Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Infected With Rbot-afw Worm


  • Please log in to reply
6 replies to this topic

#1 Jessanramirez

Jessanramirez

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:10:19 AM

Posted 31 January 2007 - 09:47 PM

Logfile of HijackThis v1.99.1
Scan saved at 10:41:14 p.m., on 31/01/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Archivos de programa\Panda Software\Panda Antivirus + Firewall 2007\TPSrv.exe
C:\Archivos de programa\Panda Software\Panda Antivirus + Firewall 2007\pavsrv51.exe
C:\Archivos de programa\Panda Software\Panda Antivirus + Firewall 2007\AVENGINE.EXE
c:\archivos de programa\panda software\panda antivirus + firewall 2007\firewall\PNMSRV.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Archivos de programa\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Archivos de programa\Panda Software\Panda Antivirus + Firewall 2007\PavFnSvr.exe
C:\Archivos de programa\Archivos comunes\Panda Software\PavShld\pavprsrv.exe
C:\Archivos de programa\Panda Software\Panda Antivirus + Firewall 2007\PsImSvc.exe
C:\WINDOWS\Explorer.exe
C:\WINDOWS\System32\PAStiSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Archivos de programa\Panda Software\Panda Antivirus + Firewall 2007\apvxdwin.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\WgaTray.exe
C:\Archivos de programa\Roxio\Easy Media Creator 7\Drag to Disc\DrgToDsc.exe
C:\Archivos de programa\CyberLink\PowerDVD\PDVDServ.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Archivos de programa\HP\HP Software Update\HPWuSchd2.exe
C:\Archivos de programa\MessengerPlus! 3\MsgPlus.exe
C:\Archivos de programa\Google\Google Desktop Search\GoogleDesktop.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Archivos de programa\HP\Digital Imaging\bin\hpqtra08.exe
C:\Archivos de programa\WinZip\WZQKPICK.EXE
C:\WINDOWS\BricoPacks\Vista Inspirat\ObjectDock\ObjectDock.exe
C:\WINDOWS\BricoPacks\Vista Inspirat\UberIcon\UberIcon Manager.exe
C:\WINDOWS\BricoPacks\Vista Inspirat\YzToolbar\YzToolBar.exe
C:\Archivos de programa\Google\Google Desktop Search\GoogleDesktopIndex.exe
C:\Archivos de programa\Google\Google Desktop Search\GoogleDesktopCrawl.exe
c:\archivos de programa\panda software\panda antivirus + firewall 2007\WebProxy.exe
C:\Archivos de programa\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Archivos de programa\MSN Messenger\msnmsgr.exe
C:\Archivos de programa\Internet Explorer\iexplore.exe
C:\Program Files\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://search.imesh.com/sidebar.html?src=ssb
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.imesh.com/sidebar.html?src=ssb
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.imesh.com/sidebar.html?src=ssb
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.imesh.com/ve/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.imesh.com/sidebar.html?src=ssb
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Vínculos
R3 - URLSearchHook: iMesh MediaBar - {B7D3E479-CC68-42B5-A338-938ECE35F419} - C:\Archivos de programa\iMesh applications\iMesh MediaBar\MediaBar.dll
F2 - REG:system.ini: Shell=Explorer.exe "C:\WINDOWS\sembako-cfzjlqh.exe"
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Archivos de programa\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Archivos de programa\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\ARCHIV~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Archivos de programa\Archivos comunes\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: XBTP01621 - {9EDB89EF-E4BC-4c70-B102-8F7A4365EE33} - C:\ARCHIV~1\IMESHA~1\IMESHM~1\MediaBar.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\archivos de programa\google\googletoolbar3.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Archivos de programa\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Archivos de programa\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\archivos de programa\google\googletoolbar3.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Archivos de programa\Windows Live Toolbar\msntb.dll
O3 - Toolbar: iMesh MediaBar - {B7D3E479-CC68-42B5-A338-938ECE35F419} - C:\Archivos de programa\iMesh applications\iMesh MediaBar\MediaBar.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [RoxioDragToDisc] "C:\Archivos de programa\Roxio\Easy Media Creator 7\Drag to Disc\DrgToDsc.exe"
O4 - HKLM\..\Run: [RemoteControl] C:\Archivos de programa\CyberLink\PowerDVD\PDVDServ.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [HP Software Update] C:\Archivos de programa\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Archivos de programa\MessengerPlus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Archivos de programa\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [APVXDWIN] "C:\Archivos de programa\Panda Software\Panda Antivirus + Firewall 2007\APVXDWIN.EXE" /s
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Shareaza] "C:\Archivos de programa\Shareaza\Shareaza.exe" -tray
O4 - Startup: Stardock ObjectDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat\ObjectDock\ObjectDock.exe
O4 - Startup: UberIcon.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat\UberIcon\UberIcon Manager.exe
O4 - Startup: Y'z ToolBar.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat\YzToolbar\YzToolBar.exe
O4 - Global Startup: Google Updater.lnk = C:\Archivos de programa\Google\Google Updater\GoogleUpdater.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Archivos de programa\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Archivos de programa\WinZip\WZQKPICK.EXE
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1
O8 - Extra context menu item: &Windows Live Search - res://C:\Archivos de programa\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to AMV Convert Tool... - C:\Archivos de programa\MP3 Player Utilities 3.73\AMVConverter\grab.html
O8 - Extra context menu item: E&xportar a Microsoft Excel - res://C:\ARCHIV~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: MediaManager tool grab multimedia file - C:\Archivos de programa\MP3 Player Utilities 3.73\MediaManager\grab.html
O9 - Extra button: Referencia - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\ARCHIV~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Archivos de programa\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Archivos de programa\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Archivos de programa\Archivos comunes\Microsoft Shared\Help\hxds.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\ARCHIV~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - AppInit_DLLs: C:\ARCHIV~1\Google\GOOGLE~1\GOEC62~1.DLL
O20 - Winlogon Notify: avldr - C:\WINDOWS\SYSTEM32\avldr.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Archivos de programa\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: SQL Server (SQLEXPRESS) (MSSQL$SQLEXPRESS) - Unknown owner - c:\Archivos de programa\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe" -sSQLEXPRESS (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Panda Function Service (PAVFNSVR) - Panda Software International - C:\Archivos de programa\Panda Software\Panda Antivirus + Firewall 2007\PavFnSvr.exe
O23 - Service: Panda Process Protection Service (PavPrSrv) - Panda Software - C:\Archivos de programa\Archivos comunes\Panda Software\PavShld\pavprsrv.exe
O23 - Service: Panda anti-virus service (PAVSRV) - Panda Software International - C:\Archivos de programa\Panda Software\Panda Antivirus + Firewall 2007\pavsrv51.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Panda Network Manager (PNMSRV) - Panda Software International - c:\archivos de programa\panda software\panda antivirus + firewall 2007\firewall\PNMSRV.EXE
O23 - Service: Panda IManager Service (PSIMSVC) - Panda Software - C:\Archivos de programa\Panda Software\Panda Antivirus + Firewall 2007\PsImSvc.exe
O23 - Service: STI Simulator - Unknown owner - C:\WINDOWS\System32\PAStiSvc.exe
O23 - Service: Panda TPSrv (TPSrv) - Panda Software - C:\Archivos de programa\Panda Software\Panda Antivirus + Firewall 2007\TPSrv.exe
O23 - Service: Visual Studio Analyzer RPC bridge - Unknown owner - C:\Archivos de programa\Microsoft Visual Studio\Common\Tools\VS-Ent98\Vanalyzr\varpc.exe (file missing)

BC AdBot (Login to Remove)

 


#2 OldTimer

OldTimer

    Malware Expert


  • Members
  • 11,092 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:North Carolina
  • Local time:10:19 AM

Posted 07 February 2007 - 02:29 PM

Hello Jessanramirez and welcome to the BC HijackThis forum. Let's see what else is on this machine.

Download WinPFind3U.exe to your Desktop and double-click on it to extract the files. It will create a folder named WinPFind3u on your desktop.
  • Close ALL OTHER PROGRAMS.
  • Open the WinPFind3u folder and double-click on WinPFind3U.exe to start the program.
  • Now click the Run Scan button on the toolbar.
  • The program will be scanning huge amounts of data so depending on your system it could take a long time to complete. Let it run unhindered until it finishes.
  • When the scan is complete Notepad will open with the report file loaded in it.
  • Click the Format menu and make sure that Wordwrap is not checked. If it is then click on it to uncheck it.
Use the Add Reply button and Copy/Paste the information back here. I will review it when it comes in. If, after posting, the last line is not < End of Report > then the log is too big to fit into a single post and you will need to split it into multiple posts.

Cheers.

OT
I do not respond to PM's requesting help. That's what the forums are here for. Please use them so that others may benefit from your questions and the responses you receive.
OldTimer

Posted Image

#3 Jessanramirez

Jessanramirez
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:10:19 AM

Posted 13 February 2007 - 09:00 AM

480784 bytes | Modified Date = 29/12/2006 02:53:14 p.m. | Attr = ]
tmpfw.exe -> %ProgramFiles%\Trend Micro\Internet Security 2007\TmPfw.exe -> Trend Micro Inc. [Ver = 3.2.0.1027 | Size = 943696 bytes | Modified Date = 29/12/2006 02:53:06 p.m. | Attr = ]
tmproxy.exe -> %ProgramFiles%\Trend Micro\Internet Security 2007\tmproxy.exe -> Trend Micro Inc. [Ver = 3.2.0.1024 | Size = 566872 bytes | Modified Date = 29/12/2006 02:53:10 p.m. | Attr = ]
ubericon manager.exe -> %SystemRoot%\BricoPacks\Vista Inspirat\UberIcon\UberIcon Manager.exe -> [Ver = | Size = 180224 bytes | Modified Date = 12/08/2005 03:52:34 p.m. | Attr = ]
winpfind3u.exe -> %UserDocuments%\Ejecutables\WinPFind3u\WinPFind3U.exe -> Oldtimer Tools [Ver = 1.0.16.0 | Size = 308736 bytes | Modified Date = 07/02/2007 08:23:44 p.m. | Attr = ]
wzqkpick.exe -> %ProgramFiles%\WinZip\WZQKPICK.EXE -> WinZip Computing LP [Ver = 1.0 (32-bit) | Size = 389120 bytes | Modified Date = 21/11/2006 11:00:00 a.m. | Attr = ]
yztoolbar.exe -> %SystemRoot%\BricoPacks\Vista Inspirat\YzToolbar\YzToolBar.exe -> Y'z@Home [Ver = 1, 3, 0, 0 | Size = 90112 bytes | Modified Date = 29/09/2002 09:41:00 a.m. | Attr = ]

[Win32 Services - Non-Microsoft Only]
(Ati HotKey Poller) Ati HotKey Poller [Win32_Own | Auto | Stopped] -> %System32%\ati2evxx.exe -> ATI Technologies Inc. [Ver = 6.14.10.4119 | Size = 376832 bytes | Modified Date = 31/08/2005 01:36:10 a.m. | Attr = ]
(ATI Smart) ATI Smart [Win32_Own | Auto | Stopped] -> %System32%\ati2sgag.exe -> [Ver = 5.13.0024 | Size = 516096 bytes | Modified Date = 30/08/2005 09:05:00 p.m. | Attr = ]
(dmadmin) Servicio del administrador de discos lógicos [Win32_Shared | On_Demand | Stopped] -> %System32%\dmadmin.exe -> Microsoft Corp., VERITAS Software [Ver = 2600.2180.503.0 | Size = 225792 bytes | Modified Date = 19/08/2004 09:42:44 a.m. | Attr = ]
(NVSvc) NVIDIA Display Driver Service [Win32_Own | Auto | Running] -> %System32%\nvsvc32.exe -> NVIDIA Corporation [Ver = 6.14.10.7806 | Size = 127043 bytes | Modified Date = 03/11/2005 04:11:46 a.m. | Attr = ]
(PcCtlCom) Trend Micro Central Control Component [Win32_Own | Auto | Running] -> %ProgramFiles%\Trend Micro\Internet Security 2007\PcCtlCom.exe -> Trend Micro Inc. [Ver = 15.30.0.1151 | Size = 1922576 bytes | Modified Date = 23/01/2007 02:27:16 p.m. | Attr = ]
(PcScnSrv) Trend Micro Protection Against Spyware [Win32_Own | On_Demand | Running] -> %ProgramFiles%\Trend Micro\Internet Security 2007\PcScnSrv.exe -> Trend Micro Inc. [Ver = 15.30.0.1128 | Size = 214544 bytes | Modified Date = 29/12/2006 02:53:14 p.m. | Attr = ]
(Pml Driver HPZ12) Pml Driver HPZ12 [Win32_Own | Auto | Stopped] -> %System32%\HPZipm12.exe -> HP [Ver = 9, 0, 0, 0 | Size = 69632 bytes | Modified Date = 29/09/2004 12:14:36 p.m. | Attr = ]
(STI Simulator) STI Simulator [Win32_Own | Auto | Running] -> %System32%\PAStiSvc.exe -> [Ver = | Size = 53248 bytes | Modified Date = 14/01/2005 09:32:38 a.m. | Attr = ]
(Tmntsrv) Trend Micro Real-time Service [Win32_Own | Auto | Running] -> %ProgramFiles%\Trend Micro\Internet Security 2007\Tmntsrv.exe -> Trend Micro Inc. [Ver = 15.30.0.1128 | Size = 480784 bytes | Modified Date = 29/12/2006 02:53:14 p.m. | Attr = ]
(TmPfw) Trend Micro Personal Firewall [Win32_Own | Auto | Running] -> %ProgramFiles%\Trend Micro\Internet Security 2007\TmPfw.exe -> Trend Micro Inc. [Ver = 3.2.0.1027 | Size = 943696 bytes | Modified Date = 29/12/2006 02:53:06 p.m. | Attr = ]
(tmproxy) Trend Micro Proxy Service [Win32_Own | Auto | Running] -> %ProgramFiles%\Trend Micro\Internet Security 2007\tmproxy.exe -> Trend Micro Inc. [Ver = 3.2.0.1024 | Size = 566872 bytes | Modified Date = 29/12/2006 02:53:10 p.m. | Attr = ]
(Visual Studio Analyzer RPC bridge) Visual Studio Analyzer RPC bridge [Win32_Own | On_Demand | Stopped] -> %ProgramFiles%\Microsoft Visual Studio\Common\Tools\VS-Ent98\Vanalyzr\varpc.exe -> File not found
(WMPNetworkSvc) Servicio de uso compartido de red del Reproductor de Windows Media [Win32_Own | On_Demand | Stopped] -> %ProgramFiles%\Windows Media Player\WMPNetwk.exe -> File not found

[Registry - Non-Microsoft Only]
< Run [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Alcmtr -> %SystemRoot%\Alcmtr.exe -> Realtek Semiconductor Corp. [Ver = 1.6.0.2 | Size = 69632 bytes | Modified Date = 03/05/2005 10:43:28 p.m. | Attr = R ]
Bron-Spizaetus -> -> File not found
Google Desktop Search -> %ProgramFiles%\Google\Google Desktop Search\GoogleDesktop.exe -> Google [Ver = 4.2006.1002.1212 | Size = 190464 bytes | Modified Date = 08/10/2006 01:26:54 a.m. | Attr = ]
HP Software Update -> %ProgramFiles%\HP\HP Software Update\HPWuSchd2.exe -> Hewlett-Packard Co. [Ver = 53.0.13.000 | Size = 49152 bytes | Modified Date = 11/05/2005 11:12:54 p.m. | Attr = ]
MessengerPlus3 -> %ProgramFiles%\MessengerPlus! 3\MsgPlus.exe -> Patchou [Ver = 3, 63, 0, 148 | Size = 190024 bytes | Modified Date = 29/09/2006 12:43:50 a.m. | Attr = ]
NvCplDaemon -> %System32%\nvcpl.dll [RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup] -> NVIDIA Corporation [Ver = 6.14.10.7806 | Size = 7110656 bytes | Modified Date = 03/11/2005 04:11:30 a.m. | Attr = ]
NvMediaCenter -> %System32%\nvmctray.dll [RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit] -> NVIDIA Corporation [Ver = 6.14.10.7806 | Size = 86016 bytes | Modified Date = 03/11/2005 04:11:38 a.m. | Attr = ]
nwiz -> %System32%\nwiz.exe -> [Ver = | Size = 1519616 bytes | Modified Date = 03/11/2005 04:11:56 a.m. | Attr = ]
pccguide.exe -> %ProgramFiles%\Trend Micro\Internet Security 2007\pccguide.exe -> Trend Micro Inc. [Ver = 15.30.0.1151 | Size = 3429904 bytes | Modified Date = 23/01/2007 02:26:26 p.m. | Attr = ]
RemoteControl -> %ProgramFiles%\CyberLink\PowerDVD\PDVDServ.exe -> Cyberlink Corp. [Ver = 5.00.0000 | Size = 32768 bytes | Modified Date = 30/11/2003 02:04:56 a.m. | Attr = ]
RoxioDragToDisc -> %ProgramFiles%\Roxio\Easy Media Creator 7\Drag to Disc\DrgToDsc.exe -> Roxio [Ver = 7.1.0.183 | Size = 1691648 bytes | Modified Date = 25/09/2004 01:37:42 a.m. | Attr = ]
RTHDCPL -> %SystemRoot%\RTHDCPL.exe -> Realtek Semiconductor Corp. [Ver = 2.0.2.1 | Size = 14864384 bytes | Modified Date = 14/10/2005 09:51:40 p.m. | Attr = R ]
< OptionalComponents [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\
IMAIL -> Installed = 1 ->
MAPI -> Installed = 1 ->
MSFS -> Installed = 1 ->
< Run [HKCU] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Shareaza -> %ProgramFiles%\Shareaza\Shareaza.exe -> Shareaza Development Team [Ver = 2, 2, 5, 0 | Size = 4354048 bytes | Modified Date = 05/02/2007 04:05:42 a.m. | Attr = ]
< Common Startup > -> C:\Documents and Settings\All Users\Menú Inicio\Programas\Inicio
%AllUsersStartup%\HP Digital Imaging Monitor.lnk -> %ProgramFiles%\HP\Digital Imaging\bin\hpqtra08.exe -> Hewlett-Packard Co. [Ver = 53.0.13.000 | Size = 282624 bytes | Modified Date = 11/05/2005 11:23:26 p.m. | Attr = ]
%AllUsersStartup%\Inicio rápido de Adobe Reader.lnk -> %ProgramFiles%\Adobe\Acrobat 7.0\Reader\reader_sl.exe -> Adobe Systems Incorporated [Ver = 7.0.5.2005092300 | Size = 29696 bytes | Modified Date = 23/09/2005 10:05:26 p.m. | Attr = ]
%AllUsersStartup%\WinZip Quick Pick.lnk -> %ProgramFiles%\WinZip\WZQKPICK.EXE -> WinZip Computing LP [Ver = 1.0 (32-bit) | Size = 389120 bytes | Modified Date = 21/11/2006 11:00:00 a.m. | Attr = ]
< User Startup > -> C:\Documents and Settings\pc\Menú Inicio\Programas\Inicio
%UserStartup%\Stardock ObjectDock.lnk -> %SystemRoot%\BricoPacks\Vista Inspirat\ObjectDock\ObjectDock.exe -> Stardock [Ver = v1.11.517u | Size = 1826885 bytes | Modified Date = 21/02/2005 09:56:00 a.m. | Attr = ]
%UserStartup%\UberIcon.lnk -> %SystemRoot%\BricoPacks\Vista Inspirat\UberIcon\UberIcon Manager.exe -> [Ver = | Size = 180224 bytes | Modified Date = 12/08/2005 03:52:34 p.m. | Attr = ]
%UserStartup%\Y'z ToolBar.lnk -> %SystemRoot%\BricoPacks\Vista Inspirat\YzToolbar\YzToolBar.exe -> Y'z@Home [Ver = 1, 3, 0, 0 | Size = 90112 bytes | Modified Date = 29/09/2002 09:41:00 a.m. | Attr = ]
< Disabled MSConfig Folder Items[HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\
C:^Documents and Settings^All Users^Menú Inicio^Programas^Inicio^Iniciar guiños Messenger.lnk -> %SystemDrive%\ARCHIV~1\MSNMES~1\INSTAL~1.EXE -> File not found
C:^Documents and Settings^All Users^Menú Inicio^Programas^Inicio^Inicio rápido de HP Image Zone.lnk -> %ProgramFiles%\HP\Digital Imaging\bin\hpqthb08.exe -> Hewlett-Packard Co. [Ver = 053.000.013.000 | Size = 73728 bytes | Modified Date = 12/05/2005 12:49:24 a.m. | Attr = ]
< Disabled MSConfig Registry Items [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\
MessengerPlus3 -> %ProgramFiles%\MessengerPlus! 3\MsgPlus.exe -> Patchou [Ver = 3, 63, 0, 148 | Size = 190024 bytes | Modified Date = 29/09/2006 12:43:50 a.m. | Attr = ]
< Registry Shell Spawning > -> HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command
regfile [merge] -> Reg Data - Key not found ->
scrfile [open] -> "%1" /S ->
scrfile [config] -> "%1" ->
*Command* -> HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.lnk\ShellNew\\Command ->
NewLinkHere -> -> File not found
%1 -> -> File not found
*Command* -> HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.bfc\ShellNew\\Command ->
Briefcase_Create -> -> File not found
%2!d! -> -> File not found
%1 -> -> File not found
< ActiveX StubPath [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\
{2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} -> ->
{22d6f312-b0f6-11d0-94ab-0080c74c7e95} -> ->
{2C7339CF-2B09-4501-B3F3-F3508C9228ED} -> %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll ->
{44BBA840-CC51-11CF-AAFA-00AA00B6015C} -> "%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install ->
{44BBA842-CC51-11CF-AAFA-00AA00B6015B} -> rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT ->
{5945c046-1e7d-11d1-bc44-00c04fd912be} -> rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser ->
{6BF52A52-394A-11d3-B153-00C04F79FAA6} -> rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp11.inf,PerUserStub ->
{73FA19D0-2D75-11D2-995D-00C04F98BBC9} -> ->
{7790769C-0471-11d2-AF11-00C04FA35D02} -> "%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install ->
{89820200-ECBD-11cf-8B85-00AA005B4340} -> regsvr32.exe /s /n /i:U shell32.dll ->
{89820200-ECBD-11cf-8B85-00AA005B4383} -> %SystemRoot%\system32\ie4uinit.exe ->
{89B4C1CD-B018-4511-B0A1-5476DBF70820} -> C:\WINDOWS\system32\Rundll32.exe C:\WINDOWS\system32\mscories.dll,Install ->
>{22d6f312-b0f6-11d0-94ab-0080c74c7e95} -> C:\WINDOWS\inf\unregmp2.exe /ShowWMP ->
>{26923b43-4d38-484f-9b9e-de460746276c} -> %systemroot%\system32\shmgrate.exe OCInstallUserConfigIE ->
>{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS -> RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP ->
>{881dd1c5-3dcf-431b-b061-f3f88e8be88a} -> %systemroot%\system32\shmgrate.exe OCInstallUserConfigOE ->
< WOW Command Line [HKLM] > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\WOW
*wowcmdline* -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\WOW\\wowcmdline ->
-a -> -> File not found
< Session Manager Settings [HKLM] > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager
BootExecute -> autocheck autochk *; ->
< AppInit_DLLs [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_DLLs
*AppInit_DLLs* -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_Dlls ->
C:\ARCHIV~1\Google\GOOGLE~1\GOEC62~1.DLL -> %ProgramFiles%\Google\Google Desktop Search\GoogleDesktopNetwork3.dll -> Google [Ver = 4.2006.1002.1212 | Size = 136704 bytes | Modified Date = 08/10/2006 01:26:54 a.m. | Attr = ]
< SecurityProviders [HKLM] > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\\SecurityProviders
< Winlogon settings [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
*Shell* -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell ->
"C:\WINDOWS\sembako-cfzjlqh.exe" -> %SystemRoot%\sembako-cfzjlqh.exe -> File not found
*VMApplet* -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\VMApplet ->
Control_RunDLL -> -> File not found
< Winlogon settings [HKCU] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
< Winlogon\Notify settings [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\
AtiExtEvent -> %System32%\ati2evxx.dll -> ATI Technologies Inc. [Ver = 6.14.10.4119 | Size = 46080 bytes | Modified Date = 31/08/2005 01:37:14 a.m. | Attr = ]
< Policy Settings [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ -> ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\NonEnum\ -> ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\NonEnum\\{BDEADF00-C265-11D0-BCED-00A0C90AB50F} -> 1 ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\NonEnum\\{6DFD7C5C-2451-11d3-A299-00C04F8EF6AF} -> 1073741857 ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\NonEnum\\{0DF44EAA-FF21-4412-828E-260A8728E7F1} -> 32 ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\ -> ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\\dontdisplaylastusername -> 0 ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\\legalnoticecaption -> ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\\legalnoticetext -> ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\\shutdownwithoutlogon -> 1 ->
< Policy Settings [HKCU] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ -> ->
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\ -> ->
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDriveTypeAutoRun -> 177 ->
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoFolderOptions -> 0 ->
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\ -> ->
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\DisableRegistryTools -> 1 ->
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\DisableCMD -> 0 ->
HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\ -> ->
HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\control panel\ -> ->
HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\control panel\\HomePage -> 0 ->
< Desktop Components > -> HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\
0 -> [Key] ->
0 -> FriendlyName = Mi página de inicio actual ->
0 -> Source = About:Home ->
0 -> SubscribedURL = About:Home ->
< HOSTS File > -> C:\WINDOWS\System32\drivers\etc\Hosts
127.0.0.1 localhost -> ->
< Internet Explorer Settings > ->
HKLM: Default_Page_URL -> http://www.microsoft.com/isapi/redir.dll?p...&ar=msnhome ->
HKLM: Main\\Default_Search_URL -> http://www.google.com/ie ->
HKLM: Local Page -> %SystemRoot%\system32\blank.htm ->
HKLM: Search Page -> http://www.microsoft.com/isapi/redir.dll?p...amp;ar=iesearch ->
HKLM: Start Page -> http://www.microsoft.com/isapi/redir.dll?p...ER}&ar=home ->
HKLM: CustomizeSearch -> http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm ->
HKLM: Search\\Default_Search_URL -> http://www.google.com/ie ->
HKLM: SearchAssistant -> http://search.imesh.com/sidebar.html?src=ssb ->
HKCU: Local Page -> C:\WINDOWS\system32\blank.htm ->
HKCU: Search Bar -> http://search.imesh.com/sidebar.html?src=ssb ->
HKCU: Search Page -> http://search.imesh.com/sidebar.html?src=ssb ->
HKCU: Start Page -> http://www.google.co.ve/ ->
HKCU: CustomizeSearch -> http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm ->
HKCU: SearchAssistant -> http://www.google.com/ie ->
HKCU: ProxyEnable -> 0 ->
< Trusted Sites > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\
msn.com [ - ] -> ->
< BHO's > -> HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
{02478D38-C3F9-4EFB-9B51-7695ECA05670} [HKLM] -> %ProgramFiles%\Yahoo!\Companion\Installs\cpn\yt.dll [Yahoo! Toolbar Helper] -> Yahoo! Inc. [Ver = 2005, 11, 4, 1 | Size = 399352 bytes | Modified Date = 07/06/2006 11:09:22 a.m. | Attr = ]
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} [HKLM] -> %ProgramFiles%\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [Adobe PDF Reader Link Helper] -> Adobe Systems Incorporated [Ver = 7.0.9.2006121800 | Size = 59032 bytes | Modified Date = 18/12/2006 04:16:42 a.m. | Attr = ]
{53707962-6F74-2D53-2644-206D7942484F} [HKLM] -> %ProgramFiles%\Spybot - Search & Destroy\SDHelper.dll [Reg Data - Value does not exist] -> Safer Networking Limited [Ver = 1, 4, 0, 0 | Size = 853672 bytes | Modified Date = 31/05/2005 01:04:00 a.m. | Attr = ]
{AA58ED58-01DD-4d91-8333-CF10577473F7} [HKLM] -> %ProgramFiles%\Google\googletoolbar3.dll [Google Toolbar Helper] -> Google Inc. [Ver = 4, 0, 1020, 2544 | Size = 2108480 bytes | Modified Date = 12/10/2006 11:38:04 a.m. | Attr = R ]
< Internet Explorer ToolBars [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ToolBar
{2318C2B1-4965-11d4-9B18-009027A5CD4F} [HKLM] -> %ProgramFiles%\Google\googletoolbar3.dll [&Google] -> Google Inc. [Ver = 4, 0, 1020, 2544 | Size = 2108480 bytes | Modified Date = 12/10/2006 11:38:04 a.m. | Attr = R ]
{EF99BD32-C1FB-11D2-892F-0090271D4F88} [HKLM] -> %ProgramFiles%\Yahoo!\Companion\Installs\cpn\yt.dll [Yahoo! Toolbar] -> Yahoo! Inc. [Ver = 2005, 11, 4, 1 | Size = 399352 bytes | Modified Date = 07/06/2006 11:09:22 a.m. | Attr = ]
< Internet Explorer ToolBars [HKCU] > -> HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\
ShellBrowser\\{B7D3E479-CC68-42B5-A338-938ECE35F419} [HKLM] -> Reg Data - Key not found [Reg Data - Key not found] -> File not found
WebBrowser\\{2318C2B1-4965-11D4-9B18-009027A5CD4F} [HKLM] -> %ProgramFiles%\Google\googletoolbar3.dll [&Google] -> Google Inc. [Ver = 4, 0, 1020, 2544 | Size = 2108480 bytes | Modified Date = 12/10/2006 11:38:04 a.m. | Attr = R ]
WebBrowser\\{B7D3E479-CC68-42B5-A338-938ECE35F419} [HKLM] -> Reg Data - Key not found [Reg Data - Key not found] -> File not found
WebBrowser\\{EF99BD32-C1FB-11D2-892F-0090271D4F88} [HKLM] -> %ProgramFiles%\Yahoo!\Companion\Installs\cpn\yt.dll [Yahoo! Toolbar] -> Yahoo! Inc. [Ver = 2005, 11, 4, 1 | Size = 399352 bytes | Modified Date = 07/06/2006 11:09:22 a.m. | Attr = ]
< Internet Explorer CmdMapping [HKCU] > -> HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Extensions\CmdMapping
{92780B25-18CC-41C8-B9BE-3C9C571A8263} -> 8192 - Reg Data - Value does not exist ->
{FB5F1910-F110-11d2-BB9E-00C04F795683} -> 8193 - Windows Messenger ->
NextId -> 8194 ->
< Internet Explorer Extensions [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\
{92780B25-18CC-41C8-B9BE-3C9C571A8263} -> Reg Data - Value does not exist [ButtonText: Referencia] -> File not found
< Internet Explorer Menu Extensions [HKCU] > -> HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\
&Windows Live Search -> %ProgramFiles%\Windows Live Toolbar\msntb.dll\search.htm -> File not found
Add to AMV Convert Tool... -> %ProgramFiles%\MP3 Player Utilities 3.73\AMVConverter\grab.htm -> File not found
E&xportar a Microsoft Excel -> -> File not found
MediaManager tool grab multimedia file -> %ProgramFiles%\MP3 Player Utilities 3.73\MediaManager\grab.htm -> File not found
< Approved Shell Extensions [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
{00E7B358-F65B-4dcf-83DF-CD026B94BFD4} [HKLM] -> Reg Data - Key not found [Autoplay for SlideShow] -> File not found
{0873D142-79EF-49fa-81B5-211AAC0B0A7F} [HKLM] -> %ProgramFiles%\Roxio\Easy Media Creator 7\Creator Classic\TargetFinder.dll [Target Finder Shell Extension] -> [Ver = 1, 0, 0, 1 | Size = 172032 bytes | Modified Date = 25/09/2004 01:26:04 a.m. | Attr = ]
{0DF44EAA-FF21-4412-828E-260A8728E7F1} [HKLM] -> Reg Data - Key not found [Barra de tareas y menú Inicio] -> File not found
{1CDB2949-8F65-4355-8456-263E7C208A5D} [HKLM] -> %System32%\nvshell.dll [Desktop Explorer] -> [Ver = | Size = 466944 bytes | Modified Date = 03/11/2005 04:11:46 a.m. | Attr = ]
{1E9B04FB-F9E5-4718-997B-B8DA88302A47} [HKLM] -> %System32%\nvshell.dll [Desktop Explorer Menu] -> [Ver = | Size = 466944 bytes | Modified Date = 03/11/2005 04:11:46 a.m. | Attr = ]
{1E9B04FB-F9E5-4718-997B-B8DA88302A48} [HKLM] -> %System32%\nvshell.dll [nView Desktop Context Menu] -> [Ver = | Size = 466944 bytes | Modified Date = 03/11/2005 04:11:46 a.m. | Attr = ]
{42071714-76d4-11d1-8b24-00a0c9068ff3} [HKLM] -> deskpan.dll [Extensión de paneo de pantalla del Panel de control] -> File not found
{48F45200-91E6-11CE-8A4F-0080C81A28D4} [HKLM] -> %ProgramFiles%\Trend Micro\Internet Security 2007\Tmdshell.dll [TMD Shell Extension] -> Trend Micro Inc. [Ver = 15.30.0.1128 | Size = 292368 bytes | Modified Date = 29/12/2006 02:53:06 p.m. | Attr = ]
{5E44E225-A408-11CF-B581-008029601108} [HKLM] -> %ProgramFiles%\Roxio\Easy Media Creator 7\Drag to Disc\Shellex.dll [Roxio DragToDisc Shell Extension] -> Roxio [Ver = 7.1.0.183 | Size = 319488 bytes | Modified Date = 25/09/2004 01:37:50 a.m. | Attr = ]
{764BF0E1-F219-11ce-972D-00AA00A14F56} [HKLM] -> Reg Data - Key not found [Extensiones del shell para compresión de archivos] -> File not found
{771A9DA0-731A-11CE-993C-00AA004ADB6C} [HKLM] -> %ProgramFiles%\Trend Micro\Internet Security 2007\VBProp.dll [VBPropSheet] -> Trend Micro Inc. [Ver = 15.30.0.1128 | Size = 321040 bytes | Modified Date = 29/12/2006 02:53:14 p.m. | Attr = ]
{7A9D77BD-5403-11d2-8785-2E0420524153} [HKLM] -> Reg Data - Key not found [Cuentas de usuario] -> File not found
{853FE2B1-B769-11d0-9C4E-00C04FB6C6FA} [HKLM] -> Reg Data - Key not found [Menú de contexto de cifrado] -> File not found
{88895560-9AA2-1069-930E-00AA0030EBC8} [HKLM] -> %System32%\hticons.dll [Extensión de icono de HyperTerminal] -> File not found
{A70C977A-BF00-412C-90B7-034C51DA2439} [HKLM] -> %System32%\nvcpl.dll [NvCpl DesktopContext Class] -> NVIDIA Corporation [Ver = 6.14.10.7806 | Size = 7110656 bytes | Modified Date = 03/11/2005 04:11:30 a.m. | Attr = ]
{ABC70703-32AF-11d4-90C4-D483A70F4825} [HKLM] -> %SystemRoot%\BricoPacks\Vista Inspirat\iColorFolder\CMExt.dll [CMenuExtender] -> Revenger inc. [Ver = 1.2.1.2 | Size = 46592 bytes | Modified Date = 18/10/2001 05:51:00 p.m. | Attr = ]
{B41DB860-8EE4-11D2-9906-E49FADC173CA} [HKLM] -> %ProgramFiles%\WinRAR\RarExt.dll [WinRAR shell extension] -> [Ver = | Size = 126464 bytes | Modified Date = 05/08/2006 11:34:34 a.m. | Attr = ]
{E0D79304-84BE-11CE-9641-444553540000} [HKLM] -> %ProgramFiles%\WinZip\WZSHLSTB.DLL [WinZip] -> WinZip Computing LP [Ver = 4.1 (32-bit) | Size = 5120 bytes | Modified Date = 28/10/2005 10:00:00 a.m. | Attr = ]
{E0D79305-84BE-11CE-9641-444553540000} [HKLM] -> %ProgramFiles%\WinZip\WZSHLSTB.DLL [WinZip] -> WinZip Computing LP [Ver = 4.1 (32-bit) | Size = 5120 bytes | Modified Date = 28/10/2005 10:00:00 a.m. | Attr = ]
{E0D79306-84BE-11CE-9641-444553540000} [HKLM] -> %ProgramFiles%\WinZip\WZSHLSTB.DLL [WinZip] -> WinZip Computing LP [Ver = 4.1 (32-bit) | Size = 5120 bytes | Modified Date = 28/10/2005 10:00:00 a.m. | Attr = ]
{E0D79307-84BE-11CE-9641-444553540000} [HKLM] -> %ProgramFiles%\WinZip\WZSHLSTB.DLL [WinZip] -> WinZip Computing LP [Ver = 4.1 (32-bit) | Size = 5120 bytes | Modified Date = 28/10/2005 10:00:00 a.m. | Attr = ]
{FFB699E0-306A-11d3-8BD1-00104B6F7516} [HKLM] -> %System32%\nvcpl.dll [Play on my TV helper] -> NVIDIA Corporation [Ver = 6.14.10.7806 | Size = 7110656 bytes | Modified Date = 03/11/2005 04:11:30 a.m. | Attr = ]
< ContextMenuHandlers - * [HKLM] > -> HKEY_LOCAL_MACHINE\Software\Classes\*\shellex\ContextMenuHandlers\
{48F45200-91E6-11CE-8A4F-0080C81A28D4} [HKLM] -> %ProgramFiles%\Trend Micro\Internet Security 2007\Tmdshell.dll [TMD Shell Extension] -> Trend Micro Inc. [Ver = 15.30.0.1128 | Size = 292368 bytes | Modified Date = 29/12/2006 02:53:06 p.m. | Attr = ]
{B41DB860-8EE4-11D2-9906-E49FADC173CA} [HKLM] -> %ProgramFiles%\WinRAR\RarExt.dll [WinRAR] -> [Ver = | Size = 126464 bytes | Modified Date = 05/08/2006 11:34:34 a.m. | Attr = ]
{E0D79304-84BE-11CE-9641-444553540000} [HKLM] -> %ProgramFiles%\WinZip\WZSHLSTB.DLL [WinZip] -> WinZip Computing LP [Ver = 4.1 (32-bit) | Size = 5120 bytes | Modified Date = 28/10/2005 10:00:00 a.m. | Attr = ]
< ContextMenuHandlers - Directory [HKLM] > -> HKEY_LOCAL_MACHINE\Software\Classes\Directory\shellex\ContextMenuHandlers\
{ABC70703-32AF-11d4-90C4-D483A70F4825} [HKLM] -> %SystemRoot%\BricoPacks\Vista Inspirat\iColorFolder\CMExt.dll [CMenuExtender] -> Revenger inc. [Ver = 1.2.1.2 | Size = 46592 bytes | Modified Date = 18/10/2001 05:51:00 p.m. | Attr = ]
{B41DB860-8EE4-11D2-9906-E49FADC173CA} [HKLM] -> %ProgramFiles%\WinRAR\RarExt.dll [WinRAR] -> [Ver = | Size = 126464 bytes | Modified Date = 05/08/2006 11:34:34 a.m. | Attr = ]
{E0D79304-84BE-11CE-9641-444553540000} [HKLM] -> %ProgramFiles%\WinZip\WZSHLSTB.DLL [WinZip] -> WinZip Computing LP [Ver = 4.1 (32-bit) | Size = 5120 bytes | Modified Date = 28/10/2005 10:00:00 a.m. | Attr = ]
< ContextMenuHandlers - Directory\Background [HKLM] > -> HKEY_LOCAL_MACHINE\Software\Classes\Directory\Background\shellex\ContextMenuHandlers\
{1E9B04FB-F9E5-4718-997B-B8DA88302A48} [HKLM] -> %System32%\nvshell.dll [00nView] -> [Ver = | Size = 466944 bytes | Modified Date = 03/11/2005 04:11:46 a.m. | Attr = ]
{A70C977A-BF00-412C-90B7-034C51DA2439} [HKLM] -> %System32%\nvcpl.dll [NvCplDesktopContext] -> NVIDIA Corporation [Ver = 6.14.10.7806 | Size = 7110656 bytes | Modified Date = 03/11/2005 04:11:30 a.m. | Attr = ]
< ContextMenuHandlers - Folder [HKLM] > -> HKEY_LOCAL_MACHINE\Software\Classes\Folder\shellex\ContextMenuHandlers\
{48F45200-91E6-11CE-8A4F-0080C81A28D4} [HKLM] -> %ProgramFiles%\Trend Micro\Internet Security 2007\Tmdshell.dll [TMD Shell Extension] -> Trend Micro Inc. [Ver = 15.30.0.1128 | Size = 292368 bytes | Modified Date = 29/12/2006 02:53:06 p.m. | Attr = ]
{B41DB860-8EE4-11D2-9906-E49FADC173CA} [HKLM] -> %ProgramFiles%\WinRAR\RarExt.dll [WinRAR] -> [Ver = | Size = 126464 bytes | Modified Date = 05/08/2006 11:34:34 a.m. | Attr = ]
{E0D79304-84BE-11CE-9641-444553540000} [HKLM] -> %ProgramFiles%\WinZip\WZSHLSTB.DLL [WinZip] -> WinZip Computing LP [Ver = 4.1 (32-bit) | Size = 5120 bytes | Modified Date = 28/10/2005 10:00:00 a.m. | Attr = ]
< ColumnHandlers - Folder [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\shellex\ColumnHandlers\
{F9DB5320-233E-11D1-9F84-707F02C10627} [HKLM] -> %ProgramFiles%\Adobe\Acrobat 7.0\ActiveX\pdfshell.dll [PDF Shell Extension] -> Adobe Systems, Inc. [Ver = 7.0.0.0 | Size = 110592 bytes | Modified Date = 14/12/2004 02:20:02 a.m. | Attr = ]
< User Agent Post Platform [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform
SV1 -> ->
< DNS Name Servers [HKLM] > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Adapters\
{017E2A6F-100A-4065-A2B8-6BB608AF55C1} -> (Realtek RTL8139/810x Family Fast Ethernet NIC) ->
{15DEE97E-5B5E-4AB9-99F1-13542DE06A0B} -> () ->
{D8897BCC-3CA8-4AEC-B44D-AC8BA732DDEF} -> () ->
< Protocol Handlers [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\
ipp -> Reg Data - Key not found -> File not found
msdaipp -> Reg Data - Key not found -> File not found
< Downloaded Program Files > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\
{17492023-C23A-453E-A040-C7C580BBF700} -> Windows Genuine Advantage Validation Tool - CodeBase = http://go.microsoft.com/fwlink/?linkid=39204 ->
Microsoft XML Parser for Java -> - CodeBase = file://C:\WINDOWS\Java\classes\xmldso.cab ->


