Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

pymaus.exe infection in Appdata\roaming\Kyerri


  • This topic is locked This topic is locked
55 replies to this topic

#1 jrbe

jrbe

  • Members
  • 37 posts
  • OFFLINE
  •  
  • Local time:01:41 AM

Posted 02 January 2014 - 06:43 PM

Hi, working on my girlfriends laptop and I'm in a bit over my head.  

 

There is some malware with the image name pymaus.exe that is using about 500k of memory and svchost.exe is also a bit above 500k of memory. Its located at C:\Users\*username*\AppData\Roaming\Kyerri. As the laptop is online for longer more images of pymaus.exe start, currently there were 5 running when i killed the wireless connection to compose this.

I had a port viewer and there were like 35 ports opened by pymaus.exe.

 

At first it wouldnt let me run malwarebytes.  I ran ESET online scanner & it found:

 

C:\Users\*username*\AppData\Local\Google\Chrome\UserData\Default\Users\ajfngoioibabdofailmpabbkihimabjm\cs.js Win32/TrojanDownloader.Tracur.V trojan cleaned by deleting - quarantined
 
C:\Users\*username*\AppData\Local\Temp\jar_cache6835962159442474848.tmp a variant of Java/Exploit.Agent.QKB trojan cleaned by deleting - quarantined
 
C:\Users\*username*\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\14\6a3cf5ce-3d174ff3 multiple threats cleaned by deleting - quarantined
 
C:\Users\*username*\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\14\cd5a54e-2b532d75 multiple threats cleaned by deleting - quarantined
 
C:\Users\*username*\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\31\73769d5f-3258c295 multiple threats cleaned by deleting - quarantined
 
C:\Users\*username*\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\50\47f6332-6a50d2a2 multiple threats cleaned by deleting - quarantined
 
C:\Users\*username*\AppData\Roaming\Mozilla\Firefox\Profiles\kjci2lkr.default\extensions\ylwyqezjvb@ylwyqezjvb.org.xpi Win32/TrojanDownloader.Tracur.V trojan deleted - quarantined
Operating memory a variant of Win32/Spy.Zbot.ABA trojan
 
It seemed to be ok for about an hour after the scan then it was back. There were 30 new files written in appdata\roaming over the course of 20 minutes and Kyerri was created about 6 hours later (written while eset was running.)

 

Its also trying to force download a javascript file dpx.js from i.simpli.fi but i keep hitting cancel.

 

I wont go poking around until someone says to do something.

 

Any help is greatly appreciated. TIA.



BC AdBot (Login to Remove)

 


#2 B-boy/StyLe/

B-boy/StyLe/

    Bleepin' Freestyler


  • Malware Response Team
  • 8,307 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Bulgaria
  • Local time:09:41 AM

Posted 02 January 2014 - 08:22 PM

Hello! Welcome to BleepingComputer Forums! :welcome:
My name is Georgi and and I will be helping you with your computer problems.

Before we begin, please note the following:

  • I will working be on your Malware issues, this may or may not, solve other issues you have with your machine.
  • The logs can take some time to research, so please be patient with me.
  • Stay with the topic until I tell you that your system is clean. Missing symptoms does not mean that everything is okay.
  • Instructions that I give are for your system only!
  • Please do not run any tools until requested ! The reason for this is so I know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.
  • Please perform all steps in the order received. If you can't understand something don't hesitate to ask.
  • Again I would like to remind you to make no further changes to your computer unless I direct you to do so. I will not help you if you do not follow my instructions.

 

 

STEP 1


  • Please download RogueKiller.exe and save to the desktop.
  • Close all windows and browsers
  • Right-click the program and select 'Run as Administrator'
  • Press the scan button.
  • A report opens on the desktop named - RKreport.txt
  • Please post it in your next reply.



 

STEP 2


  • Double-click SystemLook.exe to run it.
  • Copy the content of the following codebox into the main textfield:

    :filefind
    *.crx*
    *.json*
    *.xpi*
    :regfind
    ODUuMTcuMTMyLjU0OwAA
    ODUuMTcuMTQ3LjMzOwAA
    cdjbnddbclciabnckgeahmneohjlahdm

    :dir
    %USERPROFILE%\AppData\Local\Google\Chrome\UserData\Default\Default /s

  • Click the Look button to start the scan.
  • When finished, a notepad window will open with the results of the scan. Please upload the log at dropbox.com and  post the link to the log in your next reply.
Note: The log can also be found on your Desktop entitled SystemLook.txt
 

 

 

STEP 3

 

 

thisisujrt.gif  Please download Junkware Removal Tool to your desktop.

  • Shut down your protection software now to avoid potential conflicts.
  • Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
  • The tool will open and start scanning your system.
  • Please be patient as this can take a while to complete depending on your system's specifications.
  • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
  • Post the contents of JRT.txt into your next message.

 

 

STEP 4

 

 

Please download Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatibale with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

  • Double-click to run it. When the tool opens click Yes to disclaimer.
  • Press Scan button.
  • It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
  • The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

 

 

 

Regards,

Georgi


cXfZ4wS.png


#3 jrbe

jrbe
  • Topic Starter

  • Members
  • 37 posts
  • OFFLINE
  •  
  • Local time:01:41 AM

Posted 03 January 2014 - 12:11 AM

Thanks Georgi,

 

RogueKiller V8.8.0 [Dec 27 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
 
Operating System : Windows Vista (6.0.6002 Service Pack 2) 64 bits version
Started in : Normal mode
User : Administrator [Admin rights]
Mode : Scan -- Date : 01/02/2014 22:53:32
| ARK || FAK || MBR |
 
¤¤¤ Bad processes : 2 ¤¤¤
[SUSP PATH] pymaus.exe -- C:\Users\*user*\AppData\Roaming\Kyerri\pymaus.exe [-] -> KILLED [TermProc]
[SUSP PATH] pymaus.exe -- C:\Users\*user*\AppData\Roaming\Kyerri\pymaus.exe [-] -> KILLED [TermProc]
 
¤¤¤ Registry Entries : 13 ¤¤¤
[RUN][SUSP PATH] HKCU\[...]\Run : Equqpudanougzal (C:\Users\*user*\AppData\Roaming\Kyerri\pymaus.exe [-]) -> FOUND
[RUN][SUSP PATH] HKLM\[...]\Run : Equqpudanougzal ("C:\Users\*user*\AppData\Roaming\Kyerri\pymaus.exe" [-]) -> FOUND
[RUN][SUSP PATH] HKLM\[...]\Wow6432Node\[...]\Run : Equqpudanougzal (C:\Users\*user*\AppData\Roaming\Kyerri\pymaus.exe [-]) -> FOUND
[HJ POL][PUM] HKLM\[...]\System : DisableTaskMgr (0) -> FOUND
[HJ POL][PUM] HKLM\[...]\System : EnableLUA (0) -> FOUND
[HJ POL][PUM] HKLM\[...]\Wow6432Node\[...]\System : DisableTaskMgr (0) -> FOUND
[HJ POL][PUM] HKLM\[...]\Wow6432Node\[...]\System : EnableLUA (0) -> FOUND
[HJ DESK][PUM] HKCU\[...]\ClassicStartMenu : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> FOUND
[HJ DESK][PUM] HKCU\[...]\ClassicStartMenu : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> FOUND
[HJ DESK][PUM] HKCU\[...]\ClassicStartMenu : {645FF040-5081-101B-9F08-00AA002F954E} (1) -> FOUND
[HJ DESK][PUM] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> FOUND
[HJ DESK][PUM] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> FOUND
[WALLPAPER][PUM] HKCU\[...]\Desktop : WallPaper () -> FOUND
 
¤¤¤ Scheduled tasks : 31 ¤¤¤
[V2][SUSP PATH] Security Center Update - 1026192084 : C:\Users\*user*\AppData\Roaming\Emuvek\sirai.exe [-] -> FOUND
[V2][SUSP PATH] Security Center Update - 104876607 : C:\Users\*user*\AppData\Roaming\Neohcav\ruikk.exe [-] -> FOUND
[V2][SUSP PATH] Security Center Update - 1055816976 : C:\Users\*user*\AppData\Roaming\Fuitifa\koiks.exe [-] -> FOUND
[V2][SUSP PATH] Security Center Update - 1104061209 : C:\Users\*user*\AppData\Roaming\Syeryp\osexg.exe [-] -> FOUND
[V2][SUSP PATH] Security Center Update - 1144123063 : C:\Users\*user*\AppData\Roaming\Tyebwedi\okykb.exe [-] -> FOUND
[V2][SUSP PATH] Security Center Update - 124462569 : C:\Users\*user*\AppData\Roaming\Ifadizu\veassu.exe [x] -> FOUND
[V2][SUSP PATH] Security Center Update - 1415457980 : C:\Users\*user*\AppData\Roaming\Piniocby\esulgao.exe [-] -> FOUND
[V2][SUSP PATH] Security Center Update - 1733702126 : C:\Users\*user*\AppData\Roaming\Zagiusow\gokuxii.exe [-] -> FOUND
[V2][SUSP PATH] Security Center Update - 1736419887 : C:\Users\*user*\AppData\Roaming\Kyerri\pymaus.exe [-] -> FOUND
[V2][SUSP PATH] Security Center Update - 1853788960 : C:\Users\*user*\AppData\Roaming\Epqyqy\yrimv.exe [-] -> FOUND
[V2][SUSP PATH] Security Center Update - 2359199964 : C:\Users\*user*\AppData\Roaming\Ykivcy\diqyigf.exe [-] -> FOUND
[V2][SUSP PATH] Security Center Update - 2360659064 : C:\Users\*user*\AppData\Roaming\Rizuazb\oldoyri.exe [-] -> FOUND
[V2][SUSP PATH] Security Center Update - 2639795876 : C:\Users\*user*\AppData\Roaming\Idseemoc\ocusn.exe [-] -> FOUND
[V2][SUSP PATH] Security Center Update - 2679734896 : C:\Users\*user*\AppData\Roaming\Vyrousi\gixyv.exe [-] -> FOUND
[V2][SUSP PATH] Security Center Update - 2863506064 : C:\Users\*user*\AppData\Roaming\Vehyse\lexepoi.exe [-] -> FOUND
[V2][SUSP PATH] Security Center Update - 306113306 : C:\Users\*user*\AppData\Roaming\Ryehru\acewn.exe [-] -> FOUND
[V2][SUSP PATH] Security Center Update - 3081185136 : C:\Users\*user*\AppData\Roaming\Ziuwba\cameu.exe [-] -> FOUND
[V2][SUSP PATH] Security Center Update - 31372384 : C:\Users\*user*\AppData\Roaming\Bytuhi\ycpiahd.exe [-] -> FOUND
[V2][SUSP PATH] Security Center Update - 3154091738 : C:\Users\*user*\AppData\Roaming\Xoaztex\omudseq.exe [-] -> FOUND
[V2][SUSP PATH] Security Center Update - 3241642843 : C:\Users\*user*\AppData\Roaming\Cewyyf\ustodoo.exe [-] -> FOUND
[V2][SUSP PATH] Security Center Update - 3434255297 : C:\Users\*user*\AppData\Roaming\Ytulfie\vuniyq.exe [-] -> FOUND
[V2][SUSP PATH] Security Center Update - 3737816061 : C:\Users\*user*\AppData\Roaming\Fetyra\utebalu.exe [-] -> FOUND
[V2][SUSP PATH] Security Center Update - 3903052156 : C:\Users\*user*\AppData\Roaming\Zagoak\izobyml.exe [-] -> FOUND
[V2][SUSP PATH] Security Center Update - 4077155733 : C:\Users\*user*\AppData\Roaming\Taabyvsy\ulsaly.exe [-] -> FOUND
[V2][SUSP PATH] Security Center Update - 4115803536 : C:\Users\*user*\AppData\Roaming\Gezeut\cauqi.exe [-] -> FOUND
[V2][SUSP PATH] Security Center Update - 4133396903 : C:\Users\*user*\AppData\Roaming\Itkuofs\xasoyks.exe [x] -> FOUND
[V2][SUSP PATH] Security Center Update - 4256060576 : C:\Users\*user*\AppData\Roaming\Coipqyab\rycoa.exe [-] -> FOUND
[V2][SUSP PATH] Security Center Update - 589180701 : C:\Users\*user*\AppData\Roaming\Uzfibufa\cilaew.exe [-] -> FOUND
[V2][SUSP PATH] Security Center Update - 820770416 : C:\Users\*user*\AppData\Roaming\Qeunezha\umcid.exe [-] -> FOUND
[V2][SUSP PATH] Security Center Update - 915616505 : C:\Users\*user*\AppData\Roaming\Urcefu\docuom.exe [-] -> FOUND
[V2][SUSP PATH] Security Center Update - 992505961 : C:\Users\*user*\AppData\Roaming\Gouserc\daifak.exe [-] -> FOUND
 
¤¤¤ Startup Entries : 0 ¤¤¤
 
¤¤¤ Web browsers : 0 ¤¤¤
 
¤¤¤ Browser Addons : 0 ¤¤¤
 
¤¤¤ Particular Files / Folders: ¤¤¤
 
¤¤¤ Driver : [NOT LOADED 0x0] ¤¤¤
 
¤¤¤ External Hives: ¤¤¤
 
¤¤¤ Infection :  ¤¤¤
 
¤¤¤ HOSTS File: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts
 
 
127.0.0.1       localhost
::1             localhost
 
 
¤¤¤ MBR Check: ¤¤¤
 
+++++ PhysicalDrive0: (\\.\PHYSICALDRIVE0 @ IDE) Hitachi HTS543232L9A300 +++++
--- User ---
[MBR] 5f3ede1b01834711853a0bb74dfd5bfa
[BSP] 0fe6ed82968378e718054fcde85ede47 : Toshiba MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 63 | Size: 295718 Mo
1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 605632512 | Size: 9523 Mo
User = LL1 ... OK!
User = LL2 ... OK!
 
Finished : << RKreport[0]_S_01022014_225332.txt >>

SystemLook 30.07.11 by jpshortstuff
Log created at 22:56 on 02/01/2014 by Administrator
Administrator - Elevation successful
WARNING: SystemLook running under WOW64. Use SystemLook_x64 for accurate results.
 
========== filefind ==========
 
Searching for "*.crx*"
C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\default_apps\docs.crx --a---- 4578 bytes [00:29 01/12/2013] [10:55 14/11/2013] 2C71C49F991095A1848624907BACBB08
C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\default_apps\drive.crx --a---- 25561 bytes [00:29 01/12/2013] [10:55 14/11/2013] 71E1283B8440F6264CEC99DF9AD81F5B
C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\default_apps\gmail.crx --a---- 24040 bytes [00:29 01/12/2013] [10:55 14/11/2013] 2E2E328E5BF6BE61203164B3E9EA8094
C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\default_apps\search.crx --a---- 26392 bytes [00:29 01/12/2013] [10:55 14/11/2013] 8AD223868AB9974F7746D0227730A0CC
C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\default_apps\youtube.crx --a---- 23668 bytes [00:29 01/12/2013] [10:55 14/11/2013] D2F6A1B11344D9AC7BCFB75900D4ADE1
C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\default_apps\docs.crx --a---- 4578 bytes [21:21 06/12/2013] [02:29 04/12/2013] 2C71C49F991095A1848624907BACBB08
C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\default_apps\drive.crx --a---- 25561 bytes [21:21 06/12/2013] [02:29 04/12/2013] 71E1283B8440F6264CEC99DF9AD81F5B
C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\default_apps\gmail.crx --a---- 24040 bytes [21:21 06/12/2013] [02:29 04/12/2013] 2E2E328E5BF6BE61203164B3E9EA8094
C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\default_apps\search.crx --a---- 26392 bytes [21:21 06/12/2013] [02:29 04/12/2013] 8AD223868AB9974F7746D0227730A0CC
C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\default_apps\youtube.crx --a---- 23668 bytes [21:21 06/12/2013] [02:29 04/12/2013] D2F6A1B11344D9AC7BCFB75900D4ADE1
 
Searching for "*.json*"
C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\default_apps\external_extensions.json --a---- 982 bytes [00:30 01/12/2013] [10:55 14/11/2013] 5D31037D06A04AECD968D32CC59C1CF3
C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\Extensions\external_extensions.json --a---- 99 bytes [00:30 01/12/2013] [10:55 14/11/2013] 280A9277B0E605E905D7F18B6148EEB7
C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\PepperFlash\manifest.json --a---- 2054 bytes [00:30 01/12/2013] [10:55 14/11/2013] E7B242A2D92CCD8EE855FAB05F4D1923
C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\default_apps\external_extensions.json --a---- 982 bytes [21:21 06/12/2013] [02:29 04/12/2013] 5D31037D06A04AECD968D32CC59C1CF3
C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\Extensions\external_extensions.json --a---- 99 bytes [21:21 06/12/2013] [02:29 04/12/2013] 280A9277B0E605E905D7F18B6148EEB7
C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\PepperFlash\manifest.json --a---- 2054 bytes [21:21 06/12/2013] [02:29 04/12/2013] 8643AD0E275118A80BB6A821FA4E072C
C:\Program Files (x86)\Microsoft\BingBar\apps\mail\7.0.609\providers\gmail.json --a---- 1285 bytes [14:46 25/02/2011] [14:46 25/02/2011] 4C712EC1331EB1F0A31AEBA5F0FC52B9
C:\Program Files (x86)\Microsoft\BingBar\apps\mail\7.0.609\providers\hotmail.json --a---- 1255 bytes [14:46 25/02/2011] [14:46 25/02/2011] F6C69BF6EE9CBA0164E0B0D1B9064855
C:\Program Files (x86)\Microsoft\BingBar\apps\mail\7.0.609\providers\yahoomail.json --a---- 1309 bytes [14:46 25/02/2011] [14:46 25/02/2011] BB04532813E669118F685A277C650A68
C:\Program Files (x86)\Microsoft\BingBar\apps\maps\7.0.609\js\whitelist.json --a---- 21025 bytes [14:46 25/02/2011] [14:46 25/02/2011] 1E637EAB6A58D5A9294BDFAF3FF2C2F7
C:\Program Files (x86)\Microsoft\BingBar\apps\search\7.0.609\js\whitelist.json --a---- 23863 bytes [14:46 25/02/2011] [14:46 25/02/2011] 00F91BB9BF5194DA4B919BD22804EF3C
C:\Program Files (x86)\Microsoft\BingBar\apps\toast\7.0.609\js\transitionTime.json --a---- 104 bytes [14:46 25/02/2011] [14:46 25/02/2011] 2ED32BBBBBE305DEA990411535F2D3F0
C:\Program Files (x86)\Safari\Apple Application Support\WebKit.resources\inspector\ExtensionAPISchema.json --a---- 14617 bytes [15:40 22/03/2012] [15:40 22/03/2012] 17768D4FEDB85D910C20B89F3D2CA095
C:\Program Files (x86)\VideoLAN\VLC\lua\http\requests\browse.json --a---- 1425 bytes [00:04 17/03/2012] [00:04 17/03/2012] 02A74626B57096A4F4F9DD77EBCBCDAE
C:\Program Files (x86)\VideoLAN\VLC\lua\http\requests\playlist.json --a---- 1384 bytes [00:04 17/03/2012] [00:04 17/03/2012] F49845331585BF2709690967A4A01E29
C:\Program Files (x86)\VideoLAN\VLC\lua\http\requests\status.json --a---- 1427 bytes [00:04 17/03/2012] [00:04 17/03/2012] 299B8075ABD804616EDCC490A69C4AB1
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\manifest.json --a---- 724 bytes [04:57 07/12/2013] [04:57 07/12/2013] 98E109477B145855CA65EEC8988EEFE9
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\ar\messages.json --a---- 374 bytes [04:57 07/12/2013] [04:57 07/12/2013] 2586421C45920A227CAB26657B31ECDB
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\bg\messages.json --a---- 428 bytes [04:57 07/12/2013] [04:57 07/12/2013] 9ED363DF524943138996995FD4DE2D65
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\ca\messages.json --a---- 207 bytes [04:57 07/12/2013] [04:57 07/12/2013] CDA92E97978F8AAC073FA4CA3D509EE2
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\cs\messages.json --a---- 230 bytes [04:57 07/12/2013] [04:57 07/12/2013] 0F0B5623B51DF32B47BA393B51ED99FF
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\da\messages.json --a---- 216 bytes [04:57 07/12/2013] [04:57 07/12/2013] 23FDFD2ECCBE626E47CD97D434632069
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\de\messages.json --a---- 217 bytes [04:57 07/12/2013] [04:57 07/12/2013] 1A71997D5A86A7FB57EB1850EA7D71E6
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\el\messages.json --a---- 416 bytes [04:57 07/12/2013] [04:57 07/12/2013] 0C3D86171D9B3098B1C9644ACFA019F3
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\en_GB\messages.json --a---- 208 bytes [04:57 07/12/2013] [04:57 07/12/2013] D85A412DDFA11EA5BCA068FF4F66786C
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\en_US\messages.json --a---- 209 bytes [04:57 07/12/2013] [04:57 07/12/2013] D7DCC6E7CA3F4BE8D5F48EF9E9D58CF4
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\es\messages.json --a---- 206 bytes [04:57 07/12/2013] [04:57 07/12/2013] 29E15C492DB45CEBBDA129C74E70D0E2
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\es_419\messages.json --a---- 206 bytes [04:57 07/12/2013] [04:57 07/12/2013] 29E15C492DB45CEBBDA129C74E70D0E2
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\et\messages.json --a---- 216 bytes [04:57 07/12/2013] [04:57 07/12/2013] 1B13A883F1B965F741B068345DC34FD9
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\fi\messages.json --a---- 216 bytes [04:57 07/12/2013] [04:57 07/12/2013] 2B54BFA6089001103CA63CE9BDCC6983
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\fil\messages.json --a---- 219 bytes [04:57 07/12/2013] [04:57 07/12/2013] EDA0FCFFDDF20A991D79BDD9FA5E858E
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\fr\messages.json --a---- 224 bytes [04:57 07/12/2013] [04:57 07/12/2013] 75A734320FB9016AD7DECB317DF8F9D2
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\he\messages.json --a---- 293 bytes [04:57 07/12/2013] [04:57 07/12/2013] 1EFC1A18F531C85E3D1DC298B0098955
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\hi\messages.json --a---- 375 bytes [04:57 07/12/2013] [04:57 07/12/2013] 33926A84B9B81FE0A3A753A07568A211
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\hu\messages.json --a---- 251 bytes [04:57 07/12/2013] [04:57 07/12/2013] 548C403B0CA66EFCC85DB674080440BB
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\id\messages.json --a---- 209 bytes [04:57 07/12/2013] [04:57 07/12/2013] 9213E5F82888D5E3EEAF1BD7BC7A67AC
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\it\messages.json --a---- 213 bytes [04:57 07/12/2013] [04:57 07/12/2013] 31905588AE3EEB77E9E96FEB5BACA3B3
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\ja\messages.json --a---- 263 bytes [04:57 07/12/2013] [04:57 07/12/2013] 675FA4BA824CBC0439AB8D805058C99E
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\ko\messages.json --a---- 254 bytes [04:57 07/12/2013] [04:57 07/12/2013] 073E2411ABA2E7C2C6A11AE05114DEF0
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\lt\messages.json --a---- 234 bytes [04:57 07/12/2013] [04:57 07/12/2013] 8538DBD057F6C4B4876607B730B1971C
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\lv\messages.json --a---- 232 bytes [04:57 07/12/2013] [04:57 07/12/2013] A6E4EF51B987005EEAD6A332974F6BF2
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\ms\messages.json --a---- 207 bytes [04:57 07/12/2013] [04:57 07/12/2013] 2766D5B9A8E40FE6691BE3F37348AFD6
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\nl\messages.json --a---- 217 bytes [04:57 07/12/2013] [04:57 07/12/2013] 701D7ECF13542F59C58B21FAEF88C1AE
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\no\messages.json --a---- 195 bytes [04:57 07/12/2013] [04:57 07/12/2013] C13B7D73C7A543546CE63367C0D700CA
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\pl\messages.json --a---- 217 bytes [04:57 07/12/2013] [04:57 07/12/2013] A0A86FA83DAD0F8F22A439C8E6DCE763
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\pt_BR\messages.json --a---- 206 bytes [04:57 07/12/2013] [04:57 07/12/2013] 9F3925EF0F907B07ECBC8A3727F19721
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\pt_PT\messages.json --a---- 208 bytes [04:57 07/12/2013] [04:57 07/12/2013] 3A52EEDFCA079439677BC42E800A218B
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\ro\messages.json --a---- 225 bytes [04:57 07/12/2013] [04:57 07/12/2013] C707363B3BAAB39130294384504C2D2D
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\ru\messages.json --a---- 434 bytes [04:57 07/12/2013] [04:57 07/12/2013] 1D3F6DB1F33813E2428A8C78AF0B9893
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\sk\messages.json --a---- 225 bytes [04:57 07/12/2013] [04:57 07/12/2013] 5855CC4AA15DEFB435C69B3AC3B36C39
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\sl\messages.json --a---- 218 bytes [04:57 07/12/2013] [04:57 07/12/2013] 75EA0350804326B40BA2BC5739C4A171
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\sr\messages.json --a---- 380 bytes [04:57 07/12/2013] [04:57 07/12/2013] 37A2926DEAF11918D39139018B9A33A1
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\sv\messages.json --a---- 214 bytes [04:57 07/12/2013] [04:57 07/12/2013] 3C4D8B7ACF404F7AE5B647BE24E0A5F1
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\th\messages.json --a---- 329 bytes [04:57 07/12/2013] [04:57 07/12/2013] 65DD9D347A6F61699C0D5AE99358716A
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\tr\messages.json --a---- 243 bytes [04:57 07/12/2013] [04:57 07/12/2013] 4793CF2F6C1257E152A12B8FD1C76485
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\uk\messages.json --a---- 428 bytes [04:57 07/12/2013] [04:57 07/12/2013] 3DE4E016914A029A9254938BFB28A2A8
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\vi\messages.json --a---- 252 bytes [04:57 07/12/2013] [04:57 07/12/2013] 461DABD15F63F56C2A8C25C72092276B
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\zh_CN\messages.json --a---- 233 bytes [04:57 07/12/2013] [04:57 07/12/2013] 332DB4EC98D2BEC0383BCFDF67BD1A50
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\zh_TW\messages.json --a---- 233 bytes [04:57 07/12/2013] [04:57 07/12/2013] B554765872643769E1108DD312D076C1
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\manifest.json --a---- 996 bytes [04:57 07/12/2013] [04:57 07/12/2013] E6DC57A9ABA31600533C6A7784919FFB
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\ar\messages.json --a---- 422 bytes [04:57 07/12/2013] [04:57 07/12/2013] D074CD99068529EB5A22DF31E9D5913F
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\bg\messages.json --a---- 559 bytes [04:57 07/12/2013] [04:57 07/12/2013] E3F6B91EC2C0E8A2B966EA158A08B1F0
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\ca\messages.json --a---- 265 bytes [04:57 07/12/2013] [04:57 07/12/2013] 77487466CD1B18FEAD66FC69AF391221
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\cs\messages.json --a---- 283 bytes [04:57 07/12/2013] [04:57 07/12/2013] 134878E356B8D07D30E64A18F00A6565
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\da\messages.json --a---- 251 bytes [04:57 07/12/2013] [04:57 07/12/2013] 53F3ABC7F5F6E2F9C4603D27EB979E88
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\de\messages.json --a---- 256 bytes [04:57 07/12/2013] [04:57 07/12/2013] F6B48063D035D1025AD4532FFA2430C8
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\el\messages.json --a---- 565 bytes [04:57 07/12/2013] [04:57 07/12/2013] 3AFC6760735284C2CB954EAF80A2FC3F
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\en_GB\messages.json --a---- 249 bytes [04:57 07/12/2013] [04:57 07/12/2013] 5C5C111D80097AEB22E5223787734FC2
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\en_US\messages.json --a---- 249 bytes [04:57 07/12/2013] [04:57 07/12/2013] 5C5C111D80097AEB22E5223787734FC2
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\es\messages.json --a---- 259 bytes [04:57 07/12/2013] [04:57 07/12/2013] DF4BD088D5B32B2C31BE1BFE404558A6
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\es_419\messages.json --a---- 259 bytes [04:57 07/12/2013] [04:57 07/12/2013] DF4BD088D5B32B2C31BE1BFE404558A6
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\et\messages.json --a---- 259 bytes [04:57 07/12/2013] [04:57 07/12/2013] A2130F26BA56617670D7721D77E59BE1
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\eu\messages.json --a---- 243 bytes [04:57 07/12/2013] [04:57 07/12/2013] B0AF125B9AD99D6EF007C1C5E4788317
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\fi\messages.json --a---- 277 bytes [04:57 07/12/2013] [04:57 07/12/2013] 6EF1BDCCF457AEDCE9BAC9C1B3EE864F
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\fil\messages.json --a---- 260 bytes [04:57 07/12/2013] [04:57 07/12/2013] BDEF574C1E45B062653C38AB710A175E
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\fr\messages.json --a---- 260 bytes [04:57 07/12/2013] [04:57 07/12/2013] 64DD2E108845390175E01CB0BF7EE577
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\he\messages.json --a---- 438 bytes [04:57 07/12/2013] [04:57 07/12/2013] 39000F7C9F7F63BF921F0C58DF2F672E
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\hi\messages.json --a---- 492 bytes [04:57 07/12/2013] [04:57 07/12/2013] 307274E619FEF5ACE59F05157348AD16
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\hr\messages.json --a---- 263 bytes [04:57 07/12/2013] [04:57 07/12/2013] EFDE2EDD0907C7906B19D2539EF693F5
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\hu\messages.json --a---- 276 bytes [04:57 07/12/2013] [04:57 07/12/2013] 547EDF90ADFBA09304FEED9EB7DBB985
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\id\messages.json --a---- 261 bytes [04:57 07/12/2013] [04:57 07/12/2013] FE22191E30FC270278FDED58DD4C4138
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\it\messages.json --a---- 258 bytes [04:57 07/12/2013] [04:57 07/12/2013] E954A0D6AE514F4445163F9F17349270
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\ja\messages.json --a---- 395 bytes [04:57 07/12/2013] [04:57 07/12/2013] 8E61873E7C604AB6AB78941DE872D274
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\ko\messages.json --a---- 365 bytes [04:57 07/12/2013] [04:57 07/12/2013] DF1C991A376FEAF3C8BAEF1AA344E5E9
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\lt\messages.json --a---- 309 bytes [04:57 07/12/2013] [04:57 07/12/2013] 50AF5D4387A123BDE4ED9B9566103789
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\lv\messages.json --a---- 262 bytes [04:57 07/12/2013] [04:57 07/12/2013] EAC98BBCFDE4B864383589885D2C82A4
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\ms\messages.json --a---- 254 bytes [04:57 07/12/2013] [04:57 07/12/2013] 9F94BBD70C447A94F02625B750E13DAA
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\nl\messages.json --a---- 250 bytes [04:57 07/12/2013] [04:57 07/12/2013] D7F6C0118AF6C27F43263CD1D0244707
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\no\messages.json --a---- 218 bytes [04:57 07/12/2013] [04:57 07/12/2013] D6A1BF7219C30249115A6A366EC01CE2
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\pl\messages.json --a---- 261 bytes [04:57 07/12/2013] [04:57 07/12/2013] 30F8807C8E66E23CC07E342330081CF8
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\pt_BR\messages.json --a---- 250 bytes [04:57 07/12/2013] [04:57 07/12/2013] F6F4E1CE5022E45EF6E72138171627C9
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\pt_PT\messages.json --a---- 272 bytes [04:57 07/12/2013] [04:57 07/12/2013] 4A40A5DD332681AE6139DFFA6C49179F
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\ro\messages.json --a---- 309 bytes [04:57 07/12/2013] [04:57 07/12/2013] C1B3128821B1FE7978221F444DCA4C0E
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\ru\messages.json --a---- 614 bytes [04:57 07/12/2013] [04:57 07/12/2013] 3CB108582E945FCD9DDDC254A20E01A7
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\sk\messages.json --a---- 293 bytes [04:57 07/12/2013] [04:57 07/12/2013] 643C60E2823E409912D41DDBF2E4B68C
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\sl\messages.json --a---- 268 bytes [04:57 07/12/2013] [04:57 07/12/2013] CC32B1A596CE9CEFBE7C2580860234AE
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\sr\messages.json --a---- 467 bytes [04:57 07/12/2013] [04:57 07/12/2013] 01A348D263AB6A699F0E07380441E9DD
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\sv\messages.json --a---- 261 bytes [04:57 07/12/2013] [04:57 07/12/2013] 344998E12A700D26D899FC3EC62056EB
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\th\messages.json --a---- 521 bytes [04:57 07/12/2013] [04:57 07/12/2013] 801098F07BD5ADD0BD6AE21B64CB61F3
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\tr\messages.json --a---- 302 bytes [04:57 07/12/2013] [04:57 07/12/2013] 290646D43E911C5F19913ACF81B9F3C4
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\uk\messages.json --a---- 657 bytes [04:57 07/12/2013] [04:57 07/12/2013] BE0CCE5AE07284F3153F95D46833F68A
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\vi\messages.json --a---- 321 bytes [04:57 07/12/2013] [04:57 07/12/2013] 82767FD874A55A718AC6BCF38C4CF2AF
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\zh_CN\messages.json --a---- 360 bytes [04:57 07/12/2013] [04:57 07/12/2013] BC87AB08DD1A3B9E0D9C4F39A832A4AE
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\zh_TW\messages.json --a---- 348 bytes [04:57 07/12/2013] [04:57 07/12/2013] 540A14C439D6562AC45AE4B39A10660D
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\manifest.json --a---- 785 bytes [04:57 07/12/2013] [04:57 07/12/2013] 0A4B1F66636E0A0275DF7CAD563E2D9D
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\ar\messages.json --a---- 401 bytes [04:57 07/12/2013] [04:57 07/12/2013] 9E5196B0371D7472ADBC76B0D24387EE
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\bg\messages.json --a---- 427 bytes [04:57 07/12/2013] [04:57 07/12/2013] ECC218F02AD23568A736F6CAABA093C6
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\ca\messages.json --a---- 250 bytes [04:57 07/12/2013] [04:57 07/12/2013] 8D66C382986948F2D9B8C449117CE014
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\cs\messages.json --a---- 255 bytes [04:57 07/12/2013] [04:57 07/12/2013] 3B1388F38C14A550F1B423681854F8E1
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\da\messages.json --a---- 242 bytes [04:57 07/12/2013] [04:57 07/12/2013] 7F47C449A6A9968CDB5E9A681AD41713
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\de\messages.json --a---- 226 bytes [04:57 07/12/2013] [04:57 07/12/2013] 3AEF1AFEA23425011D7080D742BEBB5E
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\el\messages.json --a---- 475 bytes [04:57 07/12/2013] [04:57 07/12/2013] 6AEEEFA17DBF4C3F7F2CEFBFB6B65BC2
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\en\messages.json --a---- 227 bytes [04:57 07/12/2013] [04:57 07/12/2013] 437B589124A420EFAC2A6C3D1AD600FB
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\es\messages.json --a---- 240 bytes [04:57 07/12/2013] [04:57 07/12/2013] 9903D21609669AFBA89B5C89AFB26FA3
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\fi\messages.json --a---- 222 bytes [04:57 07/12/2013] [04:57 07/12/2013] 79DCEF6B8AE3F308D805EA98E3D80EEE
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\fil\messages.json --a---- 236 bytes [04:57 07/12/2013] [04:57 07/12/2013] 818C2BCDCF8A88C468E4A992697B6737
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\fr\messages.json --a---- 249 bytes [04:57 07/12/2013] [04:57 07/12/2013] C83D0A062D1858A55E3CF56D465A0727
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\he\messages.json --a---- 419 bytes [04:57 07/12/2013] [04:57 07/12/2013] 91ED2C3CBDA4285DF1708915695F4174
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\hi\messages.json --a---- 408 bytes [04:57 07/12/2013] [04:57 07/12/2013] C5421E57D53F0308ADF0676435CB3016
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\hr\messages.json --a---- 220 bytes [04:57 07/12/2013] [04:57 07/12/2013] CD7418D8FCED636EF764A1A1EC5A8A86
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\hu\messages.json --a---- 253 bytes [04:57 07/12/2013] [04:57 07/12/2013] ACB6EF597B258D85D241CE909C1F5867
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\id\messages.json --a---- 231 bytes [04:57 07/12/2013] [04:57 07/12/2013] 33283336494046B2E64BC850E55BB060
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\it\messages.json --a---- 224 bytes [04:57 07/12/2013] [04:57 07/12/2013] 42ADA32F4C14681648B4FAAFD8B4E619
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\ja\messages.json --a---- 349 bytes [04:57 07/12/2013] [04:57 07/12/2013] E67113C4030733D07D59B8679E66DB4B
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\ko\messages.json --a---- 323 bytes [04:57 07/12/2013] [04:57 07/12/2013] 511F4EADAE84298E42E7DC456515EF56
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\lt\messages.json --a---- 266 bytes [04:57 07/12/2013] [04:57 07/12/2013] 2471CF6A0D8155BE7B63E5CDFF008FC3
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\lv\messages.json --a---- 245 bytes [04:57 07/12/2013] [04:57 07/12/2013] C1BD342887FF3850463C4546CA1684DB
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\nl\messages.json --a---- 225 bytes [04:57 07/12/2013] [04:57 07/12/2013] ED84167F0BF8B96D6B4AF795AC6B806B
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\no\messages.json --a---- 216 bytes [04:57 07/12/2013] [04:57 07/12/2013] CAD5856125850D9CD2DA5DF9F3AC7EFA
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\pl\messages.json --a---- 274 bytes [04:57 07/12/2013] [04:57 07/12/2013] 40F3E6333F0302E905C1E174E4643790
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\pt_BR\messages.json --a---- 237 bytes [04:57 07/12/2013] [04:57 07/12/2013] 8AC3A3C10959488583644A99411A1479
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\pt_PT\messages.json --a---- 236 bytes [04:57 07/12/2013] [04:57 07/12/2013] DEDD450DFCB6E1AC9F5C191D32C018F7
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\ro\messages.json --a---- 248 bytes [04:57 07/12/2013] [04:57 07/12/2013] BBE98181B8A360B545A73C09EAB91A50
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\ru\messages.json --a---- 394 bytes [04:57 07/12/2013] [04:57 07/12/2013] 6F5A01807025537828D77896C964398E
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\sk\messages.json --a---- 241 bytes [04:57 07/12/2013] [04:57 07/12/2013] A78F07BECBE8E09F84D2684C9039DF99
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\sl\messages.json --a---- 245 bytes [04:57 07/12/2013] [04:57 07/12/2013] E6D45D28F76046AF866A157BC4195B1F
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\sr\messages.json --a---- 437 bytes [04:57 07/12/2013] [04:57 07/12/2013] AB4536E48F20A7A3557E04C79A620709
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\sv\messages.json --a---- 238 bytes [04:57 07/12/2013] [04:57 07/12/2013] E934BDC87DDAC060D42B42D8A9B8E3E6
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\th\messages.json --a---- 365 bytes [04:57 07/12/2013] [04:57 07/12/2013] F4D77C8D82628038011222DB5749A5DF
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\tr\messages.json --a---- 255 bytes [04:57 07/12/2013] [04:57 07/12/2013] 96B085BCF90E071B87BBEA0D3EBD4346
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\uk\messages.json --a---- 442 bytes [04:57 07/12/2013] [04:57 07/12/2013] 5A7CA85AA79060442BA99E1D7A6FA941
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\vi\messages.json --a---- 310 bytes [04:57 07/12/2013] [04:57 07/12/2013] F2755B41D8900AE2486BEEF14E15D0BD
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\zh_CN\messages.json --a---- 257 bytes [04:57 07/12/2013] [04:57 07/12/2013] 6F0FF5FA178300F841DBC62BEF2A102F
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\zh_TW\messages.json --a---- 269 bytes [04:57 07/12/2013] [04:57 07/12/2013] 729A096C4C0FE6B933BFD8064F360B33
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\manifest.json --a---- 817 bytes [04:57 07/12/2013] [04:57 07/12/2013] E1F1D1790E772167591041531EC34534
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\ar\messages.json --a---- 423 bytes [04:57 07/12/2013] [04:57 07/12/2013] F2B1596BAC355832C458960D261DD6CA
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\bg\messages.json --a---- 515 bytes [04:57 07/12/2013] [04:57 07/12/2013] 831884C729B4B150786E42970AF79A42
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\ca\messages.json --a---- 330 bytes [04:57 07/12/2013] [04:57 07/12/2013] 7575B3083729953B0814A64A88832765
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\cs\messages.json --a---- 355 bytes [04:57 07/12/2013] [04:57 07/12/2013] BA83A1AA8B2E624E987CF73FEABCD174
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\da\messages.json --a---- 328 bytes [04:57 07/12/2013] [04:57 07/12/2013] C6D26B6639E434FCAB3AD76D0222A4B7
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\de\messages.json --a---- 307 bytes [04:57 07/12/2013] [04:57 07/12/2013] E6899AA5875407D11EA316073C320E19
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\el\messages.json --a---- 569 bytes [04:57 07/12/2013] [04:57 07/12/2013] F18A0538BE7019EA2D0215F5637357D0
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\en\messages.json --a---- 314 bytes [04:57 07/12/2013] [04:57 07/12/2013] 68C999B4419F8A90F659ED6847B0A666
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\en_GB\messages.json --a---- 314 bytes [04:57 07/12/2013] [04:57 07/12/2013] 68C999B4419F8A90F659ED6847B0A666
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\en_US\messages.json --a---- 314 bytes [04:57 07/12/2013] [04:57 07/12/2013] 68C999B4419F8A90F659ED6847B0A666
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\es\messages.json --a---- 340 bytes [04:57 07/12/2013] [04:57 07/12/2013] 0BFDE8ACAF1E5FDDFD4DB9F702DEED64
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\es_419\messages.json --a---- 341 bytes [04:57 07/12/2013] [04:57 07/12/2013] 80938382795C50E509374BD045B22F12
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\et\messages.json --a---- 314 bytes [04:57 07/12/2013] [04:57 07/12/2013] C69232FB36EDE2C48170E6508B3EC939
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\fi\messages.json --a---- 305 bytes [04:57 07/12/2013] [04:57 07/12/2013] 365A4FA9ACA54CF3F10DED1DD688B3D6
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\fil\messages.json --a---- 337 bytes [04:57 07/12/2013] [04:57 07/12/2013] 6F74695E6332C234D6E46CA6EEACD154
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\fr\messages.json --a---- 329 bytes [04:57 07/12/2013] [04:57 07/12/2013] D548FB5781F4B74C289973ABA5922B4F
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\he\messages.json --a---- 471 bytes [04:57 07/12/2013] [04:57 07/12/2013] 22519FF35686773578185622AC67CBA5
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\hi\messages.json --a---- 326 bytes [04:57 07/12/2013] [04:57 07/12/2013] FDF5C2D6629AB1DB0E0A1772F5697586
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\hr\messages.json --a---- 340 bytes [04:57 07/12/2013] [04:57 07/12/2013] B4E5BDFA25BECF291C00F6B6F5890455
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\hu\messages.json --a---- 336 bytes [04:57 07/12/2013] [04:57 07/12/2013] E896BBB6B44DDFB4041BCB47359E504F
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\id\messages.json --a---- 319 bytes [04:57 07/12/2013] [04:57 07/12/2013] F4138589791C819BAB51E2220054F0D8
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\it\messages.json --a---- 324 bytes [04:57 07/12/2013] [04:57 07/12/2013] 8335FC8A0EE6EC328643112225B24F59
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\ja\messages.json --a---- 388 bytes [04:57 07/12/2013] [04:57 07/12/2013] D64FE2E54C18FEF3C4AE4F496D597C80
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\ko\messages.json --a---- 380 bytes [04:57 07/12/2013] [04:57 07/12/2013] 91AF6E77D77340299CF1365318B38C54
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\lt\messages.json --a---- 359 bytes [04:57 07/12/2013] [04:57 07/12/2013] E972CD2B7ECC6BF5517ED86C7C2AFC69
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\lv\messages.json --a---- 360 bytes [04:57 07/12/2013] [04:57 07/12/2013] F538F2FFBAD98CB2A6AA787E027E291A
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\nl\messages.json --a---- 323 bytes [04:57 07/12/2013] [04:57 07/12/2013] D65AAB4B2094E6FB3F1C2FAA8334F66D
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\no\messages.json --a---- 300 bytes [04:57 07/12/2013] [04:57 07/12/2013] 99D7A243AE11E1B679A3D607E2140527
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\pl\messages.json --a---- 336 bytes [04:57 07/12/2013] [04:57 07/12/2013] 7573DD5425BFC2593D4ED5DD069973DA
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\pt_BR\messages.json --a---- 332 bytes [04:57 07/12/2013] [04:57 07/12/2013] AB68927E9BA10051B033EDD0EA6B0A7A
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\pt_PT\messages.json --a---- 331 bytes [04:57 07/12/2013] [04:57 07/12/2013] BE47658D85F9DF358E37B571F1E4E12D
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\ro\messages.json --a---- 332 bytes [04:57 07/12/2013] [04:57 07/12/2013] 0887E086A4818DD9D60AD7D79A0F20AA
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\ru\messages.json --a---- 471 bytes [04:57 07/12/2013] [04:57 07/12/2013] 810C345A170AE57B1C9A47125C4C4F20
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\sk\messages.json --a---- 338 bytes [04:57 07/12/2013] [04:57 07/12/2013] 68FF16376911602EB802E07880103993
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\sl\messages.json --a---- 329 bytes [04:57 07/12/2013] [04:57 07/12/2013] 09102953CBBA8076B4CD3B732CB92E7A
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\sr\messages.json --a---- 483 bytes [04:57 07/12/2013] [04:57 07/12/2013] F2C134E61DECFF6824A6F7F9E7EEBC69
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\sv\messages.json --a---- 333 bytes [04:57 07/12/2013] [04:57 07/12/2013] CD7F1A303DEC0FAB10664A19CB08BF32
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\th\messages.json --a---- 472 bytes [04:57 07/12/2013] [04:57 07/12/2013] A4F6D91AED6527F946FECB61B5F2973C
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\tr\messages.json --a---- 330 bytes [04:57 07/12/2013] [04:57 07/12/2013] D98B3CD27155F0B4F48A29CD1DF11A5D
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\uk\messages.json --a---- 501 bytes [04:57 07/12/2013] [04:57 07/12/2013] 15F61FB62E5B5B75BD7507A7D0FC6276
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\vi\messages.json --a---- 363 bytes [04:57 07/12/2013] [04:57 07/12/2013] DC02046BA3C0982DD168A2AAB103226C
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\zh_CN\messages.json --a---- 346 bytes [04:57 07/12/2013] [04:57 07/12/2013] B9E1488D0F8CB318A9C0AF8CA38A523C
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\zh_TW\messages.json --a---- 346 bytes [04:57 07/12/2013] [04:57 07/12/2013] DA8A359EFFDE7B8F541E56350DDDC884
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\manifest.json --a---- 1275 bytes [23:01 02/01/2014] [23:01 02/01/2014] 67290A8CA80DA93AB24E223F7663D125
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\_locales\bg\messages.json --a---- 1585 bytes [23:01 02/01/2014] [23:01 02/01/2014] D6D5A90AFEF675771F171872FD1CA269
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\_locales\ca\messages.json --a---- 682 bytes [23:01 02/01/2014] [23:01 02/01/2014] 17EF6107BC2199E751E087D61389DE11
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\_locales\cs\messages.json --a---- 743 bytes [23:01 02/01/2014] [23:01 02/01/2014] 98014DC7B2A58F77401178F7C0FB9DC5
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\_locales\da\messages.json --a---- 665 bytes [23:01 02/01/2014] [23:01 02/01/2014] F4BF92FE82D9127E978007783A5FA040
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\_locales\de\messages.json --a---- 714 bytes [23:01 02/01/2014] [23:01 02/01/2014] 2C996A319EC62446845193BD3AD03C97
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\_locales\el\messages.json --a---- 1764 bytes [23:01 02/01/2014] [23:01 02/01/2014] 3F8CEEA09F0507790A694B0E420391A9
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\_locales\en\messages.json --a---- 611 bytes [23:01 02/01/2014] [23:01 02/01/2014] DD60445CC844AD80A78948B598440530
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\_locales\en_GB\messages.json --a---- 611 bytes [23:01 02/01/2014] [23:01 02/01/2014] DD60445CC844AD80A78948B598440530
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\_locales\es\messages.json --a---- 713 bytes [23:01 02/01/2014] [23:01 02/01/2014] 6ED009E374D4D35AE9DF7E299FC03048
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\_locales\es_419\messages.json --a---- 671 bytes [23:01 02/01/2014] [23:01 02/01/2014] 93951D4685C8592B05C5040D598A0D33
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\_locales\et\messages.json --a---- 615 bytes [23:01 02/01/2014] [23:01 02/01/2014] 0E33CC0210CA47AEC62FD3F82F7129FC
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\_locales\fi\messages.json --a---- 738 bytes [23:01 02/01/2014] [23:01 02/01/2014] 5D7976A3AA1BFE6E2D2E523302018733
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\_locales\fil\messages.json --a---- 672 bytes [23:01 02/01/2014] [23:01 02/01/2014] 32A6DF236D0205DF1A70395B6447A2A1
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\_locales\fr\messages.json --a---- 721 bytes [23:01 02/01/2014] [23:01 02/01/2014] 9FBCDD1D89B6921020A3D2E07B466458
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\_locales\hi\messages.json --a---- 1406 bytes [23:01 02/01/2014] [23:01 02/01/2014] EEA3586B36AEA9C9353206B7DA8728B8
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\_locales\hr\messages.json --a---- 662 bytes [23:01 02/01/2014] [23:01 02/01/2014] C30D34C5219053135D5561E9CADC0DAD
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\_locales\hu\messages.json --a---- 766 bytes [23:01 02/01/2014] [23:01 02/01/2014] E22D63C3EB7B58823ECAD9F2FE617AA9
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\_locales\id\messages.json --a---- 612 bytes [23:01 02/01/2014] [23:01 02/01/2014] 090200C5ADE16A9442015C85D3D2214C
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\_locales\it\messages.json --a---- 626 bytes [23:01 02/01/2014] [23:01 02/01/2014] 17596652837A996A77E8AECE6CBC4C49
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\_locales\ja\messages.json --a---- 1181 bytes [23:01 02/01/2014] [23:01 02/01/2014] 8A074C1BC8071A7EF482FBF2CED72B57
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\_locales\ko\messages.json --a---- 892 bytes [23:01 02/01/2014] [23:01 02/01/2014] C05134900F327FF2ABDED5E3757FD2A8
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\_locales\lt\messages.json --a---- 706 bytes [23:01 02/01/2014] [23:01 02/01/2014] 6BD67FF49FFC43B3E3866007932FC290
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\_locales\lv\messages.json --a---- 735 bytes [23:01 02/01/2014] [23:01 02/01/2014] 05AFAD5209A4BAA7098F9C3137E75670
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\_locales\nb\messages.json --a---- 665 bytes [23:01 02/01/2014] [23:01 02/01/2014] 496B4BBF2F04D7983431F197494CC62C
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\_locales\nl\messages.json --a---- 630 bytes [23:01 02/01/2014] [23:01 02/01/2014] 085165F3E35E68B9BB4E0BE3A751EA81
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\_locales\pl\messages.json --a---- 701 bytes [23:01 02/01/2014] [23:01 02/01/2014] 28049243B48F01971200569E9C080761
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\_locales\pt_BR\messages.json --a---- 701 bytes [23:01 02/01/2014] [23:01 02/01/2014] 989BAB41B3005D791C8A6819711B6721
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\_locales\pt_PT\messages.json --a---- 702 bytes [23:01 02/01/2014] [23:01 02/01/2014] 313EF767AAC4D994115CF3F1EF8BBCF8
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\_locales\ro\messages.json --a---- 700 bytes [23:01 02/01/2014] [23:01 02/01/2014] 64EF90609603E6AF99B24CDD09AA033C
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\_locales\ru\messages.json --a---- 1296 bytes [23:01 02/01/2014] [23:01 02/01/2014] 16E604F56F69758DCD4112A4FF979466
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\_locales\sk\messages.json --a---- 739 bytes [23:01 02/01/2014] [23:01 02/01/2014] 9358B04B809BC0AFFBBB6B6F6034C4D0
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\_locales\sl\messages.json --a---- 647 bytes [23:01 02/01/2014] [23:01 02/01/2014] 427B9694858E0AC97722AB75944ADE04
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\_locales\sr\messages.json --a---- 1507 bytes [23:01 02/01/2014] [23:01 02/01/2014] 2BBDEE2907AAE1FE24173DF074D06E21
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\_locales\sv\messages.json --a---- 687 bytes [23:01 02/01/2014] [23:01 02/01/2014] A3B9AB6AF2BCAF3571B0DC322CE06CB1
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\_locales\th\messages.json --a---- 1626 bytes [23:01 02/01/2014] [23:01 02/01/2014] B04D24B1FD5F1E52272C59F81B73C2C1
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\_locales\tr\messages.json --a---- 728 bytes [23:01 02/01/2014] [23:01 02/01/2014] A5FAC95A73BD8D0B00FC97CF33411573
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\_locales\uk\messages.json --a---- 1403 bytes [23:01 02/01/2014] [23:01 02/01/2014] 5E5C71DF1C5B3B5C399C415FF92D2BAB
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\_locales\vi\messages.json --a---- 798 bytes [23:01 02/01/2014] [23:01 02/01/2014] 581D8D6C04D4EE75844BA3698924A942
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\_locales\zh_CN\messages.json --a---- 760 bytes [23:01 02/01/2014] [23:01 02/01/2014] 93C5700BE74B2FC76F635799AE497555
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\_locales\zh_TW\messages.json --a---- 814 bytes [23:01 02/01/2014] [23:01 02/01/2014] 12419A095C5C152C38E32136EF99FA3B
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\manifest.json --a---- 755 bytes [04:57 07/12/2013] [04:57 07/12/2013] BF9ED89CE27914C99BB5629740A7A7EB
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\ar\messages.json --a---- 556 bytes [04:57 07/12/2013] [04:57 07/12/2013] DCE30E06CC4298B140576951ACC86816
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\bg\messages.json --a---- 492 bytes [04:57 07/12/2013] [04:57 07/12/2013] 22E44EF5318119517DB82703919AB133
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\ca\messages.json --a---- 262 bytes [04:57 07/12/2013] [04:57 07/12/2013] B6B539A6E6AFD8E0D8921511089A94B1
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\cs\messages.json --a---- 289 bytes [04:57 07/12/2013] [04:57 07/12/2013] F6387216CFB18BE992F38D94D9CC37A5
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\da\messages.json --a---- 240 bytes [04:57 07/12/2013] [04:57 07/12/2013] 86A141F6044B43EC760507456025B8D5
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\de\messages.json --a---- 239 bytes [04:57 07/12/2013] [04:57 07/12/2013] 360EAC8E258533B427AA6E2A7BB5B92F
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\el\messages.json --a---- 624 bytes [04:57 07/12/2013] [04:57 07/12/2013] 0B5B674BEEBAC4583DFAACB5EED296B7
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\en\messages.json --a---- 215 bytes [04:57 07/12/2013] [04:57 07/12/2013] C955ABB367158B1A6015F91001E65458
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\es\messages.json --a---- 281 bytes [04:57 07/12/2013] [04:57 07/12/2013] E37502E0EC3AE45074F2E34EFF8B0EC7
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\fi\messages.json --a---- 284 bytes [04:57 07/12/2013] [04:57 07/12/2013] AE7DD43428DB403DD1CDFE29636A8D12
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\fil\messages.json --a---- 234 bytes [04:57 07/12/2013] [04:57 07/12/2013] E85B25BF1FDE30AAB85E690FC47CB1E5
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\fr\messages.json --a---- 272 bytes [04:57 07/12/2013] [04:57 07/12/2013] 9B9AB2BA7B111772B12427AFF5313D0F
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\hi\messages.json --a---- 391 bytes [04:57 07/12/2013] [04:57 07/12/2013] 9C0360E4CE0FB7FBE1202105E365D675
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\hr\messages.json --a---- 246 bytes [04:57 07/12/2013] [04:57 07/12/2013] 51185689C14390FB2B5A3D7C72C01A2D
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\hu\messages.json --a---- 234 bytes [04:57 07/12/2013] [04:57 07/12/2013] E8235725AA95D302C48404B3CA239435
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\id\messages.json --a---- 242 bytes [04:57 07/12/2013] [04:57 07/12/2013] CE79B1EE24E01D3495DB6F00D2361D34
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\it\messages.json --a---- 260 bytes [04:57 07/12/2013] [04:57 07/12/2013] CBFEBA52D95C68B47C511095930346F2
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\ja\messages.json --a---- 364 bytes [04:57 07/12/2013] [04:57 07/12/2013] 6804B5C6A2336DB0C33AC5964AA80484
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\ko\messages.json --a---- 328 bytes [04:57 07/12/2013] [04:57 07/12/2013] C870F9477DAD594BA5EC96E1591A3051
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\lt\messages.json --a---- 269 bytes [04:57 07/12/2013] [04:57 07/12/2013] D093839DC1278D56E5E7C876CC9A04C3
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\lv\messages.json --a---- 262 bytes [04:57 07/12/2013] [04:57 07/12/2013] 93AE003C19E9D1200C0E12FD242F0E86
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\nl\messages.json --a---- 232 bytes [04:57 07/12/2013] [04:57 07/12/2013] 44F95118655A479A306F74C68AEAB159
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\no\messages.json --a---- 210 bytes [04:57 07/12/2013] [04:57 07/12/2013] 464EDFD55F1E419B8DC73CF8A8AB5B0C
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\pl\messages.json --a---- 292 bytes [04:57 07/12/2013] [04:57 07/12/2013] F2FD6542E6983BAED5F92635B2702BA0
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\pt_BR\messages.json --a---- 230 bytes [04:57 07/12/2013] [04:57 07/12/2013] E8D892B0D8FD1D0010E5665338C8B9A1
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\pt_PT\messages.json --a---- 231 bytes [04:57 07/12/2013] [04:57 07/12/2013] CE969195A5E96D487CE70CEFC0C6FBF4
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\ro\messages.json --a---- 281 bytes [04:57 07/12/2013] [04:57 07/12/2013] 9445A1E9258ABC199D615AA8110766B0
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\ru\messages.json --a---- 482 bytes [04:57 07/12/2013] [04:57 07/12/2013] 9D0AB8627ADD40DD259FAEDFD3F2F60D
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\se\messages.json --a---- 210 bytes [04:57 07/12/2013] [04:57 07/12/2013] CB5F465A3A4043F68009154D1FA90B4A
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\sk\messages.json --a---- 238 bytes [04:57 07/12/2013] [04:57 07/12/2013] 5E811FA0B8435373ADCC2B64C3CD77C1
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\sl\messages.json --a---- 249 bytes [04:57 07/12/2013] [04:57 07/12/2013] 2D88CBCDDBD0355B8793F5C21AAE3644
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\sr\messages.json --a---- 511 bytes [04:57 07/12/2013] [04:57 07/12/2013] A0DAB5AC39F3DA4BC9A40068ADDF3B40
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\th\messages.json --a---- 471 bytes [04:57 07/12/2013] [04:57 07/12/2013] A33B8D4B444FC89B2B9E6F1053F837E2
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\tr\messages.json --a---- 250 bytes [04:57 07/12/2013] [04:57 07/12/2013] 7A293CD3C16E2D0CE037CE9E3E02D46D
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\uk\messages.json --a---- 536 bytes [04:57 07/12/2013] [04:57 07/12/2013] 2C779312F8130175AF7A9FA47E15066A
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\vi\messages.json --a---- 257 bytes [04:57 07/12/2013] [04:57 07/12/2013] 6AB1D663983B02A193EB7F55AD19AA0E
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\zh_CN\messages.json --a---- 339 bytes [04:57 07/12/2013] [04:57 07/12/2013] AA4687E60787AC70532DE7379345CC2F
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\zh_TW\messages.json --a---- 321 bytes [04:57 07/12/2013] [04:57 07/12/2013] 7DAD17EFC6F23683526DB4F95C96AF8A
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\pnacl\0.1.0.12181\manifest.json --a---- 572 bytes [05:03 07/12/2013] [05:03 07/12/2013] 43ECC7BD8A305BE1AD449FA331629FBA
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\WidevineCDM\1.4.1.376\manifest.json --a---- 848 bytes [23:01 02/01/2014] [23:01 02/01/2014] DFF7E6F02E75E3304192806AAA9AEF4B
C:\Users\Administrator\AppData\Local\Microsoft\BingBar\Apps\Finance_8532f9cb39e34e3ca1e1474c73ed45d2\VersionIndependent\notifications.json --a---- 6 bytes [02:23 08/06/2011] [02:23 08/06/2011] 94249F1578EE2342A3214088498D7385
C:\Users\Administrator\AppData\Local\Microsoft\BingBar\Apps\Finance_8532f9cb39e34e3ca1e1474c73ed45d2\VersionIndependent\notificationServiceCountFile.json --a---- 12 bytes [02:23 08/06/2011] [02:23 08/06/2011] 8B6E390039A6082F0E7C40FFEAE872E3
C:\Users\Administrator\AppData\Local\Microsoft\BingBar\Apps\Finance_8532f9cb39e34e3ca1e1474c73ed45d2\VersionIndependent\watchlistData.json --a---- 6 bytes [02:23 08/06/2011] [02:23 08/06/2011] FD56A4F949FDB52CEB9035FD52605F4A
C:\Users\Administrator\AppData\Local\Microsoft\BingBar\Apps\Games_6e70de9fd0324919b424492c3e6a043d\7.0.609\Settings\games.json --a---- 1854 bytes [02:18 08/06/2011] [02:18 08/06/2011] F9D33DD688E41142B0900E2F75CC69AA
C:\Users\Administrator\AppData\Local\Microsoft\BingBar\Apps\Mail_15642ee020d2449d86382022aa6f2548\7.0.609\providers\gmail.json --a---- 1285 bytes [02:18 08/06/2011] [14:46 25/02/2011] 4C712EC1331EB1F0A31AEBA5F0FC52B9
C:\Users\Administrator\AppData\Local\Microsoft\BingBar\Apps\Mail_15642ee020d2449d86382022aa6f2548\7.0.609\providers\hotmail.json --a---- 1255 bytes [02:18 08/06/2011] [14:46 25/02/2011] F6C69BF6EE9CBA0164E0B0D1B9064855
C:\Users\Administrator\AppData\Local\Microsoft\BingBar\Apps\Mail_15642ee020d2449d86382022aa6f2548\7.0.609\providers\yahoomail.json --a---- 1309 bytes [02:18 08/06/2011] [14:46 25/02/2011] BB04532813E669118F685A277C650A68
C:\Users\Administrator\AppData\Local\Microsoft\BingBar\Apps\Maps_e4b69397ea59436c9d8611b45fdb79f9\7.0.609\js\whitelist.json --a---- 21025 bytes [02:18 08/06/2011] [14:46 25/02/2011] 1E637EAB6A58D5A9294BDFAF3FF2C2F7
C:\Users\Administrator\AppData\Local\Microsoft\BingBar\Apps\Maps_e4b69397ea59436c9d8611b45fdb79f9\VersionIndependent\mapdata.json --a---- 246 bytes [02:18 08/06/2011] [02:18 08/06/2011] F0605BD4FCE8961E60252CF502B7E8C8
C:\Users\Administrator\AppData\Local\Microsoft\BingBar\Apps\News_8c172f78520647fbab760cbf38f51e67\7.0.609\newsTopStories.json --a---- 50974 bytes [02:18 08/06/2011] [02:18 08/06/2011] 01D2D48A0407422CA29D98B1C6F9EA8F
C:\Users\Administrator\AppData\Local\Microsoft\BingBar\Apps\Search_6f21d9007fa34bc78d94309126de58f5\7.0.609\js\whitelist.json --a---- 23863 bytes [02:18 08/06/2011] [14:46 25/02/2011] 00F91BB9BF5194DA4B919BD22804EF3C
C:\Users\Administrator\AppData\Local\Microsoft\BingBar\Apps\Search_6f21d9007fa34bc78d94309126de58f5\7.0.609\loc\en-us\searchHistorySettings.json --a---- 74 bytes [02:18 08/06/2011] [02:18 08/06/2011] 051BA94BDEFBBF74E4D39F3D77A25D4B
C:\Users\Administrator\AppData\Local\Microsoft\BingBar\Apps\Search_6f21d9007fa34bc78d94309126de58f5\VersionIndependent\DeepLinkBlockList.json --a---- 6 bytes [02:18 08/06/2011] [02:18 08/06/2011] FD56A4F949FDB52CEB9035FD52605F4A
C:\Users\Administrator\AppData\Local\Microsoft\BingBar\Apps\Toast Application_d97e92f94d53425fbcf0f2a04b8e5426\7.0.609\js\transitionTime.json --a---- 104 bytes [02:18 08/06/2011] [14:46 25/02/2011] 2ED32BBBBBE305DEA990411535F2D3F0
C:\Users\Administrator\AppData\Local\Microsoft\BingBar\Apps\Weather_63630244a02f4e4cb6cb9b09b2f886f3\VersionIndependent\weather.json --a---- 7078 bytes [02:18 08/06/2011] [02:18 08/06/2011] 9DC19C9AAFC8BCA543B245B69DEA66D4
C:\Users\Administrator\AppData\Local\Microsoft\BingBar\System\appsightings.json --a---- 1738 bytes [02:18 08/06/2011] [02:18 08/06/2011] 828FADF68B7E7DFA10D71CAE51B5BC14
C:\Users\Administrator\AppData\Local\Microsoft\BingBar\System\local-settings.json --a---- 694 bytes [02:17 08/06/2011] [02:19 08/06/2011] 5C494AAC993ECFE7F9D08CD6224A46B7
C:\Users\Administrator\AppData\Local\Microsoft\BingBar\System\service-settings.json --a---- 626 bytes [02:18 08/06/2011] [02:18 08/06/2011] 57A1191D2FF7804C3C112CE972E3EB0B
C:\Users\Administrator\AppData\Local\Microsoft\BingBar\System\Flights\flight-manager.json --a---- 318 bytes [02:18 08/06/2011] [02:18 08/06/2011] DBB2283ADD17363BE8C8EB735F91A126
C:\Users\Administrator\AppData\Local\Microsoft\BingBar\System\Flights\prod-en-us_prod_0\flight.json --a---- 484 bytes [02:18 08/06/2011] [02:18 08/06/2011] C232B26954C3B22686F103AA84CE0A75
C:\Users\Administrator\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2OGM9CO6\1925607[1].json --a---- 1567 bytes [16:51 08/12/2013] [16:51 08/12/2013] 0335B0663BC312F5844215171750A06E
C:\Users\Administrator\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2OGM9CO6\all[1].json --a---- 4777 bytes [16:56 08/12/2013] [16:56 08/12/2013] E85CFC823E3708B1FC8EA44907763D22
C:\Users\Administrator\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3NH56FSJ\all[1].json --a---- 4777 bytes [03:57 03/01/2014] [03:57 03/01/2014] E85CFC823E3708B1FC8EA44907763D22
C:\Users\Administrator\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YU2MSH37\all[1].json --a---- 4576 bytes [04:00 03/01/2014] [04:00 03/01/2014] 5AD71A861976148DAF03960DE336A538
C:\Users\Administrator\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YX22R9SI\asconf[1].json --a---- 2909 bytes [04:02 03/01/2014] [04:02 03/01/2014] BC71C359F4658AE05AAE8F9F9F04C0E7
C:\Users\Administrator\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZHGWW6WQ\asconf[1].json --a---- 2910 bytes [03:57 03/01/2014] [03:57 03/01/2014] 84028212882B122AB2865BBC11561E7A
C:\Users\Administrator\AppData\Local\Temp\5156_9192\manifest.json --a---- 34 bytes [04:00 03/01/2014] [04:00 03/01/2014] 994F985966C0B96B98A67143D49F8547
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\manifest.json --a---- 724 bytes [13:00 08/06/2013] [13:00 08/06/2013] 98E109477B145855CA65EEC8988EEFE9
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\ar\messages.json --a---- 374 bytes [13:00 08/06/2013] [13:00 08/06/2013] 2586421C45920A227CAB26657B31ECDB
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\bg\messages.json --a---- 428 bytes [13:00 08/06/2013] [13:00 08/06/2013] 9ED363DF524943138996995FD4DE2D65
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\ca\messages.json --a---- 207 bytes [13:00 08/06/2013] [13:00 08/06/2013] CDA92E97978F8AAC073FA4CA3D509EE2
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\cs\messages.json --a---- 230 bytes [13:00 08/06/2013] [13:00 08/06/2013] 0F0B5623B51DF32B47BA393B51ED99FF
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\da\messages.json --a---- 216 bytes [13:00 08/06/2013] [13:00 08/06/2013] 23FDFD2ECCBE626E47CD97D434632069
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\de\messages.json --a---- 217 bytes [13:00 08/06/2013] [13:00 08/06/2013] 1A71997D5A86A7FB57EB1850EA7D71E6
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\el\messages.json --a---- 416 bytes [13:00 08/06/2013] [13:00 08/06/2013] 0C3D86171D9B3098B1C9644ACFA019F3
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\en_GB\messages.json --a---- 208 bytes [13:00 08/06/2013] [13:00 08/06/2013] D85A412DDFA11EA5BCA068FF4F66786C
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\en_US\messages.json --a---- 209 bytes [13:00 08/06/2013] [13:00 08/06/2013] D7DCC6E7CA3F4BE8D5F48EF9E9D58CF4
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\es\messages.json --a---- 206 bytes [13:00 08/06/2013] [13:00 08/06/2013] 29E15C492DB45CEBBDA129C74E70D0E2
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\es_419\messages.json --a---- 206 bytes [13:00 08/06/2013] [13:00 08/06/2013] 29E15C492DB45CEBBDA129C74E70D0E2
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\et\messages.json --a---- 216 bytes [13:00 08/06/2013] [13:00 08/06/2013] 1B13A883F1B965F741B068345DC34FD9
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\fi\messages.json --a---- 216 bytes [13:00 08/06/2013] [13:00 08/06/2013] 2B54BFA6089001103CA63CE9BDCC6983
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\fil\messages.json --a---- 219 bytes [13:00 08/06/2013] [13:00 08/06/2013] EDA0FCFFDDF20A991D79BDD9FA5E858E
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\fr\messages.json --a---- 224 bytes [13:00 08/06/2013] [13:00 08/06/2013] 75A734320FB9016AD7DECB317DF8F9D2
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\he\messages.json --a---- 293 bytes [13:00 08/06/2013] [13:00 08/06/2013] 1EFC1A18F531C85E3D1DC298B0098955
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\hi\messages.json --a---- 375 bytes [13:00 08/06/2013] [13:00 08/06/2013] 33926A84B9B81FE0A3A753A07568A211
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\hu\messages.json --a---- 251 bytes [13:00 08/06/2013] [13:00 08/06/2013] 548C403B0CA66EFCC85DB674080440BB
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\id\messages.json --a---- 209 bytes [13:00 08/06/2013] [13:00 08/06/2013] 9213E5F82888D5E3EEAF1BD7BC7A67AC
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\it\messages.json --a---- 213 bytes [13:00 08/06/2013] [13:00 08/06/2013] 31905588AE3EEB77E9E96FEB5BACA3B3
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\ja\messages.json --a---- 263 bytes [13:00 08/06/2013] [13:00 08/06/2013] 675FA4BA824CBC0439AB8D805058C99E
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\ko\messages.json --a---- 254 bytes [13:00 08/06/2013] [13:00 08/06/2013] 073E2411ABA2E7C2C6A11AE05114DEF0
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\lt\messages.json --a---- 234 bytes [13:00 08/06/2013] [13:00 08/06/2013] 8538DBD057F6C4B4876607B730B1971C
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\lv\messages.json --a---- 232 bytes [13:00 08/06/2013] [13:00 08/06/2013] A6E4EF51B987005EEAD6A332974F6BF2
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\ms\messages.json --a---- 207 bytes [13:00 08/06/2013] [13:00 08/06/2013] 2766D5B9A8E40FE6691BE3F37348AFD6
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\nl\messages.json --a---- 217 bytes [13:00 08/06/2013] [13:00 08/06/2013] 701D7ECF13542F59C58B21FAEF88C1AE
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\no\messages.json --a---- 195 bytes [13:00 08/06/2013] [13:00 08/06/2013] C13B7D73C7A543546CE63367C0D700CA
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\pl\messages.json --a---- 217 bytes [13:00 08/06/2013] [13:00 08/06/2013] A0A86FA83DAD0F8F22A439C8E6DCE763
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\pt_BR\messages.json --a---- 206 bytes [13:00 08/06/2013] [13:00 08/06/2013] 9F3925EF0F907B07ECBC8A3727F19721
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\pt_PT\messages.json --a---- 208 bytes [13:00 08/06/2013] [13:00 08/06/2013] 3A52EEDFCA079439677BC42E800A218B
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\ro\messages.json --a---- 225 bytes [13:00 08/06/2013] [13:00 08/06/2013] C707363B3BAAB39130294384504C2D2D
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\ru\messages.json --a---- 434 bytes [13:00 08/06/2013] [13:00 08/06/2013] 1D3F6DB1F33813E2428A8C78AF0B9893
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\sk\messages.json --a---- 225 bytes [13:00 08/06/2013] [13:00 08/06/2013] 5855CC4AA15DEFB435C69B3AC3B36C39
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\sl\messages.json --a---- 218 bytes [13:00 08/06/2013] [13:00 08/06/2013] 75EA0350804326B40BA2BC5739C4A171
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\sr\messages.json --a---- 380 bytes [13:00 08/06/2013] [13:00 08/06/2013] 37A2926DEAF11918D39139018B9A33A1
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\sv\messages.json --a---- 214 bytes [13:00 08/06/2013] [13:00 08/06/2013] 3C4D8B7ACF404F7AE5B647BE24E0A5F1
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\th\messages.json --a---- 329 bytes [13:00 08/06/2013] [13:00 08/06/2013] 65DD9D347A6F61699C0D5AE99358716A
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\tr\messages.json --a---- 243 bytes [13:00 08/06/2013] [13:00 08/06/2013] 4793CF2F6C1257E152A12B8FD1C76485
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\uk\messages.json --a---- 428 bytes [13:00 08/06/2013] [13:00 08/06/2013] 3DE4E016914A029A9254938BFB28A2A8
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\vi\messages.json --a---- 252 bytes [13:00 08/06/2013] [13:00 08/06/2013] 461DABD15F63F56C2A8C25C72092276B
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\zh_CN\messages.json --a---- 233 bytes [13:00 08/06/2013] [13:00 08/06/2013] 332DB4EC98D2BEC0383BCFDF67BD1A50
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\zh_TW\messages.json --a---- 233 bytes [13:00 08/06/2013] [13:00 08/06/2013] B554765872643769E1108DD312D076C1
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\manifest.json --a---- 996 bytes [13:00 08/06/2013] [13:00 08/06/2013] E6DC57A9ABA31600533C6A7784919FFB
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\ar\messages.json --a---- 422 bytes [13:00 08/06/2013] [13:00 08/06/2013] D074CD99068529EB5A22DF31E9D5913F
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\bg\messages.json --a---- 559 bytes [13:00 08/06/2013] [13:00 08/06/2013] E3F6B91EC2C0E8A2B966EA158A08B1F0
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\ca\messages.json --a---- 265 bytes [13:00 08/06/2013] [13:00 08/06/2013] 77487466CD1B18FEAD66FC69AF391221
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\cs\messages.json --a---- 283 bytes [13:00 08/06/2013] [13:00 08/06/2013] 134878E356B8D07D30E64A18F00A6565
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\da\messages.json --a---- 251 bytes [13:00 08/06/2013] [13:00 08/06/2013] 53F3ABC7F5F6E2F9C4603D27EB979E88
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\de\messages.json --a---- 256 bytes [13:00 08/06/2013] [13:00 08/06/2013] F6B48063D035D1025AD4532FFA2430C8
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\el\messages.json --a---- 565 bytes [13:00 08/06/2013] [13:00 08/06/2013] 3AFC6760735284C2CB954EAF80A2FC3F
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\en_GB\messages.json --a---- 249 bytes [13:00 08/06/2013] [13:00 08/06/2013] 5C5C111D80097AEB22E5223787734FC2
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\en_US\messages.json --a---- 249 bytes [13:00 08/06/2013] [13:00 08/06/2013] 5C5C111D80097AEB22E5223787734FC2
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\es\messages.json --a---- 259 bytes [13:00 08/06/2013] [13:00 08/06/2013] DF4BD088D5B32B2C31BE1BFE404558A6
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\es_419\messages.json --a---- 259 bytes [13:00 08/06/2013] [13:00 08/06/2013] DF4BD088D5B32B2C31BE1BFE404558A6
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\et\messages.json --a---- 259 bytes [13:00 08/06/2013] [13:00 08/06/2013] A2130F26BA56617670D7721D77E59BE1
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\eu\messages.json --a---- 243 bytes [13:00 08/06/2013] [13:00 08/06/2013] B0AF125B9AD99D6EF007C1C5E4788317
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\fi\messages.json --a---- 277 bytes [13:00 08/06/2013] [13:00 08/06/2013] 6EF1BDCCF457AEDCE9BAC9C1B3EE864F
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\fil\messages.json --a---- 260 bytes [13:00 08/06/2013] [13:00 08/06/2013] BDEF574C1E45B062653C38AB710A175E
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\fr\messages.json --a---- 260 bytes [13:00 08/06/2013] [13:00 08/06/2013] 64DD2E108845390175E01CB0BF7EE577
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\he\messages.json --a---- 438 bytes [13:00 08/06/2013] [13:00 08/06/2013] 39000F7C9F7F63BF921F0C58DF2F672E
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\hi\messages.json --a---- 492 bytes [13:00 08/06/2013] [13:00 08/06/2013] 307274E619FEF5ACE59F05157348AD16
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\hr\messages.json --a---- 263 bytes [13:00 08/06/2013] [13:00 08/06/2013] EFDE2EDD0907C7906B19D2539EF693F5
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\hu\messages.json --a---- 276 bytes [13:00 08/06/2013] [13:00 08/06/2013] 547EDF90ADFBA09304FEED9EB7DBB985
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\id\messages.json --a---- 261 bytes [13:00 08/06/2013] [13:00 08/06/2013] FE22191E30FC270278FDED58DD4C4138
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\it\messages.json --a---- 258 bytes [13:00 08/06/2013] [13:00 08/06/2013] E954A0D6AE514F4445163F9F17349270
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\ja\messages.json --a---- 395 bytes [13:00 08/06/2013] [13:00 08/06/2013] 8E61873E7C604AB6AB78941DE872D274
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\ko\messages.json --a---- 365 bytes [13:00 08/06/2013] [13:00 08/06/2013] DF1C991A376FEAF3C8BAEF1AA344E5E9
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\lt\messages.json --a---- 309 bytes [13:00 08/06/2013] [13:00 08/06/2013] 50AF5D4387A123BDE4ED9B9566103789
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\lv\messages.json --a---- 262 bytes [13:00 08/06/2013] [13:00 08/06/2013] EAC98BBCFDE4B864383589885D2C82A4
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\ms\messages.json --a---- 254 bytes [13:00 08/06/2013] [13:00 08/06/2013] 9F94BBD70C447A94F02625B750E13DAA
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\nl\messages.json --a---- 250 bytes [13:00 08/06/2013] [13:00 08/06/2013] D7F6C0118AF6C27F43263CD1D0244707
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\no\messages.json --a---- 218 bytes [13:00 08/06/2013] [13:00 08/06/2013] D6A1BF7219C30249115A6A366EC01CE2
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\pl\messages.json --a---- 261 bytes [13:00 08/06/2013] [13:00 08/06/2013] 30F8807C8E66E23CC07E342330081CF8
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\pt_BR\messages.json --a---- 250 bytes [13:00 08/06/2013] [13:00 08/06/2013] F6F4E1CE5022E45EF6E72138171627C9
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\pt_PT\messages.json --a---- 272 bytes [13:00 08/06/2013] [13:00 08/06/2013] 4A40A5DD332681AE6139DFFA6C49179F
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\ro\messages.json --a---- 309 bytes [13:00 08/06/2013] [13:00 08/06/2013] C1B3128821B1FE7978221F444DCA4C0E
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\ru\messages.json --a---- 614 bytes [13:00 08/06/2013] [13:00 08/06/2013] 3CB108582E945FCD9DDDC254A20E01A7
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\sk\messages.json --a---- 293 bytes [13:00 08/06/2013] [13:00 08/06/2013] 643C60E2823E409912D41DDBF2E4B68C
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\sl\messages.json --a---- 268 bytes [13:00 08/06/2013] [13:00 08/06/2013] CC32B1A596CE9CEFBE7C2580860234AE
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\sr\messages.json --a---- 467 bytes [13:00 08/06/2013] [13:00 08/06/2013] 01A348D263AB6A699F0E07380441E9DD
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\sv\messages.json --a---- 261 bytes [13:00 08/06/2013] [13:00 08/06/2013] 344998E12A700D26D899FC3EC62056EB
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\th\messages.json --a---- 521 bytes [13:00 08/06/2013] [13:00 08/06/2013] 801098F07BD5ADD0BD6AE21B64CB61F3
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\tr\messages.json --a---- 302 bytes [13:00 08/06/2013] [13:00 08/06/2013] 290646D43E911C5F19913ACF81B9F3C4
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\uk\messages.json --a---- 657 bytes [13:00 08/06/2013] [13:00 08/06/2013] BE0CCE5AE07284F3153F95D46833F68A
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\vi\messages.json --a---- 321 bytes [13:00 08/06/2013] [13:00 08/06/2013] 82767FD874A55A718AC6BCF38C4CF2AF
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\zh_CN\messages.json --a---- 360 bytes [13:00 08/06/2013] [13:00 08/06/2013] BC87AB08DD1A3B9E0D9C4F39A832A4AE
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\zh_TW\messages.json --a---- 348 bytes [13:00 08/06/2013] [13:00 08/06/2013] 540A14C439D6562AC45AE4B39A10660D
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\manifest.json --a---- 785 bytes [13:00 08/06/2013] [13:00 08/06/2013] 0A4B1F66636E0A0275DF7CAD563E2D9D
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\ar\messages.json --a---- 401 bytes [13:00 08/06/2013] [13:00 08/06/2013] 9E5196B0371D7472ADBC76B0D24387EE
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\bg\messages.json --a---- 427 bytes [13:00 08/06/2013] [13:00 08/06/2013] ECC218F02AD23568A736F6CAABA093C6
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\ca\messages.json --a---- 250 bytes [13:00 08/06/2013] [13:00 08/06/2013] 8D66C382986948F2D9B8C449117CE014
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\cs\messages.json --a---- 255 bytes [13:00 08/06/2013] [13:00 08/06/2013] 3B1388F38C14A550F1B423681854F8E1
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\da\messages.json --a---- 242 bytes [13:00 08/06/2013] [13:00 08/06/2013] 7F47C449A6A9968CDB5E9A681AD41713
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\de\messages.json --a---- 226 bytes [13:00 08/06/2013] [13:00 08/06/2013] 3AEF1AFEA23425011D7080D742BEBB5E
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\el\messages.json --a---- 475 bytes [13:00 08/06/2013] [13:00 08/06/2013] 6AEEEFA17DBF4C3F7F2CEFBFB6B65BC2
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\en\messages.json --a---- 227 bytes [13:00 08/06/2013] [13:00 08/06/2013] 437B589124A420EFAC2A6C3D1AD600FB
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\es\messages.json --a---- 240 bytes [13:00 08/06/2013] [13:00 08/06/2013] 9903D21609669AFBA89B5C89AFB26FA3
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\fi\messages.json --a---- 222 bytes [13:00 08/06/2013] [13:00 08/06/2013] 79DCEF6B8AE3F308D805EA98E3D80EEE
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\fil\messages.json --a---- 236 bytes [13:00 08/06/2013] [13:00 08/06/2013] 818C2BCDCF8A88C468E4A992697B6737
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\fr\messages.json --a---- 249 bytes [13:00 08/06/2013] [13:00 08/06/2013] C83D0A062D1858A55E3CF56D465A0727
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\he\messages.json --a---- 419 bytes [13:00 08/06/2013] [13:00 08/06/2013] 91ED2C3CBDA4285DF1708915695F4174
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\hi\messages.json --a---- 408 bytes [13:00 08/06/2013] [13:00 08/06/2013] C5421E57D53F0308ADF0676435CB3016
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\hr\messages.json --a---- 220 bytes [13:00 08/06/2013] [13:00 08/06/2013] CD7418D8FCED636EF764A1A1EC5A8A86
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\hu\messages.json --a---- 253 bytes [13:00 08/06/2013] [13:00 08/06/2013] ACB6EF597B258D85D241CE909C1F5867
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\id\messages.json --a---- 231 bytes [13:00 08/06/2013] [13:00 08/06/2013] 33283336494046B2E64BC850E55BB060
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\it\messages.json --a---- 224 bytes [13:00 08/06/2013] [13:00 08/06/2013] 42ADA32F4C14681648B4FAAFD8B4E619
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\ja\messages.json --a---- 349 bytes [13:00 08/06/2013] [13:00 08/06/2013] E67113C4030733D07D59B8679E66DB4B
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\ko\messages.json --a---- 323 bytes [13:00 08/06/2013] [13:00 08/06/2013] 511F4EADAE84298E42E7DC456515EF56
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\lt\messages.json --a---- 266 bytes [13:00 08/06/2013] [13:00 08/06/2013] 2471CF6A0D8155BE7B63E5CDFF008FC3
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\lv\messages.json --a---- 245 bytes [13:00 08/06/2013] [13:00 08/06/2013] C1BD342887FF3850463C4546CA1684DB
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\nl\messages.json --a---- 225 bytes [13:00 08/06/2013] [13:00 08/06/2013] ED84167F0BF8B96D6B4AF795AC6B806B
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\no\messages.json --a---- 216 bytes [13:00 08/06/2013] [13:00 08/06/2013] CAD5856125850D9CD2DA5DF9F3AC7EFA
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\pl\messages.json --a---- 274 bytes [13:00 08/06/2013] [13:00 08/06/2013] 40F3E6333F0302E905C1E174E4643790
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\pt_BR\messages.json --a---- 237 bytes [13:00 08/06/2013] [13:00 08/06/2013] 8AC3A3C10959488583644A99411A1479
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\pt_PT\messages.json --a---- 236 bytes [13:00 08/06/2013] [13:00 08/06/2013] DEDD450DFCB6E1AC9F5C191D32C018F7
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\ro\messages.json --a---- 248 bytes [13:00 08/06/2013] [13:00 08/06/2013] BBE98181B8A360B545A73C09EAB91A50
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\ru\messages.json --a---- 394 bytes [13:00 08/06/2013] [13:00 08/06/2013] 6F5A01807025537828D77896C964398E
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\sk\messages.json --a---- 241 bytes [13:00 08/06/2013] [13:00 08/06/2013] A78F07BECBE8E09F84D2684C9039DF99
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\sl\messages.json --a---- 245 bytes [13:00 08/06/2013] [13:00 08/06/2013] E6D45D28F76046AF866A157BC4195B1F
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\sr\messages.json --a---- 437 bytes [13:00 08/06/2013] [13:00 08/06/2013] AB4536E48F20A7A3557E04C79A620709
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\sv\messages.json --a---- 238 bytes [13:00 08/06/2013] [13:00 08/06/2013] E934BDC87DDAC060D42B42D8A9B8E3E6
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\th\messages.json --a---- 365 bytes [13:00 08/06/2013] [13:00 08/06/2013] F4D77C8D82628038011222DB5749A5DF
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\tr\messages.json --a---- 255 bytes [13:00 08/06/2013] [13:00 08/06/2013] 96B085BCF90E071B87BBEA0D3EBD4346
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\uk\messages.json --a---- 442 bytes [13:00 08/06/2013] [13:00 08/06/2013] 5A7CA85AA79060442BA99E1D7A6FA941
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\vi\messages.json --a---- 310 bytes [13:00 08/06/2013] [13:00 08/06/2013] F2755B41D8900AE2486BEEF14E15D0BD
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\zh_CN\messages.json --a---- 257 bytes [13:00 08/06/2013] [13:00 08/06/2013] 6F0FF5FA178300F841DBC62BEF2A102F
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\zh_TW\messages.json --a---- 269 bytes [13:00 08/06/2013] [13:00 08/06/2013] 729A096C4C0FE6B933BFD8064F360B33
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\manifest.json --a---- 817 bytes [13:00 08/06/2013] [13:00 08/06/2013] E1F1D1790E772167591041531EC34534
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\ar\messages.json --a---- 423 bytes [13:00 08/06/2013] [13:00 08/06/2013] F2B1596BAC355832C458960D261DD6CA
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\bg\messages.json --a---- 515 bytes [13:00 08/06/2013] [13:00 08/06/2013] 831884C729B4B150786E42970AF79A42
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\ca\messages.json --a---- 330 bytes [13:00 08/06/2013] [13:00 08/06/2013] 7575B3083729953B0814A64A88832765
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\cs\messages.json --a---- 355 bytes [13:00 08/06/2013] [13:00 08/06/2013] BA83A1AA8B2E624E987CF73FEABCD174
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\da\messages.json --a---- 328 bytes [13:00 08/06/2013] [13:00 08/06/2013] C6D26B6639E434FCAB3AD76D0222A4B7
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\de\messages.json --a---- 307 bytes [13:00 08/06/2013] [13:00 08/06/2013] E6899AA5875407D11EA316073C320E19
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\el\messages.json --a---- 569 bytes [13:00 08/06/2013] [13:00 08/06/2013] F18A0538BE7019EA2D0215F5637357D0
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\en\messages.json --a---- 314 bytes [13:00 08/06/2013] [13:00 08/06/2013] 68C999B4419F8A90F659ED6847B0A666
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\en_GB\messages.json --a---- 314 bytes [13:00 08/06/2013] [13:00 08/06/2013] 68C999B4419F8A90F659ED6847B0A666
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\en_US\messages.json --a---- 314 bytes [13:00 08/06/2013] [13:00 08/06/2013] 68C999B4419F8A90F659ED6847B0A666
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\es\messages.json --a---- 340 bytes [13:00 08/06/2013] [13:00 08/06/2013] 0BFDE8ACAF1E5FDDFD4DB9F702DEED64
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\es_419\messages.json --a---- 341 bytes [13:00 08/06/2013] [13:00 08/06/2013] 80938382795C50E509374BD045B22F12
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\et\messages.json --a---- 314 bytes [13:00 08/06/2013] [13:00 08/06/2013] C69232FB36EDE2C48170E6508B3EC939
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\fi\messages.json --a---- 305 bytes [13:00 08/06/2013] [13:00 08/06/2013] 365A4FA9ACA54CF3F10DED1DD688B3D6
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\fil\messages.json --a---- 337 bytes [13:00 08/06/2013] [13:00 08/06/2013] 6F74695E6332C234D6E46CA6EEACD154
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\fr\messages.json --a---- 329 bytes [13:00 08/06/2013] [13:00 08/06/2013] D548FB5781F4B74C289973ABA5922B4F
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\he\messages.json --a---- 471 bytes [13:00 08/06/2013] [13:00 08/06/2013] 22519FF35686773578185622AC67CBA5
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\hi\messages.json --a---- 326 bytes [13:00 08/06/2013] [13:00 08/06/2013] FDF5C2D6629AB1DB0E0A1772F5697586
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\hr\messages.json --a---- 340 bytes [13:00 08/06/2013] [13:00 08/06/2013] B4E5BDFA25BECF291C00F6B6F5890455
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\hu\messages.json --a---- 336 bytes [13:00 08/06/2013] [13:00 08/06/2013] E896BBB6B44DDFB4041BCB47359E504F
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\id\messages.json --a---- 319 bytes [13:00 08/06/2013] [13:00 08/06/2013] F4138589791C819BAB51E2220054F0D8
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\it\messages.json --a---- 324 bytes [13:00 08/06/2013] [13:00 08/06/2013] 8335FC8A0EE6EC328643112225B24F59
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\ja\messages.json --a---- 388 bytes [13:00 08/06/2013] [13:00 08/06/2013] D64FE2E54C18FEF3C4AE4F496D597C80
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\ko\messages.json --a---- 380 bytes [13:00 08/06/2013] [13:00 08/06/2013] 91AF6E77D77340299CF1365318B38C54
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\lt\messages.json --a---- 359 bytes [13:00 08/06/2013] [13:00 08/06/2013] E972CD2B7ECC6BF5517ED86C7C2AFC69
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\lv\messages.json --a---- 360 bytes [13:00 08/06/2013] [13:00 08/06/2013] F538F2FFBAD98CB2A6AA787E027E291A
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\nl\messages.json --a---- 323 bytes [13:00 08/06/2013] [13:00 08/06/2013] D65AAB4B2094E6FB3F1C2FAA8334F66D
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\no\messages.json --a---- 300 bytes [13:00 08/06/2013] [13:00 08/06/2013] 99D7A243AE11E1B679A3D607E2140527
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\pl\messages.json --a---- 336 bytes [13:00 08/06/2013] [13:00 08/06/2013] 7573DD5425BFC2593D4ED5DD069973DA
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\pt_BR\messages.json --a---- 332 bytes [13:00 08/06/2013] [13:00 08/06/2013] AB68927E9BA10051B033EDD0EA6B0A7A
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\pt_PT\messages.json --a---- 331 bytes [13:00 08/06/2013] [13:00 08/06/2013] BE47658D85F9DF358E37B571F1E4E12D
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\ro\messages.json --a---- 332 bytes [13:00 08/06/2013] [13:00 08/06/2013] 0887E086A4818DD9D60AD7D79A0F20AA
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\ru\messages.json --a---- 471 bytes [13:00 08/06/2013] [13:00 08/06/2013] 810C345A170AE57B1C9A47125C4C4F20
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\sk\messages.json --a---- 338 bytes [13:00 08/06/2013] [13:00 08/06/2013] 68FF16376911602EB802E07880103993
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\sl\messages.json --a---- 329 bytes [13:00 08/06/2013] [13:00 08/06/2013] 09102953CBBA8076B4CD3B732CB92E7A
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\sr\messages.json --a---- 483 bytes [13:00 08/06/2013] [13:00 08/06/2013] F2C134E61DECFF6824A6F7F9E7EEBC69
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\sv\messages.json --a---- 333 bytes [13:00 08/06/2013] [13:00 08/06/2013] CD7F1A303DEC0FAB10664A19CB08BF32
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\th\messages.json --a---- 472 bytes [13:00 08/06/2013] [13:00 08/06/2013] A4F6D91AED6527F946FECB61B5F2973C
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\tr\messages.json --a---- 330 bytes [13:00 08/06/2013] [13:00 08/06/2013] D98B3CD27155F0B4F48A29CD1DF11A5D
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\uk\messages.json --a---- 501 bytes [13:00 08/06/2013] [13:00 08/06/2013] 15F61FB62E5B5B75BD7507A7D0FC6276
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\vi\messages.json --a---- 363 bytes [13:00 08/06/2013] [13:00 08/06/2013] DC02046BA3C0982DD168A2AAB103226C
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\zh_CN\messages.json --a---- 346 bytes [13:00 08/06/2013] [13:00 08/06/2013] B9E1488D0F8CB318A9C0AF8CA38A523C
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\zh_TW\messages.json --a---- 346 bytes [13:00 08/06/2013] [13:00 08/06/2013] DA8A359EFFDE7B8F541E56350DDDC884
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\manifest.json --a---- 1134 bytes [01:55 07/12/2013] [01:55 07/12/2013] 62151FBBB2F8C4B174BD728EF3F1015D
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\_locales\bg\messages.json --a---- 1167 bytes [01:55 07/12/2013] [01:55 07/12/2013] FACC87F38120F4B32EBE247EFEE762C2
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\_locales\ca\messages.json --a---- 548 bytes [01:55 07/12/2013] [01:55 07/12/2013] 79FCF929D26C2FD2F470129631A4C993
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\_locales\cs\messages.json --a---- 609 bytes [01:55 07/12/2013] [01:55 07/12/2013] AC8356A10750206DA2A488F69823430A
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\_locales\da\messages.json --a---- 543 bytes [01:55 07/12/2013] [01:55 07/12/2013] 520D3F057127667DEBD8FC5253079578
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\_locales\de\messages.json --a---- 564 bytes [01:55 07/12/2013] [01:55 07/12/2013] 75464C3AA4E073415783576CB66A3474
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\_locales\el\messages.json --a---- 1348 bytes [01:55 07/12/2013] [01:55 07/12/2013] B6941B4B629C589F51C9CA94B7883923
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\_locales\en\messages.json --a---- 491 bytes [01:55 07/12/2013] [01:55 07/12/2013] CDA0E2FCCF3C4B8879D8770D36BF9200
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\_locales\en_GB\messages.json --a---- 491 bytes [01:55 07/12/2013] [01:55 07/12/2013] CDA0E2FCCF3C4B8879D8770D36BF9200
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\_locales\es\messages.json --a---- 574 bytes [01:55 07/12/2013] [01:55 07/12/2013] 3BC621C2AB71EA4F05A6FBE682F5806F
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\_locales\es_419\messages.json --a---- 537 bytes [01:55 07/12/2013] [01:55 07/12/2013] DAE9817BE76CDFD4750DCBFA8577F516
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\_locales\et\messages.json --a---- 501 bytes [01:55 07/12/2013] [01:55 07/12/2013] 8E02E21CE5E032B8C93773141B9A258E
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\_locales\fi\messages.json --a---- 608 bytes [01:55 07/12/2013] [01:55 07/12/2013] 84C267D33DA8C705A88F4594DF8B3C88
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\_locales\fil\messages.json --a---- 542 bytes [01:55 07/12/2013] [01:55 07/12/2013] EACED3EF7D96D8010E2D636F3B7DA060
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\_locales\fr\messages.json --a---- 590 bytes [01:55 07/12/2013] [01:55 07/12/2013] 3A7ACB6A8D8A77A408A1D301166D2687
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\_locales\hi\messages.json --a---- 1045 bytes [01:55 07/12/2013] [01:55 07/12/2013] 2C3B4B0A7DF5B7971A4C7F4DA368549A
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\_locales\hr\messages.json --a---- 543 bytes [01:55 07/12/2013] [01:55 07/12/2013] 300583B4CE98F854C3FB2D7D3C365CAB
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\_locales\hu\messages.json --a---- 615 bytes [01:55 07/12/2013] [01:55 07/12/2013] DD24526DC31C04585777858D36DAC441
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\_locales\id\messages.json --a---- 503 bytes [01:55 07/12/2013] [01:55 07/12/2013] 6CDAEF5C8C4DF49311D5FC2E2649431E
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\_locales\it\messages.json --a---- 507 bytes [01:55 07/12/2013] [01:55 07/12/2013] E4E305E0838E6BDD86EFC9BA3040CB56
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\_locales\ja\messages.json --a---- 884 bytes [01:55 07/12/2013] [01:55 07/12/2013] F069838D92FBBAC4944A04B608B45ECA
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\_locales\ko\messages.json --a---- 689 bytes [01:55 07/12/2013] [01:55 07/12/2013] 09B38405A94E3A7FA757CA64B681C26F
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\_locales\lt\messages.json --a---- 577 bytes [01:55 07/12/2013] [01:55 07/12/2013] C85F25C37B64C82ADAF51FEB896B4803
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\_locales\lv\messages.json --a---- 583 bytes [01:55 07/12/2013] [01:55 07/12/2013] D9A70181053C8669DBD6D28E16BDEAF2
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\_locales\nb\messages.json --a---- 537 bytes [01:55 07/12/2013] [01:55 07/12/2013] C871457FB3321AF0375269BA39BB56C6
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\_locales\nl\messages.json --a---- 507 bytes [01:55 07/12/2013] [01:55 07/12/2013] F90E8A5C67C795D1C348A876D7FB9C2D
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\_locales\pl\messages.json --a---- 551 bytes [01:55 07/12/2013] [01:55 07/12/2013] 4E0FEE8D189120562D42550F120E1770
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\_locales\pt_BR\messages.json --a---- 558 bytes [01:55 07/12/2013] [01:55 07/12/2013] F9A93AC8D71E9A5FC0226B54983839E0
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\_locales\pt_PT\messages.json --a---- 559 bytes [01:55 07/12/2013] [01:55 07/12/2013] FE4E33B8285702CD5CED83E494C1BF3F
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\_locales\ro\messages.json --a---- 560 bytes [01:55 07/12/2013] [01:55 07/12/2013] 7C9B00B64D09237C1F4E4698A45B60DC
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\_locales\ru\messages.json --a---- 1017 bytes [01:55 07/12/2013] [01:55 07/12/2013] B08D43EC0039E83BC5D4A3B3F4D2036B
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\_locales\sk\messages.json --a---- 595 bytes [01:55 07/12/2013] [01:55 07/12/2013] 858C75D02BDD7127CC5BF4CA428CF872
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\_locales\sl\messages.json --a---- 518 bytes [01:55 07/12/2013] [01:55 07/12/2013] CB5B5BC714F6283C60C93C6BDDDFAE41
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\_locales\sr\messages.json --a---- 1136 bytes [01:55 07/12/2013] [01:55 07/12/2013] C08ACDEA5C208E8391131EE33F9807B2
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\_locales\sv\messages.json --a---- 560 bytes [01:55 07/12/2013] [01:55 07/12/2013] 961F8680C12B3EB39B5CF31BC8CDEB66
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\_locales\th\messages.json --a---- 1184 bytes [01:55 07/12/2013] [01:55 07/12/2013] 5A04DA41B22E1C5446932E2996345F26
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\_locales\tr\messages.json --a---- 597 bytes [01:55 07/12/2013] [01:55 07/12/2013] D5BE90425C6BBF619208E726904D29FB
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\_locales\uk\messages.json --a---- 1038 bytes [01:55 07/12/2013] [01:55 07/12/2013] 4D764F555C08DA24158DAE793F053404
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\_locales\vi\messages.json --a---- 650 bytes [01:55 07/12/2013] [01:55 07/12/2013] 61763840010DA392D8807DBF9DD196DC
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\_locales\zh_CN\messages.json --a---- 625 bytes [01:55 07/12/2013] [01:55 07/12/2013] 0961884E74639F600410B715DE27E446
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\_locales\zh_TW\messages.json --a---- 667 bytes [01:55 07/12/2013] [01:55 07/12/2013] EBE95B046350B3B69FBB5578E4817F09
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\manifest.json --a---- 755 bytes [02:28 08/06/2013] [02:28 08/06/2013] BF9ED89CE27914C99BB5629740A7A7EB
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\ar\messages.json --a---- 556 bytes [02:28 08/06/2013] [02:28 08/06/2013] DCE30E06CC4298B140576951ACC86816
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\bg\messages.json --a---- 492 bytes [02:28 08/06/2013] [02:28 08/06/2013] 22E44EF5318119517DB82703919AB133
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\ca\messages.json --a---- 262 bytes [02:28 08/06/2013] [02:28 08/06/2013] B6B539A6E6AFD8E0D8921511089A94B1
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\cs\messages.json --a---- 289 bytes [02:28 08/06/2013] [02:28 08/06/2013] F6387216CFB18BE992F38D94D9CC37A5
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\da\messages.json --a---- 240 bytes [02:28 08/06/2013] [02:28 08/06/2013] 86A141F6044B43EC760507456025B8D5
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\de\messages.json --a---- 239 bytes [02:28 08/06/2013] [02:28 08/06/2013] 360EAC8E258533B427AA6E2A7BB5B92F
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\el\messages.json --a---- 624 bytes [02:28 08/06/2013] [02:28 08/06/2013] 0B5B674BEEBAC4583DFAACB5EED296B7
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\en\messages.json --a---- 215 bytes [02:28 08/06/2013] [02:28 08/06/2013] C955ABB367158B1A6015F91001E65458
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\es\messages.json --a---- 281 bytes [02:28 08/06/2013] [02:28 08/06/2013] E37502E0EC3AE45074F2E34EFF8B0EC7
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\fi\messages.json --a---- 284 bytes [02:28 08/06/2013] [02:28 08/06/2013] AE7DD43428DB403DD1CDFE29636A8D12
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\fil\messages.json --a---- 234 bytes [02:28 08/06/2013] [02:28 08/06/2013] E85B25BF1FDE30AAB85E690FC47CB1E5
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\fr\messages.json --a---- 272 bytes [02:28 08/06/2013] [02:28 08/06/2013] 9B9AB2BA7B111772B12427AFF5313D0F
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\hi\messages.json --a---- 391 bytes [02:28 08/06/2013] [02:28 08/06/2013] 9C0360E4CE0FB7FBE1202105E365D675
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\hr\messages.json --a---- 246 bytes [02:28 08/06/2013] [02:28 08/06/2013] 51185689C14390FB2B5A3D7C72C01A2D
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\hu\messages.json --a---- 234 bytes [02:28 08/06/2013] [02:28 08/06/2013] E8235725AA95D302C48404B3CA239435
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\id\messages.json --a---- 242 bytes [02:28 08/06/2013] [02:28 08/06/2013] CE79B1EE24E01D3495DB6F00D2361D34
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\it\messages.json --a---- 260 bytes [02:28 08/06/2013] [02:28 08/06/2013] CBFEBA52D95C68B47C511095930346F2
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\ja\messages.json --a---- 364 bytes [02:28 08/06/2013] [02:28 08/06/2013] 6804B5C6A2336DB0C33AC5964AA80484
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\ko\messages.json --a---- 328 bytes [02:28 08/06/2013] [02:28 08/06/2013] C870F9477DAD594BA5EC96E1591A3051
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\lt\messages.json --a---- 269 bytes [02:28 08/06/2013] [02:28 08/06/2013] D093839DC1278D56E5E7C876CC9A04C3
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\lv\messages.json --a---- 262 bytes [02:28 08/06/2013] [02:28 08/06/2013] 93AE003C19E9D1200C0E12FD242F0E86
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\nl\messages.json --a---- 232 bytes [02:28 08/06/2013] [02:28 08/06/2013] 44F95118655A479A306F74C68AEAB159
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\no\messages.json --a---- 210 bytes [02:28 08/06/2013] [02:28 08/06/2013] 464EDFD55F1E419B8DC73CF8A8AB5B0C
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\pl\messages.json --a---- 292 bytes [02:28 08/06/2013] [02:28 08/06/2013] F2FD6542E6983BAED5F92635B2702BA0
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\pt_BR\messages.json --a---- 230 bytes [02:28 08/06/2013] [02:28 08/06/2013] E8D892B0D8FD1D0010E5665338C8B9A1
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\pt_PT\messages.json --a---- 231 bytes [02:28 08/06/2013] [02:28 08/06/2013] CE969195A5E96D487CE70CEFC0C6FBF4
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\ro\messages.json --a---- 281 bytes [02:28 08/06/2013] [02:28 08/06/2013] 9445A1E9258ABC199D615AA8110766B0
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\ru\messages.json --a---- 482 bytes [02:28 08/06/2013] [02:28 08/06/2013] 9D0AB8627ADD40DD259FAEDFD3F2F60D
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\se\messages.json --a---- 210 bytes [02:28 08/06/2013] [02:28 08/06/2013] CB5F465A3A4043F68009154D1FA90B4A
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\sk\messages.json --a---- 238 bytes [02:28 08/06/2013] [02:28 08/06/2013] 5E811FA0B8435373ADCC2B64C3CD77C1
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\sl\messages.json --a---- 249 bytes [02:28 08/06/2013] [02:28 08/06/2013] 2D88CBCDDBD0355B8793F5C21AAE3644
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\sr\messages.json --a---- 511 bytes [02:28 08/06/2013] [02:28 08/06/2013] A0DAB5AC39F3DA4BC9A40068ADDF3B40
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\th\messages.json --a---- 471 bytes [02:28 08/06/2013] [02:28 08/06/2013] A33B8D4B444FC89B2B9E6F1053F837E2
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\tr\messages.json --a---- 250 bytes [02:28 08/06/2013] [02:28 08/06/2013] 7A293CD3C16E2D0CE037CE9E3E02D46D
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\uk\messages.json --a---- 536 bytes [02:28 08/06/2013] [02:28 08/06/2013] 2C779312F8130175AF7A9FA47E15066A
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\vi\messages.json --a---- 257 bytes [02:28 08/06/2013] [02:28 08/06/2013] 6AB1D663983B02A193EB7F55AD19AA0E
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\zh_CN\messages.json --a---- 339 bytes [02:28 08/06/2013] [02:28 08/06/2013] AA4687E60787AC70532DE7379345CC2F
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\zh_TW\messages.json --a---- 321 bytes [02:28 08/06/2013] [02:28 08/06/2013] 7DAD17EFC6F23683526DB4F95C96AF8A
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Users\ajfngoioibabdofailmpabbkihimabjm\manifest.json --a---- 561 bytes [21:34 05/05/2013] [21:34 05/05/2013] 04BF611E3351F56C835DDB1D5A84FD59
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\pnacl\0.1.0.12181\manifest.json --a---- 572 bytes [02:01 07/12/2013] [02:01 07/12/2013] 43ECC7BD8A305BE1AD449FA331629FBA
C:\Users\*user*\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\024LMTDF\count[1].json --a---- 89 bytes [13:57 19/12/2010] [13:57 19/12/2010] ED1ECBB3CA64EBE55DDA1609B1899A81
C:\Users\*user*\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5CIUL1WM\Adform.Sender.JSON[1].js --a---- 4739 bytes [04:00 07/12/2013] [04:00 07/12/2013] 2AC7EB8DCE0B51D0E070F6CC7F3D8DCA
C:\Users\*user*\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5CIUL1WM\travelnewsandwire_dot_com_slash_t-magazine-sign-of-the-times-under-the-spell-of-old-restaurants[1].json --a---- 0 bytes [02:10 07/12/2013] [02:10 07/12/2013] D41D8CD98F00B204E9800998ECF8427E
C:\Users\*user*\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BPP1MSVY\allsports247_dot_com_slash_report-duke-johnson-to-miss-rest-of-season-whats-next-for-miami-cbssports-com[1].json --a---- 0 bytes [01:58 07/12/2013] [01:58 07/12/2013] D41D8CD98F00B204E9800998ECF8427E
C:\Users\*user*\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IGIB3QNJ\travelnewsandwire_dot_com_slash_burlington-when-in-vermont-take-a-walk-around-the-sixth-great-lake[1].json --a---- 0 bytes [02:20 07/12/2013] [02:20 07/12/2013] D41D8CD98F00B204E9800998ECF8427E
C:\Users\*user*\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IGIB3QNJ\travelnewsandwire_dot_com_slash_t-magazine-sign-of-the-times-under-the-spell-of-old-restaurants[1].json --a---- 0 bytes [02:12 07/12/2013] [02:12 07/12/2013] D41D8CD98F00B204E9800998ECF8427E
C:\Users\*user*\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IL7CILRD\beautyandstylebeat_dot_com_slash_how-to-remove-glitter-nail-polish[1].json --a---- 0 bytes [03:02 07/12/2013] [03:02 07/12/2013] D41D8CD98F00B204E9800998ECF8427E
C:\Users\*user*\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IL7CILRD\fitnessandhealth365_dot_com_slash_fighting-shape-ryan-baders-dynamic-warm-up-workout-and-nutrition[1].json --a---- 0 bytes [02:24 07/12/2013] [02:24 07/12/2013] D41D8CD98F00B204E9800998ECF8427E
C:\Users\*user*\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IL7CILRD\fitnessandhealth365_dot_com_slash_the-clean-cook-5-seasonal-fit-recipes[1].json --a---- 0 bytes [02:13 07/12/2013] [02:13 07/12/2013] D41D8CD98F00B204E9800998ECF8427E
C:\Users\*user*\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IL7CILRD\travelnewsandwire_dot_com_slash_crazy-but-true-ryanair-lowers-fees-and-increases-baggage-allowance[1].json --a---- 0 bytes [02:20 07/12/2013] [02:20 07/12/2013] D41D8CD98F00B204E9800998ECF8427E
C:\Users\*user*\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ITX22OFX\allsports247_dot_com_slash_john-fox-denver-broncos-head-coach-needs-heart-surgery-cbs-news[1].json --a---- 0 bytes [02:07 07/12/2013] [02:07 07/12/2013] D41D8CD98F00B204E9800998ECF8427E
C:\Users\*user*\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IYTDO6Y9\g[1].json --a---- 107 bytes [04:49 07/12/2013] [04:49 07/12/2013] 0035D2F8C948123C5D48D23D7FB921B4
C:\Users\*user*\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IYTDO6Y9\g[2].json --a---- 124 bytes [04:50 07/12/2013] [04:50 07/12/2013] 9E1D124EDA32D14977CC4C1937C20F0A
C:\Users\*user*\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IYTDO6Y9\threadDetails[1].json --a---- 0 bytes [02:41 07/12/2013] [02:41 07/12/2013] D41D8CD98F00B204E9800998ECF8427E
C:\Users\*user*\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\MREVOZ9D\asconf[1].json --a---- 2909 bytes [03:55 07/12/2013] [03:55 07/12/2013] BC71C359F4658AE05AAE8F9F9F04C0E7
C:\Users\*user*\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\O4LWHPMW\asconf[1].json --a---- 2910 bytes [03:55 07/12/2013] [03:55 07/12/2013] 84028212882B122AB2865BBC11561E7A
C:\Users\*user*\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\PAOXYFI0\techandgadgetnews_dot_com_slash_audioengine-a2-black[1].json --a---- 0 bytes [02:19 07/12/2013] [02:19 07/12/2013] D41D8CD98F00B204E9800998ECF8427E
C:\Users\*user*\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\PAOXYFI0\teenhollywoodgossip_dot_com_slash_joe-jonas-blanda-eggenschwiler-party-hopping-pair[1].json --a---- 0 bytes [03:04 07/12/2013] [03:04 07/12/2013] D41D8CD98F00B204E9800998ECF8427E
C:\Users\*user*\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QKPNVDOY\threadDetails[1].json --a---- 0 bytes [02:41 07/12/2013] [02:41 07/12/2013] D41D8CD98F00B204E9800998ECF8427E
C:\Users\*user*\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QZCVGG5N\techandgadgetnews_dot_com_slash_infamous-second-son-karma-explained-welcome-back-the-binary-moral-choice-system[1].json --a---- 0 bytes [02:13 07/12/2013] [02:13 07/12/2013] D41D8CD98F00B204E9800998ECF8427E
C:\Users\*user*\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QZCVGG5N\travelnewsandwire_dot_com_slash_category_slash_travel-agencies[1].json --a---- 0 bytes [02:11 07/12/2013] [02:11 07/12/2013] D41D8CD98F00B204E9800998ECF8427E
C:\Users\*user*\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\R6SV9I8M\allsports247_dot_com_slash_what-nfl-players-are-saying-about-the-leagues-hazing-dilemma-usa-today[1].json --a---- 0 bytes [02:01 07/12/2013] [02:01 07/12/2013] D41D8CD98F00B204E9800998ECF8427E
C:\Users\*user*\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\R6SV9I8M\all[1].json --a---- 4576 bytes [03:55 07/12/2013] [03:55 07/12/2013] 5AD71A861976148DAF03960DE336A538
C:\Users\*user*\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZIGEJG3F\2040347[1].json --a---- 1009 bytes [04:50 07/12/2013] [04:50 07/12/2013] 3890603369CB0886FAEC1959D3A439FA
C:\Users\*user*\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZIGEJG3F\all[1].json --a---- 4777 bytes [03:55 07/12/2013] [03:55 07/12/2013] E85CFC823E3708B1FC8EA44907763D22
C:\Users\*user*\AppData\Local\Temp\9272_14789\manifest.json --a---- 34 bytes [02:11 07/12/2013] [02:11 07/12/2013] 994F985966C0B96B98A67143D49F8547
C:\Users\*user*\AppData\Local\Temp\CRX_75DAF8CB7768\manifest.json --a---- 34 bytes [02:34 08/06/2013] [02:34 08/06/2013] 994F985966C0B96B98A67143D49F8547
C:\Users\*user*\AppData\LocalLow\Microsoft\Silverlight\is\j4p3otem.esd\kaxuxvxo.oqi\1\s\u4nll4hghcen13r3jyqlcw1e0wapukkfqd1nyqcn5uz4dmrluzaaaefa\f\SLPlayer\bwdata.json --a---- 144 bytes [00:13 24/03/2011] [12:46 05/02/2012] E7A032B173E1F2900A8A2FE69203BBEE
C:\Users\*user*\AppData\LocalLow\Microsoft\Silverlight\is\j4p3otem.esd\kaxuxvxo.oqi\1\s\u4nll4hghcen13r3jyqlcw1e0wapukkfqd1nyqcn5uz4dmrluzaaaefa\f\SLPlayer\userPrefs.json --a---- 121 bytes [14:44 19/03/2011] [12:48 05/02/2012] 78EF48E2AE2E960DE44756156589D458
 
