Don't like ads? PRO users don't see any ads ;-)
Public Pastes
Guest

Untitled

By: a guest on Aug 12th, 2012  |  syntax: None  |  size: 183.65 KB  |  hits: 12  |  expires: Never
download  |  raw  |  embed  |  report abuse  |  print
Text below is selected. Please press Ctrl+C to copy to your clipboard. (⌘+C on Mac)
  1. OTL logfile created on: 8/10/2012 7:52:52 PM - Run 1
  2. OTL by OldTimer - Version 3.2.56.0     Folder = C:\Documents and Settings\Mark Sortzi\Desktop
  3. Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
  4. Internet Explorer (Version = 7.0.5730.13)
  5. Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
  6.  
  7. 1011.88 Mb Total Physical Memory | 453.96 Mb Available Physical Memory | 44.86% Memory free
  8. 2.37 Gb Paging File | 1.87 Gb Available in Paging File | 78.86% Paging File free
  9. Paging file location(s): C:\pagefile.sys 1512 3024 [binary data]
  10.  
  11. %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
  12. Drive C: | 143.05 Gb Total Space | 99.56 Gb Free Space | 69.60% Space Free | Partition Type: NTFS
  13.  
  14. Computer Name: ACER-925BE1910B | User Name: Mark Sortzi | Logged in as Administrator.
  15. Boot Mode: Normal | Scan Mode: All users
  16. Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 90 Days
  17.  
  18. [color=#E56717]========== Processes (SafeList) ==========[/color]
  19.  
  20. PRC - [2012/08/10 19:04:22 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Mark Sortzi\Desktop\OTL.scr
  21. PRC - [2012/08/08 04:38:36 | 000,348,664 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
  22. PRC - [2012/07/26 18:53:36 | 000,913,888 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
  23. PRC - [2012/06/20 13:18:08 | 001,568,976 | ---- | M] (Ask) -- C:\Program Files\Ask.com\Updater\Updater.exe
  24. PRC - [2012/05/02 01:42:31 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe
  25. PRC - [2012/05/02 00:55:24 | 000,465,360 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files\Avira\AntiVir Desktop\avwebgrd.exe
  26. PRC - [2012/05/02 00:34:37 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe
  27. PRC - [2012/04/24 02:11:59 | 000,080,336 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
  28. PRC - [2012/04/04 18:47:32 | 000,161,664 | ---- | M] (Oracle Corporation) -- C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jqs.exe
  29. PRC - [2012/01/21 01:22:41 | 000,143,240 | ---- | M] (Ask.com) -- c:\Program Files\Avira\AntiVir Desktop\apnstub.exe
  30. PRC - [2011/06/23 11:37:44 | 000,291,088 | ---- | M] (Data Perceptions / PowerProgrammer) -- C:\WINDOWS\system32\WebUpdateSvc4.exe
  31. PRC - [2009/08/24 18:52:30 | 000,082,432 | ---- | M] () -- C:\Program Files\Novatel Wireless\Novacore\Server\NvtlSrvr.exe
  32. PRC - [2009/06/26 18:21:00 | 000,757,248 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\vVX3000.exe
  33. PRC - [2009/02/26 20:07:48 | 000,212,992 | ---- | M] (Realtek Semiconductor Corp.) -- C:\Documents and Settings\Mark Sortzi\Local Settings\Temp\RtkBtMnt.exe
  34. PRC - [2009/02/19 21:52:20 | 000,817,672 | ---- | M] (Dritek System Inc.) -- C:\Program Files\Launch Manager\LManager.exe
  35. PRC - [2008/11/10 03:43:44 | 000,345,336 | ---- | M] (QUALCOMM, Inc.) -- C:\QUALCOMM\QDLService\QDLService.exe
  36. PRC - [2008/09/12 18:01:28 | 000,354,840 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe
  37. PRC - [2008/09/12 18:01:24 | 000,182,808 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
  38. PRC - [2008/04/14 08:00:00 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
  39. PRC - [2002/04/11 04:19:36 | 000,077,824 | ---- | M] () -- C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe
  40. PRC - [2002/04/11 04:19:34 | 000,069,632 | ---- | M] (Hewlett-Packard) -- C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
  41.  
  42.  
  43. [color=#E56717]========== Modules (No Company Name) ==========[/color]
  44.  
  45. MOD - [2012/07/26 18:53:36 | 002,003,424 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll
  46. MOD - [2012/04/16 23:11:02 | 000,398,288 | ---- | M] () -- C:\Program Files\Avira\AntiVir Desktop\sqlite3.dll
  47. MOD - [2012/02/20 21:29:04 | 000,087,912 | ---- | M] () -- C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
  48. MOD - [2012/02/20 21:28:42 | 001,242,472 | ---- | M] () -- C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
  49. MOD - [2009/08/24 18:52:30 | 000,082,432 | ---- | M] () -- C:\Program Files\Novatel Wireless\Novacore\Server\NvtlSrvr.exe
  50. MOD - [2008/06/20 12:02:47 | 000,245,248 | ---- | M] () -- \\?\globalroot\systemroot\system32\mswsock.dll
  51. MOD - [2008/06/20 12:02:47 | 000,245,248 | ---- | M] () -- \\.\globalroot\systemroot\system32\mswsock.dll
  52. MOD - [2002/04/11 04:19:42 | 000,024,576 | ---- | M] () -- C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnfps.dll
  53. MOD - [2002/04/11 04:19:36 | 000,077,824 | ---- | M] () -- C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe
  54.  
  55.  
  56. [color=#E56717]========== Win32 Services (SafeList) ==========[/color]
  57.  
  58. SRV - File not found [On_Demand | Stopped] -- %SystemRoot%\System32\appmgmts.dll -- (AppMgmt)
  59. SRV - [2012/08/09 20:35:11 | 000,250,056 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
  60. SRV - [2012/07/26 18:53:36 | 000,113,120 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
  61. SRV - [2012/05/02 01:42:31 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
  62. SRV - [2012/05/02 00:55:24 | 000,465,360 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\avwebgrd.exe -- (AntiVirWebService)
  63. SRV - [2012/05/02 00:34:37 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
  64. SRV - [2012/04/04 18:47:32 | 000,161,664 | ---- | M] (Oracle Corporation) [Auto | Running] -- C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jqs.exe -- (JavaQuickStarterService)
  65. SRV - [2011/06/23 11:37:44 | 000,291,088 | ---- | M] (Data Perceptions / PowerProgrammer) [Auto | Running] -- C:\WINDOWS\system32\WebUpdateSvc4.exe -- (WebUpdate4)
  66. SRV - [2009/08/24 18:52:30 | 000,082,432 | ---- | M] () [Auto | Running] -- C:\Program Files\Novatel Wireless\Novacore\Server\NvtlSrvr.exe -- (NvtlService)
  67. SRV - [2008/11/10 03:43:44 | 000,345,336 | ---- | M] (QUALCOMM, Inc.) [Auto | Running] -- C:\QUALCOMM\QDLService\QDLService.exe -- (QDLService)
  68. SRV - [2008/09/12 18:01:28 | 000,354,840 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe -- (IAANTMON)
  69.  
  70.  
  71. [color=#E56717]========== Driver Services (SafeList) ==========[/color]
  72.  
  73. DRV - File not found [Kernel | On_Demand | Stopped] --  -- (WDICA)
  74. DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\Rts5161ccid.sys -- (USBCCID)
  75. DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\Rts516xIR.sys -- (Rts516xIR)
  76. DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDRFRAME)
  77. DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDRELI)
  78. DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDFRAME)
  79. DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDCOMP)
  80. DRV - File not found [Kernel | System | Stopped] --  -- (PCIDump)
  81. DRV - File not found [Kernel | System | Stopped] --  -- (lbrtfdc)
  82. DRV - File not found [Kernel | On_Demand | Stopped] -- c:\acernb\int15.sys -- (int15.sys)
  83. DRV - File not found [Kernel | System | Stopped] --  -- (Changer)
  84. DRV - [2012/04/27 10:20:04 | 000,137,928 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avipbb.sys -- (avipbb)
  85. DRV - [2012/04/25 00:32:27 | 000,083,392 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\avgntflt.sys -- (avgntflt)
  86. DRV - [2012/04/16 21:18:01 | 000,036,000 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avkmgr.sys -- (avkmgr)
  87. DRV - [2012/03/14 22:07:52 | 000,035,088 | ---- | M] (CACE Technologies, Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\npf.sys -- (npf)
  88. DRV - [2011/05/28 20:21:22 | 000,082,380 | ---- | M] (Oak Technology Inc.) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\AFS2K.SYS -- (AFS2K)
  89. DRV - [2011/03/18 13:46:26 | 000,061,704 | ---- | M] (FTDI Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ftdibus.sys -- (FTDIBUS)
  90. DRV - [2010/06/17 15:14:27 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\ssmdrv.sys -- (ssmdrv)
  91. DRV - [2009/08/24 18:53:24 | 000,027,072 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\PCASp50.sys -- (PCASp50)
  92. DRV - [2009/06/26 18:21:02 | 001,956,352 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\VX3000.sys -- (VX3000)
  93. DRV - [2009/05/15 14:34:30 | 000,174,720 | ---- | M] (Novatel Wireless Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nwvmser2.sys -- (NWVMPort2)
  94. DRV - [2009/05/15 14:34:30 | 000,174,720 | ---- | M] (Novatel Wireless Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nwvmser.sys -- (NWVMPort)
  95. DRV - [2009/05/15 14:34:30 | 000,174,720 | ---- | M] (Novatel Wireless Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nwvmmdm.sys -- (NWVMModem)
  96. DRV - [2009/02/23 23:22:48 | 000,038,400 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\l1e51x86.sys -- (L1e)
  97. DRV - [2009/02/03 06:53:48 | 000,112,480 | ---- | M] (JMicron Technology Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\jmcr.sys -- (JMCR)
  98. DRV - [2009/02/03 02:42:30 | 000,162,816 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\RtsUStor.sys -- (RSUSBSTOR)
  99. DRV - [2009/01/20 06:53:06 | 005,027,840 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService)
  100. DRV - [2008/12/30 08:02:32 | 001,346,464 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\athw.sys -- (AR5416)
  101. DRV - [2008/11/10 03:37:34 | 000,115,200 | ---- | M] (QUALCOMM Incorporated) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\qcusbnetGAD.sys -- (qcusbnetGAD)
  102. DRV - [2008/11/10 03:37:34 | 000,103,680 | ---- | M] (QUALCOMM Incorporated) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\qcusbserGAD.sys -- (qcusbserGAD)
  103. DRV - [2008/11/10 03:37:34 | 000,005,248 | ---- | M] (QUALCOMM Incorporated) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\qcfilterGAD.sys -- (QCFilterGAD)
  104. DRV - [2007/10/01 18:59:46 | 001,769,984 | ---- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\snp2uvc.sys -- (SNP2UVC)
  105. DRV - [2007/06/27 02:04:14 | 000,071,488 | ---- | M] (FTDI Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ftser2k.sys -- (FTSER2K)
  106.  
  107.  
  108. [color=#E56717]========== Standard Registry (All) ==========[/color]
  109.  
  110.  
  111. [color=#E56717]========== Internet Explorer ==========[/color]
  112.  
  113. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACAW&l=0409&s=0&o=xph&d=1209&m=ao531h
  114. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
  115. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL =  [binary data]
  116. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
  117. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
  118. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
  119. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
  120. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://homepage.acer.com/rdr.aspx?b=ACAW&l=0409&s=0&o=xph&d=1209&m=ao531h
  121. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm
  122. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm
  123. IE - HKLM\..\SearchScopes,DefaultScope = {67A2568C-7A0A-4EED-AECC-B5405DE63B64}
  124. IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
  125. IE - HKLM\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: "URL" = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW
  126.  
  127.  
  128. IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  129.  
  130. IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  131.  
  132.  
  133.  
  134. IE - HKU\S-1-5-21-3562983710-2502462651-2304659736-1005\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACAW&l=0409&s=0&o=xph&d=1209&m=ao531h
  135. IE - HKU\S-1-5-21-3562983710-2502462651-2304659736-1005\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm
  136. IE - HKU\S-1-5-21-3562983710-2502462651-2304659736-1005\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
  137. IE - HKU\S-1-5-21-3562983710-2502462651-2304659736-1005\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://homepage.acer.com/rdr.aspx?b=ACAW&l=0409&s=0&o=xph&d=1209&m=ao531h
  138. IE - HKU\S-1-5-21-3562983710-2502462651-2304659736-1005\..\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
  139. IE - HKU\S-1-5-21-3562983710-2502462651-2304659736-1005\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\WINDOWS\system32\ieframe.dll (Microsoft Corporation)
  140. IE - HKU\S-1-5-21-3562983710-2502462651-2304659736-1005\..\SearchScopes,DefaultScope = {171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}
  141. IE - HKU\S-1-5-21-3562983710-2502462651-2304659736-1005\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
  142. IE - HKU\S-1-5-21-3562983710-2502462651-2304659736-1005\..\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}: "URL" = http://websearch.ask.com/redirect?client=ie&tb=AVR-3&o=APN10400&src=crm&q={searchTerms}&locale=en_US&apn_ptnrs=^ABY&apn_dtid=^YYYYYY^YY^US&apn_uid=10b94e36-4c0a-443a-aaa1-e515c870e60b&apn_sauid=2F494263-45CD-4482-BF7F-D21F8A453E14
  143. IE - HKU\S-1-5-21-3562983710-2502462651-2304659736-1005\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: "URL" = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW_enUS359
  144. IE - HKU\S-1-5-21-3562983710-2502462651-2304659736-1005\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  145.  
  146. [color=#E56717]========== FireFox ==========[/color]
  147.  
  148. FF - prefs.js..browser.search.defaultengine: "Ask.com"
  149. FF - prefs.js..browser.search.defaultenginename: "Ask.com"
  150. FF - prefs.js..browser.search.order.1: "Ask.com"
  151. FF - prefs.js..browser.search.selectedEngine: "Ask.com"
  152. FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA}:6.0.19
  153. FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
  154. FF - prefs.js..extensions.enabledItems: {20a82645-c095-46ed-80e3-08825760534b}:1.2.1
  155. FF - prefs.js..extensions.enabledItems: {B13721C7-F507-4982-B2E5-502A71474FED}:3.3.0.3971
  156. FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22
  157. FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
  158. FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA}:6.0.25
  159. FF - prefs.js..extensions.enabledItems: {1E73965B-8B48-48be-9C8D-68B920ABC1C4}:12.0.0.1865
  160. FF - prefs.js..extensions.enabledItems: {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.25
  161. FF - prefs.js..keyword.URL: "http://websearch.ask.com/redirect?client=ff&src=kw&tb=AVR-3&o=APN10400&locale=en_US&apn_uid=10b94e36-4c0a-443a-aaa1-e515c870e60b&apn_ptnrs=^ABY&apn_sauid=2F494263-45CD-4482-BF7F-D21F8A453E14&apn_dtid=^YYYYYY^YY^US&&q="
  162. FF - user.js - File not found
  163.  
  164. FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  File not found
  165. FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
  166. FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.4.1: C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation)
  167. FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.4.1: C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation)
  168. FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
  169. FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8051.1204: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
  170. FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
  171. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.)
  172. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.)
  173. FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
  174.  
  175. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{20a82645-c095-46ed-80e3-08825760534b}: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ [2009/12/31 11:27:52 | 000,000,000 | ---D | M]
  176. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012/07/26 18:53:38 | 000,000,000 | ---D | M]
  177. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012/06/03 08:53:04 | 000,000,000 | ---D | M]
  178.  
  179. [2009/12/26 17:53:42 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Mark Sortzi\Application Data\Mozilla\Extensions
  180. [2009/12/26 17:53:42 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Mark Sortzi\Application Data\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
  181. [2012/05/27 17:59:55 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Mark Sortzi\Application Data\Mozilla\Firefox\Profiles\1m5d0tds.default\extensions
  182. [2010/07/31 14:47:24 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\Mark Sortzi\Application Data\Mozilla\Firefox\Profiles\1m5d0tds.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
  183. [2012/06/29 15:37:31 | 000,000,000 | ---D | M] ("Avira SearchFree Toolbar plus Web Protection") -- C:\Documents and Settings\Mark Sortzi\Application Data\Mozilla\Firefox\Profiles\1m5d0tds.default\extensions\toolbar@ask.com
  184. [2012/08/09 19:46:23 | 000,002,585 | ---- | M] () -- C:\Documents and Settings\Mark Sortzi\Application Data\Mozilla\Firefox\Profiles\1m5d0tds.default\searchplugins\askcom.xml
  185. [2011/12/21 20:00:56 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
  186. [2012/07/26 18:53:38 | 000,000,000 | ---D | M] (Default) -- C:\Program Files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
  187. [2009/12/26 18:00:44 | 000,000,000 | ---D | M] (Skype extension for Firefox) -- C:\Program Files\Mozilla Firefox\extensions\{B13721C7-F507-4982-B2E5-502A71474FED}
  188. [2012/07/26 18:53:37 | 000,136,672 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
  189. [2011/04/14 05:08:00 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
  190. [2011/06/07 12:35:34 | 000,103,864 | ---- | M] (Adobe Systems Inc.) -- C:\Program Files\mozilla firefox\plugins\nppdf32.dll
  191. [2012/06/03 08:53:02 | 000,159,744 | ---- | M] (Apple Inc.) -- C:\Program Files\mozilla firefox\plugins\npqtplugin.dll
  192. [2012/06/03 08:53:03 | 000,159,744 | ---- | M] (Apple Inc.) -- C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll
  193. [2012/06/03 08:53:03 | 000,159,744 | ---- | M] (Apple Inc.) -- C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll
  194. [2012/06/03 08:53:03 | 000,159,744 | ---- | M] (Apple Inc.) -- C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll
  195. [2012/06/03 08:53:03 | 000,159,744 | ---- | M] (Apple Inc.) -- C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll
  196. [2012/06/03 08:53:03 | 000,159,744 | ---- | M] (Apple Inc.) -- C:\Program Files\mozilla firefox\plugins\npqtplugin6.dll
  197. [2012/06/03 08:53:03 | 000,159,744 | ---- | M] (Apple Inc.) -- C:\Program Files\mozilla firefox\plugins\npqtplugin7.dll
  198. [2012/07/26 18:53:30 | 000,001,394 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazondotcom.xml
  199. [2012/07/26 18:53:30 | 000,002,252 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml
  200. [2012/07/26 18:53:30 | 000,001,131 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay.xml
  201. [2012/07/26 18:53:30 | 000,003,368 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\google.xml
  202. [2012/07/26 18:53:30 | 000,002,040 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\twitter.xml
  203. [2012/07/26 18:53:30 | 000,001,178 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia.xml
  204. [2012/07/26 18:53:30 | 000,001,096 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo.xml
  205.  
  206. O1 HOSTS File: ([2008/04/14 08:00:00 | 000,000,734 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
  207. O1 - Hosts: 127.0.0.1       localhost
  208. O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
  209. O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
  210. O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll (Oracle Corporation)
  211. O2 - BHO: (Windows Live Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
  212. O2 - BHO: (Avira SearchFree Toolbar plus Web Protection) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
  213. O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll (Oracle Corporation)
  214. O3 - HKLM\..\Toolbar: (Avira SearchFree Toolbar plus Web Protection) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
  215. O3 - HKU\S-1-5-21-3562983710-2502462651-2304659736-1005\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
  216. O3 - HKU\S-1-5-21-3562983710-2502462651-2304659736-1005\..\Toolbar\WebBrowser: (Avira SearchFree Toolbar plus Web Protection) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
  217. O4 - HKLM..\Run: []  File not found
  218. O4 - HKLM..\Run: [Adobe ARM] C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)
  219. O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
  220. O4 - HKLM..\Run: [Alcmtr] C:\WINDOWS\ALCMTR.EXE (Realtek Semiconductor Corp.)
  221. O4 - HKLM..\Run: [ApnUpdater] C:\Program Files\Ask.com\Updater\Updater.exe (Ask)
  222. O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
  223. O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
  224. O4 - HKLM..\Run: [AzMixerSel] C:\Program Files\Realtek\Audio\Drivers\AzMixerSel.exe (Realtek Semiconductor Corp.)
  225. O4 - HKLM..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe (Intel Corporation)
  226. O4 - HKLM..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Intel Corporation)
  227. O4 - HKLM..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe (Intel Corporation)
  228. O4 - HKLM..\Run: [IMJPMIG8.1] C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE (Microsoft Corporation)
  229. O4 - HKLM..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe (Apple Inc.)
  230. O4 - HKLM..\Run: [LManager] C:\Program Files\Launch Manager\LManager.exe (Dritek System Inc.)
  231. O4 - HKLM..\Run: [MSPY2002] C:\WINDOWS\System32\IME\PINTLGNT\ImScInst.exe ()
  232. O4 - HKLM..\Run: [NotificationCenterLauncher] C:\Program Files\Acer\Acer eRecovery Management\NotificationLauncher.exe (Acer)
  233. O4 - HKLM..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe (Intel Corporation)
  234. O4 - HKLM..\Run: [PHIME2002A] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE (Microsoft Corporation)
  235. O4 - HKLM..\Run: [PHIME2002ASync] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE (Microsoft Corporation)
  236. O4 - HKLM..\Run: [PLFSetL] C:\WINDOWS\PLFSetL.exe (sonix)
  237. O4 - HKLM..\Run: [QuickTime Task] C:\Program Files\QuickTime\QTTask.exe (Apple Inc.)
  238. O4 - HKLM..\Run: [RTHDCPL] C:\WINDOWS\RTHDCPL.EXE (Realtek Semiconductor Corp.)
  239. O4 - HKLM..\Run: [Share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe (Hewlett-Packard)
  240. O4 - HKLM..\Run: [snp2uvc] C:\WINDOWS\System32\csnp2uvc.dll ( )
  241. O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files\Common Files\Java\Java Update\jusched.exe (Sun Microsystems, Inc.)
  242. O4 - HKLM..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Synaptics Incorporated)
  243. O4 - HKLM..\Run: [VX3000] C:\WINDOWS\vVX3000.exe (Microsoft Corporation)
  244. O4 - HKU\S-1-5-21-3562983710-2502462651-2304659736-1005..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe (Microsoft Corporation)
  245. O4 - Startup: C:\Documents and Settings\Teri Sortzi\Start Menu\Programs\Startup\OneNote 2007 Screen Clipper and Launcher.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
  246. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
  247. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
  248. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =
  249. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =
  250. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
  251. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
  252. O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
  253. O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
  254. O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
  255. O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
  256. O7 - HKU\S-1-5-21-3562983710-2502462651-2304659736-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
  257. O8 - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation)
  258. O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_7461B1589E8B4FB7.dll/cmsidewiki.html File not found
  259. O9 - Extra Button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
  260. O9 - Extra 'Tools' menuitem : &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
  261. O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
  262. O9 - Extra 'Tools' menuitem : S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
  263. O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)
  264. O9 - Extra 'Tools' menuitem : @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe (Microsoft Corporation)
  265. O9 - Extra Button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation)
  266. O9 - Extra 'Tools' menuitem : Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation)
  267. O10 - NameSpace_Catalog5\Catalog_Entries\000000000001 [] - C:\WINDOWS\System32\mswsock.dll (Microsoft Corporation)
  268. O10 - NameSpace_Catalog5\Catalog_Entries\000000000002 [] - C:\WINDOWS\system32\winrnr.dll (Microsoft Corporation)
  269. O10 - NameSpace_Catalog5\Catalog_Entries\000000000003 [] - C:\WINDOWS\System32\mswsock.dll (Microsoft Corporation)
  270. O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
  271. O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Program Files\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)
  272. O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Program Files\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)
  273. O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
  274. O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
  275. O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
  276. O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
  277. O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
  278. O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
  279. O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
  280. O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
  281. O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
  282. O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
  283. O10 - Protocol_Catalog9\Catalog_Entries\000000000013 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
  284. O10 - Protocol_Catalog9\Catalog_Entries\000000000014 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
  285. O10 - Protocol_Catalog9\Catalog_Entries\000000000015 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
  286. O10 - Protocol_Catalog9\Catalog_Entries\000000000016 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
  287. O10 - Protocol_Catalog9\Catalog_Entries\000000000017 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
  288. O10 - Protocol_Catalog9\Catalog_Entries\000000000018 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
  289. O10 - Protocol_Catalog9\Catalog_Entries\000000000019 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
  290. O10 - Protocol_Catalog9\Catalog_Entries\000000000020 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
  291. O10 - Protocol_Catalog9\Catalog_Entries\000000000021 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
  292. O10 - Protocol_Catalog9\Catalog_Entries\000000000022 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
  293. O10 - Protocol_Catalog9\Catalog_Entries\000000000023 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
  294. O10 - Protocol_Catalog9\Catalog_Entries\000000000024 - C:\Program Files\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)
  295. O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab (Java Plug-in 1.6.0_25)
  296. O16 - DPF: {CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab (Java Plug-in 1.6.0_25)
  297. O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab (Java Plug-in 1.6.0_25)
  298. O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 64.233.217.3 64.233.217.5
  299. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{07ADC216-3C91-4B78-AB4B-73157AD0DC9C}: DhcpNameServer = 64.233.217.3 64.233.217.5
  300. O18 - Protocol\Handler\about {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)
  301. O18 - Protocol\Handler\cdl {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
  302. O18 - Protocol\Handler\dvd {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\WINDOWS\system32\msvidctl.dll (Microsoft Corporation)
  303. O18 - Protocol\Handler\file {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
  304. O18 - Protocol\Handler\ftp {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
  305. O18 - Protocol\Handler\gopher {79eac9e4-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
  306. O18 - Protocol\Handler\http {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
  307. O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
  308. O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
  309. O18 - Protocol\Handler\https {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
  310. O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
  311. O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
  312. O18 - Protocol\Handler\ipp - No CLSID value found
  313. O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
  314. O18 - Protocol\Handler\its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINDOWS\system32\itss.dll (Microsoft Corporation)
  315. O18 - Protocol\Handler\javascript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)
  316. O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8050.1202.dll (Microsoft Corporation)
  317. O18 - Protocol\Handler\local {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
  318. O18 - Protocol\Handler\mailto {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)
  319. O18 - Protocol\Handler\mhtml {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\WINDOWS\system32\inetcomm.dll (Microsoft Corporation)
  320. O18 - Protocol\Handler\mk {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
  321. O18 - Protocol\Handler\msdaipp - No CLSID value found
  322. O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
  323. O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
  324. O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
  325. O18 - Protocol\Handler\ms-its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINDOWS\system32\itss.dll (Microsoft Corporation)
  326. O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - c:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
  327. O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8050.1202.dll (Microsoft Corporation)
  328. O18 - Protocol\Handler\res {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)
  329. O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
  330. O18 - Protocol\Handler\sysimage {76E67A63-06E9-11D2-A840-006008059382} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)
  331. O18 - Protocol\Handler\tv {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\WINDOWS\system32\msvidctl.dll (Microsoft Corporation)
  332. O18 - Protocol\Handler\vbscript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)
  333. O18 - Protocol\Handler\wia {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} - C:\WINDOWS\system32\wiascr.dll (Microsoft Corporation)
  334. O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll (Microsoft Corporation)
  335. O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\WINDOWS\System32\mscoree.dll (Microsoft Corporation)
  336. O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\WINDOWS\System32\mscoree.dll (Microsoft Corporation)
  337. O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\WINDOWS\System32\mscoree.dll (Microsoft Corporation)
  338. O18 - Protocol\Filter\Class Install Handler {32B533BB-EDAE-11d0-BD5A-00AA00B92AF1} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
  339. O18 - Protocol\Filter\deflate {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
  340. O18 - Protocol\Filter\gzip {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
  341. O18 - Protocol\Filter\lzdhtml {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
  342. O18 - Protocol\Filter\text/webviewhtml {733AC4CB-F1A4-11d0-B951-00A0C90312E1} - C:\WINDOWS\system32\shell32.dll (Microsoft Corporation)
  343. O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
  344. O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
  345. O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
  346. O20 - HKLM Winlogon: UIHost - (logonui.exe) - C:\WINDOWS\System32\logonui.exe (Microsoft Corporation)
  347. O20 - HKLM Winlogon: VMApplet - (rundll32 shell32) - C:\WINDOWS\System32\shell32.dll (Microsoft Corporation)
  348. O20 - HKLM Winlogon: VMApplet - (Control_RunDLL "sysdm.cpl") - C:\WINDOWS\System32\sysdm.cpl (Microsoft Corporation)
  349. O20 - Winlogon\Notify\crypt32chain: DllName - (crypt32.dll) - C:\WINDOWS\System32\crypt32.dll (Microsoft Corporation)
  350. O20 - Winlogon\Notify\cryptnet: DllName - (cryptnet.dll) - C:\WINDOWS\System32\cryptnet.dll (Microsoft Corporation)
  351. O20 - Winlogon\Notify\cscdll: DllName - (cscdll.dll) - C:\WINDOWS\System32\cscdll.dll (Microsoft Corporation)
  352. O20 - Winlogon\Notify\dimsntfy: DllName - (%SystemRoot%\System32\dimsntfy.dll) - C:\WINDOWS\system32\dimsntfy.dll (Microsoft Corporation)
  353. O20 - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\WINDOWS\System32\igfxdev.dll (Intel Corporation)
  354. O20 - Winlogon\Notify\ScCertProp: DllName - (wlnotify.dll) - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation)
  355. O20 - Winlogon\Notify\Schedule: DllName - (wlnotify.dll) - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation)
  356. O20 - Winlogon\Notify\sclgntfy: DllName - (sclgntfy.dll) - C:\WINDOWS\System32\sclgntfy.dll (Microsoft Corporation)
  357. O20 - Winlogon\Notify\SensLogn: DllName - (WlNotify.dll) - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation)
  358. O20 - Winlogon\Notify\termsrv: DllName - (wlnotify.dll) - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation)
  359. O20 - Winlogon\Notify\wlballoon: DllName - (wlnotify.dll) - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation)
  360. O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} - C:\WINDOWS\system32\shell32.dll (Microsoft Corporation)
  361. O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} - C:\WINDOWS\system32\shell32.dll (Microsoft Corporation)
  362. O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} - C:\WINDOWS\system32\stobject.dll (Microsoft Corporation)
  363. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\WINDOWS\system32\webcheck.dll (Microsoft Corporation)
  364. O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll (Microsoft Corporation)
  365. O22 - SharedTaskScheduler: {438755C2-A8BA-11D1-B96B-00A0C90312E1} - Browseui preloader - C:\WINDOWS\system32\browseui.dll (Microsoft Corporation)
  366. O22 - SharedTaskScheduler: {8C7461EF-2B13-11d2-BE35-3078302C2030} - Component Categories cache daemon - C:\WINDOWS\system32\browseui.dll (Microsoft Corporation)
  367. O24 - Desktop Components:0 (My Current Home Page) - About:Home
  368. O24 - Desktop WallPaper: C:\Documents and Settings\Mark Sortzi\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
  369. O24 - Desktop BackupWallPaper: C:\Documents and Settings\Mark Sortzi\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
  370. O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - C:\WINDOWS\System32\shell32.dll (Microsoft Corporation)
  371. O29 - HKLM SecurityProviders - (msapsspc.dll) - C:\WINDOWS\System32\msapsspc.dll (Microsoft Corporation)
  372. O29 - HKLM SecurityProviders - (schannel.dll) - C:\WINDOWS\System32\schannel.dll (Microsoft Corporation)
  373. O29 - HKLM SecurityProviders - (digest.dll) - C:\WINDOWS\System32\digest.dll (Microsoft Corporation)
  374. O29 - HKLM SecurityProviders - (msnsspc.dll) - C:\WINDOWS\System32\msnsspc.dll (Microsoft Corporation)
  375. O30 - LSA: Authentication Packages - (msv1_0) - C:\WINDOWS\System32\msv1_0.dll (Microsoft Corporation)
  376. O30 - LSA: Security Packages - (kerberos) - C:\WINDOWS\System32\kerberos.dll (Microsoft Corporation)
  377. O30 - LSA: Security Packages - (msv1_0) - C:\WINDOWS\System32\msv1_0.dll (Microsoft Corporation)
  378. O30 - LSA: Security Packages - (schannel) - C:\WINDOWS\System32\schannel.dll (Microsoft Corporation)
  379. O30 - LSA: Security Packages - (wdigest) - C:\WINDOWS\System32\wdigest.dll (Microsoft Corporation)
  380. O31 - SafeBoot: AlternateShell - cmd.exe
  381. O32 - HKLM CDRom: AutoRun - 1
  382. O32 - AutoRun File - [2009/02/26 18:56:05 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
  383. O33 - MountPoints2\{3f7020fe-c896-11de-a530-00238bb1510e}\Shell\AutoRun\command - "" = D:\AllTool.exe
  384. O34 - HKLM BootExecute: (autocheck autochk *)
  385. O35 - HKLM\..comfile [open] -- "%1" %*
  386. O35 - HKLM\..exefile [open] -- "%1" %*
  387. O37 - HKLM\...com [@ = comfile] -- "%1" %*
  388. O37 - HKLM\...exe [@ = exefile] -- "%1" %*
  389. O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
  390. O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
  391.  
  392. NetSvcs: 6to4 -  File not found
  393. NetSvcs: AppMgmt - %SystemRoot%\System32\appmgmts.dll File not found
  394. NetSvcs: Ias -  File not found
  395. NetSvcs: Iprip -  File not found
  396. NetSvcs: Irmon -  File not found
  397. NetSvcs: NWCWorkstation -  File not found
  398. NetSvcs: Nwsapagent -  File not found
  399. NetSvcs: Sharedaccess -  File not found
  400. NetSvcs: WmdmPmSp -  File not found
  401. NetSvcs: BITS -  File not found
  402.  
  403.  
  404. SafeBootMin: AppMgmt - %SystemRoot%\System32\appmgmts.dll File not found
  405. SafeBootMin: Base - Driver Group
  406. SafeBootMin: Boot Bus Extender - Driver Group
  407. SafeBootMin: Boot file system - Driver Group
  408. SafeBootMin: File system - Driver Group
  409. SafeBootMin: Filter - Driver Group
  410. SafeBootMin: mcmscsvc - Service
  411. SafeBootMin: MCODS - Service
  412. SafeBootMin: PCI Configuration - Driver Group
  413. SafeBootMin: PNP Filter - Driver Group
  414. SafeBootMin: Primary disk - Driver Group
  415. SafeBootMin: SCSI Class - Driver Group
  416. SafeBootMin: sermouse.sys - Driver
  417. SafeBootMin: System Bus Extender - Driver Group
  418. SafeBootMin: vga.sys - Driver
  419. SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
  420. SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
  421. SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
  422. SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
  423. SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
  424. SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
  425. SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
  426. SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
  427. SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
  428. SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
  429. SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
  430. SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
  431. SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
  432.  
  433. SafeBootNet: AppMgmt - %SystemRoot%\System32\appmgmts.dll File not found
  434. SafeBootNet: Base - Driver Group
  435. SafeBootNet: Boot Bus Extender - Driver Group
  436. SafeBootNet: Boot file system - Driver Group
  437. SafeBootNet: File system - Driver Group
  438. SafeBootNet: Filter - Driver Group
  439. SafeBootNet: mcmscsvc - Service
  440. SafeBootNet: MCODS - Service
  441. SafeBootNet: MpfService - Service
  442. SafeBootNet: NDIS Wrapper - Driver Group
  443. SafeBootNet: NetBIOSGroup - Driver Group
  444. SafeBootNet: NetDDEGroup - Driver Group
  445. SafeBootNet: Network - Driver Group
  446. SafeBootNet: NetworkProvider - Driver Group
  447. SafeBootNet: PCI Configuration - Driver Group
  448. SafeBootNet: PNP Filter - Driver Group
  449. SafeBootNet: PNP_TDI - Driver Group
  450. SafeBootNet: Primary disk - Driver Group
  451. SafeBootNet: SCSI Class - Driver Group
  452. SafeBootNet: sermouse.sys - Driver
  453. SafeBootNet: SharedAccess -  File not found
  454. SafeBootNet: Streams Drivers - Driver Group
  455. SafeBootNet: System Bus Extender - Driver Group
  456. SafeBootNet: TDI - Driver Group
  457. SafeBootNet: vga.sys - Driver
  458. SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
  459. SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
  460. SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
  461. SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
  462. SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
  463. SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
  464. SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
  465. SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
  466. SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
  467. SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
  468. SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
  469. SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
  470. SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
  471. SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
  472. SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
  473. SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
  474. SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
  475.  
  476. ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)
  477. ActiveX: {10072CEC-8CC1-11D1-986E-00A0C955B42F} - Vector Graphics Rendering (VML)
  478. ActiveX: {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} - NetShow
  479. ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 6.4
  480. ActiveX: {283807B5-2C60-11D0-A31D-00AA00B92C03} - DirectAnimation
  481. ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
  482. ActiveX: {36f8ec70-c29a-11d1-b5c7-0000f8051515} - Dynamic HTML Data Binding for Java
  483. ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
  484. ActiveX: {3bf42070-b3b1-11d1-b5c5-0000f8051515} - Uniscribe
  485. ActiveX: {4278c270-a269-11d1-b5bf-0000f8051515} - Advanced Authoring
  486. ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install
  487. ActiveX: {44BBA842-CC51-11CF-AAFA-00AA00B6015B} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT
  488. ActiveX: {44BBA848-CC51-11CF-AAFA-00AA00B6015C} - DirectShow
  489. ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
  490. ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
  491. ActiveX: {4f216970-c90c-11d1-b5c7-0000f8051515} - DirectAnimation Java Classes
  492. ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.7
  493. ActiveX: {5945c046-1e7d-11d1-bc44-00c04fd912be} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser
  494. ActiveX: {5A8D6EE0-3E18-11D0-821E-444553540000} - ICW
  495. ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
  496. ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
  497. ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
  498. ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
  499. ActiveX: {7131646D-CD3C-40F4-97B9-CD9E4E6262EF} - .NET Framework
  500. ActiveX: {73fa19d0-2d75-11d2-995d-00c04f98bbc9} - Web Folders
  501. ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install
  502. ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
  503. ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\WINDOWS\system32\ie4uinit.exe -BaseSettings
  504. ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - c:\WINDOWS\system32\Rundll32.exe c:\WINDOWS\system32\mscories.dll,Install
  505. ActiveX: {8b15971b-5355-4c82-8c07-7e181ea07608} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\fxsocm.inf,Fax.Install.PerUser
  506. ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
  507. ActiveX: {94de52c8-2d59-4f1b-883e-79663d2d9a8c} - Fax Provider
  508. ActiveX: {ACC563BC-4266-43f0-B6ED-9D38C4202C7E} -
  509. ActiveX: {C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F} - .NET Framework
  510. ActiveX: {C3C986D6-06B1-43BF-90DD-BE30756C00DE} - RevokedRootsUpdate
  511. ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
  512. ActiveX: {CC2A9BA0-3BDD-11D0-821E-444553540000} - Task Scheduler
  513. ActiveX: {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - Windows Movie Maker v2.1
  514. ActiveX: {D27CDB6E-AE6D-11cf-96B8-444553540000} - Adobe Flash Player
  515. ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
  516. ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
  517. ActiveX: <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988} - C:\WINDOWS\system32\ieudinit.exe
  518. ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\WINDOWS\inf\unregmp2.exe /ShowWMP
  519. ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\WINDOWS\system32\ie4uinit.exe -UserIconConfig
  520. ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP
  521. ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS - RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP
  522. ActiveX: >{881dd1c5-3dcf-431b-b061-f3f88e8be88a} - %systemroot%\system32\shmgrate.exe OCInstallUserConfigOE
  523.  
  524. Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation)
  525. Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
  526. Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
  527. Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
  528. Drivers32: MSVideo8 - C:\WINDOWS\System32\vfwwdm32.dll (Microsoft Corporation)
  529. Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
  530. Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll ()
  531. Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll ()
  532. Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation)
  533. Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation)
  534.  
  535. [color=#E56717]========== Files/Folders - Created Within 90 Days ==========[/color]
  536.  
  537. [2012/08/10 19:04:21 | 000,596,480 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Mark Sortzi\Desktop\OTL.scr
  538. [2012/08/09 04:43:37 | 000,426,184 | ---- | C] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerApp.exe
  539. [2012/08/09 04:43:36 | 000,070,344 | ---- | C] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
  540. [2012/06/10 18:52:53 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mark Sortzi\My Documents\Recyclebank
  541. [2012/06/03 09:21:46 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mark Sortzi\Local Settings\Application Data\Sun
  542. [2012/06/03 09:21:22 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java
  543. [2012/06/03 09:01:43 | 000,000,000 | ---D | C] -- C:\Program Files\Oracle
  544. [2012/06/03 09:01:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mark Sortzi\Application Data\Oracle
  545. [2012/06/03 09:01:26 | 000,772,504 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\npDeployJava1.dll
  546. [2012/06/03 09:01:26 | 000,227,720 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\javaws.exe
  547. [2012/06/03 09:01:11 | 000,174,024 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\javaw.exe
  548. [2012/06/03 09:01:11 | 000,174,024 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\java.exe
  549. [2012/06/03 08:52:42 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\QuickTime
  550. [2012/06/03 08:52:21 | 000,000,000 | ---D | C] -- C:\Program Files\QuickTime
  551. [2012/06/03 08:47:15 | 000,000,000 | ---D | C] -- C:\Program Files\Apple Software Update
  552. [2012/06/03 08:47:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mark Sortzi\Local Settings\Application Data\Apple
  553. [2012/06/02 09:18:37 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mark Sortzi\Application Data\AskToolbar
  554. [2012/05/28 18:45:06 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Local Settings\Application Data\Adobe
  555. [2012/05/28 18:45:06 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Application Data\Adobe
  556. [2012/05/28 18:43:10 | 000,000,000 | ---D | C] -- C:\GIRDAC
  557. [2012/05/28 18:43:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Application Data\GIRDAC
  558. [2012/05/28 18:39:46 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\GIRDAC Free PDF Creator
  559. [2012/05/28 18:39:43 | 000,000,000 | ---D | C] -- C:\Program Files\GIRDAC Free PDF Creator
  560. [2012/05/28 18:39:43 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mark Sortzi\Application Data\GIRDAC
  561. [2012/05/27 18:17:15 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\NtmsData
  562. [2012/05/27 18:05:54 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mark Sortzi\Application Data\Avira
  563. [2012/05/27 18:00:12 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Avira
  564. [2012/05/27 17:59:56 | 000,000,000 | ---D | C] -- C:\Program Files\Ask.com
  565. [2012/05/27 17:59:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mark Sortzi\Local Settings\Application Data\AskToolbar
  566. [2012/05/27 17:59:19 | 000,028,520 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\ssmdrv.sys
  567. [2012/05/27 17:59:16 | 000,137,928 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avipbb.sys
  568. [2012/05/27 17:59:16 | 000,083,392 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avgntflt.sys
  569. [2012/05/27 17:59:16 | 000,036,000 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avkmgr.sys
  570. [2012/05/27 17:59:14 | 000,000,000 | ---D | C] -- C:\Program Files\Avira
  571. [2012/05/27 17:59:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Avira
  572. [2012/05/26 17:09:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mark Sortzi\.zenmap
  573. [2012/05/26 17:05:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mark Sortzi\Start Menu\Programs\Nmap
  574. [2012/05/26 17:03:01 | 000,000,000 | ---D | C] -- C:\Program Files\WinPcap
  575. [2012/05/26 17:01:41 | 000,000,000 | ---D | C] -- C:\Program Files\Nmap
  576. [3 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
  577.  
  578. [color=#E56717]========== Files - Modified Within 90 Days ==========[/color]
  579.  
  580. [2012/08/10 20:15:00 | 000,000,246 | ---- | M] () -- C:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job
  581. [2012/08/10 19:42:02 | 000,000,886 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
  582. [2012/08/10 19:34:15 | 000,000,830 | ---- | M] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job
  583. [2012/08/10 19:04:22 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Mark Sortzi\Desktop\OTL.scr
  584. [2012/08/10 18:46:51 | 000,000,882 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
  585. [2012/08/10 18:46:39 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
  586. [2012/08/10 18:46:36 | 1061,105,664 | -HS- | M] () -- C:\hiberfil.sys
  587. [2012/08/09 20:35:09 | 000,426,184 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerApp.exe
  588. [2012/08/09 20:35:09 | 000,070,344 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
  589. [2012/08/06 20:30:32 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job
  590. [2012/08/05 20:16:27 | 004,424,315 | ---- | M] () -- C:\Documents and Settings\Mark Sortzi\Desktop\1280345211_collapsibledob1.pdf
  591. [2012/07/30 19:13:01 | 000,001,158 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
  592. [2012/07/14 11:21:31 | 000,109,303 | ---- | M] () -- C:\Documents and Settings\Mark Sortzi\Desktop\Amazon-Cot-Return.pdf
  593. [2012/07/11 19:44:49 | 000,252,680 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
  594. [2012/07/11 14:16:34 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK
  595. [2012/06/27 20:08:36 | 000,006,592 | ---- | M] () -- C:\Documents and Settings\Mark Sortzi\Desktop\GLSG schedule.php
  596. [2012/06/15 07:43:34 | 000,434,714 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
  597. [2012/06/15 07:43:34 | 000,068,834 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
  598. [2012/06/13 09:19:59 | 001,866,112 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\win32k.sys
  599. [2012/06/13 09:19:59 | 001,866,112 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\win32k.sys
  600. [2012/06/08 10:26:20 | 008,462,848 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\shell32.dll
  601. [2012/06/05 11:50:25 | 001,372,672 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msxml6.dll
  602. [2012/06/05 11:50:25 | 001,172,480 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msxml3.dll
  603. [2012/06/04 00:32:08 | 000,152,576 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\schannel.dll
  604. [2012/06/03 09:00:54 | 000,174,024 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\javaw.exe
  605. [2012/06/03 09:00:54 | 000,174,024 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\java.exe
  606. [2012/06/03 08:52:42 | 000,001,608 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\QuickTime Player.lnk
  607. [2012/06/02 15:19:44 | 000,022,040 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\wucltui.dll.mui
  608. [2012/06/02 15:19:38 | 000,329,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\wucltui.dll
  609. [2012/06/02 15:19:38 | 000,329,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wucltui.dll
  610. [2012/06/02 15:19:38 | 000,219,160 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wuaucpl.cpl
  611. [2012/06/02 15:19:38 | 000,210,968 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wuweb.dll
  612. [2012/06/02 15:19:34 | 000,097,304 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cdm.dll
  613. [2012/06/02 15:19:34 | 000,097,304 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\cdm.dll
  614. [2012/06/02 15:19:34 | 000,053,784 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wuauclt.exe
  615. [2012/06/02 15:19:34 | 000,045,080 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\wups2.dll
  616. [2012/06/02 15:19:34 | 000,035,864 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\wups.dll
  617. [2012/06/02 15:19:34 | 000,035,864 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wups.dll
  618. [2012/06/02 15:19:34 | 000,015,384 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\wuapi.dll.mui
  619. [2012/06/02 15:19:24 | 000,577,048 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\wuapi.dll
  620. [2012/06/02 15:19:24 | 000,577,048 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wuapi.dll
  621. [2012/06/02 15:19:18 | 001,933,848 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wuaueng.dll
  622. [2012/06/02 15:18:58 | 000,275,696 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\mucltui.dll
  623. [2012/06/02 15:18:58 | 000,017,136 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\mucltui.dll.mui
  624. [2012/05/31 09:22:09 | 000,599,040 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\crypt32.dll
  625. [2012/05/28 18:39:46 | 000,000,782 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\GIRDAC Free PDF Creator.lnk
  626. [2012/05/28 14:16:33 | 000,536,576 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msado15.dll
  627. [2012/05/27 18:00:12 | 000,001,711 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Avira Control Center.lnk
  628. [2012/05/26 17:05:14 | 000,000,642 | ---- | M] () -- C:\Documents and Settings\Mark Sortzi\Desktop\Nmap - Zenmap GUI.lnk
  629. [2012/05/15 11:39:54 | 000,832,512 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wininet.dll
  630. [3 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
  631.  
  632. [color=#E56717]========== Files Created - No Company Name ==========[/color]
  633.  
  634. [2012/08/09 04:43:41 | 000,000,830 | ---- | C] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job
  635. [2012/08/07 04:32:03 | 000,232,960 | ---- | C] () -- C:\WINDOWS\Installer\{2b833ab7-b4db-9942-2793-c52de571a0a6}\U\00000008.@
  636. [2012/08/07 04:32:03 | 000,092,160 | ---- | C] () -- C:\WINDOWS\Installer\{2b833ab7-b4db-9942-2793-c52de571a0a6}\U\80000032.@
  637. [2012/08/07 04:32:03 | 000,000,804 | ---- | C] () -- C:\WINDOWS\Installer\{2b833ab7-b4db-9942-2793-c52de571a0a6}\L\00000004.@
  638. [2012/08/07 04:32:02 | 000,013,312 | ---- | C] () -- C:\WINDOWS\Installer\{2b833ab7-b4db-9942-2793-c52de571a0a6}\U\80000000.@
  639. [2012/08/07 04:32:02 | 000,002,048 | ---- | C] () -- C:\WINDOWS\Installer\{2b833ab7-b4db-9942-2793-c52de571a0a6}\U\00000004.@
  640. [2012/08/07 04:32:02 | 000,001,632 | ---- | C] () -- C:\WINDOWS\Installer\{2b833ab7-b4db-9942-2793-c52de571a0a6}\U\000000cb.@
  641. [2012/08/05 20:16:06 | 004,424,315 | ---- | C] () -- C:\Documents and Settings\Mark Sortzi\Desktop\1280345211_collapsibledob1.pdf
  642. [2012/07/14 11:21:26 | 000,109,303 | ---- | C] () -- C:\Documents and Settings\Mark Sortzi\Desktop\Amazon-Cot-Return.pdf
  643. [2012/06/27 20:08:36 | 000,006,592 | ---- | C] () -- C:\Documents and Settings\Mark Sortzi\Desktop\GLSG schedule.php
  644. [2012/06/03 08:52:42 | 000,001,608 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\QuickTime Player.lnk
  645. [2012/05/28 18:39:46 | 000,000,782 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\GIRDAC Free PDF Creator.lnk
  646. [2012/05/27 18:00:12 | 000,001,711 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Avira Control Center.lnk
  647. [2012/05/27 18:00:03 | 000,000,246 | ---- | C] () -- C:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job
  648. [2012/05/26 17:05:14 | 000,000,642 | ---- | C] () -- C:\Documents and Settings\Mark Sortzi\Desktop\Nmap - Zenmap GUI.lnk
  649. [2012/03/14 22:07:52 | 000,053,299 | ---- | C] () -- C:\WINDOWS\System32\pthreadVC.dll
  650. [2012/02/16 19:50:11 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll
  651. [2012/02/12 15:02:37 | 000,000,450 | ---- | C] () -- C:\Documents and Settings\Mark Sortzi\Application Data\wklnhst.dat
  652. [2011/12/04 18:51:39 | 000,005,120 | ---- | C] () -- C:\Documents and Settings\Mark Sortzi\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
  653. [2011/09/29 19:59:02 | 000,000,031 | ---- | C] () -- C:\WINDOWS\WebUpdateSvc4.INI
  654. [2011/09/29 19:57:38 | 000,048,652 | ---- | C] () -- C:\WINDOWS\System32\wuwuninst.exe
  655. [2011/06/23 11:37:44 | 000,397,584 | ---- | C] () -- C:\WINDOWS\System32\WuWUI.exe
  656. [2011/01/10 08:27:37 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
  657. [2010/12/25 14:13:20 | 000,055,140 | -H-- | C] () -- C:\WINDOWS\System32\mlfcache.dat
  658. [2010/09/19 08:36:17 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Mark Sortzi\Local Settings\Application Data\prvlcl.dat
  659. [2009/02/26 18:40:12 | 000,002,048 | -HS- | C] () -- C:\WINDOWS\Installer\{2b833ab7-b4db-9942-2793-c52de571a0a6}\@
  660. [2009/02/26 18:40:12 | 000,002,048 | -HS- | C] () -- C:\Documents and Settings\Mark Sortzi\Local Settings\Application Data\{2b833ab7-b4db-9942-2793-c52de571a0a6}\@
  661.  
  662. [color=#E56717]========== LOP Check ==========[/color]
  663.  
  664. [2010/03/15 19:41:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Acoustica
  665. [2011/09/23 11:17:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\avg9
  666. [2011/03/14 12:07:28 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Application Data\Common Files
  667. [2009/02/26 20:18:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\eSobi
  668. [2012/05/27 17:53:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\MFAData
  669. [2010/09/12 12:07:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Novatel Wireless
  670. [2009/11/03 12:29:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\QUALCOMM
  671. [2011/09/23 10:32:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Temp
  672. [2010/12/25 13:45:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
  673. [2009/02/26 20:19:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Default User\Application Data\Acer
  674. [2012/05/28 18:43:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Application Data\GIRDAC
  675. [2009/12/26 17:38:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Application Data\SACore
  676. [2009/02/26 20:19:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mark Sortzi\Application Data\Acer
  677. [2012/06/02 09:18:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mark Sortzi\Application Data\AskToolbar
  678. [2012/05/28 18:43:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mark Sortzi\Application Data\GIRDAC
  679. [2011/06/19 20:31:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mark Sortzi\Application Data\Leadertech
  680. [2012/06/03 09:01:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mark Sortzi\Application Data\Oracle
  681. [2011/11/23 10:37:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mark Sortzi\Application Data\Stellarium
  682. [2012/02/12 15:02:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mark Sortzi\Application Data\Template
  683. [2009/02/26 20:19:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Nick Sortzi\Application Data\Acer
  684. [2010/03/15 19:50:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Nick Sortzi\Application Data\Acoustica
  685. [2010/03/15 20:04:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Nick Sortzi\Application Data\Applied Acoustics Systems
  686. [2010/03/07 17:51:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Nick Sortzi\Application Data\PhotoFiltre
  687. [2009/02/26 20:19:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Teri Sortzi\Application Data\Acer
  688. [2012/07/16 20:17:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Teri Sortzi\Application Data\AskToolbar
  689. [2012/04/15 20:45:44 | 000,000,280 | ---- | M] () -- C:\WINDOWS\Tasks\debutShakeIcon.job
  690. [2012/08/10 20:15:00 | 000,000,246 | ---- | M] () -- C:\WINDOWS\Tasks\Scheduled Update for Ask Toolbar.job
  691.  
  692. [color=#E56717]========== Purity Check ==========[/color]
  693.  
  694.  
  695.  
  696. [color=#E56717]========== Custom Scans ==========[/color]
  697.  
  698. [color=#A23BEC]< %SYSTEMDRIVE%\*.* >[/color]
  699. [2009/02/26 18:56:05 | 000,000,000 | ---- | M] () -- C:\AUTOEXEC.BAT
  700. [2009/12/25 14:08:46 | 000,000,211 | RHS- | M] () -- C:\boot.ini
  701. [2009/02/26 18:56:05 | 000,000,000 | ---- | M] () -- C:\CONFIG.SYS
  702. [2012/08/10 18:46:36 | 1061,105,664 | -HS- | M] () -- C:\hiberfil.sys
  703. [2011/12/04 17:08:39 | 000,230,424 | ---- | M] () -- C:\img2-001.raw
  704. [2009/02/26 18:56:05 | 000,000,000 | RHS- | M] () -- C:\IO.SYS
  705. [2009/02/18 05:26:30 | 000,002,016 | ---- | M] () -- C:\MOD01SET0J00P2000K.enc
  706. [2008/08/06 21:16:21 | 000,002,488 | ---- | M] () -- C:\MOD01WOS02ENP20001.enc
  707. [2009/02/26 18:56:05 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS
  708. [2008/04/14 08:00:00 | 000,047,564 | RHS- | M] () -- C:\NTDETECT.COM
  709. [2008/04/14 08:00:00 | 000,250,048 | RHS- | M] () -- C:\ntldr
  710. [2012/08/10 18:46:34 | 1585,446,912 | -HS- | M] () -- C:\pagefile.sys
  711. [2009/02/26 19:45:19 | 000,001,708 | ---- | M] () -- C:\RHDSetup.log
  712. [2009/11/03 12:32:32 | 000,000,218 | ---- | M] () -- C:\Setup.log
  713.  
  714. [color=#A23BEC]< %USERPROFILE%\*.* >[/color]
  715. [2012/08/10 04:51:18 | 003,407,872 | -H-- | M] () -- C:\Documents and Settings\Mark Sortzi\NTUSER.DAT
  716. [2012/08/10 20:04:14 | 000,001,024 | -H-- | M] () -- C:\Documents and Settings\Mark Sortzi\ntuser.dat.LOG
  717. [2012/08/10 04:51:16 | 000,000,178 | -HS- | M] () -- C:\Documents and Settings\Mark Sortzi\ntuser.ini
  718.  
  719. [color=#A23BEC]< %USERPROFILE%\Application Data\*.* >[/color]
  720. [2009/02/26 10:51:07 | 000,000,062 | -HS- | M] () -- C:\Documents and Settings\Mark Sortzi\Application Data\desktop.ini
  721. [2012/02/12 15:31:01 | 000,000,450 | ---- | M] () -- C:\Documents and Settings\Mark Sortzi\Application Data\wklnhst.dat
  722.  
  723. [color=#A23BEC]< %USERPROFILE%\Local Settings\Application Data\*.* >[/color]
  724. [2012/04/28 08:15:54 | 000,005,120 | ---- | M] () -- C:\Documents and Settings\Mark Sortzi\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
  725. [2010/10/09 16:11:24 | 000,061,848 | ---- | M] () -- C:\Documents and Settings\Mark Sortzi\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
  726. [2012/05/27 21:03:32 | 002,810,310 | -H-- | M] () -- C:\Documents and Settings\Mark Sortzi\Local Settings\Application Data\IconCache.db
  727. [2011/09/23 11:06:30 | 000,000,000 | ---- | M] () -- C:\Documents and Settings\Mark Sortzi\Local Settings\Application Data\prvlcl.dat
  728.  
  729. [color=#A23BEC]< %AllUsersProfile%\*.* >[/color]
  730. [2009/12/25 14:08:49 | 000,262,144 | ---- | M] () -- C:\Documents and Settings\All Users\NTUSER.DAT
  731. [2009/12/25 14:08:49 | 000,001,024 | -H-- | M] () -- C:\Documents and Settings\All Users\NTUSER.DAT.LOG
  732.  
  733. [color=#A23BEC]< %AllUsersProfile%\Application Data\*.* >[/color]
  734. [2009/02/26 10:51:07 | 000,000,062 | -HS- | M] () -- C:\Documents and Settings\All Users\Application Data\desktop.ini
  735.  
  736. [color=#A23BEC]< %USERPROFILE%\My Documents\*.* >[/color]
  737. [2011/02/12 17:54:03 | 000,124,447 | ---- | M] () -- C:\Documents and Settings\Mark Sortzi\My Documents\2010 TaxReturn.pdf
  738. [2012/04/07 09:42:15 | 001,103,719 | ---- | M] () -- C:\Documents and Settings\Mark Sortzi\My Documents\2011 TaxReturn.pdf
  739. [2012/02/12 15:30:52 | 000,023,552 | ---- | M] () -- C:\Documents and Settings\Mark Sortzi\My Documents\Chrysler Cover-120212.doc
  740. [2009/12/25 14:09:51 | 000,000,082 | -HS- | M] () -- C:\Documents and Settings\Mark Sortzi\My Documents\desktop.ini
  741. [2012/03/18 16:52:31 | 000,009,041 | ---- | M] () -- C:\Documents and Settings\Mark Sortzi\My Documents\Event Schedule.pdf
  742. [2011/01/23 09:13:50 | 000,026,909 | ---- | M] () -- C:\Documents and Settings\Mark Sortzi\My Documents\Rochester HS Transcript Request Form.pdf
  743. [2011/04/01 13:25:26 | 000,058,880 | ---- | M] () -- C:\Documents and Settings\Mark Sortzi\My Documents\Sortzi, Mark 110401.doc
  744. [2012/02/12 14:58:30 | 000,060,928 | ---- | M] () -- C:\Documents and Settings\Mark Sortzi\My Documents\Sortzi, Mark 110829.doc
  745.  
  746. [color=#A23BEC]< %CommonProgramFiles%\*.* >[/color]
  747.  
  748. [color=#A23BEC]< %CommonProgramFiles%\ComObjects*.* >[/color]
  749.  
  750. [color=#A23BEC]< %PROGRAMFILES%\*.* >[/color]
  751.  
  752. [color=#A23BEC]< %systemroot%\system32\config\systemprofile\*.* >[/color]
  753. [2009/11/03 12:25:26 | 000,262,144 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\NTUSER.DAT
  754. [2009/11/03 12:25:26 | 000,001,024 | -H-- | M] () -- C:\WINDOWS\system32\config\systemprofile\NTUSER.DAT.LOG
  755.  
  756. [color=#A23BEC]< %systemroot%\system32\config\systemprofile\Application Data\*.* >[/color]
  757. [2009/02/26 10:51:07 | 000,000,062 | -HS- | M] () -- C:\WINDOWS\system32\config\systemprofile\Application Data\desktop.ini
  758.  
  759. [color=#A23BEC]< %systemroot%\system32\config\systemprofile\\Local Settings\*.* >[/color]
  760. [2009/11/03 12:28:30 | 000,000,062 | -HS- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\desktop.ini
  761.  
  762. [color=#A23BEC]< %systemroot%\system32\config\systemprofile\\Local Settings\Application Data\*.* >[/color]
  763. [2009/02/26 20:24:41 | 000,060,664 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
  764. [2009/11/03 12:54:08 | 003,226,106 | -H-- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Application Data\IconCache.db
  765.  
  766. [color=#A23BEC]< %systemroot%\system32\config\systemprofile\\Local Settings\Temp\*.* >[/color]
  767. [2009/02/26 20:07:48 | 000,021,150 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\Arabic.bin
  768. [2009/02/26 19:00:09 | 000,004,562 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\ASPNETSetup_00000.log
  769. [2009/11/03 12:31:41 | 000,003,808 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\Crb55.tmp.mht
  770. [2009/02/26 20:07:48 | 000,024,504 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\Czech.bin
  771. [2009/02/26 20:07:48 | 000,022,970 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\Danish.bin
  772. [2009/02/26 19:02:30 | 004,600,564 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\dd_netfx20MSI63AC.txt
  773. [2009/02/26 19:02:31 | 000,013,468 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\dd_netfx20UI63AC.txt
  774. [2009/02/26 20:07:48 | 000,025,943 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\Dutch.bin
  775. [2009/02/26 20:07:48 | 000,022,118 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\English.bin
  776. [2007/12/13 20:57:16 | 000,032,768 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\fe2b6.msp
  777. [2009/02/26 20:07:48 | 000,023,040 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\Finnish.bin
  778. [2009/02/26 20:07:48 | 000,027,425 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\French.bin
  779. [2009/02/26 19:59:38 | 000,000,000 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\gd384.tmp.ggc
  780. [2009/02/26 20:07:48 | 000,025,927 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\German.bin
  781. [2009/02/26 20:07:48 | 000,025,278 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\Greek.bin
  782. [2009/02/26 20:07:48 | 000,019,700 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\Hebrew.bin
  783. [2009/02/26 20:07:48 | 000,026,282 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\Hungarian.bin
  784. [2009/02/26 20:07:48 | 000,027,665 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\Italian.bin
  785. [2009/02/26 20:07:48 | 000,024,523 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\Japanese.bin
  786. [2009/02/26 20:07:48 | 000,020,307 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\Korean.bin
  787. [2009/02/26 20:07:48 | 000,025,712 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\Lithuanian.bin
  788. [2010/10/07 00:25:37 | 012,315,428 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\Microsoft .NET Framework 2.0-KB2418241_20101007_042125515-Msi0.txt
  789. [2010/10/07 00:25:37 | 000,497,626 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\Microsoft .NET Framework 2.0-KB2418241_20101007_042125515.html
  790. [2011/04/13 04:40:15 | 012,420,958 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\Microsoft .NET Framework 2.0-KB2446704_20110413_083356031-Msi0.txt
  791. [2011/04/13 04:40:16 | 000,498,308 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\Microsoft .NET Framework 2.0-KB2446704_20110413_083356031.html
  792. [2011/06/25 21:07:27 | 012,376,678 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\Microsoft .NET Framework 2.0-KB2478658_20110626_010331203-Msi0.txt
  793. [2011/06/25 21:07:28 | 000,497,040 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\Microsoft .NET Framework 2.0-KB2478658_20110626_010331203.html
  794. [2011/06/25 21:11:42 | 012,463,078 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\Microsoft .NET Framework 2.0-KB2518864_20110626_010739859-Msi0.txt
  795. [2011/06/25 21:11:42 | 000,498,262 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\Microsoft .NET Framework 2.0-KB2518864_20110626_010739859.html
  796. [2012/05/22 04:53:35 | 017,508,606 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\Microsoft .NET Framework 2.0-KB2518864_20120522_084928109-Msi0.txt
  797. [2012/05/22 04:53:36 | 000,112,922 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\Microsoft .NET Framework 2.0-KB2518864_20120522_084928109.html
  798. [2011/08/11 06:55:46 | 012,435,988 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\Microsoft .NET Framework 2.0-KB2539631_20110811_104731078-Msi0.txt
  799. [2011/08/11 06:55:47 | 000,498,726 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\Microsoft .NET Framework 2.0-KB2539631_20110811_104731078.html
  800. [2011/10/12 20:05:22 | 013,063,704 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\Microsoft .NET Framework 2.0-KB2572073_20111012_235856140-Msi0.txt
  801. [2011/10/12 20:05:23 | 000,499,696 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\Microsoft .NET Framework 2.0-KB2572073_20111012_235856140.html
  802. [2012/05/22 04:45:27 | 017,508,956 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\Microsoft .NET Framework 2.0-KB2572073_20120522_084136703-Msi0.txt
  803. [2012/05/22 04:45:27 | 000,112,926 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\Microsoft .NET Framework 2.0-KB2572073_20120522_084136703.html
  804. [2012/05/12 16:39:41 | 013,322,278 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\Microsoft .NET Framework 2.0-KB2604092_20120512_203209968-Msi0.txt
  805. [2012/05/12 16:39:41 | 000,501,900 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\Microsoft .NET Framework 2.0-KB2604092_20120512_203209968.html
  806. [2012/02/17 22:21:48 | 013,794,554 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\Microsoft .NET Framework 2.0-KB2633880_20120218_021439406-Msi0.txt
  807. [2012/02/17 22:21:49 | 000,498,852 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\Microsoft .NET Framework 2.0-KB2633880_20120218_021439406.html
  808. [2012/05/22 04:49:14 | 017,508,646 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\Microsoft .NET Framework 2.0-KB2633880_20120522_084534781-Msi0.txt
  809. [2012/05/22 04:49:14 | 000,112,934 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\Microsoft .NET Framework 2.0-KB2633880_20120522_084534781.html
  810. [2012/01/01 10:53:11 | 013,819,170 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\Microsoft .NET Framework 2.0-KB2656352_20120101_143931921-Msi0.txt
  811. [2012/01/01 10:53:12 | 000,497,550 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\Microsoft .NET Framework 2.0-KB2656352_20120101_143931921.html
  812. [2012/04/13 04:40:16 | 014,407,674 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\Microsoft .NET Framework 2.0-KB2656369_20120413_083329890-Msi0.txt
  813. [2012/04/13 04:40:16 | 000,496,866 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\Microsoft .NET Framework 2.0-KB2656369_20120413_083329890.html
  814. [2012/06/15 07:45:35 | 013,887,916 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\Microsoft .NET Framework 2.0-KB2656369_20120615_113603421-Msi0.txt
  815. [2012/06/15 07:45:36 | 000,498,914 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\Microsoft .NET Framework 2.0-KB2656369_20120615_113603421.html
  816. [2012/06/14 04:40:02 | 013,879,750 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\Microsoft .NET Framework 2.0-KB2686828_20120614_083419046-Msi0.txt
  817. [2012/06/14 04:40:02 | 000,496,908 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\Microsoft .NET Framework 2.0-KB2686828_20120614_083419046.html
  818. [2009/12/29 13:31:17 | 009,420,646 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\Microsoft .NET Framework 2.0-KB958481_20091229_172731765-Msi0.txt
  819. [2009/12/29 13:31:18 | 000,504,156 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\Microsoft .NET Framework 2.0-KB958481_20091229_172731765.html
  820. [2009/12/31 11:34:31 | 009,950,146 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\Microsoft .NET Framework 2.0-KB974417_20091231_152914421-Msi0.txt
  821. [2009/12/31 11:34:32 | 000,503,320 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\Microsoft .NET Framework 2.0-KB974417_20091231_152914421.html
  822. [2010/06/22 20:00:08 | 012,264,066 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\Microsoft .NET Framework 2.0-KB976576_20100622_235631046-Msi0.txt
  823. [2010/06/22 20:00:08 | 000,500,442 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\Microsoft .NET Framework 2.0-KB976576_20100622_235631046.html
  824. [2010/06/11 23:14:24 | 010,535,030 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\Microsoft .NET Framework 2.0-KB979909_20100612_031103937-Msi0.txt
  825. [2010/06/11 23:14:24 | 000,498,090 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\Microsoft .NET Framework 2.0-KB979909_20100612_031103937.html
  826. [2010/08/13 10:52:53 | 012,299,646 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\Microsoft .NET Framework 2.0-KB983583_20100813_144741156-Msi0.txt
  827. [2010/08/13 10:52:53 | 000,501,082 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\Microsoft .NET Framework 2.0-KB983583_20100813_144741156.html
  828. [2012/05/12 16:48:05 | 002,507,836 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\Microsoft .NET Framework 3.0-KB2604110_20120512_204714937-Msi0.txt
  829. [2012/05/12 16:48:05 | 000,108,980 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\Microsoft .NET Framework 3.0-KB2604110_20120512_204714937.html
  830. [2012/05/12 16:27:39 | 002,544,264 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\Microsoft .NET Framework 3.0-KB2656407_20120512_202542390-Msi0.txt
  831. [2012/05/12 16:27:40 | 000,117,188 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\Microsoft .NET Framework 3.0-KB2656407_20120512_202542390.html
  832. [2009/12/29 13:32:27 | 002,117,938 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\Microsoft .NET Framework 3.0-KB958483_20091229_173128953-Msi0.txt
  833. [2009/12/29 13:32:27 | 000,112,864 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\Microsoft .NET Framework 3.0-KB958483_20091229_173128953.html
  834. [2010/06/22 20:01:07 | 002,360,058 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\Microsoft .NET Framework 3.0-KB977354_20100623_000016187-Msi0.txt
  835. [2010/06/22 20:01:08 | 000,112,616 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\Microsoft .NET Framework 3.0-KB977354_20100623_000016187.html
  836. [2010/06/11 23:18:02 | 011,714,016 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\Microsoft .NET Framework 3.0-KB982168_20100612_031434750-Msi0.txt
  837. [2010/06/11 23:18:49 | 002,207,772 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\Microsoft .NET Framework 3.0-KB982168_20100612_031434750-Msi1.txt
  838. [2010/06/11 23:18:49 | 000,579,260 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\Microsoft .NET Framework 3.0-KB982168_20100612_031434750.html
  839. [2010/10/07 00:26:16 | 000,829,212 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\Microsoft .NET Framework 3.5-KB2416473_20101007_042554796-Msi0.txt
  840. [2010/10/07 00:26:17 | 000,086,160 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\Microsoft .NET Framework 3.5-KB2416473_20101007_042554796.html
  841. [2012/05/12 16:46:58 | 000,911,876 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\Microsoft .NET Framework 3.5-KB2604111_20120512_204628828-Msi0.txt
  842. [2012/05/12 16:46:58 | 000,086,756 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\Microsoft .NET Framework 3.5-KB2604111_20120512_204628828.html
  843. [2012/01/01 10:54:14 | 000,846,948 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\Microsoft .NET Framework 3.5-KB2657424_20120101_145330671-Msi0.txt
  844. [2012/01/01 10:54:14 | 000,086,156 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\Microsoft .NET Framework 3.5-KB2657424_20120101_145330671.html
  845. [2009/12/29 13:32:49 | 000,752,432 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\Microsoft .NET Framework 3.5-KB958484_20091229_173234500-Msi0.txt
  846. [2009/12/29 13:32:50 | 000,093,798 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\Microsoft .NET Framework 3.5-KB958484_20091229_173234500.html
  847. [2009/12/31 11:27:54 | 000,427,394 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\Microsoft .NET Framework 3.5-KB963707_20091231_152732031-Msi0.txt
  848. [2009/12/31 11:27:55 | 000,075,848 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\Microsoft .NET Framework 3.5-KB963707_20091231_152732031.html
  849. [2012/05/28 09:48:16 | 000,348,472 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\Microsoft Visual C++ 2010  x86 Redistributable Setup_20120528_094419687-Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219-MSP0.txt
  850. [2012/05/28 09:48:18 | 000,077,366 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\Microsoft Visual C++ 2010  x86 Redistributable Setup_20120528_094419687.html
  851. [2009/02/26 20:01:06 | 000,991,554 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\MSIExec_OfficeCompatPack.log
  852. [2009/02/26 20:01:01 | 001,087,980 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\MSIExec_PPV.log
  853. [2009/02/26 20:07:48 | 000,022,142 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\Norwegian.bin
  854. [2009/02/26 20:07:48 | 000,024,428 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\Polish.bin
  855. [2009/02/26 20:07:48 | 000,025,276 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\Portuguese(Brazil).bin
  856. [2009/02/26 20:07:48 | 000,026,464 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\Portuguese.bin
  857. [2009/02/26 20:07:48 | 000,212,992 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\RtkBtMnt.exe
  858. [2009/02/26 20:07:48 | 000,026,314 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\Russian.bin
  859. [2009/02/26 19:55:36 | 000,081,911 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\SetupExe(200902261552049D0).log
  860. [2009/02/26 20:07:48 | 000,016,540 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\SimChin.bin
  861. [2009/02/26 20:07:48 | 000,024,100 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\Slovenian.bin
  862. [2009/02/26 20:07:48 | 000,027,968 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\Spanish.bin
  863. [2009/02/26 20:07:48 | 000,024,270 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\SWEDISH.bin
  864. [2009/02/26 20:07:48 | 000,022,149 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\Thai.bin
  865. [2009/02/26 20:07:48 | 000,017,090 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\TradChin.bin
  866. [2009/02/26 20:07:48 | 000,022,436 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\Turkish.bin
  867. [2009/02/26 20:01:06 | 000,003,070 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\WksSetup(0001).LOG
  868. [2009/02/26 20:00:53 | 003,535,722 | ---- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\WksSetup(0001)_MsiExec.txt
  869. [11 C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\*.tmp files -> C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temp\*.tmp -> ]
  870.  
  871. [color=#A23BEC]< %systemroot%\system32\config\systemprofile\\Local Settings\Temporary Internet Files\*.* >[/color]
  872. [2009/02/26 18:58:53 | 000,000,067 | -HS- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\Temporary Internet Files\desktop.ini
  873.  
  874. [color=#A23BEC]< %windir%\temp\*.* >[/color]
  875. [2012/08/08 04:41:16 | 000,246,440 | ---- | M] (Ask.com) -- C:\WINDOWS\temp\AskSLib.dll
  876. [2009/12/29 13:23:25 | 000,005,158 | ---- | M] () -- C:\WINDOWS\temp\ASPNETSetup_00000.log
  877. [2009/12/29 13:31:03 | 000,005,158 | ---- | M] () -- C:\WINDOWS\temp\ASPNETSetup_00001.log
  878. [2009/12/31 11:34:01 | 000,005,158 | ---- | M] () -- C:\WINDOWS\temp\ASPNETSetup_00002.log
  879. [2010/06/11 23:14:08 | 000,005,158 | ---- | M] () -- C:\WINDOWS\temp\ASPNETSetup_00003.log
  880. [2010/06/11 23:17:49 | 000,005,158 | ---- | M] () -- C:\WINDOWS\temp\ASPNETSetup_00004.log
  881. [2010/06/22 19:59:52 | 000,005,158 | ---- | M] () -- C:\WINDOWS\temp\ASPNETSetup_00005.log
  882. [2010/08/13 10:52:14 | 000,005,158 | ---- | M] () -- C:\WINDOWS\temp\ASPNETSetup_00006.log
  883. [2010/10/07 00:25:18 | 000,005,158 | ---- | M] () -- C:\WINDOWS\temp\ASPNETSetup_00007.log
  884. [2011/04/13 04:39:18 | 000,005,158 | ---- | M] () -- C:\WINDOWS\temp\ASPNETSetup_00008.log
  885. [2011/06/25 21:07:12 | 000,005,158 | ---- | M] () -- C:\WINDOWS\temp\ASPNETSetup_00009.log
  886. [2011/06/25 21:11:25 | 000,005,158 | ---- | M] () -- C:\WINDOWS\temp\ASPNETSetup_00010.log
  887. [2011/08/11 06:54:45 | 000,005,158 | ---- | M] () -- C:\WINDOWS\temp\ASPNETSetup_00011.log
  888. [2011/10/12 20:04:39 | 000,005,158 | ---- | M] () -- C:\WINDOWS\temp\ASPNETSetup_00012.log
  889. [2012/01/01 10:52:30 | 000,005,158 | ---- | M] () -- C:\WINDOWS\temp\ASPNETSetup_00013.log
  890. [2012/02/17 22:21:17 | 000,005,158 | ---- | M] () -- C:\WINDOWS\temp\ASPNETSetup_00014.log
  891. [2012/04/13 04:39:28 | 000,005,158 | ---- | M] () -- C:\WINDOWS\temp\ASPNETSetup_00015.log
  892. [2012/05/12 16:39:05 | 000,005,158 | ---- | M] () -- C:\WINDOWS\temp\ASPNETSetup_00016.log
  893. [2012/06/14 04:39:34 | 000,005,158 | ---- | M] () -- C:\WINDOWS\temp\ASPNETSetup_00017.log
  894. [2012/06/15 07:43:42 | 000,005,158 | ---- | M] () -- C:\WINDOWS\temp\ASPNETSetup_00018.log
  895. [2012/05/27 09:07:38 | 000,000,466 | ---- | M] () -- C:\WINDOWS\temp\avginfo.id
  896. [2010/07/09 08:32:48 | 000,006,124 | ---- | M] () -- C:\WINDOWS\temp\coinlog.log
  897. [2012/01/24 20:40:10 | 000,798,244 | ---- | M] () -- C:\WINDOWS\temp\dd_ATL80SP1_KB973923MSI51E7.txt
  898. [2012/01/24 20:40:10 | 000,011,636 | ---- | M] () -- C:\WINDOWS\temp\dd_ATL80SP1_KB973923UI51E7.txt
  899. [2012/06/15 07:35:55 | 000,275,935 | ---- | M] () -- C:\WINDOWS\temp\dd_clwireg.txt
  900. [2009/12/29 13:25:13 | 000,204,804 | ---- | M] () -- C:\WINDOWS\temp\dd_depcheck_NETFX_EXP_35.txt
  901. [2009/12/29 13:19:53 | 000,000,002 | ---- | M] () -- C:\WINDOWS\temp\dd_dotnetfx35error.txt
  902. [2009/12/29 13:27:18 | 000,485,692 | ---- | M] () -- C:\WINDOWS\temp\dd_dotnetfx35install.txt
  903. [2009/12/29 13:24:38 | 015,856,694 | ---- | M] () -- C:\WINDOWS\temp\dd_NET_Framework20_Setup450F.txt
  904. [2009/12/29 13:26:32 | 003,247,156 | ---- | M] () -- C:\WINDOWS\temp\dd_NET_Framework30_Setup48AF.txt
  905. [2009/12/29 13:27:16 | 001,436,876 | ---- | M] () -- C:\WINDOWS\temp\dd_NET_Framework35_MSI49B7.txt
  906. [2009/12/29 13:20:29 | 000,134,974 | ---- | M] () -- C:\WINDOWS\temp\dd_RGB9RAST_x86.msi4509.txt
  907. [2011/09/24 08:36:37 | 000,548,250 | ---- | M] () -- C:\WINDOWS\temp\dd_vcredistMSI6BDE.txt
  908. [2011/09/24 08:36:37 | 000,011,626 | ---- | M] () -- C:\WINDOWS\temp\dd_vcredistUI6BDE.txt
  909. [2010/06/11 23:18:41 | 000,004,328 | ---- | M] () -- C:\WINDOWS\temp\dd_wcf_retCA1079.txt
  910. [2010/06/22 20:01:00 | 000,004,362 | ---- | M] () -- C:\WINDOWS\temp\dd_wcf_retCA17EF.txt
  911. [2009/12/29 13:32:21 | 000,004,330 | ---- | M] () -- C:\WINDOWS\temp\dd_wcf_retCA21FA.txt
  912. [2012/05/12 16:27:21 | 000,004,362 | ---- | M] () -- C:\WINDOWS\temp\dd_wcf_retCA2355.txt
  913. [2012/05/12 16:47:55 | 000,004,362 | ---- | M] () -- C:\WINDOWS\temp\dd_wcf_retCA3497.txt
  914. [2009/12/29 13:26:02 | 000,004,465 | ---- | M] () -- C:\WINDOWS\temp\dd_wcf_retCA7ECE.txt
  915. [2009/12/29 13:25:13 | 000,038,904 | ---- | M] () -- C:\WINDOWS\temp\dd_XPS.txt
  916. [2010/06/11 23:10:43 | 000,000,023 | ---- | M] () -- C:\WINDOWS\temp\FixitPatchRegistration.log
  917. [2012/08/09 04:42:35 | 000,156,320 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\temp\FP_AX_CAB_INSTALLER.exe
  918. [2011/01/15 00:04:59 | 000,000,000 | ---- | M] () -- C:\WINDOWS\temp\gd55.tmp.ggc
  919. [2011/01/15 07:58:20 | 000,000,000 | ---- | M] () -- C:\WINDOWS\temp\gd6.tmp.ggc
  920. [2011/11/07 08:03:16 | 000,035,424 | ---- | M] () -- C:\WINDOWS\temp\GoogleToolbarInstaller1.log
  921. [2011/08/25 14:23:11 | 000,027,817 | ---- | M] () -- C:\WINDOWS\temp\GoogleToolbarInstaller2.log
  922. [2012/01/25 20:27:48 | 000,000,000 | ---- | M] () -- C:\WINDOWS\temp\GUR11.exe
  923. [2011/05/07 16:40:29 | 000,000,000 | ---- | M] () -- C:\WINDOWS\temp\GUR4.exe
  924. [2011/07/24 09:43:18 | 000,000,000 | ---- | M] () -- C:\WINDOWS\temp\GUR5.exe
  925. [2011/09/13 19:47:14 | 000,000,000 | ---- | M] () -- C:\WINDOWS\temp\GUR6.exe
  926. [2009/11/03 12:28:13 | 000,000,000 | ---- | M] () -- C:\WINDOWS\temp\mcmsc_8OitFoEajaqfojf
  927. [2009/02/26 20:15:49 | 000,001,024 | ---- | M] () -- C:\WINDOWS\temp\mcmsc_Hm8jXLlP8zBiIyY
  928. [2009/02/26 20:24:27 | 000,000,000 | ---- | M] () -- C:\WINDOWS\temp\mcmsc_iodr5NUoARTfZDi
  929. [2009/12/26 17:50:31 | 000,000,000 | ---- | M] () -- C:\WINDOWS\temp\mcmsc_xSZSxgDJlVTXDBM
  930. [2009/12/25 14:15:49 | 000,000,000 | ---- | M] () -- C:\WINDOWS\temp\mcmsc_yZyIM8ZCQd82bh2
  931. [2011/06/17 04:47:22 | 000,000,542 | ---- | M] () -- C:\WINDOWS\temp\MSId347e.LOG
  932. [2012/08/10 20:04:20 | 000,520,364 | ---- | M] () -- C:\WINDOWS\temp\pbscreen.swf
  933. [2011/08/01 04:38:20 | 000,016,384 | ---- | M] () -- C:\WINDOWS\temp\Perflib_Perfdata_168.dat
  934. [2011/11/09 18:57:33 | 000,016,384 | ---- | M] () -- C:\WINDOWS\temp\Perflib_Perfdata_20c.dat
  935. [2011/03/01 20:21:18 | 000,016,384 | ---- | M] () -- C:\WINDOWS\temp\Perflib_Perfdata_260.dat
  936. [2010/06/11 23:15:03 | 000,016,384 | ---- | M] () -- C:\WINDOWS\temp\Perflib_Perfdata_42c.dat
  937. [2012/02/17 22:22:11 | 000,016,384 | ---- | M] () -- C:\WINDOWS\temp\Perflib_Perfdata_500.dat
  938. [2010/06/22 20:00:50 | 000,016,384 | ---- | M] () -- C:\WINDOWS\temp\Perflib_Perfdata_514.dat
  939. [2012/08/03 04:32:35 | 000,016,384 | ---- | M] () -- C:\WINDOWS\temp\Perflib_Perfdata_6c0.dat
  940. [2012/07/08 11:44:38 | 000,016,384 | ---- | M] () -- C:\WINDOWS\temp\Perflib_Perfdata_6d4.dat
  941. [2012/03/22 19:26:40 | 000,016,384 | ---- | M] () -- C:\WINDOWS\temp\Perflib_Perfdata_7a8.dat
  942. [2009/12/29 13:24:21 | 000,016,384 | ---- | M] () -- C:\WINDOWS\temp\Perflib_Perfdata_b40.dat
  943. [2012/04/13 04:40:23 | 000,016,384 | ---- | M] () -- C:\WINDOWS\temp\Perflib_Perfdata_b7c.dat
  944. [2011/08/11 06:55:43 | 000,016,384 | ---- | M] () -- C:\WINDOWS\temp\Perflib_Perfdata_cac.dat
  945. [2011/04/13 04:40:13 | 000,016,384 | ---- | M] () -- C:\WINDOWS\temp\Perflib_Perfdata_d58.dat
  946. [2012/05/23 04:36:01 | 000,016,384 | ---- | M] () -- C:\WINDOWS\temp\Perflib_Perfdata_e0.dat
  947. [2011/06/25 21:08:06 | 000,016,384 | ---- | M] () -- C:\WINDOWS\temp\Perflib_Perfdata_e80.dat
  948. [2012/03/23 04:34:21 | 000,016,384 | ---- | M] () -- C:\WINDOWS\temp\Perflib_Perfdata_f4.dat
  949. [2012/05/14 04:11:19 | 000,002,342 | ---- | M] () -- C:\WINDOWS\temp\Silverlight0.log
  950. [2012/05/14 04:11:18 | 001,885,108 | ---- | M] () -- C:\WINDOWS\temp\SilverlightMSI.log
  951. [2009/12/25 22:58:40 | 000,001,024 | ---- | M] () -- C:\WINDOWS\temp\sqlite_049hQqCfrMkoIec
  952. [2009/12/26 19:37:29 | 000,001,024 | ---- | M] () -- C:\WINDOWS\temp\sqlite_0vamNHLVigaOsWf
  953. [2009/12/25 22:58:41 | 000,001,024 | ---- | M] () -- C:\WINDOWS\temp\sqlite_1aQAyQYmD1TTb83
  954. [2009/12/25 14:11:56 | 000,001,024 | ---- | M] () -- C:\WINDOWS\temp\sqlite_3Plh4BZeQdrfaUA
  955. [2009/02/26 20:24:28 | 000,001,024 | ---- | M] () -- C:\WINDOWS\temp\sqlite_7Z6rtbr7stheP03
  956. [2009/11/03 12:28:11 | 000,001,024 | ---- | M] () -- C:\WINDOWS\temp\sqlite_ahhgLtRCKndYah1
  957. [2009/12/25 14:06:51 | 000,001,024 | ---- | M] () -- C:\WINDOWS\temp\sqlite_BBnfHJ2zQ3e8jEa
  958. [2009/12/26 17:38:04 | 000,001,024 | ---- | M] () -- C:\WINDOWS\temp\sqlite_CYoIbzHQUkOajjk
  959. [2009/12/25 14:12:46 | 000,001,024 | ---- | M] () -- C:\WINDOWS\temp\sqlite_f2v5M7iQXb4sFDy
  960. [2009/12/25 14:16:55 | 000,000,000 | ---- | M] () -- C:\WINDOWS\temp\sqlite_fGDVvBBKBK6FSHV
  961. [2009/11/03 12:33:18 | 000,001,024 | ---- | M] () -- C:\WINDOWS\temp\sqlite_fhZFyLFhuDurcQN
  962. [2009/02/26 20:29:31 | 000,000,000 | ---- | M] () -- C:\WINDOWS\temp\sqlite_FZiJ8iTt1vatCXu
  963. [2009/02/26 20:15:39 | 000,001,024 | ---- | M] () -- C:\WINDOWS\temp\sqlite_HndSqZThEgFzaAF
  964. [2009/11/03 12:28:10 | 000,001,024 | ---- | M] () -- C:\WINDOWS\temp\sqlite_Ib7ShgsWUCVaeIe
  965. [2009/12/25 20:27:08 | 000,001,024 | ---- | M] () -- C:\WINDOWS\temp\sqlite_iLZWNGkkBp8ZtS0
  966. [2009/12/25 14:21:00 | 000,001,024 | ---- | M] () -- C:\WINDOWS\temp\sqlite_j2c69gRseDsJ7XZ
  967. [2009/12/25 20:29:11 | 000,000,000 | ---- | M] () -- C:\WINDOWS\temp\sqlite_J8yG9uV0hSmLwSk
  968. [2009/12/25 14:15:49 | 000,001,024 | ---- | M] () -- C:\WINDOWS\temp\sqlite_JfZEWdGyj9ZkJAM
  969. [2009/12/25 20:29:16 | 000,001,024 | ---- | M] () -- C:\WINDOWS\temp\sqlite_JIZ273DwumEvKLQ
  970. [2009/12/26 19:38:33 | 000,000,000 | ---- | M] () -- C:\WINDOWS\temp\sqlite_JqUXkZws9MkwNro
  971. [2009/12/25 14:15:47 | 000,001,024 | ---- | M] () -- C:\WINDOWS\temp\sqlite_KxV2uryaycMW7JZ
  972. [2009/02/26 20:15:39 | 000,001,024 | ---- | M] () -- C:\WINDOWS\temp\sqlite_LHBQ5tzegVXgUHr
  973. [2009/12/25 22:59:44 | 000,000,000 | ---- | M] () -- C:\WINDOWS\temp\sqlite_LLGMFK7Ajv2e5kM
  974. [2009/12/26 17:39:08 | 000,001,024 | ---- | M] () -- C:\WINDOWS\temp\sqlite_ly0hLV44pkdoYFc
  975. [2009/12/25 14:17:56 | 000,000,000 | ---- | M] () -- C:\WINDOWS\temp\sqlite_N6m9zsI0NJbO0O2
  976. [2009/12/25 20:27:07 | 000,001,024 | ---- | M] () -- C:\WINDOWS\temp\sqlite_NQuVes7B3yhJd7i
  977. [2009/12/25 14:16:55 | 000,000,000 | ---- | M] () -- C:\WINDOWS\temp\sqlite_Pb893VWAIgObhF8
  978. [2009/12/26 17:38:54 | 000,000,000 | ---- | M] () -- C:\WINDOWS\temp\sqlite_QnJu7OFdjVKc9Fb
  979. [2009/12/26 19:38:33 | 000,000,000 | ---- | M] () -- C:\WINDOWS\temp\sqlite_RnNnbYPpyFyvxK2
  980. [2009/12/25 14:11:45 | 000,000,000 | ---- | M] () -- C:\WINDOWS\temp\sqlite_rTzS2dIxb5Jwl5U
  981. [2009/02/26 20:15:39 | 000,001,024 | ---- | M] () -- C:\WINDOWS\temp\sqlite_sWwGd6hvTWtTU72
  982. [2009/12/25 20:28:11 | 000,000,000 | ---- | M] () -- C:\WINDOWS\temp\sqlite_Tm9UD5WWqVhixFe
  983. [2009/12/25 14:11:45 | 000,001,024 | ---- | M] () -- C:\WINDOWS\temp\sqlite_uBEW6NYibzqnDMz
  984. [2009/12/25 22:59:44 | 000,000,000 | ---- | M] () -- C:\WINDOWS\temp\sqlite_v4Qqv0bRF2VHUVg
  985. [2009/12/25 14:12:45 | 000,000,000 | ---- | M] () -- C:\WINDOWS\temp\sqlite_W2LOniwmjZuSUaf
  986. [2009/12/25 23:00:49 | 000,001,024 | ---- | M] () -- C:\WINDOWS\temp\sqlite_WblQ90FQJ5qdUhz
  987. [2009/12/25 23:00:44 | 000,000,000 | ---- | M] () -- C:\WINDOWS\temp\sqlite_wUBWBVs0jr9KlzB
  988. [2009/12/26 19:37:30 | 000,001,024 | ---- | M] () -- C:\WINDOWS\temp\sqlite_ww7nyJnrkLUF0za
  989. [2009/12/25 14:17:58 | 000,001,024 | ---- | M] () -- C:\WINDOWS\temp\sqlite_xbpv5ff7Eeokg5I
  990. [2009/12/25 14:06:51 | 000,001,024 | ---- | M] () -- C:\WINDOWS\temp\sqlite_xZiugKoqwxgPcUN
  991. [2009/12/25 20:28:11 | 000,000,000 | ---- | M] () -- C:\WINDOWS\temp\sqlite_yABuHV9R0GL2lqW
  992. [2009/02/26 20:24:27 | 000,001,024 | ---- | M] () -- C:\WINDOWS\temp\sqlite_ZTfvZ2B2u2AJG7W
  993. [2009/02/26 18:58:42 | 000,000,000 | ---- | M] () -- C:\WINDOWS\temp\T30DebugLogFile.txt
  994. [2009/12/29 13:27:18 | 000,248,772 | ---- | M] () -- C:\WINDOWS\temp\uxeventlog.txt
  995. [16 C:\WINDOWS\temp\*.tmp files -> C:\WINDOWS\temp\*.tmp -> ]
  996.  
  997. [color=#A23BEC]< %windir%\minidump\*.* >[/color]
  998. [2011/04/26 18:20:21 | 000,090,112 | ---- | M] () -- C:\WINDOWS\minidump\Mini042611-01.dmp
  999. [2012/06/13 04:39:05 | 000,090,112 | ---- | M] () -- C:\WINDOWS\minidump\Mini061312-01.dmp
  1000.  
  1001. [color=#A23BEC]< %windir%\*. >[/color]
  1002. [2012/07/11 14:16:24 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$hf_mig$
  1003. [2009/02/26 19:03:17 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$
  1004. [2009/02/26 19:03:03 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$
  1005. [2010/08/13 10:53:09 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2079403$
  1006. [2010/08/13 10:53:45 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2115168$
  1007. [2010/09/16 06:11:30 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2121546$
  1008. [2010/09/16 06:06:30 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2141007$
  1009. [2010/09/30 04:36:50 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2158563$
  1010. [2010/08/13 10:47:22 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2160329$
  1011. [2010/07/15 16:39:42 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2229593$
  1012. [2010/09/16 06:12:01 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2259922$
  1013. [2010/10/14 04:46:34 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2279986$
  1014. [2010/08/03 00:03:13 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2286198$
  1015. [2010/10/14 04:46:08 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2296011$
  1016. [2010/12/14 22:41:28 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2296199$
  1017. [2010/10/14 04:46:20 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2345886$
  1018. [2010/09/16 06:11:41 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2347290$
  1019. [2010/10/14 04:38:14 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2360937$
  1020. [2010/10/14 04:44:54 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2378111_WM9$
  1021. [2010/10/14 04:46:48 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2387149$
  1022. [2011/02/10 07:16:45 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2393802$
  1023. [2011/04/13 04:41:23 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2412687$
  1024. [2011/01/13 13:05:59 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2419632$
  1025. [2010/12/14 22:34:55 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2423089$
  1026. [2010/12/14 22:40:19 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2436673$
  1027. [2010/12/14 22:41:11 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2440591$
  1028. [2010/12/14 22:41:19 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2443105$
  1029. [2010/12/14 22:41:05 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2443685$
  1030. [2010/12/14 22:39:34 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2467659$
  1031. [2011/06/17 04:43:27 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2476490$
  1032. [2011/02/10 07:18:02 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2476687$
  1033. [2011/02/10 07:17:45 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2478960$
  1034. [2011/02/10 07:28:05 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2478971$
  1035. [2011/02/10 07:27:42 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2479628$
  1036. [2011/03/09 18:37:14 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2479943$
  1037. [2011/03/09 18:33:24 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2481109$
  1038. [2011/02/10 07:27:29 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2483185$
  1039. [2011/02/10 07:27:54 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2485376$
  1040. [2011/04/14 07:10:49 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2485663$
  1041. [2011/04/14 07:11:55 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2491683$
  1042. [2011/04/13 04:33:21 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2503658$
  1043. [2011/06/17 04:43:12 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2503665$
  1044. [2011/04/13 04:31:18 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2506212$
  1045. [2011/04/14 07:09:29 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2506223$
  1046. [2011/04/13 04:32:18 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2507618$
  1047. [2011/07/13 07:49:34 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2507938$
  1048. [2011/04/13 04:33:42 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2508272$
  1049. [2011/04/13 04:32:06 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2508429$
  1050. [2011/04/13 04:26:58 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2509553$
  1051. [2011/04/14 07:10:32 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2510581$
  1052. [2011/04/13 04:31:57 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2511455$
  1053. [2011/03/25 07:10:25 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2524375$
  1054. [2011/06/17 04:43:02 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2535512$
  1055. [2011/06/17 04:41:56 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2536276$
  1056. [2011/08/11 06:46:57 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2536276-v2$
  1057. [2011/06/30 12:34:56 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2541763$
  1058. [2011/06/17 04:41:22 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2544893$
  1059. [2011/11/09 20:59:04 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2544893-v2$
  1060. [2011/07/13 07:45:50 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2555917$
  1061. [2011/08/11 06:31:31 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2562937$
  1062. [2011/10/12 20:05:36 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2564958$
  1063. [2011/08/11 06:31:53 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2566454$
  1064. [2011/10/12 19:53:08 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2567053$
  1065. [2011/08/11 06:47:11 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2567680$
  1066. [2011/08/11 06:44:26 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2570222$
  1067. [2011/08/25 12:53:39 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2570791$
  1068. [2011/09/16 09:22:00 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2570947$
  1069. [2012/01/12 05:36:22 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2584146$
  1070. [2012/01/14 09:16:45 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2585542$
  1071. [2011/10/12 19:52:56 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2592799$
  1072. [2012/01/12 05:36:47 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2598479$
  1073. [2012/01/12 05:36:37 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2603381$
  1074. [2011/09/07 10:17:11 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2607712$
  1075. [2011/09/17 09:26:24 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2616676$
  1076. [2011/12/16 08:56:11 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2618451$
  1077. [2011/12/16 08:56:58 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2619339$
  1078. [2011/12/16 08:54:33 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2620712$
  1079. [2012/03/14 04:37:38 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2621440$
  1080. [2011/12/16 09:03:34 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2624667$
  1081. [2012/01/12 05:43:19 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2631813$
  1082. [2011/12/16 08:53:45 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2633171$
  1083. [2011/12/16 08:57:05 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2633952$
  1084. [2011/12/16 09:03:52 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2639417$
  1085. [2012/03/14 04:43:21 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2641653$
  1086. [2011/11/12 08:57:45 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2641690$
  1087. [2012/01/12 05:43:37 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2646524$
  1088. [2012/03/14 04:37:21 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2647518$
  1089. [2012/04/13 04:28:47 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2653956$
  1090. [2012/07/11 14:16:17 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2655992$
  1091. [2012/05/12 16:50:06 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2659262$
  1092. [2012/02/17 22:08:32 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2660465$
  1093. [2012/02/17 22:01:24 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2661637$
  1094. [2012/05/12 16:23:17 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2676562$
  1095. [2012/06/14 04:45:23 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2685939$
  1096. [2012/05/12 16:31:02 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2686509$
  1097. [2012/07/11 14:16:49 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2691442$
  1098. [2012/05/12 16:29:40 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2695962$
  1099. [2012/07/11 14:11:08 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2698365$
  1100. [2012/06/15 07:48:17 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2707511$
  1101. [2012/06/14 04:34:00 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2709162$
  1102. [2012/07/11 14:16:30 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2718523$
  1103. [2012/06/05 04:38:11 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2718704$
  1104. [2012/07/11 14:15:38 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2719985$
  1105. [2009/12/29 10:37:47 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB898461$
  1106. [2009/12/29 12:54:23 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB923561$
  1107. [2010/07/09 08:31:57 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB929399$
  1108. [2009/02/26 19:05:24 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB932716-v2$
  1109. [2009/02/26 19:21:29 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB938464$
  1110. [2010/07/09 08:31:33 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB939683$
  1111. [2010/07/09 08:32:48 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB941569$
  1112. [2009/12/29 13:06:31 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB946648$
  1113. [2009/02/26 19:19:28 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB949764$
  1114. [2009/02/26 19:10:47 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB950762$
  1115. [2009/02/26 19:13:44 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB950974$
  1116. [2009/02/26 19:15:05 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB951066$
  1117. [2009/02/26 19:16:30 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB951072-v2$
  1118. [2009/02/26 19:06:32 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB951376$
  1119. [2009/12/29 13:07:01 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB951376-v2$
  1120. [2009/02/26 19:07:55 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB951698$
  1121. [2009/12/29 12:58:34 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB951748$
  1122. [2009/02/26 19:12:16 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB951978$
  1123. [2009/12/29 13:01:15 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB952004$
  1124. [2009/02/26 19:36:38 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB952069_WM9$
  1125. [2009/02/26 19:17:51 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB952287$
  1126. [2009/12/29 13:06:54 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB952954$
  1127. [2010/07/09 08:29:56 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB954154_WM11$
  1128. [2009/12/29 13:03:47 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB954155_WM9$
  1129. [2009/02/26 19:22:55 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB954211$
  1130. [2009/02/26 19:29:48 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB954459$
  1131. [2009/02/26 20:05:03 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB954708$
  1132. [2009/02/26 19:31:14 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB955069$
  1133. [2010/01/13 09:30:19 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB955759$
  1134. [2009/02/26 19:37:52 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB955839$
  1135. [2009/02/26 19:24:27 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB956391$
  1136. [2009/12/29 13:02:56 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB956572$
  1137. [2009/12/29 13:03:33 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB956744$
  1138. [2009/02/26 19:39:14 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB956802$
  1139. [2009/12/29 13:06:22 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB956803$
  1140. [2009/02/26 19:25:49 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB956841$
  1141. [2009/12/29 13:02:02 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB956844$
  1142. [2009/02/26 19:27:55 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB957095$
  1143. [2009/02/26 19:32:41 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB957097$
  1144. [2009/02/26 19:34:06 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB958644$
  1145. [2009/12/29 13:00:23 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB958687$
  1146. [2009/12/29 13:06:02 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB958869$
  1147. [2009/12/29 13:06:43 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB959426$
  1148. [2009/12/29 13:03:40 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB960225$
  1149. [2009/12/29 12:57:59 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB960803$
  1150. [2009/12/29 13:06:13 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB960859$
  1151. [2009/12/31 11:28:02 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB961118$
  1152. [2009/12/29 13:05:22 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB961371-v2$
  1153. [2009/12/29 13:01:50 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB961501$
  1154. [2009/12/29 12:59:03 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB967715$
  1155. [2009/12/29 12:53:58 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB968389$
  1156. [2009/12/29 13:05:32 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB968816_WM9$
  1157. [2009/12/29 13:05:40 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB969059$
  1158. [2009/12/29 12:53:38 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB969947$
  1159. [2009/12/29 12:58:24 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB970238$
  1160. [2009/12/31 11:28:51 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB970430$
  1161. [2011/03/06 06:56:22 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB971029$
  1162. [2010/02/10 10:07:32 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB971468$
  1163. [2009/12/29 12:58:12 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB971486$
  1164. [2009/12/29 13:03:54 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB971557$
  1165. [2009/12/29 13:01:41 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB971633$
  1166. [2009/12/29 13:04:02 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB971657$
  1167. [2009/12/31 11:27:06 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB971737$
  1168. [2009/12/29 12:54:16 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB971961$
  1169. [2010/01/13 09:30:01 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB972270$
  1170. [2009/12/29 13:00:11 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB973354$
  1171. [2009/12/29 13:00:50 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB973507$
  1172. [2009/12/29 12:57:43 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB973525$
  1173. [2009/12/29 12:58:50 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB973540_WM9$
  1174. [2009/12/29 13:00:37 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB973687$
  1175. [2009/12/29 12:57:51 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB973815$
  1176. [2009/12/29 13:01:32 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB973869$
  1177. [2009/12/29 13:00:01 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB973904$
  1178. [2009/12/29 13:03:24 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB974112$
  1179. [2009/12/29 13:05:48 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB974318$
  1180. [2009/12/29 12:58:42 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB974392$
  1181. [2009/12/29 13:01:00 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB974571$
  1182. [2009/12/29 13:01:25 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB975025$
  1183. [2009/12/29 12:54:08 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB975467$
  1184. [2010/09/16 06:11:50 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB975558_WM8$
  1185. [2010/02/10 10:03:18 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB975560$
  1186. [2010/03/10 13:47:03 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB975561$
  1187. [2010/06/11 23:18:59 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB975562$
  1188. [2010/02/10 10:03:43 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB975713$
  1189. [2009/12/29 13:05:55 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB976098-v2$
  1190. [2010/02/10 10:02:28 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB977165$
  1191. [2010/04/15 06:09:24 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB977816$
  1192. [2010/02/10 10:03:05 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB977914$
  1193. [2010/02/10 10:03:53 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB978037$
  1194. [2010/02/10 10:03:30 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB978251$
  1195. [2010/02/10 10:07:41 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB978262$
  1196. [2010/04/15 06:09:46 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB978338$
  1197. [2010/05/12 16:30:29 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB978542$
  1198. [2010/04/14 10:02:44 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB978601$
  1199. [2010/06/11 23:19:20 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB978695_WM9$
  1200. [2010/02/10 10:02:47 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB978706$
  1201. [2010/02/26 07:07:13 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB979306$
  1202. [2010/04/14 10:02:32 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB979309$
  1203. [2010/04/15 06:13:27 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB979402_WM9$
  1204. [2010/06/11 23:19:13 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB979482$
  1205. [2010/06/11 23:22:35 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB979559$
  1206. [2010/04/15 06:13:55 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB979683$
  1207. [2010/10/14 04:42:53 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB979687$
  1208. [2010/06/11 23:22:44 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB980195$
  1209. [2010/06/11 23:22:52 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB980218$
  1210. [2010/04/15 06:13:37 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB980232$
  1211. [2010/08/13 10:46:50 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB980436$
  1212. [2010/09/16 06:11:06 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB981322$
  1213. [2010/04/15 06:09:55 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB981349$
  1214. [2010/05/25 21:32:06 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB981793$
  1215. [2010/08/13 10:53:29 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB981852$
  1216. [2010/10/14 04:38:45 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB981957$
  1217. [2010/08/13 10:41:26 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB981997$
  1218. [2010/10/14 04:44:21 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB982132$
  1219. [2010/08/13 10:53:55 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB982214$
  1220. [2010/08/13 10:41:11 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB982665$
  1221. [2010/09/16 06:11:18 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB982802$
  1222. [2010/07/08 07:49:25 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallMSCompPackV1$
  1223. [2009/11/03 12:31:28 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallWdf01007$
  1224. [2010/07/08 07:47:36 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallWMFDist11$
  1225. [2010/07/08 07:48:46 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallwmp11$
  1226. [2010/07/08 07:46:46 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallWudf01000$
  1227. [2009/04/26 09:53:10 | 000,000,000 | ---D | M] -- C:\WINDOWS\3G
  1228. [2009/02/26 20:19:55 | 000,000,000 | ---D | M] -- C:\WINDOWS\ACER
  1229. [2009/02/26 18:53:30 | 000,000,000 | ---D | M] -- C:\WINDOWS\addins
  1230. [2010/01/13 14:41:05 | 000,000,000 | ---D | M] -- C:\WINDOWS\AppPatch
  1231. [2012/06/15 09:48:52 | 000,000,000 | R-SD | M] -- C:\WINDOWS\assembly
  1232. [2009/11/03 12:29:33 | 000,000,000 | ---D | M] -- C:\WINDOWS\BTW
  1233. [2009/02/26 10:44:59 | 000,000,000 | ---D | M] -- C:\WINDOWS\Config
  1234. [2009/02/26 10:44:59 | 000,000,000 | ---D | M] -- C:\WINDOWS\Connection Wizard
  1235. [2009/02/26 18:53:35 | 000,000,000 | ---D | M] -- C:\WINDOWS\Cursors
  1236. [2011/03/09 18:33:51 | 000,000,000 | ---D | M] -- C:\WINDOWS\Debug
  1237. [2009/11/03 12:29:34 | 000,000,000 | ---D | M] -- C:\WINDOWS\Dev1
  1238. [2009/02/26 18:54:58 | 000,000,000 | --SD | M] -- C:\WINDOWS\Downloaded Program Files
  1239. [2009/02/26 10:44:59 | 000,000,000 | ---D | M] -- C:\WINDOWS\Driver Cache
  1240. [2010/10/09 11:13:37 | 000,000,000 | R-SD | M] -- C:\WINDOWS\Fonts
  1241. [2012/06/22 20:05:37 | 000,000,000 | ---D | M] -- C:\WINDOWS\Help
  1242. [2009/02/26 19:03:36 | 000,000,000 | -H-D | M] -- C:\WINDOWS\ie7
  1243. [2012/06/14 04:42:13 | 000,000,000 | ---D | M] -- C:\WINDOWS\ie7updates
  1244. [2009/02/26 18:56:09 | 000,000,000 | ---D | M] -- C:\WINDOWS\ime
  1245. [2012/07/11 14:17:02 | 000,000,000 | -H-D | M] -- C:\WINDOWS\inf
  1246. [2012/08/06 04:38:30 | 000,000,000 | -HSD | M] -- C:\WINDOWS\Installer
  1247. [2009/02/26 10:44:59 | 000,000,000 | ---D | M] -- C:\WINDOWS\java
  1248. [2009/02/26 10:50:38 | 000,000,000 | ---D | M] -- C:\WINDOWS\L2Schemas
  1249. [2009/02/26 19:03:41 | 000,000,000 | ---D | M] -- C:\WINDOWS\Media
  1250. [2012/06/15 09:49:00 | 000,000,000 | ---D | M] -- C:\WINDOWS\Microsoft.NET
  1251. [2011/04/26 18:20:25 | 000,000,000 | ---D | M] -- C:\WINDOWS\Minidump
  1252. [2009/02/26 10:49:04 | 000,000,000 | ---D | M] -- C:\WINDOWS\msagent
  1253. [2009/02/26 10:44:59 | 000,000,000 | ---D | M] -- C:\WINDOWS\msapps
  1254. [2009/02/26 10:44:59 | 000,000,000 | ---D | M] -- C:\WINDOWS\mui
  1255. [2011/09/07 10:26:26 | 000,000,000 | ---D | M] -- C:\WINDOWS\Network Diagnostic
  1256. [2009/02/26 10:45:03 | 000,000,000 | ---D | M] -- C:\WINDOWS\OemDir
  1257. [2009/02/26 18:54:58 | 000,000,000 | R--D | M] -- C:\WINDOWS\Offline Web Pages
  1258. [2009/11/03 12:32:25 | 000,000,000 | ---D | M] -- C:\WINDOWS\Options
  1259. [2009/02/26 18:54:23 | 000,000,000 | ---D | M] -- C:\WINDOWS\pchealth
  1260. [2009/02/26 10:49:17 | 000,000,000 | ---D | M] -- C:\WINDOWS\PeerNet
  1261. [2012/08/10 19:16:24 | 000,000,000 | ---D | M] -- C:\WINDOWS\Prefetch
  1262. [2009/02/26 10:44:59 | 000,000,000 | ---D | M] -- C:\WINDOWS\Provisioning
  1263. [2012/08/06 20:06:24 | 000,000,000 | ---D | M] -- C:\WINDOWS\Registration
  1264. [2009/01/12 09:57:35 | 000,000,000 | ---D | M] -- C:\WINDOWS\RemoveLink
  1265. [2012/05/27 18:17:14 | 000,000,000 | ---D | M] -- C:\WINDOWS\repair
  1266. [2009/02/26 10:44:59 | 000,000,000 | ---D | M] -- C:\WINDOWS\Resources
  1267. [2011/12/04 22:01:23 | 000,000,000 | ---D | M] -- C:\WINDOWS\security
  1268. [2011/04/14 07:12:09 | 000,000,000 | ---D | M] -- C:\WINDOWS\ServicePackFiles
  1269. [2009/02/26 19:52:59 | 000,000,000 | ---D | M] -- C:\WINDOWS\SHELLNEW
  1270. [2009/12/26 17:38:29 | 000,000,000 | ---D | M] -- C:\WINDOWS\SoftwareDistribution
  1271. [2009/02/26 18:54:38 | 000,000,000 | ---D | M] -- C:\WINDOWS\srchasst
  1272. [2010/02/06 16:40:57 | 000,000,000 | ---D | M] -- C:\WINDOWS\Sun
  1273. [2011/06/18 13:37:22 | 000,000,000 | ---D | M] -- C:\WINDOWS\SxsCaPendDel
  1274. [2009/02/26 10:51:15 | 000,000,000 | ---D | M] -- C:\WINDOWS\system
  1275. [2012/08/09 20:35:12 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32
  1276. [2012/08/09 04:43:41 | 000,000,000 | --SD | M] -- C:\WINDOWS\Tasks
  1277. [2012/08/10 20:05:56 | 000,000,000 | ---D | M] -- C:\WINDOWS\Temp
  1278. [2011/12/04 16:04:09 | 000,000,000 | ---D | M] -- C:\WINDOWS\twain_32
  1279. [2009/02/26 19:03:44 | 000,000,000 | ---D | M] -- C:\WINDOWS\WBEM
  1280. [2009/02/26 18:55:00 | 000,000,000 | R--D | M] -- C:\WINDOWS\Web
  1281. [2012/06/15 07:42:08 | 000,000,000 | ---D | M] -- C:\WINDOWS\WinSxS
  1282.  
  1283. [color=#A23BEC]< %windir%\installer\*. >[/color]
  1284. [2009/02/26 19:55:20 | 000,000,000 | -HSD | M] -- C:\WINDOWS\installer\$PatchCache$
  1285. [2009/02/26 20:03:57 | 000,000,000 | ---D | M] -- C:\WINDOWS\installer\{020D8396-D6D9-4B53-A9A1-83C47E2E27AA}
  1286. [2009/12/28 20:29:39 | 000,000,000 | ---D | M] -- C:\WINDOWS\installer\{0AAA9C97-74D4-47CE-B089-0B147EF3553C}
  1287. [2012/06/03 08:52:50 | 000,000,000 | ---D | M] -- C:\WINDOWS\installer\{0E64B098-8018-4256-BA23-C316A43AD9B0}
  1288. [2012/06/03 09:01:47 | 000,000,000 | ---D | M] -- C:\WINDOWS\installer\{1111706F-666A-4037-7777-210328764D10}
  1289. [2009/02/26 20:18:00 | 000,000,000 | ---D | M] -- C:\WINDOWS\installer\{15D967B5-A4BE-42AE-9E84-64CD062B25AA}
  1290. [2009/02/26 20:04:04 | 000,000,000 | ---D | M] -- C:\WINDOWS\installer\{205C6BDD-7B73-42DE-8505-9A093F35A238}
  1291. [2010/04/08 19:12:40 | 000,000,000 | ---D | M] -- C:\WINDOWS\installer\{26A24AE4-039D-4CA4-87B4-2F83216019FF}
  1292. [2010/12/25 13:42:00 | 000,000,000 | ---D | M] -- C:\WINDOWS\installer\{2A981294-F14C-4F0F-9627-D793270922F8}
  1293. [2010/12/09 11:15:09 | 000,000,000 | -HSD | M] -- C:\WINDOWS\installer\{2b833ab7-b4db-9942-2793-c52de571a0a6}
  1294. [2010/12/25 13:42:36 | 000,000,000 | ---D | M] -- C:\WINDOWS\installer\{308B6AEA-DE50-4666-996D-0FA461719D6B}
  1295. [2009/02/26 18:59:04 | 000,000,000 | ---D | M] -- C:\WINDOWS\installer\{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}
  1296. [2009/12/26 18:00:47 | 000,000,000 | ---D | M] -- C:\WINDOWS\installer\{541DEAC0-5F3D-45E6-B7CB-94ECF3B96748}
  1297. [2009/02/26 20:04:54 | 000,000,000 | ---D | M] -- C:\WINDOWS\installer\{63C1109E-D977-49ED-BCE3-D00D0BF187D6}
  1298. [2012/04/13 04:44:02 | 000,000,000 | ---D | M] -- C:\WINDOWS\installer\{67E03279-F703-408F-B4BF-46B5FC8D70CD}
  1299. [2009/02/26 20:05:56 | 000,000,000 | ---D | M] -- C:\WINDOWS\installer\{6A92E5C5-0578-443D-91F3-92ECE5F2CAE2}
  1300. [2012/06/03 08:47:19 | 000,000,000 | ---D | M] -- C:\WINDOWS\installer\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}
  1301. [2010/12/25 14:07:16 | 000,000,000 | ---D | M] -- C:\WINDOWS\installer\{7C5B4583-7CBF-4289-B195-03B553959DEA}
  1302. [2009/02/26 19:29:19 | 000,000,000 | ---D | M] -- C:\WINDOWS\installer\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
  1303. [2012/06/29 07:00:39 | 000,000,000 | ---D | M] -- C:\WINDOWS\installer\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
  1304. [2011/01/31 16:44:50 | 000,000,000 | ---D | M] -- C:\WINDOWS\installer\{881F5DE8-9367-4B81-A325-E91BBC6472F9}
  1305. [2012/05/14 04:11:05 | 000,000,000 | ---D | M] -- C:\WINDOWS\installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
  1306. [2012/05/12 16:50:33 | 000,000,000 | ---D | M] -- C:\WINDOWS\installer\{90120000-0020-0409-0000-0000000FF1CE}
  1307. [2012/03/08 20:15:15 | 000,000,000 | ---D | M] -- C:\WINDOWS\installer\{90120000-006E-0409-0000-0000000FF1CE}
  1308. [2012/07/11 14:16:06 | 000,000,000 | ---D | M] -- C:\WINDOWS\installer\{91120000-002F-0000-0000-0000000FF1CE}
  1309. [2010/10/09 11:24:38 | 000,000,000 | ---D | M] -- C:\WINDOWS\installer\{9422C8EA-B0C6-4197-B8FC-DC797658CA00}
  1310. [2012/05/12 16:28:20 | 000,000,000 | ---D | M] -- C:\WINDOWS\installer\{95120000-00AF-0409-0000-0000000FF1CE}
  1311. [2011/09/25 08:17:46 | 000,000,000 | ---D | M] -- C:\WINDOWS\installer\{AC76BA86-7AD7-1033-7B44-A94000000001}
  1312. [2010/09/12 12:07:14 | 000,000,000 | ---D | M] -- C:\WINDOWS\installer\{B2C904FA-DB34-47A3-B8D6-50F4E7AC5808}
  1313. [2009/11/03 12:29:19 | 000,000,000 | ---D | M] -- C:\WINDOWS\installer\{B38A008F-21AA-4478-AE9C-D53976959F6E}
  1314. [2009/11/03 12:30:22 | 000,000,000 | ---D | M] -- C:\WINDOWS\installer\{B441C1D8-58B4-4434-8696-BEA365F3ADA5}
  1315. [2011/05/28 20:24:03 | 000,000,000 | ---D | M] -- C:\WINDOWS\installer\{B8E952E3-A823-443A-8493-39A0CCE0E3EB}
  1316. [2010/09/12 12:07:42 | 000,000,000 | ---D | M] -- C:\WINDOWS\installer\{C39B7B95-5009-4C64-B25B-B1AD6BDD9E8F}
  1317. [2009/02/26 20:06:20 | 000,000,000 | ---D | M] -- C:\WINDOWS\installer\{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}
  1318. [2011/10/30 09:07:14 | 000,000,000 | ---D | M] -- C:\WINDOWS\installer\{E633D396-5188-4E9D-8F6B-BFB8BF3467E8}
  1319. [2012/06/03 08:48:36 | 000,000,000 | ---D | M] -- C:\WINDOWS\installer\{EB879750-CCBD-4013-BFD5-0294D4DA5BD0}
  1320. [2009/02/26 20:05:16 | 000,000,000 | ---D | M] -- C:\WINDOWS\installer\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
  1321. [2009/12/29 12:54:36 | 000,000,000 | ---D | M] -- C:\WINDOWS\installer\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
  1322. [2009/02/26 20:05:49 | 000,000,000 | ---D | M] -- C:\WINDOWS\installer\{F73A5B18-EB75-4B2C-B32D-9457576E2417}
  1323. [2009/11/03 12:51:30 | 000,000,000 | ---D | M] -- C:\WINDOWS\installer\{FDCBB7C3-57ED-4A6C-849F-E66026CE918A}
  1324. [2009/02/26 20:05:29 | 000,000,000 | ---D | M] -- C:\WINDOWS\installer\{FDD810CA-D5E3-40E9-AB7B-36440B0D41EF}
  1325.  
