What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

[Resolved] clsid

11 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #1
I have a lenovo R500 thinkpad laptop. I keep getting this error, and I can not find a resolution anywhere. "An internal error occured (object:clsid-not-found(CID_CSS::Interface)) Also the boot is taking 4 mintues on and off. I ran the combifix and malware, disabled spyware.
Post #2
Hi and Welcome,

NOTE:
  • Malware removal is NOT instantaneous.
  • Most infections require more than one round to properly eradicate.
  • Absence of symptoms does not always mean the job is complete.
  • You can be certain that I will advise you when the computer is clean.
  • Kindly follow my instructions in the order posted.
  • Please resist the urge to run further scans or fix items on your own without my direction.



Please do the following:

STEP #1

Please download DDS and save it to your desktop.
  • Disable any script blocking protection
  • Double click dds.pif to run the tool.
  • When done, two DDS.txt's will open.
  • Save both reports to your desktop.
—————————————————
Please include the contents of the following in your next reply:

DDS.txt
Attach.txt.



STEP #2


Download the GMER Rootkit Scanner. Unzip it to your Desktop.
Before scanning, make sure all other running programs are closed and no other actions like a scheduled antivirus scan will occur while the scan is being performed. Do not use your computer for anything else during the scan.
Double-click gmer.exe. The program will begin to run.
**Caution**
These types of scans can produce false positives. Do NOT take any action on any "<— ROOKIT" entries unless advised!
If possible rootkit activity is found, you will be asked if you would like to perform a full scan.
  • Click NO
  • In the right panel, you will see a bunch of boxes that have been checked … leave everything checked and ensure the Show all box is un-checked.
  • Now click the Scan button.
    Once the scan is complete, you may receive another notice about rootkit activity.
  • Click OK.
  • GMER will produce a log. Click on the [Save..] button, and in the File name area, type in "GMER.txt"
  • Save it where you can easily find it, such as your desktop.

Post the contents of GMER.txt in your next reply.


Please describe how your computer is behaving at the moment, listing any symptoms and problems that you are experiencing.
Post #3
I have experienced more and more that with either wireless or LAN connection, the browsers, either safari or IE, don't pick up signal and go off line. The icons say strong signal yet not able to get on line.
I have attached the two documents you asked for and below is the gmer- had to break it up too long.

GMER 1.0.15.14972 - http://www.gmer.net
Rootkit scan 2009-06-07 19:37:30
Windows 5.1.2600 Service Pack 3


—- Devices - GMER 1.0.15 —-

AttachedDevice \FileSystem\Ntfs \Ntfs tvtumon.sys (Windows Update Monitor Driver/Lenovo)
AttachedDevice \Driver\Tcpip \Device\Ip avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
AttachedDevice \Driver\Tcpip \Device\Tcp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
AttachedDevice \Driver\Tcpip \Device\Udp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
AttachedDevice \Driver\Tcpip \Device\RawIp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
AttachedDevice \FileSystem\Fastfat \Fat tvtumon.sys (Windows Update Monitor Driver/Lenovo)
AttachedDevice \FileSystem\Fastfat \Fat fltmgr.sys (Microsoft Filesystem Filter Manager/Microsoft Corporation)

Device \FileSystem\Cdfs \Cdfs DLAIFS_M.SYS (Drive Letter Access Component/Roxio)

