API tools faq
paste
Guest User

OTL output

a guest
Apr 1st, 2013
187
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 197.66 KB | None | 0 0
raw download clone embed print report
  1. OTL logfile created on: 4/1/2013 8:31:04 AM - Run 1
  2. OTL by OldTimer - Version 3.2.69.0 Folder = C:\Documents and Settings\Dave\Desktop
  3. Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
  4. Internet Explorer (Version = 8.0.6001.18702)
  5. Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
  6.  
  7. 3.25 Gb Total Physical Memory | 2.56 Gb Available Physical Memory | 78.81% Memory free
  8. 5.09 Gb Paging File | 4.46 Gb Available in Paging File | 87.73% Paging File free
  9. Paging file location(s): c:\pagefile.sys 2046 4092 [binary data]
  10.  
  11. %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
  12. Drive C: | 465.75 Gb Total Space | 235.66 Gb Free Space | 50.60% Space Free | Partition Type: NTFS
  13.  
  14. Computer Name: DAVESPC | User Name: Dave | Logged in as Administrator.
  15. Boot Mode: Normal | Scan Mode: All users
  16. Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 90 Days
  17.  
  18. [color=#E56717]========== Processes (SafeList) ==========[/color]
  19.  
  20. PRC - [2013/04/01 08:24:50 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Dave\Desktop\OTL.scr
  21. PRC - [2013/03/28 22:12:48 | 000,170,912 | ---- | M] (Oracle Corporation) -- C:\Program Files\Java\jre7\bin\jqs.exe
  22. PRC - [2013/03/28 21:18:35 | 000,086,752 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe
  23. PRC - [2013/03/28 21:18:08 | 000,079,584 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
  24. PRC - [2013/03/28 21:18:04 | 000,110,816 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe
  25. PRC - [2013/03/28 21:18:03 | 000,345,312 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
  26. PRC - [2013/03/25 23:05:08 | 000,295,512 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files\Real\realplayer\Update\realsched.exe
  27. PRC - [2013/03/13 08:41:18 | 000,917,400 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
  28. PRC - [2013/03/06 02:21:52 | 000,039,056 | ---- | M] () -- C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe
  29. PRC - [2011/05/24 23:09:21 | 002,214,504 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
  30. PRC - [2009/04/07 10:13:10 | 000,673,616 | ---- | M] (SEIKO EPSON CORPORATION) -- C:\Program Files\Epson Software\Event Manager\EEventManager.exe
  31. PRC - [2009/02/23 06:05:34 | 000,111,856 | ---- | M] (Yahoo! Inc) -- C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe
  32. PRC - [2008/11/20 07:00:00 | 000,199,680 | ---- | M] (SEIKO EPSON CORPORATION) -- C:\WINDOWS\system32\spool\drivers\w32x86\3\E_FATIFIA.EXE
  33. PRC - [2008/11/09 13:48:14 | 000,602,392 | ---- | M] (Yahoo! Inc.) -- C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
  34. PRC - [2008/04/13 17:12:19 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
  35. PRC - [2006/12/19 19:23:20 | 000,094,208 | ---- | M] (SEIKO EPSON CORPORATION) -- C:\Program Files\Common Files\EPSON\EBAPI\eEBSvc.exe
  36. PRC - [2006/09/08 13:12:50 | 000,172,032 | ---- | M] () -- C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe
  37. PRC - [2006/09/08 13:10:42 | 000,172,090 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
  38. PRC - [2006/05/23 23:49:14 | 000,024,576 | ---- | M] (Syntek America Inc.) -- C:\WINDOWS\system32\StkASv2K.exe
  39. PRC - [2005/09/09 03:24:30 | 000,102,400 | ---- | M] () -- C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
  40. PRC - [2005/09/09 01:18:10 | 000,057,344 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Adobe\Photoshop Elements 4.0\apdproxy.exe
  41. PRC - [2005/04/30 17:02:26 | 000,086,016 | ---- | M] (B.H.A Corporation) -- C:\WINDOWS\system32\bgsvcgen.exe
  42.  
  43.  
  44. [color=#E56717]========== Modules (No Company Name) ==========[/color]
  45.  
  46. MOD - [2013/03/25 08:43:05 | 000,397,704 | ---- | M] () -- C:\Program Files\Avira\AntiVir Desktop\sqlite3.dll
  47. MOD - [2013/03/06 02:21:52 | 000,039,056 | ---- | M] () -- C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe
  48. MOD - [2012/11/28 15:13:52 | 000,087,952 | ---- | M] () -- C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
  49. MOD - [2012/11/28 15:13:30 | 001,242,512 | ---- | M] () -- C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
  50. MOD - [2010/02/17 02:30:46 | 000,929,792 | ---- | M] () -- C:\Program Files\Yahoo!\Messenger\yui.dll
  51. MOD - [2009/03/12 16:45:32 | 000,135,168 | ---- | M] () -- C:\Program Files\Epson Software\Event Manager\Assistants\Scan Assistant\ScanEngine.dll
  52. MOD - [2008/11/21 14:58:42 | 000,057,344 | ---- | M] () -- C:\Program Files\Epson Software\Event Manager\Assistants\Scan Assistant\Satwain.dll
  53. MOD - [2008/03/28 23:42:20 | 000,159,744 | ---- | M] () -- C:\Program Files\Essentials Codec Pack\Haali\mmfinfo.dll
  54. MOD - [2008/03/28 23:41:52 | 000,023,552 | ---- | M] () -- C:\Program Files\Essentials Codec Pack\Haali\mkunicode.dll
  55. MOD - [2007/04/25 19:09:04 | 000,087,808 | ---- | M] () -- C:\WINDOWS\system32\cpwmon2k.dll
  56. MOD - [2006/09/08 13:12:50 | 000,172,032 | ---- | M] () -- C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe
  57. MOD - [2005/09/09 03:24:30 | 000,102,400 | ---- | M] () -- C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
  58.  
  59.  
  60. [color=#E56717]========== Services (SafeList) ==========[/color]
  61.  
  62. SRV - [2013/03/28 22:12:48 | 000,170,912 | ---- | M] (Oracle Corporation) [Auto | Running] -- C:\Program Files\Java\jre7\bin\jqs.exe -- (JavaQuickStarterService)
  63. SRV - [2013/03/28 21:18:35 | 000,086,752 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
  64. SRV - [2013/03/28 21:18:04 | 000,110,816 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
  65. SRV - [2013/03/13 08:48:09 | 000,253,656 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
  66. SRV - [2013/03/13 08:41:18 | 000,115,608 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
  67. SRV - [2013/03/06 02:21:52 | 000,039,056 | ---- | M] () [Auto | Running] -- C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe -- (RealNetworks Downloader Resolver Service)
  68. SRV - [2011/05/24 23:09:21 | 002,214,504 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe -- (nvUpdatusService)
  69. SRV - [2008/11/09 13:48:14 | 000,602,392 | ---- | M] (Yahoo! Inc.) [Auto | Running] -- C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe -- (YahooAUService)
  70. SRV - [2006/12/19 19:23:20 | 000,094,208 | ---- | M] (SEIKO EPSON CORPORATION) [Auto | Running] -- C:\Program Files\Common Files\EPSON\EBAPI\eEBSvc.exe -- (EpsonBidirectionalService)
  71. SRV - [2006/09/08 13:12:50 | 000,172,032 | ---- | M] () [Auto | Running] -- C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe -- (ForceWare Intelligent Application Manager (IAM)
  72. SRV - [2006/09/08 13:10:42 | 000,172,090 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe -- (nSvcIp)
  73. SRV - [2006/05/23 23:49:14 | 000,024,576 | ---- | M] (Syntek America Inc.) [Auto | Running] -- C:\WINDOWS\system32\StkASv2K.exe -- (StkASSrv)
  74. SRV - [2005/09/09 03:24:30 | 000,102,400 | ---- | M] () [Auto | Running] -- C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe -- (AdobeActiveFileMonitor4.0)
  75. SRV - [2005/04/30 17:02:26 | 000,086,016 | ---- | M] (B.H.A Corporation) [Auto | Running] -- C:\WINDOWS\system32\bgsvcgen.exe -- (bgsvcgen)
  76.  
  77.  
  78. [color=#E56717]========== Driver Services (SafeList) ==========[/color]
  79.  
  80. DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\XDva021.sys -- (XDva021)
  81. DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA)
  82. DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\vsdatant.sys -- (vsdatant)
  83. DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME)
  84. DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI)
  85. DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME)
  86. DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP)
  87. DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump)
  88. DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc)
  89. DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt)
  90. DRV - File not found [Kernel | System | Stopped] -- -- (Changer)
  91. DRV - [2013/03/28 21:18:43 | 000,135,136 | ---- | M] (Avira Operations GmbH & Co. KG) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avipbb.sys -- (avipbb)
  92. DRV - [2013/03/28 21:18:43 | 000,084,744 | ---- | M] (Avira Operations GmbH & Co. KG) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\avgntflt.sys -- (avgntflt)
  93. DRV - [2013/03/28 21:18:43 | 000,037,352 | ---- | M] (Avira Operations GmbH & Co. KG) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avkmgr.sys -- (avkmgr)
  94. DRV - [2013/03/25 08:43:36 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\ssmdrv.sys -- (ssmdrv)
  95. DRV - [2008/04/26 14:43:51 | 000,271,360 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\atksgt.sys -- (atksgt)
  96. DRV - [2008/04/26 14:43:51 | 000,018,048 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\lirsgt.sys -- (lirsgt)
  97. DRV - [2008/04/13 11:46:22 | 000,015,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\MPE.sys -- (MPE)
  98. DRV - [2008/03/29 17:36:28 | 000,125,328 | ---- | M] (Deterministic Networks, Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\drivers\dne2000.sys -- (DNE)
  99. DRV - [2007/04/11 11:23:32 | 000,035,328 | ---- | M] (Service & Quality Technology.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Capt905c.sys -- (SQTECH905C)
  100. DRV - [2007/01/18 18:28:02 | 000,005,275 | ---- | M] (Cisco Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\CVirtA.sys -- (CVirtA)
  101. DRV - [2006/11/15 17:32:44 | 000,242,139 | ---- | M] (Syntek America Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\StkAMini.sys -- (StkAMini)
  102. DRV - [2006/10/18 12:12:16 | 000,012,664 | R--- | M] () [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\AsIO.sys -- (AsIO)
  103. DRV - [2006/09/21 00:39:16 | 000,105,344 | R--- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\nvata.sys -- (nvata)
  104. DRV - [2006/08/31 23:44:24 | 000,139,776 | R--- | M] (Analog Devices, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\adidts.sys -- (ADIDTSFiltService)
  105. DRV - [2006/08/07 01:39:24 | 000,018,944 | R--- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nvnetbus.sys -- (nvnetbus)
  106. DRV - [2006/08/07 01:39:22 | 000,052,736 | R--- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\NVENETFD.sys -- (NVENETFD)
  107. DRV - [2006/08/07 01:39:14 | 000,110,080 | ---- | M] (NVIDIA Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\nvtcp.sys -- (NVTCP)
  108. DRV - [2006/06/27 18:27:18 | 000,004,772 | ---- | M] (Syntek America Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\StkScan.sys -- (StkScan)
  109. DRV - [2006/04/13 16:47:38 | 000,168,064 | ---- | M] (Hauppauge Computer Works, Inc.) [23|25|26]xxx) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hcwPP2.sys -- (hcwPP2)
  110. DRV - [2005/11/20 22:48:20 | 000,016,512 | ---- | M] (Adaptec) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\ASPI32.SYS -- (Aspi32)
  111. DRV - [2005/05/11 00:33:12 | 000,032,256 | ---- | M] (B.H.A Corporation) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\cdrbsdrv.sys -- (cdrbsdrv)
  112. DRV - [2004/08/12 19:56:20 | 000,005,810 | R--- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ASACPI.sys -- (MTsensor)
  113. DRV - [2003/07/17 16:40:06 | 000,265,728 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\BCMWL5.SYS -- (BCM43XX)
  114. DRV - [2001/08/29 03:48:12 | 000,094,688 | ---- | M] (SCM Microsystems Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\upatc.sys -- (UPATC)
  115.  
  116.  
  117. [color=#E56717]========== Standard Registry (All) ==========[/color]
  118.  
  119.  
  120. [color=#E56717]========== Internet Explorer ==========[/color]
  121.  
  122. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com/
  123. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://us.rd.yahoo.com/customize/ie/defaults/su/msgr9/*http://www.yahoo.com
  124. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data]
  125. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
  126. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm
  127. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/defaults/sb/msgr9/*http://www.yahoo.com/ext/search/search.html
  128. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://us.rd.yahoo.com/customize/ie/defaults/sp/msgr9/*http://www.yahoo.com
  129. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
  130. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
  131. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomSearch = http://us.rd.yahoo.com/customize/ie/defaults/cs/msgr9/*http://www.yahoo.com/ext/search/search.html
  132. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant =
  133. IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  134. IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
  135.  
  136.  
  137. IE - HKU\.DEFAULT\..\URLSearchHook: {A3BC75A2-1F87-4686-AA43-5347D756017C} - No CLSID value found
  138. IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  139.  
  140. IE - HKU\S-1-5-18\..\URLSearchHook: {A3BC75A2-1F87-4686-AA43-5347D756017C} - No CLSID value found
  141. IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  142.  
  143.  
  144.  
  145. IE - HKU\S-1-5-21-436374069-1364589140-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm
  146. IE - HKU\S-1-5-21-436374069-1364589140-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar =
  147. IE - HKU\S-1-5-21-436374069-1364589140-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page =
  148. IE - HKU\S-1-5-21-436374069-1364589140-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = Yahoo! Search
  149. IE - HKU\S-1-5-21-436374069-1364589140-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = http://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7
  150. IE - HKU\S-1-5-21-436374069-1364589140-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com/?pc=Z045&form=ZGAPHP
  151. IE - HKU\S-1-5-21-436374069-1364589140-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Restore = http://www.yahoo.com/
  152. IE - HKU\S-1-5-21-436374069-1364589140-839522115-1003\..\URLSearchHook: {81017EA9-9AA8-4A6A-9734-7AF40E7D593F} - C:\Program Files\Yahoo!\Companion\Installs\cpn4\yt.dll (Yahoo! Inc.)
  153. IE - HKU\S-1-5-21-436374069-1364589140-839522115-1003\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\WINDOWS\system32\ieframe.dll (Microsoft Corporation)
  154. IE - HKU\S-1-5-21-436374069-1364589140-839522115-1003\..\SearchScopes,DefaultScope = {DECA3892-BA8F-44b8-A993-A466AD694AE4}
  155. IE - HKU\S-1-5-21-436374069-1364589140-839522115-1003\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
  156. IE - HKU\S-1-5-21-436374069-1364589140-839522115-1003\..\SearchScopes\{24F25BA4-4609-471F-9B62-442C29124190}: "URL" = http://websearch.ask.com/redirect?client=ie&tb=AVR-3&o=APN10400&src=crm&q={searchTerms}&locale=&apn_ptnrs=^ABY&apn_dtid=^YYYYYY^YY^US&apn_uid=fad10a03-bccf-4197-a5e1-91782cfd9407&apn_sauid=57CE33F1-1412-463B-B279-318A6C23AFE6
  157. IE - HKU\S-1-5-21-436374069-1364589140-839522115-1003\..\SearchScopes\{B0F6A9E6-A20E-2078-1826-6C700C6E8C1D}: "URL" = http://www.bing.com/search?q={searchTerms}&pc=Z045&form=ZGAIDF
  158. IE - HKU\S-1-5-21-436374069-1364589140-839522115-1003\..\SearchScopes\{C5A710DF-31F9-46AE-B041-24F6979B28E7}: "URL" = http://us.yhs.search.yahoo.com/avg/search?fr=yhs-avgb-chrome&type=yahoo_avg_hs2-tb-web_chrome_us&p={searchTerms}
  159. IE - HKU\S-1-5-21-436374069-1364589140-839522115-1003\..\SearchScopes\{DECA3892-BA8F-44b8-A993-A466AD694AE4}: "URL" = http://search.yahoo.com/search?p={searchTerms}
  160. IE - HKU\S-1-5-21-436374069-1364589140-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  161. IE - HKU\S-1-5-21-436374069-1364589140-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
  162.  
  163.  
  164. [color=#E56717]========== FireFox ==========[/color]
  165.  
  166. FF - prefs.js..browser.search.defaultengine: "Ask.com"
  167. FF - prefs.js..browser.search.defaultenginename: "Ask.com"
  168. FF - prefs.js..browser.search.defaulturl: "http://search.yahoo.com/search?fr=ffsp1&p="
  169. FF - prefs.js..browser.search.order.1: "Ask.com"
  170. FF - prefs.js..browser.search.selectedEngine: "Yahoo"
  171. FF - prefs.js..browser.startup.homepage: "http://my.yahoo.com/"
  172. FF - prefs.js..extensions.enabledAddons: FirePHPExtension-Build%40firephp.org:0.7.1
  173. FF - prefs.js..extensions.enabledAddons: jsonview%40brh.numbera.com:0.7
  174. FF - prefs.js..extensions.enabledAddons: moveplayer%40movenetworks.com:1.0.0.07103010
  175. FF - prefs.js..extensions.enabledAddons: %7BCAFEEFAC-0016-0000-0033-ABCDEFFEDCBA%7D:6.0.33
  176. FF - prefs.js..extensions.enabledAddons: %7BCAFEEFAC-0016-0000-0037-ABCDEFFEDCBA%7D:6.0.37
  177. FF - prefs.js..extensions.enabledAddons: %7B635abd67-4fe9-1b23-4f01-e679fa7484c1%7D:2.5.7.20130322105505
  178. FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:19.0.2
  179. FF - prefs.js..extensions.enabledItems: firebug@software.joehewitt.com:1.6.2
  180. FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}:6.0.04
  181. FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}:6.0.07
  182. FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0010-ABCDEFFEDCBA}:6.0.10
  183. FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA}:6.0.12
  184. FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}:6.0.13
  185. FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA}:6.0.14
  186. FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}:6.0.15
  187. FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}:6.0.17
  188. FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
  189. FF - prefs.js..extensions.enabledItems: {20a82645-c095-46ed-80e3-08825760534b}:1.2.1
  190. FF - prefs.js..extensions.enabledItems: moveplayer@movenetworks.com:1.0.0.07103010
  191. FF - prefs.js..extensions.enabledItems: {4bce2336-6483-4670-8970-98f6ae00d1eb}:2.7.1
  192. FF - prefs.js..extensions.enabledItems: {635abd67-4fe9-1b23-4f01-e679fa7484c1}:2.1.3.20100310105313
  193. FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA}:6.0.19
  194. FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
  195. FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21
  196. FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22
  197. FF - prefs.js..extensions.enabledItems: jsonview@brh.numbera.com:0.5
  198. FF - prefs.js..extensions.enabledItems: {ABDE892B-13A8-4d1b-88E6-365A6E755758}:14.0.1
  199. FF - prefs.js..extensions.enabledItems: {86056EFB-0CB5-4FFF-B493-12A73C2DAA20}:1.9.1
  200. FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23
  201. FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
  202. FF - prefs.js..extensions.enabledItems: {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.7
  203. FF - prefs.js..keyword.URL: "http://www.bing.com/search?pc=Z045&form=ZGAADF&q="
  204. FF - prefs.js..network.proxy.autoconfig_url: "http://public.yahoo.com/~rtroll/proxy/yahoo.pac"
  205.  
  206.  
  207. FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_6_602_180.dll ()
  208. FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\WINDOWS\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
  209. FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
  210. FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
  211. FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files\DivX\DivX Web Player\npdivx32.dll (DivX,Inc.)
  212. FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Content Upload Plugin,version=1.0.0: C:\Program Files\DivX\DivX Content Uploader\npUpload.dll (DivX,Inc.)
  213. FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0: C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll (DivX, Inc)
  214. FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.17.2: C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation)
  215. FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.17.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
  216. FF - HKLM\Software\MozillaPlugins\@messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6: C:\Program Files\Yahoo!\Shared\npYState.dll (Yahoo! Inc.)
  217. FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
  218. FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
  219. FF - HKLM\Software\MozillaPlugins\@movenetworks.com/Quantum Media Player: File not found
  220. FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=16.0.1.18: c:\program files\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
  221. FF - HKLM\Software\MozillaPlugins\@real.com/nprndlchromebrowserrecordext;version=1.3.1: C:\Documents and Settings\All Users\Application Data\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
  222. FF - HKLM\Software\MozillaPlugins\@real.com/nprndlhtml5videoshim;version=1.3.1: C:\Documents and Settings\All Users\Application Data\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
  223. FF - HKLM\Software\MozillaPlugins\@real.com/nprndlpepperflashvideoshim;version=1.3.1: C:\Documents and Settings\All Users\Application Data\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
  224. FF - HKLM\Software\MozillaPlugins\@real.com/nprpplugin;version=16.0.1.18: c:\program files\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
  225. FF - HKLM\Software\MozillaPlugins\@realnetworks.com/npdlplugin;version=1: C:\Documents and Settings\All Users\Application Data\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
  226. FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
  227. FF - HKLM\Software\MozillaPlugins\yaxmpb@yahoo.com/YahooActiveXPluginBridge;version=1.0.0.1: C:\PROGRA~1\Yahoo!\Common\npyaxmpb.dll File not found
  228. FF - HKCU\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll File not found
  229. FF - HKCU\Software\MozillaPlugins\@facebook.com/FBPlugin,version=1.0.1: C:\Documents and Settings\Dave\Application Data\Facebook\npfbplugin_1_0_1.dll ( )
  230. FF - HKCU\Software\MozillaPlugins\@facebook.com/FBPlugin,version=1.0.3: C:\Documents and Settings\Dave\Application Data\Facebook\npfbplugin_1_0_3.dll ( )
  231. FF - HKCU\Software\MozillaPlugins\@movenetworks.com/Quantum Media Player: File not found
  232. FF - HKCU\Software\MozillaPlugins\@yahoo.com/BrowserPlus,version=2.9.8: C:\Documents and Settings\Dave\Local Settings\Application Data\Yahoo!\BrowserPlus\2.9.8\Plugins\npybrowserplus_2.9.8.dll (Yahoo! Inc.)
  233.  
  234. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{20a82645-c095-46ed-80e3-08825760534b}: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ [2009/09/03 00:07:37 | 000,000,000 | ---D | M]
  235. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{86056EFB-0CB5-4FFF-B493-12A73C2DAA20}: C:\Documents and Settings\Dave\Local Settings\Application Data\{86056EFB-0CB5-4FFF-B493-12A73C2DAA20} [2010/11/28 22:49:22 | 000,000,000 | ---D | M]
  236. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{DAC3F861-B30D-40dd-9166-F4E75327FAC7}: C:\Documents and Settings\All Users\Application Data\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ [2013/03/25 23:05:40 | 000,000,000 | ---D | M]
  237. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 19.0.2\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2013/03/13 08:41:18 | 000,000,000 | ---D | M]
  238. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 19.0.2\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2013/03/25 23:05:15 | 000,000,000 | ---D | M]
  239. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 17.0.4\extensions\\Components: C:\Program Files\Mozilla Thunderbird\components [2013/03/13 08:14:52 | 000,000,000 | ---D | M]
  240. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 17.0.4\extensions\\Plugins: C:\Program Files\Mozilla Thunderbird\plugins [2013/03/25 23:05:15 | 000,000,000 | ---D | M]
  241.  
  242. [2008/06/23 07:53:56 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Dave\Application Data\Mozilla\Extensions
  243. [2011/02/12 09:00:25 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Dave\Application Data\Mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}
  244. [2008/06/23 07:53:56 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Dave\Application Data\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
  245. [2013/03/26 00:31:09 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Dave\Application Data\Mozilla\Firefox\Profiles\4qnniv0d.default\extensions
  246. [2010/04/27 18:07:29 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\Dave\Application Data\Mozilla\Firefox\Profiles\4qnniv0d.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
  247. [2013/03/26 00:31:09 | 000,000,000 | ---D | M] (Yahoo! Toolbar) -- C:\Documents and Settings\Dave\Application Data\Mozilla\Firefox\Profiles\4qnniv0d.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
  248. [2008/09/18 23:02:51 | 000,000,000 | ---D | M] (Move Media Player) -- C:\Documents and Settings\Dave\Application Data\Mozilla\Firefox\Profiles\4qnniv0d.default\extensions\moveplayer@movenetworks.com
  249. [2013/02/23 09:44:48 | 002,163,784 | ---- | M] () (No name found) -- C:\Documents and Settings\Dave\Application Data\Mozilla\Firefox\Profiles\4qnniv0d.default\extensions\firebug@software.joehewitt.com.xpi
  250. [2012/04/10 19:14:51 | 000,084,034 | ---- | M] () (No name found) -- C:\Documents and Settings\Dave\Application Data\Mozilla\Firefox\Profiles\4qnniv0d.default\extensions\FirePHPExtension-Build@firephp.org.xpi
  251. [2011/10/31 19:43:48 | 000,026,234 | ---- | M] () (No name found) -- C:\Documents and Settings\Dave\Application Data\Mozilla\Firefox\Profiles\4qnniv0d.default\extensions\jsonview@brh.numbera.com.xpi
  252. [2012/08/09 08:42:54 | 000,002,413 | ---- | M] () -- C:\Documents and Settings\Dave\Application Data\Mozilla\Firefox\Profiles\4qnniv0d.default\searchplugins\askcom.xml
  253. [2010/12/24 20:04:54 | 000,001,919 | ---- | M] () -- C:\Documents and Settings\Dave\Application Data\Mozilla\Firefox\Profiles\4qnniv0d.default\searchplugins\bing-zugo.xml
  254. [2013/03/13 08:41:07 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
  255. [2013/03/13 08:41:18 | 000,000,000 | ---D | M] (Default) -- C:\Program Files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
  256. [2013/03/13 08:41:07 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}
  257. [2013/03/13 08:41:07 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}
  258. [2013/03/13 08:41:07 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA}
  259. [2013/03/13 08:41:18 | 000,263,064 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
  260. [2008/02/04 11:00:44 | 000,044,360 | ---- | M] (WebEx Communications, Inc) -- C:\Program Files\mozilla firefox\plugins\atgpcdec.dll
  261. [2008/02/04 11:00:44 | 000,107,936 | ---- | M] (WebEx Communications, Inc) -- C:\Program Files\mozilla firefox\plugins\atgpcext.dll
  262. [2008/12/05 23:52:44 | 000,114,688 | ---- | M] (Adobe Systems, Inc.) -- C:\Program Files\mozilla firefox\plugins\np32dsw.dll
  263. [2008/02/04 11:00:43 | 000,057,248 | ---- | M] (WebEx Communications, Inc) -- C:\Program Files\mozilla firefox\plugins\npatgpc.dll
  264. [2008/06/10 17:03:12 | 001,335,600 | ---- | M] (DivX,Inc.) -- C:\Program Files\mozilla firefox\plugins\npdivx32.dll
  265. [2008/06/10 17:03:38 | 000,098,304 | ---- | M] (DivX, Inc) -- C:\Program Files\mozilla firefox\plugins\npDivxPlayerPlugin.dll
  266. [2013/02/15 15:04:52 | 000,208,448 | ---- | M] (Adobe Systems Inc.) -- C:\Program Files\mozilla firefox\plugins\nppdf32.dll
  267. [2013/03/25 23:05:15 | 000,153,736 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files\mozilla firefox\plugins\nppl3260.dll
  268. [2013/03/25 23:05:12 | 000,124,504 | ---- | M] (RealPlayer) -- C:\Program Files\mozilla firefox\plugins\nprpplugin.dll
  269. [2012/09/07 07:06:16 | 000,001,607 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazondotcom.xml
  270. [2009/06/26 09:46:51 | 000,001,490 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\avg_igeared.xml
  271. [2012/09/07 07:06:16 | 000,002,465 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml
  272. [2013/01/21 08:23:45 | 000,001,453 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay.xml
  273. [2013/01/21 08:23:45 | 000,002,669 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\google.xml
  274. [2010/12/24 20:05:06 | 000,002,280 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\search.xml
  275. [2013/02/27 01:24:58 | 000,002,086 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\twitter.xml
  276. [2012/09/07 07:06:16 | 000,001,391 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia.xml
  277. [2012/09/07 07:06:16 | 000,001,309 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo.xml
  278.  
  279. [color=#E56717]========== Chrome ==========[/color]
  280.  
  281. CHR - default_search_provider: Google (Enabled)
  282. CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
  283. CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?client=chrome&hl={language}&q={searchTerms}
  284. CHR - homepage: http://www.google.com
  285. CHR - Extension: RealPlayer HTML5Video Downloader Extension = C:\Documents and Settings\Dave\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk\1.4_0\
  286.  
  287. O1 HOSTS File: ([2011/07/18 20:52:34 | 000,436,852 | R--- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
  288. O1 - Hosts: 127.0.0.1 localhost
  289. O1 - Hosts: 127.0.0.1 www.007guard.com
  290. O1 - Hosts: 127.0.0.1 007guard.com
  291. O1 - Hosts: 127.0.0.1 008i.com
  292. O1 - Hosts: 127.0.0.1 www.008k.com
  293. O1 - Hosts: 127.0.0.1 008k.com
  294. O1 - Hosts: 127.0.0.1 www.00hq.com
  295. O1 - Hosts: 127.0.0.1 00hq.com
  296. O1 - Hosts: 127.0.0.1 010402.com
  297. O1 - Hosts: 127.0.0.1 www.032439.com
  298. O1 - Hosts: 127.0.0.1 032439.com
  299. O1 - Hosts: 127.0.0.1 www.100888290cs.com
  300. O1 - Hosts: 127.0.0.1 100888290cs.com
  301. O1 - Hosts: 127.0.0.1 www.100sexlinks.com
  302. O1 - Hosts: 127.0.0.1 100sexlinks.com
  303. O1 - Hosts: 127.0.0.1 www.10sek.com
  304. O1 - Hosts: 127.0.0.1 10sek.com
  305. O1 - Hosts: 127.0.0.1 www.123topsearch.com
  306. O1 - Hosts: 127.0.0.1 123topsearch.com
  307. O1 - Hosts: 127.0.0.1 www.132.com
  308. O1 - Hosts: 127.0.0.1 132.com
  309. O1 - Hosts: 127.0.0.1 www.136136.net
  310. O1 - Hosts: 127.0.0.1 136136.net
  311. O1 - Hosts: 127.0.0.1 www.163ns.com
  312. O1 - Hosts: 127.0.0.1 163ns.com
  313. O1 - Hosts: 15035 more lines...
  314. O2 - BHO: (&Yahoo! Toolbar Helper) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn4\yt.dll (Yahoo! Inc.)
  315. O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
  316. O2 - BHO: (RealNetworks Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Documents and Settings\All Users\Application Data\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
  317. O2 - BHO: (Yahoo! IE Services Button) - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll (Yahoo! Inc.)
  318. O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
  319. O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
  320. O2 - BHO: (SingleInstance Class) - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn2\YTSingleInstance.dll (Yahoo! Inc)
  321. O3 - HKLM\..\Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found.
  322. O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn4\yt.dll (Yahoo! Inc.)
  323. O3 - HKU\S-1-5-21-436374069-1364589140-839522115-1003\..\Toolbar\ShellBrowser: (&Address) - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\system32\browseui.dll (Microsoft Corporation)
  324. O3 - HKU\S-1-5-21-436374069-1364589140-839522115-1003\..\Toolbar\WebBrowser: (&Address) - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\system32\browseui.dll (Microsoft Corporation)
  325. O3 - HKU\S-1-5-21-436374069-1364589140-839522115-1003\..\Toolbar\WebBrowser: (&Links) - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\WINDOWS\system32\shell32.dll (Microsoft Corporation)
  326. O3 - HKU\S-1-5-21-436374069-1364589140-839522115-1003\..\Toolbar\WebBrowser: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn4\yt.dll (Yahoo! Inc.)
  327. O4 - HKLM..\Run: [Adobe ARM] C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)
  328. O4 - HKLM..\Run: [Adobe Photo Downloader] C:\Program Files\Adobe\Photoshop Elements 4.0\apdproxy.exe (Adobe Systems Incorporated)
  329. O4 - HKLM..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe (Apple Inc.)
  330. O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
  331. O4 - HKLM..\Run: [AsusStartupHelp] C:\Program Files\ASUS\AASP\1.00.16\AsRunHelp.exe ()
  332. O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
  333. O4 - HKLM..\Run: [EEventManager] C:\Program Files\Epson Software\Event Manager\EEventManager.exe (SEIKO EPSON CORPORATION)
  334. O4 - HKLM..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe (Apple Inc.)
  335. O4 - HKLM..\Run: [Launch Ai Booster] C:\Program Files\ASUS\AI Booster\OverClk.exe ()
  336. O4 - HKLM..\Run: [Media Codec Update Service] C:\Program Files\Essentials Codec Pack\WECPUpdate.exe (MediaCodec.Org)
  337. O4 - HKLM..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe (Nero AG)
  338. O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
  339. O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\nvmctray.dll (NVIDIA Corporation)
  340. O4 - HKLM..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe ()
  341. O4 - HKLM..\Run: [SoundMAX] C:\Program Files\Analog Devices\SoundMAX\Smax4.exe (Analog Devices, Inc.)
  342. O4 - HKLM..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe (Analog Devices, Inc.)
  343. O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files\Common Files\Java\Java Update\jusched.exe (Sun Microsystems, Inc.)
  344. O4 - HKLM..\Run: [TkBellExe] C:\program files\real\realplayer\update\realsched.exe (RealNetworks, Inc.)
  345. O4 - HKLM..\Run: [YSearchProtection] C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe (Yahoo! Inc)
  346. O4 - HKU\S-1-5-21-436374069-1364589140-839522115-1003..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe (Microsoft Corporation)
  347. O4 - HKU\S-1-5-21-436374069-1364589140-839522115-1003..\Run: [Epson Stylus NX510(Network)] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIFIA.EXE (SEIKO EPSON CORPORATION)
  348. O4 - HKU\S-1-5-21-436374069-1364589140-839522115-1003..\Run: [Messenger (Yahoo!)] C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe (Yahoo! Inc.)
  349. O4 - HKU\S-1-5-21-436374069-1364589140-839522115-1003..\Run: [Search Protection] C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe (Yahoo! Inc)
  350. O4 - HKU\S-1-5-21-436374069-1364589140-839522115-1004..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE File not found
  351. O4 - HKU\.DEFAULT..\RunOnce: [RunNarrator] C:\WINDOWS\System32\narrator.exe (Microsoft Corporation)
  352. O4 - HKU\S-1-5-18..\RunOnce: [RunNarrator] C:\WINDOWS\System32\narrator.exe (Microsoft Corporation)
  353. O4 - Startup: C:\Documents and Settings\Dave\Start Menu\Programs\Startup\Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
  354. O4 - Startup: C:\Documents and Settings\Dave\Start Menu\Programs\Startup\Epson all-in-one Registration.lnk = File not found
  355. O4 - Startup: C:\Documents and Settings\Dave\Start Menu\Programs\Startup\PowerReg Scheduler V3.exe (Leader Technologies)
  356. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
  357. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
  358. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
  359. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =
  360. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =
  361. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
  362. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
  363. O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
  364. O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
  365. O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
  366. O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
  367. O7 - HKU\S-1-5-21-436374069-1364589140-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
  368. O7 - HKU\S-1-5-21-436374069-1364589140-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
  369. O9 - Extra 'Tools' menuitem : Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\npjpi160_07.dll (Sun Microsystems, Inc.)
  370. O9 - Extra Button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll (Yahoo! Inc.)
  371. O9 - Extra 'Tools' menuitem : @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\network diagnostic\xpnetdiag.exe (Microsoft Corporation)
  372. O9 - Extra Button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation)
  373. O9 - Extra 'Tools' menuitem : Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation)
  374. O10 - NameSpace_Catalog5\Catalog_Entries\000000000001 [] - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
  375. O10 - NameSpace_Catalog5\Catalog_Entries\000000000002 [] - C:\WINDOWS\system32\winrnr.dll (Microsoft Corporation)
  376. O10 - NameSpace_Catalog5\Catalog_Entries\000000000003 [] - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
  377. O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
  378. O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
  379. O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
  380. O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
  381. O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\WINDOWS\system32\rsvpsp.dll (Microsoft Corporation)
  382. O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\WINDOWS\system32\rsvpsp.dll (Microsoft Corporation)
  383. O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
  384. O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
  385. O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
  386. O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
  387. O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
  388. O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
  389. O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
  390. O10 - Protocol_Catalog9\Catalog_Entries\000000000013 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
  391. O10 - Protocol_Catalog9\Catalog_Entries\000000000014 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
  392. O10 - Protocol_Catalog9\Catalog_Entries\000000000015 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
  393. O10 - Protocol_Catalog9\Catalog_Entries\000000000016 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
  394. O10 - Protocol_Catalog9\Catalog_Entries\000000000017 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
  395. O10 - Protocol_Catalog9\Catalog_Entries\000000000018 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
  396. O10 - Protocol_Catalog9\Catalog_Entries\000000000019 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
  397. O10 - Protocol_Catalog9\Catalog_Entries\000000000020 - C:\WINDOWS\system32\nvappfilter.dll (NVIDIA)
  398. O10 - Protocol_Catalog9\Catalog_Entries\000000000021 - C:\WINDOWS\system32\nvappfilter.dll (NVIDIA)
  399. O10 - Protocol_Catalog9\Catalog_Entries\000000000022 - C:\WINDOWS\system32\nvappfilter.dll (NVIDIA)
  400. O10 - Protocol_Catalog9\Catalog_Entries\000000000023 - C:\WINDOWS\system32\nvappfilter.dll (NVIDIA)
  401. O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} C:\Program Files\Yahoo!\Common\Yinsthelper.dll (Installation Support)
  402. O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1280897763515 (MUWebControl Class)
  403. O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab (OnlineScanner Control)
  404. O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Reg Error: Value error.)
  405. O16 - DPF: {CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0-windows-i586.cab (Reg Error: Key error.)
  406. O16 - DPF: {CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_04-windows-i586.cab (Reg Error: Key error.)
  407. O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Java Plug-in 1.6.0_07)
  408. O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Java Plug-in 1.6.0_07)
  409. O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
  410. O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 75.75.75.75 75.75.76.76
  411. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{DCB0FBCE-0D84-4F10-9A71-861C0762A723}: DhcpNameServer = 75.75.75.75 75.75.76.76
  412. O18 - Protocol\Handler\about {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)
  413. O18 - Protocol\Handler\cdl {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
  414. O18 - Protocol\Handler\dvd {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\WINDOWS\system32\msvidctl.dll (Microsoft Corporation)
  415. O18 - Protocol\Handler\file {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
  416. O18 - Protocol\Handler\ftp {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
  417. O18 - Protocol\Handler\gopher {79eac9e4-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
  418. O18 - Protocol\Handler\http {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
  419. O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\msdaipp.dll (Microsoft Corporation)
  420. O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\msdaipp.dll (Microsoft Corporation)
  421. O18 - Protocol\Handler\https {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
  422. O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\msdaipp.dll (Microsoft Corporation)
  423. O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\msdaipp.dll (Microsoft Corporation)
  424. O18 - Protocol\Handler\ipp - No CLSID value found
  425. O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\msdaipp.dll (Microsoft Corporation)
  426. O18 - Protocol\Handler\its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINDOWS\system32\itss.dll (Microsoft Corporation)
  427. O18 - Protocol\Handler\javascript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)
  428. O18 - Protocol\Handler\local {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
  429. O18 - Protocol\Handler\mailto {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)
  430. O18 - Protocol\Handler\mhtml {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\WINDOWS\system32\inetcomm.dll (Microsoft Corporation)
  431. O18 - Protocol\Handler\mk {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
  432. O18 - Protocol\Handler\msdaipp - No CLSID value found
  433. O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\msdaipp.dll (Microsoft Corporation)
  434. O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\msdaipp.dll (Microsoft Corporation)
  435. O18 - Protocol\Handler\ms-its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINDOWS\system32\itss.dll (Microsoft Corporation)
  436. O18 - Protocol\Handler\res {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)
  437. O18 - Protocol\Handler\sysimage {76E67A63-06E9-11D2-A840-006008059382} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)
  438. O18 - Protocol\Handler\tv {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\WINDOWS\system32\msvidctl.dll (Microsoft Corporation)
  439. O18 - Protocol\Handler\vbscript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)
  440. O18 - Protocol\Handler\wia {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} - C:\WINDOWS\system32\wiascr.dll (Microsoft Corporation)
  441. O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\WINDOWS\System32\mscoree.dll (Microsoft Corporation)
  442. O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\WINDOWS\System32\mscoree.dll (Microsoft Corporation)
  443. O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\WINDOWS\System32\mscoree.dll (Microsoft Corporation)
  444. O18 - Protocol\Filter\Class Install Handler {32B533BB-EDAE-11d0-BD5A-00AA00B92AF1} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
  445. O18 - Protocol\Filter\deflate {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
  446. O18 - Protocol\Filter\gzip {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
  447. O18 - Protocol\Filter\lzdhtml {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
  448. O18 - Protocol\Filter\text/webviewhtml {733AC4CB-F1A4-11d0-B951-00A0C90312E1} - C:\WINDOWS\system32\shell32.dll (Microsoft Corporation)
  449. O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
  450. O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
  451. O20 - HKLM Winlogon: UIHost - (logonui.exe) - C:\WINDOWS\System32\logonui.exe (Microsoft Corporation)
  452. O20 - HKLM Winlogon: VMApplet - (rundll32 shell32) - C:\WINDOWS\System32\shell32.dll (Microsoft Corporation)
  453. O20 - HKLM Winlogon: VMApplet - (Control_RunDLL "sysdm.cpl") - C:\WINDOWS\System32\sysdm.cpl (Microsoft Corporation)
  454. O20 - Winlogon\Notify\crypt32chain: DllName - (crypt32.dll) - C:\WINDOWS\System32\crypt32.dll (Microsoft Corporation)
  455. O20 - Winlogon\Notify\cryptnet: DllName - (cryptnet.dll) - C:\WINDOWS\System32\cryptnet.dll (Microsoft Corporation)
  456. O20 - Winlogon\Notify\cscdll: DllName - (cscdll.dll) - C:\WINDOWS\System32\cscdll.dll (Microsoft Corporation)
  457. O20 - Winlogon\Notify\dimsntfy: DllName - (%SystemRoot%\System32\dimsntfy.dll) - C:\WINDOWS\system32\dimsntfy.dll (Microsoft Corporation)
  458. O20 - Winlogon\Notify\ScCertProp: DllName - (wlnotify.dll) - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation)
  459. O20 - Winlogon\Notify\Schedule: DllName - (wlnotify.dll) - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation)
  460. O20 - Winlogon\Notify\sclgntfy: DllName - (sclgntfy.dll) - C:\WINDOWS\System32\sclgntfy.dll (Microsoft Corporation)
  461. O20 - Winlogon\Notify\SensLogn: DllName - (WlNotify.dll) - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation)
  462. O20 - Winlogon\Notify\termsrv: DllName - (wlnotify.dll) - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation)
  463. O20 - Winlogon\Notify\WgaLogon: DllName - (WgaLogon.dll) - C:\WINDOWS\System32\WgaLogon.dll (Microsoft Corporation)
  464. O20 - Winlogon\Notify\wlballoon: DllName - (wlnotify.dll) - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation)
  465. O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} - C:\WINDOWS\system32\shell32.dll (Microsoft Corporation)
  466. O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} - C:\WINDOWS\system32\shell32.dll (Microsoft Corporation)
  467. O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} - C:\WINDOWS\system32\stobject.dll (Microsoft Corporation)
  468. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\WINDOWS\system32\webcheck.dll (Microsoft Corporation)
  469. O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll (Microsoft Corporation)
  470. O22 - SharedTaskScheduler: {438755C2-A8BA-11D1-B96B-00A0C90312E1} - Browseui preloader - C:\WINDOWS\system32\browseui.dll (Microsoft Corporation)
  471. O22 - SharedTaskScheduler: {8C7461EF-2B13-11d2-BE35-3078302C2030} - Component Categories cache daemon - C:\WINDOWS\system32\browseui.dll (Microsoft Corporation)
  472. O24 - Desktop Components:0 (My Current Home Page) - About:Home
  473. O24 - Desktop WallPaper: C:\Documents and Settings\Dave\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
  474. O24 - Desktop BackupWallPaper: C:\Documents and Settings\Dave\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
  475. O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - C:\WINDOWS\System32\shell32.dll (Microsoft Corporation)
  476. O29 - HKLM SecurityProviders - (msapsspc.dll) - C:\WINDOWS\System32\msapsspc.dll (Microsoft Corporation)
  477. O29 - HKLM SecurityProviders - (schannel.dll) - C:\WINDOWS\System32\schannel.dll (Microsoft Corporation)
  478. O29 - HKLM SecurityProviders - (digest.dll) - C:\WINDOWS\System32\digest.dll (Microsoft Corporation)
  479. O29 - HKLM SecurityProviders - (msnsspc.dll) - C:\WINDOWS\System32\msnsspc.dll (Microsoft Corporation)
  480. O30 - LSA: Authentication Packages - (msv1_0) - C:\WINDOWS\System32\msv1_0.dll (Microsoft Corporation)
  481. O30 - LSA: Security Packages - (kerberos) - C:\WINDOWS\System32\kerberos.dll (Microsoft Corporation)
  482. O30 - LSA: Security Packages - (msv1_0) - C:\WINDOWS\System32\msv1_0.dll (Microsoft Corporation)
  483. O30 - LSA: Security Packages - (schannel) - C:\WINDOWS\System32\schannel.dll (Microsoft Corporation)
  484. O30 - LSA: Security Packages - (wdigest) - C:\WINDOWS\System32\wdigest.dll (Microsoft Corporation)
  485. O31 - SafeBoot: AlternateShell - cmd.exe
  486. O32 - HKLM CDRom: AutoRun - 1
  487. O32 - AutoRun File - [2008/03/21 10:27:56 | 000,000,050 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
  488. O34 - HKLM BootExecute: (autocheck autochk *)
  489. O35 - HKLM\..comfile [open] -- "%1" %*
  490. O35 - HKLM\..exefile [open] -- "%1" %*
  491. O37 - HKLM\...com [@ = comfile] -- "%1" %*
  492. O37 - HKLM\...exe [@ = exefile] -- "%1" %*
  493. O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
  494. O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
  495.  
  496. NetSvcs: 6to4 - File not found
  497. NetSvcs: Ias - File not found
  498. NetSvcs: Iprip - File not found
  499. NetSvcs: Irmon - File not found
  500. NetSvcs: NWCWorkstation - File not found
  501. NetSvcs: Nwsapagent - File not found
  502. NetSvcs: WmdmPmSp - File not found
  503.  
  504.  
  505. SafeBootMin: Base - Driver Group
  506. SafeBootMin: Boot Bus Extender - Driver Group
  507. SafeBootMin: Boot file system - Driver Group
  508. SafeBootMin: File system - Driver Group
  509. SafeBootMin: Filter - Driver Group
  510. SafeBootMin: PCI Configuration - Driver Group
  511. SafeBootMin: PNP Filter - Driver Group
  512. SafeBootMin: Primary disk - Driver Group
  513. SafeBootMin: SCSI Class - Driver Group
  514. SafeBootMin: sermouse.sys - Driver
  515. SafeBootMin: System Bus Extender - Driver Group
  516. SafeBootMin: vds - Service
  517. SafeBootMin: vga.sys - Driver
  518. SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
  519. SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
  520. SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
  521. SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
  522. SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
  523. SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
  524. SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
  525. SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
  526. SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
  527. SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
  528. SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
  529. SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
  530. SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
  531. SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
  532.  
  533. SafeBootNet: Base - Driver Group
  534. SafeBootNet: Boot Bus Extender - Driver Group
  535. SafeBootNet: Boot file system - Driver Group
  536. SafeBootNet: File system - Driver Group
  537. SafeBootNet: Filter - Driver Group
  538. SafeBootNet: NDIS Wrapper - Driver Group
  539. SafeBootNet: NetBIOSGroup - Driver Group
  540. SafeBootNet: NetDDEGroup - Driver Group
  541. SafeBootNet: Network - Driver Group
  542. SafeBootNet: NetworkProvider - Driver Group
  543. SafeBootNet: PCI Configuration - Driver Group
  544. SafeBootNet: PNP Filter - Driver Group
  545. SafeBootNet: PNP_TDI - Driver Group
  546. SafeBootNet: Primary disk - Driver Group
  547. SafeBootNet: SCSI Class - Driver Group
  548. SafeBootNet: sermouse.sys - Driver
  549. SafeBootNet: Streams Drivers - Driver Group
  550. SafeBootNet: System Bus Extender - Driver Group
  551. SafeBootNet: TDI - Driver Group
  552. SafeBootNet: vga.sys - Driver
  553. SafeBootNet: {1a3e09be-1e45-494b-9174-d7385b45bbf5} - Reg Error: Value error.
  554. SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
  555. SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
  556. SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
  557. SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
  558. SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
  559. SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
  560. SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
  561. SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
  562. SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
  563. SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
  564. SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
  565. SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
  566. SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
  567. SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
  568. SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
  569. SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
  570. SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
  571.  
  572. ActiveX: {0291E591-EA41-4c82-8106-3DC6CE7F7664} - Reg Error: Value error.
  573. ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)
  574. ActiveX: {10072CEC-8CC1-11D1-986E-00A0C955B42F} - Vector Graphics Rendering (VML)
  575. ActiveX: {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} - NetShow
  576. ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 6.4
  577. ActiveX: {233C1507-6A77-46A4-9443-F871F945D258} - Adobe Shockwave Director 11.0.3
  578. ActiveX: {283807B5-2C60-11D0-A31D-00AA00B92C03} - DirectAnimation
  579. ActiveX: {2A202491-F00D-11cf-87CC-0020AFEECF20} - Adobe Shockwave Director 11.0.3
  580. ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
  581. ActiveX: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} - Reg Error: Value error.
  582. ActiveX: {347B0667-C7ED-429B-BDE3-CC8D3BACAA31} - Reg Error: Value error.
  583. ActiveX: {36f8ec70-c29a-11d1-b5c7-0000f8051515} - Dynamic HTML Data Binding for Java
  584. ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
  585. ActiveX: {3bf42070-b3b1-11d1-b5c5-0000f8051515} - Uniscribe
  586. ActiveX: {4278c270-a269-11d1-b5bf-0000f8051515} - Advanced Authoring
  587. ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install
  588. ActiveX: {44BBA842-CC51-11CF-AAFA-00AA00B6015B} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT
  589. ActiveX: {44BBA848-CC51-11CF-AAFA-00AA00B6015C} - DirectShow
  590. ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015C} - Microsoft DirectX
  591. ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
  592. ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
  593. ActiveX: {4f216970-c90c-11d1-b5c7-0000f8051515} - DirectAnimation Java Classes
  594. ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
  595. ActiveX: {5056b317-8d4c-43ee-8543-b9d1e234b8f4} - Security Update for Windows XP (KB923789)
  596. ActiveX: {5945c046-1e7d-11d1-bc44-00c04fd912be} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser
  597. ActiveX: {5A8D6EE0-3E18-11D0-821E-444553540000} - ICW
  598. ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
  599. ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
  600. ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
  601. ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
  602. ActiveX: {7131646D-CD3C-40F4-97B9-CD9E4E6262EF} - .NET Framework
  603. ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install
  604. ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
  605. ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\WINDOWS\system32\ie4uinit.exe -BaseSettings
  606. ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - c:\WINDOWS\system32\Rundll32.exe c:\WINDOWS\system32\mscories.dll,Install
  607. ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
  608. ActiveX: {A17E30C4-A9BA-11D4-8673-60DB54C10000} - Reg Error: Value error.
  609. ActiveX: {AA218328-0EA8-4D70-8972-E987A9190FF4} - Reg Error: Value error.
  610. ActiveX: {B508B3F1-A24A-32C0-B310-85786919EF28} - .NET Framework
  611. ActiveX: {C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F} - .NET Framework
  612. ActiveX: {C3C986D6-06B1-43BF-90DD-BE30756C00DE} - RevokedRootsUpdate
  613. ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
  614. ActiveX: {CC2A9BA0-3BDD-11D0-821E-444553540000} - Task Scheduler
  615. ActiveX: {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - Windows Movie Maker v2.1
  616. ActiveX: {D27CDB6E-AE6D-11cf-96B8-444553540000} - Macromedia Shockwave Flash
  617. ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
  618. ActiveX: {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - Reg Error: Value error.
  619. ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
  620. ActiveX: <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988} - C:\WINDOWS\system32\ieudinit.exe
  621. ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\WINDOWS\inf\unregmp2.exe /ShowWMP
  622. ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\WINDOWS\system32\ie4uinit.exe -UserIconConfig
  623. ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\WINDOWS\system32\rundll32.exe" "C:\WINDOWS\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
  624. ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS - RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP
  625. ActiveX: >{881dd1c5-3dcf-431b-b061-f3f88e8be88a} - %systemroot%\system32\shmgrate.exe OCInstallUserConfigOE
  626.  
  627. Drivers32: msacm.ac3acm - C:\WINDOWS\System32\ac3acm.acm (fccHandler)
  628. Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation)
  629. Drivers32: msacm.l3acm - C:\WINDOWS\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
  630. Drivers32: msacm.lameacm - C:\WINDOWS\System32\lameACM.acm (http://www.mp3dev.org/)
  631. Drivers32: MSACM.LHACM - C:\WINDOWS\System32\lhacm.acm (Microsoft Corporation)
  632. Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
  633. Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
  634. Drivers32: msacm.voxacm160 - C:\WINDOWS\System32\vct3216.acm (Voxware, Inc.)
  635. Drivers32: MSVideo8 - C:\WINDOWS\System32\vfwwdm32.dll (Microsoft Corporation)
  636. Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
  637. Drivers32: vidc.DIVX - C:\WINDOWS\System32\DivX.dll (DivX, Inc.)
  638. Drivers32: VIDC.FFDS - C:\WINDOWS\System32\ff_vfw.dll ()
  639. Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll ()
  640. Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll ()
  641. Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation)
  642. Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation)
  643. Drivers32: VIDC.TR20 - C:\WINDOWS\System32\tr2032.dll (The Duck Corporation)
  644. Drivers32: VIDC.VDOM - C:\WINDOWS\System32\vdowave.drv (VDOnet LTD..)
  645. Drivers32: vidc.vivo - C:\WINDOWS\System32\ivvideo.dll (Vivo Software)
  646. Drivers32: VIDC.XVID - C:\WINDOWS\System32\xvidvfw.dll ()
  647. Drivers32: VIDC.YV12 - C:\WINDOWS\System32\yv12vfw.dll (www.helixcommunity.org)
  648.  
  649. [color=#E56717]========== Files/Folders - Created Within 90 Days ==========[/color]
  650.  
  651. [2013/04/01 08:24:49 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Dave\Desktop\OTL.scr
  652. [2013/03/28 22:13:08 | 000,262,560 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\javaws.exe
  653. [2013/03/28 22:13:02 | 000,174,496 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\javaw.exe
  654. [2013/03/28 22:13:02 | 000,174,496 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\java.exe
  655. [2013/03/28 22:13:02 | 000,094,112 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\WindowsAccessBridge.dll
  656. [2013/03/26 07:24:38 | 000,000,000 | ---D | C] -- C:\Program Files\ESET
  657. [2013/03/25 23:53:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Dave\Application Data\Avira
  658. [2013/03/25 23:05:40 | 000,000,000 | ---D | C] -- C:\Program Files\RealNetworks
  659. [2013/03/25 23:05:37 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\RealNetworks
  660. [2013/03/25 23:05:21 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\xing shared
  661. [2013/03/25 23:05:15 | 000,201,872 | ---- | C] (RealNetworks, Inc.) -- C:\WINDOWS\System32\rmoc3260.dll
  662. [2013/03/25 23:05:09 | 000,006,656 | ---- | C] (RealNetworks, Inc.) -- C:\WINDOWS\System32\pndx5016.dll
  663. [2013/03/25 23:05:09 | 000,005,632 | ---- | C] (RealNetworks, Inc.) -- C:\WINDOWS\System32\pndx5032.dll
  664. [2013/03/25 23:05:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\RealNetworks
  665. [2013/03/25 09:12:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Application Data\Mozilla
  666. [2013/03/25 09:11:45 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Avira
  667. [2013/03/25 09:11:31 | 000,028,520 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\ssmdrv.sys
  668. [2013/03/25 09:11:30 | 000,135,136 | ---- | C] (Avira Operations GmbH & Co. KG) -- C:\WINDOWS\System32\drivers\avipbb.sys
  669. [2013/03/25 09:11:30 | 000,084,744 | ---- | C] (Avira Operations GmbH & Co. KG) -- C:\WINDOWS\System32\drivers\avgntflt.sys
  670. [2013/03/25 09:11:30 | 000,037,352 | ---- | C] (Avira Operations GmbH & Co. KG) -- C:\WINDOWS\System32\drivers\avkmgr.sys
  671. [2013/03/25 09:11:25 | 000,000,000 | ---D | C] -- C:\Program Files\Avira
  672. [2013/03/25 09:11:25 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Avira
  673. [2013/03/22 07:28:29 | 000,012,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\usb8023x.sys
  674. [2013/03/22 07:28:29 | 000,012,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\usb8023.sys
  675. [2013/03/13 08:41:07 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
  676. [2013/03/13 08:14:52 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Thunderbird
  677. [2013/02/22 12:20:43 | 000,000,000 | ---D | C] -- C:\scratch_projects
  678. [2013/02/22 09:39:59 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Dave\My Documents\Scratch Projects
  679. [2013/02/22 09:39:32 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Dave\Start Menu\Programs\Scratch
  680. [2013/02/22 09:39:25 | 000,000,000 | ---D | C] -- C:\Program Files\Scratch
  681. [2013/02/21 11:21:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Dave\Local Settings\Application Data\Sun
  682. [2007/11/17 08:46:28 | 000,047,360 | ---- | C] (VSO Software) -- C:\Documents and Settings\Dave\Application Data\pcouffin.sys
  683. [6 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
  684. [10 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
  685.  
  686. [color=#E56717]========== Files - Modified Within 90 Days ==========[/color]
  687.  
  688. [2013/04/01 08:57:00 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At10.job
  689. [2013/04/01 08:48:15 | 000,000,830 | ---- | M] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job
  690. [2013/04/01 08:24:50 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Dave\Desktop\OTL.scr
  691. [2013/04/01 08:13:22 | 000,000,276 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-436374069-1364589140-839522115-1003.job
  692. [2013/04/01 08:13:20 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-436374069-1364589140-839522115-1003.job
  693. [2013/04/01 08:13:20 | 000,000,276 | ---- | M] () -- C:\WINDOWS\tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-436374069-1364589140-839522115-1003.job
  694. [2013/04/01 08:12:38 | 000,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
  695. [2013/04/01 08:12:37 | 000,000,280 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-18.job
  696. [2013/04/01 08:12:35 | 002,894,152 | ---- | M] () -- C:\WINDOWS\System32\nvdb02.adghz
  697. [2013/04/01 08:12:21 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At22.job
  698. [2013/04/01 08:12:20 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
  699. [2013/03/31 10:07:21 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At9.job
  700. [2013/03/31 10:07:21 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At24.job
  701. [2013/03/31 10:07:21 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At23.job
  702. [2013/03/31 10:07:21 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At21.job
  703. [2013/03/31 10:07:21 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At20.job
  704. [2013/03/31 10:07:21 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At19.job
  705. [2013/03/31 10:07:21 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At18.job
  706. [2013/03/31 10:07:21 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At17.job
  707. [2013/03/31 10:07:21 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At16.job
  708. [2013/03/31 10:07:21 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At15.job
  709. [2013/03/31 10:07:21 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At14.job
  710. [2013/03/31 10:07:21 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At13.job
  711. [2013/03/31 10:07:21 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At12.job
  712. [2013/03/31 10:07:21 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At11.job
  713. [2013/03/30 16:29:32 | 000,238,049 | ---- | M] () -- C:\Documents and Settings\Dave\Desktop\StatementPdf.pdf
  714. [2013/03/28 22:17:33 | 000,506,534 | ---- | M] () -- C:\Documents and Settings\Dave\Desktop\2013_8879.pdf
  715. [2013/03/28 22:12:48 | 000,262,560 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\javaws.exe
  716. [2013/03/28 22:12:48 | 000,174,496 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\javaw.exe
  717. [2013/03/28 22:12:48 | 000,174,496 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\java.exe
  718. [2013/03/28 22:12:48 | 000,143,872 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\javacpl.cpl
  719. [2013/03/28 22:12:48 | 000,094,112 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\WindowsAccessBridge.dll
  720. [2013/03/28 22:12:47 | 000,861,088 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\npdeployJava1.dll
  721. [2013/03/28 22:12:47 | 000,782,240 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\deployJava1.dll
  722. [2013/03/28 21:18:43 | 000,135,136 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\WINDOWS\System32\drivers\avipbb.sys
  723. [2013/03/28 21:18:43 | 000,084,744 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\WINDOWS\System32\drivers\avgntflt.sys
  724. [2013/03/28 21:18:43 | 000,037,352 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\WINDOWS\System32\drivers\avkmgr.sys
  725. [2013/03/27 17:18:49 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At2.job
  726. [2013/03/26 21:08:00 | 000,000,288 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-18.job
  727. [2013/03/26 19:19:11 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At8.job
  728. [2013/03/25 23:05:47 | 000,000,747 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\RealPlayer.lnk
  729. [2013/03/25 23:05:15 | 000,201,872 | ---- | M] (RealNetworks, Inc.) -- C:\WINDOWS\System32\rmoc3260.dll
  730. [2013/03/25 23:05:09 | 000,272,896 | ---- | M] (Progressive Networks) -- C:\WINDOWS\System32\pncrt.dll
  731. [2013/03/25 23:05:09 | 000,006,656 | ---- | M] (RealNetworks, Inc.) -- C:\WINDOWS\System32\pndx5016.dll
  732. [2013/03/25 23:05:09 | 000,005,632 | ---- | M] (RealNetworks, Inc.) -- C:\WINDOWS\System32\pndx5032.dll
  733. [2013/03/25 09:11:45 | 000,001,707 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Avira Control Center.lnk
  734. [2013/03/25 08:43:36 | 000,028,520 | ---- | M] (Avira GmbH) -- C:\WINDOWS\System32\drivers\ssmdrv.sys
  735. [2013/03/23 07:56:00 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-436374069-1364589140-839522115-1003.job
  736. [2013/03/22 18:55:22 | 000,063,681 | ---- | M] () -- C:\Documents and Settings\Dave\Desktop\2012_pnc_int.pdf
  737. [2013/03/14 09:14:47 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK
  738. [2013/03/13 08:48:09 | 000,693,976 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerApp.exe
  739. [2013/03/13 08:48:08 | 000,073,432 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
  740. [2013/03/10 07:30:29 | 000,432,784 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
  741. [2013/03/10 07:30:29 | 000,067,740 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
  742. [2013/02/28 19:33:07 | 006,011,392 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mshtml.dll
  743. [2013/02/22 09:39:49 | 000,000,776 | ---- | M] () -- C:\Documents and Settings\Dave\Desktop\Scratch.lnk
  744. [2013/02/14 17:32:30 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At7.job
  745. [2013/02/14 07:51:38 | 000,189,792 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
  746. [2013/02/12 20:58:33 | 000,013,277 | ---- | M] () -- C:\Documents and Settings\Dave\My Documents\untitled_0.odt
  747. [2013/02/11 17:32:23 | 000,012,928 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\usb8023x.sys
  748. [2013/02/11 17:32:23 | 000,012,928 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\usb8023.sys
  749. [2013/02/11 17:32:23 | 000,012,928 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\usb8023.sys
  750. [2013/02/10 13:05:09 | 001,552,742 | ---- | M] () -- C:\Documents and Settings\Dave\Desktop\louis_1099.pdf
  751. [2013/02/05 13:05:47 | 001,212,928 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\urlmon.dll
  752. [2013/02/05 13:05:47 | 000,916,480 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wininet.dll
  753. [2013/02/05 13:05:47 | 000,611,840 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\mstime.dll
  754. [2013/02/05 13:05:47 | 000,611,840 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mstime.dll
  755. [2013/02/05 13:05:47 | 000,206,848 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\occache.dll
  756. [2013/02/05 13:05:47 | 000,105,984 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\url.dll
  757. [2013/02/05 13:05:47 | 000,105,984 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\url.dll
  758. [2013/02/05 13:05:46 | 002,004,992 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iertutil.dll
  759. [2013/02/05 13:05:46 | 001,469,440 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\inetcpl.cpl
  760. [2013/02/05 13:05:46 | 001,469,440 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\inetcpl.cpl
  761. [2013/02/05 13:05:46 | 000,630,272 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\msfeeds.dll
  762. [2013/02/05 13:05:46 | 000,630,272 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msfeeds.dll
  763. [2013/02/05 13:05:46 | 000,522,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\jsdbgui.dll
  764. [2013/02/05 13:05:46 | 000,067,072 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mshtmled.dll
  765. [2013/02/05 13:05:46 | 000,055,296 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\msfeedsbs.dll
  766. [2013/02/05 13:05:46 | 000,055,296 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msfeedsbs.dll
  767. [2013/02/05 13:05:46 | 000,043,520 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\licmgr10.dll
  768. [2013/02/05 13:05:46 | 000,043,520 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\licmgr10.dll
  769. [2013/02/05 13:05:46 | 000,025,600 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\jsproxy.dll
  770. [2013/02/05 13:05:46 | 000,025,600 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\jsproxy.dll
  771. [2013/02/05 13:05:45 | 011,111,424 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ieframe.dll
  772. [2013/02/05 13:05:45 | 000,743,424 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iedvtool.dll
  773. [2013/02/05 13:05:45 | 000,387,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\iedkcs32.dll
  774. [2013/02/05 13:05:45 | 000,387,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iedkcs32.dll
  775. [2013/02/05 13:05:45 | 000,184,320 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\iepeers.dll
  776. [2013/02/05 13:05:45 | 000,184,320 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iepeers.dll
  777. [2013/02/04 22:54:07 | 000,174,080 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\ie4uinit.exe
  778. [2013/02/04 22:54:07 | 000,174,080 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ie4uinit.exe
  779. [2013/02/04 22:53:57 | 000,385,024 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\html.iec
  780. [2013/01/25 20:55:44 | 000,552,448 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\oleaut32.dll
  781. [2013/01/14 09:09:22 | 002,171,485 | ---- | M] () -- C:\Documents and Settings\Dave\Desktop\2013_gfe.pdf
  782. [2013/01/10 12:33:34 | 000,759,296 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\vgx.dll
  783. [2013/01/10 09:31:32 | 000,161,111 | ---- | M] () -- C:\Documents and Settings\Dave\Desktop\WeightWatchers.pdf
  784. [2013/01/06 18:19:45 | 002,148,864 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\ntoskrnl.exe
  785. [2013/01/06 18:19:45 | 002,148,864 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ntkrnlmp.exe
  786. [2013/01/06 18:16:02 | 002,193,024 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ntoskrnl.exe
  787. [2013/01/06 17:37:01 | 002,027,520 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ntkrpamp.exe
  788. [2013/01/06 17:37:01 | 002,027,520 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\ntkrnlpa.exe
  789. [2013/01/06 17:36:58 | 002,069,760 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ntkrnlpa.exe
  790. [2013/01/03 18:20:00 | 001,867,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\win32k.sys
  791. [2013/01/03 18:20:00 | 001,867,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\win32k.sys
  792. [2013/01/02 16:02:00 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job
  793. [2013/01/01 23:49:10 | 001,292,288 | ---- | M] () -- C:\WINDOWS\System32\dllcache\quartz.dll
  794. [2013/01/01 23:49:10 | 000,148,992 | ---- | M] () -- C:\WINDOWS\System32\mpg2splt.ax
  795. [2013/01/01 23:49:10 | 000,148,992 | ---- | M] () -- C:\WINDOWS\System32\dllcache\mpg2splt.ax
  796. [6 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
  797. [10 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
  798.  
  799. [color=#E56717]========== Files Created - No Company Name ==========[/color]
  800.  
  801. [2013/03/28 22:17:32 | 000,506,534 | ---- | C] () -- C:\Documents and Settings\Dave\Desktop\2013_8879.pdf
  802. [2013/03/25 23:06:17 | 000,000,276 | ---- | C] () -- C:\WINDOWS\tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-436374069-1364589140-839522115-1003.job
  803. [2013/03/25 23:06:16 | 000,000,284 | ---- | C] () -- C:\WINDOWS\tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-436374069-1364589140-839522115-1003.job
  804. [2013/03/25 23:05:47 | 000,000,747 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\RealPlayer.lnk
  805. [2013/03/25 09:11:45 | 000,001,707 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Avira Control Center.lnk
  806. [2013/03/22 18:55:22 | 000,063,681 | ---- | C] () -- C:\Documents and Settings\Dave\Desktop\2012_pnc_int.pdf
  807. [2013/02/22 09:39:49 | 000,000,776 | ---- | C] () -- C:\Documents and Settings\Dave\Desktop\Scratch.lnk
  808. [2013/02/14 07:55:20 | 000,013,277 | ---- | C] () -- C:\Documents and Settings\Dave\My Documents\untitled_0.odt
  809. [2013/02/10 13:05:06 | 001,552,742 | ---- | C] () -- C:\Documents and Settings\Dave\Desktop\louis_1099.pdf
  810. [2013/01/14 09:09:12 | 002,171,485 | ---- | C] () -- C:\Documents and Settings\Dave\Desktop\2013_gfe.pdf
  811. [2013/01/10 09:31:30 | 000,161,111 | ---- | C] () -- C:\Documents and Settings\Dave\Desktop\WeightWatchers.pdf
  812. [2012/08/13 10:57:00 | 000,012,927 | ---- | C] () -- C:\Program Files\readme.html
  813. [2012/05/08 14:15:36 | 000,000,005 | ---- | C] () -- C:\Program Files\basis-link
  814. [2012/02/18 08:35:03 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll
  815. [2012/01/24 10:01:20 | 000,348,160 | ---- | C] () -- C:\WINDOWS\System32\cdga.dll
  816. [2011/07/03 18:39:54 | 000,273,344 | ---- | C] () -- C:\WINDOWS\System32\nvdrsdb1.bin
  817. [2011/07/03 18:39:54 | 000,273,344 | ---- | C] () -- C:\WINDOWS\System32\nvdrsdb0.bin
  818. [2011/07/03 18:39:54 | 000,000,001 | ---- | C] () -- C:\WINDOWS\System32\nvdrssel.bin
  819. [2011/07/03 18:39:35 | 002,123,582 | ---- | C] () -- C:\WINDOWS\System32\nvdata.data
  820. [2010/11/29 01:25:40 | 000,000,006 | ---- | C] () -- C:\Documents and Settings\Dave\Application Data\start
  821. [2010/11/29 01:24:59 | 000,000,006 | ---- | C] () -- C:\Documents and Settings\Dave\Application Data\completescan
  822. [2010/11/29 01:17:21 | 000,000,010 | ---- | C] () -- C:\Documents and Settings\Dave\Application Data\install
  823. [2010/05/01 15:46:08 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Dave\Local Settings\Application Data\prvlcl.dat
  824. [2007/12/26 13:42:39 | 000,000,600 | ---- | C] () -- C:\Documents and Settings\Dave\winscp.RND
  825. [2007/11/23 09:38:27 | 000,001,755 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\QTSBandwidthCache
  826. [2007/11/17 08:46:28 | 000,087,608 | ---- | C] () -- C:\Documents and Settings\Dave\Application Data\inst.exe
  827. [2007/11/17 08:46:28 | 000,007,887 | ---- | C] () -- C:\Documents and Settings\Dave\Application Data\pcouffin.cat
  828. [2007/11/17 08:46:28 | 000,001,144 | ---- | C] () -- C:\Documents and Settings\Dave\Application Data\pcouffin.inf
  829. [2007/07/16 11:51:19 | 000,016,217 | ---- | C] () -- C:\Documents and Settings\Dave\_viminfo
  830. [2007/05/24 11:07:15 | 000,000,098 | ---- | C] () -- C:\Documents and Settings\Dave\default.pls
  831. [2007/05/17 23:44:44 | 000,000,600 | ---- | C] () -- C:\Documents and Settings\Dave\Local Settings\Application Data\PUTTY.RND
  832. [2007/05/17 21:30:57 | 000,072,192 | ---- | C] () -- C:\Documents and Settings\Dave\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
  833.  
  834. [color=#E56717]========== ZeroAccess Check ==========[/color]
  835.  
  836. [2007/07/08 14:19:04 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini
  837.  
  838. [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  839.  
  840. [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
  841.  
  842. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  843. "" = %SystemRoot%\system32\shdocvw.dll -- [2008/04/13 17:12:05 | 001,499,136 | ---- | M] (Microsoft Corporation)
  844. "ThreadingModel" = Apartment
  845.  
  846. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
  847. "" = C:\WINDOWS\system32\wbem\fastprox.dll -- [2009/02/09 05:10:48 | 000,473,600 | ---- | M] (Microsoft Corporation)
  848. "ThreadingModel" = Free
  849.  
  850. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
  851. "" = C:\WINDOWS\system32\wbem\wbemess.dll -- [2008/04/13 17:12:08 | 000,273,920 | ---- | M] (Microsoft Corporation)
  852. "ThreadingModel" = Both
  853.  
  854. [color=#E56717]========== LOP Check ==========[/color]
  855.  
  856. [2012/12/22 16:33:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\188F1432-103A-4ffb-80F1-36B633C5C9E1
  857. [2007/11/17 10:51:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\1Click DVDTOIPOD
  858. [2010/12/01 20:18:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Cisco Systems
  859. [2012/07/29 21:11:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Desura
  860. [2009/12/25 15:07:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\EPSON
  861. [2007/06/07 22:00:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\espionServerData
  862. [2010/10/27 08:07:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\MFAData
  863. [2007/07/26 08:20:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Outspark
  864. [2008/12/26 21:32:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TEMP
  865. [2010/06/19 18:13:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Ulead Systems
  866. [2009/03/26 18:07:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{00D89592-F643-4D8D-8F0F-AFAE0F14D4C3}
  867. [2010/04/26 19:47:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
  868. [2009/09/18 09:32:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{755AC846-7372-4AC8-8550-C52491DAA8BD}
  869. [2009/04/13 16:03:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
  870. [2011/07/31 15:56:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dave\Application Data\.minecraft
  871. [2008/09/19 17:05:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dave\Application Data\BitTorrent
  872. [2008/03/21 10:29:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dave\Application Data\BitTorrent DNA
  873. [2008/05/01 08:50:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dave\Application Data\Command & Conquer 3 Tiberium Wars
  874. [2012/01/23 18:26:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dave\Application Data\Digiarty
  875. [2010/12/24 20:05:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dave\Application Data\dtband
  876. [2012/12/22 16:30:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dave\Application Data\ElevatedDiagnostics
  877. [2009/12/26 08:58:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dave\Application Data\Epson
  878. [2010/06/06 11:44:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dave\Application Data\Facebook
  879. [2010/09/19 23:03:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dave\Application Data\FinalBurner Video DVD
  880. [2011/01/21 12:47:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dave\Application Data\GetRightToGo
  881. [2008/08/17 12:22:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dave\Application Data\iWin
  882. [2009/12/25 15:09:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dave\Application Data\Leadertech
  883. [2012/09/26 20:25:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dave\Application Data\NetBeans
  884. [2009/06/17 22:20:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dave\Application Data\OpenOffice.org
  885. [2007/06/07 21:58:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dave\Application Data\Opera
  886. [2011/02/12 09:00:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dave\Application Data\Thunderbird
  887. [2010/08/03 21:48:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dave\Application Data\Toolbar4
  888. [2010/06/16 22:01:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dave\Application Data\Ulead Systems
  889. [2007/11/18 09:39:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dave\Application Data\Vso
  890. [2008/02/04 11:01:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dave\Application Data\WebEx
  891.  
  892. [color=#E56717]========== Purity Check ==========[/color]
  893.  
  894.  
  895.  
  896. [color=#E56717]========== Custom Scans ==========[/color]
  897.  
  898. [color=#A23BEC]< %SYSTEMDRIVE%\*.* >[/color]
  899. [2007/06/07 22:00:32 | 000,000,000 | ---- | M] () -- C:\AdobeDebug.txt
  900. [2008/03/21 10:27:56 | 000,000,050 | ---- | M] () -- C:\AUTOEXEC.BAT
  901. [2007/07/14 15:34:25 | 000,000,211 | -HS- | M] () -- C:\boot.ini
  902. [2007/05/16 23:34:40 | 000,000,000 | ---- | M] () -- C:\CONFIG.SYS
  903. [2009/06/02 22:16:34 | 001,958,212 | ---- | M] () -- C:\Cucu_Video_log.txt
  904. [2011/06/22 20:38:29 | 004,173,824 | ---- | M] () -- C:\dump_dvd.vob
  905. [2007/11/07 06:00:40 | 000,017,734 | ---- | M] () -- C:\eula.1028.txt
  906. [2007/11/07 06:00:40 | 000,017,734 | ---- | M] () -- C:\eula.1031.txt
  907. [2007/11/07 06:00:40 | 000,010,134 | ---- | M] () -- C:\eula.1033.txt
  908. [2007/11/07 06:00:40 | 000,017,734 | ---- | M] () -- C:\eula.1036.txt
  909. [2007/11/07 06:00:40 | 000,017,734 | ---- | M] () -- C:\eula.1040.txt
  910. [2007/11/07 06:00:40 | 000,000,118 | ---- | M] () -- C:\eula.1041.txt
  911. [2007/11/07 06:00:40 | 000,017,734 | ---- | M] () -- C:\eula.1042.txt
  912. [2007/11/07 06:00:40 | 000,017,734 | ---- | M] () -- C:\eula.2052.txt
  913. [2007/11/07 06:00:40 | 000,017,734 | ---- | M] () -- C:\eula.3082.txt
  914. [2007/11/07 06:00:40 | 000,001,110 | ---- | M] () -- C:\globdata.ini
  915. [2010/09/08 22:52:19 | 000,241,416 | ---- | M] () -- C:\hcwclear.txt
  916. [2007/11/07 06:03:18 | 000,562,688 | ---- | M] (Microsoft Corporation) -- C:\install.exe
  917. [2007/11/07 06:00:40 | 000,000,843 | ---- | M] () -- C:\install.ini
  918. [2007/11/07 06:03:18 | 000,076,304 | ---- | M] (Microsoft Corporation) -- C:\install.res.1028.dll
  919. [2007/11/07 06:03:18 | 000,096,272 | ---- | M] (Microsoft Corporation) -- C:\install.res.1031.dll
  920. [2007/11/07 06:03:18 | 000,091,152 | ---- | M] (Microsoft Corporation) -- C:\install.res.1033.dll
  921. [2007/11/07 06:03:18 | 000,097,296 | ---- | M] (Microsoft Corporation) -- C:\install.res.1036.dll
  922. [2007/11/07 06:03:18 | 000,095,248 | ---- | M] (Microsoft Corporation) -- C:\install.res.1040.dll
  923. [2007/11/07 06:03:18 | 000,081,424 | ---- | M] (Microsoft Corporation) -- C:\install.res.1041.dll
  924. [2007/11/07 06:03:18 | 000,079,888 | ---- | M] (Microsoft Corporation) -- C:\install.res.1042.dll
  925. [2007/11/07 06:03:18 | 000,075,792 | ---- | M] (Microsoft Corporation) -- C:\install.res.2052.dll
  926. [2007/11/07 06:03:18 | 000,096,272 | ---- | M] (Microsoft Corporation) -- C:\install.res.3082.dll
  927. [2007/05/16 23:34:40 | 000,000,000 | RHS- | M] () -- C:\IO.SYS
  928. [2007/05/16 23:34:40 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS
  929. [2004/08/04 05:00:00 | 000,047,564 | RHS- | M] () -- C:\NTDETECT.COM
  930. [2008/09/19 07:31:21 | 000,250,048 | RHS- | M] () -- C:\ntldr
  931. [2010/03/19 13:19:20 | 000,262,144 | ---- | M] () -- C:\ntuser.dat
  932. [2010/03/19 13:19:20 | 000,001,024 | -H-- | M] () -- C:\ntuser.dat.LOG
  933. [2013/04/01 08:12:17 | 2145,386,496 | -HS- | M] () -- C:\pagefile.sys
  934. [2010/12/02 00:34:33 | 000,000,390 | ---- | M] () -- C:\rkill.log
  935. [2011/11/06 15:42:23 | 000,002,684 | ---- | M] () -- C:\SNInit.log
  936. [2007/11/07 06:00:40 | 000,005,686 | ---- | M] () -- C:\vcredist.bmp
  937. [2007/11/07 06:09:22 | 001,442,522 | ---- | M] () -- C:\VC_RED.cab
  938. [2007/11/07 06:12:28 | 000,232,960 | ---- | M] () -- C:\VC_RED.MSI
  939. [2007/05/18 15:51:24 | 000,000,140 | ---- | M] () -- C:\YServer.txt
  940.  
  941. [color=#A23BEC]< %USERPROFILE%\*.* >[/color]
  942. [2011/06/22 20:40:11 | 000,000,098 | ---- | M] () -- C:\Documents and Settings\Dave\default.pls
  943. [2013/04/01 00:49:48 | 012,058,624 | -H-- | M] () -- C:\Documents and Settings\Dave\NTUSER.DAT
  944. [2013/04/01 09:09:40 | 000,001,024 | -H-- | M] () -- C:\Documents and Settings\Dave\ntuser.dat.LOG
  945. [2013/04/01 00:49:47 | 000,000,178 | -HS- | M] () -- C:\Documents and Settings\Dave\ntuser.ini
  946. [2010/08/07 15:28:39 | 000,016,227 | ---- | M] () -- C:\Documents and Settings\Dave\pinedebg.txt1
  947. [2007/12/27 17:28:49 | 000,000,600 | ---- | M] () -- C:\Documents and Settings\Dave\winscp.RND
  948. [2012/12/09 12:38:12 | 000,016,217 | ---- | M] () -- C:\Documents and Settings\Dave\_viminfo
  949.  
  950. [color=#A23BEC]< %USERPROFILE%\Application Data\*.* >[/color]
  951. [2010/11/29 01:24:59 | 000,000,006 | ---- | M] () -- C:\Documents and Settings\Dave\Application Data\completescan
  952. [2007/05/16 16:22:48 | 000,000,062 | -HS- | M] () -- C:\Documents and Settings\Dave\Application Data\desktop.ini
  953. [2007/11/18 09:39:56 | 000,087,608 | ---- | M] () -- C:\Documents and Settings\Dave\Application Data\inst.exe
  954. [2010/11/29 01:17:21 | 000,000,010 | ---- | M] () -- C:\Documents and Settings\Dave\Application Data\install
  955. [2007/11/18 09:39:56 | 000,007,887 | ---- | M] () -- C:\Documents and Settings\Dave\Application Data\pcouffin.cat
  956. [2007/11/18 09:39:56 | 000,001,144 | ---- | M] () -- C:\Documents and Settings\Dave\Application Data\pcouffin.inf
  957. [2007/11/18 09:39:57 | 000,000,033 | ---- | M] () -- C:\Documents and Settings\Dave\Application Data\pcouffin.log
  958. [2007/11/18 09:39:56 | 000,047,360 | ---- | M] (VSO Software) -- C:\Documents and Settings\Dave\Application Data\pcouffin.sys
  959. [2010/11/29 01:25:40 | 000,000,006 | ---- | M] () -- C:\Documents and Settings\Dave\Application Data\start
  960.  
  961. [color=#A23BEC]< %USERPROFILE%\Application Data\*. >[/color]
  962. [2011/07/31 15:56:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dave\Application Data\.minecraft
  963. [2012/12/26 16:19:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dave\Application Data\Adobe
  964. [2008/06/11 21:40:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dave\Application Data\AdobeUM
  965. [2008/05/21 22:51:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dave\Application Data\Ahead
  966. [2012/12/22 16:36:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dave\Application Data\Apple Computer
  967. [2013/03/25 23:53:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dave\Application Data\Avira
  968. [2008/09/19 17:05:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dave\Application Data\BitTorrent
  969. [2008/03/21 10:29:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dave\Application Data\BitTorrent DNA
  970. [2008/05/01 08:50:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dave\Application Data\Command & Conquer 3 Tiberium Wars
  971. [2012/01/23 18:26:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dave\Application Data\Digiarty
  972. [2007/06/05 21:00:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dave\Application Data\DivX
  973. [2010/12/24 20:05:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dave\Application Data\dtband
  974. [2012/01/23 18:27:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dave\Application Data\dvdcss
  975. [2012/12/22 16:30:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dave\Application Data\ElevatedDiagnostics
  976. [2009/12/26 08:58:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dave\Application Data\Epson
  977. [2010/06/06 11:44:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dave\Application Data\Facebook
  978. [2010/09/19 23:03:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dave\Application Data\FinalBurner Video DVD
  979. [2011/01/21 12:47:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dave\Application Data\GetRightToGo
  980. [2011/04/03 11:06:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dave\Application Data\Google
  981. [2008/04/10 20:02:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dave\Application Data\Help
  982. [2007/05/16 23:39:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dave\Application Data\Identities
  983. [2007/07/15 11:35:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dave\Application Data\InstallShield
  984. [2007/05/18 07:18:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dave\Application Data\Intuit
  985. [2008/08/17 12:22:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dave\Application Data\iWin
  986. [2009/12/25 15:09:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dave\Application Data\Leadertech
  987. [2007/05/17 22:04:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dave\Application Data\Macromedia
  988. [2010/11/29 22:24:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dave\Application Data\Malwarebytes
  989. [2009/11/27 21:33:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dave\Application Data\Media Player Classic
  990. [2011/01/27 20:45:18 | 000,000,000 | --SD | M] -- C:\Documents and Settings\Dave\Application Data\Microsoft
  991. [2008/09/19 00:04:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dave\Application Data\Move Networks
  992. [2008/06/23 07:53:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dave\Application Data\Mozilla
  993. [2010/04/22 23:00:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dave\Application Data\NeroDCTemplates
  994. [2012/09/26 20:25:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dave\Application Data\NetBeans
  995. [2009/06/17 22:20:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dave\Application Data\OpenOffice.org
  996. [2009/05/20 13:45:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dave\Application Data\OpenOffice.org2
  997. [2007/06/07 21:58:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dave\Application Data\Opera
  998. [2013/03/25 23:06:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dave\Application Data\Real
  999. [2013/03/25 23:06:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dave\Application Data\RealNetworks
  1000. [2008/04/26 14:44:29 | 000,000,000 | RH-D | M] -- C:\Documents and Settings\Dave\Application Data\SecuROM
  1001. [2007/05/17 00:25:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dave\Application Data\Sun
  1002. [2011/02/12 09:00:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dave\Application Data\Thunderbird
  1003. [2010/08/03 21:48:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dave\Application Data\Toolbar4
  1004. [2010/06/16 22:01:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dave\Application Data\Ulead Systems
  1005. [2011/02/21 09:21:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dave\Application Data\vlc
  1006. [2007/11/18 09:39:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dave\Application Data\Vso
  1007. [2008/02/04 11:01:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dave\Application Data\WebEx
  1008. [2007/09/29 15:32:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dave\Application Data\WinRAR
  1009. [2010/03/19 13:19:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Dave\Application Data\Yahoo!
  1010.  
  1011. [color=#A23BEC]< %USERPROFILE%\Local Settings\*.* >[/color]
  1012. [2013/04/01 08:12:21 | 000,000,062 | -HS- | M] () -- C:\Documents and Settings\Dave\Local Settings\desktop.ini
  1013.  
  1014. [color=#A23BEC]< %USERPROFILE%\Local Settings\temp\*.exe >[/color]
  1015. [2011/02/09 17:48:12 | 000,885,536 | ---- | M] (Sun Microsystems, Inc.) -- C:\Documents and Settings\Dave\Local Settings\temp\jre-6u24-windows-i586-iftw-rv.exe
  1016. [2011/07/21 12:54:04 | 000,910,624 | ---- | M] (Sun Microsystems, Inc.) -- C:\Documents and Settings\Dave\Local Settings\temp\jre-6u26-windows-i586-iftw-rv.exe
  1017. [2011/10/18 21:21:31 | 000,909,088 | ---- | M] (Sun Microsystems, Inc.) -- C:\Documents and Settings\Dave\Local Settings\temp\jre-6u29-windows-i586-iftw-rv.exe
  1018. [2012/02/20 08:45:21 | 000,909,600 | ---- | M] (Sun Microsystems, Inc.) -- C:\Documents and Settings\Dave\Local Settings\temp\jre-6u31-windows-i586-iftw-rv.exe
  1019. [2012/06/07 18:35:04 | 000,909,104 | ---- | M] (Sun Microsystems, Inc.) -- C:\Documents and Settings\Dave\Local Settings\temp\jre-6u33-windows-i586-iftw.exe
  1020. [2012/08/29 05:07:10 | 000,908,272 | ---- | M] (Sun Microsystems, Inc.) -- C:\Documents and Settings\Dave\Local Settings\temp\jre-6u35-windows-i586-iftw.exe
  1021. [2012/10/26 08:05:21 | 000,912,368 | ---- | M] (Sun Microsystems, Inc.) -- C:\Documents and Settings\Dave\Local Settings\temp\jre-6u37-windows-i586-iftw.exe
  1022. [2013/01/31 11:20:56 | 000,915,376 | ---- | M] (Sun Microsystems, Inc.) -- C:\Documents and Settings\Dave\Local Settings\temp\jre-6u39-windows-i586-iftw.exe
  1023. [2013/02/15 22:00:49 | 000,897,448 | ---- | M] (Oracle Corporation) -- C:\Documents and Settings\Dave\Local Settings\temp\jre-7u15-windows-i586-iftw.exe
  1024. [2013/03/01 13:00:55 | 000,897,448 | ---- | M] (Oracle Corporation) -- C:\Documents and Settings\Dave\Local Settings\temp\jre-7u17-windows-i586-iftw.exe
  1025. [2013/02/13 11:50:30 | 000,120,400 | ---- | M] (RealNetworks, Inc.) -- C:\Documents and Settings\Dave\Local Settings\temp\lowproc.exe
  1026. [2011/05/21 13:19:45 | 000,572,544 | ---- | M] (RealNetworks, Inc.) -- C:\Documents and Settings\Dave\Local Settings\temp\rnupdate0.exe
  1027. [2007/01/12 15:47:46 | 000,450,560 | R--- | M] (Macrovision Corporation) -- C:\Documents and Settings\Dave\Local Settings\temp\_is1.exe
  1028. [2007/01/12 15:47:48 | 000,450,560 | R--- | M] (Macrovision Corporation) -- C:\Documents and Settings\Dave\Local Settings\temp\_is16.exe
  1029. [2007/02/27 07:08:44 | 000,456,416 | R--- | M] (Macrovision Corporation) -- C:\Documents and Settings\Dave\Local Settings\temp\_is41.exe
  1030. [2007/08/31 02:12:38 | 000,460,248 | R--- | M] (Macrovision Corporation) -- C:\Documents and Settings\Dave\Local Settings\temp\_is5.exe
  1031. [2006/10/30 17:10:00 | 000,455,600 | R--- | M] (Macrovision Corporation) -- C:\Documents and Settings\Dave\Local Settings\temp\_is50.exe
  1032. [2007/08/31 02:12:38 | 000,460,248 | R--- | M] (Macrovision Corporation) -- C:\Documents and Settings\Dave\Local Settings\temp\_is6.exe
  1033. [2007/01/12 15:47:46 | 000,450,560 | R--- | M] (Macrovision Corporation) -- C:\Documents and Settings\Dave\Local Settings\temp\_isA.exe
  1034. [872 C:\Documents and Settings\Dave\Local Settings\temp\*.tmp files -> C:\Documents and Settings\Dave\Local Settings\temp\*.tmp -> ]
  1035.  
  1036. [color=#A23BEC]< %USERPROFILE%\Local Settings\Temporary Internet Files\*.exe >[/color]
  1037.  
  1038. [color=#A23BEC]< %USERPROFILE%\Local Settings\Application Data\*.* >[/color]
  1039. [2012/11/11 13:04:19 | 000,072,192 | ---- | M] () -- C:\Documents and Settings\Dave\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
  1040. [2012/10/09 07:34:10 | 000,034,768 | ---- | M] () -- C:\Documents and Settings\Dave\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
  1041. [2010/10/24 14:09:27 | 000,000,000 | ---- | M] () -- C:\Documents and Settings\Dave\Local Settings\Application Data\prvlcl.dat
  1042. [2011/12/14 08:44:04 | 000,000,600 | ---- | M] () -- C:\Documents and Settings\Dave\Local Settings\Application Data\PUTTY.RND
  1043.  
  1044. [color=#A23BEC]< %AllUsersProfile%\*.* >[/color]
  1045.  
  1046. [color=#A23BEC]< %AllUsersProfile%\Application Data\*.* >[/color]
  1047. [2007/07/14 14:34:21 | 000,000,062 | -HS- | M] () -- C:\Documents and Settings\All Users\Application Data\desktop.ini
  1048. [2007/11/23 09:38:27 | 000,001,755 | ---- | M] () -- C:\Documents and Settings\All Users\Application Data\QTSBandwidthCache
  1049.  
  1050. [color=#A23BEC]< %AllUsersProfile%\Application Data\*. >[/color]
  1051. [2012/12/22 16:33:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\188F1432-103A-4ffb-80F1-36B633C5C9E1
  1052. [2007/11/17 10:51:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\1Click DVDTOIPOD
  1053. [2013/02/25 21:03:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Adobe
  1054. [2009/09/18 11:55:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Apple
  1055. [2007/09/26 11:24:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Apple Computer
  1056. [2013/03/25 09:11:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Avira
  1057. [2011/07/03 18:13:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Blizzard Entertainment
  1058. [2010/12/01 20:18:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Cisco Systems
  1059. [2012/07/29 21:11:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Desura
  1060. [2010/04/22 08:36:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\DivX
  1061. [2009/12/25 15:07:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\EPSON
  1062. [2007/06/07 22:00:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\espionServerData
  1063. [2011/04/03 11:05:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Google
  1064. [2010/06/16 20:50:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\InstallShield
  1065. [2007/05/18 07:17:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Intuit
  1066. [2010/11/29 22:23:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Malwarebytes
  1067. [2011/03/05 01:38:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\McAfee
  1068. [2007/07/15 11:47:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Media Center Programs
  1069. [2010/10/27 08:07:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\MFAData
  1070. [2012/06/10 17:25:13 | 000,000,000 | --SD | M] -- C:\Documents and Settings\All Users\Application Data\Microsoft
  1071. [2012/04/26 07:42:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Mozilla
  1072. [2008/03/21 13:11:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Nero
  1073. [2011/07/03 18:40:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\NVIDIA
  1074. [2011/07/03 18:40:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\NVIDIA Corporation
  1075. [2009/07/11 11:57:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\nView_Profiles
  1076. [2007/07/26 08:20:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Outspark
  1077. [2013/03/25 23:05:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Real
  1078. [2013/03/25 23:05:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\RealNetworks
  1079. [2011/11/15 08:45:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
  1080. [2010/01/27 09:39:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Sun
  1081. [2008/12/26 21:32:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TEMP
  1082. [2010/06/19 18:13:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Ulead Systems
  1083. [2007/05/17 23:34:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
  1084. [2009/06/19 08:33:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Yahoo!
  1085. [2013/03/26 19:24:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Yahoo! Companion
  1086. [2009/03/26 18:07:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{00D89592-F643-4D8D-8F0F-AFAE0F14D4C3}
  1087. [2010/04/26 19:47:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
  1088. [2009/09/18 09:32:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{755AC846-7372-4AC8-8550-C52491DAA8BD}
  1089. [2009/04/13 16:03:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
  1090.  
  1091. [color=#A23BEC]< %AllUsersProfile%\Application Data\Local Settings\*.* >[/color]
  1092.  
  1093. [color=#A23BEC]< %AllUsersProfile%\Application Data\Local Settings\Temp\*.exe >[/color]
  1094.  
  1095. [color=#A23BEC]< %ALLUSERSPROFILE%\Documents\My Music\*.exe >[/color]
  1096.  
  1097. [color=#A23BEC]< %ALLUSERSPROFILE%\Documents\My Pictures\*.exe >[/color]
  1098.  
  1099. [color=#A23BEC]< %ALLUSERSPROFILE%\Documents\My Videos\*.exe >[/color]
  1100.  
  1101. [color=#A23BEC]< %ALLUSERSPROFILE%\Documents\*.exe >[/color]
  1102.  
  1103. [color=#A23BEC]< %USERPROFILE%\My Documents\*.* >[/color]
  1104. [2010/09/29 20:42:36 | 000,002,112 | ---- | M] () -- C:\Documents and Settings\Dave\My Documents\AutoFix_2010-09-29_20-40-27.txt
  1105. [2009/06/13 09:10:01 | 000,000,075 | -HS- | M] () -- C:\Documents and Settings\Dave\My Documents\desktop.ini
  1106. [2012/05/01 08:05:16 | 000,221,113 | ---- | M] () -- C:\Documents and Settings\Dave\My Documents\StatementPdf.pdf
  1107. [2013/02/18 12:25:22 | 000,013,312 | -HS- | M] () -- C:\Documents and Settings\Dave\My Documents\Thumbs.db
  1108. [2013/02/12 20:58:33 | 000,013,277 | ---- | M] () -- C:\Documents and Settings\Dave\My Documents\untitled_0.odt
  1109. [2007/05/27 13:08:36 | 001,208,592 | ---- | M] () -- C:\Documents and Settings\Dave\My Documents\zoo_kitty_2.jpg
  1110.  
  1111. [color=#A23BEC]< %CommonProgramFiles%\*.* >[/color]
  1112.  
  1113. [color=#A23BEC]< %CommonProgramFiles%\ComObjects*.* >[/color]
  1114.  
  1115. [color=#A23BEC]< %PROGRAMFILES%\*.* >[/color]
  1116. [2012/05/08 14:15:36 | 000,000,005 | ---- | M] () -- C:\Program Files\basis-link
  1117. [2012/08/13 10:57:00 | 000,012,927 | ---- | M] () -- C:\Program Files\readme.html
  1118. [2012/08/13 10:57:00 | 000,012,558 | ---- | M] () -- C:\Program Files\readme.txt
  1119.  
  1120. [color=#A23BEC]< %PROGRAMFILES%\*. >[/color]
  1121. [2009/07/25 11:33:33 | 000,000,000 | ---D | M] -- C:\Program Files\3DO
  1122. [2012/12/03 22:47:18 | 000,000,000 | ---D | M] -- C:\Program Files\7-Zip
  1123. [2007/05/23 07:16:28 | 000,000,000 | ---D | M] -- C:\Program Files\Acro Software
  1124. [2012/12/26 16:18:10 | 000,000,000 | ---D | M] -- C:\Program Files\Adobe
  1125. [2010/08/07 15:29:23 | 000,000,000 | ---D | M] -- C:\Program Files\Alpine
  1126. [2007/05/17 22:17:54 | 000,000,000 | ---D | M] -- C:\Program Files\Analog Devices
  1127. [2012/12/22 16:32:40 | 000,000,000 | ---D | M] -- C:\Program Files\Apple Software Update
  1128. [2011/01/04 19:45:29 | 000,000,000 | ---D | M] -- C:\Program Files\ASCOM
  1129. [2007/05/18 08:38:45 | 000,000,000 | ---D | M] -- C:\Program Files\ASUS
  1130. [2009/11/07 09:50:23 | 000,000,000 | ---D | M] -- C:\Program Files\AVG
  1131. [2013/03/25 09:11:25 | 000,000,000 | ---D | M] -- C:\Program Files\Avira
  1132. [2010/09/25 09:55:15 | 000,000,000 | ---D | M] -- C:\Program Files\AviSynth 2.5
  1133. [2007/05/18 17:20:49 | 000,000,000 | ---D | M] -- C:\Program Files\Barrow Hill
  1134. [2012/10/06 08:44:04 | 000,000,000 | ---D | M] -- C:\Program Files\Basis
  1135. [2008/03/21 10:29:32 | 000,000,000 | ---D | M] -- C:\Program Files\BitTorrent_DNA
  1136. [2012/12/22 16:32:23 | 000,000,000 | ---D | M] -- C:\Program Files\Bonjour
  1137. [2010/12/24 20:39:30 | 000,000,000 | ---D | M] -- C:\Program Files\Burn4Free Toolbar
  1138. [2007/05/18 07:41:52 | 000,000,000 | ---D | M] -- C:\Program Files\Chief Architect Inc
  1139. [2010/12/01 20:26:07 | 000,000,000 | ---D | M] -- C:\Program Files\Cisco Systems
  1140. [2013/03/25 23:05:21 | 000,000,000 | ---D | M] -- C:\Program Files\Common Files
  1141. [2007/05/16 23:32:32 | 000,000,000 | ---D | M] -- C:\Program Files\ComPlus Applications
  1142. [2012/01/22 21:06:16 | 000,000,000 | ---D | M] -- C:\Program Files\Cucusoft
  1143. [2008/07/18 12:24:46 | 000,000,000 | ---D | M] -- C:\Program Files\DivX
  1144. [2007/05/18 21:32:42 | 000,000,000 | ---D | M] -- C:\Program Files\EA Games
  1145. [2008/04/30 18:34:56 | 000,000,000 | ---D | M] -- C:\Program Files\Electronic Arts
  1146. [2009/12/25 15:08:55 | 000,000,000 | ---D | M] -- C:\Program Files\epson
  1147. [2012/01/14 05:34:42 | 000,000,000 | ---D | M] -- C:\Program Files\Epson Software
  1148. [2009/12/25 15:05:57 | 000,000,000 | ---D | M] -- C:\Program Files\EpsonNet
  1149. [2013/03/26 07:24:38 | 000,000,000 | ---D | M] -- C:\Program Files\ESET
  1150. [2010/09/29 20:40:27 | 000,000,000 | ---D | M] -- C:\Program Files\Essentials Codec Pack
  1151. [2009/11/27 21:35:11 | 000,000,000 | ---D | M] -- C:\Program Files\Free Convert MP4 to AVI FLV MPEG WMV MOV Converter
  1152. [2008/04/10 20:02:24 | 000,000,000 | ---D | M] -- C:\Program Files\GoldWave
  1153. [2011/09/08 19:11:01 | 000,000,000 | ---D | M] -- C:\Program Files\Google
  1154. [2007/05/23 07:17:15 | 000,000,000 | ---D | M] -- C:\Program Files\GPLGS
  1155. [2010/09/25 09:55:17 | 000,000,000 | ---D | M] -- C:\Program Files\Haali
  1156. [2007/11/20 11:48:33 | 000,000,000 | ---D | M] -- C:\Program Files\Handbrake
  1157. [2012/02/22 20:34:45 | 000,000,000 | -H-D | M] -- C:\Program Files\InstallShield Installation Information
  1158. [2013/03/14 09:14:38 | 000,000,000 | ---D | M] -- C:\Program Files\Internet Explorer
  1159. [2009/09/18 09:32:28 | 000,000,000 | ---D | M] -- C:\Program Files\iPhone Configuration Utility
  1160. [2012/12/22 16:33:03 | 000,000,000 | ---D | M] -- C:\Program Files\iPod
  1161. [2012/12/22 16:33:38 | 000,000,000 | ---D | M] -- C:\Program Files\iTunes
  1162. [2013/02/21 09:19:12 | 000,000,000 | ---D | M] -- C:\Program Files\Java
  1163. [2010/09/19 23:02:53 | 000,000,000 | ---D | M] -- C:\Program Files\K-Lite Codec Pack
  1164. [2012/02/22 20:34:46 | 000,000,000 | ---D | M] -- C:\Program Files\Logitech
  1165. [2013/02/20 08:31:07 | 000,000,000 | ---D | M] -- C:\Program Files\Malwarebytes' Anti-Malware
  1166. [2010/08/03 22:03:32 | 000,000,000 | ---D | M] -- C:\Program Files\McFunSoft Video Capture
  1167. [2008/09/19 07:36:18 | 000,000,000 | ---D | M] -- C:\Program Files\Messenger
  1168. [2007/05/16 23:34:51 | 000,000,000 | ---D | M] -- C:\Program Files\microsoft frontpage
  1169. [2013/03/14 19:19:28 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Silverlight
  1170. [2010/08/11 17:49:13 | 000,000,000 | ---D | M] -- C:\Program Files\Movie Maker
  1171. [2013/03/13 08:41:46 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox
  1172. [2013/03/18 08:14:45 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Maintenance Service
  1173. [2013/03/16 18:03:16 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Thunderbird
  1174. [2009/08/06 20:48:32 | 000,000,000 | ---D | M] -- C:\Program Files\MSBuild
  1175. [2007/05/16 23:31:49 | 000,000,000 | ---D | M] -- C:\Program Files\MSN
  1176. [2007/05/16 23:32:14 | 000,000,000 | ---D | M] -- C:\Program Files\MSN Gaming Zone
  1177. [2007/05/19 13:05:11 | 000,000,000 | ---D | M] -- C:\Program Files\MSXML 4.0
  1178. [2012/04/01 12:39:12 | 000,000,000 | ---D | M] -- C:\Program Files\MyDSC2
  1179. [2010/08/27 20:35:59 | 000,000,000 | ---D | M] -- C:\Program Files\nanoPEG for WinTV
  1180. [2007/05/18 08:46:17 | 000,000,000 | ---D | M] -- C:\Program Files\Nero
  1181. [2012/12/09 10:36:55 | 000,000,000 | ---D | M] -- C:\Program Files\NetBeans 7.2
  1182. [2008/09/19 07:32:26 | 000,000,000 | ---D | M] -- C:\Program Files\NetMeeting
  1183. [2011/07/03 18:40:13 | 000,000,000 | ---D | M] -- C:\Program Files\NVIDIA Corporation
  1184. [2007/05/16 23:32:22 | 000,000,000 | ---D | M] -- C:\Program Files\Online Services
  1185. [2008/07/25 09:44:04 | 000,000,000 | ---D | M] -- C:\Program Files\OpenOffice.org 2.2
  1186. [2009/05/20 13:48:18 | 000,000,000 | ---D | M] -- C:\Program Files\OpenOffice.org 2.4
  1187. [2012/10/06 08:42:11 | 000,000,000 | ---D | M] -- C:\Program Files\OpenOffice.org 3
  1188. [2010/12/15 16:45:08 | 000,000,000 | ---D | M] -- C:\Program Files\Outlook Express
  1189. [2009/03/28 12:05:50 | 000,000,000 | ---D | M] -- C:\Program Files\Outspark
  1190. [2010/08/07 15:41:56 | 000,000,000 | ---D | M] -- C:\Program Files\PC-Pine
  1191. [2008/03/21 10:27:19 | 000,000,000 | ---D | M] -- C:\Program Files\PIXELA
  1192. [2008/01/18 15:18:45 | 000,000,000 | ---D | M] -- C:\Program Files\PKWARE
  1193. [2007/11/17 01:32:21 | 000,000,000 | ---D | M] -- C:\Program Files\PQDVD
  1194. [2012/10/06 08:44:08 | 000,000,000 | ---D | M] -- C:\Program Files\program
  1195. [2012/04/21 11:53:19 | 000,000,000 | ---D | M] -- C:\Program Files\Quicken
  1196. [2012/10/06 08:43:14 | 000,000,000 | ---D | M] -- C:\Program Files\readmes
  1197. [2013/03/25 23:05:24 | 000,000,000 | ---D | M] -- C:\Program Files\Real
  1198. [2013/03/25 23:05:41 | 000,000,000 | ---D | M] -- C:\Program Files\RealNetworks
  1199. [2009/08/06 20:48:26 | 000,000,000 | ---D | M] -- C:\Program Files\Reference Assemblies
  1200. [2013/02/22 09:39:35 | 000,000,000 | ---D | M] -- C:\Program Files\Scratch
  1201. [2012/10/06 08:44:05 | 000,000,000 | ---D | M] -- C:\Program Files\share
  1202. [2008/12/26 21:33:07 | 000,000,000 | ---D | M] -- C:\Program Files\Shockwave.com
  1203. [2009/06/21 14:15:09 | 000,000,000 | ---D | M] -- C:\Program Files\Sierra Entertainment
  1204. [2011/01/21 12:40:38 | 000,000,000 | ---D | M] -- C:\Program Files\SimpleOCR
  1205. [2008/03/24 06:48:08 | 000,000,000 | ---D | M] -- C:\Program Files\Sony Corporation
  1206. [2010/09/25 09:55:05 | 000,000,000 | ---D | M] -- C:\Program Files\SourceTec
  1207. [2011/11/15 08:45:38 | 000,000,000 | ---D | M] -- C:\Program Files\Spybot - Search & Destroy
  1208. [2011/12/25 12:57:17 | 000,000,000 | ---D | M] -- C:\Program Files\StarCraft II
  1209. [2011/11/06 15:46:52 | 000,000,000 | ---D | M] -- C:\Program Files\Starry Night Orion Special Edition
  1210. [2012/09/29 09:39:56 | 000,000,000 | ---D | M] -- C:\Program Files\Steam
  1211. [2007/07/08 14:20:13 | 000,000,000 | ---D | M] -- C:\Program Files\THQ
  1212. [2007/05/16 23:39:08 | 000,000,000 | -H-D | M] -- C:\Program Files\Uninstall Information
  1213. [2012/10/06 08:43:54 | 000,000,000 | ---D | M] -- C:\Program Files\URE
  1214. [2010/06/24 20:28:41 | 000,000,000 | ---D | M] -- C:\Program Files\VideoHome
  1215. [2010/09/15 21:38:40 | 000,000,000 | ---D | M] -- C:\Program Files\VideoLAN
  1216. [2012/12/09 12:36:42 | 000,000,000 | ---D | M] -- C:\Program Files\Vim
  1217. [2010/06/24 20:29:36 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Media Components
  1218. [2009/05/02 11:09:59 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Media Connect 2
  1219. [2009/05/02 11:09:58 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Media Player
  1220. [2008/09/19 07:32:24 | 000,000,000 | ---D | M] -- C:\Program Files\Windows NT
  1221. [2007/05/16 23:33:54 | 000,000,000 | -H-D | M] -- C:\Program Files\WindowsUpdate
  1222. [2007/09/29 15:32:20 | 000,000,000 | ---D | M] -- C:\Program Files\WinRAR
  1223. [2007/05/17 23:46:09 | 000,000,000 | ---D | M] -- C:\Program Files\WinSCP3
  1224. [2010/09/08 22:58:38 | 000,000,000 | ---D | M] -- C:\Program Files\WinTV
  1225. [2007/05/17 23:17:56 | 000,000,000 | ---D | M] -- C:\Program Files\WMPCI54G WLAN Monitor
  1226. [2007/05/16 23:34:51 | 000,000,000 | ---D | M] -- C:\Program Files\xerox
  1227. [2010/03/19 13:19:18 | 000,000,000 | ---D | M] -- C:\Program Files\Yahoo!
  1228. [2009/06/19 10:06:59 | 000,000,000 | ---D | M] -- C:\Program Files\YIT
  1229. [2011/01/04 19:42:15 | 000,000,000 | -H-D | M] -- C:\Program Files\Zero G Registry
  1230.  
  1231. [color=#A23BEC]< %systemroot%\system32\config\systemprofile\*.* >[/color]
  1232.  
  1233. [color=#A23BEC]< %systemroot%\system32\config\systemprofile\Application Data\*.* >[/color]
  1234. [2007/05/16 16:22:48 | 000,000,062 | -HS- | M] () -- C:\WINDOWS\system32\config\systemprofile\Application Data\desktop.ini
  1235.  
  1236. [color=#A23BEC]< %systemroot%\system32\config\systemprofile\\Local Settings\*.* >[/color]
  1237. [2007/05/16 16:22:48 | 000,000,062 | -HS- | M] () -- C:\WINDOWS\system32\config\systemprofile\\Local Settings\desktop.ini
  1238.  
  1239. [color=#A23BEC]< %systemroot%\system32\config\systemprofile\\Local Settings\Application Data\*.* >[/color]
  1240.  
  1241. [color=#A23BEC]< %systemroot%\system32\config\systemprofile\\Local Settings\Temp\*.exe >[/color]
  1242.  
  1243. [color=#A23BEC]< %systemroot%\system32\config\systemprofile\\Local Settings\Temporary Internet Files\*.exe >[/color]
  1244.  
  1245. [color=#A23BEC]< C:\Documents and Settings\LocalService\Application Data\*.* >[/color]
  1246. [2007/05/16 23:33:16 | 000,000,065 | RH-- | C] () -- C:\WINDOWS\Tasks\desktop.ini
  1247. [2007/05/16 23:37:26 | 000,000,006 | -H-- | C] () -- C:\WINDOWS\Tasks\SA.DAT
  1248. [2010/03/12 08:59:49 | 000,000,276 | ---- | C] () -- C:\WINDOWS\Tasks\RealUpgradeLogonTaskS-1-5-21-436374069-1364589140-839522115-1003.job
  1249. [2010/03/12 08:59:49 | 000,000,284 | ---- | C] () -- C:\WINDOWS\Tasks\RealUpgradeScheduledTaskS-1-5-21-436374069-1364589140-839522115-1003.job
  1250. [2010/11/28 22:47:40 | 000,000,428 | ---- | C] () -- C:\WINDOWS\Tasks\At1.job
  1251. [2010/11/28 22:47:40 | 000,000,428 | ---- | C] () -- C:\WINDOWS\Tasks\At10.job
  1252. [2010/11/28 22:47:40 | 000,000,428 | ---- | C] () -- C:\WINDOWS\Tasks\At11.job
  1253. [2010/11/28 22:47:40 | 000,000,428 | ---- | C] () -- C:\WINDOWS\Tasks\At12.job
  1254. [2010/11/28 22:47:40 | 000,000,428 | ---- | C] () -- C:\WINDOWS\Tasks\At13.job
  1255. [2010/11/28 22:47:40 | 000,000,428 | ---- | C] () -- C:\WINDOWS\Tasks\At14.job
  1256. [2010/11/28 22:47:40 | 000,000,428 | ---- | C] () -- C:\WINDOWS\Tasks\At2.job
  1257. [2010/11/28 22:47:40 | 000,000,428 | ---- | C] () -- C:\WINDOWS\Tasks\At3.job
  1258. [2010/11/28 22:47:40 | 000,000,428 | ---- | C] () -- C:\WINDOWS\Tasks\At4.job
  1259. [2010/11/28 22:47:40 | 000,000,428 | ---- | C] () -- C:\WINDOWS\Tasks\At5.job
  1260. [2010/11/28 22:47:40 | 000,000,428 | ---- | C] () -- C:\WINDOWS\Tasks\At6.job
  1261. [2010/11/28 22:47:40 | 000,000,428 | ---- | C] () -- C:\WINDOWS\Tasks\At7.job
  1262. [2010/11/28 22:47:40 | 000,000,428 | ---- | C] () -- C:\WINDOWS\Tasks\At8.job
  1263. [2010/11/28 22:47:40 | 000,000,428 | ---- | C] () -- C:\WINDOWS\Tasks\At9.job
  1264. [2010/11/28 22:47:41 | 000,000,428 | ---- | C] () -- C:\WINDOWS\Tasks\At15.job
  1265. [2010/11/28 22:47:41 | 000,000,428 | ---- | C] () -- C:\WINDOWS\Tasks\At16.job
  1266. [2010/11/28 22:47:41 | 000,000,428 | ---- | C] () -- C:\WINDOWS\Tasks\At17.job
  1267. [2010/11/28 22:47:41 | 000,000,428 | ---- | C] () -- C:\WINDOWS\Tasks\At18.job
  1268. [2010/11/28 22:47:41 | 000,000,428 | ---- | C] () -- C:\WINDOWS\Tasks\At19.job
  1269. [2010/11/28 22:47:41 | 000,000,428 | ---- | C] () -- C:\WINDOWS\Tasks\At20.job
  1270. [2010/11/28 22:47:41 | 000,000,428 | ---- | C] () -- C:\WINDOWS\Tasks\At21.job
  1271. [2010/11/28 22:47:41 | 000,000,428 | ---- | C] () -- C:\WINDOWS\Tasks\At22.job
  1272. [2010/11/28 22:47:41 | 000,000,428 | ---- | C] () -- C:\WINDOWS\Tasks\At23.job
  1273. [2010/11/28 22:47:41 | 000,000,428 | ---- | C] () -- C:\WINDOWS\Tasks\At24.job
  1274. [2011/01/04 22:08:34 | 000,000,280 | ---- | C] () -- C:\WINDOWS\Tasks\RealUpgradeLogonTaskS-1-5-18.job
  1275. [2011/01/04 22:08:34 | 000,000,288 | ---- | C] () -- C:\WINDOWS\Tasks\RealUpgradeScheduledTaskS-1-5-18.job
  1276. [2012/07/14 09:53:53 | 000,000,830 | ---- | C] () -- C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
  1277. [2012/12/22 16:27:56 | 000,000,284 | ---- | C] () -- C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
  1278. [2013/03/25 23:06:16 | 000,000,284 | ---- | C] () -- C:\WINDOWS\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-436374069-1364589140-839522115-1003.job
  1279. [2013/03/25 23:06:17 | 000,000,276 | ---- | C] () -- C:\WINDOWS\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-436374069-1364589140-839522115-1003.job
  1280.  
  1281. [color=#A23BEC]< C:\Documents and Settings\LocalService\Local Settings\Application Data\*.* >[/color]
  1282.  
  1283. [color=#A23BEC]< C:\Documents and Settings\LocalService\Local Settings\temp\*.exe >[/color]
  1284.  
  1285. [color=#A23BEC]< C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\*.exe >[/color]
  1286.  
  1287. [color=#A23BEC]< C:\Documents and Settings\LocalService\Local Settings\*.* >[/color]
  1288. [2013/04/01 08:12:20 | 000,000,062 | -HS- | M] () -- C:\Documents and Settings\LocalService\Local Settings\desktop.ini
  1289.  
  1290. [color=#A23BEC]< C:\Documents and Settings\LocalService\*.* >[/color]
  1291. [2013/04/01 00:50:08 | 001,310,720 | -H-- | M] () -- C:\Documents and Settings\LocalService\NTUSER.DAT
  1292. [2013/04/01 08:13:29 | 000,001,024 | -H-- | M] () -- C:\Documents and Settings\LocalService\ntuser.dat.LOG
  1293. [2007/05/16 23:37:25 | 000,000,020 | -HS- | M] () -- C:\Documents and Settings\LocalService\ntuser.ini
  1294.  
  1295. [color=#A23BEC]< C:\Documents and Settings\NetworkService\Application Data\*.* >[/color]
  1296.  
  1297. [color=#A23BEC]< C:\Documents and Settings\NetworkService\Local Settings\Application Data\*.* >[/color]
  1298.  
  1299. [color=#A23BEC]< C:\Documents and Settings\NetworkService\Local Settings\temp\*.exe >[/color]
  1300.  
  1301. [color=#A23BEC]< C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\*.exe >[/color]
  1302.  
  1303. [color=#A23BEC]< C:\Documents and Settings\NetworkService\Local Settings\*.* >[/color]
  1304. [2013/04/01 08:12:20 | 000,000,062 | -HS- | M] () -- C:\Documents and Settings\NetworkService\Local Settings\desktop.ini
  1305.  
  1306. [color=#A23BEC]< C:\Documents and Settings\NetworkService\*.* >[/color]
  1307. [2013/04/01 00:50:08 | 001,310,720 | -H-- | M] () -- C:\Documents and Settings\NetworkService\NTUSER.DAT
  1308. [2013/04/01 08:13:29 | 000,001,024 | -H-- | M] () -- C:\Documents and Settings\NetworkService\ntuser.dat.LOG
  1309. [2007/05/16 23:36:49 | 000,000,020 | -HS- | M] () -- C:\Documents and Settings\NetworkService\ntuser.ini
  1310.  
  1311. [color=#A23BEC]< %windir%\temp\*.exe >[/color]
  1312.  
  1313. [color=#A23BEC]< %windir%\*. >[/color]
  1314. [2013/03/22 23:44:11 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$hf_mig$
  1315. [2007/08/05 18:11:49 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$MSI31Uninstall_KB893803v2$
  1316. [2008/09/19 07:30:45 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtServicePackUninstall$
  1317. [2007/11/27 08:18:21 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$
  1318. [2007/11/27 08:18:14 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$
  1319. [2010/08/11 17:53:05 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2079403$
  1320. [2010/09/15 08:32:59 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2121546$
  1321. [2010/09/15 08:31:12 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2141007$
  1322. [2010/09/28 22:48:11 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2158563$
  1323. [2010/08/11 17:50:45 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2160329$
  1324. [2010/07/16 07:29:06 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2229593$
  1325. [2010/09/15 08:33:09 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2259922$
  1326. [2010/10/14 08:01:01 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2279986$
  1327. [2010/08/03 07:56:07 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2286198$
  1328. [2010/10/14 19:30:03 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2296011$
  1329. [2010/12/15 16:47:02 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2296199$
  1330. [2010/10/14 08:00:57 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2345886$
  1331. [2010/09/15 08:33:02 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2347290$
  1332. [2010/10/14 07:54:31 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2360937$
  1333. [2010/10/14 08:00:51 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2378111_WM9$
  1334. [2010/10/14 08:01:06 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2387149$
  1335. [2011/02/09 16:37:18 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2393802$
  1336. [2011/04/15 00:15:41 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2412687$
  1337. [2011/01/12 08:55:45 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2419632$
  1338. [2010/12/15 16:45:08 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2423089$
  1339. [2010/12/15 16:46:31 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2436673$
  1340. [2010/12/15 16:46:38 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2440591$
  1341. [2010/12/15 16:46:59 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2443105$
  1342. [2010/12/15 16:46:34 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2443685$
  1343. [2010/12/15 16:46:23 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2447961_WM9L$
  1344. [2010/12/15 16:46:26 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2467659$
  1345. [2011/06/18 22:56:26 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2476490$
  1346. [2011/02/09 16:37:33 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2476687$
  1347. [2011/02/09 16:37:29 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2478960$
  1348. [2011/02/09 16:39:20 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2478971$
  1349. [2011/02/09 16:39:13 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2479628$
  1350. [2011/03/09 09:35:04 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2479943$
  1351. [2011/03/09 09:33:44 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2481109$
  1352. [2011/02/09 16:39:06 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2483185$
  1353. [2011/02/09 16:39:17 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2485376$
  1354. [2011/04/15 00:16:16 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2485663$
  1355. [2011/04/15 00:13:45 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2503658$
  1356. [2011/06/18 22:56:21 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2503665$
  1357. [2011/04/15 00:13:28 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2506212$
  1358. [2011/04/15 00:16:11 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2506223$
  1359. [2011/04/15 00:13:40 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2507618$
  1360. [2011/07/13 09:04:06 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2507938$
  1361. [2011/04/15 00:13:49 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2508272$
  1362. [2011/04/15 00:13:36 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2508429$
  1363. [2011/04/15 00:12:08 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2509553$
  1364. [2011/04/15 00:13:33 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2511455$
  1365. [2011/03/24 08:59:46 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2524375$
  1366. [2011/06/18 22:56:17 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2535512$
  1367. [2011/06/18 22:56:11 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2536276$
  1368. [2011/08/11 09:21:01 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2536276-v2$
  1369. [2011/06/29 08:57:03 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2541763$
  1370. [2011/06/18 22:53:57 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2544893$
  1371. [2011/11/09 09:43:05 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2544893-v2$
  1372. [2011/07/13 09:02:36 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2555917$
  1373. [2011/08/11 09:18:52 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2562937$
  1374. [2011/10/12 18:19:01 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2564958$
  1375. [2011/08/11 09:19:01 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2566454$
  1376. [2011/10/12 18:15:16 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2567053$
  1377. [2011/08/11 09:21:05 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2567680$
  1378. [2011/08/11 09:20:57 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2570222$
  1379. [2011/08/24 08:45:29 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2570791$
  1380. [2011/09/15 20:53:16 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2570947$
  1381. [2012/01/11 09:43:31 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2584146$
  1382. [2012/01/26 01:10:09 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2585542$
  1383. [2011/10/12 18:15:12 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2592799$
  1384. [2012/01/11 09:43:43 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2598479$
  1385. [2012/01/11 09:43:38 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2603381$
  1386. [2011/09/07 08:10:00 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2607712$
  1387. [2011/09/15 20:55:09 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2616676$
  1388. [2011/12/15 00:26:47 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2618451$
  1389. [2011/12/15 00:26:52 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2619339$
  1390. [2011/12/15 00:26:41 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2620712$
  1391. [2012/03/14 08:44:32 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2621440$
  1392. [2011/12/15 00:28:56 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2624667$
  1393. [2012/01/11 09:45:23 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2631813$
  1394. [2011/12/15 00:26:31 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2633171$
  1395. [2011/12/15 00:26:55 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2633952$
  1396. [2011/12/15 00:29:02 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2639417$
  1397. [2012/03/15 00:17:56 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2641653$
  1398. [2011/11/11 01:33:02 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2641690$
  1399. [2012/01/11 09:45:28 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2646524$
  1400. [2012/03/15 00:16:09 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2647518$
  1401. [2012/04/11 09:16:00 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2653956$
  1402. [2012/07/11 07:26:39 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2655992$
  1403. [2012/05/09 10:47:31 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2659262$
  1404. [2012/02/18 17:08:04 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2660465$
  1405. [2012/10/10 07:24:57 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2661254-v2$
  1406. [2012/02/18 17:07:03 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2661637$
  1407. [2012/05/09 10:41:46 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2676562$
  1408. [2012/06/13 07:50:55 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2685939$
  1409. [2012/05/09 10:42:41 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2686509$
  1410. [2012/07/11 07:26:51 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2691442$
  1411. [2012/05/09 10:42:30 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2695962$
  1412. [2012/07/11 07:24:26 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2698365$
  1413. [2012/08/15 07:43:41 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2705219$
  1414. [2012/06/13 07:55:00 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2707511$
  1415. [2012/06/13 07:48:47 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2709162$
  1416. [2012/08/15 07:45:56 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2712808$
  1417. [2012/07/11 07:26:46 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2718523$
  1418. [2012/06/04 08:58:04 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2718704$
  1419. [2012/07/11 07:26:34 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2719985$
  1420. [2012/08/15 07:43:36 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2723135$
  1421. [2012/10/10 07:27:13 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2724197$
  1422. [2012/11/16 09:45:52 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2727528$
  1423. [2012/08/15 07:45:51 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2731847$
  1424. [2012/09/11 22:15:27 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2736233$
  1425. [2012/10/10 07:25:07 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2749655$
  1426. [2012/12/12 23:06:30 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2753842$
  1427. [2012/12/22 15:28:32 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2753842-v2$
  1428. [2012/10/10 07:25:11 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2756822$
  1429. [2013/01/09 01:55:16 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2757638$
  1430. [2012/12/12 23:06:43 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2758857$
  1431. [2012/11/16 09:45:41 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2761226$
  1432. [2012/12/12 23:06:25 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2770660$
  1433. [2013/02/14 07:34:24 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2778344$
  1434. [2012/12/12 23:06:38 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2779030$
  1435. [2012/12/12 23:06:33 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2779562$
  1436. [2013/02/14 07:33:55 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2780091$
  1437. [2013/02/14 07:34:11 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2799494$
  1438. [2013/02/14 07:34:01 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2802968$
  1439. [2013/03/22 23:44:34 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2807986$
  1440. [2007/07/17 23:02:57 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB873339$
  1441. [2007/07/15 16:57:30 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB885835$
  1442. [2007/07/30 19:44:22 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB885836$
  1443. [2007/07/15 16:57:11 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB886185$
  1444. [2007/07/18 18:03:28 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB888302$
  1445. [2007/07/17 23:02:50 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB890046$
  1446. [2007/08/05 23:24:22 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB890859$
  1447. [2007/07/18 18:03:39 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB891781$
  1448. [2007/07/17 23:03:01 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB893756$
  1449. [2007/07/19 22:19:51 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB896358$
  1450. [2007/07/15 16:57:24 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB896423$
  1451. [2007/07/15 16:57:07 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB896428$
  1452. [2007/07/19 22:20:27 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB899587$
  1453. [2007/07/29 15:53:11 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB899591$
  1454. [2007/07/30 19:44:21 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB900485$
  1455. [2007/07/22 18:50:28 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB900725$
  1456. [2010/12/02 01:02:13 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB901017$
  1457. [2007/07/18 18:03:32 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB901214$
  1458. [2007/07/22 18:50:33 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB902400$
  1459. [2007/07/19 22:19:34 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB904706$
  1460. [2007/11/27 08:17:21 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB904942$
  1461. [2007/07/18 18:03:34 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB905414$
  1462. [2007/07/30 19:44:08 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB905749$
  1463. [2007/07/19 22:19:30 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB908519$
  1464. [2007/07/18 18:03:44 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB910437$
  1465. [2007/07/18 18:03:49 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB911280$
  1466. [2007/07/19 22:19:57 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB911562$
  1467. [2007/07/18 18:03:52 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB911927$
  1468. [2007/07/17 23:02:23 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB913580$
  1469. [2007/07/20 19:16:20 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB914388$
  1470. [2007/08/05 23:24:26 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB914389$
  1471. [2007/11/27 08:18:01 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB915865$
  1472. [2007/08/05 23:24:29 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB916595$
  1473. [2007/07/29 15:52:53 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB917344$
  1474. [2007/08/01 23:51:40 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB917953$
  1475. [2007/08/05 23:24:32 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB918118$
  1476. [2007/08/05 23:25:39 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB918439$
  1477. [2007/07/15 16:57:18 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB919007$
  1478. [2007/07/17 23:02:28 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB920213$
  1479. [2007/07/15 16:57:21 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB920670$
  1480. [2007/07/18 18:03:10 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB920683$
  1481. [2007/08/05 23:26:06 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB920685$
  1482. [2007/07/18 18:03:38 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB920872$
  1483. [2007/08/15 08:40:41 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB921503$
  1484. [2007/07/29 15:52:50 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB922582$
  1485. [2007/07/28 07:15:22 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB922819$
  1486. [2007/07/15 16:57:15 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB923191$
  1487. [2007/07/17 23:03:04 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB923414$
  1488. [2009/04/17 00:27:12 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB923561$
  1489. [2010/12/10 01:13:57 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB923689$
  1490. [2007/08/05 23:26:01 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB923980$
  1491. [2007/07/18 18:03:59 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB924191$
  1492. [2007/07/18 18:03:47 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB924270$
  1493. [2007/07/28 18:14:45 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB924667$
  1494. [2007/07/30 19:44:17 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB925902$
  1495. [2012/12/22 16:28:40 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB926139-v2$
  1496. [2007/07/19 22:19:37 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB926255$
  1497. [2007/08/05 09:35:24 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB926436$
  1498. [2007/07/29 15:53:14 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB927779$
  1499. [2012/02/18 17:01:24 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB927802$
  1500. [2007/08/07 21:22:59 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB927891$
  1501. [2007/07/18 18:03:55 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB928255$
  1502. [2007/08/05 23:24:15 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB928843$
  1503. [2007/07/19 22:19:48 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB929123$
  1504. [2009/05/03 23:59:43 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB929399$
  1505. [2007/07/19 22:19:59 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB929969$
  1506. [2007/07/19 22:19:45 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB930178$
  1507. [2007/07/18 18:03:26 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB930916$
  1508. [2007/07/29 15:53:08 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB931261$
  1509. [2007/07/21 16:22:49 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB931784$
  1510. [2007/08/05 23:25:58 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB931836$
  1511. [2007/08/05 23:24:35 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB932168$
  1512. [2008/05/28 08:55:03 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB932823-v3$
  1513. [2007/08/29 08:59:40 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB933360$
  1514. [2007/07/17 23:02:53 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB933566$
  1515. [2007/10/09 21:06:15 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB933729$
  1516. [2007/07/29 15:52:44 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB935839$
  1517. [2007/07/20 19:16:14 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB935840$
  1518. [2007/08/15 08:40:58 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB936021$
  1519. [2007/07/19 22:19:53 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB936357$
  1520. [2009/05/03 23:59:15 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB936782_WMP11$
  1521. [2007/08/15 08:40:54 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB936782_WMP9$
  1522. [2007/08/15 08:40:02 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB937143$
  1523. [2007/12/12 09:30:09 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB937894$
  1524. [2007/08/15 08:40:09 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB938127$
  1525. [2008/09/19 07:36:15 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB938464$
  1526. [2009/03/11 17:54:35 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB938464-v2$
  1527. [2008/09/11 00:13:18 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB938464_0$
  1528. [2007/08/15 08:40:57 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB938828$
  1529. [2007/08/15 08:40:38 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB938829$
  1530. [2007/10/09 21:06:09 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB939653$
  1531. [2009/05/03 23:59:34 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB939683$
  1532. [2007/10/09 21:05:32 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB941202$
  1533. [2007/12/12 09:29:06 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB941568$
  1534. [2007/12/12 09:29:29 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB941569$
  1535. [2008/01/10 08:23:26 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB941644$
  1536. [2008/04/09 09:02:17 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB941693$
  1537. [2007/12/12 09:29:31 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB942763$
  1538. [2008/02/13 09:57:06 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB943055$
  1539. [2007/11/14 18:56:51 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB943460$
  1540. [2008/01/10 08:23:22 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB943485$
  1541. [2007/12/12 09:29:02 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB944653$
  1542. [2008/04/09 09:01:17 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB945553$
  1543. [2008/02/13 09:57:20 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB946026$
  1544. [2008/09/19 07:36:18 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB946648$
  1545. [2008/08/13 08:52:23 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB946648_0$
  1546. [2008/04/09 09:02:01 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB948590$
  1547. [2008/04/09 09:02:18 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB948881$
  1548. [2008/05/14 20:35:04 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB950749$
  1549. [2008/06/11 08:50:33 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB950760$
  1550. [2008/09/19 07:36:22 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB950762$
  1551. [2008/06/11 08:50:36 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB950762_0$
  1552. [2008/09/19 07:36:25 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB950974$
  1553. [2008/08/13 08:52:18 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB950974_0$
  1554. [2008/09/19 07:36:29 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB951066$
  1555. [2008/08/13 08:51:01 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB951066_0$
  1556. [2008/08/13 08:51:24 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB951072-v2$
  1557. [2008/09/19 07:36:33 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB951376$
  1558. [2008/09/19 07:36:36 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB951376-v2$
  1559. [2008/06/20 22:15:12 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB951376-v2_0$
  1560. [2008/06/11 08:50:29 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB951376_0$
  1561. [2008/09/19 07:36:40 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB951698$
  1562. [2008/06/11 08:50:39 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB951698_0$
  1563. [2008/09/19 07:36:43 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB951748$
  1564. [2008/07/08 21:16:09 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB951748_0$
  1565. [2008/09/19 17:29:12 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB951978$
  1566. [2010/11/29 22:33:53 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB952004$
  1567. [2008/12/10 16:18:58 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB952069_WM9$
  1568. [2008/09/19 07:36:47 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB952287$
  1569. [2008/08/13 08:51:22 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB952287_0$
  1570. [2008/09/19 07:36:50 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB952954$
  1571. [2008/08/13 08:52:26 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB952954_0$
  1572. [2008/08/13 08:52:21 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB953839$
  1573. [2009/05/03 23:59:20 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB954154_WM11$
  1574. [2009/10/15 00:16:40 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB954155_WM9$
  1575. [2010/06/17 08:35:21 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB954156_WM9L$
  1576. [2008/10/15 09:10:36 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB954211$
  1577. [2008/11/12 09:12:30 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB954459$
  1578. [2008/12/10 16:18:55 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB954600$
  1579. [2008/11/12 09:12:24 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB955069$
  1580. [2010/01/13 10:15:11 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB955759$
  1581. [2008/12/10 16:19:15 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB955839$
  1582. [2008/10/15 09:10:53 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB956391$
  1583. [2009/04/17 00:27:29 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB956572$
  1584. [2009/08/13 21:26:59 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB956744$
  1585. [2008/12/10 16:18:49 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB956802$
  1586. [2008/10/15 09:10:56 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB956803$
  1587. [2008/10/15 09:10:29 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB956841$
  1588. [2009/09/10 09:06:07 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB956844$
  1589. [2008/10/15 09:10:50 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB957095$
  1590. [2008/11/12 09:12:33 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB957097$
  1591. [2008/10/23 21:42:00 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB958644$
  1592. [2009/01/14 09:52:11 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB958687$
  1593. [2009/03/11 17:54:30 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB958690$
  1594. [2009/10/15 00:18:13 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB958869$
  1595. [2009/04/17 00:28:54 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB959426$
  1596. [2009/05/03 23:59:22 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB959772_WM11$
  1597. [2009/03/11 17:54:37 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB960225$
  1598. [2009/02/12 16:50:15 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB960715$
  1599. [2009/04/17 00:27:17 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB960803$
  1600. [2009/08/13 21:27:09 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB960859$
  1601. [2009/08/08 17:49:12 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB961118$
  1602. [2010/12/02 00:31:07 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB961371$
  1603. [2009/04/17 00:28:51 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB961373$
  1604. [2009/06/13 00:50:25 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB961501$
  1605. [2009/02/26 00:34:41 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB967715$
  1606. [2009/10/15 00:16:08 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB968389$
  1607. [2009/06/13 00:48:41 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB968537$
  1608. [2009/09/10 09:06:11 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB968816_WM9$
  1609. [2009/10/15 00:16:43 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB969059$
  1610. [2009/06/13 00:50:22 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB969898$
  1611. [2009/11/11 22:42:25 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB969947$
  1612. [2009/06/13 00:49:08 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB970238$
  1613. [2009/12/09 01:38:31 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB970430$
  1614. [2009/08/27 08:50:22 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB970653-v3$
  1615. [2011/03/16 00:05:57 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB971029$
  1616. [2010/02/10 10:02:16 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB971468$
  1617. [2009/10/15 00:16:25 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB971486$
  1618. [2009/08/13 21:27:02 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB971557$
  1619. [2009/07/16 08:41:54 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB971633$
  1620. [2009/08/13 21:27:05 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB971657$
  1621. [2009/12/09 01:38:00 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB971737$
  1622. [2010/01/13 10:15:06 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB972270$
  1623. [2009/07/16 08:41:57 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB973346$
  1624. [2009/08/13 21:26:49 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB973354$
  1625. [2009/08/13 21:26:51 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB973507$
  1626. [2009/10/15 00:16:17 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB973525$
  1627. [2009/08/13 21:26:41 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB973540_WM9$
  1628. [2009/11/26 10:23:41 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB973687$
  1629. [2009/08/13 21:25:11 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB973815$
  1630. [2009/08/13 21:26:55 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB973869$
  1631. [2009/12/09 01:38:10 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB973904$
  1632. [2009/10/15 00:16:37 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB974112$
  1633. [2009/12/09 01:38:27 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB974318$
  1634. [2009/12/09 01:38:05 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB974392$
  1635. [2009/10/15 00:16:30 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB974571$
  1636. [2009/10/15 00:16:33 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB975025$
  1637. [2009/10/15 00:16:15 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB975467$
  1638. [2010/09/15 08:33:06 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB975558_WM8$
  1639. [2010/02/10 10:00:30 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB975560$
  1640. [2010/03/11 10:48:33 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB975561$
  1641. [2010/06/11 08:10:20 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB975562$
  1642. [2010/02/10 10:00:37 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB975713$
  1643. [2009/11/26 10:23:50 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB976098-v2$
  1644. [2010/02/10 10:00:11 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB977165$
  1645. [2010/04/14 22:11:47 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB977816$
  1646. [2010/02/10 10:00:24 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB977914$
  1647. [2010/02/10 10:00:40 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB978037$
  1648. [2010/02/10 10:00:33 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB978251$
  1649. [2010/02/10 10:02:20 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB978262$
  1650. [2010/04/14 22:11:52 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB978338$
  1651. [2010/05/12 08:57:03 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB978542$
  1652. [2010/04/14 09:25:02 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB978601$
  1653. [2010/06/11 08:10:31 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB978695_WM9$
  1654. [2010/02/10 10:00:18 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB978706$
  1655. [2010/02/24 09:50:09 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB979306$
  1656. [2010/04/14 09:24:56 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB979309$
  1657. [2010/06/17 08:35:15 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB979332_WM9L$
  1658. [2010/06/11 08:10:28 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB979482$
  1659. [2010/06/11 08:10:56 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB979559$
  1660. [2010/04/14 22:13:30 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB979683$
  1661. [2010/10/14 08:00:44 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB979687$
  1662. [2010/06/11 08:11:00 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB980195$
  1663. [2010/06/11 08:11:05 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB980218$
  1664. [2010/04/14 22:13:25 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB980232$
  1665. [2010/08/11 17:50:41 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB980436$
  1666. [2010/09/15 08:32:51 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB981322$
  1667. [2010/05/26 08:04:43 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB981793$
  1668. [2010/08/11 17:53:13 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB981852$
  1669. [2010/10/14 07:54:41 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB981957$
  1670. [2010/08/11 17:49:13 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB981997$
  1671. [2010/10/14 08:00:48 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB982132$
  1672. [2010/08/11 17:53:23 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB982214$
  1673. [2010/08/11 17:49:03 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB982665$
  1674. [2010/09/15 08:32:54 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB982802$
  1675. [2009/05/02 11:10:12 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallMSCompPackV1$
  1676. [2009/05/02 11:09:10 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallWMFDist11$
  1677. [2009/05/02 11:09:49 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallwmp11$
  1678. [2009/05/02 11:08:48 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallWudf01000$
  1679. [2007/07/13 19:18:24 | 000,000,000 | ---D | M] -- C:\WINDOWS\.file_store_32
  1680. [2007/07/13 19:09:38 | 000,000,000 | ---D | M] -- C:\WINDOWS\.jagex_cache_32
  1681. [2007/05/16 16:16:57 | 000,000,000 | ---D | M] -- C:\WINDOWS\addins
  1682. [2012/12/22 16:31:10 | 000,000,000 | ---D | M] -- C:\WINDOWS\AppPatch
  1683. [2013/02/14 07:35:58 | 000,000,000 | R-SD | M] -- C:\WINDOWS\assembly
  1684. [2007/05/17 22:15:49 | 000,000,000 | ---D | M] -- C:\WINDOWS\ASUSInstAll
  1685. [2007/05/16 16:16:57 | 000,000,000 | ---D | M] -- C:\WINDOWS\Config
  1686. [2007/05/16 16:16:57 | 000,000,000 | ---D | M] -- C:\WINDOWS\Connection Wizard
  1687. [2007/05/16 23:32:12 | 000,000,000 | ---D | M] -- C:\WINDOWS\Cursors
  1688. [2008/09/17 15:33:29 | 000,000,000 | ---D | M] -- C:\WINDOWS\Debug
  1689. [2008/01/18 15:18:33 | 000,000,000 | ---D | M] -- C:\WINDOWS\Downloaded Installations
  1690. [2013/03/26 07:24:40 | 000,000,000 | --SD | M] -- C:\WINDOWS\Downloaded Program Files
  1691. [2007/07/14 07:26:25 | 000,000,000 | ---D | M] -- C:\WINDOWS\Driver Cache
  1692. [2008/09/19 07:29:55 | 000,000,000 | ---D | M] -- C:\WINDOWS\ehome
  1693. [2012/10/06 08:43:23 | 000,000,000 | R-SD | M] -- C:\WINDOWS\Fonts
  1694. [2012/07/09 20:56:19 | 000,000,000 | -HSD | M] -- C:\WINDOWS\ftpcache
  1695. [2012/06/23 15:09:11 | 000,000,000 | ---D | M] -- C:\WINDOWS\Help
  1696. [2007/11/27 08:18:37 | 000,000,000 | -H-D | M] -- C:\WINDOWS\ie7
  1697. [2007/11/28 19:32:26 | 000,000,000 | ---D | M] -- C:\WINDOWS\ie7updates
  1698. [2009/06/13 09:07:35 | 000,000,000 | -H-D | M] -- C:\WINDOWS\ie8
  1699. [2013/03/14 09:14:30 | 000,000,000 | ---D | M] -- C:\WINDOWS\ie8updates
  1700. [2008/09/19 07:34:14 | 000,000,000 | ---D | M] -- C:\WINDOWS\ime
  1701. [2013/03/22 23:44:40 | 000,000,000 | -H-D | M] -- C:\WINDOWS\inf
  1702. [2013/03/28 22:13:12 | 000,000,000 | -HSD | M] -- C:\WINDOWS\Installer
  1703. [2007/05/17 23:39:57 | 000,000,000 | ---D | M] -- C:\WINDOWS\Internet Logs
  1704. [2007/05/16 16:16:57 | 000,000,000 | ---D | M] -- C:\WINDOWS\java
  1705. [2008/09/19 07:34:08 | 000,000,000 | ---D | M] -- C:\WINDOWS\l2schemas
  1706. [2009/06/13 09:09:55 | 000,000,000 | ---D | M] -- C:\WINDOWS\Media
  1707. [2013/02/14 07:34:53 | 000,000,000 | ---D | M] -- C:\WINDOWS\Microsoft.NET
  1708. [2007/05/18 07:28:26 | 000,000,000 | ---D | M] -- C:\WINDOWS\Minidump
  1709. [2008/09/19 07:32:27 | 000,000,000 | ---D | M] -- C:\WINDOWS\msagent
  1710. [2007/05/16 16:16:57 | 000,000,000 | ---D | M] -- C:\WINDOWS\msapps
  1711. [2010/06/16 20:51:37 | 000,000,000 | -H-D | M] -- C:\WINDOWS\msdownld.tmp
  1712. [2008/09/19 07:32:28 | 000,000,000 | ---D | M] -- C:\WINDOWS\mui
  1713. [2008/09/19 07:34:14 | 000,000,000 | ---D | M] -- C:\WINDOWS\network diagnostic
  1714. [2007/05/17 22:12:44 | 000,000,000 | ---D | M] -- C:\WINDOWS\NV2740908.TMP
  1715. [2007/07/14 18:09:43 | 000,000,000 | ---D | M] -- C:\WINDOWS\NV28802884.TMP
  1716. [2008/07/05 11:43:23 | 000,000,000 | ---D | M] -- C:\WINDOWS\nvidia icons
  1717. [2008/07/05 11:44:54 | 000,000,000 | ---D | M] -- C:\WINDOWS\nview
  1718. [2007/05/16 23:34:01 | 000,000,000 | R--D | M] -- C:\WINDOWS\Offline Web Pages
  1719. [2007/05/16 23:33:04 | 000,000,000 | ---D | M] -- C:\WINDOWS\pchealth
  1720. [2008/09/19 07:34:08 | 000,000,000 | ---D | M] -- C:\WINDOWS\PeerNet
  1721. [2013/04/01 08:29:31 | 000,000,000 | ---D | M] -- C:\WINDOWS\Prefetch
  1722. [2007/05/16 16:16:57 | 000,000,000 | ---D | M] -- C:\WINDOWS\Provisioning
  1723. [2010/10/05 19:04:47 | 000,000,000 | ---D | M] -- C:\WINDOWS\RegisteredPackages
  1724. [2013/03/30 10:57:27 | 000,000,000 | ---D | M] -- C:\WINDOWS\Registration
  1725. [2010/05/31 18:33:13 | 000,000,000 | ---D | M] -- C:\WINDOWS\repair
  1726. [2007/05/16 16:16:57 | 000,000,000 | ---D | M] -- C:\WINDOWS\Resources
  1727. [2008/09/19 08:12:02 | 000,000,000 | ---D | M] -- C:\WINDOWS\security
  1728. [2008/09/19 07:32:33 | 000,000,000 | ---D | M] -- C:\WINDOWS\ServicePackFiles
  1729. [2007/07/14 16:06:57 | 000,000,000 | ---D | M] -- C:\WINDOWS\SoftwareDistribution
  1730. [2008/09/19 07:32:26 | 000,000,000 | ---D | M] -- C:\WINDOWS\srchasst
  1731. [2007/06/17 18:41:22 | 000,000,000 | ---D | M] -- C:\WINDOWS\Sun
  1732. [2009/08/08 08:48:22 | 000,000,000 | ---D | M] -- C:\WINDOWS\SxsCaPendDel
  1733. [2008/09/19 07:32:13 | 000,000,000 | ---D | M] -- C:\WINDOWS\system
  1734. [2013/03/28 22:13:09 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32
  1735. [2013/04/01 08:13:20 | 000,000,000 | --SD | M] -- C:\WINDOWS\Tasks
  1736. [2013/04/01 09:15:15 | 000,000,000 | ---D | M] -- C:\WINDOWS\Temp
  1737. [2010/06/16 20:00:28 | 000,000,000 | ---D | M] -- C:\WINDOWS\twain_32
  1738. [2007/11/27 08:18:42 | 000,000,000 | ---D | M] -- C:\WINDOWS\WBEM
  1739. [2007/07/14 15:37:26 | 000,000,000 | R--D | M] -- C:\WINDOWS\Web
  1740. [2013/03/25 23:05:07 | 000,000,000 | ---D | M] -- C:\WINDOWS\WinSxS
  1741.  
  1742. [color=#A23BEC]< %windir%\installer\*. >[/color]
  1743. [2007/08/05 23:24:57 | 000,000,000 | -HSD | M] -- C:\WINDOWS\installer\$PatchCache$
  1744. [2008/09/19 07:34:08 | 000,000,000 | ---D | M] -- C:\WINDOWS\installer\tsclientmsitrans
  1745. [2008/07/05 10:52:33 | 000,000,000 | ---D | M] -- C:\WINDOWS\installer\{048298C9-A4D3-490B-9FF9-AB023A9238F3}
  1746. [2011/10/29 15:24:26 | 000,000,000 | ---D | M] -- C:\WINDOWS\installer\{0A1E0BDA-5E8F-436d-8BE5-7E97C5CB899D}
  1747. [2010/10/05 19:04:05 | 000,000,000 | ---D | M] -- C:\WINDOWS\installer\{11C98E1A-EC91-4B38-B44C-C562292D8453}
  1748. [2010/04/26 19:45:04 | 000,000,000 | ---D | M] -- C:\WINDOWS\installer\{1451DE6B-ABE1-4F62-BE9A-B363A17588A2}
  1749. [2007/07/14 18:10:45 | 000,000,000 | ---D | M] -- C:\WINDOWS\installer\{1F6423DE-7959-4178-80E0-023C7EAA5347}
  1750. [2009/06/02 23:23:42 | 000,000,000 | ---D | M] -- C:\WINDOWS\installer\{216AB108-2AE1-4130-B3D5-20B2C4C80F8F}
  1751. [2010/08/14 15:14:18 | 000,000,000 | ---D | M] -- C:\WINDOWS\installer\{28BE306E-5DA6-4F9C-BDB0-DBA3C8C6FFFD}
  1752. [2008/07/31 00:20:16 | 000,000,000 | ---D | M] -- C:\WINDOWS\installer\{3248F0A8-6813-11D6-A77B-00B0D0160070}
  1753. [2007/05/16 23:39:14 | 000,000,000 | ---D | M] -- C:\WINDOWS\installer\{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}
  1754. [2007/05/19 13:05:11 | 000,000,000 | ---D | M] -- C:\WINDOWS\installer\{37477865-A3F1-4772-AD43-AAFC6BCFF99F}
  1755. [2012/12/22 16:32:38 | 000,000,000 | ---D | M] -- C:\WINDOWS\installer\{459699C3-9430-4381-964B-4248D87B49F9}
  1756. [2012/12/22 16:13:52 | 000,000,000 | ---D | M] -- C:\WINDOWS\installer\{57752979-A1C9-4C02-856B-FBB27AC4E02C}
  1757. [2008/08/11 23:11:38 | 000,000,000 | ---D | M] -- C:\WINDOWS\installer\{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
  1758. [2012/12/22 16:32:42 | 000,000,000 | ---D | M] -- C:\WINDOWS\installer\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}
  1759. [2012/12/22 16:32:24 | 000,000,000 | ---D | M] -- C:\WINDOWS\installer\{79155F2B-9895-49D7-8612-D92580E0DE5B}
  1760. [2008/01/18 15:18:47 | 000,000,000 | ---D | M] -- C:\WINDOWS\installer\{856C155E-4A74-4041-B026-04F96FFD1BCD}
  1761. [2008/11/12 09:12:21 | 000,000,000 | ---D | M] -- C:\WINDOWS\installer\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
  1762. [2013/03/14 09:13:48 | 000,000,000 | ---D | M] -- C:\WINDOWS\installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
  1763. [2008/11/24 21:41:18 | 000,000,000 | ---D | M] -- C:\WINDOWS\installer\{8DC42D05-680B-41B0-8878-6C14D24602DB}
  1764. [2007/05/18 21:10:14 | 000,000,000 | ---D | M] -- C:\WINDOWS\installer\{8FFC924C-ED06-44CB-8867-3CA778ECE903}
  1765. [2012/10/06 08:44:11 | 000,000,000 | ---D | M] -- C:\WINDOWS\installer\{9F1F2AEA-C72A-4DD6-991E-C5506A5625E4}
  1766. [2009/11/22 21:08:07 | 000,000,000 | ---D | M] -- C:\WINDOWS\installer\{A429C2AE-EBF1-4F81-A221-1C115CAADDAD}
  1767. [2011/04/22 13:45:54 | 000,000,000 | ---D | M] -- C:\WINDOWS\installer\{A71D5E81-B967-43DB-93D7-FD31BFB95748}
  1768. [2013/02/21 09:18:32 | 000,000,000 | ---D | M] -- C:\WINDOWS\installer\{AC76BA86-7AD7-1033-7B44-AB0000000001}
  1769. [2012/12/22 16:33:54 | 000,000,000 | ---D | M] -- C:\WINDOWS\installer\{B0261E53-B6F1-474A-864B-E7C3CBF468E0}
  1770. [2011/07/03 18:40:22 | 000,000,000 | ---D | M] -- C:\WINDOWS\installer\{B9DB4C76-01A4-46D5-8910-F7AA6376DBAF}
  1771. [2007/08/15 08:39:59 | 000,000,000 | ---D | M] -- C:\WINDOWS\installer\{C04E32E0-0416-434D-AFB9-6969D703A9EF}
  1772. [2007/07/15 11:47:45 | 000,000,000 | ---D | M] -- C:\WINDOWS\installer\{C194D333-B84A-4BB7-B35E-060732D98DC4}
  1773. [2008/03/21 13:13:18 | 000,000,000 | ---D | M] -- C:\WINDOWS\installer\{C1E544E5-EF3C-4103-A57B-3A499FD91033}
  1774. [2009/09/18 09:30:57 | 000,000,000 | ---D | M] -- C:\WINDOWS\installer\{C78EAC6F-7A73-452E-8134-DBB2165C5A68}
  1775. [2012/12/22 16:32:19 | 000,000,000 | ---D | M] -- C:\WINDOWS\installer\{CCE825DB-347A-4004-A186-5F4A6FDD8547}
  1776. [2011/04/03 11:05:28 | 000,000,000 | ---D | M] -- C:\WINDOWS\installer\{D22002ED-EE2A-4CB1-A63D-430E62A2E8D8}
  1777. [2008/04/30 18:46:48 | 000,000,000 | ---D | M] -- C:\WINDOWS\installer\{DDEDAF6C-488E-4CDA-8276-1CCF5F3C5C32}
  1778. [2011/01/04 19:45:35 | 000,000,000 | ---D | M] -- C:\WINDOWS\installer\{E084350A-3EAC-471E-9B04-0F0DB538CA95}
  1779. [2007/05/18 08:48:49 | 000,000,000 | ---D | M] -- C:\WINDOWS\installer\{E1180142-3B31-4DCC-9D27-7AC2D37662BF}
  1780. [2010/06/16 20:51:39 | 000,000,000 | ---D | M] -- C:\WINDOWS\installer\{E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E}
  1781. [2010/12/22 08:17:11 | 000,000,000 | ---D | M] -- C:\WINDOWS\installer\{E7004147-2CCA-431C-AA05-2AB166B9785D}
  1782. [2013/03/25 23:05:47 | 000,000,000 | ---D | M] -- C:\WINDOWS\installer\{EA1FAE0F-2354-4E32-B423-ABAE8E358F91}
  1783. [2010/10/02 13:22:15 | 000,000,000 | ---D | M] -- C:\WINDOWS\installer\{EB900AF8-CC61-4E15-871B-98D1EA3E8025}
  1784. [2009/11/26 10:23:24 | 000,000,000 | ---D | M] -- C:\WINDOWS\installer\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
  1785. [2009/03/26 18:06:54 | 000,000,000 | ---D | M] -- C:\WINDOWS\installer\{F958CA02-BB40-4007-894B-258729456EE4}
  1786. [2009/09/18 09:32:28 | 000,000,000 | ---D | M] -- C:\WINDOWS\installer\{FA54AFB1-5745-4389-B8C1-9F7509672ED1}
  1787.  
  1788. [color=#A23BEC]< %windir%\system32\*. >[/color]
  1789. [2007/05/16 16:16:57 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\1025
  1790. [2007/05/16 16:16:57 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\1028
  1791. [2007/05/16 16:16:57 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\1031
  1792. [2007/07/14 07:27:11 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\1033
  1793. [2007/05/16 16:16:57 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\1037
  1794. [2007/05/16 16:16:57 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\1041
  1795. [2007/05/16 16:16:57 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\1042
  1796. [2007/05/16 16:16:57 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\1054
  1797. [2007/05/16 16:16:57 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\2052
  1798. [2007/05/16 16:16:57 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\3076
  1799. [2007/05/16 16:16:57 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\3com_dmi
  1800. [2008/05/11 11:54:13 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\Adobe
  1801. [2008/07/25 09:44:10 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\appmgmt
  1802. [2008/09/19 07:34:08 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\bits
  1803. [2013/03/25 09:11:44 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\CatRoot
  1804. [2013/03/28 21:18:56 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\CatRoot2
  1805. [2008/09/19 07:32:25 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\Com
  1806. [2012/12/22 16:28:41 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\config
  1807. [2007/05/16 16:16:57 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\dhcp
  1808. [2010/10/05 19:04:49 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\DirectX
  1809. [2013/03/22 23:44:35 | 000,000,000 | RHSD | M] -- C:\WINDOWS\system32\dllcache
  1810. [2013/03/26 07:20:17 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\drivers
  1811. [2012/12/22 16:33:40 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\DRVSTORE
  1812. [2008/09/19 07:34:08 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\en
  1813. [2009/08/06 20:48:33 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\en-US
  1814. [2007/05/17 00:01:53 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\EVGA
  1815. [2007/05/16 16:16:57 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\export
  1816. [2007/07/14 07:27:15 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\ias
  1817. [2007/07/14 07:27:35 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\icsxml
  1818. [2007/05/16 16:16:57 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\IME
  1819. [2008/09/19 07:34:14 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\inetsrv
  1820. [2011/07/03 17:24:56 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\LogFiles
  1821. [2007/06/16 14:08:15 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\Macromed
  1822. [2007/05/16 23:37:26 | 000,000,000 | --SD | M] -- C:\WINDOWS\system32\Microsoft
  1823. [2007/05/16 23:32:26 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\MsDtc
  1824. [2007/05/16 16:16:57 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\mui
  1825. [2008/09/19 07:32:28 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\npp
  1826. [2013/03/30 10:58:03 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\NtmsData
  1827. [2008/09/19 07:32:14 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\oobe
  1828. [2007/05/17 23:28:43 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\PreInstall
  1829. [2007/05/16 16:18:19 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\ras
  1830. [2012/09/15 13:57:52 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\ReinstallBackups
  1831. [2008/09/19 07:32:28 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\Restore
  1832. [2008/09/19 07:34:08 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\scripting
  1833. [2008/09/19 08:12:54 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\Setup
  1834. [2007/05/16 16:16:57 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\ShellExt
  1835. [2007/05/17 23:22:08 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\SoftwareDistribution
  1836. [2009/08/06 20:48:20 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\spool
  1837. [2008/09/19 07:34:09 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\usmt
  1838. [2009/04/17 08:16:35 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\wbem
  1839. [2010/06/16 20:51:36 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\windows media
  1840. [2012/12/22 16:28:36 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\windowspowershell
  1841. [2007/05/16 16:16:57 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\wins
  1842. [2007/05/16 23:34:51 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\xircom
  1843. [2012/05/09 10:47:21 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\XPSViewer
  1844.  
  1845. [color=#A23BEC]< %Temp%\smtmp\1\*.* >[/color]
  1846.  
  1847. [color=#A23BEC]< %Temp%\smtmp\2\*.* >[/color]
  1848.  
  1849. [color=#A23BEC]< %Temp%\smtmp\3\*.* >[/color]
  1850.  
  1851. [color=#A23BEC]< %Temp%\smtmp\4\*.* >[/color]
  1852.  
  1853. [color=#A23BEC]< %systemroot%\system32\*.dll /lockedfiles >[/color]
  1854. [6 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]
  1855.  
  1856. [color=#A23BEC]< %systemroot%\Tasks\*.job /lockedfiles >[/color]
  1857.  
  1858. [color=#A23BEC]< %systemroot%\system32\drivers\*.sys /90 >[/color]
  1859. [2013/03/28 21:18:43 | 000,084,744 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\WINDOWS\system32\drivers\avgntflt.sys
  1860. [2013/03/28 21:18:43 | 000,135,136 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\WINDOWS\system32\drivers\avipbb.sys
  1861. [2013/03/28 21:18:43 | 000,037,352 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\WINDOWS\system32\drivers\avkmgr.sys
  1862. [2013/03/25 08:43:36 | 000,028,520 | ---- | M] (Avira GmbH) -- C:\WINDOWS\system32\drivers\ssmdrv.sys
  1863. [2013/02/11 17:32:23 | 000,012,928 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\drivers\usb8023.sys
  1864. [2013/02/11 17:32:23 | 000,012,928 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\drivers\usb8023x.sys
  1865.  
  1866. [color=#A23BEC]< %systemroot%\system32\drivers\*.sys /lockedfiles >[/color]
  1867.  
  1868. [color=#A23BEC]< %systemroot%\system32\Spool\prtprocs\w32x86\*.dll >[/color]
  1869. [2002/02/11 12:00:00 | 000,013,824 | ---- | M] (CANON INC.) -- C:\WINDOWS\system32\Spool\prtprocs\w32x86\CNMPD2t.DLL
  1870. [2002/02/11 12:00:00 | 000,043,008 | ---- | M] (CANON INC.) -- C:\WINDOWS\system32\Spool\prtprocs\w32x86\CNMPP2t.DLL
  1871. [2008/07/06 05:06:10 | 000,089,088 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\Spool\prtprocs\w32x86\filterpipelineprintproc.dll
  1872.  
  1873. [color=#A23BEC]< %systemroot%\*. /rp /s >[/color]
  1874.  
  1875. [color=#A23BEC]< %systemroot%\assembly\tmp\*.* /S /MD5 >[/color]
  1876.  
  1877. [color=#A23BEC]< %systemroot%\assembly\temp\*.* /S /MD5 >[/color]
  1878.  
  1879. [color=#A23BEC]< %systemroot%\assembly\GAC\*.ini >[/color]
  1880.  
  1881. [color=#A23BEC]< %systemroot%\assembly\GAC_32\*.ini >[/color]
  1882.  
  1883. [color=#A23BEC]< %SystemRoot%\assembly\GAC_MSIL\*.ini >[/color]
  1884.  
  1885. [color=#A23BEC]< wsSystemRoot|l,n,u,@;True;False;True;$,{ /fn >[/color]
  1886.  
  1887. [color=#A23BEC]< %systemdrive%\$Recycle.Bin|@;true;true;true /fp >[/color]
  1888.  
  1889. [color=#A23BEC]< HKEY_CLASSES_ROOT\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24} /s >[/color]
  1890. "" = PSFactoryBuffer
  1891. [HKEY_CLASSES_ROOT\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\InProcServer32]
  1892. "" = C:\WINDOWS\system32\wbem\wbemsvc.dll -- [2008/04/13 17:12:08 | 000,043,520 | ---- | M] (Microsoft Corporation)
  1893. "ThreadingModel" = Both
  1894.  
  1895. [color=#A23BEC]< HKEY_CLASSES_ROOT\CLSID\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1} /s >[/color]
  1896. "" = Microsoft WBEM New Event Subsystem
  1897. [HKEY_CLASSES_ROOT\CLSID\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InprocServer32]
  1898. "" = C:\WINDOWS\system32\wbem\wbemess.dll -- [2008/04/13 17:12:08 | 000,273,920 | ---- | M] (Microsoft Corporation)
  1899. "ThreadingModel" = Both
  1900.  
  1901. [color=#A23BEC]< HKEY_CURRENT_USER\Software\Classes\CLSID\{42aedc87-2188-41fd-b9a3-0c966feabec1} /s >[/color]
  1902.  
  1903. [color=#A23BEC]< HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1} /s >[/color]
  1904. "" = Microsoft WBEM New Event Subsystem
  1905. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InprocServer32]
  1906. "" = C:\WINDOWS\system32\wbem\wbemess.dll -- [2008/04/13 17:12:08 | 000,273,920 | ---- | M] (Microsoft Corporation)
  1907. "ThreadingModel" = Both
  1908.  
  1909. [color=#A23BEC]< HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{42aedc87-2188-41fd-b9a3-0c966feabec1} /s >[/color]
  1910. "" = MruPidlList
  1911. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  1912. "" = %SystemRoot%\system32\shdocvw.dll -- [2008/04/13 17:12:05 | 001,499,136 | ---- | M] (Microsoft Corporation)
  1913. "ThreadingModel" = Apartment
  1914.  
  1915. [color=#A23BEC]< HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{a2a9545d-a0c2-42b4-9708-a0b2badd77c8} /s >[/color]
  1916. "" = Start Menu Pin
  1917. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{a2a9545d-a0c2-42b4-9708-a0b2badd77c8}\InProcServer32]
  1918. "" = %SystemRoot%\system32\SHELL32.dll -- [2012/06/08 07:26:20 | 008,462,848 | ---- | M] (Microsoft Corporation)
  1919. "ThreadingModel" = Apartment
  1920.  
  1921. [color=#A23BEC]< HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24} /s >[/color]
  1922. "" = PSFactoryBuffer
  1923. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\InProcServer32]
  1924. "" = C:\WINDOWS\system32\wbem\wbemsvc.dll -- [2008/04/13 17:12:08 | 000,043,520 | ---- | M] (Microsoft Corporation)
  1925. "ThreadingModel" = Both
  1926.  
  1927. [color=#A23BEC]< HKEY_CLASSES_ROOT\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F} /s >[/color]
  1928. "" = Microsoft WBEM _WbemFetchRefresherMgr Proxy Helper
  1929. [HKEY_CLASSES_ROOT\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InprocServer32]
  1930. "" = C:\WINDOWS\system32\wbem\fastprox.dll -- [2009/02/09 05:10:48 | 000,473,600 | ---- | M] (Microsoft Corporation)
  1931. "ThreadingModel" = Free
  1932.  
  1933. [color=#A23BEC]< HKEY_CLASSES_ROOT\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9} /s >[/color]
  1934. "" = ShellFolder for CD Burning
  1935. [HKEY_CLASSES_ROOT\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
  1936. "" = %SystemRoot%\system32\SHELL32.dll -- [2012/06/08 07:26:20 | 008,462,848 | ---- | M] (Microsoft Corporation)
  1937. "ThreadingModel" = Apartment
  1938. [HKEY_CLASSES_ROOT\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\MergedFolder]
  1939. "Attributes" = 0x0
  1940. "AttributeMask" = 0xffffffff
  1941. "Location" = @shell32.dll,-12589 -- [2012/06/08 07:26:20 | 008,462,848 | ---- | M] (Microsoft Corporation)
  1942. "ConflictOverlayIcon" = %SystemRoot%\system32\SHELL32.dll,-232 -- [2012/06/08 07:26:20 | 008,462,848 | ---- | M] (Microsoft Corporation)
  1943.  
  1944. [color=#A23BEC]< HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9} /s >[/color]
  1945.  
  1946. [color=#A23BEC]< HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5839FCA9-774D-42A1-ACDA-D6A79037F57F} /s >[/color]
  1947. "" = Microsoft WBEM _WbemFetchRefresherMgr Proxy Helper
  1948. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InprocServer32]
  1949. "" = C:\WINDOWS\system32\wbem\fastprox.dll -- [2009/02/09 05:10:48 | 000,473,600 | ---- | M] (Microsoft Corporation)
  1950. "ThreadingModel" = Free
  1951.  
  1952. [color=#A23BEC]< HKEY_CURRENT_USER\Software\Classes\clsid\{12d0253a-7c96-815c-11e0-3034bbd97cc0}] /s >[/color]
  1953.  
  1954. [color=#A23BEC]< HKEY_CURRENT_USER\Software\MSOLoad /s >[/color]
  1955.  
  1956. [color=#A23BEC]< type c:\diskreport.txt /c >[/color]
  1957. Microsoft DiskPart version 5.1.3565
  1958. Copyright (C) 1999-2003 Microsoft Corporation.
  1959. On computer: DAVESPC
  1960. Volume ### Ltr Label Fs Type Size Status Info
  1961. ---------- --- ----------- ----- ---------- ------- --------- --------
  1962. Volume 0 D DVD-ROM 0 B
  1963. Volume 1 C NTFS Partition 466 GB Healthy System
  1964.  
  1965. [color=#A23BEC]< MD5 for: AFD.SYS >[/color]
  1966. [2011/08/17 06:49:54 | 000,138,496 | ---- | M] (Microsoft Corporation) MD5=1E44BC1E83D8FD2305F8D452DB109CF9 -- C:\WINDOWS\system32\dllcache\afd.sys
  1967. [2011/08/17 06:49:54 | 000,138,496 | ---- | M] (Microsoft Corporation) MD5=1E44BC1E83D8FD2305F8D452DB109CF9 -- C:\WINDOWS\system32\drivers\afd.sys
  1968. [2008/04/13 12:19:23 | 000,138,112 | ---- | M] (Microsoft Corporation) MD5=322D0E36693D6E24A2398BEE62A268CD -- C:\WINDOWS\$NtUninstallKB951748$\afd.sys
  1969. [2008/04/13 12:19:23 | 000,138,112 | ---- | M] (Microsoft Corporation) MD5=322D0E36693D6E24A2398BEE62A268CD -- C:\WINDOWS\ServicePackFiles\i386\afd.sys
  1970. [2011/02/16 06:22:48 | 000,138,496 | ---- | M] (Microsoft Corporation) MD5=355556D9E580915118CD7EF736653A89 -- C:\WINDOWS\$NtUninstallKB2592799$\afd.sys
  1971. [2008/10/16 08:07:58 | 000,138,496 | ---- | M] (Microsoft Corporation) MD5=38D7B715504DA4741DF35E3594FE2099 -- C:\WINDOWS\$hf_mig$\KB2509553\SP3QFE\afd.sys
  1972. [2008/08/14 03:34:26 | 000,138,496 | ---- | M] (Microsoft Corporation) MD5=4D43E74F2A1239D53929B82600F1971C -- C:\WINDOWS\$hf_mig$\KB956803\SP3QFE\afd.sys
  1973. [2004/08/04 12:00:00 | 000,138,496 | ---- | M] (Microsoft Corporation) MD5=5AC495F4CB807B2B98AD2AD591E6D92E -- C:\old_c_drive\Local Disk (E)\WINDOWS\SYSTEM32\dllcache\afd.sys
  1974. [2004/08/04 12:00:00 | 000,138,496 | ---- | M] (Microsoft Corporation) MD5=5AC495F4CB807B2B98AD2AD591E6D92E -- C:\old_c_drive\Local Disk (E)\WINDOWS\SYSTEM32\DRIVERS\afd.sys
  1975. [2004/08/04 05:00:00 | 000,138,496 | ---- | M] (Microsoft Corporation) MD5=5AC495F4CB807B2B98AD2AD591E6D92E -- C:\WINDOWS\$NtUninstallKB951748_0$\afd.sys
  1976. [2008/10/16 07:43:01 | 000,138,496 | ---- | M] (Microsoft Corporation) MD5=7618D5218F2A614672EC61A80D854A37 -- C:\WINDOWS\$NtUninstallKB2503665$\afd.sys
  1977. [2008/08/14 03:04:36 | 000,138,496 | ---- | M] (Microsoft Corporation) MD5=7E775010EF291DA96AD17CA4B17137D7 -- C:\WINDOWS\$NtUninstallKB2509553$\afd.sys
  1978. [2011/02/16 06:25:05 | 000,138,496 | ---- | M] (Microsoft Corporation) MD5=8D499B1276012EB907E7A9E0F4D8FDA4 -- C:\WINDOWS\$hf_mig$\KB2503665\SP3QFE\afd.sys
  1979. [2008/06/20 03:44:38 | 000,138,368 | ---- | M] (Microsoft Corporation) MD5=944CA435BFCFC82CC1ED9E3A7D731AA9 -- C:\WINDOWS\$NtServicePackUninstall$\afd.sys
  1980. [2008/06/20 04:48:03 | 000,138,496 | ---- | M] (Microsoft Corporation) MD5=D6EE6014241D034E63C49A50CB2B442A -- C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\afd.sys
  1981. [2008/06/20 03:44:08 | 000,138,368 | ---- | M] (Microsoft Corporation) MD5=D99DDFFB33DEACDCF20717CB520379F6 -- C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\afd.sys
  1982. [2008/06/20 04:40:08 | 000,138,496 | ---- | M] (Microsoft Corporation) MD5=E3049B90FE06F3F740B7CFDA44995E2C -- C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\afd.sys
  1983. [2008/06/20 04:40:08 | 000,138,496 | ---- | M] (Microsoft Corporation) MD5=E3049B90FE06F3F740B7CFDA44995E2C -- C:\WINDOWS\$NtUninstallKB956803$\afd.sys
  1984. [2011/08/17 06:41:46 | 000,138,496 | ---- | M] (Microsoft Corporation) MD5=F6B7B1ECD7B41736BDB6FF4B092BCB79 -- C:\WINDOWS\$hf_mig$\KB2592799\SP3QFE\afd.sys
  1985.  
  1986. [color=#A23BEC]< MD5 for: ATAPI.SYS >[/color]
  1987. [2004/08/04 12:00:00 | 018,738,937 | ---- | M] () .cab file -- C:\old_c_drive\Local Disk (E)\WINDOWS\Driver Cache\i386\sp2.cab:atapi.sys
  1988. [2004/08/04 05:00:00 | 018,738,937 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:atapi.sys
  1989. [2008/09/19 07:29:54 | 023,852,652 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:atapi.sys
  1990. [2008/09/19 07:29:54 | 023,852,652 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:atapi.sys
  1991. [2008/04/13 11:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\ServicePackFiles\i386\atapi.sys
  1992. [2008/04/13 11:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\drivers\atapi.sys
  1993. [2004/08/04 12:00:00 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\old_c_drive\Local Disk (E)\WINDOWS\SYSTEM32\DRIVERS\atapi.sys
  1994. [2004/08/04 05:00:00 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\$NtServicePackUninstall$\atapi.sys
  1995.  
  1996. [color=#A23BEC]< MD5 for: DISK.SYS >[/color]
  1997. [2004/08/04 12:00:00 | 018,738,937 | ---- | M] () .cab file -- C:\old_c_drive\Local Disk (E)\WINDOWS\Driver Cache\i386\sp2.cab:disk.sys
  1998. [2004/08/04 05:00:00 | 018,738,937 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:disk.sys
  1999. [2008/09/19 07:29:54 | 023,852,652 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:disk.sys
  2000. [2008/09/19 07:29:54 | 023,852,652 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:disk.sys
  2001. [2004/08/04 12:00:00 | 000,036,352 | ---- | M] (Microsoft Corporation) MD5=00CA44E4534865F8A3B64F7C0984BFF0 -- C:\old_c_drive\Local Disk (E)\WINDOWS\SYSTEM32\DRIVERS\disk.sys
  2002. [2004/08/04 05:00:00 | 000,036,352 | ---- | M] (Microsoft Corporation) MD5=00CA44E4534865F8A3B64F7C0984BFF0 -- C:\WINDOWS\$NtServicePackUninstall$\disk.sys
  2003. [2008/04/13 11:40:47 | 000,036,352 | ---- | M] (Microsoft Corporation) MD5=044452051F3E02E7963599FC8F4F3E25 -- C:\WINDOWS\ServicePackFiles\i386\disk.sys
  2004. [2008/04/13 11:40:47 | 000,036,352 | ---- | M] (Microsoft Corporation) MD5=044452051F3E02E7963599FC8F4F3E25 -- C:\WINDOWS\system32\drivers\disk.sys
  2005.  
  2006. [color=#A23BEC]< MD5 for: EVENTLOG.DLL >[/color]
  2007. [2008/04/13 17:11:53 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=6D4FEB43EE538FC5428CC7F0565AA656 -- C:\WINDOWS\ServicePackFiles\i386\eventlog.dll
  2008. [2008/04/13 17:11:53 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=6D4FEB43EE538FC5428CC7F0565AA656 -- C:\WINDOWS\system32\eventlog.dll
  2009. [2004/08/04 05:00:00 | 000,055,808 | ---- | M] (Microsoft Corporation) MD5=82B24CB70E5944E6E34662205A2A5B78 -- C:\old_c_drive\Local Disk (E)\WINDOWS\SYSTEM32\dllcache\eventlog.dll
  2010. [2004/08/04 12:00:00 | 000,055,808 | ---- | M] (Microsoft Corporation) MD5=82B24CB70E5944E6E34662205A2A5B78 -- C:\old_c_drive\Local Disk (E)\WINDOWS\SYSTEM32\eventlog.dll
  2011. [2004/08/04 05:00:00 | 000,055,808 | ---- | M] (Microsoft Corporation) MD5=82B24CB70E5944E6E34662205A2A5B78 -- C:\WINDOWS\$NtServicePackUninstall$\eventlog.dll
  2012.  
  2013. [color=#A23BEC]< MD5 for: EXPLORER.EXE >[/color]
  2014. [2008/04/13 17:12:19 | 001,033,728 | ---- | M] (Microsoft Corporation) MD5=12896823FB95BFB3DC9B46BCAEDC9923 -- C:\WINDOWS\explorer.exe
  2015. [2008/04/13 17:12:19 | 001,033,728 | ---- | M] (Microsoft Corporation) MD5=12896823FB95BFB3DC9B46BCAEDC9923 -- C:\WINDOWS\ServicePackFiles\i386\explorer.exe
  2016. [2007/06/13 04:26:03 | 001,033,216 | ---- | M] (Microsoft Corporation) MD5=7712DF0CDDE3A5AC89843E61CD5B3658 -- C:\WINDOWS\$hf_mig$\KB938828\SP2QFE\explorer.exe
  2017. [2007/06/13 03:23:07 | 001,033,216 | ---- | M] (Microsoft Corporation) MD5=97BD6515465659FF8F3B7BE375B2EA87 -- C:\WINDOWS\$NtServicePackUninstall$\explorer.exe
  2018. [2004/08/04 12:00:00 | 001,032,192 | ---- | M] (Microsoft Corporation) MD5=A0732187050030AE399B241436565E64 -- C:\old_c_drive\Local Disk (E)\WINDOWS\explorer.exe
  2019. [2004/08/04 12:00:00 | 001,032,192 | ---- | M] (Microsoft Corporation) MD5=A0732187050030AE399B241436565E64 -- C:\old_c_drive\Local Disk (E)\WINDOWS\SYSTEM32\dllcache\explorer.exe
  2020. [2004/08/04 05:00:00 | 001,032,192 | ---- | M] (Microsoft Corporation) MD5=A0732187050030AE399B241436565E64 -- C:\WINDOWS\$NtUninstallKB938828$\explorer.exe
  2021.  
  2022. [color=#A23BEC]< MD5 for: I8042PRT.SYS >[/color]
  2023. [2004/08/04 12:00:00 | 018,738,937 | ---- | M] () .cab file -- C:\old_c_drive\Local Disk (E)\WINDOWS\Driver Cache\i386\sp2.cab:i8042prt.sys
  2024. [2004/08/04 05:00:00 | 018,738,937 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:i8042prt.sys
  2025. [2008/09/19 07:29:54 | 023,852,652 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:i8042prt.sys
  2026. [2008/09/19 07:29:54 | 023,852,652 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:i8042prt.sys
  2027. [2008/04/13 12:18:00 | 000,052,480 | ---- | M] (Microsoft Corporation) MD5=4A0B06AA8943C1E332520F7440C0AA30 -- C:\WINDOWS\ServicePackFiles\i386\i8042prt.sys
  2028. [2008/04/13 12:18:00 | 000,052,480 | ---- | M] (Microsoft Corporation) MD5=4A0B06AA8943C1E332520F7440C0AA30 -- C:\WINDOWS\system32\drivers\i8042prt.sys
  2029. [2004/08/04 12:00:00 | 000,052,736 | ---- | M] (Microsoft Corporation) MD5=5502B58EEF7486EE6F93F3F164DCB808 -- C:\old_c_drive\Local Disk (E)\WINDOWS\SYSTEM32\DRIVERS\i8042prt.sys
  2030. [2004/08/04 05:00:00 | 000,052,736 | ---- | M] (Microsoft Corporation) MD5=5502B58EEF7486EE6F93F3F164DCB808 -- C:\WINDOWS\$NtServicePackUninstall$\i8042prt.sys
  2031.  
  2032. [color=#A23BEC]< MD5 for: IPSEC.SYS >[/color]
  2033. [2008/04/13 12:19:42 | 000,075,264 | ---- | M] (Microsoft Corporation) MD5=23C74D75E36E7158768DD63D92789A91 -- C:\WINDOWS\ServicePackFiles\i386\ipsec.sys
  2034. [2008/04/13 12:19:42 | 000,075,264 | ---- | M] (Microsoft Corporation) MD5=23C74D75E36E7158768DD63D92789A91 -- C:\WINDOWS\system32\drivers\ipsec.sys
  2035. [2004/08/04 12:00:00 | 000,074,752 | ---- | M] (Microsoft Corporation) MD5=64537AA5C003A6AFEEE1DF819062D0D1 -- C:\old_c_drive\Local Disk (E)\WINDOWS\SYSTEM32\dllcache\ipsec.sys
  2036. [2004/08/04 12:00:00 | 000,074,752 | ---- | M] (Microsoft Corporation) MD5=64537AA5C003A6AFEEE1DF819062D0D1 -- C:\old_c_drive\Local Disk (E)\WINDOWS\SYSTEM32\DRIVERS\ipsec.sys
  2037. [2004/08/04 05:00:00 | 000,074,752 | ---- | M] (Microsoft Corporation) MD5=64537AA5C003A6AFEEE1DF819062D0D1 -- C:\WINDOWS\$NtServicePackUninstall$\ipsec.sys
  2038.  
  2039. [color=#A23BEC]< MD5 for: LSASS.EXE >[/color]
  2040. [2004/08/04 05:00:00 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=84885F9B82F4D55C6146EBF6065D75D2 -- C:\old_c_drive\Local Disk (E)\WINDOWS\SYSTEM32\dllcache\lsass.exe
  2041. [2004/08/04 12:00:00 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=84885F9B82F4D55C6146EBF6065D75D2 -- C:\old_c_drive\Local Disk (E)\WINDOWS\SYSTEM32\lsass.exe
  2042. [2004/08/04 05:00:00 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=84885F9B82F4D55C6146EBF6065D75D2 -- C:\WINDOWS\$NtServicePackUninstall$\lsass.exe
  2043. [2008/04/13 17:12:24 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=BF2466B3E18E970D8A976FB95FC1CA85 -- C:\WINDOWS\ServicePackFiles\i386\lsass.exe
  2044. [2008/04/13 17:12:24 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=BF2466B3E18E970D8A976FB95FC1CA85 -- C:\WINDOWS\system32\lsass.exe
  2045.  
  2046. [color=#A23BEC]< MD5 for: NETBT.SYS >[/color]
  2047. [2004/08/04 12:00:00 | 000,162,816 | ---- | M] (Microsoft Corporation) MD5=0C80E410CD2F47134407EE7DD19CC86B -- C:\old_c_drive\Local Disk (E)\WINDOWS\SYSTEM32\dllcache\netbt.sys
  2048. [2004/08/04 12:00:00 | 000,162,816 | ---- | M] (Microsoft Corporation) MD5=0C80E410CD2F47134407EE7DD19CC86B -- C:\old_c_drive\Local Disk (E)\WINDOWS\SYSTEM32\DRIVERS\netbt.sys
  2049. [2004/08/04 05:00:00 | 000,162,816 | ---- | M] (Microsoft Corporation) MD5=0C80E410CD2F47134407EE7DD19CC86B -- C:\WINDOWS\$NtServicePackUninstall$\netbt.sys
  2050. [2008/04/13 12:21:00 | 000,162,816 | ---- | M] (Microsoft Corporation) MD5=74B2B2F5BEA5E9A3DC021D685551BD3D -- C:\WINDOWS\ServicePackFiles\i386\netbt.sys
  2051. [2008/04/13 12:21:00 | 000,162,816 | ---- | M] (Microsoft Corporation) MD5=74B2B2F5BEA5E9A3DC021D685551BD3D -- C:\WINDOWS\system32\drivers\netbt.sys
  2052.  
  2053. [color=#A23BEC]< MD5 for: NETLOGON.DLL >[/color]
  2054. [2008/04/13 17:12:01 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=1B7F071C51B77C272875C3A23E1E4550 -- C:\WINDOWS\ServicePackFiles\i386\netlogon.dll
  2055. [2008/04/13 17:12:01 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=1B7F071C51B77C272875C3A23E1E4550 -- C:\WINDOWS\system32\netlogon.dll
  2056. [2004/08/04 05:00:00 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=96353FCECBA774BB8DA74A1C6507015A -- C:\old_c_drive\Local Disk (E)\WINDOWS\SYSTEM32\dllcache\netlogon.dll
  2057. [2004/08/04 12:00:00 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=96353FCECBA774BB8DA74A1C6507015A -- C:\old_c_drive\Local Disk (E)\WINDOWS\SYSTEM32\netlogon.dll
  2058. [2004/08/04 05:00:00 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=96353FCECBA774BB8DA74A1C6507015A -- C:\WINDOWS\$NtServicePackUninstall$\netlogon.dll
  2059.  
  2060. [color=#A23BEC]< MD5 for: REDBOOK.SYS >[/color]
  2061. [2004/08/04 12:00:00 | 018,738,937 | ---- | M] () .cab file -- C:\old_c_drive\Local Disk (E)\WINDOWS\Driver Cache\i386\sp2.cab:redbook.sys
  2062. [2004/08/04 05:00:00 | 018,738,937 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:redbook.sys
  2063. [2008/09/19 07:29:54 | 023,852,652 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:redbook.sys
  2064. [2008/09/19 07:29:54 | 023,852,652 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:redbook.sys
  2065. [2004/08/03 22:59:38 | 000,057,472 | ---- | M] (Microsoft Corporation) MD5=B31B4588E4086D8D84ADBF9845C2402B -- C:\old_c_drive\Local Disk (E)\WINDOWS\SYSTEM32\DRIVERS\redbook.sys
  2066. [2004/08/03 15:59:38 | 000,057,472 | ---- | M] (Microsoft Corporation) MD5=B31B4588E4086D8D84ADBF9845C2402B -- C:\WINDOWS\$NtServicePackUninstall$\redbook.sys
  2067. [2008/04/13 11:40:27 | 000,057,600 | ---- | M] (Microsoft Corporation) MD5=F828DD7E1419B6653894A8F97A0094C5 -- C:\WINDOWS\ServicePackFiles\i386\redbook.sys
  2068. [2008/04/13 11:40:27 | 000,057,600 | ---- | M] (Microsoft Corporation) MD5=F828DD7E1419B6653894A8F97A0094C5 -- C:\WINDOWS\system32\drivers\redbook.sys
  2069.  
  2070. [color=#A23BEC]< MD5 for: SCECLI.DLL >[/color]
  2071. [2004/08/04 05:00:00 | 000,180,224 | ---- | M] (Microsoft Corporation) MD5=0F78E27F563F2AAF74B91A49E2ABF19A -- C:\old_c_drive\Local Disk (E)\WINDOWS\SYSTEM32\dllcache\scecli.dll
  2072. [2004/08/04 12:00:00 | 000,180,224 | ---- | M] (Microsoft Corporation) MD5=0F78E27F563F2AAF74B91A49E2ABF19A -- C:\old_c_drive\Local Disk (E)\WINDOWS\SYSTEM32\scecli.dll
  2073. [2004/08/04 05:00:00 | 000,180,224 | ---- | M] (Microsoft Corporation) MD5=0F78E27F563F2AAF74B91A49E2ABF19A -- C:\WINDOWS\$NtServicePackUninstall$\scecli.dll
  2074. [2008/04/13 17:12:05 | 000,181,248 | ---- | M] (Microsoft Corporation) MD5=A86BB5E61BF3E39B62AB4C7E7085A084 -- C:\WINDOWS\ServicePackFiles\i386\scecli.dll
  2075. [2008/04/13 17:12:05 | 000,181,248 | ---- | M] (Microsoft Corporation) MD5=A86BB5E61BF3E39B62AB4C7E7085A084 -- C:\WINDOWS\system32\scecli.dll
  2076.  
  2077. [color=#A23BEC]< MD5 for: SERIAL.SYS >[/color]
  2078. [2004/08/04 12:00:00 | 018,738,937 | ---- | M] () .cab file -- C:\old_c_drive\Local Disk (E)\WINDOWS\Driver Cache\i386\sp2.cab:serial.sys
  2079. [2004/08/04 05:00:00 | 018,738,937 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:serial.sys
  2080. [2008/09/19 07:29:54 | 023,852,652 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:serial.sys
  2081. [2008/09/19 07:29:54 | 023,852,652 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:serial.sys
  2082. [2008/04/13 12:15:45 | 000,064,512 | ---- | M] (Microsoft Corporation) MD5=CCA207A8896D4C6A0C9CE29A4AE411A7 -- C:\WINDOWS\ServicePackFiles\i386\serial.sys
  2083. [2008/04/13 12:15:45 | 000,064,512 | ---- | M] (Microsoft Corporation) MD5=CCA207A8896D4C6A0C9CE29A4AE411A7 -- C:\WINDOWS\system32\drivers\serial.sys
  2084. [2004/08/04 12:00:00 | 000,064,896 | ---- | M] (Microsoft Corporation) MD5=CD9404D115A00D249F70A371B46D5A26 -- C:\old_c_drive\Local Disk (E)\WINDOWS\SYSTEM32\DRIVERS\serial.sys
  2085. [2004/08/04 05:00:00 | 000,064,896 | ---- | M] (Microsoft Corporation) MD5=CD9404D115A00D249F70A371B46D5A26 -- C:\WINDOWS\$NtServicePackUninstall$\serial.sys
  2086.  
  2087. [color=#A23BEC]< MD5 for: SERVICES.EXE >[/color]
  2088. [2009/02/06 04:06:24 | 000,110,592 | ---- | M] (Microsoft Corporation) MD5=020CEAAEDC8EB655B6506B8C70D53BB6 -- C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\services.exe
  2089. [2008/04/13 17:12:34 | 000,108,544 | ---- | M] (Microsoft Corporation) MD5=0E776ED5F7CC9F94299E70461B7B8185 -- C:\WINDOWS\$NtUninstallKB956572$\services.exe
  2090. [2008/04/13 17:12:34 | 000,108,544 | ---- | M] (Microsoft Corporation) MD5=0E776ED5F7CC9F94299E70461B7B8185 -- C:\WINDOWS\ServicePackFiles\i386\services.exe
  2091. [2009/02/06 04:11:05 | 000,110,592 | ---- | M] (Microsoft Corporation) MD5=65DF52F5B8B6E9BBD183505225C37315 -- C:\WINDOWS\system32\dllcache\services.exe
  2092. [2009/02/06 04:11:05 | 000,110,592 | ---- | M] (Microsoft Corporation) MD5=65DF52F5B8B6E9BBD183505225C37315 -- C:\WINDOWS\system32\services.exe
  2093. [2004/08/04 05:00:00 | 000,108,032 | ---- | M] (Microsoft Corporation) MD5=C6CE6EEC82F187615D1002BB3BB50ED4 -- C:\old_c_drive\Local Disk (E)\WINDOWS\SYSTEM32\dllcache\services.exe
  2094. [2004/08/04 12:00:00 | 000,108,032 | ---- | M] (Microsoft Corporation) MD5=C6CE6EEC82F187615D1002BB3BB50ED4 -- C:\old_c_drive\Local Disk (E)\WINDOWS\SYSTEM32\services.exe
  2095. [2004/08/04 05:00:00 | 000,108,032 | ---- | M] (Microsoft Corporation) MD5=C6CE6EEC82F187615D1002BB3BB50ED4 -- C:\WINDOWS\$NtServicePackUninstall$\services.exe
  2096.  
  2097. [color=#A23BEC]< MD5 for: SMSS.EXE >[/color]
  2098. [2008/04/13 17:12:36 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=5F816C1F539266D2D4C78694239DA0B5 -- C:\WINDOWS\ServicePackFiles\i386\smss.exe
  2099. [2008/04/13 17:12:36 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=5F816C1F539266D2D4C78694239DA0B5 -- C:\WINDOWS\system32\smss.exe
  2100. [2004/08/04 05:00:00 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=BD7FB0957C716F1A60333AEE04DE2178 -- C:\old_c_drive\Local Disk (E)\WINDOWS\SYSTEM32\dllcache\smss.exe
  2101. [2004/08/04 12:00:00 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=BD7FB0957C716F1A60333AEE04DE2178 -- C:\old_c_drive\Local Disk (E)\WINDOWS\SYSTEM32\smss.exe
  2102. [2004/08/04 05:00:00 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=BD7FB0957C716F1A60333AEE04DE2178 -- C:\WINDOWS\$NtServicePackUninstall$\smss.exe
  2103.  
  2104. [color=#A23BEC]< MD5 for: SVCHOST.EXE >[/color]
  2105. [2012/12/14 17:49:28 | 000,216,424 | ---- | M] () MD5=22101A85B3CA2FE2BE05FE9A61A7A83D -- C:\Program Files\Malwarebytes' Anti-Malware\Chameleon\svchost.exe
  2106. [2008/04/13 17:12:36 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=27C6D03BCDB8CFEB96B716F3D8BE3E18 -- C:\WINDOWS\ServicePackFiles\i386\svchost.exe
  2107. [2008/04/13 17:12:36 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=27C6D03BCDB8CFEB96B716F3D8BE3E18 -- C:\WINDOWS\system32\svchost.exe
  2108. [2004/08/04 05:00:00 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=8F078AE4ED187AAABC0A305146DE6716 -- C:\old_c_drive\Local Disk (E)\WINDOWS\SYSTEM32\dllcache\svchost.exe
  2109. [2004/08/04 12:00:00 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=8F078AE4ED187AAABC0A305146DE6716 -- C:\old_c_drive\Local Disk (E)\WINDOWS\SYSTEM32\svchost.exe
  2110. [2004/08/04 05:00:00 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=8F078AE4ED187AAABC0A305146DE6716 -- C:\WINDOWS\$NtServicePackUninstall$\svchost.exe
  2111.  
  2112. [color=#A23BEC]< MD5 for: TCPIP.SYS >[/color]
  2113. [2006/04/20 04:51:50 | 000,359,808 | ---- | M] (Microsoft Corporation) MD5=1DBF125862891817F374F407626967F4 -- C:\old_c_drive\Local Disk (E)\WINDOWS\SYSTEM32\dllcache\tcpip.sys
  2114. [2006/04/20 04:51:50 | 000,359,808 | ---- | M] (Microsoft Corporation) MD5=1DBF125862891817F374F407626967F4 -- C:\old_c_drive\Local Disk (E)\WINDOWS\SYSTEM32\DRIVERS\tcpip.sys
  2115. [2006/04/20 04:51:50 | 000,359,808 | ---- | M] (Microsoft Corporation) MD5=1DBF125862891817F374F407626967F4 -- C:\WINDOWS\$NtUninstallKB941644$\tcpip.sys
  2116. [2008/06/20 03:45:13 | 000,360,320 | ---- | M] (Microsoft Corporation) MD5=2A5554FC5B1E04E131230E3CE035C3F9 -- C:\WINDOWS\$NtServicePackUninstall$\tcpip.sys
  2117. [2006/01/13 09:07:08 | 000,360,448 | ---- | M] (Microsoft Corporation) MD5=5562CC0A47B2AEF06D3417B733F3C195 -- C:\old_c_drive\Local Disk (E)\WINDOWS\$hf_mig$\KB913446\SP2QFE\tcpip.sys
  2118. [2006/01/12 18:28:14 | 000,359,808 | ---- | M] (Microsoft Corporation) MD5=583E063FDC888CA30D05C2724B0D7EF4 -- C:\old_c_drive\Local Disk (E)\WINDOWS\$NtUninstallKB917953$\tcpip.sys
  2119. [2005/05/25 12:07:12 | 000,359,936 | ---- | M] (Microsoft Corporation) MD5=63FDFEA54EB53DE2D863EE454937CE1E -- C:\old_c_drive\Local Disk (E)\WINDOWS\$hf_mig$\KB893066\SP2QFE\tcpip.sys
  2120. [2007/10/30 09:53:32 | 000,360,832 | ---- | M] (Microsoft Corporation) MD5=64798ECFA43D78C7178375FCDD16D8C8 -- C:\WINDOWS\$hf_mig$\KB941644\SP2QFE\tcpip.sys
  2121. [2008/06/20 03:44:42 | 000,360,960 | ---- | M] (Microsoft Corporation) MD5=744E57C99232201AE98C49168B918F48 -- C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\tcpip.sys
  2122. [2005/05/25 12:04:02 | 000,359,808 | ---- | M] (Microsoft Corporation) MD5=88763A98A4C26C409741B4AA162720C9 -- C:\old_c_drive\Local Disk (E)\WINDOWS\$NtUninstallKB913446$\tcpip.sys
  2123. [2007/10/30 10:20:55 | 000,360,064 | ---- | M] (Microsoft Corporation) MD5=90CAFF4B094573449A0872A0F919B178 -- C:\WINDOWS\$NtUninstallKB951748_0$\tcpip.sys
  2124. [2008/04/13 12:20:16 | 000,361,344 | ---- | M] (Microsoft Corporation) MD5=93EA8D04EC73A85DB02EB8805988F733 -- C:\WINDOWS\$NtUninstallKB951748$\tcpip.sys
  2125. [2008/04/13 12:20:16 | 000,361,344 | ---- | M] (Microsoft Corporation) MD5=93EA8D04EC73A85DB02EB8805988F733 -- C:\WINDOWS\ServicePackFiles\i386\tcpip.sys
  2126. [2008/06/20 04:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\tcpip.sys
  2127. [2008/06/20 04:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\system32\dllcache\tcpip.sys
  2128. [2008/06/20 04:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\system32\drivers\tcpip.sys
  2129. [2004/08/04 12:00:00 | 000,359,040 | ---- | M] (Microsoft Corporation) MD5=9F4B36614A0FC234525BA224957DE55C -- C:\old_c_drive\Local Disk (E)\WINDOWS\$NtUninstallKB893066$\tcpip.sys
  2130. [2004/08/04 05:00:00 | 000,359,040 | ---- | M] (Microsoft Corporation) MD5=9F4B36614A0FC234525BA224957DE55C -- C:\WINDOWS\$NtUninstallKB917953$\tcpip.sys
  2131. [2008/06/20 04:59:02 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=AD978A1B783B5719720CFF204B666C8E -- C:\WINDOWS\$hf_mig$\KB2509553\SP3QFE\tcpip.sys
  2132. [2008/06/20 04:59:02 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=AD978A1B783B5719720CFF204B666C8E -- C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\tcpip.sys
  2133. [2006/04/20 05:18:36 | 000,360,576 | ---- | M] (Microsoft Corporation) MD5=B2220C618B42A2212A59D91EBD6FC4B4 -- C:\old_c_drive\Local Disk (E)\WINDOWS\$hf_mig$\KB917953\SP2QFE\tcpip.sys
  2134. [2006/04/20 05:18:35 | 000,360,576 | ---- | M] (Microsoft Corporation) MD5=B2220C618B42A2212A59D91EBD6FC4B4 -- C:\WINDOWS\$hf_mig$\KB917953\SP2QFE\tcpip.sys
  2135.  
  2136. [color=#A23BEC]< MD5 for: USERINIT.EXE >[/color]
  2137. [2004/08/04 12:00:00 | 000,024,576 | ---- | M] (Microsoft Corporation) MD5=39B1FFB03C2296323832ACBAE50D2AFF -- C:\old_c_drive\Local Disk (E)\WINDOWS\SYSTEM32\dllcache\userinit.exe
  2138. [2004/08/04 12:00:00 | 000,024,576 | ---- | M] (Microsoft Corporation) MD5=39B1FFB03C2296323832ACBAE50D2AFF -- C:\old_c_drive\Local Disk (E)\WINDOWS\SYSTEM32\userinit.exe
  2139. [2004/08/04 05:00:00 | 000,024,576 | ---- | M] (Microsoft Corporation) MD5=39B1FFB03C2296323832ACBAE50D2AFF -- C:\WINDOWS\$NtServicePackUninstall$\userinit.exe
  2140. [2008/04/13 17:12:38 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=A93AEE1928A9D7CE3E16D24EC7380F89 -- C:\WINDOWS\ServicePackFiles\i386\userinit.exe
  2141. [2008/04/13 17:12:38 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=A93AEE1928A9D7CE3E16D24EC7380F89 -- C:\WINDOWS\system32\userinit.exe
  2142.  
  2143. [color=#A23BEC]< MD5 for: VOLSNAP.SYS >[/color]
  2144. [2008/04/13 11:41:01 | 000,052,352 | ---- | M] (Microsoft Corporation) MD5=4C8FCB5CC53AAB716D810740FE59D025 -- C:\WINDOWS\ServicePackFiles\i386\volsnap.sys
  2145. [2008/04/13 11:41:01 | 000,052,352 | ---- | M] (Microsoft Corporation) MD5=4C8FCB5CC53AAB716D810740FE59D025 -- C:\WINDOWS\system32\drivers\volsnap.sys
  2146. [2004/08/04 12:00:00 | 000,052,352 | ---- | M] (Microsoft Corporation) MD5=EE4660083DEBA849FF6C485D944B379B -- C:\old_c_drive\Local Disk (E)\WINDOWS\SYSTEM32\dllcache\volsnap.sys
  2147. [2004/08/04 12:00:00 | 000,052,352 | ---- | M] (Microsoft Corporation) MD5=EE4660083DEBA849FF6C485D944B379B -- C:\old_c_drive\Local Disk (E)\WINDOWS\SYSTEM32\DRIVERS\volsnap.sys
  2148. [2004/08/04 05:00:00 | 000,052,352 | ---- | M] (Microsoft Corporation) MD5=EE4660083DEBA849FF6C485D944B379B -- C:\WINDOWS\$NtServicePackUninstall$\volsnap.sys
  2149.  
  2150. [color=#A23BEC]< MD5 for: WINLOGON.EXE >[/color]
  2151. [2004/08/04 05:00:00 | 000,502,272 | ---- | M] (Microsoft Corporation) MD5=01C3346C241652F43AED8E2149881BFE -- C:\old_c_drive\Local Disk (E)\WINDOWS\SYSTEM32\dllcache\winlogon.exe
  2152. [2004/08/04 12:00:00 | 000,502,272 | ---- | M] (Microsoft Corporation) MD5=01C3346C241652F43AED8E2149881BFE -- C:\old_c_drive\Local Disk (E)\WINDOWS\SYSTEM32\winlogon.exe
  2153. [2004/08/04 05:00:00 | 000,502,272 | ---- | M] (Microsoft Corporation) MD5=01C3346C241652F43AED8E2149881BFE -- C:\WINDOWS\$NtServicePackUninstall$\winlogon.exe
  2154. [2012/12/14 17:49:28 | 000,216,424 | ---- | M] () MD5=22101A85B3CA2FE2BE05FE9A61A7A83D -- C:\Program Files\Malwarebytes' Anti-Malware\Chameleon\winlogon.exe
  2155. [2008/04/13 17:12:39 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=ED0EF0A136DEC83DF69F04118870003E -- C:\WINDOWS\ServicePackFiles\i386\winlogon.exe
  2156. [2008/04/13 17:12:39 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=ED0EF0A136DEC83DF69F04118870003E -- C:\WINDOWS\system32\winlogon.exe
  2157.  
  2158. [color=#E56717]========== Hard Links - Junction Points - Mount Points - Symbolic Links ==========[/color]
  2159. [C:\WINDOWS\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a] -> C:\WINDOWS\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790 -> Junction
  2160. [C:\WINDOWS\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a] -> C:\WINDOWS\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e -> Junction
  2161.  
  2162. [color=#E56717]========== Alternate Data Streams ==========[/color]
  2163.  
  2164. @Alternate Data Stream - 113 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:7715B65F
  2165. @Alternate Data Stream - 111 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:6B803FAA
  2166.  
  2167. < End of report >
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!