Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

New thread with a link to original thread and problem


  • This topic is locked This topic is locked
118 replies to this topic

#1 sawz

sawz

  • Members
  • 138 posts
  • OFFLINE
  •  
  • Local time:05:18 PM

Posted 10 January 2012 - 07:38 PM

I could only operate in safe mode with numerous other problems as stated in the original thread here -My link


Here is the requested dds log file:
.
DDS (Ver_2011-08-26.01) - NTFSAMD64
Internet Explorer: 8.0.7600.16385
Run by maria at 19:33:17 on 2012-01-10
Microsoft Windows 7 Home Premium 6.1.7600.0.1252.1.1033.18.2812.1216 [GMT -5:00]
.
AV: Norton Internet Security *Disabled/Outdated* {88C95A36-8C3B-2F2C-1B8B-30FCCFDC4855}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Norton Internet Security *Disabled/Updated* {33A8BBD2-AA01-20A2-213B-0B8EB45B02E8}
FW: Norton Internet Security *Disabled* {B0F2DB13-C654-2E74-30D4-99C9310F0F2E}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\servicing\TrustedInstaller.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files (x86)\Norton Internet Security\Engine\17.8.0.5\ccSvcHst.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\SearchIndexer.exe
C:\Windows\System32\svchost.exe -k secsvcs
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_clipbook.exe
C:\Windows\SysWow64\Macromed\Flash\FlashUtil10c.exe
C:\Windows\SysWOW64\ping.exe
C:\Windows\system32\conhost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\DllHost.exe
C:\Windows\system32\DllHost.exe
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\conhost.exe
C:\Windows\SysWOW64\cscript.exe
C:\Windows\system32\wbem\wmiprvse.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.comcast.net/
uInternet Settings,ProxyOverride = *.local
mWinlogon: Userinit=userinit.exe,
BHO: HP Print Enhancer: {0347c33e-8762-4905-bf09-768834316c61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO: Symantec NCO BHO: {602adb0e-4aff-4217-8aa1-95dac4dfa408} - C:\Program Files (x86)\Norton Internet Security\Engine\17.8.0.5\coIEPlg.dll
BHO: Symantec Intrusion Prevention: {6d53ec84-6aae-4787-aeee-f4628f01010c} - C:\Program Files (x86)\Norton Internet Security\Engine\17.8.0.5\IPSBHO.DLL
BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO: {9D425283-D487-4337-BAB6-AB8354A81457} - No File
BHO: Microsoft Live Search Toolbar Helper: {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - c:\Program Files (x86)\MSN\Toolbar\3.0.0566.0\msneshellx.dll
BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
BHO: Yontoo Layers: {fd72061e-9fde-484d-a58a-0bab4151cad8} - C:\Program Files (x86)\Drop Down Deals\YontooIEClient.dll
BHO: HP Smart BHO Class: {ffffffff-cf4e-4f2b-bdc2-0e72e116a856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
TB: Microsoft Live Search Toolbar: {1e61ed7c-7cb8-49d6-b9e9-ab4c880c8414} - c:\Program Files (x86)\MSN\Toolbar\3.0.0566.0\msneshellx.dll
TB: Norton Toolbar: {7febefe3-6b19-4349-98d2-ffb09d4b49ca} - C:\Program Files (x86)\Norton Internet Security\Engine\17.8.0.5\coIEPlg.dll
TB: {9D425283-D487-4337-BAB6-AB8354A81457} - No File
EB: HP Smart Web Printing: {555d4d79-4bd2-4094-a395-cfc534424a05} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_bho.dll
uRun: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
mRun: [<NO NAME>]
mRun: [WirelessAssistant] C:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
mPolicies-explorer: NoActiveDesktop = 1 (0x1)
mPolicies-explorer: NoActiveDesktopChanges = 1 (0x1)
mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\PROGRA~2\MICROS~4\Office12\ONBttnIE.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - C:\PROGRA~2\MICROS~4\Office12\REFIEBAR.DLL
IE: {DDE87865-83C5-48c4-8357-2F5B1AA84522} - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
LSP: mswsock.dll
DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - hxxp://download.eset.com/special/eos/OnlineScanner.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab
TCP: DhcpNameServer = 75.75.75.75 75.75.76.76
TCP: Interfaces\{32B83D7D-905E-4AD5-8CFD-0A5D04457B34} : DhcpNameServer = 75.75.75.75 75.75.76.76
TCP: Interfaces\{32B83D7D-905E-4AD5-8CFD-0A5D04457B34}\2456C6B696E6F574F575962756C6563737F5236454446413 : DhcpNameServer = 192.168.2.1
TCP: Interfaces\{32B83D7D-905E-4AD5-8CFD-0A5D04457B34}\4454F4C4946554942514723502E4544575F425B4 : DhcpNameServer = 192.168.1.1
SubSystems: Windows = basesrv,1 winsrv:UserServerDllInitialization,3 consrv:ConServerDllInitialization,2 sxssrv,4
mASetup: {10880D85-AAD9-4558-ABDC-2AB1552D831F} - "C:\Program Files (x86)\Common Files\LightScribe\LSRunOnce.exe"
BHO-X64: HP Print Enhancer: {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
BHO-X64: HP Print Enhancer - No File
BHO-X64: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO-X64: AcroIEHelperStub - No File
BHO-X64: Symantec NCO BHO: {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\17.8.0.5\coIEPlg.dll
BHO-X64: Symantec NCO BHO - No File
BHO-X64: Symantec Intrusion Prevention: {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\17.8.0.5\IPSBHO.DLL
BHO-X64: Symantec Intrusion Prevention - No File
BHO-X64: Windows Live Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO-X64: {9D425283-D487-4337-BAB6-AB8354A81457} - No File
BHO-X64: Microsoft Live Search Toolbar Helper: {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - c:\Program Files (x86)\MSN\Toolbar\3.0.0566.0\msneshellx.dll
BHO-X64: Java™ Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
BHO-X64: Yontoo Layers: {FD72061E-9FDE-484D-A58A-0BAB4151CAD8} - C:\Program Files (x86)\Drop Down Deals\YontooIEClient.dll
BHO-X64: Yontoo Layers - No File
BHO-X64: HP Smart BHO Class: {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
BHO-X64: HP Smart BHO Class - No File
TB-X64: Microsoft Live Search Toolbar: {1E61ED7C-7CB8-49d6-B9E9-AB4C880C8414} - c:\Program Files (x86)\MSN\Toolbar\3.0.0566.0\msneshellx.dll
TB-X64: Norton Toolbar: {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\17.8.0.5\coIEPlg.dll
TB-X64: {9D425283-D487-4337-BAB6-AB8354A81457} - No File
EB-X64: {555D4D79-4BD2-4094-A395-CFC534424A05} - No File
mRun-x64: [(Default)]
mRun-x64: [WirelessAssistant] C:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
.
============= SERVICES / DRIVERS ===============
.
R0 SymDS;Symantec Data Store;C:\Windows\system32\drivers\NISx64\1108000.005\SYMDS64.SYS --> C:\Windows\system32\drivers\NISx64\1108000.005\SYMDS64.SYS [?]
R0 SymEFA;Symantec Extended File Attributes;C:\Windows\system32\drivers\NISx64\1108000.005\SYMEFA64.SYS --> C:\Windows\system32\drivers\NISx64\1108000.005\SYMEFA64.SYS [?]
R1 ccHP;Symantec Hash Provider;C:\Windows\system32\drivers\NISx64\1108000.005\ccHPx64.sys --> C:\Windows\system32\drivers\NISx64\1108000.005\ccHPx64.sys [?]
R1 IDSVia64;IDSVia64;C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\Definitions\IPSDefs\20110310.002\IDSviA64.sys [2011-3-10 476792]
R1 SYMTDIv;Symantec Vista Network Dispatch Driver;C:\Windows\system32\Drivers\NISx64\1108000.005\SYMTDIV.SYS --> C:\Windows\system32\Drivers\NISx64\1108000.005\SYMTDIV.SYS [?]
R1 vwififlt;Virtual WiFi Filter Driver;C:\Windows\system32\DRIVERS\vwififlt.sys --> C:\Windows\system32\DRIVERS\vwififlt.sys [?]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
R2 NIS;Norton Internet Security;C:\Program Files (x86)\Norton Internet Security\Engine\17.8.0.5\ccsvchst.exe [2011-1-25 126392]
R3 RTL8167;Realtek 8167 NT Driver;C:\Windows\system32\DRIVERS\Rt64win7.sys --> C:\Windows\system32\DRIVERS\Rt64win7.sys [?]
R3 usbfilter;AMD USB Filter Driver;C:\Windows\system32\DRIVERS\usbfilter.sys --> C:\Windows\system32\DRIVERS\usbfilter.sys [?]
S1 BHDrvx64;BHDrvx64;C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\Definitions\BASHDefs\20110309.001\BHDrvx64.sys [2011-3-10 1124472]
S1 SymIRON;Symantec Iron Driver;C:\Windows\system32\drivers\NISx64\1108000.005\Ironx64.SYS --> C:\Windows\system32\drivers\NISx64\1108000.005\Ironx64.SYS [?]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]
S3 EraserUtilRebootDrv;EraserUtilRebootDrv;C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2011-3-10 132656]
S3 netw5v64;Intel® Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit;C:\Windows\system32\DRIVERS\netw5v64.sys --> C:\Windows\system32\DRIVERS\netw5v64.sys [?]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;C:\Windows\system32\Drivers\RtsUStor.sys --> C:\Windows\system32\Drivers\RtsUStor.sys [?]
S3 SrvHsfHDA;SrvHsfHDA;C:\Windows\system32\DRIVERS\VSTAZL6.SYS --> C:\Windows\system32\DRIVERS\VSTAZL6.SYS [?]
S3 SrvHsfV92;SrvHsfV92;C:\Windows\system32\DRIVERS\VSTDPV6.SYS --> C:\Windows\system32\DRIVERS\VSTDPV6.SYS [?]
S3 SrvHsfWinac;SrvHsfWinac;C:\Windows\system32\DRIVERS\VSTCNXT6.SYS --> C:\Windows\system32\DRIVERS\VSTCNXT6.SYS [?]
S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\system32\Wat\WatAdminSvc.exe --> C:\Windows\system32\Wat\WatAdminSvc.exe [?]
S3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;C:\Windows\system32\DRIVERS\yk62x64.sys --> C:\Windows\system32\DRIVERS\yk62x64.sys [?]
S4 AESTFilters;Andrea ST Filters Service;C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_ccf0dd3cb081af84\AESTSr64.exe [2010-1-14 89600]
S4 AMD External Events Utility;AMD External Events Utility;C:\Windows\system32\atiesrxx.exe --> C:\Windows\system32\atiesrxx.exe [?]
S4 Com4QLBEx;Com4QLBEx;C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [2009-10-30 228408]
S4 GamesAppService;GamesAppService;C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072]
S4 gupdate;Google Update Service (gupdate);C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-4-27 136176]
S4 gupdatem;Google Update Service (gupdatem);C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-4-27 136176]
.
=============== Created Last 30 ================
.
2012-01-11 00:23:44 69000 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{3718F1FC-41EB-4779-8770-A68A1B37EEAA}\offreg.dll
2012-01-11 00:23:41 8822856 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{3718F1FC-41EB-4779-8770-A68A1B37EEAA}\mpengine.dll
2012-01-10 04:02:57 -------- d-----w- C:\Windows\pss
2012-01-10 03:00:34 -------- d-----w- C:\Program Files (x86)\ESET
2012-01-09 22:54:50 -------- d-----w- C:\Users\maria\AppData\Roaming\SUPERAntiSpyware.com
2012-01-09 22:54:30 -------- d-----w- C:\ProgramData\SUPERAntiSpyware.com
2012-01-09 22:54:30 -------- d-----w- C:\Program Files\SUPERAntiSpyware
2012-01-09 15:00:20 -------- d-----w- C:\Users\maria\AppData\Roaming\CBS Interactive
2012-01-09 07:50:54 -------- d-----w- C:\Windows\System32\EventProviders
2012-01-09 07:50:08 -------- d-----w- C:\be84132aec3643f4822a6c3e644f57
2012-01-09 07:17:00 -------- d-----w- C:\Users\maria\AppData\Roaming\AVG
2012-01-09 07:11:25 2048 ----a-w- C:\Windows\SysWow64\tzres.dll
2012-01-09 07:11:25 2048 ----a-w- C:\Windows\System32\tzres.dll
2012-01-09 07:09:52 723456 ----a-w- C:\Windows\System32\EncDec.dll
2012-01-09 07:09:52 534528 ----a-w- C:\Windows\SysWow64\EncDec.dll
2012-01-09 07:00:05 -------- d--h--w- C:\ProgramData\Common Files
2012-01-09 06:57:23 -------- d-----w- C:\Program Files (x86)\AVG
2012-01-09 06:54:21 -------- d-----w- C:\ProgramData\MFAData
2012-01-09 06:36:49 -------- d-----w- C:\Users\maria\AppData\Roaming\Malwarebytes
2012-01-09 06:36:41 -------- d-----w- C:\ProgramData\Malwarebytes
2012-01-09 06:36:40 23152 ----a-w- C:\Windows\System32\drivers\mbam.sys
2012-01-09 06:36:40 -------- d-----w- C:\Program Files (x86)\Malwarebytes' Anti-Malware
2012-01-09 06:24:59 -------- d-----w- C:\Users\maria\AppData\Roaming\zNt1rilIVY
2012-01-09 06:24:59 -------- d-----w- C:\Users\maria\AppData\Roaming\VTpXSfXr24sGWpo
2012-01-09 06:24:57 -------- d-----w- C:\Users\maria\AppData\Roaming\zTpXSfXr24sGWpo
2012-01-09 06:24:56 -------- d-----w- C:\Users\maria\AppData\Roaming\tTpXSfXr24sGWpo
2012-01-09 06:24:54 -------- d-----w- C:\Users\maria\AppData\Roaming\sJufAWYISaH6i5
2012-01-09 06:24:52 -------- d-----w- C:\Users\maria\AppData\Roaming\ZTpXSfXr24sG
2012-01-09 06:24:27 -------- d-----w- C:\Users\maria\AppData\Roaming\Uw9Q1es0L18
2012-01-09 06:24:26 -------- d-----w- C:\Users\maria\AppData\Roaming\Cw9Q1es0L18
2012-01-09 06:23:25 -------- d-----w- C:\Users\maria\AppData\Roaming\pLBbJj1fVvaZIuW
2012-01-09 06:23:25 -------- d-----w- C:\Users\maria\AppData\Roaming\ffliJj1fVvaZIuW
2012-01-09 06:19:59 -------- d-----w- C:\Users\maria\AppData\Roaming\wNqCIzxvSi
2012-01-09 06:07:25 -------- d-----w- C:\Users\maria\AppData\Roaming\IduZcENfPHliKIS
2012-01-09 06:07:23 -------- d-----w- C:\Users\maria\AppData\Roaming\dOEPJr6NHj39
2012-01-09 06:07:16 -------- d-----w- C:\Users\maria\AppData\Roaming\B3BYd30YbCHzQxg
2012-01-09 06:07:07 -------- d-----w- C:\Users\maria\AppData\Roaming\cU6mQaaouB9muIZ
2012-01-09 06:07:03 -------- d-----w- C:\Users\maria\AppData\Roaming\kzU6mQaaouB9muI
2012-01-09 06:06:53 -------- d-----w- C:\Users\maria\AppData\Roaming\LFyCLp0VRE5NOPz
2012-01-09 06:06:50 -------- d-----w- C:\Users\maria\AppData\Roaming\fyj74xI8JptkV
2012-01-09 06:06:43 -------- d-----w- C:\Users\maria\AppData\Roaming\Z1f07iw6cCEF
2012-01-09 06:06:38 -------- d-----w- C:\Users\maria\AppData\Roaming\qKriWlpUpjmzhGt
2012-01-09 06:06:33 -------- d-----w- C:\Users\maria\AppData\Roaming\zZPGLr4hoTiUJ
2012-01-09 06:06:31 -------- d-----w- C:\Users\maria\AppData\Roaming\H28jViWjvQZSdNd
2012-01-09 06:06:27 -------- d-----w- C:\Users\maria\AppData\Roaming\g6kAdgecHYAG90Q
2012-01-09 06:06:16 -------- d-----w- C:\Users\maria\AppData\Roaming\QXNmZNpXxsj2RPW
2012-01-09 06:06:14 -------- d-----w- C:\Users\maria\AppData\Roaming\fYAQYu7ImX
2012-01-09 06:06:09 -------- d-----w- C:\Users\maria\AppData\Roaming\bEw1dwiJTAah0sX
2012-01-09 06:06:01 -------- d-----w- C:\Users\maria\AppData\Roaming\ViG67ghqYxiHRA4
2012-01-09 06:05:57 -------- d-----w- C:\Users\maria\AppData\Roaming\NBuFpQJL9wCku3Q
2012-01-09 06:05:56 -------- d-----w- C:\Users\maria\AppData\Roaming\SA4aH7ghUINca
2012-01-09 06:05:44 -------- d-----w- C:\Users\maria\AppData\Roaming\ZPXEFAIqfmnDuAy
2012-01-09 06:05:44 -------- d-----w- C:\Users\maria\AppData\Roaming\aPXEFAIqfmnDuAy
2012-01-09 06:05:33 -------- d-----w- C:\Users\maria\AppData\Roaming\OBy2GWK99RfWHpp
2012-01-09 06:05:32 -------- d-----w- C:\Users\maria\AppData\Roaming\NBy2GWK99RfWHpp
2012-01-09 06:05:13 -------- d-----w- C:\Users\maria\AppData\Roaming\XA0uSvDDobiu0Pz
2012-01-09 06:05:10 -------- d-----w- C:\Users\maria\AppData\Roaming\T55aHs5sQHQn
2012-01-09 06:05:05 -------- d-----w- C:\Users\maria\AppData\Roaming\RCYhZfWaov1NNyx
2012-01-09 06:04:51 -------- d-----w- C:\Users\maria\AppData\Roaming\i8mvBC9sn1BeXff
2012-01-09 06:04:22 -------- d-----w- C:\Users\maria\AppData\Roaming\D1EeDTv6kWOaIHk
2012-01-09 06:04:14 -------- d-----w- C:\Users\maria\AppData\Roaming\UhwVOPAoHE9VPD
2012-01-09 05:43:41 -------- d-----w- C:\Users\maria\AppData\Roaming\mNk7FOYJp20zlX9
2012-01-09 05:43:31 -------- d-----w- C:\Users\maria\AppData\Roaming\XijaOEoBLozXW3P
2012-01-09 05:43:22 -------- d-----w- C:\Users\maria\AppData\Roaming\sIDhpBKugpzfSUa
2012-01-09 05:43:14 -------- d-----w- C:\Users\maria\AppData\Roaming\vifrHwx4Y4tKS
2012-01-09 05:43:04 -------- d-----w- C:\Users\maria\AppData\Roaming\T0sk4CHIaY1dyHI
2012-01-09 05:42:59 -------- d-----w- C:\Users\maria\AppData\Roaming\X0sk4CHIaY1dyHI
2012-01-09 05:42:58 -------- d-----w- C:\Users\maria\AppData\Roaming\Q0sk4CHIaY1dyHI
2012-01-09 05:42:55 -------- d-----w- C:\Users\maria\AppData\Roaming\dw2EyQlpYaUGYbg
2012-01-09 05:42:51 -------- d-----w- C:\Users\maria\AppData\Roaming\mKInwvKNKOEAK
2012-01-09 05:42:46 -------- d-----w- C:\Users\maria\AppData\Roaming\DuLxJImjcgP
2012-01-09 05:42:19 -------- d-----w- C:\Users\maria\AppData\Roaming\vN1iGsEj1Qqxo6U
2012-01-09 05:42:16 -------- d-----w- C:\Users\maria\AppData\Roaming\qeBN1osEf9jrxvQ
2012-01-09 05:42:04 -------- d-----w- C:\Users\maria\AppData\Roaming\ribGdfZkBxuD
2012-01-09 05:41:54 -------- d-----w- C:\Users\maria\AppData\Roaming\VPIeZgd8fTTggYj
2012-01-09 05:41:43 -------- d-----w- C:\Users\maria\AppData\Roaming\hK4oABeT7Hoyebx
2012-01-09 05:41:38 -------- d-----w- C:\Users\maria\AppData\Roaming\GAjKpyqK4oABeT7
2012-01-09 05:41:30 -------- d-----w- C:\Users\maria\AppData\Roaming\bJPdDZSTiYaO71
2012-01-09 05:41:21 -------- d-----w- C:\Users\maria\AppData\Roaming\IvRrFRz3gcJUFqc
2012-01-09 05:34:34 -------- d-----w- C:\Users\maria\AppData\Roaming\LUVOBtzP0c1v2n
2012-01-09 05:34:25 -------- d-----w- C:\Users\maria\AppData\Roaming\D9hTXwjUClB
2012-01-09 05:34:08 -------- d-----w- C:\Users\maria\AppData\Roaming\kTZqhYCwkVlBxSi
2012-01-09 05:34:01 -------- d-----w- C:\Users\maria\AppData\Roaming\iG5sQJ6wxv2b3m5
2012-01-09 05:33:54 -------- d-----w- C:\Users\maria\AppData\Roaming\SS1ibD3on4
2012-01-09 05:33:48 -------- d-----w- C:\Users\maria\AppData\Roaming\OucS2ibD3n
2012-01-09 05:33:43 -------- d-----w- C:\Users\maria\AppData\Roaming\oIBrzONyx0v2b3n
2012-01-09 05:33:37 -------- d-----w- C:\Users\maria\AppData\Roaming\fTXqjUCekBzNx0v
2012-01-09 05:33:31 -------- d-----w- C:\Users\maria\AppData\Roaming\yIBtzPNyc1v
2012-01-09 05:33:26 -------- d-----w- C:\Users\maria\AppData\Roaming\BBtzP0ycAiDoF
2012-01-09 05:33:20 -------- d-----w- C:\Users\maria\AppData\Roaming\SamH5sWJ7E
2012-01-09 05:33:15 -------- d-----w- C:\Users\maria\AppData\Roaming\PP0ucS1ib3n4m6W
2012-01-09 05:33:08 -------- d-----w- C:\Users\maria\AppData\Roaming\XG5aQJ6dW8R9TqU
2012-01-09 05:32:57 -------- d-----w- C:\Users\maria\AppData\Roaming\o8RZqtPci2FpHsJ
2012-01-09 05:32:47 -------- d-----w- C:\Users\maria\AppData\Roaming\rzP0ycA1i
2012-01-09 05:32:35 -------- d-----w- C:\Users\maria\AppData\Roaming\IYCwkIVrl
2012-01-09 05:32:29 -------- d-----w- C:\Users\maria\AppData\Roaming\azONyxA0uSiFpGa
2012-01-09 05:32:23 -------- d-----w- C:\Users\maria\AppData\Roaming\v1uvD2obFpGsJ
2012-01-09 05:32:17 -------- d-----w- C:\Users\maria\AppData\Roaming\OnF4amH5sJdLgZh
2012-01-09 05:32:11 -------- d-----w- C:\Users\maria\AppData\Roaming\X6sWK7fELgZjCkV
2012-01-09 05:32:05 -------- d-----w- C:\Users\maria\AppData\Roaming\vL9hTXqjUe
2012-01-09 05:31:59 -------- d-----w- C:\Users\maria\AppData\Roaming\OjUCelIBrPyAuSo
2012-01-09 05:31:52 -------- d-----w- C:\Users\maria\AppData\Roaming\kWJ7fEL8gZhCkVl
2012-01-09 05:31:46 -------- d-----w- C:\Users\maria\AppData\Roaming\LgTXqjYCeIrOtA
2012-01-09 05:31:39 -------- d-----w- C:\Users\maria\AppData\Roaming\KH5sQJ7dE8R9YwU
2012-01-09 05:31:32 -------- d-----w- C:\Users\maria\AppData\Roaming\m0ucS1ibDoGaHsJ
2012-01-09 05:31:26 -------- d-----w- C:\Users\maria\AppData\Roaming\eF3pnG5aQ6W
2012-01-09 05:31:19 -------- d-----w- C:\Users\maria\AppData\Roaming\PBtzP0ycAiD
2012-01-09 05:31:12 -------- d-----w- C:\Users\maria\AppData\Roaming\l9gTXqjYCkVz
2012-01-09 05:31:06 -------- d-----w- C:\Users\maria\AppData\Roaming\QIrzPNyxAuSoFpG
2012-01-09 05:31:00 -------- d-----w- C:\Users\maria\AppData\Roaming\uzPNycA1u2b4m5Q
2012-01-09 05:30:54 -------- d-----w- C:\Users\maria\AppData\Roaming\WVlONtxP01DoGaH
2012-01-09 05:30:47 -------- d-----w- C:\Users\maria\AppData\Roaming\jkIBrzONyA
2012-01-09 05:30:41 -------- d-----w- C:\Users\maria\AppData\Roaming\oonF4pmH5Q7E8R
2012-01-09 05:30:31 -------- d-----w- C:\Users\maria\AppData\Roaming\pF4pmH5sQ
2012-01-09 05:30:25 -------- d-----w- C:\Users\maria\AppData\Roaming\QycS1ivvD3oF4mH
2012-01-09 05:30:19 -------- d-----w- C:\Users\maria\AppData\Roaming\fgTZqjCwkVlNx
2012-01-09 05:29:58 -------- d-----w- C:\Users\maria\AppData\Roaming\WqjUCekIBzNx0v2
2012-01-09 05:29:52 -------- d-----w- C:\Users\maria\AppData\Roaming\FBtNycA1v
2012-01-09 05:29:42 -------- d-----w- C:\Users\maria\AppData\Roaming\uhYCwOx0cDn4m5W
2012-01-09 05:29:25 -------- d-----w- C:\Users\maria\AppData\Roaming\h2ibD3pnGaHsKfL
2012-01-09 05:29:15 -------- d-----w- C:\Users\maria\AppData\Roaming\s6dWK7fRLgX
2012-01-09 05:29:01 -------- d-----w- C:\Users\maria\AppData\Roaming\fadKhXCkBAv2Fn5
2012-01-09 05:28:50 -------- d-----w- C:\Users\maria\AppData\Roaming\ahXqjUCkIr
2012-01-09 05:28:28 -------- d-----w- C:\Users\maria\AppData\Roaming\QamH6sWJ7E8TqYw
2012-01-09 05:28:22 -------- d-----w- C:\Users\maria\AppData\Roaming\Lyx0vS2ib3n5QWf
2012-01-09 05:28:15 -------- d-----w- C:\Users\maria\AppData\Roaming\GvD2obF4pGsJd
2012-01-09 05:28:09 -------- d-----w- C:\Users\maria\AppData\Roaming\w4amH5sWJdLgZhX
2012-01-09 05:28:03 -------- d-----w- C:\Users\maria\AppData\Roaming\RK7fEL9gTqYwIrO
2012-01-09 05:27:56 -------- d-----w- C:\Users\maria\AppData\Roaming\s2obF4pmGsJdKfZ
2012-01-09 05:27:50 -------- d-----w- C:\Users\maria\AppData\Roaming\bmH5sQJ7dKg
2012-01-09 05:27:43 -------- d-----w- C:\Users\maria\AppData\Roaming\cuS2ibD3pnG4
2012-01-09 05:27:36 -------- d-----w- C:\Users\maria\AppData\Roaming\twjUVelIBzNc1
2012-01-09 05:27:30 -------- d-----w- C:\Users\maria\AppData\Roaming\jOBtxP0yc1v3n4m
2012-01-09 05:27:23 -------- d-----w- C:\Users\maria\AppData\Roaming\g9gTXqjYCkBzNx0
2012-01-09 05:27:17 -------- d-----w- C:\Users\maria\AppData\Roaming\QUCelIBrzNx1v2b
2012-01-09 05:27:11 -------- d-----w- C:\Users\maria\AppData\Roaming\DtzP0ycA1v2
2012-01-09 05:27:05 -------- d-----w- C:\Users\maria\AppData\Roaming\g1ibD3onHsJfLgq
2012-01-09 05:26:59 -------- d-----w- C:\Users\maria\AppData\Roaming\QnG5aQH6dKfLgX
2012-01-09 05:26:53 -------- d-----w- C:\Users\maria\AppData\Roaming\z8fRhTXwje
2012-01-09 05:26:47 -------- d-----w- C:\Users\maria\AppData\Roaming\hZ9hYXwjUeItPyA
2012-01-09 05:26:39 -------- d-----w- C:\Users\maria\AppData\Roaming\zIBrzONyx0
2012-01-09 05:26:33 -------- d-----w- C:\Users\maria\AppData\Roaming\YycA1uvD2b4m5Q6
2012-01-09 05:26:27 -------- d-----w- C:\Users\maria\AppData\Roaming\o3onF4amHsJdLg
2012-01-09 05:26:21 -------- d-----w- C:\Users\maria\AppData\Roaming\xQH6sWK7fLgZjCk
2012-01-09 05:26:15 -------- d-----w- C:\Users\maria\AppData\Roaming\CL9gTXqjYeIrOtA
2012-01-09 05:26:09 -------- d-----w- C:\Users\maria\AppData\Roaming\oXwjUCelIrP
2012-01-09 05:26:03 -------- d-----w- C:\Users\maria\AppData\Roaming\xlOBtzP0AiDoFpH
2012-01-09 05:25:57 -------- d-----w- C:\Users\maria\AppData\Roaming\VucS1ibD3n4m6W7
2012-01-09 05:25:51 -------- d-----w- C:\Users\maria\AppData\Roaming\pF3pnG5aQ
2012-01-09 05:25:45 -------- d-----w- C:\Users\maria\AppData\Roaming\xaQJ6dWK8R9TqUe
2012-01-09 05:25:39 -------- d-----w- C:\Users\maria\AppData\Roaming\V8gRZ9hYXjVl
2012-01-09 05:25:33 -------- d-----w- C:\Users\maria\AppData\Roaming\pYCwkUVrlBx0c1v
2012-01-09 05:25:27 -------- d-----w- C:\Users\maria\AppData\Roaming\RYCekIVrzNx
2012-01-09 05:25:21 -------- d-----w- C:\Users\maria\AppData\Roaming\bhTXwjUCeIrPyA
2012-01-09 05:25:15 -------- d-----w- C:\Users\maria\AppData\Roaming\fmH5sQJ7dK
2012-01-09 05:25:10 -------- d-----w- C:\Users\maria\AppData\Roaming\yqqhhYXwkUelOtP
2012-01-09 05:25:04 -------- d-----w- C:\Users\maria\AppData\Roaming\TWJJJffLTZqYwUV
2012-01-09 05:24:59 -------- d-----w- C:\Users\maria\AppData\Roaming\lEL9gTZqjCkVlNx
2012-01-09 05:24:54 -------- d-----w- C:\Users\maria\AppData\Roaming\eA0ucS2ib3n4Q6W
2012-01-09 05:24:48 -------- d-----w- C:\Users\maria\AppData\Roaming\xWK7fRL9gXjCkV
2012-01-09 05:24:36 -------- d-----w- C:\Users\maria\AppData\Roaming\OsQJ7dEghVIzy1D
2012-01-09 05:24:23 -------- d-----w- C:\Users\maria\AppData\Roaming\A5Qd8RhwClrPy1v
2012-01-09 05:24:10 -------- d-----w- C:\Users\maria\AppData\Roaming\mTZqhYCwkV
2012-01-09 05:23:58 -------- d-----w- C:\Users\maria\AppData\Roaming\Gpm5QE8ZTe
2012-01-09 05:23:46 -------- d-----w- C:\Users\maria\AppData\Roaming\ZaQH6sKEgqCkrNP
2012-01-09 05:23:37 -------- d-----w- C:\Users\maria\AppData\Roaming\RYkVOtPyi3Fa5Wd
2012-01-09 05:23:27 -------- d-----w- C:\Users\maria\AppData\Roaming\QPu1Do4mJEZYwV
2012-01-09 05:23:06 -------- d-----w- C:\Users\maria\AppData\Roaming\nvi35HKR9jkVNSp
2012-01-09 05:22:54 -------- d-----w- C:\Users\maria\AppData\Roaming\IHWd8hwUlB2pQg9
2012-01-09 05:22:41 -------- d-----w- C:\Users\maria\AppData\Roaming\rGQ6WfLhqUkBzyA
2012-01-09 05:22:28 -------- d-----w- C:\Users\maria\AppData\Roaming\uui3n4Hs7E9ZYkV
2012-01-09 05:22:16 -------- d-----w- C:\Users\maria\AppData\Roaming\Q7EgZhwVltP
2012-01-09 05:22:04 -------- d-----w- C:\Users\maria\AppData\Roaming\uNxu1Do4ms7LgZh
2012-01-09 05:21:52 -------- d-----w- C:\Users\maria\AppData\Roaming\lDbp5QdKR9XUeIz
2012-01-09 05:21:41 -------- d-----w- C:\Users\maria\AppData\Roaming\Axy1Do4ms7E8Rhw
2012-01-09 05:21:26 -------- d-----w- C:\Users\maria\AppData\Roaming\KrtPy1vo4msJd8Z
2012-01-09 05:21:01 -------- d-----w- C:\Users\maria\AppData\Roaming\Hci3GmsJEgqCUlB
2012-01-09 05:20:40 -------- d-----w- C:\Users\maria\AppData\Roaming\jp5Qd8LTqe
2012-01-09 05:20:28 -------- d-----w- C:\Users\maria\AppData\Roaming\R7ERqXkeBPy
2012-01-09 05:20:12 -------- d-----w- C:\Users\maria\AppData\Roaming\SNAubG6fgC
2012-01-09 05:19:50 -------- d-----w- C:\Users\maria\AppData\Roaming\u8RhwVlBPy1Dbp5
2012-01-09 05:19:38 -------- d-----w- C:\Users\maria\AppData\Roaming\QNAcDnaKEgZYkrN
2012-01-09 05:19:26 -------- d-----w- C:\Users\maria\AppData\Roaming\HQd8RhwClrPxuS
2012-01-09 05:19:14 -------- d-----w- C:\Users\maria\AppData\Roaming\XwIlNxu1boGmsJE
2012-01-09 05:19:02 -------- d-----w- C:\Users\maria\AppData\Roaming\WzxuSb3GQ6Kf9XU
2012-01-09 05:18:50 -------- d-----w- C:\Users\maria\AppData\Roaming\qna6WfLgqYkVOty
2012-01-09 05:18:39 -------- d-----w- C:\Users\maria\AppData\Roaming\c5Hd7R9Tj
2012-01-09 05:18:24 -------- d-----w- C:\Users\maria\AppData\Roaming\KFn5HWfLTqCIzNA
2012-01-09 05:18:04 -------- d-----w- C:\Users\maria\AppData\Roaming\xUeBPy1So3G
2012-01-09 05:17:44 -------- d-----w- C:\Users\maria\AppData\Roaming\L5JEf9XUlrNxu2F
2012-01-09 05:17:32 -------- d-----w- C:\Users\maria\AppData\Roaming\agjCkrOx0SiDn4m
2012-01-09 05:17:19 -------- d-----w- C:\Users\maria\AppData\Roaming\llBPy1So3
2012-01-09 05:17:08 -------- d-----w- C:\Users\maria\AppData\Roaming\uboGm6WfLTqY
2012-01-09 05:16:56 -------- d-----w- C:\Users\maria\AppData\Roaming\tFp5HW7LgqCkrNx
2012-01-09 05:16:44 -------- d-----w- C:\Users\maria\AppData\Roaming\hOxy1Dn45JE8ZhU
2012-01-09 05:16:32 -------- d-----w- C:\Users\maria\AppData\Roaming\Sf9XUkrNASbna67
2012-01-09 05:16:20 -------- d-----w- C:\Users\maria\AppData\Roaming\sYUeBPciDn4
2012-01-09 05:16:08 -------- d-----w- C:\Users\maria\AppData\Roaming\jOxuSbp5QdKRgqC
2012-01-09 05:15:56 -------- d-----w- C:\Users\maria\AppData\Roaming\t4msJEg9YjVIzy1
2012-01-09 05:15:44 -------- d-----w- C:\Users\maria\AppData\Roaming\EgqCkrNxuSb3GQs
2012-01-09 05:15:32 -------- d-----w- C:\Users\maria\AppData\Roaming\ABPcDnHQ8
2012-01-09 05:15:20 -------- d-----w- C:\Users\maria\AppData\Roaming\p3n4HsKEgZjC
2012-01-09 05:15:09 -------- d-----w- C:\Users\maria\AppData\Roaming\FSo3maJW8RhX
2012-01-09 05:14:54 -------- d-----w- C:\Users\maria\AppData\Roaming\ZyubpGa6Kf9TqCI
2012-01-09 05:14:44 -------- d-----w- C:\Users\maria\AppData\Roaming\vGs6E8ZhwU
2012-01-09 05:14:19 -------- d-----w- C:\Users\maria\AppData\Roaming\Ag9XUeItN
2012-01-09 05:13:58 -------- d-----w- C:\Users\maria\AppData\Roaming\zTqCklNPu1
2012-01-09 05:13:46 -------- d-----w- C:\Users\maria\AppData\Roaming\WzNAuo3GQ68L
2012-01-09 05:13:34 -------- d-----w- C:\Users\maria\AppData\Roaming\A3Gm6JE8ZhCUrOx
2012-01-09 05:13:22 -------- d-----w- C:\Users\maria\AppData\Roaming\WCBzNAvo3
2012-01-09 05:13:11 -------- d-----w- C:\Users\maria\AppData\Roaming\lEg9XUltNAvo4GQ
2012-01-09 05:12:56 -------- d-----w- C:\Users\maria\AppData\Roaming\Lms7LRhwVOzy1Dn
2012-01-09 05:12:31 -------- d-----w- C:\Users\maria\AppData\Roaming\Wf8TqCkrOt0c1Do
2012-01-09 05:12:15 -------- d-----w- C:\Users\maria\AppData\Roaming\BmH6sWJ7fLgZh
2012-01-09 05:12:09 -------- d-----w- C:\Users\maria\AppData\Roaming\QfRL9TXqjCkVzNx
2012-01-09 05:12:03 -------- d-----w- C:\Users\maria\AppData\Roaming\DXwwjUUCelrzPyA
2012-01-09 05:11:57 -------- d-----w- C:\Users\maria\AppData\Roaming\hOOOBttzPycA
2012-01-09 05:11:51 -------- d-----w- C:\Users\maria\AppData\Roaming\WuuccS1iib3on4m
2012-01-09 05:11:45 -------- d-----w- C:\Users\maria\AppData\Roaming\DD33ppnG4aQsK7
2012-01-09 05:11:40 -------- d-----w- C:\Users\maria\AppData\Roaming\LVVrrzOONtA0uS2
2012-01-09 05:11:35 -------- d-----w- C:\Users\maria\AppData\Roaming\PK77ffRL9gTXqYe
2012-01-09 05:11:30 -------- d-----w- C:\Users\maria\AppData\Roaming\H222ibbF3pn5aQ6
2012-01-09 05:11:25 -------- d-----w- C:\Users\maria\AppData\Roaming\YCeeekIBrz
2012-01-09 05:11:05 -------- d-----w- C:\Users\maria\AppData\Roaming\n55aaQJ66WK8fLh
2012-01-09 05:11:00 -------- d-----w- C:\Users\maria\AppData\Roaming\TyyyxAA1u
2012-01-09 05:10:45 -------- d-----w- C:\Users\maria\AppData\Roaming\ktzzNycAA1vD2b4
2012-01-09 05:10:39 -------- d-----w- C:\Users\maria\AppData\Roaming\L111ivvD2on
2012-01-09 05:10:33 -------- d-----w- C:\Users\maria\AppData\Roaming\ynnGG4aamHsWJfE
2012-01-09 05:10:27 -------- d-----w- C:\Users\maria\AppData\Roaming\kddW7fRRL9gXqY
2012-01-09 05:10:21 -------- d-----w- C:\Users\maria\AppData\Roaming\ZZZ9hTXwj
2012-01-09 05:10:15 -------- d-----w- C:\Users\maria\AppData\Roaming\ukUUVVelOBtz0yA
2012-01-09 05:10:05 -------- d-----w- C:\Users\maria\AppData\Roaming\eAvD2onF4pmHsQ7
2012-01-09 05:09:50 -------- d-----w- C:\Users\maria\AppData\Roaming\tPP00yccS1iD3n4
2012-01-09 05:09:44 -------- d-----w- C:\Users\maria\AppData\Roaming\jiibbD33pn
2012-01-09 05:09:38 -------- d-----w- C:\Users\maria\AppData\Roaming\EG55aaQH6dWKfR9
2012-01-09 05:09:32 -------- d-----w- C:\Users\maria\AppData\Roaming\yEEEK88fRZ9TXj
2012-01-09 05:09:26 -------- d-----w- C:\Users\maria\AppData\Roaming\kqqhhYXwwkVelBz
2012-01-09 05:09:20 -------- d-----w- C:\Users\maria\AppData\Roaming\LVVVrllONtxPuc1
2012-01-09 05:09:14 -------- d-----w- C:\Users\maria\AppData\Roaming\yxxA00uvS2i
2012-01-09 05:09:03 -------- d-----w- C:\Users\maria\AppData\Roaming\ZHH55sQQJ7dK8RZ
2012-01-09 05:08:56 -------- d-----w- C:\Users\maria\AppData\Roaming\uEEEgqhCw
2012-01-09 05:08:50 -------- d-----w- C:\Users\maria\AppData\Roaming\lqqqekIrzNtAciD
2012-01-09 05:08:45 -------- d-----w- C:\Users\maria\AppData\Roaming\n55aaQHH6dW7fLg
2012-01-09 05:08:40 -------- d-----w- C:\Users\maria\AppData\Roaming\gNyyxxA0uvS2bFp
2012-01-09 05:08:35 -------- d-----w- C:\Users\maria\AppData\Roaming\x99ggTXXqjY
2012-01-09 05:08:30 -------- d-----w- C:\Users\maria\AppData\Roaming\QpppnnG5aQH6WK
2012-01-09 05:08:15 -------- d-----w- C:\Users\maria\AppData\Roaming\foobbF33pmGaQ6W
2012-01-09 05:08:10 -------- d-----w- C:\Users\maria\AppData\Roaming\rellIIBrz
2012-01-09 05:08:05 -------- d-----w- C:\Users\maria\AppData\Roaming\pddWWK8ffR9h
2012-01-09 05:07:50 -------- d-----w- C:\Users\maria\AppData\Roaming\CsQQQJ6dEK8fR9T
2012-01-09 05:07:45 -------- d-----w- C:\Users\maria\AppData\Roaming\eccAA1uvv2obFpG
2012-01-09 05:07:40 -------- d-----w- C:\Users\maria\AppData\Roaming\KhYYYXwjUV
2012-01-09 05:07:26 -------- d-----w- C:\Users\maria\AppData\Roaming\ZRRhXjVlBzNcuDo
2012-01-09 05:07:19 -------- d-----w- C:\Users\maria\AppData\Roaming\uwkkUUVrlOBt
2012-01-09 05:07:13 -------- d-----w- C:\Users\maria\AppData\Roaming\ONNNtxxA0ucSib3
2012-01-09 05:07:07 -------- d-----w- C:\Users\maria\AppData\Roaming\XvSS2obF3pmGaJd
2012-01-09 05:07:01 -------- d-----w- C:\Users\maria\AppData\Roaming\i4ppmG5sJd
2012-01-09 05:06:55 -------- d-----w- C:\Users\maria\AppData\Roaming\OJJd8ggqhYXwUeO
2012-01-09 05:06:50 -------- d-----w- C:\Users\maria\AppData\Roaming\sTTZqYCwkO0S13
2012-01-09 05:06:43 -------- d-----w- C:\Users\maria\AppData\Roaming\beekkIBrzONyA0v
2012-01-09 05:06:37 -------- d-----w- C:\Users\maria\AppData\Roaming\PPPyccA1D2bF4mE
2012-01-09 05:06:31 -------- d-----w- C:\Users\maria\AppData\Roaming\CivvDD2onF4
2012-01-09 05:06:25 -------- d-----w- C:\Users\maria\AppData\Roaming\b4aamHH6sWf8gZY
2012-01-09 05:06:19 -------- d-----w- C:\Users\maria\AppData\Roaming\PWKKK7fRL9gTqj
2012-01-09 05:06:13 -------- d-----w- C:\Users\maria\AppData\Roaming\ChhhTXXwjUCeIBz
2012-01-09 05:06:07 -------- d-----w- C:\Users\maria\AppData\Roaming\nVVelOOBtP0cAiD
2012-01-09 05:06:01 -------- d-----w- C:\Users\maria\AppData\Roaming\AxPP00ycS1iv
2012-01-09 05:05:55 -------- d-----w- C:\Users\maria\AppData\Roaming\diiibDD3pnG4Q6s
2012-01-09 05:05:49 -------- d-----w- C:\Users\maria\AppData\Roaming\xJJJ66dWK8fR9hX
2012-01-09 05:05:43 -------- d-----w- C:\Users\maria\AppData\Roaming\wEEKYwUUVe
2012-01-09 05:05:37 -------- d-----w- C:\Users\maria\AppData\Roaming\fqqhhYCCwkUrlBt
2012-01-09 05:05:31 -------- d-----w- C:\Users\maria\AppData\Roaming\mVVVrlNtxci3G
2012-01-09 05:05:25 -------- d-----w- C:\Users\maria\AppData\Roaming\wxxAuF3pnG5QHW7
2012-01-09 05:05:20 -------- d-----w- C:\Users\maria\AppData\Roaming\KhhTTXqqjU
2012-01-09 05:05:15 -------- d-----w- C:\Users\maria\AppData\Roaming\BmmmGG5aQJ6dK
2012-01-09 05:05:10 -------- d-----w- C:\Users\maria\AppData\Roaming\oBBrrzPNNyA1uS
2012-01-09 05:05:05 -------- d-----w- C:\Users\maria\AppData\Roaming\RR9TXUUCelIBzPy
2012-01-09 05:04:50 -------- d-----w- C:\Users\maria\AppData\Roaming\UETwjjUCelB
2012-01-09 05:04:30 -------- d-----w- C:\Users\maria\AppData\Roaming\GzyycA1ivD2oF4H
2012-01-09 05:04:24 -------- d-----w- C:\Users\maria\AppData\Roaming\iIxio4m6WEL8TqY
2012-01-09 05:04:18 -------- d-----w- C:\Users\maria\AppData\Roaming\BpppnKfR9g
2012-01-09 05:04:12 -------- d-----w- C:\Users\maria\AppData\Roaming\mRRLL9hTTXjUCkB
2012-01-09 05:04:07 -------- d-----w- C:\Users\maria\AppData\Roaming\YFFF33pmG5aQ6dK
2012-01-09 05:03:57 -------- d-----w- C:\Users\maria\AppData\Roaming\WKKK88fRL9hT
2012-01-09 05:03:37 -------- d-----w- C:\Users\maria\AppData\Roaming\x111uvvD2obFpG5
2012-01-09 05:03:31 -------- d-----w- C:\Users\maria\AppData\Roaming\UnnFF4aamH5WJdE
2012-01-09 05:03:10 -------- d-----w- C:\Users\maria\AppData\Roaming\XQHH6ssWK7ELgTj
2012-01-09 05:03:04 -------- d-----w- C:\Users\maria\AppData\Roaming\i8LL9qCeBONx0
2012-01-09 05:02:59 -------- d-----w- C:\Users\maria\AppData\Roaming\f222obbF3pmGaQ6
2012-01-09 05:02:54 -------- d-----w- C:\Users\maria\AppData\Roaming\rCCeekIIBrONyA0
2012-01-09 05:02:44 -------- d-----w- C:\Users\maria\AppData\Roaming\huuuvSS2o
2012-01-09 05:02:25 -------- d-----w- C:\Users\maria\AppData\Roaming\srPxd9OA0pW
2012-01-09 05:02:18 -------- d-----w- C:\Users\maria\AppData\Roaming\oXwkUVVeBtz
2012-01-09 05:02:12 -------- d-----w- C:\Users\maria\AppData\Roaming\rQH6sWK7E9TqYwV
2012-01-09 05:02:06 -------- d-----w- C:\Users\maria\AppData\Roaming\eBPx1So3maJW8L
2012-01-09 05:01:48 -------- d-----w- C:\Users\maria\AppData\Roaming\DWf9ZjIrNu1
2012-01-09 05:01:26 -------- d-----w- C:\Users\maria\AppData\Roaming\syvF5dRXezAvFsE
2012-01-09 05:01:15 -------- d-----w- C:\Users\maria\AppData\Roaming\fCUrOt0c1DoFa
2012-01-09 05:01:00 -------- d-----w- C:\Users\maria\AppData\Roaming\tLgZjwIrOtPu1b3
2012-01-09 05:00:35 -------- d-----w- C:\Users\maria\AppData\Roaming\zIrOt0c2b3naHsK
2012-01-09 05:00:14 -------- d-----w- C:\Users\maria\AppData\Roaming\fNxu2FpGQ6W8R9T
2012-01-09 05:00:03 -------- d-----w- C:\Users\maria\AppData\Roaming\PYkVlBPyAiDn4ms
2012-01-09 04:59:41 -------- d-----w- C:\Users\maria\AppData\Roaming\xd79XCVzt0S
2012-01-09 04:59:29 -------- d-----w- C:\Users\maria\AppData\Roaming\lsJdKgZhXjVltPy
2012-01-09 04:59:17 -------- d-----w- C:\Users\maria\AppData\Roaming\fuSb3n4QsKfLgZj
2012-01-09 04:59:05 -------- d-----w- C:\Users\maria\AppData\Roaming\cm5JdKgYwVeItPy
2012-01-09 04:58:52 -------- d-----w- C:\Users\maria\AppData\Roaming\ZqYkVOtAu
2012-01-09 04:58:42 -------- d-----w- C:\Users\maria\AppData\Roaming\KfLhXjCIrOyAuSi
2012-01-09 04:58:27 -------- d-----w- C:\Users\maria\AppData\Roaming\TKZhwUlBzyAu2b3
2012-01-09 04:58:06 -------- d-----w- C:\Users\maria\AppData\Roaming\iy1v2FpGsJ
2012-01-09 04:57:47 -------- d-----w- C:\Users\maria\AppData\Roaming\hRqXkVlBPyAiDo4
2012-01-09 04:57:35 -------- d-----w- C:\Users\maria\AppData\Roaming\Yui3n4HsKEgZY
2012-01-09 04:57:23 -------- d-----w- C:\Users\maria\AppData\Roaming\Kp5Q7EgZhXUeI
2012-01-09 04:57:02 -------- d-----w- C:\Users\maria\AppData\Roaming\QmsfLgqYwUlBx0
2012-01-09 04:56:51 -------- d-----w- C:\Users\maria\AppData\Roaming\pb3GaHdKf9Tq
2012-01-09 04:56:36 -------- d-----w- C:\Users\maria\AppData\Roaming\XviFpGQ6KfLgqYe
2012-01-09 04:56:16 -------- d-----w- C:\Users\maria\AppData\Roaming\tXjClBzyAu2b3m5
2012-01-09 04:55:56 -------- d-----w- C:\Users\maria\AppData\Roaming\CpGs6E8RhXj
2012-01-09 04:55:46 -------- d-----w- C:\Users\maria\AppData\Roaming\fdKgZhwUeItPyAu
2012-01-09 04:55:31 -------- d-----w- C:\Users\maria\AppData\Roaming\QKR9YwUlBzN
2012-01-09 04:55:19 -------- d-----w- C:\Users\maria\AppData\Roaming\hrOx0c2bpGaHW7E
2012-01-09 04:55:07 -------- d-----w- C:\Users\maria\AppData\Roaming\iDoFpGs6E8R9TwU
2012-01-09 04:54:57 -------- d-----w- C:\Users\maria\AppData\Roaming\t7E8R9YwUlBzNc1
2012-01-09 04:54:42 -------- d-----w- C:\Users\maria\AppData\Roaming\JHs7RqXkVlBPyAv
2012-01-09 04:54:21 -------- d-----w- C:\Users\maria\AppData\Roaming\OBx0c1v3na
2012-01-09 04:54:02 -------- d-----w- C:\Users\maria\AppData\Roaming\D8ThCOx0c1v3n4m
2012-01-09 04:53:49 -------- d-----w- C:\Users\maria\AppData\Roaming\qeIrPx1v2
2012-01-09 04:53:38 -------- d-----w- C:\Users\maria\AppData\Roaming\t3n4m6W7E8TqC
2012-01-09 04:53:26 -------- d-----w- C:\Users\maria\AppData\Roaming\vxuSi3n4Qs
2012-01-09 04:53:12 -------- d-----w- C:\Users\maria\AppData\Roaming\nOyAv2b3n5QdKfL
2012-01-09 04:52:47 -------- d-----w- C:\Users\maria\AppData\Roaming\WvFG68hUIN0inQK
2012-01-09 04:52:22 -------- d-----w- C:\Users\maria\AppData\Roaming\QGQdKRTwUIPy12
2012-01-09 04:52:02 -------- d-----w- C:\Users\maria\AppData\Roaming\t8YwVltPci2npHQ
2012-01-09 04:51:49 -------- d-----w- C:\Users\maria\AppData\Roaming\pBN0ipQdLTjeIzN
2012-01-09 04:51:39 -------- d-----w- C:\Users\maria\AppData\Roaming\ASoFp5Q6W8R9
2012-01-09 04:51:29 -------- d-----w- C:\Users\maria\AppData\Roaming\waJdKfLhqUeIrOx
2012-01-09 04:51:04 -------- d-----w- C:\Users\maria\AppData\Roaming\PgZhXjVltPyAu2
2012-01-09 04:50:39 -------- d-----w- C:\Users\maria\AppData\Roaming\NVlBPyAiDoFp5Q
2012-01-09 04:50:18 -------- d-----w- C:\Users\maria\AppData\Roaming\wIrOtPuSiDn4m
2012-01-09 04:50:08 -------- d-----w- C:\Users\maria\AppData\Roaming\Bc2b3n4Q6W7EgZj
2012-01-09 04:49:58 -------- d-----w- C:\Users\maria\AppData\Roaming\Z6KRTjeVO
2012-01-09 04:49:42 -------- d-----w- C:\Users\maria\AppData\Roaming\GS2i3na6Kf9Tj
2012-01-09 04:49:34 -------- d-----w- C:\Users\maria\AppData\Roaming\liDpGaHsKE9TqYw
2012-01-09 04:49:09 -------- d-----w- C:\Users\maria\AppData\Roaming\kQ6KfTjCkVztAuS
2012-01-09 04:48:44 -------- d-----w- C:\Users\maria\AppData\Roaming\PfLhXjCIrOyAuS
2012-01-09 04:48:23 -------- d-----w- C:\Users\maria\AppData\Roaming\OZhwUeItPy1v2bp
2012-01-09 04:48:12 -------- d-----w- C:\Users\maria\AppData\Roaming\wW7E8ZhCkVlBP
2012-01-09 04:47:57 -------- d-----w- C:\Users\maria\AppData\Roaming\iQK9qkOP134sfTY
2012-01-09 04:47:32 -------- d-----w- C:\Users\maria\AppData\Roaming\SLgXjCkVzNAuSiD
2012-01-09 04:47:07 -------- d-----w- C:\Users\maria\AppData\Roaming\tUeBzNxuSi3n5Qd
2012-01-09 04:46:46 -------- d-----w- C:\Users\maria\AppData\Roaming\zzNcuDoFG68ZUlr
2012-01-09 04:46:35 -------- d-----w- C:\Users\maria\AppData\Roaming\Y2npHsJdKg
2012-01-09 04:46:26 -------- d-----w- C:\Users\maria\AppData\Roaming\Kd8RqYwUeOt0c1v
2012-01-09 04:46:11 -------- d-----w- C:\Users\maria\AppData\Roaming\R5W7E8RqYwVlBz0
2012-01-09 04:46:01 -------- d-----w- C:\Users\maria\AppData\Roaming\cCkVlBx0c1v3FaH
2012-01-09 04:45:46 -------- d-----w- C:\Users\maria\AppData\Roaming\VLgZhCUrOtPc1v3
2012-01-09 04:45:35 -------- d-----w- C:\Users\maria\AppData\Roaming\EltuSi3n4m
2012-01-09 04:45:16 -------- d-----w- C:\Users\maria\AppData\Roaming\SsKf9TqYwVlNx0S
2012-01-09 04:44:51 -------- d-----w- C:\Users\maria\AppData\Roaming\jUeIrOx0v2FpGQ6
2012-01-09 04:44:36 -------- d-----w- C:\Users\maria\AppData\Roaming\DR9TqCkBzNx0v2
2012-01-09 04:44:21 -------- d-----w- C:\Users\maria\AppData\Roaming\n8R9TjClBzNx1v2
2012-01-09 04:43:56 -------- d-----w- C:\Users\maria\AppData\Roaming\rjeItPyAuDoFm5Q
2012-01-09 04:43:45 -------- d-----w- C:\Users\maria\AppData\Roaming\Fz0c1v2n4
2012-01-09 04:43:20 -------- d-----w- C:\Users\maria\AppData\Roaming\twIrNx0SiDoGa6W
2012-01-09 04:43:05 -------- d-----w- C:\Users\maria\AppData\Roaming\XLgZjCkVlNx0SiD
2012-01-09 04:42:50 -------- d-----w- C:\Users\maria\AppData\Roaming\CkkzONtx0ucSib3
2012-01-09 04:42:40 -------- d-----w- C:\Users\maria\AppData\Roaming\oppnnG4aaQ6sW7
2012-01-09 04:42:25 -------- d-----w- C:\Users\maria\AppData\Roaming\abbbD33pnG4aH6W
2012-01-09 04:42:16 -------- d-----w- C:\Users\maria\AppData\Roaming\wIIIVrrzONtA0cS
2012-01-09 04:42:04 -------- d-----w- C:\Users\maria\AppData\Roaming\o3ppmGG5aQJ6WKf
2012-01-09 04:41:59 -------- d-----w- C:\Users\maria\AppData\Roaming\grrrzPPNyxA
2012-01-09 04:41:54 -------- d-----w- C:\Users\maria\AppData\Roaming\bPNNyycA1uvD2b
2012-01-09 04:41:39 -------- d-----w- C:\Users\maria\AppData\Roaming\bEEEK88gRZ9hXwU
2012-01-09 04:41:34 -------- d-----w- C:\Users\maria\AppData\Roaming\eBBBtzzP0cAiDoF
2012-01-09 04:41:28 -------- d-----w- C:\Users\maria\AppData\Roaming\ymmHH55sWJ7ELgR
2012-01-09 04:41:22 -------- d-----w- C:\Users\maria\AppData\Roaming\SWK7fEL9gTZqY
2012-01-09 04:41:17 -------- d-----w- C:\Users\maria\AppData\Roaming\KSSS2iibD3pn4aH
2012-01-09 04:40:58 -------- d-----w- C:\Users\maria\AppData\Roaming\zNNtxxA0ucS2bDp
2012-01-09 04:40:50 -------- d-----w- C:\Users\maria\AppData\Roaming\l55ssQJJ7dE8
2012-01-09 04:40:40 -------- d-----w- C:\Users\maria\AppData\Roaming\hqqhXkkUVelOtz0
2012-01-09 04:40:25 -------- d-----w- C:\Users\maria\AppData\Roaming\w8gggqhXwk
2012-01-09 04:40:16 -------- d-----w- C:\Users\maria\AppData\Roaming\ftPci3Fa5Jd8RhX
2012-01-09 04:39:56 -------- d-----w- C:\Users\maria\AppData\Roaming\eLTqCkrOt0ciDo
2012-01-09 04:39:41 -------- d-----w- C:\Users\maria\AppData\Roaming\L6KE9ZjwIrOx0ci
2012-01-09 04:39:12 -------- d-----w- C:\Users\maria\AppData\Roaming\i88ggTZqhYCkx0S
2012-01-09 04:39:06 -------- d-----w- C:\Users\maria\AppData\Roaming\bIBrNyx0uiFn5Hd
2012-01-09 04:39:00 -------- d-----w- C:\Users\maria\AppData\Roaming\L777ffRL9gT
2012-01-09 04:38:55 -------- d-----w- C:\Users\maria\AppData\Roaming\zSS22ibFF3nG5
2012-01-09 04:38:45 -------- d-----w- C:\Users\maria\AppData\Roaming\jJJ66dWWK8fL9Tq
2012-01-09 04:38:40 -------- d-----w- C:\Users\maria\AppData\Roaming\v111uvvS2oF3mGa
2012-01-09 04:38:34 -------- d-----w- C:\Users\maria\AppData\Roaming\On4p5sQJ7EKgR9h
2012-01-09 04:38:19 -------- d-----w- C:\Users\maria\AppData\Roaming\CWWW7ddEL8gZqYX
2012-01-09 04:38:02 -------- d-----w- C:\Users\maria\AppData\Roaming\AXwUCeIzNxv2bpG
2012-01-09 04:37:56 -------- d-----w- C:\Users\maria\AppData\Roaming\WmGG5aQ6d
2012-01-09 04:37:51 -------- d-----w- C:\Users\maria\AppData\Roaming\IPPNNyxxA1vS
2012-01-09 04:37:41 -------- d-----w- C:\Users\maria\AppData\Roaming\RFFF4ppmG5sQ6dK
2012-01-09 04:37:36 -------- d-----w- C:\Users\maria\AppData\Roaming\zIIBBtzzPNyA1vD
2012-01-09 04:37:31 -------- d-----w- C:\Users\maria\AppData\Roaming\mKKK88RRZ9hXwUV
2012-01-09 04:37:16 -------- d-----w- C:\Users\maria\AppData\Roaming\dJJdEK8gRZ9YXjU
2012-01-09 04:37:01 -------- d-----w- C:\Users\maria\AppData\Roaming\g5sWWJ7dL8RYkeO
2012-01-09 04:36:56 -------- d-----w- C:\Users\maria\AppData\Roaming\y00yycAA1iv
2012-01-09 04:36:51 -------- d-----w- C:\Users\maria\AppData\Roaming\XZqqhhYXwkUVe
2012-01-09 04:36:41 -------- d-----w- C:\Users\maria\AppData\Roaming\JBttxxP0ycS1vDo
2012-01-09 04:36:36 -------- d-----w- C:\Users\maria\AppData\Roaming\V8ggTTZqhYCwUVl
2012-01-09 04:36:31 -------- d-----w- C:\Users\maria\AppData\Roaming\FooonGG4a
2012-01-09 04:36:16 -------- d-----w- C:\Users\maria\AppData\Roaming\HiibbD33on4am6s
2012-01-09 04:35:56 -------- d-----w- C:\Users\maria\AppData\Roaming\OjjYYCeekIVzO
2012-01-09 04:35:51 -------- d-----w- C:\Users\maria\AppData\Roaming\naQQHH6WK7fL9gZ
2012-01-09 04:35:46 -------- d-----w- C:\Users\maria\AppData\Roaming\TxxxA00ucS2bDpn
2012-01-09 04:35:41 -------- d-----w- C:\Users\maria\AppData\Roaming\xgTTTXqjYCekIrO
2012-01-09 04:35:26 -------- d-----w- C:\Users\maria\AppData\Roaming\bRRRL99hTXqjCe
2012-01-09 04:35:21 -------- d-----w- C:\Users\maria\AppData\Roaming\fbFF33pnG5aQ6dK
2012-01-09 04:35:16 -------- d-----w- C:\Users\maria\AppData\Roaming\zIIIBrrzONyA0uS
2012-01-09 04:35:01 -------- d-----w- C:\Users\maria\AppData\Roaming\uUCCCelIBrzP
2012-01-09 04:34:46 -------- d-----w- C:\Users\maria\AppData\Roaming\oXXwwjUCelIBzPy
2012-01-09 04:34:41 -------- d-----w- C:\Users\maria\AppData\Roaming\BGG55sQJ6dEK8R9
2012-01-09 04:34:36 -------- d-----w- C:\Users\maria\AppData\Roaming\tNNyycAA1u
2012-01-09 04:34:20 -------- d-----w- C:\Users\maria\AppData\Roaming\f7dd8gTTZq
2012-01-09 04:34:00 -------- d-----w- C:\Users\maria\AppData\Roaming\yPP00uccS1iD3nG
2012-01-09 04:33:55 -------- d-----w- C:\Users\maria\AppData\Roaming\CTZZqqjYCwkIrlN
2012-01-09 04:33:40 -------- d-----w- C:\Users\maria\AppData\Roaming\BL9ggTZqjYCwkVl
2012-01-09 04:33:30 -------- d-----w- C:\Users\maria\AppData\Roaming\ZVVVrzzONtx0uS2
2012-01-09 04:33:25 -------- d-----w- C:\Users\maria\AppData\Roaming\A777fRRL9
2012-01-09 04:33:20 -------- d-----w- C:\Users\maria\AppData\Roaming\J222ibbF3pn5
2012-01-09 04:33:05 -------- d-----w- C:\Users\maria\AppData\Roaming\E0uuvvS2ibF3pGa
2012-01-09 04:32:55 -------- d-----w- C:\Users\maria\AppData\Roaming\m5aaQQJ6dW
2012-01-09 04:32:31 -------- d-----w- C:\Users\maria\AppData\Roaming\R1v2pGa6W8R9TjC
2012-01-09 04:32:07 -------- d-----w- C:\Users\maria\AppData\Roaming\d4ms6E8RhwmLN0G
2012-01-09 04:31:44 -------- d-----w- C:\Users\maria\AppData\Roaming\aqYkVlNx0SiDoaH
2012-01-09 04:31:28 -------- d-----w- C:\Users\maria\AppData\Roaming\ZQ6KfLgXj
2012-01-09 04:31:04 -------- d-----w- C:\Users\maria\AppData\Roaming\EfLTqUeIrOyAu2b
2012-01-09 04:30:38 -------- d-----w- C:\Users\maria\AppData\Roaming\lzNx1v2Fp
2012-01-09 04:30:12 -------- d-----w- C:\Users\maria\AppData\Roaming\eAuSb3n4Q6W7LgZ
2012-01-09 04:18:06 -------- d-----w- C:\Users\maria\AppData\Roaming\yRgTXjYkVu2
2012-01-09 04:18:06 -------- d-----w- C:\Users\maria\AppData\Roaming\VgTXjYkVru2DpGQ
2012-01-09 04:18:06 -------- d-----w- C:\Users\maria\AppData\Roaming\SReyvGdRgXYIr
2012-01-09 04:18:06 -------- d-----w- C:\Users\maria\AppData\Roaming\RZIvGKjz0bQKLTj
2012-01-09 04:18:06 -------- d-----w- C:\Users\maria\AppData\Roaming\PvGdRgTXjkVu2D
2012-01-09 04:18:06 -------- d-----w- C:\Users\maria\AppData\Roaming\OQReyvGdRgXYIru
2012-01-09 04:18:06 -------- d-----w- C:\Users\maria\AppData\Roaming\NQReyvGdRgXYIru
2012-01-09 04:17:53 -------- d-----w- C:\Users\maria\AppData\Roaming\sGAjHchHzRmxqHc
2012-01-09 03:14:36 -------- d-----w- C:\Users\maria\AppData\Roaming\oU3XSLP7tJl
2012-01-09 03:13:43 -------- d-----w- C:\Users\maria\AppData\Roaming\Wp5JKRYjezNAps6
2012-01-09 03:13:42 -------- d-----w- C:\Users\maria\AppData\Roaming\rC0HYS4JLgZh
2012-01-09 03:13:42 -------- d-----w- C:\Users\maria\AppData\Roaming\nQC0HYS4JLgZhVt
2012-01-09 03:13:42 -------- d-----w- C:\Users\maria\AppData\Roaming\GQC0HYS4JLgZhVt
2012-01-09 03:13:42 -------- d-----w- C:\Users\maria\AppData\Roaming\DC0HYS4JLgZ
2012-01-09 03:13:42 -------- d-----w- C:\Users\maria\AppData\Roaming\bC0HYS4JLgZ
2012-01-09 03:13:41 -------- d-----w- C:\Users\maria\AppData\Roaming\Y08DjFhAGLb7IS7
2012-01-09 03:13:39 -------- d-----w- C:\Users\maria\AppData\Roaming\pFNhFALbYHOWcZu
2012-01-09 03:13:28 -------- d-----w- C:\Users\maria\AppData\Roaming\LbLbiKziEzdIiWg
2012-01-09 03:13:20 -------- d-----w- C:\Users\maria\AppData\Roaming\AN7Vd2X3w29tgKB
2012-01-09 03:13:13 -------- d-----w- C:\Users\maria\AppData\Roaming\bRGCvEiV7oI7NFN
2012-01-09 03:12:20 -------- d-----w- C:\Users\maria\AppData\Roaming\n34gB0u2p
2012-01-09 03:11:12 -------- d-----w- C:\Users\maria\AppData\Roaming\s9xk93xYsvNhJp
2012-01-09 03:11:11 -------- d-----w- C:\Users\maria\AppData\Roaming\GttZy9QuIf3zjE3
2012-01-09 03:11:11 -------- d-----w- C:\Users\maria\AppData\Roaming\flBZy9QuIf3zjE3
2012-01-09 03:11:10 -------- d-----w- C:\Users\maria\AppData\Roaming\jztZy9QuIf3zjE3
2012-01-09 03:11:09 -------- d-----w- C:\Users\maria\AppData\Roaming\CZxk93xYsvNhJp
2012-01-09 03:11:08 -------- d-----w- C:\Users\maria\AppData\Roaming\RlBZy9QuIf3zjE3
2012-01-09 03:11:06 -------- d-----w- C:\Users\maria\AppData\Roaming\eBGizTayUgG
2012-01-09 03:11:04 -------- d-----w- C:\Users\maria\AppData\Roaming\IELlBZy9QuIf3zj
2012-01-09 03:11:02 -------- d-----w- C:\Users\maria\AppData\Roaming\UjVrAD46Elt9AI9
2012-01-09 03:11:02 -------- d-----w- C:\Users\maria\AppData\Roaming\spHsELlBZxI9pPC
2012-01-09 03:11:02 -------- d-----w- C:\Users\maria\AppData\Roaming\kELlBZy9QuIf3z
2012-01-09 03:10:59 -------- d-----w- C:\Users\maria\AppData\Roaming\yLTjVrAD46Elt9A
2012-01-09 03:10:59 -------- d-----w- C:\Users\maria\AppData\Roaming\tN0pHsELlt9AI
2012-01-09 03:10:58 -------- d-----w- C:\Users\maria\AppData\Roaming\PSaKRLTjVAp6Elt
2012-01-09 03:10:56 -------- d-----w- C:\Users\maria\AppData\Roaming\i6fhVxSoHdZUiFs
2012-01-09 03:10:56 -------- d-----w- C:\Users\maria\AppData\Roaming\fXjBOx0SaK
2012-01-09 03:10:55 -------- d-----w- C:\Users\maria\AppData\Roaming\RHgrSqtcD4EYezA
2012-01-09 03:10:54 -------- d-----w- C:\Users\maria\AppData\Roaming\IZUiFsKXBc2mJRX
2012-01-09 03:10:52 -------- d-----w- C:\Users\maria\AppData\Roaming\WJE8ZhwCva89Xr0
2012-01-09 03:10:47 -------- d-----w- C:\Users\maria\AppData\Roaming\dfjINcD6fjO4ETY
2012-01-09 03:10:23 -------- d-----w- C:\Users\maria\AppData\Roaming\Kx97itrjqTo6nns
2012-01-09 03:10:05 -------- d-----w- C:\Users\maria\AppData\Local\ElevatedDiagnostics
2012-01-09 03:09:55 -------- d-----w- C:\Users\maria\AppData\Roaming\udgacCpOXGAeLUc
2012-01-09 03:09:48 -------- d-----w- C:\Users\maria\AppData\Roaming\qQx2leixXsP7pNw
2012-01-09 03:09:43 -------- d-----w- C:\Users\maria\AppData\Roaming\hxiOeixXsP7p
2012-01-09 03:08:57 -------- d-----w- C:\Users\maria\AppData\Roaming\FwcXfmnlgXJJaTv
2012-01-09 03:07:21 -------- d-----w- C:\Users\maria\AppData\Roaming\DCx5cCcbVTkr18o
2012-01-09 03:07:15 -------- d-----w- C:\Users\maria\AppData\Roaming\vCx5cCcbVTkr18o
2012-01-09 03:07:12 -------- d-----w- C:\Users\maria\AppData\Roaming\eCx5cCcbVTkr18o
2012-01-09 03:06:58 -------- d-----w- C:\Users\maria\AppData\Roaming\WYwCx5cCcbVTkr1
2012-01-09 03:06:57 -------- d-----w- C:\Users\maria\AppData\Roaming\R39syHWuvu1
2012-01-09 03:06:57 -------- d-----w- C:\Users\maria\AppData\Roaming\L39syHWuvu1
2012-01-09 03:06:53 -------- d-----w- C:\Users\maria\AppData\Roaming\djlVOrSdGr3aNVy
2012-01-09 03:06:51 -------- d-----w- C:\Users\maria\AppData\Roaming\UjlVOrSdGr3aNV
2012-01-09 03:06:51 -------- d-----w- C:\Users\maria\AppData\Roaming\CjlVOrSdGr3aNV
2012-01-09 03:06:13 -------- d-----w- C:\Users\maria\AppData\Roaming\JesNmam5PG4uPqb
2012-01-09 03:06:05 -------- d-----w- C:\Users\maria\AppData\Roaming\eTR4aFOdOrYjsZ
2012-01-09 03:06:01 -------- d-----w- C:\Users\maria\AppData\Roaming\wqTK8KnpvwGCUg9
2012-01-09 03:05:45 -------- d-----w- C:\Users\maria\AppData\Roaming\Pwn5PixlBUQBGmF
2012-01-09 03:05:45 -------- d-----w- C:\Users\maria\AppData\Roaming\nixlBUQBGmFn
2012-01-09 03:05:29 -------- d-----w- C:\Users\maria\AppData\Roaming\c2ElJesnpbRP
2012-01-09 03:05:28 -------- d-----w- C:\Users\maria\AppData\Roaming\pNlCqsW5u
2012-01-09 03:05:11 -------- d-----w- C:\Users\maria\AppData\Roaming\aRw3Pkh7EoRZkmp
2012-01-09 03:05:06 -------- d-----w- C:\Users\maria\AppData\Roaming\sJXUVh7JFbnYloQ
2012-01-09 03:05:06 -------- d-----w- C:\Users\maria\AppData\Roaming\qJXUVh7JFbnYloQ
2012-01-09 03:03:59 -------- d-----w- C:\Users\maria\AppData\Roaming\S5NLpIHNLydcg
2012-01-09 03:02:56 -------- d-----w- C:\Users\maria\AppData\Roaming\CwmPEpLP3qNftg
2012-01-09 03:02:55 -------- d-----w- C:\Users\maria\AppData\Roaming\EEuImyHU0mX5C5z
2012-01-09 03:02:52 -------- d-----w- C:\Users\maria\AppData\Roaming\B0CfyXcdUuQU6
2012-01-09 03:02:47 -------- d-----w- C:\Users\maria\AppData\Roaming\vdJCbGQ8Ce5cRaZ
2012-01-09 03:02:47 -------- d-----w- C:\Users\maria\AppData\Roaming\EbGQ8Ce5cRaZAHw
2012-01-09 03:02:46 -------- d-----w- C:\Users\maria\AppData\Roaming\SdJCbGQ8Ce5cRaZ
2012-01-09 03:02:09 -------- d-----w- C:\Users\maria\AppData\Roaming\kEWcs2tIYjCerl
2012-01-09 03:02:06 -------- d-----w- C:\Users\maria\AppData\Roaming\RRclKHXHFbucDFn
2012-01-09 03:02:06 -------- d-----w- C:\Users\maria\AppData\Roaming\gRclKHXHFbucDFn
2012-01-09 03:01:52 -------- d-----w- C:\Users\maria\AppData\Roaming\L6O5YniiXDzL7l7
2012-01-09 03:01:40 -------- d-----w- C:\Users\maria\AppData\Roaming\JvswGiPIaj4khhm
2012-01-09 03:01:33 -------- d-----w- C:\Users\maria\AppData\Roaming\v2Rtsyaqbulj19D
2012-01-09 03:01:27 -------- d-----w- C:\Users\maria\AppData\Roaming\egvRPGYSKimXQoN
2012-01-09 03:01:26 -------- d-----w- C:\Users\maria\AppData\Roaming\GXudvswGiP
2012-01-09 03:01:23 -------- d-----w- C:\Users\maria\AppData\Roaming\p08OaeGC1KU4ziE
2012-01-09 03:01:12 -------- d-----w- C:\Users\maria\AppData\Roaming\k306VmTSqA7OKO4
2012-01-09 03:01:07 -------- d-----w- C:\Users\maria\AppData\Roaming\SbqAdx5evI
2012-01-09 03:01:07 -------- d-----w- C:\Users\maria\AppData\Roaming\F06VmTSqA7OK
2012-01-09 03:01:05 -------- d-----w- C:\Users\maria\AppData\Roaming\NgP306VmTSqA7O
2012-01-09 02:59:49 -------- d-----w- C:\Users\maria\AppData\Roaming\m2gJrnj2ftdqNWD
2012-01-09 02:59:45 -------- d-----w- C:\Users\maria\AppData\Roaming\ScExJk2jt3
2012-01-09 02:59:41 -------- d-----w- C:\Users\maria\AppData\Roaming\TgA5VpXAL
2012-01-09 02:59:31 -------- d-----w- C:\Users\maria\AppData\Roaming\ExlYdGjenvKlG
2012-01-09 02:59:29 -------- d-----w- C:\Users\maria\AppData\Roaming\xgfrUXWpZU3A6U
2012-01-09 02:59:29 -------- d-----w- C:\Users\maria\AppData\Roaming\slYdGjenvKl
2012-01-09 02:59:26 -------- d-----w- C:\Users\maria\AppData\Roaming\s3bIeDvxVhtvg7X
2012-01-09 02:59:24 -------- d-----w- C:\Users\maria\AppData\Roaming\y9xlYdGjenv
2012-01-09 02:59:09 -------- d-----w- C:\Users\maria\AppData\Roaming\KJHs2xBgdV
2012-01-09 02:59:08 -------- d-----w- C:\Users\maria\AppData\Roaming\S0zqqeUj6obxx
2012-01-09 02:58:51 -------- d-----w- C:\Users\maria\AppData\Roaming\RYlwYjPxBrqE6mG
2012-01-09 02:58:49 -------- d-----w- C:\Users\maria\AppData\Roaming\kBYlwYjPxtrqE6m
2012-01-09 02:58:41 -------- d-----w- C:\Users\maria\AppData\Roaming\IBYlwYjPx
2012-01-09 02:58:25 -------- d-----w- C:\Users\maria\AppData\Roaming\jy1PNzrTprgDacr
2012-01-09 02:58:17 -------- d-----w- C:\Users\maria\AppData\Roaming\YPNzrTprgD
2012-01-09 02:58:16 -------- d-----w- C:\Users\maria\AppData\Roaming\lgeE2a4Fb1tgpzL
2012-01-09 02:58:12 -------- d-----w- C:\Users\maria\AppData\Roaming\yw9FpSXIkXhf6Aw
2012-01-09 02:57:58 -------- d-----w- C:\Users\maria\AppData\Roaming\Na7fkSpV5X9sHa1
2012-01-09 02:57:52 -------- d-----w- C:\Users\maria\AppData\Roaming\KOJwS3QKCyFea9E
2012-01-09 02:57:46 -------- d-----w- C:\Users\maria\AppData\Roaming\ha7fkSpV5
2012-01-09 02:57:44 -------- d-----w- C:\Users\maria\AppData\Roaming\KcfiFOJwS3QKCyF
2012-01-09 02:57:43 -------- d-----w- C:\Users\maria\AppData\Roaming\QQYAJqnj4g2TB3s
2012-01-09 02:57:43 -------- d-----w- C:\Users\maria\AppData\Roaming\jNyx9ZokiWLkzbW
2012-01-09 02:57:41 -------- d-----w- C:\Users\maria\AppData\Roaming\AFOJwS3QK
2012-01-09 02:57:37 -------- d-----w- C:\Users\maria\AppData\Roaming\LAQYAJqnj4g2TB
2012-01-09 02:57:24 -------- d-----w- C:\Users\maria\AppData\Roaming\WsKNKrmKOuU9
2012-01-09 02:56:32 -------- d-----w- C:\Users\maria\AppData\Roaming\u6SOU8a1l
2012-01-09 02:56:17 -------- d-----w- C:\Users\maria\AppData\Roaming\zEalW30BXWbyzTW
2012-01-09 02:56:15 -------- d-----w- C:\Users\maria\AppData\Roaming\NK8EalW30BX
2012-01-09 02:56:13 -------- d-----w- C:\Users\maria\AppData\Roaming\gK8EalW30BX
2012-01-09 02:55:51 -------- d-----w- C:\Users\maria\AppData\Roaming\Z1nWPXbgtq2f072
2012-01-09 02:55:19 -------- d-----w- C:\Users\maria\AppData\Roaming\Pga3xYQvlfGDxBe
2012-01-09 02:55:13 -------- d-----w- C:\Users\maria\AppData\Roaming\NtjmDVK2ed2Cf6
2012-01-09 02:55:12 -------- d-----w- C:\Users\maria\AppData\Roaming\l5NLDtCJAUJAXQc
2012-01-09 02:55:08 -------- d-----w- C:\Users\maria\AppData\Roaming\qeRFrf2CW
2012-01-09 02:55:08 -------- d-----w- C:\Users\maria\AppData\Roaming\jctrqJDId2kd0
2012-01-09 02:55:07 -------- d-----w- C:\Users\maria\AppData\Roaming\A4GpStkYEacw5N9
2012-01-09 02:55:06 -------- d-----w- C:\Users\maria\AppData\Roaming\kDa4GpStkYEacw5
2012-01-09 02:54:56 -------- d-----w- C:\Users\maria\AppData\Roaming\hkjhKHsa5KKf
2012-01-09 02:54:40 -------- d-----w- C:\Users\maria\AppData\Roaming\eTWnSOUfapi0xt
2012-01-09 02:50:39 -------- d-----w- C:\Users\maria\AppData\Roaming\BG4aQH6sW7E9TqY
2012-01-09 02:50:31 -------- d-----w- C:\Users\maria\AppData\Roaming\eEL8gRZqhXkVlBz
2012-01-09 02:50:23 -------- d-----w- C:\Users\maria\AppData\Roaming\llIBrzPNyAuSoFp
2012-01-09 02:50:14 -------- d-----w- C:\Users\maria\AppData\Roaming\Ib36fTXjYeIrOtA
2012-01-09 02:50:01 -------- d-----w- C:\Users\maria\AppData\Roaming\bi3nmHJf8qkrBc1
2012-01-09 02:49:47 -------- d-----w- C:\Users\maria\AppData\Roaming\qgRZYB0ciDoFaHs
2012-01-09 02:49:38 -------- d-----w- C:\Users\maria\AppData\Roaming\nVelOBtzPyAiDoF
2012-01-09 02:49:18 -------- d-----w- C:\Users\maria\AppData\Roaming\D13678ZCVBSFdql
2012-01-09 02:49:17 -------- d-----w- C:\Users\maria\AppData\Roaming\m7Tkxb4W9Yktu13
2012-01-09 02:49:17 -------- d-----w- C:\Users\maria\AppData\Roaming\frn7Tkxb4W9Yk
2012-01-09 02:49:13 -------- d-----w- C:\Users\maria\AppData\Roaming\JJj0Qju6jcfOmYi
2012-01-09 02:49:13 -------- d-----w- C:\Users\maria\AppData\Roaming\DdCSde2Wwi80sk2
2012-01-09 02:49:11 -------- d-----w- C:\Users\maria\AppData\Roaming\CmXvKtpTA5TxGT
2012-01-09 02:49:09 -------- d-----w- C:\Users\maria\AppData\Roaming\O9NHeDLl4wiEtmX
2012-01-09 02:49:00 -------- d-----w- C:\Users\maria\AppData\Roaming\dTcEcEyLyKyE
2012-01-09 02:46:38 -------- d-----w- C:\Users\maria\AppData\Roaming\AsJ9kBPlwqTj8E7
2012-01-09 02:46:24 -------- d-----w- C:\Users\maria\AppData\Roaming\fUeBeeCYOzBey2D
2012-01-09 02:46:20 -------- d-----w- C:\Users\maria\AppData\Roaming\nBeeCYOBe
2012-01-09 02:46:12 -------- d-----w- C:\Users\maria\AppData\Roaming\Bm9tGRB3j1dloK7
2012-01-09 02:46:10 -------- d-----w- C:\Users\maria\AppData\Roaming\FB49A6ln9
2012-01-09 02:44:56 -------- d-----w- C:\Users\maria\AppData\Roaming\L96itCqgK5FbDcP
2012-01-09 02:39:34 -------- d-----w- C:\Users\maria\AppData\Roaming\rmprS1JgWtmTVyn
2012-01-09 02:39:34 -------- d-----w- C:\Users\maria\AppData\Roaming\AtGfR4ZYvp2kbfC
2012-01-09 02:39:33 -------- d-----w- C:\Users\maria\AppData\Roaming\WytWnhBz9rBGW4r
2012-01-09 02:39:30 -------- d-----w- C:\Users\maria\AppData\Roaming\jAtNFvEakEO3Sk0
2012-01-09 02:39:25 -------- d-----w- C:\Users\maria\AppData\Roaming\qycssxtGf
2012-01-09 02:38:48 -------- d-----w- C:\Users\maria\AppData\Roaming\EUC0uvS2iFpGaHd
2012-01-09 02:38:46 -------- d-----w- C:\Users\maria\AppData\Roaming\TNYyOHZP0c1v2n4
2012-01-09 02:38:40 -------- d-----w- C:\Users\maria\AppData\Roaming\rrNtxP0uc1b3n4m
2012-01-09 02:38:40 -------- d-----w- C:\Users\maria\AppData\Roaming\FrNtxP0uc1b3n4m
2012-01-09 02:38:37 -------- d-----w- C:\Users\maria\AppData\Roaming\jERX2kRIBzNc1v2
2012-01-09 02:37:42 -------- d-----w- C:\Users\maria\AppData\Roaming\WpihFGWgUrOtPyS
2012-01-09 02:37:42 -------- d-----w- C:\Users\maria\AppData\Roaming\AwmQfEUVrOtPySi
2012-01-09 02:37:26 -------- d-----w- C:\Users\maria\AppData\Roaming\rNbF3pnG5Q6W
2012-01-09 02:36:44 -------- d-----w- C:\Users\maria\AppData\Roaming\OD7X2IPhU33QDve
2012-01-09 02:36:38 -------- d-----w- C:\Users\maria\AppData\Roaming\spEqAAxlZcdFw7n
2012-01-09 02:36:34 -------- d-----w- C:\Users\maria\AppData\Roaming\KT4kSpRd7nOdj9i
2012-01-09 02:36:34 -------- d-----w- C:\Users\maria\AppData\Roaming\ET4kSpRd7nOdj9i
2012-01-09 02:35:50 -------- d-----w- C:\Users\maria\AppData\Roaming\v75tl8ZjhQeHwKh
2012-01-09 02:35:50 -------- d-----w- C:\Users\maria\AppData\Roaming\e75tl8ZjhQeHwKh
2012-01-09 02:34:51 -------- d-----w- C:\Users\maria\AppData\Roaming\OUXEj1PAPxazVq7
2012-01-09 02:34:21 -------- d-----w- C:\Users\maria\AppData\Roaming\Y1UL4B9LwxKvyOc
2012-01-09 02:34:13 -------- d-----w- C:\Users\maria\AppData\Roaming\sbk5Deg4B9LwxK
2012-01-09 02:34:11 -------- d-----w- C:\Users\maria\AppData\Roaming\rGOEvY41UL4B9Lw
2012-01-09 02:34:09 -------- d-----w- C:\Users\maria\AppData\Roaming\QemzRbk5DkqHzXT
2012-01-09 02:34:09 -------- d-----w- C:\Users\maria\AppData\Roaming\F3VJ0ZDzhsDX5Gs
2012-01-09 02:34:08 -------- d-----w- C:\Users\maria\AppData\Roaming\TemzRbk5DkqHzXT
2012-01-09 02:34:08 -------- d-----w- C:\Users\maria\AppData\Roaming\aemzRbk5DkqHzXT
2012-01-09 02:34:07 -------- d-----w- C:\Users\maria\AppData\Roaming\c3ksc93UEmuUsxk
.
==================== Find3M ====================
.
2011-11-15 19:29:56 270720 ------w- C:\Windows\System32\MpSigStub.exe
.
============= FINISH: 19:34:01.59 ===============

Here is the second log called the attachment:
I can not show the attach file IE can not display the webpage, I tried to change the name and had no luck it is on my desk top but I can't get it to here any thougfhts ?

This is the mini tool box file that belongs in the thread I linked to I am sorry if it is wrong but it is the only way it would work please delete if it is inappropriate thanks, sawz

Attached Files


Edited by boopme, 10 January 2012 - 09:55 PM.
Merged 3 posts.


BC AdBot (Login to Remove)

 


#2 sawz

sawz
  • Topic Starter

  • Members
  • 138 posts
  • OFFLINE
  •  
  • Local time:05:18 PM

Posted 10 January 2012 - 10:05 PM

I am sending the mini tool box through Email to my other laptop and posting it here now thanks:
MiniToolBox by Farbar
Ran by maria (administrator) on 10-01-2012 at 21:12:34
Microsoft Windows 7 Home Premium (X64)
Boot Mode: Normal
***************************************************************************
========================= Flush DNS: ===================================
Windows IP Configuration
Successfully flushed the DNS Resolver Cache.
========================= IE Proxy Settings: ==============================
Proxy is not enabled.
No Proxy Server is set.
"Reset IE Proxy Settings": IE Proxy Settings were reset.
Hosts file not detected in the default directory
========================= IP Configuration: ================================
Atheros AR9285 802.11b/g/n WiFi Adapter = Wireless Network Connection (Connected)
Realtek PCIe FE Family Controller = Local Area Connection (Media disconnected)
The following helper DLL cannot be loaded: WSHELPER.DLL.

# ----------------------------------
# IPv4 Configuration
# ----------------------------------
pushd interface ipv4
reset
set global icmpredirects=enabled

popd
# End of IPv4 configuration

Windows IP Configuration
Host Name . . . . . . . . . . . . : maria-PC
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : hsd1.nj.comcast.net.
Wireless LAN adapter Wireless Network Connection:
Connection-specific DNS Suffix . : hsd1.nj.comcast.net.
Description . . . . . . . . . . . : Atheros AR9285 802.11b/g/n WiFi Adapter
Physical Address. . . . . . . . . : 90-4C-E5-B5-53-72
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::65e2:c9d3:b96b:676%13(Preferred)
IPv4 Address. . . . . . . . . . . : 192.168.1.101(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Lease Obtained. . . . . . . . . . : Tuesday, January 10, 2012 7:12:31 PM
Lease Expires . . . . . . . . . . : Wednesday, January 11, 2012 7:12:30 PM
Default Gateway . . . . . . . . . : 192.168.1.1
DHCP Server . . . . . . . . . . . : 192.168.1.1
DHCPv6 IAID . . . . . . . . . . . : 328223973
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-12-E0-8E-57-00-26-9E-E0-05-C9
DNS Servers . . . . . . . . . . . : 75.75.75.75
75.75.76.76
NetBIOS over Tcpip. . . . . . . . : Enabled
Ethernet adapter Local Area Connection:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Realtek PCIe FE Family Controller
Physical Address. . . . . . . . . : 00-26-9E-E0-05-C9
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Tunnel adapter Local Area Connection* 11:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft 6to4 Adapter
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Tunnel adapter isatap.hsd1.nj.comcast.net.:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . : hsd1.nj.comcast.net.
Description . . . . . . . . . . . : Microsoft ISATAP Adapter #2
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Tunnel adapter Teredo Tunneling Pseudo-Interface:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
IPv6 Address. . . . . . . . . . . : 2001:0:5ef5:79fd:344a:d72:3f57:fe9a(Preferred)
Link-local IPv6 Address . . . . . : fe80::344a:d72:3f57:fe9a%14(Preferred)
Default Gateway . . . . . . . . . : ::
NetBIOS over Tcpip. . . . . . . . : Disabled
Pinging google.com [74.125.113.99] with 32 bytes of data:
Reply from 74.125.113.99: bytes=32 time=31ms TTL=46
Reply from 74.125.113.99: bytes=32 time=32ms TTL=46
Ping statistics for 74.125.113.99:
Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 31ms, Maximum = 32ms, Average = 31ms
Pinging yahoo.com [98.137.149.56] with 32 bytes of data:
Reply from 98.137.149.56: bytes=32 time=95ms TTL=45
Reply from 98.137.149.56: bytes=32 time=95ms TTL=45
Ping statistics for 98.137.149.56:
Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 95ms, Maximum = 95ms, Average = 95ms
Pinging bleepingcomputer.com [208.43.87.2] with 32 bytes of data:
Reply from 208.43.87.2: Destination host unreachable.
Reply from 208.43.87.2: Destination host unreachable.
Ping statistics for 208.43.87.2:
Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Pinging 127.0.0.1 with 32 bytes of data:
Reply from 127.0.0.1: bytes=32 time<1ms TTL=128
Reply from 127.0.0.1: bytes=32 time<1ms TTL=128
Ping statistics for 127.0.0.1:
Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms
===========================================================================
Interface List
13...90 4c e5 b5 53 72 ......Atheros AR9285 802.11b/g/n WiFi Adapter
11...00 26 9e e0 05 c9 ......Realtek PCIe FE Family Controller
1...........................Software Loopback Interface 1
12...00 00 00 00 00 00 00 e0 Microsoft 6to4 Adapter
16...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #2
14...00 00 00 00 00 00 00 e0 Teredo Tunneling Pseudo-Interface
===========================================================================
IPv4 Route Table
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 192.168.1.1 192.168.1.101 25
127.0.0.0 255.0.0.0 On-link 127.0.0.1 306
127.0.0.1 255.255.255.255 On-link 127.0.0.1 306
127.255.255.255 255.255.255.255 On-link 127.0.0.1 306
192.168.1.0 255.255.255.0 On-link 192.168.1.101 281
192.168.1.101 255.255.255.255 On-link 192.168.1.101 281
192.168.1.255 255.255.255.255 On-link 192.168.1.101 281
224.0.0.0 240.0.0.0 On-link 127.0.0.1 306
224.0.0.0 240.0.0.0 On-link 192.168.1.101 281
255.255.255.255 255.255.255.255 On-link 127.0.0.1 306
255.255.255.255 255.255.255.255 On-link 192.168.1.101 281
===========================================================================
Persistent Routes:
None
IPv6 Route Table
===========================================================================
Active Routes:
If Metric Network Destination Gateway
14 58 ::/0 On-link
1 306 ::1/128 On-link
14 58 2001::/32 On-link
14 306 2001:0:5ef5:79fd:344a:d72:3f57:fe9a/128
On-link
13 281 fe80::/64 On-link
14 306 fe80::/64 On-link
14 306 fe80::344a:d72:3f57:fe9a/128
On-link
13 281 fe80::65e2:c9d3:b96b:676/128
On-link
1 306 ff00::/8 On-link
14 306 ff00::/8 On-link
13 281 ff00::/8 On-link
===========================================================================
Persistent Routes:
None
========================= Winsock entries =====================================
Catalog5 01 mswsock.dll [File Not found] ()
Catalog5 02 mswsock.dll [File Not found] ()
Catalog5 03 C:\Windows\SysWOW64\winrnr.dll [20992] (Microsoft Corporation)
Catalog5 04 C:\Windows\SysWOW64\napinsp.dll [52224] (Microsoft Corporation)
Catalog5 05 C:\Windows\SysWOW64\pnrpnsp.dll [65024] (Microsoft Corporation)
Catalog5 06 C:\Windows\SysWOW64\pnrpnsp.dll [65024] (Microsoft Corporation)
Catalog5 07 C:\Program Files (x86)\Bonjour\mdnsNSP.dll [152864] (Apple Inc.)
Catalog9 01 mswsock.dll [File Not found] ()
Catalog9 02 mswsock.dll [File Not found] ()
Catalog9 03 mswsock.dll [File Not found] ()
Catalog9 04 mswsock.dll [File Not found] ()
Catalog9 05 mswsock.dll [File Not found] ()
Catalog9 06 mswsock.dll [File Not found] ()
Catalog9 07 mswsock.dll [File Not found] ()
Catalog9 08 mswsock.dll [File Not found] ()
Catalog9 09 mswsock.dll [File Not found] ()
Catalog9 10 mswsock.dll [File Not found] ()
x64-Catalog5 01 mswsock.dll [File Not found] ()
x64-Catalog5 02 mswsock.dll [File Not found] ()
x64-Catalog5 03 C:\Windows\System32\winrnr.dll [28672] (Microsoft Corporation)
x64-Catalog5 04 C:\Windows\System32\napinsp.dll [68096] (Microsoft Corporation)
x64-Catalog5 05 C:\Windows\System32\pnrpnsp.dll [86016] (Microsoft Corporation)
x64-Catalog5 06 C:\Windows\System32\pnrpnsp.dll [86016] (Microsoft Corporation)
x64-Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [193824] (Apple Inc.)
x64-Catalog9 01 mswsock.dll [File Not found] ()
x64-Catalog9 02 mswsock.dll [File Not found] ()
x64-Catalog9 03 mswsock.dll [File Not found] ()
x64-Catalog9 04 mswsock.dll [File Not found] ()
x64-Catalog9 05 mswsock.dll [File Not found] ()
x64-Catalog9 06 mswsock.dll [File Not found] ()
x64-Catalog9 07 mswsock.dll [File Not found] ()
x64-Catalog9 08 mswsock.dll [File Not found] ()
x64-Catalog9 09 mswsock.dll [File Not found] ()
x64-Catalog9 10 mswsock.dll [File Not found] ()
========================= Event log errors: ===============================
Application errors:
==================
Error: (01/10/2012 08:14:38 PM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
.
Error: (01/10/2012 08:14:06 PM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
.
Error: (01/10/2012 08:14:04 PM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
.
Error: (01/10/2012 08:14:01 PM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
.
Error: (01/10/2012 08:13:34 PM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
.
Error: (01/10/2012 08:13:23 PM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
.
Error: (01/10/2012 07:45:04 PM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
.
Error: (01/10/2012 07:31:14 PM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
.
Error: (01/10/2012 07:23:20 PM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
.
Error: (01/10/2012 05:45:43 PM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
.

System errors:
=============
Error: (01/10/2012 08:34:19 PM) (Source: Microsoft-Windows-DNS-Client) (User: NETWORK SERVICE)
Description: There was an error while attempting to read the local hosts file.
Error: (01/10/2012 07:15:39 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: SYSTEM)
Description: Installation Failure: Windows failed to install the following update with error 0x80070643: Security Update for Windows 7 for x64-based Systems (KB2564958).
Error: (01/10/2012 07:15:38 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: SYSTEM)
Description: Installation Failure: Windows failed to install the following update with error 0x80070643: Security Update for Windows 7 for x64-based Systems (KB2639417).
Error: (01/10/2012 07:15:38 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: SYSTEM)
Description: Installation Failure: Windows failed to install the following update with error 0x80070643: Cumulative Security Update for Internet Explorer 8 for Windows 7 for x64-based Systems (KB2618444).
Error: (01/10/2012 07:15:38 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: SYSTEM)
Description: Installation Failure: Windows failed to install the following update with error 0x80070643: Update for Internet Explorer 8 Compatibility View List for Windows 7 for x64-based Systems (KB2598845).
Error: (01/10/2012 07:15:38 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: SYSTEM)
Description: Installation Failure: Windows failed to install the following update with error 0x80070643: Update for Windows 7 for x64-based Systems (KB2641690).
Error: (01/10/2012 07:15:38 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: SYSTEM)
Description: Installation Failure: Windows failed to install the following update with error 0x80070643: Security Update for Windows 7 for x64-based Systems (KB2579686).
Error: (01/10/2012 07:12:44 PM) (Source: Microsoft-Windows-DNS-Client) (User: NETWORK SERVICE)
Description: There was an error while attempting to read the local hosts file.
Error: (01/10/2012 07:12:37 PM) (Source: Microsoft-Windows-DNS-Client) (User: NETWORK SERVICE)
Description: There was an error while attempting to read the local hosts file.
Error: (01/10/2012 07:12:33 PM) (Source: Microsoft-Windows-DNS-Client) (User: NETWORK SERVICE)
Description: There was an error while attempting to read the local hosts file.

Microsoft Office Sessions:
=========================
=========================== Installed Programs ============================
Acrobat.com (Version: 1.6.65)
ActiveCheck component for HP Active Support Library (Version: 3.0.0.2)
Adobe AIR (Version: 1.5.0.7220)
Adobe Flash Player 10 ActiveX (Version: 10.0.32.18)
Adobe Reader 9.1 MUI (Version: 9.1.0)
Adobe Shockwave Player (Version: 11.0)
AMD USB Filter Driver (Version: 1.0.10.84)
Apple Application Support (Version: 1.4.1)
Apple Mobile Device Support (Version: 3.3.1.3)
Apple Software Update (Version: 2.1.2.120)
Atheros Driver Installation Program (Version: 5.2)
ATI Catalyst Install Manager (Version: 3.0.732.0)
Bonjour (Version: 2.0.4.0)
Catalyst Control Center - Branding (Version: 1.00.0000)
Catalyst Control Center Core Implementation (Version: 2009.0804.2223.38385)
Catalyst Control Center Graphics Full Existing (Version: 2009.0804.2223.38385)
Catalyst Control Center Graphics Full New (Version: 2009.0804.2223.38385)
Catalyst Control Center Graphics Light (Version: 2009.0804.2223.38385)
Catalyst Control Center Graphics Previews Common (Version: 2009.0804.2223.38385)
Catalyst Control Center Graphics Previews Vista (Version: 2009.0804.2223.38385)
Catalyst Control Center InstallProxy (Version: 2009.0804.2223.38385)
Catalyst Control Center Localization All (Version: 2009.0804.2223.38385)
ccc-core-static (Version: 2009.0804.2223.38385)
ccc-utility64 (Version: 2009.0804.2223.38385)
CCC Help Chinese Standard (Version: 2009.0804.2222.38385)
CCC Help Chinese Traditional (Version: 2009.0804.2222.38385)
CCC Help Czech (Version: 2009.0804.2222.38385)
CCC Help Danish (Version: 2009.0804.2222.38385)
CCC Help Dutch (Version: 2009.0804.2222.38385)
CCC Help English (Version: 2009.0804.2222.38385)
CCC Help Finnish (Version: 2009.0804.2222.38385)
CCC Help French (Version: 2009.0804.2222.38385)
CCC Help German (Version: 2009.0804.2222.38385)
CCC Help Greek (Version: 2009.0804.2222.38385)
CCC Help Hungarian (Version: 2009.0804.2222.38385)
CCC Help Italian (Version: 2009.0804.2222.38385)
CCC Help Japanese (Version: 2009.0804.2222.38385)
CCC Help Korean (Version: 2009.0804.2222.38385)
CCC Help Norwegian (Version: 2009.0804.2222.38385)
CCC Help Polish (Version: 2009.0804.2222.38385)
CCC Help Portuguese (Version: 2009.0804.2222.38385)
CCC Help Russian (Version: 2009.0804.2222.38385)
CCC Help Spanish (Version: 2009.0804.2222.38385)
CCC Help Swedish (Version: 2009.0804.2222.38385)
CCC Help Thai (Version: 2009.0804.2222.38385)
CCC Help Turkish (Version: 2009.0804.2222.38385)
Compatibility Pack for the 2007 Office system (Version: 12.0.4518.1014)
CyberLink DVD Suite (Version: 7.0.2111)
CyberLink MediaShow (Version: 4.1.3325)
CyberLink PowerDVD 8 (Version: 8.0.1.1005)
Drop Down Deals 1.10.01 (Version: 1.10.01)
ESET Online Scanner v3
Google Chrome (Version: 14.0.835.202)
Google Update Helper (Version: 1.3.21.69)
HP Advisor (Version: 3.3.9512.3162)
HP Customer Experience Enhancements (Version: 6.0.1.3)
HP Games (Version: 1.0.0.71)
HP Quick Launch Buttons (Version: 6.50.7.1)
HP Setup (Version: 1.2.3560.3170)
HP Smart Web Printing (Version: 131.1.35898)
HP Support Assistant (Version: 4.2.5.3)
HP Update (Version: 5.001.000.014)
HP User Guides 0148 (Version: 1.01.0005)
HP Wireless Assistant (Version: 3.50.9.1)
HPAsset component for HP Active Support Library (Version: 3.0.0.6)
IDT Audio (Version: 1.0.6225.0)
iTunes (Version: 10.1.2.17)
Java™ 6 Update 15 (64-bit) (Version: 6.0.150)
Java™ 6 Update 15 (Version: 6.0.150)
Java™ SE Development Kit 6 Update 15 (64-bit) (Version: 1.6.0.150)
Junk Mail filter update (Version: 14.0.8089.726)
LabelPrint (Version: 2.5.2111)
LightScribe System Software (Version: 1.18.8.1)
LSI HDA Modem (Version: 2.1.94)
Malwarebytes Anti-Malware version 1.60.0.1800 (Version: 1.60.0.1800)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Choice Guard (Version: 2.0.48.0)
Microsoft Live Search Toolbar (Version: 3.0.566.0)
Microsoft Office Excel MUI (English) 2007 (Version: 12.0.4518.1014)
Microsoft Office Home and Student 2007 (Version: 12.0.4518.1014)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.4518.1014)
Microsoft Office OneNote MUI (English) 2007 (Version: 12.0.4518.1014)
Microsoft Office PowerPoint MUI (English) 2007 (Version: 12.0.4518.1014)
Microsoft Office PowerPoint Viewer 2007 (English) (Version: 12.0.4518.1014)
Microsoft Office Proof (English) 2007 (Version: 12.0.4518.1014)
Microsoft Office Proof (French) 2007 (Version: 12.0.4518.1014)
Microsoft Office Proof (Spanish) 2007 (Version: 12.0.4518.1014)
Microsoft Office Proofing (English) 2007 (Version: 12.0.4518.1014)
Microsoft Office Shared 64-bit MUI (English) 2007 (Version: 12.0.4518.1014)
Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2007 (Version: 12.0.4518.1014)
Microsoft Office Shared MUI (English) 2007 (Version: 12.0.4518.1014)
Microsoft Office Shared Setup Metadata MUI (English) 2007 (Version: 12.0.4518.1014)
Microsoft Office Suite Activation Assistant (Version: 2.9)
Microsoft Office Word MUI (English) 2007 (Version: 12.0.4518.1014)
Microsoft Silverlight (Version: 3.0.40624.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (Version: 3.1.0000)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Works (Version: 9.7.0621)
MSVCRT (Version: 14.0.1468.721)
muvee Reveal (Version: 7.0.43.11502)
Norton Internet Security (Version: 17.8.0.5)
Photo Viewer 2.3
Power2Go (Version: 6.0.3311)
PowerDirector (Version: 7.0.3311)
QLBCASL (Version: 6.40.17.2)
QuickTime (Version: 7.69.80.9)
Realtek 8136 8168 8169 Ethernet Driver (Version: 1.00.0007)
Realtek USB 2.0 Card Reader (Version: 6.1.7100.30094)
Recovery Manager (Version: 5.5.2202)
Slingbox - Watch Your TV Anywhere (Version: 1.0.0)
SlingPlayer (Version: 1.04.0206)
Synaptics Pointing Device Driver (Version: 13.2.4.12)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2473228) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft Office Word 2007 (KB974631)
Update for Office 2007 (KB934528)
Update Installer for WildTangent Games App
Veetle TV 0.9.18 (Version: 0.9.18)
Visual Studio 2008 x64 Redistributables (Version: 10.0.0.2)
WildTangent Games App (HP Games) (Version: 4.0.4.16)
Windows Live Call (Version: 14.0.8064.0206)
Windows Live Communications Platform (Version: 14.0.8064.206)
Windows Live Essentials (Version: 14.0.8089.0726)
Windows Live Essentials (Version: 14.0.8089.726)
Windows Live Mail (Version: 14.0.8089.0726)
Windows Live Messenger (Version: 14.0.8089.0726)
Windows Live Movie Maker (Version: 14.0.8091.0730)
Windows Live Photo Gallery (Version: 14.0.8081.709)
Windows Live Sign-in Assistant (Version: 5.000.818.5)
Windows Live Sync (Version: 14.0.8089.726)
Windows Live Upload Tool (Version: 14.0.8014.1029)
Windows Live Writer (Version: 14.0.8089.0726)
========================= Devices: ================================
Name: BHDrvx64
Description: BHDrvx64
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: BHDrvx64
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
Name: Windows Firewall Authorization Driver
Description: Windows Firewall Authorization Driver
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: mpsdrv
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
Name: Symantec Iron Driver
Description: Symantec Iron Driver
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: SymIRON
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

========================= Memory info: ===================================
Percentage of memory in use: 41%
Total physical RAM: 2812.2 MB
Available physical RAM: 1631.68 MB
Total Pagefile: 5622.54 MB
Available Pagefile: 4324.82 MB
Total Virtual: 4095.88 MB
Available Virtual: 3981.66 MB
========================= Partitions: =====================================
1 Drive c: () (Fixed) (Total:284.28 GB) (Free:246.45 GB) NTFS
2 Drive d: (RECOVERY) (Fixed) (Total:13.51 GB) (Free:2.23 GB) NTFS
3 Drive e: (HP_TOOLS) (Fixed) (Total:0.1 GB) (Free:0.09 GB) FAT32
========================= Users: ========================================
User accounts for \\MARIA-PC
Administrator Guest maria
========================= Minidump Files ==================================
No minidump file found
**** End of log ****

#3 sawz

sawz
  • Topic Starter

  • Members
  • 138 posts
  • OFFLINE
  •  
  • Local time:05:18 PM

Posted 14 January 2012 - 08:35 PM

Any chance someone has looked as the logs here and the ones in the link posted as I would like to clear this machine up and give it back to my sibling she does not have the resources to buy a new one so I really want to get this one going in the best manner possible Thanks forum for all of your help, sawz.

EDIT: Please be patient. There are over 170 unanswered topics in this forum at present and the current average wait time to receive help is 5-6 days. ~Budapest

Edited by Budapest, 15 January 2012 - 05:17 PM.


#4 HelpBot

HelpBot

    Bleepin' Binary Bot


  • Bots
  • 12,600 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:06:18 PM

Posted 16 January 2012 - 07:40 PM

Hello and welcome to Bleeping Computer!

I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything.

We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.

To help Bleeping Computer better assist you please perform the following steps:

***************************************************

Posted Image In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.

CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/437413 <<< CLICK THIS LINK



If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.

***************************************************

Posted Image If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lower right hand of this page). In that reply, please include the following information:

  • If you have not done so already, include a clear description of the problems you're having, along with any steps you may have performed so far.
  • A new DDS and GMER log. For your convenience, you will find the instructions for generating these logs repeated at the bottom of this post.
    • Please do this even if you have previously posted logs for us.
    • If you were unable to produce the logs originally please try once more.
    • If you are unable to create a log please provide detailed information about your installed Windows Operating System including the Version, Edition and if it is a 32bit or a 64bit system.
    • If you are unsure about any of these characteristics just post what you can and we will guide you.
  • Please tell us if you have your original Windows CD/DVD available.
  • Upon completing the above steps and posting a reply, another staff member will review your topic and do their best to resolve your issues.

Thank you for your patience, and again sorry for the delay.

***************************************************

We need to see some information about what is happening in your machine. Please perform the following scan again:

  • Download DDS by sUBs from one of the following links if you no longer have it available. Save it to your desktop.
  • Double click on the DDS icon, allow it to run.
  • A small box will open, with an explanation about the tool. No input is needed, the scan is running.
  • Notepad will open with the results.
  • Follow the instructions that pop up for posting the results.
  • Close the program window, and delete the program from your desktop.
Please note: You may have to disable any script protection running if the scan fails to run. After downloading the tool, disconnect from the internet and disable all antivirus protection. Run the scan, enable your A/V and reconnect to the internet.

Information on A/V control HERE


We also need a new log from the GMER anti-rootkit Scanner.

Please note that if you are running a 64-bit version of Windows you will not be able to run GMER and you may skip this step.

Please first disable any CD emulation programs using the steps found in this topic:

Why we request you disable CD Emulation when receiving Malware Removal Advice


Then create another GMER log and post it as an attachment to the reply where you post your new DDS log. Instructions on how to properly create a GMER log can be found here:

How to create a GMER log


As I am just a silly little program running on the BleepingComputer.com servers, please do not send me private messages as I do not know how to read and reply to them! Thanks!

#5 sawz

sawz
  • Topic Starter

  • Members
  • 138 posts
  • OFFLINE
  •  
  • Local time:05:18 PM

Posted 16 January 2012 - 08:48 PM

I definitely still need help The machine in question is still not working properly, most times I could only run the unit in safe mode, I was unable to run any scans as the unit would shut down half way through, the first malwarebyte scan produced over 800 problems with the machine , it is slow and has a mind of its own as if it has been hijacked I will attempt to run the scans as requested and post the results,

It is an HP G61 notebook I believe it 64 bit Windows 7 version I will now log off of my machine and start up the infected unit, hopefully it will start up , sometimes it takes about 20 minutes to get it going.

Edited by sawz, 16 January 2012 - 08:52 PM.


#6 sawz

sawz
  • Topic Starter

  • Members
  • 138 posts
  • OFFLINE
  •  
  • Local time:05:18 PM

Posted 16 January 2012 - 09:17 PM

Here is the first log as per request:

DDS (Ver_2011-06-23.01) - NTFSAMD64
Internet Explorer: 8.0.7600.16385
Run by maria at 21:15:17 on 2012-01-16
Microsoft Windows 7 Home Premium 6.1.7600.0.1252.1.1033.18.2812.1867 [GMT -5:00]
.
AV: Norton Internet Security *Disabled/Outdated* {88C95A36-8C3B-2F2C-1B8B-30FCCFDC4855}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Norton Internet Security *Disabled/Updated* {33A8BBD2-AA01-20A2-213B-0B8EB45B02E8}
FW: Norton Internet Security *Disabled* {B0F2DB13-C654-2E74-30D4-99C9310F0F2E}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files (x86)\Norton Internet Security\Engine\17.8.0.5\ccSvcHst.exe
C:\Windows\system32\taskhost.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_clipbook.exe
C:\Windows\SysWow64\Macromed\Flash\FlashUtil10c.exe
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
C:\Windows\System32\svchost.exe -k secsvcs
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\wuauclt.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
c:\program files\windows defender\MpCmdRun.exe
C:\Windows\system32\DllHost.exe
C:\Windows\system32\DllHost.exe
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\conhost.exe
C:\Windows\SysWOW64\cscript.exe
C:\Windows\system32\wbem\wmiprvse.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.comcast.net/
uInternet Settings,ProxyOverride = *.local
mWinlogon: Userinit=userinit.exe,
BHO: HP Print Enhancer: {0347c33e-8762-4905-bf09-768834316c61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO: Symantec NCO BHO: {602adb0e-4aff-4217-8aa1-95dac4dfa408} - C:\Program Files (x86)\Norton Internet Security\Engine\17.8.0.5\coIEPlg.dll
BHO: Symantec Intrusion Prevention: {6d53ec84-6aae-4787-aeee-f4628f01010c} - C:\Program Files (x86)\Norton Internet Security\Engine\17.8.0.5\IPSBHO.DLL
BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO: {9D425283-D487-4337-BAB6-AB8354A81457} - No File
BHO: Microsoft Live Search Toolbar Helper: {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - c:\Program Files (x86)\MSN\Toolbar\3.0.0566.0\msneshellx.dll
BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
BHO: Yontoo Layers: {fd72061e-9fde-484d-a58a-0bab4151cad8} - C:\Program Files (x86)\Drop Down Deals\YontooIEClient.dll
BHO: HP Smart BHO Class: {ffffffff-cf4e-4f2b-bdc2-0e72e116a856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
TB: Microsoft Live Search Toolbar: {1e61ed7c-7cb8-49d6-b9e9-ab4c880c8414} - c:\Program Files (x86)\MSN\Toolbar\3.0.0566.0\msneshellx.dll
TB: Norton Toolbar: {7febefe3-6b19-4349-98d2-ffb09d4b49ca} - C:\Program Files (x86)\Norton Internet Security\Engine\17.8.0.5\coIEPlg.dll
TB: {9D425283-D487-4337-BAB6-AB8354A81457} - No File
EB: HP Smart Web Printing: {555d4d79-4bd2-4094-a395-cfc534424a05} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_bho.dll
uRun: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
mRun: [<NO NAME>]
mRun: [WirelessAssistant] C:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
mPolicies-explorer: NoActiveDesktop = 1 (0x1)
mPolicies-explorer: NoActiveDesktopChanges = 1 (0x1)
mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\PROGRA~2\MICROS~4\Office12\ONBttnIE.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - C:\PROGRA~2\MICROS~4\Office12\REFIEBAR.DLL
IE: {DDE87865-83C5-48c4-8357-2F5B1AA84522} - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
LSP: mswsock.dll
DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - hxxp://download.eset.com/special/eos/OnlineScanner.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab
TCP: DhcpNameServer = 75.75.75.75 75.75.76.76
TCP: Interfaces\{32B83D7D-905E-4AD5-8CFD-0A5D04457B34} : DhcpNameServer = 75.75.75.75 75.75.76.76
TCP: Interfaces\{32B83D7D-905E-4AD5-8CFD-0A5D04457B34}\2456C6B696E6F574F575962756C6563737F5236454446413 : DhcpNameServer = 192.168.2.1
TCP: Interfaces\{32B83D7D-905E-4AD5-8CFD-0A5D04457B34}\4454F4C4946554942514723502E4544575F425B4 : DhcpNameServer = 192.168.1.1
SubSystems: Windows = basesrv,1 winsrv:UserServerDllInitialization,3 consrv:ConServerDllInitialization,2 sxssrv,4
mASetup: {10880D85-AAD9-4558-ABDC-2AB1552D831F} - "C:\Program Files (x86)\Common Files\LightScribe\LSRunOnce.exe"
BHO-X64: HP Print Enhancer: {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
BHO-X64: HP Print Enhancer - No File
BHO-X64: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO-X64: AcroIEHelperStub - No File
BHO-X64: Symantec NCO BHO: {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\17.8.0.5\coIEPlg.dll
BHO-X64: Symantec NCO BHO - No File
BHO-X64: Symantec Intrusion Prevention: {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\17.8.0.5\IPSBHO.DLL
BHO-X64: Symantec Intrusion Prevention - No File
BHO-X64: Windows Live Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO-X64: {9D425283-D487-4337-BAB6-AB8354A81457} - No File
BHO-X64: Microsoft Live Search Toolbar Helper: {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - c:\Program Files (x86)\MSN\Toolbar\3.0.0566.0\msneshellx.dll
BHO-X64: Java™ Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
BHO-X64: Yontoo Layers: {FD72061E-9FDE-484D-A58A-0BAB4151CAD8} - C:\Program Files (x86)\Drop Down Deals\YontooIEClient.dll
BHO-X64: Yontoo Layers - No File
BHO-X64: HP Smart BHO Class: {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
BHO-X64: HP Smart BHO Class - No File
TB-X64: Microsoft Live Search Toolbar: {1E61ED7C-7CB8-49d6-B9E9-AB4C880C8414} - c:\Program Files (x86)\MSN\Toolbar\3.0.0566.0\msneshellx.dll
TB-X64: Norton Toolbar: {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\17.8.0.5\coIEPlg.dll
TB-X64: {9D425283-D487-4337-BAB6-AB8354A81457} - No File
EB-X64: {555D4D79-4BD2-4094-A395-CFC534424A05} - No File
mRun-x64: [(Default)]
mRun-x64: [WirelessAssistant] C:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
.
============= SERVICES / DRIVERS ===============
.
R0 SymDS;Symantec Data Store;C:\Windows\system32\drivers\NISx64\1108000.005\SYMDS64.SYS --> C:\Windows\system32\drivers\NISx64\1108000.005\SYMDS64.SYS [?]
R0 SymEFA;Symantec Extended File Attributes;C:\Windows\system32\drivers\NISx64\1108000.005\SYMEFA64.SYS --> C:\Windows\system32\drivers\NISx64\1108000.005\SYMEFA64.SYS [?]
R1 ccHP;Symantec Hash Provider;C:\Windows\system32\drivers\NISx64\1108000.005\ccHPx64.sys --> C:\Windows\system32\drivers\NISx64\1108000.005\ccHPx64.sys [?]
R1 IDSVia64;IDSVia64;C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\Definitions\IPSDefs\20110310.002\IDSviA64.sys [2011-3-10 476792]
R1 SYMTDIv;Symantec Vista Network Dispatch Driver;C:\Windows\system32\Drivers\NISx64\1108000.005\SYMTDIV.SYS --> C:\Windows\system32\Drivers\NISx64\1108000.005\SYMTDIV.SYS [?]
R1 vwififlt;Virtual WiFi Filter Driver;C:\Windows\system32\DRIVERS\vwififlt.sys --> C:\Windows\system32\DRIVERS\vwififlt.sys [?]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]
R2 NIS;Norton Internet Security;C:\Program Files (x86)\Norton Internet Security\Engine\17.8.0.5\ccsvchst.exe [2011-1-25 126392]
R3 RTL8167;Realtek 8167 NT Driver;C:\Windows\system32\DRIVERS\Rt64win7.sys --> C:\Windows\system32\DRIVERS\Rt64win7.sys [?]
R3 usbfilter;AMD USB Filter Driver;C:\Windows\system32\DRIVERS\usbfilter.sys --> C:\Windows\system32\DRIVERS\usbfilter.sys [?]
S1 BHDrvx64;BHDrvx64;C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\Definitions\BASHDefs\20110309.001\BHDrvx64.sys [2011-3-10 1124472]
S1 SymIRON;Symantec Iron Driver;C:\Windows\system32\drivers\NISx64\1108000.005\Ironx64.SYS --> C:\Windows\system32\drivers\NISx64\1108000.005\Ironx64.SYS [?]
S2 gupdate;Google Update Service (gupdate);C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-4-27 136176]
S3 EraserUtilRebootDrv;EraserUtilRebootDrv;C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2011-3-10 132656]
S3 gupdatem;Google Update Service (gupdatem);C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-4-27 136176]
S3 netw5v64;Intel® Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit;C:\Windows\system32\DRIVERS\netw5v64.sys --> C:\Windows\system32\DRIVERS\netw5v64.sys [?]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;C:\Windows\system32\Drivers\RtsUStor.sys --> C:\Windows\system32\Drivers\RtsUStor.sys [?]
S3 SrvHsfHDA;SrvHsfHDA;C:\Windows\system32\DRIVERS\VSTAZL6.SYS --> C:\Windows\system32\DRIVERS\VSTAZL6.SYS [?]
S3 SrvHsfV92;SrvHsfV92;C:\Windows\system32\DRIVERS\VSTDPV6.SYS --> C:\Windows\system32\DRIVERS\VSTDPV6.SYS [?]
S3 SrvHsfWinac;SrvHsfWinac;C:\Windows\system32\DRIVERS\VSTCNXT6.SYS --> C:\Windows\system32\DRIVERS\VSTCNXT6.SYS [?]
S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\system32\Wat\WatAdminSvc.exe --> C:\Windows\system32\Wat\WatAdminSvc.exe [?]
S3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;C:\Windows\system32\DRIVERS\yk62x64.sys --> C:\Windows\system32\DRIVERS\yk62x64.sys [?]
S4 AESTFilters;Andrea ST Filters Service;C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_ccf0dd3cb081af84\AESTSr64.exe [2010-1-14 89600]
S4 AMD External Events Utility;AMD External Events Utility;C:\Windows\system32\atiesrxx.exe --> C:\Windows\system32\atiesrxx.exe [?]
S4 Com4QLBEx;Com4QLBEx;C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [2009-10-30 228408]
S4 GamesAppService;GamesAppService;C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072]
SUnknown icpjbtih;icpjbtih; [x]
.
=============== Created Last 30 ================
.
2012-01-16 23:12:28 69000 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{60F7AF39-0AED-430D-9C80-F3F8BE78F8BC}\offreg.dll
2012-01-15 01:37:04 8822856 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{60F7AF39-0AED-430D-9C80-F3F8BE78F8BC}\mpengine.dll
2012-01-12 04:20:20 77312 ----a-w- C:\Windows\System32\packager.dll
2012-01-12 04:20:20 67072 ----a-w- C:\Windows\SysWow64\packager.dll
2012-01-12 04:19:56 1572864 ----a-w- C:\Windows\System32\quartz.dll
2012-01-12 04:19:56 1328640 ----a-w- C:\Windows\SysWow64\quartz.dll
2012-01-12 04:19:55 514560 ----a-w- C:\Windows\SysWow64\qdvd.dll
2012-01-12 04:19:55 366592 ----a-w- C:\Windows\System32\qdvd.dll
2012-01-12 04:19:52 1739160 ----a-w- C:\Windows\System32\ntdll.dll
2012-01-12 04:19:52 1292592 ----a-w- C:\Windows\SysWow64\ntdll.dll
2012-01-11 00:24:11 886784 ----a-w- C:\Program Files\Common Files\System\wab32.dll
2012-01-11 00:24:11 708608 ----a-w- C:\Program Files (x86)\Common Files\System\wab32.dll
2012-01-11 00:24:06 43520 ----a-w- C:\Windows\System32\csrsrv.dll
2012-01-11 00:24:02 1897328 ----a-w- C:\Windows\System32\drivers\tcpip.sys
2012-01-10 04:02:57 -------- d-----w- C:\Windows\pss
2012-01-10 03:00:34 -------- d-----w- C:\Program Files (x86)\ESET
2012-01-09 22:54:50 -------- d-----w- C:\Users\maria\AppData\Roaming\SUPERAntiSpyware.com
2012-01-09 22:54:30 -------- d-----w- C:\ProgramData\SUPERAntiSpyware.com
2012-01-09 22:54:30 -------- d-----w- C:\Program Files\SUPERAntiSpyware
2012-01-09 15:00:20 -------- d-----w- C:\Users\maria\AppData\Roaming\CBS Interactive
2012-01-09 07:50:54 -------- d-----w- C:\Windows\System32\EventProviders
2012-01-09 07:50:08 -------- d-----w- C:\be84132aec3643f4822a6c3e644f57
2012-01-09 07:17:00 -------- d-----w- C:\Users\maria\AppData\Roaming\AVG
2012-01-09 07:11:42 3141632 ----a-w- C:\Windows\System32\win32k.sys
2012-01-09 07:11:25 2048 ----a-w- C:\Windows\SysWow64\tzres.dll
2012-01-09 07:11:25 2048 ----a-w- C:\Windows\System32\tzres.dll
2012-01-09 07:09:52 723456 ----a-w- C:\Windows\System32\EncDec.dll
2012-01-09 07:09:52 534528 ----a-w- C:\Windows\SysWow64\EncDec.dll
2012-01-09 07:00:05 -------- d--h--w- C:\ProgramData\Common Files
2012-01-09 06:57:23 -------- d-----w- C:\Program Files (x86)\AVG
2012-01-09 06:54:21 -------- d-----w- C:\ProgramData\MFAData
2012-01-09 06:36:49 -------- d-----w- C:\Users\maria\AppData\Roaming\Malwarebytes
2012-01-09 06:36:41 -------- d-----w- C:\ProgramData\Malwarebytes
2012-01-09 06:36:40 23152 ----a-w- C:\Windows\System32\drivers\mbam.sys
2012-01-09 06:36:40 -------- d-----w- C:\Program Files (x86)\Malwarebytes' Anti-Malware
2012-01-09 06:24:59 -------- d-----w- C:\Users\maria\AppData\Roaming\zNt1rilIVY
2012-01-09 06:24:59 -------- d-----w- C:\Users\maria\AppData\Roaming\VTpXSfXr24sGWpo
2012-01-09 06:24:57 -------- d-----w- C:\Users\maria\AppData\Roaming\zTpXSfXr24sGWpo
2012-01-09 06:24:56 -------- d-----w- C:\Users\maria\AppData\Roaming\tTpXSfXr24sGWpo
2012-01-09 06:24:54 -------- d-----w- C:\Users\maria\AppData\Roaming\sJufAWYISaH6i5
2012-01-09 06:24:52 -------- d-----w- C:\Users\maria\AppData\Roaming\ZTpXSfXr24sG
2012-01-09 06:24:27 -------- d-----w- C:\Users\maria\AppData\Roaming\Uw9Q1es0L18
2012-01-09 06:24:26 -------- d-----w- C:\Users\maria\AppData\Roaming\Cw9Q1es0L18
2012-01-09 06:23:25 -------- d-----w- C:\Users\maria\AppData\Roaming\pLBbJj1fVvaZIuW
2012-01-09 06:23:25 -------- d-----w- C:\Users\maria\AppData\Roaming\ffliJj1fVvaZIuW
2012-01-09 06:19:59 -------- d-----w- C:\Users\maria\AppData\Roaming\wNqCIzxvSi
2012-01-09 06:07:25 -------- d-----w- C:\Users\maria\AppData\Roaming\IduZcENfPHliKIS
2012-01-09 06:07:23 -------- d-----w- C:\Users\maria\AppData\Roaming\dOEPJr6NHj39
2012-01-09 06:07:16 -------- d-----w- C:\Users\maria\AppData\Roaming\B3BYd30YbCHzQxg
2012-01-09 06:07:07 -------- d-----w- C:\Users\maria\AppData\Roaming\cU6mQaaouB9muIZ
2012-01-09 06:07:03 -------- d-----w- C:\Users\maria\AppData\Roaming\kzU6mQaaouB9muI
2012-01-09 06:06:53 -------- d-----w- C:\Users\maria\AppData\Roaming\LFyCLp0VRE5NOPz
2012-01-09 06:06:50 -------- d-----w- C:\Users\maria\AppData\Roaming\fyj74xI8JptkV
2012-01-09 06:06:43 -------- d-----w- C:\Users\maria\AppData\Roaming\Z1f07iw6cCEF
2012-01-09 06:06:38 -------- d-----w- C:\Users\maria\AppData\Roaming\qKriWlpUpjmzhGt
2012-01-09 06:06:33 -------- d-----w- C:\Users\maria\AppData\Roaming\zZPGLr4hoTiUJ
2012-01-09 06:06:31 -------- d-----w- C:\Users\maria\AppData\Roaming\H28jViWjvQZSdNd
2012-01-09 06:06:27 -------- d-----w- C:\Users\maria\AppData\Roaming\g6kAdgecHYAG90Q
2012-01-09 06:06:16 -------- d-----w- C:\Users\maria\AppData\Roaming\QXNmZNpXxsj2RPW
2012-01-09 06:06:14 -------- d-----w- C:\Users\maria\AppData\Roaming\fYAQYu7ImX
2012-01-09 06:06:09 -------- d-----w- C:\Users\maria\AppData\Roaming\bEw1dwiJTAah0sX
2012-01-09 06:06:01 -------- d-----w- C:\Users\maria\AppData\Roaming\ViG67ghqYxiHRA4
2012-01-09 06:05:57 -------- d-----w- C:\Users\maria\AppData\Roaming\NBuFpQJL9wCku3Q
2012-01-09 06:05:56 -------- d-----w- C:\Users\maria\AppData\Roaming\SA4aH7ghUINca
2012-01-09 06:05:44 -------- d-----w- C:\Users\maria\AppData\Roaming\ZPXEFAIqfmnDuAy
2012-01-09 06:05:44 -------- d-----w- C:\Users\maria\AppData\Roaming\aPXEFAIqfmnDuAy
2012-01-09 06:05:33 -------- d-----w- C:\Users\maria\AppData\Roaming\OBy2GWK99RfWHpp
2012-01-09 06:05:32 -------- d-----w- C:\Users\maria\AppData\Roaming\NBy2GWK99RfWHpp
2012-01-09 06:05:13 -------- d-----w- C:\Users\maria\AppData\Roaming\XA0uSvDDobiu0Pz
2012-01-09 06:05:10 -------- d-----w- C:\Users\maria\AppData\Roaming\T55aHs5sQHQn
2012-01-09 06:05:05 -------- d-----w- C:\Users\maria\AppData\Roaming\RCYhZfWaov1NNyx
2012-01-09 06:04:51 -------- d-----w- C:\Users\maria\AppData\Roaming\i8mvBC9sn1BeXff
2012-01-09 06:04:22 -------- d-----w- C:\Users\maria\AppData\Roaming\D1EeDTv6kWOaIHk
2012-01-09 06:04:14 -------- d-----w- C:\Users\maria\AppData\Roaming\UhwVOPAoHE9VPD
2012-01-09 05:43:41 -------- d-----w- C:\Users\maria\AppData\Roaming\mNk7FOYJp20zlX9
2012-01-09 05:43:31 -------- d-----w- C:\Users\maria\AppData\Roaming\XijaOEoBLozXW3P
2012-01-09 05:43:22 -------- d-----w- C:\Users\maria\AppData\Roaming\sIDhpBKugpzfSUa
2012-01-09 05:43:14 -------- d-----w- C:\Users\maria\AppData\Roaming\vifrHwx4Y4tKS
2012-01-09 05:43:04 -------- d-----w- C:\Users\maria\AppData\Roaming\T0sk4CHIaY1dyHI
2012-01-09 05:42:59 -------- d-----w- C:\Users\maria\AppData\Roaming\X0sk4CHIaY1dyHI
2012-01-09 05:42:58 -------- d-----w- C:\Users\maria\AppData\Roaming\Q0sk4CHIaY1dyHI
2012-01-09 05:42:55 -------- d-----w- C:\Users\maria\AppData\Roaming\dw2EyQlpYaUGYbg
2012-01-09 05:42:51 -------- d-----w- C:\Users\maria\AppData\Roaming\mKInwvKNKOEAK
2012-01-09 05:42:46 -------- d-----w- C:\Users\maria\AppData\Roaming\DuLxJImjcgP
2012-01-09 05:42:19 -------- d-----w- C:\Users\maria\AppData\Roaming\vN1iGsEj1Qqxo6U
2012-01-09 05:42:16 -------- d-----w- C:\Users\maria\AppData\Roaming\qeBN1osEf9jrxvQ
2012-01-09 05:42:04 -------- d-----w- C:\Users\maria\AppData\Roaming\ribGdfZkBxuD
2012-01-09 05:41:54 -------- d-----w- C:\Users\maria\AppData\Roaming\VPIeZgd8fTTggYj
2012-01-09 05:41:43 -------- d-----w- C:\Users\maria\AppData\Roaming\hK4oABeT7Hoyebx
2012-01-09 05:41:38 -------- d-----w- C:\Users\maria\AppData\Roaming\GAjKpyqK4oABeT7
2012-01-09 05:41:30 -------- d-----w- C:\Users\maria\AppData\Roaming\bJPdDZSTiYaO71
2012-01-09 05:41:21 -------- d-----w- C:\Users\maria\AppData\Roaming\IvRrFRz3gcJUFqc
2012-01-09 05:34:34 -------- d-----w- C:\Users\maria\AppData\Roaming\LUVOBtzP0c1v2n
2012-01-09 05:34:25 -------- d-----w- C:\Users\maria\AppData\Roaming\D9hTXwjUClB
2012-01-09 05:34:08 -------- d-----w- C:\Users\maria\AppData\Roaming\kTZqhYCwkVlBxSi
2012-01-09 05:34:01 -------- d-----w- C:\Users\maria\AppData\Roaming\iG5sQJ6wxv2b3m5
2012-01-09 05:33:54 -------- d-----w- C:\Users\maria\AppData\Roaming\SS1ibD3on4
2012-01-09 05:33:48 -------- d-----w- C:\Users\maria\AppData\Roaming\OucS2ibD3n
2012-01-09 05:33:43 -------- d-----w- C:\Users\maria\AppData\Roaming\oIBrzONyx0v2b3n
2012-01-09 05:33:37 -------- d-----w- C:\Users\maria\AppData\Roaming\fTXqjUCekBzNx0v
2012-01-09 05:33:31 -------- d-----w- C:\Users\maria\AppData\Roaming\yIBtzPNyc1v
2012-01-09 05:33:26 -------- d-----w- C:\Users\maria\AppData\Roaming\BBtzP0ycAiDoF
2012-01-09 05:33:20 -------- d-----w- C:\Users\maria\AppData\Roaming\SamH5sWJ7E
2012-01-09 05:33:15 -------- d-----w- C:\Users\maria\AppData\Roaming\PP0ucS1ib3n4m6W
2012-01-09 05:33:08 -------- d-----w- C:\Users\maria\AppData\Roaming\XG5aQJ6dW8R9TqU
2012-01-09 05:32:57 -------- d-----w- C:\Users\maria\AppData\Roaming\o8RZqtPci2FpHsJ
2012-01-09 05:32:47 -------- d-----w- C:\Users\maria\AppData\Roaming\rzP0ycA1i
2012-01-09 05:32:35 -------- d-----w- C:\Users\maria\AppData\Roaming\IYCwkIVrl
2012-01-09 05:32:29 -------- d-----w- C:\Users\maria\AppData\Roaming\azONyxA0uSiFpGa
2012-01-09 05:32:23 -------- d-----w- C:\Users\maria\AppData\Roaming\v1uvD2obFpGsJ
2012-01-09 05:32:17 -------- d-----w- C:\Users\maria\AppData\Roaming\OnF4amH5sJdLgZh
2012-01-09 05:32:11 -------- d-----w- C:\Users\maria\AppData\Roaming\X6sWK7fELgZjCkV
2012-01-09 05:32:05 -------- d-----w- C:\Users\maria\AppData\Roaming\vL9hTXqjUe
2012-01-09 05:31:59 -------- d-----w- C:\Users\maria\AppData\Roaming\OjUCelIBrPyAuSo
2012-01-09 05:31:52 -------- d-----w- C:\Users\maria\AppData\Roaming\kWJ7fEL8gZhCkVl
2012-01-09 05:31:46 -------- d-----w- C:\Users\maria\AppData\Roaming\LgTXqjYCeIrOtA
2012-01-09 05:31:39 -------- d-----w- C:\Users\maria\AppData\Roaming\KH5sQJ7dE8R9YwU
2012-01-09 05:31:32 -------- d-----w- C:\Users\maria\AppData\Roaming\m0ucS1ibDoGaHsJ
2012-01-09 05:31:26 -------- d-----w- C:\Users\maria\AppData\Roaming\eF3pnG5aQ6W
2012-01-09 05:31:19 -------- d-----w- C:\Users\maria\AppData\Roaming\PBtzP0ycAiD
2012-01-09 05:31:12 -------- d-----w- C:\Users\maria\AppData\Roaming\l9gTXqjYCkVz
2012-01-09 05:31:06 -------- d-----w- C:\Users\maria\AppData\Roaming\QIrzPNyxAuSoFpG
2012-01-09 05:31:00 -------- d-----w- C:\Users\maria\AppData\Roaming\uzPNycA1u2b4m5Q
2012-01-09 05:30:54 -------- d-----w- C:\Users\maria\AppData\Roaming\WVlONtxP01DoGaH
2012-01-09 05:30:47 -------- d-----w- C:\Users\maria\AppData\Roaming\jkIBrzONyA
2012-01-09 05:30:41 -------- d-----w- C:\Users\maria\AppData\Roaming\oonF4pmH5Q7E8R
2012-01-09 05:30:31 -------- d-----w- C:\Users\maria\AppData\Roaming\pF4pmH5sQ
2012-01-09 05:30:25 -------- d-----w- C:\Users\maria\AppData\Roaming\QycS1ivvD3oF4mH
2012-01-09 05:30:19 -------- d-----w- C:\Users\maria\AppData\Roaming\fgTZqjCwkVlNx
2012-01-09 05:29:58 -------- d-----w- C:\Users\maria\AppData\Roaming\WqjUCekIBzNx0v2
2012-01-09 05:29:52 -------- d-----w- C:\Users\maria\AppData\Roaming\FBtNycA1v
2012-01-09 05:29:42 -------- d-----w- C:\Users\maria\AppData\Roaming\uhYCwOx0cDn4m5W
2012-01-09 05:29:25 -------- d-----w- C:\Users\maria\AppData\Roaming\h2ibD3pnGaHsKfL
2012-01-09 05:29:15 -------- d-----w- C:\Users\maria\AppData\Roaming\s6dWK7fRLgX
2012-01-09 05:29:01 -------- d-----w- C:\Users\maria\AppData\Roaming\fadKhXCkBAv2Fn5
2012-01-09 05:28:50 -------- d-----w- C:\Users\maria\AppData\Roaming\ahXqjUCkIr
2012-01-09 05:28:28 -------- d-----w- C:\Users\maria\AppData\Roaming\QamH6sWJ7E8TqYw
2012-01-09 05:28:22 -------- d-----w- C:\Users\maria\AppData\Roaming\Lyx0vS2ib3n5QWf
2012-01-09 05:28:15 -------- d-----w- C:\Users\maria\AppData\Roaming\GvD2obF4pGsJd
2012-01-09 05:28:09 -------- d-----w- C:\Users\maria\AppData\Roaming\w4amH5sWJdLgZhX
2012-01-09 05:28:03 -------- d-----w- C:\Users\maria\AppData\Roaming\RK7fEL9gTqYwIrO
2012-01-09 05:27:56 -------- d-----w- C:\Users\maria\AppData\Roaming\s2obF4pmGsJdKfZ
2012-01-09 05:27:50 -------- d-----w- C:\Users\maria\AppData\Roaming\bmH5sQJ7dKg
2012-01-09 05:27:43 -------- d-----w- C:\Users\maria\AppData\Roaming\cuS2ibD3pnG4
2012-01-09 05:27:36 -------- d-----w- C:\Users\maria\AppData\Roaming\twjUVelIBzNc1
2012-01-09 05:27:30 -------- d-----w- C:\Users\maria\AppData\Roaming\jOBtxP0yc1v3n4m
2012-01-09 05:27:23 -------- d-----w- C:\Users\maria\AppData\Roaming\g9gTXqjYCkBzNx0
2012-01-09 05:27:17 -------- d-----w- C:\Users\maria\AppData\Roaming\QUCelIBrzNx1v2b
2012-01-09 05:27:11 -------- d-----w- C:\Users\maria\AppData\Roaming\DtzP0ycA1v2
2012-01-09 05:27:05 -------- d-----w- C:\Users\maria\AppData\Roaming\g1ibD3onHsJfLgq
2012-01-09 05:26:59 -------- d-----w- C:\Users\maria\AppData\Roaming\QnG5aQH6dKfLgX
2012-01-09 05:26:53 -------- d-----w- C:\Users\maria\AppData\Roaming\z8fRhTXwje
2012-01-09 05:26:47 -------- d-----w- C:\Users\maria\AppData\Roaming\hZ9hYXwjUeItPyA
2012-01-09 05:26:39 -------- d-----w- C:\Users\maria\AppData\Roaming\zIBrzONyx0
2012-01-09 05:26:33 -------- d-----w- C:\Users\maria\AppData\Roaming\YycA1uvD2b4m5Q6
2012-01-09 05:26:27 -------- d-----w- C:\Users\maria\AppData\Roaming\o3onF4amHsJdLg
2012-01-09 05:26:21 -------- d-----w- C:\Users\maria\AppData\Roaming\xQH6sWK7fLgZjCk
2012-01-09 05:26:15 -------- d-----w- C:\Users\maria\AppData\Roaming\CL9gTXqjYeIrOtA
2012-01-09 05:26:09 -------- d-----w- C:\Users\maria\AppData\Roaming\oXwjUCelIrP
2012-01-09 05:26:03 -------- d-----w- C:\Users\maria\AppData\Roaming\xlOBtzP0AiDoFpH
2012-01-09 05:25:57 -------- d-----w- C:\Users\maria\AppData\Roaming\VucS1ibD3n4m6W7
2012-01-09 05:25:51 -------- d-----w- C:\Users\maria\AppData\Roaming\pF3pnG5aQ
2012-01-09 05:25:45 -------- d-----w- C:\Users\maria\AppData\Roaming\xaQJ6dWK8R9TqUe
2012-01-09 05:25:39 -------- d-----w- C:\Users\maria\AppData\Roaming\V8gRZ9hYXjVl
2012-01-09 05:25:33 -------- d-----w- C:\Users\maria\AppData\Roaming\pYCwkUVrlBx0c1v
2012-01-09 05:25:27 -------- d-----w- C:\Users\maria\AppData\Roaming\RYCekIVrzNx
2012-01-09 05:25:21 -------- d-----w- C:\Users\maria\AppData\Roaming\bhTXwjUCeIrPyA
2012-01-09 05:25:15 -------- d-----w- C:\Users\maria\AppData\Roaming\fmH5sQJ7dK
2012-01-09 05:25:10 -------- d-----w- C:\Users\maria\AppData\Roaming\yqqhhYXwkUelOtP
2012-01-09 05:25:04 -------- d-----w- C:\Users\maria\AppData\Roaming\TWJJJffLTZqYwUV
2012-01-09 05:24:59 -------- d-----w- C:\Users\maria\AppData\Roaming\lEL9gTZqjCkVlNx
2012-01-09 05:24:54 -------- d-----w- C:\Users\maria\AppData\Roaming\eA0ucS2ib3n4Q6W
2012-01-09 05:24:48 -------- d-----w- C:\Users\maria\AppData\Roaming\xWK7fRL9gXjCkV
2012-01-09 05:24:36 -------- d-----w- C:\Users\maria\AppData\Roaming\OsQJ7dEghVIzy1D
2012-01-09 05:24:23 -------- d-----w- C:\Users\maria\AppData\Roaming\A5Qd8RhwClrPy1v
2012-01-09 05:24:10 -------- d-----w- C:\Users\maria\AppData\Roaming\mTZqhYCwkV
2012-01-09 05:23:58 -------- d-----w- C:\Users\maria\AppData\Roaming\Gpm5QE8ZTe
2012-01-09 05:23:46 -------- d-----w- C:\Users\maria\AppData\Roaming\ZaQH6sKEgqCkrNP
2012-01-09 05:23:37 -------- d-----w- C:\Users\maria\AppData\Roaming\RYkVOtPyi3Fa5Wd
2012-01-09 05:23:27 -------- d-----w- C:\Users\maria\AppData\Roaming\QPu1Do4mJEZYwV
2012-01-09 05:23:06 -------- d-----w- C:\Users\maria\AppData\Roaming\nvi35HKR9jkVNSp
2012-01-09 05:22:54 -------- d-----w- C:\Users\maria\AppData\Roaming\IHWd8hwUlB2pQg9
2012-01-09 05:22:41 -------- d-----w- C:\Users\maria\AppData\Roaming\rGQ6WfLhqUkBzyA
2012-01-09 05:22:28 -------- d-----w- C:\Users\maria\AppData\Roaming\uui3n4Hs7E9ZYkV
2012-01-09 05:22:16 -------- d-----w- C:\Users\maria\AppData\Roaming\Q7EgZhwVltP
2012-01-09 05:22:04 -------- d-----w- C:\Users\maria\AppData\Roaming\uNxu1Do4ms7LgZh
2012-01-09 05:21:52 -------- d-----w- C:\Users\maria\AppData\Roaming\lDbp5QdKR9XUeIz
2012-01-09 05:21:41 -------- d-----w- C:\Users\maria\AppData\Roaming\Axy1Do4ms7E8Rhw
2012-01-09 05:21:26 -------- d-----w- C:\Users\maria\AppData\Roaming\KrtPy1vo4msJd8Z
2012-01-09 05:21:01 -------- d-----w- C:\Users\maria\AppData\Roaming\Hci3GmsJEgqCUlB
2012-01-09 05:20:40 -------- d-----w- C:\Users\maria\AppData\Roaming\jp5Qd8LTqe
2012-01-09 05:20:28 -------- d-----w- C:\Users\maria\AppData\Roaming\R7ERqXkeBPy
2012-01-09 05:20:12 -------- d-----w- C:\Users\maria\AppData\Roaming\SNAubG6fgC
2012-01-09 05:19:50 -------- d-----w- C:\Users\maria\AppData\Roaming\u8RhwVlBPy1Dbp5
2012-01-09 05:19:38 -------- d-----w- C:\Users\maria\AppData\Roaming\QNAcDnaKEgZYkrN
2012-01-09 05:19:26 -------- d-----w- C:\Users\maria\AppData\Roaming\HQd8RhwClrPxuS
2012-01-09 05:19:14 -------- d-----w- C:\Users\maria\AppData\Roaming\XwIlNxu1boGmsJE
2012-01-09 05:19:02 -------- d-----w- C:\Users\maria\AppData\Roaming\WzxuSb3GQ6Kf9XU
2012-01-09 05:18:50 -------- d-----w- C:\Users\maria\AppData\Roaming\qna6WfLgqYkVOty
2012-01-09 05:18:39 -------- d-----w- C:\Users\maria\AppData\Roaming\c5Hd7R9Tj
2012-01-09 05:18:24 -------- d-----w- C:\Users\maria\AppData\Roaming\KFn5HWfLTqCIzNA
2012-01-09 05:18:04 -------- d-----w- C:\Users\maria\AppData\Roaming\xUeBPy1So3G
2012-01-09 05:17:44 -------- d-----w- C:\Users\maria\AppData\Roaming\L5JEf9XUlrNxu2F
2012-01-09 05:17:32 -------- d-----w- C:\Users\maria\AppData\Roaming\agjCkrOx0SiDn4m
2012-01-09 05:17:19 -------- d-----w- C:\Users\maria\AppData\Roaming\llBPy1So3
2012-01-09 05:17:08 -------- d-----w- C:\Users\maria\AppData\Roaming\uboGm6WfLTqY
2012-01-09 05:16:56 -------- d-----w- C:\Users\maria\AppData\Roaming\tFp5HW7LgqCkrNx
2012-01-09 05:16:44 -------- d-----w- C:\Users\maria\AppData\Roaming\hOxy1Dn45JE8ZhU
2012-01-09 05:16:32 -------- d-----w- C:\Users\maria\AppData\Roaming\Sf9XUkrNASbna67
2012-01-09 05:16:20 -------- d-----w- C:\Users\maria\AppData\Roaming\sYUeBPciDn4
2012-01-09 05:16:08 -------- d-----w- C:\Users\maria\AppData\Roaming\jOxuSbp5QdKRgqC
2012-01-09 05:15:56 -------- d-----w- C:\Users\maria\AppData\Roaming\t4msJEg9YjVIzy1
2012-01-09 05:15:44 -------- d-----w- C:\Users\maria\AppData\Roaming\EgqCkrNxuSb3GQs
2012-01-09 05:15:32 -------- d-----w- C:\Users\maria\AppData\Roaming\ABPcDnHQ8
2012-01-09 05:15:20 -------- d-----w- C:\Users\maria\AppData\Roaming\p3n4HsKEgZjC
2012-01-09 05:15:09 -------- d-----w- C:\Users\maria\AppData\Roaming\FSo3maJW8RhX
2012-01-09 05:14:54 -------- d-----w- C:\Users\maria\AppData\Roaming\ZyubpGa6Kf9TqCI
2012-01-09 05:14:44 -------- d-----w- C:\Users\maria\AppData\Roaming\vGs6E8ZhwU
2012-01-09 05:14:19 -------- d-----w- C:\Users\maria\AppData\Roaming\Ag9XUeItN
2012-01-09 05:13:58 -------- d-----w- C:\Users\maria\AppData\Roaming\zTqCklNPu1
2012-01-09 05:13:46 -------- d-----w- C:\Users\maria\AppData\Roaming\WzNAuo3GQ68L
2012-01-09 05:13:34 -------- d-----w- C:\Users\maria\AppData\Roaming\A3Gm6JE8ZhCUrOx
2012-01-09 05:13:22 -------- d-----w- C:\Users\maria\AppData\Roaming\WCBzNAvo3
2012-01-09 05:13:11 -------- d-----w- C:\Users\maria\AppData\Roaming\lEg9XUltNAvo4GQ
2012-01-09 05:12:56 -------- d-----w- C:\Users\maria\AppData\Roaming\Lms7LRhwVOzy1Dn
2012-01-09 05:12:31 -------- d-----w- C:\Users\maria\AppData\Roaming\Wf8TqCkrOt0c1Do
2012-01-09 05:12:15 -------- d-----w- C:\Users\maria\AppData\Roaming\BmH6sWJ7fLgZh
2012-01-09 05:12:09 -------- d-----w- C:\Users\maria\AppData\Roaming\QfRL9TXqjCkVzNx
2012-01-09 05:12:03 -------- d-----w- C:\Users\maria\AppData\Roaming\DXwwjUUCelrzPyA
2012-01-09 05:11:57 -------- d-----w- C:\Users\maria\AppData\Roaming\hOOOBttzPycA
2012-01-09 05:11:51 -------- d-----w- C:\Users\maria\AppData\Roaming\WuuccS1iib3on4m
2012-01-09 05:11:45 -------- d-----w- C:\Users\maria\AppData\Roaming\DD33ppnG4aQsK7
2012-01-09 05:11:40 -------- d-----w- C:\Users\maria\AppData\Roaming\LVVrrzOONtA0uS2
2012-01-09 05:11:35 -------- d-----w- C:\Users\maria\AppData\Roaming\PK77ffRL9gTXqYe
2012-01-09 05:11:30 -------- d-----w- C:\Users\maria\AppData\Roaming\H222ibbF3pn5aQ6
2012-01-09 05:11:25 -------- d-----w- C:\Users\maria\AppData\Roaming\YCeeekIBrz
2012-01-09 05:11:05 -------- d-----w- C:\Users\maria\AppData\Roaming\n55aaQJ66WK8fLh
2012-01-09 05:11:00 -------- d-----w- C:\Users\maria\AppData\Roaming\TyyyxAA1u
2012-01-09 05:10:45 -------- d-----w- C:\Users\maria\AppData\Roaming\ktzzNycAA1vD2b4
2012-01-09 05:10:39 -------- d-----w- C:\Users\maria\AppData\Roaming\L111ivvD2on
2012-01-09 05:10:33 -------- d-----w- C:\Users\maria\AppData\Roaming\ynnGG4aamHsWJfE
2012-01-09 05:10:27 -------- d-----w- C:\Users\maria\AppData\Roaming\kddW7fRRL9gXqY
2012-01-09 05:10:21 -------- d-----w- C:\Users\maria\AppData\Roaming\ZZZ9hTXwj
2012-01-09 05:10:15 -------- d-----w- C:\Users\maria\AppData\Roaming\ukUUVVelOBtz0yA
2012-01-09 05:10:05 -------- d-----w- C:\Users\maria\AppData\Roaming\eAvD2onF4pmHsQ7
2012-01-09 05:09:50 -------- d-----w- C:\Users\maria\AppData\Roaming\tPP00yccS1iD3n4
2012-01-09 05:09:44 -------- d-----w- C:\Users\maria\AppData\Roaming\jiibbD33pn
2012-01-09 05:09:38 -------- d-----w- C:\Users\maria\AppData\Roaming\EG55aaQH6dWKfR9
2012-01-09 05:09:32 -------- d-----w- C:\Users\maria\AppData\Roaming\yEEEK88fRZ9TXj
2012-01-09 05:09:26 -------- d-----w- C:\Users\maria\AppData\Roaming\kqqhhYXwwkVelBz
2012-01-09 05:09:20 -------- d-----w- C:\Users\maria\AppData\Roaming\LVVVrllONtxPuc1
2012-01-09 05:09:14 -------- d-----w- C:\Users\maria\AppData\Roaming\yxxA00uvS2i
2012-01-09 05:09:03 -------- d-----w- C:\Users\maria\AppData\Roaming\ZHH55sQQJ7dK8RZ
2012-01-09 05:08:56 -------- d-----w- C:\Users\maria\AppData\Roaming\uEEEgqhCw
2012-01-09 05:08:50 -------- d-----w- C:\Users\maria\AppData\Roaming\lqqqekIrzNtAciD
2012-01-09 05:08:45 -------- d-----w- C:\Users\maria\AppData\Roaming\n55aaQHH6dW7fLg
2012-01-09 05:08:40 -------- d-----w- C:\Users\maria\AppData\Roaming\gNyyxxA0uvS2bFp
2012-01-09 05:08:35 -------- d-----w- C:\Users\maria\AppData\Roaming\x99ggTXXqjY
2012-01-09 05:08:30 -------- d-----w- C:\Users\maria\AppData\Roaming\QpppnnG5aQH6WK
2012-01-09 05:08:15 -------- d-----w- C:\Users\maria\AppData\Roaming\foobbF33pmGaQ6W
2012-01-09 05:08:10 -------- d-----w- C:\Users\maria\AppData\Roaming\rellIIBrz
2012-01-09 05:08:05 -------- d-----w- C:\Users\maria\AppData\Roaming\pddWWK8ffR9h
2012-01-09 05:07:50 -------- d-----w- C:\Users\maria\AppData\Roaming\CsQQQJ6dEK8fR9T
2012-01-09 05:07:45 -------- d-----w- C:\Users\maria\AppData\Roaming\eccAA1uvv2obFpG
2012-01-09 05:07:40 -------- d-----w- C:\Users\maria\AppData\Roaming\KhYYYXwjUV
2012-01-09 05:07:26 -------- d-----w- C:\Users\maria\AppData\Roaming\ZRRhXjVlBzNcuDo
2012-01-09 05:07:19 -------- d-----w- C:\Users\maria\AppData\Roaming\uwkkUUVrlOBt
2012-01-09 05:07:13 -------- d-----w- C:\Users\maria\AppData\Roaming\ONNNtxxA0ucSib3
2012-01-09 05:07:07 -------- d-----w- C:\Users\maria\AppData\Roaming\XvSS2obF3pmGaJd
2012-01-09 05:07:01 -------- d-----w- C:\Users\maria\AppData\Roaming\i4ppmG5sJd
2012-01-09 05:06:55 -------- d-----w- C:\Users\maria\AppData\Roaming\OJJd8ggqhYXwUeO
2012-01-09 05:06:50 -------- d-----w- C:\Users\maria\AppData\Roaming\sTTZqYCwkO0S13
2012-01-09 05:06:43 -------- d-----w- C:\Users\maria\AppData\Roaming\beekkIBrzONyA0v
2012-01-09 05:06:37 -------- d-----w- C:\Users\maria\AppData\Roaming\PPPyccA1D2bF4mE
2012-01-09 05:06:31 -------- d-----w- C:\Users\maria\AppData\Roaming\CivvDD2onF4
2012-01-09 05:06:25 -------- d-----w- C:\Users\maria\AppData\Roaming\b4aamHH6sWf8gZY
2012-01-09 05:06:19 -------- d-----w- C:\Users\maria\AppData\Roaming\PWKKK7fRL9gTqj
2012-01-09 05:06:13 -------- d-----w- C:\Users\maria\AppData\Roaming\ChhhTXXwjUCeIBz
2012-01-09 05:06:07 -------- d-----w- C:\Users\maria\AppData\Roaming\nVVelOOBtP0cAiD
2012-01-09 05:06:01 -------- d-----w- C:\Users\maria\AppData\Roaming\AxPP00ycS1iv
2012-01-09 05:05:55 -------- d-----w- C:\Users\maria\AppData\Roaming\diiibDD3pnG4Q6s
2012-01-09 05:05:49 -------- d-----w- C:\Users\maria\AppData\Roaming\xJJJ66dWK8fR9hX
2012-01-09 05:05:43 -------- d-----w- C:\Users\maria\AppData\Roaming\wEEKYwUUVe
2012-01-09 05:05:37 -------- d-----w- C:\Users\maria\AppData\Roaming\fqqhhYCCwkUrlBt
2012-01-09 05:05:31 -------- d-----w- C:\Users\maria\AppData\Roaming\mVVVrlNtxci3G
2012-01-09 05:05:25 -------- d-----w- C:\Users\maria\AppData\Roaming\wxxAuF3pnG5QHW7
2012-01-09 05:05:20 -------- d-----w- C:\Users\maria\AppData\Roaming\KhhTTXqqjU
2012-01-09 05:05:15 -------- d-----w- C:\Users\maria\AppData\Roaming\BmmmGG5aQJ6dK
2012-01-09 05:05:10 -------- d-----w- C:\Users\maria\AppData\Roaming\oBBrrzPNNyA1uS
2012-01-09 05:05:05 -------- d-----w- C:\Users\maria\AppData\Roaming\RR9TXUUCelIBzPy
2012-01-09 05:04:50 -------- d-----w- C:\Users\maria\AppData\Roaming\UETwjjUCelB
2012-01-09 05:04:30 -------- d-----w- C:\Users\maria\AppData\Roaming\GzyycA1ivD2oF4H
2012-01-09 05:04:24 -------- d-----w- C:\Users\maria\AppData\Roaming\iIxio4m6WEL8TqY
2012-01-09 05:04:18 -------- d-----w- C:\Users\maria\AppData\Roaming\BpppnKfR9g
2012-01-09 05:04:12 -------- d-----w- C:\Users\maria\AppData\Roaming\mRRLL9hTTXjUCkB
2012-01-09 05:04:07 -------- d-----w- C:\Users\maria\AppData\Roaming\YFFF33pmG5aQ6dK
2012-01-09 05:03:57 -------- d-----w- C:\Users\maria\AppData\Roaming\WKKK88fRL9hT
2012-01-09 05:03:37 -------- d-----w- C:\Users\maria\AppData\Roaming\x111uvvD2obFpG5
2012-01-09 05:03:31 -------- d-----w- C:\Users\maria\AppData\Roaming\UnnFF4aamH5WJdE
2012-01-09 05:03:10 -------- d-----w- C:\Users\maria\AppData\Roaming\XQHH6ssWK7ELgTj
2012-01-09 05:03:04 -------- d-----w- C:\Users\maria\AppData\Roaming\i8LL9qCeBONx0
2012-01-09 05:02:59 -------- d-----w- C:\Users\maria\AppData\Roaming\f222obbF3pmGaQ6
2012-01-09 05:02:54 -------- d-----w- C:\Users\maria\AppData\Roaming\rCCeekIIBrONyA0
2012-01-09 05:02:44 -------- d-----w- C:\Users\maria\AppData\Roaming\huuuvSS2o
2012-01-09 05:02:25 -------- d-----w- C:\Users\maria\AppData\Roaming\srPxd9OA0pW
2012-01-09 05:02:18 -------- d-----w- C:\Users\maria\AppData\Roaming\oXwkUVVeBtz
2012-01-09 05:02:12 -------- d-----w- C:\Users\maria\AppData\Roaming\rQH6sWK7E9TqYwV
2012-01-09 05:02:06 -------- d-----w- C:\Users\maria\AppData\Roaming\eBPx1So3maJW8L
2012-01-09 05:01:48 -------- d-----w- C:\Users\maria\AppData\Roaming\DWf9ZjIrNu1
2012-01-09 05:01:26 -------- d-----w- C:\Users\maria\AppData\Roaming\syvF5dRXezAvFsE
2012-01-09 05:01:15 -------- d-----w- C:\Users\maria\AppData\Roaming\fCUrOt0c1DoFa
2012-01-09 05:01:00 -------- d-----w- C:\Users\maria\AppData\Roaming\tLgZjwIrOtPu1b3
2012-01-09 05:00:35 -------- d-----w- C:\Users\maria\AppData\Roaming\zIrOt0c2b3naHsK
2012-01-09 05:00:14 -------- d-----w- C:\Users\maria\AppData\Roaming\fNxu2FpGQ6W8R9T
2012-01-09 05:00:03 -------- d-----w- C:\Users\maria\AppData\Roaming\PYkVlBPyAiDn4ms
2012-01-09 04:59:41 -------- d-----w- C:\Users\maria\AppData\Roaming\xd79XCVzt0S
2012-01-09 04:59:29 -------- d-----w- C:\Users\maria\AppData\Roaming\lsJdKgZhXjVltPy
2012-01-09 04:59:17 -------- d-----w- C:\Users\maria\AppData\Roaming\fuSb3n4QsKfLgZj
2012-01-09 04:59:05 -------- d-----w- C:\Users\maria\AppData\Roaming\cm5JdKgYwVeItPy
2012-01-09 04:58:52 -------- d-----w- C:\Users\maria\AppData\Roaming\ZqYkVOtAu
2012-01-09 04:58:42 -------- d-----w- C:\Users\maria\AppData\Roaming\KfLhXjCIrOyAuSi
2012-01-09 04:58:27 -------- d-----w- C:\Users\maria\AppData\Roaming\TKZhwUlBzyAu2b3
2012-01-09 04:58:06 -------- d-----w- C:\Users\maria\AppData\Roaming\iy1v2FpGsJ
2012-01-09 04:57:47 -------- d-----w- C:\Users\maria\AppData\Roaming\hRqXkVlBPyAiDo4
2012-01-09 04:57:35 -------- d-----w- C:\Users\maria\AppData\Roaming\Yui3n4HsKEgZY
2012-01-09 04:57:23 -------- d-----w- C:\Users\maria\AppData\Roaming\Kp5Q7EgZhXUeI
2012-01-09 04:57:02 -------- d-----w- C:\Users\maria\AppData\Roaming\QmsfLgqYwUlBx0
2012-01-09 04:56:51 -------- d-----w- C:\Users\maria\AppData\Roaming\pb3GaHdKf9Tq
2012-01-09 04:56:36 -------- d-----w- C:\Users\maria\AppData\Roaming\XviFpGQ6KfLgqYe
2012-01-09 04:56:16 -------- d-----w- C:\Users\maria\AppData\Roaming\tXjClBzyAu2b3m5
2012-01-09 04:55:56 -------- d-----w- C:\Users\maria\AppData\Roaming\CpGs6E8RhXj
2012-01-09 04:55:46 -------- d-----w- C:\Users\maria\AppData\Roaming\fdKgZhwUeItPyAu
2012-01-09 04:55:31 -------- d-----w- C:\Users\maria\AppData\Roaming\QKR9YwUlBzN
2012-01-09 04:55:19 -------- d-----w- C:\Users\maria\AppData\Roaming\hrOx0c2bpGaHW7E
2012-01-09 04:55:07 -------- d-----w- C:\Users\maria\AppData\Roaming\iDoFpGs6E8R9TwU
2012-01-09 04:54:57 -------- d-----w- C:\Users\maria\AppData\Roaming\t7E8R9YwUlBzNc1
2012-01-09 04:54:42 -------- d-----w- C:\Users\maria\AppData\Roaming\JHs7RqXkVlBPyAv
2012-01-09 04:54:21 -------- d-----w- C:\Users\maria\AppData\Roaming\OBx0c1v3na
2012-01-09 04:54:02 -------- d-----w- C:\Users\maria\AppData\Roaming\D8ThCOx0c1v3n4m
2012-01-09 04:53:49 -------- d-----w- C:\Users\maria\AppData\Roaming\qeIrPx1v2
2012-01-09 04:53:38 -------- d-----w- C:\Users\maria\AppData\Roaming\t3n4m6W7E8TqC
2012-01-09 04:53:26 -------- d-----w- C:\Users\maria\AppData\Roaming\vxuSi3n4Qs
2012-01-09 04:53:12 -------- d-----w- C:\Users\maria\AppData\Roaming\nOyAv2b3n5QdKfL
2012-01-09 04:52:47 -------- d-----w- C:\Users\maria\AppData\Roaming\WvFG68hUIN0inQK
2012-01-09 04:52:22 -------- d-----w- C:\Users\maria\AppData\Roaming\QGQdKRTwUIPy12
2012-01-09 04:52:02 -------- d-----w- C:\Users\maria\AppData\Roaming\t8YwVltPci2npHQ
2012-01-09 04:51:49 -------- d-----w- C:\Users\maria\AppData\Roaming\pBN0ipQdLTjeIzN
2012-01-09 04:51:39 -------- d-----w- C:\Users\maria\AppData\Roaming\ASoFp5Q6W8R9
2012-01-09 04:51:29 -------- d-----w- C:\Users\maria\AppData\Roaming\waJdKfLhqUeIrOx
2012-01-09 04:51:04 -------- d-----w- C:\Users\maria\AppData\Roaming\PgZhXjVltPyAu2
2012-01-09 04:50:39 -------- d-----w- C:\Users\maria\AppData\Roaming\NVlBPyAiDoFp5Q
2012-01-09 04:50:18 -------- d-----w- C:\Users\maria\AppData\Roaming\wIrOtPuSiDn4m
2012-01-09 04:50:08 -------- d-----w- C:\Users\maria\AppData\Roaming\Bc2b3n4Q6W7EgZj
2012-01-09 04:49:58 -------- d-----w- C:\Users\maria\AppData\Roaming\Z6KRTjeVO
2012-01-09 04:49:42 -------- d-----w- C:\Users\maria\AppData\Roaming\GS2i3na6Kf9Tj
2012-01-09 04:49:34 -------- d-----w- C:\Users\maria\AppData\Roaming\liDpGaHsKE9TqYw
2012-01-09 04:49:09 -------- d-----w- C:\Users\maria\AppData\Roaming\kQ6KfTjCkVztAuS
2012-01-09 04:48:44 -------- d-----w- C:\Users\maria\AppData\Roaming\PfLhXjCIrOyAuS
2012-01-09 04:48:23 -------- d-----w- C:\Users\maria\AppData\Roaming\OZhwUeItPy1v2bp
2012-01-09 04:48:12 -------- d-----w- C:\Users\maria\AppData\Roaming\wW7E8ZhCkVlBP
2012-01-09 04:47:57 -------- d-----w- C:\Users\maria\AppData\Roaming\iQK9qkOP134sfTY
2012-01-09 04:47:32 -------- d-----w- C:\Users\maria\AppData\Roaming\SLgXjCkVzNAuSiD
2012-01-09 04:47:07 -------- d-----w- C:\Users\maria\AppData\Roaming\tUeBzNxuSi3n5Qd
2012-01-09 04:46:46 -------- d-----w- C:\Users\maria\AppData\Roaming\zzNcuDoFG68ZUlr
2012-01-09 04:46:35 -------- d-----w- C:\Users\maria\AppData\Roaming\Y2npHsJdKg
2012-01-09 04:46:26 -------- d-----w- C:\Users\maria\AppData\Roaming\Kd8RqYwUeOt0c1v
2012-01-09 04:46:11 -------- d-----w- C:\Users\maria\AppData\Roaming\R5W7E8RqYwVlBz0
2012-01-09 04:46:01 -------- d-----w- C:\Users\maria\AppData\Roaming\cCkVlBx0c1v3FaH
2012-01-09 04:45:46 -------- d-----w- C:\Users\maria\AppData\Roaming\VLgZhCUrOtPc1v3
2012-01-09 04:45:35 -------- d-----w- C:\Users\maria\AppData\Roaming\EltuSi3n4m
2012-01-09 04:45:16 -------- d-----w- C:\Users\maria\AppData\Roaming\SsKf9TqYwVlNx0S
2012-01-09 04:44:51 -------- d-----w- C:\Users\maria\AppData\Roaming\jUeIrOx0v2FpGQ6
2012-01-09 04:44:36 -------- d-----w- C:\Users\maria\AppData\Roaming\DR9TqCkBzNx0v2
2012-01-09 04:44:21 -------- d-----w- C:\Users\maria\AppData\Roaming\n8R9TjClBzNx1v2
2012-01-09 04:43:56 -------- d-----w- C:\Users\maria\AppData\Roaming\rjeItPyAuDoFm5Q
2012-01-09 04:43:45 -------- d-----w- C:\Users\maria\AppData\Roaming\Fz0c1v2n4
2012-01-09 04:43:20 -------- d-----w- C:\Users\maria\AppData\Roaming\twIrNx0SiDoGa6W
2012-01-09 04:43:05 -------- d-----w- C:\Users\maria\AppData\Roaming\XLgZjCkVlNx0SiD
2012-01-09 04:42:50 -------- d-----w- C:\Users\maria\AppData\Roaming\CkkzONtx0ucSib3
2012-01-09 04:42:40 -------- d-----w- C:\Users\maria\AppData\Roaming\oppnnG4aaQ6sW7
2012-01-09 04:42:25 -------- d-----w- C:\Users\maria\AppData\Roaming\abbbD33pnG4aH6W
2012-01-09 04:42:16 -------- d-----w- C:\Users\maria\AppData\Roaming\wIIIVrrzONtA0cS
2012-01-09 04:42:04 -------- d-----w- C:\Users\maria\AppData\Roaming\o3ppmGG5aQJ6WKf
2012-01-09 04:41:59 -------- d-----w- C:\Users\maria\AppData\Roaming\grrrzPPNyxA
2012-01-09 04:41:54 -------- d-----w- C:\Users\maria\AppData\Roaming\bPNNyycA1uvD2b
2012-01-09 04:41:39 -------- d-----w- C:\Users\maria\AppData\Roaming\bEEEK88gRZ9hXwU
2012-01-09 04:41:34 -------- d-----w- C:\Users\maria\AppData\Roaming\eBBBtzzP0cAiDoF
2012-01-09 04:41:28 -------- d-----w- C:\Users\maria\AppData\Roaming\ymmHH55sWJ7ELgR
2012-01-09 04:41:22 -------- d-----w- C:\Users\maria\AppData\Roaming\SWK7fEL9gTZqY
2012-01-09 04:41:17 -------- d-----w- C:\Users\maria\AppData\Roaming\KSSS2iibD3pn4aH
2012-01-09 04:40:58 -------- d-----w- C:\Users\maria\AppData\Roaming\zNNtxxA0ucS2bDp
2012-01-09 04:40:50 -------- d-----w- C:\Users\maria\AppData\Roaming\l55ssQJJ7dE8
2012-01-09 04:40:40 -------- d-----w- C:\Users\maria\AppData\Roaming\hqqhXkkUVelOtz0
2012-01-09 04:40:25 -------- d-----w- C:\Users\maria\AppData\Roaming\w8gggqhXwk
2012-01-09 04:40:16 -------- d-----w- C:\Users\maria\AppData\Roaming\ftPci3Fa5Jd8RhX
2012-01-09 04:39:56 -------- d-----w- C:\Users\maria\AppData\Roaming\eLTqCkrOt0ciDo
2012-01-09 04:39:41 -------- d-----w- C:\Users\maria\AppData\Roaming\L6KE9ZjwIrOx0ci
2012-01-09 04:39:12 -------- d-----w- C:\Users\maria\AppData\Roaming\i88ggTZqhYCkx0S
2012-01-09 04:39:06 -------- d-----w- C:\Users\maria\AppData\Roaming\bIBrNyx0uiFn5Hd
2012-01-09 04:39:00 -------- d-----w- C:\Users\maria\AppData\Roaming\L777ffRL9gT
2012-01-09 04:38:55 -------- d-----w- C:\Users\maria\AppData\Roaming\zSS22ibFF3nG5
2012-01-09 04:38:45 -------- d-----w- C:\Users\maria\AppData\Roaming\jJJ66dWWK8fL9Tq
2012-01-09 04:38:40 -------- d-----w- C:\Users\maria\AppData\Roaming\v111uvvS2oF3mGa
2012-01-09 04:38:34 -------- d-----w- C:\Users\maria\AppData\Roaming\On4p5sQJ7EKgR9h
2012-01-09 04:38:19 -------- d-----w- C:\Users\maria\AppData\Roaming\CWWW7ddEL8gZqYX
2012-01-09 04:38:02 -------- d-----w- C:\Users\maria\AppData\Roaming\AXwUCeIzNxv2bpG
2012-01-09 04:37:56 -------- d-----w- C:\Users\maria\AppData\Roaming\WmGG5aQ6d
2012-01-09 04:37:51 -------- d-----w- C:\Users\maria\AppData\Roaming\IPPNNyxxA1vS
2012-01-09 04:37:41 -------- d-----w- C:\Users\maria\AppData\Roaming\RFFF4ppmG5sQ6dK
2012-01-09 04:37:36 -------- d-----w- C:\Users\maria\AppData\Roaming\zIIBBtzzPNyA1vD
2012-01-09 04:37:31 -------- d-----w- C:\Users\maria\AppData\Roaming\mKKK88RRZ9hXwUV
2012-01-09 04:37:16 -------- d-----w- C:\Users\maria\AppData\Roaming\dJJdEK8gRZ9YXjU
2012-01-09 04:37:01 -------- d-----w- C:\Users\maria\AppData\Roaming\g5sWWJ7dL8RYkeO
2012-01-09 04:36:56 -------- d-----w- C:\Users\maria\AppData\Roaming\y00yycAA1iv
2012-01-09 04:36:51 -------- d-----w- C:\Users\maria\AppData\Roaming\XZqqhhYXwkUVe
2012-01-09 04:36:41 -------- d-----w- C:\Users\maria\AppData\Roaming\JBttxxP0ycS1vDo
2012-01-09 04:36:36 -------- d-----w- C:\Users\maria\AppData\Roaming\V8ggTTZqhYCwUVl
2012-01-09 04:36:31 -------- d-----w- C:\Users\maria\AppData\Roaming\FooonGG4a
2012-01-09 04:36:16 -------- d-----w- C:\Users\maria\AppData\Roaming\HiibbD33on4am6s
2012-01-09 04:35:56 -------- d-----w- C:\Users\maria\AppData\Roaming\OjjYYCeekIVzO
2012-01-09 04:35:51 -------- d-----w- C:\Users\maria\AppData\Roaming\naQQHH6WK7fL9gZ
2012-01-09 04:35:46 -------- d-----w- C:\Users\maria\AppData\Roaming\TxxxA00ucS2bDpn
2012-01-09 04:35:41 -------- d-----w- C:\Users\maria\AppData\Roaming\xgTTTXqjYCekIrO
2012-01-09 04:35:26 -------- d-----w- C:\Users\maria\AppData\Roaming\bRRRL99hTXqjCe
2012-01-09 04:35:21 -------- d-----w- C:\Users\maria\AppData\Roaming\fbFF33pnG5aQ6dK
2012-01-09 04:35:16 -------- d-----w- C:\Users\maria\AppData\Roaming\zIIIBrrzONyA0uS
2012-01-09 04:35:01 -------- d-----w- C:\Users\maria\AppData\Roaming\uUCCCelIBrzP
2012-01-09 04:34:46 -------- d-----w- C:\Users\maria\AppData\Roaming\oXXwwjUCelIBzPy
2012-01-09 04:34:41 -------- d-----w- C:\Users\maria\AppData\Roaming\BGG55sQJ6dEK8R9
2012-01-09 04:34:36 -------- d-----w- C:\Users\maria\AppData\Roaming\tNNyycAA1u
2012-01-09 04:34:20 -------- d-----w- C:\Users\maria\AppData\Roaming\f7dd8gTTZq
2012-01-09 04:34:00 -------- d-----w- C:\Users\maria\AppData\Roaming\yPP00uccS1iD3nG
2012-01-09 04:33:55 -------- d-----w- C:\Users\maria\AppData\Roaming\CTZZqqjYCwkIrlN
2012-01-09 04:33:40 -------- d-----w- C:\Users\maria\AppData\Roaming\BL9ggTZqjYCwkVl
2012-01-09 04:33:30 -------- d-----w- C:\Users\maria\AppData\Roaming\ZVVVrzzONtx0uS2
2012-01-09 04:33:25 -------- d-----w- C:\Users\maria\AppData\Roaming\A777fRRL9
2012-01-09 04:33:20 -------- d-----w- C:\Users\maria\AppData\Roaming\J222ibbF3pn5
2012-01-09 04:33:05 -------- d-----w- C:\Users\maria\AppData\Roaming\E0uuvvS2ibF3pGa
2012-01-09 04:32:55 -------- d-----w- C:\Users\maria\AppData\Roaming\m5aaQQJ6dW
2012-01-09 04:32:31 -------- d-----w- C:\Users\maria\AppData\Roaming\R1v2pGa6W8R9TjC
2012-01-09 04:32:07 -------- d-----w- C:\Users\maria\AppData\Roaming\d4ms6E8RhwmLN0G
2012-01-09 04:31:44 -------- d-----w- C:\Users\maria\AppData\Roaming\aqYkVlNx0SiDoaH
2012-01-09 04:31:28 -------- d-----w- C:\Users\maria\AppData\Roaming\ZQ6KfLgXj
2012-01-09 04:31:04 -------- d-----w- C:\Users\maria\AppData\Roaming\EfLTqUeIrOyAu2b
2012-01-09 04:30:38 -------- d-----w- C:\Users\maria\AppData\Roaming\lzNx1v2Fp
2012-01-09 04:30:12 -------- d-----w- C:\Users\maria\AppData\Roaming\eAuSb3n4Q6W7LgZ
2012-01-09 04:18:06 -------- d-----w- C:\Users\maria\AppData\Roaming\yRgTXjYkVu2
2012-01-09 04:18:06 -------- d-----w- C:\Users\maria\AppData\Roaming\VgTXjYkVru2DpGQ
2012-01-09 04:18:06 -------- d-----w- C:\Users\maria\AppData\Roaming\SReyvGdRgXYIr
2012-01-09 04:18:06 -------- d-----w- C:\Users\maria\AppData\Roaming\RZIvGKjz0bQKLTj
2012-01-09 04:18:06 -------- d-----w- C:\Users\maria\AppData\Roaming\PvGdRgTXjkVu2D
2012-01-09 04:18:06 -------- d-----w- C:\Users\maria\AppData\Roaming\OQReyvGdRgXYIru
2012-01-09 04:18:06 -------- d-----w- C:\Users\maria\AppData\Roaming\NQReyvGdRgXYIru
2012-01-09 04:17:53 -------- d-----w- C:\Users\maria\AppData\Roaming\sGAjHchHzRmxqHc
2012-01-09 03:14:36 -------- d-----w- C:\Users\maria\AppData\Roaming\oU3XSLP7tJl
2012-01-09 03:13:43 -------- d-----w- C:\Users\maria\AppData\Roaming\Wp5JKRYjezNAps6
2012-01-09 03:13:42 -------- d-----w- C:\Users\maria\AppData\Roaming\rC0HYS4JLgZh
2012-01-09 03:13:42 -------- d-----w- C:\Users\maria\AppData\Roaming\nQC0HYS4JLgZhVt
2012-01-09 03:13:42 -------- d-----w- C:\Users\maria\AppData\Roaming\GQC0HYS4JLgZhVt
2012-01-09 03:13:42 -------- d-----w- C:\Users\maria\AppData\Roaming\DC0HYS4JLgZ
2012-01-09 03:13:42 -------- d-----w- C:\Users\maria\AppData\Roaming\bC0HYS4JLgZ
2012-01-09 03:13:41 -------- d-----w- C:\Users\maria\AppData\Roaming\Y08DjFhAGLb7IS7
2012-01-09 03:13:39 -------- d-----w- C:\Users\maria\AppData\Roaming\pFNhFALbYHOWcZu
2012-01-09 03:13:28 -------- d-----w- C:\Users\maria\AppData\Roaming\LbLbiKziEzdIiWg
2012-01-09 03:13:20 -------- d-----w- C:\Users\maria\AppData\Roaming\AN7Vd2X3w29tgKB
2012-01-09 03:13:13 -------- d-----w- C:\Users\maria\AppData\Roaming\bRGCvEiV7oI7NFN
2012-01-09 03:12:20 -------- d-----w- C:\Users\maria\AppData\Roaming\n34gB0u2p
2012-01-09 03:11:12 -------- d-----w- C:\Users\maria\AppData\Roaming\s9xk93xYsvNhJp
2012-01-09 03:11:11 -------- d-----w- C:\Users\maria\AppData\Roaming\GttZy9QuIf3zjE3
2012-01-09 03:11:11 -------- d-----w- C:\Users\maria\AppData\Roaming\flBZy9QuIf3zjE3
2012-01-09 03:11:10 -------- d-----w- C:\Users\maria\AppData\Roaming\jztZy9QuIf3zjE3
2012-01-09 03:11:09 -------- d-----w- C:\Users\maria\AppData\Roaming\CZxk93xYsvNhJp
2012-01-09 03:11:08 -------- d-----w- C:\Users\maria\AppData\Roaming\RlBZy9QuIf3zjE3
2012-01-09 03:11:06 -------- d-----w- C:\Users\maria\AppData\Roaming\eBGizTayUgG
2012-01-09 03:11:04 -------- d-----w- C:\Users\maria\AppData\Roaming\IELlBZy9QuIf3zj
2012-01-09 03:11:02 -------- d-----w- C:\Users\maria\AppData\Roaming\UjVrAD46Elt9AI9
2012-01-09 03:11:02 -------- d-----w- C:\Users\maria\AppData\Roaming\spHsELlBZxI9pPC
2012-01-09 03:11:02 -------- d-----w- C:\Users\maria\AppData\Roaming\kELlBZy9QuIf3z
2012-01-09 03:10:59 -------- d-----w- C:\Users\maria\AppData\Roaming\yLTjVrAD46Elt9A
2012-01-09 03:10:59 -------- d-----w- C:\Users\maria\AppData\Roaming\tN0pHsELlt9AI
2012-01-09 03:10:58 -------- d-----w- C:\Users\maria\AppData\Roaming\PSaKRLTjVAp6Elt
2012-01-09 03:10:56 -------- d-----w- C:\Users\maria\AppData\Roaming\i6fhVxSoHdZUiFs
2012-01-09 03:10:56 -------- d-----w- C:\Users\maria\AppData\Roaming\fXjBOx0SaK
2012-01-09 03:10:55 -------- d-----w- C:\Users\maria\AppData\Roaming\RHgrSqtcD4EYezA
2012-01-09 03:10:54 -------- d-----w- C:\Users\maria\AppData\Roaming\IZUiFsKXBc2mJRX
2012-01-09 03:10:52 -------- d-----w- C:\Users\maria\AppData\Roaming\WJE8ZhwCva89Xr0
2012-01-09 03:10:47 -------- d-----w- C:\Users\maria\AppData\Roaming\dfjINcD6fjO4ETY
2012-01-09 03:10:23 -------- d-----w- C:\Users\maria\AppData\Roaming\Kx97itrjqTo6nns
2012-01-09 03:10:05 -------- d-----w- C:\Users\maria\AppData\Local\ElevatedDiagnostics
2012-01-09 03:09:55 -------- d-----w- C:\Users\maria\AppData\Roaming\udgacCpOXGAeLUc
2012-01-09 03:09:48 -------- d-----w- C:\Users\maria\AppData\Roaming\qQx2leixXsP7pNw
2012-01-09 03:09:43 -------- d-----w- C:\Users\maria\AppData\Roaming\hxiOeixXsP7p
2012-01-09 03:08:57 -------- d-----w- C:\Users\maria\AppData\Roaming\FwcXfmnlgXJJaTv
2012-01-09 03:07:21 -------- d-----w- C:\Users\maria\AppData\Roaming\DCx5cCcbVTkr18o
2012-01-09 03:07:15 -------- d-----w- C:\Users\maria\AppData\Roaming\vCx5cCcbVTkr18o
2012-01-09 03:07:12 -------- d-----w- C:\Users\maria\AppData\Roaming\eCx5cCcbVTkr18o
2012-01-09 03:06:58 -------- d-----w- C:\Users\maria\AppData\Roaming\WYwCx5cCcbVTkr1
2012-01-09 03:06:57 -------- d-----w- C:\Users\maria\AppData\Roaming\R39syHWuvu1
2012-01-09 03:06:57 -------- d-----w- C:\Users\maria\AppData\Roaming\L39syHWuvu1
2012-01-09 03:06:53 -------- d-----w- C:\Users\maria\AppData\Roaming\djlVOrSdGr3aNVy
2012-01-09 03:06:51 -------- d-----w- C:\Users\maria\AppData\Roaming\UjlVOrSdGr3aNV
2012-01-09 03:06:51 -------- d-----w- C:\Users\maria\AppData\Roaming\CjlVOrSdGr3aNV
2012-01-09 03:06:13 -------- d-----w- C:\Users\maria\AppData\Roaming\JesNmam5PG4uPqb
2012-01-09 03:06:05 -------- d-----w- C:\Users\maria\AppData\Roaming\eTR4aFOdOrYjsZ
2012-01-09 03:06:01 -------- d-----w- C:\Users\maria\AppData\Roaming\wqTK8KnpvwGCUg9
2012-01-09 03:05:45 -------- d-----w- C:\Users\maria\AppData\Roaming\Pwn5PixlBUQBGmF
2012-01-09 03:05:45 -------- d-----w- C:\Users\maria\AppData\Roaming\nixlBUQBGmFn
2012-01-09 03:05:29 -------- d-----w- C:\Users\maria\AppData\Roaming\c2ElJesnpbRP
2012-01-09 03:05:28 -------- d-----w- C:\Users\maria\AppData\Roaming\pNlCqsW5u
2012-01-09 03:05:11 -------- d-----w- C:\Users\maria\AppData\Roaming\aRw3Pkh7EoRZkmp
2012-01-09 03:05:06 -------- d-----w- C:\Users\maria\AppData\Roaming\sJXUVh7JFbnYloQ
2012-01-09 03:05:06 -------- d-----w- C:\Users\maria\AppData\Roaming\qJXUVh7JFbnYloQ
2012-01-09 03:03:59 -------- d-----w- C:\Users\maria\AppData\Roaming\S5NLpIHNLydcg
2012-01-09 03:02:56 -------- d-----w- C:\Users\maria\AppData\Roaming\CwmPEpLP3qNftg
2012-01-09 03:02:55 -------- d-----w- C:\Users\maria\AppData\Roaming\EEuImyHU0mX5C5z
2012-01-09 03:02:52 -------- d-----w- C:\Users\maria\AppData\Roaming\B0CfyXcdUuQU6
2012-01-09 03:02:47 -------- d-----w- C:\Users\maria\AppData\Roaming\vdJCbGQ8Ce5cRaZ
2012-01-09 03:02:47 -------- d-----w- C:\Users\maria\AppData\Roaming\EbGQ8Ce5cRaZAHw
2012-01-09 03:02:46 -------- d-----w- C:\Users\maria\AppData\Roaming\SdJCbGQ8Ce5cRaZ
2012-01-09 03:02:09 -------- d-----w- C:\Users\maria\AppData\Roaming\kEWcs2tIYjCerl
2012-01-09 03:02:06 -------- d-----w- C:\Users\maria\AppData\Roaming\RRclKHXHFbucDFn
2012-01-09 03:02:06 -------- d-----w- C:\Users\maria\AppData\Roaming\gRclKHXHFbucDFn
2012-01-09 03:01:52 -------- d-----w- C:\Users\maria\AppData\Roaming\L6O5YniiXDzL7l7
2012-01-09 03:01:40 -------- d-----w- C:\Users\maria\AppData\Roaming\JvswGiPIaj4khhm
2012-01-09 03:01:33 -------- d-----w- C:\Users\maria\AppData\Roaming\v2Rtsyaqbulj19D
2012-01-09 03:01:27 -------- d-----w- C:\Users\maria\AppData\Roaming\egvRPGYSKimXQoN
2012-01-09 03:01:26 -------- d-----w- C:\Users\maria\AppData\Roaming\GXudvswGiP
2012-01-09 03:01:23 -------- d-----w- C:\Users\maria\AppData\Roaming\p08OaeGC1KU4ziE
2012-01-09 03:01:12 -------- d-----w- C:\Users\maria\AppData\Roaming\k306VmTSqA7OKO4
2012-01-09 03:01:07 -------- d-----w- C:\Users\maria\AppData\Roaming\SbqAdx5evI
2012-01-09 03:01:07 -------- d-----w- C:\Users\maria\AppData\Roaming\F06VmTSqA7OK
2012-01-09 03:01:05 -------- d-----w- C:\Users\maria\AppData\Roaming\NgP306VmTSqA7O
2012-01-09 02:59:49 -------- d-----w- C:\Users\maria\AppData\Roaming\m2gJrnj2ftdqNWD
2012-01-09 02:59:45 -------- d-----w- C:\Users\maria\AppData\Roaming\ScExJk2jt3
2012-01-09 02:59:41 -------- d-----w- C:\Users\maria\AppData\Roaming\TgA5VpXAL
2012-01-09 02:59:31 -------- d-----w- C:\Users\maria\AppData\Roaming\ExlYdGjenvKlG
2012-01-09 02:59:29 -------- d-----w- C:\Users\maria\AppData\Roaming\xgfrUXWpZU3A6U
2012-01-09 02:59:29 -------- d-----w- C:\Users\maria\AppData\Roaming\slYdGjenvKl
2012-01-09 02:59:26 -------- d-----w- C:\Users\maria\AppData\Roaming\s3bIeDvxVhtvg7X
2012-01-09 02:59:24 -------- d-----w- C:\Users\maria\AppData\Roaming\y9xlYdGjenv
2012-01-09 02:59:09 -------- d-----w- C:\Users\maria\AppData\Roaming\KJHs2xBgdV
2012-01-09 02:59:08 -------- d-----w- C:\Users\maria\AppData\Roaming\S0zqqeUj6obxx
2012-01-09 02:58:51 -------- d-----w- C:\Users\maria\AppData\Roaming\RYlwYjPxBrqE6mG
2012-01-09 02:58:49 -------- d-----w- C:\Users\maria\AppData\Roaming\kBYlwYjPxtrqE6m
2012-01-09 02:58:41 -------- d-----w- C:\Users\maria\AppData\Roaming\IBYlwYjPx
2012-01-09 02:58:25 -------- d-----w- C:\Users\maria\AppData\Roaming\jy1PNzrTprgDacr
2012-01-09 02:58:17 -------- d-----w- C:\Users\maria\AppData\Roaming\YPNzrTprgD
2012-01-09 02:58:16 -------- d-----w- C:\Users\maria\AppData\Roaming\lgeE2a4Fb1tgpzL
2012-01-09 02:58:12 -------- d-----w- C:\Users\maria\AppData\Roaming\yw9FpSXIkXhf6Aw
2012-01-09 02:57:58 -------- d-----w- C:\Users\maria\AppData\Roaming\Na7fkSpV5X9sHa1
2012-01-09 02:57:52 -------- d-----w- C:\Users\maria\AppData\Roaming\KOJwS3QKCyFea9E
2012-01-09 02:57:46 -------- d-----w- C:\Users\maria\AppData\Roaming\ha7fkSpV5
2012-01-09 02:57:44 -------- d-----w- C:\Users\maria\AppData\Roaming\KcfiFOJwS3QKCyF
2012-01-09 02:57:43 -------- d-----w- C:\Users\maria\AppData\Roaming\QQYAJqnj4g2TB3s
2012-01-09 02:57:43 -------- d-----w- C:\Users\maria\AppData\Roaming\jNyx9ZokiWLkzbW
2012-01-09 02:57:41 -------- d-----w- C:\Users\maria\AppData\Roaming\AFOJwS3QK
2012-01-09 02:57:37 -------- d-----w- C:\Users\maria\AppData\Roaming\LAQYAJqnj4g2TB
2012-01-09 02:57:24 -------- d-----w- C:\Users\maria\AppData\Roaming\WsKNKrmKOuU9
2012-01-09 02:56:32 -------- d-----w- C:\Users\maria\AppData\Roaming\u6SOU8a1l
2012-01-09 02:56:17 -------- d-----w- C:\Users\maria\AppData\Roaming\zEalW30BXWbyzTW
2012-01-09 02:56:15 -------- d-----w- C:\Users\maria\AppData\Roaming\NK8EalW30BX
2012-01-09 02:56:13 -------- d-----w- C:\Users\maria\AppData\Roaming\gK8EalW30BX
2012-01-09 02:55:51 -------- d-----w- C:\Users\maria\AppData\Roaming\Z1nWPXbgtq2f072
2012-01-09 02:55:19 -------- d-----w- C:\Users\maria\AppData\Roaming\Pga3xYQvlfGDxBe
2012-01-09 02:55:13 -------- d-----w- C:\Users\maria\AppData\Roaming\NtjmDVK2ed2Cf6
2012-01-09 02:55:12 -------- d-----w- C:\Users\maria\AppData\Roaming\l5NLDtCJAUJAXQc
2012-01-09 02:55:08 -------- d-----w- C:\Users\maria\AppData\Roaming\qeRFrf2CW
2012-01-09 02:55:08 -------- d-----w- C:\Users\maria\AppData\Roaming\jctrqJDId2kd0
2012-01-09 02:55:07 -------- d-----w- C:\Users\maria\AppData\Roaming\A4GpStkYEacw5N9
2012-01-09 02:55:06 -------- d-----w- C:\Users\maria\AppData\Roaming\kDa4GpStkYEacw5
2012-01-09 02:54:56 -------- d-----w- C:\Users\maria\AppData\Roaming\hkjhKHsa5KKf
2012-01-09 02:54:40 -------- d-----w- C:\Users\maria\AppData\Roaming\eTWnSOUfapi0xt
2012-01-09 02:50:39 -------- d-----w- C:\Users\maria\AppData\Roaming\BG4aQH6sW7E9TqY
2012-01-09 02:50:31 -------- d-----w- C:\Users\maria\AppData\Roaming\eEL8gRZqhXkVlBz
2012-01-09 02:50:23 -------- d-----w- C:\Users\maria\AppData\Roaming\llIBrzPNyAuSoFp
2012-01-09 02:50:14 -------- d-----w- C:\Users\maria\AppData\Roaming\Ib36fTXjYeIrOtA
2012-01-09 02:50:01 -------- d-----w- C:\Users\maria\AppData\Roaming\bi3nmHJf8qkrBc1
2012-01-09 02:49:47 -------- d-----w- C:\Users\maria\AppData\Roaming\qgRZYB0ciDoFaHs
2012-01-09 02:49:38 -------- d-----w- C:\Users\maria\AppData\Roaming\nVelOBtzPyAiDoF
2012-01-09 02:49:18 -------- d-----w- C:\Users\maria\AppData\Roaming\D13678ZCVBSFdql
2012-01-09 02:49:17 -------- d-----w- C:\Users\maria\AppData\Roaming\m7Tkxb4W9Yktu13
2012-01-09 02:49:17 -------- d-----w- C:\Users\maria\AppData\Roaming\frn7Tkxb4W9Yk
2012-01-09 02:49:13 -------- d-----w- C:\Users\maria\AppData\Roaming\JJj0Qju6jcfOmYi
2012-01-09 02:49:13 -------- d-----w- C:\Users\maria\AppData\Roaming\DdCSde2Wwi80sk2
2012-01-09 02:49:11 -------- d-----w- C:\Users\maria\AppData\Roaming\CmXvKtpTA5TxGT
2012-01-09 02:49:09 -------- d-----w- C:\Users\maria\AppData\Roaming\O9NHeDLl4wiEtmX
2012-01-09 02:49:00 -------- d-----w- C:\Users\maria\AppData\Roaming\dTcEcEyLyKyE
2012-01-09 02:46:38 -------- d-----w- C:\Users\maria\AppData\Roaming\AsJ9kBPlwqTj8E7
2012-01-09 02:46:24 -------- d-----w- C:\Users\maria\AppData\Roaming\fUeBeeCYOzBey2D
2012-01-09 02:46:20 -------- d-----w- C:\Users\maria\AppData\Roaming\nBeeCYOBe
2012-01-09 02:46:12 -------- d-----w- C:\Users\maria\AppData\Roaming\Bm9tGRB3j1dloK7
2012-01-09 02:46:10 -------- d-----w- C:\Users\maria\AppData\Roaming\FB49A6ln9
2012-01-09 02:44:56 -------- d-----w- C:\Users\maria\AppData\Roaming\L96itCqgK5FbDcP
2012-01-09 02:39:34 -------- d-----w- C:\Users\maria\AppData\Roaming\rmprS1JgWtmTVyn
2012-01-09 02:39:34 -------- d-----w- C:\Users\maria\AppData\Roaming\AtGfR4ZYvp2kbfC
2012-01-09 02:39:33 -------- d-----w- C:\Users\maria\AppData\Roaming\WytWnhBz9rBGW4r
2012-01-09 02:39:30 -------- d-----w- C:\Users\maria\AppData\Roaming\jAtNFvEakEO3Sk0
2012-01-09 02:39:25 -------- d-----w- C:\Users\maria\AppData\Roaming\qycssxtGf
2012-01-09 02:38:48 -------- d-----w- C:\Users\maria\AppData\Roaming\EUC0uvS2iFpGaHd
2012-01-09 02:38:46 -------- d-----w- C:\Users\maria\AppData\Roaming\TNYyOHZP0c1v2n4
2012-01-09 02:38:40 -------- d-----w- C:\Users\maria\AppData\Roaming\rrNtxP0uc1b3n4m
2012-01-09 02:38:40 -------- d-----w- C:\Users\maria\AppData\Roaming\FrNtxP0uc1b3n4m
2012-01-09 02:38:37 -------- d-----w- C:\Users\maria\AppData\Roaming\jERX2kRIBzNc1v2
2012-01-09 02:37:42 -------- d-----w- C:\Users\maria\AppData\Roaming\WpihFGWgUrOtPyS
2012-01-09 02:37:42 -------- d-----w- C:\Users\maria\AppData\Roaming\AwmQfEUVrOtPySi
2012-01-09 02:37:26 -------- d-----w- C:\Users\maria\AppData\Roaming\rNbF3pnG5Q6W
2012-01-09 02:36:44 -------- d-----w- C:\Users\maria\AppData\Roaming\OD7X2IPhU33QDve
2012-01-09 02:36:38 -------- d-----w- C:\Users\maria\AppData\Roaming\spEqAAxlZcdFw7n
2012-01-09 02:36:34 -------- d-----w- C:\Users\maria\AppData\Roaming\KT4kSpRd7nOdj9i
2012-01-09 02:36:34 -------- d-----w- C:\Users\maria\AppData\Roaming\ET4kSpRd7nOdj9i
2012-01-09 02:35:50 -------- d-----w- C:\Users\maria\AppData\Roaming\v75tl8ZjhQeHwKh
2012-01-09 02:35:50 -------- d-----w- C:\Users\maria\AppData\Roaming\e75tl8ZjhQeHwKh
2012-01-09 02:34:51 -------- d-----w- C:\Users\maria\AppData\Roaming\OUXEj1PAPxazVq7
2012-01-09 02:34:21 -------- d-----w- C:\Users\maria\AppData\Roaming\Y1UL4B9LwxKvyOc
2012-01-09 02:34:13 -------- d-----w- C:\Users\maria\AppData\Roaming\sbk5Deg4B9LwxK
2012-01-09 02:34:11 -------- d-----w- C:\Users\maria\AppData\Roaming\rGOEvY41UL4B9Lw
2012-01-09 02:34:09 -------- d-----w- C:\Users\maria\AppData\Roaming\QemzRbk5DkqHzXT
2012-01-09 02:34:09 -------- d-----w- C:\Users\maria\AppData\Roaming\F3VJ0ZDzhsDX5Gs
2012-01-09 02:34:08 -------- d-----w- C:\Users\maria\AppData\Roaming\TemzRbk5DkqHzXT
2012-01-09 02:34:08 -------- d-----w- C:\Users\maria\AppData\Roaming\aemzRbk5DkqHzXT
2012-01-09 02:34:07 -------- d-----w- C:\Users\maria\AppData\Roaming\c3ksc93UEmuUsxk
.
==================== Find3M ====================
.
2011-11-15 19:29:56 270720 ------w- C:\Windows\System32\MpSigStub.exe
2011-11-05 05:26:29 1197568 ----a-w- C:\Windows\System32\wininet.dll
2011-11-05 05:23:10 57856 ----a-w- C:\Windows\System32\licmgr10.dll
2011-11-05 04:35:50 981504 ----a-w- C:\Windows\SysWow64\wininet.dll
2011-11-05 04:34:15 44544 ----a-w- C:\Windows\SysWow64\licmgr10.dll
2011-11-05 04:07:32 482816 ----a-w- C:\Windows\System32\html.iec
2011-11-05 03:28:41 386048 ----a-w- C:\Windows\SysWow64\html.iec
2011-11-05 03:25:44 1638912 ----a-w- C:\Windows\System32\mshtml.tlb
2011-11-05 02:55:38 1638912 ----a-w- C:\Windows\SysWow64\mshtml.tlb
.
============= FINISH: 21:16:03.88 ===============

Edited by sawz, 16 January 2012 - 09:19 PM.


#7 sawz

sawz
  • Topic Starter

  • Members
  • 138 posts
  • OFFLINE
  •  
  • Local time:05:18 PM

Posted 16 January 2012 - 09:21 PM

Here is the second part of the dds.

.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2011-06-23.01)
.
Microsoft Windows 7 Home Premium
Boot Device: \Device\HarddiskVolume1
Install Date: 1/22/2011 2:20:34 AM
System Uptime: 1/16/2012 9:06:31 PM (0 hours ago)
.
Motherboard: Hewlett-Packard | | 363F
Processor: AMD Sempron™ M120 | Socket S1G3 | 2100/200mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 284 GiB total, 244.184 GiB free.
D: is FIXED (NTFS) - 14 GiB total, 2.235 GiB free.
E: is FIXED (FAT32) - 0 GiB total, 0.091 GiB free.
F: is CDROM ()
.
==== Disabled Device Manager Items =============
.
Class GUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Description: BHDrvx64
Device ID: ROOT\LEGACY_BHDRVX64\0000
Manufacturer:
Name: BHDrvx64
PNP Device ID: ROOT\LEGACY_BHDRVX64\0000
Service: BHDrvx64
.
Class GUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Description: Windows Firewall Authorization Driver
Device ID: ROOT\LEGACY_MPSDRV\0000
Manufacturer:
Name: Windows Firewall Authorization Driver
PNP Device ID: ROOT\LEGACY_MPSDRV\0000
Service: mpsdrv
.
Class GUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Description: Symantec Iron Driver
Device ID: ROOT\LEGACY_SYMIRON\0000
Manufacturer:
Name: Symantec Iron Driver
PNP Device ID: ROOT\LEGACY_SYMIRON\0000
Service: SymIRON
.
==== System Restore Points ===================
.
RP46: 1/9/2012 2:57:10 AM - Windows 7 Service Pack 1
RP47: 1/10/2012 7:23:14 PM - Windows Update
RP49: 1/10/2012 7:42:17 PM - Windows Defender Checkpoint
RP50: 1/11/2012 8:19:12 AM - Windows Update
RP51: 1/12/2012 5:50:13 PM - Windows Update
RP53: 1/12/2012 6:02:38 PM - Windows Defender Checkpoint
RP54: 1/14/2012 8:36:07 PM - Windows Update
RP56: 1/16/2012 6:24:06 PM - Windows Defender Checkpoint
.
==== Installed Programs ======================
.
Acrobat.com
ActiveCheck component for HP Active Support Library
Adobe AIR
Adobe Flash Player 10 ActiveX
Adobe Reader 9.1 MUI
Adobe Shockwave Player
AMD USB Filter Driver
Apple Application Support
Apple Software Update
Atheros Driver Installation Program
Catalyst Control Center - Branding
Catalyst Control Center Core Implementation
Catalyst Control Center Graphics Full Existing
Catalyst Control Center Graphics Full New
Catalyst Control Center Graphics Light
Catalyst Control Center Graphics Previews Common
Catalyst Control Center Graphics Previews Vista
Catalyst Control Center InstallProxy
Catalyst Control Center Localization All
ccc-core-static
CCC Help Chinese Standard
CCC Help Chinese Traditional
CCC Help Czech
CCC Help Danish
CCC Help Dutch
CCC Help English
CCC Help Finnish
CCC Help French
CCC Help German
CCC Help Greek
CCC Help Hungarian
CCC Help Italian
CCC Help Japanese
CCC Help Korean
CCC Help Norwegian
CCC Help Polish
CCC Help Portuguese
CCC Help Russian
CCC Help Spanish
CCC Help Swedish
CCC Help Thai
CCC Help Turkish
Compatibility Pack for the 2007 Office system
CyberLink DVD Suite
CyberLink MediaShow
CyberLink PowerDVD 8
ESET Online Scanner v3
Google Chrome
Google Update Helper
HP Advisor
HP Customer Experience Enhancements
HP Games
HP Quick Launch Buttons
HP Setup
HP Smart Web Printing
HP Support Assistant
HP Update
HP User Guides 0148
HP Wireless Assistant
HPAsset component for HP Active Support Library
IDT Audio
Java™ 6 Update 15
Junk Mail filter update
LabelPrint
LightScribe System Software
Malwarebytes Anti-Malware version 1.60.0.1800
Microsoft Choice Guard
Microsoft Live Search Toolbar
Microsoft Office Excel MUI (English) 2007
Microsoft Office Home and Student 2007
Microsoft Office OneNote MUI (English) 2007
Microsoft Office PowerPoint MUI (English) 2007
Microsoft Office PowerPoint Viewer 2007 (English)
Microsoft Office Proof (English) 2007
Microsoft Office Proof (French) 2007
Microsoft Office Proof (Spanish) 2007
Microsoft Office Proofing (English) 2007
Microsoft Office Shared MUI (English) 2007
Microsoft Office Shared Setup Metadata MUI (English) 2007
Microsoft Office Suite Activation Assistant
Microsoft Office Word MUI (English) 2007
Microsoft Silverlight
Microsoft SQL Server 2005 Compact Edition [ENU]
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft Works
MSVCRT
muvee Reveal
Norton Internet Security
Photo Viewer 2.3
Power2Go
PowerDirector
QLBCASL
QuickTime
Realtek 8136 8168 8169 Ethernet Driver
Realtek USB 2.0 Card Reader
Recovery Manager
Security Update for Microsoft .NET Framework 4 Client Profile (KB2160841)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)
Slingbox - Watch Your TV Anywhere
SlingPlayer
Update for Microsoft .NET Framework 4 Client Profile (KB2468871)
Update for Microsoft .NET Framework 4 Client Profile (KB2473228)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523)
Update for Microsoft Office Word 2007 (KB974631)
Update for Office 2007 (KB934528)
Update Installer for WildTangent Games App
Veetle TV 0.9.18
Visual Studio 2008 x64 Redistributables
WildTangent Games App (HP Games)
Windows Live Call
Windows Live Communications Platform
Windows Live Essentials
Windows Live Mail
Windows Live Messenger
Windows Live Movie Maker
Windows Live Photo Gallery
Windows Live Sign-in Assistant
Windows Live Sync
Windows Live Upload Tool
Windows Live Writer
.
==== Event Viewer Messages From Past Week ========
.
1/9/2012 9:52:21 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service MSIServer with arguments "" in order to run the server: {000C101C-0000-0000-C000-000000000046}
1/9/2012 7:57:29 PM, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: Avgldx64 Avgmfx64 BHDrvx64 ccHP discache eeCtrl IDSVia64 SASDIFSV SASKUTIL spldr SRTSPX SymIRON SYMTDIv Wanarpv6
1/9/2012 4:03:12 AM, Error: Microsoft-Windows-WindowsUpdateClient [20] - Installation Failure: Windows failed to install the following update with error 0x800706be: Security Update for Windows 7 for x64-based Systems (KB2620704).
1/9/2012 4:03:12 AM, Error: Microsoft-Windows-WindowsUpdateClient [20] - Installation Failure: Windows failed to install the following update with error 0x800706ba: Security Update for Microsoft .NET Framework 3.5.1 on Windows 7 and Windows Server 2008 R2 for x64-based Systems (KB2572076).
1/9/2012 4:03:07 AM, Error: Microsoft-Windows-WindowsUpdateClient [20] - Installation Failure: Windows failed to install the following update with error 0x80070643: Windows Internet Explorer 9 for Windows 7 for x64-based Systems.
1/9/2012 3:17:23 AM, Error: Microsoft-Windows-WindowsUpdateClient [20] - Installation Failure: Windows failed to install the following update with error 0x8024200d: Update for Windows 7 for x64-based Systems (KB2603229).
1/9/2012 12:44:00 AM, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the HP Health Check Service service to connect.
1/9/2012 12:44:00 AM, Error: Service Control Manager [7000] - The HP Health Check Service service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
1/9/2012 1:26:23 AM, Error: Server [2505] - The server could not bind to the transport \Device\NetBT_Tcpip_{32B83D7D-905E-4AD5-8CFD-0A5D04457B34} because another computer on the network has the same name. The server could not start.
1/9/2012 1:19:26 AM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the MMCSS service.
1/9/2012 1:19:26 AM, Error: Service Control Manager [7000] - The Multimedia Class Scheduler service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
1/9/2012 1:14:52 AM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the wuauserv service.
1/9/2012 1:14:52 AM, Error: Service Control Manager [7000] - The Windows Update service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
1/9/2012 1:13:19 AM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the ShellHWDetection service.
1/9/2012 1:11:50 AM, Error: Service Control Manager [7022] - The Windows Defender service hung on starting.
1/9/2012 1:09:28 AM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the wbengine service.
1/16/2012 9:07:14 PM, Error: Microsoft-Windows-DNS-Client [1012] - There was an error while attempting to read the local hosts file.
1/16/2012 9:07:04 PM, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: BHDrvx64 SymIRON
1/16/2012 9:07:00 PM, Error: Service Control Manager [7001] - The Windows Firewall service depends on the Windows Firewall Authorization Driver service which failed to start because of the following error: Cannot create a file when that file already exists.
1/16/2012 9:07:00 PM, Error: Service Control Manager [7000] - The Windows Firewall Authorization Driver service failed to start due to the following error: Cannot create a file when that file already exists.
1/16/2012 9:06:54 PM, Error: atikmdag [52236] - CPLIB :: General - Invalid Parameter
1/11/2012 11:09:59 PM, Error: Microsoft-Windows-WER-SystemErrorReporting [1001] - The computer has rebooted from a bugcheck. The bugcheck was: 0x0000009f (0x0000000000000003, 0xfffffa8004529e20, 0xfffff80004cb4748, 0xfffffa8004c8a010). A dump was saved in: C:\Windows\MEMORY.DMP. Report Id: 011112-56721-01.
1/10/2012 9:34:54 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server: {9E175B6D-F52A-11D8-B9A5-505054503030}
1/10/2012 9:34:54 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server: {7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}
1/10/2012 9:34:51 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service EventSystem with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}
1/10/2012 9:34:43 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service ShellHWDetection with arguments "" in order to run the server: {DD522ACC-F821-461A-A407-50B198B896DC}
1/10/2012 9:20:41 AM, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: Avgldx64 Avgmfx64 BHDrvx64 ccHP discache eeCtrl IDSVia64 spldr SRTSPX SymIRON SYMTDIv Wanarpv6
1/10/2012 8:34:50 AM, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: AFD Avgldx64 Avgmfx64 Avgtdia BHDrvx64 ccHP DfsC discache eeCtrl IDSVia64 NetBIOS NetBT nsiproxy Psched rdbss spldr SRTSPX SymIRON SYMTDIv tdx vwififlt Wanarpv6 WfpLwf
1/10/2012 8:34:50 AM, Error: Service Control Manager [7001] - The Workstation service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start.
1/10/2012 8:34:50 AM, Error: Service Control Manager [7001] - The TCP/IP NetBIOS Helper service depends on the Ancillary Function Driver for Winsock service which failed to start because of the following error: A device attached to the system is not functioning.
1/10/2012 8:34:50 AM, Error: Service Control Manager [7001] - The SMB MiniRedirector Wrapper and Engine service depends on the Redirected Buffering Sub Sysytem service which failed to start because of the following error: A device attached to the system is not functioning.
1/10/2012 8:34:50 AM, Error: Service Control Manager [7001] - The SMB 2.0 MiniRedirector service depends on the SMB MiniRedirector Wrapper and Engine service which failed to start because of the following error: The dependency service or group failed to start.
1/10/2012 8:34:50 AM, Error: Service Control Manager [7001] - The SMB 1.x MiniRedirector service depends on the SMB MiniRedirector Wrapper and Engine service which failed to start because of the following error: The dependency service or group failed to start.
1/10/2012 8:34:50 AM, Error: Service Control Manager [7001] - The Network Store Interface Service service depends on the NSI proxy service driver. service which failed to start because of the following error: A device attached to the system is not functioning.
1/10/2012 8:34:50 AM, Error: Service Control Manager [7001] - The Network Location Awareness service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start.
1/10/2012 8:34:50 AM, Error: Service Control Manager [7001] - The IP Helper service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start.
1/10/2012 8:34:50 AM, Error: Service Control Manager [7001] - The DNS Client service depends on the NetIO Legacy TDI Support Driver service which failed to start because of the following error: A device attached to the system is not functioning.
1/10/2012 8:34:50 AM, Error: Service Control Manager [7001] - The DHCP Client service depends on the Ancillary Function Driver for Winsock service which failed to start because of the following error: A device attached to the system is not functioning.
1/10/2012 8:28:53 AM, Error: Service Control Manager [7001] - The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The dependency service or group failed to start.
1/10/2012 8:28:07 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1068" attempting to start the service netprofm with arguments "" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89}
1/10/2012 8:28:07 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1068" attempting to start the service netman with arguments "" in order to run the server: {BA126AD1-2166-11D1-B1D0-00805FC1270E}
1/10/2012 7:15:39 PM, Error: Microsoft-Windows-WindowsUpdateClient [20] - Installation Failure: Windows failed to install the following update with error 0x80070643: Security Update for Windows 7 for x64-based Systems (KB2564958).
1/10/2012 7:15:38 PM, Error: Microsoft-Windows-WindowsUpdateClient [20] - Installation Failure: Windows failed to install the following update with error 0x80070643: Update for Windows 7 for x64-based Systems (KB2641690).
1/10/2012 7:15:38 PM, Error: Microsoft-Windows-WindowsUpdateClient [20] - Installation Failure: Windows failed to install the following update with error 0x80070643: Update for Internet Explorer 8 Compatibility View List for Windows 7 for x64-based Systems (KB2598845).
1/10/2012 7:15:38 PM, Error: Microsoft-Windows-WindowsUpdateClient [20] - Installation Failure: Windows failed to install the following update with error 0x80070643: Security Update for Windows 7 for x64-based Systems (KB2639417).
1/10/2012 7:15:38 PM, Error: Microsoft-Windows-WindowsUpdateClient [20] - Installation Failure: Windows failed to install the following update with error 0x80070643: Security Update for Windows 7 for x64-based Systems (KB2579686).
1/10/2012 7:15:38 PM, Error: Microsoft-Windows-WindowsUpdateClient [20] - Installation Failure: Windows failed to install the following update with error 0x80070643: Cumulative Security Update for Internet Explorer 8 for Windows 7 for x64-based Systems (KB2618444).
1/10/2012 5:40:19 PM, Error: Microsoft-Windows-WindowsUpdateClient [20] - Installation Failure: Windows failed to install the following update with error 0x80242016: Cumulative Security Update for ActiveX Killbits for Windows 7 for x64-based Systems (KB2618451).
1/10/2012 5:40:19 PM, Error: Microsoft-Windows-WindowsUpdateClient [20] - Installation Failure: Windows failed to install the following update with error 0x800f0816: Windows 7 Service Pack 1 for x64-based Systems (KB976932).
1/10/2012 5:40:19 PM, Error: Microsoft-Windows-WindowsUpdateClient [20] - Installation Failure: Windows failed to install the following update with error 0x800f0816: Security Update for Windows 7 for x64-based Systems (KB2620712).
1/10/2012 5:40:19 PM, Error: Microsoft-Windows-WindowsUpdateClient [20] - Installation Failure: Windows failed to install the following update with error 0x800f0816: Security Update for Windows 7 for x64-based Systems (KB2588516).
1/10/2012 5:24:29 PM, Error: Service Control Manager [7001] - The Task Scheduler service depends on the Windows Event Log service which failed to start because of the following error: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.
1/10/2012 5:06:53 PM, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: BHDrvx64 ccHP discache eeCtrl IDSVia64 spldr SRTSPX SymIRON SYMTDIv Wanarpv6
.
==== End Of File ===========================

#8 sawz

sawz
  • Topic Starter

  • Members
  • 138 posts
  • OFFLINE
  •  
  • Local time:05:18 PM

Posted 17 January 2012 - 09:00 AM

I do not have the original windows CD, this machine belongs to a family member and they did not know if they ever received one during purchase or not, Thanks Sawz...

#9 gringo_pr

gringo_pr

    Bleepin Gringo


  • Malware Response Team
  • 136,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto rico
  • Local time:06:18 PM

Posted 19 January 2012 - 02:13 AM

Hello and Welcome to the forums!

My name is Gringo and I'll be glad to help you with your computer problems.

Somethings to remember while we are working together.

  • Do not run any other tool untill instructed to do so!
  • please Do not Attach logs or put in code boxes.
  • Tell me about any problems that have occurred during the fix.
  • Tell me of any other symptoms you may be having as these can help also.
  • Do not run anything while running a fix.
  • Do not run any other tool untill instructed to do so!


Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.

Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.

Run Combofix:

You may be asked to install or update the Recovery Console (Win XP Only) if this happens please allow it to do so (you will need to be connected to the internet for this)

Before you run Combofix I will need you to turn off any security software you have running, If you do not know how to do this you can find out >here< or >here<

Combofix may need to reboot your computer more than once to do its job this is normal.

You can download Combofix from one of these links.
Link 1
Link 2
Link 3
1. Close any open browsers or any other programs that are open.
2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

Double click on combofix.exe & follow the prompts.
When finished, it will produce a report for you.

Note 1: Do not mouseclick combofix's window while it's running. That may cause it to stall

Note 2: If you recieve an error "Illegal operation attempted on a registery key that has been marked for deletion." Please restart the computer

"information and logs"

  • In your next post I need the following
  • Log from Combofix
  • let me know of any problems you may have had
  • How is the computer doing now?

Gringo
I Close My Topics If You Have Not Replied In 5 Days If You Will Be Longer Please Let Me Know

If I Have Not Replied To One Of My Topics In 48 Hrs Please Bump The Topic



My help is free, however, if you wish to make a small donation to show your appreciation or to help me continue the fight against Malware, then click here -->btn_donate_SM.gif<-- Don't worry every little bit helps.

Proud Graduate Of Malware Removal University

#10 sawz

sawz
  • Topic Starter

  • Members
  • 138 posts
  • OFFLINE
  •  
  • Local time:05:18 PM

Posted 19 January 2012 - 08:43 PM

Hi Gringo, I started the infected machine up and tried to run the combofix after about 2 hours and up to stage number 48 on the list the computer shut it self off, I will try again one more time tonite, sawz.

*edit The machine stayed on just the screen went blank/dark and I could not get it to come back on until I unplugged the power cord and took out the battery then re installed the battery it came back on but I am having trouble getting the start up screen to come up right now I only get to the welcome screen and she freezes up but is running like crazy inside , I can get on line in safe mode though, sawz.

Edited by sawz, 19 January 2012 - 08:58 PM.


#11 gringo_pr

gringo_pr

    Bleepin Gringo


  • Malware Response Team
  • 136,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto rico
  • Local time:06:18 PM

Posted 19 January 2012 - 08:55 PM

Hello

Lets get a deeper look into the system and see if something shows up.

Download and run OTL

Download OTL by Old Timer and save it to your Desktop.
  • Double click on OTL.exe to run it.
  • Under Output, ensure that Minimal Output is selected.
  • Under Extra Registry section, select Use SafeList.
  • Click the Scan All Users checkbox.
  • Click on Run Scan at the top left hand corner.
  • When done, two Notepad files will open.
    • OTL.txt <-- Will be opened and the that I need posted back here
    • Extra.txt <-- Will be minimized - save this one on your desktop in case I ask for it later
  • Please post the contents of OTL.txt in your next reply.

Gringo
I Close My Topics If You Have Not Replied In 5 Days If You Will Be Longer Please Let Me Know

If I Have Not Replied To One Of My Topics In 48 Hrs Please Bump The Topic



My help is free, however, if you wish to make a small donation to show your appreciation or to help me continue the fight against Malware, then click here -->btn_donate_SM.gif<-- Don't worry every little bit helps.

Proud Graduate Of Malware Removal University

#12 sawz

sawz
  • Topic Starter

  • Members
  • 138 posts
  • OFFLINE
  •  
  • Local time:05:18 PM

Posted 19 January 2012 - 09:41 PM

When I got the machine started up again here was a log from combvo hope it helps,

ComboFix 12-01-19.02 - maria 01/19/2012 20:56:40.2.1 - x64 NETWORK
Microsoft Windows 7 Home Premium 6.1.7600.0.1252.1.1033.18.2812.2154 [GMT -5:00]
Running from: c:\users\maria\Desktop\ComboFix.exe
AV: Norton Internet Security *Disabled/Outdated* {88C95A36-8C3B-2F2C-1B8B-30FCCFDC4855}
FW: Norton Internet Security *Disabled* {B0F2DB13-C654-2E74-30D4-99C9310F0F2E}
SP: Norton Internet Security *Disabled/Updated* {33A8BBD2-AA01-20A2-213B-0B8EB45B02E8}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Created a new restore point
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\Drop Down Deals
c:\program files (x86)\Drop Down Deals\YontooIEClient.dll
c:\programdata\Tarma Installer
c:\programdata\Tarma Installer\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}\_Setup.dll
c:\programdata\Tarma Installer\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}\_Setupx.dll
c:\programdata\Tarma Installer\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}\Setup.dat
c:\programdata\Tarma Installer\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}\Setup.exe
c:\programdata\Tarma Installer\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}\Setup.ico
c:\users\maria\AppData\Roaming\6EE6.9EE
c:\users\maria\AppData\Roaming\DdCSde2Wwi80sk2
c:\users\maria\AppData\Roaming\DdCSde2Wwi80sk2\AV Guard Online.ico
c:\users\maria\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AV Guard Online
c:\users\maria\AppData\Roaming\rRjwVtzzzOt04RI
c:\users\maria\AppData\Roaming\rRjwVtzzzOt04RI\AV Guard Online.ico
c:\users\maria\AppData\Roaming\Z1f07iw6cCEF
c:\users\maria\AppData\Roaming\Z1f07iw6cCEF\AV Guard Online.ico
c:\windows\assembly\tmp\U
c:\windows\assembly\tmp\U\00000001.@
c:\windows\assembly\tmp\U\00000002.@
c:\windows\assembly\tmp\U\00000004.@
c:\windows\assembly\tmp\U\000000c0.@
c:\windows\assembly\tmp\U\000000cb.@
c:\windows\assembly\tmp\U\000000cf.@
c:\windows\assembly\tmp\U\80000000.@
c:\windows\assembly\tmp\U\80000004.@
c:\windows\assembly\tmp\U\80000064.@
c:\windows\assembly\tmp\U\800000c0.@
c:\windows\assembly\tmp\U\800000cb.@
c:\windows\assembly\tmp\U\800000cf.@
c:\windows\system32\consrv.dll
c:\windows\system32\java.exe
c:\windows\System64
.
.
((((((((((((((((((((((((( Files Created from 2011-12-20 to 2012-01-20 )))))))))))))))))))))))))))))))
.
.
2012-01-20 02:04 . 2012-01-20 02:04 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-01-19 23:01 . 2011-11-30 07:21 8822856 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{741AF4DF-87F5-462D-A164-02254D67CA20}\mpengine.dll
2012-01-12 04:20 . 2011-11-19 15:07 77312 ----a-w- c:\windows\system32\packager.dll
2012-01-12 04:20 . 2011-11-19 14:06 67072 ----a-w- c:\windows\SysWow64\packager.dll
2012-01-12 04:19 . 2011-10-26 05:22 1572864 ----a-w- c:\windows\system32\quartz.dll
2012-01-12 04:19 . 2011-10-26 04:28 1328640 ----a-w- c:\windows\SysWow64\quartz.dll
2012-01-12 04:19 . 2011-10-26 05:22 366592 ----a-w- c:\windows\system32\qdvd.dll
2012-01-12 04:19 . 2011-10-26 04:28 514560 ----a-w- c:\windows\SysWow64\qdvd.dll
2012-01-12 04:19 . 2011-11-17 07:14 1739160 ----a-w- c:\windows\system32\ntdll.dll
2012-01-12 04:19 . 2011-11-17 05:41 1292592 ----a-w- c:\windows\SysWow64\ntdll.dll
2012-01-11 00:24 . 2011-10-01 05:28 886784 ----a-w- c:\program files\Common Files\System\wab32.dll
2012-01-11 00:24 . 2011-10-01 04:43 708608 ----a-w- c:\program files (x86)\Common Files\System\wab32.dll
2012-01-11 00:24 . 2011-10-26 05:19 43520 ----a-w- c:\windows\system32\csrsrv.dll
2012-01-11 00:24 . 2011-09-29 16:24 1897328 ----a-w- c:\windows\system32\drivers\tcpip.sys
2012-01-10 03:00 . 2012-01-10 03:00 -------- d-----w- c:\program files (x86)\ESET
2012-01-09 22:54 . 2012-01-09 22:54 -------- d-----w- c:\users\maria\AppData\Roaming\SUPERAntiSpyware.com
2012-01-09 22:54 . 2012-01-10 01:12 -------- d-----w- c:\program files\SUPERAntiSpyware
2012-01-09 22:54 . 2012-01-09 22:54 -------- d-----w- c:\programdata\SUPERAntiSpyware.com
2012-01-09 15:00 . 2012-01-09 15:00 -------- d-----w- c:\users\maria\AppData\Roaming\CBS Interactive
2012-01-09 07:50 . 2012-01-10 01:07 -------- d-----w- c:\windows\system32\EventProviders
2012-01-09 07:50 . 2012-01-10 01:08 -------- d-----w- C:\be84132aec3643f4822a6c3e644f57
2012-01-09 07:17 . 2012-01-09 08:08 -------- d-----w- c:\users\maria\AppData\Roaming\AVG
2012-01-09 07:11 . 2011-11-24 05:00 3141632 ----a-w- c:\windows\system32\win32k.sys
2012-01-09 07:11 . 2011-11-05 05:17 2048 ----a-w- c:\windows\system32\tzres.dll
2012-01-09 07:11 . 2011-11-05 04:30 2048 ----a-w- c:\windows\SysWow64\tzres.dll
2012-01-09 07:09 . 2011-10-15 06:25 723456 ----a-w- c:\windows\system32\EncDec.dll
2012-01-09 07:09 . 2011-10-15 05:48 534528 ----a-w- c:\windows\SysWow64\EncDec.dll
2012-01-09 07:00 . 2012-01-09 07:00 -------- d--h--w- c:\programdata\Common Files
2012-01-09 06:57 . 2012-01-10 14:36 -------- d-----w- c:\program files (x86)\AVG
2012-01-09 06:54 . 2012-01-10 14:23 -------- d-----w- c:\programdata\MFAData
2012-01-09 06:36 . 2012-01-10 01:06 -------- d-----w- c:\users\maria\AppData\Roaming\Malwarebytes
2012-01-09 06:36 . 2012-01-10 01:06 -------- d-----w- c:\programdata\Malwarebytes
2012-01-09 06:36 . 2012-01-10 01:08 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2012-01-09 06:36 . 2011-12-10 20:24 23152 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-01-09 06:24 . 2012-01-09 06:24 -------- d-----w- c:\users\maria\AppData\Roaming\zNt1rilIVY
2012-01-09 06:24 . 2012-01-09 06:24 -------- d-----w- c:\users\maria\AppData\Roaming\VTpXSfXr24sGWpo
2012-01-09 06:24 . 2012-01-09 06:24 -------- d-----w- c:\users\maria\AppData\Roaming\zTpXSfXr24sGWpo
2012-01-09 06:24 . 2012-01-09 06:24 -------- d-----w- c:\users\maria\AppData\Roaming\tTpXSfXr24sGWpo
2012-01-09 06:24 . 2012-01-09 06:24 -------- d-----w- c:\users\maria\AppData\Roaming\sJufAWYISaH6i5
2012-01-09 06:24 . 2012-01-09 06:24 -------- d-----w- c:\users\maria\AppData\Roaming\ZTpXSfXr24sG
2012-01-09 06:24 . 2012-01-09 06:24 -------- d-----w- c:\users\maria\AppData\Roaming\Uw9Q1es0L18
2012-01-09 06:24 . 2012-01-09 06:24 -------- d-----w- c:\users\maria\AppData\Roaming\Cw9Q1es0L18
2012-01-09 06:23 . 2012-01-09 06:23 -------- d-----w- c:\users\maria\AppData\Roaming\pLBbJj1fVvaZIuW
2012-01-09 06:23 . 2012-01-09 06:23 -------- d-----w- c:\users\maria\AppData\Roaming\ffliJj1fVvaZIuW
2012-01-09 06:19 . 2012-01-09 06:49 -------- d-----w- c:\users\maria\AppData\Roaming\wNqCIzxvSi
2012-01-09 06:07 . 2012-01-09 06:49 -------- d-----w- c:\users\maria\AppData\Roaming\IduZcENfPHliKIS
2012-01-09 06:07 . 2012-01-09 06:49 -------- d-----w- c:\users\maria\AppData\Roaming\dOEPJr6NHj39
2012-01-09 06:07 . 2012-01-09 06:49 -------- d-----w- c:\users\maria\AppData\Roaming\B3BYd30YbCHzQxg
2012-01-09 06:07 . 2012-01-09 06:49 -------- d-----w- c:\users\maria\AppData\Roaming\cU6mQaaouB9muIZ
2012-01-09 06:07 . 2012-01-09 06:49 -------- d-----w- c:\users\maria\AppData\Roaming\kzU6mQaaouB9muI
2012-01-09 06:06 . 2012-01-09 06:49 -------- d-----w- c:\users\maria\AppData\Roaming\LFyCLp0VRE5NOPz
2012-01-09 06:06 . 2012-01-09 06:49 -------- d-----w- c:\users\maria\AppData\Roaming\fyj74xI8JptkV
2012-01-09 06:06 . 2012-01-09 06:06 -------- d-----w- c:\users\maria\AppData\Roaming\qKriWlpUpjmzhGt
2012-01-09 06:06 . 2012-01-09 06:49 -------- d-----w- c:\users\maria\AppData\Roaming\zZPGLr4hoTiUJ
2012-01-09 06:06 . 2012-01-09 06:06 -------- d-----w- c:\users\maria\AppData\Roaming\H28jViWjvQZSdNd
2012-01-09 06:06 . 2012-01-09 06:06 -------- d-----w- c:\users\maria\AppData\Roaming\g6kAdgecHYAG90Q
2012-01-09 06:06 . 2012-01-09 06:06 -------- d-----w- c:\users\maria\AppData\Roaming\QXNmZNpXxsj2RPW
2012-01-09 06:06 . 2012-01-09 06:06 -------- d-----w- c:\users\maria\AppData\Roaming\fYAQYu7ImX
2012-01-09 06:06 . 2012-01-09 06:06 -------- d-----w- c:\users\maria\AppData\Roaming\bEw1dwiJTAah0sX
2012-01-09 06:06 . 2012-01-09 06:06 -------- d-----w- c:\users\maria\AppData\Roaming\ViG67ghqYxiHRA4
2012-01-09 06:05 . 2012-01-09 06:49 -------- d-----w- c:\users\maria\AppData\Roaming\NBuFpQJL9wCku3Q
2012-01-09 06:05 . 2012-01-09 06:49 -------- d-----w- c:\users\maria\AppData\Roaming\SA4aH7ghUINca
2012-01-09 06:05 . 2012-01-09 06:49 -------- d-----w- c:\users\maria\AppData\Roaming\ZPXEFAIqfmnDuAy
2012-01-09 06:05 . 2012-01-09 06:49 -------- d-----w- c:\users\maria\AppData\Roaming\aPXEFAIqfmnDuAy
2012-01-09 06:05 . 2012-01-09 06:49 -------- d-----w- c:\users\maria\AppData\Roaming\OBy2GWK99RfWHpp
2012-01-09 06:05 . 2012-01-09 06:05 -------- d-----w- c:\users\maria\AppData\Roaming\NBy2GWK99RfWHpp
2012-01-09 06:05 . 2012-01-09 06:05 -------- d-----w- c:\users\maria\AppData\Roaming\XA0uSvDDobiu0Pz
2012-01-09 06:05 . 2012-01-09 06:49 -------- d-----w- c:\users\maria\AppData\Roaming\T55aHs5sQHQn
2012-01-09 06:05 . 2012-01-09 06:05 -------- d-----w- c:\users\maria\AppData\Roaming\RCYhZfWaov1NNyx
2012-01-09 06:04 . 2012-01-09 06:04 -------- d-----w- c:\users\maria\AppData\Roaming\i8mvBC9sn1BeXff
2012-01-09 06:04 . 2012-01-09 06:39 -------- d-----w- c:\users\maria\AppData\Roaming\D1EeDTv6kWOaIHk
2012-01-09 06:04 . 2012-01-09 06:04 -------- d-----w- c:\users\maria\AppData\Roaming\UhwVOPAoHE9VPD
2012-01-09 05:43 . 2012-01-09 05:43 -------- d-----w- c:\users\maria\AppData\Roaming\mNk7FOYJp20zlX9
2012-01-09 05:43 . 2012-01-09 05:43 -------- d-----w- c:\users\maria\AppData\Roaming\XijaOEoBLozXW3P
2012-01-09 05:43 . 2012-01-09 09:01 -------- d-----w- c:\users\maria\AppData\Roaming\sIDhpBKugpzfSUa
2012-01-09 05:43 . 2012-01-09 05:43 -------- d-----w- c:\users\maria\AppData\Roaming\vifrHwx4Y4tKS
2012-01-09 05:43 . 2012-01-09 05:43 -------- d-----w- c:\users\maria\AppData\Roaming\T0sk4CHIaY1dyHI
2012-01-09 05:42 . 2012-01-09 05:42 -------- d-----w- c:\users\maria\AppData\Roaming\X0sk4CHIaY1dyHI
2012-01-09 05:42 . 2012-01-09 05:42 -------- d-----w- c:\users\maria\AppData\Roaming\Q0sk4CHIaY1dyHI
2012-01-09 05:42 . 2012-01-09 09:01 -------- d-----w- c:\users\maria\AppData\Roaming\dw2EyQlpYaUGYbg
2012-01-09 05:42 . 2012-01-09 05:42 -------- d-----w- c:\users\maria\AppData\Roaming\mKInwvKNKOEAK
2012-01-09 05:42 . 2012-01-09 09:01 -------- d-----w- c:\users\maria\AppData\Roaming\DuLxJImjcgP
2012-01-09 05:42 . 2012-01-09 05:42 -------- d-----w- c:\users\maria\AppData\Roaming\vN1iGsEj1Qqxo6U
2012-01-09 05:42 . 2012-01-09 05:42 -------- d-----w- c:\users\maria\AppData\Roaming\qeBN1osEf9jrxvQ
2012-01-09 05:42 . 2012-01-09 09:01 -------- d-----w- c:\users\maria\AppData\Roaming\ribGdfZkBxuD
2012-01-09 05:41 . 2012-01-09 05:41 -------- d-----w- c:\users\maria\AppData\Roaming\VPIeZgd8fTTggYj
2012-01-09 05:41 . 2012-01-09 05:41 -------- d-----w- c:\users\maria\AppData\Roaming\hK4oABeT7Hoyebx
2012-01-09 05:41 . 2012-01-09 05:41 -------- d-----w- c:\users\maria\AppData\Roaming\GAjKpyqK4oABeT7
2012-01-09 05:41 . 2012-01-09 09:01 -------- d-----w- c:\users\maria\AppData\Roaming\bJPdDZSTiYaO71
2012-01-09 05:41 . 2012-01-09 05:41 -------- d-----w- c:\users\maria\AppData\Roaming\IvRrFRz3gcJUFqc
2012-01-09 05:34 . 2012-01-09 05:34 -------- d-----w- c:\users\maria\AppData\Roaming\LUVOBtzP0c1v2n
2012-01-09 05:34 . 2012-01-09 05:34 -------- d-----w- c:\users\maria\AppData\Roaming\D9hTXwjUClB
2012-01-09 05:34 . 2012-01-09 05:34 -------- d-----w- c:\users\maria\AppData\Roaming\kTZqhYCwkVlBxSi
2012-01-09 05:34 . 2012-01-09 05:34 -------- d-----w- c:\users\maria\AppData\Roaming\iG5sQJ6wxv2b3m5
2012-01-09 05:33 . 2012-01-09 05:33 -------- d-----w- c:\users\maria\AppData\Roaming\SS1ibD3on4
2012-01-09 05:33 . 2012-01-09 05:33 -------- d-----w- c:\users\maria\AppData\Roaming\OucS2ibD3n
2012-01-09 05:33 . 2012-01-09 05:33 -------- d-----w- c:\users\maria\AppData\Roaming\oIBrzONyx0v2b3n
2012-01-09 05:33 . 2012-01-09 05:33 -------- d-----w- c:\users\maria\AppData\Roaming\fTXqjUCekBzNx0v
2012-01-09 05:33 . 2012-01-09 05:33 -------- d-----w- c:\users\maria\AppData\Roaming\yIBtzPNyc1v
2012-01-09 05:33 . 2012-01-09 05:33 -------- d-----w- c:\users\maria\AppData\Roaming\BBtzP0ycAiDoF
2012-01-09 05:33 . 2012-01-09 05:33 -------- d-----w- c:\users\maria\AppData\Roaming\SamH5sWJ7E
2012-01-09 05:33 . 2012-01-09 05:33 -------- d-----w- c:\users\maria\AppData\Roaming\PP0ucS1ib3n4m6W
2012-01-09 05:33 . 2012-01-09 05:33 -------- d-----w- c:\users\maria\AppData\Roaming\XG5aQJ6dW8R9TqU
2012-01-09 05:32 . 2012-01-09 05:32 -------- d-----w- c:\users\maria\AppData\Roaming\o8RZqtPci2FpHsJ
2012-01-09 05:32 . 2012-01-09 05:32 -------- d-----w- c:\users\maria\AppData\Roaming\rzP0ycA1i
2012-01-09 05:32 . 2012-01-09 05:32 -------- d-----w- c:\users\maria\AppData\Roaming\IYCwkIVrl
2012-01-09 05:32 . 2012-01-09 05:32 -------- d-----w- c:\users\maria\AppData\Roaming\azONyxA0uSiFpGa
2012-01-09 05:32 . 2012-01-09 05:32 -------- d-----w- c:\users\maria\AppData\Roaming\v1uvD2obFpGsJ
2012-01-09 05:32 . 2012-01-09 05:32 -------- d-----w- c:\users\maria\AppData\Roaming\OnF4amH5sJdLgZh
2012-01-09 05:32 . 2012-01-09 05:32 -------- d-----w- c:\users\maria\AppData\Roaming\X6sWK7fELgZjCkV
2012-01-09 05:32 . 2012-01-09 05:32 -------- d-----w- c:\users\maria\AppData\Roaming\vL9hTXqjUe
2012-01-09 05:31 . 2012-01-09 05:31 -------- d-----w- c:\users\maria\AppData\Roaming\OjUCelIBrPyAuSo
2012-01-09 05:31 . 2012-01-09 05:31 -------- d-----w- c:\users\maria\AppData\Roaming\kWJ7fEL8gZhCkVl
2012-01-09 05:31 . 2012-01-09 05:31 -------- d-----w- c:\users\maria\AppData\Roaming\LgTXqjYCeIrOtA
2012-01-09 05:31 . 2012-01-09 05:31 -------- d-----w- c:\users\maria\AppData\Roaming\KH5sQJ7dE8R9YwU
2012-01-09 05:31 . 2012-01-09 05:31 -------- d-----w- c:\users\maria\AppData\Roaming\m0ucS1ibDoGaHsJ
2012-01-09 05:31 . 2012-01-09 05:31 -------- d-----w- c:\users\maria\AppData\Roaming\eF3pnG5aQ6W
2012-01-09 05:31 . 2012-01-09 05:31 -------- d-----w- c:\users\maria\AppData\Roaming\PBtzP0ycAiD
2012-01-09 05:31 . 2012-01-09 05:31 -------- d-----w- c:\users\maria\AppData\Roaming\l9gTXqjYCkVz
2012-01-09 05:31 . 2012-01-09 05:31 -------- d-----w- c:\users\maria\AppData\Roaming\QIrzPNyxAuSoFpG
2012-01-09 05:31 . 2012-01-09 05:31 -------- d-----w- c:\users\maria\AppData\Roaming\uzPNycA1u2b4m5Q
2012-01-09 05:30 . 2012-01-09 05:30 -------- d-----w- c:\users\maria\AppData\Roaming\WVlONtxP01DoGaH
2012-01-09 05:30 . 2012-01-09 05:30 -------- d-----w- c:\users\maria\AppData\Roaming\jkIBrzONyA
2012-01-09 05:30 . 2012-01-09 05:30 -------- d-----w- c:\users\maria\AppData\Roaming\oonF4pmH5Q7E8R
2012-01-09 05:30 . 2012-01-09 05:30 -------- d-----w- c:\users\maria\AppData\Roaming\pF4pmH5sQ
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-11-15 19:29 . 2011-04-22 16:45 270720 ------w- c:\windows\system32\MpSigStub.exe
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"WirelessAssistant"="c:\program files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe" [2009-07-23 498744]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MSIServer]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
R1 BHDrvx64;BHDrvx64;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\Definitions\BASHDefs\20110309.001\BHDrvx64.sys [2011-02-25 1124472]
R1 ccHP;Symantec Hash Provider;c:\windows\system32\drivers\NISx64\1108000.005\ccHPx64.sys [x]
R1 IDSVia64;IDSVia64;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\Definitions\IPSDefs\20110310.002\IDSvia64.sys [2010-12-01 476792]
R1 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\NISx64\1108000.005\Ironx64.SYS [x]
R1 SYMTDIv;Symantec Vista Network Dispatch Driver;c:\windows\System32\Drivers\NISx64\1108000.005\SYMTDIV.SYS [x]
R1 tmfbhhrb;tmfbhhrb;c:\windows\system32\drivers\tmfbhhrb.sys [x]
R1 zjdhjqnp;zjdhjqnp;c:\windows\system32\drivers\zjdhjqnp.sys [x]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 gupdate;Google Update Service (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-04-28 136176]
R2 NIS;Norton Internet Security;c:\program files (x86)\Norton Internet Security\Engine\17.8.0.5\ccSvcHst.exe [2010-02-26 126392]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2011-01-23 132656]
R3 gupdatem;Google Update Service (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-04-28 136176]
R3 netw5v64;Intel® Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit;c:\windows\system32\DRIVERS\netw5v64.sys [x]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys [x]
R3 RtsUIR;Realtek IR Driver;c:\windows\system32\DRIVERS\Rts516xIR.sys [x]
R3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\DRIVERS\VSTAZL6.SYS [x]
R3 SrvHsfV92;SrvHsfV92;c:\windows\system32\DRIVERS\VSTDPV6.SYS [x]
R3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\DRIVERS\VSTCNXT6.SYS [x]
R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [x]
R3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x64.sys [x]
R4 AESTFilters;Andrea ST Filters Service;c:\windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_ccf0dd3cb081af84\AESTSr64.exe [2009-03-02 89600]
R4 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x]
R4 Com4QLBEx;Com4QLBEx;c:\program files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [2009-05-05 228408]
R4 GamesAppService;GamesAppService;c:\program files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072]
S0 SymDS;Symantec Data Store;c:\windows\system32\drivers\NISx64\1108000.005\SYMDS64.SYS [x]
S0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\NISx64\1108000.005\SYMEFA64.SYS [x]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]
S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2009-08-20 21:24 451872 ----a-w- c:\program files (x86)\Common Files\LightScribe\LSRunOnce.exe
.
Contents of the 'Scheduled Tasks' folder
.
2012-01-19 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-04-28 01:28]
.
2012-01-20 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-04-28 01:28]
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"combofix"="c:\combofix\CF1354.3XE" [2009-07-14 344576]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"combofix"="c:\combofix\CF1354.3XE" [2009-07-14 344576]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x0
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.comcast.net/
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local
TCP: DhcpNameServer = 75.75.75.75 75.75.76.76
.
- - - - ORPHANS REMOVED - - - -
.
BHO-{FD72061E-9FDE-484D-A58A-0BAB4151CAD8} - c:\program files (x86)\Drop Down Deals\YontooIEClient.dll
.
.
.
[HKEY_LOCAL_MACHINE\system\ControlSet002\services\NIS]
"ImagePath"="\"c:\program files (x86)\Norton Internet Security\Engine\17.8.0.5\ccSvcHst.exe\" /s \"NIS\" /m \"c:\program files (x86)\Norton Internet Security\Engine\17.8.0.5\diMaster.dll\" /prefetch:1"
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10c.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\LocalServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\FlashUtil10c.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}]
@Denied: (A 2) (Everyone)
@="IFlashBroker3"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\system\ControlSet002\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
"MSCurrentCountry"=dword:000000b5
.
[HKEY_LOCAL_MACHINE\system\ControlSet002\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Completion time: 2012-01-19 21:39:29 - machine was rebooted
ComboFix-quarantined-files.txt 2012-01-20 02:39
.
Pre-Run: 261,949,632,512 bytes free
Post-Run: 261,083,033,600 bytes free
.
- - End Of File - - 18F30BBE823DBD4C4873A008B114075B

#13 sawz

sawz
  • Topic Starter

  • Members
  • 138 posts
  • OFFLINE
  •  
  • Local time:05:18 PM

Posted 19 January 2012 - 09:55 PM

I still tried to run oldtimer but I dont think it is scanning when I click on run scan , it will not respond , now realize that I am only working in Safe Mode, after I tried combofix in normal mode I have not been able to get back there again whewww this ones a beast.

#14 sawz

sawz
  • Topic Starter

  • Members
  • 138 posts
  • OFFLINE
  •  
  • Local time:05:18 PM

Posted 19 January 2012 - 09:58 PM

I was wrong about oldtimer, just as I was about to turn it off this log popped up,

OTL logfile created on: 1/19/2012 9:52:19 PM - Run 1
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Users\maria\Desktop
64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

2.75 Gb Total Physical Memory | 2.06 Gb Available Physical Memory | 74.90% Memory free
5.49 Gb Paging File | 4.82 Gb Available in Paging File | 87.73% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 284.28 Gb Total Space | 243.27 Gb Free Space | 85.57% Space Free | Partition Type: NTFS
Drive D: | 13.51 Gb Total Space | 2.23 Gb Free Space | 16.54% Space Free | Partition Type: NTFS
Drive E: | 99.34 Mb Total Space | 92.75 Mb Free Space | 93.37% Space Free | Partition Type: FAT32

Computer Name: MARIA-PC | User Name: maria | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Users\maria\Desktop\OTL.exe (OldTimer Tools)


========== Modules (No Company Name) ==========


========== Win32 Services (SafeList) ==========

SRV:64bit: - (AMD External Events Utility) -- C:\Windows\SysNative\atiesrxx.exe (AMD)
SRV:64bit: - (STacSV) -- C:\Windows\SysNative\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_ccf0dd3cb081af84\stacsv64.exe (IDT, Inc.)
SRV:64bit: - (WinDefend) -- C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV:64bit: - (AgereModemAudio) -- C:\Program Files\LSI SoftModem\agr64svc.exe (LSI Corporation)
SRV:64bit: - (AESTFilters) -- C:\Windows\SysNative\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_ccf0dd3cb081af84\AESTSr64.exe (Andrea Electronics Corporation)
SRV - (GamesAppService) -- C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe (WildTangent, Inc.)
SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (NIS) -- C:\Program Files (x86)\Norton Internet Security\Engine\17.8.0.5\ccSvcHst.exe (Symantec Corporation)
SRV - (clr_optimization_v2.0.50727_32) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)


========== Driver Services (SafeList) ==========

DRV:64bit: - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:64bit: - (SymEvent) -- C:\Windows\SysNative\drivers\SYMEVENT64x86.SYS (Symantec Corporation)
DRV:64bit: - (SYMTDIv) -- C:\Windows\SysNative\drivers\NISx64\1108000.005\symtdiv.sys (Symantec Corporation)
DRV:64bit: - (SymIRON) -- C:\Windows\SysNative\drivers\NISx64\1108000.005\ironx64.sys (Symantec Corporation)
DRV:64bit: - (SymEFA) -- C:\Windows\SysNative\drivers\NISx64\1108000.005\symefa64.sys (Symantec Corporation)
DRV:64bit: - (SRTSP) -- C:\Windows\SysNative\drivers\NISx64\1108000.005\srtsp64.sys (Symantec Corporation)
DRV:64bit: - (SRTSPX) Symantec Real Time Storage Protection (PEL) -- C:\Windows\SysNative\drivers\NISx64\1108000.005\srtspx64.sys (Symantec Corporation)
DRV:64bit: - (ccHP) -- C:\Windows\SysNative\drivers\NISx64\1108000.005\cchpx64.sys (Symantec Corporation)
DRV:64bit: - (athr) -- C:\Windows\SysNative\drivers\athrx.sys (Atheros Communications, Inc.)
DRV:64bit: - (SymDS) -- C:\Windows\SysNative\drivers\NISx64\1108000.005\symds64.sys (Symantec Corporation)
DRV:64bit: - (atikmdag) -- C:\Windows\SysNative\drivers\atikmdag.sys (ATI Technologies Inc.)
DRV:64bit: - (AtiHdmiService) -- C:\Windows\SysNative\drivers\AtiHdmi.sys (ATI Technologies, Inc.)
DRV:64bit: - (STHDA) -- C:\Windows\SysNative\drivers\stwrt64.sys (IDT, Inc.)
DRV:64bit: - (SynTP) -- C:\Windows\SysNative\drivers\SynTP.sys (Synaptics Incorporated)
DRV:64bit: - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (LSI_SAS2) -- C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:64bit: - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:64bit: - (sdbus) -- C:\Windows\SysNative\drivers\sdbus.sys (Microsoft Corporation)
DRV:64bit: - (RSUSBSTOR) -- C:\Windows\SysNative\drivers\RtsUStor.sys (Realtek Semiconductor Corp.)
DRV:64bit: - (SrvHsfV92) -- C:\Windows\SysNative\drivers\VSTDPV6.SYS (Conexant Systems, Inc.)
DRV:64bit: - (SrvHsfWinac) -- C:\Windows\SysNative\drivers\VSTCNXT6.SYS (Conexant Systems, Inc.)
DRV:64bit: - (SrvHsfHDA) -- C:\Windows\SysNative\drivers\VSTAZL6.SYS (Conexant Systems, Inc.)
DRV:64bit: - (igfx) -- C:\Windows\SysNative\drivers\igdkmd64.sys (Intel Corporation)
DRV:64bit: - (yukonw7) -- C:\Windows\SysNative\drivers\yk62x64.sys (Marvell)
DRV:64bit: - (netw5v64) Intel® -- C:\Windows\SysNative\drivers\netw5v64.sys (Intel Corporation)
DRV:64bit: - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (b57nd60a) -- C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (hcw85cir) -- C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV:64bit: - (RTL8167) -- C:\Windows\SysNative\drivers\Rt64win7.sys (Realtek )
DRV:64bit: - (GEARAspiWDM) -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys (GEAR Software Inc.)
DRV:64bit: - (AtiPcie) AMD PCI Express (3GIO) -- C:\Windows\SysNative\drivers\AtiPcie.sys (Advanced Micro Devices Inc.)
DRV:64bit: - (HpqKbFiltr) -- C:\Windows\SysNative\drivers\HpqKbFiltr.sys (Hewlett-Packard Development Company, L.P.)
DRV:64bit: - (AgereSoftModem) -- C:\Windows\SysNative\drivers\agrsm64.sys (LSI Corporation)
DRV:64bit: - (usbfilter) -- C:\Windows\SysNative\drivers\usbfilter.sys (Advanced Micro Devices)
DRV - (BHDrvx64) -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\Definitions\BASHDefs\20110309.001\BHDrvx64.sys (Symantec Corporation)
DRV - (EraserUtilRebootDrv) -- C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys (Symantec Corporation)
DRV - (eeCtrl) -- C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys (Symantec Corporation)
DRV - (IDSVia64) -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\Definitions\IPSDefs\20110310.002\IDSviA64.sys (Symantec Corporation)
DRV - (WIMMount) -- C:\Windows\SysWOW64\drivers\wimmount.sys (Microsoft Corporation)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://g.msn.com/HPNOT/1
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://g.msn.com/HPNOT/1


IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



IE - HKU\S-1-5-21-1342059231-17659541-1238657535-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.comcast.net/
IE - HKU\S-1-5-21-1342059231-17659541-1238657535-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-1342059231-17659541-1238657535-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\3.0.40624.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8081.0709: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@veetle.com/veetleCorePlugin,version=0.9.18: C:\Program Files (x86)\Veetle\plugins\npVeetle.dll (Veetle Inc)
FF - HKLM\Software\MozillaPlugins\@veetle.com/veetlePlayerPlugin,version=0.9.18: C:\Program Files (x86)\Veetle\Player\npvlc.dll (Veetle Inc)
FF - HKLM\Software\MozillaPlugins\@WildTangent.com/GamesAppPresenceDetector,Version=1.0: C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2009/10/30 23:08:39 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{BBDA0591-3099-440a-AA10-41764D9DB4DB}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\IPSFFPlgn\ [2012/01/09 20:06:14 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\coFFPlgn_2010_9_0_6 [2012/01/09 20:06:14 | 000,000,000 | ---D | M]


========== Chrome ==========

CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\14.0.835.202\gcswf32.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin7.dll
CHR - plugin: Java Deployment Toolkit 6.0.150.3 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeploytk.dll
CHR - plugin: Java™ Platform SE 6 U15 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll
CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files (x86)\Microsoft Silverlight\3.0.40624.0\npctrl.dll
CHR - plugin: Shockwave for Director (Enabled) = C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\14.0.835.202\pdf.dll
CHR - plugin: Chrome NaCl (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\14.0.835.202\ppGoogleNaClPluginChrome.dll
CHR - plugin: Google Gears 0.5.33.0 (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\14.0.835.202\gears.dll
CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.2.183.29\npGoogleOneClick8.dll
CHR - plugin: Veetle TV Player (Enabled) = C:\Program Files (x86)\Veetle\Player\npvlc.dll
CHR - plugin: Veetle TV Core (Enabled) = C:\Program Files (x86)\Veetle\plugins\npVeetle.dll
CHR - plugin: WildTangent Games App Presence Detector (Enabled) = C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll
CHR - plugin: Windows Live\u00AE Photo Gallery (Enabled) = C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll
CHR - plugin: Default Plug-in (Enabled) = default_plugin

O1 HOSTS File: ([2012/01/19 21:34:53 | 000,000,027 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Symantec NCO BHO) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\17.8.0.5\coIEplg.dll (Symantec Corporation)
O2 - BHO: (Symantec Intrusion Prevention) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\17.8.0.5\ipsbho.dll (Symantec Corporation)
O2 - BHO: (Microsoft Live Search Toolbar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - c:\Program Files (x86)\MSN\Toolbar\3.0.0566.0\msneshellx.dll (Microsoft Corp.)
O2 - BHO: (Yontoo Layers) - {FD72061E-9FDE-484D-A58A-0BAB4151CAD8} - C:\Program Files (x86)\Drop Down Deals\YontooIEClient.dll File not found
O3 - HKLM\..\Toolbar: (Microsoft Live Search Toolbar) - {1E61ED7C-7CB8-49d6-B9E9-AB4C880C8414} - c:\Program Files (x86)\MSN\Toolbar\3.0.0566.0\msneshellx.dll (Microsoft Corp.)
O3 - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\17.8.0.5\coIEplg.dll (Symantec Corporation)
O3 - HKU\S-1-5-21-1342059231-17659541-1238657535-1000\..\Toolbar\WebBrowser: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\17.8.0.5\coIEplg.dll (Symantec Corporation)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-1342059231-17659541-1238657535-1000\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-1342059231-17659541-1238657535-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000001 - mmswsock.dll File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000002 - mmswsock.dll File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000003 - mmswsock.dll File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000004 - mmswsock.dll File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000005 - mmswsock.dll File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000006 - mmswsock.dll File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000007 - mmswsock.dll File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000008 - mmswsock.dll File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000009 - mmswsock.dll File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000010 - mmswsock.dll File not found
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - %SystemRoot%\System32\nwprovau.dll File not found
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000028 - C:\Program Files (x86)\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000029 - C:\Program Files (x86)\Bonjour\mdnsNSP.dll File not found
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Java Plug-in 1.6.0_15)
O16 - DPF: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Java Plug-in 1.6.0_15)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Java Plug-in 1.6.0_15)
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab (OnlineScanner Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Java Plug-in 1.6.0_15)
O16 - DPF: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Java Plug-in 1.6.0_15)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Java Plug-in 1.6.0_15)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 75.75.75.75 75.75.76.76
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{32B83D7D-905E-4AD5-8CFD-0A5D04457B34}: DhcpNameServer = 75.75.75.75 75.75.76.76
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O18:64bit: - Protocol\Handler\ms-itss - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O20:64bit: - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (Explorer.exe) -C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) -C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = ComFile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2012/01/19 21:49:36 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN
[2012/01/19 21:43:15 | 000,584,192 | ---- | C] (OldTimer Tools) -- C:\Users\maria\Desktop\OTL.exe
[2012/01/19 18:18:42 | 000,518,144 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe
[2012/01/19 18:18:42 | 000,406,528 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe
[2012/01/19 18:18:42 | 000,060,416 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe
[2012/01/19 18:18:25 | 000,000,000 | ---D | C] -- C:\Windows\ERDNT
[2012/01/19 18:18:12 | 000,000,000 | ---D | C] -- C:\Qoobox
[2012/01/19 18:16:28 | 004,388,721 | R--- | C] (Swearware) -- C:\Users\maria\Desktop\ComboFix.exe
[2012/01/11 23:20:20 | 000,077,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\packager.dll
[2012/01/11 23:20:20 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\packager.dll
[2012/01/11 23:19:56 | 001,572,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\quartz.dll
[2012/01/11 23:19:56 | 001,328,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\quartz.dll
[2012/01/11 23:19:55 | 000,514,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\qdvd.dll
[2012/01/11 23:19:55 | 000,366,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\qdvd.dll
[2012/01/11 23:19:54 | 000,852,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
[2012/01/11 23:19:53 | 000,716,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
[2012/01/11 23:19:52 | 001,739,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntdll.dll
[2012/01/10 21:53:18 | 000,000,000 | R-SD | C] -- C:\Users\maria\Documents\My Stationery
[2012/01/10 19:24:06 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\csrsrv.dll
[2012/01/09 23:02:57 | 000,000,000 | ---D | C] -- C:\Windows\pss
[2012/01/09 22:00:34 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ESET
[2012/01/09 17:54:50 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\SUPERAntiSpyware.com
[2012/01/09 17:54:30 | 000,000,000 | ---D | C] -- C:\ProgramData\SUPERAntiSpyware.com
[2012/01/09 17:54:30 | 000,000,000 | ---D | C] -- C:\Program Files\SUPERAntiSpyware
[2012/01/09 17:38:17 | 000,000,000 | ---D | C] -- C:\Users\maria\Documents\tdsskiller[1]
[2012/01/09 10:00:24 | 000,000,000 | ---D | C] -- C:\Users\maria\Documents\Downloads
[2012/01/09 10:00:20 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\CBS Interactive
[2012/01/09 02:50:54 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\EventProviders
[2012/01/09 02:50:08 | 000,000,000 | ---D | C] -- C:\be84132aec3643f4822a6c3e644f57
[2012/01/09 02:17:00 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\AVG
[2012/01/09 02:10:28 | 000,185,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iepeers.dll
[2012/01/09 02:10:27 | 000,703,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
[2012/01/09 02:10:27 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\licmgr10.dll
[2012/01/09 02:10:26 | 000,247,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
[2012/01/09 02:10:26 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
[2012/01/09 02:10:26 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
[2012/01/09 02:10:25 | 000,132,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\url.dll
[2012/01/09 02:10:24 | 000,256,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iepeers.dll
[2012/01/09 02:10:24 | 000,097,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
[2012/01/09 02:10:23 | 000,386,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\html.iec
[2012/01/09 02:10:23 | 000,134,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\url.dll
[2012/01/09 02:10:23 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\licmgr10.dll
[2012/01/09 02:10:23 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeedssync.exe
[2012/01/09 02:10:22 | 000,482,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\html.iec
[2012/01/09 02:10:22 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeedssync.exe
[2012/01/09 02:09:52 | 000,723,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\EncDec.dll
[2012/01/09 02:09:52 | 000,534,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\EncDec.dll
[2012/01/09 02:00:05 | 000,000,000 | -H-D | C] -- C:\ProgramData\Common Files
[2012/01/09 01:59:39 | 000,613,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\psisdecd.dll
[2012/01/09 01:59:39 | 000,465,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\psisdecd.dll
[2012/01/09 01:59:39 | 000,288,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MSNP.ax
[2012/01/09 01:59:39 | 000,108,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\psisrndr.ax
[2012/01/09 01:59:39 | 000,075,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\psisrndr.ax
[2012/01/09 01:59:38 | 000,204,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSNP.ax
[2012/01/09 01:59:38 | 000,104,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Mpeg2Data.ax
[2012/01/09 01:59:38 | 000,075,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MSDvbNP.ax
[2012/01/09 01:59:38 | 000,072,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Mpeg2Data.ax
[2012/01/09 01:59:38 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSDvbNP.ax
[2012/01/09 01:59:16 | 000,331,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\oleacc.dll
[2012/01/09 01:59:15 | 000,861,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\oleaut32.dll
[2012/01/09 01:57:23 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AVG
[2012/01/09 01:54:21 | 000,000,000 | ---D | C] -- C:\ProgramData\MFAData
[2012/01/09 01:36:49 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Malwarebytes
[2012/01/09 01:36:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2012/01/09 01:36:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2012/01/09 01:36:40 | 000,023,152 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2012/01/09 01:36:40 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2012/01/09 01:25:29 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\v8RTeIP13dhXr
[2012/01/09 01:25:28 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Wpm8RZYXjNcm
[2012/01/09 01:25:28 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\TQ8RTeIP1
[2012/01/09 01:25:28 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\TgRZYXjzyAmJ8Te
[2012/01/09 01:25:28 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\spm8RZYXjNc
[2012/01/09 01:25:28 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ipm8RZYXjNcmJ
[2012/01/09 01:25:27 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\wOPci3n4HsRhXke
[2012/01/09 01:25:27 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\uRhXkeOt0ciDop8
[2012/01/09 01:25:27 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\kOPci3n4HsRhXke
[2012/01/09 01:25:27 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\IOPci3n4HsRhXke
[2012/01/09 01:25:26 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\VOA2bCVON4HJ
[2012/01/09 01:25:26 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\rkVON4H6W
[2012/01/09 01:25:26 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\NCOvnWYOA2bCVO4
[2012/01/09 01:25:26 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\mVON4H6W7E8rBPc
[2012/01/09 01:25:25 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\LEtsT1oGjrAb6Lr
[2012/01/09 01:25:25 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\JCOvnWYOA
[2012/01/09 01:25:25 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\hIGT1oGjrAb6LrA
[2012/01/09 01:25:24 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\GUQtLS8qihDKr1o
[2012/01/09 01:25:22 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\rsieRpyUQtLS
[2012/01/09 01:25:15 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ziA5NL1dRqUYKm1
[2012/01/09 01:25:15 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\OiA5NL1dRqUYKm1
[2012/01/09 01:25:13 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ipiA5NL1dRqUY
[2012/01/09 01:25:12 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\sDiA5NL1dRq
[2012/01/09 01:25:12 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\RBjOkYLYZgBWcZ1
[2012/01/09 01:25:12 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\mBjOkYLYZgBWcZ1
[2012/01/09 01:25:12 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\la2bioiB0gDTxc3
[2012/01/09 01:25:12 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ea2bioiB0gDTxc3
[2012/01/09 01:25:11 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\tDcvcbcCNE1ZO
[2012/01/09 01:25:11 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\PDcvcbcCNE1ZOA
[2012/01/09 01:25:11 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\BBjOkYLYZgBWcZ1
[2012/01/09 01:24:59 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\zNt1rilIVY
[2012/01/09 01:24:59 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\VTpXSfXr24sGWpo
[2012/01/09 01:24:57 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\zTpXSfXr24sGWpo
[2012/01/09 01:24:56 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\tTpXSfXr24sGWpo
[2012/01/09 01:24:54 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\sJufAWYISaH6i5
[2012/01/09 01:24:52 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ZTpXSfXr24sG
[2012/01/09 01:24:27 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Uw9Q1es0L18
[2012/01/09 01:24:26 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Cw9Q1es0L18
[2012/01/09 01:23:25 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\pLBbJj1fVvaZIuW
[2012/01/09 01:23:25 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ffliJj1fVvaZIuW
[2012/01/09 01:20:26 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\W2qFWqNDy
[2012/01/09 01:20:21 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ShfqV24Kqf
[2012/01/09 01:20:19 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\HYBjrA2pJ86RqrD
[2012/01/09 01:20:16 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\mYwkIVrlOtPuYkl
[2012/01/09 01:20:14 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\jvSibF3pna6W7R4
[2012/01/09 01:20:13 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\bXTuS1bnHfd
[2012/01/09 01:20:12 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\RuS1bnHJVBKgZh
[2012/01/09 01:20:12 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\KoCyFfTuSb4WBBK
[2012/01/09 01:20:12 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ibexFRTuSb4WBBK
[2012/01/09 01:20:12 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\fK8gRZhYweItP
[2012/01/09 01:20:10 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ECybfTuS1D
[2012/01/09 01:20:08 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\wygRZhYXUeItPys
[2012/01/09 01:20:08 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\vK41BXkVzx24sJ5
[2012/01/09 01:20:08 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\lX7kVzxS3jUw
[2012/01/09 01:20:07 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\zWHgRZhYXUlBzNc
[2012/01/09 01:20:07 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\fpjkY8gRZhYwe
[2012/01/09 01:20:07 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\fpCUX8gRZhYwe
[2012/01/09 01:20:07 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\fOYkVzxS3jUw8Rh
[2012/01/09 01:20:07 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\fnCUX8gRZhYwe
[2012/01/09 01:20:06 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\vU841rqkVNuD6
[2012/01/09 01:20:05 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ySxUK41BXkzxSn
[2012/01/09 01:20:04 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\LPlX7oNkgkz
[2012/01/09 01:20:02 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\YeIrxvS2in3cxVg
[2012/01/09 01:20:00 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\C5ulWCIzxvSin3
[2012/01/09 01:19:59 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\wNqCIzxvSi
[2012/01/09 01:19:56 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Y3VKNDoG4H6W7Eg
[2012/01/09 01:19:56 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\lgc3oG4am6W7Egh
[2012/01/09 01:19:53 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\LTZqjYCwkVrtxu
[2012/01/09 01:19:51 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\QbbbF3pnGaQ6KfL
[2012/01/09 01:19:50 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\QbbFF3pnGaQ6KfL
[2012/01/09 01:19:50 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\JbbFF3pnG
[2012/01/09 01:19:49 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\riFGaQdWK
[2012/01/09 01:19:49 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ReIBrzONyAuiFG
[2012/01/09 01:19:49 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\nNtxA0u2ibgVSag
[2012/01/09 01:19:49 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\LeIBrzONyAuiFG
[2012/01/09 01:19:49 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Azi33pnG5QH6
[2012/01/09 01:19:46 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\g6dWK8fR9TqeIrO
[2012/01/09 01:19:45 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ShTXqjeIBz
[2012/01/09 01:19:44 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\S9hTXqjeIr
[2012/01/09 01:19:44 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\S9hTXqjCeI
[2012/01/09 01:19:44 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\r5aQJ6dWKf9TqeI
[2012/01/09 01:19:44 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\fCeIBrzONx0iF
[2012/01/09 01:19:43 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Z8gRZ9hYXjVItPy
[2012/01/09 01:19:43 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ytzPNycA1vo
[2012/01/09 01:19:43 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\yjUCelIBrPyAuSo
[2012/01/09 01:19:43 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\x1uvS2obFpG
[2012/01/09 01:19:43 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\TKgRZ9hYXjVItPy
[2012/01/09 01:19:43 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\sF45sQJ7d8R9YwU
[2012/01/09 01:19:43 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\qNycA1uvDoFp
[2012/01/09 01:19:43 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\QgRZ9hYXwUeItPy
[2012/01/09 01:19:43 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\CF45sQJ7d8R9YwU
[2012/01/09 01:19:43 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\agRZ9hYXwUeItPy
[2012/01/09 01:19:42 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\W45sQJ7dK
[2012/01/09 01:19:42 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\bsQJ7dK8gZh
[2012/01/09 01:07:25 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\IduZcENfPHliKIS
[2012/01/09 01:07:23 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\dOEPJr6NHj39
[2012/01/09 01:07:16 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\B3BYd30YbCHzQxg
[2012/01/09 01:07:07 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\cU6mQaaouB9muIZ
[2012/01/09 01:07:03 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\kzU6mQaaouB9muI
[2012/01/09 01:06:53 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\LFyCLp0VRE5NOPz
[2012/01/09 01:06:50 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\fyj74xI8JptkV
[2012/01/09 01:06:38 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\qKriWlpUpjmzhGt
[2012/01/09 01:06:33 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\zZPGLr4hoTiUJ
[2012/01/09 01:06:31 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\H28jViWjvQZSdNd
[2012/01/09 01:06:27 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\g6kAdgecHYAG90Q
[2012/01/09 01:06:16 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\QXNmZNpXxsj2RPW
[2012/01/09 01:06:14 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\fYAQYu7ImX
[2012/01/09 01:06:09 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\bEw1dwiJTAah0sX
[2012/01/09 01:06:01 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ViG67ghqYxiHRA4
[2012/01/09 01:05:57 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\NBuFpQJL9wCku3Q
[2012/01/09 01:05:56 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\SA4aH7ghUINca
[2012/01/09 01:05:44 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ZPXEFAIqfmnDuAy
[2012/01/09 01:05:44 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\aPXEFAIqfmnDuAy
[2012/01/09 01:05:33 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\OBy2GWK99RfWHpp
[2012/01/09 01:05:32 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\NBy2GWK99RfWHpp
[2012/01/09 01:05:13 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\XA0uSvDDobiu0Pz
[2012/01/09 01:05:10 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\T55aHs5sQHQn
[2012/01/09 01:05:05 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\RCYhZfWaov1NNyx
[2012/01/09 01:04:51 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\i8mvBC9sn1BeXff
[2012/01/09 01:04:22 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\D1EeDTv6kWOaIHk
[2012/01/09 01:04:14 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\UhwVOPAoHE9VPD
[2012/01/09 00:43:41 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\mNk7FOYJp20zlX9
[2012/01/09 00:43:31 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\XijaOEoBLozXW3P
[2012/01/09 00:43:22 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\sIDhpBKugpzfSUa
[2012/01/09 00:43:14 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\vifrHwx4Y4tKS
[2012/01/09 00:43:04 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\T0sk4CHIaY1dyHI
[2012/01/09 00:42:59 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\X0sk4CHIaY1dyHI
[2012/01/09 00:42:58 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Q0sk4CHIaY1dyHI
[2012/01/09 00:42:55 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\dw2EyQlpYaUGYbg
[2012/01/09 00:42:51 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\mKInwvKNKOEAK
[2012/01/09 00:42:46 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\DuLxJImjcgP
[2012/01/09 00:42:19 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\vN1iGsEj1Qqxo6U
[2012/01/09 00:42:16 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\qeBN1osEf9jrxvQ
[2012/01/09 00:42:04 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ribGdfZkBxuD
[2012/01/09 00:41:54 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\VPIeZgd8fTTggYj
[2012/01/09 00:41:43 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\hK4oABeT7Hoyebx
[2012/01/09 00:41:38 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\GAjKpyqK4oABeT7
[2012/01/09 00:41:30 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\bJPdDZSTiYaO71
[2012/01/09 00:41:21 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\IvRrFRz3gcJUFqc
[2012/01/09 00:34:34 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\LUVOBtzP0c1v2n
[2012/01/09 00:34:25 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\D9hTXwjUClB
[2012/01/09 00:34:08 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\kTZqhYCwkVlBxSi
[2012/01/09 00:34:01 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\iG5sQJ6wxv2b3m5
[2012/01/09 00:33:54 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\SS1ibD3on4
[2012/01/09 00:33:48 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\OucS2ibD3n
[2012/01/09 00:33:43 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\oIBrzONyx0v2b3n
[2012/01/09 00:33:37 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\fTXqjUCekBzNx0v
[2012/01/09 00:33:31 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\yIBtzPNyc1v
[2012/01/09 00:33:26 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\BBtzP0ycAiDoF
[2012/01/09 00:33:20 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\SamH5sWJ7E
[2012/01/09 00:33:15 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\PP0ucS1ib3n4m6W
[2012/01/09 00:33:08 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\XG5aQJ6dW8R9TqU
[2012/01/09 00:32:57 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\o8RZqtPci2FpHsJ
[2012/01/09 00:32:47 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\rzP0ycA1i
[2012/01/09 00:32:35 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\IYCwkIVrl
[2012/01/09 00:32:29 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\azONyxA0uSiFpGa
[2012/01/09 00:32:23 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\v1uvD2obFpGsJ
[2012/01/09 00:32:17 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\OnF4amH5sJdLgZh
[2012/01/09 00:32:11 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\X6sWK7fELgZjCkV
[2012/01/09 00:32:05 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\vL9hTXqjUe
[2012/01/09 00:31:59 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\OjUCelIBrPyAuSo
[2012/01/09 00:31:52 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\kWJ7fEL8gZhCkVl
[2012/01/09 00:31:46 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\LgTXqjYCeIrOtA
[2012/01/09 00:31:39 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\KH5sQJ7dE8R9YwU
[2012/01/09 00:31:32 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\m0ucS1ibDoGaHsJ
[2012/01/09 00:31:26 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\eF3pnG5aQ6W
[2012/01/09 00:31:19 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\PBtzP0ycAiD
[2012/01/09 00:31:12 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\l9gTXqjYCkVz
[2012/01/09 00:31:06 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\QIrzPNyxAuSoFpG
[2012/01/09 00:31:00 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\uzPNycA1u2b4m5Q
[2012/01/09 00:30:54 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\WVlONtxP01DoGaH
[2012/01/09 00:30:47 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\jkIBrzONyA
[2012/01/09 00:30:41 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\oonF4pmH5Q7E8R
[2012/01/09 00:30:31 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\pF4pmH5sQ
[2012/01/09 00:30:25 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\QycS1ivvD3oF4mH
[2012/01/09 00:30:19 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\fgTZqjCwkVlNx
[2012/01/09 00:29:58 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\WqjUCekIBzNx0v2
[2012/01/09 00:29:52 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\FBtNycA1v
[2012/01/09 00:29:42 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\uhYCwOx0cDn4m5W
[2012/01/09 00:29:25 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\h2ibD3pnGaHsKfL
[2012/01/09 00:29:15 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\s6dWK7fRLgX
[2012/01/09 00:29:01 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\fadKhXCkBAv2Fn5
[2012/01/09 00:28:50 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ahXqjUCkIr
[2012/01/09 00:28:28 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\QamH6sWJ7E8TqYw
[2012/01/09 00:28:22 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Lyx0vS2ib3n5QWf
[2012/01/09 00:28:15 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\GvD2obF4pGsJd
[2012/01/09 00:28:09 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\w4amH5sWJdLgZhX
[2012/01/09 00:28:03 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\RK7fEL9gTqYwIrO
[2012/01/09 00:27:56 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\s2obF4pmGsJdKfZ
[2012/01/09 00:27:50 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\bmH5sQJ7dKg
[2012/01/09 00:27:43 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\cuS2ibD3pnG4
[2012/01/09 00:27:36 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\twjUVelIBzNc1
[2012/01/09 00:27:30 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\jOBtxP0yc1v3n4m
[2012/01/09 00:27:23 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\g9gTXqjYCkBzNx0
[2012/01/09 00:27:17 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\QUCelIBrzNx1v2b
[2012/01/09 00:27:11 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\DtzP0ycA1v2
[2012/01/09 00:27:05 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\g1ibD3onHsJfLgq
[2012/01/09 00:26:59 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\QnG5aQH6dKfLgX
[2012/01/09 00:26:53 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\z8fRhTXwje
[2012/01/09 00:26:47 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\hZ9hYXwjUeItPyA
[2012/01/09 00:26:39 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\zIBrzONyx0
[2012/01/09 00:26:33 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\YycA1uvD2b4m5Q6
[2012/01/09 00:26:27 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\o3onF4amHsJdLg
[2012/01/09 00:26:21 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\xQH6sWK7fLgZjCk
[2012/01/09 00:26:15 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\CL9gTXqjYeIrOtA
[2012/01/09 00:26:09 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\oXwjUCelIrP
[2012/01/09 00:26:03 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\xlOBtzP0AiDoFpH
[2012/01/09 00:25:57 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\VucS1ibD3n4m6W7
[2012/01/09 00:25:51 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\pF3pnG5aQ
[2012/01/09 00:25:45 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\xaQJ6dWK8R9TqUe
[2012/01/09 00:25:39 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\V8gRZ9hYXjVl
[2012/01/09 00:25:33 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\pYCwkUVrlBx0c1v
[2012/01/09 00:25:27 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\RYCekIVrzNx
[2012/01/09 00:25:21 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\bhTXwjUCeIrPyA
[2012/01/09 00:25:15 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\fmH5sQJ7dK
[2012/01/09 00:25:10 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\yqqhhYXwkUelOtP
[2012/01/09 00:25:04 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\TWJJJffLTZqYwUV
[2012/01/09 00:24:59 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\lEL9gTZqjCkVlNx
[2012/01/09 00:24:54 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\eA0ucS2ib3n4Q6W
[2012/01/09 00:24:48 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\xWK7fRL9gXjCkV
[2012/01/09 00:24:36 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\OsQJ7dEghVIzy1D
[2012/01/09 00:24:23 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\A5Qd8RhwClrPy1v
[2012/01/09 00:24:10 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\mTZqhYCwkV
[2012/01/09 00:23:58 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Gpm5QE8ZTe
[2012/01/09 00:23:46 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ZaQH6sKEgqCkrNP
[2012/01/09 00:23:37 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\RYkVOtPyi3Fa5Wd
[2012/01/09 00:23:27 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\QPu1Do4mJEZYwV
[2012/01/09 00:23:06 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\nvi35HKR9jkVNSp
[2012/01/09 00:22:54 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\IHWd8hwUlB2pQg9
[2012/01/09 00:22:41 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\rGQ6WfLhqUkBzyA
[2012/01/09 00:22:28 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\uui3n4Hs7E9ZYkV
[2012/01/09 00:22:16 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Q7EgZhwVltP
[2012/01/09 00:22:04 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\uNxu1Do4ms7LgZh
[2012/01/09 00:21:52 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\lDbp5QdKR9XUeIz
[2012/01/09 00:21:41 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Axy1Do4ms7E8Rhw
[2012/01/09 00:21:26 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\KrtPy1vo4msJd8Z
[2012/01/09 00:21:01 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Hci3GmsJEgqCUlB
[2012/01/09 00:20:40 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\jp5Qd8LTqe
[2012/01/09 00:20:28 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\R7ERqXkeBPy
[2012/01/09 00:20:12 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\SNAubG6fgC
[2012/01/09 00:19:50 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\u8RhwVlBPy1Dbp5
[2012/01/09 00:19:38 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\QNAcDnaKEgZYkrN
[2012/01/09 00:19:26 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\HQd8RhwClrPxuS
[2012/01/09 00:19:14 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\XwIlNxu1boGmsJE
[2012/01/09 00:19:02 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\WzxuSb3GQ6Kf9XU
[2012/01/09 00:18:50 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\qna6WfLgqYkVOty
[2012/01/09 00:18:39 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\c5Hd7R9Tj
[2012/01/09 00:18:24 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\KFn5HWfLTqCIzNA
[2012/01/09 00:18:04 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\xUeBPy1So3G
[2012/01/09 00:17:44 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\L5JEf9XUlrNxu2F
[2012/01/09 00:17:32 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\agjCkrOx0SiDn4m
[2012/01/09 00:17:19 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\llBPy1So3
[2012/01/09 00:17:08 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\uboGm6WfLTqY
[2012/01/09 00:16:56 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\tFp5HW7LgqCkrNx
[2012/01/09 00:16:44 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\hOxy1Dn45JE8ZhU
[2012/01/09 00:16:32 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Sf9XUkrNASbna67
[2012/01/09 00:16:20 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\sYUeBPciDn4
[2012/01/09 00:16:08 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\jOxuSbp5QdKRgqC
[2012/01/09 00:15:56 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\t4msJEg9YjVIzy1
[2012/01/09 00:15:44 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\EgqCkrNxuSb3GQs
[2012/01/09 00:15:32 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ABPcDnHQ8
[2012/01/09 00:15:20 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\p3n4HsKEgZjC
[2012/01/09 00:15:09 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\FSo3maJW8RhX
[2012/01/09 00:14:54 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ZyubpGa6Kf9TqCI
[2012/01/09 00:14:44 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\vGs6E8ZhwU
[2012/01/09 00:14:19 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Ag9XUeItN
[2012/01/09 00:13:58 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\zTqCklNPu1
[2012/01/09 00:13:46 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\WzNAuo3GQ68L
[2012/01/09 00:13:34 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\A3Gm6JE8ZhCUrOx
[2012/01/09 00:13:22 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\WCBzNAvo3
[2012/01/09 00:13:11 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\lEg9XUltNAvo4GQ
[2012/01/09 00:12:56 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Lms7LRhwVOzy1Dn
[2012/01/09 00:12:31 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Wf8TqCkrOt0c1Do
[2012/01/09 00:12:15 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\BmH6sWJ7fLgZh
[2012/01/09 00:12:09 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\QfRL9TXqjCkVzNx
[2012/01/09 00:12:03 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\DXwwjUUCelrzPyA
[2012/01/09 00:11:57 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\hOOOBttzPycA
[2012/01/09 00:11:51 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\WuuccS1iib3on4m
[2012/01/09 00:11:45 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\DD33ppnG4aQsK7
[2012/01/09 00:11:40 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\LVVrrzOONtA0uS2
[2012/01/09 00:11:35 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\PK77ffRL9gTXqYe
[2012/01/09 00:11:30 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\H222ibbF3pn5aQ6
[2012/01/09 00:11:25 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\YCeeekIBrz
[2012/01/09 00:11:05 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\n55aaQJ66WK8fLh
[2012/01/09 00:11:00 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\TyyyxAA1u
[2012/01/09 00:10:45 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ktzzNycAA1vD2b4
[2012/01/09 00:10:39 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\L111ivvD2on
[2012/01/09 00:10:33 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ynnGG4aamHsWJfE
[2012/01/09 00:10:27 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\kddW7fRRL9gXqY
[2012/01/09 00:10:21 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ZZZ9hTXwj
[2012/01/09 00:10:15 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ukUUVVelOBtz0yA
[2012/01/09 00:10:05 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\eAvD2onF4pmHsQ7
[2012/01/09 00:09:50 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\tPP00yccS1iD3n4
[2012/01/09 00:09:44 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\jiibbD33pn
[2012/01/09 00:09:38 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\EG55aaQH6dWKfR9
[2012/01/09 00:09:32 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\yEEEK88fRZ9TXj
[2012/01/09 00:09:26 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\kqqhhYXwwkVelBz
[2012/01/09 00:09:20 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\LVVVrllONtxPuc1
[2012/01/09 00:09:14 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\yxxA00uvS2i
[2012/01/09 00:09:03 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ZHH55sQQJ7dK8RZ
[2012/01/09 00:08:56 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\uEEEgqhCw
[2012/01/09 00:08:50 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\lqqqekIrzNtAciD
[2012/01/09 00:08:45 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\n55aaQHH6dW7fLg
[2012/01/09 00:08:40 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\gNyyxxA0uvS2bFp
[2012/01/09 00:08:35 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\x99ggTXXqjY
[2012/01/09 00:08:30 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\QpppnnG5aQH6WK
[2012/01/09 00:08:15 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\foobbF33pmGaQ6W
[2012/01/09 00:08:10 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\rellIIBrz
[2012/01/09 00:08:05 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\pddWWK8ffR9h
[2012/01/09 00:07:50 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\CsQQQJ6dEK8fR9T
[2012/01/09 00:07:45 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\eccAA1uvv2obFpG
[2012/01/09 00:07:40 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\KhYYYXwjUV
[2012/01/09 00:07:26 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ZRRhXjVlBzNcuDo
[2012/01/09 00:07:19 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\uwkkUUVrlOBt
[2012/01/09 00:07:13 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ONNNtxxA0ucSib3
[2012/01/09 00:07:07 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\XvSS2obF3pmGaJd
[2012/01/09 00:07:01 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\i4ppmG5sJd
[2012/01/09 00:06:55 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\OJJd8ggqhYXwUeO
[2012/01/09 00:06:50 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\sTTZqYCwkO0S13
[2012/01/09 00:06:43 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\beekkIBrzONyA0v
[2012/01/09 00:06:37 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\PPPyccA1D2bF4mE
[2012/01/09 00:06:31 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\CivvDD2onF4
[2012/01/09 00:06:25 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\b4aamHH6sWf8gZY
[2012/01/09 00:06:19 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\PWKKK7fRL9gTqj
[2012/01/09 00:06:13 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ChhhTXXwjUCeIBz
[2012/01/09 00:06:07 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\nVVelOOBtP0cAiD
[2012/01/09 00:06:01 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\AxPP00ycS1iv
[2012/01/09 00:05:55 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\diiibDD3pnG4Q6s
[2012/01/09 00:05:49 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\xJJJ66dWK8fR9hX
[2012/01/09 00:05:43 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\wEEKYwUUVe
[2012/01/09 00:05:37 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\fqqhhYCCwkUrlBt
[2012/01/09 00:05:31 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\mVVVrlNtxci3G
[2012/01/09 00:05:25 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\wxxAuF3pnG5QHW7
[2012/01/09 00:05:20 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\KhhTTXqqjU
[2012/01/09 00:05:15 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\BmmmGG5aQJ6dK
[2012/01/09 00:05:10 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\oBBrrzPNNyA1uS
[2012/01/09 00:05:05 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\RR9TXUUCelIBzPy
[2012/01/09 00:04:50 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\UETwjjUCelB
[2012/01/09 00:04:30 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\GzyycA1ivD2oF4H
[2012/01/09 00:04:24 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\iIxio4m6WEL8TqY
[2012/01/09 00:04:18 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\BpppnKfR9g
[2012/01/09 00:04:12 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\mRRLL9hTTXjUCkB
[2012/01/09 00:04:07 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\YFFF33pmG5aQ6dK
[2012/01/09 00:03:57 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\WKKK88fRL9hT
[2012/01/09 00:03:37 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\x111uvvD2obFpG5
[2012/01/09 00:03:31 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\UnnFF4aamH5WJdE
[2012/01/09 00:03:10 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\XQHH6ssWK7ELgTj
[2012/01/09 00:03:04 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\i8LL9qCeBONx0
[2012/01/09 00:02:59 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\f222obbF3pmGaQ6
[2012/01/09 00:02:54 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\rCCeekIIBrONyA0
[2012/01/09 00:02:44 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\huuuvSS2o
[2012/01/09 00:02:25 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\srPxd9OA0pW
[2012/01/09 00:02:18 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\oXwkUVVeBtz
[2012/01/09 00:02:12 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\rQH6sWK7E9TqYwV
[2012/01/09 00:02:06 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\eBPx1So3maJW8L
[2012/01/09 00:01:48 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\DWf9ZjIrNu1
[2012/01/09 00:01:26 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\syvF5dRXezAvFsE
[2012/01/09 00:01:15 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\fCUrOt0c1DoFa
[2012/01/09 00:01:00 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\tLgZjwIrOtPu1b3
[2012/01/09 00:00:35 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\zIrOt0c2b3naHsK
[2012/01/09 00:00:14 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\fNxu2FpGQ6W8R9T
[2012/01/09 00:00:03 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\PYkVlBPyAiDn4ms
[2012/01/08 23:59:41 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\xd79XCVzt0S
[2012/01/08 23:59:29 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\lsJdKgZhXjVltPy
[2012/01/08 23:59:17 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\fuSb3n4QsKfLgZj
[2012/01/08 23:59:05 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\cm5JdKgYwVeItPy
[2012/01/08 23:58:52 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ZqYkVOtAu
[2012/01/08 23:58:42 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\KfLhXjCIrOyAuSi
[2012/01/08 23:58:27 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\TKZhwUlBzyAu2b3
[2012/01/08 23:58:06 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\iy1v2FpGsJ
[2012/01/08 23:57:47 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\hRqXkVlBPyAiDo4
[2012/01/08 23:57:35 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Yui3n4HsKEgZY
[2012/01/08 23:57:23 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Kp5Q7EgZhXUeI
[2012/01/08 23:57:02 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\QmsfLgqYwUlBx0
[2012/01/08 23:56:51 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\pb3GaHdKf9Tq
[2012/01/08 23:56:36 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\XviFpGQ6KfLgqYe
[2012/01/08 23:56:16 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\tXjClBzyAu2b3m5
[2012/01/08 23:55:56 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\CpGs6E8RhXj
[2012/01/08 23:55:46 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\fdKgZhwUeItPyAu
[2012/01/08 23:55:31 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\QKR9YwUlBzN
[2012/01/08 23:55:19 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\hrOx0c2bpGaHW7E
[2012/01/08 23:55:07 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\iDoFpGs6E8R9TwU
[2012/01/08 23:54:57 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\t7E8R9YwUlBzNc1
[2012/01/08 23:54:42 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\JHs7RqXkVlBPyAv
[2012/01/08 23:54:21 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\OBx0c1v3na
[2012/01/08 23:54:02 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\D8ThCOx0c1v3n4m
[2012/01/08 23:53:49 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\qeIrPx1v2
[2012/01/08 23:53:38 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\t3n4m6W7E8TqC
[2012/01/08 23:53:26 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\vxuSi3n4Qs
[2012/01/08 23:53:12 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\nOyAv2b3n5QdKfL
[2012/01/08 23:52:47 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\WvFG68hUIN0inQK
[2012/01/08 23:52:22 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\QGQdKRTwUIPy12
[2012/01/08 23:52:02 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\t8YwVltPci2npHQ
[2012/01/08 23:51:49 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\pBN0ipQdLTjeIzN
[2012/01/08 23:51:39 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ASoFp5Q6W8R9
[2012/01/08 23:51:29 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\waJdKfLhqUeIrOx
[2012/01/08 23:51:04 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\PgZhXjVltPyAu2
[2012/01/08 23:50:39 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\NVlBPyAiDoFp5Q
[2012/01/08 23:50:18 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\wIrOtPuSiDn4m
[2012/01/08 23:50:08 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Bc2b3n4Q6W7EgZj
[2012/01/08 23:49:58 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Z6KRTjeVO
[2012/01/08 23:49:42 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\GS2i3na6Kf9Tj
[2012/01/08 23:49:34 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\liDpGaHsKE9TqYw
[2012/01/08 23:49:09 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\kQ6KfTjCkVztAuS
[2012/01/08 23:48:44 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\PfLhXjCIrOyAuS
[2012/01/08 23:48:23 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\OZhwUeItPy1v2bp
[2012/01/08 23:48:12 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\wW7E8ZhCkVlBP
[2012/01/08 23:47:57 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\iQK9qkOP134sfTY
[2012/01/08 23:47:32 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\SLgXjCkVzNAuSiD
[2012/01/08 23:47:07 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\tUeBzNxuSi3n5Qd
[2012/01/08 23:46:46 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\zzNcuDoFG68ZUlr
[2012/01/08 23:46:35 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Y2npHsJdKg
[2012/01/08 23:46:26 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Kd8RqYwUeOt0c1v
[2012/01/08 23:46:11 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\R5W7E8RqYwVlBz0
[2012/01/08 23:46:01 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\cCkVlBx0c1v3FaH
[2012/01/08 23:45:46 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\VLgZhCUrOtPc1v3
[2012/01/08 23:45:35 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\EltuSi3n4m
[2012/01/08 23:45:16 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\SsKf9TqYwVlNx0S
[2012/01/08 23:44:51 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\jUeIrOx0v2FpGQ6
[2012/01/08 23:44:36 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\DR9TqCkBzNx0v2
[2012/01/08 23:44:21 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\n8R9TjClBzNx1v2
[2012/01/08 23:43:56 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\rjeItPyAuDoFm5Q
[2012/01/08 23:43:45 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Fz0c1v2n4
[2012/01/08 23:43:20 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\twIrNx0SiDoGa6W
[2012/01/08 23:43:05 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\XLgZjCkVlNx0SiD
[2012/01/08 23:42:50 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\CkkzONtx0ucSib3
[2012/01/08 23:42:40 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\oppnnG4aaQ6sW7
[2012/01/08 23:42:25 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\abbbD33pnG4aH6W
[2012/01/08 23:42:16 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\wIIIVrrzONtA0cS
[2012/01/08 23:42:04 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\o3ppmGG5aQJ6WKf
[2012/01/08 23:41:59 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\grrrzPPNyxA
[2012/01/08 23:41:54 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\bPNNyycA1uvD2b
[2012/01/08 23:41:39 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\bEEEK88gRZ9hXwU
[2012/01/08 23:41:34 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\eBBBtzzP0cAiDoF
[2012/01/08 23:41:28 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ymmHH55sWJ7ELgR
[2012/01/08 23:41:22 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\SWK7fEL9gTZqY
[2012/01/08 23:41:17 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\KSSS2iibD3pn4aH
[2012/01/08 23:40:58 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\zNNtxxA0ucS2bDp
[2012/01/08 23:40:50 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\l55ssQJJ7dE8
[2012/01/08 23:40:40 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\hqqhXkkUVelOtz0
[2012/01/08 23:40:25 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\w8gggqhXwk
[2012/01/08 23:40:16 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ftPci3Fa5Jd8RhX
[2012/01/08 23:39:56 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\eLTqCkrOt0ciDo
[2012/01/08 23:39:41 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\L6KE9ZjwIrOx0ci
[2012/01/08 23:39:12 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\i88ggTZqhYCkx0S
[2012/01/08 23:39:06 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\bIBrNyx0uiFn5Hd
[2012/01/08 23:39:00 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\L777ffRL9gT
[2012/01/08 23:38:55 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\zSS22ibFF3nG5
[2012/01/08 23:38:45 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\jJJ66dWWK8fL9Tq
[2012/01/08 23:38:40 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\v111uvvS2oF3mGa
[2012/01/08 23:38:34 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\On4p5sQJ7EKgR9h
[2012/01/08 23:38:19 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\CWWW7ddEL8gZqYX
[2012/01/08 23:38:02 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\AXwUCeIzNxv2bpG
[2012/01/08 23:37:56 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\WmGG5aQ6d
[2012/01/08 23:37:51 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\IPPNNyxxA1vS
[2012/01/08 23:37:41 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\RFFF4ppmG5sQ6dK
[2012/01/08 23:37:36 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\zIIBBtzzPNyA1vD
[2012/01/08 23:37:31 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\mKKK88RRZ9hXwUV
[2012/01/08 23:37:16 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\dJJdEK8gRZ9YXjU
[2012/01/08 23:37:01 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\g5sWWJ7dL8RYkeO
[2012/01/08 23:36:56 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\y00yycAA1iv
[2012/01/08 23:36:51 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\XZqqhhYXwkUVe
[2012/01/08 23:36:41 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\JBttxxP0ycS1vDo
[2012/01/08 23:36:36 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\V8ggTTZqhYCwUVl
[2012/01/08 23:36:31 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\FooonGG4a
[2012/01/08 23:36:16 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\HiibbD33on4am6s
[2012/01/08 23:35:56 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\OjjYYCeekIVzO
[2012/01/08 23:35:51 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\naQQHH6WK7fL9gZ
[2012/01/08 23:35:46 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\TxxxA00ucS2bDpn
[2012/01/08 23:35:41 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\xgTTTXqjYCekIrO
[2012/01/08 23:35:26 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\bRRRL99hTXqjCe
[2012/01/08 23:35:21 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\fbFF33pnG5aQ6dK
[2012/01/08 23:35:16 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\zIIIBrrzONyA0uS
[2012/01/08 23:35:01 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\uUCCCelIBrzP
[2012/01/08 23:34:46 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\oXXwwjUCelIBzPy
[2012/01/08 23:34:41 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\BGG55sQJ6dEK8R9
[2012/01/08 23:34:36 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\tNNyycAA1u
[2012/01/08 23:34:20 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\f7dd8gTTZq
[2012/01/08 23:34:00 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\yPP00uccS1iD3nG
[2012/01/08 23:33:55 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\CTZZqqjYCwkIrlN
[2012/01/08 23:33:40 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\BL9ggTZqjYCwkVl
[2012/01/08 23:33:30 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ZVVVrzzONtx0uS2
[2012/01/08 23:33:25 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\A777fRRL9
[2012/01/08 23:33:20 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\J222ibbF3pn5
[2012/01/08 23:33:05 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\E0uuvvS2ibF3pGa
[2012/01/08 23:32:55 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\m5aaQQJ6dW
[2012/01/08 23:32:31 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\R1v2pGa6W8R9TjC
[2012/01/08 23:32:07 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\d4ms6E8RhwmLN0G
[2012/01/08 23:31:44 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\aqYkVlNx0SiDoaH
[2012/01/08 23:31:28 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ZQ6KfLgXj
[2012/01/08 23:31:04 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\EfLTqUeIrOyAu2b
[2012/01/08 23:30:38 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\lzNx1v2Fp
[2012/01/08 23:30:12 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\eAuSb3n4Q6W7LgZ
[2012/01/08 23:18:06 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\yRgTXjYkVu2
[2012/01/08 23:18:06 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\VgTXjYkVru2DpGQ
[2012/01/08 23:18:06 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\SReyvGdRgXYIr
[2012/01/08 23:18:06 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\RZIvGKjz0bQKLTj
[2012/01/08 23:18:06 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\PvGdRgTXjkVu2D
[2012/01/08 23:18:06 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\OQReyvGdRgXYIru
[2012/01/08 23:18:06 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\NQReyvGdRgXYIru
[2012/01/08 23:17:53 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\sGAjHchHzRmxqHc
[2012/01/08 22:17:11 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\UdE8gRZhYwkVeOB
[2012/01/08 22:17:11 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\SJ7dE8gRZhXwUVl
[2012/01/08 22:17:11 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\rPPP0yycA1vDm5Q
[2012/01/08 22:17:11 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\rPPP0yycA1vDm5J
[2012/01/08 22:17:11 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\PXwwkUVelOBtP0c
[2012/01/08 22:17:11 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\nhYXwkUVelOBzPy
[2012/01/08 22:17:11 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\cWJ7dE8gRhXwUVl
[2012/01/08 22:17:10 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\zucibD3ona
[2012/01/08 22:17:10 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\zcibD3onGa
[2012/01/08 22:17:10 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Wx0ucibD3naHW7E
[2012/01/08 22:17:10 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\vGamHWJ7fThwVBx
[2012/01/08 22:17:10 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\unGamHWJ7EThwVB
[2012/01/08 22:17:10 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\uGamHWJ7fThwVBx
[2012/01/08 22:17:10 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\RWJ7fEThYwVBxSi
[2012/01/08 22:17:10 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\r0ucibD3o
[2012/01/08 22:17:10 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\mEThYwVBtSi3F5W
[2012/01/08 22:17:10 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\IWJ7fEThYwVBxSi
[2012/01/08 22:17:10 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\GEThYwVBtSi3F5W
[2012/01/08 22:17:10 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\fWJ7fEThYwVBxSi
[2012/01/08 22:17:10 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Ct0ucibD3naHW7E
[2012/01/08 22:17:10 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\BWJ7fEThYwVBxSi
[2012/01/08 22:14:36 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\oU3XSLP7tJl
[2012/01/08 22:14:35 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\RZRKFNyASbwekqf
[2012/01/08 22:14:35 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\kZRKFNyASbwekqf
[2012/01/08 22:14:34 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\BWrFUnhcQI5knjb
[2012/01/08 22:14:33 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Q3qSdydIF9vR0K
[2012/01/08 22:14:33 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\mRtHk3qSdydIF9v
[2012/01/08 22:14:33 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\eZRKFNyASbwekqf
[2012/01/08 22:14:33 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\AlmXudzQr
[2012/01/08 22:14:27 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\FAaXz3Ek1fr3ZP4
[2012/01/08 22:14:25 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\jz5TbLOG9Vb7CcW
[2012/01/08 22:14:24 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\kzslDK1Web7CxaT
[2012/01/08 22:14:24 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\IPslDK1Web7CxaT
[2012/01/08 22:14:20 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\KpUGIQrpXbqoq
[2012/01/08 22:14:18 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Wqs5puSV8gdhAtB
[2012/01/08 22:14:12 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\WZX8E8svb0tOR5J
[2012/01/08 22:14:12 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ie3T0WO4q1fxLPH
[2012/01/08 22:14:07 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\iqH6KJF50O
[2012/01/08 22:14:02 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\WgnmaavFt
[2012/01/08 22:13:43 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Wp5JKRYjezNAps6
[2012/01/08 22:13:42 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\rC0HYS4JLgZh
[2012/01/08 22:13:42 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\nQC0HYS4JLgZhVt
[2012/01/08 22:13:42 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\GQC0HYS4JLgZhVt
[2012/01/08 22:13:42 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\DC0HYS4JLgZ
[2012/01/08 22:13:42 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\bC0HYS4JLgZ
[2012/01/08 22:13:41 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Y08DjFhAGLb7IS7
[2012/01/08 22:13:39 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\pFNhFALbYHOWcZu
[2012/01/08 22:13:28 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\LbLbiKziEzdIiWg
[2012/01/08 22:13:20 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\AN7Vd2X3w29tgKB
[2012/01/08 22:13:13 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\bRGCvEiV7oI7NFN
[2012/01/08 22:12:20 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\n34gB0u2p
[2012/01/08 22:11:12 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\s9xk93xYsvNhJp
[2012/01/08 22:11:11 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\GttZy9QuIf3zjE3
[2012/01/08 22:11:11 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\flBZy9QuIf3zjE3
[2012/01/08 22:11:10 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\jztZy9QuIf3zjE3
[2012/01/08 22:11:09 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\CZxk93xYsvNhJp
[2012/01/08 22:11:08 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\RlBZy9QuIf3zjE3
[2012/01/08 22:11:06 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\eBGizTayUgG
[2012/01/08 22:11:04 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\IELlBZy9QuIf3zj
[2012/01/08 22:11:02 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\UjVrAD46Elt9AI9
[2012/01/08 22:11:02 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\spHsELlBZxI9pPC
[2012/01/08 22:11:02 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\kELlBZy9QuIf3z
[2012/01/08 22:10:59 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\yLTjVrAD46Elt9A
[2012/01/08 22:10:59 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\tN0pHsELlt9AI
[2012/01/08 22:10:58 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\PSaKRLTjVAp6Elt
[2012/01/08 22:10:56 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\i6fhVxSoHdZUiFs
[2012/01/08 22:10:56 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\fXjBOx0SaK
[2012/01/08 22:10:55 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\RHgrSqtcD4EYezA
[2012/01/08 22:10:54 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\IZUiFsKXBc2mJRX
[2012/01/08 22:10:52 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\WJE8ZhwCva89Xr0
[2012/01/08 22:10:47 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\dfjINcD6fjO4ETY
[2012/01/08 22:10:23 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Kx97itrjqTo6nns
[2012/01/08 22:10:05 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Local\ElevatedDiagnostics
[2012/01/08 22:09:55 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\udgacCpOXGAeLUc
[2012/01/08 22:09:48 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\qQx2leixXsP7pNw
[2012/01/08 22:09:43 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\hxiOeixXsP7p
[2012/01/08 22:08:57 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\FwcXfmnlgXJJaTv
[2012/01/08 22:07:21 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\DCx5cCcbVTkr18o
[2012/01/08 22:07:15 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\vCx5cCcbVTkr18o
[2012/01/08 22:07:12 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\eCx5cCcbVTkr18o
[2012/01/08 22:06:58 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\WYwCx5cCcbVTkr1
[2012/01/08 22:06:57 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\R39syHWuvu1
[2012/01/08 22:06:57 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\L39syHWuvu1
[2012/01/08 22:06:53 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\djlVOrSdGr3aNVy
[2012/01/08 22:06:51 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\UjlVOrSdGr3aNV
[2012/01/08 22:06:51 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\CjlVOrSdGr3aNV
[2012/01/08 22:06:13 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\JesNmam5PG4uPqb
[2012/01/08 22:06:05 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\eTR4aFOdOrYjsZ
[2012/01/08 22:06:01 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\wqTK8KnpvwGCUg9
[2012/01/08 22:05:45 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Pwn5PixlBUQBGmF
[2012/01/08 22:05:45 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\nixlBUQBGmFn
[2012/01/08 22:05:29 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\c2ElJesnpbRP
[2012/01/08 22:05:28 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\pNlCqsW5u
[2012/01/08 22:05:11 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\aRw3Pkh7EoRZkmp
[2012/01/08 22:05:06 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\sJXUVh7JFbnYloQ
[2012/01/08 22:05:06 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\qJXUVh7JFbnYloQ
[2012/01/08 22:04:55 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ZzuRYSBqR
[2012/01/08 22:04:27 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\F0kL4itTdFAIZW3
[2012/01/08 22:04:17 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\f95ve6OqHc
[2012/01/08 22:04:15 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\UfXUgRa4ubsOvD5
[2012/01/08 22:04:15 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\EXUgRa4ubsOvD5E
[2012/01/08 22:04:12 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Szx33rs6Rh773DN
[2012/01/08 22:04:12 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\hop5BmhXIvuylUw
[2012/01/08 22:04:12 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Cpkv3Hhssb1BvhI
[2012/01/08 22:04:11 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\zH0EP7yfSCarHOs
[2012/01/08 22:04:10 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\zR3t7iZ1R2w3BWx
[2012/01/08 22:04:10 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ViZ1R2w3B
[2012/01/08 22:04:10 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\tSizlg9CmWXlt
[2012/01/08 22:04:10 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\DXa0w4t7tsPKu93
[2012/01/08 22:04:07 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\WL2Z6yRpNT5AqHc
[2012/01/08 22:04:00 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\luZGUFV5t6NK
[2012/01/08 22:03:59 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\S5NLpIHNLydcg
[2012/01/08 22:03:58 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\bcZblWvqQNfiqv
[2012/01/08 22:03:57 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Ty9prW2Yn
[2012/01/08 22:03:56 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\bxWNHrHP8DUJATG
[2012/01/08 22:03:49 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\sA90ftQwDwDwnXF
[2012/01/08 22:03:48 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ZRyfyHrGj1h1hD9
[2012/01/08 22:03:39 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\rgul3X2gSZ1g1gc
[2012/01/08 22:03:34 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\dF90WrnqSJOH
[2012/01/08 22:03:27 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\pLzFh1shzbWUuGg
[2012/01/08 22:03:26 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\wVfikmlnh1shz
[2012/01/08 22:03:26 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\umlnh1shz
[2012/01/08 22:03:25 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ueEor8ih1QU2
[2012/01/08 22:03:25 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\GYW0LzFh1s
[2012/01/08 22:03:25 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\G6mpFTL6bkdARym
[2012/01/08 22:03:24 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\NXnPiNZ2YoCzxvh
[2012/01/08 22:03:23 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\vA1cyPQGDx
[2012/01/08 22:03:15 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\sAucDQwNioH
[2012/01/08 22:03:11 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\OqP5XmPWiB0ZS
[2012/01/08 22:03:00 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\PrxDaH7jxF6
[2012/01/08 22:03:00 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\fS3QTrioa5
[2012/01/08 22:02:56 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\CwmPEpLP3qNftg
[2012/01/08 22:02:55 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\EEuImyHU0mX5C5z
[2012/01/08 22:02:52 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\B0CfyXcdUuQU6
[2012/01/08 22:02:47 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\vdJCbGQ8Ce5cRaZ
[2012/01/08 22:02:47 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\EbGQ8Ce5cRaZAHw
[2012/01/08 22:02:46 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\SdJCbGQ8Ce5cRaZ
[2012/01/08 22:02:09 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\kEWcs2tIYjCerl
[2012/01/08 22:02:06 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\RRclKHXHFbucDFn
[2012/01/08 22:02:06 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\gRclKHXHFbucDFn
[2012/01/08 22:01:52 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\L6O5YniiXDzL7l7
[2012/01/08 22:01:40 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\JvswGiPIaj4khhm
[2012/01/08 22:01:33 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\v2Rtsyaqbulj19D
[2012/01/08 22:01:27 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\egvRPGYSKimXQoN
[2012/01/08 22:01:26 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\GXudvswGiP
[2012/01/08 22:01:23 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\p08OaeGC1KU4ziE
[2012/01/08 22:01:12 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\k306VmTSqA7OKO4
[2012/01/08 22:01:07 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\SbqAdx5evI
[2012/01/08 22:01:07 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\F06VmTSqA7OK
[2012/01/08 22:01:05 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\NgP306VmTSqA7O
[2012/01/08 22:00:58 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ErVK6HaqzO4k3YN
[2012/01/08 22:00:54 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\x35aAIkjIDdDZA
[2012/01/08 22:00:52 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ZPwXYcmoR
[2012/01/08 22:00:51 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ILJd8CYQ4oFLkVn
[2012/01/08 22:00:47 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\J7EFov466oNrlOb
[2012/01/08 22:00:44 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\gzrtqCdZIthdnm6
[2012/01/08 22:00:41 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\pW7ZLgn42HKKp0B
[2012/01/08 22:00:38 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Bgy1obDOtXPDbBX
[2012/01/08 22:00:37 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\hGxczDJm1
[2012/01/08 22:00:29 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\L7vf8TgZamF
[2012/01/08 22:00:16 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\uR47IVdooOhugy1
[2012/01/08 22:00:06 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\W0pKgGi5TQ2t
[2012/01/08 22:00:06 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\QhiJB3WYjKm9l9Q
[2012/01/08 22:00:06 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\n18lSQ7FPbfm
[2012/01/08 22:00:06 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\hRNmkcadFPFL
[2012/01/08 21:59:49 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\m2gJrnj2ftdqNWD
[2012/01/08 21:59:45 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ScExJk2jt3
[2012/01/08 21:59:41 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\TgA5VpXAL
[2012/01/08 21:59:31 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ExlYdGjenvKlG
[2012/01/08 21:59:29 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\xgfrUXWpZU3A6U
[2012/01/08 21:59:29 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\slYdGjenvKl
[2012/01/08 21:59:26 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\s3bIeDvxVhtvg7X
[2012/01/08 21:59:24 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\y9xlYdGjenv
[2012/01/08 21:59:09 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\KJHs2xBgdV
[2012/01/08 21:59:08 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\S0zqqeUj6obxx
[2012/01/08 21:58:51 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\RYlwYjPxBrqE6mG
[2012/01/08 21:58:49 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\kBYlwYjPxtrqE6m
[2012/01/08 21:58:41 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\IBYlwYjPx
[2012/01/08 21:58:25 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\jy1PNzrTprgDacr
[2012/01/08 21:58:17 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\YPNzrTprgD
[2012/01/08 21:58:16 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\lgeE2a4Fb1tgpzL
[2012/01/08 21:58:12 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\yw9FpSXIkXhf6Aw
[2012/01/08 21:57:58 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Na7fkSpV5X9sHa1
[2012/01/08 21:57:52 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\KOJwS3QKCyFea9E
[2012/01/08 21:57:46 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ha7fkSpV5
[2012/01/08 21:57:44 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\KcfiFOJwS3QKCyF
[2012/01/08 21:57:43 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\QQYAJqnj4g2TB3s
[2012/01/08 21:57:43 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\jNyx9ZokiWLkzbW
[2012/01/08 21:57:41 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\AFOJwS3QK
[2012/01/08 21:57:37 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\LAQYAJqnj4g2TB
[2012/01/08 21:57:24 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\WsKNKrmKOuU9
[2012/01/08 21:56:32 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\u6SOU8a1l
[2012/01/08 21:56:17 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\zEalW30BXWbyzTW
[2012/01/08 21:56:15 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\NK8EalW30BX
[2012/01/08 21:56:13 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\gK8EalW30BX
[2012/01/08 21:55:51 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Z1nWPXbgtq2f072
[2012/01/08 21:55:19 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Pga3xYQvlfGDxBe
[2012/01/08 21:55:13 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\NtjmDVK2ed2Cf6
[2012/01/08 21:55:12 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\l5NLDtCJAUJAXQc
[2012/01/08 21:55:08 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\qeRFrf2CW
[2012/01/08 21:55:08 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\jctrqJDId2kd0
[2012/01/08 21:55:07 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\A4GpStkYEacw5N9
[2012/01/08 21:55:06 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\kDa4GpStkYEacw5
[2012/01/08 21:54:56 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\hkjhKHsa5KKf
[2012/01/08 21:54:40 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\eTWnSOUfapi0xt
[2012/01/08 21:53:58 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\odK8fRL9hXjCkBz
[2012/01/08 21:53:42 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\yZvIdIuiKLTOrnY
[2012/01/08 21:53:42 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\YqvIdIuiKLTOrnY
[2012/01/08 21:53:42 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\xqvIdIu2KEgIT8g
[2012/01/08 21:53:42 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\WqvIdIuiKLTOrnY
[2012/01/08 21:53:42 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\tqvIdIu2KEgIT8g
[2012/01/08 21:53:42 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\sqvIdIuiKLTOrnY
[2012/01/08 21:53:42 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\qqvIdIu2KEgIT8g
[2012/01/08 21:53:42 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\pRvIdIuiKLTOrnY
[2012/01/08 21:53:42 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\PqvIdIu2KEgIT8g
[2012/01/08 21:53:42 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\oqvIdIu2KEgIT8
[2012/01/08 21:53:42 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\nqvIdIu2KEgIT8g
[2012/01/08 21:53:42 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\LqvIdIu2KEgIT8
[2012/01/08 21:53:42 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\JqvIdIuiKLTOrnY
[2012/01/08 21:53:42 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\JqvIdBuiKLTOrnY
[2012/01/08 21:53:42 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\iqvIdBuiKLTOrnY
[2012/01/08 21:53:42 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ihvIdIuiKLTOrnY
[2012/01/08 21:53:42 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ihvIdBuiKLTOrnY
[2012/01/08 21:53:42 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\hqvIdIuiKLTOrnY
[2012/01/08 21:53:42 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\FqvIdIu2KEgIT8g
[2012/01/08 21:53:41 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\VqvIdIuiKLTO
[2012/01/08 21:53:41 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\EqvIdIu2KEgIT
[2012/01/08 21:53:40 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\wqvIdIuiKL
[2012/01/08 21:53:40 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\VqvIdIu2KEgI
[2012/01/08 21:53:40 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\UqvIdIuiKLT
[2012/01/08 21:53:40 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\kqvIdIuiKLT
[2012/01/08 21:53:40 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\dqvIdIu2KEgI
[2012/01/08 21:53:35 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Z0ibD3paQ6sKfLg
[2012/01/08 21:53:35 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\yib3paQ6sKfLgTq
[2012/01/08 21:53:35 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\VD3paQ6sKfELTqY
[2012/01/08 21:53:35 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\v0ibD3paQ6
[2012/01/08 21:53:35 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\uY0ibD3pa
[2012/01/08 21:53:35 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\taQ66sKfEL
[2012/01/08 21:53:35 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\R0ibD3paQ6sKfL
[2012/01/08 21:53:35 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\p0ibD3paQ6sKfLg
[2012/01/08 21:53:35 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\naQ66sKfE
[2012/01/08 21:53:35 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\m0ibD3paQ6sKfLg
[2012/01/08 21:53:35 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\LGaQ6ssKfELgTqY
[2012/01/08 21:53:35 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\l0ibD3paQ6sK
[2012/01/08 21:53:35 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\I0ibD3paQ6sK
[2012/01/08 21:53:35 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Hib3paQ6sKfLgTq
[2012/01/08 21:53:35 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\H0ibD3paQ6sKfLg
[2012/01/08 21:53:35 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\g0ibD3paQ6sKfL
[2012/01/08 21:53:35 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\FaQ66sKfE
[2012/01/08 21:53:35 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\EpaQ6ssKfELgTqY
[2012/01/08 21:53:35 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\e0ibD3paQ6s
[2012/01/08 21:53:35 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\D0ibD3paQ6s
[2012/01/08 21:53:35 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\B0ibD3paQ6sKf
[2012/01/08 21:50:39 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\BG4aQH6sW7E9TqY
[2012/01/08 21:50:31 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\eEL8gRZqhXkVlBz
[2012/01/08 21:50:23 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\llIBrzPNyAuSoFp
[2012/01/08 21:50:14 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Ib36fTXjYeIrOtA
[2012/01/08 21:50:01 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\bi3nmHJf8qkrBc1
[2012/01/08 21:49:47 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\qgRZYB0ciDoFaHs
[2012/01/08 21:49:38 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\nVelOBtzPyAiDoF
[2012/01/08 21:49:18 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\D13678ZCVBSFdql
[2012/01/08 21:49:17 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\m7Tkxb4W9Yktu13
[2012/01/08 21:49:17 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\frn7Tkxb4W9Yk
[2012/01/08 21:49:13 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\JJj0Qju6jcfOmYi
[2012/01/08 21:49:11 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\CmXvKtpTA5TxGT
[2012/01/08 21:49:09 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\O9NHeDLl4wiEtmX
[2012/01/08 21:49:00 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\dTcEcEyLyKyE
[2012/01/08 21:48:22 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\L578hwPADF5Jf9w
[2012/01/08 21:48:19 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\lbnG46sfTrNui46
[2012/01/08 21:48:19 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\g3nG46sfTrNui46
[2012/01/08 21:48:18 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\WA0uvS2ib3nH
[2012/01/08 21:48:18 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\sA0uvS2ib3n
[2012/01/08 21:48:18 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\RH6dWK7LTqY
[2012/01/08 21:48:18 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\rA0uvS2ib3nHdKL
[2012/01/08 21:48:18 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\KA0uvS2ib3nHd
[2012/01/08 21:48:18 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\IH6dWK7LT
[2012/01/08 21:48:18 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\iA0uvS2ib3nHd
[2012/01/08 21:48:18 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\fH6dWK7LTq
[2012/01/08 21:48:18 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\DA0uvS2ib3nHdK
[2012/01/08 21:48:18 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\CA0uvS2ib3n
[2012/01/08 21:48:18 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\BH6dWK7LTq
[2012/01/08 21:48:18 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\bA0uvS2ib3nHdK
[2012/01/08 21:46:38 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\AsJ9kBPlwqTj8E7
[2012/01/08 21:46:24 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\fUeBeeCYOzBey2D
[2012/01/08 21:46:20 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\nBeeCYOBe
[2012/01/08 21:46:12 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Bm9tGRB3j1dloK7
[2012/01/08 21:46:10 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\FB49A6ln9
[2012/01/08 21:45:53 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\fBAaWgYwUA
[2012/01/08 21:45:52 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\rkybGWTUcbKLYVl
[2012/01/08 21:45:50 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\GvbWTeNmH7
[2012/01/08 21:45:46 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\tis8Xzb7gjk0oW9
[2012/01/08 21:45:36 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\SoaJfrA1vU
[2012/01/08 21:45:29 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\YyzCTwUYhRf67
[2012/01/08 21:45:25 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Qa4n4pGbut1
[2012/01/08 21:45:23 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\v889fRELdg
[2012/01/08 21:45:17 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\XwLWWG4whKWjhRZ
[2012/01/08 21:45:14 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\iLWWG4whKW
[2012/01/08 21:45:07 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\uvuS1yOeZ
[2012/01/08 21:45:06 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\PzkYgLRwUjCwCZ8
[2012/01/08 21:45:06 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\pGbS1nb33pGv
[2012/01/08 21:45:04 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\E8EEQGi0tOz1vuS
[2012/01/08 21:44:56 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\L96itCqgK5FbDcP
[2012/01/08 21:44:54 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\dVWiU7bxC9anSzB
[2012/01/08 21:44:49 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\DmxXQxTnrE2e96b
[2012/01/08 21:44:47 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\RqmSeKol8pOLDkJ
[2012/01/08 21:44:38 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ptTWbck7D
[2012/01/08 21:44:35 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\IcX6yq5tT
[2012/01/08 21:44:30 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\rqat9okaVszZ3W2
[2012/01/08 21:44:27 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\mP819GzRbVWx708
[2012/01/08 21:44:23 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\vr6rHlQPE2
[2012/01/08 21:44:23 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\pFjFC4r6rHlQPE2
[2012/01/08 21:44:21 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\WeGl5I5zWPfx
[2012/01/08 21:44:17 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\g6xdchpBKSYQ0ZD
[2012/01/08 21:44:13 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\TmzfoUGVWuTvYFI
[2012/01/08 21:44:07 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\jGV5tR4yX5ORb
[2012/01/08 21:44:03 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\lw4eaNLijGV5tR4
[2012/01/08 21:39:34 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\rmprS1JgWtmTVyn
[2012/01/08 21:39:34 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\AtGfR4ZYvp2kbfC
[2012/01/08 21:39:33 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\WytWnhBz9rBGW4r
[2012/01/08 21:39:30 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\jAtNFvEakEO3Sk0
[2012/01/08 21:39:25 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\qycssxtGf
[2012/01/08 21:38:48 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\EUC0uvS2iFpGaHd
[2012/01/08 21:38:46 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\TNYyOHZP0c1v2n4
[2012/01/08 21:38:40 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\rrNtxP0uc1b3n4m
[2012/01/08 21:38:40 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\FrNtxP0uc1b3n4m
[2012/01/08 21:38:37 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\jERX2kRIBzNc1v2
[2012/01/08 21:37:42 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\WpihFGWgUrOtPyS
[2012/01/08 21:37:42 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\AwmQfEUVrOtPySi
[2012/01/08 21:37:26 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\rNbF3pnG5Q6W
[2012/01/08 21:36:44 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\OD7X2IPhU33QDve
[2012/01/08 21:36:38 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\spEqAAxlZcdFw7n
[2012/01/08 21:36:34 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\KT4kSpRd7nOdj9i
[2012/01/08 21:36:34 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ET4kSpRd7nOdj9i
[2012/01/08 21:35:50 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\v75tl8ZjhQeHwKh
[2012/01/08 21:35:50 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\e75tl8ZjhQeHwKh
[2012/01/08 21:34:51 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\OUXEj1PAPxazVq7
[2012/01/08 21:34:21 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Y1UL4B9LwxKvyOc
[2012/01/08 21:34:13 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\sbk5Deg4B9LwxK
[2012/01/08 21:34:11 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\rGOEvY41UL4B9Lw
[2012/01/08 21:34:09 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\QemzRbk5DkqHzXT
[2012/01/08 21:34:09 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\F3VJ0ZDzhsDX5Gs
[2012/01/08 21:34:08 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\TemzRbk5DkqHzXT
[2012/01/08 21:34:08 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\aemzRbk5DkqHzXT
[2012/01/08 21:34:07 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\c3ksc93UEmuUsxk

========== Files - Modified Within 30 Days ==========

[2012/01/19 21:54:42 | 000,726,368 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2012/01/19 21:54:42 | 000,624,130 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2012/01/19 21:54:42 | 000,106,506 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2012/01/19 21:51:25 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\maria\Desktop\OTL.exe
[2012/01/19 21:49:22 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012/01/19 21:49:15 | 2211,602,432 | -HS- | M] () -- C:\hiberfil.sys
[2012/01/19 21:34:53 | 000,000,027 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\hosts
[2012/01/19 20:55:32 | 004,388,721 | R--- | M] (Swearware) -- C:\Users\maria\Desktop\ComboFix.exe
[2012/01/19 19:59:00 | 000,000,896 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012/01/19 18:26:36 | 002,602,302 | ---- | M] () -- C:\Windows\SysNative\drivers\NISx64\1108000.005\Cat.DB
[2012/01/19 18:04:30 | 000,023,248 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012/01/19 18:04:30 | 000,023,248 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012/01/19 17:58:00 | 000,000,892 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012/01/16 18:13:11 | 000,000,113 | ---- | M] () -- C:\Users\maria\Desktop\FACEBOOK.url
[2012/01/11 23:09:41 | 000,348,496 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2012/01/11 23:09:07 | 352,930,133 | ---- | M] () -- C:\Windows\MEMORY.DMP
[2012/01/10 21:10:37 | 000,396,071 | ---- | M] () -- C:\Users\maria\Desktop\MiniToolBox.exe
[2012/01/10 19:29:48 | 000,000,000 | ---- | M] () -- C:\Users\maria\defogger_reenable
[2012/01/09 01:36:41 | 000,001,069 | ---- | M] () -- C:\Users\Public\Desktop\HELP.lnk

========== Files Created - No Company Name ==========

[2012/01/19 18:18:42 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe
[2012/01/19 18:18:42 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe
[2012/01/19 18:18:42 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe
[2012/01/19 18:18:42 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe
[2012/01/19 18:18:42 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe
[2012/01/16 18:13:11 | 000,000,113 | ---- | C] () -- C:\Users\maria\Desktop\FACEBOOK.url
[2012/01/10 21:10:35 | 000,396,071 | ---- | C] () -- C:\Users\maria\Desktop\MiniToolBox.exe
[2012/01/10 19:29:48 | 000,000,000 | ---- | C] () -- C:\Users\maria\defogger_reenable
[2012/01/09 01:36:41 | 000,001,069 | ---- | C] () -- C:\Users\Public\Desktop\HELP.lnk
[2010/01/14 03:33:10 | 000,000,268 | ---- | C] () -- C:\Windows\SysWow64\RStoneLog2.ini
[2010/01/14 03:33:10 | 000,000,209 | ---- | C] () -- C:\Windows\SysWow64\RStoneLog.ini
[2009/10/30 20:58:58 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2009/09/29 17:25:16 | 000,013,312 | ---- | C] () -- C:\Windows\LPRES.DLL
[2009/07/14 00:38:36 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2009/07/13 21:35:51 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT
[2009/07/13 21:34:42 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat
[2009/07/13 19:10:29 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2009/07/13 18:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
[2009/07/13 16:59:36 | 001,498,564 | ---- | C] () -- C:\Windows\SysWow64\igkrng400.bin
[2009/07/13 16:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
[2009/06/10 16:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat

========== Alternate Data Streams ==========

@Alternate Data Stream - 127 bytes -> C:\ProgramData\Temp:0B4227B4

< End of report >

#15 gringo_pr

gringo_pr

    Bleepin Gringo


  • Malware Response Team
  • 136,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto rico
  • Local time:06:18 PM

Posted 19 January 2012 - 10:46 PM

Hello

Run this custom script and when it is complete I need to know how the computer is doing

Run OTL Script

  • Double-click OTL.exe to start the program.
  • Copy and Paste the following code into the Posted Image textbox. Do not include the word Code
    :OTL
    [2012/01/09 01:25:29 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\v8RTeIP13dhXr
    [2012/01/09 01:25:28 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Wpm8RZYXjNcm
    [2012/01/09 01:25:28 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\TQ8RTeIP1
    [2012/01/09 01:25:28 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\TgRZYXjzyAmJ8Te
    [2012/01/09 01:25:28 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\spm8RZYXjNc
    [2012/01/09 01:25:28 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ipm8RZYXjNcmJ
    [2012/01/09 01:25:27 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\wOPci3n4HsRhXke
    [2012/01/09 01:25:27 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\uRhXkeOt0ciDop8
    [2012/01/09 01:25:27 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\kOPci3n4HsRhXke
    [2012/01/09 01:25:27 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\IOPci3n4HsRhXke
    [2012/01/09 01:25:26 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\VOA2bCVON4HJ
    [2012/01/09 01:25:26 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\rkVON4H6W
    [2012/01/09 01:25:26 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\NCOvnWYOA2bCVO4
    [2012/01/09 01:25:26 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\mVON4H6W7E8rBPc
    [2012/01/09 01:25:25 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\LEtsT1oGjrAb6Lr
    [2012/01/09 01:25:25 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\JCOvnWYOA
    [2012/01/09 01:25:25 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\hIGT1oGjrAb6LrA
    [2012/01/09 01:25:24 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\GUQtLS8qihDKr1o
    [2012/01/09 01:25:22 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\rsieRpyUQtLS
    [2012/01/09 01:25:15 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ziA5NL1dRqUYKm1
    [2012/01/09 01:25:15 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\OiA5NL1dRqUYKm1
    [2012/01/09 01:25:13 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ipiA5NL1dRqUY
    [2012/01/09 01:25:12 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\sDiA5NL1dRq
    [2012/01/09 01:25:12 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\RBjOkYLYZgBWcZ1
    [2012/01/09 01:25:12 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\mBjOkYLYZgBWcZ1
    [2012/01/09 01:25:12 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\la2bioiB0gDTxc3
    [2012/01/09 01:25:12 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ea2bioiB0gDTxc3
    [2012/01/09 01:25:11 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\tDcvcbcCNE1ZO
    [2012/01/09 01:25:11 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\PDcvcbcCNE1ZOA
    [2012/01/09 01:25:11 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\BBjOkYLYZgBWcZ1
    [2012/01/09 01:24:59 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\zNt1rilIVY
    [2012/01/09 01:24:59 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\VTpXSfXr24sGWpo
    [2012/01/09 01:24:57 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\zTpXSfXr24sGWpo
    [2012/01/09 01:24:56 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\tTpXSfXr24sGWpo
    [2012/01/09 01:24:54 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\sJufAWYISaH6i5
    [2012/01/09 01:24:52 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ZTpXSfXr24sG
    [2012/01/09 01:24:27 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Uw9Q1es0L18
    [2012/01/09 01:24:26 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Cw9Q1es0L18
    [2012/01/09 01:23:25 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\pLBbJj1fVvaZIuW
    [2012/01/09 01:23:25 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ffliJj1fVvaZIuW
    [2012/01/09 01:20:26 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\W2qFWqNDy
    [2012/01/09 01:20:21 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ShfqV24Kqf
    [2012/01/09 01:20:19 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\HYBjrA2pJ86RqrD
    [2012/01/09 01:20:16 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\mYwkIVrlOtPuYkl
    [2012/01/09 01:20:14 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\jvSibF3pna6W7R4
    [2012/01/09 01:20:13 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\bXTuS1bnHfd
    [2012/01/09 01:20:12 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\RuS1bnHJVBKgZh
    [2012/01/09 01:20:12 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\KoCyFfTuSb4WBBK
    [2012/01/09 01:20:12 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ibexFRTuSb4WBBK
    [2012/01/09 01:20:12 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\fK8gRZhYweItP
    [2012/01/09 01:20:10 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ECybfTuS1D
    [2012/01/09 01:20:08 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\wygRZhYXUeItPys
    [2012/01/09 01:20:08 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\vK41BXkVzx24sJ5
    [2012/01/09 01:20:08 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\lX7kVzxS3jUw
    [2012/01/09 01:20:07 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\zWHgRZhYXUlBzNc
    [2012/01/09 01:20:07 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\fpjkY8gRZhYwe
    [2012/01/09 01:20:07 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\fpCUX8gRZhYwe
    [2012/01/09 01:20:07 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\fOYkVzxS3jUw8Rh
    [2012/01/09 01:20:07 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\fnCUX8gRZhYwe
    [2012/01/09 01:20:06 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\vU841rqkVNuD6
    [2012/01/09 01:20:05 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ySxUK41BXkzxSn
    [2012/01/09 01:20:04 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\LPlX7oNkgkz
    [2012/01/09 01:20:02 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\YeIrxvS2in3cxVg
    [2012/01/09 01:20:00 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\C5ulWCIzxvSin3
    [2012/01/09 01:19:59 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\wNqCIzxvSi
    [2012/01/09 01:19:56 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Y3VKNDoG4H6W7Eg
    [2012/01/09 01:19:56 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\lgc3oG4am6W7Egh
    [2012/01/09 01:19:53 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\LTZqjYCwkVrtxu
    [2012/01/09 01:19:51 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\QbbbF3pnGaQ6KfL
    [2012/01/09 01:19:50 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\QbbFF3pnGaQ6KfL
    [2012/01/09 01:19:50 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\JbbFF3pnG
    [2012/01/09 01:19:49 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\riFGaQdWK
    [2012/01/09 01:19:49 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ReIBrzONyAuiFG
    [2012/01/09 01:19:49 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\nNtxA0u2ibgVSag
    [2012/01/09 01:19:49 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\LeIBrzONyAuiFG
    [2012/01/09 01:19:49 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Azi33pnG5QH6
    [2012/01/09 01:19:46 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\g6dWK8fR9TqeIrO
    [2012/01/09 01:19:45 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ShTXqjeIBz
    [2012/01/09 01:19:44 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\S9hTXqjeIr
    [2012/01/09 01:19:44 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\S9hTXqjCeI
    [2012/01/09 01:19:44 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\r5aQJ6dWKf9TqeI
    [2012/01/09 01:19:44 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\fCeIBrzONx0iF
    [2012/01/09 01:19:43 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Z8gRZ9hYXjVItPy
    [2012/01/09 01:19:43 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ytzPNycA1vo
    [2012/01/09 01:19:43 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\yjUCelIBrPyAuSo
    [2012/01/09 01:19:43 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\x1uvS2obFpG
    [2012/01/09 01:19:43 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\TKgRZ9hYXjVItPy
    [2012/01/09 01:19:43 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\sF45sQJ7d8R9YwU
    [2012/01/09 01:19:43 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\qNycA1uvDoFp
    [2012/01/09 01:19:43 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\QgRZ9hYXwUeItPy
    [2012/01/09 01:19:43 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\CF45sQJ7d8R9YwU
    [2012/01/09 01:19:43 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\agRZ9hYXwUeItPy
    [2012/01/09 01:19:42 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\W45sQJ7dK
    [2012/01/09 01:19:42 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\bsQJ7dK8gZh
    [2012/01/09 01:07:25 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\IduZcENfPHliKIS
    [2012/01/09 01:07:23 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\dOEPJr6NHj39
    [2012/01/09 01:07:16 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\B3BYd30YbCHzQxg
    [2012/01/09 01:07:07 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\cU6mQaaouB9muIZ
    [2012/01/09 01:07:03 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\kzU6mQaaouB9muI
    [2012/01/09 01:06:53 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\LFyCLp0VRE5NOPz
    [2012/01/09 01:06:50 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\fyj74xI8JptkV
    [2012/01/09 01:06:38 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\qKriWlpUpjmzhGt
    [2012/01/09 01:06:33 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\zZPGLr4hoTiUJ
    [2012/01/09 01:06:31 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\H28jViWjvQZSdNd
    [2012/01/09 01:06:27 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\g6kAdgecHYAG90Q
    [2012/01/09 01:06:16 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\QXNmZNpXxsj2RPW
    [2012/01/09 01:06:14 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\fYAQYu7ImX
    [2012/01/09 01:06:09 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\bEw1dwiJTAah0sX
    [2012/01/09 01:06:01 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ViG67ghqYxiHRA4
    [2012/01/09 01:05:57 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\NBuFpQJL9wCku3Q
    [2012/01/09 01:05:56 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\SA4aH7ghUINca
    [2012/01/09 01:05:44 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ZPXEFAIqfmnDuAy
    [2012/01/09 01:05:44 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\aPXEFAIqfmnDuAy
    [2012/01/09 01:05:33 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\OBy2GWK99RfWHpp
    [2012/01/09 01:05:32 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\NBy2GWK99RfWHpp
    [2012/01/09 01:05:13 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\XA0uSvDDobiu0Pz
    [2012/01/09 01:05:10 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\T55aHs5sQHQn
    [2012/01/09 01:05:05 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\RCYhZfWaov1NNyx
    [2012/01/09 01:04:51 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\i8mvBC9sn1BeXff
    [2012/01/09 01:04:22 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\D1EeDTv6kWOaIHk
    [2012/01/09 01:04:14 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\UhwVOPAoHE9VPD
    [2012/01/09 00:43:41 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\mNk7FOYJp20zlX9
    [2012/01/09 00:43:31 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\XijaOEoBLozXW3P
    [2012/01/09 00:43:22 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\sIDhpBKugpzfSUa
    [2012/01/09 00:43:14 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\vifrHwx4Y4tKS
    [2012/01/09 00:43:04 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\T0sk4CHIaY1dyHI
    [2012/01/09 00:42:59 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\X0sk4CHIaY1dyHI
    [2012/01/09 00:42:58 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Q0sk4CHIaY1dyHI
    [2012/01/09 00:42:55 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\dw2EyQlpYaUGYbg
    [2012/01/09 00:42:51 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\mKInwvKNKOEAK
    [2012/01/09 00:42:46 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\DuLxJImjcgP
    [2012/01/09 00:42:19 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\vN1iGsEj1Qqxo6U
    [2012/01/09 00:42:16 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\qeBN1osEf9jrxvQ
    [2012/01/09 00:42:04 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ribGdfZkBxuD
    [2012/01/09 00:41:54 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\VPIeZgd8fTTggYj
    [2012/01/09 00:41:43 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\hK4oABeT7Hoyebx
    [2012/01/09 00:41:38 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\GAjKpyqK4oABeT7
    [2012/01/09 00:41:30 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\bJPdDZSTiYaO71
    [2012/01/09 00:41:21 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\IvRrFRz3gcJUFqc
    [2012/01/09 00:34:34 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\LUVOBtzP0c1v2n
    [2012/01/09 00:34:25 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\D9hTXwjUClB
    [2012/01/09 00:34:08 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\kTZqhYCwkVlBxSi
    [2012/01/09 00:34:01 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\iG5sQJ6wxv2b3m5
    [2012/01/09 00:33:54 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\SS1ibD3on4
    [2012/01/09 00:33:48 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\OucS2ibD3n
    [2012/01/09 00:33:43 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\oIBrzONyx0v2b3n
    [2012/01/09 00:33:37 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\fTXqjUCekBzNx0v
    [2012/01/09 00:33:31 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\yIBtzPNyc1v
    [2012/01/09 00:33:26 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\BBtzP0ycAiDoF
    [2012/01/09 00:33:20 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\SamH5sWJ7E
    [2012/01/09 00:33:15 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\PP0ucS1ib3n4m6W
    [2012/01/09 00:33:08 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\XG5aQJ6dW8R9TqU
    [2012/01/09 00:32:57 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\o8RZqtPci2FpHsJ
    [2012/01/09 00:32:47 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\rzP0ycA1i
    [2012/01/09 00:32:35 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\IYCwkIVrl
    [2012/01/09 00:32:29 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\azONyxA0uSiFpGa
    [2012/01/09 00:32:23 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\v1uvD2obFpGsJ
    [2012/01/09 00:32:17 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\OnF4amH5sJdLgZh
    [2012/01/09 00:32:11 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\X6sWK7fELgZjCkV
    [2012/01/09 00:32:05 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\vL9hTXqjUe
    [2012/01/09 00:31:59 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\OjUCelIBrPyAuSo
    [2012/01/09 00:31:52 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\kWJ7fEL8gZhCkVl
    [2012/01/09 00:31:46 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\LgTXqjYCeIrOtA
    [2012/01/09 00:31:39 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\KH5sQJ7dE8R9YwU
    [2012/01/09 00:31:32 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\m0ucS1ibDoGaHsJ
    [2012/01/09 00:31:26 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\eF3pnG5aQ6W
    [2012/01/09 00:31:19 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\PBtzP0ycAiD
    [2012/01/09 00:31:12 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\l9gTXqjYCkVz
    [2012/01/09 00:31:06 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\QIrzPNyxAuSoFpG
    [2012/01/09 00:31:00 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\uzPNycA1u2b4m5Q
    [2012/01/09 00:30:54 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\WVlONtxP01DoGaH
    [2012/01/09 00:30:47 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\jkIBrzONyA
    [2012/01/09 00:30:41 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\oonF4pmH5Q7E8R
    [2012/01/09 00:30:31 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\pF4pmH5sQ
    [2012/01/09 00:30:25 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\QycS1ivvD3oF4mH
    [2012/01/09 00:30:19 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\fgTZqjCwkVlNx
    [2012/01/09 00:29:58 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\WqjUCekIBzNx0v2
    [2012/01/09 00:29:52 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\FBtNycA1v
    [2012/01/09 00:29:42 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\uhYCwOx0cDn4m5W
    [2012/01/09 00:29:25 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\h2ibD3pnGaHsKfL
    [2012/01/09 00:29:15 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\s6dWK7fRLgX
    [2012/01/09 00:29:01 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\fadKhXCkBAv2Fn5
    [2012/01/09 00:28:50 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ahXqjUCkIr
    [2012/01/09 00:28:28 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\QamH6sWJ7E8TqYw
    [2012/01/09 00:28:22 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Lyx0vS2ib3n5QWf
    [2012/01/09 00:28:15 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\GvD2obF4pGsJd
    [2012/01/09 00:28:09 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\w4amH5sWJdLgZhX
    [2012/01/09 00:28:03 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\RK7fEL9gTqYwIrO
    [2012/01/09 00:27:56 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\s2obF4pmGsJdKfZ
    [2012/01/09 00:27:50 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\bmH5sQJ7dKg
    [2012/01/09 00:27:43 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\cuS2ibD3pnG4
    [2012/01/09 00:27:36 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\twjUVelIBzNc1
    [2012/01/09 00:27:30 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\jOBtxP0yc1v3n4m
    [2012/01/09 00:27:23 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\g9gTXqjYCkBzNx0
    [2012/01/09 00:27:17 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\QUCelIBrzNx1v2b
    [2012/01/09 00:27:11 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\DtzP0ycA1v2
    [2012/01/09 00:27:05 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\g1ibD3onHsJfLgq
    [2012/01/09 00:26:59 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\QnG5aQH6dKfLgX
    [2012/01/09 00:26:53 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\z8fRhTXwje
    [2012/01/09 00:26:47 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\hZ9hYXwjUeItPyA
    [2012/01/09 00:26:39 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\zIBrzONyx0
    [2012/01/09 00:26:33 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\YycA1uvD2b4m5Q6
    [2012/01/09 00:26:27 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\o3onF4amHsJdLg
    [2012/01/09 00:26:21 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\xQH6sWK7fLgZjCk
    [2012/01/09 00:26:15 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\CL9gTXqjYeIrOtA
    [2012/01/09 00:26:09 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\oXwjUCelIrP
    [2012/01/09 00:26:03 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\xlOBtzP0AiDoFpH
    [2012/01/09 00:25:57 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\VucS1ibD3n4m6W7
    [2012/01/09 00:25:51 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\pF3pnG5aQ
    [2012/01/09 00:25:45 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\xaQJ6dWK8R9TqUe
    [2012/01/09 00:25:39 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\V8gRZ9hYXjVl
    [2012/01/09 00:25:33 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\pYCwkUVrlBx0c1v
    [2012/01/09 00:25:27 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\RYCekIVrzNx
    [2012/01/09 00:25:21 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\bhTXwjUCeIrPyA
    [2012/01/09 00:25:15 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\fmH5sQJ7dK
    [2012/01/09 00:25:10 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\yqqhhYXwkUelOtP
    [2012/01/09 00:25:04 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\TWJJJffLTZqYwUV
    [2012/01/09 00:24:59 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\lEL9gTZqjCkVlNx
    [2012/01/09 00:24:54 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\eA0ucS2ib3n4Q6W
    [2012/01/09 00:24:48 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\xWK7fRL9gXjCkV
    [2012/01/09 00:24:36 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\OsQJ7dEghVIzy1D
    [2012/01/09 00:24:23 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\A5Qd8RhwClrPy1v
    [2012/01/09 00:24:10 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\mTZqhYCwkV
    [2012/01/09 00:23:58 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Gpm5QE8ZTe
    [2012/01/09 00:23:46 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ZaQH6sKEgqCkrNP
    [2012/01/09 00:23:37 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\RYkVOtPyi3Fa5Wd
    [2012/01/09 00:23:27 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\QPu1Do4mJEZYwV
    [2012/01/09 00:23:06 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\nvi35HKR9jkVNSp
    [2012/01/09 00:22:54 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\IHWd8hwUlB2pQg9
    [2012/01/09 00:22:41 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\rGQ6WfLhqUkBzyA
    [2012/01/09 00:22:28 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\uui3n4Hs7E9ZYkV
    [2012/01/09 00:22:16 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Q7EgZhwVltP
    [2012/01/09 00:22:04 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\uNxu1Do4ms7LgZh
    [2012/01/09 00:21:52 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\lDbp5QdKR9XUeIz
    [2012/01/09 00:21:41 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Axy1Do4ms7E8Rhw
    [2012/01/09 00:21:26 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\KrtPy1vo4msJd8Z
    [2012/01/09 00:21:01 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Hci3GmsJEgqCUlB
    [2012/01/09 00:20:40 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\jp5Qd8LTqe
    [2012/01/09 00:20:28 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\R7ERqXkeBPy
    [2012/01/09 00:20:12 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\SNAubG6fgC
    [2012/01/09 00:19:50 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\u8RhwVlBPy1Dbp5
    [2012/01/09 00:19:38 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\QNAcDnaKEgZYkrN
    [2012/01/09 00:19:26 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\HQd8RhwClrPxuS
    [2012/01/09 00:19:14 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\XwIlNxu1boGmsJE
    [2012/01/09 00:19:02 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\WzxuSb3GQ6Kf9XU
    [2012/01/09 00:18:50 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\qna6WfLgqYkVOty
    [2012/01/09 00:18:39 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\c5Hd7R9Tj
    [2012/01/09 00:18:24 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\KFn5HWfLTqCIzNA
    [2012/01/09 00:18:04 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\xUeBPy1So3G
    [2012/01/09 00:17:44 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\L5JEf9XUlrNxu2F
    [2012/01/09 00:17:32 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\agjCkrOx0SiDn4m
    [2012/01/09 00:17:19 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\llBPy1So3
    [2012/01/09 00:17:08 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\uboGm6WfLTqY
    [2012/01/09 00:16:56 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\tFp5HW7LgqCkrNx
    [2012/01/09 00:16:44 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\hOxy1Dn45JE8ZhU
    [2012/01/09 00:16:32 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Sf9XUkrNASbna67
    [2012/01/09 00:16:20 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\sYUeBPciDn4
    [2012/01/09 00:16:08 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\jOxuSbp5QdKRgqC
    [2012/01/09 00:15:56 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\t4msJEg9YjVIzy1
    [2012/01/09 00:15:44 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\EgqCkrNxuSb3GQs
    [2012/01/09 00:15:32 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ABPcDnHQ8
    [2012/01/09 00:15:20 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\p3n4HsKEgZjC
    [2012/01/09 00:15:09 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\FSo3maJW8RhX
    [2012/01/09 00:14:54 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ZyubpGa6Kf9TqCI
    [2012/01/09 00:14:44 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\vGs6E8ZhwU
    [2012/01/09 00:14:19 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Ag9XUeItN
    [2012/01/09 00:13:58 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\zTqCklNPu1
    [2012/01/09 00:13:46 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\WzNAuo3GQ68L
    [2012/01/09 00:13:34 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\A3Gm6JE8ZhCUrOx
    [2012/01/09 00:13:22 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\WCBzNAvo3
    [2012/01/09 00:13:11 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\lEg9XUltNAvo4GQ
    [2012/01/09 00:12:56 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Lms7LRhwVOzy1Dn
    [2012/01/09 00:12:31 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Wf8TqCkrOt0c1Do
    [2012/01/09 00:12:15 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\BmH6sWJ7fLgZh
    [2012/01/09 00:12:09 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\QfRL9TXqjCkVzNx
    [2012/01/09 00:12:03 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\DXwwjUUCelrzPyA
    [2012/01/09 00:11:57 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\hOOOBttzPycA
    [2012/01/09 00:11:51 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\WuuccS1iib3on4m
    [2012/01/09 00:11:45 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\DD33ppnG4aQsK7
    [2012/01/09 00:11:40 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\LVVrrzOONtA0uS2
    [2012/01/09 00:11:35 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\PK77ffRL9gTXqYe
    [2012/01/09 00:11:30 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\H222ibbF3pn5aQ6
    [2012/01/09 00:11:25 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\YCeeekIBrz
    [2012/01/09 00:11:05 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\n55aaQJ66WK8fLh
    [2012/01/09 00:11:00 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\TyyyxAA1u
    [2012/01/09 00:10:45 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ktzzNycAA1vD2b4
    [2012/01/09 00:10:39 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\L111ivvD2on
    [2012/01/09 00:10:33 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ynnGG4aamHsWJfE
    [2012/01/09 00:10:27 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\kddW7fRRL9gXqY
    [2012/01/09 00:10:21 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ZZZ9hTXwj
    [2012/01/09 00:10:15 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ukUUVVelOBtz0yA
    [2012/01/09 00:10:05 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\eAvD2onF4pmHsQ7
    [2012/01/09 00:09:50 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\tPP00yccS1iD3n4
    [2012/01/09 00:09:44 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\jiibbD33pn
    [2012/01/09 00:09:38 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\EG55aaQH6dWKfR9
    [2012/01/09 00:09:32 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\yEEEK88fRZ9TXj
    [2012/01/09 00:09:26 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\kqqhhYXwwkVelBz
    [2012/01/09 00:09:20 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\LVVVrllONtxPuc1
    [2012/01/09 00:09:14 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\yxxA00uvS2i
    [2012/01/09 00:09:03 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ZHH55sQQJ7dK8RZ
    [2012/01/09 00:08:56 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\uEEEgqhCw
    [2012/01/09 00:08:50 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\lqqqekIrzNtAciD
    [2012/01/09 00:08:45 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\n55aaQHH6dW7fLg
    [2012/01/09 00:08:40 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\gNyyxxA0uvS2bFp
    [2012/01/09 00:08:35 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\x99ggTXXqjY
    [2012/01/09 00:08:30 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\QpppnnG5aQH6WK
    [2012/01/09 00:08:15 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\foobbF33pmGaQ6W
    [2012/01/09 00:08:10 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\rellIIBrz
    [2012/01/09 00:08:05 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\pddWWK8ffR9h
    [2012/01/09 00:07:50 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\CsQQQJ6dEK8fR9T
    [2012/01/09 00:07:45 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\eccAA1uvv2obFpG
    [2012/01/09 00:07:40 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\KhYYYXwjUV
    [2012/01/09 00:07:26 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ZRRhXjVlBzNcuDo
    [2012/01/09 00:07:19 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\uwkkUUVrlOBt
    [2012/01/09 00:07:13 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ONNNtxxA0ucSib3
    [2012/01/09 00:07:07 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\XvSS2obF3pmGaJd
    [2012/01/09 00:07:01 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\i4ppmG5sJd
    [2012/01/09 00:06:55 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\OJJd8ggqhYXwUeO
    [2012/01/09 00:06:50 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\sTTZqYCwkO0S13
    [2012/01/09 00:06:43 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\beekkIBrzONyA0v
    [2012/01/09 00:06:37 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\PPPyccA1D2bF4mE
    [2012/01/09 00:06:31 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\CivvDD2onF4
    [2012/01/09 00:06:25 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\b4aamHH6sWf8gZY
    [2012/01/09 00:06:19 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\PWKKK7fRL9gTqj
    [2012/01/09 00:06:13 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ChhhTXXwjUCeIBz
    [2012/01/09 00:06:07 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\nVVelOOBtP0cAiD
    [2012/01/09 00:06:01 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\AxPP00ycS1iv
    [2012/01/09 00:05:55 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\diiibDD3pnG4Q6s
    [2012/01/09 00:05:49 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\xJJJ66dWK8fR9hX
    [2012/01/09 00:05:43 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\wEEKYwUUVe
    [2012/01/09 00:05:37 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\fqqhhYCCwkUrlBt
    [2012/01/09 00:05:31 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\mVVVrlNtxci3G
    [2012/01/09 00:05:25 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\wxxAuF3pnG5QHW7
    [2012/01/09 00:05:20 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\KhhTTXqqjU
    [2012/01/09 00:05:15 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\BmmmGG5aQJ6dK
    [2012/01/09 00:05:10 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\oBBrrzPNNyA1uS
    [2012/01/09 00:05:05 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\RR9TXUUCelIBzPy
    [2012/01/09 00:04:50 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\UETwjjUCelB
    [2012/01/09 00:04:30 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\GzyycA1ivD2oF4H
    [2012/01/09 00:04:24 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\iIxio4m6WEL8TqY
    [2012/01/09 00:04:18 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\BpppnKfR9g
    [2012/01/09 00:04:12 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\mRRLL9hTTXjUCkB
    [2012/01/09 00:04:07 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\YFFF33pmG5aQ6dK
    [2012/01/09 00:03:57 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\WKKK88fRL9hT
    [2012/01/09 00:03:37 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\x111uvvD2obFpG5
    [2012/01/09 00:03:31 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\UnnFF4aamH5WJdE
    [2012/01/09 00:03:10 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\XQHH6ssWK7ELgTj
    [2012/01/09 00:03:04 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\i8LL9qCeBONx0
    [2012/01/09 00:02:59 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\f222obbF3pmGaQ6
    [2012/01/09 00:02:54 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\rCCeekIIBrONyA0
    [2012/01/09 00:02:44 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\huuuvSS2o
    [2012/01/09 00:02:25 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\srPxd9OA0pW
    [2012/01/09 00:02:18 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\oXwkUVVeBtz
    [2012/01/09 00:02:12 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\rQH6sWK7E9TqYwV
    [2012/01/09 00:02:06 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\eBPx1So3maJW8L
    [2012/01/09 00:01:48 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\DWf9ZjIrNu1
    [2012/01/09 00:01:26 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\syvF5dRXezAvFsE
    [2012/01/09 00:01:15 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\fCUrOt0c1DoFa
    [2012/01/09 00:01:00 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\tLgZjwIrOtPu1b3
    [2012/01/09 00:00:35 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\zIrOt0c2b3naHsK
    [2012/01/09 00:00:14 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\fNxu2FpGQ6W8R9T
    [2012/01/09 00:00:03 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\PYkVlBPyAiDn4ms
    [2012/01/08 23:59:41 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\xd79XCVzt0S
    [2012/01/08 23:59:29 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\lsJdKgZhXjVltPy
    [2012/01/08 23:59:17 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\fuSb3n4QsKfLgZj
    [2012/01/08 23:59:05 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\cm5JdKgYwVeItPy
    [2012/01/08 23:58:52 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ZqYkVOtAu
    [2012/01/08 23:58:42 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\KfLhXjCIrOyAuSi
    [2012/01/08 23:58:27 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\TKZhwUlBzyAu2b3
    [2012/01/08 23:58:06 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\iy1v2FpGsJ
    [2012/01/08 23:57:47 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\hRqXkVlBPyAiDo4
    [2012/01/08 23:57:35 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Yui3n4HsKEgZY
    [2012/01/08 23:57:23 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Kp5Q7EgZhXUeI
    [2012/01/08 23:57:02 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\QmsfLgqYwUlBx0
    [2012/01/08 23:56:51 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\pb3GaHdKf9Tq
    [2012/01/08 23:56:36 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\XviFpGQ6KfLgqYe
    [2012/01/08 23:56:16 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\tXjClBzyAu2b3m5
    [2012/01/08 23:55:56 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\CpGs6E8RhXj
    [2012/01/08 23:55:46 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\fdKgZhwUeItPyAu
    [2012/01/08 23:55:31 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\QKR9YwUlBzN
    [2012/01/08 23:55:19 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\hrOx0c2bpGaHW7E
    [2012/01/08 23:55:07 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\iDoFpGs6E8R9TwU
    [2012/01/08 23:54:57 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\t7E8R9YwUlBzNc1
    [2012/01/08 23:54:42 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\JHs7RqXkVlBPyAv
    [2012/01/08 23:54:21 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\OBx0c1v3na
    [2012/01/08 23:54:02 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\D8ThCOx0c1v3n4m
    [2012/01/08 23:53:49 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\qeIrPx1v2
    [2012/01/08 23:53:38 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\t3n4m6W7E8TqC
    [2012/01/08 23:53:26 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\vxuSi3n4Qs
    [2012/01/08 23:53:12 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\nOyAv2b3n5QdKfL
    [2012/01/08 23:52:47 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\WvFG68hUIN0inQK
    [2012/01/08 23:52:22 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\QGQdKRTwUIPy12
    [2012/01/08 23:52:02 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\t8YwVltPci2npHQ
    [2012/01/08 23:51:49 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\pBN0ipQdLTjeIzN
    [2012/01/08 23:51:39 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ASoFp5Q6W8R9
    [2012/01/08 23:51:29 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\waJdKfLhqUeIrOx
    [2012/01/08 23:51:04 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\PgZhXjVltPyAu2
    [2012/01/08 23:50:39 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\NVlBPyAiDoFp5Q
    [2012/01/08 23:50:18 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\wIrOtPuSiDn4m
    [2012/01/08 23:50:08 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Bc2b3n4Q6W7EgZj
    [2012/01/08 23:49:58 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Z6KRTjeVO
    [2012/01/08 23:49:42 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\GS2i3na6Kf9Tj
    [2012/01/08 23:49:34 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\liDpGaHsKE9TqYw
    [2012/01/08 23:49:09 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\kQ6KfTjCkVztAuS
    [2012/01/08 23:48:44 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\PfLhXjCIrOyAuS
    [2012/01/08 23:48:23 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\OZhwUeItPy1v2bp
    [2012/01/08 23:48:12 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\wW7E8ZhCkVlBP
    [2012/01/08 23:47:57 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\iQK9qkOP134sfTY
    [2012/01/08 23:47:32 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\SLgXjCkVzNAuSiD
    [2012/01/08 23:47:07 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\tUeBzNxuSi3n5Qd
    [2012/01/08 23:46:46 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\zzNcuDoFG68ZUlr
    [2012/01/08 23:46:35 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Y2npHsJdKg
    [2012/01/08 23:46:26 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Kd8RqYwUeOt0c1v
    [2012/01/08 23:46:11 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\R5W7E8RqYwVlBz0
    [2012/01/08 23:46:01 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\cCkVlBx0c1v3FaH
    [2012/01/08 23:45:46 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\VLgZhCUrOtPc1v3
    [2012/01/08 23:45:35 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\EltuSi3n4m
    [2012/01/08 23:45:16 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\SsKf9TqYwVlNx0S
    [2012/01/08 23:44:51 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\jUeIrOx0v2FpGQ6
    [2012/01/08 23:44:36 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\DR9TqCkBzNx0v2
    [2012/01/08 23:44:21 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\n8R9TjClBzNx1v2
    [2012/01/08 23:43:56 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\rjeItPyAuDoFm5Q
    [2012/01/08 23:43:45 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Fz0c1v2n4
    [2012/01/08 23:43:20 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\twIrNx0SiDoGa6W
    [2012/01/08 23:43:05 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\XLgZjCkVlNx0SiD
    [2012/01/08 23:42:50 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\CkkzONtx0ucSib3
    [2012/01/08 23:42:40 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\oppnnG4aaQ6sW7
    [2012/01/08 23:42:25 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\abbbD33pnG4aH6W
    [2012/01/08 23:42:16 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\wIIIVrrzONtA0cS
    [2012/01/08 23:42:04 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\o3ppmGG5aQJ6WKf
    [2012/01/08 23:41:59 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\grrrzPPNyxA
    [2012/01/08 23:41:54 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\bPNNyycA1uvD2b
    [2012/01/08 23:41:39 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\bEEEK88gRZ9hXwU
    [2012/01/08 23:41:34 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\eBBBtzzP0cAiDoF
    [2012/01/08 23:41:28 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ymmHH55sWJ7ELgR
    [2012/01/08 23:41:22 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\SWK7fEL9gTZqY
    [2012/01/08 23:41:17 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\KSSS2iibD3pn4aH
    [2012/01/08 23:40:58 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\zNNtxxA0ucS2bDp
    [2012/01/08 23:40:50 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\l55ssQJJ7dE8
    [2012/01/08 23:40:40 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\hqqhXkkUVelOtz0
    [2012/01/08 23:40:25 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\w8gggqhXwk
    [2012/01/08 23:40:16 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ftPci3Fa5Jd8RhX
    [2012/01/08 23:39:56 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\eLTqCkrOt0ciDo
    [2012/01/08 23:39:41 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\L6KE9ZjwIrOx0ci
    [2012/01/08 23:39:12 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\i88ggTZqhYCkx0S
    [2012/01/08 23:39:06 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\bIBrNyx0uiFn5Hd
    [2012/01/08 23:39:00 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\L777ffRL9gT
    [2012/01/08 23:38:55 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\zSS22ibFF3nG5
    [2012/01/08 23:38:45 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\jJJ66dWWK8fL9Tq
    [2012/01/08 23:38:40 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\v111uvvS2oF3mGa
    [2012/01/08 23:38:34 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\On4p5sQJ7EKgR9h
    [2012/01/08 23:38:19 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\CWWW7ddEL8gZqYX
    [2012/01/08 23:38:02 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\AXwUCeIzNxv2bpG
    [2012/01/08 23:37:56 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\WmGG5aQ6d
    [2012/01/08 23:37:51 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\IPPNNyxxA1vS
    [2012/01/08 23:37:41 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\RFFF4ppmG5sQ6dK
    [2012/01/08 23:37:36 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\zIIBBtzzPNyA1vD
    [2012/01/08 23:37:31 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\mKKK88RRZ9hXwUV
    [2012/01/08 23:37:16 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\dJJdEK8gRZ9YXjU
    [2012/01/08 23:37:01 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\g5sWWJ7dL8RYkeO
    [2012/01/08 23:36:56 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\y00yycAA1iv
    [2012/01/08 23:36:51 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\XZqqhhYXwkUVe
    [2012/01/08 23:36:41 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\JBttxxP0ycS1vDo
    [2012/01/08 23:36:36 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\V8ggTTZqhYCwUVl
    [2012/01/08 23:36:31 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\FooonGG4a
    [2012/01/08 23:36:16 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\HiibbD33on4am6s
    [2012/01/08 23:35:56 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\OjjYYCeekIVzO
    [2012/01/08 23:35:51 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\naQQHH6WK7fL9gZ
    [2012/01/08 23:35:46 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\TxxxA00ucS2bDpn
    [2012/01/08 23:35:41 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\xgTTTXqjYCekIrO
    [2012/01/08 23:35:26 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\bRRRL99hTXqjCe
    [2012/01/08 23:35:21 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\fbFF33pnG5aQ6dK
    [2012/01/08 23:35:16 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\zIIIBrrzONyA0uS
    [2012/01/08 23:35:01 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\uUCCCelIBrzP
    [2012/01/08 23:34:46 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\oXXwwjUCelIBzPy
    [2012/01/08 23:34:41 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\BGG55sQJ6dEK8R9
    [2012/01/08 23:34:36 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\tNNyycAA1u
    [2012/01/08 23:34:20 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\f7dd8gTTZq
    [2012/01/08 23:34:00 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\yPP00uccS1iD3nG
    [2012/01/08 23:33:55 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\CTZZqqjYCwkIrlN
    [2012/01/08 23:33:40 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\BL9ggTZqjYCwkVl
    [2012/01/08 23:33:30 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ZVVVrzzONtx0uS2
    [2012/01/08 23:33:25 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\A777fRRL9
    [2012/01/08 23:33:20 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\J222ibbF3pn5
    [2012/01/08 23:33:05 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\E0uuvvS2ibF3pGa
    [2012/01/08 23:32:55 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\m5aaQQJ6dW
    [2012/01/08 23:32:31 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\R1v2pGa6W8R9TjC
    [2012/01/08 23:32:07 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\d4ms6E8RhwmLN0G
    [2012/01/08 23:31:44 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\aqYkVlNx0SiDoaH
    [2012/01/08 23:31:28 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ZQ6KfLgXj
    [2012/01/08 23:31:04 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\EfLTqUeIrOyAu2b
    [2012/01/08 23:30:38 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\lzNx1v2Fp
    [2012/01/08 23:30:12 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\eAuSb3n4Q6W7LgZ
    [2012/01/08 23:18:06 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\yRgTXjYkVu2
    [2012/01/08 23:18:06 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\VgTXjYkVru2DpGQ
    [2012/01/08 23:18:06 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\SReyvGdRgXYIr
    [2012/01/08 23:18:06 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\RZIvGKjz0bQKLTj
    [2012/01/08 23:18:06 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\PvGdRgTXjkVu2D
    [2012/01/08 23:18:06 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\OQReyvGdRgXYIru
    [2012/01/08 23:18:06 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\NQReyvGdRgXYIru
    [2012/01/08 23:17:53 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\sGAjHchHzRmxqHc
    [2012/01/08 22:17:11 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\UdE8gRZhYwkVeOB
    [2012/01/08 22:17:11 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\SJ7dE8gRZhXwUVl
    [2012/01/08 22:17:11 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\rPPP0yycA1vDm5Q
    [2012/01/08 22:17:11 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\rPPP0yycA1vDm5J
    [2012/01/08 22:17:11 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\PXwwkUVelOBtP0c
    [2012/01/08 22:17:11 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\nhYXwkUVelOBzPy
    [2012/01/08 22:17:11 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\cWJ7dE8gRhXwUVl
    [2012/01/08 22:17:10 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\zucibD3ona
    [2012/01/08 22:17:10 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\zcibD3onGa
    [2012/01/08 22:17:10 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Wx0ucibD3naHW7E
    [2012/01/08 22:17:10 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\vGamHWJ7fThwVBx
    [2012/01/08 22:17:10 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\unGamHWJ7EThwVB
    [2012/01/08 22:17:10 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\uGamHWJ7fThwVBx
    [2012/01/08 22:17:10 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\RWJ7fEThYwVBxSi
    [2012/01/08 22:17:10 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\r0ucibD3o
    [2012/01/08 22:17:10 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\mEThYwVBtSi3F5W
    [2012/01/08 22:17:10 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\IWJ7fEThYwVBxSi
    [2012/01/08 22:17:10 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\GEThYwVBtSi3F5W
    [2012/01/08 22:17:10 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\fWJ7fEThYwVBxSi
    [2012/01/08 22:17:10 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Ct0ucibD3naHW7E
    [2012/01/08 22:17:10 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\BWJ7fEThYwVBxSi
    [2012/01/08 22:14:36 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\oU3XSLP7tJl
    [2012/01/08 22:14:35 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\RZRKFNyASbwekqf
    [2012/01/08 22:14:35 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\kZRKFNyASbwekqf
    [2012/01/08 22:14:34 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\BWrFUnhcQI5knjb
    [2012/01/08 22:14:33 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Q3qSdydIF9vR0K
    [2012/01/08 22:14:33 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\mRtHk3qSdydIF9v
    [2012/01/08 22:14:33 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\eZRKFNyASbwekqf
    [2012/01/08 22:14:33 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\AlmXudzQr
    [2012/01/08 22:14:27 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\FAaXz3Ek1fr3ZP4
    [2012/01/08 22:14:25 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\jz5TbLOG9Vb7CcW
    [2012/01/08 22:14:24 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\kzslDK1Web7CxaT
    [2012/01/08 22:14:24 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\IPslDK1Web7CxaT
    [2012/01/08 22:14:20 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\KpUGIQrpXbqoq
    [2012/01/08 22:14:18 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Wqs5puSV8gdhAtB
    [2012/01/08 22:14:12 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\WZX8E8svb0tOR5J
    [2012/01/08 22:14:12 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ie3T0WO4q1fxLPH
    [2012/01/08 22:14:07 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\iqH6KJF50O
    [2012/01/08 22:14:02 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\WgnmaavFt
    [2012/01/08 22:13:43 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Wp5JKRYjezNAps6
    [2012/01/08 22:13:42 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\rC0HYS4JLgZh
    [2012/01/08 22:13:42 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\nQC0HYS4JLgZhVt
    [2012/01/08 22:13:42 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\GQC0HYS4JLgZhVt
    [2012/01/08 22:13:42 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\DC0HYS4JLgZ
    [2012/01/08 22:13:42 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\bC0HYS4JLgZ
    [2012/01/08 22:13:41 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Y08DjFhAGLb7IS7
    [2012/01/08 22:13:39 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\pFNhFALbYHOWcZu
    [2012/01/08 22:13:28 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\LbLbiKziEzdIiWg
    [2012/01/08 22:13:20 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\AN7Vd2X3w29tgKB
    [2012/01/08 22:13:13 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\bRGCvEiV7oI7NFN
    [2012/01/08 22:12:20 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\n34gB0u2p
    [2012/01/08 22:11:12 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\s9xk93xYsvNhJp
    [2012/01/08 22:11:11 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\GttZy9QuIf3zjE3
    [2012/01/08 22:11:11 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\flBZy9QuIf3zjE3
    [2012/01/08 22:11:10 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\jztZy9QuIf3zjE3
    [2012/01/08 22:11:09 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\CZxk93xYsvNhJp
    [2012/01/08 22:11:08 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\RlBZy9QuIf3zjE3
    [2012/01/08 22:11:06 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\eBGizTayUgG
    [2012/01/08 22:11:04 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\IELlBZy9QuIf3zj
    [2012/01/08 22:11:02 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\UjVrAD46Elt9AI9
    [2012/01/08 22:11:02 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\spHsELlBZxI9pPC
    [2012/01/08 22:11:02 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\kELlBZy9QuIf3z
    [2012/01/08 22:10:59 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\yLTjVrAD46Elt9A
    [2012/01/08 22:10:59 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\tN0pHsELlt9AI
    [2012/01/08 22:10:58 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\PSaKRLTjVAp6Elt
    [2012/01/08 22:10:56 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\i6fhVxSoHdZUiFs
    [2012/01/08 22:10:56 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\fXjBOx0SaK
    [2012/01/08 22:10:55 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\RHgrSqtcD4EYezA
    [2012/01/08 22:10:54 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\IZUiFsKXBc2mJRX
    [2012/01/08 22:10:52 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\WJE8ZhwCva89Xr0
    [2012/01/08 22:10:47 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\dfjINcD6fjO4ETY
    [2012/01/08 22:10:23 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Kx97itrjqTo6nns
    [2012/01/08 22:10:05 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Local\ElevatedDiagnostics
    [2012/01/08 22:09:55 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\udgacCpOXGAeLUc
    [2012/01/08 22:09:48 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\qQx2leixXsP7pNw
    [2012/01/08 22:09:43 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\hxiOeixXsP7p
    [2012/01/08 22:08:57 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\FwcXfmnlgXJJaTv
    [2012/01/08 22:07:21 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\DCx5cCcbVTkr18o
    [2012/01/08 22:07:15 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\vCx5cCcbVTkr18o
    [2012/01/08 22:07:12 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\eCx5cCcbVTkr18o
    [2012/01/08 22:06:58 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\WYwCx5cCcbVTkr1
    [2012/01/08 22:06:57 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\R39syHWuvu1
    [2012/01/08 22:06:57 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\L39syHWuvu1
    [2012/01/08 22:06:53 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\djlVOrSdGr3aNVy
    [2012/01/08 22:06:51 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\UjlVOrSdGr3aNV
    [2012/01/08 22:06:51 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\CjlVOrSdGr3aNV
    [2012/01/08 22:06:13 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\JesNmam5PG4uPqb
    [2012/01/08 22:06:05 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\eTR4aFOdOrYjsZ
    [2012/01/08 22:06:01 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\wqTK8KnpvwGCUg9
    [2012/01/08 22:05:45 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Pwn5PixlBUQBGmF
    [2012/01/08 22:05:45 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\nixlBUQBGmFn
    [2012/01/08 22:05:29 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\c2ElJesnpbRP
    [2012/01/08 22:05:28 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\pNlCqsW5u
    [2012/01/08 22:05:11 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\aRw3Pkh7EoRZkmp
    [2012/01/08 22:05:06 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\sJXUVh7JFbnYloQ
    [2012/01/08 22:05:06 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\qJXUVh7JFbnYloQ
    [2012/01/08 22:04:55 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ZzuRYSBqR
    [2012/01/08 22:04:27 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\F0kL4itTdFAIZW3
    [2012/01/08 22:04:17 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\f95ve6OqHc
    [2012/01/08 22:04:15 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\UfXUgRa4ubsOvD5
    [2012/01/08 22:04:15 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\EXUgRa4ubsOvD5E
    [2012/01/08 22:04:12 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Szx33rs6Rh773DN
    [2012/01/08 22:04:12 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\hop5BmhXIvuylUw
    [2012/01/08 22:04:12 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Cpkv3Hhssb1BvhI
    [2012/01/08 22:04:11 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\zH0EP7yfSCarHOs
    [2012/01/08 22:04:10 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\zR3t7iZ1R2w3BWx
    [2012/01/08 22:04:10 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ViZ1R2w3B
    [2012/01/08 22:04:10 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\tSizlg9CmWXlt
    [2012/01/08 22:04:10 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\DXa0w4t7tsPKu93
    [2012/01/08 22:04:07 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\WL2Z6yRpNT5AqHc
    [2012/01/08 22:04:00 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\luZGUFV5t6NK
    [2012/01/08 22:03:59 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\S5NLpIHNLydcg
    [2012/01/08 22:03:58 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\bcZblWvqQNfiqv
    [2012/01/08 22:03:57 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Ty9prW2Yn
    [2012/01/08 22:03:56 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\bxWNHrHP8DUJATG
    [2012/01/08 22:03:49 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\sA90ftQwDwDwnXF
    [2012/01/08 22:03:48 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ZRyfyHrGj1h1hD9
    [2012/01/08 22:03:39 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\rgul3X2gSZ1g1gc
    [2012/01/08 22:03:34 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\dF90WrnqSJOH
    [2012/01/08 22:03:27 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\pLzFh1shzbWUuGg
    [2012/01/08 22:03:26 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\wVfikmlnh1shz
    [2012/01/08 22:03:26 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\umlnh1shz
    [2012/01/08 22:03:25 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ueEor8ih1QU2
    [2012/01/08 22:03:25 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\GYW0LzFh1s
    [2012/01/08 22:03:25 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\G6mpFTL6bkdARym
    [2012/01/08 22:03:24 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\NXnPiNZ2YoCzxvh
    [2012/01/08 22:03:23 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\vA1cyPQGDx
    [2012/01/08 22:03:15 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\sAucDQwNioH
    [2012/01/08 22:03:11 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\OqP5XmPWiB0ZS
    [2012/01/08 22:03:00 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\PrxDaH7jxF6
    [2012/01/08 22:03:00 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\fS3QTrioa5
    [2012/01/08 22:02:56 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\CwmPEpLP3qNftg
    [2012/01/08 22:02:55 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\EEuImyHU0mX5C5z
    [2012/01/08 22:02:52 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\B0CfyXcdUuQU6
    [2012/01/08 22:02:47 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\vdJCbGQ8Ce5cRaZ
    [2012/01/08 22:02:47 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\EbGQ8Ce5cRaZAHw
    [2012/01/08 22:02:46 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\SdJCbGQ8Ce5cRaZ
    [2012/01/08 22:02:09 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\kEWcs2tIYjCerl
    [2012/01/08 22:02:06 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\RRclKHXHFbucDFn
    [2012/01/08 22:02:06 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\gRclKHXHFbucDFn
    [2012/01/08 22:01:52 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\L6O5YniiXDzL7l7
    [2012/01/08 22:01:40 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\JvswGiPIaj4khhm
    [2012/01/08 22:01:33 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\v2Rtsyaqbulj19D
    [2012/01/08 22:01:27 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\egvRPGYSKimXQoN
    [2012/01/08 22:01:26 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\GXudvswGiP
    [2012/01/08 22:01:23 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\p08OaeGC1KU4ziE
    [2012/01/08 22:01:12 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\k306VmTSqA7OKO4
    [2012/01/08 22:01:07 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\SbqAdx5evI
    [2012/01/08 22:01:07 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\F06VmTSqA7OK
    [2012/01/08 22:01:05 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\NgP306VmTSqA7O
    [2012/01/08 22:00:58 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ErVK6HaqzO4k3YN
    [2012/01/08 22:00:54 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\x35aAIkjIDdDZA
    [2012/01/08 22:00:52 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ZPwXYcmoR
    [2012/01/08 22:00:51 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ILJd8CYQ4oFLkVn
    [2012/01/08 22:00:47 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\J7EFov466oNrlOb
    [2012/01/08 22:00:44 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\gzrtqCdZIthdnm6
    [2012/01/08 22:00:41 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\pW7ZLgn42HKKp0B
    [2012/01/08 22:00:38 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Bgy1obDOtXPDbBX
    [2012/01/08 22:00:37 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\hGxczDJm1
    [2012/01/08 22:00:29 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\L7vf8TgZamF
    [2012/01/08 22:00:16 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\uR47IVdooOhugy1
    [2012/01/08 22:00:06 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\W0pKgGi5TQ2t
    [2012/01/08 22:00:06 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\QhiJB3WYjKm9l9Q
    [2012/01/08 22:00:06 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\n18lSQ7FPbfm
    [2012/01/08 22:00:06 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\hRNmkcadFPFL
    [2012/01/08 21:59:49 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\m2gJrnj2ftdqNWD
    [2012/01/08 21:59:45 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ScExJk2jt3
    [2012/01/08 21:59:41 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\TgA5VpXAL
    [2012/01/08 21:59:31 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ExlYdGjenvKlG
    [2012/01/08 21:59:29 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\xgfrUXWpZU3A6U
    [2012/01/08 21:59:29 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\slYdGjenvKl
    [2012/01/08 21:59:26 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\s3bIeDvxVhtvg7X
    [2012/01/08 21:59:24 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\y9xlYdGjenv
    [2012/01/08 21:59:09 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\KJHs2xBgdV
    [2012/01/08 21:59:08 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\S0zqqeUj6obxx
    [2012/01/08 21:58:51 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\RYlwYjPxBrqE6mG
    [2012/01/08 21:58:49 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\kBYlwYjPxtrqE6m
    [2012/01/08 21:58:41 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\IBYlwYjPx
    [2012/01/08 21:58:25 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\jy1PNzrTprgDacr
    [2012/01/08 21:58:17 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\YPNzrTprgD
    [2012/01/08 21:58:16 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\lgeE2a4Fb1tgpzL
    [2012/01/08 21:58:12 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\yw9FpSXIkXhf6Aw
    [2012/01/08 21:57:58 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Na7fkSpV5X9sHa1
    [2012/01/08 21:57:52 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\KOJwS3QKCyFea9E
    [2012/01/08 21:57:46 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ha7fkSpV5
    [2012/01/08 21:57:44 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\KcfiFOJwS3QKCyF
    [2012/01/08 21:57:43 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\QQYAJqnj4g2TB3s
    [2012/01/08 21:57:43 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\jNyx9ZokiWLkzbW
    [2012/01/08 21:57:41 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\AFOJwS3QK
    [2012/01/08 21:57:37 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\LAQYAJqnj4g2TB
    [2012/01/08 21:57:24 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\WsKNKrmKOuU9
    [2012/01/08 21:56:32 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\u6SOU8a1l
    [2012/01/08 21:56:17 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\zEalW30BXWbyzTW
    [2012/01/08 21:56:15 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\NK8EalW30BX
    [2012/01/08 21:56:13 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\gK8EalW30BX
    [2012/01/08 21:55:51 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Z1nWPXbgtq2f072
    [2012/01/08 21:55:19 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Pga3xYQvlfGDxBe
    [2012/01/08 21:55:13 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\NtjmDVK2ed2Cf6
    [2012/01/08 21:55:12 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\l5NLDtCJAUJAXQc
    [2012/01/08 21:55:08 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\qeRFrf2CW
    [2012/01/08 21:55:08 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\jctrqJDId2kd0
    [2012/01/08 21:55:07 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\A4GpStkYEacw5N9
    [2012/01/08 21:55:06 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\kDa4GpStkYEacw5
    [2012/01/08 21:54:56 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\hkjhKHsa5KKf
    [2012/01/08 21:54:40 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\eTWnSOUfapi0xt
    [2012/01/08 21:53:58 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\odK8fRL9hXjCkBz
    [2012/01/08 21:53:42 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\yZvIdIuiKLTOrnY
    [2012/01/08 21:53:42 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\YqvIdIuiKLTOrnY
    [2012/01/08 21:53:42 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\xqvIdIu2KEgIT8g
    [2012/01/08 21:53:42 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\WqvIdIuiKLTOrnY
    [2012/01/08 21:53:42 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\tqvIdIu2KEgIT8g
    [2012/01/08 21:53:42 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\sqvIdIuiKLTOrnY
    [2012/01/08 21:53:42 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\qqvIdIu2KEgIT8g
    [2012/01/08 21:53:42 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\pRvIdIuiKLTOrnY
    [2012/01/08 21:53:42 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\PqvIdIu2KEgIT8g
    [2012/01/08 21:53:42 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\oqvIdIu2KEgIT8
    [2012/01/08 21:53:42 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\nqvIdIu2KEgIT8g
    [2012/01/08 21:53:42 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\LqvIdIu2KEgIT8
    [2012/01/08 21:53:42 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\JqvIdIuiKLTOrnY
    [2012/01/08 21:53:42 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\JqvIdBuiKLTOrnY
    [2012/01/08 21:53:42 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\iqvIdBuiKLTOrnY
    [2012/01/08 21:53:42 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ihvIdIuiKLTOrnY
    [2012/01/08 21:53:42 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ihvIdBuiKLTOrnY
    [2012/01/08 21:53:42 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\hqvIdIuiKLTOrnY
    [2012/01/08 21:53:42 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\FqvIdIu2KEgIT8g
    [2012/01/08 21:53:41 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\VqvIdIuiKLTO
    [2012/01/08 21:53:41 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\EqvIdIu2KEgIT
    [2012/01/08 21:53:40 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\wqvIdIuiKL
    [2012/01/08 21:53:40 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\VqvIdIu2KEgI
    [2012/01/08 21:53:40 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\UqvIdIuiKLT
    [2012/01/08 21:53:40 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\kqvIdIuiKLT
    [2012/01/08 21:53:40 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\dqvIdIu2KEgI
    [2012/01/08 21:53:35 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Z0ibD3paQ6sKfLg
    [2012/01/08 21:53:35 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\yib3paQ6sKfLgTq
    [2012/01/08 21:53:35 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\VD3paQ6sKfELTqY
    [2012/01/08 21:53:35 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\v0ibD3paQ6
    [2012/01/08 21:53:35 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\uY0ibD3pa
    [2012/01/08 21:53:35 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\taQ66sKfEL
    [2012/01/08 21:53:35 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\R0ibD3paQ6sKfL
    [2012/01/08 21:53:35 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\p0ibD3paQ6sKfLg
    [2012/01/08 21:53:35 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\naQ66sKfE
    [2012/01/08 21:53:35 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\m0ibD3paQ6sKfLg
    [2012/01/08 21:53:35 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\LGaQ6ssKfELgTqY
    [2012/01/08 21:53:35 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\l0ibD3paQ6sK
    [2012/01/08 21:53:35 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\I0ibD3paQ6sK
    [2012/01/08 21:53:35 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Hib3paQ6sKfLgTq
    [2012/01/08 21:53:35 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\H0ibD3paQ6sKfLg
    [2012/01/08 21:53:35 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\g0ibD3paQ6sKfL
    [2012/01/08 21:53:35 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\FaQ66sKfE
    [2012/01/08 21:53:35 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\EpaQ6ssKfELgTqY
    [2012/01/08 21:53:35 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\e0ibD3paQ6s
    [2012/01/08 21:53:35 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\D0ibD3paQ6s
    [2012/01/08 21:53:35 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\B0ibD3paQ6sKf
    [2012/01/08 21:50:39 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\BG4aQH6sW7E9TqY
    [2012/01/08 21:50:31 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\eEL8gRZqhXkVlBz
    [2012/01/08 21:50:23 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\llIBrzPNyAuSoFp
    [2012/01/08 21:50:14 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Ib36fTXjYeIrOtA
    [2012/01/08 21:50:01 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\bi3nmHJf8qkrBc1
    [2012/01/08 21:49:47 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\qgRZYB0ciDoFaHs
    [2012/01/08 21:49:38 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\nVelOBtzPyAiDoF
    [2012/01/08 21:49:18 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\D13678ZCVBSFdql
    [2012/01/08 21:49:17 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\m7Tkxb4W9Yktu13
    [2012/01/08 21:49:17 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\frn7Tkxb4W9Yk
    [2012/01/08 21:49:13 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\JJj0Qju6jcfOmYi
    [2012/01/08 21:49:11 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\CmXvKtpTA5TxGT
    [2012/01/08 21:49:09 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\O9NHeDLl4wiEtmX
    [2012/01/08 21:49:00 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\dTcEcEyLyKyE
    [2012/01/08 21:48:22 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\L578hwPADF5Jf9w
    [2012/01/08 21:48:19 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\lbnG46sfTrNui46
    [2012/01/08 21:48:19 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\g3nG46sfTrNui46
    [2012/01/08 21:48:18 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\WA0uvS2ib3nH
    [2012/01/08 21:48:18 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\sA0uvS2ib3n
    [2012/01/08 21:48:18 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\RH6dWK7LTqY
    [2012/01/08 21:48:18 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\rA0uvS2ib3nHdKL
    [2012/01/08 21:48:18 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\KA0uvS2ib3nHd
    [2012/01/08 21:48:18 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\IH6dWK7LT
    [2012/01/08 21:48:18 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\iA0uvS2ib3nHd
    [2012/01/08 21:48:18 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\fH6dWK7LTq
    [2012/01/08 21:48:18 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\DA0uvS2ib3nHdK
    [2012/01/08 21:48:18 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\CA0uvS2ib3n
    [2012/01/08 21:48:18 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\BH6dWK7LTq
    [2012/01/08 21:48:18 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\bA0uvS2ib3nHdK
    [2012/01/08 21:46:38 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\AsJ9kBPlwqTj8E7
    [2012/01/08 21:46:24 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\fUeBeeCYOzBey2D
    [2012/01/08 21:46:20 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\nBeeCYOBe
    [2012/01/08 21:46:12 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Bm9tGRB3j1dloK7
    [2012/01/08 21:46:10 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\FB49A6ln9
    [2012/01/08 21:45:53 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\fBAaWgYwUA
    [2012/01/08 21:45:52 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\rkybGWTUcbKLYVl
    [2012/01/08 21:45:50 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\GvbWTeNmH7
    [2012/01/08 21:45:46 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\tis8Xzb7gjk0oW9
    [2012/01/08 21:45:36 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\SoaJfrA1vU
    [2012/01/08 21:45:29 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\YyzCTwUYhRf67
    [2012/01/08 21:45:25 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Qa4n4pGbut1
    [2012/01/08 21:45:23 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\v889fRELdg
    [2012/01/08 21:45:17 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\XwLWWG4whKWjhRZ
    [2012/01/08 21:45:14 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\iLWWG4whKW
    [2012/01/08 21:45:07 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\uvuS1yOeZ
    [2012/01/08 21:45:06 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\PzkYgLRwUjCwCZ8
    [2012/01/08 21:45:06 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\pGbS1nb33pGv
    [2012/01/08 21:45:04 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\E8EEQGi0tOz1vuS
    [2012/01/08 21:44:56 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\L96itCqgK5FbDcP
    [2012/01/08 21:44:54 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\dVWiU7bxC9anSzB
    [2012/01/08 21:44:49 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\DmxXQxTnrE2e96b
    [2012/01/08 21:44:47 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\RqmSeKol8pOLDkJ
    [2012/01/08 21:44:38 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ptTWbck7D
    [2012/01/08 21:44:35 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\IcX6yq5tT
    [2012/01/08 21:44:30 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\rqat9okaVszZ3W2
    [2012/01/08 21:44:27 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\mP819GzRbVWx708
    [2012/01/08 21:44:23 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\vr6rHlQPE2
    [2012/01/08 21:44:23 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\pFjFC4r6rHlQPE2
    [2012/01/08 21:44:21 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\WeGl5I5zWPfx
    [2012/01/08 21:44:17 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\g6xdchpBKSYQ0ZD
    [2012/01/08 21:44:13 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\TmzfoUGVWuTvYFI
    [2012/01/08 21:44:07 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\jGV5tR4yX5ORb
    [2012/01/08 21:44:03 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\lw4eaNLijGV5tR4
    [2012/01/08 21:39:34 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\rmprS1JgWtmTVyn
    [2012/01/08 21:39:34 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\AtGfR4ZYvp2kbfC
    [2012/01/08 21:39:33 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\WytWnhBz9rBGW4r
    [2012/01/08 21:39:30 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\jAtNFvEakEO3Sk0
    [2012/01/08 21:39:25 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\qycssxtGf
    [2012/01/08 21:38:48 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\EUC0uvS2iFpGaHd
    [2012/01/08 21:38:46 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\TNYyOHZP0c1v2n4
    [2012/01/08 21:38:40 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\rrNtxP0uc1b3n4m
    [2012/01/08 21:38:40 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\FrNtxP0uc1b3n4m
    [2012/01/08 21:38:37 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\jERX2kRIBzNc1v2
    [2012/01/08 21:37:42 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\WpihFGWgUrOtPyS
    [2012/01/08 21:37:42 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\AwmQfEUVrOtPySi
    [2012/01/08 21:37:26 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\rNbF3pnG5Q6W
    [2012/01/08 21:36:44 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\OD7X2IPhU33QDve
    [2012/01/08 21:36:38 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\spEqAAxlZcdFw7n
    [2012/01/08 21:36:34 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\KT4kSpRd7nOdj9i
    [2012/01/08 21:36:34 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\ET4kSpRd7nOdj9i
    [2012/01/08 21:35:50 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\v75tl8ZjhQeHwKh
    [2012/01/08 21:35:50 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\e75tl8ZjhQeHwKh
    [2012/01/08 21:34:51 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\OUXEj1PAPxazVq7
    [2012/01/08 21:34:21 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\Y1UL4B9LwxKvyOc
    [2012/01/08 21:34:13 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\sbk5Deg4B9LwxK
    [2012/01/08 21:34:11 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\rGOEvY41UL4B9Lw
    [2012/01/08 21:34:09 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\QemzRbk5DkqHzXT
    [2012/01/08 21:34:09 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\F3VJ0ZDzhsDX5Gs
    [2012/01/08 21:34:08 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\TemzRbk5DkqHzXT
    [2012/01/08 21:34:08 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\aemzRbk5DkqHzXT
    [2012/01/08 21:34:07 | 000,000,000 | ---D | C] -- C:\Users\maria\AppData\Roaming\c3ksc93UEmuUsxk
    :Files
    ipconfig /flushdns /c
    :Commands
    [PURITY]
    [EMPTYTEMP]
    [emptyjava]
    [EMPTYFLASH]
    [RESETHOSTS]
    
  • Then click the Run Fix button at the top.
  • Click Posted Image.
  • OTL may ask to reboot the machine. Please do so if asked.
  • The report should appear in Notepad after the reboot.Copy and Paste that report in your next reply.

Let me know How things are doing

Gringo
I Close My Topics If You Have Not Replied In 5 Days If You Will Be Longer Please Let Me Know

If I Have Not Replied To One Of My Topics In 48 Hrs Please Bump The Topic



My help is free, however, if you wish to make a small donation to show your appreciation or to help me continue the fight against Malware, then click here -->btn_donate_SM.gif<-- Don't worry every little bit helps.

Proud Graduate Of Malware Removal University




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users