—- Files - GMER 1.0.15 —-

File C:\RRbackups\C 0 bytes
File C:\RRbackups\C\0 0 bytes
File C:\RRbackups\C\0\Data0 50003968 bytes
File C:\RRbackups\C\0\Data1 50003968 bytes
File C:\RRbackups\C\0\Data10 50003968 bytes
File C:\RRbackups\C\0\Data100 50003968 bytes
File C:\RRbackups\C\0\Data101 50003968 bytes
File C:\RRbackups\C\0\Data102 50003968 bytes
File C:\RRbackups\C\0\Data103 50003968 bytes
File C:\RRbackups\C\0\Data104 50003968 bytes
File C:\RRbackups\C\0\Data105 50003968 bytes
File C:\RRbackups\C\0\Data106 50003968 bytes
File C:\RRbackups\C\0\Data107 50003968 bytes
File C:\RRbackups\C\0\Data108 50003968 bytes
File C:\RRbackups\C\0\Data109 50003968 bytes
File C:\RRbackups\C\0\Data11 50003968 bytes
File C:\RRbackups\C\0\Data110 50003968 bytes
File C:\RRbackups\C\0\Data111 50003968 bytes
File C:\RRbackups\C\0\Data112 50003968 bytes
File C:\RRbackups\C\0\Data113 50003968 bytes
File C:\RRbackups\C\0\Data114 50003968 bytes
File C:\RRbackups\C\0\Data115 50003968 bytes
File C:\RRbackups\C\0\Data28 50003968 bytes
File C:\RRbackups\C\0\Data29 50003968 bytes
File C:\RRbackups\C\0\Data3 50003968 bytes
File C:\RRbackups\C\0\Data30 50003968 bytes
File C:\RRbackups\C\0\Data31 50003968 bytes
File C:\RRbackups\C\0\Data32 50003968 bytes
File C:\RRbackups\C\0\Data33 50003968 bytes
File C:\RRbackups\C\0\Data34 50003968 bytes
File C:\RRbackups\C\0\Data35 50003968 bytes
File C:\RRbackups\C\0\Data36 50003968 bytes
File C:\RRbackups\C\0\Data37 50003968 bytes
File C:\RRbackups\C\0\Data38 50003968 bytes
File C:\RRbackups\C\0\Data39 50003968 bytes
File C:\RRbackups\C\0\Data4 50003968 bytes
File C:\RRbackups\C\0\Data40 50003968 bytes
File C:\RRbackups\C\0\Data41 50003968 bytes
File C:\RRbackups\C\0\Data42 50003968 bytes
File C:\RRbackups\C\0\Data43 50003968 bytes
File C:\RRbackups\C\0\Data44 50003968 bytes
File C:\RRbackups\C\0\Data45 50003968 bytes
File C:\RRbackups\C\0\Data47 50003968 bytes
File C:\RRbackups\C\0\Data48 50003968 bytes
File C:\RRbackups\C\0\Data49 50003968 bytes
File C:\RRbackups\C\0\Data5 50003968 bytes
File C:\RRbackups\C\0\Data50 50003968 bytes
File C:\RRbackups\C\0\Data51 50003968 bytes
File C:\RRbackups\C\0\Data52 50003968 bytes
File C:\RRbackups\C\0\Data53 50003968 bytes
File C:\RRbackups\C\0\Data54 50003968 bytes
File C:\RRbackups\C\0\Data55 50003968 bytes
File C:\RRbackups\C\0\Data56 50003968 bytes
File C:\RRbackups\C\0\Data57 50003968 bytes
File C:\RRbackups\C\0\Data58 50003968 bytes
File C:\RRbackups\C\0\Data59 50003968 bytes
File C:\RRbackups\C\0\Data6 50003968 bytes
File C:\RRbackups\C\0\Data60 50003968 bytes
File C:\RRbackups\C\0\Data61 50003968 bytes
File C:\RRbackups\C\0\Data62 50003968 bytes
File C:\RRbackups\C\0\Data63 50003968 bytes
File C:\RRbackups\C\0\Data64 50003968 bytes
File C:\RRbackups\C\0\Data66 50003968 bytes
File C:\RRbackups\C\0\Data67 50003968 bytes
File C:\RRbackups\C\0\Data68 50003968 bytes
File C:\RRbackups\C\0\Data69 50003968 bytes
File C:\RRbackups\C\0\Data7 50003968 bytes
File C:\RRbackups\C\0\Data70 50003968 bytes
File C:\RRbackups\C\0\Data71 50003968 bytes
File C:\RRbackups\C\0\Data72 50003968 bytes
File C:\RRbackups\C\0\Data73 50003968 bytes
File C:\RRbackups\C\0\Data74 50003968 bytes
File C:\RRbackups\C\0\Data75 50003968 bytes
File C:\RRbackups\C\0\Data76 50003968 bytes
File C:\RRbackups\C\0\Data77 50003968 bytes
File C:\RRbackups\C\0\Data78 50003968 bytes
File C:\RRbackups\C\0\Data79 50003968 bytes
File C:\RRbackups\C\0\Data8 50003968 bytes
File C:\RRbackups\C\0\Data80 50003968 bytes
File C:\RRbackups\C\0\Data81 50003968 bytes
File C:\RRbackups\C\0\Data82 50003968 bytes
File C:\RRbackups\C\0\Data83 50003968 bytes
File C:\RRbackups\C\0\Data117 50003968 bytes
File C:\RRbackups\C\0\Data118 50003968 bytes
File C:\RRbackups\C\0\Data119 50003968 bytes
File C:\RRbackups\C\0\Data12 50003968 bytes
File C:\RRbackups\C\0\Data120 50003968 bytes
File C:\RRbackups\C\0\Data121 50003968 bytes
File C:\RRbackups\C\0\Data122 50003968 bytes
File C:\RRbackups\C\0\Data123 50003968 bytes
File C:\RRbackups\C\0\Data124 50003968 bytes
File C:\RRbackups\C\0\Data125 50003968 bytes
File C:\RRbackups\C\0\Data126 50003968 bytes
File C:\RRbackups\C\0\Data127 50003968 bytes
File C:\RRbackups\C\0\Data128 50003968 bytes
File C:\RRbackups\C\0\Data129 50003968 bytes
File C:\RRbackups\C\0\Data13 50003968 bytes
File C:\RRbackups\C\0\Data130 50003968 bytes
File C:\RRbackups\C\0\Data131 50003968 bytes
File C:\RRbackups\C\0\Data132 50003968 bytes
File C:\RRbackups\C\0\Data133 50003968 bytes
File C:\RRbackups\C\0\Data134 50003968 bytes
File C:\RRbackups\C\0\Data136 50003968 bytes
File C:\RRbackups\C\0\Data137 50003968 bytes
File C:\RRbackups\C\0\Data138 50003968 bytes
File C:\RRbackups\C\0\Data139 50003968 bytes
File C:\RRbackups\C\0\Data14 50003968 bytes
File C:\RRbackups\C\0\Data140 50003968 bytes
File C:\RRbackups\C\0\Data141 50003968 bytes
File C:\RRbackups\C\0\Data142 50003968 bytes
File C:\RRbackups\C\0\Data143 50003968 bytes
File C:\RRbackups\C\0\Data144 50003968 bytes
File C:\RRbackups\C\0\Data145 50003968 bytes
File C:\RRbackups\C\0\Data146 50003968 bytes
File C:\RRbackups\C\0\Data147 38912111 bytes
File C:\RRbackups\C\0\Data15 50003968 bytes
File C:\RRbackups\C\0\Data16 50003968 bytes
File C:\RRbackups\C\0\Data17 50003968 bytes
File C:\RRbackups\C\0\Data18 50003968 bytes
File C:\RRbackups\C\0\Data19 50003968 bytes
File C:\RRbackups\C\0\Data2 50003968 bytes
File C:\RRbackups\C\0\Data20 50003968 bytes
File C:\RRbackups\C\0\Data21 50003968 bytes
File C:\RRbackups\C\0\Data22 50003968 bytes
File C:\RRbackups\C\0\Data23 50003968 bytes
File C:\RRbackups\C\0\Data24 50003968 bytes
File C:\RRbackups\C\0\Data25 50003968 bytes
File C:\RRbackups\C\0\Data26 50003968 bytes
File C:\RRbackups\C\0\Data85 50003968 bytes
File C:\RRbackups\C\0\Data86 50003968 bytes
File C:\RRbackups\C\0\Data87 50003968 bytes
File C:\RRbackups\C\0\Data88 50003968 bytes
File C:\RRbackups\C\0\Data89 50003968 bytes
File C:\RRbackups\C\0\Data9 50003968 bytes
File C:\RRbackups\C\0\Data90 50003968 bytes
File C:\RRbackups\C\0\Data91 50003968 bytes
File C:\RRbackups\C\0\Data92 50003968 bytes
File C:\RRbackups\C\0\Data93 50003968 bytes
File C:\RRbackups\C\0\Data94 50003968 bytes
File C:\RRbackups\C\0\Data95 50003968 bytes
File C:\RRbackups\C\0\Data96 50003968 bytes
File C:\RRbackups\C\0\Data97 50003968 bytes
File C:\RRbackups\C\0\Data98 50003968 bytes
File C:\RRbackups\C\0\Data99 50003968 bytes
File C:\RRbackups\C\0\dats 0 bytes
File C:\RRbackups\C\0\EFSFile 0 bytes
File C:\RRbackups\C\0\HashFile 436920 bytes
File C:\RRbackups\C\0\Info 756 bytes
File C:\RRbackups\C\0\TOCFile 44420200 bytes
File C:\RRbackups\C\0\~EFSFile 0 bytes
File C:\RRbackups\C\0\~HashFile 436920 bytes
File C:\RRbackups\C\0\~TOCFile 44420200 bytes
File C:\RRbackups\C\0\Data116 50003968 bytes
File C:\RRbackups\C\0\Data135 50003968 bytes
File C:\RRbackups\C\0\Data27 50003968 bytes
File C:\RRbackups\C\0\Data46 50003968 bytes
File C:\RRbackups\C\0\Data65 50003968 bytes
File C:\RRbackups\C\0\Data84 50003968 bytes
File C:\RRbackups\C\1 0 bytes
File C:\RRbackups\C\1\Data0 50003968 bytes
File C:\RRbackups\C\1\Data1 50003968 bytes
File C:\RRbackups\C\1\Data10 50003968 bytes
File C:\RRbackups\C\1\Data100 50003968 bytes
File C:\RRbackups\C\1\Data101 50003968 bytes
File C:\RRbackups\C\1\Data102 50003968 bytes
File C:\RRbackups\C\1\Data103 50003968 bytes
File C:\RRbackups\C\1\Data104 50003968 bytes
File C:\RRbackups\C\1\Data105 50003968 bytes
File C:\RRbackups\C\1\Data106 50003968 bytes
File C:\RRbackups\C\1\Data107 50003968 bytes
File C:\RRbackups\C\1\Data108 50003968 bytes
File C:\RRbackups\C\1\Data109 50003968 bytes
File C:\RRbackups\C\1\Data11 50003968 bytes
File C:\RRbackups\C\1\Data110 50003968 bytes
File C:\RRbackups\C\1\Data111 50003968 bytes
File C:\RRbackups\C\1\Data112 50003968 bytes
File C:\RRbackups\C\1\Data113 50003968 bytes
File C:\RRbackups\C\1\Data114 50003968 bytes
File C:\RRbackups\C\1\Data115 50003968 bytes
File C:\RRbackups\C\1\Data270 50003968 bytes
File C:\RRbackups\C\1\Data271 50003968 bytes
File C:\RRbackups\C\1\Data272 50003968 bytes
File C:\RRbackups\C\1\Data273 50003968 bytes
File C:\RRbackups\C\1\Data274 50003968 bytes
File C:\RRbackups\C\1\Data275 50003968 bytes
File C:\RRbackups\C\1\Data276 50003968 bytes
File C:\RRbackups\C\1\Data277 50003968 bytes
File C:\RRbackups\C\1\Data278 50003968 bytes
File C:\RRbackups\C\1\Data279 50003968 bytes
File C:\RRbackups\C\1\Data28 50003968 bytes
File C:\RRbackups\C\1\Data280 50003968 bytes
File C:\RRbackups\C\1\Data281 50003968 bytes
File C:\RRbackups\C\1\Data282 50003968 bytes
File C:\RRbackups\C\1\Data283 50003968 bytes
File C:\RRbackups\C\1\Data284 50003968 bytes
File C:\RRbackups\C\1\Data285 50003968 bytes
File C:\RRbackups\C\1\Data286 50003968 bytes
File C:\RRbackups\C\1\Data287 50003968 bytes
File C:\RRbackups\C\1\Data288 50003968 bytes
File C:\RRbackups\C\1\Data47 50003968 bytes
File C:\RRbackups\C\1\Data48 50003968 bytes
File C:\RRbackups\C\1\Data49 50003968 bytes
File C:\RRbackups\C\1\Data5 50003968 bytes
File C:\RRbackups\C\1\Data50 50003968 bytes
File C:\RRbackups\C\1\Data51 50003968 bytes
File C:\RRbackups\C\1\Data52 50003968 bytes
File C:\RRbackups\C\1\Data53 50003968 bytes
File C:\RRbackups\C\1\Data54 50003968 bytes
File C:\RRbackups\C\1\Data55 50003968 bytes
File C:\RRbackups\C\1\Data56 50003968 bytes
File C:\RRbackups\C\1\Data57 50003968 bytes
File C:\RRbackups\C\1\Data58 50003968 bytes
File C:\RRbackups\C\1\Data59 50003968 bytes
File C:\RRbackups\C\1\Data6 50003968 bytes
File C:\RRbackups\C\1\Data60 50003968 bytes
File C:\RRbackups\C\1\Data61 50003968 bytes
File C:\RRbackups\C\1\Data62 50003968 bytes
File C:\RRbackups\C\1\Data63 50003968 bytes
File C:\RRbackups\C\1\Data64 50003968 bytes
File C:\RRbackups\C\1\Data66 50003968 bytes
File C:\RRbackups\C\1\Data67 50003968 bytes
File C:\RRbackups\C\1\Data68 50003968 bytes
File C:\RRbackups\C\1\Data69 50003968 bytes
File C:\RRbackups\C\1\Data7 50003968 bytes
File C:\RRbackups\C\1\Data70 50003968 bytes
File C:\RRbackups\C\1\Data71 50003968 bytes
File C:\RRbackups\C\1\Data72 50003968 bytes
File C:\RRbackups\C\1\Data73 50003968 bytes
File C:\RRbackups\C\1\Data74 50003968 bytes
File C:\RRbackups\C\1\Data75 50003968 bytes
File C:\RRbackups\C\1\Data76 50003968 bytes
File C:\RRbackups\C\1\Data77 50003968 bytes
File C:\RRbackups\C\1\Data78 50003968 bytes
File C:\RRbackups\C\1\Data79 50003968 bytes
File C:\RRbackups\C\1\Data8 50003968 bytes
File C:\RRbackups\C\1\Data80 50003968 bytes
File C:\RRbackups\C\1\Data81 50003968 bytes
File C:\RRbackups\C\1\Data82 50003968 bytes
File C:\RRbackups\C\1\Data83 50003968 bytes
File C:\RRbackups\C\1\Data117 50003968 bytes
File C:\RRbackups\C\1\Data118 50003968 bytes
File C:\RRbackups\C\1\Data119 50003968 bytes
File C:\RRbackups\C\1\Data12 50003968 bytes
File C:\RRbackups\C\1\Data120 50003968 bytes
File C:\RRbackups\C\1\Data121 50003968 bytes
File C:\RRbackups\C\1\Data122 50003968 bytes
File C:\RRbackups\C\1\Data123 50003968 bytes
File C:\RRbackups\C\1\Data124 50003968 bytes
File C:\RRbackups\C\1\Data125 50003968 bytes
File C:\RRbackups\C\1\Data126 50003968 bytes
File C:\RRbackups\C\1\Data127 50003968 bytes
File C:\RRbackups\C\1\Data128 50003968 bytes
File C:\RRbackups\C\1\Data129 50003968 bytes
File C:\RRbackups\C\1\Data13 50003968 bytes
File C:\RRbackups\C\1\Data130 50003968 bytes
File C:\RRbackups\C\1\Data131 50003968 bytes
File C:\RRbackups\C\1\Data132 50003968 bytes
File C:\RRbackups\C\1\Data133 50003968 bytes
File C:\RRbackups\C\1\Data134 50003968 bytes
File C:\RRbackups\C\1\Data136 50003968 bytes
File C:\RRbackups\C\1\Data137 50003968 bytes
File C:\RRbackups\C\1\Data138 50003968 bytes
File C:\RRbackups\C\1\Data139 50003968 bytes
File C:\RRbackups\C\1\Data14 50003968 bytes
File C:\RRbackups\C\1\Data140 50003968 bytes
File C:\RRbackups\C\1\Data141 50003968 bytes
File C:\RRbackups\C\1\Data142 50003968 bytes
File C:\RRbackups\C\1\Data143 50003968 bytes
File C:\RRbackups\C\1\Data144 50003968 bytes
File C:\RRbackups\C\1\Data145 50003968 bytes
File C:\RRbackups\C\1\Data146 50003968 bytes
File C:\RRbackups\C\1\Data147 50003968 bytes
File C:\RRbackups\C\1\Data148 50003968 bytes
File C:\RRbackups\C\1\Data149 50003968 bytes
File C:\RRbackups\C\1\Data15 50003968 bytes
File C:\RRbackups\C\1\Data150 50003968 bytes
File C:\RRbackups\C\1\Data151 50003968 bytes
File C:\RRbackups\C\1\Data152 50003968 bytes
File C:\RRbackups\C\1\Data153 50003968 bytes
File C:\RRbackups\C\1\Data155 50003968 bytes
File C:\RRbackups\C\1\Data156 50003968 bytes
File C:\RRbackups\C\1\Data157 50003968 bytes
File C:\RRbackups\C\1\Data158 50003968 bytes
File C:\RRbackups\C\1\Data159 50003968 bytes
File C:\RRbackups\C\1\Data16 50003968 bytes
File C:\RRbackups\C\1\Data160 50003968 bytes
File C:\RRbackups\C\1\Data161 50003968 bytes
File C:\RRbackups\C\1\Data162 50003968 bytes
File C:\RRbackups\C\1\Data163 50003968 bytes
File C:\RRbackups\C\1\Data164 50003968 bytes
File C:\RRbackups\C\1\Data165 50003968 bytes
File C:\RRbackups\C\1\Data166 50003968 bytes
File C:\RRbackups\C\1\Data167 50003968 bytes
File C:\RRbackups\C\1\Data168 50003968 bytes
File C:\RRbackups\C\1\Data169 50003968 bytes
File C:\RRbackups\C\1\Data17 50003968 bytes
File C:\RRbackups\C\1\Data170 50003968 bytes
File C:\RRbackups\C\1\Data171 50003968 bytes
File C:\RRbackups\C\1\Data172 50003968 bytes
File C:\RRbackups\C\1\Data116 50003968 bytes
File C:\RRbackups\C\1\Data135 50003968 bytes
File C:\RRbackups\C\1\Data154 50003968 bytes
File C:\RRbackups\C\1\Data173 50003968 bytes
File C:\RRbackups\C\1\Data192 50003968 bytes
File C:\RRbackups\C\1\Data210 50003968 bytes
File C:\RRbackups\C\1\Data23 50003968 bytes
File C:\RRbackups\C\1\Data249 50003968 bytes
File C:\RRbackups\C\1\Data27 50003968 bytes
File C:\RRbackups\C\1\Data289 50003968 bytes
File C:\RRbackups\C\1\Data307 50003968 bytes
File C:\RRbackups\C\1\Data326 50003968 bytes
File C:\RRbackups\C\1\Data46 50003968 bytes
File C:\RRbackups\C\1\Data65 50003968 bytes
File C:\RRbackups\C\1\Data84 50003968 bytes
File C:\RRbackups\C\1\Data174 50003968 bytes
File C:\RRbackups\C\1\Data175 50003968 bytes
File C:\RRbackups\C\1\Data176 50003968 bytes
File C:\RRbackups\C\1\Data177 50003968 bytes
File C:\RRbackups\C\1\Data178 50003968 bytes
File C:\RRbackups\C\1\Data179 50003968 bytes
File C:\RRbackups\C\1\Data18 50003968 bytes
File C:\RRbackups\C\1\Data180 50003968 bytes
File C:\RRbackups\C\1\Data181 50003968 bytes
File C:\RRbackups\C\1\Data182 50003968 bytes
File C:\RRbackups\C\1\Data183 50003968 bytes
File C:\RRbackups\C\1\Data184 50003968 bytes
File C:\RRbackups\C\1\Data185 50003968 bytes
File C:\RRbackups\C\1\Data186 50003968 bytes
File C:\RRbackups\C\1\Data187 50003968 bytes
File C:\RRbackups\C\1\Data188 50003968 bytes
File C:\RRbackups\C\1\Data189 50003968 bytes
File C:\RRbackups\C\1\Data19 50003968 bytes
File C:\RRbackups\C\1\Data190 50003968 bytes
File C:\RRbackups\C\1\Data191 50003968 bytes
File C:\RRbackups\C\1\Data193 50003968 bytes
File C:\RRbackups\C\1\Data194 50003968 bytes
File C:\RRbackups\C\1\Data195 50003968 bytes
File C:\RRbackups\C\1\Data196 50003968 bytes
File C:\RRbackups\C\1\Data197 50003968 bytes
File C:\RRbackups\C\1\Data198 50003968 bytes
File C:\RRbackups\C\1\Data199 50003968 bytes
File C:\RRbackups\C\1\Data2 50003968 bytes
File C:\RRbackups\C\1\Data20 50003968 bytes
File C:\RRbackups\C\1\Data200 50003968 bytes
File C:\RRbackups\C\1\Data201 50003968 bytes
File C:\RRbackups\C\1\Data202 50003968 bytes
File C:\RRbackups\C\1\Data203 50003968 bytes
File C:\RRbackups\C\1\Data204 50003968 bytes
File C:\RRbackups\C\1\Data205 50003968 bytes
File C:\RRbackups\C\1\Data206 50003968 bytes
File C:\RRbackups\C\1\Data207 50003968 bytes
File C:\RRbackups\C\1\Data208 50003968 bytes
File C:\RRbackups\C\1\Data209 50003968 bytes
File C:\RRbackups\C\1\Data21 50003968 bytes
File C:\RRbackups\C\1\Data211 50003968 bytes
File C:\RRbackups\C\1\Data212 50003968 bytes
File C:\RRbackups\C\1\Data213 50003968 bytes
File C:\RRbackups\C\1\Data214 50003968 bytes
File C:\RRbackups\C\1\Data215 50003968 bytes
File C:\RRbackups\C\1\Data216 50003968 bytes
File C:\RRbackups\C\1\Data217 50003968 bytes
File C:\RRbackups\C\1\Data218 50003968 bytes
File C:\RRbackups\C\1\Data219 50003968 bytes
File C:\RRbackups\C\1\Data22 50003968 bytes
File C:\RRbackups\C\1\Data220 50003968 bytes
File C:\RRbackups\C\1\Data221 50003968 bytes
File C:\RRbackups\C\1\Data222 50003968 bytes
File C:\RRbackups\C\1\Data223 50003968 bytes
File C:\RRbackups\C\1\Data224 50003968 bytes
File C:\RRbackups\C\1\Data225 50003968 bytes
File C:\RRbackups\C\1\Data226 50003968 bytes
File C:\RRbackups\C\1\Data227 50003968 bytes
File C:\RRbackups\C\1\Data228 50003968 bytes
File C:\RRbackups\C\1\Data229 50003968 bytes
File C:\RRbackups\C\1\Data230 50003968 bytes
File C:\RRbackups\C\1\Data231 50003968 bytes
File C:\RRbackups\C\1\Data232 50003968 bytes
File C:\RRbackups\C\1\Data233 50003968 bytes
File C:\RRbackups\C\1\Data234 50003968 bytes
File C:\RRbackups\C\1\Data235 50003968 bytes
File C:\RRbackups\C\1\Data236 50003968 bytes
File C:\RRbackups\C\1\Data237 50003968 bytes
File C:\RRbackups\C\1\Data238 50003968 bytes
File C:\RRbackups\C\1\Data239 50003968 bytes
File C:\RRbackups\C\1\Data24 50003968 bytes
File C:\RRbackups\C\1\Data240 50003968 bytes
File C:\RRbackups\C\1\Data241 50003968 bytes
File C:\RRbackups\C\1\Data242 50003968 bytes
File C:\RRbackups\C\1\Data243 50003968 bytes
File C:\RRbackups\C\1\Data244 50003968 bytes
File C:\RRbackups\C\1\Data245 50003968 bytes
File C:\RRbackups\C\1\Data246 50003968 bytes
File C:\RRbackups\C\1\Data247 50003968 bytes
File C:\RRbackups\C\1\Data248 50003968 bytes
File C:\RRbackups\C\1\Data25 50003968 bytes
File C:\RRbackups\C\1\Data250 50003968 bytes
File C:\RRbackups\C\1\Data251 50003968 bytes
File C:\RRbackups\C\1\Data252 50003968 bytes
File C:\RRbackups\C\1\Data253 50003968 bytes
File C:\RRbackups\C\1\Data254 50003968 bytes
File C:\RRbackups\C\1\Data255 50003968 bytes
File C:\RRbackups\C\1\Data256 50003968 bytes
File C:\RRbackups\C\1\Data257 50003968 bytes
File C:\RRbackups\C\1\Data258 50003968 bytes
File C:\RRbackups\C\1\Data259 50003968 bytes
File C:\RRbackups\C\1\Data26 50003968 bytes
File C:\RRbackups\C\1\Data260 50003968 bytes
File C:\RRbackups\C\1\Data261 50003968 bytes
File C:\RRbackups\C\1\Data262 50003968 bytes
File C:\RRbackups\C\1\Data263 50003968 bytes
File C:\RRbackups\C\1\Data264 50003968 bytes
File C:\RRbackups\C\1\Data265 50003968 bytes
File C:\RRbackups\C\1\Data266 50003968 bytes
File C:\RRbackups\C\1\Data267 50003968 bytes
File C:\RRbackups\C\1\Data268 50003968 bytes
File C:\RRbackups\C\1\Data269 50003968 bytes
File C:\RRbackups\C\1\Data29 50003968 bytes
File C:\RRbackups\C\1\Data290 50003968 bytes
File C:\RRbackups\C\1\Data291 50003968 bytes
File C:\RRbackups\C\1\Data292 50003968 bytes
File C:\RRbackups\C\1\Data293 50003968 bytes
File C:\RRbackups\C\1\Data294 50003968 bytes
File C:\RRbackups\C\1\Data295 50003968 bytes
File C:\RRbackups\C\1\Data296 50003968 bytes
File C:\RRbackups\C\1\Data297 50003968 bytes
File C:\RRbackups\C\1\Data298 50003968 bytes
File C:\RRbackups\C\1\Data299 50003968 bytes
File C:\RRbackups\C\1\Data3 50003968 bytes
File C:\RRbackups\C\1\Data30 50003968 bytes
File C:\RRbackups\C\1\Data300 50003968 bytes
File C:\RRbackups\C\1\Data301 50003968 bytes
File C:\RRbackups\C\1\Data302 50003968 bytes
File C:\RRbackups\C\1\Data303 50003968 bytes
File C:\RRbackups\C\1\Data304 50003968 bytes
File C:\RRbackups\C\1\Data305 50003968 bytes
File C:\RRbackups\C\1\Data306 50003968 bytes
File C:\RRbackups\C\1\Data308 50003968 bytes
File C:\RRbackups\C\1\Data309 50003968 bytes
File C:\RRbackups\C\1\Data31 50003968 bytes
File C:\RRbackups\C\1\Data310 50003968 bytes
File C:\RRbackups\C\1\Data311 50003968 bytes
File C:\RRbackups\C\1\Data312 50003968 bytes
File C:\RRbackups\C\1\Data313 50003968 bytes
File C:\RRbackups\C\1\Data314 50003968 bytes
File C:\RRbackups\C\1\Data315 50003968 bytes
File C:\RRbackups\C\1\Data316 50003968 bytes
File C:\RRbackups\C\1\Data317 50003968 bytes
File C:\RRbackups\C\1\Data318 50003968 bytes
File C:\RRbackups\C\1\Data319 50003968 bytes
File C:\RRbackups\C\1\Data32 50003968 bytes
File C:\RRbackups\C\1\Data320 50003968 bytes
File C:\RRbackups\C\1\Data321 50003968 bytes
File C:\RRbackups\C\1\Data322 50003968 bytes
File C:\RRbackups\C\1\Data323 50003968 bytes
File C:\RRbackups\C\1\Data324 50003968 bytes
File C:\RRbackups\C\1\Data325 50003968 bytes
File C:\RRbackups\C\1\Data327 50003968 bytes
File C:\RRbackups\C\1\Data328 50003968 bytes
File C:\RRbackups\C\1\Data329 50003968 bytes
File C:\RRbackups\C\1\Data33 50003968 bytes
File C:\RRbackups\C\1\Data330 50003968 bytes
File C:\RRbackups\C\1\Data331 50003968 bytes
File C:\RRbackups\C\1\Data332 50003968 bytes
File C:\RRbackups\C\1\Data333 50003968 bytes
File C:\RRbackups\C\1\Data334 50003968 bytes
File C:\RRbackups\C\1\Data335 50003968 bytes
File C:\RRbackups\C\1\Data336 50003968 bytes
File C:\RRbackups\C\1\Data337 50003968 bytes
File C:\RRbackups\C\1\Data338 50003968 bytes
File C:\RRbackups\C\1\Data339 50003968 bytes
File C:\RRbackups\C\1\Data34 50003968 bytes
File C:\RRbackups\C\1\Data340 13456244 bytes
File C:\RRbackups\C\1\Data35 50003968 bytes
File C:\RRbackups\C\1\Data36 50003968 bytes
File C:\RRbackups\C\1\Data37 50003968 bytes
File C:\RRbackups\C\1\Data38 50003968 bytes
File C:\RRbackups\C\1\Data39 50003968 bytes
File C:\RRbackups\C\1\Data4 50003968 bytes
File C:\RRbackups\C\1\Data40 50003968 bytes
File C:\RRbackups\C\1\Data41 50003968 bytes
File C:\RRbackups\C\1\Data42 50003968 bytes
File C:\RRbackups\C\1\Data43 50003968 bytes
File C:\RRbackups\C\1\Data44 50003968 bytes
File C:\RRbackups\C\1\Data45 50003968 bytes
File C:\RRbackups\C\1\Data85 50003968 bytes
File C:\RRbackups\C\1\Data86 50003968 bytes
File C:\RRbackups\C\1\Data87 50003968 bytes
File C:\RRbackups\C\1\Data88 50003968 bytes
File C:\RRbackups\C\1\Data89 50003968 bytes
File C:\RRbackups\C\1\Data9 50003968 bytes
File C:\RRbackups\C\1\Data90 50003968 bytes
File C:\RRbackups\C\1\Data91 50003968 bytes
File C:\RRbackups\C\1\Data92 50003968 bytes
File C:\RRbackups\C\1\Data93 50003968 bytes
File C:\RRbackups\C\1\Data94 50003968 bytes
File C:\RRbackups\C\1\Data95 50003968 bytes
File C:\RRbackups\C\1\Data96 50003968 bytes
File C:\RRbackups\C\1\Data97 50003968 bytes
File C:\RRbackups\C\1\Data98 50003968 bytes
File C:\RRbackups\C\1\Data99 50003968 bytes
File C:\RRbackups\C\1\dats 0 bytes
File C:\RRbackups\C\1\EFSFile 0 bytes
File C:\RRbackups\C\1\HashFile 618216 bytes
File C:\RRbackups\C\1\Info 756 bytes
File C:\RRbackups\C\1\TOCFile 62851960 bytes
File C:\RRbackups\C\1\~EFSFile 0 bytes
File C:\RRbackups\C\1\~HashFile 618216 bytes
File C:\RRbackups\C\1\~TOCFile 62851960 bytes
File C:\RRbackups\C\2 0 bytes
File C:\RRbackups\C\2\Data0 50003968 bytes
File C:\RRbackups\C\2\Data1 50003968 bytes
File C:\RRbackups\C\2\Data10 50003968 bytes
File C:\RRbackups\C\2\Data100 50003968 bytes
File C:\RRbackups\C\2\Data101 50003968 bytes
File C:\RRbackups\C\2\Data102 50003968 bytes
File C:\RRbackups\C\2\Data103 50003968 bytes
File C:\RRbackups\C\2\Data104 50003968 bytes
File C:\RRbackups\C\2\Data105 50003968 bytes
File C:\RRbackups\C\2\Data106 50003968 bytes
File C:\RRbackups\C\2\Data107 50003968 bytes
File C:\RRbackups\C\2\Data108 50003968 bytes
File C:\RRbackups\C\2\Data109 50003968 bytes
File C:\RRbackups\C\2\Data11 50003968 bytes
File C:\RRbackups\C\2\Data110 50003968 bytes
File C:\RRbackups\C\2\Data111 50003968 bytes
File C:\RRbackups\C\2\Data112 50003968 bytes
File C:\RRbackups\C\2\Data113 50003968 bytes
File C:\RRbackups\C\2\Data114 50003968 bytes
File C:\RRbackups\C\2\Data115 50003968 bytes
File C:\RRbackups\C\2\Data270 50003968 bytes
File C:\RRbackups\C\2\Data271 50003968 bytes
File C:\RRbackups\C\2\Data272 50003968 bytes
File C:\RRbackups\C\2\Data273 50003968 bytes
File C:\RRbackups\C\2\Data274 50003968 bytes
File C:\RRbackups\C\2\Data275 50003968 bytes
File C:\RRbackups\C\2\Data276 50003968 bytes
File C:\RRbackups\C\2\Data277 50003968 bytes
File C:\RRbackups\C\2\Data278 50003968 bytes
File C:\RRbackups\C\2\Data279 50003968 bytes
File C:\RRbackups\C\2\Data28 50003968 bytes
File C:\RRbackups\C\2\Data280 50003968 bytes
File C:\RRbackups\C\2\Data281 50003968 bytes
File C:\RRbackups\C\2\Data282 50003968 bytes
File C:\RRbackups\C\2\Data283 50003968 bytes
File C:\RRbackups\C\2\Data284 50003968 bytes
File C:\RRbackups\C\2\Data285 50003968 bytes
File C:\RRbackups\C\2\Data286 50003968 bytes
File C:\RRbackups\C\2\Data287 50003968 bytes
File C:\RRbackups\C\2\Data288 50003968 bytes
File C:\RRbackups\C\2\Data47 50003968 bytes
File C:\RRbackups\C\2\Data48 50003968 bytes
File C:\RRbackups\C\2\Data49 50003968 bytes
File C:\RRbackups\C\2\Data5 50003968 bytes
File C:\RRbackups\C\2\Data50 50003968 bytes
File C:\RRbackups\C\2\Data51 50003968 bytes
File C:\RRbackups\C\2\Data52 50003968 bytes
File C:\RRbackups\C\2\Data53 50003968 bytes
File C:\RRbackups\C\2\Data54 50003968 bytes
File C:\RRbackups\C\2\Data55 50003968 bytes
File C:\RRbackups\C\2\Data56 50003968 bytes
File C:\RRbackups\C\2\Data57 50003968 bytes
File C:\RRbackups\C\2\Data58 50003968 bytes
File C:\RRbackups\C\2\Data59 50003968 bytes
File C:\RRbackups\C\2\Data6 50003968 bytes
File C:\RRbackups\C\2\Data60 50003968 bytes
File C:\RRbackups\C\2\Data61 50003968 bytes
File C:\RRbackups\C\2\Data62 50003968 bytes
File C:\RRbackups\C\2\Data63 50003968 bytes
File C:\RRbackups\C\2\Data64 50003968 bytes
File C:\RRbackups\C\2\Data66 50003968 bytes
File C:\RRbackups\C\2\Data67 50003968 bytes
File C:\RRbackups\C\2\Data68 50003968 bytes
File C:\RRbackups\C\2\Data69 50003968 bytes
File C:\RRbackups\C\2\Data7 50003968 bytes
File C:\RRbackups\C\2\Data70 50003968 bytes
File C:\RRbackups\C\2\Data71 50003968 bytes
File C:\RRbackups\C\2\Data72 50003968 bytes
File C:\RRbackups\C\2\Data73 50003968 bytes
File C:\RRbackups\C\2\Data74 50003968 bytes
File C:\RRbackups\C\2\Data75 50003968 bytes
File C:\RRbackups\C\2\Data76 50003968 bytes
File C:\RRbackups\C\2\Data77 50003968 bytes
File C:\RRbackups\C\2\Data78 50003968 bytes
File C:\RRbackups\C\2\Data79 50003968 bytes
File C:\RRbackups\C\2\Data8 50003968 bytes
File C:\RRbackups\C\2\Data80 50003968 bytes
File C:\RRbackups\C\2\Data81 50003968 bytes
File C:\RRbackups\C\2\Data82 50003968 bytes
File C:\RRbackups\C\2\Data83 50003968 bytes
File C:\RRbackups\C\2\Data117 50003968 bytes
File C:\RRbackups\C\2\Data118 50003968 bytes
File C:\RRbackups\C\2\Data119 50003968 bytes
File C:\RRbackups\C\2\Data12 50003968 bytes
File C:\RRbackups\C\2\Data120 50003968 bytes
File C:\RRbackups\C\2\Data121 50003968 bytes
File C:\RRbackups\C\2\Data122 50003968 bytes
File C:\RRbackups\C\2\Data123 50003968 bytes
File C:\RRbackups\C\2\Data124 50003968 bytes
File C:\RRbackups\C\2\Data125 50003968 bytes
File C:\RRbackups\C\2\Data126 50003968 bytes
File C:\RRbackups\C\2\Data127 50003968 bytes
File C:\RRbackups\C\2\Data128 50003968 bytes
File C:\RRbackups\C\2\Data129 50003968 bytes
File C:\RRbackups\C\2\Data13 50003968 bytes
File C:\RRbackups\C\2\Data130 50003968 bytes
File C:\RRbackups\C\2\Data131 50003968 bytes
File C:\RRbackups\C\2\Data132 50003968 bytes
File C:\RRbackups\C\2\Data133 50003968 bytes
File C:\RRbackups\C\2\Data134 50003968 bytes
File C:\RRbackups\C\2\Data136 50003968 bytes
File C:\RRbackups\C\2\Data137 50003968 bytes
File C:\RRbackups\C\2\Data138 50003968 bytes
File C:\RRbackups\C\2\Data139 50003968 bytes
File C:\RRbackups\C\2\Data14 50003968 bytes
File C:\RRbackups\C\2\Data140 50003968 bytes
File C:\RRbackups\C\2\Data141 50003968 bytes
File C:\RRbackups\C\2\Data142 50003968 bytes
File C:\RRbackups\C\2\Data143 50003968 bytes
File C:\RRbackups\C\2\Data144 50003968 bytes
File C:\RRbackups\C\2\Data145 50003968 bytes
File C:\RRbackups\C\2\Data146 50003968 bytes
File C:\RRbackups\C\2\Data147 50003968 bytes
File C:\RRbackups\C\2\Data148 50003968 bytes
File C:\RRbackups\C\2\Data149 50003968 bytes
File C:\RRbackups\C\2\Data15 50003968 bytes
File C:\RRbackups\C\2\Data150 50003968 bytes
File C:\RRbackups\C\2\Data151 50003968 bytes
File C:\RRbackups\C\2\Data152 50003968 bytes
File C:\RRbackups\C\2\Data153 50003968 bytes
File C:\RRbackups\C\2\Data155 50003968 bytes
File C:\RRbackups\C\2\Data156 50003968 bytes
File C:\RRbackups\C\2\Data157 50003968 bytes
File C:\RRbackups\C\2\Data158 50003968 bytes
File C:\RRbackups\C\2\Data159 50003968 bytes
File C:\RRbackups\C\2\Data16 50003968 bytes
File C:\RRbackups\C\2\Data160 50003968 bytes
File C:\RRbackups\C\2\Data161 50003968 bytes
File C:\RRbackups\C\2\Data162 50003968 bytes
File C:\RRbackups\C\2\Data163 50003968 bytes
File C:\RRbackups\C\2\Data164 50003968 bytes
File C:\RRbackups\C\2\Data165 50003968 bytes
File C:\RRbackups\C\2\Data166 50003968 bytes
File C:\RRbackups\C\2\Data167 50003968 bytes
File C:\RRbackups\C\2\Data168 50003968 bytes
File C:\RRbackups\C\2\Data169 50003968 bytes
File C:\RRbackups\C\2\Data17 50003968 bytes
File C:\RRbackups\C\2\Data170 50003968 bytes
File C:\RRbackups\C\2\Data171 50003968 bytes
File C:\RRbackups\C\2\Data172 50003968 bytes
File C:\RRbackups\C\2\Data116 50003968 bytes
File C:\RRbackups\C\2\Data135 50003968 bytes
File C:\RRbackups\C\2\Data154 50003968 bytes
File C:\RRbackups\C\2\Data173 50003968 bytes
File C:\RRbackups\C\2\Data192 50003968 bytes
File C:\RRbackups\C\2\Data210 50003968 bytes
File C:\RRbackups\C\2\Data23 50003968 bytes
File C:\RRbackups\C\2\Data249 50003968 bytes
File C:\RRbackups\C\2\Data27 50003968 bytes
File C:\RRbackups\C\2\Data289 50003968 bytes
File C:\RRbackups\C\2\Data307 50003968 bytes
File C:\RRbackups\C\2\Data326 50003968 bytes
File C:\RRbackups\C\2\Data46 50003968 bytes
File C:\RRbackups\C\2\Data65 50003968 bytes
File C:\RRbackups\C\2\Data84 50003968 bytes
File C:\RRbackups\C\2\Data174 50003968 bytes
File C:\RRbackups\C\2\Data175 50003968 bytes
File C:\RRbackups\C\2\Data176 50003968 bytes
File C:\RRbackups\C\2\Data177 50003968 bytes
File C:\RRbackups\C\2\Data178 50003968 bytes
File C:\RRbackups\C\2\Data179 50003968 bytes
File C:\RRbackups\C\2\Data18 50003968 bytes
File C:\RRbackups\C\2\Data180 50003968 bytes
File C:\RRbackups\C\2\Data181 50003968 bytes
File C:\RRbackups\C\2\Data182 50003968 bytes
File C:\RRbackups\C\2\Data183 50003968 bytes
File C:\RRbackups\C\2\Data184 50003968 bytes
File C:\RRbackups\C\2\Data185 50003968 bytes
File C:\RRbackups\C\2\Data186 50003968 bytes
File C:\RRbackups\C\2\Data187 50003968 bytes
File C:\RRbackups\C\2\Data188 50003968 bytes
File C:\RRbackups\C\2\Data189 50003968 bytes
File C:\RRbackups\C\2\Data19 50003968 bytes
File C:\RRbackups\C\2\Data190 50003968 bytes
File C:\RRbackups\C\2\Data191 50003968 bytes
File C:\RRbackups\C\2\Data193 50003968 bytes
File C:\RRbackups\C\2\Data194 50003968 bytes
File C:\RRbackups\C\2\Data195 50003968 bytes
File C:\RRbackups\C\2\Data196 50003968 bytes
File C:\RRbackups\C\2\Data197 50003968 bytes
File C:\RRbackups\C\2\Data198 50003968 bytes
File C:\RRbackups\C\2\Data199 50003968 bytes
File C:\RRbackups\C\2\Data2 50003968 bytes
File C:\RRbackups\C\2\Data20 50003968 bytes
File C:\RRbackups\C\2\Data200 50003968 bytes
File C:\RRbackups\C\2\Data201 50003968 bytes
File C:\RRbackups\C\2\Data202 50003968 bytes
File C:\RRbackups\C\2\Data203 50003968 bytes
File C:\RRbackups\C\2\Data204 50003968 bytes
File C:\RRbackups\C\2\Data205 50003968 bytes
File C:\RRbackups\C\2\Data206 50003968 bytes
File C:\RRbackups\C\2\Data207 50003968 bytes
File C:\RRbackups\C\2\Data208 50003968 bytes
File C:\RRbackups\C\2\Data209 50003968 bytes
File C:\RRbackups\C\2\Data21 50003968 bytes
File C:\RRbackups\C\2\Data211 50003968 bytes
File C:\RRbackups\C\2\Data212 50003968 bytes
File C:\RRbackups\C\2\Data213 50003968 bytes
File C:\RRbackups\C\2\Data214 50003968 bytes
File C:\RRbackups\C\2\Data215 50003968 bytes
File C:\RRbackups\C\2\Data216 50003968 bytes
File C:\RRbackups\C\2\Data217 50003968 bytes
File C:\RRbackups\C\2\Data218 50003968 bytes
File C:\RRbackups\C\2\Data219 50003968 bytes
File C:\RRbackups\C\2\Data22 50003968 bytes
File C:\RRbackups\C\2\Data220 50003968 bytes
File C:\RRbackups\C\2\Data221 50003968 bytes
File C:\RRbackups\C\2\Data222 50003968 bytes
File C:\RRbackups\C\2\Data223 50003968 bytes
File C:\RRbackups\C\2\Data224 50003968 bytes
File C:\RRbackups\C\2\Data225 50003968 bytes
File C:\RRbackups\C\2\Data226 50003968 bytes
File C:\RRbackups\C\2\Data227 50003968 bytes
File C:\RRbackups\C\2\Data228 50003968 bytes
File C:\RRbackups\C\2\Data229 50003968 bytes
File C:\RRbackups\C\2\Data230 50003968 bytes
File C:\RRbackups\C\2\Data231 50003968 bytes
File C:\RRbackups\C\2\Data232 50003968 bytes
File C:\RRbackups\C\2\Data233 50003968 bytes
File C:\RRbackups\C\2\Data234 50003968 bytes
File C:\RRbackups\C\2\Data235 50003968 bytes
File C:\RRbackups\C\2\Data236 50003968 bytes
File C:\RRbackups\C\2\Data237 50003968 bytes
File C:\RRbackups\C\2\Data238 50003968 bytes
File C:\RRbackups\C\2\Data239 50003968 bytes
File C:\RRbackups\C\2\Data24 50003968 bytes
File C:\RRbackups\C\2\Data240 50003968 bytes
File C:\RRbackups\C\2\Data241 50003968 bytes
File C:\RRbackups\C\2\Data242 50003968 bytes
File C:\RRbackups\C\2\Data243 50003968 bytes
File C:\RRbackups\C\2\Data244 50003968 bytes
File C:\RRbackups\C\2\Data245 50003968 bytes
File C:\RRbackups\C\2\Data246 50003968 bytes
File C:\RRbackups\C\2\Data247 50003968 bytes
File C:\RRbackups\C\2\Data248 50003968 bytes
File C:\RRbackups\C\2\Data25 50003968 bytes
File C:\RRbackups\C\2\Data250 50003968 bytes
File C:\RRbackups\C\2\Data251 50003968 bytes
File C:\RRbackups\C\2\Data252 50003968 bytes
File C:\RRbackups\C\2\Data253 50003968 bytes
File C:\RRbackups\C\2\Data254 50003968 bytes
File C:\RRbackups\C\2\Data255 50003968 bytes
File C:\RRbackups\C\2\Data256 50003968 bytes
File C:\RRbackups\C\2\Data257 50003968 bytes
File C:\RRbackups\C\2\Data258 50003968 bytes
File C:\RRbackups\C\2\Data259 50003968 bytes
File C:\RRbackups\C\2\Data26 50003968 bytes
File C:\RRbackups\C\2\Data260 50003968 bytes
File C:\RRbackups\C\2\Data261 50003968 bytes
File C:\RRbackups\C\2\Data262 50003968 bytes
File C:\RRbackups\C\2\Data263 50003968 bytes
File C:\RRbackups\C\2\Data264 50003968 bytes
File C:\RRbackups\C\2\Data265 50003968 bytes
File C:\RRbackups\C\2\Data266 50003968 bytes
File C:\RRbackups\C\2\Data267 50003968 bytes
File C:\RRbackups\C\2\Data268 50003968 bytes
File C:\RRbackups\C\2\Data269 50003968 bytes
File C:\RRbackups\C\2\Data29 50003968 bytes
File C:\RRbackups\C\2\Data290 50003968 bytes
File C:\RRbackups\C\2\Data291 50003968 bytes
File C:\RRbackups\C\2\Data292 50003968 bytes
File C:\RRbackups\C\2\Data293 50003968 bytes
File C:\RRbackups\C\2\Data294 50003968 bytes
File C:\RRbackups\C\2\Data295 50003968 bytes
File C:\RRbackups\C\2\Data296 50003968 bytes
File C:\RRbackups\C\2\Data297 50003968 bytes
File C:\RRbackups\C\2\Data298 50003968 bytes
File C:\RRbackups\C\2\Data299 50003968 bytes
File C:\RRbackups\C\2\Data3 50003968 bytes
File C:\RRbackups\C\2\Data30 50003968 bytes
File C:\RRbackups\C\2\Data300 50003968 bytes
File C:\RRbackups\C\2\Data301 50003968 bytes
File C:\RRbackups\C\2\Data302 50003968 bytes
File C:\RRbackups\C\2\Data303 50003968 bytes
File C:\RRbackups\C\2\Data304 50003968 bytes
File C:\RRbackups\C\2\Data305 50003968 bytes
File C:\RRbackups\C\2\Data306 50003968 bytes
File C:\RRbackups\C\2\Data308 50003968 bytes
File C:\RRbackups\C\2\Data309 50003968 bytes
File C:\RRbackups\C\2\Data31 50003968 bytes
File C:\RRbackups\C\2\Data310 50003968 bytes
File C:\RRbackups\C\2\Data311 50003968 bytes
File C:\RRbackups\C\2\Data312 50003968 bytes
File C:\RRbackups\C\2\Data313 50003968 bytes
File C:\RRbackups\C\2\Data314 50003968 bytes
File C:\RRbackups\C\2\Data315 50003968 bytes
File C:\RRbackups\C\2\Data316 50003968 bytes
File C:\RRbackups\C\2\Data317 50003968 bytes
File C:\RRbackups\C\2\Data318 50003968 bytes
File C:\RRbackups\C\2\Data319 50003968 bytes
File C:\RRbackups\C\2\Data32 50003968 bytes
File C:\RRbackups\C\2\Data320 50003968 bytes
File C:\RRbackups\C\2\Data321 50003968 bytes
File C:\RRbackups\C\2\Data322 50003968 bytes
File C:\RRbackups\C\2\Data323 50003968 bytes
File C:\RRbackups\C\2\Data324 50003968 bytes
File C:\RRbackups\C\2\Data325 50003968 bytes
File C:\RRbackups\C\2\Data327 50003968 bytes
File C:\RRbackups\C\2\Data328 50003968 bytes
File C:\RRbackups\C\2\Data329 50003968 bytes
File C:\RRbackups\C\2\Data33 50003968 bytes
File C:\RRbackups\C\2\Data330 50003968 bytes
File C:\RRbackups\C\2\Data331 50003968 bytes
File C:\RRbackups\C\2\Data332 50003968 bytes
File C:\RRbackups\C\2\Data333 50003968 bytes
File C:\RRbackups\C\2\Data334 50003968 bytes
File C:\RRbackups\C\2\Data335 45992649 bytes
File C:\RRbackups\C\2\Data34 50003968 bytes
File C:\RRbackups\C\2\Data35 50003968 bytes
File C:\RRbackups\C\2\Data36 50003968 bytes
File C:\RRbackups\C\2\Data37 50003968 bytes
File C:\RRbackups\C\2\Data38 50003968 bytes
File C:\RRbackups\C\2\Data39 50003968 bytes
File C:\RRbackups\C\2\Data4 50003968 bytes
File C:\RRbackups\C\2\Data40 50003968 bytes
File C:\RRbackups\C\2\Data41 50003968 bytes
File C:\RRbackups\C\2\Data42 50003968 bytes
File C:\RRbackups\C\2\Data43 50003968 bytes
File C:\RRbackups\C\2\Data44 50003968 bytes
File C:\RRbackups\C\2\Data45 50003968 bytes
File C:\RRbackups\C\2\Data85 50003968 bytes
File C:\RRbackups\C\2\Data86 50003968 bytes
File C:\RRbackups\C\2\Data87 50003968 bytes
File C:\RRbackups\C\2\Data88 50003968 bytes
File C:\RRbackups\C\2\Data89 50003968 bytes
File C:\RRbackups\C\2\Data9 50003968 bytes
File C:\RRbackups\C\2\Data90 50003968 bytes
File C:\RRbackups\C\2\Data91 50003968 bytes
File C:\RRbackups\C\2\Data92 50003968 bytes
File C:\RRbackups\C\2\Data93 50003968 bytes
File C:\RRbackups\C\2\Data94 50003968 bytes
File C:\RRbackups\C\2\Data95 50003968 bytes
File C:\RRbackups\C\2\Data96 50003968 bytes
File C:\RRbackups\C\2\Data97 50003968 bytes
File C:\RRbackups\C\2\Data98 50003968 bytes
File C:\RRbackups\C\2\Data99 50003968 bytes
File C:\RRbackups\C\2\dats 0 bytes
File C:\RRbackups\C\2\EFSFile 0 bytes
File C:\RRbackups\C\2\HashFile 690606 bytes
File C:\RRbackups\C\2\Info 756 bytes
File C:\RRbackups\C\2\TOCFile 70211610 bytes
File C:\RRbackups\C\2\~EFSFile 0 bytes
File C:\RRbackups\C\2\~HashFile 93426 bytes
File C:\RRbackups\C\2\~TOCFile 9436700 bytes
File C:\RRbackups\C\3 0 bytes

