\AppData\Roaming\L4pmG5sQJdKfZhX
2011-09-29 18:45:02 -------- dc----w- C:\Users\Joey\AppData\Roaming\LdEK8gRZ9YwUeIt
2011-09-29 18:44:52 -------- dc----w- C:\Users\Joey\AppData\Roaming\vG5sQJ6dE8R9T
2011-09-29 18:44:42 -------- dc----w- C:\Users\Joey\AppData\Roaming\nsQJ6dEK8
2011-09-29 18:44:33 -------- dc----w- C:\Users\Joey\AppData\Roaming\auvD2obF4m
2011-09-29 18:44:23 -------- dc----w- C:\Users\Joey\AppData\Roaming\nzPNyxA1uSoFpGa
2011-09-29 18:44:14 -------- dc----w- C:\Users\Joey\AppData\Roaming\EbF3pmG5aJdKfLh
2011-09-29 18:44:05 -------- dc----w- C:\Users\Joey\AppData\Roaming\YCekIBrzOy
2011-09-29 18:43:55 -------- dc----w- C:\Users\Joey\AppData\Roaming\yqjYCekIVzNx0c2
2011-09-29 18:43:46 -------- dc----w- C:\Users\Joey\AppData\Roaming\ekIVrzONtAuSiD
2011-09-29 18:43:36 -------- dc----w- C:\Users\Joey\AppData\Roaming\TtxA0ucS2b3n
2011-09-29 18:43:27 -------- dc----w- C:\Users\Joey\AppData\Roaming\usWJ7fEL8TqYwUr
2011-09-29 18:43:18 -------- dc----w- C:\Users\Joey\AppData\Roaming\LibD3onG4m6W7E8
2011-09-29 18:43:07 -------- dc----w- C:\Users\Joey\AppData\Roaming\yWK7fEL9gZj
2011-09-29 18:42:58 -------- dc----w- C:\Users\Joey\AppData\Roaming\BTZqjYCwkV
2011-09-29 18:42:48 -------- dc----w- C:\Users\Joey\AppData\Roaming\GG4amH6sW7
2011-09-29 18:42:39 -------- dc----w- C:\Users\Joey\AppData\Roaming\S6sWJ7fELgZhCkV
2011-09-29 18:42:30 -------- dc----w- C:\Users\Joey\AppData\Roaming\frlOBtxP0c1v3
2011-09-29 18:42:20 -------- dc----w- C:\Users\Joey\AppData\Roaming\hgRZqhYXwUeOtPy
2011-09-29 18:42:09 -------- dc----w- C:\Users\Joey\AppData\Roaming\X0ucS1ibDoGaH
2011-09-29 18:41:45 -------- dc----w- C:\Users\Joey\AppData\Roaming\G4aQH6sWKfLgZ
2011-09-29 18:41:35 -------- dc----w- C:\Users\Joey\AppData\Roaming\BfEL9gTZqYwIr
2011-09-29 18:41:25 -------- dc----w- C:\Users\Joey\AppData\Roaming\wtxA0ucS2b3n4Q6
2011-09-29 18:41:16 -------- dc----w- C:\Users\Joey\AppData\Roaming\kamH6sWJ7E8
2011-09-29 18:41:07 -------- dc----w- C:\Users\Joey\AppData\Roaming\HL8gTZqhYwU
2011-09-29 18:40:57 -------- dc----w- C:\Users\Joey\AppData\Roaming\x1ibD3onGaHsJfL
2011-09-29 18:40:47 -------- dc----w- C:\Users\Joey\AppData\Roaming\YYCwkUVrlBx0c1v
2011-09-29 18:40:37 -------- dc----w- C:\Users\Joey\AppData\Roaming\dxP0ucS1iDoG
2011-09-29 18:40:28 -------- dc----w- C:\Users\Joey\AppData\Roaming\IxP0ucS1iDoGaHs
2011-09-29 18:40:18 -------- dc----w- C:\Users\Joey\AppData\Roaming\VfEL8gTZqYwUrOt
2011-09-29 18:40:09 -------- dc----w- C:\Users\Joey\AppData\Roaming\EOBtxP0yc1v3n4m
2011-09-29 18:39:59 -------- dc----w- C:\Users\Joey\AppData\Roaming\FmH5sWJ7dLgZ
2011-09-29 18:39:50 -------- dc----w- C:\Users\Joey\AppData\Roaming\l3onF4amHsJdLgZ
2011-09-29 18:39:40 -------- dc----w- C:\Users\Joey\AppData\Roaming\VwkUVelOBz0c1v2
2011-09-29 18:39:30 -------- dc----w- C:\Users\Joey\AppData\Roaming\uVrlOBtxPySiDoF
2011-09-29 18:39:20 -------- dc----w- C:\Users\Joey\AppData\Roaming\KrlOBtxP0c
2011-09-29 18:39:11 -------- dc----w- C:\Users\Joey\AppData\Roaming\tP0ycA1iv2n4m5Q
2011-09-29 18:39:01 -------- dc----w- C:\Users\Joey\AppData\Roaming\kivD2onF4m5Q7E8
2011-09-29 18:38:52 -------- dc----w- C:\Users\Joey\AppData\Roaming\AQJ7dEK8gZhXjVl
2011-09-29 18:38:43 -------- dc----w- C:\Users\Joey\AppData\Roaming\mWK8fRL9hXjCk
2011-09-29 18:38:34 -------- dc----w- C:\Users\Joey\AppData\Roaming\tibF3pnG5Q
2011-09-29 18:38:25 -------- dc----w- C:\Users\Joey\AppData\Roaming\nWK7fRL9gXjC
2011-09-29 18:38:15 -------- dc----w- C:\Users\Joey\AppData\Roaming\yjYCekIVrOtAuSi
2011-09-29 18:38:06 -------- dc----w- C:\Users\Joey\AppData\Roaming\IrzONtxA0c2b3n4
2011-09-29 18:37:56 -------- dc----w- C:\Users\Joey\AppData\Roaming\XA0ucS2ib3n4Q
2011-09-29 18:37:47 -------- dc----w- C:\Users\Joey\AppData\Roaming\bbD3pnG4aHs
2011-09-29 18:37:37 -------- dc----w- C:\Users\Joey\AppData\Roaming\kucS1ibD3n4m6W7
2011-09-29 18:37:28 -------- dc----w- C:\Users\Joey\AppData\Roaming\tgTZqhYCwU
2011-09-29 18:37:18 -------- dc----w- C:\Users\Joey\AppData\Roaming\LrlOBtxP0c1
2011-09-29 18:37:10 -------- dc----w- C:\Users\Joey\AppData\Roaming\mjUVelIBtPyAu
2011-09-29 18:37:01 -------- dc----w- C:\Users\Joey\AppData\Roaming\YfRZ9hTXwUeIr
2011-09-29 18:36:51 -------- dc----w- C:\Users\Joey\AppData\Roaming\wfRZ9hTXwUeIrPy
2011-09-29 18:36:42 -------- dc----w- C:\Users\Joey\AppData\Roaming\kzONyxA0uSi
2011-09-29 18:36:33 -------- dc----w- C:\Users\Joey\AppData\Roaming\SF3pnG5aQ6W7R
2011-09-29 18:36:23 -------- dc----w- C:\Users\Joey\AppData\Roaming\jzONtxA0uS
2011-09-29 18:36:14 -------- dc----w- C:\Users\Joey\AppData\Roaming\sK7fRL9gTqYeIrO
2011-09-29 18:36:04 -------- dc----w- C:\Users\Joey\AppData\Roaming\xH6sWK7fE9TqYw
2011-09-29 18:35:55 -------- dc----w- C:\Users\Joey\AppData\Roaming\drlONtxP0c1b3n4
2011-09-29 18:35:46 -------- dc----w- C:\Users\Joey\AppData\Roaming\yucS1ibD3n4m6W7
2011-09-29 18:35:36 -------- dc----w- C:\Users\Joey\AppData\Roaming\wvD3onF4aHsJdLg
2011-09-29 18:35:27 -------- dc----w- C:\Users\Joey\AppData\Roaming\DD3onF4am5W
2011-09-29 18:35:18 -------- dc----w- C:\Users\Joey\AppData\Roaming\welOBtzP0c1v2n4
2011-09-29 18:35:09 -------- dc----w- C:\Users\Joey\AppData\Roaming\OjUVelIBtP
2011-09-29 18:35:00 -------- dc----w- C:\Users\Joey\AppData\Roaming\QF3pmG5aQ6W8R9T
2011-09-29 18:34:51 -------- dc----w- C:\Users\Joey\AppData\Roaming\KS2ibF3pn5Q6W7R
2011-09-29 18:34:41 -------- dc----w- C:\Users\Joey\AppData\Roaming\UQH6dWK7fLgXjCk
2011-09-29 18:34:32 -------- dc----w- C:\Users\Joey\AppData\Roaming\gibD3pnG4Q6W7E9
2011-09-29 18:34:23 -------- dc----w- C:\Users\Joey\AppData\Roaming\nlONtxP0uSiDoGa
2011-09-29 18:34:14 -------- dc----w- C:\Users\Joey\AppData\Roaming\K7fEL8gTZhCkVlB
2011-09-29 18:34:05 -------- dc----w- C:\Users\Joey\AppData\Roaming\qVelIBtzPyAuDoF
2011-09-29 18:33:56 -------- dc----w- C:\Users\Joey\AppData\Roaming\nIBrzPNyx1v2b3m
2011-09-29 18:33:47 -------- dc----w- C:\Users\Joey\AppData\Roaming\UbF3pnG5aHdKfLg
2011-09-29 18:33:39 -------- dc----w- C:\Users\Joey\AppData\Roaming\rA0ucS2ib3n4Q6W
2011-09-29 18:33:29 -------- dc----w- C:\Users\Joey\AppData\Roaming\fgTZqjYCwIrOtPu
2011-09-29 18:33:20 -------- dc----w- C:\Users\Joey\AppData\Roaming\vZqhYCwkUr
2011-09-29 18:33:11 -------- dc----w- C:\Users\Joey\AppData\Roaming\RvD3onF4aHsJdLg
2011-09-29 18:33:02 -------- dc----w- C:\Users\Joey\AppData\Roaming\phTXwjUCeIrPyAu
2011-09-29 18:32:54 -------- dc----w- C:\Users\Joey\AppData\Roaming\czONyxA0uSiFpGa
2011-09-29 18:32:45 -------- dc----w- C:\Users\Joey\AppData\Roaming\qsWK7fEL9TqYwIr
2011-09-29 18:32:36 -------- dc----w- C:\Users\Joey\AppData\Roaming\ZWJ7fEL8gZhC
2011-09-29 18:32:28 -------- dc----w- C:\Users\Joey\AppData\Roaming\LBtzPNycAuDoFp
2011-09-29 18:32:19 -------- dc----w- C:\Users\Joey\AppData\Roaming\DjUCekIBrOy
2011-09-29 18:32:11 -------- dc----w- C:\Users\Joey\AppData\Roaming\YrlONtxP0c1b3n4
2011-09-29 18:32:03 -------- dc----w- C:\Users\Joey\AppData\Roaming\QsWJ7dEL8RqYwUe
2011-09-29 18:31:55 -------- dc----w- C:\Users\Joey\AppData\Roaming\f1uvS2obFpGaJ
2011-09-29 18:31:46 -------- dc----w- C:\Users\Joey\AppData\Roaming\QVrzONtxAuSiDpG
2011-09-29 18:31:37 -------- dc----w- C:\Users\Joey\AppData\Roaming\nkIVrlONtPuS
2011-09-29 18:31:29 -------- dc----w- C:\Users\Joey\AppData\Roaming\hbF4pmG5s
2011-09-29 18:31:21 -------- dc----w- C:\Users\Joey\AppData\Roaming\VpnG5aQH6W7R
2011-09-29 18:31:13 -------- dc----w- C:\Users\Joey\AppData\Roaming\sucS1ibD3n4m6W7
2011-09-29 18:31:04 -------- dc----w- C:\Users\Joey\AppData\Roaming\WnF4amH5sJdLgZh
2011-09-29 18:30:56 -------- dc----w- C:\Users\Joey\AppData\Roaming\XhTXwjUCeIrPyAu
2011-09-29 18:30:47 -------- dc----w- C:\Users\Joey\AppData\Roaming\o9hTXqjUCkBzNx0
2011-09-29 18:30:38 -------- dc----w- C:\Users\Joey\AppData\Roaming\VqjYCekIVzNx0c2
2011-09-29 18:30:30 -------- dc----w- C:\Users\Joey\AppData\Roaming\y0ucS1ibDoGaHs
2011-09-29 18:30:21 -------- dc----w- C:\Users\Joey\AppData\Roaming\QPNycA1uv2b4m5
2011-09-29 18:30:13 -------- dc----w- C:\Users\Joey\AppData\Roaming\oqjUCekIBzNx0v2
2011-09-29 18:30:05 -------- dc----w- C:\Users\Joey\AppData\Roaming\ywkIVrlONx0
2011-09-29 18:29:57 -------- dc----w- C:\Users\Joey\AppData\Roaming\vUVelOBtz0c1v
2011-09-29 18:29:49 -------- dc----w- C:\Users\Joey\AppData\Roaming\xfRL9hTXqUeIrOy
2011-09-29 18:29:40 -------- dc----w- C:\Users\Joey\AppData\Roaming\DnG4aQH6sKfLgZj
2011-09-29 18:29:32 -------- dc----w- C:\Users\Joey\AppData\Roaming\QZqhYCwkUrOtPyS
2011-09-29 18:29:23 -------- dc----w- C:\Users\Joey\AppData\Roaming\JPPNNyyxA1uS
2011-09-29 18:29:15 -------- dc----w- C:\Users\Joey\AppData\Roaming\qkIIVVrzO
2011-09-29 18:29:07 -------- dc----w- C:\Users\Joey\AppData\Roaming\XmmmH66sWJ7EL
2011-09-29 18:28:58 -------- dc----w- C:\Users\Joey\AppData\Roaming\CEEEL88gRZqhXwU
2011-09-29 18:28:49 -------- dc----w- C:\Users\Joey\AppData\Roaming\GKKK8ffRZ9hXw
2011-09-29 18:28:41 -------- dc----w- C:\Users\Joey\AppData\Roaming\VIBBrrzONyxA
2011-09-29 18:28:32 -------- dc----w- C:\Users\Joey\AppData\Roaming\UGGG4aaQH6sK7E
2011-09-29 18:28:23 -------- dc----w- C:\Users\Joey\AppData\Roaming\o8ggTTZqhYC
2011-09-29 18:28:15 -------- dc----w- C:\Users\Joey\AppData\Roaming\uEEEK88gRZ9YXjU
2011-09-29 18:28:06 -------- dc----w- C:\Users\Joey\AppData\Roaming\PEEEK88fRZ9hXwU
2011-09-29 18:27:57 -------- dc----w- C:\Users\Joey\AppData\Roaming\gxxxA00uvS2bFpn
2011-09-29 18:27:49 -------- dc----w- C:\Users\Joey\AppData\Roaming\nrrllOBttx0yc1v
2011-09-29 18:27:40 -------- dc----w- C:\Users\Joey\AppData\Roaming\mXXXwkkUVelOtz0
2011-09-29 18:27:32 -------- dc----w- C:\Users\Joey\AppData\Roaming\RvvvD22obF4pG5Q
2011-09-29 18:27:23 -------- dc----w- C:\Users\Joey\AppData\Roaming\nllIIBrrzPNxAuv
2011-09-29 18:27:14 -------- dc----w- C:\Users\Joey\AppData\Roaming\LNNNtxxA0uc2iD
2011-09-29 18:27:05 -------- dc----w- C:\Users\Joey\AppData\Roaming\dHH66sWJJfELgTq
2011-09-29 18:26:57 -------- dc----w- C:\Users\Joey\AppData\Roaming\CVVVellOBtzPyc1
2011-09-29 18:26:48 -------- dc----w- C:\Users\Joey\AppData\Roaming\lddWWK8ff
2011-09-29 18:26:40 -------- dc----w- C:\Users\Joey\AppData\Roaming\cVVrrzOON
2011-09-29 18:26:31 -------- dc----w- C:\Users\Joey\AppData\Roaming\xTTTZqqhYCwkVlO
2011-09-29 18:26:23 -------- dc----w- C:\Users\Joey\AppData\Roaming\eLLL8ggRZqhYwkV
2011-09-29 18:26:14 -------- dc----w- C:\Users\Joey\AppData\Roaming\ZlllIBBrzPNyA1v
2011-09-29 18:26:05 -------- dc----w- C:\Users\Joey\AppData\Roaming\p55aaQHH6
2011-09-29 18:25:57 -------- dc----w- C:\Users\Joey\AppData\Roaming\c999gTTZqjYCkIr
2011-09-29 18:25:48 -------- dc----w- C:\Users\Joey\AppData\Roaming\jivvDD3onF
2011-09-29 18:25:40 -------- dc----w- C:\Users\Joey\AppData\Roaming\UmmGG5ssQJ6EKfR
2011-09-29 18:25:31 -------- dc----w- C:\Users\Joey\AppData\Roaming\UWWWK88fRL9hXq
2011-09-29 18:25:22 -------- dc----w- C:\Users\Joey\AppData\Roaming\jOONNtxA0ucS2b3
2011-09-29 18:25:14 -------- dc----w- C:\Users\Joey\AppData\Roaming\kSS11ivDDon
2011-09-29 18:25:05 -------- dc----w- C:\Users\Joey\AppData\Roaming\uDDD2oonF4pH5QJ
2011-09-29 18:24:56 -------- dc----w- C:\Users\Joey\AppData\Roaming\TbbFF4pmm
2011-09-29 18:24:48 -------- dc----w- C:\Users\Joey\AppData\Roaming\HCCeekIBBrONyA
2011-09-29 18:24:39 -------- dc----w- C:\Users\Joey\AppData\Roaming\XhhYYCwwkUrlO
2011-09-29 18:24:31 -------- dc----w- C:\Users\Joey\AppData\Roaming\lHHH5ssQJ7dE8gZ
2011-09-29 18:24:22 -------- dc----w- C:\Users\Joey\AppData\Roaming\wPNNyycA1uvDob4
2011-09-29 18:24:13 -------- dc----w- C:\Users\Joey\AppData\Roaming\WfffRLL9hTXjUek
2011-09-29 18:24:05 -------- dc----w- C:\Users\Joey\AppData\Roaming\PrrrlOONtxP0cSi
2011-09-29 18:23:56 -------- dc----w- C:\Users\Joey\AppData\Roaming\ioonnF4amH5sW7E
2011-09-29 18:23:48 -------- dc----w- C:\Users\Joey\AppData\Roaming\ejjUUVeelIBzPyc
2011-09-29 18:23:39 -------- dc----w- C:\Users\Joey\AppData\Roaming\ONyyxxA0uvS2iFp
2011-09-29 18:23:30 -------- dc----w- C:\Users\Joey\AppData\Roaming\X3pppnG4aQH6WKf
2011-09-29 18:23:22 -------- dc----w- C:\Users\Joey\AppData\Roaming\OgTTZZqhYCwkVrO
2011-09-29 18:23:13 -------- dc----w- C:\Users\Joey\AppData\Roaming\yF444pmH5sQJ7E8
2011-09-29 18:23:05 -------- dc----w- C:\Users\Joey\AppData\Roaming\kKKK8ffRL9hXqUC
2011-09-29 18:22:56 -------- dc----w- C:\Users\Joey\AppData\Roaming\v99gTTXqjYCeI
.
==================== Find3M ====================
.
2011-10-18 18:55:25 414368 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
2011-10-12 03:49:17 1693184 ----a-w- C:\Windows\SysWow64\PbD3onG4aHsJfLg.exe
2011-10-01 03:25:37 1638912 ----a-w- C:\Windows\System32\mshtml.tlb
2011-10-01 02:42:56 1638912 ----a-w- C:\Windows\SysWow64\mshtml.tlb
2011-09-29 22:37:59 320000 ----a-w- C:\Windows\SysWow64\z7TeO0D6ZV.exe
2011-09-29 19:58:58 64000 ----a-w- C:\Windows\SysWow64\fHWRgqerAb.exe
2011-09-06 03:03:17 3138048 ----a-w- C:\Windows\System32\win32k.sys
2011-09-01 00:00:50 25416 ----a-w- C:\Windows\System32\drivers\mbam.sys
2011-08-31 06:05:32 96104 ----a-w- C:\Windows\System32\dns-sd.exe
2011-08-31 06:05:32 85864 ----a-w- C:\Windows\System32\dnssd.dll
2011-08-31 06:05:32 61288 ----a-w- C:\Windows\System32\jdns_sd.dll
2011-08-31 06:05:32 212840 ----a-w- C:\Windows\System32\dnssdX.dll
2011-08-31 06:05:04 83816 ----a-w- C:\Windows\SysWow64\dns-sd.exe
2011-08-31 06:05:04 73064 ----a-w- C:\Windows\SysWow64\dnssd.dll
2011-08-31 06:05:04 50536 ----a-w- C:\Windows\SysWow64\jdns_sd.dll
2011-08-31 06:05:04 178536 ----a-w- C:\Windows\SysWow64\dnssdX.dll
2011-08-30 07:54:28 117520 ----a-w- C:\Windows\System32\drivers\MijXfilt.sys
2011-08-27 05:37:49 861696 ----a-w- C:\Windows\System32\oleaut32.dll
2011-08-27 05:37:48 331776 ----a-w- C:\Windows\System32\oleacc.dll
2011-08-27 04:26:27 571904 ----a-w- C:\Windows\SysWow64\oleaut32.dll
2011-08-27 04:26:27 233472 ----a-w- C:\Windows\SysWow64\oleacc.dll
2011-08-20 05:37:58 1188864 ----a-w- C:\Windows\System32\wininet.dll
2011-08-20 04:31:05 981504 ----a-w- C:\Windows\SysWow64\wininet.dll
2011-08-17 05:26:46 613888 ----a-w- C:\Windows\System32\psisdecd.dll
2011-08-17 05:25:08 108032 ----a-w- C:\Windows\System32\psisrndr.ax
2011-08-17 04:24:12 465408 ----a-w- C:\Windows\SysWow64\psisdecd.dll
2011-08-17 04:19:27 75776 ----a-w- C:\Windows\SysWow64\psisrndr.ax
.

Attached Files


Edited by TheBatosai, 21 October 2011 - 06:38 PM.


BC AdBot (Login to Remove)

 


#2 TheBatosai

TheBatosai
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:08:29 PM

Posted 21 October 2011 - 08:22 PM

delivery.jemacpv.com is the usually address it redirects me to, but it is not the only one.

#3 TheBatosai

TheBatosai
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:08:29 PM

Posted 24 October 2011 - 11:13 PM

So Ive found another problem, apparently I have a process running called PING.exe, and when i pull up my running processes its using up about 99% of my CPU and causing my computer to overheat, Ive disabled but have been unable to find a way to fully get rid of it, i block it with my firewall, but then it causes other problems since im using Comodo firewall i cant see to block just the file and i end up having to block all excutables. any help with this would be great.

#4 gringo_pr

gringo_pr

    Bleepin Gringo


  • Malware Response Team
  • 136,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto rico
  • Local time:11:29 PM

Posted 25 October 2011 - 01:16 AM

Hello and Welcome to the forums!

My name is Gringo and I'll be glad to help you with your computer problems.

Somethings to remember while we are working together.

  • Do not run any other tool untill instructed to do so!
  • Please Do not Attach logs or put in code boxes.
  • Tell me about any problems that have occurred during the fix.
  • Tell me of any other symptoms you may be having as these can help also.
  • Do not run anything while running a fix.

We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.

Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.

In order for me to see the status of the infection I will need a new set of logs to start with.

Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.

DeFogger:

  • Please download DeFogger to your desktop.

    Double click DeFogger to run the tool.
  • The application window will appear
  • Click the Disable button to disable your CD Emulation drivers
  • Click Yes to continue
  • A 'Finished!' message will appear
  • Click OK
  • DeFogger may ask you to reboot the machine, if it does - click OK
Do not re-enable these drivers until otherwise instructed.

Download DDS:

  • Please download DDS by sUBs from one of the links below and save it to your desktop:

    Posted Image
    Download DDS and save it to your desktop

    Link1
    Link2
    Link3

    Please disable any anti-malware program that will block scripts from running before running DDS.

    • Double-Click on dds.scr and a command window will appear. This is normal.
    • Shortly after two logs will appear:
    • DDS.txt
    • Attach.txt
  • A window will open instructing you save & post the logs
  • Save the logs to a convenient place such as your desktop
  • Copy the contents of both logs & post in your next reply

information and logs:

  • In your next post I need the following

  • .logs from DDS
  • let me know of any problems you may have had

Gringo

I Close My Topics If You Have Not Replied In 5 Days If You Will Be Longer Please Let Me Know

If I Have Not Replied To One Of My Topics In 48 Hrs Please Bump The Topic



My help is free, however, if you wish to make a small donation to show your appreciation or to help me continue the fight against Malware, then click here -->btn_donate_SM.gif<-- Don't worry every little bit helps.

Proud Graduate Of Malware Removal University

#5 TheBatosai

TheBatosai
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:08:29 PM

Posted 25 October 2011 - 11:27 PM

Thank you Gringo, So i am still having trouble, with my computer with my random internet redirects as well as a google redirect, i previously ran Tdsskiller and have MBAM installed as well and have ran all scans and they seem to be coming back with nothing. and the problems persists, i have also noted poor pc performance when I seem to have about 89 processes on average with one inparticular being the PING.exe process that seems to go haywire on me and use about 100% of my CPU i end the process usually which resolves it for a short time, i ended up having to block it through my firewall, but the only option to due so blocked all .exe programs, so currently I downloaded and am using PROLASSO to monitor and control this cpu output of my haywire processes. i would like to eventually stop using this, so any help would be great, here are the logs as requested.


DDS (Ver_2011-08-26.01) - NTFSAMD64
Internet Explorer: 8.0.7601.17514 BrowserJavaVersion: 10.1.0
Run by Joey at 21:14:09 on 2011-10-25
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.3950.1960 [GMT -7:00]
.
AV: Norton Internet Security *Enabled/Updated* {88C95A36-8C3B-2F2C-1B8B-30FCCFDC4855}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Norton Internet Security *Enabled/Updated* {33A8BBD2-AA01-20A2-213B-0B8EB45B02E8}
FW: Norton Internet Security *Enabled* {B0F2DB13-C654-2E74-30D4-99C9310F0F2E}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Program Files\COMODO\COMODO GeekBuddy\CLPSLS.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\atieclxx.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe
C:\Program Files (x86)\PS3 Media Server\win32\service\wrapper.exe
C:\Windows\system32\conhost.exe
C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Windows\SysWOW64\java.exe
C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Windows\system32\WUDFHost.exe
C:\Windows\system32\taskhost.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Program Files\Sony\VAIO Care\VAIOCareService.exe
C:\Windows\Explorer.EXE
C:\Program Files\Sony\VAIO Power Management\SPMgr.exe
C:\Program Files\COMODO\COMODO Internet Security\cfp.exe
C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SHTtray.exe
C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe
C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files\COMODO\COMODO GeekBuddy\CLPS.exe
C:\Program Files\Sony\VAIO Update 5\VAIOUpdt.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\Sony\VAIO Power Management\SPMService.exe
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Program Files\Sony\VAIO Care\VCsystray.exe
C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe
C:\Program Files (x86)\Sony\SmartWi Connection Utility\CCP.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Program Files (x86)\Sony\SmartWi Connection Utility\ThirdPartyAppMgr.exe
C:\Program Files (x86)\Sony\SmartWi Connection Utility\PowerManager.exe
C:\Program Files (x86)\Sony\SmartWi Connection Utility\SmartWi.exe
C:\Windows\system32\svchost.exe -k SDRSVC
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Eula.exe
C:\Program Files (x86)\Java\jre7\bin\javaw.exe
C:\Program Files (x86)\iTunes\iTunes.exe
C:\Program Files (x86)\Common Files\microsoft shared\virtualization handler\cvh.exe
C:\Program Files (x86)\Common Files\microsoft shared\virtualization handler\OfficeVirt.exe
C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
C:\Windows\SysWOW64\ping.exe
C:\Program Files\Process Lasso\processlasso.exe
C:\Program Files\Process Lasso\ProcessGovernor.exe
C:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Windows\sysWOW64\wbem\wmiprvse.exe
C:\Windows\system32\wbem\WmiApSrv.exe
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\conhost.exe
C:\Windows\SysWOW64\cscript.exe
C:\Windows\system32\wbem\wmiprvse.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://mormon.org/me/1KYD/
mStart Page = hxxp://www.google.com/ig/redirectdomain?brand=SNNT&bmod=SNNT
uInternet Settings,ProxyOverride = *.local
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO: Skype Browser Helper: {ae805869-2e5c-4ed4-8f7b-f1f7851a4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
TB: {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
TB: {472734EA-242A-422B-ADF8-83D1E48CC825} - No File
TB: {0123B506-0AD9-43AA-B0CF-916C122AD4C5} - No File
mRun: [TkBellExe] "C:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe" -osboot
mRun: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
mRun: [SmartWiHelper] "C:\Program Files (x86)\Sony\SmartWi Connection Utility\SmartWiHelper.exe" /WindowsStartup
mRun: [SHTtray.exe] C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SHTtray.exe
mRun: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
mRun: [ISBMgr.exe] "C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe"
mRun: [IAStorIcon] C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe
mRun: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
mRun: [COMODO] C:\Program Files\COMODO\COMODO GeekBuddy\CLPSLA.exe
mRun: [CPA] C:\Program Files\COMODO\COMODO GeekBuddy\VALA.exe
mRun: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
mPolicies-system: ConsentPromptBehaviorAdmin = 0 (0x0)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableLUA = 0 (0x0)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
mPolicies-system: PromptOnSecureDesktop = 0 (0x0)
IE: Google Sidewiki... - C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_D183CA64F05FDD98.dll/cmsidewiki.html
IE: Send image to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Send page to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
IE: {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
IE: {E0B8C461-F8FB-49b4-8373-FE32E92528A6} - {BC0E0A5D-AB5A-4fa4-A5FA-280E1D58EEEE} - C:\Program Files (x86)\Evernote\Evernote3.5\enbar.dll
LSP: mswsock.dll
Trusted Zone: clonewarsadventures.com
Trusted Zone: freerealms.com
Trusted Zone: soe.com
Trusted Zone: sony.com
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_01-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab
DPF: {CAFEEFAC-0017-0000-0001-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_01-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_01-windows-i586.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
TCP: DhcpNameServer = 209.18.47.61 209.18.47.62
TCP: Interfaces\{4AB0AA7B-FB97-447D-A360-D75C081357C9} : DhcpNameServer = 192.168.42.129
TCP: Interfaces\{597649FD-27A4-4D35-AFDB-8328C72AAAD8} : NameServer = 8.26.56.26,156.154.70.22
TCP: Interfaces\{F1AB48D3-620A-412A-B77D-05020B395317} : NameServer = 8.26.56.26,156.154.70.22
TCP: Interfaces\{F1AB48D3-620A-412A-B77D-05020B395317} : DhcpNameServer = 209.18.47.61 209.18.47.62
TCP: Interfaces\{F1AB48D3-620A-412A-B77D-05020B395317}\642756567596669623 : DhcpNameServer = 10.5.50.1 68.94.156.1 68.94.157.1
TCP: Interfaces\{F1AB48D3-620A-412A-B77D-05020B395317}\8445340205F627471626C6560284F6473707F647 : DhcpNameServer = 192.168.1.1
TCP: Interfaces\{F1AB48D3-620A-412A-B77D-05020B395317}\C696E6B6379737 : NameServer = 8.26.56.26,156.154.70.22
TCP: Interfaces\{F1AB48D3-620A-412A-B77D-05020B395317}\C696E6B6379737 : DhcpNameServer = 209.18.47.61 209.18.47.62
TCP: Interfaces\{F1AB48D3-620A-412A-B77D-05020B395317}\E4544574541425 : DhcpNameServer = 10.0.0.1
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
Notify: VESWinlogon - VESWinlogon.dll
AppInit_DLLs: C:\Windows\SysWOW64\guard32.dll
SubSystems: Windows = basesrv,1 winsrv:UserServerDllInitialization,3 consrv:ConServerDllInitialization,2 sxssrv,4
BHO-X64: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO-X64: AcroIEHelperStub - No File
BHO-X64: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO-X64: Skype Browser Helper: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
BHO-X64: SkypeIEPluginBHO - No File
BHO-X64: Java™ Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
TB-X64: {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
TB-X64: {472734EA-242A-422B-ADF8-83D1E48CC825} - No File
TB-X64: {0123B506-0AD9-43AA-B0CF-916C122AD4C5} - No File
mRun-x64: [TkBellExe] "C:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe" -osboot
mRun-x64: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
mRun-x64: [SmartWiHelper] "C:\Program Files (x86)\Sony\SmartWi Connection Utility\SmartWiHelper.exe" /WindowsStartup
mRun-x64: [SHTtray.exe] C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SHTtray.exe
mRun-x64: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
mRun-x64: [ISBMgr.exe] "C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe"
mRun-x64: [IAStorIcon] C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe
mRun-x64: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
mRun-x64: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
mRun-x64: [COMODO] C:\Program Files\COMODO\COMODO GeekBuddy\CLPSLA.exe
mRun-x64: [CPA] C:\Program Files\COMODO\COMODO GeekBuddy\VALA.exe
mRun-x64: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
IE-X64: {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
AppInit_DLLs-X64: C:\Windows\SysWOW64\guard32.dll
.
================= FIREFOX ===================
.
FF - ProfilePath - C:\Users\Joey\AppData\Roaming\Mozilla\Firefox\Profiles\a35mx5po.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://lds.org/
FF - prefs.js: keyword.URL - hxxp://www.bing.com/search?pc=ZUGO&form=ZGAADF&q=
FF - prefs.js: network.proxy.http - 127.0.0.1
FF - prefs.js: network.proxy.http_port - 58485
FF - prefs.js: network.proxy.type - 0
FF - plugin: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL
FF - plugin: C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll
FF - plugin: C:\Program Files (x86)\Java\jre7\bin\new_plugin\npdeployJava1.dll
FF - plugin: C:\Program Files (x86)\Java\jre7\bin\new_plugin\npjp2.dll
FF - plugin: c:\Program Files (x86)\Microsoft Silverlight\4.0.60831.0\npctrlui.dll
FF - plugin: C:\Program Files (x86)\Mozilla Firefox\plugins\npdeployJava1.dll
FF - plugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll
FF - plugin: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
FF - plugin: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll
FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll
.
---- FIREFOX POLICIES ----
FF - user.js: network.cookie.cookieBehavior - 0
FF - user.js: privacy.clearOnShutdown.cookies - false
FF - user.js: security.warn_viewing_mixed - false
FF - user.js: security.warn_viewing_mixed.show_once - false
FF - user.js: security.warn_submit_insecure - false
FF - user.js: security.warn_submit_insecure.show_once - false
.
============= SERVICES / DRIVERS ===============
.
R0 PxHlpa64;PxHlpa64;C:\Windows\system32\Drivers\PxHlpa64.sys --> C:\Windows\system32\Drivers\PxHlpa64.sys [?]
R1 cmdGuard;COMODO Internet Security Sandbox Driver;C:\Windows\system32\DRIVERS\cmdguard.sys --> C:\Windows\system32\DRIVERS\cmdguard.sys [?]
R1 cmdHlp;COMODO Internet Security Helper Driver;C:\Windows\system32\DRIVERS\cmdhlp.sys --> C:\Windows\system32\DRIVERS\cmdhlp.sys [?]
R1 vwififlt;Virtual WiFi Filter Driver;C:\Windows\system32\DRIVERS\vwififlt.sys --> C:\Windows\system32\DRIVERS\vwififlt.sys [?]
R2 AMD External Events Utility;AMD External Events Utility;C:\Windows\system32\atiesrxx.exe --> C:\Windows\system32\atiesrxx.exe [?]
R2 CLPSLS;COMODO livePCsupport Service;C:\Program Files\COMODO\COMODO GeekBuddy\CLPSLS.exe [2011-5-25 161080]
R2 cvhsvc;Client Virtualization Handler;C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE [2010-10-20 821664]
R2 IAStorDataMgrSvc;Intel® Rapid Storage Technology;C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-4-26 13336]
R2 MBAMService;MBAMService;C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2011-5-23 366152]
R2 PassThru Service;Internet Pass-Through Service;C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [2010-9-16 80896]
R2 PMBDeviceInfoProvider;PMBDeviceInfoProvider;C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe [2009-10-24 360224]
R2 PS3 Media Server;PS3 Media Server;C:\Program Files (x86)\PS3 Media Server\win32\service\wrapper.exe [2011-5-17 366872]
R2 rimspci;rimspci;C:\Windows\system32\drivers\rimssne64.sys --> C:\Windows\system32\drivers\rimssne64.sys [?]
R2 risdsnpe;risdsnpe;C:\Windows\system32\drivers\risdsne64.sys --> C:\Windows\system32\drivers\risdsne64.sys [?]
R2 sftlist;Application Virtualization Client;C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2010-9-14 508264]
R3 ArcSoftKsUFilter;ArcSoft Magic-I Visual Effect;C:\Windows\system32\DRIVERS\ArcSoftKsUFilter.sys --> C:\Windows\system32\DRIVERS\ArcSoftKsUFilter.sys [?]
R3 HECIx64;Intel® Management Engine Interface;C:\Windows\system32\drivers\HECIx64.sys --> C:\Windows\system32\drivers\HECIx64.sys [?]
R3 MBAMProtector;MBAMProtector;\??\C:\Windows\system32\drivers\mbam.sys --> C:\Windows\system32\drivers\mbam.sys [?]
R3 osppsvc;Office Software Protection Platform;C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-1-9 4925184]
R3 SFEP;Sony Firmware Extension Parser;C:\Windows\system32\drivers\SFEP.sys --> C:\Windows\system32\drivers\SFEP.sys [?]
R3 Sftfs;Sftfs;C:\Windows\system32\DRIVERS\Sftfslh.sys --> C:\Windows\system32\DRIVERS\Sftfslh.sys [?]
R3 Sftplay;Sftplay;C:\Windows\system32\DRIVERS\Sftplaylh.sys --> C:\Windows\system32\DRIVERS\Sftplaylh.sys [?]
R3 Sftredir;Sftredir;C:\Windows\system32\DRIVERS\Sftredirlh.sys --> C:\Windows\system32\DRIVERS\Sftredirlh.sys [?]
R3 Sftvol;Sftvol;C:\Windows\system32\DRIVERS\Sftvollh.sys --> C:\Windows\system32\DRIVERS\Sftvollh.sys [?]
R3 sftvsa;Application Virtualization Service Agent;C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2010-9-14 219496]
R3 VAIO Power Management;VAIO Power Management;C:\Program Files\Sony\VAIO Power Management\SPMService.exe [2010-5-5 571248]
R3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;C:\Windows\system32\DRIVERS\yk62x64.sys --> C:\Windows\system32\DRIVERS\yk62x64.sys [?]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]
S2 gupdate;Google Update Service (gupdate);C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /svc --> C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [?]
S2 Roxio Upnp Server 10;Roxio Upnp Server 10;C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUpnpService10.exe [2009-8-31 362992]
S3 amdkmdag;amdkmdag;C:\Windows\system32\DRIVERS\atikmdag.sys --> C:\Windows\system32\DRIVERS\atikmdag.sys [?]
S3 amdkmdap;amdkmdap;C:\Windows\system32\DRIVERS\atikmpag.sys --> C:\Windows\system32\DRIVERS\atikmpag.sys [?]
S3 btusbflt;Bluetooth USB Filter;C:\Windows\system32\drivers\btusbflt.sys --> C:\Windows\system32\drivers\btusbflt.sys [?]
S3 btwl2cap;Bluetooth L2CAP Service;C:\Windows\system32\DRIVERS\btwl2cap.sys --> C:\Windows\system32\DRIVERS\btwl2cap.sys [?]
S3 ewusbnet;HUAWEI USB-NDIS miniport;C:\Windows\system32\DRIVERS\ewusbnet.sys --> C:\Windows\system32\DRIVERS\ewusbnet.sys [?]
S3 gupdatem;Google Update Service (gupdatem);C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /medsvc --> C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [?]
S3 HTCAND64;HTC Device Driver;C:\Windows\system32\Drivers\ANDROIDUSB.sys --> C:\Windows\system32\Drivers\ANDROIDUSB.sys [?]
S3 htcnprot;HTC NDIS Protocol Driver;C:\Windows\system32\DRIVERS\htcnprot.sys --> C:\Windows\system32\DRIVERS\htcnprot.sys [?]
S3 hwusbdev;Huawei DataCard USB PNP Device;C:\Windows\system32\DRIVERS\ewusbdev.sys --> C:\Windows\system32\DRIVERS\ewusbdev.sys [?]
S3 MotioninJoyXFilter;MotioninJoy Virtual Xinput device Filter Driver;C:\Windows\system32\DRIVERS\MijXfilt.sys --> C:\Windows\system32\DRIVERS\MijXfilt.sys [?]
S3 Roxio UPnP Renderer 10;Roxio UPnP Renderer 10;C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUPnPRenderer10.exe [2009-8-31 313840]
S3 SampleCollector;Intel® Sample Collector;C:\Program Files\Sony\VAIO Care\collsvc.exe [2010-5-5 167424]
S3 TsUsbFlt;TsUsbFlt;C:\Windows\system32\drivers\tsusbflt.sys --> C:\Windows\system32\drivers\tsusbflt.sys [?]
S3 TVICHW64;TVICHW64;\??\C:\Windows\system32\DRIVERS\TVICHW64.SYS --> C:\Windows\system32\DRIVERS\TVICHW64.SYS [?]
S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\system32\Wat\WatAdminSvc.exe --> C:\Windows\system32\Wat\WatAdminSvc.exe [?]
S4 Amazon Download Agent;Amazon Download Agent;C:\Program Files (x86)\Amazon\Amazon Games & Software Downloader\AmazonGSDownloaderService.exe [2011-1-11 401920]
S4 SOHCImp;VAIO Media plus Content Importer;C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe [2010-5-5 120104]
S4 SOHDBSvr;VAIO Media plus Database Manager;C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDBSvr.exe [2010-5-5 70952]
S4 SOHDms;VAIO Media plus Digital Media Server;C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe [2010-5-5 427304]
S4 SOHDs;VAIO Media plus Device Searcher;C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe [2010-5-5 75048]
S4 SOHPlMgr;VAIO Media plus Playlist Manager;C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHPlMgr.exe [2010-5-5 91432]
S4 uCamMonitor;CamMonitor;C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [2010-5-5 104960]
S4 UNS;Intel® Management & Security Application User Notification Service;C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe [2010-4-26 2320920]
S4 VCFw;VAIO Content Folder Watcher;C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [2009-9-14 642416]
S4 VcmINSMgr;VAIO Content Metadata Intelligent Network Service Manager;C:\Program Files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe [2010-2-19 386416]
S4 VcmXmlIfHelper;VAIO Content Metadata XML Interface;C:\Program Files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper64.exe [2010-2-19 115568]
S4 VUAgent;VUAgent;C:\Program Files\Sony\VAIO Update 5\VUAgent.exe [2010-5-5 1223024]
.
=============== Created Last 30 ================
.
2011-10-25 04:35:21 -------- dc----w- C:\ProgramData\ProcessLasso
2011-10-25 04:35:03 -------- dc----w- C:\Users\Joey\AppData\Roaming\ProcessLasso
2011-10-25 04:35:03 -------- dc----w- C:\Program Files\Process Lasso
2011-10-24 05:56:24 -------- dc----w- C:\Users\Joey\AppData\Roaming\wsInspector
2011-10-24 05:55:17 -------- dc----w- C:\Program Files (x86)\Startup Inspector for Windows
2011-10-22 18:16:18 -------- dc----w- C:\Program Files (x86)\apache-ant
2011-10-22 18:14:38 611224 -c--a-w- C:\Program Files (x86)\Mozilla Firefox\plugins\npdeployJava1.dll
2011-10-22 18:14:38 544656 ----a-w- C:\Windows\SysWow64\deployJava1.dll
2011-10-22 17:33:02 -------- dc----w- C:\ProgramData\PMS
2011-10-22 17:32:52 -------- dc----w- C:\Program Files (x86)\PS3 Media Server
2011-10-21 23:56:36 -------- dc----w- C:\ProgramData\Comodo
2011-10-21 23:56:28 1700352 ----a-w- C:\Windows\SysWow64\gdiplus.dll
2011-10-21 23:56:28 -------- dc----w- C:\Program Files\COMODO
2011-10-21 23:55:51 -------- dc----w- C:\ProgramData\Comodo Downloader
2011-10-21 23:02:30 -------- d-sh--w- C:\$RECYCLE.BIN
2011-10-18 00:17:30 -------- dc----w- C:\ProgramData\T-Mobile
2011-10-17 02:46:02 -------- d-sh--w- C:\found.000
2011-10-12 18:45:03 -------- dc----w- C:\Program Files\iPod
2011-10-12 18:45:02 -------- dc----w- C:\Program Files\iTunes
2011-10-12 18:42:35 -------- dc----w- C:\Program Files\Bonjour
2011-10-12 18:42:35 -------- dc----w- C:\Program Files (x86)\Bonjour
2011-10-12 04:06:33 1693184 ----a-w- C:\Windows\SysWow64\v1Dnp5JKR9XUltN.exe
2011-10-12 04:05:59 -------- dc----w- C:\Users\Joey\AppData\Roaming\v5dR9XjCIzNAv2F
2011-10-12 04:04:59 -------- dc----w- C:\Users\Joey\AppData\Roaming\cqCUrBx0y
2011-10-12 04:03:59 -------- dc----w- C:\Users\Joey\AppData\Roaming\rVDQTPF6hI0p
2011-10-12 04:02:59 -------- dc----w- C:\Users\Joey\AppData\Roaming\xNxvo3pGQd8LhXj
2011-10-12 04:01:59 -------- dc----w- C:\Users\Joey\AppData\Roaming\taWLhVtSoHd8Zhw
2011-10-12 04:00:59 -------- dc----w- C:\Users\Joey\AppData\Roaming\HNAci3GQs7EgqC
2011-10-12 03:59:59 -------- dc----w- C:\Users\Joey\AppData\Roaming\s9XUIzy1vo4GQd8
2011-10-12 03:58:59 -------- dc----w- C:\Users\Joey\AppData\Roaming\Umsd8qXVOPyAi24
2011-10-12 03:49:17 1693184 ----a-w- C:\Windows\SysWow64\r1ibD3onGaHsJfL.exe
2011-10-12 03:48:59 -------- dc----w- C:\Users\Joey\AppData\Roaming\ZpHQd8gRZ
2011-10-12 03:47:46 -------- dc----w- C:\Users\Joey\AppData\Roaming\lCx36qOcnJhlAn7
2011-10-12 03:46:58 -------- dc----w- C:\Users\Joey\AppData\Roaming\S8ZYwVlItNAuo
2011-10-12 03:45:51 -------- dc----w- C:\Users\Joey\AppData\Roaming\CPdxhFIW1UJiUdS
2011-10-12 03:44:59 -------- dc----w- C:\Users\Joey\AppData\Roaming\WEXrvGLIb7eu4Tt
2011-10-12 03:43:59 -------- dc----w- C:\Users\Joey\AppData\Roaming\SL9hXqUCkr
2011-10-12 03:42:59 -------- dc----w- C:\Users\Joey\AppData\Roaming\JgRZqhYXw
2011-10-12 03:41:53 -------- dc----w- C:\Users\Joey\AppData\Roaming\CrSmglvQYPF8euQ
2011-10-12 00:58:26 1693184 ----a-w- C:\Windows\SysWow64\DLL99gTZZqYCwIV.exe
2011-10-12 00:27:40 254464 ----a-w- C:\Windows\System32\drivers\windrvr6.sys
2011-10-12 00:25:30 -------- dc----w- C:\ProgramData\Medtronic
2011-10-12 00:14:43 1693184 ----a-w- C:\Windows\SysWow64\ippmmH55QJ7EKgZ.exe
2011-10-11 20:17:14 -------- d-----we C:\Windows\system64
2011-10-08 19:52:35 289296 ----a-w- C:\Windows\System32\winsfinst.exe
2011-10-08 19:49:10 95568 ----a-w- C:\Windows\System32\vetredir.dll
2011-10-08 19:49:10 141136 ----a-w- C:\Windows\System32\isafeif64.dll
2011-10-08 19:49:10 128336 ----a-w- C:\Windows\System32\isafeif.dll
2011-10-08 19:49:10 103760 ----a-w- C:\Windows\System32\vetredir64.dll
2011-10-08 01:47:58 574216 ----a-w- C:\Windows\System32\drivers\cmdGuard.sys
2011-10-08 01:47:58 43248 ----a-w- C:\Windows\System32\drivers\cmdhlp.sys
2011-10-08 01:47:56 16528 ----a-w- C:\Windows\System32\drivers\cmderd.sys
2011-10-08 01:47:14 41200 ----a-w- C:\Windows\System32\cmdcsr.dll
2011-10-08 01:47:12 300200 ----a-w- C:\Windows\SysWow64\guard32.dll
2011-10-08 01:47:10 388280 ----a-w- C:\Windows\System32\guard64.dll
2011-10-04 23:07:21 -------- dc----w- C:\Program Files (x86)\TuneUpMedia
2011-09-30 20:14:30 -------- dc----w- C:\Users\Joey\AppData\Roaming\Sypou
2011-09-30 20:14:30 -------- dc----w- C:\Users\Joey\AppData\Roaming\Fojura
2011-09-30 16:21:20 -------- dc----w- C:\Users\Joey\AppData\Roaming\Evij
2011-09-30 16:21:20 -------- dc----w- C:\Users\Joey\AppData\Roaming\Atwama
2011-09-30 16:21:07 -------- dc----w- C:\Users\Joey\AppData\Roaming\Uxisiz
2011-09-30 16:21:07 -------- dc----w- C:\Users\Joey\AppData\Roaming\Afmaba
2011-09-30 16:21:05 -------- dc----w- C:\Users\Joey\AppData\Roaming\Ibysug
2011-09-30 16:21:05 -------- dc----w- C:\Users\Joey\AppData\Roaming\Hyqo
2011-09-30 12:54:27 -------- dc----w- C:\ProgramData\Symantec
2011-09-30 06:26:34 -------- dc----w- C:\Users\Joey\AppData\Roaming\Yroht
2011-09-30 05:32:01 -------- dc----w- C:\Users\Joey\AppData\Roaming\AA0uvS2ib3n5Q6W
2011-09-30 05:30:57 -------- dc----w- C:\Users\Joey\AppData\Roaming\gBrPyx1So3m5QWf
2011-09-30 05:29:59 -------- dc----w- C:\Users\Joey\AppData\Roaming\U5Qd8LTjeBOx0S
2011-09-30 05:12:29 -------- dc----w- C:\Users\Joey\AppData\Roaming\cyxA0uvS2b3n
2011-09-30 05:12:16 -------- dc----w- C:\Users\Joey\AppData\Roaming\xXqjUCekIrOyAu
2011-09-30 05:12:14 -------- dc----w- C:\Users\Joey\AppData\Roaming\EfRL9hTXqU
2011-09-30 05:12:06 -------- dc----w- C:\Users\Joey\AppData\Roaming\QWJ7fEL8gZhCkVl
2011-09-30 05:12:04 -------- dc----w- C:\Users\Joey\AppData\Roaming\jNyxA1uvSoFpGaJ
2011-09-30 05:12:04 -------- dc----w- C:\Users\Joey\AppData\Roaming\AzPNyxA1uSoFpGa
2011-09-30 05:10:58 -------- dc----w- C:\Users\Joey\AppData\Roaming\kS2ibnG46KE
2011-09-30 05:09:58 -------- dc----w- C:\Users\Joey\AppData\Roaming\JqUCkIBrzNxpGHd
2011-09-30 05:09:58 -------- dc----w- C:\Users\Joey\AppData\Roaming\Ix1So3GQ6W8R9TU
2011-09-30 05:09:52 -------- dc----w- C:\Users\Joey\AppData\Roaming\R7EK8gRZ9YwUeIt
2011-09-30 05:09:52 -------- dc----w- C:\Users\Joey\AppData\Roaming\eH5sQJ7EKgZhXjV
2011-09-30 05:09:51 -------- dc----w- C:\Users\Joey\AppData\Roaming\SHsWJE8ZhC
2011-09-30 05:09:47 -------- dc----w- C:\Users\Joey\AppData\Roaming\wK8Z9hVtPyAvo4G
2011-09-30 05:09:42 -------- dc----w- C:\Users\Joey\AppData\Roaming\BZ9hYjUVlBzNAuD
2011-09-30 05:09:38 -------- dc----w- C:\Users\Joey\AppData\Roaming\RelIBrrzNx1uSoF
2011-09-30 05:09:35 -------- dc----w- C:\Users\Joey\AppData\Roaming\zfEL9gTZqYwIr
2011-09-30 05:09:35 -------- dc----w- C:\Users\Joey\AppData\Roaming\tD3pnGaQHsKfLZj
2011-09-30 04:55:07 -------- dc----w- C:\Users\Joey\AppData\Roaming\btzP0ycA1vv
2011-09-30 04:55:06 -------- dc----w- C:\Users\Joey\AppData\Roaming\UdEL8gRZqYwUeO
2011-09-30 04:54:55 -------- dc----w- C:\Users\Joey\AppData\Roaming\RZqjYCwkIrOtPuS
2011-09-30 04:50:54 -------- dc----w- C:\Users\Joey\AppData\Roaming\XjUVelIBtPyAu
2011-09-30 04:49:59 -------- dc----w- C:\Users\Joey\AppData\Roaming\UJ7E8gRZqYwUeO
2011-09-30 04:48:59 -------- dc----w- C:\Users\Joey\AppData\Roaming\k5aQL9hBrSiQfL
2011-09-30 04:48:59 -------- dc----w- C:\Users\Joey\AppData\Roaming\dfRL9gTXqYeIrOt
2011-09-30 04:48:58 -------- dc----w- C:\Users\Joey\AppData\Roaming\zUlrNAvo3Ga6K
2011-09-30 04:48:54 -------- dc----w- C:\Users\Joey\AppData\Roaming\VfRLTjCeIrNx
2011-09-30 04:48:50 -------- dc----w- C:\Users\Joey\AppData\Roaming\NcS2ibD3pGaHsKf
2011-09-30 04:48:49 -------- dc----w- C:\Users\Joey\AppData\Roaming\B6dWK8fRLh
2011-09-30 04:48:48 -------- dc----w- C:\Users\Joey\AppData\Roaming\NmG5Qd8fRhw
2011-09-30 04:48:48 -------- dc----w- C:\Users\Joey\AppData\Roaming\jIBrzPNyx1
2011-09-30 04:34:08 -------- dc----w- C:\Users\Joey\AppData\Roaming\zcS1iJ6dE8R9TwU
2011-09-30 04:33:57 -------- dc----w- C:\Users\Joey\AppData\Roaming\GcS1ivD3oF
2011-09-30 04:30:43 -------- dc----w- C:\Users\Joey\AppData\Roaming\ObF4pmG5sJdKfZh
2011-09-30 04:30:27 -------- dc----w- C:\Users\Joey\AppData\Roaming\UWK7fEL9gZjCkVl
2011-09-30 04:30:12 -------- dc----w- C:\Users\Joey\AppData\Roaming\JH6sW7fELgZhCkV
2011-09-30 04:30:12 -------- dc----w- C:\Users\Joey\AppData\Roaming\AONtxP0uc
2011-09-30 04:30:11 -------- dc----w- C:\Users\Joey\AppData\Roaming\xONx0SiFnaHW7LT
2011-09-30 04:30:10 -------- dc----w- C:\Users\Joey\AppData\Roaming\vqCkBOA0uS
2011-09-30 04:30:10 -------- dc----w- C:\Users\Joey\AppData\Roaming\ifZTlrNAu2
2011-09-30 04:30:09 -------- dc----w- C:\Users\Joey\AppData\Roaming\SXwjltPcuo4msJd
2011-09-30 04:30:04 -------- dc----w- C:\Users\Joey\AppData\Roaming\P57LRhXwkt0
2011-09-30 04:30:00 -------- dc----w- C:\Users\Joey\AppData\Roaming\XjUCelIBrP
2011-09-30 04:30:00 -------- dc----w- C:\Users\Joey\AppData\Roaming\OIzNAv2ob4m5Q6E
2011-09-30 04:28:59 -------- dc----w- C:\Users\Joey\AppData\Roaming\EjVx2n6EqItS3
2011-09-30 04:27:53 -------- dc----w- C:\Users\Joey\AppData\Roaming\J2onF4m7dKZY
2011-09-30 04:26:58 -------- dc----w- C:\Users\Joey\AppData\Roaming\i3onF4amHsJdLgq
2011-09-30 04:26:57 -------- dc----w- C:\Users\Joey\AppData\Roaming\z0ucS2ibDp
2011-09-30 04:26:56 -------- dc----w- C:\Users\Joey\AppData\Roaming\UqjUCekIBzNx0v2
2011-09-30 04:13:23 -------- dc----w- C:\Users\Joey\AppData\Roaming\X9hYXwjUVlBzNc1
2011-09-30 04:13:09 -------- dc----w- C:\Users\Joey\AppData\Roaming\DpmG5aQJ6W8R9Tq
2011-09-30 04:12:11 -------- dc----w- C:\Users\Joey\AppData\Roaming\orzONyxA0v2
2011-09-30 04:12:03 -------- dc----w- C:\Users\Joey\AppData\Roaming\qD3onG4am
2011-09-30 04:12:00 -------- dc----w- C:\Users\Joey\AppData\Roaming\ujUCelIBr
2011-09-30 04:10:59 -------- dc----w- C:\Users\Joey\AppData\Roaming\pbFm5JW8tPuSboG
2011-09-30 04:09:59 -------- dc----w- C:\Users\Joey\AppData\Roaming\wpmGdEKhTwUeI
2011-09-30 03:53:53 -------- dc----w- C:\Users\Joey\AppData\Roaming\gNtxA0ucSiD
2011-09-30 03:53:45 -------- dc----w- C:\Users\Joey\AppData\Roaming\mmH5sQJ7dKgZhXj
2011-09-30 03:53:44 -------- dc----w- C:\Users\Joey\AppData\Roaming\vibD3onG4m
2011-09-30 03:53:36 -------- dc----w- C:\Users\Joey\AppData\Roaming\r2onF4pmHsJd
2011-09-30 03:53:20 -------- dc----w- C:\Users\Joey\AppData\Roaming\NVrlOBtxPySiDoF
2011-09-30 03:53:15 -------- dc----w- C:\Users\Joey\AppData\Roaming\WVrlONtxPuSiDoG
2011-09-30 03:53:11 -------- dc----w- C:\Users\Joey\AppData\Roaming\KelOBtzP0c1v2n4
2011-09-30 03:53:01 -------- dc----w- C:\Users\Joey\AppData\Roaming\zmH6sWJ7fLgZhCk
2011-09-30 03:53:00 -------- dc----w- C:\Users\Joey\AppData\Roaming\VuvS2obF3mE9
2011-09-30 03:51:57 -------- dc----w- C:\Users\Joey\AppData\Roaming\ut0SboGms
2011-09-30 03:50:57 -------- dc----w- C:\Users\Joey\AppData\Roaming\hBPxu2Fma6KLTeN
2011-09-30 03:49:56 -------- dc----w- C:\Users\Joey\AppData\Roaming\GJ7fEL8gTq
2011-09-30 03:49:56 -------- dc----w- C:\Users\Joey\AppData\Roaming\fmH6sWJ7fLgZhCk
2011-09-30 03:49:54 -------- dc----w- C:\Users\Joey\AppData\Roaming\l5aQH6dWKfLgXjC
2011-09-30 03:49:53 -------- dc----w- C:\Users\Joey\AppData\Roaming\KPNyD2oG5Q8R9
2011-09-30 03:49:50 -------- dc----w- C:\Users\Joey\AppData\Roaming\qONA0ucS2bpG
2011-09-30 03:49:48 -------- dc----w- C:\Users\Joey\AppData\Roaming\BZ9hYXUVeItPAuD
2011-09-30 03:38:27 -------- dc----w- C:\Users\Joey\AppData\Roaming\telIBtzPNc1v2b4
2011-09-30 03:38:14 -------- dc----w- C:\Users\Joey\AppData\Roaming\TjYCekIVrOtAuSi
2011-09-30 03:38:10 -------- dc----w- C:\Users\Joey\AppData\Roaming\fibD3onG4m6W7E8
2011-09-30 03:38:05 -------- dc----w- C:\Users\Joey\AppData\Roaming\qEL9gTYCwIrOtPu
2011-09-30 03:38:02 -------- dc----w- C:\Users\Joey\AppData\Roaming\msWJ7dEL8RqYwUe
2011-09-30 03:38:02 -------- dc----w- C:\Users\Joey\AppData\Roaming\FXwkUVelO
2011-09-30 03:37:56 -------- dc----w- C:\Users\Joey\AppData\Roaming\EVrlOBtxPySiD
2011-09-30 03:37:51 -------- dc----w- C:\Users\Joey\AppData\Roaming\dP0ucS1ib3n4m6W
2011-09-30 03:37:48 -------- dc----w- C:\Users\Joey\AppData\Roaming\wycA1uvD2b4m5Q6
2011-09-30 03:37:41 -------- dc----w- C:\Users\Joey\AppData\Roaming\axP0ucS1iDoGaHs
2011-09-30 03:35:58 -------- dc----w- C:\Users\Joey\AppData\Roaming\kCekIVONtAuSiDp
2011-09-30 03:34:59 -------- dc----w- C:\Users\Joey\AppData\Roaming\cqCIzy0Si3GQ
2011-09-30 03:33:44 -------- dc----w- C:\Users\Joey\AppData\Roaming\VgTZqhYCwUrOtPy
2011-09-30 03:32:54 -------- dc----w- C:\Users\Joey\AppData\Roaming\m3onG4amHsJfLgZ
2011-09-30 03:15:38 -------- dc----w- C:\Users\Joey\AppData\Roaming\AekIVrzONx0c
2011-09-30 03:15:28 -------- dc----w- C:\Users\Joey\AppData\Roaming\mYCekIVrzNx0c2b
2011-09-30 03:15:25 -------- dc----w- C:\Users\Joey\AppData\Roaming\QYCwUVrlOtPySiD
2011-09-30 03:15:22 -------- dc----w- C:\Users\Joey\AppData\Roaming\CdWK8fRL9TqUeIr
2011-09-30 03:15:14 -------- dc----w- C:\Users\Joey\AppData\Roaming\DlONxP0uc1b3n4
2011-09-30 03:15:13 -------- dc----w- C:\Users\Joey\AppData\Roaming\hrzONtxA0c2b3n4
2011-09-30 03:15:11 -------- dc----w- C:\Users\Joey\AppData\Roaming\e2onF4pmHsJ
2011-09-30 03:15:07 -------- dc----w- C:\Users\Joey\AppData\Roaming\ykUVrlOBtPy1Dna
2011-09-30 03:15:01 -------- dc----w- C:\Users\Joey\AppData\Roaming\wlOBtxP0ySiDo4m
2011-09-30 03:15:00 -------- dc----w- C:\Users\Joey\AppData\Roaming\US1ibonG4m6
2011-09-30 03:14:55 -------- dc----w- C:\Users\Joey\AppData\Roaming\mtxP0ucS1b3n4m6
2011-09-30 03:14:52 -------- dc----w- C:\Users\Joey\AppData\Roaming\AmHQJ7dEKgZhXjV
2011-09-30 03:14:13 -------- dc----w- C:\Users\Joey\AppData\Roaming\i1uvD2obFpGsJdK
2011-09-30 03:13:44 -------- dc----w- C:\Users\Joey\AppData\Roaming\FBtzPNycAuDoFpG
2011-09-30 03:13:34 -------- dc----w- C:\Users\Joey\AppData\Roaming\KH5sQJ7dE8R9Y
2011-09-30 03:13:12 -------- dc----w- C:\Users\Joey\AppData\Roaming\X3pnG4aQHsKfL
2011-09-30 03:13:02 -------- dc----w- C:\Users\Joey\AppData\Roaming\US2ibF3pn5Q6W7R
2011-09-30 03:11:59 -------- dc----w- C:\Users\Joey\AppData\Roaming\gVrzONtxAuS
2011-09-30 03:10:57 -------- dc----w- C:\Users\Joey\AppData\Roaming\OBtxP0ycSiDoFaH
2011-09-30 03:09:58 -------- dc----w- C:\Users\Joey\AppData\Roaming\ZamH6sWJ7E8TqYw
2011-09-30 03:08:24 -------- dc----w- C:\Users\Joey\AppData\Roaming\kIBrzPNyx1v2b3m
2011-09-30 03:08:24 -------- dc----w- C:\Users\Joey\AppData\Roaming\HfRL9hTXqUeIrOy
2011-09-30 03:08:23 -------- dc----w- C:\Users\Joey\AppData\Roaming\l8fRZ9hTXjCl
2011-09-30 03:08:22 -------- dc----w- C:\Users\Joey\AppData\Roaming\UBt0ycivDopHJd
2011-09-30 03:08:00 -------- dc----w- C:\Users\Joey\AppData\Roaming\v5aQJ6dWKfLhXjC
2011-09-30 02:48:55 -------- dc----w- C:\Users\Joey\AppData\Roaming\XH5sWJ7dE8RqY
2011-09-30 02:48:49 -------- dc----w- C:\Users\Joey\AppData\Roaming\PamH6sWJ7E8TqYw
2011-09-30 02:48:13 -------- dc----w- C:\Users\Joey\AppData\Roaming\azPNyxA1uSoF5Jd
2011-09-30 02:48:01 -------- dc----w- C:\Users\Joey\AppData\Roaming\rycS1ivD3
2011-09-30 02:47:58 -------- dc----w- C:\Users\Joey\AppData\Roaming\fjUelIBrzNAuSo3
2011-09-30 02:47:55 -------- dc----w- C:\Users\Joey\AppData\Roaming\LA0ucibD3n46W7
2011-09-30 02:47:42 -------- dc----w- C:\Users\Joey\AppData\Roaming\rOBtzP0yc
2011-09-30 02:47:36 -------- dc----w- C:\Users\Joey\AppData\Roaming\y7ELgqhYCkVlBx
2011-09-30 02:47:36 -------- dc----w- C:\Users\Joey\AppData\Roaming\qCekIBrzOyAuSiF
2011-09-30 02:47:25 -------- dc----w- C:\Users\Joey\AppData\Roaming\HjUekIBrzx0
2011-09-30 02:47:16 -------- dc----w- C:\Users\Joey\AppData\Roaming\V3pnG4aQHsKfLgZ
2011-09-30 02:47:13 -------- dc----w- C:\Users\Joey\AppData\Roaming\Byc1ivD2o4m5Q
2011-09-30 02:47:05 -------- dc----w- C:\Users\Joey\AppData\Roaming\kRL9hTXqjCkrOy
2011-09-30 02:47:03 -------- dc----w- C:\Users\Joey\AppData\Roaming\tlOBtxP0ySiDoFa
2011-09-30 02:47:03 -------- dc----w- C:\Users\Joey\AppData\Roaming\PBtxP0ycSiDoFaH
2011-09-30 02:46:49 -------- dc----w- C:\Users\Joey\AppData\Roaming\C5sWJ7dELgZ
2011-09-30 02:46:29 -------- dc----w- C:\Users\Joey\AppData\Roaming\sQH6dWK7fLgqY1
2011-09-30 02:46:26 -------- dc----w- C:\Users\Joey\AppData\Roaming\dpG5a6Kf9TqUkBz
2011-09-30 02:46:24 -------- dc----w- C:\Users\Joey\AppData\Roaming\ZOBtxP0yc1v3n4m
2011-09-30 02:46:15 -------- dc----w- C:\Users\Joey\AppData\Roaming\A5sQJ7dEK
2011-09-30 02:46:12 -------- dc----w- C:\Users\Joey\AppData\Roaming\j7fRL9gTXjCkV
2011-09-30 02:44:06 -------- dc----w- C:\Users\Joey\AppData\Roaming\TWK7fEL9gZjCkVl
2011-09-30 02:44:06 -------- dc----w- C:\Users\Joey\AppData\Roaming\eTZqjYCwkVl
2011-09-30 02:43:27 -------- dc----w- C:\Users\Joey\AppData\Roaming\TYCekIVrzNx0
2011-09-30 02:43:25 -------- dc----w- C:\Users\Joey\AppData\Roaming\B1voF4pmHsdKgZh
2011-09-30 02:43:18 -------- dc----w- C:\Users\Joey\AppData\Roaming\JbDpnG4aQ6W7E9Z
2011-09-30 02:43:14 -------- dc----w- C:\Users\Joey\AppData\Roaming\kCwkUVrlOtP
2011-09-30 02:43:14 -------- dc----w- C:\Users\Joey\AppData\Roaming\aK8fRL9hTqUeIrO
2011-09-30 02:43:08 -------- dc----w- C:\Users\Joey\AppData\Roaming\O6dEK8fRZhXjClW
2011-09-30 02:43:03 -------- dc----w- C:\Users\Joey\AppData\Roaming\ApnG4aQH6W7E9Tq
2011-09-30 02:43:01 -------- dc----w- C:\Users\Joey\AppData\Roaming\NwjUVelIBzN
2011-09-30 02:43:00 -------- dc----w- C:\Users\Joey\AppData\Roaming\KsWK7fEL9TqYwIl
2011-09-30 02:42:57 -------- dc----w- C:\Users\Joey\AppData\Roaming\BONyxA0uv2b3n5Q
2011-09-30 02:42:55 -------- dc----w- C:\Users\Joey\AppData\Roaming\mvD3onF4aHWdL
2011-09-30 02:42:52 -------- dc----w- C:\Users\Joey\AppData\Roaming\LK8fRL9hTqUeIrO
2011-09-30 02:42:46 -------- dc----w- C:\Users\Joey\AppData\Roaming\YP0uc1ibDna6JEg
2011-09-30 02:42:44 -------- dc----w- C:\Users\Joey\AppData\Roaming\q2ibD3pnGaHKfLg
2011-09-30 02:42:41 -------- dc----w- C:\Users\Joey\AppData\Roaming\z2onF4pmHsJdKgZ
2011-09-30 02:42:33 -------- dc----w- C:\Users\Joey\AppData\Roaming\fobF3pmG5Q6W8R9
2011-09-30 02:42:15 -------- dc----w- C:\Users\Joey\AppData\Roaming\UwkIVrlONPuSiDo
2011-09-30 02:42:05 -------- dc----w- C:\Users\Joey\AppData\Roaming\k2ibD3pnGaHsKf
2011-09-30 02:40:59 -------- dc----w- C:\Users\Joey\AppData\Roaming\NSbpa6ECtbmgliW
2011-09-30 02:39:56 -------- dc----w- C:\Users\Joey\AppData\Roaming\Z5sQJ7dEKgZhXjV
2011-09-30 02:38:56 -------- dc----w- C:\Users\Joey\AppData\Roaming\XG5aQH6dW7R9TqY
2011-09-30 02:37:59 -------- dc----w- C:\Users\Joey\AppData\Roaming\RkNuDaJgCrPiFsE
2011-09-30 02:36:58 -------- dc----w- C:\Users\Joey\AppData\Roaming\eymfUupWTBvn7j
2011-09-30 02:35:18 -------- dc----w- C:\Users\Joey\AppData\Roaming\e1ivD2onFpH
2011-09-30 02:35:11 -------- dc----w- C:\Users\Joey\AppData\Roaming\nBrzONyxAuSiFpG
2011-09-30 02:35:10 -------- dc----w- C:\Users\Joey\AppData\Roaming\HdEK8fRZ9Tw
2011-09-30 02:35:10 -------- dc----w- C:\Users\Joey\AppData\Roaming\gJ6K8fRZ9TwUeIr
2011-09-30 02:35:09 -------- dc----w- C:\Users\Joey\AppData\Roaming\FzPyu2Fm5QdK
2011-09-30 02:34:56 -------- dc----w- C:\Users\Joey\AppData\Roaming\y2obF3pmGaJdKfL
2011-09-30 02:26:37 64000 ----a-w- C:\Windows\SysWow64\zIVr4amH5W7EgZh.exe
2011-09-30 02:26:37 64000 ----a-w- C:\Windows\SysWow64\up5Hf9TjCI4m5W7.exe
2011-09-30 02:26:37 64000 ----a-w- C:\Windows\SysWow64\nWf9TjCIrNAc.exe
2011-09-30 02:26:37 64000 ----a-w- C:\Windows\SysWow64\dsQJ6dEK8.exe
2011-09-30 02:26:37 64000 ----a-w- C:\Windows\SysWow64\dJ7dEL8gRqYwUeO.exe
2011-09-30 02:25:38 -------- dc----w- C:\Users\Joey\AppData\Roaming\EYCekIVrzNx0c
2011-09-30 02:25:37 -------- dc----w- C:\Users\Joey\AppData\Roaming\EzONyxA0uSi3n5Q
2011-09-30 02:24:25 -------- dc----w- C:\Users\Joey\AppData\Roaming\IbD3pnG4aHsKfLg
2011-09-30 02:23:19 -------- dc----w- C:\Users\Joey\AppData\Roaming\aF4pmG5sQ6E8R9T
2011-09-30 02:23:16 -------- dc----w- C:\Users\Joey\AppData\Roaming\CrzONyxA0v2b3n
2011-09-30 02:23:14 -------- dc----w- C:\Users\Joey\AppData\Roaming\LOBtzP0yc1v
2011-09-30 02:23:11 -------- dc----w- C:\Users\Joey\AppData\Roaming\LyxA0uvS2b3n5Q
2011-09-30 02:23:10 -------- dc----w- C:\Users\Joey\AppData\Roaming\xNyxA1uvSoFpGaJ
2011-09-30 02:23:10 -------- dc----w- C:\Users\Joey\AppData\Roaming\dNycA1uvDoFpGsJ
2011-09-30 02:23:08 -------- dc----w- C:\Users\Joey\AppData\Roaming\LS1ivD3on4m5W7E
2011-09-30 02:23:07 -------- dc----w- C:\Users\Joey\AppData\Roaming\vTXqjYCekVzNx
2011-09-30 02:21:59 -------- dc----w- C:\Users\Joey\AppData\Roaming\o7fRL9gTXjCkVzN
2011-09-30 02:20:54 -------- dc----w- C:\Users\Joey\AppData\Roaming\ZgRZ9hYXwUeItPy
2011-09-30 02:19:59 -------- dc----w- C:\Users\Joey\AppData\Roaming\wTqhYCwkUOcvFmW
2011-09-30 02:18:59 -------- dc----w- C:\Users\Joey\AppData\Roaming\Sf9XYkrNAc2Dna6
2011-09-30 02:17:59 -------- dc----w- C:\Users\Joey\AppData\Roaming\pt1a7ZkOyvF5EZe
2011-09-30 02:16:59 -------- dc----w- C:\Users\Joey\AppData\Roaming\O7fEgZYklPSvo4H
2011-09-30 02:15:58 -------- dc----w- C:\Users\Joey\AppData\Roaming\YUc4dYIvJjAJC
2011-09-30 02:14:59 -------- dc----w- C:\Users\Joey\AppData\Roaming\AGQd8TePub5dLXe
2011-09-30 02:13:57 -------- dc----w- C:\Users\Joey\AppData\Roaming\cHgeAmfUzSQTObd
2011-09-30 02:13:55 -------- dc----w- C:\Users\Joey\AppData\Roaming\bt1mEkP4Ewt
2011-09-30 02:13:47 -------- dc----w- C:\Users\Joey\AppData\Roaming\RRL9gTXqjCkVzNx
2011-09-30 02:13:42 -------- dc----w- C:\Users\Joey\AppData\Roaming\n1iDo4pmHsJdKgZ
2011-09-30 02:13:41 -------- dc----w- C:\Users\Joey\AppData\Roaming\xvD2onF4pHsJdKg
2011-09-30 02:13:41 -------- dc----w- C:\Users\Joey\AppData\Roaming\PvDo4pmH5Q7E8R9
2011-09-30 02:13:41 -------- dc----w- C:\Users\Joey\AppData\Roaming\imH5sQJ7dK
2011-09-30 02:13:41 -------- dc----w- C:\Users\Joey\AppData\Roaming\h2oF4mHsQ7E8R9Y
2011-09-30 02:13:41 -------- dc----w- C:\Users\Joey\AppData\Roaming\FivD2onF4m5Q7E8
2011-09-30 02:13:40 -------- dc----w- C:\Users\Joey\AppData\Roaming\W4pmH5sQJ
2011-09-30 02:13:33 -------- dc----w- C:\Users\Joey\AppData\Roaming\RuF5WRqByv3aKgj
2011-09-30 02:13:29 -------- dc----w- C:\Users\Joey\AppData\Roaming\KqCkrOt0Sbo4Hs7
2011-09-30 02:13:29 -------- dc----w- C:\Users\Joey\AppData\Roaming\FZCIlt0Sb
2011-09-29 22:36:59 1024000 ----a-w- C:\Windows\SysWow64\TH5sWJ7dE8RqXkV.exe
2011-09-29 22:35:59 -------- dc----w- C:\Users\Joey\AppData\Roaming\Z7w0nfwPFEUcmge
2011-09-29 22:34:57 -------- dc----w- C:\Users\Joey\AppData\Roaming\FkIBrzONyAuS
2011-09-29 22:33:57 -------- dc----w- C:\Users\Joey\AppData\Roaming\fN1afCPFEkyF7he
2011-09-29 22:32:58 -------- dc----w- C:\Users\Joey\AppData\Roaming\ViHZt3Jhx
2011-09-29 22:31:58 -------- dc----w- C:\Users\Joey\AppData\Roaming\ulP1b5W9Urup
2011-09-29 22:30:59 -------- dc----w- C:\Users\Joey\AppData\Roaming\DhCz1b5W9jB
2011-09-29 20:18:17 -------- dc----w- C:\Users\Joey\AppData\Roaming\BEK8fRZ9hXUeIrP
2011-09-29 20:17:43 -------- dc----w- C:\Users\Joey\AppData\Roaming\UcA1uvD2oFpGsJd
2011-09-29 20:17:35 -------- dc----w- C:\Users\Joey\AppData\Roaming\DgTZqhYCwUrOtPy
2011-09-29 20:17:31 -------- dc----w- C:\Users\Joey\AppData\Roaming\ulOBtxP0y
2011-09-29 20:17:19 -------- dc----w- C:\Users\Joey\AppData\Roaming\GUCelIBrzNx1v2b
2011-09-29 20:17:09 -------- dc----w- C:\Users\Joey\AppData\Roaming\OWK8fRL9hXjCk
2011-09-29 20:15:53 -------- dc----w- C:\Users\Joey\AppData\Roaming\qVrlONtxP
2011-09-29 20:15:33 -------- dc----w- C:\Users\Joey\AppData\Roaming\sZqjYCwkIlN
2011-09-29 20:15:31 -------- dc----w- C:\Users\Joey\AppData\Roaming\rBtzPNycAuDoFpG
2011-09-29 20:14:47 -------- dc----w- C:\Users\Joey\AppData\Roaming\DdEK8gRZ9YwUeI
2011-09-29 20:14:44 -------- dc----w- C:\Users\Joey\AppData\Roaming\cVrzONtxA
2011-09-29 20:14:37 -------- dc----w- C:\Users\Joey\AppData\Roaming\kH5sQJ7dE8R9YwU
2011-09-29 20:14:30 -------- dc----w- C:\Users\Joey\AppData\Roaming\RH6sWJ7fE8TqYw
2011-09-29 20:14:28 -------- dc----w- C:\Users\Joey\AppData\Roaming\W1uvS2obFpGaJdK
2011-09-29 20:14:23 -------- dc----w- C:\Users\Joey\AppData\Roaming\ECelIBrzPy1v2b3
2011-09-29 20:14:07 -------- dc----w- C:\Users\Joey\AppData\Roaming\xEL8gRZqhXkVlB
2011-09-29 20:14:04 -------- dc----w- C:\Users\Joey\AppData\Roaming\ZsQJ6dEK8R9TwUe
2011-09-29 20:14:02 -------- dc----w- C:\Users\Joey\AppData\Roaming\zlONtxP0uSiDo
2011-09-29 20:12:55 -------- dc----w- C:\Users\Joey\AppData\Roaming\yelIBrzPNx1
2011-09-29 20:11:57 -------- dc----w- C:\Users\Joey\AppData\Roaming\Q99hYwjUeItPyAu
2011-09-29 20:10:41 -------- dc----w- C:\Users\Joey\AppData\Roaming\oIIVVrzzONx
2011-09-29 20:09:59 -------- dc----w- C:\Users\Joey\AppData\Roaming\srunWTV0osgUPD
2011-09-29 20:08:45 -------- dc----w- C:\Users\Joey\AppData\Roaming\CuSiDn4Q6KEgZkV
2011-09-29 20:07:55 -------- dc----w- C:\Users\Joey\AppData\Roaming\FlryuSoFm5Q6
2011-09-29 20:05:14 -------- dc----w- C:\Users\Joey\AppData\Roaming\TfffRRZ9hTXwUCl
2011-09-29 20:05:14 -------- dc----w- C:\Users\Joey\AppData\Roaming\h8ffRRZ9hTXwjCl
2011-09-29 20:00:40 -------- dc----w- C:\Users\Joey\AppData\Roaming\wZqhYXwkUeOtP
2011-09-29 20:00:27 -------- dc----w- C:\Users\Joey\AppData\Roaming\HIBrzONyx0v2b3n
2011-09-29 19:58:59 -------- dc----w- C:\Users\Joey\AppData\Roaming\LH5sQJ7dE8R
2011-09-29 19:57:59 -------- dc----w- C:\Users\Joey\AppData\Roaming\P9TjwVlNxuSi3G
2011-09-29 19:56:59 -------- dc----w- C:\Users\Joey\AppData\Roaming\lFmQdKLTjerNASi
2011-09-29 19:55:58 -------- dc----w- C:\Users\Joey\AppData\Roaming\H7qIxG7ZCltP1n
2011-09-29 19:54:58 -------- dc----w- C:\Users\Joey\AppData\Roaming\BaQH6dWK7R9TqYe
2011-09-29 19:53:59 -------- dc----w- C:\Users\Joey\AppData\Roaming\f0JrD8zmj2fNGTN
2011-09-29 19:52:59 -------- dc----w- C:\Users\Joey\AppData\Roaming\HwzvHgUNoQZ
2011-09-29 19:51:59 -------- dc----w- C:\Users\Joey\AppData\Roaming\nnKXrcG7Yxnf
2011-09-29 19:51:56 -------- dc----w- C:\Users\Joey\AppData\Roaming\m3sgkP3sRU0ndwP
2011-09-29 19:51:56 -------- dc----w- C:\Users\Joey\AppData\Roaming\Cs8wxvHLwtD58XB
2011-09-29 19:51:55 -------- dc----w- C:\Users\Joey\AppData\Roaming\N8YUtc3aW8Y
2011-09-29 19:51:49 -------- dc----w- C:\Users\Joey\AppData\Roaming\U6fXkOub4WL
2011-09-29 19:51:46 -------- dc----w- C:\Users\Joey\AppData\Roaming\DBPy12Fm5Qd
2011-09-29 19:51:46 -------- dc----w- C:\Users\Joey\AppData\Roaming\a1vo4HQdKRhXUeB
2011-09-29 19:51:43 -------- dc----w- C:\Users\Joey\AppData\Roaming\xXjeIBrzOyAv2Fp
2011-09-29 19:51:43 -------- dc----w- C:\Users\Joey\AppData\Roaming\wdKRhXqjUeIrOyA
2011-09-29 19:43:58 -------- dc----w- C:\Users\Joey\AppData\Roaming\bNyxA0uvSiFpGaH
2011-09-29 19:43:46 -------- dc----w- C:\Users\Joey\AppData\Roaming\tvD2onF4pHsJdKg
2011-09-29 19:43:34 -------- dc----w- C:\Users\Joey\AppData\Roaming\bIVrzONtx0c2b3
2011-09-29 19:43:23 -------- dc----w- C:\Users\Joey\AppData\Roaming\X7dEK8gRZh
2011-09-29 19:43:10 -------- dc----w- C:\Users\Joey\AppData\Roaming\EaQH6sWK7E9TqYw
2011-09-29 19:42:57 -------- dc----w- C:\Users\Joey\AppData\Roaming\q0ycS1ivDoFaHsJ
2011-09-29 19:42:43 -------- dc----w- C:\Users\Joey\AppData\Roaming\hYXwjUVelBzNc1v
2011-09-29 19:42:27 -------- dc----w- C:\Users\Joey\AppData\Roaming\tucS2ibD3n4Q6W7
2011-09-29 19:42:15 -------- dc----w- C:\Users\Joey\AppData\Roaming\tEK8gRZ9hXjVlBz
2011-09-29 19:42:02 -------- dc----w- C:\Users\Joey\AppData\Roaming\SH6sWK7fE9TqY
2011-09-29 19:41:48 -------- dc----w- C:\Users\Joey\AppData\Roaming\OIVrlONtx0c1b3n
2011-09-29 19:41:36 -------- dc----w- C:\Users\Joey\AppData\Roaming\szPNycA1uDoFpGs
2011-09-29 19:41:22 -------- dc----w- C:\Users\Joey\AppData\Roaming\lL9hTXqjUeIrOyA
2011-09-29 19:41:08 -------- dc----w- C:\Users\Joey\AppData\Roaming\iVrzONtxAuSiDpG
2011-09-29 19:40:56 -------- dc----w- C:\Users\Joey\AppData\Roaming\LP0ycA1iv2n4m5Q
2011-09-29 19:40:44 -------- dc----w- C:\Users\Joey\AppData\Roaming\TvS2ibF3pGaHdKf
2011-09-29 19:40:32 -------- dc----w- C:\Users\Joey\AppData\Roaming\E0ycA1ivDoFpHsJ
2011-09-29 19:40:20 -------- dc----w- C:\Users\Joey\AppData\Roaming\jaQH6dWK7R
2011-09-29 19:40:08 -------- dc----w- C:\Users\Joey\AppData\Roaming\GhYXwjUVeItPy
2011-09-29 19:39:56 -------- dc----w- C:\Users\Joey\AppData\Roaming\kONtxA0uc2b3n4
2011-09-29 19:39:44 -------- dc----w- C:\Users\Joey\AppData\Roaming\O1ivD2onFpHsJ
2011-09-29 19:39:31 -------- dc----w- C:\Users\Joey\AppData\Roaming\P3pnG4aQHsK
2011-09-29 19:39:20 -------- dc----w- C:\Users\Joey\AppData\Roaming\XjUVelIBtPyAuDo
2011-09-29 19:38:52 -------- dc----w- C:\Users\Joey\AppData\Roaming\NIVrzONtx0c
2011-09-29 19:38:41 -------- dc----w- C:\Users\Joey\AppData\Roaming\EjUCelIBrP
2011-09-29 19:38:17 -------- dc----w- C:\Users\Joey\AppData\Roaming\gmG5aQJ6dKfLhX
2011-09-29 19:38:05 -------- dc----w- C:\Users\Joey\AppData\Roaming\RNtxP0ucSiDoGa
2011-09-29 19:37:53 -------- dc----w- C:\Users\Joey\AppData\Roaming\tWK8fRL9hXjCkBz
2011-09-29 19:37:41 -------- dc----w- C:\Users\Joey\AppData\Roaming\bD3onF4am5W7E8R
2011-09-29 19:37:18 -------- dc----w- C:\Users\Joey\AppData\Roaming\REK8gRZ9hXjVlB
2011-09-29 19:37:06 -------- dc----w- C:\Users\Joey\AppData\Roaming\iWK7fRL9gXjCkVz
2011-09-29 19:36:53 -------- dc----w- C:\Users\Joey\AppData\Roaming\RWJ7dEL8gZhXkVl
2011-09-29 19:36:41 -------- dc----w- C:\Users\Joey\AppData\Roaming\vfRL9gTXqYeIr
2011-09-29 19:36:29 -------- dc----w- C:\Users\Joey\AppData\Roaming\C8gRZ9hYXjVlBzN
2011-09-29 19:36:17 -------- dc----w- C:\Users\Joey\AppData\Roaming\dA0ucS2ib3n4Q6W
2011-09-29 19:36:05 -------- dc----w- C:\Users\Joey\AppData\Roaming\zZ9hYXwjUe
2011-09-29 19:35:53 -------- dc----w- C:\Users\Joey\AppData\Roaming\zucS1ibD3n4m6W7
2011-09-29 19:35:41 -------- dc----w- C:\Users\Joey\AppData\Roaming\nvD2obF4pGsJ
2011-09-29 19:35:28 -------- dc----w- C:\Users\Joey\AppData\Roaming\RQH6sWK7fLgXjCk
2011-09-29 19:35:15 -------- dc----w- C:\Users\Joey\AppData\Roaming\vEL8gRZqhXkVlBz
2011-09-29 19:35:03 -------- dc----w- C:\Users\Joey\AppData\Roaming\ZxA1uvS2oFpGaJd
2011-09-29 19:34:50 -------- dc----w- C:\Users\Joey\AppData\Roaming\LkIVrlONtPuSiDo
2011-09-29 19:34:36 -------- dc----w- C:\Users\Joey\AppData\Roaming\pamH5sWJ7
2011-09-29 19:34:21 -------- dc----w- C:\Users\Joey\AppData\Roaming\tS1ivD3on4m5W
2011-09-29 19:34:08 -------- dc----w- C:\Users\Joey\AppData\Roaming\lBtzPNycAuDoFpG
2011-09-29 19:33:56 -------- dc----w- C:\Users\Joey\AppData\Roaming\J3pnG4aQH
2011-09-29 19:33:45 -------- dc----w- C:\Users\Joey\AppData\Roaming\DwjUCelIBzNx1v2
2011-09-29 19:33:32 -------- dc----w- C:\Users\Joey\AppData\Roaming\QpnG4aQH6W7E9T
2011-09-29 19:33:18 -------- dc----w- C:\Users\Joey\AppData\Roaming\ZrlOBtxP0c1v3n4
2011-09-29 19:33:06 -------- dc----w- C:\Users\Joey\AppData\Roaming\GaQJ6dWK8R9Tq
2011-09-29 19:32:54 -------- dc----w- C:\Users\Joey\AppData\Roaming\wOBtxP0yc1v3n4m
2011-09-29 19:32:43 -------- dc----w- C:\Users\Joey\AppData\Roaming\cS2ibD3pn4Q6W7E
2011-09-29 19:32:31 -------- dc----w- C:\Users\Joey\AppData\Roaming\nUVelIBtzNc1v2b
2011-09-29 19:32:20 -------- dc----w- C:\Users\Joey\AppData\Roaming\ukUVrlOBtPySiDo
2011-09-29 19:32:08 -------- dc----w- C:\Users\Joey\AppData\Roaming\yaQH6dWK7R9
2011-09-29 19:31:57 -------- dc----w- C:\Users\Joey\AppData\Roaming\ncA1ivD2o
2011-09-29 19:31:45 -------- dc----w- C:\Users\Joey\AppData\Roaming\q9gTZqjYCkVlNx0
2011-09-29 19:31:31 -------- dc----w- C:\Users\Joey\AppData\Roaming\KBtxP0ycSiDoF
2011-09-29 19:31:19 -------- dc----w- C:\Users\Joey\AppData\Roaming\r9hTXwjUClBzNx1
2011-09-29 19:31:08 -------- dc----w- C:\Users\Joey\AppData\Roaming\zBtzP0ycAiDoF
2011-09-29 19:30:56 -------- dc----w- C:\Users\Joey\AppData\Roaming\fA0ucS2ib3n4Q6W
2011-09-29 19:30:45 -------- dc----w- C:\Users\Joey\AppData\Roaming\TyxA1uvS2b3m
2011-09-29 19:30:33 -------- dc----w- C:\Users\Joey\AppData\Roaming\NonF4amH5W7E8Rq
2011-09-29 19:30:22 -------- dc----w- C:\Users\Joey\AppData\Roaming\nQH6dWK7fLgXjCk
2011-09-29 19:30:11 -------- dc----w- C:\Users\Joey\AppData\Roaming\dlIBrzPNyAuSoFp
2011-09-29 19:29:59 -------- dc----w- C:\Users\Joey\AppData\Roaming\KvD3onF4aHsJdLg
2011-09-29 19:29:48 -------- dc----w- C:\Users\Joey\AppData\Roaming\ZS2ibF3pn
2011-09-29 19:29:36 -------- dc----w- C:\Users\Joey\AppData\Roaming\NmG5sQJ6dKfZhXj
2011-09-29 19:29:25 -------- dc----w- C:\Users\Joey\AppData\Roaming\dH6sWJ7fE8Tq
2011-09-29 19:29:14 -------- dc----w- C:\Users\Joey\AppData\Roaming\hVrzONtxAuSiDpG
2011-09-29 19:29:02 -------- dc----w- C:\Users\Joey\AppData\Roaming\s5sQJ7dEKgZhXjV
2011-09-29 19:28:50 -------- dc----w- C:\Users\Joey\AppData\Roaming\p6sWK7fELgZjCkV
2011-09-29 19:28:38 -------- dc----w- C:\Users\Joey\AppData\Roaming\W4pmG5sQJdKfZhX
2011-09-29 19:28:26 -------- dc----w- C:\Users\Joey\AppData\Roaming\tmH6sWJ7fLgZh
2011-09-29 19:28:15 -------- dc----w- C:\Users\Joey\AppData\Roaming\mRL9hTXqjC
2011-09-29 19:28:04 -------- dc----w- C:\Users\Joey\AppData\Roaming\ZUVelIBtzNc1v2b
2011-09-29 19:27:52 -------- dc----w- C:\Users\Joey\AppData\Roaming\qqjYCwkIV
2011-09-29 19:27:40 -------- dc----w- C:\Users\Joey\AppData\Roaming\DG5aQJ6dW8R9TqU
2011-09-29 19:27:28 -------- dc----w- C:\Users\Joey\AppData\Roaming\wnG4amH6sJfLg
2011-09-29 19:27:15 -------- dc----w- C:\Users\Joey\AppData\Roaming\delOBtzP0c1v2n4
2011-09-29 19:27:03 -------- dc----w- C:\Users\Joey\AppData\Roaming\sL9gTZqjYwIrOt
2011-09-29 19:26:50 -------- dc----w- C:\Users\Joey\AppData\Roaming\ERZqhYXwkVlBz
2011-09-29 19:26:37 -------- dc----w- C:\Users\Joey\AppData\Roaming\gL9hTXqjUeI
2011-09-29 19:26:24 -------- dc----w- C:\Users\Joey\AppData\Roaming\dqjYCwkIVlNx
2011-09-29 19:26:12 -------- dc----w- C:\Users\Joey\AppData\Roaming\rJ7dEK8gR9YwUeI
2011-09-29 19:26:00 -------- dc----w- C:\Users\Joey\AppData\Roaming\sYCwkIVrlNx0c1b
2011-09-29 19:25:45 -------- dc----w- C:\Users\Joey\AppData\Roaming\iaQH6sWK7E9Tq
2011-09-29 19:25:33 -------- dc----w- C:\Users\Joey\AppData\Roaming\dQJ6dEK8f
2011-09-29 19:25:20 -------- dc----w- C:\Users\Joey\AppData\Roaming\m7fRL9gTXj
2011-09-29 19:25:09 -------- dc----w- C:\Users\Joey\AppData\Roaming\qEK8fRZ9hXjC
2011-09-29 19:24:58 -------- dc----w- C:\Users\Joey\AppData\Roaming\avD2onF4pHsJdKg
2011-09-29 19:24:47 -------- dc----w- C:\Users\Joey\AppData\Roaming\P1ibD3onGaHsJfL
2011-09-29 19:24:37 -------- dc----w- C:\Users\Joey\AppData\Roaming\LQH6dWK7fLgXjC
2011-09-29 19:24:26 -------- dc----w- C:\Users\Joey\AppData\Roaming\VXqjUCekI
2011-09-29 19:24:15 -------- dc----w- C:\Users\Joey\AppData\Roaming\hEK8gRZ9hXjVlBz
2011-09-29 19:24:04 -------- dc----w- C:\Users\Joey\AppData\Roaming\nJ7fEL8gTqYwUrO
2011-09-29 19:23:53 -------- dc----w- C:\Users\Joey\AppData\Roaming\s3pnG4aQHsKfLgZ
2011-09-29 19:23:42 -------- dc----w- C:\Users\Joey\AppData\Roaming\UpmG5aQJ6W8R9Tq
2011-09-29 19:23:32 -------- dc----w- C:\Users\Joey\AppData\Roaming\hzPNycA1u
2011-09-29 19:23:21 -------- dc----w- C:\Users\Joey\AppData\Roaming\vdEK8gRZ9Y
2011-09-29 19:23:11 -------- dc----w- C:\Users\Joey\AppData\Roaming\zZqhYCwkUrOtPyS
2011-09-29 19:22:49 -------- dc----w- C:\Users\Joey\AppData\Roaming\NhTXqjUCeIrOyAu
2011-09-29 19:22:37 -------- dc----w- C:\Users\Joey\AppData\Roaming\NBtzP0ycAiDoFpH
2011-09-29 19:22:27 -------- dc----w- C:\Users\Joey\AppData\Roaming\OF4amH5sW7E8R
2011-09-29 19:22:16 -------- dc----w- C:\Users\Joey\AppData\Roaming\j6sWK7fELgZjCkV
2011-09-29 19:22:05 -------- dc----w- C:\Users\Joey\AppData\Roaming\a5aQJ6dWKfLhXjC
2011-09-29 19:21:54 -------- dc----w- C:\Users\Joey\AppData\Roaming\ghTXwjUCeIrPyA
2011-09-29 19:21:43 -------- dc----w- C:\Users\Joey\AppData\Roaming\AsWJ7dEL8
2011-09-29 19:21:32 -------- dc----w- C:\Users\Joey\AppData\Roaming\bbD3pnG4aHsKfLg
2011-09-29 19:21:21 -------- dc----w- C:\Users\Joey\AppData\Roaming\PaQH6dWK7R9
2011-09-29 19:21:10 -------- dc----w- C:\Users\Joey\AppData\Roaming\rIBtzPNyc1v2b4m
2011-09-29 19:20:59 -------- dc----w- C:\Users\Joey\AppData\Roaming\JmH6sWJ7fLgZhCk
2011-09-29 19:20:48 -------- dc----w- C:\Users\Joey\AppData\Roaming\fcS2ibD3pGaHs
2011-09-29 19:20:37 -------- dc----w- C:\Users\Joey\AppData\Roaming\HdEK8fRZ9TwUeI
2011-09-29 19:20:26 -------- dc----w- C:\Users\Joey\AppData\Roaming\A1ivD3onFaHsJdL
2011-09-29 19:20:14 -------- dc----w- C:\Users\Joey\AppData\Roaming\xTZqjYCwkVl
2011-09-29 19:20:03 -------- dc----w- C:\Users\Joey\AppData\Roaming\O8fRL9hTXj
2011-09-29 19:19:53 -------- dc----w- C:\Users\Joey\AppData\Roaming\AmH5sQJ7dKgZhXj
2011-09-29 19:19:41 -------- dc----w- C:\Users\Joey\AppData\Roaming\hS1ibD3on4m6W7E
2011-09-29 19:19:30 -------- dc----w- C:\Users\Joey\AppData\Roaming\ZqjUCekIBzNx
2011-09-29 19:19:19 -------- dc----w- C:\Users\Joey\AppData\Roaming\BobF4pmG5Q6E8R9
2011-09-29 19:19:07 -------- dc----w- C:\Users\Joey\AppData\Roaming\o0ucS1ibDoGaHsJ
2011-09-29 19:18:55 -------- dc----w- C:\Users\Joey\AppData\Roaming\BrzPNyxA1v2b3m5
2011-09-29 19:18:44 -------- dc----w- C:\Users\Joey\AppData\Roaming\g2onF4pmHsJdKgZ
2011-09-29 19:18:33 -------- dc----w- C:\Users\Joey\AppData\Roaming\cONtxP0uc1b3
2011-09-29 19:18:21 -------- dc----w- C:\Users\Joey\AppData\Roaming\u2obF3pmG
2011-09-29 19:18:10 -------- dc----w- C:\Users\Joey\AppData\Roaming\NF4pmH5sQ7E8R9Y
2011-09-29 19:17:58 -------- dc----w- C:\Users\Joey\AppData\Roaming\xK7fEL9gTqYwIr
2011-09-29 19:17:45 -------- dc----w- C:\Users\Joey\AppData\Roaming\XnF4amH5sJ
2011-09-29 19:17:33 -------- dc----w- C:\Users\Joey\AppData\Roaming\nbF3pmG5aJdKfLh
2011-09-29 19:17:20 -------- dc----w- C:\Users\Joey\AppData\Roaming\VjYCwkIVrOtPuSi
2011-09-29 19:17:08 -------- dc----w- C:\Users\Joey\AppData\Roaming\YJ6dWK8fR9TqU
2011-09-29 19:16:56 -------- dc----w- C:\Users\Joey\AppData\Roaming\ixP0ycS1iDoFaHs
2011-09-29 19:16:45 -------- dc----w- C:\Users\Joey\AppData\Roaming\HXqjYCekIrOtAuS
2011-09-29 19:16:33 -------- dc----w- C:\Users\Joey\AppData\Roaming\pobF4pmG5
2011-09-29 19:16:22 -------- dc----w- C:\Users\Joey\AppData\Roaming\FxP0ucS1i
2011-09-29 19:16:10 -------- dc----w- C:\Users\Joey\AppData\Roaming\BekIBrzONx
2011-09-29 19:15:58 -------- dc----w- C:\Users\Joey\AppData\Roaming\d8gRZqhYX
2011-09-29 19:15:44 -------- dc----w- C:\Users\Joey\AppData\Roaming\WWJ7dEL8gZhX
2011-09-29 19:15:29 -------- dc----w- C:\Users\Joey\AppData\Roaming\OivD2onF4m
2011-09-29 19:15:18 -------- dc----w- C:\Users\Joey\AppData\Roaming\W3pnG4aQHsKfLgZ
2011-09-29 19:15:06 -------- dc----w- C:\Users\Joey\AppData\Roaming\jQJ6dWK8fLhXj
2011-09-29 19:14:55 -------- dc----w- C:\Users\Joey\AppData\Roaming\T4pmH5sQJdKg
2011-09-29 19:14:44 -------- dc----w- C:\Users\Joey\AppData\Roaming\JTZqjYCwkVlN
2011-09-29 19:14:33 -------- dc----w- C:\Users\Joey\AppData\Roaming\j9gTXqjYCkVzN
2011-09-29 19:14:23 -------- dc----w- C:\Users\Joey\AppData\Roaming\kXwjUCelIrPyAuS
2011-09-29 19:14:12 -------- dc----w- C:\Users\Joey\AppData\Roaming\wA1ivD2on4m5Q
2011-09-29 19:14:01 -------- dc----w- C:\Users\Joey\AppData\Roaming\s0ycS1ivDoFaHs
2011-09-29 19:13:49 -------- dc----w- C:\Users\Joey\AppData\Roaming\ExA0uvS2iFpGaHd
2011-09-29 19:13:38 -------- dc----w- C:\Users\Joey\AppData\Roaming\zXwjUVelItPyA
2011-09-29 19:13:27 -------- dc----w- C:\Users\Joey\AppData\Roaming\O4amH5sWJdLgZhX
2011-09-29 19:13:17 -------- dc----w- C:\Users\Joey\AppData\Roaming\gYCwkIVrlNx0c1b
2011-09-29 19:13:06 -------- dc----w- C:\Users\Joey\AppData\Roaming\A9gTZqjYCkVl
2011-09-29 19:12:56 -------- dc----w- C:\Users\Joey\AppData\Roaming\OnG5aQH6dKfLgXj
2011-09-29 19:12:45 -------- dc----w- C:\Users\Joey\AppData\Roaming\hwjUCelIBzNx1v2
2011-09-29 19:12:35 -------- dc----w- C:\Users\Joey\AppData\Roaming\bPNycA1uv2b4m5Q
2011-09-29 19:12:24 -------- dc----w- C:\Users\Joey\AppData\Roaming\zWJ7dEL8gZhXkVl
2011-09-29 19:12:14 -------- dc----w- C:\Users\Joey\AppData\Roaming\OVrlONtxPuSiDoG
2011-09-29 19:12:03 -------- dc----w- C:\Users\Joey\AppData\Roaming\Z4aQH6sWKfLgZjC
2011-09-29 19:11:52 -------- dc----w- C:\Users\Joey\AppData\Roaming\QUCekIBrzNx0v2b
2011-09-29 19:11:42 -------- dc----w- C:\Users\Joey\AppData\Roaming\RsQJ6dEK8R9TwUe
2011-09-29 19:11:31 -------- dc----w- C:\Users\Joey\AppData\Roaming\tIBtzPNyc1v2b4m
2011-09-29 19:11:21 -------- dc----w- C:\Users\Joey\AppData\Roaming\aXwkUVelOtPyA
2011-09-29 19:11:11 -------- dc----w- C:\Users\Joey\AppData\Roaming\Z6sWJ7fELgZhCkV
2011-09-29 19:11:00 -------- dc----w- C:\Users\Joey\AppData\Roaming\EucS1ibD3n4m6W7
2011-09-29 19:10:50 -------- dc----w- C:\Users\Joey\AppData\Roaming\G3pnG5aQHdKfL
2011-09-29 19:10:39 -------- dc----w- C:\Users\Joey\AppData\Roaming\HG5sQJ6dE8R9TwU
2011-09-29 19:10:28 -------- dc----w- C:\Users\Joey\AppData\Roaming\HXwjUVelItPyAu
2011-09-29 19:10:18 -------- dc----w- C:\Users\Joey\AppData\Roaming\e3onF4amHsJdLg
2011-09-29 19:10:07 -------- dc----w- C:\Users\Joey\AppData\Roaming\l4aQH6sWKfLgZjC
2011-09-29 19:09:56 -------- dc----w- C:\Users\Joey\AppData\Roaming\n5aQH6dWKfLgXjC
2011-09-29 19:09:45 -------- dc----w- C:\Users\Joey\AppData\Roaming\w8fRZ9hTXjClB
2011-09-29 19:09:34 -------- dc----w- C:\Users\Joey\AppData\Roaming\hWJ7dEL8gZhX
2011-09-29 19:09:23 -------- dc----w- C:\Users\Joey\AppData\Roaming\k3onG4amHsJfLgZ
2011-09-29 19:09:12 -------- dc----w- C:\Users\Joey\AppData\Roaming\XS2ibF3pn5Q6W7R
2011-09-29 19:09:02 -------- dc----w- C:\Users\Joey\AppData\Roaming\tsQJ6dEK8R9TwUe
2011-09-29 19:08:51 -------- dc----w- C:\Users\Joey\AppData\Roaming\VpmH5sQJ7E8R9Yw
2011-09-29 19:08:40 -------- dc----w- C:\Users\Joey\AppData\Roaming\RCwkUVrlOtPySi
2011-09-29 19:08:29 -------- dc----w- C:\Users\Joey\AppData\Roaming\gkIVrzONtAuSiDp
2011-09-29 19:08:19 -------- dc----w- C:\Users\Joey\AppData\Roaming\nL9gTXqjY
2011-09-29 19:08:08 -------- dc----w- C:\Users\Joey\AppData\Roaming\txA1uvS2oFpGaJd
2011-09-29 19:07:58 -------- dc----w- C:\Users\Joey\AppData\Roaming\OjUVelIBtPyAu
2011-09-29 19:07:48 -------- dc----w- C:\Users\Joey\AppData\Roaming\vH5sQJ7dE8R9YwU
2011-09-29 19:07:36 -------- dc----w- C:\Users\Joey\AppData\Roaming\o1ibD3onGaH
2011-09-29 19:07:26 -------- dc----w- C:\Users\Joey\AppData\Roaming\PgTXqjYCeIr
2011-09-29 19:07:14 -------- dc----w- C:\Users\Joey\AppData\Roaming\IhTXwjUCeIrPyAu
2011-09-29 19:07:04 -------- dc----w- C:\Users\Joey\AppData\Roaming\DhYXwkUVeOtPyAi
2011-09-29 19:06:53 -------- dc----w- C:\Users\Joey\AppData\Roaming\CNtxP0ucSiDoGa
2011-09-29 19:06:42 -------- dc----w- C:\Users\Joey\AppData\Roaming\qpnG4aQH6
2011-09-29 19:06:32 -------- dc----w- C:\Users\Joey\AppData\Roaming\EdWK8fRL9TqUeIr
2011-09-29 19:06:21 -------- dc----w- C:\Users\Joey\AppData\Roaming\delIBtzPNc1v
2011-09-29 19:06:10 -------- dc----w- C:\Users\Joey\AppData\Roaming\gRZqhYXwkVlBz0c
2011-09-29 19:05:59 -------- dc----w- C:\Users\Joey\AppData\Roaming\E7fEL9gTZjCkVlN
2011-09-29 19:05:48 -------- dc----w- C:\Users\Joey\AppData\Roaming\gRL9gTXqjCk
2011-09-29 19:05:36 -------- dc----w- C:\Users\Joey\AppData\Roaming\WdEL8gRZqYwUeOt
2011-09-29 19:05:24 -------- dc----w- C:\Users\Joey\AppData\Roaming\NS2ibF3pn5Q6W7
2011-09-29 19:05:13 -------- dc----w- C:\Users\Joey\AppData\Roaming\qbF3pmG5aJdKfLh
2011-09-29 19:05:03 -------- dc----w- C:\Users\Joey\AppData\Roaming\I2obF4pmGsJdKfZ
2011-09-29 19:04:52 -------- dc----w- C:\Users\Joey\AppData\Roaming\znF4amH5sJdLgZh
2011-09-29 19:04:41 -------- dc----w- C:\Users\Joey\AppData\Roaming\j6sWJ7fELg
2011-09-29 19:04:31 -------- dc----w- C:\Users\Joey\AppData\Roaming\KzONtxA0uS
2011-09-29 19:04:20 -------- dc----w- C:\Users\Joey\AppData\Roaming\STXqjUCekBzNx0v
2011-09-29 19:04:10 -------- dc----w- C:\Users\Joey\AppData\Roaming\uyxA1uvS2b3m
2011-09-29 19:03:59 -------- dc----w- C:\Users\Joey\AppData\Roaming\GhYXwjUVeItPyAu
2011-09-29 19:03:49 -------- dc----w- C:\Users\Joey\AppData\Roaming\sL8gRZqhYwU
2011-09-29 19:03:39 -------- dc----w- C:\Users\Joey\AppData\Roaming\BivD3onF4m5W7
2011-09-29 19:03:28 -------- dc----w- C:\Users\Joey\AppData\Roaming\UkIVrlONtPuSiDo
2011-09-29 19:03:18 -------- dc----w- C:\Users\Joey\AppData\Roaming\lqjYCekIVzNx
2011-09-29 19:02:52 -------- dc----w- C:\Users\Joey\AppData\Roaming\UvS2obF3pGaJdKf
2011-09-29 19:02:42 -------- dc----w- C:\Users\Joey\AppData\Roaming\G5sQJ6dEKfZhX
2011-09-29 19:02:32 -------- dc----w- C:\Users\Joey\AppData\Roaming\g7dEK8gRZhXjVl
2011-09-29 19:02:21 -------- dc----w- C:\Users\Joey\AppData\Roaming\dvD3onF4aHsJdLg
2011-09-29 19:02:11 -------- dc----w- C:\Users\Joey\AppData\Roaming\ogTZqhYCwUrOtPy
2011-09-29 19:02:00 -------- dc----w- C:\Users\Joey\AppData\Roaming\WpnG4aQH6W7E9Tq
2011-09-29 19:01:50 -------- dc----w- C:\Users\Joey\AppData\Roaming\rUCekIBrzNx0v2b
2011-09-29 19:01:40 -------- dc----w- C:\Users\Joey\AppData\Roaming\Q2ibF3pnGaHdKf
2011-09-29 19:01:30 -------- dc----w- C:\Users\Joey\AppData\Roaming\kekIBrzONx0v2b
2011-09-29 19:01:20 -------- dc----w- C:\Users\Joey\AppData\Roaming\mobF3pmG5Q6W8R9
2011-09-29 19:01:10 -------- dc----w- C:\Users\Joey\AppData\Roaming\PCelIBrzPyAuSoF
2011-09-29 19:01:00 -------- dc----w- C:\Users\Joey\AppData\Roaming\K2obF3pmGaJdK
2011-09-29 19:00:50 -------- dc----w- C:\Users\Joey\AppData\Roaming\JTXwjUCel
2011-09-29 19:00:41 -------- dc----w- C:\Users\Joey\AppData\Roaming\JobF4pmG5Q6E8R9
2011-09-29 19:00:31 -------- dc----w- C:\Users\Joey\AppData\Roaming\pPNyxA1uv
2011-09-29 19:00:21 -------- dc----w- C:\Users\Joey\AppData\Roaming\sXwjUCelIrP
2011-09-29 19:00:12 -------- dc----w- C:\Users\Joey\AppData\Roaming\IQJ6dEK8fZhX
2011-09-29 19:00:02 -------- dc----w- C:\Users\Joey\AppData\Roaming\G1uvS2obFpGaJ
2011-09-29 18:59:52 -------- dc----w- C:\Users\Joey\AppData\Roaming\JelIBrzPNx1v2b3
2011-09-29 18:59:42 -------- dc----w- C:\Users\Joey\AppData\Roaming\delIBrzPN
2011-09-29 18:59:32 -------- dc----w- C:\Users\Joey\AppData\Roaming\melIBrzPNx1v2b3
2011-09-29 18:59:22 -------- dc----w- C:\Users\Joey\AppData\Roaming\lcA1ivD2oFpHsJd
2011-09-29 18:59:11 -------- dc----w- C:\Users\Joey\AppData\Roaming\UwkUVrlOBx0c1v3
2011-09-29 18:59:01 -------- dc----w- C:\Users\Joey\AppData\Roaming\hsWJ7fEL8
2011-09-29 18:58:51 -------- dc----w- C:\Users\Joey\AppData\Roaming\LWK7fEL9gZjCkVl
2011-09-29 18:58:41 -------- dc----w- C:\Users\Joey\AppData\Roaming\GYCekIVrzNx0c
2011-09-29 18:58:30 -------- dc----w- C:\Users\Joey\AppData\Roaming\zWK7fRL9gXjCkVz
2011-09-29 18:58:20 -------- dc----w- C:\Users\Joey\AppData\Roaming\kdWK8fRL9TqUeIr
2011-09-29 18:58:10 -------- dc----w- C:\Users\Joey\AppData\Roaming\zsQJ6dEK8R9Tw
2011-09-29 18:58:00 -------- dc----w- C:\Users\Joey\AppData\Roaming\j5sQJ6dEKf
2011-09-29 18:57:50 -------- dc----w- C:\Users\Joey\AppData\Roaming\H7dEK8gRZhX
2011-09-29 18:57:40 -------- dc----w- C:\Users\Joey\AppData\Roaming\SwkUVelOBz0c1v2
2011-09-29 18:57:29 -------- dc----w- C:\Users\Joey\AppData\Roaming\qJ7dEL8gRqYwUeO
2011-09-29 18:57:19 -------- dc----w- C:\Users\Joey\AppData\Roaming\r3onF4amH
2011-09-29 18:57:09 -------- dc----w- C:\Users\Joey\AppData\Roaming\YonG4amH6W7E8Tq
2011-09-29 18:56:49 -------- dc----w- C:\Users\Joey\AppData\Roaming\bS1ibD3on4m
2011-09-29 18:56:40 -------- dc----w- C:\Users\Joey\AppData\Roaming\QEL9gTZqjCkVlNx
2011-09-29 18:56:30 -------- dc----w- C:\Users\Joey\AppData\Roaming\TxA0ucS2iDpGaHs
2011-09-29 18:56:20 -------- dc----w- C:\Users\Joey\AppData\Roaming\X3pnG4aQHsKfLgZ
2011-09-29 18:56:10 -------- dc----w- C:\Users\Joey\AppData\Roaming\cVrzONtxAuSiDpG
2011-09-29 18:56:00 -------- dc----w- C:\Users\Joey\AppData\Roaming\u0uvS2ibFpGaHdK
2011-09-29 18:55:50 -------- dc----w- C:\Users\Joey\AppData\Roaming\qvS2ibF3pGaHdKf
2011-09-29 18:55:39 -------- dc----w- C:\Users\Joey\AppData\Roaming\fNycA1uvDoFpGsJ
2011-09-29 18:55:29 -------- dc----w- C:\Users\Joey\AppData\Roaming\dVelIBtzP
2011-09-29 18:55:19 -------- dc----w- C:\Users\Joey\AppData\Roaming\e6dEK8fRZhXjClB
2011-09-29 18:55:10 -------- dc----w- C:\Users\Joey\AppData\Roaming\fA1uvD2ob4m5Q6E
2011-09-29 18:55:00 -------- dc----w- C:\Users\Joey\AppData\Roaming\kEK8gRZ9hXjVlBz
2011-09-29 18:54:35 -------- dc----w- C:\Users\Joey\AppData\Roaming\QivD2onF4m5
2011-09-29 18:54:25 -------- dc----w- C:\Users\Joey\AppData\Roaming\ElOBtzP0yAiDo
2011-09-29 18:54:16 -------- dc----w- C:\Users\Joey\AppData\Roaming\GNycA1uvDo
2011-09-29 18:54:07 -------- dc----w- C:\Users\Joey\AppData\Roaming\evD2obF4pGsJdKf
2011-09-29 18:53:42 -------- dc----w- C:\Users\Joey\AppData\Roaming\BzPNycA1uDoFpGs
2011-09-29 18:53:32 -------- dc----w- C:\Users\Joey\AppData\Roaming\lF4pmG5sQ
2011-09-29 18:53:23 -------- dc----w- C:\Users\Joey\AppData\Roaming\t4pmG5sQJdKfZhX
2011-09-29 18:53:13 -------- dc----w- C:\Users\Joey\AppData\Roaming\PK8fRZ9hTwUeIrP
2011-09-29 18:53:03 -------- dc----w- C:\Users\Joey\AppData\Roaming\CelIBtzPNc1v2b
2011-09-29 18:52:53 -------- dc----w- C:\Users\Joey\AppData\Roaming\yBtzP0ycAiDoFp
2011-09-29 18:52:43 -------- dc----w- C:\Users\Joey\AppData\Roaming\pH5sQJ7dE
2011-09-29 18:52:33 -------- dc----w- C:\Users\Joey\AppData\Roaming\zivD3onF4m5W7E8
2011-09-29 18:52:20 -------- dc----w- C:\Users\Joey\AppData\Roaming\uelIBtzPNc1v2b4
2011-09-29 18:52:04 -------- dc----w- C:\Users\Joey\AppData\Roaming\T4amH5sWJdLgZhX
2011-09-29 18:51:50 -------- dc----w- C:\Users\Joey\AppData\Roaming\vUVelOBtz0
2011-09-29 18:51:38 -------- dc----w- C:\Users\Joey\AppData\Roaming\psWK7fEL9TqYwIr
2011-09-29 18:51:28 -------- dc----w- C:\Users\Joey\AppData\Roaming\HqjYCekIVzN
2011-09-29 18:51:18 -------- dc----w- C:\Users\Joey\AppData\Roaming\k5aQH6dWKfL
2011-09-29 18:51:08 -------- dc----w- C:\Users\Joey\AppData\Roaming\X0uvS2ibFpGaHdK
2011-09-29 18:50:57 -------- dc----w- C:\Users\Joey\AppData\Roaming\WEK8fRZ9hXjClBz
2011-09-29 18:50:47 -------- dc----w- C:\Users\Joey\AppData\Roaming\p7dEK8gRZhXj
2011-09-29 18:50:37 -------- dc----w- C:\Users\Joey\AppData\Roaming\phYXwjUVeItPyAu
2011-09-29 18:50:27 -------- dc----w- C:\Users\Joey\AppData\Roaming\BUVelOBtz0c1v2n
2011-09-29 18:50:17 -------- dc----w- C:\Users\Joey\AppData\Roaming\uD3onF4am
2011-09-29 18:50:07 -------- dc----w- C:\Users\Joey\AppData\Roaming\QmH5sWJ7dLg
2011-09-29 18:49:57 -------- dc----w- C:\Users\Joey\AppData\Roaming\EnG4amH6sJfLgZh
2011-09-29 18:49:47 -------- dc----w- C:\Users\Joey\AppData\Roaming\xgTZqjYCwIrOtP
2011-09-29 18:49:36 -------- dc----w- C:\Users\Joey\AppData\Roaming\eL9gTZqjYwI
2011-09-29 18:49:26 -------- dc----w- C:\Users\Joey\AppData\Roaming\PfRL9gTXqYeIrOt
2011-09-29 18:49:16 -------- dc----w- C:\Users\Joey\AppData\Roaming\c6dWK8fRLhXjCkB
2011-09-29 18:49:05 -------- dc----w- C:\Users\Joey\AppData\Roaming\sJ6dEK8fR9TwUeI
2011-09-29 18:48:53 -------- dc----w- C:\Users\Joey\AppData\Roaming\dL9gTZqjYwIrOtP
2011-09-29 18:48:42 -------- dc----w- C:\Users\Joey\AppData\Roaming\LqjUCekIBzNx0v2
2011-09-29 18:48:32 -------- dc----w- C:\Users\Joey\AppData\Roaming\RrzONyxA0v2
2011-09-29 18:48:22 -------- dc----w- C:\Users\Joey\AppData\Roaming\uF3pmG5aQ6W8R9T
2011-09-29 18:48:12 -------- dc----w- C:\Users\Joey\AppData\Roaming\u6dEK8fRZhXjClB
2011-09-29 18:48:02 -------- dc----w- C:\Users\Joey\AppData\Roaming\ES2obF3pm5Q6W8R
2011-09-29 18:47:52 -------- dc----w- C:\Users\Joey\AppData\Roaming\R5sQJ6dEKfZ
2011-09-29 18:47:42 -------- dc----w- C:\Users\Joey\AppData\Roaming\isQJ7dEK8R
2011-09-29 18:47:32 -------- dc----w- C:\Users\Joey\AppData\Roaming\gjUVelIBtPyAuDo
2011-09-29 18:47:22 -------- dc----w- C:\Users\Joey\AppData\Roaming\S7dEK8gRZhXjVlB
2011-09-29 18:46:58 -------- dc----w- C:\Users\Joey\AppData\Roaming\uD2onF4pm5Q7E8R
2011-09-29 18:46:48 -------- dc----w- C:\Users\Joey\AppData\Roaming\bnF4pmH5sJd
2011-09-29 18:46:38 -------- dc----w- C:\Users\Joey\AppData\Roaming\TRZqhYXwkVlBz0c
2011-09-29 18:46:29 -------- dc----w- C:\Users\Joey\AppData\Roaming\p7dEK8gRZ
2011-09-29 18:46:19 -------- dc----w- C:\Users\Joey\AppData\Roaming\JF4pmH5sQ7E8
2011-09-29 18:46:09 -------- dc----w- C:\Users\Joey\AppData\Roaming\y1ivD2onFpHsJdK
2011-09-29 18:46:00 -------- dc----w- C:\Users\Joey\AppData\Roaming\ielIBtzPNc1v2b4
2011-09-29 18:45:50 -------- dc----w- C:\Users\Joey\AppData\Roaming\XF4pmH5sQ7E8R
2011-09-29 18:45:40 -------- dc----w- C:\Users\Joey\AppData\Roaming\CpmH5sQJ7E8R9Yw
2011-09-29 18:45:31 -------- dc----w- C:\Users\Joey\AppData\Roaming\GdEK8fRZ9TwUeIr
2011-09-29 18:45:21 -------- dc----w- C:\Users\Joey\AppData\Roaming\lG5sQJ6dE8R9
2011-09-29 18:45:12 -------- dc----w- C:\Users\Joey\AppData\Roaming\L4pmG5sQJdKfZhX
2011-09-29 18:45:02 -------- dc----w- C:\Users\Joey\AppData\Roaming\LdEK8gRZ9YwUeIt
2011-09-29 18:44:52 -------- dc----w- C:\Users\Joey\AppData\Roaming\vG5sQJ6dE8R9T
2011-09-29 18:44:42 -------- dc----w- C:\Users\Joey\AppData\Roaming\nsQJ6dEK8
2011-09-29 18:44:33 -------- dc----w- C:\Users\Joey\AppData\Roaming\auvD2obF4m
2011-09-29 18:44:23 -------- dc----w- C:\Users\Joey\AppData\Roaming\nzPNyxA1uSoFpGa
2011-09-29 18:44:14 -------- dc----w- C:\Users\Joey\AppData\Roaming\EbF3pmG5aJdKfLh
2011-09-29 18:44:05 -------- dc----w- C:\Users\Joey\AppData\Roaming\YCekIBrzOy
2011-09-29 18:43:55 -------- dc----w- C:\Users\Joey\AppData\Roaming\yqjYCekIVzNx0c2
2011-09-29 18:43:46 -------- dc----w- C:\Users\Joey\AppData\Roaming\ekIVrzONtAuSiD
2011-09-29 18:43:36 -------- dc----w- C:\Users\Joey\AppData\Roaming\TtxA0ucS2b3n
2011-09-29 18:43:27 -------- dc----w- C:\Users\Joey\AppData\Roaming\usWJ7fEL8TqYwUr
2011-09-29 18:43:18 -------- dc----w- C:\Users\Joey\AppData\Roaming\LibD3onG4m6W7E8
2011-09-29 18:43:07 -------- dc----w- C:\Users\Joey\AppData\Roaming\yWK7fEL9gZj
2011-09-29 18:42:58 -------- dc----w- C:\Users\Joey\AppData\Roaming\BTZqjYCwkV
2011-09-29 18:42:48 -------- dc----w- C:\Users\Joey\AppData\Roaming\GG4amH6sW7
2011-09-29 18:42:39 -------- dc----w- C:\Users\Joey\AppData\Roaming\S6sWJ7fELgZhCkV
2011-09-29 18:42:30 -------- dc----w- C:\Users\Joey\AppData\Roaming\frlOBtxP0c1v3
2011-09-29 18:42:20 -------- dc----w- C:\Users\Joey\AppData\Roaming\hgRZqhYXwUeOtPy
2011-09-29 18:42:09 -------- dc----w- C:\Users\Joey\AppData\Roaming\X0ucS1ibDoGaH
2011-09-29 18:41:45 -------- dc----w- C:\Users\Joey\AppData\Roaming\G4aQH6sWKfLgZ
2011-09-29 18:41:35 -------- dc----w- C:\Users\Joey\AppData\Roaming\BfEL9gTZqYwIr
2011-09-29 18:41:25 -------- dc----w- C:\Users\Joey\AppData\Roaming\wtxA0ucS2b3n4Q6
2011-09-29 18:41:16 -------- dc----w- C:\Users\Joey\AppData\Roaming\kamH6sWJ7E8
2011-09-29 18:41:07 -------- dc----w- C:\Users\Joey\AppData\Roaming\HL8gTZqhYwU
2011-09-29 18:40:57 -------- dc----w- C:\Users\Joey\AppData\Roaming\x1ibD3onGaHsJfL
2011-09-29 18:40:47 -------- dc----w- C:\Users\Joey\AppData\Roaming\YYCwkUVrlBx0c1v
2011-09-29 18:40:37 -------- dc----w- C:\Users\Joey\AppData\Roaming\dxP0ucS1iDoG
2011-09-29 18:40:28 -------- dc----w- C:\Users\Joey\AppData\Roaming\IxP0ucS1iDoGaHs
2011-09-29 18:40:18 -------- dc----w- C:\Users\Joey\AppData\Roaming\VfEL8gTZqYwUrOt
2011-09-29 18:40:09 -------- dc----w- C:\Users\Joey\AppData\Roaming\EOBtxP0yc1v3n4m
2011-09-29 18:39:59 -------- dc----w- C:\Users\Joey\AppData\Roaming\FmH5sWJ7dLgZ
2011-09-29 18:39:50 -------- dc----w- C:\Users\Joey\AppData\Roaming\l3onF4amHsJdLgZ
2011-09-29 18:39:40 -------- dc----w- C:\Users\Joey\AppData\Roaming\VwkUVelOBz0c1v2
2011-09-29 18:39:30 -------- dc----w- C:\Users\Joey\AppData\Roaming\uVrlOBtxPySiDoF
2011-09-29 18:39:20 -------- dc----w- C:\Users\Joey\AppData\Roaming\KrlOBtxP0c
2011-09-29 18:39:11 -------- dc----w- C:\Users\Joey\AppData\Roaming\tP0ycA1iv2n4m5Q
2011-09-29 18:39:01 -------- dc----w- C:\Users\Joey\AppData\Roaming\kivD2onF4m5Q7E8
2011-09-29 18:38:52 -------- dc----w- C:\Users\Joey\AppData\Roaming\AQJ7dEK8gZhXjVl
2011-09-29 18:38:43 -------- dc----w- C:\Users\Joey\AppData\Roaming\mWK8fRL9hXjCk
2011-09-29 18:38:34 -------- dc----w- C:\Users\Joey\AppData\Roaming\tibF3pnG5Q
2011-09-29 18:38:25 -------- dc----w- C:\Users\Joey\AppData\Roaming\nWK7fRL9gXjC
2011-09-29 18:38:15 -------- dc----w- C:\Users\Joey\AppData\Roaming\yjYCekIVrOtAuSi
2011-09-29 18:38:06 -------- dc----w- C:\Users\Joey\AppData\Roaming\IrzONtxA0c2b3n4
2011-09-29 18:37:56 -------- dc----w- C:\Users\Joey\AppData\Roaming\XA0ucS2ib3n4Q
2011-09-29 18:37:47 -------- dc----w- C:\Users\Joey\AppData\Roaming\bbD3pnG4aHs
2011-09-29 18:37:37 -------- dc----w- C:\Users\Joey\AppData\Roaming\kucS1ibD3n4m6W7
2011-09-29 18:37:28 -------- dc----w- C:\Users\Joey\AppData\Roaming\tgTZqhYCwU
2011-09-29 18:37:18 -------- dc----w- C:\Users\Joey\AppData\Roaming\LrlOBtxP0c1
2011-09-29 18:37:10 -------- dc----w- C:\Users\Joey\AppData\Roaming\mjUVelIBtPyAu
2011-09-29 18:37:01 -------- dc----w- C:\Users\Joey\AppData\Roaming\YfRZ9hTXwUeIr
2011-09-29 18:36:51 -------- dc----w- C:\Users\Joey\AppData\Roaming\wfRZ9hTXwUeIrPy
2011-09-29 18:36:42 -------- dc----w- C:\Users\Joey\AppData\Roaming\kzONyxA0uSi
2011-09-29 18:36:33 -------- dc----w- C:\Users\Joey\AppData\Roaming\SF3pnG5aQ6W7R
2011-09-29 18:36:23 -------- dc----w- C:\Users\Joey\AppData\Roaming\jzONtxA0uS
2011-09-29 18:36:14 -------- dc----w- C:\Users\Joey\AppData\Roaming\sK7fRL9gTqYeIrO
2011-09-29 18:36:04 -------- dc----w- C:\Users\Joey\AppData\Roaming\xH6sWK7fE9TqYw
2011-09-29 18:35:55 -------- dc----w- C:\Users\Joey\AppData\Roaming\drlONtxP0c1b3n4
2011-09-29 18:35:46 -------- dc----w- C:\Users\Joey\AppData\Roaming\yucS1ibD3n4m6W7
2011-09-29 18:35:36 -------- dc----w- C:\Users\Joey\AppData\Roaming\wvD3onF4aHsJdLg
2011-09-29 18:35:27 -------- dc----w- C:\Users\Joey\AppData\Roaming\DD3onF4am5W
2011-09-29 18:35:18 -------- dc----w- C:\Users\Joey\AppData\Roaming\welOBtzP0c1v2n4
2011-09-29 18:35:09 -------- dc----w- C:\Users\Joey\AppData\Roaming\OjUVelIBtP
2011-09-29 18:35:00 -------- dc----w- C:\Users\Joey\AppData\Roaming\QF3pmG5aQ6W8R9T
2011-09-29 18:34:51 -------- dc----w- C:\Users\Joey\AppData\Roaming\KS2ibF3pn5Q6W7R
2011-09-29 18:34:41 -------- dc----w- C:\Users\Joey\AppData\Roaming\UQH6dWK7fLgXjCk
2011-09-29 18:34:32 -------- dc----w- C:\Users\Joey\AppData\Roaming\gibD3pnG4Q6W7E9
2011-09-29 18:34:23 -------- dc----w- C:\Users\Joey\AppData\Roaming\nlONtxP0uSiDoGa
2011-09-29 18:34:14 -------- dc----w- C:\Users\Joey\AppData\Roaming\K7fEL8gTZhCkVlB
2011-09-29 18:34:05 -------- dc----w- C:\Users\Joey\AppData\Roaming\qVelIBtzPyAuDoF
2011-09-29 18:33:56 -------- dc----w- C:\Users\Joey\AppData\Roaming\nIBrzPNyx1v2b3m
2011-09-29 18:33:47 -------- dc----w- C:\Users\Joey\AppData\Roaming\UbF3pnG5aHdKfLg
2011-09-29 18:33:39 -------- dc----w- C:\Users\Joey\AppData\Roaming\rA0ucS2ib3n4Q6W
2011-09-29 18:33:29 -------- dc----w- C:\Users\Joey\AppData\Roaming\fgTZqjYCwIrOtPu
2011-09-29 18:33:20 -------- dc----w- C:\Users\Joey\AppData\Roaming\vZqhYCwkUr
2011-09-29 18:33:11 -------- dc----w- C:\Users\Joey\AppData\Roaming\RvD3onF4aHsJdLg
2011-09-29 18:33:02 -------- dc----w- C:\Users\Joey\AppData\Roaming\phTXwjUCeIrPyAu
2011-09-29 18:32:54 -------- dc----w- C:\Users\Joey\AppData\Roaming\czONyxA0uSiFpGa
2011-09-29 18:32:45 -------- dc----w- C:\Users\Joey\AppData\Roaming\qsWK7fEL9TqYwIr
2011-09-29 18:32:36 -------- dc----w- C:\Users\Joey\AppData\Roaming\ZWJ7fEL8gZhC
2011-09-29 18:32:28 -------- dc----w- C:\Users\Joey\AppData\Roaming\LBtzPNycAuDoFp
2011-09-29 18:32:19 -------- dc----w- C:\Users\Joey\AppData\Roaming\DjUCekIBrOy
2011-09-29 18:32:11 -------- dc----w- C:\Users\Joey\AppData\Roaming\YrlONtxP0c1b3n4
2011-09-29 18:32:03 -------- dc----w- C:\Users\Joey\AppData\Roaming\QsWJ7dEL8RqYwUe
2011-09-29 18:31:55 -------- dc----w- C:\Users\Joey\AppData\Roaming\f1uvS2obFpGaJ
2011-09-29 18:31:46 -------- dc----w- C:\Users\Joey\AppData\Roaming\QVrzONtxAuSiDpG
2011-09-29 18:31:37 -------- dc----w- C:\Users\Joey\AppData\Roaming\nkIVrlONtPuS
2011-09-29 18:31:29 -------- dc----w- C:\Users\Joey\AppData\Roaming\hbF4pmG5s
2011-09-29 18:31:21 -------- dc----w- C:\Users\Joey\AppData\Roaming\VpnG5aQH6W7R
2011-09-29 18:31:13 -------- dc----w- C:\Users\Joey\AppData\Roaming\sucS1ibD3n4m6W7
2011-09-29 18:31:04 -------- dc----w- C:\Users\Joey\AppData\Roaming\WnF4amH5sJdLgZh
2011-09-29 18:30:56 -------- dc----w- C:\Users\Joey\AppData\Roaming\XhTXwjUCeIrPyAu
2011-09-29 18:30:47 -------- dc----w- C:\Users\Joey\AppData\Roaming\o9hTXqjUCkBzNx0
2011-09-29 18:30:38 -------- dc----w- C:\Users\Joey\AppData\Roaming\VqjYCekIVzNx0c2
2011-09-29 18:30:30 -------- dc----w- C:\Users\Joey\AppData\Roaming\y0ucS1ibDoGaHs
2011-09-29 18:30:21 -------- dc----w- C:\Users\Joey\AppData\Roaming\QPNycA1uv2b4m5
2011-09-29 18:30:13 -------- dc----w- C:\Users\Joey\AppData\Roaming\oqjUCekIBzNx0v2
2011-09-29 18:30:05 -------- dc----w- C:\Users\Joey\AppData\Roaming\ywkIVrlONx0
2011-09-29 18:29:57 -------- dc----w- C:\Users\Joey\AppData\Roaming\vUVelOBtz0c1v
2011-09-29 18:29:49 -------- dc----w- C:\Users\Joey\AppData\Roaming\xfRL9hTXqUeIrOy
2011-09-29 18:29:40 -------- dc----w- C:\Users\Joey\AppData\Roaming\DnG4aQH6sKfLgZj
2011-09-29 18:29:32 -------- dc----w- C:\Users\Joey\AppData\Roaming\QZqhYCwkUrOtPyS
2011-09-29 18:29:23 -------- dc----w- C:\Users\Joey\AppData\Roaming\JPPNNyyxA1uS
2011-09-29 18:29:15 -------- dc----w- C:\Users\Joey\AppData\Roaming\qkIIVVrzO
2011-09-29 18:29:07 -------- dc----w- C:\Users\Joey\AppData\Roaming\XmmmH66sWJ7EL
2011-09-29 18:28:58 -------- dc----w- C:\Users\Joey\AppData\Roaming\CEEEL88gRZqhXwU
2011-09-29 18:28:49 -------- dc----w- C:\Users\Joey\AppData\Roaming\GKKK8ffRZ9hXw
2011-09-29 18:28:41 -------- dc----w- C:\Users\Joey\AppData\Roaming\VIBBrrzONyxA
2011-09-29 18:28:32 -------- dc----w- C:\Users\Joey\AppData\Roaming\UGGG4aaQH6sK7E
2011-09-29 18:28:23 -------- dc----w- C:\Users\Joey\AppData\Roaming\o8ggTTZqhYC
2011-09-29 18:28:15 -------- dc----w- C:\Users\Joey\AppData\Roaming\uEEEK88gRZ9YXjU
2011-09-29 18:28:06 -------- dc----w- C:\Users\Joey\AppData\Roaming\PEEEK88fRZ9hXwU
2011-09-29 18:27:57 -------- dc----w- C:\Users\Joey\AppData\Roaming\gxxxA00uvS2bFpn
2011-09-29 18:27:49 -------- dc----w- C:\Users\Joey\AppData\Roaming\nrrllOBttx0yc1v
2011-09-29 18:27:40 -------- dc----w- C:\Users\Joey\AppData\Roaming\mXXXwkkUVelOtz0
2011-09-29 18:27:32 -------- dc----w- C:\Users\Joey\AppData\Roaming\RvvvD22obF4pG5Q
2011-09-29 18:27:23 -------- dc----w- C:\Users\Joey\AppData\Roaming\nllIIBrrzPNxAuv
2011-09-29 18:27:14 -------- dc----w- C:\Users\Joey\AppData\Roaming\LNNNtxxA0uc2iD
2011-09-29 18:27:05 -------- dc----w- C:\Users\Joey\AppData\Roaming\dHH66sWJJfELgTq
2011-09-29 18:26:57 -------- dc----w- C:\Users\Joey\AppData\Roaming\CVVVellOBtzPyc1
2011-09-29 18:26:48 -------- dc----w- C:\Users\Joey\AppData\Roaming\lddWWK8ff
2011-09-29 18:26:40 -------- dc----w- C:\Users\Joey\AppData\Roaming\cVVrrzOON
2011-09-29 18:26:31 -------- dc----w- C:\Users\Joey\AppData\Roaming\xTTTZqqhYCwkVlO
2011-09-29 18:26:23 -------- dc----w- C:\Users\Joey\AppData\Roaming\eLLL8ggRZqhYwkV
2011-09-29 18:26:14 -------- dc----w- C:\Users\Joey\AppData\Roaming\ZlllIBBrzPNyA1v
2011-09-29 18:26:05 -------- dc----w- C:\Users\Joey\AppData\Roaming\p55aaQHH6
2011-09-29 18:25:57 -------- dc----w- C:\Users\Joey\AppData\Roaming\c999gTTZqjYCkIr
2011-09-29 18:25:48 -------- dc----w- C:\Users\Joey\AppData\Roaming\jivvDD3onF
2011-09-29 18:25:40 -------- dc----w- C:\Users\Joey\AppData\Roaming\UmmGG5ssQJ6EKfR
2011-09-29 18:25:31 -------- dc----w- C:\Users\Joey\AppData\Roaming\UWWWK88fRL9hXq
2011-09-29 18:25:22 -------- dc----w- C:\Users\Joey\AppData\Roaming\jOONNtxA0ucS2b3
2011-09-29 18:25:14 -------- dc----w- C:\Users\Joey\AppData\Roaming\kSS11ivDDon
2011-09-29 18:25:05 -------- dc----w- C:\Users\Joey\AppData\Roaming\uDDD2oonF4pH5QJ
2011-09-29 18:24:56 -------- dc----w- C:\Users\Joey\AppData\Roaming\TbbFF4pmm
2011-09-29 18:24:48 -------- dc----w- C:\Users\Joey\AppData\Roaming\HCCeekIBBrONyA
2011-09-29 18:24:39 -------- dc----w- C:\Users\Joey\AppData\Roaming\XhhYYCwwkUrlO
2011-09-29 18:24:31 -------- dc----w- C:\Users\Joey\AppData\Roaming\lHHH5ssQJ7dE8gZ
2011-09-29 18:24:22 -------- dc----w- C:\Users\Joey\AppData\Roaming\wPNNyycA1uvDob4
2011-09-29 18:24:13 -------- dc----w- C:\Users\Joey\AppData\Roaming\WfffRLL9hTXjUek
2011-09-29 18:24:05 -------- dc----w- C:\Users\Joey\AppData\Roaming\PrrrlOONtxP0cSi
2011-09-29 18:23:56 -------- dc----w- C:\Users\Joey\AppData\Roaming\ioonnF4amH5sW7E
2011-09-29 18:23:48 -------- dc----w- C:\Users\Joey\AppData\Roaming\ejjUUVeelIBzPyc
2011-09-29 18:23:39 -------- dc----w- C:\Users\Joey\AppData\Roaming\ONyyxxA0uvS2iFp
2011-09-29 18:23:30 -------- dc----w- C:\Users\Joey\AppData\Roaming\X3pppnG4aQH6WKf
2011-09-29 18:23:22 -------- dc----w- C:\Users\Joey\AppData\Roaming\OgTTZZqhYCwkVrO
2011-09-29 18:23:13 -------- dc----w- C:\Users\Joey\AppData\Roaming\yF444pmH5sQJ7E8
2011-09-29 18:23:05 -------- dc----w- C:\Users\Joey\AppData\Roaming\kKKK8ffRL9hXqUC
2011-09-29 18:22:56 -------- dc----w- C:\Users\Joey\AppData\Roaming\v99gTTXqjYCeI
.
==================== Find3M ====================
.
2011-10-18 18:55:25 414368 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
2011-10-12 03:49:17 1693184 ----a-w- C:\Windows\SysWow64\PbD3onG4aHsJfLg.exe
2011-10-01 03:25:37 1638912 ----a-w- C:\Windows\System32\mshtml.tlb
2011-10-01 02:42:56 1638912 ----a-w- C:\Windows\SysWow64\mshtml.tlb
2011-09-29 22:37:59 320000 ----a-w- C:\Windows\SysWow64\z7TeO0D6ZV.exe
2011-09-29 19:58:58 64000 ----a-w- C:\Windows\SysWow64\fHWRgqerAb.exe
2011-09-06 03:03:17 3138048 ----a-w- C:\Windows\System32\win32k.sys
2011-09-01 00:00:50 25416 ----a-w- C:\Windows\System32\drivers\mbam.sys
2011-08-31 06:05:32 96104 ----a-w- C:\Windows\System32\dns-sd.exe
2011-08-31 06:05:32 85864 ----a-w- C:\Windows\System32\dnssd.dll
2011-08-31 06:05:32 61288 ----a-w- C:\Windows\System32\jdns_sd.dll
2011-08-31 06:05:32 212840 ----a-w- C:\Windows\System32\dnssdX.dll
2011-08-31 06:05:04 83816 ----a-w- C:\Windows\SysWow64\dns-sd.exe
2011-08-31 06:05:04 73064 ----a-w- C:\Windows\SysWow64\dnssd.dll
2011-08-31 06:05:04 50536 ----a-w- C:\Windows\SysWow64\jdns_sd.dll
2011-08-31 06:05:04 178536 ----a-w- C:\Windows\SysWow64\dnssdX.dll
2011-08-30 07:54:28 117520 ----a-w- C:\Windows\System32\drivers\MijXfilt.sys
2011-08-27 05:37:49 861696 ----a-w- C:\Windows\System32\oleaut32.dll
2011-08-27 05:37:48 331776 ----a-w- C:\Windows\System32\oleacc.dll
2011-08-27 04:26:27 571904 ----a-w- C:\Windows\SysWow64\oleaut32.dll
2011-08-27 04:26:27 233472 ----a-w- C:\Windows\SysWow64\oleacc.dll
2011-08-20 05:37:58 1188864 ----a-w- C:\Windows\System32\wininet.dll
2011-08-20 04:31:05 981504 ----a-w- C:\Windows\SysWow64\wininet.dll
2011-08-17 05:26:46 613888 ----a-w- C:\Windows\System32\psisdecd.dll
2011-08-17 05:25:08 108032 ----a-w- C:\Windows\System32\psisrndr.ax
2011-08-17 04:24:12 465408 ----a-w- C:\Windows\SysWow64\psisdecd.dll
2011-08-17 04:19:27 75776 ----a-w- C:\Windows\SysWow64\psisrndr.ax
.
============= FINISH: 21:15:57.27 ===============

.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2011-08-26.01)
.
Microsoft Windows 7 Home Premium
Boot Device: \Device\HarddiskVolume2
Install Date: 6/29/2010 12:27:14
System Uptime: 10/24/2011 20:34:46 (25 hours ago)
.
Motherboard: Sony Corporation | | VAIO
Processor: Intel® Core™ i3 CPU M 350 @ 2.27GHz | N/A | 2266/133mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 288 GiB total, 54.986 GiB free.
E: is Removable
F: is CDROM ()
G: is Removable
.
==== Disabled Device Manager Items =============
.
Class GUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Description: Windows Firewall Authorization Driver
Device ID: ROOT\LEGACY_MPSDRV\0000
Manufacturer:
Name: Windows Firewall Authorization Driver
PNP Device ID: ROOT\LEGACY_MPSDRV\0000
Service: mpsdrv
.
==== System Restore Points ===================
.
RP232: 10/25/2011 00:39:16 - Scheduled Checkpoint
.
==== Installed Programs ======================
.
.
µTorrent
AC3Filter 1.63b
AccuWeather.com Cirrus
Adobe AIR
Adobe Flash Player 10 ActiveX
Adobe Reader 9.4.6
Adobe Shockwave Player 11.5
Amazon Games & Software Downloader
Apple Application Support
Apple Software Update
Application Manager for VAIO
ArcSoft Magic-i Visual Effects 2
ArcSoft WebCam Companion 3
Catalyst Control Center - Branding
Catalyst Control Center Core Implementation
Catalyst Control Center Graphics Full Existing
Catalyst Control Center Graphics Full New
Catalyst Control Center Graphics Light
Catalyst Control Center Graphics Previews Common
Catalyst Control Center Graphics Previews Vista
Catalyst Control Center InstallProxy
Catalyst Control Center Localization All
ccc-core-static
CCC Help Chinese Standard
CCC Help Chinese Traditional
CCC Help Czech
CCC Help Danish
CCC Help Dutch
CCC Help English
CCC Help Finnish
CCC Help French
CCC Help German
CCC Help Greek
CCC Help Hungarian
CCC Help Italian
CCC Help Japanese
CCC Help Korean
CCC Help Norwegian
CCC Help Polish
CCC Help Portuguese
CCC Help Russian
CCC Help Spanish
CCC Help Swedish
CCC Help Thai
CCC Help Turkish
Click to Call with Skype
COMODO GeekBuddy
D3DX10
DC Universe Online Live
Evernote
GIMP 2.6.11
Google Update Helper
Heroes of Newerth
HTC Driver Installer
HTC Sync
Intel® Control Center
Intel® Management Engine Components
Intel® Rapid Storage Technology
Java Auto Updater
Java™ 6 Update 18
Java™ 7 Update 1
Java™ SE Development Kit 7 Update 1
Junk Mail filter update
League of Legends
Malwarebytes' Anti-Malware version 1.51.2.1300
Media Gallery
Microsoft .NET Framework 1.1
Microsoft Office 2010
Microsoft Office Click-to-Run 2010
Microsoft Office PowerPoint Viewer 2007 (English)
Microsoft Office Starter 2010 - English
Microsoft Silverlight
Microsoft SQL Server 2005 Compact Edition [ENU]
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
Microsoft WSE 3.0 Runtime
Mozilla Firefox 7.0.1 (x86 en-US)
MSVCRT
MSVCRT_amd64
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
MSXML 4.0 SP3 Parser
MSXML 4.0 SP3 Parser (KB973685)
Octoshape add-in for Adobe Flash Player
OOBE
Pando Media Booster
PMB
PMB VAIO Edition Guide
PMB VAIO Edition plug-in (Click to Disc)
PMB VAIO Edition plug-in (VAIO Image Optimizer)
PMB VAIO Edition plug-in (VAIO Movie Story)
Process Lasso
PS3 Media Server
QuickTime
RealPlayer
Realtek HDMI Audio Driver for ATI
Realtek High Definition Audio Driver
RealUpgrade 1.0
Roxio Central Audio
Roxio Central Copy
Roxio Central Core
Roxio Central Data
Roxio Central Tools
Roxio Easy Media Creator 10 LJ
Roxio Easy Media Creator Home
Security Update for Microsoft .NET Framework 4 Client Profile (KB2160841)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)
Security Update for Microsoft .NET Framework 4 Extended (KB2416472)
Security Update for Microsoft .NET Framework 4 Extended (KB2487367)
Setting Utility Series
Skype™ 5.5
SmartWi Connection Utility
Sony Home Network Library
StarCraft II
Steam
TuneUp Companion 2.2.4
Uninstall Startup Inspector
Update for Microsoft .NET Framework 4 Client Profile (KB2468871)
Update for Microsoft .NET Framework 4 Client Profile (KB2473228)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523)
Update for Microsoft .NET Framework 4 Extended (KB2468871)
Update for Microsoft .NET Framework 4 Extended (KB2533523)
VAIO Care
VAIO Content Metadata Intelligent Analyzing Manager
VAIO Content Metadata Intelligent Network Service Manager
VAIO Content Metadata Manager Settings
VAIO Content Metadata XML Interface Library
VAIO Content Monitoring Settings
VAIO Control Center
VAIO Data Restore Tool
VAIO DVD Menu Data
VAIO Entertainment Platform
VAIO Event Service
VAIO Hardware Diagnostics
VAIO Help and Support
VAIO Media plus
VAIO Media plus Opening Movie
VAIO Movie Story Template Data
VAIO Original Function Settings
VAIO Personalization Manager
VAIO Power Management
VAIO Quick Web Access
VAIO Survey
VAIO Transfer Support
VAIO Update
VAIO Wallpaper Contents
Ventrilo Client
VLC media player 1.1.11
Windows Live Communications Platform
Windows Live Essentials
Windows Live Installer
Windows Live Mail
Windows Live Messenger
Windows Live Movie Maker
Windows Live Photo Common
Windows Live Photo Gallery
Windows Live PIMT Platform
Windows Live SOXE
Windows Live SOXE Definitions
Windows Live Sync
Windows Live UX Platform
Windows Live UX Platform Language Pack
Windows Live Writer
Windows Live Writer Resources
WinRAR 4.00 (32-bit)
.
==== Event Viewer Messages From Past Week ========
.
10/25/2011 21:01:37, Error: Microsoft-Windows-DNS-Client [1012] - There was an error while attempting to read the local hosts file.
10/24/2011 23:26:17, Error: volsnap [36] - The shadow copies of volume C: were aborted because the shadow copy storage could not grow due to a user imposed limit.
10/24/2011 14:44:40, Error: Schannel [36888] - The following fatal alert was generated: 40. The internal error state is 107.
10/24/2011 14:44:40, Error: Schannel [36874] - An SSL 3.0 connection request was received from a remote client application, but none of the cipher suites supported by the client application are supported by the server. The SSL connection request has failed.
10/24/2011 12:23:03, Error: Service Control Manager [7000] - The Google Update Service (gupdate) service failed to start due to the following error: The system cannot find the file specified.
10/24/2011 12:22:35, Error: Service Control Manager [7024] - The HomeGroup Listener service terminated with service-specific error %%-2147023143.
10/24/2011 12:20:53, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the Roxio Upnp Server 10 service to connect.
10/24/2011 12:20:53, Error: Service Control Manager [7001] - The Windows Firewall service depends on the Windows Firewall Authorization Driver service which failed to start because of the following error: Cannot create a file when that file already exists.
10/24/2011 12:20:53, Error: Service Control Manager [7000] - The Windows Firewall Authorization Driver service failed to start due to the following error: Cannot create a file when that file already exists.
10/24/2011 10:37:27, Error: Service Control Manager [7024] - The PS3 Media Server service terminated with service-specific error The system cannot join or substitute a drive to or for a directory on the same drive..
10/23/2011 16:46:54, Error: Service Control Manager [7024] - The PS3 Media Server service terminated with service-specific error Incorrect function..
10/23/2011 16:44:54, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the Client Virtualization Handler service to connect.
10/23/2011 16:44:54, Error: Service Control Manager [7000] - The Client Virtualization Handler service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
10/22/2011 11:21:04, Error: Service Control Manager [7030] - The PS3 Media Server service is marked as an interactive service. However, the system is configured to not allow interactive services. This service may not function properly.
10/21/2011 16:58:27, Error: Service Control Manager [7030] - The COMODO Internet Security Helper Service service is marked as an interactive service. However, the system is configured to not allow interactive services. This service may not function properly.
10/19/2011 01:06:38, Error: Tcpip [4199] - The system detected an address conflict for IP address 192.168.1.109 with the system having network hardware address 00-1F-A7-A7-CD-B9. Network operations on this system may be disrupted as a result.
.
==== End Of File ===========================

I would also like some help getting rid of some of these unecessary processes.

#6 gringo_pr

gringo_pr

    Bleepin Gringo


  • Malware Response Team
  • 136,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto rico
  • Local time:11:29 PM

Posted 26 October 2011 - 09:15 AM

Hello

with this infection it may take some time for combofix to run just let it be

I Would like you to do the following.

Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.

Run Combofix:

You may be asked to install or update the Recovery Console (Win XP Only) if this happens please allow it to do so (you will need to be connected to the internet for this)

Before you run Combofix I will need you to turn off any security software you have running, If you do not know how to do this you can find out >here< or >here<

Combofix may need to reboot your computer more than once to do its job this is normal.

You can download Combofix from one of these links. I want you to save it to the desktop and run it from there.
Link 1
Link 2
Link 3
1. Close any open browsers or any other programs that are open.
2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

Double click on combofix.exe & follow the prompts.
When finished, it will produce a report for you.

Note 1: Do not mouseclick combofix's window while it's running. That may cause it to stall

Note 2: If you recieve an error "Illegal operation attempted on a registery key that has been marked for deletion." Please restart the computer

"information and logs"

  • In your next post I need the following
  • Log from Combofix
  • let me know of any problems you may have had
  • How is the computer doing now?

Gringo
I Close My Topics If You Have Not Replied In 5 Days If You Will Be Longer Please Let Me Know

If I Have Not Replied To One Of My Topics In 48 Hrs Please Bump The Topic



My help is free, however, if you wish to make a small donation to show your appreciation or to help me continue the fight against Malware, then click here -->btn_donate_SM.gif<-- Don't worry every little bit helps.

Proud Graduate Of Malware Removal University

#7 gringo_pr

gringo_pr

    Bleepin Gringo


  • Malware Response Team
  • 136,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto rico
  • Local time:11:29 PM

Posted 30 October 2011 - 02:50 PM

Hello

48 Hour bump

It has been more than 48 hours since my last post.

  • do you still need help with this?
  • do you need more time?
  • are you having problems following my instructions?
  • if after 48hrs you have not replied to this thread then it will have to be closed!

Gringo
I Close My Topics If You Have Not Replied In 5 Days If You Will Be Longer Please Let Me Know

If I Have Not Replied To One Of My Topics In 48 Hrs Please Bump The Topic



My help is free, however, if you wish to make a small donation to show your appreciation or to help me continue the fight against Malware, then click here -->btn_donate_SM.gif<-- Don't worry every little bit helps.

Proud Graduate Of Malware Removal University

#8 gringo_pr

gringo_pr

    Bleepin Gringo


  • Malware Response Team
  • 136,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto rico
  • Local time:11:29 PM

Posted 01 November 2011 - 11:44 PM

Due to the lack of feedback, this topic is now closed.In the event you still have problems, please send me or any Moderator a Private Message and ask them to reopen this topic within the next 5 days. Please include a link to your topic in the Private Message. Thank you.
I Close My Topics If You Have Not Replied In 5 Days If You Will Be Longer Please Let Me Know

If I Have Not Replied To One Of My Topics In 48 Hrs Please Bump The Topic



My help is free, however, if you wish to make a small donation to show your appreciation or to help me continue the fight against Malware, then click here -->btn_donate_SM.gif<-- Don't worry every little bit helps.

Proud Graduate Of Malware Removal University




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users