[Files - Created Within 30 days]
Jessan.java -> %SystemDrive%\Jessan.java -> [Ver = | Size = 389 bytes | Created Date = 27/01/2007 11:22:10 a.m. | Attr = ]
BronNetDomList.bat -> %LocalAppData%\BronNetDomList.bat -> [Ver = | Size = 101 bytes | Created Date = 28/01/2007 05:28:47 p.m. | Attr = ]
JunkAtx18.bin -> %LocalAppData%\JunkAtx18.bin -> [Ver = | Size = 7098 bytes | Created Date = 18/01/2007 07:42:40 p.m. | Attr = ]
Update.18.Bron.Tok.bin -> %LocalAppData%\Update.18.Bron.Tok.bin -> [Ver = | Size = 3536 bytes | Created Date = 28/01/2007 05:28:51 p.m. | Attr = ]
Adobe Reader 7.0.lnk -> %AllUsersDesktop%\Adobe Reader 7.0.lnk -> [Ver = | Size = 1775 bytes | Created Date = 04/02/2007 11:54:51 a.m. | Attr = ]
Trend Micro PC-cillin Internet Security 2007.lnk -> %AllUsersDesktop%\Trend Micro PC-cillin Internet Security 2007.lnk -> [Ver = | Size = 834 bytes | Created Date = 03/02/2007 05:33:09 p.m. | Attr = ]
01_Music_auto_rated_at_5_stars.wpl -> %AllUsersDocuments%\Mi música\Sync Playlists\00733597\01_Music_auto_rated_at_5_stars.wpl -> [Ver = | Size = 1069 bytes | Created Date = 31/01/2007 07:57:41 p.m. | Attr = ]
02_Music_added_in_the_last_month.wpl -> %AllUsersDocuments%\Mi música\Sync Playlists\00733597\02_Music_added_in_the_last_month.wpl -> [Ver = | Size = 1289 bytes | Created Date = 31/01/2007 07:57:41 p.m. | Attr = ]
03_Music_rated_at_4_or_5_stars.wpl -> %AllUsersDocuments%\Mi música\Sync Playlists\00733597\03_Music_rated_at_4_or_5_stars.wpl -> [Ver = | Size = 1279 bytes | Created Date = 31/01/2007 07:57:41 p.m. | Attr = ]
04_Music_played_in_the_last_month.wpl -> %AllUsersDocuments%\Mi música\Sync Playlists\00733597\04_Music_played_in_the_last_month.wpl -> [Ver = | Size = 1296 bytes | Created Date = 31/01/2007 07:57:41 p.m. | Attr = ]
05_Pictures_taken_in_the_last_month.wpl -> %AllUsersDocuments%\Mi música\Sync Playlists\00733597\05_Pictures_taken_in_the_last_month.wpl -> [Ver = | Size = 805 bytes | Created Date = 31/01/2007 07:57:41 p.m. | Attr = ]
06_Pictures_rated_4_or_5_stars.wpl -> %AllUsersDocuments%\Mi música\Sync Playlists\00733597\06_Pictures_rated_4_or_5_stars.wpl -> [Ver = | Size = 800 bytes | Created Date = 31/01/2007 07:57:41 p.m. | Attr = ]
07_TV_recorded_in_the_last_week.wpl -> %AllUsersDocuments%\Mi música\Sync Playlists\00733597\07_TV_recorded_in_the_last_week.wpl -> [Ver = | Size = 1039 bytes | Created Date = 31/01/2007 07:57:41 p.m. | Attr = ]
08_Video_rated_at_4_or_5_stars.wpl -> %AllUsersDocuments%\Mi música\Sync Playlists\00733597\08_Video_rated_at_4_or_5_stars.wpl -> [Ver = | Size = 1033 bytes | Created Date = 31/01/2007 07:57:41 p.m. | Attr = ]
09_Music_played_the_most.wpl -> %AllUsersDocuments%\Mi música\Sync Playlists\00733597\09_Music_played_the_most.wpl -> [Ver = | Size = 1034 bytes | Created Date = 31/01/2007 07:57:41 p.m. | Attr = ]
10_All_Music.wpl -> %AllUsersDocuments%\Mi música\Sync Playlists\00733597\10_All_Music.wpl -> [Ver = | Size = 1069 bytes | Created Date = 31/01/2007 07:57:41 p.m. | Attr = ]
11_All_Pictures.wpl -> %AllUsersDocuments%\Mi música\Sync Playlists\00733597\11_All_Pictures.wpl -> [Ver = | Size = 592 bytes | Created Date = 31/01/2007 07:57:41 p.m. | Attr = ]
12_All_Video.wpl -> %AllUsersDocuments%\Mi música\Sync Playlists\00733597\12_All_Video.wpl -> [Ver = | Size = 1087 bytes | Created Date = 31/01/2007 07:57:41 p.m. | Attr = ]
Inicio rápido de Adobe Reader.lnk -> %AllUsersStartup%\Inicio rápido de Adobe Reader.lnk -> [Ver = | Size = 1792 bytes | Created Date = 04/02/2007 11:54:51 a.m. | Attr = ]
CCleaner.lnk -> %UserDesktop%\CCleaner.lnk -> [Ver = | Size = 1620 bytes | Created Date = 03/02/2007 03:58:31 p.m. | Attr = ]
DiscoveryRO.lnk -> %UserDesktop%\DiscoveryRO.lnk -> [Ver = | Size = 822 bytes | Created Date = 11/02/2007 11:12:31 a.m. | Attr = ]
Google.url -> %UserDesktop%\Google.url -> [Ver = | Size = 183 bytes | Created Date = 04/02/2007 03:42:39 p.m. | Attr = ]
jcpro400.zip -> %UserDesktop%\jcpro400.zip -> [Ver = | Size = 4706618 bytes | Created Date = 26/01/2007 10:54:32 p.m. | Attr = ]
@Alternate Data Stream - 26 bytes -> %UserDesktop%\jcpro400.zip:Zone.Identifier ->
JCreator Pro.lnk -> %UserDesktop%\JCreator Pro.lnk -> [Ver = | Size = 796 bytes | Created Date = 26/01/2007 11:06:47 p.m. | Attr = ]
NiktoutRO-Chaos-Patcher.rar -> %UserDesktop%\NiktoutRO-Chaos-Patcher.rar -> [Ver = | Size = 430592 bytes | Created Date = 20/01/2007 11:13:51 p.m. | Attr = ]
@Alternate Data Stream - 26 bytes -> %UserDesktop%\NiktoutRO-Chaos-Patcher.rar:Zone.Identifier ->
Shareaza.lnk -> %UserDesktop%\Shareaza.lnk -> [Ver = | Size = 793 bytes | Created Date = 03/02/2007 04:31:39 p.m. | Attr = ]
Spybot - Search & Destroy.lnk -> %UserDesktop%\Spybot - Search & Destroy.lnk -> [Ver = | Size = 982 bytes | Created Date = 03/02/2007 07:09:57 p.m. | Attr = ]
aawsepersonal.exe -> %UserDesktop%\No Tocar\aawsepersonal.exe -> [Ver = | Size = 2855080 bytes | Created Date = 31/01/2007 09:11:58 p.m. | Attr = ]
@Alternate Data Stream - 26 bytes -> %UserDesktop%\No Tocar\aawsepersonal.exe:Zone.Identifier ->
Ad-Aware SE Personal.lnk -> %UserDesktop%\No Tocar\Ad-Aware SE Personal.lnk -> [Ver = | Size = 876 bytes | Created Date = 31/01/2007 09:12:30 p.m. | Attr = ]
ccsetup137.exe -> %UserDesktop%\No Tocar\ccsetup137.exe -> Piriform Ltd [Ver = 1.37.0.456 | Size = 2683984 bytes | Created Date = 03/02/2007 03:57:56 p.m. | Attr = ]
@Alternate Data Stream - 26 bytes -> %UserDesktop%\No Tocar\ccsetup137.exe:Zone.Identifier ->
ccsetup137.zip -> %UserDesktop%\No Tocar\ccsetup137.zip -> [Ver = | Size = 2649732 bytes | Created Date = 03/02/2007 05:08:51 p.m. | Attr = ]
defs.zip -> %UserDesktop%\No Tocar\defs.zip -> [Ver = | Size = 963874 bytes | Created Date = 31/01/2007 09:04:15 p.m. | Attr = ]
@Alternate Data Stream - 26 bytes -> %UserDesktop%\No Tocar\defs.zip:Zone.Identifier ->
Google Updater.lnk -> %UserDesktop%\No Tocar\Google Updater.lnk -> [Ver = | Size = 939 bytes | Created Date = 28/01/2007 03:08:05 p.m. | Attr = ]
hijackthis_sfx.exe -> %UserDesktop%\No Tocar\hijackthis_sfx.exe -> [Ver = | Size = 282601 bytes | Created Date = 31/01/2007 10:38:04 p.m. | Attr = ]
@Alternate Data Stream - 26 bytes -> %UserDesktop%\No Tocar\hijackthis_sfx.exe:Zone.Identifier ->
killbox.zip -> %UserDesktop%\No Tocar\killbox.zip -> [Ver = | Size = 44813 bytes | Created Date = 29/01/2007 10:58:11 p.m. | Attr = ]
@Alternate Data Stream - 26 bytes -> %UserDesktop%\No Tocar\killbox.zip:Zone.Identifier ->
Spybot - Search & Destroy.lnk -> %UserDesktop%\No Tocar\Spybot - Search & Destroy.lnk -> [Ver = | Size = 982 bytes | Created Date = 31/01/2007 09:19:49 p.m. | Attr = ]
spybotsd14.exe -> %UserDesktop%\No Tocar\spybotsd14.exe -> Safer Networking Limited [Ver = | Size = 5037072 bytes | Created Date = 31/01/2007 09:18:28 p.m. | Attr = ]
@Alternate Data Stream - 26 bytes -> %UserDesktop%\No Tocar\spybotsd14.exe:Zone.Identifier ->
stng260.exe -> %UserDesktop%\No Tocar\stng260.exe -> McAfee Inc. [Ver = 2.6.0. | Size = 1144839 bytes | Created Date = 31/01/2007 10:10:46 p.m. | Attr = ]
@Alternate Data Stream - 26 bytes -> %UserDesktop%\No Tocar\stng260.exe:Zone.Identifier ->
stng260.opt -> %UserDesktop%\No Tocar\stng260.opt -> [Ver = | Size = 12 bytes | Created Date = 31/01/2007 10:33:24 p.m. | Attr = ]
TIS2007_TMSiteTrialDL.exe -> %UserDesktop%\No Tocar\TIS2007_TMSiteTrialDL.exe -> Trend Micro Inc. [Ver = 15.3 | Size = 86103499 bytes | Created Date = 03/02/2007 05:17:07 p.m. | Attr = ]
@Alternate Data Stream - 26 bytes -> %UserDesktop%\No Tocar\TIS2007_TMSiteTrialDL.exe:Zone.Identifier ->
db_pcc.dat -> %UserDesktop%\No Tocar\TIS2007_153_1151\Setup\db_pcc.dat -> [Ver = | Size = 38119 bytes | Created Date = 23/01/2007 01:50:10 a.m. | Attr = ]
setup.ini -> %UserDesktop%\No Tocar\TIS2007_153_1151\Setup\setup.ini -> [Ver = | Size = 338 bytes | Created Date = 29/01/2007 07:05:38 p.m. | Attr = ]
L10NPcc.ini -> %UserDesktop%\No Tocar\TIS2007_153_1151\Setup\Module\L10NPcc.ini -> [Ver = | Size = 1554 bytes | Created Date = 19/01/2007 11:23:20 a.m. | Attr = ]
pccguide.exe -> %UserDesktop%\No Tocar\TIS2007_153_1151\Setup\Module\pccguide.exe -> Trend Micro Inc. [Ver = 15.30.0.1151 | Size = 3429904 bytes | Created Date = 23/01/2007 02:26:26 p.m. | Attr = ]
pccillin.ini -> %UserDesktop%\No Tocar\TIS2007_153_1151\Setup\Module\pccillin.ini -> [Ver = | Size = 1495 bytes | Created Date = 29/01/2007 07:04:50 p.m. | Attr = ]
pcclient.dat -> %UserDesktop%\No Tocar\TIS2007_153_1151\Setup\Module\pcclient.dat -> [Ver = | Size = 980512 bytes | Created Date = 23/01/2007 02:27:32 p.m. | Attr = ]
PcCtlCom.exe -> %UserDesktop%\No Tocar\TIS2007_153_1151\Setup\Module\PcCtlCom.exe -> Trend Micro Inc. [Ver = 15.30.0.1151 | Size = 1922576 bytes | Created Date = 23/01/2007 02:27:16 p.m. | Attr = ]
PCCTool.exe -> %UserDesktop%\No Tocar\TIS2007_153_1151\Setup\Module\PCCTool.exe -> Trend Micro Inc. [Ver = 15.30.0.1151 | Size = 1721872 bytes | Created Date = 23/01/2007 02:27:06 p.m. | Attr = ]
PccUpdUI.exe -> %UserDesktop%\No Tocar\TIS2007_153_1151\Setup\Module\PccUpdUI.exe -> Trend Micro Inc. [Ver = 15.30.0.1151 | Size = 1246736 bytes | Created Date = 23/01/2007 02:52:02 p.m. | Attr = ]
PcFstStr.exe -> %UserDesktop%\No Tocar\TIS2007_153_1151\Setup\Module\PcFstStr.exe -> Trend Micro Inc. [Ver = 15.30.0.1151 | Size = 644624 bytes | Created Date = 23/01/2007 02:27:06 p.m. | Attr = ]
Google Updater.exe -> %UserDocuments%\Google Updater.exe -> [Ver = | Size = 743272 bytes | Created Date = 28/01/2007 03:08:41 p.m. | Attr = ]
Google Updater.exe -> %UserDocuments%\2007\Google Updater.exe -> [Ver = | Size = 743272 bytes | Created Date = 28/01/2007 05:49:18 p.m. | Attr = ]
T07promo.exe -> %UserDocuments%\2007\T07promo.exe -> Panda Software [Ver = 6.0.2.0 | Size = 26322576 bytes | Created Date = 28/01/2007 05:49:18 p.m. | Attr = ]
(mago de oz) La cancion del pirata.mp3 -> %UserDocuments%\Downloads\(mago de oz) La cancion del pirata.mp3 -> [Ver = | Size = 3225419 bytes | Created Date = 10/02/2007 02:55:46 p.m. | Attr = ]
AlbumArt_{A6896FC1-CB06-48C8-9CD8-6885F58623A9}_Large.jpg -> %UserDocuments%\Downloads\AlbumArt_{A6896FC1-CB06-48C8-9CD8-6885F58623A9}_Large.jpg -> [Ver = | Size = 5576 bytes | Created Date = 26/01/2007 10:01:00 a.m. | Attr = HS]
AlbumArt_{A6896FC1-CB06-48C8-9CD8-6885F58623A9}_Small.jpg -> %UserDocuments%\Downloads\AlbumArt_{A6896FC1-CB06-48C8-9CD8-6885F58623A9}_Small.jpg -> [Ver = | Size = 1790 bytes | Created Date = 26/01/2007 10:01:00 a.m. | Attr = HS]
AlbumArt_{D7665C88-A5A1-4FFA-A88E-ECE2EBAA4AD0}_Large.jpg -> %UserDocuments%\Downloads\AlbumArt_{D7665C88-A5A1-4FFA-A88E-ECE2EBAA4AD0}_Large.jpg -> [Ver = | Size = 14683 bytes | Created Date = 20/01/2007 06:28:43 p.m. | Attr = HS]
AlbumArt_{D7665C88-A5A1-4FFA-A88E-ECE2EBAA4AD0}_Small.jpg -> %UserDocuments%\Downloads\AlbumArt_{D7665C88-A5A1-4FFA-A88E-ECE2EBAA4AD0}_Small.jpg -> [Ver = | Size = 3300 bytes | Created Date = 20/01/2007 06:28:43 p.m. | Attr = HS]
Gwen Stefani - Hollaback Girl.mp3 -> %UserDocuments%\Downloads\Gwen Stefani - Hollaback Girl.mp3 -> [Ver = | Size = 3999997 bytes | Created Date = 28/01/2007 01:22:30 p.m. | Attr = ]
Kittie-Korn- Slipknot- Static-X- Nothingface- Fear Factory- Dope- Coal Chamber- Mudvayne - Waste(2).asf -> %UserDocuments%\Downloads\Kittie-Korn- Slipknot- Static-X- Nothingface- Fear Factory- Dope- Coal Chamber- Mudvayne - Waste(2).asf -> [Ver = | Size = 3956755 bytes | Created Date = 30/01/2007 10:15:56 a.m. | Attr = ]
Limp Bizkit - 5 The bleep Song.mp3 -> %UserDocuments%\Downloads\Limp Bizkit - 5 The bleep Song.mp3 -> [Ver = | Size = 3662704 bytes | Created Date = 28/01/2007 01:22:31 p.m. | Attr = ]
Limp Bizkit - Behind blue Eyes.mp3 -> %UserDocuments%\Downloads\Limp Bizkit - Behind blue Eyes.mp3 -> [Ver = | Size = 4393934 bytes | Created Date = 28/01/2007 01:22:31 p.m. | Attr = ]
Limp Bizkit - Break Stuff.mp3 -> %UserDocuments%\Downloads\Limp Bizkit - Break Stuff.mp3 -> [Ver = | Size = 2670215 bytes | Created Date = 28/01/2007 01:22:32 p.m. | Attr = ]
Limp Bizkit - Faith.mp3 -> %UserDocuments%\Downloads\Limp Bizkit - Faith.mp3 -> [Ver = | Size = 3715657 bytes | Created Date = 10/02/2007 05:08:41 p.m. | Attr = ]
Limp Bizkit - Nookie (1).mp3 -> %UserDocuments%\Downloads\Limp Bizkit - Nookie (1).mp3 -> [Ver = | Size = 5326572 bytes | Created Date = 10/02/2007 05:34:23 p.m. | Attr = ]
Limp Bizkit - Nookie.mp3 -> %UserDocuments%\Downloads\Limp Bizkit - Nookie.mp3 -> [Ver = | Size = 5331308 bytes | Created Date = 28/01/2007 01:22:32 p.m. | Attr = ]
Lista.m3u -> %UserDocuments%\Downloads\Lista.m3u -> [Ver = | Size = 475 bytes | Created Date = 03/02/2007 03:51:40 p.m. | Attr = ]
Mago de Oz - Fiesta Pagana.mp3 -> %UserDocuments%\Downloads\Mago de Oz - Fiesta Pagana.mp3 -> [Ver = | Size = 4752241 bytes | Created Date = 10/02/2007 05:33:47 p.m. | Attr = ]
Mago de Oz - Fiesta Pagana.mpeg -> %UserDocuments%\Downloads\Mago de Oz - Fiesta Pagana.mpeg -> [Ver = | Size = 35737600 bytes | Created Date = 10/02/2007 03:03:39 p.m. | Attr = ]
Mago de oz - la fiesta pagana.mpg -> %UserDocuments%\Downloads\Mago de oz - la fiesta pagana.mpg -> [Ver = | Size = 2373632 bytes | Created Date = 10/02/2007 02:56:47 p.m. | Attr = ]
Mago de Oz - Los Ojos Del Dragón.mp3 -> %UserDocuments%\Downloads\Mago de Oz - Los Ojos Del Dragón.mp3 -> [Ver = | Size = 4547764 bytes | Created Date = 10/02/2007 03:18:12 p.m. | Attr = ]
Mago De Oz - Molinos de Viento.mp3 -> %UserDocuments%\Downloads\Mago De Oz - Molinos de Viento.mp3 -> [Ver = | Size = 4033232 bytes | Created Date = 28/01/2007 01:22:10 p.m. | Attr = ]
Mago de Oz - Molinos de Viento.mpg -> %UserDocuments%\Downloads\Mago de Oz - Molinos de Viento.mpg -> [Ver = | Size = 43884092 bytes | Created Date = 28/01/2007 01:22:10 p.m. | Attr = ]
mago de oz - satania.mp3 -> %UserDocuments%\Downloads\mago de oz - satania.mp3 -> [Ver = | Size = 7904026 bytes | Created Date = 10/02/2007 02:51:54 p.m. | Attr = ]
Mago De Oz Hoy Toca Ser Feliz Nuevo Video Clip By Etxeide.mpg -> %UserDocuments%\Downloads\Mago De Oz Hoy Toca Ser Feliz Nuevo Video Clip By Etxeide.mpg -> [Ver = | Size = 10575872 bytes | Created Date = 28/01/2007 01:22:25 p.m. | Attr = ]
mago de oz-Es hora de marchar.mp3 -> %UserDocuments%\Downloads\mago de oz-Es hora de marchar.mp3 -> [Ver = | Size = 4853846 bytes | Created Date = 30/01/2007 10:15:37 a.m. | Attr = ]
Marilyn Manson & Slipknot - (Video) - Fight Song.mpg -> %UserDocuments%\Downloads\Marilyn Manson & Slipknot - (Video) - Fight Song.mpg -> [Ver = | Size = 30858076 bytes | Created Date = 28/01/2007 01:22:34 p.m. | Attr = ]
Marilyn manson-the beautiful people.mp3 -> %UserDocuments%\Downloads\Marilyn manson-the beautiful people.mp3 -> [Ver = | Size = 3496945 bytes | Created Date = 30/01/2007 09:56:51 a.m. | Attr = ]
Maritornes.mp3 -> %UserDocuments%\Downloads\Maritornes.mp3 -> [Ver = | Size = 5257404 bytes | Created Date = 10/02/2007 07:44:58 p.m. | Attr = ]
Mateo Lynch - Alta Sociedad.mp3 -> %UserDocuments%\Downloads\Mateo Lynch - Alta Sociedad.mp3 -> [Ver = | Size = 1414084 bytes | Created Date = 28/01/2007 01:22:49 p.m. | Attr = ]
Panda - Narcisista Por Excelencia.mp3 -> %UserDocuments%\Downloads\Panda - Narcisista Por Excelencia.mp3 -> [Ver = | Size = 4683361 bytes | Created Date = 04/02/2007 05:05:10 p.m. | Attr = ]
Pluma pluma gay.mp3 -> %UserDocuments%\Downloads\Pluma pluma gay.mp3 -> [Ver = | Size = 2299321 bytes | Created Date = 28/01/2007 01:22:30 p.m. | Attr = ]
Shareaza_2.2.5.0.exe -> %UserDocuments%\Downloads\Shareaza_2.2.5.0.exe -> Shareaza Development Team [Ver = 2.2.5.0 | Size = 4301387 bytes | Created Date = 09/02/2007 10:34:23 p.m. | Attr = ]
AdbeRdr708_es_ES.exe -> %UserDocuments%\Ejecutables\AdbeRdr708_es_ES.exe -> [Ver = | Size = 24018736 bytes | Created Date = 04/02/2007 11:36:46 a.m. | Attr = ]
@Alternate Data Stream - 26 bytes -> %UserDocuments%\Ejecutables\AdbeRdr708_es_ES.exe:Zone.Identifier ->
AdbeRdr80_es_ES.exe -> %UserDocuments%\Ejecutables\AdbeRdr80_es_ES.exe -> [Ver = 1.0.0.54 | Size = 22218232 bytes | Created Date = 03/02/2007 12:12:04 p.m. | Attr = ]
@Alternate Data Stream - 26 bytes -> %UserDocuments%\Ejecutables\AdbeRdr80_es_ES.exe:Zone.Identifier ->
Corel_PaintShopPro1000_EN_TBYB_TrialESD.exe -> %UserDocuments%\Ejecutables\Corel_PaintShopPro1000_EN_TBYB_TrialESD.exe -> Macrovision Corporation [Ver = 11.00.28844 | Size = 111143864 bytes | Created Date = 04/02/2007 03:16:04 p.m. | Attr = ]
@Alternate Data Stream - 26 bytes -> %UserDocuments%\Ejecutables\Corel_PaintShopPro1000_EN_TBYB_TrialESD.exe:Zone.Identifier ->
install_flash_player_active_x.msi -> %UserDocuments%\Ejecutables\install_flash_player_active_x.msi -> [Ver = | Size = 4212736 bytes | Created Date = 03/02/2007 12:35:20 p.m. | Attr = ]
@Alternate Data Stream - 26 bytes -> %UserDocuments%\Ejecutables\install_flash_player_active_x.msi:Zone.Identifier ->
Shareaza_2.2.3.0.exe -> %UserDocuments%\Ejecutables\Shareaza_2.2.3.0.exe -> Shareaza Development Team [Ver = 2.2.3.0 | Size = 4366779 bytes | Created Date = 09/02/2007 10:31:35 p.m. | Attr = ]
@Alternate Data Stream - 26 bytes -> %UserDocuments%\Ejecutables\Shareaza_2.2.3.0.exe:Zone.Identifier ->
winpfind3u.exe -> %UserDocuments%\Ejecutables\winpfind3u.exe -> [Ver = | Size = 342353 bytes | Created Date = 09/02/2007 10:39:18 p.m. | Attr = ]
@Alternate Data Stream - 26 bytes -> %UserDocuments%\Ejecutables\winpfind3u.exe:Zone.Identifier ->
DiscoveryRO_2007-01-16.rar -> %UserDocuments%\Etrok\DiscoveryRO_2007-01-16.rar -> [Ver = | Size = 981152 bytes | Created Date = 10/02/2007 05:53:27 p.m. | Attr = ]
discovery_full1119.exe -> %UserDocuments%\Etrok\discovery_full1119.exe -> [Ver = | Size = 988033196 bytes | Created Date = 10/02/2007 03:46:41 p.m. | Attr = ]
@Alternate Data Stream - 26 bytes -> %UserDocuments%\Etrok\discovery_full1119.exe:Zone.Identifier ->
REFERENCIA PERSONAL Nancy.doc -> %UserDocuments%\Mama\REFERENCIA PERSONAL Nancy.doc -> [Ver = | Size = 21504 bytes | Created Date = 22/01/2007 08:53:48 p.m. | Attr = ]
REFERENCIA PERSONAL Nancy2.doc -> %UserDocuments%\Mama\REFERENCIA PERSONAL Nancy2.doc -> [Ver = | Size = 22016 bytes | Created Date = 22/01/2007 09:05:20 p.m. | Attr = ]
Ejercicios7-TipoExamenParcial3.doc -> %UserDocuments%\Mis archivos recibidos\Ejercicios7-TipoExamenParcial3.doc -> [Ver = | Size = 83456 bytes | Created Date = 12/02/2007 10:53:03 a.m. | Attr = ]
EjerciciosPOOyciclos.doc -> %UserDocuments%\Mis archivos recibidos\EjerciciosPOOyciclos.doc -> [Ver = | Size = 121344 bytes | Created Date = 22/01/2007 11:56:55 a.m. | Attr = ]
EXCEL.doc -> %UserDocuments%\Mis archivos recibidos\EXCEL.doc -> [Ver = | Size = 221696 bytes | Created Date = 12/02/2007 10:53:05 a.m. | Attr = ]
Notepad+++++++++.rar -> %UserDocuments%\Mis archivos recibidos\Notepad+++++++++.rar -> [Ver = | Size = 662864 bytes | Created Date = 18/01/2007 10:35:58 p.m. | Attr = ]
pizarrasf0607.pdf -> %UserDocuments%\Mis archivos recibidos\pizarrasf0607.pdf -> [Ver = | Size = 8377 bytes | Created Date = 18/01/2007 11:02:49 p.m. | Attr = ]
Temas7-EOO-Clases-Metodos-Completa.doc -> %UserDocuments%\Mis archivos recibidos\Temas7-EOO-Clases-Metodos-Completa.doc -> [Ver = | Size = 182784 bytes | Created Date = 22/01/2007 11:58:40 a.m. | Attr = ]
Temas8-Tiposdedatosestructurados(1).doc -> %UserDocuments%\Mis archivos recibidos\Temas8-Tiposdedatosestructurados(1).doc -> [Ver = | Size = 236544 bytes | Created Date = 22/01/2007 11:58:42 a.m. | Attr = ]
Temas8-Tiposdedatosestructurados.doc -> %UserDocuments%\Mis archivos recibidos\Temas8-Tiposdedatosestructurados.doc -> [Ver = | Size = 232960 bytes | Created Date = 22/01/2007 11:57:00 a.m. | Attr = ]
about.Brontok.A.html -> %UserDocuments%\Mis imágenes\about.Brontok.A.html -> [Ver = | Size = 978 bytes | Created Date = 27/01/2007 02:42:28 p.m. | Attr = ]
Marilyn Manson- The Beautiful People live.mpg -> %UserDocuments%\Mis vídeos\Marilyn Manson- The Beautiful People live.mpg -> [Ver = | Size = 41539176 bytes | Created Date = 27/01/2007 02:31:10 p.m. | Attr = ]
Slipknot - Before I Forget.wmv -> %UserDocuments%\Mis vídeos\Slipknot - Before I Forget.wmv -> [Ver = | Size = 6867654 bytes | Created Date = 25/01/2007 08:48:51 p.m. | Attr = ]
AlbumArtSmall.jpg -> %UserDocuments%\Mis álbumes\AlbumArtSmall.jpg -> [Ver = | Size = 3300 bytes | Created Date = 28/01/2007 01:19:10 p.m. | Attr = HS]
AlbumArt_{D7665C88-A5A1-4FFA-A88E-ECE2EBAA4AD0}_Large.jpg -> %UserDocuments%\Mis álbumes\AlbumArt_{D7665C88-A5A1-4FFA-A88E-ECE2EBAA4AD0}_Large.jpg -> [Ver = | Size = 14683 bytes | Created Date = 28/01/2007 01:19:10 p.m. | Attr = HS]
AlbumArt_{D7665C88-A5A1-4FFA-A88E-ECE2EBAA4AD0}_Small.jpg -> %UserDocuments%\Mis álbumes\AlbumArt_{D7665C88-A5A1-4FFA-A88E-ECE2EBAA4AD0}_Small.jpg -> [Ver = | Size = 3300 bytes | Created Date = 28/01/2007 01:19:10 p.m. | Attr = HS]
desktop.ini -> %UserDocuments%\Mis álbumes\desktop.ini -> [Ver = | Size = 353 bytes | Created Date = 28/01/2007 01:19:10 p.m. | Attr = HS]
Folder.jpg -> %UserDocuments%\Mis álbumes\Folder.jpg -> [Ver = | Size = 14683 bytes | Created Date = 28/01/2007 01:19:10 p.m. | Attr = HS]
Limp Bizkit - 5 The bleep Song.mp3 -> %UserDocuments%\Mis álbumes\Limp Bizkit - 5 The bleep Song.mp3 -> [Ver = | Size = 3662704 bytes | Created Date = 20/01/2007 01:19:20 a.m. | Attr = ]
Limp Bizkit - Behind blue Eyes.mp3 -> %UserDocuments%\Mis álbumes\Limp Bizkit - Behind blue Eyes.mp3 -> [Ver = | Size = 4393934 bytes | Created Date = 20/01/2007 12:54:56 a.m. | Attr = ]
Limp Bizkit - Break Stuff.mp3 -> %UserDocuments%\Mis álbumes\Limp Bizkit - Break Stuff.mp3 -> [Ver = | Size = 2670215 bytes | Created Date = 20/01/2007 01:12:54 a.m. | Attr = ]
Limp Bizkit - Nookie.mp3 -> %UserDocuments%\Mis álbumes\Limp Bizkit - Nookie.mp3 -> [Ver = | Size = 5331308 bytes | Created Date = 20/01/2007 01:12:51 a.m. | Attr = ]
Marilyn Manson & Slipknot - (Video) - Fight Song.mpg -> %UserDocuments%\Mis álbumes\Marilyn Manson & Slipknot - (Video) - Fight Song.mpg -> [Ver = | Size = 30858076 bytes | Created Date = 25/01/2007 08:46:42 p.m. | Attr = ]
Mateo Lynch - Alta Sociedad.mp3 -> %UserDocuments%\Mis álbumes\Mateo Lynch - Alta Sociedad.mp3 -> [Ver = | Size = 1414084 bytes | Created Date = 15/01/2007 11:44:48 a.m. | Attr = ]
Thumbs.db -> %UserDocuments%\Mis álbumes\Thumbs.db -> [Ver = | Size = 8704 bytes | Created Date = 30/01/2007 10:27:31 a.m. | Attr = HS]
@Alternate Data Stream - 0 bytes -> %UserDocuments%\Mis álbumes\Thumbs.db:encryptable ->
circuito electrico (frank).doc -> %UserDocuments%\UCV\circuito electrico (frank).doc -> [Ver = | Size = 46080 bytes | Created Date = 21/01/2007 01:54:24 p.m. | Attr = ]
Comercio Electronico.doc -> %UserDocuments%\UCV\Comercio Electronico.doc -> [Ver = | Size = 83456 bytes | Created Date = 04/02/2007 05:10:31 p.m. | Attr = ]
practica%2010.pdf -> %UserDocuments%\UCV\practica%2010.pdf -> [Ver = | Size = 90028 bytes | Created Date = 31/01/2007 11:54:39 a.m. | Attr = ]
Practica%208.pdf -> %UserDocuments%\UCV\Practica%208.pdf -> [Ver = | Size = 74919 bytes | Created Date = 31/01/2007 11:54:24 a.m. | Attr = ]
Tabla.doc -> %UserDocuments%\UCV\Tabla.doc -> [Ver = | Size = 20480 bytes | Created Date = 18/01/2007 11:48:09 p.m. | Attr = ]
Texto sancionado.doc -> %UserDocuments%\UCV\Texto sancionado.doc -> [Ver = | Size = 48128 bytes | Created Date = 24/01/2007 11:50:09 a.m. | Attr = ]
Linkin Park - Papercut.amv -> %UserDocuments%\Videos\Linkin Park - Papercut.amv -> [Ver = | Size = 4975454 bytes | Created Date = 26/01/2007 09:49:00 a.m. | Attr = ]
Marilyn Manson- The Beautiful People live.amv -> %UserDocuments%\Videos\Marilyn Manson- The Beautiful People live.amv -> [Ver = | Size = 6271157 bytes | Created Date = 03/02/2007 02:24:30 p.m. | Attr = ]
Slipknot - Before I Forget.amv -> %UserDocuments%\Videos\Slipknot - Before I Forget.amv -> [Ver = | Size = 6674438 bytes | Created Date = 26/01/2007 09:46:01 a.m. | Attr = ]
(mago de oz) La cancion del pirata.mp3.xml -> %UserDocuments%\Downloads\Metadata\(mago de oz) La cancion del pirata.mp3.xml -> [Ver = | Size = 293 bytes | Created Date = 10/02/2007 03:21:32 p.m. | Attr = ]
Kudai - Llevame.mp3.xml -> %UserDocuments%\Downloads\Metadata\Kudai - Llevame.mp3.xml -> [Ver = | Size = 302 bytes | Created Date = 16/01/2007 01:54:25 p.m. | Attr = ]
Limp Bizkit - 5 The bleep Song.mp3.xml -> %UserDocuments%\Downloads\Metadata\Limp Bizkit - 5 The bleep Song.mp3.xml -> [Ver = | Size = 292 bytes | Created Date = 20/01/2007 02:29:10 a.m. | Attr = ]
Limp Bizkit - Behind blue Eyes.mp3.xml -> %UserDocuments%\Downloads\Metadata\Limp Bizkit - Behind blue Eyes.mp3.xml -> [Ver = | Size = 343 bytes | Created Date = 20/01/2007 01:00:49 a.m. | Attr = ]
Limp Bizkit - Break Stuff.mp3.xml -> %UserDocuments%\Downloads\Metadata\Limp Bizkit - Break Stuff.mp3.xml -> [Ver = | Size = 319 bytes | Created Date = 20/01/2007 02:00:52 a.m. | Attr = ]
Limp Bizkit - Faith.mp3.xml -> %UserDocuments%\Downloads\Metadata\Limp Bizkit - Faith.mp3.xml -> [Ver = | Size = 278 bytes | Created Date = 10/02/2007 05:37:59 p.m. | Attr = ]
Limp Bizkit - Nookie (1).mp3.xml -> %UserDocuments%\Downloads\Metadata\Limp Bizkit - Nookie (1).mp3.xml -> [Ver = | Size = 350 bytes | Created Date = 10/02/2007 05:46:28 p.m. | Attr = ]
Limp Bizkit - Nookie.mp3.xml -> %UserDocuments%\Downloads\Metadata\Limp Bizkit - Nookie.mp3.xml -> [Ver = | Size = 362 bytes | Created Date = 20/01/2007 01:26:57 a.m. | Attr = ]
Mago de Oz - Fiesta Pagana.mpeg.xml -> %UserDocuments%\

