What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

RSJ.exe virus

60 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #1
My computer freezes at frequent intervals and I realized that there's a "RSJ.exe" process that keeps on increasing in RAM as i use my laptop. It even goes up to 200Mb+ and more. A few days ago, my webcam automatically turns on and off at frequent intervals. Now it's just freezing and the webcam doesn't turn on anymore. Please help me. I can't run my programs smoothly. Thank you very much for your help!! . DDS (Ver_11-03-05.01) - NTFS_AMD64 Run by [removed] at 20:43:13.13 on Thu 25/07/2013 Internet Explorer: 8.0.7601.17514 BrowserJavaVersion: 10.9.2 Microsoft Windows 7 Professional 6.1.7601.1.1252.60.1033.18.4095.1154 [GMT 8:00] . AV: Norton 360 *Enabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} SP: Norton 360 *Enabled/Updated* {D8BEB080-B73A-17E3-1B37-B6B462689202} FW: Norton 360 *Enabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4} . ============== Running Processes =============== . C:\Windows\system32\wininit.exe C:\Windows\system32\lsm.exe C:\Windows\system32\svchost.exe -k DcomLaunch C:\Windows\system32\nvvsvc.exe C:\Windows\system32\svchost.exe -k RPCSS C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted C:\Windows\system32\svchost.exe -k netsvcs C:\Windows\system32\svchost.exe -k LocalService C:\Windows\system32\nvvsvc.exe C:\Windows\system32\svchost.exe -k NetworkService C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe C:\Program Files\ATKGFNEX\GFNEXSrv.exe C:\Windows\System32\spoolsv.exe C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe C:\Program Files (x86)\Xamarin\Bonjour\mDNSResponder.exe C:\Program Files (x86)\BUFFALO\SLManagerEasy\Bufssvr.exe C:\Program Files (x86)\BUFFALO\SLManagerEasy\Inputps.exe C:\Program Files (x86)\Connectify\ConnectifyService.exe C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation C:\Program Files (x86)\Connectify\ConnectifyD.exe C:\Program Files (x86)\Yes\Connect\GCTWiMaxServiceD.exe C:\Windows\system32\conhost.exe C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE C:\Windows\SysWOW64\lkcitdl.exe C:\Windows\SysWOW64\lkads.exe C:\Windows\SysWOW64\lktsrv.exe C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe C:\Program Files (x86)\Canon\Easy-WebPrint EX\bin\mysqld.exe C:\Program Files (x86)\Norton 360\Engine\20.4.0.40\ccSvcHst.exe C:\Program Files (x86)\National Instruments\Shared\Security\nidmsrv.exe C:\Windows\SysWOW64\nisvcloc.exe C:\Program Files\Raxco\PerfectDisk\PDAgent.exe C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe C:\Windows\system32\wbem\wmiprvse.exe C:\Program Files\Common Files\Raxco\Shared\PDEngine.exe C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe C:\Program Files\Windows Media Player\wmpnetwk.exe C:\Windows\system32\SearchIndexer.exe C:\Windows\system32\taskhost.exe C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Program Files (x86)\ASUS\ATK Hotkey\HControl.exe C:\Program Files (x86)\ASUS\ATK Hotkey\Atouch64.exe C:\Program Files (x86)\ASUS\ATK Hotkey\ATKOSD.exe C:\Program Files (x86)\ASUS\ATK Hotkey\WDC.exe C:\Program Files (x86)\Norton 360\Engine\20.4.0.40\ccSvcHst.exe C:\Windows\system32\taskeng.exe C:\Windows\System32\TiltWheelMouse.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Users\Victor\AppData\Local\Google\Update\GoogleUpdate.exe C:\Program Files (x86)\ExpressFiles\EFupdater.exe C:\Program Files (x86)\Garena Plus\GarenaMessenger.exe C:\Program Files (x86)\Garena Plus\ggdllhost.exe C:\Program Files (x86)\Internet Download Manager\IDMan.exe C:\Program Files (x86)\Warkeys\AutoWarkey\AutoHotkey\AutoHotkey.exe C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe C:\Windows\system32\wuauclt.exe C:\Program Files (x86)\Ask.com\Updater\Updater.exe C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe D:\itunes\iTunesHelper.exe C:\ProgramData\ICLJIG\RSJ.exe C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe C:\Program Files\Raxco\PerfectDisk\PDAgentS1.exe C:\Program Files\iPod\bin\iPodService.exe C:\Windows\System32\svchost.exe -k LocalServicePeerNet C:\Windows\system32\DllHost.exe C:\Users\Victor\Downloads\Programs\OTL_2.exe C:\Users\Victor\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Victor\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Victor\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Victor\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Victor\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Victor\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Victor\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Victor\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Victor\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Victor\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Victor\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Victor\AppData\Local\Google\Chrome\Application\chrome.exe C:\Windows\notepad.exe C:\Windows\explorer.exe C:\Windows\system32\SearchProtocolHost.exe C:\Windows\system32\SearchFilterHost.exe C:\Users\Victor\Downloads\dds.scr C:\Windows\system32\conhost.exe . ============== Pseudo HJT Report =============== . uSearch Bar = Preserve uStart Page = hxxp://securityresponse.symantec.com/avcenter/fix_homepage uInternet Settings,ProxyOverride = local;*.local uURLSearchHooks: YTD Toolbar: {f3fee66e-e034-436a-86e4-9690573bee8a} - C:\Program Files (x86)\YTD Toolbar\IE\7.3\ytdToolbarIE.dll mURLSearchHooks: Vuze Remote Toolbar: {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files (x86)\Vuze_Remote\prxtbVuze.dll mWinlogon: Userinit=C:\Windows\system32\userinit.exe BHO: Octh Class: {000123b4-9b42-4900-b3f7-f4b073efc214} - C:\Program Files (x86)\Orbitdownloader\orbitcth.dll BHO: IDM integration (IDMIEHlprObj Class): {0055c089-8582-441b-a0bf-17b458c2a3a8} - C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll BHO: &Yahoo! Toolbar Helper: {02478d38-c3f9-4efb-9b51-7695eca05670} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn2\yt.dll BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll BHO: Babylon toolbar helper: {2eecd738-5844-4a99-b4b6-146bf802613b} - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\bh\BabylonToolbar.dll BHO: RealNetworks Download and Record Plugin for Internet Explorer: {3049c3e9-b461-4bc5-8870-4c09146192ca} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll BHO: Canon Easy-WebPrint EX BHO: {3785d0ad-bfff-47f6-bf5b-a587c162fed9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll BHO: Norton Identity Protection: {602adb0e-4aff-4217-8aa1-95dac4dfa408} - C:\Program Files (x86)\Norton 360\Engine\20.4.0.40\coIEPlg.dll BHO: Norton Vulnerability Protection: {6d53ec84-6aae-4787-aeee-f4628f01010c} - C:\Program Files (x86)\Norton 360\Engine\20.4.0.40\IPS\IPSBHO.DLL BHO: Java™ Plug-In SSV Helper: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll BHO: IE5BarLauncherBHO Class: {78f3a323-798e-4aea-9a57-88f4b05fd5dd} - C:\Program Files (x86)\vShare.tv plugin\BarLcher.dll BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll BHO: Coolyou Class: {988e8086-cd62-8d65-6fbb-1f730cd4c581} - C:\ProgramData\Coolyou\bhoclass.dll BHO: Skype Browser Helper: {ae805869-2e5c-4ed4-8f7b-f1f7851a4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll BHO: Vuze Remote Toolbar: {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files (x86)\Vuze_Remote\prxtbVuze.dll BHO: FDMIECookiesBHO Class: {cc59e0f9-7e43-44fa-9faa-8377850bf205} - C:\Program Files (x86)\Free Download Manager\iefdm2.dll BHO: Search-Results Toolbar: {d4027c7f-154a-4066-a1ad-4243d8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll BHO: Microsoft Web Test Recorder 10.0 Helper: {dda57003-0068-4ed2-9d32-4d1ec707d94d} - c:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll BHO: YTD Toolbar: {f3fee66e-e034-436a-86e4-9690573bee8a} - C:\Program Files (x86)\YTD Toolbar\IE\7.3\ytdToolbarIE.dll BHO: SingleInstance Class: {fdad4da1-61a2-4fd8-9c17-86f7ac245081} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn0\YTSingleInstance.dll TB: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn2\yt.dll TB: VShareToolBar: {7ac3e13b-3bca-4158-b330-f66dbb03c1b5} - C:\Program Files (x86)\vShare.tv plugin\BarLcher.dll TB: Search-Results Toolbar: {d4027c7f-154a-4066-a1ad-4243d8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll TB: Canon Easy-WebPrint EX: {759d9886-0c6f-4498-bab6-4a5f47c6c72f} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll TB: Babylon Toolbar: {98889811-442d-49dd-99d7-dc866be87dbc} - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarTlbr.dll TB: Vuze Remote Toolbar: {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files (x86)\Vuze_Remote\prxtbVuze.dll TB: Norton Toolbar: {7febefe3-6b19-4349-98d2-ffb09d4b49ca} - C:\Program Files (x86)\Norton 360\Engine\20.4.0.40\coIEPlg.dll TB: Grab Pro: {c55bbcd6-41ad-48ad-9953-3609c48eacc7} - C:\Program Files (x86)\Orbitdownloader\GrabPro.dll TB: YTD Toolbar: {f3fee66e-e034-436a-86e4-9690573bee8a} - C:\Program Files (x86)\YTD Toolbar\IE\7.3\ytdToolbarIE.dll TB: {977AE9CC-AF83-45E8-9E03-E2798216E2D5} - No File EB: Web Test Recorder 10.0: {5802d092-1784-4908-8cdb-99b6842d353d} - mscoree.dll EB: Canon Easy-WebPrint EX: {21347690-ec41-4f9a-8887-1f4aee672439} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll uRun: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun uRun: [Norton Download Manager{N360S_prod_1.19_4.1.0.32}] C:\Users\Public\Downloads\Norton\{N360S_prod_1.19_4.1.0.32}\N360Downloader.exe /m uRun: [Google Update] "C:\Users\Victor\AppData\Local\Google\Update\GoogleUpdate.exe" /c uRun: [Auto-Joiner.exe] C:\Users\Victor\Desktop\roomjoiner\Auto-Joiner.exe uRun: [GarenaPlus] "C:\Program Files (x86)\Garena Plus\GarenaMessenger.exe" -autolaunch uRun: [IDMan] C:\Program Files (x86)\Internet Download Manager\IDMan.exe /onboot mRun: [HControlUser] C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe mRun: [ATKOSD2] C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe mRun: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" mRun: [ApnUpdater] "C:\Program Files (x86)\Ask.com\Updater\Updater.exe" mRun: [TkBellExe] "C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe" -osboot mRun: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" mRun: [iTunesHelper] "D:\itunes\iTunesHelper.exe" mRun: [RSJ Start] C:\ProgramData\ICLJIG\RSJ.exe mRun: [] mRun: [SearchSettings] "C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe" dRunOnce: [] dRunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 StartupFolder: C:\Users\Victor\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\MY_AUT~1.LNK - C:\Program Files (x86)\Warkeys\AutoWarkey\AutoHotkey\AutoHotkey.exe mPolicies-explorer: NoActiveDesktop = 1 (0x1) mPolicies-system: ConsentPromptBehaviorAdmin = 0 (0x0) mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3) mPolicies-system: EnableLUA = 0 (0x0) mPolicies-system: EnableUIADesktopToggle = 0 (0x0) mPolicies-system: PromptOnSecureDesktop = 0 (0x0) IE: &Download by Orbit - C:\Program Files (x86)\Orbitdownloader\orbitmxt.dll/201 IE: &Grab video by Orbit - C:\Program Files (x86)\Orbitdownloader\orbitmxt.dll/204 IE: Do&wnload selected by Orbit - C:\Program Files (x86)\Orbitdownloader\orbitmxt.dll/203 IE: Down&load all by Orbit - C:\Program Files (x86)\Orbitdownloader\orbitmxt.dll/202 IE: Download all links with IDM - C:\Program Files (x86)\Internet Download Manager\IEGetAll.htm IE: Download with IDM - C:\Program Files (x86)\Internet Download Manager\IEExt.htm IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\PROGRA~2\MICROS~2\Office12\ONBttnIE.dll IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - C:\PROGRA~2\MICROS~2\Office12\REFIEBAR.DLL DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_09-windows-i586.cab DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} - hxxp://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab DPF: {CAFEEFAC-0016-0000-0039-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_39-windows-i586.cab DPF: {CAFEEFAC-0017-0000-0009-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_09-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_39-windows-i586.cab DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab TCP: {9E0C852C-AFD0-4E3F-9006-5524CAB189DB} = 10.101.0.10,10.101.0.12 TCP: {BAEB82D4-2B9C-445F-BC90-61A667B4EABD} = 8.8.8.8,8.8.4.4 TCP: 14E64627F69646140536F636 = 8.8.8.8,8.8.4.4 Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL BHO-X64: IDM integration (IDMIEHlprObj Class): {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll BHO-X64: IDM Helper - No File BHO-X64: Java™ Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll BHO-X64: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll BHO-X64: Java™ Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll BHO-X64: Hotspot Shield Class: {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - C:\Program Files (x86)\Hotspot Shield\HssIE\HssIE_64.dll TB-X64: {7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} - No File TB-X64: {D4027C7F-154A-4066-A1AD-4243D8127440} - No File TB-X64: {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - No File TB-X64: {977AE9CC-AF83-45E8-9E03-E2798216E2D5} - No File TB-X64: {BA14329E-9550-4989-B3F2-9732E92D17CC} - No File TB-X64: {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - No File EB-X64: {21347690-EC41-4F9A-8887-1F4AEE672439} - No File mRun-x64: [MouseDriver] TiltWheelMouse.exe . ================= FIREFOX =================== . FF - ProfilePath - C:\Users\Victor\AppData\Roaming\Mozilla\Firefox\Profiles\68rj7rey.default\ FF - prefs.js: browser.search.defaulturl - FF - prefs.js: browser.search.selectedEngine - Search-Results FF - prefs.js: browser.startup.homepage - www.google.com FF - component: C:\Program Files (x86)\Free Download Manager\Firefox\Extension\components\vmsfdmff.dll FF - component: C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}\components\SkypeFfComponent.dll FF - component: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.1.0.32\coFFPlgn_2010_9_0_6\components\coFFPlgn.dll FF - component: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.1.0.32\IPSFFPlgn\components\IPSFFPl.dll FF - component: C:\Users\Victor\AppData\Roaming\IDM\idmmzcc5\components\idmmzcc.dll FF - plugin: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll FF - plugin: C:\Program Files (x86)\AhnLab\ASP\Components\aosmgr\conflict_221\npaosmgr.dll FF - plugin: C:\Program Files (x86)\AhnLab\ASP\MyKeyDefense 2.5\npmkd25aos.dll FF - plugin: C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL FF - plugin: C:\Program Files (x86)\Garena Plus\bbtalk\plugins\npPlugin\npGarenaTalkPlugin.dll FF - plugin: C:\Program Files (x86)\Java\jre6\bin\plugin2\npdeployJava1.dll FF - plugin: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll FF - plugin: C:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrlui.dll FF - plugin: C:\Program Files (x86)\Mozilla Firefox\plugins\NPLV82Win32.dll FF - plugin: C:\Program Files (x86)\Mozilla Firefox\plugins\nprpplugin.dll FF - plugin: C:\Program Files (x86)\Mozilla Firefox\plugins\npvsharetvplg.dll FF - plugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll FF - plugin: c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll FF - plugin: C:\ProgramData\NexonUS\NGM\npNxGameUS.dll FF - plugin: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll FF - plugin: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll FF - plugin: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll FF - plugin: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll FF - plugin: C:\Users\Victor\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll FF - plugin: C:\Users\Victor\AppData\Local\Google\Update\1.3.21.145\npGoogleUpdate3.dll FF - plugin: C:\Users\Victor\AppData\Roaming\Mozilla\Firefox\Profiles\68rj7rey.default\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}\plugins\np-mswmp.dll FF - plugin: C:\Users\Victor\AppData\Roaming\Mozilla\Firefox\Profiles\68rj7rey.default\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}\plugins\npConduitFirefoxPlugin.dll FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_202.dll FF - plugin: C:\Windows\SysWOW64\npDeployJava1.dll FF - plugin: C:\Windows\SysWOW64\npmproxy.dll FF - plugin: D:\itunes\Mozilla Plugins\npitunes.dll . —- FIREFOX POLICIES —- FF - user.js: yahoo.ytff.general.dontshowhpoffer - true);user_pref(extensions.BabylonToolbar_i.babTrack, affID=109932 FF - user.js: extensions.BabylonToolbar_i.babExt - FF - user.js: extensions.BabylonToolbar_i.srcExt - ss FF - user.js: extensions.BabylonToolbar_i.id - acbb0ec200000000000000ff2dec01d2 FF - user.js: extensions.BabylonToolbar_i.hardId - acbb0ec200000000000000ff2dec01d2 FF - user.js: extensions.BabylonToolbar_i.instlDay - 15404 FF - user.js: extensions.BabylonToolbar_i.vrsn - 1.5.3.17 FF - user.js: extensions.BabylonToolbar_i.vrsni - 1.5.3.17 FF - user.js: extensions.BabylonToolbar_i.vrsnTs - [removed]:35:17 FF - user.js: extensions.BabylonToolbar_i.prtnrId - babylon FF - user.js: extensions.BabylonToolbar_i.prdct - BabylonToolbar FF - user.js: extensions.BabylonToolbar_i.aflt - babsst FF - user.js: extensions.BabylonToolbar_i.smplGrp - none FF - user.js: extensions.BabylonToolbar_i.tlbrId - tb9 FF - user.js: extensions.BabylonToolbar_i.instlRef - sst FF - user.js: extentions.y2layers.installId - 781f9b5c-d004-4c58-aa86-761db8c772a3 FF - user.js: extentions.y2layers.defaultEnableAppsList - twittube,buzzdock,YontooNewOffers . FF - user.js: extensions.autoDisableScopes - 14 . ============= SERVICES / DRIVERS =============== . R0 SMR322;Symantec SMR Utility Service 3.2.2;C:\Windows\System32\drivers\SMR322.SYS [2013-7-24 96856] R0 SymDS;Symantec Data Store;C:\Windows\System32\drivers\N360x64\1404000.028\SymDS64.sys [2013-7-21 493656] R0 SymEFA;Symantec Extended File Attributes;C:\Windows\System32\drivers\N360x64\1404000.028\SymEFA64.sys [2013-7-21 1139800] R1 BHDrvx64;BHDrvx64;C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.4.0.40\Definitions\BASHDefs\20130715.001\BHDrvx64.sys [2013-7-22 1393240] R1 ccSet_N360;Norton 360 Settings Manager;C:\Windows\System32\drivers\N360x64\1404000.028\ccSetx64.sys [2013-7-21 169048] R1 cnnctfy2;Connectify LightWeight Filter;C:\Windows\System32\drivers\cnnctfy2.sys [2012-12-13 31344] R1 IDSVia64;IDSVia64;C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.4.0.40\Definitions\IPSDefs\20130724.001\IDSviA64.sys [2013-7-25 513184] R1 SymIRON;Symantec Iron Driver;C:\Windows\System32\drivers\N360x64\1404000.028\Ironx64.sys [2013-7-21 224416] R1 SymNetS;Symantec Network Security WFP Driver;C:\Windows\System32\drivers\N360x64\1404000.028\symnets.sys [2013-7-21 433752] R1 VWiFiFlt;Virtual WiFi Filter Driver;C:\Windows\System32\drivers\vwififlt.sys [2009-7-14 59904] R2 AdobeARMservice;Adobe Acrobat Update Service;C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-6-6 64952] R2 Application Updater;Application Updater;C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe [2013-7-5 807800] R2 ASMMAP64;ASMMAP64;C:\Program Files\ATKGFNEX\ASMMAP64.sys [2011-6-10 14904] R2 bufssvr;bufssvr;C:\Program Files (x86)\BUFFALO\SLManagerEasy\Bufssvr.exe [2010-3-12 90112] R2 Connectify;Connectify;C:\Program Files (x86)\Connectify\ConnectifyService.exe [2012-5-3 65536] R2 GCTWiMaxServiceD;Connect Service Daemon;C:\Program Files (x86)\Yes\Connect\GCTWiMaxServiceD.exe [2011-10-24 528477] R2 GdmWmPrt;Yes Go Protocol Driver;C:\Windows\System32\drivers\gdmwmprt.sys [2011-10-24 32768] R2 IDMWFP;IDMWFP;C:\Windows\System32\drivers\idmwfp.sys [2013-2-21 165112] R2 MBAMScheduler;MBAMScheduler;C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [2013-7-23 418376] R2 MBAMService;MBAMService;C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2013-7-23 701512] R2 N360;Norton 360;C:\Program Files (x86)\Norton 360\Engine\20.4.0.40\ccSvcHst.exe [2013-7-21 144368] R2 PDFSFilter;PDFSFilter;C:\Windows\System32\drivers\PDFsFilter.sys [2011-9-7 79888] R2 RealNetworks Downloader Resolver Service;RealNetworks Downloader Resolver Service;C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [2012-11-29 38608] R2 Skype C2C Service;Skype C2C Service;C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe [2012-5-30 3048136] R3 EraserUtilRebootDrv;EraserUtilRebootDrv;C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2012-8-10 138912] R3 itecir;ITECIR Infrared Receiver;C:\Windows\System32\drivers\itecir.sys [2010-7-13 69736] R3 MBAMProtector;MBAMProtector;C:\Windows\System32\drivers\mbam.sys [2013-7-23 25928] R3 NETwNs64;___ Intel® Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit;C:\Windows\System32\drivers\NETwNs64.sys [2012-10-23 8616960] R3 NVHDA;Service for NVIDIA High Definition Audio Driver;C:\Windows\System32\drivers\nvhda64v.sys [2011-6-10 81952] R3 RTL8167;Realtek 8167 NT Driver;C:\Windows\System32\drivers\Rt64win7.sys [2009-6-11 187392] R3 t_mouse.sys;iBall Advanced Mouse;C:\Windows\System32\drivers\t_mouse.sys [2009-4-16 25088] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2012-7-9 104912] S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2012-7-8 123856] S2 SkypeUpdate;Skype Updater;C:\Program Files (x86)\Skype\Updater\Updater.exe [2012-2-29 158856] S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-4-10 256904] S3 CoordinatorServiceHost;SW Distributed TS Coordinator Service;C:\Program Files\SolidWorks Corp\SolidWorks (2)\swScheduler\DTSCoordinatorService.exe [2011-9-27 89160] S3 cpudrv64;cpudrv64;C:\Program Files (x86)\SystemRequirementsLab\cpudrv64.sys [2011-6-2 17864] S3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64;C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2011-11-4 1431888] S3 GDMINIT;GCT Initial Device Driver;C:\Windows\System32\drivers\gdminit.sys [2011-10-24 32768] S3 GdmUWm;Yes Go;C:\Windows\System32\drivers\gdmuwm.sys [2011-10-24 111104] S3 ivusb;Initio Driver for USB Default Controller;C:\Windows\System32\drivers\ivusb.sys [2010-7-29 29720] S3 Mkd2Nadr;Mkd2Nadr;C:\Windows\System32\drivers\Mkd2Nadr.sys [2011-6-10 106040] S3 Mkd3kfNt;Mkd3kfNt;C:\Windows\System32\drivers\mkd3kfnt.sys [2011-6-10 179768] S3 MozillaMaintenance;Mozilla Maintenance Service;C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2013-5-22 129976] S3 netw5v64;Intel® Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit;C:\Windows\System32\drivers\netw5v64.sys [2009-6-11 5434368] S3 StorSvc;Storage Service;C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted [2009-7-14 27136] S3 taphss6;Anchorfree HSS VPN Adapter;C:\Windows\System32\drivers\taphss6.sys [2013-1-11 42184] S3 TsUsbFlt;TsUsbFlt;C:\Windows\System32\drivers\TsUsbFlt.sys [2011-7-4 59392] S3 USBAAPL64;Apple Mobile USB Driver;C:\Windows\System32\drivers\usbaapl64.sys [2012-12-13 54784] S3 VSPerfDrv100;Performance Tools Driver 10.0;C:\Program Files (x86)\Microsoft Visual Studio 10.0\Team Tools\Performance Tools\x64\VSPerfDrv100.sys [2010-3-17 68440] S3 vwifimp;Microsoft Virtual WiFi Miniport Service;C:\Windows\System32\drivers\vwifimp.sys [2009-7-14 17920] S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\System32\Wat\WatAdminSvc.exe [2011-6-10 1255736] S3 WDC_SAM;WD SCSI Pass Thru driver;C:\Windows\System32\drivers\wdcsam64.sys [2008-5-6 14464] S4 MSSQLServerADHelper100;SQL Active Directory Helper Service;C:\Program Files\Microsoft SQL Server\100\Shared\sqladhlp.exe [2009-7-22 61976] S4 RsFx0103;RsFx0103 Driver;C:\Windows\System32\drivers\RsFx0103.sys [2009-3-30 311656] S4 SQLAgent$SQLEXPRESS;SQL Server Agent (SQLEXPRESS);C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [2009-3-30 427880] . =============== Created Last 30 ================ . 2013-07-25 10:05:50 ——– d—–w- C:\Users\Victor\AppData\Roaming\SpeedyPC Software 2013-07-25 10:05:50 ——– d—–w- C:\Users\Victor\AppData\Roaming\DriverCure 2013-07-25 10:05:20 ——– d—–w- C:\PROGRA~3\SpeedyPC Software 2013-07-24 23:03:23 67632 —-a-w- C:\Windows\System32\msln.exe 2013-07-24 14:01:06 96856 —-a-w- C:\Windows\System32\drivers\SMR322.SYS 2013-07-24 13:31:39 ——– d—–w- C:\Program Files (x86)\Application Updater 2013-07-24 13:31:38 ——– d—–w- C:\Program Files (x86)\YTD Toolbar 2013-07-24 13:31:38 ——– d—–w- C:\Program Files (x86)\Common Files\Spigot 2013-07-23 14:59:43 ——– d—–w- C:\Users\Victor\AppData\Roaming\Malwarebytes 2013-07-23 14:59:19 ——– d—–w- C:\PROGRA~3\Malwarebytes 2013-07-23 14:59:13 25928 —-a-w- C:\Windows\System32\drivers\mbam.sys 2013-07-23 14:59:12 ——– d—–w- C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-07-21 13:25:35 ——– d—–w- C:\PROGRA~3\YTD Video Downloader 2013-07-21 10:39:53 ——– d—–w- C:\PROGRA~3\UEL 2013-07-21 10:39:52 ——– d-sh–w- C:\PROGRA~3\ICLJIG 2013-07-21 10:13:40 ——– d—–w- C:\Users\Victor\AppData\Roaming\GrabPro 2013-07-21 09:49:00 ——– d—–w- C:\Users\Victor\AppData\Roaming\ProgSense 2013-07-21 09:48:10 ——– d—–w- C:\Program Files (x86)\Orbitdownloader 2013-07-21 09:43:57 796760 —-a-r- C:\Windows\System32\drivers\N360x64\1404000.028\srtsp64.sys 2013-07-21 09:43:57 493656 —-a-r- C:\Windows\System32\drivers\N360x64\1404000.028\SymDS64.sys 2013-07-21 09:43:57 433752 —-a-r- C:\Windows\System32\drivers\N360x64\1404000.028\symnets.sys 2013-07-21 09:43:57 36952 —-a-r- C:\Windows\System32\drivers\N360x64\1404000.028\srtspx64.sys 2013-07-21 09:43:57 23448 —-a-r- C:\Windows\System32\drivers\N360x64\1404000.028\SymELAM.sys 2013-07-21 09:43:57 224416 —-a-r- C:\Windows\System32\drivers\N360x64\1404000.028\Ironx64.sys 2013-07-21 09:43:57 169048 —-a-r- C:\Windows\System32\drivers\N360x64\1404000.028\ccSetx64.sys 2013-07-21 09:43:57 1139800 —-a-r- C:\Windows\System32\drivers\N360x64\1404000.028\SymEFA64.sys 2013-07-21 09:43:43 ——– d—–w- C:\Windows\System32\drivers\N360x64\1404000.028 2013-07-18 13:29:35 108968 —-a-w- C:\Windows\System32\WindowsAccessBridge-64.dll 2013-07-17 12:57:46 ——– d—–w- C:\VS2012_PROJECTTEMPLATES_DIR 2013-07-17 12:57:41 ——– d—–w- C:\Program Files (x86)\Xamarin 2013-07-17 12:57:39 ——– d—–w- C:\VS2012_ITEMTEMPLATES_DIR 2013-07-17 12:57:32 ——– d—–w- C:\VS2012_EXTENSIONS_DIR 2013-07-17 12:47:38 ——– d—–w- C:\PROGRA~3\Monodoc 2013-07-17 12:47:25 ——– d—–w- C:\Program Files (x86)\Microsoft Visual Studio 11.0 2013-07-17 12:45:28 ——– d—–w- C:\Program Files (x86)\MonoDevelop 2013-07-17 12:45:16 ——– d—–w- C:\Program Files (x86)\Xamarin Studio 2013-07-17 12:21:30 ——– d—–w- C:\Program Files (x86)\GtkSharp 2013-07-17 12:12:44 ——– d—–w- C:\Program Files\Android 2013-07-17 11:26:11 ——– d—–w- C:\PROGRA~3\Package Cache 2013-07-17 11:00:18 ——– d—–w- C:\Users\Victor\AppData\Local\Xamarin 2013-07-02 11:29:18 ——– d—–w- C:\PROGRA~3\IDM . ==================== Find3M ==================== . 2013-07-21 09:45:02 177312 —-a-w- C:\Windows\System32\drivers\SYMEVENT64x86.SYS 2013-07-18 13:29:24 972712 —-a-w- C:\Windows\System32\deployJava1.dll 2013-07-18 13:29:24 1093032 —-a-w- C:\Windows\System32\npDeployJava1.dll 2013-06-13 12:44:56 71048 —-a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl 2013-06-13 12:44:56 692104 —-a-w- C:\Windows\SysWow64\FlashPlayerApp.exe 2013-06-13 12:44:47 9089416 —-a-w- C:\Windows\SysWow64\FlashPlayerInstaller.exe 2011-10-14 04:04:44 549168 —-a-w- C:\Program Files (x86)\Uninstall.exe 2011-07-02 17:44:04 6452224 —-a-w- C:\Program Files (x86)\JuzLoader GUI.exe 2011-06-30 18:10:48 140800 —-a-w- C:\Program Files (x86)\juzloader.exe 2011-06-30 13:32:10 2700 —-a-w- C:\Program Files (x86)\juzdotabnet.reg 2011-04-26 13:13:58 5073240 —-a-w- C:\Program Files (x86)\vcredist_x86.exe 2011-03-16 18:21:22 68608 —-a-w- C:\Program Files (x86)\w3lh.dll 2011-03-02 13:37:18 325968 —-a-w- C:\Program Files (x86)\lua5.1.dll 2011-03-02 13:37:16 11264 —-a-w- C:\Program Files (x86)\lua51.dll . ============= FINISH: 20:44:49.06 =============== . UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG. IF REQUESTED, ZIP IT UP & ATTACH IT . DDS (Ver_11-03-05.01) . Microsoft Windows 7 Professional Boot Device: \Device\HarddiskVolume2 Install Date: 9/6/2011 2:47:24 PM System Uptime: 25/7/2013 7:51:24 PM (1 hours ago) . Motherboard: ASUSTeK Computer Inc. | | N80Vb Processor: Intel® Core™2 Duo CPU T7500 @ 2.20GHz | Socket 478 | 2201/200mhz . ==== Disk Partitions ========================= . C: is FIXED (NTFS) - 116 GiB total, 1.97 GiB free. D: is FIXED (NTFS) - 107 GiB total, 0.961 GiB free. E: is CDROM () F: is CDROM () . ==== Disabled Device Manager Items ============= . Class GUID: {4d36e972-e325-11ce-bfc1-08002be10318} Description: Microsoft Loopback Adapter Device ID: ROOT\NET\0001 Manufacturer: Microsoft Name: Microsoft Loopback Adapter #2 PNP Device ID: ROOT\NET\0001 Service: msloop . Class GUID: {4d36e972-e325-11ce-bfc1-08002be10318} Description: Microsoft Loopback Adapter Device ID: ROOT\NET\0002 Manufacturer: Microsoft Name: Microsoft Loopback Adapter #3 PNP Device ID: ROOT\NET\0002 Service: msloop . Class GUID: {4d36e972-e325-11ce-bfc1-08002be10318} Description: Microsoft Loopback Adapter Device ID: ROOT\NET\0003 Manufacturer: Microsoft Name: Microsoft Loopback Adapter #4 PNP Device ID: ROOT\NET\0003 Service: msloop . Class GUID: {4d36e972-e325-11ce-bfc1-08002be10318} Description: Microsoft Loopback Adapter Device ID: ROOT\NET\0005 Manufacturer: Microsoft Name: Microsoft Loopback Adapter #5 PNP Device ID: ROOT\NET\0005 Service: msloop . Class GUID: {4d36e972-e325-11ce-bfc1-08002be10318} Description: Microsoft Loopback Adapter Device ID: ROOT\NET\0006 Manufacturer: Microsoft Name: Microsoft Loopback Adapter #6 PNP Device ID: ROOT\NET\0006 Service: msloop . Class GUID: {4d36e972-e325-11ce-bfc1-08002be10318} Description: Microsoft Loopback Adapter Device ID: ROOT\NET\0007 Manufacturer: Microsoft Name: Microsoft Loopback Adapter #7 PNP Device ID: ROOT\NET\0007 Service: msloop . Class GUID: {4d36e972-e325-11ce-bfc1-08002be10318} Description: Microsoft Loopback Adapter Device ID: ROOT\NET\0008 Manufacturer: Microsoft Name: Microsoft Loopback Adapter #8 PNP Device ID: ROOT\NET\0008 Service: msloop . Class GUID: {4d36e972-e325-11ce-bfc1-08002be10318} Description: Microsoft Loopback Adapter Device ID: ROOT\NET\0009 Manufacturer: Microsoft Name: Microsoft Loopback Adapter #9 PNP Device ID: ROOT\NET\0009 Service: msloop . Class GUID: {4d36e972-e325-11ce-bfc1-08002be10318} Description: Microsoft Loopback Adapter Device ID: ROOT\NET\0010 Manufacturer: Microsoft Name: Microsoft Loopback Adapter #10 PNP Device ID: ROOT\NET\0010 Service: msloop . Class GUID: {6bdd1fc6-810f-11d0-bec7-08002be2092f} Description: USB Video Device Device ID: USB\VID_04F2&PID_B071&MI_00\6&32D26C37&0&0000 Manufacturer: Microsoft Name: USB2.0 1.3M UVC WebCam PNP Device ID: USB\VID_04F2&PID_B071&MI_00\6&32D26C37&0&0000 Service: usbvideo . Class GUID: {4d36e972-e325-11ce-bfc1-08002be10318} Description: Microsoft Loopback Adapter Device ID: ROOT\NET\0000 Manufacturer: Microsoft Name: Microsoft Loopback Adapter PNP Device ID: ROOT\NET\0000 Service: msloop . ==== System Restore Points =================== . RP467: 25/7/2013 8:09:27 PM - OTL Restore Point - 25/7/2013 8:09:26 PM . ==== Installed Programs ====================== . . Leawo 3GP Converter version 4.1.0.1 Update for Microsoft Office 2007 (KB2508958) µTorrent 4G Network Manager 7-Zip 9.20 7 Sticky Notes 7Zip Active@ ISO Burner v 1.1 Adobe AIR Adobe Flash Player 11 ActiveX Adobe Flash Player 11 Plugin Adobe Reader X (10.1.0) AhnLab Online Security Android SDK Tools Apple Application Support Apple Software Update ATK Generic Function Service ATK Hotkey ATK Media ATKOSD2 Auto Hide IP Babylon toolbar on IE BUFFALO SecureLockManagerEasy for HD Canon Easy-PhotoPrint EX Canon Easy-WebPrint EX Canon Inkjet Printer/Scanner/Fax Extended Survey Program Canon MF Toolbox 4.9.1.1.mf12 Canon MP Navigator EX 4.0 Canon My Printer Canon Solution Menu EX CodeBlocks continuetosave Coolyou CoolYou Updater Counter Strike 1.6 FULL v44 Crystal Reports for Visual Studio CX-One CX-Server CX-Server Common Driver CX-Server Driver Management Tool CX-Server Driver Mgt Tool CX-Server Generic FINS Ethernet Driver CX-Server RT CyberLink YouCam D3DX10 Disketch CD Label Software DIY DataRecovery CHK-Mate Dota 2 Dotfuscator Software Services - Community Edition Express Burn Disc Burning Software ExpressFiles Facebook Video Calling 1.2.0.287 Free Download Manager 3.0 Garena Garena Plus Google Chrome Gtk# for .Net 2.12.21 HandBrake 0.9.6 Handy Recovery 4.0 HI-TECH C Compiler for the PIC10/12/16 MCUs V9.70PL0 HP USB Disk Storage Format Tool iLivid Internet Download Manager Java 7 Update 9 Java Auto Updater Java™ 6 Update 39 Java™ SE Development Kit 6 Update 39 Java™ SE Development Kit 7 JavaFX 2.1.1 JuzDotA Full 2.0 JuzLoader 2.00 K-Lite Codec Pack 7.6.0 (Basic) Karnaugh Map Minimizer 0.4 Ken Ward's Zipper 1.4000 Magic ISO Maker v5.5 (build 0276) MagicDisc 2.7.106 Malwarebytes Anti-Malware version 1.75.0.1300 Microsoft .NET Framework 1.1 Microsoft .NET Framework 4 Multi-Targeting Pack Microsoft Application Error Reporting Microsoft ASP.NET MVC 2 Microsoft ASP.NET MVC 2 - Visual Studio 2010 Tools Microsoft Office 2003 Web Components Microsoft Office 2007 Service Pack 2 (SP2) Microsoft Office Excel MUI (English) 2007 Microsoft Office Home and Student 2007 Microsoft Office OneNote MUI (English) 2007 Microsoft Office PowerPoint MUI (English) 2007 Microsoft Office Proof (English) 2007 Microsoft Office Proof (French) 2007 Microsoft Office Proof (Spanish) 2007 Microsoft Office Proofing (English) 2007 Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) Microsoft Office Shared MUI (English) 2007 Microsoft Office Shared Setup Metadata MUI (English) 2007 Microsoft Office Word MUI (English) 2007 Microsoft Silverlight Microsoft Silverlight 3 SDK Microsoft SQL Server 2008 Browser Microsoft SQL Server 2008 R2 Data-Tier Application Framework Microsoft SQL Server 2008 R2 Data-Tier Application Project Microsoft SQL Server 2008 R2 Management Objects Microsoft SQL Server 2008 R2 Transact-SQL Language Service Microsoft SQL Server Compact 3.5 SP2 ENU Microsoft SQL Server Database Publishing Wizard 1.4 Microsoft SQL Server System CLR Types Microsoft Sync Framework SDK v1.0 SP1 Microsoft Visual C++ 2005 Redistributable Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 Microsoft Visual C++ 2010 x86 Runtime - 10.0.30319 Microsoft Visual C++ 2010 Express - ENU Microsoft Visual F# 2.0 Runtime Microsoft Visual Studio 2005 Tools for Applications - ENU Microsoft Visual Studio 2010 ADO.NET Entity Framework Tools Microsoft Visual Studio 2010 SharePoint Developer Tools Microsoft Visual Studio 2010 Ultimate - ENU Microsoft Visual Studio Macro Tools mikroC PRO for PIC (remove only) MinGW-Get version 0.5-beta-20120426-1 Mozilla Firefox 12.0 (x86 en-US) Mozilla Maintenance Service MPLAB Tools v7.40 MPLAB Tools v8.46 MSVCRT MSXML 4.0 SP2 (KB954430) MSXML 4.0 SP2 (KB973688) MySQL Server 5.5 MySQL Workbench 5.2 CE National Instruments Software Nexon Game Manager NI EULA Depot NI Help Assistant NI LabVIEW Real-Time FIFO for Runtime NI LabVIEW Run-Time Engine 8.2.1 NI LabWindows/CVI 8.1 Run-Time Engine NI License Manager NI Logos 4.7 NI Math Kernel Libraries NI MDF Support NI Multisim Analog Devices Edition 10.0 NI Service Locator NI TDMS NI Uninstaller NI USI 1.4.1 Norton 360 NVIDIA PhysX OpenCV SDK Orbit Downloader Pando Media Booster Pdf995 PICkit 2 v2.61 PSpice Student 9.1 Quartus II 9.0sp2 Web Edition QuickTime RealDownloader RealNetworks - Microsoft Visual C++ 2008 Runtime RealNetworks - Microsoft Visual C++ 2010 Runtime RealPlayer RealUpgrade 1.1 Recover Files 3.11 RegInOut System Utilities RICOH R5C83x/84x Flash Media Controller Driver Ver.3.55.03 Search-Results Toolbar Security Update for 2007 Microsoft Office System (KB2288621) Security Update for 2007 Microsoft Office System (KB2288931) Security Update for 2007 Microsoft Office System (KB2345043) Security Update for 2007 Microsoft Office System (KB2553074) Security Update for 2007 Microsoft Office System (KB2553089) Security Update for 2007 Microsoft Office System (KB2553090) Security Update for 2007 Microsoft Office System (KB2584063) Security Update for 2007 Microsoft Office System (KB969559) Security Update for 2007 Microsoft Office System (KB976321) Security Update for CAPICOM (KB931906) Security Update for Microsoft Office Excel 2007 (KB2553073) Security Update for Microsoft Office InfoPath 2007 (KB979441) Security Update for Microsoft Office PowerPoint 2007 (KB2535818) Security Update for Microsoft Office PowerPoint Viewer 2007 (KB2464623) Security Update for Microsoft Office system 2007 (972581) Security Update for Microsoft Office system 2007 (KB974234) Security Update for Microsoft Office Visio Viewer 2007 (KB973709) Security Update for Microsoft Office Word 2007 (KB2344993) Skype Click to Call Skype™ 5.8 Smart Active Parts SolidWorks 2012 x64 Edition SP0 Steam System Requirements Lab for Intel TJ1 Device Driver TornTV TreasureUP XPS2Image Converter 1.2 Update for 2007 Microsoft Office System (KB2284654) Update for 2007 Microsoft Office System (KB967642) Update for Microsoft Office 2007 Help for Common Features (KB963673) Update for Microsoft Office 2007 System (KB2539530) Update for Microsoft Office Excel 2007 Help (KB963678) Update for Microsoft Office OneNote 2007 (KB980729) Update for Microsoft Office OneNote 2007 Help (KB963670) Update for Microsoft Office Powerpoint 2007 Help (KB963669) Update for Microsoft Office Script Editor Help (KB963671) Update for Microsoft Office Word 2007 Help (KB963665) Visual Studio 2010 Tools for SQL Server Compact 3.5 SP2 ENU VLC media player 1.0.1 vShare.tv plugin 1.3 Vuze Vuze Remote Toolbar Warkeys 1.20.0.0b WinDjView 1.0.3 Windows 7 USB/DVD Download Tool Windows Live Communications Platform Windows Live Essentials Windows Live Installer Windows Live Messenger Windows Live Photo Common Windows Live PIMT Platform Windows Live SOXE Windows Live SOXE Definitions Windows Live UX Platform Windows Live UX Platform Language Pack Windows Media Player Firefox Plugin WinPcap 4.1.3 Xamarin Studio 4.0.9 Xamarin Universal Installer Xamarin.Android 4.6.08007 Xamarin.iOS 1.1 Yahoo! Software Update Yahoo! Toolbar YTD Toolbar v7.3 YTD Video Downloader 4.3 . ==== Event Viewer Messages From Past Week ======== . 25/7/2013 7:52:39 PM, Error: Microsoft-Windows-DNS-Client [1012] - There was an error while attempting to read the local hosts file. 25/7/2013 7:04:44 AM, Error: volsnap [36] - The shadow copies of volume C: were aborted because the shadow copy storage could not grow due to a user imposed limit. 24/7/2013 6:55:25 AM, Error: Service Control Manager [7001] - The Computer Browser service depends on the Server service which failed to start because of the following error: The dependency service or group failed to start. 24/7/2013 6:10:38 AM, Error: Service Control Manager [7001] - The HomeGroup Provider service depends on the Function Discovery Provider Host service which failed to start because of the following error: The dependency service or group failed to start. 24/7/2013 10:59:49 PM, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the SQL Server (SQLEXPRESS) service to connect. 24/7/2013 10:59:49 PM, Error: Service Control Manager [7000] - The SQL Server (SQLEXPRESS) service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion. 23/7/2013 6:16:55 PM, Error: bowser [8003] - The master browser has received a server announcement from the computer USER-17FE63A68F that believes that it is the master browser for the domain on transport NetBT_Tcpip_{BAEB82D4-2B9C-445F-BC90-61A667B4EABD}. The master browser is stopping or an election is being forced. 23/7/2013 10:42:12 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server: {9E175B6D-F52A-11D8-B9A5-505054503030} 23/7/2013 10:42:12 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server: {7D096C5F-AC08-4F1F-BEB7-5C22C517CE39} 23/7/2013 10:42:04 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service EventSystem with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF} 23/7/2013 10:41:54 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service ShellHWDetection with arguments "" in order to run the server: {DD522ACC-F821-461A-A407-50B198B896DC} 23/7/2013 10:41:50 PM, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: BHDrvx64 ccSet_N360 discache eeCtrl IDSVia64 spldr sptd SRTSPX SymIRON SymNetS Wanarpv6 23/7/2013 10:41:09 PM, Error: sptd [4] - Driver detected an internal error in its data structures for . 22/7/2013 6:42:57 PM, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the PDAgent service to connect. 22/7/2013 6:42:57 PM, Error: Service Control Manager [7000] - The PDAgent service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion. 21/7/2013 6:08:02 PM, Error: Service Control Manager [7022] - The Windows Font Cache Service service hung on starting. 18/7/2013 11:19:43 PM, Error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\DR1. . ==== End Of File ===========================
Post #2
Hello 2812818,

My name is OCD. I would be more than happy to take a look at your log and help you with solving any malware problems you might have. Logs can take a while to research, so please be patient and know that I am working hard to get you a clean and functional system back in your hands. I'd be grateful if you would note the following:
  • I will be working on your Malware issues, this may or may not, solve other issues you have with your machine.
  • The fixes are specific to your problem and should only be used for the issues on this machine.
  • Please continue to review my answers until I tell you your machine appears to be clear. Absence of symptoms does not mean that everything is clear.
  • It's often worth reading through these instructions and printing them for ease of reference.
  • If you don't know or understand something, please don't hesitate to say or ask!! It's better to be sure and safe than sorry.
  • Please reply to this thread. Do not start a new topic.
  • Copy and Paste logs directly into the reply window. DO NOT attach the logs unless specifically instructed to do so.
IMPORTANT NOTE : Please do not delete, download or install anything unless instructed to do so.

DO NOT use any TOOLS such as Combofix or HijackThis fixes without supervision. Doing so could make your system inoperable and could require a full reinstall of your Operating System and losing all your programs and data.

Please stay with this topic until I let you know that your system appears to be "All Clear"

Important: All tools MUST be run from the Desktop.

=========================

1. P2P - (Peer to Peer)

I see you have/had P2P software uTorrent installed on your machine. We are not here to pass judgment on file-sharing as a concept. However, we will warn you that engaging in this activity and having this kind of software installed on your machine will always make you more susceptible to re-infections and possibly Identity Theft. It likely contributed to your current situation. This page will give you further information.

Please note: Even if you are using a "safe" P2P program, it is only the program that is safe. You will be sharing files from uncertified sources, and these are often infected. The bad guys use P2P filesharing as a major conduit to spread their wares.

I would strongly recommend that you uninstall this now.

Click Start > Control Panel > Programs and Features. Locate and select the following that are present on the list and click the Remove button:
  • uTorrent
If you choose to not remove this programs please refrain from using it until we have finished cleaning your computer.

=========================

2. Uninstall via Programs and Features also in the Control Panel

Click Start > Control Panel > Programs and Features. Locate and select the following that are present on the list and click the Remove button:
  • Babylon toolbar on IE
  • Coolyou
  • CoolYou Updater
  • Search-Results Toolbar
  • Vuze
  • Vuze Remote Toolbar
=========================

3. Security Check

Download Security Check by screen317 from here or here.
  • Save it to your Desktop.
    • Windows XP : Double click on the icon to run it.
    • Windows Vista, Windows 7 & 8 : Right click and select "Run as Administrator"
  • Follow the onscreen instructions inside of the black box.
  • A Notepad document should open automatically called checkup.txt; please post the contents of that document.

=========================

4. AdwCleaner

Download AdwCleaner to your desktop.

Right click and select "Run as Administrator".
  • Run AdwCleaner and select Delete
  • Once done it will ask to reboot, allow the reboot
  • On reboot a log will be produced, please attach the content of the log to your next reply
=========================

5. aswMBR

Download aswMBR.exe and save it to your desktop.
    • Windows XP : Double click on the icon to run it.
    • Windows Vista, Windows 7 & 8 : Right click and select "Run as Administrator"
  • When asked if you want to download Avast's virus definitions please select Yes.
  • Click Scan
  • Upon completion of the scan, click Save log and save it to your desktop, and post that log in your next reply for review. Note - do NOT attempt any Fix yet.
  • You will also notice another file created on the desktop named MBR.dat. Right click that file and select Send To>Compressed (zipped) file. Attach that zipped file in your next reply as well.

=========================

6. OTL

Download OTL to your desktop.
  • Make sure all other windows are closed and to let it run uninterrupted.
    • Windows XP : Double click on the icon to run it.
    • Windows Vista, Windows 7 & 8 : Right click and select "Run as Administrator"
  • When the window appears, underneath Output at the top change it to Minimal Output.
  • Check the boxes beside LOP Check and Purity Check.
  • Under Custom Scan paste this in

    %USERPROFILE%\..|smtmp;true;true;true /FP
    %temp%\smtmp\*.* /s >
    /md5start
    iexplore.*
    explorer.*
    winlogon.*
    dll
    zx.dll
    hlp.dat
    consrv.dll
    services.*
    /md5stop
    netsvcs
    drivers32
    %SYSTEMDRIVE%\*.*
    %systemroot%\Fonts\*.com
    %systemroot%\Fonts\*.dll
    %systemroot%\Fonts\*.ini
    %systemroot%\Fonts\*.ini2
    %systemroot%\Fonts\*.exe
    %systemroot%\system32\spool\prtprocs\w32x86\*.*
    %systemroot%\REPAIR\*.bak1
    %systemroot%\REPAIR\*.ini
    %systemroot%\system32\*.jpg
    %systemroot%\*.jpg
    %systemroot%\*.png
    %systemroot%\*.scr
    %systemroot%\*._sy
    %APPDATA%\Adobe\Update\*.*
    %ALLUSERSPROFILE%\Favorites\*.*
    %APPDATA%\Microsoft\*.*
    %PROGRAMFILES%\*.*
    %APPDATA%\Update\*.*
    %systemroot%\*. /mp /s
    dir "%systemdrive%\*" /S /A:L /C
    CREATERESTOREPOINT
    %systemroot%\System32\config\*.sav
    %PROGRAMFILES%\bak. /s
    %systemroot%\system32\bak. /s
    %ALLUSERSPROFILE%\Start Menu\*.lnk /x
    %systemroot%\system32\config\systemprofile\*.dat /x
    %systemroot%\*.config
    %systemroot%\system32\*.db
    %PROGRAMFILES%\Internet Explorer\*.dat
    %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x
    %USERPROFILE%\Desktop\*.exe
    %PROGRAMFILES%\Common Files\*.*
    %systemroot%\*.src
    %systemroot%\install\*.*
    %systemroot%\system32\DLL\*.*
    %systemroot%\system32\HelpFiles\*.*
    %systemroot%\system32\rundll\*.*
    %systemroot%\winn32\*.*
    %systemroot%\Java\*.*
    %systemroot%\system32\test\*.*
    %systemroot%\system32\Rundll32\*.*
    %systemroot%\AppPatch\Custom\*.*
    HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs
    BASESERVICES
    DRIVES
    CREATERESTOREPOINT

  • Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
    • When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
    • Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time, and post it with your next reply.
    • You may need two posts to fit them both in.

=========================

In your next post please provide the following:
  • checkup.txt
  • AdwCleaner.txt
  • aswMBR.txt
  • attach MBR.zip
  • OTL.txt
  • Extras.txt
Post #3
Hi OCD, thank you very much for helping me. I didn't remove the vuze and Utorrent, but I promise I won't use it while you're helping me. The rest of the steps I've follow what you'd said. Btw, the Extra.txt from OTL didn't appear. I scanned twice but it didn't appear. I hope it didn't affect much. Thanks in advance for helping me!
Post #4
# AdwCleaner v2.306 - Logfile created 07/26/2013 at 07:30:34 # Updated 19/07/2013 by Xplode # Operating system : Windows 7 Professional Service Pack 1 (64 bits) # User : Victor - ON # Boot Mode : Normal # Running from : C:\Users\Victor\Downloads\Programs\AdwCleaner.exe # Option [Delete] ***** [Services] ***** Stopped & Deleted : Application Updater ***** [Files / Folders] ***** File Deleted : C:\END File Deleted : C:\Program Files (x86)\Mozilla Firefox\Plugins\npvsharetvplg.dll File Deleted : C:\Program Files (x86)\Mozilla Firefox\searchplugins\babylon.xml File Deleted : C:\Program Files (x86)\Uninstall.exe Folder Deleted : C:\Program Files (x86)\1ClickDownload Folder Deleted : C:\Program Files (x86)\Application Updater Folder Deleted : C:\Program Files (x86)\Common Files\spigot Folder Deleted : C:\Program Files (x86)\Conduit Folder Deleted : C:\Program Files (x86)\ExpressFiles Folder Deleted : C:\Program Files (x86)\Ilivid Folder Deleted : C:\Program Files (x86)\TornTV.com Folder Deleted : C:\Program Files (x86)\vShare.tv plugin Folder Deleted : C:\Program Files (x86)\Yontoo Folder Deleted : C:\ProgramData\Babylon Folder Deleted : C:\ProgramData\continuetosave Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\continuetosave Folder Deleted : C:\ProgramData\Premium Folder Deleted : C:\ProgramData\Tarma Installer Folder Deleted : C:\Users\Victor\AppData\Local\Babylon Folder Deleted : C:\Users\Victor\AppData\Local\Conduit Folder Deleted : C:\Users\Victor\AppData\Local\Google\Chrome\User Data\Default\Extensions\gfaacjghihkflgpekoajiaceocmlbbbb Folder Deleted : C:\Users\Victor\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbpkiefagocgkmemidfngdkamloieekf Folder Deleted : C:\Users\Victor\AppData\Local\Ilivid Player Folder Deleted : C:\Users\Victor\AppData\Local\PackageAware Folder Deleted : C:\Users\Victor\AppData\LocalLow\BabylonToolbar Folder Deleted : C:\Users\Victor\AppData\LocalLow\Conduit Folder Deleted : C:\Users\Victor\AppData\LocalLow\PriceGong Folder Deleted : C:\Users\Victor\AppData\LocalLow\Search Settings Folder Deleted : C:\Users\Victor\AppData\LocalLow\Toolbar4 Folder Deleted : C:\Users\Victor\AppData\Roaming\Babylon Folder Deleted : C:\Users\Victor\AppData\Roaming\DriverCure Folder Deleted : C:\Users\Victor\AppData\Roaming\ExpressFiles Folder Deleted : C:\Users\Victor\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TornTV.com Folder Deleted : C:\Users\Victor\AppData\Roaming\Mozilla\Firefox\Profiles\68rj7rey.default\CT2504091 Folder Deleted : C:\Users\Victor\AppData\Roaming\Mozilla\Firefox\Profiles\68rj7rey.default\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc} Folder Deleted : C:\Users\Victor\AppData\Roaming\Mozilla\Firefox\Profiles\68rj7rey.default\extensions\{C9B68337-E93A-44EA-94DC-CB300EC06444} Folder Deleted : C:\Users\Victor\AppData\Roaming\Mozilla\Firefox\Profiles\68rj7rey.default\jetpack Folder Deleted : C:\Users\Victor\AppData\Roaming\Mozilla\Firefox\Profiles\68rj7rey.default\Smartbar ***** [Registry] ***** Key Deleted : HKCU\Software\1ClickDownload Key Deleted : HKCU\Software\AppDataLow\Software\Conduit Key Deleted : HKCU\Software\AppDataLow\Software\PriceGong Key Deleted : HKCU\Software\AppDataLow\Software\Search Settings Key Deleted : HKCU\Software\AppDataLow\Software\SmartBar Key Deleted : HKCU\Software\Conduit Key Deleted : HKCU\Software\ExpressFiles Key Deleted : HKCU\Software\Google\Chrome\Extensions\ojpijjmpahflnipadmlpgbjmagmjchkk Key Deleted : HKCU\Software\ilivid Key Deleted : HKCU\Software\Iminent Key Deleted : HKCU\Software\InstallCore Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{8F97BFF8-488B-4107-BCEE-B161AB4E4183} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{00000000-6E41-4FD3-8538-502F5495E5FC} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{02478D38-C3F9-4EFB-9B51-7695ECA05670} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4A99-B4B6-146BF802613B} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{58124A0B-DC32-4180-9BFF-E0E21AE34026} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{84FF7BD6-B47F-46F8-9130-01B2696B36CB} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{898EA8C8-E7FF-479B-8935-AEC46303B9E5} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{977AE9CC-AF83-45E8-9E03-E2798216E2D5} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A6502EC6-9D10-A83C-6CA2-0F42C7415A8E} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35C-6118-11DC-9C72-001320C79847} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EF99BD32-C1FB-11D2-892F-0090271D4F88} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{F3FEE66E-E034-436A-86E4-9690573BEE8A} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00000000-6E41-4FD3-8538-502F5495E5FC} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02478D38-C3F9-4EFB-9B51-7695ECA05670} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4A99-B4B6-146BF802613B} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{58124A0B-DC32-4180-9BFF-E0E21AE34026} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{84FF7BD6-B47F-46F8-9130-01B2696B36CB} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{87EAB409-97D7-4889-ACFA-C548FC6F3ECF} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{898EA8C8-E7FF-479B-8935-AEC46303B9E5} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{977AE9CC-AF83-45E8-9E03-E2798216E2D5} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{98889811-442D-49DD-99D7-DC866BE87DBC} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A6502EC6-9D10-A83C-6CA2-0F42C7415A8E} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35C-6118-11DC-9C72-001320C79847} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EF99BD32-C1FB-11D2-892F-0090271D4F88} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F3FEE66E-E034-436A-86E4-9690573BEE8A} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\ExpressFiles Key Deleted : HKCU\Software\Search Settings Key Deleted : HKCU\Software\Softonic Key Deleted : HKCU\Software\StartSearch Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B} Key Deleted : HKLM\Software\Application Updater Key Deleted : HKLM\Software\Babylon Key Deleted : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947} Key Deleted : HKLM\SOFTWARE\Classes\AppID\{4CE516A7-F7AC-4628-B411-8F886DC5733E} Key Deleted : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826} Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB} Key Deleted : HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C} Key Deleted : HKLM\SOFTWARE\Classes\AppID\escort.DLL Key Deleted : HKLM\SOFTWARE\Classes\AppID\TbCommonUtils.DLL Key Deleted : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr Key Deleted : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr.1 Key Deleted : HKLM\SOFTWARE\Classes\ilivid Key Deleted : HKLM\SOFTWARE\Classes\MyNewsBarLauncher.IE5BarLauncher Key Deleted : HKLM\SOFTWARE\Classes\MyNewsBarLauncher.IE5BarLauncher.1 Key Deleted : HKLM\SOFTWARE\Classes\MyNewsBarLauncher.IE5BarLauncherBHO Key Deleted : HKLM\SOFTWARE\Classes\MyNewsBarLauncher.IE5BarLauncherBHO.1 Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap Key Deleted : HKLM\SOFTWARE\Classes\TbCommonUtils.CommonUtils Key Deleted : HKLM\SOFTWARE\Classes\TbCommonUtils.CommonUtils.1 Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT1561552 Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT2504091 Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{79D60450-56C5-4A8C-9321-6D5BC2A81E5A} Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{99C22A61-21BA-4F81-85FF-CDC9EB5DB10B} Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{BB7256DD-EBA9-480B-8441-A00388C2BEC3} Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{C4BAE205-5E02-4E32-876E-F34B4E2D000C} Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{E2343056-CC08-46AC-B898-BFC7ACF4E755} Key Deleted : HKLM\Software\Conduit Key Deleted : HKLM\Software\ExpressFiles Key Deleted : HKLM\Software\ilivid Key Deleted : HKLM\Software\Iminent Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{898EA8C8-E7FF-479B-8935-AEC46303B9E5} Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\BundleSweetIMSetup_RASAPI32 Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\BundleSweetIMSetup_RASMANCS Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASAPI32 Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASMANCS Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstallerStub_RASAPI32 Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstallerStub_RASMANCS Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\ConduitUninstaller_RASAPI32 Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\ConduitUninstaller_RASMANCS Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASAPI32 Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASMANCS Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32 Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SweetIM_RASAPI32 Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SweetIM_RASMANCS Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SweetPacksUpdateManager_RASAPI32 Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SweetPacksUpdateManager_RASMANCS Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670} Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD} Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{8F97BFF8-488B-4107-BCEE-B161AB4E4183} Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A1B48071-416D-474E-A13B-BE5456E7FC31} Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88} Key Deleted : HKLM\Software\Search Settings Key Deleted : HKLM\SOFTWARE\Wow6432Node\14919ea49a8f3b4aa3cf1058d9a64cec Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{02478D38-C3F9-4EFB-9B51-7695ECA05670} Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{2EECD738-5844-4A99-B4B6-146BF802613B} Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{3BDF4CE9-E81D-432B-A55E-9F0570CE811F} Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1} Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD} Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{898EA8C8-E7FF-479B-8935-AEC46303B9E5} Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{8F97BFF8-488B-4107-BCEE-B161AB4E4183} Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{A1B48071-416D-474E-A13B-BE5456E7FC31} Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497} Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1} Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{EF99BD32-C1FB-11D2-892F-0090271D4F88} Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{F3FEE66E-E034-436A-86E4-9690573BEE8A} Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{01221FCC-4BFB-461C-B08C-F6D2DF309921} Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F} Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{3D782BB2-F2A5-11D3-BF4C-000000000000} Key Deleted : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\jbpkiefagocgkmemidfngdkamloieekf Key Deleted : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn Key Deleted : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj Key Deleted : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\ojpijjmpahflnipadmlpgbjmagmjchkk Key Deleted : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\pmlghpafmmnmmkjdhacccolfgnkiboco Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291} Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199} Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48D2-9061-8BBD4899EB08} Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B} Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670} Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD} Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497} Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F3FEE66E-E034-436A-86E4-9690573BEE8A} Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{C1C6816E-CBB3-A748-85F9-A8B47B68985B} Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\1ClickDownload Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\ilivid Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\IM Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SearchTheWebARP Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{01221FCC-4BFB-461C-B08C-F6D2DF309921} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3D782BB2-F2A5-11D3-BF4C-000000000000} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{706D4A4B-184A-4434-B331-296B07493D2D} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{8BE10F21-185F-4CA0-B789-9921674C3993} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B32672B3-F656-46E0-B584-FE61C0BB6037} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{BBA74401-6D6F-4BBD-9F65-E8623814F3BB} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{BFE569F7-646C-4512-969B-9BE3E580D393} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D2F39980-399F-492E-8D88-5FF7CCB3B47F} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{EEE6C358-6118-11DC-9C72-001320C79847} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{EEE6C359-6118-11DC-9C72-001320C79847} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{EEE6C35A-6118-11DC-9C72-001320C79847} Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170} Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{889DF117-14D1-44EE-9F31-C5FB5D47F68B} Key Deleted : HKLM\SOFTWARE\Tarma Installer Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5}] Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{977AE9CC-AF83-45E8-9E03-E2798216E2D5}] Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{BA14329E-9550-4989-B3F2-9732E92D17CC}] Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}] Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{F3FEE66E-E034-436A-86E4-9690573BEE8A}] Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [SearchSettings] Value Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5}] Value Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{EF99BD32-C1FB-11D2-892F-0090271D4F88}] Value Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{F3FEE66E-E034-436A-86E4-9690573BEE8A}] ***** [Internet Browsers] ***** -\\ Internet Explorer v8.0.7601.17514 [OK] Registry is clean. -\\ Mozilla Firefox v12.0 (en-US) File : C:\Users\Victor\AppData\Roaming\Mozilla\Firefox\Profiles\68rj7rey.default\prefs.js C:\Users\Victor\AppData\Roaming\Mozilla\Firefox\Profiles\68rj7rey.default\user.js … Deleted ! Deleted : user_pref("CT1561552.UserID", "UN36619442631550071"); Deleted : user_pref("CT1561552.autoDisableScopes", 0); Deleted : user_pref("CT1561552.installDate", "31/1/2013 17:39:59"); Deleted : user_pref("CT2504091.CBOpenMAMSettings.enc", "MA=="); Deleted : user_pref("CT2504091.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}"); Deleted : user_pref("CT2504091.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"tru[…] Deleted : user_pref("CT2504091.FirstTime", "true"); Deleted : user_pref("CT2504091.FirstTimeFF3", "true"); Deleted : user_pref("CT2504091.LoginRevertSettingsEnabled", false); Deleted : user_pref("CT2504091.PG_ENABLE", "dHJ1ZQ=="); Deleted : user_pref("CT2504091.PG_ENABLE.enc", "dHJ1ZQ=="); Deleted : user_pref("CT2504091.RevertSettingsEnabled", true); Deleted : user_pref("CT2504091.SearchAppState.enc", "Mw=="); Deleted : user_pref("CT2504091.SearchAppTracking.enc", "c2VudA=="); Deleted : user_pref("CT2504091.UserID", "UN79535899116141616"); Deleted : user_pref("CT2504091.addressBarTakeOverEnabledInHidden", "true"); Deleted : user_pref("CT2504091.autoDisableScopes", 0); Deleted : user_pref("CT2504091.cb_user_id_000.enc", "Q0I2MDIyMzU2NTkyNDJfMTM2OTIxNzQ2Njk3Ml9GaXJlZm94"); Deleted : user_pref("CT2504091.cbcountry_001.enc", "TVk="); Deleted : user_pref("CT2504091.cbfirsttime.enc", "RnJpIEphbiAwNCAyMDEzIDE2OjIwOjE1IEdNVCswODAwIChNYWxheSBQZW5p[…] Deleted : user_pref("CT2504091.defaultSearch", "false"); Deleted : user_pref("CT2504091.embeddedsData", "[{\"appId\":\"129079840422026594\",\"apiPermissions\":{\"cross[…] Deleted : user_pref("CT2504091.enableAlerts", "always"); Deleted : user_pref("CT2504091.enableFix404ByUser", "FALSE"); Deleted : user_pref("CT2504091.enableSearchFromAddressBar", "true"); Deleted : user_pref("CT2504091.firstTimeDialogOpened", "true"); Deleted : user_pref("CT2504091.fixPageNotFoundError", "true"); Deleted : user_pref("CT2504091.fixPageNotFoundErrorByUser", "true"); Deleted : user_pref("CT2504091.fixPageNotFoundErrorInHidden", "true"); Deleted : user_pref("CT2504091.fixUrls", true); Deleted : user_pref("CT2504091.homepageuserchanged", true); Deleted : user_pref("CT2504091.installId", "conduitinstallerstub.exe"); Deleted : user_pref("CT2504091.installType", "conduitnsisintegration"); Deleted : user_pref("CT2504091.isCheckedStartAsHidden", true); Deleted : user_pref("CT2504091.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}"); Deleted : user_pref("CT2504091.isFirstTimeToolbarLoading", "false"); Deleted : user_pref("CT2504091.isNewTabEnabled", false); Deleted : user_pref("CT2504091.isPerformedSmartBarTransition", "true"); Deleted : user_pref("CT2504091.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}"); Deleted : user_pref("CT2504091.lastNewTabSettings", "{\"isEnabled\":false,\"newTabUrl\":\"hxxp://search.condui[…] Deleted : user_pref("CT2504091.lastVersion", "10.16.2.509"); Deleted : user_pref("CT2504091.mam_gk_appStateReportTime.enc", "MTM3MDI2MDczODEwMg=="); Deleted : user_pref("CT2504091.mam_gk_appState_CouponBuddy.enc", "b24="); Deleted : user_pref("CT2504091.mam_gk_appState_Easytobook.enc", "b24="); Deleted : user_pref("CT2504091.mam_gk_appState_Easytobook_targeted.enc", "b24="); Deleted : user_pref("CT2504091.mam_gk_appState_PriceGong.enc", "b24="); Deleted : user_pref("CT2504091.mam_gk_appsData.enc", "eyJhcHBzIjpbeyJpZCI6IlByaWNlR29uZyIsInVybCI6Imh0dHA6Ly9w[…] Deleted : user_pref("CT2504091.mam_gk_appsDefaultEnabled.enc", "bnVsbA=="); Deleted : user_pref("CT2504091.mam_gk_configuration.enc", "eyJjb25maWd1cmF0aW9uIjpbeyJpZCI6IkVhc3l0b2Jvb2tfdGF[…] Deleted : user_pref("CT2504091.mam_gk_currentVersion.enc", "MS42LjAuMQ=="); Deleted : user_pref("CT2504091.mam_gk_first_time.enc", "MQ=="); Deleted : user_pref("CT2504091.mam_gk_installer_preapproved.enc", "ZmFsc2U="); Deleted : user_pref("CT2504091.mam_gk_lastLoginTime.enc", "MTM3MDI2MDczODc0NQ=="); Deleted : user_pref("CT2504091.mam_gk_localization.enc", "eyJnYWRnZXRDb250ZW50UG9saWN5Ijp7IlRleHQiOiJDb250ZW50[…] Deleted : user_pref("CT2504091.mam_gk_pgUnloadedOnce.enc", "dHJ1ZQ=="); Deleted : user_pref("CT2504091.mam_gk_settings1.6.0.1.enc", "eyJTdGF0dXMiOiJzdWNjZWVkZWQiLCJEYXRhIjp7ImludGVyd[…] Deleted : user_pref("CT2504091.mam_gk_showCloseButton.enc", "dHJ1ZQ=="); Deleted : user_pref("CT2504091.mam_gk_showWelcomeGadget.enc", "ZmFsc2U="); Deleted : user_pref("CT2504091.mam_gk_userId.enc", "NjFkOTIwMmQtN2ZkZi00NDZhLTkwMjktOGZkN2EyOGRkNjcw"); Deleted : user_pref("CT2504091.migrateAppsAndComponents", true); Deleted : user_pref("CT2504091.missingMachineIdSent", "true"); Deleted : user_pref("CT2504091.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"hxxps[…] Deleted : user_pref("CT2504091.openThankYouPage", "false"); Deleted : user_pref("CT2504091.openUninstallPage", "false"); Deleted : user_pref("CT2504091.price-gong.bornDate", "{\"dataType\":\"string\",\"data\":\"{\\\"Response\\\":\\[…] Deleted : user_pref("CT2504091.revertSettingsEnabled", "false"); Deleted : user_pref("CT2504091.search.searchAppId", "129079840422026594"); Deleted : user_pref("CT2504091.search.searchCount", "0"); Deleted : user_pref("CT2504091.searchInNewTabEnabled", "false"); Deleted : user_pref("CT2504091.searchInNewTabEnabledByUser", "false"); Deleted : user_pref("CT2504091.searchInNewTabEnabledInHidden", "true"); Deleted : user_pref("CT2504091.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}"); Deleted : user_pref("CT2504091.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"d[…] Deleted : user_pref("CT2504091.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\[…] Deleted : user_pref("CT2504091.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"d[…] Deleted : user_pref("CT2504091.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"strin[…] Deleted : user_pref("CT2504091.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"strin[…] Deleted : user_pref("CT2504091.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data[…] Deleted : user_pref("CT2504091.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1370260852647"); Deleted : user_pref("CT2504091.serviceLayer_services_appsMetadata_lastUpdate", "1370261045414"); Deleted : user_pref("CT2504091.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1369216123406"); Deleted : user_pref("CT2504091.serviceLayer_services_location_lastUpdate", "1370260851912"); Deleted : user_pref("CT2504091.serviceLayer_services_login_10.13.40.15_lastUpdate", "1357287592314"); Deleted : user_pref("CT2504091.serviceLayer_services_login_10.16.1.521_lastUpdate", "1369216123450"); Deleted : user_pref("CT2504091.serviceLayer_services_login_10.16.2.509_lastUpdate", "1370260852255"); Deleted : user_pref("CT2504091.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1369216123348"); Deleted : user_pref("CT2504091.serviceLayer_services_searchAPI_lastUpdate", "1370260851918"); Deleted : user_pref("CT2504091.serviceLayer_services_serviceMap_lastUpdate", "1370260849406"); Deleted : user_pref("CT2504091.serviceLayer_services_toolbarContextMenu_lastUpdate", "1369216123289"); Deleted : user_pref("CT2504091.serviceLayer_services_toolbarSettings_lastUpdate", "1370261047461"); Deleted : user_pref("CT2504091.serviceLayer_services_translation_lastUpdate", "1370260854405"); Deleted : user_pref("CT2504091.serviceLayer_services_userApps_lastUpdate", "1357288333999"); Deleted : user_pref("CT2504091.settingsINI", true); Deleted : user_pref("CT2504091.shouldFirstTimeDialog", "false"); Deleted : user_pref("CT2504091.showToolbarPermission", "false"); Deleted : user_pref("CT2504091.smartbar.CTID", "CT2504091"); Deleted : user_pref("CT2504091.smartbar.Uninstall", "0"); Deleted : user_pref("CT2504091.smartbar.toolbarName", "Vuze Remote "); Deleted : user_pref("CT2504091.startPage", "false"); Deleted : user_pref("CT2504091.toolbarBornServerTime", "4-1-2013"); Deleted : user_pref("CT2504091.toolbarCurrentServerTime", "3-6-2013"); Deleted : user_pref("CT2504091.toolbarLoginClientTime", "Wed May 22 2013 17:46:42 GMT+0800 (Malay Peninsula St[…] Deleted : user_pref("CT2504091_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\"[…] Deleted : user_pref("browser.babylon.HPOnNewTab", "search.babylon.com"); Deleted : user_pref("browser.search.defaultengine", "Search-Results"); Deleted : user_pref("browser.search.defaultenginename", "Search-Results"); Deleted : user_pref("browser.search.order.1", "Search-Results"); Deleted : user_pref("browser.search.selectedEngine", "Search-Results"); Deleted : user_pref("ct1561552.UserID", "UN36619442631550071"); Deleted : user_pref("extensions.501f9c2cca126.scode", "(function(){try{if('aol.com,mail.google.com,premiumrepo[…] Deleted : user_pref("extensions.50e6a1bb4a8e2.scode", "(function(){try{if('aol.com,mail.google.com,premiumrepo[…] Deleted : user_pref("extensions.BabylonToolbar_i.aflt", "babsst"); Deleted : user_pref("extensions.BabylonToolbar_i.babExt", ""); Deleted : user_pref("extensions.BabylonToolbar_i.babTrack", "affID=109932"); Deleted : user_pref("extensions.BabylonToolbar_i.hardId", "acbb0ec200000000000000ff2dec01d2"); Deleted : user_pref("extensions.BabylonToolbar_i.id", "acbb0ec200000000000000ff2dec01d2"); Deleted : user_pref("extensions.BabylonToolbar_i.instlDay", "15404"); Deleted : user_pref("extensions.BabylonToolbar_i.instlRef", "sst"); Deleted : user_pref("extensions.BabylonToolbar_i.newTab", true); Deleted : user_pref("extensions.BabylonToolbar_i.newTabUrl", "hxxp://search.babylon.com/?AF=109932&babsrc=NT_s[…] Deleted : user_pref("extensions.BabylonToolbar_i.prdct", "BabylonToolbar"); Deleted : user_pref("extensions.BabylonToolbar_i.prtnrId", "babylon"); Deleted : user_pref("extensions.BabylonToolbar_i.smplGrp", "none"); Deleted : user_pref("extensions.BabylonToolbar_i.srcExt", "ss"); Deleted : user_pref("extensions.BabylonToolbar_i.tlbrId", "tb9"); Deleted : user_pref("extensions.BabylonToolbar_i.vrsn", "1.5.3.17"); Deleted : user_pref("extensions.BabylonToolbar_i.vrsnTs", "[removed]:35:17"); Deleted : user_pref("extensions.BabylonToolbar_i.vrsni", "1.5.3.17"); Deleted : user_pref("extentions.y2layers.defaultEnableAppsList", "twittube,buzzdock,YontooNewOffers"); Deleted : user_pref("extentions.y2layers.installId", "781f9b5c-d004-4c58-aa86-761db8c772a3"); Deleted : user_pref("smartbar.machineId", "NQZAJO1GSQJ2/EZ2Q59HSGDW8N9XTWYF+MAQJUX2IZSCI1FKKCV8TZH1EGVHAQQPWIP[…] -\\ Google Chrome v28.0.1500.72 File : C:\Users\Victor\AppData\Local\Google\Chrome\User Data\Default\Preferences [OK] File is clean. ************************* AdwCleaner[S1].txt - [31214 octets] - [26/07/2013 07:30:34] ########## EOF - C:\AdwCleaner[S1].txt - [31275 octets] ##########
Post #5
aswMBR version 0.9.9.1771 Copyright© 2011 AVAST Software Run date: 2013-07-27 00:40:56 —————————– 00:40:56.668 OS Version: Windows x64 6.1.7601 Service Pack 1 00:40:56.668 Number of processors: 2 586 0xF0B 00:40:56.669 ComputerName: ON UserName: 00:41:16.291 Initialize success 00:41:39.294 AVAST engine defs: 13072600 00:42:13.263 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 00:42:13.266 Disk 0 Vendor: ST9250827AS 3.AAA Size: 238475MB BusType: 11 00:42:13.295 Disk 0 MBR read successfully 00:42:13.298 Disk 0 MBR scan 00:42:13.303 Disk 0 Windows 7 default MBR code 00:42:13.310 Disk 0 Partition 1 00 1C Hidd FAT32 LBA MSDOS5.0 10000 MB offset 2048 00:42:13.340 Disk 0 Partition 2 80 (A) 07 HPFS/NTFS NTFS 119237 MB offset 20482048 00:42:13.346 Disk 0 Partition - 00 0F Extended LBA 109236 MB offset 264679424 00:42:13.378 Disk 0 Partition 3 00 07 HPFS/NTFS NTFS 109235 MB offset 264681472 00:42:13.454 Disk 0 scanning C:\Windows\system32\drivers 00:42:48.756 Service scanning 00:43:31.169 Modules scanning 00:43:31.184 Disk 0 trace - called modules: 00:43:31.610 ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys >>UNKNOWN [0xfffffa80049d32c0]< \Device\Harddisk0\DR0[0xfffffa8004cef060] 00:43:31.631 3 CLASSPNP.SYS[fffff88001a0143f] -> nt!IofCallDriver -> [0xfffffa8004b601e0] 00:43:31.645 5 ACPI.sys[fffff880011a07a1] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP0T0L0-0[0xfffffa8004a9a060] 00:43:31.688 \Driver\atapi[0xfffffa8004b56b20] -> IRP_MJ_CREATE -> 0xfffffa80049d32c0 00:43:33.434 AVAST engine scan C:\Windows 00:43:41.581 AVAST engine scan C:\Windows\system32 00:54:15.495 AVAST engine scan C:\Windows\system32\drivers 00:54:34.874 AVAST engine scan C:\Users\Victor 02:50:43.320 File: C:\Users\Victor\Downloads\Activate.Windows.7.64.serials.generator\Activate.Windows.7.64.serials.generator.exe **INFECTED** Win32:Crypt-JOV [Trj] 03:02:48.521 AVAST engine scan C:\ProgramData 03:03:29.079 File: C:\ProgramData\CoolYou\bhoclass.dll **INFECTED** Win32:Adware-gen [Adw] 03:07:36.351 File: C:\ProgramData\ICLJIG\RSJ.02 **INFECTED** Win32:Malware-gen 03:14:34.456 Scan finished successfully 08:38:36.867 Disk 0 MBR has been saved successfully to "C:\Users\Victor\Desktop\New folder (3)\whatthetech\MBR.dat" 08:38:36.874 The log file has been saved successfully to "C:\Users\Victor\Desktop\New folder (3)\whatthetech\aswMBR.txt"
Post #6
Results of screen317's Security Check version 0.99.71
Windows 7 Service Pack 1 x64 (UAC is disabled!)
``````````````Antivirus/Firewall Check:``````````````
Windows Firewall Enabled!
Windows Firewall Disabled!
Norton 360
WMI entry may not exist for antivirus; attempting automatic update.
`````````Anti-malware/Other Utilities Check:`````````
Malwarebytes Anti-Malware version 1.75.0.1300
JavaFX 2.1.1
Java™ 6 Update 39
Java 7 Update 9
Java™ SE Development Kit 6 Update 39
Java™ SE Development Kit 7
Java version out of Date!
Adobe Flash Player 11.7.700.224
Adobe Reader 10.1.0 Adobe Reader out of Date!
Mozilla Firefox 12.0 Firefox out of Date!
Google Chrome 27.0.1453.116
Google Chrome 28.0.1500.72
Google Chrome Plugins…
````````Process Check: objlist.exe by Laurent````````
Norton ccSvcHst.exe
Malwarebytes' Anti-Malware mbamscheduler.exe
`````````````````System Health check`````````````````
Total Fragmentation on Drive C: 27% Defragment your hard drive soon! (Do NOT defrag if SSD!)
````````````````````End of Log``````````````````````
Post #7
OTL logfile created on: 27/7/2013 8:41:39 AM - Run 3
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Victor\Downloads\Programs
64bit- Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7601.17514)
Locale: 00004409 | Country: Malaysia | Language: ENM | Date Format: d/M/yyyy

4.00 Gb Total Physical Memory | 1.04 Gb Available Physical Memory | 25.96% Memory free
4.84 Gb Paging File | 0.99 Gb Available in Paging File | 20.53% Paging File free
Paging file location(s): c:\pagefile.sys 0 0d:\pagefile.sys 16 3000 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 116.44 Gb Total Space | 1.58 Gb Free Space | 1.36% Space Free | Partition Type: NTFS
Drive D: | 106.67 Gb Total Space | 0.94 Gb Free Space | 0.88% Space Free | Partition Type: NTFS

Computer Name: ON | User Name: Victor | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - File not found
PRC - C:\Users\Victor\Downloads\Programs\OTL_3.exe (OldTimer Tools)
PRC - C:\Users\Victor\Downloads\Programs\aswMBR.exe (AVAST Software)
PRC - C:\Program Files (x86)\Internet Download Manager\IDMan.exe (Tonec Inc.)
PRC - C:\ProgramData\ICLJIG\RSJ.exe ()
PRC - C:\Program Files (x86)\Garena Plus\ggdllhost.exe ()
PRC - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation)
PRC - C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe (RealNetworks, Inc.)
PRC - C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe ()
PRC - C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe (Skype Technologies S.A.)
PRC - C:\Program Files (x86)\Connectify\Connectifyd.exe (Connectify)
PRC - C:\Program Files (x86)\Connectify\ConnectifyService.exe ()
PRC - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
PRC - C:\Program Files (x86)\Yes\Connect\GCTWiMaxServiceD.exe (GCT Semiconductor, Inc.)
PRC - C:\Program Files (x86)\BUFFALO\SLManagerEasy\Inputps.exe (BUFFALO INC.)
PRC - C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe ()
PRC - C:\Program Files (x86)\BUFFALO\SLManagerEasy\Bufssvr.exe (BUFFALO INC.)
PRC - C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe (ASUS)
PRC - C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe (ASUS)
PRC - C:\Program Files (x86)\ASUS\ATK Hotkey\HControl.exe (ASUS)
PRC - C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe (ASUS)
PRC - C:\Program Files (x86)\ASUS\ATK Hotkey\WDC.exe (ASUS)
PRC - C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe (Yahoo! Inc.)
PRC - C:\Program Files (x86)\ASUS\ATK Hotkey\Atouch64.exe ()
PRC - C:\Program Files (x86)\ASUS\ATK Hotkey\AsLdrSrv.exe ()
PRC - C:\Program Files (x86)\ASUS\ATK Hotkey\ATKOSD.exe (ASUS)
PRC - C:\Program Files\ATKGFNEX\GFNEXSrv.exe ()
PRC - C:\Windows\SysWOW64\nisvcloc.exe (National Instruments Corp.)
PRC - C:\Program Files (x86)\National Instruments\Shared\Security\nidmsrv.exe (National Instruments, Inc.)
PRC - C:\Windows\SysWOW64\lktsrv.exe (National Instruments, Inc.)
PRC - C:\Windows\SysWOW64\lkads.exe (National Instruments, Inc.)


========== Modules (No Company Name) ==========

MOD - C:\ProgramData\ICLJIG\RSJ.exe ()
MOD - C:\ProgramData\ICLJIG\RSJ.01 ()
MOD - C:\Program Files (x86)\Garena Plus\ggspawn.dll ()
MOD - C:\Users\Victor\AppData\Local\Google\Chrome\Application\28.0.1500.72\ppGoogleNaClPluginChrome.dll ()
MOD - C:\Users\Victor\AppData\Local\Google\Chrome\Application\28.0.1500.72\pdf.dll ()
MOD - C:\Users\Victor\AppData\Local\Google\Chrome\Application\28.0.1500.72\libglesv2.dll ()
MOD - C:\Users\Victor\AppData\Local\Google\Chrome\Application\28.0.1500.72\libegl.dll ()
MOD - C:\Users\Victor\AppData\Local\Google\Chrome\Application\28.0.1500.72\ffmpegsumo.dll ()
MOD - C:\Program Files (x86)\Garena Plus\ggdllhost.exe ()
MOD - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll ()
MOD - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll ()


========== Services (SafeList) ==========

SRV:64bit: - (FLEXnet Licensing Service 64) – C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe (Flexera Software, Inc.)
SRV:64bit: - (CoordinatorServiceHost) – C:\Program Files\SolidWorks Corp\SolidWorks (2)\swScheduler\DTSCoordinatorService.exe (Dassault Systèmes SolidWorks Corp.)
SRV:64bit: - (PDAgent) – C:\Program Files\Raxco\PerfectDisk\PDAgent.exe (Raxco Software, Inc.)
SRV:64bit: - (PDEngine) – C:\Program Files\Common Files\Raxco\Shared\PDEngine.exe (Raxco Software, Inc.)
SRV:64bit: - (WinDefend) – C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV:64bit: - (AppMgmt) – C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
SRV:64bit: - (ATKGFNEXSrv) – C:\Program Files\ATKGFNEX\GFNEXSrv.exe ()
SRV - (AdobeFlashPlayerUpdateSvc) – C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
SRV - (MozillaMaintenance) – C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation)
SRV - (N360) – C:\Program Files (x86)\Norton 360\Engine\20.4.0.40\ccSvcHst.exe (Symantec Corporation)
SRV - (MBAMService) – C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
SRV - (MBAMScheduler) – C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation)
SRV - (rpcapd) – C:\Program Files (x86)\WinPcap\rpcapd.exe (Riverbed Technology, Inc.)
SRV - (RealNetworks Downloader Resolver Service) – C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe ()
SRV - (FLEXnet Licensing Service) – C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (Flexera Software, Inc.)
SRV - (MySQL) – C:\Program Files (x86)\Canon\Easy-WebPrint EX\bin\mysqld.exe ()
SRV - (clr_optimization_v4.0.30319_32) – C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (Skype C2C Service) – C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe (Skype Technologies S.A.)
SRV - (Connectify) – C:\Program Files (x86)\Connectify\ConnectifyService.exe ()
SRV - (SkypeUpdate) – C:\Program Files (x86)\Skype\Updater\Updater.exe (Skype Technologies)
SRV - (SolidWorks Licensing Service) – C:\Program Files (x86)\Common Files\SolidWorks Shared\Service\SolidWorksLicensing.exe (SolidWorks)
SRV - (AdobeARMservice) – C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
SRV - (Steam Client Service) – C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Valve Corporation)
SRV - (GCTWiMaxServiceD) – C:\Program Files (x86)\Yes\Connect\GCTWiMaxServiceD.exe (GCT Semiconductor, Inc.)
SRV - (IJPLMSVC) – C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe ()
SRV - (bufssvr) – C:\Program Files (x86)\BUFFALO\SLManagerEasy\Bufssvr.exe (BUFFALO INC.)
SRV - (clr_optimization_v2.0.50727_32) – C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
SRV - (YahooAUService) – C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe (Yahoo! Inc.)
SRV - (ASLDRService) – C:\Program Files (x86)\ASUS\ATK Hotkey\AsLdrSrv.exe ()
SRV - (niSvcLoc) – C:\Windows\SysWOW64\nisvcloc.exe (National Instruments Corp.)
SRV - (NIDomainService) – C:\Program Files (x86)\National Instruments\Shared\Security\nidmsrv.exe (National Instruments, Inc.)
SRV - (lkTimeSync) – C:\Windows\SysWOW64\lktsrv.exe (National Instruments, Inc.)
SRV - (lkClassAds) – C:\Windows\SysWOW64\lkads.exe (National Instruments, Inc.)
SRV - (NILM License Manager) – C:\Program Files (x86)\National Instruments\Shared\License Manager\Bin\lmgrd.exe (Macrovision Corporation)
SRV - (LkCitadelServer) – C:\Windows\SysWOW64\lkcitdl.exe (National Instruments, Inc.)


========== Driver Services (SafeList) ==========

DRV:64bit: - (SMR322) – C:\Windows\SysNative\drivers\SMR322.SYS (Symantec Corporation)
DRV:64bit: - (SymEvent) – C:\Windows\SysNative\drivers\SYMEVENT64x86.SYS (Symantec Corporation)
DRV:64bit: - (SymEFA) – C:\Windows\SysNative\drivers\N360x64\1404000.028\SymEFA64.sys (Symantec Corporation)
DRV:64bit: - (SymDS) – C:\Windows\SysNative\drivers\N360x64\1404000.028\SymDS64.sys (Symantec Corporation)
DRV:64bit: - (SRTSP) – C:\Windows\SysNative\drivers\N360x64\1404000.028\srtsp64.sys (Symantec Corporation)
DRV:64bit: - (SymNetS) – C:\Windows\SysNative\drivers\N360x64\1404000.028\symnets.sys (Symantec Corporation)
DRV:64bit: - (ccSet_N360) – C:\Windows\SysNative\drivers\N360x64\1404000.028\ccSetx64.sys (Symantec Corporation)
DRV:64bit: - (MBAMProtector) – C:\Windows\SysNative\drivers\mbam.sys (Malwarebytes Corporation)
DRV:64bit: - (SymIRON) – C:\Windows\SysNative\drivers\N360x64\1404000.028\Ironx64.sys (Symantec Corporation)
DRV:64bit: - (SRTSPX) – C:\Windows\SysNative\drivers\N360x64\1404000.028\srtspx64.sys (Symantec Corporation)
DRV:64bit: - (NPF) – C:\Windows\SysNative\drivers\npf.sys (Riverbed Technology, Inc.)
DRV:64bit: - (taphss6) – C:\Windows\SysNative\drivers\taphss6.sys (Anchorfree Inc.)
DRV:64bit: - (cnnctfy2) – C:\Windows\SysNative\drivers\cnnctfy2.sys (Connectify)
DRV:64bit: - (USBAAPL64) – C:\Windows\SysNative\drivers\usbaapl64.sys (Apple, Inc.)
DRV:64bit: - (IDMWFP) – C:\Windows\SysNative\drivers\idmwfp.sys (Tonec Inc.)
DRV:64bit: - (GEARAspiWDM) – C:\Windows\SysNative\drivers\GEARAspiWDM.sys (GEAR Software Inc.)
DRV:64bit: - (taphss) – C:\Windows\SysNative\drivers\taphss.sys (AnchorFree Inc)
DRV:64bit: - (NETwNs64) – C:\Windows\SysNative\drivers\NETwNs64.sys (Intel Corporation)
DRV:64bit: - (sptd) – C:\Windows\SysNative\drivers\sptd.sys ()
DRV:64bit: - (PDFSFilter) – C:\Windows\SysNative\drivers\PDFsFilter.sys (Raxco Software, Inc.)
DRV:64bit: - (DefragFS) – C:\Windows\SysNative\drivers\DefragFs.sys (Raxco Software, Inc.)
DRV:64bit: - (HpSAMD) – C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (amdxata) – C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:64bit: - (amdsata) – C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (TsUsbFlt) – C:\Windows\SysNative\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV:64bit: - (sdbus) – C:\Windows\SysNative\drivers\sdbus.sys (Microsoft Corporation)
DRV:64bit: - (GdmUWm) – C:\Windows\SysNative\drivers\gdmuwm.sys (GCT Semiconductor, Inc.)
DRV:64bit: - (GdmWmPrt) – C:\Windows\SysNative\drivers\gdmwmprt.sys (GCT Semiconductor, Inc.)
DRV:64bit: - (GDMINIT) – C:\Windows\SysNative\drivers\gdminit.sys (GCT Semiconductor)
DRV:64bit: - (ivusb) – C:\Windows\SysNative\drivers\ivusb.sys (Initio Corporation)
DRV:64bit: - (itecir) – C:\Windows\SysNative\drivers\itecir.sys (ITE Tech. Inc. )
DRV:64bit: - (amdsbs) – C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (LSI_SAS2) – C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:64bit: - (Fs_Rec) – C:\Windows\SysNative\drivers\fs_rec.sys (Microsoft Corporation)
DRV:64bit: - (stexstor) – C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:64bit: - (1394hub) – C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
DRV:64bit: - (msloop) – C:\Windows\SysNative\drivers\loop.sys (Microsoft Corporation)
DRV:64bit: - (RTL8167) – C:\Windows\SysNative\drivers\Rt64win7.sys (Realtek Corporation )
DRV:64bit: - (netw5v64) – C:\Windows\SysNative\drivers\netw5v64.sys (Intel Corporation)
DRV:64bit: - (ebdrv) – C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) – C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (b57nd60a) – C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (hcw85cir) – C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV:64bit: - (MTsensor) – C:\Windows\SysNative\drivers\ATK64AMD.sys (ASUS)
DRV:64bit: - (NVHDA) – C:\Windows\SysNative\drivers\nvhda64v.sys (NVIDIA Corporation)
DRV:64bit: - (t_mouse.sys) – C:\Windows\SysNative\drivers\t_mouse.sys ()
DRV:64bit: - (mcdbus) – C:\Windows\SysNative\drivers\mcdbus.sys (MagicISO, Inc.)
DRV:64bit: - (Mkd3kfNt) – C:\Windows\SysNative\drivers\mkd3kfnt.sys (AhnLab, Inc.)
DRV:64bit: - (Mkd2Nadr) – C:\Windows\SysNative\drivers\Mkd2Nadr.sys (AhnLab, Inc.)
DRV:64bit: - (rimmptsk) – C:\Windows\SysNative\drivers\rimmpx64.sys (REDC)
DRV:64bit: - (WDC_SAM) – C:\Windows\SysNative\drivers\wdcsam64.sys (Western Digital Technologies)
DRV:64bit: - (rismxdp) – C:\Windows\SysNative\drivers\rixdpx64.sys (REDC)
DRV:64bit: - (rimsptsk) – C:\Windows\SysNative\drivers\rimspx64.sys (REDC)
DRV:64bit: - (ASMMAP64) – C:\Program Files\ATKGFNEX\ASMMAP64.sys ()
DRV - (NAVEX15) – C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.4.0.40\Definitions\VirusDefs\20130725.023\ex64.sys (Symantec Corporation)
DRV - (NAVENG) – C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.4.0.40\Definitions\VirusDefs\20130725.023\eng64.sys (Symantec Corporation)
DRV - (IDSVia64) – C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.4.0.40\Definitions\IPSDefs\20130725.001\IDSviA64.sys (Symantec Corporation)
DRV - (eeCtrl) – C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys (Symantec Corporation)
DRV - (BHDrvx64) – C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.4.0.40\Definitions\BASHDefs\20130715.001\BHDrvx64.sys (Symantec Corporation)
DRV - (EraserUtilRebootDrv) – C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys (Symantec Corporation)
DRV - (cpudrv64) – C:\Program Files (x86)\SystemRequirementsLab\cpudrv64.sys ()
DRV - (WIMMount) – C:\Windows\SysWOW64\drivers\wimmount.sys (Microsoft Corporation)
DRV - (mcdbus) – C:\Windows\SysWOW64\drivers\mcdbus.sys (MagicISO, Inc.)
DRV - (Mkd2Nadr) – C:\Windows\SysWOW64\drivers\Mkd2Nadr.sys (AhnLab, Inc.)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM\..\SearchScopes,DefaultScope =
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM;=IE8SRC
IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM;=IE8SRC

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = Preserve
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://securityresponse.symantec.com/avcenter/fix_homepage
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://malaysia.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-my
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0A A8 A0 C2 63 EA CD 01 [binary data]
IE - HKCU\..\SearchScopes,DefaultScope =
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}…amp;FORM=IE8SRC
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = local;*.local

========== FireFox ==========

FF - prefs.js..browser.search.defaulturl: ""
FF - prefs.js..browser.search.suggest.enabled: false
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "www.google.com"
FF - prefs.js..extensions.enabledAddons: [removed]:1.0
FF - prefs.js..extensions.enabledAddons: {ba14329e-9550-4989-b3f2-9732e92d17cc}:10.16.2.509
FF - prefs.js..extensions.enabledAddons: [removed]:7.1
FF - prefs.js..extensions.enabledItems: [removed]:1.3.4
FF - prefs.js..extensions.enabledItems: [removed]:7.3.6
FF - prefs.js..extensions.enabledItems: {BBDA0591-3099-440a-AA10-41764D9DB4DB}:3.0
FF - prefs.js..extensions.enabledItems: {2D3F3651-74B9-4795-BDEC-6DA2F431CB62}:2010.9.0.6
FF - prefs.js..extensions.enabledItems: {82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}:5.3.0.7550
FF - user.js - File not found

FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.25.2: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.25.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF - HKLM\Software\MozillaPlugins\@ahnlab.com/asp/npaosmgr.1: C:\Program Files (x86)\AhnLab\ASP\Components\aosmgr\conflict_221\npaosmgr.dll (AhnLab, Inc.)
FF - HKLM\Software\MozillaPlugins\@ahnlab.com/asp/npmkd25aos: C:\Program Files (x86)\AhnLab\ASP\MyKeyDefense 2.5\npmkd25aos.dll (AhnLab, Inc.)
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: D:\itunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@canon.com/EPPEX: C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.9.2: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.9.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nexon.net/NxGame: C:\ProgramData\NexonUS\NGM\npNxGameUS.dll (Nexon)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=16.0.0.282: c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprndlchromebrowserrecordext;version=1.3.0: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprndlhtml5videoshim;version=1.3.0: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprndlpepperflashvideoshim;version=1.3.0: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpplugin;version=16.0.0.282: c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
FF - HKLM\Software\MozillaPlugins\@realnetworks.com/npdlplugin;version=1: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF - HKLM\Software\MozillaPlugins\@t.garena.com/garenatalk: C:\Program Files (x86)\Garena Plus\bbtalk\plugins\npPlugin\npGarenaTalkPlugin.dll ( Garena)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@ahnlab.com/asp/npmkd25aos: C:\Program Files (x86)\AhnLab\ASP\MyKeyDefense 2.5\npmkd25aos.dll (AhnLab, Inc.)
FF - HKCU\Software\MozillaPlugins\@Skype Limited.com/Facebook Video Calling Plugin: C:\Users\Victor\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Victor\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Victor\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{BBDA0591-3099-440a-AA10-41764D9DB4DB}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.4.0.40\IPSFFPlgn\ [2013/07/21 18:09:17 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.4.0.40\coFFPlgn\ [2013/07/26 21:12:26 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{34712C68-7391-4c47-94F3-8F88D49AD632}: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ [2013/01/16 22:08:24 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2013/01/16 22:08:24 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 12.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2013/05/22 23:00:18 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 12.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2013/07/26 07:30:52 | 000,000,000 | —D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\[removed]: C:\Users\Victor\AppData\Roaming\IDM\idmmzcc5 [2013/07/21 18:31:17 | 000,000,000 | —D | M]
FF - HKEY_CURRENT_USER\software\mozilla\SeaMonkey\Extensions\\[removed]: C:\Users\Victor\AppData\Roaming\IDM\idmmzcc5 [2013/07/21 18:31:17 | 000,000,000 | —D | M]

[2011/06/09 21:39:27 | 000,000,000 | —D | M] (No name found) – C:\Users\Victor\AppData\Roaming\mozilla\Extensions
[2013/07/26 07:30:52 | 000,000,000 | —D | M] (No name found) – C:\Users\Victor\AppData\Roaming\mozilla\Firefox\Profiles\68rj7rey.default\extensions
[2012/04/26 23:22:13 | 000,004,526 | —- | M] () (No name found) – C:\Users\Victor\AppData\Roaming\mozilla\firefox\profiles\68rj7rey.default\extensions\[removed]
[2013/01/19 14:55:30 | 000,213,444 | —- | M] () (No name found) – C:\Users\Victor\AppData\Roaming\mozilla\firefox\profiles\68rj7rey.default\extensions\[removed]
[2013/07/17 19:47:23 | 000,000,000 | —D | M] (No name found) – C:\Program Files (x86)\Mozilla Firefox\extensions
[2012/06/07 16:50:10 | 000,000,000 | —D | M] (Skype Click to Call) – C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2013/07/17 19:47:23 | 000,000,000 | —D | M] (Java Console) – C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0039-ABCDEFFEDCBA}
[2013/05/22 23:00:18 | 000,097,208 | —- | M] (Mozilla Foundation) – C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2007/02/08 10:48:16 | 000,028,448 | —- | M] (National Instruments) – C:\Program Files (x86)\mozilla firefox\plugins\NPLV82Win32.dll
[2013/01/16 22:07:45 | 000,124,056 | —- | M] (RealPlayer) – C:\Program Files (x86)\mozilla firefox\plugins\nprpplugin.dll
[2011/09/26 16:48:52 | 000,003,958 | —- | M] () – C:\Program Files (x86)\mozilla firefox\searchplugins\baidu.xml
[2012/01/19 22:12:06 | 000,002,252 | —- | M] () – C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
[2012/01/19 22:12:06 | 000,002,040 | —- | M] () – C:\Program Files (x86)\mozilla firefox\searchplugins\twitter.xml

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{g
oogle:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:ins
tantExtendedEnabledParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q;={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyPar
ameter},
CHR - homepage: https://www.facebook.com/
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Users\Victor\AppData\Local\Google\Chrome\Application\28.0.1500.72\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\Victor\AppData\Local\Google\Chrome\Application\28.0.1500.72\pdf.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Victor\AppData\Local\Google\Chrome\Application\28.0.1500.72\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_2_202_235.dll
CHR - plugin: vShare.tv plug-in (Enabled) = C:\Users\Victor\AppData\Local\Google\Chrome\User Data\Default\Extensions\kpionmjnkbpcdpcflammlgllecmejgjj\1.3_0\chvsharetvplg.dll
CHR - plugin: vShare.tv plug-in (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npvsharetvplg.dll
CHR - plugin: Skype Toolbars (Enabled) = C:\Users\Victor\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.9.0.9216_0\npSkypeChromePlugin.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
CHR - plugin: Microsoft\u00AE Windows Media Player Firefox Plugin (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\np-mswmp.dll
CHR - plugin: Java Deployment Toolkit 6.0.310.5 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npdeployJava1.dll
CHR - plugin: Java™ Platform SE 6 U31 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll
CHR - plugin: National Instruments LabVIEW 8.2 Netscape Plug-in for Windows (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\NPLV82Win32.dll
CHR - plugin: 2007 Microsoft Office system (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\NPOFF12.DLL
CHR - plugin: RealPlayer™ G2 LiveConnect-Enabled Plug-In (32-bit) (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\nppl3260.dll
CHR - plugin: RealPlayer Version Plugin (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\nprpjplug.dll
CHR - plugin: RealPlayer™ HTML5VideoShim Plug-In (32-bit) (Enabled) = C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin7.dll
CHR - plugin: RealJukebox NS Plugin (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\nprjplug.dll
CHR - plugin: AhnLab Online Security (Enabled) = C:\Program Files (x86)\AhnLab\ASP\Components\aosmgr\conflict_221\npaosmgr.dll
CHR - plugin: AhnLab MyKeyDefense 2.5 (Enabled) = C:\Program Files (x86)\AhnLab\ASP\MyKeyDefense 2.5\npmkd25aos.dll
CHR - plugin: CANON iMAGE GATEWAY Album Plugin Utility (Enabled) = C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL
CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files (x86)\Microsoft Silverlight\4.1.10111.0\npctrl.dll
CHR - plugin: Pando Web Plugin (Enabled) = C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll
CHR - plugin: Nexon Game Controller (Enabled) = C:\ProgramData\NexonUS\NGM\npNxGameUS.dll
CHR - plugin: RealNetworks™ Chrome Background Extension Plug-In (32-bit) (Enabled) = C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll
CHR - plugin: Facebook Video Calling Plugin (Enabled) = C:\Users\Victor\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll
CHR - plugin: Google Update (Enabled) = C:\Users\Victor\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll

O1 HOSTS File: ([2013/07/18 21:22:48 | 000,000,830 | —- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:64bit: - BHO: (IDM integration (IDMIEHlprObj Class)) - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll (Internet Download Manager, Tonec Inc.)
O2:64bit: - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2:64bit: - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (Octh Class) - {000123B4-9B42-4900-B3F7-F4B073EFC214} - C:\Program Files (x86)\Orbitdownloader\orbitcth.dll (Orbitdownloader.com)
O2 - BHO: (IDM integration (IDMIEHlprObj Class)) - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll (Internet Download Manager, Tonec Inc.)
O2 - BHO: (RealNetworks Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
O2 - BHO: (Canon Easy-WebPrint EX BHO) - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
O2 - BHO: (Norton Identity Protection) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360\Engine\20.4.0.40\CoIEPlg.dll (Symantec Corporation)
O2 - BHO: (Norton Vulnerability Protection) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton 360\Engine\20.4.0.40\IPS\IPSBHO.dll (Symantec Corporation)
O2 - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (FDMIECookiesBHO Class) - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files (x86)\Free Download Manager\iefdm2.dll ()
O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (SingleInstance Class) - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn0\YTSingleInstance.dll (Yahoo! Inc)
O3 - HKLM\..\Toolbar: (Canon Easy-WebPrint EX) - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
O3 - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine\20.4.0.40\CoIEPlg.dll (Symantec Corporation)
O3 - HKLM\..\Toolbar: (Grab Pro) - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - C:\Program Files (x86)\Orbitdownloader\GrabPro.dll ()
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (Canon Easy-WebPrint EX) - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
O3 - HKCU\..\Toolbar\WebBrowser: (Grab Pro) - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - C:\Program Files (x86)\Orbitdownloader\GrabPro.dll ()
O4:64bit: - HKLM..\Run: [MouseDriver] C:\Windows\SysNative\TiltWheelMouse.exe (Pixart Imaging Inc)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe (ASUS)
O4 - HKLM..\Run: [ATKOSD2] C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe (ASUS)
O4 - HKLM..\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe (ASUS)
O4 - HKLM..\Run: [RSJ Start] C:\ProgramData\ICLJIG\RSJ.exe ()
O4 - HKLM..\Run: [TkBellExe] C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe (RealNetworks, Inc.)
O4 - HKCU..\Run: [Auto-Joiner.exe] C:\Users\Victor\Desktop\roomjoiner\Auto-Joiner.exe ()
O4 - HKCU..\Run: [GarenaPlus] C:\Program Files (x86)\Garena Plus\GarenaMessenger.exe ()
O4 - HKCU..\Run: [IDMan] C:\Program Files (x86)\Internet Download Manager\IDMan.exe (Tonec Inc.)
O4 - HKCU..\Run: [Norton Download Manager{N360S_prod_1.19_4.1.0.32}] C:\Users\Public\Downloads\Norton\{N360S_prod_1.19_4.1.0.32}\N360Downloader.exe /m File not found
O4 - Startup: C:\Users\Victor\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\My_AutoWarkey_Script.lnk = C:\Program Files (x86)\Warkeys\AutoWarkey\AutoHotkey\AutoHotkey.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 95
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableStatusMessages = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 0
O8:64bit: - Extra context menu item: &Download; by Orbit - C:\Program Files (x86)\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com)
O8:64bit: - Extra context menu item: &Grab; video by Orbit - C:\Program Files (x86)\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com)
O8:64bit: - Extra context menu item: Do&wnload; selected by Orbit - C:\Program Files (x86)\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com)
O8:64bit: - Extra context menu item: Down&load; all by Orbit - C:\Program Files (x86)\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com)
O8:64bit: - Extra context menu item: Download all links with IDM - C:\Program Files (x86)\Internet Download Manager\IEGetAll.htm ()
O8:64bit: - Extra context menu item: Download with IDM - C:\Program Files (x86)\Internet Download Manager\IEExt.htm ()
O8 - Extra context menu item: &Download; by Orbit - C:\Program Files (x86)\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com)
O8 - Extra context menu item: &Grab; video by Orbit - C:\Program Files (x86)\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com)
O8 - Extra context menu item: Do&wnload; selected by Orbit - C:\Program Files (x86)\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com)
O8 - Extra context menu item: Down&load; all by Orbit - C:\Program Files (x86)\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com)
O8 - Extra context menu item: Download all links with IDM - C:\Program Files (x86)\Internet Download Manager\IEGetAll.htm ()
O8 - Extra context menu item: Download with IDM - C:\Program Files (x86)\Internet Download Manager\IEExt.htm ()
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000011 - CC:\Program Files (x86)\VMware\VMware Workstation\x64\vsocklib.dll File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000012 - CC:\Program Files (x86)\VMware\VMware Workstation\x64\vsocklib.dll File not found
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.7.0/jinstall-…indows-i586.cab (Java Plug-in 10.9.2)
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} http://messenger.zone.msn.com/binary/Messe…nt.cab56907.cab (MessengerStatsClient Class)
O16 - DPF: {CAFEEFAC-0016-0000-0039-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_39)
O16 - DPF: {CAFEEFAC-0017-0000-0009-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-…indows-i586.cab (Java Plug-in 1.7.0_09)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 10.9.2)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shoc…ash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{350387E7-B2A3-46AB-8023-670ABCBF0C16}: DhcpNameServer = [removed] [removed]
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{9E0C852C-AFD0-4E3F-9006-5524CAB189DB}: NameServer = 10.101.0.10,10.101.0.12
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{BAEB82D4-2B9C-445F-BC90-61A667B4EABD}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{BAEB82D4-2B9C-445F-BC90-61A667B4EABD}: NameServer = 8.8.8.8,8.8.4.4
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\mso-offdap11 - No CLSID value found
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18:64bit: - Protocol\Handler\skype-ie-addon-data - No CLSID value found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{5393c743-fe16-11e0-9c1f-002215a4800d}\Shell\AutoRun\command - "" = F:\install.bat
O33 - MountPoints2\{5393c743-fe16-11e0-9c1f-002215a4800d}\Shell\COMMUNICATOR\command - "" = F:\install.bat
O33 - MountPoints2\{deede4b2-96e0-11e0-98b1-002215a4800d}\Shell - "" = AutoRun
O33 - MountPoints2\{deede4b2-96e0-11e0-98b1-002215a4800d}\Shell\AutoRun\command - "" = G:\Windows\CHECK\DriveNavigator.exe
O34 - HKLM BootExecute: (PDBoot.exe)
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] – "%1" %*
O35:64bit: - HKLM\..exefile [open] – "%1" %*
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37:64bit: - HKLM\…com [@ = comfile] – "%1" %*
O37:64bit: - HKLM\…exe [@ = exefile] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

NetSvcs:64bit: AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)

Drivers32:64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

========== Files/Folders - Created Within 30 Days ==========

[2013/07/25 20:45:58 | 000,000,000 | —D | C] – C:\Users\Victor\Desktop\New folder (3)
[2013/07/25 18:52:54 | 000,000,000 | R–D | C] – C:\Users\Victor\Documents\Scanned Documents
[2013/07/25 18:52:53 | 000,000,000 | —D | C] – C:\Users\Victor\Documents\Fax
[2013/07/25 18:05:50 | 000,000,000 | —D | C] – C:\Users\Victor\AppData\Roaming\SpeedyPC Software
[2013/07/25 18:05:20 | 000,000,000 | —D | C] – C:\ProgramData\SpeedyPC Software
[2013/07/25 07:03:23 | 000,067,632 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\msln.exe
[2013/07/24 22:01:06 | 000,096,856 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\SMR322.SYS
[2013/07/24 21:31:38 | 000,000,000 | —D | C] – C:\Program Files (x86)\YTD Toolbar
[2013/07/23 22:59:43 | 000,000,000 | —D | C] – C:\Users\Victor\AppData\Roaming\Malwarebytes
[2013/07/23 22:59:20 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2013/07/23 22:59:19 | 000,000,000 | —D | C] – C:\ProgramData\Malwarebytes
[2013/07/23 22:59:13 | 000,025,928 | —- | C] (Malwarebytes Corporation) – C:\Windows\SysNative\drivers\mbam.sys
[2013/07/23 22:59:12 | 000,000,000 | —D | C] – C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2013/07/23 22:58:34 | 010,285,040 | —- | C] (Malwarebytes Corporation ) – C:\Users\Victor\Desktop\mbam-setup-1.75.0.1300.exe
[2013/07/21 21:25:35 | 000,000,000 | —D | C] – C:\ProgramData\YTD Video Downloader
[2013/07/21 21:25:32 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YTD Video Downloader
[2013/07/21 21:04:00 | 000,000,000 | —D | C] – C:\Users\Victor\Desktop\iOTA
[2013/07/21 18:39:53 | 000,000,000 | —D | C] – C:\ProgramData\UEL
[2013/07/21 18:39:52 | 000,000,000 | -HSD | C] – C:\ProgramData\ICLJIG
[2013/07/21 18:30:55 | 000,000,000 | —D | C] – C:\Users\Victor\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
[2013/07/21 18:30:55 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
[2013/07/21 18:29:49 | 000,000,000 | —D | C] – C:\Users\Victor\Desktop\Internet Download Manager 6.15
[2013/07/21 18:13:40 | 000,000,000 | —D | C] – C:\Users\Victor\AppData\Roaming\GrabPro
[2013/07/21 18:13:38 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Orbit
[2013/07/21 18:03:24 | 000,000,000 | R–D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton 360
[2013/07/21 17:49:00 | 000,000,000 | —D | C] – C:\Users\Victor\AppData\Roaming\ProgSense
[2013/07/21 17:48:50 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinPcap
[2013/07/21 17:48:10 | 000,000,000 | —D | C] – C:\Program Files (x86)\Orbitdownloader
[2013/07/21 17:46:36 | 000,000,000 | —D | C] – C:\Users\Victor\AppData\Roaming\Orbit
[2013/07/18 21:30:01 | 000,312,232 | —- | C] (Oracle Corporation) – C:\Windows\SysNative\javaws.exe
[2013/07/18 21:29:35 | 000,189,352 | —- | C] (Oracle Corporation) – C:\Windows\SysNative\javaw.exe
[2013/07/18 21:29:35 | 000,188,840 | —- | C] (Oracle Corporation) – C:\Windows\SysNative\java.exe
[2013/07/18 21:29:35 | 000,108,968 | —- | C] (Oracle Corporation) – C:\Windows\SysNative\WindowsAccessBridge-64.dll
[2013/07/17 20:57:46 | 000,000,000 | —D | C] – C:\VS2012_PROJECTTEMPLATES_DIR
[2013/07/17 20:57:41 | 000,000,000 | —D | C] – C:\Program Files (x86)\Xamarin
[2013/07/17 20:57:39 | 000,000,000 | —D | C] – C:\VS2012_ITEMTEMPLATES_DIR
[2013/07/17 20:57:32 | 000,000,000 | —D | C] – C:\VS2012_EXTENSIONS_DIR
[2013/07/17 20:47:38 | 000,000,000 | —D | C] – C:\ProgramData\Monodoc
[2013/07/17 20:47:25 | 000,000,000 | —D | C] – C:\Program Files (x86)\Microsoft Visual Studio 11.0
[2013/07/17 20:45:28 | 000,000,000 | —D | C] – C:\Program Files (x86)\MonoDevelop
[2013/07/17 20:45:16 | 000,000,000 | —D | C] – C:\Program Files (x86)\Xamarin Studio
[2013/07/17 20:21:30 | 000,000,000 | —D | C] – C:\Program Files (x86)\GtkSharp
[2013/07/17 20:19:37 | 000,000,000 | —D | C] – C:\Users\Victor\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Xamarin
[2013/07/17 20:12:44 | 000,000,000 | —D | C] – C:\Program Files\Android
[2013/07/17 19:47:20 | 000,246,760 | —- | C] (Oracle Corporation) – C:\Windows\SysWow64\javaws.exe
[2013/07/17 19:47:20 | 000,174,056 | —- | C] (Oracle Corporation) – C:\Windows\SysWow64\javaw.exe
[2013/07/17 19:47:19 | 000,174,056 | —- | C] (Oracle Corporation) – C:\Windows\SysWow64\java.exe
[2013/07/17 19:26:11 | 000,000,000 | —D | C] – C:\ProgramData\Package Cache
[2013/07/17 19:00:18 | 000,000,000 | —D | C] – C:\Users\Victor\AppData\Local\Xamarin
[2013/07/02 19:29:18 | 000,000,000 | —D | C] – C:\ProgramData\IDM
[2011/04/26 21:13:58 | 005,073,240 | —- | C] (Microsoft Corporation) – C:\Program Files (x86)\vcredist_x86.exe
[2011/03/17 02:21:22 | 000,068,608 | —- | C] ( http://w3l.info.tm) – C:\Program Files (x86)\w3lh.dll
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2013/07/27 08:55:13 | 000,000,912 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1411131432-3712026648-2751386654-1001UA.job
[2013/07/27 08:44:14 | 000,000,830 | —- | M] () – C:\Windows\tasks\Adobe Flash Player Updater.job
[2013/07/27 07:57:06 | 000,000,932 | —- | M] () – C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-1411131432-3712026648-2751386654-1001UA.job
[2013/07/27 00:05:20 | 000,020,720 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013/07/27 00:05:18 | 000,020,720 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013/07/26 23:55:10 | 000,000,346 | -H– | M] () – C:\Windows\tasks\CoolYouUpdaterTask{7E368EE7-34E4-4C88-A79B-B87BD181F9B4}.job
[2013/07/26 23:54:55 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2013/07/26 23:54:51 | 3220,525,056 | -HS- | M] () – C:\hiberfil.sys
[2013/07/26 21:55:00 | 000,000,860 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1411131432-3712026648-2751386654-1001Core.job
[2013/07/25 19:57:02 | 000,000,910 | —- | M] () – C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-1411131432-3712026648-2751386654-1001Core.job
[2013/07/25 18:25:26 | 000,045,364 | —- | M] () – C:\Users\Victor\Desktop\virus.PNG
[2013/07/25 07:06:57 | 000,052,320 | —- | M] () – C:\Windows\SysNative\drivers\SMR322.dat
[2013/07/25 07:03:23 | 000,067,632 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\msln.exe
[2013/07/24 22:01:06 | 000,096,856 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\SMR322.SYS
[2013/07/23 22:59:20 | 000,001,113 | —- | M] () – C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2013/07/23 22:58:45 | 010,285,040 | —- | M] (Malwarebytes Corporation ) – C:\Users\Victor\Desktop\mbam-setup-1.75.0.1300.exe
[2013/07/23 19:35:37 | 140,416,272 | —- | M] () – C:\Users\Victor\Desktop\Android Pure Java Programming 1.mp4
[2013/07/22 23:14:03 | 000,002,392 | —- | M] () – C:\{D0824F08-72F6-4BCB-A445-ABFCD663E856}
[2013/07/21 21:25:32 | 000,001,050 | —- | M] () – C:\Users\Public\Desktop\YTD Video Downloader.lnk
[2013/07/21 18:13:38 | 000,001,079 | —- | M] () – C:\Users\Victor\Application Data\Microsoft\Internet Explorer\Quick Launch\Orbit.lnk
[2013/07/21 18:13:38 | 000,001,055 | —- | M] () – C:\Users\Victor\Desktop\Orbit.lnk
[2013/07/21 18:03:24 | 000,002,238 | —- | M] () – C:\Users\Public\Desktop\Norton 360.lnk
[2013/07/21 18:01:37 | 001,597,697 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\1404000.028\Cat.DB
[2013/07/21 17:45:02 | 000,177,312 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\SYMEVENT64x86.SYS
[2013/07/21 17:45:02 | 000,007,631 | —- | M] () – C:\Windows\SysNative\drivers\SYMEVENT64x86.CAT
[2013/07/21 17:45:02 | 000,000,854 | —- | M] () – C:\Windows\SysNative\drivers\SYMEVENT64x86.INF
[2013/07/18 23:21:12 | 000,872,264 | —- | M] () – C:\Windows\SysNative\PerfStringBackup.INI
[2013/07/18 23:21:12 | 000,731,142 | —- | M] () – C:\Windows\SysNative\perfh009.dat
[2013/07/18 23:21:12 | 000,150,406 | —- | M] () – C:\Windows\SysNative\perfc009.dat
[2013/07/18 21:29:25 | 000,108,968 | —- | M] (Oracle Corporation) – C:\Windows\SysNative\WindowsAccessBridge-64.dll
[2013/07/18 21:29:24 | 001,093,032 | —- | M] (Oracle Corporation) – C:\Windows\SysNative\npDeployJava1.dll
[2013/07/18 21:29:24 | 000,972,712 | —- | M] (Oracle Corporation) – C:\Windows\SysNative\deployJava1.dll
[2013/07/18 21:29:24 | 000,312,232 | —- | M] (Oracle Corporation) – C:\Windows\SysNative\javaws.exe
[2013/07/18 21:29:24 | 000,189,352 | —- | M] (Oracle Corporation) – C:\Windows\SysNative\javaw.exe
[2013/07/18 21:29:24 | 000,188,840 | —- | M] (Oracle Corporation) – C:\Windows\SysNative\java.exe
[2013/07/17 18:56:29 | 000,855,986 | —- | M] () – C:\Windows\SysWow64\PerfStringBackup.INI
[2013/06/30 11:34:26 | 000,001,852 | —- | M] () – C:\Users\Victor\Application Data\Microsoft\Internet Explorer\Quick Launch\Vuze.lnk
[2013/06/30 11:34:24 | 000,001,852 | —- | M] () – C:\Users\Public\Desktop\Vuze.lnk
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files Created - No Company Name ==========

[2013/07/25 18:41:35 | 3220,525,056 | -HS- | C] () – C:\hiberfil.sys
[2013/07/25 18:25:26 | 000,045,364 | —- | C] () – C:\Users\Victor\Desktop\virus.PNG
[2013/07/25 07:03:22 | 000,052,320 | —- | C] () – C:\Windows\SysNative\drivers\SMR322.dat
[2013/07/23 22:59:20 | 000,001,113 | —- | C] () – C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2013/07/22 23:14:02 | 000,002,392 | —- | C] () – C:\{D0824F08-72F6-4BCB-A445-ABFCD663E856}
[2013/07/21 21:26:11 | 140,416,272 | —- | C] () – C:\Users\Victor\Desktop\Android Pure Java Programming 1.mp4
[2013/07/21 21:25:32 | 000,001,050 | —- | C] () – C:\Users\Public\Desktop\YTD Video Downloader.lnk
[2013/07/21 17:48:55 | 000,001,079 | —- | C] () – C:\Users\Victor\Application Data\Microsoft\Internet Explorer\Quick Launch\Orbit.lnk
[2013/07/21 17:48:55 | 000,001,055 | —- | C] () – C:\Users\Victor\Desktop\Orbit.lnk
[2013/07/17 20:45:28 | 000,002,951 | —- | C] () – C:\Users\Victor\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Xamarin Studio.lnk
[2013/03/02 13:48:02 | 000,009,849 | R— | C] () – C:\Windows\UN090430.INI
[2013/03/01 09:47:36 | 000,053,299 | —- | C] () – C:\Windows\SysWow64\pthreadVC.dll
[2012/12/16 17:28:03 | 000,005,378 | —- | C] () – C:\Windows\PSPICEEV.INI
[2012/12/16 17:27:58 | 000,176,128 | —- | C] () – C:\Windows\SysWow64\lffax60n.dll
[2012/12/16 17:27:58 | 000,141,824 | —- | C] () – C:\Windows\SysWow64\lfcmp60n.dll
[2012/12/16 17:27:58 | 000,110,080 | —- | C] () – C:\Windows\SysWow64\lfpng60n.dll
[2012/12/16 17:27:58 | 000,046,080 | —- | C] () – C:\Windows\SysWow64\lftif60n.dll
[2012/12/16 17:27:58 | 000,043,008 | —- | C] () – C:\Windows\SysWow64\ltfil60n.dll
[2012/12/16 17:27:58 | 000,023,552 | —- | C] () – C:\Windows\SysWow64\lfpcx60n.dll
[2012/12/16 17:27:58 | 000,022,528 | —- | C] () – C:\Windows\SysWow64\lfpct60n.dll
[2012/12/16 17:27:58 | 000,022,528 | —- | C] () – C:\Windows\SysWow64\lfeps60n.dll
[2012/12/16 17:27:58 | 000,022,016 | —- | C] () – C:\Windows\SysWow64\lfbmp60n.dll
[2012/12/16 17:27:58 | 000,020,480 | —- | C] () – C:\Windows\SysWow64\lfpsd60n.dll
[2012/12/16 17:27:58 | 000,019,968 | —- | C] () – C:\Windows\SysWow64\lftga60n.dll
[2012/12/16 17:27:58 | 000,019,456 | —- | C] () – C:\Windows\SysWow64\lfwpg60n.dll
[2012/12/16 17:27:58 | 000,019,456 | —- | C] () – C:\Windows\SysWow64\lfwmf60n.dll
[2012/12/16 17:27:58 | 000,018,432 | —- | C] () – C:\Windows\SysWow64\lfmsp60n.dll
[2012/12/16 17:27:58 | 000,017,920 | —- | C] () – C:\Windows\SysWow64\lfmac60n.dll
[2012/12/16 17:27:58 | 000,017,920 | —- | C] () – C:\Windows\SysWow64\implode.dll
[2012/05/31 17:44:56 | 000,000,146 | —- | C] () – C:\Windows\CAPTURE.INI
[2012/05/19 01:39:29 | 000,007,605 | —- | C] () – C:\Users\Victor\AppData\Local\Resmon.ResmonCfg
[2012/05/08 16:23:40 | 000,000,044 | —- | C] () – C:\Windows\GMAN.INI
[2012/04/14 18:03:50 | 000,000,094 | —- | C] () – C:\Users\Victor\AppData\Local\fusioncache.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\zyadeizbstq.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\zmpm.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\zlvlgaoro.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\zbu.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\yztg.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\ywcotf.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\yruogei.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\yqwnxmuqkr.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\ynbpico.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\yft.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\yfddtyco.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\yeqc.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\xrjmwls.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\xratz.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\xnrwoffi.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\xkiazoygsu.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\xitroqxj.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\xhliavnncf.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\xhi.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\xhepiahgu.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\xei.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\xdu.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\xbwudob.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\xabxrnwognq.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\wztapis.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\wvpmojcpagc.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\wuienx.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\wmaeoulj.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\wjd.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\wgfzxqxc.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\vwx.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\vwvpxtf.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\vtccpjjxhbl.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\vpymgh.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\vky.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\vhgdwwy.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\vexcv.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\uuknvmo.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\upqsk.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\uilhoi.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\ugh.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\uaqqwmjt.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\tubh.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\tmksiwyo.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\tjerrruiu.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\tgysztaa.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\tgp.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\szanch.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\swrosmstc.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\svh.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\surl.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\sthnpbr.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\skjqlknoa.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\rvitifkhda.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\ruwy.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\rtsquze.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\rnni.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\rnaxcorvnpm.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\rmkgnn.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\rfbddh.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\refyhravcw.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\rckntimj.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\rbou.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\qzegqoobxiy.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\qqqewpfdl.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\qpghwlpi.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\qnretzig.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\qheefqe.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\qgqkumwr.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\qbdvroefxtf.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\pxluctu.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\pvsbacopgo.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\puxozpwjj.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\ptfcgaof.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\psxulyb.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\psuezqksw.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\pqjjgvrcrr.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\pplmagu.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\pefaimbebk.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\pcpmvigyknw.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\oxxpcqneqfk.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\onuhfaqdr.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\olcfhmx.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\okbzdweogsf.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\ogn.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\ogknbwh.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\ocduhsoaeky.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\netcd.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\ndpxrjvfik.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\mxdvmytw.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\mpuqpwyjjoe.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\mlfml.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\mhymnl.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\mhefcltipun.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\mcrrrdylbyb.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\mbpbf.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\lxjydaq.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\lwcnbd.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\lvjfqnrfy.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\lmkwvtfa.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\liif.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\lhlcj.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\ldna.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\ktkvvqws.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\kokjkgnayl.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\kgqeevfnt.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\kfkegdfzsmf.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\kblu.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\kaddzumq.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\jxqxva.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\jscxtijpp.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\ixrmyzmuf.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\itshnv.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\isnvgwxvzx.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\ikvd.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\ifvbafbi.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\iduxw.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\ict.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\ibqvywo.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\hxpuo.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\htzs.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\htubwk.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\hqwxnfwmq.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\hoboh.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\hmzimwaq.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\hhxjfatux.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\hgu.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\hgdxppghmnp.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\hfaptb.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\hbqnkzjqm.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\gzswrdxw.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\gxveh.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\gxiglgpq.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\gswxesatox.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\gksspjwk.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\gjrxn.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\giemuzl.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\ggjxmqh.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\gecrm.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\gcgii.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\gbx.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\fyvyvw.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\fqat.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\fnyj.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\fkuuzbgv.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\fas.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\ezafudvoiyt.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\err.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\ehe.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\egskehx.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\edsljcdivuy.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\ecisfvuhpa.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\dxrnzku.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\dqajfj.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\dmtlsnues.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\defhdp.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\cqbt.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\cntaml.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\civwzqm.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\cfclssx.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\cdntf.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\cbgvboorrjj.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\bzyz.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\bsmobir.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\blxcchdo.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\baxqskha.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\ayyyufnvi.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\aso.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\arembuqqlhl.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\apluecjxljh.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\akjgqsepny.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\ajnzyssdz.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\ajfm.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\aclcvmx.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\zzmbkjttcv.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\zvxuplfqaiv.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\zmulmsalvp.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\zhbezzk.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\zgtn.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\yfguqg.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\ybcwdcj.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\xibfo.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\xhxj.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\xbeumyws.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\wvmaql.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\wtkvqxla.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\wmcwjfwebcg.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\wjjkwjxof.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\vuzy.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\vekhfmquvd.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\uvhkeoo.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\ujupkolaxz.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\uhgxcxne.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\udixx.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\ubomomrwsdk.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\tttpgilubhz.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\tixbprzs.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\tcu.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\swmx.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\srt.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\sqrvkkbktxz.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\sntlrnm.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\slfzi.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\skcx.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\sjzadmi.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\sfsz.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\rzuc.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\rumiqlhw.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\rpz.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\riffaw.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\rifbww.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\rhw.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\qxbus.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\qttwzyei.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\qsopsnklrnj.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\qrpcq.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\qqqt.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\pqognjycvt.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\pjtdqi.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\phcioojd.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\pedcjlq.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\pclkwlz.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\pathdekgnl.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\ousspnt.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\otvbczqzr.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\otorwgb.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\oofzxmm.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\oofsbkfk.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\ooaomuyhvz.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\olhdsirhbjm.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\oicryjbsxhd.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\ntpp.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\npuailglpt.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\narceunvfsr.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\mwzhlh.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\mwuwz.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\mvhxlyyr.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\minowwpnhw.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\mflohpswrxl.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\mbufohzbd.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\maynwlp.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\lvzw.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\lqya.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\lnm.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\lffhqjpt.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\kragnbr.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\kppamcnflm.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\knk.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\kkrk.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\kjvzwobzke.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\jvpytddxshm.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\jvanbm.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\jecbuzopv.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\jazdltqdat.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\ivz.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\ithugwck.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\imisiwl.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\ilppyukvb.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\hxokmtz.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\hulemjbpzih.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\hrfumedgw.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\hiushfclfla.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\gwegf.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\ghdvcccqxcv.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\fzzu.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\fnxe.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\fmlgoxxnn.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\fhagevihj.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\epuzw.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\eewo.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\eesejbzog.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\dmuuqmc.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\dkfd.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\djzobvavx.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\dgppwo.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\dgckkqqq.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\dfswulgomz.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\detwvkklv.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\ctxnogspj.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\cbqynozbpo.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\byoqvakieh.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\bxqecmpfn.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\bulcyfilrrd.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\bsxkwl.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\betjex.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\azuxhafgo.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\auemdu.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\aesvs.dat
[2012/03/29 01:02:28 | 000,000,000 | —- | C] () – C:\Windows\SysWow64\cd.dat
[2012/03/15 16:49:51 | 000,000,025 | —- | C] () – C:\Windows\SysWow64\settings.dat
[2012/02/23 00:14:06 | 000,723,294 | —- | C] () – C:\Windows\unins000.exe
[2012/02/23 00:14:06 | 000,026,464 | —- | C] () – C:\Windows\unins000.dat
[2011/12/22 22:10:44 | 030,773,082 | —- | C] () – C:\Program Files (x86)\Garena Plus.rar
[2011/12/15 17:56:13 | 000,006,656 | —- | C] () – C:\Users\Victor\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/12/15 00:39:26 | 000,016,924 | —- | C] () – C:\Users\Victor\qms-bmh3.bmp
[2011/12/15 00:39:23 | 000,016,924 | —- | C] () – C:\Users\Victor\qms-bmh2.bmp
[2011/12/15 00:39:17 | 000,016,920 | —- | C] () – C:\Users\Victor\qms-bmh1.bmp
[2011/12/13 18:11:51 | 000,000,016 | -H– | C] () – C:\Users\Victor\1uMNFkanFSH
[2011/12/13 18:08:10 | 000,010,272 | —- | C] () – C:\Users\Victor\quartus2.qreg
[2011/12/05 14:14:26 | 000,000,016 | -H– | C] () – C:\Users\Victor\1XU2dLQFvU8
[2011/12/03 18:18:37 | 000,001,357 | —- | C] () – C:\Users\Victor\quartus2.ini
[2011/11/04 03:20:06 | 000,000,000 | —- | C] () – C:\Windows\eDrawingOfficeAutomator.INI
[2011/10/14 12:04:44 | 000,003,455 | —- | C] () – C:\Program Files (x86)\Uninstall.ini
[2011/09/22 03:13:16 | 000,175,616 | —- | C] () – C:\Windows\SysWow64\unrar.dll
[2011/09/15 11:48:04 | 000,855,986 | —- | C] () – C:\Windows\SysWow64\PerfStringBackup.INI
[2011/07/03 01:44:04 | 006,452,224 | —- | C] () – C:\Program Files (x86)\JuzLoader GUI.exe
[2011/07/01 02:10:48 | 000,140,800 | —- | C] () – C:\Program Files (x86)\juzloader.exe
[2011/06/30 21:32:10 | 000,002,700 | —- | C] () – C:\Program Files (x86)\juzdotabnet.reg
[2011/06/30 19:24:04 | 000,000,090 | —- | C] () – C:\Program Files (x86)\config.cfg
[2011/06/26 12:06:07 | 000,000,600 | —- | C] () – C:\Users\Victor\PUTTY.RND
[2011/06/12 11:06:53 | 000,045,270 | —- | C] () – C:\Users\Victor\AppData\Roaming\room_v3.dat
[2011/03/02 21:37:18 | 000,325,968 | —- | C] () – C:\Program Files (x86)\lua5.1.dll
[2011/03/02 21:37:16 | 000,011,264 | —- | C] () – C:\Program Files (x86)\lua51.dll
[2010/04/05 10:58:38 | 000,035,564 | —- | C] () – C:\Program Files (x86)\started.wav

========== ZeroAccess Check ==========

[2009/07/14 12:55:00 | 000,000,227 | RHS- | M] () – C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll – [2010/11/20 21:27:25 | 014,174,208 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll – [2010/11/20 20:21:19 | 012,872,192 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll – [2009/07/14 09:40:51 | 000,909,312 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll – [2010/11/20 20:19:02 | 000,606,208 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll – [2009/07/14 09:41:56 | 000,505,856 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Both

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

========== LOP Check ==========

[2011/10/18 02:14:37 | 000,000,000 | —D | M] – C:\Users\Victor\AppData\Roaming\7 Sticky Notes
[2012/07/27 14:17:33 | 000,000,000 | —D | M] – C:\Users\Victor\AppData\Roaming\Auto-Joiner
[2012/09/11 19:07:12 | 000,000,000 | —D | M] – C:\Users\Victor\AppData\Roaming\AutoGG
[2012/04/25 20:54:44 | 000,000,000 | —D | M] – C:\Users\Victor\AppData\Roaming\AutoHideIP
[2013/07/18 23:06:35 | 000,000,000 | —D | M] – C:\Users\Victor\AppData\Roaming\Azureus
[2012/05/30 15:41:20 | 000,000,000 | —D | M] – C:\Users\Victor\AppData\Roaming\Canon
[2011/11/04 03:02:24 | 000,000,000 | —D | M] – C:\Users\Victor\AppData\Roaming\DAEMON Tools Lite
[2011/11/04 03:18:53 | 000,000,000 | —D | M] – C:\Users\Victor\AppData\Roaming\DassaultSystemes
[2013/04/26 00:31:42 | 000,000,000 | —D | M] – C:\Users\Victor\AppData\Roaming\Dev-Cpp
[2013/07/27 01:05:11 | 000,000,000 | —D | M] – C:\Users\Victor\AppData\Roaming\DMCache
[2011/11/04 20:28:58 | 000,000,000 | —D | M] – C:\Users\Victor\AppData\Roaming\EDrawings
[2012/06/18 02:59:28 | 000,000,000 | —D | M] – C:\Users\Victor\AppData\Roaming\Free Download Manager
[2012/06/04 23:48:18 | 000,000,000 | —D | M] – C:\Users\Victor\AppData\Roaming\Garena
[2013/07/26 23:59:32 | 000,000,000 | —D | M] – C:\Users\Victor\AppData\Roaming\GarenaPlus
[2013/07/21 18:13:40 | 000,000,000 | —D | M] – C:\Users\Victor\AppData\Roaming\GrabPro
[2013/04/02 01:20:46 | 000,000,000 | —D | M] – C:\Users\Victor\AppData\Roaming\Hard Disk Sentinel
[2013/07/21 18:31:17 | 000,000,000 | —D | M] – C:\Users\Victor\AppData\Roaming\IDM
[2012/04/27 17:00:11 | 000,000,000 | —D | M] – C:\Users\Victor\AppData\Roaming\Leadertech
[2011/09/22 03:14:17 | 000,000,000 | —D | M] – C:\Users\Victor\AppData\Roaming\Leawo
[2012/11/27 10:03:55 | 000,000,000 | —D | M] – C:\Users\Victor\AppData\Roaming\Microchip
[2011/11/22 17:33:16 | 000,000,000 | —D | M] – C:\Users\Victor\AppData\Roaming\National Instruments
[2012/04/14 22:46:27 | 000,000,000 | —D | M] – C:\Users\Victor\AppData\Roaming\OMRON
[2013/07/21 18:31:40 | 000,000,000 | —D | M] – C:\Users\Victor\AppData\Roaming\Orbit
[2012/01/14 17:42:31 | 000,000,000 | —D | M] – C:\Users\Victor\AppData\Roaming\PopCapv1002
[2012/01/14 17:38:10 | 000,000,000 | —D | M] – C:\Users\Victor\AppData\Roaming\PopCapv1005eni
[2013/07/21 17:49:00 | 000,000,000 | —D | M] – C:\Users\Victor\AppData\Roaming\ProgSense
[2011/10/16 13:57:55 | 000,000,000 | —D | M] – C:\Users\Victor\AppData\Roaming\Rovio
[2013/07/25 18:05:50 | 000,000,000 | —D | M] – C:\Users\Victor\AppData\Roaming\SpeedyPC Software
[2012/12/13 22:27:51 | 000,000,000 | —D | M] – C:\Users\Victor\AppData\Roaming\SystemRequirementsLab
[2011/06/11 18:45:22 | 000,000,000 | —D | M] – C:\Users\Victor\AppData\Roaming\Tific
[2012/05/09 20:27:01 | 000,000,000 | —D | M] – C:\Users\Victor\AppData\Roaming\TreasureUPXPSImage
[2013/07/23 19:11:12 | 000,000,000 | —D | M] – C:\Users\Victor\AppData\Roaming\uTorrent
[2011/09/14 18:32:31 | 000,000,000 | —D | M] – C:\Users\Victor\AppData\Roaming\Wireshark
[2011/10/24 16:52:36 | 000,000,000 | —D | M] – C:\Users\Victor\AppData\Roaming\Yes

========== Purity Check ==========



========== Custom Scans ==========

< %USERPROFILE%\..|smtmp;true;true;true /FP >

< %temp%\smtmp\*.* /s > >

< MD5 for: EXPLORER.ADML >
[2009/07/14 10:30:02 | 000,003,695 | —- | M] () MD5=7A4C7F3CB156543113596988479CAFCE – C:\Windows\PolicyDefinitions\en-US\Explorer.adml
[2009/07/14 10:30:02 | 000,003,695 | —- | M] () MD5=7A4C7F3CB156543113596988479CAFCE – C:\Windows\winsxs\amd64_microsoft-windows-s..ouppolicy.resources_31bf3856ad364e35_6.1.7600.16385_en-us_7ef5713984067904\Explorer.adml

< MD5 for: EXPLORER.ADMX >
[2009/06/11 04:53:55 | 000,003,836 | —- | M] () MD5=AD131A834808E6AFF4A3918DE05BFCF6 – C:\Windows\PolicyDefinitions\Explorer.admx
[2009/06/11 04:53:55 | 000,003,836 | —- | M] () MD5=AD131A834808E6AFF4A3918DE05BFCF6 – C:\Windows\winsxs\amd64_microsoft-windows-shell-grouppolicy_31bf3856ad364e35_6.1.7600.16385_none_71af9b5b0a86e6b7\Explorer.admx

< MD5 for: EXPLORER.BMP >
[2009/08/31 03:59:28 | 000,000,246 | —- | M] () MD5=EB73135E745C47670BF509ACF5E91698 – C:\Program Files (x86)\Microsoft Visual Studio 10.0\VC\VCWizards\AppWiz\MFC\Application\templates\1028\explorer.bmp
[2009/08/31 03:59:28 | 000,000,246 | —- | M] () MD5=EB73135E745C47670BF509ACF5E91698 – C:\Program Files (x86)\Microsoft Visual Studio 10.0\VC\VCWizards\AppWiz\MFC\Application\templates\1031\explorer.bmp
[2009/08/31 03:59:28 | 000,000,246 | —- | M] () MD5=EB73135E745C47670BF509ACF5E91698 – C:\Program Files (x86)\Microsoft Visual Studio 10.0\VC\VCWizards\AppWiz\MFC\Application\templates\1033\explorer.bmp
[2009/08/31 03:59:28 | 000,000,246 | —- | M] () MD5=EB73135E745C47670BF509ACF5E91698 – C:\Program Files (x86)\Microsoft Visual Studio 10.0\VC\VCWizards\AppWiz\MFC\Application\templates\1036\explorer.bmp
[2009/08/31 03:59:28 | 000,000,246 | —- | M] () MD5=EB73135E745C47670BF509ACF5E91698 – C:\Program Files (x86)\Microsoft Visual Studio 10.0\VC\VCWizards\AppWiz\MFC\Application\templates\1040\explorer.bmp
[2009/08/31 03:59:28 | 000,000,246 | —- | M] () MD5=EB73135E745C47670BF509ACF5E91698 – C:\Program Files (x86)\Microsoft Visual Studio 10.0\VC\VCWizards\AppWiz\MFC\Application\templates\1041\explorer.bmp
[2009/08/31 03:59:28 | 000,000,246 | —- | M] () MD5=EB73135E745C47670BF509ACF5E91698 – C:\Program Files (x86)\Microsoft Visual Studio 10.0\VC\VCWizards\AppWiz\MFC\Application\templates\1042\explorer.bmp
[2009/08/31 03:59:28 | 000,000,246 | —- | M] () MD5=EB73135E745C47670BF509ACF5E91698 – C:\Program Files (x86)\Microsoft Visual Studio 10.0\VC\VCWizards\AppWiz\MFC\Application\templates\1049\explorer.bmp
[2009/08/31 03:59:28 | 000,000,246 | —- | M] () MD5=EB73135E745C47670BF509ACF5E91698 – C:\Program Files (x86)\Microsoft Visual Studio 10.0\VC\VCWizards\AppWiz\MFC\Application\templates\2052\explorer.bmp
[2009/08/31 03:59:28 | 000,000,246 | —- | M] () MD5=EB73135E745C47670BF509ACF5E91698 – C:\Program Files (x86)\Microsoft Visual Studio 10.0\VC\VCWizards\AppWiz\MFC\Application\templates\3082\explorer.bmp

< MD5 for: EXPLORER.DESIGNER.VB >
[2010/03/18 20:22:58 | 000,036,545 | —- | M] () MD5=0BFA552D19A4A7F9130A71DFBBCB1407 – C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE\ItemTemplatesCache\VisualBasic\Windows Forms\1033\Explorer.zip\explorer.designer.vb
[2005/09/23 03:27:08 | 000,030,825 | —- | M] () MD5=1B02BC8983576F2C80D2BE2BB97B9E97 – C:\Documents and Settings\Victor\AppData\Roaming\Microsoft\VSTAHost\SolidWorks_VSTA\8.0\TemplatesCache\Item\VisualBasic\1033\Explorer.zip\explorer.designer.vb
[2005/09/23 03:27:08 | 000,030,825 | —- | M] () MD5=1B02BC8983576F2C80D2BE2BB97B9E97 – C:\Documents and Settings\Victor\Application Data\Microsoft\VSTAHost\SolidWorks_VSTA\8.0\TemplatesCache\Item\VisualBasic\1033\Explorer.zip\explorer.designer.vb
[2005/09/23 03:27:08 | 000,030,825 | —- | M] () MD5=1B02BC8983576F2C80D2BE2BB97B9E97 – C:\Users\Victor\AppData\Roaming\Microsoft\VSTAHost\SolidWorks_VSTA\8.0\TemplatesCache\Item\VisualBasic\1033\Explorer.zip\explorer.designer.vb
[2005/09/23 03:27:08 | 000,030,825 | —- | M] () MD5=1B02BC8983576F2C80D2BE2BB97B9E97 – C:\Users\Victor\Application Data\Microsoft\VSTAHost\SolidWorks_VSTA\8.0\TemplatesCache\Item\VisualBasic\1033\Explorer.zip\explorer.designer.vb

< MD5 for: EXPLORER.EXE >
[2011/02/26 14:23:14 | 002,870,272 | —- | M] (Microsoft Corporation) MD5=0862495E0C825893DB75EF44FAEA8E93 – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_adc24107935a7e25\explorer.exe
[2011/02/26 13:19:21 | 002,616,320 | —- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_ba87e574ddfe652d\explorer.exe
[2009/07/14 09:14:20 | 002,613,248 | —- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_b7fe430bc7ce3761\explorer.exe
[2011/02/26 13:51:13 | 002,614,784 | —- | M] (Microsoft Corporation) MD5=255CF508D7CFB10E0794D6AC93280BD8 – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_b8ce9756e0b786a4\explorer.exe
[2009/10/31 13:45:39 | 002,614,272 | —- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_b819b343c7ba6202\explorer.exe
[2011/02/26 13:33:07 | 002,614,784 | —- | M] (Microsoft Corporation) MD5=2AF58D15EDC06EC6FDACCE1F19482BBF – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_b816eb59c7bb4020\explorer.exe
[2011/02/25 14:19:30 | 002,871,808 | —- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 – C:\Windows\explorer.exe
[2011/02/25 14:19:30 | 002,871,808 | —- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_afa79dc39081d0ba\explorer.exe
[2011/02/26 14:14:34 | 002,871,808 | —- | M] (Microsoft Corporation) MD5=3B69712041F3D63605529BD66DC00C48 – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_b0333b22a99da332\explorer.exe
[2010/11/20 20:17:09 | 002,616,320 | —- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_ba2f56d3c4bcbafb\explorer.exe
[2009/08/03 14:19:07 | 002,868,224 | —- | M] (Microsoft Corporation) MD5=700073016DAC1C3D2E7E2CE4223334B6 – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_ae84b558ac4eb41c\explorer.exe
[2011/02/25 13:30:54 | 002,616,320 | —- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E – C:\Windows\SysWOW64\explorer.exe
[2011/02/25 13:30:54 | 002,616,320 | —- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_b9fc4815c4e292b5\explorer.exe
[2009/10/31 14:34:59 | 002,870,272 | —- | M] (Microsoft Corporation) MD5=9AAAEC8DAC27AA17B053E6352AD233AE – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_adc508f19359a007\explorer.exe
[2009/08/03 13:49:47 | 002,613,248 | —- | M] (Microsoft Corporation) MD5=9FF6C4C91A3711C0A3B18F87B08B518D – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_b8d95faae0af7617\explorer.exe
[2010/11/20 21:24:45 | 002,872,320 | —- | M] (Microsoft Corporation) MD5=AC4C51EB24AA95B77F705AB159189E24 – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_afdaac81905bf900\explorer.exe
[2009/10/31 14:38:38 | 002,870,272 | —- | M] (Microsoft Corporation) MD5=B8EC4BD49CE8F6FC457721BFC210B67F – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_ae46d6aeac7ca7c7\explorer.exe
[2009/08/03 13:35:50 | 002,613,248 | —- | M] (Microsoft Corporation) MD5=B95EEB0F4E5EFBF1038A35B3351CF047 – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_b853c407c78e3ba9\explorer.exe
[2009/07/14 09:39:10 | 002,868,224 | —- | M] (Microsoft Corporation) MD5=C235A51CB740E45FFA0EBFB9BAFCDA64 – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_ada998b9936d7566\explorer.exe
[2009/10/31 14:00:51 | 002,614,272 | —- | M] (Microsoft Corporation) MD5=C76153C7ECA00FA852BB0C193378F917 – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_b89b8100e0dd69c2\explorer.exe
[2011/02/26 14:26:45 | 002,870,784 | —- | M] (Microsoft Corporation) MD5=E38899074D4951D31B4040E994DD7C8D – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_ae79ed04ac56c4a9\explorer.exe
[2009/08/03 14:17:37 | 002,868,224 | —- | M] (Microsoft Corporation) MD5=F170B4A061C9E026437B193B4D571799 – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_adff19b5932d79ae\explorer.exe

< MD5 for: EXPLORER.EXE.MUI >
[2009/07/14 10:06:56 | 000,022,016 | —- | M] (Microsoft Corporation) MD5=B9F4B1CA23D60775736059D72BA48526 – C:\Windows\SysWOW64\en-US\explorer.exe.mui
[2009/07/14 10:06:56 | 000,022,016 | —- | M] (Microsoft Corporation) MD5=B9F4B1CA23D60775736059D72BA48526 – C:\Windows\winsxs\wow64_microsoft-windows-explorer.resources_31bf3856ad364e35_6.1.7600.16385_en-us_6c3c2316c1b39396\explorer.exe.mui
[2009/07/14 10:26:48 | 000,022,016 | —- | M] (Microsoft Corporation) Unable to obtain MD5 – C:\Windows\en-US\explorer.exe.mui
[2009/07/14 10:26:48 | 000,022,016 | —- | M] (Microsoft Corporation) Unable to obtain MD5 – C:\Windows\winsxs\amd64_microsoft-windows-explorer.resources_31bf3856ad364e35_6.1.7600.16385_en-us_61e778c48d52d19b\explorer.exe.mui

< MD5 for: EXPLORER.EXE-A80E4F97.PF >
[2013/07/27 08:40:08 | 000,347,584 | —- | M] () MD5=DEA5ED9949C8E946B6908EC123B39102 – C:\Windows\Prefetch\EXPLORER.EXE-A80E4F97.pf

< MD5 for: EXPLORER.GIF >
[2009/08/31 03:59:28 | 000,003,342 | —- | M] () MD5=2C9E121C2DECEF61FED6EA977A30D90F – C:\Program Files (x86)\Microsoft Visual Studio 10.0\VC\VCWizards\AppWiz\MFC\Application\images\Explorer.gif
[2004/03/21 18:03:24 | 000,000,124 | —- | M] () MD5=E98CB09109AE5FA8CFE276E9CAD13A24 – C:\Program Files\MATLAB\R2011a\toolbox\shared\dastudio\resources\explorer.gif

< MD5 for: EXPLORER.M >
[2007/03/13 15:46:16 | 000,000,539 | —- | M] () MD5=0D0F5EA10491E5501C1AC8BAC275021C – C:\Program Files\MATLAB\R2011a\toolbox\shared\spcuilib\@extmgr\@Explorer\Explorer.m
[2010/12/09 14:03:44 | 000,007,890 | —- | M] () MD5=3FE2F72FCAB395BDB0658A995516CDD4 – C:\Program Files\MATLAB\R2011a\toolbox\simulink\simulink\@SigLogSelector\@explorer\explorer.m
[2010/04/05 18:47:24 | 000,005,532 | —- | M] () MD5=B04A98C66197D55446E1193E63166F68 – C:\Program Files\MATLAB\R2011a\toolbox\simulink\simulink\+Simulink\+symbol\Explorer.m
[2011/02/12 19:41:28 | 000,012,448 | —- | M] () MD5=F92A61594A69253FEF0758EA73B61EDC – C:\Program Files\MATLAB\R2011a\toolbox\fixedpoint\fixedpointtool\@fxptui\@explorer\explorer.m

< MD5 for: EXPLORER.P >
[2011/02/02 18:57:50 | 000,002,174 | —- | M] () MD5=4C9997A77278F1B17F64D59EE22797F5 – C:\Program Files\MATLAB\R2011a\toolbox\qualkits\common\@ArtifactsExplorer\Explorer.p
[2011/02/02 19:11:38 | 000,000,717 | —- | M] () MD5=68343D5F74726C124E6267C1686A807F – C:\Program Files\MATLAB\R2011a\toolbox\rtw\rtw\@TflDesigner\@explorer\explorer.p
[2011/02/02 18:55:42 | 000,000,578 | —- | M] () MD5=962726B563EE94731E9A382E655F28E0 – C:\Program Files\MATLAB\R2011a\toolbox\simulink\simulink\@BusEditor\@explorer\explorer.p
[2011/02/02 18:57:08 | 000,000,638 | —- | M] () MD5=C99FCB71E0B47DBB38490C40C7BA1371 – C:\Program Files\MATLAB\R2011a\toolbox\simulink\simulink\@DeploymentDiagram\@explorer\explorer.p

< MD5 for: EXPLORER.RESX >
[2010/03/18 20:22:58 | 000,040,049 | —- | M] () MD5=B16D2C77324DE7222CB0EA55C7B32784 – C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE\ItemTemplatesCache\VisualBasic\Windows Forms\1033\Explorer.zip\explorer.resx
[2005/09/23 03:27:08 | 000,040,553 | —- | M] () MD5=B1B3C02B970204A703854F13D66A0C79 – C:\Documents and Settings\Victor\AppData\Roaming\Microsoft\VSTAHost\SolidWorks_VSTA\8.0\TemplatesCache\Item\VisualBasic\1033\Explorer.zip\explorer.resx
[2005/09/23 03:27:08 | 000,040,553 | —- | M] () MD5=B1B3C02B970204A703854F13D66A0C79 – C:\Documents and Settings\Victor\Application Data\Microsoft\VSTAHost\SolidWorks_VSTA\8.0\TemplatesCache\Item\VisualBasic\1033\Explorer.zip\explorer.resx
[2005/09/23 03:27:08 | 000,040,553 | —- | M] () MD5=B1B3C02B970204A703854F13D66A0C79 – C:\Users\Victor\AppData\Roaming\Microsoft\VSTAHost\SolidWorks_VSTA\8.0\TemplatesCache\Item\VisualBasic\1033\Explorer.zip\explorer.resx
[2005/09/23 03:27:08 | 000,040,553 | —- | M] () MD5=B1B3C02B970204A703854F13D66A0C79 – C:\Users\Victor\Application Data\Microsoft\VSTAHost\SolidWorks_VSTA\8.0\TemplatesCache\Item\VisualBasic\1033\Explorer.zip\explorer.resx

< MD5 for: EXPLORER.VB >
[2005/09/23 03:27:08 | 000,007,236 | —- | M] () MD5=0408BE3A764405BDF6120B13756C207B – C:\Documents and Settings\Victor\AppData\Roaming\Microsoft\VSTAHost\SolidWorks_VSTA\8.0\TemplatesCache\Item\VisualBasic\1033\Explorer.zip\explorer.vb
[2005/09/23 03:27:08 | 000,007,236 | —- | M] () MD5=0408BE3A764405BDF6120B13756C207B – C:\Documents and Settings\Victor\Application Data\Microsoft\VSTAHost\SolidWorks_VSTA\8.0\TemplatesCache\Item\VisualBasic\1033\Explorer.zip\explorer.vb
[2005/09/23 03:27:08 | 000,007,236 | —- | M] () MD5=0408BE3A764405BDF6120B13756C207B – C:\Users\Victor\AppData\Roaming\Microsoft\VSTAHost\SolidWorks_VSTA\8.0\TemplatesCache\Item\VisualBasic\1033\Explorer.zip\explorer.vb
[2005/09/23 03:27:08 | 000,007,236 | —- | M] () MD5=0408BE3A764405BDF6120B13756C207B – C:\Users\Victor\Application Data\Microsoft\VSTAHost\SolidWorks_VSTA\8.0\TemplatesCache\Item\VisualBasic\1033\Explorer.zip\explorer.vb
[2010/03/18 20:22:58 | 000,008,501 | —- | M] () MD5=55808E7AF87B5C18B97707BEF8EBDDEA – C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE\ItemTemplatesCache\VisualBasic\Windows Forms\1033\Explorer.zip\explorer.vb

< MD5 for: EXPLORER.VSTEMPLATE >
[2005/09/23 03:27:08 | 000,001,333 | —- | M] () MD5=9DD77EB173C4F605676D53074C1FAF9A – C:\Documents and Settings\Victor\AppData\Roaming\Microsoft\VSTAHost\SolidWorks_VSTA\8.0\TemplatesCache\Item\VisualBasic\1033\Explorer.zip\explorer.vstemplate
[2005/09/23 03:27:08 | 000,001,333 | —- | M] () MD5=9DD77EB173C4F605676D53074C1FAF9A – C:\Documents and Settings\Victor\Application Data\Microsoft\VSTAHost\SolidWorks_VSTA\8.0\TemplatesCache\Item\VisualBasic\1033\Explorer.zip\explorer.vstemplate
[2005/09/23 03:27:08 | 000,001,333 | —- | M] () MD5=9DD77EB173C4F605676D53074C1FAF9A – C:\Users\Victor\AppData\Roaming\Microsoft\VSTAHost\SolidWorks_VSTA\8.0\TemplatesCache\Item\VisualBasic\1033\Explorer.zip\explorer.vstemplate
[2005/09/23 03:27:08 | 000,001,333 | —- | M] () MD5=9DD77EB173C4F605676D53074C1FAF9A – C:\Users\Victor\Application Data\Microsoft\VSTAHost\SolidWorks_VSTA\8.0\TemplatesCache\Item\VisualBasic\1033\Explorer.zip\explorer.vstemplate
[2010/03/18 20:22:58 | 000,006,491 | —- | M] () MD5=FB731348042E3356E2215A6747CE893C – C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE\ItemTemplatesCache\VisualBasic\Windows Forms\1033\Explorer.zip\explorer.vstemplate

< MD5 for: EXPLORER.XML >
[2010/01/25 12:51:24 | 000,001,050 | —- | M] () MD5=7C14198237207186B3022C8B3EAFA563 – C:\Program Files\MATLAB\R2011a\resources\SLControllib\en\explorer.xml
[2011/02/02 14:56:24 | 000,001,356 | —- | M] () MD5=EEBCCCC6C4B7C606350BD15144DFC047 – C:\Program Files\MATLAB\R2011a\resources\SLControllib\ja_JP\explorer.xml

< MD5 for: EXPLORER.ZIP >
[2006/03/06 22:48:08 | 000,020,394 | —- | M] () MD5=B469409C2B2A33C542190B720E11BD79 – C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\Explorer.zip
[2010/03/18 20:23:00 | 000,024,306 | —- | M] () MD5=E8E0F5E3C559D62C1A65CF2C5EB75A24 – C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE\ItemTemplates\VisualBasic\Windows Forms\1033\Explorer.zip

< MD5 for: IEXPLORE.EXE >
[2011/04/23 04:15:52 | 000,696,592 | —- | M] (Microsoft Corporation) MD5=281C23EC5BCB1853A5D571F1A6E52FB1 – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.20949_none_101e7c5957724e1d\iexplore.exe
[2009/07/14 09:17:29 | 000,673,048 | —- | M] (Microsoft Corporation) MD5=2C32E3E596CFE660353753EABEFB0540 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.16385_none_19ba3f8a72d988f3\iexplore.exe
[2011/08/20 12:35:15 | 000,673,024 | —- | M] (Microsoft Corporation) MD5=41FE5E37EFE0B587A688BA0E4FA41288 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.16869_none_19d3ea0872c5a830\iexplore.exe
[2011/04/23 03:29:16 | 000,673,040 | —- | M] (Microsoft Corporation) MD5=64EFAF916C4009F1B84153D0BB491FB0 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.16800_none_1a0bc6f6729d1c7b\iexplore.exe
[2011/06/21 14:14:22 | 000,696,592 | —- | M] (Microsoft Corporation) MD5=6B2383EDA3956983E3219A62D8408DAB – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.20992_none_0fe16ab757a12871\iexplore.exe
[2011/06/21 13:25:30 | 000,673,040 | —- | M] (Microsoft Corporation) MD5=6BB506124872ACDFAC5BD912CA1334CE – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.20992_none_1a3615098c01ea6c\iexplore.exe
[2010/11/20 21:28:25 | 000,695,056 | —- | M] (Microsoft Corporation) MD5=86257731DDB311FBC283534CC0091634 – C:\Program Files\Internet Explorer\iexplore.exe
[2010/11/20 21:28:25 | 000,695,056 | —- | M] (Microsoft Corporation) MD5=86257731DDB311FBC283534CC0091634 – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7601.17514_none_1196a9003b674a92\iexplore.exe
[2011/06/21 13:37:00 | 000,673,040 | —- | M] (Microsoft Corporation) MD5=A3AB0A260049BE22AB52E302D9220A92 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.16839_none_19f459cc72ad545d\iexplore.exe
[2011/02/24 13:45:11 | 000,673,040 | —- | M] (Microsoft Corporation) MD5=AB2BB40A5FE49AD236791AC22BD08869 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.20908_none_1a9d66118bb386fd\iexplore.exe
[2011/08/20 13:46:07 | 000,696,576 | —- | M] (Microsoft Corporation) MD5=AC1CC7CD5CBE60EFF105BB3C0DC199C5 – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.16869_none_0f7f3fb63e64e635\iexplore.exe
[2011/06/21 14:21:24 | 000,696,592 | —- | M] (Microsoft Corporation) MD5=B38DE184AC135A4B0AE7D286476FA33F – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.16839_none_0f9faf7a3e4c9262\iexplore.exe
[2011/02/24 14:29:19 | 000,696,592 | —- | M] (Microsoft Corporation) MD5=B4881B8F6EDB48CABD44BCC9FB5475C4 – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.20908_none_1048bbbf5752c502\iexplore.exe
[2013/04/04 14:50:32 | 000,218,184 | —- | M] () MD5=B4C6E3889BB310CA7E974A04EC6E46AC – C:\Program Files (x86)\Malwarebytes' Anti-Malware\Chameleon\iexplore.exe
[2010/11/20 20:22:51 | 000,673,040 | —- | M] (Microsoft Corporation) MD5=C613E69C3B191BB02C7A191741A1D024 – C:\Program Files (x86)\Internet Explorer\iexplore.exe
[2010/11/20 20:22:51 | 000,673,040 | —- | M] (Microsoft Corporation) MD5=C613E69C3B191BB02C7A191741A1D024 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7601.17514_none_1beb53526fc80c8d\iexplore.exe
[2011/02/24 13:32:52 | 000,673,040 | —- | M] (Microsoft Corporation) MD5=C6697A46554E36541E81182B258A19D6 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.16766_none_19d0e74472c85f04\iexplore.exe
[2011/08/20 13:42:38 | 000,696,576 | —- | M] (Microsoft Corporation) MD5=C66C8BF791F9DB974022506265518EE0 – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.21033_none_102322ab576fcd64\iexplore.exe
[2011/04/23 04:16:25 | 000,696,592 | —- | M] (Microsoft Corporation) MD5=D6F57A9ECB4606076FB9519D1698FCBA – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.16800_none_0fb71ca43e3c5a80\iexplore.exe
[2011/02/24 14:32:09 | 000,696,592 | —- | M] (Microsoft Corporation) MD5=E1BBDE0F187194D4B08335234A4B9FC7 – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.16766_none_0f7c3cf23e679d09\iexplore.exe
[2009/07/14 09:43:43 | 000,696,600 | —- | M] (Microsoft Corporation) MD5=F2B0D41E1D08D0B2006DF5AA2E74C81E – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.16385_none_0f6595383e78c6f8\iexplore.exe
[2011/04/23 03:11:29 | 000,673,040 | —- | M] (Microsoft Corporation) MD5=F94877A94996B3C12BB31AD722840457 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.20949_none_1a7326ab8bd31018\iexplore.exe
[2011/08/20 12:32:44 | 000,673,024 | —- | M] (Microsoft Corporation) MD5=FA623BE79902A7B49FF4F21117B63C83 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.21033_none_1a77ccfd8bd08f5f\iexplore.exe

< MD5 for: IEXPLORE.EXE.MUI >
[2009/07/14 10:29:20 | 000,005,120 | —- | M] (Microsoft Corporation) MD5=C29BCFB504E33FEADDFA2D0183CEF62F – C:\Program Files\Internet Explorer\en-US\iexplore.exe.mui
[2009/07/14 10:29:20 | 000,005,120 | —- | M] (Microsoft Corporation) MD5=C29BCFB504E33FEADDFA2D0183CEF62F – C:\Windows\winsxs\amd64_microsoft-windows-i..-optional.resources_31bf3856ad364e35_8.0.7600.16385_en-us_09122aaf762607df\iexplore.exe.mui
[2009/07/14 10:29:20 | 000,005,120 | —- | M] (Microsoft Corporation) MD5=C29BCFB504E33FEADDFA2D0183CEF62F – C:\Windows\winsxs\amd64_microsoft-windows-i..-optional.resources_31bf3856ad364e35_8.0.7601.17514_en-us_0b433e7773148b79\iexplore.exe.mui
[2009/07/14 10:05:06 | 000,005,120 | —- | M] (Microsoft Corporation) MD5=FBA4CD95930248053A2C3F43CA70B986 – C:\Program Files (x86)\Internet Explorer\en-US\iexplore.exe.mui
[2009/07/14 10:05:06 | 000,005,120 | —- | M] (Microsoft Corporation) MD5=FBA4CD95930248053A2C3F43CA70B986 – C:\Windows\winsxs\wow64_microsoft-windows-i..-optional.resources_31bf3856ad364e35_8.0.7600.16385_en-us_1366d501aa86c9da\iexplore.exe.mui
[2009/07/14 10:05:06 | 000,005,120 | —- | M] (Microsoft Corporation) MD5=FBA4CD95930248053A2C3F43CA70B986 – C:\Windows\winsxs\wow64_microsoft-windows-i..-optional.resources_31bf3856ad364e35_8.0.7601.17514_en-us_1597e8c9a7754d74\iexplore.exe.mui

< MD5 for: IEXPLORE.EXE-4B6C9213.PF >
[2013/07/26 07:19:11 | 000,188,714 | —- | M] () MD5=7862E8749592047D6B0C62BC37AD6CA5 – C:\Windows\Prefetch\IEXPLORE.EXE-4B6C9213.pf

< MD5 for: SERVICES >
[2009/06/11 05:00:26 | 000,017,463 | —- | M] () MD5=D9E1A01B480D961B7CF0509D597A92D6 – C:\Windows\winsxs\amd64_microsoft-windows-w..nfrastructure-other_31bf3856ad364e35_6.1.7600.16385_none_6079f415110c0210\services

< MD5 for: SERVICES.CFG >
[2011/06/06 12:55:30 | 000,584,045 | —- | M] () MD5=B82DD53FA8C260DDD7FDC42182DB816E – C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Services\Services.cfg

< MD5 for: SERVICES.EXE >
[2009/07/14 09:39:37 | 000,328,704 | —- | M] (Microsoft Corporation) MD5=24ACB7E5BE595468E3B9AA488B9B4FCB – C:\Windows\SysNative\services.exe
[2009/07/14 09:39:37 | 000,328,704 | —- | M] (Microsoft Corporation) MD5=24ACB7E5BE595468E3B9AA488B9B4FCB – C:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_2b54b20ee6fa07b1\services.exe

< MD5 for: SERVICES.EXE.MUI >
[2009/07/14 10:25:40 | 000,017,408 | —- | M] (Microsoft Corporation) Unable to obtain MD5 – C:\Windows\SysNative\en-US\services.exe.mui
[2009/07/14 10:25:40 | 000,017,408 | —- | M] (Microsoft Corporation) Unable to obtain MD5 – C:\Windows\winsxs\amd64_microsoft-windows-s..ontroller.resources_31bf3856ad364e35_6.1.7600.16385_en-us_c5f238be3fa63468\services.exe.mui

< MD5 for: SERVICES.H >
[2012/08/29 10:50:46 | 000,001,043 | —- | M] () MD5=EFA6260E75D8055649F88462E3E9E929 – C:\Program Files (x86)\Canon\Easy-WebPrint EX\include\mysql\services.h
[2007/05/08 13:49:48 | 000,002,610 | —- | M] () MD5=F133C41C9B530B27576BBE7F47E8F32C – C:\Program Files (x86)\Microchip\MpAM\Modules\DNetG2S\Services.h

< MD5 for: SERVICES.HTML >
[2012/07/05 11:45:31 | 000,099,505 | —- | M] () MD5=9E7613BE4A45E68BF8DFD1751A256177 – C:\Documents and Settings\Victor\AppData\Local\Android\android-sdk\docs\guide\components\services.html
[2012/07/05 11:45:31 | 000,099,505 | —- | M] () MD5=9E7613BE4A45E68BF8DFD1751A256177 – C:\Documents and Settings\Victor\AppData\Local\Application Data\Android\android-sdk\docs\guide\components\services.html
[2012/07/05 11:45:31 | 000,099,505 | —- | M] () MD5=9E7613BE4A45E68BF8DFD1751A256177 – C:\Documents and Settings\Victor\AppData\Local\Application Data\Application Data\Android\android-sdk\docs\guide\components\services.html
[2012/07/05 11:45:31 | 000,099,505 | —- | M] () MD5=9E7613BE4A45E68BF8DFD1751A256177 – C:\Documents and Settings\Victor\AppData\Local\Application Data\Application Data\Application Data\Android\android-sdk\docs\guide\components\services.html
[2012/07/05 11:45:31 | 000,099,505 | —- | M] () MD5=9E7613BE4A45E68BF8DFD1751A256177 – C:\Documents and Settings\Victor\AppData\Local\Application Data\Application Data\Application Data\Application Data\Android\android-sdk\docs\guide\components\services.html
[2012/07/05 11:45:31 | 000,099,505 | —- | M] () MD5=9E7613BE4A45E68BF8DFD1751A256177 – C:\Documents and Settings\Victor\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Android\android-sdk\docs\guide\components\services.html
[2012/07/05 11:45:31 | 000,099,505 | —- | M] () MD5=9E7613BE4A45E68BF8DFD1751A256177 – C:\Documents and Settings\Victor\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Android\android-sdk\docs\guide\components\services.html
[2012/07/05 11:45:31 | 000,099,505 | —- | M] () MD5=9E7613BE4A45E68BF8DFD1751A256177 – C:\Documents and Settings\Victor\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Android\android-sdk\docs\guide\components\services.html
[2012/07/05 11:45:31 | 000,099,505 | —- | M] () MD5=9E7613BE4A45E68BF8DFD1751A256177 – C:\Documents and Settings\Victor\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Android\android-sdk\docs\guide\components\services.html
[2012/07/05 11:45:31 | 000,099,505 | —- | M] () MD5=9E7613BE4A45E68BF8DFD1751A256177 – C:\Documents and Settings\Victor\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Android\android-sdk\docs\guide\components\services.html
[2012/07/05 11:45:31 | 000,099,505 | —- | M] () MD5=9E7613BE4A45E68BF8DFD1751A256177 – C:\Documents and Settings\Victor\Local Settings\Android\android-sdk\docs\guide\components\services.html
[2012/07/05 11:45:31 | 000,099,505 | —- | M] () MD5=9E7613BE4A45E68BF8DFD1751A256177 – C:\Documents and Settings\Victor\Local Settings\Application Data\Android\android-sdk\docs\guide\components\services.html
[2012/07/05 11:45:31 | 000,099,505 | —- | M] () MD5=9E7613BE4A45E68BF8DFD1751A256177 – C:\Documents and Settings\Victor\Local Settings\Application Data\Application Data\Android\android-sdk\docs\guide\components\services.html
[2012/07/05 11:45:31 | 000,099,505 | —- | M] () MD5=9E7613BE4A45E68BF8DFD1751A256177 – C:\Documents and Settings\Victor\Local Settings\Application Data\Application Data\Application Data\Android\android-sdk\docs\guide\components\services.html
[2012/07/05 11:45:31 | 000,099,505 | —- | M] () MD5=9E7613BE4A45E68BF8DFD1751A256177 – C:\Documents and Settings\Victor\Local Settings\Application Data\Application Data\Application Data\Application Data\Android\android-sdk\docs\guide\components\services.html
[2012/07/05 11:45:31 | 000,099,505 | —- | M] () MD5=9E7613BE4A45E68BF8DFD1751A256177 – C:\Documents and Settings\Victor\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Android\android-sdk\docs\guide\components\services.html
[2012/07/05 11:45:31 | 000,099,505 | —- | M] () MD5=9E7613BE4A45E68BF8DFD1751A256177 – C:\Documents and Settings\Victor\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Android\android-sdk\docs\guide\components\services.html
[2012/07/05 11:45:31 | 000,099,505 | —- | M] () MD5=9E7613BE4A45E68BF8DFD1751A256177 – C:\Documents and Settings\Victor\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Android\android-sdk\docs\guide\components\services.html
[2012/07/05 11:45:31 | 000,099,505 | —- | M] () MD5=9E7613BE4A45E68BF8DFD1751A256177 – C:\Documents and Settings\Victor\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Android\android-sdk\docs\guide\components\services.html
[2012/07/05 11:45:31 | 000,099,505 | —- | M] () MD5=9E7613BE4A45E68BF8DFD1751A256177 – C:\Documents and Settings\Victor\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Android\android-sdk\docs\guide\components\services.html
[2012/07/05 11:45:31 | 000,099,505 | —- | M] () MD5=9E7613BE4A45E68BF8DFD1751A256177 – C:\Users\Victor\AppData\Local\Android\android-sdk\docs\guide\components\services.html
[2012/07/05 11:45:31 | 000,099,505 | —- | M] () MD5=9E7613BE4A45E68BF8DFD1751A256177 – C:\Users\Victor\AppData\Local\Application Data\Android\android-sdk\docs\guide\components\services.html
[2012/07/05 11:45:31 | 000,099,505 | —- | M] () MD5=9E7613BE4A45E68BF8DFD1751A256177 – C:\Users\Victor\AppData\Local\Application Data\Application Data\Android\android-sdk\docs\guide\components\services.html
[2012/07/05 11:45:31 | 000,099,505 | —- | M] () MD5=9E7613BE4A45E68BF8DFD1751A256177 – C:\Users\Victor\AppData\Local\Application Data\Application Data\Application Data\Android\android-sdk\docs\guide\components\services.html
[2012/07/05 11:45:31 | 000,099,505 | —- | M] () MD5=9E7613BE4A45E68BF8DFD1751A256177 – C:\Users\Victor\AppData\Local\Application Data\Application Data\Application Data\Application Data\Android\android-sdk\docs\guide\components\services.html
[2012/07/05 11:45:31 | 000,099,505 | —- | M] () MD5=9E7613BE4A45E68BF8DFD1751A256177 – C:\Users\Victor\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Android\android-sdk\docs\guide\components\services.html
[2012/07/05 11:45:31 | 000,099,505 | —- | M] () MD5=9E7613BE4A45E68BF8DFD1751A256177 – C:\Users\Victor\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Android\android-sdk\docs\guide\components\services.html
[2012/07/05 11:45:31 | 000,099,505 | —- | M] () MD5=9E7613BE4A45E68BF8DFD1751A256177 – C:\Users\Victor\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Android\android-sdk\docs\guide\components\services.html
[2012/07/05 11:45:31 | 000,099,505 | —- | M] () MD5=9E7613BE4A45E68BF8DFD1751A256177 – C:\Users\Victor\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Android\android-sdk\docs\guide\components\services.html
[2012/07/05 11:45:31 | 000,099,505 | —- | M] () MD5=9E7613BE4A45E68BF8DFD1751A256177 – C:\Users\Victor\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Android\android-sdk\docs\guide\components\services.html
[2012/07/05 11:45:31 | 000,099,505 | —- | M] () MD5=9E7613BE4A45E68BF8DFD1751A256177 – C:\Users\Victor\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Android\android-sdk\docs\guide\components\services.html
[2012/07/05 11:45:31 | 000,099,505 | —- | M] () MD5=9E7613BE4A45E68BF8DFD1751A256177 – C:\Users\Victor\Local Settings\Android\android-sdk\docs\guide\components\services.html
[2012/07/05 11:45:31 | 000,099,505 | —- | M] () MD5=9E7613BE4A45E68BF8DFD1751A256177 – C:\Users\Victor\Local Settings\Application Data\Android\android-sdk\docs\guide\components\services.html
[2012/07/05 11:45:31 | 000,099,505 | —- | M] () MD5=9E7613BE4A45E68BF8DFD1751A256177 – C:\Users\Victor\Local Settings\Application Data\Application Data\Android\android-sdk\docs\guide\components\services.html
[2012/07/05 11:45:31 | 000,099,505 | —- | M] () MD5=9E7613BE4A45E68BF8DFD1751A256177 – C:\Users\Victor\Local Settings\Application Data\Application Data\Application Data\Android\android-sdk\docs\guide\components\services.html
[2012/07/05 11:45:31 | 000,099,505 | —- | M] () MD5=9E7613BE4A45E68BF8DFD1751A256177 – C:\Users\Victor\Local Settings\Application Data\Application Data\Application Data\Application Data\Android\android-sdk\docs\guide\components\services.html
[2012/07/05 11:45:31 | 000,099,505 | —- | M] () MD5=9E7613BE4A45E68BF8DFD1751A256177 – C:\Users\Victor\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Android\android-sdk\docs\guide\components\services.html
[2012/07/05 11:45:31 | 000,099,505 | —- | M] () MD5=9E7613BE4A45E68BF8DFD1751A256177 – C:\Users\Victor\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Android\android-sdk\docs\guide\components\services.html
[2012/07/05 11:45:31 | 000,099,505 | —- | M] () MD5=9E7613BE4A45E68BF8DFD1751A256177 – C:\Users\Victor\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Android\android-sdk\docs\guide\components\services.html
[2012/07/05 11:45:31 | 000,099,505 | —- | M] () MD5=9E7613BE4A45E68BF8DFD1751A256177 – C:\Users\Victor\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Android\android-sdk\docs\guide\components\services.html
[2012/07/05 11:45:31 | 000,099,505 | —- | M] () MD5=9E7613BE4A45E68BF8DFD1751A256177 – C:\Users\Victor\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Android\android-sdk\docs\guide\components\services.html
[2012/07/05 11:45:31 | 000,099,505 | —- | M] () MD5=9E7613BE4A45E68BF8DFD1751A256177 – C:\Users\Victor\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Android\android-sdk\docs\guide\components\services.html
[2012/07/05 11:45:57 | 000,062,034 | —- | M] () MD5=DB8D325CB00CDF3F8D0EB0F229070BA0 – C:\Documents and Settings\Victor\AppData\Local\Android\android-sdk\docs\guide\topics\ui\accessibility\services.html
[2012/07/05 11:45:57 | 000,062,034 | —- | M] () MD5=DB8D325CB00CDF3F8D0EB0F229070BA0 – C:\Documents and Settings\Victor\AppData\Local\Application Data\Android\android-sdk\docs\guide\topics\ui\accessibility\services.html
[2012/07/05 11:45:57 | 000,062,034 | —- | M] () MD5=DB8D325CB00CDF3F8D0EB0F229070BA0 – C:\Documents and Settings\Victor\AppData\Local\Application Data\Application Data\Android\android-sdk\docs\guide\topics\ui\accessibility\services.html
[2012/07/05 11:45:57 | 000,062,034 | —- | M] () MD5=DB8D325CB00CDF3F8D0EB0F229070BA0 – C:\Documents and Settings\Victor\AppData\Local\Application Data\Application Data\Application Data\Android\android-sdk\docs\guide\topics\ui\accessibility\services.html
[2012/07/05 11:45:57 | 000,062,034 | —- | M] () MD5=DB8D325CB00CDF3F8D0EB0F229070BA0 – C:\Documents and Settings\Victor\AppData\Local\Application Data\Application Data\Application Data\Application Data\Android\android-sdk\docs\guide\topics\ui\accessibility\services.html
[2012/07/05 11:45:57 | 000,062,034 | —- | M] () MD5=DB8D325CB00CDF3F8D0EB0F229070BA0 – C:\Documents and Settings\Victor\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Android\android-sdk\docs\guide\topics\ui\accessibility\services.html
[2012/07/05 11:45:57 | 000,062,034 | —- | M] () MD5=DB8D325CB00CDF3F8D0EB0F229070BA0 – C:\Documents and Settings\Victor\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Android\android-sdk\docs\guide\topics\ui\accessibility\services.html
[2012/07/05 11:45:57 | 000,062,034 | —- | M] () MD5=DB8D325CB00CDF3F8D0EB0F229070BA0 – C:\Documents and Settings\Victor\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Android\android-sdk\docs\guide\topics\ui\accessibility\services.html
[2012/07/05 11:45:57 | 000,062,034 | —- | M] () MD5=DB8D325CB00CDF3F8D0EB0F229070BA0 – C:\Documents and Settings\Victor\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Android\android-sdk\docs\guide\topics\ui\accessibility\services.html
[2012/07/05 11:45:57 | 000,062,034 | —- | M] () MD5=DB8D325CB00CDF3F8D0EB0F229070BA0 – C:\Documents and Settings\Victor\Local Settings\Android\android-sdk\docs\guide\topics\ui\accessibility\services.html
[2012/07/05 11:45:57 | 000,062,034 | —- | M] () MD5=DB8D325CB00CDF3F8D0EB0F229070BA0 – C:\Documents and Settings\Victor\Local Settings\Application Data\Android\android-sdk\docs\guide\topics\ui\accessibility\services.html
[2012/07/05 11:45:57 | 000,062,034 | —- | M] () MD5=DB8D325CB00CDF3F8D0EB0F229070BA0 – C:\Documents and Settings\Victor\Local Settings\Application Data\Application Data\Android\android-sdk\docs\guide\topics\ui\accessibility\services.html
[2012/07/05 11:45:57 | 000,062,034 | —- | M] () MD5=DB8D325CB00CDF3F8D0EB0F229070BA0 – C:\Documents and Settings\Victor\Local Settings\Application Data\Application Data\Application Data\Android\android-sdk\docs\guide\topics\ui\accessibility\services.html
[2012/07/05 11:45:57 | 000,062,034 | —- | M] () MD5=DB8D325CB00CDF3F8D0EB0F229070BA0 – C:\Documents and Settings\Victor\Local Settings\Application Data\Application Data\Application Data\Application Data\Android\android-sdk\docs\guide\topics\ui\accessibility\services.html
[2012/07/05 11:45:57 | 000,062,034 | —- | M] () MD5=DB8D325CB00CDF3F8D0EB0F229070BA0 – C:\Documents and Settings\Victor\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Android\android-sdk\docs\guide\topics\ui\accessibility\services.html
[2012/07/05 11:45:57 | 000,062,034 | —- | M] () MD5=DB8D325CB00CDF3F8D0EB0F229070BA0 – C:\Documents and Settings\Victor\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Android\android-sdk\docs\guide\topics\ui\accessibility\services.html
[2012/07/05 11:45:57 | 000,062,034 | —- | M] () MD5=DB8D325CB00CDF3F8D0EB0F229070BA0 – C:\Documents and Settings\Victor\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Android\android-sdk\docs\guide\topics\ui\accessibility\services.html
[2012/07/05 11:45:57 | 000,062,034 | —- | M] () MD5=DB8D325CB00CDF3F8D0EB0F229070BA0 – C:\Documents and Settings\Victor\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Android\android-sdk\docs\guide\topics\ui\accessibility\services.html
[2012/07/05 11:45:57 | 000,062,034 | —- | M] () MD5=DB8D325CB00CDF3F8D0EB0F229070BA0 – C:\Users\Victor\AppData\Local\Android\android-sdk\docs\guide\topics\ui\accessibility\services.html
[2012/07/05 11:45:57 | 000,062,034 | —- | M] () MD5=DB8D325CB00CDF3F8D0EB0F229070BA0 – C:\Users\Victor\AppData\Local\Application Data\Android\android-sdk\docs\guide\topics\ui\accessibility\services.html
[2012/07/05 11:45:57 | 000,062,034 | —- | M] () MD5=DB8D325CB00CDF3F8D0EB0F229070BA0 – C:\Users\Victor\AppData\Local\Application Data\Application Data\Android\android-sdk\docs\guide\topics\ui\accessibility\services.html
[2012/07/05 11:45:57 | 000,062,034 | —- | M] () MD5=DB8D325CB00CDF3F8D0EB0F229070BA0 – C:\Users\Victor\AppData\Local\Application Data\Application Data\Application Data\Android\android-sdk\docs\guide\topics\ui\accessibility\services.html
[2012/07/05 11:45:57 | 000,062,034 | —- | M] () MD5=DB8D325CB00CDF3F8D0EB0F229070BA0 – C:\Users\Victor\AppData\Local\Application Data\Application Data\Application Data\Application Data\Android\android-sdk\docs\guide\topics\ui\accessibility\services.html
[2012/07/05 11:45:57 | 000,062,034 | —- | M] () MD5=DB8D325CB00CDF3F8D0EB0F229070BA0 – C:\Users\Victor\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Android\android-sdk\docs\guide\topics\ui\accessibility\services.html
[2012/07/05 11:45:57 | 000,062,034 | —- | M] () MD5=DB8D325CB00CDF3F8D0EB0F229070BA0 – C:\Users\Victor\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Android\android-sdk\docs\guide\topics\ui\accessibility\services.html
[2012/07/05 11:45:57 | 000,062,034 | —- | M] () MD5=DB8D325CB00CDF3F8D0EB0F229070BA0 – C:\Users\Victor\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Android\android-sdk\docs\guide\topics\ui\accessibility\services.html
[2012/07/05 11:45:57 | 000,062,034 | —- | M] () MD5=DB8D325CB00CDF3F8D0EB0F229070BA0 – C:\Users\Victor\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Android\android-sdk\docs\guide\topics\ui\accessibility\services.html
[2012/07/05 11:45:57 | 000,062,034 | —- | M] () MD5=DB8D325CB00CDF3F8D0EB0F229070BA0 – C:\Users\Victor\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Android\android-sdk\docs\guide\topics\ui\accessibility\services.html
[2012/07/05 11:45:57 | 000,062,034 | —- | M] () MD5=DB8D325CB00CDF3F8D0EB0F229070BA0 – C:\Users\Victor\Local Settings\Android\android-sdk\docs\guide\topics\ui\accessibility\services.html
[2012/07/05 11:45:57 | 000,062,034 | —- | M] () MD5=DB8D325CB00CDF3F8D0EB0F229070BA0 – C:\Users\Victor\Local Settings\Application Data\Android\android-sdk\docs\guide\topics\ui\accessibility\services.html
[2012/07/05 11:45:57 | 000,062,034 | —- | M] () MD5=DB8D325CB00CDF3F8D0EB0F229070BA0 – C:\Users\Victor\Local Settings\Application Data\Application Data\Android\android-sdk\docs\guide\topics\ui\accessibility\services.html
[2012/07/05 11:45:57 | 000,062,034 | —- | M] () MD5=DB8D325CB00CDF3F8D0EB0F229070BA0 – C:\Users\Victor\Local Settings\Application Data\Application Data\Application Data\Android\android-sdk\docs\guide\topics\ui\accessibility\services.html
[2012/07/05 11:45:57 | 000,062,034 | —- | M] () MD5=DB8D325CB00CDF3F8D0EB0F229070BA0 – C:\Users\Victor\Local Settings\Application Data\Application Data\Application Data\Application Data\Android\android-sdk\docs\guide\topics\ui\accessibility\services.html
[2012/07/05 11:45:57 | 000,062,034 | —- | M] () MD5=DB8D325CB00CDF3F8D0EB0F229070BA0 – C:\Users\Victor\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Android\android-sdk\docs\guide\topics\ui\accessibility\services.html
[2012/07/05 11:45:57 | 000,062,034 | —- | M] () MD5=DB8D325CB00CDF3F8D0EB0F229070BA0 – C:\Users\Victor\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Android\android-sdk\docs\guide\topics\ui\accessibility\services.html
[2012/07/05 11:45:57 | 000,062,034 | —- | M] () MD5=DB8D325CB00CDF3F8D0EB0F229070BA0 – C:\Users\Victor\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Android\android-sdk\docs\guide\topics\ui\accessibility\services.html
[2012/07/05 11:45:57 | 000,062,034 | —- | M] () MD5=DB8D325CB00CDF3F8D0EB0F229070BA0 – C:\Users\Victor\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Android\android-sdk\docs\guide\topics\ui\accessibility\services.html
[2012/07/05 11:45:57 | 000,062,034 | —- | M] () MD5=DB8D325CB00CDF3F8D0EB0F229070BA0 – C:\Users\Victor\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Android\android-sdk\docs\guide\topics\ui\accessibility\services.html

< MD5 for: SERVICES.JAR >
[2011/02/18 13:45:48 | 000,142,343 | —- | M] () MD5=ADCFB617234DA35622F7DB0BD61ADAE7 – C:\Program Files\MATLAB\R2011a\java\jar\services.jar

< MD5 for: SERVICES.LNK >
[2009/07/14 12:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 12:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 12:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 12:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 12:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 12:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 12:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 12:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 12:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 12:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 12:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 12:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 12:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 12:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 12:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Documents and Settings\All Users\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 12:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Documents and Settings\All Users\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 12:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Documents and Settings\All Users\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 12:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Documents and Settings\All Users\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 12:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Documents and Settings\All Users\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 12:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 12:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 12:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 12:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 12:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 12:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 12:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 12:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 12:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 12:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 12:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 12:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 12:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 12:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 12:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 12:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 12:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\ProgramData\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 12:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\ProgramData\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 12:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\ProgramData\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 12:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\ProgramData\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 12:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\ProgramData\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 12:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\ProgramData\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 12:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 12:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\ProgramData\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 12:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 12:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 12:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 12:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 12:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 12:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 12:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 12:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 12:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 12:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 12:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 12:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 12:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 12:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 12:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Users\All Users\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 12:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Users\All Users\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 12:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Users\All Users\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 12:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Users\All Users\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 12:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Users\All Users\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 12:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Users\All Users\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 12:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 12:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Users\All Users\Start Menu\Programs\Administrative Tools\services.lnk
File not found Unable to obtain MD5 – C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
File not found Unable to obtain MD5 – C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk

< MD5 for: SERVICES.MOF >
[2009/06/11 04:44:06 | 000,002,866 | —- | M] () MD5=26A11C895A7F0B6D32105EBE127D8500 – C:\Windows\SysNative\wbem\services.mof
[2009/06/11 04:44:06 | 000,002,866 | —- | M] () MD5=26A11C895A7F0B6D32105EBE127D8500 – C:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_2b54b20ee6fa07b1\services.mof

< MD5 for: SERVICES.MSC >
[2009/07/14 10:23:30 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\Windows\SysNative\en-US\services.msc
[2009/06/11 04:38:36 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\Windows\SysNative\services.msc
[2009/07/14 10:08:50 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\Windows\SysWOW64\en-US\services.msc
[2009/06/11 05:21:09 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\Windows\SysWOW64\services.msc
[2009/07/14 10:23:30 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\Windows\winsxs\amd64_microsoft-windows-s..cessnapin.resources_31bf3856ad364e35_6.1.7600.16385_en-us_003408aa160fce5b\services.msc
[2009/06/11 04:38:36 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\Windows\winsxs\amd64_microsoft-windows-servicessnapin_31bf3856ad364e35_6.1.7600.16385_none_2b58d44b5f6beb8a\services.msc
[2009/07/14 10:08:50 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\Windows\winsxs\x86_microsoft-windows-s..cessnapin.resources_31bf3856ad364e35_6.1.7600.16385_en-us_a4156d265db25d25\services.msc
[2009/06/11 05:21:09 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\Windows\winsxs\x86_microsoft-windows-servicessnapin_31bf3856ad364e35_6.1.7600.16385_none_cf3a38c7a70e7a54\services.msc

< MD5 for: SERVICES.PMMSG >
[2011/02/02 14:27:28 | 000,001,020 | —- | M] () MD5=2999F9A278617962494A7BABF81DC519 – C:\Program Files\MATLAB\R2011a\toolbox\physmod\foundation\foundation\services.pmmsg

< MD5 for: SERVICES.PTXML >
[2009/07/14 04:16:17 | 000,001,061 | —- | M] () MD5=640D7DD61B1CFA6C96F80F68F78CDFA7 – C:\Windows\SysNative\wdi\perftrack\Services.ptxml
[2009/07/14 04:16:17 | 000,001,061 | —- | M] () MD5=640D7DD61B1CFA6C96F80F68F78CDFA7 – C:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_2b54b20ee6fa07b1\Services.ptxml

< MD5 for: WINLOGON.ADML >
[2009/07/14 10:25:22 | 000,008,013 | —- | M] () MD5=CED0EAD8D152B3D0F114698DE2316C5E – C:\Windows\PolicyDefinitions\en-US\WinLogon.adml
[2009/07/14 10:25:22 | 000,008,013 | —- | M] () MD5=CED0EAD8D152B3D0F114698DE2316C5E – C:\Windows\winsxs\amd64_microsoft-windows-winlogon-adm.resources_31bf3856ad364e35_6.1.7600.16385_en-us_f0f9032ef6930070\WinLogon.adml

< MD5 for: WINLOGON.ADMX >
[2009/06/11 05:04:41 | 000,005,237 | —- | M] () MD5=89D8F50E186A16C2CED3CF36DBBC0B2C – C:\Windows\PolicyDefinitions\WinLogon.admx
[2009/06/11 05:04:41 | 000,005,237 | —- | M] () MD5=89D8F50E186A16C2CED3CF36DBBC0B2C – C:\Windows\winsxs\amd64_microsoft-windows-winlogon-adm_31bf3856ad364e35_6.1.7600.16385_none_d7024e6992f3424d\WinLogon.admx

< MD5 for: WINLOGON.EXE >
[2010/11/20 21:25:30 | 000,390,656 | —- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 – C:\Windows\SysNative\winlogon.exe
[2010/11/20 21:25:30 | 000,390,656 | —- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 – C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636\winlogon.exe
[2009/07/14 09:39:52 | 000,389,120 | —- | M] (Microsoft Corporation) MD5=132328DF455B0028F13BF0ABEE51A63A – C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_cbb7f2bdeea2829c\winlogon.exe
[2009/10/28 15:01:57 | 000,389,632 | —- | M] (Microsoft Corporation) MD5=A93D41A4D4B0D91C072D11DD8AF266DE – C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_cc522fd507b468f8\winlogon.exe
[2013/04/04 14:50:32 | 000,218,184 | —- | M] () MD5=B4C6E3889BB310CA7E974A04EC6E46AC – C:\Program Files (x86)\Malwarebytes' Anti-Malware\Chameleon\winlogon.exe
[2009/10/28 14:24:40 | 000,389,632 | —- | M] (Microsoft Corporation) MD5=DA3E2A6FA9660CC75B471530CE88453A – C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_cbe534e7ee8042ad\winlogon.exe

< MD5 for: WINLOGON.EXE.MUI >
[2009/07/14 10:29:52 | 000,022,528 | —- | M] (Microsoft Corporation) MD5=56D03B64B8C483C1D12A8E4577B3B332 – C:\Windows\winsxs\amd64_microsoft-windows-winlogon.resources_31bf3856ad364e35_6.1.7600.16385_en-us_26ed83321dc778e1\winlogon.exe.mui
[2010/11/20 21:00:25 | 000,023,040 | —- | M] (Microsoft Corporation) Unable to obtain MD5 – C:\Windows\SysNative\en-US\winlogon.exe.mui
[2010/11/20 21:00:25 | 000,023,040 | —- | M] (Microsoft Corporation) Unable to obtain MD5 – C:\Windows\winsxs\amd64_microsoft-windows-winlogon.resources_31bf3856ad364e35_6.1.7601.17514_en-us_291e96fa1ab5fc7b\winlogon.exe.mui

< MD5 for: WINLOGON.MFL >
[2009/07/14 10:27:22 | 000,001,080 | —- | M] () MD5=2783ED50691284F7EAE6BE9729337E1A – C:\Windows\SysNative\wbem\en-US\winlogon.mfl
[2009/07/14 10:27:22 | 000,001,080 | —- | M] () MD5=2783ED50691284F7EAE6BE9729337E1A – C:\Windows\winsxs\amd64_microsoft-windows-winlogon-mof.resources_31bf3856ad364e35_6.1.7600.16385_en-us_84afd4fd38ffd276\winlogon.mfl

< MD5 for: WINLOGON.MOF >
[2009/07/14 04:30:01 | 000,003,192 | —- | M] () MD5=DF722B96F32A61783BC310FACF10240B – C:\Windows\SysNative\wbem\winlogon.mof
[2009/07/14 04:30:01 | 000,003,192 | —- | M] () MD5=DF722B96F32A61783BC310FACF10240B – C:\Windows\winsxs\amd64_microsoft-windows-winlogon-mof_31bf3856ad364e35_6.1.7600.16385_none_dc2dbb778f98e40f\winlogon.mof

< %SYSTEMDRIVE%\*.* >
[2012/11/03 09:20:37 | 000,115,207 | —- | M] () – C:\a.JPG
[2013/07/26 07:31:11 | 000,031,287 | —- | M] () – C:\AdwCleaner[S1].txt
[2013/04/17 16:35:36 | 000,009,648 | —- | M] () – C:\b.png
[2010/11/20 20:40:07 | 000,383,786 | RHS- | M] () – C:\bootmgr
[2011/06/10 06:30:57 | 000,008,192 | RHS- | M] () – C:\BOOTSECT.BAK
[2013/04/19 11:16:55 | 000,046,024 | —- | M] () – C:\circle.jpg
[2012/06/15 21:18:45 | 000,309,865 | RHS- | M] () – C:\EARZN
[2007/11/07 08:00:40 | 000,017,734 | —- | M] () – C:\eula.1028.txt
[2007/11/07 08:00:40 | 000,017,734 | —- | M] () – C:\eula.1031.txt
[2007/11/07 08:00:40 | 000,010,134 | —- | M] () – C:\eula.1033.txt
[2007/11/07 08:00:40 | 000,017,734 | —- | M] () – C:\eula.1036.txt
[2007/11/07 08:00:40 | 000,017,734 | —- | M] () – C:\eula.1040.txt
[2007/11/07 08:00:40 | 000,000,118 | —- | M] () – C:\eula.1041.txt
[2007/11/07 08:00:40 | 000,017,734 | —- | M] () – C:\eula.1042.txt
[2007/11/07 08:00:40 | 000,017,734 | —- | M] () – C:\eula.2052.txt
[2007/11/07 08:00:40 | 000,017,734 | —- | M] () – C:\eula.3082.txt
[2007/11/07 08:00:40 | 000,001,110 | —- | M] () – C:\globdata.ini
[2013/07/26 23:54:51 | 3220,525,056 | -HS- | M] () – C:\hiberfil.sys
[2007/11/07 08:44:20 | 000,855,040 | —- | M] (Microsoft Corporation) – C:\install.exe
[2007/11/07 08:00:40 | 000,000,843 | —- | M] () – C:\install.ini
[2007/11/07 08:44:20 | 000,075,280 | —- | M] (Microsoft Corporation) – C:\install.res.1028.dll
[2007/11/07 08:44:20 | 000,095,248 | —- | M] (Microsoft Corporation) – C:\install.res.1031.dll
[2007/11/07 08:44:20 | 000,090,128 | —- | M] (Microsoft Corporation) – C:\install.res.1033.dll
[2007/11/07 08:44:20 | 000,096,272 | —- | M] (Microsoft Corporation) – C:\install.res.1036.dll
[2007/11/07 08:44:20 | 000,094,224 | —- | M] (Microsoft Corporation) – C:\install.res.1040.dll
[2007/11/07 08:44:20 | 000,080,400 | —- | M] (Microsoft Corporation) – C:\install.res.1041.dll
[2007/11/07 08:44:20 | 000,078,864 | —- | M] (Microsoft Corporation) – C:\install.res.1042.dll
[2007/11/07 08:44:20 | 000,074,768 | —- | M] (Microsoft Corporation) – C:\install.res.2052.dll
[2007/11/07 08:44:20 | 000,095,248 | —- | M] (Microsoft Corporation) – C:\install.res.3082.dll
[2013/03/12 11:31:06 | 000,426,806 | —- | M] () – C:\LECTURE 5_ForwardBackwardChaining.pdf
[2012/11/24 17:57:40 | 000,000,117 | —- | M] () – C:\main.cpp
[2012/11/07 21:56:23 | 000,000,565 | —- | M] () – C:\MPUsbSIn.log
[2013/04/19 11:20:28 | 000,178,545 | —- | M] () – C:\orange.jpg
[2013/07/27 09:17:19 | 1408,249,856 | -HS- | M] () – C:\pagefile.sys
[2013/04/19 11:42:58 | 000,007,857 | —- | M] () – C:\shape.jpg
[2013/04/19 11:31:43 | 000,004,560 | —- | M] () – C:\simplecircle.gif
[2013/04/19 11:33:05 | 000,010,269 | —- | M] () – C:\simplecircle.jpg
[2013/04/22 21:34:18 | 000,004,882 | —- | M] () – C:\technophilia.jpg
[2013/04/22 21:34:23 | 000,000,535 | —- | M] () – C:\template.jpg
[2013/04/20 14:38:55 | 000,039,583 | —- | M] () – C:\test.png
[2013/04/17 17:25:09 | 000,044,045 | —- | M] () – C:\triangle.jpg
[2007/11/07 08:00:40 | 000,005,686 | —- | M] () – C:\vcredist.bmp
[2007/11/07 08:50:40 | 001,927,956 | —- | M] () – C:\VC_RED.cab
[2007/11/07 08:53:12 | 000,242,176 | —- | M] () – C:\VC_RED.MSI
[2010/03/20 07:55:52 | 002,073,703 | —- | M] () – C:\VS_EXPBSLN_x64_enu.CAB
[2010/03/20 07:58:20 | 000,551,424 | —- | M] () – C:\VS_EXPBSLN_x64_enu.MSI
[2012/06/15 21:18:47 | 000,000,020 | RHS- | M] () – C:\winx.ld
[2013/04/17 19:30:13 | 000,002,336 | —- | M] () – C:\{075F6725-B1F8-4776-BD22-932AA3A4338E}
[2012/11/19 19:39:44 | 000,002,560 | —- | M] () – C:\{098ED439-881F-4344-B12F-A404AA70A4B9}
[2013/04/02 18:47:41 | 000,002,416 | —- | M] () – C:\{14B45840-F964-4A1B-A360-933C0B858A29}
[2013/06/10 17:12:40 | 000,002,216 | —- | M] () – C:\{20595A89-861C-4615-9FAB-1B319558C1AE}
[2013/06/05 22:07:53 | 000,002,568 | —- | M] () – C:\{21F405A6-C6A2-4B1B-A5E9-652F7494888E}
[2013/04/02 18:57:20 | 000,002,312 | —- | M] () – C:\{2B303146-903B-4459-A722-62E44C255C16}
[2012/11/19 19:35:41 | 000,002,328 | —- | M] () – C:\{2BED9D74-2661-4C02-BE25-133F524111D0}
[2012/11/19 20:11:22 | 000,002,440 | —- | M] () – C:\{3098D95D-012B-42FA-B073-9DBABF051061}
[2013/04/17 20:15:00 | 000,002,288 | —- | M] () – C:\{30A5FA99-2773-4D99-8713-B86032421DD8}
[2013/04/17 19:38:01 | 000,002,560 | —- | M] () – C:\{403FCB99-151A-48E9-8AD3-3B21CE35CA6F}
[2012/11/19 20:09:42 | 000,002,888 | —- | M] () – C:\{412F09F8-F865-4263-B2FB-A980B3D7BDB4}
[2013/04/02 19:13:49 | 000,002,432 | —- | M] () – C:\{44B016CD-80DF-4A77-A90C-6BE7F9D0C762}
[2012/11/23 21:46:24 | 000,002,272 | —- | M] () – C:\{4861ACC7-C2FC-4BFE-BB10-A6C7A6ADD733}
[2013/04/07 12:28:14 | 000,002,448 | —- | M] () – C:\{4B42A85B-DD20-412B-895A-2F5245A9CAB2}
[2013/04/17 20:17:54 | 000,002,304 | —- | M] () – C:\{4DA393A3-5FF5-46D2-A9B6-ABB01B6BAB97}
[2013/06/10 17:03:58 | 000,002,448 | —- | M] () – C:\{4E41F4F9-A789-4577-9666-F709752E11E0}
[2013/04/17 19:34:09 | 000,002,232 | —- | M] () – C:\{5009C13D-9821-4253-8E19-3B50E7A7957F}
[2013/06/05 22:02:15 | 000,002,336 | —- | M] () – C:\{521B739E-2545-4E85-B580-F27B10DD9BB3}
[2013/04/07 12:26:10 | 000,002,408 | —- | M] () – C:\{55CCDE38-5A8C-498B-BF5C-F01BAF513136}
[2013/04/17 18:31:21 | 000,002,512 | —- | M] () – C:\{59148846-BA31-48FB-9EF9-338B583DC4F5}
[2013/04/17 20:21:44 | 000,002,680 | —- | M] () – C:\{5E206CC9-2ADD-40E3-9823-815AE1C6C1C1}
[2013/04/02 19:04:28 | 000,002,328 | —- | M] () – C:\{61145F49-C630-4A73-925A-FCDC3A5A65FB}
[2013/06/10 17:08:53 | 000,002,256 | —- | M] () – C:\{6CB77A0D-38F6-4C9F-B45F-A39B8F9C3A5C}
[2013/04/27 14:02:26 | 000,002,408 | —- | M] () – C:\{75353A7E-AA32-4041-B4DB-21E01CE2EDA0}
[2013/04/17 20:39:39 | 000,002,512 | —- | M] () – C:\{835860AF-3BC1-4706-A25A-0CF80D48CCFB}
[2013/04/02 18:49:56 | 000,002,408 | —- | M] () – C:\{847B3C5C-AC8D-47F6-9530-089AF9627FEA}
[2013/04/02 19:12:37 | 000,002,512 | —- | M] () – C:\{87F09CF1-55EF-4F9E-9E0F-E2DC11076445}
[2012/11/19 20:28:17 | 000,002,448 | —- | M] () – C:\{8E36E8C9-D577-4C21-88F8-B16E4A428028}
[2013/04/22 19:15:07 | 000,002,544 | —- | M] () – C:\{9D1D61A0-BE29-455D-AD72-D490C0D4620B}
[2013/04/02 19:08:35 | 000,002,792 | —- | M] () – C:\{9FB9F398-90BC-4B5F-B473-E34AD992479F}
[2013/06/10 17:11:15 | 000,002,264 | —- | M] () – C:\{C1B73ABF-AF93-44BD-A25B-CFEC9E1E142B}
[2013/04/22 19:12:50 | 000,002,536 | —- | M] () – C:\{C490E2A7-D53A-4906-A53E-92EBBC6D024B}
[2013/06/05 18:35:29 | 000,002,416 | —- | M] () – C:\{C7386C70-03EB-4C2C-BD38-C1A07ACDE487}
[2013/06/05 22:13:02 | 000,002,232 | —- | M] () – C:\{CF7A1F82-14DD-4A21-A288-69674D40B3B1}
[2013/07/22 23:14:03 | 000,002,392 | —- | M] () – C:\{D0824F08-72F6-4BCB-A445-ABFCD663E856}
[2013/04/02 18:54:37 | 000,002,264 | —- | M] () – C:\{D6659317-C501-4114-838B-77F74283AD71}
[2013/04/17 20:11:45 | 000,002,728 | —- | M] () – C:\{D78006A2-B52B-4E0F-8434-43F2A19E2E4B}
[2013/04/02 19:10:42 | 000,002,344 | —- | M] () – C:\{D9C9A099-FD17-4AD9-80E9-C70932A44639}
[2013/04/17 20:26:35 | 000,002,208 | —- | M] () – C:\{D9FF8CF6-DB49-4DA0-AABA-BB357A0F521F}
[2013/06/10 17:06:30 | 000,002,408 | —- | M] () – C:\{E35E13B3-4116-4343-90A2-3A8AF2D7DADD}
[2012/11/19 20:30:33 | 000,002,448 | —- | M] () – C:\{ED08B4CF-FD23-47B4-9D80-403C20D0F540}
[2012/11/19 20:26:12 | 000,002,896 | —- | M] () – C:\{F2520521-7A0B-4322-B730-C8B9C9BDB61C}
[2013/03/29 23:56:23 | 000,002,528 | —- | M] () – C:\{F26D4A28-A859-4F6B-9319-B29E4D558076}
[2013/06/05 18:33:18 | 000,002,416 | —- | M] () – C:\{F4D4A2BD-BFC6-4274-AC8F-B877334ABAF2}
[2012/11/19 20:31:37 | 000,002,408 | —- | M] () – C:\{FA9A97A0-AC81-491F-8C46-DBA1E70A4421}
[2013/04/17 20:24:53 | 000,002,232 | —- | M] () – C:\{FC9E1BAE-DC0E-44C0-A18F-39C59F96075D}

< %systemroot%\Fonts\*.com >
[2009/07/14 13:32:31 | 000,026,040 | —- | M] () – C:\Windows\Fonts\GlobalMonospace.CompositeFont
[2009/07/14 13:32:31 | 000,026,489 | —- | M] () – C:\Windows\Fonts\GlobalSansSerif.CompositeFont
[2009/07/14 13:32:31 | 000,029,779 | —- | M] () – C:\Windows\Fonts\GlobalSerif.CompositeFont
[2009/07/14 13:32:31 | 000,043,318 | —- | M] () – C:\Windows\Fonts\GlobalUserInterface.CompositeFont

< %systemroot%\Fonts\*.dll >

< %systemroot%\Fonts\*.ini >
[2009/06/11 04:49:50 | 000,000,065 | —- | M] () – C:\Windows\Fonts\desktop.ini

< %systemroot%\Fonts\*.ini2 >

< %systemroot%\Fonts\*.exe >

< %systemroot%\system32\spool\prtprocs\w32x86\*.* >

< %systemroot%\REPAIR\*.bak1 >

< %systemroot%\REPAIR\*.ini >

< %systemroot%\system32\*.jpg >

< %systemroot%\*.jpg >

< %systemroot%\*.png >

< %systemroot%\*.scr >

< %systemroot%\*._sy >

< %APPDATA%\Adobe\Update\*.* >

< %ALLUSERSPROFILE%\Favorites\*.* >

< %APPDATA%\Microsoft\*.* >

< %PROGRAMFILES%\*.* >
[2011/06/30 19:24:04 | 000,000,090 | —- | M] () – C:\Program Files (x86)\config.cfg
[2009/07/14 12:54:24 | 000,000,174 | -HS- | M] () – C:\Program Files (x86)\desktop.ini
[2011/12/22 22:11:52 | 030,773,082 | —- | M] () – C:\Program Files (x86)\Garena Plus.rar
[2011/06/30 21:32:10 | 000,002,700 | —- | M] () – C:\Program Files (x86)\juzdotabnet.reg
[2011/07/03 01:44:04 | 006,452,224 | —- | M] () – C:\Program Files (x86)\JuzLoader GUI.exe
[2011/07/01 02:10:48 | 000,140,800 | —- | M] () – C:\Program Files (x86)\juzloader.exe
[2011/07/03 01:37:08 | 000,000,021 | —- | M] () – C:\Program Files (x86)\local_version.txt
[2011/06/30 04:22:56 | 000,032,038 | —- | M] () – C:\Program Files (x86)\logo.ico
[2011/03/02 21:37:18 | 000,325,968 | —- | M] () – C:\Program Files (x86)\lua5.1.dll
[2011/03/02 21:37:16 | 000,011,264 | —- | M] () – C:\Program Files (x86)\lua51.dll
[2010/04/05 10:58:38 | 000,035,564 | —- | M] () – C:\Program Files (x86)\started.wav
[2011/10/14 12:04:44 | 000,003,455 | —- | M] () – C:\Program Files (x86)\Uninstall.ini
[2011/04/26 21:13:58 | 005,073,240 | —- | M] (Microsoft Corporation) – C:\Program Files (x86)\vcredist_x86.exe
[2011/03/17 02:21:22 | 000,068,608 | —- | M] ( http://w3l.info.tm) – C:\Program Files (x86)\w3lh.dll
Post #8
< %APPDATA%\Update\*.* >

< %systemroot%\*. /mp /s >

< dir "%systemdrive%\*" /S /A:L /C >
Volume in drive C has no label.
Volume Serial Number is ACBB-0EC2
Directory of C:\
14/07/2009 01:08 PM Documents and Settings [C:\Users]
0 File(s) 0 bytes
Directory of C:\Documents and Settings
14/07/2009 01:08 PM All Users [C:\ProgramData]
14/07/2009 01:08 PM Default User [C:\Users\Default]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\All Users
14/07/2009 01:08 PM Application Data [C:\ProgramData]
14/07/2009 01:08 PM Desktop [C:\Users\Public\Desktop]
14/07/2009 01:08 PM Documents [C:\Users\Public\Documents]
14/07/2009 01:08 PM Favorites [C:\Users\Public\Favorites]
14/07/2009 01:08 PM Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
14/07/2009 01:08 PM Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\All Users\Application Data
14/07/2009 01:08 PM Application Data [C:\ProgramData]
14/07/2009 01:08 PM Desktop [C:\Users\Public\Desktop]
14/07/2009 01:08 PM Documents [C:\Users\Public\Documents]
14/07/2009 01:08 PM Favorites [C:\Users\Public\Favorites]
14/07/2009 01:08 PM Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
14/07/2009 01:08 PM Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\All Users\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\ProgramData]
14/07/2009 01:08 PM Desktop [C:\Users\Public\Desktop]
14/07/2009 01:08 PM Documents [C:\Users\Public\Documents]
14/07/2009 01:08 PM Favorites [C:\Users\Public\Favorites]
14/07/2009 01:08 PM Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
14/07/2009 01:08 PM Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\All Users\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\ProgramData]
14/07/2009 01:08 PM Desktop [C:\Users\Public\Desktop]
14/07/2009 01:08 PM Documents [C:\Users\Public\Documents]
14/07/2009 01:08 PM Favorites [C:\Users\Public\Favorites]
14/07/2009 01:08 PM Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
14/07/2009 01:08 PM Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\ProgramData]
14/07/2009 01:08 PM Desktop [C:\Users\Public\Desktop]
14/07/2009 01:08 PM Documents [C:\Users\Public\Documents]
14/07/2009 01:08 PM Favorites [C:\Users\Public\Favorites]
14/07/2009 01:08 PM Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
14/07/2009 01:08 PM Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\ProgramData]
14/07/2009 01:08 PM Desktop [C:\Users\Public\Desktop]
14/07/2009 01:08 PM Documents [C:\Users\Public\Documents]
14/07/2009 01:08 PM Favorites [C:\Users\Public\Favorites]
14/07/2009 01:08 PM Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
14/07/2009 01:08 PM Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\ProgramData]
14/07/2009 01:08 PM Desktop [C:\Users\Public\Desktop]
14/07/2009 01:08 PM Documents [C:\Users\Public\Documents]
14/07/2009 01:08 PM Favorites [C:\Users\Public\Favorites]
14/07/2009 01:08 PM Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
14/07/2009 01:08 PM Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\ProgramData]
14/07/2009 01:08 PM Desktop [C:\Users\Public\Desktop]
14/07/2009 01:08 PM Documents [C:\Users\Public\Documents]
14/07/2009 01:08 PM Favorites [C:\Users\Public\Favorites]
14/07/2009 01:08 PM Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
14/07/2009 01:08 PM Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\ProgramData]
14/07/2009 01:08 PM Desktop [C:\Users\Public\Desktop]
14/07/2009 01:08 PM Documents [C:\Users\Public\Documents]
14/07/2009 01:08 PM Favorites [C:\Users\Public\Favorites]
14/07/2009 01:08 PM Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
14/07/2009 01:08 PM Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\ProgramData]
14/07/2009 01:08 PM Desktop [C:\Users\Public\Desktop]
14/07/2009 01:08 PM Documents [C:\Users\Public\Documents]
14/07/2009 01:08 PM Favorites [C:\Users\Public\Favorites]
14/07/2009 01:08 PM Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
14/07/2009 01:08 PM Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\ProgramData]
14/07/2009 01:08 PM Desktop [C:\Users\Public\Desktop]
14/07/2009 01:08 PM Documents [C:\Users\Public\Documents]
14/07/2009 01:08 PM Favorites [C:\Users\Public\Favorites]
14/07/2009 01:08 PM Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
14/07/2009 01:08 PM Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\ProgramData]
14/07/2009 01:08 PM Desktop [C:\Users\Public\Desktop]
14/07/2009 01:08 PM Documents [C:\Users\Public\Documents]
14/07/2009 01:08 PM Favorites [C:\Users\Public\Favorites]
14/07/2009 01:08 PM Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
14/07/2009 01:08 PM Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\ProgramData]
14/07/2009 01:08 PM Desktop [C:\Users\Public\Desktop]
14/07/2009 01:08 PM Documents [C:\Users\Public\Documents]
14/07/2009 01:08 PM Favorites [C:\Users\Public\Favorites]
14/07/2009 01:08 PM Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
14/07/2009 01:08 PM Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
14/07/2009 01:08 PM My Music [C:\Users\Public\Music]
14/07/2009 01:08 PM My Pictures [C:\Users\Public\Pictures]
14/07/2009 01:08 PM My Videos [C:\Users\Public\Videos]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
14/07/2009 01:08 PM My Music [C:\Users\Public\Music]
14/07/2009 01:08 PM My Pictures [C:\Users\Public\Pictures]
14/07/2009 01:08 PM My Videos [C:\Users\Public\Videos]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
14/07/2009 01:08 PM My Music [C:\Users\Public\Music]
14/07/2009 01:08 PM My Pictures [C:\Users\Public\Pictures]
14/07/2009 01:08 PM My Videos [C:\Users\Public\Videos]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
14/07/2009 01:08 PM My Music [C:\Users\Public\Music]
14/07/2009 01:08 PM My Pictures [C:\Users\Public\Pictures]
14/07/2009 01:08 PM My Videos [C:\Users\Public\Videos]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
14/07/2009 01:08 PM My Music [C:\Users\Public\Music]
14/07/2009 01:08 PM My Pictures [C:\Users\Public\Pictures]
14/07/2009 01:08 PM My Videos [C:\Users\Public\Videos]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
14/07/2009 01:08 PM My Music [C:\Users\Public\Music]
14/07/2009 01:08 PM My Pictures [C:\Users\Public\Pictures]
14/07/2009 01:08 PM My Videos [C:\Users\Public\Videos]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
14/07/2009 01:08 PM My Music [C:\Users\Public\Music]
14/07/2009 01:08 PM My Pictures [C:\Users\Public\Pictures]
14/07/2009 01:08 PM My Videos [C:\Users\Public\Videos]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Documents
14/07/2009 01:08 PM My Music [C:\Users\Public\Music]
14/07/2009 01:08 PM My Pictures [C:\Users\Public\Pictures]
14/07/2009 01:08 PM My Videos [C:\Users\Public\Videos]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Documents
14/07/2009 01:08 PM My Music [C:\Users\Public\Music]
14/07/2009 01:08 PM My Pictures [C:\Users\Public\Pictures]
14/07/2009 01:08 PM My Videos [C:\Users\Public\Videos]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\All Users\Application Data\Application Data\Documents
14/07/2009 01:08 PM My Music [C:\Users\Public\Music]
14/07/2009 01:08 PM My Pictures [C:\Users\Public\Pictures]
14/07/2009 01:08 PM My Videos [C:\Users\Public\Videos]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\All Users\Application Data\Documents
14/07/2009 01:08 PM My Music [C:\Users\Public\Music]
14/07/2009 01:08 PM My Pictures [C:\Users\Public\Pictures]
14/07/2009 01:08 PM My Videos [C:\Users\Public\Videos]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\All Users\Documents
14/07/2009 01:08 PM My Music [C:\Users\Public\Music]
14/07/2009 01:08 PM My Pictures [C:\Users\Public\Pictures]
14/07/2009 01:08 PM My Videos [C:\Users\Public\Videos]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Default
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Roaming]
14/07/2009 01:08 PM Cookies [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Cookies]
14/07/2009 01:08 PM Local Settings [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM My Documents [C:\Users\Default\Documents]
14/07/2009 01:08 PM NetHood [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Network Shortcuts]
14/07/2009 01:08 PM PrintHood [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Printer Shortcuts]
14/07/2009 01:08 PM Recent [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Recent]
14/07/2009 01:08 PM SendTo [C:\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo]
14/07/2009 01:08 PM Start Menu [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu]
14/07/2009 01:08 PM Templates [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Default\AppData\Local
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Default\AppData\Local\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Default\AppData\Local\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Default\AppData\Local\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Default\AppData\Local\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Default\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Default\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Default\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Default\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Default\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Default\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Default\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Default\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [.]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [.]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Default\Documents
14/07/2009 01:08 PM My Music [C:\Users\Default\Music]
14/07/2009 01:08 PM My Pictures [C:\Users\Default\Pictures]
14/07/2009 01:08 PM My Videos [C:\Users\Default\Videos]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Default\Local Settings
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Default\Local Settings\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Default\Local Settings\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Default\Local Settings\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Default\Local Settings\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Default\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Default\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Default\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Default\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Default\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Default\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Default\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [.]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Default\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [.]
14/07/2009 01:08 PM History [.]
14/07/2009 01:08 PM Temporary Internet Files [.]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Default\My Documents
14/07/2009 01:08 PM My Music [C:\Users\Default\Music]
14/07/2009 01:08 PM My Pictures [C:\Users\Default\Pictures]
14/07/2009 01:08 PM My Videos [C:\Users\Default\Videos]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Default User
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Roaming]
14/07/2009 01:08 PM Cookies [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Cookies]
14/07/2009 01:08 PM Local Settings [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM My Documents [C:\Users\Default\Documents]
14/07/2009 01:08 PM NetHood [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Network Shortcuts]
14/07/2009 01:08 PM PrintHood [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Printer Shortcuts]
14/07/2009 01:08 PM Recent [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Recent]
14/07/2009 01:08 PM SendTo [C:\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo]
14/07/2009 01:08 PM Start Menu [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu]
14/07/2009 01:08 PM Templates [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Default User\AppData\Local
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Default User\AppData\Local\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Default User\AppData\Local\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Default User\AppData\Local\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Default User\AppData\Local\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Default User\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Default User\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Default User\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Default User\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Default User\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Default User\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Default User\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [.]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Default User\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [.]
14/07/2009 01:08 PM History [.]
14/07/2009 01:08 PM Temporary Internet Files [.]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Default User\Documents
14/07/2009 01:08 PM My Music [C:\Users\Default\Music]
14/07/2009 01:08 PM My Pictures [C:\Users\Default\Pictures]
14/07/2009 01:08 PM My Videos [C:\Users\Default\Videos]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Default User\Local Settings
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Default User\Local Settings\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Default User\Local Settings\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Default User\Local Settings\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Default User\Local Settings\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Default User\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Default User\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Default User\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Default User\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Default User\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Default User\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Default User\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [.]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Default User\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [.]
14/07/2009 01:08 PM History [.]
14/07/2009 01:08 PM Temporary Internet Files [.]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Default User\My Documents
14/07/2009 01:08 PM My Music [C:\Users\Default\Music]
14/07/2009 01:08 PM My Pictures [C:\Users\Default\Pictures]
14/07/2009 01:08 PM My Videos [C:\Users\Default\Videos]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Public\Documents
14/07/2009 01:08 PM My Music [C:\Users\Public\Music]
14/07/2009 01:08 PM My Pictures [C:\Users\Public\Pictures]
14/07/2009 01:08 PM My Videos [C:\Users\Public\Videos]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Victor
09/06/2011 02:47 PM Application Data [C:\Users\Victor\AppData\Roaming]
09/06/2011 02:47 PM Cookies [C:\Users\Victor\AppData\Roaming\Microsoft\Windows\Cookies]
09/06/2011 02:47 PM Local Settings [C:\Users\Victor\AppData\Local]
09/06/2011 02:47 PM My Documents [C:\Users\Victor\Documents]
09/06/2011 02:47 PM NetHood [C:\Users\Victor\AppData\Roaming\Microsoft\Windows\Network Shortcuts]
09/06/2011 02:47 PM PrintHood [C:\Users\Victor\AppData\Roaming\Microsoft\Windows\Printer Shortcuts]
09/06/2011 02:47 PM Recent [C:\Users\Victor\AppData\Roaming\Microsoft\Windows\Recent]
09/06/2011 02:47 PM SendTo [C:\Users\Victor\AppData\Roaming\Microsoft\Windows\SendTo]
09/06/2011 02:47 PM Start Menu [C:\Users\Victor\AppData\Roaming\Microsoft\Windows\Start Menu]
09/06/2011 02:47 PM Templates [C:\Users\Victor\AppData\Roaming\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Victor\AppData\Local
09/06/2011 02:47 PM Application Data [C:\Users\Victor\AppData\Local]
09/06/2011 02:47 PM History [C:\Users\Victor\AppData\Local\Microsoft\Windows\History]
09/06/2011 02:47 PM Temporary Internet Files [C:\Users\Victor\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Victor\AppData\Local\Application Data
09/06/2011 02:47 PM Application Data [C:\Users\Victor\AppData\Local]
09/06/2011 02:47 PM History [C:\Users\Victor\AppData\Local\Microsoft\Windows\History]
09/06/2011 02:47 PM Temporary Internet Files [C:\Users\Victor\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Victor\AppData\Local\Application Data\Application Data
09/06/2011 02:47 PM Application Data [C:\Users\Victor\AppData\Local]
09/06/2011 02:47 PM History [C:\Users\Victor\AppData\Local\Microsoft\Windows\History]
09/06/2011 02:47 PM Temporary Internet Files [C:\Users\Victor\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Victor\AppData\Local\Application Data\Application Data\Application Data
09/06/2011 02:47 PM Application Data [C:\Users\Victor\AppData\Local]
09/06/2011 02:47 PM History [C:\Users\Victor\AppData\Local\Microsoft\Windows\History]
09/06/2011 02:47 PM Temporary Internet Files [C:\Users\Victor\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Victor\AppData\Local\Application Data\Application Data\Application Data\Application Data
09/06/2011 02:47 PM Application Data [C:\Users\Victor\AppData\Local]
09/06/2011 02:47 PM History [C:\Users\Victor\AppData\Local\Microsoft\Windows\History]
09/06/2011 02:47 PM Temporary Internet Files [C:\Users\Victor\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Victor\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data
09/06/2011 02:47 PM Application Data [C:\Users\Victor\AppData\Local]
09/06/2011 02:47 PM History [C:\Users\Victor\AppData\Local\Microsoft\Windows\History]
09/06/2011 02:47 PM Temporary Internet Files [C:\Users\Victor\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Victor\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
09/06/2011 02:47 PM Application Data [C:\Users\Victor\AppData\Local]
09/06/2011 02:47 PM History [C:\Users\Victor\AppData\Local\Microsoft\Windows\History]
09/06/2011 02:47 PM Temporary Internet Files [C:\Users\Victor\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Victor\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
09/06/2011 02:47 PM Application Data [C:\Users\Victor\AppData\Local]
09/06/2011 02:47 PM History [C:\Users\Victor\AppData\Local\Microsoft\Windows\History]
09/06/2011 02:47 PM Temporary Internet Files [C:\Users\Victor\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Victor\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
09/06/2011 02:47 PM Application Data [C:\Users\Victor\AppData\Local]
09/06/2011 02:47 PM History [C:\Users\Victor\AppData\Local\Microsoft\Windows\History]
09/06/2011 02:47 PM Temporary Internet Files [C:\Users\Victor\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Victor\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
09/06/2011 02:47 PM Application Data [C:\Users\Victor\AppData\Local]
09/06/2011 02:47 PM History [C:\Users\Victor\AppData\Local\Microsoft\Windows\History]
09/06/2011 02:47 PM Temporary Internet Files [C:\Users\Victor\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Victor\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
09/06/2011 02:47 PM Application Data [C:\Users\Victor\AppData\Local]
09/06/2011 02:47 PM History [C:\Users\Victor\AppData\Local\Microsoft\Windows\History]
09/06/2011 02:47 PM Temporary Internet Files [C:\Users\Victor\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Victor\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
09/06/2011 02:47 PM Application Data [C:\Users\Victor\AppData\Local]
09/06/2011 02:47 PM History [C:\Users\Victor\AppData\Local\Microsoft\Windows\History]
09/06/2011 02:47 PM Temporary Internet Files [C:\Users\Victor\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Victor\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
09/06/2011 02:47 PM Application Data [.]
09/06/2011 02:47 PM History [C:\Users\Victor\AppData\Local\Microsoft\Windows\History]
09/06/2011 02:47 PM Temporary Internet Files [.]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Victor\Documents
09/06/2011 02:47 PM My Music [C:\Users\Victor\Music]
09/06/2011 02:47 PM My Pictures [C:\Users\Victor\Pictures]
09/06/2011 02:47 PM My Videos [C:\Users\Victor\Videos]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Victor\Local Settings
09/06/2011 02:47 PM Application Data [C:\Users\Victor\AppData\Local]
09/06/2011 02:47 PM History [C:\Users\Victor\AppData\Local\Microsoft\Windows\History]
09/06/2011 02:47 PM Temporary Internet Files [C:\Users\Victor\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Victor\Local Settings\Application Data
09/06/2011 02:47 PM Application Data [C:\Users\Victor\AppData\Local]
09/06/2011 02:47 PM History [C:\Users\Victor\AppData\Local\Microsoft\Windows\History]
09/06/2011 02:47 PM Temporary Internet Files [C:\Users\Victor\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Victor\Local Settings\Application Data\Application Data
09/06/2011 02:47 PM Application Data [C:\Users\Victor\AppData\Local]
09/06/2011 02:47 PM History [C:\Users\Victor\AppData\Local\Microsoft\Windows\History]
09/06/2011 02:47 PM Temporary Internet Files [C:\Users\Victor\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Victor\Local Settings\Application Data\Application Data\Application Data
09/06/2011 02:47 PM Application Data [C:\Users\Victor\AppData\Local]
09/06/2011 02:47 PM History [C:\Users\Victor\AppData\Local\Microsoft\Windows\History]
09/06/2011 02:47 PM Temporary Internet Files [C:\Users\Victor\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Victor\Local Settings\Application Data\Application Data\Application Data\Application Data
09/06/2011 02:47 PM Application Data [C:\Users\Victor\AppData\Local]
09/06/2011 02:47 PM History [C:\Users\Victor\AppData\Local\Microsoft\Windows\History]
09/06/2011 02:47 PM Temporary Internet Files [C:\Users\Victor\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Victor\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data
09/06/2011 02:47 PM Application Data [C:\Users\Victor\AppData\Local]
09/06/2011 02:47 PM History [C:\Users\Victor\AppData\Local\Microsoft\Windows\History]
09/06/2011 02:47 PM Temporary Internet Files [C:\Users\Victor\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Victor\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
09/06/2011 02:47 PM Application Data [C:\Users\Victor\AppData\Local]
09/06/2011 02:47 PM History [C:\Users\Victor\AppData\Local\Microsoft\Windows\History]
09/06/2011 02:47 PM Temporary Internet Files [C:\Users\Victor\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Victor\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
09/06/2011 02:47 PM Application Data [C:\Users\Victor\AppData\Local]
09/06/2011 02:47 PM History [C:\Users\Victor\AppData\Local\Microsoft\Windows\History]
09/06/2011 02:47 PM Temporary Internet Files [C:\Users\Victor\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Victor\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
09/06/2011 02:47 PM Application Data [C:\Users\Victor\AppData\Local]
09/06/2011 02:47 PM History [C:\Users\Victor\AppData\Local\Microsoft\Windows\History]
09/06/2011 02:47 PM Temporary Internet Files [C:\Users\Victor\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Victor\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
09/06/2011 02:47 PM Application Data [C:\Users\Victor\AppData\Local]
09/06/2011 02:47 PM History [C:\Users\Victor\AppData\Local\Microsoft\Windows\History]
09/06/2011 02:47 PM Temporary Internet Files [C:\Users\Victor\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Victor\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
09/06/2011 02:47 PM Application Data [C:\Users\Victor\AppData\Local]
09/06/2011 02:47 PM History [C:\Users\Victor\AppData\Local\Microsoft\Windows\History]
09/06/2011 02:47 PM Temporary Internet Files [C:\Users\Victor\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Victor\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
09/06/2011 02:47 PM Application Data [C:\Users\Victor\AppData\Local]
09/06/2011 02:47 PM History [C:\Users\Victor\AppData\Local\Microsoft\Windows\History]
09/06/2011 02:47 PM Temporary Internet Files [C:\Users\Victor\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Victor\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
09/06/2011 02:47 PM Application Data [.]
09/06/2011 02:47 PM History [C:\Users\Victor\AppData\Local\Microsoft\Windows\History]
09/06/2011 02:47 PM Temporary Internet Files [.]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Victor\My Documents
09/06/2011 02:47 PM My Music [C:\Users\Victor\Music]
09/06/2011 02:47 PM My Pictures [C:\Users\Victor\Pictures]
09/06/2011 02:47 PM My Videos [C:\Users\Victor\Videos]
0 File(s) 0 bytes
Directory of C:\ProgramData
14/07/2009 01:08 PM Application Data [C:\ProgramData]
14/07/2009 01:08 PM Desktop [C:\Users\Public\Desktop]
14/07/2009 01:08 PM Documents [C:\Users\Public\Documents]
14/07/2009 01:08 PM Favorites [C:\Users\Public\Favorites]
14/07/2009 01:08 PM Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
14/07/2009 01:08 PM Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\ProgramData\Application Data
14/07/2009 01:08 PM Application Data [C:\ProgramData]
14/07/2009 01:08 PM Desktop [C:\Users\Public\Desktop]
14/07/2009 01:08 PM Documents [C:\Users\Public\Documents]
14/07/2009 01:08 PM Favorites [C:\Users\Public\Favorites]
14/07/2009 01:08 PM Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
14/07/2009 01:08 PM Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\ProgramData\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\ProgramData]
14/07/2009 01:08 PM Desktop [C:\Users\Public\Desktop]
14/07/2009 01:08 PM Documents [C:\Users\Public\Documents]
14/07/2009 01:08 PM Favorites [C:\Users\Public\Favorites]
14/07/2009 01:08 PM Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
14/07/2009 01:08 PM Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\ProgramData\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\ProgramData]
14/07/2009 01:08 PM Desktop [C:\Users\Public\Desktop]
14/07/2009 01:08 PM Documents [C:\Users\Public\Documents]
14/07/2009 01:08 PM Favorites [C:\Users\Public\Favorites]
14/07/2009 01:08 PM Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
14/07/2009 01:08 PM Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\ProgramData\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\ProgramData]
14/07/2009 01:08 PM Desktop [C:\Users\Public\Desktop]
14/07/2009 01:08 PM Documents [C:\Users\Public\Documents]
14/07/2009 01:08 PM Favorites [C:\Users\Public\Favorites]
14/07/2009 01:08 PM Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
14/07/2009 01:08 PM Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\ProgramData]
14/07/2009 01:08 PM Desktop [C:\Users\Public\Desktop]
14/07/2009 01:08 PM Documents [C:\Users\Public\Documents]
14/07/2009 01:08 PM Favorites [C:\Users\Public\Favorites]
14/07/2009 01:08 PM Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
14/07/2009 01:08 PM Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\ProgramData]
14/07/2009 01:08 PM Desktop [C:\Users\Public\Desktop]
14/07/2009 01:08 PM Documents [C:\Users\Public\Documents]
14/07/2009 01:08 PM Favorites [C:\Users\Public\Favorites]
14/07/2009 01:08 PM Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
14/07/2009 01:08 PM Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\ProgramData]
14/07/2009 01:08 PM Desktop [C:\Users\Public\Desktop]
14/07/2009 01:08 PM Documents [C:\Users\Public\Documents]
14/07/2009 01:08 PM Favorites [C:\Users\Public\Favorites]
14/07/2009 01:08 PM Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
14/07/2009 01:08 PM Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\ProgramData]
14/07/2009 01:08 PM Desktop [C:\Users\Public\Desktop]
14/07/2009 01:08 PM Documents [C:\Users\Public\Documents]
14/07/2009 01:08 PM Favorites [C:\Users\Public\Favorites]
14/07/2009 01:08 PM Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
14/07/2009 01:08 PM Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\ProgramData]
14/07/2009 01:08 PM Desktop [C:\Users\Public\Desktop]
14/07/2009 01:08 PM Documents [C:\Users\Public\Documents]
14/07/2009 01:08 PM Favorites [C:\Users\Public\Favorites]
14/07/2009 01:08 PM Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
14/07/2009 01:08 PM Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\ProgramData]
14/07/2009 01:08 PM Desktop [C:\Users\Public\Desktop]
14/07/2009 01:08 PM Documents [C:\Users\Public\Documents]
14/07/2009 01:08 PM Favorites [C:\Users\Public\Favorites]
14/07/2009 01:08 PM Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
14/07/2009 01:08 PM Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\ProgramData]
14/07/2009 01:08 PM Desktop [C:\Users\Public\Desktop]
14/07/2009 01:08 PM Documents [C:\Users\Public\Documents]
14/07/2009 01:08 PM Favorites [C:\Users\Public\Favorites]
14/07/2009 01:08 PM Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
14/07/2009 01:08 PM Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\ProgramData]
14/07/2009 01:08 PM Desktop [C:\Users\Public\Desktop]
14/07/2009 01:08 PM Documents [C:\Users\Public\Documents]
14/07/2009 01:08 PM Favorites [C:\Users\Public\Favorites]
14/07/2009 01:08 PM Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
14/07/2009 01:08 PM Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\ProgramData]
14/07/2009 01:08 PM Desktop [C:\Users\Public\Desktop]
14/07/2009 01:08 PM Documents [C:\Users\Public\Documents]
14/07/2009 01:08 PM Favorites [C:\Users\Public\Favorites]
14/07/2009 01:08 PM Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
14/07/2009 01:08 PM Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
14/07/2009 01:08 PM My Music [C:\Users\Public\Music]
14/07/2009 01:08 PM My Pictures [C:\Users\Public\Pictures]
14/07/2009 01:08 PM My Videos [C:\Users\Public\Videos]
0 File(s) 0 bytes
Directory of C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
14/07/2009 01:08 PM My Music [C:\Users\Public\Music]
14/07/2009 01:08 PM My Pictures [C:\Users\Public\Pictures]
14/07/2009 01:08 PM My Videos [C:\Users\Public\Videos]
0 File(s) 0 bytes
Directory of C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
14/07/2009 01:08 PM My Music [C:\Users\Public\Music]
14/07/2009 01:08 PM My Pictures [C:\Users\Public\Pictures]
14/07/2009 01:08 PM My Videos [C:\Users\Public\Videos]
0 File(s) 0 bytes
Directory of C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
14/07/2009 01:08 PM My Music [C:\Users\Public\Music]
14/07/2009 01:08 PM My Pictures [C:\Users\Public\Pictures]
14/07/2009 01:08 PM My Videos [C:\Users\Public\Videos]
0 File(s) 0 bytes
Directory of C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
14/07/2009 01:08 PM My Music [C:\Users\Public\Music]
14/07/2009 01:08 PM My Pictures [C:\Users\Public\Pictures]
14/07/2009 01:08 PM My Videos [C:\Users\Public\Videos]
0 File(s) 0 bytes
Directory of C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
14/07/2009 01:08 PM My Music [C:\Users\Public\Music]
14/07/2009 01:08 PM My Pictures [C:\Users\Public\Pictures]
14/07/2009 01:08 PM My Videos [C:\Users\Public\Videos]
0 File(s) 0 bytes
Directory of C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
14/07/2009 01:08 PM My Music [C:\Users\Public\Music]
14/07/2009 01:08 PM My Pictures [C:\Users\Public\Pictures]
14/07/2009 01:08 PM My Videos [C:\Users\Public\Videos]
0 File(s) 0 bytes
Directory of C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
14/07/2009 01:08 PM My Music [C:\Users\Public\Music]
14/07/2009 01:08 PM My Pictures [C:\Users\Public\Pictures]
14/07/2009 01:08 PM My Videos [C:\Users\Public\Videos]
0 File(s) 0 bytes
Directory of C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Documents
14/07/2009 01:08 PM My Music [C:\Users\Public\Music]
14/07/2009 01:08 PM My Pictures [C:\Users\Public\Pictures]
14/07/2009 01:08 PM My Videos [C:\Users\Public\Videos]
0 File(s) 0 bytes
Directory of C:\ProgramData\Application Data\Application Data\Application Data\Documents
14/07/2009 01:08 PM My Music [C:\Users\Public\Music]
14/07/2009 01:08 PM My Pictures [C:\Users\Public\Pictures]
14/07/2009 01:08 PM My Videos [C:\Users\Public\Videos]
0 File(s) 0 bytes
Directory of C:\ProgramData\Application Data\Application Data\Documents
14/07/2009 01:08 PM My Music [C:\Users\Public\Music]
14/07/2009 01:08 PM My Pictures [C:\Users\Public\Pictures]
14/07/2009 01:08 PM My Videos [C:\Users\Public\Videos]
0 File(s) 0 bytes
Directory of C:\ProgramData\Application Data\Documents
14/07/2009 01:08 PM My Music [C:\Users\Public\Music]
14/07/2009 01:08 PM My Pictures [C:\Users\Public\Pictures]
14/07/2009 01:08 PM My Videos [C:\Users\Public\Videos]
0 File(s) 0 bytes
Directory of C:\ProgramData\Documents
14/07/2009 01:08 PM My Music [C:\Users\Public\Music]
14/07/2009 01:08 PM My Pictures [C:\Users\Public\Pictures]
14/07/2009 01:08 PM My Videos [C:\Users\Public\Videos]
0 File(s) 0 bytes
Directory of C:\Users
14/07/2009 01:08 PM All Users [C:\ProgramData]
14/07/2009 01:08 PM Default User [C:\Users\Default]
0 File(s) 0 bytes
Directory of C:\Users\All Users
14/07/2009 01:08 PM Application Data [C:\ProgramData]
14/07/2009 01:08 PM Desktop [C:\Users\Public\Desktop]
14/07/2009 01:08 PM Documents [C:\Users\Public\Documents]
14/07/2009 01:08 PM Favorites [C:\Users\Public\Favorites]
14/07/2009 01:08 PM Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
14/07/2009 01:08 PM Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Users\All Users\Application Data
14/07/2009 01:08 PM Application Data [C:\ProgramData]
14/07/2009 01:08 PM Desktop [C:\Users\Public\Desktop]
14/07/2009 01:08 PM Documents [C:\Users\Public\Documents]
14/07/2009 01:08 PM Favorites [C:\Users\Public\Favorites]
14/07/2009 01:08 PM Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
14/07/2009 01:08 PM Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Users\All Users\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\ProgramData]
14/07/2009 01:08 PM Desktop [C:\Users\Public\Desktop]
14/07/2009 01:08 PM Documents [C:\Users\Public\Documents]
14/07/2009 01:08 PM Favorites [C:\Users\Public\Favorites]
14/07/2009 01:08 PM Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
14/07/2009 01:08 PM Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Users\All Users\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\ProgramData]
14/07/2009 01:08 PM Desktop [C:\Users\Public\Desktop]
14/07/2009 01:08 PM Documents [C:\Users\Public\Documents]
14/07/2009 01:08 PM Favorites [C:\Users\Public\Favorites]
14/07/2009 01:08 PM Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
14/07/2009 01:08 PM Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Users\All Users\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\ProgramData]
14/07/2009 01:08 PM Desktop [C:\Users\Public\Desktop]
14/07/2009 01:08 PM Documents [C:\Users\Public\Documents]
14/07/2009 01:08 PM Favorites [C:\Users\Public\Favorites]
14/07/2009 01:08 PM Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
14/07/2009 01:08 PM Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\ProgramData]
14/07/2009 01:08 PM Desktop [C:\Users\Public\Desktop]
14/07/2009 01:08 PM Documents [C:\Users\Public\Documents]
14/07/2009 01:08 PM Favorites [C:\Users\Public\Favorites]
14/07/2009 01:08 PM Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
14/07/2009 01:08 PM Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\ProgramData]
14/07/2009 01:08 PM Desktop [C:\Users\Public\Desktop]
14/07/2009 01:08 PM Documents [C:\Users\Public\Documents]
14/07/2009 01:08 PM Favorites [C:\Users\Public\Favorites]
14/07/2009 01:08 PM Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
14/07/2009 01:08 PM Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\ProgramData]
14/07/2009 01:08 PM Desktop [C:\Users\Public\Desktop]
14/07/2009 01:08 PM Documents [C:\Users\Public\Documents]
14/07/2009 01:08 PM Favorites [C:\Users\Public\Favorites]
14/07/2009 01:08 PM Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
14/07/2009 01:08 PM Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\ProgramData]
14/07/2009 01:08 PM Desktop [C:\Users\Public\Desktop]
14/07/2009 01:08 PM Documents [C:\Users\Public\Documents]
14/07/2009 01:08 PM Favorites [C:\Users\Public\Favorites]
14/07/2009 01:08 PM Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
14/07/2009 01:08 PM Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\ProgramData]
14/07/2009 01:08 PM Desktop [C:\Users\Public\Desktop]
14/07/2009 01:08 PM Documents [C:\Users\Public\Documents]
14/07/2009 01:08 PM Favorites [C:\Users\Public\Favorites]
14/07/2009 01:08 PM Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
14/07/2009 01:08 PM Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\ProgramData]
14/07/2009 01:08 PM Desktop [C:\Users\Public\Desktop]
14/07/2009 01:08 PM Documents [C:\Users\Public\Documents]
14/07/2009 01:08 PM Favorites [C:\Users\Public\Favorites]
14/07/2009 01:08 PM Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
14/07/2009 01:08 PM Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\ProgramData]
14/07/2009 01:08 PM Desktop [C:\Users\Public\Desktop]
14/07/2009 01:08 PM Documents [C:\Users\Public\Documents]
14/07/2009 01:08 PM Favorites [C:\Users\Public\Favorites]
14/07/2009 01:08 PM Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
14/07/2009 01:08 PM Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\ProgramData]
14/07/2009 01:08 PM Desktop [C:\Users\Public\Desktop]
14/07/2009 01:08 PM Documents [C:\Users\Public\Documents]
14/07/2009 01:08 PM Favorites [C:\Users\Public\Favorites]
14/07/2009 01:08 PM Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
14/07/2009 01:08 PM Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\ProgramData]
14/07/2009 01:08 PM Desktop [C:\Users\Public\Desktop]
14/07/2009 01:08 PM Documents [C:\Users\Public\Documents]
14/07/2009 01:08 PM Favorites [C:\Users\Public\Favorites]
14/07/2009 01:08 PM Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
14/07/2009 01:08 PM Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
14/07/2009 01:08 PM My Music [C:\Users\Public\Music]
14/07/2009 01:08 PM My Pictures [C:\Users\Public\Pictures]
14/07/2009 01:08 PM My Videos [C:\Users\Public\Videos]
0 File(s) 0 bytes
Directory of C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
14/07/2009 01:08 PM My Music [C:\Users\Public\Music]
14/07/2009 01:08 PM My Pictures [C:\Users\Public\Pictures]
14/07/2009 01:08 PM My Videos [C:\Users\Public\Videos]
0 File(s) 0 bytes
Directory of C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
14/07/2009 01:08 PM My Music [C:\Users\Public\Music]
14/07/2009 01:08 PM My Pictures [C:\Users\Public\Pictures]
14/07/2009 01:08 PM My Videos [C:\Users\Public\Videos]
0 File(s) 0 bytes
Directory of C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
14/07/2009 01:08 PM My Music [C:\Users\Public\Music]
14/07/2009 01:08 PM My Pictures [C:\Users\Public\Pictures]
14/07/2009 01:08 PM My Videos [C:\Users\Public\Videos]
0 File(s) 0 bytes
Directory of C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
14/07/2009 01:08 PM My Music [C:\Users\Public\Music]
14/07/2009 01:08 PM My Pictures [C:\Users\Public\Pictures]
14/07/2009 01:08 PM My Videos [C:\Users\Public\Videos]
0 File(s) 0 bytes
Directory of C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
14/07/2009 01:08 PM My Music [C:\Users\Public\Music]
14/07/2009 01:08 PM My Pictures [C:\Users\Public\Pictures]
14/07/2009 01:08 PM My Videos [C:\Users\Public\Videos]
0 File(s) 0 bytes
Directory of C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
14/07/2009 01:08 PM My Music [C:\Users\Public\Music]
14/07/2009 01:08 PM My Pictures [C:\Users\Public\Pictures]
14/07/2009 01:08 PM My Videos [C:\Users\Public\Videos]
0 File(s) 0 bytes
Directory of C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
14/07/2009 01:08 PM My Music [C:\Users\Public\Music]
14/07/2009 01:08 PM My Pictures [C:\Users\Public\Pictures]
14/07/2009 01:08 PM My Videos [C:\Users\Public\Videos]
0 File(s) 0 bytes
Directory of C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Documents
14/07/2009 01:08 PM My Music [C:\Users\Public\Music]
14/07/2009 01:08 PM My Pictures [C:\Users\Public\Pictures]
14/07/2009 01:08 PM My Videos [C:\Users\Public\Videos]
0 File(s) 0 bytes
Directory of C:\Users\All Users\Application Data\Application Data\Application Data\Documents
14/07/2009 01:08 PM My Music [C:\Users\Public\Music]
14/07/2009 01:08 PM My Pictures [C:\Users\Public\Pictures]
14/07/2009 01:08 PM My Videos [C:\Users\Public\Videos]
0 File(s) 0 bytes
Directory of C:\Users\All Users\Application Data\Application Data\Documents
14/07/2009 01:08 PM My Music [C:\Users\Public\Music]
14/07/2009 01:08 PM My Pictures [C:\Users\Public\Pictures]
14/07/2009 01:08 PM My Videos [C:\Users\Public\Videos]
0 File(s) 0 bytes
Directory of C:\Users\All Users\Application Data\Documents
14/07/2009 01:08 PM My Music [C:\Users\Public\Music]
14/07/2009 01:08 PM My Pictures [C:\Users\Public\Pictures]
14/07/2009 01:08 PM My Videos [C:\Users\Public\Videos]
0 File(s) 0 bytes
Directory of C:\Users\All Users\Documents
14/07/2009 01:08 PM My Music [C:\Users\Public\Music]
14/07/2009 01:08 PM My Pictures [C:\Users\Public\Pictures]
14/07/2009 01:08 PM My Videos [C:\Users\Public\Videos]
0 File(s) 0 bytes
Directory of C:\Users\Default
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Roaming]
14/07/2009 01:08 PM Cookies [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Cookies]
14/07/2009 01:08 PM Local Settings [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM My Documents [C:\Users\Default\Documents]
14/07/2009 01:08 PM NetHood [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Network Shortcuts]
14/07/2009 01:08 PM PrintHood [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Printer Shortcuts]
14/07/2009 01:08 PM Recent [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Recent]
14/07/2009 01:08 PM SendTo [C:\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo]
14/07/2009 01:08 PM Start Menu [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu]
14/07/2009 01:08 PM Templates [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Users\Default\AppData\Local
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Default\AppData\Local\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Default\AppData\Local\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Default\AppData\Local\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Default\AppData\Local\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Default\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Default\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Default\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Default\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Default\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Default\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Default\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Default\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Default\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [.]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [.]
0 File(s) 0 bytes
Directory of C:\Users\Default\Documents
14/07/2009 01:08 PM My Music [C:\Users\Default\Music]
14/07/2009 01:08 PM My Pictures [C:\Users\Default\Pictures]
14/07/2009 01:08 PM My Videos [C:\Users\Default\Videos]
0 File(s) 0 bytes
Directory of C:\Users\Default\Local Settings
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Default\Local Settings\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Default\Local Settings\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Default\Local Settings\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Default\Local Settings\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Default\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Default\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Default\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Default\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Default\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Default\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Default\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Default\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [.]
0 File(s) 0 bytes
Directory of C:\Users\Default\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [.]
14/07/2009 01:08 PM History [.]
14/07/2009 01:08 PM Temporary Internet Files [.]
0 File(s) 0 bytes
Directory of C:\Users\Default\My Documents
14/07/2009 01:08 PM My Music [C:\Users\Default\Music]
14/07/2009 01:08 PM My Pictures [C:\Users\Default\Pictures]
14/07/2009 01:08 PM My Videos [C:\Users\Default\Videos]
0 File(s) 0 bytes
Directory of C:\Users\Default User
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Roaming]
14/07/2009 01:08 PM Cookies [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Cookies]
14/07/2009 01:08 PM Local Settings [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM My Documents [C:\Users\Default\Documents]
14/07/2009 01:08 PM NetHood [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Network Shortcuts]
14/07/2009 01:08 PM PrintHood [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Printer Shortcuts]
14/07/2009 01:08 PM Recent [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Recent]
14/07/2009 01:08 PM SendTo [C:\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo]
14/07/2009 01:08 PM Start Menu [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu]
14/07/2009 01:08 PM Templates [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Users\Default User\AppData\Local
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Default User\AppData\Local\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Default User\AppData\Local\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Default User\AppData\Local\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Default User\AppData\Local\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Default User\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Default User\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Default User\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Default User\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Default User\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Default User\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Default User\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Default User\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [.]
0 File(s) 0 bytes
Directory of C:\Users\Default User\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [.]
14/07/2009 01:08 PM History [.]
14/07/2009 01:08 PM Temporary Internet Files [.]
0 File(s) 0 bytes
Directory of C:\Users\Default User\Documents
14/07/2009 01:08 PM My Music [C:\Users\Default\Music]
14/07/2009 01:08 PM My Pictures [C:\Users\Default\Pictures]
14/07/2009 01:08 PM My Videos [C:\Users\Default\Videos]
0 File(s) 0 bytes
Directory of C:\Users\Default User\Local Settings
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Default User\Local Settings\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Default User\Local Settings\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Default User\Local Settings\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Default User\Local Settings\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Default User\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Default User\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Default User\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Default User\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Default User\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Default User\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Default User\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Default User\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [C:\Users\Default\AppData\Local]
14/07/2009 01:08 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009 01:08 PM Temporary Internet Files [.]
0 File(s) 0 bytes
Directory of C:\Users\Default User\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009 01:08 PM Application Data [.]
14/07/2009 01:08 PM History [.]
14/07/2009 01:08 PM Temporary Internet Files [.]
0 File(s) 0 bytes
Directory of C:\Users\Default User\My Documents
14/07/2009 01:08 PM My Music [C:\Users\Default\Music]
14/07/2009 01:08 PM My Pictures [C:\Users\Default\Pictures]
14/07/2009 01:08 PM My Videos [C:\Users\Default\Videos]
0 File(s) 0 bytes
Directory of C:\Users\Public\Documents
14/07/2009 01:08 PM My Music [C:\Users\Public\Music]
14/07/2009 01:08 PM My Pictures [C:\Users\Public\Pictures]
14/07/2009 01:08 PM My Videos [C:\Users\Public\Videos]
0 File(s) 0 bytes
Directory of C:\Users\Victor
09/06/2011 02:47 PM Application Data [C:\Users\Victor\AppData\Roaming]
09/06/2011 02:47 PM Cookies [C:\Users\Victor\AppData\Roaming\Microsoft\Windows\Cookies]
09/06/2011 02:47 PM Local Settings [C:\Users\Victor\AppData\Local]
09/06/2011 02:47 PM My Documents [C:\Users\Victor\Documents]
09/06/2011 02:47 PM NetHood [C:\Users\Victor\AppData\Roaming\Microsoft\Windows\Network Shortcuts]
09/06/2011 02:47 PM PrintHood [C:\Users\Victor\AppData\Roaming\Microsoft\Windows\Printer Shortcuts]
09/06/2011 02:47 PM Recent [C:\Users\Victor\AppData\Roaming\Microsoft\Windows\Recent]
09/06/2011 02:47 PM SendTo [C:\Users\Victor\AppData\Roaming\Microsoft\Windows\SendTo]
09/06/2011 02:47 PM Start Menu [C:\Users\Victor\AppData\Roaming\Microsoft\Windows\Start Menu]
09/06/2011 02:47 PM Templates [C:\Users\Victor\AppData\Roaming\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Users\Victor\AppData\Local
09/06/2011 02:47 PM Application Data [C:\Users\Victor\AppData\Local]
09/06/2011 02:47 PM History [C:\Users\Victor\AppData\Local\Microsoft\Windows\History]
09/06/2011 02:47 PM Temporary Internet Files [C:\Users\Victor\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Victor\AppData\Local\Application Data
09/06/2011 02:47 PM Application Data [C:\Users\Victor\AppData\Local]
09/06/2011 02:47 PM History [C:\Users\Victor\AppData\Local\Microsoft\Windows\History]
09/06/2011 02:47 PM Temporary Internet Files [C:\Users\Victor\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Victor\AppData\Local\Application Data\Application Data
09/06/2011 02:47 PM Application Data [C:\Users\Victor\AppData\Local]
09/06/2011 02:47 PM History [C:\Users\Victor\AppData\Local\Microsoft\Windows\History]
09/06/2011 02:47 PM Temporary Internet Files [C:\Users\Victor\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Victor\AppData\Local\Application Data\Application Data\Application Data
09/06/2011 02:47 PM Application Data [C:\Users\Victor\AppData\Local]
09/06/2011 02:47 PM History [C:\Users\Victor\AppData\Local\Microsoft\Windows\History]
09/06/2011 02:47 PM Temporary Internet Files [C:\Users\Victor\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Victor\AppData\Local\Application Data\Application Data\Application Data\Application Data
09/06/2011 02:47 PM Application Data [C:\Users\Victor\AppData\Local]
09/06/2011 02:47 PM History [C:\Users\Victor\AppData\Local\Microsoft\Windows\History]
09/06/2011 02:47 PM Temporary Internet Files [C:\Users\Victor\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Victor\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data
09/06/2011 02:47 PM Application Data [C:\Users\Victor\AppData\Local]
09/06/2011 02:47 PM History [C:\Users\Victor\AppData\Local\Microsoft\Windows\History]
09/06/2011 02:47 PM Temporary Internet Files [C:\Users\Victor\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Victor\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
09/06/2011 02:47 PM Application Data [C:\Users\Victor\AppData\Local]
09/06/2011 02:47 PM History [C:\Users\Victor\AppData\Local\Microsoft\Windows\History]
09/06/2011 02:47 PM Temporary Internet Files [C:\Users\Victor\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Victor\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
09/06/2011 02:47 PM Application Data [C:\Users\Victor\AppData\Local]
09/06/2011 02:47 PM History [C:\Users\Victor\AppData\Local\Microsoft\Windows\History]
09/06/2011 02:47 PM Temporary Internet Files [C:\Users\Victor\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Victor\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
09/06/2011 02:47 PM Application Data [C:\Users\Victor\AppData\Local]
09/06/2011 02:47 PM History [C:\Users\Victor\AppData\Local\Microsoft\Windows\History]
09/06/2011 02:47 PM Temporary Internet Files [C:\Users\Victor\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Victor\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
09/06/2011 02:47 PM Application Data [C:\Users\Victor\AppData\Local]
09/06/2011 02:47 PM History [C:\Users\Victor\AppData\Local\Microsoft\Windows\History]
09/06/2011 02:47 PM Temporary Internet Files [C:\Users\Victor\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Victor\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
09/06/2011 02:47 PM Application Data [C:\Users\Victor\AppData\Local]
09/06/2011 02:47 PM History [C:\Users\Victor\AppData\Local\Microsoft\Windows\History]
09/06/2011 02:47 PM Temporary Internet Files [C:\Users\Victor\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Victor\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
09/06/2011 02:47 PM Application Data [C:\Users\Victor\AppData\Local]
09/06/2011 02:47 PM History [C:\Users\Victor\AppData\Local\Microsoft\Windows\History]
09/06/2011 02:47 PM Temporary Internet Files [C:\Users\Victor\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Victor\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
09/06/2011 02:47 PM Application Data [C:\Users\Victor\AppData\Local]
09/06/2011 02:47 PM History [C:\Users\Victor\AppData\Local\Microsoft\Windows\History]
09/06/2011 02:47 PM Temporary Internet Files [C:\Users\Victor\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Victor\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
09/06/2011 02:47 PM Application Data [.]
09/06/2011 02:47 PM History [C:\Users\Victor\AppData\Local\Microsoft\Windows\History]
09/06/2011 02:47 PM Temporary Internet Files [.]
0 File(s) 0 bytes
Directory of C:\Users\Victor\Documents
09/06/2011 02:47 PM My Music [C:\Users\Victor\Music]
09/06/2011 02:47 PM My Pictures [C:\Users\Victor\Pictures]
09/06/2011 02:47 PM My Videos [C:\Users\Victor\Videos]
0 File(s) 0 bytes
Directory of C:\Users\Victor\Local Settings
09/06/2011 02:47 PM Application Data [C:\Users\Victor\AppData\Local]
09/06/2011 02:47 PM History [C:\Users\Victor\AppData\Local\Microsoft\Windows\History]
09/06/2011 02:47 PM Temporary Internet Files [C:\Users\Victor\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Victor\Local Settings\Application Data
09/06/2011 02:47 PM Application Data [C:\Users\Victor\AppData\Local]
09/06/2011 02:47 PM History [C:\Users\Victor\AppData\Local\Microsoft\Windows\History]
09/06/2011 02:47 PM Temporary Internet Files [C:\Users\Victor\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Victor\Local Settings\Application Data\Application Data
09/06/2011 02:47 PM Application Data [C:\Users\Victor\AppData\Local]
09/06/2011 02:47 PM History [C:\Users\Victor\AppData\Local\Microsoft\Windows\History]
09/06/2011 02:47 PM Temporary Internet Files [C:\Users\Victor\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Victor\Local Settings\Application Data\Application Data\Application Data
09/06/2011 02:47 PM Application Data [C:\Users\Victor\AppData\Local]
09/06/2011 02:47 PM History [C:\Users\Victor\AppData\Local\Microsoft\Windows\History]
09/06/2011 02:47 PM Temporary Internet Files [C:\Users\Victor\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Victor\Local Settings\Application Data\Application Data\Application Data\Application Data
09/06/2011 02:47 PM Application Data [C:\Users\Victor\AppData\Local]
09/06/2011 02:47 PM History [C:\Users\Victor\AppData\Local\Microsoft\Windows\History]
09/06/2011 02:47 PM Temporary Internet Files [C:\Users\Victor\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Victor\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data
09/06/2011 02:47 PM Application Data [C:\Users\Victor\AppData\Local]
09/06/2011 02:47 PM History [C:\Users\Victor\AppData\Local\Microsoft\Windows\History]
09/06/2011 02:47 PM Temporary Internet Files [C:\Users\Victor\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Victor\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
09/06/2011 02:47 PM Application Data [C:\Users\Victor\AppData\Local]
09/06/2011 02:47 PM History [C:\Users\Victor\AppData\Local\Microsoft\Windows\History]
09/06/2011 02:47 PM Temporary Internet Files [C:\Users\Victor\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Victor\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
09/06/2011 02:47 PM Application Data [C:\Users\Victor\AppData\Local]
09/06/2011 02:47 PM History [C:\Users\Victor\AppData\Local\Microsoft\Windows\History]
09/06/2011 02:47 PM Temporary Internet Files [C:\Users\Victor\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Victor\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
09/06/2011 02:47 PM Application Data [C:\Users\Victor\AppData\Local]
09/06/2011 02:47 PM History [C:\Users\Victor\AppData\Local\Microsoft\Windows\History]
09/06/2011 02:47 PM Temporary Internet Files [C:\Users\Victor\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Victor\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
09/06/2011 02:47 PM Application Data [C:\Users\Victor\AppData\Local]
09/06/2011 02:47 PM History [C:\Users\Victor\AppData\Local\Microsoft\Windows\History]
09/06/2011 02:47 PM Temporary Internet Files [C:\Users\Victor\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Victor\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
09/06/2011 02:47 PM Application Data [C:\Users\Victor\AppData\Local]
09/06/2011 02:47 PM History [C:\Users\Victor\AppData\Local\Microsoft\Windows\History]
09/06/2011 02:47 PM Temporary Internet Files [C:\Users\Victor\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Victor\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
09/06/2011 02:47 PM Application Data [C:\Users\Victor\AppData\Local]
09/06/2011 02:47 PM History [C:\Users\Victor\AppData\Local\Microsoft\Windows\History]
09/06/2011 02:47 PM Temporary Internet Files [C:\Users\Victor\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Victor\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
09/06/2011 02:47 PM Application Data [C:\Users\Victor\AppData\Local]
09/06/2011 02:47 PM History [C:\Users\Victor\AppData\Local\Microsoft\Windows\History]
09/06/2011 02:47 PM Temporary Internet Files [C:\Users\Victor\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Victor\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
09/06/2011 02:47 PM Application Data [.]
09/06/2011 02:47 PM History [C:\Users\Victor\AppData\Local\Microsoft\Windows\History]
09/06/2011 02:47 PM Temporary Internet Files [.]
0 File(s) 0 bytes
Directory of C:\Users\Victor\My Documents
09/06/2011 02:47 PM My Music [C:\Users\Victor\Music]
09/06/2011 02:47 PM My Pictures [C:\Users\Victor\Pictures]
09/06/2011 02:47 PM My Videos [C:\Users\Victor\Videos]
0 File(s) 0 bytes
Directory of C:\Windows\System32\config\systemprofile
14/04/2012 05:54 PM Application Data [C:\Windows\system32\config\systemprofile\AppData\Roaming]
14/04/2012 05:54 PM Cookies [C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies]
14/04/2012 05:54 PM Local Settings [C:\Windows\system32\config\systemprofile\AppData\Local]
14/04/2012 05:54 PM My Documents [C:\Windows\system32\config\systemprofile\Documents]
0 File(s) 0 bytes
Directory of C:\Windows\System32\config\systemprofile\AppData\Local
14/04/2012 05:54 PM Application Data [C:\Windows\system32\config\systemprofile\AppData\Local]
14/04/2012 05:54 PM History [C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History]
14/04/2012 05:54 PM Temporary Internet Files [C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Windows\System32\config\systemprofile\Documents
14/04/2012 05:54 PM My Music [C:\Windows\system32\config\systemprofile\Music]
14/04/2012 05:54 PM My Pictures [C:\Windows\system32\config\systemprofile\Pictures]
14/04/2012 05:54 PM My Videos [C:\Windows\system32\config\systemprofile\Videos]
0 File(s) 0 bytes
Directory of C:\Windows\SysWOW64\config\systemprofile
14/04/2012 05:54 PM Application Data [C:\Windows\system32\config\systemprofile\AppData\Roaming]
14/04/2012 05:54 PM Cookies [C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies]
14/04/2012 05:54 PM Local Settings [C:\Windows\system32\config\systemprofile\AppData\Local]
14/04/2012 05:54 PM My Documents [C:\Windows\system32\config\systemprofile\Documents]
0 File(s) 0 bytes
Directory of C:\Windows\SysWOW64\config\systemprofile\AppData\Local
14/04/2012 05:54 PM Application Data [C:\Windows\system32\config\systemprofile\AppData\Local]
14/04/2012 05:54 PM History [C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History]
14/04/2012 05:54 PM Temporary Internet Files [C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Windows\SysWOW64\config\systemprofile\Documents
14/04/2012 05:54 PM My Music [C:\Windows\system32\config\systemprofile\Music]
14/04/2012 05:54 PM My Pictures [C:\Windows\system32\config\systemprofile\Pictures]
14/04/2012 05:54 PM My Videos [C:\Windows\system32\config\systemprofile\Videos]
0 File(s) 0 bytes
Total Files Listed:
0 File(s) 0 bytes
973 Dir(s) 1,208,438,784 bytes free

< %systemroot%\System32\config\*.sav >

< %PROGRAMFILES%\bak. /s >

< %systemroot%\system32\bak. /s >

< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >
[2009/07/14 13:01:14 | 000,000,442 | -HS- | M] () – C:\ProgramData\Start Menu\desktop.ini

< %systemroot%\system32\config\systemprofile\*.dat /x >

< %systemroot%\*.config >

< %systemroot%\system32\*.db >

< %PROGRAMFILES%\Internet Explorer\*.dat >

< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >
[2011/06/09 21:33:13 | 000,000,221 | -HS- | M] () – C:\Users\Victor\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini

< %USERPROFILE%\Desktop\*.exe >
[2013/03/14 09:53:44 | 094,813,592 | —- | M] (Oracle Corporation) – C:\Users\Victor\Desktop\jdk-7u17-windows-x64.exe
[2012/10/16 09:43:03 | 000,217,088 | —- | M] (CrypticSEA) – C:\Users\Victor\Desktop\maplestory.exe
[2013/07/23 22:58:45 | 010,285,040 | —- | M] (Malwarebytes Corporation ) – C:\Users\Victor\Desktop\mbam-setup-1.75.0.1300.exe
[2009/03/20 14:27:42 | 000,302,182 | —- | M] () – C:\Users\Victor\Desktop\Namespoofer.exe
[2013/04/20 10:31:08 | 004,711,248 | —- | M] (Microsoft Corporation) – C:\Users\Victor\Desktop\vs_ultimateweb.exe

< %PROGRAMFILES%\Common Files\*.* >

< %systemroot%\*.src >

< %systemroot%\install\*.* >

< %systemroot%\system32\DLL\*.* >

< %systemroot%\system32\HelpFiles\*.* >

< %systemroot%\system32\rundll\*.* >

< %systemroot%\winn32\*.* >

< %systemroot%\Java\*.* >

< %systemroot%\system32\test\*.* >

< %systemroot%\system32\Rundll32\*.* >

< %systemroot%\AppPatch\Custom\*.* >

< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >

========== Base Services ==========
SRV:64bit: - [2009/07/14 09:40:01 | 000,072,192 | —- | M] (Microsoft Corporation) [On_Demand | Running] – C:\Windows\SysNative\aelupsvc.dll – (AeLookupSvc)
SRV:64bit: - [2010/11/20 21:25:40 | 000,070,656 | —- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Windows\SysNative\appinfo.dll – (Appinfo)
SRV:64bit: - [2009/07/14 09:38:55 | 000,079,360 | —- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Windows\SysNative\alg.exe – (ALG)
SRV:64bit: - [2010/11/20 21:27:23 | 000,849,920 | —- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\SysNative\qmgr.dll – (BITS)
SRV:64bit: - [2010/11/20 21:25:45 | 000,705,024 | —- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\SysNative\BFE.DLL – (BFE)
SRV:64bit: - [2009/07/14 09:39:16 | 000,031,232 | —- | M] (Microsoft Corporation) [On_Demand | Running] – C:\Windows\SysNative\lsass.exe – (KeyIso)
SRV:64bit: - [2009/07/14 09:40:50 | 000,402,944 | —- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\SysNative\es.dll – (EventSystem)
SRV - [2009/07/14 09:15:19 | 000,271,360 | —- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\SysWOW64\es.dll – (EventSystem)
SRV:64bit: - [2010/11/20 21:25:47 | 000,136,192 | —- | M] (Microsoft Corporation) [On_Demand | Running] – C:\Windows\SysNative\browser.dll – (Browser)
SRV:64bit: - [2010/11/20 21:25:59 | 000,177,152 | —- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\SysNative\cryptsvc.dll – (CryptSvc)
SRV - [2010/11/20 20:18:24 | 000,136,192 | —- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\SysWOW64\cryptsvc.dll – (CryptSvc)
SRV:64bit: - [2010/11/20 21:27:24 | 000,512,000 | —- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\SysNative\rpcss.dll – (DcomLaunch)
SRV:64bit: - [2010/11/20 21:26:04 | 000,317,952 | —- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\SysNative\dhcpcore.dll – (Dhcp)
SRV - [2010/11/20 20:18:30 | 000,254,464 | —- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\SysWOW64\dhcpcore.dll – (Dhcp)
SRV:64bit: - [2011/03/03 14:24:16 | 000,183,296 | —- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\SysNative\dnsrslvr.dll – (Dnscache)
SRV:64bit: - [2009/07/14 09:40:35 | 000,111,104 | —- | M] (Microsoft Corporation) [On_Demand | Running] – C:\Windows\SysNative\eapsvc.dll – (EapHost)
SRV:64bit: - [2009/07/14 09:41:00 | 000,038,912 | —- | M] (Microsoft Corporation) [On_Demand | Running] – C:\Windows\SysNative\hidserv.dll – (hidserv)
SRV - [2009/07/14 09:15:24 | 000,049,152 | —- | M] (Microsoft Corporation) [On_Demand | Running] – C:\Windows\SysWOW64\hidserv.dll – (hidserv)
SRV:64bit: - [2009/07/14 09:41:10 | 000,359,424 | —- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Windows\SysNative\ipnathlp.dll – (SharedAccess)
SRV:64bit: - [2010/11/20 21:26:39 | 000,501,248 | —- | M] (Microsoft Corporation) [On_Demand | Running] – C:\Windows\SysNative\IPSECSVC.DLL – (PolicyAgent)
No service found with a name of MsMpSvc
No service found with a name of NisSrv
SRV:64bit: - [2009/07/14 09:41:54 | 000,524,288 | —- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Windows\SysNative\swprv.dll – (swprv)
SRV:64bit: - [2009/07/14 09:41:26 | 000,067,584 | —- | M] (Microsoft Corporation) [Auto | Stopped] – C:\Windows\SysNative\mmcss.dll – (MMCSS)
SRV:64bit: - [2009/07/14 09:41:52 | 000,360,448 | —- | M] (Microsoft Corporation) [On_Demand | Running] – C:\Windows\SysNative\netman.dll – (Netman)
SRV:64bit: - [2009/07/14 09:41:52 | 000,459,776 | —- | M] (Microsoft Corporation) [On_Demand | Running] – C:\Windows\SysNative\netprofm.dll – (netprofm)
SRV - [2009/07/14 09:16:03 | 000,360,448 | —- | M] (Microsoft Corporation) [On_Demand | Running] – C:\Windows\SysWOW64\netprofm.dll – (netprofm)
SRV:64bit: - [2010/11/20 21:27:22 | 000,303,616 | —- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\SysNative\nlasvc.dll – (NlaSvc)
SRV:64bit: - [2009/07/14 09:41:53 | 000,025,600 | —- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\SysNative\nsisvc.dll – (nsi)
SRV:64bit: - [2011/05/24 19:42:55 | 000,404,480 | —- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\SysNative\umpnpmgr.dll – (PlugPlay)
SRV:64bit: - [2010/11/20 21:25:21 | 000,559,104 | —- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\SysNative\spoolsv.exe – (Spooler)
SRV:64bit: - [2009/07/14 09:39:16 | 000,031,232 | —- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Windows\SysNative\lsass.exe – (ProtectedStorage)
No service found with a name of EMDMgmt
SRV:64bit: - [2009/07/14 09:41:53 | 000,099,328 | —- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Windows\SysNative\rasauto.dll – (RasAuto)
SRV:64bit: - [2010/11/20 21:27:24 | 000,344,064 | —- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Windows\SysNative\rasmans.dll – (RasMan)
SRV:64bit: - [2010/11/20 21:27:24 | 000,512,000 | —- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\SysNative\rpcss.dll – (RpcSs)
SRV:64bit: - [2010/11/20 21:27:25 | 000,030,720 | —- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Windows\SysNative\seclogon.dll – (seclogon)
SRV:64bit: - [2009/07/14 09:39:16 | 000,031,232 | —- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\SysNative\lsass.exe – (SamSs)
SRV:64bit: - [2009/07/14 09:41:58 | 000,097,280 | —- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\SysNative\wscsvc.dll – (wscsvc)
SRV:64bit: - [2010/11/20 21:27:26 | 000,236,032 | —- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\SysNative\srvsvc.dll – (LanmanServer)
SRV:64bit: - [2010/11/20 21:27:25 | 000,370,688 | —- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\SysNative\shsvcs.dll – (ShellHWDetection)
SRV - [2010/11/20 20:21:19 | 000,328,192 | —- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\SysWOW64\shsvcs.dll – (ShellHWDetection)
No service found with a name of slsvc
SRV:64bit: - [2010/11/20 21:27:25 | 001,110,016 | —- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\SysNative\schedsvc.dll – (Schedule)
SRV:64bit: - [2010/11/20 21:27:26 | 000,316,928 | —- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Windows\SysNative\tapisrv.dll – (TapiSrv)
SRV - [2010/11/20 20:21:28 | 000,242,176 | —- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Windows\SysWOW64\tapisrv.dll – (TapiSrv)
SRV:64bit: - [2009/07/14 09:41:55 | 000,044,544 | —- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\SysNative\themeservice.dll – (Themes)
SRV:64bit: - [2010/11/20 21:27:23 | 000,209,920 | —- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\SysNative\profsvc.dll – (ProfSvc)
SRV:64bit: - [2010/11/20 21:25:27 | 001,600,512 | —- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Windows\SysNative\VSSVC.exe – (VSS)
SRV:64bit: - [2010/11/20 21:25:42 | 000,679,424 | —- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\SysNative\audiosrv.dll – (AudioSrv)
SRV:64bit: - [2010/11/20 21:25:42 | 000,679,424 | —- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\SysNative\audiosrv.dll – (AudioEndpointBuilder)
SRV:64bit: - [2010/11/20 21:27:25 | 000,170,496 | —- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Windows\SysNative\sdrsvc.dll – (SDRSVC)
SRV:64bit: - [2009/07/14 09:41:27 | 001,011,712 | —- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Program Files\Windows Defender\MpSvc.dll – (WinDefend)
SRV:64bit: - [2010/11/20 21:27:28 | 001,646,080 | —- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\SysNative\wevtsvc.dll – (eventlog)
SRV:64bit: - [2010/11/20 21:26:59 | 000,828,416 | —- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\SysNative\MPSSVC.dll – (MpsSvc)
SRV:64bit: - [2010/11/20 21:27:28 | 000,580,096 | —- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\SysNative\wiaservc.dll – (stisvc)
SRV:64bit: - [2010/11/20 21:24:58 | 000,128,000 | —- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Windows\SysNative\msiexec.exe – (msiserver)
SRV - [2010/11/20 20:17:22 | 000,073,216 | —- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Windows\SysWow64\msiexec.exe – (msiserver)
SRV:64bit: - [2009/07/14 09:41:56 | 000,242,688 | —- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\SysNative\wbem\WMIsvc.dll – (Winmgmt)
SRV:64bit: - [2012/06/03 06:19:43 | 002,428,952 | —- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\SysNative\wuaueng.dll – (wuauserv)
SRV:64bit: - [2010/11/20 21:26:07 | 000,252,416 | —- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Windows\SysNative\dot3svc.dll – (dot3svc)
SRV:64bit: - [2009/07/14 09:41:56 | 000,886,784 | —- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\SysNative\wlansvc.dll – (Wlansvc)
SRV:64bit: - [2010/11/20 21:27:28 | 000,118,784 | —- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\SysNative\wkssvc.dll – (LanmanWorkstation)

========== Drive Information ==========

Physical Drives
—————

Drive: \\\\.\\PHYSICALDRIVE0 - Fixed hard disk media
Interface type: IDE
Media Type: Fixed hard disk media
Model: ST9250827AS ATA Device
Partitions: 3
Status: OK
Status Info: 0

Partitions
—————

DeviceID: Disk #0, Partition #0
PartitionType: Unknown
Bootable: False
BootPartition: False
PrimaryPartition: True
Size: 10.00GB
Starting Offset: 1048576
Hidden sectors: 0


DeviceID: Disk #0, Partition #1
PartitionType: Installable File System
Bootable: True
BootPartition: True
PrimaryPartition: True
Size: 116.00GB
Starting Offset: 10486808576
Hidden sectors: 0


DeviceID: Disk #0, Partition #2
PartitionType: Extended w/Extended Int 13
Bootable: False
BootPartition: False
PrimaryPartition: False
Size: 107.00GB
Starting Offset: 135515865088
Hidden sectors: 0


========== Files - Unicode (All) ==========
[2011/12/26 03:29:24 | 000,000,000 | —D | M](C:\Windows\SysWow64\??????) – C:\Windows\SysWow64\ɓꟍǵ܎痚
[2011/12/26 03:29:24 | 000,000,000 | —D | C](C:\Windows\SysWow64\??????) – C:\Windows\SysWow64\ɓꟍǵ܎痚
[2011/11/14 22:24:23 | 000,000,651 | —- | M] ()(C:\Users\Victor\AppData\Local\PMB Fik?s) – C:\Users\Victor\AppData\Local\PMB Fik聥s
[2011/11/14 22:24:23 | 000,000,651 | —- | C] ()(C:\Users\Victor\AppData\Local\PMB Fik?s) – C:\Users\Victor\AppData\Local\PMB Fik聥s

< End of report >
Post #10
Hi 2812818,

Please post all logs requested into one (1) reply (if they will fit).
Remove any/all flash/usb drives until we have finished.

=========================

1. Re-run OTL (it should be located on your desktop).

Windows Vista and Windows 7 & 8 users Right Click and select "Run as Administrator" on the icon to run it.
  • Make sure all other windows are closed and to let it run uninterrupted.
  • When the window appears, underneath Output at the top change it to Minimal Output.
  • Uncheck the boxes beside LOP Check and Purity Check.
  • Under Extra Registry, choose Use Safe List <– Important
  • Copy/paste the following text written inside of the code box into the Custom Scans/Fixes box located at the bottom of OTL

    :OTL
PRC - C:\ProgramData\ICLJIG\RSJ.exe 
MOD - C:\ProgramData\ICLJIG\RSJ.01
O4 - HKLM..\Run: [RSJ Start] C:\ProgramData\ICLJIG\RSJ.exe ()
[2013/07/25 18:05:50 | 000,000,000 | —D | C] – C:\Users\Victor\AppData\Roaming\SpeedyPC Software
[2013/07/25 18:05:20 | 000,000,000 | —D | C] – C:\ProgramData\SpeedyPC Software
[2013/07/24 21:31:38 | 000,000,000 | —D | C] – C:\Program Files (x86)\YTD Toolbar
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\zmpm.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\zlvlgaoro.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\zbu.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\yztg.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\ywcotf.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\yruogei.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\yqwnxmuqkr.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\ynbpico.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\yft.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\yfddtyco.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\yeqc.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\xrjmwls.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\xratz.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\xnrwoffi.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\xkiazoygsu.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\xitroqxj.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\xhliavnncf.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\xhi.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\xhepiahgu.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\xei.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\xdu.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\xbwudob.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\xabxrnwognq.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\wztapis.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\wvpmojcpagc.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\wuienx.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\wmaeoulj.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\wjd.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\wgfzxqxc.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\vwx.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\vwvpxtf.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\vtccpjjxhbl.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\vpymgh.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\vky.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\vhgdwwy.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\vexcv.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\uuknvmo.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\upqsk.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\uilhoi.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\ugh.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\uaqqwmjt.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\tubh.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\tmksiwyo.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\tjerrruiu.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\tgysztaa.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\tgp.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\szanch.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\swrosmstc.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\svh.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\surl.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\sthnpbr.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\skjqlknoa.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\rvitifkhda.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\ruwy.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\rtsquze.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\rnni.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\rnaxcorvnpm.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\rmkgnn.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\rfbddh.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\refyhravcw.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\rckntimj.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\rbou.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\qzegqoobxiy.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\qqqewpfdl.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\qpghwlpi.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\qnretzig.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\qheefqe.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\qgqkumwr.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\qbdvroefxtf.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\pxluctu.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\pvsbacopgo.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\puxozpwjj.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\ptfcgaof.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\psxulyb.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\psuezqksw.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\pqjjgvrcrr.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\pplmagu.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\pefaimbebk.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\pcpmvigyknw.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\oxxpcqneqfk.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\onuhfaqdr.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\olcfhmx.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\okbzdweogsf.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\ogn.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\ogknbwh.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\ocduhsoaeky.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\netcd.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\ndpxrjvfik.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\mxdvmytw.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\mpuqpwyjjoe.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\mlfml.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\mhymnl.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\mhefcltipun.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\mcrrrdylbyb.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\mbpbf.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\lxjydaq.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\lwcnbd.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\lvjfqnrfy.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\lmkwvtfa.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\liif.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\lhlcj.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\ldna.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\ktkvvqws.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\kokjkgnayl.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\kgqeevfnt.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\kfkegdfzsmf.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\kblu.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\kaddzumq.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\jxqxva.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\jscxtijpp.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\ixrmyzmuf.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\itshnv.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\isnvgwxvzx.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\ikvd.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\ifvbafbi.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\iduxw.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\ict.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\ibqvywo.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\hxpuo.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\htzs.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\htubwk.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\hqwxnfwmq.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\hoboh.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\hmzimwaq.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\hhxjfatux.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\hgu.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\hgdxppghmnp.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\hfaptb.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\hbqnkzjqm.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\gzswrdxw.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\gxveh.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\gxiglgpq.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\gswxesatox.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\gksspjwk.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\gjrxn.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\giemuzl.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\ggjxmqh.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\gecrm.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\gcgii.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\gbx.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\fyvyvw.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\fqat.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\fnyj.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\fkuuzbgv.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\fas.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\ezafudvoiyt.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\err.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\ehe.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\egskehx.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\edsljcdivuy.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\ecisfvuhpa.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\dxrnzku.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\dqajfj.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\dmtlsnues.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\defhdp.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\cqbt.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\cntaml.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\civwzqm.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\cfclssx.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\cdntf.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\cbgvboorrjj.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\bzyz.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\bsmobir.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\blxcchdo.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\baxqskha.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\ayyyufnvi.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\aso.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\arembuqqlhl.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\apluecjxljh.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\akjgqsepny.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\ajnzyssdz.dat
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\ajfm.ini
[2012/04/09 20:59:17 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\aclcvmx.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\zzmbkjttcv.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\zvxuplfqaiv.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\zmulmsalvp.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\zhbezzk.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\zgtn.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\yfguqg.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\ybcwdcj.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\xibfo.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\xhxj.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\xbeumyws.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\wvmaql.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\wtkvqxla.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\wmcwjfwebcg.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\wjjkwjxof.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\vuzy.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\vekhfmquvd.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\uvhkeoo.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\ujupkolaxz.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\uhgxcxne.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\udixx.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\ubomomrwsdk.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\tttpgilubhz.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\tixbprzs.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\tcu.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\swmx.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\srt.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\sqrvkkbktxz.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\sntlrnm.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\slfzi.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\skcx.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\sjzadmi.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\sfsz.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\rzuc.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\rumiqlhw.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\rpz.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\riffaw.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\rifbww.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\rhw.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\qxbus.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\qttwzyei.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\qsopsnklrnj.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\qrpcq.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\qqqt.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\pqognjycvt.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\pjtdqi.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\phcioojd.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\pedcjlq.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\pclkwlz.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\pathdekgnl.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\ousspnt.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\otvbczqzr.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\otorwgb.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\oofzxmm.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\oofsbkfk.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\ooaomuyhvz.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\olhdsirhbjm.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\oicryjbsxhd.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\ntpp.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\npuailglpt.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\narceunvfsr.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\mwzhlh.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\mwuwz.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\mvhxlyyr.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\minowwpnhw.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\mflohpswrxl.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\mbufohzbd.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\maynwlp.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\lvzw.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\lqya.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\lnm.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\lffhqjpt.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\kragnbr.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\kppamcnflm.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\knk.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\kkrk.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\kjvzwobzke.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\jvpytddxshm.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\jvanbm.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\jecbuzopv.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\jazdltqdat.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\ivz.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\ithugwck.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\imisiwl.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\ilppyukvb.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\hxokmtz.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\hulemjbpzih.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\hrfumedgw.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\hiushfclfla.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\gwegf.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\ghdvcccqxcv.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\fzzu.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\fnxe.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\fmlgoxxnn.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\fhagevihj.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\epuzw.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\eewo.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\eesejbzog.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\dmuuqmc.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\dkfd.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\djzobvavx.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\dgppwo.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\dgckkqqq.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\dfswulgomz.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\detwvkklv.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\ctxnogspj.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\cbqynozbpo.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\byoqvakieh.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\bxqecmpfn.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\bulcyfilrrd.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\bsxkwl.dat
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\betjex.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\azuxhafgo.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\auemdu.ini
[2012/04/09 20:59:16 | 000,000,028 | —- | C] () – C:\Windows\SysWow64\aesvs.dat

:Commands
[purity]
[createrestorepoint]
[emptytemp]
[Reboot]
  • Then click the Run Fix button at the top
  • When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
    Note:The log can be located in the OTL. folder on you C:\ drive if they fail to open automatically.
  • Please copy (Edit->Select All, Edit->Copy) the contents of the file, and post it with your next reply.
=========================

2. RogueKiller

Download to your desktop RogueKiller (by tigzy)

Right click and select "Run as Administrator"
  • Quit all programs
  • Wait until Prescan has finished …
  • Click on Scan, Do Not Fix Anything at this point.
  • Click the Report button, save the report to your desktop
=========================

3. ComboFix

Refer to the ComboFix User's Guide

  • Download ComboFix from the following location:

    Link

    * IMPORTANT !!! Place ComboFix.exe on your Desktop
  • Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with ComboFix.
    You can get help on disabling your protection programs here
  • Double click on ComboFix.exe & follow the prompts.
  • Your desktop may go blank. This is normal. It will return when ComboFix is done. ComboFix may reboot your machine. This is normal.
  • When finished, it shall produce a log for you. Post that log in your next reply

    Note: Do not mouseclick combofix's window whilst it's running. That may cause it to stall.

    ———————————————————————————————
  • Ensure your AntiVirus and AntiSpyware applications are re-enabled.
    ———————————————————————————————
NOTE: If you encounter a message "illegal operation attempted on registry key that has been marked for deletion" and no programs will run - please just reboot and that will resolve that error.

=========================

In your next post please provide the following:
  • OTL.txt
  • Extras.txt
  • RogueKiller log
  • ComboFix.txt
Post #11
Hi there OCD, I am having trouble with the OTL. I follow the instructions u provided and i ran the fix but it keeps on "not responding." I left it to run overnight and the results were the same, not responding. I tried re-running but the same thing happened. =(
Post #13
Hi OCD,

Hope that you're having a great day. Here's my rougekiller and combofix log. Thank you very much for your help.

ComboFix 13-07-27.01 - Victor 29/07/2013 18:37:54.1.2 - x64
Microsoft Windows 7 Professional 6.1.7601.1.1252.60.1033.18.4095.2466 [GMT 8:00]
Running from: c:\users\[removed]\Downloads\Programs\ComboFix.exe
AV: Norton 360 *Disabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF}
FW: Norton 360 *Disabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}
SP: Norton 360 *Disabled/Updated* {D8BEB080-B73A-17E3-1B37-B6B462689202}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\data
c:\data\default\feed4.data
c:\data\default\us_sres.data
C:\install.exe
C:\Microsoft
c:\programdata\ICLJIG\RSJ.exe
c:\users\Victor\AppData\Local\assembly\tmp
D:\install.exe
.
.
((((((((((((((((((((((((( Files Created from 2013-06-28 to 2013-07-29 )))))))))))))))))))))))))))))))
.
.
2013-07-29 10:55 . 2013-07-29 10:55 ——– d—–w- c:\users\Default\AppData\Local\temp
2013-07-28 15:12 . 2013-07-28 15:12 ——– d—–w- c:\program files\Realtek
2013-07-28 15:12 . 2013-07-28 15:12 ——– d—–w- c:\windows\SysWow64\RTCOM
2013-07-28 14:09 . 2013-07-28 14:09 ——– d—–w- c:\program files\NVIDIA Corporation
2013-07-28 11:42 . 2013-07-28 11:42 ——– d—–w- c:\users\Victor\AppData\Roaming\DisplayTune
2013-07-28 11:33 . 2007-04-04 02:30 7432 —-a-w- c:\windows\SysWow64\Machnm32.sys
2013-07-28 11:33 . 2013-07-28 11:33 ——– d—–w- c:\program files (x86)\Portrait Displays
2013-07-28 03:57 . 2013-07-28 03:57 ——– d—–w- c:\program files (x86)\Common Files\Java
2013-07-28 03:57 . 2013-07-28 03:56 96168 —-a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2013-07-27 15:54 . 2013-07-27 15:54 ——– d—–w- C:\_OTL
2013-07-25 10:05 . 2013-07-25 10:05 ——– d—–w- c:\users\Victor\AppData\Roaming\SpeedyPC Software
2013-07-25 10:05 . 2013-07-25 10:09 ——– d—–w- c:\programdata\SpeedyPC Software
2013-07-24 23:03 . 2013-07-24 23:03 67632 —-a-w- c:\windows\system32\msln.exe
2013-07-24 14:01 . 2013-07-24 14:01 96856 —-a-w- c:\windows\system32\drivers\SMR322.SYS
2013-07-24 13:31 . 2013-07-24 13:31 ——– d—–w- c:\program files (x86)\YTD Toolbar
2013-07-23 14:59 . 2013-07-23 14:59 ——– d—–w- c:\users\Victor\AppData\Roaming\Malwarebytes
2013-07-23 14:59 . 2013-07-23 14:59 ——– d—–w- c:\programdata\Malwarebytes
2013-07-23 14:59 . 2013-04-04 06:50 25928 —-a-w- c:\windows\system32\drivers\mbam.sys
2013-07-23 14:59 . 2013-07-23 14:59 ——– d—–w- c:\program files (x86)\Malwarebytes' Anti-Malware
2013-07-22 12:08 . 2013-06-23 16:57 78277128 —-a-w- c:\windows\system32\MRT.exe
2013-07-21 13:25 . 2013-07-23 11:30 ——– d—–w- c:\programdata\YTD Video Downloader
2013-07-21 10:39 . 2013-07-29 10:29 ——– d—–w- c:\programdata\UEL
2013-07-21 10:39 . 2013-07-29 10:55 ——– d-sh–w- c:\programdata\ICLJIG
2013-07-21 10:13 . 2013-07-21 10:13 ——– d—–w- c:\users\Victor\AppData\Roaming\GrabPro
2013-07-21 09:49 . 2013-07-21 09:49 ——– d—–w- c:\users\Victor\AppData\Roaming\ProgSense
2013-07-21 09:48 . 2013-07-28 11:28 ——– d—–w- c:\program files (x86)\Orbitdownloader
2013-07-21 09:46 . 2013-07-28 11:40 ——– d—–w- c:\users\Victor\AppData\Roaming\Orbit
2013-07-21 09:43 . 2013-07-22 10:55 ——– d—–w- c:\windows\system32\drivers\N360x64\1404000.028
2013-07-18 13:30 . 2013-07-18 13:29 312232 —-a-w- c:\windows\system32\javaws.exe
2013-07-18 13:29 . 2013-07-18 13:29 108968 —-a-w- c:\windows\system32\WindowsAccessBridge-64.dll
2013-07-18 13:29 . 2013-07-18 13:29 189352 —-a-w- c:\windows\system32\javaw.exe
2013-07-18 13:29 . 2013-07-18 13:29 188840 —-a-w- c:\windows\system32\java.exe
2013-07-17 12:57 . 2013-07-17 12:57 ——– d—–w- C:\VS2012_PROJECTTEMPLATES_DIR
2013-07-17 12:57 . 2013-07-17 12:57 ——– d—–w- c:\program files (x86)\Xamarin
2013-07-17 12:57 . 2013-07-17 12:57 ——– d—–w- C:\VS2012_ITEMTEMPLATES_DIR
2013-07-17 12:57 . 2013-07-17 12:57 ——– d—–w- C:\VS2012_EXTENSIONS_DIR
2013-07-17 12:47 . 2013-07-17 12:47 ——– d—–w- c:\programdata\Monodoc
2013-07-17 12:47 . 2013-07-17 12:47 ——– d—–w- c:\program files (x86)\Microsoft Visual Studio 11.0
2013-07-17 12:45 . 2013-07-17 12:45 ——– d—–w- c:\program files (x86)\MonoDevelop
2013-07-17 12:45 . 2013-07-17 12:45 ——– d—–w- c:\program files (x86)\Xamarin Studio
2013-07-17 12:21 . 2013-07-17 12:21 ——– d—–w- c:\program files (x86)\GtkSharp
2013-07-17 12:12 . 2013-07-17 12:12 ——– d—–w- c:\program files\Android
2013-07-17 11:26 . 2013-07-17 13:08 ——– d—–w- c:\programdata\Package Cache
2013-07-17 11:00 . 2013-07-17 11:00 ——– d—–w- c:\users\Victor\AppData\Local\Xamarin
2013-07-02 11:29 . 2013-07-02 11:29 ——– d—–w- c:\programdata\IDM
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-07-28 03:56 . 2012-07-05 02:20 867240 —-a-w- c:\windows\SysWow64\npDeployJava1.dll
2013-07-28 03:56 . 2012-03-15 08:39 789416 —-a-w- c:\windows\SysWow64\deployJava1.dll
2013-07-21 09:45 . 2011-06-10 10:17 177312 —-a-w- c:\windows\system32\drivers\SYMEVENT64x86.SYS
2013-07-18 13:29 . 2012-07-05 07:41 972712 —-a-w- c:\windows\system32\deployJava1.dll
2013-07-18 13:29 . 2012-07-05 07:41 1093032 —-a-w- c:\windows\system32\npDeployJava1.dll
2013-07-17 13:07 . 2013-04-22 12:12 2478336 —-a-w- c:\programdata\Microsoft\VisualStudio\10.0\1033\ResourceCache.dll
2013-06-13 12:44 . 2012-04-10 08:45 692104 —-a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2013-06-13 12:44 . 2011-06-09 15:15 71048 —-a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-06-13 12:44 . 2013-06-13 12:44 9089416 —-a-w- c:\windows\SysWow64\FlashPlayerInstaller.exe
2013-05-14 13:34 . 2011-08-08 03:25 22240 —-a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2011-07-02 17:44 . 2011-07-02 17:44 6452224 —-a-w- c:\program files (x86)\JuzLoader GUI.exe
2011-06-30 18:10 . 2011-06-30 18:10 140800 —-a-w- c:\program files (x86)\juzloader.exe
2011-06-30 13:32 . 2011-06-30 13:32 2700 —-a-w- c:\program files (x86)\juzdotabnet.reg
2011-04-26 13:13 . 2011-04-26 13:13 5073240 —-a-w- c:\program files (x86)\vcredist_x86.exe
2011-03-16 18:21 . 2011-03-16 18:21 68608 —-a-w- c:\program files (x86)\w3lh.dll
2011-03-02 13:37 . 2011-03-02 13:37 325968 —-a-w- c:\program files (x86)\lua5.1.dll
2011-03-02 13:37 . 2011-03-02 13:37 11264 —-a-w- c:\program files (x86)\lua51.dll
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584]
"Auto-Joiner.exe"="c:\users\Victor\Desktop\roomjoiner\Auto-Joiner.exe" [2013-02-15 77824]
"GarenaPlus"="c:\program files (x86)\Garena Plus\GarenaMessenger.exe" [2013-07-26 9699632]
"IDMan"="c:\program files (x86)\Internet Download Manager\IDMan.exe" [2013-07-21 3565432]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"HControlUser"="c:\program files (x86)\ASUS\ATK Hotkey\HControlUser.exe" [2009-04-01 98304]
"ATKOSD2"="c:\program files (x86)\ASUS\ATKOSD2\ATKOSD2.exe" [2009-07-07 8493624]
"ATKMEDIA"="c:\program files (x86)\ASUS\ATK Media\DMedia.exe" [2009-08-19 170624]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-06-06 937920]
"TkBellExe"="c:\program files (x86)\Real\RealPlayer\update\realsched.exe" [2013-01-16 295072]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-04-21 59720]
"iTunesHelper"="d:\itunes\iTunesHelper.exe" [2013-05-15 152392]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-03-11 253816]
"PivotSoftware"="c:\program files (x86)\Portrait Displays\Pivot Pro Plugin\Pivot_startup.exe" [2010-05-13 110192]
"DT PLP"="c:\program files (x86)\Common Files\Portrait Displays\Shared\DT_startup.exe" [2010-05-17 121456]
.
c:\users\Victor\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
My_AutoWarkey_Script.lnk - c:\program files (x86)\Warkeys\AutoWarkey\AutoHotkey\AutoHotkey.exe ..\My_AutoWarkey_Script.ahk [2009-9-26 245248]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
"Userinit"="c:\windows\system32\userinit.exe"
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ PDBoot.exe\0autocheck autochk *
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 1394hub;1394 Enabled Hub;c:\windows\System32\svchost.exe;c:\windows\SYSNATIVE\svchost.exe [x]
R3 CoordinatorServiceHost;SW Distributed TS Coordinator Service;c:\program files\SolidWorks Corp\SolidWorks (2)\swScheduler\DTSCoordinatorService.exe;c:\program files\SolidWorks Corp\SolidWorks (2)\swScheduler\DTSCoordinatorService.exe [x]
R3 cpudrv64;cpudrv64;c:\program files (x86)\SystemRequirementsLab\cpudrv64.sys;c:\program files (x86)\SystemRequirementsLab\cpudrv64.sys [x]
R3 EagleX64;EagleX64;c:\windows\system32\drivers\EagleX64.sys;c:\windows\SYSNATIVE\drivers\EagleX64.sys [x]
R3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64;c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe;c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [x]
R3 GarenaPEngine;GarenaPEngine;c:\users\Victor\AppData\Local\Temp\GQB3572.tmp;c:\users\Victor\AppData\Local\Temp\GQB3572.tmp [x]
R3 GDMINIT;GCT Initial Device Driver;c:\windows\system32\DRIVERS\gdminit.sys;c:\windows\SYSNATIVE\DRIVERS\gdminit.sys [x]
R3 GdmUWm;Yes Go;c:\windows\system32\DRIVERS\gdmuwm.sys;c:\windows\SYSNATIVE\DRIVERS\gdmuwm.sys [x]
R3 GGSAFERDriver;GGSAFER Driver;c:\program files (x86)\Garena Plus\Room\safedrv.sys;c:\program files (x86)\Garena Plus\Room\safedrv.sys [x]
R3 ivusb;Initio Driver for USB Default Controller;c:\windows\system32\DRIVERS\ivusb.sys;c:\windows\SYSNATIVE\DRIVERS\ivusb.sys [x]
R3 Mkd2Nadr;Mkd2Nadr;c:\windows\system32\drivers\Mkd2Nadr.sys;c:\windows\SYSNATIVE\drivers\Mkd2Nadr.sys [x]
R3 Mkd3kfNt;Mkd3kfNt;c:\windows\system32\drivers\Mkd3kfNt.sys;c:\windows\SYSNATIVE\drivers\Mkd3kfNt.sys [x]
R3 netw5v64;Intel® Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit;c:\windows\system32\DRIVERS\netw5v64.sys;c:\windows\SYSNATIVE\DRIVERS\netw5v64.sys [x]
R3 taphss6;Anchorfree HSS VPN Adapter;c:\windows\system32\DRIVERS\taphss6.sys;c:\windows\SYSNATIVE\DRIVERS\taphss6.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
R3 VSPerfDrv100;Performance Tools Driver 10.0;c:\program files (x86)\Microsoft Visual Studio 10.0\Team Tools\Performance Tools\x64\VSPerfDrv100.sys;c:\program files (x86)\Microsoft Visual Studio 10.0\Team Tools\Performance Tools\x64\VSPerfDrv100.sys [x]
R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R3 WDC_SAM;WD SCSI Pass Thru driver;c:\windows\system32\DRIVERS\wdcsam64.sys;c:\windows\SYSNATIVE\DRIVERS\wdcsam64.sys [x]
R4 MSSQLServerADHelper100;SQL Active Directory Helper Service;c:\program files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE;c:\program files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE [x]
R4 RsFx0103;RsFx0103 Driver;c:\windows\system32\DRIVERS\RsFx0103.sys;c:\windows\SYSNATIVE\DRIVERS\RsFx0103.sys [x]
R4 SQLAgent$SQLEXPRESS;SQL Server Agent (SQLEXPRESS);c:\program files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE;c:\program files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [x]
S0 SMR322;Symantec SMR Utility Service 3.2.2;c:\windows\System32\drivers\SMR322.SYS;c:\windows\SYSNATIVE\drivers\SMR322.SYS [x]
S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys;c:\windows\SYSNATIVE\Drivers\sptd.sys [x]
S0 SymDS;Symantec Data Store;c:\windows\system32\drivers\N360x64\1404000.028\SYMDS64.SYS;c:\windows\SYSNATIVE\drivers\N360x64\1404000.028\SYMDS64.SYS [x]
S0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\N360x64\1404000.028\SYMEFA64.SYS;c:\windows\SYSNATIVE\drivers\N360x64\1404000.028\SYMEFA64.SYS [x]
S1 BHDrvx64;BHDrvx64;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.4.0.40\Definitions\BASHDefs\20130715.001\BHDrvx64.sys;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.4.0.40\Definitions\BASHDefs\20130715.001\BHDrvx64.sys [x]
S1 ccSet_N360;Norton 360 Settings Manager;c:\windows\system32\drivers\N360x64\1404000.028\ccSetx64.sys;c:\windows\SYSNATIVE\drivers\N360x64\1404000.028\ccSetx64.sys [x]
S1 cnnctfy2;Connectify LightWeight Filter;c:\windows\system32\DRIVERS\cnnctfy2.sys;c:\windows\SYSNATIVE\DRIVERS\cnnctfy2.sys [x]
S1 IDSVia64;IDSVia64;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.4.0.40\Definitions\IPSDefs\20130726.001\IDSvia64.sys;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.4.0.40\Definitions\IPSDefs\20130726.001\IDSvia64.sys [x]
S1 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\N360x64\1404000.028\Ironx64.SYS;c:\windows\SYSNATIVE\drivers\N360x64\1404000.028\Ironx64.SYS [x]
S1 SymNetS;Symantec Network Security WFP Driver;c:\windows\System32\Drivers\N360x64\1404000.028\SYMNETS.SYS;c:\windows\SYSNATIVE\Drivers\N360x64\1404000.028\SYMNETS.SYS [x]
S2 ASMMAP64;ASMMAP64;c:\program files\ATKGFNEX\ASMMAP64.sys;c:\program files\ATKGFNEX\ASMMAP64.sys [x]
S2 bufssvr;bufssvr;c:\program files (x86)\BUFFALO\SLManagerEasy\Bufssvr.exe;c:\program files (x86)\BUFFALO\SLManagerEasy\Bufssvr.exe [x]
S2 Connectify;Connectify;c:\program files (x86)\Connectify\ConnectifyService.exe;c:\program files (x86)\Connectify\ConnectifyService.exe [x]
S2 GCTWiMaxServiceD;Connect Service Daemon;c:\program files (x86)\Yes\Connect\GCTWiMaxServiceD.exe;c:\program files (x86)\Yes\Connect\GCTWiMaxServiceD.exe [x]
S2 GdmWmPrt;Yes Go Protocol Driver;c:\windows\system32\DRIVERS\gdmwmprt.sys;c:\windows\SYSNATIVE\DRIVERS\gdmwmprt.sys [x]
S2 IDMWFP;IDMWFP;c:\windows\system32\DRIVERS\idmwfp.sys;c:\windows\SYSNATIVE\DRIVERS\idmwfp.sys [x]
S2 MBAMScheduler;MBAMScheduler;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [x]
S2 N360;Norton 360;c:\program files (x86)\Norton 360\Engine\20.4.0.40\ccSvcHst.exe;c:\program files (x86)\Norton 360\Engine\20.4.0.40\ccSvcHst.exe [x]
S2 NPF;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys;c:\windows\SYSNATIVE\drivers\npf.sys [x]
S2 PDFSFilter;PDFSFilter;c:\windows\system32\DRIVERS\PDFsFilter.sys;c:\windows\SYSNATIVE\DRIVERS\PDFsFilter.sys [x]
S2 PdiService;Portrait Displays SDK Service;c:\program files (x86)\Common Files\Portrait Displays\Drivers\pdisrvc.exe;c:\program files (x86)\Common Files\Portrait Displays\Drivers\pdisrvc.exe [x]
S2 RealNetworks Downloader Resolver Service;RealNetworks Downloader Resolver Service;c:\program files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe;c:\program files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [x]
S2 Skype C2C Service;Skype C2C Service;c:\programdata\Skype\Toolbars\Skype C2C Service\c2c_service.exe;c:\programdata\Skype\Toolbars\Skype C2C Service\c2c_service.exe [x]
S3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
S3 t_mouse.sys;iBall Advanced Mouse;c:\windows\system32\DRIVERS\t_mouse.sys;c:\windows\SYSNATIVE\DRIVERS\t_mouse.sys [x]
.
.
Contents of the 'Scheduled Tasks' folder
.
2013-07-29 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-10 12:44]
.
2013-07-28 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1411131432-3712026648-2751386654-1001Core.job
- c:\users\Victor\AppData\Local\Facebook\Update\FacebookUpdate.exe [2011-10-20 11:52]
.
2013-07-28 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1411131432-3712026648-2751386654-1001UA.job
- c:\users\Victor\AppData\Local\Facebook\Update\FacebookUpdate.exe [2011-10-20 11:52]
.
2013-07-28 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1411131432-3712026648-2751386654-1001Core.job
- c:\users\Victor\AppData\Local\Google\Update\GoogleUpdate.exe [2011-06-09 14:07]
.
2013-07-29 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1411131432-3712026648-2751386654-1001UA.job
- c:\users\Victor\AppData\Local\Google\Update\GoogleUpdate.exe [2011-06-09 14:07]
.
.
——— X64 Entries ———–
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\IDM Shell Extension]
@="{CDC95B92-E27C-4745-A8C5-64A52A78855D}"
[HKEY_CLASSES_ROOT\CLSID\{CDC95B92-E27C-4745-A8C5-64A52A78855D}]
2012-11-15 23:07 23496 —-a-w- c:\program files (x86)\Internet Download Manager\IDMShellExt64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MouseDriver"="TiltWheelMouse.exe" [2010-10-31 241152]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-07-01 16330272]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2013-03-29 13513288]
.
——- Supplementary Scan ——-
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://securityresponse.symantec.com/avcenter/fix_homepage
mLocal Page = c:\windows\system32\blank.htm
uInternet Settings,ProxyOverride = local;*.local
IE: &Download by Orbit - c:\program files (x86)\Orbitdownloader\orbitmxt.dll/201
IE: &Grab video by Orbit - c:\program files (x86)\Orbitdownloader\orbitmxt.dll/204
IE: Do&wnload selected by Orbit - c:\program files (x86)\Orbitdownloader\orbitmxt.dll/203
IE: Down&load all by Orbit - c:\program files (x86)\Orbitdownloader\orbitmxt.dll/202
IE: Download all links with IDM - c:\program files (x86)\Internet Download Manager\IEGetAll.htm
IE: Download with IDM - c:\program files (x86)\Internet Download Manager\IEExt.htm
TCP: DhcpNameServer = 192.168.1.1
TCP: Interfaces\{9E0C852C-AFD0-4E3F-9006-5524CAB189DB}: NameServer = 10.101.0.10,10.101.0.12
TCP: Interfaces\{BAEB82D4-2B9C-445F-BC90-61A667B4EABD}: NameServer = 8.8.8.8,8.8.4.4
FF - ProfilePath - c:\users\Victor\AppData\Roaming\Mozilla\Firefox\Profiles\68rj7rey.default\
FF - prefs.js: browser.search.defaulturl -
FF - prefs.js: browser.startup.homepage - www.google.com
FF - ExtSQL: 2013-06-01 14:38; [removed]; c:\program files (x86)\YTD Toolbar\FF
.
- - - - ORPHANS REMOVED - - - -
.
Toolbar-Locked - (no file)
Wow6432Node-HKCU-Run-Norton Download Manager{N360S_prod_1.19_4.1.0.32} - c:\users\Public\Downloads\Norton\{N360S_prod_1.19_4.1.0.32}\N360Downloader.exe
Wow6432Node-HKLM-Run-RSJ Start - c:\programdata\ICLJIG\RSJ.exe
Wow6432Node-HKU-Default-RunOnce-SPReview - c:\windows\System32\SPReview\SPReview.exe
AddRemove-JuzDotA Full 2.0 - c:\users\Victor\Desktop\Desktop important files\Games\Warcraft 3 (Battlenet).folder\Warcraft 3 (Battlenet)\Warcraft 3\Uninstall.exe
AddRemove-JuzLoader 2.00 - c:\users\Victor\Desktop\Desktop important files\Games\Warcraft 3 (Battlenet).folder\Warcraft 3 (Battlenet)\Warcraft 3\Uninstall.exe
AddRemove-Pdf995 - c:\program files (x86)\pdf995\setup.exe
AddRemove-vShare.tv plugin - c:\program files (x86)\vShare.tv plugin\uninst.exe
AddRemove-{09FF4DB8-7DE9-4D47-B7DB-915DB7D9A8CA} - c:\programdata\{AB2D8F2E-F7AD-4446-A11A-50D846B2CF2A}\bm_installer.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\N360]
"ImagePath"="\"c:\program files (x86)\Norton 360\Engine\20.4.0.40\ccSvcHst.exe\" /s \"N360\" /m \"c:\program files (x86)\Norton 360\Engine\20.4.0.40\diMaster.dll\" /prefetch:1"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\GarenaPEngine]
"ImagePath"="\??\c:\users\Victor\AppData\Local\Temp\GQB3572.tmp"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\MySQL]
"ImagePath"="\"c:\program files (x86)\Canon\Easy-WebPrint EX\bin\mysqld\" –defaults-file=\"c:\program files (x86)\Canon\Easy-WebPrint EX\my.ini\" MySQL"
.
——————— LOCKED REGISTRY KEYS ———————
.
[HKEY_USERS\S-1-5-21-1411131432-3712026648-2751386654-1001_Classes\Wow6432Node\CLSID\{20f421dc-38fd-46a9-a0ec-6a8c3ef67361}]
@Denied: (Full) (Everyone)
@Allowed: (Read) (RestrictedCode)
"Model"=dword:00000145
"Therad"=dword:00000015
"MData"=hex(0):73,d5,cf,b8,a4,07,89,80,31,e4,35,6b,2a,ca,fe,43,b6,1f,81,1f,5a,
1b,4d,36,46,8f,3c,f2,5c,68,ee,21,46,8f,3c,f2,5c,68,ee,21,46,8f,3c,f2,5c,68,\
.
[HKEY_USERS\S-1-5-21-1411131432-3712026648-2751386654-1001_Classes\Wow6432Node\CLSID\{5ED60779-4DE2-4E07-B862-974CA4FF2E9C}]
@Denied: (Full) (Everyone)
@Allowed: (Read) (RestrictedCode)
"scansk"=hex(0):61,26,15,b8,3b,9c,7a,e8,e5,4a,27,9c,76,4f,06,d8,4c,26,be,f9,9b,
4c,b5,b7,5c,d2,78,22,1a,d0,55,4c,a8,bb,b2,c4,d6,4b,5c,33,00,00,00,00,00,00,\
.
[HKEY_USERS\S-1-5-21-1411131432-3712026648-2751386654-1001_Classes\Wow6432Node\CLSID\{7B8E9164-324D-4A2E-A46D-0165FB2000EC}]
@Denied: (Full) (Everyone)
"scansk"=hex(0):30,d0,e5,a5,53,ca,9d,5b,69,f2,b5,2d,af,04,06,3c,dc,07,34,56,78,
5d,ff,1e,e5,b0,60,c4,5e,e1,50,01,b9,b1,25,28,53,23,e3,50,00,00,00,00,00,00,\
.
[HKEY_USERS\S-1-5-21-1411131432-3712026648-2751386654-1001_Classes\Wow6432Node\CLSID\{f78d65fb-8bf2-4aef-9aa7-e1d269eec9dd}]
@Denied: (Full) (Everyone)
@Allowed: (Read) (RestrictedCode)
"Model"=dword:00000107
"Therad"=dword:0000001e
"MData"=hex(0):2b,8f,78,29,5a,0c,ce,ec,48,d4,68,e5,9f,6a,96,3e,ab,de,c5,81,26,
38,95,44,d8,4e,5f,79,7a,56,a1,25,e6,87,cb,b4,06,a4,1c,54,49,27,e9,4d,34,ac,\
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_7_700_224_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_7_700_224_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_7_700_224_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_7_700_224_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\DbgagD\1*]
"value"="?\06\05\16\0c&\1bj"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
———————— Other Running Processes ————————
.
c:\program files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe
c:\program files\ATKGFNEX\GFNEXSrv.exe
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files (x86)\Xamarin\Bonjour\mDNSResponder.exe
c:\program files (x86)\BUFFALO\SLManagerEasy\Inputps.exe
c:\program files (x86)\Connectify\ConnectifyD.exe
c:\program files (x86)\Common Files\Portrait Displays\Shared\DTSRVC.exe
c:\program files (x86)\Canon\IJPLM\IJPLMSVC.EXE
c:\windows\SysWOW64\lkcitdl.exe
c:\windows\SysWOW64\lkads.exe
c:\windows\SysWOW64\lktsrv.exe
c:\program files (x86)\Canon\Easy-WebPrint EX\bin\mysqld.exe
c:\program files (x86)\National Instruments\Shared\Security\nidmsrv.exe
c:\windows\SysWOW64\nisvcloc.exe
c:\program files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe
c:\program files (x86)\Garena Plus\ggdllhost.exe
c:\program files (x86)\ASUS\ATK Hotkey\HControl.exe
c:\program files (x86)\ASUS\ATK Hotkey\ATKOSD.exe
c:\program files (x86)\ASUS\ATK Hotkey\WDC.exe
c:\program files (x86)\Warkeys\AutoWarkey\AutoHotkey\AutoHotkey.exe
c:\program files (x86)\Philips Display\SmartControl\DTHtml.exe
.
**************************************************************************
.
Completion time: 2013-07-29 19:18:58 - machine was rebooted
ComboFix-quarantined-files.txt 2013-07-29 11:18
.
Pre-Run: 808,587,264 bytes free
Post-Run: 4,421,820,416 bytes free
.
- - End Of File - - B2A568E80DDEC89EEBCAFD1A4112DEEB
A36C5E4F47E84449FF07ED3517B43A31





RogueKiller V8.6.3 [Jul 17 2013] by Tigzy
mail : tigzyRKgmailcom
Feedback : http://www.adlice.com/forum/
Website : http://www.adlice.com/softwares/roguekiller/
Blog : http://tigzyrk.blogspot.com/

Operating System : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Started in : Normal mode
User : Victor [Admin rights]
Mode : Scan – Date : 07/29/2013 07:18:53
| ARK || FAK || MBR |

¤¤¤ Bad processes : 1 ¤¤¤
[SUSP PATH] RSJ.exe – C:\ProgramData\ICLJIG\RSJ.exe [-] -> KILLED [TermProc]

¤¤¤ Registry Entries : 18 ¤¤¤
[RUN][SUSP PATH] HKCU\[…]\Run : Auto-Joiner.exe (C:\Users\Victor\Desktop\roomjoiner\Auto-Joiner.exe [-]) -> FOUND
[RUN][SUSP PATH] HKUS\S-1-5-21-1411131432-3712026648-2751386654-1001\[…]\Run : Auto-Joiner.exe (C:\Users\Victor\Desktop\roomjoiner\Auto-Joiner.exe [-]) -> FOUND
[RUN][SUSP PATH] HKLM\[…]\Wow6432Node\[…]\Run : RSJ Start (C:\ProgramData\ICLJIG\RSJ.exe [-]) -> FOUND
[DNS] HKLM\[…]\CCSet\[…]\{9E0C852C-AFD0-4E3F-9006-5524CAB189DB} : NameServer (10.101.0.10,10.101.0.12) -> FOUND
[DNS] HKLM\[…]\CS001\[…]\{9E0C852C-AFD0-4E3F-9006-5524CAB189DB} : NameServer (10.101.0.10,10.101.0.12) -> FOUND
[DNS] HKLM\[…]\CS002\[…]\{9E0C852C-AFD0-4E3F-9006-5524CAB189DB} : NameServer (10.101.0.10,10.101.0.12) -> FOUND
[HJ POL] HKCU\[…]\System : DisableTaskMgr (0) -> FOUND
[HJ POL] HKCU\[…]\System : DisableRegistryTools (0) -> FOUND
[HJ POL] HKLM\[…]\System : DisableTaskMgr (0) -> FOUND
[HJ POL] HKLM\[…]\System : ConsentPromptBehaviorAdmin (0) -> FOUND
[HJ POL] HKLM\[…]\System : EnableLUA (0) -> FOUND
[HJ POL] HKLM\[…]\Wow6432Node\[…]\System : DisableTaskMgr (0) -> FOUND
[HJ POL] HKLM\[…]\Wow6432Node\[…]\System : ConsentPromptBehaviorAdmin (0) -> FOUND
[HJ POL] HKLM\[…]\Wow6432Node\[…]\System : EnableLUA (0) -> FOUND
[HJ SMENU] HKCU\[…]\Advanced : Start_ShowMyGames (0) -> FOUND
[HJ SMENU] HKCU\[…]\Advanced : Start_TrackProgs (0) -> FOUND
[HJ DESK] HKLM\[…]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> FOUND
[HJ DESK] HKLM\[…]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> FOUND

¤¤¤ Scheduled tasks : 1 ¤¤¤
[V1][SUSP PATH] CoolYouUpdaterTask{7E368EE7-34E4-4C88-A79B-B87BD181F9B4}.job : C:\ProgramData\CoolYou\CoolYou.exe - /schedule /profilepath "C:\ProgramData\CoolYou\profile.ini" [x][-] -> FOUND

¤¤¤ Startup Entries : 0 ¤¤¤

¤¤¤ Web browsers : 0 ¤¤¤

¤¤¤ Particular Files / Folders: ¤¤¤

¤¤¤ Driver : [NOT LOADED 0x0] ¤¤¤

¤¤¤ External Hives: ¤¤¤

¤¤¤ Infection : ¤¤¤

¤¤¤ HOSTS File: ¤¤¤
–> %SystemRoot%\System32\drivers\etc\hosts




¤¤¤ MBR Check: ¤¤¤

+++++ PhysicalDrive0: ST9250827AS ATA Device +++++
— User —
[MBR] b960ee86cc4d56bbc71f7ded31a3eb8f
[BSP] b201e4b814a6957c0715086e214ec00f : Windows 7/8 MBR Code
Partition table:
0 - [XXXXXX] FAT32-LBA (0x1c) [HIDDEN!] Offset (sectors): 2048 | Size: 10000 Mo
1 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 20482048 | Size: 119237 Mo
2 - [XXXXXX] EXTEN-LBA (0x0f) [VISIBLE] Offset (sectors): 264679424 | Size: 109236 Mo
User = LL1 … OK!
User = LL2 … OK!

Finished : << RKreport[0]_S_07292013_071853.txt >>
Post #14
Hi 2812818,

Steps are outlined in a particular order to best address the malware effecting your computer. Please carry out the steps in the order given.

=========================

I see you have SpeedyPC Software installed. Did you purchase this piece of software?

=========================

1. Re-run RogueKiller

Right click and select "Run as Administrator"
  • Quit all programs
  • Wait until Prescan has finished …
  • Click on Scan.
  • After the scan has completed click on the Registry tab
  • Wait until the Status box shows "Scan Finished"
  • Click the Delete button
  • Wait until the Status box shows "Deleting Finished"
  • Click the Report button, save the report to your desktop
=========================

2. ComboFix Script

  • Close any open browsers.
  • Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
  • Open notepad and copy/paste the text in the code-box below into it:

File::
c:\users\Victor\AppData\Local\Temp\GQB3572.tmp

Folder::
c:\program files (x86)\YTD Toolbar
c:\programdata\YTD Video Downloader

Registry::
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\GarenaPEngine]

Driver::
GarenaPEngine

Save this as CFScript.txt, in the same location as ComboFix.exe

[external image: Posted Image]


Referring to the picture above, drag CFScript into ComboFix.exe

When finished, please post the C:\ComboFix.txt for further review.

=========================

In your next post please provide the following:
  • Answers to my question
  • RKreport.txt
  • ComboFix.txt
  • How is the computer running?
Post #15
Hi there OCD,

I googled the ways to remove virus and i found this SpeedyPC Software. I downloaded it but I think i didn't install on it. I googled about the authenticity of the software and it seems fishy. So I think i didn't installed it but I definitely didn't use it. After running all the things that you've told me, my google chrome cant run and it pop up "registry key marked for deletion ….". But i restarted the computer and currently it is working fine. The computer isn't freezing and the webcam isn't turning on anymore! THANK GOD but first THANK YOU OCD!! You're the best.

Here's the RK report & combofix


RogueKiller V8.6.3 [Jul 17 2013] by Tigzy
mail : tigzyRKgmailcom
Feedback : http://www.adlice.com/forum/
Website : http://www.adlice.com/softwares/roguekiller/
Blog : http://tigzyrk.blogspot.com/

Operating System : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Started in : Normal mode
User : Victor [Admin rights]
Mode : Remove – Date : 07/30/2013 21:06:48
| ARK || FAK || MBR |

¤¤¤ Bad processes : 0 ¤¤¤

¤¤¤ Registry Entries : 15 ¤¤¤
[RUN][SUSP PATH] HKCU\[…]\Run : Auto-Joiner.exe (C:\Users\Victor\Desktop\roomjoiner\Auto-Joiner.exe [-]) -> DELETED
[RUN][SUSP PATH] HKUS\S-1-5-21-1411131432-3712026648-2751386654-1001\[…]\Run : Auto-Joiner.exe (C:\Users\Victor\Desktop\roomjoiner\Auto-Joiner.exe [-]) -> [0x2] The system cannot find the file specified.
[DNS] HKLM\[…]\CCSet\[…]\{9E0C852C-AFD0-4E3F-9006-5524CAB189DB} : NameServer (10.101.0.10,10.101.0.12) -> NOT REMOVED, USE DNSFIX
[DNS] HKLM\[…]\CS001\[…]\{9E0C852C-AFD0-4E3F-9006-5524CAB189DB} : NameServer (10.101.0.10,10.101.0.12) -> NOT REMOVED, USE DNSFIX
[DNS] HKLM\[…]\CS002\[…]\{9E0C852C-AFD0-4E3F-9006-5524CAB189DB} : NameServer (10.101.0.10,10.101.0.12) -> NOT REMOVED, USE DNSFIX
[HJ POL] HKLM\[…]\System : DisableRegistryTools (0) -> DELETED
[HJ POL] HKLM\[…]\System : ConsentPromptBehaviorAdmin (0) -> REPLACED (2)
[HJ POL] HKLM\[…]\System : EnableLUA (0) -> REPLACED (1)
[HJ POL] HKLM\[…]\Wow6432Node\[…]\System : DisableRegistryTools (0) -> [0x2] The system cannot find the file specified.
[HJ POL] HKLM\[…]\Wow6432Node\[…]\System : ConsentPromptBehaviorAdmin (0) -> REPLACED (2)
[HJ POL] HKLM\[…]\Wow6432Node\[…]\System : EnableLUA (0) -> REPLACED (1)
[HJ SMENU] HKCU\[…]\Advanced : Start_ShowMyGames (0) -> REPLACED (1)
[HJ SMENU] HKCU\[…]\Advanced : Start_TrackProgs (0) -> REPLACED (1)
[HJ DESK] HKLM\[…]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> REPLACED (0)
[HJ DESK] HKLM\[…]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> REPLACED (0)

¤¤¤ Scheduled tasks : 0 ¤¤¤

¤¤¤ Startup Entries : 0 ¤¤¤

¤¤¤ Web browsers : 0 ¤¤¤

¤¤¤ Particular Files / Folders: ¤¤¤

¤¤¤ Driver : [NOT LOADED 0x0] ¤¤¤

¤¤¤ External Hives: ¤¤¤

¤¤¤ Infection : ¤¤¤

¤¤¤ HOSTS File: ¤¤¤
–> %SystemRoot%\System32\drivers\etc\hosts


127.0.0.1 localhost


¤¤¤ MBR Check: ¤¤¤

+++++ PhysicalDrive0: ST9250827AS ATA Device +++++
— User —
[MBR] b960ee86cc4d56bbc71f7ded31a3eb8f
[BSP] b201e4b814a6957c0715086e214ec00f : Windows 7/8 MBR Code
Partition table:
0 - [XXXXXX] FAT32-LBA (0x1c) [HIDDEN!] Offset (sectors): 2048 | Size: 10000 Mo
1 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 20482048 | Size: 119237 Mo
2 - [XXXXXX] EXTEN-LBA (0x0f) [VISIBLE] Offset (sectors): 264679424 | Size: 109236 Mo
User = LL1 … OK!
User = LL2 … OK!

Finished : << RKreport[0]_D_07302013_210648.txt >>
RKreport[0]_S_07292013_071853.txt;RKreport[0]_S_07302013_210600.txt



ComboFix 13-07-27.01 - Victor 30/07/2013 21:24:16.2.2 - x64
Microsoft Windows 7 Professional 6.1.7601.1.1252.60.1033.18.4095.2451 [GMT 8:00]
Running from: c:\users\[removed]\Downloads\Programs\ComboFix.exe
Command switches used :: c:\users\Victor\Downloads\Programs\CFScript.txt
AV: Norton 360 *Disabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF}
FW: Norton 360 *Disabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}
SP: Norton 360 *Disabled/Updated* {D8BEB080-B73A-17E3-1B37-B6B462689202}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Created a new restore point
.
FILE ::
"c:\users\Victor\AppData\Local\Temp\GQB3572.tmp"
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\YTD Toolbar
c:\program files (x86)\YTD Toolbar\FF\chrome.manifest
c:\program files (x86)\YTD Toolbar\FF\chrome\chrome.jar
c:\program files (x86)\YTD Toolbar\FF\components\config.ini
c:\program files (x86)\YTD Toolbar\FF\components\ytdToolbarFF.dll
c:\program files (x86)\YTD Toolbar\FF\install.rdf
c:\program files (x86)\YTD Toolbar\IE\7.3\config.ini
c:\program files (x86)\YTD Toolbar\IE\7.3\ytdToolbarIE.dll
c:\program files (x86)\YTD Toolbar\Res\amazon.gif
c:\program files (x86)\YTD Toolbar\Res\dailymotion.gif
c:\program files (x86)\YTD Toolbar\Res\ebay.gif
c:\program files (x86)\YTD Toolbar\Res\facebook.gif
c:\program files (x86)\YTD Toolbar\Res\googleplus.gif
c:\program files (x86)\YTD Toolbar\Res\hulu.gif
c:\program files (x86)\YTD Toolbar\Res\icon_settings.gif
c:\program files (x86)\YTD Toolbar\Res\Lang\res1031.ini
c:\program files (x86)\YTD Toolbar\Res\Lang\res1033.ini
c:\program files (x86)\YTD Toolbar\Res\Lang\res1034.ini
c:\program files (x86)\YTD Toolbar\Res\Lang\res1036.ini
c:\program files (x86)\YTD Toolbar\Res\Lang\res1040.ini
c:\program files (x86)\YTD Toolbar\Res\metacafe.gif
c:\program files (x86)\YTD Toolbar\Res\radio-close.gif
c:\program files (x86)\YTD Toolbar\Res\radio-minimize.gif
c:\program files (x86)\YTD Toolbar\Res\radiobeta.gif
c:\program files (x86)\YTD Toolbar\Res\search-button-hover.gif
c:\program files (x86)\YTD Toolbar\Res\search-button.gif
c:\program files (x86)\YTD Toolbar\Res\search-chevron-hover.gif
c:\program files (x86)\YTD Toolbar\Res\search-chevron.gif
c:\program files (x86)\YTD Toolbar\Res\search_amazon.gif
c:\program files (x86)\YTD Toolbar\Res\search_baidu.gif
c:\program files (x86)\YTD Toolbar\Res\search_ebay.gif
c:\program files (x86)\YTD Toolbar\Res\search_yahoo.gif
c:\program files (x86)\YTD Toolbar\Res\search_yandex.gif
c:\program files (x86)\YTD Toolbar\Res\search_youtube.gif
c:\program files (x86)\YTD Toolbar\Res\twitter.gif
c:\program files (x86)\YTD Toolbar\Res\veoh.gif
c:\program files (x86)\YTD Toolbar\Res\widgets.xml
c:\program files (x86)\YTD Toolbar\Res\youtube.gif
c:\program files (x86)\YTD Toolbar\Res\ytd.gif
c:\program files (x86)\YTD Toolbar\Res\ytd_logo.gif
c:\program files (x86)\YTD Toolbar\Res\ytd_logo_hover.gif
c:\program files (x86)\YTD Toolbar\WidgiHelper.exe
c:\programdata\YTD Video Downloader
c:\programdata\YTD Video Downloader\savedItems.ysi
c:\programdata\YTD Video Downloader\scripts0.yds
.
.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
——-\Service_GarenaPEngine
.
.
((((((((((((((((((((((((( Files Created from 2013-06-28 to 2013-07-30 )))))))))))))))))))))))))))))))
.
.
2013-07-30 13:43 . 2013-07-30 13:43 ——– d—–w- c:\windows\system32\config\systemprofile\AppData\Local\temp
2013-07-30 13:43 . 2013-07-30 13:43 ——– d—–w- c:\users\Default\AppData\Local\temp
2013-07-28 15:12 . 2013-07-28 15:12 ——– d—–w- c:\program files\Realtek
2013-07-28 15:12 . 2013-07-28 15:12 ——– d—–w- c:\windows\SysWow64\RTCOM
2013-07-28 14:09 . 2013-07-28 14:09 ——– d—–w- c:\program files\NVIDIA Corporation
2013-07-28 11:42 . 2013-07-28 11:42 ——– d—–w- c:\users\Victor\AppData\Roaming\DisplayTune
2013-07-28 11:33 . 2007-04-04 02:30 7432 —-a-w- c:\windows\SysWow64\Machnm32.sys
2013-07-28 11:33 . 2013-07-28 11:33 ——– d—–w- c:\program files (x86)\Portrait Displays
2013-07-28 03:57 . 2013-07-28 03:57 ——– d—–w- c:\program files (x86)\Common Files\Java
2013-07-28 03:57 . 2013-07-28 03:56 96168 —-a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2013-07-27 15:54 . 2013-07-27 15:54 ——– d—–w- C:\_OTL
2013-07-25 10:05 . 2013-07-25 10:05 ——– d—–w- c:\users\Victor\AppData\Roaming\SpeedyPC Software
2013-07-25 10:05 . 2013-07-25 10:09 ——– d—–w- c:\programdata\SpeedyPC Software
2013-07-24 23:03 . 2013-07-24 23:03 67632 —-a-w- c:\windows\system32\msln.exe
2013-07-24 14:01 . 2013-07-24 14:01 96856 —-a-w- c:\windows\system32\drivers\SMR322.SYS
2013-07-23 14:59 . 2013-07-23 14:59 ——– d—–w- c:\users\Victor\AppData\Roaming\Malwarebytes
2013-07-23 14:59 . 2013-07-23 14:59 ——– d—–w- c:\programdata\Malwarebytes
2013-07-23 14:59 . 2013-04-04 06:50 25928 —-a-w- c:\windows\system32\drivers\mbam.sys
2013-07-23 14:59 . 2013-07-23 14:59 ——– d—–w- c:\program files (x86)\Malwarebytes' Anti-Malware
2013-07-22 12:08 . 2013-06-23 16:57 78277128 —-a-w- c:\windows\system32\MRT.exe
2013-07-21 10:39 . 2013-07-29 10:29 ——– d—–w- c:\programdata\UEL
2013-07-21 10:39 . 2013-07-29 10:55 ——– d-sh–w- c:\programdata\ICLJIG
2013-07-21 10:13 . 2013-07-21 10:13 ——– d—–w- c:\users\Victor\AppData\Roaming\GrabPro
2013-07-21 09:49 . 2013-07-21 09:49 ——– d—–w- c:\users\Victor\AppData\Roaming\ProgSense
2013-07-21 09:48 . 2013-07-28 11:28 ——– d—–w- c:\program files (x86)\Orbitdownloader
2013-07-21 09:46 . 2013-07-28 11:40 ——– d—–w- c:\users\Victor\AppData\Roaming\Orbit
2013-07-21 09:43 . 2013-07-22 10:55 ——– d—–w- c:\windows\system32\drivers\N360x64\1404000.028
2013-07-18 13:30 . 2013-07-18 13:29 312232 —-a-w- c:\windows\system32\javaws.exe
2013-07-18 13:29 . 2013-07-18 13:29 108968 —-a-w- c:\windows\system32\WindowsAccessBridge-64.dll
2013-07-18 13:29 . 2013-07-18 13:29 189352 —-a-w- c:\windows\system32\javaw.exe
2013-07-18 13:29 . 2013-07-18 13:29 188840 —-a-w- c:\windows\system32\java.exe
2013-07-17 12:57 . 2013-07-17 12:57 ——– d—–w- C:\VS2012_PROJECTTEMPLATES_DIR
2013-07-17 12:57 . 2013-07-17 12:57 ——– d—–w- c:\program files (x86)\Xamarin
2013-07-17 12:57 . 2013-07-17 12:57 ——– d—–w- C:\VS2012_ITEMTEMPLATES_DIR
2013-07-17 12:57 . 2013-07-17 12:57 ——– d—–w- C:\VS2012_EXTENSIONS_DIR
2013-07-17 12:47 . 2013-07-17 12:47 ——– d—–w- c:\programdata\Monodoc
2013-07-17 12:47 . 2013-07-17 12:47 ——– d—–w- c:\program files (x86)\Microsoft Visual Studio 11.0
2013-07-17 12:45 . 2013-07-17 12:45 ——– d—–w- c:\program files (x86)\MonoDevelop
2013-07-17 12:45 . 2013-07-17 12:45 ——– d—–w- c:\program files (x86)\Xamarin Studio
2013-07-17 12:21 . 2013-07-17 12:21 ——– d—–w- c:\program files (x86)\GtkSharp
2013-07-17 12:12 . 2013-07-17 12:12 ——– d—–w- c:\program files\Android
2013-07-17 11:26 . 2013-07-17 13:08 ——– d—–w- c:\programdata\Package Cache
2013-07-17 11:00 . 2013-07-17 11:00 ——– d—–w- c:\users\Victor\AppData\Local\Xamarin
2013-07-02 11:29 . 2013-07-02 11:29 ——– d—–w- c:\programdata\IDM
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-07-28 03:56 . 2012-07-05 02:20 867240 —-a-w- c:\windows\SysWow64\npDeployJava1.dll
2013-07-28 03:56 . 2012-03-15 08:39 789416 —-a-w- c:\windows\SysWow64\deployJava1.dll
2013-07-21 09:45 . 2011-06-10 10:17 177312 —-a-w- c:\windows\system32\drivers\SYMEVENT64x86.SYS
2013-07-18 13:29 . 2012-07-05 07:41 972712 —-a-w- c:\windows\system32\deployJava1.dll
2013-07-18 13:29 . 2012-07-05 07:41 1093032 —-a-w- c:\windows\system32\npDeployJava1.dll
2013-07-17 13:07 . 2013-04-22 12:12 2478336 —-a-w- c:\programdata\Microsoft\VisualStudio\10.0\1033\ResourceCache.dll
2013-06-13 12:44 . 2012-04-10 08:45 692104 —-a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2013-06-13 12:44 . 2011-06-09 15:15 71048 —-a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-06-13 12:44 . 2013-06-13 12:44 9089416 —-a-w- c:\windows\SysWow64\FlashPlayerInstaller.exe
2013-05-14 13:34 . 2011-08-08 03:25 22240 —-a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2011-07-02 17:44 . 2011-07-02 17:44 6452224 —-a-w- c:\program files (x86)\JuzLoader GUI.exe
2011-06-30 18:10 . 2011-06-30 18:10 140800 —-a-w- c:\program files (x86)\juzloader.exe
2011-06-30 13:32 . 2011-06-30 13:32 2700 —-a-w- c:\program files (x86)\juzdotabnet.reg
2011-04-26 13:13 . 2011-04-26 13:13 5073240 —-a-w- c:\program files (x86)\vcredist_x86.exe
2011-03-16 18:21 . 2011-03-16 18:21 68608 —-a-w- c:\program files (x86)\w3lh.dll
2011-03-02 13:37 . 2011-03-02 13:37 325968 —-a-w- c:\program files (x86)\lua5.1.dll
2011-03-02 13:37 . 2011-03-02 13:37 11264 —-a-w- c:\program files (x86)\lua51.dll
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584]
"GarenaPlus"="c:\program files (x86)\Garena Plus\GarenaMessenger.exe" [2013-07-26 9699632]
"IDMan"="c:\program files (x86)\Internet Download Manager\IDMan.exe" [2013-07-21 3565432]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"HControlUser"="c:\program files (x86)\ASUS\ATK Hotkey\HControlUser.exe" [2009-04-01 98304]
"ATKOSD2"="c:\program files (x86)\ASUS\ATKOSD2\ATKOSD2.exe" [2009-07-07 8493624]
"ATKMEDIA"="c:\program files (x86)\ASUS\ATK Media\DMedia.exe" [2009-08-19 170624]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-06-06 937920]
"TkBellExe"="c:\program files (x86)\Real\RealPlayer\update\realsched.exe" [2013-01-16 295072]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-04-21 59720]
"iTunesHelper"="d:\itunes\iTunesHelper.exe" [2013-05-15 152392]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-03-11 253816]
"PivotSoftware"="c:\program files (x86)\Portrait Displays\Pivot Pro Plugin\Pivot_startup.exe" [2010-05-13 110192]
"DT PLP"="c:\program files (x86)\Common Files\Portrait Displays\Shared\DT_startup.exe" [2010-05-17 121456]
.
c:\users\Victor\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
My_AutoWarkey_Script.lnk - c:\program files (x86)\Warkeys\AutoWarkey\AutoHotkey\AutoHotkey.exe ..\My_AutoWarkey_Script.ahk [2009-9-26 245248]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
"Userinit"="c:\windows\system32\userinit.exe"
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ PDBoot.exe\0autocheck autochk *
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [x]
R2 RealNetworks Downloader Resolver Service;RealNetworks Downloader Resolver Service;c:\program files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe;c:\program files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 1394hub;1394 Enabled Hub;c:\windows\System32\svchost.exe;c:\windows\SYSNATIVE\svchost.exe [x]
R3 CoordinatorServiceHost;SW Distributed TS Coordinator Service;c:\program files\SolidWorks Corp\SolidWorks (2)\swScheduler\DTSCoordinatorService.exe;c:\program files\SolidWorks Corp\SolidWorks (2)\swScheduler\DTSCoordinatorService.exe [x]
R3 cpudrv64;cpudrv64;c:\program files (x86)\SystemRequirementsLab\cpudrv64.sys;c:\program files (x86)\SystemRequirementsLab\cpudrv64.sys [x]
R3 EagleX64;EagleX64;c:\windows\system32\drivers\EagleX64.sys;c:\windows\SYSNATIVE\drivers\EagleX64.sys [x]
R3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64;c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe;c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [x]
R3 GDMINIT;GCT Initial Device Driver;c:\windows\system32\DRIVERS\gdminit.sys;c:\windows\SYSNATIVE\DRIVERS\gdminit.sys [x]
R3 GdmUWm;Yes Go;c:\windows\system32\DRIVERS\gdmuwm.sys;c:\windows\SYSNATIVE\DRIVERS\gdmuwm.sys [x]
R3 GGSAFERDriver;GGSAFER Driver;c:\program files (x86)\Garena Plus\Room\safedrv.sys;c:\program files (x86)\Garena Plus\Room\safedrv.sys [x]
R3 ivusb;Initio Driver for USB Default Controller;c:\windows\system32\DRIVERS\ivusb.sys;c:\windows\SYSNATIVE\DRIVERS\ivusb.sys [x]
R3 Mkd2Nadr;Mkd2Nadr;c:\windows\system32\drivers\Mkd2Nadr.sys;c:\windows\SYSNATIVE\drivers\Mkd2Nadr.sys [x]
R3 Mkd3kfNt;Mkd3kfNt;c:\windows\system32\drivers\Mkd3kfNt.sys;c:\windows\SYSNATIVE\drivers\Mkd3kfNt.sys [x]
R3 netw5v64;Intel® Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit;c:\windows\system32\DRIVERS\netw5v64.sys;c:\windows\SYSNATIVE\DRIVERS\netw5v64.sys [x]
R3 taphss6;Anchorfree HSS VPN Adapter;c:\windows\system32\DRIVERS\taphss6.sys;c:\windows\SYSNATIVE\DRIVERS\taphss6.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
R3 VSPerfDrv100;Performance Tools Driver 10.0;c:\program files (x86)\Microsoft Visual Studio 10.0\Team Tools\Performance Tools\x64\VSPerfDrv100.sys;c:\program files (x86)\Microsoft Visual Studio 10.0\Team Tools\Performance Tools\x64\VSPerfDrv100.sys [x]
R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R3 WDC_SAM;WD SCSI Pass Thru driver;c:\windows\system32\DRIVERS\wdcsam64.sys;c:\windows\SYSNATIVE\DRIVERS\wdcsam64.sys [x]
R4 MSSQLServerADHelper100;SQL Active Directory Helper Service;c:\program files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE;c:\program files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE [x]
R4 RsFx0103;RsFx0103 Driver;c:\windows\system32\DRIVERS\RsFx0103.sys;c:\windows\SYSNATIVE\DRIVERS\RsFx0103.sys [x]
R4 SQLAgent$SQLEXPRESS;SQL Server Agent (SQLEXPRESS);c:\program files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE;c:\program files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [x]
S0 SMR322;Symantec SMR Utility Service 3.2.2;c:\windows\System32\drivers\SMR322.SYS;c:\windows\SYSNATIVE\drivers\SMR322.SYS [x]
S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys;c:\windows\SYSNATIVE\Drivers\sptd.sys [x]
S0 SymDS;Symantec Data Store;c:\windows\system32\drivers\N360x64\1404000.028\SYMDS64.SYS;c:\windows\SYSNATIVE\drivers\N360x64\1404000.028\SYMDS64.SYS [x]
S0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\N360x64\1404000.028\SYMEFA64.SYS;c:\windows\SYSNATIVE\drivers\N360x64\1404000.028\SYMEFA64.SYS [x]
S1 BHDrvx64;BHDrvx64;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.4.0.40\Definitions\BASHDefs\20130715.001\BHDrvx64.sys;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.4.0.40\Definitions\BASHDefs\20130715.001\BHDrvx64.sys [x]
S1 ccSet_N360;Norton 360 Settings Manager;c:\windows\system32\drivers\N360x64\1404000.028\ccSetx64.sys;c:\windows\SYSNATIVE\drivers\N360x64\1404000.028\ccSetx64.sys [x]
S1 cnnctfy2;Connectify LightWeight Filter;c:\windows\system32\DRIVERS\cnnctfy2.sys;c:\windows\SYSNATIVE\DRIVERS\cnnctfy2.sys [x]
S1 IDSVia64;IDSVia64;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.4.0.40\Definitions\IPSDefs\20130727.001\IDSvia64.sys;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.4.0.40\Definitions\IPSDefs\20130727.001\IDSvia64.sys [x]
S1 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\N360x64\1404000.028\Ironx64.SYS;c:\windows\SYSNATIVE\drivers\N360x64\1404000.028\Ironx64.SYS [x]
S1 SymNetS;Symantec Network Security WFP Driver;c:\windows\System32\Drivers\N360x64\1404000.028\SYMNETS.SYS;c:\windows\SYSNATIVE\Drivers\N360x64\1404000.028\SYMNETS.SYS [x]
S2 ASMMAP64;ASMMAP64;c:\program files\ATKGFNEX\ASMMAP64.sys;c:\program files\ATKGFNEX\ASMMAP64.sys [x]
S2 bufssvr;bufssvr;c:\program files (x86)\BUFFALO\SLManagerEasy\Bufssvr.exe;c:\program files (x86)\BUFFALO\SLManagerEasy\Bufssvr.exe [x]
S2 Connectify;Connectify;c:\program files (x86)\Connectify\ConnectifyService.exe;c:\program files (x86)\Connectify\ConnectifyService.exe [x]
S2 GCTWiMaxServiceD;Connect Service Daemon;c:\program files (x86)\Yes\Connect\GCTWiMaxServiceD.exe;c:\program files (x86)\Yes\Connect\GCTWiMaxServiceD.exe [x]
S2 GdmWmPrt;Yes Go Protocol Driver;c:\windows\system32\DRIVERS\gdmwmprt.sys;c:\windows\SYSNATIVE\DRIVERS\gdmwmprt.sys [x]
S2 IDMWFP;IDMWFP;c:\windows\system32\DRIVERS\idmwfp.sys;c:\windows\SYSNATIVE\DRIVERS\idmwfp.sys [x]
S2 MBAMScheduler;MBAMScheduler;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [x]
S2 N360;Norton 360;c:\program files (x86)\Norton 360\Engine\20.4.0.40\ccSvcHst.exe;c:\program files (x86)\Norton 360\Engine\20.4.0.40\ccSvcHst.exe [x]
S2 NPF;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys;c:\windows\SYSNATIVE\drivers\npf.sys [x]
S2 PDFSFilter;PDFSFilter;c:\windows\system32\DRIVERS\PDFsFilter.sys;c:\windows\SYSNATIVE\DRIVERS\PDFsFilter.sys [x]
S2 PdiService;Portrait Displays SDK Service;c:\program files (x86)\Common Files\Portrait Displays\Drivers\pdisrvc.exe;c:\program files (x86)\Common Files\Portrait Displays\Drivers\pdisrvc.exe [x]
S2 Skype C2C Service;Skype C2C Service;c:\programdata\Skype\Toolbars\Skype C2C Service\c2c_service.exe;c:\programdata\Skype\Toolbars\Skype C2C Service\c2c_service.exe [x]
S3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
S3 t_mouse.sys;iBall Advanced Mouse;c:\windows\system32\DRIVERS\t_mouse.sys;c:\windows\SYSNATIVE\DRIVERS\t_mouse.sys [x]
.
.
Contents of the 'Scheduled Tasks' folder
.
2013-07-30 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-10 12:44]
.
2013-07-29 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1411131432-3712026648-2751386654-1001Core.job
- c:\users\Victor\AppData\Local\Facebook\Update\FacebookUpdate.exe [2011-10-20 11:52]
.
2013-07-29 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1411131432-3712026648-2751386654-1001UA.job
- c:\users\Victor\AppData\Local\Facebook\Update\FacebookUpdate.exe [2011-10-20 11:52]
.
2013-07-29 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1411131432-3712026648-2751386654-1001Core.job
- c:\users\Victor\AppData\Local\Google\Update\GoogleUpdate.exe [2011-06-09 14:07]
.
2013-07-30 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1411131432-3712026648-2751386654-1001UA.job
- c:\users\Victor\AppData\Local\Google\Update\GoogleUpdate.exe [2011-06-09 14:07]
.
.
——— X64 Entries ———–
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\IDM Shell Extension]
@="{CDC95B92-E27C-4745-A8C5-64A52A78855D}"
[HKEY_CLASSES_ROOT\CLSID\{CDC95B92-E27C-4745-A8C5-64A52A78855D}]
2012-11-15 23:07 23496 —-a-w- c:\program files (x86)\Internet Download Manager\IDMShellExt64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MouseDriver"="TiltWheelMouse.exe" [2010-10-31 241152]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-07-01 16330272]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2013-03-29 13513288]
.
——- Supplementary Scan ——-
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://securityresponse.symantec.com/avcenter/fix_homepage
mLocal Page = c:\windows\system32\blank.htm
uInternet Settings,ProxyOverride = local;*.local
IE: &Download by Orbit - c:\program files (x86)\Orbitdownloader\orbitmxt.dll/201
IE: &Grab video by Orbit - c:\program files (x86)\Orbitdownloader\orbitmxt.dll/204
IE: Do&wnload selected by Orbit - c:\program files (x86)\Orbitdownloader\orbitmxt.dll/203
IE: Down&load all by Orbit - c:\program files (x86)\Orbitdownloader\orbitmxt.dll/202
IE: Download all links with IDM - c:\program files (x86)\Internet Download Manager\IEGetAll.htm
IE: Download with IDM - c:\program files (x86)\Internet Download Manager\IEExt.htm
TCP: DhcpNameServer = 192.168.1.1
TCP: Interfaces\{9E0C852C-AFD0-4E3F-9006-5524CAB189DB}: NameServer = 10.101.0.10,10.101.0.12
TCP: Interfaces\{BAEB82D4-2B9C-445F-BC90-61A667B4EABD}: NameServer = 8.8.8.8,8.8.4.4
FF - ProfilePath - c:\users\Victor\AppData\Roaming\Mozilla\Firefox\Profiles\68rj7rey.default\
FF - prefs.js: browser.search.defaulturl -
FF - prefs.js: browser.startup.homepage - www.google.com
FF - ExtSQL: 2013-06-01 14:38; [removed]; c:\program files (x86)\YTD Toolbar\FF
.
- - - - ORPHANS REMOVED - - - -
.
Toolbar-Locked - (no file)
AddRemove-JuzDotA Full 2.0 - c:\users\Victor\Desktop\Desktop important files\Games\Warcraft 3 (Battlenet).folder\Warcraft 3 (Battlenet)\Warcraft 3\Uninstall.exe
AddRemove-JuzLoader 2.00 - c:\users\Victor\Desktop\Desktop important files\Games\Warcraft 3 (Battlenet).folder\Warcraft 3 (Battlenet)\Warcraft 3\Uninstall.exe
AddRemove-Pdf995 - c:\program files (x86)\pdf995\setup.exe
AddRemove-vShare.tv plugin - c:\program files (x86)\vShare.tv plugin\uninst.exe
AddRemove-{09FF4DB8-7DE9-4D47-B7DB-915DB7D9A8CA} - c:\programdata\{AB2D8F2E-F7AD-4446-A11A-50D846B2CF2A}\bm_installer.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\N360]
"ImagePath"="\"c:\program files (x86)\Norton 360\Engine\20.4.0.40\ccSvcHst.exe\" /s \"N360\" /m \"c:\program files (x86)\Norton 360\Engine\20.4.0.40\diMaster.dll\" /prefetch:1"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\MySQL]
"ImagePath"="\"c:\program files (x86)\Canon\Easy-WebPrint EX\bin\mysqld\" –defaults-file=\"c:\program files (x86)\Canon\Easy-WebPrint EX\my.ini\" MySQL"
.
——————— LOCKED REGISTRY KEYS ———————
.
[HKEY_USERS\S-1-5-21-1411131432-3712026648-2751386654-1001_Classes\Wow6432Node\CLSID\{20f421dc-38fd-46a9-a0ec-6a8c3ef67361}]
@Denied: (Full) (Everyone)
@Allowed: (Read) (RestrictedCode)
"Model"=dword:00000145
"Therad"=dword:00000015
"MData"=hex(0):73,d5,cf,b8,a4,07,89,80,31,e4,35,6b,2a,ca,fe,43,b6,1f,81,1f,5a,
1b,4d,36,46,8f,3c,f2,5c,68,ee,21,46,8f,3c,f2,5c,68,ee,21,46,8f,3c,f2,5c,68,\
.
[HKEY_USERS\S-1-5-21-1411131432-3712026648-2751386654-1001_Classes\Wow6432Node\CLSID\{5ED60779-4DE2-4E07-B862-974CA4FF2E9C}]
@Denied: (Full) (Everyone)
@Allowed: (Read) (RestrictedCode)
"scansk"=hex(0):61,26,15,b8,3b,9c,7a,e8,e5,4a,27,9c,76,4f,06,d8,4c,26,be,f9,9b,
4c,b5,b7,5c,d2,78,22,1a,d0,55,4c,a8,bb,b2,c4,d6,4b,5c,33,00,00,00,00,00,00,\
.
[HKEY_USERS\S-1-5-21-1411131432-3712026648-2751386654-1001_Classes\Wow6432Node\CLSID\{7B8E9164-324D-4A2E-A46D-0165FB2000EC}]
@Denied: (Full) (Everyone)
"scansk"=hex(0):30,d0,e5,a5,53,ca,9d,5b,69,f2,b5,2d,af,04,06,3c,dc,07,34,56,78,
5d,ff,1e,e5,b0,60,c4,5e,e1,50,01,b9,b1,25,28,53,23,e3,50,00,00,00,00,00,00,\
.
[HKEY_USERS\S-1-5-21-1411131432-3712026648-2751386654-1001_Classes\Wow6432Node\CLSID\{f78d65fb-8bf2-4aef-9aa7-e1d269eec9dd}]
@Denied: (Full) (Everyone)
@Allowed: (Read) (RestrictedCode)
"Model"=dword:00000107
"Therad"=dword:0000001e
"MData"=hex(0):2b,8f,78,29,5a,0c,ce,ec,48,d4,68,e5,9f,6a,96,3e,ab,de,c5,81,26,
38,95,44,d8,4e,5f,79,7a,56,a1,25,e6,87,cb,b4,06,a4,1c,54,49,27,e9,4d,34,ac,\
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_7_700_224_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_7_700_224_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_7_700_224_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_7_700_224_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\DbgagD\1*]
"value"="?\06\05\16\0c&\1bj"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
———————— Other Running Processes ————————
.
c:\program files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe
c:\program files\ATKGFNEX\GFNEXSrv.exe
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files (x86)\Xamarin\Bonjour\mDNSResponder.exe
c:\program files (x86)\ASUS\ATK Hotkey\HControl.exe
c:\program files (x86)\Garena Plus\ggdllhost.exe
c:\program files (x86)\BUFFALO\SLManagerEasy\Inputps.exe
c:\program files (x86)\ASUS\ATK Hotkey\Atouch64.exe
c:\program files (x86)\Common Files\Portrait Displays\Shared\DTSRVC.exe
c:\program files (x86)\Connectify\ConnectifyD.exe
c:\program files (x86)\ASUS\ATK Hotkey\ATKOSD.exe
c:\program files (x86)\ASUS\ATK Hotkey\WDC.exe
c:\program files (x86)\Canon\IJPLM\IJPLMSVC.EXE
c:\windows\SysWOW64\lkcitdl.exe
c:\windows\SysWOW64\lkads.exe
c:\windows\SysWOW64\lktsrv.exe
c:\program files (x86)\Canon\Easy-WebPrint EX\bin\mysqld.exe
c:\program files (x86)\National Instruments\Shared\Security\nidmsrv.exe
c:\windows\SysWOW64\nisvcloc.exe
c:\program files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe
.
**************************************************************************
.
Completion time: 2013-07-30 21:56:17 - machine was rebooted
ComboFix-quarantined-files.txt 2013-07-30 13:56
ComboFix2.txt 2013-07-29 11:18
.
Pre-Run: 907,698,176 bytes free
Post-Run: 874,950,656 bytes free
.
- - End Of File - - 426E396FADE9F87618104C60F87820D5
A36C5E4F47E84449FF07ED3517B43A31

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI