SweetTech
The log file should be saved in your C:\ drive called TDSSKiller_* (* denotes version & date)
Spyware / Malware / Virus Removal
[Resolved] lost google / now "searchqu.com
44 min read
marc64
this is turning into a nightmare, am i missing something? open and run the TDSSKiller scan, opens a black oblong box, ok it runs through for about 15 seconds and says,
TTDS Rootkit,
Version 2.3.2.0 may 31st 2010,
Scanning ……….. Services…………………
Scanning ………..Drivers…………………….
Completed………………………………………..
Results:
Registry Objects Infected / cured / cured at re-boot…………………. 0 / 0 / 0
Files infected……………….. / cured / cured at re-boot…………………..0 / 0 / 0
Press any key to continue,
I press any key and when i do the box close's and i can not locate any log files, done a search from Start on both c:/ and d:/ drives and nothing, any ideas??.
SweetTech
Don't worry about TDSSKiller any more. Go ahead and proceed with running the ESET Online Scanner followed by the OTL logs. If ESET Online Scanner doesn't work then proceed with running the OTL scan.
marc64
thanks sweettech, you must be blessed with Patience!. right then now will try the ESET, you didnt tell me about if i should or shouldn't unchecked some of the 30 or so processes/programmes (Start up) that are running? can you let me know before i attempt ESET, thanks!!.
SweetTech
For the time being leave the processes that are running at startup alone. We can address this later.
marc64
You are not going to believe this, ESET scan on start says avg detected may effect performance and quality of the scan, as i previously said i have a paid version of AVG (version 9.0.892) and i have disabled the Link Scanner, Online Shield, Resident Shield as well as the Identity shield, all disabled, you cant physically disable anything else unless you completely uninstall AVG, i haven't a clue where the details are or disc, i bought it online and it was a downloaded copy direct from AVG etc etc, carry on or not?
SweetTech
Proceed with running it.
marc64
Result of ESET scan,
C:\System Volume Information\_restore{356B9CDD-5204-463A-B16C-1605AA5B9931}\RP360\A0067486.exe a variant of Win32/Ad ware.ADON application
That might make sense as to why my volume has gone in certain apps, but i must add that i did have volume long after we started scans and not having protection enabled, also why does the Windows security scan show a low threat Trojan and your ESET scan doesn't show it, apparently windows scan said that the Trojan they detected only sent you to EBay and so wasn't a serious threat, never the less its a Trojan, shouldn't these scans pick up on that?, the ESET scan took many hours, now 4 am and only just realised its finished, nearly 4 hours 50 minutes!, will do another OTL scan and post the results next,
marc64
Results of the OTL scan, please note there is only 1 file, before you asked me to prompt/check various box's and there was two diferant files "extra" and the "OTL" File,
OTL logfile created on: 6/3/2010 04:14:16 - Run 2
OTL by OldTimer - Version 3.2.5.1 Folder = C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000809 | Country: United Kingdom | Language: ENG | Date Format: M/d/yyyy
3.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 57.00% Memory free
9.00 Gb Paging File | 8.00 Gb Available in Paging File | 90.00% Paging File free
Paging file location(s): [Binary data over 100 bytes]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 189.91 Gb Total Space | 153.25 Gb Free Space | 80.70% Space Free | Partition Type: NTFS
Drive D: | 298.09 Gb Total Space | 280.92 Gb Free Space | 94.24% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Computer Name: NONE-5738F18114
Current User Name: Mark M
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal
========== Processes (SafeList) ==========
PRC - C:\Program Files\AVG\AVG9\avgtray.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG9\avgnsx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG9\avgrsx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG9\avgfws9.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG9\avgcsrvx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG9\avgchsvx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe (Lavasoft)
PRC - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe (Lavasoft)
PRC - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.)
PRC - C:\Program Files\Uniblue\PowerSuite\powersuite.exe (Uniblue Systems Limited)
PRC - C:\Program Files\Common Files\Autodata Limited Shared\Service\ADCDLicSvc.exe ()
PRC - C:\Program Files\Uniblue\SpeedUpMyPC\sump.exe (Uniblue Systems Limited)
PRC - C:\Program Files\AVG\AVG9\avgwdsvc.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG9\Identity Protection\Agent\Bin\AVGIDSAgent.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG9\Identity Protection\Agent\Bin\AVGIDSMonitor.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG9\avgam.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\Logitech\Logitech Vid\Vid.exe (Logitech Inc.)
PRC - C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe ()
PRC - C:\Program Files\Common Files\LogiShrd\LQCVFX\COCIManager.exe ()
PRC - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe (Logitech Inc.)
PRC - C:\Program Files\eBay\eBay Toolbar2\eBayTBDaemon.exe (eBay Inc.)
PRC - C:\Program Files\Windows Live\Contacts\wlcomm.exe (Microsoft Corporation)
PRC - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe (Yahoo! Inc.)
PRC - C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe (Sun Microsystems, Inc.)
PRC - C:\Program Files\Java\jre1.6.0_07\bin\jucheck.exe (Sun Microsystems, Inc.)
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\Kontiki\KService.exe (Kontiki Inc.)
PRC - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe ()
PRC - C:\Program Files\Picasa2\PicasaMediaDetector.exe (Google Inc.)
PRC - C:\WINDOWS\system32\sistray.exe (Silicon Integrated Systems Corporation)
PRC - C:\Program Files\Analog Devices\SoundMAX\SMTray.exe (Analog Devices, Inc.)
PRC - C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe ()
========== Modules (SafeList) ==========
MOD - C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\WINDOWS\system32\msscript.ocx (Microsoft Corporation)
========== Win32 Services (SafeList) ==========
SRV - (avgfws9) – C:\Program Files\AVG\AVG9\avgfws9.exe (AVG Technologies CZ, s.r.o.)
SRV - (aawservice) – C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe (Lavasoft)
SRV - (Apple Mobile Device) – C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.)
SRV - (Autodata Limited License Service) – C:\Program Files\Common Files\Autodata Limited Shared\Service\ADCDLicSvc.exe ()
SRV - (avg9wd) – C:\Program Files\AVG\AVG9\avgwdsvc.exe (AVG Technologies CZ, s.r.o.)
SRV - (AVGIDSAgent) – C:\Program Files\AVG\AVG9\Identity Protection\Agent\Bin\AVGIDSAgent.exe (AVG Technologies CZ, s.r.o.)
SRV - (LVPrcSrv) – C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe (Logitech Inc.)
SRV - (fsssvc) – C:\Program Files\Windows Live\Family Safety\fsssvc.exe (Microsoft Corporation)
SRV - (SeaPort) – C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe (Microsoft Corporation)
SRV - (YahooAUService) – C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe (Yahoo! Inc.)
SRV - (KService) – C:\Program Files\Kontiki\KService.exe (Kontiki Inc.)
SRV - (Symantec Core LC) – C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe ()
SRV - (Pml Driver HPZ12) – C:\WINDOWS\system32\HPZipm12.exe (HP)
SRV - (WinDefend) – C:\Program Files\Windows Defender\MsMpEng.exe (Microsoft Corporation)
========== Driver Services (SafeList) ==========
DRV - (AvgTdiX) – C:\WINDOWS\System32\Drivers\avgtdix.sys (AVG Technologies CZ, s.r.o.)
DRV - (AvgMfx86) – C:\WINDOWS\System32\Drivers\avgmfx86.sys (AVG Technologies CZ, s.r.o.)
DRV - (FilterService) – C:\WINDOWS\system32\drivers\lvuvcflt.sys (Logitech Inc.)
DRV - (NVENETFD) – C:\WINDOWS\system32\drivers\NVENETFD.sys (NVIDIA Corporation)
DRV - (nv) – C:\WINDOWS\system32\drivers\nv4_mini.sys (NVIDIA Corporation)
DRV - (AVGIDSDriverxpx) – C:\Program Files\AVG\AVG9\Identity Protection\Agent\Driver\Platform_XP\AVGIDSDriver.sys (AVG Technologies CZ, s.r.o. )
DRV - (AVGIDSFilterxpx) – C:\Program Files\AVG\AVG9\Identity Protection\Agent\Driver\Platform_XP\AVGIDSFilter.sys (AVG Technologies CZ, s.r.o. )
DRV - (AVGIDSShimxpx) – C:\Program Files\AVG\AVG9\Identity Protection\Agent\Driver\Platform_XP\AVGIDSShim.sys (AVG Technologies CZ, s.r.o. )
DRV - (AVGIDSErHrxpx) – C:\WINDOWS\System32\Drivers\AVGIDSxx.sys (AVG Technologies CZ, s.r.o. )
DRV - (AvgLdx86) – C:\WINDOWS\System32\Drivers\avgldx86.sys (AVG Technologies CZ, s.r.o.)
DRV - (AvgRkx86) – C:\WINDOWS\System32\Drivers\avgrkx86.sys (AVG Technologies CZ, s.r.o.)
DRV - (Lbd) – C:\WINDOWS\system32\DRIVERS\Lbd.sys (Lavasoft AB)
DRV - (Avgfwfd) – C:\WINDOWS\system32\drivers\avgfwdx.sys (AVG Technologies CZ, s.r.o.)
DRV - (Avgfwdx) – C:\WINDOWS\system32\drivers\avgfwdx.sys (AVG Technologies CZ, s.r.o.)
DRV - (LVUVC) Logitech Webcam 200(UVC) – C:\WINDOWS\system32\drivers\lvuvc.sys (Logitech Inc.)
DRV - (LVRS) – C:\WINDOWS\system32\drivers\lvrs.sys (Logitech Inc.)
DRV - (lvpopflt) – C:\WINDOWS\system32\drivers\lvpopflt.sys (Logitech Inc.)
DRV - (LVPr2Mon) – C:\WINDOWS\system32\drivers\LVPr2Mon.sys ()
DRV - (fssfltr) – C:\WINDOWS\system32\drivers\fssfltr_tdi.sys (Microsoft Corporation)
DRV - (Intrchs) – C:\Program Files\PlayE4\bin\Intrchs.sys ()
DRV - (eeCtrl) – C:\Program Files\Common Files\Symantec Shared\eengine\eeCtrl.sys (Symantec Corporation)
DRV - (nvnetbus) – C:\WINDOWS\system32\drivers\nvnetbus.sys (NVIDIA Corporation)
DRV - (IntcAzAudAddService) Service for Realtek HD Audio (WDM) – C:\WINDOWS\system32\drivers\RtkHDAud.sys (Realtek Semiconductor Corp.)
DRV - (usbaudio) USB Audio Driver (WDM) – C:\WINDOWS\system32\drivers\USBAUDIO.sys (Microsoft Corporation)
DRV - (HDAudBus) – C:\WINDOWS\system32\drivers\hdaudbus.sys (Windows ® Server 2003 DDK provider)
DRV - (LUsbFilt) – C:\WINDOWS\system32\drivers\LUsbFilt.sys (Logitech, Inc.)
DRV - (LMouKE) – C:\WINDOWS\system32\drivers\LMouKE.Sys (Logitech Inc.)
DRV - (LMouFilt) – C:\WINDOWS\system32\drivers\LMouFilt.Sys (Logitech, Inc.)
DRV - (LHidFilt) – C:\WINDOWS\system32\drivers\LHidFilt.Sys (Logitech, Inc.)
DRV - (L8042mou) – C:\WINDOWS\system32\drivers\L8042mou.Sys (Logitech Inc.)
DRV - (L8042Kbd) – C:\WINDOWS\system32\drivers\L8042Kbd.sys (Logitech Inc.)
DRV - (symlcbrd) – C:\WINDOWS\system32\drivers\symlcbrd.sys (Symantec Corporation)
DRV - (SiS315) – C:\WINDOWS\system32\drivers\sisgrp.sys (Silicon Integrated Systems Corporation)
DRV - (SiSkp) – C:\WINDOWS\system32\drivers\srvkp.sys (Silicon Integrated Systems Corporation)
DRV - (SISAGP) – C:\WINDOWS\system32\DRIVERS\SISAGPX.sys (Silicon Integrated Systems Corporation)
DRV - (W8100PCI) – C:\WINDOWS\system32\drivers\mrv8k51.sys (Marvell Semiconductor, Inc)
DRV - (SiSGbeXP) – C:\WINDOWS\system32\drivers\SiSGbeXP.sys (Silicon Integrated Systems Corp.)
DRV - (SiSRaid2) – C:\WINDOWS\system32\DRIVERS\SiSRaid2.sys (Silicon Integrated Systems)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://uk.msn.com/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://www.bing.com/ [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded =
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://uk.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-gb
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = F2 D8 88 89 5F 00 CB 01 [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKCU\..\URLSearchHook: {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll ()
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
FF - HKLM\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\Program Files\Real\RealPlayer\browserrecord [2008/11/08 16:14:39 | 000,000,000 | —D | M]
O1 HOSTS File: ([2004/08/04 13:00:00 | 000,000,734 | —- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Skype add-on (mastermind)) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.)
O2 - BHO: (eBay Toolbar Helper) - {22D8E815-4A5E-4DFB-845E-AAB64207F5BD} - C:\Program Files\eBay\eBay Toolbar2\eBayTb.dll (eBay Inc.)
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll (RealPlayer)
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (Search Helper) - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll (Microsoft Corporation)
O2 - BHO: (SSVHelper Class) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (AVG Security Toolbar BHO) - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll ()
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.5.5126.1836\swg.dll (Google Inc.)
O2 - BHO: (MSN Toolbar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\MSN\Toolbar\3.0.1203.0\msneshellx.dll (Microsoft Corp.)
O2 - BHO: (Windows Live Toolbar Helper) - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
O3 - HKLM\..\Toolbar: (MSN Toolbar) - {1E61ED7C-7CB8-49d6-B9E9-AB4C880C8414} - C:\Program Files\MSN\Toolbar\3.0.1203.0\msneshellx.dll (Microsoft Corp.)
O3 - HKLM\..\Toolbar: (&Windows Live Toolbar) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (eBay Toolbar) - {92085AD4-F48A-450D-BD93-B28CC7DF67CE} - C:\Program Files\eBay\eBay Toolbar2\eBayTb.dll (eBay Inc.)
O3 - HKLM\..\Toolbar: (AVG Security Toolbar) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (&Windows Live Toolbar) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
O3 - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (AVG Security Toolbar) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll ()
O4 - HKLM..\Run: [4oD] C:\Program Files\Kontiki\KHost.exe (Kontiki Inc.)
O4 - HKLM..\Run: [AVG9_TRAY] C:\Program Files\AVG\AVG9\avgtray.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [eBayToolbar] C:\Program Files\eBay\eBay Toolbar2\eBayTBDaemon.exe (eBay Inc.)
O4 - HKLM..\Run: [Kernel and Hardware Abstraction Layer] C:\WINDOWS\KHALMNPR.Exe (Logitech Inc.)
O4 - HKLM..\Run: [KernelFaultCheck] File not found
O4 - HKLM..\Run: [Logitech Hardware Abstraction Layer] C:\WINDOWS\KHALMNPR.Exe (Logitech Inc.)
O4 - HKLM..\Run: [LogitechQuickCamRibbon] C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe ()
O4 - HKLM..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe (Ahead Software Gmbh)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe (Silicon Integrated Systems Corp.)
O4 - HKLM..\Run: [Smapp] C:\Program Files\Analog Devices\SoundMAX\SMTray.exe (Analog Devices, Inc.)
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKCU..\Run: [kdx] C:\Program Files\Kontiki\KHost.exe (Kontiki Inc.)
O4 - HKCU..\Run: [Logitech Vid] C:\Program Files\Logitech\Logitech Vid\Vid.exe (Logitech Inc.)
O4 - HKCU..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (Google Inc.)
O4 - HKCU..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)
O4 - HKCU..\RunOnce: [PowerSuite] C:\Program Files\Uniblue\PowerSuite\launcher.exe (Uniblue Systems Limited)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\HP Image Zone Fast Start.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe (Hewlett-Packard Co.)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe ()
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE (Microsoft Corporation)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Utility Tray.lnk = C:\WINDOWS\system32\sistray.exe (Silicon Integrated Systems Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: &ieSpell Options - C:\Program Files\ieSpell\iespell.dll (Red Egg Software)
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\WINDOWS\System32\GPhotos.scr (Google Inc.)
O8 - Extra context menu item: Check &Spelling - C:\Program Files\ieSpell\iespell.dll (Red Egg Software)
O8 - Extra context menu item: eBay Search - C:\Program Files\eBay\eBay Toolbar2\eBayTb.dll (eBay Inc.)
O8 - Extra context menu item: Google Sidewiki… - C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_2EC7709873947E87.dll (Google Inc.)
O8 - Extra context menu item: Lookup on Merriam Webster - C:\Program Files\ieSpell\Merriam Webster.HTM ()
O8 - Extra context menu item: Lookup on Wikipedia - C:\Program Files\ieSpell\wikipedia.HTM ()
O9 - Extra 'Tools' menuitem : Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\npjpi160_07.dll (Sun Microsystems, Inc.)
O9 - Extra Button: ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - C:\Program Files\ieSpell\iespell.dll (Red Egg Software)
O9 - Extra 'Tools' menuitem : ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - C:\Program Files\ieSpell\iespell.dll (Red Egg Software)
O9 - Extra 'Tools' menuitem : ieSpell Options - {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - C:\Program Files\ieSpell\iespell.dll (Red Egg Software)
O9 - Extra Button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.)
O9 - Extra Button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O16 - DPF: {0067DBFC-A752-458C-AE6E-B9C7E63D4824} http://www.logitech.com/devicedetector/plu…Detection32.cab (Device Detection)
O16 - DPF: {05D44720-58E3-49E6-BDF6-D00330E511D3} http://zone.msn.com/binFrameWork/v10/StagingUI.cab55579.cab (MSN Games – Matchmaking)
O16 - DPF: {0D41B8C5-2599-4893-8183-00195EC8D5F9} http://support.asus.com/common/asusTek_sys_ctrl.cab (asusTek_sysctrl Class)
O16 - DPF: {1803B9EF-9905-4F34-AFC4-05D1BAB28801} http://us.dl1.yimg.com/download.yahoo.com/…_1/yregucfg.cab (RegUserCfgUI Class)
O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262F} http://www.nvidia.com/content/DriverDownlo…sreqlab_nvd.cab (System Requirements Lab Class)
O16 - DPF: {3BB54395-5982-4788-8AF4-B5388FFDD0D8} http://zone.msn.com/BinFrameWork/v10/ZBuddy.cab55579.cab (MSN Games – Buddy Invite)
O16 - DPF: {5736C456-EA94-4AAC-BB08-917ABDD035B3} http://zone.msn.com/binframework/v10/ZPAChat.cab55579.cab (MSN Games – Game Chat)
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} http://cdn.scan.onecare.live.com/resource/…lscbase6087.cab (Windows Live Safety Center Base Module)
O16 - DPF: {6A344D34-5231-452A-8A57-D064AC9B7862} https://webdl.symantec.com/activex/symdlmgr.cab (Symantec Download Manager)
O16 - DPF: {6F15128C-E66A-490C-B848-5000B5ABEEAC} https://h20436.www2.hp.com/ediags/dex/secure/HPDEXAXO.cab (HP Download Manager)
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab (OnlineScanner Control)
O16 - DPF: {95B5D20C-BD31-4489-8ABF-F8C8BE748463} http://zone.msn.com/bingame/zpagames/zpa_hrtz.cab58570.cab (ZPA_HRTZ Object)
O16 - DPF: {A4110378-789B-455F-AE86-3A1BFC402853} http://zone.msn.com/bingame/zpagames/zpa_shvl.cab55579.cab (ZPA_SHVL Object)
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} http://cdn2.zone.msn.com/binFramework/v10/…k.cab102118.cab (MSN Games - Installer)
O16 - DPF: {DA2AA6CF-5C7A-4B71-BC3B-C771BB369937} http://zone.msn.com/binframework/v10/StProxy.cab55579.cab (MSN Games – Game Communicator)
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} http://www.popcap.com/webgames/popcaploader_v10.cab (PopCapLoader Object)
O16 - DPF: {E77F23EB-E7AB-4502-8F37-247DBAF1A147} http://gfx2.hotmail.com/mail/w4/pr01/photo…ol/MSNPUpld.cab (Windows Live Hotmail Photo Upload Tool)
O16 - DPF: {FF3C5A9F-5A99-4930-80E8-4709194C2AD3} http://zone.msn.com/bingame/zpagames/ZPA_B…on.cab64162.cab (MSN Games – Backgammon)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll (AVG Technologies CZ, s.r.o.)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\avgrsstarter: DllName - avgrsstx.dll - C:\WINDOWS\System32\avgrsstx.dll (AVG Technologies CZ, s.r.o.)
O24 - Desktop WallPaper: C:\Documents and Settings\Mark M.NONE-5738F18114\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Mark M.NONE-5738F18114\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {091EB208-39DD-417D-A5DD-7E2C2D8FB9CB} - C:\Program Files\Windows Defender\MpShHook.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/07/24 09:48:16 | 000,000,000 | —- | M] () - C:\AUTOEXEC.BAT – [ NTFS ]
O32 - AutoRun File - [2009/01/30 19:33:49 | 000,000,090 | —- | M] () - C:\AUTORUN.INF – [ NTFS ]
O32 - AutoRun File - [2008/12/30 17:43:01 | 000,000,000 | —- | M] () - D:\AUTOEXEC.BAT – [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O34 - HKLM BootExecute: (lsdelete) - C:\WINDOWS\System32\lsdelete.exe ()
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*
========== Files/Folders - Created Within 30 Days ==========
[2010/06/02 21:57:09 | 000,000,000 | —D | C] – C:\Program Files\ESET
[2010/06/02 03:37:32 | 000,000,000 | —D | C] – C:\WINDOWS\Minidump
[2010/06/01 23:00:54 | 000,000,000 | —D | C] – C:\32788R22FWJFW
[2010/05/31 10:41:12 | 000,998,736 | —- | C] (Kaspersky Lab) – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\TDSSKiller.exe
[2010/05/31 02:09:44 | 000,000,000 | —D | C] – C:\_OTL
[2010/05/30 21:38:28 | 000,571,392 | —- | C] (OldTimer Tools) – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\OTL.exe
[2010/05/30 20:13:56 | 000,000,000 | —D | C] – C:\Documents and Settings\Mark M.NONE-5738F18114\Application Data\ieSpell
[2010/05/29 07:37:33 | 000,000,000 | —D | C] – C:\Program Files\Bandoo
[2010/05/28 05:11:48 | 000,000,000 | —D | C] – C:\Program Files\ieSpell
[2010/05/24 10:31:52 | 000,000,000 | —D | C] – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\Unused Desktop Shortcuts
[2010/05/23 03:40:01 | 000,000,000 | —D | C] – C:\Documents and Settings\Mark M.NONE-5738F18114\Application Data\Carambis
[2010/05/23 03:37:44 | 000,000,000 | —D | C] – C:\Program Files\Carambis
[2010/05/22 20:19:07 | 000,000,000 | —D | C] – C:\WINDOWS\Performance
[2010/05/22 20:18:59 | 000,000,000 | —D | C] – C:\Documents and Settings\Mark M.NONE-5738F18114\Local Settings\Application Data\Microsoft Corporation
[2010/05/22 20:18:28 | 000,000,000 | —D | C] – C:\Program Files\Microsoft Windows 7 Upgrade Advisor
[2010/05/20 07:40:46 | 000,000,000 | —D | C] – C:\WINDOWS\System32\dumps
[2010/05/14 19:27:09 | 000,199,192 | —- | C] (Logitech Inc.) – C:\WINDOWS\System32\lvci12101110.dll
[2010/05/13 16:40:11 | 000,000,000 | —D | C] – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\SightSpeed Recordings
[2010/05/12 19:19:04 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\NVIDIA Corporation
[2010/05/12 19:18:53 | 000,000,000 | —D | C] – C:\Program Files\NVIDIA Corporation
[2010/05/12 19:17:56 | 002,646,632 | —- | C] (NVIDIA Corporation) – C:\WINDOWS\System32\nvcuvenc.dll
[2010/05/12 19:17:55 | 011,647,592 | —- | C] (NVIDIA Corporation) – C:\WINDOWS\System32\nvcompiler.dll
[2010/05/12 19:08:46 | 000,000,000 | —D | C] – C:\Program Files\SystemRequirementsLab
[2010/05/04 18:23:33 | 000,000,000 | —D | C] – C:\Program Files\iPod
[2010/05/04 18:23:31 | 000,000,000 | —D | C] – C:\Program Files\iTunes
[2010/05/04 18:23:31 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2010/05/04 18:20:30 | 000,000,000 | —D | C] – C:\Program Files\QuickTime
[2010/05/04 18:18:08 | 003,003,680 | —- | C] (Apple, Inc.) – C:\WINDOWS\System32\usbaaplrc.dll
[2010/05/04 18:17:51 | 000,000,000 | —D | C] – C:\Program Files\Bonjour
[2010/03/17 21:53:42 | 000,094,208 | —- | C] (Apple Inc.) – C:\WINDOWS\System32\QuickTimeVR.qtx
[2010/03/17 21:53:42 | 000,069,632 | —- | C] (Apple Inc.) – C:\WINDOWS\System32\QuickTime.qts
[2010/02/04 19:56:08 | 000,298,496 | —- | C] (InstallShield Corporation, Inc.) – C:\WINDOWS\uninst.exe
[2009/12/06 02:48:05 | 000,000,000 | —D | C] – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Adobe Reader 9 Installer
[2009/12/04 17:30:26 | 000,000,000 | —D | C] – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\My Scans
[2009/10/24 13:16:52 | 000,000,000 | —D | C] – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Downloads
[2009/10/23 03:58:58 | 000,000,000 | —D | C] – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\confirmation Marc[1]_files
[2009/09/23 19:32:30 | 000,000,000 | —D | C] – C:\WINDOWS\System32\zh-TW
[2009/09/23 19:32:30 | 000,000,000 | —D | C] – C:\WINDOWS\System32\zh-HK
[2009/09/23 19:32:30 | 000,000,000 | —D | C] – C:\WINDOWS\System32\tr-TR
[2009/09/23 19:32:30 | 000,000,000 | —D | C] – C:\WINDOWS\System32\sv-SE
[2009/09/23 19:32:30 | 000,000,000 | —D | C] – C:\WINDOWS\System32\pt-BR
[2009/09/20 22:11:31 | 000,053,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\vfwwdm32.dll
[2009/09/14 05:14:11 | 000,000,000 | -H-D | C] – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\.picasaoriginals
[2009/09/14 05:06:52 | 000,000,000 | R-SD | C] – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\My Stationery
[2009/09/09 20:35:51 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Documents\microsoft
[2009/09/01 00:22:33 | 000,016,928 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\spmsg.dll
[2009/08/21 00:22:52 | 000,000,000 | —D | C] – C:\WINDOWS\System32\XPSViewer
[2009/08/21 00:22:04 | 001,676,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\xpssvcs.dll
[2009/08/21 00:22:04 | 000,117,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\prntvpt.dll
[2009/08/04 00:12:56 | 000,000,000 | —D | C] – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\My Videos
[2009/07/26 16:44:56 | 000,048,448 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\sirenacm.dll
[2009/07/16 20:20:36 | 000,000,000 | —D | C] – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\New Folder
[2009/07/10 12:15:46 | 000,306,544 | —- | C] (Microsoft Corporation) – C:\WINDOWS\WLXPGSS.SCR
[2009/07/05 19:56:49 | 000,000,000 | —D | C] – C:\WINDOWS\Prefetch
[2009/07/05 19:37:53 | 000,000,000 | -H-D | C] – C:\WINDOWS\$NtServicePackUninstall$
[2009/07/05 19:24:48 | 000,000,000 | —D | C] – C:\WINDOWS\ie8updates
[2009/07/05 19:20:56 | 000,000,000 | -H-D | C] – C:\WINDOWS\ie8
[2009/07/05 19:03:18 | 000,000,000 | —D | C] – C:\WINDOWS\System32\RTCOM
[2009/07/05 18:39:35 | 000,000,000 | —D | C] – C:\WINDOWS\nview
[2009/06/30 18:55:31 | 000,000,000 | —D | C] – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\My Received Files
[2009/06/30 17:13:56 | 000,000,000 | —D | C] – C:\WINDOWS\pss
[2009/06/30 16:21:34 | 000,000,000 | R–D | C] – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\My Music
[2009/06/30 16:21:32 | 000,000,000 | R–D | C] – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\My Pictures
[2009/06/30 15:44:31 | 000,024,661 | —- | C] (Perle Systems Ltd.) – C:\WINDOWS\System32\spxcoins.dll
========== Files - Modified Within 30 Days ==========
[2010/06/03 04:12:58 | 000,016,547 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\OTL.zip
[2010/06/03 04:12:46 | 000,010,489 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\Extras.zip
[2010/06/03 03:31:01 | 000,000,884 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2010/06/03 00:55:55 | 000,593,743 | —- | M] () – C:\WINDOWS\System32\drivers\Avg\iavifw.avm
[2010/06/03 00:55:54 | 060,640,563 | —- | M] () – C:\WINDOWS\System32\drivers\Avg\incavi.avm
[2010/06/02 23:41:03 | 000,000,424 | -H– | M] () – C:\WINDOWS\tasks\User_Feed_Synchronization-{169FDE4B-E2F9-4890-879E-D1A096EA74F2}.job
[2010/06/02 20:19:23 | 000,998,736 | —- | M] (Kaspersky Lab) – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\TDSSKiller.exe
[2010/06/02 20:07:50 | 000,966,213 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\tdsskiller.zip
[2010/06/02 17:33:15 | 000,001,374 | —- | M] () – C:\WINDOWS\System32\wpa.dbl
[2010/06/02 17:32:59 | 000,276,202 | —- | M] () – C:\WINDOWS\System32\NvApps.xml
[2010/06/02 17:32:35 | 000,000,006 | -H– | M] () – C:\WINDOWS\tasks\SA.DAT
[2010/06/02 17:32:28 | 000,002,048 | –S- | M] () – C:\WINDOWS\bootstat.dat
[2010/06/02 12:52:20 | 004,980,736 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\NTUSER.DAT
[2010/06/02 03:52:42 | 000,293,376 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\39ki73vk GMER.exe
[2010/06/02 03:37:27 | 2952,347,648 | —- | M] () – C:\WINDOWS\MEMORY.DMP
[2010/06/01 19:32:14 | 000,000,472 | —- | M] () – C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job
[2010/06/01 19:27:36 | 000,000,880 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2010/06/01 17:55:00 | 000,000,284 | —- | M] () – C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2010/06/01 08:59:33 | 000,001,107 | —- | M] () – C:\WINDOWS\win.ini
[2010/06/01 08:59:33 | 000,000,321 | -HS- | M] () – C:\boot.ini
[2010/06/01 08:59:33 | 000,000,227 | —- | M] () – C:\WINDOWS\system.ini
[2010/06/01 08:39:23 | 000,242,896 | —- | M] (AVG Technologies CZ, s.r.o.) – C:\WINDOWS\System32\drivers\avgtdix.sys
[2010/06/01 08:39:23 | 000,029,584 | —- | M] (AVG Technologies CZ, s.r.o.) – C:\WINDOWS\System32\drivers\avgmfx86.sys
[2010/06/01 08:11:15 | 000,000,259 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\Nationwide Building Society Mortgages, Savings, Current Accounts, Banking, Insurance, Credit Cards, Loans, Investments.url
[2010/05/31 23:30:34 | 000,000,220 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\TV Guide UK TV Listings - UK's No 1 TV Listing site for Freeview, Sky, Virgin Media, Freesat & Tiscali TV.url
[2010/05/31 19:14:42 | 000,000,665 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\UK Credit Cards Capital One.url
[2010/05/31 19:12:49 | 000,000,249 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\home page Take a Break Bingo.url
[2010/05/31 19:05:33 | 000,000,335 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\Free Criminal Record Check - Page 2 - Cable Forum.url
[2010/05/30 23:02:00 | 000,000,302 | —- | M] () – C:\WINDOWS\tasks\Ad-Aware 2007.job
[2010/05/30 21:38:30 | 000,571,392 | —- | M] (OldTimer Tools) – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\OTL.exe
[2010/05/30 20:55:22 | 000,000,317 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\lost google - now searchqu.com.url
[2010/05/30 20:49:36 | 000,000,635 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\Sign In.url
[2010/05/30 18:15:24 | 000,021,505 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\a-boozer.html
[2010/05/30 18:04:48 | 000,000,281 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\THAI BART RATE CONVERTER.url
[2010/05/29 22:00:37 | 000,000,244 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\youtube.com-gl=GB&hl=en-GB.url
[2010/05/29 07:45:28 | 000,000,000 | —- | M] () – C:\WINDOWS\iPlayer.INI
[2010/05/29 07:39:42 | 000,026,616 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
[2010/05/29 04:32:24 | 000,000,792 | —- | M] () – C:\Documents and Settings\All Users\Desktop\InterActual Player.lnk
[2010/05/28 18:27:18 | 000,000,394 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\CATCH-UP.url
[2010/05/28 11:42:05 | 000,147,608 | —- | M] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2010/05/28 05:34:24 | 000,000,278 | -HS- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\ntuser.ini
[2010/05/28 03:44:57 | 000,000,317 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\Thai for Lovers.url
[2010/05/28 03:25:08 | 000,000,210 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\Manee and Friends.url
[2010/05/27 17:52:54 | 000,023,832 | —- | M] (Logitech Inc.) – C:\WINDOWS\System32\drivers\lvuvcflt.sys
[2010/05/27 17:52:23 | 000,888,832 | —- | M] (NVIDIA Corporation) – C:\WINDOWS\System32\fdco1ins.dll
[2010/05/27 17:52:23 | 000,888,832 | —- | M] (NVIDIA Corporation) – C:\WINDOWS\System32\fdco1.dll
[2010/05/27 17:52:23 | 000,067,328 | —- | M] (NVIDIA Corporation) – C:\WINDOWS\System32\drivers\NVENETFD.sys
[2010/05/27 04:04:22 | 000,000,211 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\eBay - The UK's Online Marketplace.url
[2010/05/26 04:51:24 | 000,000,238 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\Mazda RX-8 Owners Club UK.url
[2010/05/25 03:46:55 | 000,000,316 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\allfreegames.eu-free-online-games-play-Crash+Bandicoot-45e8beb2f472b5b11031a1f9171bab8b.html.url
[2010/05/25 02:27:07 | 000,029,696 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Basildon Magistrates Court.doc
[2010/05/24 11:09:51 | 000,002,137 | —- | M] () – C:\Documents and Settings\All Users\Desktop\iTunes.lnk
[2010/05/24 04:47:27 | 000,000,224 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\BBC iPlayer - Home.url
[2010/05/23 17:18:33 | 000,000,580 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\My Account - PayPal.url
[2010/05/22 21:44:32 | 000,084,197 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\win 7 report compatability.mht
[2010/05/22 20:29:42 | 000,001,928 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Google Earth.lnk
[2010/05/22 09:25:32 | 000,000,243 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\oilcareers.com-worldwide-.url
[2010/05/21 22:28:37 | 000,000,248 | —- | M] () – C:\Short Term Car Insurance One Day Car Insurance 1 Day Insurance.url
[2010/05/20 10:30:13 | 000,000,158 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\AVForums.com Home.url
[2010/05/16 04:05:41 | 000,000,660 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Application Data\ClipExtractor-YouTube-Clip-ExtractorFlvConverterDefaultSettings.xml
[2010/05/16 00:27:14 | 000,000,186 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\My Lifetracks - Lifetracks.com.url
[2010/05/14 19:26:10 | 000,001,863 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Logitech Webcam Software.lnk
[2010/05/13 16:40:01 | 000,000,803 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Logitech Vid.lnk
[2010/05/12 17:52:58 | 000,001,374 | —- | M] () – C:\WINDOWS\imsins.BAK
[2010/05/12 11:21:16 | 000,221,568 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\MpSigStub.exe
[2010/05/08 05:21:32 | 000,577,660 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\RX8_Stereo_Removal.pdf
[2010/04/29 21:45:47 | 000,000,125 | —- | M] () – C:\WINDOWS\cdplayer.ini
[2010/04/27 18:33:44 | 000,015,880 | —- | M] () – C:\WINDOWS\System32\lsdelete.exe
[2010/04/16 08:33:36 | 003,003,680 | —- | M] (Apple, Inc.) – C:\WINDOWS\System32\usbaaplrc.dll
[2010/04/08 13:20:02 | 000,107,808 | —- | M] (Apple Inc.) – C:\WINDOWS\System32\dns-sd.exe
[2010/04/08 13:20:02 | 000,091,424 | —- | M] (Apple Inc.) – C:\WINDOWS\System32\dnssd.dll
[2010/04/05 20:10:12 | 000,020,992 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\ben letter to yde.doc
[2010/04/05 06:12:20 | 000,000,762 | —- | M] () – C:\Documents and Settings\All Users\Desktop\RegistryBooster.lnk
[2010/04/04 07:19:25 | 000,516,198 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\95-7510_manual metra stereo.pdf
[2010/04/03 23:55:31 | 014,757,888 | —- | M] (NVIDIA Corporation) – C:\WINDOWS\System32\nvoglnt.dll
[2010/04/03 23:55:31 | 011,647,592 | —- | M] (NVIDIA Corporation) – C:\WINDOWS\System32\nvcompiler.dll
[2010/04/03 23:55:31 | 010,232,128 | —- | M] (NVIDIA Corporation) – C:\WINDOWS\System32\drivers\nv4_mini.sys
[2010/04/03 23:55:31 | 010,232,128 | —- | M] (NVIDIA Corporation) – C:\WINDOWS\System32\dllcache\nv4_mini.sys
[2010/04/03 23:55:31 | 006,432,128 | —- | M] (NVIDIA Corporation) – C:\WINDOWS\System32\nv4_disp.dll
[2010/04/03 23:55:31 | 004,075,520 | —- | M] (NVIDIA Corporation) – C:\WINDOWS\System32\nvcuda.dll
[2010/04/03 23:55:31 | 002,646,632 | —- | M] (NVIDIA Corporation) – C:\WINDOWS\System32\nvcuvenc.dll
[2010/04/03 23:55:31 | 002,183,470 | —- | M] () – C:\WINDOWS\System32\nvdata.bin
[2010/04/03 23:55:31 | 002,030,184 | —- | M] (NVIDIA Corporation) – C:\WINDOWS\System32\nvcuvid.dll
[2010/04/03 23:55:31 | 001,097,728 | —- | M] (NVIDIA Corporation) – C:\WINDOWS\System32\nvapi.dll
[2010/04/03 23:55:31 | 000,600,680 | —- | M] (NVIDIA Corporation) – C:\WINDOWS\System32\nvudisp.exe
[2010/04/03 23:55:31 | 000,227,944 | —- | M] (NVIDIA Corporation) – C:\WINDOWS\System32\nvcodins.dll
[2010/04/03 23:55:31 | 000,227,944 | —- | M] (NVIDIA Corporation) – C:\WINDOWS\System32\nvcod.dll
[2010/04/03 23:55:31 | 000,061,440 | —- | M] (Khronos Group) – C:\WINDOWS\System32\OpenCL.dll
[2010/04/03 23:55:31 | 000,025,755 | —- | M] () – C:\WINDOWS\System32\nvdisp.nvu
[2010/04/03 23:55:31 | 000,009,046 | —- | M] () – C:\WINDOWS\System32\nvinfo.pb
[2010/04/03 19:23:18 | 000,278,120 | —- | M] (NVIDIA Corporation) – C:\WINDOWS\System32\nvmccs.dll
[2010/04/03 19:23:16 | 013,670,504 | —- | M] (NVIDIA Corporation) – C:\WINDOWS\System32\nvcpl.dll
[2010/04/03 19:23:16 | 000,145,000 | —- | M] (NVIDIA Corporation) – C:\WINDOWS\System32\nvcolor.exe
[2010/04/03 19:23:16 | 000,110,696 | —- | M] (NVIDIA Corporation) – C:\WINDOWS\System32\nvmctray.dll
[2010/04/03 19:22:54 | 000,081,920 | —- | M] (NVIDIA Corporation) – C:\WINDOWS\System32\nvwddi.dll
[2010/04/03 19:22:32 | 000,066,714 | —- | M] () – C:\WINDOWS\System32\NvwsApps.xml
[2010/04/02 16:54:38 | 000,600,680 | —- | M] (NVIDIA Corporation) – C:\WINDOWS\System32\NVUNINST.EXE
[2010/04/01 21:51:38 | 096,180,512 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\RX8_workshop_manual.zip
[2010/04/01 05:32:14 | 003,506,285 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\mot.jpg
[2010/03/29 13:46:37 | 000,521,444 | —- | M] () – C:\WINDOWS\System32\PerfStringBackup.INI
[2010/03/29 13:46:37 | 000,441,638 | —- | M] () – C:\WINDOWS\System32\perfh009.dat
[2010/03/29 13:46:37 | 000,071,780 | —- | M] () – C:\WINDOWS\System32\perfc009.dat
[2010/03/28 21:57:20 | 000,000,737 | —- | M] () – C:\Documents and Settings\All Users\Desktop\PowerSuite.lnk
[2010/03/17 21:53:42 | 000,094,208 | —- | M] (Apple Inc.) – C:\WINDOWS\System32\QuickTimeVR.qtx
[2010/03/17 21:53:42 | 000,069,632 | —- | M] (Apple Inc.) – C:\WINDOWS\System32\QuickTime.qts
[2010/03/15 16:02:05 | 005,136,305 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\manual RX8 2009 ON.pdf
[2010/03/10 07:15:52 | 000,420,352 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\vbscript.dll
[2010/03/10 07:15:52 | 000,420,352 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\vbscript.dll
[2010/03/05 03:04:04 | 000,012,464 | —- | M] (AVG Technologies CZ, s.r.o.) – C:\WINDOWS\System32\avgrsstx.dll
[2010/03/05 03:03:57 | 000,025,096 | —- | M] (AVG Technologies CZ, s.r.o. ) – C:\WINDOWS\System32\drivers\AVGIDSxx.sys
[2010/03/05 03:03:53 | 000,216,200 | —- | M] (AVG Technologies CZ, s.r.o.) – C:\WINDOWS\System32\drivers\avgldx86.sys
[2010/03/05 03:03:51 | 000,052,872 | —- | M] (AVG Technologies CZ, s.r.o.) – C:\WINDOWS\System32\drivers\avgrkx86.sys
[2010/02/26 05:02:30 | 000,060,172 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Spidermite[1].pdf
[2010/02/26 05:01:49 | 000,016,618 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\blank grow sheet[1].pdf
[2010/02/25 11:54:36 | 011,070,976 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ieframe.dll
[2010/02/25 07:24:37 | 001,209,344 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\urlmon.dll
[2010/02/25 07:24:37 | 000,916,480 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wininet.dll
[2010/02/25 07:24:37 | 000,611,840 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\mstime.dll
[2010/02/25 07:24:37 | 000,611,840 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mstime.dll
[2010/02/25 07:24:37 | 000,206,848 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\occache.dll
[2010/02/25 07:24:36 | 005,944,832 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mshtml.dll
[2010/02/25 07:24:35 | 001,985,536 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iertutil.dll
[2010/02/25 07:24:35 | 001,469,440 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\inetcpl.cpl
[2010/02/25 07:24:35 | 001,469,440 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\inetcpl.cpl
[2010/02/25 07:24:35 | 000,594,432 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\msfeeds.dll
[2010/02/25 07:24:35 | 000,594,432 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msfeeds.dll
[2010/02/25 07:24:35 | 000,184,320 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\iepeers.dll
[2010/02/25 07:24:35 | 000,184,320 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iepeers.dll
[2010/02/25 07:24:35 | 000,055,296 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\msfeedsbs.dll
[2010/02/25 07:24:35 | 000,055,296 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msfeedsbs.dll
[2010/02/25 07:24:35 | 000,025,600 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\jsproxy.dll
[2010/02/25 07:24:35 | 000,025,600 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\jsproxy.dll
[2010/02/25 07:24:34 | 000,387,584 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\iedkcs32.dll
[2010/02/25 07:24:34 | 000,387,584 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iedkcs32.dll
[2010/02/24 14:11:07 | 000,455,680 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mrxsmb.sys
[2010/02/24 10:54:25 | 000,173,056 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\ie4uinit.exe
[2010/02/24 10:54:25 | 000,173,056 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ie4uinit.exe
[2010/02/22 13:04:34 | 000,000,258 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\The Complete guide to Sick Plants,pH, and Pest troubles! - International Cannagraphic Magazine Forums (2).url
[2010/02/20 00:47:50 | 003,604,480 | —- | M] (Google Inc.) – C:\WINDOWS\System32\GPhotos.scr
[2010/02/19 05:50:06 | 000,000,671 | -H– | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\.picasa.ini
[2010/02/19 04:30:32 | 007,217,077 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\FE-310_Instruction_Manual_EN.pdf
[2010/02/17 09:10:28 | 002,189,952 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ntoskrnl.exe
[2010/02/16 19:30:44 | 000,095,024 | —- | M] (Sunbelt Software) – C:\WINDOWS\System32\drivers\SBREDrv.sys
[2010/02/16 19:29:05 | 000,000,880 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Ad-Aware.lnk
[2010/02/16 15:08:49 | 002,146,304 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\ntoskrnl.exe
[2010/02/16 15:08:49 | 002,146,304 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ntkrnlmp.exe
[2010/02/16 14:25:04 | 002,066,816 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ntkrnlpa.exe
[2010/02/16 14:25:04 | 002,024,448 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ntkrpamp.exe
[2010/02/16 14:25:04 | 002,024,448 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\ntkrnlpa.exe
[2010/02/12 11:03:03 | 000,293,376 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\browserchoice.exe
[2010/02/12 05:33:11 | 000,100,864 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\6to4svc.dll
[2010/02/11 17:03:15 | 002,005,173 | —- | M] () – C:\WINDOWS\iis6.BAK
[2010/02/11 13:02:15 | 000,226,880 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\tcpip6.sys
[2010/02/11 13:02:15 | 000,226,880 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tcpip6.sys
[2010/02/08 02:45:13 | 000,022,016 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Ben M.doc
[2010/02/05 14:47:05 | 000,020,992 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Ben Money.doc
[2010/02/04 19:57:03 | 000,000,000 | —- | M] () – C:\WINDOWS\PCFriend.INI
[2010/02/04 16:53:02 | 000,064,288 | —- | M] (Lavasoft AB) – C:\WINDOWS\System32\drivers\Lbd.sys
[2010/01/31 19:55:55 | 000,496,605 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Start_up_guide_Business_plan.pdf
[2010/01/31 19:55:25 | 000,482,240 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Start_up_guide_part_2.pdf
[2010/01/31 19:54:03 | 000,589,849 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Start_up_guide_part_1.pdf
[2010/01/29 16:01:30 | 000,691,712 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\inetcomm.dll
[2010/01/29 15:43:39 | 000,307,260 | —- | M] (Fraunhofer Institut Integrierte Schaltungen IIS) – C:\WINDOWS\System32\l3codeca.acm
[2010/01/29 15:43:39 | 000,143,422 | —- | M] (Fraunhofer Institut Integrierte Schaltungen IIS) – C:\WINDOWS\System32\l3codecx.ax
[2010/01/19 21:55:17 | 000,142,495 | —- | M] () – C:\WINDOWS\System32\drivers\Avg\microavi.avg
[2010/01/13 15:01:25 | 000,086,016 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cabview.dll
[2009/12/31 17:50:03 | 000,353,792 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\srv.sys
[2009/12/24 07:59:40 | 000,177,664 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wintrust.dll
[2009/12/16 19:43:27 | 000,343,040 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\mspaint.exe
[2009/12/16 19:43:27 | 000,343,040 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mspaint.exe
[2009/12/14 08:08:23 | 000,033,280 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\csrsrv.dll
[2009/12/14 08:08:23 | 000,033,280 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\csrsrv.dll
[2009/12/09 06:53:44 | 000,726,528 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\jscript.dll
[2009/12/09 06:53:44 | 000,726,528 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\jscript.dll
[2009/12/08 10:23:28 | 000,474,112 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\shlwapi.dll
[2009/12/06 00:10:53 | 000,001,742 | —- | M] () – C:\Adobe Reader 9.lnk
[2009/12/04 21:22:56 | 118,327,296 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Doc1.doc
[2009/12/04 09:44:23 | 004,287,134 | -H– | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Local Settings\Application Data\IconCache.db
[2009/12/01 22:05:41 | 000,000,225 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\TITANIUM.url
[2009/11/27 18:11:44 | 001,291,776 | —- | M] () – C:\WINDOWS\System32\quartz.dll
[2009/11/27 18:11:44 | 001,291,776 | —- | M] () – C:\WINDOWS\System32\dllcache\quartz.dll
[2009/11/27 18:11:44 | 000,017,920 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msyuv.dll
[2009/11/27 17:07:35 | 000,028,672 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msvidc32.dll
[2009/11/27 17:07:35 | 000,008,704 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tsbyuv.dll
[2009/11/27 17:07:34 | 000,084,992 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\avifil32.dll
[2009/11/27 17:07:34 | 000,084,992 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\avifil32.dll
[2009/11/27 17:07:34 | 000,048,128 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iyuv_32.dll
[2009/11/27 17:07:34 | 000,011,264 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msrle32.dll
[2009/11/21 16:51:42 | 001,206,508 | —- | M] () – C:\WINDOWS\System32\dllcache\sysmain.sdb
[2009/11/21 16:51:04 | 000,471,552 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\aclayers.dll
[2009/10/27 18:07:25 | 000,027,290 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\UK_Davidman_Diet_2_160x600.gif
[2009/10/26 05:00:23 | 000,257,866 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\e-ticket Invoice No 656065.zip
[2009/10/24 18:03:22 | 000,024,046 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\TB2Categories000.dat
[2009/10/24 13:06:41 | 000,000,056 | -H– | M] () – C:\WINDOWS\System32\ezsidmv.dat
[2009/10/23 16:28:37 | 003,558,912 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\moviemk.exe
[2009/10/23 01:18:52 | 000,113,461 | —- | M] () – C:\WINDOWS\System32\drivers\Avg\iavichjw.avm
[2009/10/23 01:18:19 | 000,050,968 | —- | M] (AVG Technologies CZ, s.r.o.) – C:\WINDOWS\System32\avgfwdx.dll
[2009/10/23 01:18:19 | 000,030,104 | —- | M] (AVG Technologies CZ, s.r.o.) – C:\WINDOWS\System32\drivers\avgfwdx.sys
[2009/10/22 20:36:48 | 001,267,007 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\NOKIA 6233 USER MANUAL.pdf
[2009/10/21 06:38:36 | 000,075,776 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\strmfilt.dll
[2009/10/21 06:38:36 | 000,075,776 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\strmfilt.dll
[2009/10/21 06:38:36 | 000,025,088 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\httpapi.dll
[2009/10/21 06:38:36 | 000,025,088 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\httpapi.dll
[2009/10/20 17:20:16 | 000,265,728 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\http.sys
[2009/10/19 15:29:31 | 000,073,018 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\X2Z6WA[1].pdf
[2009/10/19 01:49:30 | 000,000,782 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\ltgreen.jpg
[2009/10/18 11:23:42 | 000,007,262 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\imageslove.jpg
[2009/10/18 11:20:00 | 000,007,621 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\2.jpg
[2009/10/18 11:20:00 | 000,003,986 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\girlfrend.jpg
[2009/10/18 11:20:00 | 000,002,958 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\images.jpg
[2009/10/18 11:20:00 | 000,002,805 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\images3.jpg
[2009/10/15 17:28:26 | 000,119,808 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\t2embed.dll
[2009/10/15 17:28:26 | 000,119,808 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\t2embed.dll
[2009/10/15 17:28:26 | 000,081,920 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\fontsub.dll
[2009/10/15 17:28:26 | 000,081,920 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fontsub.dll
[2009/10/13 11:30:16 | 000,270,336 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\oakley.dll
[2009/10/13 11:30:16 | 000,270,336 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\oakley.dll
[2009/10/12 14:38:19 | 000,149,504 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\rastls.dll
[2009/10/12 14:38:19 | 000,149,504 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rastls.dll
[2009/10/12 14:38:18 | 000,079,872 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\raschap.dll
[2009/10/12 14:38:18 | 000,079,872 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\raschap.dll
[2009/10/07 09:49:38 | 006,756,632 | —- | M] (Logitech Inc.) – C:\WINDOWS\System32\drivers\lvuvc.sys
[2009/10/07 09:48:52 | 000,539,160 | —- | M] (Logitech Inc.) – C:\WINDOWS\System32\LVUI2RC.dll
[2009/10/07 09:48:30 | 000,539,160 | —- | M] (Logitech Inc.) – C:\WINDOWS\System32\LVUI2.dll
[2009/10/07 09:47:54 | 000,266,008 | —- | M] (Logitech Inc.) – C:\WINDOWS\System32\drivers\lvrs.sys
[2009/10/07 09:46:12 | 000,114,712 | —- | M] (Logitech Inc.) – C:\WINDOWS\System32\drivers\lvpopflt.sys
[2009/10/07 09:43:42 | 000,199,192 | —- | M] (Logitech Inc.) – C:\WINDOWS\System32\lvci12101110.dll
[2009/10/07 09:43:30 | 000,416,280 | —- | M] (Logitech Inc.) – C:\WINDOWS\System32\lvcodec2.dll
[2009/10/07 09:25:08 | 000,266,828 | —- | M] () – C:\WINDOWS\System32\drivers\LVAFT.cfg
[2009/10/07 09:24:20 | 000,082,289 | —- | M] () – C:\WINDOWS\System32\lvcoinst.ini
[2009/10/07 09:24:04 | 000,034,068 | —- | M] () – C:\WINDOWS\System32\Repository.reg
[2009/10/07 01:46:36 | 000,025,752 | —- | M] () – C:\WINDOWS\System32\drivers\LVPr2Mon.sys
[2009/10/07 01:25:10 | 000,227,172 | —- | M] () – C:\WINDOWS\System32\drivers\LVFeL100.cfg
[2009/10/07 01:25:10 | 000,146,680 | —- | M] () – C:\WINDOWS\System32\drivers\LVFeL101.cfg
[2009/10/07 01:25:10 | 000,085,302 | —- | M] () – C:\WINDOWS\System32\drivers\LVFeL102.cfg
[2009/10/07 01:25:10 | 000,069,592 | —- | M] () – C:\WINDOWS\System32\drivers\LVFaL100.cfg
[2009/10/07 01:23:08 | 000,013,584 | —- | M] () – C:\WINDOWS\System32\drivers\iKeyLFT2.dll
[2009/10/01 00:55:25 | 000,492,629 | —- | M] () – C:\WINDOWS\System32\drivers\Avg\miniavi.avg
[2009/09/24 07:27:28 | 000,000,007 | —- | M] () – C:\WINDOWS\System32\Class15
[2009/09/24 07:27:28 | 000,000,005 | —- | M] () – C:\WINDOWS\System32\Band4
[2009/09/20 22:18:25 | 000,000,803 | —- | M] () – C:\Logitech Vid.lnk
[2009/09/20 22:13:41 | 000,001,863 | —- | M] () – C:\Logitech Webcam Software.lnk
[2009/09/14 05:14:11 | 000,082,652 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7220149 porn.JPG
[2009/09/14 05:14:11 | 000,080,996 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\1.JPG
[2009/09/11 21:14:36 | 000,084,425 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270164 temple of peace started 1984.JPG
[2009/09/11 21:13:44 | 000,085,054 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270163 massive carved temple of peace, 1986 200 builders.JPG
[2009/09/11 21:12:45 | 000,083,022 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\porn kiss dolphin.JPG
[2009/09/11 21:09:00 | 000,081,828 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7220146 crock swimming.JPG
[2009/09/11 21:08:13 | 000,085,709 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\tiger.JPG
[2009/09/11 21:07:20 | 000,083,427 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7220140 crock5.JPG
[2009/09/11 21:06:52 | 000,082,800 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7220139 crock4.JPG
[2009/09/11 21:05:13 | 000,081,453 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7220138 crock 3.JPG
[2009/09/11 21:04:32 | 000,082,207 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7220135 crock 2.JPG
[2009/09/11 21:02:09 | 000,081,716 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7190116 2 house in surin.JPG
[2009/09/11 21:01:30 | 000,084,788 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7190118 house in surin.JPG
[2009/09/11 20:03:40 | 000,084,260 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270155.JPG
[2009/09/11 19:53:08 | 000,082,632 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7250151 me on steps big budda.JPG
[2009/09/11 19:52:06 | 000,083,146 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7250150 big budda.JPG
[2009/09/11 19:50:09 | 000,085,060 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7220148 me.JPG
[2009/09/11 19:49:18 | 000,082,800 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7220139 crok.JPG
[2009/09/11 19:38:01 | 000,080,518 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7180092 014.JPG
[2009/09/11 19:35:34 | 000,079,649 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7300189 013.JPG
[2009/09/11 19:34:11 | 000,081,841 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7300188 012.JPG
[2009/09/11 19:33:32 | 000,083,048 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270185 011.JPG
[2009/09/11 19:32:28 | 000,083,922 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270183 010.JPG
[2009/09/11 19:31:03 | 000,084,744 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270181 09.JPG
[2009/09/11 19:29:47 | 000,085,020 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270178 08.JPG
[2009/09/11 16:43:02 | 000,085,473 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270176 07.JPG
[2009/09/11 16:38:07 | 000,082,526 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270173 06.JPG
[2009/09/11 16:37:29 | 000,086,589 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270171 05.JPG
[2009/09/11 16:36:56 | 000,083,057 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270170 04.JPG
[2009/09/11 16:36:17 | 000,082,965 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270169 03.JPG
[2009/09/11 16:35:22 | 000,082,384 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270168 02.JPG
[2009/09/11 16:34:47 | 000,084,675 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270167 01.JPG
[2009/09/11 15:18:39 | 000,136,192 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msv1_0.dll
[2009/09/09 20:36:51 | 000,000,969 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\My Sharing Folders.lnk
[2009/09/08 20:25:15 | 000,000,244 | -H– | M] () – C:\sqmnoopt07.sqm
[2009/09/08 20:25:15 | 000,000,232 | -H– | M] () – C:\sqmdata07.sqm
[2009/09/08 20:20:57 | 000,000,244 | -H– | M] () – C:\sqmnoopt06.sqm
[2009/09/08 20:20:57 | 000,000,232 | -H– | M] () – C:\sqmdata06.sqm
[2009/09/08 16:33:01 | 000,000,244 | -H– | M] () – C:\sqmnoopt05.sqm
[2009/09/08 16:33:01 | 000,000,232 | -H– | M] () – C:\sqmdata05.sqm
[2009/09/08 15:10:54 | 000,082,756 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P6200005.JPG
[2009/09/08 15:10:11 | 000,082,759 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\3.JPG
[2009/09/08 14:58:43 | 000,000,244 | -H– | M] () – C:\sqmnoopt04.sqm
[2009/09/08 14:58:43 | 000,000,232 | -H– | M] () – C:\sqmdata04.sqm
[2009/09/08 14:56:22 | 000,084,458 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Amporn, noi.jpg
[2009/09/08 08:07:38 | 000,000,244 | -H– | M] () – C:\sqmnoopt03.sqm
[2009/09/08 08:07:38 | 000,000,232 | -H– | M] () – C:\sqmdata03.sqm
[2009/09/08 06:53:15 | 000,000,244 | -H– | M] () – C:\sqmnoopt02.sqm
[2009/09/08 06:53:15 | 000,000,232 | -H– | M] () – C:\sqmdata02.sqm
[2009/09/07 19:57:30 | 000,000,244 | -H– | M] () – C:\sqmnoopt01.sqm
[2009/09/07 19:57:30 | 000,000,232 | -H– | M] () – C:\sqmdata01.sqm
[2009/09/07 12:25:28 | 000,000,244 | -H– | M] () – C:\sqmnoopt00.sqm
[2009/09/07 12:25:28 | 000,000,232 | -H– | M] () – C:\sqmdata00.sqm
[2009/09/07 03:29:30 | 000,000,244 | -H– | M] () – C:\sqmnoopt19.sqm
[2009/09/07 03:29:30 | 000,000,232 | -H– | M] () – C:\sqmdata19.sqm
[2009/09/06 18:01:40 | 000,000,244 | -H– | M] () – C:\sqmnoopt18.sqm
[2009/09/06 18:01:40 | 000,000,232 | -H– | M] () – C:\sqmdata18.sqm
[2009/09/06 05:42:21 | 000,000,268 | -H– | M] () – C:\sqmdata17.sqm
[2009/09/06 05:42:21 | 000,000,244 | -H– | M] () – C:\sqmnoopt17.sqm
[2009/09/05 19:00:24 | 000,000,045 | —- | M] () – C:\WINDOWS\System32\RPVersion.ini
[2009/09/05 14:32:52 | 000,000,244 | -H– | M] () – C:\sqmnoopt16.sqm
[2009/09/05 14:32:52 | 000,000,232 | -H– | M] () – C:\sqmdata16.sqm
[2009/09/05 05:42:42 | 000,000,244 | -H– | M] () – C:\sqmnoopt15.sqm
[2009/09/05 05:42:42 | 000,000,232 | -H– | M] () – C:\sqmdata15.sqm
[2009/09/05 04:11:07 | 000,000,244 | -H– | M] () – C:\sqmnoopt14.sqm
[2009/09/05 04:11:07 | 000,000,232 | -H– | M] () – C:\sqmdata14.sqm
[2009/09/04 22:03:36 | 000,058,880 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msasn1.dll
[2009/09/04 15:47:12 | 000,000,232 | -H– | M] () – C:\sqmdata13.sqm
[2009/09/04 15:47:11 | 000,000,244 | -H– | M] () – C:\sqmnoopt13.sqm
[2009/09/01 00:30:25 | 000,000,049 | —- | M] () – C:\WINDOWS\NeroDigital.ini
[2009/09/01 00:24:34 | 000,023,392 | —- | M] () – C:\WINDOWS\System32\nscompat.tlb
[2009/09/01 00:24:34 | 000,016,832 | —- | M] () – C:\WINDOWS\System32\amcompat.tlb
[2009/08/26 09:00:21 | 000,247,326 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\strmdll.dll
[2009/08/26 09:00:21 | 000,247,326 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\strmdll.dll
[2009/08/25 10:17:27 | 000,354,816 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winhttp.dll
[2009/08/23 22:00:38 | 000,922,112 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\imapi2fs.dll
[2009/08/23 22:00:38 | 000,922,112 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imapi2fs.dll
[2009/08/23 22:00:38 | 000,426,496 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\imapi2.dll
[2009/08/23 22:00:38 | 000,426,496 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imapi2.dll
[2009/08/23 22:00:38 | 000,062,592 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cdrom.sys
[2009/08/15 20:43:06 | 000,000,244 | -H– | M] () – C:\sqmnoopt12.sqm
[2009/08/15 20:43:06 | 000,000,232 | -H– | M] () – C:\sqmdata12.sqm
[2009/08/14 14:21:25 | 001,850,624 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\win32k.sys
[2009/08/14 14:21:25 | 001,850,624 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\win32k.sys
[2009/08/09 11:42:16 | 000,000,244 | -H– | M] () – C:\sqmnoopt11.sqm
[2009/08/09 11:42:16 | 000,000,232 | -H– | M] () – C:\sqmdata11.sqm
[2009/08/09 10:48:42 | 000,000,244 | -H– | M] () – C:\sqmnoopt10.sqm
[2009/08/09 10:48:42 | 000,000,232 | -H– | M] () – C:\sqmdata10.sqm
[2009/08/09 09:45:21 | 000,000,244 | -H– | M] () – C:\sqmnoopt09.sqm
[2009/08/09 09:45:21 | 000,000,232 | -H– | M] () – C:\sqmdata09.sqm
[2009/08/09 07:40:27 | 000,000,232 | -H– | M] () – C:\sqmdata08.sqm
[2009/08/09 07:40:26 | 000,000,244 | -H– | M] () – C:\sqmnoopt08.sqm
[2009/08/06 19:24:18 | 000,327,896 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\wucltui.dll
[2009/08/06 19:24:18 | 000,327,896 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wucltui.dll
[2009/08/06 19:24:18 | 000,209,632 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuweb.dll
[2009/08/06 19:24:18 | 000,021,728 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\wucltui.dll.mui
[2009/08/06 19:24:12 | 000,015,072 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\wuaucpl.cpl.mui
[2009/08/06 19:24:10 | 000,217,816 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuaucpl.cpl
[2009/08/06 19:24:10 | 000,044,768 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\wups2.dll
[2009/08/06 19:24:10 | 000,035,552 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\wups.dll
[2009/08/06 19:24:10 | 000,035,552 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wups.dll
[2009/08/06 19:24:06 | 000,053,472 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuauclt.exe
[2009/08/06 19:24:06 | 000,015,064 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\wuapi.dll.mui
[2009/08/06 19:24:04 | 000,096,480 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cdm.dll
[2009/08/06 19:24:04 | 000,096,480 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\cdm.dll
[2009/08/06 19:24:00 | 000,017,632 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\wuaueng.dll.mui
[2009/08/06 19:23:54 | 000,575,704 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\wuapi.dll
[2009/08/06 19:23:54 | 000,575,704 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuapi.dll
[2009/08/06 19:23:46 | 001,929,952 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuaueng.dll
[2009/08/06 19:23:46 | 000,274,288 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\mucltui.dll
[2009/08/06 19:23:46 | 000,016,736 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\mucltui.dll.mui
[2009/08/05 22:48:42 | 000,054,752 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\fssfltr_tdi.sys
[2009/08/05 13:18:47 | 000,280,320 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Amporn.jpg
[2009/08/05 10:01:48 | 000,204,800 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\mswebdvd.dll
[2009/08/05 10:01:48 | 000,204,800 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mswebdvd.dll
[2009/08/03 15:07:42 | 000,403,816 | —- | M] () – C:\WINDOWS\System32\OGACheckControl.dll
[2009/08/03 15:07:42 | 000,322,928 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\OGAAddin.dll
[2009/08/03 15:07:42 | 000,230,768 | —- | M] () – C:\WINDOWS\System32\OGAEXEC.exe
[2009/08/02 05:29:42 | 000,029,904 | —- | M] () – C:\WINDOWS\System32\aawservice_2009_08_02_05_29_42.dmp
[2009/07/31 11:05:44 | 001,372,672 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msxml6.dll
[2009/07/31 05:35:42 | 001,172,480 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msxml3.dll
[2009/07/30 20:07:08 | 000,828,852 | —- | M] () – C:\Documents and Settings\All Users\Application Data\LUUnInstall.LiveUpdate
[2009/07/30 18:53:04 | 006,061,540 | —- | M] () – C:\WINDOWS\System32\drivers\Avg\avi7.avg
[2009/07/26 16:44:56 | 000,048,448 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\sirenacm.dll
[2009/07/17 20:01:06 | 000,058,880 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\atl.dll
[2009/07/17 17:22:18 | 001,435,648 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\query.dll
[2009/07/17 17:22:18 | 001,435,648 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\query.dll
[2009/07/16 19:10:39 | 000,005,037 | —- | M] () – C:\I hope you are well in England_.eml
[2009/07/16 18:41:22 | 000,033,647 | —- | M] () – C:\RE_ Think of my family.eml
[2009/07/16 18:40:53 | 000,024,714 | —- | M] () – C:\RE_ Miss u.eml
[2009/07/16 18:40:35 | 000,015,004 | —- | M] () – C:\RE_ Take care yourself.eml
[2009/07/16 18:40:08 | 000,008,427 | —- | M] () – C:\RE_ Dream to u.eml
[2009/07/13 23:43:24 | 010,841,088 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmp.dll
[2009/07/13 23:43:24 | 000,286,208 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmpdxm.dll
[2009/07/10 12:15:46 | 000,306,544 | —- | M] (Microsoft Corporation) – C:\WINDOWS\WLXPGSS.SCR
[2009/07/07 14:33:02 | 000,003,541 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\confirmation Marc[1].htm
[2009/07/05 19:58:53 | 000,316,640 | —- | M] () – C:\WINDOWS\WMSysPr9.prx
[2009/07/05 18:53:22 | 000,000,044 | —- | M] () – C:\WINDOWS\System32\msssc.dll
[2009/07/05 06:14:55 | 000,000,664 | —- | M] () – C:\WINDOWS\System32\d3d9caps.dat
[2009/07/04 23:36:04 | 000,000,376 | —- | M] () – C:\WINDOWS\ODBC.INI
[2009/07/04 03:44:01 | 000,013,824 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009/07/03 15:04:31 | 000,000,552 | —- | M] () – C:\WINDOWS\System32\d3d8caps.dat
[2009/07/02 16:38:22 | 000,000,104 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\Internet.lnk
[2009/06/30 16:23:15 | 000,000,145 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Local Settings\Application Data\fusioncache.dat
[2009/06/30 16:22:59 | 000,001,526 | —- | M] () – C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Utility Tray.lnk
[2009/06/30 16:22:54 | 000,001,738 | —- | M] () – C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Microsoft Office.lnk
[2009/06/30 16:22:47 | 000,000,811 | —- | M] () – C:\Documents and Settings\All Users\Start Menu\Programs\Startup\HP Image Zone Fast Start.lnk
[2009/06/30 16:22:34 | 000,001,821 | —- | M] () – C:\Documents and Settings\All Users\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
[2009/06/30 16:21:20 | 000,001,374 | —- | M] () – C:\WINDOWS\System32\wpa.bak
[2009/06/30 16:06:12 | 000,000,288 | —- | M] () – C:\WINDOWS\System32\$winnt$.inf
[2009/06/30 16:01:54 | 000,004,161 | —- | M] () – C:\WINDOWS\ODBCINST.INI
[2009/06/30 16:00:47 | 000,000,488 | RH– | M] () – C:\WINDOWS\System32\WindowsLogon.manifest
[2009/06/30 16:00:47 | 000,000,488 | RH– | M] () – C:\WINDOWS\System32\logonui.exe.manifest
[2009/06/30 16:00:39 | 000,000,749 | RH– | M] () – C:\WINDOWS\System32\wuaucpl.cpl.manifest
[2009/06/30 16:00:39 | 000,000,749 | RH– | M] () – C:\WINDOWS\WindowsShell.Manifest
[2009/06/30 16:00:39 | 000,000,749 | RH– | M] () – C:\WINDOWS\System32\sapi.cpl.manifest
[2009/06/30 16:00:39 | 000,000,749 | RH– | M] () – C:\WINDOWS\System32\nwc.cpl.manifest
[2009/06/30 16:00:39 | 000,000,749 | RH– | M] () – C:\WINDOWS\System32\ncpa.cpl.manifest
[2009/06/30 16:00:39 | 000,000,749 | RH– | M] () – C:\WINDOWS\System32\cdplayer.exe.manifest
[2009/06/30 15:58:56 | 000,023,348 | —- | M] () – C:\WINDOWS\System32\emptyregdb.dat
[2009/06/29 09:40:16 | 000,057,667 | —- | M] () – C:\WINDOWS\System32\ieuinit.inf
[2009/06/25 09:25:26 | 000,730,112 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\lsasrv.dll
[2009/06/25 09:25:26 | 000,730,112 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\lsasrv.dll
[2009/06/25 09:25:26 | 000,301,568 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kerberos.dll
[2009/06/25 09:25:26 | 000,147,456 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\schannel.dll
[2009/06/25 09:25:26 | 000,056,832 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\secur32.dll
[2009/06/25 09:25:26 | 000,054,272 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wdigest.dll
[2009/06/24 12:18:41 | 000,092,928 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ksecdd.sys
[2009/06/12 13:31:40 | 000,080,896 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\tlntsess.exe
[2009/06/12 13:31:40 | 000,080,896 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tlntsess.exe
[2009/06/12 13:31:39 | 000,076,288 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\telnet.exe
[2009/06/12 13:31:39 | 000,076,288 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\telnet.exe
[2009/06/10 09:19:38 | 002,066,432 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mstscax.dll
[2009/06/10 07:14:49 | 000,132,096 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wkssvc.dll
========== Files Created - No Company Name ==========
[2010/06/03 04:12:58 | 000,016,547 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\OTL.zip
[2010/06/03 04:12:46 | 000,010,489 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\Extras.zip
[2010/06/02 20:07:48 | 000,966,213 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\tdsskiller.zip
[2010/06/02 03:52:37 | 000,293,376 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\39ki73vk GMER.exe
[2010/06/01 08:59:20 | 000,001,821 | —- | C] () – C:\Documents and Settings\All Users\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
[2010/06/01 08:59:20 | 000,001,783 | —- | C] () – C:\Documents and Settings\All Users\Start Menu\Programs\Startup\InterVideo WinCinema Manager.lnk
[2010/06/01 08:59:20 | 000,001,738 | —- | C] () – C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Microsoft Office.lnk
[2010/06/01 08:59:20 | 000,001,526 | —- | C] () – C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Utility Tray.lnk
[2010/06/01 08:59:20 | 000,000,811 | —- | C] () – C:\Documents and Settings\All Users\Start Menu\Programs\Startup\HP Image Zone Fast Start.lnk
[2010/05/31 19:05:33 | 000,000,335 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\Free Criminal Record Check - Page 2 - Cable Forum.url
[2010/05/30 18:15:19 | 000,021,505 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\a-boozer.html
[2010/05/29 11:48:27 | 000,000,317 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\lost google - now searchqu.com.url
[2010/05/29 07:45:28 | 000,000,000 | —- | C] () – C:\WINDOWS\iPlayer.INI
[2010/05/29 04:32:24 | 000,000,792 | —- | C] () – C:\Documents and Settings\All Users\Desktop\InterActual Player.lnk
[2010/05/28 03:44:57 | 000,000,317 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\Thai for Lovers.url
[2010/05/28 03:25:08 | 000,000,210 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\Manee and Friends.url
[2010/05/25 04:16:10 | 000,000,665 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\UK Credit Cards Capital One.url
[2010/05/25 03:46:55 | 000,000,316 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\allfreegames.eu-free-online-games-play-Crash+Bandicoot-45e8beb2f472b5b11031a1f9171bab8b.html.url
[2010/05/25 02:27:07 | 000,029,696 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Basildon Magistrates Court.doc
[2010/05/24 19:02:46 | 000,000,220 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\TV Guide UK TV Listings - UK's No 1 TV Listing site for Freeview, Sky, Virgin Media, Freesat & Tiscali TV.url
[2010/05/24 19:00:48 | 000,000,259 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\Nationwide Building Society Mortgages, Savings, Current Accounts, Banking, Insurance, Credit Cards, Loans, Investments.url
[2010/05/22 21:44:32 | 000,084,197 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\win 7 report compatability.mht
[2010/05/22 20:29:42 | 000,001,928 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Google Earth.lnk
[2010/05/20 10:30:13 | 000,000,158 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\AVForums.com Home.url
[2010/05/16 19:22:15 | 000,000,211 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\eBay - The UK's Online Marketplace.url
[2010/05/16 00:27:14 | 000,000,186 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\My Lifetracks - Lifetracks.com.url
[2010/05/14 23:08:09 | 000,000,243 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\oilcareers.com-worldwide-.url
[2010/05/14 19:26:10 | 000,001,863 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Logitech Webcam Software.lnk
[2010/05/13 16:40:01 | 000,000,803 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Logitech Vid.lnk
[2010/05/12 19:17:57 | 000,009,046 | —- | C] () – C:\WINDOWS\System32\nvinfo.pb
[2010/05/12 19:17:55 | 002,183,470 | —- | C] () – C:\WINDOWS\System32\nvdata.bin
[2010/05/08 05:21:25 | 000,577,660 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\RX8_Stereo_Removal.pdf
[2010/05/04 18:24:26 | 000,002,137 | —- | C] () – C:\Documents and Settings\All Users\Desktop\iTunes.lnk
[2010/04/05 20:10:11 | 000,020,992 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\ben letter to yde.doc
[2010/04/05 06:12:20 | 000,000,762 | —- | C] () – C:\Documents and Settings\All Users\Desktop\RegistryBooster.lnk
[2010/04/04 07:19:25 | 000,516,198 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\95-7510_manual metra stereo.pdf
[2010/04/01 21:51:29 | 096,180,512 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\RX8_workshop_manual.zip
[2010/04/01 05:32:08 | 003,506,285 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\mot.jpg
[2010/03/28 21:57:20 | 000,000,737 | —- | C] () – C:\Documents and Settings\All Users\Desktop\PowerSuite.lnk
[2010/03/16 05:03:45 | 000,000,238 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\Mazda RX-8 Owners Club UK.url
[2010/03/15 16:02:05 | 005,136,305 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\manual RX8 2009 ON.pdf
[2010/02/26 05:02:30 | 000,060,172 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Spidermite[1].pdf
[2010/02/26 05:01:49 | 000,016,618 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\blank grow sheet[1].pdf
[2010/02/23 20:27:12 | 000,000,258 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\The Complete guide to Sick Plants,pH, and Pest troubles! - International Cannagraphic Magazine Forums (2).url
[2010/02/19 04:30:32 | 007,217,077 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\FE-310_Instruction_Manual_EN.pdf
[2010/02/16 19:29:05 | 000,000,880 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Ad-Aware.lnk
[2010/02/08 02:00:26 | 000,022,016 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Ben M.doc
[2010/02/05 14:47:04 | 000,020,992 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Ben Money.doc
[2010/02/04 19:57:03 | 000,000,000 | —- | C] () – C:\WINDOWS\PCFriend.INI
[2010/01/31 19:55:55 | 000,496,605 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Start_up_guide_Business_plan.pdf
[2010/01/31 19:55:25 | 000,482,240 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Start_up_guide_part_2.pdf
[2010/01/31 19:54:03 | 000,589,849 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Start_up_guide_part_1.pdf
[2009/12/14 03:33:56 | 000,000,580 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\My Account - PayPal.url
[2009/12/04 21:22:44 | 118,327,296 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Doc1.doc
[2009/12/01 22:05:41 | 000,000,225 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\TITANIUM.url
[2009/11/30 04:38:54 | 000,024,046 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\TB2Categories000.dat
[2009/11/30 01:10:36 | 000,000,394 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\CATCH-UP.url
[2009/10/27 18:12:01 | 000,027,290 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\UK_Davidman_Diet_2_160x600.gif
[2009/10/26 05:00:21 | 000,257,866 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\e-ticket Invoice No 656065.zip
[2009/10/24 18:38:41 | 000,056,320 | —- | C] () – C:\WINDOWS\System32\iyvu9_32.dll
[2009/10/24 13:11:16 | 000,000,884 | —- | C] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2009/10/24 13:11:16 | 000,000,880 | —- | C] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2009/10/23 03:58:58 | 000,003,541 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\confirmation Marc[1].htm
[2009/10/22 20:36:48 | 001,267,007 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\NOKIA 6233 USER MANUAL.pdf
[2009/10/19 15:29:31 | 000,073,018 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\X2Z6WA[1].pdf
[2009/10/19 03:36:55 | 000,002,958 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\images.jpg
[2009/10/19 03:33:13 | 000,007,621 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\2.jpg
[2009/10/19 03:32:49 | 000,002,805 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\images3.jpg
[2009/10/19 03:32:42 | 000,003,986 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\girlfrend.jpg
[2009/10/19 03:32:34 | 000,007,262 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\imageslove.jpg
[2009/10/19 03:07:26 | 000,000,782 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\ltgreen.jpg
[2009/10/07 01:46:36 | 000,025,752 | —- | C] () – C:\WINDOWS\System32\drivers\LVPr2Mon.sys
[2009/10/07 01:23:08 | 000,013,584 | —- | C] () – C:\WINDOWS\System32\drivers\iKeyLFT2.dll
[2009/09/22 22:17:26 | 000,000,281 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\THAI BART RATE CONVERTER.url
[2009/09/21 19:07:55 | 000,000,424 | -H– | C] () – C:\WINDOWS\tasks\User_Feed_Synchronization-{169FDE4B-E2F9-4890-879E-D1A096EA74F2}.job
[2009/09/20 22:16:35 | 000,082,289 | —- | C] () – C:\WINDOWS\System32\lvcoinst.ini
[2009/09/20 22:16:35 | 000,034,068 | —- | C] () – C:\WINDOWS\System32\Repository.reg
[2009/09/14 05:14:11 | 000,082,652 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7220149 porn.JPG
[2009/09/14 05:14:11 | 000,080,996 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\1.JPG
[2009/09/11 21:14:35 | 000,084,425 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270164 temple of peace started 1984.JPG
[2009/09/11 21:13:44 | 000,085,054 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270163 massive carved temple of peace, 1986 200 builders.JPG
[2009/09/11 21:12:44 | 000,083,022 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\porn kiss dolphin.JPG
[2009/09/11 21:08:59 | 000,081,828 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7220146 crock swimming.JPG
[2009/09/11 21:08:13 | 000,085,709 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\tiger.JPG
[2009/09/11 21:07:20 | 000,083,427 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7220140 crock5.JPG
[2009/09/11 21:06:51 | 000,082,800 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7220139 crock4.JPG
[2009/09/11 21:05:12 | 000,081,453 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7220138 crock 3.JPG
[2009/09/11 21:04:31 | 000,082,207 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7220135 crock 2.JPG
[2009/09/11 21:02:09 | 000,081,716 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7190116 2 house in surin.JPG
[2009/09/11 21:01:29 | 000,084,788 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7190118 house in surin.JPG
[2009/09/11 20:03:40 | 000,084,260 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270155.JPG
[2009/09/11 19:53:07 | 000,082,632 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7250151 me on steps big budda.JPG
[2009/09/11 19:52:05 | 000,083,146 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7250150 big budda.JPG
[2009/09/11 19:50:08 | 000,085,060 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7220148 me.JPG
[2009/09/11 19:49:18 | 000,082,800 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7220139 crok.JPG
[2009/09/11 19:38:00 | 000,080,518 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7180092 014.JPG
[2009/09/11 19:35:34 | 000,079,649 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7300189 013.JPG
[2009/09/11 19:34:10 | 000,081,841 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7300188 012.JPG
[2009/09/11 19:33:31 | 000,083,048 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270185 011.JPG
[2009/09/11 19:32:27 | 000,083,922 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270183 010.JPG
[2009/09/11 19:31:02 | 000,084,744 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270181 09.JPG
[2009/09/11 19:29:46 | 000,085,020 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270178 08.JPG
[2009/09/11 16:43:01 | 000,085,473 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270176 07.JPG
[2009/09/11 16:38:06 | 000,082,526 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270173 06.JPG
[2009/09/11 16:37:29 | 000,086,589 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270171 05.JPG
[2009/09/11 16:36:56 | 000,083,057 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270170 04.JPG
[2009/09/11 16:36:16 | 000,082,965 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270169 03.JPG
[2009/09/11 16:35:21 | 000,082,384 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270168 02.JPG
[2009/09/11 16:34:47 | 000,084,675 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270167 01.JPG
[2009/09/08 16:19:31 | 000,000,671 | -H– | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\.picasa.ini
[2009/09/08 15:10:52 | 000,082,756 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P6200005.JPG
[2009/09/08 15:10:06 | 000,082,759 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\3.JPG
[2009/08/05 13:19:54 | 000,084,458 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Amporn, noi.jpg
[2009/08/05 13:18:39 | 000,280,320 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Amporn.jpg
[2009/08/03 15:07:42 | 000,403,816 | —- | C] () – C:\WINDOWS\System32\OGACheckControl.dll
[2009/08/03 07:24:46 | 000,000,244 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\youtube.com-gl=GB&hl=en-GB.url
[2009/07/30 20:32:28 | 000,000,472 | —- | C] () – C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job
[2009/07/19 07:22:30 | 000,000,045 | —- | C] () – C:\WINDOWS\System32\RPVersion.ini
[2009/07/08 20:27:20 | 000,000,635 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\Sign In.url
[2009/07/06 03:23:06 | 000,000,224 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\BBC iPlayer - Home.url
[2009/07/05 21:05:30 | 000,000,249 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\home page Take a Break Bingo.url
[2009/07/02 16:38:22 | 000,000,104 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\Internet.lnk
[2009/06/30 18:57:51 | 000,000,969 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\My Sharing Folders.lnk
[2009/06/30 16:00:39 | 000,000,749 | RH– | C] () – C:\WINDOWS\System32\wuaucpl.cpl.manifest
[2009/06/30 16:00:39 | 000,000,749 | RH– | C] () – C:\WINDOWS\WindowsShell.Manifest
[2009/06/30 16:00:39 | 000,000,749 | RH– | C] () – C:\WINDOWS\System32\sapi.cpl.manifest
[2009/06/30 15:34:58 | 2952,347,648 | —- | C] () – C:\WINDOWS\MEMORY.DMP
[2007/11/15 04:12:23 | 000,000,125 | —- | C] () – C:\WINDOWS\cdplayer.ini
[2007/11/13 02:38:13 | 002,729,472 | —- | C] () – C:\WINDOWS\System32\fun_avcodec.dll
[2006/12/08 03:14:52 | 000,000,000 | —- | C] () – C:\WINDOWS\hpqEmlSz.INI
[2006/12/04 07:51:01 | 000,060,672 | —- | C] () – C:\WINDOWS\PSCMN25.DLL
[2006/12/04 07:51:01 | 000,035,264 | —- | C] () – C:\WINDOWS\PSIMGJ1.DLL
[2006/11/25 11:34:25 | 000,000,214 | —- | C] () – C:\WINDOWS\HP_48BitScanUpdatePatch.ini
[2006/11/02 07:31:40 | 000,000,068 | —- | C] () – C:\WINDOWS\IDMan.INI
[2006/08/27 03:01:37 | 000,000,206 | —- | C] () – C:\WINDOWS\HPGdiPlus.ini
[2006/08/18 06:57:06 | 000,000,464 | —- | C] () – C:\WINDOWS\iScreensaver.ini
[2006/07/29 10:43:33 | 000,000,049 | —- | C] () – C:\WINDOWS\NeroDigital.ini
[2006/07/26 18:07:34 | 000,106,346 | —- | C] () – C:\WINDOWS\VGAsetup.ini
[2006/07/26 18:07:14 | 000,171,122 | —- | C] () – C:\WINDOWS\System32\VGAunistlog.ini
[2006/07/26 16:42:12 | 000,032,768 | —- | C] () – C:\WINDOWS\SIS_LIB.DLL
[2006/07/26 16:33:12 | 000,000,376 | —- | C] () – C:\WINDOWS\ODBC.INI
[2006/07/26 16:33:12 | 000,000,063 | —- | C] () – C:\WINDOWS\mdm.ini
[2006/07/26 16:32:08 | 000,000,000 | —- | C] () – C:\WINDOWS\NSREX.INI
[2006/07/26 16:24:50 | 000,000,044 | —- | C] () – C:\WINDOWS\System32\msssc.dll
[2001/11/19 20:05:18 | 000,003,972 | —- | C] () – C:\WINDOWS\System32\drivers\PciBus.sys
[2001/03/30 22:58:36 | 000,135,168 | —- | C] () – C:\WINDOWS\System32\property.dll
[1999/01/23 03:46:58 | 000,065,536 | —- | C] () – C:\WINDOWS\System32\MSRTEDIT.DLL
[1998/10/11 01:07:38 | 000,088,576 | —- | C] () – C:\WINDOWS\System32\Iticheck.dll
[1998/07/15 22:44:30 | 000,134,656 | —- | C] () – C:\WINDOWS\System32\itijpg2.dll
========== Alternate Data Streams ==========
@Alternate Data Stream - 118 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:5C321E34
< End of report >
OTL logfile created on: 6/3/2010 04:14:16 - Run 2
OTL by OldTimer - Version 3.2.5.1 Folder = C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000809 | Country: United Kingdom | Language: ENG | Date Format: M/d/yyyy
3.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 57.00% Memory free
9.00 Gb Paging File | 8.00 Gb Available in Paging File | 90.00% Paging File free
Paging file location(s): [Binary data over 100 bytes]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 189.91 Gb Total Space | 153.25 Gb Free Space | 80.70% Space Free | Partition Type: NTFS
Drive D: | 298.09 Gb Total Space | 280.92 Gb Free Space | 94.24% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Computer Name: NONE-5738F18114
Current User Name: Mark M
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal
========== Processes (SafeList) ==========
PRC - C:\Program Files\AVG\AVG9\avgtray.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG9\avgnsx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG9\avgrsx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG9\avgfws9.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG9\avgcsrvx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG9\avgchsvx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe (Lavasoft)
PRC - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe (Lavasoft)
PRC - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.)