  1326. [color=#A23BEC]< %windir%\system32\*. >[/color]
  1327. [2009/02/26 10:44:59 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\1025
  1328. [2009/02/26 10:44:59 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\1028
  1329. [2009/02/26 10:44:59 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\1031
  1330. [2009/02/26 10:45:21 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\1033
  1331. [2009/02/26 10:44:59 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\1037
  1332. [2009/02/26 10:44:59 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\1041
  1333. [2009/02/26 10:44:59 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\1042
  1334. [2009/02/26 10:44:59 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\1054
  1335. [2009/02/26 10:44:59 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\2052
  1336. [2009/02/26 10:44:59 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\3076
  1337. [2009/02/26 10:44:59 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\3com_dmi
  1338. [2009/11/03 12:29:28 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\Atheros_L1e
  1339. [2012/05/27 18:00:22 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\CatRoot
  1340. [2012/08/10 20:06:40 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\CatRoot2
  1341. [2009/02/26 18:54:18 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\Com
  1342. [2009/12/25 14:12:53 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\config
  1343. [2009/02/26 10:44:59 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\dhcp
  1344. [2009/02/26 20:05:23 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\DirectX
  1345. [2012/07/11 14:16:57 | 000,000,000 | RHSD | M] -- C:\WINDOWS\system32\dllcache
  1346. [2012/06/14 04:45:30 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\drivers
  1347. [2010/12/25 13:45:06 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\DRVSTORE
  1348. [2009/02/26 10:50:37 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\en
  1349. [2012/06/14 04:42:41 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\en-US
  1350. [2009/02/26 10:44:59 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\export
  1351. [2012/07/27 04:46:35 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\FxsTmp
  1352. [2009/02/26 18:55:34 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\ias
  1353. [2009/02/26 10:45:37 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\icsxml
  1354. [2009/02/26 10:44:59 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\IME
  1355. [2009/02/26 10:44:59 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\inetsrv
  1356. [2009/02/26 19:47:05 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\Lang
  1357. [2010/07/08 07:46:51 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\LogFiles
  1358. [2009/02/26 18:54:30 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\Macromed
  1359. [2009/02/26 18:58:37 | 000,000,000 | --SD | M] -- C:\WINDOWS\system32\Microsoft
  1360. [2009/02/26 18:54:11 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\MsDtc
  1361. [2009/02/26 10:44:59 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\mui
  1362. [2009/02/26 10:49:08 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\npp
  1363. [2012/05/27 18:17:17 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\NtmsData
  1364. [2009/02/26 18:58:49 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\oobe
  1365. [2009/12/29 10:37:50 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\PreInstall
  1366. [2009/02/26 10:46:09 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\ras
  1367. [2011/09/30 20:19:39 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\ReinstallBackups
  1368. [2009/12/25 14:08:52 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\Restore
  1369. [2009/02/26 19:45:03 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\RTCOM
  1370. [2009/02/26 10:50:37 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\scripting
  1371. [2009/02/26 19:48:15 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\SDA
  1372. [2009/02/26 10:49:28 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\Setup
  1373. [2009/02/26 10:44:59 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\ShellExt
  1374. [2009/12/26 17:38:17 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\SoftwareDistribution
  1375. [2009/12/29 13:25:08 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\spool
  1376. [2009/02/26 10:50:37 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\usmt
  1377. [2009/12/29 16:36:20 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\wbem
  1378. [2009/02/26 10:44:59 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\wins
  1379. [2009/02/26 18:56:09 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\xircom
  1380. [2012/05/12 16:47:38 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\XPSViewer
  1381.  
  1382. [color=#A23BEC]< %Temp%\smtmp\1\*.* >[/color]
  1383.  
  1384. [color=#A23BEC]< %Temp%\smtmp\2\*.* >[/color]
  1385.  
  1386. [color=#A23BEC]< %Temp%\smtmp\3\*.* >[/color]
  1387.  
  1388. [color=#A23BEC]< %Temp%\smtmp\4\*.* >[/color]
  1389.  
  1390. [color=#A23BEC]< %systemroot%\system32\*.dll /lockedfiles >[/color]
  1391. [3 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]
  1392.  
  1393. [color=#A23BEC]< %systemroot%\Tasks\*.job /lockedfiles >[/color]
  1394.  
  1395. [color=#A23BEC]< %systemroot%\system32\drivers\*.sys /90 >[/color]
  1396.  
  1397. [color=#A23BEC]< %systemroot%\system32\drivers\*.sys /lockedfiles >[/color]
  1398.  
  1399. [color=#A23BEC]< %systemroot%\system32\Spool\prtprocs\w32x86\*.dll >[/color]
  1400. [2008/07/06 08:06:10 | 000,089,088 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\Spool\prtprocs\w32x86\filterpipelineprintproc.dll
  1401. [2006/10/26 23:56:12 | 000,033,104 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\Spool\prtprocs\w32x86\msonpppr.dll
  1402.  
  1403. [color=#A23BEC]< %systemroot%\*. /rp /s >[/color]
  1404.  
  1405. [color=#A23BEC]< %systemroot%\assembly\tmp\*.* /S /MD5 >[/color]
  1406.  
  1407. [color=#A23BEC]< %systemroot%\assembly\temp\*.* /S /MD5 >[/color]
  1408.  
  1409. [color=#A23BEC]< %systemroot%\assembly\GAC\*.* /S /MD5 >[/color]
  1410. [2012/08/10 18:46:50 | 000,005,120 | -HS- | M] ()[b] Unable to obtain MD5[/b] -- C:\WINDOWS\assembly\GAC\Desktop.ini
  1411. [2009/02/26 19:54:25 | 000,110,592 | ---- | M] () MD5=7ECB661F50F34A941A44DAC7241F7D08 -- C:\WINDOWS\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\adodb.dll
  1412. [2009/02/26 19:55:07 | 000,000,196 | ---- | M] () MD5=44300D5320DA9FE1A79F85D3CC8369AB -- C:\WINDOWS\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\__AssemblyInfo__.ini
  1413. [2009/02/26 19:54:25 | 000,004,608 | ---- | M] () MD5=74C8987F1B2549E1DF3EB3874B68ECAC -- C:\WINDOWS\assembly\GAC\Extensibility\7.0.3300.0__b03f5f7f11d50a3a\extensibility.dll
  1414. [2009/02/26 19:55:07 | 000,000,204 | ---- | M] () MD5=B020031BAAF51236A37136B9198E0ECC -- C:\WINDOWS\assembly\GAC\Extensibility\7.0.3300.0__b03f5f7f11d50a3a\__AssemblyInfo__.ini
  1415. [2009/02/26 19:54:22 | 001,215,328 | ---- | M] () MD5=11CD947E77F4B91E61EFDCF7DD1A8766 -- C:\WINDOWS\assembly\GAC\IACore\1.7.6223.0__31bf3856ad364e35\IACore.dll
  1416. [2009/02/26 19:55:07 | 000,000,197 | ---- | M] () MD5=518608D6F97FAB45E5D610E3793EF228 -- C:\WINDOWS\assembly\GAC\IACore\1.7.6223.0__31bf3856ad364e35\__AssemblyInfo__.ini
  1417. [2009/02/26 19:54:23 | 000,082,784 | ---- | M] () MD5=523E4CC118AD2751A6A6C0EA3CC08F70 -- C:\WINDOWS\assembly\GAC\IALoader\1.7.6223.0__31bf3856ad364e35\IALoader.dll
  1418. [2009/02/26 19:55:07 | 000,000,199 | ---- | M] () MD5=3689B8AC7230590BB996DD400FA24139 -- C:\WINDOWS\assembly\GAC\IALoader\1.7.6223.0__31bf3856ad364e35\__AssemblyInfo__.ini
  1419. [2009/02/26 19:54:24 | 008,007,680 | ---- | M] () MD5=5440EE9CD44616D60CDE57EBDB286E95 -- C:\WINDOWS\assembly\GAC\Microsoft.mshtml\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.mshtml.dll
  1420. [2009/02/26 19:55:07 | 000,000,207 | ---- | M] () MD5=1FF29DC2A2197D5984E5D418C904D3DF -- C:\WINDOWS\assembly\GAC\Microsoft.mshtml\7.0.3300.0__b03f5f7f11d50a3a\__AssemblyInfo__.ini
  1421. [2009/02/26 19:53:58 | 000,080,696 | ---- | M] () MD5=54582B7054EAD1EFBF9F0A8218B61C4B -- C:\WINDOWS\assembly\GAC\Microsoft.Office.Interop.Access.Dao\12.0.0.0__71e9bce111e9429c\Microsoft.Office.interop.access.dao.dll
  1422. [2009/02/26 19:55:07 | 000,000,224 | ---- | M] () MD5=553A1D17C8B2C73D599EC156ACA6CB7D -- C:\WINDOWS\assembly\GAC\Microsoft.Office.Interop.Access.Dao\12.0.0.0__71e9bce111e9429c\__AssemblyInfo__.ini
  1423. [2012/03/08 20:20:33 | 001,279,864 | ---- | M] () MD5=A30331358FA33B3C7FDB972D802F57C4 -- C:\WINDOWS\assembly\GAC\Microsoft.Office.Interop.Excel\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Excel.dll
  1424. [2012/03/08 20:22:43 | 000,000,219 | ---- | M] () MD5=1F7EE91CD8AE8A1CBF71624227DB3D63 -- C:\WINDOWS\assembly\GAC\Microsoft.Office.Interop.Excel\12.0.0.0__71e9bce111e9429c\__AssemblyInfo__.ini
  1425. [2012/03/08 20:20:09 | 000,149,368 | ---- | M] () MD5=3AF754C16AF954DB7367FB39C3739387 -- C:\WINDOWS\assembly\GAC\Microsoft.Office.Interop.Graph\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Graph.dll
  1426. [2012/03/08 20:22:44 | 000,000,219 | ---- | M] () MD5=2E0B0F90BA89FA1EDCC289688BF58A7B -- C:\WINDOWS\assembly\GAC\Microsoft.Office.Interop.Graph\12.0.0.0__71e9bce111e9429c\__AssemblyInfo__.ini
  1427. [2009/02/26 19:54:17 | 000,017,208 | ---- | M] () MD5=5B8B3F76720166BF777A6AD38D12010F -- C:\WINDOWS\assembly\GAC\Microsoft.Office.Interop.OneNote\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.OneNote.dll
  1428. [2009/02/26 19:55:07 | 000,000,221 | ---- | M] () MD5=7C1C66BFBB15C0B3C1B9AFEEE2986CF8 -- C:\WINDOWS\assembly\GAC\Microsoft.Office.Interop.OneNote\12.0.0.0__71e9bce111e9429c\__AssemblyInfo__.ini
  1429. [2011/12/16 09:04:18 | 000,350,080 | ---- | M] () MD5=5C62BA3A0FEE2D763BB79F858204D09D -- C:\WINDOWS\assembly\GAC\Microsoft.Office.Interop.PowerPoint\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.PowerPoint.dll
  1430. [2011/12/16 09:04:25 | 000,000,224 | ---- | M] () MD5=EF446200B015C1662F07955E95322DCE -- C:\WINDOWS\assembly\GAC\Microsoft.Office.Interop.PowerPoint\12.0.0.0__71e9bce111e9429c\__AssemblyInfo__.ini
  1431. [2010/10/09 11:12:50 | 000,019,320 | ---- | M] () MD5=3CC99DCCB5B9F51483AF7532A6D65F92 -- C:\WINDOWS\assembly\GAC\Microsoft.Office.Interop.SmartTag\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.SmartTag.dll
  1432. [2010/10/09 11:15:46 | 000,000,222 | ---- | M] () MD5=3C3CC20ADA56EB38EAF363E7A6BEEE93 -- C:\WINDOWS\assembly\GAC\Microsoft.Office.Interop.SmartTag\12.0.0.0__71e9bce111e9429c\__AssemblyInfo__.ini
  1433. [2012/03/08 20:20:48 | 000,870,256 | ---- | M] () MD5=54719FDC6A752DC78B364A3980DBC2E9 -- C:\WINDOWS\assembly\GAC\Microsoft.Office.Interop.Word\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Word.dll
  1434. [2012/03/08 20:22:45 | 000,000,218 | ---- | M] () MD5=2A6411671028D5A543646989CB01DBD8 -- C:\WINDOWS\assembly\GAC\Microsoft.Office.Interop.Word\12.0.0.0__71e9bce111e9429c\__AssemblyInfo__.ini
  1435. [2009/02/26 19:54:23 | 000,013,312 | ---- | M] () MD5=D80746B2F94A3A28E380735D4B8A9EA3 -- C:\WINDOWS\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.stdformat.dll
  1436. [2009/02/26 19:55:07 | 000,000,210 | ---- | M] () MD5=A57C6028DAE8D855FFC2BBC2D6E57246 -- C:\WINDOWS\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\__AssemblyInfo__.ini
  1437. [2009/02/26 19:54:07 | 000,371,496 | ---- | M] () MD5=BA4FB255E3887A039CB74A5870192220 -- C:\WINDOWS\assembly\GAC\Microsoft.Vbe.Interop.Forms\11.0.0.0__71e9bce111e9429c\Microsoft.Vbe.Interop.Forms.dll
  1438. [2009/02/26 19:55:07 | 000,000,216 | ---- | M] () MD5=E9A3D4644D3B7C20C5EE60970BC5681C -- C:\WINDOWS\assembly\GAC\Microsoft.Vbe.Interop.Forms\11.0.0.0__71e9bce111e9429c\__AssemblyInfo__.ini
  1439. [2012/03/08 20:20:14 | 000,063,336 | ---- | M] () MD5=B60C87E3CD3ACFA71DAD8145C66D6E9C -- C:\WINDOWS\assembly\GAC\Microsoft.Vbe.Interop\12.0.0.0__71e9bce111e9429c\Microsoft.Vbe.Interop.dll
  1440. [2012/03/08 20:22:44 | 000,000,210 | ---- | M] () MD5=F4663120ABF3E8FF67D7AAF33BD68EDF -- C:\WINDOWS\assembly\GAC\Microsoft.Vbe.Interop\12.0.0.0__71e9bce111e9429c\__AssemblyInfo__.ini
  1441. [2009/02/26 19:54:23 | 000,229,376 | ---- | M] () MD5=FDA48714F6A291E25A1A219E89D59D9B -- C:\WINDOWS\assembly\GAC\mscomctl\10.0.4504.0__31bf3856ad364e35\MSCOMCTL.DLL
  1442. [2009/02/26 19:55:07 | 000,000,200 | ---- | M] () MD5=481E504FBEA25FBF5408DB65F44FA5FA -- C:\WINDOWS\assembly\GAC\mscomctl\10.0.4504.0__31bf3856ad364e35\__AssemblyInfo__.ini
  1443. [2009/02/26 19:54:25 | 000,004,096 | ---- | M] () MD5=AAA2E20588E154A10747BF1B31B55125 -- C:\WINDOWS\assembly\GAC\MSDATASRC\7.0.3300.0__b03f5f7f11d50a3a\msdatasrc.dll
  1444. [2009/02/26 19:55:07 | 000,000,200 | ---- | M] () MD5=C1F5FADD74964959FC4394832BBC3E59 -- C:\WINDOWS\assembly\GAC\MSDATASRC\7.0.3300.0__b03f5f7f11d50a3a\__AssemblyInfo__.ini
  1445. [2010/10/09 11:12:53 | 000,423,784 | ---- | M] () MD5=DF7CBCD2DB89880A8A92EA134611B038 -- C:\WINDOWS\assembly\GAC\office\12.0.0.0__71e9bce111e9429c\OFFICE.DLL
  1446. [2010/10/09 11:15:45 | 000,000,195 | ---- | M] () MD5=7C4A765B5AC30DBD8B53CD071B73840C -- C:\WINDOWS\assembly\GAC\office\12.0.0.0__71e9bce111e9429c\__AssemblyInfo__.ini
  1447. [2010/10/09 11:13:42 | 000,000,898 | ---- | M] () MD5=DCC5E6E13187570656FB60EBB51751A8 -- C:\WINDOWS\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.Excel\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.Excel.config
  1448. [2010/10/09 11:13:42 | 000,011,144 | ---- | M] () MD5=AA14986D717AF25CF6362C69BFA13359 -- C:\WINDOWS\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.Excel\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.Excel.dll
  1449. [2010/10/09 11:15:44 | 000,000,231 | ---- | M] () MD5=4B9F522E4B403A5B090681600D9070C2 -- C:\WINDOWS\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.Excel\12.0.0.0__71e9bce111e9429c\__AssemblyInfo__.ini
  1450. [2010/10/09 11:12:48 | 000,000,898 | ---- | M] () MD5=CC9313747F69E39B66D6B7EFE22FD328 -- C:\WINDOWS\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.Graph\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.Graph.config
  1451. [2010/10/09 11:12:48 | 000,011,128 | ---- | M] () MD5=CE0EDD4D644A7C624FA79E1B14B00323 -- C:\WINDOWS\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.Graph\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.Graph.dll
  1452. [2010/10/09 11:15:46 | 000,000,231 | ---- | M] () MD5=69CD87BB9C6DA0537CE63A53E7092F32 -- C:\WINDOWS\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.Graph\12.0.0.0__71e9bce111e9429c\__AssemblyInfo__.ini
  1453. [2010/10/09 11:14:10 | 000,000,908 | ---- | M] () MD5=49E684EE5FF535D8FF08056769A9F9E6 -- C:\WINDOWS\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.PowerPoint\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.PowerPoint.config
  1454. [2010/10/09 11:14:10 | 000,011,152 | ---- | M] () MD5=445F0A07EAE252BE0464273767B22453 -- C:\WINDOWS\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.PowerPoint\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.PowerPoint.dll
  1455. [2010/10/09 11:15:46 | 000,000,236 | ---- | M] () MD5=CC90EB2A26912AB4C5102CDEF753E91F -- C:\WINDOWS\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.PowerPoint\12.0.0.0__71e9bce111e9429c\__AssemblyInfo__.ini
  1456. [2010/10/09 11:12:50 | 000,000,904 | ---- | M] () MD5=AC1B446DC4969CE1D3F605D9CE098DDB -- C:\WINDOWS\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.SmartTag\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.SmartTag.config
  1457. [2010/10/09 11:12:50 | 000,011,136 | ---- | M] () MD5=C2F8D5E1D25BCAE6516E88AA0342FB6E -- C:\WINDOWS\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.SmartTag\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.SmartTag.dll
  1458. [2010/10/09 11:15:46 | 000,000,234 | ---- | M] () MD5=79D81B7149BDC2CD7CB5B48D05D75F37 -- C:\WINDOWS\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.SmartTag\12.0.0.0__71e9bce111e9429c\__AssemblyInfo__.ini
  1459. [2012/03/08 20:20:41 | 000,000,896 | ---- | M] () MD5=33324BF6E22A322816FD4C1C58BB032C -- C:\WINDOWS\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.Word\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.Word.config
  1460. [2012/03/08 20:20:41 | 000,011,144 | ---- | M] () MD5=2CE989B779144889EA1F30A046DF13CB -- C:\WINDOWS\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.Word\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.Word.dll
  1461. [2012/03/08 20:22:46 | 000,000,230 | ---- | M] () MD5=314847472C40A8C3574130C873856447 -- C:\WINDOWS\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.Word\12.0.0.0__71e9bce111e9429c\__AssemblyInfo__.ini
  1462. [2010/10/09 11:12:56 | 000,000,880 | ---- | M] () MD5=AEEFC22DA8D1EBBA43AC2E8B0599DFE3 -- C:\WINDOWS\assembly\GAC\Policy.11.0.Microsoft.Vbe.Interop\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Vbe.Interop.config
  1463. [2010/10/09 11:12:57 | 000,011,112 | ---- | M] () MD5=FFD49049DE84727DE54922181E0AFBA5 -- C:\WINDOWS\assembly\GAC\Policy.11.0.Microsoft.Vbe.Interop\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Vbe.Interop.dll
  1464. [2010/10/09 11:15:45 | 000,000,222 | ---- | M] () MD5=122F7F6C517CFA276B874A7F20A796B4 -- C:\WINDOWS\assembly\GAC\Policy.11.0.Microsoft.Vbe.Interop\12.0.0.0__71e9bce111e9429c\__AssemblyInfo__.ini
  1465. [2010/10/09 11:12:54 | 000,000,850 | ---- | M] () MD5=5717939AB3C1CFFDF93DDC9A14856755 -- C:\WINDOWS\assembly\GAC\Policy.11.0.office\12.0.0.0__71e9bce111e9429c\Policy.11.0.office.config
  1466. [2010/10/09 11:12:54 | 000,010,576 | ---- | M] () MD5=B6C7C64CB13A418DF859A018EC93727B -- C:\WINDOWS\assembly\GAC\Policy.11.0.office\12.0.0.0__71e9bce111e9429c\Policy.11.0.Office.dll
  1467. [2010/10/09 11:15:45 | 000,000,207 | ---- | M] () MD5=E7E59ABBFF65ED4C142D4006A6197E0E -- C:\WINDOWS\assembly\GAC\Policy.11.0.office\12.0.0.0__71e9bce111e9429c\__AssemblyInfo__.ini
  1468. [2009/02/26 19:54:23 | 000,016,384 | ---- | M] () MD5=E1EEB7E26AB04075EECC7275239B20B3 -- C:\WINDOWS\assembly\GAC\stdole\7.0.3300.0__b03f5f7f11d50a3a\stdole.dll
  1469. [2009/02/26 19:55:07 | 000,000,197 | ---- | M] () MD5=FC75E46DA5B9F9263B958C7B027ACBFC -- C:\WINDOWS\assembly\GAC\stdole\7.0.3300.0__b03f5f7f11d50a3a\__AssemblyInfo__.ini
  1470.  
  1471. [color=#A23BEC]< %systemroot%\assembly\GAC_32\*.* /S /MD5 >[/color]
  1472. [2012/06/15 07:41:39 | 000,069,120 | ---- | M] () MD5=DC426A365577F27187F99EB506ECD5D1 -- C:\WINDOWS\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
  1473. [2012/06/15 07:41:53 | 000,072,192 | ---- | M] () MD5=29B35A999E341A37BE67771BE01CC275 -- C:\WINDOWS\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
  1474. [2009/12/29 13:25:24 | 000,163,840 | ---- | M] () MD5=36BDD82A92AA704034475C2DEF7FBD29 -- C:\WINDOWS\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\3.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll
  1475. [2012/06/15 07:42:28 | 000,066,728 | ---- | M] () MD5=C01B81BB10AD14DBC5C4ECD350638096 -- C:\WINDOWS\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\big5.nlp
  1476. [2012/06/15 07:42:28 | 000,082,172 | ---- | M] () MD5=EE1F60F8774D74BED8B13498F3FE737A -- C:\WINDOWS\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\bopomofo.nlp
  1477. [2012/06/15 07:42:29 | 000,116,756 | ---- | M] () MD5=F6DFDA5A31162D848634504565F6D321 -- C:\WINDOWS\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\ksc.nlp
  1478. [2012/06/15 07:42:28 | 004,550,656 | ---- | M] () MD5=3BDAE07DA44654FA393A2A2BA242EA41 -- C:\WINDOWS\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
  1479. [2012/06/15 07:42:29 | 000,059,342 | ---- | M] () MD5=DA5748A89E22A3932387E65694B25BBB -- C:\WINDOWS\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\normidna.nlp
  1480. [2012/06/15 07:42:29 | 000,045,794 | ---- | M] () MD5=3831A5E217D6FA828CCE1011DA26E677 -- C:\WINDOWS\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\normnfc.nlp
  1481. [2012/06/15 07:42:29 | 000,039,284 | ---- | M] () MD5=DBDE664E0BA4BACD0A6A04AE2232B205 -- C:\WINDOWS\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\normnfd.nlp
  1482. [2012/06/15 07:42:29 | 000,066,384 | ---- | M] () MD5=C9B88B759FE81D59CE8EBF5A0A8EB75A -- C:\WINDOWS\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\normnfkc.nlp
  1483. [2012/06/15 07:42:29 | 000,060,294 | ---- | M] () MD5=3CAB6AB66759FCDF73B61EE262C9ACF4 -- C:\WINDOWS\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\normnfkd.nlp
  1484. [2012/06/15 07:42:29 | 000,083,748 | ---- | M] () MD5=54144F43EDF5AA8F504A30E7C1D1A7B5 -- C:\WINDOWS\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\prc.nlp
  1485. [2012/06/15 07:42:29 | 000,083,748 | ---- | M] () MD5=901863C68E6523336CAC602FE9320ABC -- C:\WINDOWS\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\prcp.nlp
  1486. [2012/06/15 07:42:28 | 000,262,148 | ---- | M] () MD5=FB59D247F7143C3B9683A547E808A88B -- C:\WINDOWS\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sortkey.nlp
  1487. [2012/06/15 07:42:28 | 000,020,320 | ---- | M] () MD5=FF13BA175F0013D2311827E0D438C60B -- C:\WINDOWS\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sorttbls.nlp
  1488. [2012/06/15 07:42:29 | 000,028,288 | ---- | M] () MD5=09E420F90A329BDA68477FA4AF43CB28 -- C:\WINDOWS\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\xjis.nlp
  1489. [2012/05/12 16:26:17 | 004,214,784 | ---- | M] () MD5=E0EB0BDC866E2C0CC792B83BD2422501 -- C:\WINDOWS\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\PresentationCore.dll
  1490. [2012/06/15 07:42:34 | 000,486,400 | ---- | M] () MD5=759FD3779911F89C450CCAE06B92AE3A -- C:\WINDOWS\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
  1491. [2012/06/15 07:42:37 | 002,933,248 | ---- | M] () MD5=16F96C1496CBD0965285AB19A9271D02 -- C:\WINDOWS\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
  1492. [2012/06/15 07:42:06 | 000,258,048 | ---- | M] () MD5=9631B15DB7C43C267636FF43C3075E07 -- C:\WINDOWS\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
  1493. [2012/06/15 07:42:06 | 000,113,664 | ---- | M] () MD5=E786C33D35D39C5CCB523AECC18D7BD7 -- C:\WINDOWS\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
  1494. [2012/05/12 16:26:24 | 000,368,640 | ---- | M] () MD5=E915933B0E68B61A6AC22E06BD1AD651 -- C:\WINDOWS\assembly\GAC_32\System.Printing\3.0.0.0__31bf3856ad364e35\System.Printing.dll
  1495. [2012/06/15 07:42:03 | 000,261,632 | ---- | M] () MD5=F054572A92573CA32D5F3AA8C15D2BAC -- C:\WINDOWS\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
  1496. [2012/06/15 07:41:03 | 005,246,976 | ---- | M] () MD5=661268A6BEEF1C1B0D1B9137F530A9FD -- C:\WINDOWS\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
  1497.  
  1498. [color=#A23BEC]< %SystemRoot%\assembly\GAC_MSIL\*.* /S /MD5 >[/color]
  1499. [2012/06/15 07:41:47 | 000,010,752 | ---- | M] () MD5=A5A56B4957BD59D324821522FE14F751 -- C:\WINDOWS\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
  1500. [2012/06/15 07:41:10 | 000,507,904 | ---- | M] () MD5=B8FE2350B2236EE3D1CECA34E0C0FF17 -- C:\WINDOWS\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
  1501. [2012/06/15 07:41:38 | 000,013,312 | ---- | M] () MD5=107F49F1BF0FB27A6CD758EB8C4D95A0 -- C:\WINDOWS\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
  1502. [2012/06/15 07:41:40 | 000,008,192 | ---- | M] () MD5=6CD7461E06CB8BAEE3B16C3D7F637CD0 -- C:\WINDOWS\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
  1503. [2012/06/15 07:41:42 | 000,077,824 | ---- | M] () MD5=24F0385D06BD86A97412B8905483313E -- C:\WINDOWS\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
  1504. [2012/06/15 07:41:44 | 000,006,656 | ---- | M] () MD5=11F3AC2D47E566615819F5BF0DD18379 -- C:\WINDOWS\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
  1505. [2009/12/29 13:26:42 | 000,106,496 | ---- | M] () MD5=29CED3B606BA7E2B49E52931C5CB53B7 -- C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Conversion.v3.5\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Conversion.v3.5.dll
  1506. [2012/06/15 07:42:09 | 000,348,160 | ---- | M] () MD5=996AAEEC01C734347DE8A72542FD1C12 -- C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
  1507. [2009/12/29 13:26:44 | 000,733,184 | ---- | M] () MD5=31C6E94759BF4D2FBE3239FFA717967D -- C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Engine\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
  1508. [2012/06/15 07:42:21 | 000,036,864 | ---- | M] () MD5=D2A1C3150E43738BAB3D0AD9921B3E50 -- C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
  1509. [2009/12/29 13:26:44 | 000,036,864 | ---- | M] () MD5=17C6F3F73858732DE59D6D957958E9AF -- C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Framework\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
  1510. [2009/12/29 13:26:45 | 000,802,816 | ---- | M] () MD5=37F17D4698086C90127BBD90E73D7FE2 -- C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Tasks.v3.5\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.v3.5.dll
  1511. [2012/06/15 07:42:24 | 000,655,360 | ---- | M] () MD5=8A3F5B72C3F402C8D33027A4C77F55AC -- C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
  1512. [2009/12/29 13:26:45 | 000,094,208 | ---- | M] () MD5=E32A06F647517D0DEA80F29B459E8FA2 -- C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Utilities.v3.5\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.v3.5.dll
  1513. [2012/06/15 07:42:27 | 000,077,824 | ---- | M] () MD5=640BF6BB259B53BEFF59135645C63B18 -- C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
  1514. [2012/06/15 07:41:55 | 000,749,568 | ---- | M] () MD5=EB535D00C508119EEE4042B737165A3B -- C:\WINDOWS\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
  1515. [2009/12/29 13:25:24 | 000,397,312 | ---- | M] () MD5=66F6B3248D6C39CEFA49174133A694FE -- C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\3.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.dll
  1516. [2012/06/15 07:41:53 | 000,110,592 | ---- | M] () MD5=D676BC7C829F86A215676281A1032C6B -- C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
  1517. [2012/06/15 07:41:52 | 000,372,736 | ---- | M] () MD5=226956F70AEBBBF5ACBC9ADA6522B6F6 -- C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
  1518. [2012/06/15 07:42:00 | 000,028,672 | ---- | M] () MD5=3D61BFCBE13C2DC8F5AE20BF02145322 -- C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
  1519. [2012/06/15 07:41:48 | 000,659,456 | ---- | M] () MD5=EFC806A1C4C6CE9F69AECE0AB72C1E34 -- C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
  1520. [2009/12/29 13:26:43 | 000,041,984 | ---- | M] () MD5=9F065BF574C956B85DB355C32E7E995E -- C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualC.STLCLR\1.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.STLCLR.dll
  1521. [2012/06/15 07:42:32 | 000,005,632 | ---- | M] () MD5=7E50D25F9A5BC75F22CA7AEB52176CA2 -- C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
  1522. [2012/06/15 07:42:01 | 000,012,800 | ---- | M] () MD5=B27AA2EA41728FAF5E9642CFD2958FB9 -- C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
  1523. [2012/06/15 07:41:45 | 000,032,768 | ---- | M] () MD5=D251A67B7D6DE2194F6E264055E020FB -- C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
  1524. [2012/06/15 07:41:43 | 000,007,168 | ---- | M] () MD5=9659028AFA77387D6D2BF4280C10AB94 -- C:\WINDOWS\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
  1525. [2009/12/29 13:25:37 | 000,598,016 | ---- | M] () MD5=28595FA306E58AACD7DAFF001F430703 -- C:\WINDOWS\assembly\GAC_MSIL\PresentationBuildTasks\3.0.0.0__31bf3856ad364e35\PresentationBuildTasks.dll
  1526. [2009/12/29 13:25:29 | 000,032,768 | ---- | M] () MD5=93F9CC2360815D8EF955407CF92B38AA -- C:\WINDOWS\assembly\GAC_MSIL\PresentationCFFRasterizer\3.0.0.0__31bf3856ad364e35\PresentationCFFRasterizer.dll
  1527. [2009/12/29 13:25:38 | 000,046,104 | ---- | M] () MD5=8BA7C024070F2B7FDD98ED8A4BA41789 -- C:\WINDOWS\assembly\GAC_MSIL\PresentationFontCache\3.0.0.0__31bf3856ad364e35\PresentationFontCache.exe
  1528. [2009/12/29 13:25:41 | 000,196,608 | ---- | M] () MD5=0C488A21B5A63055CB7736E3E0C75B1F -- C:\WINDOWS\assembly\GAC_MSIL\PresentationFramework.Aero\3.0.0.0__31bf3856ad364e35\PresentationFramework.Aero.dll
  1529. [2009/12/29 13:25:42 | 000,139,264 | ---- | M] () MD5=DA8417F8973EC51F0F1859CA0B334FC5 -- C:\WINDOWS\assembly\GAC_MSIL\PresentationFramework.Classic\3.0.0.0__31bf3856ad364e35\PresentationFramework.Classic.dll
  1530. [2009/12/29 13:25:42 | 000,397,312 | ---- | M] () MD5=7E61032F4F2BAB036B859D3B22D26DD0 -- C:\WINDOWS\assembly\GAC_MSIL\PresentationFramework.Luna\3.0.0.0__31bf3856ad364e35\PresentationFramework.Luna.dll
  1531. [2009/12/29 13:25:42 | 000,163,840 | ---- | M] () MD5=D1E117EDDEFEB220351BE0C7B27A4646 -- C:\WINDOWS\assembly\GAC_MSIL\PresentationFramework.Royale\3.0.0.0__31bf3856ad364e35\PresentationFramework.Royale.dll
  1532. [2012/05/12 16:26:22 | 005,283,840 | ---- | M] () MD5=2CFE88EE740380F4B594B2DE58AA933D -- C:\WINDOWS\assembly\GAC_MSIL\PresentationFramework\3.0.0.0__31bf3856ad364e35\PresentationFramework.dll
  1533. [2009/12/29 13:25:44 | 000,864,256 | ---- | M] () MD5=428D3714C85BACE55476C91E0D90E495 -- C:\WINDOWS\assembly\GAC_MSIL\PresentationUI\3.0.0.0__31bf3856ad364e35\PresentationUI.dll
  1534. [2012/05/12 16:26:24 | 000,532,480 | ---- | M] () MD5=E785AE3CC6341D63346B5F899B6FE7AC -- C:\WINDOWS\assembly\GAC_MSIL\ReachFramework\3.0.0.0__31bf3856ad364e35\ReachFramework.dll
  1535. [2009/12/29 13:26:46 | 000,005,632 | ---- | M] () MD5=807B70A78ACE7D01F769FE502A769E67 -- C:\WINDOWS\assembly\GAC_MSIL\Sentinel.v3.5Client\3.5.0.0__b03f5f7f11d50a3a\Sentinel.v3.5Client.dll
  1536. [2010/06/11 23:18:23 | 000,110,592 | ---- | M] () MD5=BD6B60E0F4FA84FF4E3089EDF9B81C9A -- C:\WINDOWS\assembly\GAC_MSIL\SMDiagnostics\3.0.0.0__b77a5c561934e089\SMdiagnostics.dll
  1537. [2012/06/15 07:42:32 | 000,110,592 | ---- | M] () MD5=0AD1C94AB2D36B79B9F2B54EADEB300A -- C:\WINDOWS\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
  1538. [2009/12/29 13:26:47 | 000,045,056 | ---- | M] () MD5=B34B75256D536385B927193FB1DCBB81 -- C:\WINDOWS\assembly\GAC_MSIL\System.AddIn.Contract\2.0.0.0__b03f5f7f11d50a3a\System.AddIn.Contract.dll
  1539. [2012/05/12 16:46:49 | 000,163,840 | ---- | M] () MD5=AA647B387E4086FDE32C8E976732F635 -- C:\WINDOWS\assembly\GAC_MSIL\System.AddIn\3.5.0.0__b77a5c561934e089\System.AddIn.dll
  1540. [2009/12/29 13:26:57 | 000,057,344 | ---- | M] () MD5=34AAEA0DCF908A7D3C1D8C2132B0E4D4 -- C:\WINDOWS\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\3.5.0.0__31bf3856ad364e35\System.ComponentModel.DataAnnotations.dll
  1541. [2012/06/15 07:42:33 | 000,081,920 | ---- | M] () MD5=41BC941761FB3D1E21826C3C0E3CEEEE -- C:\WINDOWS\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
  1542. [2012/06/15 07:42:36 | 000,425,984 | ---- | M] () MD5=C1C4025B5F5311AC8BCC318B0C244D58 -- C:\WINDOWS\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
  1543. [2009/12/29 13:26:49 | 000,667,648 | ---- | M] () MD5=6617F24759BB1F3873C88AD9E0DF0435 -- C:\WINDOWS\assembly\GAC_MSIL\System.Core\3.5.0.0__b77a5c561934e089\System.Core.dll
  1544. [2009/12/29 13:26:50 | 000,053,248 | ---- | M] () MD5=1FDC244EEDD9B7804C7829DA11F1522E -- C:\WINDOWS\assembly\GAC_MSIL\System.Data.DataSetExtensions\3.5.0.0__b77a5c561934e089\System.Data.DataSetExtensions.dll
  1545. [2009/12/29 13:26:50 | 000,229,376 | ---- | M] () MD5=3FE6C3CDB01F039110152B1B0AE4980F -- C:\WINDOWS\assembly\GAC_MSIL\System.Data.Entity.Design\3.5.0.0__b77a5c561934e089\System.Data.Entity.Design.dll
  1546. [2009/12/29 13:26:51 | 002,879,488 | ---- | M] () MD5=CB45DFC6F9E1F954A718769D02D9C312 -- C:\WINDOWS\assembly\GAC_MSIL\System.Data.Entity\3.5.0.0__b77a5c561934e089\System.Data.Entity.dll
  1547. [2009/12/29 13:26:41 | 000,684,032 | ---- | M] () MD5=DDFB10C4A14ADD5D0A6C96E6DC3D29DF -- C:\WINDOWS\assembly\GAC_MSIL\System.Data.Linq\3.5.0.0__b77a5c561934e089\System.Data.Linq.dll
  1548. [2009/12/29 13:32:43 | 000,294,912 | ---- | M] () MD5=2F69FF4ED483D3FF399534F99BD4694A -- C:\WINDOWS\assembly\GAC_MSIL\System.Data.Services.Client\3.5.0.0__b77a5c561934e089\System.Data.Services.Client.dll
  1549. [2009/12/29 13:26:40 | 000,114,688 | ---- | M] () MD5=0A7F3B1C1A9CC722F48A7A16394F61C4 -- C:\WINDOWS\assembly\GAC_MSIL\System.Data.Services.Design\3.5.0.0__b77a5c561934e089\System.Data.Services.Design.dll
  1550. [2009/12/29 13:32:44 | 000,442,368 | ---- | M] () MD5=AE975C122A442146D7D5A6A996C42F91 -- C:\WINDOWS\assembly\GAC_MSIL\System.Data.Services\3.5.0.0__b77a5c561934e089\System.Data.Services.dll
  1551. [2009/02/26 20:05:16 | 000,236,392 | ---- | M] () MD5=A200E7209B42BAA18F438695CE45B0B9 -- C:\WINDOWS\assembly\GAC_MSIL\System.Data.SqlServerCe\9.0.242.0__89845dcd8080cc91\System.Data.SqlServerCe.dll
  1552. [2012/06/15 07:42:39 | 000,745,472 | ---- | M] () MD5=6388F9A7AA6E22DDA2E0D84E5BCE537C -- C:\WINDOWS\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
  1553. [2012/06/15 07:42:40 | 000,970,752 | ---- | M] () MD5=97DDAFB2A7B33DC3F746EF35C9EDF892 -- C:\WINDOWS\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
  1554. [2012/06/15 07:41:18 | 005,062,656 | ---- | M] () MD5=AB351110166CC9DB45B62F0EA79834F7 -- C:\WINDOWS\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
  1555. [2009/12/29 13:26:41 | 000,286,720 | ---- | M] () MD5=4C6FBCBB7E7D4E3B0CAAA42043B6A01F -- C:\WINDOWS\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\3.5.0.0__b77a5c561934e089\System.DirectoryServices.AccountManagement.dll
  1556. [2012/06/15 07:41:35 | 000,188,416 | ---- | M] () MD5=F0D4CE77F1F9D9A7468335B1CE4C061B -- C:\WINDOWS\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
  1557. [2012/06/15 07:41:33 | 000,401,408 | ---- | M] () MD5=F485CF34C45F850B25A7E38B08A7C435 -- C:\WINDOWS\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
  1558. [2012/06/15 07:41:13 | 000,081,920 | ---- | M] () MD5=36ABC218228871A981027174216A2DA8 -- C:\WINDOWS\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
  1559. [2012/06/15 07:42:14 | 000,630,784 | ---- | M] () MD5=CA8F147526086A49D7B308C3CDF3FB28 -- C:\WINDOWS\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
  1560. [2009/12/29 13:25:45 | 000,126,976 | ---- | M] () MD5=311A345681A73C66D3EE49C5157A473B -- C:\WINDOWS\assembly\GAC_MSIL\System.IdentityModel.Selectors\3.0.0.0__b77a5c561934e089\System.IdentityModel.Selectors.dll
  1561. [2010/06/11 23:18:24 | 000,438,272 | ---- | M] () MD5=DB076F159D89B90924C465222BA128FE -- C:\WINDOWS\assembly\GAC_MSIL\System.IdentityModel\3.0.0.0__b77a5c561934e089\System.IdentityModel.dll
  1562. [2009/12/29 13:25:25 | 000,131,072 | ---- | M] () MD5=80E67BFFD101CC6312B489BEE255430D -- C:\WINDOWS\assembly\GAC_MSIL\System.IO.Log\3.0.0.0__b03f5f7f11d50a3a\System.IO.Log.dll
  1563. [2009/12/29 13:26:52 | 000,143,360 | ---- | M] () MD5=217A1E1DED132261C825313A7FB2616C -- C:\WINDOWS\assembly\GAC_MSIL\System.Management.Instrumentation\3.5.0.0__b77a5c561934e089\System.Management.Instrumentation.dll
  1564. [2012/06/15 07:42:26 | 000,372,736 | ---- | M] () MD5=EBAADBBFB6C455E54EB6A0E47267D33C -- C:\WINDOWS\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
  1565. [2012/06/15 07:42:22 | 000,258,048 | ---- | M] () MD5=7F9F1F17D368EE1EEA7E246FD934B9EC -- C:\WINDOWS\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
  1566. [2009/12/29 13:26:58 | 000,233,472 | ---- | M] () MD5=2E66DE31546A6AB3A8160CE337E1C6BC -- C:\WINDOWS\assembly\GAC_MSIL\System.Net\3.5.0.0__b03f5f7f11d50a3a\System.Net.dll
  1567. [2012/06/15 07:42:11 | 000,303,104 | ---- | M] () MD5=2849F13593D2712CCB97FFBDD3C1232E -- C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
  1568. [2012/06/15 07:42:08 | 000,131,072 | ---- | M] () MD5=C415D86079D431E7E1E32D0835A3FE81 -- C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
  1569. [2010/06/11 23:18:24 | 000,970,752 | ---- | M] () MD5=2CF02DF42A90A054D546BF3A85409DC4 -- C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Serialization\3.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
  1570. [2012/06/15 07:42:04 | 000,258,048 | ---- | M] () MD5=0DFCD96DED6DB52064203C07B927357E -- C:\WINDOWS\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
  1571. [2009/12/29 13:25:28 | 000,073,728 | ---- | M] () MD5=A80F41C8B2168E8B3ADD0AA4FCBDDC93 -- C:\WINDOWS\assembly\GAC_MSIL\System.ServiceModel.Install\3.0.0.0__b77a5c561934e089\System.ServiceModel.Install.dll
  1572. [2010/06/11 23:18:27 | 000,032,768 | ---- | M] () MD5=764E1A3E53C5885976F2EE6E206208EF -- C:\WINDOWS\assembly\GAC_MSIL\System.ServiceModel.WasHosting\3.0.0.0__b77a5c561934e089\System.ServiceModel.WasHosting.dll
  1573. [2009/12/29 13:26:39 | 000,569,344 | ---- | M] () MD5=1565B7FAFDFA6EEE16101388E57E749F -- C:\WINDOWS\assembly\GAC_MSIL\System.ServiceModel.Web\3.5.0.0__31bf3856ad364e35\System.ServiceModel.Web.dll
  1574. [2010/06/11 23:18:25 | 005,967,872 | ---- | M] () MD5=4120A37565491CA998E226BCBE8EF6E8 -- C:\WINDOWS\assembly\GAC_MSIL\System.ServiceModel\3.0.0.0__b77a5c561934e089\System.ServiceModel.dll
  1575. [2012/06/15 07:41:51 | 000,114,688 | ---- | M] () MD5=50D2943D426BA91771AD87FDEC802AC3 -- C:\WINDOWS\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
  1576. [2009/12/29 13:25:39 | 000,688,128 | ---- | M] () MD5=31588B867657A7DF046AC1908550D73C -- C:\WINDOWS\assembly\GAC_MSIL\System.Speech\3.0.0.0__31bf3856ad364e35\System.Speech.dll
  1577. [2009/12/29 13:26:59 | 000,077,824 | ---- | M] () MD5=2C3559C513F7CD6F95DC382F31A6A22D -- C:\WINDOWS\assembly\GAC_MSIL\System.Web.Abstractions\3.5.0.0__31bf3856ad364e35\System.Web.Abstractions.dll
  1578. [2009/12/29 13:27:00 | 000,032,768 | ---- | M] () MD5=9E0D101B086297D5E166E03A8ACBF260 -- C:\WINDOWS\assembly\GAC_MSIL\System.Web.DynamicData.Design\3.5.0.0__31bf3856ad364e35\System.Web.DynamicData.Design.dll
  1579. [2009/12/29 13:32:45 | 000,229,376 | ---- | M] () MD5=CC8D03C33986926A68696DAAAB5FF2F8 -- C:\WINDOWS\assembly\GAC_MSIL\System.Web.DynamicData\3.5.0.0__31bf3856ad364e35\System.Web.DynamicData.dll
  1580. [2009/12/29 13:26:53 | 000,131,072 | ---- | M] () MD5=A6A5297AAD0A9BA8829D20B1CBD68D32 -- C:\WINDOWS\assembly\GAC_MSIL\System.Web.Entity.Design\3.5.0.0__b77a5c561934e089\System.Web.Entity.Design.dll
  1581. [2009/12/29 13:32:44 | 000,139,264 | ---- | M] () MD5=E42797003722BD930D83AB26998394D8 -- C:\WINDOWS\assembly\GAC_MSIL\System.Web.Entity\3.5.0.0__b77a5c561934e089\System.Web.Entity.dll
  1582. [2009/12/29 13:27:02 | 000,335,872 | ---- | M] () MD5=7E83B8040233DDCDE03CF7F0A5F2837B -- C:\WINDOWS\assembly\GAC_MSIL\System.Web.Extensions.Design\3.5.0.0__31bf3856ad364e35\System.Web.Extensions.Design.dll
  1583. [2012/01/01 10:54:07 | 001,277,952 | ---- | M] () MD5=821B0AAB24CB11417381F8AE881309A2 -- C:\WINDOWS\assembly\GAC_MSIL\System.Web.Extensions\3.5.0.0__31bf3856ad364e35\System.Web.Extensions.dll
  1584. [2012/06/15 07:41:31 | 000,835,584 | ---- | M] () MD5=C22D59F4EAC00510D1A86061A428C633 -- C:\WINDOWS\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
  1585. [2012/06/15 07:41:32 | 000,077,824 | ---- | M] () MD5=F27A80887F125661CAC1A6039107428F -- C:\WINDOWS\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
  1586. [2009/12/29 13:27:05 | 000,061,440 | ---- | M] () MD5=5B7868DF14D71D328EE8C1213F852393 -- C:\WINDOWS\assembly\GAC_MSIL\System.Web.Routing\3.5.0.0__31bf3856ad364e35\System.Web.Routing.dll
  1587. [2012/06/15 07:41:23 | 000,839,680 | ---- | M] () MD5=A89DFA6DB0C3D00559F770A214962A60 -- C:\WINDOWS\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
  1588. [2012/06/15 07:41:28 | 005,025,792 | ---- | M] () MD5=E81AAFE1D1B682711BF6E974A1ABC446 -- C:\WINDOWS\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
  1589. [2009/12/29 13:26:55 | 000,012,288 | ---- | M] () MD5=044C3400A836E5FB60D4A49EAEC24544 -- C:\WINDOWS\assembly\GAC_MSIL\System.Windows.Presentation\3.5.0.0__b77a5c561934e089\System.Windows.Presentation.dll
  1590. [2009/12/29 13:25:35 | 001,138,688 | ---- | M] () MD5=A96933F3898290AA509080A90E0C7C5F -- C:\WINDOWS\assembly\GAC_MSIL\System.Workflow.Activities\3.0.0.0__31bf3856ad364e35\System.Workflow.Activities.dll
  1591. [2009/12/29 13:25:35 | 001,630,208 | ---- | M] () MD5=C4503F6EADC2638D6898514290A7A60B -- C:\WINDOWS\assembly\GAC_MSIL\System.Workflow.ComponentModel\3.0.0.0__31bf3856ad364e35\System.Workflow.ComponentModel.dll
  1592. [2009/12/29 13:25:36 | 000,540,672 | ---- | M] () MD5=6623152B2FB7DC650C6A8FE01AF71F44 -- C:\WINDOWS\assembly\GAC_MSIL\System.Workflow.Runtime\3.0.0.0__31bf3856ad364e35\System.Workflow.Runtime.dll
  1593. [2009/12/29 13:26:39 | 000,507,904 | ---- | M] () MD5=E249D1B3114088C0D390A60643BF2BBC -- C:\WINDOWS\assembly\GAC_MSIL\System.WorkflowServices\3.5.0.0__31bf3856ad364e35\System.WorkflowServices.dll
  1594. [2009/12/29 13:26:56 | 000,139,264 | ---- | M] () MD5=64925CC79EA9E8245A4F18703CCABEC4 -- C:\WINDOWS\assembly\GAC_MSIL\System.Xml.Linq\3.5.0.0__b77a5c561934e089\System.Xml.Linq.dll
  1595. [2012/06/15 07:41:57 | 002,048,000 | ---- | M] () MD5=EB97291E3C9E0035B47B45DBB1AF710D -- C:\WINDOWS\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
  1596. [2012/06/15 07:42:41 | 003,186,688 | ---- | M] () MD5=6D37DFFE4B89AB1E17367FEEF2327B34 -- C:\WINDOWS\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
  1597. [2009/12/29 13:25:39 | 000,167,936 | ---- | M] () MD5=F303A07A6EF37B8B6DD928D97A016B75 -- C:\WINDOWS\assembly\GAC_MSIL\UIAutomationClient\3.0.0.0__31bf3856ad364e35\UIAutomationClient.dll
  1598. [2009/12/29 13:25:40 | 000,385,024 | ---- | M] () MD5=09658EF5F16F2ABD74FE577D50C0D155 -- C:\WINDOWS\assembly\GAC_MSIL\UIAutomationClientsideProviders\3.0.0.0__31bf3856ad364e35\UIAutomationClientsideProviders.dll
  1599. [2009/12/29 13:25:32 | 000,040,960 | ---- | M] () MD5=A93561FB224FA8539357C74065403630 -- C:\WINDOWS\assembly\GAC_MSIL\UIAutomationProvider\3.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll
  1600. [2009/12/29 13:25:33 | 000,098,304 | ---- | M] () MD5=5BE33FC308914C1AE6577A908D97A4FF -- C:\WINDOWS\assembly\GAC_MSIL\UIAutomationTypes\3.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll
  1601. [2012/05/12 16:26:25 | 001,249,280 | ---- | M] () MD5=D91A6B3FDF14C0319333FC583D969126 -- C:\WINDOWS\assembly\GAC_MSIL\WindowsBase\3.0.0.0__31bf3856ad364e35\WindowsBase.dll
  1602. [2009/12/29 13:25:40 | 000,094,208 | ---- | M] () MD5=E205A79EA6C06F91EA08BBE59FE83503 -- C:\WINDOWS\assembly\GAC_MSIL\WindowsFormsIntegration\3.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll
  1603.  
  1604. [color=#A23BEC]< HKEY_CLASSES_ROOT\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24} /s >[/color]
  1605. "" = PSFactoryBuffer
  1606. [HKEY_CLASSES_ROOT\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\InProcServer32]
  1607. "" = C:\WINDOWS\system32\wbem\wbemsvc.dll -- [2008/04/14 08:00:00 | 000,043,520 | ---- | M] (Microsoft Corporation)
  1608. "ThreadingModel" = Both
  1609.  
  1610. [color=#A23BEC]< HKEY_CLASSES_ROOT\CLSID\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1} /s >[/color]
  1611. "" = Microsoft WBEM New Event Subsystem
  1612. [HKEY_CLASSES_ROOT\CLSID\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InprocServer32]
  1613. "" = \\.\globalroot\systemroot\Installer\{2b833ab7-b4db-9942-2793-c52de571a0a6}\n.
  1614. "ThreadingModel" = Both
  1615.  
  1616. [color=#A23BEC]< HKEY_CURRENT_USER\Software\Classes\CLSID\{42aedc87-2188-41fd-b9a3-0c966feabec1} /s >[/color]
  1617. [HKEY_CURRENT_USER\Software\Classes\CLSID\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InprocServer32]
  1618. "ThreadingModel" = Both
  1619. "" = C:\Documents and Settings\Mark Sortzi\Local Settings\Application Data\{2b833ab7-b4db-9942-2793-c52de571a0a6}\n. -- [2010/12/09 11:15:09 | 000,070,656 | -HS- | M] ()
  1620.  
  1621. [color=#A23BEC]< HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1} /s >[/color]
  1622. "" = Microsoft WBEM New Event Subsystem
  1623. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InprocServer32]
  1624. "" = \\.\globalroot\systemroot\Installer\{2b833ab7-b4db-9942-2793-c52de571a0a6}\n.
  1625. "ThreadingModel" = Both
  1626.  
  1627. [color=#A23BEC]< HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{42aedc87-2188-41fd-b9a3-0c966feabec1} /s >[/color]
  1628. "" = MruPidlList
  1629. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  1630. "" = %SystemRoot%\system32\shdocvw.dll -- [2008/04/14 08:00:00 | 001,499,136 | ---- | M] (Microsoft Corporation)
  1631. "ThreadingModel" = Apartment
  1632.  
  1633. [color=#A23BEC]< HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{a2a9545d-a0c2-42b4-9708-a0b2badd77c8} /s >[/color]
  1634. "" = Start Menu Pin
  1635. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{a2a9545d-a0c2-42b4-9708-a0b2badd77c8}\InProcServer32]
  1636. "" = %SystemRoot%\system32\SHELL32.dll -- [2012/06/08 10:26:20 | 008,462,848 | ---- | M] (Microsoft Corporation)
  1637. "ThreadingModel" = Apartment
  1638.  
  1639. [color=#A23BEC]< HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24} /s >[/color]
  1640. "" = PSFactoryBuffer
  1641. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\InProcServer32]
  1642. "" = C:\WINDOWS\system32\wbem\wbemsvc.dll -- [2008/04/14 08:00:00 | 000,043,520 | ---- | M] (Microsoft Corporation)
  1643. "ThreadingModel" = Both
  1644.  
  1645. [color=#A23BEC]< HKEY_CURRENT_USER\Software\MSOLoad /s >[/color]
  1646.  
  1647. [color=#A23BEC]< type c:\boot.ini >> test.txt /c >[/color]
  1648. [boot loader]
  1649. timeout=30
  1650. default=multi(0)disk(0)rdisk(0)partition(2)\WINDOWS
  1651. [operating systems]
  1652. multi(0)disk(0)rdisk(0)partition(2)\WINDOWS="Microsoft Windows XP Home Edition" /noexecute=optin /fastdetect
  1653.  
  1654. [color=#A23BEC]< type c:\diskreport.txt /c >[/color]
  1655. Microsoft DiskPart version 5.1.3565
  1656. Copyright (C) 1999-2003 Microsoft Corporation.
  1657. On computer: ACER-925BE1910B
  1658.   Volume ###  Ltr  Label        Fs     Type        Size     Status     Info
  1659.   ----------  ---  -----------  -----  ----------  -------  ---------  --------
  1660.   Volume 0     C   ACER         NTFS   Partition    143 GB  Healthy    System  
  1661.  
  1662. [color=#A23BEC]< MD5 for: AFD.SYS  >[/color]
  1663. [2011/08/17 09:49:54 | 000,138,496 | ---- | M] (Microsoft Corporation) MD5=1E44BC1E83D8FD2305F8D452DB109CF9 -- C:\WINDOWS\system32\dllcache\afd.sys
  1664. [2011/08/17 09:49:54 | 000,138,496 | ---- | M] (Microsoft Corporation) MD5=1E44BC1E83D8FD2305F8D452DB109CF9 -- C:\WINDOWS\system32\drivers\afd.sys
  1665. [2008/04/14 08:00:00 | 000,138,112 | ---- | M] (Microsoft Corporation) MD5=322D0E36693D6E24A2398BEE62A268CD -- C:\WINDOWS\$NtUninstallKB951748$\afd.sys
  1666. [2011/02/16 09:22:48 | 000,138,496 | ---- | M] (Microsoft Corporation) MD5=355556D9E580915118CD7EF736653A89 -- C:\WINDOWS\$NtUninstallKB2592799$\afd.sys
  1667. [2008/10/16 11:07:58 | 000,138,496 | ---- | M] (Microsoft Corporation) MD5=38D7B715504DA4741DF35E3594FE2099 -- C:\WINDOWS\$hf_mig$\KB2509553\SP3QFE\afd.sys
  1668. [2008/08/14 06:34:26 | 000,138,496 | ---- | M] (Microsoft Corporation) MD5=4D43E74F2A1239D53929B82600F1971C -- C:\WINDOWS\$hf_mig$\KB956803\SP3QFE\afd.sys
  1669. [2008/10/16 10:43:01 | 000,138,496 | ---- | M] (Microsoft Corporation) MD5=7618D5218F2A614672EC61A80D854A37 -- C:\WINDOWS\$NtUninstallKB2503665$\afd.sys
  1670. [2008/08/14 06:04:36 | 000,138,496 | ---- | M] (Microsoft Corporation) MD5=7E775010EF291DA96AD17CA4B17137D7 -- C:\WINDOWS\$NtUninstallKB2509553$\afd.sys
  1671. [2011/02/16 09:25:05 | 000,138,496 | ---- | M] (Microsoft Corporation) MD5=8D499B1276012EB907E7A9E0F4D8FDA4 -- C:\WINDOWS\$hf_mig$\KB2503665\SP3QFE\afd.sys
  1672. [2008/06/20 07:48:03 | 000,138,496 | ---- | M] (Microsoft Corporation) MD5=D6EE6014241D034E63C49A50CB2B442A -- C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\afd.sys
  1673. [2008/06/20 07:40:08 | 000,138,496 | ---- | M] (Microsoft Corporation) MD5=E3049B90FE06F3F740B7CFDA44995E2C -- C:\WINDOWS\$NtUninstallKB956803$\afd.sys
  1674. [2011/08/17 09:41:46 | 000,138,496 | ---- | M] (Microsoft Corporation) MD5=F6B7B1ECD7B41736BDB6FF4B092BCB79 -- C:\WINDOWS\$hf_mig$\KB2592799\SP3QFE\afd.sys
  1675.  
  1676. [color=#A23BEC]< MD5 for: ATAPI.SYS  >[/color]
  1677. [2008/04/14 08:00:00 | 020,056,462 | ---- | M] () .cab file -- C:\i386\sp3.cab:atapi.sys
  1678. [2008/04/14 08:00:00 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\dllcache\atapi.sys
  1679. [2008/04/14 08:00:00 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\drivers\atapi.sys
  1680. [2008/04/14 08:00:00 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\ReinstallBackups\0005\DriverFiles\i386\atapi.sys
  1681.  
  1682. [color=#A23BEC]< MD5 for: DISK.SYS  >[/color]
  1683. [2008/04/14 08:00:00 | 020,056,462 | ---- | M] () .cab file -- C:\i386\sp3.cab:disk.sys
  1684. [2008/04/14 08:00:00 | 000,036,352 | ---- | M] (Microsoft Corporation) MD5=044452051F3E02E7963599FC8F4F3E25 -- C:\WINDOWS\system32\drivers\disk.sys
  1685.  
  1686. [color=#A23BEC]< MD5 for: EVENTLOG.DLL  >[/color]
  1687. [2008/04/14 08:00:00 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=6D4FEB43EE538FC5428CC7F0565AA656 -- C:\WINDOWS\system32\dllcache\eventlog.dll
  1688. [2008/04/14 08:00:00 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=6D4FEB43EE538FC5428CC7F0565AA656 -- C:\WINDOWS\system32\eventlog.dll
  1689.  
  1690. [color=#A23BEC]< MD5 for: EXPLORER.EXE  >[/color]
  1691. [2008/04/14 08:00:00 | 001,033,728 | ---- | M] (Microsoft Corporation) MD5=12896823FB95BFB3DC9B46BCAEDC9923 -- C:\WINDOWS\explorer.exe
  1692. [2008/04/14 08:00:00 | 001,033,728 | ---- | M] (Microsoft Corporation) MD5=12896823FB95BFB3DC9B46BCAEDC9923 -- C:\WINDOWS\system32\dllcache\explorer.exe
  1693.  
  1694. [color=#A23BEC]< MD5 for: I8042PRT.SYS  >[/color]
  1695. [2008/04/14 08:00:00 | 020,056,462 | ---- | M] () .cab file -- C:\i386\sp3.cab:i8042prt.sys
  1696. [2008/04/14 08:00:00 | 000,052,480 | ---- | M] (Microsoft Corporation) MD5=4A0B06AA8943C1E332520F7440C0AA30 -- C:\WINDOWS\system32\dllcache\i8042prt.sys
  1697. [2008/04/14 08:00:00 | 000,052,480 | ---- | M] (Microsoft Corporation) MD5=4A0B06AA8943C1E332520F7440C0AA30 -- C:\WINDOWS\system32\drivers\i8042prt.sys
  1698. [2008/04/14 08:00:00 | 000,052,480 | ---- | M] (Microsoft Corporation) MD5=4A0B06AA8943C1E332520F7440C0AA30 -- C:\WINDOWS\system32\ReinstallBackups\0012\DriverFiles\i386\i8042prt.sys
  1699. [2008/04/14 08:00:00 | 000,052,480 | ---- | M] (Microsoft Corporation) MD5=4A0B06AA8943C1E332520F7440C0AA30 -- C:\WINDOWS\system32\ReinstallBackups\0013\DriverFiles\i386\i8042prt.sys
  1700.  
  1701. [color=#A23BEC]< MD5 for: IASTOR.SYS  >[/color]
  1702. [2008/09/12 17:48:26 | 000,406,040 | ---- | M] (Intel Corporation) MD5=756879FA65978DF948437CE3FD1EACCD -- C:\Program Files\Intel\Intel Matrix Storage Manager\driver64\IaStor.sys
  1703. [2009/01/22 07:41:00 | 000,327,192 | ---- | M] (Intel Corporation) MD5=8EF427C54497C5F8A7A645990E4278C7 -- C:\ACER\Preload\Autorun\DRV\Intel IMSM 945GSE\f6flpy32\IaStor.sys
  1704. [2008/09/12 17:32:56 | 000,327,192 | ---- | M] (Intel Corporation) MD5=8EF427C54497C5F8A7A645990E4278C7 -- C:\Program Files\Intel\Intel Matrix Storage Manager\driver\IaStor.sys
  1705. [2009/01/22 07:41:00 | 000,327,192 | ---- | M] (Intel Corporation) MD5=8EF427C54497C5F8A7A645990E4278C7 -- C:\WINDOWS\OemDir\iaStor.sys
  1706. [2008/09/12 17:32:56 | 000,327,192 | ---- | M] (Intel Corporation) MD5=8EF427C54497C5F8A7A645990E4278C7 -- C:\WINDOWS\system32\drivers\iaStor.sys
  1707. [2008/09/12 17:32:56 | 000,327,192 | ---- | M] (Intel Corporation) MD5=8EF427C54497C5F8A7A645990E4278C7 -- C:\WINDOWS\system32\DRVSTORE\iaAHCI_12F992444F02D21A4173C3B857C3F80FAE1728A6\iaStor.sys
  1708. [2009/01/22 07:41:00 | 000,327,192 | ---- | M] (Intel Corporation) MD5=8EF427C54497C5F8A7A645990E4278C7 -- C:\WINDOWS\system32\ReinstallBackups\0011\DriverFiles\iaStor.sys
  1709.  
  1710. [color=#A23BEC]< MD5 for: IPSEC.SYS  >[/color]
  1711. [2008/04/14 08:00:00 | 000,075,264 | ---- | M] (Microsoft Corporation) MD5=23C74D75E36E7158768DD63D92789A91 -- C:\WINDOWS\system32\dllcache\ipsec.sys
  1712. [2008/04/14 08:00:00 | 000,075,264 | ---- | M] (Microsoft Corporation) MD5=23C74D75E36E7158768DD63D92789A91 -- C:\WINDOWS\system32\drivers\ipsec.sys
  1713.  
  1714. [color=#A23BEC]< MD5 for: LSASS.EXE  >[/color]
  1715. [2008/04/14 08:00:00 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=BF2466B3E18E970D8A976FB95FC1CA85 -- C:\WINDOWS\system32\dllcache\lsass.exe
  1716. [2008/04/14 08:00:00 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=BF2466B3E18E970D8A976FB95FC1CA85 -- C:\WINDOWS\system32\lsass.exe
  1717.  
  1718. [color=#A23BEC]< MD5 for: NETBT.SYS  >[/color]
  1719. [2008/04/14 08:00:00 | 000,162,816 | ---- | M] (Microsoft Corporation) MD5=74B2B2F5BEA5E9A3DC021D685551BD3D -- C:\WINDOWS\system32\dllcache\netbt.sys
  1720. [2008/04/14 08:00:00 | 000,162,816 | ---- | M] (Microsoft Corporation) MD5=74B2B2F5BEA5E9A3DC021D685551BD3D -- C:\WINDOWS\system32\drivers\netbt.sys
  1721.  
  1722. [color=#A23BEC]< MD5 for: NETLOGON.DLL  >[/color]
  1723. [2008/04/14 08:00:00 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=1B7F071C51B77C272875C3A23E1E4550 -- C:\WINDOWS\system32\dllcache\netlogon.dll
  1724. [2008/04/14 08:00:00 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=1B7F071C51B77C272875C3A23E1E4550 -- C:\WINDOWS\system32\netlogon.dll
  1725.  
  1726. [color=#A23BEC]< MD5 for: REDBOOK.SYS  >[/color]
  1727. [2008/04/14 08:00:00 | 020,056,462 | ---- | M] () .cab file -- C:\i386\sp3.cab:redbook.sys
  1728. [2008/04/14 00:10:28 | 000,057,600 | ---- | M] (Microsoft Corporation) MD5=F828DD7E1419B6653894A8F97A0094C5 -- C:\WINDOWS\system32\dllcache\redbook.sys
  1729. [2008/04/14 00:10:28 | 000,057,600 | ---- | M] (Microsoft Corporation) MD5=F828DD7E1419B6653894A8F97A0094C5 -- C:\WINDOWS\system32\drivers\redbook.sys
  1730.  
  1731. [color=#A23BEC]< MD5 for: SCECLI.DLL  >[/color]
  1732. [2008/04/14 08:00:00 | 000,181,248 | ---- | M] (Microsoft Corporation) MD5=A86BB5E61BF3E39B62AB4C7E7085A084 -- C:\WINDOWS\system32\dllcache\scecli.dll
  1733. [2008/04/14 08:00:00 | 000,181,248 | ---- | M] (Microsoft Corporation) MD5=A86BB5E61BF3E39B62AB4C7E7085A084 -- C:\WINDOWS\system32\scecli.dll
  1734.  
  1735. [color=#A23BEC]< MD5 for: SERIAL.SYS  >[/color]
  1736. [2008/04/14 08:00:00 | 020,056,462 | ---- | M] () .cab file -- C:\i386\sp3.cab:serial.sys
  1737. [2008/04/14 08:00:00 | 000,064,512 | ---- | M] (Microsoft Corporation) MD5=CCA207A8896D4C6A0C9CE29A4AE411A7 -- C:\WINDOWS\system32\drivers\serial.sys
  1738.  
  1739. [color=#A23BEC]< MD5 for: SERVICES.EXE  >[/color]
  1740. [2009/02/06 07:06:24 | 000,110,592 | ---- | M] (Microsoft Corporation) MD5=020CEAAEDC8EB655B6506B8C70D53BB6 -- C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\services.exe
  1741. [2008/04/14 08:00:00 | 000,108,544 | ---- | M] (Microsoft Corporation) MD5=0E776ED5F7CC9F94299E70461B7B8185 -- C:\WINDOWS\$NtUninstallKB956572$\services.exe
  1742. [2009/02/06 07:11:05 | 000,110,592 | ---- | M] (Microsoft Corporation) MD5=65DF52F5B8B6E9BBD183505225C37315 -- C:\WINDOWS\system32\dllcache\services.exe
  1743. [2009/02/06 07:11:05 | 000,110,592 | ---- | M] (Microsoft Corporation) MD5=65DF52F5B8B6E9BBD183505225C37315 -- C:\WINDOWS\system32\services.exe
  1744.  
  1745. [color=#A23BEC]< MD5 for: SMSS.EXE  >[/color]
  1746. [2008/04/14 08:00:00 | 000,470,016 | ---- | M] (Microsoft Corporation) MD5=3C3393C92A73A3006C7B706DAC54A812 -- C:\i386\SYSTEM32\SMSS.EXE
  1747. [2008/04/14 08:00:00 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=5F816C1F539266D2D4C78694239DA0B5 -- C:\WINDOWS\system32\dllcache\smss.exe
  1748. [2008/04/14 08:00:00 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=5F816C1F539266D2D4C78694239DA0B5 -- C:\WINDOWS\system32\smss.exe
  1749.  
  1750. [color=#A23BEC]< MD5 for: SVCHOST.EXE  >[/color]
  1751. [2008/04/14 08:00:00 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=27C6D03BCDB8CFEB96B716F3D8BE3E18 -- C:\WINDOWS\system32\dllcache\svchost.exe
  1752. [2008/04/14 08:00:00 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=27C6D03BCDB8CFEB96B716F3D8BE3E18 -- C:\WINDOWS\system32\svchost.exe
  1753.  
  1754. [color=#A23BEC]< MD5 for: TCPIP.SYS  >[/color]
  1755. [2008/04/14 08:00:00 | 000,361,344 | ---- | M] (Microsoft Corporation) MD5=93EA8D04EC73A85DB02EB8805988F733 -- C:\WINDOWS\$NtUninstallKB951748$\tcpip.sys
  1756. [2008/06/20 07:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\system32\dllcache\tcpip.sys
  1757. [2008/06/20 07:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\system32\drivers\tcpip.sys
  1758. [2008/06/20 07:59:02 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=AD978A1B783B5719720CFF204B666C8E -- C:\WINDOWS\$hf_mig$\KB2509553\SP3QFE\tcpip.sys
  1759. [2008/06/20 07:59:02 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=AD978A1B783B5719720CFF204B666C8E -- C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\tcpip.sys
  1760.  
  1761. [color=#A23BEC]< MD5 for: USERINIT.EXE  >[/color]
  1762. [2008/04/14 08:00:00 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=A93AEE1928A9D7CE3E16D24EC7380F89 -- C:\WINDOWS\system32\dllcache\userinit.exe
  1763. [2008/04/14 08:00:00 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=A93AEE1928A9D7CE3E16D24EC7380F89 -- C:\WINDOWS\system32\userinit.exe
  1764.  
  1765. [color=#A23BEC]< MD5 for: VOLSNAP.SYS  >[/color]
  1766. [2008/04/14 08:00:00 | 000,052,352 | ---- | M] (Microsoft Corporation) MD5=4C8FCB5CC53AAB716D810740FE59D025 -- C:\WINDOWS\system32\dllcache\volsnap.sys
  1767. [2008/04/14 08:00:00 | 000,052,352 | ---- | M] (Microsoft Corporation) MD5=4C8FCB5CC53AAB716D810740FE59D025 -- C:\WINDOWS\system32\drivers\volsnap.sys
  1768.  
  1769. [color=#A23BEC]< MD5 for: WINLOGON.EXE  >[/color]
  1770. [2008/04/14 08:00:00 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=ED0EF0A136DEC83DF69F04118870003E -- C:\WINDOWS\system32\dllcache\winlogon.exe
  1771. [2008/04/14 08:00:00 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=ED0EF0A136DEC83DF69F04118870003E -- C:\WINDOWS\system32\winlogon.exe
  1772.  
  1773. [color=#E56717]========== Hard Links - Junction Points - Mount Points - Symbolic Links ==========[/color]
  1774. [C:\WINDOWS\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a] -> C:\WINDOWS\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790 -> Junction
  1775. [C:\WINDOWS\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a] -> C:\WINDOWS\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e -> Junction
  1776.  
  1777. < End of report >
create a new version of this paste RAW Paste Data