Attachments:

Post #4
File C:\RRbackups\C\3\Data0 50003968 bytes File C:\RRbackups\C\3\Data1 50003968 bytes File C:\RRbackups\C\3\Data10 50003968 bytes File C:\RRbackups\C\3\Data11 50003968 bytes File C:\RRbackups\C\3\Data12 50003968 bytes File C:\RRbackups\C\3\Data13 50003968 bytes File C:\RRbackups\C\3\Data14 50003968 bytes File C:\RRbackups\C\3\Data15 50003968 bytes File C:\RRbackups\C\3\Data16 50003968 bytes File C:\RRbackups\C\3\Data17 50003968 bytes File C:\RRbackups\C\3\Data18 50003968 bytes File C:\RRbackups\C\3\Data19 50003968 bytes File C:\RRbackups\C\3\Data2 50003968 bytes File C:\RRbackups\C\3\Data20 50003968 bytes File C:\RRbackups\C\3\Data21 50003968 bytes File C:\RRbackups\C\3\Data22 50003968 bytes File C:\RRbackups\C\3\Data23 50003968 bytes File C:\RRbackups\C\3\Data24 50003968 bytes File C:\RRbackups\C\3\Data25 50003968 bytes File C:\RRbackups\C\3\Data26 4569977 bytes File C:\RRbackups\C\3\Data3 50003968 bytes File C:\RRbackups\C\3\Data4 50003968 bytes File C:\RRbackups\C\3\Data5 50003968 bytes File C:\RRbackups\C\3\Data6 50003968 bytes File C:\RRbackups\C\3\Data7 50003968 bytes File C:\RRbackups\C\3\Data8 50003968 bytes File C:\RRbackups\C\3\Data9 50003968 bytes File C:\RRbackups\C\3\dats 0 bytes File C:\RRbackups\C\3\EFSFile 0 bytes File C:\RRbackups\C\3\HashFile 703122 bytes File C:\RRbackups\C\3\Info 756 bytes File C:\RRbackups\C\3\TOCFile 71484070 bytes File C:\RRbackups\common 0 bytes File C:\RRbackups\common\backups.dat 8192 bytes File C:\RRbackups\common\bt0.dat 32256 bytes File C:\RRbackups\common\bt1.dat 32256 bytes File C:\RRbackups\common\bt2.dat 32256 bytes File C:\RRbackups\common\bt3.dat 32256 bytes File C:\RRbackups\common\css.dat 12288 bytes File C:\RRbackups\common\hints.dat 8192 bytes File C:\RRbackups\common\mnd.dat 8192 bytes File C:\RRbackups\common\regcerts.dat 12288 bytes File C:\RRbackups\common\restore.log 340 bytes File C:\RRbackups\common\rr.log 49601 bytes File C:\RRbackups\common\SAM 262144 bytes File C:\RRbackups\common\seccache.dat 8192 bytes File C:\RRbackups\common\secpolicy.dat 61440 bytes File C:\RRbackups\common\settings.dat 32768 bytes File C:\RRbackups\common\system.dat 12288 bytes File C:\RRbackups\common\tvtcmn.dat 8192 bytes File C:\RRbackups\common\tvtns.bin 23 bytes File C:\RRbackups\common\usersids.dat 17680 bytes File C:\RRbackups\Documents and Settings 0 bytes File C:\RRbackups\Documents and Settings\Administrator 0 bytes File C:\RRbackups\Documents and Settings\Administrator\Application Data 0 bytes File C:\RRbackups\Documents and Settings\Administrator\Application Data\Lenovo 0 bytes File C:\RRbackups\Documents and Settings\Administrator\Application Data\Microsoft 0 bytes File C:\RRbackups\Documents and Settings\Administrator\Application Data\Microsoft\Crypto 0 bytes File C:\RRbackups\Documents and Settings\Administrator\Application Data\Microsoft\Crypto\RSA 0 bytes File C:\RRbackups\Documents and Settings\Administrator\Application Data\Microsoft\Protect 0 bytes File C:\RRbackups\Documents and Settings\Administrator\Application Data\Microsoft\Protect\CREDHIST 24 bytes File C:\RRbackups\Documents and Settings\Administrator\Application Data\Microsoft\Protect\S-1-5-21-2169289929-977620645-425057706-500 0 bytes File C:\RRbackups\Documents and Settings\Administrator\Application Data\Microsoft\Protect\S-1-5-21-2169289929-977620645-425057706-500\04cf5de1-2454-4616-badd-4c4fd627aa46 388 bytes File C:\RRbackups\Documents and Settings\Administrator\Application Data\Microsoft\Protect\S-1-5-21-2169289929-977620645-425057706-500\Preferred 24 bytes File C:\RRbackups\Documents and Settings\Administrator\Application Data\Microsoft\Protect\S-1-5-21-2765152507-3527599572-1303659557-500 0 bytes File C:\RRbackups\Documents and Settings\Administrator\Application Data\Microsoft\Protect\S-1-5-21-2765152507-3527599572-1303659557-500\2b38db1a-7241-486b-8718-2825fc1ffc29 388 bytes File C:\RRbackups\Documents and Settings\Administrator\Application Data\Microsoft\Protect\S-1-5-21-2765152507-3527599572-1303659557-500\Preferred 24 bytes File C:\RRbackups\Documents and Settings\Administrator\Application Data\Microsoft\SystemCertificates 0 bytes File C:\RRbackups\Documents and Settings\Administrator\Application Data\Microsoft\SystemCertificates\My 0 bytes File C:\RRbackups\Documents and Settings\Administrator\Application Data\Microsoft\SystemCertificates\My\Certificates 0 bytes File C:\RRbackups\Documents and Settings\Administrator\Application Data\Microsoft\SystemCertificates\My\CRLs 0 bytes File C:\RRbackups\Documents and Settings\Administrator\Application Data\Microsoft\SystemCertificates\My\CTLs 0 bytes File C:\RRbackups\Documents and Settings\All Users 0 bytes File C:\RRbackups\Documents and Settings\All Users\Application Data 0 bytes File C:\RRbackups\Documents and Settings\All Users\Application Data\Lenovo 0 bytes File C:\RRbackups\Documents and Settings\All Users\Application Data\Lenovo\Client Security Solution 0 bytes File C:\RRbackups\Documents and Settings\All Users\Application Data\Lenovo\Client Security Solution\cspContainer.dat 332 bytes File C:\RRbackups\Documents and Settings\All Users\Application Data\Lenovo\Client Security Solution\encobject.dat 1608 bytes File C:\RRbackups\Documents and Settings\All Users\Application Data\Lenovo\Client Security Solution\hwkeys.dat 4248 bytes File C:\RRbackups\Documents and Settings\All Users\Application Data\Lenovo\Client Security Solution\symkeys.dat 656 bytes File C:\RRbackups\Documents and Settings\All Users\Application Data\Microsoft 0 bytes File C:\RRbackups\Documents and Settings\All Users\Application Data\Microsoft\Crypto 0 bytes File C:\RRbackups\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA 0 bytes File C:\RRbackups\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys 0 bytes File C:\RRbackups\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\fc1e3851f429ea606d6ff1e01a5229f1_ba7b03cd-98c7-4838-aed0-5dae9f7ceecd 52 bytes File C:\RRbackups\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\S-1-5-18 0 bytes File C:\RRbackups\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\S-1-5-18\42e7e898003fbdeb9585806ee1664b51_ba7b03cd-98c7-4838-aed0-5dae9f7ceecd 57 bytes File C:\RRbackups\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\S-1-5-18\62a45886e06c7d046ea8b819bec0598a_ba7b03cd-98c7-4838-aed0-5dae9f7ceecd 45 bytes File C:\RRbackups\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\S-1-5-18\6d14e4b1d8ca773bab785d1be032546e_ba7b03cd-98c7-4838-aed0-5dae9f7ceecd 47 bytes File C:\RRbackups\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\S-1-5-18\8f71098770f72c7a67cd8f1151619865_ba7b03cd-98c7-4838-aed0-5dae9f7ceecd 54 bytes File C:\RRbackups\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\S-1-5-18\d42cc0c3858a58db2db37658219e6400_ba7b03cd-98c7-4838-aed0-5dae9f7ceecd 893 bytes File C:\RRbackups\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\S-1-5-18\dd508fb67e3df5d722d6ce98ff404371_ba7b03cd-98c7-4838-aed0-5dae9f7ceecd 63 bytes File C:\RRbackups\Documents and Settings\Default User 0 bytes File C:\RRbackups\Documents and Settings\Default User\Application Data 0 bytes File C:\RRbackups\Documents and Settings\Default User\Application Data\Lenovo 0 bytes File C:\RRbackups\Documents and Settings\Default User\Application Data\Microsoft 0 bytes File C:\RRbackups\Documents and Settings\Default User\Application Data\Microsoft\Crypto 0 bytes File C:\RRbackups\Documents and Settings\Default User\Application Data\Microsoft\Crypto\RSA 0 bytes File C:\RRbackups\Documents and Settings\Default User\Application Data\Microsoft\Protect 0 bytes File C:\RRbackups\Documents and Settings\Default User\Application Data\Microsoft\Protect\CREDHIST 24 bytes File C:\RRbackups\Documents and Settings\Default User\Application Data\Microsoft\Protect\S-1-5-21-2169289929-977620645-425057706-500 0 bytes File C:\RRbackups\Documents and Settings\Default User\Application Data\Microsoft\Protect\S-1-5-21-2169289929-977620645-425057706-500\04cf5de1-2454-4616-badd-4c4fd627aa46 388 bytes File C:\RRbackups\Documents and Settings\Default User\Application Data\Microsoft\Protect\S-1-5-21-2169289929-977620645-425057706-500\Preferred 24 bytes File C:\RRbackups\Documents and Settings\Default User\Application Data\Microsoft\Protect\S-1-5-21-2765152507-3527599572-1303659557-500 0 bytes File C:\RRbackups\Documents and Settings\Default User\Application Data\Microsoft\Protect\S-1-5-21-2765152507-3527599572-1303659557-500\2b38db1a-7241-486b-8718-2825fc1ffc29 388 bytes File C:\RRbackups\Documents and Settings\Default User\Application Data\Microsoft\Protect\S-1-5-21-2765152507-3527599572-1303659557-500\Preferred 24 bytes File C:\RRbackups\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates 0 bytes File C:\RRbackups\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My 0 bytes File C:\RRbackups\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My\Certificates 0 bytes File C:\RRbackups\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My\CRLs 0 bytes File C:\RRbackups\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My\CTLs 0 bytes File C:\RRbackups\Documents and Settings\Jake 0 bytes File C:\RRbackups\Documents and Settings\Jake\Application Data 0 bytes File C:\RRbackups\Documents and Settings\Jake\Application Data\Lenovo 0 bytes File C:\RRbackups\Documents and Settings\Jake\Application Data\Lenovo\Client Security Solution 0 bytes File C:\RRbackups\Documents and Settings\Jake\Application Data\Lenovo\Client Security Solution\config.ini 85 bytes File C:\RRbackups\Documents and Settings\Jake\Application Data\Lenovo\Client Security Solution\cspContainer.dat 332 bytes File C:\RRbackups\Documents and Settings\Jake\Application Data\Lenovo\Client Security Solution\cssversion.dat 1908 bytes File C:\RRbackups\Documents and Settings\Jake\Application Data\Lenovo\Client Security Solution\encobject.dat 14472 bytes File C:\RRbackups\Documents and Settings\Jake\Application Data\Lenovo\Client Security Solution\enroll.ini 74 bytes File C:\RRbackups\Documents and Settings\Jake\Application Data\Lenovo\Client Security Solution\hibernation.dat 4 bytes File C:\RRbackups\Documents and Settings\Jake\Application Data\Lenovo\Client Security Solution\hwkeys.dat 8496 bytes File C:\RRbackups\Documents and Settings\Jake\Application Data\Lenovo\Client Security Solution\symkeys.dat 1968 bytes File C:\RRbackups\Documents and Settings\Jake\Application Data\Microsoft 0 bytes File C:\RRbackups\Documents and Settings\Jake\Application Data\Microsoft\Crypto 0 bytes File C:\RRbackups\Documents and Settings\Jake\Application Data\Microsoft\Crypto\RSA 0 bytes File C:\RRbackups\Documents and Settings\Jake\Application Data\Microsoft\Crypto\RSA\S-1-5-21-731230423-1672936951-2466430205-1006 0 bytes File C:\RRbackups\Documents and Settings\Jake\Application Data\Microsoft\Crypto\RSA\S-1-5-21-731230423-1672936951-2466430205-1006\49ac1cf87687c5a4c794042acbff288e_ba7b03cd-98c7-4838-aed0-5dae9f7ceecd 2075 bytes File C:\RRbackups\Documents and Settings\Jake\Application Data\Microsoft\Crypto\RSA\S-1-5-21-731230423-1672936951-2466430205-1006\533145ef011ddf5ca3983e2545a902b4_ba7b03cd-98c7-4838-aed0-5dae9f7ceecd 2075 bytes File C:\RRbackups\Documents and Settings\Jake\Application Data\Microsoft\Crypto\RSA\S-1-5-21-731230423-1672936951-2466430205-1006\62a45886e06c7d046ea8b819bec0598a_ba7b03cd-98c7-4838-aed0-5dae9f7ceecd 45 bytes File C:\RRbackups\Documents and Settings\Jake\Application Data\Microsoft\Crypto\RSA\S-1-5-21-731230423-1672936951-2466430205-1006\6b29ae44e85efac3c72ff4d1865d73f1_ba7b03cd-98c7-4838-aed0-5dae9f7ceecd 53 bytes File C:\RRbackups\Documents and Settings\Jake\Application Data\Microsoft\Crypto\RSA\S-1-5-21-731230423-1672936951-2466430205-1006\83aa4cc77f591dfc2374580bbd95f6ba_ba7b03cd-98c7-4838-aed0-5dae9f7ceecd 45 bytes File C:\RRbackups\Documents and Settings\Jake\Application Data\Microsoft\Crypto\RSA\S-1-5-21-731230423-1672936951-2466430205-1006\fd4f7d4f1c1a2ae882a60054b7cae974_ba7b03cd-98c7-4838-aed0-5dae9f7ceecd 45 bytes File C:\RRbackups\Documents and Settings\Jake\Application Data\Microsoft\Protect 0 bytes File C:\RRbackups\Documents and Settings\Jake\Application Data\Microsoft\Protect\CREDHIST 24 bytes File C:\RRbackups\Documents and Settings\Jake\Application Data\Microsoft\Protect\S-1-5-21-2169289929-977620645-425057706-500 0 bytes File C:\RRbackups\Documents and Settings\Jake\Application Data\Microsoft\Protect\S-1-5-21-2169289929-977620645-425057706-500\04cf5de1-2454-4616-badd-4c4fd627aa46 388 bytes File C:\RRbackups\Documents and Settings\Jake\Application Data\Microsoft\Protect\S-1-5-21-2169289929-977620645-425057706-500\Preferred 24 bytes File C:\RRbackups\Documents and Settings\Jake\Application Data\Microsoft\Protect\S-1-5-21-2765152507-3527599572-1303659557-500 0 bytes File C:\RRbackups\Documents and Settings\Jake\Application Data\Microsoft\Protect\S-1-5-21-2765152507-3527599572-1303659557-500\2b38db1a-7241-486b-8718-2825fc1ffc29 388 bytes File C:\RRbackups\Documents and Settings\Jake\Application Data\Microsoft\Protect\S-1-5-21-2765152507-3527599572-1303659557-500\Preferred 24 bytes File C:\RRbackups\Documents and Settings\Jake\Application Data\Microsoft\Protect\S-1-5-21-731230423-1672936951-2466430205-1006 0 bytes File C:\RRbackups\Documents and Settings\Jake\Application Data\Microsoft\Protect\S-1-5-21-731230423-1672936951-2466430205-1006\6ba4d4a8-bb4b-47a2-9f02-72266a87be34 388 bytes File C:\RRbackups\Documents and Settings\Jake\Application Data\Microsoft\Protect\S-1-5-21-731230423-1672936951-2466430205-1006\Preferred 24 bytes File C:\RRbackups\Documents and Settings\Jake\Application Data\Microsoft\SystemCertificates 0 bytes File C:\RRbackups\Documents and Settings\Jake\Application Data\Microsoft\SystemCertificates\My 0 bytes File C:\RRbackups\Documents and Settings\Jake\Application Data\Microsoft\SystemCertificates\My\Certificates 0 bytes File C:\RRbackups\Documents and Settings\Jake\Application Data\Microsoft\SystemCertificates\My\CRLs 0 bytes File C:\RRbackups\Documents and Settings\Jake\Application Data\Microsoft\SystemCertificates\My\CTLs 0 bytes File C:\RRbackups\Documents and Settings\Laura 0 bytes File C:\RRbackups\Documents and Settings\Laura\Application Data 0 bytes File C:\RRbackups\Documents and Settings\Laura\Application Data\Lenovo 0 bytes File C:\RRbackups\Documents and Settings\Laura\Application Data\Lenovo\Client Security Solution 0 bytes File C:\RRbackups\Documents and Settings\Laura\Application Data\Lenovo\Client Security Solution\config.ini 94 bytes File C:\RRbackups\Documents and Settings\Laura\Application Data\Lenovo\Client Security Solution\cspContainer.dat 332 bytes File C:\RRbackups\Documents and Settings\Laura\Application Data\Lenovo\Client Security Solution\cssversion.dat 1908 bytes File C:\RRbackups\Documents and Settings\Laura\Application Data\Lenovo\Client Security Solution\encobject.dat 17688 bytes File C:\RRbackups\Documents and Settings\Laura\Application Data\Lenovo\Client Security Solution\enroll.ini 35 bytes File C:\RRbackups\Documents and Settings\Laura\Application Data\Lenovo\Client Security Solution\hibernation.dat 4 bytes File C:\RRbackups\Documents and Settings\Laura\Application Data\Lenovo\Client Security Solution\hwkeys.dat 10620 bytes File C:\RRbackups\Documents and Settings\Laura\Application Data\Lenovo\Client Security Solution\Laura.pwm 45568 bytes File C:\RRbackups\Documents and Settings\Laura\Application Data\Lenovo\Client Security Solution\Laura.pwm.bak 45584 bytes File C:\RRbackups\Documents and Settings\Laura\Application Data\Lenovo\Client Security Solution\pwdrecovery.dat 1104 bytes File C:\RRbackups\Documents and Settings\Laura\Application Data\Lenovo\Client Security Solution\pwmaction.dat 2340 bytes File C:\RRbackups\Documents and Settings\Laura\Application Data\Lenovo\Client Security Solution\symkeys.dat 1968 bytes File C:\RRbackups\Documents and Settings\Laura\Application Data\Microsoft 0 bytes File C:\RRbackups\Documents and Settings\Laura\Application Data\Microsoft\Crypto 0 bytes File C:\RRbackups\Documents and Settings\Laura\Application Data\Microsoft\Crypto\RSA 0 bytes File C:\RRbackups\Documents and Settings\Laura\Application Data\Microsoft\Crypto\RSA\S-1-5-21-731230423-1672936951-2466430205-1005 0 bytes File C:\RRbackups\Documents and Settings\Laura\Application Data\Microsoft\Crypto\RSA\S-1-5-21-731230423-1672936951-2466430205-1005\49ac1cf87687c5a4c794042acbff288e_ba7b03cd-98c7-4838-aed0-5dae9f7ceecd 2075 bytes File C:\RRbackups\Documents and Settings\Laura\Application Data\Microsoft\Crypto\RSA\S-1-5-21-731230423-1672936951-2466430205-1005\533145ef011ddf5ca3983e2545a902b4_ba7b03cd-98c7-4838-aed0-5dae9f7ceecd 2075 bytes File C:\RRbackups\Documents and Settings\Laura\Application Data\Microsoft\Crypto\RSA\S-1-5-21-731230423-1672936951-2466430205-1005\6b29ae44e85efac3c72ff4d1865d73f1_ba7b03cd-98c7-4838-aed0-5dae9f7ceecd 53 bytes File C:\RRbackups\Documents and Settings\Laura\Application Data\Microsoft\Crypto\RSA\S-1-5-21-731230423-1672936951-2466430205-1005\83aa4cc77f591dfc2374580bbd95f6ba_ba7b03cd-98c7-4838-aed0-5dae9f7ceecd 45 bytes File C:\RRbackups\Documents and Settings\Laura\Application Data\Microsoft\Crypto\RSA\S-1-5-21-731230423-1672936951-2466430205-1005\8f71098770f72c7a67cd8f1151619865_ba7b03cd-98c7-4838-aed0-5dae9f7ceecd 54 bytes File C:\RRbackups\Documents and Settings\Laura\Application Data\Microsoft\Crypto\RSA\S-1-5-21-731230423-1672936951-2466430205-1005\932a2db58c237abd381d22df4c63a04a_ba7b03cd-98c7-4838-aed0-5dae9f7ceecd 87 bytes File C:\RRbackups\Documents and Settings\Laura\Application Data\Microsoft\Crypto\RSA\S-1-5-21-731230423-1672936951-2466430205-1005\dd508fb67e3df5d722d6ce98ff404371_ba7b03cd-98c7-4838-aed0-5dae9f7ceecd 63 bytes File C:\RRbackups\Documents and Settings\Laura\Application Data\Microsoft\Crypto\RSA\S-1-5-21-731230423-1672936951-2466430205-1005\fa654b519dc464a5bea11efa002b41a7_ba7b03cd-98c7-4838-aed0-5dae9f7ceecd 46 bytes File C:\RRbackups\Documents and Settings\Laura\Application Data\Microsoft\Protect 0 bytes File C:\RRbackups\Documents and Settings\Laura\Application Data\Microsoft\Protect\CREDHIST 160 bytes File C:\RRbackups\Documents and Settings\Laura\Application Data\Microsoft\Protect\S-1-5-21-2169289929-977620645-425057706-500 0 bytes File C:\RRbackups\Documents and Settings\Laura\Application Data\Microsoft\Protect\S-1-5-21-2169289929-977620645-425057706-500\04cf5de1-2454-4616-badd-4c4fd627aa46 388 bytes File C:\RRbackups\Documents and Settings\Laura\Application Data\Microsoft\Protect\S-1-5-21-2169289929-977620645-425057706-500\Preferred 24 bytes File C:\RRbackups\Documents and Settings\Laura\Application Data\Microsoft\Protect\S-1-5-21-2765152507-3527599572-1303659557-500 0 bytes File C:\RRbackups\Documents and Settings\Laura\Application Data\Microsoft\Protect\S-1-5-21-2765152507-3527599572-1303659557-500\2b38db1a-7241-486b-8718-2825fc1ffc29 388 bytes File C:\RRbackups\Documents and Settings\Laura\Application Data\Microsoft\Protect\S-1-5-21-2765152507-3527599572-1303659557-500\Preferred 24 bytes File C:\RRbackups\Documents and Settings\Laura\Application Data\Microsoft\Protect\S-1-5-21-731230423-1672936951-2466430205-1005 0 bytes File C:\RRbackups\Documents and Settings\Laura\Application Data\Microsoft\Protect\S-1-5-21-731230423-1672936951-2466430205-1005\1de70211-2b18-4247-8a8d-cb86f8af1d77 388 bytes File C:\RRbackups\Documents and Settings\Laura\Application Data\Microsoft\Protect\S-1-5-21-731230423-1672936951-2466430205-1005\a3111042-6f8d-42fc-ba32-0cb7b60ce221 388 bytes File C:\RRbackups\Documents and Settings\Laura\Application Data\Microsoft\Protect\S-1-5-21-731230423-1672936951-2466430205-1005\Preferred 24 bytes File C:\RRbackups\Documents and Settings\Laura\Application Data\Microsoft\SystemCertificates 0 bytes File C:\RRbackups\Documents and Settings\Laura\Application Data\Microsoft\SystemCertificates\My 0 bytes File C:\RRbackups\Documents and Settings\Laura\Application Data\Microsoft\SystemCertificates\My\Certificates 0 bytes File C:\RRbackups\Documents and Settings\Laura\Application Data\Microsoft\SystemCertificates\My\CRLs 0 bytes File C:\RRbackups\Documents and Settings\Laura\Application Data\Microsoft\SystemCertificates\My\CTLs 0 bytes File C:\RRbackups\Documents and Settings\LocalService 0 bytes File C:\RRbackups\Documents and Settings\LocalService\Application Data 0 bytes File C:\RRbackups\Documents and Settings\LocalService\Application Data\Microsoft 0 bytes File C:\RRbackups\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates 0 bytes File C:\RRbackups\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\My 0 bytes File C:\RRbackups\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\My\Certificates 0 bytes File C:\RRbackups\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\My\CRLs 0 bytes File C:\RRbackups\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\My\CTLs 0 bytes File C:\RRbackups\Documents and Settings\NetworkService 0 bytes File C:\RRbackups\Documents and Settings\NetworkService\Application Data 0 bytes File C:\RRbackups\Documents and Settings\NetworkService\Application Data\Microsoft 0 bytes File C:\RRbackups\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates 0 bytes File C:\RRbackups\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\My 0 bytes File C:\RRbackups\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\My\Certificates 0 bytes File C:\RRbackups\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\My\CRLs 0 bytes File C:\RRbackups\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\My\CTLs 0 bytes File C:\RRbackups\Documents and Settings\Taylor Jane Princess 0 bytes File C:\RRbackups\Documents and Settings\Taylor Jane Princess\Application Data 0 bytes File C:\RRbackups\Documents and Settings\Taylor Jane Princess\Application Data\Lenovo 0 bytes File C:\RRbackups\Documents and Settings\Taylor Jane Princess\Application Data\Lenovo\Client Security Solution 0 bytes File C:\RRbackups\Documents and Settings\Taylor Jane Princess\Application Data\Lenovo\Client Security Solution\config.ini 94 bytes File C:\RRbackups\Documents and Settings\Taylor Jane Princess\Application Data\Lenovo\Client Security Solution\cspContainer.dat 332 bytes File C:\RRbackups\Documents and Settings\Taylor Jane Princess\Application Data\Lenovo\Client Security Solution\cssversion.dat 1908 bytes File C:\RRbackups\Documents and Settings\Taylor Jane Princess\Application Data\Lenovo\Client Security Solution\encobject.dat 17688 bytes File C:\RRbackups\Documents and Settings\Taylor Jane Princess\Application Data\Lenovo\Client Security Solution\enroll.ini 74 bytes File C:\RRbackups\Documents and Settings\Taylor Jane Princess\Application Data\Lenovo\Client Security Solution\hibernation.dat 4 bytes File C:\RRbackups\Documents and Settings\Taylor Jane Princess\Application Data\Lenovo\Client Security Solution\hwkeys.dat 10620 bytes File C:\RRbackups\Documents and Settings\Taylor Jane Princess\Application Data\Lenovo\Client Security Solution\pwdrecovery.dat 1104 bytes File C:\RRbackups\Documents and Settings\Taylor Jane Princess\Application Data\Lenovo\Client Security Solution\symkeys.dat 1968 bytes File C:\RRbackups\Documents and Settings\Taylor Jane Princess\Application Data\Microsoft 0 bytes File C:\RRbackups\Documents and Settings\Taylor Jane Princess\Application Data\Microsoft\Crypto 0 bytes File C:\RRbackups\Documents and Settings\Taylor Jane Princess\Application Data\Microsoft\Crypto\RSA 0 bytes File C:\RRbackups\Documents and Settings\Taylor Jane Princess\Application Data\Microsoft\Crypto\RSA\S-1-5-21-731230423-1672936951-2466430205-1008 0 bytes File C:\RRbackups\Documents and Settings\Taylor Jane Princess\Application Data\Microsoft\Crypto\RSA\S-1-5-21-731230423-1672936951-2466430205-1008\49ac1cf87687c5a4c794042acbff288e_ba7b03cd-98c7-4838-aed0-5dae9f7ceecd 2075 bytes File C:\RRbackups\Documents and Settings\Taylor Jane Princess\Application Data\Microsoft\Crypto\RSA\S-1-5-21-731230423-1672936951-2466430205-1008\533145ef011ddf5ca3983e2545a902b4_ba7b03cd-98c7-4838-aed0-5dae9f7ceecd 2075 bytes File C:\RRbackups\Documents and Settings\Taylor Jane Princess\Application Data\Microsoft\Crypto\RSA\S-1-5-21-731230423-1672936951-2466430205-1008\e1647f93d257d58ed3620762c897b454_ba7b03cd-98c7-4838-aed0-5dae9f7ceecd 61 bytes File C:\RRbackups\Documents and Settings\Taylor Jane Princess\Application Data\Microsoft\Protect 0 bytes File C:\RRbackups\Documents and Settings\Taylor Jane Princess\Application Data\Microsoft\Protect\CREDHIST 24 bytes File C:\RRbackups\Documents and Settings\Taylor Jane Princess\Application Data\Microsoft\Protect\S-1-5-21-2169289929-977620645-425057706-500 0 bytes File C:\RRbackups\Documents and Settings\Taylor Jane Princess\Application Data\Microsoft\Protect\S-1-5-21-2169289929-977620645-425057706-500\04cf5de1-2454-4616-badd-4c4fd627aa46 388 bytes File C:\RRbackups\Documents and Settings\Taylor Jane Princess\Application Data\Microsoft\Protect\S-1-5-21-2169289929-977620645-425057706-500\Preferred 24 bytes File C:\RRbackups\Documents and Settings\Taylor Jane Princess\Application Data\Microsoft\Protect\S-1-5-21-2765152507-3527599572-1303659557-500 0 bytes File C:\RRbackups\Documents and Settings\Taylor Jane Princess\Application Data\Microsoft\Protect\S-1-5-21-2765152507-3527599572-1303659557-500\2b38db1a-7241-486b-8718-2825fc1ffc29 388 bytes File C:\RRbackups\Documents and Settings\Taylor Jane Princess\Application Data\Microsoft\Protect\S-1-5-21-2765152507-3527599572-1303659557-500\Preferred 24 bytes File C:\RRbackups\Documents and Settings\Taylor Jane Princess\Application Data\Microsoft\Protect\S-1-5-21-731230423-1672936951-2466430205-1008 0 bytes File C:\RRbackups\Documents and Settings\Taylor Jane Princess\Application Data\Microsoft\Protect\S-1-5-21-731230423-1672936951-2466430205-1008\b2f1e445-6589-4499-8bf9-e9454110cdeb 388 bytes File C:\RRbackups\Documents and Settings\Taylor Jane Princess\Application Data\Microsoft\Protect\S-1-5-21-731230423-1672936951-2466430205-1008\Preferred 24 bytes File C:\RRbackups\Documents and Settings\Taylor Jane Princess\Application Data\Microsoft\SystemCertificates 0 bytes File C:\RRbackups\Documents and Settings\Taylor Jane Princess\Application Data\Microsoft\SystemCertificates\My 0 bytes File C:\RRbackups\Documents and Settings\Taylor Jane Princess\Application Data\Microsoft\SystemCertificates\My\Certificates 0 bytes File C:\RRbackups\Documents and Settings\Taylor Jane Princess\Application Data\Microsoft\SystemCertificates\My\CRLs 0 bytes File C:\RRbackups\Documents and Settings\Taylor Jane Princess\Application Data\Microsoft\SystemCertificates\My\CTLs 0 bytes File C:\RRbackups\FR 0 bytes File C:\RRbackups\FR\KernelFileDigest.dat 17415 bytes File C:\RRbackups\FR\UF 0 bytes File C:\RRbackups\FR\UF\boot.ini 211 bytes File C:\RRbackups\FR\UF\documents and settings 0 bytes File C:\RRbackups\FR\UF\documents and settings\default user 0 bytes File C:\RRbackups\FR\UF\documents and settings\default user\ntuser.dat 786432 bytes File C:\RRbackups\FR\UF\NTDETECT.COM 47564 bytes File C:\RRbackups\FR\UF\NTLDR 250048 bytes File C:\RRbackups\FR\UF\WINDOWS 0 bytes File C:\RRbackups\FR\UF\WINDOWS\explorer.exe 1033728 bytes executable File C:\RRbackups\FR\UF\WINDOWS\Fonts 0 bytes File C:\RRbackups\FR\UF\WINDOWS\Fonts\mangal.ttf 143864 bytes File C:\RRbackups\FR\UF\WINDOWS\Fonts\marlett.ttf 24124 bytes File C:\RRbackups\FR\UF\WINDOWS\Fonts\micross.ttf 461672 bytes File C:\RRbackups\FR\UF\WINDOWS\Fonts\mvboli.ttf 40500 bytes File C:\RRbackups\FR\UF\WINDOWS\Fonts\vgaoem.fon 5168 bytes File C:\RRbackups\FR\UF\WINDOWS\system32 0 bytes File C:\RRbackups\FR\UF\WINDOWS\system32\advapi32.dll 617472 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\advpack.dll 128512 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\authz.dll 62464 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\autochk.exe 588800 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\basesrv.dll 52736 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\bootvid.dll 12288 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\browseui.dll 1025024 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\chkdsk.exe 11776 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\cmd.exe 389120 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\comctl32.dll 617472 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\comdlg32.dll 276992 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\config 0 bytes File C:\RRbackups\FR\UF\WINDOWS\system32\config\default 262144 bytes File C:\RRbackups\FR\UF\WINDOWS\system32\config\SAM 262144 bytes File C:\RRbackups\FR\UF\WINDOWS\system32\config\SECURITY 262144 bytes File C:\RRbackups\FR\UF\WINDOWS\system32\config\software 19398656 bytes File C:\RRbackups\FR\UF\WINDOWS\system32\config\system 5505024 bytes File C:\RRbackups\FR\UF\WINDOWS\system32\config\userdiff 262144 bytes File C:\RRbackups\FR\UF\WINDOWS\system32\crypt32.dll 599040 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\cryptdll.dll 33280 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\cryptui.dll 512512 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\cscdll.dll 101888 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\csrsrv.dll 32256 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\csrss.exe 6144 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\c_1252.nls 66082 bytes File C:\RRbackups\FR\UF\WINDOWS\system32\c_936.nls 196642 bytes File C:\RRbackups\FR\UF\WINDOWS\system32\dnsapi.dll 147968 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\doskey.exe 10752 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\dpcdll.dll 102912 bytes File C:\RRbackups\FR\UF\WINDOWS\system32\drivers 0 bytes File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\acpi.sys 187776 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\acpiec.sys 11648 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\afd.sys 138496 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\amdk6.sys 37376 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\amdk7.sys 37760 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\arp1394.sys 60800 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\asyncmac.sys 14336 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\atapi.sys 96512 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\atmarpc.sys 59904 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\atmepvc.sys 31360 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\atmlane.sys 55808 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\atmuni.sys 352256 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\audstub.sys 3072 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\beep.sys 4224 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\bridge.sys 71552 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\cbidf2k.sys 13952 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\cdaudio.sys 18688 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\cdfs.sys 63744 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\cdrom.sys 62976 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\classpnp.sys 49536 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\cpqdap01.sys 11776 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\crusoe.sys 36736 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\disk.sys 36352 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\diskdump.sys 14208 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\dmboot.sys 799744 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\dmio.sys 153344 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\dmload.sys 5888 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\dxapi.sys 10496 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\dxg.sys 71168 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\dxgthk.sys 3328 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\fastfat.sys 143744 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\fdc.sys 27392 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\fips.sys 44544 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\flpydisk.sys 20480 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\fltMgr.sys 129792 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\fsvga.sys 12160 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\fs_rec.sys 7936 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\ftdisk.sys 125056 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\hidclass.sys 36864 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\hidparse.sys 24960 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\http.sys 264832 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\i8042prt.sys 52480 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\imapi.sys 42112 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\intelppm.sys 36352 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\ip6fw.sys 36608 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\ipfltdrv.sys 32896 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\ipinip.sys 20864 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\ipnat.sys 152832 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\ipsec.sys 75264 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\irenum.sys 11264 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\isapnp.sys 37248 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\kbdclass.sys 24576 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\ks.sys 141056 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\ksecdd.sys 92288 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\mcd.sys 7680 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\mf.sys 63744 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\modem.sys 30080 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\mouclass.sys 23040 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\mountmgr.sys 42368 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\mrxdav.sys 180608 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\mrxsmb.sys 455296 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\msfs.sys 19072 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\msgpc.sys 35072 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\mssmbios.sys 15488 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\mup.sys 105344 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\ndis.sys 182656 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\ndistapi.sys 10112 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\ndisuio.sys 14592 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\ndiswan.sys 91520 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\ndproxy.sys 40576 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\netbios.sys 34688 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\netbt.sys 162816 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\nic1394.sys 61824 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\nikedrv.sys 12032 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\npfs.sys 30848 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\ntfs.sys 574976 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\null.sys 2944 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\nwlnkflt.sys 12416 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\nwlnkfwd.sys 32512 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\nwlnkipx.sys 88320 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\nwlnknb.sys 63232 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\nwlnkspx.sys 55936 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\oprghdlr.sys 3456 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\p3.sys 42752 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\parport.sys 80128 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\partmgr.sys 19712 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\parvdm.sys 6784 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\pci.sys 68224 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\pciide.sys 3328 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\pciidex.sys 24960 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\pcmcia.sys 120192 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\processr.sys 35840 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\ptilink.sys 17792 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\rasacd.sys 8832 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\rasl2tp.sys 51328 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\raspppoe.sys 41472 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\raspptp.sys 48384 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\raspti.sys 16512 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\rawwan.sys 34432 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\rdbss.sys 175744 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\rdpcdd.sys 4224 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\rdpdr.sys 196224 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\rdpwd.sys 139656 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\redbook.sys 57600 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\rio8drv.sys 12032 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\riodrv.sys 12032 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\RMCast.sys 203136 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\rndismp.sys 30592 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\rootmdm.sys 5888 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\scsiport.sys 96384 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\sdbus.sys 79232 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\cinemst2.sys 262528 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\gm.dls 3440660 bytes File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\mnmdd.sys 4224 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\nmnt.sys 40320 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\psched.sys 69120 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\secdrv.sys 20480 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\tsbvcap.sys 21376 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\serenum.sys 15744 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\serial.sys 64512 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\sffdisk.sys 11904 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\sffp_sd.sys 11008 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\sfloppy.sys 11392 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\smclib.sys 14592 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\sonydcam.sys 25344 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\sr.sys 73472 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\srv.sys 333952 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\stream.sys 49408 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\swenum.sys 4352 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\tape.sys 14976 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\tcpip.sys 361600 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\tcpip6.sys 225856 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\tdi.sys 19072 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\tdpipe.sys 12040 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\tdtcp.sys 21896 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\termdd.sys 40840 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\tosdvd.sys 51712 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\tunmp.sys 12288 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\udfs.sys 66048 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\update.sys 384768 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\usb8023.sys 12800 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\usbcamd.sys 25600 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\usbcamd2.sys 25728 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\usbd.sys 4736 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\usbehci.sys 30208 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\usbhub.sys 59520 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\usbintel.sys 15872 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\usbport.sys 144128 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\usbstor.sys 26368 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\usbuhci.sys 20608 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\vdmindvd.sys 58112 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\vga.sys 20992 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\videoprt.sys 81664 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\volsnap.sys 52352 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\wanarp.sys 34560 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\wmilib.sys 4352 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\drivers\ws2ifsl.sys 12032 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\duser.dll 304128 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\eventlog.dll 56320 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\faultrep.dll 80384 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\feclient.dll 21504 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\filemgmt.dll 337920 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\fldrclnr.dll 87552 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\fltlib.dll 16896 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\fmifs.dll 16384 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\fontext.dll 382976 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\fontsub.dll 80896 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\framebuf.dll 9344 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\fsusd.dll 81408 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\fwcfg.dll 60416 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\gdi32.dll 286720 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\hal.dll 134400 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\imagehlp.dll 144384 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\imm32.dll 110080 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\iphlpapi.dll 94720 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\kdcom.dll 7040 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\kernel32.dll 989696 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\licdll.dll 423936 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\locale.nls 265948 bytes File C:\RRbackups\FR\UF\WINDOWS\system32\logonui.exe 514560 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\lsasrv.dll 729088 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\lsass.exe 13312 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\lz32.dll 2560 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\l_intl.nls 7046 bytes File C:\RRbackups\FR\UF\WINDOWS\system32\mfc42.dll 1028096 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\mfc42u.dll 981760 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\mmc.exe 1414656 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\mobsync.dll 207360 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\msasn1.dll 57344 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\msgina.dll 997376 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\msimg32.dll 4608 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\msprivs.dll 48128 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\msv1_0.dll 132608 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\msvcp60.dll 413696 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\msvcrt.dll 343040 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\ncobjapi.dll 36352 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\nddeapi.dll 17920 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\netapi32.dll 337408 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\netrap.dll 11776 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\notepad.exe 69120 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\ntdll.dll 714752 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\ntdsapi.dll 67072 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\ntoskrnl.exe 2145280 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\ntsdexts.dll 36864 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\odbc32.dll 249856 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\odbcint.dll 94208 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\oembios.dat 4547 bytes File C:\RRbackups\FR\UF\WINDOWS\system32\oembios.sig 7208 bytes File C:\RRbackups\FR\UF\WINDOWS\system32\ole32.dll 1287168 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\oleacc.dll 163328 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\oleaccrc.dll 16896 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\oleaut32.dll 551936 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\profmap.dll 27648 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\psapi.dll 23040 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\regapi.dll 49664 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\rpcrt4.dll 584704 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\rpcss.dll 401408 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\rsaenh.dll 208384 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\rundll32.exe 33280 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\samlib.dll 64000 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\samsrv.dll 415744 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\scesrv.dll 314880 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\secupd.dat 4569 bytes File C:\RRbackups\FR\UF\WINDOWS\system32\secupd.sig 7208 bytes File C:\RRbackups\FR\UF\WINDOWS\system32\services.exe 110592 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\setupapi.dll 985088 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\sfc.dll 5120 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\sfc_os.dll 140288 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\shdocvw.dll 1499136 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\shell32.dll 8461312 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\shfolder.dll 25088 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\shgina.dll 68096 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\shlwapi.dll 474112 bytes File C:\RRbackups\FR\UF\WINDOWS\system32\shsvcs.dll 135168 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\smss.exe 50688 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\sortkey.nls 262148 bytes File C:\RRbackups\FR\UF\WINDOWS\system32\sorttbls.nls 23044 bytes File C:\RRbackups\FR\UF\WINDOWS\system32\svchost.exe 14336 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\sxs.dll 713216 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\umpnpmgr.dll 123392 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\unicode.nls 89588 bytes File C:\RRbackups\FR\UF\WINDOWS\system32\usbmon.dll 16896 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\ctype.nls 8386 bytes File C:\RRbackups\FR\UF\WINDOWS\system32\ftsrch.dll 176128 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\mpr.dll 59904 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\oembios.bin 13107200 bytes File C:\RRbackups\FR\UF\WINDOWS\system32\secur32.dll 56832 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\usbui.dll 74240 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\user32.dll 578560 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\userenv.dll 727040 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\userinit.exe 26112 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\uxtheme.dll 218624 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\version.dll 18944 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\vga.dll 9344 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\vga.drv 2176 bytes File C:\RRbackups\FR\UF\WINDOWS\system32\watchdog.sys 17664 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\win32k.sys 1846784 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\wininet.dll 914944 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\winlogon.exe 507904 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\winmm.dll 176128 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\winspool.drv 146432 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\winspool.exe 2112 bytes File C:\RRbackups\FR\UF\WINDOWS\system32\winsrv.dll 293376 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\winsta.dll 53760 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\winstrm.dll 18944 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\wintrust.dll 176640 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\wldap32.dll 172032 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\ws2help.dll 19968 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\ws2_32.dll 82432 bytes executable File C:\RRbackups\FR\UF\WINDOWS\system32\wsock32.dll 22528 bytes executable File C:\RRbackups\FR\UF\WINDOWS\WinSxS 0 bytes File C:\RRbackups\FR\UF\WINDOWS\WinSxS\Manifests 0 bytes File C:\RRbackups\FR\UF\WINDOWS\WinSxS\Manifests\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.0.0_x-ww_ff9986d7.cat 7232 bytes File C:\RRbackups\FR\UF\WINDOWS\WinSxS\Manifests\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.0.0_x-ww_ff9986d7.Manifest 1819 bytes File C:\RRbackups\FR\UF\WINDOWS\WinSxS\Manifests\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a.cat 7238 bytes File C:\RRbackups\FR\UF\WINDOWS\WinSxS\Manifests\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a.Manifest 1784 bytes File C:\RRbackups\FR\UF\WINDOWS\WinSxS\Manifests\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9.cat 7433 bytes File C:\RRbackups\FR\UF\WINDOWS\WinSxS\Manifests\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9.Manifest 1862 bytes File C:\RRbackups\FR\UF\WINDOWS\WinSxS\Manifests\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.0.0_x-ww_2726e76a.Manifest 494 bytes File C:\RRbackups\FR\UF\WINDOWS\WinSxS\Manifests\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.2180_x-ww_b2505ed9.cat 7433 bytes File C:\RRbackups\FR\UF\WINDOWS\WinSxS\Manifests\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.2180_x-ww_b2505ed9.Manifest 500 bytes File C:\RRbackups\FR\UF\WINDOWS\WinSxS\Manifests\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.0.0_x-ww_8d353f13.cat 7236 bytes File C:\RRbackups\FR\UF\WINDOWS\WinSxS\Manifests\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.0.0_x-ww_8d353f13.Manifest 391 bytes File C:\RRbackups\FR\UF\WINDOWS\WinSxS\Manifests\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82.cat 7431 bytes File C:\RRbackups\FR\UF\WINDOWS\WinSxS\Manifests\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82.Manifest 397 bytes File C:\RRbackups\FR\UF\WINDOWS\WinSxS\Manifests\x86_Microsoft.Windows.Networking.Dxmrtp_6595b64144ccf1df_5.2.2.3_x-ww_468466a7.cat 10678 bytes File C:\RRbackups\FR\UF\WINDOWS\WinSxS\Manifests\x86_Microsoft.Windows.Networking.RtcDll_6595b64144ccf1df_5.2.2.3_x-ww_d6bd8b95.cat 10678 bytes File C:\RRbackups\FR\UF\WINDOWS\WinSxS\Manifests\x86_Microsoft.Windows.Networking.RtcDll_6595b64144ccf1df_5.2.2.3_x-ww_d6bd8b95.Manifest 1187 bytes File C:\RRbackups\FR\UF\WINDOWS\WinSxS\Manifests\x86_Microsoft.Windows.SystemCompatible_6595b64144ccf1df_5.1.0.0_x-ww_fc342b0b.cat 7236 bytes File C:\RRbackups\FR\UF\WINDOWS\WinSxS\Manifests\x86_Microsoft.Windows.SystemCompatible_6595b64144ccf1df_5.1.0.0_x-ww_fc342b0b.Manifest 640 bytes File C:\RRbackups\FR\UF\WINDOWS\WinSxS\Manifests\x86_Microsoft.Windows.SystemCompatible_6595b64144ccf1df_5.1.2600.2000_x-ww_bcc9a281.cat 10680 bytes File C:\RRbackups\FR\UF\WINDOWS\WinSxS\Manifests\x86_Microsoft.Windows.SystemCompatible_6595b64144ccf1df_5.1.2600.2000_x-ww_bcc9a281.Manifest 1237 bytes File C:\RRbackups\FR\UF\WINDOWS\WinSxS\Manifests\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.0.0_x-ww_2726e76a.cat 7238 bytes File C:\RRbackups\FR\UF\WINDOWS\WinSxS\Manifests\x86_Microsoft.Windows.Networking.Dxmrtp_6595b64144ccf1df_5.2.2.3_x-ww_468466a7.Manifest 1883 bytes File C:\RRbackups\FR\UF\WINDOWS\WinSxS\Policies 0 bytes File C:\RRbackups\FR\UF\WINDOWS\WinSxS\Policies\x86_policy.1.0.Microsoft.Windows.GdiPlus_6595b64144ccf1df_x-ww_4e8510ac 0 bytes File C:\RRbackups\FR\UF\WINDOWS\WinSxS\Policies\x86_policy.1.0.Microsoft.Windows.GdiPlus_6595b64144ccf1df_x-ww_4e8510ac\1.0.2600.2180.cat 7431 bytes File C:\RRbackups\FR\UF\WINDOWS\WinSxS\Policies\x86_policy.1.0.Microsoft.Windows.GdiPlus_6595b64144ccf1df_x-ww_4e8510ac\1.0.2600.2180.Policy 605 bytes File C:\RRbackups\FR\UF\WINDOWS\WinSxS\Policies\x86_policy.5.1.Microsoft.Windows.SystemCompatible_6595b64144ccf1df_x-ww_a0111510 0 bytes File C:\RRbackups\FR\UF\WINDOWS\WinSxS\Policies\x86_policy.5.1.Microsoft.Windows.SystemCompatible_6595b64144ccf1df_x-ww_a0111510\5.1.2600.2000.cat 10680 bytes File C:\RRbackups\FR\UF\WINDOWS\WinSxS\Policies\x86_policy.5.1.Microsoft.Windows.SystemCompatible_6595b64144ccf1df_x-ww_a0111510\5.1.2600.2000.Policy 625 bytes File C:\RRbackups\FR\UF\WINDOWS\WinSxS\Policies\x86_policy.5.2.Microsoft.Windows.Networking.Dxmrtp_6595b64144ccf1df_x-ww_362e60dd 0 bytes File C:\RRbackups\FR\UF\WINDOWS\WinSxS\Policies\x86_policy.5.2.Microsoft.Windows.Networking.Dxmrtp_6595b64144ccf1df_x-ww_362e60dd\5.2.2.3.cat 10678 bytes File C:\RRbackups\FR\UF\WINDOWS\WinSxS\Policies\x86_policy.5.2.Microsoft.Windows.Networking.Dxmrtp_6595b64144ccf1df_x-ww_362e60dd\5.2.2.3.Policy 641 bytes File C:\RRbackups\FR\UF\WINDOWS\WinSxS\Policies\x86_policy.5.2.Microsoft.Windows.Networking.Rtcdll_6595b64144ccf1df_x-ww_c7b7206f 0 bytes File C:\RRbackups\FR\UF\WINDOWS\WinSxS\Policies\x86_policy.5.2.Microsoft.Windows.Networking.Rtcdll_6595b64144ccf1df_x-ww_c7b7206f\5.2.2.3.cat 10678 bytes File C:\RRbackups\FR\UF\WINDOWS\WinSxS\Policies\x86_policy.5.2.Microsoft.Windows.Networking.Rtcdll_6595b64144ccf1df_x-ww_c7b7206f\5.2.2.3.Policy 641 bytes File C:\RRbackups\FR\UF\WINDOWS\WinSxS\Policies\x86_policy.6.0.Microsoft.Windows.Common-Controls_6595b64144ccf1df_x-ww_5ddad775 0 bytes File C:\RRbackups\FR\UF\WINDOWS\WinSxS\Policies\x86_policy.6.0.Microsoft.Windows.Common-Controls_6595b64144ccf1df_x-ww_5ddad775\6.0.2600.2180.cat 7429 bytes File C:\RRbackups\FR\UF\WINDOWS\WinSxS\Policies\x86_policy.6.0.Microsoft.Windows.Common-Controls_6595b64144ccf1df_x-ww_5ddad775\6.0.2600.2180.Policy 621 bytes File C:\RRbackups\FR\UF\WINDOWS\WinSxS\Policies\x86_policy.7.0.Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_x-ww_a317e4b3 0 bytes File C:\RRbackups\FR\UF\WINDOWS\WinSxS\Policies\x86_policy.7.0.Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_x-ww_a317e4b3\7.0.2600.2180.cat 7433 bytes File C:\RRbackups\FR\UF\WINDOWS\WinSxS\Policies\x86_policy.7.0.Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_x-ww_a317e4b3\7.0.2600.2180.Policy 623 bytes File C:\RRbackups\FR\UF\WINDOWS\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.0.0_x-ww_ff9986d7 0 bytes File C:\RRbackups\FR\UF\WINDOWS\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.0.0_x-ww_ff9986d7\atl.dll 74802 bytes executable File C:\RRbackups\FR\UF\WINDOWS\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.0.0_x-ww_ff9986d7\mfc42.dll 995383 bytes executable File C:\RRbackups\FR\UF\WINDOWS\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.0.0_x-ww_ff9986d7\mfc42u.dll 995384 bytes executable File C:\RRbackups\FR\UF\WINDOWS\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.0.0_x-ww_ff9986d7\msvcp60.dll 401462 bytes executable File C:\RRbackups\FR\UF\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a 0 bytes File C:\RRbackups\FR\UF\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a\comctl32.dll 921088 bytes executable File C:\RRbackups\FR\UF\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9 0 bytes File C:\RRbackups\FR\UF\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll 1050624 bytes executable File C:\RRbackups\FR\UF\WINDOWS\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.0.0_x-ww_2726e76a 0 bytes File C:\RRbackups\FR\UF\WINDOWS\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.0.0_x-ww_2726e76a\msvcirt.dll 50688 bytes executable File C:\RRbackups\FR\UF\WINDOWS\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.2180_x-ww_b2505ed9 0 bytes File C:\RRbackups\FR\UF\WINDOWS\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.2180_x-ww_b2505ed9\msvcirt.dll 54784 bytes executable File C:\RRbackups\FR\UF\WINDOWS\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.2180_x-ww_b2505ed9\msvcrt.dll 343040 bytes executable File C:\RRbackups\FR\UF\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.0.0_x-ww_8d353f13 0 bytes File C:\RRbackups\FR\UF\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.0.0_x-ww_8d353f13\GdiPlus.dll 1700352 bytes executable File C:\RRbackups\FR\UF\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82 0 bytes File C:\RRbackups\FR\UF\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82\GdiPlus.dll 1712128 bytes executable File C:\RRbackups\FR\UF\WINDOWS\WinSxS\x86_Microsoft.Windows.Networking.Dxmrtp_6595b64144ccf1df_5.2.2.3_x-ww_468466a7 0 bytes File C:\RRbackups\FR\UF\WINDOWS\WinSxS\x86_Microsoft.Windows.Networking.Dxmrtp_6595b64144ccf1df_5.2.2.3_x-ww_468466a7\dxmrtp.dll 853504 bytes executable File C:\RRbackups\FR\UF\WINDOWS\WinSxS\x86_Microsoft.Windows.Networking.RtcDll_6595b64144ccf1df_5.2.2.3_x-ww_d6bd8b95 0 bytes File C:\RRbackups\FR\UF\WINDOWS\WinSxS\x86_Microsoft.Windows.Networking.RtcDll_6595b64144ccf1df_5.2.2.3_x-ww_d6bd8b95\rtcdll.dll 991232 bytes executable File C:\RRbackups\FR\UpdatingFiles.dat 17 bytes File C:\RRbackups\SIS 0 bytes File C:\RRbackups\SIS\C 0 bytes File C:\RRbackups\SIS\C\0 0 bytes File C:\RRbackups\SIS\C\0\Data0 84639 bytes File C:\RRbackups\SIS\C\0\HashFile 6 bytes File C:\RRbackups\SIS\C\0\TOCFile 610 bytes File C:\RRbackups\SIS\C\0\~HashFile 6 bytes File C:\RRbackups\SIS\C\0\~TOCFile 610 bytes —- EOF - GMER 1.0.15 —-
Post #5
Hi,