Searching for "*.xpi*"
C:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\MicrosoftDotNetFrameworkAssistant.xpi --a---- 19153 bytes [18:40 18/03/2009] [18:40 18/03/2009] 142AA9EC7D07C3F7B26E20E5EA399C80
 
========== regfind ==========
 
Searching for "ODUuMTcuMTMyLjU0OwAA"
No data found.
 
Searching for "ODUuMTcuMTQ3LjMzOwAA"
No data found.
 
Searching for "cdjbnddbclciabnckgeahmneohjlahdm"
No data found.
 
========== dir ==========
 
C:\Users\Administrator\AppData\Local\Google\Chrome\UserData\Default\Default - Unable to find folder.
 
-= EOF =-
 


#4 jrbe

jrbe
  • Topic Starter

  • Members
  • 37 posts
  • OFFLINE
  •  
  • Local time:01:41 AM

Posted 03 January 2014 - 12:16 AM

SystemLook 30.07.11 by jpshortstuff
Log created at 22:56 on 02/01/2014 by Administrator
Administrator - Elevation successful
WARNING: SystemLook running under WOW64. Use SystemLook_x64 for accurate results.
 
========== filefind ==========
 
Searching for "*.crx*"
C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\default_apps\docs.crx --a---- 4578 bytes [00:29 01/12/2013] [10:55 14/11/2013] 2C71C49F991095A1848624907BACBB08
C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\default_apps\drive.crx --a---- 25561 bytes [00:29 01/12/2013] [10:55 14/11/2013] 71E1283B8440F6264CEC99DF9AD81F5B
C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\default_apps\gmail.crx --a---- 24040 bytes [00:29 01/12/2013] [10:55 14/11/2013] 2E2E328E5BF6BE61203164B3E9EA8094
C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\default_apps\search.crx --a---- 26392 bytes [00:29 01/12/2013] [10:55 14/11/2013] 8AD223868AB9974F7746D0227730A0CC
C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\default_apps\youtube.crx --a---- 23668 bytes [00:29 01/12/2013] [10:55 14/11/2013] D2F6A1B11344D9AC7BCFB75900D4ADE1
C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\default_apps\docs.crx --a---- 4578 bytes [21:21 06/12/2013] [02:29 04/12/2013] 2C71C49F991095A1848624907BACBB08
C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\default_apps\drive.crx --a---- 25561 bytes [21:21 06/12/2013] [02:29 04/12/2013] 71E1283B8440F6264CEC99DF9AD81F5B
C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\default_apps\gmail.crx --a---- 24040 bytes [21:21 06/12/2013] [02:29 04/12/2013] 2E2E328E5BF6BE61203164B3E9EA8094
C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\default_apps\search.crx --a---- 26392 bytes [21:21 06/12/2013] [02:29 04/12/2013] 8AD223868AB9974F7746D0227730A0CC
C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\default_apps\youtube.crx --a---- 23668 bytes [21:21 06/12/2013] [02:29 04/12/2013] D2F6A1B11344D9AC7BCFB75900D4ADE1
 
Searching for "*.json*"
C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\default_apps\external_extensions.json --a---- 982 bytes [00:30 01/12/2013] [10:55 14/11/2013] 5D31037D06A04AECD968D32CC59C1CF3
C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\Extensions\external_extensions.json --a---- 99 bytes [00:30 01/12/2013] [10:55 14/11/2013] 280A9277B0E605E905D7F18B6148EEB7
C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\PepperFlash\manifest.json --a---- 2054 bytes [00:30 01/12/2013] [10:55 14/11/2013] E7B242A2D92CCD8EE855FAB05F4D1923
C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\default_apps\external_extensions.json --a---- 982 bytes [21:21 06/12/2013] [02:29 04/12/2013] 5D31037D06A04AECD968D32CC59C1CF3
C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\Extensions\external_extensions.json --a---- 99 bytes [21:21 06/12/2013] [02:29 04/12/2013] 280A9277B0E605E905D7F18B6148EEB7
C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\PepperFlash\manifest.json --a---- 2054 bytes [21:21 06/12/2013] [02:29 04/12/2013] 8643AD0E275118A80BB6A821FA4E072C
C:\Program Files (x86)\Microsoft\BingBar\apps\mail\7.0.609\providers\gmail.json --a---- 1285 bytes [14:46 25/02/2011] [14:46 25/02/2011] 4C712EC1331EB1F0A31AEBA5F0FC52B9
C:\Program Files (x86)\Microsoft\BingBar\apps\mail\7.0.609\providers\hotmail.json --a---- 1255 bytes [14:46 25/02/2011] [14:46 25/02/2011] F6C69BF6EE9CBA0164E0B0D1B9064855
C:\Program Files (x86)\Microsoft\BingBar\apps\mail\7.0.609\providers\yahoomail.json --a---- 1309 bytes [14:46 25/02/2011] [14:46 25/02/2011] BB04532813E669118F685A277C650A68
C:\Program Files (x86)\Microsoft\BingBar\apps\maps\7.0.609\js\whitelist.json --a---- 21025 bytes [14:46 25/02/2011] [14:46 25/02/2011] 1E637EAB6A58D5A9294BDFAF3FF2C2F7
C:\Program Files (x86)\Microsoft\BingBar\apps\search\7.0.609\js\whitelist.json --a---- 23863 bytes [14:46 25/02/2011] [14:46 25/02/2011] 00F91BB9BF5194DA4B919BD22804EF3C
C:\Program Files (x86)\Microsoft\BingBar\apps\toast\7.0.609\js\transitionTime.json --a---- 104 bytes [14:46 25/02/2011] [14:46 25/02/2011] 2ED32BBBBBE305DEA990411535F2D3F0
C:\Program Files (x86)\Safari\Apple Application Support\WebKit.resources\inspector\ExtensionAPISchema.json --a---- 14617 bytes [15:40 22/03/2012] [15:40 22/03/2012] 17768D4FEDB85D910C20B89F3D2CA095
C:\Program Files (x86)\VideoLAN\VLC\lua\http\requests\browse.json --a---- 1425 bytes [00:04 17/03/2012] [00:04 17/03/2012] 02A74626B57096A4F4F9DD77EBCBCDAE
C:\Program Files (x86)\VideoLAN\VLC\lua\http\requests\playlist.json --a---- 1384 bytes [00:04 17/03/2012] [00:04 17/03/2012] F49845331585BF2709690967A4A01E29
C:\Program Files (x86)\VideoLAN\VLC\lua\http\requests\status.json --a---- 1427 bytes [00:04 17/03/2012] [00:04 17/03/2012] 299B8075ABD804616EDCC490A69C4AB1
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\manifest.json --a---- 724 bytes [04:57 07/12/2013] [04:57 07/12/2013] 98E109477B145855CA65EEC8988EEFE9
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\ar\messages.json --a---- 374 bytes [04:57 07/12/2013] [04:57 07/12/2013] 2586421C45920A227CAB26657B31ECDB
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\bg\messages.json --a---- 428 bytes [04:57 07/12/2013] [04:57 07/12/2013] 9ED363DF524943138996995FD4DE2D65
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\ca\messages.json --a---- 207 bytes [04:57 07/12/2013] [04:57 07/12/2013] CDA92E97978F8AAC073FA4CA3D509EE2
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\cs\messages.json --a---- 230 bytes [04:57 07/12/2013] [04:57 07/12/2013] 0F0B5623B51DF32B47BA393B51ED99FF
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\da\messages.json --a---- 216 bytes [04:57 07/12/2013] [04:57 07/12/2013] 23FDFD2ECCBE626E47CD97D434632069
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\de\messages.json --a---- 217 bytes [04:57 07/12/2013] [04:57 07/12/2013] 1A71997D5A86A7FB57EB1850EA7D71E6
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\el\messages.json --a---- 416 bytes [04:57 07/12/2013] [04:57 07/12/2013] 0C3D86171D9B3098B1C9644ACFA019F3
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\en_GB\messages.json --a---- 208 bytes [04:57 07/12/2013] [04:57 07/12/2013] D85A412DDFA11EA5BCA068FF4F66786C
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\en_US\messages.json --a---- 209 bytes [04:57 07/12/2013] [04:57 07/12/2013] D7DCC6E7CA3F4BE8D5F48EF9E9D58CF4
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\es\messages.json --a---- 206 bytes [04:57 07/12/2013] [04:57 07/12/2013] 29E15C492DB45CEBBDA129C74E70D0E2
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\es_419\messages.json --a---- 206 bytes [04:57 07/12/2013] [04:57 07/12/2013] 29E15C492DB45CEBBDA129C74E70D0E2
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\et\messages.json --a---- 216 bytes [04:57 07/12/2013] [04:57 07/12/2013] 1B13A883F1B965F741B068345DC34FD9
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\fi\messages.json --a---- 216 bytes [04:57 07/12/2013] [04:57 07/12/2013] 2B54BFA6089001103CA63CE9BDCC6983
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\fil\messages.json --a---- 219 bytes [04:57 07/12/2013] [04:57 07/12/2013] EDA0FCFFDDF20A991D79BDD9FA5E858E
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\fr\messages.json --a---- 224 bytes [04:57 07/12/2013] [04:57 07/12/2013] 75A734320FB9016AD7DECB317DF8F9D2
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\he\messages.json --a---- 293 bytes [04:57 07/12/2013] [04:57 07/12/2013] 1EFC1A18F531C85E3D1DC298B0098955
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\hi\messages.json --a---- 375 bytes [04:57 07/12/2013] [04:57 07/12/2013] 33926A84B9B81FE0A3A753A07568A211
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\hu\messages.json --a---- 251 bytes [04:57 07/12/2013] [04:57 07/12/2013] 548C403B0CA66EFCC85DB674080440BB
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\id\messages.json --a---- 209 bytes [04:57 07/12/2013] [04:57 07/12/2013] 9213E5F82888D5E3EEAF1BD7BC7A67AC
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\it\messages.json --a---- 213 bytes [04:57 07/12/2013] [04:57 07/12/2013] 31905588AE3EEB77E9E96FEB5BACA3B3
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\ja\messages.json --a---- 263 bytes [04:57 07/12/2013] [04:57 07/12/2013] 675FA4BA824CBC0439AB8D805058C99E
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\ko\messages.json --a---- 254 bytes [04:57 07/12/2013] [04:57 07/12/2013] 073E2411ABA2E7C2C6A11AE05114DEF0
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\lt\messages.json --a---- 234 bytes [04:57 07/12/2013] [04:57 07/12/2013] 8538DBD057F6C4B4876607B730B1971C
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\lv\messages.json --a---- 232 bytes [04:57 07/12/2013] [04:57 07/12/2013] A6E4EF51B987005EEAD6A332974F6BF2
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\ms\messages.json --a---- 207 bytes [04:57 07/12/2013] [04:57 07/12/2013] 2766D5B9A8E40FE6691BE3F37348AFD6
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\nl\messages.json --a---- 217 bytes [04:57 07/12/2013] [04:57 07/12/2013] 701D7ECF13542F59C58B21FAEF88C1AE
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\no\messages.json --a---- 195 bytes [04:57 07/12/2013] [04:57 07/12/2013] C13B7D73C7A543546CE63367C0D700CA
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\pl\messages.json --a---- 217 bytes [04:57 07/12/2013] [04:57 07/12/2013] A0A86FA83DAD0F8F22A439C8E6DCE763
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\pt_BR\messages.json --a---- 206 bytes [04:57 07/12/2013] [04:57 07/12/2013] 9F3925EF0F907B07ECBC8A3727F19721
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\pt_PT\messages.json --a---- 208 bytes [04:57 07/12/2013] [04:57 07/12/2013] 3A52EEDFCA079439677BC42E800A218B
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\ro\messages.json --a---- 225 bytes [04:57 07/12/2013] [04:57 07/12/2013] C707363B3BAAB39130294384504C2D2D
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\ru\messages.json --a---- 434 bytes [04:57 07/12/2013] [04:57 07/12/2013] 1D3F6DB1F33813E2428A8C78AF0B9893
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\sk\messages.json --a---- 225 bytes [04:57 07/12/2013] [04:57 07/12/2013] 5855CC4AA15DEFB435C69B3AC3B36C39
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\sl\messages.json --a---- 218 bytes [04:57 07/12/2013] [04:57 07/12/2013] 75EA0350804326B40BA2BC5739C4A171
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\sr\messages.json --a---- 380 bytes [04:57 07/12/2013] [04:57 07/12/2013] 37A2926DEAF11918D39139018B9A33A1
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\sv\messages.json --a---- 214 bytes [04:57 07/12/2013] [04:57 07/12/2013] 3C4D8B7ACF404F7AE5B647BE24E0A5F1
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\th\messages.json --a---- 329 bytes [04:57 07/12/2013] [04:57 07/12/2013] 65DD9D347A6F61699C0D5AE99358716A
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\tr\messages.json --a---- 243 bytes [04:57 07/12/2013] [04:57 07/12/2013] 4793CF2F6C1257E152A12B8FD1C76485
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\uk\messages.json --a---- 428 bytes [04:57 07/12/2013] [04:57 07/12/2013] 3DE4E016914A029A9254938BFB28A2A8
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\vi\messages.json --a---- 252 bytes [04:57 07/12/2013] [04:57 07/12/2013] 461DABD15F63F56C2A8C25C72092276B
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\zh_CN\messages.json --a---- 233 bytes [04:57 07/12/2013] [04:57 07/12/2013] 332DB4EC98D2BEC0383BCFDF67BD1A50
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\zh_TW\messages.json --a---- 233 bytes [04:57 07/12/2013] [04:57 07/12/2013] B554765872643769E1108DD312D076C1
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\manifest.json --a---- 996 bytes [04:57 07/12/2013] [04:57 07/12/2013] E6DC57A9ABA31600533C6A7784919FFB
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\ar\messages.json --a---- 422 bytes [04:57 07/12/2013] [04:57 07/12/2013] D074CD99068529EB5A22DF31E9D5913F
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\bg\messages.json --a---- 559 bytes [04:57 07/12/2013] [04:57 07/12/2013] E3F6B91EC2C0E8A2B966EA158A08B1F0
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\ca\messages.json --a---- 265 bytes [04:57 07/12/2013] [04:57 07/12/2013] 77487466CD1B18FEAD66FC69AF391221
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\cs\messages.json --a---- 283 bytes [04:57 07/12/2013] [04:57 07/12/2013] 134878E356B8D07D30E64A18F00A6565
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\da\messages.json --a---- 251 bytes [04:57 07/12/2013] [04:57 07/12/2013] 53F3ABC7F5F6E2F9C4603D27EB979E88
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\de\messages.json --a---- 256 bytes [04:57 07/12/2013] [04:57 07/12/2013] F6B48063D035D1025AD4532FFA2430C8
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\el\messages.json --a---- 565 bytes [04:57 07/12/2013] [04:57 07/12/2013] 3AFC6760735284C2CB954EAF80A2FC3F
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\en_GB\messages.json --a---- 249 bytes [04:57 07/12/2013] [04:57 07/12/2013] 5C5C111D80097AEB22E5223787734FC2
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\en_US\messages.json --a---- 249 bytes [04:57 07/12/2013] [04:57 07/12/2013] 5C5C111D80097AEB22E5223787734FC2
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\es\messages.json --a---- 259 bytes [04:57 07/12/2013] [04:57 07/12/2013] DF4BD088D5B32B2C31BE1BFE404558A6
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\es_419\messages.json --a---- 259 bytes [04:57 07/12/2013] [04:57 07/12/2013] DF4BD088D5B32B2C31BE1BFE404558A6
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\et\messages.json --a---- 259 bytes [04:57 07/12/2013] [04:57 07/12/2013] A2130F26BA56617670D7721D77E59BE1
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\eu\messages.json --a---- 243 bytes [04:57 07/12/2013] [04:57 07/12/2013] B0AF125B9AD99D6EF007C1C5E4788317
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\fi\messages.json --a---- 277 bytes [04:57 07/12/2013] [04:57 07/12/2013] 6EF1BDCCF457AEDCE9BAC9C1B3EE864F
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\fil\messages.json --a---- 260 bytes [04:57 07/12/2013] [04:57 07/12/2013] BDEF574C1E45B062653C38AB710A175E
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\fr\messages.json --a---- 260 bytes [04:57 07/12/2013] [04:57 07/12/2013] 64DD2E108845390175E01CB0BF7EE577
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\he\messages.json --a---- 438 bytes [04:57 07/12/2013] [04:57 07/12/2013] 39000F7C9F7F63BF921F0C58DF2F672E
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\hi\messages.json --a---- 492 bytes [04:57 07/12/2013] [04:57 07/12/2013] 307274E619FEF5ACE59F05157348AD16
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\hr\messages.json --a---- 263 bytes [04:57 07/12/2013] [04:57 07/12/2013] EFDE2EDD0907C7906B19D2539EF693F5
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\hu\messages.json --a---- 276 bytes [04:57 07/12/2013] [04:57 07/12/2013] 547EDF90ADFBA09304FEED9EB7DBB985
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\id\messages.json --a---- 261 bytes [04:57 07/12/2013] [04:57 07/12/2013] FE22191E30FC270278FDED58DD4C4138
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\it\messages.json --a---- 258 bytes [04:57 07/12/2013] [04:57 07/12/2013] E954A0D6AE514F4445163F9F17349270
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\ja\messages.json --a---- 395 bytes [04:57 07/12/2013] [04:57 07/12/2013] 8E61873E7C604AB6AB78941DE872D274
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\ko\messages.json --a---- 365 bytes [04:57 07/12/2013] [04:57 07/12/2013] DF1C991A376FEAF3C8BAEF1AA344E5E9
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\lt\messages.json --a---- 309 bytes [04:57 07/12/2013] [04:57 07/12/2013] 50AF5D4387A123BDE4ED9B9566103789
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\lv\messages.json --a---- 262 bytes [04:57 07/12/2013] [04:57 07/12/2013] EAC98BBCFDE4B864383589885D2C82A4
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\ms\messages.json --a---- 254 bytes [04:57 07/12/2013] [04:57 07/12/2013] 9F94BBD70C447A94F02625B750E13DAA
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\nl\messages.json --a---- 250 bytes [04:57 07/12/2013] [04:57 07/12/2013] D7F6C0118AF6C27F43263CD1D0244707
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\no\messages.json --a---- 218 bytes [04:57 07/12/2013] [04:57 07/12/2013] D6A1BF7219C30249115A6A366EC01CE2
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\pl\messages.json --a---- 261 bytes [04:57 07/12/2013] [04:57 07/12/2013] 30F8807C8E66E23CC07E342330081CF8
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\pt_BR\messages.json --a---- 250 bytes [04:57 07/12/2013] [04:57 07/12/2013] F6F4E1CE5022E45EF6E72138171627C9
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\pt_PT\messages.json --a---- 272 bytes [04:57 07/12/2013] [04:57 07/12/2013] 4A40A5DD332681AE6139DFFA6C49179F
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\ro\messages.json --a---- 309 bytes [04:57 07/12/2013] [04:57 07/12/2013] C1B3128821B1FE7978221F444DCA4C0E
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\ru\messages.json --a---- 614 bytes [04:57 07/12/2013] [04:57 07/12/2013] 3CB108582E945FCD9DDDC254A20E01A7
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\sk\messages.json --a---- 293 bytes [04:57 07/12/2013] [04:57 07/12/2013] 643C60E2823E409912D41DDBF2E4B68C
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\sl\messages.json --a---- 268 bytes [04:57 07/12/2013] [04:57 07/12/2013] CC32B1A596CE9CEFBE7C2580860234AE
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\sr\messages.json --a---- 467 bytes [04:57 07/12/2013] [04:57 07/12/2013] 01A348D263AB6A699F0E07380441E9DD
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\sv\messages.json --a---- 261 bytes [04:57 07/12/2013] [04:57 07/12/2013] 344998E12A700D26D899FC3EC62056EB
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\th\messages.json --a---- 521 bytes [04:57 07/12/2013] [04:57 07/12/2013] 801098F07BD5ADD0BD6AE21B64CB61F3
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\tr\messages.json --a---- 302 bytes [04:57 07/12/2013] [04:57 07/12/2013] 290646D43E911C5F19913ACF81B9F3C4
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\uk\messages.json --a---- 657 bytes [04:57 07/12/2013] [04:57 07/12/2013] BE0CCE5AE07284F3153F95D46833F68A
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\vi\messages.json --a---- 321 bytes [04:57 07/12/2013] [04:57 07/12/2013] 82767FD874A55A718AC6BCF38C4CF2AF
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\zh_CN\messages.json --a---- 360 bytes [04:57 07/12/2013] [04:57 07/12/2013] BC87AB08DD1A3B9E0D9C4F39A832A4AE
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\zh_TW\messages.json --a---- 348 bytes [04:57 07/12/2013] [04:57 07/12/2013] 540A14C439D6562AC45AE4B39A10660D
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\manifest.json --a---- 785 bytes [04:57 07/12/2013] [04:57 07/12/2013] 0A4B1F66636E0A0275DF7CAD563E2D9D
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\ar\messages.json --a---- 401 bytes [04:57 07/12/2013] [04:57 07/12/2013] 9E5196B0371D7472ADBC76B0D24387EE
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\bg\messages.json --a---- 427 bytes [04:57 07/12/2013] [04:57 07/12/2013] ECC218F02AD23568A736F6CAABA093C6
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\ca\messages.json --a---- 250 bytes [04:57 07/12/2013] [04:57 07/12/2013] 8D66C382986948F2D9B8C449117CE014
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\cs\messages.json --a---- 255 bytes [04:57 07/12/2013] [04:57 07/12/2013] 3B1388F38C14A550F1B423681854F8E1
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\da\messages.json --a---- 242 bytes [04:57 07/12/2013] [04:57 07/12/2013] 7F47C449A6A9968CDB5E9A681AD41713
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\de\messages.json --a---- 226 bytes [04:57 07/12/2013] [04:57 07/12/2013] 3AEF1AFEA23425011D7080D742BEBB5E
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\el\messages.json --a---- 475 bytes [04:57 07/12/2013] [04:57 07/12/2013] 6AEEEFA17DBF4C3F7F2CEFBFB6B65BC2
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\en\messages.json --a---- 227 bytes [04:57 07/12/2013] [04:57 07/12/2013] 437B589124A420EFAC2A6C3D1AD600FB
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\es\messages.json --a---- 240 bytes [04:57 07/12/2013] [04:57 07/12/2013] 9903D21609669AFBA89B5C89AFB26FA3
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\fi\messages.json --a---- 222 bytes [04:57 07/12/2013] [04:57 07/12/2013] 79DCEF6B8AE3F308D805EA98E3D80EEE
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\fil\messages.json --a---- 236 bytes [04:57 07/12/2013] [04:57 07/12/2013] 818C2BCDCF8A88C468E4A992697B6737
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\fr\messages.json --a---- 249 bytes [04:57 07/12/2013] [04:57 07/12/2013] C83D0A062D1858A55E3CF56D465A0727
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\he\messages.json --a---- 419 bytes [04:57 07/12/2013] [04:57 07/12/2013] 91ED2C3CBDA4285DF1708915695F4174
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\hi\messages.json --a---- 408 bytes [04:57 07/12/2013] [04:57 07/12/2013] C5421E57D53F0308ADF0676435CB3016
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\hr\messages.json --a---- 220 bytes [04:57 07/12/2013] [04:57 07/12/2013] CD7418D8FCED636EF764A1A1EC5A8A86
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\hu\messages.json --a---- 253 bytes [04:57 07/12/2013] [04:57 07/12/2013] ACB6EF597B258D85D241CE909C1F5867
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\id\messages.json --a---- 231 bytes [04:57 07/12/2013] [04:57 07/12/2013] 33283336494046B2E64BC850E55BB060
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\it\messages.json --a---- 224 bytes [04:57 07/12/2013] [04:57 07/12/2013] 42ADA32F4C14681648B4FAAFD8B4E619
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\ja\messages.json --a---- 349 bytes [04:57 07/12/2013] [04:57 07/12/2013] E67113C4030733D07D59B8679E66DB4B
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\ko\messages.json --a---- 323 bytes [04:57 07/12/2013] [04:57 07/12/2013] 511F4EADAE84298E42E7DC456515EF56
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\lt\messages.json --a---- 266 bytes [04:57 07/12/2013] [04:57 07/12/2013] 2471CF6A0D8155BE7B63E5CDFF008FC3
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\lv\messages.json --a---- 245 bytes [04:57 07/12/2013] [04:57 07/12/2013] C1BD342887FF3850463C4546CA1684DB
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\nl\messages.json --a---- 225 bytes [04:57 07/12/2013] [04:57 07/12/2013] ED84167F0BF8B96D6B4AF795AC6B806B
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\no\messages.json --a---- 216 bytes [04:57 07/12/2013] [04:57 07/12/2013] CAD5856125850D9CD2DA5DF9F3AC7EFA
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\pl\messages.json --a---- 274 bytes [04:57 07/12/2013] [04:57 07/12/2013] 40F3E6333F0302E905C1E174E4643790
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\pt_BR\messages.json --a---- 237 bytes [04:57 07/12/2013] [04:57 07/12/2013] 8AC3A3C10959488583644A99411A1479
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\pt_PT\messages.json --a---- 236 bytes [04:57 07/12/2013] [04:57 07/12/2013] DEDD450DFCB6E1AC9F5C191D32C018F7
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\ro\messages.json --a---- 248 bytes [04:57 07/12/2013] [04:57 07/12/2013] BBE98181B8A360B545A73C09EAB91A50
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\ru\messages.json --a---- 394 bytes [04:57 07/12/2013] [04:57 07/12/2013] 6F5A01807025537828D77896C964398E
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\sk\messages.json --a---- 241 bytes [04:57 07/12/2013] [04:57 07/12/2013] A78F07BECBE8E09F84D2684C9039DF99
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\sl\messages.json --a---- 245 bytes [04:57 07/12/2013] [04:57 07/12/2013] E6D45D28F76046AF866A157BC4195B1F
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\sr\messages.json --a---- 437 bytes [04:57 07/12/2013] [04:57 07/12/2013] AB4536E48F20A7A3557E04C79A620709
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\sv\messages.json --a---- 238 bytes [04:57 07/12/2013] [04:57 07/12/2013] E934BDC87DDAC060D42B42D8A9B8E3E6
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\th\messages.json --a---- 365 bytes [04:57 07/12/2013] [04:57 07/12/2013] F4D77C8D82628038011222DB5749A5DF
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\tr\messages.json --a---- 255 bytes [04:57 07/12/2013] [04:57 07/12/2013] 96B085BCF90E071B87BBEA0D3EBD4346
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\uk\messages.json --a---- 442 bytes [04:57 07/12/2013] [04:57 07/12/2013] 5A7CA85AA79060442BA99E1D7A6FA941
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\vi\messages.json --a---- 310 bytes [04:57 07/12/2013] [04:57 07/12/2013] F2755B41D8900AE2486BEEF14E15D0BD
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\zh_CN\messages.json --a---- 257 bytes [04:57 07/12/2013] [04:57 07/12/2013] 6F0FF5FA178300F841DBC62BEF2A102F
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\zh_TW\messages.json --a---- 269 bytes [04:57 07/12/2013] [04:57 07/12/2013] 729A096C4C0FE6B933BFD8064F360B33
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\manifest.json --a---- 817 bytes [04:57 07/12/2013] [04:57 07/12/2013] E1F1D1790E772167591041531EC34534
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\ar\messages.json --a---- 423 bytes [04:57 07/12/2013] [04:57 07/12/2013] F2B1596BAC355832C458960D261DD6CA
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\bg\messages.json --a---- 515 bytes [04:57 07/12/2013] [04:57 07/12/2013] 831884C729B4B150786E42970AF79A42
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\ca\messages.json --a---- 330 bytes [04:57 07/12/2013] [04:57 07/12/2013] 7575B3083729953B0814A64A88832765
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\cs\messages.json --a---- 355 bytes [04:57 07/12/2013] [04:57 07/12/2013] BA83A1AA8B2E624E987CF73FEABCD174
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\da\messages.json --a---- 328 bytes [04:57 07/12/2013] [04:57 07/12/2013] C6D26B6639E434FCAB3AD76D0222A4B7
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\de\messages.json --a---- 307 bytes [04:57 07/12/2013] [04:57 07/12/2013] E6899AA5875407D11EA316073C320E19
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\el\messages.json --a---- 569 bytes [04:57 07/12/2013] [04:57 07/12/2013] F18A0538BE7019EA2D0215F5637357D0
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\en\messages.json --a---- 314 bytes [04:57 07/12/2013] [04:57 07/12/2013] 68C999B4419F8A90F659ED6847B0A666
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\en_GB\messages.json --a---- 314 bytes [04:57 07/12/2013] [04:57 07/12/2013] 68C999B4419F8A90F659ED6847B0A666
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\en_US\messages.json --a---- 314 bytes [04:57 07/12/2013] [04:57 07/12/2013] 68C999B4419F8A90F659ED6847B0A666
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\es\messages.json --a---- 340 bytes [04:57 07/12/2013] [04:57 07/12/2013] 0BFDE8ACAF1E5FDDFD4DB9F702DEED64
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\es_419\messages.json --a---- 341 bytes [04:57 07/12/2013] [04:57 07/12/2013] 80938382795C50E509374BD045B22F12
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\et\messages.json --a---- 314 bytes [04:57 07/12/2013] [04:57 07/12/2013] C69232FB36EDE2C48170E6508B3EC939
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\fi\messages.json --a---- 305 bytes [04:57 07/12/2013] [04:57 07/12/2013] 365A4FA9ACA54CF3F10DED1DD688B3D6
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\fil\messages.json --a---- 337 bytes [04:57 07/12/2013] [04:57 07/12/2013] 6F74695E6332C234D6E46CA6EEACD154
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\fr\messages.json --a---- 329 bytes [04:57 07/12/2013] [04:57 07/12/2013] D548FB5781F4B74C289973ABA5922B4F
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\he\messages.json --a---- 471 bytes [04:57 07/12/2013] [04:57 07/12/2013] 22519FF35686773578185622AC67CBA5
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\hi\messages.json --a---- 326 bytes [04:57 07/12/2013] [04:57 07/12/2013] FDF5C2D6629AB1DB0E0A1772F5697586
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\hr\messages.json --a---- 340 bytes [04:57 07/12/2013] [04:57 07/12/2013] B4E5BDFA25BECF291C00F6B6F5890455
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\hu\messages.json --a---- 336 bytes [04:57 07/12/2013] [04:57 07/12/2013] E896BBB6B44DDFB4041BCB47359E504F
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\id\messages.json --a---- 319 bytes [04:57 07/12/2013] [04:57 07/12/2013] F4138589791C819BAB51E2220054F0D8
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\it\messages.json --a---- 324 bytes [04:57 07/12/2013] [04:57 07/12/2013] 8335FC8A0EE6EC328643112225B24F59
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\ja\messages.json --a---- 388 bytes [04:57 07/12/2013] [04:57 07/12/2013] D64FE2E54C18FEF3C4AE4F496D597C80
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\ko\messages.json --a---- 380 bytes [04:57 07/12/2013] [04:57 07/12/2013] 91AF6E77D77340299CF1365318B38C54
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\lt\messages.json --a---- 359 bytes [04:57 07/12/2013] [04:57 07/12/2013] E972CD2B7ECC6BF5517ED86C7C2AFC69
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\lv\messages.json --a---- 360 bytes [04:57 07/12/2013] [04:57 07/12/2013] F538F2FFBAD98CB2A6AA787E027E291A
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\nl\messages.json --a---- 323 bytes [04:57 07/12/2013] [04:57 07/12/2013] D65AAB4B2094E6FB3F1C2FAA8334F66D
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\no\messages.json --a---- 300 bytes [04:57 07/12/2013] [04:57 07/12/2013] 99D7A243AE11E1B679A3D607E2140527
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\pl\messages.json --a---- 336 bytes [04:57 07/12/2013] [04:57 07/12/2013] 7573DD5425BFC2593D4ED5DD069973DA
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\pt_BR\messages.json --a---- 332 bytes [04:57 07/12/2013] [04:57 07/12/2013] AB68927E9BA10051B033EDD0EA6B0A7A
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\pt_PT\messages.json --a---- 331 bytes [04:57 07/12/2013] [04:57 07/12/2013] BE47658D85F9DF358E37B571F1E4E12D
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\ro\messages.json --a---- 332 bytes [04:57 07/12/2013] [04:57 07/12/2013] 0887E086A4818DD9D60AD7D79A0F20AA
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\ru\messages.json --a---- 471 bytes [04:57 07/12/2013] [04:57 07/12/2013] 810C345A170AE57B1C9A47125C4C4F20
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\sk\messages.json --a---- 338 bytes [04:57 07/12/2013] [04:57 07/12/2013] 68FF16376911602EB802E07880103993
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\sl\messages.json --a---- 329 bytes [04:57 07/12/2013] [04:57 07/12/2013] 09102953CBBA8076B4CD3B732CB92E7A
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\sr\messages.json --a---- 483 bytes [04:57 07/12/2013] [04:57 07/12/2013] F2C134E61DECFF6824A6F7F9E7EEBC69
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\sv\messages.json --a---- 333 bytes [04:57 07/12/2013] [04:57 07/12/2013] CD7F1A303DEC0FAB10664A19CB08BF32
 


#5 jrbe

jrbe
  • Topic Starter

  • Members
  • 37 posts
  • OFFLINE
  •  
  • Local time:01:41 AM

Posted 03 January 2014 - 12:18 AM

C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\th\messages.json --a---- 472 bytes [04:57 07/12/2013] [04:57 07/12/2013] A4F6D91AED6527F946FECB61B5F2973C
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\tr\messages.json --a---- 330 bytes [04:57 07/12/2013] [04:57 07/12/2013] D98B3CD27155F0B4F48A29CD1DF11A5D
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\uk\messages.json --a---- 501 bytes [04:57 07/12/2013] [04:57 07/12/2013] 15F61FB62E5B5B75BD7507A7D0FC6276
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\vi\messages.json --a---- 363 bytes [04:57 07/12/2013] [04:57 07/12/2013] DC02046BA3C0982DD168A2AAB103226C
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\zh_CN\messages.json --a---- 346 bytes [04:57 07/12/2013] [04:57 07/12/2013] B9E1488D0F8CB318A9C0AF8CA38A523C
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\zh_TW\messages.json --a---- 346 bytes [04:57 07/12/2013] [04:57 07/12/2013] DA8A359EFFDE7B8F541E56350DDDC884
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\manifest.json --a---- 1275 bytes [23:01 02/01/2014] [23:01 02/01/2014] 67290A8CA80DA93AB24E223F7663D125
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\_locales\bg\messages.json --a---- 1585 bytes [23:01 02/01/2014] [23:01 02/01/2014] D6D5A90AFEF675771F171872FD1CA269
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\_locales\ca\messages.json --a---- 682 bytes [23:01 02/01/2014] [23:01 02/01/2014] 17EF6107BC2199E751E087D61389DE11
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\_locales\cs\messages.json --a---- 743 bytes [23:01 02/01/2014] [23:01 02/01/2014] 98014DC7B2A58F77401178F7C0FB9DC5
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\_locales\da\messages.json --a---- 665 bytes [23:01 02/01/2014] [23:01 02/01/2014] F4BF92FE82D9127E978007783A5FA040
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\_locales\de\messages.json --a---- 714 bytes [23:01 02/01/2014] [23:01 02/01/2014] 2C996A319EC62446845193BD3AD03C97
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\_locales\el\messages.json --a---- 1764 bytes [23:01 02/01/2014] [23:01 02/01/2014] 3F8CEEA09F0507790A694B0E420391A9
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\_locales\en\messages.json --a---- 611 bytes [23:01 02/01/2014] [23:01 02/01/2014] DD60445CC844AD80A78948B598440530
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\_locales\en_GB\messages.json --a---- 611 bytes [23:01 02/01/2014] [23:01 02/01/2014] DD60445CC844AD80A78948B598440530
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\_locales\es\messages.json --a---- 713 bytes [23:01 02/01/2014] [23:01 02/01/2014] 6ED009E374D4D35AE9DF7E299FC03048
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\_locales\es_419\messages.json --a---- 671 bytes [23:01 02/01/2014] [23:01 02/01/2014] 93951D4685C8592B05C5040D598A0D33
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\_locales\et\messages.json --a---- 615 bytes [23:01 02/01/2014] [23:01 02/01/2014] 0E33CC0210CA47AEC62FD3F82F7129FC
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\_locales\fi\messages.json --a---- 738 bytes [23:01 02/01/2014] [23:01 02/01/2014] 5D7976A3AA1BFE6E2D2E523302018733
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\_locales\fil\messages.json --a---- 672 bytes [23:01 02/01/2014] [23:01 02/01/2014] 32A6DF236D0205DF1A70395B6447A2A1
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\_locales\fr\messages.json --a---- 721 bytes [23:01 02/01/2014] [23:01 02/01/2014] 9FBCDD1D89B6921020A3D2E07B466458
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\_locales\hi\messages.json --a---- 1406 bytes [23:01 02/01/2014] [23:01 02/01/2014] EEA3586B36AEA9C9353206B7DA8728B8
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\_locales\hr\messages.json --a---- 662 bytes [23:01 02/01/2014] [23:01 02/01/2014] C30D34C5219053135D5561E9CADC0DAD
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\_locales\hu\messages.json --a---- 766 bytes [23:01 02/01/2014] [23:01 02/01/2014] E22D63C3EB7B58823ECAD9F2FE617AA9
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\_locales\id\messages.json --a---- 612 bytes [23:01 02/01/2014] [23:01 02/01/2014] 090200C5ADE16A9442015C85D3D2214C
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\_locales\it\messages.json --a---- 626 bytes [23:01 02/01/2014] [23:01 02/01/2014] 17596652837A996A77E8AECE6CBC4C49
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\_locales\ja\messages.json --a---- 1181 bytes [23:01 02/01/2014] [23:01 02/01/2014] 8A074C1BC8071A7EF482FBF2CED72B57
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\_locales\ko\messages.json --a---- 892 bytes [23:01 02/01/2014] [23:01 02/01/2014] C05134900F327FF2ABDED5E3757FD2A8
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\_locales\lt\messages.json --a---- 706 bytes [23:01 02/01/2014] [23:01 02/01/2014] 6BD67FF49FFC43B3E3866007932FC290
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\_locales\lv\messages.json --a---- 735 bytes [23:01 02/01/2014] [23:01 02/01/2014] 05AFAD5209A4BAA7098F9C3137E75670
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\_locales\nb\messages.json --a---- 665 bytes [23:01 02/01/2014] [23:01 02/01/2014] 496B4BBF2F04D7983431F197494CC62C
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\_locales\nl\messages.json --a---- 630 bytes [23:01 02/01/2014] [23:01 02/01/2014] 085165F3E35E68B9BB4E0BE3A751EA81
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\_locales\pl\messages.json --a---- 701 bytes [23:01 02/01/2014] [23:01 02/01/2014] 28049243B48F01971200569E9C080761
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\_locales\pt_BR\messages.json --a---- 701 bytes [23:01 02/01/2014] [23:01 02/01/2014] 989BAB41B3005D791C8A6819711B6721
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\_locales\pt_PT\messages.json --a---- 702 bytes [23:01 02/01/2014] [23:01 02/01/2014] 313EF767AAC4D994115CF3F1EF8BBCF8
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\_locales\ro\messages.json --a---- 700 bytes [23:01 02/01/2014] [23:01 02/01/2014] 64EF90609603E6AF99B24CDD09AA033C
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\_locales\ru\messages.json --a---- 1296 bytes [23:01 02/01/2014] [23:01 02/01/2014] 16E604F56F69758DCD4112A4FF979466
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\_locales\sk\messages.json --a---- 739 bytes [23:01 02/01/2014] [23:01 02/01/2014] 9358B04B809BC0AFFBBB6B6F6034C4D0
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\_locales\sl\messages.json --a---- 647 bytes [23:01 02/01/2014] [23:01 02/01/2014] 427B9694858E0AC97722AB75944ADE04
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\_locales\sr\messages.json --a---- 1507 bytes [23:01 02/01/2014] [23:01 02/01/2014] 2BBDEE2907AAE1FE24173DF074D06E21
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\_locales\sv\messages.json --a---- 687 bytes [23:01 02/01/2014] [23:01 02/01/2014] A3B9AB6AF2BCAF3571B0DC322CE06CB1
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\_locales\th\messages.json --a---- 1626 bytes [23:01 02/01/2014] [23:01 02/01/2014] B04D24B1FD5F1E52272C59F81B73C2C1
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\_locales\tr\messages.json --a---- 728 bytes [23:01 02/01/2014] [23:01 02/01/2014] A5FAC95A73BD8D0B00FC97CF33411573
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\_locales\uk\messages.json --a---- 1403 bytes [23:01 02/01/2014] [23:01 02/01/2014] 5E5C71DF1C5B3B5C399C415FF92D2BAB
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\_locales\vi\messages.json --a---- 798 bytes [23:01 02/01/2014] [23:01 02/01/2014] 581D8D6C04D4EE75844BA3698924A942
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\_locales\zh_CN\messages.json --a---- 760 bytes [23:01 02/01/2014] [23:01 02/01/2014] 93C5700BE74B2FC76F635799AE497555
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\_locales\zh_TW\messages.json --a---- 814 bytes [23:01 02/01/2014] [23:01 02/01/2014] 12419A095C5C152C38E32136EF99FA3B
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\manifest.json --a---- 755 bytes [04:57 07/12/2013] [04:57 07/12/2013] BF9ED89CE27914C99BB5629740A7A7EB
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\ar\messages.json --a---- 556 bytes [04:57 07/12/2013] [04:57 07/12/2013] DCE30E06CC4298B140576951ACC86816
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\bg\messages.json --a---- 492 bytes [04:57 07/12/2013] [04:57 07/12/2013] 22E44EF5318119517DB82703919AB133
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\ca\messages.json --a---- 262 bytes [04:57 07/12/2013] [04:57 07/12/2013] B6B539A6E6AFD8E0D8921511089A94B1
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\cs\messages.json --a---- 289 bytes [04:57 07/12/2013] [04:57 07/12/2013] F6387216CFB18BE992F38D94D9CC37A5
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\da\messages.json --a---- 240 bytes [04:57 07/12/2013] [04:57 07/12/2013] 86A141F6044B43EC760507456025B8D5
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\de\messages.json --a---- 239 bytes [04:57 07/12/2013] [04:57 07/12/2013] 360EAC8E258533B427AA6E2A7BB5B92F
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\el\messages.json --a---- 624 bytes [04:57 07/12/2013] [04:57 07/12/2013] 0B5B674BEEBAC4583DFAACB5EED296B7
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\en\messages.json --a---- 215 bytes [04:57 07/12/2013] [04:57 07/12/2013] C955ABB367158B1A6015F91001E65458
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\es\messages.json --a---- 281 bytes [04:57 07/12/2013] [04:57 07/12/2013] E37502E0EC3AE45074F2E34EFF8B0EC7
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\fi\messages.json --a---- 284 bytes [04:57 07/12/2013] [04:57 07/12/2013] AE7DD43428DB403DD1CDFE29636A8D12
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\fil\messages.json --a---- 234 bytes [04:57 07/12/2013] [04:57 07/12/2013] E85B25BF1FDE30AAB85E690FC47CB1E5
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\fr\messages.json --a---- 272 bytes [04:57 07/12/2013] [04:57 07/12/2013] 9B9AB2BA7B111772B12427AFF5313D0F
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\hi\messages.json --a---- 391 bytes [04:57 07/12/2013] [04:57 07/12/2013] 9C0360E4CE0FB7FBE1202105E365D675
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\hr\messages.json --a---- 246 bytes [04:57 07/12/2013] [04:57 07/12/2013] 51185689C14390FB2B5A3D7C72C01A2D
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\hu\messages.json --a---- 234 bytes [04:57 07/12/2013] [04:57 07/12/2013] E8235725AA95D302C48404B3CA239435
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\id\messages.json --a---- 242 bytes [04:57 07/12/2013] [04:57 07/12/2013] CE79B1EE24E01D3495DB6F00D2361D34
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\it\messages.json --a---- 260 bytes [04:57 07/12/2013] [04:57 07/12/2013] CBFEBA52D95C68B47C511095930346F2
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\ja\messages.json --a---- 364 bytes [04:57 07/12/2013] [04:57 07/12/2013] 6804B5C6A2336DB0C33AC5964AA80484
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\ko\messages.json --a---- 328 bytes [04:57 07/12/2013] [04:57 07/12/2013] C870F9477DAD594BA5EC96E1591A3051
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\lt\messages.json --a---- 269 bytes [04:57 07/12/2013] [04:57 07/12/2013] D093839DC1278D56E5E7C876CC9A04C3
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\lv\messages.json --a---- 262 bytes [04:57 07/12/2013] [04:57 07/12/2013] 93AE003C19E9D1200C0E12FD242F0E86
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\nl\messages.json --a---- 232 bytes [04:57 07/12/2013] [04:57 07/12/2013] 44F95118655A479A306F74C68AEAB159
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\no\messages.json --a---- 210 bytes [04:57 07/12/2013] [04:57 07/12/2013] 464EDFD55F1E419B8DC73CF8A8AB5B0C
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\pl\messages.json --a---- 292 bytes [04:57 07/12/2013] [04:57 07/12/2013] F2FD6542E6983BAED5F92635B2702BA0
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\pt_BR\messages.json --a---- 230 bytes [04:57 07/12/2013] [04:57 07/12/2013] E8D892B0D8FD1D0010E5665338C8B9A1
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\pt_PT\messages.json --a---- 231 bytes [04:57 07/12/2013] [04:57 07/12/2013] CE969195A5E96D487CE70CEFC0C6FBF4
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\ro\messages.json --a---- 281 bytes [04:57 07/12/2013] [04:57 07/12/2013] 9445A1E9258ABC199D615AA8110766B0
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\ru\messages.json --a---- 482 bytes [04:57 07/12/2013] [04:57 07/12/2013] 9D0AB8627ADD40DD259FAEDFD3F2F60D
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\se\messages.json --a---- 210 bytes [04:57 07/12/2013] [04:57 07/12/2013] CB5F465A3A4043F68009154D1FA90B4A
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\sk\messages.json --a---- 238 bytes [04:57 07/12/2013] [04:57 07/12/2013] 5E811FA0B8435373ADCC2B64C3CD77C1
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\sl\messages.json --a---- 249 bytes [04:57 07/12/2013] [04:57 07/12/2013] 2D88CBCDDBD0355B8793F5C21AAE3644
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\sr\messages.json --a---- 511 bytes [04:57 07/12/2013] [04:57 07/12/2013] A0DAB5AC39F3DA4BC9A40068ADDF3B40
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\th\messages.json --a---- 471 bytes [04:57 07/12/2013] [04:57 07/12/2013] A33B8D4B444FC89B2B9E6F1053F837E2
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\tr\messages.json --a---- 250 bytes [04:57 07/12/2013] [04:57 07/12/2013] 7A293CD3C16E2D0CE037CE9E3E02D46D
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\uk\messages.json --a---- 536 bytes [04:57 07/12/2013] [04:57 07/12/2013] 2C779312F8130175AF7A9FA47E15066A
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\vi\messages.json --a---- 257 bytes [04:57 07/12/2013] [04:57 07/12/2013] 6AB1D663983B02A193EB7F55AD19AA0E
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\zh_CN\messages.json --a---- 339 bytes [04:57 07/12/2013] [04:57 07/12/2013] AA4687E60787AC70532DE7379345CC2F
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\_locales\zh_TW\messages.json --a---- 321 bytes [04:57 07/12/2013] [04:57 07/12/2013] 7DAD17EFC6F23683526DB4F95C96AF8A
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\pnacl\0.1.0.12181\manifest.json --a---- 572 bytes [05:03 07/12/2013] [05:03 07/12/2013] 43ECC7BD8A305BE1AD449FA331629FBA
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\WidevineCDM\1.4.1.376\manifest.json --a---- 848 bytes [23:01 02/01/2014] [23:01 02/01/2014] DFF7E6F02E75E3304192806AAA9AEF4B
C:\Users\Administrator\AppData\Local\Microsoft\BingBar\Apps\Finance_8532f9cb39e34e3ca1e1474c73ed45d2\VersionIndependent\notifications.json --a---- 6 bytes [02:23 08/06/2011] [02:23 08/06/2011] 94249F1578EE2342A3214088498D7385
C:\Users\Administrator\AppData\Local\Microsoft\BingBar\Apps\Finance_8532f9cb39e34e3ca1e1474c73ed45d2\VersionIndependent\notificationServiceCountFile.json --a---- 12 bytes [02:23 08/06/2011] [02:23 08/06/2011] 8B6E390039A6082F0E7C40FFEAE872E3
C:\Users\Administrator\AppData\Local\Microsoft\BingBar\Apps\Finance_8532f9cb39e34e3ca1e1474c73ed45d2\VersionIndependent\watchlistData.json --a---- 6 bytes [02:23 08/06/2011] [02:23 08/06/2011] FD56A4F949FDB52CEB9035FD52605F4A
C:\Users\Administrator\AppData\Local\Microsoft\BingBar\Apps\Games_6e70de9fd0324919b424492c3e6a043d\7.0.609\Settings\games.json --a---- 1854 bytes [02:18 08/06/2011] [02:18 08/06/2011] F9D33DD688E41142B0900E2F75CC69AA
C:\Users\Administrator\AppData\Local\Microsoft\BingBar\Apps\Mail_15642ee020d2449d86382022aa6f2548\7.0.609\providers\gmail.json --a---- 1285 bytes [02:18 08/06/2011] [14:46 25/02/2011] 4C712EC1331EB1F0A31AEBA5F0FC52B9
C:\Users\Administrator\AppData\Local\Microsoft\BingBar\Apps\Mail_15642ee020d2449d86382022aa6f2548\7.0.609\providers\hotmail.json --a---- 1255 bytes [02:18 08/06/2011] [14:46 25/02/2011] F6C69BF6EE9CBA0164E0B0D1B9064855
C:\Users\Administrator\AppData\Local\Microsoft\BingBar\Apps\Mail_15642ee020d2449d86382022aa6f2548\7.0.609\providers\yahoomail.json --a---- 1309 bytes [02:18 08/06/2011] [14:46 25/02/2011] BB04532813E669118F685A277C650A68
C:\Users\Administrator\AppData\Local\Microsoft\BingBar\Apps\Maps_e4b69397ea59436c9d8611b45fdb79f9\7.0.609\js\whitelist.json --a---- 21025 bytes [02:18 08/06/2011] [14:46 25/02/2011] 1E637EAB6A58D5A9294BDFAF3FF2C2F7
C:\Users\Administrator\AppData\Local\Microsoft\BingBar\Apps\Maps_e4b69397ea59436c9d8611b45fdb79f9\VersionIndependent\mapdata.json --a---- 246 bytes [02:18 08/06/2011] [02:18 08/06/2011] F0605BD4FCE8961E60252CF502B7E8C8
C:\Users\Administrator\AppData\Local\Microsoft\BingBar\Apps\News_8c172f78520647fbab760cbf38f51e67\7.0.609\newsTopStories.json --a---- 50974 bytes [02:18 08/06/2011] [02:18 08/06/2011] 01D2D48A0407422CA29D98B1C6F9EA8F
C:\Users\Administrator\AppData\Local\Microsoft\BingBar\Apps\Search_6f21d9007fa34bc78d94309126de58f5\7.0.609\js\whitelist.json --a---- 23863 bytes [02:18 08/06/2011] [14:46 25/02/2011] 00F91BB9BF5194DA4B919BD22804EF3C
C:\Users\Administrator\AppData\Local\Microsoft\BingBar\Apps\Search_6f21d9007fa34bc78d94309126de58f5\7.0.609\loc\en-us\searchHistorySettings.json --a---- 74 bytes [02:18 08/06/2011] [02:18 08/06/2011] 051BA94BDEFBBF74E4D39F3D77A25D4B
C:\Users\Administrator\AppData\Local\Microsoft\BingBar\Apps\Search_6f21d9007fa34bc78d94309126de58f5\VersionIndependent\DeepLinkBlockList.json --a---- 6 bytes [02:18 08/06/2011] [02:18 08/06/2011] FD56A4F949FDB52CEB9035FD52605F4A
C:\Users\Administrator\AppData\Local\Microsoft\BingBar\Apps\Toast Application_d97e92f94d53425fbcf0f2a04b8e5426\7.0.609\js\transitionTime.json --a---- 104 bytes [02:18 08/06/2011] [14:46 25/02/2011] 2ED32BBBBBE305DEA990411535F2D3F0
C:\Users\Administrator\AppData\Local\Microsoft\BingBar\Apps\Weather_63630244a02f4e4cb6cb9b09b2f886f3\VersionIndependent\weather.json --a---- 7078 bytes [02:18 08/06/2011] [02:18 08/06/2011] 9DC19C9AAFC8BCA543B245B69DEA66D4
C:\Users\Administrator\AppData\Local\Microsoft\BingBar\System\appsightings.json --a---- 1738 bytes [02:18 08/06/2011] [02:18 08/06/2011] 828FADF68B7E7DFA10D71CAE51B5BC14
C:\Users\Administrator\AppData\Local\Microsoft\BingBar\System\local-settings.json --a---- 694 bytes [02:17 08/06/2011] [02:19 08/06/2011] 5C494AAC993ECFE7F9D08CD6224A46B7
C:\Users\Administrator\AppData\Local\Microsoft\BingBar\System\service-settings.json --a---- 626 bytes [02:18 08/06/2011] [02:18 08/06/2011] 57A1191D2FF7804C3C112CE972E3EB0B
C:\Users\Administrator\AppData\Local\Microsoft\BingBar\System\Flights\flight-manager.json --a---- 318 bytes [02:18 08/06/2011] [02:18 08/06/2011] DBB2283ADD17363BE8C8EB735F91A126
C:\Users\Administrator\AppData\Local\Microsoft\BingBar\System\Flights\prod-en-us_prod_0\flight.json --a---- 484 bytes [02:18 08/06/2011] [02:18 08/06/2011] C232B26954C3B22686F103AA84CE0A75
C:\Users\Administrator\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2OGM9CO6\1925607[1].json --a---- 1567 bytes [16:51 08/12/2013] [16:51 08/12/2013] 0335B0663BC312F5844215171750A06E
C:\Users\Administrator\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2OGM9CO6\all[1].json --a---- 4777 bytes [16:56 08/12/2013] [16:56 08/12/2013] E85CFC823E3708B1FC8EA44907763D22
C:\Users\Administrator\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3NH56FSJ\all[1].json --a---- 4777 bytes [03:57 03/01/2014] [03:57 03/01/2014] E85CFC823E3708B1FC8EA44907763D22
C:\Users\Administrator\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YU2MSH37\all[1].json --a---- 4576 bytes [04:00 03/01/2014] [04:00 03/01/2014] 5AD71A861976148DAF03960DE336A538
C:\Users\Administrator\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YX22R9SI\asconf[1].json --a---- 2909 bytes [04:02 03/01/2014] [04:02 03/01/2014] BC71C359F4658AE05AAE8F9F9F04C0E7
C:\Users\Administrator\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZHGWW6WQ\asconf[1].json --a---- 2910 bytes [03:57 03/01/2014] [03:57 03/01/2014] 84028212882B122AB2865BBC11561E7A
C:\Users\Administrator\AppData\Local\Temp\5156_9192\manifest.json --a---- 34 bytes [04:00 03/01/2014] [04:00 03/01/2014] 994F985966C0B96B98A67143D49F8547
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\manifest.json --a---- 724 bytes [13:00 08/06/2013] [13:00 08/06/2013] 98E109477B145855CA65EEC8988EEFE9
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\ar\messages.json --a---- 374 bytes [13:00 08/06/2013] [13:00 08/06/2013] 2586421C45920A227CAB26657B31ECDB
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\bg\messages.json --a---- 428 bytes [13:00 08/06/2013] [13:00 08/06/2013] 9ED363DF524943138996995FD4DE2D65
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\ca\messages.json --a---- 207 bytes [13:00 08/06/2013] [13:00 08/06/2013] CDA92E97978F8AAC073FA4CA3D509EE2
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\cs\messages.json --a---- 230 bytes [13:00 08/06/2013] [13:00 08/06/2013] 0F0B5623B51DF32B47BA393B51ED99FF
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\da\messages.json --a---- 216 bytes [13:00 08/06/2013] [13:00 08/06/2013] 23FDFD2ECCBE626E47CD97D434632069
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\de\messages.json --a---- 217 bytes [13:00 08/06/2013] [13:00 08/06/2013] 1A71997D5A86A7FB57EB1850EA7D71E6
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\el\messages.json --a---- 416 bytes [13:00 08/06/2013] [13:00 08/06/2013] 0C3D86171D9B3098B1C9644ACFA019F3
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\en_GB\messages.json --a---- 208 bytes [13:00 08/06/2013] [13:00 08/06/2013] D85A412DDFA11EA5BCA068FF4F66786C
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\en_US\messages.json --a---- 209 bytes [13:00 08/06/2013] [13:00 08/06/2013] D7DCC6E7CA3F4BE8D5F48EF9E9D58CF4
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\es\messages.json --a---- 206 bytes [13:00 08/06/2013] [13:00 08/06/2013] 29E15C492DB45CEBBDA129C74E70D0E2
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\es_419\messages.json --a---- 206 bytes [13:00 08/06/2013] [13:00 08/06/2013] 29E15C492DB45CEBBDA129C74E70D0E2
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\et\messages.json --a---- 216 bytes [13:00 08/06/2013] [13:00 08/06/2013] 1B13A883F1B965F741B068345DC34FD9
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\fi\messages.json --a---- 216 bytes [13:00 08/06/2013] [13:00 08/06/2013] 2B54BFA6089001103CA63CE9BDCC6983
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\fil\messages.json --a---- 219 bytes [13:00 08/06/2013] [13:00 08/06/2013] EDA0FCFFDDF20A991D79BDD9FA5E858E
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\fr\messages.json --a---- 224 bytes [13:00 08/06/2013] [13:00 08/06/2013] 75A734320FB9016AD7DECB317DF8F9D2
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\he\messages.json --a---- 293 bytes [13:00 08/06/2013] [13:00 08/06/2013] 1EFC1A18F531C85E3D1DC298B0098955
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\hi\messages.json --a---- 375 bytes [13:00 08/06/2013] [13:00 08/06/2013] 33926A84B9B81FE0A3A753A07568A211
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\hu\messages.json --a---- 251 bytes [13:00 08/06/2013] [13:00 08/06/2013] 548C403B0CA66EFCC85DB674080440BB
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\id\messages.json --a---- 209 bytes [13:00 08/06/2013] [13:00 08/06/2013] 9213E5F82888D5E3EEAF1BD7BC7A67AC
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\it\messages.json --a---- 213 bytes [13:00 08/06/2013] [13:00 08/06/2013] 31905588AE3EEB77E9E96FEB5BACA3B3
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\ja\messages.json --a---- 263 bytes [13:00 08/06/2013] [13:00 08/06/2013] 675FA4BA824CBC0439AB8D805058C99E
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\ko\messages.json --a---- 254 bytes [13:00 08/06/2013] [13:00 08/06/2013] 073E2411ABA2E7C2C6A11AE05114DEF0
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\lt\messages.json --a---- 234 bytes [13:00 08/06/2013] [13:00 08/06/2013] 8538DBD057F6C4B4876607B730B1971C
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\lv\messages.json --a---- 232 bytes [13:00 08/06/2013] [13:00 08/06/2013] A6E4EF51B987005EEAD6A332974F6BF2
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\ms\messages.json --a---- 207 bytes [13:00 08/06/2013] [13:00 08/06/2013] 2766D5B9A8E40FE6691BE3F37348AFD6
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\nl\messages.json --a---- 217 bytes [13:00 08/06/2013] [13:00 08/06/2013] 701D7ECF13542F59C58B21FAEF88C1AE
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\no\messages.json --a---- 195 bytes [13:00 08/06/2013] [13:00 08/06/2013] C13B7D73C7A543546CE63367C0D700CA
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\pl\messages.json --a---- 217 bytes [13:00 08/06/2013] [13:00 08/06/2013] A0A86FA83DAD0F8F22A439C8E6DCE763
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\pt_BR\messages.json --a---- 206 bytes [13:00 08/06/2013] [13:00 08/06/2013] 9F3925EF0F907B07ECBC8A3727F19721
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\pt_PT\messages.json --a---- 208 bytes [13:00 08/06/2013] [13:00 08/06/2013] 3A52EEDFCA079439677BC42E800A218B
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\ro\messages.json --a---- 225 bytes [13:00 08/06/2013] [13:00 08/06/2013] C707363B3BAAB39130294384504C2D2D
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\ru\messages.json --a---- 434 bytes [13:00 08/06/2013] [13:00 08/06/2013] 1D3F6DB1F33813E2428A8C78AF0B9893
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\sk\messages.json --a---- 225 bytes [13:00 08/06/2013] [13:00 08/06/2013] 5855CC4AA15DEFB435C69B3AC3B36C39
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\sl\messages.json --a---- 218 bytes [13:00 08/06/2013] [13:00 08/06/2013] 75EA0350804326B40BA2BC5739C4A171
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\sr\messages.json --a---- 380 bytes [13:00 08/06/2013] [13:00 08/06/2013] 37A2926DEAF11918D39139018B9A33A1
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\sv\messages.json --a---- 214 bytes [13:00 08/06/2013] [13:00 08/06/2013] 3C4D8B7ACF404F7AE5B647BE24E0A5F1
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\th\messages.json --a---- 329 bytes [13:00 08/06/2013] [13:00 08/06/2013] 65DD9D347A6F61699C0D5AE99358716A
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\tr\messages.json --a---- 243 bytes [13:00 08/06/2013] [13:00 08/06/2013] 4793CF2F6C1257E152A12B8FD1C76485
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\uk\messages.json --a---- 428 bytes [13:00 08/06/2013] [13:00 08/06/2013] 3DE4E016914A029A9254938BFB28A2A8
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\vi\messages.json --a---- 252 bytes [13:00 08/06/2013] [13:00 08/06/2013] 461DABD15F63F56C2A8C25C72092276B
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\zh_CN\messages.json --a---- 233 bytes [13:00 08/06/2013] [13:00 08/06/2013] 332DB4EC98D2BEC0383BCFDF67BD1A50
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\zh_TW\messages.json --a---- 233 bytes [13:00 08/06/2013] [13:00 08/06/2013] B554765872643769E1108DD312D076C1
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\manifest.json --a---- 996 bytes [13:00 08/06/2013] [13:00 08/06/2013] E6DC57A9ABA31600533C6A7784919FFB
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\ar\messages.json --a---- 422 bytes [13:00 08/06/2013] [13:00 08/06/2013] D074CD99068529EB5A22DF31E9D5913F
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\bg\messages.json --a---- 559 bytes [13:00 08/06/2013] [13:00 08/06/2013] E3F6B91EC2C0E8A2B966EA158A08B1F0
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\ca\messages.json --a---- 265 bytes [13:00 08/06/2013] [13:00 08/06/2013] 77487466CD1B18FEAD66FC69AF391221
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\cs\messages.json --a---- 283 bytes [13:00 08/06/2013] [13:00 08/06/2013] 134878E356B8D07D30E64A18F00A6565
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\da\messages.json --a---- 251 bytes [13:00 08/06/2013] [13:00 08/06/2013] 53F3ABC7F5F6E2F9C4603D27EB979E88
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\de\messages.json --a---- 256 bytes [13:00 08/06/2013] [13:00 08/06/2013] F6B48063D035D1025AD4532FFA2430C8
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\el\messages.json --a---- 565 bytes [13:00 08/06/2013] [13:00 08/06/2013] 3AFC6760735284C2CB954EAF80A2FC3F
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\en_GB\messages.json --a---- 249 bytes [13:00 08/06/2013] [13:00 08/06/2013] 5C5C111D80097AEB22E5223787734FC2
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\en_US\messages.json --a---- 249 bytes [13:00 08/06/2013] [13:00 08/06/2013] 5C5C111D80097AEB22E5223787734FC2
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\es\messages.json --a---- 259 bytes [13:00 08/06/2013] [13:00 08/06/2013] DF4BD088D5B32B2C31BE1BFE404558A6
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\es_419\messages.json --a---- 259 bytes [13:00 08/06/2013] [13:00 08/06/2013] DF4BD088D5B32B2C31BE1BFE404558A6
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\et\messages.json --a---- 259 bytes [13:00 08/06/2013] [13:00 08/06/2013] A2130F26BA56617670D7721D77E59BE1
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\eu\messages.json --a---- 243 bytes [13:00 08/06/2013] [13:00 08/06/2013] B0AF125B9AD99D6EF007C1C5E4788317
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\fi\messages.json --a---- 277 bytes [13:00 08/06/2013] [13:00 08/06/2013] 6EF1BDCCF457AEDCE9BAC9C1B3EE864F
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\fil\messages.json --a---- 260 bytes [13:00 08/06/2013] [13:00 08/06/2013] BDEF574C1E45B062653C38AB710A175E
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\fr\messages.json --a---- 260 bytes [13:00 08/06/2013] [13:00 08/06/2013] 64DD2E108845390175E01CB0BF7EE577
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\he\messages.json --a---- 438 bytes [13:00 08/06/2013] [13:00 08/06/2013] 39000F7C9F7F63BF921F0C58DF2F672E
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\hi\messages.json --a---- 492 bytes [13:00 08/06/2013] [13:00 08/06/2013] 307274E619FEF5ACE59F05157348AD16
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\hr\messages.json --a---- 263 bytes [13:00 08/06/2013] [13:00 08/06/2013] EFDE2EDD0907C7906B19D2539EF693F5
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\hu\messages.json --a---- 276 bytes [13:00 08/06/2013] [13:00 08/06/2013] 547EDF90ADFBA09304FEED9EB7DBB985
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\id\messages.json --a---- 261 bytes [13:00 08/06/2013] [13:00 08/06/2013] FE22191E30FC270278FDED58DD4C4138
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\it\messages.json --a---- 258 bytes [13:00 08/06/2013] [13:00 08/06/2013] E954A0D6AE514F4445163F9F17349270
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\ja\messages.json --a---- 395 bytes [13:00 08/06/2013] [13:00 08/06/2013] 8E61873E7C604AB6AB78941DE872D274
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\ko\messages.json --a---- 365 bytes [13:00 08/06/2013] [13:00 08/06/2013] DF1C991A376FEAF3C8BAEF1AA344E5E9
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\lt\messages.json --a---- 309 bytes [13:00 08/06/2013] [13:00 08/06/2013] 50AF5D4387A123BDE4ED9B9566103789
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\lv\messages.json --a---- 262 bytes [13:00 08/06/2013] [13:00 08/06/2013] EAC98BBCFDE4B864383589885D2C82A4
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\ms\messages.json --a---- 254 bytes [13:00 08/06/2013] [13:00 08/06/2013] 9F94BBD70C447A94F02625B750E13DAA
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\nl\messages.json --a---- 250 bytes [13:00 08/06/2013] [13:00 08/06/2013] D7F6C0118AF6C27F43263CD1D0244707
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\no\messages.json --a---- 218 bytes [13:00 08/06/2013] [13:00 08/06/2013] D6A1BF7219C30249115A6A366EC01CE2
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\pl\messages.json --a---- 261 bytes [13:00 08/06/2013] [13:00 08/06/2013] 30F8807C8E66E23CC07E342330081CF8
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\pt_BR\messages.json --a---- 250 bytes [13:00 08/06/2013] [13:00 08/06/2013] F6F4E1CE5022E45EF6E72138171627C9
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\pt_PT\messages.json --a---- 272 bytes [13:00 08/06/2013] [13:00 08/06/2013] 4A40A5DD332681AE6139DFFA6C49179F
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\ro\messages.json --a---- 309 bytes [13:00 08/06/2013] [13:00 08/06/2013] C1B3128821B1FE7978221F444DCA4C0E
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\ru\messages.json --a---- 614 bytes [13:00 08/06/2013] [13:00 08/06/2013] 3CB108582E945FCD9DDDC254A20E01A7
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\sk\messages.json --a---- 293 bytes [13:00 08/06/2013] [13:00 08/06/2013] 643C60E2823E409912D41DDBF2E4B68C
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\sl\messages.json --a---- 268 bytes [13:00 08/06/2013] [13:00 08/06/2013] CC32B1A596CE9CEFBE7C2580860234AE
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\sr\messages.json --a---- 467 bytes [13:00 08/06/2013] [13:00 08/06/2013] 01A348D263AB6A699F0E07380441E9DD
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\sv\messages.json --a---- 261 bytes [13:00 08/06/2013] [13:00 08/06/2013] 344998E12A700D26D899FC3EC62056EB
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\th\messages.json --a---- 521 bytes [13:00 08/06/2013] [13:00 08/06/2013] 801098F07BD5ADD0BD6AE21B64CB61F3
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\tr\messages.json --a---- 302 bytes [13:00 08/06/2013] [13:00 08/06/2013] 290646D43E911C5F19913ACF81B9F3C4
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\uk\messages.json --a---- 657 bytes [13:00 08/06/2013] [13:00 08/06/2013] BE0CCE5AE07284F3153F95D46833F68A
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\vi\messages.json --a---- 321 bytes [13:00 08/06/2013] [13:00 08/06/2013] 82767FD874A55A718AC6BCF38C4CF2AF
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\zh_CN\messages.json --a---- 360 bytes [13:00 08/06/2013] [13:00 08/06/2013] BC87AB08DD1A3B9E0D9C4F39A832A4AE
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\zh_TW\messages.json --a---- 348 bytes [13:00 08/06/2013] [13:00 08/06/2013] 540A14C439D6562AC45AE4B39A10660D
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\manifest.json --a---- 785 bytes [13:00 08/06/2013] [13:00 08/06/2013] 0A4B1F66636E0A0275DF7CAD563E2D9D
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\ar\messages.json --a---- 401 bytes [13:00 08/06/2013] [13:00 08/06/2013] 9E5196B0371D7472ADBC76B0D24387EE
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\bg\messages.json --a---- 427 bytes [13:00 08/06/2013] [13:00 08/06/2013] ECC218F02AD23568A736F6CAABA093C6
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\ca\messages.json --a---- 250 bytes [13:00 08/06/2013] [13:00 08/06/2013] 8D66C382986948F2D9B8C449117CE014
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\cs\messages.json --a---- 255 bytes [13:00 08/06/2013] [13:00 08/06/2013] 3B1388F38C14A550F1B423681854F8E1
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\da\messages.json --a---- 242 bytes [13:00 08/06/2013] [13:00 08/06/2013] 7F47C449A6A9968CDB5E9A681AD41713
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\de\messages.json --a---- 226 bytes [13:00 08/06/2013] [13:00 08/06/2013] 3AEF1AFEA23425011D7080D742BEBB5E
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\el\messages.json --a---- 475 bytes [13:00 08/06/2013] [13:00 08/06/2013] 6AEEEFA17DBF4C3F7F2CEFBFB6B65BC2
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\en\messages.json --a---- 227 bytes [13:00 08/06/2013] [13:00 08/06/2013] 437B589124A420EFAC2A6C3D1AD600FB
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\es\messages.json --a---- 240 bytes [13:00 08/06/2013] [13:00 08/06/2013] 9903D21609669AFBA89B5C89AFB26FA3
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\fi\messages.json --a---- 222 bytes [13:00 08/06/2013] [13:00 08/06/2013] 79DCEF6B8AE3F308D805EA98E3D80EEE
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\fil\messages.json --a---- 236 bytes [13:00 08/06/2013] [13:00 08/06/2013] 818C2BCDCF8A88C468E4A992697B6737
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\fr\messages.json --a---- 249 bytes [13:00 08/06/2013] [13:00 08/06/2013] C83D0A062D1858A55E3CF56D465A0727
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\he\messages.json --a---- 419 bytes [13:00 08/06/2013] [13:00 08/06/2013] 91ED2C3CBDA4285DF1708915695F4174
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\hi\messages.json --a---- 408 bytes [13:00 08/06/2013] [13:00 08/06/2013] C5421E57D53F0308ADF0676435CB3016
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\hr\messages.json --a---- 220 bytes [13:00 08/06/2013] [13:00 08/06/2013] CD7418D8FCED636EF764A1A1EC5A8A86
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\hu\messages.json --a---- 253 bytes [13:00 08/06/2013] [13:00 08/06/2013] ACB6EF597B258D85D241CE909C1F5867
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\id\messages.json --a---- 231 bytes [13:00 08/06/2013] [13:00 08/06/2013] 33283336494046B2E64BC850E55BB060
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\it\messages.json --a---- 224 bytes [13:00 08/06/2013] [13:00 08/06/2013] 42ADA32F4C14681648B4FAAFD8B4E619
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\ja\messages.json --a---- 349 bytes [13:00 08/06/2013] [13:00 08/06/2013] E67113C4030733D07D59B8679E66DB4B

 
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\ko\messages.json --a---- 323 bytes [13:00 08/06/2013] [13:00 08/06/2013] 511F4EADAE84298E42E7DC456515EF56
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\lt\messages.json --a---- 266 bytes [13:00 08/06/2013] [13:00 08/06/2013] 2471CF6A0D8155BE7B63E5CDFF008FC3
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\lv\messages.json --a---- 245 bytes [13:00 08/06/2013] [13:00 08/06/2013] C1BD342887FF3850463C4546CA1684DB
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\nl\messages.json --a---- 225 bytes [13:00 08/06/2013] [13:00 08/06/2013] ED84167F0BF8B96D6B4AF795AC6B806B
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\no\messages.json --a---- 216 bytes [13:00 08/06/2013] [13:00 08/06/2013] CAD5856125850D9CD2DA5DF9F3AC7EFA
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\pl\messages.json --a---- 274 bytes [13:00 08/06/2013] [13:00 08/06/2013] 40F3E6333F0302E905C1E174E4643790
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\pt_BR\messages.json --a---- 237 bytes [13:00 08/06/2013] [13:00 08/06/2013] 8AC3A3C10959488583644A99411A1479
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\pt_PT\messages.json --a---- 236 bytes [13:00 08/06/2013] [13:00 08/06/2013] DEDD450DFCB6E1AC9F5C191D32C018F7
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\ro\messages.json --a---- 248 bytes [13:00 08/06/2013] [13:00 08/06/2013] BBE98181B8A360B545A73C09EAB91A50
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\ru\messages.json --a---- 394 bytes [13:00 08/06/2013] [13:00 08/06/2013] 6F5A01807025537828D77896C964398E
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\sk\messages.json --a---- 241 bytes [13:00 08/06/2013] [13:00 08/06/2013] A78F07BECBE8E09F84D2684C9039DF99
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\sl\messages.json --a---- 245 bytes [13:00 08/06/2013] [13:00 08/06/2013] E6D45D28F76046AF866A157BC4195B1F
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\sr\messages.json --a---- 437 bytes [13:00 08/06/2013] [13:00 08/06/2013] AB4536E48F20A7A3557E04C79A620709
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\sv\messages.json --a---- 238 bytes [13:00 08/06/2013] [13:00 08/06/2013] E934BDC87DDAC060D42B42D8A9B8E3E6
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\th\messages.json --a---- 365 bytes [13:00 08/06/2013] [13:00 08/06/2013] F4D77C8D82628038011222DB5749A5DF
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\tr\messages.json --a---- 255 bytes [13:00 08/06/2013] [13:00 08/06/2013] 96B085BCF90E071B87BBEA0D3EBD4346
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\uk\messages.json --a---- 442 bytes [13:00 08/06/2013] [13:00 08/06/2013] 5A7CA85AA79060442BA99E1D7A6FA941
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\vi\messages.json --a---- 310 bytes [13:00 08/06/2013] [13:00 08/06/2013] F2755B41D8900AE2486BEEF14E15D0BD
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\zh_CN\messages.json --a---- 257 bytes [13:00 08/06/2013] [13:00 08/06/2013] 6F0FF5FA178300F841DBC62BEF2A102F
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\zh_TW\messages.json --a---- 269 bytes [13:00 08/06/2013] [13:00 08/06/2013] 729A096C4C0FE6B933BFD8064F360B33
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\manifest.json --a---- 817 bytes [13:00 08/06/2013] [13:00 08/06/2013] E1F1D1790E772167591041531EC34534
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\ar\messages.json --a---- 423 bytes [13:00 08/06/2013] [13:00 08/06/2013] F2B1596BAC355832C458960D261DD6CA
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\bg\messages.json --a---- 515 bytes [13:00 08/06/2013] [13:00 08/06/2013] 831884C729B4B150786E42970AF79A42
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\ca\messages.json --a---- 330 bytes [13:00 08/06/2013] [13:00 08/06/2013] 7575B3083729953B0814A64A88832765
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\cs\messages.json --a---- 355 bytes [13:00 08/06/2013] [13:00 08/06/2013] BA83A1AA8B2E624E987CF73FEABCD174
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\da\messages.json --a---- 328 bytes [13:00 08/06/2013] [13:00 08/06/2013] C6D26B6639E434FCAB3AD76D0222A4B7
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\de\messages.json --a---- 307 bytes [13:00 08/06/2013] [13:00 08/06/2013] E6899AA5875407D11EA316073C320E19
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\el\messages.json --a---- 569 bytes [13:00 08/06/2013] [13:00 08/06/2013] F18A0538BE7019EA2D0215F5637357D0
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\en\messages.json --a---- 314 bytes [13:00 08/06/2013] [13:00 08/06/2013] 68C999B4419F8A90F659ED6847B0A666
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\en_GB\messages.json --a---- 314 bytes [13:00 08/06/2013] [13:00 08/06/2013] 68C999B4419F8A90F659ED6847B0A666
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\en_US\messages.json --a---- 314 bytes [13:00 08/06/2013] [13:00 08/06/2013] 68C999B4419F8A90F659ED6847B0A666
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\es\messages.json --a---- 340 bytes [13:00 08/06/2013] [13:00 08/06/2013] 0BFDE8ACAF1E5FDDFD4DB9F702DEED64
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\es_419\messages.json --a---- 341 bytes [13:00 08/06/2013] [13:00 08/06/2013] 80938382795C50E509374BD045B22F12
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\et\messages.json --a---- 314 bytes [13:00 08/06/2013] [13:00 08/06/2013] C69232FB36EDE2C48170E6508B3EC939
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\fi\messages.json --a---- 305 bytes [13:00 08/06/2013] [13:00 08/06/2013] 365A4FA9ACA54CF3F10DED1DD688B3D6
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\fil\messages.json --a---- 337 bytes [13:00 08/06/2013] [13:00 08/06/2013] 6F74695E6332C234D6E46CA6EEACD154
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\fr\messages.json --a---- 329 bytes [13:00 08/06/2013] [13:00 08/06/2013] D548FB5781F4B74C289973ABA5922B4F
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\he\messages.json --a---- 471 bytes [13:00 08/06/2013] [13:00 08/06/2013] 22519FF35686773578185622AC67CBA5
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\hi\messages.json --a---- 326 bytes [13:00 08/06/2013] [13:00 08/06/2013] FDF5C2D6629AB1DB0E0A1772F5697586
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\hr\messages.json --a---- 340 bytes [13:00 08/06/2013] [13:00 08/06/2013] B4E5BDFA25BECF291C00F6B6F5890455
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\hu\messages.json --a---- 336 bytes [13:00 08/06/2013] [13:00 08/06/2013] E896BBB6B44DDFB4041BCB47359E504F
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\id\messages.json --a---- 319 bytes [13:00 08/06/2013] [13:00 08/06/2013] F4138589791C819BAB51E2220054F0D8
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\it\messages.json --a---- 324 bytes [13:00 08/06/2013] [13:00 08/06/2013] 8335FC8A0EE6EC328643112225B24F59
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\ja\messages.json --a---- 388 bytes [13:00 08/06/2013] [13:00 08/06/2013] D64FE2E54C18FEF3C4AE4F496D597C80
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\ko\messages.json --a---- 380 bytes [13:00 08/06/2013] [13:00 08/06/2013] 91AF6E77D77340299CF1365318B38C54
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\lt\messages.json --a---- 359 bytes [13:00 08/06/2013] [13:00 08/06/2013] E972CD2B7ECC6BF5517ED86C7C2AFC69
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\lv\messages.json --a---- 360 bytes [13:00 08/06/2013] [13:00 08/06/2013] F538F2FFBAD98CB2A6AA787E027E291A
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\nl\messages.json --a---- 323 bytes [13:00 08/06/2013] [13:00 08/06/2013] D65AAB4B2094E6FB3F1C2FAA8334F66D
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\no\messages.json --a---- 300 bytes [13:00 08/06/2013] [13:00 08/06/2013] 99D7A243AE11E1B679A3D607E2140527
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\pl\messages.json --a---- 336 bytes [13:00 08/06/2013] [13:00 08/06/2013] 7573DD5425BFC2593D4ED5DD069973DA
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\pt_BR\messages.json --a---- 332 bytes [13:00 08/06/2013] [13:00 08/06/2013] AB68927E9BA10051B033EDD0EA6B0A7A
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\pt_PT\messages.json --a---- 331 bytes [13:00 08/06/2013] [13:00 08/06/2013] BE47658D85F9DF358E37B571F1E4E12D
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\ro\messages.json --a---- 332 bytes [13:00 08/06/2013] [13:00 08/06/2013] 0887E086A4818DD9D60AD7D79A0F20AA
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\ru\messages.json --a---- 471 bytes [13:00 08/06/2013] [13:00 08/06/2013] 810C345A170AE57B1C9A47125C4C4F20
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\sk\messages.json --a---- 338 bytes [13:00 08/06/2013] [13:00 08/06/2013] 68FF16376911602EB802E07880103993
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\sl\messages.json --a---- 329 bytes [13:00 08/06/2013] [13:00 08/06/2013] 09102953CBBA8076B4CD3B732CB92E7A
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\sr\messages.json --a---- 483 bytes [13:00 08/06/2013] [13:00 08/06/2013] F2C134E61DECFF6824A6F7F9E7EEBC69
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\sv\messages.json --a---- 333 bytes [13:00 08/06/2013] [13:00 08/06/2013] CD7F1A303DEC0FAB10664A19CB08BF32
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\th\messages.json --a---- 472 bytes [13:00 08/06/2013] [13:00 08/06/2013] A4F6D91AED6527F946FECB61B5F2973C
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\tr\messages.json --a---- 330 bytes [13:00 08/06/2013] [13:00 08/06/2013] D98B3CD27155F0B4F48A29CD1DF11A5D
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\uk\messages.json --a---- 501 bytes [13:00 08/06/2013] [13:00 08/06/2013] 15F61FB62E5B5B75BD7507A7D0FC6276
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\vi\messages.json --a---- 363 bytes [13:00 08/06/2013] [13:00 08/06/2013] DC02046BA3C0982DD168A2AAB103226C
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\zh_CN\messages.json --a---- 346 bytes [13:00 08/06/2013] [13:00 08/06/2013] B9E1488D0F8CB318A9C0AF8CA38A523C
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\zh_TW\messages.json --a---- 346 bytes [13:00 08/06/2013] [13:00 08/06/2013] DA8A359EFFDE7B8F541E56350DDDC884
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\manifest.json --a---- 1134 bytes [01:55 07/12/2013] [01:55 07/12/2013] 62151FBBB2F8C4B174BD728EF3F1015D
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\_locales\bg\messages.json --a---- 1167 bytes [01:55 07/12/2013] [01:55 07/12/2013] FACC87F38120F4B32EBE247EFEE762C2
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\_locales\ca\messages.json --a---- 548 bytes [01:55 07/12/2013] [01:55 07/12/2013] 79FCF929D26C2FD2F470129631A4C993
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\_locales\cs\messages.json --a---- 609 bytes [01:55 07/12/2013] [01:55 07/12/2013] AC8356A10750206DA2A488F69823430A
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\_locales\da\messages.json --a---- 543 bytes [01:55 07/12/2013] [01:55 07/12/2013] 520D3F057127667DEBD8FC5253079578
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\_locales\de\messages.json --a---- 564 bytes [01:55 07/12/2013] [01:55 07/12/2013] 75464C3AA4E073415783576CB66A3474
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\_locales\el\messages.json --a---- 1348 bytes [01:55 07/12/2013] [01:55 07/12/2013] B6941B4B629C589F51C9CA94B7883923
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\_locales\en\messages.json --a---- 491 bytes [01:55 07/12/2013] [01:55 07/12/2013] CDA0E2FCCF3C4B8879D8770D36BF9200
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\_locales\en_GB\messages.json --a---- 491 bytes [01:55 07/12/2013] [01:55 07/12/2013] CDA0E2FCCF3C4B8879D8770D36BF9200
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\_locales\es\messages.json --a---- 574 bytes [01:55 07/12/2013] [01:55 07/12/2013] 3BC621C2AB71EA4F05A6FBE682F5806F
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\_locales\es_419\messages.json --a---- 537 bytes [01:55 07/12/2013] [01:55 07/12/2013] DAE9817BE76CDFD4750DCBFA8577F516
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\_locales\et\messages.json --a---- 501 bytes [01:55 07/12/2013] [01:55 07/12/2013] 8E02E21CE5E032B8C93773141B9A258E
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\_locales\fi\messages.json --a---- 608 bytes [01:55 07/12/2013] [01:55 07/12/2013] 84C267D33DA8C705A88F4594DF8B3C88
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\_locales\fil\messages.json --a---- 542 bytes [01:55 07/12/2013] [01:55 07/12/2013] EACED3EF7D96D8010E2D636F3B7DA060
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\_locales\fr\messages.json --a---- 590 bytes [01:55 07/12/2013] [01:55 07/12/2013] 3A7ACB6A8D8A77A408A1D301166D2687
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\_locales\hi\messages.json --a---- 1045 bytes [01:55 07/12/2013] [01:55 07/12/2013] 2C3B4B0A7DF5B7971A4C7F4DA368549A
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\_locales\hr\messages.json --a---- 543 bytes [01:55 07/12/2013] [01:55 07/12/2013] 300583B4CE98F854C3FB2D7D3C365CAB
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\_locales\hu\messages.json --a---- 615 bytes [01:55 07/12/2013] [01:55 07/12/2013] DD24526DC31C04585777858D36DAC441
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\_locales\id\messages.json --a---- 503 bytes [01:55 07/12/2013] [01:55 07/12/2013] 6CDAEF5C8C4DF49311D5FC2E2649431E
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\_locales\it\messages.json --a---- 507 bytes [01:55 07/12/2013] [01:55 07/12/2013] E4E305E0838E6BDD86EFC9BA3040CB56
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\_locales\ja\messages.json --a---- 884 bytes [01:55 07/12/2013] [01:55 07/12/2013] F069838D92FBBAC4944A04B608B45ECA
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\_locales\ko\messages.json --a---- 689 bytes [01:55 07/12/2013] [01:55 07/12/2013] 09B38405A94E3A7FA757CA64B681C26F
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\_locales\lt\messages.json --a---- 577 bytes [01:55 07/12/2013] [01:55 07/12/2013] C85F25C37B64C82ADAF51FEB896B4803
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\_locales\lv\messages.json --a---- 583 bytes [01:55 07/12/2013] [01:55 07/12/2013] D9A70181053C8669DBD6D28E16BDEAF2
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\_locales\nb\messages.json --a---- 537 bytes [01:55 07/12/2013] [01:55 07/12/2013] C871457FB3321AF0375269BA39BB56C6
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\_locales\nl\messages.json --a---- 507 bytes [01:55 07/12/2013] [01:55 07/12/2013] F90E8A5C67C795D1C348A876D7FB9C2D
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\_locales\pl\messages.json --a---- 551 bytes [01:55 07/12/2013] [01:55 07/12/2013] 4E0FEE8D189120562D42550F120E1770
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\_locales\pt_BR\messages.json --a---- 558 bytes [01:55 07/12/2013] [01:55 07/12/2013] F9A93AC8D71E9A5FC0226B54983839E0
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\_locales\pt_PT\messages.json --a---- 559 bytes [01:55 07/12/2013] [01:55 07/12/2013] FE4E33B8285702CD5CED83E494C1BF3F
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\_locales\ro\messages.json --a---- 560 bytes [01:55 07/12/2013] [01:55 07/12/2013] 7C9B00B64D09237C1F4E4698A45B60DC
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\_locales\ru\messages.json --a---- 1017 bytes [01:55 07/12/2013] [01:55 07/12/2013] B08D43EC0039E83BC5D4A3B3F4D2036B
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\_locales\sk\messages.json --a---- 595 bytes [01:55 07/12/2013] [01:55 07/12/2013] 858C75D02BDD7127CC5BF4CA428CF872
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\_locales\sl\messages.json --a---- 518 bytes [01:55 07/12/2013] [01:55 07/12/2013] CB5B5BC714F6283C60C93C6BDDDFAE41
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\_locales\sr\messages.json --a---- 1136 bytes [01:55 07/12/2013] [01:55 07/12/2013] C08ACDEA5C208E8391131EE33F9807B2
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\_locales\sv\messages.json --a---- 560 bytes [01:55 07/12/2013] [01:55 07/12/2013] 961F8680C12B3EB39B5CF31BC8CDEB66
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\_locales\th\messages.json --a---- 1184 bytes [01:55 07/12/2013] [01:55 07/12/2013] 5A04DA41B22E1C5446932E2996345F26
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\_locales\tr\messages.json --a---- 597 bytes [01:55 07/12/2013] [01:55 07/12/2013] D5BE90425C6BBF619208E726904D29FB
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\_locales\uk\messages.json --a---- 1038 bytes [01:55 07/12/2013] [01:55 07/12/2013] 4D764F555C08DA24158DAE793F053404
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\_locales\vi\messages.json --a---- 650 bytes [01:55 07/12/2013] [01:55 07/12/2013] 61763840010DA392D8807DBF9DD196DC
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\_locales\zh_CN\messages.json --a---- 625 bytes [01:55 07/12/2013] [01:55 07/12/2013] 0961884E74639F600410B715DE27E446
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\_locales\zh_TW\messages.json --a---- 667 bytes [01:55 07/12/2013] [01:55 07/12/2013] EBE95B046350B3B69FBB5578E4817F09
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\manifest.json --a---- 755 bytes [02:28 08/06/2013] [02:28 08/06/2013] BF9ED89CE27914C99BB5629740A7A7EB
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\ar\messages.json --a---- 556 bytes [02:28 08/06/2013] [02:28 08/06/2013] DCE30E06CC4298B140576951ACC86816
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\bg\messages.json --a---- 492 bytes [02:28 08/06/2013] [02:28 08/06/2013] 22E44EF5318119517DB82703919AB133
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\ca\messages.json --a---- 262 bytes [02:28 08/06/2013] [02:28 08/06/2013] B6B539A6E6AFD8E0D8921511089A94B1
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\cs\messages.json --a---- 289 bytes [02:28 08/06/2013] [02:28 08/06/2013] F6387216CFB18BE992F38D94D9CC37A5
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\da\messages.json --a---- 240 bytes [02:28 08/06/2013] [02:28 08/06/2013] 86A141F6044B43EC760507456025B8D5
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\de\messages.json --a---- 239 bytes [02:28 08/06/2013] [02:28 08/06/2013] 360EAC8E258533B427AA6E2A7BB5B92F
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\el\messages.json --a---- 624 bytes [02:28 08/06/2013] [02:28 08/06/2013] 0B5B674BEEBAC4583DFAACB5EED296B7
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\en\messages.json --a---- 215 bytes [02:28 08/06/2013] [02:28 08/06/2013] C955ABB367158B1A6015F91001E65458
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\es\messages.json --a---- 281 bytes [02:28 08/06/2013] [02:28 08/06/2013] E37502E0EC3AE45074F2E34EFF8B0EC7
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\fi\messages.json --a---- 284 bytes [02:28 08/06/2013] [02:28 08/06/2013] AE7DD43428DB403DD1CDFE29636A8D12
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\fil\messages.json --a---- 234 bytes [02:28 08/06/2013] [02:28 08/06/2013] E85B25BF1FDE30AAB85E690FC47CB1E5
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\fr\messages.json --a---- 272 bytes [02:28 08/06/2013] [02:28 08/06/2013] 9B9AB2BA7B111772B12427AFF5313D0F
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\hi\messages.json --a---- 391 bytes [02:28 08/06/2013] [02:28 08/06/2013] 9C0360E4CE0FB7FBE1202105E365D675
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\hr\messages.json --a---- 246 bytes [02:28 08/06/2013] [02:28 08/06/2013] 51185689C14390FB2B5A3D7C72C01A2D
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\hu\messages.json --a---- 234 bytes [02:28 08/06/2013] [02:28 08/06/2013] E8235725AA95D302C48404B3CA239435
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\id\messages.json --a---- 242 bytes [02:28 08/06/2013] [02:28 08/06/2013] CE79B1EE24E01D3495DB6F00D2361D34
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\it\messages.json --a---- 260 bytes [02:28 08/06/2013] [02:28 08/06/2013] CBFEBA52D95C68B47C511095930346F2
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\ja\messages.json --a---- 364 bytes [02:28 08/06/2013] [02:28 08/06/2013] 6804B5C6A2336DB0C33AC5964AA80484
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\ko\messages.json --a---- 328 bytes [02:28 08/06/2013] [02:28 08/06/2013] C870F9477DAD594BA5EC96E1591A3051
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\lt\messages.json --a---- 269 bytes [02:28 08/06/2013] [02:28 08/06/2013] D093839DC1278D56E5E7C876CC9A04C3
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\lv\messages.json --a---- 262 bytes [02:28 08/06/2013] [02:28 08/06/2013] 93AE003C19E9D1200C0E12FD242F0E86
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\nl\messages.json --a---- 232 bytes [02:28 08/06/2013] [02:28 08/06/2013] 44F95118655A479A306F74C68AEAB159
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\no\messages.json --a---- 210 bytes [02:28 08/06/2013] [02:28 08/06/2013] 464EDFD55F1E419B8DC73CF8A8AB5B0C
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\pl\messages.json --a---- 292 bytes [02:28 08/06/2013] [02:28 08/06/2013] F2FD6542E6983BAED5F92635B2702BA0
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\pt_BR\messages.json --a---- 230 bytes [02:28 08/06/2013] [02:28 08/06/2013] E8D892B0D8FD1D0010E5665338C8B9A1
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\pt_PT\messages.json --a---- 231 bytes [02:28 08/06/2013] [02:28 08/06/2013] CE969195A5E96D487CE70CEFC0C6FBF4
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\ro\messages.json --a---- 281 bytes [02:28 08/06/2013] [02:28 08/06/2013] 9445A1E9258ABC199D615AA8110766B0
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\ru\messages.json --a---- 482 bytes [02:28 08/06/2013] [02:28 08/06/2013] 9D0AB8627ADD40DD259FAEDFD3F2F60D
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\se\messages.json --a---- 210 bytes [02:28 08/06/2013] [02:28 08/06/2013] CB5F465A3A4043F68009154D1FA90B4A
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\sk\messages.json --a---- 238 bytes [02:28 08/06/2013] [02:28 08/06/2013] 5E811FA0B8435373ADCC2B64C3CD77C1
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\sl\messages.json --a---- 249 bytes [02:28 08/06/2013] [02:28 08/06/2013] 2D88CBCDDBD0355B8793F5C21AAE3644
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\sr\messages.json --a---- 511 bytes [02:28 08/06/2013] [02:28 08/06/2013] A0DAB5AC39F3DA4BC9A40068ADDF3B40
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\th\messages.json --a---- 471 bytes [02:28 08/06/2013] [02:28 08/06/2013] A33B8D4B444FC89B2B9E6F1053F837E2
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\tr\messages.json --a---- 250 bytes [02:28 08/06/2013] [02:28 08/06/2013] 7A293CD3C16E2D0CE037CE9E3E02D46D
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\uk\messages.json --a---- 536 bytes [02:28 08/06/2013] [02:28 08/06/2013] 2C779312F8130175AF7A9FA47E15066A
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\vi\messages.json --a---- 257 bytes [02:28 08/06/2013] [02:28 08/06/2013] 6AB1D663983B02A193EB7F55AD19AA0E
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\zh_CN\messages.json --a---- 339 bytes [02:28 08/06/2013] [02:28 08/06/2013] AA4687E60787AC70532DE7379345CC2F
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\zh_TW\messages.json --a---- 321 bytes [02:28 08/06/2013] [02:28 08/06/2013] 7DAD17EFC6F23683526DB4F95C96AF8A
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\Default\Users\ajfngoioibabdofailmpabbkihimabjm\manifest.json --a---- 561 bytes [21:34 05/05/2013] [21:34 05/05/2013] 04BF611E3351F56C835DDB1D5A84FD59
C:\Users\*user*\AppData\Local\Google\Chrome\User Data\pnacl\0.1.0.12181\manifest.json --a---- 572 bytes [02:01 07/12/2013] [02:01 07/12/2013] 43ECC7BD8A305BE1AD449FA331629FBA
C:\Users\*user*\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\024LMTDF\count[1].json --a---- 89 bytes [13:57 19/12/2010] [13:57 19/12/2010] ED1ECBB3CA64EBE55DDA1609B1899A81
C:\Users\*user*\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5CIUL1WM\Adform.Sender.JSON[1].js --a---- 4739 bytes [04:00 07/12/2013] [04:00 07/12/2013] 2AC7EB8DCE0B51D0E070F6CC7F3D8DCA
C:\Users\*user*\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5CIUL1WM\travelnewsandwire_dot_com_slash_t-magazine-sign-of-the-times-under-the-spell-of-old-restaurants[1].json --a---- 0 bytes [02:10 07/12/2013] [02:10 07/12/2013] D41D8CD98F00B204E9800998ECF8427E
C:\Users\*user*\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BPP1MSVY\allsports247_dot_com_slash_report-duke-johnson-to-miss-rest-of-season-whats-next-for-miami-cbssports-com[1].json --a---- 0 bytes [01:58 07/12/2013] [01:58 07/12/2013] D41D8CD98F00B204E9800998ECF8427E
C:\Users\*user*\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IGIB3QNJ\travelnewsandwire_dot_com_slash_burlington-when-in-vermont-take-a-walk-around-the-sixth-great-lake[1].json --a---- 0 bytes [02:20 07/12/2013] [02:20 07/12/2013] D41D8CD98F00B204E9800998ECF8427E
C:\Users\*user*\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IGIB3QNJ\travelnewsandwire_dot_com_slash_t-magazine-sign-of-the-times-under-the-spell-of-old-restaurants[1].json --a---- 0 bytes [02:12 07/12/2013] [02:12 07/12/2013] D41D8CD98F00B204E9800998ECF8427E
C:\Users\*user*\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IL7CILRD\beautyandstylebeat_dot_com_slash_how-to-remove-glitter-nail-polish[1].json --a---- 0 bytes [03:02 07/12/2013] [03:02 07/12/2013] D41D8CD98F00B204E9800998ECF8427E
C:\Users\*user*\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IL7CILRD\fitnessandhealth365_dot_com_slash_fighting-shape-ryan-baders-dynamic-warm-up-workout-and-nutrition[1].json --a---- 0 bytes [02:24 07/12/2013] [02:24 07/12/2013] D41D8CD98F00B204E9800998ECF8427E
C:\Users\*user*\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IL7CILRD\fitnessandhealth365_dot_com_slash_the-clean-cook-5-seasonal-fit-recipes[1].json --a---- 0 bytes [02:13 07/12/2013] [02:13 07/12/2013] D41D8CD98F00B204E9800998ECF8427E
C:\Users\*user*\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IL7CILRD\travelnewsandwire_dot_com_slash_crazy-but-true-ryanair-lowers-fees-and-increases-baggage-allowance[1].json --a---- 0 bytes [02:20 07/12/2013] [02:20 07/12/2013] D41D8CD98F00B204E9800998ECF8427E
C:\Users\*user*\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ITX22OFX\allsports247_dot_com_slash_john-fox-denver-broncos-head-coach-needs-heart-surgery-cbs-news[1].json --a---- 0 bytes [02:07 07/12/2013] [02:07 07/12/2013] D41D8CD98F00B204E9800998ECF8427E
C:\Users\*user*\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IYTDO6Y9\g[1].json --a---- 107 bytes [04:49 07/12/2013] [04:49 07/12/2013] 0035D2F8C948123C5D48D23D7FB921B4
C:\Users\*user*\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IYTDO6Y9\g[2].json --a---- 124 bytes [04:50 07/12/2013] [04:50 07/12/2013] 9E1D124EDA32D14977CC4C1937C20F0A
C:\Users\*user*\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IYTDO6Y9\threadDetails[1].json --a---- 0 bytes [02:41 07/12/2013] [02:41 07/12/2013] D41D8CD98F00B204E9800998ECF8427E
C:\Users\*user*\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\MREVOZ9D\asconf[1].json --a---- 2909 bytes [03:55 07/12/2013] [03:55 07/12/2013] BC71C359F4658AE05AAE8F9F9F04C0E7
C:\Users\*user*\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\O4LWHPMW\asconf[1].json --a---- 2910 bytes [03:55 07/12/2013] [03:55 07/12/2013] 84028212882B122AB2865BBC11561E7A
C:\Users\*user*\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\PAOXYFI0\techandgadgetnews_dot_com_slash_audioengine-a2-black[1].json --a---- 0 bytes [02:19 07/12/2013] [02:19 07/12/2013] D41D8CD98F00B204E9800998ECF8427E
C:\Users\*user*\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\PAOXYFI0\teenhollywoodgossip_dot_com_slash_joe-jonas-blanda-eggenschwiler-party-hopping-pair[1].json --a---- 0 bytes [03:04 07/12/2013] [03:04 07/12/2013] D41D8CD98F00B204E9800998ECF8427E
C:\Users\*user*\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QKPNVDOY\threadDetails[1].json --a---- 0 bytes [02:41 07/12/2013] [02:41 07/12/2013] D41D8CD98F00B204E9800998ECF8427E
C:\Users\*user*\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QZCVGG5N\techandgadgetnews_dot_com_slash_infamous-second-son-karma-explained-welcome-back-the-binary-moral-choice-system[1].json --a---- 0 bytes [02:13 07/12/2013] [02:13 07/12/2013] D41D8CD98F00B204E9800998ECF8427E
C:\Users\*user*\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QZCVGG5N\travelnewsandwire_dot_com_slash_category_slash_travel-agencies[1].json --a---- 0 bytes [02:11 07/12/2013] [02:11 07/12/2013] D41D8CD98F00B204E9800998ECF8427E
C:\Users\*user*\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\R6SV9I8M\allsports247_dot_com_slash_what-nfl-players-are-saying-about-the-leagues-hazing-dilemma-usa-today[1].json --a---- 0 bytes [02:01 07/12/2013] [02:01 07/12/2013] D41D8CD98F00B204E9800998ECF8427E
C:\Users\*user*\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\R6SV9I8M\all[1].json --a---- 4576 bytes [03:55 07/12/2013] [03:55 07/12/2013] 5AD71A861976148DAF03960DE336A538
C:\Users\*user*\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZIGEJG3F\2040347[1].json --a---- 1009 bytes [04:50 07/12/2013] [04:50 07/12/2013] 3890603369CB0886FAEC1959D3A439FA
C:\Users\*user*\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZIGEJG3F\all[1].json --a---- 4777 bytes [03:55 07/12/2013] [03:55 07/12/2013] E85CFC823E3708B1FC8EA44907763D22
C:\Users\*user*\AppData\Local\Temp\9272_14789\manifest.json --a---- 34 bytes [02:11 07/12/2013] [02:11 07/12/2013] 994F985966C0B96B98A67143D49F8547
C:\Users\*user*\AppData\Local\Temp\CRX_75DAF8CB7768\manifest.json --a---- 34 bytes [02:34 08/06/2013] [02:34 08/06/2013] 994F985966C0B96B98A67143D49F8547
C:\Users\*user*\AppData\LocalLow\Microsoft\Silverlight\is\j4p3otem.esd\kaxuxvxo.oqi\1\s\u4nll4hghcen13r3jyqlcw1e0wapukkfqd1nyqcn5uz4dmrluzaaaefa\f\SLPlayer\bwdata.json --a---- 144 bytes [00:13 24/03/2011] [12:46 05/02/2012] E7A032B173E1F2900A8A2FE69203BBEE
C:\Users\*user*\AppData\LocalLow\Microsoft\Silverlight\is\j4p3otem.esd\kaxuxvxo.oqi\1\s\u4nll4hghcen13r3jyqlcw1e0wapukkfqd1nyqcn5uz4dmrluzaaaefa\f\SLPlayer\userPrefs.json --a---- 121 bytes [14:44 19/03/2011] [12:48 05/02/2012] 78EF48E2AE2E960DE44756156589D458
 
Searching for "*.xpi*"
C:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\MicrosoftDotNetFrameworkAssistant.xpi --a---- 19153 bytes [18:40 18/03/2009] [18:40 18/03/2009] 142AA9EC7D07C3F7B26E20E5EA399C80
 
========== regfind ==========
 
Searching for "ODUuMTcuMTMyLjU0OwAA"
No data found.
 
Searching for "ODUuMTcuMTQ3LjMzOwAA"
No data found.
 
Searching for "cdjbnddbclciabnckgeahmneohjlahdm"
No data found.
 
========== dir ==========
 
C:\Users\Administrator\AppData\Local\Google\Chrome\UserData\Default\Default - Unable to find folder.
 
-= EOF =-
 


#6 jrbe

jrbe
  • Topic Starter

  • Members
  • 37 posts
  • OFFLINE
  •  
  • Local time:01:41 AM

Posted 03 January 2014 - 12:21 AM

Sorry for all of that chaos.  Hopefully thats what you meant by post them...I thought about attaching them but didnt want to possibly spread the malware.



#7 B-boy/StyLe/

B-boy/StyLe/

    Bleepin' Freestyler


  • Malware Response Team
  • 8,307 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Bulgaria
  • Local time:09:41 AM

Posted 03 January 2014 - 09:13 AM

Hello,

 

There is no problem to attach the log files (in that way you will not spread the malware). The logs are plain text files and they are not executable.

Also you posted the systemlook log twice instead of the FRST log.

 

Please re-run RogueKiller.
Wait until Prescan has finished.
Click on Scan.
Now click the Registry tab and locate these:
 

[RUN][SUSP PATH] HKCU\[...]\Run : Equqpudanougzal (C:\Users\*user*\AppData\Roaming\Kyerri\pymaus.exe [-]) -> FOUND
[RUN][SUSP PATH] HKLM\[...]\Run : Equqpudanougzal ("C:\Users\*user*\AppData\Roaming\Kyerri\pymaus.exe" [-]) -> FOUND
[RUN][SUSP PATH] HKLM\[...]\Wow6432Node\[...]\Run : Equqpudanougzal (C:\Users\*user*\AppData\Roaming\Kyerri\pymaus.exe [-]) -> FOUND

Place a checkmark on them, leave the others unchecked.
Now click on the Files tab
Place a checkmark each of these items:
 

[V2][SUSP PATH] Security Center Update - 1026192084 : C:\Users\*user*\AppData\Roaming\Emuvek\sirai.exe [-] -> FOUND
[V2][SUSP PATH] Security Center Update - 104876607 : C:\Users\*user*\AppData\Roaming\Neohcav\ruikk.exe [-] -> FOUND
[V2][SUSP PATH] Security Center Update - 1055816976 : C:\Users\*user*\AppData\Roaming\Fuitifa\koiks.exe [-] -> FOUND
[V2][SUSP PATH] Security Center Update - 1104061209 : C:\Users\*user*\AppData\Roaming\Syeryp\osexg.exe [-] -> FOUND
[V2][SUSP PATH] Security Center Update - 1144123063 : C:\Users\*user*\AppData\Roaming\Tyebwedi\okykb.exe [-] -> FOUND
[V2][SUSP PATH] Security Center Update - 124462569 : C:\Users\*user*\AppData\Roaming\Ifadizu\veassu.exe [x] -> FOUND
[V2][SUSP PATH] Security Center Update - 1415457980 : C:\Users\*user*\AppData\Roaming\Piniocby\esulgao.exe [-] -> FOUND
[V2][SUSP PATH] Security Center Update - 1733702126 : C:\Users\*user*\AppData\Roaming\Zagiusow\gokuxii.exe [-] -> FOUND
[V2][SUSP PATH] Security Center Update - 1736419887 : C:\Users\*user*\AppData\Roaming\Kyerri\pymaus.exe [-] -> FOUND
[V2][SUSP PATH] Security Center Update - 1853788960 : C:\Users\*user*\AppData\Roaming\Epqyqy\yrimv.exe [-] -> FOUND
[V2][SUSP PATH] Security Center Update - 2359199964 : C:\Users\*user*\AppData\Roaming\Ykivcy\diqyigf.exe [-] -> FOUND
[V2][SUSP PATH] Security Center Update - 2360659064 : C:\Users\*user*\AppData\Roaming\Rizuazb\oldoyri.exe [-] -> FOUND
[V2][SUSP PATH] Security Center Update - 2639795876 : C:\Users\*user*\AppData\Roaming\Idseemoc\ocusn.exe [-] -> FOUND
[V2][SUSP PATH] Security Center Update - 2679734896 : C:\Users\*user*\AppData\Roaming\Vyrousi\gixyv.exe [-] -> FOUND
[V2][SUSP PATH] Security Center Update - 2863506064 : C:\Users\*user*\AppData\Roaming\Vehyse\lexepoi.exe [-] -> FOUND
[V2][SUSP PATH] Security Center Update - 306113306 : C:\Users\*user*\AppData\Roaming\Ryehru\acewn.exe [-] -> FOUND
[V2][SUSP PATH] Security Center Update - 3081185136 : C:\Users\*user*\AppData\Roaming\Ziuwba\cameu.exe [-] -> FOUND
[V2][SUSP PATH] Security Center Update - 31372384 : C:\Users\*user*\AppData\Roaming\Bytuhi\ycpiahd.exe [-] -> FOUND
[V2][SUSP PATH] Security Center Update - 3154091738 : C:\Users\*user*\AppData\Roaming\Xoaztex\omudseq.exe [-] -> FOUND
[V2][SUSP PATH] Security Center Update - 3241642843 : C:\Users\*user*\AppData\Roaming\Cewyyf\ustodoo.exe [-] -> FOUND
[V2][SUSP PATH] Security Center Update - 3434255297 : C:\Users\*user*\AppData\Roaming\Ytulfie\vuniyq.exe [-] -> FOUND
[V2][SUSP PATH] Security Center Update - 3737816061 : C:\Users\*user*\AppData\Roaming\Fetyra\utebalu.exe [-] -> FOUND
[V2][SUSP PATH] Security Center Update - 3903052156 : C:\Users\*user*\AppData\Roaming\Zagoak\izobyml.exe [-] -> FOUND
[V2][SUSP PATH] Security Center Update - 4077155733 : C:\Users\*user*\AppData\Roaming\Taabyvsy\ulsaly.exe [-] -> FOUND
[V2][SUSP PATH] Security Center Update - 4115803536 : C:\Users\*user*\AppData\Roaming\Gezeut\cauqi.exe [-] -> FOUND
[V2][SUSP PATH] Security Center Update - 4133396903 : C:\Users\*user*\AppData\Roaming\Itkuofs\xasoyks.exe [x] -> FOUND
[V2][SUSP PATH] Security Center Update - 4256060576 : C:\Users\*user*\AppData\Roaming\Coipqyab\rycoa.exe [-] -> FOUND
[V2][SUSP PATH] Security Center Update - 589180701 : C:\Users\*user*\AppData\Roaming\Uzfibufa\cilaew.exe [-] -> FOUND
[V2][SUSP PATH] Security Center Update - 820770416 : C:\Users\*user*\AppData\Roaming\Qeunezha\umcid.exe [-] -> FOUND
[V2][SUSP PATH] Security Center Update - 915616505 : C:\Users\*user*\AppData\Roaming\Urcefu\docuom.exe [-] -> FOUND
[V2][SUSP PATH] Security Center Update - 992505961 : C:\Users\*user*\AppData\Roaming\Gouserc\daifak.exe [-] -> FOUND


Now press the Delete button.
If asked to restart the computer, please do so immediately.
When it is finished, there will be a log on your desktop called: RKreport[2].txt
Post the log in your next reply.

 

 

Regards,

Georgi


cXfZ4wS.png


#8 B-boy/StyLe/

B-boy/StyLe/

    Bleepin' Freestyler


  • Malware Response Team
  • 8,307 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Bulgaria
  • Local time:09:41 AM

Posted 04 January 2014 - 06:10 PM

Hi,

 

 

Are you still there?

 

 

Regards,

Georgi


cXfZ4wS.png


#9 jrbe

jrbe
  • Topic Starter

  • Members
  • 37 posts
  • OFFLINE
  •  
  • Local time:01:41 AM

Posted 04 January 2014 - 06:50 PM

I'm still here.  Sorry, been working a lot & havent had a chance to do anything.

 

Here is the original log i screwed up,

 

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 03-01-2014
Ran by Administrator (administrator) on *user*-HPDV on 02-01-2014 23:38:43
Running from C:\Users\Administrator\Downloads
Windows Vista ™ Home Premium Service Pack 2 (X64) OS Language: English(US)
Internet Explorer Version 9
Boot Mode: Normal
 
==================== Processes (Whitelisted) =================
 
(NVIDIA Corporation) C:\windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\windows\System32\SLsvc.exe
(Hewlett-Packard Corporation) C:\windows\System32\hpservice.exe
(Validity Sensors, Inc.) C:\windows\System32\vfsFPService.exe
(DigitalPersona, Inc.) C:\Program Files (x86)\DigitalPersona\Bin\DpHostW.exe
(Agere Systems) C:\windows\System32\agr64svc.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(PostgreSQL Global Development Group) C:\Program Files (x86)\PostgreSQL\8.3\bin\pg_ctl.exe
() C:\windows\SMINST\BLService.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
(PostgreSQL Global Development Group) C:\Program Files (x86)\PostgreSQL\8.3\bin\postgres.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(PostgreSQL Global Development Group) C:\Program Files (x86)\PostgreSQL\8.3\bin\postgres.exe
(PostgreSQL Global Development Group) C:\Program Files (x86)\PostgreSQL\8.3\bin\postgres.exe
(PostgreSQL Global Development Group) C:\Program Files (x86)\PostgreSQL\8.3\bin\postgres.exe
(PostgreSQL Global Development Group) C:\Program Files (x86)\PostgreSQL\8.3\bin\postgres.exe
(PostgreSQL Global Development Group) C:\Program Files (x86)\PostgreSQL\8.3\bin\postgres.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\Apoint.exe
(Sun Microsystems, Inc.) C:\Program Files\Java\jre6\bin\jusched.exe
(Alcor Micro, Corp.) C:\Program Files (x86)\Multimedia Card Reader\readericon10.exe
(DigitalPersona, Inc.) C:\Program Files (x86)\DigitalPersona\Bin\DpAgent.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
(DigitalPersona, Inc.) C:\Program Files\DigitalPersona\Bin\DpAgent.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
() C:\Program Files (x86)\Hewlett-Packard\Shared\HpqToaster.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApMsgFwd.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApntEx.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Health Check\HPHC_Service.exe
(Sun Microsystems, Inc.) C:\Program Files\Java\jre6\bin\jucheck.exe
() C:\Users\*user*\AppData\Roaming\Kyerri\pymaus.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Microsoft Corporation) C:\windows\SysWOW64\notepad.exe
() C:\Users\*user*\AppData\Roaming\Kyerri\pymaus.exe
() C:\Users\*user*\AppData\Roaming\Kyerri\pymaus.exe
 
 
==================== Registry (Whitelisted) ==================
 
HKLM\...\Run: [Apoint] - C:\Program Files\Apoint2K\Apoint.exe [284160 2008-05-23] (Alps Electric Co., Ltd.)
HKLM\...\Run: [Windows Defender] - C:\Program Files\Windows Defender\MSASCui.exe [1584184 2008-01-20] (Microsoft Corporation)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Java\jre6\bin\jusched.exe [170496 2009-05-16] (Sun Microsystems, Inc.)
HKLM\...\Run: [NvCplDaemon] - RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
HKLM\...\Run: [NvMediaCenter] - RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
HKLM\...\Run: [Equqpudanougzal] - C:\Users\*user*\AppData\Roaming\Kyerri\pymaus.exe [218288 2013-12-06] ()
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [readericon10] - C:\Program Files (x86)\Multimedia Card Reader\readericon10.exe [131072 2007-11-22] (Alcor Micro, Corp.)
HKLM-x32\...\Run: [DpAgent] - C:\Program Files (x86)\DigitalPersona\Bin\DpAgent.exe [814144 2008-07-14] (DigitalPersona, Inc.)
HKLM-x32\...\Run: [hpWirelessAssistant] - C:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe [488752 2008-04-15] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [AppleSyncNotifier] - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe [59240 2011-11-02] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [249064 2010-10-29] (Sun Microsystems, Inc.)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59280 2012-11-28] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2012-10-25] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152544 2012-12-12] (Apple Inc.)
HKLM-x32\...\Run: [Equqpudanougzal] - C:\Users\*user*\AppData\Roaming\Kyerri\pymaus.exe [218288 2013-12-06] ()
HKCU\...\Run: [HPADVISOR] - C:\Program Files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe autorun=AUTORUN
HKCU\...\Run: [Equqpudanougzal] - C:\Users\*user*\AppData\Roaming\Kyerri\pymaus.exe [218288 2013-12-06] ()
HKU\Default\...\Run: [HPADVISOR] - C:\Program Files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe autorun=AUTORUN
HKU\Default User\...\Run: [HPADVISOR] - C:\Program Files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe autorun=AUTORUN
HKU\*user*\...\Run: [HPAdvisor] - C:\Program Files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe autorun=AUTORUN
HKU\*user*\...\Run: [ehTray.exe] - C:\windows\ehome\ehtray.exe [138240 2008-01-20] (Microsoft Corporation)
HKU\*user*\...\Run: [MobileDocuments] - C:\Program Files (x86)\Common Files\Apple\Internet Services\ubd.exe
HKU\*user*\...\Run: [ApplePhotoStreams] - C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59872 2012-12-17] (Apple Inc.)
HKU\*user*\...\Run: [Opera] - rundll32 "C:\Users\*user*\AppData\Local\DigitalPersona\Opera\danhdpaeli.dll",DllRegisterServer <===== ATTENTION
HKU\*user*\...\Run: [Equqpudanougzal] - C:\Users\*user*\AppData\Roaming\Kyerri\pymaus.exe [218288 2013-12-06] ()
Lsa: [Notification Packages] scecli DPPWDFLT
 
==================== Internet (Whitelisted) ====================
 
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=84&bd=Pavilion&pf=cnnb
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=84&bd=Pavilion&pf=cnnb
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - {709626BC-9B12-42CF-97B9-C96EEDAF70F4} URL = http://search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=hp-pvnb
SearchScopes: HKLM - {E8CC6306-1B7D-4B06-AAFF-1A68D2670350} URL = http://www.ask.com/web?q={searchterms}&l=dis&o=ushpl
SearchScopes: HKLM-x32 - {709626BC-9B12-42CF-97B9-C96EEDAF70F4} URL = http://search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=hp-pvnb
SearchScopes: HKLM-x32 - {E8CC6306-1B7D-4B06-AAFF-1A68D2670350} URL = http://www.ask.com/web?q={searchterms}&l=dis&o=ushpl
SearchScopes: HKCU - DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/search
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 
SearchScopes: HKCU - {709626BC-9B12-42CF-97B9-C96EEDAF70F4} URL = 
SearchScopes: HKCU - {E8CC6306-1B7D-4B06-AAFF-1A68D2670350} URL = 
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
BHO-x32: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
DPF: HKLM {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} http://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection2.cab
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} -  No File
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
 
Chrome: 
=======
CHR HomePage: hxxp://www.google.com/
CHR RestoreOnStartup: "hxxp://www.google.com/"
CHR Extension: (Google Docs) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Find Replace) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfjmfciolkikfodjfdmdpdmpfbjdofek\1.2.2_0
CHR Extension: (Google Search) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Google Wallet) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0
CHR Extension: (Gmail) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1
 
==================== Services (Whitelisted) =================
 
S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2009-08-05] (Adobe Systems)
R2 Recovery Service for Windows; C:\windows\SMINST\BLService.exe [361808 2008-07-30] ()
R2 vfsFPService; C:\Windows\system32\vfsFPService.exe [719152 2008-08-24] (Validity Sensors, Inc.)
R2 vfsFPService; C:\Windows\SysWow64\vfsFPService.exe [599344 2008-08-24] (Validity Sensors, Inc.)
R2 postgresql-8.3; C:/Program Files (x86)/PostgreSQL/8.3/bin/pg_ctl.exe runservice -N "postgresql-8.3" -D "C:/Program Files (x86)/PostgreSQL/8.3/data" -w [x]
 
==================== Drivers (Whitelisted) ====================
 
R3 vfs101a; C:\Windows\System32\drivers\vfs101a.sys [49968 2008-08-24] (Validity Sensors, Inc.)
S3 IpInIp; system32\DRIVERS\ipinip.sys [x]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x]
S3 STHDA; system32\DRIVERS\stwrt64.sys [x]
 
==================== NetSvcs (Whitelisted) ===================
 
 
==================== One Month Created Files and Folders ========
 
2014-01-02 23:38 - 2014-01-02 23:39 - 00013720 _____ C:\Users\Administrator\Downloads\FRST.txt
2014-01-02 23:37 - 2014-01-02 23:37 - 01931750 _____ (Farbar) C:\Users\Administrator\Downloads\FRST64.exe
2014-01-02 23:37 - 2014-01-02 23:37 - 00000000 ____D C:\FRST
2014-01-02 23:31 - 2014-01-02 23:31 - 00003180 _____ C:\Users\Administrator\Desktop\JRT.txt
2014-01-02 23:18 - 2014-01-02 23:18 - 00000000 ____D C:\windows\ERUNT
2014-01-02 23:17 - 2014-01-02 23:17 - 01036305 _____ (Thisisu) C:\Users\Administrator\Downloads\JRT.exe
2014-01-02 22:56 - 2014-01-02 23:08 - 00273278 _____ C:\Users\Administrator\Downloads\SystemLook.txt
2014-01-02 22:55 - 2014-01-02 22:56 - 00139264 _____ C:\Users\Administrator\Downloads\SystemLook.exe
2014-01-02 22:53 - 2014-01-02 22:53 - 09682848 _____ (NVIDIA Corporation) C:\windows\system32\Drivers\nvlddmkm.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 01513320 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ntfs.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 01423808 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tcpip.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 01221176 _____ (QLogic Corporation) C:\windows\system32\Drivers\ql2300.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00785624 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Wdf01000.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00712704 _____ (Microsoft Corporation) C:\windows\system32\Drivers\PEAuth.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00594432 _____ (Microsoft Corporation) C:\windows\system32\Drivers\spsys.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00450560 _____ (Microsoft Corporation) C:\windows\system32\Drivers\srv.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00408024 _____ (Microsoft Corporation) C:\windows\system32\Drivers\volmgrx.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00314368 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rdpdr.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00299008 _____ (Microsoft Corporation) C:\windows\system32\Drivers\udfs.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00287744 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rdbss.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00284728 _____ (ULi Electronics Inc.) C:\windows\system32\Drivers\uliahci.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00274944 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbhub.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00267648 _____ (Microsoft Corporation) C:\windows\system32\Drivers\volsnap.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00259584 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbport.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00218112 _____ (Microsoft Corporation) C:\windows\system32\Drivers\portcls.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00209920 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rdpwd.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00203368 _____ (Microsoft Corporation) C:\windows\system32\Drivers\pcmcia.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00198656 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WUDFRd.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00197120 _____ (Realtek Corporation                                            ) C:\windows\system32\Drivers\Rtlh64.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00187392 _____ (Microsoft Corporation) C:\windows\system32\Drivers\nwifi.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00178664 _____ (Microsoft Corporation) C:\windows\system32\Drivers\pci.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00178176 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rfcomm.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00176128 _____ (Microsoft Corporation) C:\windows\system32\Drivers\srv2.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00174696 _____ (Promise Technology, Inc.) C:\windows\system32\Drivers\ulsata2.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00173112 _____ (Microsoft Corporation) C:\windows\system32\Drivers\scsiport.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00168960 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbvideo.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00164328 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Storport.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00149048 _____ (VIA Technologies Inc.,Ltd) C:\windows\system32\Drivers\vsmraid.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00148072 _____ (Promise Technology, Inc.) C:\windows\system32\Drivers\ulsata.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00145920 _____ (Microsoft Corporation) C:\windows\system32\Drivers\srvnet.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00140288 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rmcast.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00128056 _____ (NVIDIA Corporation) C:\windows\system32\Drivers\nvraid.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00126520 _____ (Microsoft Corporation) C:\windows\system32\Drivers\NV_AGP.SYS.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00126464 _____ (Microsoft Corporation) C:\windows\system32\Drivers\videoprt.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00124928 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rasl2tp.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00124008 _____ (QLogic Corporation) C:\windows\system32\Drivers\ql40xx.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00098816 _____ (Microsoft Corporation) C:\windows\system32\Drivers\raspptp.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00096768 _____ (Microsoft Corporation) C:\windows\system32\Drivers\parport.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00095744 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbccgp.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00094720 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tdx.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00094208 _____ (Microsoft Corporation) C:\windows\system32\Drivers\serial.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00094208 _____ (Microsoft Corporation) C:\windows\system32\Drivers\pacer.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00090216 _____ (Microsoft Corporation) C:\windows\system32\Drivers\sbp2port.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00088064 _____ (Microsoft Corporation) C:\windows\system32\Drivers\smb.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00087040 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WUDFPf.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00086528 _____ (Microsoft Corporation) C:\windows\system32\Drivers\wanarp.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00079360 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbcir.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00078392 _____ (Silicon Integrated Systems) C:\windows\system32\Drivers\sisraid4.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00078336 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rassstp.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00077824 _____ (Microsoft Corporation) C:\windows\system32\Drivers\USBSTOR.SYS.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00075776 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rspndr.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00072576 _____ (Microsoft Corporation) C:\windows\system32\Drivers\partmgr.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00072192 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ohci1394.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00068224 _____ (Microsoft Corporation) C:\windows\system32\Drivers\stream.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00068152 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ULIAGPKX.SYS.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00067128 _____ (Microsoft Corporation) C:\windows\system32\Drivers\UAGP35.SYS.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00067048 _____ (Microsoft Corporation) C:\windows\system32\Drivers\volmgr.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00062440 _____ (Microsoft Corporation) C:\windows\system32\Drivers\termdd.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00054376 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WdfLdr.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00054328 _____ (NVIDIA Corporation) C:\windows\system32\Drivers\nvstor.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00053760 _____ (Apple, Inc.) C:\windows\system32\Drivers\usbaapl64.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00051256 _____ (Microsoft Corporation) C:\windows\system32\Drivers\pciidex.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00050176 _____ (Microsoft Corporation) C:\windows\system32\Drivers\raspppoe.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00049968 _____ (Validity Sensors, Inc.) C:\windows\system32\Drivers\vfs101a.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00049664 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbehci.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00049256 _____ (LSI Logic) C:\windows\system32\Drivers\symc8xx.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00048232 _____ (LSI Logic) C:\windows\system32\Drivers\sym_u3.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00047104 _____ (Microsoft Corporation) C:\windows\system32\Drivers\processr.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00046592 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WpdUsb.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00046592 _____ (Microsoft Corporation) C:\windows\system32\Drivers\qwavedrv.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00045624 _____ (Microsoft Corporation) C:\windows\system32\Drivers\sisraid2.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00044648 _____ (LSI Logic) C:\windows\system32\Drivers\sym_hi.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00041984 _____ (Microsoft Corporation) C:\windows\system32\Drivers\umbus.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00040960 _____ (Microsoft Corporation) C:\windows\system32\Drivers\RNDISMP.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00040448 _____ (Microsoft Corporation) C:\windows\system32\Drivers\watchdog.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00040448 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tcpipreg.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00035328 _____ () C:\windows\system32\Drivers\parclass.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00032640 _____ (Microsoft Corporation) C:\windows\system32\Drivers\USBCAMD2.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00029696 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tunnel.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00029696 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tdtcp.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00029184 _____ (Microsoft Corporation) C:\windows\system32\Drivers\vgapnp.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00029184 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbuhci.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00029184 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tssecsrv.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00029184 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tape.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00028672 _____ (Microsoft Corporation) C:\windows\system32\Drivers\vga.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00026624 _____ (Microsoft Corporation) C:\windows\system32\Drivers\wacompen.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00026624 _____ (Microsoft Corporation) C:\windows\system32\Drivers\sermouse.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00026112 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tdi.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00024120 _____ (Microsoft Corporation) C:\windows\system32\Drivers\wd.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00024064 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbprint.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00024064 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbohci.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00023552 _____ (Microsoft Corporation) C:\windows\system32\Drivers\serenum.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00023040 _____ (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) C:\windows\system32\Drivers\secdrv.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00020992 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ws2ifsl.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00020992 _____ (Microsoft Corporation) C:\windows\system32\Drivers\smclib.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00020536 _____ (VIA Technologies, Inc.) C:\windows\system32\Drivers\viaide.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00019512 _____ (Microsoft Corporation) C:\windows\system32\Drivers\wmilib.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00019456 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usb8023.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00019432 _____ (Microsoft Corporation) C:\windows\system32\Drivers\spldr.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00018432 _____ (Microsoft Corporation) C:\windows\system32\Drivers\TUNMP.SYS.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00016440 _____ (Microsoft Corporation) C:\windows\system32\Drivers\pciide.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00016384 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tdpipe.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00016384 _____ (Microsoft Corporation) C:\windows\system32\Drivers\sfloppy.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00014848 _____ (Microsoft Corporation) C:\windows\system32\Drivers\sffdisk.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00014848 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rasacd.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00014336 _____ (Microsoft Corporation) C:\windows\system32\Drivers\wmiacpi.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00014336 _____ (Microsoft Corporation) C:\windows\system32\Drivers\sffp_mmc.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00013824 _____ (Microsoft Corporation) C:\windows\system32\Drivers\sffp_sd.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00013032 _____ (Microsoft Corporation) C:\windows\system32\Drivers\swenum.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00011264 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rootmdm.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00009728 _____ (Microsoft Corporation) C:\windows\system32\Drivers\umpass.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00007552 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbd.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\Drivers\RDPENCDD.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\Drivers\RDPCDD.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00006518 _____ C:\Users\Administrator\Desktop\RKreport[0]_S_01022014_225332.txt
2014-01-02 22:53 - 2014-01-02 22:53 - 00006144 _____ (Microsoft Corporation) C:\windows\system32\Drivers\null.sys.bak
2014-01-02 22:52 - 2014-01-02 22:53 - 00024064 _____ (Microsoft Corporation) C:\windows\system32\Drivers\nsiproxy.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 04735488 _____ (Intel Corporation) C:\windows\system32\Drivers\NETw5v64.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 01252352 _____ (Agere Systems) C:\windows\system32\Drivers\agrsm64.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00948736 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hdaudbus.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00901568 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dxgkrnl.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00738264 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ndis.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00695296 _____ (Microsoft Corporation) C:\windows\system32\Drivers\bthport.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00620032 _____ (Microsoft Corporation) C:\windows\system32\Drivers\http.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00516480 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecdd.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00486456 _____ (Adaptec, Inc.) C:\windows\system32\Drivers\adp94xx.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00438328 _____ (LSI Corporation, Inc.) C:\windows\system32\Drivers\MegaSR.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00404992 _____ (Microsoft Corporation) C:\windows\system32\Drivers\afd.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00397368 _____ (Emulex) C:\windows\system32\Drivers\elxstor.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00388120 _____ (Intel Corporation) C:\windows\system32\Drivers\iaStor.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00347112 _____ (Microsoft Corporation) C:\windows\system32\Drivers\netio.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00342584 _____ (Adaptec, Inc.) C:\windows\system32\Drivers\adpahci.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00325608 _____ (Microsoft Corporation) C:\windows\system32\Drivers\acpi.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00310760 _____ (Microsoft Corporation) C:\windows\system32\Drivers\msrpc.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00290872 _____ (Intel Corporation) C:\windows\system32\Drivers\iaStorV.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00275456 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb10.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00275456 _____ (Microsoft Corporation) C:\windows\system32\Drivers\HdAudio.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00275432 _____ (Microsoft Corporation) C:\windows\system32\Drivers\fltMgr.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00248320 _____ (Microsoft Corporation) C:\windows\system32\Drivers\netbt.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00215528 _____ (Microsoft Corporation) C:\windows\system32\Drivers\msiscsi.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00214016 _____ (Broadcom Corporation) C:\windows\system32\Drivers\b57nd60a.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00199728 _____ (Alps Electric Co., Ltd.) C:\windows\system32\Drivers\Apfiltr.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00198144 _____ (Microsoft Corporation) C:\windows\system32\Drivers\fastfat.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00188416 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ks.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00187904 _____ (Microsoft Corporation) C:\windows\system32\Drivers\exfat.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00185912 _____ (Adaptec, Inc.) C:\windows\system32\Drivers\adpu320.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00169472 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ndiswan.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00166888 _____ (Microsoft Corporation) C:\windows\system32\Drivers\FWPKCLNT.SYS.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00164840 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Classpnp.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00155112 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ecache.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00146176 _____ (Intel Corporation) C:\windows\system32\Drivers\E1G6032E.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00145408 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Dot4.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00139264 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxdav.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00135680 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00128056 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mpio.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00126520 _____ (Adaptec, Inc.) C:\windows\system32\Drivers\adpu160m.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00124984 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ataport.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00122368 _____ (Microsoft Corporation) C:\windows\system32\Drivers\drmk.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00119296 _____ (Microsoft Corporation) C:\windows\system32\Drivers\irda.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00119296 _____ (Microsoft Corporation) C:\windows\system32\Drivers\bridge.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00115712 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ipnat.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00115712 _____ (Microsoft Corporation) C:\windows\system32\Drivers\bthpan.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00113720 _____ (Microsoft Corporation) C:\windows\system32\Drivers\msdsm.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00113720 _____ (LSI Logic) C:\windows\system32\Drivers\lsi_scsi.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00113720 _____ (LSI Logic) C:\windows\system32\Drivers\lsi_fc.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00109568 _____ (Microsoft Corporation) C:\windows\system32\Drivers\luafv.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00107008 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb20.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00105016 _____ (LSI Logic) C:\windows\system32\Drivers\lsi_sas.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00099368 _____ (Broadcom Corporation.) C:\windows\system32\Drivers\btwavdt.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00098816 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dxg.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00097792 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dfsc.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00091192 _____ (Adaptec, Inc.) C:\windows\system32\Drivers\arcsas.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00090680 _____ (Adaptec, Inc.) C:\windows\system32\Drivers\arc.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00090624 _____ (Microsoft Corporation) C:\windows\system32\Drivers\cdfs.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00090624 _____ (Microsoft Corporation) C:\windows\system32\Drivers\bowser.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00088168 _____ (Adaptec, Inc.) C:\windows\system32\Drivers\djsvs.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00086528 _____ (Brother Industries Ltd.) C:\windows\system32\Drivers\BrSerId.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00081408 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mpsdrv.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00079872 _____ (Microsoft Corporation) C:\windows\system32\Drivers\cdrom.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00076288 _____ (Microsoft Corporation) C:\windows\system32\Drivers\IPMIDrv.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00070200 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mountmgr.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00070200 _____ (Microsoft Corporation) C:\windows\system32\Drivers\fileinfo.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00068152 _____ (Microsoft Corporation) C:\windows\system32\Drivers\GAGP30KX.SYS.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00067584 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ipfltdrv.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00067104 _____ (ITE Tech. Inc. ) C:\windows\system32\Drivers\itecir.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00067032 _____ (Microsoft Corporation) C:\windows\system32\Drivers\disk.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00065024 _____ (Microsoft Corporation) C:\windows\system32\Drivers\1394bus.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00064568 _____ (Microsoft Corporation) C:\windows\system32\Drivers\AGP440.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00064000 _____ (Microsoft Corporation) C:\windows\system32\Drivers\i8042prt.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00059904 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ndproxy.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00059880 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mup.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00059392 _____ (Microsoft Corporation) C:\windows\system32\Drivers\lltdio.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00055296 _____ (Microsoft Corporation) C:\windows\system32\Drivers\blbdrive.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00051816 _____ (IBM Corporation) C:\windows\system32\Drivers\nfrd960.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00050688 _____ (Microsoft Corporation) C:\windows\system32\Drivers\bthmodem.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00050688 _____ (Microsoft Corporation) C:\windows\system32\Drivers\amdk8.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00049152 _____ (Microsoft Corporation) C:\windows\system32\Drivers\monitor.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00049152 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hidclass.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00048128 _____ (Microsoft Corporation) C:\windows\system32\Drivers\intelppm.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00047672 _____ (Hewlett-Packard Company) C:\windows\system32\Drivers\HpCISSs.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00047104 _____ (Brother Industries Ltd.) C:\windows\system32\Drivers\BrSerWdm.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00044648 _____ (Intel Corp./ICP vortex GmbH) C:\windows\system32\Drivers\iirsp.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00044544 _____ (Microsoft Corporation) C:\windows\system32\Drivers\npfs.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00044544 _____ (Microsoft Corporation) C:\windows\system32\Drivers\netbios.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00042496 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Dot4usb.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00042040 _____ (Microsoft Corporation) C:\windows\system32\Drivers\kbdclass.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00041984 _____ (Microsoft Corporation) C:\windows\system32\Drivers\circlass.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00040448 _____ (Microsoft Corporation) C:\windows\system32\Drivers\modem.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00040296 _____ (Hewlett-Packard Corporation) C:\windows\system32\Drivers\Accelerometer.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00039992 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mouclass.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00039400 _____ (Microsoft Corporation) C:\windows\system32\Drivers\crashdmp.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00039016 _____ (LSI Logic Corporation) C:\windows\system32\Drivers\Mraid35x.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00037480 _____ (Integrated Technology Express, Inc.) C:\windows\system32\Drivers\iteraid.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00037480 _____ (Integrated Technology Express, Inc.) C:\windows\system32\Drivers\iteatapi.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00035896 _____ (Microsoft Corporation) C:\windows\system32\Drivers\i2omp.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00035896 _____ (LSI Corporation) C:\windows\system32\Drivers\megasas.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00035328 _____ (Microsoft Corporation) C:\windows\system32\Drivers\BTHUSB.SYS.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00034872 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mssmbios.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00034304 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hidbth.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00033280 _____ (Microsoft Corporation) C:\windows\system32\Drivers\filetrace.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00033240 _____ (GEAR Software Inc.) C:\windows\system32\Drivers\GEARAspiWDM.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00031616 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hidparse.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00031288 _____ (Microsoft Corporation) C:\windows\system32\Drivers\msahci.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00030776 _____ (Microsoft Corporation) C:\windows\system32\Drivers\battc.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00029696 _____ (Microsoft Corporation) C:\windows\system32\Drivers\fdc.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00029656 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Dumpata.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00027704 _____ (Microsoft Corporation) C:\windows\system32\Drivers\crcdisk.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00026984 _____ (Hewlett-Packard Corporation) C:\windows\system32\Drivers\hpdskflt.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00026112 _____ (Microsoft Corporation) C:\windows\system32\Drivers\msfs.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00026112 _____ (Microsoft Corporation) C:\windows\system32\Drivers\bthenum.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00025928 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00025600 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hidir.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00025088 _____ (GARMIN Corp.) C:\windows\system32\Drivers\grmngen.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00024576 _____ (Microsoft Corporation) C:\windows\system32\Drivers\flpydisk.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00024064 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ndistapi.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00023608 _____ (Microsoft Corporation) C:\windows\system32\Drivers\isapnp.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00023608 _____ (Microsoft Corporation) C:\windows\system32\Drivers\compbatt.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00022584 _____ (Microsoft Corporation) C:\windows\system32\Drivers\atapi.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00022528 _____ (Microsoft Corporation) C:\windows\system32\Drivers\kbdhid.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00022528 _____ (Apple Inc.) C:\windows\system32\Drivers\netaapl64.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00022016 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ndisuio.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00022016 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mcd.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00022016 _____ (Microsoft Corporation) C:\windows\system32\Drivers\asyncmac.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00020864 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksthunk.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00020536 _____ (Microsoft Corporation) C:\windows\system32\Drivers\i2omgmt.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00020536 _____ (CMD Technology, Inc.) C:\windows\system32\Drivers\cmdide.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00019968 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mouhid.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00019968 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Dot4Prt.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00019968 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Diskdump.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00019752 _____ (Broadcom Corporation.) C:\windows\system32\Drivers\btwrchid.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00019512 _____ (Microsoft Corporation) C:\windows\system32\Drivers\intelide.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00018488 _____ (Microsoft Corporation) C:\windows\system32\Drivers\amdide.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00018488 _____ (Acer Laboratories Inc.) C:\windows\system32\Drivers\aliide.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00018432 _____ (Hewlett-Packard Development Company, L.P.) C:\windows\system32\Drivers\HpqKbFiltr.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00018432 _____ (Brother Industries, Ltd.) C:\windows\system32\Drivers\BrFiltLo.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00017976 _____ (Microsoft Corporation) C:\windows\system32\Drivers\msisadrv.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00017792 _____ (Microsoft Corporation) C:\windows\system32\Drivers\CmBatt.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00017536 _____ (GARMIN Corp.) C:\windows\system32\Drivers\grmn0200.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00017408 _____ (Microsoft Corporation) C:\windows\system32\Drivers\irenum.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00016896 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dxapi.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00016512 _____ (GARMIN Corp.) C:\windows\system32\Drivers\grmn0400.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00016384 _____ (Microsoft Corporation) C:\windows\system32\Drivers\fs_rec.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00015872 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hidusb.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00015616 _____ (Microsoft Corporation) C:\windows\system32\Drivers\bdasup.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00014976 _____ (Brother Industries Ltd.) C:\windows\system32\Drivers\BrUsbMdm.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00014720 _____ (Brother Industries Ltd.) C:\windows\system32\Drivers\BrUsbSer.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00012800 _____ (GARMIN Corp.) C:\windows\system32\Drivers\grmnusb.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00011776 _____ (GARMIN Corp.) C:\windows\system32\Drivers\grmn1200.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00011008 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mskssrv.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00008704 _____ (Microsoft Corporation) C:\windows\system32\Drivers\errdev.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00008704 _____ (Brother Industries, Ltd.) C:\windows\system32\Drivers\BrFiltUp.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00007936 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mstee.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00007040 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mspclock.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00006656 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mspqm.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00006144 _____ (Microsoft Corporation) C:\windows\system32\Drivers\drmkaud.sys.bak
2014-01-02 22:49 - 2014-01-02 22:53 - 00000000 ____D C:\Users\Administrator\Desktop\RK_Quarantine
2014-01-02 22:48 - 2014-01-02 22:49 - 03810304 _____ C:\Users\Administrator\Downloads\RogueKiller.exe
2014-01-02 18:08 - 2014-01-02 18:08 - 00000041 _____ C:\Users\Administrator\AppData\Roaming\mbam.context.scan
2013-12-07 08:12 - 2013-12-07 08:12 - 00001111 _____ C:\Users\Administrator\Documents\ESET online scan.txt
2013-12-07 00:01 - 2013-12-07 00:01 - 00000000 ____D C:\Program Files (x86)\ESET
2013-12-06 23:56 - 2014-01-02 23:23 - 00000680 _____ C:\Users\Administrator\AppData\Local\d3d9caps.dat
2013-12-06 23:56 - 2013-12-06 23:56 - 00000000 ____D C:\Users\Administrator\AppData\Local\Google
2013-12-06 21:09 - 2013-12-06 21:09 - 00291606 _____ C:\Users\*user*\Downloads\TCPView (1).zip
2013-12-06 21:08 - 2013-12-06 21:08 - 00291606 _____ C:\Users\*user*\Downloads\TCPView.zip
2013-12-06 17:26 - 2013-12-06 17:26 - 00003832 _____ C:\windows\System32\Tasks\Security Center Update - 3154091738
2013-12-06 17:26 - 2013-12-06 17:26 - 00000000 ____D C:\Users\*user*\AppData\Roaming\Xoaztex
2013-12-06 17:25 - 2013-12-06 17:25 - 00003832 _____ C:\windows\System32\Tasks\Security Center Update - 2639795876
2013-12-06 17:25 - 2013-12-06 17:25 - 00003828 _____ C:\windows\System32\Tasks\Security Center Update - 2679734896
2013-12-06 17:25 - 2013-12-06 17:25 - 00000000 ____D C:\Users\*user*\AppData\Roaming\Vyrousi
2013-12-06 17:25 - 2013-12-06 17:25 - 00000000 ____D C:\Users\*user*\AppData\Roaming\Idseemoc
2013-12-06 17:24 - 2013-12-06 17:24 - 00003830 _____ C:\windows\System32\Tasks\Security Center Update - 124462569
2013-12-06 17:23 - 2013-12-06 17:23 - 00003828 _____ C:\windows\System32\Tasks\Security Center Update - 2359199964
2013-12-06 17:23 - 2013-12-06 17:23 - 00000000 ____D C:\Users\*user*\AppData\Roaming\Ykivcy
2013-12-06 17:22 - 2013-12-06 17:22 - 00003832 _____ C:\windows\System32\Tasks\Security Center Update - 2360659064
2013-12-06 17:22 - 2013-12-06 17:22 - 00003828 _____ C:\windows\System32\Tasks\Security Center Update - 3903052156
2013-12-06 17:22 - 2013-12-06 17:22 - 00000000 ____D C:\Users\*user*\AppData\Roaming\Zagoak
2013-12-06 17:22 - 2013-12-06 17:22 - 00000000 ____D C:\Users\*user*\AppData\Roaming\Rizuazb
2013-12-06 17:21 - 2013-12-06 17:21 - 00003828 _____ C:\windows\System32\Tasks\Security Center Update - 2863506064
2013-12-06 17:21 - 2013-12-06 17:21 - 00000000 ____D C:\Users\*user*\AppData\Roaming\Vehyse
2013-12-06 17:20 - 2013-12-06 17:20 - 00003824 _____ C:\windows\System32\Tasks\Security Center Update - 4115803536
2013-12-06 17:19 - 2013-12-06 17:19 - 00003828 _____ C:\windows\System32\Tasks\Security Center Update - 3737816061
2013-12-06 17:19 - 2013-12-06 17:19 - 00000000 ____D C:\Users\*user*\AppData\Roaming\Gezeut
2013-12-06 17:19 - 2013-12-06 17:19 - 00000000 ____D C:\Users\*user*\AppData\Roaming\Fetyra
2013-12-06 17:18 - 2013-12-06 17:18 - 00003828 _____ C:\windows\System32\Tasks\Security Center Update - 1055816976
2013-12-06 17:18 - 2013-12-06 17:18 - 00000000 ____D C:\Users\*user*\AppData\Roaming\Fuitifa
2013-12-06 17:17 - 2013-12-06 17:17 - 00003830 _____ C:\windows\System32\Tasks\Security Center Update - 992505961
2013-12-06 17:17 - 2013-12-06 17:17 - 00000000 ____D C:\Users\*user*\AppData\Roaming\Gouserc
2013-12-06 17:16 - 2013-12-06 17:16 - 00003834 _____ C:\windows\System32\Tasks\Security Center Update - 589180701
2013-12-06 17:16 - 2013-12-06 17:16 - 00003826 _____ C:\windows\System32\Tasks\Security Center Update - 915616505
2013-12-06 17:16 - 2013-12-06 17:16 - 00000000 ____D C:\Users\*user*\AppData\Roaming\Uzfibufa
2013-12-06 17:16 - 2013-12-06 17:16 - 00000000 ____D C:\Users\*user*\AppData\Roaming\Urcefu
2013-12-06 17:15 - 2013-12-06 17:15 - 00003824 _____ C:\windows\System32\Tasks\Security Center Update - 3081185136
2013-12-06 17:15 - 2013-12-06 17:15 - 00000000 ____D C:\Users\*user*\AppData\Roaming\Ziuwba
2013-12-06 17:14 - 2013-12-06 17:14 - 00000000 ____D C:\Users\*user*\AppData\Roaming\Malwarebytes
2013-12-06 17:12 - 2013-12-06 17:12 - 00003832 _____ C:\windows\System32\Tasks\Security Center Update - 820770416
2013-12-06 17:12 - 2013-12-06 17:12 - 00000000 ____D C:\Users\*user*\AppData\Roaming\Qeunezha
2013-12-06 17:11 - 2013-12-06 17:11 - 00003824 _____ C:\windows\System32\Tasks\Security Center Update - 1853788960
2013-12-06 17:11 - 2013-12-06 17:11 - 00000000 ____D C:\Users\*user*\AppData\Roaming\Epqyqy
2013-12-06 17:10 - 2013-12-06 23:31 - 00000000 ____D C:\Users\*user*\AppData\Roaming\Kyerri
2013-12-06 17:10 - 2013-12-06 17:10 - 00003826 _____ C:\windows\System32\Tasks\Security Center Update - 1736419887
2013-12-06 17:09 - 2013-12-06 17:09 - 00003836 _____ C:\windows\System32\Tasks\Security Center Update - 1733702126
2013-12-06 17:09 - 2013-12-06 17:09 - 00000000 ____D C:\Users\*user*\AppData\Roaming\Zagiusow
2013-12-06 17:08 - 2013-12-06 17:08 - 00003824 _____ C:\windows\System32\Tasks\Security Center Update - 1104061209
2013-12-06 17:08 - 2013-12-06 17:08 - 00000000 ____D C:\Users\*user*\AppData\Roaming\Syeryp
2013-12-06 17:07 - 2013-12-06 17:07 - 00003828 _____ C:\windows\System32\Tasks\Security Center Update - 104876607
2013-12-06 17:07 - 2013-12-06 17:07 - 00000000 ____D C:\Users\*user*\AppData\Roaming\Neohcav
2013-12-06 17:06 - 2013-12-06 17:06 - 00003832 _____ C:\windows\System32\Tasks\Security Center Update - 1144123063
2013-12-06 17:06 - 2013-12-06 17:06 - 00000000 ____D C:\Users\*user*\AppData\Roaming\Tyebwedi
2013-12-06 17:05 - 2013-12-06 17:05 - 00003828 _____ C:\windows\System32\Tasks\Security Center Update - 3241642843
2013-12-06 17:05 - 2013-12-06 17:05 - 00000000 ____D C:\Users\*user*\AppData\Roaming\Cewyyf
2013-12-06 17:04 - 2013-12-06 17:04 - 00003824 _____ C:\windows\System32\Tasks\Security Center Update - 306113306
2013-12-06 17:04 - 2013-12-06 17:04 - 00000000 ____D C:\Users\*user*\AppData\Roaming\Ryehru
2013-12-06 17:03 - 2013-12-06 17:03 - 00003830 _____ C:\windows\System32\Tasks\Security Center Update - 3434255297
2013-12-06 17:03 - 2013-12-06 17:03 - 00000000 ____D C:\Users\*user*\AppData\Roaming\Ytulfie
2013-12-06 17:02 - 2013-12-06 17:02 - 00003834 _____ C:\windows\System32\Tasks\Security Center Update - 4077155733
2013-12-06 17:02 - 2013-12-06 17:02 - 00003828 _____ C:\windows\System32\Tasks\Security Center Update - 31372384
2013-12-06 17:02 - 2013-12-06 17:02 - 00000000 ____D C:\Users\*user*\AppData\Roaming\Taabyvsy
2013-12-06 17:01 - 2013-12-06 17:01 - 00003832 _____ C:\windows\System32\Tasks\Security Center Update - 4256060576
2013-12-06 17:01 - 2013-12-06 17:01 - 00000000 ____D C:\Users\*user*\AppData\Roaming\Coipqyab
2013-12-06 17:01 - 2013-12-06 17:01 - 00000000 ____D C:\Users\*user*\AppData\Roaming\Bytuhi
2013-12-06 16:59 - 2013-12-06 16:59 - 00003836 _____ C:\windows\System32\Tasks\Security Center Update - 1415457980
2013-12-06 16:59 - 2013-12-06 16:59 - 00000000 ____D C:\Users\*user*\AppData\Roaming\Piniocby
2013-12-06 16:58 - 2013-12-06 16:58 - 00003824 _____ C:\windows\System32\Tasks\Security Center Update - 1026192084
2013-12-06 16:58 - 2013-12-06 16:58 - 00000000 ____D C:\Users\*user*\AppData\Roaming\Emuvek
2013-12-06 16:57 - 2013-12-06 16:57 - 00003832 _____ C:\windows\System32\Tasks\Security Center Update - 4133396903
2013-12-06 16:34 - 2013-12-06 17:31 - 00000000 ____D C:\Users\*user*\AppData\Local\VzhuPack
 
==================== One Month Modified Files and Folders =======
 
2014-01-02 23:39 - 2014-01-02 23:38 - 00013720 _____ C:\Users\Administrator\Downloads\FRST.txt
2014-01-02 23:37 - 2014-01-02 23:37 - 01931750 _____ (Farbar) C:\Users\Administrator\Downloads\FRST64.exe
2014-01-02 23:37 - 2014-01-02 23:37 - 00000000 ____D C:\FRST
2014-01-02 23:37 - 2006-11-02 10:22 - 00003216 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-02 23:37 - 2006-11-02 10:22 - 00003216 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-02 23:36 - 2013-04-13 07:58 - 00000900 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-01-02 23:36 - 2009-04-01 02:25 - 01396071 _____ C:\windows\WindowsUpdate.log
2014-01-02 23:31 - 2014-01-02 23:31 - 00003180 _____ C:\Users\Administrator\Desktop\JRT.txt
2014-01-02 23:23 - 2013-12-06 23:56 - 00000680 _____ C:\Users\Administrator\AppData\Local\d3d9caps.dat
2014-01-02 23:21 - 2009-05-15 21:48 - 00354943 _____ C:\ProgramData\nvModes.001
2014-01-02 23:18 - 2014-01-02 23:18 - 00000000 ____D C:\windows\ERUNT
2014-01-02 23:17 - 2014-01-02 23:17 - 01036305 _____ (Thisisu) C:\Users\Administrator\Downloads\JRT.exe
2014-01-02 23:08 - 2014-01-02 22:56 - 00273278 _____ C:\Users\Administrator\Downloads\SystemLook.txt
2014-01-02 22:56 - 2014-01-02 22:55 - 00139264 _____ C:\Users\Administrator\Downloads\SystemLook.exe
2014-01-02 22:53 - 2014-01-02 22:53 - 09682848 _____ (NVIDIA Corporation) C:\windows\system32\Drivers\nvlddmkm.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 01513320 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ntfs.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 01423808 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tcpip.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 01221176 _____ (QLogic Corporation) C:\windows\system32\Drivers\ql2300.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00785624 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Wdf01000.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00712704 _____ (Microsoft Corporation) C:\windows\system32\Drivers\PEAuth.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00594432 _____ (Microsoft Corporation) C:\windows\system32\Drivers\spsys.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00450560 _____ (Microsoft Corporation) C:\windows\system32\Drivers\srv.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00408024 _____ (Microsoft Corporation) C:\windows\system32\Drivers\volmgrx.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00314368 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rdpdr.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00299008 _____ (Microsoft Corporation) C:\windows\system32\Drivers\udfs.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00287744 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rdbss.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00284728 _____ (ULi Electronics Inc.) C:\windows\system32\Drivers\uliahci.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00274944 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbhub.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00267648 _____ (Microsoft Corporation) C:\windows\system32\Drivers\volsnap.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00259584 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbport.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00218112 _____ (Microsoft Corporation) C:\windows\system32\Drivers\portcls.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00209920 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rdpwd.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00203368 _____ (Microsoft Corporation) C:\windows\system32\Drivers\pcmcia.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00198656 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WUDFRd.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00197120 _____ (Realtek Corporation                                            ) C:\windows\system32\Drivers\Rtlh64.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00187392 _____ (Microsoft Corporation) C:\windows\system32\Drivers\nwifi.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00178664 _____ (Microsoft Corporation) C:\windows\system32\Drivers\pci.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00178176 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rfcomm.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00176128 _____ (Microsoft Corporation) C:\windows\system32\Drivers\srv2.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00174696 _____ (Promise Technology, Inc.) C:\windows\system32\Drivers\ulsata2.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00173112 _____ (Microsoft Corporation) C:\windows\system32\Drivers\scsiport.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00168960 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbvideo.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00164328 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Storport.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00149048 _____ (VIA Technologies Inc.,Ltd) C:\windows\system32\Drivers\vsmraid.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00148072 _____ (Promise Technology, Inc.) C:\windows\system32\Drivers\ulsata.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00145920 _____ (Microsoft Corporation) C:\windows\system32\Drivers\srvnet.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00140288 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rmcast.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00128056 _____ (NVIDIA Corporation) C:\windows\system32\Drivers\nvraid.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00126520 _____ (Microsoft Corporation) C:\windows\system32\Drivers\NV_AGP.SYS.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00126464 _____ (Microsoft Corporation) C:\windows\system32\Drivers\videoprt.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00124928 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rasl2tp.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00124008 _____ (QLogic Corporation) C:\windows\system32\Drivers\ql40xx.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00098816 _____ (Microsoft Corporation) C:\windows\system32\Drivers\raspptp.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00096768 _____ (Microsoft Corporation) C:\windows\system32\Drivers\parport.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00095744 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbccgp.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00094720 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tdx.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00094208 _____ (Microsoft Corporation) C:\windows\system32\Drivers\serial.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00094208 _____ (Microsoft Corporation) C:\windows\system32\Drivers\pacer.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00090216 _____ (Microsoft Corporation) C:\windows\system32\Drivers\sbp2port.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00088064 _____ (Microsoft Corporation) C:\windows\system32\Drivers\smb.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00087040 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WUDFPf.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00086528 _____ (Microsoft Corporation) C:\windows\system32\Drivers\wanarp.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00079360 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbcir.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00078392 _____ (Silicon Integrated Systems) C:\windows\system32\Drivers\sisraid4.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00078336 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rassstp.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00077824 _____ (Microsoft Corporation) C:\windows\system32\Drivers\USBSTOR.SYS.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00075776 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rspndr.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00072576 _____ (Microsoft Corporation) C:\windows\system32\Drivers\partmgr.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00072192 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ohci1394.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00068224 _____ (Microsoft Corporation) C:\windows\system32\Drivers\stream.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00068152 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ULIAGPKX.SYS.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00067128 _____ (Microsoft Corporation) C:\windows\system32\Drivers\UAGP35.SYS.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00067048 _____ (Microsoft Corporation) C:\windows\system32\Drivers\volmgr.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00062440 _____ (Microsoft Corporation) C:\windows\system32\Drivers\termdd.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00054376 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WdfLdr.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00054328 _____ (NVIDIA Corporation) C:\windows\system32\Drivers\nvstor.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00053760 _____ (Apple, Inc.) C:\windows\system32\Drivers\usbaapl64.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00051256 _____ (Microsoft Corporation) C:\windows\system32\Drivers\pciidex.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00050176 _____ (Microsoft Corporation) C:\windows\system32\Drivers\raspppoe.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00049968 _____ (Validity Sensors, Inc.) C:\windows\system32\Drivers\vfs101a.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00049664 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbehci.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00049256 _____ (LSI Logic) C:\windows\system32\Drivers\symc8xx.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00048232 _____ (LSI Logic) C:\windows\system32\Drivers\sym_u3.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00047104 _____ (Microsoft Corporation) C:\windows\system32\Drivers\processr.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00046592 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WpdUsb.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00046592 _____ (Microsoft Corporation) C:\windows\system32\Drivers\qwavedrv.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00045624 _____ (Microsoft Corporation) C:\windows\system32\Drivers\sisraid2.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00044648 _____ (LSI Logic) C:\windows\system32\Drivers\sym_hi.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00041984 _____ (Microsoft Corporation) C:\windows\system32\Drivers\umbus.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00040960 _____ (Microsoft Corporation) C:\windows\system32\Drivers\RNDISMP.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00040448 _____ (Microsoft Corporation) C:\windows\system32\Drivers\watchdog.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00040448 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tcpipreg.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00035328 _____ () C:\windows\system32\Drivers\parclass.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00032640 _____ (Microsoft Corporation) C:\windows\system32\Drivers\USBCAMD2.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00029696 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tunnel.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00029696 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tdtcp.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00029184 _____ (Microsoft Corporation) C:\windows\system32\Drivers\vgapnp.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00029184 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbuhci.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00029184 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tssecsrv.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00029184 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tape.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00028672 _____ (Microsoft Corporation) C:\windows\system32\Drivers\vga.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00026624 _____ (Microsoft Corporation) C:\windows\system32\Drivers\wacompen.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00026624 _____ (Microsoft Corporation) C:\windows\system32\Drivers\sermouse.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00026112 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tdi.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00024120 _____ (Microsoft Corporation) C:\windows\system32\Drivers\wd.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00024064 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbprint.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00024064 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbohci.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00023552 _____ (Microsoft Corporation) C:\windows\system32\Drivers\serenum.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00023040 _____ (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) C:\windows\system32\Drivers\secdrv.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00020992 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ws2ifsl.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00020992 _____ (Microsoft Corporation) C:\windows\system32\Drivers\smclib.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00020536 _____ (VIA Technologies, Inc.) C:\windows\system32\Drivers\viaide.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00019512 _____ (Microsoft Corporation) C:\windows\system32\Drivers\wmilib.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00019456 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usb8023.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00019432 _____ (Microsoft Corporation) C:\windows\system32\Drivers\spldr.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00018432 _____ (Microsoft Corporation) C:\windows\system32\Drivers\TUNMP.SYS.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00016440 _____ (Microsoft Corporation) C:\windows\system32\Drivers\pciide.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00016384 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tdpipe.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00016384 _____ (Microsoft Corporation) C:\windows\system32\Drivers\sfloppy.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00014848 _____ (Microsoft Corporation) C:\windows\system32\Drivers\sffdisk.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00014848 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rasacd.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00014336 _____ (Microsoft Corporation) C:\windows\system32\Drivers\wmiacpi.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00014336 _____ (Microsoft Corporation) C:\windows\system32\Drivers\sffp_mmc.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00013824 _____ (Microsoft Corporation) C:\windows\system32\Drivers\sffp_sd.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00013032 _____ (Microsoft Corporation) C:\windows\system32\Drivers\swenum.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00011264 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rootmdm.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00009728 _____ (Microsoft Corporation) C:\windows\system32\Drivers\umpass.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00007552 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbd.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\Drivers\RDPENCDD.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\Drivers\RDPCDD.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00006518 _____ C:\Users\Administrator\Desktop\RKreport[0]_S_01022014_225332.txt
2014-01-02 22:53 - 2014-01-02 22:53 - 00006144 _____ (Microsoft Corporation) C:\windows\system32\Drivers\null.sys.bak
2014-01-02 22:53 - 2014-01-02 22:52 - 00024064 _____ (Microsoft Corporation) C:\windows\system32\Drivers\nsiproxy.sys.bak
2014-01-02 22:53 - 2014-01-02 22:49 - 00000000 ____D C:\Users\Administrator\Desktop\RK_Quarantine
2014-01-02 22:52 - 2014-01-02 22:52 - 04735488 _____ (Intel Corporation) C:\windows\system32\Drivers\NETw5v64.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 01252352 _____ (Agere Systems) C:\windows\system32\Drivers\agrsm64.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00948736 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hdaudbus.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00901568 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dxgkrnl.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00738264 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ndis.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00695296 _____ (Microsoft Corporation) C:\windows\system32\Drivers\bthport.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00620032 _____ (Microsoft Corporation) C:\windows\system32\Drivers\http.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00516480 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecdd.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00486456 _____ (Adaptec, Inc.) C:\windows\system32\Drivers\adp94xx.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00438328 _____ (LSI Corporation, Inc.) C:\windows\system32\Drivers\MegaSR.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00404992 _____ (Microsoft Corporation) C:\windows\system32\Drivers\afd.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00397368 _____ (Emulex) C:\windows\system32\Drivers\elxstor.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00388120 _____ (Intel Corporation) C:\windows\system32\Drivers\iaStor.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00347112 _____ (Microsoft Corporation) C:\windows\system32\Drivers\netio.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00342584 _____ (Adaptec, Inc.) C:\windows\system32\Drivers\adpahci.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00325608 _____ (Microsoft Corporation) C:\windows\system32\Drivers\acpi.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00310760 _____ (Microsoft Corporation) C:\windows\system32\Drivers\msrpc.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00290872 _____ (Intel Corporation) C:\windows\system32\Drivers\iaStorV.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00275456 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb10.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00275456 _____ (Microsoft Corporation) C:\windows\system32\Drivers\HdAudio.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00275432 _____ (Microsoft Corporation) C:\windows\system32\Drivers\fltMgr.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00248320 _____ (Microsoft Corporation) C:\windows\system32\Drivers\netbt.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00215528 _____ (Microsoft Corporation) C:\windows\system32\Drivers\msiscsi.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00214016 _____ (Broadcom Corporation) C:\windows\system32\Drivers\b57nd60a.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00199728 _____ (Alps Electric Co., Ltd.) C:\windows\system32\Drivers\Apfiltr.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00198144 _____ (Microsoft Corporation) C:\windows\system32\Drivers\fastfat.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00188416 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ks.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00187904 _____ (Microsoft Corporation) C:\windows\system32\Drivers\exfat.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00185912 _____ (Adaptec, Inc.) C:\windows\system32\Drivers\adpu320.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00169472 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ndiswan.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00166888 _____ (Microsoft Corporation) C:\windows\system32\Drivers\FWPKCLNT.SYS.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00164840 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Classpnp.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00155112 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ecache.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00146176 _____ (Intel Corporation) C:\windows\system32\Drivers\E1G6032E.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00145408 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Dot4.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00139264 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxdav.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00135680 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00128056 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mpio.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00126520 _____ (Adaptec, Inc.) C:\windows\system32\Drivers\adpu160m.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00124984 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ataport.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00122368 _____ (Microsoft Corporation) C:\windows\system32\Drivers\drmk.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00119296 _____ (Microsoft Corporation) C:\windows\system32\Drivers\irda.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00119296 _____ (Microsoft Corporation) C:\windows\system32\Drivers\bridge.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00115712 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ipnat.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00115712 _____ (Microsoft Corporation) C:\windows\system32\Drivers\bthpan.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00113720 _____ (Microsoft Corporation) C:\windows\system32\Drivers\msdsm.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00113720 _____ (LSI Logic) C:\windows\system32\Drivers\lsi_scsi.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00113720 _____ (LSI Logic) C:\windows\system32\Drivers\lsi_fc.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00109568 _____ (Microsoft Corporation) C:\windows\system32\Drivers\luafv.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00107008 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb20.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00105016 _____ (LSI Logic) C:\windows\system32\Drivers\lsi_sas.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00099368 _____ (Broadcom Corporation.) C:\windows\system32\Drivers\btwavdt.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00098816 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dxg.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00097792 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dfsc.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00091192 _____ (Adaptec, Inc.) C:\windows\system32\Drivers\arcsas.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00090680 _____ (Adaptec, Inc.) C:\windows\system32\Drivers\arc.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00090624 _____ (Microsoft Corporation) C:\windows\system32\Drivers\cdfs.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00090624 _____ (Microsoft Corporation) C:\windows\system32\Drivers\bowser.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00088168 _____ (Adaptec, Inc.) C:\windows\system32\Drivers\djsvs.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00086528 _____ (Brother Industries Ltd.) C:\windows\system32\Drivers\BrSerId.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00081408 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mpsdrv.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00079872 _____ (Microsoft Corporation) C:\windows\system32\Drivers\cdrom.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00076288 _____ (Microsoft Corporation) C:\windows\system32\Drivers\IPMIDrv.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00070200 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mountmgr.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00070200 _____ (Microsoft Corporation) C:\windows\system32\Drivers\fileinfo.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00068152 _____ (Microsoft Corporation) C:\windows\system32\Drivers\GAGP30KX.SYS.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00067584 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ipfltdrv.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00067104 _____ (ITE Tech. Inc. ) C:\windows\system32\Drivers\itecir.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00067032 _____ (Microsoft Corporation) C:\windows\system32\Drivers\disk.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00065024 _____ (Microsoft Corporation) C:\windows\system32\Drivers\1394bus.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00064568 _____ (Microsoft Corporation) C:\windows\system32\Drivers\AGP440.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00064000 _____ (Microsoft Corporation) C:\windows\system32\Drivers\i8042prt.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00059904 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ndproxy.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00059880 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mup.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00059392 _____ (Microsoft Corporation) C:\windows\system32\Drivers\lltdio.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00055296 _____ (Microsoft Corporation) C:\windows\system32\Drivers\blbdrive.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00051816 _____ (IBM Corporation) C:\windows\system32\Drivers\nfrd960.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00050688 _____ (Microsoft Corporation) C:\windows\system32\Drivers\bthmodem.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00050688 _____ (Microsoft Corporation) C:\windows\system32\Drivers\amdk8.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00049152 _____ (Microsoft Corporation) C:\windows\system32\Drivers\monitor.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00049152 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hidclass.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00048128 _____ (Microsoft Corporation) C:\windows\system32\Drivers\intelppm.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00047672 _____ (Hewlett-Packard Company) C:\windows\system32\Drivers\HpCISSs.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00047104 _____ (Brother Industries Ltd.) C:\windows\system32\Drivers\BrSerWdm.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00044648 _____ (Intel Corp./ICP vortex GmbH) C:\windows\system32\Drivers\iirsp.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00044544 _____ (Microsoft Corporation) C:\windows\system32\Drivers\npfs.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00044544 _____ (Microsoft Corporation) C:\windows\system32\Drivers\netbios.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00042496 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Dot4usb.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00042040 _____ (Microsoft Corporation) C:\windows\system32\Drivers\kbdclass.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00041984 _____ (Microsoft Corporation) C:\windows\system32\Drivers\circlass.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00040448 _____ (Microsoft Corporation) C:\windows\system32\Drivers\modem.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00040296 _____ (Hewlett-Packard Corporation) C:\windows\system32\Drivers\Accelerometer.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00039992 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mouclass.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00039400 _____ (Microsoft Corporation) C:\windows\system32\Drivers\crashdmp.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00039016 _____ (LSI Logic Corporation) C:\windows\system32\Drivers\Mraid35x.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00037480 _____ (Integrated Technology Express, Inc.) C:\windows\system32\Drivers\iteraid.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00037480 _____ (Integrated Technology Express, Inc.) C:\windows\system32\Drivers\iteatapi.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00035896 _____ (Microsoft Corporation) C:\windows\system32\Drivers\i2omp.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00035896 _____ (LSI Corporation) C:\windows\system32\Drivers\megasas.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00035328 _____ (Microsoft Corporation) C:\windows\system32\Drivers\BTHUSB.SYS.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00034872 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mssmbios.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00034304 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hidbth.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00033280 _____ (Microsoft Corporation) C:\windows\system32\Drivers\filetrace.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00033240 _____ (GEAR Software Inc.) C:\windows\system32\Drivers\GEARAspiWDM.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00031616 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hidparse.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00031288 _____ (Microsoft Corporation) C:\windows\system32\Drivers\msahci.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00030776 _____ (Microsoft Corporation) C:\windows\system32\Drivers\battc.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00029696 _____ (Microsoft Corporation) C:\windows\system32\Drivers\fdc.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00029656 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Dumpata.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00027704 _____ (Microsoft Corporation) C:\windows\system32\Drivers\crcdisk.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00026984 _____ (Hewlett-Packard Corporation) C:\windows\system32\Drivers\hpdskflt.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00026112 _____ (Microsoft Corporation) C:\windows\system32\Drivers\msfs.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00026112 _____ (Microsoft Corporation) C:\windows\system32\Drivers\bthenum.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00025928 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00025600 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hidir.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00025088 _____ (GARMIN Corp.) C:\windows\system32\Drivers\grmngen.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00024576 _____ (Microsoft Corporation) C:\windows\system32\Drivers\flpydisk.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00024064 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ndistapi.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00023608 _____ (Microsoft Corporation) C:\windows\system32\Drivers\isapnp.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00023608 _____ (Microsoft Corporation) C:\windows\system32\Drivers\compbatt.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00022584 _____ (Microsoft Corporation) C:\windows\system32\Drivers\atapi.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00022528 _____ (Microsoft Corporation) C:\windows\system32\Drivers\kbdhid.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00022528 _____ (Apple Inc.) C:\windows\system32\Drivers\netaapl64.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00022016 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ndisuio.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00022016 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mcd.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00022016 _____ (Microsoft Corporation) C:\windows\system32\Drivers\asyncmac.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00020864 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksthunk.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00020536 _____ (Microsoft Corporation) C:\windows\system32\Drivers\i2omgmt.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00020536 _____ (CMD Technology, Inc.) C:\windows\system32\Drivers\cmdide.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00019968 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mouhid.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00019968 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Dot4Prt.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00019968 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Diskdump.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00019752 _____ (Broadcom Corporation.) C:\windows\system32\Drivers\btwrchid.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00019512 _____ (Microsoft Corporation) C:\windows\system32\Drivers\intelide.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00018488 _____ (Microsoft Corporation) C:\windows\system32\Drivers\amdide.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00018488 _____ (Acer Laboratories Inc.) C:\windows\system32\Drivers\aliide.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00018432 _____ (Hewlett-Packard Development Company, L.P.) C:\windows\system32\Drivers\HpqKbFiltr.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00018432 _____ (Brother Industries, Ltd.) C:\windows\system32\Drivers\BrFiltLo.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00017976 _____ (Microsoft Corporation) C:\windows\system32\Drivers\msisadrv.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00017792 _____ (Microsoft Corporation) C:\windows\system32\Drivers\CmBatt.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00017536 _____ (GARMIN Corp.) C:\windows\system32\Drivers\grmn0200.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00017408 _____ (Microsoft Corporation) C:\windows\system32\Drivers\irenum.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00016896 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dxapi.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00016512 _____ (GARMIN Corp.) C:\windows\system32\Drivers\grmn0400.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00016384 _____ (Microsoft Corporation) C:\windows\system32\Drivers\fs_rec.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00015872 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hidusb.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00015616 _____ (Microsoft Corporation) C:\windows\system32\Drivers\bdasup.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00014976 _____ (Brother Industries Ltd.) C:\windows\system32\Drivers\BrUsbMdm.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00014720 _____ (Brother Industries Ltd.) C:\windows\system32\Drivers\BrUsbSer.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00012800 _____ (GARMIN Corp.) C:\windows\system32\Drivers\grmnusb.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00011776 _____ (GARMIN Corp.) C:\windows\system32\Drivers\grmn1200.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00011008 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mskssrv.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00008704 _____ (Microsoft Corporation) C:\windows\system32\Drivers\errdev.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00008704 _____ (Brother Industries, Ltd.) C:\windows\system32\Drivers\BrFiltUp.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00007936 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mstee.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00007040 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mspclock.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00006656 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mspqm.sys.bak
2014-01-02 22:52 - 2014-01-02 22:52 - 00006144 _____ (Microsoft Corporation) C:\windows\system32\Drivers\drmkaud.sys.bak
2014-01-02 22:51 - 2006-11-02 07:46 - 00707520 _____ C:\windows\system32\PerfStringBackup.INI
2014-01-02 22:49 - 2014-01-02 22:48 - 03810304 _____ C:\Users\Administrator\Downloads\RogueKiller.exe
2014-01-02 22:45 - 2013-04-13 07:58 - 00000896 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-01-02 22:45 - 2009-05-16 06:27 - 00000000 ____D C:\Users\postgres
2014-01-02 22:45 - 2006-11-02 10:42 - 00000006 ____H C:\windows\Tasks\SA.DAT
2014-01-02 18:47 - 2009-04-01 02:27 - 00000012 _____ C:\windows\bthservsdp.dat
2014-01-02 18:47 - 2006-11-02 10:42 - 00032558 _____ C:\windows\Tasks\SCHEDLGU.TXT
2014-01-02 18:08 - 2014-01-02 18:08 - 00000041 _____ C:\Users\Administrator\AppData\Roaming\mbam.context.scan
2014-01-02 17:54 - 2009-05-15 21:25 - 00354943 _____ C:\ProgramData\nvModes.dat
2013-12-08 11:28 - 2012-04-13 15:54 - 00002317 _____ C:\Users\Public\Desktop\Safari.lnk
2013-12-08 11:28 - 2010-11-23 22:41 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Apple Computer
2013-12-08 11:28 - 2010-05-13 07:49 - 00000000 ____D C:\Users\Administrator\AppData\Local\Apple Computer
2013-12-07 08:12 - 2013-12-07 08:12 - 00001111 _____ C:\Users\Administrator\Documents\ESET online scan.txt
2013-12-07 08:11 - 2009-05-15 21:45 - 00000376 _____ C:\windows\ODBC.INI
2013-12-07 00:01 - 2013-12-07 00:01 - 00000000 ____D C:\Program Files (x86)\ESET
2013-12-06 23:56 - 2013-12-06 23:56 - 00000000 ____D C:\Users\Administrator\AppData\Local\Google
2013-12-06 23:53 - 2009-11-18 20:17 - 00000000 ____D C:\windows\System32\Tasks\WPD
2013-12-06 23:49 - 2010-08-11 04:47 - 00000680 _____ C:\Users\*user*\AppData\Local\d3d9caps.dat
2013-12-06 23:31 - 2013-12-06 17:10 - 00000000 ____D C:\Users\*user*\AppData\Roaming\Kyerri
2013-12-06 21:47 - 2010-10-14 20:03 - 00000000 ____D C:\UnrealTournament
2013-12-06 21:09 - 2013-12-06 21:09 - 00291606 _____ C:\Users\*user*\Downloads\TCPView (1).zip
2013-12-06 21:08 - 2013-12-06 21:08 - 00291606 _____ C:\Users\*user*\Downloads\TCPView.zip
2013-12-06 19:04 - 2008-01-20 22:26 - 00295152 _____ C:\windows\PFRO.log
2013-12-06 17:31 - 2013-12-06 16:34 - 00000000 ____D C:\Users\*user*\AppData\Local\VzhuPack
2013-12-06 17:26 - 2013-12-06 17:26 - 00003832 _____ C:\windows\System32\Tasks\Security Center Update - 3154091738
2013-12-06 17:26 - 2013-12-06 17:26 - 00000000 ____D C:\Users\*user*\AppData\Roaming\Xoaztex
2013-12-06 17:25 - 2013-12-06 17:25 - 00003832 _____ C:\windows\System32\Tasks\Security Center Update - 2639795876
2013-12-06 17:25 - 2013-12-06 17:25 - 00003828 _____ C:\windows\System32\Tasks\Security Center Update - 2679734896
2013-12-06 17:25 - 2013-12-06 17:25 - 00000000 ____D C:\Users\*user*\AppData\Roaming\Vyrousi
2013-12-06 17:25 - 2013-12-06 17:25 - 00000000 ____D C:\Users\*user*\AppData\Roaming\Idseemoc
2013-12-06 17:24 - 2013-12-06 17:24 - 00003830 _____ C:\windows\System32\Tasks\Security Center Update - 124462569
2013-12-06 17:23 - 2013-12-06 17:23 - 00003828 _____ C:\windows\System32\Tasks\Security Center Update - 2359199964
2013-12-06 17:23 - 2013-12-06 17:23 - 00000000 ____D C:\Users\*user*\AppData\Roaming\Ykivcy
2013-12-06 17:22 - 2013-12-06 17:22 - 00003832 _____ C:\windows\System32\Tasks\Security Center Update - 2360659064
2013-12-06 17:22 - 2013-12-06 17:22 - 00003828 _____ C:\windows\System32\Tasks\Security Center Update - 3903052156
2013-12-06 17:22 - 2013-12-06 17:22 - 00000000 ____D C:\Users\*user*\AppData\Roaming\Zagoak
2013-12-06 17:22 - 2013-12-06 17:22 - 00000000 ____D C:\Users\*user*\AppData\Roaming\Rizuazb
2013-12-06 17:21 - 2013-12-06 17:21 - 00003828 _____ C:\windows\System32\Tasks\Security Center Update - 2863506064
2013-12-06 17:21 - 2013-12-06 17:21 - 00000000 ____D C:\Users\*user*\AppData\Roaming\Vehyse
2013-12-06 17:20 - 2013-12-06 17:20 - 00003824 _____ C:\windows\System32\Tasks\Security Center Update - 4115803536
2013-12-06 17:19 - 2013-12-06 17:19 - 00003828 _____ C:\windows\System32\Tasks\Security Center Update - 3737816061
2013-12-06 17:19 - 2013-12-06 17:19 - 00000000 ____D C:\Users\*user*\AppData\Roaming\Gezeut
2013-12-06 17:19 - 2013-12-06 17:19 - 00000000 ____D C:\Users\*user*\AppData\Roaming\Fetyra
2013-12-06 17:18 - 2013-12-06 17:18 - 00003828 _____ C:\windows\System32\Tasks\Security Center Update - 1055816976
2013-12-06 17:18 - 2013-12-06 17:18 - 00000000 ____D C:\Users\*user*\AppData\Roaming\Fuitifa
2013-12-06 17:17 - 2013-12-06 17:17 - 00003830 _____ C:\windows\System32\Tasks\Security Center Update - 992505961
2013-12-06 17:17 - 2013-12-06 17:17 - 00000000 ____D C:\Users\*user*\AppData\Roaming\Gouserc
2013-12-06 17:16 - 2013-12-06 17:16 - 00003834 _____ C:\windows\System32\Tasks\Security Center Update - 589180701
2013-12-06 17:16 - 2013-12-06 17:16 - 00003826 _____ C:\windows\System32\Tasks\Security Center Update - 915616505
2013-12-06 17:16 - 2013-12-06 17:16 - 00000000 ____D C:\Users\*user*\AppData\Roaming\Uzfibufa
2013-12-06 17:16 - 2013-12-06 17:16 - 00000000 ____D C:\Users\*user*\AppData\Roaming\Urcefu
2013-12-06 17:16 - 2012-04-04 07:16 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-06 17:15 - 2013-12-06 17:15 - 00003824 _____ C:\windows\System32\Tasks\Security Center Update - 3081185136
2013-12-06 17:15 - 2013-12-06 17:15 - 00000000 ____D C:\Users\*user*\AppData\Roaming\Ziuwba
2013-12-06 17:14 - 2013-12-06 17:14 - 00000000 ____D C:\Users\*user*\AppData\Roaming\Malwarebytes
2013-12-06 17:12 - 2013-12-06 17:12 - 00003832 _____ C:\windows\System32\Tasks\Security Center Update - 820770416
2013-12-06 17:12 - 2013-12-06 17:12 - 00000000 ____D C:\Users\*user*\AppData\Roaming\Qeunezha
2013-12-06 17:11 - 2013-12-06 17:11 - 00003824 _____ C:\windows\System32\Tasks\Security Center Update - 1853788960
2013-12-06 17:11 - 2013-12-06 17:11 - 00000000 ____D C:\Users\*user*\AppData\Roaming\Epqyqy
2013-12-06 17:10 - 2013-12-06 17:10 - 00003826 _____ C:\windows\System32\Tasks\Security Center Update - 1736419887
2013-12-06 17:09 - 2013-12-06 17:09 - 00003836 _____ C:\windows\System32\Tasks\Security Center Update - 1733702126
2013-12-06 17:09 - 2013-12-06 17:09 - 00000000 ____D C:\Users\*user*\AppData\Roaming\Zagiusow
2013-12-06 17:08 - 2013-12-06 17:08 - 00003824 _____ C:\windows\System32\Tasks\Security Center Update - 1104061209
2013-12-06 17:08 - 2013-12-06 17:08 - 00000000 ____D C:\Users\*user*\AppData\Roaming\Syeryp
2013-12-06 17:07 - 2013-12-06 17:07 - 00003828 _____ C:\windows\System32\Tasks\Security Center Update - 104876607
2013-12-06 17:07 - 2013-12-06 17:07 - 00000000 ____D C:\Users\*user*\AppData\Roaming\Neohcav
2013-12-06 17:06 - 2013-12-06 17:06 - 00003832 _____ C:\windows\System32\Tasks\Security Center Update - 1144123063
2013-12-06 17:06 - 2013-12-06 17:06 - 00000000 ____D C:\Users\*user*\AppData\Roaming\Tyebwedi
2013-12-06 17:05 - 2013-12-06 17:05 - 00003828 _____ C:\windows\System32\Tasks\Security Center Update - 3241642843
2013-12-06 17:05 - 2013-12-06 17:05 - 00000000 ____D C:\Users\*user*\AppData\Roaming\Cewyyf
2013-12-06 17:04 - 2013-12-06 17:04 - 00003824 _____ C:\windows\System32\Tasks\Security Center Update - 306113306
2013-12-06 17:04 - 2013-12-06 17:04 - 00000000 ____D C:\Users\*user*\AppData\Roaming\Ryehru
2013-12-06 17:03 - 2013-12-06 17:03 - 00003830 _____ C:\windows\System32\Tasks\Security Center Update - 3434255297
2013-12-06 17:03 - 2013-12-06 17:03 - 00000000 ____D C:\Users\*user*\AppData\Roaming\Ytulfie
2013-12-06 17:02 - 2013-12-06 17:02 - 00003834 _____ C:\windows\System32\Tasks\Security Center Update - 4077155733
2013-12-06 17:02 - 2013-12-06 17:02 - 00003828 _____ C:\windows\System32\Tasks\Security Center Update - 31372384
2013-12-06 17:02 - 2013-12-06 17:02 - 00000000 ____D C:\Users\*user*\AppData\Roaming\Taabyvsy
2013-12-06 17:01 - 2013-12-06 17:01 - 00003832 _____ C:\windows\System32\Tasks\Security Center Update - 4256060576
2013-12-06 17:01 - 2013-12-06 17:01 - 00000000 ____D C:\Users\*user*\AppData\Roaming\Coipqyab
2013-12-06 17:01 - 2013-12-06 17:01 - 00000000 ____D C:\Users\*user*\AppData\Roaming\Bytuhi
2013-12-06 16:59 - 2013-12-06 16:59 - 00003836 _____ C:\windows\System32\Tasks\Security Center Update - 1415457980
2013-12-06 16:59 - 2013-12-06 16:59 - 00000000 ____D C:\Users\*user*\AppData\Roaming\Piniocby
2013-12-06 16:58 - 2013-12-06 16:58 - 00003824 _____ C:\windows\System32\Tasks\Security Center Update - 1026192084
2013-12-06 16:58 - 2013-12-06 16:58 - 00000000 ____D C:\Users\*user*\AppData\Roaming\Emuvek
2013-12-06 16:57 - 2013-12-06 16:57 - 00003832 _____ C:\windows\System32\Tasks\Security Center Update - 4133396903
2013-12-06 16:55 - 2009-05-15 16:19 - 00000000 ____D C:\Users\*user*
2013-12-06 16:34 - 2009-05-15 16:30 - 00000000 ____D C:\Users\*user*\AppData\Local\DigitalPersona
2013-12-06 16:21 - 2013-04-13 08:01 - 00002025 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-12-04 17:30 - 2013-04-13 07:58 - 00003896 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-12-04 17:30 - 2013-04-13 07:58 - 00003644 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore
 
Alureon:
C:\Users\*user*\AppData\Local\Temp\sexssol\suiciwd\wow.dll
 
Some content of TEMP:
====================
C:\Users\Administrator\AppData\Local\Temp\jre-6u32-windows-i586-iftw.exe
C:\Users\Administrator\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe
C:\Users\Administrator\AppData\Local\Temp\ntdll_dump.dll
C:\Users\*user*\AppData\Local\Temp\Core.dll
C:\Users\*user*\AppData\Local\Temp\hiiq.exe
C:\Users\*user*\AppData\Local\Temp\jre-7u10-windows-i586-iftw.exe
C:\Users\*user*\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe
C:\Users\*user*\AppData\Local\Temp\Setup.exe
C:\Users\*user*\AppData\Local\Temp\Window.dll
 
 
==================== Bamital & volsnap Check =================
 
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 
LastRegBack: 2014-01-02 22:51
 
==================== End Of Log ============================


#10 B-boy/StyLe/

B-boy/StyLe/

    Bleepin' Freestyler


  • Malware Response Team
  • 8,307 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Bulgaria
  • Local time:09:41 AM

Posted 04 January 2014 - 07:48 PM

Hi,

 

Please don't edit the user names because the script is not going to work due to wrong filepath.

Please download the latest version of FRST from here and run a new scan then post the logs in your next reply (but don't edit the logs please).

 

 

Regards,

Georgi


Edited by B-boy/StyLe/, 04 January 2014 - 07:49 PM.

cXfZ4wS.png


#11 jrbe

jrbe
  • Topic Starter

  • Members
  • 37 posts
  • OFFLINE
  •  
  • Local time:01:41 AM

Posted 04 January 2014 - 08:35 PM

RogueKiller V8.8.0 [Dec 27 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
 
Operating System : Windows Vista (6.0.6002 Service Pack 2) 64 bits version
Started in : Normal mode
User : Administrator [Admin rights]
Mode : Remove -- Date : 01/04/2014 20:32:56
| ARK || FAK || MBR |
 
¤¤¤ Bad processes : 9 ¤¤¤
[SUSP PATH] pymaus.exe -- C:\Users\mitalub\AppData\Roaming\Kyerri\pymaus.exe [-] -> ERROR [5]
[SUSP PATH] pymaus.exe -- C:\Users\mitalub\AppData\Roaming\Kyerri\pymaus.exe [-] -> ERROR [5]
[SUSP PATH] pymaus.exe -- C:\Users\mitalub\AppData\Roaming\Kyerri\pymaus.exe [-] -> ERROR [5]
[SUSP PATH] pymaus.exe -- C:\Users\mitalub\AppData\Roaming\Kyerri\pymaus.exe [-] -> ERROR [5]
[SUSP PATH] pymaus.exe -- C:\Users\mitalub\AppData\Roaming\Kyerri\pymaus.exe [-] -> ERROR [5]
[SUSP PATH] pymaus.exe -- C:\Users\mitalub\AppData\Roaming\Kyerri\pymaus.exe [-] -> ERROR [5]
[SUSP PATH] pymaus.exe -- C:\Users\mitalub\AppData\Roaming\Kyerri\pymaus.exe [-] -> ERROR [5]
[SUSP PATH] pymaus.exe -- C:\Users\mitalub\AppData\Roaming\Kyerri\pymaus.exe [-] -> ERROR [5]
[SUSP PATH] pymaus.exe -- C:\Users\mitalub\AppData\Roaming\Kyerri\pymaus.exe [-] -> ERROR [5]
 
¤¤¤ Registry Entries : 15 ¤¤¤
[RUN][SUSP PATH] HKCU\[...]\Run : Equqpudanougzal (C:\Users\mitalub\AppData\Roaming\Kyerri\pymaus.exe [-]) -> DELETED
[RUN][SUSP PATH] HKLM\[...]\Run : Equqpudanougzal ("C:\Users\mitalub\AppData\Roaming\Kyerri\pymaus.exe" [-]) -> DELETED
[RUN][SUSP PATH] HKLM\[...]\Wow6432Node\[...]\Run : Equqpudanougzal (C:\Users\mitalub\AppData\Roaming\Kyerri\pymaus.exe [-]) -> DELETED
[HJ POL][PUM] HKCU\[...]\System : DisableTaskMgr (0) -> NOT SELECTED
[HJ POL][PUM] HKCU\[...]\System : DisableRegistryTools (0) -> NOT SELECTED
[HJ POL][PUM] HKLM\[...]\System : DisableTaskMgr (0) -> NOT SELECTED
[HJ POL][PUM] HKLM\[...]\System : EnableLUA (0) -> NOT SELECTED
[HJ POL][PUM] HKLM\[...]\Wow6432Node\[...]\System : DisableTaskMgr (0) -> NOT SELECTED
[HJ POL][PUM] HKLM\[...]\Wow6432Node\[...]\System : EnableLUA (0) -> NOT SELECTED
[HJ DESK][PUM] HKCU\[...]\ClassicStartMenu : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> NOT SELECTED
[HJ DESK][PUM] HKCU\[...]\ClassicStartMenu : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NOT SELECTED
[HJ DESK][PUM] HKCU\[...]\ClassicStartMenu : {645FF040-5081-101B-9F08-00AA002F954E} (1) -> NOT SELECTED
[HJ DESK][PUM] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> NOT SELECTED
[HJ DESK][PUM] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NOT SELECTED
[WALLPAPER][PUM] HKCU\[...]\Desktop : WallPaper () -> NOT SELECTED
 
¤¤¤ Scheduled tasks : 31 ¤¤¤
[V2][SUSP PATH] Security Center Update - 1026192084 : C:\Users\mitalub\AppData\Roaming\Emuvek\sirai.exe [-] -> DELETED
[V2][SUSP PATH] Security Center Update - 104876607 : C:\Users\mitalub\AppData\Roaming\Neohcav\ruikk.exe [-] -> DELETED
[V2][SUSP PATH] Security Center Update - 1055816976 : C:\Users\mitalub\AppData\Roaming\Fuitifa\koiks.exe [-] -> DELETED
[V2][SUSP PATH] Security Center Update - 1104061209 : C:\Users\mitalub\AppData\Roaming\Syeryp\osexg.exe [-] -> DELETED
[V2][SUSP PATH] Security Center Update - 1144123063 : C:\Users\mitalub\AppData\Roaming\Tyebwedi\okykb.exe [-] -> DELETED
[V2][SUSP PATH] Security Center Update - 124462569 : C:\Users\mitalub\AppData\Roaming\Ifadizu\veassu.exe [x] -> DELETED
[V2][SUSP PATH] Security Center Update - 1415457980 : C:\Users\mitalub\AppData\Roaming\Piniocby\esulgao.exe [-] -> DELETED
[V2][SUSP PATH] Security Center Update - 1733702126 : C:\Users\mitalub\AppData\Roaming\Zagiusow\gokuxii.exe [-] -> DELETED
[V2][SUSP PATH] Security Center Update - 1736419887 : C:\Users\mitalub\AppData\Roaming\Kyerri\pymaus.exe [-] -> DELETED
[V2][SUSP PATH] Security Center Update - 1853788960 : C:\Users\mitalub\AppData\Roaming\Epqyqy\yrimv.exe [-] -> DELETED
[V2][SUSP PATH] Security Center Update - 2359199964 : C:\Users\mitalub\AppData\Roaming\Ykivcy\diqyigf.exe [-] -> DELETED
[V2][SUSP PATH] Security Center Update - 2360659064 : C:\Users\mitalub\AppData\Roaming\Rizuazb\oldoyri.exe [-] -> DELETED
[V2][SUSP PATH] Security Center Update - 2639795876 : C:\Users\mitalub\AppData\Roaming\Idseemoc\ocusn.exe [-] -> DELETED
[V2][SUSP PATH] Security Center Update - 2679734896 : C:\Users\mitalub\AppData\Roaming\Vyrousi\gixyv.exe [-] -> DELETED
[V2][SUSP PATH] Security Center Update - 2863506064 : C:\Users\mitalub\AppData\Roaming\Vehyse\lexepoi.exe [-] -> DELETED
[V2][SUSP PATH] Security Center Update - 306113306 : C:\Users\mitalub\AppData\Roaming\Ryehru\acewn.exe [-] -> DELETED
[V2][SUSP PATH] Security Center Update - 3081185136 : C:\Users\mitalub\AppData\Roaming\Ziuwba\cameu.exe [-] -> DELETED
[V2][SUSP PATH] Security Center Update - 31372384 : C:\Users\mitalub\AppData\Roaming\Bytuhi\ycpiahd.exe [-] -> DELETED
[V2][SUSP PATH] Security Center Update - 3154091738 : C:\Users\mitalub\AppData\Roaming\Xoaztex\omudseq.exe [-] -> DELETED
[V2][SUSP PATH] Security Center Update - 3241642843 : C:\Users\mitalub\AppData\Roaming\Cewyyf\ustodoo.exe [-] -> DELETED
[V2][SUSP PATH] Security Center Update - 3434255297 : C:\Users\mitalub\AppData\Roaming\Ytulfie\vuniyq.exe [-] -> DELETED
[V2][SUSP PATH] Security Center Update - 3737816061 : C:\Users\mitalub\AppData\Roaming\Fetyra\utebalu.exe [-] -> DELETED
[V2][SUSP PATH] Security Center Update - 3903052156 : C:\Users\mitalub\AppData\Roaming\Zagoak\izobyml.exe [-] -> DELETED
[V2][SUSP PATH] Security Center Update - 4077155733 : C:\Users\mitalub\AppData\Roaming\Taabyvsy\ulsaly.exe [-] -> DELETED
[V2][SUSP PATH] Security Center Update - 4115803536 : C:\Users\mitalub\AppData\Roaming\Gezeut\cauqi.exe [-] -> DELETED
[V2][SUSP PATH] Security Center Update - 4133396903 : C:\Users\mitalub\AppData\Roaming\Itkuofs\xasoyks.exe [x] -> DELETED
[V2][SUSP PATH] Security Center Update - 4256060576 : C:\Users\mitalub\AppData\Roaming\Coipqyab\rycoa.exe [-] -> DELETED
[V2][SUSP PATH] Security Center Update - 589180701 : C:\Users\mitalub\AppData\Roaming\Uzfibufa\cilaew.exe [-] -> DELETED
[V2][SUSP PATH] Security Center Update - 820770416 : C:\Users\mitalub\AppData\Roaming\Qeunezha\umcid.exe [-] -> DELETED
[V2][SUSP PATH] Security Center Update - 915616505 : C:\Users\mitalub\AppData\Roaming\Urcefu\docuom.exe [-] -> DELETED
[V2][SUSP PATH] Security Center Update - 992505961 : C:\Users\mitalub\AppData\Roaming\Gouserc\daifak.exe [-] -> DELETED
 
¤¤¤ Startup Entries : 0 ¤¤¤
 
¤¤¤ Web browsers : 0 ¤¤¤
 
¤¤¤ Browser Addons : 0 ¤¤¤
 
¤¤¤ Particular Files / Folders: ¤¤¤
 
¤¤¤ Driver : [NOT LOADED 0x0] ¤¤¤
 
¤¤¤ External Hives: ¤¤¤
 
¤¤¤ Infection :  ¤¤¤
 
¤¤¤ HOSTS File: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts
 
 
127.0.0.1       localhost
::1             localhost
 
 
¤¤¤ MBR Check: ¤¤¤
 
+++++ PhysicalDrive0: (\\.\PHYSICALDRIVE0 @ IDE) Hitachi HTS543232L9A300 +++++
--- User ---
[MBR] 5f3ede1b01834711853a0bb74dfd5bfa
[BSP] 0fe6ed82968378e718054fcde85ede47 : Toshiba MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 63 | Size: 295718 Mo
1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 605632512 | Size: 9523 Mo
User = LL1 ... OK!
User = LL2 ... OK!
 
Finished : << RKreport[0]_D_01042014_203256.txt >>
RKreport[0]_S_01022014_225332.txt;RKreport[0]_S_01042014_200343.txt
 
 


#12 jrbe

jrbe
  • Topic Starter

  • Members
  • 37 posts
  • OFFLINE
  •  
  • Local time:01:41 AM

Posted 04 January 2014 - 08:53 PM

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 04-01-2014
Ran by Administrator (administrator) on MITALUB-HPDV on 04-01-2014 20:37:03
Running from C:\Users\Administrator\Downloads
Windows Vista ™ Home Premium Service Pack 2 (X64) OS Language: English(US)
Internet Explorer Version 9
Boot Mode: Normal
 
==================== Processes (Whitelisted) =================
 
(NVIDIA Corporation) C:\windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\windows\System32\SLsvc.exe
(Hewlett-Packard Corporation) C:\windows\System32\hpservice.exe
(Validity Sensors, Inc.) C:\windows\System32\vfsFPService.exe
(DigitalPersona, Inc.) C:\Program Files (x86)\DigitalPersona\Bin\DpHostW.exe
(Agere Systems) C:\windows\System32\agr64svc.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(PostgreSQL Global Development Group) C:\Program Files (x86)\PostgreSQL\8.3\bin\pg_ctl.exe
() C:\windows\SMINST\BLService.exe
(PostgreSQL Global Development Group) C:\Program Files (x86)\PostgreSQL\8.3\bin\postgres.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(PostgreSQL Global Development Group) C:\Program Files (x86)\PostgreSQL\8.3\bin\postgres.exe
(PostgreSQL Global Development Group) C:\Program Files (x86)\PostgreSQL\8.3\bin\postgres.exe
(PostgreSQL Global Development Group) C:\Program Files (x86)\PostgreSQL\8.3\bin\postgres.exe
(PostgreSQL Global Development Group) C:\Program Files (x86)\PostgreSQL\8.3\bin\postgres.exe
(PostgreSQL Global Development Group) C:\Program Files (x86)\PostgreSQL\8.3\bin\postgres.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\Apoint.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCui.exe
(Sun Microsystems, Inc.) C:\Program Files\Java\jre6\bin\jusched.exe
(Microsoft Corporation) C:\windows\System32\mrt.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApMsgFwd.exe
(Alcor Micro, Corp.) C:\Program Files (x86)\Multimedia Card Reader\readericon10.exe
(DigitalPersona, Inc.) C:\Program Files (x86)\DigitalPersona\Bin\DpAgent.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(DigitalPersona, Inc.) C:\Program Files\DigitalPersona\Bin\DpAgent.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApntEx.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
() C:\Program Files (x86)\Hewlett-Packard\Shared\HpqToaster.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Health Check\HPHC_Service.exe
() C:\Users\Administrator\Downloads\RogueKiller.exe
() C:\Users\mitalub\AppData\Roaming\Kyerri\pymaus.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Users\mitalub\AppData\Roaming\Kyerri\pymaus.exe
() C:\Users\mitalub\AppData\Roaming\Kyerri\pymaus.exe
() C:\Users\mitalub\AppData\Roaming\Kyerri\pymaus.exe
() C:\Users\mitalub\AppData\Roaming\Kyerri\pymaus.exe
() C:\Users\mitalub\AppData\Roaming\Kyerri\pymaus.exe
() C:\Users\mitalub\AppData\Roaming\Kyerri\pymaus.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Users\mitalub\AppData\Roaming\Kyerri\pymaus.exe
(Farbar) C:\Users\Administrator\Downloads\FRST64 (1).exe
 
 
==================== Registry (Whitelisted) ==================
 
HKLM\...\Run: [Apoint] - C:\Program Files\Apoint2K\Apoint.exe [284160 2008-05-23] (Alps Electric Co., Ltd.)
HKLM\...\Run: [Windows Defender] - C:\Program Files\Windows Defender\MSASCui.exe [1584184 2008-01-20] (Microsoft Corporation)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Java\jre6\bin\jusched.exe [170496 2009-05-16] (Sun Microsystems, Inc.)
HKLM\...\Run: [NvCplDaemon] - RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
HKLM\...\Run: [NvMediaCenter] - RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
HKLM\...\Run: [Equqpudanougzal] - C:\Users\mitalub\AppData\Roaming\Kyerri\pymaus.exe [218288 2013-12-06] ()
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [readericon10] - C:\Program Files (x86)\Multimedia Card Reader\readericon10.exe [131072 2007-11-22] (Alcor Micro, Corp.)
HKLM-x32\...\Run: [DpAgent] - C:\Program Files (x86)\DigitalPersona\Bin\DpAgent.exe [814144 2008-07-14] (DigitalPersona, Inc.)
HKLM-x32\...\Run: [hpWirelessAssistant] - C:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe [488752 2008-04-15] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [AppleSyncNotifier] - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe [59240 2011-11-02] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [249064 2010-10-29] (Sun Microsystems, Inc.)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59280 2012-11-28] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2012-10-25] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152544 2012-12-12] (Apple Inc.)
HKLM-x32\...\Run: [Equqpudanougzal] - C:\Users\mitalub\AppData\Roaming\Kyerri\pymaus.exe [218288 2013-12-06] ()
HKCU\...\Run: [HPADVISOR] - C:\Program Files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe autorun=AUTORUN
HKCU\...\Run: [Equqpudanougzal] - C:\Users\mitalub\AppData\Roaming\Kyerri\pymaus.exe [218288 2013-12-06] ()
HKU\Default\...\Run: [HPADVISOR] - C:\Program Files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe autorun=AUTORUN
HKU\Default User\...\Run: [HPADVISOR] - C:\Program Files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe autorun=AUTORUN
HKU\mitalub\...\Run: [HPAdvisor] - C:\Program Files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe autorun=AUTORUN
HKU\mitalub\...\Run: [ehTray.exe] - C:\windows\ehome\ehtray.exe [138240 2008-01-20] (Microsoft Corporation)
HKU\mitalub\...\Run: [MobileDocuments] - C:\Program Files (x86)\Common Files\Apple\Internet Services\ubd.exe
HKU\mitalub\...\Run: [ApplePhotoStreams] - C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59872 2012-12-17] (Apple Inc.)
HKU\mitalub\...\Run: [Opera] - rundll32 "C:\Users\mitalub\AppData\Local\DigitalPersona\Opera\danhdpaeli.dll",DllRegisterServer <===== ATTENTION
HKU\mitalub\...\Run: [Equqpudanougzal] - C:\Users\mitalub\AppData\Roaming\Kyerri\pymaus.exe [218288 2013-12-06] ()
Lsa: [Notification Packages] scecli DPPWDFLT
 
==================== Internet (Whitelisted) ====================
 
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=84&bd=Pavilion&pf=cnnb
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=84&bd=Pavilion&pf=cnnb
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - {709626BC-9B12-42CF-97B9-C96EEDAF70F4} URL = http://search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=hp-pvnb
SearchScopes: HKLM - {E8CC6306-1B7D-4B06-AAFF-1A68D2670350} URL = http://www.ask.com/web?q={searchterms}&l=dis&o=ushpl
SearchScopes: HKLM-x32 - {709626BC-9B12-42CF-97B9-C96EEDAF70F4} URL = http://search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=hp-pvnb
SearchScopes: HKLM-x32 - {E8CC6306-1B7D-4B06-AAFF-1A68D2670350} URL = http://www.ask.com/web?q={searchterms}&l=dis&o=ushpl
SearchScopes: HKCU - DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/search
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 
SearchScopes: HKCU - {709626BC-9B12-42CF-97B9-C96EEDAF70F4} URL = 
SearchScopes: HKCU - {E8CC6306-1B7D-4B06-AAFF-1A68D2670350} URL = 
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
BHO-x32: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
DPF: HKLM {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} http://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection2.cab
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} -  No File
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
 
Chrome: 
=======
CHR HomePage: hxxp://www.google.com/
CHR RestoreOnStartup: "hxxp://www.google.com/"
CHR Extension: (Google Docs) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Find Replace) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfjmfciolkikfodjfdmdpdmpfbjdofek\1.2.2_0
CHR Extension: (Google Search) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Google Wallet) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0
CHR Extension: (Gmail) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1
 
==================== Services (Whitelisted) =================
 
S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2009-08-05] (Adobe Systems)
R2 Recovery Service for Windows; C:\windows\SMINST\BLService.exe [361808 2008-07-30] ()
R2 vfsFPService; C:\Windows\system32\vfsFPService.exe [719152 2008-08-24] (Validity Sensors, Inc.)
R2 vfsFPService; C:\Windows\SysWow64\vfsFPService.exe [599344 2008-08-24] (Validity Sensors, Inc.)
R2 postgresql-8.3; C:/Program Files (x86)/PostgreSQL/8.3/bin/pg_ctl.exe runservice -N "postgresql-8.3" -D "C:/Program Files (x86)/PostgreSQL/8.3/data" -w [x]
 
==================== Drivers (Whitelisted) ====================
 
R3 vfs101a; C:\Windows\System32\drivers\vfs101a.sys [49968 2008-08-24] (Validity Sensors, Inc.)
S3 IpInIp; system32\DRIVERS\ipinip.sys [x]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x]
S3 STHDA; system32\DRIVERS\stwrt64.sys [x]
 
==================== NetSvcs (Whitelisted) ===================
 
 
==================== One Month Created Files and Folders ========
 
2014-01-04 20:36 - 2014-01-04 20:36 - 01931368 _____ (Farbar) C:\Users\Administrator\Downloads\FRST64 (1).exe
2014-01-04 20:32 - 2014-01-04 20:32 - 00007520 _____ C:\Users\Administrator\Desktop\RKreport[0]_D_01042014_203256.txt
2014-01-04 20:03 - 2014-01-04 20:03 - 00007332 _____ C:\Users\Administrator\Desktop\RKreport[0]_S_01042014_200343.txt
2014-01-02 23:59 - 2014-01-02 23:59 - 00167158 _____ C:\Users\Administrator\Desktop\malware.txt.txt
2014-01-02 23:39 - 2014-01-02 23:41 - 00021225 _____ C:\Users\Administrator\Downloads\Addition.txt
2014-01-02 23:38 - 2014-01-04 20:37 - 00014332 _____ C:\Users\Administrator\Downloads\FRST.txt
2014-01-02 23:37 - 2014-01-02 23:37 - 00000000 ____D C:\FRST
2014-01-02 23:31 - 2014-01-02 23:31 - 00003180 _____ C:\Users\Administrator\Desktop\JRT.txt
2014-01-02 23:18 - 2014-01-02 23:18 - 00000000 ____D C:\windows\ERUNT
2014-01-02 23:17 - 2014-01-02 23:17 - 01036305 _____ (Thisisu) C:\Users\Administrator\Downloads\JRT.exe
2014-01-02 22:56 - 2014-01-02 23:08 - 00273278 _____ C:\Users\Administrator\Downloads\SystemLook.txt
2014-01-02 22:55 - 2014-01-02 22:56 - 00139264 _____ C:\Users\Administrator\Downloads\SystemLook.exe
2014-01-02 22:53 - 2014-01-04 20:03 - 01423808 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tcpip.sys.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00785624 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Wdf01000.sys.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00594432 _____ (Microsoft Corporation) C:\windows\system32\Drivers\spsys.sys.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00450560 _____ (Microsoft Corporation) C:\windows\system32\Drivers\srv.sys.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00408024 _____ (Microsoft Corporation) C:\windows\system32\Drivers\volmgrx.sys.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00314368 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rdpdr.sys.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00299008 _____ (Microsoft Corporation) C:\windows\system32\Drivers\udfs.sys.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00287744 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rdbss.sys.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00284728 _____ (ULi Electronics Inc.) C:\windows\system32\Drivers\uliahci.sys.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00274944 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbhub.sys.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00267648 _____ (Microsoft Corporation) C:\windows\system32\Drivers\volsnap.sys.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00259584 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbport.sys.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00209920 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rdpwd.sys.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00198656 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WUDFRd.sys.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00197120 _____ (Realtek Corporation                                            ) C:\windows\system32\Drivers\Rtlh64.sys.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00178176 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rfcomm.sys.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00176128 _____ (Microsoft Corporation) C:\windows\system32\Drivers\srv2.sys.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00174696 _____ (Promise Technology, Inc.) C:\windows\system32\Drivers\ulsata2.sys.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00173112 _____ (Microsoft Corporation) C:\windows\system32\Drivers\scsiport.sys.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00168960 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbvideo.sys.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00164328 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Storport.sys.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00149048 _____ (VIA Technologies Inc.,Ltd) C:\windows\system32\Drivers\vsmraid.sys.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00148072 _____ (Promise Technology, Inc.) C:\windows\system32\Drivers\ulsata.sys.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00145920 _____ (Microsoft Corporation) C:\windows\system32\Drivers\srvnet.sys.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00140288 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rmcast.sys.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00126464 _____ (Microsoft Corporation) C:\windows\system32\Drivers\videoprt.sys.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00095744 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbccgp.sys.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00094720 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tdx.sys.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00094208 _____ (Microsoft Corporation) C:\windows\system32\Drivers\serial.sys.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00090216 _____ (Microsoft Corporation) C:\windows\system32\Drivers\sbp2port.sys.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00088064 _____ (Microsoft Corporation) C:\windows\system32\Drivers\smb.sys.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00087040 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WUDFPf.sys.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00086528 _____ (Microsoft Corporation) C:\windows\system32\Drivers\wanarp.sys.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00079360 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbcir.sys.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00078392 _____ (Silicon Integrated Systems) C:\windows\system32\Drivers\sisraid4.sys.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00078336 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rassstp.sys.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00077824 _____ (Microsoft Corporation) C:\windows\system32\Drivers\USBSTOR.SYS.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00075776 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rspndr.sys.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00068224 _____ (Microsoft Corporation) C:\windows\system32\Drivers\stream.sys.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00068152 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ULIAGPKX.SYS.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00067128 _____ (Microsoft Corporation) C:\windows\system32\Drivers\UAGP35.SYS.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00067048 _____ (Microsoft Corporation) C:\windows\system32\Drivers\volmgr.sys.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00062440 _____ (Microsoft Corporation) C:\windows\system32\Drivers\termdd.sys.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00054376 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WdfLdr.sys.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00053760 _____ (Apple, Inc.) C:\windows\system32\Drivers\usbaapl64.sys.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00049968 _____ (Validity Sensors, Inc.) C:\windows\system32\Drivers\vfs101a.sys.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00049664 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbehci.sys.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00049256 _____ (LSI Logic) C:\windows\system32\Drivers\symc8xx.sys.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00048232 _____ (LSI Logic) C:\windows\system32\Drivers\sym_u3.sys.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00046592 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WpdUsb.sys.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00045624 _____ (Microsoft Corporation) C:\windows\system32\Drivers\sisraid2.sys.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00044648 _____ (LSI Logic) C:\windows\system32\Drivers\sym_hi.sys.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00041984 _____ (Microsoft Corporation) C:\windows\system32\Drivers\umbus.sys.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00040960 _____ (Microsoft Corporation) C:\windows\system32\Drivers\RNDISMP.sys.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00040448 _____ (Microsoft Corporation) C:\windows\system32\Drivers\watchdog.sys.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00040448 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tcpipreg.sys.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00032640 _____ (Microsoft Corporation) C:\windows\system32\Drivers\USBCAMD2.sys.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00029696 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tunnel.sys.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00029696 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tdtcp.sys.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00029184 _____ (Microsoft Corporation) C:\windows\system32\Drivers\vgapnp.sys.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00029184 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbuhci.sys.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00029184 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tssecsrv.sys.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00029184 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tape.sys.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00028672 _____ (Microsoft Corporation) C:\windows\system32\Drivers\vga.sys.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00026624 _____ (Microsoft Corporation) C:\windows\system32\Drivers\wacompen.sys.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00026624 _____ (Microsoft Corporation) C:\windows\system32\Drivers\sermouse.sys.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00026112 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tdi.sys.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00024120 _____ (Microsoft Corporation) C:\windows\system32\Drivers\wd.sys.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00024064 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbprint.sys.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00024064 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbohci.sys.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00023552 _____ (Microsoft Corporation) C:\windows\system32\Drivers\serenum.sys.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00023040 _____ (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) C:\windows\system32\Drivers\secdrv.sys.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00020992 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ws2ifsl.sys.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00020992 _____ (Microsoft Corporation) C:\windows\system32\Drivers\smclib.sys.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00020536 _____ (VIA Technologies, Inc.) C:\windows\system32\Drivers\viaide.sys.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00019512 _____ (Microsoft Corporation) C:\windows\system32\Drivers\wmilib.sys.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00019456 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usb8023.sys.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00019432 _____ (Microsoft Corporation) C:\windows\system32\Drivers\spldr.sys.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00018432 _____ (Microsoft Corporation) C:\windows\system32\Drivers\TUNMP.SYS.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00016384 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tdpipe.sys.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00016384 _____ (Microsoft Corporation) C:\windows\system32\Drivers\sfloppy.sys.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00014848 _____ (Microsoft Corporation) C:\windows\system32\Drivers\sffdisk.sys.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00014336 _____ (Microsoft Corporation) C:\windows\system32\Drivers\wmiacpi.sys.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00014336 _____ (Microsoft Corporation) C:\windows\system32\Drivers\sffp_mmc.sys.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00013824 _____ (Microsoft Corporation) C:\windows\system32\Drivers\sffp_sd.sys.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00013032 _____ (Microsoft Corporation) C:\windows\system32\Drivers\swenum.sys.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00011264 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rootmdm.sys.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00009728 _____ (Microsoft Corporation) C:\windows\system32\Drivers\umpass.sys.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00007552 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbd.sys.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\Drivers\RDPENCDD.sys.bak
2014-01-02 22:53 - 2014-01-04 20:03 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\Drivers\RDPCDD.sys.bak
2014-01-02 22:53 - 2014-01-04 20:02 - 09682848 _____ (NVIDIA Corporation) C:\windows\system32\Drivers\nvlddmkm.sys.bak
2014-01-02 22:53 - 2014-01-04 20:02 - 01513320 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ntfs.sys.bak
2014-01-02 22:53 - 2014-01-04 20:02 - 01221176 _____ (QLogic Corporation) C:\windows\system32\Drivers\ql2300.sys.bak
2014-01-02 22:53 - 2014-01-04 20:02 - 00712704 _____ (Microsoft Corporation) C:\windows\system32\Drivers\PEAuth.sys.bak
2014-01-02 22:53 - 2014-01-04 20:02 - 00218112 _____ (Microsoft Corporation) C:\windows\system32\Drivers\portcls.sys.bak
2014-01-02 22:53 - 2014-01-04 20:02 - 00203368 _____ (Microsoft Corporation) C:\windows\system32\Drivers\pcmcia.sys.bak
2014-01-02 22:53 - 2014-01-04 20:02 - 00187392 _____ (Microsoft Corporation) C:\windows\system32\Drivers\nwifi.sys.bak
2014-01-02 22:53 - 2014-01-04 20:02 - 00178664 _____ (Microsoft Corporation) C:\windows\system32\Drivers\pci.sys.bak
2014-01-02 22:53 - 2014-01-04 20:02 - 00128056 _____ (NVIDIA Corporation) C:\windows\system32\Drivers\nvraid.sys.bak
2014-01-02 22:53 - 2014-01-04 20:02 - 00126520 _____ (Microsoft Corporation) C:\windows\system32\Drivers\NV_AGP.SYS.bak
2014-01-02 22:53 - 2014-01-04 20:02 - 00124928 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rasl2tp.sys.bak
2014-01-02 22:53 - 2014-01-04 20:02 - 00124008 _____ (QLogic Corporation) C:\windows\system32\Drivers\ql40xx.sys.bak
2014-01-02 22:53 - 2014-01-04 20:02 - 00098816 _____ (Microsoft Corporation) C:\windows\system32\Drivers\raspptp.sys.bak
2014-01-02 22:53 - 2014-01-04 20:02 - 00096768 _____ (Microsoft Corporation) C:\windows\system32\Drivers\parport.sys.bak
2014-01-02 22:53 - 2014-01-04 20:02 - 00094208 _____ (Microsoft Corporation) C:\windows\system32\Drivers\pacer.sys.bak
2014-01-02 22:53 - 2014-01-04 20:02 - 00072576 _____ (Microsoft Corporation) C:\windows\system32\Drivers\partmgr.sys.bak
2014-01-02 22:53 - 2014-01-04 20:02 - 00072192 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ohci1394.sys.bak
2014-01-02 22:53 - 2014-01-04 20:02 - 00054328 _____ (NVIDIA Corporation) C:\windows\system32\Drivers\nvstor.sys.bak
2014-01-02 22:53 - 2014-01-04 20:02 - 00051256 _____ (Microsoft Corporation) C:\windows\system32\Drivers\pciidex.sys.bak
2014-01-02 22:53 - 2014-01-04 20:02 - 00050176 _____ (Microsoft Corporation) C:\windows\system32\Drivers\raspppoe.sys.bak
2014-01-02 22:53 - 2014-01-04 20:02 - 00047104 _____ (Microsoft Corporation) C:\windows\system32\Drivers\processr.sys.bak
2014-01-02 22:53 - 2014-01-04 20:02 - 00046592 _____ (Microsoft Corporation) C:\windows\system32\Drivers\qwavedrv.sys.bak
2014-01-02 22:53 - 2014-01-04 20:02 - 00035328 _____ () C:\windows\system32\Drivers\parclass.sys.bak
2014-01-02 22:53 - 2014-01-04 20:02 - 00016440 _____ (Microsoft Corporation) C:\windows\system32\Drivers\pciide.sys.bak
2014-01-02 22:53 - 2014-01-04 20:02 - 00014848 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rasacd.sys.bak
2014-01-02 22:53 - 2014-01-04 20:02 - 00006144 _____ (Microsoft Corporation) C:\windows\system32\Drivers\null.sys.bak
2014-01-02 22:53 - 2014-01-02 22:53 - 00006518 _____ C:\Users\Administrator\Desktop\RKreport[0]_S_01022014_225332.txt
2014-01-02 22:52 - 2014-01-04 20:02 - 04735488 _____ (Intel Corporation) C:\windows\system32\Drivers\NETw5v64.sys.bak
2014-01-02 22:52 - 2014-01-04 20:02 - 00738264 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ndis.sys.bak
2014-01-02 22:52 - 2014-01-04 20:02 - 00620032 _____ (Microsoft Corporation) C:\windows\system32\Drivers\http.sys.bak
2014-01-02 22:52 - 2014-01-04 20:02 - 00516480 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecdd.sys.bak
2014-01-02 22:52 - 2014-01-04 20:02 - 00438328 _____ (LSI Corporation, Inc.) C:\windows\system32\Drivers\MegaSR.sys.bak
2014-01-02 22:52 - 2014-01-04 20:02 - 00388120 _____ (Intel Corporation) C:\windows\system32\Drivers\iaStor.sys.bak
2014-01-02 22:52 - 2014-01-04 20:02 - 00347112 _____ (Microsoft Corporation) C:\windows\system32\Drivers\netio.sys.bak
2014-01-02 22:52 - 2014-01-04 20:02 - 00310760 _____ (Microsoft Corporation) C:\windows\system32\Drivers\msrpc.sys.bak
2014-01-02 22:52 - 2014-01-04 20:02 - 00290872 _____ (Intel Corporation) C:\windows\system32\Drivers\iaStorV.sys.bak
2014-01-02 22:52 - 2014-01-04 20:02 - 00275456 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb10.sys.bak
2014-01-02 22:52 - 2014-01-04 20:02 - 00248320 _____ (Microsoft Corporation) C:\windows\system32\Drivers\netbt.sys.bak
2014-01-02 22:52 - 2014-01-04 20:02 - 00215528 _____ (Microsoft Corporation) C:\windows\system32\Drivers\msiscsi.sys.bak
2014-01-02 22:52 - 2014-01-04 20:02 - 00188416 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ks.sys.bak
2014-01-02 22:52 - 2014-01-04 20:02 - 00169472 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ndiswan.sys.bak
2014-01-02 22:52 - 2014-01-04 20:02 - 00139264 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxdav.sys.bak
2014-01-02 22:52 - 2014-01-04 20:02 - 00135680 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb.sys.bak
2014-01-02 22:52 - 2014-01-04 20:02 - 00128056 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mpio.sys.bak
2014-01-02 22:52 - 2014-01-04 20:02 - 00119296 _____ (Microsoft Corporation) C:\windows\system32\Drivers\irda.sys.bak
2014-01-02 22:52 - 2014-01-04 20:02 - 00115712 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ipnat.sys.bak
2014-01-02 22:52 - 2014-01-04 20:02 - 00113720 _____ (Microsoft Corporation) C:\windows\system32\Drivers\msdsm.sys.bak
2014-01-02 22:52 - 2014-01-04 20:02 - 00113720 _____ (LSI Logic) C:\windows\system32\Drivers\lsi_scsi.sys.bak
2014-01-02 22:52 - 2014-01-04 20:02 - 00113720 _____ (LSI Logic) C:\windows\system32\Drivers\lsi_fc.sys.bak
2014-01-02 22:52 - 2014-01-04 20:02 - 00109568 _____ (Microsoft Corporation) C:\windows\system32\Drivers\luafv.sys.bak
2014-01-02 22:52 - 2014-01-04 20:02 - 00107008 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb20.sys.bak
2014-01-02 22:52 - 2014-01-04 20:02 - 00105016 _____ (LSI Logic) C:\windows\system32\Drivers\lsi_sas.sys.bak
2014-01-02 22:52 - 2014-01-04 20:02 - 00081408 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mpsdrv.sys.bak
2014-01-02 22:52 - 2014-01-04 20:02 - 00076288 _____ (Microsoft Corporation) C:\windows\system32\Drivers\IPMIDrv.sys.bak
2014-01-02 22:52 - 2014-01-04 20:02 - 00070200 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mountmgr.sys.bak
2014-01-02 22:52 - 2014-01-04 20:02 - 00067584 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ipfltdrv.sys.bak
2014-01-02 22:52 - 2014-01-04 20:02 - 00067104 _____ (ITE Tech. Inc. ) C:\windows\system32\Drivers\itecir.sys.bak
2014-01-02 22:52 - 2014-01-04 20:02 - 00064000 _____ (Microsoft Corporation) C:\windows\system32\Drivers\i8042prt.sys.bak
2014-01-02 22:52 - 2014-01-04 20:02 - 00059904 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ndproxy.sys.bak
2014-01-02 22:52 - 2014-01-04 20:02 - 00059880 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mup.sys.bak
2014-01-02 22:52 - 2014-01-04 20:02 - 00059392 _____ (Microsoft Corporation) C:\windows\system32\Drivers\lltdio.sys.bak
2014-01-02 22:52 - 2014-01-04 20:02 - 00051816 _____ (IBM Corporation) C:\windows\system32\Drivers\nfrd960.sys.bak
2014-01-02 22:52 - 2014-01-04 20:02 - 00049152 _____ (Microsoft Corporation) C:\windows\system32\Drivers\monitor.sys.bak
2014-01-02 22:52 - 2014-01-04 20:02 - 00048128 _____ (Microsoft Corporation) C:\windows\system32\Drivers\intelppm.sys.bak
2014-01-02 22:52 - 2014-01-04 20:02 - 00044648 _____ (Intel Corp./ICP vortex GmbH) C:\windows\system32\Drivers\iirsp.sys.bak
2014-01-02 22:52 - 2014-01-04 20:02 - 00044544 _____ (Microsoft Corporation) C:\windows\system32\Drivers\npfs.sys.bak
2014-01-02 22:52 - 2014-01-04 20:02 - 00044544 _____ (Microsoft Corporation) C:\windows\system32\Drivers\netbios.sys.bak
2014-01-02 22:52 - 2014-01-04 20:02 - 00042040 _____ (Microsoft Corporation) C:\windows\system32\Drivers\kbdclass.sys.bak
2014-01-02 22:52 - 2014-01-04 20:02 - 00040448 _____ (Microsoft Corporation) C:\windows\system32\Drivers\modem.sys.bak
2014-01-02 22:52 - 2014-01-04 20:02 - 00039992 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mouclass.sys.bak
2014-01-02 22:52 - 2014-01-04 20:02 - 00039016 _____ (LSI Logic Corporation) C:\windows\system32\Drivers\Mraid35x.sys.bak
2014-01-02 22:52 - 2014-01-04 20:02 - 00037480 _____ (Integrated Technology Express, Inc.) C:\windows\system32\Drivers\iteraid.sys.bak
2014-01-02 22:52 - 2014-01-04 20:02 - 00037480 _____ (Integrated Technology Express, Inc.) C:\windows\system32\Drivers\iteatapi.sys.bak
2014-01-02 22:52 - 2014-01-04 20:02 - 00035896 _____ (Microsoft Corporation) C:\windows\system32\Drivers\i2omp.sys.bak
2014-01-02 22:52 - 2014-01-04 20:02 - 00035896 _____ (LSI Corporation) C:\windows\system32\Drivers\megasas.sys.bak
2014-01-02 22:52 - 2014-01-04 20:02 - 00034872 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mssmbios.sys.bak
2014-01-02 22:52 - 2014-01-04 20:02 - 00031288 _____ (Microsoft Corporation) C:\windows\system32\Drivers\msahci.sys.bak
2014-01-02 22:52 - 2014-01-04 20:02 - 00026112 _____ (Microsoft Corporation) C:\windows\system32\Drivers\msfs.sys.bak
2014-01-02 22:52 - 2014-01-04 20:02 - 00025928 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys.bak
2014-01-02 22:52 - 2014-01-04 20:02 - 00024064 _____ (Microsoft Corporation) C:\windows\system32\Drivers\nsiproxy.sys.bak
2014-01-02 22:52 - 2014-01-04 20:02 - 00024064 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ndistapi.sys.bak
2014-01-02 22:52 - 2014-01-04 20:02 - 00023608 _____ (Microsoft Corporation) C:\windows\system32\Drivers\isapnp.sys.bak
2014-01-02 22:52 - 2014-01-04 20:02 - 00022528 _____ (Microsoft Corporation) C:\windows\system32\Drivers\kbdhid.sys.bak
2014-01-02 22:52 - 2014-01-04 20:02 - 00022528 _____ (Apple Inc.) C:\windows\system32\Drivers\netaapl64.sys.bak
2014-01-02 22:52 - 2014-01-04 20:02 - 00022016 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ndisuio.sys.bak
2014-01-02 22:52 - 2014-01-04 20:02 - 00022016 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mcd.sys.bak
2014-01-02 22:52 - 2014-01-04 20:02 - 00020864 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksthunk.sys.bak
2014-01-02 22:52 - 2014-01-04 20:02 - 00020536 _____ (Microsoft Corporation) C:\windows\system32\Drivers\i2omgmt.sys.bak
2014-01-02 22:52 - 2014-01-04 20:02 - 00019968 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mouhid.sys.bak
2014-01-02 22:52 - 2014-01-04 20:02 - 00019512 _____ (Microsoft Corporation) C:\windows\system32\Drivers\intelide.sys.bak
2014-01-02 22:52 - 2014-01-04 20:02 - 00018432 _____ (Hewlett-Packard Development Company, L.P.) C:\windows\system32\Drivers\HpqKbFiltr.sys.bak
2014-01-02 22:52 - 2014-01-04 20:02 - 00017976 _____ (Microsoft Corporation) C:\windows\system32\Drivers\msisadrv.sys.bak
2014-01-02 22:52 - 2014-01-04 20:02 - 00017408 _____ (Microsoft Corporation) C:\windows\system32\Drivers\irenum.sys.bak
2014-01-02 22:52 - 2014-01-04 20:02 - 00011008 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mskssrv.sys.bak
2014-01-02 22:52 - 2014-01-04 20:02 - 00007936 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mstee.sys.bak
2014-01-02 22:52 - 2014-01-04 20:02 - 00007040 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mspclock.sys.bak
2014-01-02 22:52 - 2014-01-04 20:02 - 00006656 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mspqm.sys.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 01252352 _____ (Agere Systems) C:\windows\system32\Drivers\agrsm64.sys.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00948736 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hdaudbus.sys.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00901568 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dxgkrnl.sys.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00695296 _____ (Microsoft Corporation) C:\windows\system32\Drivers\bthport.sys.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00486456 _____ (Adaptec, Inc.) C:\windows\system32\Drivers\adp94xx.sys.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00404992 _____ (Microsoft Corporation) C:\windows\system32\Drivers\afd.sys.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00397368 _____ (Emulex) C:\windows\system32\Drivers\elxstor.sys.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00342584 _____ (Adaptec, Inc.) C:\windows\system32\Drivers\adpahci.sys.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00325608 _____ (Microsoft Corporation) C:\windows\system32\Drivers\acpi.sys.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00275456 _____ (Microsoft Corporation) C:\windows\system32\Drivers\HdAudio.sys.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00275432 _____ (Microsoft Corporation) C:\windows\system32\Drivers\fltMgr.sys.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00214016 _____ (Broadcom Corporation) C:\windows\system32\Drivers\b57nd60a.sys.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00199728 _____ (Alps Electric Co., Ltd.) C:\windows\system32\Drivers\Apfiltr.sys.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00198144 _____ (Microsoft Corporation) C:\windows\system32\Drivers\fastfat.sys.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00187904 _____ (Microsoft Corporation) C:\windows\system32\Drivers\exfat.sys.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00185912 _____ (Adaptec, Inc.) C:\windows\system32\Drivers\adpu320.sys.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00166888 _____ (Microsoft Corporation) C:\windows\system32\Drivers\FWPKCLNT.SYS.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00164840 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Classpnp.sys.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00155112 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ecache.sys.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00146176 _____ (Intel Corporation) C:\windows\system32\Drivers\E1G6032E.sys.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00145408 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Dot4.sys.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00126520 _____ (Adaptec, Inc.) C:\windows\system32\Drivers\adpu160m.sys.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00124984 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ataport.sys.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00122368 _____ (Microsoft Corporation) C:\windows\system32\Drivers\drmk.sys.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00119296 _____ (Microsoft Corporation) C:\windows\system32\Drivers\bridge.sys.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00115712 _____ (Microsoft Corporation) C:\windows\system32\Drivers\bthpan.sys.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00099368 _____ (Broadcom Corporation.) C:\windows\system32\Drivers\btwavdt.sys.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00098816 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dxg.sys.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00097792 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dfsc.sys.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00091192 _____ (Adaptec, Inc.) C:\windows\system32\Drivers\arcsas.sys.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00090680 _____ (Adaptec, Inc.) C:\windows\system32\Drivers\arc.sys.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00090624 _____ (Microsoft Corporation) C:\windows\system32\Drivers\cdfs.sys.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00090624 _____ (Microsoft Corporation) C:\windows\system32\Drivers\bowser.sys.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00088168 _____ (Adaptec, Inc.) C:\windows\system32\Drivers\djsvs.sys.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00086528 _____ (Brother Industries Ltd.) C:\windows\system32\Drivers\BrSerId.sys.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00079872 _____ (Microsoft Corporation) C:\windows\system32\Drivers\cdrom.sys.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00070200 _____ (Microsoft Corporation) C:\windows\system32\Drivers\fileinfo.sys.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00068152 _____ (Microsoft Corporation) C:\windows\system32\Drivers\GAGP30KX.SYS.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00067032 _____ (Microsoft Corporation) C:\windows\system32\Drivers\disk.sys.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00065024 _____ (Microsoft Corporation) C:\windows\system32\Drivers\1394bus.sys.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00064568 _____ (Microsoft Corporation) C:\windows\system32\Drivers\AGP440.sys.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00055296 _____ (Microsoft Corporation) C:\windows\system32\Drivers\blbdrive.sys.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00050688 _____ (Microsoft Corporation) C:\windows\system32\Drivers\bthmodem.sys.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00050688 _____ (Microsoft Corporation) C:\windows\system32\Drivers\amdk8.sys.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00049152 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hidclass.sys.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00047672 _____ (Hewlett-Packard Company) C:\windows\system32\Drivers\HpCISSs.sys.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00047104 _____ (Brother Industries Ltd.) C:\windows\system32\Drivers\BrSerWdm.sys.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00042496 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Dot4usb.sys.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00041984 _____ (Microsoft Corporation) C:\windows\system32\Drivers\circlass.sys.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00040296 _____ (Hewlett-Packard Corporation) C:\windows\system32\Drivers\Accelerometer.sys.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00039400 _____ (Microsoft Corporation) C:\windows\system32\Drivers\crashdmp.sys.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00035328 _____ (Microsoft Corporation) C:\windows\system32\Drivers\BTHUSB.SYS.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00034304 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hidbth.sys.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00033280 _____ (Microsoft Corporation) C:\windows\system32\Drivers\filetrace.sys.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00033240 _____ (GEAR Software Inc.) C:\windows\system32\Drivers\GEARAspiWDM.sys.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00031616 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hidparse.sys.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00030776 _____ (Microsoft Corporation) C:\windows\system32\Drivers\battc.sys.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00029696 _____ (Microsoft Corporation) C:\windows\system32\Drivers\fdc.sys.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00029656 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Dumpata.sys.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00027704 _____ (Microsoft Corporation) C:\windows\system32\Drivers\crcdisk.sys.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00026984 _____ (Hewlett-Packard Corporation) C:\windows\system32\Drivers\hpdskflt.sys.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00026112 _____ (Microsoft Corporation) C:\windows\system32\Drivers\bthenum.sys.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00025600 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hidir.sys.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00025088 _____ (GARMIN Corp.) C:\windows\system32\Drivers\grmngen.sys.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00024576 _____ (Microsoft Corporation) C:\windows\system32\Drivers\flpydisk.sys.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00023608 _____ (Microsoft Corporation) C:\windows\system32\Drivers\compbatt.sys.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00022584 _____ (Microsoft Corporation) C:\windows\system32\Drivers\atapi.sys.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00022016 _____ (Microsoft Corporation) C:\windows\system32\Drivers\asyncmac.sys.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00020536 _____ (CMD Technology, Inc.) C:\windows\system32\Drivers\cmdide.sys.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00019968 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Dot4Prt.sys.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00019968 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Diskdump.sys.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00019752 _____ (Broadcom Corporation.) C:\windows\system32\Drivers\btwrchid.sys.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00018488 _____ (Microsoft Corporation) C:\windows\system32\Drivers\amdide.sys.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00018488 _____ (Acer Laboratories Inc.) C:\windows\system32\Drivers\aliide.sys.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00018432 _____ (Brother Industries, Ltd.) C:\windows\system32\Drivers\BrFiltLo.sys.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00017792 _____ (Microsoft Corporation) C:\windows\system32\Drivers\CmBatt.sys.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00017536 _____ (GARMIN Corp.) C:\windows\system32\Drivers\grmn0200.sys.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00016896 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dxapi.sys.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00016512 _____ (GARMIN Corp.) C:\windows\system32\Drivers\grmn0400.sys.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00016384 _____ (Microsoft Corporation) C:\windows\system32\Drivers\fs_rec.sys.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00015872 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hidusb.sys.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00015616 _____ (Microsoft Corporation) C:\windows\system32\Drivers\bdasup.sys.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00014976 _____ (Brother Industries Ltd.) C:\windows\system32\Drivers\BrUsbMdm.sys.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00014720 _____ (Brother Industries Ltd.) C:\windows\system32\Drivers\BrUsbSer.sys.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00012800 _____ (GARMIN Corp.) C:\windows\system32\Drivers\grmnusb.sys.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00011776 _____ (GARMIN Corp.) C:\windows\system32\Drivers\grmn1200.sys.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00008704 _____ (Microsoft Corporation) C:\windows\system32\Drivers\errdev.sys.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00008704 _____ (Brother Industries, Ltd.) C:\windows\system32\Drivers\BrFiltUp.sys.bak
2014-01-02 22:52 - 2014-01-04 20:01 - 00006144 _____ (Microsoft Corporation) C:\windows\system32\Drivers\drmkaud.sys.bak
2014-01-02 22:49 - 2014-01-04 20:32 - 00000000 ____D C:\Users\Administrator\Desktop\RK_Quarantine
2014-01-02 22:48 - 2014-01-02 22:49 - 03810304 _____ C:\Users\Administrator\Downloads\RogueKiller.exe
2014-01-02 18:12 - 2013-10-29 23:34 - 00374784 _____ (Microsoft Corporation) C:\windows\system32\SysFxUI.dll
2014-01-02 18:12 - 2013-10-29 22:55 - 00122368 _____ (Microsoft Corporation) C:\windows\system32\Drivers\drmk.sys
2014-01-02 18:12 - 2013-10-29 21:33 - 00218112 _____ (Microsoft Corporation) C:\windows\system32\Drivers\portcls.sys
2014-01-02 18:08 - 2014-01-02 18:08 - 00000041 _____ C:\Users\Administrator\AppData\Roaming\mbam.context.scan
2013-12-07 08:12 - 2013-12-07 08:12 - 00001111 _____ C:\Users\Administrator\Documents\ESET online scan.txt
2013-12-07 00:01 - 2013-12-07 00:01 - 00000000 ____D C:\Program Files (x86)\ESET
2013-12-06 23:56 - 2014-01-04 20:42 - 00000680 _____ C:\Users\Administrator\AppData\Local\d3d9caps.dat
2013-12-06 23:56 - 2013-12-06 23:56 - 00000000 ____D C:\Users\Administrator\AppData\Local\Google
2013-12-06 21:09 - 2013-12-06 21:09 - 00291606 _____ C:\Users\mitalub\Downloads\TCPView (1).zip
2013-12-06 21:08 - 2013-12-06 21:08 - 00291606 _____ C:\Users\mitalub\Downloads\TCPView.zip
2013-12-06 17:26 - 2013-12-06 17:26 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Xoaztex
2013-12-06 17:25 - 2013-12-06 17:25 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Vyrousi
2013-12-06 17:25 - 2013-12-06 17:25 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Idseemoc
2013-12-06 17:23 - 2013-12-06 17:23 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Ykivcy
2013-12-06 17:22 - 2013-12-06 17:22 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Zagoak
2013-12-06 17:22 - 2013-12-06 17:22 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Rizuazb
2013-12-06 17:21 - 2013-12-06 17:21 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Vehyse
2013-12-06 17:19 - 2013-12-06 17:19 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Gezeut
2013-12-06 17:19 - 2013-12-06 17:19 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Fetyra
2013-12-06 17:18 - 2013-12-06 17:18 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Fuitifa
2013-12-06 17:17 - 2013-12-06 17:17 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Gouserc
2013-12-06 17:16 - 2013-12-06 17:16 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Uzfibufa
2013-12-06 17:16 - 2013-12-06 17:16 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Urcefu
2013-12-06 17:15 - 2013-12-06 17:15 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Ziuwba
2013-12-06 17:14 - 2013-12-06 17:14 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Malwarebytes
2013-12-06 17:12 - 2013-12-06 17:12 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Qeunezha
2013-12-06 17:11 - 2013-12-06 17:11 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Epqyqy
2013-12-06 17:10 - 2013-12-06 23:31 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Kyerri
2013-12-06 17:09 - 2013-12-06 17:09 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Zagiusow
2013-12-06 17:08 - 2013-12-06 17:08 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Syeryp
2013-12-06 17:07 - 2013-12-06 17:07 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Neohcav
2013-12-06 17:06 - 2013-12-06 17:06 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Tyebwedi
2013-12-06 17:05 - 2013-12-06 17:05 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Cewyyf
2013-12-06 17:04 - 2013-12-06 17:04 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Ryehru
2013-12-06 17:03 - 2013-12-06 17:03 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Ytulfie
2013-12-06 17:02 - 2013-12-06 17:02 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Taabyvsy
2013-12-06 17:01 - 2013-12-06 17:01 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Coipqyab
2013-12-06 17:01 - 2013-12-06 17:01 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Bytuhi
2013-12-06 16:59 - 2013-12-06 16:59 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Piniocby
2013-12-06 16:58 - 2013-12-06 16:58 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Emuvek
2013-12-06 16:34 - 2013-12-06 17:31 - 00000000 ____D C:\Users\mitalub\AppData\Local\VzhuPack
 
==================== One Month Modified Files and Folders =======
 
2014-01-04 20:42 - 2013-12-06 23:56 - 00000680 _____ C:\Users\Administrator\AppData\Local\d3d9caps.dat
2014-01-04 20:42 - 2009-05-15 21:48 - 00354943 _____ C:\ProgramData\nvModes.001
2014-01-04 20:37 - 2014-01-02 23:38 - 00014332 _____ C:\Users\Administrator\Downloads\FRST.txt
2014-01-04 20:36 - 2014-01-04 20:36 - 01931368 _____ (Farbar) C:\Users\Administrator\Downloads\FRST64 (1).exe
2014-01-04 20:36 - 2006-11-02 10:22 - 00003216 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-04 20:36 - 2006-11-02 10:22 - 00003216 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-04 20:35 - 2013-04-13 07:58 - 00000900 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-01-04 20:32 - 2014-01-04 20:32 - 00007520 _____ C:\Users\Administrator\Desktop\RKreport[0]_D_01042014_203256.txt
2014-01-04 20:32 - 2014-01-02 22:49 - 00000000 ____D C:\Users\Administrator\Desktop\RK_Quarantine
2014-01-04 20:03 - 2014-01-04 20:03 - 00007332 _____ C:\Users\Administrator\Desktop\RKreport[0]_S_01042014_200343.txt
2014-01-04 20:03 - 2014-01-02 22:53 - 01423808 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tcpip.sys.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00785624 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Wdf01000.sys.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00594432 _____ (Microsoft Corporation) C:\windows\system32\Drivers\spsys.sys.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00450560 _____ (Microsoft Corporation) C:\windows\system32\Drivers\srv.sys.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00408024 _____ (Microsoft Corporation) C:\windows\system32\Drivers\volmgrx.sys.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00314368 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rdpdr.sys.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00299008 _____ (Microsoft Corporation) C:\windows\system32\Drivers\udfs.sys.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00287744 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rdbss.sys.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00284728 _____ (ULi Electronics Inc.) C:\windows\system32\Drivers\uliahci.sys.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00274944 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbhub.sys.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00267648 _____ (Microsoft Corporation) C:\windows\system32\Drivers\volsnap.sys.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00259584 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbport.sys.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00209920 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rdpwd.sys.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00198656 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WUDFRd.sys.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00197120 _____ (Realtek Corporation                                            ) C:\windows\system32\Drivers\Rtlh64.sys.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00178176 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rfcomm.sys.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00176128 _____ (Microsoft Corporation) C:\windows\system32\Drivers\srv2.sys.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00174696 _____ (Promise Technology, Inc.) C:\windows\system32\Drivers\ulsata2.sys.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00173112 _____ (Microsoft Corporation) C:\windows\system32\Drivers\scsiport.sys.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00168960 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbvideo.sys.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00164328 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Storport.sys.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00149048 _____ (VIA Technologies Inc.,Ltd) C:\windows\system32\Drivers\vsmraid.sys.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00148072 _____ (Promise Technology, Inc.) C:\windows\system32\Drivers\ulsata.sys.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00145920 _____ (Microsoft Corporation) C:\windows\system32\Drivers\srvnet.sys.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00140288 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rmcast.sys.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00126464 _____ (Microsoft Corporation) C:\windows\system32\Drivers\videoprt.sys.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00095744 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbccgp.sys.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00094720 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tdx.sys.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00094208 _____ (Microsoft Corporation) C:\windows\system32\Drivers\serial.sys.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00090216 _____ (Microsoft Corporation) C:\windows\system32\Drivers\sbp2port.sys.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00088064 _____ (Microsoft Corporation) C:\windows\system32\Drivers\smb.sys.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00087040 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WUDFPf.sys.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00086528 _____ (Microsoft Corporation) C:\windows\system32\Drivers\wanarp.sys.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00079360 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbcir.sys.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00078392 _____ (Silicon Integrated Systems) C:\windows\system32\Drivers\sisraid4.sys.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00078336 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rassstp.sys.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00077824 _____ (Microsoft Corporation) C:\windows\system32\Drivers\USBSTOR.SYS.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00075776 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rspndr.sys.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00068224 _____ (Microsoft Corporation) C:\windows\system32\Drivers\stream.sys.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00068152 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ULIAGPKX.SYS.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00067128 _____ (Microsoft Corporation) C:\windows\system32\Drivers\UAGP35.SYS.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00067048 _____ (Microsoft Corporation) C:\windows\system32\Drivers\volmgr.sys.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00062440 _____ (Microsoft Corporation) C:\windows\system32\Drivers\termdd.sys.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00054376 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WdfLdr.sys.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00053760 _____ (Apple, Inc.) C:\windows\system32\Drivers\usbaapl64.sys.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00049968 _____ (Validity Sensors, Inc.) C:\windows\system32\Drivers\vfs101a.sys.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00049664 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbehci.sys.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00049256 _____ (LSI Logic) C:\windows\system32\Drivers\symc8xx.sys.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00048232 _____ (LSI Logic) C:\windows\system32\Drivers\sym_u3.sys.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00046592 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WpdUsb.sys.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00045624 _____ (Microsoft Corporation) C:\windows\system32\Drivers\sisraid2.sys.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00044648 _____ (LSI Logic) C:\windows\system32\Drivers\sym_hi.sys.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00041984 _____ (Microsoft Corporation) C:\windows\system32\Drivers\umbus.sys.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00040960 _____ (Microsoft Corporation) C:\windows\system32\Drivers\RNDISMP.sys.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00040448 _____ (Microsoft Corporation) C:\windows\system32\Drivers\watchdog.sys.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00040448 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tcpipreg.sys.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00032640 _____ (Microsoft Corporation) C:\windows\system32\Drivers\USBCAMD2.sys.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00029696 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tunnel.sys.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00029696 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tdtcp.sys.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00029184 _____ (Microsoft Corporation) C:\windows\system32\Drivers\vgapnp.sys.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00029184 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbuhci.sys.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00029184 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tssecsrv.sys.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00029184 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tape.sys.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00028672 _____ (Microsoft Corporation) C:\windows\system32\Drivers\vga.sys.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00026624 _____ (Microsoft Corporation) C:\windows\system32\Drivers\wacompen.sys.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00026624 _____ (Microsoft Corporation) C:\windows\system32\Drivers\sermouse.sys.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00026112 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tdi.sys.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00024120 _____ (Microsoft Corporation) C:\windows\system32\Drivers\wd.sys.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00024064 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbprint.sys.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00024064 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbohci.sys.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00023552 _____ (Microsoft Corporation) C:\windows\system32\Drivers\serenum.sys.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00023040 _____ (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) C:\windows\system32\Drivers\secdrv.sys.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00020992 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ws2ifsl.sys.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00020992 _____ (Microsoft Corporation) C:\windows\system32\Drivers\smclib.sys.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00020536 _____ (VIA Technologies, Inc.) C:\windows\system32\Drivers\viaide.sys.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00019512 _____ (Microsoft Corporation) C:\windows\system32\Drivers\wmilib.sys.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00019456 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usb8023.sys.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00019432 _____ (Microsoft Corporation) C:\windows\system32\Drivers\spldr.sys.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00018432 _____ (Microsoft Corporation) C:\windows\system32\Drivers\TUNMP.SYS.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00016384 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tdpipe.sys.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00016384 _____ (Microsoft Corporation) C:\windows\system32\Drivers\sfloppy.sys.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00014848 _____ (Microsoft Corporation) C:\windows\system32\Drivers\sffdisk.sys.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00014336 _____ (Microsoft Corporation) C:\windows\system32\Drivers\wmiacpi.sys.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00014336 _____ (Microsoft Corporation) C:\windows\system32\Drivers\sffp_mmc.sys.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00013824 _____ (Microsoft Corporation) C:\windows\system32\Drivers\sffp_sd.sys.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00013032 _____ (Microsoft Corporation) C:\windows\system32\Drivers\swenum.sys.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00011264 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rootmdm.sys.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00009728 _____ (Microsoft Corporation) C:\windows\system32\Drivers\umpass.sys.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00007552 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbd.sys.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\Drivers\RDPENCDD.sys.bak
2014-01-04 20:03 - 2014-01-02 22:53 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\Drivers\RDPCDD.sys.bak
2014-01-04 20:02 - 2014-01-02 22:53 - 09682848 _____ (NVIDIA Corporation) C:\windows\system32\Drivers\nvlddmkm.sys.bak
2014-01-04 20:02 - 2014-01-02 22:53 - 01513320 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ntfs.sys.bak
2014-01-04 20:02 - 2014-01-02 22:53 - 01221176 _____ (QLogic Corporation) C:\windows\system32\Drivers\ql2300.sys.bak
2014-01-04 20:02 - 2014-01-02 22:53 - 00712704 _____ (Microsoft Corporation) C:\windows\system32\Drivers\PEAuth.sys.bak
2014-01-04 20:02 - 2014-01-02 22:53 - 00218112 _____ (Microsoft Corporation) C:\windows\system32\Drivers\portcls.sys.bak
2014-01-04 20:02 - 2014-01-02 22:53 - 00203368 _____ (Microsoft Corporation) C:\windows\system32\Drivers\pcmcia.sys.bak
2014-01-04 20:02 - 2014-01-02 22:53 - 00187392 _____ (Microsoft Corporation) C:\windows\system32\Drivers\nwifi.sys.bak
2014-01-04 20:02 - 2014-01-02 22:53 - 00178664 _____ (Microsoft Corporation) C:\windows\system32\Drivers\pci.sys.bak
2014-01-04 20:02 - 2014-01-02 22:53 - 00128056 _____ (NVIDIA Corporation) C:\windows\system32\Drivers\nvraid.sys.bak
2014-01-04 20:02 - 2014-01-02 22:53 - 00126520 _____ (Microsoft Corporation) C:\windows\system32\Drivers\NV_AGP.SYS.bak
2014-01-04 20:02 - 2014-01-02 22:53 - 00124928 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rasl2tp.sys.bak
2014-01-04 20:02 - 2014-01-02 22:53 - 00124008 _____ (QLogic Corporation) C:\windows\system32\Drivers\ql40xx.sys.bak
2014-01-04 20:02 - 2014-01-02 22:53 - 00098816 _____ (Microsoft Corporation) C:\windows\system32\Drivers\raspptp.sys.bak
2014-01-04 20:02 - 2014-01-02 22:53 - 00096768 _____ (Microsoft Corporation) C:\windows\system32\Drivers\parport.sys.bak
2014-01-04 20:02 - 2014-01-02 22:53 - 00094208 _____ (Microsoft Corporation) C:\windows\system32\Drivers\pacer.sys.bak
2014-01-04 20:02 - 2014-01-02 22:53 - 00072576 _____ (Microsoft Corporation) C:\windows\system32\Drivers\partmgr.sys.bak
2014-01-04 20:02 - 2014-01-02 22:53 - 00072192 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ohci1394.sys.bak
2014-01-04 20:02 - 2014-01-02 22:53 - 00054328 _____ (NVIDIA Corporation) C:\windows\system32\Drivers\nvstor.sys.bak
2014-01-04 20:02 - 2014-01-02 22:53 - 00051256 _____ (Microsoft Corporation) C:\windows\system32\Drivers\pciidex.sys.bak
2014-01-04 20:02 - 2014-01-02 22:53 - 00050176 _____ (Microsoft Corporation) C:\windows\system32\Drivers\raspppoe.sys.bak
2014-01-04 20:02 - 2014-01-02 22:53 - 00047104 _____ (Microsoft Corporation) C:\windows\system32\Drivers\processr.sys.bak
2014-01-04 20:02 - 2014-01-02 22:53 - 00046592 _____ (Microsoft Corporation) C:\windows\system32\Drivers\qwavedrv.sys.bak
2014-01-04 20:02 - 2014-01-02 22:53 - 00035328 _____ () C:\windows\system32\Drivers\parclass.sys.bak
2014-01-04 20:02 - 2014-01-02 22:53 - 00016440 _____ (Microsoft Corporation) C:\windows\system32\Drivers\pciide.sys.bak
2014-01-04 20:02 - 2014-01-02 22:53 - 00014848 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rasacd.sys.bak
2014-01-04 20:02 - 2014-01-02 22:53 - 00006144 _____ (Microsoft Corporation) C:\windows\system32\Drivers\null.sys.bak
2014-01-04 20:02 - 2014-01-02 22:52 - 04735488 _____ (Intel Corporation) C:\windows\system32\Drivers\NETw5v64.sys.bak
2014-01-04 20:02 - 2014-01-02 22:52 - 00738264 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ndis.sys.bak
2014-01-04 20:02 - 2014-01-02 22:52 - 00620032 _____ (Microsoft Corporation) C:\windows\system32\Drivers\http.sys.bak
2014-01-04 20:02 - 2014-01-02 22:52 - 00516480 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecdd.sys.bak
2014-01-04 20:02 - 2014-01-02 22:52 - 00438328 _____ (LSI Corporation, Inc.) C:\windows\system32\Drivers\MegaSR.sys.bak
2014-01-04 20:02 - 2014-01-02 22:52 - 00388120 _____ (Intel Corporation) C:\windows\system32\Drivers\iaStor.sys.bak
2014-01-04 20:02 - 2014-01-02 22:52 - 00347112 _____ (Microsoft Corporation) C:\windows\system32\Drivers\netio.sys.bak
2014-01-04 20:02 - 2014-01-02 22:52 - 00310760 _____ (Microsoft Corporation) C:\windows\system32\Drivers\msrpc.sys.bak
2014-01-04 20:02 - 2014-01-02 22:52 - 00290872 _____ (Intel Corporation) C:\windows\system32\Drivers\iaStorV.sys.bak
2014-01-04 20:02 - 2014-01-02 22:52 - 00275456 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb10.sys.bak
2014-01-04 20:02 - 2014-01-02 22:52 - 00248320 _____ (Microsoft Corporation) C:\windows\system32\Drivers\netbt.sys.bak
2014-01-04 20:02 - 2014-01-02 22:52 - 00215528 _____ (Microsoft Corporation) C:\windows\system32\Drivers\msiscsi.sys.bak
2014-01-04 20:02 - 2014-01-02 22:52 - 00188416 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ks.sys.bak
2014-01-04 20:02 - 2014-01-02 22:52 - 00169472 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ndiswan.sys.bak
2014-01-04 20:02 - 2014-01-02 22:52 - 00139264 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxdav.sys.bak
2014-01-04 20:02 - 2014-01-02 22:52 - 00135680 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb.sys.bak
2014-01-04 20:02 - 2014-01-02 22:52 - 00128056 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mpio.sys.bak
2014-01-04 20:02 - 2014-01-02 22:52 - 00119296 _____ (Microsoft Corporation) C:\windows\system32\Drivers\irda.sys.bak
2014-01-04 20:02 - 2014-01-02 22:52 - 00115712 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ipnat.sys.bak
2014-01-04 20:02 - 2014-01-02 22:52 - 00113720 _____ (Microsoft Corporation) C:\windows\system32\Drivers\msdsm.sys.bak
2014-01-04 20:02 - 2014-01-02 22:52 - 00113720 _____ (LSI Logic) C:\windows\system32\Drivers\lsi_scsi.sys.bak
2014-01-04 20:02 - 2014-01-02 22:52 - 00113720 _____ (LSI Logic) C:\windows\system32\Drivers\lsi_fc.sys.bak
2014-01-04 20:02 - 2014-01-02 22:52 - 00109568 _____ (Microsoft Corporation) C:\windows\system32\Drivers\luafv.sys.bak
2014-01-04 20:02 - 2014-01-02 22:52 - 00107008 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb20.sys.bak
2014-01-04 20:02 - 2014-01-02 22:52 - 00105016 _____ (LSI Logic) C:\windows\system32\Drivers\lsi_sas.sys.bak
2014-01-04 20:02 - 2014-01-02 22:52 - 00081408 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mpsdrv.sys.bak
2014-01-04 20:02 - 2014-01-02 22:52 - 00076288 _____ (Microsoft Corporation) C:\windows\system32\Drivers\IPMIDrv.sys.bak
2014-01-04 20:02 - 2014-01-02 22:52 - 00070200 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mountmgr.sys.bak
2014-01-04 20:02 - 2014-01-02 22:52 - 00067584 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ipfltdrv.sys.bak
2014-01-04 20:02 - 2014-01-02 22:52 - 00067104 _____ (ITE Tech. Inc. ) C:\windows\system32\Drivers\itecir.sys.bak
2014-01-04 20:02 - 2014-01-02 22:52 - 00064000 _____ (Microsoft Corporation) C:\windows\system32\Drivers\i8042prt.sys.bak
2014-01-04 20:02 - 2014-01-02 22:52 - 00059904 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ndproxy.sys.bak
2014-01-04 20:02 - 2014-01-02 22:52 - 00059880 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mup.sys.bak
2014-01-04 20:02 - 2014-01-02 22:52 - 00059392 _____ (Microsoft Corporation) C:\windows\system32\Drivers\lltdio.sys.bak
2014-01-04 20:02 - 2014-01-02 22:52 - 00051816 _____ (IBM Corporation) C:\windows\system32\Drivers\nfrd960.sys.bak
2014-01-04 20:02 - 2014-01-02 22:52 - 00049152 _____ (Microsoft Corporation) C:\windows\system32\Drivers\monitor.sys.bak
2014-01-04 20:02 - 2014-01-02 22:52 - 00048128 _____ (Microsoft Corporation) C:\windows\system32\Drivers\intelppm.sys.bak
2014-01-04 20:02 - 2014-01-02 22:52 - 00044648 _____ (Intel Corp./ICP vortex GmbH) C:\windows\system32\Drivers\iirsp.sys.bak
2014-01-04 20:02 - 2014-01-02 22:52 - 00044544 _____ (Microsoft Corporation) C:\windows\system32\Drivers\npfs.sys.bak
2014-01-04 20:02 - 2014-01-02 22:52 - 00044544 _____ (Microsoft Corporation) C:\windows\system32\Drivers\netbios.sys.bak
2014-01-04 20:02 - 2014-01-02 22:52 - 00042040 _____ (Microsoft Corporation) C:\windows\system32\Drivers\kbdclass.sys.bak
2014-01-04 20:02 - 2014-01-02 22:52 - 00040448 _____ (Microsoft Corporation) C:\windows\system32\Drivers\modem.sys.bak
2014-01-04 20:02 - 2014-01-02 22:52 - 00039992 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mouclass.sys.bak
2014-01-04 20:02 - 2014-01-02 22:52 - 00039016 _____ (LSI Logic Corporation) C:\windows\system32\Drivers\Mraid35x.sys.bak
2014-01-04 20:02 - 2014-01-02 22:52 - 00037480 _____ (Integrated Technology Express, Inc.) C:\windows\system32\Drivers\iteraid.sys.bak
2014-01-04 20:02 - 2014-01-02 22:52 - 00037480 _____ (Integrated Technology Express, Inc.) C:\windows\system32\Drivers\iteatapi.sys.bak
2014-01-04 20:02 - 2014-01-02 22:52 - 00035896 _____ (Microsoft Corporation) C:\windows\system32\Drivers\i2omp.sys.bak
2014-01-04 20:02 - 2014-01-02 22:52 - 00035896 _____ (LSI Corporation) C:\windows\system32\Drivers\megasas.sys.bak
2014-01-04 20:02 - 2014-01-02 22:52 - 00034872 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mssmbios.sys.bak
2014-01-04 20:02 - 2014-01-02 22:52 - 00031288 _____ (Microsoft Corporation) C:\windows\system32\Drivers\msahci.sys.bak
2014-01-04 20:02 - 2014-01-02 22:52 - 00026112 _____ (Microsoft Corporation) C:\windows\system32\Drivers\msfs.sys.bak
2014-01-04 20:02 - 2014-01-02 22:52 - 00025928 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys.bak
2014-01-04 20:02 - 2014-01-02 22:52 - 00024064 _____ (Microsoft Corporation) C:\windows\system32\Drivers\nsiproxy.sys.bak
2014-01-04 20:02 - 2014-01-02 22:52 - 00024064 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ndistapi.sys.bak
2014-01-04 20:02 - 2014-01-02 22:52 - 00023608 _____ (Microsoft Corporation) C:\windows\system32\Drivers\isapnp.sys.bak
2014-01-04 20:02 - 2014-01-02 22:52 - 00022528 _____ (Microsoft Corporation) C:\windows\system32\Drivers\kbdhid.sys.bak
2014-01-04 20:02 - 2014-01-02 22:52 - 00022528 _____ (Apple Inc.) C:\windows\system32\Drivers\netaapl64.sys.bak
2014-01-04 20:02 - 2014-01-02 22:52 - 00022016 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ndisuio.sys.bak
2014-01-04 20:02 - 2014-01-02 22:52 - 00022016 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mcd.sys.bak
2014-01-04 20:02 - 2014-01-02 22:52 - 00020864 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksthunk.sys.bak
2014-01-04 20:02 - 2014-01-02 22:52 - 00020536 _____ (Microsoft Corporation) C:\windows\system32\Drivers\i2omgmt.sys.bak
2014-01-04 20:02 - 2014-01-02 22:52 - 00019968 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mouhid.sys.bak
2014-01-04 20:02 - 2014-01-02 22:52 - 00019512 _____ (Microsoft Corporation) C:\windows\system32\Drivers\intelide.sys.bak
2014-01-04 20:02 - 2014-01-02 22:52 - 00018432 _____ (Hewlett-Packard Development Company, L.P.) C:\windows\system32\Drivers\HpqKbFiltr.sys.bak
2014-01-04 20:02 - 2014-01-02 22:52 - 00017976 _____ (Microsoft Corporation) C:\windows\system32\Drivers\msisadrv.sys.bak
2014-01-04 20:02 - 2014-01-02 22:52 - 00017408 _____ (Microsoft Corporation) C:\windows\system32\Drivers\irenum.sys.bak
2014-01-04 20:02 - 2014-01-02 22:52 - 00011008 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mskssrv.sys.bak
2014-01-04 20:02 - 2014-01-02 22:52 - 00007936 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mstee.sys.bak
2014-01-04 20:02 - 2014-01-02 22:52 - 00007040 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mspclock.sys.bak
2014-01-04 20:02 - 2014-01-02 22:52 - 00006656 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mspqm.sys.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 01252352 _____ (Agere Systems) C:\windows\system32\Drivers\agrsm64.sys.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00948736 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hdaudbus.sys.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00901568 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dxgkrnl.sys.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00695296 _____ (Microsoft Corporation) C:\windows\system32\Drivers\bthport.sys.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00486456 _____ (Adaptec, Inc.) C:\windows\system32\Drivers\adp94xx.sys.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00404992 _____ (Microsoft Corporation) C:\windows\system32\Drivers\afd.sys.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00397368 _____ (Emulex) C:\windows\system32\Drivers\elxstor.sys.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00342584 _____ (Adaptec, Inc.) C:\windows\system32\Drivers\adpahci.sys.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00325608 _____ (Microsoft Corporation) C:\windows\system32\Drivers\acpi.sys.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00275456 _____ (Microsoft Corporation) C:\windows\system32\Drivers\HdAudio.sys.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00275432 _____ (Microsoft Corporation) C:\windows\system32\Drivers\fltMgr.sys.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00214016 _____ (Broadcom Corporation) C:\windows\system32\Drivers\b57nd60a.sys.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00199728 _____ (Alps Electric Co., Ltd.) C:\windows\system32\Drivers\Apfiltr.sys.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00198144 _____ (Microsoft Corporation) C:\windows\system32\Drivers\fastfat.sys.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00187904 _____ (Microsoft Corporation) C:\windows\system32\Drivers\exfat.sys.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00185912 _____ (Adaptec, Inc.) C:\windows\system32\Drivers\adpu320.sys.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00166888 _____ (Microsoft Corporation) C:\windows\system32\Drivers\FWPKCLNT.SYS.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00164840 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Classpnp.sys.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00155112 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ecache.sys.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00146176 _____ (Intel Corporation) C:\windows\system32\Drivers\E1G6032E.sys.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00145408 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Dot4.sys.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00126520 _____ (Adaptec, Inc.) C:\windows\system32\Drivers\adpu160m.sys.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00124984 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ataport.sys.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00122368 _____ (Microsoft Corporation) C:\windows\system32\Drivers\drmk.sys.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00119296 _____ (Microsoft Corporation) C:\windows\system32\Drivers\bridge.sys.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00115712 _____ (Microsoft Corporation) C:\windows\system32\Drivers\bthpan.sys.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00099368 _____ (Broadcom Corporation.) C:\windows\system32\Drivers\btwavdt.sys.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00098816 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dxg.sys.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00097792 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dfsc.sys.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00091192 _____ (Adaptec, Inc.) C:\windows\system32\Drivers\arcsas.sys.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00090680 _____ (Adaptec, Inc.) C:\windows\system32\Drivers\arc.sys.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00090624 _____ (Microsoft Corporation) C:\windows\system32\Drivers\cdfs.sys.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00090624 _____ (Microsoft Corporation) C:\windows\system32\Drivers\bowser.sys.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00088168 _____ (Adaptec, Inc.) C:\windows\system32\Drivers\djsvs.sys.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00086528 _____ (Brother Industries Ltd.) C:\windows\system32\Drivers\BrSerId.sys.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00079872 _____ (Microsoft Corporation) C:\windows\system32\Drivers\cdrom.sys.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00070200 _____ (Microsoft Corporation) C:\windows\system32\Drivers\fileinfo.sys.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00068152 _____ (Microsoft Corporation) C:\windows\system32\Drivers\GAGP30KX.SYS.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00067032 _____ (Microsoft Corporation) C:\windows\system32\Drivers\disk.sys.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00065024 _____ (Microsoft Corporation) C:\windows\system32\Drivers\1394bus.sys.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00064568 _____ (Microsoft Corporation) C:\windows\system32\Drivers\AGP440.sys.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00055296 _____ (Microsoft Corporation) C:\windows\system32\Drivers\blbdrive.sys.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00050688 _____ (Microsoft Corporation) C:\windows\system32\Drivers\bthmodem.sys.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00050688 _____ (Microsoft Corporation) C:\windows\system32\Drivers\amdk8.sys.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00049152 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hidclass.sys.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00047672 _____ (Hewlett-Packard Company) C:\windows\system32\Drivers\HpCISSs.sys.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00047104 _____ (Brother Industries Ltd.) C:\windows\system32\Drivers\BrSerWdm.sys.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00042496 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Dot4usb.sys.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00041984 _____ (Microsoft Corporation) C:\windows\system32\Drivers\circlass.sys.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00040296 _____ (Hewlett-Packard Corporation) C:\windows\system32\Drivers\Accelerometer.sys.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00039400 _____ (Microsoft Corporation) C:\windows\system32\Drivers\crashdmp.sys.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00035328 _____ (Microsoft Corporation) C:\windows\system32\Drivers\BTHUSB.SYS.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00034304 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hidbth.sys.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00033280 _____ (Microsoft Corporation) C:\windows\system32\Drivers\filetrace.sys.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00033240 _____ (GEAR Software Inc.) C:\windows\system32\Drivers\GEARAspiWDM.sys.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00031616 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hidparse.sys.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00030776 _____ (Microsoft Corporation) C:\windows\system32\Drivers\battc.sys.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00029696 _____ (Microsoft Corporation) C:\windows\system32\Drivers\fdc.sys.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00029656 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Dumpata.sys.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00027704 _____ (Microsoft Corporation) C:\windows\system32\Drivers\crcdisk.sys.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00026984 _____ (Hewlett-Packard Corporation) C:\windows\system32\Drivers\hpdskflt.sys.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00026112 _____ (Microsoft Corporation) C:\windows\system32\Drivers\bthenum.sys.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00025600 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hidir.sys.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00025088 _____ (GARMIN Corp.) C:\windows\system32\Drivers\grmngen.sys.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00024576 _____ (Microsoft Corporation) C:\windows\system32\Drivers\flpydisk.sys.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00023608 _____ (Microsoft Corporation) C:\windows\system32\Drivers\compbatt.sys.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00022584 _____ (Microsoft Corporation) C:\windows\system32\Drivers\atapi.sys.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00022016 _____ (Microsoft Corporation) C:\windows\system32\Drivers\asyncmac.sys.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00020536 _____ (CMD Technology, Inc.) C:\windows\system32\Drivers\cmdide.sys.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00019968 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Dot4Prt.sys.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00019968 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Diskdump.sys.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00019752 _____ (Broadcom Corporation.) C:\windows\system32\Drivers\btwrchid.sys.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00018488 _____ (Microsoft Corporation) C:\windows\system32\Drivers\amdide.sys.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00018488 _____ (Acer Laboratories Inc.) C:\windows\system32\Drivers\aliide.sys.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00018432 _____ (Brother Industries, Ltd.) C:\windows\system32\Drivers\BrFiltLo.sys.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00017792 _____ (Microsoft Corporation) C:\windows\system32\Drivers\CmBatt.sys.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00017536 _____ (GARMIN Corp.) C:\windows\system32\Drivers\grmn0200.sys.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00016896 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dxapi.sys.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00016512 _____ (GARMIN Corp.) C:\windows\system32\Drivers\grmn0400.sys.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00016384 _____ (Microsoft Corporation) C:\windows\system32\Drivers\fs_rec.sys.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00015872 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hidusb.sys.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00015616 _____ (Microsoft Corporation) C:\windows\system32\Drivers\bdasup.sys.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00014976 _____ (Brother Industries Ltd.) C:\windows\system32\Drivers\BrUsbMdm.sys.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00014720 _____ (Brother Industries Ltd.) C:\windows\system32\Drivers\BrUsbSer.sys.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00012800 _____ (GARMIN Corp.) C:\windows\system32\Drivers\grmnusb.sys.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00011776 _____ (GARMIN Corp.) C:\windows\system32\Drivers\grmn1200.sys.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00008704 _____ (Microsoft Corporation) C:\windows\system32\Drivers\errdev.sys.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00008704 _____ (Brother Industries, Ltd.) C:\windows\system32\Drivers\BrFiltUp.sys.bak
2014-01-04 20:01 - 2014-01-02 22:52 - 00006144 _____ (Microsoft Corporation) C:\windows\system32\Drivers\drmkaud.sys.bak
2014-01-04 20:01 - 2009-04-01 02:25 - 01497571 _____ C:\windows\WindowsUpdate.log
2014-01-04 19:51 - 2006-11-02 07:46 - 00707520 _____ C:\windows\system32\PerfStringBackup.INI
2014-01-04 19:45 - 2013-04-13 07:58 - 00000896 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-01-04 19:45 - 2006-11-02 10:42 - 00000006 ____H C:\windows\Tasks\SA.DAT
2014-01-04 19:42 - 2009-04-01 02:27 - 00000012 _____ C:\windows\bthservsdp.dat
2014-01-04 19:42 - 2006-11-02 10:42 - 00032558 _____ C:\windows\Tasks\SCHEDLGU.TXT
2014-01-04 19:41 - 2009-05-15 21:25 - 00354943 _____ C:\ProgramData\nvModes.dat
2014-01-04 18:58 - 2013-09-09 02:05 - 00000000 ____D C:\windows\system32\MRT
2014-01-04 18:57 - 2006-11-02 07:35 - 90708896 _____ (Microsoft Corporation) C:\windows\system32\mrt.exe
2014-01-04 18:56 - 2006-11-02 07:34 - 00000240 _____ C:\windows\win.ini
2014-01-02 23:59 - 2014-01-02 23:59 - 00167158 _____ C:\Users\Administrator\Desktop\malware.txt.txt
2014-01-02 23:41 - 2014-01-02 23:39 - 00021225 _____ C:\Users\Administrator\Downloads\Addition.txt
2014-01-02 23:37 - 2014-01-02 23:37 - 00000000 ____D C:\FRST
2014-01-02 23:31 - 2014-01-02 23:31 - 00003180 _____ C:\Users\Administrator\Desktop\JRT.txt
2014-01-02 23:18 - 2014-01-02 23:18 - 00000000 ____D C:\windows\ERUNT
2014-01-02 23:17 - 2014-01-02 23:17 - 01036305 _____ (Thisisu) C:\Users\Administrator\Downloads\JRT.exe
2014-01-02 23:08 - 2014-01-02 22:56 - 00273278 _____ C:\Users\Administrator\Downloads\SystemLook.txt
2014-01-02 22:56 - 2014-01-02 22:55 - 00139264 _____ C:\Users\Administrator\Downloads\SystemLook.exe
2014-01-02 22:53 - 2014-01-02 22:53 - 00006518 _____ C:\Users\Administrator\Desktop\RKreport[0]_S_01022014_225332.txt
2014-01-02 22:49 - 2014-01-02 22:48 - 03810304 _____ C:\Users\Administrator\Downloads\RogueKiller.exe
2014-01-02 22:45 - 2009-05-16 06:27 - 00000000 ____D C:\Users\postgres
2014-01-02 18:08 - 2014-01-02 18:08 - 00000041 _____ C:\Users\Administrator\AppData\Roaming\mbam.context.scan
2013-12-08 11:28 - 2012-04-13 15:54 - 00002317 _____ C:\Users\Public\Desktop\Safari.lnk
2013-12-08 11:28 - 2010-11-23 22:41 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Apple Computer
2013-12-08 11:28 - 2010-05-13 07:49 - 00000000 ____D C:\Users\Administrator\AppData\Local\Apple Computer
2013-12-07 08:12 - 2013-12-07 08:12 - 00001111 _____ C:\Users\Administrator\Documents\ESET online scan.txt
2013-12-07 08:11 - 2009-05-15 21:45 - 00000376 _____ C:\windows\ODBC.INI
2013-12-07 00:01 - 2013-12-07 00:01 - 00000000 ____D C:\Program Files (x86)\ESET
2013-12-06 23:56 - 2013-12-06 23:56 - 00000000 ____D C:\Users\Administrator\AppData\Local\Google
2013-12-06 23:53 - 2009-11-18 20:17 - 00000000 ____D C:\windows\System32\Tasks\WPD
2013-12-06 23:49 - 2010-08-11 04:47 - 00000680 _____ C:\Users\mitalub\AppData\Local\d3d9caps.dat
2013-12-06 23:31 - 2013-12-06 17:10 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Kyerri
2013-12-06 21:47 - 2010-10-14 20:03 - 00000000 ____D C:\UnrealTournament
2013-12-06 21:09 - 2013-12-06 21:09 - 00291606 _____ C:\Users\mitalub\Downloads\TCPView (1).zip
2013-12-06 21:08 - 2013-12-06 21:08 - 00291606 _____ C:\Users\mitalub\Downloads\TCPView.zip
2013-12-06 19:04 - 2008-01-20 22:26 - 00295152 _____ C:\windows\PFRO.log
2013-12-06 17:31 - 2013-12-06 16:34 - 00000000 ____D C:\Users\mitalub\AppData\Local\VzhuPack
2013-12-06 17:26 - 2013-12-06 17:26 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Xoaztex
2013-12-06 17:25 - 2013-12-06 17:25 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Vyrousi
2013-12-06 17:25 - 2013-12-06 17:25 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Idseemoc
2013-12-06 17:23 - 2013-12-06 17:23 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Ykivcy
2013-12-06 17:22 - 2013-12-06 17:22 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Zagoak
2013-12-06 17:22 - 2013-12-06 17:22 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Rizuazb
2013-12-06 17:21 - 2013-12-06 17:21 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Vehyse
2013-12-06 17:19 - 2013-12-06 17:19 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Gezeut
2013-12-06 17:19 - 2013-12-06 17:19 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Fetyra
2013-12-06 17:18 - 2013-12-06 17:18 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Fuitifa
2013-12-06 17:17 - 2013-12-06 17:17 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Gouserc
2013-12-06 17:16 - 2013-12-06 17:16 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Uzfibufa
2013-12-06 17:16 - 2013-12-06 17:16 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Urcefu
2013-12-06 17:16 - 2012-04-04 07:16 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-06 17:15 - 2013-12-06 17:15 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Ziuwba
2013-12-06 17:14 - 2013-12-06 17:14 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Malwarebytes
2013-12-06 17:12 - 2013-12-06 17:12 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Qeunezha
2013-12-06 17:11 - 2013-12-06 17:11 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Epqyqy
2013-12-06 17:09 - 2013-12-06 17:09 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Zagiusow
2013-12-06 17:08 - 2013-12-06 17:08 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Syeryp
2013-12-06 17:07 - 2013-12-06 17:07 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Neohcav
2013-12-06 17:06 - 2013-12-06 17:06 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Tyebwedi
2013-12-06 17:05 - 2013-12-06 17:05 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Cewyyf
2013-12-06 17:04 - 2013-12-06 17:04 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Ryehru
2013-12-06 17:03 - 2013-12-06 17:03 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Ytulfie
2013-12-06 17:02 - 2013-12-06 17:02 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Taabyvsy
2013-12-06 17:01 - 2013-12-06 17:01 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Coipqyab
2013-12-06 17:01 - 2013-12-06 17:01 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Bytuhi
2013-12-06 16:59 - 2013-12-06 16:59 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Piniocby
2013-12-06 16:58 - 2013-12-06 16:58 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Emuvek
2013-12-06 16:55 - 2009-05-15 16:19 - 00000000 ____D C:\Users\mitalub
2013-12-06 16:34 - 2009-05-15 16:30 - 00000000 ____D C:\Users\mitalub\AppData\Local\DigitalPersona
2013-12-06 16:21 - 2013-04-13 08:01 - 00002025 _____ C:\Users\Public\Desktop\Google Chrome.lnk
 
Alureon:
C:\Users\mitalub\AppData\Local\Temp\sexssol\suiciwd\wow.dll
 
Some content of TEMP:
====================
C:\Users\Administrator\AppData\Local\Temp\jre-6u32-windows-i586-iftw.exe
C:\Users\Administrator\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe
C:\Users\Administrator\AppData\Local\Temp\ntdll_dump.dll
C:\Users\mitalub\AppData\Local\Temp\Core.dll
C:\Users\mitalub\AppData\Local\Temp\hiiq.exe
C:\Users\mitalub\AppData\Local\Temp\jre-7u10-windows-i586-iftw.exe
C:\Users\mitalub\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe
C:\Users\mitalub\AppData\Local\Temp\Setup.exe
C:\Users\mitalub\AppData\Local\Temp\Window.dll
 
 
==================== Bamital & volsnap Check =================
 
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 
LastRegBack: 2014-01-04 19:50
 
==================== End Of Log ============================


#13 jrbe

jrbe
  • Topic Starter

  • Members
  • 37 posts
  • OFFLINE
  •  
  • Local time:01:41 AM

Posted 04 January 2014 - 08:54 PM

sorry about the username thing.  Thanks for the help so far!



#14 B-boy/StyLe/

B-boy/StyLe/

    Bleepin' Freestyler


  • Malware Response Team
  • 8,307 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Bulgaria
  • Local time:09:41 AM

Posted 05 January 2014 - 01:49 PM

Hi,

 

 

No worries and thank you for the logs. :)

 

 
Please download the following file => [attachment=145603:fixlist.txt] and save it to the Desktop.
NOTE. It's important that both files, FRST and fixlist.txt are in the same location or the fix will not work.

Run FRST and press the Fix button just once and wait.
The tool will make a log on the Desktop (Fixlog.txt). Please post it to your reply.

 

 

 

Regards,

Georgi


cXfZ4wS.png


#15 jrbe

jrbe
  • Topic Starter

  • Members
  • 37 posts
  • OFFLINE
  •  
  • Local time:01:41 AM

Posted 05 January 2014 - 09:03 PM

This was strange, vista commandeered the laptop and installed 3 updates partway through the scan.  Vista sucks but that seems worse than normal, maybe the malware was rewriting itself through that? Seemed very strange and wanted to mention it.

 

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 05-01-2014
Ran by Administrator at 2014-01-05 20:43:31 Run:1
Running from C:\Users\Administrator\Downloads
Boot Mode: Normal
==============================================
 
Content of fixlist:
*****************
start
() C:\Users\mitalub\AppData\Roaming\Kyerri\pymaus.exe
HKLM\...\Run: [Equqpudanougzal] - C:\Users\mitalub\AppData\Roaming\Kyerri\pymaus.exe [218288 2013-12-06] ()
C:\Users\mitalub\AppData\Roaming\Kyerri\pymaus.exe
HKLM-x32\...\Run: [] - [x]
HKCU\...\Run: [Equqpudanougzal] - C:\Users\mitalub\AppData\Roaming\Kyerri\pymaus.exe [218288 2013-12-06] ()
HKU\mitalub\...\Run: [Opera] - rundll32 "C:\Users\mitalub\AppData\Local\DigitalPersona\Opera\danhdpaeli.dll",DllRegisterServer <===== ATTENTION
C:\Users\mitalub\AppData\Local\DigitalPersona\Opera\danhdpaeli.dll
HKU\mitalub\...\Run: [Equqpudanougzal] - C:\Users\mitalub\AppData\Roaming\Kyerri\pymaus.exe [218288 2013-12-06] ()
SearchScopes: HKLM - {E8CC6306-1B7D-4B06-AAFF-1A68D2670350} URL = http://www.ask.com/web?q={searchterms}&l=dis&o=ushpl
SearchScopes: HKLM-x32 - {E8CC6306-1B7D-4B06-AAFF-1A68D2670350} URL = http://www.ask.com/web?q={searchterms}&l=dis&o=ushpl
2013-12-06 17:26 - 2013-12-06 17:26 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Xoaztex
2013-12-06 17:25 - 2013-12-06 17:25 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Vyrousi
2013-12-06 17:25 - 2013-12-06 17:25 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Idseemoc
2013-12-06 17:23 - 2013-12-06 17:23 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Ykivcy
2013-12-06 17:22 - 2013-12-06 17:22 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Zagoak
2013-12-06 17:22 - 2013-12-06 17:22 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Rizuazb
2013-12-06 17:21 - 2013-12-06 17:21 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Vehyse
2013-12-06 17:19 - 2013-12-06 17:19 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Gezeut
2013-12-06 17:19 - 2013-12-06 17:19 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Fetyra
2013-12-06 17:18 - 2013-12-06 17:18 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Fuitifa
2013-12-06 17:17 - 2013-12-06 17:17 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Gouserc
2013-12-06 17:16 - 2013-12-06 17:16 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Uzfibufa
2013-12-06 17:16 - 2013-12-06 17:16 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Urcefu
2013-12-06 17:15 - 2013-12-06 17:15 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Ziuwba
2013-12-06 17:14 - 2013-12-06 17:14 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Malwarebytes
2013-12-06 17:12 - 2013-12-06 17:12 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Qeunezha
2013-12-06 17:11 - 2013-12-06 17:11 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Epqyqy
2013-12-06 17:10 - 2013-12-06 23:31 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Kyerri
2013-12-06 17:09 - 2013-12-06 17:09 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Zagiusow
2013-12-06 17:08 - 2013-12-06 17:08 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Syeryp
2013-12-06 17:07 - 2013-12-06 17:07 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Neohcav
2013-12-06 17:06 - 2013-12-06 17:06 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Tyebwedi
2013-12-06 17:05 - 2013-12-06 17:05 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Cewyyf
2013-12-06 17:04 - 2013-12-06 17:04 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Ryehru
2013-12-06 17:03 - 2013-12-06 17:03 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Ytulfie
2013-12-06 17:02 - 2013-12-06 17:02 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Taabyvsy
2013-12-06 17:01 - 2013-12-06 17:01 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Coipqyab
2013-12-06 17:01 - 2013-12-06 17:01 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Bytuhi
2013-12-06 16:59 - 2013-12-06 16:59 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Piniocby
2013-12-06 16:58 - 2013-12-06 16:58 - 00000000 ____D C:\Users\mitalub\AppData\Roaming\Emuvek
2013-12-06 16:34 - 2013-12-06 17:31 - 00000000 ____D C:\Users\mitalub\AppData\Local\VzhuPack
C:\Users\mitalub\AppData\Local\Temp\sexssol
C:\Users\Administrator\AppData\Local\Temp
end
*****************
 
[1032] C:\Users\mitalub\AppData\Roaming\Kyerri\pymaus.exe => Process closed successfully.
[3680] C:\Users\mitalub\AppData\Roaming\Kyerri\pymaus.exe => Process closed successfully.
[520] C:\Users\mitalub\AppData\Roaming\Kyerri\pymaus.exe => Process closed successfully.
[5184] C:\Users\mitalub\AppData\Roaming\Kyerri\pymaus.exe => Process closed successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\Equqpudanougzal => Value deleted successfully.
C:\Users\mitalub\AppData\Roaming\Kyerri\pymaus.exe => Moved successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\ => Value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\Equqpudanougzal => Value deleted successfully.
HKU\mitalub\Software\Microsoft\Windows\CurrentVersion\Run\\Opera => Value deleted successfully.
C:\Users\mitalub\AppData\Local\DigitalPersona\Opera\danhdpaeli.dll => Moved successfully.
HKU\mitalub\Software\Microsoft\Windows\CurrentVersion\Run\\Equqpudanougzal => Value deleted successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{E8CC6306-1B7D-4B06-AAFF-1A68D2670350} => Key deleted successfully.
HKCR\CLSID\{E8CC6306-1B7D-4B06-AAFF-1A68D2670350} => Key not found.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{E8CC6306-1B7D-4B06-AAFF-1A68D2670350} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{E8CC6306-1B7D-4B06-AAFF-1A68D2670350} => Key not found.
C:\Users\mitalub\AppData\Roaming\Xoaztex => Moved successfully.
C:\Users\mitalub\AppData\Roaming\Vyrousi => Moved successfully.
C:\Users\mitalub\AppData\Roaming\Idseemoc => Moved successfully.
C:\Users\mitalub\AppData\Roaming\Ykivcy => Moved successfully.
C:\Users\mitalub\AppData\Roaming\Zagoak => Moved successfully.
C:\Users\mitalub\AppData\Roaming\Rizuazb => Moved successfully.
C:\Users\mitalub\AppData\Roaming\Vehyse => Moved successfully.
C:\Users\mitalub\AppData\Roaming\Gezeut => Moved successfully.
C:\Users\mitalub\AppData\Roaming\Fetyra => Moved successfully.
C:\Users\mitalub\AppData\Roaming\Fuitifa => Moved successfully.
C:\Users\mitalub\AppData\Roaming\Gouserc => Moved successfully.
C:\Users\mitalub\AppData\Roaming\Uzfibufa => Moved successfully.
C:\Users\mitalub\AppData\Roaming\Urcefu => Moved successfully.
C:\Users\mitalub\AppData\Roaming\Ziuwba => Moved successfully.
C:\Users\mitalub\AppData\Roaming\Malwarebytes => Moved successfully.
C:\Users\mitalub\AppData\Roaming\Qeunezha => Moved successfully.
C:\Users\mitalub\AppData\Roaming\Epqyqy => Moved successfully.
C:\Users\mitalub\AppData\Roaming\Kyerri => Moved successfully.
C:\Users\mitalub\AppData\Roaming\Zagiusow => Moved successfully.
C:\Users\mitalub\AppData\Roaming\Syeryp => Moved successfully.
C:\Users\mitalub\AppData\Roaming\Neohcav => Moved successfully.
C:\Users\mitalub\AppData\Roaming\Tyebwedi => Moved successfully.
C:\Users\mitalub\AppData\Roaming\Cewyyf => Moved successfully.
C:\Users\mitalub\AppData\Roaming\Ryehru => Moved successfully.
C:\Users\mitalub\AppData\Roaming\Ytulfie => Moved successfully.
C:\Users\mitalub\AppData\Roaming\Taabyvsy => Moved successfully.
C:\Users\mitalub\AppData\Roaming\Coipqyab => Moved successfully.
C:\Users\mitalub\AppData\Roaming\Bytuhi => Moved successfully.
C:\Users\mitalub\AppData\Roaming\Piniocby => Moved successfully.
C:\Users\mitalub\AppData\Roaming\Emuvek => Moved successfully.
C:\Users\mitalub\AppData\Local\VzhuPack => Moved successfully.
C:\Users\mitalub\AppData\Local\Temp\sexssol => Moved successfully.
 
"C:\Users\Administrator\AppData\Local\Temp" directory move:
 
C:\Users\Administrator\AppData\Local\Temp\Administrator.bmp => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\AdobeARM.log => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\ArmUI.ini => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\au-descriptor-1.7.0_45-b18.xml => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\AUCHECK_CORE.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\AUCHECK_MAP_41.xml => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\AUCHECK_PARSER.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\chrome_installer.log => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\CLW32A0.tmp => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\CLW345D.tmp => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\CLW4E4.tmp => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\CLW9DE5.tmp => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\CLWA05C.tmp => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\CLWB841.tmp => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\CLWE697.tmp => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\CLWFAE6.tmp => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\dat10A8.tmp => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\dat10B9.tmp => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\dat10C9.tmp => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\dat2931.tmp => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\dat2E7F.tmp => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\dat49CC.tmp => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\dat49CD.tmp => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\dat49DE.tmp => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\dat4A1D.tmp => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\dat4A1E.tmp => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\dat4A1F.tmp => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\dat4A30.tmp => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\dat4A31.tmp => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\dat7A1F.tmp => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\dat7A20.tmp => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\dat7A31.tmp => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\dat7A41.tmp => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\dat7ABF.tmp => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\dat7AC0.tmp => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\dat7AD1.tmp => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\dat7AD2.tmp => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\dat8F15.tmp => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\datB27D.tmp => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\datB442.tmp => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\datB453.tmp => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\datB454.tmp => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\datB510.tmp => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\datB511.tmp => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\datB62B.tmp => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\datB62C.tmp => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\datCCC.tmp => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\datCDD.tmp => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\datDC8.tmp => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\datDD8.tmp => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\datFFB.tmp => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\E59D.tmp => Moved successfully.
Could not move "C:\Users\Administrator\AppData\Local\Temp\etilqs_JdfaJMCAspA9BG1" => Scheduled to move on reboot.
C:\Users\Administrator\AppData\Local\Temp\fla1870.tmp => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\fla730.tmp => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\flaB457.tmp => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\flaD070.tmp => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\flaF033.tmp => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\java_install_reg.log => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jinstall.cfg => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jre-6u32-windows-i586-iftw.exe => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\JRT.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jupdate_d6763162 => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jusched.log => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\ntdll_dump.dll => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\users00 => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\WC329F.tmp => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\WC345C.tmp => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\WC4E3.tmp => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\WC9DE4.tmp => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\WCA05B.tmp => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\WCB840.tmp => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\WCE696.tmp => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\WCFAE5.tmp => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\wmsetup.log => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\~DF2105.tmp => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\smtmp\2\AIM.lnk => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\smtmp\2\desktop.ini => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\smtmp\2\Launch Internet Explorer Browser.lnk => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\smtmp\2\Shows Desktop.lnk => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\smtmp\2\SMART_HDD.lnk => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\smtmp\2\Window Switcher.lnk => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\MUI\CyberLink YouCam\CyberLink YouCam.lnk => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\APPID_clsid.dat => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\APPID_files.dat => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\appinit64_null.reg => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\appinit_null.reg => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\APPPATHS.dat => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\APPROVEDEXTENSIONS_clsid.dat => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\ask.bat => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\askCLSID.dat => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\askregkey_x64.dat => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\askregkey_x86.dat => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\askregvalue_x64.dat => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\askregvalue_x86.dat => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\askservices.dat => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\badAPPINIT.dat => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\badFOLDERS.cfg => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\badFOLDERScom.cfg => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\badFOLDERSstart.cfg => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\badLNK.cfg => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\badvalues.cfg => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\BHO_clsid.dat => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\BHO_name.dat => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\browsermngr_keys.cfg => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\browsermngr_values.cfg => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\CHOICE.DAT => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\chrome.bat => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\CHRregkey_x64.cfg => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\CHRregkey_x86.cfg => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\CHR_extensions.cfg => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\CHR_open_x64.reg => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\CHR_open_x86.reg => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\clean_shortcut.vbs => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\CLSID_clsid.dat => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\currentmd5.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\CUT.DAT => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\datamngr_del.reg => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\defaultscope.cfg => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\delfolders.bat => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\delorphans.bat => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\ELEVATIONPOLICY_clsid.dat => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\ev_clear.bat => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\EXT.dat => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\FFbrowsermngr.dat => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\FFextensions.dat => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\FFpluginREG.dat => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\FFplugins.dat => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\FFprefs.dat => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\FFregkey_x64.dat => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\FFregkey_x86.dat => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\FFwhtlist.cfg => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\FFXML.dat => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\FFXPI.dat => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\FF_open_x64.reg => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\FF_open_x86.reg => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\firefox.bat => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\FWCLSID.dat => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\FWPolicy.bat => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\get.bat => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\IEwhtlst.cfg => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\iexplore.bat => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\IE_open_x64.reg => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\IE_open_x86.reg => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\IFEO.dat => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\INTERFACE_clsid.dat => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\JRT.bat => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\medfos.bat => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\MENUEXT.dat => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\misc.bat => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\modules.bat => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\modules.dat => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\moduleservices.dat => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\newmd5.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\NIRCMD.DAT => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\NOTIFY.dat => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\PREAPPROVED_clsid.dat => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\prelim.bat => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\PRODUCTS.dat => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\REGhcr.cfg => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\REGhkcu_and_hklm_allow.cfg => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\REGhkcu_and_hklm_software.cfg => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\REGhkcu_software_appdatalow.cfg => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\REGhkcu_software_microsoft.cfg => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\REGhklm_software_classes.cfg => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\REGISTRYUSERSID.cfg => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\runvalues.bat => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\runvalues_x64.cfg => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\runvalues_x86.cfg => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\S1518COMPONENTS.dat => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\searchlnk.bat => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\SED.DAT => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\sednewline.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\services.dat => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\serviceseventlog.cfg => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\SETTINGS_clsid.dat => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\SHORTCUT.DAT => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\STATS_clsid.dat => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\TDL4.bat => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\TRACING.dat => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\TYPELIB_clsid.dat => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\UNINSTALL.dat => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\UpgradeCodes.dat => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\WGET.DAT => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\WOW6432NODE.dat => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\temp\null.txt => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\erunt\ERDNT.E_E => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\erunt\ERDNTDOS.LOC => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\erunt\ERDNTWIN.LOC => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\erunt\ERUNT.EXE => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\erunt\ERUNT.EXE.manifest => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\erunt\ERUNT.LOC => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\jrt\erunt\README.TXT => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\5156_9192\crl-set => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\5156_9192\manifest.fingerprint => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\5156_9192\manifest.json => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\3088_22044\crl-set => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\3088_22044\manifest.fingerprint => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\3088_22044\manifest.json => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\2228_11068\crl-set => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\2228_11068\manifest.fingerprint => Moved successfully.
C:\Users\Administrator\AppData\Local\Temp\2228_11068\manifest.json => Moved successfully.
Could not move "C:\Users\Administrator\AppData\Local\Temp" directory. => Scheduled to move on reboot.
 
 
=> Result of Scheduled Files to move (Boot Mode: Normal) (Date&Time: 2014-01-05 20:56:56)<=
 
C:\Users\Administrator\AppData\Local\Temp\etilqs_JdfaJMCAspA9BG1 => Is moved successfully.
C:\Users\Administrator\AppData\Local\Temp => Moved successfully.
 
==== End of Fixlog ====
 
Again, thanks for the help!





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users