PRC - C:\Program Files\Uniblue\PowerSuite\powersuite.exe (Uniblue Systems Limited)
PRC - C:\Program Files\Common Files\Autodata Limited Shared\Service\ADCDLicSvc.exe ()
PRC - C:\Program Files\Uniblue\SpeedUpMyPC\sump.exe (Uniblue Systems Limited)
PRC - C:\Program Files\AVG\AVG9\avgwdsvc.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG9\Identity Protection\Agent\Bin\AVGIDSAgent.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG9\Identity Protection\Agent\Bin\AVGIDSMonitor.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG9\avgam.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\Logitech\Logitech Vid\Vid.exe (Logitech Inc.)
PRC - C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe ()
PRC - C:\Program Files\Common Files\LogiShrd\LQCVFX\COCIManager.exe ()
PRC - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe (Logitech Inc.)
PRC - C:\Program Files\eBay\eBay Toolbar2\eBayTBDaemon.exe (eBay Inc.)
PRC - C:\Program Files\Windows Live\Contacts\wlcomm.exe (Microsoft Corporation)
PRC - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe (Yahoo! Inc.)
PRC - C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe (Sun Microsystems, Inc.)
PRC - C:\Program Files\Java\jre1.6.0_07\bin\jucheck.exe (Sun Microsystems, Inc.)
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\Kontiki\KService.exe (Kontiki Inc.)
PRC - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe ()
PRC - C:\Program Files\Picasa2\PicasaMediaDetector.exe (Google Inc.)
PRC - C:\WINDOWS\system32\sistray.exe (Silicon Integrated Systems Corporation)
PRC - C:\Program Files\Analog Devices\SoundMAX\SMTray.exe (Analog Devices, Inc.)
PRC - C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe ()
========== Modules (SafeList) ==========
MOD - C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\WINDOWS\system32\msscript.ocx (Microsoft Corporation)
========== Win32 Services (SafeList) ==========
SRV - (avgfws9) – C:\Program Files\AVG\AVG9\avgfws9.exe (AVG Technologies CZ, s.r.o.)
SRV - (aawservice) – C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe (Lavasoft)
SRV - (Apple Mobile Device) – C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.)
SRV - (Autodata Limited License Service) – C:\Program Files\Common Files\Autodata Limited Shared\Service\ADCDLicSvc.exe ()
SRV - (avg9wd) – C:\Program Files\AVG\AVG9\avgwdsvc.exe (AVG Technologies CZ, s.r.o.)
SRV - (AVGIDSAgent) – C:\Program Files\AVG\AVG9\Identity Protection\Agent\Bin\AVGIDSAgent.exe (AVG Technologies CZ, s.r.o.)
SRV - (LVPrcSrv) – C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe (Logitech Inc.)
SRV - (fsssvc) – C:\Program Files\Windows Live\Family Safety\fsssvc.exe (Microsoft Corporation)
SRV - (SeaPort) – C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe (Microsoft Corporation)
SRV - (YahooAUService) – C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe (Yahoo! Inc.)
SRV - (KService) – C:\Program Files\Kontiki\KService.exe (Kontiki Inc.)
SRV - (Symantec Core LC) – C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe ()
SRV - (Pml Driver HPZ12) – C:\WINDOWS\system32\HPZipm12.exe (HP)
SRV - (WinDefend) – C:\Program Files\Windows Defender\MsMpEng.exe (Microsoft Corporation)
========== Driver Services (SafeList) ==========
DRV - (AvgTdiX) – C:\WINDOWS\System32\Drivers\avgtdix.sys (AVG Technologies CZ, s.r.o.)
DRV - (AvgMfx86) – C:\WINDOWS\System32\Drivers\avgmfx86.sys (AVG Technologies CZ, s.r.o.)
DRV - (FilterService) – C:\WINDOWS\system32\drivers\lvuvcflt.sys (Logitech Inc.)
DRV - (NVENETFD) – C:\WINDOWS\system32\drivers\NVENETFD.sys (NVIDIA Corporation)
DRV - (nv) – C:\WINDOWS\system32\drivers\nv4_mini.sys (NVIDIA Corporation)
DRV - (AVGIDSDriverxpx) – C:\Program Files\AVG\AVG9\Identity Protection\Agent\Driver\Platform_XP\AVGIDSDriver.sys (AVG Technologies CZ, s.r.o. )
DRV - (AVGIDSFilterxpx) – C:\Program Files\AVG\AVG9\Identity Protection\Agent\Driver\Platform_XP\AVGIDSFilter.sys (AVG Technologies CZ, s.r.o. )
DRV - (AVGIDSShimxpx) – C:\Program Files\AVG\AVG9\Identity Protection\Agent\Driver\Platform_XP\AVGIDSShim.sys (AVG Technologies CZ, s.r.o. )
DRV - (AVGIDSErHrxpx) – C:\WINDOWS\System32\Drivers\AVGIDSxx.sys (AVG Technologies CZ, s.r.o. )
DRV - (AvgLdx86) – C:\WINDOWS\System32\Drivers\avgldx86.sys (AVG Technologies CZ, s.r.o.)
DRV - (AvgRkx86) – C:\WINDOWS\System32\Drivers\avgrkx86.sys (AVG Technologies CZ, s.r.o.)
DRV - (Lbd) – C:\WINDOWS\system32\DRIVERS\Lbd.sys (Lavasoft AB)
DRV - (Avgfwfd) – C:\WINDOWS\system32\drivers\avgfwdx.sys (AVG Technologies CZ, s.r.o.)
DRV - (Avgfwdx) – C:\WINDOWS\system32\drivers\avgfwdx.sys (AVG Technologies CZ, s.r.o.)
DRV - (LVUVC) Logitech Webcam 200(UVC) – C:\WINDOWS\system32\drivers\lvuvc.sys (Logitech Inc.)
DRV - (LVRS) – C:\WINDOWS\system32\drivers\lvrs.sys (Logitech Inc.)
DRV - (lvpopflt) – C:\WINDOWS\system32\drivers\lvpopflt.sys (Logitech Inc.)
DRV - (LVPr2Mon) – C:\WINDOWS\system32\drivers\LVPr2Mon.sys ()
DRV - (fssfltr) – C:\WINDOWS\system32\drivers\fssfltr_tdi.sys (Microsoft Corporation)
DRV - (Intrchs) – C:\Program Files\PlayE4\bin\Intrchs.sys ()
DRV - (eeCtrl) – C:\Program Files\Common Files\Symantec Shared\eengine\eeCtrl.sys (Symantec Corporation)
DRV - (nvnetbus) – C:\WINDOWS\system32\drivers\nvnetbus.sys (NVIDIA Corporation)
DRV - (IntcAzAudAddService) Service for Realtek HD Audio (WDM) – C:\WINDOWS\system32\drivers\RtkHDAud.sys (Realtek Semiconductor Corp.)
DRV - (usbaudio) USB Audio Driver (WDM) – C:\WINDOWS\system32\drivers\USBAUDIO.sys (Microsoft Corporation)
DRV - (HDAudBus) – C:\WINDOWS\system32\drivers\hdaudbus.sys (Windows ® Server 2003 DDK provider)
DRV - (LUsbFilt) – C:\WINDOWS\system32\drivers\LUsbFilt.sys (Logitech, Inc.)
DRV - (LMouKE) – C:\WINDOWS\system32\drivers\LMouKE.Sys (Logitech Inc.)
DRV - (LMouFilt) – C:\WINDOWS\system32\drivers\LMouFilt.Sys (Logitech, Inc.)
DRV - (LHidFilt) – C:\WINDOWS\system32\drivers\LHidFilt.Sys (Logitech, Inc.)
DRV - (L8042mou) – C:\WINDOWS\system32\drivers\L8042mou.Sys (Logitech Inc.)
DRV - (L8042Kbd) – C:\WINDOWS\system32\drivers\L8042Kbd.sys (Logitech Inc.)
DRV - (symlcbrd) – C:\WINDOWS\system32\drivers\symlcbrd.sys (Symantec Corporation)
DRV - (SiS315) – C:\WINDOWS\system32\drivers\sisgrp.sys (Silicon Integrated Systems Corporation)
DRV - (SiSkp) – C:\WINDOWS\system32\drivers\srvkp.sys (Silicon Integrated Systems Corporation)
DRV - (SISAGP) – C:\WINDOWS\system32\DRIVERS\SISAGPX.sys (Silicon Integrated Systems Corporation)
DRV - (W8100PCI) – C:\WINDOWS\system32\drivers\mrv8k51.sys (Marvell Semiconductor, Inc)
DRV - (SiSGbeXP) – C:\WINDOWS\system32\drivers\SiSGbeXP.sys (Silicon Integrated Systems Corp.)
DRV - (SiSRaid2) – C:\WINDOWS\system32\DRIVERS\SiSRaid2.sys (Silicon Integrated Systems)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://uk.msn.com/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://www.bing.com/ [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded =
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://uk.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-gb
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = F2 D8 88 89 5F 00 CB 01 [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKCU\..\URLSearchHook: {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll ()
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
FF - HKLM\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\Program Files\Real\RealPlayer\browserrecord [2008/11/08 16:14:39 | 000,000,000 | —D | M]
O1 HOSTS File: ([2004/08/04 13:00:00 | 000,000,734 | —- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Skype add-on (mastermind)) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.)
O2 - BHO: (eBay Toolbar Helper) - {22D8E815-4A5E-4DFB-845E-AAB64207F5BD} - C:\Program Files\eBay\eBay Toolbar2\eBayTb.dll (eBay Inc.)
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll (RealPlayer)
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (Search Helper) - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll (Microsoft Corporation)
O2 - BHO: (SSVHelper Class) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (AVG Security Toolbar BHO) - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll ()
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.5.5126.1836\swg.dll (Google Inc.)
O2 - BHO: (MSN Toolbar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\MSN\Toolbar\3.0.1203.0\msneshellx.dll (Microsoft Corp.)
O2 - BHO: (Windows Live Toolbar Helper) - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
O3 - HKLM\..\Toolbar: (MSN Toolbar) - {1E61ED7C-7CB8-49d6-B9E9-AB4C880C8414} - C:\Program Files\MSN\Toolbar\3.0.1203.0\msneshellx.dll (Microsoft Corp.)
O3 - HKLM\..\Toolbar: (&Windows Live Toolbar) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (eBay Toolbar) - {92085AD4-F48A-450D-BD93-B28CC7DF67CE} - C:\Program Files\eBay\eBay Toolbar2\eBayTb.dll (eBay Inc.)
O3 - HKLM\..\Toolbar: (AVG Security Toolbar) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (&Windows Live Toolbar) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
O3 - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (AVG Security Toolbar) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll ()
O4 - HKLM..\Run: [4oD] C:\Program Files\Kontiki\KHost.exe (Kontiki Inc.)
O4 - HKLM..\Run: [AVG9_TRAY] C:\Program Files\AVG\AVG9\avgtray.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [eBayToolbar] C:\Program Files\eBay\eBay Toolbar2\eBayTBDaemon.exe (eBay Inc.)
O4 - HKLM..\Run: [Kernel and Hardware Abstraction Layer] C:\WINDOWS\KHALMNPR.Exe (Logitech Inc.)
O4 - HKLM..\Run: [KernelFaultCheck] File not found
O4 - HKLM..\Run: [Logitech Hardware Abstraction Layer] C:\WINDOWS\KHALMNPR.Exe (Logitech Inc.)
O4 - HKLM..\Run: [LogitechQuickCamRibbon] C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe ()
O4 - HKLM..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe (Ahead Software Gmbh)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe (Silicon Integrated Systems Corp.)
O4 - HKLM..\Run: [Smapp] C:\Program Files\Analog Devices\SoundMAX\SMTray.exe (Analog Devices, Inc.)
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKCU..\Run: [kdx] C:\Program Files\Kontiki\KHost.exe (Kontiki Inc.)
O4 - HKCU..\Run: [Logitech Vid] C:\Program Files\Logitech\Logitech Vid\Vid.exe (Logitech Inc.)
O4 - HKCU..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (Google Inc.)
O4 - HKCU..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)
O4 - HKCU..\RunOnce: [PowerSuite] C:\Program Files\Uniblue\PowerSuite\launcher.exe (Uniblue Systems Limited)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\HP Image Zone Fast Start.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe (Hewlett-Packard Co.)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe ()
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE (Microsoft Corporation)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Utility Tray.lnk = C:\WINDOWS\system32\sistray.exe (Silicon Integrated Systems Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: &ieSpell Options - C:\Program Files\ieSpell\iespell.dll (Red Egg Software)
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\WINDOWS\System32\GPhotos.scr (Google Inc.)
O8 - Extra context menu item: Check &Spelling - C:\Program Files\ieSpell\iespell.dll (Red Egg Software)
O8 - Extra context menu item: eBay Search - C:\Program Files\eBay\eBay Toolbar2\eBayTb.dll (eBay Inc.)
O8 - Extra context menu item: Google Sidewiki… - C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_2EC7709873947E87.dll (Google Inc.)
O8 - Extra context menu item: Lookup on Merriam Webster - C:\Program Files\ieSpell\Merriam Webster.HTM ()
O8 - Extra context menu item: Lookup on Wikipedia - C:\Program Files\ieSpell\wikipedia.HTM ()
O9 - Extra 'Tools' menuitem : Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\npjpi160_07.dll (Sun Microsystems, Inc.)
O9 - Extra Button: ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - C:\Program Files\ieSpell\iespell.dll (Red Egg Software)
O9 - Extra 'Tools' menuitem : ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - C:\Program Files\ieSpell\iespell.dll (Red Egg Software)
O9 - Extra 'Tools' menuitem : ieSpell Options - {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - C:\Program Files\ieSpell\iespell.dll (Red Egg Software)
O9 - Extra Button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.)
O9 - Extra Button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O16 - DPF: {0067DBFC-A752-458C-AE6E-B9C7E63D4824} http://www.logitech.com/devicedetector/plu…Detection32.cab (Device Detection)
O16 - DPF: {05D44720-58E3-49E6-BDF6-D00330E511D3} http://zone.msn.com/binFrameWork/v10/StagingUI.cab55579.cab (MSN Games – Matchmaking)
O16 - DPF: {0D41B8C5-2599-4893-8183-00195EC8D5F9} http://support.asus.com/common/asusTek_sys_ctrl.cab (asusTek_sysctrl Class)
O16 - DPF: {1803B9EF-9905-4F34-AFC4-05D1BAB28801} http://us.dl1.yimg.com/download.yahoo.com/…_1/yregucfg.cab (RegUserCfgUI Class)
O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262F} http://www.nvidia.com/content/DriverDownlo…sreqlab_nvd.cab (System Requirements Lab Class)
O16 - DPF: {3BB54395-5982-4788-8AF4-B5388FFDD0D8} http://zone.msn.com/BinFrameWork/v10/ZBuddy.cab55579.cab (MSN Games – Buddy Invite)
O16 - DPF: {5736C456-EA94-4AAC-BB08-917ABDD035B3} http://zone.msn.com/binframework/v10/ZPAChat.cab55579.cab (MSN Games – Game Chat)
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} http://cdn.scan.onecare.live.com/resource/…lscbase6087.cab (Windows Live Safety Center Base Module)
O16 - DPF: {6A344D34-5231-452A-8A57-D064AC9B7862} https://webdl.symantec.com/activex/symdlmgr.cab (Symantec Download Manager)
O16 - DPF: {6F15128C-E66A-490C-B848-5000B5ABEEAC} https://h20436.www2.hp.com/ediags/dex/secure/HPDEXAXO.cab (HP Download Manager)
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab (OnlineScanner Control)
O16 - DPF: {95B5D20C-BD31-4489-8ABF-F8C8BE748463} http://zone.msn.com/bingame/zpagames/zpa_hrtz.cab58570.cab (ZPA_HRTZ Object)
O16 - DPF: {A4110378-789B-455F-AE86-3A1BFC402853} http://zone.msn.com/bingame/zpagames/zpa_shvl.cab55579.cab (ZPA_SHVL Object)
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} http://cdn2.zone.msn.com/binFramework/v10/…k.cab102118.cab (MSN Games - Installer)
O16 - DPF: {DA2AA6CF-5C7A-4B71-BC3B-C771BB369937} http://zone.msn.com/binframework/v10/StProxy.cab55579.cab (MSN Games – Game Communicator)
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} http://www.popcap.com/webgames/popcaploader_v10.cab (PopCapLoader Object)
O16 - DPF: {E77F23EB-E7AB-4502-8F37-247DBAF1A147} http://gfx2.hotmail.com/mail/w4/pr01/photo…ol/MSNPUpld.cab (Windows Live Hotmail Photo Upload Tool)
O16 - DPF: {FF3C5A9F-5A99-4930-80E8-4709194C2AD3} http://zone.msn.com/bingame/zpagames/ZPA_B…on.cab64162.cab (MSN Games – Backgammon)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll (AVG Technologies CZ, s.r.o.)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\avgrsstarter: DllName - avgrsstx.dll - C:\WINDOWS\System32\avgrsstx.dll (AVG Technologies CZ, s.r.o.)
O24 - Desktop WallPaper: C:\Documents and Settings\Mark M.NONE-5738F18114\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Mark M.NONE-5738F18114\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {091EB208-39DD-417D-A5DD-7E2C2D8FB9CB} - C:\Program Files\Windows Defender\MpShHook.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/07/24 09:48:16 | 000,000,000 | —- | M] () - C:\AUTOEXEC.BAT – [ NTFS ]
O32 - AutoRun File - [2009/01/30 19:33:49 | 000,000,090 | —- | M] () - C:\AUTORUN.INF – [ NTFS ]
O32 - AutoRun File - [2008/12/30 17:43:01 | 000,000,000 | —- | M] () - D:\AUTOEXEC.BAT – [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O34 - HKLM BootExecute: (lsdelete) - C:\WINDOWS\System32\lsdelete.exe ()
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*
========== Files/Folders - Created Within 30 Days ==========
[2010/06/02 21:57:09 | 000,000,000 | —D | C] – C:\Program Files\ESET
[2010/06/02 03:37:32 | 000,000,000 | —D | C] – C:\WINDOWS\Minidump
[2010/06/01 23:00:54 | 000,000,000 | —D | C] – C:\32788R22FWJFW
[2010/05/31 10:41:12 | 000,998,736 | —- | C] (Kaspersky Lab) – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\TDSSKiller.exe
[2010/05/31 02:09:44 | 000,000,000 | —D | C] – C:\_OTL
[2010/05/30 21:38:28 | 000,571,392 | —- | C] (OldTimer Tools) – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\OTL.exe
[2010/05/30 20:13:56 | 000,000,000 | —D | C] – C:\Documents and Settings\Mark M.NONE-5738F18114\Application Data\ieSpell
[2010/05/29 07:37:33 | 000,000,000 | —D | C] – C:\Program Files\Bandoo
[2010/05/28 05:11:48 | 000,000,000 | —D | C] – C:\Program Files\ieSpell
[2010/05/24 10:31:52 | 000,000,000 | —D | C] – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\Unused Desktop Shortcuts
[2010/05/23 03:40:01 | 000,000,000 | —D | C] – C:\Documents and Settings\Mark M.NONE-5738F18114\Application Data\Carambis
[2010/05/23 03:37:44 | 000,000,000 | —D | C] – C:\Program Files\Carambis
[2010/05/22 20:19:07 | 000,000,000 | —D | C] – C:\WINDOWS\Performance
[2010/05/22 20:18:59 | 000,000,000 | —D | C] – C:\Documents and Settings\Mark M.NONE-5738F18114\Local Settings\Application Data\Microsoft Corporation
[2010/05/22 20:18:28 | 000,000,000 | —D | C] – C:\Program Files\Microsoft Windows 7 Upgrade Advisor
[2010/05/20 07:40:46 | 000,000,000 | —D | C] – C:\WINDOWS\System32\dumps
[2010/05/14 19:27:09 | 000,199,192 | —- | C] (Logitech Inc.) – C:\WINDOWS\System32\lvci12101110.dll
[2010/05/13 16:40:11 | 000,000,000 | —D | C] – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\SightSpeed Recordings
[2010/05/12 19:19:04 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\NVIDIA Corporation
[2010/05/12 19:18:53 | 000,000,000 | —D | C] – C:\Program Files\NVIDIA Corporation
[2010/05/12 19:17:56 | 002,646,632 | —- | C] (NVIDIA Corporation) – C:\WINDOWS\System32\nvcuvenc.dll
[2010/05/12 19:17:55 | 011,647,592 | —- | C] (NVIDIA Corporation) – C:\WINDOWS\System32\nvcompiler.dll
[2010/05/12 19:08:46 | 000,000,000 | —D | C] – C:\Program Files\SystemRequirementsLab
[2010/05/04 18:23:33 | 000,000,000 | —D | C] – C:\Program Files\iPod
[2010/05/04 18:23:31 | 000,000,000 | —D | C] – C:\Program Files\iTunes
[2010/05/04 18:23:31 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2010/05/04 18:20:30 | 000,000,000 | —D | C] – C:\Program Files\QuickTime
[2010/05/04 18:18:08 | 003,003,680 | —- | C] (Apple, Inc.) – C:\WINDOWS\System32\usbaaplrc.dll
[2010/05/04 18:17:51 | 000,000,000 | —D | C] – C:\Program Files\Bonjour
[2010/03/17 21:53:42 | 000,094,208 | —- | C] (Apple Inc.) – C:\WINDOWS\System32\QuickTimeVR.qtx
[2010/03/17 21:53:42 | 000,069,632 | —- | C] (Apple Inc.) – C:\WINDOWS\System32\QuickTime.qts
[2010/02/04 19:56:08 | 000,298,496 | —- | C] (InstallShield Corporation, Inc.) – C:\WINDOWS\uninst.exe
[2009/12/06 02:48:05 | 000,000,000 | —D | C] – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Adobe Reader 9 Installer
[2009/12/04 17:30:26 | 000,000,000 | —D | C] – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\My Scans
[2009/10/24 13:16:52 | 000,000,000 | —D | C] – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Downloads
[2009/10/23 03:58:58 | 000,000,000 | —D | C] – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\confirmation Marc[1]_files
[2009/09/23 19:32:30 | 000,000,000 | —D | C] – C:\WINDOWS\System32\zh-TW
[2009/09/23 19:32:30 | 000,000,000 | —D | C] – C:\WINDOWS\System32\zh-HK
[2009/09/23 19:32:30 | 000,000,000 | —D | C] – C:\WINDOWS\System32\tr-TR
[2009/09/23 19:32:30 | 000,000,000 | —D | C] – C:\WINDOWS\System32\sv-SE
[2009/09/23 19:32:30 | 000,000,000 | —D | C] – C:\WINDOWS\System32\pt-BR
[2009/09/20 22:11:31 | 000,053,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\vfwwdm32.dll
[2009/09/14 05:14:11 | 000,000,000 | -H-D | C] – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\.picasaoriginals
[2009/09/14 05:06:52 | 000,000,000 | R-SD | C] – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\My Stationery
[2009/09/09 20:35:51 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Documents\microsoft
[2009/09/01 00:22:33 | 000,016,928 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\spmsg.dll
[2009/08/21 00:22:52 | 000,000,000 | —D | C] – C:\WINDOWS\System32\XPSViewer
[2009/08/21 00:22:04 | 001,676,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\xpssvcs.dll
[2009/08/21 00:22:04 | 000,117,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\prntvpt.dll
[2009/08/04 00:12:56 | 000,000,000 | —D | C] – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\My Videos
[2009/07/26 16:44:56 | 000,048,448 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\sirenacm.dll
[2009/07/16 20:20:36 | 000,000,000 | —D | C] – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\New Folder
[2009/07/10 12:15:46 | 000,306,544 | —- | C] (Microsoft Corporation) – C:\WINDOWS\WLXPGSS.SCR
[2009/07/05 19:56:49 | 000,000,000 | —D | C] – C:\WINDOWS\Prefetch
[2009/07/05 19:37:53 | 000,000,000 | -H-D | C] – C:\WINDOWS\$NtServicePackUninstall$
[2009/07/05 19:24:48 | 000,000,000 | —D | C] – C:\WINDOWS\ie8updates
[2009/07/05 19:20:56 | 000,000,000 | -H-D | C] – C:\WINDOWS\ie8
[2009/07/05 19:03:18 | 000,000,000 | —D | C] – C:\WINDOWS\System32\RTCOM
[2009/07/05 18:39:35 | 000,000,000 | —D | C] – C:\WINDOWS\nview
[2009/06/30 18:55:31 | 000,000,000 | —D | C] – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\My Received Files
[2009/06/30 17:13:56 | 000,000,000 | —D | C] – C:\WINDOWS\pss
[2009/06/30 16:21:34 | 000,000,000 | R–D | C] – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\My Music
[2009/06/30 16:21:32 | 000,000,000 | R–D | C] – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\My Pictures
[2009/06/30 15:44:31 | 000,024,661 | —- | C] (Perle Systems Ltd.) – C:\WINDOWS\System32\spxcoins.dll
========== Files - Modified Within 30 Days ==========
[2010/06/03 04:12:58 | 000,016,547 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\OTL.zip
[2010/06/03 04:12:46 | 000,010,489 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\Extras.zip
[2010/06/03 03:31:01 | 000,000,884 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2010/06/03 00:55:55 | 000,593,743 | —- | M] () – C:\WINDOWS\System32\drivers\Avg\iavifw.avm
[2010/06/03 00:55:54 | 060,640,563 | —- | M] () – C:\WINDOWS\System32\drivers\Avg\incavi.avm
[2010/06/02 23:41:03 | 000,000,424 | -H– | M] () – C:\WINDOWS\tasks\User_Feed_Synchronization-{169FDE4B-E2F9-4890-879E-D1A096EA74F2}.job
[2010/06/02 20:19:23 | 000,998,736 | —- | M] (Kaspersky Lab) – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\TDSSKiller.exe
[2010/06/02 20:07:50 | 000,966,213 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\tdsskiller.zip
[2010/06/02 17:33:15 | 000,001,374 | —- | M] () – C:\WINDOWS\System32\wpa.dbl
[2010/06/02 17:32:59 | 000,276,202 | —- | M] () – C:\WINDOWS\System32\NvApps.xml
[2010/06/02 17:32:35 | 000,000,006 | -H– | M] () – C:\WINDOWS\tasks\SA.DAT
[2010/06/02 17:32:28 | 000,002,048 | –S- | M] () – C:\WINDOWS\bootstat.dat
[2010/06/02 12:52:20 | 004,980,736 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\NTUSER.DAT
[2010/06/02 03:52:42 | 000,293,376 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\39ki73vk GMER.exe
[2010/06/02 03:37:27 | 2952,347,648 | —- | M] () – C:\WINDOWS\MEMORY.DMP
[2010/06/01 19:32:14 | 000,000,472 | —- | M] () – C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job
[2010/06/01 19:27:36 | 000,000,880 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2010/06/01 17:55:00 | 000,000,284 | —- | M] () – C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2010/06/01 08:59:33 | 000,001,107 | —- | M] () – C:\WINDOWS\win.ini
[2010/06/01 08:59:33 | 000,000,321 | -HS- | M] () – C:\boot.ini
[2010/06/01 08:59:33 | 000,000,227 | —- | M] () – C:\WINDOWS\system.ini
[2010/06/01 08:39:23 | 000,242,896 | —- | M] (AVG Technologies CZ, s.r.o.) – C:\WINDOWS\System32\drivers\avgtdix.sys
[2010/06/01 08:39:23 | 000,029,584 | —- | M] (AVG Technologies CZ, s.r.o.) – C:\WINDOWS\System32\drivers\avgmfx86.sys
[2010/06/01 08:11:15 | 000,000,259 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\Nationwide Building Society Mortgages, Savings, Current Accounts, Banking, Insurance, Credit Cards, Loans, Investments.url
[2010/05/31 23:30:34 | 000,000,220 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\TV Guide UK TV Listings - UK's No 1 TV Listing site for Freeview, Sky, Virgin Media, Freesat & Tiscali TV.url
[2010/05/31 19:14:42 | 000,000,665 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\UK Credit Cards Capital One.url
[2010/05/31 19:12:49 | 000,000,249 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\home page Take a Break Bingo.url
[2010/05/31 19:05:33 | 000,000,335 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\Free Criminal Record Check - Page 2 - Cable Forum.url
[2010/05/30 23:02:00 | 000,000,302 | —- | M] () – C:\WINDOWS\tasks\Ad-Aware 2007.job
[2010/05/30 21:38:30 | 000,571,392 | —- | M] (OldTimer Tools) – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\OTL.exe
[2010/05/30 20:55:22 | 000,000,317 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\lost google - now searchqu.com.url
[2010/05/30 20:49:36 | 000,000,635 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\Sign In.url
[2010/05/30 18:15:24 | 000,021,505 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\a-boozer.html
[2010/05/30 18:04:48 | 000,000,281 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\THAI BART RATE CONVERTER.url
[2010/05/29 22:00:37 | 000,000,244 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\youtube.com-gl=GB&hl=en-GB.url
[2010/05/29 07:45:28 | 000,000,000 | —- | M] () – C:\WINDOWS\iPlayer.INI
[2010/05/29 07:39:42 | 000,026,616 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
[2010/05/29 04:32:24 | 000,000,792 | —- | M] () – C:\Documents and Settings\All Users\Desktop\InterActual Player.lnk
[2010/05/28 18:27:18 | 000,000,394 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\CATCH-UP.url
[2010/05/28 11:42:05 | 000,147,608 | —- | M] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2010/05/28 05:34:24 | 000,000,278 | -HS- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\ntuser.ini
[2010/05/28 03:44:57 | 000,000,317 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\Thai for Lovers.url
[2010/05/28 03:25:08 | 000,000,210 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\Manee and Friends.url
[2010/05/27 17:52:54 | 000,023,832 | —- | M] (Logitech Inc.) – C:\WINDOWS\System32\drivers\lvuvcflt.sys
[2010/05/27 17:52:23 | 000,888,832 | —- | M] (NVIDIA Corporation) – C:\WINDOWS\System32\fdco1ins.dll
[2010/05/27 17:52:23 | 000,888,832 | —- | M] (NVIDIA Corporation) – C:\WINDOWS\System32\fdco1.dll
[2010/05/27 17:52:23 | 000,067,328 | —- | M] (NVIDIA Corporation) – C:\WINDOWS\System32\drivers\NVENETFD.sys
[2010/05/27 04:04:22 | 000,000,211 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\eBay - The UK's Online Marketplace.url
[2010/05/26 04:51:24 | 000,000,238 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\Mazda RX-8 Owners Club UK.url
[2010/05/25 03:46:55 | 000,000,316 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\allfreegames.eu-free-online-games-play-Crash+Bandicoot-45e8beb2f472b5b11031a1f9171bab8b.html.url
[2010/05/25 02:27:07 | 000,029,696 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Basildon Magistrates Court.doc
[2010/05/24 11:09:51 | 000,002,137 | —- | M] () – C:\Documents and Settings\All Users\Desktop\iTunes.lnk
[2010/05/24 04:47:27 | 000,000,224 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\BBC iPlayer - Home.url
[2010/05/23 17:18:33 | 000,000,580 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\My Account - PayPal.url
[2010/05/22 21:44:32 | 000,084,197 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\win 7 report compatability.mht
[2010/05/22 20:29:42 | 000,001,928 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Google Earth.lnk
[2010/05/22 09:25:32 | 000,000,243 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\oilcareers.com-worldwide-.url
[2010/05/21 22:28:37 | 000,000,248 | —- | M] () – C:\Short Term Car Insurance One Day Car Insurance 1 Day Insurance.url
[2010/05/20 10:30:13 | 000,000,158 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\AVForums.com Home.url
[2010/05/16 04:05:41 | 000,000,660 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Application Data\ClipExtractor-YouTube-Clip-ExtractorFlvConverterDefaultSettings.xml
[2010/05/16 00:27:14 | 000,000,186 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\My Lifetracks - Lifetracks.com.url
[2010/05/14 19:26:10 | 000,001,863 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Logitech Webcam Software.lnk
[2010/05/13 16:40:01 | 000,000,803 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Logitech Vid.lnk
[2010/05/12 17:52:58 | 000,001,374 | —- | M] () – C:\WINDOWS\imsins.BAK
[2010/05/12 11:21:16 | 000,221,568 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\MpSigStub.exe
[2010/05/08 05:21:32 | 000,577,660 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\RX8_Stereo_Removal.pdf
[2010/04/29 21:45:47 | 000,000,125 | —- | M] () – C:\WINDOWS\cdplayer.ini
[2010/04/27 18:33:44 | 000,015,880 | —- | M] () – C:\WINDOWS\System32\lsdelete.exe
[2010/04/16 08:33:36 | 003,003,680 | —- | M] (Apple, Inc.) – C:\WINDOWS\System32\usbaaplrc.dll
[2010/04/08 13:20:02 | 000,107,808 | —- | M] (Apple Inc.) – C:\WINDOWS\System32\dns-sd.exe
[2010/04/08 13:20:02 | 000,091,424 | —- | M] (Apple Inc.) – C:\WINDOWS\System32\dnssd.dll
[2010/04/05 20:10:12 | 000,020,992 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\ben letter to yde.doc
[2010/04/05 06:12:20 | 000,000,762 | —- | M] () – C:\Documents and Settings\All Users\Desktop\RegistryBooster.lnk
[2010/04/04 07:19:25 | 000,516,198 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\95-7510_manual metra stereo.pdf
[2010/04/03 23:55:31 | 014,757,888 | —- | M] (NVIDIA Corporation) – C:\WINDOWS\System32\nvoglnt.dll
[2010/04/03 23:55:31 | 011,647,592 | —- | M] (NVIDIA Corporation) – C:\WINDOWS\System32\nvcompiler.dll
[2010/04/03 23:55:31 | 010,232,128 | —- | M] (NVIDIA Corporation) – C:\WINDOWS\System32\drivers\nv4_mini.sys
[2010/04/03 23:55:31 | 010,232,128 | —- | M] (NVIDIA Corporation) – C:\WINDOWS\System32\dllcache\nv4_mini.sys
[2010/04/03 23:55:31 | 006,432,128 | —- | M] (NVIDIA Corporation) – C:\WINDOWS\System32\nv4_disp.dll
[2010/04/03 23:55:31 | 004,075,520 | —- | M] (NVIDIA Corporation) – C:\WINDOWS\System32\nvcuda.dll
[2010/04/03 23:55:31 | 002,646,632 | —- | M] (NVIDIA Corporation) – C:\WINDOWS\System32\nvcuvenc.dll
[2010/04/03 23:55:31 | 002,183,470 | —- | M] () – C:\WINDOWS\System32\nvdata.bin
[2010/04/03 23:55:31 | 002,030,184 | —- | M] (NVIDIA Corporation) – C:\WINDOWS\System32\nvcuvid.dll
[2010/04/03 23:55:31 | 001,097,728 | —- | M] (NVIDIA Corporation) – C:\WINDOWS\System32\nvapi.dll
[2010/04/03 23:55:31 | 000,600,680 | —- | M] (NVIDIA Corporation) – C:\WINDOWS\System32\nvudisp.exe
[2010/04/03 23:55:31 | 000,227,944 | —- | M] (NVIDIA Corporation) – C:\WINDOWS\System32\nvcodins.dll
[2010/04/03 23:55:31 | 000,227,944 | —- | M] (NVIDIA Corporation) – C:\WINDOWS\System32\nvcod.dll
[2010/04/03 23:55:31 | 000,061,440 | —- | M] (Khronos Group) – C:\WINDOWS\System32\OpenCL.dll
[2010/04/03 23:55:31 | 000,025,755 | —- | M] () – C:\WINDOWS\System32\nvdisp.nvu
[2010/04/03 23:55:31 | 000,009,046 | —- | M] () – C:\WINDOWS\System32\nvinfo.pb
[2010/04/03 19:23:18 | 000,278,120 | —- | M] (NVIDIA Corporation) – C:\WINDOWS\System32\nvmccs.dll
[2010/04/03 19:23:16 | 013,670,504 | —- | M] (NVIDIA Corporation) – C:\WINDOWS\System32\nvcpl.dll
[2010/04/03 19:23:16 | 000,145,000 | —- | M] (NVIDIA Corporation) – C:\WINDOWS\System32\nvcolor.exe
[2010/04/03 19:23:16 | 000,110,696 | —- | M] (NVIDIA Corporation) – C:\WINDOWS\System32\nvmctray.dll
[2010/04/03 19:22:54 | 000,081,920 | —- | M] (NVIDIA Corporation) – C:\WINDOWS\System32\nvwddi.dll
[2010/04/03 19:22:32 | 000,066,714 | —- | M] () – C:\WINDOWS\System32\NvwsApps.xml
[2010/04/02 16:54:38 | 000,600,680 | —- | M] (NVIDIA Corporation) – C:\WINDOWS\System32\NVUNINST.EXE
[2010/04/01 21:51:38 | 096,180,512 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\RX8_workshop_manual.zip
[2010/04/01 05:32:14 | 003,506,285 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\mot.jpg
[2010/03/29 13:46:37 | 000,521,444 | —- | M] () – C:\WINDOWS\System32\PerfStringBackup.INI
[2010/03/29 13:46:37 | 000,441,638 | —- | M] () – C:\WINDOWS\System32\perfh009.dat
[2010/03/29 13:46:37 | 000,071,780 | —- | M] () – C:\WINDOWS\System32\perfc009.dat
[2010/03/28 21:57:20 | 000,000,737 | —- | M] () – C:\Documents and Settings\All Users\Desktop\PowerSuite.lnk
[2010/03/17 21:53:42 | 000,094,208 | —- | M] (Apple Inc.) – C:\WINDOWS\System32\QuickTimeVR.qtx
[2010/03/17 21:53:42 | 000,069,632 | —- | M] (Apple Inc.) – C:\WINDOWS\System32\QuickTime.qts
[2010/03/15 16:02:05 | 005,136,305 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\manual RX8 2009 ON.pdf
[2010/03/10 07:15:52 | 000,420,352 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\vbscript.dll
[2010/03/10 07:15:52 | 000,420,352 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\vbscript.dll
[2010/03/05 03:04:04 | 000,012,464 | —- | M] (AVG Technologies CZ, s.r.o.) – C:\WINDOWS\System32\avgrsstx.dll
[2010/03/05 03:03:57 | 000,025,096 | —- | M] (AVG Technologies CZ, s.r.o. ) – C:\WINDOWS\System32\drivers\AVGIDSxx.sys
[2010/03/05 03:03:53 | 000,216,200 | —- | M] (AVG Technologies CZ, s.r.o.) – C:\WINDOWS\System32\drivers\avgldx86.sys
[2010/03/05 03:03:51 | 000,052,872 | —- | M] (AVG Technologies CZ, s.r.o.) – C:\WINDOWS\System32\drivers\avgrkx86.sys
[2010/02/26 05:02:30 | 000,060,172 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Spidermite[1].pdf
[2010/02/26 05:01:49 | 000,016,618 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\blank grow sheet[1].pdf
[2010/02/25 11:54:36 | 011,070,976 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ieframe.dll
[2010/02/25 07:24:37 | 001,209,344 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\urlmon.dll
[2010/02/25 07:24:37 | 000,916,480 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wininet.dll
[2010/02/25 07:24:37 | 000,611,840 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\mstime.dll
[2010/02/25 07:24:37 | 000,611,840 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mstime.dll
[2010/02/25 07:24:37 | 000,206,848 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\occache.dll
[2010/02/25 07:24:36 | 005,944,832 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mshtml.dll
[2010/02/25 07:24:35 | 001,985,536 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iertutil.dll
[2010/02/25 07:24:35 | 001,469,440 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\inetcpl.cpl
[2010/02/25 07:24:35 | 001,469,440 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\inetcpl.cpl
[2010/02/25 07:24:35 | 000,594,432 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\msfeeds.dll
[2010/02/25 07:24:35 | 000,594,432 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msfeeds.dll
[2010/02/25 07:24:35 | 000,184,320 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\iepeers.dll
[2010/02/25 07:24:35 | 000,184,320 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iepeers.dll
[2010/02/25 07:24:35 | 000,055,296 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\msfeedsbs.dll
[2010/02/25 07:24:35 | 000,055,296 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msfeedsbs.dll
[2010/02/25 07:24:35 | 000,025,600 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\jsproxy.dll
[2010/02/25 07:24:35 | 000,025,600 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\jsproxy.dll
[2010/02/25 07:24:34 | 000,387,584 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\iedkcs32.dll
[2010/02/25 07:24:34 | 000,387,584 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iedkcs32.dll
[2010/02/24 14:11:07 | 000,455,680 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mrxsmb.sys
[2010/02/24 10:54:25 | 000,173,056 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\ie4uinit.exe
[2010/02/24 10:54:25 | 000,173,056 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ie4uinit.exe
[2010/02/22 13:04:34 | 000,000,258 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\The Complete guide to Sick Plants,pH, and Pest troubles! - International Cannagraphic Magazine Forums (2).url
[2010/02/20 00:47:50 | 003,604,480 | —- | M] (Google Inc.) – C:\WINDOWS\System32\GPhotos.scr
[2010/02/19 05:50:06 | 000,000,671 | -H– | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\.picasa.ini
[2010/02/19 04:30:32 | 007,217,077 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\FE-310_Instruction_Manual_EN.pdf
[2010/02/17 09:10:28 | 002,189,952 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ntoskrnl.exe
[2010/02/16 19:30:44 | 000,095,024 | —- | M] (Sunbelt Software) – C:\WINDOWS\System32\drivers\SBREDrv.sys
[2010/02/16 19:29:05 | 000,000,880 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Ad-Aware.lnk
[2010/02/16 15:08:49 | 002,146,304 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\ntoskrnl.exe
[2010/02/16 15:08:49 | 002,146,304 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ntkrnlmp.exe
[2010/02/16 14:25:04 | 002,066,816 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ntkrnlpa.exe
[2010/02/16 14:25:04 | 002,024,448 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ntkrpamp.exe
[2010/02/16 14:25:04 | 002,024,448 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\ntkrnlpa.exe
[2010/02/12 11:03:03 | 000,293,376 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\browserchoice.exe
[2010/02/12 05:33:11 | 000,100,864 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\6to4svc.dll
[2010/02/11 17:03:15 | 002,005,173 | —- | M] () – C:\WINDOWS\iis6.BAK
[2010/02/11 13:02:15 | 000,226,880 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\tcpip6.sys
[2010/02/11 13:02:15 | 000,226,880 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tcpip6.sys
[2010/02/08 02:45:13 | 000,022,016 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Ben M.doc
[2010/02/05 14:47:05 | 000,020,992 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Ben Money.doc
[2010/02/04 19:57:03 | 000,000,000 | —- | M] () – C:\WINDOWS\PCFriend.INI
[2010/02/04 16:53:02 | 000,064,288 | —- | M] (Lavasoft AB) – C:\WINDOWS\System32\drivers\Lbd.sys
[2010/01/31 19:55:55 | 000,496,605 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Start_up_guide_Business_plan.pdf
[2010/01/31 19:55:25 | 000,482,240 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Start_up_guide_part_2.pdf
[2010/01/31 19:54:03 | 000,589,849 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Start_up_guide_part_1.pdf
[2010/01/29 16:01:30 | 000,691,712 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\inetcomm.dll
[2010/01/29 15:43:39 | 000,307,260 | —- | M] (Fraunhofer Institut Integrierte Schaltungen IIS) – C:\WINDOWS\System32\l3codeca.acm
[2010/01/29 15:43:39 | 000,143,422 | —- | M] (Fraunhofer Institut Integrierte Schaltungen IIS) – C:\WINDOWS\System32\l3codecx.ax
[2010/01/19 21:55:17 | 000,142,495 | —- | M] () – C:\WINDOWS\System32\drivers\Avg\microavi.avg
[2010/01/13 15:01:25 | 000,086,016 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cabview.dll
[2009/12/31 17:50:03 | 000,353,792 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\srv.sys
[2009/12/24 07:59:40 | 000,177,664 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wintrust.dll
[2009/12/16 19:43:27 | 000,343,040 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\mspaint.exe
[2009/12/16 19:43:27 | 000,343,040 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mspaint.exe
[2009/12/14 08:08:23 | 000,033,280 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\csrsrv.dll
[2009/12/14 08:08:23 | 000,033,280 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\csrsrv.dll
[2009/12/09 06:53:44 | 000,726,528 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\jscript.dll
[2009/12/09 06:53:44 | 000,726,528 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\jscript.dll
[2009/12/08 10:23:28 | 000,474,112 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\shlwapi.dll
[2009/12/06 00:10:53 | 000,001,742 | —- | M] () – C:\Adobe Reader 9.lnk
[2009/12/04 21:22:56 | 118,327,296 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Doc1.doc
[2009/12/04 09:44:23 | 004,287,134 | -H– | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Local Settings\Application Data\IconCache.db
[2009/12/01 22:05:41 | 000,000,225 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\TITANIUM.url
[2009/11/27 18:11:44 | 001,291,776 | —- | M] () – C:\WINDOWS\System32\quartz.dll
[2009/11/27 18:11:44 | 001,291,776 | —- | M] () – C:\WINDOWS\System32\dllcache\quartz.dll
[2009/11/27 18:11:44 | 000,017,920 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msyuv.dll
[2009/11/27 17:07:35 | 000,028,672 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msvidc32.dll
[2009/11/27 17:07:35 | 000,008,704 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tsbyuv.dll
[2009/11/27 17:07:34 | 000,084,992 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\avifil32.dll
[2009/11/27 17:07:34 | 000,084,992 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\avifil32.dll
[2009/11/27 17:07:34 | 000,048,128 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iyuv_32.dll
[2009/11/27 17:07:34 | 000,011,264 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msrle32.dll
[2009/11/21 16:51:42 | 001,206,508 | —- | M] () – C:\WINDOWS\System32\dllcache\sysmain.sdb
[2009/11/21 16:51:04 | 000,471,552 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\aclayers.dll
[2009/10/27 18:07:25 | 000,027,290 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\UK_Davidman_Diet_2_160x600.gif
[2009/10/26 05:00:23 | 000,257,866 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\e-ticket Invoice No 656065.zip
[2009/10/24 18:03:22 | 000,024,046 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\TB2Categories000.dat
[2009/10/24 13:06:41 | 000,000,056 | -H– | M] () – C:\WINDOWS\System32\ezsidmv.dat
[2009/10/23 16:28:37 | 003,558,912 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\moviemk.exe
[2009/10/23 01:18:52 | 000,113,461 | —- | M] () – C:\WINDOWS\System32\drivers\Avg\iavichjw.avm
[2009/10/23 01:18:19 | 000,050,968 | —- | M] (AVG Technologies CZ, s.r.o.) – C:\WINDOWS\System32\avgfwdx.dll
[2009/10/23 01:18:19 | 000,030,104 | —- | M] (AVG Technologies CZ, s.r.o.) – C:\WINDOWS\System32\drivers\avgfwdx.sys
[2009/10/22 20:36:48 | 001,267,007 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\NOKIA 6233 USER MANUAL.pdf
[2009/10/21 06:38:36 | 000,075,776 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\strmfilt.dll
[2009/10/21 06:38:36 | 000,075,776 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\strmfilt.dll
[2009/10/21 06:38:36 | 000,025,088 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\httpapi.dll
[2009/10/21 06:38:36 | 000,025,088 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\httpapi.dll
[2009/10/20 17:20:16 | 000,265,728 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\http.sys
[2009/10/19 15:29:31 | 000,073,018 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\X2Z6WA[1].pdf
[2009/10/19 01:49:30 | 000,000,782 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\ltgreen.jpg
[2009/10/18 11:23:42 | 000,007,262 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\imageslove.jpg
[2009/10/18 11:20:00 | 000,007,621 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\2.jpg
[2009/10/18 11:20:00 | 000,003,986 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\girlfrend.jpg
[2009/10/18 11:20:00 | 000,002,958 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\images.jpg
[2009/10/18 11:20:00 | 000,002,805 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\images3.jpg
[2009/10/15 17:28:26 | 000,119,808 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\t2embed.dll
[2009/10/15 17:28:26 | 000,119,808 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\t2embed.dll
[2009/10/15 17:28:26 | 000,081,920 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\fontsub.dll
[2009/10/15 17:28:26 | 000,081,920 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fontsub.dll
[2009/10/13 11:30:16 | 000,270,336 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\oakley.dll
[2009/10/13 11:30:16 | 000,270,336 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\oakley.dll
[2009/10/12 14:38:19 | 000,149,504 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\rastls.dll
[2009/10/12 14:38:19 | 000,149,504 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rastls.dll
[2009/10/12 14:38:18 | 000,079,872 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\raschap.dll
[2009/10/12 14:38:18 | 000,079,872 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\raschap.dll
[2009/10/07 09:49:38 | 006,756,632 | —- | M] (Logitech Inc.) – C:\WINDOWS\System32\drivers\lvuvc.sys
[2009/10/07 09:48:52 | 000,539,160 | —- | M] (Logitech Inc.) – C:\WINDOWS\System32\LVUI2RC.dll
[2009/10/07 09:48:30 | 000,539,160 | —- | M] (Logitech Inc.) – C:\WINDOWS\System32\LVUI2.dll
[2009/10/07 09:47:54 | 000,266,008 | —- | M] (Logitech Inc.) – C:\WINDOWS\System32\drivers\lvrs.sys
[2009/10/07 09:46:12 | 000,114,712 | —- | M] (Logitech Inc.) – C:\WINDOWS\System32\drivers\lvpopflt.sys
[2009/10/07 09:43:42 | 000,199,192 | —- | M] (Logitech Inc.) – C:\WINDOWS\System32\lvci12101110.dll
[2009/10/07 09:43:30 | 000,416,280 | —- | M] (Logitech Inc.) – C:\WINDOWS\System32\lvcodec2.dll
[2009/10/07 09:25:08 | 000,266,828 | —- | M] () – C:\WINDOWS\System32\drivers\LVAFT.cfg
[2009/10/07 09:24:20 | 000,082,289 | —- | M] () – C:\WINDOWS\System32\lvcoinst.ini
[2009/10/07 09:24:04 | 000,034,068 | —- | M] () – C:\WINDOWS\System32\Repository.reg
[2009/10/07 01:46:36 | 000,025,752 | —- | M] () – C:\WINDOWS\System32\drivers\LVPr2Mon.sys
[2009/10/07 01:25:10 | 000,227,172 | —- | M] () – C:\WINDOWS\System32\drivers\LVFeL100.cfg
[2009/10/07 01:25:10 | 000,146,680 | —- | M] () – C:\WINDOWS\System32\drivers\LVFeL101.cfg
[2009/10/07 01:25:10 | 000,085,302 | —- | M] () – C:\WINDOWS\System32\drivers\LVFeL102.cfg
[2009/10/07 01:25:10 | 000,069,592 | —- | M] () – C:\WINDOWS\System32\drivers\LVFaL100.cfg
[2009/10/07 01:23:08 | 000,013,584 | —- | M] () – C:\WINDOWS\System32\drivers\iKeyLFT2.dll
[2009/10/01 00:55:25 | 000,492,629 | —- | M] () – C:\WINDOWS\System32\drivers\Avg\miniavi.avg
[2009/09/24 07:27:28 | 000,000,007 | —- | M] () – C:\WINDOWS\System32\Class15
[2009/09/24 07:27:28 | 000,000,005 | —- | M] () – C:\WINDOWS\System32\Band4
[2009/09/20 22:18:25 | 000,000,803 | —- | M] () – C:\Logitech Vid.lnk
[2009/09/20 22:13:41 | 000,001,863 | —- | M] () – C:\Logitech Webcam Software.lnk
[2009/09/14 05:14:11 | 000,082,652 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7220149 porn.JPG
[2009/09/14 05:14:11 | 000,080,996 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\1.JPG
[2009/09/11 21:14:36 | 000,084,425 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270164 temple of peace started 1984.JPG
[2009/09/11 21:13:44 | 000,085,054 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270163 massive carved temple of peace, 1986 200 builders.JPG
[2009/09/11 21:12:45 | 000,083,022 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\porn kiss dolphin.JPG
[2009/09/11 21:09:00 | 000,081,828 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7220146 crock swimming.JPG
[2009/09/11 21:08:13 | 000,085,709 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\tiger.JPG
[2009/09/11 21:07:20 | 000,083,427 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7220140 crock5.JPG
[2009/09/11 21:06:52 | 000,082,800 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7220139 crock4.JPG
[2009/09/11 21:05:13 | 000,081,453 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7220138 crock 3.JPG
[2009/09/11 21:04:32 | 000,082,207 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7220135 crock 2.JPG
[2009/09/11 21:02:09 | 000,081,716 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7190116 2 house in surin.JPG
[2009/09/11 21:01:30 | 000,084,788 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7190118 house in surin.JPG
[2009/09/11 20:03:40 | 000,084,260 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270155.JPG
[2009/09/11 19:53:08 | 000,082,632 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7250151 me on steps big budda.JPG
[2009/09/11 19:52:06 | 000,083,146 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7250150 big budda.JPG
[2009/09/11 19:50:09 | 000,085,060 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7220148 me.JPG
[2009/09/11 19:49:18 | 000,082,800 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7220139 crok.JPG
[2009/09/11 19:38:01 | 000,080,518 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7180092 014.JPG
[2009/09/11 19:35:34 | 000,079,649 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7300189 013.JPG
[2009/09/11 19:34:11 | 000,081,841 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7300188 012.JPG
[2009/09/11 19:33:32 | 000,083,048 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270185 011.JPG
[2009/09/11 19:32:28 | 000,083,922 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270183 010.JPG
[2009/09/11 19:31:03 | 000,084,744 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270181 09.JPG
[2009/09/11 19:29:47 | 000,085,020 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270178 08.JPG
[2009/09/11 16:43:02 | 000,085,473 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270176 07.JPG
[2009/09/11 16:38:07 | 000,082,526 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270173 06.JPG
[2009/09/11 16:37:29 | 000,086,589 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270171 05.JPG
[2009/09/11 16:36:56 | 000,083,057 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270170 04.JPG
[2009/09/11 16:36:17 | 000,082,965 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270169 03.JPG
[2009/09/11 16:35:22 | 000,082,384 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270168 02.JPG
[2009/09/11 16:34:47 | 000,084,675 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270167 01.JPG
[2009/09/11 15:18:39 | 000,136,192 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msv1_0.dll
[2009/09/09 20:36:51 | 000,000,969 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\My Sharing Folders.lnk
[2009/09/08 20:25:15 | 000,000,244 | -H– | M] () – C:\sqmnoopt07.sqm
[2009/09/08 20:25:15 | 000,000,232 | -H– | M] () – C:\sqmdata07.sqm
[2009/09/08 20:20:57 | 000,000,244 | -H– | M] () – C:\sqmnoopt06.sqm
[2009/09/08 20:20:57 | 000,000,232 | -H– | M] () – C:\sqmdata06.sqm
[2009/09/08 16:33:01 | 000,000,244 | -H– | M] () – C:\sqmnoopt05.sqm
[2009/09/08 16:33:01 | 000,000,232 | -H– | M] () – C:\sqmdata05.sqm
[2009/09/08 15:10:54 | 000,082,756 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P6200005.JPG
[2009/09/08 15:10:11 | 000,082,759 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\3.JPG
[2009/09/08 14:58:43 | 000,000,244 | -H– | M] () – C:\sqmnoopt04.sqm
[2009/09/08 14:58:43 | 000,000,232 | -H– | M] () – C:\sqmdata04.sqm
[2009/09/08 14:56:22 | 000,084,458 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Amporn, noi.jpg
[2009/09/08 08:07:38 | 000,000,244 | -H– | M] () – C:\sqmnoopt03.sqm
[2009/09/08 08:07:38 | 000,000,232 | -H– | M] () – C:\sqmdata03.sqm
[2009/09/08 06:53:15 | 000,000,244 | -H– | M] () – C:\sqmnoopt02.sqm
[2009/09/08 06:53:15 | 000,000,232 | -H– | M] () – C:\sqmdata02.sqm
[2009/09/07 19:57:30 | 000,000,244 | -H– | M] () – C:\sqmnoopt01.sqm
[2009/09/07 19:57:30 | 000,000,232 | -H– | M] () – C:\sqmdata01.sqm
[2009/09/07 12:25:28 | 000,000,244 | -H– | M] () – C:\sqmnoopt00.sqm
[2009/09/07 12:25:28 | 000,000,232 | -H– | M] () – C:\sqmdata00.sqm
[2009/09/07 03:29:30 | 000,000,244 | -H– | M] () – C:\sqmnoopt19.sqm
[2009/09/07 03:29:30 | 000,000,232 | -H– | M] () – C:\sqmdata19.sqm
[2009/09/06 18:01:40 | 000,000,244 | -H– | M] () – C:\sqmnoopt18.sqm
[2009/09/06 18:01:40 | 000,000,232 | -H– | M] () – C:\sqmdata18.sqm
[2009/09/06 05:42:21 | 000,000,268 | -H– | M] () – C:\sqmdata17.sqm
[2009/09/06 05:42:21 | 000,000,244 | -H– | M] () – C:\sqmnoopt17.sqm
[2009/09/05 19:00:24 | 000,000,045 | —- | M] () – C:\WINDOWS\System32\RPVersion.ini
[2009/09/05 14:32:52 | 000,000,244 | -H– | M] () – C:\sqmnoopt16.sqm
[2009/09/05 14:32:52 | 000,000,232 | -H– | M] () – C:\sqmdata16.sqm
[2009/09/05 05:42:42 | 000,000,244 | -H– | M] () – C:\sqmnoopt15.sqm
[2009/09/05 05:42:42 | 000,000,232 | -H– | M] () – C:\sqmdata15.sqm
[2009/09/05 04:11:07 | 000,000,244 | -H– | M] () – C:\sqmnoopt14.sqm
[2009/09/05 04:11:07 | 000,000,232 | -H– | M] () – C:\sqmdata14.sqm
[2009/09/04 22:03:36 | 000,058,880 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msasn1.dll
[2009/09/04 15:47:12 | 000,000,232 | -H– | M] () – C:\sqmdata13.sqm
[2009/09/04 15:47:11 | 000,000,244 | -H– | M] () – C:\sqmnoopt13.sqm
[2009/09/01 00:30:25 | 000,000,049 | —- | M] () – C:\WINDOWS\NeroDigital.ini
[2009/09/01 00:24:34 | 000,023,392 | —- | M] () – C:\WINDOWS\System32\nscompat.tlb
[2009/09/01 00:24:34 | 000,016,832 | —- | M] () – C:\WINDOWS\System32\amcompat.tlb
[2009/08/26 09:00:21 | 000,247,326 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\strmdll.dll
[2009/08/26 09:00:21 | 000,247,326 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\strmdll.dll
[2009/08/25 10:17:27 | 000,354,816 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winhttp.dll
[2009/08/23 22:00:38 | 000,922,112 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\imapi2fs.dll
[2009/08/23 22:00:38 | 000,922,112 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imapi2fs.dll
[2009/08/23 22:00:38 | 000,426,496 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\imapi2.dll
[2009/08/23 22:00:38 | 000,426,496 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imapi2.dll
[2009/08/23 22:00:38 | 000,062,592 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cdrom.sys
[2009/08/15 20:43:06 | 000,000,244 | -H– | M] () – C:\sqmnoopt12.sqm
[2009/08/15 20:43:06 | 000,000,232 | -H– | M] () – C:\sqmdata12.sqm
[2009/08/14 14:21:25 | 001,850,624 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\win32k.sys
[2009/08/14 14:21:25 | 001,850,624 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\win32k.sys
[2009/08/09 11:42:16 | 000,000,244 | -H– | M] () – C:\sqmnoopt11.sqm
[2009/08/09 11:42:16 | 000,000,232 | -H– | M] () – C:\sqmdata11.sqm
[2009/08/09 10:48:42 | 000,000,244 | -H– | M] () – C:\sqmnoopt10.sqm
[2009/08/09 10:48:42 | 000,000,232 | -H– | M] () – C:\sqmdata10.sqm
[2009/08/09 09:45:21 | 000,000,244 | -H– | M] () – C:\sqmnoopt09.sqm
[2009/08/09 09:45:21 | 000,000,232 | -H– | M] () – C:\sqmdata09.sqm
[2009/08/09 07:40:27 | 000,000,232 | -H– | M] () – C:\sqmdata08.sqm
[2009/08/09 07:40:26 | 000,000,244 | -H– | M] () – C:\sqmnoopt08.sqm
[2009/08/06 19:24:18 | 000,327,896 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\wucltui.dll
[2009/08/06 19:24:18 | 000,327,896 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wucltui.dll
[2009/08/06 19:24:18 | 000,209,632 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuweb.dll
[2009/08/06 19:24:18 | 000,021,728 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\wucltui.dll.mui
[2009/08/06 19:24:12 | 000,015,072 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\wuaucpl.cpl.mui
[2009/08/06 19:24:10 | 000,217,816 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuaucpl.cpl
[2009/08/06 19:24:10 | 000,044,768 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\wups2.dll
[2009/08/06 19:24:10 | 000,035,552 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\wups.dll
[2009/08/06 19:24:10 | 000,035,552 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wups.dll
[2009/08/06 19:24:06 | 000,053,472 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuauclt.exe
[2009/08/06 19:24:06 | 000,015,064 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\wuapi.dll.mui
[2009/08/06 19:24:04 | 000,096,480 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cdm.dll
[2009/08/06 19:24:04 | 000,096,480 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\cdm.dll
[2009/08/06 19:24:00 | 000,017,632 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\wuaueng.dll.mui
[2009/08/06 19:23:54 | 000,575,704 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\wuapi.dll
[2009/08/06 19:23:54 | 000,575,704 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuapi.dll
[2009/08/06 19:23:46 | 001,929,952 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuaueng.dll
[2009/08/06 19:23:46 | 000,274,288 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\mucltui.dll
[2009/08/06 19:23:46 | 000,016,736 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\mucltui.dll.mui
[2009/08/05 22:48:42 | 000,054,752 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\fssfltr_tdi.sys
[2009/08/05 13:18:47 | 000,280,320 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Amporn.jpg
[2009/08/05 10:01:48 | 000,204,800 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\mswebdvd.dll
[2009/08/05 10:01:48 | 000,204,800 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mswebdvd.dll
[2009/08/03 15:07:42 | 000,403,816 | —- | M] () – C:\WINDOWS\System32\OGACheckControl.dll
[2009/08/03 15:07:42 | 000,322,928 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\OGAAddin.dll
[2009/08/03 15:07:42 | 000,230,768 | —- | M] () – C:\WINDOWS\System32\OGAEXEC.exe
[2009/08/02 05:29:42 | 000,029,904 | —- | M] () – C:\WINDOWS\System32\aawservice_2009_08_02_05_29_42.dmp
[2009/07/31 11:05:44 | 001,372,672 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msxml6.dll
[2009/07/31 05:35:42 | 001,172,480 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msxml3.dll
[2009/07/30 20:07:08 | 000,828,852 | —- | M] () – C:\Documents and Settings\All Users\Application Data\LUUnInstall.LiveUpdate
[2009/07/30 18:53:04 | 006,061,540 | —- | M] () – C:\WINDOWS\System32\drivers\Avg\avi7.avg
[2009/07/26 16:44:56 | 000,048,448 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\sirenacm.dll
[2009/07/17 20:01:06 | 000,058,880 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\atl.dll
[2009/07/17 17:22:18 | 001,435,648 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\query.dll
[2009/07/17 17:22:18 | 001,435,648 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\query.dll
[2009/07/16 19:10:39 | 000,005,037 | —- | M] () – C:\I hope you are well in England_.eml
[2009/07/16 18:41:22 | 000,033,647 | —- | M] () – C:\RE_ Think of my family.eml
[2009/07/16 18:40:53 | 000,024,714 | —- | M] () – C:\RE_ Miss u.eml
[2009/07/16 18:40:35 | 000,015,004 | —- | M] () – C:\RE_ Take care yourself.eml
[2009/07/16 18:40:08 | 000,008,427 | —- | M] () – C:\RE_ Dream to u.eml
[2009/07/13 23:43:24 | 010,841,088 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmp.dll
[2009/07/13 23:43:24 | 000,286,208 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmpdxm.dll
[2009/07/10 12:15:46 | 000,306,544 | —- | M] (Microsoft Corporation) – C:\WINDOWS\WLXPGSS.SCR
[2009/07/07 14:33:02 | 000,003,541 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\confirmation Marc[1].htm
[2009/07/05 19:58:53 | 000,316,640 | —- | M] () – C:\WINDOWS\WMSysPr9.prx
[2009/07/05 18:53:22 | 000,000,044 | —- | M] () – C:\WINDOWS\System32\msssc.dll
[2009/07/05 06:14:55 | 000,000,664 | —- | M] () – C:\WINDOWS\System32\d3d9caps.dat
[2009/07/04 23:36:04 | 000,000,376 | —- | M] () – C:\WINDOWS\ODBC.INI
[2009/07/04 03:44:01 | 000,013,824 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009/07/03 15:04:31 | 000,000,552 | —- | M] () – C:\WINDOWS\System32\d3d8caps.dat
[2009/07/02 16:38:22 | 000,000,104 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\Internet.lnk
[2009/06/30 16:23:15 | 000,000,145 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Local Settings\Application Data\fusioncache.dat
[2009/06/30 16:22:59 | 000,001,526 | —- | M] () – C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Utility Tray.lnk
[2009/06/30 16:22:54 | 000,001,738 | —- | M] () – C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Microsoft Office.lnk
[2009/06/30 16:22:47 | 000,000,811 | —- | M] () – C:\Documents and Settings\All Users\Start Menu\Programs\Startup\HP Image Zone Fast Start.lnk
[2009/06/30 16:22:34 | 000,001,821 | —- | M] () – C:\Documents and Settings\All Users\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
[2009/06/30 16:21:20 | 000,001,374 | —- | M] () – C:\WINDOWS\System32\wpa.bak
[2009/06/30 16:06:12 | 000,000,288 | —- | M] () – C:\WINDOWS\System32\$winnt$.inf
[2009/06/30 16:01:54 | 000,004,161 | —- | M] () – C:\WINDOWS\ODBCINST.INI
[2009/06/30 16:00:47 | 000,000,488 | RH– | M] () – C:\WINDOWS\System32\WindowsLogon.manifest
[2009/06/30 16:00:47 | 000,000,488 | RH– | M] () – C:\WINDOWS\System32\logonui.exe.manifest
[2009/06/30 16:00:39 | 000,000,749 | RH– | M] () – C:\WINDOWS\System32\wuaucpl.cpl.manifest
[2009/06/30 16:00:39 | 000,000,749 | RH– | M] () – C:\WINDOWS\WindowsShell.Manifest
[2009/06/30 16:00:39 | 000,000,749 | RH– | M] () – C:\WINDOWS\System32\sapi.cpl.manifest
[2009/06/30 16:00:39 | 000,000,749 | RH– | M] () – C:\WINDOWS\System32\nwc.cpl.manifest
[2009/06/30 16:00:39 | 000,000,749 | RH– | M] () – C:\WINDOWS\System32\ncpa.cpl.manifest
[2009/06/30 16:00:39 | 000,000,749 | RH– | M] () – C:\WINDOWS\System32\cdplayer.exe.manifest
[2009/06/30 15:58:56 | 000,023,348 | —- | M] () – C:\WINDOWS\System32\emptyregdb.dat
[2009/06/29 09:40:16 | 000,057,667 | —- | M] () – C:\WINDOWS\System32\ieuinit.inf
[2009/06/25 09:25:26 | 000,730,112 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\lsasrv.dll
[2009/06/25 09:25:26 | 000,730,112 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\lsasrv.dll
[2009/06/25 09:25:26 | 000,301,568 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kerberos.dll
[2009/06/25 09:25:26 | 000,147,456 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\schannel.dll
[2009/06/25 09:25:26 | 000,056,832 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\secur32.dll
[2009/06/25 09:25:26 | 000,054,272 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wdigest.dll
[2009/06/24 12:18:41 | 000,092,928 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ksecdd.sys
[2009/06/12 13:31:40 | 000,080,896 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\tlntsess.exe
[2009/06/12 13:31:40 | 000,080,896 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tlntsess.exe
[2009/06/12 13:31:39 | 000,076,288 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\telnet.exe
[2009/06/12 13:31:39 | 000,076,288 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\telnet.exe
[2009/06/10 09:19:38 | 002,066,432 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mstscax.dll
[2009/06/10 07:14:49 | 000,132,096 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wkssvc.dll
========== Files Created - No Company Name ==========
[2010/06/03 04:12:58 | 000,016,547 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\OTL.zip
[2010/06/03 04:12:46 | 000,010,489 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\Extras.zip
[2010/06/02 20:07:48 | 000,966,213 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\tdsskiller.zip
[2010/06/02 03:52:37 | 000,293,376 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\39ki73vk GMER.exe
[2010/06/01 08:59:20 | 000,001,821 | —- | C] () – C:\Documents and Settings\All Users\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
[2010/06/01 08:59:20 | 000,001,783 | —- | C] () – C:\Documents and Settings\All Users\Start Menu\Programs\Startup\InterVideo WinCinema Manager.lnk
[2010/06/01 08:59:20 | 000,001,738 | —- | C] () – C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Microsoft Office.lnk
[2010/06/01 08:59:20 | 000,001,526 | —- | C] () – C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Utility Tray.lnk
[2010/06/01 08:59:20 | 000,000,811 | —- | C] () – C:\Documents and Settings\All Users\Start Menu\Programs\Startup\HP Image Zone Fast Start.lnk
[2010/05/31 19:05:33 | 000,000,335 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\Free Criminal Record Check - Page 2 - Cable Forum.url
[2010/05/30 18:15:19 | 000,021,505 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\a-boozer.html
[2010/05/29 11:48:27 | 000,000,317 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\lost google - now searchqu.com.url
[2010/05/29 07:45:28 | 000,000,000 | —- | C] () – C:\WINDOWS\iPlayer.INI
[2010/05/29 04:32:24 | 000,000,792 | —- | C] () – C:\Documents and Settings\All Users\Desktop\InterActual Player.lnk
[2010/05/28 03:44:57 | 000,000,317 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\Thai for Lovers.url
[2010/05/28 03:25:08 | 000,000,210 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\Manee and Friends.url
[2010/05/25 04:16:10 | 000,000,665 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\UK Credit Cards Capital One.url
[2010/05/25 03:46:55 | 000,000,316 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\allfreegames.eu-free-online-games-play-Crash+Bandicoot-45e8beb2f472b5b11031a1f9171bab8b.html.url
[2010/05/25 02:27:07 | 000,029,696 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Basildon Magistrates Court.doc
[2010/05/24 19:02:46 | 000,000,220 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\TV Guide UK TV Listings - UK's No 1 TV Listing site for Freeview, Sky, Virgin Media, Freesat & Tiscali TV.url
[2010/05/24 19:00:48 | 000,000,259 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\Nationwide Building Society Mortgages, Savings, Current Accounts, Banking, Insurance, Credit Cards, Loans, Investments.url
[2010/05/22 21:44:32 | 000,084,197 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\win 7 report compatability.mht
[2010/05/22 20:29:42 | 000,001,928 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Google Earth.lnk
[2010/05/20 10:30:13 | 000,000,158 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\AVForums.com Home.url
[2010/05/16 19:22:15 | 000,000,211 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\eBay - The UK's Online Marketplace.url
[2010/05/16 00:27:14 | 000,000,186 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\My Lifetracks - Lifetracks.com.url
[2010/05/14 23:08:09 | 000,000,243 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\oilcareers.com-worldwide-.url
[2010/05/14 19:26:10 | 000,001,863 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Logitech Webcam Software.lnk
[2010/05/13 16:40:01 | 000,000,803 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Logitech Vid.lnk
[2010/05/12 19:17:57 | 000,009,046 | —- | C] () – C:\WINDOWS\System32\nvinfo.pb
[2010/05/12 19:17:55 | 002,183,470 | —- | C] () – C:\WINDOWS\System32\nvdata.bin
[2010/05/08 05:21:25 | 000,577,660 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\RX8_Stereo_Removal.pdf
[2010/05/04 18:24:26 | 000,002,137 | —- | C] () – C:\Documents and Settings\All Users\Desktop\iTunes.lnk
[2010/04/05 20:10:11 | 000,020,992 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\ben letter to yde.doc
[2010/04/05 06:12:20 | 000,000,762 | —- | C] () – C:\Documents and Settings\All Users\Desktop\RegistryBooster.lnk
[2010/04/04 07:19:25 | 000,516,198 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\95-7510_manual metra stereo.pdf
[2010/04/01 21:51:29 | 096,180,512 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\RX8_workshop_manual.zip
[2010/04/01 05:32:08 | 003,506,285 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\mot.jpg
[2010/03/28 21:57:20 | 000,000,737 | —- | C] () – C:\Documents and Settings\All Users\Desktop\PowerSuite.lnk
[2010/03/16 05:03:45 | 000,000,238 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\Mazda RX-8 Owners Club UK.url
[2010/03/15 16:02:05 | 005,136,305 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\manual RX8 2009 ON.pdf
[2010/02/26 05:02:30 | 000,060,172 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Spidermite[1].pdf
[2010/02/26 05:01:49 | 000,016,618 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\blank grow sheet[1].pdf
[2010/02/23 20:27:12 | 000,000,258 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\The Complete guide to Sick Plants,pH, and Pest troubles! - International Cannagraphic Magazine Forums (2).url
[2010/02/19 04:30:32 | 007,217,077 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\FE-310_Instruction_Manual_EN.pdf
[2010/02/16 19:29:05 | 000,000,880 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Ad-Aware.lnk
[2010/02/08 02:00:26 | 000,022,016 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Ben M.doc
[2010/02/05 14:47:04 | 000,020,992 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Ben Money.doc
[2010/02/04 19:57:03 | 000,000,000 | —- | C] () – C:\WINDOWS\PCFriend.INI
[2010/01/31 19:55:55 | 000,496,605 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Start_up_guide_Business_plan.pdf
[2010/01/31 19:55:25 | 000,482,240 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Start_up_guide_part_2.pdf
[2010/01/31 19:54:03 | 000,589,849 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Start_up_guide_part_1.pdf
[2009/12/14 03:33:56 | 000,000,580 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\My Account - PayPal.url
[2009/12/04 21:22:44 | 118,327,296 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Doc1.doc
[2009/12/01 22:05:41 | 000,000,225 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\TITANIUM.url
[2009/11/30 04:38:54 | 000,024,046 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\TB2Categories000.dat
[2009/11/30 01:10:36 | 000,000,394 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\CATCH-UP.url
[2009/10/27 18:12:01 | 000,027,290 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\UK_Davidman_Diet_2_160x600.gif
[2009/10/26 05:00:21 | 000,257,866 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\e-ticket Invoice No 656065.zip
[2009/10/24 18:38:41 | 000,056,320 | —- | C] () – C:\WINDOWS\System32\iyvu9_32.dll
[2009/10/24 13:11:16 | 000,000,884 | —- | C] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2009/10/24 13:11:16 | 000,000,880 | —- | C] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2009/10/23 03:58:58 | 000,003,541 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\confirmation Marc[1].htm
[2009/10/22 20:36:48 | 001,267,007 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\NOKIA 6233 USER MANUAL.pdf
[2009/10/19 15:29:31 | 000,073,018 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\X2Z6WA[1].pdf
[2009/10/19 03:36:55 | 000,002,958 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\images.jpg
[2009/10/19 03:33:13 | 000,007,621 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\2.jpg
[2009/10/19 03:32:49 | 000,002,805 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\images3.jpg
[2009/10/19 03:32:42 | 000,003,986 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\girlfrend.jpg
[2009/10/19 03:32:34 | 000,007,262 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\imageslove.jpg
[2009/10/19 03:07:26 | 000,000,782 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\ltgreen.jpg
[2009/10/07 01:46:36 | 000,025,752 | —- | C] () – C:\WINDOWS\System32\drivers\LVPr2Mon.sys
[2009/10/07 01:23:08 | 000,013,584 | —- | C] () – C:\WINDOWS\System32\drivers\iKeyLFT2.dll
[2009/09/22 22:17:26 | 000,000,281 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\THAI BART RATE CONVERTER.url
[2009/09/21 19:07:55 | 000,000,424 | -H– | C] () – C:\WINDOWS\tasks\User_Feed_Synchronization-{169FDE4B-E2F9-4890-879E-D1A096EA74F2}.job
[2009/09/20 22:16:35 | 000,082,289 | —- | C] () – C:\WINDOWS\System32\lvcoinst.ini
[2009/09/20 22:16:35 | 000,034,068 | —- | C] () – C:\WINDOWS\System32\Repository.reg
[2009/09/14 05:14:11 | 000,082,652 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7220149 porn.JPG
[2009/09/14 05:14:11 | 000,080,996 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\1.JPG
[2009/09/11 21:14:35 | 000,084,425 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270164 temple of peace started 1984.JPG
[2009/09/11 21:13:44 | 000,085,054 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270163 massive carved temple of peace, 1986 200 builders.JPG
[2009/09/11 21:12:44 | 000,083,022 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\porn kiss dolphin.JPG
[2009/09/11 21:08:59 | 000,081,828 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7220146 crock swimming.JPG
[2009/09/11 21:08:13 | 000,085,709 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\tiger.JPG
[2009/09/11 21:07:20 | 000,083,427 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7220140 crock5.JPG
[2009/09/11 21:06:51 | 000,082,800 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7220139 crock4.JPG
[2009/09/11 21:05:12 | 000,081,453 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7220138 crock 3.JPG
[2009/09/11 21:04:31 | 000,082,207 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7220135 crock 2.JPG
[2009/09/11 21:02:09 | 000,081,716 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7190116 2 house in surin.JPG
[2009/09/11 21:01:29 | 000,084,788 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7190118 house in surin.JPG
[2009/09/11 20:03:40 | 000,084,260 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270155.JPG
[2009/09/11 19:53:07 | 000,082,632 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7250151 me on steps big budda.JPG
[2009/09/11 19:52:05 | 000,083,146 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7250150 big budda.JPG
[2009/09/11 19:50:08 | 000,085,060 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7220148 me.JPG
[2009/09/11 19:49:18 | 000,082,800 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7220139 crok.JPG
[2009/09/11 19:38:00 | 000,080,518 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7180092 014.JPG
[2009/09/11 19:35:34 | 000,079,649 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7300189 013.JPG
[2009/09/11 19:34:10 | 000,081,841 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7300188 012.JPG
[2009/09/11 19:33:31 | 000,083,048 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270185 011.JPG
[2009/09/11 19:32:27 | 000,083,922 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270183 010.JPG
[2009/09/11 19:31:02 | 000,084,744 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270181 09.JPG
[2009/09/11 19:29:46 | 000,085,020 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270178 08.JPG
[2009/09/11 16:43:01 | 000,085,473 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270176 07.JPG
[2009/09/11 16:38:06 | 000,082,526 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270173 06.JPG
[2009/09/11 16:37:29 | 000,086,589 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270171 05.JPG
[2009/09/11 16:36:56 | 000,083,057 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270170 04.JPG
[2009/09/11 16:36:16 | 000,082,965 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270169 03.JPG
[2009/09/11 16:35:21 | 000,082,384 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270168 02.JPG
[2009/09/11 16:34:47 | 000,084,675 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270167 01.JPG
[2009/09/08 16:19:31 | 000,000,671 | -H– | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\.picasa.ini
[2009/09/08 15:10:52 | 000,082,756 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P6200005.JPG
[2009/09/08 15:10:06 | 000,082,759 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\3.JPG
[2009/08/05 13:19:54 | 000,084,458 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Amporn, noi.jpg
[2009/08/05 13:18:39 | 000,280,320 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Amporn.jpg
[2009/08/03 15:07:42 | 000,403,816 | —- | C] () – C:\WINDOWS\System32\OGACheckControl.dll
[2009/08/03 07:24:46 | 000,000,244 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\youtube.com-gl=GB&hl=en-GB.url
[2009/07/30 20:32:28 | 000,000,472 | —- | C] () – C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job
[2009/07/19 07:22:30 | 000,000,045 | —- | C] () – C:\WINDOWS\System32\RPVersion.ini
[2009/07/08 20:27:20 | 000,000,635 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\Sign In.url
[2009/07/06 03:23:06 | 000,000,224 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\BBC iPlayer - Home.url
[2009/07/05 21:05:30 | 000,000,249 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\home page Take a Break Bingo.url
[2009/07/02 16:38:22 | 000,000,104 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\Internet.lnk
[2009/06/30 18:57:51 | 000,000,969 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\My Sharing Folders.lnk
[2009/06/30 16:00:39 | 000,000,749 | RH– | C] () – C:\WINDOWS\System32\wuaucpl.cpl.manifest
[2009/06/30 16:00:39 | 000,000,749 | RH– | C] () – C:\WINDOWS\WindowsShell.Manifest
[2009/06/30 16:00:39 | 000,000,749 | RH– | C] () – C:\WINDOWS\System32\sapi.cpl.manifest
[2009/06/30 15:34:58 | 2952,347,648 | —- | C] () – C:\WINDOWS\MEMORY.DMP
[2007/11/15 04:12:23 | 000,000,125 | —- | C] () – C:\WINDOWS\cdplayer.ini
[2007/11/13 02:38:13 | 002,729,472 | —- | C] () – C:\WINDOWS\System32\fun_avcodec.dll
[2006/12/08 03:14:52 | 000,000,000 | —- | C] () – C:\WINDOWS\hpqEmlSz.INI
[2006/12/04 07:51:01 | 000,060,672 | —- | C] () – C:\WINDOWS\PSCMN25.DLL
[2006/12/04 07:51:01 | 000,035,264 | —- | C] () – C:\WINDOWS\PSIMGJ1.DLL
[2006/11/25 11:34:25 | 000,000,214 | —- | C] () – C:\WINDOWS\HP_48BitScanUpdatePatch.ini
[2006/11/02 07:31:40 | 000,000,068 | —- | C] () – C:\WINDOWS\IDMan.INI
[2006/08/27 03:01:37 | 000,000,206 | —- | C] () – C:\WINDOWS\HPGdiPlus.ini
[2006/08/18 06:57:06 | 000,000,464 | —- | C] () – C:\WINDOWS\iScreensaver.ini
[2006/07/29 10:43:33 | 000,000,049 | —- | C] () – C:\WINDOWS\NeroDigital.ini
[2006/07/26 18:07:34 | 000,106,346 | —- | C] () – C:\WINDOWS\VGAsetup.ini
[2006/07/26 18:07:14 | 000,171,122 | —- | C] () – C:\WINDOWS\System32\VGAunistlog.ini
[2006/07/26 16:42:12 | 000,032,768 | —- | C] () – C:\WINDOWS\SIS_LIB.DLL
[2006/07/26 16:33:12 | 000,000,376 | —- | C] () – C:\WINDOWS\ODBC.INI
[2006/07/26 16:33:12 | 000,000,063 | —- | C] () – C:\WINDOWS\mdm.ini
[2006/07/26 16:32:08 | 000,000,000 | —- | C] () – C:\WINDOWS\NSREX.INI
[2006/07/26 16:24:50 | 000,000,044 | —- | C] () – C:\WINDOWS\System32\msssc.dll
[2001/11/19 20:05:18 | 000,003,972 | —- | C] () – C:\WINDOWS\System32\drivers\PciBus.sys
[2001/03/30 22:58:36 | 000,135,168 | —- | C] () – C:\WINDOWS\System32\property.dll
[1999/01/23 03:46:58 | 000,065,536 | —- | C] () – C:\WINDOWS\System32\MSRTEDIT.DLL
[1998/10/11 01:07:38 | 000,088,576 | —- | C] () – C:\WINDOWS\System32\Iticheck.dll
[1998/07/15 22:44:30 | 000,134,656 | —- | C] () – C:\WINDOWS\System32\itijpg2.dll
========== Alternate Data Streams ==========
@Alternate Data Stream - 118 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:5C321E34
< End of report >
marc64
Results of the OTL scan, please note there is only 1 file, before you asked me to prompt/check various box's and there was two diferant files "extra" and the "OTL" File,
OTL logfile created on: 6/3/2010 04:14:16 - Run 2
OTL by OldTimer - Version 3.2.5.1 Folder = C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000809 | Country: United Kingdom | Language: ENG | Date Format: M/d/yyyy
3.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 57.00% Memory free
9.00 Gb Paging File | 8.00 Gb Available in Paging File | 90.00% Paging File free
Paging file location(s): [Binary data over 100 bytes]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 189.91 Gb Total Space | 153.25 Gb Free Space | 80.70% Space Free | Partition Type: NTFS
Drive D: | 298.09 Gb Total Space | 280.92 Gb Free Space | 94.24% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Computer Name: NONE-5738F18114
Current User Name: Mark M
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal
========== Processes (SafeList) ==========
PRC - C:\Program Files\AVG\AVG9\avgtray.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG9\avgnsx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG9\avgrsx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG9\avgfws9.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG9\avgcsrvx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG9\avgchsvx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe (Lavasoft)
PRC - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe (Lavasoft)
PRC - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.)
PRC - C:\Program Files\Uniblue\PowerSuite\powersuite.exe (Uniblue Systems Limited)
PRC - C:\Program Files\Common Files\Autodata Limited Shared\Service\ADCDLicSvc.exe ()
PRC - C:\Program Files\Uniblue\SpeedUpMyPC\sump.exe (Uniblue Systems Limited)
PRC - C:\Program Files\AVG\AVG9\avgwdsvc.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG9\Identity Protection\Agent\Bin\AVGIDSAgent.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG9\Identity Protection\Agent\Bin\AVGIDSMonitor.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG9\avgam.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\Logitech\Logitech Vid\Vid.exe (Logitech Inc.)
PRC - C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe ()
PRC - C:\Program Files\Common Files\LogiShrd\LQCVFX\COCIManager.exe ()
PRC - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe (Logitech Inc.)
PRC - C:\Program Files\eBay\eBay Toolbar2\eBayTBDaemon.exe (eBay Inc.)
PRC - C:\Program Files\Windows Live\Contacts\wlcomm.exe (Microsoft Corporation)
PRC - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe (Yahoo! Inc.)
PRC - C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe (Sun Microsystems, Inc.)
PRC - C:\Program Files\Java\jre1.6.0_07\bin\jucheck.exe (Sun Microsystems, Inc.)
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\Kontiki\KService.exe (Kontiki Inc.)
PRC - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe ()
PRC - C:\Program Files\Picasa2\PicasaMediaDetector.exe (Google Inc.)
PRC - C:\WINDOWS\system32\sistray.exe (Silicon Integrated Systems Corporation)
PRC - C:\Program Files\Analog Devices\SoundMAX\SMTray.exe (Analog Devices, Inc.)
PRC - C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe ()
========== Modules (SafeList) ==========
MOD - C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\WINDOWS\system32\msscript.ocx (Microsoft Corporation)
========== Win32 Services (SafeList) ==========
SRV - (avgfws9) – C:\Program Files\AVG\AVG9\avgfws9.exe (AVG Technologies CZ, s.r.o.)
SRV - (aawservice) – C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe (Lavasoft)
SRV - (Apple Mobile Device) – C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.)
SRV - (Autodata Limited License Service) – C:\Program Files\Common Files\Autodata Limited Shared\Service\ADCDLicSvc.exe ()
SRV - (avg9wd) – C:\Program Files\AVG\AVG9\avgwdsvc.exe (AVG Technologies CZ, s.r.o.)
SRV - (AVGIDSAgent) – C:\Program Files\AVG\AVG9\Identity Protection\Agent\Bin\AVGIDSAgent.exe (AVG Technologies CZ, s.r.o.)
SRV - (LVPrcSrv) – C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe (Logitech Inc.)
SRV - (fsssvc) – C:\Program Files\Windows Live\Family Safety\fsssvc.exe (Microsoft Corporation)
SRV - (SeaPort) – C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe (Microsoft Corporation)
SRV - (YahooAUService) – C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe (Yahoo! Inc.)
SRV - (KService) – C:\Program Files\Kontiki\KService.exe (Kontiki Inc.)
SRV - (Symantec Core LC) – C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe ()
SRV - (Pml Driver HPZ12) – C:\WINDOWS\system32\HPZipm12.exe (HP)
SRV - (WinDefend) – C:\Program Files\Windows Defender\MsMpEng.exe (Microsoft Corporation)
========== Driver Services (SafeList) ==========
DRV - (AvgTdiX) – C:\WINDOWS\System32\Drivers\avgtdix.sys (AVG Technologies CZ, s.r.o.)
DRV - (AvgMfx86) – C:\WINDOWS\System32\Drivers\avgmfx86.sys (AVG Technologies CZ, s.r.o.)
DRV - (FilterService) – C:\WINDOWS\system32\drivers\lvuvcflt.sys (Logitech Inc.)
DRV - (NVENETFD) – C:\WINDOWS\system32\drivers\NVENETFD.sys (NVIDIA Corporation)
DRV - (nv) – C:\WINDOWS\system32\drivers\nv4_mini.sys (NVIDIA Corporation)
DRV - (AVGIDSDriverxpx) – C:\Program Files\AVG\AVG9\Identity Protection\Agent\Driver\Platform_XP\AVGIDSDriver.sys (AVG Technologies CZ, s.r.o. )
DRV - (AVGIDSFilterxpx) – C:\Program Files\AVG\AVG9\Identity Protection\Agent\Driver\Platform_XP\AVGIDSFilter.sys (AVG Technologies CZ, s.r.o. )
DRV - (AVGIDSShimxpx) – C:\Program Files\AVG\AVG9\Identity Protection\Agent\Driver\Platform_XP\AVGIDSShim.sys (AVG Technologies CZ, s.r.o. )
DRV - (AVGIDSErHrxpx) – C:\WINDOWS\System32\Drivers\AVGIDSxx.sys (AVG Technologies CZ, s.r.o. )
DRV - (AvgLdx86) – C:\WINDOWS\System32\Drivers\avgldx86.sys (AVG Technologies CZ, s.r.o.)
DRV - (AvgRkx86) – C:\WINDOWS\System32\Drivers\avgrkx86.sys (AVG Technologies CZ, s.r.o.)
DRV - (Lbd) – C:\WINDOWS\system32\DRIVERS\Lbd.sys (Lavasoft AB)
DRV - (Avgfwfd) – C:\WINDOWS\system32\drivers\avgfwdx.sys (AVG Technologies CZ, s.r.o.)
DRV - (Avgfwdx) – C:\WINDOWS\system32\drivers\avgfwdx.sys (AVG Technologies CZ, s.r.o.)
DRV - (LVUVC) Logitech Webcam 200(UVC) – C:\WINDOWS\system32\drivers\lvuvc.sys (Logitech Inc.)
DRV - (LVRS) – C:\WINDOWS\system32\drivers\lvrs.sys (Logitech Inc.)
DRV - (lvpopflt) – C:\WINDOWS\system32\drivers\lvpopflt.sys (Logitech Inc.)
DRV - (LVPr2Mon) – C:\WINDOWS\system32\drivers\LVPr2Mon.sys ()
DRV - (fssfltr) – C:\WINDOWS\system32\drivers\fssfltr_tdi.sys (Microsoft Corporation)
DRV - (Intrchs) – C:\Program Files\PlayE4\bin\Intrchs.sys ()
DRV - (eeCtrl) – C:\Program Files\Common Files\Symantec Shared\eengine\eeCtrl.sys (Symantec Corporation)
DRV - (nvnetbus) – C:\WINDOWS\system32\drivers\nvnetbus.sys (NVIDIA Corporation)
DRV - (IntcAzAudAddService) Service for Realtek HD Audio (WDM) – C:\WINDOWS\system32\drivers\RtkHDAud.sys (Realtek Semiconductor Corp.)
DRV - (usbaudio) USB Audio Driver (WDM) – C:\WINDOWS\system32\drivers\USBAUDIO.sys (Microsoft Corporation)
DRV - (HDAudBus) – C:\WINDOWS\system32\drivers\hdaudbus.sys (Windows ® Server 2003 DDK provider)
DRV - (LUsbFilt) – C:\WINDOWS\system32\drivers\LUsbFilt.sys (Logitech, Inc.)
DRV - (LMouKE) – C:\WINDOWS\system32\drivers\LMouKE.Sys (Logitech Inc.)
DRV - (LMouFilt) – C:\WINDOWS\system32\drivers\LMouFilt.Sys (Logitech, Inc.)
DRV - (LHidFilt) – C:\WINDOWS\system32\drivers\LHidFilt.Sys (Logitech, Inc.)
DRV - (L8042mou) – C:\WINDOWS\system32\drivers\L8042mou.Sys (Logitech Inc.)
DRV - (L8042Kbd) – C:\WINDOWS\system32\drivers\L8042Kbd.sys (Logitech Inc.)
DRV - (symlcbrd) – C:\WINDOWS\system32\drivers\symlcbrd.sys (Symantec Corporation)
DRV - (SiS315) – C:\WINDOWS\system32\drivers\sisgrp.sys (Silicon Integrated Systems Corporation)
DRV - (SiSkp) – C:\WINDOWS\system32\drivers\srvkp.sys (Silicon Integrated Systems Corporation)
DRV - (SISAGP) – C:\WINDOWS\system32\DRIVERS\SISAGPX.sys (Silicon Integrated Systems Corporation)
DRV - (W8100PCI) – C:\WINDOWS\system32\drivers\mrv8k51.sys (Marvell Semiconductor, Inc)
DRV - (SiSGbeXP) – C:\WINDOWS\system32\drivers\SiSGbeXP.sys (Silicon Integrated Systems Corp.)
DRV - (SiSRaid2) – C:\WINDOWS\system32\DRIVERS\SiSRaid2.sys (Silicon Integrated Systems)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://uk.msn.com/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://www.bing.com/ [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded =
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://uk.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-gb
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = F2 D8 88 89 5F 00 CB 01 [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKCU\..\URLSearchHook: {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll ()
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
FF - HKLM\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\Program Files\Real\RealPlayer\browserrecord [2008/11/08 16:14:39 | 000,000,000 | —D | M]
O1 HOSTS File: ([2004/08/04 13:00:00 | 000,000,734 | —- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Skype add-on (mastermind)) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.)
O2 - BHO: (eBay Toolbar Helper) - {22D8E815-4A5E-4DFB-845E-AAB64207F5BD} - C:\Program Files\eBay\eBay Toolbar2\eBayTb.dll (eBay Inc.)
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll (RealPlayer)
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (Search Helper) - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll (Microsoft Corporation)
O2 - BHO: (SSVHelper Class) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (AVG Security Toolbar BHO) - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll ()
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.5.5126.1836\swg.dll (Google Inc.)
O2 - BHO: (MSN Toolbar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\MSN\Toolbar\3.0.1203.0\msneshellx.dll (Microsoft Corp.)
O2 - BHO: (Windows Live Toolbar Helper) - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
O3 - HKLM\..\Toolbar: (MSN Toolbar) - {1E61ED7C-7CB8-49d6-B9E9-AB4C880C8414} - C:\Program Files\MSN\Toolbar\3.0.1203.0\msneshellx.dll (Microsoft Corp.)
O3 - HKLM\..\Toolbar: (&Windows Live Toolbar) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (eBay Toolbar) - {92085AD4-F48A-450D-BD93-B28CC7DF67CE} - C:\Program Files\eBay\eBay Toolbar2\eBayTb.dll (eBay Inc.)
O3 - HKLM\..\Toolbar: (AVG Security Toolbar) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (&Windows Live Toolbar) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
O3 - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (AVG Security Toolbar) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll ()
O4 - HKLM..\Run: [4oD] C:\Program Files\Kontiki\KHost.exe (Kontiki Inc.)
O4 - HKLM..\Run: [AVG9_TRAY] C:\Program Files\AVG\AVG9\avgtray.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [eBayToolbar] C:\Program Files\eBay\eBay Toolbar2\eBayTBDaemon.exe (eBay Inc.)
O4 - HKLM..\Run: [Kernel and Hardware Abstraction Layer] C:\WINDOWS\KHALMNPR.Exe (Logitech Inc.)
O4 - HKLM..\Run: [KernelFaultCheck] File not found
O4 - HKLM..\Run: [Logitech Hardware Abstraction Layer] C:\WINDOWS\KHALMNPR.Exe (Logitech Inc.)
O4 - HKLM..\Run: [LogitechQuickCamRibbon] C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe ()
O4 - HKLM..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe (Ahead Software Gmbh)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe (Silicon Integrated Systems Corp.)
O4 - HKLM..\Run: [Smapp] C:\Program Files\Analog Devices\SoundMAX\SMTray.exe (Analog Devices, Inc.)
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKCU..\Run: [kdx] C:\Program Files\Kontiki\KHost.exe (Kontiki Inc.)
O4 - HKCU..\Run: [Logitech Vid] C:\Program Files\Logitech\Logitech Vid\Vid.exe (Logitech Inc.)
O4 - HKCU..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (Google Inc.)
O4 - HKCU..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)
O4 - HKCU..\RunOnce: [PowerSuite] C:\Program Files\Uniblue\PowerSuite\launcher.exe (Uniblue Systems Limited)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\HP Image Zone Fast Start.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe (Hewlett-Packard Co.)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe ()
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE (Microsoft Corporation)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Utility Tray.lnk = C:\WINDOWS\system32\sistray.exe (Silicon Integrated Systems Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: &ieSpell Options - C:\Program Files\ieSpell\iespell.dll (Red Egg Software)
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\WINDOWS\System32\GPhotos.scr (Google Inc.)
O8 - Extra context menu item: Check &Spelling - C:\Program Files\ieSpell\iespell.dll (Red Egg Software)
O8 - Extra context menu item: eBay Search - C:\Program Files\eBay\eBay Toolbar2\eBayTb.dll (eBay Inc.)
O8 - Extra context menu item: Google Sidewiki… - C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_2EC7709873947E87.dll (Google Inc.)
O8 - Extra context menu item: Lookup on Merriam Webster - C:\Program Files\ieSpell\Merriam Webster.HTM ()
O8 - Extra context menu item: Lookup on Wikipedia - C:\Program Files\ieSpell\wikipedia.HTM ()
O9 - Extra 'Tools' menuitem : Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\npjpi160_07.dll (Sun Microsystems, Inc.)
O9 - Extra Button: ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - C:\Program Files\ieSpell\iespell.dll (Red Egg Software)
O9 - Extra 'Tools' menuitem : ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - C:\Program Files\ieSpell\iespell.dll (Red Egg Software)
O9 - Extra 'Tools' menuitem : ieSpell Options - {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - C:\Program Files\ieSpell\iespell.dll (Red Egg Software)
O9 - Extra Button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.)
O9 - Extra Button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O16 - DPF: {0067DBFC-A752-458C-AE6E-B9C7E63D4824} http://www.logitech.com/devicedetector/plu…Detection32.cab (Device Detection)
O16 - DPF: {05D44720-58E3-49E6-BDF6-D00330E511D3} http://zone.msn.com/binFrameWork/v10/StagingUI.cab55579.cab (MSN Games – Matchmaking)
O16 - DPF: {0D41B8C5-2599-4893-8183-00195EC8D5F9} http://support.asus.com/common/asusTek_sys_ctrl.cab (asusTek_sysctrl Class)
O16 - DPF: {1803B9EF-9905-4F34-AFC4-05D1BAB28801} http://us.dl1.yimg.com/download.yahoo.com/…_1/yregucfg.cab (RegUserCfgUI Class)
O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262F} http://www.nvidia.com/content/DriverDownlo…sreqlab_nvd.cab (System Requirements Lab Class)
O16 - DPF: {3BB54395-5982-4788-8AF4-B5388FFDD0D8} http://zone.msn.com/BinFrameWork/v10/ZBuddy.cab55579.cab (MSN Games – Buddy Invite)
O16 - DPF: {5736C456-EA94-4AAC-BB08-917ABDD035B3} http://zone.msn.com/binframework/v10/ZPAChat.cab55579.cab (MSN Games – Game Chat)
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} http://cdn.scan.onecare.live.com/resource/…lscbase6087.cab (Windows Live Safety Center Base Module)
O16 - DPF: {6A344D34-5231-452A-8A57-D064AC9B7862} https://webdl.symantec.com/activex/symdlmgr.cab (Symantec Download Manager)
O16 - DPF: {6F15128C-E66A-490C-B848-5000B5ABEEAC} https://h20436.www2.hp.com/ediags/dex/secure/HPDEXAXO.cab (HP Download Manager)
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab (OnlineScanner Control)
O16 - DPF: {95B5D20C-BD31-4489-8ABF-F8C8BE748463} http://zone.msn.com/bingame/zpagames/zpa_hrtz.cab58570.cab (ZPA_HRTZ Object)
O16 - DPF: {A4110378-789B-455F-AE86-3A1BFC402853} http://zone.msn.com/bingame/zpagames/zpa_shvl.cab55579.cab (ZPA_SHVL Object)
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} http://cdn2.zone.msn.com/binFramework/v10/…k.cab102118.cab (MSN Games - Installer)
O16 - DPF: {DA2AA6CF-5C7A-4B71-BC3B-C771BB369937} http://zone.msn.com/binframework/v10/StProxy.cab55579.cab (MSN Games – Game Communicator)
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} http://www.popcap.com/webgames/popcaploader_v10.cab (PopCapLoader Object)
O16 - DPF: {E77F23EB-E7AB-4502-8F37-247DBAF1A147} http://gfx2.hotmail.com/mail/w4/pr01/photo…ol/MSNPUpld.cab (Windows Live Hotmail Photo Upload Tool)
O16 - DPF: {FF3C5A9F-5A99-4930-80E8-4709194C2AD3} http://zone.msn.com/bingame/zpagames/ZPA_B…on.cab64162.cab (MSN Games – Backgammon)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll (AVG Technologies CZ, s.r.o.)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\avgrsstarter: DllName - avgrsstx.dll - C:\WINDOWS\System32\avgrsstx.dll (AVG Technologies CZ, s.r.o.)
O24 - Desktop WallPaper: C:\Documents and Settings\Mark M.NONE-5738F18114\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Mark M.NONE-5738F18114\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {091EB208-39DD-417D-A5DD-7E2C2D8FB9CB} - C:\Program Files\Windows Defender\MpShHook.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/07/24 09:48:16 | 000,000,000 | —- | M] () - C:\AUTOEXEC.BAT – [ NTFS ]
O32 - AutoRun File - [2009/01/30 19:33:49 | 000,000,090 | —- | M] () - C:\AUTORUN.INF – [ NTFS ]
O32 - AutoRun File - [2008/12/30 17:43:01 | 000,000,000 | —- | M] () - D:\AUTOEXEC.BAT – [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O34 - HKLM BootExecute: (lsdelete) - C:\WINDOWS\System32\lsdelete.exe ()
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*
========== Files/Folders - Created Within 30 Days ==========
[2010/06/02 21:57:09 | 000,000,000 | —D | C] – C:\Program Files\ESET
[2010/06/02 03:37:32 | 000,000,000 | —D | C] – C:\WINDOWS\Minidump
[2010/06/01 23:00:54 | 000,000,000 | —D | C] – C:\32788R22FWJFW
[2010/05/31 10:41:12 | 000,998,736 | —- | C] (Kaspersky Lab) – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\TDSSKiller.exe
[2010/05/31 02:09:44 | 000,000,000 | —D | C] – C:\_OTL
[2010/05/30 21:38:28 | 000,571,392 | —- | C] (OldTimer Tools) – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\OTL.exe
[2010/05/30 20:13:56 | 000,000,000 | —D | C] – C:\Documents and Settings\Mark M.NONE-5738F18114\Application Data\ieSpell
[2010/05/29 07:37:33 | 000,000,000 | —D | C] – C:\Program Files\Bandoo
[2010/05/28 05:11:48 | 000,000,000 | —D | C] – C:\Program Files\ieSpell
[2010/05/24 10:31:52 | 000,000,000 | —D | C] – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\Unused Desktop Shortcuts
[2010/05/23 03:40:01 | 000,000,000 | —D | C] – C:\Documents and Settings\Mark M.NONE-5738F18114\Application Data\Carambis
[2010/05/23 03:37:44 | 000,000,000 | —D | C] – C:\Program Files\Carambis
[2010/05/22 20:19:07 | 000,000,000 | —D | C] – C:\WINDOWS\Performance
[2010/05/22 20:18:59 | 000,000,000 | —D | C] – C:\Documents and Settings\Mark M.NONE-5738F18114\Local Settings\Application Data\Microsoft Corporation
[2010/05/22 20:18:28 | 000,000,000 | —D | C] – C:\Program Files\Microsoft Windows 7 Upgrade Advisor
[2010/05/20 07:40:46 | 000,000,000 | —D | C] – C:\WINDOWS\System32\dumps
[2010/05/14 19:27:09 | 000,199,192 | —- | C] (Logitech Inc.) – C:\WINDOWS\System32\lvci12101110.dll
[2010/05/13 16:40:11 | 000,000,000 | —D | C] – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\SightSpeed Recordings
[2010/05/12 19:19:04 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\NVIDIA Corporation
[2010/05/12 19:18:53 | 000,000,000 | —D | C] – C:\Program Files\NVIDIA Corporation
[2010/05/12 19:17:56 | 002,646,632 | —- | C] (NVIDIA Corporation) – C:\WINDOWS\System32\nvcuvenc.dll
[2010/05/12 19:17:55 | 011,647,592 | —- | C] (NVIDIA Corporation) – C:\WINDOWS\System32\nvcompiler.dll
[2010/05/12 19:08:46 | 000,000,000 | —D | C] – C:\Program Files\SystemRequirementsLab
[2010/05/04 18:23:33 | 000,000,000 | —D | C] – C:\Program Files\iPod
[2010/05/04 18:23:31 | 000,000,000 | —D | C] – C:\Program Files\iTunes
[2010/05/04 18:23:31 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2010/05/04 18:20:30 | 000,000,000 | —D | C] – C:\Program Files\QuickTime
[2010/05/04 18:18:08 | 003,003,680 | —- | C] (Apple, Inc.) – C:\WINDOWS\System32\usbaaplrc.dll
[2010/05/04 18:17:51 | 000,000,000 | —D | C] – C:\Program Files\Bonjour
[2010/03/17 21:53:42 | 000,094,208 | —- | C] (Apple Inc.) – C:\WINDOWS\System32\QuickTimeVR.qtx
[2010/03/17 21:53:42 | 000,069,632 | —- | C] (Apple Inc.) – C:\WINDOWS\System32\QuickTime.qts
[2010/02/04 19:56:08 | 000,298,496 | —- | C] (InstallShield Corporation, Inc.) – C:\WINDOWS\uninst.exe
[2009/12/06 02:48:05 | 000,000,000 | —D | C] – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Adobe Reader 9 Installer
[2009/12/04 17:30:26 | 000,000,000 | —D | C] – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\My Scans
[2009/10/24 13:16:52 | 000,000,000 | —D | C] – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Downloads
[2009/10/23 03:58:58 | 000,000,000 | —D | C] – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\confirmation Marc[1]_files
[2009/09/23 19:32:30 | 000,000,000 | —D | C] – C:\WINDOWS\System32\zh-TW
[2009/09/23 19:32:30 | 000,000,000 | —D | C] – C:\WINDOWS\System32\zh-HK
[2009/09/23 19:32:30 | 000,000,000 | —D | C] – C:\WINDOWS\System32\tr-TR
[2009/09/23 19:32:30 | 000,000,000 | —D | C] – C:\WINDOWS\System32\sv-SE
[2009/09/23 19:32:30 | 000,000,000 | —D | C] – C:\WINDOWS\System32\pt-BR
[2009/09/20 22:11:31 | 000,053,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\vfwwdm32.dll
[2009/09/14 05:14:11 | 000,000,000 | -H-D | C] – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\.picasaoriginals
[2009/09/14 05:06:52 | 000,000,000 | R-SD | C] – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\My Stationery
[2009/09/09 20:35:51 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Documents\microsoft
[2009/09/01 00:22:33 | 000,016,928 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\spmsg.dll
[2009/08/21 00:22:52 | 000,000,000 | —D | C] – C:\WINDOWS\System32\XPSViewer
[2009/08/21 00:22:04 | 001,676,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\xpssvcs.dll
[2009/08/21 00:22:04 | 000,117,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\prntvpt.dll
[2009/08/04 00:12:56 | 000,000,000 | —D | C] – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\My Videos
[2009/07/26 16:44:56 | 000,048,448 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\sirenacm.dll
[2009/07/16 20:20:36 | 000,000,000 | —D | C] – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\New Folder
[2009/07/10 12:15:46 | 000,306,544 | —- | C] (Microsoft Corporation) – C:\WINDOWS\WLXPGSS.SCR
[2009/07/05 19:56:49 | 000,000,000 | —D | C] – C:\WINDOWS\Prefetch
[2009/07/05 19:37:53 | 000,000,000 | -H-D | C] – C:\WINDOWS\$NtServicePackUninstall$
[2009/07/05 19:24:48 | 000,000,000 | —D | C] – C:\WINDOWS\ie8updates
[2009/07/05 19:20:56 | 000,000,000 | -H-D | C] – C:\WINDOWS\ie8
[2009/07/05 19:03:18 | 000,000,000 | —D | C] – C:\WINDOWS\System32\RTCOM
[2009/07/05 18:39:35 | 000,000,000 | —D | C] – C:\WINDOWS\nview
[2009/06/30 18:55:31 | 000,000,000 | —D | C] – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\My Received Files
[2009/06/30 17:13:56 | 000,000,000 | —D | C] – C:\WINDOWS\pss
[2009/06/30 16:21:34 | 000,000,000 | R–D | C] – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\My Music
[2009/06/30 16:21:32 | 000,000,000 | R–D | C] – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\My Pictures
[2009/06/30 15:44:31 | 000,024,661 | —- | C] (Perle Systems Ltd.) – C:\WINDOWS\System32\spxcoins.dll
========== Files - Modified Within 30 Days ==========
[2010/06/03 04:12:58 | 000,016,547 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\OTL.zip
[2010/06/03 04:12:46 | 000,010,489 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\Extras.zip
[2010/06/03 03:31:01 | 000,000,884 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2010/06/03 00:55:55 | 000,593,743 | —- | M] () – C:\WINDOWS\System32\drivers\Avg\iavifw.avm
[2010/06/03 00:55:54 | 060,640,563 | —- | M] () – C:\WINDOWS\System32\drivers\Avg\incavi.avm
[2010/06/02 23:41:03 | 000,000,424 | -H– | M] () – C:\WINDOWS\tasks\User_Feed_Synchronization-{169FDE4B-E2F9-4890-879E-D1A096EA74F2}.job
[2010/06/02 20:19:23 | 000,998,736 | —- | M] (Kaspersky Lab) – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\TDSSKiller.exe
[2010/06/02 20:07:50 | 000,966,213 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\tdsskiller.zip
[2010/06/02 17:33:15 | 000,001,374 | —- | M] () – C:\WINDOWS\System32\wpa.dbl
[2010/06/02 17:32:59 | 000,276,202 | —- | M] () – C:\WINDOWS\System32\NvApps.xml
[2010/06/02 17:32:35 | 000,000,006 | -H– | M] () – C:\WINDOWS\tasks\SA.DAT
[2010/06/02 17:32:28 | 000,002,048 | –S- | M] () – C:\WINDOWS\bootstat.dat
[2010/06/02 12:52:20 | 004,980,736 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\NTUSER.DAT
[2010/06/02 03:52:42 | 000,293,376 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\39ki73vk GMER.exe
[2010/06/02 03:37:27 | 2952,347,648 | —- | M] () – C:\WINDOWS\MEMORY.DMP
[2010/06/01 19:32:14 | 000,000,472 | —- | M] () – C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job
[2010/06/01 19:27:36 | 000,000,880 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2010/06/01 17:55:00 | 000,000,284 | —- | M] () – C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2010/06/01 08:59:33 | 000,001,107 | —- | M] () – C:\WINDOWS\win.ini
[2010/06/01 08:59:33 | 000,000,321 | -HS- | M] () – C:\boot.ini
[2010/06/01 08:59:33 | 000,000,227 | —- | M] () – C:\WINDOWS\system.ini
[2010/06/01 08:39:23 | 000,242,896 | —- | M] (AVG Technologies CZ, s.r.o.) – C:\WINDOWS\System32\drivers\avgtdix.sys
[2010/06/01 08:39:23 | 000,029,584 | —- | M] (AVG Technologies CZ, s.r.o.) – C:\WINDOWS\System32\drivers\avgmfx86.sys
[2010/06/01 08:11:15 | 000,000,259 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\Nationwide Building Society Mortgages, Savings, Current Accounts, Banking, Insurance, Credit Cards, Loans, Investments.url
[2010/05/31 23:30:34 | 000,000,220 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\TV Guide UK TV Listings - UK's No 1 TV Listing site for Freeview, Sky, Virgin Media, Freesat & Tiscali TV.url
[2010/05/31 19:14:42 | 000,000,665 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\UK Credit Cards Capital One.url
[2010/05/31 19:12:49 | 000,000,249 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\home page Take a Break Bingo.url
[2010/05/31 19:05:33 | 000,000,335 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\Free Criminal Record Check - Page 2 - Cable Forum.url
[2010/05/30 23:02:00 | 000,000,302 | —- | M] () – C:\WINDOWS\tasks\Ad-Aware 2007.job
[2010/05/30 21:38:30 | 000,571,392 | —- | M] (OldTimer Tools) – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\OTL.exe
[2010/05/30 20:55:22 | 000,000,317 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\lost google - now searchqu.com.url
[2010/05/30 20:49:36 | 000,000,635 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\Sign In.url
[2010/05/30 18:15:24 | 000,021,505 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\a-boozer.html
[2010/05/30 18:04:48 | 000,000,281 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\THAI BART RATE CONVERTER.url
[2010/05/29 22:00:37 | 000,000,244 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\youtube.com-gl=GB&hl=en-GB.url
[2010/05/29 07:45:28 | 000,000,000 | —- | M] () – C:\WINDOWS\iPlayer.INI
[2010/05/29 07:39:42 | 000,026,616 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
[2010/05/29 04:32:24 | 000,000,792 | —- | M] () – C:\Documents and Settings\All Users\Desktop\InterActual Player.lnk
[2010/05/28 18:27:18 | 000,000,394 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\CATCH-UP.url
[2010/05/28 11:42:05 | 000,147,608 | —- | M] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2010/05/28 05:34:24 | 000,000,278 | -HS- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\ntuser.ini
[2010/05/28 03:44:57 | 000,000,317 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\Thai for Lovers.url
[2010/05/28 03:25:08 | 000,000,210 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\Manee and Friends.url
[2010/05/27 17:52:54 | 000,023,832 | —- | M] (Logitech Inc.) – C:\WINDOWS\System32\drivers\lvuvcflt.sys
[2010/05/27 17:52:23 | 000,888,832 | —- | M] (NVIDIA Corporation) – C:\WINDOWS\System32\fdco1ins.dll
[2010/05/27 17:52:23 | 000,888,832 | —- | M] (NVIDIA Corporation) – C:\WINDOWS\System32\fdco1.dll
[2010/05/27 17:52:23 | 000,067,328 | —- | M] (NVIDIA Corporation) – C:\WINDOWS\System32\drivers\NVENETFD.sys
[2010/05/27 04:04:22 | 000,000,211 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\eBay - The UK's Online Marketplace.url
[2010/05/26 04:51:24 | 000,000,238 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\Mazda RX-8 Owners Club UK.url
[2010/05/25 03:46:55 | 000,000,316 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\allfreegames.eu-free-online-games-play-Crash+Bandicoot-45e8beb2f472b5b11031a1f9171bab8b.html.url
[2010/05/25 02:27:07 | 000,029,696 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Basildon Magistrates Court.doc
[2010/05/24 11:09:51 | 000,002,137 | —- | M] () – C:\Documents and Settings\All Users\Desktop\iTunes.lnk
[2010/05/24 04:47:27 | 000,000,224 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\BBC iPlayer - Home.url
[2010/05/23 17:18:33 | 000,000,580 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\My Account - PayPal.url
[2010/05/22 21:44:32 | 000,084,197 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\win 7 report compatability.mht
[2010/05/22 20:29:42 | 000,001,928 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Google Earth.lnk
[2010/05/22 09:25:32 | 000,000,243 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\oilcareers.com-worldwide-.url
[2010/05/21 22:28:37 | 000,000,248 | —- | M] () – C:\Short Term Car Insurance One Day Car Insurance 1 Day Insurance.url
[2010/05/20 10:30:13 | 000,000,158 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\AVForums.com Home.url
[2010/05/16 04:05:41 | 000,000,660 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Application Data\ClipExtractor-YouTube-Clip-ExtractorFlvConverterDefaultSettings.xml
[2010/05/16 00:27:14 | 000,000,186 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\My Lifetracks - Lifetracks.com.url
[2010/05/14 19:26:10 | 000,001,863 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Logitech Webcam Software.lnk
[2010/05/13 16:40:01 | 000,000,803 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Logitech Vid.lnk
[2010/05/12 17:52:58 | 000,001,374 | —- | M] () – C:\WINDOWS\imsins.BAK
[2010/05/12 11:21:16 | 000,221,568 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\MpSigStub.exe
[2010/05/08 05:21:32 | 000,577,660 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\RX8_Stereo_Removal.pdf
[2010/04/29 21:45:47 | 000,000,125 | —- | M] () – C:\WINDOWS\cdplayer.ini
[2010/04/27 18:33:44 | 000,015,880 | —- | M] () – C:\WINDOWS\System32\lsdelete.exe
[2010/04/16 08:33:36 | 003,003,680 | —- | M] (Apple, Inc.) – C:\WINDOWS\System32\usbaaplrc.dll
[2010/04/08 13:20:02 | 000,107,808 | —- | M] (Apple Inc.) – C:\WINDOWS\System32\dns-sd.exe
[2010/04/08 13:20:02 | 000,091,424 | —- | M] (Apple Inc.) – C:\WINDOWS\System32\dnssd.dll
[2010/04/05 20:10:12 | 000,020,992 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\ben letter to yde.doc
[2010/04/05 06:12:20 | 000,000,762 | —- | M] () – C:\Documents and Settings\All Users\Desktop\RegistryBooster.lnk
[2010/04/04 07:19:25 | 000,516,198 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\95-7510_manual metra stereo.pdf
[2010/04/03 23:55:31 | 014,757,888 | —- | M] (NVIDIA Corporation) – C:\WINDOWS\System32\nvoglnt.dll
[2010/04/03 23:55:31 | 011,647,592 | —- | M] (NVIDIA Corporation) – C:\WINDOWS\System32\nvcompiler.dll
[2010/04/03 23:55:31 | 010,232,128 | —- | M] (NVIDIA Corporation) – C:\WINDOWS\System32\drivers\nv4_mini.sys
[2010/04/03 23:55:31 | 010,232,128 | —- | M] (NVIDIA Corporation) – C:\WINDOWS\System32\dllcache\nv4_mini.sys
[2010/04/03 23:55:31 | 006,432,128 | —- | M] (NVIDIA Corporation) – C:\WINDOWS\System32\nv4_disp.dll
[2010/04/03 23:55:31 | 004,075,520 | —- | M] (NVIDIA Corporation) – C:\WINDOWS\System32\nvcuda.dll
[2010/04/03 23:55:31 | 002,646,632 | —- | M] (NVIDIA Corporation) – C:\WINDOWS\System32\nvcuvenc.dll
[2010/04/03 23:55:31 | 002,183,470 | —- | M] () – C:\WINDOWS\System32\nvdata.bin
[2010/04/03 23:55:31 | 002,030,184 | —- | M] (NVIDIA Corporation) – C:\WINDOWS\System32\nvcuvid.dll
[2010/04/03 23:55:31 | 001,097,728 | —- | M] (NVIDIA Corporation) – C:\WINDOWS\System32\nvapi.dll
[2010/04/03 23:55:31 | 000,600,680 | —- | M] (NVIDIA Corporation) – C:\WINDOWS\System32\nvudisp.exe
[2010/04/03 23:55:31 | 000,227,944 | —- | M] (NVIDIA Corporation) – C:\WINDOWS\System32\nvcodins.dll
[2010/04/03 23:55:31 | 000,227,944 | —- | M] (NVIDIA Corporation) – C:\WINDOWS\System32\nvcod.dll
[2010/04/03 23:55:31 | 000,061,440 | —- | M] (Khronos Group) – C:\WINDOWS\System32\OpenCL.dll
[2010/04/03 23:55:31 | 000,025,755 | —- | M] () – C:\WINDOWS\System32\nvdisp.nvu
[2010/04/03 23:55:31 | 000,009,046 | —- | M] () – C:\WINDOWS\System32\nvinfo.pb
[2010/04/03 19:23:18 | 000,278,120 | —- | M] (NVIDIA Corporation) – C:\WINDOWS\System32\nvmccs.dll
[2010/04/03 19:23:16 | 013,670,504 | —- | M] (NVIDIA Corporation) – C:\WINDOWS\System32\nvcpl.dll
[2010/04/03 19:23:16 | 000,145,000 | —- | M] (NVIDIA Corporation) – C:\WINDOWS\System32\nvcolor.exe
[2010/04/03 19:23:16 | 000,110,696 | —- | M] (NVIDIA Corporation) – C:\WINDOWS\System32\nvmctray.dll
[2010/04/03 19:22:54 | 000,081,920 | —- | M] (NVIDIA Corporation) – C:\WINDOWS\System32\nvwddi.dll
[2010/04/03 19:22:32 | 000,066,714 | —- | M] () – C:\WINDOWS\System32\NvwsApps.xml
[2010/04/02 16:54:38 | 000,600,680 | —- | M] (NVIDIA Corporation) – C:\WINDOWS\System32\NVUNINST.EXE
[2010/04/01 21:51:38 | 096,180,512 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\RX8_workshop_manual.zip
[2010/04/01 05:32:14 | 003,506,285 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\mot.jpg
[2010/03/29 13:46:37 | 000,521,444 | —- | M] () – C:\WINDOWS\System32\PerfStringBackup.INI
[2010/03/29 13:46:37 | 000,441,638 | —- | M] () – C:\WINDOWS\System32\perfh009.dat
[2010/03/29 13:46:37 | 000,071,780 | —- | M] () – C:\WINDOWS\System32\perfc009.dat
[2010/03/28 21:57:20 | 000,000,737 | —- | M] () – C:\Documents and Settings\All Users\Desktop\PowerSuite.lnk
[2010/03/17 21:53:42 | 000,094,208 | —- | M] (Apple Inc.) – C:\WINDOWS\System32\QuickTimeVR.qtx
[2010/03/17 21:53:42 | 000,069,632 | —- | M] (Apple Inc.) – C:\WINDOWS\System32\QuickTime.qts
[2010/03/15 16:02:05 | 005,136,305 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\manual RX8 2009 ON.pdf
[2010/03/10 07:15:52 | 000,420,352 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\vbscript.dll
[2010/03/10 07:15:52 | 000,420,352 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\vbscript.dll
[2010/03/05 03:04:04 | 000,012,464 | —- | M] (AVG Technologies CZ, s.r.o.) – C:\WINDOWS\System32\avgrsstx.dll
[2010/03/05 03:03:57 | 000,025,096 | —- | M] (AVG Technologies CZ, s.r.o. ) – C:\WINDOWS\System32\drivers\AVGIDSxx.sys
[2010/03/05 03:03:53 | 000,216,200 | —- | M] (AVG Technologies CZ, s.r.o.) – C:\WINDOWS\System32\drivers\avgldx86.sys
[2010/03/05 03:03:51 | 000,052,872 | —- | M] (AVG Technologies CZ, s.r.o.) – C:\WINDOWS\System32\drivers\avgrkx86.sys
[2010/02/26 05:02:30 | 000,060,172 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Spidermite[1].pdf
[2010/02/26 05:01:49 | 000,016,618 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\blank grow sheet[1].pdf
[2010/02/25 11:54:36 | 011,070,976 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ieframe.dll
[2010/02/25 07:24:37 | 001,209,344 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\urlmon.dll
[2010/02/25 07:24:37 | 000,916,480 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wininet.dll
[2010/02/25 07:24:37 | 000,611,840 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\mstime.dll
[2010/02/25 07:24:37 | 000,611,840 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mstime.dll
[2010/02/25 07:24:37 | 000,206,848 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\occache.dll
[2010/02/25 07:24:36 | 005,944,832 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mshtml.dll
[2010/02/25 07:24:35 | 001,985,536 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iertutil.dll
[2010/02/25 07:24:35 | 001,469,440 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\inetcpl.cpl
[2010/02/25 07:24:35 | 001,469,440 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\inetcpl.cpl
[2010/02/25 07:24:35 | 000,594,432 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\msfeeds.dll
[2010/02/25 07:24:35 | 000,594,432 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msfeeds.dll
[2010/02/25 07:24:35 | 000,184,320 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\iepeers.dll
[2010/02/25 07:24:35 | 000,184,320 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iepeers.dll
[2010/02/25 07:24:35 | 000,055,296 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\msfeedsbs.dll
[2010/02/25 07:24:35 | 000,055,296 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msfeedsbs.dll
[2010/02/25 07:24:35 | 000,025,600 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\jsproxy.dll
[2010/02/25 07:24:35 | 000,025,600 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\jsproxy.dll
[2010/02/25 07:24:34 | 000,387,584 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\iedkcs32.dll
[2010/02/25 07:24:34 | 000,387,584 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iedkcs32.dll
[2010/02/24 14:11:07 | 000,455,680 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mrxsmb.sys
[2010/02/24 10:54:25 | 000,173,056 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\ie4uinit.exe
[2010/02/24 10:54:25 | 000,173,056 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ie4uinit.exe
[2010/02/22 13:04:34 | 000,000,258 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\The Complete guide to Sick Plants,pH, and Pest troubles! - International Cannagraphic Magazine Forums (2).url
[2010/02/20 00:47:50 | 003,604,480 | —- | M] (Google Inc.) – C:\WINDOWS\System32\GPhotos.scr
[2010/02/19 05:50:06 | 000,000,671 | -H– | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\.picasa.ini
[2010/02/19 04:30:32 | 007,217,077 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\FE-310_Instruction_Manual_EN.pdf
[2010/02/17 09:10:28 | 002,189,952 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ntoskrnl.exe
[2010/02/16 19:30:44 | 000,095,024 | —- | M] (Sunbelt Software) – C:\WINDOWS\System32\drivers\SBREDrv.sys
[2010/02/16 19:29:05 | 000,000,880 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Ad-Aware.lnk
[2010/02/16 15:08:49 | 002,146,304 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\ntoskrnl.exe
[2010/02/16 15:08:49 | 002,146,304 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ntkrnlmp.exe
[2010/02/16 14:25:04 | 002,066,816 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ntkrnlpa.exe
[2010/02/16 14:25:04 | 002,024,448 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ntkrpamp.exe
[2010/02/16 14:25:04 | 002,024,448 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\ntkrnlpa.exe
[2010/02/12 11:03:03 | 000,293,376 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\browserchoice.exe
[2010/02/12 05:33:11 | 000,100,864 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\6to4svc.dll
[2010/02/11 17:03:15 | 002,005,173 | —- | M] () – C:\WINDOWS\iis6.BAK
[2010/02/11 13:02:15 | 000,226,880 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\tcpip6.sys
[2010/02/11 13:02:15 | 000,226,880 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tcpip6.sys
[2010/02/08 02:45:13 | 000,022,016 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Ben M.doc
[2010/02/05 14:47:05 | 000,020,992 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Ben Money.doc
[2010/02/04 19:57:03 | 000,000,000 | —- | M] () – C:\WINDOWS\PCFriend.INI
[2010/02/04 16:53:02 | 000,064,288 | —- | M] (Lavasoft AB) – C:\WINDOWS\System32\drivers\Lbd.sys
[2010/01/31 19:55:55 | 000,496,605 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Start_up_guide_Business_plan.pdf
[2010/01/31 19:55:25 | 000,482,240 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Start_up_guide_part_2.pdf
[2010/01/31 19:54:03 | 000,589,849 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Start_up_guide_part_1.pdf
[2010/01/29 16:01:30 | 000,691,712 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\inetcomm.dll
[2010/01/29 15:43:39 | 000,307,260 | —- | M] (Fraunhofer Institut Integrierte Schaltungen IIS) – C:\WINDOWS\System32\l3codeca.acm
[2010/01/29 15:43:39 | 000,143,422 | —- | M] (Fraunhofer Institut Integrierte Schaltungen IIS) – C:\WINDOWS\System32\l3codecx.ax
[2010/01/19 21:55:17 | 000,142,495 | —- | M] () – C:\WINDOWS\System32\drivers\Avg\microavi.avg
[2010/01/13 15:01:25 | 000,086,016 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cabview.dll
[2009/12/31 17:50:03 | 000,353,792 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\srv.sys
[2009/12/24 07:59:40 | 000,177,664 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wintrust.dll
[2009/12/16 19:43:27 | 000,343,040 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\mspaint.exe
[2009/12/16 19:43:27 | 000,343,040 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mspaint.exe
[2009/12/14 08:08:23 | 000,033,280 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\csrsrv.dll
[2009/12/14 08:08:23 | 000,033,280 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\csrsrv.dll
[2009/12/09 06:53:44 | 000,726,528 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\jscript.dll
[2009/12/09 06:53:44 | 000,726,528 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\jscript.dll
[2009/12/08 10:23:28 | 000,474,112 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\shlwapi.dll
[2009/12/06 00:10:53 | 000,001,742 | —- | M] () – C:\Adobe Reader 9.lnk
[2009/12/04 21:22:56 | 118,327,296 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Doc1.doc
[2009/12/04 09:44:23 | 004,287,134 | -H– | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Local Settings\Application Data\IconCache.db
[2009/12/01 22:05:41 | 000,000,225 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\TITANIUM.url
[2009/11/27 18:11:44 | 001,291,776 | —- | M] () – C:\WINDOWS\System32\quartz.dll
[2009/11/27 18:11:44 | 001,291,776 | —- | M] () – C:\WINDOWS\System32\dllcache\quartz.dll
[2009/11/27 18:11:44 | 000,017,920 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msyuv.dll
[2009/11/27 17:07:35 | 000,028,672 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msvidc32.dll
[2009/11/27 17:07:35 | 000,008,704 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tsbyuv.dll
[2009/11/27 17:07:34 | 000,084,992 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\avifil32.dll
[2009/11/27 17:07:34 | 000,084,992 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\avifil32.dll
[2009/11/27 17:07:34 | 000,048,128 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iyuv_32.dll
[2009/11/27 17:07:34 | 000,011,264 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msrle32.dll
[2009/11/21 16:51:42 | 001,206,508 | —- | M] () – C:\WINDOWS\System32\dllcache\sysmain.sdb
[2009/11/21 16:51:04 | 000,471,552 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\aclayers.dll
[2009/10/27 18:07:25 | 000,027,290 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\UK_Davidman_Diet_2_160x600.gif
[2009/10/26 05:00:23 | 000,257,866 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\e-ticket Invoice No 656065.zip
[2009/10/24 18:03:22 | 000,024,046 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\TB2Categories000.dat
[2009/10/24 13:06:41 | 000,000,056 | -H– | M] () – C:\WINDOWS\System32\ezsidmv.dat
[2009/10/23 16:28:37 | 003,558,912 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\moviemk.exe
[2009/10/23 01:18:52 | 000,113,461 | —- | M] () – C:\WINDOWS\System32\drivers\Avg\iavichjw.avm
[2009/10/23 01:18:19 | 000,050,968 | —- | M] (AVG Technologies CZ, s.r.o.) – C:\WINDOWS\System32\avgfwdx.dll
[2009/10/23 01:18:19 | 000,030,104 | —- | M] (AVG Technologies CZ, s.r.o.) – C:\WINDOWS\System32\drivers\avgfwdx.sys
[2009/10/22 20:36:48 | 001,267,007 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\NOKIA 6233 USER MANUAL.pdf
[2009/10/21 06:38:36 | 000,075,776 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\strmfilt.dll
[2009/10/21 06:38:36 | 000,075,776 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\strmfilt.dll
[2009/10/21 06:38:36 | 000,025,088 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\httpapi.dll
[2009/10/21 06:38:36 | 000,025,088 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\httpapi.dll
[2009/10/20 17:20:16 | 000,265,728 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\http.sys
[2009/10/19 15:29:31 | 000,073,018 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\X2Z6WA[1].pdf
[2009/10/19 01:49:30 | 000,000,782 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\ltgreen.jpg
[2009/10/18 11:23:42 | 000,007,262 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\imageslove.jpg
[2009/10/18 11:20:00 | 000,007,621 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\2.jpg
[2009/10/18 11:20:00 | 000,003,986 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\girlfrend.jpg
[2009/10/18 11:20:00 | 000,002,958 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\images.jpg
[2009/10/18 11:20:00 | 000,002,805 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\images3.jpg
[2009/10/15 17:28:26 | 000,119,808 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\t2embed.dll
[2009/10/15 17:28:26 | 000,119,808 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\t2embed.dll
[2009/10/15 17:28:26 | 000,081,920 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\fontsub.dll
[2009/10/15 17:28:26 | 000,081,920 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fontsub.dll
[2009/10/13 11:30:16 | 000,270,336 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\oakley.dll
[2009/10/13 11:30:16 | 000,270,336 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\oakley.dll
[2009/10/12 14:38:19 | 000,149,504 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\rastls.dll
[2009/10/12 14:38:19 | 000,149,504 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rastls.dll
[2009/10/12 14:38:18 | 000,079,872 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\raschap.dll
[2009/10/12 14:38:18 | 000,079,872 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\raschap.dll
[2009/10/07 09:49:38 | 006,756,632 | —- | M] (Logitech Inc.) – C:\WINDOWS\System32\drivers\lvuvc.sys
[2009/10/07 09:48:52 | 000,539,160 | —- | M] (Logitech Inc.) – C:\WINDOWS\System32\LVUI2RC.dll
[2009/10/07 09:48:30 | 000,539,160 | —- | M] (Logitech Inc.) – C:\WINDOWS\System32\LVUI2.dll
[2009/10/07 09:47:54 | 000,266,008 | —- | M] (Logitech Inc.) – C:\WINDOWS\System32\drivers\lvrs.sys
[2009/10/07 09:46:12 | 000,114,712 | —- | M] (Logitech Inc.) – C:\WINDOWS\System32\drivers\lvpopflt.sys
[2009/10/07 09:43:42 | 000,199,192 | —- | M] (Logitech Inc.) – C:\WINDOWS\System32\lvci12101110.dll
[2009/10/07 09:43:30 | 000,416,280 | —- | M] (Logitech Inc.) – C:\WINDOWS\System32\lvcodec2.dll
[2009/10/07 09:25:08 | 000,266,828 | —- | M] () – C:\WINDOWS\System32\drivers\LVAFT.cfg
[2009/10/07 09:24:20 | 000,082,289 | —- | M] () – C:\WINDOWS\System32\lvcoinst.ini
[2009/10/07 09:24:04 | 000,034,068 | —- | M] () – C:\WINDOWS\System32\Repository.reg
[2009/10/07 01:46:36 | 000,025,752 | —- | M] () – C:\WINDOWS\System32\drivers\LVPr2Mon.sys
[2009/10/07 01:25:10 | 000,227,172 | —- | M] () – C:\WINDOWS\System32\drivers\LVFeL100.cfg
[2009/10/07 01:25:10 | 000,146,680 | —- | M] () – C:\WINDOWS\System32\drivers\LVFeL101.cfg
[2009/10/07 01:25:10 | 000,085,302 | —- | M] () – C:\WINDOWS\System32\drivers\LVFeL102.cfg
[2009/10/07 01:25:10 | 000,069,592 | —- | M] () – C:\WINDOWS\System32\drivers\LVFaL100.cfg
[2009/10/07 01:23:08 | 000,013,584 | —- | M] () – C:\WINDOWS\System32\drivers\iKeyLFT2.dll
[2009/10/01 00:55:25 | 000,492,629 | —- | M] () – C:\WINDOWS\System32\drivers\Avg\miniavi.avg
[2009/09/24 07:27:28 | 000,000,007 | —- | M] () – C:\WINDOWS\System32\Class15
[2009/09/24 07:27:28 | 000,000,005 | —- | M] () – C:\WINDOWS\System32\Band4
[2009/09/20 22:18:25 | 000,000,803 | —- | M] () – C:\Logitech Vid.lnk
[2009/09/20 22:13:41 | 000,001,863 | —- | M] () – C:\Logitech Webcam Software.lnk
[2009/09/14 05:14:11 | 000,082,652 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7220149 porn.JPG
[2009/09/14 05:14:11 | 000,080,996 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\1.JPG
[2009/09/11 21:14:36 | 000,084,425 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270164 temple of peace started 1984.JPG
[2009/09/11 21:13:44 | 000,085,054 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270163 massive carved temple of peace, 1986 200 builders.JPG
[2009/09/11 21:12:45 | 000,083,022 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\porn kiss dolphin.JPG
[2009/09/11 21:09:00 | 000,081,828 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7220146 crock swimming.JPG
[2009/09/11 21:08:13 | 000,085,709 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\tiger.JPG
[2009/09/11 21:07:20 | 000,083,427 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7220140 crock5.JPG
[2009/09/11 21:06:52 | 000,082,800 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7220139 crock4.JPG
[2009/09/11 21:05:13 | 000,081,453 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7220138 crock 3.JPG
[2009/09/11 21:04:32 | 000,082,207 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7220135 crock 2.JPG
[2009/09/11 21:02:09 | 000,081,716 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7190116 2 house in surin.JPG
[2009/09/11 21:01:30 | 000,084,788 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7190118 house in surin.JPG
[2009/09/11 20:03:40 | 000,084,260 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270155.JPG
[2009/09/11 19:53:08 | 000,082,632 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7250151 me on steps big budda.JPG
[2009/09/11 19:52:06 | 000,083,146 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7250150 big budda.JPG
[2009/09/11 19:50:09 | 000,085,060 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7220148 me.JPG
[2009/09/11 19:49:18 | 000,082,800 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7220139 crok.JPG
[2009/09/11 19:38:01 | 000,080,518 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7180092 014.JPG
[2009/09/11 19:35:34 | 000,079,649 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7300189 013.JPG
[2009/09/11 19:34:11 | 000,081,841 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7300188 012.JPG
[2009/09/11 19:33:32 | 000,083,048 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270185 011.JPG
[2009/09/11 19:32:28 | 000,083,922 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270183 010.JPG
[2009/09/11 19:31:03 | 000,084,744 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270181 09.JPG
[2009/09/11 19:29:47 | 000,085,020 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270178 08.JPG
[2009/09/11 16:43:02 | 000,085,473 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270176 07.JPG
[2009/09/11 16:38:07 | 000,082,526 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270173 06.JPG
[2009/09/11 16:37:29 | 000,086,589 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270171 05.JPG
[2009/09/11 16:36:56 | 000,083,057 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270170 04.JPG
[2009/09/11 16:36:17 | 000,082,965 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270169 03.JPG
[2009/09/11 16:35:22 | 000,082,384 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270168 02.JPG
[2009/09/11 16:34:47 | 000,084,675 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270167 01.JPG
[2009/09/11 15:18:39 | 000,136,192 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msv1_0.dll
[2009/09/09 20:36:51 | 000,000,969 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\My Sharing Folders.lnk
[2009/09/08 20:25:15 | 000,000,244 | -H– | M] () – C:\sqmnoopt07.sqm
[2009/09/08 20:25:15 | 000,000,232 | -H– | M] () – C:\sqmdata07.sqm
[2009/09/08 20:20:57 | 000,000,244 | -H– | M] () – C:\sqmnoopt06.sqm
[2009/09/08 20:20:57 | 000,000,232 | -H– | M] () – C:\sqmdata06.sqm
[2009/09/08 16:33:01 | 000,000,244 | -H– | M] () – C:\sqmnoopt05.sqm
[2009/09/08 16:33:01 | 000,000,232 | -H– | M] () – C:\sqmdata05.sqm
[2009/09/08 15:10:54 | 000,082,756 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P6200005.JPG
[2009/09/08 15:10:11 | 000,082,759 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\3.JPG
[2009/09/08 14:58:43 | 000,000,244 | -H– | M] () – C:\sqmnoopt04.sqm
[2009/09/08 14:58:43 | 000,000,232 | -H– | M] () – C:\sqmdata04.sqm
[2009/09/08 14:56:22 | 000,084,458 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Amporn, noi.jpg
[2009/09/08 08:07:38 | 000,000,244 | -H– | M] () – C:\sqmnoopt03.sqm
[2009/09/08 08:07:38 | 000,000,232 | -H– | M] () – C:\sqmdata03.sqm
[2009/09/08 06:53:15 | 000,000,244 | -H– | M] () – C:\sqmnoopt02.sqm
[2009/09/08 06:53:15 | 000,000,232 | -H– | M] () – C:\sqmdata02.sqm
[2009/09/07 19:57:30 | 000,000,244 | -H– | M] () – C:\sqmnoopt01.sqm
[2009/09/07 19:57:30 | 000,000,232 | -H– | M] () – C:\sqmdata01.sqm
[2009/09/07 12:25:28 | 000,000,244 | -H– | M] () – C:\sqmnoopt00.sqm
[2009/09/07 12:25:28 | 000,000,232 | -H– | M] () – C:\sqmdata00.sqm
[2009/09/07 03:29:30 | 000,000,244 | -H– | M] () – C:\sqmnoopt19.sqm
[2009/09/07 03:29:30 | 000,000,232 | -H– | M] () – C:\sqmdata19.sqm
[2009/09/06 18:01:40 | 000,000,244 | -H– | M] () – C:\sqmnoopt18.sqm
[2009/09/06 18:01:40 | 000,000,232 | -H– | M] () – C:\sqmdata18.sqm
[2009/09/06 05:42:21 | 000,000,268 | -H– | M] () – C:\sqmdata17.sqm
[2009/09/06 05:42:21 | 000,000,244 | -H– | M] () – C:\sqmnoopt17.sqm
[2009/09/05 19:00:24 | 000,000,045 | —- | M] () – C:\WINDOWS\System32\RPVersion.ini
[2009/09/05 14:32:52 | 000,000,244 | -H– | M] () – C:\sqmnoopt16.sqm
[2009/09/05 14:32:52 | 000,000,232 | -H– | M] () – C:\sqmdata16.sqm
[2009/09/05 05:42:42 | 000,000,244 | -H– | M] () – C:\sqmnoopt15.sqm
[2009/09/05 05:42:42 | 000,000,232 | -H– | M] () – C:\sqmdata15.sqm
[2009/09/05 04:11:07 | 000,000,244 | -H– | M] () – C:\sqmnoopt14.sqm
[2009/09/05 04:11:07 | 000,000,232 | -H– | M] () – C:\sqmdata14.sqm
[2009/09/04 22:03:36 | 000,058,880 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msasn1.dll
[2009/09/04 15:47:12 | 000,000,232 | -H– | M] () – C:\sqmdata13.sqm
[2009/09/04 15:47:11 | 000,000,244 | -H– | M] () – C:\sqmnoopt13.sqm
[2009/09/01 00:30:25 | 000,000,049 | —- | M] () – C:\WINDOWS\NeroDigital.ini
[2009/09/01 00:24:34 | 000,023,392 | —- | M] () – C:\WINDOWS\System32\nscompat.tlb
[2009/09/01 00:24:34 | 000,016,832 | —- | M] () – C:\WINDOWS\System32\amcompat.tlb
[2009/08/26 09:00:21 | 000,247,326 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\strmdll.dll
[2009/08/26 09:00:21 | 000,247,326 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\strmdll.dll
[2009/08/25 10:17:27 | 000,354,816 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winhttp.dll
[2009/08/23 22:00:38 | 000,922,112 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\imapi2fs.dll
[2009/08/23 22:00:38 | 000,922,112 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imapi2fs.dll
[2009/08/23 22:00:38 | 000,426,496 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\imapi2.dll
[2009/08/23 22:00:38 | 000,426,496 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imapi2.dll
[2009/08/23 22:00:38 | 000,062,592 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cdrom.sys
[2009/08/15 20:43:06 | 000,000,244 | -H– | M] () – C:\sqmnoopt12.sqm
[2009/08/15 20:43:06 | 000,000,232 | -H– | M] () – C:\sqmdata12.sqm
[2009/08/14 14:21:25 | 001,850,624 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\win32k.sys
[2009/08/14 14:21:25 | 001,850,624 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\win32k.sys
[2009/08/09 11:42:16 | 000,000,244 | -H– | M] () – C:\sqmnoopt11.sqm
[2009/08/09 11:42:16 | 000,000,232 | -H– | M] () – C:\sqmdata11.sqm
[2009/08/09 10:48:42 | 000,000,244 | -H– | M] () – C:\sqmnoopt10.sqm
[2009/08/09 10:48:42 | 000,000,232 | -H– | M] () – C:\sqmdata10.sqm
[2009/08/09 09:45:21 | 000,000,244 | -H– | M] () – C:\sqmnoopt09.sqm
[2009/08/09 09:45:21 | 000,000,232 | -H– | M] () – C:\sqmdata09.sqm
[2009/08/09 07:40:27 | 000,000,232 | -H– | M] () – C:\sqmdata08.sqm
[2009/08/09 07:40:26 | 000,000,244 | -H– | M] () – C:\sqmnoopt08.sqm
[2009/08/06 19:24:18 | 000,327,896 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\wucltui.dll
[2009/08/06 19:24:18 | 000,327,896 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wucltui.dll
[2009/08/06 19:24:18 | 000,209,632 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuweb.dll
[2009/08/06 19:24:18 | 000,021,728 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\wucltui.dll.mui
[2009/08/06 19:24:12 | 000,015,072 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\wuaucpl.cpl.mui
[2009/08/06 19:24:10 | 000,217,816 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuaucpl.cpl
[2009/08/06 19:24:10 | 000,044,768 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\wups2.dll
[2009/08/06 19:24:10 | 000,035,552 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\wups.dll
[2009/08/06 19:24:10 | 000,035,552 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wups.dll
[2009/08/06 19:24:06 | 000,053,472 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuauclt.exe
[2009/08/06 19:24:06 | 000,015,064 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\wuapi.dll.mui
[2009/08/06 19:24:04 | 000,096,480 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cdm.dll
[2009/08/06 19:24:04 | 000,096,480 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\cdm.dll
[2009/08/06 19:24:00 | 000,017,632 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\wuaueng.dll.mui
[2009/08/06 19:23:54 | 000,575,704 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\wuapi.dll
[2009/08/06 19:23:54 | 000,575,704 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuapi.dll
[2009/08/06 19:23:46 | 001,929,952 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuaueng.dll
[2009/08/06 19:23:46 | 000,274,288 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\mucltui.dll
[2009/08/06 19:23:46 | 000,016,736 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\mucltui.dll.mui
[2009/08/05 22:48:42 | 000,054,752 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\fssfltr_tdi.sys
[2009/08/05 13:18:47 | 000,280,320 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Amporn.jpg
[2009/08/05 10:01:48 | 000,204,800 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\mswebdvd.dll
[2009/08/05 10:01:48 | 000,204,800 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mswebdvd.dll
[2009/08/03 15:07:42 | 000,403,816 | —- | M] () – C:\WINDOWS\System32\OGACheckControl.dll
[2009/08/03 15:07:42 | 000,322,928 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\OGAAddin.dll
[2009/08/03 15:07:42 | 000,230,768 | —- | M] () – C:\WINDOWS\System32\OGAEXEC.exe
[2009/08/02 05:29:42 | 000,029,904 | —- | M] () – C:\WINDOWS\System32\aawservice_2009_08_02_05_29_42.dmp
[2009/07/31 11:05:44 | 001,372,672 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msxml6.dll
[2009/07/31 05:35:42 | 001,172,480 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msxml3.dll
[2009/07/30 20:07:08 | 000,828,852 | —- | M] () – C:\Documents and Settings\All Users\Application Data\LUUnInstall.LiveUpdate
[2009/07/30 18:53:04 | 006,061,540 | —- | M] () – C:\WINDOWS\System32\drivers\Avg\avi7.avg
[2009/07/26 16:44:56 | 000,048,448 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\sirenacm.dll
[2009/07/17 20:01:06 | 000,058,880 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\atl.dll
[2009/07/17 17:22:18 | 001,435,648 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\query.dll
[2009/07/17 17:22:18 | 001,435,648 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\query.dll
[2009/07/16 19:10:39 | 000,005,037 | —- | M] () – C:\I hope you are well in England_.eml
[2009/07/16 18:41:22 | 000,033,647 | —- | M] () – C:\RE_ Think of my family.eml
[2009/07/16 18:40:53 | 000,024,714 | —- | M] () – C:\RE_ Miss u.eml
[2009/07/16 18:40:35 | 000,015,004 | —- | M] () – C:\RE_ Take care yourself.eml
[2009/07/16 18:40:08 | 000,008,427 | —- | M] () – C:\RE_ Dream to u.eml
[2009/07/13 23:43:24 | 010,841,088 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmp.dll
[2009/07/13 23:43:24 | 000,286,208 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmpdxm.dll
[2009/07/10 12:15:46 | 000,306,544 | —- | M] (Microsoft Corporation) – C:\WINDOWS\WLXPGSS.SCR
[2009/07/07 14:33:02 | 000,003,541 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\confirmation Marc[1].htm
[2009/07/05 19:58:53 | 000,316,640 | —- | M] () – C:\WINDOWS\WMSysPr9.prx
[2009/07/05 18:53:22 | 000,000,044 | —- | M] () – C:\WINDOWS\System32\msssc.dll
[2009/07/05 06:14:55 | 000,000,664 | —- | M] () – C:\WINDOWS\System32\d3d9caps.dat
[2009/07/04 23:36:04 | 000,000,376 | —- | M] () – C:\WINDOWS\ODBC.INI
[2009/07/04 03:44:01 | 000,013,824 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009/07/03 15:04:31 | 000,000,552 | —- | M] () – C:\WINDOWS\System32\d3d8caps.dat
[2009/07/02 16:38:22 | 000,000,104 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\Internet.lnk
[2009/06/30 16:23:15 | 000,000,145 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Local Settings\Application Data\fusioncache.dat
[2009/06/30 16:22:59 | 000,001,526 | —- | M] () – C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Utility Tray.lnk
[2009/06/30 16:22:54 | 000,001,738 | —- | M] () – C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Microsoft Office.lnk
[2009/06/30 16:22:47 | 000,000,811 | —- | M] () – C:\Documents and Settings\All Users\Start Menu\Programs\Startup\HP Image Zone Fast Start.lnk
[2009/06/30 16:22:34 | 000,001,821 | —- | M] () – C:\Documents and Settings\All Users\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
[2009/06/30 16:21:20 | 000,001,374 | —- | M] () – C:\WINDOWS\System32\wpa.bak
[2009/06/30 16:06:12 | 000,000,288 | —- | M] () – C:\WINDOWS\System32\$winnt$.inf
[2009/06/30 16:01:54 | 000,004,161 | —- | M] () – C:\WINDOWS\ODBCINST.INI
[2009/06/30 16:00:47 | 000,000,488 | RH– | M] () – C:\WINDOWS\System32\WindowsLogon.manifest
[2009/06/30 16:00:47 | 000,000,488 | RH– | M] () – C:\WINDOWS\System32\logonui.exe.manifest
[2009/06/30 16:00:39 | 000,000,749 | RH– | M] () – C:\WINDOWS\System32\wuaucpl.cpl.manifest
[2009/06/30 16:00:39 | 000,000,749 | RH– | M] () – C:\WINDOWS\WindowsShell.Manifest
[2009/06/30 16:00:39 | 000,000,749 | RH– | M] () – C:\WINDOWS\System32\sapi.cpl.manifest
[2009/06/30 16:00:39 | 000,000,749 | RH– | M] () – C:\WINDOWS\System32\nwc.cpl.manifest
[2009/06/30 16:00:39 | 000,000,749 | RH– | M] () – C:\WINDOWS\System32\ncpa.cpl.manifest
[2009/06/30 16:00:39 | 000,000,749 | RH– | M] () – C:\WINDOWS\System32\cdplayer.exe.manifest
[2009/06/30 15:58:56 | 000,023,348 | —- | M] () – C:\WINDOWS\System32\emptyregdb.dat
[2009/06/29 09:40:16 | 000,057,667 | —- | M] () – C:\WINDOWS\System32\ieuinit.inf
[2009/06/25 09:25:26 | 000,730,112 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\lsasrv.dll
[2009/06/25 09:25:26 | 000,730,112 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\lsasrv.dll
[2009/06/25 09:25:26 | 000,301,568 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kerberos.dll
[2009/06/25 09:25:26 | 000,147,456 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\schannel.dll
[2009/06/25 09:25:26 | 000,056,832 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\secur32.dll
[2009/06/25 09:25:26 | 000,054,272 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wdigest.dll
[2009/06/24 12:18:41 | 000,092,928 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ksecdd.sys
[2009/06/12 13:31:40 | 000,080,896 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\tlntsess.exe
[2009/06/12 13:31:40 | 000,080,896 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tlntsess.exe
[2009/06/12 13:31:39 | 000,076,288 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\telnet.exe
[2009/06/12 13:31:39 | 000,076,288 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\telnet.exe
[2009/06/10 09:19:38 | 002,066,432 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mstscax.dll
[2009/06/10 07:14:49 | 000,132,096 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wkssvc.dll
========== Files Created - No Company Name ==========
[2010/06/03 04:12:58 | 000,016,547 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\OTL.zip
[2010/06/03 04:12:46 | 000,010,489 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\Extras.zip
[2010/06/02 20:07:48 | 000,966,213 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\tdsskiller.zip
[2010/06/02 03:52:37 | 000,293,376 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\39ki73vk GMER.exe
[2010/06/01 08:59:20 | 000,001,821 | —- | C] () – C:\Documents and Settings\All Users\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
[2010/06/01 08:59:20 | 000,001,783 | —- | C] () – C:\Documents and Settings\All Users\Start Menu\Programs\Startup\InterVideo WinCinema Manager.lnk
[2010/06/01 08:59:20 | 000,001,738 | —- | C] () – C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Microsoft Office.lnk
[2010/06/01 08:59:20 | 000,001,526 | —- | C] () – C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Utility Tray.lnk
[2010/06/01 08:59:20 | 000,000,811 | —- | C] () – C:\Documents and Settings\All Users\Start Menu\Programs\Startup\HP Image Zone Fast Start.lnk
[2010/05/31 19:05:33 | 000,000,335 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\Free Criminal Record Check - Page 2 - Cable Forum.url
[2010/05/30 18:15:19 | 000,021,505 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\a-boozer.html
[2010/05/29 11:48:27 | 000,000,317 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\lost google - now searchqu.com.url
[2010/05/29 07:45:28 | 000,000,000 | —- | C] () – C:\WINDOWS\iPlayer.INI
[2010/05/29 04:32:24 | 000,000,792 | —- | C] () – C:\Documents and Settings\All Users\Desktop\InterActual Player.lnk
[2010/05/28 03:44:57 | 000,000,317 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\Thai for Lovers.url
[2010/05/28 03:25:08 | 000,000,210 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\Manee and Friends.url
[2010/05/25 04:16:10 | 000,000,665 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\UK Credit Cards Capital One.url
[2010/05/25 03:46:55 | 000,000,316 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\allfreegames.eu-free-online-games-play-Crash+Bandicoot-45e8beb2f472b5b11031a1f9171bab8b.html.url
[2010/05/25 02:27:07 | 000,029,696 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Basildon Magistrates Court.doc
[2010/05/24 19:02:46 | 000,000,220 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\TV Guide UK TV Listings - UK's No 1 TV Listing site for Freeview, Sky, Virgin Media, Freesat & Tiscali TV.url
[2010/05/24 19:00:48 | 000,000,259 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\Nationwide Building Society Mortgages, Savings, Current Accounts, Banking, Insurance, Credit Cards, Loans, Investments.url
[2010/05/22 21:44:32 | 000,084,197 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\win 7 report compatability.mht
[2010/05/22 20:29:42 | 000,001,928 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Google Earth.lnk
[2010/05/20 10:30:13 | 000,000,158 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\AVForums.com Home.url
[2010/05/16 19:22:15 | 000,000,211 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\eBay - The UK's Online Marketplace.url
[2010/05/16 00:27:14 | 000,000,186 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\My Lifetracks - Lifetracks.com.url
[2010/05/14 23:08:09 | 000,000,243 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\oilcareers.com-worldwide-.url
[2010/05/14 19:26:10 | 000,001,863 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Logitech Webcam Software.lnk
[2010/05/13 16:40:01 | 000,000,803 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Logitech Vid.lnk
[2010/05/12 19:17:57 | 000,009,046 | —- | C] () – C:\WINDOWS\System32\nvinfo.pb
[2010/05/12 19:17:55 | 002,183,470 | —- | C] () – C:\WINDOWS\System32\nvdata.bin
[2010/05/08 05:21:25 | 000,577,660 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\RX8_Stereo_Removal.pdf
[2010/05/04 18:24:26 | 000,002,137 | —- | C] () – C:\Documents and Settings\All Users\Desktop\iTunes.lnk
[2010/04/05 20:10:11 | 000,020,992 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\ben letter to yde.doc
[2010/04/05 06:12:20 | 000,000,762 | —- | C] () – C:\Documents and Settings\All Users\Desktop\RegistryBooster.lnk
[2010/04/04 07:19:25 | 000,516,198 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\95-7510_manual metra stereo.pdf
[2010/04/01 21:51:29 | 096,180,512 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\RX8_workshop_manual.zip
[2010/04/01 05:32:08 | 003,506,285 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\mot.jpg
[2010/03/28 21:57:20 | 000,000,737 | —- | C] () – C:\Documents and Settings\All Users\Desktop\PowerSuite.lnk
[2010/03/16 05:03:45 | 000,000,238 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\Mazda RX-8 Owners Club UK.url
[2010/03/15 16:02:05 | 005,136,305 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\manual RX8 2009 ON.pdf
[2010/02/26 05:02:30 | 000,060,172 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Spidermite[1].pdf
[2010/02/26 05:01:49 | 000,016,618 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\blank grow sheet[1].pdf
[2010/02/23 20:27:12 | 000,000,258 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\The Complete guide to Sick Plants,pH, and Pest troubles! - International Cannagraphic Magazine Forums (2).url
[2010/02/19 04:30:32 | 007,217,077 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\FE-310_Instruction_Manual_EN.pdf
[2010/02/16 19:29:05 | 000,000,880 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Ad-Aware.lnk
[2010/02/08 02:00:26 | 000,022,016 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Ben M.doc
[2010/02/05 14:47:04 | 000,020,992 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Ben Money.doc
[2010/02/04 19:57:03 | 000,000,000 | —- | C] () – C:\WINDOWS\PCFriend.INI
[2010/01/31 19:55:55 | 000,496,605 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Start_up_guide_Business_plan.pdf
[2010/01/31 19:55:25 | 000,482,240 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Start_up_guide_part_2.pdf
[2010/01/31 19:54:03 | 000,589,849 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Start_up_guide_part_1.pdf
[2009/12/14 03:33:56 | 000,000,580 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\My Account - PayPal.url
[2009/12/04 21:22:44 | 118,327,296 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Doc1.doc
[2009/12/01 22:05:41 | 000,000,225 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\TITANIUM.url
[2009/11/30 04:38:54 | 000,024,046 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\TB2Categories000.dat
[2009/11/30 01:10:36 | 000,000,394 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\CATCH-UP.url
[2009/10/27 18:12:01 | 000,027,290 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\UK_Davidman_Diet_2_160x600.gif
[2009/10/26 05:00:21 | 000,257,866 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\e-ticket Invoice No 656065.zip
[2009/10/24 18:38:41 | 000,056,320 | —- | C] () – C:\WINDOWS\System32\iyvu9_32.dll
[2009/10/24 13:11:16 | 000,000,884 | —- | C] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2009/10/24 13:11:16 | 000,000,880 | —- | C] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2009/10/23 03:58:58 | 000,003,541 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\confirmation Marc[1].htm
[2009/10/22 20:36:48 | 001,267,007 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\NOKIA 6233 USER MANUAL.pdf
[2009/10/19 15:29:31 | 000,073,018 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\X2Z6WA[1].pdf
[2009/10/19 03:36:55 | 000,002,958 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\images.jpg
[2009/10/19 03:33:13 | 000,007,621 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\2.jpg
[2009/10/19 03:32:49 | 000,002,805 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\images3.jpg
[2009/10/19 03:32:42 | 000,003,986 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\girlfrend.jpg
[2009/10/19 03:32:34 | 000,007,262 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\imageslove.jpg
[2009/10/19 03:07:26 | 000,000,782 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\ltgreen.jpg
[2009/10/07 01:46:36 | 000,025,752 | —- | C] () – C:\WINDOWS\System32\drivers\LVPr2Mon.sys
[2009/10/07 01:23:08 | 000,013,584 | —- | C] () – C:\WINDOWS\System32\drivers\iKeyLFT2.dll
[2009/09/22 22:17:26 | 000,000,281 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\THAI BART RATE CONVERTER.url
[2009/09/21 19:07:55 | 000,000,424 | -H– | C] () – C:\WINDOWS\tasks\User_Feed_Synchronization-{169FDE4B-E2F9-4890-879E-D1A096EA74F2}.job
[2009/09/20 22:16:35 | 000,082,289 | —- | C] () – C:\WINDOWS\System32\lvcoinst.ini
[2009/09/20 22:16:35 | 000,034,068 | —- | C] () – C:\WINDOWS\System32\Repository.reg
[2009/09/14 05:14:11 | 000,082,652 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7220149 porn.JPG
[2009/09/14 05:14:11 | 000,080,996 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\1.JPG
[2009/09/11 21:14:35 | 000,084,425 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270164 temple of peace started 1984.JPG
[2009/09/11 21:13:44 | 000,085,054 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270163 massive carved temple of peace, 1986 200 builders.JPG
[2009/09/11 21:12:44 | 000,083,022 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\porn kiss dolphin.JPG
[2009/09/11 21:08:59 | 000,081,828 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7220146 crock swimming.JPG
[2009/09/11 21:08:13 | 000,085,709 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\tiger.JPG
[2009/09/11 21:07:20 | 000,083,427 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7220140 crock5.JPG
[2009/09/11 21:06:51 | 000,082,800 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7220139 crock4.JPG
[2009/09/11 21:05:12 | 000,081,453 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7220138 crock 3.JPG
[2009/09/11 21:04:31 | 000,082,207 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7220135 crock 2.JPG
[2009/09/11 21:02:09 | 000,081,716 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7190116 2 house in surin.JPG
[2009/09/11 21:01:29 | 000,084,788 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7190118 house in surin.JPG
[2009/09/11 20:03:40 | 000,084,260 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270155.JPG
[2009/09/11 19:53:07 | 000,082,632 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7250151 me on steps big budda.JPG
[2009/09/11 19:52:05 | 000,083,146 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7250150 big budda.JPG
[2009/09/11 19:50:08 | 000,085,060 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7220148 me.JPG
[2009/09/11 19:49:18 | 000,082,800 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7220139 crok.JPG
[2009/09/11 19:38:00 | 000,080,518 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7180092 014.JPG
[2009/09/11 19:35:34 | 000,079,649 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7300189 013.JPG
[2009/09/11 19:34:10 | 000,081,841 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7300188 012.JPG
[2009/09/11 19:33:31 | 000,083,048 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270185 011.JPG
[2009/09/11 19:32:27 | 000,083,922 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270183 010.JPG
[2009/09/11 19:31:02 | 000,084,744 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270181 09.JPG
[2009/09/11 19:29:46 | 000,085,020 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270178 08.JPG
[2009/09/11 16:43:01 | 000,085,473 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270176 07.JPG
[2009/09/11 16:38:06 | 000,082,526 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270173 06.JPG
[2009/09/11 16:37:29 | 000,086,589 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270171 05.JPG
[2009/09/11 16:36:56 | 000,083,057 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270170 04.JPG
[2009/09/11 16:36:16 | 000,082,965 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270169 03.JPG
[2009/09/11 16:35:21 | 000,082,384 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270168 02.JPG
[2009/09/11 16:34:47 | 000,084,675 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270167 01.JPG
[2009/09/08 16:19:31 | 000,000,671 | -H– | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\.picasa.ini
[2009/09/08 15:10:52 | 000,082,756 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P6200005.JPG
[2009/09/08 15:10:06 | 000,082,759 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\3.JPG
[2009/08/05 13:19:54 | 000,084,458 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Amporn, noi.jpg
[2009/08/05 13:18:39 | 000,280,320 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Amporn.jpg
[2009/08/03 15:07:42 | 000,403,816 | —- | C] () – C:\WINDOWS\System32\OGACheckControl.dll
[2009/08/03 07:24:46 | 000,000,244 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\youtube.com-gl=GB&hl=en-GB.url
[2009/07/30 20:32:28 | 000,000,472 | —- | C] () – C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job
[2009/07/19 07:22:30 | 000,000,045 | —- | C] () – C:\WINDOWS\System32\RPVersion.ini
[2009/07/08 20:27:20 | 000,000,635 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\Sign In.url
[2009/07/06 03:23:06 | 000,000,224 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\BBC iPlayer - Home.url
[2009/07/05 21:05:30 | 000,000,249 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\home page Take a Break Bingo.url
[2009/07/02 16:38:22 | 000,000,104 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\Internet.lnk
[2009/06/30 18:57:51 | 000,000,969 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\My Sharing Folders.lnk
[2009/06/30 16:00:39 | 000,000,749 | RH– | C] () – C:\WINDOWS\System32\wuaucpl.cpl.manifest
[2009/06/30 16:00:39 | 000,000,749 | RH– | C] () – C:\WINDOWS\WindowsShell.Manifest
[2009/06/30 16:00:39 | 000,000,749 | RH– | C] () – C:\WINDOWS\System32\sapi.cpl.manifest
[2009/06/30 15:34:58 | 2952,347,648 | —- | C] () – C:\WINDOWS\MEMORY.DMP
[2007/11/15 04:12:23 | 000,000,125 | —- | C] () – C:\WINDOWS\cdplayer.ini
[2007/11/13 02:38:13 | 002,729,472 | —- | C] () – C:\WINDOWS\System32\fun_avcodec.dll
[2006/12/08 03:14:52 | 000,000,000 | —- | C] () – C:\WINDOWS\hpqEmlSz.INI
[2006/12/04 07:51:01 | 000,060,672 | —- | C] () – C:\WINDOWS\PSCMN25.DLL
[2006/12/04 07:51:01 | 000,035,264 | —- | C] () – C:\WINDOWS\PSIMGJ1.DLL
[2006/11/25 11:34:25 | 000,000,214 | —- | C] () – C:\WINDOWS\HP_48BitScanUpdatePatch.ini
[2006/11/02 07:31:40 | 000,000,068 | —- | C] () – C:\WINDOWS\IDMan.INI
[2006/08/27 03:01:37 | 000,000,206 | —- | C] () – C:\WINDOWS\HPGdiPlus.ini
[2006/08/18 06:57:06 | 000,000,464 | —- | C] () – C:\WINDOWS\iScreensaver.ini
[2006/07/29 10:43:33 | 000,000,049 | —- | C] () – C:\WINDOWS\NeroDigital.ini
[2006/07/26 18:07:34 | 000,106,346 | —- | C] () – C:\WINDOWS\VGAsetup.ini
[2006/07/26 18:07:14 | 000,171,122 | —- | C] () – C:\WINDOWS\System32\VGAunistlog.ini
[2006/07/26 16:42:12 | 000,032,768 | —- | C] () – C:\WINDOWS\SIS_LIB.DLL
[2006/07/26 16:33:12 | 000,000,376 | —- | C] () – C:\WINDOWS\ODBC.INI
[2006/07/26 16:33:12 | 000,000,063 | —- | C] () – C:\WINDOWS\mdm.ini
[2006/07/26 16:32:08 | 000,000,000 | —- | C] () – C:\WINDOWS\NSREX.INI
[2006/07/26 16:24:50 | 000,000,044 | —- | C] () – C:\WINDOWS\System32\msssc.dll
[2001/11/19 20:05:18 | 000,003,972 | —- | C] () – C:\WINDOWS\System32\drivers\PciBus.sys
[2001/03/30 22:58:36 | 000,135,168 | —- | C] () – C:\WINDOWS\System32\property.dll
[1999/01/23 03:46:58 | 000,065,536 | —- | C] () – C:\WINDOWS\System32\MSRTEDIT.DLL
[1998/10/11 01:07:38 | 000,088,576 | —- | C] () – C:\WINDOWS\System32\Iticheck.dll
[1998/07/15 22:44:30 | 000,134,656 | —- | C] () – C:\WINDOWS\System32\itijpg2.dll
========== Alternate Data Streams ==========
@Alternate Data Stream - 118 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:5C321E34
< End of report >
OTL logfile created on: 6/3/2010 04:14:16 - Run 2
OTL by OldTimer - Version 3.2.5.1 Folder = C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000809 | Country: United Kingdom | Language: ENG | Date Format: M/d/yyyy
3.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 57.00% Memory free
9.00 Gb Paging File | 8.00 Gb Available in Paging File | 90.00% Paging File free
Paging file location(s): [Binary data over 100 bytes]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 189.91 Gb Total Space | 153.25 Gb Free Space | 80.70% Space Free | Partition Type: NTFS
Drive D: | 298.09 Gb Total Space | 280.92 Gb Free Space | 94.24% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Computer Name: NONE-5738F18114
Current User Name: Mark M
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal
========== Processes (SafeList) ==========
PRC - C:\Program Files\AVG\AVG9\avgtray.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG9\avgnsx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG9\avgrsx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG9\avgfws9.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG9\avgcsrvx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG9\avgchsvx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe (Lavasoft)
PRC - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe (Lavasoft)
PRC - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.)
PRC - C:\Program Files\Uniblue\PowerSuite\powersuite.exe (Uniblue Systems Limited)
PRC - C:\Program Files\Common Files\Autodata Limited Shared\Service\ADCDLicSvc.exe ()
PRC - C:\Program Files\Uniblue\SpeedUpMyPC\sump.exe (Uniblue Systems Limited)
PRC - C:\Program Files\AVG\AVG9\avgwdsvc.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG9\Identity Protection\Agent\Bin\AVGIDSAgent.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG9\Identity Protection\Agent\Bin\AVGIDSMonitor.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG9\avgam.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\Logitech\Logitech Vid\Vid.exe (Logitech Inc.)
PRC - C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe ()
PRC - C:\Program Files\Common Files\LogiShrd\LQCVFX\COCIManager.exe ()
PRC - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe (Logitech Inc.)
PRC - C:\Program Files\eBay\eBay Toolbar2\eBayTBDaemon.exe (eBay Inc.)
PRC - C:\Program Files\Windows Live\Contacts\wlcomm.exe (Microsoft Corporation)
PRC - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe (Yahoo! Inc.)
PRC - C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe (Sun Microsystems, Inc.)
PRC - C:\Program Files\Java\jre1.6.0_07\bin\jucheck.exe (Sun Microsystems, Inc.)
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\Kontiki\KService.exe (Kontiki Inc.)
PRC - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe ()
PRC - C:\Program Files\Picasa2\PicasaMediaDetector.exe (Google Inc.)
PRC - C:\WINDOWS\system32\sistray.exe (Silicon Integrated Systems Corporation)
PRC - C:\Program Files\Analog Devices\SoundMAX\SMTray.exe (Analog Devices, Inc.)
PRC - C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe ()
========== Modules (SafeList) ==========
MOD - C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\WINDOWS\system32\msscript.ocx (Microsoft Corporation)
========== Win32 Services (SafeList) ==========
SRV - (avgfws9) – C:\Program Files\AVG\AVG9\avgfws9.exe (AVG Technologies CZ, s.r.o.)
SRV - (aawservice) – C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe (Lavasoft)
SRV - (Apple Mobile Device) – C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.)
SRV - (Autodata Limited License Service) – C:\Program Files\Common Files\Autodata Limited Shared\Service\ADCDLicSvc.exe ()
SRV - (avg9wd) – C:\Program Files\AVG\AVG9\avgwdsvc.exe (AVG Technologies CZ, s.r.o.)
SRV - (AVGIDSAgent) – C:\Program Files\AVG\AVG9\Identity Protection\Agent\Bin\AVGIDSAgent.exe (AVG Technologies CZ, s.r.o.)
SRV - (LVPrcSrv) – C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe (Logitech Inc.)
SRV - (fsssvc) – C:\Program Files\Windows Live\Family Safety\fsssvc.exe (Microsoft Corporation)
SRV - (SeaPort) – C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe (Microsoft Corporation)
SRV - (YahooAUService) – C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe (Yahoo! Inc.)
SRV - (KService) – C:\Program Files\Kontiki\KService.exe (Kontiki Inc.)
SRV - (Symantec Core LC) – C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe ()
SRV - (Pml Driver HPZ12) – C:\WINDOWS\system32\HPZipm12.exe (HP)
SRV - (WinDefend) – C:\Program Files\Windows Defender\MsMpEng.exe (Microsoft Corporation)
========== Driver Services (SafeList) ==========
DRV - (AvgTdiX) – C:\WINDOWS\System32\Drivers\avgtdix.sys (AVG Technologies CZ, s.r.o.)
DRV - (AvgMfx86) – C:\WINDOWS\System32\Drivers\avgmfx86.sys (AVG Technologies CZ, s.r.o.)
DRV - (FilterService) – C:\WINDOWS\system32\drivers\lvuvcflt.sys (Logitech Inc.)
DRV - (NVENETFD) – C:\WINDOWS\system32\drivers\NVENETFD.sys (NVIDIA Corporation)
DRV - (nv) – C:\WINDOWS\system32\drivers\nv4_mini.sys (NVIDIA Corporation)
DRV - (AVGIDSDriverxpx) – C:\Program Files\AVG\AVG9\Identity Protection\Agent\Driver\Platform_XP\AVGIDSDriver.sys (AVG Technologies CZ, s.r.o. )
DRV - (AVGIDSFilterxpx) – C:\Program Files\AVG\AVG9\Identity Protection\Agent\Driver\Platform_XP\AVGIDSFilter.sys (AVG Technologies CZ, s.r.o. )
DRV - (AVGIDSShimxpx) – C:\Program Files\AVG\AVG9\Identity Protection\Agent\Driver\Platform_XP\AVGIDSShim.sys (AVG Technologies CZ, s.r.o. )
DRV - (AVGIDSErHrxpx) – C:\WINDOWS\System32\Drivers\AVGIDSxx.sys (AVG Technologies CZ, s.r.o. )
DRV - (AvgLdx86) – C:\WINDOWS\System32\Drivers\avgldx86.sys (AVG Technologies CZ, s.r.o.)
DRV - (AvgRkx86) – C:\WINDOWS\System32\Drivers\avgrkx86.sys (AVG Technologies CZ, s.r.o.)
DRV - (Lbd) – C:\WINDOWS\system32\DRIVERS\Lbd.sys (Lavasoft AB)
DRV - (Avgfwfd) – C:\WINDOWS\system32\drivers\avgfwdx.sys (AVG Technologies CZ, s.r.o.)
DRV - (Avgfwdx) – C:\WINDOWS\system32\drivers\avgfwdx.sys (AVG Technologies CZ, s.r.o.)
DRV - (LVUVC) Logitech Webcam 200(UVC) – C:\WINDOWS\system32\drivers\lvuvc.sys (Logitech Inc.)
DRV - (LVRS) – C:\WINDOWS\system32\drivers\lvrs.sys (Logitech Inc.)
DRV - (lvpopflt) – C:\WINDOWS\system32\drivers\lvpopflt.sys (Logitech Inc.)
DRV - (LVPr2Mon) – C:\WINDOWS\system32\drivers\LVPr2Mon.sys ()
DRV - (fssfltr) – C:\WINDOWS\system32\drivers\fssfltr_tdi.sys (Microsoft Corporation)
DRV - (Intrchs) – C:\Program Files\PlayE4\bin\Intrchs.sys ()
DRV - (eeCtrl) – C:\Program Files\Common Files\Symantec Shared\eengine\eeCtrl.sys (Symantec Corporation)
DRV - (nvnetbus) – C:\WINDOWS\system32\drivers\nvnetbus.sys (NVIDIA Corporation)
DRV - (IntcAzAudAddService) Service for Realtek HD Audio (WDM) – C:\WINDOWS\system32\drivers\RtkHDAud.sys (Realtek Semiconductor Corp.)
DRV - (usbaudio) USB Audio Driver (WDM) – C:\WINDOWS\system32\drivers\USBAUDIO.sys (Microsoft Corporation)
DRV - (HDAudBus) – C:\WINDOWS\system32\drivers\hdaudbus.sys (Windows ® Server 2003 DDK provider)
DRV - (LUsbFilt) – C:\WINDOWS\system32\drivers\LUsbFilt.sys (Logitech, Inc.)
DRV - (LMouKE) – C:\WINDOWS\system32\drivers\LMouKE.Sys (Logitech Inc.)
DRV - (LMouFilt) – C:\WINDOWS\system32\drivers\LMouFilt.Sys (Logitech, Inc.)
DRV - (LHidFilt) – C:\WINDOWS\system32\drivers\LHidFilt.Sys (Logitech, Inc.)
DRV - (L8042mou) – C:\WINDOWS\system32\drivers\L8042mou.Sys (Logitech Inc.)
DRV - (L8042Kbd) – C:\WINDOWS\system32\drivers\L8042Kbd.sys (Logitech Inc.)
DRV - (symlcbrd) – C:\WINDOWS\system32\drivers\symlcbrd.sys (Symantec Corporation)
DRV - (SiS315) – C:\WINDOWS\system32\drivers\sisgrp.sys (Silicon Integrated Systems Corporation)
DRV - (SiSkp) – C:\WINDOWS\system32\drivers\srvkp.sys (Silicon Integrated Systems Corporation)
DRV - (SISAGP) – C:\WINDOWS\system32\DRIVERS\SISAGPX.sys (Silicon Integrated Systems Corporation)
DRV - (W8100PCI) – C:\WINDOWS\system32\drivers\mrv8k51.sys (Marvell Semiconductor, Inc)
DRV - (SiSGbeXP) – C:\WINDOWS\system32\drivers\SiSGbeXP.sys (Silicon Integrated Systems Corp.)
DRV - (SiSRaid2) – C:\WINDOWS\system32\DRIVERS\SiSRaid2.sys (Silicon Integrated Systems)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://uk.msn.com/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://www.bing.com/ [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded =
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://uk.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-gb
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = F2 D8 88 89 5F 00 CB 01 [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKCU\..\URLSearchHook: {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll ()
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
FF - HKLM\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\Program Files\Real\RealPlayer\browserrecord [2008/11/08 16:14:39 | 000,000,000 | —D | M]
O1 HOSTS File: ([2004/08/04 13:00:00 | 000,000,734 | —- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Skype add-on (mastermind)) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.)
O2 - BHO: (eBay Toolbar Helper) - {22D8E815-4A5E-4DFB-845E-AAB64207F5BD} - C:\Program Files\eBay\eBay Toolbar2\eBayTb.dll (eBay Inc.)
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll (RealPlayer)
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (Search Helper) - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll (Microsoft Corporation)
O2 - BHO: (SSVHelper Class) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (AVG Security Toolbar BHO) - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll ()
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.5.5126.1836\swg.dll (Google Inc.)
O2 - BHO: (MSN Toolbar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\MSN\Toolbar\3.0.1203.0\msneshellx.dll (Microsoft Corp.)
O2 - BHO: (Windows Live Toolbar Helper) - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
O3 - HKLM\..\Toolbar: (MSN Toolbar) - {1E61ED7C-7CB8-49d6-B9E9-AB4C880C8414} - C:\Program Files\MSN\Toolbar\3.0.1203.0\msneshellx.dll (Microsoft Corp.)
O3 - HKLM\..\Toolbar: (&Windows Live Toolbar) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (eBay Toolbar) - {92085AD4-F48A-450D-BD93-B28CC7DF67CE} - C:\Program Files\eBay\eBay Toolbar2\eBayTb.dll (eBay Inc.)
O3 - HKLM\..\Toolbar: (AVG Security Toolbar) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (&Windows Live Toolbar) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
O3 - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (AVG Security Toolbar) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll ()
O4 - HKLM..\Run: [4oD] C:\Program Files\Kontiki\KHost.exe (Kontiki Inc.)
O4 - HKLM..\Run: [AVG9_TRAY] C:\Program Files\AVG\AVG9\avgtray.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [eBayToolbar] C:\Program Files\eBay\eBay Toolbar2\eBayTBDaemon.exe (eBay Inc.)
O4 - HKLM..\Run: [Kernel and Hardware Abstraction Layer] C:\WINDOWS\KHALMNPR.Exe (Logitech Inc.)
O4 - HKLM..\Run: [KernelFaultCheck] File not found
O4 - HKLM..\Run: [Logitech Hardware Abstraction Layer] C:\WINDOWS\KHALMNPR.Exe (Logitech Inc.)
O4 - HKLM..\Run: [LogitechQuickCamRibbon] C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe ()
O4 - HKLM..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe (Ahead Software Gmbh)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe (Silicon Integrated Systems Corp.)
O4 - HKLM..\Run: [Smapp] C:\Program Files\Analog Devices\SoundMAX\SMTray.exe (Analog Devices, Inc.)
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKCU..\Run: [kdx] C:\Program Files\Kontiki\KHost.exe (Kontiki Inc.)
O4 - HKCU..\Run: [Logitech Vid] C:\Program Files\Logitech\Logitech Vid\Vid.exe (Logitech Inc.)
O4 - HKCU..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (Google Inc.)
O4 - HKCU..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)
O4 - HKCU..\RunOnce: [PowerSuite] C:\Program Files\Uniblue\PowerSuite\launcher.exe (Uniblue Systems Limited)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\HP Image Zone Fast Start.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe (Hewlett-Packard Co.)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe ()
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE (Microsoft Corporation)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Utility Tray.lnk = C:\WINDOWS\system32\sistray.exe (Silicon Integrated Systems Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: &ieSpell Options - C:\Program Files\ieSpell\iespell.dll (Red Egg Software)
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\WINDOWS\System32\GPhotos.scr (Google Inc.)
O8 - Extra context menu item: Check &Spelling - C:\Program Files\ieSpell\iespell.dll (Red Egg Software)
O8 - Extra context menu item: eBay Search - C:\Program Files\eBay\eBay Toolbar2\eBayTb.dll (eBay Inc.)
O8 - Extra context menu item: Google Sidewiki… - C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_2EC7709873947E87.dll (Google Inc.)
O8 - Extra context menu item: Lookup on Merriam Webster - C:\Program Files\ieSpell\Merriam Webster.HTM ()
O8 - Extra context menu item: Lookup on Wikipedia - C:\Program Files\ieSpell\wikipedia.HTM ()
O9 - Extra 'Tools' menuitem : Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\npjpi160_07.dll (Sun Microsystems, Inc.)
O9 - Extra Button: ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - C:\Program Files\ieSpell\iespell.dll (Red Egg Software)
O9 - Extra 'Tools' menuitem : ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - C:\Program Files\ieSpell\iespell.dll (Red Egg Software)
O9 - Extra 'Tools' menuitem : ieSpell Options - {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - C:\Program Files\ieSpell\iespell.dll (Red Egg Software)
O9 - Extra Button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.)
O9 - Extra Button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O16 - DPF: {0067DBFC-A752-458C-AE6E-B9C7E63D4824} http://www.logitech.com/devicedetector/plu…Detection32.cab (Device Detection)
O16 - DPF: {05D44720-58E3-49E6-BDF6-D00330E511D3} http://zone.msn.com/binFrameWork/v10/StagingUI.cab55579.cab (MSN Games – Matchmaking)
O16 - DPF: {0D41B8C5-2599-4893-8183-00195EC8D5F9} http://support.asus.com/common/asusTek_sys_ctrl.cab (asusTek_sysctrl Class)
O16 - DPF: {1803B9EF-9905-4F34-AFC4-05D1BAB28801} http://us.dl1.yimg.com/download.yahoo.com/…_1/yregucfg.cab (RegUserCfgUI Class)
O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262F} http://www.nvidia.com/content/DriverDownlo…sreqlab_nvd.cab (System Requirements Lab Class)
O16 - DPF: {3BB54395-5982-4788-8AF4-B5388FFDD0D8} http://zone.msn.com/BinFrameWork/v10/ZBuddy.cab55579.cab (MSN Games – Buddy Invite)
O16 - DPF: {5736C456-EA94-4AAC-BB08-917ABDD035B3} http://zone.msn.com/binframework/v10/ZPAChat.cab55579.cab (MSN Games – Game Chat)
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} http://cdn.scan.onecare.live.com/resource/…lscbase6087.cab (Windows Live Safety Center Base Module)
O16 - DPF: {6A344D34-5231-452A-8A57-D064AC9B7862} https://webdl.symantec.com/activex/symdlmgr.cab (Symantec Download Manager)
O16 - DPF: {6F15128C-E66A-490C-B848-5000B5ABEEAC} https://h20436.www2.hp.com/ediags/dex/secure/HPDEXAXO.cab (HP Download Manager)
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab (OnlineScanner Control)
O16 - DPF: {95B5D20C-BD31-4489-8ABF-F8C8BE748463} http://zone.msn.com/bingame/zpagames/zpa_hrtz.cab58570.cab (ZPA_HRTZ Object)
O16 - DPF: {A4110378-789B-455F-AE86-3A1BFC402853} http://zone.msn.com/bingame/zpagames/zpa_shvl.cab55579.cab (ZPA_SHVL Object)
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} http://cdn2.zone.msn.com/binFramework/v10/…k.cab102118.cab (MSN Games - Installer)
O16 - DPF: {DA2AA6CF-5C7A-4B71-BC3B-C771BB369937} http://zone.msn.com/binframework/v10/StProxy.cab55579.cab (MSN Games – Game Communicator)
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} http://www.popcap.com/webgames/popcaploader_v10.cab (PopCapLoader Object)
O16 - DPF: {E77F23EB-E7AB-4502-8F37-247DBAF1A147} http://gfx2.hotmail.com/mail/w4/pr01/photo…ol/MSNPUpld.cab (Windows Live Hotmail Photo Upload Tool)
O16 - DPF: {FF3C5A9F-5A99-4930-80E8-4709194C2AD3} http://zone.msn.com/bingame/zpagames/ZPA_B…on.cab64162.cab (MSN Games – Backgammon)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll (AVG Technologies CZ, s.r.o.)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\avgrsstarter: DllName - avgrsstx.dll - C:\WINDOWS\System32\avgrsstx.dll (AVG Technologies CZ, s.r.o.)
O24 - Desktop WallPaper: C:\Documents and Settings\Mark M.NONE-5738F18114\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Mark M.NONE-5738F18114\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {091EB208-39DD-417D-A5DD-7E2C2D8FB9CB} - C:\Program Files\Windows Defender\MpShHook.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/07/24 09:48:16 | 000,000,000 | —- | M] () - C:\AUTOEXEC.BAT – [ NTFS ]
O32 - AutoRun File - [2009/01/30 19:33:49 | 000,000,090 | —- | M] () - C:\AUTORUN.INF – [ NTFS ]
O32 - AutoRun File - [2008/12/30 17:43:01 | 000,000,000 | —- | M] () - D:\AUTOEXEC.BAT – [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O34 - HKLM BootExecute: (lsdelete) - C:\WINDOWS\System32\lsdelete.exe ()
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*
========== Files/Folders - Created Within 30 Days ==========
[2010/06/02 21:57:09 | 000,000,000 | —D | C] – C:\Program Files\ESET
[2010/06/02 03:37:32 | 000,000,000 | —D | C] – C:\WINDOWS\Minidump
[2010/06/01 23:00:54 | 000,000,000 | —D | C] – C:\32788R22FWJFW
[2010/05/31 10:41:12 | 000,998,736 | —- | C] (Kaspersky Lab) – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\TDSSKiller.exe
[2010/05/31 02:09:44 | 000,000,000 | —D | C] – C:\_OTL
[2010/05/30 21:38:28 | 000,571,392 | —- | C] (OldTimer Tools) – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\OTL.exe
[2010/05/30 20:13:56 | 000,000,000 | —D | C] – C:\Documents and Settings\Mark M.NONE-5738F18114\Application Data\ieSpell
[2010/05/29 07:37:33 | 000,000,000 | —D | C] – C:\Program Files\Bandoo
[2010/05/28 05:11:48 | 000,000,000 | —D | C] – C:\Program Files\ieSpell
[2010/05/24 10:31:52 | 000,000,000 | —D | C] – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\Unused Desktop Shortcuts
[2010/05/23 03:40:01 | 000,000,000 | —D | C] – C:\Documents and Settings\Mark M.NONE-5738F18114\Application Data\Carambis
[2010/05/23 03:37:44 | 000,000,000 | —D | C] – C:\Program Files\Carambis
[2010/05/22 20:19:07 | 000,000,000 | —D | C] – C:\WINDOWS\Performance
[2010/05/22 20:18:59 | 000,000,000 | —D | C] – C:\Documents and Settings\Mark M.NONE-5738F18114\Local Settings\Application Data\Microsoft Corporation
[2010/05/22 20:18:28 | 000,000,000 | —D | C] – C:\Program Files\Microsoft Windows 7 Upgrade Advisor
[2010/05/20 07:40:46 | 000,000,000 | —D | C] – C:\WINDOWS\System32\dumps
[2010/05/14 19:27:09 | 000,199,192 | —- | C] (Logitech Inc.) – C:\WINDOWS\System32\lvci12101110.dll
[2010/05/13 16:40:11 | 000,000,000 | —D | C] – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\SightSpeed Recordings
[2010/05/12 19:19:04 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\NVIDIA Corporation
[2010/05/12 19:18:53 | 000,000,000 | —D | C] – C:\Program Files\NVIDIA Corporation
[2010/05/12 19:17:56 | 002,646,632 | —- | C] (NVIDIA Corporation) – C:\WINDOWS\System32\nvcuvenc.dll
[2010/05/12 19:17:55 | 011,647,592 | —- | C] (NVIDIA Corporation) – C:\WINDOWS\System32\nvcompiler.dll
[2010/05/12 19:08:46 | 000,000,000 | —D | C] – C:\Program Files\SystemRequirementsLab
[2010/05/04 18:23:33 | 000,000,000 | —D | C] – C:\Program Files\iPod
[2010/05/04 18:23:31 | 000,000,000 | —D | C] – C:\Program Files\iTunes
[2010/05/04 18:23:31 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2010/05/04 18:20:30 | 000,000,000 | —D | C] – C:\Program Files\QuickTime
[2010/05/04 18:18:08 | 003,003,680 | —- | C] (Apple, Inc.) – C:\WINDOWS\System32\usbaaplrc.dll
[2010/05/04 18:17:51 | 000,000,000 | —D | C] – C:\Program Files\Bonjour
[2010/03/17 21:53:42 | 000,094,208 | —- | C] (Apple Inc.) – C:\WINDOWS\System32\QuickTimeVR.qtx
[2010/03/17 21:53:42 | 000,069,632 | —- | C] (Apple Inc.) – C:\WINDOWS\System32\QuickTime.qts
[2010/02/04 19:56:08 | 000,298,496 | —- | C] (InstallShield Corporation, Inc.) – C:\WINDOWS\uninst.exe
[2009/12/06 02:48:05 | 000,000,000 | —D | C] – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Adobe Reader 9 Installer
[2009/12/04 17:30:26 | 000,000,000 | —D | C] – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\My Scans
[2009/10/24 13:16:52 | 000,000,000 | —D | C] – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Downloads
[2009/10/23 03:58:58 | 000,000,000 | —D | C] – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\confirmation Marc[1]_files
[2009/09/23 19:32:30 | 000,000,000 | —D | C] – C:\WINDOWS\System32\zh-TW
[2009/09/23 19:32:30 | 000,000,000 | —D | C] – C:\WINDOWS\System32\zh-HK
[2009/09/23 19:32:30 | 000,000,000 | —D | C] – C:\WINDOWS\System32\tr-TR
[2009/09/23 19:32:30 | 000,000,000 | —D | C] – C:\WINDOWS\System32\sv-SE
[2009/09/23 19:32:30 | 000,000,000 | —D | C] – C:\WINDOWS\System32\pt-BR
[2009/09/20 22:11:31 | 000,053,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\vfwwdm32.dll
[2009/09/14 05:14:11 | 000,000,000 | -H-D | C] – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\.picasaoriginals
[2009/09/14 05:06:52 | 000,000,000 | R-SD | C] – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\My Stationery
[2009/09/09 20:35:51 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Documents\microsoft
[2009/09/01 00:22:33 | 000,016,928 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\spmsg.dll
[2009/08/21 00:22:52 | 000,000,000 | —D | C] – C:\WINDOWS\System32\XPSViewer
[2009/08/21 00:22:04 | 001,676,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\xpssvcs.dll
[2009/08/21 00:22:04 | 000,117,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\prntvpt.dll
[2009/08/04 00:12:56 | 000,000,000 | —D | C] – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\My Videos
[2009/07/26 16:44:56 | 000,048,448 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\sirenacm.dll
[2009/07/16 20:20:36 | 000,000,000 | —D | C] – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\New Folder
[2009/07/10 12:15:46 | 000,306,544 | —- | C] (Microsoft Corporation) – C:\WINDOWS\WLXPGSS.SCR
[2009/07/05 19:56:49 | 000,000,000 | —D | C] – C:\WINDOWS\Prefetch
[2009/07/05 19:37:53 | 000,000,000 | -H-D | C] – C:\WINDOWS\$NtServicePackUninstall$
[2009/07/05 19:24:48 | 000,000,000 | —D | C] – C:\WINDOWS\ie8updates
[2009/07/05 19:20:56 | 000,000,000 | -H-D | C] – C:\WINDOWS\ie8
[2009/07/05 19:03:18 | 000,000,000 | —D | C] – C:\WINDOWS\System32\RTCOM
[2009/07/05 18:39:35 | 000,000,000 | —D | C] – C:\WINDOWS\nview
[2009/06/30 18:55:31 | 000,000,000 | —D | C] – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\My Received Files
[2009/06/30 17:13:56 | 000,000,000 | —D | C] – C:\WINDOWS\pss
[2009/06/30 16:21:34 | 000,000,000 | R–D | C] – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\My Music
[2009/06/30 16:21:32 | 000,000,000 | R–D | C] – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\My Pictures
[2009/06/30 15:44:31 | 000,024,661 | —- | C] (Perle Systems Ltd.) – C:\WINDOWS\System32\spxcoins.dll
========== Files - Modified Within 30 Days ==========
[2010/06/03 04:12:58 | 000,016,547 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\OTL.zip
[2010/06/03 04:12:46 | 000,010,489 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\Extras.zip
[2010/06/03 03:31:01 | 000,000,884 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2010/06/03 00:55:55 | 000,593,743 | —- | M] () – C:\WINDOWS\System32\drivers\Avg\iavifw.avm
[2010/06/03 00:55:54 | 060,640,563 | —- | M] () – C:\WINDOWS\System32\drivers\Avg\incavi.avm
[2010/06/02 23:41:03 | 000,000,424 | -H– | M] () – C:\WINDOWS\tasks\User_Feed_Synchronization-{169FDE4B-E2F9-4890-879E-D1A096EA74F2}.job
[2010/06/02 20:19:23 | 000,998,736 | —- | M] (Kaspersky Lab) – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\TDSSKiller.exe
[2010/06/02 20:07:50 | 000,966,213 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\tdsskiller.zip
[2010/06/02 17:33:15 | 000,001,374 | —- | M] () – C:\WINDOWS\System32\wpa.dbl
[2010/06/02 17:32:59 | 000,276,202 | —- | M] () – C:\WINDOWS\System32\NvApps.xml
[2010/06/02 17:32:35 | 000,000,006 | -H– | M] () – C:\WINDOWS\tasks\SA.DAT
[2010/06/02 17:32:28 | 000,002,048 | –S- | M] () – C:\WINDOWS\bootstat.dat
[2010/06/02 12:52:20 | 004,980,736 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\NTUSER.DAT
[2010/06/02 03:52:42 | 000,293,376 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\39ki73vk GMER.exe
[2010/06/02 03:37:27 | 2952,347,648 | —- | M] () – C:\WINDOWS\MEMORY.DMP
[2010/06/01 19:32:14 | 000,000,472 | —- | M] () – C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job
[2010/06/01 19:27:36 | 000,000,880 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2010/06/01 17:55:00 | 000,000,284 | —- | M] () – C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2010/06/01 08:59:33 | 000,001,107 | —- | M] () – C:\WINDOWS\win.ini
[2010/06/01 08:59:33 | 000,000,321 | -HS- | M] () – C:\boot.ini
[2010/06/01 08:59:33 | 000,000,227 | —- | M] () – C:\WINDOWS\system.ini
[2010/06/01 08:39:23 | 000,242,896 | —- | M] (AVG Technologies CZ, s.r.o.) – C:\WINDOWS\System32\drivers\avgtdix.sys
[2010/06/01 08:39:23 | 000,029,584 | —- | M] (AVG Technologies CZ, s.r.o.) – C:\WINDOWS\System32\drivers\avgmfx86.sys
[2010/06/01 08:11:15 | 000,000,259 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\Nationwide Building Society Mortgages, Savings, Current Accounts, Banking, Insurance, Credit Cards, Loans, Investments.url
[2010/05/31 23:30:34 | 000,000,220 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\TV Guide UK TV Listings - UK's No 1 TV Listing site for Freeview, Sky, Virgin Media, Freesat & Tiscali TV.url
[2010/05/31 19:14:42 | 000,000,665 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\UK Credit Cards Capital One.url
[2010/05/31 19:12:49 | 000,000,249 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\home page Take a Break Bingo.url
[2010/05/31 19:05:33 | 000,000,335 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\Free Criminal Record Check - Page 2 - Cable Forum.url
[2010/05/30 23:02:00 | 000,000,302 | —- | M] () – C:\WINDOWS\tasks\Ad-Aware 2007.job
[2010/05/30 21:38:30 | 000,571,392 | —- | M] (OldTimer Tools) – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\OTL.exe
[2010/05/30 20:55:22 | 000,000,317 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\lost google - now searchqu.com.url
[2010/05/30 20:49:36 | 000,000,635 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\Sign In.url
[2010/05/30 18:15:24 | 000,021,505 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\a-boozer.html
[2010/05/30 18:04:48 | 000,000,281 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\THAI BART RATE CONVERTER.url
[2010/05/29 22:00:37 | 000,000,244 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\youtube.com-gl=GB&hl=en-GB.url
[2010/05/29 07:45:28 | 000,000,000 | —- | M] () – C:\WINDOWS\iPlayer.INI
[2010/05/29 07:39:42 | 000,026,616 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
[2010/05/29 04:32:24 | 000,000,792 | —- | M] () – C:\Documents and Settings\All Users\Desktop\InterActual Player.lnk
[2010/05/28 18:27:18 | 000,000,394 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\CATCH-UP.url
[2010/05/28 11:42:05 | 000,147,608 | —- | M] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2010/05/28 05:34:24 | 000,000,278 | -HS- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\ntuser.ini
[2010/05/28 03:44:57 | 000,000,317 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\Thai for Lovers.url
[2010/05/28 03:25:08 | 000,000,210 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\Manee and Friends.url
[2010/05/27 17:52:54 | 000,023,832 | —- | M] (Logitech Inc.) – C:\WINDOWS\System32\drivers\lvuvcflt.sys
[2010/05/27 17:52:23 | 000,888,832 | —- | M] (NVIDIA Corporation) – C:\WINDOWS\System32\fdco1ins.dll
[2010/05/27 17:52:23 | 000,888,832 | —- | M] (NVIDIA Corporation) – C:\WINDOWS\System32\fdco1.dll
[2010/05/27 17:52:23 | 000,067,328 | —- | M] (NVIDIA Corporation) – C:\WINDOWS\System32\drivers\NVENETFD.sys
[2010/05/27 04:04:22 | 000,000,211 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\eBay - The UK's Online Marketplace.url
[2010/05/26 04:51:24 | 000,000,238 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\Mazda RX-8 Owners Club UK.url
[2010/05/25 03:46:55 | 000,000,316 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\allfreegames.eu-free-online-games-play-Crash+Bandicoot-45e8beb2f472b5b11031a1f9171bab8b.html.url
[2010/05/25 02:27:07 | 000,029,696 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Basildon Magistrates Court.doc
[2010/05/24 11:09:51 | 000,002,137 | —- | M] () – C:\Documents and Settings\All Users\Desktop\iTunes.lnk
[2010/05/24 04:47:27 | 000,000,224 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\BBC iPlayer - Home.url
[2010/05/23 17:18:33 | 000,000,580 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\My Account - PayPal.url
[2010/05/22 21:44:32 | 000,084,197 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\win 7 report compatability.mht
[2010/05/22 20:29:42 | 000,001,928 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Google Earth.lnk
[2010/05/22 09:25:32 | 000,000,243 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\oilcareers.com-worldwide-.url
[2010/05/21 22:28:37 | 000,000,248 | —- | M] () – C:\Short Term Car Insurance One Day Car Insurance 1 Day Insurance.url
[2010/05/20 10:30:13 | 000,000,158 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\AVForums.com Home.url
[2010/05/16 04:05:41 | 000,000,660 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Application Data\ClipExtractor-YouTube-Clip-ExtractorFlvConverterDefaultSettings.xml
[2010/05/16 00:27:14 | 000,000,186 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\My Lifetracks - Lifetracks.com.url
[2010/05/14 19:26:10 | 000,001,863 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Logitech Webcam Software.lnk
[2010/05/13 16:40:01 | 000,000,803 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Logitech Vid.lnk
[2010/05/12 17:52:58 | 000,001,374 | —- | M] () – C:\WINDOWS\imsins.BAK
[2010/05/12 11:21:16 | 000,221,568 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\MpSigStub.exe
[2010/05/08 05:21:32 | 000,577,660 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\RX8_Stereo_Removal.pdf
[2010/04/29 21:45:47 | 000,000,125 | —- | M] () – C:\WINDOWS\cdplayer.ini
[2010/04/27 18:33:44 | 000,015,880 | —- | M] () – C:\WINDOWS\System32\lsdelete.exe
[2010/04/16 08:33:36 | 003,003,680 | —- | M] (Apple, Inc.) – C:\WINDOWS\System32\usbaaplrc.dll
[2010/04/08 13:20:02 | 000,107,808 | —- | M] (Apple Inc.) – C:\WINDOWS\System32\dns-sd.exe
[2010/04/08 13:20:02 | 000,091,424 | —- | M] (Apple Inc.) – C:\WINDOWS\System32\dnssd.dll
[2010/04/05 20:10:12 | 000,020,992 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\ben letter to yde.doc
[2010/04/05 06:12:20 | 000,000,762 | —- | M] () – C:\Documents and Settings\All Users\Desktop\RegistryBooster.lnk
[2010/04/04 07:19:25 | 000,516,198 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\95-7510_manual metra stereo.pdf
[2010/04/03 23:55:31 | 014,757,888 | —- | M] (NVIDIA Corporation) – C:\WINDOWS\System32\nvoglnt.dll
[2010/04/03 23:55:31 | 011,647,592 | —- | M] (NVIDIA Corporation) – C:\WINDOWS\System32\nvcompiler.dll
[2010/04/03 23:55:31 | 010,232,128 | —- | M] (NVIDIA Corporation) – C:\WINDOWS\System32\drivers\nv4_mini.sys
[2010/04/03 23:55:31 | 010,232,128 | —- | M] (NVIDIA Corporation) – C:\WINDOWS\System32\dllcache\nv4_mini.sys
[2010/04/03 23:55:31 | 006,432,128 | —- | M] (NVIDIA Corporation) – C:\WINDOWS\System32\nv4_disp.dll
[2010/04/03 23:55:31 | 004,075,520 | —- | M] (NVIDIA Corporation) – C:\WINDOWS\System32\nvcuda.dll
[2010/04/03 23:55:31 | 002,646,632 | —- | M] (NVIDIA Corporation) – C:\WINDOWS\System32\nvcuvenc.dll
[2010/04/03 23:55:31 | 002,183,470 | —- | M] () – C:\WINDOWS\System32\nvdata.bin
[2010/04/03 23:55:31 | 002,030,184 | —- | M] (NVIDIA Corporation) – C:\WINDOWS\System32\nvcuvid.dll
[2010/04/03 23:55:31 | 001,097,728 | —- | M] (NVIDIA Corporation) – C:\WINDOWS\System32\nvapi.dll
[2010/04/03 23:55:31 | 000,600,680 | —- | M] (NVIDIA Corporation) – C:\WINDOWS\System32\nvudisp.exe
[2010/04/03 23:55:31 | 000,227,944 | —- | M] (NVIDIA Corporation) – C:\WINDOWS\System32\nvcodins.dll
[2010/04/03 23:55:31 | 000,227,944 | —- | M] (NVIDIA Corporation) – C:\WINDOWS\System32\nvcod.dll
[2010/04/03 23:55:31 | 000,061,440 | —- | M] (Khronos Group) – C:\WINDOWS\System32\OpenCL.dll
[2010/04/03 23:55:31 | 000,025,755 | —- | M] () – C:\WINDOWS\System32\nvdisp.nvu
[2010/04/03 23:55:31 | 000,009,046 | —- | M] () – C:\WINDOWS\System32\nvinfo.pb
[2010/04/03 19:23:18 | 000,278,120 | —- | M] (NVIDIA Corporation) – C:\WINDOWS\System32\nvmccs.dll
[2010/04/03 19:23:16 | 013,670,504 | —- | M] (NVIDIA Corporation) – C:\WINDOWS\System32\nvcpl.dll
[2010/04/03 19:23:16 | 000,145,000 | —- | M] (NVIDIA Corporation) – C:\WINDOWS\System32\nvcolor.exe
[2010/04/03 19:23:16 | 000,110,696 | —- | M] (NVIDIA Corporation) – C:\WINDOWS\System32\nvmctray.dll
[2010/04/03 19:22:54 | 000,081,920 | —- | M] (NVIDIA Corporation) – C:\WINDOWS\System32\nvwddi.dll
[2010/04/03 19:22:32 | 000,066,714 | —- | M] () – C:\WINDOWS\System32\NvwsApps.xml
[2010/04/02 16:54:38 | 000,600,680 | —- | M] (NVIDIA Corporation) – C:\WINDOWS\System32\NVUNINST.EXE
[2010/04/01 21:51:38 | 096,180,512 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\RX8_workshop_manual.zip
[2010/04/01 05:32:14 | 003,506,285 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\mot.jpg
[2010/03/29 13:46:37 | 000,521,444 | —- | M] () – C:\WINDOWS\System32\PerfStringBackup.INI
[2010/03/29 13:46:37 | 000,441,638 | —- | M] () – C:\WINDOWS\System32\perfh009.dat
[2010/03/29 13:46:37 | 000,071,780 | —- | M] () – C:\WINDOWS\System32\perfc009.dat
[2010/03/28 21:57:20 | 000,000,737 | —- | M] () – C:\Documents and Settings\All Users\Desktop\PowerSuite.lnk
[2010/03/17 21:53:42 | 000,094,208 | —- | M] (Apple Inc.) – C:\WINDOWS\System32\QuickTimeVR.qtx
[2010/03/17 21:53:42 | 000,069,632 | —- | M] (Apple Inc.) – C:\WINDOWS\System32\QuickTime.qts
[2010/03/15 16:02:05 | 005,136,305 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\manual RX8 2009 ON.pdf
[2010/03/10 07:15:52 | 000,420,352 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\vbscript.dll
[2010/03/10 07:15:52 | 000,420,352 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\vbscript.dll
[2010/03/05 03:04:04 | 000,012,464 | —- | M] (AVG Technologies CZ, s.r.o.) – C:\WINDOWS\System32\avgrsstx.dll
[2010/03/05 03:03:57 | 000,025,096 | —- | M] (AVG Technologies CZ, s.r.o. ) – C:\WINDOWS\System32\drivers\AVGIDSxx.sys
[2010/03/05 03:03:53 | 000,216,200 | —- | M] (AVG Technologies CZ, s.r.o.) – C:\WINDOWS\System32\drivers\avgldx86.sys
[2010/03/05 03:03:51 | 000,052,872 | —- | M] (AVG Technologies CZ, s.r.o.) – C:\WINDOWS\System32\drivers\avgrkx86.sys
[2010/02/26 05:02:30 | 000,060,172 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Spidermite[1].pdf
[2010/02/26 05:01:49 | 000,016,618 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\blank grow sheet[1].pdf
[2010/02/25 11:54:36 | 011,070,976 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ieframe.dll
[2010/02/25 07:24:37 | 001,209,344 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\urlmon.dll
[2010/02/25 07:24:37 | 000,916,480 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wininet.dll
[2010/02/25 07:24:37 | 000,611,840 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\mstime.dll
[2010/02/25 07:24:37 | 000,611,840 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mstime.dll
[2010/02/25 07:24:37 | 000,206,848 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\occache.dll
[2010/02/25 07:24:36 | 005,944,832 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mshtml.dll
[2010/02/25 07:24:35 | 001,985,536 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iertutil.dll
[2010/02/25 07:24:35 | 001,469,440 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\inetcpl.cpl
[2010/02/25 07:24:35 | 001,469,440 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\inetcpl.cpl
[2010/02/25 07:24:35 | 000,594,432 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\msfeeds.dll
[2010/02/25 07:24:35 | 000,594,432 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msfeeds.dll
[2010/02/25 07:24:35 | 000,184,320 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\iepeers.dll
[2010/02/25 07:24:35 | 000,184,320 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iepeers.dll
[2010/02/25 07:24:35 | 000,055,296 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\msfeedsbs.dll
[2010/02/25 07:24:35 | 000,055,296 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msfeedsbs.dll
[2010/02/25 07:24:35 | 000,025,600 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\jsproxy.dll
[2010/02/25 07:24:35 | 000,025,600 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\jsproxy.dll
[2010/02/25 07:24:34 | 000,387,584 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\iedkcs32.dll
[2010/02/25 07:24:34 | 000,387,584 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iedkcs32.dll
[2010/02/24 14:11:07 | 000,455,680 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mrxsmb.sys
[2010/02/24 10:54:25 | 000,173,056 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\ie4uinit.exe
[2010/02/24 10:54:25 | 000,173,056 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ie4uinit.exe
[2010/02/22 13:04:34 | 000,000,258 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\The Complete guide to Sick Plants,pH, and Pest troubles! - International Cannagraphic Magazine Forums (2).url
[2010/02/20 00:47:50 | 003,604,480 | —- | M] (Google Inc.) – C:\WINDOWS\System32\GPhotos.scr
[2010/02/19 05:50:06 | 000,000,671 | -H– | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\.picasa.ini
[2010/02/19 04:30:32 | 007,217,077 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\FE-310_Instruction_Manual_EN.pdf
[2010/02/17 09:10:28 | 002,189,952 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ntoskrnl.exe
[2010/02/16 19:30:44 | 000,095,024 | —- | M] (Sunbelt Software) – C:\WINDOWS\System32\drivers\SBREDrv.sys
[2010/02/16 19:29:05 | 000,000,880 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Ad-Aware.lnk
[2010/02/16 15:08:49 | 002,146,304 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\ntoskrnl.exe
[2010/02/16 15:08:49 | 002,146,304 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ntkrnlmp.exe
[2010/02/16 14:25:04 | 002,066,816 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ntkrnlpa.exe
[2010/02/16 14:25:04 | 002,024,448 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ntkrpamp.exe
[2010/02/16 14:25:04 | 002,024,448 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\ntkrnlpa.exe
[2010/02/12 11:03:03 | 000,293,376 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\browserchoice.exe
[2010/02/12 05:33:11 | 000,100,864 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\6to4svc.dll
[2010/02/11 17:03:15 | 002,005,173 | —- | M] () – C:\WINDOWS\iis6.BAK
[2010/02/11 13:02:15 | 000,226,880 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\tcpip6.sys
[2010/02/11 13:02:15 | 000,226,880 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tcpip6.sys
[2010/02/08 02:45:13 | 000,022,016 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Ben M.doc
[2010/02/05 14:47:05 | 000,020,992 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Ben Money.doc
[2010/02/04 19:57:03 | 000,000,000 | —- | M] () – C:\WINDOWS\PCFriend.INI
[2010/02/04 16:53:02 | 000,064,288 | —- | M] (Lavasoft AB) – C:\WINDOWS\System32\drivers\Lbd.sys
[2010/01/31 19:55:55 | 000,496,605 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Start_up_guide_Business_plan.pdf
[2010/01/31 19:55:25 | 000,482,240 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Start_up_guide_part_2.pdf
[2010/01/31 19:54:03 | 000,589,849 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Start_up_guide_part_1.pdf
[2010/01/29 16:01:30 | 000,691,712 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\inetcomm.dll
[2010/01/29 15:43:39 | 000,307,260 | —- | M] (Fraunhofer Institut Integrierte Schaltungen IIS) – C:\WINDOWS\System32\l3codeca.acm
[2010/01/29 15:43:39 | 000,143,422 | —- | M] (Fraunhofer Institut Integrierte Schaltungen IIS) – C:\WINDOWS\System32\l3codecx.ax
[2010/01/19 21:55:17 | 000,142,495 | —- | M] () – C:\WINDOWS\System32\drivers\Avg\microavi.avg
[2010/01/13 15:01:25 | 000,086,016 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cabview.dll
[2009/12/31 17:50:03 | 000,353,792 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\srv.sys
[2009/12/24 07:59:40 | 000,177,664 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wintrust.dll
[2009/12/16 19:43:27 | 000,343,040 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\mspaint.exe
[2009/12/16 19:43:27 | 000,343,040 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mspaint.exe
[2009/12/14 08:08:23 | 000,033,280 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\csrsrv.dll
[2009/12/14 08:08:23 | 000,033,280 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\csrsrv.dll
[2009/12/09 06:53:44 | 000,726,528 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\jscript.dll
[2009/12/09 06:53:44 | 000,726,528 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\jscript.dll
[2009/12/08 10:23:28 | 000,474,112 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\shlwapi.dll
[2009/12/06 00:10:53 | 000,001,742 | —- | M] () – C:\Adobe Reader 9.lnk
[2009/12/04 21:22:56 | 118,327,296 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Doc1.doc
[2009/12/04 09:44:23 | 004,287,134 | -H– | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Local Settings\Application Data\IconCache.db
[2009/12/01 22:05:41 | 000,000,225 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\TITANIUM.url
[2009/11/27 18:11:44 | 001,291,776 | —- | M] () – C:\WINDOWS\System32\quartz.dll
[2009/11/27 18:11:44 | 001,291,776 | —- | M] () – C:\WINDOWS\System32\dllcache\quartz.dll
[2009/11/27 18:11:44 | 000,017,920 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msyuv.dll
[2009/11/27 17:07:35 | 000,028,672 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msvidc32.dll
[2009/11/27 17:07:35 | 000,008,704 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tsbyuv.dll
[2009/11/27 17:07:34 | 000,084,992 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\avifil32.dll
[2009/11/27 17:07:34 | 000,084,992 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\avifil32.dll
[2009/11/27 17:07:34 | 000,048,128 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iyuv_32.dll
[2009/11/27 17:07:34 | 000,011,264 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msrle32.dll
[2009/11/21 16:51:42 | 001,206,508 | —- | M] () – C:\WINDOWS\System32\dllcache\sysmain.sdb
[2009/11/21 16:51:04 | 000,471,552 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\aclayers.dll
[2009/10/27 18:07:25 | 000,027,290 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\UK_Davidman_Diet_2_160x600.gif
[2009/10/26 05:00:23 | 000,257,866 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\e-ticket Invoice No 656065.zip
[2009/10/24 18:03:22 | 000,024,046 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\TB2Categories000.dat
[2009/10/24 13:06:41 | 000,000,056 | -H– | M] () – C:\WINDOWS\System32\ezsidmv.dat
[2009/10/23 16:28:37 | 003,558,912 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\moviemk.exe
[2009/10/23 01:18:52 | 000,113,461 | —- | M] () – C:\WINDOWS\System32\drivers\Avg\iavichjw.avm
[2009/10/23 01:18:19 | 000,050,968 | —- | M] (AVG Technologies CZ, s.r.o.) – C:\WINDOWS\System32\avgfwdx.dll
[2009/10/23 01:18:19 | 000,030,104 | —- | M] (AVG Technologies CZ, s.r.o.) – C:\WINDOWS\System32\drivers\avgfwdx.sys
[2009/10/22 20:36:48 | 001,267,007 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\NOKIA 6233 USER MANUAL.pdf
[2009/10/21 06:38:36 | 000,075,776 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\strmfilt.dll
[2009/10/21 06:38:36 | 000,075,776 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\strmfilt.dll
[2009/10/21 06:38:36 | 000,025,088 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\httpapi.dll
[2009/10/21 06:38:36 | 000,025,088 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\httpapi.dll
[2009/10/20 17:20:16 | 000,265,728 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\http.sys
[2009/10/19 15:29:31 | 000,073,018 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\X2Z6WA[1].pdf
[2009/10/19 01:49:30 | 000,000,782 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\ltgreen.jpg
[2009/10/18 11:23:42 | 000,007,262 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\imageslove.jpg
[2009/10/18 11:20:00 | 000,007,621 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\2.jpg
[2009/10/18 11:20:00 | 000,003,986 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\girlfrend.jpg
[2009/10/18 11:20:00 | 000,002,958 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\images.jpg
[2009/10/18 11:20:00 | 000,002,805 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\images3.jpg
[2009/10/15 17:28:26 | 000,119,808 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\t2embed.dll
[2009/10/15 17:28:26 | 000,119,808 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\t2embed.dll
[2009/10/15 17:28:26 | 000,081,920 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\fontsub.dll
[2009/10/15 17:28:26 | 000,081,920 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fontsub.dll
[2009/10/13 11:30:16 | 000,270,336 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\oakley.dll
[2009/10/13 11:30:16 | 000,270,336 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\oakley.dll
[2009/10/12 14:38:19 | 000,149,504 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\rastls.dll
[2009/10/12 14:38:19 | 000,149,504 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rastls.dll
[2009/10/12 14:38:18 | 000,079,872 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\raschap.dll
[2009/10/12 14:38:18 | 000,079,872 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\raschap.dll
[2009/10/07 09:49:38 | 006,756,632 | —- | M] (Logitech Inc.) – C:\WINDOWS\System32\drivers\lvuvc.sys
[2009/10/07 09:48:52 | 000,539,160 | —- | M] (Logitech Inc.) – C:\WINDOWS\System32\LVUI2RC.dll
[2009/10/07 09:48:30 | 000,539,160 | —- | M] (Logitech Inc.) – C:\WINDOWS\System32\LVUI2.dll
[2009/10/07 09:47:54 | 000,266,008 | —- | M] (Logitech Inc.) – C:\WINDOWS\System32\drivers\lvrs.sys
[2009/10/07 09:46:12 | 000,114,712 | —- | M] (Logitech Inc.) – C:\WINDOWS\System32\drivers\lvpopflt.sys
[2009/10/07 09:43:42 | 000,199,192 | —- | M] (Logitech Inc.) – C:\WINDOWS\System32\lvci12101110.dll
[2009/10/07 09:43:30 | 000,416,280 | —- | M] (Logitech Inc.) – C:\WINDOWS\System32\lvcodec2.dll
[2009/10/07 09:25:08 | 000,266,828 | —- | M] () – C:\WINDOWS\System32\drivers\LVAFT.cfg
[2009/10/07 09:24:20 | 000,082,289 | —- | M] () – C:\WINDOWS\System32\lvcoinst.ini
[2009/10/07 09:24:04 | 000,034,068 | —- | M] () – C:\WINDOWS\System32\Repository.reg
[2009/10/07 01:46:36 | 000,025,752 | —- | M] () – C:\WINDOWS\System32\drivers\LVPr2Mon.sys
[2009/10/07 01:25:10 | 000,227,172 | —- | M] () – C:\WINDOWS\System32\drivers\LVFeL100.cfg
[2009/10/07 01:25:10 | 000,146,680 | —- | M] () – C:\WINDOWS\System32\drivers\LVFeL101.cfg
[2009/10/07 01:25:10 | 000,085,302 | —- | M] () – C:\WINDOWS\System32\drivers\LVFeL102.cfg
[2009/10/07 01:25:10 | 000,069,592 | —- | M] () – C:\WINDOWS\System32\drivers\LVFaL100.cfg
[2009/10/07 01:23:08 | 000,013,584 | —- | M] () – C:\WINDOWS\System32\drivers\iKeyLFT2.dll
[2009/10/01 00:55:25 | 000,492,629 | —- | M] () – C:\WINDOWS\System32\drivers\Avg\miniavi.avg
[2009/09/24 07:27:28 | 000,000,007 | —- | M] () – C:\WINDOWS\System32\Class15
[2009/09/24 07:27:28 | 000,000,005 | —- | M] () – C:\WINDOWS\System32\Band4
[2009/09/20 22:18:25 | 000,000,803 | —- | M] () – C:\Logitech Vid.lnk
[2009/09/20 22:13:41 | 000,001,863 | —- | M] () – C:\Logitech Webcam Software.lnk
[2009/09/14 05:14:11 | 000,082,652 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7220149 porn.JPG
[2009/09/14 05:14:11 | 000,080,996 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\1.JPG
[2009/09/11 21:14:36 | 000,084,425 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270164 temple of peace started 1984.JPG
[2009/09/11 21:13:44 | 000,085,054 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270163 massive carved temple of peace, 1986 200 builders.JPG
[2009/09/11 21:12:45 | 000,083,022 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\porn kiss dolphin.JPG
[2009/09/11 21:09:00 | 000,081,828 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7220146 crock swimming.JPG
[2009/09/11 21:08:13 | 000,085,709 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\tiger.JPG
[2009/09/11 21:07:20 | 000,083,427 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7220140 crock5.JPG
[2009/09/11 21:06:52 | 000,082,800 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7220139 crock4.JPG
[2009/09/11 21:05:13 | 000,081,453 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7220138 crock 3.JPG
[2009/09/11 21:04:32 | 000,082,207 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7220135 crock 2.JPG
[2009/09/11 21:02:09 | 000,081,716 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7190116 2 house in surin.JPG
[2009/09/11 21:01:30 | 000,084,788 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7190118 house in surin.JPG
[2009/09/11 20:03:40 | 000,084,260 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270155.JPG
[2009/09/11 19:53:08 | 000,082,632 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7250151 me on steps big budda.JPG
[2009/09/11 19:52:06 | 000,083,146 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7250150 big budda.JPG
[2009/09/11 19:50:09 | 000,085,060 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7220148 me.JPG
[2009/09/11 19:49:18 | 000,082,800 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7220139 crok.JPG
[2009/09/11 19:38:01 | 000,080,518 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7180092 014.JPG
[2009/09/11 19:35:34 | 000,079,649 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7300189 013.JPG
[2009/09/11 19:34:11 | 000,081,841 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7300188 012.JPG
[2009/09/11 19:33:32 | 000,083,048 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270185 011.JPG
[2009/09/11 19:32:28 | 000,083,922 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270183 010.JPG
[2009/09/11 19:31:03 | 000,084,744 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270181 09.JPG
[2009/09/11 19:29:47 | 000,085,020 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270178 08.JPG
[2009/09/11 16:43:02 | 000,085,473 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270176 07.JPG
[2009/09/11 16:38:07 | 000,082,526 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270173 06.JPG
[2009/09/11 16:37:29 | 000,086,589 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270171 05.JPG
[2009/09/11 16:36:56 | 000,083,057 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270170 04.JPG
[2009/09/11 16:36:17 | 000,082,965 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270169 03.JPG
[2009/09/11 16:35:22 | 000,082,384 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270168 02.JPG
[2009/09/11 16:34:47 | 000,084,675 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270167 01.JPG
[2009/09/11 15:18:39 | 000,136,192 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msv1_0.dll
[2009/09/09 20:36:51 | 000,000,969 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\My Sharing Folders.lnk
[2009/09/08 20:25:15 | 000,000,244 | -H– | M] () – C:\sqmnoopt07.sqm
[2009/09/08 20:25:15 | 000,000,232 | -H– | M] () – C:\sqmdata07.sqm
[2009/09/08 20:20:57 | 000,000,244 | -H– | M] () – C:\sqmnoopt06.sqm
[2009/09/08 20:20:57 | 000,000,232 | -H– | M] () – C:\sqmdata06.sqm
[2009/09/08 16:33:01 | 000,000,244 | -H– | M] () – C:\sqmnoopt05.sqm
[2009/09/08 16:33:01 | 000,000,232 | -H– | M] () – C:\sqmdata05.sqm
[2009/09/08 15:10:54 | 000,082,756 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P6200005.JPG
[2009/09/08 15:10:11 | 000,082,759 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\3.JPG
[2009/09/08 14:58:43 | 000,000,244 | -H– | M] () – C:\sqmnoopt04.sqm
[2009/09/08 14:58:43 | 000,000,232 | -H– | M] () – C:\sqmdata04.sqm
[2009/09/08 14:56:22 | 000,084,458 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Amporn, noi.jpg
[2009/09/08 08:07:38 | 000,000,244 | -H– | M] () – C:\sqmnoopt03.sqm
[2009/09/08 08:07:38 | 000,000,232 | -H– | M] () – C:\sqmdata03.sqm
[2009/09/08 06:53:15 | 000,000,244 | -H– | M] () – C:\sqmnoopt02.sqm
[2009/09/08 06:53:15 | 000,000,232 | -H– | M] () – C:\sqmdata02.sqm
[2009/09/07 19:57:30 | 000,000,244 | -H– | M] () – C:\sqmnoopt01.sqm
[2009/09/07 19:57:30 | 000,000,232 | -H– | M] () – C:\sqmdata01.sqm
[2009/09/07 12:25:28 | 000,000,244 | -H– | M] () – C:\sqmnoopt00.sqm
[2009/09/07 12:25:28 | 000,000,232 | -H– | M] () – C:\sqmdata00.sqm
[2009/09/07 03:29:30 | 000,000,244 | -H– | M] () – C:\sqmnoopt19.sqm
[2009/09/07 03:29:30 | 000,000,232 | -H– | M] () – C:\sqmdata19.sqm
[2009/09/06 18:01:40 | 000,000,244 | -H– | M] () – C:\sqmnoopt18.sqm
[2009/09/06 18:01:40 | 000,000,232 | -H– | M] () – C:\sqmdata18.sqm
[2009/09/06 05:42:21 | 000,000,268 | -H– | M] () – C:\sqmdata17.sqm
[2009/09/06 05:42:21 | 000,000,244 | -H– | M] () – C:\sqmnoopt17.sqm
[2009/09/05 19:00:24 | 000,000,045 | —- | M] () – C:\WINDOWS\System32\RPVersion.ini
[2009/09/05 14:32:52 | 000,000,244 | -H– | M] () – C:\sqmnoopt16.sqm
[2009/09/05 14:32:52 | 000,000,232 | -H– | M] () – C:\sqmdata16.sqm
[2009/09/05 05:42:42 | 000,000,244 | -H– | M] () – C:\sqmnoopt15.sqm
[2009/09/05 05:42:42 | 000,000,232 | -H– | M] () – C:\sqmdata15.sqm
[2009/09/05 04:11:07 | 000,000,244 | -H– | M] () – C:\sqmnoopt14.sqm
[2009/09/05 04:11:07 | 000,000,232 | -H– | M] () – C:\sqmdata14.sqm
[2009/09/04 22:03:36 | 000,058,880 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msasn1.dll
[2009/09/04 15:47:12 | 000,000,232 | -H– | M] () – C:\sqmdata13.sqm
[2009/09/04 15:47:11 | 000,000,244 | -H– | M] () – C:\sqmnoopt13.sqm
[2009/09/01 00:30:25 | 000,000,049 | —- | M] () – C:\WINDOWS\NeroDigital.ini
[2009/09/01 00:24:34 | 000,023,392 | —- | M] () – C:\WINDOWS\System32\nscompat.tlb
[2009/09/01 00:24:34 | 000,016,832 | —- | M] () – C:\WINDOWS\System32\amcompat.tlb
[2009/08/26 09:00:21 | 000,247,326 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\strmdll.dll
[2009/08/26 09:00:21 | 000,247,326 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\strmdll.dll
[2009/08/25 10:17:27 | 000,354,816 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winhttp.dll
[2009/08/23 22:00:38 | 000,922,112 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\imapi2fs.dll
[2009/08/23 22:00:38 | 000,922,112 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imapi2fs.dll
[2009/08/23 22:00:38 | 000,426,496 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\imapi2.dll
[2009/08/23 22:00:38 | 000,426,496 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imapi2.dll
[2009/08/23 22:00:38 | 000,062,592 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cdrom.sys
[2009/08/15 20:43:06 | 000,000,244 | -H– | M] () – C:\sqmnoopt12.sqm
[2009/08/15 20:43:06 | 000,000,232 | -H– | M] () – C:\sqmdata12.sqm
[2009/08/14 14:21:25 | 001,850,624 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\win32k.sys
[2009/08/14 14:21:25 | 001,850,624 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\win32k.sys
[2009/08/09 11:42:16 | 000,000,244 | -H– | M] () – C:\sqmnoopt11.sqm
[2009/08/09 11:42:16 | 000,000,232 | -H– | M] () – C:\sqmdata11.sqm
[2009/08/09 10:48:42 | 000,000,244 | -H– | M] () – C:\sqmnoopt10.sqm
[2009/08/09 10:48:42 | 000,000,232 | -H– | M] () – C:\sqmdata10.sqm
[2009/08/09 09:45:21 | 000,000,244 | -H– | M] () – C:\sqmnoopt09.sqm
[2009/08/09 09:45:21 | 000,000,232 | -H– | M] () – C:\sqmdata09.sqm
[2009/08/09 07:40:27 | 000,000,232 | -H– | M] () – C:\sqmdata08.sqm
[2009/08/09 07:40:26 | 000,000,244 | -H– | M] () – C:\sqmnoopt08.sqm
[2009/08/06 19:24:18 | 000,327,896 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\wucltui.dll
[2009/08/06 19:24:18 | 000,327,896 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wucltui.dll
[2009/08/06 19:24:18 | 000,209,632 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuweb.dll
[2009/08/06 19:24:18 | 000,021,728 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\wucltui.dll.mui
[2009/08/06 19:24:12 | 000,015,072 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\wuaucpl.cpl.mui
[2009/08/06 19:24:10 | 000,217,816 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuaucpl.cpl
[2009/08/06 19:24:10 | 000,044,768 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\wups2.dll
[2009/08/06 19:24:10 | 000,035,552 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\wups.dll
[2009/08/06 19:24:10 | 000,035,552 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wups.dll
[2009/08/06 19:24:06 | 000,053,472 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuauclt.exe
[2009/08/06 19:24:06 | 000,015,064 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\wuapi.dll.mui
[2009/08/06 19:24:04 | 000,096,480 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cdm.dll
[2009/08/06 19:24:04 | 000,096,480 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\cdm.dll
[2009/08/06 19:24:00 | 000,017,632 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\wuaueng.dll.mui
[2009/08/06 19:23:54 | 000,575,704 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\wuapi.dll
[2009/08/06 19:23:54 | 000,575,704 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuapi.dll
[2009/08/06 19:23:46 | 001,929,952 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuaueng.dll
[2009/08/06 19:23:46 | 000,274,288 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\mucltui.dll
[2009/08/06 19:23:46 | 000,016,736 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\mucltui.dll.mui
[2009/08/05 22:48:42 | 000,054,752 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\fssfltr_tdi.sys
[2009/08/05 13:18:47 | 000,280,320 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Amporn.jpg
[2009/08/05 10:01:48 | 000,204,800 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\mswebdvd.dll
[2009/08/05 10:01:48 | 000,204,800 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mswebdvd.dll
[2009/08/03 15:07:42 | 000,403,816 | —- | M] () – C:\WINDOWS\System32\OGACheckControl.dll
[2009/08/03 15:07:42 | 000,322,928 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\OGAAddin.dll
[2009/08/03 15:07:42 | 000,230,768 | —- | M] () – C:\WINDOWS\System32\OGAEXEC.exe
[2009/08/02 05:29:42 | 000,029,904 | —- | M] () – C:\WINDOWS\System32\aawservice_2009_08_02_05_29_42.dmp
[2009/07/31 11:05:44 | 001,372,672 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msxml6.dll
[2009/07/31 05:35:42 | 001,172,480 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msxml3.dll
[2009/07/30 20:07:08 | 000,828,852 | —- | M] () – C:\Documents and Settings\All Users\Application Data\LUUnInstall.LiveUpdate
[2009/07/30 18:53:04 | 006,061,540 | —- | M] () – C:\WINDOWS\System32\drivers\Avg\avi7.avg
[2009/07/26 16:44:56 | 000,048,448 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\sirenacm.dll
[2009/07/17 20:01:06 | 000,058,880 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\atl.dll
[2009/07/17 17:22:18 | 001,435,648 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\query.dll
[2009/07/17 17:22:18 | 001,435,648 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\query.dll
[2009/07/16 19:10:39 | 000,005,037 | —- | M] () – C:\I hope you are well in England_.eml
[2009/07/16 18:41:22 | 000,033,647 | —- | M] () – C:\RE_ Think of my family.eml
[2009/07/16 18:40:53 | 000,024,714 | —- | M] () – C:\RE_ Miss u.eml
[2009/07/16 18:40:35 | 000,015,004 | —- | M] () – C:\RE_ Take care yourself.eml
[2009/07/16 18:40:08 | 000,008,427 | —- | M] () – C:\RE_ Dream to u.eml
[2009/07/13 23:43:24 | 010,841,088 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmp.dll
[2009/07/13 23:43:24 | 000,286,208 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmpdxm.dll
[2009/07/10 12:15:46 | 000,306,544 | —- | M] (Microsoft Corporation) – C:\WINDOWS\WLXPGSS.SCR
[2009/07/07 14:33:02 | 000,003,541 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\confirmation Marc[1].htm
[2009/07/05 19:58:53 | 000,316,640 | —- | M] () – C:\WINDOWS\WMSysPr9.prx
[2009/07/05 18:53:22 | 000,000,044 | —- | M] () – C:\WINDOWS\System32\msssc.dll
[2009/07/05 06:14:55 | 000,000,664 | —- | M] () – C:\WINDOWS\System32\d3d9caps.dat
[2009/07/04 23:36:04 | 000,000,376 | —- | M] () – C:\WINDOWS\ODBC.INI
[2009/07/04 03:44:01 | 000,013,824 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009/07/03 15:04:31 | 000,000,552 | —- | M] () – C:\WINDOWS\System32\d3d8caps.dat
[2009/07/02 16:38:22 | 000,000,104 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\Internet.lnk
[2009/06/30 16:23:15 | 000,000,145 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Local Settings\Application Data\fusioncache.dat
[2009/06/30 16:22:59 | 000,001,526 | —- | M] () – C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Utility Tray.lnk
[2009/06/30 16:22:54 | 000,001,738 | —- | M] () – C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Microsoft Office.lnk
[2009/06/30 16:22:47 | 000,000,811 | —- | M] () – C:\Documents and Settings\All Users\Start Menu\Programs\Startup\HP Image Zone Fast Start.lnk
[2009/06/30 16:22:34 | 000,001,821 | —- | M] () – C:\Documents and Settings\All Users\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
[2009/06/30 16:21:20 | 000,001,374 | —- | M] () – C:\WINDOWS\System32\wpa.bak
[2009/06/30 16:06:12 | 000,000,288 | —- | M] () – C:\WINDOWS\System32\$winnt$.inf
[2009/06/30 16:01:54 | 000,004,161 | —- | M] () – C:\WINDOWS\ODBCINST.INI
[2009/06/30 16:00:47 | 000,000,488 | RH– | M] () – C:\WINDOWS\System32\WindowsLogon.manifest
[2009/06/30 16:00:47 | 000,000,488 | RH– | M] () – C:\WINDOWS\System32\logonui.exe.manifest
[2009/06/30 16:00:39 | 000,000,749 | RH– | M] () – C:\WINDOWS\System32\wuaucpl.cpl.manifest
[2009/06/30 16:00:39 | 000,000,749 | RH– | M] () – C:\WINDOWS\WindowsShell.Manifest
[2009/06/30 16:00:39 | 000,000,749 | RH– | M] () – C:\WINDOWS\System32\sapi.cpl.manifest
[2009/06/30 16:00:39 | 000,000,749 | RH– | M] () – C:\WINDOWS\System32\nwc.cpl.manifest
[2009/06/30 16:00:39 | 000,000,749 | RH– | M] () – C:\WINDOWS\System32\ncpa.cpl.manifest
[2009/06/30 16:00:39 | 000,000,749 | RH– | M] () – C:\WINDOWS\System32\cdplayer.exe.manifest
[2009/06/30 15:58:56 | 000,023,348 | —- | M] () – C:\WINDOWS\System32\emptyregdb.dat
[2009/06/29 09:40:16 | 000,057,667 | —- | M] () – C:\WINDOWS\System32\ieuinit.inf
[2009/06/25 09:25:26 | 000,730,112 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\lsasrv.dll
[2009/06/25 09:25:26 | 000,730,112 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\lsasrv.dll
[2009/06/25 09:25:26 | 000,301,568 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kerberos.dll
[2009/06/25 09:25:26 | 000,147,456 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\schannel.dll
[2009/06/25 09:25:26 | 000,056,832 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\secur32.dll
[2009/06/25 09:25:26 | 000,054,272 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wdigest.dll
[2009/06/24 12:18:41 | 000,092,928 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ksecdd.sys
[2009/06/12 13:31:40 | 000,080,896 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\tlntsess.exe
[2009/06/12 13:31:40 | 000,080,896 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tlntsess.exe
[2009/06/12 13:31:39 | 000,076,288 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\telnet.exe
[2009/06/12 13:31:39 | 000,076,288 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\telnet.exe
[2009/06/10 09:19:38 | 002,066,432 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mstscax.dll
[2009/06/10 07:14:49 | 000,132,096 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wkssvc.dll
========== Files Created - No Company Name ==========
[2010/06/03 04:12:58 | 000,016,547 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\OTL.zip
[2010/06/03 04:12:46 | 000,010,489 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\Extras.zip
[2010/06/02 20:07:48 | 000,966,213 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\tdsskiller.zip
[2010/06/02 03:52:37 | 000,293,376 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\39ki73vk GMER.exe
[2010/06/01 08:59:20 | 000,001,821 | —- | C] () – C:\Documents and Settings\All Users\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
[2010/06/01 08:59:20 | 000,001,783 | —- | C] () – C:\Documents and Settings\All Users\Start Menu\Programs\Startup\InterVideo WinCinema Manager.lnk
[2010/06/01 08:59:20 | 000,001,738 | —- | C] () – C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Microsoft Office.lnk
[2010/06/01 08:59:20 | 000,001,526 | —- | C] () – C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Utility Tray.lnk
[2010/06/01 08:59:20 | 000,000,811 | —- | C] () – C:\Documents and Settings\All Users\Start Menu\Programs\Startup\HP Image Zone Fast Start.lnk
[2010/05/31 19:05:33 | 000,000,335 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\Free Criminal Record Check - Page 2 - Cable Forum.url
[2010/05/30 18:15:19 | 000,021,505 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\a-boozer.html
[2010/05/29 11:48:27 | 000,000,317 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\lost google - now searchqu.com.url
[2010/05/29 07:45:28 | 000,000,000 | —- | C] () – C:\WINDOWS\iPlayer.INI
[2010/05/29 04:32:24 | 000,000,792 | —- | C] () – C:\Documents and Settings\All Users\Desktop\InterActual Player.lnk
[2010/05/28 03:44:57 | 000,000,317 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\Thai for Lovers.url
[2010/05/28 03:25:08 | 000,000,210 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\Manee and Friends.url
[2010/05/25 04:16:10 | 000,000,665 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\UK Credit Cards Capital One.url
[2010/05/25 03:46:55 | 000,000,316 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\allfreegames.eu-free-online-games-play-Crash+Bandicoot-45e8beb2f472b5b11031a1f9171bab8b.html.url
[2010/05/25 02:27:07 | 000,029,696 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Basildon Magistrates Court.doc
[2010/05/24 19:02:46 | 000,000,220 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\TV Guide UK TV Listings - UK's No 1 TV Listing site for Freeview, Sky, Virgin Media, Freesat & Tiscali TV.url
[2010/05/24 19:00:48 | 000,000,259 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\Nationwide Building Society Mortgages, Savings, Current Accounts, Banking, Insurance, Credit Cards, Loans, Investments.url
[2010/05/22 21:44:32 | 000,084,197 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\win 7 report compatability.mht
[2010/05/22 20:29:42 | 000,001,928 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Google Earth.lnk
[2010/05/20 10:30:13 | 000,000,158 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\AVForums.com Home.url
[2010/05/16 19:22:15 | 000,000,211 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\eBay - The UK's Online Marketplace.url
[2010/05/16 00:27:14 | 000,000,186 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\My Lifetracks - Lifetracks.com.url
[2010/05/14 23:08:09 | 000,000,243 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\oilcareers.com-worldwide-.url
[2010/05/14 19:26:10 | 000,001,863 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Logitech Webcam Software.lnk
[2010/05/13 16:40:01 | 000,000,803 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Logitech Vid.lnk
[2010/05/12 19:17:57 | 000,009,046 | —- | C] () – C:\WINDOWS\System32\nvinfo.pb
[2010/05/12 19:17:55 | 002,183,470 | —- | C] () – C:\WINDOWS\System32\nvdata.bin
[2010/05/08 05:21:25 | 000,577,660 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\RX8_Stereo_Removal.pdf
[2010/05/04 18:24:26 | 000,002,137 | —- | C] () – C:\Documents and Settings\All Users\Desktop\iTunes.lnk
[2010/04/05 20:10:11 | 000,020,992 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\ben letter to yde.doc
[2010/04/05 06:12:20 | 000,000,762 | —- | C] () – C:\Documents and Settings\All Users\Desktop\RegistryBooster.lnk
[2010/04/04 07:19:25 | 000,516,198 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\95-7510_manual metra stereo.pdf
[2010/04/01 21:51:29 | 096,180,512 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\RX8_workshop_manual.zip
[2010/04/01 05:32:08 | 003,506,285 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\mot.jpg
[2010/03/28 21:57:20 | 000,000,737 | —- | C] () – C:\Documents and Settings\All Users\Desktop\PowerSuite.lnk
[2010/03/16 05:03:45 | 000,000,238 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\Mazda RX-8 Owners Club UK.url
[2010/03/15 16:02:05 | 005,136,305 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\manual RX8 2009 ON.pdf
[2010/02/26 05:02:30 | 000,060,172 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Spidermite[1].pdf
[2010/02/26 05:01:49 | 000,016,618 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\blank grow sheet[1].pdf
[2010/02/23 20:27:12 | 000,000,258 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\The Complete guide to Sick Plants,pH, and Pest troubles! - International Cannagraphic Magazine Forums (2).url
[2010/02/19 04:30:32 | 007,217,077 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\FE-310_Instruction_Manual_EN.pdf
[2010/02/16 19:29:05 | 000,000,880 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Ad-Aware.lnk
[2010/02/08 02:00:26 | 000,022,016 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Ben M.doc
[2010/02/05 14:47:04 | 000,020,992 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Ben Money.doc
[2010/02/04 19:57:03 | 000,000,000 | —- | C] () – C:\WINDOWS\PCFriend.INI
[2010/01/31 19:55:55 | 000,496,605 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Start_up_guide_Business_plan.pdf
[2010/01/31 19:55:25 | 000,482,240 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Start_up_guide_part_2.pdf
[2010/01/31 19:54:03 | 000,589,849 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Start_up_guide_part_1.pdf
[2009/12/14 03:33:56 | 000,000,580 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\My Account - PayPal.url
[2009/12/04 21:22:44 | 118,327,296 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Doc1.doc
[2009/12/01 22:05:41 | 000,000,225 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\TITANIUM.url
[2009/11/30 04:38:54 | 000,024,046 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\TB2Categories000.dat
[2009/11/30 01:10:36 | 000,000,394 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\CATCH-UP.url
[2009/10/27 18:12:01 | 000,027,290 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\UK_Davidman_Diet_2_160x600.gif
[2009/10/26 05:00:21 | 000,257,866 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\e-ticket Invoice No 656065.zip
[2009/10/24 18:38:41 | 000,056,320 | —- | C] () – C:\WINDOWS\System32\iyvu9_32.dll
[2009/10/24 13:11:16 | 000,000,884 | —- | C] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2009/10/24 13:11:16 | 000,000,880 | —- | C] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2009/10/23 03:58:58 | 000,003,541 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\confirmation Marc[1].htm
[2009/10/22 20:36:48 | 001,267,007 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\NOKIA 6233 USER MANUAL.pdf
[2009/10/19 15:29:31 | 000,073,018 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\X2Z6WA[1].pdf
[2009/10/19 03:36:55 | 000,002,958 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\images.jpg
[2009/10/19 03:33:13 | 000,007,621 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\2.jpg
[2009/10/19 03:32:49 | 000,002,805 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\images3.jpg
[2009/10/19 03:32:42 | 000,003,986 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\girlfrend.jpg
[2009/10/19 03:32:34 | 000,007,262 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\imageslove.jpg
[2009/10/19 03:07:26 | 000,000,782 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\ltgreen.jpg
[2009/10/07 01:46:36 | 000,025,752 | —- | C] () – C:\WINDOWS\System32\drivers\LVPr2Mon.sys
[2009/10/07 01:23:08 | 000,013,584 | —- | C] () – C:\WINDOWS\System32\drivers\iKeyLFT2.dll
[2009/09/22 22:17:26 | 000,000,281 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\THAI BART RATE CONVERTER.url
[2009/09/21 19:07:55 | 000,000,424 | -H– | C] () – C:\WINDOWS\tasks\User_Feed_Synchronization-{169FDE4B-E2F9-4890-879E-D1A096EA74F2}.job
[2009/09/20 22:16:35 | 000,082,289 | —- | C] () – C:\WINDOWS\System32\lvcoinst.ini
[2009/09/20 22:16:35 | 000,034,068 | —- | C] () – C:\WINDOWS\System32\Repository.reg
[2009/09/14 05:14:11 | 000,082,652 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7220149 porn.JPG
[2009/09/14 05:14:11 | 000,080,996 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\1.JPG
[2009/09/11 21:14:35 | 000,084,425 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270164 temple of peace started 1984.JPG
[2009/09/11 21:13:44 | 000,085,054 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270163 massive carved temple of peace, 1986 200 builders.JPG
[2009/09/11 21:12:44 | 000,083,022 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\porn kiss dolphin.JPG
[2009/09/11 21:08:59 | 000,081,828 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7220146 crock swimming.JPG
[2009/09/11 21:08:13 | 000,085,709 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\tiger.JPG
[2009/09/11 21:07:20 | 000,083,427 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7220140 crock5.JPG
[2009/09/11 21:06:51 | 000,082,800 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7220139 crock4.JPG
[2009/09/11 21:05:12 | 000,081,453 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7220138 crock 3.JPG
[2009/09/11 21:04:31 | 000,082,207 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7220135 crock 2.JPG
[2009/09/11 21:02:09 | 000,081,716 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7190116 2 house in surin.JPG
[2009/09/11 21:01:29 | 000,084,788 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7190118 house in surin.JPG
[2009/09/11 20:03:40 | 000,084,260 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270155.JPG
[2009/09/11 19:53:07 | 000,082,632 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7250151 me on steps big budda.JPG
[2009/09/11 19:52:05 | 000,083,146 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7250150 big budda.JPG
[2009/09/11 19:50:08 | 000,085,060 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7220148 me.JPG
[2009/09/11 19:49:18 | 000,082,800 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7220139 crok.JPG
[2009/09/11 19:38:00 | 000,080,518 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7180092 014.JPG
[2009/09/11 19:35:34 | 000,079,649 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7300189 013.JPG
[2009/09/11 19:34:10 | 000,081,841 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7300188 012.JPG
[2009/09/11 19:33:31 | 000,083,048 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270185 011.JPG
[2009/09/11 19:32:27 | 000,083,922 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270183 010.JPG
[2009/09/11 19:31:02 | 000,084,744 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270181 09.JPG
[2009/09/11 19:29:46 | 000,085,020 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270178 08.JPG
[2009/09/11 16:43:01 | 000,085,473 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270176 07.JPG
[2009/09/11 16:38:06 | 000,082,526 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270173 06.JPG
[2009/09/11 16:37:29 | 000,086,589 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270171 05.JPG
[2009/09/11 16:36:56 | 000,083,057 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270170 04.JPG
[2009/09/11 16:36:16 | 000,082,965 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270169 03.JPG
[2009/09/11 16:35:21 | 000,082,384 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270168 02.JPG
[2009/09/11 16:34:47 | 000,084,675 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P7270167 01.JPG
[2009/09/08 16:19:31 | 000,000,671 | -H– | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\.picasa.ini
[2009/09/08 15:10:52 | 000,082,756 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\P6200005.JPG
[2009/09/08 15:10:06 | 000,082,759 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\3.JPG
[2009/08/05 13:19:54 | 000,084,458 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Amporn, noi.jpg
[2009/08/05 13:18:39 | 000,280,320 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\Amporn.jpg
[2009/08/03 15:07:42 | 000,403,816 | —- | C] () – C:\WINDOWS\System32\OGACheckControl.dll
[2009/08/03 07:24:46 | 000,000,244 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\youtube.com-gl=GB&hl=en-GB.url
[2009/07/30 20:32:28 | 000,000,472 | —- | C] () – C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job
[2009/07/19 07:22:30 | 000,000,045 | —- | C] () – C:\WINDOWS\System32\RPVersion.ini
[2009/07/08 20:27:20 | 000,000,635 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\Sign In.url
[2009/07/06 03:23:06 | 000,000,224 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\BBC iPlayer - Home.url
[2009/07/05 21:05:30 | 000,000,249 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\home page Take a Break Bingo.url
[2009/07/02 16:38:22 | 000,000,104 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\Internet.lnk
[2009/06/30 18:57:51 | 000,000,969 | —- | C] () – C:\Documents and Settings\Mark M.NONE-5738F18114\My Documents\My Sharing Folders.lnk
[2009/06/30 16:00:39 | 000,000,749 | RH– | C] () – C:\WINDOWS\System32\wuaucpl.cpl.manifest
[2009/06/30 16:00:39 | 000,000,749 | RH– | C] () – C:\WINDOWS\WindowsShell.Manifest
[2009/06/30 16:00:39 | 000,000,749 | RH– | C] () – C:\WINDOWS\System32\sapi.cpl.manifest
[2009/06/30 15:34:58 | 2952,347,648 | —- | C] () – C:\WINDOWS\MEMORY.DMP
[2007/11/15 04:12:23 | 000,000,125 | —- | C] () – C:\WINDOWS\cdplayer.ini
[2007/11/13 02:38:13 | 002,729,472 | —- | C] () – C:\WINDOWS\System32\fun_avcodec.dll
[2006/12/08 03:14:52 | 000,000,000 | —- | C] () – C:\WINDOWS\hpqEmlSz.INI
[2006/12/04 07:51:01 | 000,060,672 | —- | C] () – C:\WINDOWS\PSCMN25.DLL
[2006/12/04 07:51:01 | 000,035,264 | —- | C] () – C:\WINDOWS\PSIMGJ1.DLL
[2006/11/25 11:34:25 | 000,000,214 | —- | C] () – C:\WINDOWS\HP_48BitScanUpdatePatch.ini
[2006/11/02 07:31:40 | 000,000,068 | —- | C] () – C:\WINDOWS\IDMan.INI
[2006/08/27 03:01:37 | 000,000,206 | —- | C] () – C:\WINDOWS\HPGdiPlus.ini
[2006/08/18 06:57:06 | 000,000,464 | —- | C] () – C:\WINDOWS\iScreensaver.ini
[2006/07/29 10:43:33 | 000,000,049 | —- | C] () – C:\WINDOWS\NeroDigital.ini
[2006/07/26 18:07:34 | 000,106,346 | —- | C] () – C:\WINDOWS\VGAsetup.ini
[2006/07/26 18:07:14 | 000,171,122 | —- | C] () – C:\WINDOWS\System32\VGAunistlog.ini
[2006/07/26 16:42:12 | 000,032,768 | —- | C] () – C:\WINDOWS\SIS_LIB.DLL
[2006/07/26 16:33:12 | 000,000,376 | —- | C] () – C:\WINDOWS\ODBC.INI
[2006/07/26 16:33:12 | 000,000,063 | —- | C] () – C:\WINDOWS\mdm.ini
[2006/07/26 16:32:08 | 000,000,000 | —- | C] () – C:\WINDOWS\NSREX.INI
[2006/07/26 16:24:50 | 000,000,044 | —- | C] () – C:\WINDOWS\System32\msssc.dll
[2001/11/19 20:05:18 | 000,003,972 | —- | C] () – C:\WINDOWS\System32\drivers\PciBus.sys
[2001/03/30 22:58:36 | 000,135,168 | —- | C] () – C:\WINDOWS\System32\property.dll
[1999/01/23 03:46:58 | 000,065,536 | —- | C] () – C:\WINDOWS\System32\MSRTEDIT.DLL
[1998/10/11 01:07:38 | 000,088,576 | —- | C] () – C:\WINDOWS\System32\Iticheck.dll
[1998/07/15 22:44:30 | 000,134,656 | —- | C] () – C:\WINDOWS\System32\itijpg2.dll
========== Alternate Data Streams ==========
@Alternate Data Stream - 118 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:5C321E34
< End of report >
marc64
Hi SweetTech,
Will you be around for a while longer? as i noticed you were still on-line, or are you going to call it a day ? now 4.40am in UK. Not sure what your time zone is?, You say Antarctica?
Maybe an idea if you could let me know what times you usually are on the WTT forum, so i can coincide with your being on-line?,
Marc
SweetTech
Hello,
OTL Fix
We need to run an OTL Fix
NEXT:
Java Outdated
Your Java is out of date. Older versions have vulnerabilities that malicious sites can use to exploit and infect your system. Please follow these steps to remove older version Java components and update:
– Java is updated frequently. If you want to be automatically notified of future updates, just turn on the Java Automatic Update feature and you will not have to remember to update when Java releases a new version.
Note:
The Java Quick Starter (JQS.exe) adds a service to improve the initial startup time of Java applets and applications.
To disable the JQS service if you don't want to use it, go to Start > Control Panel > Java > Advanced > Miscellaneous and uncheck the box for Java Quick Starter.
Click Ok and reboot your computer.
NEXT
Clean Java Cache & Temporary Files
NEXT
Security Check
Download Security Check by screen317 from here or here.
OTL Fix
We need to run an OTL Fix
- Please reopen [external image: Posted Image] on your desktop.
- Copy and Paste the following code into the [external image: Posted Image] textbox. Do not include the word "Code"
:Services :OTL O4 - HKLM..\Run: [KernelFaultCheck] File not found [2010/05/31 10:41:12 | 000,998,736 | —- | C] (Kaspersky Lab) – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\TDSSKiller.exe [2010/06/02 20:07:50 | 000,966,213 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\tdsskiller.zip [2010/06/02 03:52:42 | 000,293,376 | —- | M] () – C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\39ki73vk GMER.exe :Commands [purity] [emptytemp] [EMPTYFLASH] [start explorer] [Reboot]
- Push [external image: Posted Image]
- OTL may ask to reboot the machine. Please do so if asked.
- Click [external image: Posted Image].
- A report will open. Copy and Paste that report in your next reply.
- If the machine reboots, the log will be located at C:\_OTL\MovedFiles\mmddyyyy_hhmmss.log, where mmddyyyy_hhmmss is the date of the tool run.
NEXT:
Java Outdated
Your Java is out of date. Older versions have vulnerabilities that malicious sites can use to exploit and infect your system. Please follow these steps to remove older version Java components and update:
- Download the latest version of Java Runtime Environment (JRE) Version 6 and save it to your desktop.
- Look for "JDK 6 Update 20 (JDK or JRE)".
- Click the "Download JRE" button to the right.
- Select your Platform: "Windows".
- Select your Language: "Multi-language".
- Read the License Agreement, and then check the box that says: "Accept License Agreement".
- Click Continue and the page will refresh.
- Under Required Files, check the box for Windows Offline Installation, click the link below it and save the file to your desktop.
- Close any programs you may have running - especially your web browser.
- Check (highlight) any item with Java Runtime Environment (JRE or J2SE) in the name.
- Click the Remove or Change/Remove button and follow the onscreen instructions for the Java uninstaller.
- Repeat as many times as necessary to remove each Java versions.
- Reboot your computer once all Java components are removed.
- Then from your desktop double-click on jre-6u20-windows-i586.exe to install the newest version.
- If using Windows Vista and the installer refuses to launch due to insufficient user permissions, then Run As Administrator.
- When the Java Setup - Welcome window opens, click the Install > button.
- If offered to install a Toolbar, just uncheck the box before continuing unless you want it.
– Java is updated frequently. If you want to be automatically notified of future updates, just turn on the Java Automatic Update feature and you will not have to remember to update when Java releases a new version.
Note:
The Java Quick Starter (JQS.exe) adds a service to improve the initial startup time of Java applets and applications.
To disable the JQS service if you don't want to use it, go to Start > Control Panel > Java > Advanced > Miscellaneous and uncheck the box for Java Quick Starter.
Click Ok and reboot your computer.
NEXT
Clean Java Cache & Temporary Files
- After the install is complete, go into the Control Panel (using Classic View) and double-click the Java Icon. (looks like a coffee cup)
- On the General tab, under Temporary Internet Files, click the Settings button.
- Next, click on the Delete Files button
- There are two options in the window to clear the cache - Leave BOTH CheckedApplications and AppletsTrace and Log Files
- Click OK on Delete Temporary Files Window
Note: This deletes ALL the Downloaded Applications and Applets from the CACHE. - Click OK to leave the Temporary Files Window
- Click OK to leave the Java Control Panel.
NEXT
Security Check
Download Security Check by screen317 from here or here.
- Save it to your Desktop.
- Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
- A Notepad document should open automatically called checkup.txt; please post the contents of that document.
marc64
Hello SweetTech,
Just to recap, with OTL do i need to close virus and spy-ware? and Internet connection?,, Regards Java, there is a cup and saucer icon in the utility tray, clicking on it says there is an update waiting to update from Java, would you suggest clicking the update or stick to the plan and do it as you suggest?. Lastly, i mentioned that there are two drives, when i bought a new PC some time ago i asked for the old hard drive to be fitted into the new PC, is it possible the other could be infected?, when we ran the TTSKiller scan only C:/ drive was scanned, D:/ drive was unchecked, will wait to hear back from you, regards.
SweetTech
You can run the OTL scan while being connected to the internet and having your security programs enabled.
In regards to Java please stick to the plan above.
marc64
Run OTL scan log below, re the Java Updates, having a few problems, says i need the manager or something installed, done that and now a box says file download aborted, not sure why? so will try again,
All processes killed
========== SERVICES/DRIVERS ==========
========== OTL ==========
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\KernelFaultCheck deleted successfully.
C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\TDSSKiller.exe moved successfully.
C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\tdsskiller.zip moved successfully.
C:\Documents and Settings\Mark M.NONE-5738F18114\Desktop\39ki73vk GMER.exe moved successfully.
========== COMMANDS ==========
[EMPTYTEMP]
User: All Users
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes
User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
User: Mark M
User: Mark M.NONE-5738F18114
->Temp folder emptied: 1884236 bytes
->Temporary Internet Files folder emptied: 134628066 bytes
->Java cache emptied: 0 bytes
->Google Chrome cache emptied: 0 bytes
->Flash cache emptied: 4110 bytes
User: MARKM~1~NON
User: NetworkService
->Temp folder emptied: 2688 bytes
->Temporary Internet Files folder emptied: 33170 bytes
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 866064 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 3953439 bytes
Total Files Cleaned = 135.00 mb
[EMPTYFLASH]
User: All Users
User: Default User
->Flash cache emptied: 0 bytes
User: LocalService
User: Mark M
User: Mark M.NONE-5738F18114
->Flash cache emptied: 0 bytes
User: MARKM~1~NON
User: NetworkService
Total Flash Files Cleaned = 0.00 mb
OTL by OldTimer - Version 3.2.5.1 log created on 06032010_183827
Files\Folders moved on Reboot…
File move failed. C:\WINDOWS\temp\logishrd\LVPrcInj01.dll scheduled to be moved on reboot.
Registry entries deleted on Reboot…
Ask AI
AI can make mistakes. Check the cited posts. Archived advice can be out-of-date
Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI