Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

celas virus


  • This topic is locked This topic is locked
7 replies to this topic

#1 rspitz

rspitz

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:12:05 PM

Posted 23 May 2012 - 01:16 PM

Hi, I'm locked out of my computer by 'celas' ransom ware, I can't access my desktop or task manager, I tried to boot in safe mode with networking but that was also blocked by a white screen. I am using windows7 32. Please help I really don't know what to do. Thank you

BC AdBot (Login to Remove)

 


#2 CatByte

CatByte

    bleepin' tiger


  • Malware Response Team
  • 14,664 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Canada
  • Local time:08:05 AM

Posted 23 May 2012 - 06:01 PM

Hi,

Please do the following:


For x32 (x86) bit systems download Farbar Recovery Scan Tool and save it to a flash drive.


Plug the flashdrive into the infected PC.

Enter System Recovery Options.

To enter System Recovery Options from the Advanced Boot Options:
  • Restart the computer.
  • As soon as the BIOS is loaded begin tapping the F8 key until Advanced Boot Options appears.
  • Use the arrow keys to select the Repair your computer menu item.
  • Choose your language settings, and then click Next.
  • Select the operating system you want to repair, and then click Next.
  • Select your user account and click Next.
To enter System Recovery Options by using Windows installation disc:
  • Insert the installation disc.
  • Restart your computer.
  • If prompted, press any key to start Windows from the installation disc. If your computer is not configured to start from a CD or DVD, check your BIOS settings.
  • Click Repair your computer.
  • Choose your language settings, and then click Next.
  • Select the operating system you want to repair, and then click Next.
  • Select your user account an click Next.
On the System Recovery Options menu you will get the following options:
Startup Repair
System Restore
Windows Complete PC Restore
Windows Memory Diagnostic Tool
Command Prompt
[*]Select Command Prompt
[*]In the command window type in notepad and press Enter.
[*]The notepad opens. Under File menu select Open.
[*]Select "Computer" and find your flash drive letter and close the notepad.
[*]In the command window type e:\frst.exe (for x64 bit version type e:\frst64) and press Enter
Note: Replace letter e with the drive letter of your flash drive.
[*]The tool will start to run.
[*]When the tool opens click Yes to the disclaimer.
[*]Place a check next to List Drivers MD5 as well as the default check marks that are already there
[*]Press Scan button.
[*]type exit and reboot the computer normally
[*]FRST will make a log (FRST.txt) on the flash drive, please copy and paste the log in your reply.[/list]

Microsoft MVP - 2010, 2011, 2012, 2013, 2014, 2015


#3 rspitz

rspitz
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:12:05 PM

Posted 24 May 2012 - 08:19 AM

hi thanks for your reply, here's the txt file :

Scan result of Farbar Recovery Scan Tool (FRST written by farbar) Version: 23-05-2012 02
Ran by SYSTEM at 24-05-2012 14:08:55
Running from F:\
Windows 7 Ultimate (X86) OS Language: English(US)
The current controlset is ControlSet001

========================== Registry (Whitelisted) =============

HKLM\...\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" [421160 2010-12-13] (Apple Inc.)
HKLM\...\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime [421888 2010-11-29] (Apple Inc.)
HKLM\...\Run: [VirtualCloneDrive] "C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s [85160 2009-06-17] (Elaborate Bytes AG)
HKLM\...\Run: [AdobeCS4ServiceManager] "C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin [611712 2008-08-13] (Adobe Systems Incorporated)
HKLM\...\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe" [249064 2010-10-29] (Sun Microsystems, Inc.)
HKLM\...\Run: [dlcimon.exe] "C:\Program Files\Dell AIO Printer 946\dlcimon.exe" [435696 2007-01-12] (Dell)
HKLM\...\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [843712 2012-01-02] (Adobe Systems Incorporated)
HKLM\...\Run: [DivXUpdate] "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW [1259376 2011-07-28] ()
HKLM\...\Run: [Ad-Aware Browsing Protection] "C:\ProgramData\Ad-Aware Browsing Protection\adawarebp.exe" [197288 2011-11-14] (Lavasoft)
HKLM\...\Run: [ReCycle Patch] "C:\Users\Richy Spitz\Desktop\ReCyclePatch.exe" -s [184320 2005-12-20] ()
HKU\Mcx1-RICHYSPITZ-PC\...\Winlogon: [Shell] C:\Windows\eHome\McrMgr.exe [313344 2009-07-13] (Microsoft Corporation)
HKU\Richy Spitz\...\Run: [Google Update] "C:\Users\Richy Spitz\AppData\Local\Google\Update\GoogleUpdate.exe" /c [136176 2011-01-18] (Google Inc.)
HKU\Richy Spitz\...\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background [4240760 2010-11-09] (Microsoft Corporation)
HKU\Richy Spitz\...\Run: [AdobeBridge] [x]
HKU\Richy Spitz\...\Run: [Facebook Update] "C:\Users\Richy Spitz\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver [137536 2011-10-04] (Facebook Inc.)
HKU\Richy Spitz\...\Run: [Akamai NetSession Interface] "C:\Users\Richy Spitz\AppData\Local\Akamai\netsession_win.exe" [3331872 2012-05-07] (Akamai Technologies, Inc)
HKU\Richy Spitz\...\Run: [AdVantage] C:\Users\Richy Spitz\AppData\Roaming\advantage\AdVantage.exe [196608 2012-04-11] ()
HKU\Richy Spitz\...\Run: [Seavzuob] "C:\Users\Richy Spitz\AppData\Roaming\Woyt\owulf.exe" [177152 2011-03-03] ()
HKU\Richy Spitz\...\Run: [Spotify] "C:\Users\Richy Spitz\AppData\Roaming\Spotify\spotify.exe" /uri spotify:autostart [9478320 2012-05-04] (Spotify Ltd)
HKU\Richy Spitz\...\Run: [Spotify Web Helper] "C:\Users\Richy Spitz\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" [932528 2012-05-04] ()
HKLM\...\Winlogon: [Shell] C:\Windows\Temp\hlylvx\setup.exe [x ] ()
Winlogon\Notify\jmcheng: C:\Windows\system32\config\systemprofile\AppData\Local\jmcheng.dll [X]
Startup: C:\Users\Richy Spitz\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> (No File)
Startup: C:\Users\Richy Spitz\Start Menu\Programs\Startup\MagicDisc.lnk
ShortcutTarget: MagicDisc.lnk -> X:\Program Files\MagicDisc\MagicDisc.exe (No File)

================================ Services (Whitelisted) ==================

3 AdobeFlashPlayerUpdateSvc; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [253088 2012-04-28] (Adobe Systems Incorporated)
2 bdss; C:\Windows\System32\PSSdk23.dll [5632 2009-07-13] (Oak Technology Inc.)
2 dlci_device; C:\Windows\system32\dlcicoms.exe -service [537480 2006-12-07] ( )
2 EPSON Total Disc Control Service; C:\Program Files\EPSON\Total Disc Maker\PubSVC.exe [192512 2011-09-14] (SEIKO EPSON CORPORATION.)
3 FLEXnet Licensing Service; "C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe" [655624 2011-02-24] (Acresso Software Inc.)
3 MozillaMaintenance; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [129976 2012-05-04] (Mozilla Foundation)
2 PaceLicenseDServices; "C:\Program Files\Common Files\PACE\Services\LicenseServices\LDSvc.exe" [2932224 2011-09-08] (PACE Anti-Piracy, Inc.)
2 Akamai; c:\program files\common files\akamai/netsession_win_6c825ce.dll [x]
2 AMService; C:\Windows\TEMP\xvwkok\setup.exe run [x]
2 bt3cser; C:\Windows\System32\dcomlaunch.dll [x]
2 GoToAssist; C:\Windows\System32\tos_sps32.dll [x]

========================== Drivers (Whitelisted) =============

1 cdrom; C:\Windows\System32\drivers\cdrom.sys [108544 2010-11-20] ()
3 DELTAII; C:\Windows\System32\DRIVERS\MAudioDelta.sys [302472 2009-07-27] (Avid Technology, Inc.)
1 ElbyCDIO; C:\Windows\System32\Drivers\ElbyCDIO.sys [26024 2009-12-17] (Elaborate Bytes AG)
3 EpPPDrv; C:\Windows\System32\DRIVERS\EpPPDrv.sys [13960 2010-01-25] (SEIKO EPSON CORPORATION.)
3 mcdbus; C:\Windows\System32\DRIVERS\mcdbus.sys [116736 2009-02-24] (MagicISO, Inc.)
3 NVENETFD; C:\Windows\System32\DRIVERS\nvm62x32.sys [347264 2009-07-13] (NVIDIA Corporation)
0 TPkd; C:\Windows\System32\Drivers\TPkd.sys [93304 2011-06-28] (PACE Anti-Piracy, Inc.)
3 WSDPrintDevice; C:\Windows\System32\DRIVERS\WSDPrint.sys [17920 2009-07-13] (Microsoft Corporation)
3 WSDScan; C:\Windows\System32\DRIVERS\WSDScan.sys [20480 2009-07-13] (Microsoft Corporation)
3 xusb21; C:\Windows\System32\DRIVERS\xusb21.sys [60160 2009-08-13] (Microsoft Corporation)
3 Lavasoft Kernexplorer; \??\C:\Program Files\Lavasoft\Ad-Aware\KernExplorer.sys [x]
3 Synth3dVsc; C:\Windows\System32\drivers\synth3dvsc.sys [x]
3 tsusbhub; C:\Windows\System32\drivers\tsusbhub.sys [x]
3 VGPU; C:\Windows\System32\drivers\rdvgkmd.sys [x]

========================== NetSvcs (Whitelisted) ===========
NETSVC: bt3cser
NETSVC: bdss
NETSVC: ntpr_nic_service2
NETSVC: yukonwlh
NETSVC: pcx1nd5
NETSVC: se45nd5
NETSVC: GoToAssist

============ One Month Created Files and Folders ==============

2012-05-24 14:08 - 2012-05-24 14:09 - 0000000 ____D C:\FRST
2012-05-23 08:13 - 2012-05-23 08:15 - 40822350 ____A C:\Users\Richy Spitz\Desktop\Les Baxter - Moog Rock (1968).rar
2012-05-23 04:15 - 2012-05-23 04:15 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{E4F7FF98-19A7-4555-8E44-532B820078CC}
2012-05-23 04:15 - 2012-05-23 04:15 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{9903B5C5-0449-4343-A8C5-5C109ACB50BD}
2012-05-22 16:39 - 2012-05-22 16:39 - 4300844 ____A C:\Users\Richy Spitz\Desktop\google.wav
2012-05-22 12:07 - 2012-05-22 12:42 - 1680704 ____A C:\Users\Richy Spitz\Downloads\Scorpio61s Sample Mix Vol 61.mp3.sfk
2012-05-22 12:07 - 2012-05-22 12:42 - 0475040 ____A C:\Users\Richy Spitz\Downloads\Scorpio61s_Sample_Mix_Vol_7.mp3.sfk
2012-05-22 12:05 - 2012-05-22 12:07 - 22057796 ____A C:\Users\Richy Spitz\Downloads\Scorpio61s_Sample_Mix_Vol_7.mp3
2012-05-22 12:05 - 2012-05-22 12:05 - 0034371 ____A C:\Users\Richy Spitz\Downloads\download (2).htm
2012-05-22 11:59 - 2012-05-22 12:07 - 117074048 ____A C:\Users\Richy Spitz\Downloads\Scorpio61s Sample Mix Vol 61.mp3
2012-05-22 10:00 - 2012-05-22 10:00 - 18083126 ____A C:\Users\Richy Spitz\Desktop\aint no body remixx.wav
2012-05-21 12:56 - 2012-05-21 12:56 - 0078947 ____A C:\Users\Richy Spitz\.recently-used.xbel
2012-05-21 12:07 - 2012-05-21 12:33 - 46644360 ____A C:\Users\Richy Spitz\Desktop\Ashbury.rar
2012-05-21 10:01 - 2012-05-21 10:11 - 91975387 ____A C:\Users\Richy Spitz\Downloads\Space1978.rar
2012-05-21 09:38 - 2012-05-21 09:47 - 89424687 ____A C:\Users\Richy Spitz\Downloads\Space1980.rar
2012-05-21 07:02 - 2012-05-21 07:02 - 5231493 ____A C:\Users\Richy Spitz\Desktop\space gits.mp3
2012-05-21 05:08 - 2012-05-21 05:10 - 0077176 ____A C:\Users\Richy Spitz\Desktop\Calling Hearts - In the Jungle.mp3.sfk
2012-05-21 04:52 - 2012-05-21 04:52 - 0251568 ____A C:\Users\Richy Spitz\Documents\chopper.rns
2012-05-20 15:03 - 2012-05-20 15:03 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{786FFF96-8667-4CF0-BA2C-41321BB45AC2}
2012-05-20 15:03 - 2012-05-20 15:03 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{36C2DD25-162F-401D-BFDF-21D6DE706980}
2012-05-20 14:28 - 2012-05-20 14:29 - 1021722 ____A C:\Users\Richy Spitz\Downloads\[NDS]KORG DS-10 Synthesizer[ESPALNDS.com].zip
2012-05-20 13:15 - 2012-05-20 13:16 - 0000000 ____D C:\Users\Richy Spitz\Desktop\4869
2012-05-20 12:58 - 2012-05-20 12:58 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{D74B44C1-C91A-4824-8E49-88508BA0C65B}
2012-05-20 12:58 - 2012-05-20 12:58 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{19C963F3-08D8-432E-8E7A-169B7C55B30E}
2012-05-20 12:30 - 2010-05-21 09:39 - 0000000 ____D C:\Users\Richy Spitz\Desktop\BATTERY
2012-05-20 11:10 - 2012-05-20 11:11 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{0CE640BD-EA8D-40EF-BA39-B764968637B2}
2012-05-20 11:10 - 2012-05-20 11:10 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{FC631F17-D8D9-4CF5-9FEF-634B7BC3E794}
2012-05-20 07:22 - 2012-05-20 07:22 - 1415601 ____A C:\Users\Richy Spitz\Downloads\spitz filter3 (3).osm
2012-05-20 07:21 - 2012-05-20 07:21 - 8655455 ____A C:\Users\Richy Spitz\Downloads\setupSynthMaker_FREE_2_0_5 (1).zip
2012-05-20 07:18 - 2012-05-20 07:18 - 1415601 ____A C:\Users\Richy Spitz\Downloads\spitz filter3 (2).osm
2012-05-20 07:18 - 2012-05-20 07:18 - 0946260 ____A C:\Users\Richy Spitz\Downloads\spitz filter.osm
2012-05-20 07:06 - 2012-05-20 07:06 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{287C1476-5353-4923-8D79-33549D9C777C}
2012-05-20 07:05 - 2012-05-20 07:05 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{20DBAD04-7EFD-4A06-94F2-A33B3108DF6E}
2012-05-20 04:31 - 2012-05-20 04:32 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{55E8495D-BAC9-4013-BC72-7B7DE92BBAF2}
2012-05-20 04:31 - 2012-05-20 04:31 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{1499E765-E765-430A-ADBC-86BCB3CA5C35}
2012-05-19 04:28 - 2012-05-19 04:28 - 0000000 ____D C:\Users\All Users\Tarma Installer
2012-05-19 04:28 - 2012-05-19 04:28 - 0000000 ____D C:\Program Files\Yontoo
2012-05-19 04:28 - 2012-05-19 04:28 - 0000000 ____D C:\Program Files\1ClickDownload
2012-05-19 03:55 - 2012-05-19 03:55 - 1415601 ____A C:\Users\Richy Spitz\Downloads\spitz filter3.osm
2012-05-19 03:55 - 2012-05-19 03:55 - 1415601 ____A C:\Users\Richy Spitz\Downloads\spitz filter3 (1).osm
2012-05-18 18:01 - 2012-05-18 18:01 - 0285110 ____A C:\Windows\msxml4-KB954430-enu.LOG
2012-05-18 18:01 - 2012-05-18 18:01 - 0000000 ____D C:\Program Files\MSXML 4.0
2012-05-18 18:00 - 2012-05-18 18:01 - 0292532 ____A C:\Windows\msxml4-KB973688-enu.LOG
2012-05-18 15:52 - 2012-05-18 15:52 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{BF6A7129-82F9-4E75-8F6F-D80091A03584}
2012-05-18 15:51 - 2012-05-18 15:52 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{C16449E3-E66F-4228-A767-21C3603C08E4}
2012-05-18 02:37 - 2012-05-18 02:37 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{9ECD3DF7-028E-479C-ABD6-CB58C8413D5C}
2012-05-18 02:37 - 2012-05-18 02:37 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{37B66A1D-0537-44D0-AFE9-9549DFCC64E2}
2012-05-17 05:39 - 2012-05-17 05:39 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{BBBE67F1-FD7F-465B-87FF-9C3FBE6A251F}
2012-05-17 05:38 - 2012-05-17 05:39 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{912208FD-320B-4FB8-93FC-668E3806CB1A}
2012-05-17 04:57 - 2012-05-17 05:44 - 0000000 ____D C:\Users\All Users\EPSON
2012-05-17 04:56 - 2012-05-17 04:56 - 0000000 ____D C:\Program Files\EPSON
2012-05-17 03:48 - 2012-05-17 03:48 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{CF36AD0E-744F-4658-A311-F5F0FF7FEB28}
2012-05-17 03:47 - 2012-05-17 03:47 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{353CB2F9-E65E-42D3-9756-2B7EE0969E7E}
2012-05-17 03:44 - 2012-05-17 03:44 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{3D1A3331-E7BD-4547-B797-B7A6E5B96B99}
2012-05-17 03:44 - 2012-05-17 03:44 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{12F7EFFB-1F50-4A95-A837-66EB6EB5590B}
2012-05-16 11:22 - 2012-05-16 11:23 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{72146120-D2CA-4387-9DCA-830AD2A9C9DF}
2012-05-16 11:22 - 2012-05-16 11:22 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{F07ED8B3-DB80-4A57-A7A7-CCE254FD4E59}
2012-05-16 04:47 - 2012-05-17 04:19 - 0000000 ____D C:\Users\Richy Spitz\Documents\PHILI REMAKES
2012-05-16 02:42 - 2012-05-16 02:42 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{F348C3CD-66E1-4EAA-8518-588E030D72A4}
2012-05-16 02:42 - 2012-05-16 02:42 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{0C383942-C434-4CF6-B187-04285D58C257}
2012-05-16 02:40 - 2012-05-16 02:40 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{0C662A33-055C-468A-B6B0-9212A7AF883C}
2012-05-15 13:14 - 2012-05-15 13:11 - 0095109 ____A C:\Users\Richy Spitz\Downloads\RRL1.osm
2012-05-15 09:28 - 2012-05-15 09:29 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{C20AD164-A513-4A72-8227-1DDC797398E7}
2012-05-15 09:28 - 2012-05-15 09:28 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{51BB96C8-08CA-4523-9A86-312C186C6FEF}
2012-05-14 09:32 - 2012-05-14 10:58 - 214510666 ____A C:\Users\Richy Spitz\Downloads\EZ Rollers Drum&Bass Refill.rar
2012-05-14 06:25 - 2012-05-14 06:28 - 0000000 ____D C:\Program Files\Nomad Factory
2012-05-14 06:25 - 2012-05-14 06:25 - 0000000 ____D C:\Users\Richy Spitz\Documents\Nomad Factory
2012-05-14 06:25 - 2003-03-18 09:04 - 0765952 ____A (Microsoft Corporation) C:\Windows\System32\msvcp71d.dll
2012-05-14 06:25 - 2003-03-18 09:03 - 0544768 ____A (Microsoft Corporation) C:\Windows\System32\msvcr71d.dll
2012-05-14 06:21 - 2012-05-14 06:21 - 0000000 ____D C:\Users\Richy Spitz\AppData\Roaming\UVIWorkstation
2012-05-14 06:13 - 2012-05-14 06:14 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{75C6716E-7D85-4590-9225-1F9B3B04556F}
2012-05-14 06:13 - 2012-05-14 06:13 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{427EE75C-7BD1-459C-B4E1-FAFEC1AFC411}
2012-05-14 06:10 - 2012-05-14 06:10 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\Conduit
2012-05-14 04:52 - 2012-05-14 04:52 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{E7EFBE0A-034D-4E78-ABE9-96EC092F0BBF}
2012-05-14 04:51 - 2012-05-14 04:52 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{E9099BF4-B587-4E6D-B887-757F9C26DA20}
2012-05-14 04:27 - 2012-05-14 04:27 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{CC72D878-564C-44FA-A4CE-4B8542460E73}
2012-05-14 04:27 - 2012-05-14 04:27 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{04980081-BAF1-442D-9DA3-8E5D4A868B3E}
2012-05-14 03:36 - 2012-05-14 03:54 - 166261891 ____A C:\Users\Richy Spitz\Downloads\ITCOTKC 4.rar
2012-05-14 03:36 - 2012-05-14 03:50 - 102007543 ____A C:\Users\Richy Spitz\Downloads\ITCOTKC 5.rar
2012-05-14 03:35 - 2012-05-14 03:54 - 164258324 ____A C:\Users\Richy Spitz\Downloads\ITCOTKC 3.rar
2012-05-14 03:35 - 2012-05-14 03:53 - 153789088 ____A C:\Users\Richy Spitz\Downloads\ITCOTCK2.rar
2012-05-14 03:35 - 2012-05-14 03:35 - 0062826 ____A C:\Users\Richy Spitz\Downloads\download (1).htm
2012-05-14 03:33 - 2012-05-14 03:51 - 171963538 ____A C:\Users\Richy Spitz\Downloads\ITCOTCK1.rar
2012-05-14 02:53 - 2012-05-14 02:53 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{A385B7F4-48CA-441C-BA44-804E301565EB}
2012-05-14 02:53 - 2012-05-14 02:53 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{30ED0779-B2DD-45CA-A7BD-07FD7FD7928B}
2012-05-13 13:22 - 2012-05-13 13:52 - 0000000 ____D C:\Users\Richy Spitz\Downloads\Drive
2012-05-13 13:02 - 2012-05-13 13:03 - 9108211 ____A C:\Users\Richy Spitz\Downloads\Rob.Papen.Predator.VSTi.v1.1.Incl.Keygen-AiR.rar
2012-05-13 09:41 - 2012-05-13 09:42 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{89E043D0-3DA8-4050-966F-9FAAD2885B2C}
2012-05-13 09:41 - 2012-05-13 09:41 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{76E14099-00B5-4266-832D-E96DFB6B6903}
2012-05-13 03:42 - 2012-05-13 03:42 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{9212D1CD-8599-49DB-AFFF-02159C61856D}
2012-05-13 03:42 - 2012-05-13 03:42 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{888A1379-49C1-489E-A89A-3B7FC43D587D}
2012-05-12 08:21 - 2012-05-12 08:24 - 0000000 ____D C:\Users\Richy Spitz\Downloads\Nomad Factory Complete Bundle
2012-05-11 08:26 - 2012-05-11 08:26 - 0000000 ____D C:\Users\All Users\PACE
2012-05-11 08:26 - 2012-05-11 08:26 - 0000000 ____D C:\Program Files\Common Files\PACE
2012-05-11 08:19 - 2012-05-11 08:20 - 0000000 ____D C:\Program Files\UVI Workstation
2012-05-11 08:19 - 2012-05-11 08:19 - 0000000 ____D C:\Program Files\UVISoundBanks
2012-05-11 08:19 - 2012-05-11 08:19 - 0000000 ____D C:\Program Files\Common Files\UVI
2012-05-11 08:19 - 2011-10-06 08:22 - 2275328 ____A C:\Windows\System32\libsndfile-1.dll
2012-05-11 06:00 - 2005-09-05 03:57 - 231081984 ____A C:\Users\Richy Spitz\Desktop\rebirth_iso_installation.iso
2012-05-11 03:35 - 2012-05-11 03:35 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{F8A05B90-592B-4A90-A630-CA43C3BF06D7}
2012-05-11 03:35 - 2012-05-11 03:35 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{DB85E96D-FB9A-4915-8885-B24A5E55170B}
2012-05-10 12:16 - 2012-05-10 12:17 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{C19D284E-17C2-4359-BFE6-5F8BF33BD999}
2012-05-10 12:16 - 2012-05-10 12:16 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{5AF81F6A-7A19-4BAE-B5FE-C7C91A016EF3}
2012-05-10 02:10 - 2012-05-10 02:10 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{EEE04563-7058-4AEC-AF7E-8CF3840258D2}
2012-05-10 02:10 - 2012-05-10 02:10 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{0D6DE276-9549-471D-8085-F5BB4D04EB9D}
2012-05-09 14:51 - 2012-03-30 02:23 - 1291632 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys
2012-05-09 14:50 - 2012-03-30 20:39 - 3968368 ____A (Microsoft Corporation) C:\Windows\System32\ntkrnlpa.exe
2012-05-09 14:50 - 2012-03-30 20:39 - 3913072 ____A (Microsoft Corporation) C:\Windows\System32\ntoskrnl.exe
2012-05-09 14:50 - 2012-03-30 18:36 - 2343424 ____A (Microsoft Corporation) C:\Windows\System32\win32k.sys
2012-05-09 14:47 - 2012-03-16 23:27 - 0056176 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\partmgr.sys
2012-05-09 14:47 - 2012-03-02 21:31 - 1077248 ____A (Microsoft Corporation) C:\Windows\System32\DWrite.dll
2012-05-09 13:41 - 2012-05-10 03:52 - 0317916 ____A C:\Users\Richy Spitz\Documents\ROCK THAT.rns
2012-05-09 12:23 - 2012-05-10 02:09 - 0000000 ____D C:\Program Files\hpmonitor
2012-05-09 12:23 - 2012-05-09 12:23 - 0000253 ____A C:\user.js
2012-05-09 12:23 - 2012-05-09 12:23 - 0000000 ____D C:\Program Files\BabylonToolbar
2012-05-09 12:22 - 2012-05-09 12:22 - 0000000 ____D C:\Users\Richy Spitz\AppData\Roaming\Babylon
2012-05-09 12:22 - 2012-05-09 12:22 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\Babylon
2012-05-09 12:22 - 2012-05-09 12:22 - 0000000 ____D C:\Users\All Users\Babylon
2012-05-09 11:40 - 2012-05-09 11:40 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{DF8540CF-6251-43C2-BAB0-F79A770A47F6}
2012-05-09 11:40 - 2012-05-09 11:40 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{002CBA91-F490-4BF8-84F4-655F91A5C19E}
2012-05-08 12:53 - 2012-05-08 12:53 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{9797B15F-EBC3-4733-B1C5-2AC9541735C4}
2012-05-08 12:52 - 2012-05-08 12:53 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{7E8A4AD1-3B4A-4352-A2BE-D0683F879893}
2012-05-08 11:26 - 2012-05-09 05:48 - 0563106 ____A C:\Users\Richy Spitz\Documents\back.rns
2012-05-08 10:43 - 2012-05-08 10:43 - 0334990 ____A C:\Users\Richy Spitz\Documents\si si.rns
2012-05-08 05:06 - 2012-05-08 05:06 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{1EDF2D70-CC21-4E5A-8558-F093A3B70BB6}
2012-05-08 05:06 - 2012-05-08 05:06 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{069C7C0F-8925-4128-B8DE-BFDA701B8DB5}
2012-05-08 05:05 - 2012-05-14 06:13 - 0004890 ____A C:\aaw7boot.log
2012-05-08 04:36 - 2012-05-08 04:36 - 0101720 ____A (Sunbelt Software) C:\Windows\System32\Drivers\SBREDrv.sys
2012-05-08 04:33 - 2012-05-08 04:33 - 0000064 ____A C:\Windows\System32\rp_stats.dat
2012-05-08 04:33 - 2012-05-08 04:33 - 0000044 ____A C:\Windows\System32\rp_rules.dat
2012-05-08 04:32 - 2012-05-08 04:32 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\adaware
2012-05-08 04:32 - 2012-05-08 04:32 - 0000000 ____D C:\Users\All Users\Ad-Aware Browsing Protection
2012-05-08 04:32 - 2012-05-08 04:32 - 0000000 ____D C:\Program Files\Toolbar Cleaner
2012-05-08 04:31 - 2012-05-14 06:19 - 0000000 ____D C:\Users\All Users\Lavasoft
2012-05-08 04:31 - 2012-05-08 04:31 - 0000000 ____D C:\Program Files\Lavasoft
2012-05-08 04:30 - 2012-05-08 04:31 - 1032320 ____A C:\Users\Richy Spitz\Documents\TMP2D6F.tmp
2012-05-08 04:02 - 2012-05-18 03:08 - 0000000 ____D C:\Users\Richy Spitz\Documents\LIBRARY12
2012-05-08 03:19 - 2012-05-08 03:20 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{C73405B2-DC0B-494A-BA41-D152B135292A}
2012-05-08 03:18 - 2012-05-08 03:19 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{62C1E032-0FC2-4531-AFFE-8D21D4F06D25}
2012-05-08 01:48 - 2012-05-08 01:48 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{C0D532AF-6DBD-4A8B-B865-D4F5A44B3E74}
2012-05-08 01:46 - 2012-05-08 01:48 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{D17C8768-EF86-40A8-9785-6DA13103E1BB}
2012-05-07 00:58 - 2012-05-07 00:59 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{412DAC80-2BBC-4565-BE73-6912551D40CD}
2012-05-07 00:57 - 2012-05-07 00:58 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{84C587BC-B7B3-42AE-A492-7F55E990A8A9}
2012-05-06 08:32 - 2012-05-06 08:35 - 0000000 ____D C:\Users\Richy Spitz\Downloads\The Inbetweener Movie 2011 DVDRip XviD AC3-26K
2012-05-06 08:29 - 2012-05-06 08:49 - 0000000 ____D C:\Users\Richy Spitz\Downloads\[ UsaBit.com ] - The.Devils.Double.LIMITED.2011.BRRip.XviD-playXD
2012-05-06 08:11 - 2012-05-06 08:23 - 0000000 ____D C:\Users\Richy Spitz\Downloads\Limitless.2011.UNRATED.480p.BRRip.XviD.AC3-AsA
2012-05-06 05:31 - 2012-05-06 05:31 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{1C75AB78-915C-403C-9A30-5C89B28989A7}
2012-05-06 05:29 - 2012-05-06 05:31 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{576C26C6-ABE1-4FD3-B124-C893ADFEA4EE}
2012-05-06 05:27 - 2012-05-06 05:27 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{1F457383-D5EC-4C54-B285-BB584DAD9616}
2012-05-06 05:25 - 2012-05-06 05:25 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{C12384EB-06EA-4F6C-A97A-0E1E62813F4C}
2012-05-06 05:20 - 2012-05-06 05:20 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{C7703F66-09A4-445E-938A-2B73ED759AEF}
2012-05-05 12:18 - 2012-05-05 12:18 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{DBF057D1-4705-4422-B945-6B70275B32A5}
2012-05-05 12:17 - 2012-05-05 12:18 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{9FC6A7A7-4B22-4817-ADED-DC8124E7B83A}
2012-05-05 10:41 - 2012-05-05 10:41 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{A39276F5-8AB6-4E05-A6E1-65B21CB614A3}
2012-05-05 10:40 - 2012-05-05 10:41 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{BF50E43D-DAD7-44C8-A084-93C1F4AB9891}
2012-05-05 05:08 - 2012-05-05 05:08 - 0000000 ____D C:\Users\Richy Spitz\Downloads\Hanna.2011.R5.LiNE.AC3.XViD-EP1C
2012-05-05 01:58 - 2012-05-05 01:58 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{E33B2F4F-4629-47CA-9FBB-DD1D5111338F}
2012-05-05 01:57 - 2012-05-05 01:58 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{C0103425-CC9B-4175-AFFA-F6EE2DDC89E4}
2012-05-05 01:55 - 2012-05-05 01:55 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{26BC3900-56BF-45E1-90AC-8FB0E1B0642C}
2012-05-05 01:53 - 2012-05-05 01:53 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{8334655B-8A37-4DB6-8817-35F89C09FA5F}
2012-05-04 16:51 - 2012-05-04 16:51 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{D9822411-B9B9-4554-87D6-255C34B59EE6}
2012-05-04 16:49 - 2012-05-04 16:51 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{B8BDFD3F-1058-4889-A72B-FD2717B8E8CF}
2012-05-04 15:45 - 2012-05-04 15:45 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{B7799057-7409-43C0-A680-92E6BE14F929}
2012-05-04 15:44 - 2012-05-04 15:45 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{5F2FB24B-11EF-4B7F-A307-D911B826B7FF}
2012-05-04 12:51 - 2012-05-04 12:51 - 0000000 ____D C:\Users\All Users\Mozilla
2012-05-04 12:51 - 2012-05-04 12:51 - 0000000 ____D C:\Program Files\Mozilla Maintenance Service
2012-05-04 12:49 - 2012-05-04 12:49 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{2F91F9AE-6A58-4E2A-ACB2-88DCF61271E7}
2012-05-04 12:48 - 2012-05-04 12:49 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{9F5D8A93-5412-4880-A326-21B893CAD6BC}
2012-05-04 04:15 - 2012-05-04 04:15 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{4B0E5D97-5445-4D17-831C-29E68101DC7E}
2012-05-04 04:13 - 2012-05-04 04:14 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{D5C8A43D-E8A2-42B2-AD62-6327AAB9CCBE}
2012-05-04 02:35 - 2012-05-04 02:35 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{8DEAE378-CE22-4DE9-B5A9-781D4943E7F5}
2012-05-04 02:35 - 2012-05-04 02:35 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{79989BC7-3F88-4179-B033-FAF3BCA0C6B6}
2012-05-04 02:31 - 2012-05-04 02:31 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{58BB5B8C-D85B-4155-B921-85BE43AF8B3A}
2012-05-04 02:29 - 2012-05-04 02:29 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{A63F737B-B846-4A5D-8D54-984B7645BB49}
2012-05-03 12:07 - 2012-05-03 12:08 - 0000000 ____D C:\Users\Richy Spitz\Downloads\Mission Impossible 4 Ghost Protocol (2011) DVDRip XviD-MAXSPEED
2012-05-03 04:12 - 2012-05-03 04:12 - 0000155 ____A C:\Users\Richy Spitz\Documents\wap.txt
2012-05-03 03:19 - 2012-05-03 03:20 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{33504B96-60DE-4C5D-8779-F825D6554F78}
2012-05-03 03:18 - 2012-05-03 03:19 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{A810EBB6-0A92-4024-954A-D632AFD7AA72}
2012-05-02 16:48 - 2012-05-02 16:48 - 0000000 ____D C:\Users\Richy Spitz\AppData\Roaming\Futucraft
2012-05-02 05:23 - 2012-05-02 05:23 - 3713529 ____A C:\Users\Richy Spitz\Downloads\arpagiate.exe
2012-05-02 05:23 - 2012-05-02 05:23 - 2097152 ____A C:\Users\Richy Spitz\Downloads\tri2KtableSM.dat
2012-05-02 05:23 - 2012-05-02 05:23 - 2097152 ____A C:\Users\Richy Spitz\Downloads\saw2KtableSM.dat
2012-05-02 05:08 - 2012-05-02 05:09 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{5F8F2E77-7A68-4A95-B44A-D88157380CE3}
2012-05-02 05:07 - 2012-05-02 05:08 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{CE730BF9-602B-4921-A989-D11F3F5CCD2D}
2012-05-02 02:54 - 2012-05-02 02:54 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{91F0C445-02EF-45BE-822A-0A67643F2B01}
2012-05-01 02:42 - 2012-05-01 02:42 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{8902EAC3-E0DD-4A0A-9A46-30A92ED62D1E}
2012-04-30 02:53 - 2012-04-30 02:53 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{3AD52A7F-1689-43DC-863D-AB3448335A24}
2012-04-29 10:42 - 2012-04-29 10:42 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{4677E0E7-CF25-46F6-9FF9-FB8069001E2D}
2012-04-29 10:34 - 2012-04-29 10:34 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\ElevatedDiagnostics
2012-04-29 10:17 - 2012-04-29 10:17 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{1243ACCE-A53A-4861-B3AD-0F15F74CF92B}
2012-04-29 07:06 - 2012-05-23 08:22 - 0000000 ____D C:\Users\Richy Spitz\AppData\Roaming\Zavii
2012-04-29 07:06 - 2012-04-29 07:06 - 0000000 ____D C:\Users\Richy Spitz\AppData\Roaming\Woyt
2012-04-29 07:06 - 2012-04-29 07:06 - 0000000 ____D C:\Users\Richy Spitz\AppData\Roaming\Avboed
2012-04-29 06:24 - 2012-04-29 06:27 - 58453801 ____A C:\Users\Richy Spitz\Downloads\Remix_Pack_Maxigroove_Wounderful_Life.rar
2012-04-29 04:22 - 2012-04-29 04:22 - 0739864 ____A (Google Inc.) C:\Users\Richy Spitz\Downloads\ChromeSetup(1).exe
2012-04-29 04:09 - 2012-04-29 04:09 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{E34EA5A1-518D-4AC0-A515-6C0FED7D578D}
2012-04-29 04:09 - 2012-04-29 04:09 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{A4D2CCE4-1717-49E3-9902-F5BEDDFDD509}
2012-04-29 03:55 - 2012-04-29 03:55 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{C10E9CC9-0423-44A9-A47C-641E16CA40D5}
2012-04-29 03:54 - 2012-04-29 03:55 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{4CD501C0-988A-478A-A21C-D192DF6EEC7F}
2012-04-28 13:39 - 2012-04-28 15:46 - 228733860 ____A (GOG.com ) C:\Users\Richy Spitz\setup_constructor.exe
2012-04-28 13:39 - 2012-04-28 13:43 - 3858678 ____A C:\Users\Richy Spitz\Constructor_Manual.zip
2012-04-28 11:53 - 2012-04-28 11:53 - 0232258 ____A C:\Users\Richy Spitz\Downloads\cytoSonicStylo.osm
2012-04-28 11:49 - 2012-04-28 11:49 - 3321012 ____A C:\Users\Richy Spitz\Downloads\Drum Machine.osm
2012-04-28 11:02 - 2012-04-28 11:17 - 97898872 ____A C:\Users\Richy Spitz\Downloads\Doctor_P_feat_Jenna_G_-_Neon_(remix_competition).zip
2012-04-28 09:27 - 2012-04-28 09:40 - 0000000 ____D C:\Users\Richy Spitz\Downloads\Family Guy Season 8 Complete
2012-04-28 09:24 - 2012-04-28 09:24 - 0021391 ____A C:\Users\Richy Spitz\Downloads\[kat.ph]family.guy.season.8.complete.torrent
2012-04-28 09:21 - 2012-04-28 09:22 - 0000000 ____D C:\Users\Richy Spitz\Downloads\Family Guy S10.E1-7
2012-04-28 07:40 - 2012-04-28 07:41 - 0525904 ____A C:\Users\Richy Spitz\Downloads\Scorpio61s_Sample_Mix_Vol_60.mp3.sfk
2012-04-28 07:22 - 2012-04-28 07:38 - 36639885 ____A C:\Users\Richy Spitz\Downloads\Scorpio61s_Sample_Mix_Vol_60.mp3
2012-04-28 05:16 - 2012-04-28 05:18 - 39217226 ____A C:\Users\Richy Spitz\Downloads\AMaquina.rar
2012-04-28 05:14 - 2012-04-28 05:20 - 60644326 ____A C:\Users\Richy Spitz\Downloads\WA_FPNews.rar
2012-04-28 03:53 - 2012-04-28 03:59 - 81068441 ____A C:\Users\Richy Spitz\Downloads\WATEKE! Blue Mountain Eagle Blue Mountain Eagle, LP, 1970.rar
2012-04-28 03:47 - 2012-04-28 03:55 - 85788060 ____A C:\Users\Richy Spitz\Downloads\Aunt Mary - Janus (1973).rar
2012-04-28 03:47 - 2012-04-28 03:54 - 92283705 ____A C:\Users\Richy Spitz\Downloads\Horse-1970 uk.zip
2012-04-28 03:46 - 2012-04-28 03:55 - 86746074 ____A C:\Users\Richy Spitz\Downloads\1967 - Ten Years After.rar
2012-04-28 03:38 - 2012-04-28 04:11 - 59731351 ____A C:\Users\Richy Spitz\Downloads\Astromusic.rar
2012-04-28 03:37 - 2012-04-28 03:41 - 75363338 ____A C:\Users\Richy Spitz\Downloads\Charles Dodge - Synthesized Voices (1976).rar
2012-04-28 03:13 - 2012-04-28 03:15 - 25253277 ____A C:\Users\Richy Spitz\Downloads\STELLA- POURQUOI PAS MOI.rar
2012-04-28 03:12 - 2012-04-28 03:18 - 95306566 ____A C:\Users\Richy Spitz\Downloads\CHUTE LIBRE.rar
2012-04-28 03:11 - 2012-04-28 03:17 - 93733403 ____A C:\Users\Richy Spitz\Downloads\ORCHESTRAL PARTY 1.rar
2012-04-28 03:09 - 2012-04-28 03:13 - 85799363 ____A C:\Users\Richy Spitz\Downloads\MAXI MUSIC TM3028.rar
2012-04-28 03:02 - 2012-04-28 03:03 - 10030501 ____A C:\Users\Richy Spitz\Downloads\Richy Spitz - Deaf Remix (2).mp3
2012-04-28 02:49 - 2012-05-13 12:34 - 0000008 ____A C:\Windows\System32\mssrv32.vxd
2012-04-28 02:34 - 2012-05-23 08:37 - 0000830 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job
2012-04-28 02:34 - 2012-04-28 02:34 - 0418464 ____A (Adobe Systems Incorporated) C:\Windows\System32\FlashPlayerApp.exe
2012-04-28 02:24 - 2012-05-24 03:39 - 0000000 __ASH C:\Windows\System32\dds_trash_log.cmd
2012-04-28 02:23 - 2012-04-28 02:23 - 0175095 ____A C:\Users\Richy Spitz\Downloads\112dB.Morgana.v1.2.3.VSTi.REPA.keygen.by.DYNAMiCS.zip
2012-04-28 02:16 - 2012-04-28 02:16 - 0000000 ____D C:\Users\All Users\112dB
2012-04-28 02:15 - 2012-04-28 02:15 - 1700352 ____A (Microsoft Corporation) C:\Windows\System32\gdiplus.dll
2012-04-28 02:00 - 2012-04-28 02:14 - 42215901 ____A C:\Users\Richy Spitz\Downloads\112dB.Morgana.v1.2.3.VSTi.rar
2012-04-27 15:28 - 2012-04-27 15:32 - 111344631 ____A C:\Users\Richy Spitz\Downloads\musicradar-jensx1000-samples.zip
2012-04-27 15:24 - 2012-04-27 15:33 - 219532062 ____A C:\Users\Richy Spitz\Downloads\musicradar-modular-synth-samples.zip
2012-04-27 15:17 - 2012-04-27 15:22 - 96856990 ____A C:\Users\Richy Spitz\Downloads\O.V Wright - Memphis Unlimited (2).zip
2012-04-27 15:13 - 2012-04-27 15:13 - 0000000 ____D C:\Users\Richy Spitz\Downloads\112dB.Morgana.v1.2.3
2012-04-27 14:42 - 2012-04-27 15:02 - 123595505 ____A C:\Users\Richy Spitz\Downloads\Badwater_Bridge_-_It_s_Alright_Tonight_%281972-1978%29_%282001%29_%5BMP3%5D_ES_3599526.rar
2012-04-27 14:34 - 2012-04-27 15:12 - 66726762 ____A C:\Users\Richy Spitz\Downloads\112dB.Morgana.v1.2.3..zip
2012-04-27 14:09 - 2012-04-27 14:30 - 37684605 ____A C:\Users\Richy Spitz\Downloads\112dB.Morgana.VSTi.v1.2.7.873-ViP (1).rar
2012-04-27 14:00 - 2012-04-27 14:01 - 0000000 ____D C:\Users\Richy Spitz\Downloads\Alchemy
2012-04-27 08:28 - 2012-04-27 08:28 - 1168181 ____A C:\Users\Richy Spitz\Downloads\The_Pilgrim_WIN.zip
2012-04-27 06:13 - 2012-04-27 06:13 - 0060070 ____A C:\Users\Richy Spitz\Downloads\Bitmap_Knob_VU_Meter%28cytoUpdate%29.osm
2012-04-26 07:26 - 2012-04-26 07:26 - 0001877 ____A C:\Users\Richy Spitz\Downloads\Midi_Triggered_Led.osm
2012-04-26 03:34 - 2012-04-26 03:34 - 6097048 ____A C:\Users\Richy Spitz\Downloads\LAST CON 2.mp3
2012-04-26 01:55 - 2012-04-26 01:55 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{2A9FBCD0-7D96-4F23-B8A4-27E7E1E2B8C6}
2012-04-26 01:55 - 2012-04-26 01:55 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{28C7444F-A782-4669-9100-2E4C4699D0D1}
2012-04-25 07:55 - 2012-04-25 07:55 - 0020136 ____A C:\Users\Richy Spitz\Downloads\approgate.osm
2012-04-25 07:35 - 2012-04-25 07:35 - 2581491 ____A C:\Users\Richy Spitz\Downloads\mer1.zip
2012-04-25 07:34 - 2012-04-25 07:34 - 0022000 ____A C:\Users\Richy Spitz\Downloads\multi_mode_bi-quad_filter.osm
2012-04-25 06:23 - 2012-04-25 06:23 - 0000000 ____D C:\Program Files\Scanned Synth Pro
2012-04-25 06:20 - 2010-05-17 07:33 - 5002308 ____A C:\Users\Richy Spitz\Downloads\a-s2013a.zip
2012-04-25 06:20 - 2010-05-17 07:33 - 2808219 ____A C:\Users\Richy Spitz\Downloads\a-s2013b.zip
2012-04-25 06:20 - 2010-05-17 07:33 - 0004910 ____A C:\Users\Richy Spitz\Downloads\air.nfo
2012-04-25 06:20 - 2010-05-17 07:33 - 0000456 ____A C:\Users\Richy Spitz\Downloads\file_id.diz
2012-04-25 06:20 - 2010-02-15 11:33 - 0000050 ____A C:\Users\Richy Spitz\Downloads\Full Downloads @ PhazeBlog.com.url
2012-04-25 06:15 - 2012-04-25 06:21 - 0000000 ____D C:\Users\Richy Spitz\Downloads\Humanoidsounds.Scanned.Synth.Pro.VSTi.v2.0.13.Incl.Keygen-AiR
2012-04-25 06:13 - 2012-04-25 06:13 - 7816216 ____A C:\Users\Richy Spitz\Downloads\Humanoidsounds.Scanned.Synth.Pro.VSTi.v2.0.13.Incl.Keygen-AiR.rar
2012-04-25 05:52 - 2012-04-25 05:52 - 3162595 ____A C:\Users\Richy Spitz\Downloads\apocolypse.mp3
2012-04-25 05:07 - 2012-04-25 05:14 - 42647948 ____A C:\Users\Richy Spitz\Downloads\vocal_feedback.wav
2012-04-25 05:07 - 2012-04-25 05:14 - 42647948 ____A C:\Users\Richy Spitz\Downloads\lead_vocals.wav
2012-04-25 05:07 - 2012-04-25 05:13 - 42647948 ____A C:\Users\Richy Spitz\Downloads\vocal_effects.wav
2012-04-25 05:07 - 2012-04-25 05:13 - 42647948 ____A C:\Users\Richy Spitz\Downloads\synth.wav
2012-04-25 05:06 - 2012-04-25 05:10 - 42647948 ____A C:\Users\Richy Spitz\Downloads\bg_vocals.wav
2012-04-25 04:40 - 2012-04-25 04:40 - 6728039 ____A C:\Users\Richy Spitz\Downloads\MICRO-ORGANISM VSTi.zip
2012-04-25 04:03 - 2012-04-25 04:04 - 10030501 ____A C:\Users\Richy Spitz\Downloads\Richy Spitz - Deaf Remix (1).mp3
2012-04-25 01:54 - 2012-04-25 01:54 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{FAB89B92-F7F5-4C9B-9FEA-5A3A1592EF00}
2012-04-25 01:54 - 2012-04-25 01:54 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{CC7F0FDD-D92C-46BE-B762-CC062E76075F}
2012-04-24 15:24 - 2012-04-24 15:24 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{A8C3E495-2109-4E5F-B924-DBE61A2E957C}
2012-04-24 15:24 - 2012-04-24 15:24 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{65C5F89D-B937-402B-867C-57D8ABD7BCBF}
2012-04-24 14:17 - 2012-04-24 14:17 - 0131774 ____A C:\Users\Richy Spitz\Downloads\X-VI_beta12.osm
2012-04-24 03:58 - 2012-04-24 03:58 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{4107FD49-BE1F-4533-A770-4276B1D9BE99}
2012-04-24 03:52 - 2012-04-24 03:52 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{49C8E258-8256-4582-AC83-182E0F5342A4}

