What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Can't install any antivirus program

45 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #1

Hello

 

Please help me, here is my log: 

 

OTL Extras logfile created on: 6/2/2014 11:45:56 AM - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\phuong\Downloads
64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7601.17514)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
 
3.95 Gb Total Physical Memory | 1.70 Gb Available Physical Memory | 43.11% Memory free
7.91 Gb Paging File | 5.28 Gb Available in Paging File | 66.81% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 97.66 Gb Total Space | 67.45 Gb Free Space | 69.07% Space Free | Partition Type: NTFS
Drive D: | 185.55 Gb Total Space | 29.99 Gb Free Space | 16.16% Space Free | Partition Type: NTFS
Drive E: | 182.55 Gb Total Space | 66.36 Gb Free Space | 36.35% Space Free | Partition Type: NTFS
 
Computer Name: PHUONG-PC | User Name: phuong | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.url[@ = InternetShortcut] – C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] – C:\Windows\SysWow64\control.exe (Microsoft Corporation)
 
[HKEY_CURRENT_USER\SOFTWARE\Classes\]
.html [@ = ChromeHTML] – Reg Error: Key error. File not found
 
========== Shell Spawning ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
exefile [open] – "%1" %*
helpfile [open] – Reg Error: Key error.
inffile [install] – %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] – "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] – "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [runas] – cmd.exe /c takeown /f "%1" /r /d y && icacls "%1" /grant administrators:F /t (Microsoft Corporation)
Folder [open] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] – Reg Error: Value error.
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
cplfile [cplopen] – %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] – "%1" %*
helpfile [open] – Reg Error: Key error.
inffile [install] – %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [runas] – cmd.exe /c takeown /f "%1" /r /d y && icacls "%1" /grant administrators:F /t (Microsoft Corporation)
Folder [open] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] – Reg Error: Value error.
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01  [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
 
========== System Restore Settings ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 1
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
========== Authorized Applications List ==========
 
 
========== Vista Active Open Ports Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{C147EA81-1CA9-4838-89F3-3ECFAD44B20B}" = lport=6004 | protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office14\outlook.exe | 
 
========== Vista Active Application Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{30FE1A4B-6319-493B-BAC9-8F6E997332FB}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe | 
"{43E16C96-8416-42A6-8161-B7D52F517E23}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office14\onenote.exe | 
"{CFEA0AA2-EAC0-4404-9EAF-A29DCE14C989}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office14\onenote.exe | 
"TCP Query User{1E8884B8-9563-4C78-B056-6BD8E072542C}C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe" = protocol=6 | dir=in | app=c:\windows\microsoft.net\framework\v2.0.50727\vbc.exe | 
"UDP Query User{55CBCC29-9EE1-43D1-8235-770722BDD36B}C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe" = protocol=17 | dir=in | app=c:\windows\microsoft.net\framework\v2.0.50727\vbc.exe | 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{10CD364B-FFCC-48BE-B469-B9622A033075}" = Fences
"{8C775E70-A791-4DA8-BCC3-6AB7136F4484}" = Visual Studio 2012 x64 Redistributables
"{8E34682C-8118-31F1-BC4C-98CD9675E1C2}" = Microsoft .NET Framework 4 Extended
"{90140000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2010
"{90140000-002A-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (English) 2010
"{90140000-0116-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2010
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision" = NVIDIA 3D Vision Driver 320.49
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = NVIDIA Control Panel 320.49
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Graphics Driver 320.49
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience" = NVIDIA GeForce Experience 1.5
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB" = NVIDIA 3D Vision Controller Driver 320.49
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA PhysX System Software 9.13.0604
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = NVIDIA Update 4.11.9
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver" = NVIDIA HD Audio Driver 1.3.24.2
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"CCleaner" = CCleaner
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"WinRAR archiver" = WinRAR 5.00 beta 2 (64-bit)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{3282FBE1-35FC-48D8-98CA-115A5EF1F9B4}" = NVIDIA PhysX
"{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}" = Skype™ 6.16
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver
"{90140000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2010
"{90140000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2010
"{90140000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2010
"{90140000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2010
"{90140000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2010
"{90140000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2010
"{90140000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2010
"{90140000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2010
"{90140000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2010
"{90140000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2010
"{90140000-003D-0000-0000-0000000FF1CE}" = Microsoft Office Single Image 2010
"{90140000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2010
"{90140000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2010
"{90140000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2010
"{90140000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2010
"{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}" = Visual Studio 2012 x86 Redistributables
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC006985-A51F-42AC-A7E9-5E66D8AC8063}_is1" = UniKey 4.0 RC2 (build 1101)
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"Adobe Flash Player ActiveX" = Adobe Flash Player 13 ActiveX
"Fences" = Fences
"Google Chrome" = Google Chrome
"Internet Download Manager" = Internet Download Manager
"Laban_is1" = Laban version 3.0
"Mozilla Firefox 29.0.1 (x86 en-US)" = Mozilla Firefox 29.0.1 (x86 en-US)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver
"Office14.SingleImage" = Microsoft Office Professional 2010
"Plus-HD-9.5" = Plus-HD-9.5
"Shop_and _Up_1.2" = Shop_and _Up_1.2
"VirtualCloneDrive" = VirtualCloneDrive
 
========== Last 20 Event Log Errors ==========
 
[ Application Events ]
Error - 6/1/2014 9:48:28 PM | Computer Name = phuong-PC | Source = Application Error | ID = 1000
Description = Faulting application name: avira_en_av___ws.exe, version: 1.1.13.24161,
 time stamp: 0x52974fc4  Faulting module name: KERNELBASE.dll, version: 6.1.7601.17514,
 time stamp: 0x4ce7bafa  Exception code: 0xc06d007e  Fault offset: 0x0000b727  Faulting
 process id: 0xa70  Faulting application start time: 0x01cf7e04bff5694c  Faulting application
 path: C:\Users\phuong\Downloads\avira_en_av___ws.exe  Faulting module path: C:\Windows\syswow64\KERNELBASE.dll
Report
 Id: fdb4a1bb-e9f7-11e3-a138-d43d7eeea564
 
Error - 6/1/2014 9:48:35 PM | Computer Name = phuong-PC | Source = Application Error | ID = 1000
Description = Faulting application name: avira_en_av___ws.exe, version: 1.1.13.24161,
 time stamp: 0x52974fc4  Faulting module name: KERNELBASE.dll, version: 6.1.7601.17514,
 time stamp: 0x4ce7bafa  Exception code: 0xc06d007e  Fault offset: 0x0000b727  Faulting
 process id: 0x344  Faulting application start time: 0x01cf7e04c40d23c3  Faulting application
 path: C:\Users\phuong\Downloads\avira_en_av___ws.exe  Faulting module path: C:\Windows\syswow64\KERNELBASE.dll
Report
 Id: 01ddc193-e9f8-11e3-a138-d43d7eeea564
 
Error - 6/1/2014 9:57:36 PM | Computer Name = phuong-PC | Source = WinMgmt | ID = 10
Description = 
 
Error - 6/1/2014 10:17:22 PM | Computer Name = phuong-PC | Source = MsiInstaller | ID = 10005
Description = 
 
Error - 6/1/2014 10:27:58 PM | Computer Name = phuong-PC | Source = WinMgmt | ID = 10
Description = 
 
Error - 6/1/2014 10:28:33 PM | Computer Name = phuong-PC | Source = Application Error | ID = 1000
Description = Faulting application name: avira_en_av___ws.exe, version: 1.1.13.24161,
 time stamp: 0x52974fc4  Faulting module name: KERNELBASE.dll, version: 6.1.7601.17514,
 time stamp: 0x4ce7bafa  Exception code: 0xc06d007e  Fault offset: 0x0000b727  Faulting
 process id: 0x2f8  Faulting application start time: 0x01cf7e0a58192649  Faulting application
 path: C:\Users\Administrator\Downloads\avira_en_av___ws.exe  Faulting module path:
 C:\Windows\syswow64\KERNELBASE.dll  Report Id: 975196be-e9fd-11e3-b93c-d43d7eeea564
 
Error - 6/1/2014 10:29:54 PM | Computer Name = phuong-PC | Source = Application Error | ID = 1000
Description = Faulting application name: avira_en_av___ws.exe, version: 1.1.13.24161,
 time stamp: 0x52974fc4  Faulting module name: KERNELBASE.dll, version: 6.1.7601.17514,
 time stamp: 0x4ce7bafa  Exception code: 0xc06d007e  Fault offset: 0x0000b727  Faulting
 process id: 0x1d4  Faulting application start time: 0x01cf7e0a897e86b2  Faulting application
 path: C:\Users\Administrator\Downloads\avira_en_av___ws.exe  Faulting module path:
 C:\Windows\syswow64\KERNELBASE.dll  Report Id: c7a3603d-e9fd-11e3-b93c-d43d7eeea564
 
Error - 6/1/2014 10:47:07 PM | Computer Name = phuong-PC | Source = Application Error | ID = 1000
Description = Faulting application name: avira_en_av___ws.exe, version: 1.1.13.24161,
 time stamp: 0x52974fc4  Faulting module name: KERNELBASE.dll, version: 6.1.7601.17514,
 time stamp: 0x4ce7bafa  Exception code: 0xc06d007e  Fault offset: 0x0000b727  Faulting
 process id: 0x10b0  Faulting application start time: 0x01cf7e0cf1174763  Faulting application
 path: C:\Users\phuong\Downloads\avira_en_av___ws.exe  Faulting module path: C:\Windows\syswow64\KERNELBASE.dll
Report
 Id: 2f083eec-ea00-11e3-b93c-d43d7eeea564
 
Error - 6/1/2014 11:44:23 PM | Computer Name = phuong-PC | Source = MsiInstaller | ID = 11920
Description = 
 
Error - 6/1/2014 11:58:22 PM | Computer Name = phuong-PC | Source = Microsoft Security Client Setup | ID = 100
Description = HRESULT:0x8004FF81 Description:Cannot complete the Security Essentials
 installation. An error has prevented the Security Essentials setup wizard from 
completing successfully. Please restart your computer and try again. Error code:0x8004FF81.
 
 
Error encountered while reading event logs.
 
< End of report >
 
Post #2
OTL logfile created on: 6/2/2014 11:45:56 AM - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\phuong\Downloads
64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7601.17514)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
 
3.95 Gb Total Physical Memory | 1.70 Gb Available Physical Memory | 43.11% Memory free
7.91 Gb Paging File | 5.28 Gb Available in Paging File | 66.81% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 97.66 Gb Total Space | 67.45 Gb Free Space | 69.07% Space Free | Partition Type: NTFS
Drive D: | 185.55 Gb Total Space | 29.99 Gb Free Space | 16.16% Space Free | Partition Type: NTFS
Drive E: | 182.55 Gb Total Space | 66.36 Gb Free Space | 36.35% Space Free | Partition Type: NTFS
 
Computer Name: PHUONG-PC | User Name: phuong | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - C:\Users\phuong\Downloads\OTL.exe (OldTimer Tools)
PRC - C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe (globalUpdate)
PRC - C:\Windows\SysWOW64\Microsoft NET Framework 4.0\Application.exe ()
PRC - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)
PRC - C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe (Tonec Inc.)
PRC - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
PRC - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe (NVIDIA Corporation)
PRC - C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
 
 
========== Modules (No Company Name) ==========
 
MOD - C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\ppgooglenaclpluginchrome.dll ()
MOD - C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\PepperFlash\pepflashplayer.dll ()
MOD - C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\pdf.dll ()
MOD - C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\libglesv2.dll ()
MOD - C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\libegl.dll ()
MOD - C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\ffmpegsumo.dll ()
MOD - C:\Program Files (x86)\Microsoft Office\Office14\ADDINS\UmOutlookAddin.dll ()
MOD - C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF ()
 
 
========== Services (SafeList) ==========
 
SRV:64bit: - (WinDefend) – C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV:64bit: - (AppMgmt) – C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
SRV - (globalUpdatem) – C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe (globalUpdate)
SRV - (globalUpdate) – C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe (globalUpdate)
SRV - (AdobeFlashPlayerUpdateSvc) – C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
SRV - (MozillaMaintenance) – C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation)
SRV - (SkypeUpdate) – C:\Program Files (x86)\Skype\Updater\Updater.exe (Skype Technologies)
SRV - (Stereo Service) – C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
SRV - (nvUpdatusService) – C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (NVIDIA Corporation)
SRV - (clr_optimization_v4.0.30319_32) – C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (clr_optimization_v2.0.50727_32) – C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - (IDMWFP) – C:\Windows\SysNative\drivers\idmwfp.sys (Tonec Inc.)
DRV:64bit: - (VClone) – C:\Windows\SysNative\drivers\VClone.sys (Elaborate Bytes AG)
DRV:64bit: - (ElbyCDIO) – C:\Windows\SysNative\drivers\ElbyCDIO.sys (Elaborate Bytes AG)
DRV:64bit: - (NVHDA) – C:\Windows\SysNative\drivers\nvhda64v.sys (NVIDIA Corporation)
DRV:64bit: - (ISCT) – C:\Windows\SysNative\drivers\ISCTD64.sys ()
DRV:64bit: - (RTL8167) – C:\Windows\SysNative\drivers\Rt64win7.sys (Realtek                                            )
DRV:64bit: - (nmwcdnsux64) – C:\Windows\SysNative\drivers\nmwcdnsux64.sys (Nokia)
DRV:64bit: - (RdpVideoMiniport) – C:\Windows\SysNative\drivers\rdpvideominiport.sys (Microsoft Corporation)
DRV:64bit: - (TsUsbFlt) – C:\Windows\SysNative\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV:64bit: - (tsusbhub) – C:\Windows\SysNative\drivers\tsusbhub.sys (Microsoft Corporation)
DRV:64bit: - (Synth3dVsc) – C:\Windows\SysNative\drivers\Synth3dVsc.sys (Microsoft Corporation)
DRV:64bit: - (dmvsc) – C:\Windows\SysNative\drivers\dmvsc.sys (Microsoft Corporation)
DRV:64bit: - (terminpt) – C:\Windows\SysNative\drivers\terminpt.sys (Microsoft Corporation)
DRV:64bit: - (amdsata) – C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (HpSAMD) – C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (TsUsbGD) – C:\Windows\SysNative\drivers\TsUsbGD.sys (Microsoft Corporation)
DRV:64bit: - (amdxata) – C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:64bit: - (MEIx64) – C:\Windows\SysNative\drivers\HECIx64.sys (Intel Corporation)
DRV:64bit: - (amdsbs) – C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (LSI_SAS2) – C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:64bit: - (Fs_Rec) – C:\Windows\SysNative\drivers\fs_rec.sys (Microsoft Corporation)
DRV:64bit: - (stexstor) – C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:64bit: - (ebdrv) – C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) – C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (b57nd60a) – C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (hcw85cir) – C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV:64bit: - (WDC_SAM) – C:\Windows\SysNative\drivers\wdcsam64.sys (Western Digital Technologies)
DRV - (WIMMount) – C:\Windows\SysWOW64\drivers\wimmount.sys (Microsoft Corporation)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM;=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM;=IE8SRC
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.laban.vn/?utm_source=sl_026&u;=6afcbfb2f156593a65532872ee4f28348d21&utm;_campaign=201406
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 63 37 C4 E4 84 7C CF 01  [binary data]
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src;=IE-SearchBox&FORM;=IE8SRC
IE - HKCU\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = http://isearch.avg.com/search?cid={AD92952A-3DA4-4B11-8618-62D43EC51BB6}∣=⟨=&ds;=≺=&d;=&v;=&sap;=dsp&q;={searchTerms}
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
========== FireFox ==========
 
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:29.0.1
FF - prefs.js..browser.startup.homepage: "http://www.laban.vn/?utm_source=sl_026&u;=6afcbfb2f156593a65532872ee4f28348d21&utm;_campaign=201406" 
FF - user.js - File not found
 
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10: C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll (globalUpdate)
FF - HKLM\Software\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4: C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll (globalUpdate)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 29.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 29.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\[removed]: C:\Users\phuong\AppData\Roaming\IDM\idmmzcc5 [2014/05/31 10:41:22 | 000,000,000 | —D | M]
FF - HKEY_CURRENT_USER\software\mozilla\SeaMonkey\Extensions\\[removed]: C:\Users\phuong\AppData\Roaming\IDM\idmmzcc5 [2014/05/31 10:41:22 | 000,000,000 | —D | M]
 
[2014/06/02 07:48:53 | 000,000,000 | —D | M] (No name found) – C:\Users\phuong\AppData\Roaming\Mozilla\Extensions
[2014/06/02 09:55:47 | 000,000,000 | —D | M] (No name found) – C:\Users\phuong\AppData\Roaming\Mozilla\Firefox\Profiles\rp841v3l.default\extensions
[2014/06/02 07:49:37 | 000,000,000 | —D | M] (Yahoo! Toolbar) – C:\Users\phuong\AppData\Roaming\Mozilla\Firefox\Profiles\rp841v3l.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
[2014/06/02 09:55:43 | 000,000,000 | —D | M] ("Shop_and _Up_1.2") – C:\Users\phuong\AppData\Roaming\Mozilla\Firefox\Profiles\rp841v3l.default\extensions\[removed]
[2014/06/02 09:55:51 | 000,000,000 | —D | M] ("Plus-HD-9.5") – C:\Users\phuong\AppData\Roaming\Mozilla\Firefox\Profiles\rp841v3l.default\extensions\[removed]
[2014/06/02 07:49:39 | 000,000,000 | —D | M] (No name found) – C:\Users\phuong\AppData\Roaming\Mozilla\Firefox\Profiles\rp841v3l.default\extensions\staged
[2014/06/02 09:55:41 | 000,000,000 | —D | M] (No name found) – C:\Users\phuong\AppData\Roaming\Mozilla\Firefox\Profiles\rp841v3l.default\extensions\[removed]\extensionData
[2014/06/02 09:55:41 | 000,000,000 | —D | M] (No name found) – C:\Users\phuong\AppData\Roaming\Mozilla\Firefox\Profiles\rp841v3l.default\extensions\[removed]\extensionData\plugins
[2014/06/02 09:55:41 | 000,000,000 | —D | M] (No name found) – C:\Users\phuong\AppData\Roaming\Mozilla\Firefox\Profiles\rp841v3l.default\extensions\[removed]\extensionData\userCode
[2014/06/02 09:55:49 | 000,000,000 | —D | M] (No name found) – C:\Users\phuong\AppData\Roaming\Mozilla\Firefox\Profiles\rp841v3l.default\extensions\[removed]\extensionData
[2014/06/02 09:55:49 | 000,000,000 | —D | M] (No name found) – C:\Users\phuong\AppData\Roaming\Mozilla\Firefox\Profiles\rp841v3l.default\extensions\[removed]\extensionData\plugins
[2014/06/02 09:55:49 | 000,000,000 | —D | M] (No name found) – C:\Users\phuong\AppData\Roaming\Mozilla\Firefox\Profiles\rp841v3l.default\extensions\[removed]\extensionData\userCode
[2014/06/02 07:49:38 | 000,248,650 | —- | M] () (No name found) – C:\Users\phuong\AppData\Roaming\Mozilla\Firefox\Profiles\rp841v3l.default\extensions\staged\[removed]
[2014/06/02 07:48:42 | 000,000,000 | —D | M] (No name found) – C:\Program Files (x86)\Mozilla Firefox\browser\extensions
[2014/06/02 07:48:42 | 000,000,000 | —D | M] (Default) – C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
 
========== Chrome  ==========
 
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs;_ri={google:suggestRid}&xssi;=t&q;={searchTerms}&{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter},
CHR - homepage: http://www.google.com
CHR - plugin: Error reading preferences file
 
O1 HOSTS File: ([2014/05/31 11:15:04 | 000,000,864 | —- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 validation.sls.microsoft.com
O2:64bit: - BHO: (IDM integration (IDMIEHlprObj Class)) - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll (Internet Download Manager, Tonec Inc.)
O2:64bit: - BHO: (Shop_and _Up_1.2) - {11111111-1111-1111-1111-110411281122} - C:\Program Files (x86)\Shop_and _Up_1.2\Shop_and _Up_1.2-bho64.dll (Winportal)
O2:64bit: - BHO: (Plus-HD-9.5) - {11111111-1111-1111-1111-110511311166} - C:\Program Files (x86)\Plus-HD-9.5\Plus-HD-9.5-bho64.dll (Plus HD)
O2 - BHO: (IDM integration (IDMIEHlprObj Class)) - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll (Internet Download Manager, Tonec Inc.)
O2 - BHO: (Shop_and _Up_1.2) - {11111111-1111-1111-1111-110411281122} - C:\Program Files (x86)\Shop_and _Up_1.2\Shop_and _Up_1.2-bho.dll (Winportal)
O2 - BHO: (Plus-HD-9.5) - {11111111-1111-1111-1111-110511311166} - C:\Program Files (x86)\Plus-HD-9.5\Plus-HD-9.5-bho.dll (Plus HD)
O4:64bit: - HKLM..\Run: [Nvtmru] C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe (NVIDIA Corporation)
O4:64bit: - HKLM..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Realtek Semiconductor)
O4 - HKCU..\Run: [IDMan] C:\Program Files (x86)\Internet Download Manager\IDMan.exe (Tonec Inc.)
O4 - HKCU..\Run: [paio] E:\Games\VLTKTH\paio.exe (VNG Corporation)
O4:64bit: - HKLM..\RunOnce: [lbro] C:\Users\phuong\AppData\Local\laban\hp_sl_026.exe (                                                            )
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O8:64bit: - Extra context menu item: Download all links with IDM - C:\Program Files (x86)\Internet Download Manager\IEGetAll.htm ()
O8:64bit: - Extra context menu item: Download with IDM - C:\Program Files (x86)\Internet Download Manager\IEExt.htm ()
O8 - Extra context menu item: Download all links with IDM - C:\Program Files (x86)\Internet Download Manager\IEGetAll.htm ()
O8 - Extra context menu item: Download with IDM - C:\Program Files (x86)\Internet Download Manager\IEExt.htm ()
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/flashplayer/current/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{73485EB1-4EE0-4303-8D94-103FFC4378B1}: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{73485EB1-4EE0-4303-8D94-103FFC4378B1}: NameServer = 8.8.8.8,4.4.4.4
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O20 - HKCU Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKCU Winlogon: Shell - ("C:\Windows\SysWOW64\Microsoft NET Framework 4.0\Application.exe") - C:\Windows\SysWOW64\Microsoft NET Framework 4.0\Application.exe ()
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O22:64bit: - SharedTaskScheduler: {1984DD45-52CF-49cd-AB77-18F378FEA264} - FencesShellExt - C:\Program Files (x86)\Stardock\Fences\FencesMenu64.dll (Stardock)
O27:64bit: - HKLM IFEO\AvastSvc.exe: Debugger - nqij.exe File not found
O27:64bit: - HKLM IFEO\AvastUI.exe: Debugger - nqij.exe File not found
O27:64bit: - HKLM IFEO\avcenter.exe: Debugger - nqij.exe File not found
O27:64bit: - HKLM IFEO\avconfig.exe: Debugger - nqij.exe File not found
O27:64bit: - HKLM IFEO\avgcsrvx.exe: Debugger - nqij.exe File not found
O27:64bit: - HKLM IFEO\avgidsagent.exe: Debugger - nqij.exe File not found
O27:64bit: - HKLM IFEO\avgnt.exe: Debugger - nqij.exe File not found
O27:64bit: - HKLM IFEO\avgrsx.exe: Debugger - nqij.exe File not found
O27:64bit: - HKLM IFEO\avguard.exe: Debugger - nqij.exe File not found
O27:64bit: - HKLM IFEO\avgui.exe: Debugger - nqij.exe File not found
O27:64bit: - HKLM IFEO\avgwdsvc.exe: Debugger - nqij.exe File not found
O27:64bit: - HKLM IFEO\avp.exe: Debugger - nqij.exe File not found
O27:64bit: - HKLM IFEO\avscan.exe: Debugger - nqij.exe File not found
O27:64bit: - HKLM IFEO\bdagent.exe: Debugger - nqij.exe File not found
O27:64bit: - HKLM IFEO\blindman.exe: Debugger - nqij.exe File not found
O27:64bit: - HKLM IFEO\ccuac.exe: Debugger - nqij.exe File not found
O27:64bit: - HKLM IFEO\ComboFix.exe: Debugger - nqij.exe File not found
O27:64bit: - HKLM IFEO\egui.exe: Debugger - nqij.exe File not found
O27:64bit: - HKLM IFEO\hijackthis.exe: Debugger - nqij.exe File not found
O27:64bit: - HKLM IFEO\instup.exe: Debugger - nqij.exe File not found
O27:64bit: - HKLM IFEO\keyscrambler.exe: Debugger - nqij.exe File not found
O27:64bit: - HKLM IFEO\mbam.exe: Debugger - nqij.exe File not found
O27:64bit: - HKLM IFEO\mbamgui.exe: Debugger - nqij.exe File not found
O27:64bit: - HKLM IFEO\mbampt.exe: Debugger - nqij.exe File not found
O27:64bit: - HKLM IFEO\mbamscheduler.exe: Debugger - nqij.exe File not found
O27:64bit: - HKLM IFEO\mbamservice.exe: Debugger - nqij.exe File not found
O27:64bit: - HKLM IFEO\MpCmdRun.exe: Debugger - nqij.exe File not found
O27:64bit: - HKLM IFEO\MSASCui.exe: Debugger - nqij.exe File not found
O27:64bit: - HKLM IFEO\MsMpEng.exe: Debugger - nqij.exe File not found
O27:64bit: - HKLM IFEO\msseces.exe: Debugger - nqij.exe File not found
O27:64bit: - HKLM IFEO\rstrui.exe: Debugger - nqij.exe File not found
O27:64bit: - HKLM IFEO\SDFiles.exe: Debugger - nqij.exe File not found
O27:64bit: - HKLM IFEO\SDMain.exe: Debugger - nqij.exe File not found
O27:64bit: - HKLM IFEO\SDWinSec.exe: Debugger - nqij.exe File not found
O27:64bit: - HKLM IFEO\spybotsd.exe: Debugger - nqij.exe File not found
O27:64bit: - HKLM IFEO\wireshark.exe: Debugger - nqij.exe File not found
O27:64bit: - HKLM IFEO\zlclient.exe: Debugger - nqij.exe File not found
O27 - HKLM IFEO\AvastSvc.exe: Debugger - nqij.exe File not found
O27 - HKLM IFEO\AvastUI.exe: Debugger - nqij.exe File not found
O27 - HKLM IFEO\avcenter.exe: Debugger - nqij.exe File not found
O27 - HKLM IFEO\avconfig.exe: Debugger - nqij.exe File not found
O27 - HKLM IFEO\avgcsrvx.exe: Debugger - nqij.exe File not found
O27 - HKLM IFEO\avgidsagent.exe: Debugger - nqij.exe File not found
O27 - HKLM IFEO\avgnt.exe: Debugger - nqij.exe File not found
O27 - HKLM IFEO\avgrsx.exe: Debugger - nqij.exe File not found
O27 - HKLM IFEO\avguard.exe: Debugger - nqij.exe File not found
O27 - HKLM IFEO\avgui.exe: Debugger - nqij.exe File not found
O27 - HKLM IFEO\avgwdsvc.exe: Debugger - nqij.exe File not found
O27 - HKLM IFEO\avp.exe: Debugger - nqij.exe File not found
O27 - HKLM IFEO\avscan.exe: Debugger - nqij.exe File not found
O27 - HKLM IFEO\bdagent.exe: Debugger - nqij.exe File not found
O27 - HKLM IFEO\blindman.exe: Debugger - nqij.exe File not found
O27 - HKLM IFEO\ccuac.exe: Debugger - nqij.exe File not found
O27 - HKLM IFEO\ComboFix.exe: Debugger - nqij.exe File not found
O27 - HKLM IFEO\egui.exe: Debugger - nqij.exe File not found
O27 - HKLM IFEO\hijackthis.exe: Debugger - nqij.exe File not found
O27 - HKLM IFEO\instup.exe: Debugger - nqij.exe File not found
O27 - HKLM IFEO\keyscrambler.exe: Debugger - nqij.exe File not found
O27 - HKLM IFEO\mbam.exe: Debugger - nqij.exe File not found
O27 - HKLM IFEO\mbamgui.exe: Debugger - nqij.exe File not found
O27 - HKLM IFEO\mbampt.exe: Debugger - nqij.exe File not found
O27 - HKLM IFEO\mbamscheduler.exe: Debugger - nqij.exe File not found
O27 - HKLM IFEO\mbamservice.exe: Debugger - nqij.exe File not found
O27 - HKLM IFEO\MpCmdRun.exe: Debugger - nqij.exe File not found
O27 - HKLM IFEO\MSASCui.exe: Debugger - nqij.exe File not found
O27 - HKLM IFEO\MsMpEng.exe: Debugger - nqij.exe File not found
O27 - HKLM IFEO\msseces.exe: Debugger - nqij.exe File not found
O27 - HKLM IFEO\rstrui.exe: Debugger - nqij.exe File not found
O27 - HKLM IFEO\SDFiles.exe: Debugger - nqij.exe File not found
O27 - HKLM IFEO\SDMain.exe: Debugger - nqij.exe File not found
O27 - HKLM IFEO\SDWinSec.exe: Debugger - nqij.exe File not found
O27 - HKLM IFEO\spybotsd.exe: Debugger - nqij.exe File not found
O27 - HKLM IFEO\wireshark.exe: Debugger - nqij.exe File not found
O27 - HKLM IFEO\zlclient.exe: Debugger - nqij.exe File not found
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] – "%1" %*
O35:64bit: - HKLM\..exefile [open] – "%1" %*
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37:64bit: - HKLM\…com [@ = comfile] – "%1" %*
O37:64bit: - HKLM\…exe [@ = exefile] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
NetSvcs:64bit: AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
 
Drivers32:64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
 
CREATERESTOREPOINT
Restore point Set: OTL Restore Point
 
========== Files/Folders - Created Within 30 Days ==========
 
[2014/06/02 11:31:56 | 000,000,000 | —D | C] – C:\Users\phuong\Desktop\CBDM
[2014/06/02 10:43:27 | 000,000,000 | —D | C] – C:\c65b114a1fa03b3bceefa49b413343
[2014/06/02 09:55:35 | 000,000,000 | —D | C] – C:\Program Files (x86)\Plus-HD-9.5
[2014/06/02 09:55:25 | 000,000,000 | —D | C] – C:\Users\phuong\AppData\Local\globalUpdate
[2014/06/02 09:55:25 | 000,000,000 | —D | C] – C:\Program Files (x86)\globalUpdate
[2014/06/02 09:55:24 | 000,000,000 | —D | C] – C:\Program Files (x86)\Shop_and _Up_1.2
[2014/06/02 09:55:00 | 000,000,000 | -H-D | C] – C:\ProgramData\{A3A26C56-02C3-4F76-A033-12EE2FB52AE6}
[2014/06/02 09:55:00 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Stardock
[2014/06/02 09:55:00 | 000,000,000 | —D | C] – C:\Program Files (x86)\Stardock
[2014/06/02 09:54:52 | 000,000,000 | —D | C] – C:\Users\phuong\AppData\Local\PackageAware
[2014/06/02 09:54:47 | 000,000,000 | —D | C] – C:\Program Files (x86)\laban
[2014/06/02 09:54:46 | 000,000,000 | —D | C] – C:\Users\phuong\AppData\Local\Programs
[2014/06/02 09:54:46 | 000,000,000 | —D | C] – C:\Users\phuong\AppData\Local\laban
[2014/06/02 09:35:18 | 000,000,000 | —D | C] – C:\Program Files\CCleaner
[2014/06/02 09:31:22 | 000,000,000 | —D | C] – C:\Users\phuong\Documents\Outlook Files
[2014/06/02 09:27:10 | 000,000,000 | —D | C] – C:\Users\phuong\AppData\Local\Skype
[2014/06/02 09:26:57 | 000,000,000 | —D | C] – C:\Users\phuong\AppData\Roaming\Skype
[2014/06/02 09:12:13 | 000,000,000 | -H-D | C] – C:\ProgramData\Common Files
[2014/06/02 09:12:13 | 000,000,000 | —D | C] – C:\ProgramData\MFAData
[2014/06/02 09:06:44 | 000,000,000 | —D | C] – C:\OETemp
[2014/06/02 08:59:10 | 000,000,000 | —D | C] – C:\Program Files (x86)\Avira
[2014/06/02 08:58:47 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
[2014/06/02 08:58:46 | 000,000,000 | R–D | C] – C:\Program Files (x86)\Skype
[2014/06/02 08:58:46 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Skype
[2014/06/02 08:54:36 | 000,000,000 | —D | C] – C:\Windows\AutoKMS
[2014/06/02 08:48:52 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
[2014/06/02 08:48:27 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\DESIGNER
[2014/06/02 08:48:23 | 000,000,000 | —D | C] – C:\Windows\PCHEALTH
[2014/06/02 08:45:43 | 000,000,000 | —D | C] – C:\Program Files\Microsoft Office
[2014/06/02 08:45:36 | 000,000,000 | —D | C] – C:\Program Files (x86)\Microsoft Analysis Services
[2014/06/02 08:45:22 | 000,000,000 | —D | C] – C:\Program Files (x86)\Microsoft Office
[2014/06/02 08:45:16 | 000,000,000 | -HSD | C] – C:\Windows\Installer
[2014/06/02 08:45:09 | 000,000,000 | RH-D | C] – C:\MSOCache
[2014/06/02 08:42:50 | 000,000,000 | —D | C] – C:\ProgramData\Stardock
[2014/06/02 08:41:42 | 000,000,000 | —D | C] – C:\Users\phuong\AppData\Local\Stardock_Corporation
[2014/06/02 08:38:18 | 000,000,000 | —D | C] – C:\Users\phuong\AppData\Roaming\Stardock
[2014/06/02 08:31:37 | 000,000,000 | —D | C] – C:\ProgramData\Skype
[2014/06/02 07:55:23 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
[2014/06/02 07:54:55 | 000,000,000 | —D | C] – C:\Users\phuong\AppData\Local\NVIDIA
[2014/06/02 07:54:29 | 000,000,000 | —D | C] – C:\Program Files (x86)\Google
[2014/06/02 07:52:46 | 000,000,000 | —D | C] – C:\Users\phuong\AppData\Local\Google
[2014/06/02 07:48:50 | 000,000,000 | —D | C] – C:\Users\phuong\AppData\Roaming\Mozilla
[2014/06/02 07:48:50 | 000,000,000 | —D | C] – C:\Users\phuong\AppData\Local\Mozilla
[2014/06/02 07:48:42 | 000,000,000 | —D | C] – C:\Program Files (x86)\Mozilla Maintenance Service
[2014/06/02 07:48:42 | 000,000,000 | —D | C] – C:\ProgramData\Mozilla
[2014/06/02 07:48:41 | 000,000,000 | —D | C] – C:\Program Files (x86)\Mozilla Firefox
[2014/06/01 01:12:31 | 000,000,000 | —D | C] – C:\Windows\Panther
[2014/06/01 01:12:18 | 000,000,000 | -HSD | C] – C:\Boot
[2014/06/01 00:13:36 | 000,000,000 | —D | C] – C:\Windows\Prefetch
[2014/06/01 00:13:05 | 000,000,000 | -HSD | C] – C:\System Volume Information
[2014/05/31 11:29:03 | 000,000,000 | —D | C] – C:\ProgramData\AVAST Software
[2014/05/31 11:20:54 | 000,000,000 | —D | C] – C:\Users\phuong\AppData\Local\Microsoft Help
[2014/05/31 11:20:52 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft Help
[2014/05/31 11:19:48 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Elaborate Bytes
[2014/05/31 11:19:48 | 000,000,000 | —D | C] – C:\Program Files (x86)\Elaborate Bytes
[2014/05/31 11:19:02 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UniKey
[2014/05/31 11:19:02 | 000,000,000 | —D | C] – C:\Program Files\UniKey
[2014/05/31 11:12:46 | 000,000,000 | —D | C] – C:\Program Files (x86)\AGEIA Technologies
[2014/05/31 11:12:20 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
[2014/05/31 11:12:01 | 000,000,000 | —D | C] – C:\ProgramData\NVIDIA
[2014/05/31 11:11:58 | 006,496,544 | —- | C] (NVIDIA Corporation) – C:\Windows\SysNative\nvcpl.dll
[2014/05/31 11:11:58 | 003,514,656 | —- | C] (NVIDIA Corporation) – C:\Windows\SysNative\nvsvc64.dll
[2014/05/31 11:11:58 | 000,237,856 | —- | C] (NVIDIA Corporation) – C:\Windows\SysNative\nvmctray.dll
[2014/05/31 11:11:58 | 000,063,776 | —- | C] (NVIDIA Corporation) – C:\Windows\SysNative\nvshext.dll
[2014/05/31 11:11:49 | 000,061,216 | —- | C] (Khronos Group) – C:\Windows\SysNative\OpenCL.dll
[2014/05/31 11:11:49 | 000,053,024 | —- | C] (Khronos Group) – C:\Windows\SysWow64\OpenCL.dll
[2014/05/31 11:09:08 | 000,000,000 | —D | C] – C:\Program Files (x86)\Microsoft.NET
[2014/05/31 11:08:01 | 027,781,920 | —- | C] (NVIDIA Corporation) – C:\Windows\SysNative\nvoglv64.dll
[2014/05/31 11:08:01 | 025,256,224 | —- | C] (NVIDIA Corporation) – C:\Windows\SysNative\nvcompiler.dll
[2014/05/31 11:08:01 | 021,102,368 | —- | C] (NVIDIA Corporation) – C:\Windows\SysWow64\nvoglv32.dll
[2014/05/31 11:08:01 | 017,560,352 | —- | C] (NVIDIA Corporation) – C:\Windows\SysWow64\nvcompiler.dll
[2014/05/31 11:08:01 | 015,920,536 | —- | C] (NVIDIA Corporation) – C:\Windows\SysNative\nvwgf2umx.dll
[2014/05/31 11:08:01 | 015,144,928 | —- | C] (NVIDIA Corporation) – C:\Windows\SysNative\nvd3dumx.dll
[2014/05/31 11:08:01 | 013,411,896 | —- | C] (NVIDIA Corporation) – C:\Windows\SysWow64\nvwgf2um.dll
[2014/05/31 11:08:01 | 009,239,344 | —- | C] (NVIDIA Corporation) – C:\Windows\SysNative\nvcuda.dll
[2014/05/31 11:08:01 | 007,687,592 | —- | C] (NVIDIA Corporation) – C:\Windows\SysWow64\nvcuda.dll
[2014/05/31 11:08:01 | 007,641,832 | —- | C] (NVIDIA Corporation) – C:\Windows\SysNative\nvopencl.dll
[2014/05/31 11:08:01 | 006,324,360 | —- | C] (NVIDIA Corporation) – C:\Windows\SysWow64\nvopencl.dll
[2014/05/31 11:08:01 | 002,953,504 | —- | C] (NVIDIA Corporation) – C:\Windows\SysNative\nvcuvid.dll
[2014/05/31 11:08:01 | 002,936,208 | —- | C] (NVIDIA Corporation) – C:\Windows\SysNative\nvapi64.dll
[2014/05/31 11:08:01 | 002,777,888 | —- | C] (NVIDIA Corporation) – C:\Windows\SysWow64\nvcuvid.dll
[2014/05/31 11:08:01 | 002,597,856 | —- | C] (NVIDIA Corporation) – C:\Windows\SysWow64\nvapi.dll
[2014/05/31 11:08:01 | 002,363,680 | —- | C] (NVIDIA Corporation) – C:\Windows\SysNative\nvcuvenc.dll
[2014/05/31 11:08:01 | 002,002,720 | —- | C] (NVIDIA Corporation) – C:\Windows\SysWow64\nvcuvenc.dll
[2014/05/31 11:08:01 | 001,832,224 | —- | C] (NVIDIA Corporation) – C:\Windows\SysNative\nvdispco6432049.dll
[2014/05/31 11:08:01 | 001,511,712 | —- | C] (NVIDIA Corporation) – C:\Windows\SysNative\nvdispgenco6432049.dll
[2014/05/31 11:08:01 | 001,059,560 | —- | C] (NVIDIA Corporation) – C:\Windows\SysNative\nvumdshimx.dll
[2014/05/31 11:08:01 | 000,925,648 | —- | C] (NVIDIA Corporation) – C:\Windows\SysWow64\nvumdshim.dll
[2014/05/31 11:08:01 | 000,572,704 | —- | C] (NVIDIA Corporation) – C:\Windows\SysNative\NvFBC64.dll
[2014/05/31 11:08:01 | 000,570,656 | —- | C] (NVIDIA Corporation) – C:\Windows\SysNative\NvIFR64.dll
[2014/05/31 11:08:01 | 000,467,232 | —- | C] (NVIDIA Corporation) – C:\Windows\SysWow64\NvIFR.dll
[2014/05/31 11:08:01 | 000,465,184 | —- | C] (NVIDIA Corporation) – C:\Windows\SysWow64\NvFBC.dll
[2014/05/31 11:08:01 | 000,266,448 | —- | C] (NVIDIA Corporation) – C:\Windows\SysNative\nvinitx.dll
[2014/05/31 11:08:01 | 000,218,592 | —- | C] (NVIDIA Corporation) – C:\Windows\SysNative\nvoglshim64.dll
[2014/05/31 11:08:01 | 000,214,448 | —- | C] (NVIDIA Corporation) – C:\Windows\SysWow64\nvinit.dll
[2014/05/31 11:08:01 | 000,194,848 | —- | C] (NVIDIA Corporation) – C:\Windows\SysNative\drivers\nvhda64v.sys
[2014/05/31 11:08:01 | 000,181,488 | —- | C] (NVIDIA Corporation) – C:\Windows\SysWow64\nvoglshim32.dll
[2014/05/31 11:08:01 | 000,031,520 | —- | C] (NVIDIA Corporation) – C:\Windows\SysNative\nvhdap64.dll
[2014/05/31 11:05:49 | 000,000,000 | —D | C] – C:\Users\phuong\AppData\Roaming\Macromedia
[2014/05/31 11:05:28 | 000,000,000 | —D | C] – C:\Users\phuong\AppData\Roaming\Adobe
[2014/05/31 11:05:18 | 000,692,400 | —- | C] (Adobe Systems Incorporated) – C:\Windows\SysWow64\FlashPlayerApp.exe
[2014/05/31 11:05:18 | 000,070,832 | —- | C] (Adobe Systems Incorporated) – C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2014/05/31 11:05:18 | 000,000,000 | —D | C] – C:\Windows\SysWow64\Macromed
[2014/05/31 11:05:14 | 000,000,000 | —D | C] – C:\Windows\SysNative\Macromed
[2014/05/31 11:00:37 | 000,000,000 | —D | C] – C:\ProgramData\NVIDIA Corporation
[2014/05/31 11:00:35 | 000,000,000 | —D | C] – C:\Program Files (x86)\NVIDIA Corporation
[2014/05/31 10:51:57 | 000,000,000 | -HSD | C] – C:\ProgramData\Microsoft NET Framework 4.0
[2014/05/31 10:48:46 | 000,000,000 | —D | C] – C:\Program Files\NVIDIA Corporation
[2014/05/31 10:48:13 | 001,112,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdpcorets.dll
[2014/05/31 10:48:13 | 001,031,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdpcore.dll
[2014/05/31 10:48:13 | 000,826,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rdpcore.dll
[2014/05/31 10:41:37 | 000,000,000 | -HSD | C] – C:\Windows\SysWow64\Microsoft NET Framework 4.0
[2014/05/31 10:41:32 | 000,000,000 | —D | C] – C:\Users\phuong\AppData\Roaming\Microsoft FxCop
[2014/05/31 10:41:15 | 000,000,000 | —D | C] – C:\Users\phuong\AppData\Roaming\IDM
[2014/05/31 10:41:15 | 000,000,000 | —D | C] – C:\ProgramData\IDM
[2014/05/31 10:41:14 | 000,000,000 | —D | C] – C:\Users\phuong\AppData\Roaming\DMCache
[2014/05/31 10:41:13 | 000,000,000 | —D | C] – C:\Users\phuong\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
[2014/05/31 10:41:11 | 000,000,000 | —D | C] – C:\Program Files (x86)\Internet Download Manager
[2014/05/31 10:40:49 | 002,622,464 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wucltux.dll
[2014/05/31 10:40:49 | 000,057,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wuauclt.exe
[2014/05/31 10:40:49 | 000,044,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wups2.dll
[2014/05/31 10:40:39 | 000,701,976 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wuapi.dll
[2014/05/31 10:40:39 | 000,099,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wudriver.dll
[2014/05/31 10:40:39 | 000,038,424 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wups.dll
[2014/05/31 10:40:37 | 000,053,248 | —- | C] (Windows XP Bundled build C-Centric Single User) – C:\Windows\SysWow64\CSVer.dll
[2014/05/31 10:40:37 | 000,000,000 | —D | C] – C:\Program Files (x86)\Intel
[2014/05/31 10:40:34 | 000,186,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wuwebv.dll
[2014/05/31 10:40:34 | 000,036,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wuapp.exe
[2014/05/31 10:40:29 | 000,000,000 | —D | C] – C:\Intel
[2014/05/31 10:39:28 | 000,805,088 | —- | C] (Realtek                                            ) – C:\Windows\SysNative\drivers\Rt64win7.sys
[2014/05/31 10:39:27 | 000,107,552 | —- | C] (Realtek Semiconductor Corporation) – C:\Windows\SysNative\RTNUninst64.dll
[2014/05/31 10:39:27 | 000,074,344 | —- | C] (Realtek Semiconductor Corporation) – C:\Windows\SysNative\RtNicProp64.dll
[2014/05/31 10:39:07 | 000,000,000 | —D | C] – C:\MSI
[2014/05/31 10:28:51 | 000,000,000 | —D | C] – C:\Windows\SysWow64\RTCOM
[2014/05/31 10:28:51 | 000,000,000 | —D | C] – C:\Program Files\Realtek
[2014/05/31 10:28:36 | 028,280,832 | —- | C] (Realtek Semiconductor Corp.) – C:\Windows\SysNative\RCoRes64.dat
[2014/05/31 10:28:36 | 014,035,712 | —- | C] (Waves Audio Ltd.) – C:\Windows\SysNative\MaxxAudioRealtek64.dll
[2014/05/31 10:28:36 | 009,123,608 | —- | C] (Waves Audio Ltd.) – C:\Windows\SysNative\MaxxAudioVnA64.dll
[2014/05/31 10:28:36 | 007,164,176 | —- | C] (Dolby Laboratories) – C:\Windows\SysNative\R4EEP64A.dll
[2014/05/31 10:28:36 | 004,810,008 | —- | C] (ASUSTeKcomputer.Inc) – C:\Windows\SysNative\RTKSMlfx.dll
[2014/05/31 10:28:36 | 003,760,856 | —- | C] (Realtek Semiconductor Corp.) – C:\Windows\SysNative\RtkAPO64.dll
[2014/05/31 10:28:36 | 003,138,304 | —- | C] (Waves Audio Ltd.) – C:\Windows\SysNative\MaxxAudioVnN64.dll
[2014/05/31 10:28:36 | 002,795,224 | —- | C] (Realtek Semiconductor Corp.) – C:\Windows\SysNative\RtPgEx64.dll
[2014/05/31 10:28:36 | 002,103,040 | —- | C] (Waves Audio Ltd.) – C:\Windows\SysNative\WavesGUILib64.dll
[2014/05/31 10:28:36 | 002,032,896 | —- | C] (Waves Audio Ltd.) – C:\Windows\SysNative\MaxxAudioEQ64.dll
[2014/05/31 10:28:36 | 001,903,872 | —- | C] (Waves Audio Ltd.) – C:\Windows\SysNative\MaxxAudioRealtek264.dll
[2014/05/31 10:28:36 | 001,662,024 | —- | C] (Realtek Semiconductor Corp.) – C:\Windows\SysNative\RTSnMg64.cpl
[2014/05/31 10:28:36 | 001,361,336 | —- | C] (TOSHIBA Corporation) – C:\Windows\SysNative\tosade.dll
[2014/05/31 10:28:36 | 001,284,680 | —- | C] (Realtek Semiconductor Corp.) – C:\Windows\SysNative\RTCOM64.dll
[2014/05/31 10:28:36 | 001,004,248 | —- | C] (Realtek Semiconductor Corp.) – C:\Windows\SysNative\RtkApi64.dll
[2014/05/31 10:28:36 | 000,947,760 | —- | C] (Sony Corporation) – C:\Windows\SysNative\SFSS_APO.dll
[2014/05/31 10:28:36 | 000,920,320 | —- | C] (Waves Audio Ltd.) – C:\Windows\SysNative\MaxxAudioAPOShell64.dll
[2014/05/31 10:28:36 | 000,906,800 | —- | C] (Sony Corporation) – C:\Windows\SysNative\MISS_APO.dll
[2014/05/31 10:28:36 | 000,858,032 | —- | C] (TOSHIBA Corporation) – C:\Windows\SysNative\tossaeapo64.dll
[2014/05/31 10:28:36 | 000,836,544 | —- | C] (TOSHIBA Corporation) – C:\Windows\SysNative\tadefxapo264.dll
[2014/05/31 10:28:36 | 000,791,808 | —- | C] (SRS Labs, Inc.) – C:\Windows\SysNative\slcnt64.dll
[2014/05/31 10:28:36 | 000,758,104 | —- | C] (A-Volute) – C:\Windows\SysNative\RTKSMSettingsIPC.dll
[2014/05/31 10:28:36 | 000,722,688 | —- | C] (Waves Audio Ltd.) – C:\Windows\SysNative\MaxxAudioAPO5064.dll
[2014/05/31 10:28:36 | 000,633,088 | —- | C] (SRS Labs, Inc.) – C:\Windows\SysNative\sltech64.dll
[2014/05/31 10:28:36 | 000,613,448 | —- | C] (Realtek Semiconductor Corp.) – C:\Windows\SysNative\RtDataProc64.dll
[2014/05/31 10:28:36 | 000,612,728 | —- | C] (Waves Audio Ltd.) – C:\Windows\SysNative\MaxxAudioAPO4064.dll
[2014/05/31 10:28:36 | 000,569,256 | —- | C] (TOSHIBA Corporation) – C:\Windows\SysNative\tosasfapo64.dll
[2014/05/31 10:28:36 | 000,547,784 | —- | C] (Waves Audio Ltd.) – C:\Windows\SysNative\MaxxVoiceAPO2064.dll
[2014/05/31 10:28:36 | 000,521,472 | —- | C] (SRS Labs, Inc.) – C:\Windows\SysNative\sl3apo64.dll
[2014/05/31 10:28:36 | 000,518,896 | —- | C] (SRS Labs, Inc.) – C:\Windows\SysNative\SRSTSX64.dll
[2014/05/31 10:28:36 | 000,434,960 | —- | C] (Dolby Laboratories) – C:\Windows\SysNative\R4EED64A.dll
[2014/05/31 10:28:36 | 000,395,208 | —- | C] (Waves Audio Ltd.) – C:\Windows\SysNative\MaxxAudioAPO30.dll
[2014/05/31 10:28:36 | 000,394,616 | —- | C] (Waves Audio Ltd.) – C:\Windows\SysNative\MaxxVolumeSDAPO.dll
[2014/05/31 10:28:36 | 000,375,128 | —- | C] (Dolby Laboratories, Inc.) – C:\Windows\SysNative\RTEEP64A.dll
[2014/05/31 10:28:36 | 000,331,880 | —- | C] (Realtek Semiconductor Corp.) – C:\Windows\SysNative\RtlCPAPI64.dll
[2014/05/31 10:28:36 | 000,310,104 | —- | C] (Dolby Laboratories, Inc.) – C:\Windows\SysNative\RP3DHT64.dll
[2014/05/31 10:28:36 | 000,310,104 | —- | C] (Dolby Laboratories, Inc.) – C:\Windows\SysNative\RP3DAA64.dll
[2014/05/31 10:28:36 | 000,221,024 | —- | C] (Synopsys, Inc.) – C:\Windows\SysNative\SFNHK64.dll
[2014/05/31 10:28:36 | 000,213,760 | —- | C] (TODO: ) – C:\Windows\SysNative\slprp64.dll
[2014/05/31 10:28:36 | 000,211,184 | —- | C] (SRS Labs, Inc.) – C:\Windows\SysNative\SRSTSH64.dll
[2014/05/31 10:28:36 | 000,204,120 | —- | C] (Dolby Laboratories, Inc.) – C:\Windows\SysNative\RTEED64A.dll
[2014/05/31 10:28:36 | 000,198,896 | —- | C] (SRS Labs, Inc.) – C:\Windows\SysNative\SRSHP64.dll
[2014/05/31 10:28:36 | 000,155,888 | —- | C] (SRS Labs, Inc.) – C:\Windows\SysNative\SRSWOW64.dll
[2014/05/31 10:28:36 | 000,149,608 | —- | C] (Realtek Semiconductor Corp.) – C:\Windows\SysNative\RtkCfg64.dll
[2014/05/31 10:28:36 | 000,148,912 | —- | C] (TOSHIBA Corporation) – C:\Windows\SysNative\toseaeapo64.dll
[2014/05/31 10:28:36 | 000,148,416 | —- | C] (TOSHIBA Corporation) – C:\Windows\SysNative\tadefxapo.dll
[2014/05/31 10:28:36 | 000,147,160 | —- | C] (Realtek Semiconductor Corp.) – C:\Windows\SysNative\RCoInstII64.dll
[2014/05/31 10:28:36 | 000,141,584 | —- | C] (Dolby Laboratories) – C:\Windows\SysNative\R4EEL64A.dll
[2014/05/31 10:28:36 | 000,124,176 | —- | C] (Dolby Laboratories) – C:\Windows\SysNative\R4EEA64A.dll
[2014/05/31 10:28:36 | 000,101,208 | —- | C] (Dolby Laboratories, Inc.) – C:\Windows\SysNative\RTEEL64A.dll
[2014/05/31 10:28:36 | 000,081,248 | —- | C] (Synopsys, Inc.) – C:\Windows\SysNative\SFCOM64.dll
[2014/05/31 10:28:36 | 000,078,688 | —- | C] (Synopsys, Inc.) – C:\Windows\SysNative\SFAPO64.dll
[2014/05/31 10:28:36 | 000,078,680 | —- | C] (Dolby Laboratories, Inc.) – C:\Windows\SysNative\RTEEG64A.dll
[2014/05/31 10:28:36 | 000,075,024 | —- | C] (Dolby Laboratories) – C:\Windows\SysNative\R4EEG64A.dll
[2014/05/31 10:28:36 | 000,074,064 | —- | C] (Virage Logic Corporation / Sonic Focus) – C:\Windows\SysWow64\SFCOM.dll
[2014/05/31 10:28:36 | 000,065,944 | —- | C] (TOSHIBA CORPORATION.) – C:\Windows\SysNative\tepeqapo64.dll
[2014/05/31 10:28:36 | 000,014,952 | —- | C] (Realtek Semiconductor Corp.) – C:\Windows\SysNative\RtkCoLDR64.dll
[2014/05/31 10:28:35 | 002,736,160 | —- | C] (Fortemedia Corporation) – C:\Windows\SysNative\FMAPO64.dll
[2014/05/31 10:28:35 | 001,756,264 | —- | C] (DTS) – C:\Windows\SysNative\DTSS2SpeakerDLL64.dll
[2014/05/31 10:28:35 | 001,568,360 | —- | C] (DTS) – C:\Windows\SysNative\DTSS2HeadphoneDLL64.dll
[2014/05/31 10:28:35 | 001,486,952 | —- | C] (DTS) – C:\Windows\SysNative\DTSBoostDLL64.dll
[2014/05/31 10:28:35 | 000,728,680 | —- | C] (DTS) – C:\Windows\SysNative\DTSBassEnhancementDLL64.dll
[2014/05/31 10:28:35 | 000,712,296 | —- | C] (DTS) – C:\Windows\SysNative\DTSSymmetryDLL64.dll
[2014/05/31 10:28:35 | 000,693,352 | —- | C] (DTS) – C:\Windows\SysNative\DTSVoiceClarityDLL64.dll
[2014/05/31 10:28:35 | 000,603,984 | —- | C] (Knowles Acoustics ) – C:\Windows\SysNative\KAAPORT64.dll
[2014/05/31 10:28:35 | 000,501,192 | —- | C] (DTS) – C:\Windows\SysNative\DTSU2PLFX64.dll
[2014/05/31 10:28:35 | 000,491,112 | —- | C] (DTS) – C:\Windows\SysNative\DTSNeoPCDLL64.dll
[2014/05/31 10:28:35 | 000,487,368 | —- | C] (DTS) – C:\Windows\SysNative\DTSU2PGFX64.dll
[2014/05/31 10:28:35 | 000,432,744 | —- | C] (DTS) – C:\Windows\SysNative\DTSLimiterDLL64.dll
[2014/05/31 10:28:35 | 000,428,648 | —- | C] (DTS) – C:\Windows\SysNative\DTSGainCompensatorDLL64.dll
[2014/05/31 10:28:35 | 000,415,688 | —- | C] (DTS) – C:\Windows\SysNative\DTSU2PREC64.dll
[2014/05/31 10:28:35 | 000,318,808 | —- | C] (Waves Audio Ltd.) – C:\Windows\SysNative\MaxxAudioAPO20.dll
[2014/05/31 10:28:35 | 000,242,792 | —- | C] (DTS) – C:\Windows\SysNative\DTSLFXAPO64.dll
[2014/05/31 10:28:35 | 000,242,792 | —- | C] (DTS) – C:\Windows\SysNative\DTSGFXAPO64.dll
[2014/05/31 10:28:35 | 000,241,768 | —- | C] (DTS) – C:\Windows\SysNative\DTSGFXAPONS64.dll
[2014/05/31 10:28:35 | 000,208,072 | —- | C] (Andrea Electronics Corporation) – C:\Windows\SysNative\AERTAC64.dll
[2014/05/31 10:28:35 | 000,110,592 | —- | C] (Real Sound Lab SIA) – C:\Windows\SysNative\CONEQMSAPOGUILibrary.dll
[2014/05/31 10:28:35 | 000,108,640 | —- | C] (Andrea Electronics Corporation) – C:\Windows\SysNative\AERTAR64.dll
[2014/05/31 10:28:35 | 000,000,000 | -H-D | C] – C:\Program Files (x86)\InstallShield Installation Information
[2014/05/31 10:28:35 | 000,000,000 | —D | C] – C:\Program Files (x86)\Realtek
[2014/05/31 10:28:34 | 000,000,000 | -H-D | C] – C:\Program Files (x86)\Temp
[2014/05/31 10:28:33 | 002,080,472 | —- | C] (Realtek Semiconductor Corp.) – C:\Windows\RtlExUpd.dll
[2014/05/31 10:28:32 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\InstallShield
[2014/05/31 10:28:13 | 000,000,000 | —D | C] – C:\Users\phuong\AppData\Roaming\WinRAR
[2014/05/31 10:25:43 | 000,000,000 | —D | C] – C:\Users\phuong\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
[2014/05/31 10:25:43 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
[2014/05/31 10:25:42 | 000,000,000 | —D | C] – C:\Program Files\WinRAR
[2014/05/31 10:24:27 | 000,000,000 | —D | C] – C:\Users\phuong\AppData\Local\Diagnostics
[2014/05/31 10:23:21 | 000,000,000 | R–D | C] – C:\Users\phuong\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
[2014/05/31 10:23:21 | 000,000,000 | R–D | C] – C:\Users\phuong\Searches
[2014/05/31 10:23:21 | 000,000,000 | R–D | C] – C:\Users\phuong\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
[2014/05/31 10:23:21 | 000,000,000 | -H-D | C] – C:\Users\phuong\Application Data\Microsoft\Internet Explorer\Quick Launch\User Pinned
[2014/05/31 10:23:13 | 000,000,000 | —D | C] – C:\Users\phuong\AppData\Roaming\Identities
[2014/05/31 10:23:11 | 000,000,000 | R–D | C] – C:\Users\phuong\Contacts
[2014/05/31 10:23:09 | 000,000,000 | —D | C] – C:\Users\phuong\AppData\Local\VirtualStore
[2014/05/31 10:23:00 | 000,000,000 | -HSD | C] – C:\Users\phuong\AppData\Local\Temporary Internet Files
[2014/05/31 10:23:00 | 000,000,000 | -HSD | C] – C:\Users\phuong\Templates
[2014/05/31 10:23:00 | 000,000,000 | -HSD | C] – C:\Users\phuong\Start Menu
[2014/05/31 10:23:00 | 000,000,000 | -HSD | C] – C:\Users\phuong\SendTo
[2014/05/31 10:23:00 | 000,000,000 | -HSD | C] – C:\Users\phuong\Recent
[2014/05/31 10:23:00 | 000,000,000 | -HSD | C] – C:\Users\phuong\PrintHood
[2014/05/31 10:23:00 | 000,000,000 | -HSD | C] – C:\Users\phuong\NetHood
[2014/05/31 10:23:00 | 000,000,000 | -HSD | C] – C:\Users\phuong\Documents\My Videos
[2014/05/31 10:23:00 | 000,000,000 | -HSD | C] – C:\Users\phuong\Documents\My Pictures
[2014/05/31 10:23:00 | 000,000,000 | -HSD | C] – C:\Users\phuong\Documents\My Music
[2014/05/31 10:23:00 | 000,000,000 | -HSD | C] – C:\Users\phuong\My Documents
[2014/05/31 10:23:00 | 000,000,000 | -HSD | C] – C:\Users\phuong\Local Settings
[2014/05/31 10:23:00 | 000,000,000 | -HSD | C] – C:\Users\phuong\AppData\Local\History
[2014/05/31 10:23:00 | 000,000,000 | -HSD | C] – C:\Users\phuong\Cookies
[2014/05/31 10:23:00 | 000,000,000 | -HSD | C] – C:\Users\phuong\Application Data
[2014/05/31 10:23:00 | 000,000,000 | -HSD | C] – C:\Users\phuong\AppData\Local\Application Data
[2014/05/31 10:22:59 | 000,000,000 | –SD | C] – C:\Users\phuong\AppData\Roaming\Microsoft
[2014/05/31 10:22:59 | 000,000,000 | R–D | C] – C:\Users\phuong\Videos
[2014/05/31 10:22:59 | 000,000,000 | R–D | C] – C:\Users\phuong\Saved Games
[2014/05/31 10:22:59 | 000,000,000 | R–D | C] – C:\Users\phuong\Pictures
[2014/05/31 10:22:59 | 000,000,000 | R–D | C] – C:\Users\phuong\Music
[2014/05/31 10:22:59 | 000,000,000 | R–D | C] – C:\Users\phuong\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
[2014/05/31 10:22:59 | 000,000,000 | R–D | C] – C:\Users\phuong\Links
[2014/05/31 10:22:59 | 000,000,000 | R–D | C] – C:\Users\phuong\Favorites
[2014/05/31 10:22:59 | 000,000,000 | R–D | C] – C:\Users\phuong\Downloads
[2014/05/31 10:22:59 | 000,000,000 | R–D | C] – C:\Users\phuong\Documents
[2014/05/31 10:22:59 | 000,000,000 | R–D | C] – C:\Users\phuong\Desktop
[2014/05/31 10:22:59 | 000,000,000 | R–D | C] – C:\Users\phuong\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
[2014/05/31 10:22:59 | 000,000,000 | -H-D | C] – C:\Users\phuong\AppData
[2014/05/31 10:22:59 | 000,000,000 | —D | C] – C:\Users\phuong\AppData\Local\Temp
[2014/05/31 10:22:59 | 000,000,000 | —D | C] – C:\Users\phuong\AppData\Local\Microsoft
[2014/05/31 10:22:59 | 000,000,000 | —D | C] – C:\Users\phuong\AppData\Roaming\Media Center Programs
[2014/05/31 10:22:54 | 000,000,000 | -HSD | C] – C:\Recovery
[2014/05/31 10:22:51 | 000,000,000 | —D | C] – C:\Windows\SoftwareDistribution
[2014/05/31 09:06:31 | 000,000,000 | —D | C] – C:\Users\phuong\Desktop\Tai lieu
[2014/05/31 09:06:31 | 000,000,000 | —D | C] – C:\Users\phuong\Desktop\Quy Dinh
[2014/05/31 09:03:46 | 000,000,000 | —D | C] – C:\Users\phuong\Desktop\PR
[2014/05/31 09:03:44 | 000,000,000 | —D | C] – C:\Users\phuong\Desktop\Nghi dinh
[2014/05/31 09:03:10 | 000,000,000 | —D | C] – C:\Users\phuong\Desktop\Music
[2014/05/31 09:03:01 | 000,000,000 | —D | C] – C:\Users\phuong\Desktop\JxOnlinePhoto
[2014/05/31 09:01:33 | 000,000,000 | —D | C] – C:\Users\phuong\Desktop\HTAH
[2014/05/31 08:59:37 | 000,000,000 | —D | C] – C:\Users\phuong\Desktop\Anh
 
========== Files - Modified Within 30 Days ==========
 
[2014/06/02 11:48:54 | 000,221,676 | —- | M] () – C:\Users\phuong\AppData\Roaming\msconfig.ini
[2014/06/02 11:39:09 | 000,871,482 | —- | M] () – C:\Users\phuong\Desktop\cbdm intro.png
[2014/06/02 11:30:50 | 000,000,715 | —- | M] () – C:\Users\phuong\Desktop\VLTK.lnk
[2014/06/02 10:58:22 | 000,002,115 | —- | M] () – C:\Windows\epplauncher.mif
[2014/06/02 10:18:33 | 000,001,674 | —- | M] () – C:\Users\phuong\Desktop\Microsoft Word 2010.lnk
[2014/06/02 09:55:58 | 000,001,468 | —- | M] () – C:\Windows\tasks\592c20d5-3c39-4c7f-b048-7eaf4b6039f6-5.job
[2014/06/02 09:55:56 | 000,001,384 | —- | M] () – C:\Windows\tasks\592c20d5-3c39-4c7f-b048-7eaf4b6039f6-1.job
[2014/06/02 09:55:56 | 000,001,368 | —- | M] () – C:\Windows\tasks\592c20d5-3c39-4c7f-b048-7eaf4b6039f6-2.job
[2014/06/02 09:55:53 | 000,001,460 | —- | M] () – C:\Windows\tasks\3b470f14-c807-4517-8a59-893bfcee1cd0-5.job
[2014/06/02 09:55:51 | 000,001,336 | —- | M] () – C:\Windows\tasks\3b470f14-c807-4517-8a59-893bfcee1cd0-2.job
[2014/06/02 09:55:50 | 000,001,366 | —- | M] () – C:\Windows\tasks\3b470f14-c807-4517-8a59-893bfcee1cd0-1.job
[2014/06/02 09:55:47 | 000,002,208 | —- | M] () – C:\Windows\tasks\592c20d5-3c39-4c7f-b048-7eaf4b6039f6-4.job
[2014/06/02 09:55:45 | 000,001,390 | —- | M] () – C:\Windows\tasks\592c20d5-3c39-4c7f-b048-7eaf4b6039f6-6.job
[2014/06/02 09:55:45 | 000,001,318 | —- | M] () – C:\Windows\tasks\592c20d5-3c39-4c7f-b048-7eaf4b6039f6-7.job
[2014/06/02 09:55:43 | 000,000,912 | —- | M] () – C:\Windows\tasks\globalUpdateUpdateTaskMachineCore1cf7e0e2568cfca.job
[2014/06/02 09:55:39 | 000,002,096 | —- | M] () – C:\Windows\tasks\3b470f14-c807-4517-8a59-893bfcee1cd0-4.job
[2014/06/02 09:55:37 | 000,001,372 | —- | M] () – C:\Windows\tasks\3b470f14-c807-4517-8a59-893bfcee1cd0-6.job
[2014/06/02 09:55:37 | 000,001,308 | —- | M] () – C:\Windows\tasks\3b470f14-c807-4517-8a59-893bfcee1cd0-7.job
[2014/06/02 09:55:36 | 000,003,452 | —- | M] () – C:\Windows\tasks\592c20d5-3c39-4c7f-b048-7eaf4b6039f6-3.job
[2014/06/02 09:55:26 | 000,003,464 | —- | M] () – C:\Windows\tasks\3b470f14-c807-4517-8a59-893bfcee1cd0-3.job
[2014/06/02 09:54:47 | 000,001,378 | —- | M] () – C:\Users\Public\Desktop\Google Chrome.lnk
[2014/06/02 09:54:47 | 000,001,167 | —- | M] () – C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2014/06/02 09:35:20 | 000,000,822 | —- | M] () – C:\Users\Public\Desktop\CCleaner.lnk
[2014/06/02 09:34:06 | 000,021,072 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2014/06/02 09:34:06 | 000,021,072 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2014/06/02 09:32:34 | 000,782,154 | —- | M] () – C:\Windows\SysNative\PerfStringBackup.INI
[2014/06/02 09:32:34 | 000,662,484 | —- | M] () – C:\Windows\SysNative\perfh009.dat
[2014/06/02 09:32:34 | 000,121,352 | —- | M] () – C:\Windows\SysNative\perfc009.dat
[2014/06/02 09:31:36 | 000,001,127 | —- | M] () – C:\Users\phuong\Application Data\Microsoft\Internet Explorer\Quick Launch\Microsoft Outlook.lnk
[2014/06/02 09:27:33 | 000,002,515 | —- | M] () – C:\Users\Public\Desktop\Skype.lnk
[2014/06/02 09:26:23 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2014/06/02 09:26:19 | 3183,759,360 | -HS- | M] () – C:\hiberfil.sys
[2014/06/02 09:00:21 | 000,794,900 | —- | M] () – C:\Windows\SysWow64\PerfStringBackup.INI
[2014/06/02 08:56:12 | 000,414,656 | —- | M] () – C:\Windows\SysNative\FNTCACHE.DAT
[2014/06/02 08:54:36 | 000,000,266 | —- | M] () – C:\Windows\tasks\AutoKMS.job
[2014/06/02 08:48:52 | 000,002,951 | —- | M] () – C:\Users\phuong\Desktop\Microsoft Excel 2010.lnk
[2014/06/02 08:32:47 | 000,000,424 | —- | M] () – C:\Windows\tasks\{EA88835C-370A-433A-8F54-5ECA37484495}.job
[2014/06/02 08:32:14 | 000,000,424 | —- | M] () – C:\Windows\tasks\{33D82152-767F-40BA-B0F5-7D2A987B06DF}.job
[2014/06/02 07:59:37 | 000,002,275 | —- | M] () – C:\Users\phuong\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2014/06/02 07:56:19 | 000,000,000 | -H– | M] () – C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2014/06/02 07:54:37 | 000,000,894 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2014/06/01 01:12:19 | 000,008,192 | RHS- | M] () – C:\BOOTSECT.BAK
[2014/06/01 00:15:40 | 000,116,385 | —- | M] () – C:\Windows\SysWow64\license.rtf
[2014/06/01 00:15:40 | 000,116,385 | —- | M] () – C:\Windows\SysNative\license.rtf
[2014/05/31 11:20:11 | 000,000,266 | —- | M] () – C:\Windows\tasks\elbyExecuteWithUAC.job
[2014/05/31 11:20:09 | 000,001,246 | —- | M] () – C:\Users\Public\Desktop\Virtual CloneDrive.lnk
[2014/05/31 11:19:02 | 000,000,748 | —- | M] () – C:\Users\Public\Desktop\UniKey.lnk
[2014/05/31 11:17:16 | 000,206,312 | RHS- | M] () – C:\XELDZ
[2014/05/31 11:17:10 | 000,383,786 | RHS- | M] () – C:\bootmgr
[2014/05/31 11:05:19 | 000,000,830 | —- | M] () – C:\Windows\tasks\Adobe Flash Player Updater.job
[2014/05/31 11:05:18 | 000,692,400 | —- | M] (Adobe Systems Incorporated) – C:\Windows\SysWow64\FlashPlayerApp.exe
[2014/05/31 11:05:18 | 000,070,832 | —- | M] (Adobe Systems Incorporated) – C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2014/05/31 10:41:14 | 000,001,041 | —- | M] () – C:\Users\phuong\Desktop\Internet Download Manager.lnk
[2014/05/31 10:23:58 | 000,001,433 | —- | M] () – C:\Users\phuong\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2014/05/31 08:29:40 | 001,483,474 | —- | M] () – C:\Users\phuong\Desktop\soft.png
[2014/05/10 09:22:24 | 030,052,352 | —- | M] () – C:\Users\phuong\Desktop\main.db
 
========== Files Created - No Company Name ==========
 
[2014/06/02 11:39:08 | 000,871,482 | —- | C] () – C:\Users\phuong\Desktop\cbdm intro.png
[2014/06/02 11:30:50 | 000,000,715 | —- | C] () – C:\Users\phuong\Desktop\VLTK.lnk
[2014/06/02 10:58:22 | 000,002,115 | —- | C] () – C:\Windows\epplauncher.mif
[2014/06/02 10:18:33 | 000,001,674 | —- | C] () – C:\Users\phuong\Desktop\Microsoft Word 2010.lnk
[2014/06/02 09:55:58 | 000,001,468 | —- | C] () – C:\Windows\tasks\592c20d5-3c39-4c7f-b048-7eaf4b6039f6-5.job
[2014/06/02 09:55:56 | 000,001,384 | —- | C] () – C:\Windows\tasks\592c20d5-3c39-4c7f-b048-7eaf4b6039f6-1.job
[2014/06/02 09:55:56 | 000,001,368 | —- | C] () – C:\Windows\tasks\592c20d5-3c39-4c7f-b048-7eaf4b6039f6-2.job
[2014/06/02 09:55:53 | 000,001,460 | —- | C] () – C:\Windows\tasks\3b470f14-c807-4517-8a59-893bfcee1cd0-5.job
[2014/06/02 09:55:51 | 000,001,336 | —- | C] () – C:\Windows\tasks\3b470f14-c807-4517-8a59-893bfcee1cd0-2.job
[2014/06/02 09:55:50 | 000,001,366 | —- | C] () – C:\Windows\tasks\3b470f14-c807-4517-8a59-893bfcee1cd0-1.job
[2014/06/02 09:55:47 | 000,002,208 | —- | C] () – C:\Windows\tasks\592c20d5-3c39-4c7f-b048-7eaf4b6039f6-4.job
[2014/06/02 09:55:45 | 000,001,390 | —- | C] () – C:\Windows\tasks\592c20d5-3c39-4c7f-b048-7eaf4b6039f6-6.job
[2014/06/02 09:55:45 | 000,001,318 | —- | C] () – C:\Windows\tasks\592c20d5-3c39-4c7f-b048-7eaf4b6039f6-7.job
[2014/06/02 09:55:43 | 000,000,912 | —- | C] () – C:\Windows\tasks\globalUpdateUpdateTaskMachineCore1cf7e0e2568cfca.job
[2014/06/02 09:55:39 | 000,002,096 | —- | C] () – C:\Windows\tasks\3b470f14-c807-4517-8a59-893bfcee1cd0-4.job
[2014/06/02 09:55:37 | 000,001,372 | —- | C] () – C:\Windows\tasks\3b470f14-c807-4517-8a59-893bfcee1cd0-6.job
[2014/06/02 09:55:37 | 000,001,308 | —- | C] () – C:\Windows\tasks\3b470f14-c807-4517-8a59-893bfcee1cd0-7.job
[2014/06/02 09:55:36 | 000,003,452 | —- | C] () – C:\Windows\tasks\592c20d5-3c39-4c7f-b048-7eaf4b6039f6-3.job
[2014/06/02 09:55:26 | 000,003,464 | —- | C] () – C:\Windows\tasks\3b470f14-c807-4517-8a59-893bfcee1cd0-3.job
[2014/06/02 09:35:20 | 000,000,822 | —- | C] () – C:\Users\Public\Desktop\CCleaner.lnk
[2014/06/02 09:31:35 | 000,001,127 | —- | C] () – C:\Users\phuong\Application Data\Microsoft\Internet Explorer\Quick Launch\Microsoft Outlook.lnk
[2014/06/02 08:58:47 | 000,002,515 | —- | C] () – C:\Users\Public\Desktop\Skype.lnk
[2014/06/02 08:54:36 | 000,000,266 | —- | C] () – C:\Windows\tasks\AutoKMS.job
[2014/06/02 08:48:52 | 000,002,951 | —- | C] () – C:\Users\phuong\Desktop\Microsoft Excel 2010.lnk
[2014/06/02 08:32:47 | 000,000,424 | —- | C] () – C:\Windows\tasks\{EA88835C-370A-433A-8F54-5ECA37484495}.job
[2014/06/02 08:32:14 | 000,000,424 | —- | C] () – C:\Windows\tasks\{33D82152-767F-40BA-B0F5-7D2A987B06DF}.job
[2014/06/02 07:56:19 | 000,000,000 | -H– | C] () – C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2014/06/02 07:55:23 | 000,002,275 | —- | C] () – C:\Users\phuong\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2014/06/02 07:55:23 | 000,001,378 | —- | C] () – C:\Users\Public\Desktop\Google Chrome.lnk
[2014/06/02 07:54:37 | 000,000,894 | —- | C] () – C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2014/06/02 07:48:43 | 000,001,185 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
[2014/06/02 07:48:43 | 000,001,167 | —- | C] () – C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2014/06/01 01:12:19 | 000,008,192 | RHS- | C] () – C:\BOOTSECT.BAK
[2014/06/01 01:12:18 | 000,383,786 | RHS- | C] () – C:\bootmgr
[2014/06/01 00:15:36 | 000,001,345 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
[2014/06/01 00:15:27 | 000,001,326 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
[2014/06/01 00:13:05 | 3183,759,360 | -HS- | C] () – C:\hiberfil.sys
[2014/05/31 11:20:11 | 000,000,266 | —- | C] () – C:\Windows\tasks\elbyExecuteWithUAC.job
[2014/05/31 11:20:09 | 000,001,246 | —- | C] () – C:\Users\Public\Desktop\Virtual CloneDrive.lnk
[2014/05/31 11:19:02 | 000,000,748 | —- | C] () – C:\Users\Public\Desktop\UniKey.lnk
[2014/05/31 11:15:07 | 000,206,312 | RHS- | C] () – C:\XELDZ
[2014/05/31 11:11:58 | 003,253,909 | —- | C] () – C:\Windows\SysNative\nvcoproc.bin
[2014/05/31 11:10:57 | 000,794,900 | —- | C] () – C:\Windows\SysWow64\PerfStringBackup.INI
[2014/05/31 11:05:19 | 000,000,830 | —- | C] () – C:\Windows\tasks\Adobe Flash Player Updater.job
[2014/05/31 10:42:01 | 000,221,464 | —- | C] () – C:\Users\phuong\AppData\Roaming\msconfig.ini
[2014/05/31 10:41:14 | 000,001,041 | —- | C] () – C:\Users\phuong\Desktop\Internet Download Manager.lnk
[2014/05/31 10:28:36 | 005,448,460 | —- | C] () – C:\Windows\SysNative\drivers\rtvienna.dat
[2014/05/31 10:28:36 | 000,615,249 | —- | C] () – C:\Windows\SysNative\drivers\RTAIODAT.DAT
[2014/05/31 10:28:35 | 000,109,848 | —- | C] () – C:\Windows\SysNative\AcpiServiceVnA64.dll
[2014/05/31 10:23:58 | 000,001,433 | —- | C] () – C:\Users\phuong\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2014/05/31 10:23:25 | 000,001,405 | —- | C] () – C:\Users\phuong\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
[2014/05/31 10:23:22 | 000,001,825 | —- | C] () – C:\Users\phuong\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
[2014/05/31 10:22:59 | 000,000,290 | —- | C] () – C:\Users\phuong\Application Data\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk
[2014/05/31 10:22:59 | 000,000,272 | —- | C] () – C:\Users\phuong\Application Data\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk
[2014/05/31 08:59:37 | 001,483,474 | —- | C] () – C:\Users\phuong\Desktop\soft.png
[2014/05/31 08:59:30 | 030,052,352 | —- | C] () – C:\Users\phuong\Desktop\main.db
 
========== ZeroAccess Check ==========
 
[2009/07/14 11:55:00 | 000,000,227 | RHS- | M] () – C:\Windows\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll – [2010/11/21 10:23:55 | 014,174,208 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll – [2010/11/21 10:24:02 | 012,872,192 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll – [2009/07/14 08:40:51 | 000,909,312 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll – [2010/11/21 10:24:25 | 000,606,208 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll – [2009/07/14 08:41:56 | 000,505,856 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
 
========== LOP Check ==========
 
[2014/06/02 09:26:59 | 000,000,000 | —D | M] – C:\Users\phuong\AppData\Roaming\DMCache
[2014/06/02 09:37:09 | 000,000,000 | —D | M] – C:\Users\phuong\AppData\Roaming\IDM
[2014/06/02 08:38:18 | 000,000,000 | —D | M] – C:\Users\phuong\AppData\Roaming\Stardock
 
========== Purity Check ==========
 
 
 
========== Custom Scans ==========
 
< %USERPROFILE%\..|smtmp;true;true;true /FP >
 
< %temp%\smtmp\*.* /s > >
 
< MD5 for: EXPLORER.ADML  >
[2011/04/12 15:17:31 | 000,003,695 | —- | M] () MD5=7A4C7F3CB156543113596988479CAFCE – C:\Windows\PolicyDefinitions\en-US\Explorer.adml
[2011/04/12 15:17:31 | 000,003,695 | —- | M] () MD5=7A4C7F3CB156543113596988479CAFCE – C:\Windows\winsxs\amd64_microsoft-windows-s..ouppolicy.resources_31bf3856ad364e35_6.1.7600.16385_en-us_7ef5713984067904\Explorer.adml
 
< MD5 for: EXPLORER.ADMX  >
[2009/06/11 03:53:55 | 000,003,836 | —- | M] () MD5=AD131A834808E6AFF4A3918DE05BFCF6 – C:\Windows\PolicyDefinitions\Explorer.admx
[2009/06/11 03:53:55 | 000,003,836 | —- | M] () MD5=AD131A834808E6AFF4A3918DE05BFCF6 – C:\Windows\winsxs\amd64_microsoft-windows-shell-grouppolicy_31bf3856ad364e35_6.1.7600.16385_none_71af9b5b0a86e6b7\Explorer.admx
 
< MD5 for: EXPLORER.EXE  >
[2010/11/21 10:24:25 | 002,616,320 | —- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 – C:\Windows\SysWOW64\explorer.exe
[2010/11/21 10:24:25 | 002,616,320 | —- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_ba2f56d3c4bcbafb\explorer.exe
[2010/11/21 10:24:11 | 002,872,320 | —- | M] (Microsoft Corporation) MD5=AC4C51EB24AA95B77F705AB159189E24 – C:\Windows\explorer.exe
[2010/11/21 10:24:11 | 002,872,320 | —- | M] (Microsoft Corporation) MD5=AC4C51EB24AA95B77F705AB159189E24 – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_afdaac81905bf900\explorer.exe
 
< MD5 for: EXPLORER.EXE.MUI  >
[2011/04/12 15:17:19 | 000,022,016 | —- | M] (Microsoft Corporation) MD5=4B87EEFDC8E253F846A7DFB49A8E6C70 – C:\Windows\en-US\explorer.exe.mui
[2011/04/12 15:17:19 | 000,022,016 | —- | M] (Microsoft Corporation) MD5=4B87EEFDC8E253F846A7DFB49A8E6C70 – C:\Windows\winsxs\amd64_microsoft-windows-explorer.resources_31bf3856ad364e35_6.1.7600.16385_en-us_61e778c48d52d19b\explorer.exe.mui
[2011/04/12 15:17:21 | 000,022,016 | —- | M] (Microsoft Corporation) MD5=B9F4B1CA23D60775736059D72BA48526 – C:\Windows\SysWOW64\en-US\explorer.exe.mui
[2011/04/12 15:17:21 | 000,022,016 | —- | M] (Microsoft Corporation) MD5=B9F4B1CA23D60775736059D72BA48526 – C:\Windows\winsxs\wow64_microsoft-windows-explorer.resources_31bf3856ad364e35_6.1.7600.16385_en-us_6c3c2316c1b39396\explorer.exe.mui
 
< MD5 for: EXPLORER.EXE-7A3328DA.PF  >
[2014/06/02 10:21:15 | 000,180,348 | —- | M] () MD5=0972BE7DB45E2E8457E73A736563E88B – C:\Windows\Prefetch\EXPLORER.EXE-7A3328DA.pf
 
< MD5 for: EXPLORER.EXE-F6875474.PF  >
[2014/06/02 10:21:05 | 000,031,542 | —- | M] () MD5=3BC6CEDA2B982458A52E0CBB11A422F0 – C:\Windows\Prefetch\EXPLORER.EXE-F6875474.pf
 
< MD5 for: IEXPLORE.EXE  >
[2010/11/21 10:24:43 | 000,695,056 | —- | M] (Microsoft Corporation) MD5=86257731DDB311FBC283534CC0091634 – C:\Program Files\Internet Explorer\iexplore.exe
[2010/11/21 10:24:43 | 000,695,056 | —- | M] (Microsoft Corporation) MD5=86257731DDB311FBC283534CC0091634 – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7601.17514_none_1196a9003b674a92\iexplore.exe
[2010/11/21 10:25:08 | 000,673,040 | —- | M] (Microsoft Corporation) MD5=C613E69C3B191BB02C7A191741A1D024 – C:\Program Files (x86)\Internet Explorer\iexplore.exe
[2010/11/21 10:25:08 | 000,673,040 | —- | M] (Microsoft Corporation) MD5=C613E69C3B191BB02C7A191741A1D024 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7601.17514_none_1beb53526fc80c8d\iexplore.exe
 
< MD5 for: IEXPLORE.EXE.MUI  >
[2009/07/14 09:29:20 | 000,005,120 | —- | M] (Microsoft Corporation) MD5=C29BCFB504E33FEADDFA2D0183CEF62F – C:\Program Files\Internet Explorer\en-US\iexplore.exe.mui
[2009/07/14 09:29:20 | 000,005,120 | —- | M] (Microsoft Corporation) MD5=C29BCFB504E33FEADDFA2D0183CEF62F – C:\Windows\winsxs\amd64_microsoft-windows-i..-optional.resources_31bf3856ad364e35_8.0.7601.17514_en-us_0b433e7773148b79\iexplore.exe.mui
[2009/07/14 09:05:06 | 000,005,120 | —- | M] (Microsoft Corporation) MD5=FBA4CD95930248053A2C3F43CA70B986 – C:\Program Files (x86)\Internet Explorer\en-US\iexplore.exe.mui
[2009/07/14 09:05:06 | 000,005,120 | —- | M] (Microsoft Corporation) MD5=FBA4CD95930248053A2C3F43CA70B986 – C:\Windows\winsxs\wow64_microsoft-windows-i..-optional.resources_31bf3856ad364e35_8.0.7601.17514_en-us_1597e8c9a7754d74\iexplore.exe.mui
 
< MD5 for: IEXPLORE.EXE-F6A52C86.PF  >
[2014/06/02 07:49:59 | 000,247,514 | —- | M] () MD5=99AA2602E35B4F50AFDDA64543113981 – C:\Windows\Prefetch\IEXPLORE.EXE-F6A52C86.pf
 
< MD5 for: SERVICES  >
[2009/06/11 04:00:26 | 000,017,463 | —- | M] () MD5=D9E1A01B480D961B7CF0509D597A92D6 – C:\Windows\winsxs\amd64_microsoft-windows-w..nfrastructure-other_31bf3856ad364e35_6.1.7600.16385_none_6079f415110c0210\services
 
< MD5 for: SERVICES.EXE  >
[2009/07/14 08:39:37 | 000,328,704 | —- | M] (Microsoft Corporation) MD5=24ACB7E5BE595468E3B9AA488B9B4FCB – C:\Windows\SysNative\services.exe
[2009/07/14 08:39:37 | 000,328,704 | —- | M] (Microsoft Corporation) MD5=24ACB7E5BE595468E3B9AA488B9B4FCB – C:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_2b54b20ee6fa07b1\services.exe
 
< MD5 for: SERVICES.EXE.MUI  >
[2011/04/12 15:17:17 | 000,017,408 | —- | M] (Microsoft Corporation) MD5=6507BF0DC2D1F5F32493C288EAA59277 – C:\Windows\SysNative\en-US\services.exe.mui
[2011/04/12 15:17:17 | 000,017,408 | —- | M] (Microsoft Corporation) MD5=6507BF0DC2D1F5F32493C288EAA59277 – C:\Windows\winsxs\amd64_microsoft-windows-s..ontroller.resources_31bf3856ad364e35_6.1.7600.16385_en-us_c5f238be3fa63468\services.exe.mui
 
< MD5 for: SERVICES.LNK  >
[2009/07/14 11:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Documents and Settings\All Users\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Documents and Settings\All Users\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Documents and Settings\All Users\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Documents and Settings\All Users\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Documents and Settings\All Users\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\ProgramData\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\ProgramData\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\ProgramData\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\ProgramData\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\ProgramData\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\ProgramData\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\ProgramData\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Users\All Users\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Users\All Users\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Users\All Users\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Users\All Users\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Users\All Users\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Users\All Users\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Users\All Users\Start Menu\Programs\Administrative Tools\services.lnk
File not found Unable to obtain MD5 – C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
File not found Unable to obtain MD5 – C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
 
< MD5 for: SERVICES.MOF  >
[2009/06/11 03:44:06 | 000,002,866 | —- | M] () MD5=26A11C895A7F0B6D32105EBE127D8500 – C:\Windows\SysNative\wbem\services.mof
[2009/06/11 03:44:06 | 000,002,866 | —- | M] () MD5=26A11C895A7F0B6D32105EBE127D8500 – C:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_2b54b20ee6fa07b1\services.mof
 
< MD5 for: SERVICES.MSC  >
[2011/04/12 15:17:16 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\Windows\SysNative\en-US\services.msc
[2009/06/11 03:38:36 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\Windows\SysNative\services.msc
[2011/04/12 15:17:18 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\Windows\SysWOW64\en-US\services.msc
[2009/06/11 04:21:09 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\Windows\SysWOW64\services.msc
[2011/04/12 15:17:16 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\Windows\winsxs\amd64_microsoft-windows-s..cessnapin.resources_31bf3856ad364e35_6.1.7600.16385_en-us_003408aa160fce5b\services.msc
[2009/06/11 03:38:36 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\Windows\winsxs\amd64_microsoft-windows-servicessnapin_31bf3856ad364e35_6.1.7600.16385_none_2b58d44b5f6beb8a\services.msc
[2011/04/12 15:17:18 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\Windows\winsxs\x86_microsoft-windows-s..cessnapin.resources_31bf3856ad364e35_6.1.7600.16385_en-us_a4156d265db25d25\services.msc
[2009/06/11 04:21:09 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\Windows\winsxs\x86_microsoft-windows-servicessnapin_31bf3856ad364e35_6.1.7600.16385_none_cf3a38c7a70e7a54\services.msc
 
< MD5 for: SERVICES.PTXML  >
[2009/07/14 03:16:17 | 000,001,061 | —- | M] () MD5=640D7DD61B1CFA6C96F80F68F78CDFA7 – C:\Windows\SysNative\wdi\perftrack\Services.ptxml
[2009/07/14 03:16:17 | 000,001,061 | —- | M] () MD5=640D7DD61B1CFA6C96F80F68F78CDFA7 – C:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_2b54b20ee6fa07b1\Services.ptxml
 
< MD5 for: WINLOGON.ADML  >
[2011/04/12 15:17:31 | 000,008,013 | —- | M] () MD5=CED0EAD8D152B3D0F114698DE2316C5E – C:\Windows\PolicyDefinitions\en-US\WinLogon.adml
[2011/04/12 15:17:31 | 000,008,013 | —- | M] () MD5=CED0EAD8D152B3D0F114698DE2316C5E – C:\Windows\winsxs\amd64_microsoft-windows-winlogon-adm.resources_31bf3856ad364e35_6.1.7600.16385_en-us_f0f9032ef6930070\WinLogon.adml
 
< MD5 for: WINLOGON.ADMX  >
[2009/06/11 04:04:41 | 000,005,237 | —- | M] () MD5=89D8F50E186A16C2CED3CF36DBBC0B2C – C:\Windows\PolicyDefinitions\WinLogon.admx
[2009/06/11 04:04:41 | 000,005,237 | —- | M] () MD5=89D8F50E186A16C2CED3CF36DBBC0B2C – C:\Windows\winsxs\amd64_microsoft-windows-winlogon-adm_31bf3856ad364e35_6.1.7600.16385_none_d7024e6992f3424d\WinLogon.admx
 
< MD5 for: WINLOGON.EXE  >
[2010/11/21 10:24:29 | 000,390,656 | —- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 – C:\Windows\SysNative\winlogon.exe
[2010/11/21 10:24:29 | 000,390,656 | —- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 – C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636\winlogon.exe
[2014/03/04 18:08:14 | 000,455,680 | —- | M] (Microsoft Corporation) MD5=6CE2AE073BD21C542FC2C707CAE944CC – C:\Windows\SoftwareDistribution\Download\f6446aa2f5f86c06820f4e4200db84ac\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.22616_none_ce748d1d04acf24f\winlogon.exe
[2014/03/04 16:43:50 | 000,455,168 | —- | M] (Microsoft Corporation) MD5=88AB9B72B4BF3963A0DE0820B4B0B06C – C:\Windows\SoftwareDistribution\Download\f6446aa2f5f86c06820f4e4200db84ac\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.18409_none_cdf8bf35eb848572\winlogon.exe
 
< MD5 for: WINLOGON.EXE.MUI  >
[2011/04/12 15:17:16 | 000,023,040 | —- | M] (Microsoft Corporation) MD5=34C7D2E30868EDAFB191341D963ABA5F – C:\Windows\SysNative\en-US\winlogon.exe.mui
[2011/04/12 15:17:16 | 000,023,040 | —- | M] (Microsoft Corporation) MD5=34C7D2E30868EDAFB191341D963ABA5F – C:\Windows\winsxs\amd64_microsoft-windows-winlogon.resources_31bf3856ad364e35_6.1.7601.17514_en-us_291e96fa1ab5fc7b\winlogon.exe.mui
 
< MD5 for: WINLOGON.MFL  >
[2011/04/12 15:17:17 | 000,001,080 | —- | M] () MD5=2783ED50691284F7EAE6BE9729337E1A – C:\Windows\SysNative\wbem\en-US\winlogon.mfl
[2011/04/12 15:17:17 | 000,001,080 | —- | M] () MD5=2783ED50691284F7EAE6BE9729337E1A – C:\Windows\winsxs\amd64_microsoft-windows-winlogon-mof.resources_31bf3856ad364e35_6.1.7600.16385_en-us_84afd4fd38ffd276\winlogon.mfl
 
< MD5 for: WINLOGON.MOF  >
[2009/07/14 03:30:01 | 000,003,192 | —- | M] () MD5=DF722B96F32A61783BC310FACF10240B – C:\Windows\SysNative\wbem\winlogon.mof
[2009/07/14 03:30:01 | 000,003,192 | —- | M] () MD5=DF722B96F32A61783BC310FACF10240B – C:\Windows\winsxs\amd64_microsoft-windows-winlogon-mof_31bf3856ad364e35_6.1.7600.16385_none_dc2dbb778f98e40f\winlogon.mof
 
< %SYSTEMDRIVE%\*.* >
[2014/05/31 11:17:10 | 000,383,786 | RHS- | M] () – C:\bootmgr
[2014/06/01 01:12:19 | 000,008,192 | RHS- | M] () – C:\BOOTSECT.BAK
[2014/06/02 09:26:19 | 3183,759,360 | -HS- | M] () – C:\hiberfil.sys
[2014/06/02 09:26:18 | 4245,012,480 | -HS- | M] () – C:\pagefile.sys
[2014/05/31 11:17:16 | 000,206,312 | RHS- | M] () – C:\XELDZ
 
< %systemroot%\Fonts\*.com >
[2009/07/14 12:32:31 | 000,026,040 | —- | M] () – C:\Windows\Fonts\GlobalMonospace.CompositeFont
[2009/07/14 12:32:31 | 000,026,489 | —- | M] () – C:\Windows\Fonts\GlobalSansSerif.CompositeFont
[2009/07/14 12:32:31 | 000,029,779 | —- | M] () – C:\Windows\Fonts\GlobalSerif.CompositeFont
[2009/07/14 12:32:31 | 000,043,318 | —- | M] () – C:\Windows\Fonts\GlobalUserInterface.CompositeFont
 
< %systemroot%\Fonts\*.dll >
 
< %systemroot%\Fonts\*.ini >
[2009/06/11 03:49:50 | 000,000,065 | —- | M] () – C:\Windows\Fonts\desktop.ini
 
< %systemroot%\Fonts\*.ini2 >
 
< %systemroot%\Fonts\*.exe >
 
< %systemroot%\system32\spool\prtprocs\w32x86\*.* >
 
< %systemroot%\REPAIR\*.bak1 >
 
< %systemroot%\REPAIR\*.ini >
 
< %systemroot%\system32\*.jpg >
 
< %systemroot%\*.jpg >
 
< %systemroot%\*.png >
 
< %systemroot%\*.scr >
 
< %systemroot%\*._sy >
 
< %APPDATA%\Adobe\Update\*.* >
 
< %ALLUSERSPROFILE%\Favorites\*.* >
 
< %APPDATA%\Microsoft\*.* >
 
< %PROGRAMFILES%\*.* >
[2009/07/14 11:54:24 | 000,000,174 | -HS- | M] () – C:\Program Files (x86)\desktop.ini
 
< %APPDATA%\Update\*.* >
 
< %systemroot%\*. /mp /s >
 
< dir "%systemdrive%\*" /S /A:L /C >
 Volume in drive C has no label.
 Volume Serial Number is BE1A-2DB3
 Directory of C:\
07/14/2009  12:08 PM         Documents and Settings [C:\Users]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings
07/14/2009  12:08 PM         All Users [C:\ProgramData]
07/14/2009  12:08 PM         Default User [C:\Users\Default]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Administrator
06/02/2014  08:56 AM         Application Data [C:\Users\Administrator\AppData\Roaming]
06/02/2014  08:56 AM         Cookies [C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Cookies]
06/02/2014  08:56 AM         Local Settings [C:\Users\Administrator\AppData\Local]
06/02/2014  08:56 AM         My Documents [C:\Users\Administrator\Documents]
06/02/2014  08:56 AM         NetHood [C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Network Shortcuts]
06/02/2014  08:56 AM         PrintHood [C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Printer Shortcuts]
06/02/2014  08:56 AM         Recent [C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent]
06/02/2014  08:56 AM         SendTo [C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\SendTo]
06/02/2014  08:56 AM         Start Menu [C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu]
06/02/2014  08:56 AM         Templates [C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Administrator\AppData\Local
06/02/2014  08:56 AM         Application Data [C:\Users\Administrator\AppData\Local]
06/02/2014  08:56 AM         History [C:\Users\Administrator\AppData\Local\Microsoft\Windows\History]
06/02/2014  08:56 AM         Temporary Internet Files [C:\Users\Administrator\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Administrator\Documents
06/02/2014  08:56 AM         My Music [C:\Users\Administrator\Music]
06/02/2014  08:56 AM         My Pictures [C:\Users\Administrator\Pictures]
06/02/2014  08:56 AM         My Videos [C:\Users\Administrator\Videos]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\All Users
07/14/2009  12:08 PM         Application Data [C:\ProgramData]
07/14/2009  12:08 PM         Desktop [C:\Users\Public\Desktop]
07/14/2009  12:08 PM         Documents [C:\Users\Public\Documents]
07/14/2009  12:08 PM         Favorites [C:\Users\Public\Favorites]
07/14/2009  12:08 PM         Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM         Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\All Users\Application Data
07/14/2009  12:08 PM         Application Data [C:\ProgramData]
07/14/2009  12:08 PM         Desktop [C:\Users\Public\Desktop]
07/14/2009  12:08 PM         Documents [C:\Users\Public\Documents]
07/14/2009  12:08 PM         Favorites [C:\Users\Public\Favorites]
07/14/2009  12:08 PM         Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM         Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\All Users\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\ProgramData]
07/14/2009  12:08 PM         Desktop [C:\Users\Public\Desktop]
07/14/2009  12:08 PM         Documents [C:\Users\Public\Documents]
07/14/2009  12:08 PM         Favorites [C:\Users\Public\Favorites]
07/14/2009  12:08 PM         Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM         Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\All Users\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\ProgramData]
07/14/2009  12:08 PM         Desktop [C:\Users\Public\Desktop]
07/14/2009  12:08 PM         Documents [C:\Users\Public\Documents]
07/14/2009  12:08 PM         Favorites [C:\Users\Public\Favorites]
07/14/2009  12:08 PM         Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM         Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\ProgramData]
07/14/2009  12:08 PM         Desktop [C:\Users\Public\Desktop]
07/14/2009  12:08 PM         Documents [C:\Users\Public\Documents]
07/14/2009  12:08 PM         Favorites [C:\Users\Public\Favorites]
07/14/2009  12:08 PM         Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM         Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\ProgramData]
07/14/2009  12:08 PM         Desktop [C:\Users\Public\Desktop]
07/14/2009  12:08 PM         Documents [C:\Users\Public\Documents]
07/14/2009  12:08 PM         Favorites [C:\Users\Public\Favorites]
07/14/2009  12:08 PM         Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM         Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\ProgramData]
07/14/2009  12:08 PM         Desktop [C:\Users\Public\Desktop]
07/14/2009  12:08 PM         Documents [C:\Users\Public\Documents]
07/14/2009  12:08 PM         Favorites [C:\Users\Public\Favorites]
07/14/2009  12:08 PM         Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM         Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\ProgramData]
07/14/2009  12:08 PM         Desktop [C:\Users\Public\Desktop]
07/14/2009  12:08 PM         Documents [C:\Users\Public\Documents]
07/14/2009  12:08 PM         Favorites [C:\Users\Public\Favorites]
07/14/2009  12:08 PM         Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM         Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\ProgramData]
07/14/2009  12:08 PM         Desktop [C:\Users\Public\Desktop]
07/14/2009  12:08 PM         Documents [C:\Users\Public\Documents]
07/14/2009  12:08 PM         Favorites [C:\Users\Public\Favorites]
07/14/2009  12:08 PM         Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM         Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\ProgramData]
07/14/2009  12:08 PM         Desktop [C:\Users\Public\Desktop]
07/14/2009  12:08 PM         Documents [C:\Users\Public\Documents]
07/14/2009  12:08 PM         Favorites [C:\Users\Public\Favorites]
07/14/2009  12:08 PM         Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM         Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\ProgramData]
07/14/2009  12:08 PM         Desktop [C:\Users\Public\Desktop]
07/14/2009  12:08 PM         Documents [C:\Users\Public\Documents]
07/14/2009  12:08 PM         Favorites [C:\Users\Public\Favorites]
07/14/2009  12:08 PM         Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM         Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\ProgramData]
07/14/2009  12:08 PM         Desktop [C:\Users\Public\Desktop]
07/14/2009  12:08 PM         Documents [C:\Users\Public\Documents]
07/14/2009  12:08 PM         Favorites [C:\Users\Public\Favorites]
07/14/2009  12:08 PM         Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM         Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\ProgramData]
07/14/2009  12:08 PM         Desktop [C:\Users\Public\Desktop]
07/14/2009  12:08 PM         Documents [C:\Users\Public\Documents]
07/14/2009  12:08 PM         Favorites [C:\Users\Public\Favorites]
07/14/2009  12:08 PM         Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM         Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [.]
07/14/2009  12:08 PM         Desktop [.]
07/14/2009  12:08 PM         Documents [.]
07/14/2009  12:08 PM         Favorites [.]
07/14/2009  12:08 PM         Start Menu [.]
07/14/2009  12:08 PM         Templates [.]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
07/14/2009  12:08 PM         My Music [C:\Users\Public\Music]
07/14/2009  12:08 PM         My Pictures [.]
07/14/2009  12:08 PM         My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
07/14/2009  12:08 PM         My Music [C:\Users\Public\Music]
07/14/2009  12:08 PM         My Pictures [C:\Users\Public\Pictures]
07/14/2009  12:08 PM         My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
07/14/2009  12:08 PM         My Music [C:\Users\Public\Music]
07/14/2009  12:08 PM         My Pictures [C:\Users\Public\Pictures]
07/14/2009  12:08 PM         My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
07/14/2009  12:08 PM         My Music [C:\Users\Public\Music]
07/14/2009  12:08 PM         My Pictures [C:\Users\Public\Pictures]
07/14/2009  12:08 PM         My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
07/14/2009  12:08 PM         My Music [C:\Users\Public\Music]
07/14/2009  12:08 PM         My Pictures [C:\Users\Public\Pictures]
07/14/2009  12:08 PM         My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
07/14/2009  12:08 PM         My Music [C:\Users\Public\Music]
07/14/2009  12:08 PM         My Pictures [C:\Users\Public\Pictures]
07/14/2009  12:08 PM         My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
07/14/2009  12:08 PM         My Music [C:\Users\Public\Music]
07/14/2009  12:08 PM         My Pictures [C:\Users\Public\Pictures]
07/14/2009  12:08 PM         My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
07/14/2009  12:08 PM         My Music [C:\Users\Public\Music]
07/14/2009  12:08 PM         My Pictures [C:\Users\Public\Pictures]
07/14/2009  12:08 PM         My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Documents
07/14/2009  12:08 PM         My Music [C:\Users\Public\Music]
07/14/2009  12:08 PM         My Pictures [C:\Users\Public\Pictures]
07/14/2009  12:08 PM         My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Documents
07/14/2009  12:08 PM         My Music [C:\Users\Public\Music]
07/14/2009  12:08 PM         My Pictures [C:\Users\Public\Pictures]
07/14/2009  12:08 PM         My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\All Users\Application Data\Application Data\Documents
07/14/2009  12:08 PM         My Music [C:\Users\Public\Music]
07/14/2009  12:08 PM         My Pictures [C:\Users\Public\Pictures]
07/14/2009  12:08 PM         My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\All Users\Application Data\Documents
07/14/2009  12:08 PM         My Music [C:\Users\Public\Music]
07/14/2009  12:08 PM         My Pictures [C:\Users\Public\Pictures]
07/14/2009  12:08 PM         My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\All Users\Documents
07/14/2009  12:08 PM         My Music [C:\Users\Public\Music]
07/14/2009  12:08 PM         My Pictures [C:\Users\Public\Pictures]
07/14/2009  12:08 PM         My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Roaming]
07/14/2009  12:08 PM         Cookies [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Cookies]
07/14/2009  12:08 PM         Local Settings [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         My Documents [C:\Users\Default\Documents]
07/14/2009  12:08 PM         NetHood [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Network Shortcuts]
07/14/2009  12:08 PM         PrintHood [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Printer Shortcuts]
07/14/2009  12:08 PM         Recent [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Recent]
07/14/2009  12:08 PM         SendTo [C:\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo]
07/14/2009  12:08 PM         Start Menu [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM         Templates [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default\AppData\Local
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default\AppData\Local\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default\AppData\Local\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default\AppData\Local\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default\AppData\Local\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [.]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [.]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default\Documents
07/14/2009  12:08 PM         My Music [C:\Users\Default\Music]
07/14/2009  12:08 PM         My Pictures [C:\Users\Default\Pictures]
07/14/2009  12:08 PM         My Videos [C:\Users\Default\Videos]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default\Local Settings
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default\Local Settings\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default\Local Settings\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default\Local Settings\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default\Local Settings\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [.]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [.]
07/14/2009  12:08 PM         History [.]
07/14/2009  12:08 PM         Temporary Internet Files [.]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default\My Documents
07/14/2009  12:08 PM         My Music [C:\Users\Default\Music]
07/14/2009  12:08 PM         My Pictures [C:\Users\Default\Pictures]
07/14/2009  12:08 PM         My Videos [C:\Users\Default\Videos]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default User
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Roaming]
07/14/2009  12:08 PM         Cookies [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Cookies]
07/14/2009  12:08 PM         Local Settings [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         My Documents [C:\Users\Default\Documents]
07/14/2009  12:08 PM         NetHood [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Network Shortcuts]
07/14/2009  12:08 PM         PrintHood [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Printer Shortcuts]
07/14/2009  12:08 PM         Recent [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Recent]
07/14/2009  12:08 PM         SendTo [C:\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo]
07/14/2009  12:08 PM         Start Menu [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM         Templates [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default User\AppData\Local
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default User\AppData\Local\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default User\AppData\Local\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default User\AppData\Local\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default User\AppData\Local\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default User\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default User\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default User\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default User\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default User\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default User\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default User\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [.]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default User\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [.]
07/14/2009  12:08 PM         History [.]
07/14/2009  12:08 PM         Temporary Internet Files [.]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default User\Documents
07/14/2009  12:08 PM         My Music [C:\Users\Default\Music]
07/14/2009  12:08 PM         My Pictures [C:\Users\Default\Pictures]
07/14/2009  12:08 PM         My Videos [C:\Users\Default\Videos]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default User\Local Settings
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default User\Local Settings\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default User\Local Settings\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default User\Local Settings\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default User\Local Settings\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default User\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default User\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default User\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default User\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default User\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default User\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default User\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [.]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default User\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [.]
07/14/2009  12:08 PM         History [.]
07/14/2009  12:08 PM         Temporary Internet Files [.]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default User\My Documents
07/14/2009  12:08 PM         My Music [C:\Users\Default\Music]
07/14/2009  12:08 PM         My Pictures [C:\Users\Default\Pictures]
07/14/2009  12:08 PM         My Videos [C:\Users\Default\Videos]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\phuong
05/31/2014  10:23 AM         Application Data [C:\Users\phuong\AppData\Roaming]
05/31/2014  10:23 AM         Cookies [C:\Users\phuong\AppData\Roaming\Microsoft\Windows\Cookies]
05/31/2014  10:23 AM         Local Settings [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM         My Documents [C:\Users\phuong\Documents]
05/31/2014  10:23 AM         NetHood [C:\Users\phuong\AppData\Roaming\Microsoft\Windows\Network Shortcuts]
05/31/2014  10:23 AM         PrintHood [C:\Users\phuong\AppData\Roaming\Microsoft\Windows\Printer Shortcuts]
05/31/2014  10:23 AM         Recent [C:\Users\phuong\AppData\Roaming\Microsoft\Windows\Recent]
05/31/2014  10:23 AM         SendTo [C:\Users\phuong\AppData\Roaming\Microsoft\Windows\SendTo]
05/31/2014  10:23 AM         Start Menu [C:\Users\phuong\AppData\Roaming\Microsoft\Windows\Start Menu]
05/31/2014  10:23 AM         Templates [C:\Users\phuong\AppData\Roaming\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\phuong\AppData\Local
05/31/2014  10:23 AM         Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM         History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM         Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\phuong\AppData\Local\Application Data
05/31/2014  10:23 AM         Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM         History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM         Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\phuong\AppData\Local\Application Data\Application Data
05/31/2014  10:23 AM         Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM         History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM         Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\phuong\AppData\Local\Application Data\Application Data\Application Data
05/31/2014  10:23 AM         Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM         History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM         Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\phuong\AppData\Local\Application Data\Application Data\Application Data\Application Data
05/31/2014  10:23 AM         Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM         History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM         Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\phuong\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  10:23 AM         Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM         History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM         Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\phuong\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  10:23 AM         Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM         History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM         Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\phuong\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  10:23 AM         Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM         History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM         Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\phuong\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  10:23 AM         Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM         History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM         Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\phuong\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  10:23 AM         Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM         History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM         Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\phuong\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  10:23 AM         Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM         History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM         Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\phuong\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  10:23 AM         Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM         History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM         Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\phuong\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  10:23 AM         Application Data [.]
05/31/2014  10:23 AM         History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM         Temporary Internet Files [.]
               0 File(s)              0 bytes
Post #3
Directory of C:\Documents and Settings\phuong\Documents
05/31/2014  10:23 AM         My Music [C:\Users\phuong\Music]
05/31/2014  10:23 AM         My Pictures [C:\Users\phuong\Pictures]
05/31/2014  10:23 AM         My Videos [C:\Users\phuong\Videos]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\phuong\Local Settings
05/31/2014  10:23 AM         Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM         History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM         Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\phuong\Local Settings\Application Data
05/31/2014  10:23 AM         Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM         History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM         Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\phuong\Local Settings\Application Data\Application Data
05/31/2014  10:23 AM         Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM         History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM         Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\phuong\Local Settings\Application Data\Application Data\Application Data
05/31/2014  10:23 AM         Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM         History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM         Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\phuong\Local Settings\Application Data\Application Data\Application Data\Application Data
05/31/2014  10:23 AM         Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM         History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM         Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\phuong\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  10:23 AM         Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM         History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM         Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\phuong\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  10:23 AM         Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM         History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM         Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\phuong\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  10:23 AM         Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM         History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM         Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\phuong\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  10:23 AM         Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM         History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM         Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\phuong\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  10:23 AM         Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM         History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM         Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\phuong\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  10:23 AM         Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM         History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM         Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\phuong\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  10:23 AM         Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM         History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM         Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\phuong\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  10:23 AM         Application Data [.]
05/31/2014  10:23 AM         History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM         Temporary Internet Files [.]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\phuong\My Documents
05/31/2014  10:23 AM         My Music [C:\Users\phuong\Music]
05/31/2014  10:23 AM         My Pictures [C:\Users\phuong\Pictures]
05/31/2014  10:23 AM         My Videos [C:\Users\phuong\Videos]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Public\Documents
07/14/2009  12:08 PM         My Music [C:\Users\Public\Music]
07/14/2009  12:08 PM         My Pictures [C:\Users\Public\Pictures]
07/14/2009  12:08 PM         My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\UpdatusUser
05/31/2014  11:12 AM         Application Data [C:\Users\UpdatusUser\AppData\Roaming]
05/31/2014  11:12 AM         Cookies [C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Cookies]
05/31/2014  11:12 AM         Local Settings [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM         My Documents [C:\Users\UpdatusUser\Documents]
05/31/2014  11:12 AM         NetHood [C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Network Shortcuts]
05/31/2014  11:12 AM         PrintHood [C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Printer Shortcuts]
05/31/2014  11:12 AM         Recent [C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Recent]
05/31/2014  11:12 AM         SendTo [C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\SendTo]
05/31/2014  11:12 AM         Start Menu [C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu]
05/31/2014  11:12 AM         Templates [C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\UpdatusUser\AppData\Local
05/31/2014  11:12 AM         Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM         History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM         Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\UpdatusUser\AppData\Local\Application Data
05/31/2014  11:12 AM         Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM         History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM         Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\UpdatusUser\AppData\Local\Application Data\Application Data
05/31/2014  11:12 AM         Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM         History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM         Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\UpdatusUser\AppData\Local\Application Data\Application Data\Application Data
05/31/2014  11:12 AM         Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM         History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM         Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\UpdatusUser\AppData\Local\Application Data\Application Data\Application Data\Application Data
05/31/2014  11:12 AM         Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM         History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM         Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\UpdatusUser\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  11:12 AM         Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM         History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM         Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\UpdatusUser\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  11:12 AM         Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM         History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM         Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\UpdatusUser\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  11:12 AM         Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM         History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM         Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\UpdatusUser\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  11:12 AM         Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM         History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM         Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\UpdatusUser\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  11:12 AM         Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM         History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM         Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\UpdatusUser\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  11:12 AM         Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM         History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM         Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\UpdatusUser\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  11:12 AM         Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM         History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM         Temporary Internet Files [.]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\UpdatusUser\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  11:12 AM         Application Data [.]
05/31/2014  11:12 AM         History [.]
05/31/2014  11:12 AM         Temporary Internet Files [.]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\UpdatusUser\Documents
05/31/2014  11:12 AM         My Music [C:\Users\UpdatusUser\Music]
05/31/2014  11:12 AM         My Pictures [C:\Users\UpdatusUser\Pictures]
05/31/2014  11:12 AM         My Videos [C:\Users\UpdatusUser\Videos]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\UpdatusUser\Local Settings
05/31/2014  11:12 AM         Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM         History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM         Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\UpdatusUser\Local Settings\Application Data
05/31/2014  11:12 AM         Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM         History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM         Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\UpdatusUser\Local Settings\Application Data\Application Data
05/31/2014  11:12 AM         Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM         History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM         Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\UpdatusUser\Local Settings\Application Data\Application Data\Application Data
05/31/2014  11:12 AM         Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM         History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM         Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\UpdatusUser\Local Settings\Application Data\Application Data\Application Data\Application Data
05/31/2014  11:12 AM         Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM         History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM         Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\UpdatusUser\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  11:12 AM         Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM         History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM         Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\UpdatusUser\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  11:12 AM         Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM         History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM         Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\UpdatusUser\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  11:12 AM         Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM         History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM         Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\UpdatusUser\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  11:12 AM         Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM         History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM         Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\UpdatusUser\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  11:12 AM         Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM         History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM         Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\UpdatusUser\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  11:12 AM         Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM         History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM         Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\UpdatusUser\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  11:12 AM         Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM         History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM         Temporary Internet Files [.]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\UpdatusUser\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  11:12 AM         Application Data [.]
05/31/2014  11:12 AM         History [.]
05/31/2014  11:12 AM         Temporary Internet Files [.]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\UpdatusUser\My Documents
05/31/2014  11:12 AM         My Music [C:\Users\UpdatusUser\Music]
05/31/2014  11:12 AM         My Pictures [C:\Users\UpdatusUser\Pictures]
05/31/2014  11:12 AM         My Videos [C:\Users\UpdatusUser\Videos]
               0 File(s)              0 bytes
 Directory of C:\ProgramData
07/14/2009  12:08 PM         Application Data [C:\ProgramData]
07/14/2009  12:08 PM         Desktop [C:\Users\Public\Desktop]
07/14/2009  12:08 PM         Documents [C:\Users\Public\Documents]
07/14/2009  12:08 PM         Favorites [C:\Users\Public\Favorites]
07/14/2009  12:08 PM         Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM         Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\ProgramData\Application Data
07/14/2009  12:08 PM         Application Data [C:\ProgramData]
07/14/2009  12:08 PM         Desktop [C:\Users\Public\Desktop]
07/14/2009  12:08 PM         Documents [C:\Users\Public\Documents]
07/14/2009  12:08 PM         Favorites [C:\Users\Public\Favorites]
07/14/2009  12:08 PM         Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM         Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\ProgramData\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\ProgramData]
07/14/2009  12:08 PM         Desktop [C:\Users\Public\Desktop]
07/14/2009  12:08 PM         Documents [C:\Users\Public\Documents]
07/14/2009  12:08 PM         Favorites [C:\Users\Public\Favorites]
07/14/2009  12:08 PM         Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM         Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\ProgramData\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\ProgramData]
07/14/2009  12:08 PM         Desktop [C:\Users\Public\Desktop]
07/14/2009  12:08 PM         Documents [C:\Users\Public\Documents]
07/14/2009  12:08 PM         Favorites [C:\Users\Public\Favorites]
07/14/2009  12:08 PM         Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM         Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\ProgramData\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\ProgramData]
07/14/2009  12:08 PM         Desktop [C:\Users\Public\Desktop]
07/14/2009  12:08 PM         Documents [C:\Users\Public\Documents]
07/14/2009  12:08 PM         Favorites [C:\Users\Public\Favorites]
07/14/2009  12:08 PM         Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM         Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\ProgramData]
07/14/2009  12:08 PM         Desktop [C:\Users\Public\Desktop]
07/14/2009  12:08 PM         Documents [C:\Users\Public\Documents]
07/14/2009  12:08 PM         Favorites [C:\Users\Public\Favorites]
07/14/2009  12:08 PM         Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM         Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\ProgramData]
07/14/2009  12:08 PM         Desktop [C:\Users\Public\Desktop]
07/14/2009  12:08 PM         Documents [C:\Users\Public\Documents]
07/14/2009  12:08 PM         Favorites [C:\Users\Public\Favorites]
07/14/2009  12:08 PM         Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM         Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\ProgramData]
07/14/2009  12:08 PM         Desktop [C:\Users\Public\Desktop]
07/14/2009  12:08 PM         Documents [C:\Users\Public\Documents]
07/14/2009  12:08 PM         Favorites [C:\Users\Public\Favorites]
07/14/2009  12:08 PM         Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM         Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\ProgramData]
07/14/2009  12:08 PM         Desktop [C:\Users\Public\Desktop]
07/14/2009  12:08 PM         Documents [C:\Users\Public\Documents]
07/14/2009  12:08 PM         Favorites [C:\Users\Public\Favorites]
07/14/2009  12:08 PM         Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM         Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\ProgramData]
07/14/2009  12:08 PM         Desktop [C:\Users\Public\Desktop]
07/14/2009  12:08 PM         Documents [C:\Users\Public\Documents]
07/14/2009  12:08 PM         Favorites [C:\Users\Public\Favorites]
07/14/2009  12:08 PM         Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM         Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\ProgramData]
07/14/2009  12:08 PM         Desktop [C:\Users\Public\Desktop]
07/14/2009  12:08 PM         Documents [C:\Users\Public\Documents]
07/14/2009  12:08 PM         Favorites [C:\Users\Public\Favorites]
07/14/2009  12:08 PM         Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM         Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\ProgramData]
07/14/2009  12:08 PM         Desktop [C:\Users\Public\Desktop]
07/14/2009  12:08 PM         Documents [C:\Users\Public\Documents]
07/14/2009  12:08 PM         Favorites [C:\Users\Public\Favorites]
07/14/2009  12:08 PM         Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM         Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\ProgramData]
07/14/2009  12:08 PM         Desktop [C:\Users\Public\Desktop]
07/14/2009  12:08 PM         Documents [C:\Users\Public\Documents]
07/14/2009  12:08 PM         Favorites [C:\Users\Public\Favorites]
07/14/2009  12:08 PM         Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM         Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\ProgramData]
07/14/2009  12:08 PM         Desktop [C:\Users\Public\Desktop]
07/14/2009  12:08 PM         Documents [C:\Users\Public\Documents]
07/14/2009  12:08 PM         Favorites [C:\Users\Public\Favorites]
07/14/2009  12:08 PM         Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM         Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [.]
07/14/2009  12:08 PM         Desktop [.]
07/14/2009  12:08 PM         Documents [.]
07/14/2009  12:08 PM         Favorites [.]
07/14/2009  12:08 PM         Start Menu [.]
07/14/2009  12:08 PM         Templates [.]
               0 File(s)              0 bytes
 Directory of C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
07/14/2009  12:08 PM         My Music [C:\Users\Public\Music]
07/14/2009  12:08 PM         My Pictures [C:\Users\Public\Pictures]
07/14/2009  12:08 PM         My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
07/14/2009  12:08 PM         My Music [C:\Users\Public\Music]
07/14/2009  12:08 PM         My Pictures [C:\Users\Public\Pictures]
07/14/2009  12:08 PM         My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
07/14/2009  12:08 PM         My Music [C:\Users\Public\Music]
07/14/2009  12:08 PM         My Pictures [C:\Users\Public\Pictures]
07/14/2009  12:08 PM         My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
07/14/2009  12:08 PM         My Music [C:\Users\Public\Music]
07/14/2009  12:08 PM         My Pictures [C:\Users\Public\Pictures]
07/14/2009  12:08 PM         My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
07/14/2009  12:08 PM         My Music [C:\Users\Public\Music]
07/14/2009  12:08 PM         My Pictures [C:\Users\Public\Pictures]
07/14/2009  12:08 PM         My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
07/14/2009  12:08 PM         My Music [C:\Users\Public\Music]
07/14/2009  12:08 PM         My Pictures [C:\Users\Public\Pictures]
07/14/2009  12:08 PM         My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
07/14/2009  12:08 PM         My Music [C:\Users\Public\Music]
07/14/2009  12:08 PM         My Pictures [C:\Users\Public\Pictures]
07/14/2009  12:08 PM         My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
07/14/2009  12:08 PM         My Music [C:\Users\Public\Music]
07/14/2009  12:08 PM         My Pictures [C:\Users\Public\Pictures]
07/14/2009  12:08 PM         My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
07/14/2009  12:08 PM         My Music [C:\Users\Public\Music]
07/14/2009  12:08 PM         My Pictures [C:\Users\Public\Pictures]
07/14/2009  12:08 PM         My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Documents
07/14/2009  12:08 PM         My Music [C:\Users\Public\Music]
07/14/2009  12:08 PM         My Pictures [C:\Users\Public\Pictures]
07/14/2009  12:08 PM         My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\ProgramData\Application Data\Application Data\Application Data\Documents
07/14/2009  12:08 PM         My Music [C:\Users\Public\Music]
07/14/2009  12:08 PM         My Pictures [C:\Users\Public\Pictures]
07/14/2009  12:08 PM         My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\ProgramData\Application Data\Application Data\Documents
07/14/2009  12:08 PM         My Music [C:\Users\Public\Music]
07/14/2009  12:08 PM         My Pictures [C:\Users\Public\Pictures]
07/14/2009  12:08 PM         My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\ProgramData\Application Data\Documents
07/14/2009  12:08 PM         My Music [C:\Users\Public\Music]
07/14/2009  12:08 PM         My Pictures [C:\Users\Public\Pictures]
07/14/2009  12:08 PM         My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\ProgramData\Documents
07/14/2009  12:08 PM         My Music [C:\Users\Public\Music]
07/14/2009  12:08 PM         My Pictures [C:\Users\Public\Pictures]
07/14/2009  12:08 PM         My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\Users
07/14/2009  12:08 PM         All Users [C:\ProgramData]
07/14/2009  12:08 PM         Default User [C:\Users\Default]
               0 File(s)              0 bytes
 Directory of C:\Users\Administrator
06/02/2014  08:56 AM         Application Data [C:\Users\Administrator\AppData\Roaming]
06/02/2014  08:56 AM         Cookies [C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Cookies]
06/02/2014  08:56 AM         Local Settings [C:\Users\Administrator\AppData\Local]
06/02/2014  08:56 AM         My Documents [C:\Users\Administrator\Documents]
06/02/2014  08:56 AM         NetHood [C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Network Shortcuts]
06/02/2014  08:56 AM         PrintHood [C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Printer Shortcuts]
06/02/2014  08:56 AM         Recent [C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent]
06/02/2014  08:56 AM         SendTo [C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\SendTo]
06/02/2014  08:56 AM         Start Menu [C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu]
06/02/2014  08:56 AM         Templates [C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\Users\Administrator\AppData\Local
06/02/2014  08:56 AM         Application Data [C:\Users\Administrator\AppData\Local]
06/02/2014  08:56 AM         History [C:\Users\Administrator\AppData\Local\Microsoft\Windows\History]
06/02/2014  08:56 AM         Temporary Internet Files [C:\Users\Administrator\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Administrator\Documents
06/02/2014  08:56 AM         My Music [C:\Users\Administrator\Music]
06/02/2014  08:56 AM         My Pictures [C:\Users\Administrator\Pictures]
06/02/2014  08:56 AM         My Videos [C:\Users\Administrator\Videos]
               0 File(s)              0 bytes
 Directory of C:\Users\All Users
07/14/2009  12:08 PM         Application Data [C:\ProgramData]
07/14/2009  12:08 PM         Desktop [C:\Users\Public\Desktop]
07/14/2009  12:08 PM         Documents [C:\Users\Public\Documents]
07/14/2009  12:08 PM         Favorites [C:\Users\Public\Favorites]
07/14/2009  12:08 PM         Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM         Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\Users\All Users\Application Data
07/14/2009  12:08 PM         Application Data [C:\ProgramData]
07/14/2009  12:08 PM         Desktop [C:\Users\Public\Desktop]
07/14/2009  12:08 PM         Documents [C:\Users\Public\Documents]
07/14/2009  12:08 PM         Favorites [C:\Users\Public\Favorites]
07/14/2009  12:08 PM         Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM         Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\Users\All Users\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\ProgramData]
07/14/2009  12:08 PM         Desktop [C:\Users\Public\Desktop]
07/14/2009  12:08 PM         Documents [C:\Users\Public\Documents]
07/14/2009  12:08 PM         Favorites [C:\Users\Public\Favorites]
07/14/2009  12:08 PM         Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM         Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\Users\All Users\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\ProgramData]
07/14/2009  12:08 PM         Desktop [C:\Users\Public\Desktop]
07/14/2009  12:08 PM         Documents [C:\Users\Public\Documents]
07/14/2009  12:08 PM         Favorites [C:\Users\Public\Favorites]
07/14/2009  12:08 PM         Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM         Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\Users\All Users\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\ProgramData]
07/14/2009  12:08 PM         Desktop [C:\Users\Public\Desktop]
07/14/2009  12:08 PM         Documents [C:\Users\Public\Documents]
07/14/2009  12:08 PM         Favorites [C:\Users\Public\Favorites]
07/14/2009  12:08 PM         Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM         Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\ProgramData]
07/14/2009  12:08 PM         Desktop [C:\Users\Public\Desktop]
07/14/2009  12:08 PM         Documents [C:\Users\Public\Documents]
07/14/2009  12:08 PM         Favorites [C:\Users\Public\Favorites]
07/14/2009  12:08 PM         Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM         Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\ProgramData]
07/14/2009  12:08 PM         Desktop [C:\Users\Public\Desktop]
07/14/2009  12:08 PM         Documents [C:\Users\Public\Documents]
07/14/2009  12:08 PM         Favorites [C:\Users\Public\Favorites]
07/14/2009  12:08 PM         Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM         Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\ProgramData]
07/14/2009  12:08 PM         Desktop [C:\Users\Public\Desktop]
07/14/2009  12:08 PM         Documents [C:\Users\Public\Documents]
07/14/2009  12:08 PM         Favorites [C:\Users\Public\Favorites]
07/14/2009  12:08 PM         Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM         Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\ProgramData]
07/14/2009  12:08 PM         Desktop [C:\Users\Public\Desktop]
07/14/2009  12:08 PM         Documents [C:\Users\Public\Documents]
07/14/2009  12:08 PM         Favorites [C:\Users\Public\Favorites]
07/14/2009  12:08 PM         Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM         Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\ProgramData]
07/14/2009  12:08 PM         Desktop [C:\Users\Public\Desktop]
07/14/2009  12:08 PM         Documents [C:\Users\Public\Documents]
07/14/2009  12:08 PM         Favorites [C:\Users\Public\Favorites]
07/14/2009  12:08 PM         Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM         Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\ProgramData]
07/14/2009  12:08 PM         Desktop [C:\Users\Public\Desktop]
07/14/2009  12:08 PM         Documents [C:\Users\Public\Documents]
07/14/2009  12:08 PM         Favorites [C:\Users\Public\Favorites]
07/14/2009  12:08 PM         Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM         Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\ProgramData]
07/14/2009  12:08 PM         Desktop [C:\Users\Public\Desktop]
07/14/2009  12:08 PM         Documents [C:\Users\Public\Documents]
07/14/2009  12:08 PM         Favorites [C:\Users\Public\Favorites]
07/14/2009  12:08 PM         Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM         Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\ProgramData]
07/14/2009  12:08 PM         Desktop [C:\Users\Public\Desktop]
07/14/2009  12:08 PM         Documents [C:\Users\Public\Documents]
07/14/2009  12:08 PM         Favorites [C:\Users\Public\Favorites]
07/14/2009  12:08 PM         Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM         Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\ProgramData]
07/14/2009  12:08 PM         Desktop [C:\Users\Public\Desktop]
07/14/2009  12:08 PM         Documents [C:\Users\Public\Documents]
07/14/2009  12:08 PM         Favorites [C:\Users\Public\Favorites]
07/14/2009  12:08 PM         Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM         Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [.]
07/14/2009  12:08 PM         Desktop [.]
07/14/2009  12:08 PM         Documents [.]
07/14/2009  12:08 PM         Favorites [.]
07/14/2009  12:08 PM         Start Menu [.]
07/14/2009  12:08 PM         Templates [.]
               0 File(s)              0 bytes
 Directory of C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
07/14/2009  12:08 PM         My Music [C:\Users\Public\Music]
07/14/2009  12:08 PM         My Pictures [.]
07/14/2009  12:08 PM         My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
07/14/2009  12:08 PM         My Music [C:\Users\Public\Music]
07/14/2009  12:08 PM         My Pictures [C:\Users\Public\Pictures]
07/14/2009  12:08 PM         My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
07/14/2009  12:08 PM         My Music [C:\Users\Public\Music]
07/14/2009  12:08 PM         My Pictures [C:\Users\Public\Pictures]
07/14/2009  12:08 PM         My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
07/14/2009  12:08 PM         My Music [C:\Users\Public\Music]
07/14/2009  12:08 PM         My Pictures [C:\Users\Public\Pictures]
07/14/2009  12:08 PM         My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
07/14/2009  12:08 PM         My Music [C:\Users\Public\Music]
07/14/2009  12:08 PM         My Pictures [C:\Users\Public\Pictures]
07/14/2009  12:08 PM         My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
07/14/2009  12:08 PM         My Music [C:\Users\Public\Music]
07/14/2009  12:08 PM         My Pictures [C:\Users\Public\Pictures]
07/14/2009  12:08 PM         My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
07/14/2009  12:08 PM         My Music [C:\Users\Public\Music]
07/14/2009  12:08 PM         My Pictures [C:\Users\Public\Pictures]
07/14/2009  12:08 PM         My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
07/14/2009  12:08 PM         My Music [C:\Users\Public\Music]
07/14/2009  12:08 PM         My Pictures [C:\Users\Public\Pictures]
07/14/2009  12:08 PM         My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
07/14/2009  12:08 PM         My Music [C:\Users\Public\Music]
07/14/2009  12:08 PM         My Pictures [C:\Users\Public\Pictures]
07/14/2009  12:08 PM         My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Documents
07/14/2009  12:08 PM         My Music [C:\Users\Public\Music]
07/14/2009  12:08 PM         My Pictures [C:\Users\Public\Pictures]
07/14/2009  12:08 PM         My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\Users\All Users\Application Data\Application Data\Application Data\Documents
07/14/2009  12:08 PM         My Music [C:\Users\Public\Music]
07/14/2009  12:08 PM         My Pictures [C:\Users\Public\Pictures]
07/14/2009  12:08 PM         My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\Users\All Users\Application Data\Application Data\Documents
07/14/2009  12:08 PM         My Music [C:\Users\Public\Music]
07/14/2009  12:08 PM         My Pictures [C:\Users\Public\Pictures]
07/14/2009  12:08 PM         My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\Users\All Users\Application Data\Documents
07/14/2009  12:08 PM         My Music [C:\Users\Public\Music]
07/14/2009  12:08 PM         My Pictures [C:\Users\Public\Pictures]
07/14/2009  12:08 PM         My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\Users\All Users\Documents
07/14/2009  12:08 PM         My Music [C:\Users\Public\Music]
07/14/2009  12:08 PM         My Pictures [C:\Users\Public\Pictures]
07/14/2009  12:08 PM         My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\Users\Default
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Roaming]
07/14/2009  12:08 PM         Cookies [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Cookies]
07/14/2009  12:08 PM         Local Settings [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         My Documents [C:\Users\Default\Documents]
07/14/2009  12:08 PM         NetHood [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Network Shortcuts]
07/14/2009  12:08 PM         PrintHood [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Printer Shortcuts]
07/14/2009  12:08 PM         Recent [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Recent]
07/14/2009  12:08 PM         SendTo [C:\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo]
07/14/2009  12:08 PM         Start Menu [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM         Templates [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\Users\Default\AppData\Local
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default\AppData\Local\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default\AppData\Local\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default\AppData\Local\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default\AppData\Local\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [.]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [.]
               0 File(s)              0 bytes
 Directory of C:\Users\Default\Documents
07/14/2009  12:08 PM         My Music [C:\Users\Default\Music]
07/14/2009  12:08 PM         My Pictures [C:\Users\Default\Pictures]
07/14/2009  12:08 PM         My Videos [C:\Users\Default\Videos]
               0 File(s)              0 bytes
 Directory of C:\Users\Default\Local Settings
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default\Local Settings\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default\Local Settings\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default\Local Settings\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default\Local Settings\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [.]
               0 File(s)              0 bytes
 Directory of C:\Users\Default\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [.]
07/14/2009  12:08 PM         History [.]
07/14/2009  12:08 PM         Temporary Internet Files [.]
               0 File(s)              0 bytes
 Directory of C:\Users\Default\My Documents
07/14/2009  12:08 PM         My Music [C:\Users\Default\Music]
07/14/2009  12:08 PM         My Pictures [C:\Users\Default\Pictures]
07/14/2009  12:08 PM         My Videos [C:\Users\Default\Videos]
               0 File(s)              0 bytes
 Directory of C:\Users\Default User
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Roaming]
07/14/2009  12:08 PM         Cookies [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Cookies]
07/14/2009  12:08 PM         Local Settings [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         My Documents [C:\Users\Default\Documents]
07/14/2009  12:08 PM         NetHood [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Network Shortcuts]
07/14/2009  12:08 PM         PrintHood [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Printer Shortcuts]
07/14/2009  12:08 PM         Recent [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Recent]
07/14/2009  12:08 PM         SendTo [C:\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo]
07/14/2009  12:08 PM         Start Menu [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM         Templates [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\Users\Default User\AppData\Local
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default User\AppData\Local\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default User\AppData\Local\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default User\AppData\Local\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default User\AppData\Local\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default User\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default User\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default User\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default User\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default User\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default User\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default User\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default User\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [.]
               0 File(s)              0 bytes
 Directory of C:\Users\Default User\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [.]
07/14/2009  12:08 PM         History [.]
07/14/2009  12:08 PM         Temporary Internet Files [.]
               0 File(s)              0 bytes
 Directory of C:\Users\Default User\Documents
07/14/2009  12:08 PM         My Music [C:\Users\Default\Music]
07/14/2009  12:08 PM         My Pictures [C:\Users\Default\Pictures]
07/14/2009  12:08 PM         My Videos [C:\Users\Default\Videos]
               0 File(s)              0 bytes
 Directory of C:\Users\Default User\Local Settings
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default User\Local Settings\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default User\Local Settings\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default User\Local Settings\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default User\Local Settings\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default User\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default User\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default User\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default User\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default User\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default User\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default User\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default User\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM         History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM         Temporary Internet Files [.]
               0 File(s)              0 bytes
 Directory of C:\Users\Default User\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM         Application Data [.]
07/14/2009  12:08 PM         History [.]
07/14/2009  12:08 PM         Temporary Internet Files [.]
               0 File(s)              0 bytes
 Directory of C:\Users\Default User\My Documents
07/14/2009  12:08 PM         My Music [C:\Users\Default\Music]
07/14/2009  12:08 PM         My Pictures [C:\Users\Default\Pictures]
07/14/2009  12:08 PM         My Videos [C:\Users\Default\Videos]
               0 File(s)              0 bytes
 Directory of C:\Users\phuong
05/31/2014  10:23 AM         Application Data [C:\Users\phuong\AppData\Roaming]
05/31/2014  10:23 AM         Cookies [C:\Users\phuong\AppData\Roaming\Microsoft\Windows\Cookies]
05/31/2014  10:23 AM         Local Settings [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM         My Documents [C:\Users\phuong\Documents]
05/31/2014  10:23 AM         NetHood [C:\Users\phuong\AppData\Roaming\Microsoft\Windows\Network Shortcuts]
05/31/2014  10:23 AM         PrintHood [C:\Users\phuong\AppData\Roaming\Microsoft\Windows\Printer Shortcuts]
05/31/2014  10:23 AM         Recent [C:\Users\phuong\AppData\Roaming\Microsoft\Windows\Recent]
05/31/2014  10:23 AM         SendTo [C:\Users\phuong\AppData\Roaming\Microsoft\Windows\SendTo]
05/31/2014  10:23 AM         Start Menu [C:\Users\phuong\AppData\Roaming\Microsoft\Windows\Start Menu]
05/31/2014  10:23 AM         Templates [C:\Users\phuong\AppData\Roaming\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\Users\phuong\AppData\Local
05/31/2014  10:23 AM         Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM         History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM         Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\phuong\AppData\Local\Application Data
05/31/2014  10:23 AM         Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM         History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM         Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\phuong\AppData\Local\Application Data\Application Data
05/31/2014  10:23 AM         Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM         History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM         Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\phuong\AppData\Local\Application Data\Application Data\Application Data
05/31/2014  10:23 AM         Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM         History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM         Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\phuong\AppData\Local\Application Data\Application Data\Application Data\Application Data
05/31/2014  10:23 AM         Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM         History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM         Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\phuong\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  10:23 AM         Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM         History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM         Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\phuong\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  10:23 AM         Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM         History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM         Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\phuong\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  10:23 AM         Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM         History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM         Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\phuong\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  10:23 AM         Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM         History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM         Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\phuong\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  10:23 AM         Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM         History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM         Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\phuong\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  10:23 AM         Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM         History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM         Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\phuong\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  10:23 AM         Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM         History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM         Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\phuong\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  10:23 AM         Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM         History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM         Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\phuong\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  10:23 AM         Application Data [.]
05/31/2014  10:23 AM         History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM         Temporary Internet Files [.]
               0 File(s)              0 bytes
 Directory of C:\Users\phuong\Documents
05/31/2014  10:23 AM         My Music [C:\Users\phuong\Music]
05/31/2014  10:23 AM         My Pictures [C:\Users\phuong\Pictures]
05/31/2014  10:23 AM         My Videos [C:\Users\phuong\Videos]
               0 File(s)              0 bytes
 Directory of C:\Users\phuong\Local Settings
05/31/2014  10:23 AM         Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM         History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM         Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\phuong\Local Settings\Application Data
05/31/2014  10:23 AM         Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM         History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM         Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\phuong\Local Settings\Application Data\Application Data
05/31/2014  10:23 AM         Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM         History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM         Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\phuong\Local Settings\Application Data\Application Data\Application Data
05/31/2014  10:23 AM         Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM         History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM         Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\phuong\Local Settings\Application Data\Application Data\Application Data\Application Data
05/31/2014  10:23 AM         Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM         History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM         Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\phuong\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  10:23 AM         Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM         History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM         Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\phuong\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  10:23 AM         Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM         History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM         Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\phuong\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  10:23 AM         Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM         History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM         Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\phuong\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  10:23 AM         Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM         History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM         Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\phuong\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  10:23 AM         Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM         History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM         Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\phuong\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  10:23 AM         Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM         History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM         Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\phuong\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  10:23 AM         Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM         History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM         Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\phuong\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  10:23 AM         Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM         History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM         Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\phuong\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  10:23 AM         Application Data [.]
05/31/2014  10:23 AM         History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM         Temporary Internet Files [.]
               0 File(s)              0 bytes
 Directory of C:\Users\phuong\My Documents
05/31/2014  10:23 AM         My Music [C:\Users\phuong\Music]
05/31/2014  10:23 AM         My Pictures [C:\Users\phuong\Pictures]
05/31/2014  10:23 AM         My Videos [C:\Users\phuong\Videos]
               0 File(s)              0 bytes
 Directory of C:\Users\Public\Documents
07/14/2009  12:08 PM         My Music [C:\Users\Public\Music]
07/14/2009  12:08 PM         My Pictures [C:\Users\Public\Pictures]
07/14/2009  12:08 PM         My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\Users\UpdatusUser
05/31/2014  11:12 AM         Application Data [C:\Users\UpdatusUser\AppData\Roaming]
05/31/2014  11:12 AM         Cookies [C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Cookies]
05/31/2014  11:12 AM         Local Settings [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM         My Documents [C:\Users\UpdatusUser\Documents]
05/31/2014  11:12 AM         NetHood [C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Network Shortcuts]
05/31/2014  11:12 AM         PrintHood [C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Printer Shortcuts]
05/31/2014  11:12 AM         Recent [C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Recent]
05/31/2014  11:12 AM         SendTo [C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\SendTo]
05/31/2014  11:12 AM         Start Menu [C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu]
05/31/2014  11:12 AM         Templates [C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\Users\UpdatusUser\AppData\Local
05/31/2014  11:12 AM         Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM         History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM         Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\UpdatusUser\AppData\Local\Application Data
05/31/2014  11:12 AM         Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM         History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM         Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\UpdatusUser\AppData\Local\Application Data\Application Data
05/31/2014  11:12 AM         Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM         History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM         Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\UpdatusUser\AppData\Local\Application Data\Application Data\Application Data
05/31/2014  11:12 AM         Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM         History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM         Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\UpdatusUser\AppData\Local\Application Data\Application Data\Application Data\Application Data
05/31/2014  11:12 AM         Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM         History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM         Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\UpdatusUser\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  11:12 AM         Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM         History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM         Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\UpdatusUser\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  11:12 AM         Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM         History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM         Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\UpdatusUser\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  11:12 AM         Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM         History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM         Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\UpdatusUser\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  11:12 AM         Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM         History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM         Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\UpdatusUser\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  11:12 AM         Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM         History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM         Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\UpdatusUser\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  11:12 AM         Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM         History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM         Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\UpdatusUser\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  11:12 AM         Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM         History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM         Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\UpdatusUser\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  11:12 AM         Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM         History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM         Temporary Internet Files [.]
               0 File(s)              0 bytes
 Directory of C:\Users\UpdatusUser\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  11:12 AM         Application Data [.]
05/31/2014  11:12 AM         History [.]
05/31/2014  11:12 AM         Temporary Internet Files [.]
               0 File(s)              0 bytes
 Directory of C:\Users\UpdatusUser\Documents
05/31/2014  11:12 AM         My Music [C:\Users\UpdatusUser\Music]
05/31/2014  11:12 AM         My Pictures [C:\Users\UpdatusUser\Pictures]
05/31/2014  11:12 AM         My Videos [C:\Users\UpdatusUser\Videos]
               0 File(s)              0 bytes
 Directory of C:\Users\UpdatusUser\Local Settings
05/31/2014  11:12 AM         Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM         History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM         Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\UpdatusUser\Local Settings\Application Data
05/31/2014  11:12 AM         Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM         History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM         Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\UpdatusUser\Local Settings\Application Data\Application Data
05/31/2014  11:12 AM         Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM         History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM         Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\UpdatusUser\Local Settings\Application Data\Application Data\Application Data
05/31/2014  11:12 AM         Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM         History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM         Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\UpdatusUser\Local Settings\Application Data\Application Data\Application Data\Application Data
05/31/2014  11:12 AM         Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM         History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM         Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\UpdatusUser\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  11:12 AM         Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM         History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM         Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\UpdatusUser\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  11:12 AM         Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM         History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM         Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\UpdatusUser\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  11:12 AM         Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM         History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM         Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\UpdatusUser\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  11:12 AM         Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM         History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM         Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\UpdatusUser\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  11:12 AM         Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM         History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM         Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\UpdatusUser\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  11:12 AM         Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM         History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM         Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\UpdatusUser\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  11:12 AM         Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM         History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM         Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\UpdatusUser\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  11:12 AM         Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM         History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM         Temporary Internet Files [.]
               0 File(s)              0 bytes
 Directory of C:\Users\UpdatusUser\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  11:12 AM         Application Data [.]
05/31/2014  11:12 AM         History [.]
05/31/2014  11:12 AM         Temporary Internet Files [.]
               0 File(s)              0 bytes
 Directory of C:\Users\UpdatusUser\My Documents
05/31/2014  11:12 AM         My Music [C:\Users\UpdatusUser\Music]
05/31/2014  11:12 AM         My Pictures [C:\Users\UpdatusUser\Pictures]
05/31/2014  11:12 AM         My Videos [C:\Users\UpdatusUser\Videos]
               0 File(s)              0 bytes
     Total Files Listed:
               0 File(s)              0 bytes
            1206 Dir(s)  72,491,917,312 bytes free
 
< %systemroot%\System32\config\*.sav >
 
< %PROGRAMFILES%\bak. /s >
 
< %systemroot%\system32\bak. /s >
 
< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >
[2009/07/14 12:01:14 | 000,000,442 | -HS- | M] () – C:\ProgramData\Start Menu\desktop.ini
 
< %systemroot%\system32\config\systemprofile\*.dat /x >
 
< %systemroot%\*.config >
 
< %systemroot%\system32\*.db >
 
< %PROGRAMFILES%\Internet Explorer\*.dat >
 
< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >
[2014/05/31 10:23:58 | 000,000,221 | -HS- | M] () – C:\Users\phuong\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini
 
< %USERPROFILE%\Desktop\*.exe >
 
< %PROGRAMFILES%\Common Files\*.* >
 
< %systemroot%\*.src >
 
< %systemroot%\install\*.* >
 
< %systemroot%\system32\DLL\*.* >
 
< %systemroot%\system32\HelpFiles\*.* >
 
< %systemroot%\system32\rundll\*.* >
 
< %systemroot%\winn32\*.* >
 
< %systemroot%\Java\*.* >
 
< %systemroot%\system32\test\*.* >
 
< %systemroot%\system32\Rundll32\*.* >
 
< %systemroot%\AppPatch\Custom\*.* >
 
< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >
 
< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >
 
< End of report >

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI