Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

FixTDSS.exe/boot.tidserv


  • This topic is locked This topic is locked
2 replies to this topic

#1 hostingitall

hostingitall

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:06:52 PM

Posted 21 March 2012 - 10:48 AM

Hi everyone!

I have a laptop having the same issues as
This topic

I have ran Norton's removal tool and now I have a BSOD.

While poking around I have tried a few things without luck. currently following in that thread and I am at the frst64 Logs... Unsure how the fix list is produced?

Thanks.



Scan result of Farbar Recovery Scan Tool Version: 15-03-2012
Ran by SYSTEM at 21-03-2012 09:42:02
Running from G:\
Windows 7 Home Premium (X64) OS Language: English(US)
The current controlset is ControlSet001

========================== Registry (Whitelisted) =============

HKLM\...\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe -s [6561384 2010-12-14] (Realtek Semiconductor)
HKLM\...\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe [167960 2011-03-30] (Intel Corporation)
HKLM\...\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe [391704 2011-03-30] (Intel Corporation)
HKLM\...\Run: [Persistence] C:\Windows\system32\igfxpers.exe [418840 2011-03-30] (Intel Corporation)
HKLM\...\Run: [Apoint] C:\Program Files\DellTPad\Apoint.exe [608112 2011-03-29] (Alps Electric Co., Ltd.)
HKLM-x32\...\Run: [] [x]
HKLM-x32\...\Run: [Desktop Disc Tool] "C:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe" [514544 2010-11-17] ()
HKLM-x32\...\Run: [BCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices [91520 2010-01-21] (Microsoft Corporation)
HKLM-x32\...\Run: [Intuit SyncManager] C:\Program Files (x86)\Common Files\Intuit\Sync\IntuitSyncManager.exe startup [1497352 2011-02-22] (Intuit Inc. All rights reserved.)
HKLM-x32\...\Run: [HP Software Update] C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49208 2010-06-09] (Hewlett-Packard)
HKLM-x32\...\Run: [Microsoft Default Manager] "C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" -resume [439568 2010-05-10] (Microsoft Corporation)
HKLM-x32\...\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [59240 2011-11-02] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe" [421736 2012-01-16] (Apple Inc.)
HKU\Mary\...\Run: [OfficeSyncProcess] "C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE" [717696 2010-01-16] (Microsoft Corporation)
HKU\Mary\...\Policies\system: [disableregistrytools] 0
Winlogon\Notify\igfxcui: igfxdev.dll (Intel Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
AppInit_DLLs: C:\PROGRA~2\IMESHA~1\MediaBar\Datamngr\x64\datamngr.dll C:\PROGRA~2\IMESHA~1\MediaBar\Datamngr\x64\IEBHO.dll

==================== Services (Whitelisted) ======

2 Bluetooth Device Monitor; "C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe" [901184 2010-12-14] (Intel Corporation)
3 Bluetooth Media Service; "C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe" [1298496 2010-12-14] (Intel Corporation)
2 Bluetooth OBEX Service; "C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe" [974912 2010-12-14] (Intel Corporation)
2 Bonjour Service; "C:\Program Files\Bonjour\mDNSResponder.exe" [462184 2011-08-31] (Apple Inc.)
2 dKeySync; C:\dKEYUSBCradle\SyncService.exe [42496 2011-11-11] (Supra)
2 HPSLPSVC; C:\Users\Mary\AppData\Local\Temp\7zS7F56\hpslpsvc64.dll [1039360 2011-09-16] (Hewlett-Packard Co.)
3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2010-12-17] ()
2 QBCFMonitorService; "C:\Program Files (x86)\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe" [45056 2011-11-11] (Intuit)
3 QBFCService; "C:\Program Files (x86)\Common Files\Intuit\QuickBooks\FCS\Intuit.QuickBooks.FCS.exe" [61440 2009-07-23] (Intuit Inc.)
3 RoxMediaDB12OEM; "C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxMediaDB12OEM.exe" [1116656 2010-11-25] (Sonic Solutions)
2 RoxWatch12; "C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatch12OEM.exe" [219632 2010-11-25] (Sonic Solutions)
2 SepMasterService; "C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\12.1.1000.157.105\Bin\ccSvcHst.exe" /s "Symantec Endpoint Protection" /m "C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\12.1.1000.157.105\Bin\sms.dll" /prefetch:1 [167344 2011-10-30] (Symantec Corporation)
3 SmcService; "C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\12.1.1000.157.105\Bin64\Smc.exe" /prefetch:1 [2594816 2011-10-30] (Symantec Corporation)
3 SNAC; C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\12.1.1000.157.105\Bin64\snac64.exe [324016 2011-10-30] (Symantec Corporation)
2 UNS; "C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe" [2656280 2010-12-20] (Intel Corporation)
2 DellDigitalDelivery; "c:\Program Files (x86)\Dell Digital Delivery\DeliveryService.exe" [x]

========================== Drivers (Whitelisted) =============

1 BHDrvx64; \??\C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.1000.157.105\Data\Definitions\BASHDefs\20120317.011_847\BHDrvx64.sys [1157240 2012-03-17] (Symantec Corporation)
3 btmaux; C:\Windows\System32\Drivers\btmaux.sys [58128 2010-12-14] (Intel Corporation)
3 btmhsf; C:\Windows\System32\Drivers\btmhsf.sys [274432 2010-12-14] (Intel Corporation)
1 eeCtrl; \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [482936 2012-02-04] (Symantec Corporation)
3 EraserUtilDrv11122; \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilDrv11122.sys [138360 2012-03-20] (Symantec Corporation)
3 EraserUtilRebootDrv; \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [138360 2012-02-04] (Symantec Corporation)
3 iBtFltCoex; C:\Windows\System32\Drivers\iBtFltCoex.sys [59904 2010-12-14] (Intel Corporation)
1 IDSVia64; \??\C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.1000.157.105\Data\Definitions\IPSDefs\20120313.001\IDSvia64.sys [488568 2012-03-09] (Symantec Corporation)
3 NAVENG; \??\C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.1000.157.105\Data\Definitions\VirusDefs\20120320.018\ENG64.SYS [117880 2012-03-20] (Symantec Corporation)
3 NAVEX15; \??\C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.1000.157.105\Data\Definitions\VirusDefs\20120320.018\EX64.SYS [2048632 2012-03-20] (Symantec Corporation)
3 NETwNs64; C:\Windows\System32\Drivers\NETwNs64.sys [8505856 2010-12-21] (Intel Corporation)
3 silabenm; C:\Windows\System32\Drivers\silabenm.sys [29576 2011-11-11] (Silicon Laboratories)
3 silabser; C:\Windows\System32\Drivers\silabser.sys [76680 2011-11-11] (Silicon Laboratories)
1 SRTSP; C:\Windows\System32\Drivers\SEP\0C0103E8\009D.105\x64\SRTSP64.SYS [678008 2011-09-27] (Symantec Corporation)
1 SRTSPX; C:\Windows\System32\Drivers\SEP\0C0103E8\009D.105\x64\SRTSPX64.SYS [39032 2011-09-27] (Symantec Corporation)
3 StillCam; C:\Windows\System32\DRIVERS\serscan.sys [12288 2009-07-13] (Microsoft Corporation)
3 SyDvCtrl; \??\C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\12.1.1000.157.105\Bin64\SyDvCtrl64.sys [29664 2011-10-30] (Symantec Corporation)
0 SymDS; C:\Windows\System32\Drivers\SEP\0C0103E8\009D.105\x64\SYMDS64.SYS [451192 2011-07-16] (Symantec Corporation)
0 SymEFA; C:\Windows\System32\Drivers\SEP\0C0103E8\009D.105\x64\SYMEFA64.SYS [931448 2011-08-27] (Symantec Corporation)
3 SymEvent; \??\C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [174200 2012-01-28] (Symantec Corporation)
1 SymIRON; C:\Windows\System32\Drivers\SEP\0C0103E8\009D.105\x64\Ironx64.SYS [171128 2011-09-13] (Symantec Corporation)
1 SYMNETS; C:\Windows\System32\Drivers\SEP\0C0103E8\009D.105\x64\SYMNETS.SYS [386168 2011-09-08] (Symantec Corporation)
1 SysPlant; C:\Windows\System32\Drivers\SysPlant.sys [118768 2012-01-28] (Symantec Corporation)
1 Teefer2; C:\Windows\System32\DRIVERS\Teefer.sys [62672 2011-08-16] (Symantec Corporation)
2 TurboB; C:\Windows\System32\Drivers\TurboB.sys [16120 2010-11-29] (Intel® Corporation)
3 usbser; C:\Windows\System32\Drivers\usbser.sys [32768 2010-11-20] (Microsoft Corporation)
3 wdkmd; C:\Windows\System32\Drivers\wdkmd.sys [42392 2010-12-01] (Intel Corporation)
1 SASDIFSV; \??\C:\Users\Mary\AppData\Local\Temp\HBCD\SuperAntiSpyware\SASDIFSV.SYS [x]
1 SASKUTIL; \??\C:\Users\Mary\AppData\Local\Temp\HBCD\SuperAntiSpyware\SASKUTIL.SYS [x]

========================== NetSvcs (Whitelisted) ===========

============ One Month Created Files and Folders ==============

2012-03-21 09:41 - 2012-03-21 09:42 - 0000000 ____D C:\FRST
2012-03-20 23:18 - 2012-03-20 23:18 - 1932256 ____A (Symantec Corporation) C:\Users\Mary\Downloads\FixTDSS.exe
2012-03-20 21:25 - 2012-03-20 21:25 - 0000000 __ASH C:\Windows\System32\config\SYSTEM.tmp.LOG2
2012-03-20 21:25 - 2012-03-20 21:25 - 0000000 __ASH C:\Windows\System32\config\SYSTEM.tmp.LOG1
2012-03-20 21:25 - 2012-03-20 21:25 - 0000000 __ASH C:\Windows\System32\config\SOFTWARE.tmp.LOG2
2012-03-20 21:25 - 2012-03-20 21:25 - 0000000 __ASH C:\Windows\System32\config\SOFTWARE.tmp.LOG1
2012-03-20 21:25 - 2012-03-20 21:25 - 0000000 __ASH C:\Windows\System32\config\SECURITY.tmp.LOG2
2012-03-20 21:25 - 2012-03-20 21:25 - 0000000 __ASH C:\Windows\System32\config\SECURITY.tmp.LOG1
2012-03-20 21:25 - 2012-03-20 21:25 - 0000000 __ASH C:\Windows\System32\config\SAM.tmp.LOG2
2012-03-20 21:25 - 2012-03-20 21:25 - 0000000 __ASH C:\Windows\System32\config\SAM.tmp.LOG1
2012-03-20 21:25 - 2012-03-20 21:25 - 0000000 __ASH C:\Windows\System32\config\DEFAULT.tmp.LOG2
2012-03-20 21:25 - 2012-03-20 21:25 - 0000000 __ASH C:\Windows\System32\config\DEFAULT.tmp.LOG1
2012-03-20 20:39 - 2012-03-20 20:39 - 0000000 ____D C:\Program Files (x86)\Sophos
2012-03-20 20:30 - 2012-03-20 23:32 - 0000000 ____D C:\Program Files (x86)\trend micro
2012-03-20 20:30 - 2012-03-20 20:31 - 0000000 ____D C:\rsit
2012-03-20 20:22 - 2012-03-20 20:22 - 0293253 ____A C:\Users\Mary\Desktop\regrunlog.txt
2012-03-20 20:21 - 2012-03-20 20:21 - 0000000 ___RD C:\desktop.ini
2012-03-20 20:21 - 2012-03-20 20:21 - 0000000 ___RD C:\comment.htt
2012-03-20 20:21 - 2012-03-20 20:21 - 0000000 ___RD C:\autorun.inf
2012-03-20 20:20 - 2012-03-20 23:32 - 0000000 ____D C:\Users\Mary\My Documents\RegRun2
2012-03-20 20:20 - 2012-03-20 23:32 - 0000000 ____D C:\Users\Mary\Documents\RegRun2
2012-03-20 20:20 - 2012-03-20 23:32 - 0000000 ____D C:\Program Files (x86)\UnHackMe
2012-03-20 19:53 - 2012-03-20 19:53 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{EBE66089-92CE-494E-9F54-958AE6461D61}
2012-03-20 19:53 - 2012-03-20 19:53 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{C0F12ECD-C3F8-4211-9749-88AD0888A300}
2012-03-20 19:53 - 2012-03-20 19:53 - 0000000 ____D C:\Users\Mary\Local Settings\{EBE66089-92CE-494E-9F54-958AE6461D61}
2012-03-20 19:53 - 2012-03-20 19:53 - 0000000 ____D C:\Users\Mary\Local Settings\{C0F12ECD-C3F8-4211-9749-88AD0888A300}
2012-03-20 19:53 - 2012-03-20 19:53 - 0000000 ____D C:\Users\Mary\AppData\Local\{EBE66089-92CE-494E-9F54-958AE6461D61}
2012-03-20 19:53 - 2012-03-20 19:53 - 0000000 ____D C:\Users\Mary\AppData\Local\{C0F12ECD-C3F8-4211-9749-88AD0888A300}
2012-03-20 14:22 - 2012-03-20 14:22 - 0016578 ____A C:\Users\Mary\Desktop\Kings Customer Summary 2011.xlsx
2012-03-19 12:48 - 2012-03-19 12:48 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{91B0A55C-A7A4-46ED-80AF-6D95D55D752B}
2012-03-19 12:48 - 2012-03-19 12:48 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{71F0C1F5-C917-479D-83E8-8F1543F86E4F}
2012-03-19 12:48 - 2012-03-19 12:48 - 0000000 ____D C:\Users\Mary\Local Settings\{91B0A55C-A7A4-46ED-80AF-6D95D55D752B}
2012-03-19 12:48 - 2012-03-19 12:48 - 0000000 ____D C:\Users\Mary\Local Settings\{71F0C1F5-C917-479D-83E8-8F1543F86E4F}
2012-03-19 12:48 - 2012-03-19 12:48 - 0000000 ____D C:\Users\Mary\AppData\Local\{91B0A55C-A7A4-46ED-80AF-6D95D55D752B}
2012-03-19 12:48 - 2012-03-19 12:48 - 0000000 ____D C:\Users\Mary\AppData\Local\{71F0C1F5-C917-479D-83E8-8F1543F86E4F}
2012-03-19 12:42 - 2012-03-19 12:42 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{531EF75D-0892-4272-9E7D-C3DB874C21CB}
2012-03-19 12:42 - 2012-03-19 12:42 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{107A835F-CEDC-48EC-A48D-5D7CADAA3314}
2012-03-19 12:42 - 2012-03-19 12:42 - 0000000 ____D C:\Users\Mary\Local Settings\{531EF75D-0892-4272-9E7D-C3DB874C21CB}
2012-03-19 12:42 - 2012-03-19 12:42 - 0000000 ____D C:\Users\Mary\Local Settings\{107A835F-CEDC-48EC-A48D-5D7CADAA3314}
2012-03-19 12:42 - 2012-03-19 12:42 - 0000000 ____D C:\Users\Mary\AppData\Local\{531EF75D-0892-4272-9E7D-C3DB874C21CB}
2012-03-19 12:42 - 2012-03-19 12:42 - 0000000 ____D C:\Users\Mary\AppData\Local\{107A835F-CEDC-48EC-A48D-5D7CADAA3314}
2012-03-19 12:41 - 2012-03-19 12:41 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{5F67B435-B2F6-4F9F-890D-60E6B5857BC9}
2012-03-19 12:41 - 2012-03-19 12:41 - 0000000 ____D C:\Users\Mary\Local Settings\{5F67B435-B2F6-4F9F-890D-60E6B5857BC9}
2012-03-19 12:41 - 2012-03-19 12:41 - 0000000 ____D C:\Users\Mary\AppData\Local\{5F67B435-B2F6-4F9F-890D-60E6B5857BC9}
2012-03-19 12:36 - 2012-03-19 12:36 - 7569447 ___RA C:\Users\Mary\Desktop\photo-22 (2).jpg
2012-03-19 12:26 - 2012-03-19 12:26 - 2708811 ___RA C:\Users\Mary\Desktop\Mark summer home 7.jpg
2012-03-19 12:25 - 2012-03-19 12:25 - 3104288 ___RA C:\Users\Mary\Desktop\Mark summer home6.jpg
2012-03-19 12:24 - 2012-03-19 12:24 - 3466534 ___RA C:\Users\Mary\Desktop\Mark summer home5.jpg
2012-03-19 12:24 - 2012-03-19 12:24 - 2977068 ___RA C:\Users\Mary\Desktop\Mark summer home4.jpg
2012-03-19 12:23 - 2012-03-19 12:23 - 2918517 ___RA C:\Users\Mary\Desktop\Mark summer home 3.jpg
2012-03-19 12:23 - 2012-03-19 12:23 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{9737031A-063B-4CA8-9907-0980AEEE90CC}
2012-03-19 12:23 - 2012-03-19 12:23 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{82D256ED-43A5-46E9-8942-E26BC641EE97}
2012-03-19 12:23 - 2012-03-19 12:23 - 0000000 ____D C:\Users\Mary\Local Settings\{9737031A-063B-4CA8-9907-0980AEEE90CC}
2012-03-19 12:23 - 2012-03-19 12:23 - 0000000 ____D C:\Users\Mary\Local Settings\{82D256ED-43A5-46E9-8942-E26BC641EE97}
2012-03-19 12:23 - 2012-03-19 12:23 - 0000000 ____D C:\Users\Mary\AppData\Local\{9737031A-063B-4CA8-9907-0980AEEE90CC}
2012-03-19 12:23 - 2012-03-19 12:23 - 0000000 ____D C:\Users\Mary\AppData\Local\{82D256ED-43A5-46E9-8942-E26BC641EE97}
2012-03-19 12:22 - 2012-03-19 12:22 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{5A805DBA-AF0C-4DB7-8EE8-61C8327E76E4}
2012-03-19 12:22 - 2012-03-19 12:22 - 0000000 ____D C:\Users\Mary\Local Settings\{5A805DBA-AF0C-4DB7-8EE8-61C8327E76E4}
2012-03-19 12:22 - 2012-03-19 12:22 - 0000000 ____D C:\Users\Mary\AppData\Local\{5A805DBA-AF0C-4DB7-8EE8-61C8327E76E4}
2012-03-19 12:21 - 2012-03-19 12:22 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{A492AF5D-A8AA-4E93-B806-92E50A102B65}
2012-03-19 12:21 - 2012-03-19 12:22 - 0000000 ____D C:\Users\Mary\Local Settings\{A492AF5D-A8AA-4E93-B806-92E50A102B65}
2012-03-19 12:21 - 2012-03-19 12:22 - 0000000 ____D C:\Users\Mary\AppData\Local\{A492AF5D-A8AA-4E93-B806-92E50A102B65}
2012-03-19 12:21 - 2012-03-19 12:21 - 2827719 ____A C:\Users\Mary\Desktop\1photo.JPG
2012-03-19 12:20 - 2012-03-19 12:20 - 2827719 ____A C:\Users\Mary\Downloads\photo.JPG
2012-03-19 12:19 - 2012-03-19 13:12 - 0000000 ____D C:\Users\Mary\Desktop\Linda's home
2012-03-19 10:35 - 2012-03-19 10:35 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{379AF294-4699-488A-BF1F-3773BB69283A}
2012-03-19 10:35 - 2012-03-19 10:35 - 0000000 ____D C:\Users\Mary\Local Settings\{379AF294-4699-488A-BF1F-3773BB69283A}
2012-03-19 10:35 - 2012-03-19 10:35 - 0000000 ____D C:\Users\Mary\AppData\Local\{379AF294-4699-488A-BF1F-3773BB69283A}
2012-03-19 10:34 - 2012-03-19 10:35 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{8DE73FE6-D428-44E8-B722-E239141CECE6}
2012-03-19 10:34 - 2012-03-19 10:35 - 0000000 ____D C:\Users\Mary\Local Settings\{8DE73FE6-D428-44E8-B722-E239141CECE6}
2012-03-19 10:34 - 2012-03-19 10:35 - 0000000 ____D C:\Users\Mary\AppData\Local\{8DE73FE6-D428-44E8-B722-E239141CECE6}
2012-03-19 10:34 - 2012-03-19 10:34 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{A45B4A62-6F42-470B-BB18-F4F0663FB467}
2012-03-19 10:34 - 2012-03-19 10:34 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{7AF53093-FBC7-4282-AC66-8E906E96E0A0}
2012-03-19 10:34 - 2012-03-19 10:34 - 0000000 ____D C:\Users\Mary\Local Settings\{A45B4A62-6F42-470B-BB18-F4F0663FB467}
2012-03-19 10:34 - 2012-03-19 10:34 - 0000000 ____D C:\Users\Mary\Local Settings\{7AF53093-FBC7-4282-AC66-8E906E96E0A0}
2012-03-19 10:34 - 2012-03-19 10:34 - 0000000 ____D C:\Users\Mary\AppData\Local\{A45B4A62-6F42-470B-BB18-F4F0663FB467}
2012-03-19 10:34 - 2012-03-19 10:34 - 0000000 ____D C:\Users\Mary\AppData\Local\{7AF53093-FBC7-4282-AC66-8E906E96E0A0}
2012-03-19 10:32 - 2012-03-19 10:32 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{8339C3EA-554B-4225-A7BC-D50663BBB13F}
2012-03-19 10:32 - 2012-03-19 10:32 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{3FBCBACF-68BF-47ED-9724-D305A05C7A2A}
2012-03-19 10:32 - 2012-03-19 10:32 - 0000000 ____D C:\Users\Mary\Local Settings\{8339C3EA-554B-4225-A7BC-D50663BBB13F}
2012-03-19 10:32 - 2012-03-19 10:32 - 0000000 ____D C:\Users\Mary\Local Settings\{3FBCBACF-68BF-47ED-9724-D305A05C7A2A}
2012-03-19 10:32 - 2012-03-19 10:32 - 0000000 ____D C:\Users\Mary\AppData\Local\{8339C3EA-554B-4225-A7BC-D50663BBB13F}
2012-03-19 10:32 - 2012-03-19 10:32 - 0000000 ____D C:\Users\Mary\AppData\Local\{3FBCBACF-68BF-47ED-9724-D305A05C7A2A}
2012-03-18 22:32 - 2012-03-18 22:32 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{52D6BC50-B26C-4457-AD65-4DD374FA28C9}
2012-03-18 22:32 - 2012-03-18 22:32 - 0000000 ____D C:\Users\Mary\Local Settings\{52D6BC50-B26C-4457-AD65-4DD374FA28C9}
2012-03-18 22:32 - 2012-03-18 22:32 - 0000000 ____D C:\Users\Mary\AppData\Local\{52D6BC50-B26C-4457-AD65-4DD374FA28C9}
2012-03-18 22:31 - 2012-03-18 22:32 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{E8EF940B-0912-47D7-A6AE-4DFA0FE3481F}
2012-03-18 22:31 - 2012-03-18 22:32 - 0000000 ____D C:\Users\Mary\Local Settings\{E8EF940B-0912-47D7-A6AE-4DFA0FE3481F}
2012-03-18 22:31 - 2012-03-18 22:32 - 0000000 ____D C:\Users\Mary\AppData\Local\{E8EF940B-0912-47D7-A6AE-4DFA0FE3481F}
2012-03-18 21:05 - 2012-03-18 21:06 - 0184903 ____A C:\Users\Mary\Desktop\Daves credit report 3.18.12.pdf
2012-03-17 21:18 - 2012-03-17 21:18 - 6055014 ____A C:\Users\Mary\Desktop\cabin.docx
2012-03-15 18:02 - 2012-03-15 18:02 - 0019459 ____A C:\Users\Mary\Desktop\hat.png
2012-03-15 18:02 - 2012-03-15 18:02 - 0014907 ____A C:\Users\Mary\Desktop\tshirt.png
2012-03-15 18:01 - 2012-03-15 18:01 - 0003442 ____A C:\Users\Mary\Desktop\standard hoodie.jpg
2012-03-15 18:01 - 2012-03-15 18:01 - 0002712 ____A C:\Users\Mary\Desktop\sippy hoodie.jpg
2012-03-13 22:23 - 2012-03-18 19:23 - 0327680 ___RA C:\Users\Mary\Desktop\Carpet Doctor of Minnesota.QBW.TLG
2012-03-13 22:23 - 2012-03-18 19:23 - 0000354 ____A C:\Users\Mary\Desktop\Carpet Doctor of Minnesota.QBW.ND
2012-03-13 22:23 - 2012-03-13 22:23 - 0000496 ___RA C:\Users\Mary\Desktop\Carpet Doctor of Minnesota.lgb
2012-03-13 17:25 - 2012-03-17 13:09 - 0000344 ____A C:\Users\Mary\Desktop\Mary Friesen2006.QBW.ND
2012-03-13 14:53 - 2012-03-13 14:53 - 0000496 ___RA C:\Users\Mary\Desktop\PRO CNC INC 2012.lgb
2012-03-13 14:52 - 2012-03-13 17:24 - 0000344 ____A C:\Users\Mary\Desktop\PRO CNC INC 2012.qbw.ND
2012-03-13 14:51 - 2012-03-13 17:24 - 42012672 ___RA C:\Users\Mary\Desktop\PRO CNC INC 2012.qbw
2012-03-13 14:44 - 2012-03-13 14:44 - 0019522 ____A C:\Users\Mary\Desktop\THOMMES_--_DISSOLUTION_DECISIONS_WITH_FINANCIAL_IMPLICATIONS.docx
2012-03-13 14:44 - 2012-03-13 14:44 - 0000162 ___AH C:\Users\Mary\Desktop\~$OMMES_--_DISSOLUTION_DECISIONS_WITH_FINANCIAL_IMPLICATIONS.docx
2012-03-13 14:43 - 2012-03-13 14:43 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{7379DF0C-6AEE-4B10-BE94-3D1348C1C1D8}
2012-03-13 14:43 - 2012-03-13 14:43 - 0000000 ____D C:\Users\Mary\Local Settings\{7379DF0C-6AEE-4B10-BE94-3D1348C1C1D8}
2012-03-13 14:43 - 2012-03-13 14:43 - 0000000 ____D C:\Users\Mary\AppData\Local\{7379DF0C-6AEE-4B10-BE94-3D1348C1C1D8}
2012-03-13 14:42 - 2012-03-13 14:43 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{EC596A09-FA76-4D87-8786-EF80277DD951}
2012-03-13 14:42 - 2012-03-13 14:43 - 0000000 ____D C:\Users\Mary\Local Settings\{EC596A09-FA76-4D87-8786-EF80277DD951}
2012-03-13 14:42 - 2012-03-13 14:43 - 0000000 ____D C:\Users\Mary\AppData\Local\{EC596A09-FA76-4D87-8786-EF80277DD951}
2012-03-13 13:48 - 2012-03-13 13:48 - 0081954 ____A C:\Users\Mary\Desktop\Michael 2011 payments.pdf
2012-03-13 13:47 - 2012-03-13 13:47 - 0076659 ____A C:\Users\Mary\Desktop\Michael 2010 payments.pdf
2012-03-13 13:46 - 2012-03-13 13:46 - 0072553 ____A C:\Users\Mary\Desktop\Michael 2009 payments.pdf
2012-03-13 13:45 - 2012-03-13 13:45 - 0062390 ____A C:\Users\Mary\Desktop\Michael 2008 payments.pdf
2012-03-13 13:27 - 2012-03-13 13:38 - 0012788 ____A C:\Users\Mary\Desktop\Service Loan Processing.docx
2012-03-13 13:25 - 2012-03-13 15:05 - 0012889 ____A C:\Users\Mary\Desktop\Michael Thommes child support calculation March 2012.xlsx
2012-03-13 09:07 - 2012-03-13 09:07 - 0018881 ____A C:\Users\Mary\Desktop\Michael Thommes county record 3.13.12.docx
2012-03-13 09:07 - 2012-03-13 09:07 - 0000162 ___AH C:\Users\Mary\Desktop\~$chael Thommes county record 3.13.12.docx
2012-03-13 08:26 - 2012-03-13 08:26 - 7537329 ____A C:\Users\Mary\Desktop\2012-03-11@14.45.34 Linda appraisal.pdf
2012-03-12 22:30 - 2012-03-12 22:30 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{10A9B984-23A4-41AC-BEB9-FA6ED23A7721}
2012-03-12 22:30 - 2012-03-12 22:30 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{00C428C9-03D8-49FF-9FB3-3A718D8EDCCE}
2012-03-12 22:30 - 2012-03-12 22:30 - 0000000 ____D C:\Users\Mary\Local Settings\{10A9B984-23A4-41AC-BEB9-FA6ED23A7721}
2012-03-12 22:30 - 2012-03-12 22:30 - 0000000 ____D C:\Users\Mary\Local Settings\{00C428C9-03D8-49FF-9FB3-3A718D8EDCCE}
2012-03-12 22:30 - 2012-03-12 22:30 - 0000000 ____D C:\Users\Mary\AppData\Local\{10A9B984-23A4-41AC-BEB9-FA6ED23A7721}
2012-03-12 22:30 - 2012-03-12 22:30 - 0000000 ____D C:\Users\Mary\AppData\Local\{00C428C9-03D8-49FF-9FB3-3A718D8EDCCE}
2012-03-12 21:24 - 2012-03-12 21:24 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{A8138F2F-07E6-4759-B981-3D7F29192E19}
2012-03-12 21:24 - 2012-03-12 21:24 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{78F53957-80F7-4FEF-98C7-9F7517B62403}
2012-03-12 21:24 - 2012-03-12 21:24 - 0000000 ____D C:\Users\Mary\Local Settings\{A8138F2F-07E6-4759-B981-3D7F29192E19}
2012-03-12 21:24 - 2012-03-12 21:24 - 0000000 ____D C:\Users\Mary\Local Settings\{78F53957-80F7-4FEF-98C7-9F7517B62403}
2012-03-12 21:24 - 2012-03-12 21:24 - 0000000 ____D C:\Users\Mary\AppData\Local\{A8138F2F-07E6-4759-B981-3D7F29192E19}
2012-03-12 21:24 - 2012-03-12 21:24 - 0000000 ____D C:\Users\Mary\AppData\Local\{78F53957-80F7-4FEF-98C7-9F7517B62403}
2012-03-12 20:24 - 2012-03-13 09:09 - 0327680 ___RA C:\Users\Mary\Desktop\new and improved DS.QBW.TLG
2012-03-12 20:24 - 2012-03-13 09:09 - 0000347 ____A C:\Users\Mary\Desktop\new and improved DS.QBW.ND
2012-03-12 20:24 - 2012-03-12 20:24 - 0000496 ___RA C:\Users\Mary\Desktop\new and improved DS.lgb
2012-03-11 10:55 - 2012-03-11 10:55 - 0013096 ____A C:\Users\Mary\Desktop\Mark.docx
2012-03-11 00:39 - 2012-03-11 00:39 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{49B4FFB5-85C2-4470-8F2A-3E793734AE9F}
2012-03-11 00:39 - 2012-03-11 00:39 - 0000000 ____D C:\Users\Mary\Local Settings\{49B4FFB5-85C2-4470-8F2A-3E793734AE9F}
2012-03-11 00:39 - 2012-03-11 00:39 - 0000000 ____D C:\Users\Mary\AppData\Local\{49B4FFB5-85C2-4470-8F2A-3E793734AE9F}
2012-03-11 00:38 - 2012-03-11 00:39 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{57B8CF48-160B-4AAB-8264-0D352E7E17C5}
2012-03-11 00:38 - 2012-03-11 00:39 - 0000000 ____D C:\Users\Mary\Local Settings\{57B8CF48-160B-4AAB-8264-0D352E7E17C5}
2012-03-11 00:38 - 2012-03-11 00:39 - 0000000 ____D C:\Users\Mary\AppData\Local\{57B8CF48-160B-4AAB-8264-0D352E7E17C5}
2012-03-11 00:35 - 2012-03-11 00:35 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{F08591D0-2BA7-4491-A1DB-3FFE91403DF3}
2012-03-11 00:35 - 2012-03-11 00:35 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{D2DEC6D1-B73F-4257-B43C-9421B13AD7A2}
2012-03-11 00:35 - 2012-03-11 00:35 - 0000000 ____D C:\Users\Mary\Local Settings\{F08591D0-2BA7-4491-A1DB-3FFE91403DF3}
2012-03-11 00:35 - 2012-03-11 00:35 - 0000000 ____D C:\Users\Mary\Local Settings\{D2DEC6D1-B73F-4257-B43C-9421B13AD7A2}
2012-03-11 00:35 - 2012-03-11 00:35 - 0000000 ____D C:\Users\Mary\AppData\Local\{F08591D0-2BA7-4491-A1DB-3FFE91403DF3}
2012-03-11 00:35 - 2012-03-11 00:35 - 0000000 ____D C:\Users\Mary\AppData\Local\{D2DEC6D1-B73F-4257-B43C-9421B13AD7A2}
2012-03-11 00:28 - 2012-03-11 00:29 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{D975145B-DD78-40B9-A40D-8E2F8EFF8799}
2012-03-11 00:28 - 2012-03-11 00:29 - 0000000 ____D C:\Users\Mary\Local Settings\{D975145B-DD78-40B9-A40D-8E2F8EFF8799}
2012-03-11 00:28 - 2012-03-11 00:29 - 0000000 ____D C:\Users\Mary\AppData\Local\{D975145B-DD78-40B9-A40D-8E2F8EFF8799}
2012-03-11 00:28 - 2012-03-11 00:28 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{CBDDDF4C-996D-4640-9C9B-262A8E802BD6}
2012-03-11 00:28 - 2012-03-11 00:28 - 0000000 ____D C:\Users\Mary\Local Settings\{CBDDDF4C-996D-4640-9C9B-262A8E802BD6}
2012-03-11 00:28 - 2012-03-11 00:28 - 0000000 ____D C:\Users\Mary\AppData\Local\{CBDDDF4C-996D-4640-9C9B-262A8E802BD6}
2012-03-11 00:17 - 2012-03-11 00:17 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{F9BD49C2-41BE-4F58-800D-0BC362EA8FAE}
2012-03-11 00:17 - 2012-03-11 00:17 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{7CA2C86F-9E28-4AD3-9F8F-8CAB9FE0EC1D}
2012-03-11 00:17 - 2012-03-11 00:17 - 0000000 ____D C:\Users\Mary\Local Settings\{F9BD49C2-41BE-4F58-800D-0BC362EA8FAE}
2012-03-11 00:17 - 2012-03-11 00:17 - 0000000 ____D C:\Users\Mary\Local Settings\{7CA2C86F-9E28-4AD3-9F8F-8CAB9FE0EC1D}
2012-03-11 00:17 - 2012-03-11 00:17 - 0000000 ____D C:\Users\Mary\AppData\Local\{F9BD49C2-41BE-4F58-800D-0BC362EA8FAE}
2012-03-11 00:17 - 2012-03-11 00:17 - 0000000 ____D C:\Users\Mary\AppData\Local\{7CA2C86F-9E28-4AD3-9F8F-8CAB9FE0EC1D}
2012-03-10 23:56 - 2012-03-10 23:57 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{947807CD-1BF2-49C9-8033-187EC49B3B09}
2012-03-10 23:56 - 2012-03-10 23:57 - 0000000 ____D C:\Users\Mary\Local Settings\{947807CD-1BF2-49C9-8033-187EC49B3B09}
2012-03-10 23:56 - 2012-03-10 23:57 - 0000000 ____D C:\Users\Mary\AppData\Local\{947807CD-1BF2-49C9-8033-187EC49B3B09}
2012-03-10 23:56 - 2012-03-10 23:56 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{9ED7ECED-5847-48CA-808E-5E78FA3FAACE}
2012-03-10 23:56 - 2012-03-10 23:56 - 0000000 ____D C:\Users\Mary\Local Settings\{9ED7ECED-5847-48CA-808E-5E78FA3FAACE}
2012-03-10 23:56 - 2012-03-10 23:56 - 0000000 ____D C:\Users\Mary\AppData\Local\{9ED7ECED-5847-48CA-808E-5E78FA3FAACE}
2012-03-10 18:05 - 2012-03-10 18:05 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{642A87DD-6633-4A0D-BB81-31DC3028DE62}
2012-03-10 18:05 - 2012-03-10 18:05 - 0000000 ____D C:\Users\Mary\Local Settings\{642A87DD-6633-4A0D-BB81-31DC3028DE62}
2012-03-10 18:05 - 2012-03-10 18:05 - 0000000 ____D C:\Users\Mary\AppData\Local\{642A87DD-6633-4A0D-BB81-31DC3028DE62}
2012-03-10 18:04 - 2012-03-10 18:05 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{1115A089-FF1A-4E0E-ADA8-0AA33CC695D8}
2012-03-10 18:04 - 2012-03-10 18:05 - 0000000 ____D C:\Users\Mary\Local Settings\{1115A089-FF1A-4E0E-ADA8-0AA33CC695D8}
2012-03-10 18:04 - 2012-03-10 18:05 - 0000000 ____D C:\Users\Mary\AppData\Local\{1115A089-FF1A-4E0E-ADA8-0AA33CC695D8}
2012-03-10 17:46 - 2012-03-10 17:47 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{62745F2A-E390-40C4-B116-B158C11FFB55}
2012-03-10 17:46 - 2012-03-10 17:47 - 0000000 ____D C:\Users\Mary\Local Settings\{62745F2A-E390-40C4-B116-B158C11FFB55}
2012-03-10 17:46 - 2012-03-10 17:47 - 0000000 ____D C:\Users\Mary\AppData\Local\{62745F2A-E390-40C4-B116-B158C11FFB55}
2012-03-10 17:46 - 2012-03-10 17:46 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{E88C3005-DC23-40C6-B2B3-612AA3294AB3}
2012-03-10 17:46 - 2012-03-10 17:46 - 0000000 ____D C:\Users\Mary\Local Settings\{E88C3005-DC23-40C6-B2B3-612AA3294AB3}
2012-03-10 17:46 - 2012-03-10 17:46 - 0000000 ____D C:\Users\Mary\AppData\Local\{E88C3005-DC23-40C6-B2B3-612AA3294AB3}
2012-03-10 17:40 - 2012-03-10 17:40 - 0200835 ____A C:\Users\Mary\Desktop\Trillium Court Brochure.pdf
2012-03-10 16:40 - 2012-03-10 17:03 - 0153088 ____A C:\Users\Mary\Desktop\Trillium Court Brochure.doc
2012-03-10 16:38 - 2012-03-11 00:02 - 5395207 ____A C:\Users\Mary\Desktop\Disclosures.pdf
2012-03-10 16:37 - 2012-03-10 16:37 - 5391752 ____A C:\Users\Mary\Downloads\2012-03-05@14.12.27[1].pdf
2012-03-10 14:59 - 2012-03-10 14:59 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{EA9FC68F-D864-4DBC-AA54-DC4958F18111}
2012-03-10 14:59 - 2012-03-10 14:59 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{6DF4496F-B3D1-413B-8CE6-E6D91E5C4D56}
2012-03-10 14:59 - 2012-03-10 14:59 - 0000000 ____D C:\Users\Mary\Local Settings\{EA9FC68F-D864-4DBC-AA54-DC4958F18111}
2012-03-10 14:59 - 2012-03-10 14:59 - 0000000 ____D C:\Users\Mary\Local Settings\{6DF4496F-B3D1-413B-8CE6-E6D91E5C4D56}
2012-03-10 14:59 - 2012-03-10 14:59 - 0000000 ____D C:\Users\Mary\AppData\Local\{EA9FC68F-D864-4DBC-AA54-DC4958F18111}
2012-03-10 14:59 - 2012-03-10 14:59 - 0000000 ____D C:\Users\Mary\AppData\Local\{6DF4496F-B3D1-413B-8CE6-E6D91E5C4D56}
2012-03-10 14:57 - 2012-03-10 14:57 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{9096CD9D-1EF4-4C16-AD4F-CF3A8E6ABD6D}
2012-03-10 14:57 - 2012-03-10 14:57 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{4831BEBE-4A27-4EDB-90D9-732D1C3D5507}
2012-03-10 14:57 - 2012-03-10 14:57 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{1973C324-9E74-4E66-AC83-2D24BCAFC7CE}
2012-03-10 14:57 - 2012-03-10 14:57 - 0000000 ____D C:\Users\Mary\Local Settings\{9096CD9D-1EF4-4C16-AD4F-CF3A8E6ABD6D}
2012-03-10 14:57 - 2012-03-10 14:57 - 0000000 ____D C:\Users\Mary\Local Settings\{4831BEBE-4A27-4EDB-90D9-732D1C3D5507}
2012-03-10 14:57 - 2012-03-10 14:57 - 0000000 ____D C:\Users\Mary\Local Settings\{1973C324-9E74-4E66-AC83-2D24BCAFC7CE}
2012-03-10 14:57 - 2012-03-10 14:57 - 0000000 ____D C:\Users\Mary\AppData\Local\{9096CD9D-1EF4-4C16-AD4F-CF3A8E6ABD6D}
2012-03-10 14:57 - 2012-03-10 14:57 - 0000000 ____D C:\Users\Mary\AppData\Local\{4831BEBE-4A27-4EDB-90D9-732D1C3D5507}
2012-03-10 14:57 - 2012-03-10 14:57 - 0000000 ____D C:\Users\Mary\AppData\Local\{1973C324-9E74-4E66-AC83-2D24BCAFC7CE}
2012-03-10 14:56 - 2012-03-10 14:56 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{8E0AD166-ECA8-43B2-9B22-223A1F38C67D}
2012-03-10 14:56 - 2012-03-10 14:56 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{039E2A52-0A73-4194-9F67-0D7DB7AD2891}
2012-03-10 14:56 - 2012-03-10 14:56 - 0000000 ____D C:\Users\Mary\Local Settings\{8E0AD166-ECA8-43B2-9B22-223A1F38C67D}
2012-03-10 14:56 - 2012-03-10 14:56 - 0000000 ____D C:\Users\Mary\Local Settings\{039E2A52-0A73-4194-9F67-0D7DB7AD2891}
2012-03-10 14:56 - 2012-03-10 14:56 - 0000000 ____D C:\Users\Mary\AppData\Local\{8E0AD166-ECA8-43B2-9B22-223A1F38C67D}
2012-03-10 14:56 - 2012-03-10 14:56 - 0000000 ____D C:\Users\Mary\AppData\Local\{039E2A52-0A73-4194-9F67-0D7DB7AD2891}
2012-03-10 14:55 - 2012-03-10 14:56 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{FA0B3130-5406-4897-A2FD-F8561B3938D1}
2012-03-10 14:55 - 2012-03-10 14:56 - 0000000 ____D C:\Users\Mary\Local Settings\{FA0B3130-5406-4897-A2FD-F8561B3938D1}
2012-03-10 14:55 - 2012-03-10 14:56 - 0000000 ____D C:\Users\Mary\AppData\Local\{FA0B3130-5406-4897-A2FD-F8561B3938D1}
2012-03-10 14:54 - 2012-03-10 14:54 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{FC8B853B-5695-4722-A9BF-0F3A680DC31A}
2012-03-10 14:54 - 2012-03-10 14:54 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{051DE60A-F609-4B05-AD22-199F3035584C}
2012-03-10 14:54 - 2012-03-10 14:54 - 0000000 ____D C:\Users\Mary\Local Settings\{FC8B853B-5695-4722-A9BF-0F3A680DC31A}
2012-03-10 14:54 - 2012-03-10 14:54 - 0000000 ____D C:\Users\Mary\Local Settings\{051DE60A-F609-4B05-AD22-199F3035584C}
2012-03-10 14:54 - 2012-03-10 14:54 - 0000000 ____D C:\Users\Mary\AppData\Local\{FC8B853B-5695-4722-A9BF-0F3A680DC31A}
2012-03-10 14:54 - 2012-03-10 14:54 - 0000000 ____D C:\Users\Mary\AppData\Local\{051DE60A-F609-4B05-AD22-199F3035584C}
2012-03-10 14:53 - 2012-03-10 14:53 - 0000000 ____D C:\Users\Mary\Desktop\New folder
2012-03-10 14:51 - 2012-03-10 14:51 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{B53869B7-CE64-431C-802C-76797805AD27}
2012-03-10 14:51 - 2012-03-10 14:51 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{3AB2805B-2C4C-4C45-9826-AE75F9CFC569}
2012-03-10 14:51 - 2012-03-10 14:51 - 0000000 ____D C:\Users\Mary\Local Settings\{B53869B7-CE64-431C-802C-76797805AD27}
2012-03-10 14:51 - 2012-03-10 14:51 - 0000000 ____D C:\Users\Mary\Local Settings\{3AB2805B-2C4C-4C45-9826-AE75F9CFC569}
2012-03-10 14:51 - 2012-03-10 14:51 - 0000000 ____D C:\Users\Mary\AppData\Local\{B53869B7-CE64-431C-802C-76797805AD27}
2012-03-10 14:51 - 2012-03-10 14:51 - 0000000 ____D C:\Users\Mary\AppData\Local\{3AB2805B-2C4C-4C45-9826-AE75F9CFC569}
2012-03-10 14:35 - 2012-03-10 14:35 - 0000000 ____D C:\Users\Mary\Desktop\cell phone pics
2012-03-10 14:32 - 2012-03-19 10:34 - 0000000 ____D C:\Users\Mary\Desktop\March 2012 pics
2012-03-09 23:38 - 2012-03-09 23:38 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{9D682408-8EA1-4231-A4BD-154C85113E49}
2012-03-09 23:38 - 2012-03-09 23:38 - 0000000 ____D C:\Users\Mary\Local Settings\{9D682408-8EA1-4231-A4BD-154C85113E49}
2012-03-09 23:38 - 2012-03-09 23:38 - 0000000 ____D C:\Users\Mary\AppData\Local\{9D682408-8EA1-4231-A4BD-154C85113E49}
2012-03-09 23:37 - 2012-03-09 23:38 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{0C2647E5-6815-4375-931A-11CE8EB4D918}
2012-03-09 23:37 - 2012-03-09 23:38 - 0000000 ____D C:\Users\Mary\Local Settings\{0C2647E5-6815-4375-931A-11CE8EB4D918}
2012-03-09 23:37 - 2012-03-09 23:38 - 0000000 ____D C:\Users\Mary\AppData\Local\{0C2647E5-6815-4375-931A-11CE8EB4D918}
2012-03-08 18:17 - 2012-03-08 20:09 - 0009578 ____A C:\Users\Mary\Desktop\Michael Thommes child support calculation.xlsx
2012-03-08 17:41 - 2012-03-08 17:41 - 0000496 ___RA C:\Users\Mary\Desktop\Michael Thommes 2012.lgb
2012-03-08 17:40 - 2012-03-13 14:46 - 2949120 ___RA C:\Users\Mary\Desktop\Michael Thommes 2012.QBW.TLG
2012-03-08 17:40 - 2012-03-13 14:46 - 17829888 ___RA C:\Users\Mary\Desktop\Michael Thommes 2012.QBW
2012-03-08 17:40 - 2012-03-13 14:46 - 0000348 ____A C:\Users\Mary\Desktop\Michael Thommes 2012.QBW.ND
2012-03-08 17:40 - 2012-03-08 17:40 - 0000412 ____A C:\Users\Mary\Desktop\Michael Thommes 2012.ND
2012-03-08 17:40 - 2012-03-08 17:40 - 0000000 ____D C:\Users\Mary\Desktop\Restored_Michael Thommes 2012_Files
2012-03-08 17:05 - 2012-03-13 17:24 - 6881280 ___RA C:\Users\Mary\Desktop\PRO CNC INC 2012.qbw.TLG
2012-03-08 17:04 - 2012-03-13 14:48 - 0000000 ____D C:\Users\Mary\Desktop\Restored_PRO CNC INC 2012_Files
2012-03-08 17:04 - 2012-03-08 17:04 - 0000413 ____A C:\Users\Mary\Desktop\PRO CNC INC 2012.ND
2012-03-08 16:07 - 2012-03-20 12:47 - 0327680 ___RA C:\Users\Mary\Desktop\plowing.QBW.TLG
2012-03-08 16:07 - 2012-03-19 14:40 - 0000335 ____A C:\Users\Mary\Desktop\plowing.QBW.ND
2012-03-08 16:07 - 2012-03-08 16:07 - 0000496 ___RA C:\Users\Mary\Desktop\plowing.lgb
2012-03-08 15:49 - 2012-03-19 12:54 - 0000000 ____D C:\Users\Mary\Desktop\Marks home
2012-03-08 15:48 - 2012-03-08 15:48 - 0000000 ____D C:\Users\Mary\Desktop\MATT
2012-03-05 20:49 - 2012-03-19 18:35 - 0229888 ____A C:\Users\Mary\Desktop\NEWER Budget March 2012.xls
2012-03-05 20:46 - 2012-03-05 20:46 - 0081637 ____A C:\Users\Mary\Desktop\New Budget Oct 2011 with new computer.rar
2012-03-05 19:32 - 2012-03-05 19:32 - 0037376 ____A C:\Users\Mary\Desktop\Mary Friesen Resume MUTA MARCH 2012.doc
2012-03-05 19:32 - 2012-03-05 19:32 - 0000162 ___AH C:\Users\Mary\Desktop\~$ry Friesen Resume MUTA MARCH 2012.doc
2012-03-05 14:06 - 2012-03-05 14:06 - 0011495 ____A C:\Users\Mary\Desktop\David Sprunk assets March 2012.xlsx
2012-03-05 12:06 - 2012-03-05 12:06 - 0184873 ____A C:\Users\Mary\Desktop\Dave's credit report 3.2012.pdf
2012-03-05 11:38 - 2012-03-05 11:38 - 0156672 ____A C:\Users\Mary\Downloads\champlin.doc
2012-03-03 23:21 - 2012-03-03 23:21 - 0065099 ____A C:\Users\Mary\Desktop\ffff.jpg
2012-03-03 23:21 - 2012-03-03 23:21 - 0051019 ____A C:\Users\Mary\Desktop\fffff.jpg
2012-03-03 23:17 - 2012-03-03 23:17 - 0099583 ____A C:\Users\Mary\Desktop\fff.jpg
2012-03-03 22:12 - 2012-03-03 22:12 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{F026480C-A1B1-4332-873B-077081FB2AE7}
2012-03-03 22:12 - 2012-03-03 22:12 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{5A9787AF-E63C-4FCF-B33B-38537E798B0B}
2012-03-03 22:12 - 2012-03-03 22:12 - 0000000 ____D C:\Users\Mary\Local Settings\{F026480C-A1B1-4332-873B-077081FB2AE7}
2012-03-03 22:12 - 2012-03-03 22:12 - 0000000 ____D C:\Users\Mary\Local Settings\{5A9787AF-E63C-4FCF-B33B-38537E798B0B}
2012-03-03 22:12 - 2012-03-03 22:12 - 0000000 ____D C:\Users\Mary\AppData\Local\{F026480C-A1B1-4332-873B-077081FB2AE7}
2012-03-03 22:12 - 2012-03-03 22:12 - 0000000 ____D C:\Users\Mary\AppData\Local\{5A9787AF-E63C-4FCF-B33B-38537E798B0B}
2012-03-03 22:07 - 2012-03-03 22:07 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{9EBC7576-9488-42A5-9AE8-D76BD0ED1217}
2012-03-03 22:07 - 2012-03-03 22:07 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{0FC96574-FB5D-4F92-AB02-A4507959A0BE}
2012-03-03 22:07 - 2012-03-03 22:07 - 0000000 ____D C:\Users\Mary\Local Settings\{9EBC7576-9488-42A5-9AE8-D76BD0ED1217}
2012-03-03 22:07 - 2012-03-03 22:07 - 0000000 ____D C:\Users\Mary\Local Settings\{0FC96574-FB5D-4F92-AB02-A4507959A0BE}
2012-03-03 22:07 - 2012-03-03 22:07 - 0000000 ____D C:\Users\Mary\AppData\Local\{9EBC7576-9488-42A5-9AE8-D76BD0ED1217}
2012-03-03 22:07 - 2012-03-03 22:07 - 0000000 ____D C:\Users\Mary\AppData\Local\{0FC96574-FB5D-4F92-AB02-A4507959A0BE}
2012-03-03 22:02 - 2009-09-04 18:44 - 0515416 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll
2012-03-03 22:02 - 2009-09-04 18:44 - 0069464 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll
2012-03-03 22:02 - 2009-09-04 18:29 - 0523088 ____A (Microsoft Corporation) C:\Windows\System32\d3dx10_42.dll
2012-03-03 22:02 - 2009-09-04 18:29 - 0453456 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll
2012-03-03 22:02 - 2006-11-29 14:06 - 4398360 ____A (Microsoft Corporation) C:\Windows\System32\d3dx9_32.dll
2012-03-03 22:02 - 2006-11-29 14:06 - 3426072 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll
2012-03-03 22:00 - 2012-03-03 22:00 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{F7666F55-90A9-432A-B0D2-0FAFDC30A014}
2012-03-03 22:00 - 2012-03-03 22:00 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{5593A03F-94DD-4296-86A1-A2330A03BDA9}
2012-03-03 22:00 - 2012-03-03 22:00 - 0000000 ____D C:\Users\Mary\Local Settings\{F7666F55-90A9-432A-B0D2-0FAFDC30A014}
2012-03-03 22:00 - 2012-03-03 22:00 - 0000000 ____D C:\Users\Mary\Local Settings\{5593A03F-94DD-4296-86A1-A2330A03BDA9}
2012-03-03 22:00 - 2012-03-03 22:00 - 0000000 ____D C:\Users\Mary\AppData\Local\{F7666F55-90A9-432A-B0D2-0FAFDC30A014}
2012-03-03 22:00 - 2012-03-03 22:00 - 0000000 ____D C:\Users\Mary\AppData\Local\{5593A03F-94DD-4296-86A1-A2330A03BDA9}
2012-03-03 21:59 - 2012-03-03 21:59 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{E43BFE88-F2DF-4367-939C-2FCBBBDBC61B}
2012-03-03 21:59 - 2012-03-03 21:59 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{AA5A20E2-C2B0-47D3-84A7-097241AC1258}
2012-03-03 21:59 - 2012-03-03 21:59 - 0000000 ____D C:\Users\Mary\Local Settings\{E43BFE88-F2DF-4367-939C-2FCBBBDBC61B}
2012-03-03 21:59 - 2012-03-03 21:59 - 0000000 ____D C:\Users\Mary\Local Settings\{AA5A20E2-C2B0-47D3-84A7-097241AC1258}
2012-03-03 21:59 - 2012-03-03 21:59 - 0000000 ____D C:\Users\Mary\AppData\Local\{E43BFE88-F2DF-4367-939C-2FCBBBDBC61B}
2012-03-03 21:59 - 2012-03-03 21:59 - 0000000 ____D C:\Users\Mary\AppData\Local\{AA5A20E2-C2B0-47D3-84A7-097241AC1258}
2012-03-03 21:48 - 2012-03-03 21:48 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{4C499780-B143-4B0E-804B-B839A9B6A9F1}
2012-03-03 21:48 - 2012-03-03 21:48 - 0000000 ____D C:\Users\Mary\Local Settings\{4C499780-B143-4B0E-804B-B839A9B6A9F1}
2012-03-03 21:48 - 2012-03-03 21:48 - 0000000 ____D C:\Users\Mary\AppData\Local\{4C499780-B143-4B0E-804B-B839A9B6A9F1}
2012-03-03 21:47 - 2012-03-03 21:48 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{67152428-528F-41C1-83B2-41791AA22656}
2012-03-03 21:47 - 2012-03-03 21:48 - 0000000 ____D C:\Users\Mary\Local Settings\{67152428-528F-41C1-83B2-41791AA22656}
2012-03-03 21:47 - 2012-03-03 21:48 - 0000000 ____D C:\Users\Mary\AppData\Local\{67152428-528F-41C1-83B2-41791AA22656}
2012-03-03 14:31 - 2012-03-03 14:31 - 5475414 ___RA C:\Users\Mary\Desktop\4 shores logo.bmp
2012-03-03 14:19 - 2012-03-03 14:19 - 0240260 ____A C:\Users\Mary\Desktop\davesnow1.jpg
2012-03-03 14:18 - 2012-03-03 14:18 - 0330872 ____A C:\Users\Mary\Desktop\davesnow.jpg
2012-03-03 14:18 - 2012-03-03 14:18 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{77AE2770-1859-41AB-9B59-462F57D27E4B}
2012-03-03 14:18 - 2012-03-03 14:18 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{29065E9B-B5A5-472B-8F11-A5A7BBDA0076}
2012-03-03 14:18 - 2012-03-03 14:18 - 0000000 ____D C:\Users\Mary\Local Settings\{77AE2770-1859-41AB-9B59-462F57D27E4B}
2012-03-03 14:18 - 2012-03-03 14:18 - 0000000 ____D C:\Users\Mary\Local Settings\{29065E9B-B5A5-472B-8F11-A5A7BBDA0076}
2012-03-03 14:18 - 2012-03-03 14:18 - 0000000 ____D C:\Users\Mary\AppData\Local\{77AE2770-1859-41AB-9B59-462F57D27E4B}
2012-03-03 14:18 - 2012-03-03 14:18 - 0000000 ____D C:\Users\Mary\AppData\Local\{29065E9B-B5A5-472B-8F11-A5A7BBDA0076}
2012-03-03 14:17 - 2012-03-03 14:19 - 0240260 ____A C:\Users\Mary\Desktop\daveboyssnowmobiling.jpg
2012-03-02 22:15 - 2012-03-02 22:15 - 0019171 ____A C:\Users\Mary\Desktop\Janelle 2011_Minnesota_Return.pdf
2012-03-02 22:00 - 2012-03-02 22:00 - 0012378 ____A C:\Users\Mary\Desktop\Janelle 2011_Federal_Return.pdf
2012-02-29 20:11 - 2012-02-29 20:11 - 0110248 ____A C:\Users\Mary\Downloads\Fax_20120229_486809317.tif
2012-02-29 17:27 - 2012-02-29 17:37 - 39401336 ____A (Apple Inc.) C:\Users\Mary\Downloads\QuickTimeInstaller.exe
2012-02-28 12:04 - 2012-02-28 12:06 - 0352521 ____A C:\Users\Mary\Desktop\4shoresAL.pdf
2012-02-28 09:33 - 2012-02-28 09:34 - 0011514 ____A C:\Users\Mary\Downloads\4Shores2(1).jpg
2012-02-28 09:29 - 2012-02-28 09:29 - 0011514 ____A C:\Users\Mary\Downloads\4Shores2.jpg
2012-02-27 13:00 - 2012-02-27 13:00 - 0032768 ____A C:\Users\Mary\Downloads\Resume.doc
2012-02-26 15:44 - 2012-02-26 15:44 - 3814806 ____A C:\Users\Mary\Desktop\eliptica (2).jpg
2012-02-26 15:43 - 2012-02-26 15:43 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{EFD0F647-9E4A-490D-8E14-E5857712B4FD}
2012-02-26 15:43 - 2012-02-26 15:43 - 0000000 ____D C:\Users\Mary\Local Settings\{EFD0F647-9E4A-490D-8E14-E5857712B4FD}
2012-02-26 15:43 - 2012-02-26 15:43 - 0000000 ____D C:\Users\Mary\AppData\Local\{EFD0F647-9E4A-490D-8E14-E5857712B4FD}
2012-02-26 15:42 - 2012-02-26 15:43 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{8188B7D0-05AC-405C-BB16-97AC96B4D82E}
2012-02-26 15:42 - 2012-02-26 15:43 - 0000000 ____D C:\Users\Mary\Local Settings\{8188B7D0-05AC-405C-BB16-97AC96B4D82E}
2012-02-26 15:42 - 2012-02-26 15:43 - 0000000 ____D C:\Users\Mary\AppData\Local\{8188B7D0-05AC-405C-BB16-97AC96B4D82E}
2012-02-26 15:42 - 2012-02-26 15:42 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{C25214CF-B412-42FC-BD2C-EAB661EF535D}
2012-02-26 15:42 - 2012-02-26 15:42 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{2FC48688-7129-4743-8E64-6D0E3BE2EE42}
2012-02-26 15:42 - 2012-02-26 15:42 - 0000000 ____D C:\Users\Mary\Local Settings\{C25214CF-B412-42FC-BD2C-EAB661EF535D}
2012-02-26 15:42 - 2012-02-26 15:42 - 0000000 ____D C:\Users\Mary\Local Settings\{2FC48688-7129-4743-8E64-6D0E3BE2EE42}
2012-02-26 15:42 - 2012-02-26 15:42 - 0000000 ____D C:\Users\Mary\AppData\Local\{C25214CF-B412-42FC-BD2C-EAB661EF535D}
2012-02-26 15:42 - 2012-02-26 15:42 - 0000000 ____D C:\Users\Mary\AppData\Local\{2FC48688-7129-4743-8E64-6D0E3BE2EE42}
2012-02-26 15:41 - 2012-02-26 15:44 - 3814806 ____A C:\Users\Mary\Desktop\eliptica.jpg
2012-02-26 15:39 - 2012-02-26 15:39 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{CEAB5DF3-3F73-4459-8D17-871B10C814DE}
2012-02-26 15:39 - 2012-02-26 15:39 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{5AE4822C-8BEF-4324-A9BF-376F85D43B58}
2012-02-26 15:39 - 2012-02-26 15:39 - 0000000 ____D C:\Users\Mary\Local Settings\{CEAB5DF3-3F73-4459-8D17-871B10C814DE}
2012-02-26 15:39 - 2012-02-26 15:39 - 0000000 ____D C:\Users\Mary\Local Settings\{5AE4822C-8BEF-4324-A9BF-376F85D43B58}
2012-02-26 15:39 - 2012-02-26 15:39 - 0000000 ____D C:\Users\Mary\AppData\Local\{CEAB5DF3-3F73-4459-8D17-871B10C814DE}
2012-02-26 15:39 - 2012-02-26 15:39 - 0000000 ____D C:\Users\Mary\AppData\Local\{5AE4822C-8BEF-4324-A9BF-376F85D43B58}
2012-02-26 15:28 - 2012-03-16 09:08 - 0000000 ____D C:\Windows\Minidump
2012-02-26 15:28 - 2012-02-26 15:28 - 634274165 ____A C:\Windows\MEMORY.DMP
2012-02-24 13:51 - 2012-02-24 13:51 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{97BADD4E-1C5C-4315-849F-0067763C933F}
2012-02-24 13:51 - 2012-02-24 13:51 - 0000000 ____D C:\Users\Mary\Local Settings\{97BADD4E-1C5C-4315-849F-0067763C933F}
2012-02-24 13:51 - 2012-02-24 13:51 - 0000000 ____D C:\Users\Mary\AppData\Local\{97BADD4E-1C5C-4315-849F-0067763C933F}
2012-02-24 13:50 - 2012-02-24 13:51 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{E84B14DC-116F-4DB7-890A-D7135FAB1704}
2012-02-24 13:50 - 2012-02-24 13:51 - 0000000 ____D C:\Users\Mary\Local Settings\{E84B14DC-116F-4DB7-890A-D7135FAB1704}
2012-02-24 13:50 - 2012-02-24 13:51 - 0000000 ____D C:\Users\Mary\AppData\Local\{E84B14DC-116F-4DB7-890A-D7135FAB1704}
2012-02-24 13:40 - 2012-03-09 12:37 - 0000000 ____D C:\dKEYUSBCradle
2012-02-24 13:40 - 2012-03-09 10:52 - 0001698 ____A C:\Users\All Users\Start Menu\Programs\Startup\DisplayKEY eSYNC Info.lnk
2012-02-24 13:40 - 2012-02-24 13:40 - 0000000 ___AH C:\Windows\System32\Drivers\Msft_Kernel_silabser_01009.Wdf
2012-02-24 13:38 - 2012-02-24 13:38 - 9031848 ____A (Supra ) C:\Users\Mary\Downloads\dKeyUSBCradle_x64-2.0.0.329.exe
2012-02-22 22:21 - 2012-02-22 22:21 - 0032256 ____A C:\Users\Mary\Desktop\Satisfaction and Instructions for judgment.doc

============ 3 Months Modified Files and Folders =============

2012-03-21 08:18 - 2012-01-29 09:16 - 0000000 ___SD C:\ComboFix
2012-03-21 08:18 - 2012-01-28 21:46 - 0000000 ___SD C:\32788R22FWJFW
2012-03-21 08:18 - 2012-01-28 12:08 - 0000000 ____D C:\Program Files (x86)\SpywareBlaster
2012-03-21 08:18 - 2012-01-25 20:33 - 0000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2012-03-21 08:18 - 2011-10-09 16:50 - 0000000 ____D C:\Windows\AutoKMS
2012-03-21 08:18 - 2011-10-08 11:06 - 0000000 ____D C:\Program Files (x86)\Mozilla Firefox
2012-03-21 08:18 - 2011-10-08 10:32 - 0000000 ____D C:\users\Mary
2012-03-21 08:18 - 2009-07-13 22:20 - 0000000 ____D C:\Windows\System32\NDF
2012-03-21 08:18 - 2009-07-13 22:20 - 0000000 ____D C:\Windows\registration
2012-03-21 08:18 - 2009-07-13 22:18 - 0000000 __SHD C:\$RECYCLE.BIN
2012-03-21 08:17 - 2009-07-13 22:20 - 0000000 ____D C:\Windows\security
2012-03-20 23:32 - 2012-03-20 20:30 - 0000000 ____D C:\Program Files (x86)\trend micro
2012-03-20 23:32 - 2012-03-20 20:20 - 0000000 ____D C:\Users\Mary\My Documents\RegRun2
2012-03-20 23:32 - 2012-03-20 20:20 - 0000000 ____D C:\Users\Mary\Documents\RegRun2
2012-03-20 23:32 - 2012-03-20 20:20 - 0000000 ____D C:\Program Files (x86)\UnHackMe
2012-03-20 23:32 - 2012-01-29 09:16 - 0000000 ____D C:\Windows\ERDNT
2012-03-20 23:20 - 2011-06-09 19:34 - 3153727488 __ASH C:\hiberfil.sys
2012-03-20 23:18 - 2012-03-20 23:18 - 1932256 ____A (Symantec Corporation) C:\Users\Mary\Downloads\FixTDSS.exe
2012-03-20 21:40 - 2012-01-29 09:14 - 0000000 ____D C:\Qoobox
2012-03-20 21:26 - 2009-07-13 21:34 - 86245376 ____A C:\Windows\System32\config\SOFTWARE.bak
2012-03-20 21:26 - 2009-07-13 21:34 - 4980736 ____A C:\Windows\System32\config\DEFAULT.bak
2012-03-20 21:26 - 2009-07-13 21:34 - 17825792 ____A C:\Windows\System32\config\SYSTEM.bak
2012-03-20 21:26 - 2009-07-13 21:34 - 0262144 ____A C:\Windows\System32\config\SECURITY.bak
2012-03-20 21:26 - 2009-07-13 21:34 - 0262144 ____A C:\Windows\System32\config\SAM.bak
2012-03-20 21:25 - 2012-03-20 21:25 - 0000000 __ASH C:\Windows\System32\config\SYSTEM.tmp.LOG2
2012-03-20 21:25 - 2012-03-20 21:25 - 0000000 __ASH C:\Windows\System32\config\SYSTEM.tmp.LOG1
2012-03-20 21:25 - 2012-03-20 21:25 - 0000000 __ASH C:\Windows\System32\config\SOFTWARE.tmp.LOG2
2012-03-20 21:25 - 2012-03-20 21:25 - 0000000 __ASH C:\Windows\System32\config\SOFTWARE.tmp.LOG1
2012-03-20 21:25 - 2012-03-20 21:25 - 0000000 __ASH C:\Windows\System32\config\SECURITY.tmp.LOG2
2012-03-20 21:25 - 2012-03-20 21:25 - 0000000 __ASH C:\Windows\System32\config\SECURITY.tmp.LOG1
2012-03-20 21:25 - 2012-03-20 21:25 - 0000000 __ASH C:\Windows\System32\config\SAM.tmp.LOG2
2012-03-20 21:25 - 2012-03-20 21:25 - 0000000 __ASH C:\Windows\System32\config\SAM.tmp.LOG1
2012-03-20 21:25 - 2012-03-20 21:25 - 0000000 __ASH C:\Windows\System32\config\DEFAULT.tmp.LOG2
2012-03-20 21:25 - 2012-03-20 21:25 - 0000000 __ASH C:\Windows\System32\config\DEFAULT.tmp.LOG1
2012-03-20 20:39 - 2012-03-20 20:39 - 0000000 ____D C:\Program Files (x86)\Sophos
2012-03-20 20:31 - 2012-03-20 20:30 - 0000000 ____D C:\rsit
2012-03-20 20:22 - 2012-03-20 20:22 - 0293253 ____A C:\Users\Mary\Desktop\regrunlog.txt
2012-03-20 20:21 - 2012-03-20 20:21 - 0000000 ___RD C:\desktop.ini
2012-03-20 20:21 - 2012-03-20 20:21 - 0000000 ___RD C:\comment.htt
2012-03-20 20:21 - 2012-03-20 20:21 - 0000000 ___RD C:\autorun.inf
2012-03-20 19:53 - 2012-03-20 19:53 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{EBE66089-92CE-494E-9F54-958AE6461D61}
2012-03-20 19:53 - 2012-03-20 19:53 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{C0F12ECD-C3F8-4211-9749-88AD0888A300}
2012-03-20 19:53 - 2012-03-20 19:53 - 0000000 ____D C:\Users\Mary\Local Settings\{EBE66089-92CE-494E-9F54-958AE6461D61}
2012-03-20 19:53 - 2012-03-20 19:53 - 0000000 ____D C:\Users\Mary\Local Settings\{C0F12ECD-C3F8-4211-9749-88AD0888A300}
2012-03-20 19:53 - 2012-03-20 19:53 - 0000000 ____D C:\Users\Mary\AppData\Local\{EBE66089-92CE-494E-9F54-958AE6461D61}
2012-03-20 19:53 - 2012-03-20 19:53 - 0000000 ____D C:\Users\Mary\AppData\Local\{C0F12ECD-C3F8-4211-9749-88AD0888A300}
2012-03-20 19:43 - 2009-07-14 00:10 - 1166142 ____A C:\Windows\WindowsUpdate.log
2012-03-20 19:31 - 2009-07-13 23:45 - 0022464 ____A C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2012-03-20 19:31 - 2009-07-13 23:45 - 0022464 ____A C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2012-03-20 19:21 - 2009-07-14 00:13 - 0730320 ____A C:\Windows\System32\PerfStringBackup.INI
2012-03-20 14:22 - 2012-03-20 14:22 - 0016578 ____A C:\Users\Mary\Desktop\Kings Customer Summary 2011.xlsx
2012-03-20 14:21 - 2011-11-08 21:50 - 0000000 ____D C:\Users\Mary\Local Settings\ElevatedDiagnostics
2012-03-20 14:21 - 2011-11-08 21:50 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\ElevatedDiagnostics
2012-03-20 14:21 - 2011-11-08 21:50 - 0000000 ____D C:\Users\Mary\AppData\Local\ElevatedDiagnostics
2012-03-20 12:47 - 2012-03-08 16:07 - 0327680 ___RA C:\Users\Mary\Desktop\plowing.QBW.TLG
2012-03-20 12:47 - 2011-10-11 18:20 - 82010112 ___RA C:\Users\Mary\Desktop\plowing.QBW
2012-03-20 12:45 - 2011-10-09 16:50 - 0000266 ____A C:\Windows\Tasks\AutoKMS.job
2012-03-20 12:45 - 2009-07-13 22:20 - 0000000 ____D C:\Windows\System32\config\TxR
2012-03-20 12:43 - 2012-01-28 16:24 - 0007658 ____A C:\Windows\setupact.log
2012-03-20 12:43 - 2009-07-14 00:08 - 0000006 ___AH C:\Windows\Tasks\SA.DAT
2012-03-20 12:41 - 2011-10-11 18:18 - 0000000 ____D C:\Users\Mary\Desktop\QuickBooksAutoDataRecovery
2012-03-20 12:41 - 2009-07-13 22:20 - 0000000 ____D C:\Windows\AppCompat
2012-03-19 18:35 - 2012-03-05 20:49 - 0229888 ____A C:\Users\Mary\Desktop\NEWER Budget March 2012.xls
2012-03-19 14:40 - 2012-03-08 16:07 - 0000335 ____A C:\Users\Mary\Desktop\plowing.QBW.ND
2012-03-19 13:12 - 2012-03-19 12:19 - 0000000 ____D C:\Users\Mary\Desktop\Linda's home
2012-03-19 12:54 - 2012-03-08 15:49 - 0000000 ____D C:\Users\Mary\Desktop\Marks home
2012-03-19 12:48 - 2012-03-19 12:48 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{91B0A55C-A7A4-46ED-80AF-6D95D55D752B}
2012-03-19 12:48 - 2012-03-19 12:48 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{71F0C1F5-C917-479D-83E8-8F1543F86E4F}
2012-03-19 12:48 - 2012-03-19 12:48 - 0000000 ____D C:\Users\Mary\Local Settings\{91B0A55C-A7A4-46ED-80AF-6D95D55D752B}
2012-03-19 12:48 - 2012-03-19 12:48 - 0000000 ____D C:\Users\Mary\Local Settings\{71F0C1F5-C917-479D-83E8-8F1543F86E4F}
2012-03-19 12:48 - 2012-03-19 12:48 - 0000000 ____D C:\Users\Mary\AppData\Local\{91B0A55C-A7A4-46ED-80AF-6D95D55D752B}
2012-03-19 12:48 - 2012-03-19 12:48 - 0000000 ____D C:\Users\Mary\AppData\Local\{71F0C1F5-C917-479D-83E8-8F1543F86E4F}
2012-03-19 12:42 - 2012-03-19 12:42 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{531EF75D-0892-4272-9E7D-C3DB874C21CB}
2012-03-19 12:42 - 2012-03-19 12:42 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{107A835F-CEDC-48EC-A48D-5D7CADAA3314}
2012-03-19 12:42 - 2012-03-19 12:42 - 0000000 ____D C:\Users\Mary\Local Settings\{531EF75D-0892-4272-9E7D-C3DB874C21CB}
2012-03-19 12:42 - 2012-03-19 12:42 - 0000000 ____D C:\Users\Mary\Local Settings\{107A835F-CEDC-48EC-A48D-5D7CADAA3314}
2012-03-19 12:42 - 2012-03-19 12:42 - 0000000 ____D C:\Users\Mary\AppData\Local\{531EF75D-0892-4272-9E7D-C3DB874C21CB}
2012-03-19 12:42 - 2012-03-19 12:42 - 0000000 ____D C:\Users\Mary\AppData\Local\{107A835F-CEDC-48EC-A48D-5D7CADAA3314}
2012-03-19 12:41 - 2012-03-19 12:41 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{5F67B435-B2F6-4F9F-890D-60E6B5857BC9}
2012-03-19 12:41 - 2012-03-19 12:41 - 0000000 ____D C:\Users\Mary\Local Settings\{5F67B435-B2F6-4F9F-890D-60E6B5857BC9}
2012-03-19 12:41 - 2012-03-19 12:41 - 0000000 ____D C:\Users\Mary\AppData\Local\{5F67B435-B2F6-4F9F-890D-60E6B5857BC9}
2012-03-19 12:36 - 2012-03-19 12:36 - 7569447 ___RA C:\Users\Mary\Desktop\photo-22 (2).jpg
2012-03-19 12:26 - 2012-03-19 12:26 - 2708811 ___RA C:\Users\Mary\Desktop\Mark summer home 7.jpg
2012-03-19 12:25 - 2012-03-19 12:25 - 3104288 ___RA C:\Users\Mary\Desktop\Mark summer home6.jpg
2012-03-19 12:24 - 2012-03-19 12:24 - 3466534 ___RA C:\Users\Mary\Desktop\Mark summer home5.jpg
2012-03-19 12:24 - 2012-03-19 12:24 - 2977068 ___RA C:\Users\Mary\Desktop\Mark summer home4.jpg
2012-03-19 12:23 - 2012-03-19 12:23 - 2918517 ___RA C:\Users\Mary\Desktop\Mark summer home 3.jpg
2012-03-19 12:23 - 2012-03-19 12:23 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{9737031A-063B-4CA8-9907-0980AEEE90CC}
2012-03-19 12:23 - 2012-03-19 12:23 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{82D256ED-43A5-46E9-8942-E26BC641EE97}
2012-03-19 12:23 - 2012-03-19 12:23 - 0000000 ____D C:\Users\Mary\Local Settings\{9737031A-063B-4CA8-9907-0980AEEE90CC}
2012-03-19 12:23 - 2012-03-19 12:23 - 0000000 ____D C:\Users\Mary\Local Settings\{82D256ED-43A5-46E9-8942-E26BC641EE97}
2012-03-19 12:23 - 2012-03-19 12:23 - 0000000 ____D C:\Users\Mary\AppData\Local\{9737031A-063B-4CA8-9907-0980AEEE90CC}
2012-03-19 12:23 - 2012-03-19 12:23 - 0000000 ____D C:\Users\Mary\AppData\Local\{82D256ED-43A5-46E9-8942-E26BC641EE97}
2012-03-19 12:22 - 2012-03-19 12:22 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{5A805DBA-AF0C-4DB7-8EE8-61C8327E76E4}
2012-03-19 12:22 - 2012-03-19 12:22 - 0000000 ____D C:\Users\Mary\Local Settings\{5A805DBA-AF0C-4DB7-8EE8-61C8327E76E4}
2012-03-19 12:22 - 2012-03-19 12:22 - 0000000 ____D C:\Users\Mary\AppData\Local\{5A805DBA-AF0C-4DB7-8EE8-61C8327E76E4}
2012-03-19 12:22 - 2012-03-19 12:21 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{A492AF5D-A8AA-4E93-B806-92E50A102B65}
2012-03-19 12:22 - 2012-03-19 12:21 - 0000000 ____D C:\Users\Mary\Local Settings\{A492AF5D-A8AA-4E93-B806-92E50A102B65}
2012-03-19 12:22 - 2012-03-19 12:21 - 0000000 ____D C:\Users\Mary\AppData\Local\{A492AF5D-A8AA-4E93-B806-92E50A102B65}
2012-03-19 12:21 - 2012-03-19 12:21 - 2827719 ____A C:\Users\Mary\Desktop\1photo.JPG
2012-03-19 12:20 - 2012-03-19 12:20 - 2827719 ____A C:\Users\Mary\Downloads\photo.JPG
2012-03-19 10:35 - 2012-03-19 10:35 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{379AF294-4699-488A-BF1F-3773BB69283A}
2012-03-19 10:35 - 2012-03-19 10:35 - 0000000 ____D C:\Users\Mary\Local Settings\{379AF294-4699-488A-BF1F-3773BB69283A}
2012-03-19 10:35 - 2012-03-19 10:35 - 0000000 ____D C:\Users\Mary\AppData\Local\{379AF294-4699-488A-BF1F-3773BB69283A}
2012-03-19 10:35 - 2012-03-19 10:34 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{8DE73FE6-D428-44E8-B722-E239141CECE6}
2012-03-19 10:35 - 2012-03-19 10:34 - 0000000 ____D C:\Users\Mary\Local Settings\{8DE73FE6-D428-44E8-B722-E239141CECE6}
2012-03-19 10:35 - 2012-03-19 10:34 - 0000000 ____D C:\Users\Mary\AppData\Local\{8DE73FE6-D428-44E8-B722-E239141CECE6}
2012-03-19 10:34 - 2012-03-19 10:34 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{A45B4A62-6F42-470B-BB18-F4F0663FB467}
2012-03-19 10:34 - 2012-03-19 10:34 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{7AF53093-FBC7-4282-AC66-8E906E96E0A0}
2012-03-19 10:34 - 2012-03-19 10:34 - 0000000 ____D C:\Users\Mary\Local Settings\{A45B4A62-6F42-470B-BB18-F4F0663FB467}
2012-03-19 10:34 - 2012-03-19 10:34 - 0000000 ____D C:\Users\Mary\Local Settings\{7AF53093-FBC7-4282-AC66-8E906E96E0A0}
2012-03-19 10:34 - 2012-03-19 10:34 - 0000000 ____D C:\Users\Mary\AppData\Local\{A45B4A62-6F42-470B-BB18-F4F0663FB467}
2012-03-19 10:34 - 2012-03-19 10:34 - 0000000 ____D C:\Users\Mary\AppData\Local\{7AF53093-FBC7-4282-AC66-8E906E96E0A0}
2012-03-19 10:34 - 2012-03-10 14:32 - 0000000 ____D C:\Users\Mary\Desktop\March 2012 pics
2012-03-19 10:32 - 2012-03-19 10:32 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{8339C3EA-554B-4225-A7BC-D50663BBB13F}
2012-03-19 10:32 - 2012-03-19 10:32 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{3FBCBACF-68BF-47ED-9724-D305A05C7A2A}
2012-03-19 10:32 - 2012-03-19 10:32 - 0000000 ____D C:\Users\Mary\Local Settings\{8339C3EA-554B-4225-A7BC-D50663BBB13F}
2012-03-19 10:32 - 2012-03-19 10:32 - 0000000 ____D C:\Users\Mary\Local Settings\{3FBCBACF-68BF-47ED-9724-D305A05C7A2A}
2012-03-19 10:32 - 2012-03-19 10:32 - 0000000 ____D C:\Users\Mary\AppData\Local\{8339C3EA-554B-4225-A7BC-D50663BBB13F}
2012-03-19 10:32 - 2012-03-19 10:32 - 0000000 ____D C:\Users\Mary\AppData\Local\{3FBCBACF-68BF-47ED-9724-D305A05C7A2A}
2012-03-18 22:32 - 2012-03-18 22:32 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{52D6BC50-B26C-4457-AD65-4DD374FA28C9}
2012-03-18 22:32 - 2012-03-18 22:32 - 0000000 ____D C:\Users\Mary\Local Settings\{52D6BC50-B26C-4457-AD65-4DD374FA28C9}
2012-03-18 22:32 - 2012-03-18 22:32 - 0000000 ____D C:\Users\Mary\AppData\Local\{52D6BC50-B26C-4457-AD65-4DD374FA28C9}
2012-03-18 22:32 - 2012-03-18 22:31 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{E8EF940B-0912-47D7-A6AE-4DFA0FE3481F}
2012-03-18 22:32 - 2012-03-18 22:31 - 0000000 ____D C:\Users\Mary\Local Settings\{E8EF940B-0912-47D7-A6AE-4DFA0FE3481F}
2012-03-18 22:32 - 2012-03-18 22:31 - 0000000 ____D C:\Users\Mary\AppData\Local\{E8EF940B-0912-47D7-A6AE-4DFA0FE3481F}
2012-03-18 21:08 - 2011-11-26 02:43 - 0806912 __ASH C:\Users\Mary\Desktop\Thumbs.db
2012-03-18 21:06 - 2012-03-18 21:05 - 0184903 ____A C:\Users\Mary\Desktop\Daves credit report 3.18.12.pdf
2012-03-18 19:23 - 2012-03-13 22:23 - 0327680 ___RA C:\Users\Mary\Desktop\Carpet Doctor of Minnesota.QBW.TLG
2012-03-18 19:23 - 2012-03-13 22:23 - 0000354 ____A C:\Users\Mary\Desktop\Carpet Doctor of Minnesota.QBW.ND
2012-03-18 19:23 - 2011-10-28 14:59 - 8384512 ___RA C:\Users\Mary\Desktop\Carpet Doctor of Minnesota.QBW
2012-03-17 21:18 - 2012-03-17 21:18 - 6055014 ____A C:\Users\Mary\Desktop\cabin.docx
2012-03-17 13:09 - 2012-03-13 17:25 - 0000344 ____A C:\Users\Mary\Desktop\Mary Friesen2006.QBW.ND
2012-03-17 13:09 - 2011-10-23 21:31 - 20774912 ___RA C:\Users\Mary\Desktop\Mary Friesen2006.QBW.TLG
2012-03-17 13:09 - 2011-10-11 18:17 - 57704448 ____A C:\Users\Mary\Desktop\Mary Friesen2006.QBW
2012-03-16 09:11 - 2011-06-09 18:36 - 0000000 ____D C:\Users\All Users\Sonic
2012-03-16 09:11 - 2011-06-09 18:36 - 0000000 ____D C:\Users\All Users\Application Data\Sonic
2012-03-16 09:11 - 2011-06-09 18:36 - 0000000 ____D C:\ProgramData\Sonic
2012-03-16 09:08 - 2012-02-26 15:28 - 0000000 ____D C:\Windows\Minidump
2012-03-15 18:02 - 2012-03-15 18:02 - 0019459 ____A C:\Users\Mary\Desktop\hat.png
2012-03-15 18:02 - 2012-03-15 18:02 - 0014907 ____A C:\Users\Mary\Desktop\tshirt.png
2012-03-15 18:01 - 2012-03-15 18:01 - 0003442 ____A C:\Users\Mary\Desktop\standard hoodie.jpg
2012-03-15 18:01 - 2012-03-15 18:01 - 0002712 ____A C:\Users\Mary\Desktop\sippy hoodie.jpg
2012-03-13 22:23 - 2012-03-13 22:23 - 0000496 ___RA C:\Users\Mary\Desktop\Carpet Doctor of Minnesota.lgb
2012-03-13 17:24 - 2012-03-13 14:52 - 0000344 ____A C:\Users\Mary\Desktop\PRO CNC INC 2012.qbw.ND
2012-03-13 17:24 - 2012-03-13 14:51 - 42012672 ___RA C:\Users\Mary\Desktop\PRO CNC INC 2012.qbw
2012-03-13 17:24 - 2012-03-08 17:05 - 6881280 ___RA C:\Users\Mary\Desktop\PRO CNC INC 2012.qbw.TLG
2012-03-13 15:05 - 2012-03-13 13:25 - 0012889 ____A C:\Users\Mary\Desktop\Michael Thommes child support calculation March 2012.xlsx
2012-03-13 14:53 - 2012-03-13 14:53 - 0000496 ___RA C:\Users\Mary\Desktop\PRO CNC INC 2012.lgb
2012-03-13 14:48 - 2012-03-08 17:04 - 0000000 ____D C:\Users\Mary\Desktop\Restored_PRO CNC INC 2012_Files
2012-03-13 14:46 - 2012-03-08 17:40 - 2949120 ___RA C:\Users\Mary\Desktop\Michael Thommes 2012.QBW.TLG
2012-03-13 14:46 - 2012-03-08 17:40 - 17829888 ___RA C:\Users\Mary\Desktop\Michael Thommes 2012.QBW
2012-03-13 14:46 - 2012-03-08 17:40 - 0000348 ____A C:\Users\Mary\Desktop\Michael Thommes 2012.QBW.ND
2012-03-13 14:44 - 2012-03-13 14:44 - 0019522 ____A C:\Users\Mary\Desktop\THOMMES_--_DISSOLUTION_DECISIONS_WITH_FINANCIAL_IMPLICATIONS.docx
2012-03-13 14:44 - 2012-03-13 14:44 - 0000162 ___AH C:\Users\Mary\Desktop\~$OMMES_--_DISSOLUTION_DECISIONS_WITH_FINANCIAL_IMPLICATIONS.docx
2012-03-13 14:43 - 2012-03-13 14:43 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{7379DF0C-6AEE-4B10-BE94-3D1348C1C1D8}
2012-03-13 14:43 - 2012-03-13 14:43 - 0000000 ____D C:\Users\Mary\Local Settings\{7379DF0C-6AEE-4B10-BE94-3D1348C1C1D8}
2012-03-13 14:43 - 2012-03-13 14:43 - 0000000 ____D C:\Users\Mary\AppData\Local\{7379DF0C-6AEE-4B10-BE94-3D1348C1C1D8}
2012-03-13 14:43 - 2012-03-13 14:42 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{EC596A09-FA76-4D87-8786-EF80277DD951}
2012-03-13 14:43 - 2012-03-13 14:42 - 0000000 ____D C:\Users\Mary\Local Settings\{EC596A09-FA76-4D87-8786-EF80277DD951}
2012-03-13 14:43 - 2012-03-13 14:42 - 0000000 ____D C:\Users\Mary\AppData\Local\{EC596A09-FA76-4D87-8786-EF80277DD951}
2012-03-13 13:48 - 2012-03-13 13:48 - 0081954 ____A C:\Users\Mary\Desktop\Michael 2011 payments.pdf
2012-03-13 13:47 - 2012-03-13 13:47 - 0076659 ____A C:\Users\Mary\Desktop\Michael 2010 payments.pdf
2012-03-13 13:46 - 2012-03-13 13:46 - 0072553 ____A C:\Users\Mary\Desktop\Michael 2009 payments.pdf
2012-03-13 13:45 - 2012-03-13 13:45 - 0062390 ____A C:\Users\Mary\Desktop\Michael 2008 payments.pdf
2012-03-13 13:38 - 2012-03-13 13:27 - 0012788 ____A C:\Users\Mary\Desktop\Service Loan Processing.docx
2012-03-13 09:09 - 2012-03-12 20:24 - 0327680 ___RA C:\Users\Mary\Desktop\new and improved DS.QBW.TLG
2012-03-13 09:09 - 2012-03-12 20:24 - 0000347 ____A C:\Users\Mary\Desktop\new and improved DS.QBW.ND
2012-03-13 09:09 - 2012-01-30 22:56 - 19652608 ___RA C:\Users\Mary\Desktop\new and improved DS.QBW
2012-03-13 09:07 - 2012-03-13 09:07 - 0018881 ____A C:\Users\Mary\Desktop\Michael Thommes county record 3.13.12.docx
2012-03-13 09:07 - 2012-03-13 09:07 - 0000162 ___AH C:\Users\Mary\Desktop\~$chael Thommes county record 3.13.12.docx
2012-03-13 08:26 - 2012-03-13 08:26 - 7537329 ____A C:\Users\Mary\Desktop\2012-03-11@14.45.34 Linda appraisal.pdf
2012-03-12 22:30 - 2012-03-12 22:30 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{10A9B984-23A4-41AC-BEB9-FA6ED23A7721}
2012-03-12 22:30 - 2012-03-12 22:30 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{00C428C9-03D8-49FF-9FB3-3A718D8EDCCE}
2012-03-12 22:30 - 2012-03-12 22:30 - 0000000 ____D C:\Users\Mary\Local Settings\{10A9B984-23A4-41AC-BEB9-FA6ED23A7721}
2012-03-12 22:30 - 2012-03-12 22:30 - 0000000 ____D C:\Users\Mary\Local Settings\{00C428C9-03D8-49FF-9FB3-3A718D8EDCCE}
2012-03-12 22:30 - 2012-03-12 22:30 - 0000000 ____D C:\Users\Mary\AppData\Local\{10A9B984-23A4-41AC-BEB9-FA6ED23A7721}
2012-03-12 22:30 - 2012-03-12 22:30 - 0000000 ____D C:\Users\Mary\AppData\Local\{00C428C9-03D8-49FF-9FB3-3A718D8EDCCE}
2012-03-12 21:24 - 2012-03-12 21:24 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{A8138F2F-07E6-4759-B981-3D7F29192E19}
2012-03-12 21:24 - 2012-03-12 21:24 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{78F53957-80F7-4FEF-98C7-9F7517B62403}
2012-03-12 21:24 - 2012-03-12 21:24 - 0000000 ____D C:\Users\Mary\Local Settings\{A8138F2F-07E6-4759-B981-3D7F29192E19}
2012-03-12 21:24 - 2012-03-12 21:24 - 0000000 ____D C:\Users\Mary\Local Settings\{78F53957-80F7-4FEF-98C7-9F7517B62403}
2012-03-12 21:24 - 2012-03-12 21:24 - 0000000 ____D C:\Users\Mary\AppData\Local\{A8138F2F-07E6-4759-B981-3D7F29192E19}
2012-03-12 21:24 - 2012-03-12 21:24 - 0000000 ____D C:\Users\Mary\AppData\Local\{78F53957-80F7-4FEF-98C7-9F7517B62403}
2012-03-12 20:24 - 2012-03-12 20:24 - 0000496 ___RA C:\Users\Mary\Desktop\new and improved DS.lgb
2012-03-11 10:55 - 2012-03-11 10:55 - 0013096 ____A C:\Users\Mary\Desktop\Mark.docx
2012-03-11 00:39 - 2012-03-11 00:39 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{49B4FFB5-85C2-4470-8F2A-3E793734AE9F}
2012-03-11 00:39 - 2012-03-11 00:39 - 0000000 ____D C:\Users\Mary\Local Settings\{49B4FFB5-85C2-4470-8F2A-3E793734AE9F}
2012-03-11 00:39 - 2012-03-11 00:39 - 0000000 ____D C:\Users\Mary\AppData\Local\{49B4FFB5-85C2-4470-8F2A-3E793734AE9F}
2012-03-11 00:39 - 2012-03-11 00:38 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{57B8CF48-160B-4AAB-8264-0D352E7E17C5}
2012-03-11 00:39 - 2012-03-11 00:38 - 0000000 ____D C:\Users\Mary\Local Settings\{57B8CF48-160B-4AAB-8264-0D352E7E17C5}
2012-03-11 00:39 - 2012-03-11 00:38 - 0000000 ____D C:\Users\Mary\AppData\Local\{57B8CF48-160B-4AAB-8264-0D352E7E17C5}
2012-03-11 00:38 - 2011-06-09 18:25 - 0200008 ____A C:\Windows\DirectX.log
2012-03-11 00:35 - 2012-03-11 00:35 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{F08591D0-2BA7-4491-A1DB-3FFE91403DF3}
2012-03-11 00:35 - 2012-03-11 00:35 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{D2DEC6D1-B73F-4257-B43C-9421B13AD7A2}
2012-03-11 00:35 - 2012-03-11 00:35 - 0000000 ____D C:\Users\Mary\Local Settings\{F08591D0-2BA7-4491-A1DB-3FFE91403DF3}
2012-03-11 00:35 - 2012-03-11 00:35 - 0000000 ____D C:\Users\Mary\Local Settings\{D2DEC6D1-B73F-4257-B43C-9421B13AD7A2}
2012-03-11 00:35 - 2012-03-11 00:35 - 0000000 ____D C:\Users\Mary\AppData\Local\{F08591D0-2BA7-4491-A1DB-3FFE91403DF3}
2012-03-11 00:35 - 2012-03-11 00:35 - 0000000 ____D C:\Users\Mary\AppData\Local\{D2DEC6D1-B73F-4257-B43C-9421B13AD7A2}
2012-03-11 00:29 - 2012-03-11 00:28 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{D975145B-DD78-40B9-A40D-8E2F8EFF8799}
2012-03-11 00:29 - 2012-03-11 00:28 - 0000000 ____D C:\Users\Mary\Local Settings\{D975145B-DD78-40B9-A40D-8E2F8EFF8799}
2012-03-11 00:29 - 2012-03-11 00:28 - 0000000 ____D C:\Users\Mary\AppData\Local\{D975145B-DD78-40B9-A40D-8E2F8EFF8799}
2012-03-11 00:28 - 2012-03-11 00:28 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{CBDDDF4C-996D-4640-9C9B-262A8E802BD6}
2012-03-11 00:28 - 2012-03-11 00:28 - 0000000 ____D C:\Users\Mary\Local Settings\{CBDDDF4C-996D-4640-9C9B-262A8E802BD6}
2012-03-11 00:28 - 2012-03-11 00:28 - 0000000 ____D C:\Users\Mary\AppData\Local\{CBDDDF4C-996D-4640-9C9B-262A8E802BD6}
2012-03-11 00:17 - 2012-03-11 00:17 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{F9BD49C2-41BE-4F58-800D-0BC362EA8FAE}
2012-03-11 00:17 - 2012-03-11 00:17 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{7CA2C86F-9E28-4AD3-9F8F-8CAB9FE0EC1D}
2012-03-11 00:17 - 2012-03-11 00:17 - 0000000 ____D C:\Users\Mary\Local Settings\{F9BD49C2-41BE-4F58-800D-0BC362EA8FAE}
2012-03-11 00:17 - 2012-03-11 00:17 - 0000000 ____D C:\Users\Mary\Local Settings\{7CA2C86F-9E28-4AD3-9F8F-8CAB9FE0EC1D}
2012-03-11 00:17 - 2012-03-11 00:17 - 0000000 ____D C:\Users\Mary\AppData\Local\{F9BD49C2-41BE-4F58-800D-0BC362EA8FAE}
2012-03-11 00:17 - 2012-03-11 00:17 - 0000000 ____D C:\Users\Mary\AppData\Local\{7CA2C86F-9E28-4AD3-9F8F-8CAB9FE0EC1D}
2012-03-11 00:02 - 2012-03-10 16:38 - 5395207 ____A C:\Users\Mary\Desktop\Disclosures.pdf
2012-03-10 23:57 - 2012-03-10 23:56 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{947807CD-1BF2-49C9-8033-187EC49B3B09}
2012-03-10 23:57 - 2012-03-10 23:56 - 0000000 ____D C:\Users\Mary\Local Settings\{947807CD-1BF2-49C9-8033-187EC49B3B09}
2012-03-10 23:57 - 2012-03-10 23:56 - 0000000 ____D C:\Users\Mary\AppData\Local\{947807CD-1BF2-49C9-8033-187EC49B3B09}
2012-03-10 23:56 - 2012-03-10 23:56 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{9ED7ECED-5847-48CA-808E-5E78FA3FAACE}
2012-03-10 23:56 - 2012-03-10 23:56 - 0000000 ____D C:\Users\Mary\Local Settings\{9ED7ECED-5847-48CA-808E-5E78FA3FAACE}
2012-03-10 23:56 - 2012-03-10 23:56 - 0000000 ____D C:\Users\Mary\AppData\Local\{9ED7ECED-5847-48CA-808E-5E78FA3FAACE}
2012-03-10 18:05 - 2012-03-10 18:05 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{642A87DD-6633-4A0D-BB81-31DC3028DE62}
2012-03-10 18:05 - 2012-03-10 18:05 - 0000000 ____D C:\Users\Mary\Local Settings\{642A87DD-6633-4A0D-BB81-31DC3028DE62}
2012-03-10 18:05 - 2012-03-10 18:05 - 0000000 ____D C:\Users\Mary\AppData\Local\{642A87DD-6633-4A0D-BB81-31DC3028DE62}
2012-03-10 18:05 - 2012-03-10 18:04 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{1115A089-FF1A-4E0E-ADA8-0AA33CC695D8}
2012-03-10 18:05 - 2012-03-10 18:04 - 0000000 ____D C:\Users\Mary\Local Settings\{1115A089-FF1A-4E0E-ADA8-0AA33CC695D8}
2012-03-10 18:05 - 2012-03-10 18:04 - 0000000 ____D C:\Users\Mary\AppData\Local\{1115A089-FF1A-4E0E-ADA8-0AA33CC695D8}
2012-03-10 17:47 - 2012-03-10 17:46 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{62745F2A-E390-40C4-B116-B158C11FFB55}
2012-03-10 17:47 - 2012-03-10 17:46 - 0000000 ____D C:\Users\Mary\Local Settings\{62745F2A-E390-40C4-B116-B158C11FFB55}
2012-03-10 17:47 - 2012-03-10 17:46 - 0000000 ____D C:\Users\Mary\AppData\Local\{62745F2A-E390-40C4-B116-B158C11FFB55}
2012-03-10 17:46 - 2012-03-10 17:46 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{E88C3005-DC23-40C6-B2B3-612AA3294AB3}
2012-03-10 17:46 - 2012-03-10 17:46 - 0000000 ____D C:\Users\Mary\Local Settings\{E88C3005-DC23-40C6-B2B3-612AA3294AB3}
2012-03-10 17:46 - 2012-03-10 17:46 - 0000000 ____D C:\Users\Mary\AppData\Local\{E88C3005-DC23-40C6-B2B3-612AA3294AB3}
2012-03-10 17:40 - 2012-03-10 17:40 - 0200835 ____A C:\Users\Mary\Desktop\Trillium Court Brochure.pdf
2012-03-10 17:03 - 2012-03-10 16:40 - 0153088 ____A C:\Users\Mary\Desktop\Trillium Court Brochure.doc
2012-03-10 16:38 - 2011-11-16 18:22 - 0723456 __ASH C:\Users\Mary\Downloads\Thumbs.db
2012-03-10 16:37 - 2012-03-10 16:37 - 5391752 ____A C:\Users\Mary\Downloads\2012-03-05@14.12.27[1].pdf
2012-03-10 14:59 - 2012-03-10 14:59 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{EA9FC68F-D864-4DBC-AA54-DC4958F18111}
2012-03-10 14:59 - 2012-03-10 14:59 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{6DF4496F-B3D1-413B-8CE6-E6D91E5C4D56}
2012-03-10 14:59 - 2012-03-10 14:59 - 0000000 ____D C:\Users\Mary\Local Settings\{EA9FC68F-D864-4DBC-AA54-DC4958F18111}
2012-03-10 14:59 - 2012-03-10 14:59 - 0000000 ____D C:\Users\Mary\Local Settings\{6DF4496F-B3D1-413B-8CE6-E6D91E5C4D56}
2012-03-10 14:59 - 2012-03-10 14:59 - 0000000 ____D C:\Users\Mary\AppData\Local\{EA9FC68F-D864-4DBC-AA54-DC4958F18111}
2012-03-10 14:59 - 2012-03-10 14:59 - 0000000 ____D C:\Users\Mary\AppData\Local\{6DF4496F-B3D1-413B-8CE6-E6D91E5C4D56}
2012-03-10 14:57 - 2012-03-10 14:57 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{9096CD9D-1EF4-4C16-AD4F-CF3A8E6ABD6D}
2012-03-10 14:57 - 2012-03-10 14:57 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{4831BEBE-4A27-4EDB-90D9-732D1C3D5507}
2012-03-10 14:57 - 2012-03-10 14:57 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{1973C324-9E74-4E66-AC83-2D24BCAFC7CE}
2012-03-10 14:57 - 2012-03-10 14:57 - 0000000 ____D C:\Users\Mary\Local Settings\{9096CD9D-1EF4-4C16-AD4F-CF3A8E6ABD6D}
2012-03-10 14:57 - 2012-03-10 14:57 - 0000000 ____D C:\Users\Mary\Local Settings\{4831BEBE-4A27-4EDB-90D9-732D1C3D5507}
2012-03-10 14:57 - 2012-03-10 14:57 - 0000000 ____D C:\Users\Mary\Local Settings\{1973C324-9E74-4E66-AC83-2D24BCAFC7CE}
2012-03-10 14:57 - 2012-03-10 14:57 - 0000000 ____D C:\Users\Mary\AppData\Local\{9096CD9D-1EF4-4C16-AD4F-CF3A8E6ABD6D}
2012-03-10 14:57 - 2012-03-10 14:57 - 0000000 ____D C:\Users\Mary\AppData\Local\{4831BEBE-4A27-4EDB-90D9-732D1C3D5507}
2012-03-10 14:57 - 2012-03-10 14:57 - 0000000 ____D C:\Users\Mary\AppData\Local\{1973C324-9E74-4E66-AC83-2D24BCAFC7CE}
2012-03-10 14:56 - 2012-03-10 14:56 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{8E0AD166-ECA8-43B2-9B22-223A1F38C67D}
2012-03-10 14:56 - 2012-03-10 14:56 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{039E2A52-0A73-4194-9F67-0D7DB7AD2891}
2012-03-10 14:56 - 2012-03-10 14:56 - 0000000 ____D C:\Users\Mary\Local Settings\{8E0AD166-ECA8-43B2-9B22-223A1F38C67D}
2012-03-10 14:56 - 2012-03-10 14:56 - 0000000 ____D C:\Users\Mary\Local Settings\{039E2A52-0A73-4194-9F67-0D7DB7AD2891}
2012-03-10 14:56 - 2012-03-10 14:56 - 0000000 ____D C:\Users\Mary\AppData\Local\{8E0AD166-ECA8-43B2-9B22-223A1F38C67D}
2012-03-10 14:56 - 2012-03-10 14:56 - 0000000 ____D C:\Users\Mary\AppData\Local\{039E2A52-0A73-4194-9F67-0D7DB7AD2891}
2012-03-10 14:56 - 2012-03-10 14:55 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{FA0B3130-5406-4897-A2FD-F8561B3938D1}
2012-03-10 14:56 - 2012-03-10 14:55 - 0000000 ____D C:\Users\Mary\Local Settings\{FA0B3130-5406-4897-A2FD-F8561B3938D1}
2012-03-10 14:56 - 2012-03-10 14:55 - 0000000 ____D C:\Users\Mary\AppData\Local\{FA0B3130-5406-4897-A2FD-F8561B3938D1}
2012-03-10 14:54 - 2012-03-10 14:54 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{FC8B853B-5695-4722-A9BF-0F3A680DC31A}
2012-03-10 14:54 - 2012-03-10 14:54 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{051DE60A-F609-4B05-AD22-199F3035584C}
2012-03-10 14:54 - 2012-03-10 14:54 - 0000000 ____D C:\Users\Mary\Local Settings\{FC8B853B-5695-4722-A9BF-0F3A680DC31A}
2012-03-10 14:54 - 2012-03-10 14:54 - 0000000 ____D C:\Users\Mary\Local Settings\{051DE60A-F609-4B05-AD22-199F3035584C}
2012-03-10 14:54 - 2012-03-10 14:54 - 0000000 ____D C:\Users\Mary\AppData\Local\{FC8B853B-5695-4722-A9BF-0F3A680DC31A}
2012-03-10 14:54 - 2012-03-10 14:54 - 0000000 ____D C:\Users\Mary\AppData\Local\{051DE60A-F609-4B05-AD22-199F3035584C}
2012-03-10 14:53 - 2012-03-10 14:53 - 0000000 ____D C:\Users\Mary\Desktop\New folder
2012-03-10 14:51 - 2012-03-10 14:51 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{B53869B7-CE64-431C-802C-76797805AD27}
2012-03-10 14:51 - 2012-03-10 14:51 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{3AB2805B-2C4C-4C45-9826-AE75F9CFC569}
2012-03-10 14:51 - 2012-03-10 14:51 - 0000000 ____D C:\Users\Mary\Local Settings\{B53869B7-CE64-431C-802C-76797805AD27}
2012-03-10 14:51 - 2012-03-10 14:51 - 0000000 ____D C:\Users\Mary\Local Settings\{3AB2805B-2C4C-4C45-9826-AE75F9CFC569}
2012-03-10 14:51 - 2012-03-10 14:51 - 0000000 ____D C:\Users\Mary\AppData\Local\{B53869B7-CE64-431C-802C-76797805AD27}
2012-03-10 14:51 - 2012-03-10 14:51 - 0000000 ____D C:\Users\Mary\AppData\Local\{3AB2805B-2C4C-4C45-9826-AE75F9CFC569}
2012-03-10 14:35 - 2012-03-10 14:35 - 0000000 ____D C:\Users\Mary\Desktop\cell phone pics
2012-03-09 23:38 - 2012-03-09 23:38 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{9D682408-8EA1-4231-A4BD-154C85113E49}
2012-03-09 23:38 - 2012-03-09 23:38 - 0000000 ____D C:\Users\Mary\Local Settings\{9D682408-8EA1-4231-A4BD-154C85113E49}
2012-03-09 23:38 - 2012-03-09 23:38 - 0000000 ____D C:\Users\Mary\AppData\Local\{9D682408-8EA1-4231-A4BD-154C85113E49}
2012-03-09 23:38 - 2012-03-09 23:37 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{0C2647E5-6815-4375-931A-11CE8EB4D918}
2012-03-09 23:38 - 2012-03-09 23:37 - 0000000 ____D C:\Users\Mary\Local Settings\{0C2647E5-6815-4375-931A-11CE8EB4D918}
2012-03-09 23:38 - 2012-03-09 23:37 - 0000000 ____D C:\Users\Mary\AppData\Local\{0C2647E5-6815-4375-931A-11CE8EB4D918}
2012-03-09 12:37 - 2012-02-24 13:40 - 0000000 ____D C:\dKEYUSBCradle
2012-03-09 10:52 - 2012-02-24 13:40 - 0001698 ____A C:\Users\All Users\Start Menu\Programs\Startup\DisplayKEY eSYNC Info.lnk
2012-03-08 20:09 - 2012-03-08 18:17 - 0009578 ____A C:\Users\Mary\Desktop\Michael Thommes child support calculation.xlsx
2012-03-08 17:41 - 2012-03-08 17:41 - 0000496 ___RA C:\Users\Mary\Desktop\Michael Thommes 2012.lgb
2012-03-08 17:40 - 2012-03-08 17:40 - 0000412 ____A C:\Users\Mary\Desktop\Michael Thommes 2012.ND
2012-03-08 17:40 - 2012-03-08 17:40 - 0000000 ____D C:\Users\Mary\Desktop\Restored_Michael Thommes 2012_Files
2012-03-08 17:04 - 2012-03-08 17:04 - 0000413 ____A C:\Users\Mary\Desktop\PRO CNC INC 2012.ND
2012-03-08 16:07 - 2012-03-08 16:07 - 0000496 ___RA C:\Users\Mary\Desktop\plowing.lgb
2012-03-08 15:49 - 2011-11-01 17:31 - 0000000 ____D C:\Users\Mary\My Documents\Christmas
2012-03-08 15:49 - 2011-11-01 17:31 - 0000000 ____D C:\Users\Mary\Documents\Christmas
2012-03-08 15:48 - 2012-03-08 15:48 - 0000000 ____D C:\Users\Mary\Desktop\MATT
2012-03-08 15:43 - 2011-11-01 17:36 - 0000000 ____D C:\Users\Mary\My Documents\Janelle Jared
2012-03-08 15:43 - 2011-11-01 17:36 - 0000000 ____D C:\Users\Mary\Documents\Janelle Jared
2012-03-08 15:41 - 2011-11-01 17:38 - 0000000 ____D C:\Users\Mary\My Documents\Taxes
2012-03-08 15:41 - 2011-11-01 17:38 - 0000000 ____D C:\Users\Mary\Documents\Taxes
2012-03-08 15:41 - 2011-11-01 17:36 - 0000000 ____D C:\Users\Mary\My Documents\Money Financial Stuff
2012-03-08 15:41 - 2011-11-01 17:36 - 0000000 ____D C:\Users\Mary\Documents\Money Financial Stuff
2012-03-08 15:39 - 2011-11-01 17:39 - 0000000 ____D C:\Users\Mary\My Documents\Zone Alarm
2012-03-08 15:39 - 2011-11-01 17:39 - 0000000 ____D C:\Users\Mary\Documents\Zone Alarm
2012-03-05 20:46 - 2012-03-05 20:46 - 0081637 ____A C:\Users\Mary\Desktop\New Budget Oct 2011 with new computer.rar
2012-03-05 20:19 - 2011-10-14 17:42 - 0222720 ____A C:\Users\Mary\Desktop\New Budget Oct 2011 with new computer.xls
2012-03-05 19:32 - 2012-03-05 19:32 - 0037376 ____A C:\Users\Mary\Desktop\Mary Friesen Resume MUTA MARCH 2012.doc
2012-03-05 19:32 - 2012-03-05 19:32 - 0000162 ___AH C:\Users\Mary\Desktop\~$ry Friesen Resume MUTA MARCH 2012.doc
2012-03-05 14:06 - 2012-03-05 14:06 - 0011495 ____A C:\Users\Mary\Desktop\David Sprunk assets March 2012.xlsx
2012-03-05 12:06 - 2012-03-05 12:06 - 0184873 ____A C:\Users\Mary\Desktop\Dave's credit report 3.2012.pdf
2012-03-05 11:38 - 2012-03-05 11:38 - 0156672 ____A C:\Users\Mary\Downloads\champlin.doc
2012-03-03 23:21 - 2012-03-03 23:21 - 0065099 ____A C:\Users\Mary\Desktop\ffff.jpg
2012-03-03 23:21 - 2012-03-03 23:21 - 0051019 ____A C:\Users\Mary\Desktop\fffff.jpg
2012-03-03 23:17 - 2012-03-03 23:17 - 0099583 ____A C:\Users\Mary\Desktop\fff.jpg
2012-03-03 22:12 - 2012-03-03 22:12 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{F026480C-A1B1-4332-873B-077081FB2AE7}
2012-03-03 22:12 - 2012-03-03 22:12 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{5A9787AF-E63C-4FCF-B33B-38537E798B0B}
2012-03-03 22:12 - 2012-03-03 22:12 - 0000000 ____D C:\Users\Mary\Local Settings\{F026480C-A1B1-4332-873B-077081FB2AE7}
2012-03-03 22:12 - 2012-03-03 22:12 - 0000000 ____D C:\Users\Mary\Local Settings\{5A9787AF-E63C-4FCF-B33B-38537E798B0B}
2012-03-03 22:12 - 2012-03-03 22:12 - 0000000 ____D C:\Users\Mary\AppData\Local\{F026480C-A1B1-4332-873B-077081FB2AE7}
2012-03-03 22:12 - 2012-03-03 22:12 - 0000000 ____D C:\Users\Mary\AppData\Local\{5A9787AF-E63C-4FCF-B33B-38537E798B0B}
2012-03-03 22:07 - 2012-03-03 22:07 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{9EBC7576-9488-42A5-9AE8-D76BD0ED1217}
2012-03-03 22:07 - 2012-03-03 22:07 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{0FC96574-FB5D-4F92-AB02-A4507959A0BE}
2012-03-03 22:07 - 2012-03-03 22:07 - 0000000 ____D C:\Users\Mary\Local Settings\{9EBC7576-9488-42A5-9AE8-D76BD0ED1217}
2012-03-03 22:07 - 2012-03-03 22:07 - 0000000 ____D C:\Users\Mary\Local Settings\{0FC96574-FB5D-4F92-AB02-A4507959A0BE}
2012-03-03 22:07 - 2012-03-03 22:07 - 0000000 ____D C:\Users\Mary\AppData\Local\{9EBC7576-9488-42A5-9AE8-D76BD0ED1217}
2012-03-03 22:07 - 2012-03-03 22:07 - 0000000 ____D C:\Users\Mary\AppData\Local\{0FC96574-FB5D-4F92-AB02-A4507959A0BE}
2012-03-03 22:05 - 2009-07-13 22:20 - 0000000 ____D C:\Program Files\Common Files\Microsoft Shared
2012-03-03 22:04 - 2011-06-09 18:27 - 0000000 ____D C:\Program Files (x86)\Windows Live
2012-03-03 22:04 - 2011-06-09 18:26 - 0000000 ____D C:\Program Files\Windows Live
2012-03-03 22:00 - 2012-03-03 22:00 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{F7666F55-90A9-432A-B0D2-0FAFDC30A014}
2012-03-03 22:00 - 2012-03-03 22:00 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{5593A03F-94DD-4296-86A1-A2330A03BDA9}
2012-03-03 22:00 - 2012-03-03 22:00 - 0000000 ____D C:\Users\Mary\Local Settings\{F7666F55-90A9-432A-B0D2-0FAFDC30A014}
2012-03-03 22:00 - 2012-03-03 22:00 - 0000000 ____D C:\Users\Mary\Local Settings\{5593A03F-94DD-4296-86A1-A2330A03BDA9}
2012-03-03 22:00 - 2012-03-03 22:00 - 0000000 ____D C:\Users\Mary\AppData\Local\{F7666F55-90A9-432A-B0D2-0FAFDC30A014}
2012-03-03 22:00 - 2012-03-03 22:00 - 0000000 ____D C:\Users\Mary\AppData\Local\{5593A03F-94DD-4296-86A1-A2330A03BDA9}
2012-03-03 21:59 - 2012-03-03 21:59 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{E43BFE88-F2DF-4367-939C-2FCBBBDBC61B}
2012-03-03 21:59 - 2012-03-03 21:59 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{AA5A20E2-C2B0-47D3-84A7-097241AC1258}
2012-03-03 21:59 - 2012-03-03 21:59 - 0000000 ____D C:\Users\Mary\Local Settings\{E43BFE88-F2DF-4367-939C-2FCBBBDBC61B}
2012-03-03 21:59 - 2012-03-03 21:59 - 0000000 ____D C:\Users\Mary\Local Settings\{AA5A20E2-C2B0-47D3-84A7-097241AC1258}
2012-03-03 21:59 - 2012-03-03 21:59 - 0000000 ____D C:\Users\Mary\AppData\Local\{E43BFE88-F2DF-4367-939C-2FCBBBDBC61B}
2012-03-03 21:59 - 2012-03-03 21:59 - 0000000 ____D C:\Users\Mary\AppData\Local\{AA5A20E2-C2B0-47D3-84A7-097241AC1258}
2012-03-03 21:48 - 2012-03-03 21:48 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{4C499780-B143-4B0E-804B-B839A9B6A9F1}
2012-03-03 21:48 - 2012-03-03 21:48 - 0000000 ____D C:\Users\Mary\Local Settings\{4C499780-B143-4B0E-804B-B839A9B6A9F1}
2012-03-03 21:48 - 2012-03-03 21:48 - 0000000 ____D C:\Users\Mary\AppData\Local\{4C499780-B143-4B0E-804B-B839A9B6A9F1}
2012-03-03 21:48 - 2012-03-03 21:47 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{67152428-528F-41C1-83B2-41791AA22656}
2012-03-03 21:48 - 2012-03-03 21:47 - 0000000 ____D C:\Users\Mary\Local Settings\{67152428-528F-41C1-83B2-41791AA22656}
2012-03-03 21:48 - 2012-03-03 21:47 - 0000000 ____D C:\Users\Mary\AppData\Local\{67152428-528F-41C1-83B2-41791AA22656}
2012-03-03 14:31 - 2012-03-03 14:31 - 5475414 ___RA C:\Users\Mary\Desktop\4 shores logo.bmp
2012-03-03 14:19 - 2012-03-03 14:19 - 0240260 ____A C:\Users\Mary\Desktop\davesnow1.jpg
2012-03-03 14:19 - 2012-03-03 14:17 - 0240260 ____A C:\Users\Mary\Desktop\daveboyssnowmobiling.jpg
2012-03-03 14:18 - 2012-03-03 14:18 - 0330872 ____A C:\Users\Mary\Desktop\davesnow.jpg
2012-03-03 14:18 - 2012-03-03 14:18 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{77AE2770-1859-41AB-9B59-462F57D27E4B}
2012-03-03 14:18 - 2012-03-03 14:18 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{29065E9B-B5A5-472B-8F11-A5A7BBDA0076}
2012-03-03 14:18 - 2012-03-03 14:18 - 0000000 ____D C:\Users\Mary\Local Settings\{77AE2770-1859-41AB-9B59-462F57D27E4B}
2012-03-03 14:18 - 2012-03-03 14:18 - 0000000 ____D C:\Users\Mary\Local Settings\{29065E9B-B5A5-472B-8F11-A5A7BBDA0076}
2012-03-03 14:18 - 2012-03-03 14:18 - 0000000 ____D C:\Users\Mary\AppData\Local\{77AE2770-1859-41AB-9B59-462F57D27E4B}
2012-03-03 14:18 - 2012-03-03 14:18 - 0000000 ____D C:\Users\Mary\AppData\Local\{29065E9B-B5A5-472B-8F11-A5A7BBDA0076}
2012-03-02 22:15 - 2012-03-02 22:15 - 0019171 ____A C:\Users\Mary\Desktop\Janelle 2011_Minnesota_Return.pdf
2012-03-02 22:00 - 2012-03-02 22:00 - 0012378 ____A C:\Users\Mary\Desktop\Janelle 2011_Federal_Return.pdf
2012-02-29 20:46 - 2011-11-20 00:47 - 0050176 ____A C:\Users\Mary\Desktop\NEW Plow Route 2011.2012 charges.xls
2012-02-29 20:11 - 2012-02-29 20:11 - 0110248 ____A C:\Users\Mary\Downloads\Fax_20120229_486809317.tif
2012-02-29 17:37 - 2012-02-29 17:27 - 39401336 ____A (Apple Inc.) C:\Users\Mary\Downloads\QuickTimeInstaller.exe
2012-02-29 08:38 - 2011-11-14 12:39 - 0014576 ____A C:\Users\Mary\Desktop\snow shovelers.xlsx
2012-02-29 08:11 - 2011-11-03 18:10 - 0046080 ____A C:\Users\Mary\Desktop\NEW Plow Route 2011.2012.xls
2012-02-28 12:06 - 2012-02-28 12:04 - 0352521 ____A C:\Users\Mary\Desktop\4shoresAL.pdf
2012-02-28 09:34 - 2012-02-28 09:33 - 0011514 ____A C:\Users\Mary\Downloads\4Shores2(1).jpg
2012-02-28 09:29 - 2012-02-28 09:29 - 0011514 ____A C:\Users\Mary\Downloads\4Shores2.jpg
2012-02-27 13:00 - 2012-02-27 13:00 - 0032768 ____A C:\Users\Mary\Downloads\Resume.doc
2012-02-26 15:44 - 2012-02-26 15:44 - 3814806 ____A C:\Users\Mary\Desktop\eliptica (2).jpg
2012-02-26 15:44 - 2012-02-26 15:41 - 3814806 ____A C:\Users\Mary\Desktop\eliptica.jpg
2012-02-26 15:43 - 2012-02-26 15:43 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{EFD0F647-9E4A-490D-8E14-E5857712B4FD}
2012-02-26 15:43 - 2012-02-26 15:43 - 0000000 ____D C:\Users\Mary\Local Settings\{EFD0F647-9E4A-490D-8E14-E5857712B4FD}
2012-02-26 15:43 - 2012-02-26 15:43 - 0000000 ____D C:\Users\Mary\AppData\Local\{EFD0F647-9E4A-490D-8E14-E5857712B4FD}
2012-02-26 15:43 - 2012-02-26 15:42 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{8188B7D0-05AC-405C-BB16-97AC96B4D82E}
2012-02-26 15:43 - 2012-02-26 15:42 - 0000000 ____D C:\Users\Mary\Local Settings\{8188B7D0-05AC-405C-BB16-97AC96B4D82E}
2012-02-26 15:43 - 2012-02-26 15:42 - 0000000 ____D C:\Users\Mary\AppData\Local\{8188B7D0-05AC-405C-BB16-97AC96B4D82E}
2012-02-26 15:42 - 2012-02-26 15:42 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{C25214CF-B412-42FC-BD2C-EAB661EF535D}
2012-02-26 15:42 - 2012-02-26 15:42 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{2FC48688-7129-4743-8E64-6D0E3BE2EE42}
2012-02-26 15:42 - 2012-02-26 15:42 - 0000000 ____D C:\Users\Mary\Local Settings\{C25214CF-B412-42FC-BD2C-EAB661EF535D}
2012-02-26 15:42 - 2012-02-26 15:42 - 0000000 ____D C:\Users\Mary\Local Settings\{2FC48688-7129-4743-8E64-6D0E3BE2EE42}
2012-02-26 15:42 - 2012-02-26 15:42 - 0000000 ____D C:\Users\Mary\AppData\Local\{C25214CF-B412-42FC-BD2C-EAB661EF535D}
2012-02-26 15:42 - 2012-02-26 15:42 - 0000000 ____D C:\Users\Mary\AppData\Local\{2FC48688-7129-4743-8E64-6D0E3BE2EE42}
2012-02-26 15:39 - 2012-02-26 15:39 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{CEAB5DF3-3F73-4459-8D17-871B10C814DE}
2012-02-26 15:39 - 2012-02-26 15:39 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{5AE4822C-8BEF-4324-A9BF-376F85D43B58}
2012-02-26 15:39 - 2012-02-26 15:39 - 0000000 ____D C:\Users\Mary\Local Settings\{CEAB5DF3-3F73-4459-8D17-871B10C814DE}
2012-02-26 15:39 - 2012-02-26 15:39 - 0000000 ____D C:\Users\Mary\Local Settings\{5AE4822C-8BEF-4324-A9BF-376F85D43B58}
2012-02-26 15:39 - 2012-02-26 15:39 - 0000000 ____D C:\Users\Mary\AppData\Local\{CEAB5DF3-3F73-4459-8D17-871B10C814DE}
2012-02-26 15:39 - 2012-02-26 15:39 - 0000000 ____D C:\Users\Mary\AppData\Local\{5AE4822C-8BEF-4324-A9BF-376F85D43B58}
2012-02-26 15:28 - 2012-02-26 15:28 - 634274165 ____A C:\Windows\MEMORY.DMP
2012-02-24 13:51 - 2012-02-24 13:51 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{97BADD4E-1C5C-4315-849F-0067763C933F}
2012-02-24 13:51 - 2012-02-24 13:51 - 0000000 ____D C:\Users\Mary\Local Settings\{97BADD4E-1C5C-4315-849F-0067763C933F}
2012-02-24 13:51 - 2012-02-24 13:51 - 0000000 ____D C:\Users\Mary\AppData\Local\{97BADD4E-1C5C-4315-849F-0067763C933F}
2012-02-24 13:51 - 2012-02-24 13:50 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{E84B14DC-116F-4DB7-890A-D7135FAB1704}
2012-02-24 13:51 - 2012-02-24 13:50 - 0000000 ____D C:\Users\Mary\Local Settings\{E84B14DC-116F-4DB7-890A-D7135FAB1704}
2012-02-24 13:51 - 2012-02-24 13:50 - 0000000 ____D C:\Users\Mary\AppData\Local\{E84B14DC-116F-4DB7-890A-D7135FAB1704}
2012-02-24 13:40 - 2012-02-24 13:40 - 0000000 ___AH C:\Windows\System32\Drivers\Msft_Kernel_silabser_01009.Wdf
2012-02-24 13:39 - 2011-10-16 16:50 - 0000000 ____D C:\Users\Mary\Local Settings\Downloaded Installations
2012-02-24 13:39 - 2011-10-16 16:50 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\Downloaded Installations
2012-02-24 13:39 - 2011-10-16 16:50 - 0000000 ____D C:\Users\Mary\AppData\Local\Downloaded Installations
2012-02-24 13:38 - 2012-02-24 13:38 - 9031848 ____A (Supra ) C:\Users\Mary\Downloads\dKeyUSBCradle_x64-2.0.0.329.exe
2012-02-22 22:21 - 2012-02-22 22:21 - 0032256 ____A C:\Users\Mary\Desktop\Satisfaction and Instructions for judgment.doc
2012-02-19 20:47 - 2012-02-19 20:47 - 5054653 ____A C:\Users\Mary\Desktop\aaDSC_0009 (2).jpg
2012-02-19 20:47 - 2012-02-19 20:47 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{C6FB8B2D-73C1-4C34-85F0-DFF2410932FF}
2012-02-19 20:47 - 2012-02-19 20:47 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{9D59721B-F5AA-4EFC-B1AC-4DB53CFFD6E2}
2012-02-19 20:47 - 2012-02-19 20:47 - 0000000 ____D C:\Users\Mary\Local Settings\{C6FB8B2D-73C1-4C34-85F0-DFF2410932FF}
2012-02-19 20:47 - 2012-02-19 20:47 - 0000000 ____D C:\Users\Mary\Local Settings\{9D59721B-F5AA-4EFC-B1AC-4DB53CFFD6E2}
2012-02-19 20:47 - 2012-02-19 20:47 - 0000000 ____D C:\Users\Mary\AppData\Local\{C6FB8B2D-73C1-4C34-85F0-DFF2410932FF}
2012-02-19 20:47 - 2012-02-19 20:47 - 0000000 ____D C:\Users\Mary\AppData\Local\{9D59721B-F5AA-4EFC-B1AC-4DB53CFFD6E2}
2012-02-19 20:43 - 2012-02-19 20:43 - 2933203 ____A C:\Users\Mary\Desktop\aDSC_0001 (2).jpg
2012-02-19 20:42 - 2012-02-19 20:42 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{A91A9472-CFEA-4D35-B59B-1F8DE5DE10FD}
2012-02-19 20:42 - 2012-02-19 20:42 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{2E03DE52-27AE-432C-888E-B437FA691395}
2012-02-19 20:42 - 2012-02-19 20:42 - 0000000 ____D C:\Users\Mary\Local Settings\{A91A9472-CFEA-4D35-B59B-1F8DE5DE10FD}
2012-02-19 20:42 - 2012-02-19 20:42 - 0000000 ____D C:\Users\Mary\Local Settings\{2E03DE52-27AE-432C-888E-B437FA691395}
2012-02-19 20:42 - 2012-02-19 20:42 - 0000000 ____D C:\Users\Mary\AppData\Local\{A91A9472-CFEA-4D35-B59B-1F8DE5DE10FD}
2012-02-19 20:42 - 2012-02-19 20:42 - 0000000 ____D C:\Users\Mary\AppData\Local\{2E03DE52-27AE-432C-888E-B437FA691395}
2012-02-17 18:56 - 2012-02-17 18:54 - 0015962 ____A C:\Users\Mary\Desktop\dave ar 2011.xlsx
2012-02-16 04:30 - 2011-10-08 10:52 - 0000402 __ASH C:\Users\Mary\My Documents\desktop.ini
2012-02-16 04:30 - 2011-10-08 10:52 - 0000174 ___SH C:\Users\Mary\Start Menu\Programs\Startup\desktop.ini
2012-02-16 04:30 - 2011-10-08 10:52 - 0000174 ___SH C:\Users\Mary\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini
2012-02-16 04:28 - 2011-06-09 18:24 - 0000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2012-02-16 04:28 - 2009-07-13 23:45 - 0474536 ____A C:\Windows\System32\FNTCACHE.DAT
2012-02-16 04:10 - 2011-10-09 16:33 - 0000000 ____D C:\Users\All Users\Microsoft Help
2012-02-16 04:10 - 2011-10-09 16:33 - 0000000 ____D C:\Users\All Users\Application Data\Microsoft Help
2012-02-16 04:10 - 2011-10-09 16:33 - 0000000 ____D C:\ProgramData\Microsoft Help
2012-02-16 04:03 - 2012-02-16 04:03 - 0000000 __SHD C:\Windows\SysWOW64\%APPDATA%
2012-02-16 04:01 - 2011-10-08 11:25 - 54585368 ____A (Microsoft Corporation) C:\Windows\System32\MRT.exe
2012-02-15 19:56 - 2012-02-15 19:56 - 0121754 ____A C:\Users\Mary\Desktop\HOTDISH4CHEESE.docx
2012-02-15 16:37 - 2011-10-27 18:35 - 39837696 ___RA C:\Users\Mary\Desktop\PRO CNC INC 2006.qbw
2012-02-15 16:05 - 2012-02-15 16:05 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{EEDD7983-80EF-4F05-BCB0-3CAC10D2C463}
2012-02-15 16:05 - 2012-02-15 16:05 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{8DD4D5E0-81F3-4FDC-AA1F-9BA5313C784B}
2012-02-15 16:05 - 2012-02-15 16:05 - 0000000 ____D C:\Users\Mary\Local Settings\{EEDD7983-80EF-4F05-BCB0-3CAC10D2C463}
2012-02-15 16:05 - 2012-02-15 16:05 - 0000000 ____D C:\Users\Mary\Local Settings\{8DD4D5E0-81F3-4FDC-AA1F-9BA5313C784B}
2012-02-15 16:05 - 2012-02-15 16:05 - 0000000 ____D C:\Users\Mary\AppData\Local\{EEDD7983-80EF-4F05-BCB0-3CAC10D2C463}
2012-02-15 16:05 - 2012-02-15 16:05 - 0000000 ____D C:\Users\Mary\AppData\Local\{8DD4D5E0-81F3-4FDC-AA1F-9BA5313C784B}
2012-02-15 16:00 - 2012-02-15 16:00 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{DCD792C4-FA08-4566-9160-469B68D7A803}
2012-02-15 16:00 - 2012-02-15 16:00 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{338D20F3-F938-44E0-A0E6-F3AC0DD78113}
2012-02-15 16:00 - 2012-02-15 16:00 - 0000000 ____D C:\Users\Mary\Local Settings\{DCD792C4-FA08-4566-9160-469B68D7A803}
2012-02-15 16:00 - 2012-02-15 16:00 - 0000000 ____D C:\Users\Mary\Local Settings\{338D20F3-F938-44E0-A0E6-F3AC0DD78113}
2012-02-15 16:00 - 2012-02-15 16:00 - 0000000 ____D C:\Users\Mary\AppData\Local\{DCD792C4-FA08-4566-9160-469B68D7A803}
2012-02-15 16:00 - 2012-02-15 16:00 - 0000000 ____D C:\Users\Mary\AppData\Local\{338D20F3-F938-44E0-A0E6-F3AC0DD78113}
2012-02-15 15:56 - 2012-02-15 15:56 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{FE7F5333-7FE4-47CC-9B90-E71DDE748E38}
2012-02-15 15:56 - 2012-02-15 15:56 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{09FE5FD1-2A02-4EC1-90AB-6D2FE952E02A}
2012-02-15 15:56 - 2012-02-15 15:56 - 0000000 ____D C:\Users\Mary\Local Settings\{FE7F5333-7FE4-47CC-9B90-E71DDE748E38}
2012-02-15 15:56 - 2012-02-15 15:56 - 0000000 ____D C:\Users\Mary\Local Settings\{09FE5FD1-2A02-4EC1-90AB-6D2FE952E02A}
2012-02-15 15:56 - 2012-02-15 15:56 - 0000000 ____D C:\Users\Mary\AppData\Local\{FE7F5333-7FE4-47CC-9B90-E71DDE748E38}
2012-02-15 15:56 - 2012-02-15 15:56 - 0000000 ____D C:\Users\Mary\AppData\Local\{09FE5FD1-2A02-4EC1-90AB-6D2FE952E02A}
2012-02-14 10:47 - 2012-02-14 10:47 - 0249832 ____A C:\Users\Mary\My Documents\Music.txt
2012-02-14 10:47 - 2012-02-14 10:47 - 0249832 ____A C:\Users\Mary\Documents\Music.txt
2012-02-14 10:43 - 2012-02-14 10:43 - 0001202 ____A C:\Users\Public\Desktop\Amazon MP3 Uploader.lnk
2012-02-14 10:43 - 2012-02-14 10:43 - 0001202 ____A C:\Users\All Users\Desktop\Amazon MP3 Uploader.lnk
2012-02-14 10:43 - 2012-02-14 10:43 - 0000000 ____D C:\Users\Mary\My Documents\Amazon MP3 Uploader
2012-02-14 10:43 - 2012-02-14 10:43 - 0000000 ____D C:\Users\Mary\Documents\Amazon MP3 Uploader
2012-02-14 10:43 - 2012-02-14 10:43 - 0000000 ____D C:\Users\Mary\Application Data\com.amazon.music.uploader
2012-02-14 10:43 - 2012-02-14 10:43 - 0000000 ____D C:\Users\Mary\AppData\Roaming\com.amazon.music.uploader
2012-02-14 10:43 - 2012-02-14 10:43 - 0000000 ____D C:\Users\Default\Application Data\Macromedia
2012-02-14 10:43 - 2012-02-14 10:43 - 0000000 ____D C:\Users\Default\AppData\Roaming\Macromedia
2012-02-14 10:43 - 2012-02-14 10:43 - 0000000 ____D C:\Users\Default User\Application Data\Macromedia
2012-02-14 10:43 - 2012-02-14 10:43 - 0000000 ____D C:\Users\Default User\AppData\Roaming\Macromedia
2012-02-14 10:43 - 2011-11-16 00:51 - 0000000 ____D C:\Program Files (x86)\Amazon
2012-02-14 10:43 - 2011-10-08 10:58 - 0000000 ____D C:\Users\Mary\Application Data\Adobe
2012-02-14 10:43 - 2011-10-08 10:58 - 0000000 ____D C:\Users\Mary\AppData\Roaming\Adobe
2012-02-14 10:43 - 2011-06-09 18:13 - 0000000 ____D C:\Users\All Users\Application Data\Adobe
2012-02-14 10:43 - 2011-06-09 18:13 - 0000000 ____D C:\Users\All Users\Adobe
2012-02-14 10:43 - 2011-06-09 18:13 - 0000000 ____D C:\ProgramData\Adobe
2012-02-14 10:43 - 2011-06-09 18:13 - 0000000 ____D C:\Program Files (x86)\Adobe
2012-02-14 10:42 - 2012-02-14 10:42 - 7445520 ____A C:\Users\Mary\Downloads\AmazonMP3UploaderInstaller-1.0.7._V164135866_(3).exe
2012-02-14 10:42 - 2011-10-11 19:10 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\Adobe
2012-02-14 10:42 - 2011-10-11 19:10 - 0000000 ____D C:\Users\Mary\Local Settings\Adobe
2012-02-14 10:42 - 2011-10-11 19:10 - 0000000 ____D C:\Users\Mary\AppData\Local\Adobe
2012-02-14 10:41 - 2012-02-14 10:41 - 7445520 ____A C:\Users\Mary\Downloads\AmazonMP3UploaderInstaller-1.0.7._V164135866_(2).exe
2012-02-14 10:39 - 2012-02-14 09:49 - 0000000 ____D C:\Program Files\Common Files\Apple
2012-02-14 10:38 - 2012-02-14 10:38 - 1637016 ____A C:\Users\Mary\Downloads\AmazonMP3DownloaderInstall(3).exe
2012-02-14 10:38 - 2012-02-14 10:38 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{19685C5F-AA16-4475-ABA2-B132227B9345}
2012-02-14 10:38 - 2012-02-14 10:38 - 0000000 ____D C:\Users\Mary\Local Settings\{19685C5F-AA16-4475-ABA2-B132227B9345}
2012-02-14 10:38 - 2012-02-14 10:38 - 0000000 ____D C:\Users\Mary\AppData\Local\{19685C5F-AA16-4475-ABA2-B132227B9345}
2012-02-14 10:37 - 2012-02-14 10:37 - 1637016 ____A C:\Users\Mary\Downloads\AmazonMP3DownloaderInstall(2).exe
2012-02-14 10:37 - 2012-02-14 10:37 - 1637016 ____A C:\Users\Mary\Downloads\AmazonMP3DownloaderInstall(1).exe
2012-02-14 10:36 - 2012-02-14 10:36 - 7445520 ____A C:\Users\Mary\Downloads\AmazonMP3UploaderInstaller-1.0.7._V164135866_(1).exe
2012-02-14 10:34 - 2012-02-14 10:34 - 7445520 ____A C:\Users\Mary\Downloads\AmazonMP3UploaderInstaller-1.0.7._V164135866_.exe
2012-02-14 10:19 - 2012-02-14 10:19 - 0001142 ____A C:\Users\Mary\Start Menu\Programs\Startup\Microsoft SharePoint Workspace.lnk
2012-02-14 10:19 - 2012-02-14 10:19 - 0001142 ____A C:\Users\Mary\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Microsoft SharePoint Workspace.lnk
2012-02-14 09:58 - 2012-02-14 09:51 - 0000000 ____D C:\Users\Mary\Application Data\Apple Computer
2012-02-14 09:58 - 2012-02-14 09:51 - 0000000 ____D C:\Users\Mary\AppData\Roaming\Apple Computer
2012-02-14 09:51 - 2012-02-14 09:51 - 0001785 ____A C:\Users\Public\Desktop\iTunes.lnk
2012-02-14 09:51 - 2012-02-14 09:51 - 0001785 ____A C:\Users\All Users\Desktop\iTunes.lnk
2012-02-14 09:51 - 2012-02-14 09:51 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\Apple Computer
2012-02-14 09:51 - 2012-02-14 09:51 - 0000000 ____D C:\Users\Mary\Local Settings\Apple Computer
2012-02-14 09:51 - 2012-02-14 09:51 - 0000000 ____D C:\Users\Mary\AppData\Local\Apple Computer
2012-02-14 09:51 - 2012-02-14 09:50 - 0000000 ____D C:\Users\All Users\Application Data\{93E26451-CD9A-43A5-A2FA-C42392EA4001}
2012-02-14 09:51 - 2012-02-14 09:50 - 0000000 ____D C:\Users\All Users\{93E26451-CD9A-43A5-A2FA-C42392EA4001}
2012-02-14 09:51 - 2012-02-14 09:50 - 0000000 ____D C:\ProgramData\{93E26451-CD9A-43A5-A2FA-C42392EA4001}
2012-02-14 09:51 - 2012-02-14 09:50 - 0000000 ____D C:\Program Files\iTunes
2012-02-14 09:51 - 2012-02-14 09:50 - 0000000 ____D C:\Program Files (x86)\iTunes
2012-02-14 09:50 - 2012-02-14 09:50 - 0000000 ____D C:\Users\All Users\Application Data\Apple Computer
2012-02-14 09:50 - 2012-02-14 09:50 - 0000000 ____D C:\Users\All Users\Apple Computer
2012-02-14 09:50 - 2012-02-14 09:50 - 0000000 ____D C:\ProgramData\Apple Computer
2012-02-14 09:50 - 2012-02-14 09:50 - 0000000 ____D C:\Program Files\iPod
2012-02-14 09:49 - 2012-02-14 09:49 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\Apple
2012-02-14 09:49 - 2012-02-14 09:49 - 0000000 ____D C:\Users\Mary\Local Settings\Apple
2012-02-14 09:49 - 2012-02-14 09:49 - 0000000 ____D C:\Users\Mary\AppData\Local\Apple
2012-02-14 09:49 - 2012-02-14 09:49 - 0000000 ____D C:\Program Files\Bonjour
2012-02-14 09:49 - 2012-02-14 09:49 - 0000000 ____D C:\Program Files (x86)\Bonjour
2012-02-14 09:49 - 2012-02-14 09:49 - 0000000 ____D C:\Program Files (x86)\Apple Software Update
2012-02-14 09:49 - 2012-02-14 09:48 - 0000000 ____D C:\Users\All Users\Application Data\Apple
2012-02-14 09:49 - 2012-02-14 09:48 - 0000000 ____D C:\Users\All Users\Apple
2012-02-14 09:49 - 2012-02-14 09:48 - 0000000 ____D C:\ProgramData\Apple
2012-02-14 09:46 - 2012-02-14 09:42 - 71279472 ____A (Apple Inc.) C:\Users\Mary\Downloads\iTunes64Setup(1).exe
2012-02-14 09:41 - 2012-02-14 09:38 - 71279472 ____A (Apple Inc.) C:\Users\Mary\Downloads\iTunes64Setup.exe
2012-02-10 00:10 - 2012-02-10 00:10 - 0776232 ____A (Adobe Systems Incorporated) C:\Users\Mary\Downloads\install_flashplayer11x64_mssa_aih(2).exe
2012-02-10 00:09 - 2012-02-10 00:09 - 0776232 ____A (Adobe Systems Incorporated) C:\Users\Mary\Downloads\install_flashplayer11x64_mssa_aih(1).exe
2012-02-10 00:08 - 2012-02-10 00:08 - 0776232 ____A (Adobe Systems Incorporated) C:\Users\Mary\Downloads\install_flashplayer11x64_mssa_aih.exe
2012-02-09 15:37 - 2012-02-09 15:37 - 0002114 ____A C:\Users\All Users\Start Menu\Programs\Startup\BodyMedia Sync.lnk
2012-02-09 15:37 - 2012-02-09 15:37 - 0000000 ____D C:\Users\Mary\Application Data\BodyMedia
2012-02-09 15:37 - 2012-02-09 15:37 - 0000000 ____D C:\Users\Mary\AppData\Roaming\BodyMedia
2012-02-09 15:37 - 2012-02-09 15:37 - 0000000 ____D C:\Program Files (x86)\BodyMedia
2012-02-09 15:37 - 2011-06-09 18:00 - 0000000 ____D C:\Program Files (x86)\InstallShield Installation Information
2012-02-09 15:34 - 2012-02-09 15:34 - 26633864 ____A (BodyMedia, Inc. ) C:\Users\Mary\Downloads\BodyMediaSync-2.2.0.93-20111201.exe
2012-02-08 15:43 - 2012-02-08 15:43 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{E53E9D78-CA7D-4D61-A8D0-315584D08BAC}
2012-02-08 15:43 - 2012-02-08 15:43 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{97E361F8-3CF3-4F24-8234-6A9EB6BEF115}
2012-02-08 15:43 - 2012-02-08 15:43 - 0000000 ____D C:\Users\Mary\Local Settings\{E53E9D78-CA7D-4D61-A8D0-315584D08BAC}
2012-02-08 15:43 - 2012-02-08 15:43 - 0000000 ____D C:\Users\Mary\Local Settings\{97E361F8-3CF3-4F24-8234-6A9EB6BEF115}
2012-02-08 15:43 - 2012-02-08 15:43 - 0000000 ____D C:\Users\Mary\AppData\Local\{E53E9D78-CA7D-4D61-A8D0-315584D08BAC}
2012-02-08 15:43 - 2012-02-08 15:43 - 0000000 ____D C:\Users\Mary\AppData\Local\{97E361F8-3CF3-4F24-8234-6A9EB6BEF115}
2012-02-07 15:16 - 2012-02-07 14:17 - 0000000 ____D C:\Users\Mary\Desktop\Ritz order 2.7.12
2012-02-07 15:15 - 2012-02-07 15:15 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{6816F73C-B310-4D3A-9BB1-765F8FAA8F3B}
2012-02-07 15:15 - 2012-02-07 15:15 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{1E48F8DD-9A15-477C-83D9-B1DDE956438C}
2012-02-07 15:15 - 2012-02-07 15:15 - 0000000 ____D C:\Users\Mary\Local Settings\{6816F73C-B310-4D3A-9BB1-765F8FAA8F3B}
2012-02-07 15:15 - 2012-02-07 15:15 - 0000000 ____D C:\Users\Mary\Local Settings\{1E48F8DD-9A15-477C-83D9-B1DDE956438C}
2012-02-07 15:15 - 2012-02-07 15:15 - 0000000 ____D C:\Users\Mary\AppData\Local\{6816F73C-B310-4D3A-9BB1-765F8FAA8F3B}
2012-02-07 15:15 - 2012-02-07 15:15 - 0000000 ____D C:\Users\Mary\AppData\Local\{1E48F8DD-9A15-477C-83D9-B1DDE956438C}
2012-02-07 15:14 - 2012-02-07 15:14 - 2870792 ____A C:\Users\Mary\Downloads\bdf150.jpg
2012-02-07 14:47 - 2012-02-07 14:46 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{A9A11300-D77F-49CC-A590-D612572A0978}
2012-02-07 14:47 - 2012-02-07 14:46 - 0000000 ____D C:\Users\Mary\Local Settings\{A9A11300-D77F-49CC-A590-D612572A0978}
2012-02-07 14:47 - 2012-02-07 14:46 - 0000000 ____D C:\Users\Mary\AppData\Local\{A9A11300-D77F-49CC-A590-D612572A0978}
2012-02-07 14:46 - 2012-02-07 14:46 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{06E2D2BC-F7CD-46F1-87D0-3C43DB8185B7}
2012-02-07 14:46 - 2012-02-07 14:46 - 0000000 ____D C:\Users\Mary\Local Settings\{06E2D2BC-F7CD-46F1-87D0-3C43DB8185B7}
2012-02-07 14:46 - 2012-02-07 14:46 - 0000000 ____D C:\Users\Mary\AppData\Local\{06E2D2BC-F7CD-46F1-87D0-3C43DB8185B7}
2012-02-07 14:06 - 2012-02-07 14:06 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{FB517C62-0BF1-41CC-98C0-D6F0A82273DE}
2012-02-07 14:06 - 2012-02-07 14:06 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{6ADE204A-87E0-4D01-87E5-CDAD9277F94A}
2012-02-07 14:06 - 2012-02-07 14:06 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{18A067B2-55EC-49E2-B1FE-5EB66CD464ED}
2012-02-07 14:06 - 2012-02-07 14:06 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{13E9EA2F-1040-4793-A9B3-F0384CE92FB6}
2012-02-07 14:06 - 2012-02-07 14:06 - 0000000 ____D C:\Users\Mary\Local Settings\{FB517C62-0BF1-41CC-98C0-D6F0A82273DE}
2012-02-07 14:06 - 2012-02-07 14:06 - 0000000 ____D C:\Users\Mary\Local Settings\{6ADE204A-87E0-4D01-87E5-CDAD9277F94A}
2012-02-07 14:06 - 2012-02-07 14:06 - 0000000 ____D C:\Users\Mary\Local Settings\{18A067B2-55EC-49E2-B1FE-5EB66CD464ED}
2012-02-07 14:06 - 2012-02-07 14:06 - 0000000 ____D C:\Users\Mary\Local Settings\{13E9EA2F-1040-4793-A9B3-F0384CE92FB6}
2012-02-07 14:06 - 2012-02-07 14:06 - 0000000 ____D C:\Users\Mary\AppData\Local\{FB517C62-0BF1-41CC-98C0-D6F0A82273DE}
2012-02-07 14:06 - 2012-02-07 14:06 - 0000000 ____D C:\Users\Mary\AppData\Local\{6ADE204A-87E0-4D01-87E5-CDAD9277F94A}
2012-02-07 14:06 - 2012-02-07 14:06 - 0000000 ____D C:\Users\Mary\AppData\Local\{18A067B2-55EC-49E2-B1FE-5EB66CD464ED}
2012-02-07 14:06 - 2012-02-07 14:06 - 0000000 ____D C:\Users\Mary\AppData\Local\{13E9EA2F-1040-4793-A9B3-F0384CE92FB6}
2012-02-07 13:34 - 2012-02-07 13:34 - 0064852 ____A C:\Users\Mary\Desktop\Recommended-Grocery-Foods.aspx.htm
2012-02-07 13:34 - 2012-02-07 13:34 - 0000000 ____D C:\Users\Mary\Desktop\Recommended-Grocery-Foods.aspx_files
2012-02-04 10:26 - 2009-07-14 00:08 - 0032646 ____A C:\Windows\Tasks\SCHEDLGU.TXT
2012-02-02 22:55 - 2012-02-02 22:54 - 0002694 ____A C:\Users\Mary\SurveyStudentEmploymentApp.xml
2012-02-02 21:48 - 2012-02-02 21:47 - 0002574 ____A C:\Users\Mary\Desktop\SurveyStudentEmploymentApp.xml
2012-01-31 15:53 - 2012-01-31 15:53 - 0014852 ____A C:\Users\Mary\Downloads\100MEDIA_IMAG0865.jpg
2012-01-31 09:30 - 2012-01-31 09:30 - 0014283 ____A C:\Users\Mary\Desktop\Marlene vacuum.docx
2012-01-31 09:30 - 2012-01-31 09:30 - 0000162 ___AH C:\Users\Mary\Desktop\~$rlene vacuum.docx
2012-01-30 22:56 - 2012-01-30 22:56 - 0000000 ____D C:\Users\Mary\Desktop\Restored_new and improved DS_Files
2012-01-30 19:04 - 2012-01-30 19:04 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{C68666FA-61FE-4066-9E94-1BE521065362}
2012-01-30 19:04 - 2012-01-30 19:04 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{57674E36-EBCA-456C-81B6-323195F0ECDC}
2012-01-30 19:04 - 2012-01-30 19:04 - 0000000 ____D C:\Users\Mary\Local Settings\{C68666FA-61FE-4066-9E94-1BE521065362}
2012-01-30 19:04 - 2012-01-30 19:04 - 0000000 ____D C:\Users\Mary\Local Settings\{57674E36-EBCA-456C-81B6-323195F0ECDC}
2012-01-30 19:04 - 2012-01-30 19:04 - 0000000 ____D C:\Users\Mary\AppData\Local\{C68666FA-61FE-4066-9E94-1BE521065362}
2012-01-30 19:04 - 2012-01-30 19:04 - 0000000 ____D C:\Users\Mary\AppData\Local\{57674E36-EBCA-456C-81B6-323195F0ECDC}
2012-01-30 19:00 - 2012-01-30 18:59 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{B6D38B51-F2A1-4C84-A139-3896D1295380}
2012-01-30 19:00 - 2012-01-30 18:59 - 0000000 ____D C:\Users\Mary\Local Settings\{B6D38B51-F2A1-4C84-A139-3896D1295380}
2012-01-30 19:00 - 2012-01-30 18:59 - 0000000 ____D C:\Users\Mary\AppData\Local\{B6D38B51-F2A1-4C84-A139-3896D1295380}
2012-01-30 18:59 - 2012-01-30 18:59 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{045D8216-3835-4244-9B0D-B53DC57C1105}
2012-01-30 18:59 - 2012-01-30 18:59 - 0000000 ____D C:\Users\Mary\Local Settings\{045D8216-3835-4244-9B0D-B53DC57C1105}
2012-01-30 18:59 - 2012-01-30 18:59 - 0000000 ____D C:\Users\Mary\AppData\Local\{045D8216-3835-4244-9B0D-B53DC57C1105}
2012-01-29 22:26 - 2011-06-09 19:34 - 0023320 ____A C:\Windows\PFRO.log
2012-01-29 22:18 - 2012-01-29 22:18 - 0025160 ____A C:\Windows\System32\Drivers\hitmanpro36.sys
2012-01-29 22:18 - 2012-01-29 22:17 - 0000000 ____D C:\Users\All Users\HitmanPro
2012-01-29 22:18 - 2012-01-29 22:17 - 0000000 ____D C:\Users\All Users\Application Data\HitmanPro
2012-01-29 22:18 - 2012-01-29 22:17 - 0000000 ____D C:\ProgramData\HitmanPro
2012-01-29 22:17 - 2012-01-29 22:17 - 0000000 ____D C:\Program Files\HitmanPro
2012-01-29 22:17 - 2012-01-29 22:16 - 7784184 ____A (SurfRight B.V.) C:\Users\Mary\Downloads\HitmanPro36_x64.exe
2012-01-29 22:16 - 2012-01-29 22:15 - 6449984 ____A (SurfRight B.V.) C:\Users\Mary\Downloads\HitmanPro35.exe
2012-01-29 22:12 - 2012-01-29 22:12 - 0316496 ____A (Softonic) C:\Users\Mary\Downloads\SoftonicDownloader_for_kaspersky-tdsskiller.exe
2012-01-29 21:46 - 2011-11-16 01:34 - 0000000 ____D C:\Program Files (x86)\iMesh Applications
2012-01-29 10:22 - 2012-01-29 10:23 - 0750488 ____A (Oracle Corporation) C:\Windows\System32\npdeployJava1.dll
2012-01-29 10:22 - 2011-06-09 18:00 - 0660368 ____A (Oracle Corporation) C:\Windows\System32\deployJava1.dll
2012-01-29 10:21 - 2012-01-29 10:21 - 21449608 ____A (Oracle Corporation) C:\Users\Mary\Downloads\jre-7u2-windows-x64.exe
2012-01-29 08:58 - 2012-01-29 08:57 - 0000000 ____D C:\Users\All Users\Spybot - Search & Destroy
2012-01-29 08:58 - 2012-01-29 08:57 - 0000000 ____D C:\Users\All Users\Application Data\Spybot - Search & Destroy
2012-01-29 08:58 - 2012-01-29 08:57 - 0000000 ____D C:\ProgramData\Spybot - Search & Destroy
2012-01-29 08:58 - 2009-07-13 21:34 - 0436604 ____A C:\Windows\System32\Drivers\etc\hosts
2012-01-29 08:56 - 2011-10-08 11:15 - 0000000 ____D C:\Windows\pss
2012-01-28 21:31 - 2012-01-28 21:31 - 0000000 ____D C:\Users\Mary\Application Data\SUPERAntiSpyware.com
2012-01-28 21:31 - 2012-01-28 21:31 - 0000000 ____D C:\Users\Mary\AppData\Roaming\SUPERAntiSpyware.com
2012-01-28 21:31 - 2012-01-28 21:31 - 0000000 ____D C:\Users\All Users\SUPERAntiSpyware.com
2012-01-28 21:31 - 2012-01-28 21:31 - 0000000 ____D C:\Users\All Users\Application Data\SUPERAntiSpyware.com
2012-01-28 21:31 - 2012-01-28 21:31 - 0000000 ____D C:\ProgramData\SUPERAntiSpyware.com
2012-01-28 16:24 - 2012-01-28 16:24 - 0000000 ____A C:\Windows\setuperr.log
2012-01-28 15:35 - 2012-01-28 15:35 - 10847608 ____A (Malwarebytes Corporation ) C:\Users\Mary\Downloads\mbam-setup-1.60.0.1800.exe
2012-01-28 13:27 - 2011-11-16 18:18 - 0002021 ____A C:\Users\Public\Desktop\Adobe Reader X.lnk
2012-01-28 13:27 - 2011-11-16 18:18 - 0002021 ____A C:\Users\All Users\Desktop\Adobe Reader X.lnk
2012-01-28 13:03 - 2012-01-28 13:03 - 0174200 ____A (Symantec Corporation) C:\Windows\System32\Drivers\SYMEVENT64x86.SYS
2012-01-28 13:03 - 2012-01-28 13:03 - 0007530 ____A C:\Windows\System32\Drivers\SYMEVENT64x86.CAT
2012-01-28 13:03 - 2012-01-28 13:03 - 0000855 ____A C:\Windows\System32\Drivers\SYMEVENT64x86.INF
2012-01-28 13:03 - 2012-01-25 22:20 - 0000000 ____D C:\Program Files\Symantec
2012-01-28 13:03 - 2012-01-25 21:47 - 0000000 ____D C:\Program Files\Common Files\Symantec Shared
2012-01-28 13:02 - 2012-01-28 13:02 - 0288176 ____A (Symantec Corporation) C:\Windows\System32\SymVPN.dll
2012-01-28 13:02 - 2012-01-28 13:02 - 0058288 ____A (Symantec Corporation) C:\Windows\SysWOW64\snacnp.dll
2012-01-28 13:02 - 2012-01-28 13:02 - 0058288 ____A (Symantec Corporation) C:\Windows\System32\snacnp.dll
2012-01-28 13:02 - 2012-01-28 13:02 - 0042632 ____A (Symantec Corporation) C:\Windows\System32\Drivers\WGX64.SYS
2012-01-28 13:01 - 2012-01-28 13:01 - 0512944 ____A (Symantec Corporation) C:\Windows\System32\sysfer.dll
2012-01-28 13:01 - 2012-01-28 13:01 - 0374704 ____A (Symantec Corporation) C:\Windows\SysWOW64\sysfer.dll
2012-01-28 13:01 - 2012-01-28 13:01 - 0118768 ____A (Symantec Corporation) C:\Windows\System32\Drivers\SysPlant.sys
2012-01-28 13:01 - 2012-01-28 13:01 - 0081840 ____A (Symantec Corporation) C:\Windows\System32\FwsVpn.dll
2012-01-28 13:01 - 2012-01-28 13:01 - 0011184 ____A (Symantec Corporation) C:\Windows\System32\sysferThunk.dll
2012-01-28 13:01 - 2012-01-28 13:01 - 0010672 ____A (Symantec Corporation) C:\Windows\SysWOW64\sysferThunk.dll
2012-01-28 13:01 - 2012-01-28 13:01 - 0000000 ____D C:\Windows\System32\Drivers\SEP
2012-01-28 13:01 - 2012-01-28 13:01 - 0000000 ____D C:\Users\All Users\regid.1992_12.com.symantec
2012-01-28 13:01 - 2012-01-28 13:01 - 0000000 ____D C:\Users\All Users\Application Data\regid.1992_12.com.symantec
2012-01-28 13:01 - 2012-01-28 13:01 - 0000000 ____D C:\ProgramData\regid.1992_12.com.symantec
2012-01-28 10:52 - 2011-10-11 17:27 - 0000000 ____D C:\Windows\Intuit
2012-01-28 10:52 - 2011-10-09 10:18 - 0000000 ____D C:\Windows\System32\Macromed
2012-01-28 10:52 - 2011-10-08 12:00 - 0000000 ____D C:\Windows\System32\SPReview
2012-01-28 10:52 - 2011-10-08 11:59 - 0000000 ____D C:\Windows\System32\EventProviders
2012-01-28 10:52 - 2011-06-09 19:38 - 0000000 ____D C:\Windows\System32\SRSLabs
2012-01-28 10:52 - 2011-06-09 19:37 - 0000000 ____D C:\Windows\SysWOW64\RTCOM
2012-01-28 10:52 - 2011-06-09 18:28 - 0000000 ____D C:\Windows\en
2012-01-28 10:52 - 2011-06-09 18:02 - 0000000 ____D C:\Windows\Dell
2012-01-28 10:52 - 2009-07-14 02:45 - 0000000 ____D C:\Windows\ShellNew
2012-01-28 10:52 - 2009-07-14 00:32 - 0000000 ____D C:\Program Files\Windows Sidebar
2012-01-28 10:52 - 2009-07-14 00:32 - 0000000 ____D C:\Program Files (x86)\Windows Sidebar
2012-01-28 10:52 - 2009-07-13 23:45 - 0000000 ____D C:\Windows\Setup
2012-01-28 10:52 - 2009-07-13 22:20 - 0000000 ____D C:\Windows\TAPI
2012-01-28 10:52 - 2009-07-13 22:20 - 0000000 ____D C:\Windows\SysWOW64\Recovery
2012-01-28 10:52 - 2009-07-13 22:20 - 0000000 ____D C:\Windows\System32\sysprep
2012-01-28 10:52 - 2009-07-13 22:20 - 0000000 ____D C:\Windows\System32\Recovery
2012-01-28 10:52 - 2009-07-13 22:20 - 0000000 ____D C:\Windows\System32\oobe
2012-01-28 10:52 - 2009-07-13 22:20 - 0000000 ____D C:\Windows\System32\Msdtc
2012-01-28 10:51 - 2011-11-01 17:36 - 0000000 ____D C:\Users\Mary\My Documents\PDFXVwer
2012-01-28 10:51 - 2011-11-01 17:36 - 0000000 ____D C:\Users\Mary\My Documents\mpc_6490%2B_2kXP_cze[1]
2012-01-28 10:51 - 2011-11-01 17:36 - 0000000 ____D C:\Users\Mary\My Documents\Missy
2012-01-28 10:51 - 2011-11-01 17:36 - 0000000 ____D C:\Users\Mary\My Documents\mergemp3[1]
2012-01-28 10:51 - 2011-11-01 17:36 - 0000000 ____D C:\Users\Mary\Documents\PDFXVwer
2012-01-28 10:51 - 2011-11-01 17:36 - 0000000 ____D C:\Users\Mary\Documents\mpc_6490%2B_2kXP_cze[1]
2012-01-28 10:51 - 2011-11-01 17:36 - 0000000 ____D C:\Users\Mary\Documents\Missy
2012-01-28 10:51 - 2011-11-01 17:36 - 0000000 ____D C:\Users\Mary\Documents\mergemp3[1]
2012-01-28 10:51 - 2011-11-01 17:33 - 0000000 ___RD C:\Users\Mary\Desktop\Desktop Drop
2012-01-28 10:51 - 2011-11-01 17:28 - 0000000 ____D C:\Users\Mary\My Documents\Addresses
2012-01-28 10:51 - 2011-11-01 17:28 - 0000000 ____D C:\Users\Mary\Documents\Addresses
2012-01-28 10:51 - 2011-11-01 17:27 - 0000000 ____D C:\Users\Mary\Downloads\Our American partners come! - AKSKronberg Blog_files
2012-01-28 10:51 - 2011-10-30 23:21 - 0000000 ____D C:\Users\Mary\My Documents\From Old Computer
2012-01-28 10:51 - 2011-10-30 23:21 - 0000000 ____D C:\Users\Mary\Documents\From Old Computer
2012-01-28 10:51 - 2011-10-27 18:34 - 0000000 ____D C:\Users\Mary\Desktop\Restored_PRO CNC INC 2006_Files
2012-01-28 10:51 - 2011-10-22 20:22 - 0000000 ____D C:\Users\All Users\HP Photo Creations
2012-01-28 10:51 - 2011-10-22 20:22 - 0000000 ____D C:\Users\All Users\Application Data\HP Photo Creations
2012-01-28 10:51 - 2011-10-22 20:22 - 0000000 ____D C:\ProgramData\HP Photo Creations
2012-01-28 10:51 - 2011-10-22 20:22 - 0000000 ____D C:\Program Files (x86)\MSN Toolbar
2012-01-28 10:51 - 2011-10-22 20:22 - 0000000 ____D C:\Program Files (x86)\HP Photo Creations
2012-01-28 10:51 - 2011-10-22 20:22 - 0000000 ____D C:\Program Files (x86)\Coupons
2012-01-28 10:51 - 2011-10-22 20:22 - 0000000 ____D C:\Program Files (x86)\Bing Bar Installer
2012-01-28 10:51 - 2011-10-16 18:23 - 0000000 ____D C:\Users\All Users\ArcSoft
2012-01-28 10:51 - 2011-10-16 18:23 - 0000000 ____D C:\Users\All Users\Application Data\ArcSoft
2012-01-28 10:51 - 2011-10-16 18:23 - 0000000 ____D C:\ProgramData\ArcSoft
2012-01-28 10:51 - 2011-10-11 18:20 - 0000000 ____D C:\Users\Mary\Desktop\Restored_plowing_Files
2012-01-28 10:51 - 2011-10-09 16:36 - 0000000 ____D C:\Program Files (x86)\Microsoft Synchronization Services
2012-01-28 10:51 - 2011-10-09 16:34 - 0000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 8
2012-01-28 10:51 - 2011-10-09 16:31 - 0000000 ____D C:\Users\Mary\Application Data\Macrovision
2012-01-28 10:51 - 2011-10-09 16:31 - 0000000 ____D C:\Users\Mary\AppData\Roaming\Macrovision
2012-01-28 10:51 - 2011-10-09 16:31 - 0000000 ____D C:\Program Files\WinRAR
2012-01-28 10:51 - 2011-10-09 16:15 - 0000000 ____D C:\Users\All Users\HP
2012-01-28 10:51 - 2011-10-09 16:15 - 0000000 ____D C:\Users\All Users\Application Data\HP
2012-01-28 10:51 - 2011-10-09 16:15 - 0000000 ____D C:\ProgramData\HP
2012-01-28 10:51 - 2011-10-09 16:15 - 0000000 ____D C:\Program Files (x86)\HP
2012-01-28 10:51 - 2011-10-09 16:12 - 0000000 ____D C:\Users\Mary\Local Settings\HP
2012-01-28 10:51 - 2011-10-09 16:12 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\HP
2012-01-28 10:51 - 2011-10-09 16:12 - 0000000 ____D C:\Users\Mary\AppData\Local\HP
2012-01-28 10:51 - 2011-10-08 10:52 - 0000000 ____D C:\Users\Mary\Application Data\Creative
2012-01-28 10:51 - 2011-10-08 10:52 - 0000000 ____D C:\Users\Mary\AppData\Roaming\Creative
2012-01-28 10:51 - 2011-06-09 20:19 - 0000000 ___RD C:\Users\Default\Desktop\Play Games
2012-01-28 10:51 - 2011-06-09 20:19 - 0000000 ___RD C:\Users\Default User\Desktop\Play Games
2012-01-28 10:51 - 2011-06-09 20:19 - 0000000 ____D C:\Program Files\Dell Games Folder
2012-01-28 10:51 - 2011-06-09 20:02 - 0000000 ____D C:\dell
2012-01-28 10:51 - 2011-06-09 19:37 - 0000000 ____D C:\Program Files\Realtek
2012-01-28 10:51 - 2011-06-09 19:37 - 0000000 ____D C:\Program Files\Common Files\Intel
2012-01-28 10:51 - 2011-06-09 18:38 - 0000000 ____D C:\Program Files (x86)\TrustedID
2012-01-28 10:51 - 2011-06-09 18:38 - 0000000 ____D C:\Program Files (x86)\Jagex
2012-01-28 10:51 - 2011-06-09 18:36 - 0000000 ____D C:\Program Files\Roxio
2012-01-28 10:51 - 2011-06-09 18:20 - 0000000 ____D C:\Program Files (x86)\Creative
2012-01-28 10:51 - 2011-06-09 18:19 - 0000000 ____D C:\Program Files (x86)\Creative Live! Cam
2012-01-28 10:51 - 2011-06-09 18:17 - 0000000 ____D C:\Program Files (x86)\Dell Digital Delivery
2012-01-28 10:51 - 2011-06-09 18:16 - 0000000 ___RD C:\Program Files (x86)\Skype
2012-01-28 10:51 - 2011-06-09 18:16 - 0000000 ____D C:\Users\All Users\Skype
2012-01-28 10:51 - 2011-06-09 18:16 - 0000000 ____D C:\Users\All Users\Application Data\Skype
2012-01-28 10:51 - 2011-06-09 18:16 - 0000000 ____D C:\ProgramData\Skype
2012-01-28 10:51 - 2011-06-09 18:16 - 0000000 ____D C:\Program Files (x86)\Cozi Express
2012-01-28 10:51 - 2011-06-09 18:03 - 0000000 ____D C:\Users\All Users\Intel
2012-01-28 10:51 - 2011-06-09 18:03 - 0000000 ____D C:\Users\All Users\Application Data\Intel
2012-01-28 10:51 - 2011-06-09 18:03 - 0000000 ____D C:\ProgramData\Intel
2012-01-28 10:51 - 2011-06-09 18:02 - 0000000 ____D C:\Program Files\DellTPad
2012-01-28 10:51 - 2009-07-14 00:32 - 0000000 ____D C:\Program Files\Microsoft Games
2012-01-28 10:51 - 2009-07-14 00:32 - 0000000 ____D C:\Program Files (x86)\MSBuild
2012-01-28 10:47 - 2011-06-09 17:59 - 0000000 ____D C:\Windows\SysWOW64\Macromed
2012-01-28 10:47 - 2009-07-14 00:37 - 0000000 ____D C:\Windows\SysWOW64\winrm
2012-01-28 10:47 - 2009-07-14 00:37 - 0000000 ____D C:\Windows\SysWOW64\WCN
2012-01-28 10:47 - 2009-07-14 00:37 - 0000000 ____D C:\Windows\SysWOW64\slmgr
2012-01-28 10:47 - 2009-07-14 00:37 - 0000000 ____D C:\Windows\SysWOW64\Printing_Admin_Scripts
2012-01-28 10:47 - 2009-07-14 00:37 - 0000000 ____D C:\Windows\System32\winrm
2012-01-28 10:47 - 2009-07-14 00:37 - 0000000 ____D C:\Windows\System32\WCN
2012-01-28 10:47 - 2009-07-14 00:32 - 0000000 ____D C:\Windows\SysWOW64\WindowsPowerShell
2012-01-28 10:47 - 2009-07-14 00:32 - 0000000 ____D C:\Windows\System32\WindowsPowerShell
2012-01-28 10:47 - 2009-07-14 00:32 - 0000000 ____D C:\Windows\System32\WinBioPlugIns
2012-01-28 10:47 - 2009-07-13 22:20 - 0000000 ____D C:\Windows\Web
2012-01-28 10:47 - 2009-07-13 22:20 - 0000000 ____D C:\Windows\Vss
2012-01-28 10:47 - 2009-07-13 22:20 - 0000000 ____D C:\Windows\SysWOW64\spp
2012-01-28 10:47 - 2009-07-13 22:20 - 0000000 ____D C:\Windows\SysWOW64\Speech
2012-01-28 10:47 - 2009-07-13 22:20 - 0000000 ____D C:\Windows\SysWOW64\NetworkList
2012-01-28 10:47 - 2009-07-13 22:20 - 0000000 ____D C:\Windows\SysWOW64\MUI
2012-01-28 10:47 - 2009-07-13 22:20 - 0000000 ____D C:\Windows\SysWOW64\Msdtc
2012-01-28 10:47 - 2009-07-13 22:20 - 0000000 ____D C:\Windows\SysWOW64\migwiz
2012-01-28 10:47 - 2009-07-13 22:20 - 0000000 ____D C:\Windows\SysWOW64\InstallShield
2012-01-28 10:47 - 2009-07-13 22:20 - 0000000 ____D C:\Windows\SysWOW64\IME
2012-01-28 10:47 - 2009-07-13 22:20 - 0000000 ____D C:\Windows\SysWOW64\Dism
2012-01-28 10:47 - 2009-07-13 22:20 - 0000000 ____D C:\Windows\SysWOW64\com
2012-01-28 10:46 - 2009-07-14 00:37 - 0000000 ____D C:\Windows\System32\slmgr
2012-01-28 10:46 - 2009-07-14 00:37 - 0000000 ____D C:\Windows\System32\Printing_Admin_Scripts
2012-01-28 10:46 - 2009-07-13 22:20 - 0000000 ____D C:\Windows\System32\spp
2012-01-28 10:46 - 2009-07-13 22:20 - 0000000 ____D C:\Windows\System32\spool
2012-01-28 10:46 - 2009-07-13 22:20 - 0000000 ____D C:\Windows\System32\Speech
2012-01-28 10:46 - 2009-07-13 22:20 - 0000000 ____D C:\Windows\System32\SMI
2012-01-28 10:46 - 2009-07-13 22:20 - 0000000 ____D C:\Windows\System32\NetworkList
2012-01-28 10:46 - 2009-07-13 22:20 - 0000000 ____D C:\Windows\System32\MUI
2012-01-28 10:46 - 2009-07-13 22:20 - 0000000 ____D C:\Windows\System32\migwiz
2012-01-28 10:46 - 2009-07-13 22:20 - 0000000 ____D C:\Windows\System32\IME
2012-01-28 10:45 - 2009-07-13 22:20 - 0000000 ____D C:\Windows\System32\Dism
2012-01-28 10:45 - 2009-07-13 22:20 - 0000000 ____D C:\Windows\System32\com
2012-01-28 10:44 - 2009-07-14 00:32 - 0000000 ____D C:\Windows\Performance
2012-01-28 10:44 - 2009-07-13 23:45 - 0000000 ____D C:\Windows\ServiceProfiles
2012-01-28 10:44 - 2009-07-13 22:20 - 0000000 ____D C:\Windows\Speech
2012-01-28 10:44 - 2009-07-13 22:20 - 0000000 ____D C:\Windows\schemas
2012-01-28 10:44 - 2009-07-13 22:20 - 0000000 ____D C:\Windows\Resources
2012-01-28 10:44 - 2009-07-13 22:20 - 0000000 ____D C:\Windows\PolicyDefinitions
2012-01-28 10:44 - 2009-07-13 22:20 - 0000000 ____D C:\Windows\PLA
2012-01-28 10:36 - 2009-07-13 22:20 - 0000000 ____D C:\Windows\IME
2012-01-28 10:36 - 2009-07-13 22:20 - 0000000 ____D C:\Windows\Help
2012-01-28 10:36 - 2009-07-13 22:20 - 0000000 ____D C:\Windows\Globalization
2012-01-28 10:35 - 2009-07-13 22:20 - 0000000 ____D C:\Windows\Branding
2012-01-28 10:32 - 2011-11-01 17:38 - 0000000 ____D C:\Users\Mary\My Documents\Websites
2012-01-28 10:32 - 2011-11-01 17:38 - 0000000 ____D C:\Users\Mary\Documents\Websites
2012-01-28 10:32 - 2011-11-01 17:36 - 0000000 ____D C:\Users\Mary\My Documents\Quickbooks
2012-01-28 10:32 - 2011-11-01 17:36 - 0000000 ____D C:\Users\Mary\My Documents\J. Anderson Electric
2012-01-28 10:32 - 2011-11-01 17:36 - 0000000 ____D C:\Users\Mary\Documents\Quickbooks
2012-01-28 10:32 - 2011-11-01 17:36 - 0000000 ____D C:\Users\Mary\Documents\J. Anderson Electric
2012-01-28 10:32 - 2009-07-13 22:20 - 0000000 ____D C:\users\Public
2012-01-28 10:31 - 2011-11-01 17:36 - 0000000 ____D C:\Users\Mary\My Documents\DS Specialties
2012-01-28 10:31 - 2011-11-01 17:36 - 0000000 ____D C:\Users\Mary\Documents\DS Specialties
2012-01-28 10:31 - 2011-11-01 17:31 - 0000000 ____D C:\Users\Mary\My Documents\Clients
2012-01-28 10:31 - 2011-11-01 17:31 - 0000000 ____D C:\Users\Mary\My Documents\Carpet Doctor of Minnesota
2012-01-28 10:31 - 2011-11-01 17:31 - 0000000 ____D C:\Users\Mary\Documents\Clients
2012-01-28 10:31 - 2011-11-01 17:31 - 0000000 ____D C:\Users\Mary\Documents\Carpet Doctor of Minnesota
2012-01-28 10:30 - 2011-11-01 17:28 - 0000000 ____D C:\Users\Mary\My Documents\C
2012-01-28 10:30 - 2011-11-01 17:28 - 0000000 ____D C:\Users\Mary\Documents\C
2012-01-28 10:30 - 2011-10-08 10:54 - 0000000 ____D C:\Users\Mary\Application Data\Mozilla
2012-01-28 10:30 - 2011-10-08 10:54 - 0000000 ____D C:\Users\Mary\AppData\Roaming\Mozilla
2012-01-28 10:29 - 2011-10-09 16:31 - 0000000 ____D C:\Users\Mary\Local Settings\Sonic_Solutions
2012-01-28 10:29 - 2011-10-09 16:31 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\Sonic_Solutions
2012-01-28 10:29 - 2011-10-09 16:31 - 0000000 ____D C:\Users\Mary\AppData\Local\Sonic_Solutions
2012-01-28 10:29 - 2011-10-08 11:06 - 0000000 ____D C:\Users\Mary\Local Settings\Mozilla
2012-01-28 10:29 - 2011-10-08 11:06 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\Mozilla
2012-01-28 10:29 - 2011-10-08 11:06 - 0000000 ____D C:\Users\Mary\AppData\Local\Mozilla
2012-01-28 10:29 - 2011-10-08 10:32 - 0000000 ____D C:\Users\Mary\Application Data\Intel
2012-01-28 10:29 - 2011-10-08 10:32 - 0000000 ____D C:\Users\Mary\AppData\Roaming\Intel
2012-01-28 10:29 - 2011-10-08 10:32 - 0000000 ____D C:\Users\Mary\AppData\LocalLow
2012-01-28 10:28 - 2011-10-20 15:39 - 0000000 ____D C:\Users\Mary\Local Settings\Microsoft Games
2012-01-28 10:28 - 2011-10-20 15:39 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\Microsoft Games
2012-01-28 10:28 - 2011-10-20 15:39 - 0000000 ____D C:\Users\Mary\AppData\Local\Microsoft Games
2012-01-28 10:28 - 2011-10-16 16:36 - 0000000 ____D C:\Users\Mary\Local Settings\ArcSoft
2012-01-28 10:28 - 2011-10-16 16:36 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\ArcSoft
2012-01-28 10:28 - 2011-10-16 16:36 - 0000000 ____D C:\Users\Mary\AppData\Local\ArcSoft
2012-01-28 10:28 - 2011-10-11 17:36 - 0000000 ____D C:\Users\Mary\Local Settings\Intuit
2012-01-28 10:28 - 2011-10-11 17:36 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\Intuit
2012-01-28 10:28 - 2011-10-11 17:36 - 0000000 ____D C:\Users\Mary\AppData\Local\Intuit
2012-01-28 10:28 - 2011-10-11 17:34 - 0000000 ____D C:\Users\All Users\Intuit
2012-01-28 10:28 - 2011-10-11 17:34 - 0000000 ____D C:\Users\All Users\Application Data\Intuit
2012-01-28 10:28 - 2011-10-11 17:34 - 0000000 ____D C:\ProgramData\Intuit
2012-01-28 10:28 - 2011-10-09 16:34 - 0000000 ____D C:\Program Files\Microsoft Office
2012-01-28 10:28 - 2011-06-09 18:37 - 0000000 ____D C:\Users\All Users\Uninstall
2012-01-28 10:28 - 2011-06-09 18:37 - 0000000 ____D C:\Users\All Users\Application Data\Uninstall
2012-01-28 10:28 - 2011-06-09 18:37 - 0000000 ____D C:\ProgramData\Uninstall
2012-01-28 10:28 - 2011-06-09 18:33 - 0000000 ____D C:\Users\All Users\Macrovision
2012-01-28 10:28 - 2011-06-09 18:33 - 0000000 ____D C:\Users\All Users\Application Data\Macrovision
2012-01-28 10:28 - 2011-06-09 18:33 - 0000000 ____D C:\ProgramData\Macrovision
2012-01-28 10:28 - 2011-06-09 18:29 - 0000000 ____D C:\Users\All Users\McAfee
2012-01-28 10:28 - 2011-06-09 18:29 - 0000000 ____D C:\Users\All Users\Application Data\McAfee
2012-01-28 10:28 - 2011-06-09 18:29 - 0000000 ____D C:\ProgramData\McAfee
2012-01-28 10:28 - 2011-06-09 18:09 - 0000000 ____D C:\Users\All Users\Dell
2012-01-28 10:28 - 2011-06-09 18:09 - 0000000 ____D C:\Users\All Users\Application Data\Dell
2012-01-28 10:28 - 2011-06-09 18:09 - 0000000 ____D C:\ProgramData\Dell
2012-01-28 10:28 - 2009-07-14 02:45 - 0000000 ____D C:\Program Files\Windows Journal
2012-01-28 10:28 - 2009-07-14 00:32 - 0000000 ____D C:\Program Files\Windows Photo Viewer
2012-01-28 10:28 - 2009-07-14 00:32 - 0000000 ____D C:\Program Files\Windows Defender
2012-01-28 10:28 - 2009-07-14 00:32 - 0000000 ____D C:\Program Files\Reference Assemblies
2012-01-28 10:28 - 2009-07-14 00:32 - 0000000 ____D C:\Program Files\MSBuild
2012-01-28 10:28 - 2009-07-13 22:20 - 0000000 ____D C:\users\Default
2012-01-28 10:28 - 2009-07-13 22:20 - 0000000 ____D C:\Program Files\Windows NT
2012-01-28 10:27 - 2011-06-09 18:03 - 0000000 ____D C:\Program Files\Intel
2012-01-28 10:26 - 2011-10-09 16:14 - 0000000 ____D C:\Program Files\HP
2012-01-28 10:26 - 2011-06-09 18:09 - 0000000 ____D C:\Program Files\Dell
2012-01-28 10:26 - 2011-06-09 17:59 - 0000000 ____D C:\Program Files\Dell Inc
2012-01-28 10:26 - 2009-07-14 00:32 - 0000000 ____D C:\Program Files\DVD Maker
2012-01-28 10:26 - 2009-07-14 00:32 - 0000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2012-01-28 10:26 - 2009-07-14 00:32 - 0000000 ____D C:\Program Files (x86)\Windows Defender
2012-01-28 10:26 - 2009-07-13 22:20 - 0000000 ____D C:\Program Files\Common Files\System
2012-01-28 10:26 - 2009-07-13 22:20 - 0000000 ____D C:\Program Files\Common Files\SpeechEngines
2012-01-28 10:26 - 2009-07-13 22:20 - 0000000 ____D C:\Program Files (x86)\Windows NT
2012-01-28 10:24 - 2011-11-26 00:19 - 0000000 ____D C:\Program Files (x86)\NCH Software
2012-01-28 10:24 - 2011-10-09 16:36 - 0000000 ____D C:\Program Files (x86)\Microsoft Sync Framework
2012-01-28 10:24 - 2011-06-09 18:33 - 0000000 ____D C:\Program Files (x86)\Roxio
2012-01-28 10:24 - 2011-06-09 18:27 - 0000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2012-01-28 10:24 - 2009-07-14 00:32 - 0000000 ____D C:\Program Files (x86)\Reference Assemblies
2012-01-28 10:22 - 2011-10-09 16:34 - 0000000 ____D C:\Program Files (x86)\Microsoft Analysis Services
2012-01-28 10:22 - 2011-10-09 16:33 - 0000000 ____D C:\Program Files (x86)\Microsoft Office
2012-01-28 10:21 - 2011-10-11 17:34 - 0000000 ____D C:\Program Files (x86)\Intuit
2012-01-28 10:21 - 2011-06-09 19:37 - 0000000 ____D C:\Program Files (x86)\Intel
2012-01-28 10:21 - 2011-06-09 18:08 - 0000000 ____D C:\Program Files (x86)\Intel Corporation
2012-01-28 10:20 - 2011-10-09 16:17 - 0000000 ____D C:\Program Files (x86)\Hewlett-Packard
2012-01-28 10:20 - 2011-06-09 18:18 - 0000000 ____D C:\Program Files (x86)\Dell
2012-01-28 10:19 - 2011-06-09 18:19 - 0000000 ____D C:\Program Files (x86)\Dell Webcam
2012-01-28 10:19 - 2011-06-09 18:19 - 0000000 ____D C:\Program Files (x86)\Dell Stage
2012-01-28 10:17 - 2011-06-09 18:03 - 0000000 ____D C:\Program Files (x86)\Cisco
2012-01-28 10:16 - 2011-10-09 16:33 - 0000000 ___RD C:\MSOCache
2012-01-25 23:19 - 2009-07-14 02:44 - 0000000 ___RD C:\Users\Public\Recorded TV
2012-01-25 21:50 - 2012-01-25 21:50 - 0000000 ____D C:\Users\Mary\Local Settings\Symantec
2012-01-25 21:50 - 2012-01-25 21:50 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\Symantec
2012-01-25 21:50 - 2012-01-25 21:50 - 0000000 ____D C:\Users\Mary\AppData\Local\Symantec
2012-01-25 21:48 - 2012-01-25 21:47 - 0000000 ____D C:\Users\All Users\Symantec
2012-01-25 21:48 - 2012-01-25 21:47 - 0000000 ____D C:\Users\All Users\Application Data\Symantec
2012-01-25 21:48 - 2012-01-25 21:47 - 0000000 ____D C:\ProgramData\Symantec
2012-01-25 21:48 - 2012-01-25 21:47 - 0000000 ____D C:\Program Files (x86)\Symantec
2012-01-25 20:33 - 2012-01-25 20:33 - 0000000 ____D C:\Users\Mary\Application Data\Malwarebytes
2012-01-25 20:33 - 2012-01-25 20:33 - 0000000 ____D C:\Users\Mary\AppData\Roaming\Malwarebytes
2012-01-25 20:33 - 2012-01-25 20:33 - 0000000 ____D C:\Users\All Users\Malwarebytes
2012-01-25 20:33 - 2012-01-25 20:33 - 0000000 ____D C:\Users\All Users\Application Data\Malwarebytes
2012-01-25 20:33 - 2012-01-25 20:33 - 0000000 ____D C:\ProgramData\Malwarebytes
2012-01-25 11:38 - 2012-01-25 11:38 - 0000336 ____A C:\Users\All Users\tdTMgjzzDDONeB
2012-01-25 11:38 - 2012-01-25 11:38 - 0000336 ____A C:\Users\All Users\Application Data\tdTMgjzzDDONeB
2012-01-25 11:38 - 2012-01-25 11:38 - 0000336 ____A C:\ProgramData\tdTMgjzzDDONeB
2012-01-25 11:38 - 2012-01-25 11:38 - 0000296 ____A C:\Users\All Users\Application Data\~tdTMgjzzDDONeB
2012-01-25 11:38 - 2012-01-25 11:38 - 0000296 ____A C:\Users\All Users\~tdTMgjzzDDONeB
2012-01-25 11:38 - 2012-01-25 11:38 - 0000296 ____A C:\ProgramData\~tdTMgjzzDDONeB
2012-01-25 11:38 - 2012-01-25 11:38 - 0000184 ____A C:\Users\All Users\Application Data\~tdTMgjzzDDONeBr
2012-01-25 11:38 - 2012-01-25 11:38 - 0000184 ____A C:\Users\All Users\~tdTMgjzzDDONeBr
2012-01-25 11:38 - 2012-01-25 11:38 - 0000184 ____A C:\ProgramData\~tdTMgjzzDDONeBr
2012-01-25 11:30 - 2012-01-25 11:30 - 0000000 ____D C:\Windows\system64
2012-01-24 15:08 - 2012-01-24 15:08 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{00A67639-28F7-448B-9C6F-EE080D182B62}
2012-01-24 15:08 - 2012-01-24 15:08 - 0000000 ____D C:\Users\Mary\Local Settings\{00A67639-28F7-448B-9C6F-EE080D182B62}
2012-01-24 15:08 - 2012-01-24 15:08 - 0000000 ____D C:\Users\Mary\AppData\Local\{00A67639-28F7-448B-9C6F-EE080D182B62}
2012-01-24 11:07 - 2012-01-24 11:07 - 0007229 ____A C:\Users\Mary\Downloads\image001(1).jpg
2012-01-22 12:52 - 2012-01-22 12:52 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{E674603A-3842-44E3-A384-65A431F256D4}
2012-01-22 12:52 - 2012-01-22 12:52 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{9D6535A3-B5DF-45DD-AFC8-16AC61FDC4FC}
2012-01-22 12:52 - 2012-01-22 12:52 - 0000000 ____D C:\Users\Mary\Local Settings\{E674603A-3842-44E3-A384-65A431F256D4}
2012-01-22 12:52 - 2012-01-22 12:52 - 0000000 ____D C:\Users\Mary\Local Settings\{9D6535A3-B5DF-45DD-AFC8-16AC61FDC4FC}
2012-01-22 12:52 - 2012-01-22 12:52 - 0000000 ____D C:\Users\Mary\AppData\Local\{E674603A-3842-44E3-A384-65A431F256D4}
2012-01-22 12:52 - 2012-01-22 12:52 - 0000000 ____D C:\Users\Mary\AppData\Local\{9D6535A3-B5DF-45DD-AFC8-16AC61FDC4FC}
2012-01-22 12:50 - 2012-01-22 12:50 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{755F72EF-EE1E-423A-A5EE-145008BBB5E4}
2012-01-22 12:50 - 2012-01-22 12:50 - 0000000 ____D C:\Users\Mary\Local Settings\{755F72EF-EE1E-423A-A5EE-145008BBB5E4}
2012-01-22 12:50 - 2012-01-22 12:50 - 0000000 ____D C:\Users\Mary\AppData\Local\{755F72EF-EE1E-423A-A5EE-145008BBB5E4}
2012-01-22 12:50 - 2012-01-22 12:49 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{6ECFE3A3-F0CB-4E13-9B30-E08C4A2E3F2B}
2012-01-22 12:50 - 2012-01-22 12:49 - 0000000 ____D C:\Users\Mary\Local Settings\{6ECFE3A3-F0CB-4E13-9B30-E08C4A2E3F2B}
2012-01-22 12:50 - 2012-01-22 12:49 - 0000000 ____D C:\Users\Mary\AppData\Local\{6ECFE3A3-F0CB-4E13-9B30-E08C4A2E3F2B}
2012-01-22 12:50 - 2011-10-12 19:24 - 0000000 ____D C:\Users\Mary\Desktop\carpet doctor
2012-01-22 12:49 - 2012-01-22 12:49 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{EDECE301-BEFB-4444-A557-44D13C25A7FD}
2012-01-22 12:49 - 2012-01-22 12:49 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{E656FE42-4AD9-418C-BD52-CF40AE54CCCC}
2012-01-22 12:49 - 2012-01-22 12:49 - 0000000 ____D C:\Users\Mary\Local Settings\{EDECE301-BEFB-4444-A557-44D13C25A7FD}
2012-01-22 12:49 - 2012-01-22 12:49 - 0000000 ____D C:\Users\Mary\Local Settings\{E656FE42-4AD9-418C-BD52-CF40AE54CCCC}
2012-01-22 12:49 - 2012-01-22 12:49 - 0000000 ____D C:\Users\Mary\AppData\Local\{EDECE301-BEFB-4444-A557-44D13C25A7FD}
2012-01-22 12:49 - 2012-01-22 12:49 - 0000000 ____D C:\Users\Mary\AppData\Local\{E656FE42-4AD9-418C-BD52-CF40AE54CCCC}
2012-01-22 12:48 - 2012-01-22 12:48 - 0158879 ____A C:\Users\Mary\Downloads\328874_10150511712783391_638123390_9130855_1927570118_o.jpg
2012-01-21 16:58 - 2012-01-21 16:58 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{60FE3BAB-C11C-4C4E-880D-DEFBA7FBBED3}
2012-01-21 16:58 - 2012-01-21 16:58 - 0000000 ____D C:\Users\Mary\Local Settings\{60FE3BAB-C11C-4C4E-880D-DEFBA7FBBED3}
2012-01-21 16:58 - 2012-01-21 16:58 - 0000000 ____D C:\Users\Mary\AppData\Local\{60FE3BAB-C11C-4C4E-880D-DEFBA7FBBED3}
2012-01-21 16:58 - 2012-01-21 16:57 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{C4334738-D7F0-4E53-B5A7-A534004A5CE1}
2012-01-21 16:58 - 2012-01-21 16:57 - 0000000 ____D C:\Users\Mary\Local Settings\{C4334738-D7F0-4E53-B5A7-A534004A5CE1}
2012-01-21 16:58 - 2012-01-21 16:57 - 0000000 ____D C:\Users\Mary\AppData\Local\{C4334738-D7F0-4E53-B5A7-A534004A5CE1}
2012-01-21 16:13 - 2012-01-21 16:13 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{E49B7D7E-F049-4976-9EAA-A1C0BD9021AC}
2012-01-21 16:13 - 2012-01-21 16:13 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{DE21AE95-03DA-44DF-AA57-83E757951909}
2012-01-21 16:13 - 2012-01-21 16:13 - 0000000 ____D C:\Users\Mary\Local Settings\{E49B7D7E-F049-4976-9EAA-A1C0BD9021AC}
2012-01-21 16:13 - 2012-01-21 16:13 - 0000000 ____D C:\Users\Mary\Local Settings\{DE21AE95-03DA-44DF-AA57-83E757951909}
2012-01-21 16:13 - 2012-01-21 16:13 - 0000000 ____D C:\Users\Mary\AppData\Local\{E49B7D7E-F049-4976-9EAA-A1C0BD9021AC}
2012-01-21 16:13 - 2012-01-21 16:13 - 0000000 ____D C:\Users\Mary\AppData\Local\{DE21AE95-03DA-44DF-AA57-83E757951909}
2012-01-21 16:09 - 2012-01-21 16:08 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{FEC39B2F-C98D-4977-A23C-22C4FCFADE2C}
2012-01-21 16:09 - 2012-01-21 16:08 - 0000000 ____D C:\Users\Mary\Local Settings\{FEC39B2F-C98D-4977-A23C-22C4FCFADE2C}
2012-01-21 16:09 - 2012-01-21 16:08 - 0000000 ____D C:\Users\Mary\AppData\Local\{FEC39B2F-C98D-4977-A23C-22C4FCFADE2C}
2012-01-21 16:08 - 2012-01-21 16:08 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{7ED0B25A-3CB1-4C07-A336-8C36C0604FF9}
2012-01-21 16:08 - 2012-01-21 16:08 - 0000000 ____D C:\Users\Mary\Local Settings\{7ED0B25A-3CB1-4C07-A336-8C36C0604FF9}
2012-01-21 16:08 - 2012-01-21 16:08 - 0000000 ____D C:\Users\Mary\AppData\Local\{7ED0B25A-3CB1-4C07-A336-8C36C0604FF9}
2012-01-21 11:31 - 2012-01-21 11:31 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{7F872AFE-9592-4F9E-8E96-1581EE8BF8FC}
2012-01-21 11:31 - 2012-01-21 11:31 - 0000000 ____D C:\Users\Mary\Local Settings\{7F872AFE-9592-4F9E-8E96-1581EE8BF8FC}
2012-01-21 11:31 - 2012-01-21 11:31 - 0000000 ____D C:\Users\Mary\AppData\Local\{7F872AFE-9592-4F9E-8E96-1581EE8BF8FC}
2012-01-21 11:31 - 2012-01-21 11:30 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{A4EBDE41-8EB2-418C-89FD-0B330BCB85FF}
2012-01-21 11:31 - 2012-01-21 11:30 - 0000000 ____D C:\Users\Mary\Local Settings\{A4EBDE41-8EB2-418C-89FD-0B330BCB85FF}
2012-01-21 11:31 - 2012-01-21 11:30 - 0000000 ____D C:\Users\Mary\AppData\Local\{A4EBDE41-8EB2-418C-89FD-0B330BCB85FF}
2012-01-21 10:40 - 2012-01-21 10:38 - 0091358 ____A C:\Users\Mary\Downloads\415793_3070217003315_1500308158_2975190_712555504_o.jpg
2012-01-21 10:17 - 2012-01-21 10:16 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{AB6D47C7-B3F6-480F-9FC3-C9DFAD41D67E}
2012-01-21 10:17 - 2012-01-21 10:16 - 0000000 ____D C:\Users\Mary\Local Settings\{AB6D47C7-B3F6-480F-9FC3-C9DFAD41D67E}
2012-01-21 10:17 - 2012-01-21 10:16 - 0000000 ____D C:\Users\Mary\AppData\Local\{AB6D47C7-B3F6-480F-9FC3-C9DFAD41D67E}
2012-01-21 10:16 - 2012-01-21 10:16 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{3FE14D9A-57CC-4A47-A19A-5A4C1F33EB9F}
2012-01-21 10:16 - 2012-01-21 10:16 - 0000000 ____D C:\Users\Mary\Local Settings\{3FE14D9A-57CC-4A47-A19A-5A4C1F33EB9F}
2012-01-21 10:16 - 2012-01-21 10:16 - 0000000 ____D C:\Users\Mary\AppData\Local\{3FE14D9A-57CC-4A47-A19A-5A4C1F33EB9F}
2012-01-19 22:51 - 2012-01-19 22:51 - 0000000 ____D C:\Users\Mary\Application Data\PeerNetworking
2012-01-19 22:51 - 2012-01-19 22:51 - 0000000 ____D C:\Users\Mary\AppData\Roaming\PeerNetworking
2012-01-19 20:47 - 2012-01-19 20:47 - 0013510 ____A C:\Users\Mary\Desktop\Dave judgment settlement letter AmSan.docx
2012-01-19 20:47 - 2012-01-19 20:47 - 0000162 ____A C:\Users\Mary\Desktop\~$ve judgment settlement letter AmSan.docx
2012-01-13 23:06 - 2012-02-15 22:32 - 3145728 ____A (Microsoft Corporation) C:\Windows\System32\win32k.sys
2012-01-10 14:05 - 2011-10-11 17:33 - 0000090 ____A C:\Windows\QBChanUtil_Trigger.ini
2012-01-08 22:59 - 2012-01-08 22:59 - 0041944 ____A C:\Users\Mary\Downloads\377489_10150478494808391_638123390_9012275_1131752156_n.jpg
2012-01-08 22:58 - 2012-01-08 22:58 - 0054545 ____A C:\Users\Mary\Downloads\389816_10150478494688391_638123390_9012273_818663731_n.jpg
2012-01-08 22:57 - 2012-01-08 22:57 - 0036560 ____A C:\Users\Mary\Downloads\406860_10150478494503391_638123390_9012269_349934780_n.jpg
2012-01-08 22:56 - 2012-01-08 22:56 - 0030006 ____A C:\Users\Mary\Downloads\391144_10150478494448391_638123390_9012268_1402673036_n.jpg
2012-01-08 22:55 - 2012-01-08 22:55 - 0031239 ____A C:\Users\Mary\Downloads\390613_10150478494383391_638123390_9012267_1023138135_n.jpg
2012-01-08 21:56 - 2012-01-08 21:55 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{2E559FB8-6502-4745-A087-B1D9680C6946}
2012-01-08 21:56 - 2012-01-08 21:55 - 0000000 ____D C:\Users\Mary\Local Settings\{2E559FB8-6502-4745-A087-B1D9680C6946}
2012-01-08 21:56 - 2012-01-08 21:55 - 0000000 ____D C:\Users\Mary\AppData\Local\{2E559FB8-6502-4745-A087-B1D9680C6946}
2012-01-08 21:55 - 2012-01-08 21:55 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{924B44B7-E7AA-446D-902D-F4B15388F54E}
2012-01-08 21:55 - 2012-01-08 21:55 - 0000000 ____D C:\Users\Mary\Local Settings\{924B44B7-E7AA-446D-902D-F4B15388F54E}
2012-01-08 21:55 - 2012-01-08 21:55 - 0000000 ____D C:\Users\Mary\AppData\Local\{924B44B7-E7AA-446D-902D-F4B15388F54E}
2012-01-08 14:47 - 2012-01-08 14:47 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{6937E2D2-F7A9-4FBF-B572-1D3CC99D2656}
2012-01-08 14:47 - 2012-01-08 14:47 - 0000000 ____D C:\Users\Mary\Local Settings\{6937E2D2-F7A9-4FBF-B572-1D3CC99D2656}
2012-01-08 14:47 - 2012-01-08 14:47 - 0000000 ____D C:\Users\Mary\AppData\Local\{6937E2D2-F7A9-4FBF-B572-1D3CC99D2656}
2012-01-08 14:47 - 2012-01-08 14:46 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{1409CE96-E874-48CB-92AB-8B5C3C8C2787}
2012-01-08 14:47 - 2012-01-08 14:46 - 0000000 ____D C:\Users\Mary\Local Settings\{1409CE96-E874-48CB-92AB-8B5C3C8C2787}
2012-01-08 14:47 - 2012-01-08 14:46 - 0000000 ____D C:\Users\Mary\AppData\Local\{1409CE96-E874-48CB-92AB-8B5C3C8C2787}
2012-01-08 14:45 - 2012-01-08 14:44 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{C23A9A6D-888A-428D-945F-C8B05BB7AC6A}
2012-01-08 14:45 - 2012-01-08 14:44 - 0000000 ____D C:\Users\Mary\Local Settings\{C23A9A6D-888A-428D-945F-C8B05BB7AC6A}
2012-01-08 14:45 - 2012-01-08 14:44 - 0000000 ____D C:\Users\Mary\AppData\Local\{C23A9A6D-888A-428D-945F-C8B05BB7AC6A}
2012-01-08 14:44 - 2012-01-08 14:44 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{AD60F6CD-0C6A-4E70-98FF-FA9346560744}
2012-01-08 14:44 - 2012-01-08 14:44 - 0000000 ____D C:\Users\Mary\Local Settings\{AD60F6CD-0C6A-4E70-98FF-FA9346560744}
2012-01-08 14:44 - 2012-01-08 14:44 - 0000000 ____D C:\Users\Mary\AppData\Local\{AD60F6CD-0C6A-4E70-98FF-FA9346560744}
2012-01-06 00:59 - 2012-01-06 00:59 - 0000000 ____D C:\Users\All Users\Application Data\1A1A
2012-01-06 00:59 - 2012-01-06 00:59 - 0000000 ____D C:\Users\All Users\1A1A
2012-01-06 00:59 - 2012-01-06 00:59 - 0000000 ____D C:\ProgramData\1A1A
2012-01-06 00:59 - 2011-11-16 01:37 - 0013312 ____A C:\Users\Mary\Local Settings\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2012-01-06 00:59 - 2011-11-16 01:37 - 0013312 ____A C:\Users\Mary\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2012-01-06 00:59 - 2011-11-16 01:37 - 0013312 ____A C:\Users\Mary\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2012-01-05 22:06 - 2012-01-05 22:06 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{A31021E5-E79F-4854-9540-A9E4E0F2B70F}
2012-01-05 22:06 - 2012-01-05 22:06 - 0000000 ____D C:\Users\Mary\Local Settings\{A31021E5-E79F-4854-9540-A9E4E0F2B70F}
2012-01-05 22:06 - 2012-01-05 22:06 - 0000000 ____D C:\Users\Mary\AppData\Local\{A31021E5-E79F-4854-9540-A9E4E0F2B70F}
2012-01-05 22:05 - 2012-01-05 22:05 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{C38E5155-8F8E-4809-8FDC-0D449FAD741E}
2012-01-05 22:05 - 2012-01-05 22:05 - 0000000 ____D C:\Users\Mary\Local Settings\{C38E5155-8F8E-4809-8FDC-0D449FAD741E}
2012-01-05 22:05 - 2012-01-05 22:05 - 0000000 ____D C:\Users\Mary\AppData\Local\{C38E5155-8F8E-4809-8FDC-0D449FAD741E}
2012-01-04 05:44 - 2012-02-15 22:32 - 14172672 ____A (Microsoft Corporation) C:\Windows\System32\shell32.dll
2012-01-04 05:44 - 2012-02-15 22:32 - 0509952 ____A (Microsoft Corporation) C:\Windows\System32\ntshrui.dll
2012-01-04 03:59 - 2012-02-15 22:32 - 12872704 ____A (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2012-01-04 03:58 - 2012-02-15 22:32 - 0442880 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ntshrui.dll
2011-12-31 17:46 - 2011-12-31 17:46 - 1412634 ____A C:\Users\Mary\Desktop\branson_vacation_guide.pdf
2011-12-30 01:26 - 2012-02-15 22:32 - 0515584 ____A (Microsoft Corporation) C:\Windows\System32\timedate.cpl
2011-12-30 00:27 - 2012-02-15 22:32 - 0478720 ____A (Microsoft Corporation) C:\Windows\SysWOW64\timedate.cpl
2011-12-28 19:42 - 2011-12-28 19:41 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{A09A7DBD-C49B-40C7-A369-51A25D1AD08E}
2011-12-28 19:42 - 2011-12-28 19:41 - 0000000 ____D C:\Users\Mary\Local Settings\{A09A7DBD-C49B-40C7-A369-51A25D1AD08E}
2011-12-28 19:42 - 2011-12-28 19:41 - 0000000 ____D C:\Users\Mary\AppData\Local\{A09A7DBD-C49B-40C7-A369-51A25D1AD08E}
2011-12-28 19:41 - 2011-12-28 19:41 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{10FF19DF-DB2B-4BDC-AD1A-063E8BECF7C0}
2011-12-28 19:41 - 2011-12-28 19:41 - 0000000 ____D C:\Users\Mary\Local Settings\{10FF19DF-DB2B-4BDC-AD1A-063E8BECF7C0}
2011-12-28 19:41 - 2011-12-28 19:41 - 0000000 ____D C:\Users\Mary\AppData\Local\{10FF19DF-DB2B-4BDC-AD1A-063E8BECF7C0}
2011-12-28 11:51 - 2011-12-28 11:51 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{FBF51993-B137-4088-9BF9-53C55A37B006}
2011-12-28 11:51 - 2011-12-28 11:51 - 0000000 ____D C:\Users\Mary\Local Settings\{FBF51993-B137-4088-9BF9-53C55A37B006}
2011-12-28 11:51 - 2011-12-28 11:51 - 0000000 ____D C:\Users\Mary\AppData\Local\{FBF51993-B137-4088-9BF9-53C55A37B006}
2011-12-28 11:51 - 2011-12-28 11:50 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{379746BC-9EDA-49B2-9FF2-B241C8912AE0}
2011-12-28 11:51 - 2011-12-28 11:50 - 0000000 ____D C:\Users\Mary\Local Settings\{379746BC-9EDA-49B2-9FF2-B241C8912AE0}
2011-12-28 11:51 - 2011-12-28 11:50 - 0000000 ____D C:\Users\Mary\AppData\Local\{379746BC-9EDA-49B2-9FF2-B241C8912AE0}
2011-12-27 22:59 - 2012-02-15 22:32 - 0498688 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\afd.sys
2011-12-27 13:48 - 2011-12-27 13:48 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{561F9368-8922-4B87-91DC-56A1CCB60949}
2011-12-27 13:48 - 2011-12-27 13:48 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{138162BD-0E16-41C9-9BF4-E2CC40BA870F}
2011-12-27 13:48 - 2011-12-27 13:48 - 0000000 ____D C:\Users\Mary\Local Settings\{561F9368-8922-4B87-91DC-56A1CCB60949}
2011-12-27 13:48 - 2011-12-27 13:48 - 0000000 ____D C:\Users\Mary\Local Settings\{138162BD-0E16-41C9-9BF4-E2CC40BA870F}
2011-12-27 13:48 - 2011-12-27 13:48 - 0000000 ____D C:\Users\Mary\AppData\Local\{561F9368-8922-4B87-91DC-56A1CCB60949}
2011-12-27 13:48 - 2011-12-27 13:48 - 0000000 ____D C:\Users\Mary\AppData\Local\{138162BD-0E16-41C9-9BF4-E2CC40BA870F}
2011-12-26 23:54 - 2011-12-26 23:54 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{B7B1D275-1B8B-40B6-BAAC-8290CB9786E4}
2011-12-26 23:54 - 2011-12-26 23:54 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{96289E06-F46C-4D72-B13D-2532CC98BC65}
2011-12-26 23:54 - 2011-12-26 23:54 - 0000000 ____D C:\Users\Mary\Local Settings\{B7B1D275-1B8B-40B6-BAAC-8290CB9786E4}
2011-12-26 23:54 - 2011-12-26 23:54 - 0000000 ____D C:\Users\Mary\Local Settings\{96289E06-F46C-4D72-B13D-2532CC98BC65}
2011-12-26 23:54 - 2011-12-26 23:54 - 0000000 ____D C:\Users\Mary\AppData\Local\{B7B1D275-1B8B-40B6-BAAC-8290CB9786E4}
2011-12-26 23:54 - 2011-12-26 23:54 - 0000000 ____D C:\Users\Mary\AppData\Local\{96289E06-F46C-4D72-B13D-2532CC98BC65}
2011-12-26 15:43 - 2011-12-26 15:42 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{73D8BDD7-3391-45DC-B7AB-01A9989E593D}
2011-12-26 15:43 - 2011-12-26 15:42 - 0000000 ____D C:\Users\Mary\Local Settings\{73D8BDD7-3391-45DC-B7AB-01A9989E593D}
2011-12-26 15:43 - 2011-12-26 15:42 - 0000000 ____D C:\Users\Mary\AppData\Local\{73D8BDD7-3391-45DC-B7AB-01A9989E593D}
2011-12-26 15:42 - 2011-12-26 15:42 - 0123601 ____A C:\Users\Mary\Downloads\385509_2885341501543_1500308158_2895226_1279814499_n.jpg
2011-12-26 15:42 - 2011-12-26 15:42 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{ACA2973A-28BC-4DBD-8449-EA02F420B49A}
2011-12-26 15:42 - 2011-12-26 15:42 - 0000000 ____D C:\Users\Mary\Local Settings\{ACA2973A-28BC-4DBD-8449-EA02F420B49A}
2011-12-26 15:42 - 2011-12-26 15:42 - 0000000 ____D C:\Users\Mary\AppData\Local\{ACA2973A-28BC-4DBD-8449-EA02F420B49A}
2011-12-26 12:55 - 2011-12-26 12:55 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{7F51760D-8FD9-47A4-A0A0-FD88B150ACA2}
2011-12-26 12:55 - 2011-12-26 12:55 - 0000000 ____D C:\Users\Mary\Local Settings\{7F51760D-8FD9-47A4-A0A0-FD88B150ACA2}
2011-12-26 12:55 - 2011-12-26 12:55 - 0000000 ____D C:\Users\Mary\AppData\Local\{7F51760D-8FD9-47A4-A0A0-FD88B150ACA2}
2011-12-26 12:55 - 2011-12-26 12:54 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{BADE5099-F0D5-484C-9F6A-CF147F4171E9}
2011-12-26 12:55 - 2011-12-26 12:54 - 0000000 ____D C:\Users\Mary\Local Settings\{BADE5099-F0D5-484C-9F6A-CF147F4171E9}
2011-12-26 12:55 - 2011-12-26 12:54 - 0000000 ____D C:\Users\Mary\AppData\Local\{BADE5099-F0D5-484C-9F6A-CF147F4171E9}
2011-12-26 10:28 - 2011-12-26 10:28 - 0000000 ____A C:\Users\Mary\My Documents\Default.rdp
2011-12-26 10:28 - 2011-12-26 10:28 - 0000000 ____A C:\Users\Mary\Documents\Default.rdp
2011-12-26 00:24 - 2011-12-26 00:24 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{29DF625F-4A61-4097-87AA-FCC986E44BAA}
2011-12-26 00:24 - 2011-12-26 00:24 - 0000000 ____D C:\Users\Mary\Local Settings\{29DF625F-4A61-4097-87AA-FCC986E44BAA}
2011-12-26 00:24 - 2011-12-26 00:24 - 0000000 ____D C:\Users\Mary\AppData\Local\{29DF625F-4A61-4097-87AA-FCC986E44BAA}
2011-12-26 00:24 - 2011-12-26 00:23 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{00137189-3231-4F65-A454-F38FAFB77686}
2011-12-26 00:24 - 2011-12-26 00:23 - 0000000 ____D C:\Users\Mary\Local Settings\{00137189-3231-4F65-A454-F38FAFB77686}
2011-12-26 00:24 - 2011-12-26 00:23 - 0000000 ____D C:\Users\Mary\AppData\Local\{00137189-3231-4F65-A454-F38FAFB77686}
2011-12-23 15:43 - 2011-12-23 15:43 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{CF8AB488-226C-4224-AD1C-D2E0773C64F9}
2011-12-23 15:43 - 2011-12-23 15:43 - 0000000 ____D C:\Users\Mary\Local Settings\Application Data\{41EC162D-C653-4071-ACE1-03AC33049CB0}
2011-12-23 15:43 - 2011-12-23 15:43 - 0000000 ____D C:\Users\Mary\Local Settings\{CF8AB488-226C-4224-AD1C-D2E0773C64F9}
2011-12-23 15:43 - 2011-12-23 15:43 - 0000000 ____D C:\Users\Mary\Local Settings\{41EC162D-C653-4071-ACE1-03AC33049CB0}
2011-12-23 15:43 - 2011-12-23 15:43 - 0000000 ____D C:\Users\Mary\AppData\Local\{CF8AB488-226C-4224-AD1C-D2E0773C64F9}
2011-12-23 15:43 - 2011-12-23 15:43 - 0000000 ____D C:\Users\Mary\AppData\Local\{41EC162D-C653-4071-ACE1-03AC33049CB0}
2011-12-23 15:03 - 2011-12-23 15:03 - 0256958 ____A C:\Users\Mary\Downloads\christmas_pic(1).jpg
2011-12-23 13:28 - 2011-12-23 13:28 - 0256958 ____A C:\Users\Mary\Downloads\christmas_pic.jpg


========================= Known DLLs (Whitelisted) ============


========================= Bamital & volsnap Check ============

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

========================= Memory info ======================

Percentage of memory in use: 15%
Total physical RAM: 4010.17 MB
Available physical RAM: 3379.22 MB
Total Pagefile: 4008.32 MB
Available Pagefile: 3366.78 MB
Total Virtual: 8192 MB
Available Virtual: 8191.9 MB

======================= Partitions =========================

1 Drive c: (OS) (Fixed) (Total:451.01 GB) (Free:333.5 GB) NTFS
2 Drive d: (RECOVERY) (Fixed) (Total:14.65 GB) (Free:7.54 GB) NTFS ==>[System with boot components (obtained from reading drive)]
5 Drive g: () (Removable) (Total:7.45 GB) (Free:4.74 GB) NTFS
6 Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS

Disk ### Status Size Free Dyn Gpt
-------- ------------- ------- ------- --- ---
Disk 0 Online 465 GB 0 B
Disk 1 No Media 0 B 0 B
Disk 2 Online 7633 MB 0 B

Partitions of Disk 0:
===============

Partition ### Type Size Offset
------------- ---------------- ------- -------
Partition 1 OEM 101 MB 31 KB
Partition 2 Primary 14 GB 102 MB
Partition 3 Primary 451 GB 14 GB

======================================================================================================

Disk: 0
Partition 1
Type : DE
Hidden: Yes
Active: No

Volume ### Ltr Label Fs Type Size Status Info
---------- --- ----------- ----- ---------- ------- --------- --------
* Volume 5 FAT Partition 101 MB Healthy Hidden

======================================================================================================

Disk: 0
Partition 2
Type : 07
Hidden: No
Active: Yes

Volume ### Ltr Label Fs Type Size Status Info
---------- --- ----------- ----- ---------- ------- --------- --------
* Volume 1 D RECOVERY NTFS Partition 14 GB Healthy

======================================================================================================

Disk: 0
Partition 3
Type : 07
Hidden: No
Active: No

Volume ### Ltr Label Fs Type Size Status Info
---------- --- ----------- ----- ---------- ------- --------- --------
* Volume 2 C OS NTFS Partition 451 GB Healthy

======================================================================================================

Partitions of Disk 2:
===============

Partition ### Type Size Offset
------------- ---------------- ------- -------
Partition 1 Primary 7633 MB 31 KB

======================================================================================================

Disk: 2
Partition 1
Type : 07
Hidden: No
Active: Yes

Volume ### Ltr Label Fs Type Size Status Info
---------- --- ----------- ----- ---------- ------- --------- --------
* Volume 4 G NTFS Removable 7633 MB Healthy

======================================================================================================
==========================================================
TDL4: custom:26000022


==========================================================

Last Boot: 2012-03-20 09:07

======================= End Of Log =========================

Just as a mention my BSOD error is
0X0000007B (0XFFFFF880009A97E8, 0XFFFFFFFFC000000D, 0X0000000000000000 0X0000000000000000)

Edited by boopme, 21 March 2012 - 11:02 AM.


BC AdBot (Login to Remove)

 


#2 SweetTech

SweetTech

    Agent ST


  • Members
  • 13,421 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Antarctica
  • Local time:07:52 PM

Posted 22 March 2012 - 01:26 AM

Hello hostingitall and welcome to the forums!

My secret agent name on the forums is SweetTech (you can call me ST for short), it's a pleasure to meet you. :)

I'll be addressing you by your username, if you'd like me to address you by something else, please let me know!

I would be glad to take a look at your log and help you with solving any malware problems.

If you have since resolved the issues you were originally experiencing, or have received help elsewhere, please inform me so that this topic can be closed.

If you have not, please adhere to the guidelines below and then follow instructions as outlined further below:


  • Logs from malware removal programs (OTL is one of them) can take some time to analyze. I need you to be patient while I analyze any logs you post. Please remember, I am a volunteer, and I do have a life outside of these forums.
  • Please make sure to carefully read any instruction that I give you. Attention to detail is important! Since I cannot see or directly interact with your computer I am dependent on you to "be my eyes" and provide as much information as you can regarding the current state of your computer.
  • If you're not sure, or if something unexpected happens, do NOT continue! Stop and ask!
  • In Windows Vista and Windows 7, all tools need to be started by right clicking and selecting Run as Administrator!
  • If I instruct you to download a specific tool in which you already have, please delete the copy that you have and re-download the tool. The reason I ask you to do this is because these tools are updated fairly regularly.
  • Do not do things I do not ask for, such as running a spyware scan on your computer. The one thing that you should always do, is to make sure sure that your anti-virus definitions are up-to-date!
  • Please do not use the Attachment feature for any log file. Do a Copy/Paste of the entire contents of the log file and submit it inside your post.
  • I am going to stick with you until ALL malware is gone from your system. I would appreciate it if you would do the same. From this point, we're in this together ;)

    • Because of this, you must reply within 3 days failure to reply will result in the topic being closed! I like chocolate chip cookies.
  • Lastly, I am no magician. I will try very hard to fix your issues, but no promises can be made. Also be aware that some infections are so severe that you might need to resort to reformatting and reinstalling your operating system or even taking your computer into a repair shop.

    • Don't worry, this only happens in severe cases, but it sadly does happen. Be prepared to back up your data and have means of backing up your data available.

____________________________________________________

Unsure how the fix list is produced?

The fix log is produced by interpretting any entries that are malicious, and creating the script to fix them.


=========

FRST Fix

Open notepad. Please copy the contents of the code box below. To do this highlight the contents of the box and right click on it. Paste this into the open notepad. Save it on the flashdrive as fixlist.txt

Start
TDL4: custom:26000022
End

NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system

On Vista or Windows 7: Now please enter System Recovery Options.
Run FRST64 and press the Fix button just once and wait.

Please Note::

The tool will make a log on the flashdrive (Fixlog.txt) please post it to your reply, and check to see if you're now able to boot up into Windows.

If you are, please run this tool:

Re-Running OTL

We need to create a New FULL OTL Report
  • Please download OTL from here if you have not done so already:
  • Save it to your desktop.
  • Double click on the Posted Image icon on your desktop.
  • Click the "Scan All Users" checkbox.
  • Change the "Extra Registry" option to "SafeList"
  • In the Posted Image box Cope & Paste the following:
    msconfig
    safebootminimal
    activex
    drivers32
    netsvcs
    type "C:\ComboFix.txt" /c
    "%WinDir%\$NtUninstallKB*$." /30
    C:\Program Files\Common Files\ComObjects\*.* /s
    %systemroot%\*. /mp /s
    %systemroot%\*. /rp /s
    %systemroot%\system32\*.dll /lockedfiles
    %systemroot%\Tasks\*.job /lockedfiles
    %systemroot%\system32\drivers\*.sys /lockedfiles
    %systemroot%\System32\config\*.sav
    %systemroot%\system32\drivers\*.sys /90
    %SYSTEMDRIVE%\*.exe
    /md5start
    volsnap.sys
    atapi.sys
    explorer.exe
    winlogon.exe
    wininit.exe
    tdx.sys
    afd.sys
    /md5stop
    hklm\software\clients\startmenuinternet|command /rs
    hklm\software\clients\startmenuinternet|command /64 /rs
    
  • Push the Posted Image button.
  • Two reports will open, copy and paste them in a reply here:
    • OTL.txt <-- Will be opened
    • Extras.txt <-- Will be minimized

Edited by SweetTech, 22 March 2012 - 01:28 AM.

Have I helped you? If you'd like to assist in the fight against malware, click here Posted Image


The instructions seen in this post have been specifically tailored to this user and the issues they are experiencing with their computer. If you think you have a similar problem, please first read this topic, and then begin your own, new thread. I do not offer private support via Private Message.


#3 SweetTech

SweetTech

    Agent ST


  • Members
  • 13,421 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Antarctica
  • Local time:07:52 PM

Posted 26 March 2012 - 04:34 AM

Due to lack of feedback this thread will now be closed. If you still require assistance, and would like to have your thread re-opened, please feel free to send me a Private Message (PM) being sure to include a link to your topic, and I'd be happy to re-open it.


Have I helped you? If you'd like to assist in the fight against malware, click here Posted Image


The instructions seen in this post have been specifically tailored to this user and the issues they are experiencing with their computer. If you think you have a similar problem, please first read this topic, and then begin your own, new thread. I do not offer private support via Private Message.





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users