Google Redirect (I think) - 100ksearches.com

When I do a Google Search, whenver I click on one of the links in the results, instead of my browser taking me do that destination, it redirects to another location. I can often see 100kSearches.com in the status bar of my browser when this is occurring. This happens in both Chrome and IE 9.

I am technically competent person, but have not been successful in getting rid of this. I have tried TDDSKiller.exe and it does not find anything infected.

I ran the OTL tool. Here is the output of both text files:

OTL.TXT


OTL logfile created on: 7/16/2011 1:58:40 PM - Run 1
OTL by OldTimer - Version 3.2.26.1 Folder = C:\Users\Dave\Downloads
64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

7.98 Gb Total Physical Memory | 4.27 Gb Available Physical Memory | 53.45% Memory free
15.96 Gb Paging File | 9.55 Gb Available in Paging File | 59.83% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 931.41 Gb Total Space | 586.98 Gb Free Space | 63.02% Space Free | Partition Type: NTFS
Drive E: | 222.78 Gb Total Space | 10.12 Gb Free Space | 4.54% Space Free | Partition Type: NTFS
Drive F: | 10.00 Gb Total Space | 7.34 Gb Free Space | 73.36% Space Free | Partition Type: NTFS

Computer Name: DAVE-PC | User Name: Dave | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Users\Dave\Downloads\OTL.exe (OldTimer Tools)
PRC - C:\Users\Dave\Desktop\killit.com (Kaspersky Lab ZAO)
PRC - C:\Program Files (x86)\Webroot\WebrootSecurity\WRConsumerService.exe (Webroot Software, Inc. )
PRC - C:\Users\Dave\AppData\Local\Temp\282111.tmp\$JNBRIDGE_INSTALL_FOLDER\CF8DotNetsvc.exe ()
PRC - C:\Users\Dave\AppData\Local\Google\Update\1.3.21.57\GoogleCrashHandler.exe (Google Inc.)
PRC - C:\csvn\bin\httpd.exe (Apache Software Foundation)
PRC - C:\Program Files (x86)\Webroot\WebrootSecurity\SpySweeperUI.exe (Webroot Software, Inc.)
PRC - C:\Program Files (x86)\Norton 360\Engine\5.1.0.29\ccsvchst.exe (Symantec Corporation)
PRC - C:\Program Files (x86)\DynDNS Updater\DynUpSvc.exe (Dynamic Network Services, Inc.)
PRC - C:\Program Files (x86)\DynDNS Updater\DynTray.exe (Dynamic Network Services, Inc.)
PRC - C:\ColdFusion9\db\slserver54\bin\swsoc.exe ()
PRC - C:\ColdFusion9\db\slserver54\bin\swagent.exe ()
PRC - C:\ColdFusion9\db\slserver54\bin\swstrtr.exe ()
PRC - C:\ColdFusion9\solr\solr.exe (Acresso)
PRC - C:\Program Files (x86)\Webroot\WebrootSecurity\SpySweeper.exe (Webroot Software, Inc. (www.webroot.com))
PRC - C:\Program Files (x86)\Webroot\WebrootSecurity\SSU.exe (Webroot Software, Inc. (www.webroot.com))
PRC - C:\Program Files (x86)\Belkin\Router Setup and Monitor\BelkinService.exe (Affinegy, Inc.)
PRC - C:\Program Files (x86)\Belkin\Router Setup and Monitor\BelkinSetup.exe (Affinegy, Inc.)
PRC - C:\Program Files (x86)\Belkin\Router Setup and Monitor\BelkinRouterMonitor.exe (Affinegy, Inc.)
PRC - C:\Program Files (x86)\Windows Sidebar\sidebar.exe (Microsoft Corporation)
PRC - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (Renesas Electronics Corporation)
PRC - C:\Program Files (x86)\Common Files\LogiShrd\LVMVFM\LVPrS64H.exe (Logitech Inc.)
PRC - C:\ColdFusion9\verity\k2\_nti40\bin\k2server.exe (Verity, Inc.)
PRC - C:\ColdFusion9\verity\k2\_nti40\bin\k2index.exe (Verity, Inc.)
PRC - C:\ColdFusion9\verity\k2\_nti40\bin\k2admin.exe (Verity, Inc.)
PRC - C:\JRun4\verity\k2\_nti40\bin\k2server.exe (Verity, Inc.)
PRC - C:\JRun4\verity\k2\_nti40\bin\k2index.exe (Verity, Inc.)
PRC - C:\JRun4\verity\k2\_nti40\bin\k2admin.exe (Verity, Inc.)
PRC - C:\ColdFusion9\jnbridge\CFDotNetsvc.exe ()


========== Modules (SafeList) ==========

MOD - C:\Users\Dave\Downloads\OTL.exe (OldTimer Tools)
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll (Microsoft Corporation)


========== Win32 Services (SafeList) ==========

SRV:64bit: - (CSVNConsole) – C:\Windows\SysNative\java.exe (Sun Microsystems, Inc.)
SRV:64bit: - (MySQL) – C:\Program Files\MySQL\MySQL Server 5.5\bin\mysqld.exe ()
SRV:64bit: - (IISADMIN) – C:\Windows\SysNative\inetsrv\inetinfo.exe (Microsoft Corporation)
SRV:64bit: - (wlcrasvc) – C:\Program Files\Windows Live\Mesh\wlcrasvc.exe (Microsoft Corporation)
SRV:64bit: - (LVPrcS64) – C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe (Logitech Inc.)
SRV:64bit: - (WinDefend) – C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV:64bit: - (AppMgmt) – C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
SRV - (WRConsumerService) – C:\Program Files (x86)\Webroot\WebrootSecurity\WRConsumerService.exe (Webroot Software, Inc. )
SRV - (ColdFusion 8 ODBC Server) – C:\JRun4\servers\cfusion\cfusion-ear\cfusion-war\WEB-INF\cfusion\db\slserver54\bin\swstrtr.exe ()
SRV - (ColdFusion 8 ODBC Agent) – C:\JRun4\servers\cfusion\cfusion-ear\cfusion-war\WEB-INF\cfusion\db\slserver54\bin\swagent.exe ()
SRV - (ColdFusion 8 .NET Service) – C:\Users\Dave\AppData\Local\Temp\282111.tmp\$JNBRIDGE_INSTALL_FOLDER\CF8DotNetsvc.exe ()
SRV - (LMIMaint) – C:\Program Files (x86)\LogMeIn\x64\RaMaint.exe (LogMeIn, Inc.)
SRV - (LMIGuardianSvc) – C:\Program Files (x86)\LogMeIn\x64\LMIGuardianSvc.exe (LogMeIn, Inc.)
SRV - (MailService) – C:\Program Files (x86)\SmarterTools\SmarterMail\Service\MailService.exe ()
SRV - (SMWebSvr) – C:\Program Files (x86)\SmarterTools\SmarterMail\Web Server\SMWebSvr.exe (SmarterTools Inc)
SRV - (CollabNetSubversionServer) – C:\csvn\bin\httpd.exe (Apache Software Foundation)
SRV - (CSVNConsole) – C:\Windows\SysWow64\java.exe (Sun Microsystems, Inc.)
SRV - (N360) – C:\Program Files (x86)\Norton 360\Engine\5.1.0.29\ccSvcHst.exe (Symantec Corporation)
SRV - (DynDNS Updater) – C:\Program Files (x86)\DynDNS Updater\DynUpSvc.exe (Dynamic Network Services, Inc.)
SRV - (ColdFusion 9 ODBC Agent) – C:\ColdFusion9\db\slserver54\bin\swagent.exe ()
SRV - (ColdFusion 9 ODBC Server) – C:\ColdFusion9\db\slserver54\bin\swstrtr.exe ()
SRV - (CF9Solr) – C:\ColdFusion9\solr\solr.exe (Acresso)
SRV - (WysePocketCloud) – C:\Program Files (x86)\Wyse\PocketCloud Windows Companion\PocketCloudService.exe ()
SRV - (WebrootSpySweeperService) – C:\Program Files (x86)\Webroot\WebrootSecurity\SpySweeper.exe (Webroot Software, Inc. (www.webroot.com))
SRV - (AffinegyService) – C:\Program Files (x86)\Belkin\Router Setup and Monitor\BelkinService.exe (Affinegy, Inc.)
SRV - (LogMeIn) – C:\Program Files (x86)\LogMeIn\x64\LogMeIn.exe (LogMeIn, Inc.)
SRV - (WAS) – C:\Windows\SysWOW64\inetsrv\iisw3adm.dll (Microsoft Corporation)
SRV - (W3SVC) – C:\Windows\SysWOW64\inetsrv\iisw3adm.dll (Microsoft Corporation)
SRV - (AppHostSvc) – C:\Windows\SysWOW64\inetsrv\apphostsvc.dll (Microsoft Corporation)
SRV - (clr_optimization_v4.0.30319_32) – C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (ColdFusion 9 Application Server) – C:\ColdFusion9\runtime\bin\jrunsvc.exe (Macromedia Inc.)
SRV - (clr_optimization_v2.0.50727_32) – C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
SRV - (ColdFusion 9 Search Server) – C:\ColdFusion9\verity\k2\_nti40\bin\k2admin.exe (Verity, Inc.)
SRV - (Macromedia JRun CFusion Server) – C:\JRun4\bin\jrunsvc.exe (Macromedia Inc.)
SRV - (Macromedia JRun Admin Server) – C:\JRun4\bin\jrunsvc.exe (Macromedia Inc.)
SRV - (ColdFusion 8 Search Server) – C:\JRun4\verity\k2\_nti40\bin\k2admin.exe (Verity, Inc.)
SRV - (ColdFusion 9 .NET Service) – C:\ColdFusion9\jnbridge\CFDotNetsvc.exe ()


========== Driver Services (SafeList) ==========

DRV:64bit: - (LMIRfsClientNP) – C:\Windows\SysNative\LMIRfsClientNP.dll (LogMeIn, Inc.)
DRV:64bit: - (SymEvent) – C:\Windows\SysNative\drivers\SYMEVENT64x86.SYS (Symantec Corporation)
DRV:64bit: - (SRTSP) – C:\Windows\SysNative\drivers\N360x64\0501000.01D\srtsp64.sys (Symantec Corporation)
DRV:64bit: - (SRTSPX) Symantec Real Time Storage Protection (PEL) – C:\Windows\SysNative\drivers\N360x64\0501000.01D\srtspx64.sys (Symantec Corporation)
DRV:64bit: - (ssidrv) – C:\Windows\SysNative\drivers\ssidrv.sys (Webroot Software, Inc. (www.webroot.com))
DRV:64bit: - (ssfs0bbc) – C:\Windows\SysNative\drivers\ssfs0bbc.sys (Webroot Software, Inc. (www.webroot.com))
DRV:64bit: - (SymNetS) – C:\Windows\SysNative\drivers\N360x64\0501000.01D\symnets.sys (Symantec Corporation)
DRV:64bit: - (SymEFA) – C:\Windows\SysNative\drivers\N360x64\0501000.01D\symefa64.sys (Symantec Corporation)
DRV:64bit: - (amdsata) – C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (amdxata) – C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:64bit: - (SymDS) – C:\Windows\SysNative\drivers\N360x64\0501000.01D\symds64.sys (Symantec Corporation)
DRV:64bit: - (VClone) – C:\Windows\SysNative\drivers\VClone.sys (Elaborate Bytes AG)
DRV:64bit: - (LMIRfsDriver) – C:\Windows\SysNative\drivers\LMIRfsDriver.sys (LogMeIn, Inc.)
DRV:64bit: - (lmimirr) – C:\Windows\SysNative\drivers\lmimirr.sys (LogMeIn, Inc.)
DRV:64bit: - (dc3d) MS Hardware Device Detection Driver (USB) – C:\Windows\SysNative\drivers\dc3d.sys (Microsoft Corporation)
DRV:64bit: - (Point64) – C:\Windows\SysNative\drivers\point64.sys (Microsoft Corporation)
DRV:64bit: - (NuidFltr) – C:\Windows\SysNative\drivers\nuidfltr.sys (Microsoft Corporation)
DRV:64bit: - (ElbyCDIO) – C:\Windows\SysNative\drivers\ElbyCDIO.sys (Elaborate Bytes AG)
DRV:64bit: - (HpSAMD) – C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (TsUsbFlt) – C:\Windows\SysNative\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV:64bit: - (RdpVideoMiniport) – C:\Windows\SysNative\drivers\rdpvideominiport.sys (Microsoft Corporation)
DRV:64bit: - (SymIRON) – C:\Windows\SysNative\drivers\N360x64\0501000.01D\ironx64.sys (Symantec Corporation)
DRV:64bit: - (ATHDFU) – C:\Windows\SysNative\drivers\AthDfu.sys (Windows ® Win 7 DDK provider)
DRV:64bit: - (RTL8167) – C:\Windows\SysNative\drivers\Rt64win7.sys (Realtek )
DRV:64bit: - (MEIx64) Intel® – C:\Windows\SysNative\drivers\HECIx64.sys (Intel Corporation)
DRV:64bit: - (nusb3xhc) – C:\Windows\SysNative\drivers\nusb3xhc.sys (Renesas Electronics Corporation)
DRV:64bit: - (nusb3hub) – C:\Windows\SysNative\drivers\nusb3hub.sys (Renesas Electronics Corporation)
DRV:64bit: - (fssfltr) – C:\Windows\SysNative\drivers\fssfltr.sys (Microsoft Corporation)
DRV:64bit: - (mv91xx) – C:\Windows\SysNative\drivers\mv91xx.sys (Marvell Semiconductor, Inc.)
DRV:64bit: - (GEARAspiWDM) – C:\Windows\SysNative\drivers\GEARAspiWDM.sys (GEAR Software Inc.)
DRV:64bit: - (RsFx0150) – C:\Windows\SysNative\drivers\RsFx0150.sys (Microsoft Corporation)
DRV:64bit: - (LVUVC64) Logitech QuickCam E3500(UVC) – C:\Windows\SysNative\drivers\lvuvc64.sys (Logitech Inc.)
DRV:64bit: - (LVRS64) – C:\Windows\SysNative\drivers\lvrs64.sys (Logitech Inc.)
DRV:64bit: - (LVPr2Mon) – C:\Windows\SysNative\drivers\LVPr2M64.sys ()
DRV:64bit: - (LVPr2M64) – C:\Windows\SysNative\drivers\LVPr2M64.sys ()
DRV:64bit: - (amdsbs) – C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (LSI_SAS2) – C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:64bit: - (stexstor) – C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:64bit: - (Ntfs) – C:\Windows\SysNative\wbem\ntfs.mof ()
DRV:64bit: - (ebdrv) – C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) – C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (b57nd60a) – C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (hcw85cir) – C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV - (NAVEX15) – C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.0.0.125\Definitions\VirusDefs\20110716.003\ex64.sys (Symantec Corporation)
DRV - (NAVENG) – C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.0.0.125\Definitions\VirusDefs\20110716.003\eng64.sys (Symantec Corporation)
DRV - (IDSVia64) – C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.0.0.125\Definitions\IPSDefs\20110715.032_18e\IDSviA64.sys (Symantec Corporation)
DRV - (BHDrvx64) – C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.0.0.125\Definitions\BASHDefs\20110701.001\BHDrvx64.sys (Symantec Corporation)
DRV - (eeCtrl) – C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys (Symantec Corporation)
DRV - (EraserUtilRebootDrv) – C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys (Symantec Corporation)
DRV - (LMIInfo) – C:\Program Files (x86)\LogMeIn\x64\rainfo.sys (LogMeIn, Inc.)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0B C3 5D 07 A7 F0 CB 01 [binary data]
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..network.proxy.type: 0

FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MIF5BA~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\4.0.60531.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MIF5BA~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MIF5BA~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.57\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.57\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/GoogleTalkPlugin: C:\Users\Dave\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/O3DPlugin: C:\Users\Dave\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Dave\AppData\Local\Google\Update\1.3.21.57\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Dave\AppData\Local\Google\Update\1.3.21.57\npGoogleUpdate3.dll (Google Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{BBDA0591-3099-440a-AA10-41764D9DB4DB}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.0.0.125\IPSFFPlgn\ [2011/07/09 03:24:40 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.0.0.125\coFFPlgn_2011_7_0_8 [2011/07/16 12:49:25 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\html5video [2011/04/21 19:37:15 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{6904342A-8307-11DF-A508-4AE2DFD72085}: C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\wpa [2011/04/21 19:37:15 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 4.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2011/06/20 01:26:11 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 4.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2011/07/03 20:26:36 | 000,000,000 | —D | M]

[2011/04/17 17:56:42 | 000,000,000 | —D | M] (No name found) – C:\Users\Dave\AppData\Roaming\Mozilla\Extensions
[2011/07/03 20:26:38 | 000,000,000 | —D | M] (No name found) – C:\Program Files (x86)\Mozilla Firefox\extensions
[2011/07/03 20:26:38 | 000,000,000 | —D | M] (Java Console) – C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}
File not found (No name found) –
File not found (No name found) – C:\PROGRAMDATA\NORTON\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.0.0.125\COFFPLGN
[2011/07/09 03:24:40 | 000,000,000 | —D | M] (Symantec IPS) – C:\PROGRAMDATA\NORTON\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.0.0.125\IPSFFPLGN
[2011/06/20 01:26:10 | 000,142,296 | —- | M] (Mozilla Foundation) – C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2011/05/04 04:52:23 | 000,476,904 | —- | M] (Sun Microsystems, Inc.) – C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll
[2010/01/01 03:00:00 | 000,002,252 | —- | M] () – C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml

O1 HOSTS File: ([2011/07/16 12:50:41 | 000,000,865 | —- | M]) - C:\Windows\SysNative\drivers\etc\HOSTS
O1 - Hosts: 127.0.0.1 cfadmin
O1 - Hosts: 127.0.0.1 ita_prod
O2:64bit: - BHO: (SnagIt Toolbar Loader) - {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:\Program Files (x86)\TechSmith\SnagIt 8\DLLx64\SnagItBHO64.dll (TechSmith Corporation)
O2 - BHO: (SnagIt Toolbar Loader) - {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:\Program Files (x86)\TechSmith\SnagIt 8\SnagItBHO.dll (TechSmith Corporation)
O2 - BHO: (DivX Plus Web Player HTML5 ) - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
O2 - BHO: (DivX HiQ) - {593DDEC6-7468-4cdd-90E1-42DADAA222E9} - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
O2 - BHO: (Symantec NCO BHO) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360\Engine\5.1.0.29\coieplg.dll (Symantec Corporation)
O2 - BHO: (Symantec Intrusion Prevention) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton 360\Engine\5.1.0.29\ips\ipsbho.dll (Symantec Corporation)
O3 - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine\5.1.0.29\coieplg.dll (Symantec Corporation)
O3 - HKLM\..\Toolbar: (SnagIt) - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files (x86)\TechSmith\SnagIt 8\SnagItIEAddin.dll (TechSmith Corporation)
O3 - HKCU\..\Toolbar\WebBrowser: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine\5.1.0.29\coieplg.dll (Symantec Corporation)
O4:64bit: - HKLM..\Run: [IntelliPoint] c:\Program Files\Microsoft IntelliPoint\ipoint.exe (Microsoft Corporation)
O4:64bit: - HKLM..\Run: [itype] c:\Program Files\Microsoft IntelliType Pro\itype.exe (Microsoft Corporation)
O4:64bit: - HKLM..\Run: [LogMeIn GUI] C:\Program Files (x86)\LogMeIn\x64\LogMeInSystray.exe (LogMeIn, Inc.)
O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [InstaLAN] C:\Program Files (x86)\Belkin\Router Setup and Monitor\BelkinRouterMonitor.exe (Affinegy, Inc.)
O4 - HKLM..\Run: [NUSB3MON] C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (Renesas Electronics Corporation)
O4 - HKLM..\Run: [SpySweeper] C:\Program Files (x86)\Webroot\WebrootSecurity\SpySweeperUI.exe (Webroot Software, Inc.)
O4 - HKCU..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\sidebar.exe (Microsoft Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000001 - File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000002 - File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000003 - File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000004 - File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000005 - File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000006 - File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000007 - File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000008 - File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000009 - File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000010 - File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000011 - File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - File not found
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O18:64bit: - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\wlpg {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\x-atng {7e8717b0-d862-11d5-8c9e-00010304f989} - Reg Error: Key error. File not found
O18 - Protocol\Handler\x-atng {7e8717b0-d862-11d5-8c9e-00010304f989} - C:\Program Files (x86)\Fidelity Investments\Fidelity Active Trader\System\atngprot.dll (Fidelity Investments)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/09/18 16:43:36 | 000,000,024 | —- | M] () - E:\autoexec.bat – [ NTFS ]
O33 - MountPoints2\{dffbaede-5ca4-11e0-a0df-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{dffbaede-5ca4-11e0-a0df-806e6f6e6963}\Shell\AutoRun\command - "" = D:\Belkin_Setup_and_Monitor_Install.exe
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35:64bit: - HKLM\..comfile [open] – "%1" %*
O35:64bit: - HKLM\..exefile [open] – "%1" %*
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37:64bit: - HKLM\…com [@ = comfile] – "%1" %*
O37:64bit: - HKLM\…exe [@ = exefile] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*

NetSvcs:64bit: AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)

Drivers32:64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32:64bit: vidc.i420 - lvcod64.dll (Logitech Inc.)
Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
Drivers32: vidc.DIVX - C:\Windows\SysWow64\DivX.dll (DivX, Inc.)
Drivers32: VIDC.FFDS - ff_vfw.dll File not found
Drivers32: vidc.i420 - C:\Windows\SysWow64\lvcodec2.dll (Logitech Inc.)
Drivers32: vidc.yv12 - C:\Windows\SysWow64\DivX.dll (DivX, Inc.)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

========== Files/Folders - Created Within 30 Days ==========

File not found – C:\Windows\SysNative\consrv.dll
[2011/07/16 12:44:52 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Webroot
[2011/07/16 12:44:43 | 000,000,000 | —D | C] – C:\Program Files (x86)\MSSOAP
[2011/07/16 12:44:43 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\MSSoap
[2011/07/16 12:44:29 | 001,563,024 | —- | C] (Webroot Software, Inc.) – C:\Windows\WRSetup.dll
[2011/07/16 12:44:29 | 000,000,000 | —D | C] – C:\Users\Dave\AppData\Roaming\Webroot
[2011/07/16 12:44:29 | 000,000,000 | —D | C] – C:\ProgramData\Webroot
[2011/07/16 12:44:29 | 000,000,000 | —D | C] – C:\Program Files (x86)\Webroot
[2011/07/16 12:28:32 | 000,000,000 | —D | C] – C:\Users\Dave\AppData\Local\{4FAAD9B1-D51F-4775-89F1-B4E990115E9A}
[2011/07/16 12:18:52 | 000,000,000 | —D | C] – C:\Windows\pss
[2011/07/16 07:45:35 | 000,000,000 | —D | C] – C:\Users\Dave\AppData\Local\{F1282163-9D48-4305-9194-08426695283A}
[2011/07/15 19:45:13 | 000,000,000 | —D | C] – C:\Users\Dave\AppData\Local\{B73F5785-7104-450D-A614-39E0C543DD99}
[2011/07/15 07:44:51 | 000,000,000 | —D | C] – C:\Users\Dave\AppData\Local\{59F9CDFF-DEC6-4E36-BC66-705B6B66964F}
[2011/07/14 19:44:29 | 000,000,000 | —D | C] – C:\Users\Dave\AppData\Local\{650EF58C-23E5-4959-BF2C-7F4049452EC8}
[2011/07/14 07:44:07 | 000,000,000 | —D | C] – C:\Users\Dave\AppData\Local\{33907C26-9434-42B1-81CC-224D3212F36C}
[2011/07/13 20:42:39 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\Clients
[2011/07/13 19:43:46 | 000,000,000 | —D | C] – C:\Users\Dave\AppData\Local\{213E26A2-D6AB-409A-B715-FA63E12873E3}
[2011/07/13 07:43:21 | 000,000,000 | —D | C] – C:\Users\Dave\AppData\Local\{7543A42D-3FB6-4573-9054-E050A3FCD19E}
[2011/07/12 14:35:24 | 000,000,000 | —D | C] – C:\Users\Dave\AppData\Roaming\ImgBurn
[2011/07/12 14:33:09 | 000,000,000 | —D | C] – C:\Users\Dave\AppData\Local\{1D7437A6-9228-4B43-B8CE-808F5E1AC8CA}
[2011/07/12 14:26:47 | 000,000,000 | —D | C] – C:\Program Files (x86)\ImgBurn
[2011/07/12 14:16:40 | 000,000,000 | —D | C] – C:\Program Files (x86)\HiJackThis
[2011/07/12 12:46:11 | 000,000,000 | R–D | C] – C:\Users\Dave\Documents\Scanned Documents
[2011/07/12 12:46:09 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\Fax
[2011/07/12 02:32:32 | 000,000,000 | —D | C] – C:\Users\Dave\AppData\Local\{D6228E5D-FD5A-48F6-AC59-DB62E65855AC}
[2011/07/11 16:58:52 | 001,436,976 | —- | C] (Kaspersky Lab ZAO) – C:\Users\Dave\Desktop\killit.com
[2011/07/11 14:32:10 | 000,000,000 | —D | C] – C:\Users\Dave\AppData\Local\{BCE9A989-78AB-442B-AF06-34761C2AD357}
[2011/07/11 02:31:34 | 000,000,000 | —D | C] – C:\Users\Dave\AppData\Local\{F87C3DF6-43AF-4AB7-A810-55CFF705BECA}
[2011/07/10 15:27:42 | 000,000,000 | —D | C] – C:\Users\Dave\AppData\Roaming\Malwarebytes
[2011/07/10 15:27:01 | 000,000,000 | —D | C] – C:\ProgramData\Malwarebytes
[2011/07/10 15:26:59 | 000,000,000 | —D | C] – C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2011/07/10 14:31:23 | 000,000,000 | —D | C] – C:\Users\Dave\AppData\Local\{30916497-B4EB-44E0-8CEC-839026C3B2C7}
[2011/07/10 00:59:22 | 000,000,000 | —D | C] – C:\Users\Dave\AppData\Local\{8708B59C-1507-45B1-BC46-79534E7C3CA7}
[2011/07/09 15:24:30 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
[2011/07/09 15:23:53 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\DESIGNER
[2011/07/09 15:21:50 | 000,000,000 | —D | C] – C:\Program Files\Microsoft Office
[2011/07/09 15:21:14 | 000,000,000 | —D | C] – C:\Program Files (x86)\Microsoft Analysis Services
[2011/07/09 15:20:17 | 000,000,000 | RH-D | C] – C:\MSOCache
[2011/07/09 15:19:51 | 000,000,000 | —D | C] – C:\Windows\system64
[2011/07/09 12:59:00 | 000,000,000 | —D | C] – C:\Users\Dave\AppData\Local\{F10DCBB4-1A3D-4E42-B73D-FD6E2C4FC315}
[2011/07/08 22:43:23 | 000,000,000 | —D | C] – C:\Users\Dave\AppData\Local\{71EDA8B7-30A7-4D44-8EC3-D11B100617EF}
[2011/07/08 22:27:38 | 003,695,416 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieapfltr.dat
[2011/07/08 22:27:38 | 003,695,416 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ieapfltr.dat
[2011/07/08 22:27:38 | 002,303,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\jscript9.dll
[2011/07/08 22:27:38 | 001,797,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\jscript9.dll
[2011/07/08 22:27:38 | 001,492,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\inetcpl.cpl
[2011/07/08 22:27:38 | 001,427,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\inetcpl.cpl
[2011/07/08 22:27:38 | 000,818,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\jscript.dll
[2011/07/08 22:27:38 | 000,716,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\jscript.dll
[2011/07/08 22:27:38 | 000,697,344 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msfeeds.dll
[2011/07/08 22:27:38 | 000,603,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\vbscript.dll
[2011/07/08 22:27:38 | 000,580,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msfeeds.dll
[2011/07/08 22:27:38 | 000,534,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ieapfltr.dll
[2011/07/08 22:27:38 | 000,452,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dxtmsft.dll
[2011/07/08 22:27:38 | 000,448,512 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\html.iec
[2011/07/08 22:27:38 | 000,434,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieapfltr.dll
[2011/07/08 22:27:38 | 000,367,104 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\html.iec
[2011/07/08 22:27:38 | 000,353,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dxtmsft.dll
[2011/07/08 22:27:38 | 000,282,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dxtrans.dll
[2011/07/08 22:27:38 | 000,267,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ieaksie.dll
[2011/07/08 22:27:38 | 000,248,320 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ieui.dll
[2011/07/08 22:27:38 | 000,236,544 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\url.dll
[2011/07/08 22:27:38 | 000,231,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\url.dll
[2011/07/08 22:27:38 | 000,227,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieaksie.dll
[2011/07/08 22:27:38 | 000,223,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dxtrans.dll
[2011/07/08 22:27:38 | 000,222,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msls31.dll
[2011/07/08 22:27:38 | 000,197,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msrating.dll
[2011/07/08 22:27:38 | 000,176,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieui.dll
[2011/07/08 22:27:38 | 000,173,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ieUnatt.exe
[2011/07/08 22:27:38 | 000,165,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iexpress.exe
[2011/07/08 22:27:38 | 000,163,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieakui.dll
[2011/07/08 22:27:38 | 000,163,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ieakui.dll
[2011/07/08 22:27:38 | 000,162,304 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msrating.dll
[2011/07/08 22:27:38 | 000,161,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msls31.dll
[2011/07/08 22:27:38 | 000,160,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wextract.exe
[2011/07/08 22:27:38 | 000,160,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ieakeng.dll
[2011/07/08 22:27:38 | 000,152,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wextract.exe
[2011/07/08 22:27:38 | 000,150,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iexpress.exe
[2011/07/08 22:27:38 | 000,149,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\occache.dll
[2011/07/08 22:27:38 | 000,145,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iepeers.dll
[2011/07/08 22:27:38 | 000,142,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieUnatt.exe
[2011/07/08 22:27:38 | 000,135,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\IEAdvpack.dll
[2011/07/08 22:27:38 | 000,130,560 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieakeng.dll
[2011/07/08 22:27:38 | 000,123,392 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\occache.dll
[2011/07/08 22:27:38 | 000,118,784 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iepeers.dll
[2011/07/08 22:27:38 | 000,114,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\admparse.dll
[2011/07/08 22:27:38 | 000,111,616 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iesysprep.dll
[2011/07/08 22:27:38 | 000,110,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\IEAdvpack.dll
[2011/07/08 22:27:38 | 000,103,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\inseng.dll
[2011/07/08 22:27:38 | 000,101,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\admparse.dll
[2011/07/08 22:27:38 | 000,096,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mshtmled.dll
[2011/07/08 22:27:38 | 000,091,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SetIEInstalledDate.exe
[2011/07/08 22:27:38 | 000,089,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RegisterIEPKEYs.exe
[2011/07/08 22:27:38 | 000,089,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ie4uinit.exe
[2011/07/08 22:27:38 | 000,086,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iesysprep.dll
[2011/07/08 22:27:38 | 000,085,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iesetup.dll
[2011/07/08 22:27:38 | 000,082,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\icardie.dll
[2011/07/08 22:27:38 | 000,078,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\inseng.dll
[2011/07/08 22:27:38 | 000,076,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\tdc.ocx
[2011/07/08 22:27:38 | 000,076,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\SetIEInstalledDate.exe
[2011/07/08 22:27:38 | 000,074,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RegisterIEPKEYs.exe
[2011/07/08 22:27:38 | 000,074,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iesetup.dll
[2011/07/08 22:27:38 | 000,074,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ie4uinit.exe
[2011/07/08 22:27:38 | 000,072,704 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mshtmled.dll
[2011/07/08 22:27:38 | 000,066,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\icardie.dll
[2011/07/08 22:27:38 | 000,065,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\pngfilt.dll
[2011/07/08 22:27:38 | 000,063,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\tdc.ocx
[2011/07/08 22:27:38 | 000,054,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\pngfilt.dll
[2011/07/08 22:27:38 | 000,049,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\imgutil.dll
[2011/07/08 22:27:38 | 000,048,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mshtmler.dll
[2011/07/08 22:27:38 | 000,048,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mshtmler.dll
[2011/07/08 22:27:38 | 000,039,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iernonce.dll
[2011/07/08 22:27:38 | 000,035,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\imgutil.dll
[2011/07/08 22:27:38 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iernonce.dll
[2011/07/08 22:27:38 | 000,030,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\licmgr10.dll
[2011/07/08 22:27:38 | 000,023,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\licmgr10.dll
[2011/07/08 22:27:38 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mshta.exe
[2011/07/08 22:27:38 | 000,010,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msfeedssync.exe
[2011/07/08 22:27:38 | 000,010,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msfeedssync.exe
[2011/07/08 22:20:20 | 000,000,000 | —D | C] – C:\Windows\SysNative\SPReview
[2011/07/08 22:19:07 | 000,000,000 | —D | C] – C:\Windows\SysNative\EventProviders
[2011/07/08 10:43:01 | 000,000,000 | —D | C] – C:\Users\Dave\AppData\Local\{C2605BE0-9107-4D5B-9D87-4FA2E00EB5CD}
[2011/07/07 22:42:39 | 000,000,000 | —D | C] – C:\Users\Dave\AppData\Local\{EE11A4C3-E5AE-475B-9385-88F8645084F1}
[2011/07/07 10:42:18 | 000,000,000 | —D | C] – C:\Users\Dave\AppData\Local\{15E5ADC8-28DA-4A42-AE83-62963561A556}
[2011/07/06 22:41:55 | 000,000,000 | —D | C] – C:\Users\Dave\AppData\Local\{55C64B24-8944-498C-AC91-321E6CC76C53}
[2011/07/06 10:41:33 | 000,000,000 | —D | C] – C:\Users\Dave\AppData\Local\{FC33AD5D-E8A1-4D95-81E1-29CE7C85F8C9}
[2011/07/05 22:41:11 | 000,000,000 | —D | C] – C:\Users\Dave\AppData\Local\{338BCE08-C442-48F2-8C5F-161259F4CDA1}
[2011/07/05 10:40:55 | 000,000,000 | —D | C] – C:\Users\Dave\AppData\Local\{258F24D8-4991-40BC-AF83-D7179564A666}
[2011/07/04 22:41:29 | 000,000,000 | —D | C] – C:\Users\Dave\AppData\Local\{AD8D7155-EBD3-4F87-A836-D87D1CC7F7C3}
[2011/07/04 10:41:18 | 000,000,000 | —D | C] – C:\Users\Dave\AppData\Local\{B6A77860-4672-4470-BF1D-43EC0131522C}
[2011/07/03 22:40:55 | 000,000,000 | —D | C] – C:\Users\Dave\AppData\Local\{2EC55654-B46B-44E6-A006-622C72D6557B}
[2011/07/03 20:27:02 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Java
[2011/07/03 20:26:36 | 000,157,472 | —- | C] (Sun Microsystems, Inc.) – C:\Windows\SysWow64\javaws.exe
[2011/07/03 20:26:36 | 000,145,184 | —- | C] (Sun Microsystems, Inc.) – C:\Windows\SysWow64\javaw.exe
[2011/07/03 20:26:36 | 000,145,184 | —- | C] (Sun Microsystems, Inc.) – C:\Windows\SysWow64\java.exe
[2011/07/03 10:40:37 | 000,000,000 | —D | C] – C:\Users\Dave\AppData\Local\{32D154E9-276B-48FF-B502-BD40C9326271}
[2011/07/02 22:40:37 | 000,000,000 | —D | C] – C:\Users\Dave\AppData\Local\{CCC4A32E-0B43-4DD6-A756-EE5FAB311CBC}
[2011/07/02 10:42:38 | 000,000,000 | —D | C] – C:\Users\Dave\AppData\Local\{5DE24BC2-897E-4E40-BCCB-854CB712324D}
[2011/07/01 22:42:14 | 000,000,000 | —D | C] – C:\Users\Dave\AppData\Local\{6494AB98-2BCA-4CA6-AB70-0447E77D253F}
[2011/07/01 10:41:51 | 000,000,000 | —D | C] – C:\Users\Dave\AppData\Local\{68522358-8B06-441E-B6EB-CEF71CF578DD}
[2011/06/30 22:41:29 | 000,000,000 | —D | C] – C:\Users\Dave\AppData\Local\{1C2E0CB7-4737-4CAF-94BF-6F044570D6B2}
[2011/06/30 11:50:22 | 000,000,000 | —D | C] – C:\86f636c71a346b16a3a58b43b6b02c
[2011/06/30 11:49:35 | 000,000,000 | —D | C] – C:\Users\Dave\AppData\Local\LogMeIn
[2011/06/30 11:49:26 | 000,033,152 | —- | C] (LogMeIn, Inc.) – C:\Windows\SysNative\LMIport.dll
[2011/06/30 11:49:25 | 000,087,456 | —- | C] (LogMeIn, Inc.) – C:\Windows\SysNative\LMIRfsClientNP.dll
[2011/06/30 11:49:25 | 000,072,216 | —- | C] (LogMeIn, Inc.) – C:\Windows\SysNative\drivers\LMIRfsDriver.sys
[2011/06/30 11:49:20 | 000,080,768 | —- | C] (LogMeIn, Inc.) – C:\Windows\SysNative\LMIinit.dll
[2011/06/30 11:49:15 | 000,000,000 | —D | C] – C:\ProgramData\LogMeIn
[2011/06/30 11:49:06 | 000,000,000 | —D | C] – C:\Program Files (x86)\LogMeIn
[2011/06/30 11:40:53 | 000,000,000 | —D | C] – C:\Program Files (x86)\SilicMobile
[2011/06/30 11:40:53 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Remote Controller
[2011/06/30 10:40:40 | 000,000,000 | —D | C] – C:\Users\Dave\AppData\Local\{984C881A-B6EC-455A-BCC8-20FF9C729929}
[2011/06/29 20:54:27 | 000,000,000 | —D | C] – C:\Users\Dave\AppData\Local\{3AC2A301-482C-4765-91A8-2B07B9AC3F58}
[2011/06/29 08:54:05 | 000,000,000 | —D | C] – C:\Users\Dave\AppData\Local\{068AB954-0FA8-492B-B1E3-0E3C20AFB3EC}
[2011/06/29 08:27:20 | 000,252,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\drvinst.exe
[2011/06/29 08:27:20 | 000,207,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cfgmgr32.dll
[2011/06/29 08:27:20 | 000,044,544 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\devrtl.dll
[2011/06/29 08:27:17 | 002,315,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\tquery.dll
[2011/06/29 08:27:17 | 002,223,616 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mssrch.dll
[2011/06/29 08:27:17 | 001,549,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\tquery.dll
[2011/06/29 08:27:17 | 001,401,344 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mssrch.dll
[2011/06/29 08:27:17 | 000,778,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mssvp.dll
[2011/06/29 08:27:16 | 000,666,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mssvp.dll
[2011/06/29 08:27:16 | 000,491,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mssph.dll
[2011/06/29 08:27:16 | 000,337,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mssph.dll
[2011/06/29 08:27:16 | 000,288,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mssphtb.dll
[2011/06/29 08:27:16 | 000,249,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SearchProtocolHost.exe
[2011/06/29 08:27:16 | 000,197,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mssphtb.dll
[2011/06/29 08:27:16 | 000,113,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SearchFilterHost.exe
[2011/06/29 08:27:16 | 000,075,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msscntrs.dll
[2011/06/29 08:27:16 | 000,059,392 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msscntrs.dll
[2011/06/28 20:53:43 | 000,000,000 | —D | C] – C:\Users\Dave\AppData\Local\{8BA3558D-1C6F-40FA-8735-750952302F69}
[2011/06/28 08:53:21 | 000,000,000 | —D | C] – C:\Users\Dave\AppData\Local\{AFAF53EA-607B-4851-9325-6B2444C15A04}
[2011/06/27 20:52:59 | 000,000,000 | —D | C] – C:\Users\Dave\AppData\Local\{41011C8C-73F2-46B4-B75F-B106CDD27CDC}
[2011/06/27 08:52:37 | 000,000,000 | —D | C] – C:\Users\Dave\AppData\Local\{DCC656C0-08A5-4C6F-94C0-0A7830F87450}
[2011/06/26 20:52:15 | 000,000,000 | —D | C] – C:\Users\Dave\AppData\Local\{40218101-FB67-47C7-8C4C-FEE76ECEE691}
[2011/06/26 15:19:06 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DynDNS Updater
[2011/06/26 15:19:03 | 000,000,000 | —D | C] – C:\Program Files (x86)\DynDNS Updater
[2011/06/26 15:19:03 | 000,000,000 | —D | C] – C:\ProgramData\DynDNS
[2011/06/26 15:09:55 | 000,000,000 | —D | C] – C:\ProgramData\Belkin
[2011/06/26 15:02:09 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Belkin
[2011/06/26 15:02:00 | 000,000,000 | —D | C] – C:\Program Files (x86)\Belkin
[2011/06/26 15:02:00 | 000,000,000 | —D | C] – C:\ProgramData\Affinegy
[2011/06/26 08:51:51 | 000,000,000 | —D | C] – C:\Users\Dave\AppData\Local\{BF240822-B3B6-4664-928D-1656778088F6}
[2011/06/25 20:51:40 | 000,000,000 | —D | C] – C:\Users\Dave\AppData\Local\{51930864-1A16-4AD0-AB65-95E7EEF4E210}
[2011/06/25 08:51:29 | 000,000,000 | —D | C] – C:\Users\Dave\AppData\Local\{1FDB70B3-ED34-4709-8EC9-338EBAC0ADBD}
[2011/06/24 20:51:19 | 000,000,000 | —D | C] – C:\Users\Dave\AppData\Local\{A64E4549-CD2D-427A-9BE5-5C5EC990189B}
[2011/06/24 08:51:08 | 000,000,000 | —D | C] – C:\Users\Dave\AppData\Local\{32C392E3-DBB1-4451-BAF0-16B17FBA46D7}
[2011/06/23 20:50:57 | 000,000,000 | —D | C] – C:\Users\Dave\AppData\Local\{873412B2-0B94-476F-A371-B416727A470C}
[2011/06/23 08:50:47 | 000,000,000 | —D | C] – C:\Users\Dave\AppData\Local\{046D5CEB-5743-46E4-BD2F-597B5FCC2907}
[2011/06/22 20:50:23 | 000,000,000 | —D | C] – C:\Users\Dave\AppData\Local\{55A5C3E2-E551-4993-B25F-2771AD002B77}
[2011/06/22 08:50:12 | 000,000,000 | —D | C] – C:\Users\Dave\AppData\Local\{3066E784-4A6D-4F31-9925-A72065F7E5D9}
[2011/06/21 20:50:00 | 000,000,000 | —D | C] – C:\Users\Dave\AppData\Local\{B8FB0D84-23D7-4690-A100-1D25D561FE8E}
[2011/06/21 08:49:49 | 000,000,000 | —D | C] – C:\Users\Dave\AppData\Local\{7449E68B-7F69-4322-9F1C-FCA718BD8158}
[2011/06/20 20:49:38 | 000,000,000 | —D | C] – C:\Users\Dave\AppData\Local\{47D334C9-0523-4417-B633-F71EF7669235}
[2011/06/20 08:49:28 | 000,000,000 | —D | C] – C:\Users\Dave\AppData\Local\{8889382F-98B0-4A48-A205-219447BA2118}
[2011/06/20 00:44:38 | 000,000,000 | —D | C] – C:\SmarterMail
[2011/06/20 00:43:56 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SmarterTools Inc
[2011/06/20 00:43:36 | 000,000,000 | —D | C] – C:\Program Files (x86)\SmarterTools
[2011/06/20 00:33:22 | 000,000,000 | —D | C] – C:\Windows\Downloaded Installations
[2011/06/20 00:26:45 | 000,000,000 | —D | C] – C:\Program Files (x86)\Cool Timer
[2011/06/19 21:18:28 | 000,052,736 | —- | C] (Macromedia Inc.) – C:\Windows\SysNative\cfperfmon_8.dll
[2011/06/19 21:17:07 | 000,000,000 | —D | C] – C:\JRun4
[2011/06/19 20:49:02 | 000,000,000 | —D | C] – C:\Users\Dave\AppData\Local\{FE199D6A-3F86-4A6B-BD80-E9CBAE6E4B38}
[2011/06/19 20:09:12 | 000,000,000 | —D | C] – C:\Users\Dave\AppData\Local\ElevatedDiagnostics
[2011/06/19 19:17:57 | 000,000,000 | —D | C] – C:\Windows\SysNative\appmgmt
[2011/06/19 17:59:53 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\InsiderTradeAlerts.com
[2011/06/19 17:06:22 | 000,000,000 | —D | C] – C:\websites backup
[2011/06/19 08:57:47 | 000,000,000 | —D | C] – C:\Users\Dave\AppData\Local\{E687B42C-9C8A-4374-B318-B66FCFBB8CC7}
[2011/06/18 20:57:36 | 000,000,000 | —D | C] – C:\Users\Dave\AppData\Local\{DA180615-0FF3-4D1F-B701-2449B2D6EBE7}
[2011/06/18 14:39:06 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\ajaxCFC
[2011/06/18 14:39:02 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\2010 Taxes
[2011/06/18 14:39:00 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\2009 Taxes
[2011/06/18 14:38:59 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\2008 Taxes
[2011/06/18 14:38:58 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\2007 Taxes
[2011/06/18 14:38:57 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\2006 Taxes
[2011/06/18 14:38:55 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\2005 taxes
[2011/06/18 14:38:55 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\2000 Pontiac Montana
[2011/06/18 14:28:01 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\ZARTS
[2011/06/18 14:28:01 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\WTS Corporate Meeting 2006
[2011/06/18 14:27:59 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\World in Conflict - DEMO
[2011/06/18 14:27:59 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\WebTech Staffing Expense Reports
[2011/06/18 14:27:59 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\WebTech Staffing Corporate Documents
[2011/06/18 14:27:55 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\Webshots Data
[2011/06/18 14:27:55 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\WebEx
[2011/06/18 14:27:55 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\WDC
[2011/06/18 14:27:51 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\VZW Work
[2011/06/18 14:27:51 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\VZW
[2011/06/18 14:27:51 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\vEmotion Records
[2011/06/18 14:27:49 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\US Bank Statements
[2011/06/18 14:27:49 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\Updater5
[2011/06/18 14:27:49 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\TurboTax
[2011/06/18 14:27:49 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\TurboCashGenerator
[2011/06/18 14:27:49 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\trip to wb expenses
[2011/06/18 14:27:49 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\The Movies
[2011/06/18 14:27:49 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\The Lord of the Rings Online
[2011/06/18 14:27:49 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\The Learning Company
[2011/06/18 14:27:49 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\temp
[2011/06/18 14:27:47 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\TCCD
[2011/06/18 14:27:47 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\Taxes
[2011/06/18 14:27:47 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\Taryn
[2011/06/18 14:27:47 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\Talk
[2011/06/18 14:27:47 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\Symantec
[2011/06/18 14:27:47 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\Statements
[2011/06/18 14:27:47 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\SQL Server Management Studio Express
[2011/06/18 14:27:47 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\split fee sharing agreement with logo_files
[2011/06/18 14:27:47 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\split agreements
[2011/06/18 14:27:31 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\setup
[2011/06/18 14:27:29 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\Salamat Masih Ministries, Inc
[2011/06/18 14:27:29 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\Rose Watson
[2011/06/18 14:27:29 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\resumes
[2011/06/18 14:27:29 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\Remote Assistance Logs
[2011/06/18 14:27:29 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\reference checks
[2011/06/18 14:27:29 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\receipts
[2011/06/18 14:27:29 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\Qwest
[2011/06/18 14:27:22 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\Quicken
[2011/06/18 14:27:22 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\Private Business
[2011/06/18 14:27:22 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\PrettyMay
[2011/06/18 14:27:21 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\Preaching
[2011/06/18 14:27:21 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\Pirates of the Burning Sea
[2011/06/18 14:27:21 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\OneNote Notebooks
[2011/06/18 14:27:21 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\Oil Research
[2011/06/18 14:27:20 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\Noah and Bekah - Fall 2010 Mother's Day Out
[2011/06/18 14:27:20 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\New Folder
[2011/06/18 14:27:20 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\New Folder (5)
[2011/06/18 14:27:20 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\New Folder (4)
[2011/06/18 14:27:20 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\New Folder (3)
[2011/06/18 14:27:20 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\New Folder (2)
[2011/06/18 14:27:20 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\NCR
[2011/06/18 14:27:20 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\National Criminal Records Report_files
[2011/06/18 14:27:20 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\myFICO - Dispute Letter For TransUnion_files
[2011/06/18 14:27:20 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\myFICO - Dispute Letter For Equifax_files
[2011/06/18 14:27:20 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\My Web Sites
[2011/06/18 14:27:20 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\My Virtual Machines
[2011/06/18 14:27:20 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\My Shapes
[2011/06/18 14:27:20 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\My Received Files
[2011/06/18 14:27:20 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\My Photo Collage
[2011/06/18 14:27:20 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\My Google Gadgets
[2011/06/18 14:27:19 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\My Games
[2011/06/18 14:27:15 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\My Ewisoft Web
[2011/06/18 14:27:15 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\My Deliveries
[2011/06/18 14:27:15 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\My Data Sources
[2011/06/18 14:27:15 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\My Chat Logs
[2011/06/18 14:27:15 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\Mom's Gas Lease
[2011/06/18 14:27:15 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\Mom's 2010 Refinance
[2011/06/18 14:27:07 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\Ministry
[2011/06/18 14:27:06 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\Mayoris.com
[2011/06/18 14:27:06 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\mallcare
[2011/06/18 14:27:05 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\loseweightfeelgood
[2011/06/18 14:27:05 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\ItsDeductible2006
[2011/06/18 14:27:05 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\indep contractor stuff
[2011/06/18 14:27:03 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\Immigration
[2011/06/18 14:27:03 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\Homeschooling
[2011/06/18 14:27:03 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\Homeschool
[2011/06/18 14:27:03 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\Hannah's School
[2011/06/18 14:27:03 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\Gulshan school
[2011/06/18 14:27:03 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\Groove Workspace Templates
[2011/06/18 14:27:03 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\GreatFamily
[2011/06/18 14:27:01 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\glorias visa
[2011/06/18 14:27:01 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\Gloria's Health Insurance
[2011/06/18 14:27:01 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\Gloria - UT Dallas
[2011/06/18 14:27:01 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\franchising
[2011/06/18 14:27:01 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\FPU
[2011/06/18 14:27:01 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\Form Pilot Home
[2011/06/18 14:27:01 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\for hannah
[2011/06/18 14:27:01 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\For Gloria
[2011/06/18 14:26:58 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\Financial Documents
[2011/06/18 14:26:58 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\FBI Application for Gulshan
[2011/06/18 14:26:57 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\email 2 phone
[2011/06/18 14:26:57 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\eFax Messenger 4.3
[2011/06/18 14:26:56 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\eFax Messenger 4.1
[2011/06/18 14:26:41 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\Downloads
[2011/06/18 14:26:41 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\domains
[2011/06/18 14:26:17 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\Disc Images
[2011/06/18 14:26:17 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\digital locker Downloads
[2011/06/18 14:26:16 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\Daves_Phone My Documents
[2011/06/18 14:26:16 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\Crosspoint Enterprises
[2011/06/18 14:26:16 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\Credit Reports
[2011/06/18 14:26:16 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\CPA
[2011/06/18 14:26:15 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\Commander In Chief - Geopolitical Simulator
[2011/06/18 14:26:15 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\Chase Statements
[2011/06/18 14:26:13 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\cf_mx7_pdfs
[2011/06/18 14:26:13 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\BudgetCorporateRenewals
[2011/06/18 14:26:13 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\bitpim
[2011/06/18 14:26:13 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\Azureus Downloads
[2011/06/18 14:26:13 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\Audible
[2011/06/18 14:26:13 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\Astra Group
[2011/06/18 14:26:13 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\Art by Hannah
[2011/06/18 14:26:11 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\Alltel
[2011/06/18 14:26:11 | 000,000,000 | —D | C] – C:\Users\Dave\Documents\AlacrityPC Profiles
[2011/06/18 08:57:25 | 000,000,000 | —D | C] – C:\Users\Dave\AppData\Local\{A66F2D19-3F33-473B-A3E0-68DBAAD5BEB7}
[2011/06/17 20:57:13 | 000,000,000 | —D | C] – C:\Users\Dave\AppData\Local\{AF613096-18A4-4201-945F-DAC9123E2BE0}
[2011/06/17 19:25:57 | 000,000,000 | —D | C] – C:\Python27
[2011/06/17 08:56:07 | 000,000,000 | —D | C] – C:\Users\Dave\AppData\Local\{8BAC94D9-8E50-47BE-BF02-BAF37D79CDD6}
[2011/06/16 20:55:56 | 000,000,000 | —D | C] – C:\Users\Dave\AppData\Local\{B6EFD17E-BC8B-4E82-8CCB-8C2D12314416}
[3 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2011/07/16 13:53:18 | 000,009,904 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011/07/16 13:53:18 | 000,009,904 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011/07/16 13:47:48 | 001,436,976 | —- | M] (Kaspersky Lab ZAO) – C:\Users\Dave\Desktop\killit.com
[2011/07/16 13:16:17 | 000,000,904 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2162126256-1862476200-468832862-1000UA.job
[2011/07/16 13:09:01 | 000,000,894 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2011/07/16 12:55:41 | 000,988,376 | —- | M] () – C:\Windows\SysNative\PerfStringBackup.INI
[2011/07/16 12:55:41 | 000,810,764 | —- | M] () – C:\Windows\SysNative\perfh009.dat
[2011/07/16 12:55:41 | 000,174,192 | —- | M] () – C:\Windows\SysNative\perfc009.dat
[2011/07/16 12:50:41 | 000,000,865 | —- | M] () – C:\Windows\SysNative\drivers\etc\HOSTS
[2011/07/16 12:50:35 | 000,001,690 | —- | M] () – C:\Windows\tasks\wrSpySweeper_LA0E265DA57074E6684B44ACB2D199614.job
[2011/07/16 12:47:08 | 000,000,890 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2011/07/16 12:46:35 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2011/07/16 12:46:20 | 2131,890,175 | -HS- | M] () – C:\hiberfil.sys
[2011/07/16 12:44:53 | 000,002,051 | —- | M] () – C:\Users\Public\Desktop\Spy Sweeper.lnk
[2011/07/16 12:44:30 | 000,017,280 | —- | M] () – C:\Windows\SysNative\SsiEfr.exe
[2011/07/16 12:44:12 | 000,000,164 | —- | M] () – C:\Windows\install.dat
[2011/07/16 12:06:28 | 000,000,035 | —- | M] () – C:\Users\Public\Documents\AtherosServiceConfig.ini
[2011/07/16 12:05:21 | 000,000,000 | —- | M] () – C:\Windows\SysNative\drivers\lvuvc.hs
[2011/07/16 11:43:58 | 000,441,824 | —- | M] () – C:\Windows\SysNative\FNTCACHE.DAT
[2011/07/12 12:48:32 | 000,431,246 | —- | M] () – C:\Users\Dave\Documents\speedtrader transfer form.pdf
[2011/07/10 15:21:32 | 000,000,254 | —- | M] () – C:\Users\Dave\AppData\Roaming\MSMSettings.xml
[2011/07/10 15:21:32 | 000,000,063 | —- | M] () – C:\Users\Dave\AppData\Roaming\MSMNetworkSettings.xml
[2011/07/09 15:15:00 | 000,000,852 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2162126256-1862476200-468832862-1000Core.job
[2011/07/09 12:19:19 | 000,001,472 | —- | M] () – C:\Users\Dave\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2011/07/09 03:29:58 | 000,175,616 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\msclmd.dll
[2011/07/09 03:29:58 | 000,152,576 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\msclmd.dll
[2011/07/08 22:27:38 | 003,695,416 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\ieapfltr.dat
[2011/07/08 22:27:38 | 003,695,416 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\ieapfltr.dat
[2011/07/08 22:27:38 | 002,303,488 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\jscript9.dll
[2011/07/08 22:27:38 | 001,797,632 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\jscript9.dll
[2011/07/08 22:27:38 | 001,492,992 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\inetcpl.cpl
[2011/07/08 22:27:38 | 001,427,456 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\inetcpl.cpl
[2011/07/08 22:27:38 | 000,818,176 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\jscript.dll
[2011/07/08 22:27:38 | 000,716,800 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\jscript.dll
[2011/07/08 22:27:38 | 000,697,344 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\msfeeds.dll
[2011/07/08 22:27:38 | 000,603,648 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\vbscript.dll
[2011/07/08 22:27:38 | 000,580,608 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\msfeeds.dll
[2011/07/08 22:27:38 | 000,534,528 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\ieapfltr.dll
[2011/07/08 22:27:38 | 000,452,608 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\dxtmsft.dll
[2011/07/08 22:27:38 | 000,448,512 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\html.iec
[2011/07/08 22:27:38 | 000,434,176 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\ieapfltr.dll
[2011/07/08 22:27:38 | 000,367,104 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\html.iec
[2011/07/08 22:27:38 | 000,353,792 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\dxtmsft.dll
[2011/07/08 22:27:38 | 000,282,112 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\dxtrans.dll
[2011/07/08 22:27:38 | 000,267,776 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\ieaksie.dll
[2011/07/08 22:27:38 | 000,248,320 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\ieui.dll
[2011/07/08 22:27:38 | 000,236,544 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\url.dll
[2011/07/08 22:27:38 | 000,231,936 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\url.dll
[2011/07/08 22:27:38 | 000,227,840 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\ieaksie.dll
[2011/07/08 22:27:38 | 000,223,232 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\dxtrans.dll
[2011/07/08 22:27:38 | 000,222,208 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\msls31.dll
[2011/07/08 22:27:38 | 000,197,120 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\msrating.dll
[2011/07/08 22:27:38 | 000,176,640 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\ieui.dll
[2011/07/08 22:27:38 | 000,173,056 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\ieUnatt.exe
[2011/07/08 22:27:38 | 000,165,888 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\iexpress.exe
[2011/07/08 22:27:38 | 000,163,840 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\ieakui.dll
[2011/07/08 22:27:38 | 000,163,840 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\ieakui.dll
[2011/07/08 22:27:38 | 000,162,304 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\msrating.dll
[2011/07/08 22:27:38 | 000,161,792 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\msls31.dll
[2011/07/08 22:27:38 | 000,160,256 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\wextract.exe
[2011/07/08 22:27:38 | 000,160,256 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\ieakeng.dll
[2011/07/08 22:27:38 | 000,152,064 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\wextract.exe
[2011/07/08 22:27:38 | 000,150,528 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\iexpress.exe
[2011/07/08 22:27:38 | 000,149,504 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\occache.dll
[2011/07/08 22:27:38 | 000,145,920 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\iepeers.dll
[2011/07/08 22:27:38 | 000,142,848 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\ieUnatt.exe
[2011/07/08 22:27:38 | 000,135,168 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\IEAdvpack.dll
[2011/07/08 22:27:38 | 000,130,560 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\ieakeng.dll
[2011/07/08 22:27:38 | 000,123,392 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\occache.dll
[2011/07/08 22:27:38 | 000,118,784 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\iepeers.dll
[2011/07/08 22:27:38 | 000,114,176 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\admparse.dll
[2011/07/08 22:27:38 | 000,111,616 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\iesysprep.dll
[2011/07/08 22:27:38 | 000,110,592 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\IEAdvpack.dll
[2011/07/08 22:27:38 | 000,103,936 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\inseng.dll
[2011/07/08 22:27:38 | 000,101,888 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\admparse.dll
[2011/07/08 22:27:38 | 000,096,256 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\mshtmled.dll
[2011/07/08 22:27:38 | 000,091,648 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\SetIEInstalledDate.exe
[2011/07/08 22:27:38 | 000,089,088 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\RegisterIEPKEYs.exe
[2011/07/08 22:27:38 | 000,089,088 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\ie4uinit.exe
[2011/07/08 22:27:38 | 000,086,528 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\iesysprep.dll
[2011/07/08 22:27:38 | 000,085,504 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\iesetup.dll
[2011/07/08 22:27:38 | 000,082,432 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\icardie.dll
[2011/07/08 22:27:38 | 000,078,848 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\inseng.dll
[2011/07/08 22:27:38 | 000,076,800 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\tdc.ocx
[2011/07/08 22:27:38 | 000,076,800 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\SetIEInstalledDate.exe
[2011/07/08 22:27:38 | 000,074,752 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\RegisterIEPKEYs.exe
[2011/07/08 22:27:38 | 000,074,752 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\iesetup.dll
[2011/07/08 22:27:38 | 000,074,240 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\ie4uinit.exe
[2011/07/08 22:27:38 | 000,072,822 | —- | M] () – C:\Windows\SysWow64\ieuinit.inf
[2011/07/08 22:27:38 | 000,072,822 | —- | M] () – C:\Windows\SysNative\ieuinit.inf
[2011/07/08 22:27:38 | 000,072,704 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\mshtmled.dll
[2011/07/08 22:27:38 | 000,066,048 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\icardie.dll
[2011/07/08 22:27:38 | 000,065,024 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\pngfilt.dll
[2011/07/08 22:27:38 | 000,063,488 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\tdc.ocx
[2011/07/08 22:27:38 | 000,054,272 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\pngfilt.dll
[2011/07/08 22:27:38 | 000,049,664 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\imgutil.dll
[2011/07/08 22:27:38 | 000,048,640 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\mshtmler.dll
[2011/07/08 22:27:38 | 000,048,640 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\mshtmler.dll
[2011/07/08 22:27:38 | 000,039,936 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\iernonce.dll
[2011/07/08 22:27:38 | 000,035,840 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\imgutil.dll
[2011/07/08 22:27:38 | 000,031,744 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\iernonce.dll
[2011/07/08 22:27:38 | 000,030,720 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\licmgr10.dll
[2011/07/08 22:27:38 | 000,023,552 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\licmgr10.dll
[2011/07/08 22:27:38 | 000,012,288 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\mshta.exe
[2011/07/08 22:27:38 | 000,010,752 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\msfeedssync.exe
[2011/07/08 22:27:38 | 000,010,752 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\msfeedssync.exe
[2011/07/08 22:05:03 | 001,113,599 | —- | M] () – C:\Users\Dave\AppData\Roaming\davephillips09.zip
[2011/07/08 07:30:30 | 000,000,043 | —- | M] () – C:\Windows\WALLSTRT.INI
[2011/06/30 11:49:16 | 000,001,024 | —- | M] () – C:\.rnd
[2011/06/29 01:15:36 | 000,002,354 | —- | M] () – C:\Users\Dave\Desktop\Google Chrome.lnk
[2011/06/26 15:19:09 | 000,001,095 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\DynDNS Updater Tray Icon.lnk
[2011/06/26 15:02:10 | 000,000,051 | —- | M] () – C:\Windows\SysNative\drivers\etc\lmhosts
[2011/06/21 14:20:03 | 000,008,382 | —- | M] () – C:\Users\Dave\Documents\buffalo_airstation_settings.bin
[2011/06/20 00:44:00 | 000,002,169 | —- | M] () – C:\Users\Public\Desktop\SmarterTools Web Site.lnk
[2011/06/20 00:43:59 | 000,002,154 | —- | M] () – C:\Users\Public\Desktop\Login to SmarterMail.lnk
[2011/06/19 21:43:20 | 000,944,900 | —- | M] () – C:\Windows\SysWow64\PerfStringBackup.INI
[2011/06/19 21:18:47 | 000,000,021 | -H– | M] () – C:\qpmd8379.bin
[2011/06/19 21:18:28 | 000,052,736 | —- | M] (Macromedia Inc.) – C:\Windows\SysNative\cfperfmon_8.dll
[2011/06/18 15:16:08 | 034,271,911 | —- | M] () – C:\Users\Dave\form.idx
[3 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files Created - No Company Name ==========

[2011/07/16 12:50:35 | 000,001,690 | —- | C] () – C:\Windows\tasks\wrSpySweeper_LA0E265DA57074E6684B44ACB2D199614.job
[2011/07/16 12:44:53 | 000,002,051 | —- | C] () – C:\Users\Public\Desktop\Spy Sweeper.lnk
[2011/07/16 12:44:33 | 000,017,280 | —- | C] () – C:\Windows\SysNative\SsiEfr.exe
[2011/07/16 12:44:11 | 000,000,164 | —- | C] () – C:\Windows\install.dat
[2011/07/12 12:48:32 | 000,431,246 | —- | C] () – C:\Users\Dave\Documents\speedtrader transfer form.pdf
[2011/07/08 22:27:38 | 000,072,822 | —- | C] () – C:\Windows\SysWow64\ieuinit.inf
[2011/07/08 22:27:38 | 000,072,822 | —- | C] () – C:\Windows\SysNative\ieuinit.inf
[2011/06/30 11:49:16 | 000,001,024 | —- | C] () – C:\.rnd
[2011/06/30 11:49:06 | 000,001,023 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn.lnk
[2011/06/26 15:19:09 | 000,001,095 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\DynDNS Updater Tray Icon.lnk
[2011/06/21 14:20:13 | 000,008,382 | —- | C] () – C:\Users\Dave\Documents\buffalo_airstation_settings.bin
[2011/06/20 00:43:59 | 000,002,169 | —- | C] () – C:\Users\Public\Desktop\SmarterTools Web Site.lnk
[2011/06/20 00:43:59 | 000,002,154 | —- | C] () – C:\Users\Public\Desktop\Login to SmarterMail.lnk
[2011/06/19 21:18:47 | 000,000,021 | -H– | C] () – C:\qpmd8379.bin
[2011/06/19 18:34:41 | 000,000,063 | —- | C] () – C:\Users\Dave\AppData\Roaming\MSMNetworkSettings.xml
[2011/06/18 15:13:58 | 034,271,911 | —- | C] () – C:\Users\Dave\form.idx
[2011/06/18 14:38:55 | 000,661,490 | —- | C] () – C:\Users\Dave\Documents\skybitz.xml
[2011/06/18 14:38:55 | 000,012,288 | —- | C] () – C:\Users\Dave\Documents\Pat's Resume 2006.wps
[2011/06/18 14:38:55 | 000,000,000 | —- | C] () – C:\Users\Dave\Documents\ITServiceCenterSampleFeed.xml
[2011/06/18 14:38:54 | 005,845,942 | —- | C] () – C:\Users\Dave\Documents\testwav.wav
[2011/06/18 14:38:54 | 002,903,723 | —- | C] () – C:\Users\Dave\Documents\clip1.wmv
[2011/06/18 14:38:54 | 002,111,740 | —- | C] () – C:\Users\Dave\Documents\zarts_final_florist_8k.wav
[2011/06/18 14:38:54 | 001,055,892 | —- | C] () – C:\Users\Dave\Documents\zarts_final_florist_8k_mono.wav
[2011/06/18 14:38:54 | 001,055,118 | —- | C] () – C:\Users\Dave\Documents\Paul.wav
[2011/06/18 14:38:54 | 000,927,906 | —- | C] () – C:\Users\Dave\Documents\zarts_final_florist_8k_short_mono.wav
[2011/06/18 14:38:54 | 000,346,598 | —- | C] () – C:\Users\Dave\Documents\hannah week song.wav
[2011/06/18 14:38:54 | 000,232,800 | —- | C] () – C:\Users\Dave\Documents\hannah month song.wav
[2011/06/18 14:38:54 | 000,191,378 | —- | C] () – C:\Users\Dave\Documents\intro.wav
[2011/06/18 14:38:54 | 000,072,327 | —- | C] () – C:\Users\Dave\Documents\testwma.wma
[2011/06/18 14:38:53 | 000,593,380 | —- | C] () – C:\Users\Dave\Documents\Hannah birthday invitation.wav
[2011/06/18 14:38:53 | 000,341,842 | —- | C] () – C:\Users\Dave\Documents\hannah jingle bells.wav
[2011/06/18 14:38:53 | 000,328,149 | —- | C] () – C:\Users\Dave\Documents\2003 Tax Return.tax
[2011/06/18 14:38:53 | 000,271,384 | —- | C] () – C:\Users\Dave\Documents\renewedlifebulletin.snag
[2011/06/18 14:38:53 | 000,221,470 | —- | C] () – C:\Users\Dave\Documents\hannah month song 2.wav
[2011/06/18 14:38:53 | 000,032,792 | —- | C] () – C:\Users\Dave\Documents\mymap.snag
[2011/06/18 14:38:53 | 000,008,854 | —- | C] () – C:\Users\Dave\Documents\beep.wav
[2011/06/18 14:38:53 | 000,001,005 | —- | C] () – C:\Users\Dave\Documents\gnmaa_appt.vcs
[2011/06/18 14:38:53 | 000,000,523 | —- | C] () – C:\Users\Dave\Documents\Do astra group payroll.vcs
[2011/06/18 14:38:52 | 003,766,808 | —- | C] () – C:\Users\Dave\Documents\gulshan birth 1.snag
[2011/06/18 14:38:52 | 000,204,824 | —- | C] () – C:\Users\Dave\Documents\gloria's presentation.snag
[2011/06/18 14:38:52 | 000,038,917 | —- | C] () – C:\Users\Dave\Documents\US Government ch 1-5 ready for test.qze
[2011/06/18 14:38:52 | 000,038,917 | —- | C] () – C:\Users\Dave\Documents\US Government ch 1-5 ready for test 2.qze
[2011/06/18 14:38:52 | 000,038,917 | —- | C] () – C:\Users\Dave\Documents\unformatted ch 1-5.qze
[2011/06/18 14:38:52 | 000,007,242 | —- | C] () – C:\Users\Dave\Documents\lastwill.rtf
[2011/06/18 14:38:52 | 000,005,240 | —- | C] () – C:\Users\Dave\Documents\ChatLog Meet Now 2008_12_06 16_48.rtf
[2011/06/18 14:38:52 | 000,003,828 | —- | C] () – C:\Users\Dave\Documents\bizbreeze.RDP
[2011/06/18 14:38:52 | 000,002,168 | —- | C] () – C:\Users\Dave\Documents\changesUpdate.rtf
[2011/06/18 14:38:52 | 000,002,160 | —- | C] () – C:\Users\Dave\Documents\ChatLog Meet Now 2008_09_08 22_17.rtf
[2011/06/18 14:38:52 | 000,001,778 | -H– | C] () – C:\Users\Dave\Documents\Default.rdp
[2011/06/18 14:38:52 | 000,001,225 | —- | C] () – C:\Users\Dave\Documents\ChatLog Meet Now 2008_11_08 15_10.rtf
[2011/06/18 14:38:52 | 000,001,004 | —- | C] () – C:\Users\Dave\Documents\ChatLog Meet Now 2008_09_15 22_05.rtf
[2011/06/18 14:38:52 | 000,000,671 | —- | C] () – C:\Users\Dave\Documents\2007-05-24 11.04 ChatLog.rtf
[2011/06/18 14:38:52 | 000,000,667 | —- | C] () – C:\Users\Dave\Documents\2007-05-24 14.32 ChatLog.rtf
[2011/06/18 14:38:52 | 000,000,656 | —- | C] () – C:\Users\Dave\Documents\ChatLog Meet Now 2008_10_24 20_53.rtf
[2011/06/18 14:38:52 | 000,000,565 | —- | C] () – C:\Users\Dave\Documents\2008-06-02 22.21 ChatLog.rtf
[2011/06/18 14:38:52 | 000,000,548 | —- | C] () – C:\Users\Dave\Documents\ChatLog Meet Now 2008_10_21 19_15.rtf
[2011/06/18 14:38:52 | 000,000,522 | —- | C] () – C:\Users\Dave\Documents\ChatLog Meet Now 2008_10_23 23_20.rtf
[2011/06/18 14:38:52 | 000,000,501 | —- | C] () – C:\Users\Dave\Documents\ChatLog Meet Now 2008_11_08 16_11.rtf
[2011/06/18 14:38:52 | 000,000,407 | —- | C] () – C:\Users\Dave\Documents\ChatLog Meet Now 2008_11_23 18_56.rtf
[2011/06/18 14:38:52 | 000,000,396 | —- | C] () – C:\Users\Dave\Documents\ChatLog New meeting 2008_11_11 21_09.rtf
[2011/06/18 14:38:52 | 000,000,389 | —- | C] () – C:\Users\Dave\Documents\ChatLog Meet Now 2008_12_05 23_32.rtf
[2011/06/18 14:38:51 | 001,620,255 | —- | C] () – C:\Users\Dave\Documents\10-13-2006 03;05;45PM.PSD
[2011/06/18 14:38:51 | 001,398,820 | —- | C] () – C:\Users\Dave\Documents\dream.mov
[2011/06/18 14:38:51 | 000,534,311 | —- | C] () – C:\Users\Dave\Documents\ATHF_testimage_591wide1_640x480.png
[2011/06/18 14:38:51 | 000,448,686 | —- | C] () – C:\Users\Dave\Documents\CGInvoice.stw
[2011/06/18 14:38:51 | 000,037,434 | —- | C] () – C:\Users\Dave\Documents\bizbreeze_EXPORT_2006823_1.csv
[2011/06/18 14:38:51 | 000,004,292 | —- | C] () – C:\Users\Dave\Documents\DomainDownloadList-37127546(1).csv
[2011/06/18 14:38:51 | 000,002,571 | —- | C] () – C:\Users\Dave\Documents\countries.csv
[2011/06/18 14:38:51 | 000,002,418 | —- | C] () – C:\Users\Dave\Documents\quickreport.qif
[2011/06/18 14:38:50 | 023,521,199 | —- | C] () – C:\Users\Dave\Documents\itm20081210.mp3
[2011/06/18 14:38:50 | 009,988,436 | —- | C] () – C:\Users\Dave\Documents\sr_met_tubing_wht.mpeg
[2011/06/18 14:38:50 | 002,374,298 | —- | C] () – C:\Users\Dave\Documents\noah recording 10-02-2008.mp3
[2011/06/18 14:38:50 | 001,059,968 | —- | C] () – C:\Users\Dave\Documents\noah_phillips_on_politics_october_2_2008.mp3
[2011/06/18 14:38:50 | 000,129,536 | —- | C] () – C:\Users\Dave\Documents\WebTech Resume Template.dot
[2011/06/18 14:38:50 | 000,012,290 | —- | C] () – C:\Users\Dave\Documents\IssueTracker.odb
[2011/06/18 14:38:50 | 000,009,928 | —- | C] () – C:\Users\Dave\Documents\normal.dotx
[2011/06/18 14:38:50 | 000,004,608 | —- | C] () – C:\Users\Dave\Documents\new.odb
[2011/06/18 14:38:50 | 000,002,115 | —- | C] () – C:\Users\Dave\Documents\Audiobook1.nab
[2011/06/18 14:38:40 | 000,507,904 | —- | C] () – C:\Users\Dave\Documents\telewebinars.mdb
[2011/06/18 14:38:40 | 000,344,064 | —- | C] () – C:\Users\Dave\Documents\test.mdb
[2011/06/18 14:38:40 | 000,233,472 | —- | C] () – C:\Users\Dave\Documents\safety.mdb
[2011/06/18 14:38:40 | 000,114,688 | —- | C] () – C:\Users\Dave\Documents\skills.mdb
[2011/06/18 14:38:36 | 146,337,792 | —- | C] () – C:\Users\Dave\Documents\recruiters.mdb
[2011/06/18 14:38:35 | 001,056,768 | —- | C] () – C:\Users\Dave\Documents\bizbreeze.mdb
[2011/06/18 14:38:35 | 000,393,216 | —- | C] () – C:\Users\Dave\Documents\IssueTracker.mdb
[2011/06/18 14:38:35 | 000,278,528 | —- | C] () – C:\Users\Dave\Documents\dave.mdb
[2011/06/18 14:38:35 | 000,176,128 | —- | C] () – C:\Users\Dave\Documents\qmantest.mdb
[2011/06/18 14:38:35 | 000,002,365 | —- | C] () – C:\Users\Dave\Documents\0.m3u
[2011/06/18 14:38:35 | 000,000,111 | —- | C] () – C:\Users\Dave\Documents\1300034.m3u
[2011/06/18 14:38:34 | 000,320,145 | —- | C] () – C:\Users\Dave\Documents\addresschange.jpg
[2011/06/18 14:38:34 | 000,290,337 | —- | C] () – C:\Users\Dave\Documents\map to collins.jpg
[2011/06/18 14:38:34 | 000,217,631 | —- | C] () – C:\Users\Dave\Documents\accountinfochange.jpg
[2011/06/18 14:38:34 | 000,154,081 | —- | C] () – C:\Users\Dave\Documents\invoicewithccinfo.jpg
[2011/06/18 14:38:34 | 000,127,564 | —- | C] () – C:\Users\Dave\Documents\contactlist.jpg
[2011/06/18 14:38:34 | 000,104,960 | —- | C] () – C:\Users\Dave\Documents\chase error screenshot.jpg
[2011/06/18 14:38:34 | 000,099,657 | —- | C] () – C:\Users\Dave\Documents\dellcoupon.jpg
[2011/06/18 14:38:34 | 000,071,956 | —- | C] () – C:\Users\Dave\Documents\voidedcheck.jpg
[2011/06/18 14:38:34 | 000,066,263 | —- | C] () – C:\Users\Dave\Documents\davephillipstexaslicense.jpg
[2011/06/18 14:38:34 | 000,055,293 | —- | C] () – C:\Users\Dave\Documents\pic.jpg
[2011/06/18 14:38:34 | 000,025,801 | —- | C] () – C:\Users\Dave\Documents\usa visa.jpg
[2011/06/18 14:38:34 | 000,013,703 | —- | C] () – C:\Users\Dave\Documents\931701981.jpg
[2011/06/18 14:38:34 | 000,005,822 | —- | C] () – C:\Users\Dave\Documents\mysignature.jpg
[2011/06/18 14:38:34 | 000,005,293 | —- | C] () – C:\Users\Dave\Documents\sig.jpg
[2011/06/18 14:38:34 | 000,003,541 | —- | C] () – C:\Users\Dave\Documents\WebTechStaffing.gif
[2011/06/18 14:38:34 | 000,002,180 | —- | C] () – C:\Users\Dave\Documents\bizbreeze_icon.jpg
[2011/06/18 14:38:33 | 000,102,248 | —- | C] () – C:\Users\Dave\Documents\1746e48.efx
[2011/06/18 14:38:33 | 000,092,650 | —- | C] () – C:\Users\Dave\Documents\biggerfamilytree.ged
[2011/06/18 14:38:33 | 000,043,008 | —- | C] () – C:\Users\Dave\Documents\RFP%20Testing%2Edoc
[2011/06/18 14:38:33 | 000,040,960 | —- | C] () – C:\Users\Dave\Documents\Script%2Edoc
[2011/06/18 14:38:33 | 000,034,383 | —- | C] () – C:\Users\Dave\Documents\N
[2011/06/18 14:38:33 | 000,005,740 | —- | C] () – C:\Users\Dave\Documents\myfamilytree.ged
[2011/06/18 14:38:33 | 000,005,740 | —- | C] () – C:\Users\Dave\Documents\myfamilytree.gd3
[2011/06/18 14:38:33 | 000,000,146 | —- | C] () – C:\Users\Dave\Documents\edit_tiny.gif
[2011/06/18 14:38:33 | 000,000,146 | —- | C] () – C:\Users\Dave\Documents\edit.gif
[2011/06/18 14:38:32 | 011,278,574 | —- | C] () – C:\Users\Dave\Documents\recruiters.zip
[2011/06/18 14:38:32 | 002,888,624 | —- | C] () – C:\Users\Dave\Documents\RecruiterList.zip
[2011/06/18 14:38:32 | 002,251,330 | —- | C] () – C:\Users\Dave\Documents\My Documents.zip
[2011/06/18 14:38:32 | 000,864,871 | —- | C] () – C:\Users\Dave\Documents\license and ss card.zip
[2011/06/18 14:38:32 | 000,730,504 | —- | C] () – C:\Users\Dave\Documents\financial docs for ctx mortgage.zip
[2011/06/18 14:38:32 | 000,102,530 | —- | C] () – C:\Users\Dave\Documents\gloria_masih_uta.zip
[2011/06/18 14:38:31 | 001,235,017 | —- | C] () – C:\Users\Dave\Documents\davephillips_equifax_creditreport.zip
[2011/06/18 14:38:28 | 167,391,177 | —- | C] () – C:\Users\Dave\Documents\dave.zip
[2011/06/18 14:38:28 | 015,997,533 | —- | C] () – C:\Users\Dave\Documents\cf_mx7_pdfs.zip
[2011/06/18 14:38:28 | 000,680,422 | —- | C] () – C:\Users\Dave\Documents\ajaxcfc.zip
[2011/06/18 14:38:28 | 000,011,132 | —- | C] () – C:\Users\Dave\Documents\caffeine.zip
[2011/06/18 14:38:27 | 000,167,984 | —- | C] () – C:\Users\Dave\Documents\myFICO - Dispute Letter For Equifax.htm
[2011/06/18 14:38:27 | 000,048,027 | —- | C] () – C:\Users\Dave\Documents\myFICO - Dispute Letter For TransUnion.htm
[2011/06/18 14:38:27 | 000,019,903 | —- | C] () – C:\Users\Dave\Documents\National Criminal Records Report.htm
[2011/06/18 14:38:27 | 000,018,412 | —- | C] () – C:\Users\Dave\Documents\Guru_com - Create Invoice (Print and sign W-9 form).htm
[2011/06/18 14:38:27 | 000,008,846 | —- | C] () – C:\Users\Dave\Documents\split fee sharing agreement with logo.htm
[2011/06/18 14:38:27 | 000,008,687 | —- | C] () – C:\Users\Dave\Documents\ssje_37986.cert
[2011/06/18 14:38:27 | 000,005,539 | —- | C] () – C:\Users\Dave\Documents\admin_tools.zip
[2011/06/18 14:38:27 | 000,000,634 | —- | C] () – C:\Users\Dave\Documents\NOAH.BAN
[2011/06/18 14:38:26 | 064,743,052 | —- | C] () – C:\Users\Dave\Documents\Bill_Phillips_NASCAR_June_13_2009_Part_1.avi
[2011/06/18 14:38:26 | 063,026,554 | —- | C] () – C:\Users\Dave\Documents\Bill_Phillips_NASCAR_June_13_2009_Part_2.avi
[2011/06/18 14:38:26 | 007,293,022 | —- | C] () – C:\Users\Dave\Documents\transfer_guide.pdf
[2011/06/18 14:38:26 | 001,516,535 | —- | C] () – C:\Users\Dave\Documents\uhccoverage.pdf
[2011/06/18 14:38:26 | 001,389,984 | —- | C] () – C:\Users\Dave\Documents\uhc docs.pdf
[2011/06/18 14:38:26 | 000,603,049 | —- | C] () – C:\Users\Dave\Documents\voidedcheck.pdf
[2011/06/18 14:38:26 | 000,297,665 | —- | C] () – C:\Users\Dave\Documents\webtech staffing voided check.pdf
[2011/06/18 14:38:26 | 000,208,078 | —- | C] () – C:\Users\Dave\Documents\warranty cancellation request for dodge.pdf
[2011/06/18 14:38:26 | 000,110,609 | —- | C] () – C:\Users\Dave\Documents\webtech staffing w-9.pdf
[2011/06/18 14:38:26 | 000,108,487 | —- | C] () – C:\Users\Dave\Documents\water utility bank draft.pdf
[2011/06/18 14:38:26 | 000,078,643 | —- | C] () – C:\Users\Dave\Documents\trquickstart.pdf
[2011/06/18 14:38:26 | 000,066,310 | —- | C] () – C:\Users\Dave\Documents\travelers cancellation letter.pdf
[2011/06/18 14:38:26 | 000,052,082 | —- | C] () – C:\Users\Dave\Documents\webtech staffing eft change for modis.pdf
[2011/06/18 14:38:26 | 000,034,014 | —- | C] () – C:\Users\Dave\Documents\unofficial mnu transcript for david phillips.pdf
[2011/06/18 14:38:26 | 000,033,371 | —- | C] () – C:\Users\Dave\Documents\txtolltagreceipt.pdf
[2011/06/18 14:38:26 | 000,024,124 | —- | C] () – C:\Users\Dave\Documents\Visio-Homework 4.1 for David Phillips.pdf
[2011/06/18 14:38:26 | 000,019,858 | —- | C] () – C:\Users\Dave\Documents\webtec crt 2.pdf
[2011/06/18 14:38:26 | 000,018,192 | —- | C] () – C:\Users\Dave\Documents\vzw bill 12-22-08.pdf
[2011/06/18 14:38:25 | 001,834,736 | —- | C] () – C:\Users\Dave\Documents\ray's credit report.pdf
[2011/06/18 14:38:25 | 001,405,740 | —- | C] () – C:\Users\Dave\Documents\TCCD_catalog_07-08.pdf
[2011/06/18 14:38:25 | 001,357,134 | —- | C] () – C:\Users\Dave\Documents\topecheloncontracting.pdf
[2011/06/18 14:38:25 | 001,189,645 | —- | C] () – C:\Users\Dave\Documents\shps claim form.pdf
[2011/06/18 14:38:25 | 000,390,016 | —- | C] () – C:\Users\Dave\Documents\second mortgage amortization.pdf
[2011/06/18 14:38:25 | 000,349,428 | —- | C] () – C:\Users\Dave\Documents\scan0014.pdf
[2011/06/18 14:38:25 | 000,324,272 | —- | C] () – C:\Users\Dave\Documents\renewedlifebulletin.pdf
[2011/06/18 14:38:25 | 000,256,822 | —- | C] () – C:\Users\Dave\Documents\Prescription fax form.pdf
[2011/06/18 14:38:25 | 000,240,930 | —- | C] () – C:\Users\Dave\Documents\review of webtech apply page.pdf
[2011/06/18 14:38:25 | 000,178,757 | —- | C] () – C:\Users\Dave\Documents\transcript_request for richland.pdf
[2011/06/18 14:38:25 | 000,167,089 | —- | C] () – C:\Users\Dave\Documents\signed forms for oasis.pdf
[2011/06/18 14:38:25 | 000,158,190 | —- | C] () – C:\Users\Dave\Documents\rental car for portland.pdf
[2011/06/18 14:38:25 | 000,097,859 | —- | C] () – C:\Users\Dave\Documents\realtor doc for house.pdf
[2011/06/18 14:38:25 | 000,093,139 | —- | C] () – C:\Users\Dave\Documents\texas online registration for 2008.pdf
[2011/06/18 14:38:25 | 000,089,679 | —- | C] () – C:\Users\Dave\Documents\Signed Letter of Credit for UHV from VZW.pdf
[2011/06/18 14:38:25 | 000,088,793 | —- | C] () – C:\Users\Dave\Documents\Split Fee Agreement.pdf
[2011/06/18 14:38:25 | 000,087,352 | —- | C] () – C:\Users\Dave\Documents\scan0010-b.pdf
[2011/06/18 14:38:25 | 000,077,136 | —- | C] () – C:\Users\Dave\Documents\records request from doctor wees.pdf
[2011/06/18 14:38:25 | 000,068,322 | —- | C] () – C:\Users\Dave\Documents\time warner screen shot showing errors.pdf
[2011/06/18 14:38:25 | 000,067,869 | —- | C] () – C:\Users\Dave\Documents\reservation for robert.pdf
[2011/06/18 14:38:25 | 000,058,448 | —- | C] () – C:\Users\Dave\Documents\TEST.pdf
[2011/06/18 14:38:25 | 000,055,531 | —- | C] () – C:\Users\Dave\Documents\sleepsense proof of purchase.pdf
[2011/06/18 14:38:25 | 000,055,457 | R— | C] () – C:\Users\Dave\Documents\SS-8 Form.pdf
[2011/06/18 14:38:25 | 000,033,882 | —- | C] () – C:\Users\Dave\Documents\receipt for songs4ever from timelife.pdf
[2011/06/18 14:38:25 | 000,026,061 | —- | C] () – C:\Users\Dave\Documents\Stmt2.pdf
[2011/06/18 14:38:25 | 000,022,035 | —- | C] () – C:\Users\Dave\Documents\tracfone purchase for gloria 4-21-09.pdf
[2011/06/18 14:38:25 | 000,018,351 | —- | C] () – C:\Users\Dave\Documents\resignation letter.pdf
[2011/06/18 14:38:25 | 000,018,192 | —- | C] () – C:\Users\Dave\Documents\rcpt for boppana.pdf
[2011/06/18 14:38:25 | 000,013,660 | —- | C] () – C:\Users\Dave\Documents\submitclaim.pdf
[2011/06/18 14:38:25 | 000,012,498 | —- | C] () – C:\Users\Dave\Documents\Receipt for TexFlex training.pdf
[2011/06/18 14:38:25 | 000,008,613 | —- | C] () – C:\Users\Dave\Documents\signed letter for gloria's international office at UTD.pdf
[2011/06/18 14:38:25 | 000,007,370 | —- | C] () – C:\Users\Dave\Documents\star trek ticket confirmation.pdf
[2011/06/18 14:38:25 | 000,005,897 | —- | C] () – C:\Users\Dave\Documents\sum~9999.pdf
[2011/06/18 14:38:25 | 000,003,735 | —- | C] () – C:\Users\Dave\Documents\sum0509.pdf
[2011/06/18 14:38:24 | 005,363,371 | —- | C] () – C:\Users\Dave\Documents\PPC6700 English Owners Manual.pdf
[2011/06/18 14:38:24 | 003,613,819 | —- | C] () – C:\Users\Dave\Documents\Phillips financial documents.pdf
[2011/06/18 14:38:24 | 002,156,913 | —- | C] () – C:\Users\Dave\Documents\poster 2008.pdf
[2011/06/18 14:38:24 | 001,004,344 | —- | C] () – C:\Users\Dave\Documents\nikki's credit report.pdf
[2011/06/18 14:38:24 | 000,540,384 | —- | C] () – C:\Users\Dave\Documents\possible financial lenders.pdf
[2011/06/18 14:38:24 | 000,224,395 | —- | C] () – C:\Users\Dave\Documents\noah's insurance coverage doc.pdf
[2011/06/18 14:38:24 | 000,168,342 | —- | C] () – C:\Users\Dave\Documents\Online_CSA_Form_8_2008.pdf
[2011/06/18 14:38:24 | 000,150,106 | —- | C] () – C:\Users\Dave\Documents\ooma loa agreement.pdf
[2011/06/18 14:38:24 | 000,127,764 | —- | C] () – C:\Users\Dave\Documents\ozarkainvoicepdf.pdf
[2011/06/18 14:38:24 | 000,127,502 | —- | C] () – C:\Users\Dave\Documents\ooma.pdf
[2011/06/18 14:38:24 | 000,107,969 | —- | C] () – C:\Users\Dave\Documents\pdf for afternic.pdf
[2011/06/18 14:38:24 | 000,078,505 | —- | C] () – C:\Users\Dave\Documents\ooma eloa.pdf
[2011/06/18 14:38:24 | 000,051,970 | —- | C] () – C:\Users\Dave\Documents\police report from july 20 accident.pdf
[2011/06/18 14:38:24 | 000,043,045 | —- | C] () – C:\Users\Dave\Documents\Overlay Networks by David Phillips.pdf
[2011/06/18 14:38:23 | 003,388,174 | —- | C] () – C:\Users\Dave\Documents\medical release for hannah phillips.pdf
[2011/06/18 14:38:23 | 000,936,376 | —- | C] () – C:\Users\Dave\Documents\Medical release.pdf
[2011/06/18 14:38:23 | 000,869,920 | —- | C] () – C:\Users\Dave\Documents\Nazarene Manual 2005 - 09.pdf
[2011/06/18 14:38:23 | 000,127,421 | —- | C] () – C:\Users\Dave\Documents\mega app page 1.pdf
[2011/06/18 14:38:23 | 000,122,464 | —- | C] () – C:\Users\Dave\Documents\new amortization schedule.pdf
[2011/06/18 14:38:23 | 000,085,490 | —- | C] () – C:\Users\Dave\Documents\merchant cancellation form.pdf
[2011/06/18 14:38:23 | 000,059,820 | —- | C] () – C:\Users\Dave\Documents\mega app signature page.pdf
[2011/06/18 14:38:23 | 000,057,199 | —- | C] () – C:\Users\Dave\Documents\modis direct deposit form.pdf
[2011/06/18 14:38:23 | 000,034,560 | —- | C] () – C:\Users\Dave\Documents\MYL.pdf
[2011/06/18 14:38:23 | 000,015,255 | —- | C] () – C:\Users\Dave\Documents\Motorola V710 $50 Rebate.pdf
[2011/06/18 14:38:22 | 006,391,369 | —- | C] () – C:\Users\Dave\Documents\license and ss card.pdf
[2011/06/18 14:38:22 | 006,391,369 | —- | C] () – C:\Users\Dave\Documents\letter from dianna about pc pros ownership.pdf
[2011/06/18 14:38:22 | 000,340,916 | —- | C] () – C:\Users\Dave\Documents\LETTER TO CSC CREDIT SERVICES.pdf
[2011/06/18 14:38:22 | 000,278,269 | —- | C] () – C:\Users\Dave\Documents\last eob from plan ending 8-31-06.pdf
[2011/06/18 14:38:22 | 000,171,627 | —- | C] () – C:\Users\Dave\Documents\map to our house.pdf
[2011/06/18 14:38:22 | 000,157,150 | —- | C] () – C:\Users\Dave\Documents\life insurance app.pdf
[2011/06/18 14:38:22 | 000,122,438 | —- | C] () – C:\Users\Dave\Documents\lil's flight from dfw to iah.pdf
[2011/06/18 14:38:22 | 000,090,853 | —- | C] () – C:\Users\Dave\Documents\Kinetic_20100907_0000000923500001.pdf
[2011/06/18 14:38:22 | 000,077,568 | —- | C] () – C:\Users\Dave\Documents\last 12 months salary for uk visa.pdf
[2011/06/18 14:38:22 | 000,068,517 | —- | C] () – C:\Users\Dave\Documents\letter re all in one vacations.pdf
[2011/06/18 14:38:22 | 000,065,983 | —- | C] () – C:\Users\Dave\Documents\letter for us bank for funds.pdf
[2011/06/18 14:38:22 | 000,064,252 | —- | C] () – C:\Users\Dave\Documents\jccc transcript request form.pdf
[2011/06/18 14:38:22 | 000,054,111 | —- | C] () – C:\Users\Dave\Documents\lincoln_financial_063006.pdf
[2011/06/18 14:38:22 | 000,052,806 | —- | C] () – C:\Users\Dave\Documents\Letter to boppana clinic_merged.pdf
[2011/06/18 14:38:22 | 000,035,770 | —- | C] () – C:\Users\Dave\Documents\medco form.pdf
[2011/06/18 14:38:22 | 000,032,711 | —- | C] () – C:\Users\Dave\Documents\Letter to boppana clinic.pdf
[2011/06/18 14:38:22 | 000,019,795 | —- | C] () – C:\Users\Dave\Documents\lifetimefitness cancellation letter.pdf
[2011/06/18 14:38:22 | 000,009,689 | —- | C] () – C:\Users\Dave\Documents\Letter from US Bank showing Available Funds.pdf
[2011/06/18 14:38:22 | 000,006,403 | —- | C] () – C:\Users\Dave\Documents\Letter of Credit from VZW for UHV.pdf
[2011/06/18 14:38:21 | 000,445,792 | —- | C] () – C:\Users\Dave\Documents\insurance_dodge.pdf
[2011/06/18 14:38:21 | 000,445,790 | —- | C] () – C:\Users\Dave\Documents\insurance_explorer.pdf
[2011/06/18 14:38:21 | 000,280,960 | —- | C] () – C:\Users\Dave\Documents\itinerary for robert.pdf
[2011/06/18 14:38:21 | 000,082,491 | —- | C] () – C:\Users\Dave\Documents\investools tickets.pdf
[2011/06/18 14:38:21 | 000,031,855 | —- | C] () – C:\Users\Dave\Documents\Inter_App.pdf
[2011/06/18 14:38:21 | 000,023,067 | —- | C] () – C:\Users\Dave\Documents\interface cancellation.pdf
[2011/06/18 14:38:20 | 000,352,837 | R— | C] () – C:\Users\Dave\Documents\house pictures.pdf
[2011/06/18 14:38:20 | 000,125,041 | —- | C] () – C:\Users\Dave\Documents\insurance_certificate_october_2006.pdf
[2011/06/18 14:38:20 | 000,088,317 | —- | C] () – C:\Users\Dave\Documents\InSchool.pdf
[2011/06/18 14:38:20 | 000,078,288 | —- | C] () – C:\Users\Dave\Documents\Ideas for RadioMuseum.org - Part 1 - by David Phillips.pdf
[2011/06/18 14:38:20 | 000,064,333 | —- | C] () – C:\Users\Dave\Documents\Ideas for RadioMuseum.org by David Phillips.pdf
[2011/06/18 14:38:20 | 000,026,877 | —- | C] () – C:\Users\Dave\Documents\hsbcdirect.com terms.pdf
[2011/06/18 14:38:20 | 000,022,708 | —- | C] () – C:\Users\Dave\Documents\instructions and questions info.pdf
[2011/06/18 14:38:19 | 000,977,675 | —- | C] () – C:\Users\Dave\Documents\HECO1322.pdf
[2011/06/18 14:38:19 | 000,738,730 | —- | C] () – C:\Users\Dave\Documents\gulshan's credit report as of december 28, 2006.pdf
[2011/06/18 14:38:19 | 000,621,577 | —- | C] () – C:\Users\Dave\Documents\hist1.pdf
[2011/06/18 14:38:19 | 000,261,444 | —- | C] () – C:\Users\Dave\Documents\hcpc for dr drkulec.pdf
[2011/06/18 14:38:19 | 000,164,566 | —- | C] () – C:\Users\Dave\Documents\Gulshan's Birth Certificate.pdf
[2011/06/18 14:38:19 | 000,148,911 | —- | C] () – C:\Users\Dave\Documents\hannah iq test results.pdf
[2011/06/18 14:38:19 | 000,102,644 | —- | C] () – C:\Users\Dave\Documents\health-care-provider-certification-fmla.pdf
[2011/06/18 14:38:19 | 000,099,758 | —- | C] () – C:\Users\Dave\Documents\Gulshan's Unofficial Transcript European Nazarene College.pdf
[2011/06/18 14:38:19 | 000,075,723 | —- | C] () – C:\Users\Dave\Documents\hce for oasis.pdf
[2011/06/18 14:38:19 | 000,034,669 | —- | C] () – C:\Users\Dave\Documents\hostmysite cancellation notice.pdf
[2011/06/18 14:38:19 | 000,006,204 | —- | C] () – C:\Users\Dave\Documents\Hannah's Soccer Registration Fall 2009.pdf
[2011/06/18 14:38:19 | 000,002,673 | —- | C] () – C:\Users\Dave\Documents\hillisslacksettlement_dave.pdf
[2011/06/18 14:38:19 | 000,002,663 | —- | C] () – C:\Users\Dave\Documents\hillisslacksettlement_gulshan.pdf
[2011/06/18 14:38:18 | 008,787,029 | —- | C] () – C:\Users\Dave\Documents\financial docs for ctx mortgage.pdf
[2011/06/18 14:38:18 | 003,415,907 | —- | C] () – C:\Users\Dave\Documents\fax from maye phillips.pdf
[2011/06/18 14:38:18 | 002,346,590 | —- | C] () – C:\Users\Dave\Documents\GSI_Global_Complete.pdf
[2011/06/18 14:38:18 | 002,103,834 | —- | C] () – C:\Users\Dave\Documents\davephillips_transunion_creditreport.pdf
[2011/06/18 14:38:18 | 001,711,803 | —- | C] () – C:\Users\Dave\Documents\first webtechs staffing check for staffing services.pdf
[2011/06/18 14:38:18 | 001,687,659 | —- | C] () – C:\Users\Dave\Documents\dave's credit report as of december 28, 2006.pdf
[2011/06/18 14:38:18 | 001,635,338 | —- | C] () – C:\Users\Dave\Documents\direct deposit voided check for webtech staffing.pdf
[2011/06/18 14:38:18 | 000,717,016 | —- | C] () – C:\Users\Dave\Documents\gulshan phillips experian credit report.pdf
[2011/06/18 14:38:18 | 000,469,741 | —- | C] () – C:\Users\Dave\Documents\daves social security card.pdf
[2011/06/18 14:38:18 | 000,444,455 | —- | C] () – C:\Users\Dave\Documents\dave's driver's license.pdf
[2011/06/18 14:38:18 | 000,442,682 | —- | C] () – C:\Users\Dave\Documents\gloria's fafsa for 2008-2009.pdf
[2011/06/18 14:38:18 | 000,431,865 | —- | C] () – C:\Users\Dave\Documents\Flash.pdf
[2011/06/18 14:38:18 | 000,357,252 | —- | C] () – C:\Users\Dave\Documents\gloria transfer to enc form.pdf
[2011/06/18 14:38:18 | 000,313,942 | —- | C] () – C:\Users\Dave\Documents\dissolution for webtech staffing llc nevada.pdf
[2011/06/18 14:38:18 | 000,311,163 | —- | C] () – C:\Users\Dave\Documents\eye doctor patient registration.pdf
[2011/06/18 14:38:18 | 000,310,805 | —- | C] () – C:\Users\Dave\Documents\gulshan phillips registration for eye doctor.pdf
[2011/06/18 14:38:18 | 000,251,972 | —- | C] () – C:\Users\Dave\Documents\gloria's ticket to nicaragua.pdf
[2011/06/18 14:38:18 | 000,223,857 | —- | C] () – C:\Users\Dave\Documents\David Phillips In School Deferrment form for Sallie Mae.pdf
[2011/06/18 14:38:18 | 000,214,819 | —- | C] () – C:\Users\Dave\Documents\Final Fax to Boppana Clinic.pdf
[2011/06/18 14:38:18 | 000,204,483 | —- | C] () – C:\Users\Dave\Documents\dispute for boppana_merged.pdf
[2011/06/18 14:38:18 | 000,198,944 | —- | C] () – C:\Users\Dave\Documents\DS0011_Complete Dave.pdf
[2011/06/18 14:38:18 | 000,198,854 | —- | C] () – C:\Users\Dave\Documents\DS0011_Complete Gulshan.pdf
[2011/06/18 14:38:18 | 000,197,486 | —- | C] () – C:\Users\Dave\Documents\Daves loan reconsolidation forms.pdf
[2011/06/18 14:38:18 | 000,196,122 | —- | C] () – C:\Users\Dave\Documents\gulshans authorization for dr. daum.pdf
[2011/06/18 14:38:18 | 000,186,848 | —- | C] () – C:\Users\Dave\Documents\gloria's presentation.pdf
[2011/06/18 14:38:18 | 000,140,104 | —- | C] () – C:\Users\Dave\Documents\dispute for boppana.pdf
[2011/06/18 14:38:18 | 000,134,531 | —- | C] () – C:\Users\Dave\Documents\encourage merit award app for Gloria.pdf
[2011/06/18 14:38:18 | 000,127,648 | —- | C] () – C:\Users\Dave\Documents\Gloria's insurance Benefits.pdf
[2011/06/18 14:38:18 | 000,122,297 | —- | C] () – C:\Users\Dave\Documents\geico insurance policy.pdf
[2011/06/18 14:38:18 | 000,090,151 | —- | C] () – C:\Users\Dave\Documents\doctor auth for dave.pdf
[2011/06/18 14:38:18 | 000,087,890 | —- | C] () – C:\Users\Dave\Documents\doctor auth for gulshan.pdf
[2011/06/18 14:38:18 | 000,086,975 | —- | C] () – C:\Users\Dave\Documents\glorias i-20.pdf
[2011/06/18 14:38:18 | 000,083,782 | —- | C] () – C:\Users\Dave\Documents\ets complaint letter.pdf
[2011/06/18 14:38:18 | 000,082,391 | —- | C] () – C:\Users\Dave\Documents\David Phillips Transcript Request for Eastfield.pdf
[2011/06/18 14:38:18 | 000,082,006 | —- | C] () – C:\Users\Dave\Documents\gl cancellation.pdf
[2011/06/18 14:38:18 | 000,075,139 | —- | C] () – C:\Users\Dave\Documents\EE_VOUCHER_BY_DATE_RPT_750[1].pdf
[2011/06/18 14:38:18 | 000,074,751 | —- | C] () – C:\Users\Dave\Documents\gloria affidavit for ut dallas.pdf
[2011/06/18 14:38:18 | 000,074,158 | —- | C] () – C:\Users\Dave\Documents\fax release for boys town pediatrics.pdf
[2011/06/18 14:38:18 | 000,069,242 | —- | C] () – C:\Users\Dave\Documents\gloria affidavit for ut dallas pg 2.pdf
[2011/06/18 14:38:18 | 000,064,806 | —- | C] () – C:\Users\Dave\Documents\David Phillips Transcript Request for JCCC.pdf
[2011/06/18 14:38:18 | 000,055,816 | —- | C] () – C:\Users\Dave\Documents\direct deposit change for webtech staffing.pdf
[2011/06/18 14:38:18 | 000,049,924 | —- | C] () – C:\Users\Dave\Documents\forbearance request for gulshan's student loans.pdf
[2011/06/18 14:38:18 | 000,049,619 | —- | C] () – C:\Users\Dave\Documents\forbeareance november 2010 letter.pdf
[2011/06/18 14:38:18 | 000,049,234 | —- | C] () – C:\Users\Dave\Documents\direct deposit change.pdf
[2011/06/18 14:38:18 | 000,037,157 | —- | C] () – C:\Users\Dave\Documents\gloria's orion ptk scholarship award summary page.pdf
[2011/06/18 14:38:18 | 000,036,264 | —- | C] () – C:\Users\Dave\Documents\David Phillips Transcript Request for Richland.pdf
[2011/06/18 14:38:18 | 000,034,562 | —- | C] () – C:\Users\Dave\Documents\gulshan's automatic debit form.pdf
[2011/06/18 14:38:18 | 000,034,562 | —- | C] () – C:\Users\Dave\Documents\dave's automatic debit form.pdf
[2011/06/18 14:38:18 | 000,034,148 | —- | C] () – C:\Users\Dave\Documents\gloria student account screenshot.pdf
[2011/06/18 14:38:18 | 000,033,269 | —- | C] () – C:\Users\Dave\Documents\David Phillips Transcript Request for Trevecca.pdf
[2011/06/18 14:38:18 | 000,031,436 | —- | C] () – C:\Users\Dave\Documents\Gloria Masih Unofficial Transcript.pdf
[2011/06/18 14:38:18 | 000,029,948 | —- | C] () – C:\Users\Dave\Documents\Explanation for Dispute for Jacque's cc for gloria's charge at boppana.pdf
[2011/06/18 14:38:18 | 000,027,360 | —- | C] () – C:\Users\Dave\Documents\dec check.pdf
[2011/06/18 14:38:18 | 000,021,170 | —- | C] () – C:\Users\Dave\Documents\db struct2.pdf
[2011/06/18 14:38:18 | 000,020,600 | —- | C] () – C:\Users\Dave\Documents\db struct.pdf
[2011/06/18 14:38:18 | 000,017,292 | —- | C] () – C:\Users\Dave\Documents\DavidPhillipsResCV.pdf
[2011/06/18 14:38:18 | 000,016,997 | —- | C] () – C:\Users\Dave\Documents\gloria's 2008 spring insurance.pdf
[2011/06/18 14:38:18 | 000,005,945 | —- | C] () – C:\Users\Dave\Documents\form for uncle harry.pdf
[2011/06/18 14:38:17 | 005,361,636 | —- | C] () – C:\Users\Dave\Documents\CobIT.pdf
[2011/06/18 14:38:17 | 001,696,019 | —- | C] () – C:\Users\Dave\Documents\davephillips_experian_creditreport.pdf
[2011/06/18 14:38:17 | 001,609,706 | —- | C] () – C:\Users\Dave\Documents\davephillips_equifax_creditreport.pdf
[2011/06/18 14:38:17 | 000,922,226 | —- | C] () – C:\Users\Dave\Documents\casio user manual fx-570ES_Eng.pdf
[2011/06/18 14:38:17 | 000,244,490 | —- | C] () – C:\Users\Dave\Documents\clergy_comp.pdf
[2011/06/18 14:38:17 | 000,172,466 | —- | C] () – C:\Users\Dave\Documents\Course Credit Form for David Phillips.pdf
[2011/06/18 14:38:17 | 000,158,365 | —- | C] () – C:\Users\Dave\Documents\Corp-to-Corp Agreement.pdf
[2011/06/18 14:38:17 | 000,156,973 | —- | C] () – C:\Users\Dave\Documents\citimortgage payoff statement.pdf
[2011/06/18 14:38:17 | 000,128,312 | —- | C] () – C:\Users\Dave\Documents\current eob.pdf
[2011/06/18 14:38:17 | 000,127,719 | —- | C] () – C:\Users\Dave\Documents\COI - Employers Liability.pdf
[2011/06/18 14:38:17 | 000,092,590 | —- | C] () – C:\Users\Dave\Documents\COI - All other Insurance.pdf
[2011/06/18 14:38:17 | 000,049,293 | —- | C] () – C:\Users\Dave\Documents\cc authorization for gloria masih.pdf
[2011/06/18 14:38:17 | 000,042,969 | —- | C] () – C:\Users\Dave\Documents\currentbenefits.pdf
[2011/06/18 14:38:17 | 000,034,774 | —- | C] () – C:\Users\Dave\Documents\ccformforgloria.pdf
[2011/06/18 14:38:17 | 000,032,828 | —- | C] () – C:\Users\Dave\Documents\chase mortgage screensnhot.pdf
[2011/06/18 14:38:17 | 000,023,937 | —- | C] () – C:\Users\Dave\Documents\Complaint to Attorney General on Boppana Primary Care Clinic.pdf
[2011/06/18 14:38:17 | 000,022,940 | —- | C] () – C:\Users\Dave\Documents\covenant with gulshan for 2009.pdf
[2011/06/18 14:38:17 | 000,007,946 | —- | C] () – C:\Users\Dave\Documents\certificate of insurance.pdf
[2011/06/18 14:38:16 | 012,782,530 | —- | C] () – C:\Users\Dave\Documents\11-03-2006 08;01;01PM.PDF
[2011/06/18 14:38:16 | 002,143,232 | —- | C] () – C:\Users\Dave\Documents\120e.pdf
[2011/06/18 14:38:16 | 001,464,088 | —- | C] () – C:\Users\Dave\Documents\12-15-2006 02;43;20PM.PDF
[2011/06/18 14:38:16 | 001,108,846 | —- | C] () – C:\Users\Dave\Documents\12-08-2006 10;32;47AM.PDF
[2011/06/18 14:38:16 | 001,108,846 | —- | C] () – C:\Users\Dave\Documents\12-08-2006 10;29;11AM.PDF
[2011/06/18 14:38:16 | 000,976,126 | —- | C] () – C:\Users\Dave\Documents\11-27-2006 12;07;56AM.PDF
[2011/06/18 14:38:16 | 000,917,581 | —- | C] () – C:\Users\Dave\Documents\app for e and o insurance.pdf
[2011/06/18 14:38:16 | 000,731,619 | —- | C] () – C:\Users\Dave\Documents\AccuplacerGuide.pdf
[2011/06/18 14:38:16 | 000,661,334 | —- | C] () – C:\Users\Dave\Documents\Agreement with the Astra Group.pdf
[2011/06/18 14:38:16 | 000,623,925 | —- | C] () – C:\Users\Dave\Documents\24 hour fitness receipt.pdf
[2011/06/18 14:38:16 | 000,488,188 | —- | C] () – C:\Users\Dave\Documents\10-13-2006 02;56;06PM.PDF
[2011/06/18 14:38:16 | 000,373,509 | —- | C] () – C:\Users\Dave\Documents\401kpapers.pdf
[2011/06/18 14:38:16 | 000,297,665 | —- | C] () – C:\Users\Dave\Documents\10-23-2006 12;44;54PM.PDF
[2011/06/18 14:38:16 | 000,297,357 | —- | C] () – C:\Users\Dave\Documents\ami and abu's visas.pdf
[2011/06/18 14:38:16 | 000,278,269 | —- | C] () – C:\Users\Dave\Documents\11-03-2006 07;59;42PM.PDF
[2011/06/18 14:38:16 | 000,238,279 | —- | C] () – C:\Users\Dave\Documents\attvill.pdf
[2011/06/18 14:38:16 | 000,238,279 | —- | C] () – C:\Users\Dave\Documents\attbill.pdf
[2011/06/18 14:38:16 | 000,185,963 | —- | C] () – C:\Users\Dave\Documents\2012 ihc lottery ticket.pdf
[2011/06/18 14:38:16 | 000,165,016 | —- | C] () – C:\Users\Dave\Documents\articles of organization.pdf
[2011/06/18 14:38:16 | 000,138,731 | —- | C] () – C:\Users\Dave\Documents\11-03-2006 07;59;21PM.PDF
[2011/06/18 14:38:16 | 000,137,953 | —- | C] () – C:\Users\Dave\Documents\amx feb statement.pdf
[2011/06/18 14:38:16 | 000,131,266 | —- | C] () – C:\Users\Dave\Documents\bruce phillips blog on coldfusion and coldpsring.pdf
[2011/06/18 14:38:16 | 000,120,570 | —- | C] () – C:\Users\Dave\Documents\ArrivalNotice_10_09_2008_02_44_35_DF7DC.pdf
[2011/06/18 14:38:16 | 000,111,609 | —- | C] () – C:\Users\Dave\Documents\boeing form for David Phillips.pdf
[2011/06/18 14:38:16 | 000,094,883 | —- | C] () – C:\Users\Dave\Documents\abu and ami flight to texas february 2011.pdf
[2011/06/18 14:38:16 | 000,083,903 | —- | C] () – C:\Users\Dave\Documents\auth for hendersonville med ctr.pdf
[2011/06/18 14:38:16 | 000,076,260 | —- | C] () – C:\Users\Dave\Documents\2005TaxReturn.pdf
[2011/06/18 14:38:16 | 000,074,478 | —- | C] () – C:\Users\Dave\Documents\auth release for dr. wees.pdf
[2011/06/18 14:38:16 | 000,071,879 | —- | C] () – C:\Users\Dave\Documents\CalendarInPDF.pdf
[2011/06/18 14:38:16 | 000,062,662 | —- | C] () – C:\Users\Dave\Documents\Amortization Schedule for Loan with Dad.pdf
[2011/06/18 14:38:16 | 000,061,059 | —- | C] () – C:\Users\Dave\Documents\2004 Phillips D Tax Return.pdf
[2011/06/18 14:38:16 | 000,055,185 | —- | C] () – C:\Users\Dave\Documents\2004 oasis w-2.pdf
[2011/06/18 14:38:16 | 000,053,847 | —- | C] () – C:\Users\Dave\Documents\budget update 4-24-2009.pdf
[2011/06/18 14:38:16 | 000,047,713 | —- | C] () – C:\Users\Dave\Documents\4008479794_1.pdf
[2011/06/18 14:38:16 | 000,046,574 | —- | C] () – C:\Users\Dave\Documents\acuwin receipt.pdf
[2011/06/18 14:38:16 | 000,004,437 | —- | C] () – C:\Users\Dave\Documents\2009 budget.pdf
[2011/06/18 14:38:15 | 008,787,029 | —- | C] () – C:\Users\Dave\Documents\09-15-2006 09;45;13AM.PDF
[2011/06/18 14:38:15 | 003,904,148 | —- | C] () – C:\Users\Dave\Documents\09-11-2006 12;52;33PM.PDF
[2011/06/18 14:38:15 | 003,613,819 | —- | C] () – C:\Users\Dave\Documents\09-07-2006 02;21;13PM.PDF
[2011/06/18 14:38:15 | 001,635,338 | —- | C] () – C:\Users\Dave\Documents\10-13-2006 02;12;53PM.PDF
[2011/06/18 14:38:15 | 001,389,984 | —- | C] () – C:\Users\Dave\Documents\09-15-2006 12;19;40PM.PDF
[2011/06/18 14:38:15 | 000,885,909 | —- | C] () – C:\Users\Dave\Documents\10-13-2006 02;08;08PM.PDF
[2011/06/18 14:38:14 | 008,528,722 | —- | C] () – C:\Users\Dave\Documents\04-17-2007 12;32;23PM.PDF
[2011/06/18 14:38:14 | 006,573,053 | —- | C] () – C:\Users\Dave\Documents\05-20-2007 10;51;43PM.PDF
[2011/06/18 14:38:14 | 006,391,369 | —- | C] () – C:\Users\Dave\Documents\03-06-2007 12;20;09PM.PDF
[2011/06/18 14:38:14 | 005,994,293 | —- | C] () – C:\Users\Dave\Documents\04-24-2007 04;16;28PM.PDF
[2011/06/18 14:38:14 | 004,991,093 | —- | C] () – C:\Users\Dave\Documents\05-20-2007 10;50;04PM.PDF
[2011/06/18 14:38:14 | 004,436,094 | —- | C] () – C:\Users\Dave\Documents\05-14-2007 08;22;59AM.PDF
[2011/06/18 14:38:14 | 003,690,052 | —- | C] () – C:\Users\Dave\Documents\05-20-2007 10;50;44PM.PDF
[2011/06/18 14:38:14 | 003,471,639 | —- | C] () – C:\Users\Dave\Documents\05-20-2007 10;52;12PM.PDF
[2011/06/18 14:38:14 | 002,217,477 | —- | C] () – C:\Users\Dave\Documents\02-13-2007 12;44;06PM.PDF
[2011/06/18 14:38:14 | 002,217,477 | —- | C] () – C:\Users\Dave\Documents\02-13-2007 12;41;23PM.PDF
[2011/06/18 14:38:14 | 001,389,984 | —- | C] () – C:\Users\Dave\Documents\06-18-2007 04;04;29PM.PDF
[2011/06/18 14:38:14 | 000,556,144 | —- | C] () – C:\Users\Dave\Documents\05-22-2007 11;05;10PM.PDF
[2011/06/18 14:38:14 | 000,556,144 | —- | C] () – C:\Users\Dave\Documents\05-20-2007 10;48;59PM.PDF
[2011/06/18 14:38:14 | 000,556,144 | —- | C] () – C:\Users\Dave\Documents\04-09-2007 04;05;05PM.PDF
[2011/06/18 14:38:14 | 000,488,188 | —- | C] () – C:\Users\Dave\Documents\03-26-2007 04;52;48PM.PDF
[2011/06/18 14:38:14 | 000,278,269 | —- | C] () – C:\Users\Dave\Documents\05-20-2007 10;49;36PM.PDF
[2011/06/18 14:38:14 | 000,278,269 | —- | C] () – C:\Users\Dave\Documents\04-26-2007 02;54;59PM.PDF
[2011/06/18 14:38:14 | 000,015,580 | —- | C] () – C:\Users\Dave\Documents\08.09MS-CIS.pdf
[2011/06/18 14:38:13 | 001,711,803 | —- | C] () – C:\Users\Dave\Documents\02-06-2007 02;00;57PM.PDF
[2011/06/18 14:38:13 | 001,633,992 | —- | C] () – C:\Users\Dave\Documents\01-10-2007 09;01;57AM.PDF
[2011/06/18 14:38:13 | 000,364,544 | —- | C] () – C:\Users\Dave\Documents\sample_stock_history.accdb
[2011/06/18 14:38:13 | 000,278,269 | —- | C] () – C:\Users\Dave\Documents\02-13-2007 09;47;28PM.PDF
[2011/06/18 14:38:13 | 000,278,269 | —- | C] () – C:\Users\Dave\Documents\02-13-2007 09;47;03PM.PDF
[2011/06/18 14:38:13 | 000,089,952 | —- | C] () – C:\Users\Dave\Documents\1 hour course.pdf
[2011/06/18 14:38:13 | 000,069,614 | —- | C] () – C:\Users\Dave\Documents\02-13-2007 09;46;35PM.PDF
[2011/06/14 06:33:46 | 000,944,900 | —- | C] () – C:\Windows\SysWow64\PerfStringBackup.INI
[2011/04/17 20:39:42 | 000,000,254 | —- | C] () – C:\Users\Dave\AppData\Roaming\MSMSettings.xml
[2011/04/17 17:56:32 | 000,000,000 | —- | C] () – C:\Windows\nsreg.dat
[2011/04/16 21:58:28 | 000,000,028 | —- | C] () – C:\Windows\ODBC.INI
[2011/04/10 00:05:11 | 000,000,320 | —- | C] () – C:\Users\Dave\AppData\Roaming\SEC539260.trad
[2011/04/10 00:05:03 | 000,000,043 | —- | C] () – C:\Windows\WALLSTRT.INI
[2011/04/04 08:52:26 | 001,113,599 | —- | C] () – C:\Users\Dave\AppData\Roaming\davephillips09.zip
[2011/04/01 19:49:36 | 000,000,171 | —- | C] () – C:\Windows\QUICKEN.INI
[2011/04/01 14:23:56 | 000,001,769 | —- | C] () – C:\Windows\Language_trs.ini
[2011/04/01 14:23:54 | 000,023,415 | —- | C] () – C:\Windows\Ascd_tmp.ini
[2011/03/22 10:14:16 | 000,031,104 | —- | C] () – C:\Windows\SysWow64\wrLZMA.dll
[2009/07/14 00:38:36 | 000,067,584 | –S- | C] () – C:\Windows\bootstat.dat
[2009/07/13 21:35:51 | 000,000,741 | —- | C] () – C:\Windows\SysWow64\NOISE.DAT
[2009/07/13 21:34:42 | 000,215,943 | —- | C] () – C:\Windows\SysWow64\dssec.dat
[2009/07/13 19:10:29 | 000,043,131 | —- | C] () – C:\Windows\mib.bin
[2009/07/13 18:42:10 | 000,064,000 | —- | C] () – C:\Windows\SysWow64\BWContextHandler.dll
[2009/07/13 16:03:59 | 000,364,544 | —- | C] () – C:\Windows\SysWow64\msjetoledb40.dll
[2009/06/10 16:26:10 | 000,673,088 | —- | C] () – C:\Windows\SysWow64\mlang.dat
[2009/04/08 10:37:44 | 000,241,744 | —- | C] () – C:\Windows\SysWow64\DuplicateFilter.dll
[2009/04/02 07:30:14 | 000,010,296 | —- | C] () – C:\Windows\SysWow64\drivers\ASUSHWIO.SYS
[2008/08/01 13:32:48 | 000,065,536 | —- | C] () – C:\Windows\SysWow64\SymbolLookup.dll
[2005/08/24 14:36:52 | 000,069,632 | —- | C] () – C:\Windows\SysWow64\nwComSvr.dll

========== LOP Check ==========

[2011/05/28 23:29:40 | 000,000,000 | —D | M] – C:\Users\Dave\AppData\Roaming\Azureus
[2011/05/04 23:21:02 | 000,000,000 | —D | M] – C:\Users\Dave\AppData\Roaming\com.oxygenxml
[2011/04/16 22:01:47 | 000,000,000 | —D | M] – C:\Users\Dave\AppData\Roaming\Domain Name Analyzer v6
[2011/07/16 12:03:18 | 000,000,000 | —D | M] – C:\Users\Dave\AppData\Roaming\EditPlus 3
[2011/04/21 11:35:30 | 000,000,000 | —D | M] – C:\Users\Dave\AppData\Roaming\eFax Messenger
[2011/04/07 07:17:53 | 000,000,000 | —D | M] – C:\Users\Dave\AppData\Roaming\Fidelity Investments
[2011/06/20 01:52:58 | 000,000,000 | —D | M] – C:\Users\Dave\AppData\Roaming\FileZilla
[2011/07/12 14:52:33 | 000,000,000 | —D | M] – C:\Users\Dave\AppData\Roaming\ImgBurn
[2011/04/21 11:37:09 | 000,000,000 | —D | M] – C:\Users\Dave\AppData\Roaming\j2 Global
[2011/04/01 16:10:08 | 000,000,000 | —D | M] – C:\Users\Dave\AppData\Roaming\Leadertech
[2011/04/17 20:38:48 | 000,000,000 | —D | M] – C:\Users\Dave\AppData\Roaming\MrSwingMessenger
[2011/06/20 00:31:04 | 000,000,000 | —D | M] – C:\Users\Dave\AppData\Roaming\MySQL
[2011/04/15 23:16:08 | 000,000,000 | —D | M] – C:\Users\Dave\AppData\Roaming\OpenOffice.org
[2011/04/02 12:47:57 | 000,000,000 | —D | M] – C:\Users\Dave\AppData\Roaming\Subversion
[2011/04/09 23:58:43 | 000,000,000 | —D | M] – C:\Users\Dave\AppData\Roaming\TradeStation Technologies
[2011/06/14 06:35:17 | 000,000,000 | —D | M] – C:\Users\Dave\AppData\Roaming\VectorVest, Inc
[2011/04/05 23:35:33 | 000,000,000 | —D | M] – C:\Users\Dave\AppData\Roaming\Windows Live Writer
[2009/07/14 00:08:49 | 000,009,852 | —- | M] () – C:\Windows\Tasks\SCHEDLGU.TXT
[2011/07/16 12:50:35 | 000,001,690 | —- | M] () – C:\Windows\Tasks\wrSpySweeper_LA0E265DA57074E6684B44ACB2D199614.job

========== Purity Check ==========



========== Custom Scans ==========


< %SYSTEMDRIVE%\*.* >
[2011/06/30 11:49:16 | 000,001,024 | —- | M] () – C:\.rnd
[2011/07/16 12:46:20 | 2131,890,175 | -HS- | M] () – C:\hiberfil.sys
[2011/07/08 11:48:19 | 000,002,760 | —- | M] () – C:\java_log.txt
[2011/07/16 12:17:54 | 000,000,029 | —- | M] () – C:\mini-agent.txt
[2011/07/16 12:46:20 | 4274,175,999 | -HS- | M] () – C:\pagefile.sys
[2011/07/13 03:20:18 | 000,000,000 | —- | M] () – C:\PocketCloudLog.txt
[2011/06/19 21:18:47 | 000,000,021 | -H– | M] () – C:\qpmd8379.bin
[2011/04/01 16:02:17 | 000,000,022 | -H– | M] () – C:\qpmd8380.bin
[2011/07/16 11:03:58 | 000,076,012 | —- | M] () – C:\TDSSKiller.2.5.11.0_16.07.2011_11.03.34_log.txt
[2011/07/16 11:06:27 | 000,002,132 | —- | M] () – C:\TDSSKiller.2.5.11.0_16.07.2011_11.06.13_log.txt
[2011/07/16 13:49:07 | 000,073,790 | —- | M] () – C:\TDSSKiller.2.5.11.0_16.07.2011_13.48.48_log.txt

< %systemroot%\Fonts\*.com >
[2009/07/14 00:32:31 | 000,026,040 | —- | M] () – C:\Windows\Fonts\GlobalMonospace.CompositeFont
[2009/07/14 00:32:31 | 000,026,489 | —- | M] () – C:\Windows\Fonts\GlobalSansSerif.CompositeFont
[2009/07/14 00:32:31 | 000,029,779 | —- | M] () – C:\Windows\Fonts\GlobalSerif.CompositeFont
[2009/07/14 00:32:31 | 000,043,318 | —- | M] () – C:\Windows\Fonts\GlobalUserInterface.CompositeFont

< %systemroot%\Fonts\*.dll >

< %systemroot%\Fonts\*.ini >
[2009/06/10 15:49:50 | 000,000,065 | —- | M] () – C:\Windows\Fonts\desktop.ini

< %systemroot%\Fonts\*.ini2 >

< %systemroot%\Fonts\*.exe >

< %systemroot%\system32\spool\prtprocs\w32x86\*.* >

< %systemroot%\REPAIR\*.bak1 >

< %systemroot%\REPAIR\*.ini >

< %systemroot%\system32\*.jpg >

< %systemroot%\*.jpg >

< %systemroot%\*.png >

< %systemroot%\*.scr >
[2010/11/10 02:28:46 | 000,301,936 | —- | M] (Microsoft Corporation) – C:\Windows\WLXPGSS.SCR
[3 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

< %systemroot%\*._sy >

< %APPDATA%\Adobe\Update\*.* >

< %ALLUSERSPROFILE%\Favorites\*.* >

< %APPDATA%\Microsoft\*.* >

< %PROGRAMFILES%\*.* >
[2009/07/13 23:54:24 | 000,000,174 | -HS- | M] () – C:\Program Files (x86)\desktop.ini

< %APPDATA%\Update\*.* >

< %systemroot%\*. /mp /s >

< %systemroot%\System32\config\*.sav >

< %PROGRAMFILES%\bak. /s >

< %systemroot%\system32\bak. /s >

< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >

< %systemroot%\system32\config\systemprofile\*.dat /x >

< %systemroot%\*.config >

< %systemroot%\system32\*.db >

< %PROGRAMFILES%\Internet Explorer\*.dat >

< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >
[2011/07/09 12:19:19 | 000,000,221 | -HS- | M] () – C:\Users\Dave\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini

< %USERPROFILE%\Desktop\*.exe >

< %PROGRAMFILES%\Common Files\*.* >

< %systemroot%\*.src >

< %systemroot%\install\*.* >

< %systemroot%\system32\DLL\*.* >

< %systemroot%\system32\HelpFiles\*.* >

< %systemroot%\system32\rundll\*.* >

< %systemroot%\winn32\*.* >

< %systemroot%\Java\*.* >

< %systemroot%\system32\test\*.* >

< %systemroot%\system32\Rundll32\*.* >

< %systemroot%\AppPatch\Custom\*.* >

< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >

========== Hard Links - Junction Points - Mount Points - Symbolic Links ==========
[C:\Windows\system64] -> \systemroot\system32 -> Mount Point

========== Alternate Data Streams ==========

@Alternate Data Stream - 64 bytes -> C:\Users\Dave\Documents\Bill_Phillips_NASCAR_June_13_2009_Part_2.avi:TOC.WMV
@Alternate Data Stream - 64 bytes -> C:\Users\Dave\Documents\Bill_Phillips_NASCAR_June_13_2009_Part_1.avi:TOC.WMV

< End of report >


Extras.txt


OTL Extras logfile created on: 7/16/2011 1:58:40 PM - Run 1
OTL by OldTimer - Version 3.2.26.1 Folder = C:\Users\Dave\Downloads
64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

7.98 Gb Total Physical Memory | 4.27 Gb Available Physical Memory | 53.45% Memory free
15.96 Gb Paging File | 9.55 Gb Available in Paging File | 59.83% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 931.41 Gb Total Space | 586.98 Gb Free Space | 63.02% Space Free | Partition Type: NTFS
Drive E: | 222.78 Gb Total Space | 10.12 Gb Free Space | 4.54% Space Free | Partition Type: NTFS
Drive F: | 10.00 Gb Total Space | 7.34 Gb Free Space | 73.36% Space Free | Partition Type: NTFS

Computer Name: DAVE-PC | User Name: Dave | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.url[@ = InternetShortcut] – C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] – C:\Windows\SysWow64\control.exe (Microsoft Corporation)

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %* File not found
cmdfile [open] – "%1" %* File not found
comfile [open] – "%1" %* File not found
exefile [open] – "%1" %* File not found
helpfile [open] – Reg Error: Key error.
inffile [install] – %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] – "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] – "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] – "%1" %* File not found
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1" File not found
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l File not found
scrfile [open] – "%1" /S File not found
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 File not found
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] – Reg Error: Value error.
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
cplfile [cplopen] – %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] – "%1" %*
helpfile [open] – Reg Error: Key error.
inffile [install] – %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] – Reg Error: Value error.
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

========== Authorized Applications List ==========


========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{13EA8B24-92CF-4AEB-B9C3-D3F374E35A7B}" = CollabNet Subversion Edge
"{1AAF3A3B-7B32-4DDF-8ABB-438DAEB46EEC}" = Windows Live Family Safety
"{1B8ABA62-74F0-47ED-B18C-A43128E591B8}" = Windows Live ID Sign-in Assistant
"{1DD03A94-C815-46EF-A43A-B36694002A7C}" = TortoiseSVN 1.6.16.21511 (64 bit)
"{234F6B0D-10AE-4BB7-B2F3-E48D4861952D}" = SQL Server 2008 R2 Common Files
"{26A24AE4-039D-4CA4-87B4-2F86416020FF}" = Java™ 6 Update 20 (64-bit)
"{288D79EE-A2D1-42AF-9597-B0ADCC23A8ED}" = Microsoft SQL Server VSS Writer
"{2BF35D84-6377-4F70-9F39-97CF67E67FFF}" = Microsoft IntelliPoint 8.0
"{362A3FDF-B12E-436A-9097-1B795A9FFCC5}" = Microsoft SQL Server 2008 R2 Native Client
"{36F70DEE-1EBF-4707-AFA2-E035EEAEBAA1}" = SQL Server 2008 R2 Common Files
"{46A5FBE9-ADB3-4493-A1CC-B4CFFD24D26A}" = Windows Live Family Safety
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{51E5BC99-A087-4CFF-8D93-462903EA7E12}" = SQL Server 2008 R2 Management Studio
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{656DEEDE-F6AC-47CA-A568-A1B4E34B5760}" = Windows Live Remote Service Resources
"{72AB7E6F-BC24-481E-8C45-1AB5B3DD795D}" = SQL Server 2008 R2 Management Studio
"{79FB3E7E-FD92-49A9-AAD1-193EE4CB85D3}" = Microsoft SQL Server 2008 R2 Setup (English)
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{8338783A-0968-3B85-AFC7-BAAE0A63DC50}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570
"{847B0532-55E3-4AAF-8D7B-E3A1A7CD17E5}" = Windows Live Remote Client Resources
"{8E34682C-8118-31F1-BC4C-98CD9675E1C2}" = Microsoft .NET Framework 4 Extended
"{90140000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2010
"{90140000-002A-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (English) 2010
"{90140000-0116-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2010
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{987FE247-4E69-4A2E-A961-D14F901FDBF6}" = Logitech Webcam Software
"{98C8DF59-BE5F-4EC2-9B12-FD2A54928EDB}" = Microsoft IntelliType Pro 8.0
"{A2122A9C-A699-4365-ADF8-68FEAC125D61}" = SQL Server 2008 R2 Database Engine Shared
"{B40EE88B-400A-4266-A17B-E3DE64E94431}" = Microsoft SQL Server 2008 Setup Support Files
"{BB57A765-FFFE-498B-8C1E-6C9CE2AB92BA}" = Microsoft SQL Server 2008 R2 RsFx Driver
"{C942A025-A840-4BF2-8987-849C0DD44574}" = SQL Server 2008 R2 Database Engine Shared
"{D07A61E5-A59C-433C-BCBD-22025FA2287B}" = Windows Live Language Selector
"{DA54F80E-261C-41A2-A855-549A144F2F59}" = Windows Live MIME IFilter
"{DF6D988A-EEA0-4277-AAB8-158E086E439B}" = Windows Live Remote Client
"{E02A6548-6FDE-40E2-8ED9-119D7D7E641F}" = Windows Live Remote Service
"{F31183CF-E10F-4DE1-BB59-6C0FF38E481E}" = Sql Server Customer Experience Improvement Program
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"{F7031258-A61A-4825-B893-B40F83917193}" = MySQL Server 5.5
"{FA7394B8-CE65-4F9E-AC99-F372AD365424}" = SQL Server 2008 R2 Database Engine Services
"{FBD367D1-642F-47CF-B79B-9BE48FB34007}" = SQL Server 2008 R2 Database Engine Services
"Adobe ColdFusion 8" = Adobe ColdFusion 8
"Adobe ColdFusion 8 .NET Integration Services" = Adobe ColdFusion 8 .NET Integration Services
"Adobe ColdFusion 9" = Adobe ColdFusion 9
"Adobe ColdFusion 9 .NET Integration Services" = Adobe ColdFusion 9 .NET Integration Services
"Adobe ColdFusion 9 Solr Service" = Adobe ColdFusion 9 Solr Service
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Microsoft SQL Server 10" = Microsoft SQL Server 2008 R2 (64-bit)
"Microsoft SQL Server 2008 R2" = Microsoft SQL Server 2008 R2 (64-bit)
"Uninstall Adobe ColdFusion 8 (Multiserver)" = Adobe ColdFusion 8 with JRun 4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}" = PDFCreator
"{076EFE8A-972E-4019-B073-68B3A3180BB9}" = NewsWatch
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{19BA08F7-C728-469C-8A35-BFBD3633BE08}" = Windows Live Movie Maker
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update
"{1FCC574F-AFA2-4432-9EF1-79CA7BA73431}_is1" = Spy Sweeper
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{26A24AE4-039D-4CA4-87B4-2F83216022F0}" = Java™ 6 Update 22
"{26A24AE4-039D-4CA4-87B4-2F83216024FF}" = Java™ 6 Update 26
"{2902F983-B4C1-44BA-B85D-5C6D52E2C441}" = Windows Live Mesh ActiveX Control for Remote Connections
"{32343DB6-9A52-40C9-87E4-5E7C79791C87}" = MSXML 4.0 SP2 and SOAP Toolkit 3.0
"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
"{34F4D9A4-42C2-4348-BEF4-E553C84549E7}" = Windows Live Photo Gallery
"{3A9FC03D-C685-4831-94CF-4EDFD3749497}" = Microsoft SQL Server Compact 3.5 SP2 ENU
"{3E171899-0175-47CC-84C4-562ACDD4C021}" = OpenOffice.org 3.3
"{3F5B6210-0903-4DC6-8034-8F488AA3A782}" = Spy Sweeper Core
"{40A05BA1-6154-4923-91E0-F9042027B37A}_is1" = PC Remote Controller version 2.31
"{423D74FB-274B-48E6-8C30-F972FD236E9D}" = Wealth-Lab Pro 6.1
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4ECF4BDC-8387-329A-ABE9-CF5798F84BB2}" = Microsoft Visual Studio Tools for Applications 2.0 - ENU
"{50816F92-1652-4A7C-B9BC-48F682742C4B}" = Messenger Companion
"{52937564-8312-4B49-BB13-F7EDBB67EB34}" = MySQL Workbench 5.2 CE
"{5442DAB8-7177-49E1-8B22-09A049EA5996}" = Renesas Electronics USB 3.0 Host Controller Driver
"{579684A4-DDD5-4CA3-9EA8-7BE7D9593DB4}" = Windows Live UX Platform Language Pack
"{5BF38771-6D8E-4D46-94A2-3AB3FEBE43D1}" = Modulus Data API
"{5EE7D259-D137-4438-9A5F-42F432EC0421}" = VC80CRTRedist - 8.0.50727.4053
"{6091F327-2B13-4193-A6F1-4B2271613A74}_is1" = Feed Notifier 2.4
"{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel® Management Engine Components
"{669A032D-4E28-3D11-BB26-8AD5D51EFE87}" = Google Talk Plugin
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{6EF11260-2361-409D-B91C-373D8732EED8}" = TradeStation 9.0
"{7370C0A9-327E-4A56-A611-EE9D69AA75C0}" = VectorVest 7
"{78A96B4C-A643-4D0F-98C2-A8E16A6669F9}" = Windows Live Messenger Companion Core
"{803259ED-7A67-4CB5-B6D7-281ED371091B}" = LogMeIn
"{80956555-A512-4190-9CAD-B000C36D6B6B}" = Windows Live Messenger
"{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform
"{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
"{880628D1-D5FB-4C9D-BE10-826E4FFCEF11}" = SmarterMail
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8C6D6116-B724-4810-8F2D-D047E6B7D68E}" = Mesh Runtime
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{8E03D101-DB54-482F-B84A-ED7AF90AD057}" = PocketCloud Windows Companion
"{8F1827C1-B8D9-42BC-B707-E59E74A69271}" = Fidelity Active Trader Pro®
"{90140000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2010
"{90140000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2010
"{90140000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2010
"{90140000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2010
"{90140000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2010
"{90140000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2010
"{90140000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2010
"{90140000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2010
"{90140000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2010
"{90140000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2010
"{90140000-003D-0000-0000-0000000FF1CE}" = Microsoft Office Single Image 2010
"{90140000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2010
"{90140000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2010
"{90140000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2010
"{90140000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2010
"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
"{A0C91188-C88F-4E86-93E6-CD7C9A266649}" = Windows Live Mesh
"{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
"{AAF454FC-82CA-4F29-AB31-6A109485E76E}" = Windows Live Writer
"{AC76BA86-7AD7-1033-7B44-AA0000000001}" = Adobe Reader X (10.0.1)
"{B3FED300-806C-11E0-A0D0-B8AC6F97B88E}" = Google Earth
"{BF9BF038-FE03-429D-9B26-2FA0FD756052}" = Microsoft SQL Server Browser
"{C66824E4-CBB3-4851-BB3F-E8CFD6350923}" = Windows Live Mail
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{D0B44725-3666-492D-BEF6-587A14BD9BD9}" = MSVCRT_amd64
"{D21BC5B2-CBAC-48FA-A701-B5A63C1CA7B8}" = Microsoft SQL Server 2008 R2 Policies
"{D24DB8B9-BB6C-4334-9619-BA1C650E13D3}" = Microsoft Primary Interoperability Assemblies 2005
"{D436F577-1695-4D2F-8B44-AC76C99E0002}" = Windows Live Photo Common
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{DA0BF7AB-88EB-4675-8FA1-531EAD938821}" = SnagIt 8
"{DBCC73BA-C69A-4BF5-B4BF-F07501EE7039}" = AnswerWorks 5.0 English Runtime
"{DDC8BDEE-DCAC-404D-8257-3E8D4B782467}" = Windows Live Writer Resources
"{DDFD8348-058C-4F4B-85E5-6D740D4AB3FE}" = Microsoft SQL Server Compact 3.5 SP2 Query Tools ENU
"{DECDCB7C-58CC-4865-91AF-627F9798FE48}" = Windows Live Mesh
"{DF6DA606-904D-4C18-823F-A4CFC3035E53}" = eFax Messenger
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{EB4DF488-AAEF-406F-A341-CB2AAA315B90}" = Windows Live Messenger
"{ED2A3C11-3EA8-4380-B59C-F2C1832731B0}" = Quicken 2009
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F37DC802-9565-4B57-9F3C-2289910E34FD}_is1" = FlowBreeze Standard [removed]
"{FCB10DE3-E190-4A7E-B06A-FAC61567ABFC}" = MySQL Tools for 5.0
"{FE044230-9CA5-43F7-9B58-5AC5A28A1F33}" = Windows Live Essentials
"8461-7759-5462-8226" = Vuze
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Belkin Setup and Router Monitor_is1" = Belkin Setup and Router Monitor
"DASTrader DEMO" = DASTrader DEMO [removed]
"DivX Setup.divx.com" = DivX Setup
"Domain Name Analyzer v6_is1" = Domain Name Analyzer v6.010311
"DynDNSUpdater" = DynDNS Updater
"EditPlus 3" = EditPlus 3
"Edraw Max_is1" = Edraw Max 5.7
"FileZilla Client" = FileZilla Client 3.5.0
"InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}" = Renesas Electronics USB 3.0 Host Controller Driver
"InstallShield_{880628D1-D5FB-4C9D-BE10-826E4FFCEF11}" = SmarterMail
"Logitech Vid" = Logitech Vid HD
"MagniDriver" = marvell 91xx console driver
"Microsoft Report Viewer Redistributable 2008 (KB971119)" = Microsoft Report Viewer Redistributable 2008 SP1
"Mozilla Firefox 4.0.1 (x86 en-US)" = Mozilla Firefox 4.0.1 (x86 en-US)
"MrSwingMessenger" = MrSwing Messenger
"N360" = Norton 360
"Office14.SingleImage" = Microsoft Office Professional 2010
"thinkorswim" = thinkorswim
"VirtualCloneDrive" = VirtualCloneDrive
"Windows Essentials Media Codec Pack" = Windows Essentials Media Codec Pack 3.4 [64-Bit]
"WinLiveSuite" = Windows Live Essentials
"WinMerge_is1" = WinMerge 2.12.4

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{226b64e8-dc75-4eea-a6c8-abcb496320f2}-Google Talk" = Google Talk (remove only)
"Google Chrome" = Google Chrome

========== Last 10 Event Log Errors ==========

Error reading Event Logs: The Event Service is not operating properly or the Event Logs are corrupt!

< End of report >