============ 3 Months Modified Files and Folders ===============

2012-05-24 14:09 - 2012-05-24 14:08 - 0000000 ____D C:\FRST
2012-05-24 03:39 - 2012-04-28 02:24 - 0000000 __ASH C:\Windows\System32\dds_trash_log.cmd
2012-05-24 03:39 - 2011-02-24 13:31 - 0000000 ____D C:\Program Files\Common Files\Akamai
2012-05-24 03:39 - 2011-01-18 20:53 - 1408098304 __ASH C:\hiberfil.sys
2012-05-24 03:39 - 2009-07-13 20:53 - 0000006 ___AH C:\Windows\Tasks\SA.DAT
2012-05-24 03:39 - 2009-07-13 20:39 - 14253331 ____A C:\Windows\setupact.log
2012-05-23 08:45 - 2011-02-24 13:31 - 0726316 ____A C:\Windows\System32\PerfStringBackup.INI
2012-05-23 08:41 - 2012-02-23 12:54 - 0577146 ____A C:\Windows\ntbtlog.txt
2012-05-23 08:37 - 2012-04-28 02:34 - 0000830 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job
2012-05-23 08:30 - 2011-02-24 13:24 - 1659454 ____A C:\Windows\WindowsUpdate.log
2012-05-23 08:22 - 2012-04-29 07:06 - 0000000 ____D C:\Users\Richy Spitz\AppData\Roaming\Zavii
2012-05-23 08:19 - 2011-01-19 11:13 - 0000000 ___HD C:\Users\Richy Spitz\AppData\Local\Spotify
2012-05-23 08:15 - 2012-05-23 08:13 - 40822350 ____A C:\Users\Richy Spitz\Desktop\Les Baxter - Moog Rock (1968).rar
2012-05-23 07:50 - 2011-01-18 21:10 - 0000932 ____A C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1797732261-2071493190-2982767033-1000UA.job
2012-05-23 07:34 - 2011-01-19 11:13 - 0000000 ____D C:\Users\Richy Spitz\AppData\Roaming\Spotify
2012-05-23 07:15 - 2012-02-15 07:03 - 0000000 ____D C:\Users\Richy Spitz\Desktop\joanne
2012-05-23 06:35 - 2012-03-12 04:48 - 0000000 ____D C:\Users\Richy Spitz\Documents\boombap
2012-05-23 06:23 - 2011-10-04 18:18 - 0000952 ____A C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1797732261-2071493190-2982767033-1000UA.job
2012-05-23 04:15 - 2012-05-23 04:15 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{E4F7FF98-19A7-4555-8E44-532B820078CC}
2012-05-23 04:15 - 2012-05-23 04:15 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{9903B5C5-0449-4343-A8C5-5C109ACB50BD}
2012-05-23 04:15 - 2012-04-02 10:38 - 0000000 ___RD C:\Users\Richy Spitz\Dropbox
2012-05-23 04:15 - 2012-04-02 10:35 - 0000000 ____D C:\Users\Richy Spitz\AppData\Roaming\Dropbox
2012-05-23 04:14 - 2011-01-19 11:26 - 0000000 ____D C:\Users\Richy Spitz\Tracing
2012-05-22 18:50 - 2011-01-18 21:10 - 0000880 ____A C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1797732261-2071493190-2982767033-1000Core.job
2012-05-22 18:23 - 2011-10-04 18:18 - 0000930 ____A C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1797732261-2071493190-2982767033-1000Core.job
2012-05-22 16:56 - 2011-01-18 22:00 - 0000000 ____D C:\RICHY SPITZ MUSIC 2
2012-05-22 16:39 - 2012-05-22 16:39 - 4300844 ____A C:\Users\Richy Spitz\Desktop\google.wav
2012-05-22 12:42 - 2012-05-22 12:07 - 1680704 ____A C:\Users\Richy Spitz\Downloads\Scorpio61s Sample Mix Vol 61.mp3.sfk
2012-05-22 12:42 - 2012-05-22 12:07 - 0475040 ____A C:\Users\Richy Spitz\Downloads\Scorpio61s_Sample_Mix_Vol_7.mp3.sfk
2012-05-22 12:07 - 2012-05-22 12:05 - 22057796 ____A C:\Users\Richy Spitz\Downloads\Scorpio61s_Sample_Mix_Vol_7.mp3
2012-05-22 12:07 - 2012-05-22 11:59 - 117074048 ____A C:\Users\Richy Spitz\Downloads\Scorpio61s Sample Mix Vol 61.mp3
2012-05-22 12:05 - 2012-05-22 12:05 - 0034371 ____A C:\Users\Richy Spitz\Downloads\download (2).htm
2012-05-22 10:00 - 2012-05-22 10:00 - 18083126 ____A C:\Users\Richy Spitz\Desktop\aint no body remixx.wav
2012-05-22 08:48 - 2011-12-01 13:12 - 0000000 ____D C:\RICHY SPITZ MUSIC X
2012-05-22 07:55 - 2011-01-20 21:06 - 0000000 ____D C:\Users\Richy Spitz\Documents\DVDVideoSoft
2012-05-22 04:53 - 2011-01-20 10:54 - 0000000 ____D C:\Program Files\Steinberg
2012-05-21 15:58 - 2012-03-23 05:18 - 0000000 __SHD C:\Config.Msi
2012-05-21 15:58 - 2011-11-09 16:37 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\Akamai
2012-05-21 12:56 - 2012-05-21 12:56 - 0078947 ____A C:\Users\Richy Spitz\.recently-used.xbel
2012-05-21 12:56 - 2011-02-25 04:24 - 0000000 ____D C:\Users\Richy Spitz\AppData\Roaming\gtk-2.0
2012-05-21 12:56 - 2011-02-25 04:21 - 0000000 ___HD C:\Users\Richy Spitz\.gimp-2.6
2012-05-21 12:56 - 2011-02-24 13:00 - 0000000 ____D C:\users\Richy Spitz
2012-05-21 12:33 - 2012-05-21 12:07 - 46644360 ____A C:\Users\Richy Spitz\Desktop\Ashbury.rar
2012-05-21 10:11 - 2012-05-21 10:01 - 91975387 ____A C:\Users\Richy Spitz\Downloads\Space1978.rar
2012-05-21 09:47 - 2012-05-21 09:38 - 89424687 ____A C:\Users\Richy Spitz\Downloads\Space1980.rar
2012-05-21 07:37 - 2012-04-18 06:07 - 0000032 ____A C:\Windows\System32\w3data.vss
2012-05-21 07:37 - 2012-04-18 06:07 - 0000032 ____A C:\Windows\System32\msvcsv60.dll
2012-05-21 07:37 - 2012-04-18 06:07 - 0000032 ____A C:\Windows\msocreg32.dat
2012-05-21 07:02 - 2012-05-21 07:02 - 5231493 ____A C:\Users\Richy Spitz\Desktop\space gits.mp3
2012-05-21 05:10 - 2012-05-21 05:08 - 0077176 ____A C:\Users\Richy Spitz\Desktop\Calling Hearts - In the Jungle.mp3.sfk
2012-05-21 04:52 - 2012-05-21 04:52 - 0251568 ____A C:\Users\Richy Spitz\Documents\chopper.rns
2012-05-20 15:12 - 2012-03-25 13:49 - 0000000 ____D C:\Users\Richy Spitz\AppData\Roaming\SynthMaker
2012-05-20 15:03 - 2012-05-20 15:03 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{786FFF96-8667-4CF0-BA2C-41321BB45AC2}
2012-05-20 15:03 - 2012-05-20 15:03 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{36C2DD25-162F-401D-BFDF-21D6DE706980}
2012-05-20 14:59 - 2011-01-19 22:48 - 0000000 ____D C:\Users\Richy Spitz\AppData\Roaming\uTorrent
2012-05-20 14:29 - 2012-05-20 14:28 - 1021722 ____A C:\Users\Richy Spitz\Downloads\[NDS]KORG DS-10 Synthesizer[ESPALNDS.com].zip
2012-05-20 13:16 - 2012-05-20 13:15 - 0000000 ____D C:\Users\Richy Spitz\Desktop\4869
2012-05-20 12:58 - 2012-05-20 12:58 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{D74B44C1-C91A-4824-8E49-88508BA0C65B}
2012-05-20 12:58 - 2012-05-20 12:58 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{19C963F3-08D8-432E-8E7A-169B7C55B30E}
2012-05-20 12:57 - 2011-01-19 22:49 - 0000000 ____D C:\Program Files\uTorrent
2012-05-20 12:35 - 2012-03-27 05:21 - 0000000 ____D C:\Users\Richy Spitz\Desktop\destoppppp
2012-05-20 11:11 - 2012-05-20 11:10 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{0CE640BD-EA8D-40EF-BA39-B764968637B2}
2012-05-20 11:10 - 2012-05-20 11:10 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{FC631F17-D8D9-4CF5-9FEF-634B7BC3E794}
2012-05-20 07:22 - 2012-05-20 07:22 - 1415601 ____A C:\Users\Richy Spitz\Downloads\spitz filter3 (3).osm
2012-05-20 07:22 - 2012-03-25 13:49 - 0000000 ____D C:\Program Files\Outsim
2012-05-20 07:21 - 2012-05-20 07:21 - 8655455 ____A C:\Users\Richy Spitz\Downloads\setupSynthMaker_FREE_2_0_5 (1).zip
2012-05-20 07:18 - 2012-05-20 07:18 - 1415601 ____A C:\Users\Richy Spitz\Downloads\spitz filter3 (2).osm
2012-05-20 07:18 - 2012-05-20 07:18 - 0946260 ____A C:\Users\Richy Spitz\Downloads\spitz filter.osm
2012-05-20 07:06 - 2012-05-20 07:06 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{287C1476-5353-4923-8D79-33549D9C777C}
2012-05-20 07:05 - 2012-05-20 07:05 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{20DBAD04-7EFD-4A06-94F2-A33B3108DF6E}
2012-05-20 04:32 - 2012-05-20 04:31 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{55E8495D-BAC9-4013-BC72-7B7DE92BBAF2}
2012-05-20 04:31 - 2012-05-20 04:31 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{1499E765-E765-430A-ADBC-86BCB3CA5C35}
2012-05-20 04:24 - 2011-01-19 12:07 - 0000000 ____D C:\Users\Richy Spitz\AppData\Roaming\Skype
2012-05-19 04:28 - 2012-05-19 04:28 - 0000000 ____D C:\Users\All Users\Tarma Installer
2012-05-19 04:28 - 2012-05-19 04:28 - 0000000 ____D C:\Program Files\Yontoo
2012-05-19 04:28 - 2012-05-19 04:28 - 0000000 ____D C:\Program Files\1ClickDownload
2012-05-19 03:55 - 2012-05-19 03:55 - 1415601 ____A C:\Users\Richy Spitz\Downloads\spitz filter3.osm
2012-05-19 03:55 - 2012-05-19 03:55 - 1415601 ____A C:\Users\Richy Spitz\Downloads\spitz filter3 (1).osm
2012-05-18 18:01 - 2012-05-18 18:01 - 0285110 ____A C:\Windows\msxml4-KB954430-enu.LOG
2012-05-18 18:01 - 2012-05-18 18:01 - 0000000 ____D C:\Program Files\MSXML 4.0
2012-05-18 18:01 - 2012-05-18 18:00 - 0292532 ____A C:\Windows\msxml4-KB973688-enu.LOG
2012-05-18 15:52 - 2012-05-18 15:52 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{BF6A7129-82F9-4E75-8F6F-D80091A03584}
2012-05-18 15:52 - 2012-05-18 15:51 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{C16449E3-E66F-4228-A767-21C3603C08E4}
2012-05-18 03:08 - 2012-05-08 04:02 - 0000000 ____D C:\Users\Richy Spitz\Documents\LIBRARY12
2012-05-18 02:37 - 2012-05-18 02:37 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{9ECD3DF7-028E-479C-ABD6-CB58C8413D5C}
2012-05-18 02:37 - 2012-05-18 02:37 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{37B66A1D-0537-44D0-AFE9-9549DFCC64E2}
2012-05-17 05:44 - 2012-05-17 04:57 - 0000000 ____D C:\Users\All Users\EPSON
2012-05-17 05:43 - 2011-04-05 09:37 - 0000000 ____D C:\Program Files\InstallShield Installation Information
2012-05-17 05:39 - 2012-05-17 05:39 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{BBBE67F1-FD7F-465B-87FF-9C3FBE6A251F}
2012-05-17 05:39 - 2012-05-17 05:38 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{912208FD-320B-4FB8-93FC-668E3806CB1A}
2012-05-17 04:58 - 2009-07-13 18:37 - 0000000 ____D C:\Windows\System32\DriverStore
2012-05-17 04:56 - 2012-05-17 04:56 - 0000000 ____D C:\Program Files\EPSON
2012-05-17 04:44 - 2012-03-12 10:53 - 0000000 ____D C:\Users\Richy Spitz\AppData\Roaming\Mp3tag
2012-05-17 04:19 - 2012-05-16 04:47 - 0000000 ____D C:\Users\Richy Spitz\Documents\PHILI REMAKES
2012-05-17 03:48 - 2012-05-17 03:48 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{CF36AD0E-744F-4658-A311-F5F0FF7FEB28}
2012-05-17 03:47 - 2012-05-17 03:47 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{353CB2F9-E65E-42D3-9756-2B7EE0969E7E}
2012-05-17 03:44 - 2012-05-17 03:44 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{3D1A3331-E7BD-4547-B797-B7A6E5B96B99}
2012-05-17 03:44 - 2012-05-17 03:44 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{12F7EFFB-1F50-4A95-A837-66EB6EB5590B}
2012-05-16 11:23 - 2012-05-16 11:22 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{72146120-D2CA-4387-9DCA-830AD2A9C9DF}
2012-05-16 11:22 - 2012-05-16 11:22 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{F07ED8B3-DB80-4A57-A7A7-CCE254FD4E59}
2012-05-16 09:19 - 2009-07-13 20:34 - 0017168 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2012-05-16 09:19 - 2009-07-13 20:34 - 0017168 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2012-05-16 06:57 - 2012-04-10 13:16 - 0000000 ____D C:\Users\Richy Spitz\Documents\KnobMan
2012-05-16 02:42 - 2012-05-16 02:42 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{F348C3CD-66E1-4EAA-8518-588E030D72A4}
2012-05-16 02:42 - 2012-05-16 02:42 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{0C383942-C434-4CF6-B187-04285D58C257}
2012-05-16 02:40 - 2012-05-16 02:40 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{0C662A33-055C-468A-B6B0-9212A7AF883C}
2012-05-15 13:11 - 2012-05-15 13:14 - 0095109 ____A C:\Users\Richy Spitz\Downloads\RRL1.osm
2012-05-15 09:29 - 2012-05-15 09:28 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{C20AD164-A513-4A72-8227-1DDC797398E7}
2012-05-15 09:28 - 2012-05-15 09:28 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{51BB96C8-08CA-4523-9A86-312C186C6FEF}
2012-05-15 09:28 - 2011-03-21 12:25 - 0000000 ____D C:\Windows\Minidump
2012-05-15 09:27 - 2011-02-11 15:07 - 157433697 ____A C:\Windows\MEMORY.DMP
2012-05-15 07:58 - 2012-04-18 04:39 - 0000000 ____D C:\Users\Richy Spitz\Desktop\phili
2012-05-14 10:58 - 2012-05-14 09:32 - 214510666 ____A C:\Users\Richy Spitz\Downloads\EZ Rollers Drum&Bass Refill.rar
2012-05-14 06:29 - 2011-02-07 14:52 - 0000000 ____D C:\Windows\Downloaded Installations
2012-05-14 06:28 - 2012-05-14 06:25 - 0000000 ____D C:\Program Files\Nomad Factory
2012-05-14 06:25 - 2012-05-14 06:25 - 0000000 ____D C:\Users\Richy Spitz\Documents\Nomad Factory
2012-05-14 06:21 - 2012-05-14 06:21 - 0000000 ____D C:\Users\Richy Spitz\AppData\Roaming\UVIWorkstation
2012-05-14 06:19 - 2012-05-08 04:31 - 0000000 ____D C:\Users\All Users\Lavasoft
2012-05-14 06:14 - 2012-05-14 06:13 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{75C6716E-7D85-4590-9225-1F9B3B04556F}
2012-05-14 06:13 - 2012-05-14 06:13 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{427EE75C-7BD1-459C-B4E1-FAFEC1AFC411}
2012-05-14 06:13 - 2012-05-08 05:05 - 0004890 ____A C:\aaw7boot.log
2012-05-14 06:13 - 2011-01-20 09:58 - 0020608 ____A C:\Windows\PFRO.log
2012-05-14 06:10 - 2012-05-14 06:10 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\Conduit
2012-05-14 06:10 - 2011-01-19 22:49 - 0000000 ____D C:\Program Files\uTorrentBar
2012-05-14 06:10 - 2011-01-18 21:01 - 0000000 ____D C:\Users\Richy Spitz\AppData\LocalLow
2012-05-14 04:52 - 2012-05-14 04:52 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{E7EFBE0A-034D-4E78-ABE9-96EC092F0BBF}
2012-05-14 04:52 - 2012-05-14 04:51 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{E9099BF4-B587-4E6D-B887-757F9C26DA20}
2012-05-14 04:50 - 2011-08-24 06:59 - 0000000 ____D C:\Users\All Users\MFAData
2012-05-14 04:27 - 2012-05-14 04:27 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{CC72D878-564C-44FA-A4CE-4B8542460E73}
2012-05-14 04:27 - 2012-05-14 04:27 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{04980081-BAF1-442D-9DA3-8E5D4A868B3E}
2012-05-14 03:54 - 2012-05-14 03:36 - 166261891 ____A C:\Users\Richy Spitz\Downloads\ITCOTKC 4.rar
2012-05-14 03:54 - 2012-05-14 03:35 - 164258324 ____A C:\Users\Richy Spitz\Downloads\ITCOTKC 3.rar
2012-05-14 03:53 - 2012-05-14 03:35 - 153789088 ____A C:\Users\Richy Spitz\Downloads\ITCOTCK2.rar
2012-05-14 03:51 - 2012-05-14 03:33 - 171963538 ____A C:\Users\Richy Spitz\Downloads\ITCOTCK1.rar
2012-05-14 03:50 - 2012-05-14 03:36 - 102007543 ____A C:\Users\Richy Spitz\Downloads\ITCOTKC 5.rar
2012-05-14 03:35 - 2012-05-14 03:35 - 0062826 ____A C:\Users\Richy Spitz\Downloads\download (1).htm
2012-05-14 02:53 - 2012-05-14 02:53 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{A385B7F4-48CA-441C-BA44-804E301565EB}
2012-05-14 02:53 - 2012-05-14 02:53 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{30ED0779-B2DD-45CA-A7BD-07FD7FD7928B}
2012-05-13 13:52 - 2012-05-13 13:22 - 0000000 ____D C:\Users\Richy Spitz\Downloads\Drive
2012-05-13 13:03 - 2012-05-13 13:02 - 9108211 ____A C:\Users\Richy Spitz\Downloads\Rob.Papen.Predator.VSTi.v1.1.Incl.Keygen-AiR.rar
2012-05-13 12:34 - 2012-04-28 02:49 - 0000008 ____A C:\Windows\System32\mssrv32.vxd
2012-05-13 09:42 - 2012-05-13 09:41 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{89E043D0-3DA8-4050-966F-9FAAD2885B2C}
2012-05-13 09:41 - 2012-05-13 09:41 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{76E14099-00B5-4266-832D-E96DFB6B6903}
2012-05-13 03:42 - 2012-05-13 03:42 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{9212D1CD-8599-49DB-AFFF-02159C61856D}
2012-05-13 03:42 - 2012-05-13 03:42 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{888A1379-49C1-489E-A89A-3B7FC43D587D}
2012-05-12 08:24 - 2012-05-12 08:21 - 0000000 ____D C:\Users\Richy Spitz\Downloads\Nomad Factory Complete Bundle
2012-05-11 08:26 - 2012-05-11 08:26 - 0000000 ____D C:\Users\All Users\PACE
2012-05-11 08:26 - 2012-05-11 08:26 - 0000000 ____D C:\Program Files\Common Files\PACE
2012-05-11 08:20 - 2012-05-11 08:19 - 0000000 ____D C:\Program Files\UVI Workstation
2012-05-11 08:20 - 2012-03-28 06:03 - 0000000 ____D C:\Program Files\Propellerhead
2012-05-11 08:19 - 2012-05-11 08:19 - 0000000 ____D C:\Program Files\UVISoundBanks
2012-05-11 08:19 - 2012-05-11 08:19 - 0000000 ____D C:\Program Files\Common Files\UVI
2012-05-11 06:24 - 2009-07-13 18:37 - 0000000 ____D C:\Windows\Microsoft.NET
2012-05-11 06:03 - 2009-07-13 18:37 - 0000000 ____D C:\Windows\system
2012-05-11 03:35 - 2012-05-11 03:35 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{F8A05B90-592B-4A90-A630-CA43C3BF06D7}
2012-05-11 03:35 - 2012-05-11 03:35 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{DB85E96D-FB9A-4915-8885-B24A5E55170B}
2012-05-10 12:17 - 2012-05-10 12:16 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{C19D284E-17C2-4359-BFE6-5F8BF33BD999}
2012-05-10 12:16 - 2012-05-10 12:16 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{5AF81F6A-7A19-4BAE-B5FE-C7C91A016EF3}
2012-05-10 12:15 - 2009-07-13 20:33 - 2406352 ____A C:\Windows\System32\FNTCACHE.DAT
2012-05-10 12:13 - 2009-07-13 23:50 - 0000000 ____D C:\Program Files\Windows Journal
2012-05-10 08:29 - 2011-03-09 01:45 - 0000000 ____D C:\Users\Richy Spitz\Desktop\x ports
2012-05-10 06:38 - 2011-07-05 06:24 - 0000000 ___HD C:\Users\Richy Spitz\AppData\Roaming\Publish Providers
2012-05-10 03:52 - 2012-05-09 13:41 - 0317916 ____A C:\Users\Richy Spitz\Documents\ROCK THAT.rns
2012-05-10 02:32 - 2012-02-24 08:00 - 55656824 ____A (Microsoft Corporation) C:\Windows\System32\MRT.exe
2012-05-10 02:17 - 2011-01-19 11:07 - 0000000 ____D C:\Program Files\Microsoft Silverlight
2012-05-10 02:10 - 2012-05-10 02:10 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{EEE04563-7058-4AEC-AF7E-8CF3840258D2}
2012-05-10 02:10 - 2012-05-10 02:10 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{0D6DE276-9549-471D-8085-F5BB4D04EB9D}
2012-05-10 02:09 - 2012-05-09 12:23 - 0000000 ____D C:\Program Files\hpmonitor
2012-05-09 12:23 - 2012-05-09 12:23 - 0000253 ____A C:\user.js
2012-05-09 12:23 - 2012-05-09 12:23 - 0000000 ____D C:\Program Files\BabylonToolbar
2012-05-09 12:22 - 2012-05-09 12:22 - 0000000 ____D C:\Users\Richy Spitz\AppData\Roaming\Babylon
2012-05-09 12:22 - 2012-05-09 12:22 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\Babylon
2012-05-09 12:22 - 2012-05-09 12:22 - 0000000 ____D C:\Users\All Users\Babylon
2012-05-09 11:40 - 2012-05-09 11:40 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{DF8540CF-6251-43C2-BAB0-F79A770A47F6}
2012-05-09 11:40 - 2012-05-09 11:40 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{002CBA91-F490-4BF8-84F4-655F91A5C19E}
2012-05-09 11:36 - 2012-01-20 06:15 - 0000000 ____D C:\Program Files\Mozilla Firefox
2012-05-09 05:48 - 2012-05-08 11:26 - 0563106 ____A C:\Users\Richy Spitz\Documents\back.rns
2012-05-08 12:53 - 2012-05-08 12:53 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{9797B15F-EBC3-4733-B1C5-2AC9541735C4}
2012-05-08 12:53 - 2012-05-08 12:52 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{7E8A4AD1-3B4A-4352-A2BE-D0683F879893}
2012-05-08 10:43 - 2012-05-08 10:43 - 0334990 ____A C:\Users\Richy Spitz\Documents\si si.rns
2012-05-08 08:27 - 2011-06-15 15:20 - 0758986 ____A C:\Users\Richy Spitz\Documents\suv.rns
2012-05-08 08:23 - 2011-02-11 08:30 - 0150108 ____A C:\Users\Richy Spitz\Documents\spanish bouncer.rns
2012-05-08 05:28 - 2011-08-31 07:48 - 1530534 ____A C:\Users\Richy Spitz\Documents\EGG CUPS.rns
2012-05-08 05:06 - 2012-05-08 05:06 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{1EDF2D70-CC21-4E5A-8558-F093A3B70BB6}
2012-05-08 05:06 - 2012-05-08 05:06 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{069C7C0F-8925-4128-B8DE-BFDA701B8DB5}
2012-05-08 05:01 - 2012-01-23 14:03 - 0000000 ____D C:\Users\Richy Spitz\Downloads\28 Weeks Later (2007)
2012-05-08 04:36 - 2012-05-08 04:36 - 0101720 ____A (Sunbelt Software) C:\Windows\System32\Drivers\SBREDrv.sys
2012-05-08 04:33 - 2012-05-08 04:33 - 0000064 ____A C:\Windows\System32\rp_stats.dat
2012-05-08 04:33 - 2012-05-08 04:33 - 0000044 ____A C:\Windows\System32\rp_rules.dat
2012-05-08 04:32 - 2012-05-08 04:32 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\adaware
2012-05-08 04:32 - 2012-05-08 04:32 - 0000000 ____D C:\Users\All Users\Ad-Aware Browsing Protection
2012-05-08 04:32 - 2012-05-08 04:32 - 0000000 ____D C:\Program Files\Toolbar Cleaner
2012-05-08 04:31 - 2012-05-08 04:31 - 0000000 ____D C:\Program Files\Lavasoft
2012-05-08 04:31 - 2012-05-08 04:30 - 1032320 ____A C:\Users\Richy Spitz\Documents\TMP2D6F.tmp
2012-05-08 03:20 - 2012-05-08 03:19 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{C73405B2-DC0B-494A-BA41-D152B135292A}
2012-05-08 03:19 - 2012-05-08 03:18 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{62C1E032-0FC2-4531-AFFE-8D21D4F06D25}
2012-05-08 01:48 - 2012-05-08 01:48 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{C0D532AF-6DBD-4A8B-B865-D4F5A44B3E74}
2012-05-08 01:48 - 2012-05-08 01:46 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{D17C8768-EF86-40A8-9785-6DA13103E1BB}
2012-05-07 00:59 - 2012-05-07 00:58 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{412DAC80-2BBC-4565-BE73-6912551D40CD}
2012-05-07 00:58 - 2012-05-07 00:57 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{84C587BC-B7B3-42AE-A492-7F55E990A8A9}
2012-05-06 08:49 - 2012-05-06 08:29 - 0000000 ____D C:\Users\Richy Spitz\Downloads\[ UsaBit.com ] - The.Devils.Double.LIMITED.2011.BRRip.XviD-playXD
2012-05-06 08:35 - 2012-05-06 08:32 - 0000000 ____D C:\Users\Richy Spitz\Downloads\The Inbetweener Movie 2011 DVDRip XviD AC3-26K
2012-05-06 08:23 - 2012-05-06 08:11 - 0000000 ____D C:\Users\Richy Spitz\Downloads\Limitless.2011.UNRATED.480p.BRRip.XviD.AC3-AsA
2012-05-06 05:31 - 2012-05-06 05:31 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{1C75AB78-915C-403C-9A30-5C89B28989A7}
2012-05-06 05:31 - 2012-05-06 05:29 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{576C26C6-ABE1-4FD3-B124-C893ADFEA4EE}
2012-05-06 05:27 - 2012-05-06 05:27 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{1F457383-D5EC-4C54-B285-BB584DAD9616}
2012-05-06 05:25 - 2012-05-06 05:25 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{C12384EB-06EA-4F6C-A97A-0E1E62813F4C}
2012-05-06 05:20 - 2012-05-06 05:20 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{C7703F66-09A4-445E-938A-2B73ED759AEF}
2012-05-05 12:18 - 2012-05-05 12:18 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{DBF057D1-4705-4422-B945-6B70275B32A5}
2012-05-05 12:18 - 2012-05-05 12:17 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{9FC6A7A7-4B22-4817-ADED-DC8124E7B83A}
2012-05-05 10:41 - 2012-05-05 10:41 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{A39276F5-8AB6-4E05-A6E1-65B21CB614A3}
2012-05-05 10:41 - 2012-05-05 10:40 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{BF50E43D-DAD7-44C8-A084-93C1F4AB9891}
2012-05-05 05:08 - 2012-05-05 05:08 - 0000000 ____D C:\Users\Richy Spitz\Downloads\Hanna.2011.R5.LiNE.AC3.XViD-EP1C
2012-05-05 01:58 - 2012-05-05 01:58 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{E33B2F4F-4629-47CA-9FBB-DD1D5111338F}
2012-05-05 01:58 - 2012-05-05 01:57 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{C0103425-CC9B-4175-AFFA-F6EE2DDC89E4}
2012-05-05 01:55 - 2012-05-05 01:55 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{26BC3900-56BF-45E1-90AC-8FB0E1B0642C}
2012-05-05 01:53 - 2012-05-05 01:53 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{8334655B-8A37-4DB6-8817-35F89C09FA5F}
2012-05-04 16:51 - 2012-05-04 16:51 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{D9822411-B9B9-4554-87D6-255C34B59EE6}
2012-05-04 16:51 - 2012-05-04 16:49 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{B8BDFD3F-1058-4889-A72B-FD2717B8E8CF}
2012-05-04 15:45 - 2012-05-04 15:45 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{B7799057-7409-43C0-A680-92E6BE14F929}
2012-05-04 15:45 - 2012-05-04 15:44 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{5F2FB24B-11EF-4B7F-A307-D911B826B7FF}
2012-05-04 12:51 - 2012-05-04 12:51 - 0000000 ____D C:\Users\All Users\Mozilla
2012-05-04 12:51 - 2012-05-04 12:51 - 0000000 ____D C:\Program Files\Mozilla Maintenance Service
2012-05-04 12:49 - 2012-05-04 12:49 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{2F91F9AE-6A58-4E2A-ACB2-88DCF61271E7}
2012-05-04 12:49 - 2012-05-04 12:48 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{9F5D8A93-5412-4880-A326-21B893CAD6BC}
2012-05-04 12:03 - 2012-03-12 08:28 - 0000000 ____D C:\Users\Richy Spitz\Desktop\Richy Spitz - Make Or Break
2012-05-04 08:23 - 2011-12-22 06:37 - 1141192 ____A C:\Users\Richy Spitz\Documents\STATIONX.rns
2012-05-04 04:15 - 2012-05-04 04:15 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{4B0E5D97-5445-4D17-831C-29E68101DC7E}
2012-05-04 04:14 - 2012-05-04 04:13 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{D5C8A43D-E8A2-42B2-AD62-6327AAB9CCBE}
2012-05-04 02:35 - 2012-05-04 02:35 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{8DEAE378-CE22-4DE9-B5A9-781D4943E7F5}
2012-05-04 02:35 - 2012-05-04 02:35 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{79989BC7-3F88-4179-B033-FAF3BCA0C6B6}
2012-05-04 02:31 - 2012-05-04 02:31 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{58BB5B8C-D85B-4155-B921-85BE43AF8B3A}
2012-05-04 02:29 - 2012-05-04 02:29 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{A63F737B-B846-4A5D-8D54-984B7645BB49}
2012-05-03 12:08 - 2012-05-03 12:07 - 0000000 ____D C:\Users\Richy Spitz\Downloads\Mission Impossible 4 Ghost Protocol (2011) DVDRip XviD-MAXSPEED
2012-05-03 04:12 - 2012-05-03 04:12 - 0000155 ____A C:\Users\Richy Spitz\Documents\wap.txt
2012-05-03 03:20 - 2012-05-03 03:19 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{33504B96-60DE-4C5D-8779-F825D6554F78}
2012-05-03 03:19 - 2012-05-03 03:18 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{A810EBB6-0A92-4024-954A-D632AFD7AA72}
2012-05-02 16:48 - 2012-05-02 16:48 - 0000000 ____D C:\Users\Richy Spitz\AppData\Roaming\Futucraft
2012-05-02 05:23 - 2012-05-02 05:23 - 3713529 ____A C:\Users\Richy Spitz\Downloads\arpagiate.exe
2012-05-02 05:23 - 2012-05-02 05:23 - 2097152 ____A C:\Users\Richy Spitz\Downloads\tri2KtableSM.dat
2012-05-02 05:23 - 2012-05-02 05:23 - 2097152 ____A C:\Users\Richy Spitz\Downloads\saw2KtableSM.dat
2012-05-02 05:09 - 2012-05-02 05:08 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{5F8F2E77-7A68-4A95-B44A-D88157380CE3}
2012-05-02 05:08 - 2012-05-02 05:07 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{CE730BF9-602B-4921-A989-D11F3F5CCD2D}
2012-05-02 02:54 - 2012-05-02 02:54 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{91F0C445-02EF-45BE-822A-0A67643F2B01}
2012-05-01 02:42 - 2012-05-01 02:42 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{8902EAC3-E0DD-4A0A-9A46-30A92ED62D1E}
2012-04-30 15:11 - 2011-02-07 14:44 - 0000000 ____D C:\Program Files\TextAloud
2012-04-30 02:53 - 2012-04-30 02:53 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{3AD52A7F-1689-43DC-863D-AB3448335A24}
2012-04-29 15:48 - 2012-03-06 09:58 - 0000000 ____D C:\Users\Richy Spitz\Desktop\Richard Adams - Urban Space Music1
2012-04-29 11:22 - 2011-08-22 06:36 - 58413344 ____A C:\Users\Richy Spitz\Downloads\1976_-_Le_Petit_Violon_De_Mr._Gr__goire.rar
2012-04-29 11:07 - 2011-09-01 07:30 - 0296816 ____A C:\Users\Richy Spitz\Documents\bullit.rns
2012-04-29 10:42 - 2012-04-29 10:42 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{4677E0E7-CF25-46F6-9FF9-FB8069001E2D}
2012-04-29 10:36 - 2009-07-13 18:37 - 0000000 ____D C:\Windows\System32\NDF
2012-04-29 10:34 - 2012-04-29 10:34 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\ElevatedDiagnostics
2012-04-29 10:17 - 2012-04-29 10:17 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{1243ACCE-A53A-4861-B3AD-0F15F74CF92B}
2012-04-29 07:06 - 2012-04-29 07:06 - 0000000 ____D C:\Users\Richy Spitz\AppData\Roaming\Woyt
2012-04-29 07:06 - 2012-04-29 07:06 - 0000000 ____D C:\Users\Richy Spitz\AppData\Roaming\Avboed
2012-04-29 06:27 - 2012-04-29 06:24 - 58453801 ____A C:\Users\Richy Spitz\Downloads\Remix_Pack_Maxigroove_Wounderful_Life.rar
2012-04-29 04:22 - 2012-04-29 04:22 - 0739864 ____A (Google Inc.) C:\Users\Richy Spitz\Downloads\ChromeSetup(1).exe
2012-04-29 04:09 - 2012-04-29 04:09 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{E34EA5A1-518D-4AC0-A515-6C0FED7D578D}
2012-04-29 04:09 - 2012-04-29 04:09 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{A4D2CCE4-1717-49E3-9902-F5BEDDFDD509}
2012-04-29 03:55 - 2012-04-29 03:55 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{C10E9CC9-0423-44A9-A47C-641E16CA40D5}
2012-04-29 03:55 - 2012-04-29 03:54 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{4CD501C0-988A-478A-A21C-D192DF6EEC7F}
2012-04-29 03:54 - 2011-09-20 14:33 - 0000362 _RASH C:\Users\All Users\ntuser.pol
2012-04-28 15:46 - 2012-04-28 13:39 - 228733860 ____A (GOG.com ) C:\Users\Richy Spitz\setup_constructor.exe
2012-04-28 13:43 - 2012-04-28 13:39 - 3858678 ____A C:\Users\Richy Spitz\Constructor_Manual.zip
2012-04-28 11:53 - 2012-04-28 11:53 - 0232258 ____A C:\Users\Richy Spitz\Downloads\cytoSonicStylo.osm
2012-04-28 11:49 - 2012-04-28 11:49 - 3321012 ____A C:\Users\Richy Spitz\Downloads\Drum Machine.osm
2012-04-28 11:17 - 2012-04-28 11:02 - 97898872 ____A C:\Users\Richy Spitz\Downloads\Doctor_P_feat_Jenna_G_-_Neon_(remix_competition).zip
2012-04-28 09:40 - 2012-04-28 09:27 - 0000000 ____D C:\Users\Richy Spitz\Downloads\Family Guy Season 8 Complete
2012-04-28 09:24 - 2012-04-28 09:24 - 0021391 ____A C:\Users\Richy Spitz\Downloads\[kat.ph]family.guy.season.8.complete.torrent
2012-04-28 09:22 - 2012-04-28 09:21 - 0000000 ____D C:\Users\Richy Spitz\Downloads\Family Guy S10.E1-7
2012-04-28 07:41 - 2012-04-28 07:40 - 0525904 ____A C:\Users\Richy Spitz\Downloads\Scorpio61s_Sample_Mix_Vol_60.mp3.sfk
2012-04-28 07:38 - 2012-04-28 07:22 - 36639885 ____A C:\Users\Richy Spitz\Downloads\Scorpio61s_Sample_Mix_Vol_60.mp3
2012-04-28 05:20 - 2012-04-28 05:14 - 60644326 ____A C:\Users\Richy Spitz\Downloads\WA_FPNews.rar
2012-04-28 05:18 - 2012-04-28 05:16 - 39217226 ____A C:\Users\Richy Spitz\Downloads\AMaquina.rar
2012-04-28 04:11 - 2012-04-28 03:38 - 59731351 ____A C:\Users\Richy Spitz\Downloads\Astromusic.rar
2012-04-28 03:59 - 2012-04-28 03:53 - 81068441 ____A C:\Users\Richy Spitz\Downloads\WATEKE! Blue Mountain Eagle Blue Mountain Eagle, LP, 1970.rar
2012-04-28 03:55 - 2012-04-28 03:47 - 85788060 ____A C:\Users\Richy Spitz\Downloads\Aunt Mary - Janus (1973).rar
2012-04-28 03:55 - 2012-04-28 03:46 - 86746074 ____A C:\Users\Richy Spitz\Downloads\1967 - Ten Years After.rar
2012-04-28 03:54 - 2012-04-28 03:47 - 92283705 ____A C:\Users\Richy Spitz\Downloads\Horse-1970 uk.zip
2012-04-28 03:41 - 2012-04-28 03:37 - 75363338 ____A C:\Users\Richy Spitz\Downloads\Charles Dodge - Synthesized Voices (1976).rar
2012-04-28 03:18 - 2012-04-28 03:12 - 95306566 ____A C:\Users\Richy Spitz\Downloads\CHUTE LIBRE.rar
2012-04-28 03:17 - 2012-04-28 03:11 - 93733403 ____A C:\Users\Richy Spitz\Downloads\ORCHESTRAL PARTY 1.rar
2012-04-28 03:15 - 2012-04-28 03:13 - 25253277 ____A C:\Users\Richy Spitz\Downloads\STELLA- POURQUOI PAS MOI.rar
2012-04-28 03:13 - 2012-04-28 03:09 - 85799363 ____A C:\Users\Richy Spitz\Downloads\MAXI MUSIC TM3028.rar
2012-04-28 03:03 - 2012-04-28 03:02 - 10030501 ____A C:\Users\Richy Spitz\Downloads\Richy Spitz - Deaf Remix (2).mp3
2012-04-28 02:49 - 2011-07-06 03:19 - 0000000 ____D C:\Program Files\Drumagog40
2012-04-28 02:34 - 2012-04-28 02:34 - 0418464 ____A (Adobe Systems Incorporated) C:\Windows\System32\FlashPlayerApp.exe
2012-04-28 02:34 - 2011-08-30 08:30 - 0070304 ____A (Adobe Systems Incorporated) C:\Windows\System32\FlashPlayerCPLApp.cpl
2012-04-28 02:23 - 2012-04-28 02:23 - 0175095 ____A C:\Users\Richy Spitz\Downloads\112dB.Morgana.v1.2.3.VSTi.REPA.keygen.by.DYNAMiCS.zip
2012-04-28 02:16 - 2012-04-28 02:16 - 0000000 ____D C:\Users\All Users\112dB
2012-04-28 02:16 - 2011-11-30 15:19 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\112dB
2012-04-28 02:16 - 2011-11-30 13:52 - 0000000 ____D C:\Program Files\112dB
2012-04-28 02:15 - 2012-04-28 02:15 - 1700352 ____A (Microsoft Corporation) C:\Windows\System32\gdiplus.dll
2012-04-28 02:14 - 2012-04-28 02:00 - 42215901 ____A C:\Users\Richy Spitz\Downloads\112dB.Morgana.v1.2.3.VSTi.rar
2012-04-27 15:33 - 2012-04-27 15:24 - 219532062 ____A C:\Users\Richy Spitz\Downloads\musicradar-modular-synth-samples.zip
2012-04-27 15:32 - 2012-04-27 15:28 - 111344631 ____A C:\Users\Richy Spitz\Downloads\musicradar-jensx1000-samples.zip
2012-04-27 15:22 - 2012-04-27 15:17 - 96856990 ____A C:\Users\Richy Spitz\Downloads\O.V Wright - Memphis Unlimited (2).zip
2012-04-27 15:13 - 2012-04-27 15:13 - 0000000 ____D C:\Users\Richy Spitz\Downloads\112dB.Morgana.v1.2.3
2012-04-27 15:12 - 2012-04-27 14:34 - 66726762 ____A C:\Users\Richy Spitz\Downloads\112dB.Morgana.v1.2.3..zip
2012-04-27 15:02 - 2012-04-27 14:42 - 123595505 ____A C:\Users\Richy Spitz\Downloads\Badwater_Bridge_-_It_s_Alright_Tonight_%281972-1978%29_%282001%29_%5BMP3%5D_ES_3599526.rar
2012-04-27 14:30 - 2012-04-27 14:09 - 37684605 ____A C:\Users\Richy Spitz\Downloads\112dB.Morgana.VSTi.v1.2.7.873-ViP (1).rar
2012-04-27 14:01 - 2012-04-27 14:00 - 0000000 ____D C:\Users\Richy Spitz\Downloads\Alchemy
2012-04-27 08:28 - 2012-04-27 08:28 - 1168181 ____A C:\Users\Richy Spitz\Downloads\The_Pilgrim_WIN.zip
2012-04-27 06:13 - 2012-04-27 06:13 - 0060070 ____A C:\Users\Richy Spitz\Downloads\Bitmap_Knob_VU_Meter%28cytoUpdate%29.osm
2012-04-26 07:26 - 2012-04-26 07:26 - 0001877 ____A C:\Users\Richy Spitz\Downloads\Midi_Triggered_Led.osm
2012-04-26 03:34 - 2012-04-26 03:34 - 6097048 ____A C:\Users\Richy Spitz\Downloads\LAST CON 2.mp3
2012-04-26 01:55 - 2012-04-26 01:55 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{2A9FBCD0-7D96-4F23-B8A4-27E7E1E2B8C6}
2012-04-26 01:55 - 2012-04-26 01:55 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{28C7444F-A782-4669-9100-2E4C4699D0D1}
2012-04-25 07:55 - 2012-04-25 07:55 - 0020136 ____A C:\Users\Richy Spitz\Downloads\approgate.osm
2012-04-25 07:35 - 2012-04-25 07:35 - 2581491 ____A C:\Users\Richy Spitz\Downloads\mer1.zip
2012-04-25 07:34 - 2012-04-25 07:34 - 0022000 ____A C:\Users\Richy Spitz\Downloads\multi_mode_bi-quad_filter.osm
2012-04-25 06:23 - 2012-04-25 06:23 - 0000000 ____D C:\Program Files\Scanned Synth Pro
2012-04-25 06:21 - 2012-04-25 06:15 - 0000000 ____D C:\Users\Richy Spitz\Downloads\Humanoidsounds.Scanned.Synth.Pro.VSTi.v2.0.13.Incl.Keygen-AiR
2012-04-25 06:13 - 2012-04-25 06:13 - 7816216 ____A C:\Users\Richy Spitz\Downloads\Humanoidsounds.Scanned.Synth.Pro.VSTi.v2.0.13.Incl.Keygen-AiR.rar
2012-04-25 05:52 - 2012-04-25 05:52 - 3162595 ____A C:\Users\Richy Spitz\Downloads\apocolypse.mp3
2012-04-25 05:14 - 2012-04-25 05:07 - 42647948 ____A C:\Users\Richy Spitz\Downloads\vocal_feedback.wav
2012-04-25 05:14 - 2012-04-25 05:07 - 42647948 ____A C:\Users\Richy Spitz\Downloads\lead_vocals.wav
2012-04-25 05:13 - 2012-04-25 05:07 - 42647948 ____A C:\Users\Richy Spitz\Downloads\vocal_effects.wav
2012-04-25 05:13 - 2012-04-25 05:07 - 42647948 ____A C:\Users\Richy Spitz\Downloads\synth.wav
2012-04-25 05:10 - 2012-04-25 05:06 - 42647948 ____A C:\Users\Richy Spitz\Downloads\bg_vocals.wav
2012-04-25 04:40 - 2012-04-25 04:40 - 6728039 ____A C:\Users\Richy Spitz\Downloads\MICRO-ORGANISM VSTi.zip
2012-04-25 04:04 - 2012-04-25 04:03 - 10030501 ____A C:\Users\Richy Spitz\Downloads\Richy Spitz - Deaf Remix (1).mp3
2012-04-25 01:54 - 2012-04-25 01:54 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{FAB89B92-F7F5-4C9B-9FEA-5A3A1592EF00}
2012-04-25 01:54 - 2012-04-25 01:54 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{CC7F0FDD-D92C-46BE-B762-CC062E76075F}
2012-04-24 15:24 - 2012-04-24 15:24 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{A8C3E495-2109-4E5F-B924-DBE61A2E957C}
2012-04-24 15:24 - 2012-04-24 15:24 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{65C5F89D-B937-402B-867C-57D8ABD7BCBF}
2012-04-24 14:17 - 2012-04-24 14:17 - 0131774 ____A C:\Users\Richy Spitz\Downloads\X-VI_beta12.osm
2012-04-24 03:58 - 2012-04-24 03:58 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{4107FD49-BE1F-4533-A770-4276B1D9BE99}
2012-04-24 03:52 - 2012-04-24 03:52 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{49C8E258-8256-4582-AC83-182E0F5342A4}
2012-04-23 12:12 - 2012-04-23 12:12 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{AB899CB7-05F0-4F80-A9B3-7A4D900911BF}
2012-04-23 11:41 - 2012-04-23 11:41 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{9C4AFDAF-9D72-43A5-9E41-B39AFFC5A156}
2012-04-23 09:37 - 2012-04-23 09:37 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\www.datadevelopment.co.uk
2012-04-23 09:35 - 2012-04-23 09:35 - 0000000 _RASH C:\MSDOS.SYS
2012-04-23 09:35 - 2012-04-23 09:35 - 0000000 _RASH C:\IO.SYS
2012-04-23 09:02 - 2012-04-23 08:53 - 0000000 ____D C:\Program Files\Jnes
2012-04-23 08:53 - 2012-04-23 08:53 - 0000920 ____A C:\Users\Mcx1-RICHYSPITZ-PC\Desktop\Jnes.lnk
2012-04-23 07:02 - 2012-04-23 07:02 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{761215A7-42D5-49A6-888D-69A395D4CEBF}
2012-04-23 07:02 - 2012-04-23 07:02 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{432DF693-5210-49A6-B84F-13B92F7575F9}
2012-04-23 02:34 - 2012-04-23 02:34 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{751D7763-4C5F-41A7-8EA6-BA961BE7224B}
2012-04-23 02:34 - 2012-04-23 02:33 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{CCE4EB05-ADE1-4D38-8733-1BB75AA3AF8E}
2012-04-22 06:32 - 2012-04-22 06:31 - 10030501 ____A C:\Users\Richy Spitz\Downloads\Richy Spitz - Deaf Remix.mp3
2012-04-22 05:29 - 2012-04-22 05:29 - 0000000 ____D C:\Users\Richy Spitz\Documents\Command & Conquer 3 Tiberium Wars
2012-04-22 05:28 - 2012-04-22 05:22 - 0000000 ____D C:\Users\Richy Spitz\AppData\Roaming\Command & Conquer 3 Tiberium Wars
2012-04-22 05:17 - 2011-01-19 00:04 - 0106165 ____A C:\Windows\DirectX.log
2012-04-22 05:12 - 2012-04-22 05:12 - 0000000 ____D C:\Program Files\Electronic Arts
2012-04-21 16:32 - 2012-04-21 15:57 - 170916252 ____A C:\Users\Richy Spitz\Downloads\PianoOne11.zip
2012-04-21 16:16 - 2012-04-21 16:16 - 0000000 ____D C:\Users\Richy Spitz\AppData\Roaming\Daichi
2012-04-21 16:09 - 2012-04-21 16:05 - 12186716 ____A C:\Users\Richy Spitz\Downloads\stringer_12_setup.zip
2012-04-21 16:07 - 2012-04-21 16:07 - 1334825 ____A C:\Users\Richy Spitz\Downloads\Osiris6.zip
2012-04-21 16:04 - 2012-04-21 16:03 - 1932927 ____A C:\Users\Richy Spitz\Downloads\Silkworm.rar
2012-04-21 16:00 - 2012-04-21 16:00 - 0527617 ____A C:\Users\Richy Spitz\Downloads\Synth1V112.zip
2012-04-21 14:16 - 2012-04-21 12:09 - 0000000 ____D C:\Users\Richy Spitz\Downloads\C&C3 by ReSSuReCtEd
2012-04-21 13:01 - 2012-04-21 13:01 - 0281458 ____A C:\Users\Richy Spitz\Downloads\Chip32.zip
2012-04-21 12:58 - 2012-04-21 12:58 - 0328341 ____A C:\Users\Richy Spitz\Downloads\TAL-U-No-62.zip
2012-04-21 12:56 - 2012-04-21 12:56 - 2566295 ____A C:\Users\Richy Spitz\Downloads\Adonis.zip
2012-04-21 11:52 - 2012-04-21 11:03 - 88848326 ____A C:\Users\Richy Spitz\Downloads\MRP75M (1).rar
2012-04-21 10:33 - 2012-04-21 09:46 - 85684040 ____A C:\Users\Richy Spitz\Downloads\MRGRT7316.rar
2012-04-21 07:20 - 2012-04-21 07:20 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{2FC3F382-FACA-4C17-AE83-91AE5E753A60}
2012-04-21 05:24 - 2012-04-21 05:24 - 0065349 ____A C:\Users\Richy Spitz\Downloads\logos2.png
2012-04-21 04:09 - 2011-06-13 02:00 - 0001221 ____A C:\Users\Richy Spitz\Documents\numbers.txt
2012-04-21 03:48 - 2012-04-21 03:48 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{CF2BAA36-6896-484E-8DE3-6B505CADA564}
2012-04-21 03:48 - 2012-04-21 03:48 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{3AD86380-9272-4A86-A657-A98944631DB6}
2012-04-20 08:50 - 2012-04-20 08:50 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{407939C4-C089-4DB1-B765-C4019081133D}
2012-04-20 03:06 - 2012-04-20 03:06 - 9392695 ____A C:\Users\Richy Spitz\Downloads\words from the wise with ht and solo.mp3
2012-04-19 10:10 - 2012-04-19 10:10 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{2A3C2E99-EE4F-47FF-A4B3-0751ABC2B613}
2012-04-19 10:10 - 2012-04-19 10:10 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{2887D7E1-7D42-4EB6-B3A9-5E370895CF26}
2012-04-19 01:11 - 2012-04-19 01:10 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{476C3850-6016-42BB-9925-909A24673B06}
2012-04-19 01:10 - 2012-04-19 01:10 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{2B2A7F52-1D38-4C40-B293-052728E22111}
2012-04-19 01:08 - 2012-04-19 01:08 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{72B4CED0-4E8E-4E5A-940B-A050A0BBBF61}
2012-04-18 14:03 - 2012-04-18 13:27 - 1041760256 ____A C:\Users\Richy Spitz\Downloads\Family.Guy.Blue.Harvest.2007.DVDRIP.Xvid.JUGGALOTUS420.avi
2012-04-18 13:47 - 2012-04-18 13:31 - 0000000 ____D C:\Users\Richy Spitz\Downloads\Family.Guy.S09E21.Its.a.Trap.DVDRip.XviD-REWARD
2012-04-18 13:30 - 2012-04-18 13:29 - 0000000 ____D C:\Users\Richy Spitz\Downloads\Family Guy - Something something something Darkside - XviD-Reward - A UKB Release
2012-04-18 03:15 - 2012-04-18 03:15 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{83B85A19-C4AA-4EC6-A1CD-47D8748B819B}
2012-04-18 03:15 - 2012-04-18 03:14 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{3C12434A-FAF0-473A-946A-D5DA4EA34EDB}
2012-04-18 03:12 - 2012-04-18 03:12 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{75649BAB-EF7A-47C9-97C3-B97B730940F0}
2012-04-17 15:52 - 2012-04-17 15:03 - 88848326 ____A C:\Users\Richy Spitz\Downloads\MRP75M.rar
2012-04-17 13:38 - 2012-04-17 13:37 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{06A29ED5-AD41-4F5B-8235-7C5617ECE9B2}
2012-04-17 13:37 - 2012-04-17 13:37 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{38FE123C-6FDD-49AA-9069-38D1C083F51E}
2012-04-17 08:01 - 2011-02-24 13:33 - 0147288 ____A C:\Users\Richy Spitz\AppData\Local\GDIPFONTCACHEV1.DAT
2012-04-16 05:58 - 2012-04-16 05:58 - 0106101 ____A C:\Users\Richy Spitz\Downloads\Cool Drum Pad.osm
2012-04-16 05:40 - 2012-04-16 04:57 - 77067056 ____A C:\Users\Richy Spitz\Downloads\Joell_Ortiz-The_Brick__Bodega_Chronicles-2007-C4.rar
2012-04-16 05:02 - 2012-04-16 05:02 - 0187356 ____A C:\Users\Richy Spitz\Downloads\multi-sample.osm
2012-04-16 05:00 - 2012-04-16 05:00 - 0007419 ____A C:\Users\Richy Spitz\Downloads\simple SQR synth 3B.osm
2012-04-16 04:41 - 2012-04-16 04:41 - 0498260 ____A C:\Users\Richy Spitz\Downloads\okh_texture.zip
2012-04-16 03:10 - 2012-04-16 03:10 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{EF172740-EEA1-4F75-909A-719D16F27235}
2012-04-16 03:10 - 2012-04-16 03:10 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{6F94F239-465C-426C-ADE1-3757886E1796}
2012-04-13 03:31 - 2012-04-13 03:31 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{E96DB207-3BDD-49F4-B42E-03BB89AF38A8}
2012-04-13 03:31 - 2012-04-13 03:31 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{BD597F10-805F-4AD5-8D1E-05B158309DA8}
2012-04-12 15:13 - 2012-04-12 15:13 - 0022111 ____A C:\Users\Richy Spitz\Downloads\ACR_Pitchbend_Wheel.osm
2012-04-12 04:01 - 2012-04-12 04:01 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{9584DEA4-AF21-4133-BF1F-38C1FA4CF461}
2012-04-12 04:01 - 2012-04-12 04:01 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{68220880-940C-41DD-AF82-FA44B76522EE}
2012-04-11 13:57 - 2012-04-11 13:57 - 2172926 ____A C:\Users\Richy Spitz\Documents\spitzthing.exe
2012-04-11 10:49 - 2012-04-11 10:49 - 1767272 ____A C:\Users\Richy Spitz\Documents\tiger.exe
2012-04-11 10:46 - 2012-04-11 10:44 - 1767233 ____A C:\Users\Richy Spitz\Documents\tiger1.exe
2012-04-11 10:39 - 2012-04-11 09:58 - 1781429 ____A C:\Users\Richy Spitz\Documents\SynthMaker Application.exe
2012-04-11 07:41 - 2012-04-11 07:41 - 2097152 ____A C:\Users\Richy Spitz\Documents\tri2KtableSM.dat
2012-04-11 07:41 - 2012-04-11 07:41 - 2097152 ____A C:\Users\Richy Spitz\Documents\saw2KtableSM.dat
2012-04-11 07:41 - 2012-04-11 07:41 - 1687813 ____A C:\Users\Richy Spitz\Documents\tigercub.exe
2012-04-11 07:17 - 2012-04-11 07:17 - 0030221 ____A C:\Users\Richy Spitz\Downloads\tigerkbd.osm
2012-04-11 07:08 - 2012-04-11 07:08 - 0027891 ____A C:\Users\Richy Spitz\Downloads\keyboard7.osm
2012-04-11 04:38 - 2012-04-11 04:38 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{DB54C1A9-E33F-4935-B0EC-9618DF0E86C1}
2012-04-11 04:38 - 2012-04-11 04:38 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{76906795-C1C0-455E-B69B-084EBB7708C9}
2012-04-10 14:15 - 2012-04-10 14:15 - 0006563 ____A C:\Users\Richy Spitz\Downloads\simplevis.osm
2012-04-10 13:16 - 2012-04-10 13:16 - 0000000 ____D C:\Users\Richy Spitz\AppData\Roaming\g200kg
2012-04-10 13:15 - 2012-04-10 13:15 - 2573083 ____A C:\Users\Richy Spitz\Downloads\knobman150.zip
2012-04-10 09:56 - 2012-04-10 07:09 - 0125556 ____A C:\Users\Richy Spitz\Documents\spitzsynth.osm
2012-04-10 09:55 - 2012-04-10 09:55 - 0642833 ____A C:\Users\Richy Spitz\Downloads\sinth2_0_1.osm
2012-04-10 09:55 - 2012-04-10 09:55 - 0001355 ____A C:\Users\Richy Spitz\Downloads\bendlab.osm
2012-04-10 09:51 - 2012-04-10 09:51 - 18470666 ____A C:\Users\Richy Spitz\Downloads\analogkit.zip
2012-04-10 09:09 - 2012-04-10 09:08 - 0000000 ____D C:\Users\Richy Spitz\Downloads\Outsim.SynthMaker.Professional.Edition.v2.0.3.Incl.Patch-ViP
2012-04-10 09:04 - 2012-04-10 09:03 - 7057155 ____A C:\Users\Richy Spitz\Downloads\Outsim.SynthMaker.Professional.Edition.v2.0.3.Incl.Patch-ViP.rar
2012-04-10 09:00 - 2012-04-10 09:00 - 1229687 ____A C:\Users\Richy Spitz\Downloads\Outsim_SynthMaker_Professional_Edition_2_0_3_keygen.zip
2012-04-10 08:52 - 2012-04-10 08:52 - 0000000 ____D C:\Users\Richy Spitz\AppData\Roaming\advantage
2012-04-10 08:51 - 2012-04-10 08:51 - 1242025 ____A C:\Users\Richy Spitz\Downloads\Outsim_SynthMaker_Professional_Edition_2_0_3_keygen.exe
2012-04-10 08:40 - 2012-04-10 08:40 - 0739864 ____A (Google Inc.) C:\Users\Richy Spitz\Downloads\ChromeSetup.exe
2012-04-10 08:39 - 2009-07-13 18:37 - 0000000 ____D C:\Windows\System32\config\TxR
2012-04-10 08:37 - 2012-04-10 08:37 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{760A0924-E36E-43C5-90C2-13970F54C851}
2012-04-10 08:37 - 2012-04-10 08:37 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{734AC8F6-2848-4358-A9A2-420B5704F5D0}
2012-04-10 08:33 - 2012-04-08 11:40 - 0000000 ____D C:\Users\Richy Spitz\Downloads\How To Train Your Dragon (2010) [1080p]
2012-04-10 08:33 - 2012-04-08 09:22 - 0000000 ____D C:\Users\Richy Spitz\Downloads\SoundToys Native Effects VST RTAS v3.1.2 AiR
2012-04-10 08:33 - 2011-09-20 14:34 - 0000000 ____D C:\users\Mcx1-RICHYSPITZ-PC
2012-04-10 08:33 - 2011-02-25 04:10 - 0000000 ____D C:\Users\All Users\FLEXnet
2012-04-10 08:33 - 2009-07-13 18:37 - 0000000 ____D C:\Windows\System32\wfp
2012-04-10 08:33 - 2009-07-13 18:37 - 0000000 ____D C:\Windows\registration
2012-04-10 08:33 - 2009-07-13 18:37 - 0000000 ____D C:\Windows\AppCompat
2012-04-10 08:23 - 2012-04-10 08:23 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{CAFB7853-D649-4F40-97FA-060C1E98CBAD}
2012-04-10 08:23 - 2012-04-10 08:23 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{A69A3C2B-6AAB-4075-AA0B-5BCBCE496776}
2012-04-09 06:10 - 2012-04-09 06:10 - 0000000 ____D C:\Users\Richy Spitz\Downloads\The Skints - Part and Parcel (2012) [MP3]
2012-04-09 01:31 - 2012-04-09 01:31 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{DCB37741-CF5F-484F-A031-6DE940B58501}
2012-04-09 01:31 - 2012-04-09 01:31 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{A9AEE3A4-07C4-4D5C-A1DB-7969E01D1AE0}
2012-04-08 11:53 - 2012-04-08 11:53 - 0000000 ____D C:\Users\Richy Spitz\Downloads\Avatar 2010 DVD Rip-Xvid
2012-04-08 10:53 - 2012-04-08 10:53 - 5699319 ____A C:\Users\Richy Spitz\Downloads\Max.zip
2012-04-08 09:42 - 2012-04-08 09:42 - 0000000 ____D C:\Users\All Users\VST3 Presets
2012-04-08 09:42 - 2012-04-08 09:42 - 0000000 ____D C:\Program Files\Common Files\SoundToys
2012-04-08 09:42 - 2012-04-08 09:41 - 0000000 ____D C:\Program Files\SoundToys
2012-04-08 08:08 - 2012-04-08 08:02 - 171867689 ____A C:\Users\Richy Spitz\Downloads\Peff034.zip
2012-04-08 08:05 - 2012-04-08 08:05 - 13477612 ____A C:\Users\Richy Spitz\Downloads\Matt's 8 Layer Suitcase Rhodes.rar
2012-04-08 02:19 - 2012-04-08 02:19 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{4FB09290-5D2C-4602-B536-A5D03986811F}
2012-04-08 02:19 - 2012-04-08 02:19 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{07CC5C13-5135-4BEC-B631-1BF04388133A}
2012-04-07 04:33 - 2012-04-07 04:33 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{74F899AA-7067-433D-8009-3BEE25BB9DCD}
2012-04-07 04:32 - 2012-04-07 04:32 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{D0B8D660-2763-4EDE-92B3-F4235BC64F13}
2012-04-06 07:27 - 2012-04-06 05:53 - 162833970 ____A C:\Users\Richy Spitz\Downloads\Magic_Soul_vol._11__by_skiny_.rar
2012-04-06 06:31 - 2012-04-06 05:51 - 157354445 ____A C:\Users\Richy Spitz\Downloads\Magic Soul vol. 12 (by skiny).rar
2012-04-06 06:22 - 2012-04-06 06:22 - 0460883 ____A C:\Users\Richy Spitz\Downloads\bg_wood3.jpg
2012-04-06 06:15 - 2012-04-06 05:57 - 153546838 ____A C:\Users\Richy Spitz\Downloads\the_classic_samples_vol._4__by_skiny_.rar
2012-04-06 06:03 - 2012-04-06 05:53 - 88663786 ____A C:\Users\Richy Spitz\Downloads\Magic Soul vol. 2 ( by skiny ).rar
2012-04-06 05:39 - 2012-04-06 05:38 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{99A403AF-4F2A-4B1C-9F38-537479DABF49}
2012-04-06 05:38 - 2012-04-06 05:38 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{B309E0C0-2552-4E00-958F-C034A65D5C55}
2012-04-05 09:43 - 2012-04-05 09:43 - 0407400 ____A C:\Users\Richy Spitz\Downloads\roger-white_milford.zip
2012-04-05 09:42 - 2012-04-05 09:42 - 0219770 ____A C:\Users\Richy Spitz\Downloads\billy-argel_hurtmold.zip
2012-04-05 07:40 - 2011-03-21 05:25 - 0000000 ___HD C:\Users\Richy Spitz\AppData\Local\Native Instruments
2012-04-05 07:40 - 2011-03-21 05:25 - 0000000 ____D C:\Users\Richy Spitz\Documents\Native Instruments
2012-04-05 06:20 - 2011-03-21 05:24 - 0000000 ____D C:\Program Files\Common Files\Native Instruments
2012-04-04 16:56 - 2012-03-06 11:31 - 0000000 ____D C:\Users\Richy Spitz\Desktop\Richard Adams - Urban Space Music2
2012-04-04 15:01 - 2012-04-04 13:55 - 118893871 ____A C:\Users\Richy Spitz\Downloads\biz_mp3.rar
2012-04-04 13:11 - 2012-04-04 13:11 - 0104236 ____A C:\Users\Richy Spitz\Documents\bsrnursmurrd5yse45s.rns
2012-04-04 11:09 - 2012-04-04 11:09 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{D342E5BE-CFA6-425B-B799-5F71C2991A2F}
2012-04-04 11:09 - 2012-04-04 11:09 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{76386B71-37FB-4673-81A5-9BB08EEC97BA}
2012-04-04 07:41 - 2012-04-04 03:26 - 0669736 ____A C:\Users\Richy Spitz\Documents\dum step.rns
2012-04-04 02:12 - 2012-04-04 02:12 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{77903588-DEC6-4C3E-8DCF-0A20A2EFB6DD}
2012-04-04 02:12 - 2012-04-04 02:12 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{5814D63A-E977-40A4-94CF-1EBC478E98E1}
2012-04-03 15:17 - 2012-04-03 15:17 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{FBAE5A02-E1EE-4436-A6F5-27584361729D}
2012-04-03 15:17 - 2012-04-03 15:16 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{C74C3900-7580-4609-BED1-013CBCDE3E83}
2012-04-03 10:49 - 2012-04-03 10:43 - 74046812 ____A C:\Users\Richy Spitz\Downloads\Crawler+-+Snake+Rattle+And+Roll+(1978).rar
2012-04-03 10:04 - 2012-04-03 10:16 - 83606929 ____A C:\Users\Richy Spitz\Downloads\Crawler+-+Selftitled+(Bluesrock+US+1977).rar
2012-04-03 04:43 - 2012-04-03 04:43 - 0090208 ____A C:\Users\Richy Spitz\Downloads\Burgues_Script.otf
2012-04-03 04:34 - 2012-04-03 04:34 - 0296872 ____A C:\Users\Richy Spitz\Downloads\fanpiel.rar
2012-04-03 04:27 - 2012-04-03 04:27 - 0053737 ____A C:\Users\Richy Spitz\Downloads\before_the_rain.zip
2012-04-03 02:37 - 2012-04-03 02:37 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{40EB488D-20EE-4BA0-AD8E-882562BB1233}
2012-04-02 12:06 - 2012-04-02 12:06 - 6235599 ____A C:\Users\Richy Spitz\Downloads\Synth_01.pdf
2012-04-02 11:37 - 2012-04-02 11:36 - 0000000 ____D C:\Users\Richy Spitz\Downloads\In Time (2011) DVDRip XviD-MAXSPEED
2012-04-02 10:42 - 2012-04-02 10:27 - 452437859 ____A C:\Users\Richy Spitz\Downloads\The Girl With The Dragon Tattoo (2011) DVDScr.m4v
2012-04-02 10:35 - 2012-04-02 10:33 - 15036792 ____A (Dropbox, Inc.) C:\Users\Richy Spitz\Downloads\Dropbox 1.2.52.exe
2012-04-02 03:41 - 2012-04-02 03:41 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{D24E7D21-0081-4F7C-8B95-FDAEAB050E01}
2012-04-02 03:41 - 2009-07-13 20:53 - 0032608 ____A C:\Windows\Tasks\SCHEDLGU.TXT
2012-04-02 03:41 - 2009-07-13 20:53 - 0032608 ____A C:\Windows\Tasks\SCHEDLGU(19).TXT
2012-04-01 14:58 - 2012-04-01 14:55 - 0000000 ____D C:\Windows\System32\directx
2012-04-01 14:56 - 2012-04-01 14:55 - 0000000 ___HD C:\Windows\msdownld.tmp
2012-04-01 14:26 - 2012-04-01 14:26 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{788D69D6-3427-475D-9A3A-27CEFB145A2F}
2012-04-01 14:22 - 2012-04-01 14:22 - 0000000 ___AH C:\Windows\System32\Drivers\Msft_Kernel_xusb21_01009.Wdf
2012-04-01 14:08 - 2012-04-01 14:08 - 0533649 ____A C:\Users\Richy Spitz\Downloads\Xpadder [5.7].rar
2012-04-01 13:16 - 2012-04-01 13:15 - 7989207 ____A C:\Users\Richy Spitz\Downloads\Shootin star.mp3
2012-04-01 13:12 - 2012-04-01 13:12 - 7083280 ____A C:\Users\Richy Spitz\Downloads\Sex, drugs, rapnroll.mp3
2012-03-31 14:23 - 2012-03-31 14:23 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{22BCF29B-E633-4494-85E8-033AC412160F}
2012-03-31 03:33 - 2012-03-31 03:29 - 116546712 ____A C:\Users\Richy Spitz\Downloads\Pharoahe_Monch_-_Desire.zip
2012-03-30 20:39 - 2012-05-09 14:50 - 3968368 ____A (Microsoft Corporation) C:\Windows\System32\ntkrnlpa.exe
2012-03-30 20:39 - 2012-05-09 14:50 - 3913072 ____A (Microsoft Corporation) C:\Windows\System32\ntoskrnl.exe
2012-03-30 18:36 - 2012-05-09 14:50 - 2343424 ____A (Microsoft Corporation) C:\Windows\System32\win32k.sys
2012-03-30 10:08 - 2012-03-30 10:08 - 0144041 ____A C:\Users\Richy Spitz\Downloads\wood1.JPG
2012-03-30 05:31 - 2012-03-30 05:31 - 2565085 ____A C:\Users\Richy Spitz\Downloads\moogofilter_v1_2_trial.zip
2012-03-30 05:08 - 2012-03-29 05:08 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{B6324DAE-9192-413C-86EF-81A09BF3E316}
2012-03-30 02:23 - 2012-05-09 14:51 - 1291632 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys
2012-03-28 07:59 - 2012-03-28 08:15 - 1383689 ____A C:\Users\Richy Spitz\Downloads\MPK25_ReferenceManual.pdf
2012-03-28 06:46 - 2012-03-28 06:43 - 0000000 ____D C:\Users\Richy Spitz\Downloads\Propellerhead Reason 5
2012-03-28 05:43 - 2012-03-28 05:43 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{96756509-74F8-4979-93C5-A8FB3F6890C1}
2012-03-28 05:43 - 2012-03-28 05:42 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{1D5BE65D-B448-4134-84C8-D56977CB0863}
2012-03-28 04:28 - 2012-03-28 04:28 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{ADE9CAE0-8364-4AD5-BFCD-0FD4243722F8}
2012-03-28 04:28 - 2012-03-28 04:28 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{7EC87573-6B52-4AEB-8431-1E05302EE53D}
2012-03-27 17:14 - 2011-05-16 12:23 - 0000000 ___HD C:\Users\Richy Spitz\AppData\Roaming\VST3 Presets
2012-03-27 12:39 - 2012-03-27 12:39 - 0108759 ____A C:\Users\Richy Spitz\Downloads\Reason 5 MIDI Implementation Chart.zip
2012-03-27 12:29 - 2012-03-27 12:29 - 1182379 ____A C:\Users\Richy Spitz\Downloads\Windows 7.zip
2012-03-27 12:19 - 2012-03-27 12:18 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{B17CD24A-A4B3-4E4B-94E2-13A9B4476869}
2012-03-27 12:18 - 2012-03-27 12:18 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{1C1E7ED3-5539-4134-8C93-ACEB8EFE7C4D}
2012-03-27 12:12 - 2012-03-27 12:12 - 0222665 ____A C:\Users\Richy Spitz\Downloads\akai_reason_remote_files (1).zip
2012-03-27 11:59 - 2012-03-27 12:00 - 0117262 ____A C:\Users\Richy Spitz\Downloads\New_Setting_up_the_mpk25_with_reason (3).pdf
2012-03-27 11:44 - 2012-03-27 11:44 - 0000000 ____D C:\Users\Richy Spitz\Downloads\Reason 5 Keys + Keygen
2012-03-27 11:35 - 2012-03-27 11:35 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{CD2F20F6-06A9-4371-BBD9-CF60FFA5A66D}
2012-03-27 11:35 - 2012-03-27 11:34 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{62072833-E9E5-4597-B020-397A2472073B}
2012-03-27 11:13 - 2012-03-27 11:13 - 0000000 ____D C:\Users\Richy Spitz\Documents\Psicraft
2012-03-27 11:13 - 2012-03-27 11:13 - 0000000 ____D C:\Users\All Users\Psicraft
2012-03-27 11:13 - 2012-03-27 11:13 - 0000000 ____D C:\Program Files\Psicraft
2012-03-27 10:17 - 2012-03-27 10:17 - 0001754 ____A C:\Users\Richy Spitz\Documents\zxvw.rtf
2012-03-27 10:14 - 2012-03-27 10:14 - 0003075 ____A C:\Users\Richy Spitz\Documents\Document.rtf
2012-03-27 09:47 - 2012-03-27 09:46 - 24170439 ____A C:\Users\Richy Spitz\Downloads\mpk25_vyzex_preset_editor_software_v1.00___copy.zip
2012-03-27 09:15 - 2012-03-27 09:15 - 0222665 ____A C:\Users\Richy Spitz\Downloads\akai_reason_remote_files.zip
2012-03-27 08:59 - 2012-03-27 08:59 - 0117262 ____A C:\Users\Richy Spitz\Downloads\New_Setting_up_the_mpk25_with_reason (2).pdf
2012-03-27 08:59 - 2012-03-27 08:59 - 0117262 ____A C:\Users\Richy Spitz\Downloads\New_Setting_up_the_mpk25_with_reason (1).pdf
2012-03-26 22:03 - 2012-03-26 22:02 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{F113B40A-746A-4FA5-B3F9-5E2B9ECA6AB1}
2012-03-26 22:02 - 2012-03-26 22:02 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{D565B223-D7E9-40BC-AA0E-E674F9E87326}
2012-03-26 05:23 - 2012-03-26 05:23 - 0036081 ____A C:\Users\Richy Spitz\Downloads\CombinatorBackdropToolkit.zip
2012-03-25 14:49 - 2012-03-25 14:49 - 1863295 ____A C:\Users\Richy Spitz\Downloads\2_AM Freehand Free.zip
2012-03-25 14:45 - 2012-03-25 14:45 - 0457983 ____A C:\Users\Richy Spitz\Downloads\tb303.osm
2012-03-25 14:42 - 2012-03-25 14:42 - 0158328 ____A C:\Users\Richy Spitz\Downloads\LCD serial display 01.osm
2012-03-25 13:49 - 2012-02-24 08:43 - 0143672 ____A C:\Windows\System32\GDIPFONTCACHEV1.DAT
2012-03-25 13:47 - 2012-03-25 13:47 - 8655455 ____A C:\Users\Richy Spitz\Downloads\setupSynthMaker_FREE_2_0_5.zip
2012-03-23 12:33 - 2011-01-19 20:17 - 0000000 ____D C:\Users\Richy Spitz\Documents\My Received Files
2012-03-23 07:33 - 2012-03-23 07:33 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{A6AC3D64-A6AF-4550-8786-A9CAB903896E}
2012-03-23 07:33 - 2012-03-23 07:33 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{2D3B5275-BB79-4A40-AD0C-8566548DB117}
2012-03-23 07:23 - 2012-03-23 07:23 - 0000185 ____A C:\Users\Richy Spitz\Documents\links.txt
2012-03-22 09:21 - 2012-03-22 09:21 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{04B2F86A-ED21-42E8-A91B-94CCC7235F54}
2012-03-22 09:21 - 2012-03-22 09:20 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{7D535ECE-95E9-451B-B706-FA8DC3ED0FC2}
2012-03-21 11:27 - 2012-03-21 11:27 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{6BAE55E7-7C9E-4BC2-AE73-F0A072DA828C}
2012-03-21 11:27 - 2012-03-21 11:26 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{9D04BB6A-A3A7-4395-AD16-9BF4EA4DDF18}
2012-03-21 04:16 - 2012-03-21 04:15 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{B574CAFC-FDC9-4503-BD48-AB0F5F5C4478}
2012-03-21 04:15 - 2012-03-21 04:15 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{C64E8AF3-E110-491C-A4B2-9C6F7EDF2113}
2012-03-20 16:09 - 2012-03-20 15:55 - 731076608 ____A C:\Users\Richy Spitz\Downloads\Family.Guy.The.Movie.-.Stewie.Griffin.The.Untold.Story.2005.STV.DVDrip.XviD.INTERNAL.(697mb).avi
2012-03-20 12:15 - 2012-03-18 15:54 - 2241326 ____A C:\Users\Richy Spitz\Desktop\piss flakes.wav
2012-03-19 11:25 - 2012-03-19 11:24 - 1614355 ____A C:\Users\Richy Spitz\Downloads\minotaur2.rar
2012-03-19 06:09 - 2012-03-19 06:08 - 9569847 ____A C:\Users\Richy Spitz\Downloads\DustyAnalog.zip
2012-03-19 06:07 - 2012-03-19 06:06 - 3902433 ____A C:\Users\Richy Spitz\Downloads\playground.zip
2012-03-19 04:42 - 2012-03-19 04:37 - 88241440 ____A C:\Users\Richy Spitz\Downloads\dead-man-walkn-mayan-mentality-urm.zip
2012-03-18 13:30 - 2012-03-18 13:30 - 14065079 ____A C:\Users\Richy Spitz\Downloads\Sylenth1.rar
2012-03-18 13:15 - 2012-03-18 13:12 - 50882080 ____A C:\Users\Richy Spitz\Downloads\Audio Damage.zip
2012-03-18 10:49 - 2012-03-18 10:01 - 311141951 ____A C:\Users\Richy Spitz\Downloads\RockDa500 vol1.zip
2012-03-18 09:59 - 2012-03-18 09:57 - 36324703 ____A C:\Users\Richy Spitz\Downloads\PLATINUM HIP HOP DRUMS.zip
2012-03-18 09:55 - 2012-03-18 09:55 - 0821315 ____A C:\Users\Richy Spitz\Downloads\boyinaband-dot-com_-_glitch-hop-sample-pack.rar
2012-03-18 09:42 - 2012-03-18 09:36 - 51572853 ____A C:\Users\Richy Spitz\Downloads\027_Spunkface-Samplers_Rough-Raw-Dubstep.zip
2012-03-17 14:52 - 2012-03-17 14:52 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{E0C19421-E662-4FFC-9C2F-9B04E01CBDEB}
2012-03-17 14:52 - 2012-03-17 14:52 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{35F5A278-AD78-4AD0-8C5B-DE360B3429FC}
2012-03-17 14:50 - 2012-03-17 14:50 - 0000508 ____A C:\Users\Richy Spitz\Documents\bio1.txt
2012-03-17 08:38 - 2012-03-17 08:38 - 31838472 ____A C:\Users\Richy Spitz\Documents\SPITZ COMBINATOR PATCHES.rns
2012-03-17 08:15 - 2011-01-18 22:11 - 0000000 ___HD C:\Users\Richy Spitz\AppData\Roaming\Propellerhead Software
2012-03-17 08:13 - 2012-03-17 08:12 - 6898394 ____A C:\Users\Richy Spitz\Downloads\p.r.p.4.1.1.rar
2012-03-17 08:03 - 2012-03-17 08:02 - 3300629 ____A C:\Users\Richy Spitz\Downloads\prpv411-air_avaxhome.ru.rar
2012-03-17 08:00 - 2012-03-17 08:00 - 0001445 ____A C:\Users\Richy Spitz\Downloads\[kat.ph]reason.refill.packer.4.1.1.works.on.reason.5.torrent
2012-03-17 07:39 - 2012-03-17 07:39 - 2886847 ____A C:\Users\Richy Spitz\Downloads\ReAaR_4.0_Install_4_1_ReFill_Packer.rar
2012-03-16 23:27 - 2012-05-09 14:47 - 0056176 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\partmgr.sys
2012-03-16 03:31 - 2012-03-16 03:31 - 0094512 ____A C:\Users\Richy Spitz\Documents\default hip hop.rns
2012-03-16 03:09 - 2012-03-16 03:08 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{B8758D44-9FF7-4092-B2E5-8BEEB5822741}
2012-03-16 03:08 - 2012-03-16 03:08 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{796EEC36-FD00-4734-8ADA-46ADB4D03313}
2012-03-15 08:14 - 2012-03-15 08:14 - 0031771 ____A C:\Users\Richy Spitz\Downloads\fmiring_campotype_one.zip
2012-03-15 07:52 - 2012-03-15 07:52 - 0560028 ____A C:\Users\Richy Spitz\Downloads\the_dreamer.zip
2012-03-15 07:38 - 2012-03-15 07:38 - 0301300 ____A C:\Users\Richy Spitz\Downloads\justice_by_dirt2 (2).zip
2012-03-15 07:37 - 2012-03-15 07:37 - 0301300 ____A C:\Users\Richy Spitz\Downloads\justice_by_dirt2 (1).zip
2012-03-15 05:46 - 2012-03-15 05:47 - 0652505 ____A C:\Users\Richy Spitz\Downloads\nina_script.zip
2012-03-15 02:21 - 2012-03-15 02:21 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{CBBC00FC-C0A9-46DD-B576-2350E6C2D1B8}
2012-03-15 02:21 - 2012-03-15 02:21 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{98DC162E-790A-421E-9D13-BCCDE132AEFF}
2012-03-14 15:42 - 2012-03-14 15:42 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{1103DD60-BC9C-4C0A-99E3-B17B510214F4}
2012-03-14 15:42 - 2012-03-14 03:42 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{DE54FF4B-0FAF-43A6-8653-5A0234B6964A}
2012-03-14 14:46 - 2012-03-14 14:46 - 8235231 ____A C:\Users\Richy Spitz\Downloads\Lana Del Rey - Summertime Sadness.mp3
2012-03-13 09:35 - 2012-03-13 09:35 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{69D7D066-121E-4947-9146-7914EFA0DC38}
2012-03-13 09:35 - 2012-03-13 09:34 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{40E038EB-86C3-4AA9-94C6-50319D048B20}
2012-03-13 09:16 - 2012-03-13 07:42 - 0001791 ____A C:\Users\Richy Spitz\Documents\Music Stuff.rtf
2012-03-13 08:14 - 2012-03-13 08:14 - 0081920 ____A C:\Users\Richy Spitz\Downloads\ReVerbed-ekit.doc
2012-03-13 08:14 - 2012-03-13 08:14 - 0032768 ____A C:\Users\Richy Spitz\Downloads\WfJ-ekit.doc
2012-03-13 08:14 - 2012-03-13 08:14 - 0030720 ____A C:\Users\Richy Spitz\Downloads\StellaFrays-ekit.doc
2012-03-13 06:43 - 2012-03-13 06:30 - 0000040 ____A C:\Users\Richy Spitz\Documents\pr.txt
2012-03-13 03:10 - 2012-03-13 03:09 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{369614D5-820A-481A-981B-E0B49E8EAC63}
2012-03-13 03:09 - 2012-03-13 03:09 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{05781FAF-650C-4DAE-B352-386798857E09}
2012-03-12 14:10 - 2012-03-12 14:10 - 95619377 ____A C:\Users\Richy Spitz\Desktop\Richy Spitz - Make Or Break.zip
2012-03-12 12:55 - 2012-03-12 12:50 - 95419835 ____A C:\Users\Richy Spitz\Desktop\Richy Spitz - Make Or Break (1).rar
2012-03-12 10:54 - 2012-03-12 10:54 - 0000000 ____D C:\Users\Richy Spitz\Desktop\Make Or Break
2012-03-12 10:53 - 2012-03-12 10:53 - 0000000 ____D C:\Program Files\Mp3tag
2012-03-12 07:42 - 2012-03-12 07:41 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{A8372F06-0049-45A0-A1CC-9DF31CF283B8}
2012-03-12 07:41 - 2012-03-12 07:41 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{B25C68FD-2872-488C-A91E-EEF4D3A2AE15}
2012-03-12 06:26 - 2012-02-13 16:27 - 0727886 ____A C:\Users\Richy Spitz\Documents\philberts magical adventure.rns
2012-03-11 18:07 - 2012-03-11 17:58 - 329077136 ____A C:\Users\Richy Spitz\Downloads\musicradar-loungekore-samples.zip
2012-03-11 18:05 - 2012-03-11 18:01 - 301951480 ____A C:\Users\Richy Spitz\Downloads\musicradar-synth-samples (1).zip
2012-03-11 18:01 - 2012-03-11 17:58 - 163131062 ____A C:\Users\Richy Spitz\Downloads\musicradar-percussion-loops.zip
2012-03-11 16:32 - 2012-03-11 16:32 - 0000000 ____D C:\Program Files\DC1A
2012-03-11 13:36 - 2012-03-11 13:18 - 37760174 ____A C:\Users\Richy Spitz\Downloads\synthedit.zip
2012-03-11 08:58 - 2011-07-04 12:57 - 0000000 ____D C:\Users\Richy Spitz\Desktop\masters
2012-03-11 08:28 - 2011-06-10 03:11 - 2551444 ____A C:\Users\Richy Spitz\Documents\monster.rns
2012-03-11 07:54 - 2012-03-11 07:54 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{4333A510-5723-4355-AEB3-9DCC69E51FD5}
2012-03-11 07:54 - 2012-03-11 07:54 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{215C918C-04CB-4843-8C75-6D45583D5EF4}
2012-03-11 04:34 - 2012-03-11 04:33 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{665F2056-286E-419A-BE87-DDBABD917D83}
2012-03-11 04:33 - 2012-03-11 04:33 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{7CCCF575-34BC-4863-A626-BB27571B9FF9}
2012-03-11 03:25 - 2012-03-11 03:24 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{5DF77632-96AB-4B7E-91EB-BF548E6CDE1B}
2012-03-11 03:24 - 2012-03-11 03:24 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{84DB78A6-6398-4000-AB92-0EEA5BCA355F}
2012-03-10 09:14 - 2012-03-10 09:13 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{0140B12B-2F48-47AD-A470-B2C569B9B99C}
2012-03-10 09:13 - 2012-03-10 09:13 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{F0408F37-D57B-4D1C-B84B-0BA7EA926004}
2012-03-10 08:42 - 2012-01-04 11:16 - 0000000 ____D C:\Users\Richy Spitz\Documents\space
2012-03-09 08:32 - 2012-03-09 08:33 - 0020957 ____A C:\Users\Richy Spitz\Downloads\spiked.zip
2012-03-09 06:33 - 2012-03-09 06:33 - 0448603 ____A C:\Users\Richy Spitz\Desktop\BARRY THE LUNATIC.mp3
2012-03-09 02:18 - 2012-03-09 02:18 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{824FB780-BD61-4FDF-8A34-4A33863F69C3}
2012-03-09 02:18 - 2012-03-09 02:18 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{275629F0-8192-456A-9526-01E14DE6E96B}
2012-03-07 19:57 - 2009-07-13 18:37 - 0000000 ____D C:\Windows\rescache
2012-03-07 19:21 - 2012-03-07 19:20 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{700C4298-69C5-4FFE-BCE8-D70BD85A09E2}
2012-03-07 19:20 - 2012-03-07 19:20 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{AF82AA51-482C-4913-A1F3-BBA639E8D3C4}
2012-03-07 19:02 - 2012-03-07 19:00 - 0003249 ____A C:\Windows\IE9_main.log
2012-03-07 19:01 - 2012-03-07 19:01 - 3695416 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dat
2012-03-07 19:01 - 2012-03-07 19:01 - 0580608 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2012-03-07 19:01 - 2012-03-07 19:01 - 0434176 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2012-03-07 19:01 - 2012-03-07 19:01 - 0420864 ____A (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2012-03-07 19:01 - 2012-03-07 19:01 - 0367104 ____A (Microsoft Corporation) C:\Windows\System32\html.iec
2012-03-07 19:01 - 2012-03-07 19:01 - 0353792 ____A (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll
2012-03-07 19:01 - 2012-03-07 19:01 - 0353584 ____A (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll
2012-03-07 19:01 - 2012-03-07 19:01 - 0227840 ____A (Microsoft Corporation) C:\Windows\System32\ieaksie.dll
2012-03-07 19:01 - 2012-03-07 19:01 - 0223232 ____A (Microsoft Corporation) C:\Windows\System32\dxtrans.dll
2012-03-07 19:01 - 2012-03-07 19:01 - 0203776 ____A (Microsoft Corporation) C:\Windows\System32\webcheck.dll
2012-03-07 19:01 - 2012-03-07 19:01 - 0163840 ____A (Microsoft Corporation) C:\Windows\System32\ieakui.dll
2012-03-07 19:01 - 2012-03-07 19:01 - 0162304 ____A (Microsoft Corporation) C:\Windows\System32\msrating.dll
2012-03-07 19:01 - 2012-03-07 19:01 - 0161792 ____A (Microsoft Corporation) C:\Windows\System32\msls31.dll
2012-03-07 19:01 - 2012-03-07 19:01 - 0152064 ____A (Microsoft Corporation) C:\Windows\System32\wextract.exe
2012-03-07 19:01 - 2012-03-07 19:01 - 0150528 ____A (Microsoft Corporation) C:\Windows\System32\iexpress.exe
2012-03-07 19:01 - 2012-03-07 19:01 - 0142848 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2012-03-07 19:01 - 2012-03-07 19:01 - 0130560 ____A (Microsoft Corporation) C:\Windows\System32\ieakeng.dll
2012-03-07 19:01 - 2012-03-07 19:01 - 0123392 ____A (Microsoft Corporation) C:\Windows\System32\occache.dll
2012-03-07 19:01 - 2012-03-07 19:01 - 0118784 ____A (Microsoft Corporation) C:\Windows\System32\iepeers.dll
2012-03-07 19:01 - 2012-03-07 19:01 - 0110592 ____A (Microsoft Corporation) C:\Windows\System32\IEAdvpack.dll
2012-03-07 19:01 - 2012-03-07 19:01 - 0101888 ____A (Microsoft Corporation) C:\Windows\System32\admparse.dll
2012-03-07 19:01 - 2012-03-07 19:01 - 0086528 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2012-03-07 19:01 - 2012-03-07 19:01 - 0078848 ____A (Microsoft Corporation) C:\Windows\System32\inseng.dll
2012-03-07 19:01 - 2012-03-07 19:01 - 0076800 ____A (Microsoft Corporation) C:\Windows\System32\SetIEInstalledDate.exe
2012-03-07 19:01 - 2012-03-07 19:01 - 0074752 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2012-03-07 19:01 - 2012-03-07 19:01 - 0074752 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2012-03-07 19:01 - 2012-03-07 19:01 - 0074240 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2012-03-07 19:01 - 2012-03-07 19:01 - 0072822 ____A C:\Windows\System32\ieuinit.inf
2012-03-07 19:01 - 2012-03-07 19:01 - 0066048 ____A (Microsoft Corporation) C:\Windows\System32\icardie.dll
2012-03-07 19:01 - 2012-03-07 19:01 - 0063488 ____A (Microsoft Corporation) C:\Windows\System32\tdc.ocx
2012-03-07 19:01 - 2012-03-07 19:01 - 0054272 ____A (Microsoft Corporation) C:\Windows\System32\pngfilt.dll
2012-03-07 19:01 - 2012-03-07 19:01 - 0048640 ____A (Microsoft Corporation) C:\Windows\System32\mshtmler.dll
2012-03-07 19:01 - 2012-03-07 19:01 - 0041472 ____A (Microsoft Corporation) C:\Windows\System32\msfeedsbs.dll
2012-03-07 19:01 - 2012-03-07 19:01 - 0035840 ____A (Microsoft Corporation) C:\Windows\System32\imgutil.dll
2012-03-07 19:01 - 2012-03-07 19:01 - 0031744 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2012-03-07 19:01 - 2012-03-07 19:01 - 0023552 ____A (Microsoft Corporation) C:\Windows\System32\licmgr10.dll
2012-03-07 19:01 - 2012-03-07 19:01 - 0011776 ____A (Microsoft Corporation) C:\Windows\System32\mshta.exe
2012-03-07 19:01 - 2012-03-07 19:01 - 0010752 ____A (Microsoft Corporation) C:\Windows\System32\msfeedssync.exe
2012-03-07 05:20 - 2012-03-06 09:43 - 0000000 ____D C:\Users\Richy Spitz\Desktop\Richard Adams - Urban Space Music
2012-03-07 03:55 - 2011-12-03 10:10 - 0242452 ____A C:\Users\Richy Spitz\Documents\dubby berty.rns
2012-03-07 03:34 - 2012-03-07 03:34 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{453C8BDB-CDA9-478E-9529-9DB3106C147C}
2012-03-07 03:34 - 2012-03-07 03:33 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{0C517D6E-ADF3-4182-BB2D-C0B22F7424B0}
2012-03-06 11:51 - 2012-03-06 11:36 - 0000000 ____D C:\Users\Richy Spitz\Desktop\spacemp3
2012-03-06 11:33 - 2012-02-26 16:17 - 0000000 ____D C:\Users\Richy Spitz\Desktop\space
2012-03-06 03:17 - 2012-03-06 03:17 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{AFCFC175-91F2-4196-981E-2DCDD314D9B7}
2012-03-06 03:16 - 2012-03-06 03:16 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{1658DB92-3F54-4A64-8AD8-B22C46D1AA95}
2012-03-06 03:00 - 2012-03-06 03:00 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{DDC080D0-EA4B-48DF-A50F-8C3D57BBE040}
2012-03-06 03:00 - 2012-03-06 03:00 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{8874A00F-40EB-4460-A2E1-A141720C97CF}
2012-03-05 16:44 - 2012-03-05 16:44 - 3511560 ____A C:\Users\Richy Spitz\Downloads\008SeventiesGold.zip
2012-03-05 16:44 - 2012-03-05 16:44 - 2417467 ____A C:\Users\Richy Spitz\Downloads\008s Crates Vol1.zip
2012-03-05 16:43 - 2012-03-05 16:43 - 11860965 ____A C:\Users\Richy Spitz\Downloads\008Monotron.zip
2012-03-04 15:08 - 2012-03-04 15:08 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{EEF2329B-1993-4E31-A512-CAA26492D858}
2012-03-04 15:08 - 2012-03-04 15:07 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{D902A873-4312-462B-94A9-E57236B1D0D7}
2012-03-04 15:06 - 2012-03-04 15:06 - 0000075 ____A C:\Users\Richy Spitz\Documents\moblist.txt
2012-03-02 21:31 - 2012-05-09 14:47 - 1077248 ____A (Microsoft Corporation) C:\Windows\System32\DWrite.dll
2012-03-02 08:59 - 2012-01-27 07:08 - 0491434 ____A C:\Users\Richy Spitz\Documents\richards beat.rns
2012-03-02 03:01 - 2012-03-02 03:01 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{AC2AFDFF-9765-4840-BECE-6B62F876BB75}
2012-03-02 03:01 - 2012-03-02 03:01 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{5DB0D5FC-0628-44E0-B7CB-16609F45FE71}
2012-03-01 02:51 - 2012-03-01 02:51 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{D4D89055-91F8-4E8B-8B68-ADC9B725D841}
2012-03-01 02:51 - 2012-03-01 02:50 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{FDEC4406-68F6-41CB-B3AE-F2EA9509D1E0}
2012-02-29 21:46 - 2012-04-12 04:05 - 0019824 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\fs_rec.sys
2012-02-29 21:37 - 2012-04-12 04:05 - 0172544 ____A (Microsoft Corporation) C:\Windows\System32\wintrust.dll
2012-02-29 21:33 - 2012-04-12 04:05 - 0159232 ____A (Microsoft Corporation) C:\Windows\System32\imagehlp.dll
2012-02-29 21:29 - 2012-04-12 04:05 - 0005120 ____A (Microsoft Corporation) C:\Windows\System32\wmi.dll
2012-02-29 09:36 - 2012-02-29 09:36 - 2473232 ____A C:\Users\Richy Spitz\Downloads\tfcogmartialarts.zip
2012-02-29 09:36 - 2012-02-29 09:36 - 15980886 ____A C:\Users\Richy Spitz\Downloads\g1sfx.zip
2012-02-29 09:36 - 2012-02-29 09:36 - 0835542 ____A C:\Users\Richy Spitz\Downloads\computer.zip
2012-02-29 09:36 - 2012-02-29 09:35 - 3807627 ____A C:\Users\Richy Spitz\Downloads\explosions.zip
2012-02-29 09:35 - 2012-02-29 09:35 - 0850378 ____A C:\Users\Richy Spitz\Downloads\flashmagic.zip
2012-02-29 09:35 - 2012-02-29 09:35 - 0759340 ____A C:\Users\Richy Spitz\Downloads\robotmoves.zip
2012-02-29 09:35 - 2012-02-29 09:35 - 0758791 ____A C:\Users\Richy Spitz\Downloads\swords.zip
2012-02-29 09:35 - 2012-02-29 09:35 - 0280619 ____A C:\Users\Richy Spitz\Downloads\slashswosh.zip
2012-02-29 04:14 - 2012-02-29 04:14 - 0117262 ____A C:\Users\Richy Spitz\Downloads\New_Setting_up_the_mpk25_with_reason.pdf
2012-02-29 03:29 - 2012-02-29 03:29 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{4401458E-F339-4324-B18F-6FF1D8456145}
2012-02-29 03:29 - 2012-02-29 03:28 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{8B380393-4758-44FB-9ED3-C9A1F690BFC2}
2012-02-28 03:05 - 2012-02-28 03:05 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{CB6C0019-09F0-45B4-A648-D736AEF1DD74}
2012-02-28 03:05 - 2012-02-28 03:05 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{884AF062-058C-4A2E-8723-F7C534057340}
2012-02-27 17:52 - 2012-04-12 04:10 - 12281856 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2012-02-27 17:27 - 2012-04-12 04:10 - 9705984 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2012-02-27 17:18 - 2012-04-12 04:10 - 1799168 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2012-02-27 17:12 - 2012-04-12 04:10 - 1103360 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2012-02-27 17:11 - 2012-04-12 04:10 - 1427456 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2012-02-27 17:11 - 2012-04-12 04:10 - 1127424 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2012-02-27 17:09 - 2012-04-12 04:10 - 0231936 ____A (Microsoft Corporation) C:\Windows\System32\url.dll
2012-02-27 17:08 - 2012-04-12 04:10 - 0065024 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2012-02-27 17:06 - 2012-04-12 04:10 - 0716800 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2012-02-27 17:04 - 2012-04-12 04:10 - 1792000 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2012-02-27 17:03 - 2012-04-12 04:10 - 2382848 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2012-02-27 17:03 - 2012-04-12 04:10 - 0072704 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2012-02-27 16:59 - 2012-04-12 04:10 - 0176640 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2012-02-27 13:48 - 2012-02-27 13:41 - 191288018 ____A C:\Users\Richy Spitz\Downloads\musicradar-synth-arpeggio-samples.zip
2012-02-27 13:46 - 2012-02-27 13:40 - 143196703 ____A C:\Users\Richy Spitz\Downloads\musicradar-mistabishi-samples (1).zip
2012-02-27 12:50 - 2011-03-13 10:56 - 0893118 ____A C:\Users\Richy Spitz\Documents\sunday.rns
2012-02-27 12:41 - 2011-05-17 12:27 - 0564628 ____A C:\Users\Richy Spitz\Documents\slowowowow.rns
2012-02-27 07:21 - 2012-02-27 07:20 - 9978043 ____A C:\Users\Richy Spitz\Downloads\art145ornate.zip
2012-02-27 06:52 - 2012-02-27 06:52 - 0053682 ____A C:\Users\Richy Spitz\Downloads\stentiga.zip
2012-02-27 06:50 - 2012-02-27 06:50 - 0033490 ____A C:\Users\Richy Spitz\Downloads\mob.zip
2012-02-27 06:49 - 2012-02-27 06:49 - 0244875 ____A C:\Users\Richy Spitz\Downloads\night_train_382.zip
2012-02-27 06:49 - 2012-02-27 06:49 - 0148487 ____A C:\Users\Richy Spitz\Downloads\dream_orphans.zip
2012-02-27 06:48 - 2012-02-27 06:48 - 0022711 ____A C:\Users\Richy Spitz\Downloads\harabara.zip
2012-02-26 18:36 - 2012-02-26 18:35 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{1D99AFD2-1EBF-44C0-841D-A5B7372EB982}
2012-02-26 18:35 - 2012-02-26 18:35 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{EA33D499-B696-43C2-A7E1-927EA22F0DF0}
2012-02-26 16:25 - 2011-12-01 13:32 - 1100010 ____A C:\Users\Richy Spitz\Documents\xacute.rns
2012-02-26 10:02 - 2012-02-26 10:02 - 0203584 ____A C:\Users\Richy Spitz\Downloads\here_be_dubstep.zip
2012-02-26 10:02 - 2012-02-26 10:02 - 0059734 ____A C:\Users\Richy Spitz\Downloads\unrealised (1).zip
2012-02-26 10:01 - 2012-02-26 10:01 - 0057296 ____A C:\Users\Richy Spitz\Downloads\optimusprinceps.zip
2012-02-26 06:33 - 2012-02-26 06:33 - 0010188 ____A C:\Users\Richy Spitz\Downloads\dollis.zip
2012-02-26 06:22 - 2012-02-26 06:22 - 0202275 ____A C:\Users\Richy Spitz\Downloads\gota (1).zip
2012-02-26 05:12 - 2012-02-26 05:12 - 0202275 ____A C:\Users\Richy Spitz\Downloads\gota.zip
2012-02-26 05:07 - 2012-02-26 05:08 - 0171914 ____A C:\Users\Richy Spitz\Downloads\lobster-two.zip
2012-02-26 04:51 - 2012-02-26 04:51 - 0192871 ____A C:\Users\Richy Spitz\Downloads\age.zip
2012-02-26 04:49 - 2012-02-26 04:49 - 0730584 ____A C:\Users\Richy Spitz\Downloads\billy-argel_blessed-day.zip
2012-02-26 04:48 - 2012-02-26 04:48 - 1241890 ____A C:\Users\Richy Spitz\Downloads\david-kerkhoff_moonlight-shadow.zip
2012-02-25 19:20 - 2012-02-25 19:20 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{67194839-C84A-4A46-9FD2-CAE2D779467F}
2012-02-25 19:20 - 2012-02-25 19:19 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{5E39C3B2-3686-4225-99C1-D1B323300E30}
2012-02-25 11:38 - 2012-02-25 11:38 - 0000889 ____A C:\Users\Richy Spitz\Documents\newmixxxxx.txt
2012-02-25 09:00 - 2012-02-25 08:57 - 146773682 ____A C:\Users\Richy Spitz\Downloads\tlikeskushberryonsundays mix.mp3

========================= Known DLLs (Whitelisted) ============


========================= Bamital & volsnap Check ============

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\System32\User32.dll
[2012-02-24 07:42] - [2012-02-24 08:43] - 0811520 ____A (Microsoft Corporation) 7BD7F45FF37FA0669CD32CA0EF46E22C

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== EXE ASSOCIATION =====================

HKLM\...\.exe: exefile => OK
HKLM\...\exefile\DefaultIcon: %1 => OK
HKLM\...\exefile\open\command: "%1" %* => OK

========================= Memory info ======================

Percentage of memory in use: 24%
Total physical RAM: 1790.49 MB
Available physical RAM: 1353.6 MB
Total Pagefile: 1790.49 MB
Available Pagefile: 1366.54 MB
Total Virtual: 2047.88 MB
Available Virtual: 1960.7 MB

======================= Partitions =========================

1 Drive c: (Big Boy) (Fixed) (Total:1397.26 GB) (Free:960.51 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
2 Drive d: (CD_ROM) (CDROM) (Total:3.48 GB) (Free:0 GB) CDFS
3 Drive e: (RICHARD'S I) (Removable) (Total:0.97 GB) (Free:0.52 GB) FAT32
4 Drive f: () (Removable) (Total:3.92 GB) (Free:3.91 GB) FAT32
5 Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS

Disk ### Status Size Free Dyn Gpt
-------- ------------- ------- ------- --- ---
Disk 0 Online 1397 GB 0 B
Disk 1 Online 993 MB 0 B
Disk 2 Online 4018 MB 0 B

Partitions of Disk 0:
===============

Partition ### Type Size Offset
------------- ---------------- ------- -------
Partition 1 Primary 1397 GB 1024 KB

======================================================================================================

Disk: 0
Partition 1
Type : 07
Hidden: No
Active: Yes

Volume ### Ltr Label Fs Type Size Status Info
---------- --- ----------- ----- ---------- ------- --------- --------
* Volume 1 C Big Boy NTFS Partition 1397 GB Healthy

======================================================================================================

Partitions of Disk 1:
===============

Partition ### Type Size Offset
------------- ---------------- ------- -------
Partition 1 Primary 993 MB 26 KB

======================================================================================================

Disk: 1
Partition 1
Type : 0B
Hidden: No
Active: Yes

Volume ### Ltr Label Fs Type Size Status Info
---------- --- ----------- ----- ---------- ------- --------- --------
* Volume 2 E RICHARD'S I FAT32 Removable 993 MB Healthy

======================================================================================================

Partitions of Disk 2:
===============

Partition ### Type Size Offset
------------- ---------------- ------- -------
Partition 1 Primary 4017 MB 32 KB

======================================================================================================

Disk: 2
Partition 1
Type : 0B
Hidden: No
Active: Yes

Volume ### Ltr Label Fs Type Size Status Info
---------- --- ----------- ----- ---------- ------- --------- --------
* Volume 3 F FAT32 Removable 4017 MB Healthy

======================================================================================================

==========================================================

Last Boot: 2012-05-18 16:26

======================= End Of Log ==========================

#4 CatByte

CatByte

    bleepin' tiger


  • Malware Response Team
  • 14,664 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Canada
  • Local time:08:05 AM

Posted 24 May 2012 - 05:36 PM

Hi

Please do the following:


Open notepad (Start =>All Programs => Accessories => Notepad). Please copy the entire contents of the code box below. (To do this highlight the contents of the box, right click on it and select copy. Right-click in the open notepad and select Paste). Save it on the flashdrive as fixlist.txt

start
HKU\Richy Spitz\...\Run: [Seavzuob] "C:\Users\Richy Spitz\AppData\Roaming\Woyt\owulf.exe" [177152 2011-03-03] ()
HKLM\...\Winlogon: [Shell] C:\Windows\Temp\hlylvx\setup.exe [x ] ()
Winlogon\Notify\jmcheng: C:\Windows\system32\config\systemprofile\AppData\Local\jmcheng.dll [X]
2 bdss; C:\Windows\System32\PSSdk23.dll [5632 2009-07-13] (Oak Technology Inc.)
NETSVC: bt3cser
NETSVC: bdss
NETSVC: ntpr_nic_service2
NETSVC: yukonwlh
NETSVC: pcx1nd5
NETSVC: se45nd5
NETSVC: GoToAssist
2012-05-23 04:15 - 2012-05-23 04:15 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{E4F7FF98-19A7-4555-8E44-532B820078CC}
2012-05-23 04:15 - 2012-05-23 04:15 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{9903B5C5-0449-4343-A8C5-5C109ACB50BD}
2012-05-20 15:03 - 2012-05-20 15:03 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{786FFF96-8667-4CF0-BA2C-41321BB45AC2}
2012-05-20 15:03 - 2012-05-20 15:03 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{36C2DD25-162F-401D-BFDF-21D6DE706980}
2012-05-20 13:15 - 2012-05-20 13:16 - 0000000 ____D C:\Users\Richy Spitz\Desktop\4869
2012-05-20 12:58 - 2012-05-20 12:58 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{D74B44C1-C91A-4824-8E49-88508BA0C65B}
2012-05-20 12:58 - 2012-05-20 12:58 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{19C963F3-08D8-432E-8E7A-169B7C55B30E}
2012-05-20 11:10 - 2012-05-20 11:11 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{0CE640BD-EA8D-40EF-BA39-B764968637B2}
2012-05-20 11:10 - 2012-05-20 11:10 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{FC631F17-D8D9-4CF5-9FEF-634B7BC3E794}
2012-05-20 07:06 - 2012-05-20 07:06 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{287C1476-5353-4923-8D79-33549D9C777C}
2012-05-20 07:05 - 2012-05-20 07:05 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{20DBAD04-7EFD-4A06-94F2-A33B3108DF6E}
2012-05-20 04:31 - 2012-05-20 04:32 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{55E8495D-BAC9-4013-BC72-7B7DE92BBAF2}
2012-05-20 04:31 - 2012-05-20 04:31 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{1499E765-E765-430A-ADBC-86BCB3CA5C35}
2012-05-18 15:52 - 2012-05-18 15:52 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{BF6A7129-82F9-4E75-8F6F-D80091A03584}
2012-05-18 15:51 - 2012-05-18 15:52 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{C16449E3-E66F-4228-A767-21C3603C08E4}
2012-05-18 02:37 - 2012-05-18 02:37 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{9ECD3DF7-028E-479C-ABD6-CB58C8413D5C}
2012-05-18 02:37 - 2012-05-18 02:37 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{37B66A1D-0537-44D0-AFE9-9549DFCC64E2}
2012-05-17 05:39 - 2012-05-17 05:39 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{BBBE67F1-FD7F-465B-87FF-9C3FBE6A251F}
2012-05-17 05:38 - 2012-05-17 05:39 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{912208FD-320B-4FB8-93FC-668E3806CB1A}
2012-05-17 03:48 - 2012-05-17 03:48 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{CF36AD0E-744F-4658-A311-F5F0FF7FEB28}
2012-05-17 03:47 - 2012-05-17 03:47 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{353CB2F9-E65E-42D3-9756-2B7EE0969E7E}
2012-05-17 03:44 - 2012-05-17 03:44 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{3D1A3331-E7BD-4547-B797-B7A6E5B96B99}
2012-05-17 03:44 - 2012-05-17 03:44 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{12F7EFFB-1F50-4A95-A837-66EB6EB5590B}
2012-05-16 11:22 - 2012-05-16 11:23 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{72146120-D2CA-4387-9DCA-830AD2A9C9DF}
2012-05-16 11:22 - 2012-05-16 11:22 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{F07ED8B3-DB80-4A57-A7A7-CCE254FD4E59}
2012-05-16 02:42 - 2012-05-16 02:42 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{F348C3CD-66E1-4EAA-8518-588E030D72A4}
2012-05-16 02:42 - 2012-05-16 02:42 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{0C383942-C434-4CF6-B187-04285D58C257}
2012-05-16 02:40 - 2012-05-16 02:40 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{0C662A33-055C-468A-B6B0-9212A7AF883C}
2012-05-15 09:28 - 2012-05-15 09:29 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{C20AD164-A513-4A72-8227-1DDC797398E7}
2012-05-15 09:28 - 2012-05-15 09:28 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{51BB96C8-08CA-4523-9A86-312C186C6FEF}
2012-05-14 06:13 - 2012-05-14 06:14 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{75C6716E-7D85-4590-9225-1F9B3B04556F}
2012-05-14 06:13 - 2012-05-14 06:13 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{427EE75C-7BD1-459C-B4E1-FAFEC1AFC411}
2012-05-14 04:52 - 2012-05-14 04:52 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{E7EFBE0A-034D-4E78-ABE9-96EC092F0BBF}
2012-05-14 04:51 - 2012-05-14 04:52 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{E9099BF4-B587-4E6D-B887-757F9C26DA20}
2012-05-14 04:27 - 2012-05-14 04:27 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{CC72D878-564C-44FA-A4CE-4B8542460E73}
2012-05-14 04:27 - 2012-05-14 04:27 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{04980081-BAF1-442D-9DA3-8E5D4A868B3E}
2012-05-14 02:53 - 2012-05-14 02:53 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{A385B7F4-48CA-441C-BA44-804E301565EB}
2012-05-14 02:53 - 2012-05-14 02:53 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{30ED0779-B2DD-45CA-A7BD-07FD7FD7928B}
2012-05-13 13:02 - 2012-05-13 13:03 - 9108211 ____A C:\Users\Richy Spitz\Downloads\Rob.Papen.Predator.VSTi.v1.1.Incl.Keygen-AiR.rar
2012-05-13 09:41 - 2012-05-13 09:42 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{89E043D0-3DA8-4050-966F-9FAAD2885B2C}
2012-05-13 09:41 - 2012-05-13 09:41 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{76E14099-00B5-4266-832D-E96DFB6B6903}
2012-05-13 03:42 - 2012-05-13 03:42 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{9212D1CD-8599-49DB-AFFF-02159C61856D}
2012-05-13 03:42 - 2012-05-13 03:42 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{888A1379-49C1-489E-A89A-3B7FC43D587D}
2012-05-11 03:35 - 2012-05-11 03:35 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{F8A05B90-592B-4A90-A630-CA43C3BF06D7}
2012-05-11 03:35 - 2012-05-11 03:35 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{DB85E96D-FB9A-4915-8885-B24A5E55170B}
2012-05-10 12:16 - 2012-05-10 12:17 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{C19D284E-17C2-4359-BFE6-5F8BF33BD999}
2012-05-10 12:16 - 2012-05-10 12:16 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{5AF81F6A-7A19-4BAE-B5FE-C7C91A016EF3}
2012-05-10 02:10 - 2012-05-10 02:10 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{EEE04563-7058-4AEC-AF7E-8CF3840258D2}
2012-05-10 02:10 - 2012-05-10 02:10 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{0D6DE276-9549-471D-8085-F5BB4D04EB9D}
2012-05-09 11:40 - 2012-05-09 11:40 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{DF8540CF-6251-43C2-BAB0-F79A770A47F6}
2012-05-09 11:40 - 2012-05-09 11:40 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{002CBA91-F490-4BF8-84F4-655F91A5C19E}
2012-05-08 12:53 - 2012-05-08 12:53 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{9797B15F-EBC3-4733-B1C5-2AC9541735C4}
2012-05-08 12:52 - 2012-05-08 12:53 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{7E8A4AD1-3B4A-4352-A2BE-D0683F879893}
2012-05-08 05:06 - 2012-05-08 05:06 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{1EDF2D70-CC21-4E5A-8558-F093A3B70BB6}
2012-05-08 05:06 - 2012-05-08 05:06 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{069C7C0F-8925-4128-B8DE-BFDA701B8DB5}
2012-05-08 04:30 - 2012-05-08 04:31 - 1032320 ____A C:\Users\Richy Spitz\Documents\TMP2D6F.tmp
2012-05-08 03:19 - 2012-05-08 03:20 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{C73405B2-DC0B-494A-BA41-D152B135292A}
2012-05-08 03:18 - 2012-05-08 03:19 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{62C1E032-0FC2-4531-AFFE-8D21D4F06D25}
2012-05-08 01:48 - 2012-05-08 01:48 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{C0D532AF-6DBD-4A8B-B865-D4F5A44B3E74}
2012-05-08 01:46 - 2012-05-08 01:48 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{D17C8768-EF86-40A8-9785-6DA13103E1BB}
2012-05-07 00:58 - 2012-05-07 00:59 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{412DAC80-2BBC-4565-BE73-6912551D40CD}
2012-05-07 00:57 - 2012-05-07 00:58 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{84C587BC-B7B3-42AE-A492-7F55E990A8A9}
2012-05-06 05:31 - 2012-05-06 05:31 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{1C75AB78-915C-403C-9A30-5C89B28989A7}
2012-05-06 05:29 - 2012-05-06 05:31 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{576C26C6-ABE1-4FD3-B124-C893ADFEA4EE}
2012-05-06 05:27 - 2012-05-06 05:27 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{1F457383-D5EC-4C54-B285-BB584DAD9616}
2012-05-06 05:25 - 2012-05-06 05:25 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{C12384EB-06EA-4F6C-A97A-0E1E62813F4C}
2012-05-06 05:20 - 2012-05-06 05:20 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{C7703F66-09A4-445E-938A-2B73ED759AEF}
2012-05-05 12:18 - 2012-05-05 12:18 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{DBF057D1-4705-4422-B945-6B70275B32A5}
2012-05-05 12:17 - 2012-05-05 12:18 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{9FC6A7A7-4B22-4817-ADED-DC8124E7B83A}
2012-05-05 10:41 - 2012-05-05 10:41 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{A39276F5-8AB6-4E05-A6E1-65B21CB614A3}
2012-05-05 10:40 - 2012-05-05 10:41 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{BF50E43D-DAD7-44C8-A084-93C1F4AB9891}
2012-05-05 01:58 - 2012-05-05 01:58 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{E33B2F4F-4629-47CA-9FBB-DD1D5111338F}
2012-05-05 01:57 - 2012-05-05 01:58 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{C0103425-CC9B-4175-AFFA-F6EE2DDC89E4}
2012-05-05 01:55 - 2012-05-05 01:55 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{26BC3900-56BF-45E1-90AC-8FB0E1B0642C}
2012-05-05 01:53 - 2012-05-05 01:53 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{8334655B-8A37-4DB6-8817-35F89C09FA5F}
2012-05-04 16:51 - 2012-05-04 16:51 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{D9822411-B9B9-4554-87D6-255C34B59EE6}
2012-05-04 16:49 - 2012-05-04 16:51 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{B8BDFD3F-1058-4889-A72B-FD2717B8E8CF}
2012-05-04 15:45 - 2012-05-04 15:45 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{B7799057-7409-43C0-A680-92E6BE14F929}
2012-05-04 15:44 - 2012-05-04 15:45 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{5F2FB24B-11EF-4B7F-A307-D911B826B7FF}
2012-05-04 12:49 - 2012-05-04 12:49 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{2F91F9AE-6A58-4E2A-ACB2-88DCF61271E7}
2012-05-04 12:48 - 2012-05-04 12:49 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{9F5D8A93-5412-4880-A326-21B893CAD6BC}
2012-05-04 04:15 - 2012-05-04 04:15 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{4B0E5D97-5445-4D17-831C-29E68101DC7E}
2012-05-04 04:13 - 2012-05-04 04:14 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{D5C8A43D-E8A2-42B2-AD62-6327AAB9CCBE}
2012-05-04 02:35 - 2012-05-04 02:35 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{8DEAE378-CE22-4DE9-B5A9-781D4943E7F5}
2012-05-04 02:35 - 2012-05-04 02:35 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{79989BC7-3F88-4179-B033-FAF3BCA0C6B6}
2012-05-04 02:31 - 2012-05-04 02:31 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{58BB5B8C-D85B-4155-B921-85BE43AF8B3A}
2012-05-04 02:29 - 2012-05-04 02:29 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{A63F737B-B846-4A5D-8D54-984B7645BB49}
2012-05-03 03:19 - 2012-05-03 03:20 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{33504B96-60DE-4C5D-8779-F825D6554F78}
2012-05-03 03:18 - 2012-05-03 03:19 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{A810EBB6-0A92-4024-954A-D632AFD7AA72}
2012-05-02 05:08 - 2012-05-02 05:09 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{5F8F2E77-7A68-4A95-B44A-D88157380CE3}
2012-05-02 05:07 - 2012-05-02 05:08 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{CE730BF9-602B-4921-A989-D11F3F5CCD2D}
2012-05-02 02:54 - 2012-05-02 02:54 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{91F0C445-02EF-45BE-822A-0A67643F2B01}
2012-05-01 02:42 - 2012-05-01 02:42 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{8902EAC3-E0DD-4A0A-9A46-30A92ED62D1E}
2012-04-30 02:53 - 2012-04-30 02:53 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{3AD52A7F-1689-43DC-863D-AB3448335A24}
2012-04-29 10:42 - 2012-04-29 10:42 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{4677E0E7-CF25-46F6-9FF9-FB8069001E2D}
2012-04-29 10:17 - 2012-04-29 10:17 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{1243ACCE-A53A-4861-B3AD-0F15F74CF92B}
2012-04-29 07:06 - 2012-05-23 08:22 - 0000000 ____D C:\Users\Richy Spitz\AppData\Roaming\Zavii
2012-04-29 07:06 - 2012-04-29 07:06 - 0000000 ____D C:\Users\Richy Spitz\AppData\Roaming\Woyt
2012-04-29 07:06 - 2012-04-29 07:06 - 0000000 ____D C:\Users\Richy Spitz\AppData\Roaming\Avboed
2012-04-29 04:09 - 2012-04-29 04:09 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{E34EA5A1-518D-4AC0-A515-6C0FED7D578D}
2012-04-29 04:09 - 2012-04-29 04:09 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{A4D2CCE4-1717-49E3-9902-F5BEDDFDD509}
2012-04-29 03:55 - 2012-04-29 03:55 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{C10E9CC9-0423-44A9-A47C-641E16CA40D5}
2012-04-29 03:54 - 2012-04-29 03:55 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{4CD501C0-988A-478A-A21C-D192DF6EEC7F}
2012-04-28 02:23 - 2012-04-28 02:23 - 0175095 ____A C:\Users\Richy Spitz\Downloads\112dB.Morgana.v1.2.3.VSTi.REPA.keygen.by.DYNAMiCS.zip
2012-04-26 01:55 - 2012-04-26 01:55 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{2A9FBCD0-7D96-4F23-B8A4-27E7E1E2B8C6}
2012-04-26 01:55 - 2012-04-26 01:55 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{28C7444F-A782-4669-9100-2E4C4699D0D1}
2012-04-25 06:15 - 2012-04-25 06:21 - 0000000 ____D C:\Users\Richy Spitz\Downloads\Humanoidsounds.Scanned.Synth.Pro.VSTi.v2.0.13.Incl.Keygen-AiR
2012-04-25 06:13 - 2012-04-25 06:13 - 7816216 ____A C:\Users\Richy Spitz\Downloads\Humanoidsounds.Scanned.Synth.Pro.VSTi.v2.0.13.Incl.Keygen-AiR.rar
2012-04-25 01:54 - 2012-04-25 01:54 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{FAB89B92-F7F5-4C9B-9FEA-5A3A1592EF00}
2012-04-25 01:54 - 2012-04-25 01:54 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{CC7F0FDD-D92C-46BE-B762-CC062E76075F}
2012-04-24 15:24 - 2012-04-24 15:24 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{A8C3E495-2109-4E5F-B924-DBE61A2E957C}
2012-04-24 15:24 - 2012-04-24 15:24 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{65C5F89D-B937-402B-867C-57D8ABD7BCBF}
2012-04-24 03:58 - 2012-04-24 03:58 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{4107FD49-BE1F-4533-A770-4276B1D9BE99}
2012-04-24 03:52 - 2012-04-24 03:52 - 0000000 ____D C:\Users\Richy Spitz\AppData\Local\{49C8E258-8256-4582-AC83-182E0F5342A4}
2012-05-24 03:39 - 2012-04-28 02:24 - 0000000 __ASH C:\Windows\System32\dds_trash_log.cmd

end

NOTICE: This script was written specifically for this user, for use on this particular machine. Running this on another machine may cause damage to your operating system

Now please enter System Recovery Options then select Command Prompt

Run FRST64 and press the Fix button just once and wait.
The tool will make a log on the flashdrive (Fixlog.txt) please post it to your reply.

Now restart, let it boot normally and tell me how it went.


NEXT

Please download Unhide.exe to your desktop:
  • Double-click on the Unhide.exe icon on your desktop and allow the program to run.
  • This program will remove the hidden attributes from all the files on your system.
  • Note: If you had purposely hidden any files, then you will need to hide them again after this tool has run.


NEXT

Refer to the ComboFix User's Guide

  • Download ComboFix from one of these locations:

    Link 1
    Link 2

    * IMPORTANT !!! Place ComboFix.exe on your Desktop
  • Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with ComboFix.
    You can get help on disabling your protection programs here
  • Double click on ComboFix.exe & follow the prompts.
  • Your desktop may go blank. This is normal. It will return when ComboFix is done. ComboFix may reboot your machine. This is normal.
  • When finished, it shall produce a log for you. Post that log in your next reply

    Note:
    Do not mouseclick combofix's window whilst it's running. That may cause it to stall.


    ---------------------------------------------------------------------------------------------
  • Ensure your AntiVirus and AntiSpyware applications are re-enabled.

    ---------------------------------------------------------------------------------------------

NOTE: If you encounter a message "illegal operation attempted on registry key that has been marked for deletion" and no programs will run - please just reboot and that will resolve that error.

Microsoft MVP - 2010, 2011, 2012, 2013, 2014, 2015


#5 rspitz

rspitz
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:12:05 PM

Posted 25 May 2012 - 05:27 AM

Hi, Thank you so much, i'm back in my pc now it booted normally, I am running those things now, i will let you know what happens. I really appreciate your help!

heres the fix log

Fix result of Farbar Recovery Tool (FRST written by farbar) Version: 23-05-2012 02
Ran by SYSTEM at 2012-05-25 11:00:38 Run:1
Running from F:\

==============================================

HKEY_USERS\Richy Spitz\Software\Microsoft\Windows\CurrentVersion\Run\\Seavzuob Value deleted successfully.
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell Value was restored.
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\jmcheng Key deleted successfully.
bdss service deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost\\netsvcs bt3cser Deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost\\netsvcs bdss Deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost\\netsvcs ntpr_nic_service2 Deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost\\netsvcs yukonwlh Deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost\\netsvcs pcx1nd5 Deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost\\netsvcs se45nd5 Deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost\\netsvcs GoToAssist Deleted successfully.
C:\Users\Richy Spitz\AppData\Local\{E4F7FF98-19A7-4555-8E44-532B820078CC} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{9903B5C5-0449-4343-A8C5-5C109ACB50BD} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{786FFF96-8667-4CF0-BA2C-41321BB45AC2} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{36C2DD25-162F-401D-BFDF-21D6DE706980} moved successfully.
C:\Users\Richy Spitz\Desktop\4869 moved successfully.
C:\Users\Richy Spitz\AppData\Local\{D74B44C1-C91A-4824-8E49-88508BA0C65B} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{19C963F3-08D8-432E-8E7A-169B7C55B30E} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{0CE640BD-EA8D-40EF-BA39-B764968637B2} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{FC631F17-D8D9-4CF5-9FEF-634B7BC3E794} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{287C1476-5353-4923-8D79-33549D9C777C} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{20DBAD04-7EFD-4A06-94F2-A33B3108DF6E} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{55E8495D-BAC9-4013-BC72-7B7DE92BBAF2} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{1499E765-E765-430A-ADBC-86BCB3CA5C35} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{BF6A7129-82F9-4E75-8F6F-D80091A03584} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{C16449E3-E66F-4228-A767-21C3603C08E4} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{9ECD3DF7-028E-479C-ABD6-CB58C8413D5C} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{37B66A1D-0537-44D0-AFE9-9549DFCC64E2} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{BBBE67F1-FD7F-465B-87FF-9C3FBE6A251F} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{912208FD-320B-4FB8-93FC-668E3806CB1A} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{CF36AD0E-744F-4658-A311-F5F0FF7FEB28} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{353CB2F9-E65E-42D3-9756-2B7EE0969E7E} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{3D1A3331-E7BD-4547-B797-B7A6E5B96B99} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{12F7EFFB-1F50-4A95-A837-66EB6EB5590B} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{72146120-D2CA-4387-9DCA-830AD2A9C9DF} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{F07ED8B3-DB80-4A57-A7A7-CCE254FD4E59} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{F348C3CD-66E1-4EAA-8518-588E030D72A4} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{0C383942-C434-4CF6-B187-04285D58C257} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{0C662A33-055C-468A-B6B0-9212A7AF883C} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{C20AD164-A513-4A72-8227-1DDC797398E7} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{51BB96C8-08CA-4523-9A86-312C186C6FEF} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{75C6716E-7D85-4590-9225-1F9B3B04556F} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{427EE75C-7BD1-459C-B4E1-FAFEC1AFC411} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{E7EFBE0A-034D-4E78-ABE9-96EC092F0BBF} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{E9099BF4-B587-4E6D-B887-757F9C26DA20} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{CC72D878-564C-44FA-A4CE-4B8542460E73} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{04980081-BAF1-442D-9DA3-8E5D4A868B3E} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{A385B7F4-48CA-441C-BA44-804E301565EB} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{30ED0779-B2DD-45CA-A7BD-07FD7FD7928B} moved successfully.
C:\Users\Richy Spitz\Downloads\Rob.Papen.Predator.VSTi.v1.1.Incl.Keygen-AiR.rar moved successfully.
C:\Users\Richy Spitz\AppData\Local\{89E043D0-3DA8-4050-966F-9FAAD2885B2C} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{76E14099-00B5-4266-832D-E96DFB6B6903} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{9212D1CD-8599-49DB-AFFF-02159C61856D} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{888A1379-49C1-489E-A89A-3B7FC43D587D} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{F8A05B90-592B-4A90-A630-CA43C3BF06D7} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{DB85E96D-FB9A-4915-8885-B24A5E55170B} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{C19D284E-17C2-4359-BFE6-5F8BF33BD999} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{5AF81F6A-7A19-4BAE-B5FE-C7C91A016EF3} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{EEE04563-7058-4AEC-AF7E-8CF3840258D2} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{0D6DE276-9549-471D-8085-F5BB4D04EB9D} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{DF8540CF-6251-43C2-BAB0-F79A770A47F6} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{002CBA91-F490-4BF8-84F4-655F91A5C19E} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{9797B15F-EBC3-4733-B1C5-2AC9541735C4} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{7E8A4AD1-3B4A-4352-A2BE-D0683F879893} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{1EDF2D70-CC21-4E5A-8558-F093A3B70BB6} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{069C7C0F-8925-4128-B8DE-BFDA701B8DB5} moved successfully.
C:\Users\Richy Spitz\Documents\TMP2D6F.tmp moved successfully.
C:\Users\Richy Spitz\AppData\Local\{C73405B2-DC0B-494A-BA41-D152B135292A} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{62C1E032-0FC2-4531-AFFE-8D21D4F06D25} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{C0D532AF-6DBD-4A8B-B865-D4F5A44B3E74} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{D17C8768-EF86-40A8-9785-6DA13103E1BB} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{412DAC80-2BBC-4565-BE73-6912551D40CD} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{84C587BC-B7B3-42AE-A492-7F55E990A8A9} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{1C75AB78-915C-403C-9A30-5C89B28989A7} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{576C26C6-ABE1-4FD3-B124-C893ADFEA4EE} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{1F457383-D5EC-4C54-B285-BB584DAD9616} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{C12384EB-06EA-4F6C-A97A-0E1E62813F4C} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{C7703F66-09A4-445E-938A-2B73ED759AEF} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{DBF057D1-4705-4422-B945-6B70275B32A5} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{9FC6A7A7-4B22-4817-ADED-DC8124E7B83A} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{A39276F5-8AB6-4E05-A6E1-65B21CB614A3} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{BF50E43D-DAD7-44C8-A084-93C1F4AB9891} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{E33B2F4F-4629-47CA-9FBB-DD1D5111338F} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{C0103425-CC9B-4175-AFFA-F6EE2DDC89E4} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{26BC3900-56BF-45E1-90AC-8FB0E1B0642C} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{8334655B-8A37-4DB6-8817-35F89C09FA5F} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{D9822411-B9B9-4554-87D6-255C34B59EE6} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{B8BDFD3F-1058-4889-A72B-FD2717B8E8CF} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{B7799057-7409-43C0-A680-92E6BE14F929} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{5F2FB24B-11EF-4B7F-A307-D911B826B7FF} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{2F91F9AE-6A58-4E2A-ACB2-88DCF61271E7} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{9F5D8A93-5412-4880-A326-21B893CAD6BC} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{4B0E5D97-5445-4D17-831C-29E68101DC7E} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{D5C8A43D-E8A2-42B2-AD62-6327AAB9CCBE} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{8DEAE378-CE22-4DE9-B5A9-781D4943E7F5} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{79989BC7-3F88-4179-B033-FAF3BCA0C6B6} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{58BB5B8C-D85B-4155-B921-85BE43AF8B3A} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{A63F737B-B846-4A5D-8D54-984B7645BB49} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{33504B96-60DE-4C5D-8779-F825D6554F78} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{A810EBB6-0A92-4024-954A-D632AFD7AA72} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{5F8F2E77-7A68-4A95-B44A-D88157380CE3} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{CE730BF9-602B-4921-A989-D11F3F5CCD2D} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{91F0C445-02EF-45BE-822A-0A67643F2B01} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{8902EAC3-E0DD-4A0A-9A46-30A92ED62D1E} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{3AD52A7F-1689-43DC-863D-AB3448335A24} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{4677E0E7-CF25-46F6-9FF9-FB8069001E2D} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{1243ACCE-A53A-4861-B3AD-0F15F74CF92B} moved successfully.
C:\Users\Richy Spitz\AppData\Roaming\Zavii moved successfully.
C:\Users\Richy Spitz\AppData\Roaming\Woyt moved successfully.
C:\Users\Richy Spitz\AppData\Roaming\Avboed moved successfully.
C:\Users\Richy Spitz\AppData\Local\{E34EA5A1-518D-4AC0-A515-6C0FED7D578D} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{A4D2CCE4-1717-49E3-9902-F5BEDDFDD509} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{C10E9CC9-0423-44A9-A47C-641E16CA40D5} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{4CD501C0-988A-478A-A21C-D192DF6EEC7F} moved successfully.
C:\Users\Richy Spitz\Downloads\112dB.Morgana.v1.2.3.VSTi.REPA.keygen.by.DYNAMiCS.zip moved successfully.
C:\Users\Richy Spitz\AppData\Local\{2A9FBCD0-7D96-4F23-B8A4-27E7E1E2B8C6} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{28C7444F-A782-4669-9100-2E4C4699D0D1} moved successfully.
C:\Users\Richy Spitz\Downloads\Humanoidsounds.Scanned.Synth.Pro.VSTi.v2.0.13.Incl.Keygen-AiR moved successfully.
C:\Users\Richy Spitz\Downloads\Humanoidsounds.Scanned.Synth.Pro.VSTi.v2.0.13.Incl.Keygen-AiR.rar moved successfully.
C:\Users\Richy Spitz\AppData\Local\{FAB89B92-F7F5-4C9B-9FEA-5A3A1592EF00} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{CC7F0FDD-D92C-46BE-B762-CC062E76075F} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{A8C3E495-2109-4E5F-B924-DBE61A2E957C} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{65C5F89D-B937-402B-867C-57D8ABD7BCBF} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{4107FD49-BE1F-4533-A770-4276B1D9BE99} moved successfully.
C:\Users\Richy Spitz\AppData\Local\{49C8E258-8256-4582-AC83-182E0F5342A4} moved successfully.
C:\Windows\System32\dds_trash_log.cmd moved successfully.

==== End of Fixlog ====

#6 rspitz

rspitz
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:12:05 PM

Posted 25 May 2012 - 06:35 AM

combofix log
ComboFix 12-05-25.02 - Richy Spitz 25/05/2012 12:01:52.1.2 - x86
Microsoft Windows 7 Ultimate 6.1.7601.1.1252.44.1033.18.1790.1103 [GMT 1:00]
Running from: c:\users\Richy Spitz\Desktop\ComboFix.exe
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\Images
c:\programdata\Propellerhead Software\ReCycle
c:\programdata\Propellerhead Software\ReCycle\ReCycle210.dat
c:\users\Richy Spitz\AppData\Roaming\AdVantage
c:\users\Richy Spitz\AppData\Roaming\AdVantage\AdVantage.exe
c:\users\Richy Spitz\AppData\Roaming\Microsoft\~DFK925053.tmp
c:\users\Richy Spitz\AppData\Roaming\Microsoft\1eaadjc.dll
c:\users\Richy Spitz\AppData\Roaming\Microsoft\bass.dll
c:\users\Richy Spitz\AppData\Roaming\Microsoft\kfgresk.dll
c:\users\Richy Spitz\AppData\Roaming\Microsoft\mjcriu.dll
c:\users\Richy Spitz\AppData\Roaming\Microsoft\peaadje.dll
c:\users\Richy Spitz\AppData\Roaming\Microsoft\qwadjb.dll
c:\users\Richy Spitz\AppData\Roaming\Microsoft\rsaadjd.dll
c:\users\Richy Spitz\AppData\Roaming\Propellerhead Software\ReCycle
c:\users\Richy Spitz\AppData\Roaming\Propellerhead Software\ReCycle\ReCycle Preferences File.prf
c:\users\Richy Spitz\Documents\TMP4632.tmp
c:\users\Richy Spitz\Documents\TMP9EB4.tmp
c:\users\Richy Spitz\setup_constructor.exe
c:\windows\$NtUninstallKB33179$
c:\windows\$NtUninstallKB33179$\2312946546
c:\windows\$NtUninstallKB33179$\4030165420\@
c:\windows\$NtUninstallKB33179$\4030165420\cfg.ini
c:\windows\$NtUninstallKB33179$\4030165420\Desktop.ini
c:\windows\$NtUninstallKB33179$\4030165420\L\nlibotme
c:\windows\$NtUninstallKB33179$\4030165420\oemid
c:\windows\$NtUninstallKB33179$\4030165420\U\00000001.@
c:\windows\$NtUninstallKB33179$\4030165420\U\00000002.@
c:\windows\$NtUninstallKB33179$\4030165420\U\00000004.@
c:\windows\$NtUninstallKB33179$\4030165420\U\80000000.@
c:\windows\$NtUninstallKB33179$\4030165420\U\80000004.@
c:\windows\$NtUninstallKB33179$\4030165420\U\80000032.@
c:\windows\$NtUninstallKB33179$\4030165420\version
c:\windows\system32\aalogger.dll
c:\windows\system32\dds_trash_log.cmd
c:\windows\system32\easdrv.dll
c:\windows\system32\LHidFilt.dll
c:\windows\system32\msvcsv60.dll
c:\windows\system32\nvidesm.dll
c:\windows\system32\NWHOST.dll
c:\windows\system32\PSSdk23.dll
c:\windows\system32\svchost.dll
.
Infected copy of c:\windows\system32\drivers\cdrom.sys was found and disinfected
Restored copy from - c:\windows\System32\DriverStore\FileRepository\cdrom.inf_x86_neutral_6381e09675524225\cdrom.sys
.
.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_AMService
-------\Service_acdpowerservice
-------\Service_RT25USBAP
.
.
((((((((((((((((((((((((( Files Created from 2012-04-25 to 2012-05-25 )))))))))))))))))))))))))))))))
.
.
2012-05-25 11:15 . 2012-05-25 11:19 -------- d-----w- c:\users\Richy Spitz\AppData\Local\temp
2012-05-25 11:15 . 2012-05-25 11:15 -------- d-----w- c:\users\Mcx1-RICHYSPITZ-PC\AppData\Local\temp
2012-05-25 11:15 . 2012-05-25 11:15 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-05-24 22:08 . 2012-05-24 22:10 -------- d-----w- C:\FRST
2012-05-19 12:28 . 2012-05-19 12:28 -------- d-----w- c:\program files\Yontoo
2012-05-19 12:28 . 2012-05-19 12:28 -------- d-----w- c:\programdata\Tarma Installer
2012-05-19 12:28 . 2012-05-19 12:28 -------- d-----w- c:\program files\1ClickDownload
2012-05-19 02:01 . 2012-05-19 02:01 -------- d-----w- c:\program files\MSXML 4.0
2012-05-17 12:57 . 2012-05-17 13:44 -------- d-----w- c:\programdata\EPSON
2012-05-17 12:56 . 2012-05-17 12:56 -------- d-----w- c:\program files\EPSON
2012-05-14 14:25 . 2003-03-18 17:04 765952 ----a-w- c:\windows\system32\msvcp71d.dll
2012-05-14 14:25 . 2003-03-18 17:03 544768 ----a-w- c:\windows\system32\msvcr71d.dll
2012-05-14 14:25 . 2012-05-14 14:28 -------- d-----w- c:\program files\Nomad Factory
2012-05-14 14:21 . 2012-05-14 14:21 -------- d-----w- c:\users\Richy Spitz\AppData\Roaming\UVIWorkstation
2012-05-14 14:10 . 2012-05-14 14:10 -------- d-----w- c:\users\Richy Spitz\AppData\Local\Conduit
2012-05-14 12:50 . 2012-05-14 12:50 -------- d-----w- c:\programdata\Common Files
2012-05-11 16:26 . 2012-05-11 16:26 -------- d-----w- c:\programdata\PACE
2012-05-11 16:26 . 2012-05-11 16:26 -------- d-----w- c:\program files\Common Files\PACE
2012-05-11 16:19 . 2012-05-11 16:19 -------- d-----w- c:\program files\UVISoundBanks
2012-05-11 16:19 . 2012-05-11 16:20 -------- d-----w- c:\program files\UVI Workstation
2012-05-11 16:19 . 2012-05-11 16:19 -------- d-----w- c:\program files\Common Files\UVI
2012-05-11 16:19 . 2011-10-06 16:22 2275328 ----a-w- c:\windows\system32\libsndfile-1.dll
2012-05-11 14:03 . 1997-11-03 21:10 277776 ----a-w- c:\windows\system\Msvcrt.dll
2012-05-09 22:51 . 2012-03-30 10:23 1291632 ----a-w- c:\windows\system32\drivers\tcpip.sys
2012-05-09 22:51 . 2012-03-31 04:30 1221632 ----a-w- c:\program files\Windows Journal\NBDoc.DLL
2012-05-09 22:51 . 2012-03-31 04:29 936960 ----a-w- c:\program files\Common Files\Microsoft Shared\ink\journal.dll
2012-05-09 22:51 . 2012-03-31 04:29 989184 ----a-w- c:\program files\Windows Journal\JNTFiltr.dll
2012-05-09 22:50 . 2012-03-31 04:29 969216 ----a-w- c:\program files\Windows Journal\JNWDRV.dll
2012-05-09 22:50 . 2012-03-31 04:39 3968368 ----a-w- c:\windows\system32\ntkrnlpa.exe
2012-05-09 22:50 . 2012-03-31 04:39 3913072 ----a-w- c:\windows\system32\ntoskrnl.exe
2012-05-09 22:50 . 2012-03-31 02:36 2343424 ----a-w- c:\windows\system32\win32k.sys
2012-05-09 22:47 . 2012-03-17 07:27 56176 ----a-w- c:\windows\system32\drivers\partmgr.sys
2012-05-09 22:47 . 2012-03-03 05:31 1077248 ----a-w- c:\windows\system32\DWrite.dll
2012-05-09 20:23 . 2012-05-10 10:09 -------- d-----w- c:\program files\hpmonitor
2012-05-09 20:23 . 2012-05-09 20:23 253 ----a-w- C:\user.js
2012-05-09 20:23 . 2012-05-09 20:23 -------- d-----w- c:\program files\BabylonToolbar
2012-05-09 20:22 . 2012-05-09 20:22 -------- d-----w- c:\users\Richy Spitz\AppData\Local\Babylon
2012-05-09 20:22 . 2012-05-09 20:22 -------- d-----w- c:\programdata\Babylon
2012-05-09 20:22 . 2012-05-09 20:22 -------- d-----w- c:\users\Richy Spitz\AppData\Roaming\Babylon
2012-05-09 19:36 . 2012-05-09 19:36 1185087 ----a-w- c:\program files\Mozilla Firefox\DefaultValue\Tek'it Audio\Genobazz\unins000.exe
2012-05-09 19:36 . 2012-02-29 18:48 3228160 ----a-w- c:\program files\Mozilla Firefox\DefaultValue\Tek'it Audio\Genobazz\TA Genobazz.dll
2012-05-08 12:36 . 2012-05-08 12:36 101720 ----a-w- c:\windows\system32\drivers\SBREDrv.sys
2012-05-08 12:32 . 2012-05-08 12:32 -------- d-----w- c:\users\Richy Spitz\AppData\Local\adaware
2012-05-08 12:32 . 2012-05-08 12:32 -------- d-----w- c:\programdata\Ad-Aware Browsing Protection
2012-05-08 12:32 . 2012-05-08 12:32 -------- d-----w- c:\program files\Toolbar Cleaner
2012-05-08 12:31 . 2012-05-08 12:31 -------- d-----w- c:\program files\Lavasoft
2012-05-08 12:31 . 2012-05-14 14:19 -------- d-----w- c:\programdata\Lavasoft
2012-05-04 20:51 . 2012-05-04 20:51 -------- d-----w- c:\program files\Mozilla Maintenance Service
2012-05-04 20:51 . 2012-05-04 20:51 157352 ----a-w- c:\program files\Mozilla Firefox\maintenanceservice_installer.exe
2012-05-04 20:51 . 2012-05-04 20:51 129976 ----a-w- c:\program files\Mozilla Firefox\maintenanceservice.exe
2012-05-03 00:48 . 2012-05-03 00:48 -------- d-----w- c:\users\Richy Spitz\AppData\Roaming\Futucraft
2012-04-29 18:34 . 2012-04-29 18:34 -------- d-----w- c:\users\Richy Spitz\AppData\Local\ElevatedDiagnostics
2012-04-28 10:34 . 2012-04-28 10:34 418464 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-04-28 10:16 . 2012-04-28 10:16 -------- d-----w- c:\programdata\112dB
2012-04-28 10:15 . 2012-04-28 10:15 1700352 ----a-w- c:\windows\system32\gdiplus.dll
2012-04-27 05:38 . 2012-04-13 07:36 6734704 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{44B80777-043C-41EA-AE89-10E5F0A04E95}\mpengine.dll
2012-04-25 14:23 . 2012-04-25 14:23 -------- d-----w- c:\program files\Scanned Synth Pro
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-04-28 10:34 . 2011-08-30 16:30 70304 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-03-08 03:01 . 2012-03-08 03:01 86528 ----a-w- c:\windows\system32\iesysprep.dll
2012-03-08 03:01 . 2012-03-08 03:01 76800 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2012-03-08 03:01 . 2012-03-08 03:01 74752 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe
2012-03-08 03:01 . 2012-03-08 03:01 74752 ----a-w- c:\windows\system32\iesetup.dll
2012-03-08 03:01 . 2012-03-08 03:01 63488 ----a-w- c:\windows\system32\tdc.ocx
2012-03-08 03:01 . 2012-03-08 03:01 48640 ----a-w- c:\windows\system32\mshtmler.dll
2012-03-08 03:01 . 2012-03-08 03:01 420864 ----a-w- c:\windows\system32\vbscript.dll
2012-03-08 03:01 . 2012-03-08 03:01 367104 ----a-w- c:\windows\system32\html.iec
2012-03-08 03:01 . 2012-03-08 03:01 35840 ----a-w- c:\windows\system32\imgutil.dll
2012-03-08 03:01 . 2012-03-08 03:01 23552 ----a-w- c:\windows\system32\licmgr10.dll
2012-03-08 03:01 . 2012-03-08 03:01 161792 ----a-w- c:\windows\system32\msls31.dll
2012-03-08 03:01 . 2012-03-08 03:01 152064 ----a-w- c:\windows\system32\wextract.exe
2012-03-08 03:01 . 2012-03-08 03:01 150528 ----a-w- c:\windows\system32\iexpress.exe
2012-03-08 03:01 . 2012-03-08 03:01 142848 ----a-w- c:\windows\system32\ieUnatt.exe
2012-03-08 03:01 . 2012-03-08 03:01 11776 ----a-w- c:\windows\system32\mshta.exe
2012-03-08 03:01 . 2012-03-08 03:01 110592 ----a-w- c:\windows\system32\IEAdvpack.dll
2012-03-08 03:01 . 2012-03-08 03:01 101888 ----a-w- c:\windows\system32\admparse.dll
2012-03-01 05:46 . 2012-04-12 12:05 19824 ----a-w- c:\windows\system32\drivers\fs_rec.sys
2012-03-01 05:37 . 2012-04-12 12:05 172544 ----a-w- c:\windows\system32\wintrust.dll
2012-03-01 05:33 . 2012-04-12 12:05 159232 ----a-w- c:\windows\system32\imagehlp.dll
2012-03-01 05:29 . 2012-04-12 12:05 5120 ----a-w- c:\windows\system32\wmi.dll
2012-02-28 01:18 . 2012-04-12 12:10 1799168 ----a-w- c:\windows\system32\jscript9.dll
2012-02-28 01:11 . 2012-04-12 12:10 1427456 ----a-w- c:\windows\system32\inetcpl.cpl
2012-02-28 01:11 . 2012-04-12 12:10 1127424 ----a-w- c:\windows\system32\wininet.dll
2012-02-28 01:03 . 2012-04-12 12:10 2382848 ----a-w- c:\windows\system32\mshtml.tlb
2007-07-17 13:13 . 2007-07-12 11:51 61440 ----a-w- c:\program files\RGSGrowBounds.aex
2012-05-04 20:51 . 2012-01-20 14:15 97208 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
------- Sigcheck -------
Note: Unsigned files aren't necessarily malware.
.
[-] 2012-02-24 . 7BD7F45FF37FA0669CD32CA0EF46E22C . 811520 . . [6.1.7601.17514] . . c:\windows\System32\user32.dll
[7] 2010-11-20 . F1DD3ACAEE5E6B4BBC69BC6DF75CEF66 . 811520 . . [6.1.7601.17514] . . c:\windows\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.1.7601.17514_none_cf3fd62ccb9e983d\user32.dll
[7] 2009-07-14 . 34B7E222E81FAFA885F0C5F2CFA56861 . 811520 . . [6.1.7600.16385] . . c:\windows\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.1.7600.16385_none_cd0ec264ceb014a3\user32.dll
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}"= "c:\program files\uTorrentBar\prxtbuTo0.dll" [2011-05-09 176936]
.
[HKEY_CLASSES_ROOT\clsid\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}]
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}]
2011-05-09 09:49 176936 ----a-w- c:\program files\uTorrentBar\prxtbuTo0.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}"= "c:\program files\uTorrentBar\prxtbuTo0.dll" [2011-05-09 176936]
.
[HKEY_CLASSES_ROOT\clsid\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}]
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC}"= "c:\program files\uTorrentBar\prxtbuTo0.dll" [2011-05-09 176936]
.
[HKEY_CLASSES_ROOT\clsid\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2012-02-14 22:58 94208 ----a-w- c:\users\Richy Spitz\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2012-02-14 22:58 94208 ----a-w- c:\users\Richy Spitz\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2012-02-14 22:58 94208 ----a-w- c:\users\Richy Spitz\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Facebook Update"="c:\users\Richy Spitz\AppData\Local\Facebook\Update\FacebookUpdate.exe" [2011-10-05 137536]
"Akamai NetSession Interface"="c:\users\Richy Spitz\AppData\Local\Akamai\netsession_win.exe" [2012-05-07 3331872]
"Spotify"="c:\users\Richy Spitz\AppData\Roaming\Spotify\spotify.exe" [2012-05-04 9478320]
"Spotify Web Helper"="c:\users\Richy Spitz\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" [2012-05-04 932528]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2010-12-13 421160]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2010-11-29 421888]
"VirtualCloneDrive"="c:\program files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" [2009-06-17 85160]
"AdobeCS4ServiceManager"="c:\program files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" [2008-08-14 611712]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-10-29 249064]
"dlcimon.exe"="c:\program files\Dell AIO Printer 946\dlcimon.exe" [2007-01-12 435696]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-03 843712]
"DivXUpdate"="c:\program files\DivX\DivX Update\DivXUpdate.exe" [2011-07-28 1259376]
"Ad-Aware Browsing Protection"="c:\programdata\Ad-Aware Browsing Protection\adawarebp.exe" [2011-11-14 197288]
"ReCycle Patch"="c:\users\Richy Spitz\Desktop\ReCyclePatch.exe" [2005-12-20 184320]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"adaware"="reg.exe delete HKCU\Software\AppDataLow\Software\adaware" [X]
"adaware_XP"="reg.exe delete HKCU\Software\adaware" [X]
.
c:\users\Richy Spitz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Dropbox.lnk - c:\users\Richy Spitz\AppData\Roaming\Dropbox\bin\Dropbox.exe [2012-2-15 24246216]
MagicDisc.lnk - c:\program files\MagicDisc\MagicDisc.exe [2011-5-9 576000]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-28 253088]
R3 EpPPDrv;EPSON Total Disc Maker DVD-ROM Filter Driver;c:\windows\system32\DRIVERS\EpPPDrv.sys [2010-01-25 13960]
R3 Lavasoft Kernexplorer;Lavasoft helper driver;c:\program files\Lavasoft\Ad-Aware\KernExplorer.sys [x]
R3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files\Mozilla Maintenance Service\maintenanceservice.exe [2012-05-04 129976]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2010-11-20 15872]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys [x]
R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [2011-02-26 1343400]
R3 WSDPrintDevice;WSD Print Support via UMB;c:\windows\system32\DRIVERS\WSDPrint.sys [2009-07-14 17920]
R3 WSDScan;WSD Scan Support via UMB;c:\windows\system32\DRIVERS\WSDScan.sys [2009-07-14 20480]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [2009-07-13 48128]
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
S2 Akamai;Akamai NetSession Interface;c:\windows\System32\svchost.exe [2009-07-14 20992]
S2 dlci_device;dlci_device;c:\windows\system32\dlcicoms.exe [2006-12-08 537480]
S2 EPSON Total Disc Control Service;EPSON Total Disc Control Service;c:\program files\EPSON\Total Disc Maker\PubSVC.exe [2011-09-14 192512]
S2 PaceLicenseDServices;PACE License Services;c:\program files\Common Files\PACE\Services\LicenseServices\LDSvc.exe [2011-09-08 2932224]
S3 DELTAII;Service for M-Audio Delta Driver (WDM);c:\windows\system32\DRIVERS\MAudioDelta.sys [2009-07-27 302472]
S3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [2009-07-13 14336]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
Akamai REG_MULTI_SZ Akamai
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
acdpowerservice
RT25USBAP
.
Contents of the 'Scheduled Tasks' folder
.
2012-05-25 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-28 10:34]
.
2012-05-23 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1797732261-2071493190-2982767033-1000Core.job
- c:\users\Richy Spitz\AppData\Local\Facebook\Update\FacebookUpdate.exe [2011-10-05 02:18]
.
2012-05-25 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1797732261-2071493190-2982767033-1000UA.job
- c:\users\Richy Spitz\AppData\Local\Facebook\Update\FacebookUpdate.exe [2011-10-05 02:18]
.
2012-05-23 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1797732261-2071493190-2982767033-1000Core.job
- c:\users\Richy Spitz\AppData\Local\Google\Update\GoogleUpdate.exe [2011-01-19 05:10]
.
2012-05-25 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1797732261-2071493190-2982767033-1000UA.job
- c:\users\Richy Spitz\AppData\Local\Google\Update\GoogleUpdate.exe [2011-01-19 05:10]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://search.babylon.com/?affID=111304&tt=290412_4_crm&babsrc=HP_ss&mntrId=66bc6f320000000000000011500bb00c
uInternet Settings,ProxyOverride = *.local;127.0.0.1:9421;<local>
IE: Free YouTube Download - c:\users\Richy Spitz\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm
IE: Free YouTube to MP3 Converter - c:\users\Richy Spitz\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
TCP: DhcpNameServer = 194.168.4.100 194.168.8.100
FF - ProfilePath - c:\users\Richy Spitz\AppData\Roaming\Mozilla\Firefox\Profiles\v5janepz.default\
FF - prefs.js: browser.search.selectedEngine - Search the Web
FF - prefs.js: browser.startup.homepage - about:home
FF - user.js: network.cookie.cookieBehavior - 0
FF - user.js: privacy.clearOnShutdown.cookies - false
FF - user.js: security.warn_viewing_mixed - false
FF - user.js: security.warn_viewing_mixed.show_once - false
FF - user.js: security.warn_submit_insecure - false
FF - user.js: security.warn_submit_insecure.show_once - false
.
- - - - ORPHANS REMOVED - - - -
.
HKCU-Run-AdobeBridge - (no file)
HKCU-Run-AdVantage - c:\users\Richy Spitz\AppData\Roaming\advantage\AdVantage.exe
AddRemove-Analog Modelling Kit - c:\program files\Outsim\SynthMaker\Modules\System\UninstallAnalogKit.exe
AddRemove-ReFillPacker4_is1 - c:\program files\Propellerhead\Reason\Uninstall ReFill Packer\unins000.exe
AddRemove-ReFillPacker5_is1 - c:\program files\Propellerhead\ReFill Packer\Uninstall ReFill Packer\unins000.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Akamai]
"ServiceDll"="c:\program files\common files\akamai/netsession_win_6c825ce.dll"
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_USERS\S-1-5-21-1797732261-2071493190-2982767033-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.Email.1"
.
[HKEY_USERS\S-1-5-21-1797732261-2071493190-2982767033-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vcf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.VCard.1"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
--------------------- DLLs Loaded Under Running Processes ---------------------
.
- - - - - - - > 'Explorer.exe'(2724)
c:\programdata\Ad-Aware Browsing Protection\adawarebp.dll
c:\users\Richy Spitz\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
.
------------------------ Other Running Processes ------------------------
.
c:\windows\system32\nvvsvc.exe
c:\windows\system32\AUDIODG.EXE
c:\windows\system32\nvvsvc.exe
c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\windows\system32\taskhost.exe
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
c:\windows\system32\conhost.exe
c:\windows\system32\WUDFHost.exe
c:\program files\iPod\bin\iPodService.exe
c:\program files\Windows Media Player\wmpnetwk.exe
c:\program files\iTunes\iTunes.exe
c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceHelper.exe
c:\windows\system32\conhost.exe
c:\program files\Common Files\Apple\Apple Application Support\distnoted.exe
c:\windows\system32\conhost.exe
c:\windows\system32\DllHost.exe
c:\program files\Common Files\Java\Java Update\jucheck.exe
.
**************************************************************************
.
Completion time: 2012-05-25 12:26:03 - machine was rebooted
ComboFix-quarantined-files.txt 2012-05-25 11:26
.
Pre-Run: 1,035,837,571,072 bytes free
Post-Run: 1,039,218,155,520 bytes free
.
- - End Of File - - CFD488072577D81360C33B5183086FD8

#7 CatByte

CatByte

    bleepin' tiger


  • Malware Response Team
  • 14,664 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Canada
  • Local time:08:05 AM

Posted 25 May 2012 - 04:07 PM

Hi,

Please do the following:

  • Very Important! Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before following the steps below.
  • They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results".
Copy/paste the text inside the Codebox below into notepad:

Here's how to do that:
Click Start > Run type Notepad click OK.
This will open an empty notepad file:

Copy all the text inside of the code box - Press Ctrl+C (or right click on the highlighted section and choose 'copy')

FCopy::
c:\windows\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.1.7601.17514_none_cf3fd62ccb9e983d\user32.dll | c:\windows\System32\user32.dll

NetSvc::
acdpowerservice
RT25USBAP

DDS::
uStart Page = hxxp://search.babylon.com/?affID=111304&tt=290412_4_crm&babsrc=HP_ss&mntrId=66bc6f320000000000000011500bb00c
uInternet Settings,ProxyOverride = *.local;127.0.0.1:9421;<local>

ClearJavaCache::

Now paste the copied text into the open notepad - press CTRL+V (or right click and choose 'paste')

Save this file to your desktop, Save this as "CFScript"


Here's how to do that:

1.Click File;
2.Click Save As... Change the directory to your desktop;
3.Change the Save as type to "All Files";
4.Type in the file name: CFScript
5.Click Save ...

Posted Image
  • Referring to the screenshot above, drag CFScript.txt into ComboFix.exe.
  • ComboFix may request an update; please allow it.
  • ComboFix will now run a scan on your system. It may reboot your system when it finishes. This is normal.
  • When finished, it shall produce a log for you.
  • Copy and paste the contents of the log in your next reply.

CAUTION: Do not mouse-click ComboFix's window while it is running. That may cause it to stall.


NEXT


Please download Malwarebytes' Anti-Malware
  • Double Click mbam-setup.exe to install the application.
  • Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
  • If an update is found, it will download and install the latest version.
  • Once the program has loaded, select "Perform Quick Scan", then click Scan.
  • The scan may take some time to finish, so please be patient.
  • When the scan is complete, click OK, then Show Results to view the results.
  • Make sure that everything is checked, and click Remove Selected. <-- very important
  • When disinfection is completed, a log will open in Notepad and you may be prompted to Restart. (See Extra Note)
  • The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
  • Copy&Paste the entire report in your next reply.

Extra Note:If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts, click OK to either and let MBAM proceed with the disinfection process, if asked to restart the computer, please do so immediately.



NEXT


Go here to run an online scanner from ESET.
  • Turn off the real time scanner of any existing antivirus program while performing the online scan
  • Tick the box next to YES, I accept the Terms of Use.
  • Click Start
  • When asked, allow the activeX control to install
  • Click Start
  • Make sure that the option Remove found threats is unticked and the Scan Archives option is ticked.
  • Click on Advanced Settings, ensure the options Scan for potentially unwanted applications, Scan for potentially unsafe applications, and Enable Anti-Stealth Technology are ticked.
  • Click Scan
  • Wait for the scan to finish
  • When the scan completes, press the LIST OF THREATS FOUND button
  • Press EXPORT TO TEXT FILE , name the file ESETSCAN and save it to your desktop
  • Include the contents of this report in your next reply.
  • Press the BACK button.
  • Press Finish


NEXT

Please advise how the computer is running now and if there are any outstanding issues

Microsoft MVP - 2010, 2011, 2012, 2013, 2014, 2015


#8 CatByte

CatByte

    bleepin' tiger


  • Malware Response Team
  • 14,664 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Canada
  • Local time:08:05 AM

Posted 04 June 2012 - 02:15 PM

Due to the lack of feedback, this topic is now closed.In the event you still have problems, please send me or any Moderator a Private Message and ask them to reopen this topic within the next 5 days. Please include a link to your topic in the Private Message. Thank you.

Microsoft MVP - 2010, 2011, 2012, 2013, 2014, 2015





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users