#4 Jessanramirez

Jessanramirez
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:10:19 AM

Posted 13 February 2007 - 09:03 AM

1.jpg -> %UserDocuments%\Jessan\a\No Tocar\g\1.jpg -> [Ver = | Size = 2868 bytes | Created Date = 18/01/2007 08:04:41 p.m. | Attr = ]
2.jpg -> %UserDocuments%\Jessan\a\No Tocar\g\2.jpg -> [Ver = | Size = 2710 bytes | Created Date = 18/01/2007 08:04:41 p.m. | Attr = ]
3.jpg -> %UserDocuments%\Jessan\a\No Tocar\g\3.jpg -> [Ver = | Size = 2552 bytes | Created Date = 18/01/2007 08:04:41 p.m. | Attr = ]
4.jpg -> %UserDocuments%\Jessan\a\No Tocar\g\4.jpg -> [Ver = | Size = 2393 bytes | Created Date = 18/01/2007 08:04:41 p.m. | Attr = ]
5.jpg -> %UserDocuments%\Jessan\a\No Tocar\g\5.jpg -> [Ver = | Size = 2679 bytes | Created Date = 18/01/2007 08:04:41 p.m. | Attr = ]
l1.jpeg -> %UserDocuments%\Jessan\a\No Tocar\g\l1.jpeg -> [Ver = | Size = 1788 bytes | Created Date = 18/01/2007 08:04:41 p.m. | Attr = ]
l2.jpg -> %UserDocuments%\Jessan\a\No Tocar\g\l2.jpg -> [Ver = | Size = 1926 bytes | Created Date = 18/01/2007 08:04:41 p.m. | Attr = ]
l3.jpg -> %UserDocuments%\Jessan\a\No Tocar\g\l3.jpg -> [Ver = | Size = 1711 bytes | Created Date = 18/01/2007 08:04:41 p.m. | Attr = ]
l4.jpg -> %UserDocuments%\Jessan\a\No Tocar\g\l4.jpg -> [Ver = | Size = 1783 bytes | Created Date = 18/01/2007 08:04:41 p.m. | Attr = ]
Thumbs.db -> %UserDocuments%\Jessan\a\No Tocar\g\Thumbs.db -> [Ver = | Size = 57344 bytes | Created Date = 18/01/2007 08:04:41 p.m. | Attr = HS]
1.jpg -> %UserDocuments%\Jessan\a\No Tocar\v\1.jpg -> [Ver = | Size = 2385 bytes | Created Date = 18/01/2007 08:04:41 p.m. | Attr = ]
2.jpg -> %UserDocuments%\Jessan\a\No Tocar\v\2.jpg -> [Ver = | Size = 2401 bytes | Created Date = 18/01/2007 08:04:41 p.m. | Attr = ]
3.jpg -> %UserDocuments%\Jessan\a\No Tocar\v\3.jpg -> [Ver = | Size = 2489 bytes | Created Date = 18/01/2007 08:04:41 p.m. | Attr = ]
4.jpg -> %UserDocuments%\Jessan\a\No Tocar\v\4.jpg -> [Ver = | Size = 2271 bytes | Created Date = 18/01/2007 08:04:41 p.m. | Attr = ]
5.jpg -> %UserDocuments%\Jessan\a\No Tocar\v\5.jpg -> [Ver = | Size = 2271 bytes | Created Date = 18/01/2007 08:04:41 p.m. | Attr = ]
6.jpg -> %UserDocuments%\Jessan\a\No Tocar\v\6.jpg -> [Ver = | Size = 2410 bytes | Created Date = 18/01/2007 08:04:41 p.m. | Attr = ]
7.jpg -> %UserDocuments%\Jessan\a\No Tocar\v\7.jpg -> [Ver = | Size = 2037 bytes | Created Date = 18/01/2007 08:04:41 p.m. | Attr = ]
8.jpg -> %UserDocuments%\Jessan\a\No Tocar\v\8.jpg -> [Ver = | Size = 2261 bytes | Created Date = 18/01/2007 08:04:41 p.m. | Attr = ]
9.jpg -> %UserDocuments%\Jessan\a\No Tocar\v\9.jpg -> [Ver = | Size = 1911 bytes | Created Date = 18/01/2007 08:04:41 p.m. | Attr = ]
bat1.jpg -> %UserDocuments%\Jessan\a\No Tocar\v\bat1.jpg -> [Ver = | Size = 1838 bytes | Created Date = 18/01/2007 08:04:41 p.m. | Attr = ]
bat10.jpg -> %UserDocuments%\Jessan\a\No Tocar\v\bat10.jpg -> [Ver = | Size = 1644 bytes | Created Date = 18/01/2007 08:04:41 p.m. | Attr = ]
bat11.jpg -> %UserDocuments%\Jessan\a\No Tocar\v\bat11.jpg -> [Ver = | Size = 1574 bytes | Created Date = 18/01/2007 08:04:41 p.m. | Attr = ]
bat12.jpg -> %UserDocuments%\Jessan\a\No Tocar\v\bat12.jpg -> [Ver = | Size = 1585 bytes | Created Date = 18/01/2007 08:04:41 p.m. | Attr = ]
bat2.jpg -> %UserDocuments%\Jessan\a\No Tocar\v\bat2.jpg -> [Ver = | Size = 1908 bytes | Created Date = 18/01/2007 08:04:41 p.m. | Attr = ]
bat3.jpg -> %UserDocuments%\Jessan\a\No Tocar\v\bat3.jpg -> [Ver = | Size = 1936 bytes | Created Date = 18/01/2007 08:04:41 p.m. | Attr = ]
bat4.jpg -> %UserDocuments%\Jessan\a\No Tocar\v\bat4.jpg -> [Ver = | Size = 1638 bytes | Created Date = 18/01/2007 08:04:41 p.m. | Attr = ]
bat5.jpg -> %UserDocuments%\Jessan\a\No Tocar\v\bat5.jpg -> [Ver = | Size = 1391 bytes | Created Date = 18/01/2007 08:04:41 p.m. | Attr = ]
bat6.jpg -> %UserDocuments%\Jessan\a\No Tocar\v\bat6.jpg -> [Ver = | Size = 1559 bytes | Created Date = 18/01/2007 08:04:41 p.m. | Attr = ]
bat7.jpg -> %UserDocuments%\Jessan\a\No Tocar\v\bat7.jpg -> [Ver = | Size = 1628 bytes | Created Date = 18/01/2007 08:04:41 p.m. | Attr = ]
bat8.jpg -> %UserDocuments%\Jessan\a\No Tocar\v\bat8.jpg -> [Ver = | Size = 1640 bytes | Created Date = 18/01/2007 08:04:41 p.m. | Attr = ]
bat9.jpg -> %UserDocuments%\Jessan\a\No Tocar\v\bat9.jpg -> [Ver = | Size = 1585 bytes | Created Date = 18/01/2007 08:04:41 p.m. | Attr = ]
Thumbs.db -> %UserDocuments%\Jessan\a\No Tocar\v\Thumbs.db -> [Ver = | Size = 78336 bytes | Created Date = 18/01/2007 08:04:41 p.m. | Attr = HS]
FunctionListPlugin.dll -> %UserDocuments%\Jessan\a\buahaha\Notepad++\plugins\FunctionListPlugin.dll -> [Ver = | Size = 143360 bytes | Created Date = 18/01/2007 08:04:55 p.m. | Attr = ]
NPPTextFX.dll -> %UserDocuments%\Jessan\a\buahaha\Notepad++\plugins\NPPTextFX.dll -> Chris Severance [Ver = 0.23 | Size = 153088 bytes | Created Date = 18/01/2007 08:04:55 p.m. | Attr = ]
1.jpg -> %UserDocuments%\Jessan\a\Javascript\No Tocar\g\1.jpg -> [Ver = | Size = 2868 bytes | Created Date = 18/01/2007 08:04:44 p.m. | Attr = ]
2.jpg -> %UserDocuments%\Jessan\a\Javascript\No Tocar\g\2.jpg -> [Ver = | Size = 2710 bytes | Created Date = 18/01/2007 08:04:44 p.m. | Attr = ]
3.jpg -> %UserDocuments%\Jessan\a\Javascript\No Tocar\g\3.jpg -> [Ver = | Size = 2552 bytes | Created Date = 18/01/2007 08:04:44 p.m. | Attr = ]
4.jpg -> %UserDocuments%\Jessan\a\Javascript\No Tocar\g\4.jpg -> [Ver = | Size = 2393 bytes | Created Date = 18/01/2007 08:04:44 p.m. | Attr = ]
5.jpg -> %UserDocuments%\Jessan\a\Javascript\No Tocar\g\5.jpg -> [Ver = | Size = 2679 bytes | Created Date = 18/01/2007 08:04:44 p.m. | Attr = ]
l1.jpeg -> %UserDocuments%\Jessan\a\Javascript\No Tocar\g\l1.jpeg -> [Ver = | Size = 1788 bytes | Created Date = 18/01/2007 08:04:44 p.m. | Attr = ]
l2.jpg -> %UserDocuments%\Jessan\a\Javascript\No Tocar\g\l2.jpg -> [Ver = | Size = 1926 bytes | Created Date = 18/01/2007 08:04:44 p.m. | Attr = ]
l3.jpg -> %UserDocuments%\Jessan\a\Javascript\No Tocar\g\l3.jpg -> [Ver = | Size = 1711 bytes | Created Date = 18/01/2007 08:04:44 p.m. | Attr = ]
l4.jpg -> %UserDocuments%\Jessan\a\Javascript\No Tocar\g\l4.jpg -> [Ver = | Size = 1783 bytes | Created Date = 18/01/2007 08:04:44 p.m. | Attr = ]
Thumbs.db -> %UserDocuments%\Jessan\a\Javascript\No Tocar\g\Thumbs.db -> [Ver = | Size = 54272 bytes | Created Date = 18/01/2007 08:04:44 p.m. | Attr = HS]
1.jpg -> %UserDocuments%\Jessan\a\Javascript\No Tocar\v\1.jpg -> [Ver = | Size = 2385 bytes | Created Date = 18/01/2007 08:04:43 p.m. | Attr = ]
2.jpg -> %UserDocuments%\Jessan\a\Javascript\No Tocar\v\2.jpg -> [Ver = | Size = 2401 bytes | Created Date = 18/01/2007 08:04:43 p.m. | Attr = ]
3.jpg -> %UserDocuments%\Jessan\a\Javascript\No Tocar\v\3.jpg -> [Ver = | Size = 2489 bytes | Created Date = 18/01/2007 08:04:43 p.m. | Attr = ]
4.jpg -> %UserDocuments%\Jessan\a\Javascript\No Tocar\v\4.jpg -> [Ver = | Size = 2271 bytes | Created Date = 18/01/2007 08:04:43 p.m. | Attr = ]
5.jpg -> %UserDocuments%\Jessan\a\Javascript\No Tocar\v\5.jpg -> [Ver = | Size = 2271 bytes | Created Date = 18/01/2007 08:04:43 p.m. | Attr = ]
6.jpg -> %UserDocuments%\Jessan\a\Javascript\No Tocar\v\6.jpg -> [Ver = | Size = 2410 bytes | Created Date = 18/01/2007 08:04:43 p.m. | Attr = ]
7.jpg -> %UserDocuments%\Jessan\a\Javascript\No Tocar\v\7.jpg -> [Ver = | Size = 2037 bytes | Created Date = 18/01/2007 08:04:43 p.m. | Attr = ]
8.jpg -> %UserDocuments%\Jessan\a\Javascript\No Tocar\v\8.jpg -> [Ver = | Size = 2261 bytes | Created Date = 18/01/2007 08:04:43 p.m. | Attr = ]
9.jpg -> %UserDocuments%\Jessan\a\Javascript\No Tocar\v\9.jpg -> [Ver = | Size = 1911 bytes | Created Date = 18/01/2007 08:04:43 p.m. | Attr = ]
bat1.jpg -> %UserDocuments%\Jessan\a\Javascript\No Tocar\v\bat1.jpg -> [Ver = | Size = 1838 bytes | Created Date = 18/01/2007 08:04:43 p.m. | Attr = ]
bat10.jpg -> %UserDocuments%\Jessan\a\Javascript\No Tocar\v\bat10.jpg -> [Ver = | Size = 1644 bytes | Created Date = 18/01/2007 08:04:43 p.m. | Attr = ]
bat11.jpg -> %UserDocuments%\Jessan\a\Javascript\No Tocar\v\bat11.jpg -> [Ver = | Size = 1574 bytes | Created Date = 18/01/2007 08:04:43 p.m. | Attr = ]
bat12.jpg -> %UserDocuments%\Jessan\a\Javascript\No Tocar\v\bat12.jpg -> [Ver = | Size = 1585 bytes | Created Date = 18/01/2007 08:04:43 p.m. | Attr = ]
bat2.jpg -> %UserDocuments%\Jessan\a\Javascript\No Tocar\v\bat2.jpg -> [Ver = | Size = 1908 bytes | Created Date = 18/01/2007 08:04:43 p.m. | Attr = ]
bat3.jpg -> %UserDocuments%\Jessan\a\Javascript\No Tocar\v\bat3.jpg -> [Ver = | Size = 1936 bytes | Created Date = 18/01/2007 08:04:43 p.m. | Attr = ]
bat4.jpg -> %UserDocuments%\Jessan\a\Javascript\No Tocar\v\bat4.jpg -> [Ver = | Size = 1638 bytes | Created Date = 18/01/2007 08:04:43 p.m. | Attr = ]
bat5.jpg -> %UserDocuments%\Jessan\a\Javascript\No Tocar\v\bat5.jpg -> [Ver = | Size = 1391 bytes | Created Date = 18/01/2007 08:04:43 p.m. | Attr = ]
bat6.jpg -> %UserDocuments%\Jessan\a\Javascript\No Tocar\v\bat6.jpg -> [Ver = | Size = 1559 bytes | Created Date = 18/01/2007 08:04:43 p.m. | Attr = ]
bat7.jpg -> %UserDocuments%\Jessan\a\Javascript\No Tocar\v\bat7.jpg -> [Ver = | Size = 1628 bytes | Created Date = 18/01/2007 08:04:43 p.m. | Attr = ]
bat8.jpg -> %UserDocuments%\Jessan\a\Javascript\No Tocar\v\bat8.jpg -> [Ver = | Size = 1640 bytes | Created Date = 18/01/2007 08:04:43 p.m. | Attr = ]
bat9.jpg -> %UserDocuments%\Jessan\a\Javascript\No Tocar\v\bat9.jpg -> [Ver = | Size = 1585 bytes | Created Date = 18/01/2007 08:04:43 p.m. | Attr = ]
Thumbs.db -> %UserDocuments%\Jessan\a\Javascript\No Tocar\v\Thumbs.db -> [Ver = | Size = 78336 bytes | Created Date = 18/01/2007 08:04:43 p.m. | Attr = HS]
c.api -> %UserDocuments%\Jessan\a\buahaha\Notepad++\plugins\APIs\c.api -> [Ver = | Size = 6389 bytes | Created Date = 18/01/2007 08:04:55 p.m. | Attr = ]
css.api -> %UserDocuments%\Jessan\a\buahaha\Notepad++\plugins\APIs\css.api -> [Ver = | Size = 3919 bytes | Created Date = 18/01/2007 08:04:55 p.m. | Attr = ]
flash.api -> %UserDocuments%\Jessan\a\buahaha\Notepad++\plugins\APIs\flash.api -> [Ver = | Size = 10155 bytes | Created Date = 18/01/2007 08:04:55 p.m. | Attr = ]
java.api -> %UserDocuments%\Jessan\a\buahaha\Notepad++\plugins\APIs\java.api -> [Ver = | Size = 64396 bytes | Created Date = 18/01/2007 08:04:55 p.m. | Attr = ]
javascript.api -> %UserDocuments%\Jessan\a\buahaha\Notepad++\plugins\APIs\javascript.api -> [Ver = | Size = 6611 bytes | Created Date = 18/01/2007 08:04:55 p.m. | Attr = ]
lisp.api -> %UserDocuments%\Jessan\a\buahaha\Notepad++\plugins\APIs\lisp.api -> [Ver = | Size = 6058 bytes | Created Date = 18/01/2007 08:04:55 p.m. | Attr = ]
perl.api -> %UserDocuments%\Jessan\a\buahaha\Notepad++\plugins\APIs\perl.api -> [Ver = | Size = 4288 bytes | Created Date = 18/01/2007 08:04:55 p.m. | Attr = ]
php.api -> %UserDocuments%\Jessan\a\buahaha\Notepad++\plugins\APIs\php.api -> [Ver = | Size = 42503 bytes | Created Date = 18/01/2007 08:04:55 p.m. | Attr = ]
python.api -> %UserDocuments%\Jessan\a\buahaha\Notepad++\plugins\APIs\python.api -> [Ver = | Size = 2606 bytes | Created Date = 18/01/2007 08:04:55 p.m. | Attr = ]
vb.api -> %UserDocuments%\Jessan\a\buahaha\Notepad++\plugins\APIs\vb.api -> [Ver = | Size = 7328 bytes | Created Date = 18/01/2007 08:04:55 p.m. | Attr = ]
AsciiToEBCDIC.bin -> %UserDocuments%\Jessan\a\buahaha\Notepad++\plugins\NPPTextFX\AsciiToEBCDIC.bin -> [Ver = | Size = 512 bytes | Created Date = 18/01/2007 08:04:55 p.m. | Attr = ]
W3C-CSSValidator.htm -> %UserDocuments%\Jessan\a\buahaha\Notepad++\plugins\NPPTextFX\W3C-CSSValidator.htm -> [Ver = | Size = 193 bytes | Created Date = 18/01/2007 08:04:55 p.m. | Attr = ]
W3C-HTMLValidator.htm -> %UserDocuments%\Jessan\a\buahaha\Notepad++\plugins\NPPTextFX\W3C-HTMLValidator.htm -> [Ver = | Size = 236 bytes | Created Date = 18/01/2007 08:04:55 p.m. | Attr = ]
actskn45.ocx -> %System32%\actskn45.ocx -> SoftShape Development [Ver = 4, 50, 0, 0 | Size = 483328 bytes | Created Date = 04/02/2007 03:25:44 p.m. | Attr = ]
sistem.sys -> %System32%\sistem.sys -> [Ver = | Size = 10 bytes | Created Date = 18/01/2007 07:34:29 p.m. | Attr = RHS]
dump_wmimmc.sys -> %System32%\drivers\dump_wmimmc.sys -> [Ver = | Size = 112781 bytes | Created Date = 10/02/2007 10:45:21 a.m. | Attr = ]
tmpreflt.sys -> %System32%\drivers\tmpreflt.sys -> Trend Micro Inc. [Ver = 8.320.0.1004 | Size = 32528 bytes | Created Date = 03/02/2007 05:31:41 p.m. | Attr = ]
tmtdi.sys -> %System32%\drivers\tmtdi.sys -> Trend Micro Incorporated. [Ver = 3.2.0.1024 built by: WinDDK | Size = 75088 bytes | Created Date = 03/02/2007 05:31:40 p.m. | Attr = ]
tmxpflt.sys -> %System32%\drivers\tmxpflt.sys -> Trend Micro Inc. [Ver = 8.320.0.1004 | Size = 199440 bytes | Created Date = 03/02/2007 05:31:41 p.m. | Attr = ]
TM_CFW.sys -> %System32%\drivers\TM_CFW.sys -> Trend Micro Inc. [Ver = 3.2.0.1024 | Size = 288848 bytes | Created Date = 03/02/2007 05:31:40 p.m. | Attr = ]
tm_mbd_c.sys -> %System32%\drivers\tm_mbd_c.sys -> Trend Micro Inc. [Ver = 3.2.0.1028 | Size = 111888 bytes | Created Date = 03/02/2007 05:31:40 p.m. | Attr = ]
vsapint.sys -> %System32%\drivers\vsapint.sys -> Trend Micro Inc. [Ver = 8.320-1004 | Size = 1052472 bytes | Created Date = 03/02/2007 05:31:41 p.m. | Attr = ]

[Files - Modified Within 30 days]
AUTOEXEC.BAT -> %SystemDrive%\AUTOEXEC.BAT -> [Ver = | Size = 7 bytes | Modified Date = 28/01/2007 05:31:22 p.m. | Attr = HS]
Jessan.java -> %SystemDrive%\Jessan.java -> [Ver = | Size = 389 bytes | Modified Date = 27/01/2007 11:22:12 a.m. | Attr = ]
BronNetDomList.bat -> %LocalAppData%\BronNetDomList.bat -> [Ver = | Size = 101 bytes | Modified Date = 28/01/2007 05:28:48 p.m. | Attr = ]
DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini -> %LocalAppData%\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini -> [Ver = | Size = 48640 bytes | Modified Date = 10/02/2007 05:09:46 p.m. | Attr = ]
IconCache.db -> %LocalAppData%\IconCache.db -> [Ver = | Size = 1576508 bytes | Modified Date = 12/02/2007 11:59:04 p.m. | Attr = H ]
JunkAtx18.bin -> %LocalAppData%\JunkAtx18.bin -> [Ver = | Size = 7098 bytes | Modified Date = 18/01/2007 07:42:42 p.m. | Attr = ]
Update.18.Bron.Tok.bin -> %LocalAppData%\Update.18.Bron.Tok.bin -> [Ver = | Size = 3536 bytes | Modified Date = 28/01/2007 05:28:52 p.m. | Attr = ]
Adobe Reader 7.0.lnk -> %AllUsersDesktop%\Adobe Reader 7.0.lnk -> [Ver = | Size = 1775 bytes | Modified Date = 04/02/2007 11:54:52 a.m. | Attr = ]
Trend Micro PC-cillin Internet Security 2007.lnk -> %AllUsersDesktop%\Trend Micro PC-cillin Internet Security 2007.lnk -> [Ver = | Size = 834 bytes | Modified Date = 03/02/2007 05:33:10 p.m. | Attr = ]
Inicio rápido de Adobe Reader.lnk -> %AllUsersStartup%\Inicio rápido de Adobe Reader.lnk -> [Ver = | Size = 1792 bytes | Modified Date = 04/02/2007 11:54:52 a.m. | Attr = ]
AMV Convert Tool.lnk -> %UserDesktop%\AMV Convert Tool.lnk -> [Ver = | Size = 2589 bytes | Modified Date = 26/01/2007 09:45:30 a.m. | Attr = ]
CCleaner.lnk -> %UserDesktop%\CCleaner.lnk -> [Ver = | Size = 1620 bytes | Modified Date = 03/02/2007 03:58:32 p.m. | Attr = ]
DiscoveryRO.lnk -> %UserDesktop%\DiscoveryRO.lnk -> [Ver = | Size = 822 bytes | Modified Date = 11/02/2007 11:12:32 a.m. | Attr = ]
Google.url -> %UserDesktop%\Google.url -> [Ver = | Size = 183 bytes | Modified Date = 04/02/2007 03:42:40 p.m. | Attr = ]
jcpro400.zip -> %UserDesktop%\jcpro400.zip -> [Ver = | Size = 4706618 bytes | Modified Date = 26/01/2007 11:06:26 p.m. | Attr = ]
@Alternate Data Stream - 26 bytes -> %UserDesktop%\jcpro400.zip:Zone.Identifier ->
JCreator Pro.lnk -> %UserDesktop%\JCreator Pro.lnk -> [Ver = | Size = 796 bytes | Modified Date = 26/01/2007 11:06:48 p.m. | Attr = ]
NiktoutRO-Chaos-Patcher.rar -> %UserDesktop%\NiktoutRO-Chaos-Patcher.rar -> [Ver = | Size = 430592 bytes | Modified Date = 20/01/2007 11:13:58 p.m. | Attr = ]
@Alternate Data Stream - 26 bytes -> %UserDesktop%\NiktoutRO-Chaos-Patcher.rar:Zone.Identifier ->
Shareaza.lnk -> %UserDesktop%\Shareaza.lnk -> [Ver = | Size = 793 bytes | Modified Date = 09/02/2007 10:42:32 p.m. | Attr = ]
Spybot - Search & Destroy.lnk -> %UserDesktop%\Spybot - Search & Destroy.lnk -> [Ver = | Size = 982 bytes | Modified Date = 03/02/2007 07:09:58 p.m. | Attr = ]
aawsepersonal.exe -> %UserDesktop%\No Tocar\aawsepersonal.exe -> [Ver = | Size = 2855080 bytes | Modified Date = 31/01/2007 09:12:02 p.m. | Attr = ]
@Alternate Data Stream - 26 bytes -> %UserDesktop%\No Tocar\aawsepersonal.exe:Zone.Identifier ->
Ad-Aware SE Personal.lnk -> %UserDesktop%\No Tocar\Ad-Aware SE Personal.lnk -> [Ver = | Size = 876 bytes | Modified Date = 31/01/2007 09:12:32 p.m. | Attr = ]
ccsetup137.exe -> %UserDesktop%\No Tocar\ccsetup137.exe -> Piriform Ltd [Ver = 1.37.0.456 | Size = 2683984 bytes | Modified Date = 03/02/2007 03:58:04 p.m. | Attr = ]
@Alternate Data Stream - 26 bytes -> %UserDesktop%\No Tocar\ccsetup137.exe:Zone.Identifier ->
ccsetup137.zip -> %UserDesktop%\No Tocar\ccsetup137.zip -> [Ver = | Size = 2649732 bytes | Modified Date = 03/02/2007 05:08:54 p.m. | Attr = ]
defs.zip -> %UserDesktop%\No Tocar\defs.zip -> [Ver = | Size = 963874 bytes | Modified Date = 31/01/2007 09:04:44 p.m. | Attr = ]
@Alternate Data Stream - 26 bytes -> %UserDesktop%\No Tocar\defs.zip:Zone.Identifier ->
Google Updater.lnk -> %UserDesktop%\No Tocar\Google Updater.lnk -> [Ver = | Size = 939 bytes | Modified Date = 28/01/2007 03:08:06 p.m. | Attr = ]
hijackthis_sfx.exe -> %UserDesktop%\No Tocar\hijackthis_sfx.exe -> [Ver = | Size = 282601 bytes | Modified Date = 31/01/2007 10:38:10 p.m. | Attr = ]
@Alternate Data Stream - 26 bytes -> %UserDesktop%\No Tocar\hijackthis_sfx.exe:Zone.Identifier ->
killbox.zip -> %UserDesktop%\No Tocar\killbox.zip -> [Ver = | Size = 44813 bytes | Modified Date = 29/01/2007 10:58:12 p.m. | Attr = ]
@Alternate Data Stream - 26 bytes -> %UserDesktop%\No Tocar\killbox.zip:Zone.Identifier ->
Spybot - Search & Destroy.lnk -> %UserDesktop%\No Tocar\Spybot - Search & Destroy.lnk -> [Ver = | Size = 982 bytes | Modified Date = 31/01/2007 09:19:50 p.m. | Attr = ]
spybotsd14.exe -> %UserDesktop%\No Tocar\spybotsd14.exe -> Safer Networking Limited [Ver = | Size = 5037072 bytes | Modified Date = 31/01/2007 09:19:00 p.m. | Attr = ]
@Alternate Data Stream - 26 bytes -> %UserDesktop%\No Tocar\spybotsd14.exe:Zone.Identifier ->
stng260.exe -> %UserDesktop%\No Tocar\stng260.exe -> McAfee Inc. [Ver = 2.6.0. | Size = 1144839 bytes | Modified Date = 31/01/2007 10:10:58 p.m. | Attr = ]
@Alternate Data Stream - 26 bytes -> %UserDesktop%\No Tocar\stng260.exe:Zone.Identifier ->
stng260.opt -> %UserDesktop%\No Tocar\stng260.opt -> [Ver = | Size = 12 bytes | Modified Date = 03/02/2007 04:45:06 p.m. | Attr = ]
TIS2007_TMSiteTrialDL.exe -> %UserDesktop%\No Tocar\TIS2007_TMSiteTrialDL.exe -> Trend Micro Inc. [Ver = 15.3 | Size = 86103499 bytes | Modified Date = 03/02/2007 05:17:36 p.m. | Attr = ]
@Alternate Data Stream - 26 bytes -> %UserDesktop%\No Tocar\TIS2007_TMSiteTrialDL.exe:Zone.Identifier ->
db_pcc.dat -> %UserDesktop%\No Tocar\TIS2007_153_1151\Setup\db_pcc.dat -> [Ver = | Size = 38119 bytes | Modified Date = 23/01/2007 01:50:10 a.m. | Attr = ]
setup.ini -> %UserDesktop%\No Tocar\TIS2007_153_1151\Setup\setup.ini -> [Ver = | Size = 338 bytes | Modified Date = 29/01/2007 07:05:38 p.m. | Attr = ]
L10NPcc.ini -> %UserDesktop%\No Tocar\TIS2007_153_1151\Setup\Module\L10NPcc.ini -> [Ver = | Size = 1554 bytes | Modified Date = 19/01/2007 11:23:20 a.m. | Attr = ]
pccguide.exe -> %UserDesktop%\No Tocar\TIS2007_153_1151\Setup\Module\pccguide.exe -> Trend Micro Inc. [Ver = 15.30.0.1151 | Size = 3429904 bytes | Modified Date = 23/01/2007 02:26:26 p.m. | Attr = ]
pccillin.ini -> %UserDesktop%\No Tocar\TIS2007_153_1151\Setup\Module\pccillin.ini -> [Ver = | Size = 1495 bytes | Modified Date = 29/01/2007 07:04:50 p.m. | Attr = ]
pcclient.dat -> %UserDesktop%\No Tocar\TIS2007_153_1151\Setup\Module\pcclient.dat -> [Ver = | Size = 980512 bytes | Modified Date = 23/01/2007 02:27:32 p.m. | Attr = ]
PcCtlCom.exe -> %UserDesktop%\No Tocar\TIS2007_153_1151\Setup\Module\PcCtlCom.exe -> Trend Micro Inc. [Ver = 15.30.0.1151 | Size = 1922576 bytes | Modified Date = 23/01/2007 02:27:16 p.m. | Attr = ]
PCCTool.exe -> %UserDesktop%\No Tocar\TIS2007_153_1151\Setup\Module\PCCTool.exe -> Trend Micro Inc. [Ver = 15.30.0.1151 | Size = 1721872 bytes | Modified Date = 23/01/2007 02:27:06 p.m. | Attr = ]
PccUpdUI.exe -> %UserDesktop%\No Tocar\TIS2007_153_1151\Setup\Module\PccUpdUI.exe -> Trend Micro Inc. [Ver = 15.30.0.1151 | Size = 1246736 bytes | Modified Date = 23/01/2007 02:52:02 p.m. | Attr = ]
PcFstStr.exe -> %UserDesktop%\No Tocar\TIS2007_153_1151\Setup\Module\PcFstStr.exe -> Trend Micro Inc. [Ver = 15.30.0.1151 | Size = 644624 bytes | Modified Date = 23/01/2007 02:27:06 p.m. | Attr = ]
Google Updater.exe -> %UserDocuments%\Google Updater.exe -> [Ver = | Size = 743272 bytes | Modified Date = 28/01/2007 03:11:36 p.m. | Attr = ]
Google Updater.exe -> %UserDocuments%\2007\Google Updater.exe -> [Ver = | Size = 743272 bytes | Modified Date = 28/01/2007 03:11:36 p.m. | Attr = ]
T07promo.exe -> %UserDocuments%\2007\T07promo.exe -> Panda Software [Ver = 6.0.2.0 | Size = 26322576 bytes | Modified Date = 28/01/2007 03:04:28 p.m. | Attr = ]
(mago de oz) La cancion del pirata.mp3 -> %UserDocuments%\Downloads\(mago de oz) La cancion del pirata.mp3 -> [Ver = | Size = 3225419 bytes | Modified Date = 10/02/2007 03:21:34 p.m. | Attr = ]
AlbumArtSmall.jpg -> %UserDocuments%\Downloads\AlbumArtSmall.jpg -> [Ver = | Size = 3300 bytes | Modified Date = 26/01/2007 10:01:02 a.m. | Attr = HS]
AlbumArt_{A6896FC1-CB06-48C8-9CD8-6885F58623A9}_Large.jpg -> %UserDocuments%\Downloads\AlbumArt_{A6896FC1-CB06-48C8-9CD8-6885F58623A9}_Large.jpg -> [Ver = | Size = 5576 bytes | Modified Date = 26/01/2007 10:01:00 a.m. | Attr = HS]
AlbumArt_{A6896FC1-CB06-48C8-9CD8-6885F58623A9}_Small.jpg -> %UserDocuments%\Downloads\AlbumArt_{A6896FC1-CB06-48C8-9CD8-6885F58623A9}_Small.jpg -> [Ver = | Size = 1790 bytes | Modified Date = 26/01/2007 10:01:00 a.m. | Attr = HS]
AlbumArt_{D7665C88-A5A1-4FFA-A88E-ECE2EBAA4AD0}_Large.jpg -> %UserDocuments%\Downloads\AlbumArt_{D7665C88-A5A1-4FFA-A88E-ECE2EBAA4AD0}_Large.jpg -> [Ver = | Size = 14683 bytes | Modified Date = 26/01/2007 10:01:02 a.m. | Attr = HS]
AlbumArt_{D7665C88-A5A1-4FFA-A88E-ECE2EBAA4AD0}_Small.jpg -> %UserDocuments%\Downloads\AlbumArt_{D7665C88-A5A1-4FFA-A88E-ECE2EBAA4AD0}_Small.jpg -> [Ver = | Size = 3300 bytes | Modified Date = 26/01/2007 10:01:02 a.m. | Attr = HS]
desktop.ini -> %UserDocuments%\Downloads\desktop.ini -> [Ver = | Size = 353 bytes | Modified Date = 26/01/2007 10:01:02 a.m. | Attr = HS]
Folder.jpg -> %UserDocuments%\Downloads\Folder.jpg -> [Ver = | Size = 14683 bytes | Modified Date = 26/01/2007 10:01:02 a.m. | Attr = HS]
Kittie-Korn- Slipknot- Static-X- Nothingface- Fear Factory- Dope- Coal Chamber- Mudvayne - Waste(2).asf -> %UserDocuments%\Downloads\Kittie-Korn- Slipknot- Static-X- Nothingface- Fear Factory- Dope- Coal Chamber- Mudvayne - Waste(2).asf -> [Ver = | Size = 3956755 bytes | Modified Date = 25/01/2007 08:38:20 p.m. | Attr = ]
Limp Bizkit - 5 The bleep Song.mp3 -> %UserDocuments%\Downloads\Limp Bizkit - 5 The bleep Song.mp3 -> [Ver = | Size = 3662704 bytes | Modified Date = 20/01/2007 02:29:10 a.m. | Attr = ]
Limp Bizkit - Behind blue Eyes.mp3 -> %UserDocuments%\Downloads\Limp Bizkit - Behind blue Eyes.mp3 -> [Ver = | Size = 4393934 bytes | Modified Date = 26/01/2007 10:01:32 a.m. | Attr = ]
Limp Bizkit - Break Stuff.mp3 -> %UserDocuments%\Downloads\Limp Bizkit - Break Stuff.mp3 -> [Ver = | Size = 2670215 bytes | Modified Date = 20/01/2007 06:39:14 p.m. | Attr = ]
Limp Bizkit - Faith.mp3 -> %UserDocuments%\Downloads\Limp Bizkit - Faith.mp3 -> [Ver = | Size = 3715657 bytes | Modified Date = 10/02/2007 05:38:00 p.m. | Attr = ]
Limp Bizkit - Nookie (1).mp3 -> %UserDocuments%\Downloads\Limp Bizkit - Nookie (1).mp3 -> [Ver = | Size = 5326572 bytes | Modified Date = 10/02/2007 05:46:30 p.m. | Attr = ]
Limp Bizkit - Nookie.mp3 -> %UserDocuments%\Downloads\Limp Bizkit - Nookie.mp3 -> [Ver = | Size = 5331308 bytes | Modified Date = 26/01/2007 10:01:34 a.m. | Attr = ]
Lista.m3u -> %UserDocuments%\Downloads\Lista.m3u -> [Ver = | Size = 475 bytes | Modified Date = 10/02/2007 02:28:14 p.m. | Attr = ]
Mago de Oz - Fiesta Pagana.mp3 -> %UserDocuments%\Downloads\Mago de Oz - Fiesta Pagana.mp3 -> [Ver = | Size = 4752241 bytes | Modified Date = 10/02/2007 05:38:32 p.m. | Attr = ]
Mago de Oz - Fiesta Pagana.mpeg -> %UserDocuments%\Downloads\Mago de Oz - Fiesta Pagana.mpeg -> [Ver = | Size = 35737600 bytes | Modified Date = 10/02/2007 05:09:36 p.m. | Attr = ]
Mago de oz - la fiesta pagana.mpg -> %UserDocuments%\Downloads\Mago de oz - la fiesta pagana.mpg -> [Ver = | Size = 2373632 bytes | Modified Date = 10/02/2007 03:00:46 p.m. | Attr = ]
Mago de Oz - Los Ojos Del Dragón.mp3 -> %UserDocuments%\Downloads\Mago de Oz - Los Ojos Del Dragón.mp3 -> [Ver = | Size = 4547764 bytes | Modified Date = 10/02/2007 04:04:36 p.m. | Attr = ]
mago de oz - satania.mp3 -> %UserDocuments%\Downloads\mago de oz - satania.mp3 -> [Ver = | Size = 7904026 bytes | Modified Date = 10/02/2007 03:18:12 p.m. | Attr = ]
mago de oz-Es hora de marchar.mp3 -> %UserDocuments%\Downloads\mago de oz-Es hora de marchar.mp3 -> [Ver = | Size = 4853846 bytes | Modified Date = 26/01/2007 09:43:52 a.m. | Attr = ]
Marilyn Manson & Slipknot - (Video) - Fight Song.mpg -> %UserDocuments%\Downloads\Marilyn Manson & Slipknot - (Video) - Fight Song.mpg -> [Ver = | Size = 30858076 bytes | Modified Date = 26/01/2007 10:53:26 a.m. | Attr = ]
Marilyn manson-the beautiful people.mp3 -> %UserDocuments%\Downloads\Marilyn manson-the beautiful people.mp3 -> [Ver = | Size = 3496945 bytes | Modified Date = 15/01/2007 10:00:14 a.m. | Attr = ]
Maritornes.mp3 -> %UserDocuments%\Downloads\Maritornes.mp3 -> [Ver = | Size = 5257404 bytes | Modified Date = 10/02/2007 08:39:28 p.m. | Attr = ]
Mateo Lynch - Alta Sociedad.mp3 -> %UserDocuments%\Downloads\Mateo Lynch - Alta Sociedad.mp3 -> [Ver = | Size = 1414084 bytes | Modified Date = 15/01/2007 11:48:28 a.m. | Attr = ]
Panda - Narcisista Por Excelencia.mp3 -> %UserDocuments%\Downloads\Panda - Narcisista Por Excelencia.mp3 -> [Ver = | Size = 4683361 bytes | Modified Date = 16/01/2007 01:57:08 p.m. | Attr = ]
Shareaza_2.2.5.0.exe -> %UserDocuments%\Downloads\Shareaza_2.2.5.0.exe -> Shareaza Development Team [Ver = 2.2.5.0 | Size = 4301387 bytes | Modified Date = 09/02/2007 10:42:06 p.m. | Attr = ]
SThumbs.dat -> %UserDocuments%\Downloads\SThumbs.dat -> [Ver = | Size = 417400 bytes | Modified Date = 30/01/2007 09:57:00 a.m. | Attr = HS]
Thumbs.db -> %UserDocuments%\Downloads\Thumbs.db -> [Ver = | Size = 21504 bytes | Modified Date = 30/01/2007 10:27:32 a.m. | Attr = HS]
@Alternate Data Stream - 0 bytes -> %UserDocuments%\Downloads\Thumbs.db:encryptable ->
AdbeRdr708_es_ES.exe -> %UserDocuments%\Ejecutables\AdbeRdr708_es_ES.exe -> [Ver = | Size = 24018736 bytes | Modified Date = 04/02/2007 11:37:00 a.m. | Attr = ]
@Alternate Data Stream - 26 bytes -> %UserDocuments%\Ejecutables\AdbeRdr708_es_ES.exe:Zone.Identifier ->
AdbeRdr80_es_ES.exe -> %UserDocuments%\Ejecutables\AdbeRdr80_es_ES.exe -> [Ver = 1.0.0.54 | Size = 22218232 bytes | Modified Date = 03/02/2007 12:12:10 p.m. | Attr = ]
@Alternate Data Stream - 26 bytes -> %UserDocuments%\Ejecutables\AdbeRdr80_es_ES.exe:Zone.Identifier ->
Corel_PaintShopPro1000_EN_TBYB_TrialESD.exe -> %UserDocuments%\Ejecutables\Corel_PaintShopPro1000_EN_TBYB_TrialESD.exe -> Macrovision Corporation [Ver = 11.00.28844 | Size = 111143864 bytes | Modified Date = 04/02/2007 03:17:12 p.m. | Attr = ]
@Alternate Data Stream - 26 bytes -> %UserDocuments%\Ejecutables\Corel_PaintShopPro1000_EN_TBYB_TrialESD.exe:Zone.Identifier ->
install_flash_player_active_x.msi -> %UserDocuments%\Ejecutables\install_flash_player_active_x.msi -> [Ver = | Size = 4212736 bytes | Modified Date = 03/02/2007 12:35:38 p.m. | Attr = ]
@Alternate Data Stream - 26 bytes -> %UserDocuments%\Ejecutables\install_flash_player_active_x.msi:Zone.Identifier ->
Shareaza_2.2.3.0.exe -> %UserDocuments%\Ejecutables\Shareaza_2.2.3.0.exe -> Shareaza Development Team [Ver = 2.2.3.0 | Size = 4366779 bytes | Modified Date = 09/02/2007 10:32:38 p.m. | Attr = ]
@Alternate Data Stream - 26 bytes -> %UserDocuments%\Ejecutables\Shareaza_2.2.3.0.exe:Zone.Identifier ->
winpfind3u.exe -> %UserDocuments%\Ejecutables\winpfind3u.exe -> [Ver = | Size = 342353 bytes | Modified Date = 09/02/2007 10:39:22 p.m. | Attr = ]
@Alternate Data Stream - 26 bytes -> %UserDocuments%\Ejecutables\winpfind3u.exe:Zone.Identifier ->
DiscoveryRO_2007-01-16.rar -> %UserDocuments%\Etrok\DiscoveryRO_2007-01-16.rar -> [Ver = | Size = 981152 bytes | Modified Date = 10/02/2007 05:53:48 p.m. | Attr = ]
discovery_full1119.exe -> %UserDocuments%\Etrok\discovery_full1119.exe -> [Ver = | Size = 988033196 bytes | Modified Date = 10/02/2007 04:00:00 p.m. | Attr = ]
@Alternate Data Stream - 26 bytes -> %UserDocuments%\Etrok\discovery_full1119.exe:Zone.Identifier ->
Thumbs.db -> %UserDocuments%\Mago De Oz\Thumbs.db -> [Ver = | Size = 7680 bytes | Modified Date = 30/01/2007 10:27:32 a.m. | Attr = HS]
@Alternate Data Stream - 0 bytes -> %UserDocuments%\Mago De Oz\Thumbs.db:encryptable ->
REFERENCIA PERSONAL Nancy.doc -> %UserDocuments%\Mama\REFERENCIA PERSONAL Nancy.doc -> [Ver = | Size = 21504 bytes | Modified Date = 24/01/2007 10:36:34 a.m. | Attr = ]
REFERENCIA PERSONAL Nancy2.doc -> %UserDocuments%\Mama\REFERENCIA PERSONAL Nancy2.doc -> [Ver = | Size = 22016 bytes | Modified Date = 24/01/2007 10:35:02 a.m. | Attr = ]
Thumbs.db -> %UserDocuments%\Mama\Thumbs.db -> [Ver = | Size = 9216 bytes | Modified Date = 30/01/2007 10:27:32 a.m. | Attr = HS]
@Alternate Data Stream - 0 bytes -> %UserDocuments%\Mama\Thumbs.db:encryptable ->
Ejercicios7-TipoExamenParcial3.doc -> %UserDocuments%\Mis archivos recibidos\Ejercicios7-TipoExamenParcial3.doc -> [Ver = | Size = 83456 bytes | Modified Date = 12/02/2007 10:53:58 a.m. | Attr = ]
EjerciciosPOOyciclos.doc -> %UserDocuments%\Mis archivos recibidos\EjerciciosPOOyciclos.doc -> [Ver = | Size = 121344 bytes | Modified Date = 22/01/2007 11:57:00 a.m. | Attr = ]
EXCEL.doc -> %UserDocuments%\Mis archivos recibidos\EXCEL.doc -> [Ver = | Size = 221696 bytes | Modified Date = 12/02/2007 10:55:04 a.m. | Attr = ]
Marilyn manson-the beautiful people.mp3 -> %UserDocuments%\Mis archivos recibidos\Marilyn manson-the beautiful people.mp3 -> [Ver = | Size = 3496945 bytes | Modified Date = 15/01/2007 10:00:14 a.m. | Attr = ]
Notepad+++++++++.rar -> %UserDocuments%\Mis archivos recibidos\Notepad+++++++++.rar -> [Ver = | Size = 662864 bytes | Modified Date = 18/01/2007 10:36:28 p.m. | Attr = ]
pizarrasf0607.pdf -> %UserDocuments%\Mis archivos recibidos\pizarrasf0607.pdf -> [Ver = | Size = 8377 bytes | Modified Date = 18/01/2007 11:02:50 p.m. | Attr = ]
Temas7-EOO-Clases-Metodos-Completa.doc -> %UserDocuments%\Mis archivos recibidos\Temas7-EOO-Clases-Metodos-Completa.doc -> [Ver = | Size = 182784 bytes | Modified Date = 22/01/2007 11:58:42 a.m. | Attr = ]
Temas8-Tiposdedatosestructurados(1).doc -> %UserDocuments%\Mis archivos recibidos\Temas8-Tiposdedatosestructurados(1).doc -> [Ver = | Size = 236544 bytes | Modified Date = 22/01/2007 11:58:44 a.m. | Attr = ]
Temas8-Tiposdedatosestructurados.doc -> %UserDocuments%\Mis archivos recibidos\Temas8-Tiposdedatosestructurados.doc -> [Ver = | Size = 232960 bytes | Modified Date = 22/01/2007 11:57:02 a.m. | Attr = ]
Thumbs.db -> %UserDocuments%\Mis archivos recibidos\Thumbs.db -> [Ver = | Size = 97280 bytes | Modified Date = 31/01/2007 11:10:24 p.m. | Attr = HS]
@Alternate Data Stream - 0 bytes -> %UserDocuments%\Mis archivos recibidos\Thumbs.db:encryptable ->
about.Brontok.A.html -> %UserDocuments%\Mis imágenes\about.Brontok.A.html -> [Ver = | Size = 978 bytes | Modified Date = 28/01/2007 05:27:34 p.m. | Attr = ]
Black Eyed Peas - Pump It.mpg -> %UserDocuments%\Mis vídeos\Black Eyed Peas - Pump It.mpg -> [Ver = | Size = 40223792 bytes | Modified Date = 27/01/2007 12:45:26 p.m. | Attr = ]
@Alternate Data Stream - 152 bytes -> %UserDocuments%\Mis vídeos\Black Eyed Peas - Pump It.mpg:SummaryInformation ->
@Alternate Data Stream - 0 bytes -> %UserDocuments%\Mis vídeos\Black Eyed Peas - Pump It.mpg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} ->
Daft Punk_One more time.mpg -> %UserDocuments%\Mis vídeos\Daft Punk_One more time.mpg -> [Ver = | Size = 43492744 bytes | Modified Date = 27/01/2007 12:46:06 p.m. | Attr = ]
@Alternate Data Stream - 128 bytes -> %UserDocuments%\Mis vídeos\Daft Punk_One more time.mpg:SummaryInformation ->
@Alternate Data Stream - 0 bytes -> %UserDocuments%\Mis vídeos\Daft Punk_One more time.mpg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} ->
Evanescence - Bring Me To Life.mpg -> %UserDocuments%\Mis vídeos\Evanescence - Bring Me To Life.mpg -> [Ver = | Size = 61072396 bytes | Modified Date = 27/01/2007 12:42:44 p.m. | Attr = ]
@Alternate Data Stream - 160 bytes -> %UserDocuments%\Mis vídeos\Evanescence - Bring Me To Life.mpg:SummaryInformation ->
@Alternate Data Stream - 0 bytes -> %UserDocuments%\Mis vídeos\Evanescence - Bring Me To Life.mpg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} ->
Fergie - London Bridge.mpg -> %UserDocuments%\Mis vídeos\Fergie - London Bridge.mpg -> [Ver = | Size = 36716816 bytes | Modified Date = 27/01/2007 12:48:30 p.m. | Attr = ]
@Alternate Data Stream - 152 bytes -> %UserDocuments%\Mis vídeos\Fergie - London Bridge.mpg:SummaryInformation ->
@Alternate Data Stream - 0 bytes -> %UserDocuments%\Mis vídeos\Fergie - London Bridge.mpg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} ->
Linkin Park - In The End.mpeg -> %UserDocuments%\Mis vídeos\Linkin Park - In The End.mpeg -> [Ver = | Size = 38920032 bytes | Modified Date = 27/01/2007 12:43:56 p.m. | Attr = ]
@Alternate Data Stream - 152 bytes -> %UserDocuments%\Mis vídeos\Linkin Park - In The End.mpeg:SummaryInformation ->
@Alternate Data Stream - 0 bytes -> %UserDocuments%\Mis vídeos\Linkin Park - In The End.mpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} ->
Linkin Park - Papercut.mpeg -> %UserDocuments%\Mis vídeos\Linkin Park - Papercut.mpeg -> [Ver = | Size = 33730540 bytes | Modified Date = 27/01/2007 12:50:18 p.m. | Attr = ]
@Alternate Data Stream - 152 bytes -> %UserDocuments%\Mis vídeos\Linkin Park - Papercut.mpeg:SummaryInformation ->
@Alternate Data Stream - 0 bytes -> %UserDocuments%\Mis vídeos\Linkin Park - Papercut.mpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} ->
Linkin Park- In the End.asf -> %UserDocuments%\Mis vídeos\Linkin Park- In the End.asf -> [Ver = | Size = 9376474 bytes | Modified Date = 27/01/2007 01:33:26 p.m. | Attr = ]
Mago de Oz - rata blanca La Leyenda del Hada.mpg -> %UserDocuments%\Mis vídeos\Mago de Oz - rata blanca La Leyenda del Hada.mpg -> [Ver = | Size = 55936356 bytes | Modified Date = 27/01/2007 12:49:26 p.m. | Attr = ]
@Alternate Data Stream - 176 bytes -> %UserDocuments%\Mis vídeos\Mago de Oz - rata blanca La Leyenda del Hada.mpg:SummaryInformation ->
@Alternate Data Stream - 0 bytes -> %UserDocuments%\Mis vídeos\Mago de Oz - rata blanca La Leyenda del Hada.mpg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} ->
Mago de Oz- Hoy Toca ser Feliz.mpg -> %UserDocuments%\Mis vídeos\Mago de Oz- Hoy Toca ser Feliz.mpg -> [Ver = | Size = 10575872 bytes | Modified Date = 27/01/2007 12:41:50 p.m. | Attr = ]
@Alternate Data Stream - 164 bytes -> %UserDocuments%\Mis vídeos\Mago de Oz- Hoy Toca ser Feliz.mpg:SummaryInformation ->
@Alternate Data Stream - 0 bytes -> %UserDocuments%\Mis vídeos\Mago de Oz- Hoy Toca ser Feliz.mpg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} ->
Marilyn Manson- The Beautiful People live.mpg -> %UserDocuments%\Mis vídeos\Marilyn Manson- The Beautiful People live.mpg -> [Ver = | Size = 41539176 bytes | Modified Date = 27/01/2007 03:19:56 p.m. | Attr = ]
Papa Roach - Between Angels And Insects.mpg -> %UserDocuments%\Mis vídeos\Papa Roach - Between Angels And Insects.mpg -> [Ver = | Size = 41829676 bytes | Modified Date = 27/01/2007 12:43:38 p.m. | Attr = ]
@Alternate Data Stream - 168 bytes -> %UserDocuments%\Mis vídeos\Papa Roach - Between Angels And Insects.mpg:SummaryInformation ->
@Alternate Data Stream - 0 bytes -> %UserDocuments%\Mis vídeos\Papa Roach - Between Angels And Insects.mpg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} ->
Papa Roach - Last Resort.mpeg -> %UserDocuments%\Mis vídeos\Papa Roach - Last Resort.mpeg -> [Ver = | Size = 35936440 bytes | Modified Date = 27/01/2007 12:46:34 p.m. | Attr = ]
@Alternate Data Stream - 152 bytes -> %UserDocuments%\Mis vídeos\Papa Roach - Last Resort.mpeg:SummaryInformation ->
@Alternate Data Stream - 0 bytes -> %UserDocuments%\Mis vídeos\Papa Roach - Last Resort.mpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} ->
Papa Roach- Last Resort.mpg -> %UserDocuments%\Mis vídeos\Papa Roach- Last Resort.mpg -> [Ver = | Size = 34174980 bytes | Modified Date = 27/01/2007 12:47:36 p.m. | Attr = ]
@Alternate Data Stream - 148 bytes -> %UserDocuments%\Mis vídeos\Papa Roach- Last Resort.mpg:SummaryInformation ->
@Alternate Data Stream - 0 bytes -> %UserDocuments%\Mis vídeos\Papa Roach- Last Resort.mpg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} ->
Slipknot - Before I Forget.wmv -> %UserDocuments%\Mis vídeos\Slipknot - Before I Forget.wmv -> [Ver = | Size = 6867654 bytes | Modified Date = 25/01/2007 08:53:28 p.m. | Attr = ]
System of a Down - B.Y.O.B.mpg -> %UserDocuments%\Mis vídeos\System of a Down - B.Y.O.B.mpg -> [Ver = | Size = 45494276 bytes | Modified Date = 27/01/2007 12:50:02 p.m. | Attr = ]
@Alternate Data Stream - 156 bytes -> %UserDocuments%\Mis vídeos\System of a Down - B.Y.O.B.mpg:SummaryInformation ->
@Alternate Data Stream - 0 bytes -> %UserDocuments%\Mis vídeos\System of a Down - B.Y.O.B.mpg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} ->
System of a Down - Chop Suey.mpeg -> %UserDocuments%\Mis vídeos\System of a Down - Chop Suey.mpeg -> [Ver = | Size = 37171204 bytes | Modified Date = 27/01/2007 12:43:10 p.m. | Attr = ]
@Alternate Data Stream - 160 bytes -> %UserDocuments%\Mis vídeos\System of a Down - Chop Suey.mpeg:SummaryInformation ->
@Alternate Data Stream - 0 bytes -> %UserDocuments%\Mis vídeos\System of a Down - Chop Suey.mpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} ->
System of A Down - Prison Song.MPG -> %UserDocuments%\Mis vídeos\System of A Down - Prison Song.MPG -> [Ver = | Size = 42610692 bytes | Modified Date = 27/01/2007 12:47:58 p.m. | Attr = ]
@Alternate Data Stream - 160 bytes -> %UserDocuments%\Mis vídeos\System of A Down - Prison Song.MPG:SummaryInformation ->
@Alternate Data Stream - 0 bytes -> %UserDocuments%\Mis vídeos\System of A Down - Prison Song.MPG:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} ->
System of A Down_Sugar.mpeg -> %UserDocuments%\Mis vídeos\System of A Down_Sugar.mpeg -> [Ver = | Size = 35764036 bytes | Modified Date = 27/01/2007 12:48:12 p.m. | Attr = ]
@Alternate Data Stream - 144 bytes -> %UserDocuments%\Mis vídeos\System of A Down_Sugar.mpeg:SummaryInformation ->
@Alternate Data Stream - 0 bytes -> %UserDocuments%\Mis vídeos\System of A Down_Sugar.mpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} ->
Tatu_All the Things She Said.WMV -> %UserDocuments%\Mis vídeos\Tatu_All the Things She Said.WMV -> [Ver = | Size = 6214297 bytes | Modified Date = 27/01/2007 01:01:32 p.m. | Attr = ]
Thumbs.db -> %UserDocuments%\Mis vídeos\Thumbs.db -> [Ver = | Size = 172032 bytes | Modified Date = 03/02/2007 01:56:52 p.m. | Attr = HS]
AlbumArtSmall.jpg -> %UserDocuments%\Mis álbumes\AlbumArtSmall.jpg -> [Ver = | Size = 3300 bytes | Modified Date = 28/01/2007 01:19:10 p.m. | Attr = HS]
AlbumArt_{D7665C88-A5A1-4FFA-A88E-ECE2EBAA4AD0}_Large.jpg -> %UserDocuments%\Mis álbumes\AlbumArt_{D7665C88-A5A1-4FFA-A88E-ECE2EBAA4AD0}_Large.jpg -> [Ver = | Size = 14683 bytes | Modified Date = 28/01/2007 01:19:12 p.m. | Attr = HS]
AlbumArt_{D7665C88-A5A1-4FFA-A88E-ECE2EBAA4AD0}_Small.jpg -> %UserDocuments%\Mis álbumes\AlbumArt_{D7665C88-A5A1-4FFA-A88E-ECE2EBAA4AD0}_Small.jpg -> [Ver = | Size = 3300 bytes | Modified Date = 28/01/2007 01:19:10 p.m. | Attr = HS]
desktop.ini -> %UserDocuments%\Mis álbumes\desktop.ini -> [Ver = | Size = 353 bytes | Modified Date = 28/01/2007 01:19:12 p.m. | Attr = HS]
Folder.jpg -> %UserDocuments%\Mis álbumes\Folder.jpg -> [Ver = | Size = 14683 bytes | Modified Date = 28/01/2007 01:19:12 p.m. | Attr = HS]
Limp Bizkit - 5 The bleep Song.mp3 -> %UserDocuments%\Mis álbumes\Limp Bizkit - 5 The bleep Song.mp3 -> [Ver = | Size = 3662704 bytes | Modified Date = 20/01/2007 02:29:10 a.m. | Attr = ]
Limp Bizkit - Behind blue Eyes.mp3 -> %UserDocuments%\Mis álbumes\Limp Bizkit - Behind blue Eyes.mp3 -> [Ver = | Size = 4393934 bytes | Modified Date = 26/01/2007 10:01:32 a.m. | Attr = ]
Limp Bizkit - Break Stuff.mp3 -> %UserDocuments%\Mis álbumes\Limp Bizkit - Break Stuff.mp3 -> [Ver = | Size = 2670215 bytes | Modified Date = 20/01/2007 06:39:14 p.m. | Attr = ]
Limp Bizkit - Nookie.mp3 -> %UserDocuments%\Mis álbumes\Limp Bizkit - Nookie.mp3 -> [Ver = | Size = 5331308 bytes | Modified Date = 26/01/2007 10:01:34 a.m. | Attr = ]
Marilyn Manson & Slipknot - (Video) - Fight Song.mpg -> %UserDocuments%\Mis álbumes\Marilyn Manson & Slipknot - (Video) - Fight Song.mpg -> [Ver = | Size = 30858076 bytes | Modified Date = 26/01/2007 10:53:26 a.m. | Attr = ]
Mateo Lynch - Alta Sociedad.mp3 -> %UserDocuments%\Mis álbumes\Mateo Lynch - Alta Sociedad.mp3 -> [Ver = | Size = 1414084 bytes | Modified Date = 15/01/2007 11:48:28 a.m. | Attr = ]
Thumbs.db -> %UserDocuments%\Mis álbumes\Thumbs.db -> [Ver = | Size = 8704 bytes | Modified Date = 30/01/2007 10:27:32 a.m. | Attr = HS]
@Alternate Data Stream - 0 bytes -> %UserDocuments%\Mis álbumes\Thumbs.db:encryptable ->
circuito electrico (frank).doc -> %UserDocuments%\UCV\circuito electrico (frank).doc -> [Ver = | Size = 46080 bytes | Modified Date = 21/01/2007 01:54:26 p.m. | Attr = ]
Comercio Electronico.doc -> %UserDocuments%\UCV\Comercio Electronico.doc -> [Ver = | Size = 83456 bytes | Modified Date = 09/02/2007 04:26:14 a.m. | Attr = ]
practica%2010.pdf -> %UserDocuments%\UCV\practica%2010.pdf -> [Ver = | Size = 90028 bytes | Modified Date = 31/01/2007 11:54:40 a.m. | Attr = ]
Practica%208.pdf -> %UserDocuments%\UCV\Practica%208.pdf -> [Ver = | Size = 74919 bytes | Modified Date = 31/01/2007 11:54:26 a.m. | Attr = ]
Tabla.doc -> %UserDocuments%\UCV\Tabla.doc -> [Ver = | Size = 20480 bytes | Modified Date = 18/01/2007 11:48:10 p.m. | Attr = ]
Texto sancionado.doc -> %UserDocuments%\UCV\Texto sancionado.doc -> [Ver = | Size = 48128 bytes | Modified Date = 24/01/2007 11:50:10 a.m. | Attr = ]
Linkin Park - Papercut.amv -> %UserDocuments%\Videos\Linkin Park - Papercut.amv -> [Ver = | Size = 4975454 bytes | Modified Date = 26/01/2007 09:49:32 a.m. | Attr = ]
Marilyn Manson- The Beautiful People live.amv -> %UserDocuments%\Videos\Marilyn Manson- The Beautiful People live.amv -> [Ver = | Size = 6271157 bytes | Modified Date = 03/02/2007 02:24:52 p.m. | Attr = ]
Slipknot - Before I Forget.amv -> %UserDocuments%\Videos\Slipknot - Before I Forget.amv -> [Ver = | Size = 6674438 bytes | Modified Date = 26/01/2007 09:47:04 a.m. | Attr = ]
(mago de oz) La cancion del pirata.mp3.xml -> %UserDocuments%\Downloads\Metadata\(mago de oz) La cancion del pirata.mp3.xml -> [Ver = | Size = 293 bytes | Modified Date = 10/02/2007 03:21:34 p.m. | Attr = ]
Kudai - Llevame.mp3.xml -> %UserDocuments%\Downloads\Metadata\Kudai - Llevame.mp3.xml -> [Ver = | Size = 302 bytes | Modified Date = 16/01/2007 01:54:26 p.m. | Attr = ]
Limp Bizkit - 5 The bleep Song.mp3.xml -> %UserDocuments%\Downloads\Metadata\Limp Bizkit - 5 The bleep Song.mp3.xml -> [Ver = | Size = 292 bytes | Modified Date = 20/01/2007 02:29:12 a.m. | Attr = ]
Limp Bizkit - Behind blue Eyes.mp3.xml -> %UserDocuments%\Downloads\Metadata\Limp Bizkit - Behind blue Eyes.mp3.xml -> [Ver = | Size = 343 bytes | Modified Date = 20/01/2007 01:00:50 a.m. | Attr = ]
Limp Bizkit - Break Stuff.mp3.xml -> %UserDocuments%\Downloads\Metadata\Limp Bizkit - Break Stuff.mp3.xml -> [Ver = | Size = 319 bytes | Modified Date = 20/01/2007 02:00:54 a.m. | Attr = ]
Limp Bizkit - Faith.mp3.xml -> %UserDocuments%\Downloads\Metadata\Limp Bizkit - Faith.mp3.xml -> [Ver = | Size = 278 bytes | Modified Date = 10/02/2007 05:38:00 p.m. | Attr = ]
Limp Bizkit - Nookie (1).mp3.xml -> %UserDocuments%\Downloads\Metadata\Limp Bizkit - Nookie (1).mp3.xml -> [Ver = | Size = 350 bytes | Modified Date = 10/02/2007 05:46:30 p.m. | Attr = ]
Limp Bizkit - Nookie.mp3.xml -> %UserDocuments%\Downloads\Metadata\Limp Bizkit - Nookie.mp3.xml -> [Ver = | Size = 362 bytes | Modified Date = 20/01/2007 01:26:58 a.m. | Attr = ]
Mago de Oz - Fiesta Pagana.mpeg.xml -> %UserDocuments%\Downloads\Metadata\Mago de Oz - Fiesta Pagana.mpeg.xml -> [Ver = | Size = 182 bytes | Modified Date = 10/02/2007 05:09:36 p.m. | Attr = ]
Mago de Oz - Los Ojos Del Dragón.mp3.xml -> %UserDocuments%\Downloads\Metadata\Mago de Oz - Los Ojos Del Dragón.mp3.xml -> [Ver = | Size = 229 bytes | Modified Date = 10/02/2007 04:04:36 p.m. | Attr = ]
mago de oz - satania.mp3.xml -> %UserDocuments%\Downloads\Metadata\mago de oz - satania.mp3.xml -> [Ver = | Size = 354 bytes | Modified Date = 10/02/2007 03:18:12 p.m. | Attr = ]
Marilyn Manson & Slipknot - (Video) - Fight Song.mpg.xml -> %UserDocuments%\Downloads\Metadata\Marilyn Manson & Slipknot - (Video) - Fight Song.mpg.xml -> [Ver = | Size = 254 bytes | Modified Date = 26/01/2007 10:53:26 a.m. | Attr = ]
Maritornes.mp3.xml -> %UserDocuments%\Downloads\Metadata\Maritornes.mp3.xml -> [Ver = | Size = 323 bytes | Modified Date = 10/02/2007 08:39:28 p.m. | Attr = ]
Mateo Lynch - Alta Sociedad.mp3.xml -> %UserDocuments%\Downloads\Metadata\Mateo Lynch - Alta Sociedad.mp3.xml -> [Ver = | Size = 320 bytes | Modified Date = 15/01/2007 11:48:28 a.m. | Attr = ]
motel - lejos estamos mejor.mp3.xml -> %UserDocuments%\Downloads\Metadata\motel - lejos estamos mejor.mp3.xml -> [Ver = | Size = 517 bytes | Modified Date = 10/02/2007 01:02:26 p.m. | Attr = ]
Panda - Narcisista Por Excelencia.mp3.xml -> %UserDocuments%\Downloads\Metadata\Panda - Narcisista Por Excelencia.mp3.xml -> [Ver = | Size = 391 bytes | Modified Date = 16/01/2007 01:57:08 p.m. | Attr = ]
Reik - Invierno.mp3.xml -> %UserDocuments%\Downloads\Metadata\Reik - Invierno.mp3.xml -> [Ver = | Size = 287 bytes | Modified Date = 10/02/2007 12:26:30 p.m. | Attr = ]
Shareaza_2.2.5.0.exe.xml -> %UserDocuments%\Downloads\Metadata\Shareaza_2.2.5.0.exe.xml -> [Ver = | Size = 407 bytes | Modified Date = 09/02/2007 10:42:06 p.m. | Attr = ]
WinPFind3U.exe -> %UserDocuments%\Ejecutables\WinPFind3u\WinPFind3U.exe -> Oldtimer Tools [Ver = 1.0.16.0 | Size = 308736 bytes | Modified Date = 07/02/2007 08:23:44 p.m. | Attr = ]
BTFV.wpl -> %UserDocuments%\Mi música\My Playlists\BTFV.wpl -> [Ver = | Size = 755 bytes | Modified Date = 28/01/2007 04:46:40 p.m. | Attr = ]

Mis Music.wpl -> %UserDocuments%\Mi música\My Playlists\Mis Music.wpl -> [Ver = | Size = 28444 bytes | Modified Date = 15/01/2007 09:59:16 a.m. | Attr = ]
Videos.wpl -> %UserDocuments%\Mi música\My Playlists\Videos.wpl -> [Ver = | Size = 2773 bytes | Modified Date = 27/01/2007 01:10:32 p.m. | Attr = ]
Decreto3390.pdf -> %UserDocuments%\Mis archivos recibidos\Monografia\Decreto3390.pdf -> [Ver = | Size = 39545 bytes | Modified Date = 31/01/2007 08:15:28 p.m. | Attr = ]
delitos informaticos.htm -> %UserDocuments%\Mis archivos recibidos\Monografia\delitos informaticos.htm -> [Ver = | Size = 28931 bytes | Modified Date = 31/01/2007 08:15:28 p.m. | Attr = ]
LEYSOBREDERECHODEAUTOR.pdf -> %UserDocuments%\Mis archivos recibidos\Monografia\LEYSOBREDERECHODEAUTOR.pdf -> [Ver = | Size = 72136 bytes | Modified Date = 31/01/2007 08:15:30 p.m. | Attr = ]
Presentacion_III_TRIMESTRE_2006.pdf -> %UserDocuments%\Mis archivos recibidos\Monografia\Presentacion_III_TRIMESTRE_2006.pdf -> [Ver = | Size = 1631817 bytes | Modified Date = 31/01/2007 08:16:40 p.m. | Attr = ]
Que es una monografía - Monografias_com.htm -> %UserDocuments%\Mis archivos recibidos\Monografia\Que es una monografía - Monografias_com.htm -> [Ver = | Size = 68328 bytes | Modified Date = 31/01/2007 08:15:32 p.m. | Attr = ]
SThumbs.dat -> %UserDocuments%\Mis álbumes\a\SThumbs.dat -> [Ver = | Size = 116856 bytes | Modified Date = 20/01/2007 01:51:22 p.m. | Attr = HS]
Kittie-Korn- Slipknot- Static-X- Nothingface- Fear Factory- Dope- Coal Chamber- Mudvayne - Waste(2).asf -> %UserDocuments%\My Music\iMesh\Kittie-Korn- Slipknot- Static-X- Nothingface- Fear Factory- Dope- Coal Chamber- Mudvayne - Waste(2).asf -> [Ver = | Size = 3956755 bytes | Modified Date = 25/01/2007 08:38:20 p.m. | Attr = ]
los caballeros del zodiaco saint seiya - spanish - saint seiya hades ova 14.mpg -> %UserDocuments%\My Music\iMesh\los caballeros del zodiaco saint seiya - spanish - saint seiya hades ova 14.mpg -> [Ver = | Size = 21032200 bytes | Modified Date = 15/01/2007 10:28:18 a.m. | Attr = ]
Thumbs.db -> %UserDocuments%\My Music\iMesh\Thumbs.db -> [Ver = | Size = 38400 bytes | Modified Date = 27/01/2007 06:31:52 p.m. | Attr = HS]
@Alternate Data Stream - 0 bytes -> %UserDocuments%\My Music\iMesh\Thumbs.db:encryptable ->
Thumbs.db -> %UserDocuments%\Reales\party\Thumbs.db -> [Ver = | Size = 159232 bytes | Modified Date = 28/01/2007 06:09:16 p.m. | Attr = HS]
Thumbs.db -> %UserDocuments%\Reales\Reunion de cuando Raul Salio de permiso\Thumbs.db -> [Ver = | Size = 254976 bytes | Modified Date = 28/01/2007 06:09:28 p.m. | Attr = HS]
@Alternate Data Stream - 0 bytes -> %UserDocuments%\Reales\Reunion de cuando Raul Salio de permiso\Thumbs.db:encryptable ->
Thumbs.db -> %UserDocuments%\Series\Aika\Thumbs.db -> [Ver = | Size = 101376 bytes | Modified Date = 28/01/2007 06:00:58 p.m. | Attr = HS]
Thumbs.db -> %UserDocuments%\Series\Final Fantasy\Thumbs.db -> [Ver = | Size = 89600 bytes | Modified Date = 28/01/2007 06:01:30 p.m. | Attr = HS]
Thumbs.db -> %UserDocuments%\Series\Grupos\Thumbs.db -> [Ver = | Size = 298496 bytes | Modified Date = 28/01/2007 06:01:32 p.m. | Attr = HS]
Thumbs.db -> %UserDocuments%\Series\Gumdaw Wing\Thumbs.db -> [Ver = | Size = 63488 bytes | Modified Date = 28/01/2007 06:01:34 p.m. | Attr = HS]
Thumbs.db -> %UserDocuments%\Series\Inuyasha\Thumbs.db -> [Ver = | Size = 99328 bytes | Modified Date = 28/01/2007 06:01:36 p.m. | Attr = HS]
Thumbs.db -> %UserDocuments%\Series\Otros\Thumbs.db -> [Ver = | Size = 268800 bytes | Modified Date = 09/02/2007 10:07:04 p.m. | Attr = HS]
Thumbs.db -> %UserDocuments%\Series\Resident Evil\Thumbs.db -> [Ver = | Size = 30208 bytes | Modified Date = 28/01/2007 06:01:42 p.m. | Attr = HS]
Thumbs.db -> %UserDocuments%\Series\Sakura Card Captord\Thumbs.db -> [Ver = | Size = 17920 bytes | Modified Date = 28/01/2007 06:03:42 p.m. | Attr = HS]
Thumbs.db -> %UserDocuments%\Series\Samurai X\Thumbs.db -> [Ver = | Size = 23552 bytes | Modified Date = 28/01/2007 06:03:44 p.m. | Attr = HS]
Thumbs.db -> %UserDocuments%\Series\Shaman king\Thumbs.db -> [Ver = | Size = 29184 bytes | Modified Date = 28/01/2007 06:03:46 p.m. | Attr = HS]
Thumbs.db -> %UserDocuments%\Series\Yu-gi-oh\Thumbs.db -> [Ver = | Size = 100352 bytes | Modified Date = 28/01/2007 06:03:48 p.m. | Attr = HS]
Thumbs.db -> %UserDocuments%\Series\Yu-yu hakusho\Thumbs.db -> [Ver = | Size = 16896 bytes | Modified Date = 28/01/2007 06:03:50 p.m. | Attr = HS]
ground40.jpg -> %UserDocuments%\UCV\Java\ground40.jpg -> [Ver = | Size = 11199 bytes | Modified Date = 24/01/2007 11:59:34 a.m. | Attr = ]
@Alternate Data Stream - 26 bytes -> %UserDocuments%\UCV\Java\ground40.jpg:Zone.Identifier ->
Jareth.java -> %UserDocuments%\UCV\Java\Jareth.java -> [Ver = | Size = 9616 bytes | Modified Date = 24/01/2007 12:43:02 p.m. | Attr = ]
@Alternate Data Stream - 26 bytes -> %UserDocuments%\UCV\Java\Jareth.java:Zone.Identifier ->
Jareth40.jpg -> %UserDocuments%\UCV\Java\Jareth40.jpg -> [Ver = | Size = 11613 bytes | Modified Date = 24/01/2007 11:59:38 a.m. | Attr = ]
@Alternate Data Stream - 26 bytes -> %UserDocuments%\UCV\Java\Jareth40.jpg:Zone.Identifier ->
Thumbs.db -> %UserDocuments%\UCV\Java\Thumbs.db -> [Ver = | Size = 11264 bytes | Modified Date = 30/01/2007 10:27:32 a.m. | Attr = HS]
@Alternate Data Stream - 0 bytes -> %UserDocuments%\UCV\Java\Thumbs.db:encryptable ->
wall40.jpg -> %UserDocuments%\UCV\Java\wall40.jpg -> [Ver = | Size = 11508 bytes | Modified Date = 24/01/2007 11:59:28 a.m. | Attr = ]
@Alternate Data Stream - 26 bytes -> %UserDocuments%\UCV\Java\wall40.jpg:Zone.Identifier ->
Decreto3390.pdf -> %UserDocuments%\UCV\Monografia\Decreto3390.pdf -> [Ver = | Size = 39545 bytes | Modified Date = 31/01/2007 08:15:28 p.m. | Attr = ]
delitos informaticos.htm -> %UserDocuments%\UCV\Monografia\delitos informaticos.htm -> [Ver = | Size = 28931 bytes | Modified Date = 31/01/2007 08:15:28 p.m. | Attr = ]
LEYSOBREDERECHODEAUTOR.pdf -> %UserDocuments%\UCV\Monografia\LEYSOBREDERECHODEAUTOR.pdf -> [Ver = | Size = 72136 bytes | Modified Date = 31/01/2007 08:15:30 p.m. | Attr = ]
Presentacion_III_TRIMESTRE_2006.pdf -> %UserDocuments%\UCV\Monografia\Presentacion_III_TRIMESTRE_2006.pdf -> [Ver = | Size = 1631817 bytes | Modified Date = 31/01/2007 08:16:40 p.m. | Attr = ]
Que es una monografía - Monografias_com.htm -> %UserDocuments%\UCV\Monografia\Que es una monografía - Monografias_com.htm -> [Ver = | Size = 68328 bytes | Modified Date = 31/01/2007 08:15:32 p.m. | Attr = ]
aguilas.JPG -> %UserDocuments%\UCV\Notepad++\aguilas.JPG -> [Ver = | Size = 12232 bytes | Modified Date = 19/01/2007 02:44:28 a.m. | Attr = ]
alfonzo.jpg -> %UserDocuments%\UCV\Notepad++\alfonzo.jpg -> [Ver = | Size = 12839 bytes | Modified Date = 19/01/2007 02:55:24 a.m. | Attr = ]
andrus.jpg -> %UserDocuments%\UCV\Notepad++\andrus.jpg -> [Ver = | Size = 2733 bytes | Modified Date = 19/01/2007 03:13:40 a.m. | Attr = ]
articulo.jpg -> %UserDocuments%\UCV\Notepad++\articulo.jpg -> [Ver = | Size = 3561 bytes | Modified Date = 19/01/2007 04:35:28 a.m. | Attr = ]
articulo2.jpg -> %UserDocuments%\UCV\Notepad++\articulo2.jpg -> [Ver = | Size = 8294 bytes | Modified Date = 19/01/2007 04:49:32 a.m. | Attr = ]
articulo3.jpg -> %UserDocuments%\UCV\Notepad++\articulo3.jpg -> [Ver = | Size = 2777 bytes | Modified Date = 19/01/2007 04:51:44 a.m. | Attr = ]
articulo4.jpg -> %UserDocuments%\UCV\Notepad++\articulo4.jpg -> [Ver = | Size = 2007 bytes | Modified Date = 19/01/2007 04:52:00 a.m. | Attr = ]
articulo5.jpg -> %UserDocuments%\UCV\Notepad++\articulo5.jpg -> [Ver = | Size = 21131 bytes | Modified Date = 19/01/2007 04:51:48 a.m. | Attr = ]
articulo6.jpg -> %UserDocuments%\UCV\Notepad++\articulo6.jpg -> [Ver = | Size = 2536 bytes | Modified Date = 19/01/2007 04:51:48 a.m. | Attr = ]
articulo7.jpg -> %UserDocuments%\UCV\Notepad++�

#5 OldTimer

OldTimer

    Malware Expert


  • Members
  • 11,092 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:North Carolina
  • Local time:10:19 AM

Posted 13 February 2007 - 09:20 PM

Hi Jessanramirez. The log is incomplete. Please go into the WinPFind3u folder and open the WinPFind3u.tx file with Notepad and then do the following:
  • Click the Format menu and make sure that Wordwrap is not checked. If it is then click on it to uncheck it.
  • Use the Add Reply button and Copy/Paste the information back here.
I will review it when it comes in.

If, after posting, the last line is not < End of Report > then the log is too big to fit into a single post and you will need to split it into multiple posts.

Cheers.

OT
I do not respond to PM's requesting help. That's what the forums are here for. Please use them so that others may benefit from your questions and the responses you receive.
OldTimer

Posted Image

#6 Jessanramirez

Jessanramirez
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:10:19 AM

Posted 24 February 2007 - 04:22 PM

articulo7.jpg -> %UserDocuments%\UCV\Notepad++\articulo7.jpg -> [Ver = | Size = 3654 bytes | Modified Date = 19/01/2007 04:51:48 a.m. | Attr = ]
articulo8.jpg -> %UserDocuments%\UCV\Notepad++\articulo8.jpg -> [Ver = | Size = 12871 bytes | Modified Date = 19/01/2007 04:51:50 a.m. | Attr = ]
articulo9.jpg -> %UserDocuments%\UCV\Notepad++\articulo9.jpg -> [Ver = | Size = 25340 bytes | Modified Date = 19/01/2007 04:51:50 a.m. | Attr = ]
endy.jpg -> %UserDocuments%\UCV\Notepad++\endy.jpg -> [Ver = | Size = 3114 bytes | Modified Date = 19/01/2007 03:02:30 a.m. | Attr = ]
fondo.jpg -> %UserDocuments%\UCV\Notepad++\fondo.jpg -> [Ver = | Size = 604926 bytes | Modified Date = 19/01/2007 03:24:54 a.m. | Attr = ]
gregor.jpg -> %UserDocuments%\UCV\Notepad++\gregor.jpg -> [Ver = | Size = 3565 bytes | Modified Date = 19/01/2007 03:17:34 a.m. | Attr = ]
henry.JPG -> %UserDocuments%\UCV\Notepad++\henry.JPG -> [Ver = | Size = 11257 bytes | Modified Date = 19/01/2007 02:59:26 a.m. | Attr = ]
hernandez.jpg -> %UserDocuments%\UCV\Notepad++\hernandez.jpg -> [Ver = | Size = 3276 bytes | Modified Date = 19/01/2007 03:16:08 a.m. | Attr = ]
Magallanes.jpg -> %UserDocuments%\UCV\Notepad++\Magallanes.jpg -> [Ver = | Size = 17259 bytes | Modified Date = 19/01/2007 01:06:26 a.m. | Attr = ]
omar.jpg -> %UserDocuments%\UCV\Notepad++\omar.jpg -> [Ver = | Size = 3399 bytes | Modified Date = 19/01/2007 03:14:56 a.m. | Attr = ]
PAG1.HTML -> %UserDocuments%\UCV\Notepad++\PAG1.HTML -> [Ver = | Size = 4366 bytes | Modified Date = 19/01/2007 04:38:54 a.m. | Attr = ]
PAG2.HTML -> %UserDocuments%\UCV\Notepad++\PAG2.HTML -> [Ver = | Size = 1335 bytes | Modified Date = 19/01/2007 05:24:12 a.m. | Attr = ]
PAG3.HTML -> %UserDocuments%\UCV\Notepad++\PAG3.HTML -> [Ver = | Size = 2513 bytes | Modified Date = 19/01/2007 04:24:40 a.m. | Attr = ]
PAG4.HTML -> %UserDocuments%\UCV\Notepad++\PAG4.HTML -> [Ver = | Size = 1324 bytes | Modified Date = 19/01/2007 05:16:14 a.m. | Attr = ]
rene.JPG -> %UserDocuments%\UCV\Notepad++\rene.JPG -> [Ver = | Size = 4617 bytes | Modified Date = 19/01/2007 02:53:18 a.m. | Attr = ]
rodriguez.jpg -> %UserDocuments%\UCV\Notepad++\rodriguez.jpg -> [Ver = | Size = 105704 bytes | Modified Date = 19/01/2007 03:07:06 a.m. | Attr = ]
Thumbs.db -> %UserDocuments%\UCV\Notepad++\Thumbs.db -> [Ver = | Size = 252928 bytes | Modified Date = 30/01/2007 10:27:34 a.m. | Attr = HS]
@Alternate Data Stream - 0 bytes -> %UserDocuments%\UCV\Notepad++\Thumbs.db:encryptable ->
Tigres.jpg -> %UserDocuments%\UCV\Notepad++\Tigres.jpg -> [Ver = | Size = 10790 bytes | Modified Date = 19/01/2007 02:42:28 a.m. | Attr = ]
CurrentSettings.vssettings -> %UserDocuments%\Visual Studio 2005\Settings\CurrentSettings.vssettings -> [Ver = | Size = 182982 bytes | Modified Date = 27/01/2007 07:04:36 p.m. | Attr = ]
Thumbs.db -> %UserDocuments%\Firefox Setup 2.0\nonlocalized\res\Thumbs.db -> [Ver = | Size = 19456 bytes | Modified Date = 28/01/2007 06:08:02 p.m. | Attr = HS]
@Alternate Data Stream - 0 bytes -> %UserDocuments%\Firefox Setup 2.0\nonlocalized\res\Thumbs.db:encryptable ->
Julioj.cpp -> %UserDocuments%\Jessan\a\buahaha\Julioj.cpp -> [Ver = | Size = 479 bytes | Modified Date = 18/01/2007 12:50:56 p.m. | Attr = ]
Julioj.cpp -> %UserDocuments%\Jessan\a\Javascript\Julioj.cpp -> [Ver = | Size = 1489 bytes | Modified Date = 18/01/2007 04:52:12 p.m. | Attr = ]
Julioj.dsp -> %UserDocuments%\Jessan\a\Javascript\Julioj.dsp -> [Ver = | Size = 3405 bytes | Modified Date = 18/01/2007 03:53:30 p.m. | Attr = ]
Julioj.dsw -> %UserDocuments%\Jessan\a\Javascript\Julioj.dsw -> [Ver = | Size = 537 bytes | Modified Date = 18/01/2007 03:54:18 p.m. | Attr = ]
Julioj.ncb -> %UserDocuments%\Jessan\a\Javascript\Julioj.ncb -> [Ver = | Size = 33792 bytes | Modified Date = 18/01/2007 04:52:20 p.m. | Attr = ]
Julioj.opt -> %UserDocuments%\Jessan\a\Javascript\Julioj.opt -> [Ver = | Size = 48640 bytes | Modified Date = 18/01/2007 04:52:18 p.m. | Attr = ]


Julioj.plg -> %UserDocuments%\Jessan\a\Javascript\Julioj.plg -> [Ver = | Size = 1106 bytes | Modified Date = 18/01/2007 04:52:14 p.m. | Attr = ]
2.gif -> %UserDocuments%\Jessan\a\No Tocar\2.gif -> [Ver = | Size = 3759 bytes | Modified Date = 17/01/2007 01:18:48 p.m. | Attr = ]
2.jpg -> %UserDocuments%\Jessan\a\No Tocar\2.jpg -> [Ver = | Size = 2437 bytes | Modified Date = 17/01/2007 12:01:34 a.m. | Attr = ]
aguilas.gif -> %UserDocuments%\Jessan\a\No Tocar\aguilas.gif -> [Ver = | Size = 6045 bytes | Modified Date = 17/01/2007 01:20:02 p.m. | Attr = ]
henry blanco.jpg -> %UserDocuments%\Jessan\a\No Tocar\henry blanco.jpg -> [Ver = | Size = 12379 bytes | Modified Date = 17/01/2007 01:05:26 p.m. | Attr = ]
images.jpg -> %UserDocuments%\Jessan\a\No Tocar\images.jpg -> [Ver = | Size = 1376 bytes | Modified Date = 17/01/2007 12:27:22 p.m. | Attr = ]
images1.jpg -> %UserDocuments%\Jessan\a\No Tocar\images1.jpg -> [Ver = | Size = 2266 bytes | Modified Date = 17/01/2007 12:32:44 p.m. | Attr = ]
images11.jpg -> %UserDocuments%\Jessan\a\No Tocar\images11.jpg -> [Ver = | Size = 2490 bytes | Modified Date = 17/01/2007 12:33:14 p.m. | Attr = ]
images12.jpg -> %UserDocuments%\Jessan\a\No Tocar\images12.jpg -> [Ver = | Size = 2435 bytes | Modified Date = 17/01/2007 12:33:16 p.m. | Attr = ]
images2.jpg -> %UserDocuments%\Jessan\a\No Tocar\images2.jpg -> [Ver = | Size = 2166 bytes | Modified Date = 17/01/2007 12:29:46 p.m. | Attr = ]
Informe de proyecto.doc -> %UserDocuments%\Jessan\a\No Tocar\Informe de proyecto.doc -> [Ver = | Size = 20992 bytes | Modified Date = 18/01/2007 04:29:40 p.m. | Attr = ]
juan ovalles.jpg -> %UserDocuments%\Jessan\a\No Tocar\juan ovalles.jpg -> [Ver = | Size = 33763 bytes | Modified Date = 17/01/2007 01:00:30 p.m. | Attr = ]
LogoLeonesDefault.jpg -> %UserDocuments%\Jessan\a\No Tocar\LogoLeonesDefault.jpg -> [Ver = | Size = 4073 bytes | Modified Date = 17/01/2007 01:00:20 p.m. | Attr = ]
marco.jpg -> %UserDocuments%\Jessan\a\No Tocar\marco.jpg -> [Ver = | Size = 12306 bytes | Modified Date = 17/01/2007 12:17:48 p.m. | Attr = ]
new 1.html -> %UserDocuments%\Jessan\a\No Tocar\new 1.html -> [Ver = | Size = 3576 bytes | Modified Date = 18/01/2007 11:04:44 p.m. | Attr = ]
new 10.html -> %UserDocuments%\Jessan\a\No Tocar\new 10.html -> [Ver = | Size = 3800 bytes | Modified Date = 18/01/2007 04:50:00 p.m. | Attr = ]
new 3.html -> %UserDocuments%\Jessan\a\No Tocar\new 3.html -> [Ver = | Size = 4213 bytes | Modified Date = 15/01/2007 11:47:32 a.m. | Attr = ]
new 4.html -> %UserDocuments%\Jessan\a\No Tocar\new 4.html -> [Ver = | Size = 880 bytes | Modified Date = 15/01/2007 11:29:22 a.m. | Attr = ]
new 6.html -> %UserDocuments%\Jessan\a\No Tocar\new 6.html -> [Ver = | Size = 4450 bytes | Modified Date = 15/01/2007 12:07:22 p.m. | Attr = ]
new 7.html -> %UserDocuments%\Jessan\a\No Tocar\new 7.html -> [Ver = | Size = 3412 bytes | Modified Date = 15/01/2007 11:36:26 a.m. | Attr = ]
new 8.html -> %UserDocuments%\Jessan\a\No Tocar\new 8.html -> [Ver = | Size = 948 bytes | Modified Date = 15/01/2007 11:49:10 a.m. | Attr = ]
new 9.html -> %UserDocuments%\Jessan\a\No Tocar\new 9.html -> [Ver = | Size = 6852 bytes | Modified Date = 18/01/2007 03:56:28 p.m. | Attr = ]
Thumbs.db -> %UserDocuments%\Jessan\a\No Tocar\Thumbs.db -> [Ver = | Size = 149504 bytes | Modified Date = 18/01/2007 10:28:10 p.m. | Attr = HS]
tigres.bmp -> %UserDocuments%\Jessan\a\No Tocar\tigres.bmp -> [Ver = | Size = 2359350 bytes | Modified Date = 17/01/2007 01:16:00 p.m. | Attr = ]
tigres.jpg -> %UserDocuments%\Jessan\a\No Tocar\tigres.jpg -> [Ver = | Size = 21193 bytes | Modified Date = 17/01/2007 12:05:12 a.m. | Attr = ]
top-001.jpg -> %UserDocuments%\Jessan\a\No Tocar\top-001.jpg -> [Ver = | Size = 3559 bytes | Modified Date = 17/01/2007 01:19:00 p.m. | Attr = ]
wp_1024_768_jimenezl1.jpg -> %UserDocuments%\Jessan\a\No Tocar\wp_1024_768_jimenezl1.jpg -> [Ver = | Size = 158718 bytes | Modified Date = 17/01/2007 12:22:08 p.m. | Attr = ]
fan_mil2816743317.xml -> %UserDocuments%\Mis archivos recibidos\Jessan_1621262809\Historial\fan_mil2816743317.xml -> [Ver = | Size = 5223 bytes | Modified Date = 27/01/2007 02:31:54 p.m. | Attr = ]
MessageLog.xsl -> %UserDocuments%\Mis archivos recibidos\Jessan_1621262809\Historial\MessageLog.xsl -> [Ver = | Size = 12152 bytes | Modified Date = 27/01/2007 02:31:54 p.m. | Attr = ]
alejandrojesus_43811629644.xml -> %UserDocuments%\Mis archivos recibidos\lusifer_159a2118816536\Historial\alejandrojesus_43811629644.xml -> [Ver = | Size = 12492 bytes | Modified Date = 31/01/2007 07:50:00 p.m. | Attr = ]
angel_vamp173225285573.xml -> %UserDocuments%\Mis archivos recibidos\lusifer_159a2118816536\Historial\angel_vamp173225285573.xml -> [Ver = | Size = 10017 bytes | Modified Date = 07/02/2007 08:07:04 p.m. | Attr = ]
darkwilson898494137870.xml -> %UserDocuments%\Mis archivos recibidos\lusifer_159a2118816536\Historial\darkwilson898494137870.xml -> [Ver = | Size = 37772 bytes | Modified Date = 04/02/2007 11:51:34 a.m. | Attr = ]
dark_16_131534869350.xml -> %UserDocuments%\Mis archivos recibidos\lusifer_159a2118816536\Historial\dark_16_131534869350.xml -> [Ver = | Size = 10596 bytes | Modified Date = 31/01/2007 09:00:24 p.m. | Attr = ]
devilphantom_06862845382793.xml -> %UserDocuments%\Mis archivos recibidos\lusifer_159a2118816536\Historial\devilphantom_06862845382793.xml -> [Ver = | Size = 47781 bytes | Modified Date = 31/01/2007 10:35:26 p.m. | Attr = ]
elgalactico692179594774.xml -> %UserDocuments%\Mis archivos recibidos\lusifer_159a2118816536\Historial\elgalactico692179594774.xml -> [Ver = | Size = 9217 bytes | Modified Date = 16/01/2007 08:28:18 p.m. | Attr = ]
el_spiret2703354326.xml -> %UserDocuments%\Mis archivos recibidos\lusifer_159a2118816536\Historial\el_spiret2703354326.xml -> [Ver = | Size = 9270 bytes | Modified Date = 20/01/2007 01:15:26 a.m. | Attr = ]
fan_mil2816743317.xml -> %UserDocuments%\Mis archivos recibidos\lusifer_159a2118816536\Historial\fan_mil2816743317.xml -> [Ver = | Size = 16579 bytes | Modified Date = 10/02/2007 09:01:16 p.m. | Attr = ]
jessan_1621262809.xml -> %UserDocuments%\Mis archivos recibidos\lusifer_159a2118816536\Historial\jessan_1621262809.xml -> [Ver = | Size = 2489 bytes | Modified Date = 12/02/2007 10:57:00 a.m. | Attr = ]
jjmblanco232243703912.xml -> %UserDocuments%\Mis archivos recibidos\lusifer_159a2118816536\Historial\jjmblanco232243703912.xml -> [Ver = | Size = 139360 bytes | Modified Date = 07/02/2007 10:42:12 p.m. | Attr = ]
kaya_kived3642704623.xml -> %UserDocuments%\Mis archivos recibidos\lusifer_159a2118816536\Historial\kaya_kived3642704623.xml -> [Ver = | Size = 15607 bytes | Modified Date = 07/02/2007 09:49:44 p.m. | Attr = ]
lairon201322721242.xml -> %UserDocuments%\Mis archivos recibidos\lusifer_159a2118816536\Historial\lairon201322721242.xml -> [Ver = | Size = 7248 bytes | Modified Date = 08/02/2007 11:26:50 p.m. | Attr = ]
marcos_rz2211590264612.xml -> %UserDocuments%\Mis archivos recibidos\lusifer_159a2118816536\Historial\marcos_rz2211590264612.xml -> [Ver = | Size = 45896 bytes | Modified Date = 04/02/2007 09:10:22 p.m. | Attr = ]
nimsay987985238104.xml -> %UserDocuments%\Mis archivos recibidos\lusifer_159a2118816536\Historial\nimsay987985238104.xml -> [Ver = | Size = 3418 bytes | Modified Date = 04/02/2007 08:48:08 p.m. | Attr = ]
penrry_godwarrior2544189382.xml -> %UserDocuments%\Mis archivos recibidos\lusifer_159a2118816536\Historial\penrry_godwarrior2544189382.xml -> [Ver = | Size = 90102 bytes | Modified Date = 12/02/2007 11:15:14 a.m. | Attr = ]
princess_punk_03094259957722.xml -> %UserDocuments%\Mis archivos recibidos\lusifer_159a2118816536\Historial\princess_punk_03094259957722.xml -> [Ver = | Size = 14686 bytes | Modified Date = 08/02/2007 11:06:34 p.m. | Attr = ]
vanefashion_163655944847.xml -> %UserDocuments%\Mis archivos recibidos\lusifer_159a2118816536\Historial\vanefashion_163655944847.xml -> [Ver = | Size = 90361 bytes | Modified Date = 09/02/2007 10:34:42 p.m. | Attr = ]
Julioj.exe -> %UserDocuments%\Jessan\a\Javascript\Debug\Julioj.exe -> [Ver = | Size = 184374 bytes | Modified Date = 18/01/2007 04:52:14 p.m. | Attr = ]
Julioj.ilk -> %UserDocuments%\Jessan\a\Javascript\Debug\Julioj.ilk -> [Ver = | Size = 191284 bytes | Modified Date = 18/01/2007 04:52:14 p.m. | Attr = ]
Julioj.obj -> %UserDocuments%\Jessan\a\Javascript\Debug\Julioj.obj -> [Ver = | Size = 4542 bytes | Modified Date = 18/01/2007 04:52:14 p.m. | Attr = ]
Julioj.pch -> %UserDocuments%\Jessan\a\Javascript\Debug\Julioj.pch -> [Ver = | Size = 213688 bytes | Modified Date = 18/01/2007 03:53:32 p.m. | Attr = ]
Julioj.pdb -> %UserDocuments%\Jessan\a\Javascript\Debug\Julioj.pdb -> [Ver = | Size = 451584 bytes | Modified Date = 18/01/2007 04:52:14 p.m. | Attr = ]
vc60.idb -> %UserDocuments%\Jessan\a\Javascript\Debug\vc60.idb -> [Ver = | Size = 33792 bytes | Modified Date = 18/01/2007 04:52:14 p.m. | Attr = ]
vc60.pdb -> %UserDocuments%\Jessan\a\Javascript\Debug\vc60.pdb -> [Ver = | Size = 45056 bytes | Modified Date = 18/01/2007 04:52:14 p.m. | Attr = ]
images.jpg -> %UserDocuments%\Jessan\a\Javascript\No Tocar\images.jpg -> [Ver = | Size = 1376 bytes | Modified Date = 17/01/2007 12:27:22 p.m. | Attr = ]
images1.jpg -> %UserDocuments%\Jessan\a\Javascript\No Tocar\images1.jpg -> [Ver = | Size = 2266 bytes | Modified Date = 17/01/2007 12:32:44 p.m. | Attr = ]
images11.jpg -> %UserDocuments%\Jessan\a\Javascript\No Tocar\images11.jpg -> [Ver = | Size = 2490 bytes | Modified Date = 17/01/2007 12:33:14 p.m. | Attr = ]
images12.jpg -> %UserDocuments%\Jessan\a\Javascript\No Tocar\images12.jpg -> [Ver = | Size = 2435 bytes | Modified Date = 17/01/2007 12:33:16 p.m. | Attr = ]
images2.jpg -> %UserDocuments%\Jessan\a\Javascript\No Tocar\images2.jpg -> [Ver = | Size = 2166 bytes | Modified Date = 17/01/2007 12:29:46 p.m. | Attr = ]


marco.jpg -> %UserDocuments%\Jessan\a\Javascript\No Tocar\marco.jpg -> [Ver = | Size = 12306 bytes | Modified Date = 17/01/2007 12:17:48 p.m. | Attr = ]
new 10.html -> %UserDocuments%\Jessan\a\Javascript\No Tocar\new 10.html -> [Ver = | Size = 4112 bytes | Modified Date = 18/01/2007 03:04:26 p.m. | Attr = ]
new 3.html -> %UserDocuments%\Jessan\a\Javascript\No Tocar\new 3.html -> [Ver = | Size = 4217 bytes | Modified Date = 18/01/2007 03:52:26 p.m. | Attr = ]
new 4.html -> %UserDocuments%\Jessan\a\Javascript\No Tocar\new 4.html -> [Ver = | Size = 880 bytes | Modified Date = 15/01/2007 11:29:22 a.m. | Attr = ]
new 5.HTML -> %UserDocuments%\Jessan\a\Javascript\No Tocar\new 5.HTML -> [Ver = | Size = 5098 bytes | Modified Date = 18/01/2007 03:28:32 p.m. | Attr = ]
new 6.html -> %UserDocuments%\Jessan\a\Javascript\No Tocar\new 6.html -> [Ver = | Size = 5576 bytes | Modified Date = 18/01/2007 03:25:18 p.m. | Attr = ]
new 7.html -> %UserDocuments%\Jessan\a\Javascript\No Tocar\new 7.html -> [Ver = | Size = 6033 bytes | Modified Date = 18/01/2007 03:44:52 p.m. | Attr = ]
new 8.html -> %UserDocuments%\Jessan\a\Javascript\No Tocar\new 8.html -> [Ver = | Size = 948 bytes | Modified Date = 15/01/2007 11:49:10 a.m. | Attr = ]
nn.jpg -> %UserDocuments%\Jessan\a\Javascript\No Tocar\nn.jpg -> [Ver = | Size = 158718 bytes | Modified Date = 17/01/2007 12:22:08 p.m. | Attr = ]
Thumbs.db -> %UserDocuments%\Jessan\a\Javascript\No Tocar\Thumbs.db -> [Ver = | Size = 128512 bytes | Modified Date = 18/01/2007 03:50:22 p.m. | Attr = HS]
1.jpg -> %UserDocuments%\Jessan\a\No Tocar\g\1.jpg -> [Ver = | Size = 2868 bytes | Modified Date = 15/01/2007 11:33:40 a.m. | Attr = ]
2.jpg -> %UserDocuments%\Jessan\a\No Tocar\g\2.jpg -> [Ver = | Size = 2710 bytes | Modified Date = 15/01/2007 11:33:54 a.m. | Attr = ]
3.jpg -> %UserDocuments%\Jessan\a\No Tocar\g\3.jpg -> [Ver = | Size = 2552 bytes | Modified Date = 15/01/2007 11:34:08 a.m. | Attr = ]
4.jpg -> %UserDocuments%\Jessan\a\No Tocar\g\4.jpg -> [Ver = | Size = 2393 bytes | Modified Date = 15/01/2007 11:34:18 a.m. | Attr = ]
5.jpg -> %UserDocuments%\Jessan\a\No Tocar\g\5.jpg -> [Ver = | Size = 2679 bytes | Modified Date = 15/01/2007 11:35:48 a.m. | Attr = ]
l2.jpg -> %UserDocuments%\Jessan\a\No Tocar\g\l2.jpg -> [Ver = | Size = 1926 bytes | Modified Date = 15/01/2007 11:35:58 a.m. | Attr = ]
l3.jpg -> %UserDocuments%\Jessan\a\No Tocar\g\l3.jpg -> [Ver = | Size = 1711 bytes | Modified Date = 15/01/2007 11:35:08 a.m. | Attr = ]
l4.jpg -> %UserDocuments%\Jessan\a\No Tocar\g\l4.jpg -> [Ver = | Size = 1783 bytes | Modified Date = 15/01/2007 11:35:16 a.m. | Attr = ]
Thumbs.db -> %UserDocuments%\Jessan\a\No Tocar\g\Thumbs.db -> [Ver = | Size = 57344 bytes | Modified Date = 18/01/2007 10:59:12 p.m. | Attr = HS]
Thumbs.db -> %UserDocuments%\Jessan\a\No Tocar\v\Thumbs.db -> [Ver = | Size = 78336 bytes | Modified Date = 18/01/2007 10:59:12 p.m. | Attr = HS]
1.jpg -> %UserDocuments%\Jessan\a\Javascript\No Tocar\g\1.jpg -> [Ver = | Size = 2868 bytes | Modified Date = 15/01/2007 11:33:40 a.m. | Attr = ]
2.jpg -> %UserDocuments%\Jessan\a\Javascript\No Tocar\g\2.jpg -> [Ver = | Size = 2710 bytes | Modified Date = 15/01/2007 11:33:54 a.m. | Attr = ]
3.jpg -> %UserDocuments%\Jessan\a\Javascript\No Tocar\g\3.jpg -> [Ver = | Size = 2552 bytes | Modified Date = 15/01/2007 11:34:08 a.m. | Attr = ]
4.jpg -> %UserDocuments%\Jessan\a\Javascript\No Tocar\g\4.jpg -> [Ver = | Size = 2393 bytes | Modified Date = 15/01/2007 11:34:18 a.m. | Attr = ]
5.jpg -> %UserDocuments%\Jessan\a\Javascript\No Tocar\g\5.jpg -> [Ver = | Size = 2679 bytes | Modified Date = 15/01/2007 11:35:48 a.m. | Attr = ]
l2.jpg -> %UserDocuments%\Jessan\a\Javascript\No Tocar\g\l2.jpg -> [Ver = | Size = 1926 bytes | Modified Date = 15/01/2007 11:35:58 a.m. | Attr = ]
l3.jpg -> %UserDocuments%\Jessan\a\Javascript\No Tocar\g\l3.jpg -> [Ver = | Size = 1711 bytes | Modified Date = 15/01/2007 11:35:08 a.m. | Attr = ]
l4.jpg -> %UserDocuments%\Jessan\a\Javascript\No Tocar\g\l4.jpg -> [Ver = | Size = 1783 bytes | Modified Date = 15/01/2007 11:35:16 a.m. | Attr = ]
Thumbs.db -> %UserDocuments%\Jessan\a\Javascript\No Tocar\g\Thumbs.db -> [Ver = | Size = 54272 bytes | Modified Date = 18/01/2007 03:49:00 p.m. | Attr = HS]
Thumbs.db -> %UserDocuments%\Jessan\a\Javascript\No Tocar\v\Thumbs.db -> [Ver = | Size = 78336 bytes | Modified Date = 18/01/2007 03:49:00 p.m. | Attr = HS]
bootstat.dat -> %SystemRoot%\bootstat.dat -> [Ver = | Size = 2048 bytes | Modified Date = 13/02/2007 08:43:54 a.m. | Attr = S]
amcompat.tlb -> %System32%\amcompat.tlb -> [Ver = | Size = 16832 bytes | Modified Date = 31/01/2007 08:05:58 p.m. | Attr = ]
CONFIG.NT -> %System32%\CONFIG.NT -> [Ver = | Size = 2909 bytes | Modified Date = 28/01/2007 05:24:54 p.m. | Attr = ]
nscompat.tlb -> %System32%\nscompat.tlb -> [Ver = | Size = 23392 bytes | Modified Date = 31/01/2007 08:05:58 p.m. | Attr = ]
nvapps.xml -> %System32%\nvapps.xml -> [Ver = | Size = 29204 bytes | Modified Date = 13/02/2007 08:44:52 a.m. | Attr = ]
perfc009.dat -> %System32%\perfc009.dat -> [Ver = | Size = 79986 bytes | Modified Date = 29/01/2007 10:09:00 p.m. | Attr = ]
perfc00A.dat -> %System32%\perfc00A.dat -> [Ver = | Size = 105530 bytes | Modified Date = 29/01/2007 10:09:00 p.m. | Attr = ]
perfh009.dat -> %System32%\perfh009.dat -> [Ver = | Size = 447772 bytes | Modified Date = 29/01/2007 10:09:00 p.m. | Attr = ]
perfh00A.dat -> %System32%\perfh00A.dat -> [Ver = | Size = 517640 bytes | Modified Date = 29/01/2007 10:09:00 p.m. | Attr = ]
PerfStringBackup.INI -> %System32%\PerfStringBackup.INI -> [Ver = | Size = 1163610 bytes | Modified Date = 29/01/2007 10:09:00 p.m. | Attr = ]
sistem.sys -> %System32%\sistem.sys -> [Ver = | Size = 10 bytes | Modified Date = 18/01/2007 07:34:30 p.m. | Attr = RHS]
wpa.dbl -> %System32%\wpa.dbl -> [Ver = | Size = 2206 bytes | Modified Date = 13/02/2007 08:45:10 a.m. | Attr = ]
dump_wmimmc.sys -> %System32%\drivers\dump_wmimmc.sys -> [Ver = | Size = 112781 bytes | Modified Date = 11/02/2007 08:54:48 a.m. | Attr = ]
tmcomm.sys -> %System32%\drivers\tmcomm.sys -> Trend Micro Inc. [Ver = 1.6.0.1052 | Size = 102800 bytes | Modified Date = 24/01/2007 05:45:46 p.m. | Attr = ]

[File String Scan - Non-Microsoft Only]
@Alternate Data Stream - 0 bytes -> %AllUsersDocuments%\Mis imágenes\Imágenes de muestra\Thumbs.db:encryptable ->
@Alternate Data Stream - 119 bytes -> %AllUsersAppData%\TEMP:54D4173A ->
PEC2 , -> %AllUsersAppData%\Microsoft\Device Emulator\{CF0ACB52-A734-41b8-AFBA-47F85B29AA7D}.dess -> [Ver = | Size = 17891356 bytes | Modified Date = 23/12/2005 10:42:20 a.m. | Attr = ]
@Alternate Data Stream - 26 bytes -> %UserDesktop%\jcpro400.zip:Zone.Identifier ->
@Alternate Data Stream - 26 bytes -> %UserDesktop%\NiktoutRO-Chaos-Patcher.rar:Zone.Identifier ->
@Alternate Data Stream - 26 bytes -> %UserDesktop%\No Tocar\aawsepersonal.exe:Zone.Identifier ->
@Alternate Data Stream - 26 bytes -> %UserDesktop%\No Tocar\ccsetup137.exe:Zone.Identifier ->
Thawte Consulting , -> %UserDesktop%\No Tocar\ccsetup137.exe -> Piriform Ltd [Ver = 1.37.0.456 | Size = 2683984 bytes | Modified Date = 03/02/2007 03:58:04 p.m. | Attr = ]
@Alternate Data Stream - 26 bytes -> %UserDesktop%\No Tocar\defs.zip:Zone.Identifier ->
@Alternate Data Stream - 26 bytes -> %UserDesktop%\No Tocar\HijackThis.exe:Zone.Identifier ->
UPX! , UPX0 , -> %UserDesktop%\No Tocar\HijackThis.exe -> Soeperman Enterprises Ltd. [Ver = 1.99.0001 | Size = 218112 bytes | Modified Date = 16/02/2005 11:06:16 a.m. | Attr = ]
@Alternate Data Stream - 26 bytes -> %UserDesktop%\No Tocar\hijackthis_sfx.exe:Zone.Identifier ->
@Alternate Data Stream - 26 bytes -> %UserDesktop%\No Tocar\KillBox.exe:Zone.Identifier ->
@Alternate Data Stream - 26 bytes -> %UserDesktop%\No Tocar\killbox.zip:Zone.Identifier ->
@Alternate Data Stream - 26 bytes -> %UserDesktop%\No Tocar\spybotsd14.exe:Zone.Identifier ->
@Alternate Data Stream - 26 bytes -> %UserDesktop%\No Tocar\stng260.exe:Zone.Identifier ->
UPX! , UPX0 , -> %UserDesktop%\No Tocar\stng260.exe -> McAfee Inc. [Ver = 2.6.0. | Size = 1144839 bytes | Modified Date = 31/01/2007 10:10:58 p.m. | Attr = ]
@Alternate Data Stream - 26 bytes -> %UserDesktop%\No Tocar\TIS2007_TMSiteTrialDL.exe:Zone.Identifier ->
FSG! , -> %UserDesktop%\No Tocar\TIS2007_TMSiteTrialDL.exe -> Trend Micro Inc. [Ver = 15.3 | Size = 86103499 bytes | Modified Date = 03/02/2007 05:17:36 p.m. | Attr = ]
Thawte Consulting , -> %UserDesktop%\No Tocar\TIS2007_153_1151\Setup\tmpcc.msi -> [Ver = | Size = 3342848 bytes | Modified Date = 10/01/2007 06:30:00 p.m. | Attr = ]
Thawte Consulting , -> %UserDesktop%\No Tocar\TIS2007_153_1151\Setup\tmpcc64.msi -> [Ver = | Size = 3817984 bytes | Modified Date = 10/01/2007 06:33:48 p.m. | Attr = ]
UPX! , UPX0 , -> %UserDesktop%\No Tocar\TIS2007_153_1151\Setup\Module\TSC.EXE -> Trend Micro Inc. [Ver = 5.1.0.1008 | Size = 236560 bytes | Modified Date = 29/12/2006 02:53:12 p.m. | Attr = ]
UPX! , aspack , -> %UserDesktop%\No Tocar\TIS2007_153_1151\Setup\Module\VSAPI32.DLL -> Trend Micro Inc. [Ver = 8.320-1004 | Size = 1107552 bytes | Modified Date = 29/12/2006 02:53:14 p.m. | Attr = ]
UPX! , aspack , -> %UserDesktop%\No Tocar\TIS2007_153_1151\Setup\Module\File64\Vsapi64.dll -> Trend Micro Inc. [Ver = 8.320-1004 | Size = 1835536 bytes | Modified Date = 29/12/2006 02:53:18 p.m. | Attr = ]
UPX! , aspack , -> %UserDesktop%\No Tocar\TIS2007_153_1151\Setup\System32\drivers\VsapiNT.sys -> Trend Micro Inc. [Ver = 8.320-1004 | Size = 1052472 bytes | Modified Date = 29/12/2006 02:53:52 p.m. | Attr = ]
UPX! , aspack , -> %UserDesktop%\No Tocar\TIS2007_153_1151\Setup\System64\drivers\VsapiNT.sys -> Trend Micro Inc. [Ver = 8.320-1004 | Size = 1653520 bytes | Modified Date = 29/12/2006 02:53:54 p.m. | Attr = ]
PEC2 , PECompact2 , -> %UserDocuments%\Google Updater.exe -> [Ver = | Size = 743272 bytes | Modified Date = 28/01/2007 03:11:36 p.m. | Attr = ]
PEC2 , PECompact2 , -> %UserDocuments%\2007\Google Updater.exe -> [Ver = | Size = 743272 bytes | Modified Date = 28/01/2007 03:11:36 p.m. | Attr = ]
FSG! , -> %UserDocuments%\Downloads\Limp Bizkit - 5 The bleep Song.mp3 -> [Ver = | Size = 3662704 bytes | Modified Date = 20/01/2007 02:29:10 a.m. | Attr = ]
WSUD , -> %UserDocuments%\Downloads\Mago de Oz - Fiesta Pagana.mpeg -> [Ver = | Size = 35737600 bytes | Modified Date = 10/02/2007 05:09:36 p.m. | Attr = ]
@Alternate Data Stream - 0 bytes -> %UserDocuments%\Downloads\Thumbs.db:encryptable ->
@Alternate Data Stream - 26 bytes -> %UserDocuments%\Ejecutables\AdbeRdr708_es_ES.exe:Zone.Identifier ->
@Alternate Data Stream - 26 bytes -> %UserDocuments%\Ejecutables\AdbeRdr80_es_ES.exe:Zone.Identifier ->
@Alternate Data Stream - 26 bytes -> %UserDocuments%\Ejecutables\Corel_PaintShopPro1000_EN_TBYB_TrialESD.exe:Zone.Identifier ->
File scan skipped for file %UserDocuments%\Ejecutables\Corel_PaintShopPro1000_EN_TBYB_TrialESD.exe -> File size too big (111143864 bytes) ->
@Alternate Data Stream - 26 bytes -> %UserDocuments%\Ejecutables\install_flash_player_active_x.msi:Zone.Identifier ->
UPX! , UPX0 , Thawte Consulting , -> %UserDocuments%\Ejecutables\install_flash_player_active_x.msi -> [Ver = | Size = 4212736 bytes | Modified Date = 03/02/2007 12:35:38 p.m. | Attr = ]
@Alternate Data Stream - 26 bytes -> %UserDocuments%\Ejecutables\Shareaza_2.2.1.0.exe:Zone.Identifier ->
@Alternate Data Stream - 26 bytes -> %UserDocuments%\Ejecutables\Shareaza_2.2.3.0.exe:Zone.Identifier ->
WSUD , -> %UserDocuments%\Ejecutables\tibia76.zip -> [Ver = | Size = 9873676 bytes | Modified Date = 01/09/2006 04:49:10 p.m. | Attr = ]
@Alternate Data Stream - 26 bytes -> %UserDocuments%\Ejecutables\tibia78.exe:Zone.Identifier ->
@Alternate Data Stream - 26 bytes -> %UserDocuments%\Ejecutables\tibia781.exe:Zone.Identifier ->
@Alternate Data Stream - 26 bytes -> %UserDocuments%\Ejecutables\tibia79.exe:Zone.Identifier ->
@Alternate Data Stream - 26 bytes -> %UserDocuments%\Ejecutables\winpfind3u.exe:Zone.Identifier ->
PECompact2 , -> %UserDocuments%\Ejecutables\winzip110.exe -> [Ver = | Size = 7706216 bytes | Modified Date = 12/01/2007 06:14:40 p.m. | Attr = ]
UPX! , FSG! , PEC2 , PECompact2 , Umonitor , qoologic , aspack , PTech , urllogic , ad-beh , ad-behNior.com , sYVLLSAKY , _rtneg3 , SAHAgent , buddy.exe , ZepMon , aurora.exe , ;2x(V]@BMD , Tlji7Mk , urllogic , KavSvc , 69.59.186.63 , 209.66.67.134 , 66.63.167.97 , 66.63.167.77 , abetterinternet.com , 8B!7F\(T , testpopup , web-nex , yourkey , winsync , rec2_run , WinShutDown , ad-w-a-r-e.com , WSUD , Call (RPC) Help , lightspeedsarch , NIWU.UWIN , UpackByDwing , MZKERNEL32.DLL , UPX0 , nspack$ , Win32 only! , Thawte Consulting , USERTRUST , CNNIC , -> %UserDocuments%\Ejecutables\WinPFind3u\patterns.txt -> [Ver = | Size = 510 bytes | Modified Date = 13/12/2006 08:30:30 p.m. | Attr = ]
PEC2 , PECompact2 , -> %UserDocuments%\Ejecutables\WinPFind3u\WinPFind3U.exe -> Oldtimer Tools [Ver = 1.0.16.0 | Size = 308736 bytes | Modified Date = 07/02/2007 08:23:44 p.m. | Attr = ]
@Alternate Data Stream - 26 bytes -> %UserDocuments%\Etrok\discovery_full1119.exe:Zone.Identifier ->
File scan skipped for file %UserDocuments%\Etrok\discovery_full1119.exe -> File size too big (988033196 bytes) ->
Thawte Consulting , USERTRUST , -> %UserDocuments%\Firefox Setup 2.0\nonlocalized\nssckbi.dll -> Mozilla Foundation [Ver = 1.62 | Size = 254059 bytes | Modified Date = 11/10/2006 04:05:04 a.m. | Attr = ]
@Alternate Data Stream - 0 bytes -> %UserDocuments%\Firefox Setup 2.0\nonlocalized\res\Thumbs.db:encryptable ->
UPX! , UPX0 , -> %UserDocuments%\Jessan\a\buahaha\Notepad++\nppshellext.dll -> Notepad++ team [Ver = 0.1.0.0 | Size = 14848 bytes | Modified Date = 02/01/2006 03:58:38 a.m. | Attr = ]
UPX! , UPX0 , Thawte Consulting , -> %UserDocuments%\Jessan\a\Javascript\Firefox Setup 2.0.exe -> Mozilla [Ver = 4.42 | Size = 5693240 bytes | Modified Date = 23/11/2006 02:07:14 p.m. | Attr = ]
UPX0 , -> %UserDocuments%\Mago De Oz\Mago De Oz - Estrella Fugaz.mp3 -> [Ver = | Size = 5013464 bytes | Modified Date = 01/12/2006 05:22:52 p.m. | Attr = ]
@Alternate Data Stream - 0 bytes -> %UserDocuments%\Mago De Oz\Thumbs.db:encryptable ->
@Alternate Data Stream - 26 bytes -> %UserDocuments%\Mama\Felicidades.ppt:Zone.Identifier ->
@Alternate Data Stream - 0 bytes -> %UserDocuments%\Mama\Thumbs.db:encryptable ->
@Alternate Data Stream - 26 bytes -> %UserDocuments%\Mama\TRANSPORTEANARAMIREZ1condibujo.xls:Zone.Identifier ->
@Alternate Data Stream - 26 bytes -> %UserDocuments%\Mis archivos recibidos\camera_19691.asf:Zone.Identifier ->
@Alternate Data Stream - 0 bytes -> %UserDocuments%\Mis archivos recibidos\Thumbs.db:encryptable ->
WSUD , -> %UserDocuments%\Mis escaneos\2006-10 (Oct).zip -> [Ver = | Size = 16192016 bytes | Modified Date = 06/10/2006 11:34:50 p.m. | Attr = ]
@Alternate Data Stream - 0 bytes -> %UserDocuments%\Mis escaneos\2006-09 (Sep)\Thumbs.db:encryptable ->
@Alternate Data Stream - 0 bytes -> %UserDocuments%\Mis imágenes\Thumbs.db:encryptable ->
@Alternate Data Stream - 160 bytes -> %UserDocuments%\Mis vídeos\Alien Ant Farm-Smooth Criminal.mpg:SummaryInformation ->
@Alternate Data Stream - 0 bytes -> %UserDocuments%\Mis vídeos\Alien Ant Farm-Smooth Criminal.mpg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} ->
@Alternate Data Stream - 152 bytes -> %UserDocuments%\Mis vídeos\Black Eyed Peas - Pump It.mpg:SummaryInformation ->
@Alternate Data Stream - 0 bytes -> %UserDocuments%\Mis vídeos\Black Eyed Peas - Pump It.mpg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} ->
@Alternate Data Stream - 128 bytes -> %UserDocuments%\Mis vídeos\Daft Punk_One more time.mpg:SummaryInformation ->
@Alternate Data Stream - 0 bytes -> %UserDocuments%\Mis vídeos\Daft Punk_One more time.mpg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} ->
@Alternate Data Stream - 160 bytes -> %UserDocuments%\Mis vídeos\Evanescence - Bring Me To Life.mpg:SummaryInformation ->
@Alternate Data Stream - 0 bytes -> %UserDocuments%\Mis vídeos\Evanescence - Bring Me To Life.mpg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} ->
WSUD , -> %UserDocuments%\Mis vídeos\Evanescence - Bring Me To Life.mpg -> [Ver = | Size = 61072396 bytes | Modified Date = 27/01/2007 12:42:44 p.m. | Attr = ]
@Alternate Data Stream - 152 bytes -> %UserDocuments%\Mis vídeos\Fergie - London Bridge.mpg:SummaryInformation ->
@Alternate Data Stream - 0 bytes -> %UserDocuments%\Mis vídeos\Fergie - London Bridge.mpg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} ->
@Alternate Data Stream - 152 bytes -> %UserDocuments%\Mis vídeos\Linkin Park - In The End.mpeg:SummaryInformation ->
@Alternate Data Stream - 0 bytes -> %UserDocuments%\Mis vídeos\Linkin Park - In The End.mpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} ->
@Alternate Data Stream - 152 bytes -> %UserDocuments%\Mis vídeos\Linkin Park - Papercut.mpeg:SummaryInformation ->
@Alternate Data Stream - 0 bytes -> %UserDocuments%\Mis vídeos\Linkin Park - Papercut.mpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} ->
FSG! , -> %UserDocuments%\Mis vídeos\Linkin Park - Papercut.mpeg -> [Ver = | Size = 33730540 bytes | Modified Date = 27/01/2007 12:50:18 p.m. | Attr = ]
@Alternate Data Stream - 176 bytes -> %UserDocuments%\Mis vídeos\Mago de Oz - rata blanca La Leyenda del Hada.mpg:SummaryInformation ->
@Alternate Data Stream - 0 bytes -> %UserDocuments%\Mis vídeos\Mago de Oz - rata blanca La Leyenda del Hada.mpg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} ->
FSG! , -> %UserDocuments%\Mis vídeos\Mago de Oz - rata blanca La Leyenda del Hada.mpg -> [Ver = | Size = 55936356 bytes | Modified Date = 27/01/2007 12:49:26 p.m. | Attr = ]
@Alternate Data Stream - 164 bytes -> %UserDocuments%\Mis vídeos\Mago de Oz- Hoy Toca ser Feliz.mpg:SummaryInformation ->
@Alternate Data Stream - 0 bytes -> %UserDocuments%\Mis vídeos\Mago de Oz- Hoy Toca ser Feliz.mpg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} ->
FSG! , -> %UserDocuments%\Mis vídeos\Marilyn Manson- The Beautiful People live.mpg -> [Ver = | Size = 41539176 bytes | Modified Date = 27/01/2007 03:19:56 p.m. | Attr = ]
@Alternate Data Stream - 168 bytes -> %UserDocuments%\Mis vídeos\Papa Roach - Between Angels And Insects.mpg:SummaryInformation ->
@Alternate Data Stream - 0 bytes -> %UserDocuments%\Mis vídeos\Papa Roach - Between Angels And Insects.mpg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} ->
PEC2 , WSUD , -> %UserDocuments%\Mis vídeos\Papa Roach - Between Angels And Insects.mpg -> [Ver = | Size = 41829676 bytes | Modified Date = 27/01/2007 12:43:38 p.m. | Attr = ]
@Alternate Data Stream - 152 bytes -> %UserDocuments%\Mis vídeos\Papa Roach - Last Resort.mpeg:SummaryInformation ->
@Alternate Data Stream - 0 bytes -> %UserDocuments%\Mis vídeos\Papa Roach - Last Resort.mpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} ->
@Alternate Data Stream - 148 bytes -> %UserDocuments%\Mis vídeos\Papa Roach- Last Resort.mpg:SummaryInformation ->
@Alternate Data Stream - 0 bytes -> %UserDocuments%\Mis vídeos\Papa Roach- Last Resort.mpg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} ->
UPX0 , -> %UserDocuments%\Mis vídeos\Papa Roach- Last Resort.mpg -> [Ver = | Size = 34174980 bytes | Modified Date = 27/01/2007 12:47:36 p.m. | Attr = ]
@Alternate Data Stream - 156 bytes -> %UserDocuments%\Mis vídeos\System of a Down - B.Y.O.B.mpg:SummaryInformation ->
@Alternate Data Stream - 0 bytes -> %UserDocuments%\Mis vídeos\System of a Down - B.Y.O.B.mpg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} ->
@Alternate Data Stream - 160 bytes -> %UserDocuments%\Mis vídeos\System of a Down - Chop Suey.mpeg:SummaryInformation ->
@Alternate Data Stream - 0 bytes -> %UserDocuments%\Mis vídeos\System of a Down - Chop Suey.mpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} ->
@Alternate Data Stream - 160 bytes -> %UserDocuments%\Mis vídeos\System of A Down - Prison Song.MPG:SummaryInformation ->
@Alternate Data Stream - 0 bytes -> %UserDocuments%\Mis vídeos\System of A Down - Prison Song.MPG:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} ->
@Alternate Data Stream - 144 bytes -> %UserDocuments%\Mis vídeos\System of A Down_Sugar.mpeg:SummaryInformation ->
@Alternate Data Stream - 0 bytes -> %UserDocuments%\Mis vídeos\System of A Down_Sugar.mpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} ->
FSG! , -> %UserDocuments%\Mis álbumes\Limp Bizkit - 5 The bleep Song.mp3 -> [Ver = | Size = 3662704 bytes | Modified Date = 20/01/2007 02:29:10 a.m. | Attr = ]
@Alternate Data Stream - 0 bytes -> %UserDocuments%\Mis álbumes\Thumbs.db:encryptable ->
FSG! , -> %UserDocuments%\My Games\Heroes of Might and Magic V\Profiles\DevilNeo\Saves\save_0.sav -> [Ver = | Size = 6328184 bytes | Modified Date = 28/10/2006 02:28:48 p.m. | Attr = ]
@Alternate Data Stream - 0 bytes -> %UserDocuments%\My Music\iMesh\Thumbs.db:encryptable ->
PEC2 , -> %UserDocuments%\Opening\DBZ - BGM.mp3 -> [Ver = | Size = 1457133 bytes | Modified Date = 26/12/2006 02:55:56 a.m. | Attr = ]
@Alternate Data Stream - 0 bytes -> %UserDocuments%\Reales\Reunion de cuando Raul Salio de permiso\Thumbs.db:encryptable ->
@Alternate Data Stream - 0 bytes -> %UserDocuments%\Sara\Thumbs.db:encryptable ->
FSG! , -> %UserDocuments%\TODAS LAS MUSIC\Evanescence - Call Me When Your're Sober.mp3 -> [Ver = | Size = 5523413 bytes | Modified Date = 11/11/2006 11:37:16 a.m. | Attr = ]
PEC2 , -> %UserDocuments%\TODAS LAS MUSIC\Evanescence - Everybodys Fool.mp3 -> [Ver = | Size = 4706149 bytes | Modified Date = 24/08/2006 07:22:42 a.m. | Attr = ]
PEC2 , -> %UserDocuments%\TODAS LAS MUSIC\Korn - Blind.wma -> [Ver = | Size = 4087332 bytes | Modified Date = 10/12/2006 09:00:34 p.m. | Attr = ]
WSUD , -> %UserDocuments%\TODAS LAS MUSIC\Linkin Park - Pushing Me Away 1.mp3 -> [Ver = | Size = 4596435 bytes | Modified Date = 25/08/2006 06:50:18 a.m. | Attr = ]
UPX! , -> %UserDocuments%\TODAS LAS MUSIC\Rammstein - Ohne Dich.wma -> [Ver = | Size = 6573778 bytes | Modified Date = 24/08/2006 07:46:14 a.m. | Attr = ]
FSG! , -> %UserDocuments%\TODAS LAS MUSIC\Simple Plan -Shut Up.mp3 -> [Ver = | Size = 4358237 bytes | Modified Date = 24/08/2006 12:23:46 a.m. | Attr = ]
UPX! , -> %UserDocuments%\TODAS LAS MUSIC\System of a Down - Sad Statue.wma -> [Ver = | Size = 3334406 bytes | Modified Date = 24/08/2006 07:22:58 a.m. | Attr = ]
UPX0 , -> %UserDocuments%\TODAS LAS MUSIC\System of a Down - Toxicity.mp3 -> [Ver = | Size = 3475051 bytes | Modified Date = 24/08/2006 07:22:32 a.m. | Attr = ]
UPX! , -> %UserDocuments%\TODAS LAS MUSIC\Tatu - All About Us.mp3 -> [Ver = | Size = 7025405 bytes | Modified Date = 24/08/2006 07:22:32 a.m. | Attr = ]
UPX0 , -> %UserDocuments%\TODAS LAS MUSIC\The Offprings - get a job.mp3 -> [Ver = | Size = 3436886 bytes | Modified Date = 10/12/2006 09:00:36 p.m. | Attr = ]
@Alternate Data Stream - 0 bytes -> %UserDocuments%\TODAS LAS MUSIC\Thumbs.db:encryptable ->
@Alternate Data Stream - 26 bytes -> %UserDocuments%\Todo Messenger\MsgPlusLive-401.exe:Zone.Identifier ->
@Alternate Data Stream - 26 bytes -> %UserDocuments%\Todo Messenger\MSN Messenger PowerPlus Live 8.1.zip:Zone.Identifier ->
@Alternate Data Stream - 26 bytes -> %UserDocuments%\UCV\Introduccion a la Informatica Conceptos básicos TGS.ppt:Zone.Identifier ->
@Alternate Data Stream - 26 bytes -> %UserDocuments%\UCV\Introduccion a la Informatica practica1.doc:Zone.Identifier ->
@Alternate Data Stream - 26 bytes -> %UserDocuments%\UCV\Introduccion a la informatica practica3.doc:Zone.Identifier ->
@Alternate Data Stream - 26 bytes -> %UserDocuments%\UCV\Introduccion a la informatica practica4.doc:Zone.Identifier ->
@Alternate Data Stream - 26 bytes -> %UserDocuments%\UCV\JAVASCRIPT.doc:Zone.Identifier ->
@Alternate Data Stream - 26 bytes -> %UserDocuments%\UCV\parcial1-EjemplosVariosSEm.doc:Zone.Identifier ->
@Alternate Data Stream - 26 bytes -> %UserDocuments%\UCV\proyecto1.pdf:Zone.Identifier ->
@Alternate Data Stream - 26 bytes -> %UserDocuments%\UCV\QUIZ1.doc:Zone.Identifier ->
@Alternate Data Stream - 26 bytes -> %UserDocuments%\UCV\Tema1 - IntroduccionProgramacion.doc:Zone.Identifier ->
@Alternate Data Stream - 26 bytes -> %UserDocuments%\UCV\Tema2 y 3 - Tipos y Acciones Elementales.doc:Zone.Identifier ->
@Alternate Data Stream - 26 bytes -> %UserDocuments%\UCV\Tema4 - Estructuras Basicas Control.doc:Zone.Identifier ->
@Alternate Data Stream - 26 bytes -> %UserDocuments%\UCV\Tema5 - Estructuras Iterativas.doc:Zone.Identifier ->
@Alternate Data Stream - 0 bytes -> %UserDocuments%\UCV\Thumbs.db:encryptable ->
@Alternate Data Stream - 26 bytes -> %UserDocuments%\UCV\hTML\js_caja_texto_dinamica.zip:Zone.Identifier ->
@Alternate Data Stream - 26 bytes -> %UserDocuments%\UCV\hTML\js_cambia_color.zip:Zone.Identifier ->
@Alternate Data Stream - 26 bytes -> %UserDocuments%\UCV\hTML\js_colores_scroll.zip:Zone.Identifier ->
@Alternate Data Stream - 26 bytes -> %UserDocuments%\UCV\hTML\js_contraweb.zip:Zone.Identifier ->
@Alternate Data Stream - 26 bytes -> %UserDocuments%\UCV\hTML\js_paleta_color.zip:Zone.Identifier ->
@Alternate Data Stream - 26 bytes -> %UserDocuments%\UCV\Java\ground40.jpg:Zone.Identifier ->
@Alternate Data Stream - 26 bytes -> %UserDocuments%\UCV\Java\Jareth.java:Zone.Identifier ->
@Alternate Data Stream - 26 bytes -> %UserDocuments%\UCV\Java\Jareth40.jpg:Zone.Identifier ->
@Alternate Data Stream - 26 bytes -> %UserDocuments%\UCV\Java\mapa.txt:Zone.Identifier ->
@Alternate Data Stream - 0 bytes -> %UserDocuments%\UCV\Java\Thumbs.db:encryptable ->
@Alternate Data Stream - 26 bytes -> %UserDocuments%\UCV\Java\wall40.jpg:Zone.Identifier ->
UPX! , UPX0 , Thawte Consulting , -> %UserDocuments%\UCV\Javascript\Firefox Setup 2.0.exe -> Mozilla [Ver = 4.42 | Size = 5693240 bytes | Modified Date = 23/11/2006 02:07:14 p.m. | Attr = R ]
UPX! , UPX0 , -> %UserDocuments%\UCV\Notepad++\nppshellext.dll -> Notepad++ team [Ver = 0.1.0.0 | Size = 14848 bytes | Modified Date = 02/01/2006 03:58:38 a.m. | Attr = ]
@Alternate Data Stream - 0 bytes -> %UserDocuments%\UCV\Notepad++\Thumbs.db:encryptable ->
WSUD , -> %UserDocuments%\Videos\System of a Down - B.Y.O.B.amv -> [Ver = | Size = 7555555 bytes | Modified Date = 10/12/2006 07:20:44 p.m. | Attr = ]
@Alternate Data Stream - 0 bytes -> %UserDocuments%\Videos\Thumbs.db:encryptable ->
PEC2 , -> %UserDocuments%\Visual Studio 2005\Projects\ProyectodeAlgoritmo\ProyectodeAlgoritmo.ncb -> [Ver = | Size = 8293376 bytes | Modified Date = 26/11/2006 11:56:08 p.m. | Attr = ]
PEC2 , -> %UserDocuments%\Visual Studio 2005\Projects\ProyectodeAlgoritmo\ProyectodeAlgoritmo\Debug\ProyectodeAlgoritmo.pch -> [Ver = | Size = 9961472 bytes | Modified Date = 26/11/2006 11:52:38 p.m. | Attr = ]
PEC2 , -> %UserDocuments%\Visual Studio 2005\Projects\ProyectodeAlgoritmo\ProyectodeAlgoritmo\Debug\vc80.pdb -> [Ver = | Size = 815104 bytes | Modified Date = 26/11/2006 11:55:04 p.m. | Attr = ]
qoologic , SAHAgent , -> %UserAppData%\Lavasoft\Ad-Aware\description.ini -> [Ver = | Size = 130746 bytes | Modified Date = 03/02/2007 02:47:54 p.m. | Attr = ]
Thawte Consulting , -> %UserAppData%\Microsoft\CryptnetUrlCache\Content\486CC6AFD08942336C61FCD401C4A1D1 -> [Ver = | Size = 35891 bytes | Modified Date = 03/02/2007 03:58:04 p.m. | Attr = S]
Thawte Consulting , -> %UserAppData%\Microsoft\CryptnetUrlCache\Content\74BFD122C0875EC75DBE5C6DB4C59019 -> [Ver = | Size = 337101 bytes | Modified Date = 03/02/2007 03:58:04 p.m. | Attr = S]
PEC2 , WSUD , -> %UserAppData%\Mozilla\Firefox\Profiles\omwwgduz.default\urlclassifier2.sqlite -> [Ver = | Size = 2324480 bytes | Modified Date = 28/12/2006 12:09:32 a.m. | Attr = ]
File scan skipped for file %LocalAppData%\Google\Google Desktop Search\rpm.cf1 -> File size too big (356515840 bytes) ->
PEC2 , -> %LocalAppData%\Microsoft\Media Player\Transcoded Files Cache\1n832E.tmp -> [Ver = | Size = 5170155 bytes | Modified Date = 21/11/2006 09:53:20 p.m. | Attr = ]
WSUD , -> %LocalAppData%\Microsoft\Media Player\Transcoded Files Cache\6dz995.tmp -> [Ver = | Size = 3625213 bytes | Modified Date = 10/12/2006 09:39:02 p.m. | Attr = ]
PEC2 , -> %LocalAppData%\Microsoft\Media Player\Transcoded Files Cache\6rf999.tmp -> [Ver = | Size = 3393939 bytes | Modified Date = 10/12/2006 09:40:24 p.m. | Attr = ]
PEC2 , -> %LocalAppData%\Microsoft\Media Player\Transcoded Files Cache\cgg99F.tmp -> [Ver = | Size = 6946287 bytes | Modified Date = 10/12/2006 09:43:00 p.m. | Attr = ]
PEC2 , -> %LocalAppData%\Microsoft\Media Player\Transcoded Files Cache\d3i326.tmp -> [Ver = | Size = 3700231 bytes | Modified Date = 21/11/2006 09:52:12 p.m. | Attr = ]
PEC2 , -> %LocalAppData%\Microsoft\Media Player\Transcoded Files Cache\f2u302.tmp -> [Ver = | Size = 4341317 bytes | Modified Date = 21/11/2006 09:48:06 p.m. | Attr = ]
PEC2 , -> %LocalAppData%\Microsoft\Media Player\Transcoded Files Cache\fuw137.tmp -> [Ver = | Size = 3610307 bytes | Modified Date = 05/12/2006 07:09:06 p.m. | Attr = ]
PEC2 , -> %LocalAppData%\Microsoft\Media Player\Transcoded Files Cache\mz0329.tmp -> [Ver = | Size = 5483937 bytes | Modified Date = 21/11/2006 09:52:36 p.m. | Attr = ]
PEC2 , -> %LocalAppData%\Microsoft\Media Player\Transcoded Files Cache\q3w7D.tmp -> [Ver = | Size = 3610307 bytes | Modified Date = 05/11/2006 11:46:34 p.m. | Attr = ]
PEC2 , -> %CommonProgramFiles%\Business Objects\2.7\Bin\undomanager.dll -> Business Objects [Ver = 10.2.0.1093 | Size = 175224 bytes | Modified Date = 09/12/2005 12:17:50 p.m. | Attr = ]
UPX0 , -> %CommonProgramFiles%\Microsoft Shared\VBA\VBA6\3082\VBLR6.CHM -> [Ver = | Size = 1059364 bytes | Modified Date = 25/01/1999 12:02:26 p.m. | Attr = ]
PEC2 , -> %System32%\dfrg.msc -> [Ver = | Size = 41129 bytes | Modified Date = 24/08/2001 07:00:00 a.m. | Attr = ]
PEC2 , -> %System32%\MFC42.PDB -> [Ver = | Size = 8015872 bytes | Modified Date = 18/06/1998 | Attr = ]
PEC2 , -> %System32%\MFC42D.PDB -> [Ver = | Size = 3944448 bytes | Modified Date = 18/06/1998 | Attr = ]
PEC2 , -> %System32%\MFC42U.PDB -> [Ver = | Size = 7991296 bytes | Modified Date = 18/06/1998 | Attr = ]
PEC2 , -> %System32%\MFC42UD.PDB -> [Ver = | Size = 3952640 bytes | Modified Date = 18/06/1998 | Attr = ]
PEC2 , -> %System32%\MFCD42D.PDB -> [Ver = | Size = 2052096 bytes | Modified Date = 18/06/1998 | Attr = ]
PEC2 , -> %System32%\MFCD42UD.PDB -> [Ver = | Size = 2068480 bytes | Modified Date = 18/06/1998 | Attr = ]
PEC2 , -> %System32%\MFCN42D.PDB -> [Ver = | Size = 1454080 bytes | Modified Date = 18/06/1998 | Attr = ]
PEC2 , -> %System32%\MFCN42UD.PDB -> [Ver = | Size = 1462272 bytes | Modified Date = 18/06/1998 | Attr = ]
PEC2 , -> %System32%\MFCO42D.PDB -> [Ver = | Size = 4395008 bytes | Modified Date = 18/06/1998 | Attr = ]
PEC2 , -> %System32%\MFCO42UD.PDB -> [Ver = | Size = 4435968 bytes | Modified Date = 18/06/1998 | Attr = ]
WSUD , -> %System32%\nvoglnt.dll -> NVIDIA Corporation [Ver = 6.14.10.7806 | Size = 5140480 bytes | Modified Date = 03/11/2005 04:11:40 a.m. | Attr = ]
Thawte Consulting , -> %System32%\pxcpya64.exe -> Sonic Solutions [Ver = 1.00.35a | Size = 63144 bytes | Modified Date = 24/08/2006 11:47:00 p.m. | Attr = ]
Thawte Consulting , -> %System32%\pxhpinst.exe -> Sonic Solutions [Ver = 3.00.33a | Size = 67240 bytes | Modified Date = 24/08/2006 11:47:00 p.m. | Attr = ]
Thawte Consulting , -> %System32%\pxinsa64.exe -> Sonic Solutions [Ver = 3.00.33a | Size = 62632 bytes | Modified Date = 24/08/2006 11:47:00 p.m. | Attr = ]
Thawte Consulting , -> %System32%\pxinsi64.exe -> Sonic Solutions [Ver = 3.00.33a | Size = 115880 bytes | Modified Date = 24/08/2006 11:47:00 p.m. | Attr = ]
winsync , -> %System32%\wbdbase.deu -> [Ver = | Size = 1309184 bytes | Modified Date = 24/08/2001 07:00:00 a.m. | Attr = ]
WSUD , UPX0 , -> %System32%\dllcache\hwxjpn.dll -> [Ver = | Size = 13463552 bytes | Modified Date = 24/08/2001 07:00:00 a.m. | Attr = ]
UPX! , aspack , -> %System32%\drivers\vsapint.sys -> Trend Micro Inc. [Ver = 8.320-1004 | Size = 1052472 bytes | Modified Date = 29/12/2006 02:53:52 p.m. | Attr = ]

< End of report >

#7 OldTimer

OldTimer

    Malware Expert


  • Members
  • 11,092 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:North Carolina
  • Local time:10:19 AM

Posted 25 February 2007 - 08:30 AM

Hi Jessanramirez. I just need the beginning now. Start at the beginning of the file and post everything up to [Win32 Services - Non-Microsoft Only].

Cheers.

OT
I do not respond to PM's requesting help. That's what the forums are here for. Please use them so that others may benefit from your questions and the responses you receive.
OldTimer

Posted Image




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users