i see you have already run ComboFix, please copy/paste the log which can be found in the C:\ComboFix folder. Combofix.txt.

NEXT

Please reset IE

  • Go to Start > Control Panel, and choose Network Connections.
  • Right click on your default connection, usually Local Area Connection for cable and DSL or Dial-up Connection if you are using Dial-up, and choose Properties.
  • Click the Networking tab
  • Double-click on the Internet Protocol (TCP/IP) item.
  • Write down the settings in case you should need to change them back.
  • Select the radio button that says "Obtain DNS servers automatically".
  • Click OK twice to get out of the properties screen and restart your computer.
  • If not prompted to reboot go ahead and reboot manually.

In I.E.

  • Check internet options settings.
  • Tools > Internet Options > Connections
  • LAN settings
  • Choose "automatically detect settings"
  • uncheck both proxy settings boxes

NEXT

Using Internet Explorer or Firefox, visit Kaspersky On-line Scanner

1. Click Accept, when prompted to download and install the program files and database of malware definitions.
2. To optimize scanning time and produce a more sensible report for review:
  • Close any open programs
  • Turn off the real time scanner of any existing antivirus program while performing the online scan
3. Click Run at the Security prompt.
The program will then begin downloading and installing and will also update the database.
Please be patient as this can take several minutes.
  • Once the update is complete, click on My Computer under the green Scan bar to the left to start the scan.
  • Once the scan is complete, it will display if your system has been infected. It does not provide an option to clean/disinfect. We only require a report from it.
  • Do NOT be alarmed by what you see in the report. Many of the finds have likely been quarantined.
  • Click View scan report at the bottom.

    [external image: Posted Image]
  • Click the Save as Text button to save the file to your desktop so that you may post it in your next reply
Post #6
ComboFix 09-05-30.03 - Laura 05/30/2009 18:33.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1976.1306 [GMT -5:00]
Running from: c:\documents and settings\[removed]\Desktop\ComboFix1.exe
AV: AVG Anti-Virus *On-access scanning disabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
.

((((((((((((((((((((((((( Files Created from 2009-04-28 to 2009-05-30 )))))))))))))))))))))))))))))))
.

2009-05-30 20:12 . 2009-05-30 20:12 ——– d—–w c:\documents and settings\Jake\Application Data\Malwarebytes
2009-05-29 18:38 . 2009-05-29 18:38 ——– d-sh–w c:\documents and settings\Jake\IECompatCache
2009-05-29 18:37 . 2009-05-29 18:37 ——– d-sh–w c:\documents and settings\Jake\PrivacIE
2009-05-29 18:37 . 2009-05-29 18:37 ——– d-sh–w c:\documents and settings\Jake\IETldCache
2009-05-29 00:32 . 2009-05-29 00:35 ——– d—–w c:\documents and settings\Laura\.SunDownloadManager
2009-05-28 23:28 . 2009-05-28 23:28 ——– d—–w c:\documents and settings\Laura\Application Data\Uniblue
2009-05-28 23:21 . 2009-05-28 23:21 ——– d-sh–w c:\documents and settings\Laura\IECompatCache
2009-05-28 23:19 . 2009-05-28 23:19 ——– d-sh–w c:\documents and settings\Laura\PrivacIE
2009-05-28 23:17 . 2009-05-28 23:17 ——– d-sh–w c:\documents and settings\Laura\IETldCache
2009-05-28 23:10 . 2009-05-28 23:10 ——– d—–w c:\windows\ie8updates
2009-05-28 23:09 . 2009-05-28 23:09 ——– dc-h–w c:\windows\ie8
2009-05-28 23:07 . 2009-05-12 05:11 102912 ——w c:\windows\system32\dllcache\iecompat.dll
2009-05-24 20:05 . 2009-05-24 20:05 ——– d—–w c:\documents and settings\Laura\Application Data\Malwarebytes
2009-05-24 20:05 . 2009-04-06 20:32 15504 ——w c:\windows\system32\drivers\mbam.sys
2009-05-24 20:05 . 2009-04-06 20:32 38496 ——w c:\windows\system32\drivers\mbamswissarmy.sys
2009-05-24 20:05 . 2009-05-24 20:05 ——– d—–w c:\program files\Malwarebytes' Anti-Malware
2009-05-24 20:05 . 2009-05-24 20:05 ——– d—–w c:\documents and settings\All Users\Application Data\Malwarebytes
2009-05-24 00:58 . 2009-05-24 01:32 ——– d—a-w c:\documents and settings\All Users\Application Data\TEMP
2009-05-24 00:12 . 2009-05-24 00:12 ——– d—–w c:\documents and settings\Laura\Local Settings\Application Data\PCHealth
2009-05-13 23:25 . 2009-05-13 23:25 2051864 ——w c:\documents and settings\All Users\Application Data\avg8\update\backup\avgcorex.dll
2009-05-12 00:01 . 2009-05-12 00:01 ——– d—–w c:\windows\system32\KB905474
2009-05-12 00:01 . 2009-03-11 03:26 1403264 ——w c:\windows\system32\KB905474\wganotifypackageinner.exe
2009-05-12 00:01 . 2009-03-11 03:18 453512 ——w c:\windows\system32\KB905474\wgasetup.exe
2009-05-10 14:59 . 2009-05-10 14:59 ——– d—–w c:\documents and settings\Laura\Application Data\FoxPlayerAIR.01F2E49DE175CC541F416F2DF78BDD5E63AD0096.1
2009-05-09 02:07 . 2009-05-09 02:07 56 —h–w c:\windows\system32\ezsidmv.dat
2009-05-09 02:07 . 2009-05-30 23:12 ——– d—–w c:\documents and settings\Laura\Application Data\skypePM
2009-05-09 02:06 . 2009-05-30 23:31 ——– d—–w c:\documents and settings\Laura\Application Data\Skype
2009-05-09 01:56 . 2009-05-09 01:56 ——– d—–w c:\program files\Common Files\Skype
2009-05-09 01:56 . 2009-05-09 01:56 ——– d—–r c:\program files\Skype
2009-05-09 01:56 . 2009-05-09 01:56 ——– d—–w c:\documents and settings\All Users\Application Data\Skype
2009-05-04 22:35 . 2009-05-04 22:35 ——– d—–w c:\documents and settings\Laura\Local Settings\Application Data\Deployment
2009-05-04 01:04 . 2009-05-04 01:04 ——– d—–w c:\documents and settings\Jake\Local Settings\Application Data\Apple
2009-05-04 01:03 . 2009-05-04 01:13 ——– d—–w c:\documents and settings\Jake\Application Data\Apple Computer
2009-05-01 16:00 . 2009-05-01 16:00 ——– d—–w c:\documents and settings\LocalService\Local Settings\Application Data\ApplicationHistory
2009-05-01 16:00 . 2009-05-01 16:00 ——– d—–w c:\documents and settings\Jake\Local Settings\Application Data\Lenovo

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-05-30 23:09 . 2009-03-23 00:13 720 —-a-w c:\documents and settings\All Users\Application Data\ArcSoft\kodak-printcreations-22-080812-oem\acforall.dll
2009-05-30 19:40 . 2009-02-08 02:22 ——– d—–w c:\documents and settings\All Users\Application Data\Google Updater
2009-05-29 00:40 . 2009-02-15 02:46 410984 —-a-w c:\windows\system32\deploytk.dll
2009-05-29 00:39 . 2009-01-21 03:20 ——– d—–w c:\program files\Java
2009-05-29 00:37 . 2009-02-15 16:26 ——– d—–w c:\documents and settings\All Users\Application Data\PCDr
2009-05-25 21:09 . 2009-04-04 12:06 87224 —-a-w c:\documents and settings\Jake\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-05-24 00:55 . 2009-01-21 12:47 ——– d—–w c:\program files\Google
2009-05-24 00:51 . 2009-01-21 03:26 87224 ——w c:\documents and settings\Administrator\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-05-24 00:09 . 2009-01-24 16:25 ——– d—–w c:\documents and settings\All Users\Application Data\Microsoft Help
2009-05-20 04:32 . 2009-04-10 01:39 ——– d—–w c:\documents and settings\Laura\Application Data\SPORE Creature Creator
2009-04-25 15:07 . 2009-04-18 13:15 11952 ——w c:\windows\system32\avgrsstx.dll
2009-04-25 15:07 . 2009-04-18 13:15 325896 ——w c:\windows\system32\drivers\avgldx86.sys
2009-04-25 15:07 . 2009-01-22 01:02 27784 ——w c:\windows\system32\drivers\avgmfx86.sys
2009-04-25 15:07 . 2009-04-18 13:15 108552 ——w c:\windows\system32\drivers\avgtdix.sys
2009-04-25 15:07 . 2009-04-18 13:15 12552 ——w c:\windows\system32\drivers\avgrkx86.sys
2009-04-22 12:07 . 2009-04-22 12:07 ——– d—–w c:\documents and settings\Jake\Application Data\Research In Motion
2009-04-18 13:15 . 2009-04-18 13:15 ——– d—–w c:\program files\AVG
2009-04-18 13:15 . 2009-04-18 13:15 ——– d—–w c:\documents and settings\All Users\Application Data\avg8
2009-04-12 17:31 . 2009-03-23 00:36 ——– d—–w c:\program files\Common Files\DataViz
2009-04-12 17:10 . 2009-03-23 00:36 ——– d—–w c:\program files\Documents To Go
2009-04-11 02:27 . 2009-04-11 02:27 ——– d—–w c:\documents and settings\All Users\Application Data\Electronic Arts
2009-04-10 01:39 . 2009-04-10 01:39 107888 ——w c:\windows\system32\CmdLineExt.dll
2009-04-10 01:24 . 2009-01-21 03:08 ——– d–h–w c:\program files\InstallShield Installation Information
2009-04-10 01:24 . 2009-04-10 01:22 ——– d—–w c:\program files\Electronic Arts
2009-04-10 01:23 . 2009-04-10 01:23 1096 ——w c:\windows\system32\ealregsnapshot1.reg
2009-04-07 00:23 . 2009-04-07 00:23 ——– d—–w c:\program files\Common Files\ThinkVantage Fingerprint Software
2009-04-07 00:23 . 2009-04-07 00:23 ——– d—–w c:\program files\Common Files\SPBA
2009-04-07 00:23 . 2009-01-25 03:13 ——– d—–w c:\program files\RSA SecurID Token Common
2009-04-07 00:23 . 2009-01-24 00:17 ——– d—–w c:\program files\ThinkVantage Fingerprint Software
2009-04-06 02:38 . 2009-01-21 03:10 ——– d—–w c:\program files\Lenovo
2009-04-05 21:16 . 2009-01-22 01:20 ——– d—–w c:\program files\Quicken
2009-04-05 21:15 . 2009-04-05 21:15 4997120 ——w c:\documents and settings\All Users\Application Data\Intuit\Quicken\Inet\Common\patch\Update\161127-161225.dll
2009-04-05 21:14 . 2009-04-05 21:14 991232 ——w c:\documents and settings\All Users\Application Data\Intuit\Quicken\Inet\Common\patch\Update\16141-16157.dll
2009-04-05 21:14 . 2009-04-05 21:14 843776 ——w c:\documents and settings\All Users\Application Data\Intuit\Quicken\Inet\Common\patch\Update\161225-161321.dll
2009-04-05 21:14 . 2009-04-05 21:14 241664 ——w c:\documents and settings\All Users\Application Data\Intuit\Quicken\Inet\Common\patch\Update\QWPATCH.EXE
2009-04-05 21:14 . 2009-04-05 21:14 462848 ——w c:\documents and settings\All Users\Application Data\Intuit\Quicken\Inet\Common\patch\Update\161321-16141.dll
2009-04-05 21:13 . 2009-04-05 21:13 1008 ——w c:\documents and settings\All Users\Application Data\Intuit\Quicken\Inet\Common\patch\Update\rebase.cmd
2009-04-04 12:08 . 2009-04-04 12:07 ——– d—–w c:\documents and settings\Jake\Application Data\ArcSoft
2009-04-04 12:07 . 2009-04-04 12:07 ——– d—–w c:\documents and settings\Jake\Application Data\HotSync
2009-04-04 12:07 . 2009-04-04 12:06 ——– d—–w c:\documents and settings\Jake\Application Data\Lenovo
2009-04-04 02:25 . 2009-04-04 02:25 152576 ——w c:\documents and settings\Laura\Application Data\Sun\Java\jre1.6.0_13\lzma.dll
2009-04-01 00:53 . 2009-04-01 00:42 ——– d—–w c:\program files\Windows Live Safety Center
2009-03-28 16:25 . 2009-01-22 01:57 256 ——w c:\documents and settings\Laura\pool.bin
2009-03-23 00:48 . 2009-01-22 01:49 256 ——w c:\windows\system32\pool.bin
2009-03-23 00:28 . 2009-03-23 00:34 53248 ——w c:\windows\PalmDevC.dll
2009-03-23 00:28 . 2004-06-09 19:27 16694 ——w c:\windows\system32\drivers\PalmUSBD.sys
2009-03-23 00:09 . 2009-03-23 00:09 77824 ——w c:\documents and settings\All Users\Application Data\Kodak\EasyShareSetup\ess\bindbins\bindbins.exe
2009-03-23 00:09 . 2009-03-23 00:09 175104 ——w c:\documents and settings\All Users\Application Data\Kodak\EasyShareSetup\reduced_contents_PrintCreation_expanded\setup.exe
2009-03-23 00:05 . 2009-03-23 00:05 45056 ——w c:\documents and settings\All Users\Application Data\Kodak\EasyShareSetup\sysfiles\kb945060\kb945060.exe
2009-03-23 00:05 . 2009-03-23 00:05 1187840 ——w c:\documents and settings\All Users\Application Data\Kodak\EasyShareSetup\$SETUP_140001_53cd49f\EasyShrx.Dll
2009-03-23 00:05 . 2009-03-23 00:05 114688 ——w c:\documents and settings\All Users\Application Data\Kodak\EasyShareSetup\$Registration\KodakCameraAPI_7.9.20.1.dll
2009-03-23 00:05 . 2009-03-23 00:05 1179648 ——w c:\documents and settings\All Users\Application Data\Kodak\EasyShareSetup\$SETUP_140002_53cadde\EasyShrx.Dll
2009-03-23 00:05 . 2009-03-23 00:05 2499984 ——w c:\documents and settings\All Users\Application Data\Kodak\EasyShareSetup\$SETUP_140001_53cd49f\Setup.exe
2009-03-22 23:58 . 2009-03-22 23:58 114688 ——w c:\documents and settings\All Users\Application Data\Kodak\EasyShareSetup\$Registration\KodakCameraAPI_7.5.20.2.dll
2009-03-18 03:20 . 2009-03-18 03:20 60416 ——w c:\documents and settings\Laura\Application Data\GarageGames\IAPlayer\products\www_instantaction_com\7500\install\OpenAL32.dll
2009-03-18 03:20 . 2009-03-18 03:20 4055040 ——w c:\documents and settings\Laura\Application Data\GarageGames\IAPlayer\products\www_instantaction_com\7500\install\AceOfAces.exe
2009-03-18 03:20 . 2009-03-18 03:20 316416 ——w c:\documents and settings\Laura\Application Data\GarageGames\IAPlayer\products\www_instantaction_com\7500\install\fmodex.dll
2009-03-18 03:20 . 2009-03-18 03:20 1468264 ——w c:\documents and settings\Laura\Application Data\GarageGames\IAPlayer\products\www_instantaction_com\7500\install\d3dx9_33.dll
2009-03-18 03:20 . 2009-03-18 03:20 1038104 ——w c:\documents and settings\Laura\Application Data\GarageGames\IAPlayer\products\www_instantaction_com\7500\install\d3dx9_31.dll
2009-03-18 01:25 . 2009-03-18 01:25 4878336 ——w c:\documents and settings\Laura\Application Data\GarageGames\IAPlayer\products\www_instantaction_com\102\install\Legions.exe
2009-03-18 01:25 . 2009-03-18 01:25 3727720 ——w c:\documents and settings\Laura\Application Data\GarageGames\IAPlayer\products\www_instantaction_com\102\install\d3dx9_35.dll
2009-03-18 01:25 . 2009-03-18 01:25 345088 ——w c:\documents and settings\Laura\Application Data\GarageGames\IAPlayer\products\www_instantaction_com\102\install\fmodex.dll
2009-03-17 04:11 . 2009-03-17 04:11 68888 ——w c:\documents and settings\Laura\Application Data\GarageGames\IAPlayer\products\www_instantaction_com\7000\install\xinput1_3.dll
2009-03-17 04:11 . 2009-03-17 04:11 3026944 ——w c:\documents and settings\Laura\Application Data\GarageGames\IAPlayer\products\www_instantaction_com\7000\install\Zap.exe
2009-03-17 04:11 . 2009-03-17 04:11 60416 ——w c:\documents and settings\Laura\Application Data\GarageGames\IAPlayer\products\www_instantaction_com\7000\install\OpenAL32.dll
2009-03-17 04:11 . 2009-03-17 04:11 2319568 ——w c:\documents and settings\Laura\Application Data\GarageGames\IAPlayer\products\www_instantaction_com\7000\install\d3dx9_27.dll
2009-03-17 04:11 . 2009-03-17 04:11 184320 ——w c:\documents and settings\Laura\Application Data\GarageGames\IAPlayer\products\www_instantaction_com\7000\install\d3dx8dll.dll
2009-03-17 03:59 . 2009-03-17 03:59 413696 ——w c:\documents and settings\Laura\Application Data\GarageGames\IAPlayer\products\www_instantaction_com\6000\install\wrap_oal.dll
2009-03-17 03:59 . 2009-03-17 03:59 3495784 ——w c:\documents and settings\Laura\Application Data\GarageGames\IAPlayer\products\www_instantaction_com\6000\install\d3dx9_33.dll
2009-03-17 03:59 . 2009-03-17 03:59 102400 ——w c:\documents and settings\Laura\Application Data\GarageGames\IAPlayer\products\www_instantaction_com\6000\install\OpenAL32.dll
2009-03-17 03:59 . 2009-03-17 03:59 5869568 ——w c:\documents and settings\Laura\Application Data\GarageGames\IAPlayer\products\www_instantaction_com\6000\install\cyclomite.exe
2009-03-17 03:59 . 2009-03-17 03:59 518 ——w c:\documents and settings\Laura\Application Data\GarageGames\IAPlayer\products\www_instantaction_com\6000\install\common\local\stompstrings.bat
2009-03-17 03:49 . 2009-03-17 03:49 4608 ——w c:\documents and settings\Laura\Application Data\GarageGames\IAPlayer\products\www_instantaction_com\9500\install\dist\w9xpopen.exe
2009-03-17 03:49 . 2009-03-17 03:49 438272 ——w c:\documents and settings\Laura\Application Data\GarageGames\IAPlayer\products\www_instantaction_com\9500\install\dist\SDL_image.dll
2009-03-17 03:49 . 2009-03-17 03:49 364544 ——w c:\documents and settings\Laura\Application Data\GarageGames\IAPlayer\products\www_instantaction_com\9500\install\dist\SDL.dll
2009-03-17 03:49 . 2009-03-17 03:49 348160 ——w c:\documents and settings\Laura\Application Data\GarageGames\IAPlayer\products\www_instantaction_com\9500\install\dist\MSVCR71.dll
2009-03-17 03:49 . 2009-03-17 03:49 34304 ——w c:\documents and settings\Laura\Application Data\GarageGames\IAPlayer\products\www_instantaction_com\9500\install\dist\main.exe
2009-03-17 03:49 . 2009-03-17 03:49 282624 ——w c:\documents and settings\Laura\Application Data\GarageGames\IAPlayer\products\www_instantaction_com\9500\install\dist\SDL_mixer.dll
2009-03-17 03:49 . 2009-03-17 03:49 274432 ——w c:\documents and settings\Laura\Application Data\GarageGames\IAPlayer\products\www_instantaction_com\9500\install\dist\SDL_ttf.dll
2009-03-17 03:49 . 2009-03-17 03:49 2113536 ——w c:\documents and settings\Laura\Application Data\GarageGames\IAPlayer\products\www_instantaction_com\9500\install\dist\python25.dll
2009-03-17 03:49 . 2009-03-17 03:49 204800 ——w c:\documents and settings\Laura\Application Data\GarageGames\IAPlayer\products\www_instantaction_com\9500\install\dist\smpeg.dll
2009-03-17 03:40 . 2009-03-17 03:40 971544 ——w c:\documents and settings\Laura\Application Data\GarageGames\IAPlayer\products\www_instantaction_com\101\install\d3dx9_31.dll
2009-03-17 03:40 . 2009-03-17 03:40 60416 ——w c:\documents and settings\Laura\Application Data\GarageGames\IAPlayer\products\www_instantaction_com\101\install\OpenAL32.dll
2009-03-17 03:40 . 2009-03-17 03:40 4214784 ——w c:\documents and settings\Laura\Application Data\GarageGames\IAPlayer\products\www_instantaction_com\101\install\ThinkTanks.exe
2009-03-17 03:40 . 2009-03-17 03:40 316416 ——w c:\documents and settings\Laura\Application Data\GarageGames\IAPlayer\products\www_instantaction_com\101\install\fmodex.dll
2009-03-17 03:40 . 2009-03-17 03:40 270336 ——w c:\documents and settings\Laura\Application Data\GarageGames\IAPlayer\products\www_instantaction_com\101\install\d3dx8dll.dll
2009-03-17 03:40 . 2009-03-17 03:40 1338728 ——w c:\documents and settings\Laura\Application Data\GarageGames\IAPlayer\products\www_instantaction_com\101\install\d3dx9_33.dll
2009-03-17 03:27 . 2009-03-17 03:27 61136 ——w c:\documents and settings\Laura\Application Data\GarageGames\IAPlayer\products\www_instantaction_com\100\install\xinput9_1_0.dll
2009-03-17 03:27 . 2009-03-17 03:27 4308992 ——w c:\documents and settings\Laura\Application Data\GarageGames\IAPlayer\products\www_instantaction_com\100\install\marbleBlast.exe
2009-03-17 03:27 . 2009-03-17 03:27 3495784 ——w c:\documents and settings\Laura\Application Data\GarageGames\IAPlayer\products\www_instantaction_com\100\install\d3dx9_33.dll
2009-03-17 03:27 . 2009-03-17 03:27 319488 ——w c:\documents and settings\Laura\Application Data\GarageGames\IAPlayer\products\www_instantaction_com\100\install\d3dx8dll.dll
2009-03-17 03:27 . 2009-03-17 03:27 316416 ——w c:\documents and settings\Laura\Application Data\GarageGames\IAPlayer\products\www_instantaction_com\100\install\fmodex.dll
2009-03-16 19:18 . 2009-04-10 01:34 69448 ——w c:\windows\system32\XAPOFX1_3.dll
2009-03-16 19:18 . 2009-04-10 01:34 517448 ——w c:\windows\system32\XAudio2_4.dll
2009-03-16 19:18 . 2009-04-10 01:34 235352 ——w c:\windows\system32\xactengine3_4.dll
2009-03-16 19:18 . 2009-04-10 01:34 22360 ——w c:\windows\system32\X3DAudio1_6.dll
2009-03-13 02:18 . 2009-03-13 02:18 75048 ——w c:\documents and settings\All Users\Application Data\Apple Computer\Installer Cache\iTunes 8.1.0.52\SetupAdmin.exe
2009-03-11 00:35 . 2009-03-11 00:35 152576 ——w c:\documents and settings\Laura\Application Data\Sun\Java\jre1.6.0_12\lzma.dll
2009-03-09 20:27 . 2009-04-10 01:34 453456 ——w c:\windows\system32\d3dx10_41.dll
2009-03-09 20:27 . 2009-04-10 01:34 1846632 ——w c:\windows\system32\D3DCompiler_41.dll
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-01-21 39408]
"ISUSPM"="c:\program files\Common Files\Installshield\UpdateService\ISUSPM.exe" [2007-08-30 205480]
"Skype"="c:\program files\Skype\\Phone\Skype.exe" [2009-04-16 24264488]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"TPFNF7"="c:\program files\Lenovo\NPDIRECT\TPFNF7SP.exe" [2008-07-30 60192]
"snp2uvc"="c:\windows\vsnp2uvc.exe" [2006-12-29 569344]
"TPHOTKEY"="c:\program files\Lenovo\HOTKEY\TPOSDSVC.exe" [2008-03-24 68464]
"EZEJMNAP"="c:\progra~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe" [2008-06-04 242976]
"Apoint"="c:\program files\Apoint2K\Apoint.exe" [2008-03-07 167936]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2008-06-17 150040]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2008-06-17 170520]
"Persistence"="c:\windows\system32\igfxpers.exe" [2008-06-17 141848]
"TVT Scheduler Proxy"="c:\program files\Common Files\Lenovo\Scheduler\scheduler_proxy.exe" [2008-05-15 487424]
"LPManager"="c:\progra~1\THINKV~1\PrdCtr\LPMGR.exe" [2008-08-31 165208]
"LPMailChecker"="c:\progra~1\THINKV~1\PrdCtr\LPMLCHK.exe" [2008-08-31 124248]
"AMSG"="c:\progra~1\THINKV~1\AMSG\amsg.exe" [2007-02-01 419376]
"CameraApplicationLauncher"="c:\program files\Lenovo\Camera Center\bin\CameraApplicationLaunchpadLauncher.exe" [2008-08-12 16384]
"RoxioDragToDisc"="c:\program files\Lenovo\Drag-to-Disc\DrgToDsc.exe" [2007-03-13 1116920]
"PWRMGRTR"="c:\progra~1\ThinkPad\UTILIT~1\PWRMGRTR.DLL" [2008-09-18 331776]
"BLOG"="c:\progra~1\ThinkPad\UTILIT~1\BatLogEx.DLL" [2008-09-18 208896]
"cssauth"="c:\program files\Lenovo\Client Security Solution\cssauth.exe" [2008-06-14 3073336]
"PSQLLauncher"="c:\program files\ThinkVantage Fingerprint Software\launcher.exe" [2008-06-24 49928]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2007-08-24 33648]
"FingerPrintSoftware"="c:\program files\Lenovo Fingerprint Software\fpapp.exe" [2008-10-27 12095488]
"BlackBerryAutoUpdate"="c:\program files\Common Files\Research In Motion\Auto Update\RIMAutoUpdate.exe" [2008-11-04 615696]
"RoxWatchTray"="c:\program files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe" [2008-09-19 236016]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-27 35696]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2009-01-05 413696]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2009-03-13 342312]
"ArcSoft Connection Service"="c:\program files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe" [2009-04-29 188728]
"AVG8_TRAY"="c:\progra~1\AVG\AVG8\avgtray.exe" [2009-04-25 1947928]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-05-29 148888]
"TpShocks"="TpShocks.exe" - c:\windows\system32\TpShocks.exe [2008-06-07 181536]

c:\documents and settings\All Users\Start Menu\Programs\Startup\
HotSync Manager.lnk - c:\program files\Palm\Hotsync.exe [2004-6-9 471040]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\ATFUS]
2008-10-27 00:41 180224 ——w c:\windows\system32\FpWinlogonNp.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\psfus]
2008-06-24 22:31 95496 ——w c:\windows\system32\psqlpwd.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\tpfnf2]
2006-09-06 07:37 34344 ——w c:\program files\Lenovo\HOTKEY\notifyf2.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\tphotkey]
2008-08-08 10:14 28672 ——w c:\program files\Lenovo\HOTKEY\tphklock.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avgrsstarter]
2009-04-25 15:07 11952 ——w c:\windows\system32\avgrsstx.dll

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Notification Packages REG_MULTI_SZ scecli psqlpwd

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\Kodak\\Kodak EasyShare software\\bin\\EasyShare.exe"=
"c:\\WINDOWS\\system32\\mmc.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\AVG\\AVG8\\avgam.exe"=
"c:\\Program Files\\AVG\\AVG8\\avgdiag.exe"=
"c:\\Program Files\\AVG\\AVG8\\avgdiagex.exe"=
"c:\\Program Files\\AVG\\AVG8\\avgemc.exe"=
"c:\\Program Files\\AVG\\AVG8\\avgupd.exe"=
"c:\\Program Files\\AVG\\AVG8\\avgnsx.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\WINDOWS\\network diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

R0 AvgRkx86;avgrkx86.sys;c:\windows\system32\drivers\avgrkx86.sys [4/18/2009 8:15 AM 12552]
R0 Shockprf;Shockprf;c:\windows\system32\drivers\ApsX86.sys [5/14/2008 7:21 PM 114728]
R0 TPDIGIMN;TPDIGIMN;c:\windows\system32\drivers\ApsHM86.sys [5/14/2008 7:21 PM 19496]
R1 AvgLdx86;AVG AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [4/18/2009 8:15 AM 325896]
R1 AvgTdiX;AVG8 Network Redirector;c:\windows\system32\drivers\avgtdix.sys [4/18/2009 8:15 AM 108552]
R1 TPPWRIF;TPPWRIF;c:\windows\system32\drivers\TPPWRIF.SYS [1/20/2009 10:26 PM 4442]
R1 tvtumon;tvtumon;c:\windows\system32\drivers\tvtumon.sys [5/9/2008 8:50 AM 46144]
R2 ATService;AuthenTec Fingerprint Service;c:\windows\system32\AtService.exe [10/26/2008 7:33 PM 1676536]
R2 avg8emc;AVG8 E-mail Scanner;c:\progra~1\AVG\AVG8\avgemc.exe [4/18/2009 8:15 AM 908568]
R2 avg8wd;AVG8 WatchDog;c:\progra~1\AVG\AVG8\avgwdsvc.exe [4/18/2009 8:15 AM 298776]
R2 dtsvc;Data Transfer Service;c:\windows\system32\DTS.exe [10/26/2008 7:38 PM 98304]
R2 FingerprintServer;Fingerprint Server;c:\windows\system32\FpLogonServ.exe [10/26/2008 7:41 PM 118784]
R2 IntuitUpdateService;Intuit Update Service;c:\program files\Common Files\Intuit\Update Service\IntuitUpdateService.exe [10/10/2008 6:45 AM 13088]
R2 Power Manager DBC Service;Power Manager DBC Service;c:\program files\ThinkPad\Utilities\PWMDBSVC.exe [1/20/2009 10:26 PM 94208]
R2 smihlp;SMI Helper Driver (smihlp);c:\program files\Common Files\ThinkVantage Fingerprint Software\Drivers\smihlp.sys [6/24/2008 5:07 PM 12560]
R2 TVT Backup Protection Service;TVT Backup Protection Service;c:\program files\Lenovo\Rescue and Recovery\rrpservice.exe [5/14/2008 7:25 PM 520192]
R2 TVT_UpdateMonitor;TVT Windows Update Monitor;c:\program files\Lenovo\Rescue and Recovery\UpdateMonitor.exe [5/9/2008 8:50 AM 253952]
R3 ATSwpWDF;AuthenTec TruePrint USB WDF Driver;c:\windows\system32\drivers\ATSwpWDF.sys [2/6/2009 4:05 PM 482176]
R3 TVTI2C;Lenovo SM bus driver;c:\windows\system32\drivers\tvti2c.sys [2/22/2008 6:54 PM 37312]
S2 gupdate1c9899443e0f070;Google Update Service (gupdate1c9899443e0f070);c:\program files\Google\Update\GoogleUpdate.exe [2/7/2009 9:23 PM 133104]
S2 SessionLauncher;SessionLauncher;c:\docume~1\ADMINI~1\LOCALS~1\Temp\DX9\SessionLauncher.exe –> c:\docume~1\ADMINI~1\LOCALS~1\Temp\DX9\SessionLauncher.exe [?]
S2 smihlp2;SMI Helper Driver (smihlp2);c:\program files\Common Files\ThinkVantage Fingerprint Software\Drivers\smihlp.sys [6/24/2008 5:07 PM 12560]
S3 ADMonitor;AD Monitor;c:\windows\system32\ADMonitor.exe [10/26/2008 7:38 PM 106496]

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}]
"c:\windows\system32\rundll32.exe" "c:\windows\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
.
Contents of the 'Scheduled Tasks' folder

2009-03-16 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 17:34]

2009-05-30 c:\windows\Tasks\Check Updates for Windows Live Toolbar.job
- c:\program files\Windows Live Toolbar\MSNTBUP.EXE [2007-02-12 23:54]

2009-05-30 c:\windows\Tasks\GoogleUpdateTaskMachine.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-02-08 02:23]

2009-05-30 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-731230423-1672936951-2466430205-1006.job
- c:\documents and settings\Jake\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2009-05-29 21:46]

2009-02-15 c:\windows\Tasks\PCDoctorBackgroundMonitorTask.job
- c:\program files\PCDR5\pcdr5cuiw32.exe [2008-12-12 23:32]

2009-05-30 c:\windows\Tasks\PMTask.job
- c:\progra~1\ThinkPad\UTILIT~1\PWMIDTSK.EXE [2009-01-21 16:46]

2009-05-30 c:\windows\Tasks\User_Feed_Synchronization-{FE554922-F763-402F-B1B9-F3842549441A}.job
- c:\windows\system32\msfeedssync.exe [2006-10-17 09:31]

2009-05-12 c:\windows\Tasks\WGASetup.job
- c:\windows\system32\KB905474\wgasetup.exe [2009-05-12 03:18]
.
- - - - ORPHANS REMOVED - - - -

SafeBoot-procexp90.Sys


.
——- Supplementary Scan ——-
.
uStart Page = hxxp://www.google.com/
uInternet Settings,ProxyOverride = ;*.local
IE: {{F4F55DC8-0B69-4DFE-BA94-CB677B88B2A3} - {F4F55DC8-0B69-4DFE-BA94-CB677B88B2A3} - c:\program files\Lenovo\Client Security Solution\tvtpwm_ie_com.dll
TCP: {9AF894FE-D85F-4C93-8AA1-3DBDF223D5A9} = 192.168.1.254
Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - c:\program files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-05-30 18:34
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes …

scanning hidden autostart entries …

scanning hidden files …

scan completed successfully
hidden files: 0

**************************************************************************
.
——————— DLLs Loaded Under Running Processes ———————

- - - - - - - > 'winlogon.exe'(984)
c:\windows\system32\FpWinLogonNp.dll
c:\program files\Lenovo Fingerprint Software\ATCSSINT.dll
c:\program files\Lenovo Fingerprint Software\SharedResources.dll
c:\program files\Lenovo Fingerprint Software\FPResource.dll
c:\program files\Lenovo\Client Security Solution\CSS_Enroll.dll
c:\program files\Lenovo\Client Security Solution\css_banner.dll
c:\windows\system32\cssuserdatadispatcher.dll
c:\windows\system32\tvttsp.dll
c:\windows\system32\tcsrpc.dll
c:\windows\system32\psqlpwd.dll
c:\program files\ThinkVantage Fingerprint Software\homefus2.dll
c:\program files\ThinkVantage Fingerprint Software\infql2.dll
c:\program files\ThinkVantage Fingerprint Software\infra.dll
c:\program files\Lenovo\HOTKEY\tphklock.dll

- - - - - - - > 'lsass.exe'(1048)
c:\windows\system32\psqlpwd.dll
c:\program files\ThinkVantage Fingerprint Software\homefus2.dll
c:\program files\ThinkVantage Fingerprint Software\infql2.dll

- - - - - - - > 'explorer.exe'(5512)
c:\windows\system32\ieframe.dll
c:\windows\system32\OneX.DLL
c:\windows\system32\eappprxy.dll
c:\windows\system32\webcheck.dll
.
Completion time: 2009-05-30 18:35
ComboFix-quarantined-files.txt 2009-05-30 23:35

Pre-Run: 70,454,358,016 bytes free
Post-Run: 70,479,724,544 bytes free

WindowsXP-KB310994-SP2-Pro-BootDisk-ENU.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect

320 — E O F — 2009-05-13 00:02
Post #7
:thumbup: OK thanks If you could now carry on with the next instructions…. when you post the Kaspersky log, please advise how your computer is running and if there are still outstanding issues.
Post #8
The Karpasky said no threats and the log was empty. Turning the comoputer off an don still show the samd clsid error. I still get off and on on the internet. Thank you
Post #9
Hi,

This doesn't appear as though it's a malware issue,

Lets do one more scan to be certain, if that is clean, I will recommend posting in the tech forum.


Please do the following:

Please run your MalwareBytes AntiMalware program.

Please UPDATE the databases, then run a quick scan.

Post the result of the scan into your next reply.
Post #12
"An internal error occured (object:clsid-not-found(CID_CSS::Interface)) Malwarebytes' Anti-Malware 1.36 Database version: 2175 Windows 5.1.2600 Service Pack 3 6/8/2009 7:20:06 PM mbam-log-2009-06-08 (19-20-06).txt Scan type: Quick Scan Objects scanned: 108497 Time elapsed: 4 minute(s), 38 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 0 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: (No malicious items detected)
Post #13
Hi,

I believe that clsid may be related to an add-on in Internet Explorer.

Try resetting I.E. back to it's default settings:

Visit this page:

http://support.microsoft.com/kb/923737

Click on the Microsoft Fix It button and have the browser automatically reset to default settings:

NEXT

In I.E.

  • Check internet options settings.
  • Tools > Internet Options > Connections
  • LAN settings
  • Choose "automatically detect settings"
  • uncheck both proxy settings boxes

Please advise if that resolves the clsid issue.
Post #14
clsid error occuring more often now. Also had a winlogon.exe error. When I turned off ablue screen came on with error 000045
Post #15
Hi, Are you able to log on at all now or does it crash every time, what exactly happens with the winlogon error? Were you able to reset IE? Please run DDS again and post a new log.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI