FrankEBailey
Topic Starter
Hi folks, today I noticed for the first time that there is a file with what looks like a Korean or Chinese filename sitting in my Windows/System32 folder. I have tried unsuccessfully to delete it using several file unlocking tools but still can't delete it. If I reboot, the file disappears for a few minutes but then shows up again.
I'm worried that it might be the local payload store for a rootkit or other type of malware.
The symptoms I'm having (aside from the presence of the file) is that one of my SQL Server databases keeps getting its log file corrupted. I've used that database for months with no problems and this corruption has happened several times in the past couple of days. It *might* be unrelated, but I thought I'd mention it here in case it's not.
[external image: Posted Image]
I'm running Windows 7 Ultimate (legit from Microsoft).
Here is my OTL log:
OTL logfile created on: 2013/09/02 02:32:10 PM - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Download
64bit- Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00001C09 | Country: South Africa | Language: ENS | Date Format: yyyy/MM/dd
11.98 Gb Total Physical Memory | 7.87 Gb Available Physical Memory | 65.65% Memory free
29.95 Gb Paging File | 26.21 Gb Available in Paging File | 87.51% Paging File free
Paging file location(s): f:\pagefile.sys 18400 18400 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 295.90 Gb Total Space | 35.51 Gb Free Space | 12.00% Space Free | Partition Type: NTFS
Drive D: | 1397.26 Gb Total Space | 28.89 Gb Free Space | 2.07% Space Free | Partition Type: NTFS
Drive F: | 2794.39 Gb Total Space | 12.97 Gb Free Space | 0.46% Space Free | Partition Type: NTFS
Drive H: | 557.34 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
Drive T: | 931.51 Gb Total Space | 11.76 Gb Free Space | 1.26% Space Free | Partition Type: NTFS
Drive Z: | 635.61 Gb Total Space | 42.11 Gb Free Space | 6.62% Space Free | Partition Type: NTFS
Computer Name: REGENESIS | User Name: Frank | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - C:\Download\OTL.exe (OldTimer Tools)
PRC - C:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe (Ellora Assets Corp.)
PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Program Files (x86)\Mozilla Firefox 4\firefox.exe (Mozilla Corporation)
PRC - C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe (TeamViewer GmbH)
PRC - C:\Program Files (x86)\BitTorrent Sync\BTSync.exe (BitTorrent, Inc.)
PRC - C:\Program Files (x86)\Remiew.com\Remote Photo Viewer\WindowsServiceHost.exe (NZA)
PRC - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
PRC - C:\Program Files (x86)\Persits Software\AspEmail\BIN\EmailAgent.exe (Persits Software, Inc.)
PRC - C:\totalcmd\TOTALCMD.EXE (Ghisler Software GmbH)
PRC - C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe (Intel Corporation)
PRC - C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe (Intel Corporation)
PRC - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (Renesas Electronics Corporation)
PRC - C:\Program Files\Logitech\SetPointP\LU\LogitechUpdate.exe (Logitech, Inc.)
PRC - C:\Program Files\Logitech\SetPointP\LU\LULnchr.exe (Logitech, Inc.)
========== Modules (No Company Name) ==========
MOD - C:\Program Files (x86)\Mozilla Firefox 4\mozjs.dll ()
MOD - C:\Program Files\LinkShellExtension\32\RockallDLL.dll ()
========== Services (SafeList) ==========
SRV:64bit: - (SbieSvc) – C:\Program Files\Sandboxie\SbieSvc.exe (Sandboxie Holdings, LLC)
SRV:64bit: - (MySQL56) – C:\Program Files\MySQL\MySQL Server 5.6\bin\mysqld.exe ()
SRV:64bit: - (Serviio) – C:\Program Files\Serviio\bin\ServiioService.exe ()
SRV:64bit: - (NIHardwareService) – C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe (Native Instruments GmbH)
SRV:64bit: - (Intel® PROSet Monitoring Service) – C:\Windows\SysNative\IPROSetMonitor.exe (Intel Corporation)
SRV:64bit: - (LBTServ) – C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe (Logitech, Inc.)
SRV:64bit: - (AppMgmt) – C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
SRV - (FreemakeVideoCapture) – C:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe (Ellora Assets Corp.)
SRV - (AntiVirSchedulerService) – C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG)
SRV - (AntiVirWebService) – C:\Program Files (x86)\Avira\AntiVir Desktop\avwebgrd.exe (Avira Operations GmbH & Co. KG)
SRV - (AntiVirMailService) – C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc.exe (Avira Operations GmbH & Co. KG)
SRV - (AntiVirService) – C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Avira Operations GmbH & Co. KG)
SRV - (MozillaMaintenance) – C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation)
SRV - (TeamViewer8) – C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe (TeamViewer GmbH)
SRV - (TunngleService) – C:\Program Files (x86)\Tunngle\TnglCtrl.exe (Tunngle.net GmbH)
SRV - (SkypeUpdate) – C:\Program Files (x86)\Skype\Updater\Updater.exe (Skype Technologies)
SRV - (AdobeFlashPlayerUpdateSvc) – C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
SRV - (OpenVPNService) – C:\Program Files (x86)\HMA! Pro VPN\bin\openvpnserv.exe (The OpenVPN Project)
SRV - (nvUpdatusService) – C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (NVIDIA Corporation)
SRV - (PnkBstrA) – C:\Windows\SysWOW64\PnkBstrA.exe ()
SRV - (RemotePhotoViewerServiceHost) – C:\Program Files (x86)\Remiew.com\Remote Photo Viewer\WindowsServiceHost.exe (NZA)
SRV - (Stereo Service) – C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
SRV - (Steam Client Service) – C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Valve Corporation)
SRV - (AdobeARMservice) – C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
SRV - (Skype C2C Service) – C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe (Skype Technologies S.A.)
SRV - (clr_optimization_v4.0.30319_32) – C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (Persits Software EmailAgent) – C:\Program Files (x86)\Persits Software\AspEmail\Bin\EmailAgent.exe (Persits Software, Inc.)
SRV - (Desura Install Service) – C:\Program Files (x86)\Common Files\Desura\desura_service.exe (Desura Pty Ltd)
SRV - (afcdpsrv) – C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe (Acronis)
SRV - (UNS) – C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe (Intel Corporation)
SRV - (LMS) – C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe (Intel Corporation)
SRV - (SwitchBoard) – C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
SRV - (npggsvc) – C:\Windows\SysWOW64\GameMon.des (INCA Internet Co., Ltd.)
SRV - (dsNcService) – C:\Program Files (x86)\Juniper Networks\Common Files\dsNcService.exe (Juniper Networks)
SRV - (astcc) – C:\Windows\SysWOW64\ASTSRV.EXE (Nalpeiron Ltd.)
SRV - (HPSLPSVC) – C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL (Hewlett-Packard Co.)
SRV - (AcrSch2Svc) – C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe (Acronis)
SRV - (WAS) – C:\Windows\SysWOW64\inetsrv\iisw3adm.dll (Microsoft Corporation)
SRV - (W3SVC) – C:\Windows\SysWOW64\inetsrv\iisw3adm.dll (Microsoft Corporation)
SRV - (AppHostSvc) – C:\Windows\SysWOW64\inetsrv\apphostsvc.dll (Microsoft Corporation)
SRV - (clr_optimization_v2.0.50727_32) – C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
SRV - (mysql) – c:\xampp\mysql\bin\mysqld-nt.exe ()
SRV - (FileZilla Server) – C:\xampp\FileZillaFTP\FileZilla server.exe (FileZilla Project)
SRV - (MagicTuneEngine) – C:\Program Files (x86)\MagicTune Premium\MagicTuneEngine.exe ()
========== Driver Services (SafeList) ==========
DRV:64bit: - (dg_ssudbus) – C:\Windows\SysNative\drivers\ssudbus.sys (DEVGURU Co., LTD.(www.devguru.co.kr))
DRV:64bit: - (avipbb) – C:\Windows\SysNative\drivers\avipbb.sys (Avira Operations GmbH & Co. KG)
DRV:64bit: - (avgntflt) – C:\Windows\SysNative\drivers\avgntflt.sys (Avira Operations GmbH & Co. KG)
DRV:64bit: - (ssudmdm) – C:\Windows\SysNative\drivers\ssudmdm.sys (DEVGURU Co., LTD.(www.devguru.co.kr))
DRV:64bit: - (SbieDrv) – C:\Program Files\Sandboxie\SbieDrv.sys (Sandboxie Holdings, LLC)
DRV:64bit: - (tap0901) – C:\Windows\SysNative\drivers\tap0901.sys (The OpenVPN Project)
DRV:64bit: - (avkmgr) – C:\Windows\SysNative\drivers\avkmgr.sys (Avira Operations GmbH & Co. KG)
DRV:64bit: - (usb_rndisx) – C:\Windows\SysNative\drivers\usb8023x.sys (Microsoft Corporation)
DRV:64bit: - (USB_RNDIS) – C:\Windows\SysNative\drivers\usb8023.sys (Microsoft Corporation)
DRV:64bit: - (VBoxNetAdp) – C:\Windows\SysNative\drivers\VBoxNetAdp.sys (Oracle Corporation)
DRV:64bit: - (USBAAPL64) – C:\Windows\SysNative\drivers\usbaapl64.sys (Apple, Inc.)
DRV:64bit: - (GEARAspiWDM) – C:\Windows\SysNative\drivers\GEARAspiWDM.sys (GEAR Software Inc.)
DRV:64bit: - (AX88179) – C:\Windows\SysNative\drivers\ax88179_178a.sys (ASIX Electronics Corp.)
DRV:64bit: - (pcouffin) – C:\Windows\SysNative\drivers\pcouffin.sys (VSO Software)
DRV:64bit: - (truecrypt) – C:\Windows\SysNative\drivers\truecrypt.sys (TrueCrypt Foundation)
DRV:64bit: - (AnyDVD) – C:\Windows\SysNative\drivers\AnyDVD.sys (SlySoft, Inc.)
DRV:64bit: - (Fs_Rec) – C:\Windows\SysNative\drivers\fs_rec.sys (Microsoft Corporation)
DRV:64bit: - (PxHlpa64) – C:\Windows\SysNative\drivers\PxHlpa64.sys (Rovi Corporation)
DRV:64bit: - (tbhsd) – C:\Windows\SysNative\drivers\tbhsd.sys (RapidSolution Software AG)
DRV:64bit: - (Netaapl) – C:\Windows\SysNative\drivers\netaapl64.sys (Apple Inc.)
DRV:64bit: - (NVHDA) – C:\Windows\SysNative\drivers\nvhda64v.sys (NVIDIA Corporation)
DRV:64bit: - (AirDisplayMirror) – C:\Windows\SysNative\drivers\AVVideoCardMirror.sys (Windows ® Win 7 DDK provider)
DRV:64bit: - (tapoas) – C:\Windows\SysNative\drivers\tapoas.sys (The OpenVPN Project)
DRV:64bit: - (npf) – C:\Windows\SysNative\drivers\npf.sys (CACE Technologies, Inc.)
DRV:64bit: - (Uim_IM) – C:\Windows\SysNative\drivers\Uim_IMx64.sys (Paragon)
DRV:64bit: - (UimBus) – C:\Windows\SysNative\drivers\uimx64.sys (Windows ® 2000 DDK provider)
DRV:64bit: - (hotcore3) – C:\Windows\SysNative\drivers\hotcore3.sys (Paragon Software Group)
DRV:64bit: - (afcdp) – C:\Windows\SysNative\drivers\afcdp.sys (Acronis)
DRV:64bit: - (tdrpman251) – C:\Windows\SysNative\drivers\tdrpm251.sys (Acronis)
DRV:64bit: - (timounter) – C:\Windows\SysNative\drivers\timntr.sys (Acronis)
DRV:64bit: - (snapman) – C:\Windows\SysNative\drivers\snapman.sys (Acronis)
DRV:64bit: - (ElbyCDIO) – C:\Windows\SysNative\drivers\ElbyCDIO.sys (Elaborate Bytes AG)
DRV:64bit: - (PSSDK42) – C:\Windows\SysNative\drivers\pssdk42.sys (microOLAP Technologies LTD)
DRV:64bit: - (teVirtualMIDI64) – C:\Windows\SysNative\drivers\teVirtualMIDI64.sys (Tobias Erichsen)
DRV:64bit: - (AirDisplay) – C:\Windows\SysNative\drivers\AVVideoCard.sys (Windows ® Win 7 DDK provider)
DRV:64bit: - (MEIx64) – C:\Windows\SysNative\drivers\HECIx64.sys (Intel Corporation)
DRV:64bit: - (e1cexpress) – C:\Windows\SysNative\drivers\e1c62x64.sys (Intel Corporation)
DRV:64bit: - (appliandMP) – C:\Windows\SysNative\drivers\appliand.sys (Applian Technologies Inc.)
DRV:64bit: - (appliand) – C:\Windows\SysNative\drivers\appliand.sys (Applian Technologies Inc.)
DRV:64bit: - (MEMSWEEP2) – C:\Windows\SysNative\54C4.tmp (Sophos Plc)
DRV:64bit: - (epmntdrv) – C:\Windows\SysNative\epmntdrv.sys ()
DRV:64bit: - (EuGdiDrv) – C:\Windows\SysNative\EuGdiDrv.sys ()
DRV:64bit: - (RAMDiskVE) – C:\Windows\SysNative\drivers\RAMDiskVE.sys ()
DRV:64bit: - (nusb3xhc) – C:\Windows\SysNative\drivers\nusb3xhc.sys (Renesas Electronics Corporation)
DRV:64bit: - (nusb3hub) – C:\Windows\SysNative\drivers\nusb3hub.sys (Renesas Electronics Corporation)
DRV:64bit: - (WsAudio_DeviceS(5) – C:\Windows\SysNative\drivers\WsAudio_DeviceS(5).sys (Wondershare)
DRV:64bit: - (WsAudio_DeviceS(4) – C:\Windows\SysNative\drivers\WsAudio_DeviceS(4).sys (Wondershare)
DRV:64bit: - (WsAudio_DeviceS(3) – C:\Windows\SysNative\drivers\WsAudio_DeviceS(3).sys (Wondershare)
DRV:64bit: - (WsAudio_DeviceS(2) – C:\Windows\SysNative\drivers\WsAudio_DeviceS(2).sys (Wondershare)
DRV:64bit: - (WsAudio_DeviceS(1) – C:\Windows\SysNative\drivers\WsAudio_DeviceS(1).sys (Wondershare)
DRV:64bit: - (pwdrvio) – C:\Windows\SysNative\pwdrvio.sys ()
DRV:64bit: - (pwdspio) – C:\Windows\SysNative\pwdspio.sys ()
DRV:64bit: - (RTL8192su) – C:\Windows\SysNative\drivers\RTL8192su.sys (Realtek Semiconductor Corporation )
DRV:64bit: - (netr7364) – C:\Windows\SysNative\drivers\netr7364.sys (Ralink Technology, Corp.)
DRV:64bit: - (atksgt) – C:\Windows\SysNative\drivers\atksgt.sys ()
DRV:64bit: - (lirsgt) – C:\Windows\SysNative\drivers\lirsgt.sys ()
DRV:64bit: - (e1kexpress) – C:\Windows\SysNative\drivers\e1k62x64.sys (Intel Corporation)
DRV:64bit: - (dsNcAdpt) – C:\Windows\SysNative\drivers\dsNcAdpt.sys (Juniper Networks)
DRV:64bit: - (StarOpen) – C:\Windows\SysNative\drivers\StarOpen.sys ()
DRV:64bit: - (LUsbFilt) – C:\Windows\SysNative\drivers\LUsbFilt.sys (Logitech, Inc.)
DRV:64bit: - (LMouFilt) – C:\Windows\SysNative\drivers\LMouFilt.Sys (Logitech, Inc.)
DRV:64bit: - (LHidFilt) – C:\Windows\SysNative\drivers\LHidFilt.Sys (Logitech, Inc.)
DRV:64bit: - (BEHRINGER_2902) – C:\Windows\SysNative\drivers\BUSB2902.sys (BEHRINGER)
DRV:64bit: - (BUSB_AUDIO_WDM) – C:\Windows\SysNative\drivers\busbwdm.sys (BEHRINGER)
DRV:64bit: - (SSPORT) – C:\Windows\SysNative\drivers\SSPORT.SYS (Samsung Electronics)
DRV:64bit: - (DgiVecp) – C:\Windows\SysNative\drivers\DGIVECP.SYS (Samsung Electronics Co., Ltd.)
DRV:64bit: - (USBMULCD) – C:\Windows\SysNative\drivers\CM10664.sys (C-Media Electronics Inc)
DRV:64bit: - (vpcnfltr) – C:\Windows\SysNative\drivers\vpcnfltr.sys (Microsoft Corporation)
DRV:64bit: - (vpcvmm) – C:\Windows\SysNative\drivers\vpcvmm.sys (Microsoft Corporation)
DRV:64bit: - (vpcusb) – C:\Windows\SysNative\drivers\vpcusb.sys (Microsoft Corporation)
DRV:64bit: - (vpcbus) – C:\Windows\SysNative\drivers\vpchbus.sys (Microsoft Corporation)
DRV:64bit: - (tap0901t) – C:\Windows\SysNative\drivers\tap0901t.sys (Tunngle.net)
DRV:64bit: - (xusb21) – C:\Windows\SysNative\drivers\xusb21.sys (Microsoft Corporation)
DRV:64bit: - (amdsata) – C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (amdxata) – C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:64bit: - (amdsbs) – C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (LSI_SAS2) – C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:64bit: - (HpSAMD) – C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (stexstor) – C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:64bit: - (xnacc) – C:\Windows\SysNative\drivers\xnacc.sys (Microsoft Corporation)
DRV:64bit: - (LMouKE) – C:\Windows\SysNative\drivers\LMouKE.Sys (Logitech, Inc.)
DRV:64bit: - (L8042mou) – C:\Windows\SysNative\drivers\L8042mou.Sys (Logitech, Inc.)
DRV:64bit: - (L8042Kbd) – C:\Windows\SysNative\drivers\L8042Kbd.sys (Logitech, Inc.)
DRV:64bit: - (RTL8023x64) – C:\Windows\SysNative\drivers\Rtnic64.sys (Realtek Semiconductor Corporation )
DRV:64bit: - (RTL8167) – C:\Windows\SysNative\drivers\Rt64win7.sys (Realtek Corporation )
DRV:64bit: - (e1express) – C:\Windows\SysNative\drivers\e1e6032e.sys (Intel Corporation)
DRV:64bit: - (ebdrv) – C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) – C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (b57nd60a) – C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (hcw85cir) – C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV:64bit: - (mcdbus) – C:\Windows\SysNative\drivers\mcdbus.sys (MagicISO, Inc.)
DRV:64bit: - (pccsmcfd) – C:\Windows\SysNative\drivers\pccsmcfdx64.sys (Nokia)
DRV:64bit: - (adfs) – C:\Windows\SysNative\drivers\adfs.sys (Adobe Systems, Inc.)
DRV:64bit: - (WDC_SAM) – C:\Windows\SysNative\drivers\wdcsam64.sys (Western Digital Technologies)
DRV:64bit: - (LoopBeMidi1) – C:\Windows\SysNative\drivers\loopbe1.sys (nerds.de)
DRV:64bit: - (SCDEmu) – C:\Windows\SysNative\drivers\scdemu.sys (PowerISO Computing, Inc.)
DRV:64bit: - (RimUsb) – C:\Windows\SysNative\drivers\RimUsb_AMD64.sys (Research In Motion Limited)
DRV:64bit: - (LVUVC64) – C:\Windows\SysNative\drivers\lvuvc64.sys (Logitech Inc.)
DRV:64bit: - (LVUSBS64) – C:\Windows\SysNative\drivers\LVUSBS64.sys (Logitech Inc.)
DRV - (Partizan) – C:\Windows\SysWOW64\drivers\Partizan.sys (Greatis Software)
DRV - (AnyDVD) – C:\Windows\SysWOW64\drivers\AnyDVD.sys (SlySoft, Inc.)
DRV - (Aspi32) – C:\Windows\SysWOW64\drivers\ASPI32.SYS (Adaptec)
DRV - (epmntdrv) – C:\Windows\SysWOW64\epmntdrv.sys ()
DRV - (EuGdiDrv) – C:\Windows\SysWOW64\EuGdiDrv.sys ()
DRV - (StarOpen) – C:\Windows\SysWow64\drivers\StarOpen.sys ()
DRV - (WIMMount) – C:\Windows\SysWOW64\drivers\wimmount.sys (Microsoft Corporation)
DRV - (mcdbus) – C:\Windows\SysWOW64\drivers\mcdbus.sys (MagicISO, Inc.)
DRV - (Cardex) – C:\Windows\SysWOW64\drivers\TBPanelx64.sys (Windows ® Server 2003 DDK provider)
DRV - (NPPTNT2) – C:\Windows\SysWOW64\npptNT2.sys (INCA Internet Co., Ltd.)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM;=IE8SRC
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM;=IE8SRC
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://howzit.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-ZA
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 20 8C 10 3B AD 81 CB 01 [binary data]
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}…amp;FORM=IE8SRC
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local;
========== FireFox ==========
FF - prefs.js..browser.search.defaultengine: "Google"
FF - prefs.js..browser.search.order.1: "Ask.com"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "file:///C:/Personal/Search/stickwiki-0.04.html"
FF - prefs.js..extensions.enabledAddons: faviconinserter%40sonco.com:1.3
FF - prefs.js..extensions.enabledAddons: netvideohunter%40netvideohunter.com:1.9.5
FF - prefs.js..extensions.enabledAddons: %7B6AC85730-7D0F-4de0-B3FA-21142DD85326%7D:2.8
FF - prefs.js..extensions.enabledAddons: %7BD4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389%7D:0.9.10
FF - prefs.js..extensions.enabledAddons: bookmarkfaviconchanger%40sonthakit:1.74
FF - prefs.js..extensions.enabledAddons: %7BDDC359D1-844A-42a7-9AA1-88A850A938A8%7D:2.0.16
FF - prefs.js..extensions.enabledAddons: %7Bc45c406e-ab73-11d8-be73-000a95be3b12%7D:1.2.5
FF - prefs.js..extensions.enabledAddons: flatbm%40xuldev.org:1.9.1
FF - prefs.js..extensions.enabledAddons: ALone-live%40ya.ru:1.4.4
FF - prefs.js..extensions.enabledAddons: %7B575cbcb9-3b7e-493a-b001-886b3ae793b5%7D:3.2.1
FF - prefs.js..extensions.enabledAddons: %7B0b457cAA-602d-484a-8fe7-c1d894a011ba%7D:0.98.40
FF - prefs.js..extensions.enabledAddons: %7Be4a8a97b-f2ed-450b-b12d-ee082ba24781%7D:1.11
FF - prefs.js..extensions.enabledAddons: %7B37fa1426-b82d-11db-8314-0800200c9a66%7D:3.3.4
FF - prefs.js..extensions.enabledAddons: %7BE6C1199F-E687-42da-8C24-E7770CC3AE66%7D:[removed]
FF - prefs.js..extensions.enabledAddons: %7Bdc572301-7619-498c-a57d-39143191b318%7D:0.4.1.1pre.130821a
FF - prefs.js..extensions.enabledAddons: autoauth%40efinke.com:2.1
FF - prefs.js..extensions.enabledAddons: secureLogin%40blueimp.net:1.0.3
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:23.0.1
FF - prefs.js..extensions.enabledItems: [removed]:1.0.0.723
FF - prefs.js..extensions.enabledItems: {BF735C65-A40F-424F-B791-AA1798610028}:1.9.1
FF - prefs.js..extensions.enabledItems: [removed]:1.6.2
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.3
FF - prefs.js..extensions.enabledItems: {dc572301-7619-498c-a57d-39143191b318}:0.3.8.5
FF - prefs.js..extensions.enabledItems: {DDC359D1-844A-42a7-9AA1-88A850A938A8}:2.0.2
FF - prefs.js..extensions.enabledItems: [removed]:1.7
FF - prefs.js..extensions.enabledItems: {e4a8a97b-f2ed-450b-b12d-ee082ba24781}:0.9.1
FF - prefs.js..extensions.enabledItems: [removed]:2.1.0.1
FF - prefs.js..extensions.enabledItems: {D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}:0.9.8
FF - prefs.js..extensions.enabledItems: {0b457cAA-602d-484a-8fe7-c1d894a011ba}:0.89
FF - prefs.js..extensions.enabledItems: [removed]:1.5.1
FF - prefs.js..extensions.enabledItems: {b8d51471-15f1-46cd-a600-448a6b103c2d}:1.5.9
FF - prefs.js..extensions.enabledItems: [removed]:1.7
FF - prefs.js..extensions.enabledItems: {c45c406e-ab73-11d8-be73-000a95be3b12}:1.1.9
FF - prefs.js..extensions.enabledItems: [removed]:1.1.7
FF - prefs.js..extensions.enabledItems: {8620c15f-30dc-4dba-a131-7c5d20cf4a29}:3.1.6
FF - prefs.js..extensions.enabledItems: {d650973c-0444-4ac7-9d00-19e3613c83b9}:3.6.7
FF - prefs.js..network.proxy.autoconfig_url: "data:text/javascript,function%20FindProxyForURL(url%2C%20host)%20%7Bif%20(host%20%3D%3D%20'www.pandora.com'%20%7C%7C%20url.indexOf('vevo.com')%20!%3D%20-1%20%7C%7C%20url.indexOf('.brightcove.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fsongza.com*')%20%7C%7C%20host%20%3D%3D%20's.hulu.com'%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.crunchyroll.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.funimation.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fsecure.funimation.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fwww.daisuki.net*')%20%7C%7C%20url.indexOf('southparkstudios.com')%20!%3D%20-1%20%7C%7C%20url.indexOf('discoverymedia.com')%20!%3D%20-1%20%7C%7C%20(url.indexOf('proxmate%3Dactive')%20!%3D%20-1%20%26%26%20url.indexOf('amazonaws.com')%20%3D%3D%20-1)%20%7C%7C%20(url.indexOf('proxmate%3Dus')%20!%3D%20-1)%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.iheart.com*')%20%7C%7C%20(url.indexOf('turntable.fm')%20!%3D%20-1%20%26%26%20url.indexOf('static.turntable.fm')%20%3D%3D%20-1%20%26%26%20url.indexOf('s3.amazonaws.com')%20%3D%3D%20-1%20%26%26%20url.indexOf('ping.chartbeat.net')%20%3D%3D%20-1)%20%7C%7C%20url.indexOf('play.google.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.rdio.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fgrooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fretro.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.mtv.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fmedia.mtvnservices.com*'))%20%7B%20return%20'PROXY%20ab-us09.personalitycores.com%3A8000%3B%20PROXY%20ab-us18.personalitycores.com%3A8000%3B%20PROXY%20ab-us08.personalitycores.com%3A8000%3B%20PROXY%20ab-us10.personalitycores.com%3A8000%3B%20PROXY%20ab-us12.personalitycores.com%3A8000%3B%20PROXY%20ab-us11.personalitycores.com%3A8000%3B%20PROXY%20ab-us16.personalitycores.com%3A8000%3B%20PROXY%20ab-us02.personalitycores.com%3A8000%3B%20PROXY%20ab-us03.personalitycores.com%3A8000%3B%20PROXY%20ab-us17.personalitycores.com%3A8000%3B%20PROXY%20ab-us07.personalitycores.com%3A8000%3B%20PROXY%20ab-us15.personalitycores.com%3A8000%3B%20PROXY%20ab-us01.personalitycores.com%3A8000%3B%20PROXY%20ab-us14.personalitycores.com%3A8000%3B%20PROXY%20ab-us13.personalitycores.com%3A8000'%3B%7D%20%20else%20%7B%20return%20'DIRECT'%3B%20%7D%7D"
FF - prefs.js..network.proxy.backup.gopher: ""
FF - prefs.js..network.proxy.backup.gopher_port: 0
FF - prefs.js..network.proxy.ftp: "[removed]"
FF - prefs.js..network.proxy.ftp_port: 3128
FF - prefs.js..network.proxy.gopher: "localhost"
FF - prefs.js..network.proxy.gopher_port: 4001
FF - prefs.js..network.proxy.http: "127.0.0.1"
FF - prefs.js..network.proxy.http_port: 4444
FF - prefs.js..network.proxy.no_proxies_on: "*.local,127.0.0.1"
FF - prefs.js..network.proxy.socks: "[removed]"
FF - prefs.js..network.proxy.socks_port: 3128
FF - prefs.js..network.proxy.ssl: "127.0.0.1"
FF - prefs.js..network.proxy.ssl_port: 4445
FF - prefs.js..network.proxy.type: 2
FF - user.js - File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_202.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.5.0: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.5.0: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\adobe.com/AdobeAAMDetect: C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_202.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf: File not found
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@idsoftware.com/QuakeLive: C:\ProgramData\id Software\QuakeLive\npquakezero.dll (id Software Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.21.2: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.21.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3505.0912: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.0: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKLM\Software\MozillaPlugins\adobe.com/AdobeAAMDetect: C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/GoogleTalkPlugin: C:\Users\Frank\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/O1DPlugin: C:\Users\Frank\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/O3DPlugin: C:\Users\Frank\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Frank\AppData\Local\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Frank\AppData\Local\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\Frank\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF - HKCU\Software\MozillaPlugins\@us-w1.rockmelt.com/RockMelt Update;version=8: C:\Users\Frank\AppData\Local\RockMelt\Update\1.2.189.1\npRockMeltOneClick8.dll (RockMelt Inc.)
FF - HKCU\Software\MozillaPlugins\amazon.com/AmazonMP3DownloaderPlugin: C:\Users\Frank\AppData\Local\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10181.dll (Amazon.com, Inc.)
FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKCU\Software\MozillaPlugins\ubisoft.com/uplaypc: C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll (Ubisoft)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[removed]: C:\Program Files (x86)\Nokia\Nokia PC Suite 7\bkmrksync\ [2010/01/03 18:37:35 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{BF735C65-A40F-424F-B791-AA1798610028}: C:\Users\Frank\AppData\Local\{BF735C65-A40F-424F-B791-AA1798610028}\ [2010/07/19 17:37:37 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2011/07/08 16:30:55 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[removed]: C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\[removed]\ [2013/08/27 10:15:43 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[removed]: C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\[removed]\ [2013/08/27 10:15:43 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 23.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox 4\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 23.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox 4\plugins [2013/08/17 11:54:26 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.16\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox 3\components [2011/03/23 16:51:22 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.16\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox 3\plugins [2013/01/28 20:00:47 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 4.0b9\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox 4.0 Beta 9\components [2011/01/21 11:22:58 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 4.0b9\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox 4.0 Beta 9\plugins [2013/01/28 20:00:47 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 15.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2012/06/28 16:11:46 | 000,000,000 | —D | M]
[2011/01/15 11:05:54 | 000,000,000 | —D | M] (No name found) – C:\Users\Frank\AppData\Roaming\Mozilla\Extensions
[2010/07/25 19:37:00 | 000,000,000 | —D | M] (No name found) – C:\Users\Frank\AppData\Roaming\Mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}
[2010/01/29 08:14:10 | 000,000,000 | —D | M] (No name found) – C:\Users\Frank\AppData\Roaming\Mozilla\Extensions\[removed]
[2010/04/28 12:59:52 | 000,000,000 | —D | M] (No name found) – C:\Users\Frank\AppData\Roaming\Mozilla\Extensions\[removed]
[2013/07/21 22:00:25 | 000,000,000 | —D | M] (No name found) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\fp4ctrw3.SPEEDTEST\extensions
[2011/01/17 10:36:46 | 000,000,000 | —D | M] (No name found) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\p017310x.BACKEDUP\extensions
[2011/01/17 10:36:44 | 000,000,000 | —D | M] (FireShot) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\p017310x.BACKEDUP\extensions\{0b457cAA-602d-484a-8fe7-c1d894a011ba}
[2011/01/17 10:36:44 | 000,000,000 | —D | M] (Remove It Permanently) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\p017310x.BACKEDUP\extensions\{1dbc4a33-ea62-4330-966c-7bdad3455322}
[2011/01/17 10:36:44 | 000,000,000 | —D | M] (Favicon Picker 3) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\p017310x.BACKEDUP\extensions\{446c03e0-2c35-11db-a98b-0800200c9a67}
[2011/01/17 10:36:44 | 000,000,000 | —D | M] (CacheViewer) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\p017310x.BACKEDUP\extensions\{71328583-3CA7-4809-B4BA-570A85818FBB}
[2011/01/17 10:36:44 | 000,000,000 | —D | M] (CacheViewer) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\p017310x.BACKEDUP\extensions\{71328583-3CA7-4809-B4BA-570A85818FBB}(2)
[2011/01/17 10:36:44 | 000,000,000 | —D | M] (XPath Checker) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\p017310x.BACKEDUP\extensions\{7eb3f691-25b4-4a85-9038-9e57e2bcd537}
[2011/01/17 10:36:45 | 000,000,000 | —D | M] (Mozilla Archive Format) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\p017310x.BACKEDUP\extensions\{7f57cf46-4467-4c2d-adfa-0cba7c507e54}
[2011/01/17 10:36:45 | 000,000,000 | —D | M] (Nightly Tester Tools) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\p017310x.BACKEDUP\extensions\{8620c15f-30dc-4dba-a131-7c5d20cf4a29}
[2011/01/17 10:36:45 | 000,000,000 | —D | M] (RSFind! Mod) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\p017310x.BACKEDUP\extensions\{b8d51471-15f1-46cd-a600-448a6b103c2d}
[2011/01/17 10:36:45 | 000,000,000 | —D | M] (Adblock Plus) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\p017310x.BACKEDUP\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
[2011/01/17 10:36:45 | 000,000,000 | —D | M] (Download Statusbar) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\p017310x.BACKEDUP\extensions\{D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}
[2011/01/17 10:36:45 | 000,000,000 | —D | M] (Whitehart) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\p017310x.BACKEDUP\extensions\{d650973c-0444-4ac7-9d00-19e3613c83b9}
[2011/01/17 10:36:45 | 000,000,000 | —D | M] ("Tab Mix Plus") – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\p017310x.BACKEDUP\extensions\{dc572301-7619-498c-a57d-39143191b318}
[2011/01/17 10:36:46 | 000,000,000 | —D | M] (DownThemAll!) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\p017310x.BACKEDUP\extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}
[2011/01/17 10:36:46 | 000,000,000 | —D | M] (Greasemonkey) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\p017310x.BACKEDUP\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
[2011/01/17 10:36:46 | 000,000,000 | —D | M] (UnMHT) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\p017310x.BACKEDUP\extensions\{f759ca51-3a91-4dd1-ae78-9db5eee9ebf0}
[2011/01/17 10:36:46 | 000,000,000 | —D | M] (CustomizeGoogle) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\p017310x.BACKEDUP\extensions\{fce36c1e-58d8-498a-b2a5-66ad1cedebbb}
[2011/01/17 10:36:44 | 000,000,000 | —D | M] (Firebug) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\p017310x.BACKEDUP\extensions\[removed]
[2011/01/17 10:36:44 | 000,000,000 | —D | M] ("NetVideoHunter") – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\p017310x.BACKEDUP\extensions\[removed]
[2011/01/17 10:36:44 | 000,000,000 | —D | M] (No name found) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\p017310x.BACKEDUP\extensions\nostmp
[2011/01/17 10:36:44 | 000,000,000 | —D | M] (QuickDrag) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\p017310x.BACKEDUP\extensions\[removed]
[2011/01/17 10:36:44 | 000,000,000 | —D | M] (Smart Bookmarks Bar) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\p017310x.BACKEDUP\extensions\[removed]
[2013/05/25 13:18:10 | 000,000,000 | —D | M] (No name found) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\s8ka8kfp.FrankE\extensions
[2010/01/02 17:31:56 | 000,000,000 | —D | M] (FireShot) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\s8ka8kfp.FrankE\extensions\{0b457cAA-602d-484a-8fe7-c1d894a011ba}
[2010/01/02 17:31:56 | 000,000,000 | —D | M] (Favicon Picker 3) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\s8ka8kfp.FrankE\extensions\{446c03e0-2c35-11db-a98b-0800200c9a67}
[2010/01/02 17:31:57 | 000,000,000 | —D | M] (FoxyTunes) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\s8ka8kfp.FrankE\extensions\{463F6CA5-EE3C-4be1-B7E6-7FEE11953374}
[2010/01/02 17:31:57 | 000,000,000 | —D | M] (FEBE) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\s8ka8kfp.FrankE\extensions\{4BBDD651-70CF-4821-84F8-2B918CF89CA3}
[2010/01/02 17:31:57 | 000,000,000 | —D | M] (CacheViewer) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\s8ka8kfp.FrankE\extensions\{71328583-3CA7-4809-B4BA-570A85818FBB}(2)
[2010/01/02 17:31:57 | 000,000,000 | —D | M] ("XPath Checker") – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\s8ka8kfp.FrankE\extensions\{7eb3f691-25b4-4a85-9038-9e57e2bcd537}
[2010/01/02 17:32:00 | 000,000,000 | —D | M] (Mozilla Archive Format) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\s8ka8kfp.FrankE\extensions\{7f57cf46-4467-4c2d-adfa-0cba7c507e54}
[2010/01/02 17:32:00 | 000,000,000 | —D | M] (Nightly Tester Tools) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\s8ka8kfp.FrankE\extensions\{8620c15f-30dc-4dba-a131-7c5d20cf4a29}
[2011/01/06 15:18:14 | 000,000,000 | —D | M] ("DVDVideoSoft Menu") – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\s8ka8kfp.FrankE\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
[2010/01/02 17:32:00 | 000,000,000 | —D | M] (No name found) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\s8ka8kfp.FrankE\extensions\{B13721C7-F507-4982-B2E5-502A71474FED}
[2010/01/02 17:32:01 | 000,000,000 | —D | M] (Adblock Plus) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\s8ka8kfp.FrankE\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
[2010/01/02 17:32:04 | 000,000,000 | —D | M] (Classic Compact) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\s8ka8kfp.FrankE\extensions\{D46E8522-6E86-44b1-A622-58C0668AD78E}
[2010/01/02 17:32:05 | 000,000,000 | —D | M] (Download Statusbar) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\s8ka8kfp.FrankE\extensions\{D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}
[2010/01/02 17:32:05 | 000,000,000 | —D | M] (Whitehart) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\s8ka8kfp.FrankE\extensions\{d650973c-0444-4ac7-9d00-19e3613c83b9}
[2010/01/02 17:32:05 | 000,000,000 | —D | M] ("Tab Mix Plus") – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\s8ka8kfp.FrankE\extensions\{dc572301-7619-498c-a57d-39143191b318}
[2010/01/02 17:32:06 | 000,000,000 | —D | M] (DownThemAll!) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\s8ka8kfp.FrankE\extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}
[2010/01/02 17:32:08 | 000,000,000 | —D | M] (Greasemonkey) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\s8ka8kfp.FrankE\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
[2010/01/02 17:32:09 | 000,000,000 | —D | M] (UnMHT) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\s8ka8kfp.FrankE\extensions\{f759ca51-3a91-4dd1-ae78-9db5eee9ebf0}
[2010/01/02 17:32:09 | 000,000,000 | —D | M] (CustomizeGoogle) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\s8ka8kfp.FrankE\extensions\{fce36c1e-58d8-498a-b2a5-66ad1cedebbb}
[2010/01/02 17:31:48 | 000,000,000 | —D | M] ("Aardvark") – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\s8ka8kfp.FrankE\extensions\[removed]
[2010/01/02 17:31:48 | 000,000,000 | —D | M] () – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\s8ka8kfp.FrankE\extensions\[removed]
[2010/01/02 17:31:51 | 000,000,000 | —D | M] (Firebug) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\s8ka8kfp.FrankE\extensions\[removed]
[2010/01/02 17:31:55 | 000,000,000 | —D | M] (FoxyProxy Standard) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\s8ka8kfp.FrankE\extensions\[removed]
[2010/01/02 17:31:55 | 000,000,000 | —D | M] (GameTap) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\s8ka8kfp.FrankE\extensions\[removed]
[2010/01/02 17:31:55 | 000,000,000 | —D | M] (Twitbin) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\s8ka8kfp.FrankE\extensions\[removed]
[2010/01/02 17:31:55 | 000,000,000 | —D | M] (QuickDrag) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\s8ka8kfp.FrankE\extensions\[removed]
[2010/01/02 17:31:56 | 000,000,000 | —D | M] (RSFind!) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\s8ka8kfp.FrankE\extensions\[removed]
[2010/01/02 17:31:56 | 000,000,000 | —D | M] (SkipScreen) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\s8ka8kfp.FrankE\extensions\SkipScreen@SkipScreen
[2010/01/02 17:31:56 | 000,000,000 | —D | M] (Smart Bookmarks Bar) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\s8ka8kfp.FrankE\extensions\[removed]
[2010/01/02 17:31:56 | 000,000,000 | —D | M] ("TwittyTunes") – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\s8ka8kfp.FrankE\extensions\[removed]
[2010/01/02 17:31:56 | 000,000,000 | —D | M] ("XML Developer Toolbar") – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\s8ka8kfp.FrankE\extensions\[removed]
[2010/01/02 17:32:04 | 000,000,000 | —D | M] (No name found) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\s8ka8kfp.FrankE\extensions\{D46E8522-6E86-44b1-A622-58C0668AD78E}\chrome\mozapps\extensions
[2013/08/30 13:15:21 | 000,000,000 | —D | M] (No name found) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\extensions
[2013/08/07 16:27:11 | 000,000,000 | —D | M] (FireShot) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\extensions\{0b457cAA-602d-484a-8fe7-c1d894a011ba}
[2013/07/03 17:27:39 | 000,000,000 | —D | M] (Remove It Permanently) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\extensions\{1dbc4a33-ea62-4330-966c-7bdad3455322}
[2012/07/19 12:55:54 | 000,000,000 | —D | M] (8 Ultimo) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\extensions\{2b6788a0-0ccd-11e1-be50-0800200c9a66}
[2012/08/11 12:25:40 | 000,000,000 | —D | M] (FT Evo) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\extensions\{5c8c1470-d247-11e0-9572-0800200c9a66}
[2012/08/04 13:04:03 | 000,000,000 | —D | M] (ColorZilla) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\extensions\{6AC85730-7D0F-4de0-B3FA-21142DD85326}
[2013/07/05 21:35:58 | 000,000,000 | —D | M] (FT DeepDark) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\extensions\{77d2ed30-4cd2-11e0-b8af-0800200c9a66}
[2013/07/21 22:14:01 | 000,000,000 | —D | M] (Roomy Bookmarks Toolbar) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\extensions\[removed]
[2012/07/20 13:12:30 | 000,000,000 | —D | M] (Favicon Inserter) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\extensions\[removed]
[2012/10/25 07:32:04 | 000,000,000 | —D | M] ("NetVideoHunter") – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\extensions\[removed]
[2013/07/21 22:00:25 | 000,818,491 | —- | M] () (No name found) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\fp4ctrw3.SPEEDTEST\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
[2008/03/29 11:44:18 | 000,001,417 | —- | M] () (No name found) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\s8ka8kfp.FrankE\extensions\{D46E8522-6E86-44b1-A622-58C0668AD78E}\chrome\mozapps\xpinstall\xpinstallConfirm.css
[2008/03/20 21:23:42 | 000,001,423 | —- | M] () (No name found) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\s8ka8kfp.FrankE\extensions\{D46E8522-6E86-44b1-A622-58C0668AD78E}\chrome\mozapps\xpinstall\xpinstallItemGeneric.png
[2013/08/26 12:55:45 | 000,016,325 | —- | M] () (No name found) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\extensions\[removed]
[2013/02/19 09:34:07 | 000,098,969 | —- | M] () (No name found) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\extensions\[removed]
[2013/01/22 22:13:58 | 000,008,875 | —- | M] () (No name found) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\extensions\[removed]
[2013/08/22 13:15:27 | 002,290,227 | —- | M] () (No name found) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\extensions\[removed]
[2013/06/15 18:36:50 | 000,084,697 | —- | M] () (No name found) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\extensions\[removed]
[2013/08/30 13:15:21 | 000,377,144 | —- | M] () (No name found) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\extensions\[removed]
[2012/10/11 15:41:08 | 000,401,328 | —- | M] () (No name found) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\extensions\[removed]
[2013/08/27 17:56:10 | 000,083,379 | —- | M] () (No name found) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\extensions\[removed]
[2013/08/15 08:10:37 | 000,216,989 | —- | M] () (No name found) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\extensions\{37fa1426-b82d-11db-8314-0800200c9a66}.xpi
[2013/07/25 10:20:16 | 000,331,279 | —- | M] () (No name found) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\extensions\{575cbcb9-3b7e-493a-b001-886b3ae793b5}.xpi
[2013/08/02 22:20:26 | 000,224,035 | —- | M] () (No name found) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\extensions\{c0c9a2c7-2e5c-4447-bc53-97718bc91e1b}.xpi
[2013/05/10 07:45:27 | 001,360,435 | —- | M] () (No name found) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\extensions\{c45c406e-ab73-11d8-be73-000a95be3b12}.xpi
[2013/07/31 22:20:43 | 000,824,302 | —- | M] () (No name found) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
[2011/10/30 23:26:46 | 000,434,392 | —- | M] () (No name found) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\extensions\{D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}.xpi
[2013/08/22 16:55:36 | 000,814,349 | —- | M] () (No name found) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\extensions\{dc572301-7619-498c-a57d-39143191b318}.xpi
[2013/04/07 08:00:32 | 000,714,654 | —- | M] () (No name found) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi
[2013/08/07 16:27:10 | 000,275,449 | —- | M] () (No name found) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi
[2013/08/18 13:31:01 | 000,018,509 | —- | M] () (No name found) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\extensions\{E6C1199F-E687-42da-8C24-E7770CC3AE66}.xpi
[2013/06/12 21:30:49 | 000,402,344 | —- | M] () (No name found) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\extensions\{f759ca51-3a91-4dd1-ae78-9db5eee9ebf0}.xpi
[2012/09/08 16:59:01 | 000,002,277 | —- | M] () – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\searchplugins\bing-images.xml
[2011/05/12 22:13:13 | 000,002,380 | —- | M] () – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\searchplugins\deviantart.xml
[2013/02/12 13:04:22 | 000,000,957 | —- | M] () – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\searchplugins\dictionarycom.xml
[2013/02/12 13:04:22 | 000,000,873 | —- | M] () – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\searchplugins\digg.xml
[2013/05/23 10:52:35 | 000,005,998 | —- | M] () – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\searchplugins\discogs.xml
[2012/12/03 01:06:06 | 000,001,018 | —- | M] () – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\searchplugins\facebook.xml
[2011/03/31 23:37:44 | 000,001,820 | —- | M] () – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\searchplugins\flickr-search-suggestions.xml
[2011/03/31 23:37:32 | 000,001,899 | —- | M] () – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\searchplugins\flickr-tags.xml
[2013/02/12 13:04:22 | 000,001,747 | —- | M] () – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\searchplugins\google-blogs.xml
[2013/02/12 13:04:22 | 000,001,749 | —- | M] () – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\searchplugins\google-books.xml
[2013/02/12 13:04:22 | 000,001,759 | —- | M] () – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\searchplugins\google-directory.xml
[2013/02/12 13:04:22 | 000,001,666 | —- | M] () – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\searchplugins\google-finance.xml
[2013/02/12 13:04:22 | 000,001,755 | —- | M] () – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\searchplugins\google-groups.xml
[2011/01/16 10:23:53 | 000,004,855 | —- | M] () – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\searchplugins\google-images.xml
[2013/02/12 13:04:22 | 000,001,705 | —- | M] () – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\searchplugins\google-maps.xml
[2013/02/12 13:04:22 | 000,001,730 | —- | M] () – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\searchplugins\google-news.xml
[2013/02/12 13:04:22 | 000,001,666 | —- | M] () – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\searchplugins\google-products.xml
[2013/02/12 13:04:22 | 000,001,713 | —- | M] () – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\searchplugins\google-scholar.xml
[2013/02/12 13:04:22 | 000,001,663 | —- | M] () – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\searchplugins\google-trends.xml
[2013/02/12 13:04:22 | 000,001,733 | —- | M] () – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\searchplugins\google-video.xml
[2013/02/12 13:04:22 | 000,000,709 | —- | M] () – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\searchplugins\imdb.xml
[2013/02/12 13:04:22 | 000,001,473 | —- | M] () – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\searchplugins\longman-english-dictionary.xml
[2013/02/12 13:04:22 | 000,000,914 | —- | M] () – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\searchplugins\thesauruscom.xml
[2011/01/16 21:27:26 | 000,004,140 | —- | M] () – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\searchplugins\youtube.xml
========== Chrome ==========
CHR - homepage: http://www.ask.com/?l=dis&o;=14597cr
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{g
oogle:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:ins
tantExtendedEnabledParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q;={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyPar
ameter}
CHR - homepage:
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Users\Frank\AppData\Local\Google\Chrome\Application\28.0.1500.63\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\Frank\AppData\Local\Google\Chrome\Application\28.0.1500.63\pdf.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Frank\AppData\Local\Google\Chrome\Application\28.0.1500.63\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll
CHR - plugin: FileServe Manager (Enabled) = C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\fpgkjhpjldibdbbppfcabadmpfenkdfe\1.0.0.3024\FSChromeAddOn.dll
CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Browser\nppdf32.dll
CHR - plugin: Java Deployment Toolkit 6.0.240.7 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll
CHR - plugin: Java™ Platform SE 6 U24 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll
CHR - plugin: Microsoft\u00AE Windows Media Player Firefox Plugin (Enabled) = C:\Program Files (x86)\Mozilla Firefox 3\plugins\np-mswmp.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\Mozilla Firefox 3\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\Mozilla Firefox 3\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\Mozilla Firefox 3\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\Mozilla Firefox 3\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\Mozilla Firefox 3\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\Mozilla Firefox 3\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\Mozilla Firefox 3\plugins\npqtplugin7.dll
CHR - plugin: Winamp Application Detector (Enabled) = C:\Program Files (x86)\Mozilla Firefox 4\plugins\npwachk.dll
CHR - plugin: Google Talk Plugin (Enabled) = C:\Users\Frank\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll
CHR - plugin: Google Talk Plugin Video Accelerator (Enabled) = C:\Users\Frank\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll
CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL
CHR - plugin: DivX VOD Helper Plug-in (Enabled) = C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll
CHR - plugin: DivX Web Player (Enabled) = C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll
CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll
CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files (x86)\Microsoft Silverlight\4.1.10111.0\npctrl.dll
CHR - plugin: NVIDIA 3D Vision (Enabled) = C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll
CHR - plugin: NVIDIA 3D VISION (Enabled) = C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll
CHR - plugin: Pando Web Plugin (Enabled) = C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll
CHR - plugin: VLC Web Plugin (Enabled) = C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll
CHR - plugin: Windows Live\u00AE Photo Gallery (Enabled) = C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll
CHR - plugin: WPI Detector 1.2 (Enabled) = C:\Program Files\Microsoft\Web Platform Installer\\npwpidetector.dll
CHR - plugin: QUAKE LIVE (Enabled) = C:\ProgramData\id Software\QuakeLive\npquakezero.dll
CHR - plugin: Unity Player (Enabled) = C:\Users\Frank\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll
CHR - plugin: Pokki Download Helper (Enabled) = C:\Users\Frank\AppData\Local\Pokki\Download Helper\npPokkiDownloadHelper.1.1.0.75.dll
CHR - plugin: Windows Activation Technologies (Enabled) = C:\Windows\system32\Wat\npWatWeb.dll
CHR - Extension: jQuery API Browser = C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\abefhanahjellfbchdmkjdcchkogijhk\1.6_0\
CHR - Extension: Entanglement = C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\aciahcmjmecflokailenpkdchphgkefd\2.7.9_0\
CHR - Extension: Freemake Video Downloader = C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\bpegkgagfojjbcpkihigfmkojdmmimdf\1.0.0_0\
CHR - Extension: Reddit All Comments Viewer = C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\djifpbcmaphjihhelcdeannijfelfnbh\2.0_0\
CHR - Extension: Freemake Youtube Download Button = C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\ehgldbbpchgpcfagfpfjgoomddhccfgh\1.0.0_0\
CHR - Extension: Gmail Offline = C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejidjjhkpiempkbhmpbfngldlkglhimk\1.20_0\
CHR - Extension: Minecraft = C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjejdajnkamfldongiboioggbbolghib\1.1_0\
CHR - Extension: Comixology Backup = C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\fldommkfahfhmkmkffdinhjflpfdhdaa\1.3_0\
CHR - Extension: Balloono = C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\fmggmlpijnjmhdekfigfbkookpdfodhf\1.4_0\
CHR - Extension: FileServe Manager = C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\fpgkjhpjldibdbbppfcabadmpfenkdfe\1.0.0.3024\
CHR - Extension: Downloadify = C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\kmlendhmdnjppdndifgphannebelpkoh\0.1_0\
CHR - Extension: Tab Sugar (alpha version) = C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\libokbfffpaopdjmeofdfpmlanaenaje\0.10.0_0\
CHR - Extension: Skype Click to Call = C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\6.9.0.12585_0\
CHR - Extension: The Fancy Pants Adventure: World 2 = C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\loamdenijebhollnjgehcfbnpeelfhlk\14_0\
CHR - Extension: Poppit = C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\mcbkbpnkkkipelfledbfocopglifcfmi\2.2_0\
CHR - Extension: Hangouts = C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\nckgahadagoaajjgafhacjanaoiihapd\2013.717.433.1_0\
CHR - Extension: DivX Plus Web Player HTML5 \u003Cvideo\u003E = C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm\2.1.2.126_0\
CHR - Extension: Canvas Rider = C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\poknhlcknimnnbfcombaooklofipaibk\0.71_0\
O1 HOSTS File: ([2013/08/28 10:21:24 | 000,002,888 | —- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 75.127.117.238 testzef
O1 - Hosts: 127.0.0.1 assitdev
O1 - Hosts: 127.0.0.1 assitlive
O1 - Hosts: 127.0.0.1 qm
O1 - Hosts: 127.0.0.1 hp
O1 - Hosts: 127.0.0.1 brandhub
O1 - Hosts: 127.0.0.1 thuthu
O1 - Hosts: 196.220.35.21 greencartridge.brandhub.co.za
O1 - Hosts: 127.0.0.1 oa
O1 - Hosts: 127.0.0.1 zouk
O1 - Hosts: 127.0.0.1 miniml
O1 - Hosts: 127.0.0.1 oc
O1 - Hosts: 127.0.0.1 i8
O1 - Hosts: 41.185.12.30 www.jabatha.co.za
O1 - Hosts: 127.0.0.1 mamba
O1 - Hosts: 127.0.0.1 mambao
O1 - Hosts: 127.0.0.1 mgbmed
O1 - Hosts: 127.0.0.1 ar
O1 - Hosts: 127.0.0.1 hpbrowse
O1 - Hosts: 127.0.0.1 wt
O1 - Hosts: 127.0.0.1 altban
O1 - Hosts: 127.0.0.1 dnn
O1 - Hosts: 127.0.0.1 qx
O1 - Hosts: 196.220.60.200 www.interdoc.co.za
O1 - Hosts: 196.220.62.134 mail.interdoc.co.za
O1 - Hosts: 62 more lines…
O2:64bit: - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2:64bit: - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
O2:64bit: - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (Octh Class) - {000123B4-9B42-4900-B3F7-F4B073EFC214} - C:\Program Files (x86)\Orbitdownloader\orbitcth.dll (Orbitdownloader.com)
O2 - BHO: (DivX Plus Web Player HTML5 ) - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
O2 - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Evernote extension) - {92EF2EAD-A7CE-4424-B0DB-499CF856608E} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Free Download Manager) - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files (x86)\Free Download Manager\iefdm2.dll (FreeDownloadManager.ORG)
O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3:64bit: - HKLM\..\Toolbar: (no name) - {ae07101b-46d4-4a98-af68-0333ea26e113} - No CLSID value found.
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - {ae07101b-46d4-4a98-af68-0333ea26e113} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O4:64bit: - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
O4:64bit: - HKLM..\Run: [EvtMgr6] C:\Program Files\Logitech\SetPointP\SetPoint.exe (Logitech, Inc.)
O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
O4 - HKLM..\Run: [Everything] C:\Program Files (x86)\Everything\Everything.exe ()
O4 - HKLM..\Run: [NUSB3MON] C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (Renesas Electronics Corporation)
O4 - HKCU..\Run: [BitTorrent Sync] C:\Program Files (x86)\BitTorrent Sync\BTSync.exe (BitTorrent, Inc.)
O4 - HKCU..\Run: [F.lux] C:\Users\Frank\Local Settings\Apps\F.lux\flux.exe ()
O4 - HKCU..\Run: [SandboxieControl] C:\Program Files\Sandboxie\SbieCtrl.exe (Sandboxie Holdings, LLC)
O4 - Startup: C:\Users\Frank\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\Frank\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
O4 - Startup: C:\Users\Frank\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\gditray.exe - Shortcut.lnk = C:\Win32App\GDITray_0923\gditray.exe (2ch)
O4 - Startup: C:\Users\Frank\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MagicDisc.lnk = C:\Program Files (x86)\MagicDisc\MagicDisc.exe (MagicISO, Inc.)
O4 - Startup: C:\Users\Frank\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Password Safe.lnk = C:\Program Files (x86)\Password Safe\pwsafe.exe (SourceForge.net)
O4 - Startup: C:\Users\Frank\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\SoundSwitch.appref-ms ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HideSCAHealth = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: verbosestatus = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLinkedConnections = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 221
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: TaskbarNoNotification = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run: smtp4dev = C:\Program Files (x86)\smtp4dev\Smtp4dev.exe (Robert N Wood <[removed]>)
O8:64bit: - Extra context menu item: &Download; by Orbit - C:\Program Files (x86)\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com)
O8:64bit: - Extra context menu item: &Grab; video by Orbit - C:\Program Files (x86)\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com)
O8:64bit: - Extra context menu item: Clip Image - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=4 File not found
O8:64bit: - Extra context menu item: Clip selection - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=3 File not found
O8:64bit: - Extra context menu item: Clip this page - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=1 File not found
O8:64bit: - Extra context menu item: Clip URL - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=0 File not found
O8:64bit: - Extra context menu item: Do&wnload; selected by Orbit - C:\Program Files (x86)\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com)
O8:64bit: - Extra context menu item: Down&load; all by Orbit - C:\Program Files (x86)\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com)
O8:64bit: - Extra context menu item: Download all with Free Download Manager - C:\Program Files (x86)\Free Download Manager\dlall.htm ()
O8:64bit: - Extra context menu item: Download with Free Download Manager - C:\Program Files (x86)\Free Download Manager\dllink.htm ()
O8:64bit: - Extra context menu item: Download with Mipony - C:\Program Files (x86)\MiPony\Browser\IEContext.htm ()
O8:64bit: - Extra context menu item: Free YouTube Download - C:\Users\Frank\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm ()
O8:64bit: - Extra context menu item: New Note - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\NewNote.html ()
O8 - Extra context menu item: &Download; by Orbit - C:\Program Files (x86)\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com)
O8 - Extra context menu item: &Grab; video by Orbit - C:\Program Files (x86)\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com)
O8 - Extra context menu item: Clip Image - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=4 File not found
O8 - Extra context menu item: Clip selection - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=3 File not found
O8 - Extra context menu item: Clip this page - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=1 File not found
O8 - Extra context menu item: Clip URL - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=0 File not found
O8 - Extra context menu item: Do&wnload; selected by Orbit - C:\Program Files (x86)\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com)
O8 - Extra context menu item: Down&load; all by Orbit - C:\Program Files (x86)\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com)
O8 - Extra context menu item: Download all with Free Download Manager - C:\Program Files (x86)\Free Download Manager\dlall.htm ()
O8 - Extra context menu item: Download with Free Download Manager - C:\Program Files (x86)\Free Download Manager\dllink.htm ()
O8 - Extra context menu item: Download with Mipony - C:\Program Files (x86)\MiPony\Browser\IEContext.htm ()
O8 - Extra context menu item: Free YouTube Download - C:\Users\Frank\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm ()
O8 - Extra context menu item: New Note - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\NewNote.html ()
O9:64bit: - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra Button: Bonjour - {7F9DB11C-E358-4ca6-A83D-ACC663939424} - C:\Program Files (x86)\Bonjour\ExplorerPlugin.dll (Apple Inc.)
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra Button: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\AddNote.html ()
O9 - Extra 'Tools' menuitem : @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\AddNote.html ()
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000008 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {0E8D0700-75DF-11D3-8B4A-0008C7450C4A} http://biz.lgservice.com/DjvuViewer/DjVuControl-6.1.4.cab (DjVuCtl Class)
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab (Reg Error: Key error.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Reg Error: Value error.)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_07)
O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 10.21.2)
O16 - DPF: {F27237D7-93C8-44C2-AC6E-D6057B9A918F} https://juniper.net/dana-cached/sc/JuniperSetupClient.cab (JuniperSetupClientControl Class)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{0DF46B71-B458-43E3-B4B7-1BF05BEA928E}: DhcpNameServer = 8.8.8.8
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{162309DC-BB3F-4830-989A-373ECD473D13}: DhcpNameServer = 8.8.8.8
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{4542DAEC-E0EB-43DA-B4BB-CA8498350CF2}: NameServer = 192.168.0.3
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{495747D2-7BD7-4D91-854E-851DF7030B65}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{60759B52-2690-40F8-8D29-12EE3200BDA0}: NameServer = 192.168.0.3
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{C63ADFD7-4A7C-4772-8A23-65F875F4D50E}: NameServer = 196.14.239.2,192.2.45.101
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{DEAF595E-10E2-40C8-A739-BEBCDE97F75D}: DhcpNameServer = 8.8.8.8
O18:64bit: - Protocol\Handler\mediaman {F00B23B6-E372-4227-BCD9-CDC32EA1521E} - C:\Program Files\MediaMan\CoMProt.dll (He Shiming)
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O18:64bit: - Protocol\Handler\mso-offdap11 - No CLSID value found
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18:64bit: - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18:64bit: - Protocol\Handler\wlpg - No CLSID value found
O18 - Protocol\Handler\mediaman - No CLSID value found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
O20:64bit: - Winlogon\Notify\LBTWlgn: DllName - (c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll) - c:\Program Files\Common Files\Logishrd\Bluetooth\LBTWLgn.dll (Logitech, Inc.)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O22:64bit: - SharedTaskScheduler: {E31004D1-A431-41B8-826F-E902F9D95C81} - Windows DreamScene - C:\Windows\SysNative\DreamScene.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/06/10 23:42:20 | 000,000,024 | —- | M] () - C:\autoexec.bat – [ NTFS ]
O32 - AutoRun File - [2004/08/09 15:10:16 | 000,000,056 | RH– | M] () - H:\autorun.inf – [ CDFS ]
O33 - MountPoints2\{37e44a7f-8bdf-11e2-8aa7-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{37e44a7f-8bdf-11e2-8aa7-806e6f6e6963}\Shell\AutoRun\command - "" = H:\browser.exe – [2002/11/07 11:46:06 | 000,335,872 | R— | M] (Live Publishing International)
O33 - MountPoints2\{59a7abc8-f951-11df-b5f5-001e101f2c0e}\Shell - "" = AutoRun
O33 - MountPoints2\{59a7abc8-f951-11df-b5f5-001e101f2c0e}\Shell\AutoRun\command - "" = K:\AutoRun.exe
O33 - MountPoints2\{59a7abde-f951-11df-b5f5-001e101f2c0e}\Shell - "" = AutoRun
O33 - MountPoints2\{59a7abde-f951-11df-b5f5-001e101f2c0e}\Shell\AutoRun\command - "" = K:\AutoRun.exe
O33 - MountPoints2\{b9666dee-f1bb-11df-a3cb-00270e1e50e5}\Shell - "" = AutoRun
O33 - MountPoints2\{b9666dee-f1bb-11df-a3cb-00270e1e50e5}\Shell\AutoRun\command - "" = L:\AutoRun.exe
O33 - MountPoints2\{b9666df9-f1bb-11df-a3cb-00270e1e50e5}\Shell - "" = AutoRun
O33 - MountPoints2\{b9666df9-f1bb-11df-a3cb-00270e1e50e5}\Shell\AutoRun\command - "" = K:\AutoRun.exe
O33 - MountPoints2\{b9666e04-f1bb-11df-a3cb-00270e1e50e5}\Shell - "" = AutoRun
O33 - MountPoints2\{b9666e04-f1bb-11df-a3cb-00270e1e50e5}\Shell\AutoRun\command - "" = K:\AutoRun.exe
O33 - MountPoints2\{b9666e1d-f1bb-11df-a3cb-00270e1e50e5}\Shell - "" = AutoRun
O33 - MountPoints2\{b9666e1d-f1bb-11df-a3cb-00270e1e50e5}\Shell\AutoRun\command - "" = K:\AutoRun.exe
O33 - MountPoints2\{c560cd3a-516b-11e0-b416-00270e1e50e5}\Shell - "" = AutoRun
O33 - MountPoints2\{c560cd3a-516b-11e0-b416-00270e1e50e5}\Shell\AutoRun\command - "" = I:\NokiaPCIA_Autorun.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O34 - HKLM BootExecute: (Partizan)
O34 - HKLM BootExecute: (ootExecute settings…)
O34 - HKLM BootExecute: (ount)
O35:64bit: - HKLM\..comfile [open] – "%1" %*
O35:64bit: - HKLM\..exefile [open] – "%1" %*
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37:64bit: - HKLM\…com [@ = comfile] – "%1" %*
O37:64bit: - HKLM\…exe [@ = exefile] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
NetSvcs:64bit: AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
Drivers32:64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32:64bit: vidc.ffds - ff_vfw.dll ()
Drivers32:64bit: VIDC.FPS1 - frapsv64.dll (Beepa P/L)
Drivers32:64bit: vidc.i420 - lvcod64.dll (Logitech Inc.)
Drivers32:64bit: vidc.tscc - C:\Windows\SysWOW64\tsccvid64.dll (TechSmith Corporation)
Drivers32: msacm.ac3filter - C:\Windows\SysWow64\ac3filter.acm ()
Drivers32: msacm.avis - C:\Windows\SysWow64\ff_acm.acm ()
Drivers32: msacm.divxa32 - C:\Windows\SysWow64\DivXa32.acm (Packed With Joy !)
Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.lameacm - C:\Windows\SysWow64\LameACM.acm (http://www.mp3dev.org/)
Drivers32: msacm.vorbis - C:\Windows\SysWow64\vorbis.acm (HMS http://hp.vector.co.jp/authors/VA012897/)
Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
Drivers32: vidc.divx - C:\Windows\SysWow64\DivX.dll (DivX, Inc.)
Drivers32: VIDC.FFDS - C:\Windows\SysWow64\ff_vfw.dll ()
Drivers32: VIDC.FPS1 - C:\Windows\SysWow64\frapsvid.dll (Beepa P/L)
Drivers32: vidc.iv50 - C:\Windows\SysWOW64\ir50_32.dll (Intel Corporation)
Drivers32: vidc.lags - C:\Windows\SysWow64\Lagarith.dll ( )
Drivers32: vidc.tscc - C:\Windows\SysWOW64\tsccvid.dll (TechSmith Corporation)
Drivers32: vidc.VP60 - C:\Windows\SysWOW64\vp6vfw.dll (On2.com)
Drivers32: vidc.VP61 - C:\Windows\SysWOW64\vp6vfw.dll (On2.com)
Drivers32: vidc.x264 - C:\Windows\SysWow64\x264vfw.dll (x264vfw project)
Drivers32: vidc.XVID - C:\Windows\SysWow64\xvidvfw.dll ()
Drivers32: vidc.yv12 - C:\Windows\SysWow64\yv12vfw.dll (www.helixcommunity.org)
CREATERESTOREPOINT
Restore point Set: OTL Restore Point
========== Files/Folders - Created Within 30 Days ==========
[2013/09/02 14:25:20 | 000,000,000 | —D | C] – C:\reports
[2013/09/02 13:54:37 | 000,000,000 | —D | C] – C:\Users\Frank\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Sophos
[2013/09/02 13:05:07 | 000,000,000 | —D | C] – C:\Users\Frank\AppData\Roaming\LockHunter
[2013/09/02 08:38:44 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LockHunter
[2013/09/02 08:38:43 | 000,000,000 | —D | C] – C:\Program Files\LockHunter
[2013/08/30 07:38:19 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SQLyog
[2013/08/30 07:38:18 | 000,000,000 | —D | C] – C:\Program Files (x86)\SQLyog9
[2013/08/29 23:13:00 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SQLyog - 32 bit Trial
[2013/08/29 23:12:59 | 000,000,000 | —D | C] – C:\Program Files (x86)\SQLyog Trial
[2013/08/28 19:49:02 | 000,000,000 | —D | C] – C:\Users\Frank\Documents\Wondershare
[2013/08/28 19:46:12 | 000,098,616 | —- | C] (DEVGURU Co., LTD.(www.devguru.co.kr)) – C:\Windows\SysNative\drivers\ssudbus.sys
[2013/08/28 19:43:26 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wondershare
[2013/08/28 19:43:23 | 000,000,000 | —D | C] – C:\Users\Frank\AppData\Roaming\Wondershare
[2013/08/28 09:43:32 | 000,000,000 | —D | C] – C:\Users\Frank\Documents\Updater
[2013/08/28 09:41:20 | 000,000,000 | —D | C] – C:\Windows\SysWow64\Adobe
[2013/08/28 09:37:25 | 000,000,000 | —D | C] – C:\Users\Public\Documents\Adobe PDF
[2013/08/28 09:37:16 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Adobe Systems Shared
[2013/08/27 15:46:12 | 000,000,000 | —D | C] – C:\Users\Frank\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Jeroen Pelgrims
[2013/08/27 10:57:48 | 000,773,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msvcr100.dll
[2013/08/27 10:57:46 | 000,421,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msvcp100.dll
[2013/08/27 10:57:45 | 004,422,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mfc100u.dll
[2013/08/27 09:43:44 | 000,000,000 | —D | C] – C:\Users\Frank\AppData\Local\Adobe
[2013/08/27 09:43:42 | 000,000,000 | —D | C] – C:\Users\Frank\AppData\Roaming\Adobe
[2013/08/27 09:43:29 | 000,000,000 | —D | C] – C:\ProgramData\regid.1986-12.com.adobe
[2013/08/27 09:43:29 | 000,000,000 | —D | C] – C:\ProgramData\Adobe
[2013/08/25 22:11:26 | 000,000,000 | —D | C] – C:\Users\Frank\AppData\Local\Adobe.BackupByIllustratorPortable
[2013/08/25 22:11:24 | 000,000,000 | —D | C] – C:\Users\Frank\AppData\Roaming\Adobe.BackupByIllustratorPortable
[2013/08/25 22:11:14 | 000,000,000 | —D | C] – C:\ProgramData\regid.1986-12.com.adobe.BackupByIllustratorPortable
[2013/08/25 22:11:14 | 000,000,000 | —D | C] – C:\ProgramData\Adobe.BackupByIllustratorPortable
[2013/08/25 18:55:22 | 000,000,000 | —D | C] – C:\downloads
[2013/08/22 20:39:02 | 000,000,000 | —D | C] – C:\Users\Frank\Documents\My Safes
[2013/08/22 20:38:58 | 000,000,000 | —D | C] – C:\Users\Frank\AppData\Local\PasswordSafe
[2013/08/22 19:50:50 | 000,000,000 | —D | C] – C:\Users\Frank\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Password Safe
[2013/08/22 19:50:50 | 000,000,000 | —D | C] – C:\Program Files (x86)\Password Safe
[2013/08/22 17:07:05 | 000,000,000 | —D | C] – C:\Program Files\LinkShellExtension
[2013/08/22 17:07:05 | 000,000,000 | —D | C] – C:\Users\Frank\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Link Shell Extension
[2013/08/22 17:07:05 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Link Shell Extension
[2013/08/20 17:39:04 | 000,000,000 | —D | C] – C:\Users\Frank\AppData\Local\GameTuts
[2013/08/20 16:08:47 | 000,000,000 | —D | C] – C:\Users\Frank\AppData\Roaming\abgx360
[2013/08/20 07:02:12 | 000,204,568 | —- | C] (DEVGURU Co., LTD.(www.devguru.co.kr)) – C:\Windows\SysNative\drivers\ssudmdm.sys
[2013/08/19 13:03:54 | 000,000,000 | —D | C] – C:\Users\Frank\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\JetDownloader
[2013/08/19 11:25:51 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Orbit
[2013/08/19 11:25:16 | 000,000,000 | —D | C] – C:\Program Files (x86)\Orbitdownloader
[2013/08/17 11:54:24 | 000,000,000 | —D | C] – C:\Program Files (x86)\Mozilla Firefox 4
[2013/08/13 12:48:56 | 000,000,000 | —D | C] – C:\Users\Frank\AppData\Local\Daring_Development_Inc
[2013/08/13 12:48:49 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Horizon
[2013/08/13 12:48:48 | 000,000,000 | —D | C] – C:\Program Files (x86)\Daring Development
[2013/08/11 16:58:56 | 000,000,000 | —D | C] – C:\Users\Frank\New folder (3)
[2013/08/11 16:22:59 | 000,000,000 | —D | C] – C:\Program Files (x86)\2Tware_Fat32Format
[2013/08/11 16:22:59 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\2Tware Fat32Format Free
[2013/08/10 15:05:07 | 000,000,000 | —D | C] – C:\Users\Frank\Documents\warblade
[2013/08/10 15:05:06 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Warblade
[2013/08/07 15:42:29 | 000,000,000 | —D | C] – C:\Program Files\Adobe_CC
[2013/08/05 16:28:27 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Grinding Gear Games
[2013/08/05 07:35:51 | 000,439,808 | —- | C] (MPC-HC Team) – C:\Windows\SysWow64\RealMediaSplitter.ax
[2013/08/05 07:35:51 | 000,070,656 | —- | C] (www.helixcommunity.org) – C:\Windows\SysWow64\yv12vfw.dll
[2012/07/16 22:02:33 | 000,082,816 | —- | C] (VSO Software) – C:\Users\Frank\AppData\Roaming\pcouffin.sys
[4 C:\Windows\SysNative\*.tmp files -> C:\Windows\SysNative\*.tmp -> ]
[3 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[1 C:\Program Files (x86)\*.tmp files -> C:\Program Files (x86)\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2013/09/02 14:20:22 | 000,001,177 | -H– | M] () – C:\Users\Frank\Application Data\Microsoft\Internet Explorer\Quick Launch\tlbdata.xml
[2013/09/02 13:54:37 | 000,003,165 | —- | M] () – C:\Users\Frank\Desktop\Sophos Virus Removal Tool.lnk
[2013/09/02 13:48:07 | 000,020,176 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013/09/02 13:48:07 | 000,020,176 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013/09/02 13:39:52 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2013/09/02 13:05:04 | 000,003,888 | —- | M] () – C:\Windows\SysWow64\drivers\NTHANDLE.SYS
[2013/09/02 09:00:22 | 000,001,083 | —- | M] () – C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2013/09/01 21:36:36 | 000,955,354 | —- | M] () – C:\Windows\SysNative\PerfStringBackup.INI
[2013/09/01 21:36:36 | 000,791,498 | —- | M] () – C:\Windows\SysNative\perfh009.dat
[2013/09/01 21:36:36 | 000,172,212 | —- | M] () – C:\Windows\SysNative\perfc009.dat
[2013/09/01 14:54:18 | 000,001,456 | —- | M] () – C:\Users\Frank\AppData\Local\Adobe Save for Web 13.0 Prefs
[2013/08/30 12:38:40 | 005,404,912 | —- | M] () – C:\Windows\SysNative\FNTCACHE.DAT
[2013/08/30 07:38:19 | 000,000,960 | —- | M] () – C:\Users\Public\Desktop\SQLyog.lnk
[2013/08/29 23:13:00 | 000,000,997 | —- | M] () – C:\Users\Public\Desktop\SQLyog - 32 bit Trial.lnk
[2013/08/28 19:46:12 | 000,098,616 | —- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) – C:\Windows\SysNative\drivers\ssudbus.sys
[2013/08/28 19:43:26 | 000,002,143 | —- | M] () – C:\Users\Public\Desktop\Wondershare MobileGo for Android.lnk
[2013/08/27 20:02:02 | 000,002,156 | —- | M] () – C:\Windows\Sandboxie.ini
[2013/08/27 15:46:12 | 000,000,354 | —- | M] () – C:\Users\Frank\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\SoundSwitch.appref-ms
[2013/08/22 19:50:50 | 000,001,046 | —- | M] () – C:\Users\Frank\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Password Safe.lnk
[2013/08/22 19:50:50 | 000,001,004 | —- | M] () – C:\Users\Frank\Desktop\Password Safe.lnk
[2013/08/20 11:41:41 | 000,132,088 | —- | M] (Avira Operations GmbH & Co. KG) – C:\Windows\SysNative\drivers\avipbb.sys
[2013/08/20 11:41:41 | 000,105,344 | —- | M] (Avira Operations GmbH & Co. KG) – C:\Windows\SysNative\drivers\avgntflt.sys
[2013/08/20 11:41:41 | 000,081,112 | —- | M] (Avira Operations GmbH & Co. KG) – C:\Windows\SysNative\drivers\avnetflt.sys
[2013/08/20 07:02:12 | 000,204,568 | —- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) – C:\Windows\SysNative\drivers\ssudmdm.sys
[2013/08/19 13:03:54 | 000,001,041 | —- | M] () – C:\Users\Frank\Desktop\JetDownloader.lnk
[2013/08/19 11:25:51 | 000,001,025 | —- | M] () – C:\Users\Frank\Desktop\Orbit.lnk
[2013/08/17 16:30:49 | 000,148,992 | —- | M] () – C:\Users\Frank\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2013/08/13 16:09:09 | 000,000,132 | —- | M] () – C:\Users\Frank\AppData\Roaming\Adobe PNG Format CS6 Prefs
[2013/08/11 16:22:59 | 000,001,066 | —- | M] () – C:\Users\Public\Desktop\2Tware Fat32Foramt Free 1.0.lnk
[2013/08/09 12:15:14 | 004,422,992 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\mfc100u.dll.BackupByIllustratorPortable
[2013/08/09 12:15:14 | 004,422,992 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\mfc100u.dll
[2013/08/07 16:09:46 | 000,000,364 | —- | M] () – C:\Windows\tasks\AdobeAAMUpdater-1.0-Regenesis-Frank.job
[2013/08/07 15:44:30 | 000,001,492 | —- | M] () – C:\Users\Public\Desktop\Adobe Application Manager.lnk
[2013/08/05 16:28:27 | 000,001,603 | —- | M] () – C:\Users\Public\Desktop\Path of Exile.lnk
[2013/08/04 23:22:47 | 000,001,232 | —- | M] () – C:\Windows\SysNative\%D0%A7%D1%80%D0%B5%D0%B7%D0%BC%D0%B5%D1%80%D0%BD%D0%BE%D0%B5+%D0%BD%D0%B0%D1%81%D0%B8%D0%BB%D0%B8%D0%B5+2%3A+%D0%A1%D1%82%D0%B5%D0%BD%D0%BA%D0%B0+%D0%BD%D0%B0+%D1%81%D1%82%D0%B5%D0%BD%D0%BA%D1.torrent.lnk
[2013/08/04 21:41:01 | 000,000,040 | —- | M] () – C:\Users\Frank\AppData\Roaming\cdr.ini
[4 C:\Windows\SysNative\*.tmp files -> C:\Windows\SysNative\*.tmp -> ]
[3 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[1 C:\Program Files (x86)\*.tmp files -> C:\Program Files (x86)\*.tmp -> ]
========== Files Created - No Company Name ==========
[2013/09/02 13:54:37 | 000,003,165 | —- | C] () – C:\Users\Frank\Desktop\Sophos Virus Removal Tool.lnk
[2013/08/30 07:38:19 | 000,000,960 | —- | C] () – C:\Users\Public\Desktop\SQLyog.lnk
[2013/08/29 23:13:00 | 000,000,997 | —- | C] () – C:\Users\Public\Desktop\SQLyog - 32 bit Trial.lnk
[2013/08/28 19:43:26 | 000,002,143 | —- | C] () – C:\Users\Public\Desktop\Wondershare MobileGo for Android.lnk
[2013/08/28 09:41:43 | 000,002,082 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Illustrator CS2.lnk
[2013/08/28 09:41:20 | 000,016,384 | —- | C] () – C:\Windows\SysWow64\FileOps.exe
[2013/08/28 09:39:25 | 000,001,649 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS2.lnk
[2013/08/28 09:39:25 | 000,001,644 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe ImageReady CS2.lnk
[2013/08/28 09:39:07 | 000,001,633 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Help Center.lnk
[2013/08/28 09:37:15 | 000,001,619 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge.lnk
[2013/08/27 15:46:15 | 000,000,354 | —- | C] () – C:\Users\Frank\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\SoundSwitch.appref-ms
[2013/08/22 19:50:50 | 000,001,046 | —- | C] () – C:\Users\Frank\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Password Safe.lnk
[2013/08/22 19:50:50 | 000,001,004 | —- | C] () – C:\Users\Frank\Desktop\Password Safe.lnk
[2013/08/19 13:03:54 | 000,001,041 | —- | C] () – C:\Users\Frank\Desktop\JetDownloader.lnk
[2013/08/19 11:25:51 | 000,001,025 | —- | C] () – C:\Users\Frank\Desktop\Orbit.lnk
[2013/08/13 16:32:45 | 000,640,030 | —- | C] () – C:\Users\Frank\Documents\youtube-logo-vector.eps
[2013/08/11 16:22:59 | 000,001,066 | —- | C] () – C:\Users\Public\Desktop\2Tware Fat32Foramt Free 1.0.lnk
[2013/08/07 16:09:46 | 000,000,364 | —- | C] () – C:\Windows\tasks\AdobeAAMUpdater-1.0-Regenesis-Frank.job
[2013/08/07 15:44:30 | 000,001,504 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Application Manager.lnk
[2013/08/07 15:44:30 | 000,001,492 | —- | C] () – C:\Users\Public\Desktop\Adobe Application Manager.lnk
[2013/08/05 16:28:27 | 000,001,603 | —- | C] () – C:\Users\Public\Desktop\Path of Exile.lnk
[2013/08/04 23:22:47 | 000,001,232 | —- | C] () – C:\Windows\SysNative\%D0%A7%D1%80%D0%B5%D0%B7%D0%BC%D0%B5%D1%80%D0%BD%D0%BE%D0%B5+%D0%BD%D0%B0%D1%81%D0%B8%D0%BB%D0%B8%D0%B5+2%3A+%D0%A1%D1%82%D0%B5%D0%BD%D0%BA%D0%B0+%D0%BD%D0%B0+%D1%81%D1%82%D0%B5%D0%BD%D0%BA%D1.torrent.lnk
[2013/07/17 14:33:23 | 000,005,291 | —- | C] () – C:\Windows\my.ini.old
[2013/06/28 21:15:20 | 000,001,110 | —- | C] () – C:\Users\Frank\_viminfo
[2013/04/19 00:38:36 | 000,039,904 | —- | C] () – C:\Windows\SysWow64\Media Player - Codec Pack Disc handler.exe
[2013/04/19 00:38:36 | 000,039,904 | —- | C] () – C:\Windows\SysWow64\dischandler.exe
[2013/04/16 12:35:04 | 003,915,776 | —- | C] () – C:\Windows\SysWow64\ffmpeg.dll
[2013/04/16 12:33:50 | 000,112,640 | —- | C] () – C:\Windows\SysWow64\ff_vfw.dll
[2013/04/16 12:32:28 | 000,157,184 | —- | C] () – C:\Windows\SysWow64\ff_unrar.dll
[2013/04/16 12:32:24 | 000,271,360 | —- | C] () – C:\Windows\SysWow64\TomsMoComp_ff.dll
[2013/04/16 12:32:18 | 000,099,840 | —- | C] () – C:\Windows\SysWow64\ff_wmv9.dll
[2013/04/16 12:32:16 | 000,211,968 | —- | C] () – C:\Windows\SysWow64\ff_libdts.dll
[2013/04/16 12:32:16 | 000,147,456 | —- | C] () – C:\Windows\SysWow64\ff_libmad.dll
[2013/04/16 12:32:14 | 001,525,760 | —- | C] () – C:\Windows\SysWow64\ff_samplerate.dll
[2013/04/16 12:32:14 | 000,114,688 | —- | C] () – C:\Windows\SysWow64\ff_liba52.dll
[2013/04/16 12:32:10 | 000,136,704 | —- | C] () – C:\Windows\SysWow64\libmpeg2_ff.dll
[2013/04/13 14:23:50 | 007,788,672 | —- | C] () – C:\Windows\SysWow64\avcodec-lav-55.dll
[2013/04/13 14:23:50 | 001,300,152 | —- | C] () – C:\Windows\SysWow64\avformat-lav-55.dll
[2013/04/13 14:23:50 | 000,400,592 | —- | C] () – C:\Windows\SysWow64\swscale-lav-2.dll
[2013/04/13 14:23:50 | 000,272,192 | —- | C] () – C:\Windows\SysWow64\avutil-lav-52.dll
[2013/04/13 14:23:50 | 000,194,632 | —- | C] () – C:\Windows\SysWow64\avfilter-lav-3.dll
[2013/04/13 14:23:50 | 000,172,728 | —- | C] () – C:\Windows\SysWow64\avresample-lav-1.dll
[2013/04/01 22:01:04 | 000,000,939 | -H– | C] () – C:\Users\Frank\.gitk
[2013/04/01 21:37:02 | 000,000,155 | —- | C] () – C:\Users\Frank\.gitconfig
[2013/03/03 00:17:34 | 000,166,504 | —- | C] () – C:\Windows\SysWow64\AirfoilInject3.dll
[2013/01/26 12:11:56 | 000,281,688 | —- | C] () – C:\Windows\SysWow64\PnkBstrB.exe
[2013/01/25 20:59:55 | 000,076,888 | —- | C] () – C:\Windows\SysWow64\PnkBstrA.exe
[2013/01/13 14:16:25 | 000,032,256 | —- | C] () – C:\Windows\SysWow64\AVSredirect.dll
[2013/01/13 14:02:07 | 000,167,936 | —- | C] () – C:\Windows\SysWow64\SpoonUninstall.exe
[2012/12/04 08:48:21 | 000,000,021 | —- | C] () – C:\Windows\SurCode.INI
[2012/10/20 22:07:45 | 013,509,599 | —- | C] () – C:\Users\Frank\AppData\Local\soulseek-client.dat
[2012/10/01 23:41:35 | 000,000,293 | —- | C] () – C:\Users\Frank\KeyboardMacros.xml
[2012/10/01 23:41:15 | 000,000,246 | —- | C] () – C:\Users\Frank\ApplicationSettings.xml
[2012/09/30 00:47:28 | 000,000,178 | —- | C] () – C:\Windows\SysWow64\Formats.ini
[2012/09/07 15:34:28 | 000,000,132 | —- | C] () – C:\Users\Frank\AppData\Roaming\Adobe PNG Format CS6 Prefs
[2012/08/30 11:00:46 | 000,000,032 | —- | C] () – C:\Users\Frank\.simfy
[2012/08/26 22:51:40 | 000,000,040 | -HS- | C] () – C:\ProgramData\.zreglib
[2012/07/16 22:03:27 | 000,000,664 | —- | C] () – C:\Users\Frank\AppData\Roaming\vso_ts_preview.xml
[2012/07/16 22:02:33 | 000,099,384 | —- | C] () – C:\Users\Frank\AppData\Roaming\inst.exe
[2012/07/16 22:02:33 | 000,007,859 | —- | C] () – C:\Users\Frank\AppData\Roaming\pcouffin.cat
[2012/07/16 22:02:33 | 000,001,167 | —- | C] () – C:\Users\Frank\AppData\Roaming\pcouffin.inf
[2012/07/14 22:37:49 | 000,034,308 | —- | C] () – C:\Windows\SysWow64\BASSMOD.dll
[2012/07/04 14:02:34 | 000,001,456 | —- | C] () – C:\Users\Frank\AppData\Local\Adobe Save for Web 13.0 Prefs
[2012/06/27 10:50:16 | 000,001,010 | —- | C] () – C:\Users\Frank\.swfinfo
[2012/04/24 18:05:29 | 000,000,000 | —- | C] () – C:\Windows\GraphEdt.INI
[2012/04/22 17:49:06 | 000,033,792 | —- | C] () – C:\Windows\D2MultiRes.dll
[2012/04/22 17:33:31 | 000,018,512 | —- | C] () – C:\Windows\DIIUnin.dat
[2012/04/06 15:15:17 | 000,000,249 | —- | C] () – C:\Users\Frank\SecurityKISSTunnel.config
[2012/03/09 12:21:51 | 000,221,304 | —- | C] () – C:\Windows\hpoins19.dat
[2012/03/09 12:21:51 | 000,013,898 | —- | C] () – C:\Windows\hpomdl19.dat
[2012/03/08 23:19:31 | 000,074,703 | —- | C] () – C:\Windows\SysWow64\mfc45.dll
[2012/03/08 23:18:00 | 000,074,703 | —- | C] () – C:\Windows\SysWOW64mfc45.dll
[2012/02/13 18:09:03 | 000,000,040 | —- | C] () – C:\Users\Frank\AppData\Roaming\cdr.ini
[2011/12/13 23:11:39 | 000,003,888 | —- | C] () – C:\Windows\SysWow64\drivers\NTHANDLE.SYS
[2011/12/07 21:32:24 | 000,216,064 | —- | C] ( ) – C:\Windows\SysWow64\Lagarith.dll
[2011/11/23 22:47:53 | 000,000,324 | —- | C] () – C:\Windows\maketorrent.ini
[2011/11/12 14:18:45 | 000,246,272 | —- | C] () – C:\Windows\UnRAR.exe
[2011/10/09 13:25:10 | 000,000,173 | —- | C] () – C:\Windows\jpegcrop.INI
[2011/09/28 13:07:50 | 000,000,132 | —- | C] () – C:\Users\Frank\AppData\Roaming\Adobe PNG Format CS5 Prefs
[2011/09/15 08:51:21 | 000,001,456 | —- | C] () – C:\Users\Frank\AppData\Local\Adobe Save for Web 12.0 Prefs
[2011/09/08 16:00:52 | 000,150,528 | —- | C] () – C:\Windows\SysWow64\mkx.dll
[2011/09/08 16:00:48 | 000,142,336 | —- | C] () – C:\Windows\SysWow64\mp4.dll
[2011/09/08 16:00:42 | 000,123,392 | —- | C] () – C:\Windows\SysWow64\ogm.dll
[2011/09/08 16:00:38 | 000,249,856 | —- | C] () – C:\Windows\SysWow64\dxr.dll
[2011/09/08 16:00:34 | 000,113,152 | —- | C] () – C:\Windows\SysWow64\dsmux.exe
[2011/09/08 16:00:24 | 000,154,624 | —- | C] () – C:\Windows\SysWow64\ts.dll
[2011/09/08 16:00:10 | 000,137,728 | —- | C] () – C:\Windows\SysWow64\mkv2vfr.exe
[2011/09/08 16:00:06 | 000,358,400 | —- | C] () – C:\Windows\SysWow64\gdsmux.exe
[2011/09/08 15:59:54 | 000,080,384 | —- | C] () – C:\Windows\SysWow64\mkzlib.dll
[2011/09/08 15:59:52 | 000,024,576 | —- | C] () – C:\Windows\SysWow64\mkunicode.dll
[2011/08/22 11:41:02 | 003,550,298 | —- | C] () – C:\Users\Frank\.TransferManager.db
[2011/08/18 11:25:08 | 000,000,600 | —- | C] () – C:\Users\Frank\AppData\Roaming\winscp.rnd
[2011/08/06 15:53:38 | 000,000,032 | R— | C] () – C:\ProgramData\hash.dat
[2011/03/25 20:02:41 | 000,005,259 | —- | C] () – C:\Users\Frank\AppData\Roaming\servetome-fonts.conf
[2011/01/23 11:44:02 | 000,000,378 | —- | C] () – C:\Users\Frank\SyncDocs.conf
[2011/01/14 11:05:48 | 000,000,440 | RHS- | C] () – C:\ProgramData\ntuser.pol
[2010/12/08 12:05:05 | 000,000,058 | —- | C] () – C:\Users\Frank\AppData\Local\DonationCoder_ScreenshotCaptor_InstallInfo.dat
[2010/07/19 17:37:41 | 000,000,000 | —- | C] () – C:\Users\Frank\AppData\Local\Cqeyoho.bin
[2010/07/19 17:37:40 | 000,000,120 | —- | C] () – C:\Users\Frank\AppData\Local\Kyanu.dat
[2010/05/10 18:30:32 | 008,414,720 | —- | C] () – C:\Program Files (x86)\HTML Guardian 7.msi
[2010/04/24 21:29:20 | 000,000,908 | —- | C] () – C:\Users\Frank\AppData\Roaming\BatchTouch_Prefs.plist
[2010/04/22 17:58:33 | 000,000,027 | -H– | C] () – C:\ProgramData\.6b14a35055fac291a0de744e5b9ee9ec.dat
[2010/04/20 18:09:26 | 000,001,542 | —- | C] () – C:\Users\Frank\.bash_history
[2010/04/07 01:09:33 | 000,000,600 | —- | C] () – C:\Users\Frank\AppData\Local\PUTTY.RND
[2010/03/21 08:21:30 | 000,007,619 | —- | C] () – C:\Users\Frank\AppData\Local\Resmon.ResmonCfg
[2010/03/13 21:26:38 | 000,000,661 | —- | C] () – C:\Users\Frank\AppData\Roaming\cvf.ini
[2010/02/16 21:13:26 | 000,000,609 | —- | C] () – C:\Users\Frank\AppData\Roaming\AutoGK.ini
[2010/02/11 14:52:37 | 000,148,992 | —- | C] () – C:\Users\Frank\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/02/07 16:39:24 | 000,000,093 | —- | C] () – C:\Users\Frank\AppData\Local\fusioncache.dat
========== ZeroAccess Check ==========
[2009/07/14 06:55:00 | 000,000,227 | RHS- | M] () – C:\Windows\assembly\Desktop.ini
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll – [2012/06/09 07:30:56 | 014,165,504 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll – [2012/06/09 06:46:56 | 012,868,608 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll – [2009/07/14 03:40:51 | 000,909,312 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Free
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll – [2009/07/14 03:15:20 | 000,605,696 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Free
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll – [2009/07/14 03:41:56 | 000,505,856 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Both
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
========== LOP Check ==========
[2013/07/07 19:14:35 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\.minecraft
[2010/07/19 17:35:02 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\84410A21428932BD424EE9068396CECD
[2013/08/24 21:33:40 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\abgx360
[2010/12/17 13:50:18 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Acronis
[2010/08/22 21:17:56 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\adma
[2013/02/25 23:19:36 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\AimOne
[2012/03/10 14:03:14 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\AirDisplay
[2013/05/13 09:58:29 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Alchemy Mindworks
[2011/01/29 20:50:29 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Amazon
[2013/07/27 21:38:26 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\ApexDC++
[2012/10/02 15:08:26 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\ASCOMP Software
[2011/12/12 18:23:01 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Audacity
[2013/05/09 15:46:50 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Aura Video Editor
[2013/08/10 09:57:20 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\avidemux
[2013/05/12 18:13:13 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Awesomium
[2012/02/10 14:01:07 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\B0500
[2013/01/02 13:00:22 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Bao_Nguyen
[2010/04/21 08:54:19 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\BBCiPlayerDesktop.61DB7A798358575D6A969CCD73DDBBD723A6DA9D.1
[2011/07/29 16:14:32 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Big Fish Games
[2012/12/09 14:35:05 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\BioniX Wallpaper Animator
[2013/06/02 21:51:17 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Bioshock
[2010/03/14 12:10:50 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Bioshock2
[2012/10/11 09:10:59 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\bitolithic
[2013/09/02 14:30:46 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\BitTorrent Sync
[2013/05/09 16:28:46 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Blender Foundation
[2010/12/23 17:02:15 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Braid
[2010/05/04 15:00:21 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Bump Technologies, Inc
[2013/04/04 16:05:35 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\calibre
[2010/01/08 00:31:52 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Canneverbe Limited
[2010/07/23 10:22:46 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2010/12/08 14:07:30 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\code4ward
[2011/11/07 09:25:46 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant
[2012/02/23 12:47:12 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\com.adobe.ExMan
[2011/09/07 15:56:06 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2012/07/26 18:26:04 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\com.adobe.WidgetBrowser.E7BED6E5DDA59983786DD72EBFA46B1598278E07.1
[2010/08/03 15:24:22 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\com.destroytoday.destroytwitter
[2013/05/17 13:55:48 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\com.dwuser.erwizard.EasyRotatorWizard
[2010/07/14 09:17:28 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\com.nationalgeographic.products.cng120.68B1CC4249876152EBE333BD4B7514ADB4D9
4062.1
[2012/07/19 21:49:55 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\com.prakaz.project.photogettr
[2013/04/06 12:02:30 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\com.shirogames.evoland
[2013/04/16 23:23:33 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Comic Vine Scraper
[2011/10/19 23:27:02 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Comical
[2012/05/15 22:19:38 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\CrystalIdea Software
[2013/04/19 16:58:28 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Depressurizer
[2013/05/13 09:26:25 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Devart
[2010/04/29 19:09:37 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Dexpot
[2012/09/06 22:49:08 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Digiarty
[2010/06/28 13:19:56 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Direct Folders
[2013/02/13 23:46:21 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\DiskAid
[2013/08/23 18:05:13 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\DisplayFusion
[2013/01/24 22:39:55 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Dojotech Software
[2010/08/07 18:01:33 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\DonationCoder
[2010/08/04 09:14:56 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Downloaded Installations
[2011/09/30 10:02:38 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\dream-video-converter
[2013/09/02 13:41:31 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Dropbox
[2011/01/06 15:18:14 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\DVDVideoSoftIEHelpers
[2010/09/04 12:58:00 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\e
[2011/03/15 08:43:31 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\EAC
[2013/05/13 09:51:57 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Eltima Software
[2012/04/27 23:16:17 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Felix Breuer
[2013/06/21 12:49:18 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\FEZ
[2012/12/22 09:31:47 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\FileBot
[2010/06/25 23:46:58 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\FinalBurner Video DVD
[2012/10/23 10:49:18 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\FireShot
[2010/04/28 12:59:49 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Flickr
[2010/02/04 20:24:44 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\fltk.org
[2010/01/04 22:08:08 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Foxit
[2011/09/14 22:22:51 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Foxit Software
[2013/09/02 09:01:35 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Free Download Manager
[2011/09/14 23:32:06 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\FreeAudioPack
[2010/12/20 15:22:19 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\FreeCap
[2013/03/12 11:02:42 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\FreemakeVideoDownloader
[2011/05/22 22:27:02 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\FtpDropper
[2011/06/22 11:15:31 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\GeoVid
[2012/03/10 11:11:37 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\GHISLER
[2012/05/23 23:36:51 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\GitHub
[2010/03/18 23:10:09 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\GlarySoft
[2010/07/25 14:01:14 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Gmail Backup
[2010/12/16 21:21:10 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\GoodSync
[2010/04/02 12:57:22 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\GR Games
[2012/07/02 16:58:04 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\GrabPro
[2013/01/03 12:15:29 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\gtk-2.0
[2010/11/02 20:18:38 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\HamsterSoft
[2011/05/12 21:53:54 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\HandBrake
[2010/05/13 10:07:06 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\HeidiSQL
[2013/05/13 09:57:58 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\HLSW
[2012/07/14 12:41:09 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Hothead Games
[2013/07/21 19:39:58 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\I2P
[2011/01/12 11:13:41 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\iBBDemo2
[2013/06/21 13:35:00 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\iFunbox_UserCache
[2012/12/07 17:24:02 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Image-Line
[2012/03/10 11:37:31 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Imagine
[2010/01/02 21:30:09 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\ImgBurn
[2013/04/02 19:51:50 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\inkscape
[2011/04/27 15:12:27 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\InPresoScreens.5A126D768DA8C0A50FAEB4373B6894850319358F.1
[2010/05/12 23:58:08 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\IObit
[2010/02/21 19:58:28 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\iPodder
[2010/04/26 16:44:50 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\IrfanView
[2012/04/06 15:39:15 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Jaksta Streaming Media Recorder
[2012/12/23 19:37:02 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Jeskola
[2011/05/20 17:54:59 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\JLC's Software
[2013/03/26 23:12:06 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\johnsadventures.com
[2011/02/12 19:57:18 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\JonDo
[2011/05/19 21:51:21 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Jumping Bytes
[2012/05/04 12:00:02 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Juniper Networks
[2010/11/16 16:38:53 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Kingsoft
[2013/04/30 08:58:59 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\KReader
[2010/01/03 13:30:35 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Leadertech
[2011/02/09 12:14:29 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\LibreOffice
[2012/01/14 12:47:08 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\LoadScout
[2013/09/02 13:05:08 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\LockHunter
[2011/09/25 21:05:08 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\LolClient
[2012/10/14 22:08:08 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\LoneSurvivor
[2012/10/16 16:01:17 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\LOVE
[2012/03/10 14:03:14 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\MediaMan
[2010/11/26 22:35:41 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\MediaRenamer
[2011/09/04 14:46:00 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\MinMaxGames
[2013/07/22 07:35:29 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Mipony
[2011/01/27 09:25:28 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\mkvtoolnix
[2011/08/17 21:58:42 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Mobile Action
[2011/10/06 17:46:13 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Mobile Atlas Creator
[2010/09/28 14:28:26 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Mobipocket
[2011/12/04 11:44:30 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Moonchild Productions
[2010/02/16 22:29:30 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Movie Label
[2012/12/08 18:10:22 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\MPEG Streamclip
[2011/01/20 21:47:19 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\mts
[2013/07/17 15:48:02 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\MySQL
[2010/06/15 21:27:18 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Namco
[2010/04/03 19:27:23 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\NCH Swift Sound
[2010/09/12 17:31:48 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Need for Speed World
[2010/10/06 12:15:19 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Nitro PDF
[2010/06/05 16:26:06 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Nokia
[2011/04/30 12:00:33 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Notepad++
[2012/04/21 15:46:03 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\npm
[2010/12/17 18:59:46 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\OnLive App
[2010/04/12 10:30:43 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\onOne Software
[2010/04/21 17:02:07 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\OpenOffice.org
[2010/09/27 22:28:53 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Opera
[2013/07/08 15:00:05 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Opera Software
[2013/07/20 09:36:00 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Oracle
[2013/08/23 20:23:44 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Orbit
[2012/12/04 08:48:21 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\PACE Anti-Piracy
[2010/02/09 21:57:10 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\PC Suite
[2012/08/02 10:00:23 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\PDAppFlex
[2011/03/13 13:58:28 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\pdftoepub
[2010/12/13 13:20:45 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Pengu Wars
[2012/12/18 21:20:44 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Petroglyph
[2012/07/14 18:24:18 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\PgcEdit
[2010/02/03 00:41:57 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Prism
[2012/07/02 16:51:47 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\ProgSense
[2011/12/16 16:56:06 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\ProjectsWithLove
[2010/04/29 19:18:55 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Propellerhead Software
[2010/11/07 16:47:37 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\PTGui
[2011/04/25 22:16:23 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Quest Software
[2012/12/07 16:38:32 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\REAPER
[2011/07/16 10:08:15 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Red Gate
[2013/06/27 23:02:05 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\redsn0w
[2013/06/19 16:16:47 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\RIFT
[2012/03/03 19:49:20 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\rockbox.org
[2013/07/12 11:32:49 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Rogue Legacy
[2011/01/07 19:58:14 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Rovio
[2012/05/02 22:13:50 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\runic games
[2013/06/19 14:41:04 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Samsung
[2010/03/20 23:19:08 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\SecondLife
[2013/06/16 14:57:07 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\SharePod
[2012/08/30 11:00:45 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Simfy
[2010/01/07 20:19:51 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Snippage.B28FB424FD6880E47B18D7D649F6CC93BDE9B29B.1
[2011/04/25 22:15:19 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Software
[2013/09/01 15:43:22 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Spotify
[2011/07/07 00:16:23 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\SQLite Administrator
[2013/08/30 09:10:15 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\SQLyog
[2012/10/14 12:45:27 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Stardock
[2013/05/30 15:06:27 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\streamripper
[2010/09/29 11:58:03 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\SuperMP3Download
[2013/08/30 18:43:58 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\TeamViewer
[2010/12/27 18:53:01 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Thinstall
[2011/01/02 14:10:37 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\ThumbGen
[2010/07/25 19:36:59 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Thunderbird
[2012/12/06 16:04:07 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Topten Software
[2012/07/10 11:45:52 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\TrueCrypt
[2013/01/05 21:44:16 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\ts3overlay
[2013/07/20 18:00:53 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Tunngle
[2010/02/07 16:40:00 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Turbine
[2010/11/11 22:52:29 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\TVRename
[2010/03/13 12:54:59 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Ubisoft
[2011/01/27 14:57:27 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Unity
[2013/08/30 21:06:05 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\uTorrent
[2013/04/02 19:51:50 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Vso
[2010/04/26 20:23:07 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Vultures
[2010/06/15 21:39:02 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\wb05D1SE
[2010/06/08 16:25:05 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\WebApps
[2011/02/20 19:35:29 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Wi-Fi Sync
[2010/10/06 20:50:21 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Win7codecs
[2011/01/08 23:59:41 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\WinNc
[2013/04/03 18:52:18 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Wise Registry Cleaner
[2012/02/19 11:38:59 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Wizards of the Coast
[2013/08/28 19:43:27 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Wondershare
[2013/03/21 23:54:20 | 000,000,000 | -HSD | M] – C:\Users\Frank\AppData\Roaming\wyUpdate AU
[2013/08/03 12:06:22 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\XBMC
[2010/06/05 12:17:38 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Xilisoft
[2012/03/10 10:52:58 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\XnView
[2013/05/28 20:36:34 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\xVideoServiceThief
[2013/03/10 22:36:16 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Youtube Downloader HD
========== Purity Check ==========
========== Custom Scans ==========
< %USERPROFILE%\..|smtmp;true;true;true /FP >
< %temp%\smtmp\*.* /s > >
< MD5 for: EXPLORER.ADML >
[2009/07/14 04:30:02 | 000,003,695 | —- | M] () MD5=7A4C7F3CB156543113596988479CAFCE – C:\Windows\PolicyDefinitions\en-US\Explorer.adml
[2009/07/14 04:30:02 | 000,003,695 | —- | M] () MD5=7A4C7F3CB156543113596988479CAFCE – C:\Windows\winsxs\amd64_microsoft-windows-s..ouppolicy.resources_31bf3856ad364e35_6.1.7600.16385_en-us_7ef5713984067904\Explorer.adml
< MD5 for: EXPLORER.ADMX >
[2009/06/10 22:53:55 | 000,003,836 | —- | M] () MD5=AD131A834808E6AFF4A3918DE05BFCF6 – C:\Windows\PolicyDefinitions\Explorer.admx
[2009/06/10 22:53:55 | 000,003,836 | —- | M] () MD5=AD131A834808E6AFF4A3918DE05BFCF6 – C:\Windows\winsxs\amd64_microsoft-windows-shell-grouppolicy_31bf3856ad364e35_6.1.7600.16385_none_71af9b5b0a86e6b7\Explorer.admx
< MD5 for: EXPLORER.ASP >
[2011/09/06 11:14:25 | 000,000,253 | —- | M] () MD5=36ACC03EBAE1062BF4F33480D0FCDC7C – C:\Dev\fmiabak\t\explorer.asp
[2004/06/11 11:52:26 | 000,000,253 | —- | M] () MD5=36ACC03EBAE1062BF4F33480D0FCDC7C – C:\Dev\Sites\socrates\t\explorer.asp
< MD5 for: EXPLORER.CFG >
[2013/01/24 23:36:14 | 000,004,013 | —- | M] () MD5=5259ADB5796EB290A5D862504334F497 – C:\Program Files (x86)\Tiggit\data\games\tiggit.net\gamedata\tiggit.net\wesnoth\data\core\units\dwarves\Explorer.cfg
< MD5 for: EXPLORER.CLASS >
[2004/08/24 12:33:52 | 000,004,414 | —- | M] () MD5=CE27540DCC9678A27741A11782136529 – C:\Personal\Nat32\NAT32\htm\explorer.class
< MD5 for: EXPLORER.DESIGNER.VB >
[2009/12/21 11:28:26 | 000,036,545 | —- | M] () MD5=0BFA552D19A4A7F9130A71DFBBCB1407 – C:\ProgramData\Microsoft\VSTAHost\SSIS_ScriptComponent\9.0\ItemTemplatesCache\VisualBasic\Windows Forms\1033\Explorer.zip\explorer.designer.vb
[2009/12/21 11:28:26 | 000,036,545 | —- | M] () MD5=0BFA552D19A4A7F9130A71DFBBCB1407 – C:\ProgramData\Microsoft\VSTAHost\SSIS_ScriptTask\9.0\ItemTemplatesCache\VisualBasic\Windows Forms\1033\Explorer.zip\explorer.designer.vb
[2009/12/21 11:28:26 | 000,036,545 | —- | M] () MD5=0BFA552D19A4A7F9130A71DFBBCB1407 – C:\Users\All Users\Microsoft\VSTAHost\SSIS_ScriptComponent\9.0\ItemTemplatesCache\VisualBasic\Windows Forms\1033\Explorer.zip\explorer.designer.vb
[2009/12/21 11:28:26 | 000,036,545 | —- | M] () MD5=0BFA552D19A4A7F9130A71DFBBCB1407 – C:\Users\All Users\Microsoft\VSTAHost\SSIS_ScriptTask\9.0\ItemTemplatesCache\VisualBasic\Windows Forms\1033\Explorer.zip\explorer.designer.vb
[2009/12/21 11:28:26 | 000,036,545 | —- | M] () MD5=0BFA552D19A4A7F9130A71DFBBCB1407 – C:\Windows.old\ProgramData\Application Data\Microsoft\VSTAHost\SSIS_ScriptComponent\9.0\ItemTemplatesCache\VisualBasic\Windows Forms\1033\Explorer.zip\explorer.designer.vb
[2009/12/21 11:28:26 | 000,036,545 | —- | M] () MD5=0BFA552D19A4A7F9130A71DFBBCB1407 – C:\Windows.old\ProgramData\Application Data\Microsoft\VSTAHost\SSIS_ScriptTask\9.0\ItemTemplatesCache\VisualBasic\Windows Forms\1033\Explorer.zip\explorer.designer.vb
< MD5 for: EXPLORER.DLL >
[2013/01/24 18:19:48 | 000,040,448 | —- | M] () MD5=B904570613ED7A4C95979403C8D92E02 – C:\LiberKey\Apps\AkelPad\App\AkelPad\AkelFiles\Plugs\Explorer.dll
< MD5 for: EXPLORER.EXE >
[2009/07/14 03:14:20 | 002,613,248 | —- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_b7fe430bc7ce3761\explorer.exe
[2009/10/31 07:45:39 | 002,614,272 | —- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 – C:\Windows\SysWOW64\explorer.exe
[2009/10/31 07:45:39 | 002,614,272 | —- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_b819b343c7ba6202\explorer.exe
[2009/08/03 08:19:07 | 002,868,224 | —- | M] (Microsoft Corporation) MD5=700073016DAC1C3D2E7E2CE4223334B6 – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_ae84b558ac4eb41c\explorer.exe
[2009/10/31 08:34:59 | 002,870,272 | —- | M] (Microsoft Corporation) MD5=9AAAEC8DAC27AA17B053E6352AD233AE – C:\Windows\explorer.exe
[2009/10/31 08:34:59 | 002,870,272 | —- | M] (Microsoft Corporation) MD5=9AAAEC8DAC27AA17B053E6352AD233AE – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_adc508f19359a007\explorer.exe
[2009/08/03 07:49:47 | 002,613,248 | —- | M] (Microsoft Corporation) MD5=9FF6C4C91A3711C0A3B18F87B08B518D – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_b8d95faae0af7617\explorer.exe
[2009/10/31 08:38:38 | 002,870,272 | —- | M] (Microsoft Corporation) MD5=B8EC4BD49CE8F6FC457721BFC210B67F – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_ae46d6aeac7ca7c7\explorer.exe
[2009/08/03 07:35:50 | 002,613,248 | —- | M] (Microsoft Corporation) MD5=B95EEB0F4E5EFBF1038A35B3351CF047 – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_b853c407c78e3ba9\explorer.exe
[2009/07/14 03:39:10 | 002,868,224 | —- | M] (Microsoft Corporation) MD5=C235A51CB740E45FFA0EBFB9BAFCDA64 – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_ada998b9936d7566\explorer.exe
[2009/10/31 08:00:51 | 002,614,272 | —- | M] (Microsoft Corporation) MD5=C76153C7ECA00FA852BB0C193378F917 – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_b89b8100e0dd69c2\explorer.exe
[2009/08/03 08:17:37 | 002,868,224 | —- | M] (Microsoft Corporation) MD5=F170B4A061C9E026437B193B4D571799 – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_adff19b5932d79ae\explorer.exe
< MD5 for: EXPLORER.EXE.MUI >
[2009/07/14 04:26:48 | 000,022,016 | —- | M] (Microsoft Corporation) MD5=4B87EEFDC8E253F846A7DFB49A8E6C70 – C:\Windows\en-US\explorer.exe.mui
[2009/07/14 04:26:48 | 000,022,016 | —- | M] (Microsoft Corporation) MD5=4B87EEFDC8E253F846A7DFB49A8E6C70 – C:\Windows\winsxs\amd64_microsoft-windows-explorer.resources_31bf3856ad364e35_6.1.7600.16385_en-us_61e778c48d52d19b\explorer.exe.mui
[2009/07/14 04:06:56 | 000,022,016 | —- | M] (Microsoft Corporation) MD5=B9F4B1CA23D60775736059D72BA48526 – C:\Windows\SysWOW64\en-US\explorer.exe.mui
[2009/07/14 04:06:56 | 000,022,016 | —- | M] (Microsoft Corporation) MD5=B9F4B1CA23D60775736059D72BA48526 – C:\Windows\winsxs\wow64_microsoft-windows-explorer.resources_31bf3856ad364e35_6.1.7600.16385_en-us_6c3c2316c1b39396\explorer.exe.mui
< MD5 for: EXPLORER.EXE-03C49D11.PF >
[2013/04/03 14:01:30 | 000,272,804 | —- | M] () MD5=39F9EECD6DB2DABDAF94C54038A45DF0 – C:\Windows\Prefetch\EXPLORER.EXE-03C49D11.pf
< MD5 for: EXPLORER.HTM >
[2009/12/30 16:23:04 | 000,022,802 | —- | M] () MD5=7556ED68539534D0635BB46F4FC09506 – C:\Sandbox\Frank\DefaultBox\drive\C\Program Files\Xi\NetXfer\Manual\eng\explorer.htm
[2009/12/30 16:23:04 | 000,022,802 | —- | M] () MD5=7556ED68539534D0635BB46F4FC09506 – C:\Sandbox\Frank\DefaultBox\drive\C\Program Files\Xi\NetXfer\x86\Manual\eng\explorer.htm
[2007/08/02 16:25:58 | 000,023,115 | —- | M] () MD5=AAA467133DAA3525EF8FDD0EE40FFD55 – C:\Sandbox\Frank\DefaultBox\drive\C\Program Files\Xi\NetXfer\Manual\chs\explorer.htm
[2007/08/02 16:25:58 | 000,023,115 | —- | M] () MD5=AAA467133DAA3525EF8FDD0EE40FFD55 – C:\Sandbox\Frank\DefaultBox\drive\C\Program Files\Xi\NetXfer\x86\Manual\chs\explorer.htm
[2009/12/31 06:56:30 | 000,023,897 | —- | M] () MD5=AE010B09E8CD6A1F4BF3203B520F3029 – C:\Sandbox\Frank\DefaultBox\drive\C\Program Files\Xi\NetXfer\Manual\Fra\explorer.htm
[2009/12/31 06:56:30 | 000,023,897 | —- | M] () MD5=AE010B09E8CD6A1F4BF3203B520F3029 – C:\Sandbox\Frank\DefaultBox\drive\C\Program Files\Xi\NetXfer\x86\Manual\Fra\explorer.htm
< MD5 for: EXPLORER.PNG >
[2009/04/03 12:52:58 | 000,003,434 | —- | M] () MD5=04537B64F3BDC2C6D45CA1F8BCF98C95 – C:\LiberKey\Apps\BonkEnc\App\BonkEnc\manual\cs\images\explorer.png
[2009/04/03 11:52:58 | 000,003,434 | —- | M] () MD5=04537B64F3BDC2C6D45CA1F8BCF98C95 – C:\LiberKey\Apps\Freac\App\Freac\manual\cs\images\explorer.png
[2007/03/24 15:09:12 | 000,007,631 | —- | M] () MD5=207AC0DA3D2CB23E7A27D88DCBAFF51E – C:\LiberKey\Apps\BonkEnc\App\BonkEnc\manual\de\images\explorer.png
[2007/03/24 14:09:12 | 000,007,631 | —- | M] () MD5=207AC0DA3D2CB23E7A27D88DCBAFF51E – C:\LiberKey\Apps\Freac\App\Freac\manual\de\images\explorer.png
[2011/10/26 18:41:20 | 000,006,497 | —- | M] () MD5=394575BF992F7D9FD85EAC7726519ACA – C:\LiberKey\Apps\TeraCopy\App\TeraCopy\Images\Explorer.png
[2013/01/24 23:35:51 | 000,039,223 | —- | M] () MD5=62CE98B96679E00092114B7DBEE66C22 – C:\Program Files (x86)\Tiggit\data\games\tiggit.net\gamedata\tiggit.net\wesnoth\data\core\images\portraits\dwarves\explorer.png
[2007/02/17 12:33:50 | 000,007,699 | —- | M] () MD5=87D9765DCD1C5D451242D731BD9BE7D4 – C:\LiberKey\Apps\BonkEnc\App\BonkEnc\manual\en\images\explorer.png
[2007/02/17 12:33:50 | 000,007,699 | —- | M] () MD5=87D9765DCD1C5D451242D731BD9BE7D4 – C:\LiberKey\Apps\BonkEnc\App\BonkEnc\manual\pt\images\explorer.png
[2008/01/31 02:58:40 | 000,007,699 | —- | M] () MD5=87D9765DCD1C5D451242D731BD9BE7D4 – C:\LiberKey\Apps\BonkEnc\App\BonkEnc\manual\ru\images\explorer.png
[2007/02/17 11:33:50 | 000,007,699 | —- | M] () MD5=87D9765DCD1C5D451242D731BD9BE7D4 – C:\LiberKey\Apps\Freac\App\Freac\manual\en\images\explorer.png
[2007/02/17 11:33:50 | 000,007,699 | —- | M] () MD5=87D9765DCD1C5D451242D731BD9BE7D4 – C:\LiberKey\Apps\Freac\App\Freac\manual\es\images\explorer.png
[2007/02/17 11:33:50 | 000,007,699 | —- | M] () MD5=87D9765DCD1C5D451242D731BD9BE7D4 – C:\LiberKey\Apps\Freac\App\Freac\manual\pt\images\explorer.png
[2008/01/31 01:58:40 | 000,007,699 | —- | M] () MD5=87D9765DCD1C5D451242D731BD9BE7D4 – C:\LiberKey\Apps\Freac\App\Freac\manual\ru\images\explorer.png
[2013/01/24 23:35:51 | 000,130,384 | —- | M] () MD5=C5C775E53957BBADE708A975AFB22E41 – C:\Program Files (x86)\Tiggit\data\games\tiggit.net\gamedata\tiggit.net\wesnoth\data\core\images\portraits\dwarves\transparent\explorer.png
[2013/01/24 23:36:00 | 000,001,433 | —- | M] () MD5=D811070A2C7AF1080A0DFF012E81A29C – C:\Program Files (x86)\Tiggit\data\games\tiggit.net\gamedata\tiggit.net\wesnoth\data\core\images\units\dwarves\explorer.png
[2008/02/23 15:57:12 | 000,008,100 | —- | M] () MD5=E3A2955382A41A30CA86C8A1EFD38808 – C:\LiberKey\Apps\BonkEnc\App\BonkEnc\manual\el\images\el\explorer.png
[2008/02/23 14:57:12 | 000,008,100 | —- | M] () MD5=E3A2955382A41A30CA86C8A1EFD38808 – C:\LiberKey\Apps\Freac\App\Freac\manual\el\images\el\explorer.png
< MD5 for: EXPLORER.RESX >
[2009/12/21 11:28:26 | 000,040,049 | —- | M] () MD5=B16D2C77324DE7222CB0EA55C7B32784 – C:\ProgramData\Microsoft\VSTAHost\SSIS_ScriptComponent\9.0\ItemTemplatesCache\VisualBasic\Windows Forms\1033\Explorer.zip\explorer.resx
[2009/12/21 11:28:26 | 000,040,049 | —- | M] () MD5=B16D2C77324DE7222CB0EA55C7B32784 – C:\ProgramData\Microsoft\VSTAHost\SSIS_ScriptTask\9.0\ItemTemplatesCache\VisualBasic\Windows Forms\1033\Explorer.zip\explorer.resx
[2009/12/21 11:28:26 | 000,040,049 | —- | M] () MD5=B16D2C77324DE7222CB0EA55C7B32784 – C:\Users\All Users\Microsoft\VSTAHost\SSIS_ScriptComponent\9.0\ItemTemplatesCache\VisualBasic\Windows Forms\1033\Explorer.zip\explorer.resx
[2009/12/21 11:28:26 | 000,040,049 | —- | M] () MD5=B16D2C77324DE7222CB0EA55C7B32784 – C:\Users\All Users\Microsoft\VSTAHost\SSIS_ScriptTask\9.0\ItemTemplatesCache\VisualBasic\Windows Forms\1033\Explorer.zip\explorer.resx
[2009/12/21 11:28:26 | 000,040,049 | —- | M] () MD5=B16D2C77324DE7222CB0EA55C7B32784 – C:\Windows.old\ProgramData\Application Data\Microsoft\VSTAHost\SSIS_ScriptComponent\9.0\ItemTemplatesCache\VisualBasic\Windows Forms\1033\Explorer.zip\explorer.resx
[2009/12/21 11:28:26 | 000,040,049 | —- | M] () MD5=B16D2C77324DE7222CB0EA55C7B32784 – C:\Windows.old\ProgramData\Application Data\Microsoft\VSTAHost\SSIS_ScriptTask\9.0\ItemTemplatesCache\VisualBasic\Windows Forms\1033\Explorer.zip\explorer.resx
< MD5 for: EXPLORER.VB >
[2009/12/21 11:28:26 | 000,008,501 | —- | M] () MD5=55808E7AF87B5C18B97707BEF8EBDDEA – C:\ProgramData\Microsoft\VSTAHost\SSIS_ScriptComponent\9.0\ItemTemplatesCache\VisualBasic\Windows Forms\1033\Explorer.zip\explorer.vb
[2009/12/21 11:28:26 | 000,008,501 | —- | M] () MD5=55808E7AF87B5C18B97707BEF8EBDDEA – C:\ProgramData\Microsoft\VSTAHost\SSIS_ScriptTask\9.0\ItemTemplatesCache\VisualBasic\Windows Forms\1033\Explorer.zip\explorer.vb
[2009/12/21 11:28:26 | 000,008,501 | —- | M] () MD5=55808E7AF87B5C18B97707BEF8EBDDEA – C:\Users\All Users\Microsoft\VSTAHost\SSIS_ScriptComponent\9.0\ItemTemplatesCache\VisualBasic\Windows Forms\1033\Explorer.zip\explorer.vb
[2009/12/21 11:28:26 | 000,008,501 | —- | M] () MD5=55808E7AF87B5C18B97707BEF8EBDDEA – C:\Users\All Users\Microsoft\VSTAHost\SSIS_ScriptTask\9.0\ItemTemplatesCache\VisualBasic\Windows Forms\1033\Explorer.zip\explorer.vb
[2009/12/21 11:28:26 | 000,008,501 | —- | M] () MD5=55808E7AF87B5C18B97707BEF8EBDDEA – C:\Windows.old\ProgramData\Application Data\Microsoft\VSTAHost\SSIS_ScriptComponent\9.0\ItemTemplatesCache\VisualBasic\Windows Forms\1033\Explorer.zip\explorer.vb
[2009/12/21 11:28:26 | 000,008,501 | —- | M] () MD5=55808E7AF87B5C18B97707BEF8EBDDEA – C:\Windows.old\ProgramData\Application Data\Microsoft\VSTAHost\SSIS_ScriptTask\9.0\ItemTemplatesCache\VisualBasic\Windows Forms\1033\Explorer.zip\explorer.vb
< MD5 for: EXPLORER.VSTEMPLATE >
[2009/12/21 11:28:26 | 000,006,491 | —- | M] () MD5=FB731348042E3356E2215A6747CE893C – C:\ProgramData\Microsoft\VSTAHost\SSIS_ScriptComponent\9.0\ItemTemplatesCache\VisualBasic\Windows Forms\1033\Explorer.zip\explorer.vstemplate
[2009/12/21 11:28:26 | 000,006,491 | —- | M] () MD5=FB731348042E3356E2215A6747CE893C – C:\ProgramData\Microsoft\VSTAHost\SSIS_ScriptTask\9.0\ItemTemplatesCache\VisualBasic\Windows Forms\1033\Explorer.zip\explorer.vstemplate
[2009/12/21 11:28:26 | 000,006,491 | —- | M] () MD5=FB731348042E3356E2215A6747CE893C – C:\Users\All Users\Microsoft\VSTAHost\SSIS_ScriptComponent\9.0\ItemTemplatesCache\VisualBasic\Windows Forms\1033\Explorer.zip\explorer.vstemplate
[2009/12/21 11:28:26 | 000,006,491 | —- | M] () MD5=FB731348042E3356E2215A6747CE893C – C:\Users\All Users\Microsoft\VSTAHost\SSIS_ScriptTask\9.0\ItemTemplatesCache\VisualBasic\Windows Forms\1033\Explorer.zip\explorer.vstemplate
[2009/12/21 11:28:26 | 000,006,491 | —- | M] () MD5=FB731348042E3356E2215A6747CE893C – C:\Windows.old\ProgramData\Application Data\Microsoft\VSTAHost\SSIS_ScriptComponent\9.0\ItemTemplatesCache\VisualBasic\Windows Forms\1033\Explorer.zip\explorer.vstemplate
[2009/12/21 11:28:26 | 000,006,491 | —- | M] () MD5=FB731348042E3356E2215A6747CE893C – C:\Windows.old\ProgramData\Application Data\Microsoft\VSTAHost\SSIS_ScriptTask\9.0\ItemTemplatesCache\VisualBasic\Windows Forms\1033\Explorer.zip\explorer.vstemplate
< MD5 for: IEXPLORE.EXE >
[2003/09/17 03:29:24 | 000,091,136 | —- | M] (Microsoft Corporation) MD5=10D361953D6D2988DCD02DBB6D5F7122 – C:\Win32App\IE6Eolas\iexplore.exe
[2013/02/22 09:04:50 | 000,763,520 | —- | M] (Microsoft Corporation) MD5=25B53709A37C3FD814B68EA0A92D18F9 – C:\Program Files\Internet Explorer\iexplore.exe
[2013/02/22 09:04:50 | 000,763,520 | —- | M] (Microsoft Corporation) MD5=25B53709A37C3FD814B68EA0A92D18F9 – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16476_none_0d238c71808d94e7\iexplore.exe
[2009/07/14 03:17:29 | 000,673,048 | —- | M] (Microsoft Corporation) MD5=2C32E3E596CFE660353753EABEFB0540 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.16385_none_19ba3f8a72d988f3\iexplore.exe
[2013/02/22 06:10:00 | 000,757,376 | —- | M] (Microsoft Corporation) MD5=32732CEDE2A1106B736EF3D84054EE04 – C:\Program Files (x86)\Internet Explorer\iexplore.exe
[2013/02/22 06:10:00 | 000,757,376 | —- | M] (Microsoft Corporation) MD5=32732CEDE2A1106B736EF3D84054EE04 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16476_none_177836c3b4ee56e2\iexplore.exe
[2013/02/22 06:10:31 | 000,757,360 | —- | M] (Microsoft Corporation) MD5=4145E2B5663F6FACC08EFDB17B658BB2 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.20586_none_17f703a2ce14129d\iexplore.exe
[2013/02/02 10:09:12 | 000,763,424 | —- | M] (Microsoft Corporation) MD5=7C2923004FFC497E54F38E835F108EE8 – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.20580_none_0d9c579499b8b898\iexplore.exe
[2011/06/16 09:40:02 | 000,748,336 | —- | M] (Microsoft Corporation) MD5=904E13BA41AF2E353A32CF351CA53639 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16421_none_17a944edb4ca4c7a\iexplore.exe
[2013/02/02 06:19:03 | 000,757,280 | —- | M] (Microsoft Corporation) MD5=A285E1965C115031DA02B777EE9D7689 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.20580_none_17f101e6ce197a93\iexplore.exe
[2013/02/02 09:37:58 | 000,763,424 | —- | M] (Microsoft Corporation) MD5=A8EBEBCD9F5C49475194099FCD276992 – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16470_none_0d1d8ab58092fcdd\iexplore.exe
[2013/02/22 09:17:45 | 000,763,520 | —- | M] (Microsoft Corporation) MD5=B21A57AA4CB928059A0C0C58A9E77A02 – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.20586_none_0da2595099b350a2\iexplore.exe
[2013/04/04 14:50:32 | 000,218,184 | —- | M] () MD5=B4C6E3889BB310CA7E974A04EC6E46AC – C:\Program Files (x86)\Malwarebytes' Anti-Malware\Chameleon\iexplore.exe
[2013/02/02 06:19:04 | 000,757,296 | —- | M] (Microsoft Corporation) MD5=DDE5A0DFAF7C6370FB36402D7A746ED3 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16470_none_17723507b4f3bed8\iexplore.exe
[2011/06/16 09:40:00 | 000,754,480 | —- | M] (Microsoft Corporation) MD5=F1424C1B9B1813BF825E45DF3790BC8A – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16421_none_0d549a9b80698a7f\iexplore.exe
[2009/07/14 03:43:43 | 000,696,600 | —- | M] (Microsoft Corporation) MD5=F2B0D41E1D08D0B2006DF5AA2E74C81E – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.16385_none_0f6595383e78c6f8\iexplore.exe
< MD5 for: IEXPLORE.EXE.LOCAL >
[2003/08/27 16:34:02 | 000,000,000 | —- | M] () MD5=D41D8CD98F00B204E9800998ECF8427E – C:\Win32App\IE6Eolas\IEXPLORE.EXE.local
< MD5 for: IEXPLORE.EXE.MUI >
[2011/06/16 09:40:01 | 000,005,632 | —- | M] (Microsoft Corporation) MD5=17FAE936C452188D05852DE8D1082013 – C:\Program Files\Internet Explorer\en-US\iexplore.exe.mui
[2011/06/16 09:40:01 | 000,005,632 | —- | M] (Microsoft Corporation) MD5=17FAE936C452188D05852DE8D1082013 – C:\Windows\winsxs\amd64_microsoft-windows-i..-optional.resources_31bf3856ad364e35_9.4.8112.16421_en-us_07013012b816cb66\iexplore.exe.mui
[2011/06/16 09:40:02 | 000,005,632 | —- | M] (Microsoft Corporation) MD5=4C71CCB3C8817185E67210856778831F – C:\Program Files (x86)\Internet Explorer\en-US\iexplore.exe.mui
[2011/06/16 09:40:02 | 000,005,632 | —- | M] (Microsoft Corporation) MD5=4C71CCB3C8817185E67210856778831F – C:\Windows\winsxs\wow64_microsoft-windows-i..-optional.resources_31bf3856ad364e35_9.4.8112.16421_en-us_1155da64ec778d61\iexplore.exe.mui
[2009/07/14 04:29:20 | 000,005,120 | —- | M] (Microsoft Corporation) MD5=C29BCFB504E33FEADDFA2D0183CEF62F – C:\Windows\winsxs\amd64_microsoft-windows-i..-optional.resources_31bf3856ad364e35_8.0.7600.16385_en-us_09122aaf762607df\iexplore.exe.mui
[2009/07/14 04:05:06 | 000,005,120 | —- | M] (Microsoft Corporation) MD5=FBA4CD95930248053A2C3F43CA70B986 – C:\Windows\winsxs\wow64_microsoft-windows-i..-optional.resources_31bf3856ad364e35_8.0.7600.16385_en-us_1366d501aa86c9da\iexplore.exe.mui
< MD5 for: SERVICES >
[2009/06/10 23:00:26 | 000,017,463 | —- | M] () MD5=D9E1A01B480D961B7CF0509D597A92D6 – C:\Windows\winsxs\amd64_microsoft-windows-w..nfrastructure-other_31bf3856ad364e35_6.1.7600.16385_none_6079f415110c0210\services
< MD5 for: SERVICES.AIP >
[2012/03/29 20:35:50 | 000,375,952 | —- | M] (Adobe Systems Incorporated) MD5=5965DFD83E10938A579952EB58C10298 – C:\Program Files (x86)\Adobe_CS6\Adobe Illustrator CS6\Plug-ins\Extensions\Services.aip
[2012/03/29 20:35:50 | 000,297,104 | —- | M] (Adobe Systems Incorporated) MD5=8311BFD3FD21EB8089259C491406A7B0 – C:\Program Files\Adobe_CS6\Adobe Illustrator CS6 (64 Bit)\Plug-ins\Extensions\Services.aip
< MD5 for: SERVICES.ASP >
[2012/06/04 09:51:50 | 000,005,229 | —- | M] () MD5=0A6CB364F2F16D06A3049F6331DF1B77 – C:\Dev\Sites\AR\services.asp
[2012/06/04 09:51:50 | 000,005,229 | —- | M] () MD5=0A6CB364F2F16D06A3049F6331DF1B77 – C:\Users\Frank\AR\services.asp
[2013/01/18 11:23:36 | 000,016,194 | —- | M] () MD5=A0B4C685FC0044BB06810C1944F8054E – C:\Dev\Sites\assitport\all_asp_pack\inetpub\assitport.com\Admin\services.asp
[2012/04/23 16:38:38 | 000,005,189 | —- | M] () MD5=D42930728C52C183950549742BA9FBD8 – C:\Dev\Sites\Retirease_Framework\services.asp
[2013/02/05 14:25:50 | 000,016,236 | —- | M] () MD5=E5C96E4E9126D1FA1D305C1B26E81DD8 – C:\Dev\Sites\assitport\Admin\services.asp
< MD5 for: SERVICES.ASP.MNO >
[2012/02/13 11:57:30 | 000,004,035 | —- | M] () MD5=C1EB3148B7644CCEE7ADB17984126553 – C:\Dev\Sites\assitport\Admin\_notes\services.asp.mno
[2012/03/07 16:27:48 | 000,000,569 | —- | M] () MD5=C49E7034721E885775A0A4CA5D4B2205 – C:\Dev\Sites\AR\_notes\services.asp.mno
[2012/03/07 16:27:48 | 000,000,569 | —- | M] () MD5=C49E7034721E885775A0A4CA5D4B2205 – C:\Users\Frank\AR\_notes\services.asp.mno
< MD5 for: SERVICES.CFG >
[2012/09/23 20:43:36 | 000,603,848 | R— | M] () MD5=81B120EAEE296F0E54F66C16C5A21367 – C:\Windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744BA0000000010\11.0.0\services.cfg
[2012/12/18 21:08:30 | 000,559,043 | —- | M] () MD5=BA25E8F1460C7453B7488FE4B42F6919 – C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Services\Services.cfg
< MD5 for: SERVICES.EXE >
[2009/07/14 03:39:37 | 000,328,704 | —- | M] (Microsoft Corporation) MD5=24ACB7E5BE595468E3B9AA488B9B4FCB – C:\Windows\SysNative\services.exe
[2009/07/14 03:39:37 | 000,328,704 | —- | M] (Microsoft Corporation) MD5=24ACB7E5BE595468E3B9AA488B9B4FCB – C:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_2b54b20ee6fa07b1\services.exe
< MD5 for: SERVICES.EXE.MUI >
[2009/07/14 04:25:40 | 000,017,408 | —- | M] (Microsoft Corporation) MD5=6507BF0DC2D1F5F32493C288EAA59277 – C:\Windows\SysNative\en-US\services.exe.mui
[2009/07/14 04:25:40 | 000,017,408 | —- | M] (Microsoft Corporation) MD5=6507BF0DC2D1F5F32493C288EAA59277 – C:\Windows\winsxs\amd64_microsoft-windows-s..ontroller.resources_31bf3856ad364e35_6.1.7600.16385_en-us_c5f238be3fa63468\services.exe.mui
< MD5 for: SERVICES.GIF >
[2011/10/18 21:56:16 | 000,020,291 | —- | M] () MD5=2541E301A574AB34DE02E7241C28E3D1 – C:\Program Files (x86)\Persits Software\AspEmail\Documentation\images\services.gif
[2011/10/18 21:56:16 | 000,020,291 | —- | M] () MD5=2541E301A574AB34DE02E7241C28E3D1 – C:\Program Files\Persits Software\AspEmail\Documentation\images\services.gif
[1999/10/15 14:58:10 | 000,007,010 | —- | M] () MD5=352329213037A32FFC4CA1487B9A0ADC – C:\Program Files (x86)\Persits Software\AspEmail\EmailAgent\Documentation\services.gif
[2008/07/09 11:26:32 | 000,000,951 | —- | M] () MD5=6D735543F14B3EF62D439DDD13DC4D3D – C:\Program Files (x86)\Red Gate\SQL Compare 7\Reporting\images\Services.gif
< MD5 for: SERVICES.H >
[2013/05/21 17:18:40 | 000,001,124 | —- | M] () MD5=3E3742C81D3173F4469F85050E4C5AAD – C:\Program Files\MySQL\MySQL Server 5.6\include\mysql\services.h
[2013/05/21 17:18:38 | 000,001,124 | —- | M] () MD5=3E3742C81D3173F4469F85050E4C5AAD – C:\xampp\mysql\include\mysql\services.h
< MD5 for: SERVICES.HTML >
[2011/02/12 19:57:05 | 000,003,050 | —- | M] () MD5=4E636E1B08C06F800C35F3920A7CA90E – C:\Users\Frank\AppData\Roaming\JonDo\help\en\help\services.html
[2007/03/19 18:52:26 | 000,003,419 | —- | M] () MD5=9630A67FFAB586FD8F3CF7519C0FC101 – C:\Program Files (x86)\Quest Software\Toad for SQL Server Freeware 5.0\Plugins\SqlServer\ServiceBroker\HTML\Services.html
[2011/02/12 19:57:05 | 000,003,490 | —- | M] () MD5=A20A519787DDF91AD5038BC587F54464 – C:\Users\Frank\AppData\Roaming\JonDo\help\de\help\services.html
< MD5 for: SERVICES.JSM >
[2012/09/07 19:41:10 | 000,005,970 | —- | M] () MD5=0AA0A4C3AFBB008F7B349BCEF039D09D – C:\Program Files (x86)\WebSupergoo\ABCpdf .NET 9.0\ABCGecko\XULRunner\modules\Services.jsm
[2011/06/16 13:01:02 | 000,005,958 | —- | M] () MD5=301A788B79582D77CA6D61A91473280A – C:\LiberKey\Apps\RJTextEd\App\RJTextEd\xulrunner\modules\Services.jsm
< MD5 for: SERVICES.MOF >
[2009/06/10 22:44:06 | 000,002,866 | —- | M] () MD5=26A11C895A7F0B6D32105EBE127D8500 – C:\Windows\SysNative\wbem\services.mof
[2009/06/10 22:44:06 | 000,002,866 | —- | M] () MD5=26A11C895A7F0B6D32105EBE127D8500 – C:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_2b54b20ee6fa07b1\services.mof
< MD5 for: SERVICES.MSC >
[2009/07/14 04:23:30 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\Windows\SysNative\en-US\services.msc
[2009/06/10 22:38:36 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\Windows\SysNative\services.msc
[2009/07/14 04:08:50 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\Windows\SysWOW64\en-US\services.msc
[2009/06/10 23:21:09 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\Windows\SysWOW64\services.msc
[2009/07/14 04:23:30 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\Windows\winsxs\amd64_microsoft-windows-s..cessnapin.resources_31bf3856ad364e35_6.1.7600.16385_en-us_003408aa160fce5b\services.msc
[2009/06/10 22:38:36 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\Windows\winsxs\amd64_microsoft-windows-servicessnapin_31bf3856ad364e35_6.1.7600.16385_none_2b58d44b5f6beb8a\services.msc
[2009/07/14 04:08:50 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\Windows\winsxs\x86_microsoft-windows-s..cessnapin.resources_31bf3856ad364e35_6.1.7600.16385_en-us_a4156d265db25d25\services.msc
[2009/06/10 23:21:09 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\Windows\winsxs\x86_microsoft-windows-servicessnapin_31bf3856ad364e35_6.1.7600.16385_none_cf3a38c7a70e7a54\services.msc
< MD5 for: SERVICES.PHP >
[2013/04/07 12:19:17 | 000,005,441 | —- | M] () MD5=925304A8252B8AABBA263D29B0E8D2CB – C:\Dev\Sites\mambawp\wp-content\plugins\backupwordpress\classes\services.php
< MD5 for: SERVICES.PNG >
[2008/07/06 22:40:08 | 000,007,189 | —- | M] () MD5=D75F412AB58B9173F0EA00143B7266FE – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\p017310x.BACKEDUP\extensions\{b8d51471-15f1-46cd-a600-448a6b103c2d}\chrome\content\icons\services.png
< MD5 for: SERVICES.PTXML >
[2009/07/13 22:16:17 | 000,001,061 | —- | M] () MD5=640D7DD61B1CFA6C96F80F68F78CDFA7 – C:\Windows\SysNative\wdi\perftrack\Services.ptxml
[2009/07/13 22:16:17 | 000,001,061 | —- | M] () MD5=640D7DD61B1CFA6C96F80F68F78CDFA7 – C:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_2b54b20ee6fa07b1\Services.ptxml
< MD5 for: SERVICES.RDB >
[2012/08/13 10:51:02 | 000,178,348 | —- | M] () MD5=039C8CFBD74EE07F38CD9E4C7D95C5C6 – C:\Program Files (x86)\OpenOffice.org 3\Basis\program\services.rdb
[2012/08/13 10:51:02 | 000,000,453 | —- | M] () MD5=3D2ADA15FEF5B5FF468243161543D610 – C:\Program Files (x86)\OpenOffice.org 3\program\services.rdb
[2011/01/17 17:59:50 | 000,237,568 | —- | M] () MD5=507957679AE4579C15D57FA741EA6FFA – C:\LiberKey\Apps\OpenOffice\App\openoffice\URE\misc\services.rdb
[2012/08/10 15:12:16 | 000,008,060 | —- | M] () MD5=7CA7D7150EC46321162F932ADCF5F35B – C:\Program Files (x86)\OpenOffice.org 3\URE\misc\services.rdb
[2013/01/16 23:57:32 | 000,179,429 | —- | M] () MD5=B6625AAEBFE8F0FC7118B5F390DBEEFE – C:\LiberKey\Apps\LibreOffice\App\LibreOffice\program\services\services.rdb
[2011/01/17 17:59:08 | 005,539,328 | —- | M] () MD5=F2B666905F7FDAA80C86A101A7DE62F9 – C:\LiberKey\Apps\OpenOffice\App\openoffice\Basis\program\services.rdb
[2013/01/16 17:19:46 | 000,008,060 | —- | M] () MD5=F36D78E85FEB2A282AA9F89DC0910CF0 – C:\LiberKey\Apps\LibreOffice\App\LibreOffice\URE\misc\services.rdb
< MD5 for: SERVICES.VIM >
[2010/10/27 17:44:14 | 000,000,459 | —- | M] () MD5=193ED9B27B25456FBE50E6111B8E6770 – C:\Program Files (x86)\Vim\vim73\ftplugin\services.vim
[2010/10/27 17:42:50 | 000,001,865 | —- | M] () MD5=A17575F0BA54E8FB1148DDFC2361D776 – C:\Program Files (x86)\Vim\vim73\syntax\services.vim
< MD5 for: SERVICES.XRDS.PHP >
[2010/05/26 21:04:52 | 000,002,891 | —- | M] () MD5=31D6836C5D124CBF2B26D8B50F9C48D5 – C:\Dev\Sites\assitport\oauth-php\example\server\www\services.xrds.php
< MD5 for: WINLOGON.ADML >
[2009/07/14 04:25:22 | 000,008,013 | —- | M] () MD5=CED0EAD8D152B3D0F114698DE2316C5E – C:\Windows\PolicyDefinitions\en-US\WinLogon.adml
[2009/07/14 04:25:22 | 000,008,013 | —- | M] () MD5=CED0EAD8D152B3D0F114698DE2316C5E – C:\Windows\winsxs\amd64_microsoft-windows-winlogon-adm.resources_31bf3856ad364e35_6.1.7600.16385_en-us_f0f9032ef6930070\WinLogon.adml
< MD5 for: WINLOGON.ADMX >
[2009/06/10 23:04:41 | 000,005,237 | —- | M] () MD5=89D8F50E186A16C2CED3CF36DBBC0B2C – C:\Windows\PolicyDefinitions\WinLogon.admx
[2009/06/10 23:04:41 | 000,005,237 | —- | M] () MD5=89D8F50E186A16C2CED3CF36DBBC0B2C – C:\Windows\winsxs\amd64_microsoft-windows-winlogon-adm_31bf3856ad364e35_6.1.7600.16385_none_d7024e6992f3424d\WinLogon.admx
< MD5 for: WINLOGON.EXE >
[2009/07/14 03:39:52 | 000,389,120 | —- | M] (Microsoft Corporation) MD5=132328DF455B0028F13BF0ABEE51A63A – C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_cbb7f2bdeea2829c\winlogon.exe
[2009/10/28 09:01:57 | 000,389,632 | —- | M] (Microsoft Corporation) MD5=A93D41A4D4B0D91C072D11DD8AF266DE – C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_cc522fd507b468f8\winlogon.exe
[2013/04/04 14:50:32 | 000,218,184 | —- | M] () MD5=B4C6E3889BB310CA7E974A04EC6E46AC – C:\Program Files (x86)\Malwarebytes' Anti-Malware\Chameleon\winlogon.exe
[2009/10/28 08:24:40 | 000,389,632 | —- | M] (Microsoft Corporation) MD5=DA3E2A6FA9660CC75B471530CE88453A – C:\Windows\SysNative\winlogon.exe
[2009/10/28 08:24:40 | 000,389,632 | —- | M] (Microsoft Corporation) MD5=DA3E2A6FA9660CC75B471530CE88453A – C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_cbe534e7ee8042ad\winlogon.exe
< MD5 for: WINLOGON.EXE.MUI >
[2009/07/14 04:29:52 | 000,022,528 | —- | M] (Microsoft Corporation) MD5=56D03B64B8C483C1D12A8E4577B3B332 – C:\Windows\SysNative\en-US\winlogon.exe.mui
[2009/07/14 04:29:52 | 000,022,528 | —- | M] (Microsoft Corporation) MD5=56D03B64B8C483C1D12A8E4577B3B332 – C:\Windows\winsxs\amd64_microsoft-windows-winlogon.resources_31bf3856ad364e35_6.1.7600.16385_en-us_26ed83321dc778e1\winlogon.exe.mui
< MD5 for: WINLOGON.MFL >
[2009/07/14 04:27:22 | 000,001,080 | —- | M] () MD5=2783ED50691284F7EAE6BE9729337E1A – C:\Windows\SysNative\wbem\en-US\winlogon.mfl
[2009/07/14 04:27:22 | 000,001,080 | —- | M] () MD5=2783ED50691284F7EAE6BE9729337E1A – C:\Windows\winsxs\amd64_microsoft-windows-winlogon-mof.resources_31bf3856ad364e35_6.1.7600.16385_en-us_84afd4fd38ffd276\winlogon.mfl
< MD5 for: WINLOGON.MOF >
[2009/07/13 22:30:01 | 000,003,192 | —- | M] () MD5=DF722B96F32A61783BC310FACF10240B – C:\Windows\SysNative\wbem\winlogon.mof
[2009/07/13 22:30:01 | 000,003,192 | —- | M] () MD5=DF722B96F32A61783BC310FACF10240B – C:\Windows\winsxs\amd64_microsoft-windows-winlogon-mof_31bf3856ad364e35_6.1.7600.16385_none_dc2dbb778f98e40f\winlogon.mof
< %SYSTEMDRIVE%\*.* >
[2010/02/03 09:12:37 | 000,001,024 | —- | M] () – C:\.rnd
[2009/07/01 02:24:40 | 000,000,374 | —- | M] () – C:\1.bin
[2009/03/21 23:25:16 | 000,002,731 | —- | M] () – C:\1.XRM-MS
[2009/06/10 23:42:20 | 000,000,024 | —- | M] () – C:\autoexec.bat
[2012/10/04 18:28:07 | 000,000,370 | —- | M] () – C:\backuplog.log
[2011/07/20 15:13:16 | 000,050,688 | —- | M] () – C:\Bailey Frank (Studio256).msg
[2007/02/28 15:48:24 | 000,087,552 | —- | M] (Microsoft Corporation) – C:\bootinst.exe
[2009/07/14 03:38:58 | 000,383,562 | RHS- | M] () – C:\bootmgr
[2006/11/14 04:00:00 | 000,087,552 | —- | M] (Microsoft Corporation) – C:\bootrest.exe
[2010/01/03 02:42:03 | 000,008,192 | RHS- | M] () – C:\BOOTSECT.BAK
[2013/01/12 23:14:15 | 000,000,467 | —- | M] () – C:\BRAAINNNS (J).lnk
[2009/06/10 23:42:20 | 000,000,010 | —- | M] () – C:\config.sys
[2010/04/26 17:00:37 | 000,002,558 | —- | M] () – C:\download.pfx
[2013/06/29 13:41:28 | 000,005,188 | —- | M] () – C:\DV.txt
[2013/07/26 11:02:23 | 000,000,091 | —- | M] () – C:\init.txt
[2009/09/10 21:10:01 | 000,000,000 | RHS- | M] () – C:\IO.SYS
[2009/07/29 17:55:51 | 000,000,810 | —- | M] () – C:\L7.cmd
[2006/12/01 23:37:14 | 000,904,704 | —- | M] (Microsoft Corporation) – C:\msdia80.dll
[2009/09/10 21:10:01 | 000,000,000 | RHS- | M] () – C:\MSDOS.SYS
[2011/05/21 12:49:31 | 000,000,206 | —- | M] () – C:\realtek.log
[2011/05/21 12:49:31 | 000,002,236 | —- | M] () – C:\RHDSetup.log
[2012/08/21 00:02:15 | 000,973,392 | —- | M] () – C:\Rx__A_Tale_of_Electronegativity_-_Robert_Brockway - Fixed line height.epub
[2008/04/21 22:07:03 | 000,168,736 | —- | M] () – C:\s1
[2007/03/08 13:53:30 | 000,012,298 | —- | M] () – C:\s2
[2011/07/01 11:06:58 | 000,002,048 | —- | M] () – C:\scores.db
[2010/07/21 20:46:08 | 000,000,000 | —- | M] () – C:\sd6k
[2013/04/02 16:44:46 | 000,187,372 | —- | M] () – C:\TDSSKiller.2.8.16.0_02.04.2013_16.44.02_log.txt
[2013/09/02 13:36:24 | 000,000,354 | —- | M] () – C:\TDSSKiller.2.8.18.0_02.09.2013_13.36.19_log.txt
[2013/09/02 13:37:49 | 000,010,912 | —- | M] () – C:\TDSSKiller.2.9.2.0_02.09.2013_13.37.14_log.txt
[2013/09/02 13:42:54 | 000,580,116 | —- | M] () – C:\TDSSKiller.2.9.2.0_02.09.2013_13.40.05_log.txt
[2011/07/10 23:03:15 | 000,000,216 | —- | M] () – C:\temp.txt
[2012/02/27 11:21:06 | 000,000,005 | —- | M] () – C:\testfrankebailey.txt
[2009/09/12 22:49:02 | 000,171,136 | RHS- | M] () – C:\w7ldr
[2013/06/16 16:11:02 | 000,001,238 | —- | M] () – C:\wakeuptoken.info
[2012/02/27 11:25:11 | 000,000,135 | —- | M] () – C:\wishList.dek
[2011/05/20 16:53:18 | 000,001,764 | —- | M] () – C:\XXCLONE.HYP
< %systemroot%\Fonts\*.com >
[2009/07/14 07:32:31 | 000,026,040 | —- | M] () – C:\Windows\Fonts\GlobalMonospace.CompositeFont
[2009/07/14 07:32:31 | 000,026,489 | —- | M] () – C:\Windows\Fonts\GlobalSansSerif.CompositeFont
[2009/07/14 07:32:31 | 000,029,779 | —- | M] () – C:\Windows\Fonts\GlobalSerif.CompositeFont
[2009/07/14 07:32:31 | 000,043,318 | —- | M] () – C:\Windows\Fonts\GlobalUserInterface.CompositeFont
< %systemroot%\Fonts\*.dll >
< %systemroot%\Fonts\*.ini >
[2009/06/10 22:49:50 | 000,000,065 | —- | M] () – C:\Windows\Fonts\desktop.ini
< %systemroot%\Fonts\*.ini2 >
< %systemroot%\Fonts\*.exe >
< %systemroot%\system32\spool\prtprocs\w32x86\*.* >
< %systemroot%\REPAIR\*.bak1 >
< %systemroot%\REPAIR\*.ini >
< %systemroot%\system32\*.jpg >
< %systemroot%\*.jpg >
< %systemroot%\*.png >
< %systemroot%\*.scr >
[2012/09/12 15:57:44 | 000,322,048 | —- | M] (Microsoft Corporation) – C:\Windows\WLXPGSS.SCR
[3 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
< %systemroot%\*._sy >
< %APPDATA%\Adobe\Update\*.* >
< %ALLUSERSPROFILE%\Favorites\*.* >
< %APPDATA%\Microsoft\*.* >
< %PROGRAMFILES%\*.* >
[2009/07/14 06:54:24 | 000,000,174 | -HS- | M] () – C:\Program Files (x86)\desktop.ini
[2010/05/10 18:30:32 | 008,414,720 | —- | M] () – C:\Program Files (x86)\HTML Guardian 7.msi
[2011/04/25 22:14:38 | 000,000,162 | —- | M] () – C:\Program Files (x86)\INSTALL.LOG
[1 C:\Program Files (x86)\*.tmp files -> C:\Program Files (x86)\*.tmp -> ]
< %APPDATA%\Update\*.* >
< %systemroot%\*. /mp /s >
< dir "%systemdrive%\*" /S /A:L /C >
Volume in drive C is XENTRALITY
Volume Serial Number is B050-0C48
Directory of C:\
2009/07/14 06:53 AM Documents and Settings [C:\Users]
0 File(s) 0 bytes
Directory of C:\ProgramData
2013/08/27 09:43 AM Adobe [J:\Software\IllustratorPortable\App\ProgramData\Adobe]
2013/08/25 10:11 PM Adobe.BackupByIllustratorPortable [J:\Software\IllustratorPortable\App\ProgramData\Adobe]
2010/01/02 04:52 PM Application Data [C:\ProgramData]
2010/01/02 04:52 PM Desktop [C:\Users\Public\Desktop]
2010/01/02 04:52 PM Documents [C:\Users\Public\Documents]
2010/01/02 04:52 PM Favorites [C:\Users\Public\Favorites]
2013/08/27 09:43 AM regid.1986-12.com.adobe [J:\Software\IllustratorPortable\App\ProgramData\regid.1986-12.com.adobe]
2013/08/25 10:11 PM regid.1986-12.com.adobe.BackupByIllustratorPortable [J:\Software\IllustratorPortable\App\ProgramData\regid.1986-12.com.adobe]
2010/01/02 04:52 PM Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
2010/01/02 04:52 PM Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Users
2010/01/02 04:52 PM All Users [C:\ProgramData]
2010/01/02 04:52 PM Default User [C:\Users\Default]
0 File(s) 0 bytes
Directory of C:\Users\All Users
2013/08/27 09:43 AM Adobe [J:\Software\IllustratorPortable\App\ProgramData\Adobe]
2013/08/25 10:11 PM Adobe.BackupByIllustratorPortable [J:\Software\IllustratorPortable\App\ProgramData\Adobe]
2010/01/02 04:52 PM Application Data [C:\ProgramData]
2010/01/02 04:52 PM Desktop [C:\Users\Public\Desktop]
2010/01/02 04:52 PM Documents [C:\Users\Public\Documents]
2010/01/02 04:52 PM Favorites [C:\Users\Public\Favorites]
2013/08/27 09:43 AM regid.1986-12.com.adobe [J:\Software\IllustratorPortable\App\ProgramData\regid.1986-12.com.adobe]
2013/08/25 10:11 PM regid.1986-12.com.adobe.BackupByIllustratorPortable [J:\Software\IllustratorPortable\App\ProgramData\regid.1986-12.com.adobe]
2010/01/02 04:52 PM Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
2010/01/02 04:52 PM Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Users\Classic .NET AppPool
2010/01/03 11:12 AM Application Data [C:\Users\Classic .NET AppPool\AppData\Roaming]
2010/01/03 11:12 AM Cookies [C:\Users\Classic .NET AppPool\AppData\Roaming\Microsoft\Windows\Cookies]
2010/01/03 11:12 AM Local Settings [C:\Users\Classic .NET AppPool\AppData\Local]
2010/01/03 11:12 AM My Documents [C:\Users\Classic .NET AppPool\Documents]
2010/01/03 11:12 AM NetHood [C:\Users\Classic .NET AppPool\AppData\Roaming\Microsoft\Windows\Network Shortcuts]
2010/01/03 11:12 AM PrintHood [C:\Users\Classic .NET AppPool\AppData\Roaming\Microsoft\Windows\Printer Shortcuts]
2010/01/03 11:12 AM Recent [C:\Users\Classic .NET AppPool\AppData\Roaming\Microsoft\Windows\Recent]
2010/01/03 11:12 AM SendTo [C:\Users\Classic .NET AppPool\AppData\Roaming\Microsoft\Windows\SendTo]
2010/01/03 11:12 AM Start Menu [C:\Users\Classic .NET AppPool\AppData\Roaming\Microsoft\Windows\Start Menu]
2010/01/03 11:12 AM Templates [C:\Users\Classic .NET AppPool\AppData\Roaming\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Users\Classic .NET AppPool\AppData\Local
2010/01/03 11:12 AM Application Data [C:\Users\Classic .NET AppPool\AppData\Local]
2010/01/03 11:12 AM History [C:\Users\Classic .NET AppPool\AppData\Local\Microsoft\Windows\History]
2010/01/03 11:12 AM Temporary Internet Files [C:\Users\Classic .NET AppPool\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Classic .NET AppPool\Documents
2010/01/03 11:12 AM My Music [C:\Users\Classic .NET AppPool\Music]
2010/01/03 11:12 AM My Pictures [C:\Users\Classic .NET AppPool\Pictures]
2010/01/03 11:12 AM My Videos [C:\Users\Classic .NET AppPool\Videos]
0 File(s) 0 bytes
Directory of C:\Users\Default
2010/01/02 04:52 PM Application Data [C:\Users\Default\AppData\Roaming]
2010/01/02 04:52 PM Cookies [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Cookies]
2010/01/02 04:52 PM Local Settings [C:\Users\Default\AppData\Local]
2010/01/02 04:52 PM My Documents [C:\Users\Default\Documents]
2010/01/02 04:52 PM NetHood [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Network Shortcuts]
2010/01/02 04:52 PM PrintHood [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Printer Shortcuts]
2010/01/02 04:52 PM Recent [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Recent]
2010/01/02 04:52 PM SendTo [C:\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo]
2010/01/02 04:52 PM Start Menu [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu]
2010/01/02 04:52 PM Templates [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Users\Default\AppData\Local
2010/01/02 04:52 PM Application Data [C:\Users\Default\AppData\Local]
2010/01/02 04:52 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
2010/01/02 04:52 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Default\Documents
2010/01/02 04:52 PM My Music [C:\Users\Default\Music]
2010/01/02 04:52 PM My Pictures [C:\Users\Default\Pictures]
2010/01/02 04:52 PM My Videos [C:\Users\Default\Videos]
0 File(s) 0 bytes
Directory of C:\Users\Frank
2010/01/02 04:53 PM Application Data [C:\Users\Frank\AppData\Roaming]
2010/01/02 04:53 PM Cookies [C:\Users\Frank\AppData\Roaming\Microsoft\Windows\Cookies]
2010/01/02 04:53 PM Local Settings [C:\Users\Frank\AppData\Local]
2010/01/02 04:53 PM My Documents [C:\Users\Frank\Documents]
2010/01/02 04:53 PM NetHood [C:\Users\Frank\AppData\Roaming\Microsoft\Windows\Network Shortcuts]
2010/01/02 04:53 PM PrintHood [C:\Users\Frank\AppData\Roaming\Microsoft\Windows\Printer Shortcuts]
2010/01/02 04:53 PM Recent [C:\Users\Frank\AppData\Roaming\Microsoft\Windows\Recent]
2010/01/02 04:53 PM SendTo [C:\Users\Frank\AppData\Roaming\Microsoft\Windows\SendTo]
2010/01/02 04:53 PM Start Menu [C:\Users\Frank\AppData\Roaming\Microsoft\Windows\Start Menu]
2010/01/02 04:53 PM Templates [C:\Users\Frank\AppData\Roaming\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Users\Frank\AppData\Local
2010/01/02 04:53 PM Application Data [C:\Users\Frank\AppData\Local]
2010/01/02 04:53 PM History [C:\Users\Frank\AppData\Local\Microsoft\Windows\History]
2010/01/02 04:53 PM Temporary Internet Files [C:\Users\Frank\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Frank\Documents
2010/01/02 04:53 PM My Music [C:\Users\Frank\Music]
2010/01/02 04:53 PM My Pictures [C:\Users\Frank\Pictures]
2010/01/02 04:53 PM My Videos [C:\Users\Frank\Videos]
0 File(s) 0 bytes
Directory of C:\Users\Public\Documents
2010/01/02 04:52 PM My Music [C:\Users\Public\Music]
2010/01/02 04:52 PM My Pictures [C:\Users\Public\Pictures]
2010/01/02 04:52 PM My Videos [C:\Users\Public\Videos]
0 File(s) 0 bytes
Directory of C:\Users\UpdatusUser
2011/07/26 07:44 PM Application Data [C:\Users\UpdatusUser\AppData\Roaming]
2011/07/26 07:44 PM Cookies [C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Cookies]
2011/07/26 07:44 PM Local Settings [C:\Users\UpdatusUser\AppData\Local]
2011/07/26 07:44 PM My Documents [C:\Users\UpdatusUser\Documents]
2011/07/26 07:44 PM NetHood [C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Network Shortcuts]
2011/07/26 07:44 PM PrintHood [C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Printer Shortcuts]
2011/07/26 07:44 PM Recent [C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Recent]
2011/07/26 07:44 PM SendTo [C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\SendTo]
2011/07/26 07:44 PM Start Menu [C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu]
2011/07/26 07:44 PM Templates [C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Users\UpdatusUser\AppData\Local
2011/07/26 07:44 PM Application Data [C:\Users\UpdatusUser\AppData\Local]
2011/07/26 07:44 PM History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
2011/07/26 07:44 PM Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\UpdatusUser\Documents
2011/07/26 07:44 PM My Music [C:\Users\UpdatusUser\Music]
2011/07/26 07:44 PM My Pictures [C:\Users\UpdatusUser\Pictures]
2011/07/26 07:44 PM My Videos [C:\Users\UpdatusUser\Videos]
0 File(s) 0 bytes
Directory of C:\Windows\System32\config\systemprofile
2010/08/23 04:15 PM Application Data [C:\Windows\system32\config\systemprofile\AppData\Roaming]
2010/08/23 04:15 PM Cookies [C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies]
2010/08/23 04:15 PM Local Settings [C:\Windows\system32\config\systemprofile\AppData\Local]
2010/08/23 04:15 PM My Documents [C:\Windows\system32\config\systemprofile\Documents]
2010/08/23 04:15 PM NetHood [C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Network Shortcuts]
2010/08/23 04:15 PM PrintHood [C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Printer Shortcuts]
2010/08/23 04:15 PM Recent [C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Recent]
2010/08/23 04:15 PM SendTo [C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\SendTo]
2010/08/23 04:15 PM Start Menu [C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu]
2010/08/23 04:15 PM Templates [C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Windows\System32\config\systemprofile\AppData\Local
2010/08/23 04:15 PM Application Data [C:\Windows\system32\config\systemprofile\AppData\Local]
2010/08/23 04:15 PM History [C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History]
2010/08/23 04:15 PM Temporary Internet Files [C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Windows\System32\config\systemprofile\Documents
2010/08/23 04:15 PM My Music [C:\Windows\system32\config\systemprofile\Music]
2010/08/23 04:15 PM My Pictures [C:\Windows\system32\config\systemprofile\Pictures]
2010/08/23 04:15 PM My Videos [C:\Windows\system32\config\systemprofile\Videos]
0 File(s) 0 bytes
Directory of C:\Windows\SysWOW64\config\systemprofile
2010/08/23 04:15 PM Application Data [C:\Windows\system32\config\systemprofile\AppData\Roaming]
2010/08/23 04:15 PM Cookies [C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies]
2010/08/23 04:15 PM Local Settings [C:\Windows\system32\config\systemprofile\AppData\Local]
2010/08/23 04:15 PM My Documents [C:\Windows\system32\config\systemprofile\Documents]
2010/08/23 04:15 PM NetHood [C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Network Shortcuts]
2010/08/23 04:15 PM PrintHood [C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Printer Shortcuts]
2010/08/23 04:15 PM Recent [C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Recent]
2010/08/23 04:15 PM SendTo [C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\SendTo]
2010/08/23 04:15 PM Start Menu [C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu]
2010/08/23 04:15 PM Templates [C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Windows\SysWOW64\config\systemprofile\AppData\Local
2010/08/23 04:15 PM Application Data [C:\Windows\system32\config\systemprofile\AppData\Local]
2010/08/23 04:15 PM History [C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History]
2010/08/23 04:15 PM Temporary Internet Files [C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Windows\SysWOW64\config\systemprofile\Documents
2010/08/23 04:15 PM My Music [C:\Windows\system32\config\systemprofile\Music]
2010/08/23 04:15 PM My Pictures [C:\Windows\system32\config\systemprofile\Pictures]
2010/08/23 04:15 PM My Videos [C:\Windows\system32\config\systemprofile\Videos]
0 File(s) 0 bytes
Directory of C:\Windows.old\ProgramData
2009/07/14 06:53 AM Application Data [C:\ProgramData]
2009/07/14 06:53 AM Desktop [C:\Users\Public\Desktop]
2009/07/14 06:53 AM Documents [C:\Users\Public\Documents]
2009/07/14 06:53 AM Favorites [C:\Users\Public\Favorites]
2009/07/14 06:53 AM Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
2009/07/14 06:53 AM Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Windows.old\ProgramData\Application Data
2013/08/27 09:43 AM Adobe [J:\Software\IllustratorPortable\App\ProgramData\Adobe]
2013/08/25 10:11 PM Adobe.BackupByIllustratorPortable [J:\Software\IllustratorPortable\App\ProgramData\Adobe]
2010/01/02 04:52 PM Application Data [C:\ProgramData]
2010/01/02 04:52 PM Desktop [C:\Users\Public\Desktop]
2010/01/02 04:52 PM Documents [C:\Users\Public\Documents]
2010/01/02 04:52 PM Favorites [C:\Users\Public\Favorites]
2013/08/27 09:43 AM regid.1986-12.com.adobe [J:\Software\IllustratorPortable\App\ProgramData\regid.1986-12.com.adobe]
2013/08/25 10:11 PM regid.1986-12.com.adobe.BackupByIllustratorPortable [J:\Software\IllustratorPortable\App\ProgramData\regid.1986-12.com.adobe]
2010/01/02 04:52 PM Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
2010/01/02 04:52 PM Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Windows.old\ProgramData\Documents
2010/01/02 04:52 PM My Music [C:\Users\Public\Music]
2010/01/02 04:52 PM My Pictures [C:\Users\Public\Pictures]
2010/01/02 04:52 PM My Videos [C:\Users\Public\Videos]
0 File(s) 0 bytes
Directory of C:\Windows.old\Users\FrankE
2009/09/10 01:17 PM Application Data [C:\Users\FrankE\AppData\Roaming]
2009/09/10 01:17 PM Cookies [C:\Users\FrankE\AppData\Roaming\Microsoft\Windows\Cookies]
2009/09/10 01:17 PM Local Settings [C:\Users\FrankE\AppData\Local]
2009/09/10 01:17 PM My Documents [C:\Users\FrankE\Documents]
2009/09/10 01:17 PM NetHood [C:\Users\FrankE\AppData\Roaming\Microsoft\Windows\Network Shortcuts]
2009/09/10 01:17 PM PrintHood [C:\Users\FrankE\AppData\Roaming\Microsoft\Windows\Printer Shortcuts]
2009/09/10 01:17 PM Recent [C:\Users\FrankE\AppData\Roaming\Microsoft\Windows\Recent]
2009/09/10 01:17 PM SendTo [C:\Users\FrankE\AppData\Roaming\Microsoft\Windows\SendTo]
2009/09/10 01:17 PM Start Menu [C:\Users\FrankE\AppData\Roaming\Microsoft\Windows\Start Menu]
2009/09/10 01:17 PM Templates [C:\Users\FrankE\AppData\Roaming\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Windows.old\Users\FrankE\AppData\Local
2009/09/10 01:17 PM Application Data [C:\Users\FrankE\AppData\Local]
2009/09/10 01:17 PM History [C:\Users\FrankE\AppData\Local\Microsoft\Windows\History]
2009/09/10 01:17 PM Temporary Internet Files [C:\Users\FrankE\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Total Files Listed:
0 File(s) 0 bytes
154 Dir(s) 37ÿ794ÿ664ÿ448 bytes free
< %systemroot%\System32\config\*.sav >
< %PROGRAMFILES%\bak. /s >
< %systemroot%\system32\bak. /s >
< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >
< %systemroot%\system32\config\systemprofile\*.dat /x >
[2010/01/02 16:52:48 | 000,001,451 | —- | M] () – C:\Windows\system32\config\systemprofile\Desktop
< %systemroot%\*.config >
< %systemroot%\system32\*.db >
< %PROGRAMFILES%\Internet Explorer\*.dat >
< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >
[2011/07/03 17:45:07 | 000,000,283 | -HS- | M] () – C:\Users\Frank\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini
[2013/03/26 20:47:13 | 000,003,052 | -H– | M] () – C:\Users\Frank\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\setup.ini
[2013/09/02 14:20:22 | 000,001,177 | -H– | M] () – C:\Users\Frank\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\tlbdata.xml
< %USERPROFILE%\Desktop\*.exe >
[2012/10/14 12:45:10 | 009,477,848 | —- | M] (Stardock Corporation ) – C:\Users\Frank\Desktop\fences_public.exe
< %PROGRAMFILES%\Common Files\*.* >
< %systemroot%\*.src >
< %systemroot%\install\*.* >
< %systemroot%\system32\DLL\*.* >
< %systemroot%\system32\HelpFiles\*.* >
< %systemroot%\system32\rundll\*.* >
< %systemroot%\winn32\*.* >
< %systemroot%\Java\*.* >
< %systemroot%\system32\test\*.* >
< %systemroot%\system32\Rundll32\*.* >
< %systemroot%\AppPatch\Custom\*.* >
[2005/10/02 09:19:52 | 000,001,258 | —- | M] () – C:\Windows\AppPatch\Custom\{9bb2c6bb-5c38-4f3c-ab39-07c8a67118f8}.sdb
< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >
< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >
========== Files - Unicode (All) ==========
[2013/09/02 13:50:47 | 095,231,388 | —- | M] ()(C:\Windows\SysWow64\????) – C:\Windows\SysWow64\ቌ⺜葤Ÿ
[2013/09/02 13:50:47 | 095,231,388 | —- | C] ()(C:\Windows\SysWow64\????) – C:\Windows\SysWow64\ቌ⺜葤Ÿ
[2013/07/14 01:21:25 | 000,000,767 | —- | M] ()(C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\??????????.lnk) – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\强力卸载电脑上的软件.lnk
[2013/07/14 01:21:25 | 000,000,767 | —- | C] ()(C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\??????????.lnk) – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\强力卸载电脑上的软件.lnk
[2013/05/28 21:21:08 | 000,000,938 | —- | M] ()(C:\Users\Public\Desktop\MacType ????.lnk) – C:\Users\Public\Desktop\MacType 用户向导.lnk
[2013/05/28 21:21:08 | 000,000,938 | —- | C] ()(C:\Users\Public\Desktop\MacType ????.lnk) – C:\Users\Public\Desktop\MacType 用户向导.lnk
[2013/05/28 21:21:07 | 000,000,898 | —- | M] ()(C:\Users\Public\Desktop\MacType ????.lnk) – C:\Users\Public\Desktop\MacType 配置程序.lnk
[2013/05/28 21:21:07 | 000,000,898 | —- | C] ()(C:\Users\Public\Desktop\MacType ????.lnk) – C:\Users\Public\Desktop\MacType 配置程序.lnk
========== Alternate Data Streams ==========
@Alternate Data Stream - 254 bytes -> C:\ProgramData\TEMP:9A870F8B
@Alternate Data Stream - 189 bytes -> C:\ProgramData\TEMP:284D1EE4
@Alternate Data Stream - 1467 bytes -> C:\ProgramData\Microsoft:KEdjNlTBFN6syCNNDkCvFod
@Alternate Data Stream - 1427 bytes -> C:\ProgramData\Microsoft:YQYJBh3jt8x7MO9ZX33V6eS4d
@Alternate Data Stream - 135 bytes -> C:\ProgramData\TEMP:7631EA83
@Alternate Data Stream - 1339 bytes -> C:\ProgramData\Microsoft:A5aXVIyCIt9rFDIfkGEKk
@Alternate Data Stream - 131 bytes -> C:\ProgramData\TEMP:05EE1EEF
@Alternate Data Stream - 1278 bytes -> C:\ProgramData\Microsoft:YjkSYCvdorRyOukig90e9O5Qlra
@Alternate Data Stream - 115 bytes -> C:\ProgramData\TEMP:65F321A9
@Alternate Data Stream - 1111 bytes -> C:\ProgramData\Microsoft:uiywOcYzBepd3CjJu
< End of report >
Thanks in advance!
FB
I'm worried that it might be the local payload store for a rootkit or other type of malware.
The symptoms I'm having (aside from the presence of the file) is that one of my SQL Server databases keeps getting its log file corrupted. I've used that database for months with no problems and this corruption has happened several times in the past couple of days. It *might* be unrelated, but I thought I'd mention it here in case it's not.
[external image: Posted Image]
I'm running Windows 7 Ultimate (legit from Microsoft).
Here is my OTL log:
OTL logfile created on: 2013/09/02 02:32:10 PM - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Download
64bit- Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00001C09 | Country: South Africa | Language: ENS | Date Format: yyyy/MM/dd
11.98 Gb Total Physical Memory | 7.87 Gb Available Physical Memory | 65.65% Memory free
29.95 Gb Paging File | 26.21 Gb Available in Paging File | 87.51% Paging File free
Paging file location(s): f:\pagefile.sys 18400 18400 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 295.90 Gb Total Space | 35.51 Gb Free Space | 12.00% Space Free | Partition Type: NTFS
Drive D: | 1397.26 Gb Total Space | 28.89 Gb Free Space | 2.07% Space Free | Partition Type: NTFS
Drive F: | 2794.39 Gb Total Space | 12.97 Gb Free Space | 0.46% Space Free | Partition Type: NTFS
Drive H: | 557.34 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
Drive T: | 931.51 Gb Total Space | 11.76 Gb Free Space | 1.26% Space Free | Partition Type: NTFS
Drive Z: | 635.61 Gb Total Space | 42.11 Gb Free Space | 6.62% Space Free | Partition Type: NTFS
Computer Name: REGENESIS | User Name: Frank | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - C:\Download\OTL.exe (OldTimer Tools)
PRC - C:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe (Ellora Assets Corp.)
PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Program Files (x86)\Mozilla Firefox 4\firefox.exe (Mozilla Corporation)
PRC - C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe (TeamViewer GmbH)
PRC - C:\Program Files (x86)\BitTorrent Sync\BTSync.exe (BitTorrent, Inc.)
PRC - C:\Program Files (x86)\Remiew.com\Remote Photo Viewer\WindowsServiceHost.exe (NZA)
PRC - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
PRC - C:\Program Files (x86)\Persits Software\AspEmail\BIN\EmailAgent.exe (Persits Software, Inc.)
PRC - C:\totalcmd\TOTALCMD.EXE (Ghisler Software GmbH)
PRC - C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe (Intel Corporation)
PRC - C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe (Intel Corporation)
PRC - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (Renesas Electronics Corporation)
PRC - C:\Program Files\Logitech\SetPointP\LU\LogitechUpdate.exe (Logitech, Inc.)
PRC - C:\Program Files\Logitech\SetPointP\LU\LULnchr.exe (Logitech, Inc.)
========== Modules (No Company Name) ==========
MOD - C:\Program Files (x86)\Mozilla Firefox 4\mozjs.dll ()
MOD - C:\Program Files\LinkShellExtension\32\RockallDLL.dll ()
========== Services (SafeList) ==========
SRV:64bit: - (SbieSvc) – C:\Program Files\Sandboxie\SbieSvc.exe (Sandboxie Holdings, LLC)
SRV:64bit: - (MySQL56) – C:\Program Files\MySQL\MySQL Server 5.6\bin\mysqld.exe ()
SRV:64bit: - (Serviio) – C:\Program Files\Serviio\bin\ServiioService.exe ()
SRV:64bit: - (NIHardwareService) – C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe (Native Instruments GmbH)
SRV:64bit: - (Intel® PROSet Monitoring Service) – C:\Windows\SysNative\IPROSetMonitor.exe (Intel Corporation)
SRV:64bit: - (LBTServ) – C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe (Logitech, Inc.)
SRV:64bit: - (AppMgmt) – C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
SRV - (FreemakeVideoCapture) – C:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe (Ellora Assets Corp.)
SRV - (AntiVirSchedulerService) – C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG)
SRV - (AntiVirWebService) – C:\Program Files (x86)\Avira\AntiVir Desktop\avwebgrd.exe (Avira Operations GmbH & Co. KG)
SRV - (AntiVirMailService) – C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc.exe (Avira Operations GmbH & Co. KG)
SRV - (AntiVirService) – C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Avira Operations GmbH & Co. KG)
SRV - (MozillaMaintenance) – C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation)
SRV - (TeamViewer8) – C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe (TeamViewer GmbH)
SRV - (TunngleService) – C:\Program Files (x86)\Tunngle\TnglCtrl.exe (Tunngle.net GmbH)
SRV - (SkypeUpdate) – C:\Program Files (x86)\Skype\Updater\Updater.exe (Skype Technologies)
SRV - (AdobeFlashPlayerUpdateSvc) – C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
SRV - (OpenVPNService) – C:\Program Files (x86)\HMA! Pro VPN\bin\openvpnserv.exe (The OpenVPN Project)
SRV - (nvUpdatusService) – C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (NVIDIA Corporation)
SRV - (PnkBstrA) – C:\Windows\SysWOW64\PnkBstrA.exe ()
SRV - (RemotePhotoViewerServiceHost) – C:\Program Files (x86)\Remiew.com\Remote Photo Viewer\WindowsServiceHost.exe (NZA)
SRV - (Stereo Service) – C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
SRV - (Steam Client Service) – C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Valve Corporation)
SRV - (AdobeARMservice) – C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
SRV - (Skype C2C Service) – C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe (Skype Technologies S.A.)
SRV - (clr_optimization_v4.0.30319_32) – C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (Persits Software EmailAgent) – C:\Program Files (x86)\Persits Software\AspEmail\Bin\EmailAgent.exe (Persits Software, Inc.)
SRV - (Desura Install Service) – C:\Program Files (x86)\Common Files\Desura\desura_service.exe (Desura Pty Ltd)
SRV - (afcdpsrv) – C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe (Acronis)
SRV - (UNS) – C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe (Intel Corporation)
SRV - (LMS) – C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe (Intel Corporation)
SRV - (SwitchBoard) – C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
SRV - (npggsvc) – C:\Windows\SysWOW64\GameMon.des (INCA Internet Co., Ltd.)
SRV - (dsNcService) – C:\Program Files (x86)\Juniper Networks\Common Files\dsNcService.exe (Juniper Networks)
SRV - (astcc) – C:\Windows\SysWOW64\ASTSRV.EXE (Nalpeiron Ltd.)
SRV - (HPSLPSVC) – C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL (Hewlett-Packard Co.)
SRV - (AcrSch2Svc) – C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe (Acronis)
SRV - (WAS) – C:\Windows\SysWOW64\inetsrv\iisw3adm.dll (Microsoft Corporation)
SRV - (W3SVC) – C:\Windows\SysWOW64\inetsrv\iisw3adm.dll (Microsoft Corporation)
SRV - (AppHostSvc) – C:\Windows\SysWOW64\inetsrv\apphostsvc.dll (Microsoft Corporation)
SRV - (clr_optimization_v2.0.50727_32) – C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
SRV - (mysql) – c:\xampp\mysql\bin\mysqld-nt.exe ()
SRV - (FileZilla Server) – C:\xampp\FileZillaFTP\FileZilla server.exe (FileZilla Project)
SRV - (MagicTuneEngine) – C:\Program Files (x86)\MagicTune Premium\MagicTuneEngine.exe ()
========== Driver Services (SafeList) ==========
DRV:64bit: - (dg_ssudbus) – C:\Windows\SysNative\drivers\ssudbus.sys (DEVGURU Co., LTD.(www.devguru.co.kr))
DRV:64bit: - (avipbb) – C:\Windows\SysNative\drivers\avipbb.sys (Avira Operations GmbH & Co. KG)
DRV:64bit: - (avgntflt) – C:\Windows\SysNative\drivers\avgntflt.sys (Avira Operations GmbH & Co. KG)
DRV:64bit: - (ssudmdm) – C:\Windows\SysNative\drivers\ssudmdm.sys (DEVGURU Co., LTD.(www.devguru.co.kr))
DRV:64bit: - (SbieDrv) – C:\Program Files\Sandboxie\SbieDrv.sys (Sandboxie Holdings, LLC)
DRV:64bit: - (tap0901) – C:\Windows\SysNative\drivers\tap0901.sys (The OpenVPN Project)
DRV:64bit: - (avkmgr) – C:\Windows\SysNative\drivers\avkmgr.sys (Avira Operations GmbH & Co. KG)
DRV:64bit: - (usb_rndisx) – C:\Windows\SysNative\drivers\usb8023x.sys (Microsoft Corporation)
DRV:64bit: - (USB_RNDIS) – C:\Windows\SysNative\drivers\usb8023.sys (Microsoft Corporation)
DRV:64bit: - (VBoxNetAdp) – C:\Windows\SysNative\drivers\VBoxNetAdp.sys (Oracle Corporation)
DRV:64bit: - (USBAAPL64) – C:\Windows\SysNative\drivers\usbaapl64.sys (Apple, Inc.)
DRV:64bit: - (GEARAspiWDM) – C:\Windows\SysNative\drivers\GEARAspiWDM.sys (GEAR Software Inc.)
DRV:64bit: - (AX88179) – C:\Windows\SysNative\drivers\ax88179_178a.sys (ASIX Electronics Corp.)
DRV:64bit: - (pcouffin) – C:\Windows\SysNative\drivers\pcouffin.sys (VSO Software)
DRV:64bit: - (truecrypt) – C:\Windows\SysNative\drivers\truecrypt.sys (TrueCrypt Foundation)
DRV:64bit: - (AnyDVD) – C:\Windows\SysNative\drivers\AnyDVD.sys (SlySoft, Inc.)
DRV:64bit: - (Fs_Rec) – C:\Windows\SysNative\drivers\fs_rec.sys (Microsoft Corporation)
DRV:64bit: - (PxHlpa64) – C:\Windows\SysNative\drivers\PxHlpa64.sys (Rovi Corporation)
DRV:64bit: - (tbhsd) – C:\Windows\SysNative\drivers\tbhsd.sys (RapidSolution Software AG)
DRV:64bit: - (Netaapl) – C:\Windows\SysNative\drivers\netaapl64.sys (Apple Inc.)
DRV:64bit: - (NVHDA) – C:\Windows\SysNative\drivers\nvhda64v.sys (NVIDIA Corporation)
DRV:64bit: - (AirDisplayMirror) – C:\Windows\SysNative\drivers\AVVideoCardMirror.sys (Windows ® Win 7 DDK provider)
DRV:64bit: - (tapoas) – C:\Windows\SysNative\drivers\tapoas.sys (The OpenVPN Project)
DRV:64bit: - (npf) – C:\Windows\SysNative\drivers\npf.sys (CACE Technologies, Inc.)
DRV:64bit: - (Uim_IM) – C:\Windows\SysNative\drivers\Uim_IMx64.sys (Paragon)
DRV:64bit: - (UimBus) – C:\Windows\SysNative\drivers\uimx64.sys (Windows ® 2000 DDK provider)
DRV:64bit: - (hotcore3) – C:\Windows\SysNative\drivers\hotcore3.sys (Paragon Software Group)
DRV:64bit: - (afcdp) – C:\Windows\SysNative\drivers\afcdp.sys (Acronis)
DRV:64bit: - (tdrpman251) – C:\Windows\SysNative\drivers\tdrpm251.sys (Acronis)
DRV:64bit: - (timounter) – C:\Windows\SysNative\drivers\timntr.sys (Acronis)
DRV:64bit: - (snapman) – C:\Windows\SysNative\drivers\snapman.sys (Acronis)
DRV:64bit: - (ElbyCDIO) – C:\Windows\SysNative\drivers\ElbyCDIO.sys (Elaborate Bytes AG)
DRV:64bit: - (PSSDK42) – C:\Windows\SysNative\drivers\pssdk42.sys (microOLAP Technologies LTD)
DRV:64bit: - (teVirtualMIDI64) – C:\Windows\SysNative\drivers\teVirtualMIDI64.sys (Tobias Erichsen)
DRV:64bit: - (AirDisplay) – C:\Windows\SysNative\drivers\AVVideoCard.sys (Windows ® Win 7 DDK provider)
DRV:64bit: - (MEIx64) – C:\Windows\SysNative\drivers\HECIx64.sys (Intel Corporation)
DRV:64bit: - (e1cexpress) – C:\Windows\SysNative\drivers\e1c62x64.sys (Intel Corporation)
DRV:64bit: - (appliandMP) – C:\Windows\SysNative\drivers\appliand.sys (Applian Technologies Inc.)
DRV:64bit: - (appliand) – C:\Windows\SysNative\drivers\appliand.sys (Applian Technologies Inc.)
DRV:64bit: - (MEMSWEEP2) – C:\Windows\SysNative\54C4.tmp (Sophos Plc)
DRV:64bit: - (epmntdrv) – C:\Windows\SysNative\epmntdrv.sys ()
DRV:64bit: - (EuGdiDrv) – C:\Windows\SysNative\EuGdiDrv.sys ()
DRV:64bit: - (RAMDiskVE) – C:\Windows\SysNative\drivers\RAMDiskVE.sys ()
DRV:64bit: - (nusb3xhc) – C:\Windows\SysNative\drivers\nusb3xhc.sys (Renesas Electronics Corporation)
DRV:64bit: - (nusb3hub) – C:\Windows\SysNative\drivers\nusb3hub.sys (Renesas Electronics Corporation)
DRV:64bit: - (WsAudio_DeviceS(5) – C:\Windows\SysNative\drivers\WsAudio_DeviceS(5).sys (Wondershare)
DRV:64bit: - (WsAudio_DeviceS(4) – C:\Windows\SysNative\drivers\WsAudio_DeviceS(4).sys (Wondershare)
DRV:64bit: - (WsAudio_DeviceS(3) – C:\Windows\SysNative\drivers\WsAudio_DeviceS(3).sys (Wondershare)
DRV:64bit: - (WsAudio_DeviceS(2) – C:\Windows\SysNative\drivers\WsAudio_DeviceS(2).sys (Wondershare)
DRV:64bit: - (WsAudio_DeviceS(1) – C:\Windows\SysNative\drivers\WsAudio_DeviceS(1).sys (Wondershare)
DRV:64bit: - (pwdrvio) – C:\Windows\SysNative\pwdrvio.sys ()
DRV:64bit: - (pwdspio) – C:\Windows\SysNative\pwdspio.sys ()
DRV:64bit: - (RTL8192su) – C:\Windows\SysNative\drivers\RTL8192su.sys (Realtek Semiconductor Corporation )
DRV:64bit: - (netr7364) – C:\Windows\SysNative\drivers\netr7364.sys (Ralink Technology, Corp.)
DRV:64bit: - (atksgt) – C:\Windows\SysNative\drivers\atksgt.sys ()
DRV:64bit: - (lirsgt) – C:\Windows\SysNative\drivers\lirsgt.sys ()
DRV:64bit: - (e1kexpress) – C:\Windows\SysNative\drivers\e1k62x64.sys (Intel Corporation)
DRV:64bit: - (dsNcAdpt) – C:\Windows\SysNative\drivers\dsNcAdpt.sys (Juniper Networks)
DRV:64bit: - (StarOpen) – C:\Windows\SysNative\drivers\StarOpen.sys ()
DRV:64bit: - (LUsbFilt) – C:\Windows\SysNative\drivers\LUsbFilt.sys (Logitech, Inc.)
DRV:64bit: - (LMouFilt) – C:\Windows\SysNative\drivers\LMouFilt.Sys (Logitech, Inc.)
DRV:64bit: - (LHidFilt) – C:\Windows\SysNative\drivers\LHidFilt.Sys (Logitech, Inc.)
DRV:64bit: - (BEHRINGER_2902) – C:\Windows\SysNative\drivers\BUSB2902.sys (BEHRINGER)
DRV:64bit: - (BUSB_AUDIO_WDM) – C:\Windows\SysNative\drivers\busbwdm.sys (BEHRINGER)
DRV:64bit: - (SSPORT) – C:\Windows\SysNative\drivers\SSPORT.SYS (Samsung Electronics)
DRV:64bit: - (DgiVecp) – C:\Windows\SysNative\drivers\DGIVECP.SYS (Samsung Electronics Co., Ltd.)
DRV:64bit: - (USBMULCD) – C:\Windows\SysNative\drivers\CM10664.sys (C-Media Electronics Inc)
DRV:64bit: - (vpcnfltr) – C:\Windows\SysNative\drivers\vpcnfltr.sys (Microsoft Corporation)
DRV:64bit: - (vpcvmm) – C:\Windows\SysNative\drivers\vpcvmm.sys (Microsoft Corporation)
DRV:64bit: - (vpcusb) – C:\Windows\SysNative\drivers\vpcusb.sys (Microsoft Corporation)
DRV:64bit: - (vpcbus) – C:\Windows\SysNative\drivers\vpchbus.sys (Microsoft Corporation)
DRV:64bit: - (tap0901t) – C:\Windows\SysNative\drivers\tap0901t.sys (Tunngle.net)
DRV:64bit: - (xusb21) – C:\Windows\SysNative\drivers\xusb21.sys (Microsoft Corporation)
DRV:64bit: - (amdsata) – C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (amdxata) – C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:64bit: - (amdsbs) – C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (LSI_SAS2) – C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:64bit: - (HpSAMD) – C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (stexstor) – C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:64bit: - (xnacc) – C:\Windows\SysNative\drivers\xnacc.sys (Microsoft Corporation)
DRV:64bit: - (LMouKE) – C:\Windows\SysNative\drivers\LMouKE.Sys (Logitech, Inc.)
DRV:64bit: - (L8042mou) – C:\Windows\SysNative\drivers\L8042mou.Sys (Logitech, Inc.)
DRV:64bit: - (L8042Kbd) – C:\Windows\SysNative\drivers\L8042Kbd.sys (Logitech, Inc.)
DRV:64bit: - (RTL8023x64) – C:\Windows\SysNative\drivers\Rtnic64.sys (Realtek Semiconductor Corporation )
DRV:64bit: - (RTL8167) – C:\Windows\SysNative\drivers\Rt64win7.sys (Realtek Corporation )
DRV:64bit: - (e1express) – C:\Windows\SysNative\drivers\e1e6032e.sys (Intel Corporation)
DRV:64bit: - (ebdrv) – C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) – C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (b57nd60a) – C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (hcw85cir) – C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV:64bit: - (mcdbus) – C:\Windows\SysNative\drivers\mcdbus.sys (MagicISO, Inc.)
DRV:64bit: - (pccsmcfd) – C:\Windows\SysNative\drivers\pccsmcfdx64.sys (Nokia)
DRV:64bit: - (adfs) – C:\Windows\SysNative\drivers\adfs.sys (Adobe Systems, Inc.)
DRV:64bit: - (WDC_SAM) – C:\Windows\SysNative\drivers\wdcsam64.sys (Western Digital Technologies)
DRV:64bit: - (LoopBeMidi1) – C:\Windows\SysNative\drivers\loopbe1.sys (nerds.de)
DRV:64bit: - (SCDEmu) – C:\Windows\SysNative\drivers\scdemu.sys (PowerISO Computing, Inc.)
DRV:64bit: - (RimUsb) – C:\Windows\SysNative\drivers\RimUsb_AMD64.sys (Research In Motion Limited)
DRV:64bit: - (LVUVC64) – C:\Windows\SysNative\drivers\lvuvc64.sys (Logitech Inc.)
DRV:64bit: - (LVUSBS64) – C:\Windows\SysNative\drivers\LVUSBS64.sys (Logitech Inc.)
DRV - (Partizan) – C:\Windows\SysWOW64\drivers\Partizan.sys (Greatis Software)
DRV - (AnyDVD) – C:\Windows\SysWOW64\drivers\AnyDVD.sys (SlySoft, Inc.)
DRV - (Aspi32) – C:\Windows\SysWOW64\drivers\ASPI32.SYS (Adaptec)
DRV - (epmntdrv) – C:\Windows\SysWOW64\epmntdrv.sys ()
DRV - (EuGdiDrv) – C:\Windows\SysWOW64\EuGdiDrv.sys ()
DRV - (StarOpen) – C:\Windows\SysWow64\drivers\StarOpen.sys ()
DRV - (WIMMount) – C:\Windows\SysWOW64\drivers\wimmount.sys (Microsoft Corporation)
DRV - (mcdbus) – C:\Windows\SysWOW64\drivers\mcdbus.sys (MagicISO, Inc.)
DRV - (Cardex) – C:\Windows\SysWOW64\drivers\TBPanelx64.sys (Windows ® Server 2003 DDK provider)
DRV - (NPPTNT2) – C:\Windows\SysWOW64\npptNT2.sys (INCA Internet Co., Ltd.)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM;=IE8SRC
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM;=IE8SRC
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://howzit.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-ZA
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 20 8C 10 3B AD 81 CB 01 [binary data]
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}…amp;FORM=IE8SRC
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local;
========== FireFox ==========
FF - prefs.js..browser.search.defaultengine: "Google"
FF - prefs.js..browser.search.order.1: "Ask.com"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "file:///C:/Personal/Search/stickwiki-0.04.html"
FF - prefs.js..extensions.enabledAddons: faviconinserter%40sonco.com:1.3
FF - prefs.js..extensions.enabledAddons: netvideohunter%40netvideohunter.com:1.9.5
FF - prefs.js..extensions.enabledAddons: %7B6AC85730-7D0F-4de0-B3FA-21142DD85326%7D:2.8
FF - prefs.js..extensions.enabledAddons: %7BD4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389%7D:0.9.10
FF - prefs.js..extensions.enabledAddons: bookmarkfaviconchanger%40sonthakit:1.74
FF - prefs.js..extensions.enabledAddons: %7BDDC359D1-844A-42a7-9AA1-88A850A938A8%7D:2.0.16
FF - prefs.js..extensions.enabledAddons: %7Bc45c406e-ab73-11d8-be73-000a95be3b12%7D:1.2.5
FF - prefs.js..extensions.enabledAddons: flatbm%40xuldev.org:1.9.1
FF - prefs.js..extensions.enabledAddons: ALone-live%40ya.ru:1.4.4
FF - prefs.js..extensions.enabledAddons: %7B575cbcb9-3b7e-493a-b001-886b3ae793b5%7D:3.2.1
FF - prefs.js..extensions.enabledAddons: %7B0b457cAA-602d-484a-8fe7-c1d894a011ba%7D:0.98.40
FF - prefs.js..extensions.enabledAddons: %7Be4a8a97b-f2ed-450b-b12d-ee082ba24781%7D:1.11
FF - prefs.js..extensions.enabledAddons: %7B37fa1426-b82d-11db-8314-0800200c9a66%7D:3.3.4
FF - prefs.js..extensions.enabledAddons: %7BE6C1199F-E687-42da-8C24-E7770CC3AE66%7D:[removed]
FF - prefs.js..extensions.enabledAddons: %7Bdc572301-7619-498c-a57d-39143191b318%7D:0.4.1.1pre.130821a
FF - prefs.js..extensions.enabledAddons: autoauth%40efinke.com:2.1
FF - prefs.js..extensions.enabledAddons: secureLogin%40blueimp.net:1.0.3
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:23.0.1
FF - prefs.js..extensions.enabledItems: [removed]:1.0.0.723
FF - prefs.js..extensions.enabledItems: {BF735C65-A40F-424F-B791-AA1798610028}:1.9.1
FF - prefs.js..extensions.enabledItems: [removed]:1.6.2
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.3
FF - prefs.js..extensions.enabledItems: {dc572301-7619-498c-a57d-39143191b318}:0.3.8.5
FF - prefs.js..extensions.enabledItems: {DDC359D1-844A-42a7-9AA1-88A850A938A8}:2.0.2
FF - prefs.js..extensions.enabledItems: [removed]:1.7
FF - prefs.js..extensions.enabledItems: {e4a8a97b-f2ed-450b-b12d-ee082ba24781}:0.9.1
FF - prefs.js..extensions.enabledItems: [removed]:2.1.0.1
FF - prefs.js..extensions.enabledItems: {D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}:0.9.8
FF - prefs.js..extensions.enabledItems: {0b457cAA-602d-484a-8fe7-c1d894a011ba}:0.89
FF - prefs.js..extensions.enabledItems: [removed]:1.5.1
FF - prefs.js..extensions.enabledItems: {b8d51471-15f1-46cd-a600-448a6b103c2d}:1.5.9
FF - prefs.js..extensions.enabledItems: [removed]:1.7
FF - prefs.js..extensions.enabledItems: {c45c406e-ab73-11d8-be73-000a95be3b12}:1.1.9
FF - prefs.js..extensions.enabledItems: [removed]:1.1.7
FF - prefs.js..extensions.enabledItems: {8620c15f-30dc-4dba-a131-7c5d20cf4a29}:3.1.6
FF - prefs.js..extensions.enabledItems: {d650973c-0444-4ac7-9d00-19e3613c83b9}:3.6.7
FF - prefs.js..network.proxy.autoconfig_url: "data:text/javascript,function%20FindProxyForURL(url%2C%20host)%20%7Bif%20(host%20%3D%3D%20'www.pandora.com'%20%7C%7C%20url.indexOf('vevo.com')%20!%3D%20-1%20%7C%7C%20url.indexOf('.brightcove.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fsongza.com*')%20%7C%7C%20host%20%3D%3D%20's.hulu.com'%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.crunchyroll.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.funimation.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fsecure.funimation.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fwww.daisuki.net*')%20%7C%7C%20url.indexOf('southparkstudios.com')%20!%3D%20-1%20%7C%7C%20url.indexOf('discoverymedia.com')%20!%3D%20-1%20%7C%7C%20(url.indexOf('proxmate%3Dactive')%20!%3D%20-1%20%26%26%20url.indexOf('amazonaws.com')%20%3D%3D%20-1)%20%7C%7C%20(url.indexOf('proxmate%3Dus')%20!%3D%20-1)%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.iheart.com*')%20%7C%7C%20(url.indexOf('turntable.fm')%20!%3D%20-1%20%26%26%20url.indexOf('static.turntable.fm')%20%3D%3D%20-1%20%26%26%20url.indexOf('s3.amazonaws.com')%20%3D%3D%20-1%20%26%26%20url.indexOf('ping.chartbeat.net')%20%3D%3D%20-1)%20%7C%7C%20url.indexOf('play.google.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.rdio.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fgrooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fretro.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.mtv.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fmedia.mtvnservices.com*'))%20%7B%20return%20'PROXY%20ab-us09.personalitycores.com%3A8000%3B%20PROXY%20ab-us18.personalitycores.com%3A8000%3B%20PROXY%20ab-us08.personalitycores.com%3A8000%3B%20PROXY%20ab-us10.personalitycores.com%3A8000%3B%20PROXY%20ab-us12.personalitycores.com%3A8000%3B%20PROXY%20ab-us11.personalitycores.com%3A8000%3B%20PROXY%20ab-us16.personalitycores.com%3A8000%3B%20PROXY%20ab-us02.personalitycores.com%3A8000%3B%20PROXY%20ab-us03.personalitycores.com%3A8000%3B%20PROXY%20ab-us17.personalitycores.com%3A8000%3B%20PROXY%20ab-us07.personalitycores.com%3A8000%3B%20PROXY%20ab-us15.personalitycores.com%3A8000%3B%20PROXY%20ab-us01.personalitycores.com%3A8000%3B%20PROXY%20ab-us14.personalitycores.com%3A8000%3B%20PROXY%20ab-us13.personalitycores.com%3A8000'%3B%7D%20%20else%20%7B%20return%20'DIRECT'%3B%20%7D%7D"
FF - prefs.js..network.proxy.backup.gopher: ""
FF - prefs.js..network.proxy.backup.gopher_port: 0
FF - prefs.js..network.proxy.ftp: "[removed]"
FF - prefs.js..network.proxy.ftp_port: 3128
FF - prefs.js..network.proxy.gopher: "localhost"
FF - prefs.js..network.proxy.gopher_port: 4001
FF - prefs.js..network.proxy.http: "127.0.0.1"
FF - prefs.js..network.proxy.http_port: 4444
FF - prefs.js..network.proxy.no_proxies_on: "*.local,127.0.0.1"
FF - prefs.js..network.proxy.socks: "[removed]"
FF - prefs.js..network.proxy.socks_port: 3128
FF - prefs.js..network.proxy.ssl: "127.0.0.1"
FF - prefs.js..network.proxy.ssl_port: 4445
FF - prefs.js..network.proxy.type: 2
FF - user.js - File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_202.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.5.0: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.5.0: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\adobe.com/AdobeAAMDetect: C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_202.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf: File not found
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@idsoftware.com/QuakeLive: C:\ProgramData\id Software\QuakeLive\npquakezero.dll (id Software Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.21.2: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.21.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3505.0912: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.0: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKLM\Software\MozillaPlugins\adobe.com/AdobeAAMDetect: C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/GoogleTalkPlugin: C:\Users\Frank\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/O1DPlugin: C:\Users\Frank\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/O3DPlugin: C:\Users\Frank\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Frank\AppData\Local\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Frank\AppData\Local\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\Frank\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF - HKCU\Software\MozillaPlugins\@us-w1.rockmelt.com/RockMelt Update;version=8: C:\Users\Frank\AppData\Local\RockMelt\Update\1.2.189.1\npRockMeltOneClick8.dll (RockMelt Inc.)
FF - HKCU\Software\MozillaPlugins\amazon.com/AmazonMP3DownloaderPlugin: C:\Users\Frank\AppData\Local\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10181.dll (Amazon.com, Inc.)
FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKCU\Software\MozillaPlugins\ubisoft.com/uplaypc: C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll (Ubisoft)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[removed]: C:\Program Files (x86)\Nokia\Nokia PC Suite 7\bkmrksync\ [2010/01/03 18:37:35 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{BF735C65-A40F-424F-B791-AA1798610028}: C:\Users\Frank\AppData\Local\{BF735C65-A40F-424F-B791-AA1798610028}\ [2010/07/19 17:37:37 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2011/07/08 16:30:55 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[removed]: C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\[removed]\ [2013/08/27 10:15:43 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[removed]: C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\[removed]\ [2013/08/27 10:15:43 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 23.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox 4\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 23.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox 4\plugins [2013/08/17 11:54:26 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.16\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox 3\components [2011/03/23 16:51:22 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.16\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox 3\plugins [2013/01/28 20:00:47 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 4.0b9\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox 4.0 Beta 9\components [2011/01/21 11:22:58 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 4.0b9\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox 4.0 Beta 9\plugins [2013/01/28 20:00:47 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 15.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2012/06/28 16:11:46 | 000,000,000 | —D | M]
[2011/01/15 11:05:54 | 000,000,000 | —D | M] (No name found) – C:\Users\Frank\AppData\Roaming\Mozilla\Extensions
[2010/07/25 19:37:00 | 000,000,000 | —D | M] (No name found) – C:\Users\Frank\AppData\Roaming\Mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}
[2010/01/29 08:14:10 | 000,000,000 | —D | M] (No name found) – C:\Users\Frank\AppData\Roaming\Mozilla\Extensions\[removed]
[2010/04/28 12:59:52 | 000,000,000 | —D | M] (No name found) – C:\Users\Frank\AppData\Roaming\Mozilla\Extensions\[removed]
[2013/07/21 22:00:25 | 000,000,000 | —D | M] (No name found) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\fp4ctrw3.SPEEDTEST\extensions
[2011/01/17 10:36:46 | 000,000,000 | —D | M] (No name found) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\p017310x.BACKEDUP\extensions
[2011/01/17 10:36:44 | 000,000,000 | —D | M] (FireShot) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\p017310x.BACKEDUP\extensions\{0b457cAA-602d-484a-8fe7-c1d894a011ba}
[2011/01/17 10:36:44 | 000,000,000 | —D | M] (Remove It Permanently) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\p017310x.BACKEDUP\extensions\{1dbc4a33-ea62-4330-966c-7bdad3455322}
[2011/01/17 10:36:44 | 000,000,000 | —D | M] (Favicon Picker 3) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\p017310x.BACKEDUP\extensions\{446c03e0-2c35-11db-a98b-0800200c9a67}
[2011/01/17 10:36:44 | 000,000,000 | —D | M] (CacheViewer) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\p017310x.BACKEDUP\extensions\{71328583-3CA7-4809-B4BA-570A85818FBB}
[2011/01/17 10:36:44 | 000,000,000 | —D | M] (CacheViewer) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\p017310x.BACKEDUP\extensions\{71328583-3CA7-4809-B4BA-570A85818FBB}(2)
[2011/01/17 10:36:44 | 000,000,000 | —D | M] (XPath Checker) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\p017310x.BACKEDUP\extensions\{7eb3f691-25b4-4a85-9038-9e57e2bcd537}
[2011/01/17 10:36:45 | 000,000,000 | —D | M] (Mozilla Archive Format) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\p017310x.BACKEDUP\extensions\{7f57cf46-4467-4c2d-adfa-0cba7c507e54}
[2011/01/17 10:36:45 | 000,000,000 | —D | M] (Nightly Tester Tools) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\p017310x.BACKEDUP\extensions\{8620c15f-30dc-4dba-a131-7c5d20cf4a29}
[2011/01/17 10:36:45 | 000,000,000 | —D | M] (RSFind! Mod) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\p017310x.BACKEDUP\extensions\{b8d51471-15f1-46cd-a600-448a6b103c2d}
[2011/01/17 10:36:45 | 000,000,000 | —D | M] (Adblock Plus) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\p017310x.BACKEDUP\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
[2011/01/17 10:36:45 | 000,000,000 | —D | M] (Download Statusbar) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\p017310x.BACKEDUP\extensions\{D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}
[2011/01/17 10:36:45 | 000,000,000 | —D | M] (Whitehart) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\p017310x.BACKEDUP\extensions\{d650973c-0444-4ac7-9d00-19e3613c83b9}
[2011/01/17 10:36:45 | 000,000,000 | —D | M] ("Tab Mix Plus") – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\p017310x.BACKEDUP\extensions\{dc572301-7619-498c-a57d-39143191b318}
[2011/01/17 10:36:46 | 000,000,000 | —D | M] (DownThemAll!) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\p017310x.BACKEDUP\extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}
[2011/01/17 10:36:46 | 000,000,000 | —D | M] (Greasemonkey) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\p017310x.BACKEDUP\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
[2011/01/17 10:36:46 | 000,000,000 | —D | M] (UnMHT) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\p017310x.BACKEDUP\extensions\{f759ca51-3a91-4dd1-ae78-9db5eee9ebf0}
[2011/01/17 10:36:46 | 000,000,000 | —D | M] (CustomizeGoogle) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\p017310x.BACKEDUP\extensions\{fce36c1e-58d8-498a-b2a5-66ad1cedebbb}
[2011/01/17 10:36:44 | 000,000,000 | —D | M] (Firebug) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\p017310x.BACKEDUP\extensions\[removed]
[2011/01/17 10:36:44 | 000,000,000 | —D | M] ("NetVideoHunter") – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\p017310x.BACKEDUP\extensions\[removed]
[2011/01/17 10:36:44 | 000,000,000 | —D | M] (No name found) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\p017310x.BACKEDUP\extensions\nostmp
[2011/01/17 10:36:44 | 000,000,000 | —D | M] (QuickDrag) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\p017310x.BACKEDUP\extensions\[removed]
[2011/01/17 10:36:44 | 000,000,000 | —D | M] (Smart Bookmarks Bar) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\p017310x.BACKEDUP\extensions\[removed]
[2013/05/25 13:18:10 | 000,000,000 | —D | M] (No name found) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\s8ka8kfp.FrankE\extensions
[2010/01/02 17:31:56 | 000,000,000 | —D | M] (FireShot) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\s8ka8kfp.FrankE\extensions\{0b457cAA-602d-484a-8fe7-c1d894a011ba}
[2010/01/02 17:31:56 | 000,000,000 | —D | M] (Favicon Picker 3) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\s8ka8kfp.FrankE\extensions\{446c03e0-2c35-11db-a98b-0800200c9a67}
[2010/01/02 17:31:57 | 000,000,000 | —D | M] (FoxyTunes) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\s8ka8kfp.FrankE\extensions\{463F6CA5-EE3C-4be1-B7E6-7FEE11953374}
[2010/01/02 17:31:57 | 000,000,000 | —D | M] (FEBE) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\s8ka8kfp.FrankE\extensions\{4BBDD651-70CF-4821-84F8-2B918CF89CA3}
[2010/01/02 17:31:57 | 000,000,000 | —D | M] (CacheViewer) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\s8ka8kfp.FrankE\extensions\{71328583-3CA7-4809-B4BA-570A85818FBB}(2)
[2010/01/02 17:31:57 | 000,000,000 | —D | M] ("XPath Checker") – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\s8ka8kfp.FrankE\extensions\{7eb3f691-25b4-4a85-9038-9e57e2bcd537}
[2010/01/02 17:32:00 | 000,000,000 | —D | M] (Mozilla Archive Format) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\s8ka8kfp.FrankE\extensions\{7f57cf46-4467-4c2d-adfa-0cba7c507e54}
[2010/01/02 17:32:00 | 000,000,000 | —D | M] (Nightly Tester Tools) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\s8ka8kfp.FrankE\extensions\{8620c15f-30dc-4dba-a131-7c5d20cf4a29}
[2011/01/06 15:18:14 | 000,000,000 | —D | M] ("DVDVideoSoft Menu") – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\s8ka8kfp.FrankE\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
[2010/01/02 17:32:00 | 000,000,000 | —D | M] (No name found) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\s8ka8kfp.FrankE\extensions\{B13721C7-F507-4982-B2E5-502A71474FED}
[2010/01/02 17:32:01 | 000,000,000 | —D | M] (Adblock Plus) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\s8ka8kfp.FrankE\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
[2010/01/02 17:32:04 | 000,000,000 | —D | M] (Classic Compact) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\s8ka8kfp.FrankE\extensions\{D46E8522-6E86-44b1-A622-58C0668AD78E}
[2010/01/02 17:32:05 | 000,000,000 | —D | M] (Download Statusbar) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\s8ka8kfp.FrankE\extensions\{D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}
[2010/01/02 17:32:05 | 000,000,000 | —D | M] (Whitehart) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\s8ka8kfp.FrankE\extensions\{d650973c-0444-4ac7-9d00-19e3613c83b9}
[2010/01/02 17:32:05 | 000,000,000 | —D | M] ("Tab Mix Plus") – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\s8ka8kfp.FrankE\extensions\{dc572301-7619-498c-a57d-39143191b318}
[2010/01/02 17:32:06 | 000,000,000 | —D | M] (DownThemAll!) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\s8ka8kfp.FrankE\extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}
[2010/01/02 17:32:08 | 000,000,000 | —D | M] (Greasemonkey) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\s8ka8kfp.FrankE\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
[2010/01/02 17:32:09 | 000,000,000 | —D | M] (UnMHT) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\s8ka8kfp.FrankE\extensions\{f759ca51-3a91-4dd1-ae78-9db5eee9ebf0}
[2010/01/02 17:32:09 | 000,000,000 | —D | M] (CustomizeGoogle) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\s8ka8kfp.FrankE\extensions\{fce36c1e-58d8-498a-b2a5-66ad1cedebbb}
[2010/01/02 17:31:48 | 000,000,000 | —D | M] ("Aardvark") – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\s8ka8kfp.FrankE\extensions\[removed]
[2010/01/02 17:31:48 | 000,000,000 | —D | M] () – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\s8ka8kfp.FrankE\extensions\[removed]
[2010/01/02 17:31:51 | 000,000,000 | —D | M] (Firebug) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\s8ka8kfp.FrankE\extensions\[removed]
[2010/01/02 17:31:55 | 000,000,000 | —D | M] (FoxyProxy Standard) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\s8ka8kfp.FrankE\extensions\[removed]
[2010/01/02 17:31:55 | 000,000,000 | —D | M] (GameTap) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\s8ka8kfp.FrankE\extensions\[removed]
[2010/01/02 17:31:55 | 000,000,000 | —D | M] (Twitbin) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\s8ka8kfp.FrankE\extensions\[removed]
[2010/01/02 17:31:55 | 000,000,000 | —D | M] (QuickDrag) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\s8ka8kfp.FrankE\extensions\[removed]
[2010/01/02 17:31:56 | 000,000,000 | —D | M] (RSFind!) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\s8ka8kfp.FrankE\extensions\[removed]
[2010/01/02 17:31:56 | 000,000,000 | —D | M] (SkipScreen) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\s8ka8kfp.FrankE\extensions\SkipScreen@SkipScreen
[2010/01/02 17:31:56 | 000,000,000 | —D | M] (Smart Bookmarks Bar) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\s8ka8kfp.FrankE\extensions\[removed]
[2010/01/02 17:31:56 | 000,000,000 | —D | M] ("TwittyTunes") – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\s8ka8kfp.FrankE\extensions\[removed]
[2010/01/02 17:31:56 | 000,000,000 | —D | M] ("XML Developer Toolbar") – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\s8ka8kfp.FrankE\extensions\[removed]
[2010/01/02 17:32:04 | 000,000,000 | —D | M] (No name found) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\s8ka8kfp.FrankE\extensions\{D46E8522-6E86-44b1-A622-58C0668AD78E}\chrome\mozapps\extensions
[2013/08/30 13:15:21 | 000,000,000 | —D | M] (No name found) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\extensions
[2013/08/07 16:27:11 | 000,000,000 | —D | M] (FireShot) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\extensions\{0b457cAA-602d-484a-8fe7-c1d894a011ba}
[2013/07/03 17:27:39 | 000,000,000 | —D | M] (Remove It Permanently) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\extensions\{1dbc4a33-ea62-4330-966c-7bdad3455322}
[2012/07/19 12:55:54 | 000,000,000 | —D | M] (8 Ultimo) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\extensions\{2b6788a0-0ccd-11e1-be50-0800200c9a66}
[2012/08/11 12:25:40 | 000,000,000 | —D | M] (FT Evo) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\extensions\{5c8c1470-d247-11e0-9572-0800200c9a66}
[2012/08/04 13:04:03 | 000,000,000 | —D | M] (ColorZilla) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\extensions\{6AC85730-7D0F-4de0-B3FA-21142DD85326}
[2013/07/05 21:35:58 | 000,000,000 | —D | M] (FT DeepDark) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\extensions\{77d2ed30-4cd2-11e0-b8af-0800200c9a66}
[2013/07/21 22:14:01 | 000,000,000 | —D | M] (Roomy Bookmarks Toolbar) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\extensions\[removed]
[2012/07/20 13:12:30 | 000,000,000 | —D | M] (Favicon Inserter) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\extensions\[removed]
[2012/10/25 07:32:04 | 000,000,000 | —D | M] ("NetVideoHunter") – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\extensions\[removed]
[2013/07/21 22:00:25 | 000,818,491 | —- | M] () (No name found) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\fp4ctrw3.SPEEDTEST\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
[2008/03/29 11:44:18 | 000,001,417 | —- | M] () (No name found) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\s8ka8kfp.FrankE\extensions\{D46E8522-6E86-44b1-A622-58C0668AD78E}\chrome\mozapps\xpinstall\xpinstallConfirm.css
[2008/03/20 21:23:42 | 000,001,423 | —- | M] () (No name found) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\s8ka8kfp.FrankE\extensions\{D46E8522-6E86-44b1-A622-58C0668AD78E}\chrome\mozapps\xpinstall\xpinstallItemGeneric.png
[2013/08/26 12:55:45 | 000,016,325 | —- | M] () (No name found) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\extensions\[removed]
[2013/02/19 09:34:07 | 000,098,969 | —- | M] () (No name found) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\extensions\[removed]
[2013/01/22 22:13:58 | 000,008,875 | —- | M] () (No name found) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\extensions\[removed]
[2013/08/22 13:15:27 | 002,290,227 | —- | M] () (No name found) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\extensions\[removed]
[2013/06/15 18:36:50 | 000,084,697 | —- | M] () (No name found) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\extensions\[removed]
[2013/08/30 13:15:21 | 000,377,144 | —- | M] () (No name found) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\extensions\[removed]
[2012/10/11 15:41:08 | 000,401,328 | —- | M] () (No name found) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\extensions\[removed]
[2013/08/27 17:56:10 | 000,083,379 | —- | M] () (No name found) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\extensions\[removed]
[2013/08/15 08:10:37 | 000,216,989 | —- | M] () (No name found) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\extensions\{37fa1426-b82d-11db-8314-0800200c9a66}.xpi
[2013/07/25 10:20:16 | 000,331,279 | —- | M] () (No name found) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\extensions\{575cbcb9-3b7e-493a-b001-886b3ae793b5}.xpi
[2013/08/02 22:20:26 | 000,224,035 | —- | M] () (No name found) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\extensions\{c0c9a2c7-2e5c-4447-bc53-97718bc91e1b}.xpi
[2013/05/10 07:45:27 | 001,360,435 | —- | M] () (No name found) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\extensions\{c45c406e-ab73-11d8-be73-000a95be3b12}.xpi
[2013/07/31 22:20:43 | 000,824,302 | —- | M] () (No name found) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
[2011/10/30 23:26:46 | 000,434,392 | —- | M] () (No name found) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\extensions\{D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}.xpi
[2013/08/22 16:55:36 | 000,814,349 | —- | M] () (No name found) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\extensions\{dc572301-7619-498c-a57d-39143191b318}.xpi
[2013/04/07 08:00:32 | 000,714,654 | —- | M] () (No name found) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi
[2013/08/07 16:27:10 | 000,275,449 | —- | M] () (No name found) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi
[2013/08/18 13:31:01 | 000,018,509 | —- | M] () (No name found) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\extensions\{E6C1199F-E687-42da-8C24-E7770CC3AE66}.xpi
[2013/06/12 21:30:49 | 000,402,344 | —- | M] () (No name found) – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\extensions\{f759ca51-3a91-4dd1-ae78-9db5eee9ebf0}.xpi
[2012/09/08 16:59:01 | 000,002,277 | —- | M] () – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\searchplugins\bing-images.xml
[2011/05/12 22:13:13 | 000,002,380 | —- | M] () – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\searchplugins\deviantart.xml
[2013/02/12 13:04:22 | 000,000,957 | —- | M] () – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\searchplugins\dictionarycom.xml
[2013/02/12 13:04:22 | 000,000,873 | —- | M] () – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\searchplugins\digg.xml
[2013/05/23 10:52:35 | 000,005,998 | —- | M] () – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\searchplugins\discogs.xml
[2012/12/03 01:06:06 | 000,001,018 | —- | M] () – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\searchplugins\facebook.xml
[2011/03/31 23:37:44 | 000,001,820 | —- | M] () – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\searchplugins\flickr-search-suggestions.xml
[2011/03/31 23:37:32 | 000,001,899 | —- | M] () – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\searchplugins\flickr-tags.xml
[2013/02/12 13:04:22 | 000,001,747 | —- | M] () – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\searchplugins\google-blogs.xml
[2013/02/12 13:04:22 | 000,001,749 | —- | M] () – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\searchplugins\google-books.xml
[2013/02/12 13:04:22 | 000,001,759 | —- | M] () – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\searchplugins\google-directory.xml
[2013/02/12 13:04:22 | 000,001,666 | —- | M] () – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\searchplugins\google-finance.xml
[2013/02/12 13:04:22 | 000,001,755 | —- | M] () – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\searchplugins\google-groups.xml
[2011/01/16 10:23:53 | 000,004,855 | —- | M] () – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\searchplugins\google-images.xml
[2013/02/12 13:04:22 | 000,001,705 | —- | M] () – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\searchplugins\google-maps.xml
[2013/02/12 13:04:22 | 000,001,730 | —- | M] () – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\searchplugins\google-news.xml
[2013/02/12 13:04:22 | 000,001,666 | —- | M] () – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\searchplugins\google-products.xml
[2013/02/12 13:04:22 | 000,001,713 | —- | M] () – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\searchplugins\google-scholar.xml
[2013/02/12 13:04:22 | 000,001,663 | —- | M] () – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\searchplugins\google-trends.xml
[2013/02/12 13:04:22 | 000,001,733 | —- | M] () – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\searchplugins\google-video.xml
[2013/02/12 13:04:22 | 000,000,709 | —- | M] () – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\searchplugins\imdb.xml
[2013/02/12 13:04:22 | 000,001,473 | —- | M] () – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\searchplugins\longman-english-dictionary.xml
[2013/02/12 13:04:22 | 000,000,914 | —- | M] () – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\searchplugins\thesauruscom.xml
[2011/01/16 21:27:26 | 000,004,140 | —- | M] () – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\zkepgqqm.default\searchplugins\youtube.xml
========== Chrome ==========
CHR - homepage: http://www.ask.com/?l=dis&o;=14597cr
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{g
oogle:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:ins
tantExtendedEnabledParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q;={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyPar
ameter}
CHR - homepage:
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Users\Frank\AppData\Local\Google\Chrome\Application\28.0.1500.63\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\Frank\AppData\Local\Google\Chrome\Application\28.0.1500.63\pdf.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Frank\AppData\Local\Google\Chrome\Application\28.0.1500.63\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll
CHR - plugin: FileServe Manager (Enabled) = C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\fpgkjhpjldibdbbppfcabadmpfenkdfe\1.0.0.3024\FSChromeAddOn.dll
CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Browser\nppdf32.dll
CHR - plugin: Java Deployment Toolkit 6.0.240.7 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll
CHR - plugin: Java™ Platform SE 6 U24 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll
CHR - plugin: Microsoft\u00AE Windows Media Player Firefox Plugin (Enabled) = C:\Program Files (x86)\Mozilla Firefox 3\plugins\np-mswmp.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\Mozilla Firefox 3\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\Mozilla Firefox 3\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\Mozilla Firefox 3\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\Mozilla Firefox 3\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\Mozilla Firefox 3\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\Mozilla Firefox 3\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\Mozilla Firefox 3\plugins\npqtplugin7.dll
CHR - plugin: Winamp Application Detector (Enabled) = C:\Program Files (x86)\Mozilla Firefox 4\plugins\npwachk.dll
CHR - plugin: Google Talk Plugin (Enabled) = C:\Users\Frank\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll
CHR - plugin: Google Talk Plugin Video Accelerator (Enabled) = C:\Users\Frank\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll
CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL
CHR - plugin: DivX VOD Helper Plug-in (Enabled) = C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll
CHR - plugin: DivX Web Player (Enabled) = C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll
CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll
CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files (x86)\Microsoft Silverlight\4.1.10111.0\npctrl.dll
CHR - plugin: NVIDIA 3D Vision (Enabled) = C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll
CHR - plugin: NVIDIA 3D VISION (Enabled) = C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll
CHR - plugin: Pando Web Plugin (Enabled) = C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll
CHR - plugin: VLC Web Plugin (Enabled) = C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll
CHR - plugin: Windows Live\u00AE Photo Gallery (Enabled) = C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll
CHR - plugin: WPI Detector 1.2 (Enabled) = C:\Program Files\Microsoft\Web Platform Installer\\npwpidetector.dll
CHR - plugin: QUAKE LIVE (Enabled) = C:\ProgramData\id Software\QuakeLive\npquakezero.dll
CHR - plugin: Unity Player (Enabled) = C:\Users\Frank\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll
CHR - plugin: Pokki Download Helper (Enabled) = C:\Users\Frank\AppData\Local\Pokki\Download Helper\npPokkiDownloadHelper.1.1.0.75.dll
CHR - plugin: Windows Activation Technologies (Enabled) = C:\Windows\system32\Wat\npWatWeb.dll
CHR - Extension: jQuery API Browser = C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\abefhanahjellfbchdmkjdcchkogijhk\1.6_0\
CHR - Extension: Entanglement = C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\aciahcmjmecflokailenpkdchphgkefd\2.7.9_0\
CHR - Extension: Freemake Video Downloader = C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\bpegkgagfojjbcpkihigfmkojdmmimdf\1.0.0_0\
CHR - Extension: Reddit All Comments Viewer = C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\djifpbcmaphjihhelcdeannijfelfnbh\2.0_0\
CHR - Extension: Freemake Youtube Download Button = C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\ehgldbbpchgpcfagfpfjgoomddhccfgh\1.0.0_0\
CHR - Extension: Gmail Offline = C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejidjjhkpiempkbhmpbfngldlkglhimk\1.20_0\
CHR - Extension: Minecraft = C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjejdajnkamfldongiboioggbbolghib\1.1_0\
CHR - Extension: Comixology Backup = C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\fldommkfahfhmkmkffdinhjflpfdhdaa\1.3_0\
CHR - Extension: Balloono = C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\fmggmlpijnjmhdekfigfbkookpdfodhf\1.4_0\
CHR - Extension: FileServe Manager = C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\fpgkjhpjldibdbbppfcabadmpfenkdfe\1.0.0.3024\
CHR - Extension: Downloadify = C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\kmlendhmdnjppdndifgphannebelpkoh\0.1_0\
CHR - Extension: Tab Sugar (alpha version) = C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\libokbfffpaopdjmeofdfpmlanaenaje\0.10.0_0\
CHR - Extension: Skype Click to Call = C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\6.9.0.12585_0\
CHR - Extension: The Fancy Pants Adventure: World 2 = C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\loamdenijebhollnjgehcfbnpeelfhlk\14_0\
CHR - Extension: Poppit = C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\mcbkbpnkkkipelfledbfocopglifcfmi\2.2_0\
CHR - Extension: Hangouts = C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\nckgahadagoaajjgafhacjanaoiihapd\2013.717.433.1_0\
CHR - Extension: DivX Plus Web Player HTML5 \u003Cvideo\u003E = C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm\2.1.2.126_0\
CHR - Extension: Canvas Rider = C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\poknhlcknimnnbfcombaooklofipaibk\0.71_0\
O1 HOSTS File: ([2013/08/28 10:21:24 | 000,002,888 | —- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 75.127.117.238 testzef
O1 - Hosts: 127.0.0.1 assitdev
O1 - Hosts: 127.0.0.1 assitlive
O1 - Hosts: 127.0.0.1 qm
O1 - Hosts: 127.0.0.1 hp
O1 - Hosts: 127.0.0.1 brandhub
O1 - Hosts: 127.0.0.1 thuthu
O1 - Hosts: 196.220.35.21 greencartridge.brandhub.co.za
O1 - Hosts: 127.0.0.1 oa
O1 - Hosts: 127.0.0.1 zouk
O1 - Hosts: 127.0.0.1 miniml
O1 - Hosts: 127.0.0.1 oc
O1 - Hosts: 127.0.0.1 i8
O1 - Hosts: 41.185.12.30 www.jabatha.co.za
O1 - Hosts: 127.0.0.1 mamba
O1 - Hosts: 127.0.0.1 mambao
O1 - Hosts: 127.0.0.1 mgbmed
O1 - Hosts: 127.0.0.1 ar
O1 - Hosts: 127.0.0.1 hpbrowse
O1 - Hosts: 127.0.0.1 wt
O1 - Hosts: 127.0.0.1 altban
O1 - Hosts: 127.0.0.1 dnn
O1 - Hosts: 127.0.0.1 qx
O1 - Hosts: 196.220.60.200 www.interdoc.co.za
O1 - Hosts: 196.220.62.134 mail.interdoc.co.za
O1 - Hosts: 62 more lines…
O2:64bit: - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2:64bit: - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
O2:64bit: - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (Octh Class) - {000123B4-9B42-4900-B3F7-F4B073EFC214} - C:\Program Files (x86)\Orbitdownloader\orbitcth.dll (Orbitdownloader.com)
O2 - BHO: (DivX Plus Web Player HTML5 ) - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
O2 - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Evernote extension) - {92EF2EAD-A7CE-4424-B0DB-499CF856608E} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Free Download Manager) - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files (x86)\Free Download Manager\iefdm2.dll (FreeDownloadManager.ORG)
O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3:64bit: - HKLM\..\Toolbar: (no name) - {ae07101b-46d4-4a98-af68-0333ea26e113} - No CLSID value found.
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - {ae07101b-46d4-4a98-af68-0333ea26e113} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O4:64bit: - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
O4:64bit: - HKLM..\Run: [EvtMgr6] C:\Program Files\Logitech\SetPointP\SetPoint.exe (Logitech, Inc.)
O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
O4 - HKLM..\Run: [Everything] C:\Program Files (x86)\Everything\Everything.exe ()
O4 - HKLM..\Run: [NUSB3MON] C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (Renesas Electronics Corporation)
O4 - HKCU..\Run: [BitTorrent Sync] C:\Program Files (x86)\BitTorrent Sync\BTSync.exe (BitTorrent, Inc.)
O4 - HKCU..\Run: [F.lux] C:\Users\Frank\Local Settings\Apps\F.lux\flux.exe ()
O4 - HKCU..\Run: [SandboxieControl] C:\Program Files\Sandboxie\SbieCtrl.exe (Sandboxie Holdings, LLC)
O4 - Startup: C:\Users\Frank\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\Frank\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
O4 - Startup: C:\Users\Frank\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\gditray.exe - Shortcut.lnk = C:\Win32App\GDITray_0923\gditray.exe (2ch)
O4 - Startup: C:\Users\Frank\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MagicDisc.lnk = C:\Program Files (x86)\MagicDisc\MagicDisc.exe (MagicISO, Inc.)
O4 - Startup: C:\Users\Frank\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Password Safe.lnk = C:\Program Files (x86)\Password Safe\pwsafe.exe (SourceForge.net)
O4 - Startup: C:\Users\Frank\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\SoundSwitch.appref-ms ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HideSCAHealth = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: verbosestatus = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLinkedConnections = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 221
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: TaskbarNoNotification = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run: smtp4dev = C:\Program Files (x86)\smtp4dev\Smtp4dev.exe (Robert N Wood <[removed]>)
O8:64bit: - Extra context menu item: &Download; by Orbit - C:\Program Files (x86)\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com)
O8:64bit: - Extra context menu item: &Grab; video by Orbit - C:\Program Files (x86)\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com)
O8:64bit: - Extra context menu item: Clip Image - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=4 File not found
O8:64bit: - Extra context menu item: Clip selection - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=3 File not found
O8:64bit: - Extra context menu item: Clip this page - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=1 File not found
O8:64bit: - Extra context menu item: Clip URL - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=0 File not found
O8:64bit: - Extra context menu item: Do&wnload; selected by Orbit - C:\Program Files (x86)\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com)
O8:64bit: - Extra context menu item: Down&load; all by Orbit - C:\Program Files (x86)\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com)
O8:64bit: - Extra context menu item: Download all with Free Download Manager - C:\Program Files (x86)\Free Download Manager\dlall.htm ()
O8:64bit: - Extra context menu item: Download with Free Download Manager - C:\Program Files (x86)\Free Download Manager\dllink.htm ()
O8:64bit: - Extra context menu item: Download with Mipony - C:\Program Files (x86)\MiPony\Browser\IEContext.htm ()
O8:64bit: - Extra context menu item: Free YouTube Download - C:\Users\Frank\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm ()
O8:64bit: - Extra context menu item: New Note - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\NewNote.html ()
O8 - Extra context menu item: &Download; by Orbit - C:\Program Files (x86)\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com)
O8 - Extra context menu item: &Grab; video by Orbit - C:\Program Files (x86)\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com)
O8 - Extra context menu item: Clip Image - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=4 File not found
O8 - Extra context menu item: Clip selection - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=3 File not found
O8 - Extra context menu item: Clip this page - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=1 File not found
O8 - Extra context menu item: Clip URL - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=0 File not found
O8 - Extra context menu item: Do&wnload; selected by Orbit - C:\Program Files (x86)\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com)
O8 - Extra context menu item: Down&load; all by Orbit - C:\Program Files (x86)\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com)
O8 - Extra context menu item: Download all with Free Download Manager - C:\Program Files (x86)\Free Download Manager\dlall.htm ()
O8 - Extra context menu item: Download with Free Download Manager - C:\Program Files (x86)\Free Download Manager\dllink.htm ()
O8 - Extra context menu item: Download with Mipony - C:\Program Files (x86)\MiPony\Browser\IEContext.htm ()
O8 - Extra context menu item: Free YouTube Download - C:\Users\Frank\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm ()
O8 - Extra context menu item: New Note - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\NewNote.html ()
O9:64bit: - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra Button: Bonjour - {7F9DB11C-E358-4ca6-A83D-ACC663939424} - C:\Program Files (x86)\Bonjour\ExplorerPlugin.dll (Apple Inc.)
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra Button: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\AddNote.html ()
O9 - Extra 'Tools' menuitem : @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\AddNote.html ()
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000008 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {0E8D0700-75DF-11D3-8B4A-0008C7450C4A} http://biz.lgservice.com/DjvuViewer/DjVuControl-6.1.4.cab (DjVuCtl Class)
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab (Reg Error: Key error.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Reg Error: Value error.)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_07)
O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 10.21.2)
O16 - DPF: {F27237D7-93C8-44C2-AC6E-D6057B9A918F} https://juniper.net/dana-cached/sc/JuniperSetupClient.cab (JuniperSetupClientControl Class)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{0DF46B71-B458-43E3-B4B7-1BF05BEA928E}: DhcpNameServer = 8.8.8.8
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{162309DC-BB3F-4830-989A-373ECD473D13}: DhcpNameServer = 8.8.8.8
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{4542DAEC-E0EB-43DA-B4BB-CA8498350CF2}: NameServer = 192.168.0.3
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{495747D2-7BD7-4D91-854E-851DF7030B65}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{60759B52-2690-40F8-8D29-12EE3200BDA0}: NameServer = 192.168.0.3
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{C63ADFD7-4A7C-4772-8A23-65F875F4D50E}: NameServer = 196.14.239.2,192.2.45.101
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{DEAF595E-10E2-40C8-A739-BEBCDE97F75D}: DhcpNameServer = 8.8.8.8
O18:64bit: - Protocol\Handler\mediaman {F00B23B6-E372-4227-BCD9-CDC32EA1521E} - C:\Program Files\MediaMan\CoMProt.dll (He Shiming)
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O18:64bit: - Protocol\Handler\mso-offdap11 - No CLSID value found
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18:64bit: - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18:64bit: - Protocol\Handler\wlpg - No CLSID value found
O18 - Protocol\Handler\mediaman - No CLSID value found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
O20:64bit: - Winlogon\Notify\LBTWlgn: DllName - (c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll) - c:\Program Files\Common Files\Logishrd\Bluetooth\LBTWLgn.dll (Logitech, Inc.)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O22:64bit: - SharedTaskScheduler: {E31004D1-A431-41B8-826F-E902F9D95C81} - Windows DreamScene - C:\Windows\SysNative\DreamScene.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/06/10 23:42:20 | 000,000,024 | —- | M] () - C:\autoexec.bat – [ NTFS ]
O32 - AutoRun File - [2004/08/09 15:10:16 | 000,000,056 | RH– | M] () - H:\autorun.inf – [ CDFS ]
O33 - MountPoints2\{37e44a7f-8bdf-11e2-8aa7-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{37e44a7f-8bdf-11e2-8aa7-806e6f6e6963}\Shell\AutoRun\command - "" = H:\browser.exe – [2002/11/07 11:46:06 | 000,335,872 | R— | M] (Live Publishing International)
O33 - MountPoints2\{59a7abc8-f951-11df-b5f5-001e101f2c0e}\Shell - "" = AutoRun
O33 - MountPoints2\{59a7abc8-f951-11df-b5f5-001e101f2c0e}\Shell\AutoRun\command - "" = K:\AutoRun.exe
O33 - MountPoints2\{59a7abde-f951-11df-b5f5-001e101f2c0e}\Shell - "" = AutoRun
O33 - MountPoints2\{59a7abde-f951-11df-b5f5-001e101f2c0e}\Shell\AutoRun\command - "" = K:\AutoRun.exe
O33 - MountPoints2\{b9666dee-f1bb-11df-a3cb-00270e1e50e5}\Shell - "" = AutoRun
O33 - MountPoints2\{b9666dee-f1bb-11df-a3cb-00270e1e50e5}\Shell\AutoRun\command - "" = L:\AutoRun.exe
O33 - MountPoints2\{b9666df9-f1bb-11df-a3cb-00270e1e50e5}\Shell - "" = AutoRun
O33 - MountPoints2\{b9666df9-f1bb-11df-a3cb-00270e1e50e5}\Shell\AutoRun\command - "" = K:\AutoRun.exe
O33 - MountPoints2\{b9666e04-f1bb-11df-a3cb-00270e1e50e5}\Shell - "" = AutoRun
O33 - MountPoints2\{b9666e04-f1bb-11df-a3cb-00270e1e50e5}\Shell\AutoRun\command - "" = K:\AutoRun.exe
O33 - MountPoints2\{b9666e1d-f1bb-11df-a3cb-00270e1e50e5}\Shell - "" = AutoRun
O33 - MountPoints2\{b9666e1d-f1bb-11df-a3cb-00270e1e50e5}\Shell\AutoRun\command - "" = K:\AutoRun.exe
O33 - MountPoints2\{c560cd3a-516b-11e0-b416-00270e1e50e5}\Shell - "" = AutoRun
O33 - MountPoints2\{c560cd3a-516b-11e0-b416-00270e1e50e5}\Shell\AutoRun\command - "" = I:\NokiaPCIA_Autorun.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O34 - HKLM BootExecute: (Partizan)
O34 - HKLM BootExecute: (ootExecute settings…)
O34 - HKLM BootExecute: (ount)
O35:64bit: - HKLM\..comfile [open] – "%1" %*
O35:64bit: - HKLM\..exefile [open] – "%1" %*
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37:64bit: - HKLM\…com [@ = comfile] – "%1" %*
O37:64bit: - HKLM\…exe [@ = exefile] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
NetSvcs:64bit: AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
Drivers32:64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32:64bit: vidc.ffds - ff_vfw.dll ()
Drivers32:64bit: VIDC.FPS1 - frapsv64.dll (Beepa P/L)
Drivers32:64bit: vidc.i420 - lvcod64.dll (Logitech Inc.)
Drivers32:64bit: vidc.tscc - C:\Windows\SysWOW64\tsccvid64.dll (TechSmith Corporation)
Drivers32: msacm.ac3filter - C:\Windows\SysWow64\ac3filter.acm ()
Drivers32: msacm.avis - C:\Windows\SysWow64\ff_acm.acm ()
Drivers32: msacm.divxa32 - C:\Windows\SysWow64\DivXa32.acm (Packed With Joy !)
Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.lameacm - C:\Windows\SysWow64\LameACM.acm (http://www.mp3dev.org/)
Drivers32: msacm.vorbis - C:\Windows\SysWow64\vorbis.acm (HMS http://hp.vector.co.jp/authors/VA012897/)
Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
Drivers32: vidc.divx - C:\Windows\SysWow64\DivX.dll (DivX, Inc.)
Drivers32: VIDC.FFDS - C:\Windows\SysWow64\ff_vfw.dll ()
Drivers32: VIDC.FPS1 - C:\Windows\SysWow64\frapsvid.dll (Beepa P/L)
Drivers32: vidc.iv50 - C:\Windows\SysWOW64\ir50_32.dll (Intel Corporation)
Drivers32: vidc.lags - C:\Windows\SysWow64\Lagarith.dll ( )
Drivers32: vidc.tscc - C:\Windows\SysWOW64\tsccvid.dll (TechSmith Corporation)
Drivers32: vidc.VP60 - C:\Windows\SysWOW64\vp6vfw.dll (On2.com)
Drivers32: vidc.VP61 - C:\Windows\SysWOW64\vp6vfw.dll (On2.com)
Drivers32: vidc.x264 - C:\Windows\SysWow64\x264vfw.dll (x264vfw project)
Drivers32: vidc.XVID - C:\Windows\SysWow64\xvidvfw.dll ()
Drivers32: vidc.yv12 - C:\Windows\SysWow64\yv12vfw.dll (www.helixcommunity.org)
CREATERESTOREPOINT
Restore point Set: OTL Restore Point
========== Files/Folders - Created Within 30 Days ==========
[2013/09/02 14:25:20 | 000,000,000 | —D | C] – C:\reports
[2013/09/02 13:54:37 | 000,000,000 | —D | C] – C:\Users\Frank\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Sophos
[2013/09/02 13:05:07 | 000,000,000 | —D | C] – C:\Users\Frank\AppData\Roaming\LockHunter
[2013/09/02 08:38:44 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LockHunter
[2013/09/02 08:38:43 | 000,000,000 | —D | C] – C:\Program Files\LockHunter
[2013/08/30 07:38:19 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SQLyog
[2013/08/30 07:38:18 | 000,000,000 | —D | C] – C:\Program Files (x86)\SQLyog9
[2013/08/29 23:13:00 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SQLyog - 32 bit Trial
[2013/08/29 23:12:59 | 000,000,000 | —D | C] – C:\Program Files (x86)\SQLyog Trial
[2013/08/28 19:49:02 | 000,000,000 | —D | C] – C:\Users\Frank\Documents\Wondershare
[2013/08/28 19:46:12 | 000,098,616 | —- | C] (DEVGURU Co., LTD.(www.devguru.co.kr)) – C:\Windows\SysNative\drivers\ssudbus.sys
[2013/08/28 19:43:26 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wondershare
[2013/08/28 19:43:23 | 000,000,000 | —D | C] – C:\Users\Frank\AppData\Roaming\Wondershare
[2013/08/28 09:43:32 | 000,000,000 | —D | C] – C:\Users\Frank\Documents\Updater
[2013/08/28 09:41:20 | 000,000,000 | —D | C] – C:\Windows\SysWow64\Adobe
[2013/08/28 09:37:25 | 000,000,000 | —D | C] – C:\Users\Public\Documents\Adobe PDF
[2013/08/28 09:37:16 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Adobe Systems Shared
[2013/08/27 15:46:12 | 000,000,000 | —D | C] – C:\Users\Frank\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Jeroen Pelgrims
[2013/08/27 10:57:48 | 000,773,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msvcr100.dll
[2013/08/27 10:57:46 | 000,421,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msvcp100.dll
[2013/08/27 10:57:45 | 004,422,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mfc100u.dll
[2013/08/27 09:43:44 | 000,000,000 | —D | C] – C:\Users\Frank\AppData\Local\Adobe
[2013/08/27 09:43:42 | 000,000,000 | —D | C] – C:\Users\Frank\AppData\Roaming\Adobe
[2013/08/27 09:43:29 | 000,000,000 | —D | C] – C:\ProgramData\regid.1986-12.com.adobe
[2013/08/27 09:43:29 | 000,000,000 | —D | C] – C:\ProgramData\Adobe
[2013/08/25 22:11:26 | 000,000,000 | —D | C] – C:\Users\Frank\AppData\Local\Adobe.BackupByIllustratorPortable
[2013/08/25 22:11:24 | 000,000,000 | —D | C] – C:\Users\Frank\AppData\Roaming\Adobe.BackupByIllustratorPortable
[2013/08/25 22:11:14 | 000,000,000 | —D | C] – C:\ProgramData\regid.1986-12.com.adobe.BackupByIllustratorPortable
[2013/08/25 22:11:14 | 000,000,000 | —D | C] – C:\ProgramData\Adobe.BackupByIllustratorPortable
[2013/08/25 18:55:22 | 000,000,000 | —D | C] – C:\downloads
[2013/08/22 20:39:02 | 000,000,000 | —D | C] – C:\Users\Frank\Documents\My Safes
[2013/08/22 20:38:58 | 000,000,000 | —D | C] – C:\Users\Frank\AppData\Local\PasswordSafe
[2013/08/22 19:50:50 | 000,000,000 | —D | C] – C:\Users\Frank\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Password Safe
[2013/08/22 19:50:50 | 000,000,000 | —D | C] – C:\Program Files (x86)\Password Safe
[2013/08/22 17:07:05 | 000,000,000 | —D | C] – C:\Program Files\LinkShellExtension
[2013/08/22 17:07:05 | 000,000,000 | —D | C] – C:\Users\Frank\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Link Shell Extension
[2013/08/22 17:07:05 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Link Shell Extension
[2013/08/20 17:39:04 | 000,000,000 | —D | C] – C:\Users\Frank\AppData\Local\GameTuts
[2013/08/20 16:08:47 | 000,000,000 | —D | C] – C:\Users\Frank\AppData\Roaming\abgx360
[2013/08/20 07:02:12 | 000,204,568 | —- | C] (DEVGURU Co., LTD.(www.devguru.co.kr)) – C:\Windows\SysNative\drivers\ssudmdm.sys
[2013/08/19 13:03:54 | 000,000,000 | —D | C] – C:\Users\Frank\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\JetDownloader
[2013/08/19 11:25:51 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Orbit
[2013/08/19 11:25:16 | 000,000,000 | —D | C] – C:\Program Files (x86)\Orbitdownloader
[2013/08/17 11:54:24 | 000,000,000 | —D | C] – C:\Program Files (x86)\Mozilla Firefox 4
[2013/08/13 12:48:56 | 000,000,000 | —D | C] – C:\Users\Frank\AppData\Local\Daring_Development_Inc
[2013/08/13 12:48:49 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Horizon
[2013/08/13 12:48:48 | 000,000,000 | —D | C] – C:\Program Files (x86)\Daring Development
[2013/08/11 16:58:56 | 000,000,000 | —D | C] – C:\Users\Frank\New folder (3)
[2013/08/11 16:22:59 | 000,000,000 | —D | C] – C:\Program Files (x86)\2Tware_Fat32Format
[2013/08/11 16:22:59 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\2Tware Fat32Format Free
[2013/08/10 15:05:07 | 000,000,000 | —D | C] – C:\Users\Frank\Documents\warblade
[2013/08/10 15:05:06 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Warblade
[2013/08/07 15:42:29 | 000,000,000 | —D | C] – C:\Program Files\Adobe_CC
[2013/08/05 16:28:27 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Grinding Gear Games
[2013/08/05 07:35:51 | 000,439,808 | —- | C] (MPC-HC Team) – C:\Windows\SysWow64\RealMediaSplitter.ax
[2013/08/05 07:35:51 | 000,070,656 | —- | C] (www.helixcommunity.org) – C:\Windows\SysWow64\yv12vfw.dll
[2012/07/16 22:02:33 | 000,082,816 | —- | C] (VSO Software) – C:\Users\Frank\AppData\Roaming\pcouffin.sys
[4 C:\Windows\SysNative\*.tmp files -> C:\Windows\SysNative\*.tmp -> ]
[3 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[1 C:\Program Files (x86)\*.tmp files -> C:\Program Files (x86)\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2013/09/02 14:20:22 | 000,001,177 | -H– | M] () – C:\Users\Frank\Application Data\Microsoft\Internet Explorer\Quick Launch\tlbdata.xml
[2013/09/02 13:54:37 | 000,003,165 | —- | M] () – C:\Users\Frank\Desktop\Sophos Virus Removal Tool.lnk
[2013/09/02 13:48:07 | 000,020,176 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013/09/02 13:48:07 | 000,020,176 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013/09/02 13:39:52 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2013/09/02 13:05:04 | 000,003,888 | —- | M] () – C:\Windows\SysWow64\drivers\NTHANDLE.SYS
[2013/09/02 09:00:22 | 000,001,083 | —- | M] () – C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2013/09/01 21:36:36 | 000,955,354 | —- | M] () – C:\Windows\SysNative\PerfStringBackup.INI
[2013/09/01 21:36:36 | 000,791,498 | —- | M] () – C:\Windows\SysNative\perfh009.dat
[2013/09/01 21:36:36 | 000,172,212 | —- | M] () – C:\Windows\SysNative\perfc009.dat
[2013/09/01 14:54:18 | 000,001,456 | —- | M] () – C:\Users\Frank\AppData\Local\Adobe Save for Web 13.0 Prefs
[2013/08/30 12:38:40 | 005,404,912 | —- | M] () – C:\Windows\SysNative\FNTCACHE.DAT
[2013/08/30 07:38:19 | 000,000,960 | —- | M] () – C:\Users\Public\Desktop\SQLyog.lnk
[2013/08/29 23:13:00 | 000,000,997 | —- | M] () – C:\Users\Public\Desktop\SQLyog - 32 bit Trial.lnk
[2013/08/28 19:46:12 | 000,098,616 | —- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) – C:\Windows\SysNative\drivers\ssudbus.sys
[2013/08/28 19:43:26 | 000,002,143 | —- | M] () – C:\Users\Public\Desktop\Wondershare MobileGo for Android.lnk
[2013/08/27 20:02:02 | 000,002,156 | —- | M] () – C:\Windows\Sandboxie.ini
[2013/08/27 15:46:12 | 000,000,354 | —- | M] () – C:\Users\Frank\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\SoundSwitch.appref-ms
[2013/08/22 19:50:50 | 000,001,046 | —- | M] () – C:\Users\Frank\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Password Safe.lnk
[2013/08/22 19:50:50 | 000,001,004 | —- | M] () – C:\Users\Frank\Desktop\Password Safe.lnk
[2013/08/20 11:41:41 | 000,132,088 | —- | M] (Avira Operations GmbH & Co. KG) – C:\Windows\SysNative\drivers\avipbb.sys
[2013/08/20 11:41:41 | 000,105,344 | —- | M] (Avira Operations GmbH & Co. KG) – C:\Windows\SysNative\drivers\avgntflt.sys
[2013/08/20 11:41:41 | 000,081,112 | —- | M] (Avira Operations GmbH & Co. KG) – C:\Windows\SysNative\drivers\avnetflt.sys
[2013/08/20 07:02:12 | 000,204,568 | —- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) – C:\Windows\SysNative\drivers\ssudmdm.sys
[2013/08/19 13:03:54 | 000,001,041 | —- | M] () – C:\Users\Frank\Desktop\JetDownloader.lnk
[2013/08/19 11:25:51 | 000,001,025 | —- | M] () – C:\Users\Frank\Desktop\Orbit.lnk
[2013/08/17 16:30:49 | 000,148,992 | —- | M] () – C:\Users\Frank\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2013/08/13 16:09:09 | 000,000,132 | —- | M] () – C:\Users\Frank\AppData\Roaming\Adobe PNG Format CS6 Prefs
[2013/08/11 16:22:59 | 000,001,066 | —- | M] () – C:\Users\Public\Desktop\2Tware Fat32Foramt Free 1.0.lnk
[2013/08/09 12:15:14 | 004,422,992 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\mfc100u.dll.BackupByIllustratorPortable
[2013/08/09 12:15:14 | 004,422,992 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\mfc100u.dll
[2013/08/07 16:09:46 | 000,000,364 | —- | M] () – C:\Windows\tasks\AdobeAAMUpdater-1.0-Regenesis-Frank.job
[2013/08/07 15:44:30 | 000,001,492 | —- | M] () – C:\Users\Public\Desktop\Adobe Application Manager.lnk
[2013/08/05 16:28:27 | 000,001,603 | —- | M] () – C:\Users\Public\Desktop\Path of Exile.lnk
[2013/08/04 23:22:47 | 000,001,232 | —- | M] () – C:\Windows\SysNative\%D0%A7%D1%80%D0%B5%D0%B7%D0%BC%D0%B5%D1%80%D0%BD%D0%BE%D0%B5+%D0%BD%D0%B0%D1%81%D0%B8%D0%BB%D0%B8%D0%B5+2%3A+%D0%A1%D1%82%D0%B5%D0%BD%D0%BA%D0%B0+%D0%BD%D0%B0+%D1%81%D1%82%D0%B5%D0%BD%D0%BA%D1.torrent.lnk
[2013/08/04 21:41:01 | 000,000,040 | —- | M] () – C:\Users\Frank\AppData\Roaming\cdr.ini
[4 C:\Windows\SysNative\*.tmp files -> C:\Windows\SysNative\*.tmp -> ]
[3 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[1 C:\Program Files (x86)\*.tmp files -> C:\Program Files (x86)\*.tmp -> ]
========== Files Created - No Company Name ==========
[2013/09/02 13:54:37 | 000,003,165 | —- | C] () – C:\Users\Frank\Desktop\Sophos Virus Removal Tool.lnk
[2013/08/30 07:38:19 | 000,000,960 | —- | C] () – C:\Users\Public\Desktop\SQLyog.lnk
[2013/08/29 23:13:00 | 000,000,997 | —- | C] () – C:\Users\Public\Desktop\SQLyog - 32 bit Trial.lnk
[2013/08/28 19:43:26 | 000,002,143 | —- | C] () – C:\Users\Public\Desktop\Wondershare MobileGo for Android.lnk
[2013/08/28 09:41:43 | 000,002,082 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Illustrator CS2.lnk
[2013/08/28 09:41:20 | 000,016,384 | —- | C] () – C:\Windows\SysWow64\FileOps.exe
[2013/08/28 09:39:25 | 000,001,649 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS2.lnk
[2013/08/28 09:39:25 | 000,001,644 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe ImageReady CS2.lnk
[2013/08/28 09:39:07 | 000,001,633 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Help Center.lnk
[2013/08/28 09:37:15 | 000,001,619 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge.lnk
[2013/08/27 15:46:15 | 000,000,354 | —- | C] () – C:\Users\Frank\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\SoundSwitch.appref-ms
[2013/08/22 19:50:50 | 000,001,046 | —- | C] () – C:\Users\Frank\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Password Safe.lnk
[2013/08/22 19:50:50 | 000,001,004 | —- | C] () – C:\Users\Frank\Desktop\Password Safe.lnk
[2013/08/19 13:03:54 | 000,001,041 | —- | C] () – C:\Users\Frank\Desktop\JetDownloader.lnk
[2013/08/19 11:25:51 | 000,001,025 | —- | C] () – C:\Users\Frank\Desktop\Orbit.lnk
[2013/08/13 16:32:45 | 000,640,030 | —- | C] () – C:\Users\Frank\Documents\youtube-logo-vector.eps
[2013/08/11 16:22:59 | 000,001,066 | —- | C] () – C:\Users\Public\Desktop\2Tware Fat32Foramt Free 1.0.lnk
[2013/08/07 16:09:46 | 000,000,364 | —- | C] () – C:\Windows\tasks\AdobeAAMUpdater-1.0-Regenesis-Frank.job
[2013/08/07 15:44:30 | 000,001,504 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Application Manager.lnk
[2013/08/07 15:44:30 | 000,001,492 | —- | C] () – C:\Users\Public\Desktop\Adobe Application Manager.lnk
[2013/08/05 16:28:27 | 000,001,603 | —- | C] () – C:\Users\Public\Desktop\Path of Exile.lnk
[2013/08/04 23:22:47 | 000,001,232 | —- | C] () – C:\Windows\SysNative\%D0%A7%D1%80%D0%B5%D0%B7%D0%BC%D0%B5%D1%80%D0%BD%D0%BE%D0%B5+%D0%BD%D0%B0%D1%81%D0%B8%D0%BB%D0%B8%D0%B5+2%3A+%D0%A1%D1%82%D0%B5%D0%BD%D0%BA%D0%B0+%D0%BD%D0%B0+%D1%81%D1%82%D0%B5%D0%BD%D0%BA%D1.torrent.lnk
[2013/07/17 14:33:23 | 000,005,291 | —- | C] () – C:\Windows\my.ini.old
[2013/06/28 21:15:20 | 000,001,110 | —- | C] () – C:\Users\Frank\_viminfo
[2013/04/19 00:38:36 | 000,039,904 | —- | C] () – C:\Windows\SysWow64\Media Player - Codec Pack Disc handler.exe
[2013/04/19 00:38:36 | 000,039,904 | —- | C] () – C:\Windows\SysWow64\dischandler.exe
[2013/04/16 12:35:04 | 003,915,776 | —- | C] () – C:\Windows\SysWow64\ffmpeg.dll
[2013/04/16 12:33:50 | 000,112,640 | —- | C] () – C:\Windows\SysWow64\ff_vfw.dll
[2013/04/16 12:32:28 | 000,157,184 | —- | C] () – C:\Windows\SysWow64\ff_unrar.dll
[2013/04/16 12:32:24 | 000,271,360 | —- | C] () – C:\Windows\SysWow64\TomsMoComp_ff.dll
[2013/04/16 12:32:18 | 000,099,840 | —- | C] () – C:\Windows\SysWow64\ff_wmv9.dll
[2013/04/16 12:32:16 | 000,211,968 | —- | C] () – C:\Windows\SysWow64\ff_libdts.dll
[2013/04/16 12:32:16 | 000,147,456 | —- | C] () – C:\Windows\SysWow64\ff_libmad.dll
[2013/04/16 12:32:14 | 001,525,760 | —- | C] () – C:\Windows\SysWow64\ff_samplerate.dll
[2013/04/16 12:32:14 | 000,114,688 | —- | C] () – C:\Windows\SysWow64\ff_liba52.dll
[2013/04/16 12:32:10 | 000,136,704 | —- | C] () – C:\Windows\SysWow64\libmpeg2_ff.dll
[2013/04/13 14:23:50 | 007,788,672 | —- | C] () – C:\Windows\SysWow64\avcodec-lav-55.dll
[2013/04/13 14:23:50 | 001,300,152 | —- | C] () – C:\Windows\SysWow64\avformat-lav-55.dll
[2013/04/13 14:23:50 | 000,400,592 | —- | C] () – C:\Windows\SysWow64\swscale-lav-2.dll
[2013/04/13 14:23:50 | 000,272,192 | —- | C] () – C:\Windows\SysWow64\avutil-lav-52.dll
[2013/04/13 14:23:50 | 000,194,632 | —- | C] () – C:\Windows\SysWow64\avfilter-lav-3.dll
[2013/04/13 14:23:50 | 000,172,728 | —- | C] () – C:\Windows\SysWow64\avresample-lav-1.dll
[2013/04/01 22:01:04 | 000,000,939 | -H– | C] () – C:\Users\Frank\.gitk
[2013/04/01 21:37:02 | 000,000,155 | —- | C] () – C:\Users\Frank\.gitconfig
[2013/03/03 00:17:34 | 000,166,504 | —- | C] () – C:\Windows\SysWow64\AirfoilInject3.dll
[2013/01/26 12:11:56 | 000,281,688 | —- | C] () – C:\Windows\SysWow64\PnkBstrB.exe
[2013/01/25 20:59:55 | 000,076,888 | —- | C] () – C:\Windows\SysWow64\PnkBstrA.exe
[2013/01/13 14:16:25 | 000,032,256 | —- | C] () – C:\Windows\SysWow64\AVSredirect.dll
[2013/01/13 14:02:07 | 000,167,936 | —- | C] () – C:\Windows\SysWow64\SpoonUninstall.exe
[2012/12/04 08:48:21 | 000,000,021 | —- | C] () – C:\Windows\SurCode.INI
[2012/10/20 22:07:45 | 013,509,599 | —- | C] () – C:\Users\Frank\AppData\Local\soulseek-client.dat
[2012/10/01 23:41:35 | 000,000,293 | —- | C] () – C:\Users\Frank\KeyboardMacros.xml
[2012/10/01 23:41:15 | 000,000,246 | —- | C] () – C:\Users\Frank\ApplicationSettings.xml
[2012/09/30 00:47:28 | 000,000,178 | —- | C] () – C:\Windows\SysWow64\Formats.ini
[2012/09/07 15:34:28 | 000,000,132 | —- | C] () – C:\Users\Frank\AppData\Roaming\Adobe PNG Format CS6 Prefs
[2012/08/30 11:00:46 | 000,000,032 | —- | C] () – C:\Users\Frank\.simfy
[2012/08/26 22:51:40 | 000,000,040 | -HS- | C] () – C:\ProgramData\.zreglib
[2012/07/16 22:03:27 | 000,000,664 | —- | C] () – C:\Users\Frank\AppData\Roaming\vso_ts_preview.xml
[2012/07/16 22:02:33 | 000,099,384 | —- | C] () – C:\Users\Frank\AppData\Roaming\inst.exe
[2012/07/16 22:02:33 | 000,007,859 | —- | C] () – C:\Users\Frank\AppData\Roaming\pcouffin.cat
[2012/07/16 22:02:33 | 000,001,167 | —- | C] () – C:\Users\Frank\AppData\Roaming\pcouffin.inf
[2012/07/14 22:37:49 | 000,034,308 | —- | C] () – C:\Windows\SysWow64\BASSMOD.dll
[2012/07/04 14:02:34 | 000,001,456 | —- | C] () – C:\Users\Frank\AppData\Local\Adobe Save for Web 13.0 Prefs
[2012/06/27 10:50:16 | 000,001,010 | —- | C] () – C:\Users\Frank\.swfinfo
[2012/04/24 18:05:29 | 000,000,000 | —- | C] () – C:\Windows\GraphEdt.INI
[2012/04/22 17:49:06 | 000,033,792 | —- | C] () – C:\Windows\D2MultiRes.dll
[2012/04/22 17:33:31 | 000,018,512 | —- | C] () – C:\Windows\DIIUnin.dat
[2012/04/06 15:15:17 | 000,000,249 | —- | C] () – C:\Users\Frank\SecurityKISSTunnel.config
[2012/03/09 12:21:51 | 000,221,304 | —- | C] () – C:\Windows\hpoins19.dat
[2012/03/09 12:21:51 | 000,013,898 | —- | C] () – C:\Windows\hpomdl19.dat
[2012/03/08 23:19:31 | 000,074,703 | —- | C] () – C:\Windows\SysWow64\mfc45.dll
[2012/03/08 23:18:00 | 000,074,703 | —- | C] () – C:\Windows\SysWOW64mfc45.dll
[2012/02/13 18:09:03 | 000,000,040 | —- | C] () – C:\Users\Frank\AppData\Roaming\cdr.ini
[2011/12/13 23:11:39 | 000,003,888 | —- | C] () – C:\Windows\SysWow64\drivers\NTHANDLE.SYS
[2011/12/07 21:32:24 | 000,216,064 | —- | C] ( ) – C:\Windows\SysWow64\Lagarith.dll
[2011/11/23 22:47:53 | 000,000,324 | —- | C] () – C:\Windows\maketorrent.ini
[2011/11/12 14:18:45 | 000,246,272 | —- | C] () – C:\Windows\UnRAR.exe
[2011/10/09 13:25:10 | 000,000,173 | —- | C] () – C:\Windows\jpegcrop.INI
[2011/09/28 13:07:50 | 000,000,132 | —- | C] () – C:\Users\Frank\AppData\Roaming\Adobe PNG Format CS5 Prefs
[2011/09/15 08:51:21 | 000,001,456 | —- | C] () – C:\Users\Frank\AppData\Local\Adobe Save for Web 12.0 Prefs
[2011/09/08 16:00:52 | 000,150,528 | —- | C] () – C:\Windows\SysWow64\mkx.dll
[2011/09/08 16:00:48 | 000,142,336 | —- | C] () – C:\Windows\SysWow64\mp4.dll
[2011/09/08 16:00:42 | 000,123,392 | —- | C] () – C:\Windows\SysWow64\ogm.dll
[2011/09/08 16:00:38 | 000,249,856 | —- | C] () – C:\Windows\SysWow64\dxr.dll
[2011/09/08 16:00:34 | 000,113,152 | —- | C] () – C:\Windows\SysWow64\dsmux.exe
[2011/09/08 16:00:24 | 000,154,624 | —- | C] () – C:\Windows\SysWow64\ts.dll
[2011/09/08 16:00:10 | 000,137,728 | —- | C] () – C:\Windows\SysWow64\mkv2vfr.exe
[2011/09/08 16:00:06 | 000,358,400 | —- | C] () – C:\Windows\SysWow64\gdsmux.exe
[2011/09/08 15:59:54 | 000,080,384 | —- | C] () – C:\Windows\SysWow64\mkzlib.dll
[2011/09/08 15:59:52 | 000,024,576 | —- | C] () – C:\Windows\SysWow64\mkunicode.dll
[2011/08/22 11:41:02 | 003,550,298 | —- | C] () – C:\Users\Frank\.TransferManager.db
[2011/08/18 11:25:08 | 000,000,600 | —- | C] () – C:\Users\Frank\AppData\Roaming\winscp.rnd
[2011/08/06 15:53:38 | 000,000,032 | R— | C] () – C:\ProgramData\hash.dat
[2011/03/25 20:02:41 | 000,005,259 | —- | C] () – C:\Users\Frank\AppData\Roaming\servetome-fonts.conf
[2011/01/23 11:44:02 | 000,000,378 | —- | C] () – C:\Users\Frank\SyncDocs.conf
[2011/01/14 11:05:48 | 000,000,440 | RHS- | C] () – C:\ProgramData\ntuser.pol
[2010/12/08 12:05:05 | 000,000,058 | —- | C] () – C:\Users\Frank\AppData\Local\DonationCoder_ScreenshotCaptor_InstallInfo.dat
[2010/07/19 17:37:41 | 000,000,000 | —- | C] () – C:\Users\Frank\AppData\Local\Cqeyoho.bin
[2010/07/19 17:37:40 | 000,000,120 | —- | C] () – C:\Users\Frank\AppData\Local\Kyanu.dat
[2010/05/10 18:30:32 | 008,414,720 | —- | C] () – C:\Program Files (x86)\HTML Guardian 7.msi
[2010/04/24 21:29:20 | 000,000,908 | —- | C] () – C:\Users\Frank\AppData\Roaming\BatchTouch_Prefs.plist
[2010/04/22 17:58:33 | 000,000,027 | -H– | C] () – C:\ProgramData\.6b14a35055fac291a0de744e5b9ee9ec.dat
[2010/04/20 18:09:26 | 000,001,542 | —- | C] () – C:\Users\Frank\.bash_history
[2010/04/07 01:09:33 | 000,000,600 | —- | C] () – C:\Users\Frank\AppData\Local\PUTTY.RND
[2010/03/21 08:21:30 | 000,007,619 | —- | C] () – C:\Users\Frank\AppData\Local\Resmon.ResmonCfg
[2010/03/13 21:26:38 | 000,000,661 | —- | C] () – C:\Users\Frank\AppData\Roaming\cvf.ini
[2010/02/16 21:13:26 | 000,000,609 | —- | C] () – C:\Users\Frank\AppData\Roaming\AutoGK.ini
[2010/02/11 14:52:37 | 000,148,992 | —- | C] () – C:\Users\Frank\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/02/07 16:39:24 | 000,000,093 | —- | C] () – C:\Users\Frank\AppData\Local\fusioncache.dat
========== ZeroAccess Check ==========
[2009/07/14 06:55:00 | 000,000,227 | RHS- | M] () – C:\Windows\assembly\Desktop.ini
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll – [2012/06/09 07:30:56 | 014,165,504 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll – [2012/06/09 06:46:56 | 012,868,608 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll – [2009/07/14 03:40:51 | 000,909,312 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Free
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll – [2009/07/14 03:15:20 | 000,605,696 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Free
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll – [2009/07/14 03:41:56 | 000,505,856 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Both
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
========== LOP Check ==========
[2013/07/07 19:14:35 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\.minecraft
[2010/07/19 17:35:02 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\84410A21428932BD424EE9068396CECD
[2013/08/24 21:33:40 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\abgx360
[2010/12/17 13:50:18 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Acronis
[2010/08/22 21:17:56 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\adma
[2013/02/25 23:19:36 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\AimOne
[2012/03/10 14:03:14 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\AirDisplay
[2013/05/13 09:58:29 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Alchemy Mindworks
[2011/01/29 20:50:29 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Amazon
[2013/07/27 21:38:26 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\ApexDC++
[2012/10/02 15:08:26 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\ASCOMP Software
[2011/12/12 18:23:01 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Audacity
[2013/05/09 15:46:50 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Aura Video Editor
[2013/08/10 09:57:20 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\avidemux
[2013/05/12 18:13:13 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Awesomium
[2012/02/10 14:01:07 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\B0500
[2013/01/02 13:00:22 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Bao_Nguyen
[2010/04/21 08:54:19 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\BBCiPlayerDesktop.61DB7A798358575D6A969CCD73DDBBD723A6DA9D.1
[2011/07/29 16:14:32 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Big Fish Games
[2012/12/09 14:35:05 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\BioniX Wallpaper Animator
[2013/06/02 21:51:17 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Bioshock
[2010/03/14 12:10:50 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Bioshock2
[2012/10/11 09:10:59 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\bitolithic
[2013/09/02 14:30:46 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\BitTorrent Sync
[2013/05/09 16:28:46 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Blender Foundation
[2010/12/23 17:02:15 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Braid
[2010/05/04 15:00:21 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Bump Technologies, Inc
[2013/04/04 16:05:35 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\calibre
[2010/01/08 00:31:52 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Canneverbe Limited
[2010/07/23 10:22:46 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2010/12/08 14:07:30 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\code4ward
[2011/11/07 09:25:46 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant
[2012/02/23 12:47:12 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\com.adobe.ExMan
[2011/09/07 15:56:06 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2012/07/26 18:26:04 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\com.adobe.WidgetBrowser.E7BED6E5DDA59983786DD72EBFA46B1598278E07.1
[2010/08/03 15:24:22 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\com.destroytoday.destroytwitter
[2013/05/17 13:55:48 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\com.dwuser.erwizard.EasyRotatorWizard
[2010/07/14 09:17:28 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\com.nationalgeographic.products.cng120.68B1CC4249876152EBE333BD4B7514ADB4D9
4062.1
[2012/07/19 21:49:55 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\com.prakaz.project.photogettr
[2013/04/06 12:02:30 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\com.shirogames.evoland
[2013/04/16 23:23:33 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Comic Vine Scraper
[2011/10/19 23:27:02 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Comical
[2012/05/15 22:19:38 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\CrystalIdea Software
[2013/04/19 16:58:28 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Depressurizer
[2013/05/13 09:26:25 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Devart
[2010/04/29 19:09:37 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Dexpot
[2012/09/06 22:49:08 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Digiarty
[2010/06/28 13:19:56 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Direct Folders
[2013/02/13 23:46:21 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\DiskAid
[2013/08/23 18:05:13 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\DisplayFusion
[2013/01/24 22:39:55 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Dojotech Software
[2010/08/07 18:01:33 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\DonationCoder
[2010/08/04 09:14:56 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Downloaded Installations
[2011/09/30 10:02:38 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\dream-video-converter
[2013/09/02 13:41:31 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Dropbox
[2011/01/06 15:18:14 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\DVDVideoSoftIEHelpers
[2010/09/04 12:58:00 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\e
[2011/03/15 08:43:31 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\EAC
[2013/05/13 09:51:57 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Eltima Software
[2012/04/27 23:16:17 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Felix Breuer
[2013/06/21 12:49:18 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\FEZ
[2012/12/22 09:31:47 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\FileBot
[2010/06/25 23:46:58 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\FinalBurner Video DVD
[2012/10/23 10:49:18 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\FireShot
[2010/04/28 12:59:49 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Flickr
[2010/02/04 20:24:44 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\fltk.org
[2010/01/04 22:08:08 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Foxit
[2011/09/14 22:22:51 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Foxit Software
[2013/09/02 09:01:35 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Free Download Manager
[2011/09/14 23:32:06 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\FreeAudioPack
[2010/12/20 15:22:19 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\FreeCap
[2013/03/12 11:02:42 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\FreemakeVideoDownloader
[2011/05/22 22:27:02 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\FtpDropper
[2011/06/22 11:15:31 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\GeoVid
[2012/03/10 11:11:37 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\GHISLER
[2012/05/23 23:36:51 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\GitHub
[2010/03/18 23:10:09 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\GlarySoft
[2010/07/25 14:01:14 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Gmail Backup
[2010/12/16 21:21:10 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\GoodSync
[2010/04/02 12:57:22 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\GR Games
[2012/07/02 16:58:04 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\GrabPro
[2013/01/03 12:15:29 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\gtk-2.0
[2010/11/02 20:18:38 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\HamsterSoft
[2011/05/12 21:53:54 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\HandBrake
[2010/05/13 10:07:06 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\HeidiSQL
[2013/05/13 09:57:58 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\HLSW
[2012/07/14 12:41:09 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Hothead Games
[2013/07/21 19:39:58 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\I2P
[2011/01/12 11:13:41 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\iBBDemo2
[2013/06/21 13:35:00 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\iFunbox_UserCache
[2012/12/07 17:24:02 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Image-Line
[2012/03/10 11:37:31 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Imagine
[2010/01/02 21:30:09 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\ImgBurn
[2013/04/02 19:51:50 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\inkscape
[2011/04/27 15:12:27 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\InPresoScreens.5A126D768DA8C0A50FAEB4373B6894850319358F.1
[2010/05/12 23:58:08 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\IObit
[2010/02/21 19:58:28 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\iPodder
[2010/04/26 16:44:50 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\IrfanView
[2012/04/06 15:39:15 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Jaksta Streaming Media Recorder
[2012/12/23 19:37:02 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Jeskola
[2011/05/20 17:54:59 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\JLC's Software
[2013/03/26 23:12:06 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\johnsadventures.com
[2011/02/12 19:57:18 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\JonDo
[2011/05/19 21:51:21 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Jumping Bytes
[2012/05/04 12:00:02 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Juniper Networks
[2010/11/16 16:38:53 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Kingsoft
[2013/04/30 08:58:59 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\KReader
[2010/01/03 13:30:35 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Leadertech
[2011/02/09 12:14:29 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\LibreOffice
[2012/01/14 12:47:08 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\LoadScout
[2013/09/02 13:05:08 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\LockHunter
[2011/09/25 21:05:08 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\LolClient
[2012/10/14 22:08:08 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\LoneSurvivor
[2012/10/16 16:01:17 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\LOVE
[2012/03/10 14:03:14 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\MediaMan
[2010/11/26 22:35:41 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\MediaRenamer
[2011/09/04 14:46:00 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\MinMaxGames
[2013/07/22 07:35:29 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Mipony
[2011/01/27 09:25:28 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\mkvtoolnix
[2011/08/17 21:58:42 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Mobile Action
[2011/10/06 17:46:13 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Mobile Atlas Creator
[2010/09/28 14:28:26 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Mobipocket
[2011/12/04 11:44:30 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Moonchild Productions
[2010/02/16 22:29:30 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Movie Label
[2012/12/08 18:10:22 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\MPEG Streamclip
[2011/01/20 21:47:19 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\mts
[2013/07/17 15:48:02 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\MySQL
[2010/06/15 21:27:18 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Namco
[2010/04/03 19:27:23 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\NCH Swift Sound
[2010/09/12 17:31:48 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Need for Speed World
[2010/10/06 12:15:19 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Nitro PDF
[2010/06/05 16:26:06 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Nokia
[2011/04/30 12:00:33 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Notepad++
[2012/04/21 15:46:03 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\npm
[2010/12/17 18:59:46 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\OnLive App
[2010/04/12 10:30:43 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\onOne Software
[2010/04/21 17:02:07 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\OpenOffice.org
[2010/09/27 22:28:53 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Opera
[2013/07/08 15:00:05 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Opera Software
[2013/07/20 09:36:00 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Oracle
[2013/08/23 20:23:44 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Orbit
[2012/12/04 08:48:21 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\PACE Anti-Piracy
[2010/02/09 21:57:10 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\PC Suite
[2012/08/02 10:00:23 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\PDAppFlex
[2011/03/13 13:58:28 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\pdftoepub
[2010/12/13 13:20:45 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Pengu Wars
[2012/12/18 21:20:44 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Petroglyph
[2012/07/14 18:24:18 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\PgcEdit
[2010/02/03 00:41:57 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Prism
[2012/07/02 16:51:47 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\ProgSense
[2011/12/16 16:56:06 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\ProjectsWithLove
[2010/04/29 19:18:55 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Propellerhead Software
[2010/11/07 16:47:37 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\PTGui
[2011/04/25 22:16:23 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Quest Software
[2012/12/07 16:38:32 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\REAPER
[2011/07/16 10:08:15 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Red Gate
[2013/06/27 23:02:05 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\redsn0w
[2013/06/19 16:16:47 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\RIFT
[2012/03/03 19:49:20 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\rockbox.org
[2013/07/12 11:32:49 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Rogue Legacy
[2011/01/07 19:58:14 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Rovio
[2012/05/02 22:13:50 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\runic games
[2013/06/19 14:41:04 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Samsung
[2010/03/20 23:19:08 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\SecondLife
[2013/06/16 14:57:07 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\SharePod
[2012/08/30 11:00:45 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Simfy
[2010/01/07 20:19:51 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Snippage.B28FB424FD6880E47B18D7D649F6CC93BDE9B29B.1
[2011/04/25 22:15:19 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Software
[2013/09/01 15:43:22 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Spotify
[2011/07/07 00:16:23 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\SQLite Administrator
[2013/08/30 09:10:15 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\SQLyog
[2012/10/14 12:45:27 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Stardock
[2013/05/30 15:06:27 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\streamripper
[2010/09/29 11:58:03 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\SuperMP3Download
[2013/08/30 18:43:58 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\TeamViewer
[2010/12/27 18:53:01 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Thinstall
[2011/01/02 14:10:37 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\ThumbGen
[2010/07/25 19:36:59 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Thunderbird
[2012/12/06 16:04:07 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Topten Software
[2012/07/10 11:45:52 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\TrueCrypt
[2013/01/05 21:44:16 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\ts3overlay
[2013/07/20 18:00:53 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Tunngle
[2010/02/07 16:40:00 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Turbine
[2010/11/11 22:52:29 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\TVRename
[2010/03/13 12:54:59 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Ubisoft
[2011/01/27 14:57:27 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Unity
[2013/08/30 21:06:05 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\uTorrent
[2013/04/02 19:51:50 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Vso
[2010/04/26 20:23:07 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Vultures
[2010/06/15 21:39:02 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\wb05D1SE
[2010/06/08 16:25:05 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\WebApps
[2011/02/20 19:35:29 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Wi-Fi Sync
[2010/10/06 20:50:21 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Win7codecs
[2011/01/08 23:59:41 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\WinNc
[2013/04/03 18:52:18 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Wise Registry Cleaner
[2012/02/19 11:38:59 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Wizards of the Coast
[2013/08/28 19:43:27 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Wondershare
[2013/03/21 23:54:20 | 000,000,000 | -HSD | M] – C:\Users\Frank\AppData\Roaming\wyUpdate AU
[2013/08/03 12:06:22 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\XBMC
[2010/06/05 12:17:38 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Xilisoft
[2012/03/10 10:52:58 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\XnView
[2013/05/28 20:36:34 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\xVideoServiceThief
[2013/03/10 22:36:16 | 000,000,000 | —D | M] – C:\Users\Frank\AppData\Roaming\Youtube Downloader HD
========== Purity Check ==========
========== Custom Scans ==========
< %USERPROFILE%\..|smtmp;true;true;true /FP >
< %temp%\smtmp\*.* /s > >
< MD5 for: EXPLORER.ADML >
[2009/07/14 04:30:02 | 000,003,695 | —- | M] () MD5=7A4C7F3CB156543113596988479CAFCE – C:\Windows\PolicyDefinitions\en-US\Explorer.adml
[2009/07/14 04:30:02 | 000,003,695 | —- | M] () MD5=7A4C7F3CB156543113596988479CAFCE – C:\Windows\winsxs\amd64_microsoft-windows-s..ouppolicy.resources_31bf3856ad364e35_6.1.7600.16385_en-us_7ef5713984067904\Explorer.adml
< MD5 for: EXPLORER.ADMX >
[2009/06/10 22:53:55 | 000,003,836 | —- | M] () MD5=AD131A834808E6AFF4A3918DE05BFCF6 – C:\Windows\PolicyDefinitions\Explorer.admx
[2009/06/10 22:53:55 | 000,003,836 | —- | M] () MD5=AD131A834808E6AFF4A3918DE05BFCF6 – C:\Windows\winsxs\amd64_microsoft-windows-shell-grouppolicy_31bf3856ad364e35_6.1.7600.16385_none_71af9b5b0a86e6b7\Explorer.admx
< MD5 for: EXPLORER.ASP >
[2011/09/06 11:14:25 | 000,000,253 | —- | M] () MD5=36ACC03EBAE1062BF4F33480D0FCDC7C – C:\Dev\fmiabak\t\explorer.asp
[2004/06/11 11:52:26 | 000,000,253 | —- | M] () MD5=36ACC03EBAE1062BF4F33480D0FCDC7C – C:\Dev\Sites\socrates\t\explorer.asp
< MD5 for: EXPLORER.CFG >
[2013/01/24 23:36:14 | 000,004,013 | —- | M] () MD5=5259ADB5796EB290A5D862504334F497 – C:\Program Files (x86)\Tiggit\data\games\tiggit.net\gamedata\tiggit.net\wesnoth\data\core\units\dwarves\Explorer.cfg
< MD5 for: EXPLORER.CLASS >
[2004/08/24 12:33:52 | 000,004,414 | —- | M] () MD5=CE27540DCC9678A27741A11782136529 – C:\Personal\Nat32\NAT32\htm\explorer.class
< MD5 for: EXPLORER.DESIGNER.VB >
[2009/12/21 11:28:26 | 000,036,545 | —- | M] () MD5=0BFA552D19A4A7F9130A71DFBBCB1407 – C:\ProgramData\Microsoft\VSTAHost\SSIS_ScriptComponent\9.0\ItemTemplatesCache\VisualBasic\Windows Forms\1033\Explorer.zip\explorer.designer.vb
[2009/12/21 11:28:26 | 000,036,545 | —- | M] () MD5=0BFA552D19A4A7F9130A71DFBBCB1407 – C:\ProgramData\Microsoft\VSTAHost\SSIS_ScriptTask\9.0\ItemTemplatesCache\VisualBasic\Windows Forms\1033\Explorer.zip\explorer.designer.vb
[2009/12/21 11:28:26 | 000,036,545 | —- | M] () MD5=0BFA552D19A4A7F9130A71DFBBCB1407 – C:\Users\All Users\Microsoft\VSTAHost\SSIS_ScriptComponent\9.0\ItemTemplatesCache\VisualBasic\Windows Forms\1033\Explorer.zip\explorer.designer.vb
[2009/12/21 11:28:26 | 000,036,545 | —- | M] () MD5=0BFA552D19A4A7F9130A71DFBBCB1407 – C:\Users\All Users\Microsoft\VSTAHost\SSIS_ScriptTask\9.0\ItemTemplatesCache\VisualBasic\Windows Forms\1033\Explorer.zip\explorer.designer.vb
[2009/12/21 11:28:26 | 000,036,545 | —- | M] () MD5=0BFA552D19A4A7F9130A71DFBBCB1407 – C:\Windows.old\ProgramData\Application Data\Microsoft\VSTAHost\SSIS_ScriptComponent\9.0\ItemTemplatesCache\VisualBasic\Windows Forms\1033\Explorer.zip\explorer.designer.vb
[2009/12/21 11:28:26 | 000,036,545 | —- | M] () MD5=0BFA552D19A4A7F9130A71DFBBCB1407 – C:\Windows.old\ProgramData\Application Data\Microsoft\VSTAHost\SSIS_ScriptTask\9.0\ItemTemplatesCache\VisualBasic\Windows Forms\1033\Explorer.zip\explorer.designer.vb
< MD5 for: EXPLORER.DLL >
[2013/01/24 18:19:48 | 000,040,448 | —- | M] () MD5=B904570613ED7A4C95979403C8D92E02 – C:\LiberKey\Apps\AkelPad\App\AkelPad\AkelFiles\Plugs\Explorer.dll
< MD5 for: EXPLORER.EXE >
[2009/07/14 03:14:20 | 002,613,248 | —- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_b7fe430bc7ce3761\explorer.exe
[2009/10/31 07:45:39 | 002,614,272 | —- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 – C:\Windows\SysWOW64\explorer.exe
[2009/10/31 07:45:39 | 002,614,272 | —- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_b819b343c7ba6202\explorer.exe
[2009/08/03 08:19:07 | 002,868,224 | —- | M] (Microsoft Corporation) MD5=700073016DAC1C3D2E7E2CE4223334B6 – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_ae84b558ac4eb41c\explorer.exe
[2009/10/31 08:34:59 | 002,870,272 | —- | M] (Microsoft Corporation) MD5=9AAAEC8DAC27AA17B053E6352AD233AE – C:\Windows\explorer.exe
[2009/10/31 08:34:59 | 002,870,272 | —- | M] (Microsoft Corporation) MD5=9AAAEC8DAC27AA17B053E6352AD233AE – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_adc508f19359a007\explorer.exe
[2009/08/03 07:49:47 | 002,613,248 | —- | M] (Microsoft Corporation) MD5=9FF6C4C91A3711C0A3B18F87B08B518D – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_b8d95faae0af7617\explorer.exe
[2009/10/31 08:38:38 | 002,870,272 | —- | M] (Microsoft Corporation) MD5=B8EC4BD49CE8F6FC457721BFC210B67F – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_ae46d6aeac7ca7c7\explorer.exe
[2009/08/03 07:35:50 | 002,613,248 | —- | M] (Microsoft Corporation) MD5=B95EEB0F4E5EFBF1038A35B3351CF047 – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_b853c407c78e3ba9\explorer.exe
[2009/07/14 03:39:10 | 002,868,224 | —- | M] (Microsoft Corporation) MD5=C235A51CB740E45FFA0EBFB9BAFCDA64 – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_ada998b9936d7566\explorer.exe
[2009/10/31 08:00:51 | 002,614,272 | —- | M] (Microsoft Corporation) MD5=C76153C7ECA00FA852BB0C193378F917 – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_b89b8100e0dd69c2\explorer.exe
[2009/08/03 08:17:37 | 002,868,224 | —- | M] (Microsoft Corporation) MD5=F170B4A061C9E026437B193B4D571799 – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_adff19b5932d79ae\explorer.exe
< MD5 for: EXPLORER.EXE.MUI >
[2009/07/14 04:26:48 | 000,022,016 | —- | M] (Microsoft Corporation) MD5=4B87EEFDC8E253F846A7DFB49A8E6C70 – C:\Windows\en-US\explorer.exe.mui
[2009/07/14 04:26:48 | 000,022,016 | —- | M] (Microsoft Corporation) MD5=4B87EEFDC8E253F846A7DFB49A8E6C70 – C:\Windows\winsxs\amd64_microsoft-windows-explorer.resources_31bf3856ad364e35_6.1.7600.16385_en-us_61e778c48d52d19b\explorer.exe.mui
[2009/07/14 04:06:56 | 000,022,016 | —- | M] (Microsoft Corporation) MD5=B9F4B1CA23D60775736059D72BA48526 – C:\Windows\SysWOW64\en-US\explorer.exe.mui
[2009/07/14 04:06:56 | 000,022,016 | —- | M] (Microsoft Corporation) MD5=B9F4B1CA23D60775736059D72BA48526 – C:\Windows\winsxs\wow64_microsoft-windows-explorer.resources_31bf3856ad364e35_6.1.7600.16385_en-us_6c3c2316c1b39396\explorer.exe.mui
< MD5 for: EXPLORER.EXE-03C49D11.PF >
[2013/04/03 14:01:30 | 000,272,804 | —- | M] () MD5=39F9EECD6DB2DABDAF94C54038A45DF0 – C:\Windows\Prefetch\EXPLORER.EXE-03C49D11.pf
< MD5 for: EXPLORER.HTM >
[2009/12/30 16:23:04 | 000,022,802 | —- | M] () MD5=7556ED68539534D0635BB46F4FC09506 – C:\Sandbox\Frank\DefaultBox\drive\C\Program Files\Xi\NetXfer\Manual\eng\explorer.htm
[2009/12/30 16:23:04 | 000,022,802 | —- | M] () MD5=7556ED68539534D0635BB46F4FC09506 – C:\Sandbox\Frank\DefaultBox\drive\C\Program Files\Xi\NetXfer\x86\Manual\eng\explorer.htm
[2007/08/02 16:25:58 | 000,023,115 | —- | M] () MD5=AAA467133DAA3525EF8FDD0EE40FFD55 – C:\Sandbox\Frank\DefaultBox\drive\C\Program Files\Xi\NetXfer\Manual\chs\explorer.htm
[2007/08/02 16:25:58 | 000,023,115 | —- | M] () MD5=AAA467133DAA3525EF8FDD0EE40FFD55 – C:\Sandbox\Frank\DefaultBox\drive\C\Program Files\Xi\NetXfer\x86\Manual\chs\explorer.htm
[2009/12/31 06:56:30 | 000,023,897 | —- | M] () MD5=AE010B09E8CD6A1F4BF3203B520F3029 – C:\Sandbox\Frank\DefaultBox\drive\C\Program Files\Xi\NetXfer\Manual\Fra\explorer.htm
[2009/12/31 06:56:30 | 000,023,897 | —- | M] () MD5=AE010B09E8CD6A1F4BF3203B520F3029 – C:\Sandbox\Frank\DefaultBox\drive\C\Program Files\Xi\NetXfer\x86\Manual\Fra\explorer.htm
< MD5 for: EXPLORER.PNG >
[2009/04/03 12:52:58 | 000,003,434 | —- | M] () MD5=04537B64F3BDC2C6D45CA1F8BCF98C95 – C:\LiberKey\Apps\BonkEnc\App\BonkEnc\manual\cs\images\explorer.png
[2009/04/03 11:52:58 | 000,003,434 | —- | M] () MD5=04537B64F3BDC2C6D45CA1F8BCF98C95 – C:\LiberKey\Apps\Freac\App\Freac\manual\cs\images\explorer.png
[2007/03/24 15:09:12 | 000,007,631 | —- | M] () MD5=207AC0DA3D2CB23E7A27D88DCBAFF51E – C:\LiberKey\Apps\BonkEnc\App\BonkEnc\manual\de\images\explorer.png
[2007/03/24 14:09:12 | 000,007,631 | —- | M] () MD5=207AC0DA3D2CB23E7A27D88DCBAFF51E – C:\LiberKey\Apps\Freac\App\Freac\manual\de\images\explorer.png
[2011/10/26 18:41:20 | 000,006,497 | —- | M] () MD5=394575BF992F7D9FD85EAC7726519ACA – C:\LiberKey\Apps\TeraCopy\App\TeraCopy\Images\Explorer.png
[2013/01/24 23:35:51 | 000,039,223 | —- | M] () MD5=62CE98B96679E00092114B7DBEE66C22 – C:\Program Files (x86)\Tiggit\data\games\tiggit.net\gamedata\tiggit.net\wesnoth\data\core\images\portraits\dwarves\explorer.png
[2007/02/17 12:33:50 | 000,007,699 | —- | M] () MD5=87D9765DCD1C5D451242D731BD9BE7D4 – C:\LiberKey\Apps\BonkEnc\App\BonkEnc\manual\en\images\explorer.png
[2007/02/17 12:33:50 | 000,007,699 | —- | M] () MD5=87D9765DCD1C5D451242D731BD9BE7D4 – C:\LiberKey\Apps\BonkEnc\App\BonkEnc\manual\pt\images\explorer.png
[2008/01/31 02:58:40 | 000,007,699 | —- | M] () MD5=87D9765DCD1C5D451242D731BD9BE7D4 – C:\LiberKey\Apps\BonkEnc\App\BonkEnc\manual\ru\images\explorer.png
[2007/02/17 11:33:50 | 000,007,699 | —- | M] () MD5=87D9765DCD1C5D451242D731BD9BE7D4 – C:\LiberKey\Apps\Freac\App\Freac\manual\en\images\explorer.png
[2007/02/17 11:33:50 | 000,007,699 | —- | M] () MD5=87D9765DCD1C5D451242D731BD9BE7D4 – C:\LiberKey\Apps\Freac\App\Freac\manual\es\images\explorer.png
[2007/02/17 11:33:50 | 000,007,699 | —- | M] () MD5=87D9765DCD1C5D451242D731BD9BE7D4 – C:\LiberKey\Apps\Freac\App\Freac\manual\pt\images\explorer.png
[2008/01/31 01:58:40 | 000,007,699 | —- | M] () MD5=87D9765DCD1C5D451242D731BD9BE7D4 – C:\LiberKey\Apps\Freac\App\Freac\manual\ru\images\explorer.png
[2013/01/24 23:35:51 | 000,130,384 | —- | M] () MD5=C5C775E53957BBADE708A975AFB22E41 – C:\Program Files (x86)\Tiggit\data\games\tiggit.net\gamedata\tiggit.net\wesnoth\data\core\images\portraits\dwarves\transparent\explorer.png
[2013/01/24 23:36:00 | 000,001,433 | —- | M] () MD5=D811070A2C7AF1080A0DFF012E81A29C – C:\Program Files (x86)\Tiggit\data\games\tiggit.net\gamedata\tiggit.net\wesnoth\data\core\images\units\dwarves\explorer.png
[2008/02/23 15:57:12 | 000,008,100 | —- | M] () MD5=E3A2955382A41A30CA86C8A1EFD38808 – C:\LiberKey\Apps\BonkEnc\App\BonkEnc\manual\el\images\el\explorer.png
[2008/02/23 14:57:12 | 000,008,100 | —- | M] () MD5=E3A2955382A41A30CA86C8A1EFD38808 – C:\LiberKey\Apps\Freac\App\Freac\manual\el\images\el\explorer.png
< MD5 for: EXPLORER.RESX >
[2009/12/21 11:28:26 | 000,040,049 | —- | M] () MD5=B16D2C77324DE7222CB0EA55C7B32784 – C:\ProgramData\Microsoft\VSTAHost\SSIS_ScriptComponent\9.0\ItemTemplatesCache\VisualBasic\Windows Forms\1033\Explorer.zip\explorer.resx
[2009/12/21 11:28:26 | 000,040,049 | —- | M] () MD5=B16D2C77324DE7222CB0EA55C7B32784 – C:\ProgramData\Microsoft\VSTAHost\SSIS_ScriptTask\9.0\ItemTemplatesCache\VisualBasic\Windows Forms\1033\Explorer.zip\explorer.resx
[2009/12/21 11:28:26 | 000,040,049 | —- | M] () MD5=B16D2C77324DE7222CB0EA55C7B32784 – C:\Users\All Users\Microsoft\VSTAHost\SSIS_ScriptComponent\9.0\ItemTemplatesCache\VisualBasic\Windows Forms\1033\Explorer.zip\explorer.resx
[2009/12/21 11:28:26 | 000,040,049 | —- | M] () MD5=B16D2C77324DE7222CB0EA55C7B32784 – C:\Users\All Users\Microsoft\VSTAHost\SSIS_ScriptTask\9.0\ItemTemplatesCache\VisualBasic\Windows Forms\1033\Explorer.zip\explorer.resx
[2009/12/21 11:28:26 | 000,040,049 | —- | M] () MD5=B16D2C77324DE7222CB0EA55C7B32784 – C:\Windows.old\ProgramData\Application Data\Microsoft\VSTAHost\SSIS_ScriptComponent\9.0\ItemTemplatesCache\VisualBasic\Windows Forms\1033\Explorer.zip\explorer.resx
[2009/12/21 11:28:26 | 000,040,049 | —- | M] () MD5=B16D2C77324DE7222CB0EA55C7B32784 – C:\Windows.old\ProgramData\Application Data\Microsoft\VSTAHost\SSIS_ScriptTask\9.0\ItemTemplatesCache\VisualBasic\Windows Forms\1033\Explorer.zip\explorer.resx
< MD5 for: EXPLORER.VB >
[2009/12/21 11:28:26 | 000,008,501 | —- | M] () MD5=55808E7AF87B5C18B97707BEF8EBDDEA – C:\ProgramData\Microsoft\VSTAHost\SSIS_ScriptComponent\9.0\ItemTemplatesCache\VisualBasic\Windows Forms\1033\Explorer.zip\explorer.vb
[2009/12/21 11:28:26 | 000,008,501 | —- | M] () MD5=55808E7AF87B5C18B97707BEF8EBDDEA – C:\ProgramData\Microsoft\VSTAHost\SSIS_ScriptTask\9.0\ItemTemplatesCache\VisualBasic\Windows Forms\1033\Explorer.zip\explorer.vb
[2009/12/21 11:28:26 | 000,008,501 | —- | M] () MD5=55808E7AF87B5C18B97707BEF8EBDDEA – C:\Users\All Users\Microsoft\VSTAHost\SSIS_ScriptComponent\9.0\ItemTemplatesCache\VisualBasic\Windows Forms\1033\Explorer.zip\explorer.vb
[2009/12/21 11:28:26 | 000,008,501 | —- | M] () MD5=55808E7AF87B5C18B97707BEF8EBDDEA – C:\Users\All Users\Microsoft\VSTAHost\SSIS_ScriptTask\9.0\ItemTemplatesCache\VisualBasic\Windows Forms\1033\Explorer.zip\explorer.vb
[2009/12/21 11:28:26 | 000,008,501 | —- | M] () MD5=55808E7AF87B5C18B97707BEF8EBDDEA – C:\Windows.old\ProgramData\Application Data\Microsoft\VSTAHost\SSIS_ScriptComponent\9.0\ItemTemplatesCache\VisualBasic\Windows Forms\1033\Explorer.zip\explorer.vb
[2009/12/21 11:28:26 | 000,008,501 | —- | M] () MD5=55808E7AF87B5C18B97707BEF8EBDDEA – C:\Windows.old\ProgramData\Application Data\Microsoft\VSTAHost\SSIS_ScriptTask\9.0\ItemTemplatesCache\VisualBasic\Windows Forms\1033\Explorer.zip\explorer.vb
< MD5 for: EXPLORER.VSTEMPLATE >
[2009/12/21 11:28:26 | 000,006,491 | —- | M] () MD5=FB731348042E3356E2215A6747CE893C – C:\ProgramData\Microsoft\VSTAHost\SSIS_ScriptComponent\9.0\ItemTemplatesCache\VisualBasic\Windows Forms\1033\Explorer.zip\explorer.vstemplate
[2009/12/21 11:28:26 | 000,006,491 | —- | M] () MD5=FB731348042E3356E2215A6747CE893C – C:\ProgramData\Microsoft\VSTAHost\SSIS_ScriptTask\9.0\ItemTemplatesCache\VisualBasic\Windows Forms\1033\Explorer.zip\explorer.vstemplate
[2009/12/21 11:28:26 | 000,006,491 | —- | M] () MD5=FB731348042E3356E2215A6747CE893C – C:\Users\All Users\Microsoft\VSTAHost\SSIS_ScriptComponent\9.0\ItemTemplatesCache\VisualBasic\Windows Forms\1033\Explorer.zip\explorer.vstemplate
[2009/12/21 11:28:26 | 000,006,491 | —- | M] () MD5=FB731348042E3356E2215A6747CE893C – C:\Users\All Users\Microsoft\VSTAHost\SSIS_ScriptTask\9.0\ItemTemplatesCache\VisualBasic\Windows Forms\1033\Explorer.zip\explorer.vstemplate
[2009/12/21 11:28:26 | 000,006,491 | —- | M] () MD5=FB731348042E3356E2215A6747CE893C – C:\Windows.old\ProgramData\Application Data\Microsoft\VSTAHost\SSIS_ScriptComponent\9.0\ItemTemplatesCache\VisualBasic\Windows Forms\1033\Explorer.zip\explorer.vstemplate
[2009/12/21 11:28:26 | 000,006,491 | —- | M] () MD5=FB731348042E3356E2215A6747CE893C – C:\Windows.old\ProgramData\Application Data\Microsoft\VSTAHost\SSIS_ScriptTask\9.0\ItemTemplatesCache\VisualBasic\Windows Forms\1033\Explorer.zip\explorer.vstemplate
< MD5 for: IEXPLORE.EXE >
[2003/09/17 03:29:24 | 000,091,136 | —- | M] (Microsoft Corporation) MD5=10D361953D6D2988DCD02DBB6D5F7122 – C:\Win32App\IE6Eolas\iexplore.exe
[2013/02/22 09:04:50 | 000,763,520 | —- | M] (Microsoft Corporation) MD5=25B53709A37C3FD814B68EA0A92D18F9 – C:\Program Files\Internet Explorer\iexplore.exe
[2013/02/22 09:04:50 | 000,763,520 | —- | M] (Microsoft Corporation) MD5=25B53709A37C3FD814B68EA0A92D18F9 – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16476_none_0d238c71808d94e7\iexplore.exe
[2009/07/14 03:17:29 | 000,673,048 | —- | M] (Microsoft Corporation) MD5=2C32E3E596CFE660353753EABEFB0540 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.16385_none_19ba3f8a72d988f3\iexplore.exe
[2013/02/22 06:10:00 | 000,757,376 | —- | M] (Microsoft Corporation) MD5=32732CEDE2A1106B736EF3D84054EE04 – C:\Program Files (x86)\Internet Explorer\iexplore.exe
[2013/02/22 06:10:00 | 000,757,376 | —- | M] (Microsoft Corporation) MD5=32732CEDE2A1106B736EF3D84054EE04 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16476_none_177836c3b4ee56e2\iexplore.exe
[2013/02/22 06:10:31 | 000,757,360 | —- | M] (Microsoft Corporation) MD5=4145E2B5663F6FACC08EFDB17B658BB2 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.20586_none_17f703a2ce14129d\iexplore.exe
[2013/02/02 10:09:12 | 000,763,424 | —- | M] (Microsoft Corporation) MD5=7C2923004FFC497E54F38E835F108EE8 – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.20580_none_0d9c579499b8b898\iexplore.exe
[2011/06/16 09:40:02 | 000,748,336 | —- | M] (Microsoft Corporation) MD5=904E13BA41AF2E353A32CF351CA53639 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16421_none_17a944edb4ca4c7a\iexplore.exe
[2013/02/02 06:19:03 | 000,757,280 | —- | M] (Microsoft Corporation) MD5=A285E1965C115031DA02B777EE9D7689 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.20580_none_17f101e6ce197a93\iexplore.exe
[2013/02/02 09:37:58 | 000,763,424 | —- | M] (Microsoft Corporation) MD5=A8EBEBCD9F5C49475194099FCD276992 – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16470_none_0d1d8ab58092fcdd\iexplore.exe
[2013/02/22 09:17:45 | 000,763,520 | —- | M] (Microsoft Corporation) MD5=B21A57AA4CB928059A0C0C58A9E77A02 – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.20586_none_0da2595099b350a2\iexplore.exe
[2013/04/04 14:50:32 | 000,218,184 | —- | M] () MD5=B4C6E3889BB310CA7E974A04EC6E46AC – C:\Program Files (x86)\Malwarebytes' Anti-Malware\Chameleon\iexplore.exe
[2013/02/02 06:19:04 | 000,757,296 | —- | M] (Microsoft Corporation) MD5=DDE5A0DFAF7C6370FB36402D7A746ED3 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16470_none_17723507b4f3bed8\iexplore.exe
[2011/06/16 09:40:00 | 000,754,480 | —- | M] (Microsoft Corporation) MD5=F1424C1B9B1813BF825E45DF3790BC8A – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16421_none_0d549a9b80698a7f\iexplore.exe
[2009/07/14 03:43:43 | 000,696,600 | —- | M] (Microsoft Corporation) MD5=F2B0D41E1D08D0B2006DF5AA2E74C81E – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.16385_none_0f6595383e78c6f8\iexplore.exe
< MD5 for: IEXPLORE.EXE.LOCAL >
[2003/08/27 16:34:02 | 000,000,000 | —- | M] () MD5=D41D8CD98F00B204E9800998ECF8427E – C:\Win32App\IE6Eolas\IEXPLORE.EXE.local
< MD5 for: IEXPLORE.EXE.MUI >
[2011/06/16 09:40:01 | 000,005,632 | —- | M] (Microsoft Corporation) MD5=17FAE936C452188D05852DE8D1082013 – C:\Program Files\Internet Explorer\en-US\iexplore.exe.mui
[2011/06/16 09:40:01 | 000,005,632 | —- | M] (Microsoft Corporation) MD5=17FAE936C452188D05852DE8D1082013 – C:\Windows\winsxs\amd64_microsoft-windows-i..-optional.resources_31bf3856ad364e35_9.4.8112.16421_en-us_07013012b816cb66\iexplore.exe.mui
[2011/06/16 09:40:02 | 000,005,632 | —- | M] (Microsoft Corporation) MD5=4C71CCB3C8817185E67210856778831F – C:\Program Files (x86)\Internet Explorer\en-US\iexplore.exe.mui
[2011/06/16 09:40:02 | 000,005,632 | —- | M] (Microsoft Corporation) MD5=4C71CCB3C8817185E67210856778831F – C:\Windows\winsxs\wow64_microsoft-windows-i..-optional.resources_31bf3856ad364e35_9.4.8112.16421_en-us_1155da64ec778d61\iexplore.exe.mui
[2009/07/14 04:29:20 | 000,005,120 | —- | M] (Microsoft Corporation) MD5=C29BCFB504E33FEADDFA2D0183CEF62F – C:\Windows\winsxs\amd64_microsoft-windows-i..-optional.resources_31bf3856ad364e35_8.0.7600.16385_en-us_09122aaf762607df\iexplore.exe.mui
[2009/07/14 04:05:06 | 000,005,120 | —- | M] (Microsoft Corporation) MD5=FBA4CD95930248053A2C3F43CA70B986 – C:\Windows\winsxs\wow64_microsoft-windows-i..-optional.resources_31bf3856ad364e35_8.0.7600.16385_en-us_1366d501aa86c9da\iexplore.exe.mui
< MD5 for: SERVICES >
[2009/06/10 23:00:26 | 000,017,463 | —- | M] () MD5=D9E1A01B480D961B7CF0509D597A92D6 – C:\Windows\winsxs\amd64_microsoft-windows-w..nfrastructure-other_31bf3856ad364e35_6.1.7600.16385_none_6079f415110c0210\services
< MD5 for: SERVICES.AIP >
[2012/03/29 20:35:50 | 000,375,952 | —- | M] (Adobe Systems Incorporated) MD5=5965DFD83E10938A579952EB58C10298 – C:\Program Files (x86)\Adobe_CS6\Adobe Illustrator CS6\Plug-ins\Extensions\Services.aip
[2012/03/29 20:35:50 | 000,297,104 | —- | M] (Adobe Systems Incorporated) MD5=8311BFD3FD21EB8089259C491406A7B0 – C:\Program Files\Adobe_CS6\Adobe Illustrator CS6 (64 Bit)\Plug-ins\Extensions\Services.aip
< MD5 for: SERVICES.ASP >
[2012/06/04 09:51:50 | 000,005,229 | —- | M] () MD5=0A6CB364F2F16D06A3049F6331DF1B77 – C:\Dev\Sites\AR\services.asp
[2012/06/04 09:51:50 | 000,005,229 | —- | M] () MD5=0A6CB364F2F16D06A3049F6331DF1B77 – C:\Users\Frank\AR\services.asp
[2013/01/18 11:23:36 | 000,016,194 | —- | M] () MD5=A0B4C685FC0044BB06810C1944F8054E – C:\Dev\Sites\assitport\all_asp_pack\inetpub\assitport.com\Admin\services.asp
[2012/04/23 16:38:38 | 000,005,189 | —- | M] () MD5=D42930728C52C183950549742BA9FBD8 – C:\Dev\Sites\Retirease_Framework\services.asp
[2013/02/05 14:25:50 | 000,016,236 | —- | M] () MD5=E5C96E4E9126D1FA1D305C1B26E81DD8 – C:\Dev\Sites\assitport\Admin\services.asp
< MD5 for: SERVICES.ASP.MNO >
[2012/02/13 11:57:30 | 000,004,035 | —- | M] () MD5=C1EB3148B7644CCEE7ADB17984126553 – C:\Dev\Sites\assitport\Admin\_notes\services.asp.mno
[2012/03/07 16:27:48 | 000,000,569 | —- | M] () MD5=C49E7034721E885775A0A4CA5D4B2205 – C:\Dev\Sites\AR\_notes\services.asp.mno
[2012/03/07 16:27:48 | 000,000,569 | —- | M] () MD5=C49E7034721E885775A0A4CA5D4B2205 – C:\Users\Frank\AR\_notes\services.asp.mno
< MD5 for: SERVICES.CFG >
[2012/09/23 20:43:36 | 000,603,848 | R— | M] () MD5=81B120EAEE296F0E54F66C16C5A21367 – C:\Windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744BA0000000010\11.0.0\services.cfg
[2012/12/18 21:08:30 | 000,559,043 | —- | M] () MD5=BA25E8F1460C7453B7488FE4B42F6919 – C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Services\Services.cfg
< MD5 for: SERVICES.EXE >
[2009/07/14 03:39:37 | 000,328,704 | —- | M] (Microsoft Corporation) MD5=24ACB7E5BE595468E3B9AA488B9B4FCB – C:\Windows\SysNative\services.exe
[2009/07/14 03:39:37 | 000,328,704 | —- | M] (Microsoft Corporation) MD5=24ACB7E5BE595468E3B9AA488B9B4FCB – C:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_2b54b20ee6fa07b1\services.exe
< MD5 for: SERVICES.EXE.MUI >
[2009/07/14 04:25:40 | 000,017,408 | —- | M] (Microsoft Corporation) MD5=6507BF0DC2D1F5F32493C288EAA59277 – C:\Windows\SysNative\en-US\services.exe.mui
[2009/07/14 04:25:40 | 000,017,408 | —- | M] (Microsoft Corporation) MD5=6507BF0DC2D1F5F32493C288EAA59277 – C:\Windows\winsxs\amd64_microsoft-windows-s..ontroller.resources_31bf3856ad364e35_6.1.7600.16385_en-us_c5f238be3fa63468\services.exe.mui
< MD5 for: SERVICES.GIF >
[2011/10/18 21:56:16 | 000,020,291 | —- | M] () MD5=2541E301A574AB34DE02E7241C28E3D1 – C:\Program Files (x86)\Persits Software\AspEmail\Documentation\images\services.gif
[2011/10/18 21:56:16 | 000,020,291 | —- | M] () MD5=2541E301A574AB34DE02E7241C28E3D1 – C:\Program Files\Persits Software\AspEmail\Documentation\images\services.gif
[1999/10/15 14:58:10 | 000,007,010 | —- | M] () MD5=352329213037A32FFC4CA1487B9A0ADC – C:\Program Files (x86)\Persits Software\AspEmail\EmailAgent\Documentation\services.gif
[2008/07/09 11:26:32 | 000,000,951 | —- | M] () MD5=6D735543F14B3EF62D439DDD13DC4D3D – C:\Program Files (x86)\Red Gate\SQL Compare 7\Reporting\images\Services.gif
< MD5 for: SERVICES.H >
[2013/05/21 17:18:40 | 000,001,124 | —- | M] () MD5=3E3742C81D3173F4469F85050E4C5AAD – C:\Program Files\MySQL\MySQL Server 5.6\include\mysql\services.h
[2013/05/21 17:18:38 | 000,001,124 | —- | M] () MD5=3E3742C81D3173F4469F85050E4C5AAD – C:\xampp\mysql\include\mysql\services.h
< MD5 for: SERVICES.HTML >
[2011/02/12 19:57:05 | 000,003,050 | —- | M] () MD5=4E636E1B08C06F800C35F3920A7CA90E – C:\Users\Frank\AppData\Roaming\JonDo\help\en\help\services.html
[2007/03/19 18:52:26 | 000,003,419 | —- | M] () MD5=9630A67FFAB586FD8F3CF7519C0FC101 – C:\Program Files (x86)\Quest Software\Toad for SQL Server Freeware 5.0\Plugins\SqlServer\ServiceBroker\HTML\Services.html
[2011/02/12 19:57:05 | 000,003,490 | —- | M] () MD5=A20A519787DDF91AD5038BC587F54464 – C:\Users\Frank\AppData\Roaming\JonDo\help\de\help\services.html
< MD5 for: SERVICES.JSM >
[2012/09/07 19:41:10 | 000,005,970 | —- | M] () MD5=0AA0A4C3AFBB008F7B349BCEF039D09D – C:\Program Files (x86)\WebSupergoo\ABCpdf .NET 9.0\ABCGecko\XULRunner\modules\Services.jsm
[2011/06/16 13:01:02 | 000,005,958 | —- | M] () MD5=301A788B79582D77CA6D61A91473280A – C:\LiberKey\Apps\RJTextEd\App\RJTextEd\xulrunner\modules\Services.jsm
< MD5 for: SERVICES.MOF >
[2009/06/10 22:44:06 | 000,002,866 | —- | M] () MD5=26A11C895A7F0B6D32105EBE127D8500 – C:\Windows\SysNative\wbem\services.mof
[2009/06/10 22:44:06 | 000,002,866 | —- | M] () MD5=26A11C895A7F0B6D32105EBE127D8500 – C:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_2b54b20ee6fa07b1\services.mof
< MD5 for: SERVICES.MSC >
[2009/07/14 04:23:30 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\Windows\SysNative\en-US\services.msc
[2009/06/10 22:38:36 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\Windows\SysNative\services.msc
[2009/07/14 04:08:50 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\Windows\SysWOW64\en-US\services.msc
[2009/06/10 23:21:09 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\Windows\SysWOW64\services.msc
[2009/07/14 04:23:30 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\Windows\winsxs\amd64_microsoft-windows-s..cessnapin.resources_31bf3856ad364e35_6.1.7600.16385_en-us_003408aa160fce5b\services.msc
[2009/06/10 22:38:36 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\Windows\winsxs\amd64_microsoft-windows-servicessnapin_31bf3856ad364e35_6.1.7600.16385_none_2b58d44b5f6beb8a\services.msc
[2009/07/14 04:08:50 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\Windows\winsxs\x86_microsoft-windows-s..cessnapin.resources_31bf3856ad364e35_6.1.7600.16385_en-us_a4156d265db25d25\services.msc
[2009/06/10 23:21:09 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\Windows\winsxs\x86_microsoft-windows-servicessnapin_31bf3856ad364e35_6.1.7600.16385_none_cf3a38c7a70e7a54\services.msc
< MD5 for: SERVICES.PHP >
[2013/04/07 12:19:17 | 000,005,441 | —- | M] () MD5=925304A8252B8AABBA263D29B0E8D2CB – C:\Dev\Sites\mambawp\wp-content\plugins\backupwordpress\classes\services.php
< MD5 for: SERVICES.PNG >
[2008/07/06 22:40:08 | 000,007,189 | —- | M] () MD5=D75F412AB58B9173F0EA00143B7266FE – C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\p017310x.BACKEDUP\extensions\{b8d51471-15f1-46cd-a600-448a6b103c2d}\chrome\content\icons\services.png
< MD5 for: SERVICES.PTXML >
[2009/07/13 22:16:17 | 000,001,061 | —- | M] () MD5=640D7DD61B1CFA6C96F80F68F78CDFA7 – C:\Windows\SysNative\wdi\perftrack\Services.ptxml
[2009/07/13 22:16:17 | 000,001,061 | —- | M] () MD5=640D7DD61B1CFA6C96F80F68F78CDFA7 – C:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_2b54b20ee6fa07b1\Services.ptxml
< MD5 for: SERVICES.RDB >
[2012/08/13 10:51:02 | 000,178,348 | —- | M] () MD5=039C8CFBD74EE07F38CD9E4C7D95C5C6 – C:\Program Files (x86)\OpenOffice.org 3\Basis\program\services.rdb
[2012/08/13 10:51:02 | 000,000,453 | —- | M] () MD5=3D2ADA15FEF5B5FF468243161543D610 – C:\Program Files (x86)\OpenOffice.org 3\program\services.rdb
[2011/01/17 17:59:50 | 000,237,568 | —- | M] () MD5=507957679AE4579C15D57FA741EA6FFA – C:\LiberKey\Apps\OpenOffice\App\openoffice\URE\misc\services.rdb
[2012/08/10 15:12:16 | 000,008,060 | —- | M] () MD5=7CA7D7150EC46321162F932ADCF5F35B – C:\Program Files (x86)\OpenOffice.org 3\URE\misc\services.rdb
[2013/01/16 23:57:32 | 000,179,429 | —- | M] () MD5=B6625AAEBFE8F0FC7118B5F390DBEEFE – C:\LiberKey\Apps\LibreOffice\App\LibreOffice\program\services\services.rdb
[2011/01/17 17:59:08 | 005,539,328 | —- | M] () MD5=F2B666905F7FDAA80C86A101A7DE62F9 – C:\LiberKey\Apps\OpenOffice\App\openoffice\Basis\program\services.rdb
[2013/01/16 17:19:46 | 000,008,060 | —- | M] () MD5=F36D78E85FEB2A282AA9F89DC0910CF0 – C:\LiberKey\Apps\LibreOffice\App\LibreOffice\URE\misc\services.rdb
< MD5 for: SERVICES.VIM >
[2010/10/27 17:44:14 | 000,000,459 | —- | M] () MD5=193ED9B27B25456FBE50E6111B8E6770 – C:\Program Files (x86)\Vim\vim73\ftplugin\services.vim
[2010/10/27 17:42:50 | 000,001,865 | —- | M] () MD5=A17575F0BA54E8FB1148DDFC2361D776 – C:\Program Files (x86)\Vim\vim73\syntax\services.vim
< MD5 for: SERVICES.XRDS.PHP >
[2010/05/26 21:04:52 | 000,002,891 | —- | M] () MD5=31D6836C5D124CBF2B26D8B50F9C48D5 – C:\Dev\Sites\assitport\oauth-php\example\server\www\services.xrds.php
< MD5 for: WINLOGON.ADML >
[2009/07/14 04:25:22 | 000,008,013 | —- | M] () MD5=CED0EAD8D152B3D0F114698DE2316C5E – C:\Windows\PolicyDefinitions\en-US\WinLogon.adml
[2009/07/14 04:25:22 | 000,008,013 | —- | M] () MD5=CED0EAD8D152B3D0F114698DE2316C5E – C:\Windows\winsxs\amd64_microsoft-windows-winlogon-adm.resources_31bf3856ad364e35_6.1.7600.16385_en-us_f0f9032ef6930070\WinLogon.adml
< MD5 for: WINLOGON.ADMX >
[2009/06/10 23:04:41 | 000,005,237 | —- | M] () MD5=89D8F50E186A16C2CED3CF36DBBC0B2C – C:\Windows\PolicyDefinitions\WinLogon.admx
[2009/06/10 23:04:41 | 000,005,237 | —- | M] () MD5=89D8F50E186A16C2CED3CF36DBBC0B2C – C:\Windows\winsxs\amd64_microsoft-windows-winlogon-adm_31bf3856ad364e35_6.1.7600.16385_none_d7024e6992f3424d\WinLogon.admx
< MD5 for: WINLOGON.EXE >
[2009/07/14 03:39:52 | 000,389,120 | —- | M] (Microsoft Corporation) MD5=132328DF455B0028F13BF0ABEE51A63A – C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_cbb7f2bdeea2829c\winlogon.exe
[2009/10/28 09:01:57 | 000,389,632 | —- | M] (Microsoft Corporation) MD5=A93D41A4D4B0D91C072D11DD8AF266DE – C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_cc522fd507b468f8\winlogon.exe
[2013/04/04 14:50:32 | 000,218,184 | —- | M] () MD5=B4C6E3889BB310CA7E974A04EC6E46AC – C:\Program Files (x86)\Malwarebytes' Anti-Malware\Chameleon\winlogon.exe
[2009/10/28 08:24:40 | 000,389,632 | —- | M] (Microsoft Corporation) MD5=DA3E2A6FA9660CC75B471530CE88453A – C:\Windows\SysNative\winlogon.exe
[2009/10/28 08:24:40 | 000,389,632 | —- | M] (Microsoft Corporation) MD5=DA3E2A6FA9660CC75B471530CE88453A – C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_cbe534e7ee8042ad\winlogon.exe
< MD5 for: WINLOGON.EXE.MUI >
[2009/07/14 04:29:52 | 000,022,528 | —- | M] (Microsoft Corporation) MD5=56D03B64B8C483C1D12A8E4577B3B332 – C:\Windows\SysNative\en-US\winlogon.exe.mui
[2009/07/14 04:29:52 | 000,022,528 | —- | M] (Microsoft Corporation) MD5=56D03B64B8C483C1D12A8E4577B3B332 – C:\Windows\winsxs\amd64_microsoft-windows-winlogon.resources_31bf3856ad364e35_6.1.7600.16385_en-us_26ed83321dc778e1\winlogon.exe.mui
< MD5 for: WINLOGON.MFL >
[2009/07/14 04:27:22 | 000,001,080 | —- | M] () MD5=2783ED50691284F7EAE6BE9729337E1A – C:\Windows\SysNative\wbem\en-US\winlogon.mfl
[2009/07/14 04:27:22 | 000,001,080 | —- | M] () MD5=2783ED50691284F7EAE6BE9729337E1A – C:\Windows\winsxs\amd64_microsoft-windows-winlogon-mof.resources_31bf3856ad364e35_6.1.7600.16385_en-us_84afd4fd38ffd276\winlogon.mfl
< MD5 for: WINLOGON.MOF >
[2009/07/13 22:30:01 | 000,003,192 | —- | M] () MD5=DF722B96F32A61783BC310FACF10240B – C:\Windows\SysNative\wbem\winlogon.mof
[2009/07/13 22:30:01 | 000,003,192 | —- | M] () MD5=DF722B96F32A61783BC310FACF10240B – C:\Windows\winsxs\amd64_microsoft-windows-winlogon-mof_31bf3856ad364e35_6.1.7600.16385_none_dc2dbb778f98e40f\winlogon.mof
< %SYSTEMDRIVE%\*.* >
[2010/02/03 09:12:37 | 000,001,024 | —- | M] () – C:\.rnd
[2009/07/01 02:24:40 | 000,000,374 | —- | M] () – C:\1.bin
[2009/03/21 23:25:16 | 000,002,731 | —- | M] () – C:\1.XRM-MS
[2009/06/10 23:42:20 | 000,000,024 | —- | M] () – C:\autoexec.bat
[2012/10/04 18:28:07 | 000,000,370 | —- | M] () – C:\backuplog.log
[2011/07/20 15:13:16 | 000,050,688 | —- | M] () – C:\Bailey Frank (Studio256).msg
[2007/02/28 15:48:24 | 000,087,552 | —- | M] (Microsoft Corporation) – C:\bootinst.exe
[2009/07/14 03:38:58 | 000,383,562 | RHS- | M] () – C:\bootmgr
[2006/11/14 04:00:00 | 000,087,552 | —- | M] (Microsoft Corporation) – C:\bootrest.exe
[2010/01/03 02:42:03 | 000,008,192 | RHS- | M] () – C:\BOOTSECT.BAK
[2013/01/12 23:14:15 | 000,000,467 | —- | M] () – C:\BRAAINNNS (J).lnk
[2009/06/10 23:42:20 | 000,000,010 | —- | M] () – C:\config.sys
[2010/04/26 17:00:37 | 000,002,558 | —- | M] () – C:\download.pfx
[2013/06/29 13:41:28 | 000,005,188 | —- | M] () – C:\DV.txt
[2013/07/26 11:02:23 | 000,000,091 | —- | M] () – C:\init.txt
[2009/09/10 21:10:01 | 000,000,000 | RHS- | M] () – C:\IO.SYS
[2009/07/29 17:55:51 | 000,000,810 | —- | M] () – C:\L7.cmd
[2006/12/01 23:37:14 | 000,904,704 | —- | M] (Microsoft Corporation) – C:\msdia80.dll
[2009/09/10 21:10:01 | 000,000,000 | RHS- | M] () – C:\MSDOS.SYS
[2011/05/21 12:49:31 | 000,000,206 | —- | M] () – C:\realtek.log
[2011/05/21 12:49:31 | 000,002,236 | —- | M] () – C:\RHDSetup.log
[2012/08/21 00:02:15 | 000,973,392 | —- | M] () – C:\Rx__A_Tale_of_Electronegativity_-_Robert_Brockway - Fixed line height.epub
[2008/04/21 22:07:03 | 000,168,736 | —- | M] () – C:\s1
[2007/03/08 13:53:30 | 000,012,298 | —- | M] () – C:\s2
[2011/07/01 11:06:58 | 000,002,048 | —- | M] () – C:\scores.db
[2010/07/21 20:46:08 | 000,000,000 | —- | M] () – C:\sd6k
[2013/04/02 16:44:46 | 000,187,372 | —- | M] () – C:\TDSSKiller.2.8.16.0_02.04.2013_16.44.02_log.txt
[2013/09/02 13:36:24 | 000,000,354 | —- | M] () – C:\TDSSKiller.2.8.18.0_02.09.2013_13.36.19_log.txt
[2013/09/02 13:37:49 | 000,010,912 | —- | M] () – C:\TDSSKiller.2.9.2.0_02.09.2013_13.37.14_log.txt
[2013/09/02 13:42:54 | 000,580,116 | —- | M] () – C:\TDSSKiller.2.9.2.0_02.09.2013_13.40.05_log.txt
[2011/07/10 23:03:15 | 000,000,216 | —- | M] () – C:\temp.txt
[2012/02/27 11:21:06 | 000,000,005 | —- | M] () – C:\testfrankebailey.txt
[2009/09/12 22:49:02 | 000,171,136 | RHS- | M] () – C:\w7ldr
[2013/06/16 16:11:02 | 000,001,238 | —- | M] () – C:\wakeuptoken.info
[2012/02/27 11:25:11 | 000,000,135 | —- | M] () – C:\wishList.dek
[2011/05/20 16:53:18 | 000,001,764 | —- | M] () – C:\XXCLONE.HYP
< %systemroot%\Fonts\*.com >
[2009/07/14 07:32:31 | 000,026,040 | —- | M] () – C:\Windows\Fonts\GlobalMonospace.CompositeFont
[2009/07/14 07:32:31 | 000,026,489 | —- | M] () – C:\Windows\Fonts\GlobalSansSerif.CompositeFont
[2009/07/14 07:32:31 | 000,029,779 | —- | M] () – C:\Windows\Fonts\GlobalSerif.CompositeFont
[2009/07/14 07:32:31 | 000,043,318 | —- | M] () – C:\Windows\Fonts\GlobalUserInterface.CompositeFont
< %systemroot%\Fonts\*.dll >
< %systemroot%\Fonts\*.ini >
[2009/06/10 22:49:50 | 000,000,065 | —- | M] () – C:\Windows\Fonts\desktop.ini
< %systemroot%\Fonts\*.ini2 >
< %systemroot%\Fonts\*.exe >
< %systemroot%\system32\spool\prtprocs\w32x86\*.* >
< %systemroot%\REPAIR\*.bak1 >
< %systemroot%\REPAIR\*.ini >
< %systemroot%\system32\*.jpg >
< %systemroot%\*.jpg >
< %systemroot%\*.png >
< %systemroot%\*.scr >
[2012/09/12 15:57:44 | 000,322,048 | —- | M] (Microsoft Corporation) – C:\Windows\WLXPGSS.SCR
[3 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
< %systemroot%\*._sy >
< %APPDATA%\Adobe\Update\*.* >
< %ALLUSERSPROFILE%\Favorites\*.* >
< %APPDATA%\Microsoft\*.* >
< %PROGRAMFILES%\*.* >
[2009/07/14 06:54:24 | 000,000,174 | -HS- | M] () – C:\Program Files (x86)\desktop.ini
[2010/05/10 18:30:32 | 008,414,720 | —- | M] () – C:\Program Files (x86)\HTML Guardian 7.msi
[2011/04/25 22:14:38 | 000,000,162 | —- | M] () – C:\Program Files (x86)\INSTALL.LOG
[1 C:\Program Files (x86)\*.tmp files -> C:\Program Files (x86)\*.tmp -> ]
< %APPDATA%\Update\*.* >
< %systemroot%\*. /mp /s >
< dir "%systemdrive%\*" /S /A:L /C >
Volume in drive C is XENTRALITY
Volume Serial Number is B050-0C48
Directory of C:\
2009/07/14 06:53 AM Documents and Settings [C:\Users]
0 File(s) 0 bytes
Directory of C:\ProgramData
2013/08/27 09:43 AM Adobe [J:\Software\IllustratorPortable\App\ProgramData\Adobe]
2013/08/25 10:11 PM Adobe.BackupByIllustratorPortable [J:\Software\IllustratorPortable\App\ProgramData\Adobe]
2010/01/02 04:52 PM Application Data [C:\ProgramData]
2010/01/02 04:52 PM Desktop [C:\Users\Public\Desktop]
2010/01/02 04:52 PM Documents [C:\Users\Public\Documents]
2010/01/02 04:52 PM Favorites [C:\Users\Public\Favorites]
2013/08/27 09:43 AM regid.1986-12.com.adobe [J:\Software\IllustratorPortable\App\ProgramData\regid.1986-12.com.adobe]
2013/08/25 10:11 PM regid.1986-12.com.adobe.BackupByIllustratorPortable [J:\Software\IllustratorPortable\App\ProgramData\regid.1986-12.com.adobe]
2010/01/02 04:52 PM Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
2010/01/02 04:52 PM Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Users
2010/01/02 04:52 PM All Users [C:\ProgramData]
2010/01/02 04:52 PM Default User [C:\Users\Default]
0 File(s) 0 bytes
Directory of C:\Users\All Users
2013/08/27 09:43 AM Adobe [J:\Software\IllustratorPortable\App\ProgramData\Adobe]
2013/08/25 10:11 PM Adobe.BackupByIllustratorPortable [J:\Software\IllustratorPortable\App\ProgramData\Adobe]
2010/01/02 04:52 PM Application Data [C:\ProgramData]
2010/01/02 04:52 PM Desktop [C:\Users\Public\Desktop]
2010/01/02 04:52 PM Documents [C:\Users\Public\Documents]
2010/01/02 04:52 PM Favorites [C:\Users\Public\Favorites]
2013/08/27 09:43 AM regid.1986-12.com.adobe [J:\Software\IllustratorPortable\App\ProgramData\regid.1986-12.com.adobe]
2013/08/25 10:11 PM regid.1986-12.com.adobe.BackupByIllustratorPortable [J:\Software\IllustratorPortable\App\ProgramData\regid.1986-12.com.adobe]
2010/01/02 04:52 PM Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
2010/01/02 04:52 PM Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Users\Classic .NET AppPool
2010/01/03 11:12 AM Application Data [C:\Users\Classic .NET AppPool\AppData\Roaming]
2010/01/03 11:12 AM Cookies [C:\Users\Classic .NET AppPool\AppData\Roaming\Microsoft\Windows\Cookies]
2010/01/03 11:12 AM Local Settings [C:\Users\Classic .NET AppPool\AppData\Local]
2010/01/03 11:12 AM My Documents [C:\Users\Classic .NET AppPool\Documents]
2010/01/03 11:12 AM NetHood [C:\Users\Classic .NET AppPool\AppData\Roaming\Microsoft\Windows\Network Shortcuts]
2010/01/03 11:12 AM PrintHood [C:\Users\Classic .NET AppPool\AppData\Roaming\Microsoft\Windows\Printer Shortcuts]
2010/01/03 11:12 AM Recent [C:\Users\Classic .NET AppPool\AppData\Roaming\Microsoft\Windows\Recent]
2010/01/03 11:12 AM SendTo [C:\Users\Classic .NET AppPool\AppData\Roaming\Microsoft\Windows\SendTo]
2010/01/03 11:12 AM Start Menu [C:\Users\Classic .NET AppPool\AppData\Roaming\Microsoft\Windows\Start Menu]
2010/01/03 11:12 AM Templates [C:\Users\Classic .NET AppPool\AppData\Roaming\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Users\Classic .NET AppPool\AppData\Local
2010/01/03 11:12 AM Application Data [C:\Users\Classic .NET AppPool\AppData\Local]
2010/01/03 11:12 AM History [C:\Users\Classic .NET AppPool\AppData\Local\Microsoft\Windows\History]
2010/01/03 11:12 AM Temporary Internet Files [C:\Users\Classic .NET AppPool\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Classic .NET AppPool\Documents
2010/01/03 11:12 AM My Music [C:\Users\Classic .NET AppPool\Music]
2010/01/03 11:12 AM My Pictures [C:\Users\Classic .NET AppPool\Pictures]
2010/01/03 11:12 AM My Videos [C:\Users\Classic .NET AppPool\Videos]
0 File(s) 0 bytes
Directory of C:\Users\Default
2010/01/02 04:52 PM Application Data [C:\Users\Default\AppData\Roaming]
2010/01/02 04:52 PM Cookies [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Cookies]
2010/01/02 04:52 PM Local Settings [C:\Users\Default\AppData\Local]
2010/01/02 04:52 PM My Documents [C:\Users\Default\Documents]
2010/01/02 04:52 PM NetHood [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Network Shortcuts]
2010/01/02 04:52 PM PrintHood [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Printer Shortcuts]
2010/01/02 04:52 PM Recent [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Recent]
2010/01/02 04:52 PM SendTo [C:\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo]
2010/01/02 04:52 PM Start Menu [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu]
2010/01/02 04:52 PM Templates [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Users\Default\AppData\Local
2010/01/02 04:52 PM Application Data [C:\Users\Default\AppData\Local]
2010/01/02 04:52 PM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
2010/01/02 04:52 PM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Default\Documents
2010/01/02 04:52 PM My Music [C:\Users\Default\Music]
2010/01/02 04:52 PM My Pictures [C:\Users\Default\Pictures]
2010/01/02 04:52 PM My Videos [C:\Users\Default\Videos]
0 File(s) 0 bytes
Directory of C:\Users\Frank
2010/01/02 04:53 PM Application Data [C:\Users\Frank\AppData\Roaming]
2010/01/02 04:53 PM Cookies [C:\Users\Frank\AppData\Roaming\Microsoft\Windows\Cookies]
2010/01/02 04:53 PM Local Settings [C:\Users\Frank\AppData\Local]
2010/01/02 04:53 PM My Documents [C:\Users\Frank\Documents]
2010/01/02 04:53 PM NetHood [C:\Users\Frank\AppData\Roaming\Microsoft\Windows\Network Shortcuts]
2010/01/02 04:53 PM PrintHood [C:\Users\Frank\AppData\Roaming\Microsoft\Windows\Printer Shortcuts]
2010/01/02 04:53 PM Recent [C:\Users\Frank\AppData\Roaming\Microsoft\Windows\Recent]
2010/01/02 04:53 PM SendTo [C:\Users\Frank\AppData\Roaming\Microsoft\Windows\SendTo]
2010/01/02 04:53 PM Start Menu [C:\Users\Frank\AppData\Roaming\Microsoft\Windows\Start Menu]
2010/01/02 04:53 PM Templates [C:\Users\Frank\AppData\Roaming\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Users\Frank\AppData\Local
2010/01/02 04:53 PM Application Data [C:\Users\Frank\AppData\Local]
2010/01/02 04:53 PM History [C:\Users\Frank\AppData\Local\Microsoft\Windows\History]
2010/01/02 04:53 PM Temporary Internet Files [C:\Users\Frank\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Frank\Documents
2010/01/02 04:53 PM My Music [C:\Users\Frank\Music]
2010/01/02 04:53 PM My Pictures [C:\Users\Frank\Pictures]
2010/01/02 04:53 PM My Videos [C:\Users\Frank\Videos]
0 File(s) 0 bytes
Directory of C:\Users\Public\Documents
2010/01/02 04:52 PM My Music [C:\Users\Public\Music]
2010/01/02 04:52 PM My Pictures [C:\Users\Public\Pictures]
2010/01/02 04:52 PM My Videos [C:\Users\Public\Videos]
0 File(s) 0 bytes
Directory of C:\Users\UpdatusUser
2011/07/26 07:44 PM Application Data [C:\Users\UpdatusUser\AppData\Roaming]
2011/07/26 07:44 PM Cookies [C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Cookies]
2011/07/26 07:44 PM Local Settings [C:\Users\UpdatusUser\AppData\Local]
2011/07/26 07:44 PM My Documents [C:\Users\UpdatusUser\Documents]
2011/07/26 07:44 PM NetHood [C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Network Shortcuts]
2011/07/26 07:44 PM PrintHood [C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Printer Shortcuts]
2011/07/26 07:44 PM Recent [C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Recent]
2011/07/26 07:44 PM SendTo [C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\SendTo]
2011/07/26 07:44 PM Start Menu [C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu]
2011/07/26 07:44 PM Templates [C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Users\UpdatusUser\AppData\Local
2011/07/26 07:44 PM Application Data [C:\Users\UpdatusUser\AppData\Local]
2011/07/26 07:44 PM History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
2011/07/26 07:44 PM Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\UpdatusUser\Documents
2011/07/26 07:44 PM My Music [C:\Users\UpdatusUser\Music]
2011/07/26 07:44 PM My Pictures [C:\Users\UpdatusUser\Pictures]
2011/07/26 07:44 PM My Videos [C:\Users\UpdatusUser\Videos]
0 File(s) 0 bytes
Directory of C:\Windows\System32\config\systemprofile
2010/08/23 04:15 PM Application Data [C:\Windows\system32\config\systemprofile\AppData\Roaming]
2010/08/23 04:15 PM Cookies [C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies]
2010/08/23 04:15 PM Local Settings [C:\Windows\system32\config\systemprofile\AppData\Local]
2010/08/23 04:15 PM My Documents [C:\Windows\system32\config\systemprofile\Documents]
2010/08/23 04:15 PM NetHood [C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Network Shortcuts]
2010/08/23 04:15 PM PrintHood [C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Printer Shortcuts]
2010/08/23 04:15 PM Recent [C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Recent]
2010/08/23 04:15 PM SendTo [C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\SendTo]
2010/08/23 04:15 PM Start Menu [C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu]
2010/08/23 04:15 PM Templates [C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Windows\System32\config\systemprofile\AppData\Local
2010/08/23 04:15 PM Application Data [C:\Windows\system32\config\systemprofile\AppData\Local]
2010/08/23 04:15 PM History [C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History]
2010/08/23 04:15 PM Temporary Internet Files [C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Windows\System32\config\systemprofile\Documents
2010/08/23 04:15 PM My Music [C:\Windows\system32\config\systemprofile\Music]
2010/08/23 04:15 PM My Pictures [C:\Windows\system32\config\systemprofile\Pictures]
2010/08/23 04:15 PM My Videos [C:\Windows\system32\config\systemprofile\Videos]
0 File(s) 0 bytes
Directory of C:\Windows\SysWOW64\config\systemprofile
2010/08/23 04:15 PM Application Data [C:\Windows\system32\config\systemprofile\AppData\Roaming]
2010/08/23 04:15 PM Cookies [C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies]
2010/08/23 04:15 PM Local Settings [C:\Windows\system32\config\systemprofile\AppData\Local]
2010/08/23 04:15 PM My Documents [C:\Windows\system32\config\systemprofile\Documents]
2010/08/23 04:15 PM NetHood [C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Network Shortcuts]
2010/08/23 04:15 PM PrintHood [C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Printer Shortcuts]
2010/08/23 04:15 PM Recent [C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Recent]
2010/08/23 04:15 PM SendTo [C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\SendTo]
2010/08/23 04:15 PM Start Menu [C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu]
2010/08/23 04:15 PM Templates [C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Windows\SysWOW64\config\systemprofile\AppData\Local
2010/08/23 04:15 PM Application Data [C:\Windows\system32\config\systemprofile\AppData\Local]
2010/08/23 04:15 PM History [C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History]
2010/08/23 04:15 PM Temporary Internet Files [C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Windows\SysWOW64\config\systemprofile\Documents
2010/08/23 04:15 PM My Music [C:\Windows\system32\config\systemprofile\Music]
2010/08/23 04:15 PM My Pictures [C:\Windows\system32\config\systemprofile\Pictures]
2010/08/23 04:15 PM My Videos [C:\Windows\system32\config\systemprofile\Videos]
0 File(s) 0 bytes
Directory of C:\Windows.old\ProgramData
2009/07/14 06:53 AM Application Data [C:\ProgramData]
2009/07/14 06:53 AM Desktop [C:\Users\Public\Desktop]
2009/07/14 06:53 AM Documents [C:\Users\Public\Documents]
2009/07/14 06:53 AM Favorites [C:\Users\Public\Favorites]
2009/07/14 06:53 AM Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
2009/07/14 06:53 AM Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Windows.old\ProgramData\Application Data
2013/08/27 09:43 AM Adobe [J:\Software\IllustratorPortable\App\ProgramData\Adobe]
2013/08/25 10:11 PM Adobe.BackupByIllustratorPortable [J:\Software\IllustratorPortable\App\ProgramData\Adobe]
2010/01/02 04:52 PM Application Data [C:\ProgramData]
2010/01/02 04:52 PM Desktop [C:\Users\Public\Desktop]
2010/01/02 04:52 PM Documents [C:\Users\Public\Documents]
2010/01/02 04:52 PM Favorites [C:\Users\Public\Favorites]
2013/08/27 09:43 AM regid.1986-12.com.adobe [J:\Software\IllustratorPortable\App\ProgramData\regid.1986-12.com.adobe]
2013/08/25 10:11 PM regid.1986-12.com.adobe.BackupByIllustratorPortable [J:\Software\IllustratorPortable\App\ProgramData\regid.1986-12.com.adobe]
2010/01/02 04:52 PM Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
2010/01/02 04:52 PM Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Windows.old\ProgramData\Documents
2010/01/02 04:52 PM My Music [C:\Users\Public\Music]
2010/01/02 04:52 PM My Pictures [C:\Users\Public\Pictures]
2010/01/02 04:52 PM My Videos [C:\Users\Public\Videos]
0 File(s) 0 bytes
Directory of C:\Windows.old\Users\FrankE
2009/09/10 01:17 PM Application Data [C:\Users\FrankE\AppData\Roaming]
2009/09/10 01:17 PM Cookies [C:\Users\FrankE\AppData\Roaming\Microsoft\Windows\Cookies]
2009/09/10 01:17 PM Local Settings [C:\Users\FrankE\AppData\Local]
2009/09/10 01:17 PM My Documents [C:\Users\FrankE\Documents]
2009/09/10 01:17 PM NetHood [C:\Users\FrankE\AppData\Roaming\Microsoft\Windows\Network Shortcuts]
2009/09/10 01:17 PM PrintHood [C:\Users\FrankE\AppData\Roaming\Microsoft\Windows\Printer Shortcuts]
2009/09/10 01:17 PM Recent [C:\Users\FrankE\AppData\Roaming\Microsoft\Windows\Recent]
2009/09/10 01:17 PM SendTo [C:\Users\FrankE\AppData\Roaming\Microsoft\Windows\SendTo]
2009/09/10 01:17 PM Start Menu [C:\Users\FrankE\AppData\Roaming\Microsoft\Windows\Start Menu]
2009/09/10 01:17 PM Templates [C:\Users\FrankE\AppData\Roaming\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Windows.old\Users\FrankE\AppData\Local
2009/09/10 01:17 PM Application Data [C:\Users\FrankE\AppData\Local]
2009/09/10 01:17 PM History [C:\Users\FrankE\AppData\Local\Microsoft\Windows\History]
2009/09/10 01:17 PM Temporary Internet Files [C:\Users\FrankE\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Total Files Listed:
0 File(s) 0 bytes
154 Dir(s) 37ÿ794ÿ664ÿ448 bytes free
< %systemroot%\System32\config\*.sav >
< %PROGRAMFILES%\bak. /s >
< %systemroot%\system32\bak. /s >
< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >
< %systemroot%\system32\config\systemprofile\*.dat /x >
[2010/01/02 16:52:48 | 000,001,451 | —- | M] () – C:\Windows\system32\config\systemprofile\Desktop
< %systemroot%\*.config >
< %systemroot%\system32\*.db >
< %PROGRAMFILES%\Internet Explorer\*.dat >
< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >
[2011/07/03 17:45:07 | 000,000,283 | -HS- | M] () – C:\Users\Frank\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini
[2013/03/26 20:47:13 | 000,003,052 | -H– | M] () – C:\Users\Frank\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\setup.ini
[2013/09/02 14:20:22 | 000,001,177 | -H– | M] () – C:\Users\Frank\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\tlbdata.xml
< %USERPROFILE%\Desktop\*.exe >
[2012/10/14 12:45:10 | 009,477,848 | —- | M] (Stardock Corporation ) – C:\Users\Frank\Desktop\fences_public.exe
< %PROGRAMFILES%\Common Files\*.* >
< %systemroot%\*.src >
< %systemroot%\install\*.* >
< %systemroot%\system32\DLL\*.* >
< %systemroot%\system32\HelpFiles\*.* >
< %systemroot%\system32\rundll\*.* >
< %systemroot%\winn32\*.* >
< %systemroot%\Java\*.* >
< %systemroot%\system32\test\*.* >
< %systemroot%\system32\Rundll32\*.* >
< %systemroot%\AppPatch\Custom\*.* >
[2005/10/02 09:19:52 | 000,001,258 | —- | M] () – C:\Windows\AppPatch\Custom\{9bb2c6bb-5c38-4f3c-ab39-07c8a67118f8}.sdb
< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >
< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >
========== Files - Unicode (All) ==========
[2013/09/02 13:50:47 | 095,231,388 | —- | M] ()(C:\Windows\SysWow64\????) – C:\Windows\SysWow64\ቌ⺜葤Ÿ
[2013/09/02 13:50:47 | 095,231,388 | —- | C] ()(C:\Windows\SysWow64\????) – C:\Windows\SysWow64\ቌ⺜葤Ÿ
[2013/07/14 01:21:25 | 000,000,767 | —- | M] ()(C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\??????????.lnk) – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\强力卸载电脑上的软件.lnk
[2013/07/14 01:21:25 | 000,000,767 | —- | C] ()(C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\??????????.lnk) – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\强力卸载电脑上的软件.lnk
[2013/05/28 21:21:08 | 000,000,938 | —- | M] ()(C:\Users\Public\Desktop\MacType ????.lnk) – C:\Users\Public\Desktop\MacType 用户向导.lnk
[2013/05/28 21:21:08 | 000,000,938 | —- | C] ()(C:\Users\Public\Desktop\MacType ????.lnk) – C:\Users\Public\Desktop\MacType 用户向导.lnk
[2013/05/28 21:21:07 | 000,000,898 | —- | M] ()(C:\Users\Public\Desktop\MacType ????.lnk) – C:\Users\Public\Desktop\MacType 配置程序.lnk
[2013/05/28 21:21:07 | 000,000,898 | —- | C] ()(C:\Users\Public\Desktop\MacType ????.lnk) – C:\Users\Public\Desktop\MacType 配置程序.lnk
========== Alternate Data Streams ==========
@Alternate Data Stream - 254 bytes -> C:\ProgramData\TEMP:9A870F8B
@Alternate Data Stream - 189 bytes -> C:\ProgramData\TEMP:284D1EE4
@Alternate Data Stream - 1467 bytes -> C:\ProgramData\Microsoft:KEdjNlTBFN6syCNNDkCvFod
@Alternate Data Stream - 1427 bytes -> C:\ProgramData\Microsoft:YQYJBh3jt8x7MO9ZX33V6eS4d
@Alternate Data Stream - 135 bytes -> C:\ProgramData\TEMP:7631EA83
@Alternate Data Stream - 1339 bytes -> C:\ProgramData\Microsoft:A5aXVIyCIt9rFDIfkGEKk
@Alternate Data Stream - 131 bytes -> C:\ProgramData\TEMP:05EE1EEF
@Alternate Data Stream - 1278 bytes -> C:\ProgramData\Microsoft:YjkSYCvdorRyOukig90e9O5Qlra
@Alternate Data Stream - 115 bytes -> C:\ProgramData\TEMP:65F321A9
@Alternate Data Stream - 1111 bytes -> C:\ProgramData\Microsoft:uiywOcYzBepd3CjJu
< End of report >
Thanks in advance!
FB
