Jump to content

Build Theme!
  •  
  • Infected?

WE'RE SURE THAT YOU'LL LOVE US!

Hey there! :wub: Looks like you're enjoying the discussion, but you're not signed up for an account. When you create an account, we remember exactly what you've read, so you always come right back where you left off. You also get notifications, here and via email, whenever new posts are made. You can like posts to share the love. :D Join 91700 other members! Anybody can ask, anybody can answer. Consistently helpful members may be invited to become staff. Here's how it works. Virus cleanup? Start here -> Malware Removal Forum.

Try What the Tech -- It's free!


Photo

Can't install any antivirus program


  • Please log in to reply
2 replies to this topic

#1 BillGatesBoss

BillGatesBoss

    New Member

  • New Member
  • Pip
  • 3 posts

Posted 01 June 2014 - 11:49 PM

Hello

 

Please help me, here is my log: 

 

OTL Extras logfile created on: 6/2/2014 11:45:56 AM - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\phuong\Downloads
64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7601.17514)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
 
3.95 Gb Total Physical Memory | 1.70 Gb Available Physical Memory | 43.11% Memory free
7.91 Gb Paging File | 5.28 Gb Available in Paging File | 66.81% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 97.66 Gb Total Space | 67.45 Gb Free Space | 69.07% Space Free | Partition Type: NTFS
Drive D: | 185.55 Gb Total Space | 29.99 Gb Free Space | 16.16% Space Free | Partition Type: NTFS
Drive E: | 182.55 Gb Total Space | 66.36 Gb Free Space | 36.35% Space Free | Partition Type: NTFS
 
Computer Name: PHUONG-PC | User Name: phuong | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
 
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found
 
========== Shell Spawning ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [runas] -- cmd.exe /c takeown /f "%1" /r /d y && icacls "%1" /grant administrators:F /t (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [runas] -- cmd.exe /c takeown /f "%1" /r /d y && icacls "%1" /grant administrators:F /t (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01  [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
 
========== System Restore Settings ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 1
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
========== Authorized Applications List ==========
 
 
========== Vista Active Open Ports Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{C147EA81-1CA9-4838-89F3-3ECFAD44B20B}" = lport=6004 | protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office14\outlook.exe | 
 
========== Vista Active Application Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{30FE1A4B-6319-493B-BAC9-8F6E997332FB}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe | 
"{43E16C96-8416-42A6-8161-B7D52F517E23}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office14\onenote.exe | 
"{CFEA0AA2-EAC0-4404-9EAF-A29DCE14C989}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office14\onenote.exe | 
"TCP Query User{1E8884B8-9563-4C78-B056-6BD8E072542C}C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe" = protocol=6 | dir=in | app=c:\windows\microsoft.net\framework\v2.0.50727\vbc.exe | 
"UDP Query User{55CBCC29-9EE1-43D1-8235-770722BDD36B}C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe" = protocol=17 | dir=in | app=c:\windows\microsoft.net\framework\v2.0.50727\vbc.exe | 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{10CD364B-FFCC-48BE-B469-B9622A033075}" = Fences
"{8C775E70-A791-4DA8-BCC3-6AB7136F4484}" = Visual Studio 2012 x64 Redistributables
"{8E34682C-8118-31F1-BC4C-98CD9675E1C2}" = Microsoft .NET Framework 4 Extended
"{90140000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2010
"{90140000-002A-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (English) 2010
"{90140000-0116-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2010
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision" = NVIDIA 3D Vision Driver 320.49
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = NVIDIA Control Panel 320.49
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Graphics Driver 320.49
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience" = NVIDIA GeForce Experience 1.5
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB" = NVIDIA 3D Vision Controller Driver 320.49
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA PhysX System Software 9.13.0604
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = NVIDIA Update 4.11.9
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver" = NVIDIA HD Audio Driver 1.3.24.2
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"CCleaner" = CCleaner
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"WinRAR archiver" = WinRAR 5.00 beta 2 (64-bit)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{3282FBE1-35FC-48D8-98CA-115A5EF1F9B4}" = NVIDIA PhysX
"{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}" = Skype™ 6.16
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver
"{90140000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2010
"{90140000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2010
"{90140000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2010
"{90140000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2010
"{90140000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2010
"{90140000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2010
"{90140000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2010
"{90140000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2010
"{90140000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2010
"{90140000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2010
"{90140000-003D-0000-0000-0000000FF1CE}" = Microsoft Office Single Image 2010
"{90140000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2010
"{90140000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2010
"{90140000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2010
"{90140000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2010
"{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}" = Visual Studio 2012 x86 Redistributables
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC006985-A51F-42AC-A7E9-5E66D8AC8063}_is1" = UniKey 4.0 RC2 (build 1101)
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"Adobe Flash Player ActiveX" = Adobe Flash Player 13 ActiveX
"Fences" = Fences
"Google Chrome" = Google Chrome
"Internet Download Manager" = Internet Download Manager
"Laban_is1" = Laban version 3.0
"Mozilla Firefox 29.0.1 (x86 en-US)" = Mozilla Firefox 29.0.1 (x86 en-US)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver
"Office14.SingleImage" = Microsoft Office Professional 2010
"Plus-HD-9.5" = Plus-HD-9.5
"Shop_and _Up_1.2" = Shop_and _Up_1.2
"VirtualCloneDrive" = VirtualCloneDrive
 
========== Last 20 Event Log Errors ==========
 
[ Application Events ]
Error - 6/1/2014 9:48:28 PM | Computer Name = phuong-PC | Source = Application Error | ID = 1000
Description = Faulting application name: avira_en_av___ws.exe, version: 1.1.13.24161,
 time stamp: 0x52974fc4  Faulting module name: KERNELBASE.dll, version: 6.1.7601.17514,
 time stamp: 0x4ce7bafa  Exception code: 0xc06d007e  Fault offset: 0x0000b727  Faulting
 process id: 0xa70  Faulting application start time: 0x01cf7e04bff5694c  Faulting application
 path: C:\Users\phuong\Downloads\avira_en_av___ws.exe  Faulting module path: C:\Windows\syswow64\KERNELBASE.dll
Report
 Id: fdb4a1bb-e9f7-11e3-a138-d43d7eeea564
 
Error - 6/1/2014 9:48:35 PM | Computer Name = phuong-PC | Source = Application Error | ID = 1000
Description = Faulting application name: avira_en_av___ws.exe, version: 1.1.13.24161,
 time stamp: 0x52974fc4  Faulting module name: KERNELBASE.dll, version: 6.1.7601.17514,
 time stamp: 0x4ce7bafa  Exception code: 0xc06d007e  Fault offset: 0x0000b727  Faulting
 process id: 0x344  Faulting application start time: 0x01cf7e04c40d23c3  Faulting application
 path: C:\Users\phuong\Downloads\avira_en_av___ws.exe  Faulting module path: C:\Windows\syswow64\KERNELBASE.dll
Report
 Id: 01ddc193-e9f8-11e3-a138-d43d7eeea564
 
Error - 6/1/2014 9:57:36 PM | Computer Name = phuong-PC | Source = WinMgmt | ID = 10
Description = 
 
Error - 6/1/2014 10:17:22 PM | Computer Name = phuong-PC | Source = MsiInstaller | ID = 10005
Description = 
 
Error - 6/1/2014 10:27:58 PM | Computer Name = phuong-PC | Source = WinMgmt | ID = 10
Description = 
 
Error - 6/1/2014 10:28:33 PM | Computer Name = phuong-PC | Source = Application Error | ID = 1000
Description = Faulting application name: avira_en_av___ws.exe, version: 1.1.13.24161,
 time stamp: 0x52974fc4  Faulting module name: KERNELBASE.dll, version: 6.1.7601.17514,
 time stamp: 0x4ce7bafa  Exception code: 0xc06d007e  Fault offset: 0x0000b727  Faulting
 process id: 0x2f8  Faulting application start time: 0x01cf7e0a58192649  Faulting application
 path: C:\Users\Administrator\Downloads\avira_en_av___ws.exe  Faulting module path:
 C:\Windows\syswow64\KERNELBASE.dll  Report Id: 975196be-e9fd-11e3-b93c-d43d7eeea564
 
Error - 6/1/2014 10:29:54 PM | Computer Name = phuong-PC | Source = Application Error | ID = 1000
Description = Faulting application name: avira_en_av___ws.exe, version: 1.1.13.24161,
 time stamp: 0x52974fc4  Faulting module name: KERNELBASE.dll, version: 6.1.7601.17514,
 time stamp: 0x4ce7bafa  Exception code: 0xc06d007e  Fault offset: 0x0000b727  Faulting
 process id: 0x1d4  Faulting application start time: 0x01cf7e0a897e86b2  Faulting application
 path: C:\Users\Administrator\Downloads\avira_en_av___ws.exe  Faulting module path:
 C:\Windows\syswow64\KERNELBASE.dll  Report Id: c7a3603d-e9fd-11e3-b93c-d43d7eeea564
 
Error - 6/1/2014 10:47:07 PM | Computer Name = phuong-PC | Source = Application Error | ID = 1000
Description = Faulting application name: avira_en_av___ws.exe, version: 1.1.13.24161,
 time stamp: 0x52974fc4  Faulting module name: KERNELBASE.dll, version: 6.1.7601.17514,
 time stamp: 0x4ce7bafa  Exception code: 0xc06d007e  Fault offset: 0x0000b727  Faulting
 process id: 0x10b0  Faulting application start time: 0x01cf7e0cf1174763  Faulting application
 path: C:\Users\phuong\Downloads\avira_en_av___ws.exe  Faulting module path: C:\Windows\syswow64\KERNELBASE.dll
Report
 Id: 2f083eec-ea00-11e3-b93c-d43d7eeea564
 
Error - 6/1/2014 11:44:23 PM | Computer Name = phuong-PC | Source = MsiInstaller | ID = 11920
Description = 
 
Error - 6/1/2014 11:58:22 PM | Computer Name = phuong-PC | Source = Microsoft Security Client Setup | ID = 100
Description = HRESULT:0x8004FF81 Description:Cannot complete the Security Essentials
 installation. An error has prevented the Security Essentials setup wizard from 
completing successfully. Please restart your computer and try again. Error code:0x8004FF81.
 
 
Error encountered while reading event logs.
 
< End of report >
 

    Advertisements

Register to Remove


#2 BillGatesBoss

BillGatesBoss

    New Member

  • New Member
  • Pip
  • 3 posts

Posted 02 June 2014 - 12:35 AM

OTL logfile created on: 6/2/2014 11:45:56 AM - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\phuong\Downloads
64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7601.17514)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
 
3.95 Gb Total Physical Memory | 1.70 Gb Available Physical Memory | 43.11% Memory free
7.91 Gb Paging File | 5.28 Gb Available in Paging File | 66.81% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 97.66 Gb Total Space | 67.45 Gb Free Space | 69.07% Space Free | Partition Type: NTFS
Drive D: | 185.55 Gb Total Space | 29.99 Gb Free Space | 16.16% Space Free | Partition Type: NTFS
Drive E: | 182.55 Gb Total Space | 66.36 Gb Free Space | 36.35% Space Free | Partition Type: NTFS
 
Computer Name: PHUONG-PC | User Name: phuong | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - C:\Users\phuong\Downloads\OTL.exe (OldTimer Tools)
PRC - C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe (globalUpdate)
PRC - C:\Windows\SysWOW64\Microsoft NET Framework 4.0\Application.exe ()
PRC - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)
PRC - C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe (Tonec Inc.)
PRC - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
PRC - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe (NVIDIA Corporation)
PRC - C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
 
 
========== Modules (No Company Name) ==========
 
MOD - C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\ppgooglenaclpluginchrome.dll ()
MOD - C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\PepperFlash\pepflashplayer.dll ()
MOD - C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\pdf.dll ()
MOD - C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\libglesv2.dll ()
MOD - C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\libegl.dll ()
MOD - C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\ffmpegsumo.dll ()
MOD - C:\Program Files (x86)\Microsoft Office\Office14\ADDINS\UmOutlookAddin.dll ()
MOD - C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF ()
 
 
========== Services (SafeList) ==========
 
SRV:64bit: - (WinDefend) -- C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV:64bit: - (AppMgmt) -- C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
SRV - (globalUpdatem) -- C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe (globalUpdate)
SRV - (globalUpdate) -- C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe (globalUpdate)
SRV - (AdobeFlashPlayerUpdateSvc) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
SRV - (MozillaMaintenance) -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation)
SRV - (SkypeUpdate) -- C:\Program Files (x86)\Skype\Updater\Updater.exe (Skype Technologies)
SRV - (Stereo Service) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
SRV - (nvUpdatusService) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (NVIDIA Corporation)
SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (clr_optimization_v2.0.50727_32) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - (IDMWFP) -- C:\Windows\SysNative\drivers\idmwfp.sys (Tonec Inc.)
DRV:64bit: - (VClone) -- C:\Windows\SysNative\drivers\VClone.sys (Elaborate Bytes AG)
DRV:64bit: - (ElbyCDIO) -- C:\Windows\SysNative\drivers\ElbyCDIO.sys (Elaborate Bytes AG)
DRV:64bit: - (NVHDA) -- C:\Windows\SysNative\drivers\nvhda64v.sys (NVIDIA Corporation)
DRV:64bit: - (ISCT) -- C:\Windows\SysNative\drivers\ISCTD64.sys ()
DRV:64bit: - (RTL8167) -- C:\Windows\SysNative\drivers\Rt64win7.sys (Realtek                                            )
DRV:64bit: - (nmwcdnsux64) -- C:\Windows\SysNative\drivers\nmwcdnsux64.sys (Nokia)
DRV:64bit: - (RdpVideoMiniport) -- C:\Windows\SysNative\drivers\rdpvideominiport.sys (Microsoft Corporation)
DRV:64bit: - (TsUsbFlt) -- C:\Windows\SysNative\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV:64bit: - (tsusbhub) -- C:\Windows\SysNative\drivers\tsusbhub.sys (Microsoft Corporation)
DRV:64bit: - (Synth3dVsc) -- C:\Windows\SysNative\drivers\Synth3dVsc.sys (Microsoft Corporation)
DRV:64bit: - (dmvsc) -- C:\Windows\SysNative\drivers\dmvsc.sys (Microsoft Corporation)
DRV:64bit: - (terminpt) -- C:\Windows\SysNative\drivers\terminpt.sys (Microsoft Corporation)
DRV:64bit: - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (TsUsbGD) -- C:\Windows\SysNative\drivers\TsUsbGD.sys (Microsoft Corporation)
DRV:64bit: - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:64bit: - (MEIx64) -- C:\Windows\SysNative\drivers\HECIx64.sys (Intel Corporation)
DRV:64bit: - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (LSI_SAS2) -- C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:64bit: - (Fs_Rec) -- C:\Windows\SysNative\drivers\fs_rec.sys (Microsoft Corporation)
DRV:64bit: - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:64bit: - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (b57nd60a) -- C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (hcw85cir) -- C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV:64bit: - (WDC_SAM) -- C:\Windows\SysNative\drivers\wdcsam64.sys (Western Digital Technologies)
DRV - (WIMMount) -- C:\Windows\SysWOW64\drivers\wimmount.sys (Microsoft Corporation)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...ms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...ms}&FORM=IE8SRC
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.laban.vn/...campaign=201406
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 63 37 C4 E4 84 7C CF 01  [binary data]
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...Box&FORM=IE8SRC
IE - HKCU\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = http://isearch.avg.c...q={searchTerms}
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
========== FireFox ==========
 
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:29.0.1
FF - user.js - File not found
 
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10: C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll (globalUpdate)
FF - HKLM\Software\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4: C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll (globalUpdate)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 29.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 29.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\mozilla_cc@internetdownloadmanager.com: C:\Users\phuong\AppData\Roaming\IDM\idmmzcc5 [2014/05/31 10:41:22 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\SeaMonkey\Extensions\\mozilla_cc@internetdownloadmanager.com: C:\Users\phuong\AppData\Roaming\IDM\idmmzcc5 [2014/05/31 10:41:22 | 000,000,000 | ---D | M]
 
[2014/06/02 07:48:53 | 000,000,000 | ---D | M] (No name found) -- C:\Users\phuong\AppData\Roaming\Mozilla\Extensions
[2014/06/02 09:55:47 | 000,000,000 | ---D | M] (No name found) -- C:\Users\phuong\AppData\Roaming\Mozilla\Firefox\Profiles\rp841v3l.default\extensions
[2014/06/02 07:49:37 | 000,000,000 | ---D | M] (Yahoo! Toolbar) -- C:\Users\phuong\AppData\Roaming\Mozilla\Firefox\Profiles\rp841v3l.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
[2014/06/02 09:55:43 | 000,000,000 | ---D | M] ("Shop_and _Up_1.2") -- C:\Users\phuong\AppData\Roaming\Mozilla\Firefox\Profiles\rp841v3l.default\extensions\a346f15b-f72e-4205-b29d-52ad46792214@bf4b3822-f1de-4b29-8f70-c0a27f6ca2b8.com
[2014/06/02 09:55:51 | 000,000,000 | ---D | M] ("Plus-HD-9.5") -- C:\Users\phuong\AppData\Roaming\Mozilla\Firefox\Profiles\rp841v3l.default\extensions\e46480cf-7cf6-495e-af69-573053f52c72@b33ab36d-5952-49aa-adb2-a41b3dbe51a5.com
[2014/06/02 07:49:39 | 000,000,000 | ---D | M] (No name found) -- C:\Users\phuong\AppData\Roaming\Mozilla\Firefox\Profiles\rp841v3l.default\extensions\staged
[2014/06/02 09:55:41 | 000,000,000 | ---D | M] (No name found) -- C:\Users\phuong\AppData\Roaming\Mozilla\Firefox\Profiles\rp841v3l.default\extensions\a346f15b-f72e-4205-b29d-52ad46792214@bf4b3822-f1de-4b29-8f70-c0a27f6ca2b8.com\extensionData
[2014/06/02 09:55:41 | 000,000,000 | ---D | M] (No name found) -- C:\Users\phuong\AppData\Roaming\Mozilla\Firefox\Profiles\rp841v3l.default\extensions\a346f15b-f72e-4205-b29d-52ad46792214@bf4b3822-f1de-4b29-8f70-c0a27f6ca2b8.com\extensionData\plugins
[2014/06/02 09:55:41 | 000,000,000 | ---D | M] (No name found) -- C:\Users\phuong\AppData\Roaming\Mozilla\Firefox\Profiles\rp841v3l.default\extensions\a346f15b-f72e-4205-b29d-52ad46792214@bf4b3822-f1de-4b29-8f70-c0a27f6ca2b8.com\extensionData\userCode
[2014/06/02 09:55:49 | 000,000,000 | ---D | M] (No name found) -- C:\Users\phuong\AppData\Roaming\Mozilla\Firefox\Profiles\rp841v3l.default\extensions\e46480cf-7cf6-495e-af69-573053f52c72@b33ab36d-5952-49aa-adb2-a41b3dbe51a5.com\extensionData
[2014/06/02 09:55:49 | 000,000,000 | ---D | M] (No name found) -- C:\Users\phuong\AppData\Roaming\Mozilla\Firefox\Profiles\rp841v3l.default\extensions\e46480cf-7cf6-495e-af69-573053f52c72@b33ab36d-5952-49aa-adb2-a41b3dbe51a5.com\extensionData\plugins
[2014/06/02 09:55:49 | 000,000,000 | ---D | M] (No name found) -- C:\Users\phuong\AppData\Roaming\Mozilla\Firefox\Profiles\rp841v3l.default\extensions\e46480cf-7cf6-495e-af69-573053f52c72@b33ab36d-5952-49aa-adb2-a41b3dbe51a5.com\extensionData\userCode
[2014/06/02 07:49:38 | 000,248,650 | ---- | M] () (No name found) -- C:\Users\phuong\AppData\Roaming\Mozilla\Firefox\Profiles\rp841v3l.default\extensions\staged\SQLiteManager@mrinalkant.blogspot.com.xpi
[2014/06/02 07:48:42 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions
[2014/06/02 07:48:42 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
 
========== Chrome  ==========
 
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter},
CHR - homepage: http://www.google.com
CHR - plugin: Error reading preferences file
 
O1 HOSTS File: ([2014/05/31 11:15:04 | 000,000,864 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 validation.sls.microsoft.com
O2:64bit: - BHO: (IDM integration (IDMIEHlprObj Class)) - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll (Internet Download Manager, Tonec Inc.)
O2:64bit: - BHO: (Shop_and _Up_1.2) - {11111111-1111-1111-1111-110411281122} - C:\Program Files (x86)\Shop_and _Up_1.2\Shop_and _Up_1.2-bho64.dll (Winportal)
O2:64bit: - BHO: (Plus-HD-9.5) - {11111111-1111-1111-1111-110511311166} - C:\Program Files (x86)\Plus-HD-9.5\Plus-HD-9.5-bho64.dll (Plus HD)
O2 - BHO: (IDM integration (IDMIEHlprObj Class)) - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll (Internet Download Manager, Tonec Inc.)
O2 - BHO: (Shop_and _Up_1.2) - {11111111-1111-1111-1111-110411281122} - C:\Program Files (x86)\Shop_and _Up_1.2\Shop_and _Up_1.2-bho.dll (Winportal)
O2 - BHO: (Plus-HD-9.5) - {11111111-1111-1111-1111-110511311166} - C:\Program Files (x86)\Plus-HD-9.5\Plus-HD-9.5-bho.dll (Plus HD)
O4:64bit: - HKLM..\Run: [Nvtmru] C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe (NVIDIA Corporation)
O4:64bit: - HKLM..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Realtek Semiconductor)
O4 - HKCU..\Run: [IDMan] C:\Program Files (x86)\Internet Download Manager\IDMan.exe (Tonec Inc.)
O4 - HKCU..\Run: [paio] E:\Games\VLTKTH\paio.exe (VNG Corporation)
O4:64bit: - HKLM..\RunOnce: [lbro] C:\Users\phuong\AppData\Local\laban\hp_sl_026.exe (                                                            )
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O8:64bit: - Extra context menu item: Download all links with IDM - C:\Program Files (x86)\Internet Download Manager\IEGetAll.htm ()
O8:64bit: - Extra context menu item: Download with IDM - C:\Program Files (x86)\Internet Download Manager\IEExt.htm ()
O8 - Extra context menu item: Download all links with IDM - C:\Program Files (x86)\Internet Download Manager\IEGetAll.htm ()
O8 - Extra context menu item: Download with IDM - C:\Program Files (x86)\Internet Download Manager\IEExt.htm ()
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.m...ent/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{73485EB1-4EE0-4303-8D94-103FFC4378B1}: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{73485EB1-4EE0-4303-8D94-103FFC4378B1}: NameServer = 8.8.8.8,4.4.4.4
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O20 - HKCU Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKCU Winlogon: Shell - ("C:\Windows\SysWOW64\Microsoft NET Framework 4.0\Application.exe") - C:\Windows\SysWOW64\Microsoft NET Framework 4.0\Application.exe ()
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O22:64bit: - SharedTaskScheduler: {1984DD45-52CF-49cd-AB77-18F378FEA264} - FencesShellExt - C:\Program Files (x86)\Stardock\Fences\FencesMenu64.dll (Stardock)
O27:64bit: - HKLM IFEO\AvastSvc.exe: Debugger - nqij.exe File not found
O27:64bit: - HKLM IFEO\AvastUI.exe: Debugger - nqij.exe File not found
O27:64bit: - HKLM IFEO\avcenter.exe: Debugger - nqij.exe File not found
O27:64bit: - HKLM IFEO\avconfig.exe: Debugger - nqij.exe File not found
O27:64bit: - HKLM IFEO\avgcsrvx.exe: Debugger - nqij.exe File not found
O27:64bit: - HKLM IFEO\avgidsagent.exe: Debugger - nqij.exe File not found
O27:64bit: - HKLM IFEO\avgnt.exe: Debugger - nqij.exe File not found
O27:64bit: - HKLM IFEO\avgrsx.exe: Debugger - nqij.exe File not found
O27:64bit: - HKLM IFEO\avguard.exe: Debugger - nqij.exe File not found
O27:64bit: - HKLM IFEO\avgui.exe: Debugger - nqij.exe File not found
O27:64bit: - HKLM IFEO\avgwdsvc.exe: Debugger - nqij.exe File not found
O27:64bit: - HKLM IFEO\avp.exe: Debugger - nqij.exe File not found
O27:64bit: - HKLM IFEO\avscan.exe: Debugger - nqij.exe File not found
O27:64bit: - HKLM IFEO\bdagent.exe: Debugger - nqij.exe File not found
O27:64bit: - HKLM IFEO\blindman.exe: Debugger - nqij.exe File not found
O27:64bit: - HKLM IFEO\ccuac.exe: Debugger - nqij.exe File not found
O27:64bit: - HKLM IFEO\ComboFix.exe: Debugger - nqij.exe File not found
O27:64bit: - HKLM IFEO\egui.exe: Debugger - nqij.exe File not found
O27:64bit: - HKLM IFEO\hijackthis.exe: Debugger - nqij.exe File not found
O27:64bit: - HKLM IFEO\instup.exe: Debugger - nqij.exe File not found
O27:64bit: - HKLM IFEO\keyscrambler.exe: Debugger - nqij.exe File not found
O27:64bit: - HKLM IFEO\mbam.exe: Debugger - nqij.exe File not found
O27:64bit: - HKLM IFEO\mbamgui.exe: Debugger - nqij.exe File not found
O27:64bit: - HKLM IFEO\mbampt.exe: Debugger - nqij.exe File not found
O27:64bit: - HKLM IFEO\mbamscheduler.exe: Debugger - nqij.exe File not found
O27:64bit: - HKLM IFEO\mbamservice.exe: Debugger - nqij.exe File not found
O27:64bit: - HKLM IFEO\MpCmdRun.exe: Debugger - nqij.exe File not found
O27:64bit: - HKLM IFEO\MSASCui.exe: Debugger - nqij.exe File not found
O27:64bit: - HKLM IFEO\MsMpEng.exe: Debugger - nqij.exe File not found
O27:64bit: - HKLM IFEO\msseces.exe: Debugger - nqij.exe File not found
O27:64bit: - HKLM IFEO\rstrui.exe: Debugger - nqij.exe File not found
O27:64bit: - HKLM IFEO\SDFiles.exe: Debugger - nqij.exe File not found
O27:64bit: - HKLM IFEO\SDMain.exe: Debugger - nqij.exe File not found
O27:64bit: - HKLM IFEO\SDWinSec.exe: Debugger - nqij.exe File not found
O27:64bit: - HKLM IFEO\spybotsd.exe: Debugger - nqij.exe File not found
O27:64bit: - HKLM IFEO\wireshark.exe: Debugger - nqij.exe File not found
O27:64bit: - HKLM IFEO\zlclient.exe: Debugger - nqij.exe File not found
O27 - HKLM IFEO\AvastSvc.exe: Debugger - nqij.exe File not found
O27 - HKLM IFEO\AvastUI.exe: Debugger - nqij.exe File not found
O27 - HKLM IFEO\avcenter.exe: Debugger - nqij.exe File not found
O27 - HKLM IFEO\avconfig.exe: Debugger - nqij.exe File not found
O27 - HKLM IFEO\avgcsrvx.exe: Debugger - nqij.exe File not found
O27 - HKLM IFEO\avgidsagent.exe: Debugger - nqij.exe File not found
O27 - HKLM IFEO\avgnt.exe: Debugger - nqij.exe File not found
O27 - HKLM IFEO\avgrsx.exe: Debugger - nqij.exe File not found
O27 - HKLM IFEO\avguard.exe: Debugger - nqij.exe File not found
O27 - HKLM IFEO\avgui.exe: Debugger - nqij.exe File not found
O27 - HKLM IFEO\avgwdsvc.exe: Debugger - nqij.exe File not found
O27 - HKLM IFEO\avp.exe: Debugger - nqij.exe File not found
O27 - HKLM IFEO\avscan.exe: Debugger - nqij.exe File not found
O27 - HKLM IFEO\bdagent.exe: Debugger - nqij.exe File not found
O27 - HKLM IFEO\blindman.exe: Debugger - nqij.exe File not found
O27 - HKLM IFEO\ccuac.exe: Debugger - nqij.exe File not found
O27 - HKLM IFEO\ComboFix.exe: Debugger - nqij.exe File not found
O27 - HKLM IFEO\egui.exe: Debugger - nqij.exe File not found
O27 - HKLM IFEO\hijackthis.exe: Debugger - nqij.exe File not found
O27 - HKLM IFEO\instup.exe: Debugger - nqij.exe File not found
O27 - HKLM IFEO\keyscrambler.exe: Debugger - nqij.exe File not found
O27 - HKLM IFEO\mbam.exe: Debugger - nqij.exe File not found
O27 - HKLM IFEO\mbamgui.exe: Debugger - nqij.exe File not found
O27 - HKLM IFEO\mbampt.exe: Debugger - nqij.exe File not found
O27 - HKLM IFEO\mbamscheduler.exe: Debugger - nqij.exe File not found
O27 - HKLM IFEO\mbamservice.exe: Debugger - nqij.exe File not found
O27 - HKLM IFEO\MpCmdRun.exe: Debugger - nqij.exe File not found
O27 - HKLM IFEO\MSASCui.exe: Debugger - nqij.exe File not found
O27 - HKLM IFEO\MsMpEng.exe: Debugger - nqij.exe File not found
O27 - HKLM IFEO\msseces.exe: Debugger - nqij.exe File not found
O27 - HKLM IFEO\rstrui.exe: Debugger - nqij.exe File not found
O27 - HKLM IFEO\SDFiles.exe: Debugger - nqij.exe File not found
O27 - HKLM IFEO\SDMain.exe: Debugger - nqij.exe File not found
O27 - HKLM IFEO\SDWinSec.exe: Debugger - nqij.exe File not found
O27 - HKLM IFEO\spybotsd.exe: Debugger - nqij.exe File not found
O27 - HKLM IFEO\wireshark.exe: Debugger - nqij.exe File not found
O27 - HKLM IFEO\zlclient.exe: Debugger - nqij.exe File not found
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
NetSvcs:64bit: AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
 
Drivers32:64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
 
CREATERESTOREPOINT
Restore point Set: OTL Restore Point
 
========== Files/Folders - Created Within 30 Days ==========
 
[2014/06/02 11:31:56 | 000,000,000 | ---D | C] -- C:\Users\phuong\Desktop\CBDM
[2014/06/02 10:43:27 | 000,000,000 | ---D | C] -- C:\c65b114a1fa03b3bceefa49b413343
[2014/06/02 09:55:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Plus-HD-9.5
[2014/06/02 09:55:25 | 000,000,000 | ---D | C] -- C:\Users\phuong\AppData\Local\globalUpdate
[2014/06/02 09:55:25 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\globalUpdate
[2014/06/02 09:55:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Shop_and _Up_1.2
[2014/06/02 09:55:00 | 000,000,000 | -H-D | C] -- C:\ProgramData\{A3A26C56-02C3-4F76-A033-12EE2FB52AE6}
[2014/06/02 09:55:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Stardock
[2014/06/02 09:55:00 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Stardock
[2014/06/02 09:54:52 | 000,000,000 | ---D | C] -- C:\Users\phuong\AppData\Local\PackageAware
[2014/06/02 09:54:47 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\laban
[2014/06/02 09:54:46 | 000,000,000 | ---D | C] -- C:\Users\phuong\AppData\Local\Programs
[2014/06/02 09:54:46 | 000,000,000 | ---D | C] -- C:\Users\phuong\AppData\Local\laban
[2014/06/02 09:35:18 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner
[2014/06/02 09:31:22 | 000,000,000 | ---D | C] -- C:\Users\phuong\Documents\Outlook Files
[2014/06/02 09:27:10 | 000,000,000 | ---D | C] -- C:\Users\phuong\AppData\Local\Skype
[2014/06/02 09:26:57 | 000,000,000 | ---D | C] -- C:\Users\phuong\AppData\Roaming\Skype
[2014/06/02 09:12:13 | 000,000,000 | -H-D | C] -- C:\ProgramData\Common Files
[2014/06/02 09:12:13 | 000,000,000 | ---D | C] -- C:\ProgramData\MFAData
[2014/06/02 09:06:44 | 000,000,000 | ---D | C] -- C:\OETemp
[2014/06/02 08:59:10 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Avira
[2014/06/02 08:58:47 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
[2014/06/02 08:58:46 | 000,000,000 | R--D | C] -- C:\Program Files (x86)\Skype
[2014/06/02 08:58:46 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Skype
[2014/06/02 08:54:36 | 000,000,000 | ---D | C] -- C:\Windows\AutoKMS
[2014/06/02 08:48:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
[2014/06/02 08:48:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\DESIGNER
[2014/06/02 08:48:23 | 000,000,000 | ---D | C] -- C:\Windows\PCHEALTH
[2014/06/02 08:45:43 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Office
[2014/06/02 08:45:36 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Analysis Services
[2014/06/02 08:45:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Office
[2014/06/02 08:45:16 | 000,000,000 | -HSD | C] -- C:\Windows\Installer
[2014/06/02 08:45:09 | 000,000,000 | RH-D | C] -- C:\MSOCache
[2014/06/02 08:42:50 | 000,000,000 | ---D | C] -- C:\ProgramData\Stardock
[2014/06/02 08:41:42 | 000,000,000 | ---D | C] -- C:\Users\phuong\AppData\Local\Stardock_Corporation
[2014/06/02 08:38:18 | 000,000,000 | ---D | C] -- C:\Users\phuong\AppData\Roaming\Stardock
[2014/06/02 08:31:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Skype
[2014/06/02 07:55:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
[2014/06/02 07:54:55 | 000,000,000 | ---D | C] -- C:\Users\phuong\AppData\Local\NVIDIA
[2014/06/02 07:54:29 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Google
[2014/06/02 07:52:46 | 000,000,000 | ---D | C] -- C:\Users\phuong\AppData\Local\Google
[2014/06/02 07:48:50 | 000,000,000 | ---D | C] -- C:\Users\phuong\AppData\Roaming\Mozilla
[2014/06/02 07:48:50 | 000,000,000 | ---D | C] -- C:\Users\phuong\AppData\Local\Mozilla
[2014/06/02 07:48:42 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Maintenance Service
[2014/06/02 07:48:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Mozilla
[2014/06/02 07:48:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
[2014/06/01 01:12:31 | 000,000,000 | ---D | C] -- C:\Windows\Panther
[2014/06/01 01:12:18 | 000,000,000 | -HSD | C] -- C:\Boot
[2014/06/01 00:13:36 | 000,000,000 | ---D | C] -- C:\Windows\Prefetch
[2014/06/01 00:13:05 | 000,000,000 | -HSD | C] -- C:\System Volume Information
[2014/05/31 11:29:03 | 000,000,000 | ---D | C] -- C:\ProgramData\AVAST Software
[2014/05/31 11:20:54 | 000,000,000 | ---D | C] -- C:\Users\phuong\AppData\Local\Microsoft Help
[2014/05/31 11:20:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft Help
[2014/05/31 11:19:48 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Elaborate Bytes
[2014/05/31 11:19:48 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Elaborate Bytes
[2014/05/31 11:19:02 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UniKey
[2014/05/31 11:19:02 | 000,000,000 | ---D | C] -- C:\Program Files\UniKey
[2014/05/31 11:12:46 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AGEIA Technologies
[2014/05/31 11:12:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
[2014/05/31 11:12:01 | 000,000,000 | ---D | C] -- C:\ProgramData\NVIDIA
[2014/05/31 11:11:58 | 006,496,544 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcpl.dll
[2014/05/31 11:11:58 | 003,514,656 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvsvc64.dll
[2014/05/31 11:11:58 | 000,237,856 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvmctray.dll
[2014/05/31 11:11:58 | 000,063,776 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvshext.dll
[2014/05/31 11:11:49 | 000,061,216 | ---- | C] (Khronos Group) -- C:\Windows\SysNative\OpenCL.dll
[2014/05/31 11:11:49 | 000,053,024 | ---- | C] (Khronos Group) -- C:\Windows\SysWow64\OpenCL.dll
[2014/05/31 11:09:08 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft.NET
[2014/05/31 11:08:01 | 027,781,920 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvoglv64.dll
[2014/05/31 11:08:01 | 025,256,224 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcompiler.dll
[2014/05/31 11:08:01 | 021,102,368 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvoglv32.dll
[2014/05/31 11:08:01 | 017,560,352 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcompiler.dll
[2014/05/31 11:08:01 | 015,920,536 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvwgf2umx.dll
[2014/05/31 11:08:01 | 015,144,928 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvd3dumx.dll
[2014/05/31 11:08:01 | 013,411,896 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvwgf2um.dll
[2014/05/31 11:08:01 | 009,239,344 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuda.dll
[2014/05/31 11:08:01 | 007,687,592 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuda.dll
[2014/05/31 11:08:01 | 007,641,832 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvopencl.dll
[2014/05/31 11:08:01 | 006,324,360 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvopencl.dll
[2014/05/31 11:08:01 | 002,953,504 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuvid.dll
[2014/05/31 11:08:01 | 002,936,208 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvapi64.dll
[2014/05/31 11:08:01 | 002,777,888 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuvid.dll
[2014/05/31 11:08:01 | 002,597,856 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvapi.dll
[2014/05/31 11:08:01 | 002,363,680 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuvenc.dll
[2014/05/31 11:08:01 | 002,002,720 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuvenc.dll
[2014/05/31 11:08:01 | 001,832,224 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvdispco6432049.dll
[2014/05/31 11:08:01 | 001,511,712 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvdispgenco6432049.dll
[2014/05/31 11:08:01 | 001,059,560 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvumdshimx.dll
[2014/05/31 11:08:01 | 000,925,648 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvumdshim.dll
[2014/05/31 11:08:01 | 000,572,704 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvFBC64.dll
[2014/05/31 11:08:01 | 000,570,656 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvIFR64.dll
[2014/05/31 11:08:01 | 000,467,232 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\NvIFR.dll
[2014/05/31 11:08:01 | 000,465,184 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\NvFBC.dll
[2014/05/31 11:08:01 | 000,266,448 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvinitx.dll
[2014/05/31 11:08:01 | 000,218,592 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvoglshim64.dll
[2014/05/31 11:08:01 | 000,214,448 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvinit.dll
[2014/05/31 11:08:01 | 000,194,848 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\drivers\nvhda64v.sys
[2014/05/31 11:08:01 | 000,181,488 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvoglshim32.dll
[2014/05/31 11:08:01 | 000,031,520 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvhdap64.dll
[2014/05/31 11:05:49 | 000,000,000 | ---D | C] -- C:\Users\phuong\AppData\Roaming\Macromedia
[2014/05/31 11:05:28 | 000,000,000 | ---D | C] -- C:\Users\phuong\AppData\Roaming\Adobe
[2014/05/31 11:05:18 | 000,692,400 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe
[2014/05/31 11:05:18 | 000,070,832 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2014/05/31 11:05:18 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Macromed
[2014/05/31 11:05:14 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\Macromed
[2014/05/31 11:00:37 | 000,000,000 | ---D | C] -- C:\ProgramData\NVIDIA Corporation
[2014/05/31 11:00:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\NVIDIA Corporation
[2014/05/31 10:51:57 | 000,000,000 | -HSD | C] -- C:\ProgramData\Microsoft NET Framework 4.0
[2014/05/31 10:48:46 | 000,000,000 | ---D | C] -- C:\Program Files\NVIDIA Corporation
[2014/05/31 10:48:13 | 001,112,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpcorets.dll
[2014/05/31 10:48:13 | 001,031,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpcore.dll
[2014/05/31 10:48:13 | 000,826,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rdpcore.dll
[2014/05/31 10:41:37 | 000,000,000 | -HSD | C] -- C:\Windows\SysWow64\Microsoft NET Framework 4.0
[2014/05/31 10:41:32 | 000,000,000 | ---D | C] -- C:\Users\phuong\AppData\Roaming\Microsoft FxCop
[2014/05/31 10:41:15 | 000,000,000 | ---D | C] -- C:\Users\phuong\AppData\Roaming\IDM
[2014/05/31 10:41:15 | 000,000,000 | ---D | C] -- C:\ProgramData\IDM
[2014/05/31 10:41:14 | 000,000,000 | ---D | C] -- C:\Users\phuong\AppData\Roaming\DMCache
[2014/05/31 10:41:13 | 000,000,000 | ---D | C] -- C:\Users\phuong\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
[2014/05/31 10:41:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Internet Download Manager
[2014/05/31 10:40:49 | 002,622,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wucltux.dll
[2014/05/31 10:40:49 | 000,057,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuauclt.exe
[2014/05/31 10:40:49 | 000,044,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wups2.dll
[2014/05/31 10:40:39 | 000,701,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuapi.dll
[2014/05/31 10:40:39 | 000,099,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wudriver.dll
[2014/05/31 10:40:39 | 000,038,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wups.dll
[2014/05/31 10:40:37 | 000,053,248 | ---- | C] (Windows XP Bundled build C-Centric Single User) -- C:\Windows\SysWow64\CSVer.dll
[2014/05/31 10:40:37 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Intel
[2014/05/31 10:40:34 | 000,186,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuwebv.dll
[2014/05/31 10:40:34 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuapp.exe
[2014/05/31 10:40:29 | 000,000,000 | ---D | C] -- C:\Intel
[2014/05/31 10:39:28 | 000,805,088 | ---- | C] (Realtek                                            ) -- C:\Windows\SysNative\drivers\Rt64win7.sys
[2014/05/31 10:39:27 | 000,107,552 | ---- | C] (Realtek Semiconductor Corporation) -- C:\Windows\SysNative\RTNUninst64.dll
[2014/05/31 10:39:27 | 000,074,344 | ---- | C] (Realtek Semiconductor Corporation) -- C:\Windows\SysNative\RtNicProp64.dll
[2014/05/31 10:39:07 | 000,000,000 | ---D | C] -- C:\MSI
[2014/05/31 10:28:51 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\RTCOM
[2014/05/31 10:28:51 | 000,000,000 | ---D | C] -- C:\Program Files\Realtek
[2014/05/31 10:28:36 | 028,280,832 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RCoRes64.dat
[2014/05/31 10:28:36 | 014,035,712 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioRealtek64.dll
[2014/05/31 10:28:36 | 009,123,608 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioVnA64.dll
[2014/05/31 10:28:36 | 007,164,176 | ---- | C] (Dolby Laboratories) -- C:\Windows\SysNative\R4EEP64A.dll
[2014/05/31 10:28:36 | 004,810,008 | ---- | C] (ASUSTeKcomputer.Inc) -- C:\Windows\SysNative\RTKSMlfx.dll
[2014/05/31 10:28:36 | 003,760,856 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkAPO64.dll
[2014/05/31 10:28:36 | 003,138,304 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioVnN64.dll
[2014/05/31 10:28:36 | 002,795,224 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtPgEx64.dll
[2014/05/31 10:28:36 | 002,103,040 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\WavesGUILib64.dll
[2014/05/31 10:28:36 | 002,032,896 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioEQ64.dll
[2014/05/31 10:28:36 | 001,903,872 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioRealtek264.dll
[2014/05/31 10:28:36 | 001,662,024 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RTSnMg64.cpl
[2014/05/31 10:28:36 | 001,361,336 | ---- | C] (TOSHIBA Corporation) -- C:\Windows\SysNative\tosade.dll
[2014/05/31 10:28:36 | 001,284,680 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RTCOM64.dll
[2014/05/31 10:28:36 | 001,004,248 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkApi64.dll
[2014/05/31 10:28:36 | 000,947,760 | ---- | C] (Sony Corporation) -- C:\Windows\SysNative\SFSS_APO.dll
[2014/05/31 10:28:36 | 000,920,320 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioAPOShell64.dll
[2014/05/31 10:28:36 | 000,906,800 | ---- | C] (Sony Corporation) -- C:\Windows\SysNative\MISS_APO.dll
[2014/05/31 10:28:36 | 000,858,032 | ---- | C] (TOSHIBA Corporation) -- C:\Windows\SysNative\tossaeapo64.dll
[2014/05/31 10:28:36 | 000,836,544 | ---- | C] (TOSHIBA Corporation) -- C:\Windows\SysNative\tadefxapo264.dll
[2014/05/31 10:28:36 | 000,791,808 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\slcnt64.dll
[2014/05/31 10:28:36 | 000,758,104 | ---- | C] (A-Volute) -- C:\Windows\SysNative\RTKSMSettingsIPC.dll
[2014/05/31 10:28:36 | 000,722,688 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioAPO5064.dll
[2014/05/31 10:28:36 | 000,633,088 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\sltech64.dll
[2014/05/31 10:28:36 | 000,613,448 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtDataProc64.dll
[2014/05/31 10:28:36 | 000,612,728 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioAPO4064.dll
[2014/05/31 10:28:36 | 000,569,256 | ---- | C] (TOSHIBA Corporation) -- C:\Windows\SysNative\tosasfapo64.dll
[2014/05/31 10:28:36 | 000,547,784 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxVoiceAPO2064.dll
[2014/05/31 10:28:36 | 000,521,472 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\sl3apo64.dll
[2014/05/31 10:28:36 | 000,518,896 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSTSX64.dll
[2014/05/31 10:28:36 | 000,434,960 | ---- | C] (Dolby Laboratories) -- C:\Windows\SysNative\R4EED64A.dll
[2014/05/31 10:28:36 | 000,395,208 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioAPO30.dll
[2014/05/31 10:28:36 | 000,394,616 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxVolumeSDAPO.dll
[2014/05/31 10:28:36 | 000,375,128 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEP64A.dll
[2014/05/31 10:28:36 | 000,331,880 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtlCPAPI64.dll
[2014/05/31 10:28:36 | 000,310,104 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RP3DHT64.dll
[2014/05/31 10:28:36 | 000,310,104 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RP3DAA64.dll
[2014/05/31 10:28:36 | 000,221,024 | ---- | C] (Synopsys, Inc.) -- C:\Windows\SysNative\SFNHK64.dll
[2014/05/31 10:28:36 | 000,213,760 | ---- | C] (TODO: <Company name>) -- C:\Windows\SysNative\slprp64.dll
[2014/05/31 10:28:36 | 000,211,184 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSTSH64.dll
[2014/05/31 10:28:36 | 000,204,120 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEED64A.dll
[2014/05/31 10:28:36 | 000,198,896 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSHP64.dll
[2014/05/31 10:28:36 | 000,155,888 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSWOW64.dll
[2014/05/31 10:28:36 | 000,149,608 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkCfg64.dll
[2014/05/31 10:28:36 | 000,148,912 | ---- | C] (TOSHIBA Corporation) -- C:\Windows\SysNative\toseaeapo64.dll
[2014/05/31 10:28:36 | 000,148,416 | ---- | C] (TOSHIBA Corporation) -- C:\Windows\SysNative\tadefxapo.dll
[2014/05/31 10:28:36 | 000,147,160 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RCoInstII64.dll
[2014/05/31 10:28:36 | 000,141,584 | ---- | C] (Dolby Laboratories) -- C:\Windows\SysNative\R4EEL64A.dll
[2014/05/31 10:28:36 | 000,124,176 | ---- | C] (Dolby Laboratories) -- C:\Windows\SysNative\R4EEA64A.dll
[2014/05/31 10:28:36 | 000,101,208 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEL64A.dll
[2014/05/31 10:28:36 | 000,081,248 | ---- | C] (Synopsys, Inc.) -- C:\Windows\SysNative\SFCOM64.dll
[2014/05/31 10:28:36 | 000,078,688 | ---- | C] (Synopsys, Inc.) -- C:\Windows\SysNative\SFAPO64.dll
[2014/05/31 10:28:36 | 000,078,680 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEG64A.dll
[2014/05/31 10:28:36 | 000,075,024 | ---- | C] (Dolby Laboratories) -- C:\Windows\SysNative\R4EEG64A.dll
[2014/05/31 10:28:36 | 000,074,064 | ---- | C] (Virage Logic Corporation / Sonic Focus) -- C:\Windows\SysWow64\SFCOM.dll
[2014/05/31 10:28:36 | 000,065,944 | ---- | C] (TOSHIBA CORPORATION.) -- C:\Windows\SysNative\tepeqapo64.dll
[2014/05/31 10:28:36 | 000,014,952 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkCoLDR64.dll
[2014/05/31 10:28:35 | 002,736,160 | ---- | C] (Fortemedia Corporation) -- C:\Windows\SysNative\FMAPO64.dll
[2014/05/31 10:28:35 | 001,756,264 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSS2SpeakerDLL64.dll
[2014/05/31 10:28:35 | 001,568,360 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSS2HeadphoneDLL64.dll
[2014/05/31 10:28:35 | 001,486,952 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSBoostDLL64.dll
[2014/05/31 10:28:35 | 000,728,680 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSBassEnhancementDLL64.dll
[2014/05/31 10:28:35 | 000,712,296 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSSymmetryDLL64.dll
[2014/05/31 10:28:35 | 000,693,352 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSVoiceClarityDLL64.dll
[2014/05/31 10:28:35 | 000,603,984 | ---- | C] (Knowles Acoustics ) -- C:\Windows\SysNative\KAAPORT64.dll
[2014/05/31 10:28:35 | 000,501,192 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSU2PLFX64.dll
[2014/05/31 10:28:35 | 000,491,112 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSNeoPCDLL64.dll
[2014/05/31 10:28:35 | 000,487,368 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSU2PGFX64.dll
[2014/05/31 10:28:35 | 000,432,744 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSLimiterDLL64.dll
[2014/05/31 10:28:35 | 000,428,648 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSGainCompensatorDLL64.dll
[2014/05/31 10:28:35 | 000,415,688 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSU2PREC64.dll
[2014/05/31 10:28:35 | 000,318,808 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioAPO20.dll
[2014/05/31 10:28:35 | 000,242,792 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSLFXAPO64.dll
[2014/05/31 10:28:35 | 000,242,792 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSGFXAPO64.dll
[2014/05/31 10:28:35 | 000,241,768 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSGFXAPONS64.dll
[2014/05/31 10:28:35 | 000,208,072 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\SysNative\AERTAC64.dll
[2014/05/31 10:28:35 | 000,110,592 | ---- | C] (Real Sound Lab SIA) -- C:\Windows\SysNative\CONEQMSAPOGUILibrary.dll
[2014/05/31 10:28:35 | 000,108,640 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\SysNative\AERTAR64.dll
[2014/05/31 10:28:35 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\InstallShield Installation Information
[2014/05/31 10:28:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Realtek
[2014/05/31 10:28:34 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\Temp
[2014/05/31 10:28:33 | 002,080,472 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\RtlExUpd.dll
[2014/05/31 10:28:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\InstallShield
[2014/05/31 10:28:13 | 000,000,000 | ---D | C] -- C:\Users\phuong\AppData\Roaming\WinRAR
[2014/05/31 10:25:43 | 000,000,000 | ---D | C] -- C:\Users\phuong\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
[2014/05/31 10:25:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
[2014/05/31 10:25:42 | 000,000,000 | ---D | C] -- C:\Program Files\WinRAR
[2014/05/31 10:24:27 | 000,000,000 | ---D | C] -- C:\Users\phuong\AppData\Local\Diagnostics
[2014/05/31 10:23:21 | 000,000,000 | R--D | C] -- C:\Users\phuong\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
[2014/05/31 10:23:21 | 000,000,000 | R--D | C] -- C:\Users\phuong\Searches
[2014/05/31 10:23:21 | 000,000,000 | R--D | C] -- C:\Users\phuong\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
[2014/05/31 10:23:21 | 000,000,000 | -H-D | C] -- C:\Users\phuong\Application Data\Microsoft\Internet Explorer\Quick Launch\User Pinned
[2014/05/31 10:23:13 | 000,000,000 | ---D | C] -- C:\Users\phuong\AppData\Roaming\Identities
[2014/05/31 10:23:11 | 000,000,000 | R--D | C] -- C:\Users\phuong\Contacts
[2014/05/31 10:23:09 | 000,000,000 | ---D | C] -- C:\Users\phuong\AppData\Local\VirtualStore
[2014/05/31 10:23:00 | 000,000,000 | -HSD | C] -- C:\Users\phuong\AppData\Local\Temporary Internet Files
[2014/05/31 10:23:00 | 000,000,000 | -HSD | C] -- C:\Users\phuong\Templates
[2014/05/31 10:23:00 | 000,000,000 | -HSD | C] -- C:\Users\phuong\Start Menu
[2014/05/31 10:23:00 | 000,000,000 | -HSD | C] -- C:\Users\phuong\SendTo
[2014/05/31 10:23:00 | 000,000,000 | -HSD | C] -- C:\Users\phuong\Recent
[2014/05/31 10:23:00 | 000,000,000 | -HSD | C] -- C:\Users\phuong\PrintHood
[2014/05/31 10:23:00 | 000,000,000 | -HSD | C] -- C:\Users\phuong\NetHood
[2014/05/31 10:23:00 | 000,000,000 | -HSD | C] -- C:\Users\phuong\Documents\My Videos
[2014/05/31 10:23:00 | 000,000,000 | -HSD | C] -- C:\Users\phuong\Documents\My Pictures
[2014/05/31 10:23:00 | 000,000,000 | -HSD | C] -- C:\Users\phuong\Documents\My Music
[2014/05/31 10:23:00 | 000,000,000 | -HSD | C] -- C:\Users\phuong\My Documents
[2014/05/31 10:23:00 | 000,000,000 | -HSD | C] -- C:\Users\phuong\Local Settings
[2014/05/31 10:23:00 | 000,000,000 | -HSD | C] -- C:\Users\phuong\AppData\Local\History
[2014/05/31 10:23:00 | 000,000,000 | -HSD | C] -- C:\Users\phuong\Cookies
[2014/05/31 10:23:00 | 000,000,000 | -HSD | C] -- C:\Users\phuong\Application Data
[2014/05/31 10:23:00 | 000,000,000 | -HSD | C] -- C:\Users\phuong\AppData\Local\Application Data
[2014/05/31 10:22:59 | 000,000,000 | --SD | C] -- C:\Users\phuong\AppData\Roaming\Microsoft
[2014/05/31 10:22:59 | 000,000,000 | R--D | C] -- C:\Users\phuong\Videos
[2014/05/31 10:22:59 | 000,000,000 | R--D | C] -- C:\Users\phuong\Saved Games
[2014/05/31 10:22:59 | 000,000,000 | R--D | C] -- C:\Users\phuong\Pictures
[2014/05/31 10:22:59 | 000,000,000 | R--D | C] -- C:\Users\phuong\Music
[2014/05/31 10:22:59 | 000,000,000 | R--D | C] -- C:\Users\phuong\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
[2014/05/31 10:22:59 | 000,000,000 | R--D | C] -- C:\Users\phuong\Links
[2014/05/31 10:22:59 | 000,000,000 | R--D | C] -- C:\Users\phuong\Favorites
[2014/05/31 10:22:59 | 000,000,000 | R--D | C] -- C:\Users\phuong\Downloads
[2014/05/31 10:22:59 | 000,000,000 | R--D | C] -- C:\Users\phuong\Documents
[2014/05/31 10:22:59 | 000,000,000 | R--D | C] -- C:\Users\phuong\Desktop
[2014/05/31 10:22:59 | 000,000,000 | R--D | C] -- C:\Users\phuong\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
[2014/05/31 10:22:59 | 000,000,000 | -H-D | C] -- C:\Users\phuong\AppData
[2014/05/31 10:22:59 | 000,000,000 | ---D | C] -- C:\Users\phuong\AppData\Local\Temp
[2014/05/31 10:22:59 | 000,000,000 | ---D | C] -- C:\Users\phuong\AppData\Local\Microsoft
[2014/05/31 10:22:59 | 000,000,000 | ---D | C] -- C:\Users\phuong\AppData\Roaming\Media Center Programs
[2014/05/31 10:22:54 | 000,000,000 | -HSD | C] -- C:\Recovery
[2014/05/31 10:22:51 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution
[2014/05/31 09:06:31 | 000,000,000 | ---D | C] -- C:\Users\phuong\Desktop\Tai lieu
[2014/05/31 09:06:31 | 000,000,000 | ---D | C] -- C:\Users\phuong\Desktop\Quy Dinh
[2014/05/31 09:03:46 | 000,000,000 | ---D | C] -- C:\Users\phuong\Desktop\PR
[2014/05/31 09:03:44 | 000,000,000 | ---D | C] -- C:\Users\phuong\Desktop\Nghi dinh
[2014/05/31 09:03:10 | 000,000,000 | ---D | C] -- C:\Users\phuong\Desktop\Music
[2014/05/31 09:03:01 | 000,000,000 | ---D | C] -- C:\Users\phuong\Desktop\JxOnlinePhoto
[2014/05/31 09:01:33 | 000,000,000 | ---D | C] -- C:\Users\phuong\Desktop\HTAH
[2014/05/31 08:59:37 | 000,000,000 | ---D | C] -- C:\Users\phuong\Desktop\Anh
 
========== Files - Modified Within 30 Days ==========
 
[2014/06/02 11:48:54 | 000,221,676 | ---- | M] () -- C:\Users\phuong\AppData\Roaming\msconfig.ini
[2014/06/02 11:39:09 | 000,871,482 | ---- | M] () -- C:\Users\phuong\Desktop\cbdm intro.png
[2014/06/02 11:30:50 | 000,000,715 | ---- | M] () -- C:\Users\phuong\Desktop\VLTK.lnk
[2014/06/02 10:58:22 | 000,002,115 | ---- | M] () -- C:\Windows\epplauncher.mif
[2014/06/02 10:18:33 | 000,001,674 | ---- | M] () -- C:\Users\phuong\Desktop\Microsoft Word 2010.lnk
[2014/06/02 09:55:58 | 000,001,468 | ---- | M] () -- C:\Windows\tasks\592c20d5-3c39-4c7f-b048-7eaf4b6039f6-5.job
[2014/06/02 09:55:56 | 000,001,384 | ---- | M] () -- C:\Windows\tasks\592c20d5-3c39-4c7f-b048-7eaf4b6039f6-1.job
[2014/06/02 09:55:56 | 000,001,368 | ---- | M] () -- C:\Windows\tasks\592c20d5-3c39-4c7f-b048-7eaf4b6039f6-2.job
[2014/06/02 09:55:53 | 000,001,460 | ---- | M] () -- C:\Windows\tasks\3b470f14-c807-4517-8a59-893bfcee1cd0-5.job
[2014/06/02 09:55:51 | 000,001,336 | ---- | M] () -- C:\Windows\tasks\3b470f14-c807-4517-8a59-893bfcee1cd0-2.job
[2014/06/02 09:55:50 | 000,001,366 | ---- | M] () -- C:\Windows\tasks\3b470f14-c807-4517-8a59-893bfcee1cd0-1.job
[2014/06/02 09:55:47 | 000,002,208 | ---- | M] () -- C:\Windows\tasks\592c20d5-3c39-4c7f-b048-7eaf4b6039f6-4.job
[2014/06/02 09:55:45 | 000,001,390 | ---- | M] () -- C:\Windows\tasks\592c20d5-3c39-4c7f-b048-7eaf4b6039f6-6.job
[2014/06/02 09:55:45 | 000,001,318 | ---- | M] () -- C:\Windows\tasks\592c20d5-3c39-4c7f-b048-7eaf4b6039f6-7.job
[2014/06/02 09:55:43 | 000,000,912 | ---- | M] () -- C:\Windows\tasks\globalUpdateUpdateTaskMachineCore1cf7e0e2568cfca.job
[2014/06/02 09:55:39 | 000,002,096 | ---- | M] () -- C:\Windows\tasks\3b470f14-c807-4517-8a59-893bfcee1cd0-4.job
[2014/06/02 09:55:37 | 000,001,372 | ---- | M] () -- C:\Windows\tasks\3b470f14-c807-4517-8a59-893bfcee1cd0-6.job
[2014/06/02 09:55:37 | 000,001,308 | ---- | M] () -- C:\Windows\tasks\3b470f14-c807-4517-8a59-893bfcee1cd0-7.job
[2014/06/02 09:55:36 | 000,003,452 | ---- | M] () -- C:\Windows\tasks\592c20d5-3c39-4c7f-b048-7eaf4b6039f6-3.job
[2014/06/02 09:55:26 | 000,003,464 | ---- | M] () -- C:\Windows\tasks\3b470f14-c807-4517-8a59-893bfcee1cd0-3.job
[2014/06/02 09:54:47 | 000,001,378 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
[2014/06/02 09:54:47 | 000,001,167 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2014/06/02 09:35:20 | 000,000,822 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2014/06/02 09:34:06 | 000,021,072 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2014/06/02 09:34:06 | 000,021,072 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2014/06/02 09:32:34 | 000,782,154 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2014/06/02 09:32:34 | 000,662,484 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2014/06/02 09:32:34 | 000,121,352 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2014/06/02 09:31:36 | 000,001,127 | ---- | M] () -- C:\Users\phuong\Application Data\Microsoft\Internet Explorer\Quick Launch\Microsoft Outlook.lnk
[2014/06/02 09:27:33 | 000,002,515 | ---- | M] () -- C:\Users\Public\Desktop\Skype.lnk
[2014/06/02 09:26:23 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2014/06/02 09:26:19 | 3183,759,360 | -HS- | M] () -- C:\hiberfil.sys
[2014/06/02 09:00:21 | 000,794,900 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2014/06/02 08:56:12 | 000,414,656 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2014/06/02 08:54:36 | 000,000,266 | ---- | M] () -- C:\Windows\tasks\AutoKMS.job
[2014/06/02 08:48:52 | 000,002,951 | ---- | M] () -- C:\Users\phuong\Desktop\Microsoft Excel 2010.lnk
[2014/06/02 08:32:47 | 000,000,424 | ---- | M] () -- C:\Windows\tasks\{EA88835C-370A-433A-8F54-5ECA37484495}.job
[2014/06/02 08:32:14 | 000,000,424 | ---- | M] () -- C:\Windows\tasks\{33D82152-767F-40BA-B0F5-7D2A987B06DF}.job
[2014/06/02 07:59:37 | 000,002,275 | ---- | M] () -- C:\Users\phuong\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2014/06/02 07:56:19 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2014/06/02 07:54:37 | 000,000,894 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2014/06/01 01:12:19 | 000,008,192 | RHS- | M] () -- C:\BOOTSECT.BAK
[2014/06/01 00:15:40 | 000,116,385 | ---- | M] () -- C:\Windows\SysWow64\license.rtf
[2014/06/01 00:15:40 | 000,116,385 | ---- | M] () -- C:\Windows\SysNative\license.rtf
[2014/05/31 11:20:11 | 000,000,266 | ---- | M] () -- C:\Windows\tasks\elbyExecuteWithUAC.job
[2014/05/31 11:20:09 | 000,001,246 | ---- | M] () -- C:\Users\Public\Desktop\Virtual CloneDrive.lnk
[2014/05/31 11:19:02 | 000,000,748 | ---- | M] () -- C:\Users\Public\Desktop\UniKey.lnk
[2014/05/31 11:17:16 | 000,206,312 | RHS- | M] () -- C:\XELDZ
[2014/05/31 11:17:10 | 000,383,786 | RHS- | M] () -- C:\bootmgr
[2014/05/31 11:05:19 | 000,000,830 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2014/05/31 11:05:18 | 000,692,400 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe
[2014/05/31 11:05:18 | 000,070,832 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2014/05/31 10:41:14 | 000,001,041 | ---- | M] () -- C:\Users\phuong\Desktop\Internet Download Manager.lnk
[2014/05/31 10:23:58 | 000,001,433 | ---- | M] () -- C:\Users\phuong\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2014/05/31 08:29:40 | 001,483,474 | ---- | M] () -- C:\Users\phuong\Desktop\soft.png
[2014/05/10 09:22:24 | 030,052,352 | ---- | M] () -- C:\Users\phuong\Desktop\main.db
 
========== Files Created - No Company Name ==========
 
[2014/06/02 11:39:08 | 000,871,482 | ---- | C] () -- C:\Users\phuong\Desktop\cbdm intro.png
[2014/06/02 11:30:50 | 000,000,715 | ---- | C] () -- C:\Users\phuong\Desktop\VLTK.lnk
[2014/06/02 10:58:22 | 000,002,115 | ---- | C] () -- C:\Windows\epplauncher.mif
[2014/06/02 10:18:33 | 000,001,674 | ---- | C] () -- C:\Users\phuong\Desktop\Microsoft Word 2010.lnk
[2014/06/02 09:55:58 | 000,001,468 | ---- | C] () -- C:\Windows\tasks\592c20d5-3c39-4c7f-b048-7eaf4b6039f6-5.job
[2014/06/02 09:55:56 | 000,001,384 | ---- | C] () -- C:\Windows\tasks\592c20d5-3c39-4c7f-b048-7eaf4b6039f6-1.job
[2014/06/02 09:55:56 | 000,001,368 | ---- | C] () -- C:\Windows\tasks\592c20d5-3c39-4c7f-b048-7eaf4b6039f6-2.job
[2014/06/02 09:55:53 | 000,001,460 | ---- | C] () -- C:\Windows\tasks\3b470f14-c807-4517-8a59-893bfcee1cd0-5.job
[2014/06/02 09:55:51 | 000,001,336 | ---- | C] () -- C:\Windows\tasks\3b470f14-c807-4517-8a59-893bfcee1cd0-2.job
[2014/06/02 09:55:50 | 000,001,366 | ---- | C] () -- C:\Windows\tasks\3b470f14-c807-4517-8a59-893bfcee1cd0-1.job
[2014/06/02 09:55:47 | 000,002,208 | ---- | C] () -- C:\Windows\tasks\592c20d5-3c39-4c7f-b048-7eaf4b6039f6-4.job
[2014/06/02 09:55:45 | 000,001,390 | ---- | C] () -- C:\Windows\tasks\592c20d5-3c39-4c7f-b048-7eaf4b6039f6-6.job
[2014/06/02 09:55:45 | 000,001,318 | ---- | C] () -- C:\Windows\tasks\592c20d5-3c39-4c7f-b048-7eaf4b6039f6-7.job
[2014/06/02 09:55:43 | 000,000,912 | ---- | C] () -- C:\Windows\tasks\globalUpdateUpdateTaskMachineCore1cf7e0e2568cfca.job
[2014/06/02 09:55:39 | 000,002,096 | ---- | C] () -- C:\Windows\tasks\3b470f14-c807-4517-8a59-893bfcee1cd0-4.job
[2014/06/02 09:55:37 | 000,001,372 | ---- | C] () -- C:\Windows\tasks\3b470f14-c807-4517-8a59-893bfcee1cd0-6.job
[2014/06/02 09:55:37 | 000,001,308 | ---- | C] () -- C:\Windows\tasks\3b470f14-c807-4517-8a59-893bfcee1cd0-7.job
[2014/06/02 09:55:36 | 000,003,452 | ---- | C] () -- C:\Windows\tasks\592c20d5-3c39-4c7f-b048-7eaf4b6039f6-3.job
[2014/06/02 09:55:26 | 000,003,464 | ---- | C] () -- C:\Windows\tasks\3b470f14-c807-4517-8a59-893bfcee1cd0-3.job
[2014/06/02 09:35:20 | 000,000,822 | ---- | C] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2014/06/02 09:31:35 | 000,001,127 | ---- | C] () -- C:\Users\phuong\Application Data\Microsoft\Internet Explorer\Quick Launch\Microsoft Outlook.lnk
[2014/06/02 08:58:47 | 000,002,515 | ---- | C] () -- C:\Users\Public\Desktop\Skype.lnk
[2014/06/02 08:54:36 | 000,000,266 | ---- | C] () -- C:\Windows\tasks\AutoKMS.job
[2014/06/02 08:48:52 | 000,002,951 | ---- | C] () -- C:\Users\phuong\Desktop\Microsoft Excel 2010.lnk
[2014/06/02 08:32:47 | 000,000,424 | ---- | C] () -- C:\Windows\tasks\{EA88835C-370A-433A-8F54-5ECA37484495}.job
[2014/06/02 08:32:14 | 000,000,424 | ---- | C] () -- C:\Windows\tasks\{33D82152-767F-40BA-B0F5-7D2A987B06DF}.job
[2014/06/02 07:56:19 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2014/06/02 07:55:23 | 000,002,275 | ---- | C] () -- C:\Users\phuong\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2014/06/02 07:55:23 | 000,001,378 | ---- | C] () -- C:\Users\Public\Desktop\Google Chrome.lnk
[2014/06/02 07:54:37 | 000,000,894 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2014/06/02 07:48:43 | 000,001,185 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
[2014/06/02 07:48:43 | 000,001,167 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2014/06/01 01:12:19 | 000,008,192 | RHS- | C] () -- C:\BOOTSECT.BAK
[2014/06/01 01:12:18 | 000,383,786 | RHS- | C] () -- C:\bootmgr
[2014/06/01 00:15:36 | 000,001,345 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
[2014/06/01 00:15:27 | 000,001,326 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
[2014/06/01 00:13:05 | 3183,759,360 | -HS- | C] () -- C:\hiberfil.sys
[2014/05/31 11:20:11 | 000,000,266 | ---- | C] () -- C:\Windows\tasks\elbyExecuteWithUAC.job
[2014/05/31 11:20:09 | 000,001,246 | ---- | C] () -- C:\Users\Public\Desktop\Virtual CloneDrive.lnk
[2014/05/31 11:19:02 | 000,000,748 | ---- | C] () -- C:\Users\Public\Desktop\UniKey.lnk
[2014/05/31 11:15:07 | 000,206,312 | RHS- | C] () -- C:\XELDZ
[2014/05/31 11:11:58 | 003,253,909 | ---- | C] () -- C:\Windows\SysNative\nvcoproc.bin
[2014/05/31 11:10:57 | 000,794,900 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2014/05/31 11:05:19 | 000,000,830 | ---- | C] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2014/05/31 10:42:01 | 000,221,464 | ---- | C] () -- C:\Users\phuong\AppData\Roaming\msconfig.ini
[2014/05/31 10:41:14 | 000,001,041 | ---- | C] () -- C:\Users\phuong\Desktop\Internet Download Manager.lnk
[2014/05/31 10:28:36 | 005,448,460 | ---- | C] () -- C:\Windows\SysNative\drivers\rtvienna.dat
[2014/05/31 10:28:36 | 000,615,249 | ---- | C] () -- C:\Windows\SysNative\drivers\RTAIODAT.DAT
[2014/05/31 10:28:35 | 000,109,848 | ---- | C] () -- C:\Windows\SysNative\AcpiServiceVnA64.dll
[2014/05/31 10:23:58 | 000,001,433 | ---- | C] () -- C:\Users\phuong\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2014/05/31 10:23:25 | 000,001,405 | ---- | C] () -- C:\Users\phuong\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
[2014/05/31 10:23:22 | 000,001,825 | ---- | C] () -- C:\Users\phuong\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
[2014/05/31 10:22:59 | 000,000,290 | ---- | C] () -- C:\Users\phuong\Application Data\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk
[2014/05/31 10:22:59 | 000,000,272 | ---- | C] () -- C:\Users\phuong\Application Data\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk
[2014/05/31 08:59:37 | 001,483,474 | ---- | C] () -- C:\Users\phuong\Desktop\soft.png
[2014/05/31 08:59:30 | 030,052,352 | ---- | C] () -- C:\Users\phuong\Desktop\main.db
 
========== ZeroAccess Check ==========
 
[2009/07/14 11:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2010/11/21 10:23:55 | 014,174,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2010/11/21 10:24:02 | 012,872,192 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009/07/14 08:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/21 10:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009/07/14 08:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
 
========== LOP Check ==========
 
[2014/06/02 09:26:59 | 000,000,000 | ---D | M] -- C:\Users\phuong\AppData\Roaming\DMCache
[2014/06/02 09:37:09 | 000,000,000 | ---D | M] -- C:\Users\phuong\AppData\Roaming\IDM
[2014/06/02 08:38:18 | 000,000,000 | ---D | M] -- C:\Users\phuong\AppData\Roaming\Stardock
 
========== Purity Check ==========
 
 
 
========== Custom Scans ==========
 
< %USERPROFILE%\..|smtmp;true;true;true /FP >
 
< %temp%\smtmp\*.* /s > >
 
< MD5 for: EXPLORER.ADML  >
[2011/04/12 15:17:31 | 000,003,695 | ---- | M] () MD5=7A4C7F3CB156543113596988479CAFCE -- C:\Windows\PolicyDefinitions\en-US\Explorer.adml
[2011/04/12 15:17:31 | 000,003,695 | ---- | M] () MD5=7A4C7F3CB156543113596988479CAFCE -- C:\Windows\winsxs\amd64_microsoft-windows-s..ouppolicy.resources_31bf3856ad364e35_6.1.7600.16385_en-us_7ef5713984067904\Explorer.adml
 
< MD5 for: EXPLORER.ADMX  >
[2009/06/11 03:53:55 | 000,003,836 | ---- | M] () MD5=AD131A834808E6AFF4A3918DE05BFCF6 -- C:\Windows\PolicyDefinitions\Explorer.admx
[2009/06/11 03:53:55 | 000,003,836 | ---- | M] () MD5=AD131A834808E6AFF4A3918DE05BFCF6 -- C:\Windows\winsxs\amd64_microsoft-windows-shell-grouppolicy_31bf3856ad364e35_6.1.7600.16385_none_71af9b5b0a86e6b7\Explorer.admx
 
< MD5 for: EXPLORER.EXE  >
[2010/11/21 10:24:25 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\SysWOW64\explorer.exe
[2010/11/21 10:24:25 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_ba2f56d3c4bcbafb\explorer.exe
[2010/11/21 10:24:11 | 002,872,320 | ---- | M] (Microsoft Corporation) MD5=AC4C51EB24AA95B77F705AB159189E24 -- C:\Windows\explorer.exe
[2010/11/21 10:24:11 | 002,872,320 | ---- | M] (Microsoft Corporation) MD5=AC4C51EB24AA95B77F705AB159189E24 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_afdaac81905bf900\explorer.exe
 
< MD5 for: EXPLORER.EXE.MUI  >
[2011/04/12 15:17:19 | 000,022,016 | ---- | M] (Microsoft Corporation) MD5=4B87EEFDC8E253F846A7DFB49A8E6C70 -- C:\Windows\en-US\explorer.exe.mui
[2011/04/12 15:17:19 | 000,022,016 | ---- | M] (Microsoft Corporation) MD5=4B87EEFDC8E253F846A7DFB49A8E6C70 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer.resources_31bf3856ad364e35_6.1.7600.16385_en-us_61e778c48d52d19b\explorer.exe.mui
[2011/04/12 15:17:21 | 000,022,016 | ---- | M] (Microsoft Corporation) MD5=B9F4B1CA23D60775736059D72BA48526 -- C:\Windows\SysWOW64\en-US\explorer.exe.mui
[2011/04/12 15:17:21 | 000,022,016 | ---- | M] (Microsoft Corporation) MD5=B9F4B1CA23D60775736059D72BA48526 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer.resources_31bf3856ad364e35_6.1.7600.16385_en-us_6c3c2316c1b39396\explorer.exe.mui
 
< MD5 for: EXPLORER.EXE-7A3328DA.PF  >
[2014/06/02 10:21:15 | 000,180,348 | ---- | M] () MD5=0972BE7DB45E2E8457E73A736563E88B -- C:\Windows\Prefetch\EXPLORER.EXE-7A3328DA.pf
 
< MD5 for: EXPLORER.EXE-F6875474.PF  >
[2014/06/02 10:21:05 | 000,031,542 | ---- | M] () MD5=3BC6CEDA2B982458A52E0CBB11A422F0 -- C:\Windows\Prefetch\EXPLORER.EXE-F6875474.pf
 
< MD5 for: IEXPLORE.EXE  >
[2010/11/21 10:24:43 | 000,695,056 | ---- | M] (Microsoft Corporation) MD5=86257731DDB311FBC283534CC0091634 -- C:\Program Files\Internet Explorer\iexplore.exe
[2010/11/21 10:24:43 | 000,695,056 | ---- | M] (Microsoft Corporation) MD5=86257731DDB311FBC283534CC0091634 -- C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7601.17514_none_1196a9003b674a92\iexplore.exe
[2010/11/21 10:25:08 | 000,673,040 | ---- | M] (Microsoft Corporation) MD5=C613E69C3B191BB02C7A191741A1D024 -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
[2010/11/21 10:25:08 | 000,673,040 | ---- | M] (Microsoft Corporation) MD5=C613E69C3B191BB02C7A191741A1D024 -- C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7601.17514_none_1beb53526fc80c8d\iexplore.exe
 
< MD5 for: IEXPLORE.EXE.MUI  >
[2009/07/14 09:29:20 | 000,005,120 | ---- | M] (Microsoft Corporation) MD5=C29BCFB504E33FEADDFA2D0183CEF62F -- C:\Program Files\Internet Explorer\en-US\iexplore.exe.mui
[2009/07/14 09:29:20 | 000,005,120 | ---- | M] (Microsoft Corporation) MD5=C29BCFB504E33FEADDFA2D0183CEF62F -- C:\Windows\winsxs\amd64_microsoft-windows-i..-optional.resources_31bf3856ad364e35_8.0.7601.17514_en-us_0b433e7773148b79\iexplore.exe.mui
[2009/07/14 09:05:06 | 000,005,120 | ---- | M] (Microsoft Corporation) MD5=FBA4CD95930248053A2C3F43CA70B986 -- C:\Program Files (x86)\Internet Explorer\en-US\iexplore.exe.mui
[2009/07/14 09:05:06 | 000,005,120 | ---- | M] (Microsoft Corporation) MD5=FBA4CD95930248053A2C3F43CA70B986 -- C:\Windows\winsxs\wow64_microsoft-windows-i..-optional.resources_31bf3856ad364e35_8.0.7601.17514_en-us_1597e8c9a7754d74\iexplore.exe.mui
 
< MD5 for: IEXPLORE.EXE-F6A52C86.PF  >
[2014/06/02 07:49:59 | 000,247,514 | ---- | M] () MD5=99AA2602E35B4F50AFDDA64543113981 -- C:\Windows\Prefetch\IEXPLORE.EXE-F6A52C86.pf
 
< MD5 for: SERVICES  >
[2009/06/11 04:00:26 | 000,017,463 | ---- | M] () MD5=D9E1A01B480D961B7CF0509D597A92D6 -- C:\Windows\winsxs\amd64_microsoft-windows-w..nfrastructure-other_31bf3856ad364e35_6.1.7600.16385_none_6079f415110c0210\services
 
< MD5 for: SERVICES.EXE  >
[2009/07/14 08:39:37 | 000,328,704 | ---- | M] (Microsoft Corporation) MD5=24ACB7E5BE595468E3B9AA488B9B4FCB -- C:\Windows\SysNative\services.exe
[2009/07/14 08:39:37 | 000,328,704 | ---- | M] (Microsoft Corporation) MD5=24ACB7E5BE595468E3B9AA488B9B4FCB -- C:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_2b54b20ee6fa07b1\services.exe
 
< MD5 for: SERVICES.EXE.MUI  >
[2011/04/12 15:17:17 | 000,017,408 | ---- | M] (Microsoft Corporation) MD5=6507BF0DC2D1F5F32493C288EAA59277 -- C:\Windows\SysNative\en-US\services.exe.mui
[2011/04/12 15:17:17 | 000,017,408 | ---- | M] (Microsoft Corporation) MD5=6507BF0DC2D1F5F32493C288EAA59277 -- C:\Windows\winsxs\amd64_microsoft-windows-s..ontroller.resources_31bf3856ad364e35_6.1.7600.16385_en-us_c5f238be3fa63468\services.exe.mui
 
< MD5 for: SERVICES.LNK  >
[2009/07/14 11:54:05 | 000,001,288 | ---- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 -- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | ---- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 -- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | ---- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 -- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | ---- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 -- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | ---- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 -- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | ---- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 -- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | ---- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 -- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | ---- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 -- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | ---- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 -- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | ---- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 -- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | ---- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 -- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | ---- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 -- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | ---- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 -- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | ---- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 -- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | ---- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 -- C:\Documents and Settings\All Users\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | ---- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 -- C:\Documents and Settings\All Users\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | ---- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 -- C:\Documents and Settings\All Users\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | ---- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 -- C:\Documents and Settings\All Users\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | ---- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 -- C:\Documents and Settings\All Users\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | ---- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 -- C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | ---- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 -- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | ---- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 -- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | ---- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 -- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | ---- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 -- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | ---- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 -- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | ---- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 -- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | ---- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 -- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | ---- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 -- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | ---- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 -- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | ---- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 -- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | ---- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 -- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | ---- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 -- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | ---- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 -- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | ---- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 -- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | ---- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 -- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | ---- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 -- C:\ProgramData\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | ---- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 -- C:\ProgramData\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | ---- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 -- C:\ProgramData\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | ---- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 -- C:\ProgramData\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | ---- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 -- C:\ProgramData\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | ---- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 -- C:\ProgramData\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | ---- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | ---- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 -- C:\ProgramData\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | ---- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 -- C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | ---- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 -- C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | ---- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 -- C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | ---- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 -- C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | ---- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 -- C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | ---- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 -- C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | ---- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 -- C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | ---- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 -- C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | ---- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 -- C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | ---- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 -- C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | ---- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 -- C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | ---- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 -- C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | ---- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 -- C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | ---- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 -- C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | ---- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 -- C:\Users\All Users\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | ---- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 -- C:\Users\All Users\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | ---- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 -- C:\Users\All Users\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | ---- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 -- C:\Users\All Users\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | ---- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 -- C:\Users\All Users\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | ---- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 -- C:\Users\All Users\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | ---- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 -- C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 11:54:05 | 000,001,288 | ---- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 -- C:\Users\All Users\Start Menu\Programs\Administrative Tools\services.lnk
File not found Unable to obtain MD5 -- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
File not found Unable to obtain MD5 -- C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
 
< MD5 for: SERVICES.MOF  >
[2009/06/11 03:44:06 | 000,002,866 | ---- | M] () MD5=26A11C895A7F0B6D32105EBE127D8500 -- C:\Windows\SysNative\wbem\services.mof
[2009/06/11 03:44:06 | 000,002,866 | ---- | M] () MD5=26A11C895A7F0B6D32105EBE127D8500 -- C:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_2b54b20ee6fa07b1\services.mof
 
< MD5 for: SERVICES.MSC  >
[2011/04/12 15:17:16 | 000,092,745 | ---- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 -- C:\Windows\SysNative\en-US\services.msc
[2009/06/11 03:38:36 | 000,092,745 | ---- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 -- C:\Windows\SysNative\services.msc
[2011/04/12 15:17:18 | 000,092,745 | ---- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 -- C:\Windows\SysWOW64\en-US\services.msc
[2009/06/11 04:21:09 | 000,092,745 | ---- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 -- C:\Windows\SysWOW64\services.msc
[2011/04/12 15:17:16 | 000,092,745 | ---- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 -- C:\Windows\winsxs\amd64_microsoft-windows-s..cessnapin.resources_31bf3856ad364e35_6.1.7600.16385_en-us_003408aa160fce5b\services.msc
[2009/06/11 03:38:36 | 000,092,745 | ---- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 -- C:\Windows\winsxs\amd64_microsoft-windows-servicessnapin_31bf3856ad364e35_6.1.7600.16385_none_2b58d44b5f6beb8a\services.msc
[2011/04/12 15:17:18 | 000,092,745 | ---- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 -- C:\Windows\winsxs\x86_microsoft-windows-s..cessnapin.resources_31bf3856ad364e35_6.1.7600.16385_en-us_a4156d265db25d25\services.msc
[2009/06/11 04:21:09 | 000,092,745 | ---- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 -- C:\Windows\winsxs\x86_microsoft-windows-servicessnapin_31bf3856ad364e35_6.1.7600.16385_none_cf3a38c7a70e7a54\services.msc
 
< MD5 for: SERVICES.PTXML  >
[2009/07/14 03:16:17 | 000,001,061 | ---- | M] () MD5=640D7DD61B1CFA6C96F80F68F78CDFA7 -- C:\Windows\SysNative\wdi\perftrack\Services.ptxml
[2009/07/14 03:16:17 | 000,001,061 | ---- | M] () MD5=640D7DD61B1CFA6C96F80F68F78CDFA7 -- C:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_2b54b20ee6fa07b1\Services.ptxml
 
< MD5 for: WINLOGON.ADML  >
[2011/04/12 15:17:31 | 000,008,013 | ---- | M] () MD5=CED0EAD8D152B3D0F114698DE2316C5E -- C:\Windows\PolicyDefinitions\en-US\WinLogon.adml
[2011/04/12 15:17:31 | 000,008,013 | ---- | M] () MD5=CED0EAD8D152B3D0F114698DE2316C5E -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon-adm.resources_31bf3856ad364e35_6.1.7600.16385_en-us_f0f9032ef6930070\WinLogon.adml
 
< MD5 for: WINLOGON.ADMX  >
[2009/06/11 04:04:41 | 000,005,237 | ---- | M] () MD5=89D8F50E186A16C2CED3CF36DBBC0B2C -- C:\Windows\PolicyDefinitions\WinLogon.admx
[2009/06/11 04:04:41 | 000,005,237 | ---- | M] () MD5=89D8F50E186A16C2CED3CF36DBBC0B2C -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon-adm_31bf3856ad364e35_6.1.7600.16385_none_d7024e6992f3424d\WinLogon.admx
 
< MD5 for: WINLOGON.EXE  >
[2010/11/21 10:24:29 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\SysNative\winlogon.exe
[2010/11/21 10:24:29 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636\winlogon.exe
[2014/03/04 18:08:14 | 000,455,680 | ---- | M] (Microsoft Corporation) MD5=6CE2AE073BD21C542FC2C707CAE944CC -- C:\Windows\SoftwareDistribution\Download\f6446aa2f5f86c06820f4e4200db84ac\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.22616_none_ce748d1d04acf24f\winlogon.exe
[2014/03/04 16:43:50 | 000,455,168 | ---- | M] (Microsoft Corporation) MD5=88AB9B72B4BF3963A0DE0820B4B0B06C -- C:\Windows\SoftwareDistribution\Download\f6446aa2f5f86c06820f4e4200db84ac\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.18409_none_cdf8bf35eb848572\winlogon.exe
 
< MD5 for: WINLOGON.EXE.MUI  >
[2011/04/12 15:17:16 | 000,023,040 | ---- | M] (Microsoft Corporation) MD5=34C7D2E30868EDAFB191341D963ABA5F -- C:\Windows\SysNative\en-US\winlogon.exe.mui
[2011/04/12 15:17:16 | 000,023,040 | ---- | M] (Microsoft Corporation) MD5=34C7D2E30868EDAFB191341D963ABA5F -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon.resources_31bf3856ad364e35_6.1.7601.17514_en-us_291e96fa1ab5fc7b\winlogon.exe.mui
 
< MD5 for: WINLOGON.MFL  >
[2011/04/12 15:17:17 | 000,001,080 | ---- | M] () MD5=2783ED50691284F7EAE6BE9729337E1A -- C:\Windows\SysNative\wbem\en-US\winlogon.mfl
[2011/04/12 15:17:17 | 000,001,080 | ---- | M] () MD5=2783ED50691284F7EAE6BE9729337E1A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon-mof.resources_31bf3856ad364e35_6.1.7600.16385_en-us_84afd4fd38ffd276\winlogon.mfl
 
< MD5 for: WINLOGON.MOF  >
[2009/07/14 03:30:01 | 000,003,192 | ---- | M] () MD5=DF722B96F32A61783BC310FACF10240B -- C:\Windows\SysNative\wbem\winlogon.mof
[2009/07/14 03:30:01 | 000,003,192 | ---- | M] () MD5=DF722B96F32A61783BC310FACF10240B -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon-mof_31bf3856ad364e35_6.1.7600.16385_none_dc2dbb778f98e40f\winlogon.mof
 
< %SYSTEMDRIVE%\*.* >
[2014/05/31 11:17:10 | 000,383,786 | RHS- | M] () -- C:\bootmgr
[2014/06/01 01:12:19 | 000,008,192 | RHS- | M] () -- C:\BOOTSECT.BAK
[2014/06/02 09:26:19 | 3183,759,360 | -HS- | M] () -- C:\hiberfil.sys
[2014/06/02 09:26:18 | 4245,012,480 | -HS- | M] () -- C:\pagefile.sys
[2014/05/31 11:17:16 | 000,206,312 | RHS- | M] () -- C:\XELDZ
 
< %systemroot%\Fonts\*.com >
[2009/07/14 12:32:31 | 000,026,040 | ---- | M] () -- C:\Windows\Fonts\GlobalMonospace.CompositeFont
[2009/07/14 12:32:31 | 000,026,489 | ---- | M] () -- C:\Windows\Fonts\GlobalSansSerif.CompositeFont
[2009/07/14 12:32:31 | 000,029,779 | ---- | M] () -- C:\Windows\Fonts\GlobalSerif.CompositeFont
[2009/07/14 12:32:31 | 000,043,318 | ---- | M] () -- C:\Windows\Fonts\GlobalUserInterface.CompositeFont
 
< %systemroot%\Fonts\*.dll >
 
< %systemroot%\Fonts\*.ini >
[2009/06/11 03:49:50 | 000,000,065 | ---- | M] () -- C:\Windows\Fonts\desktop.ini
 
< %systemroot%\Fonts\*.ini2 >
 
< %systemroot%\Fonts\*.exe >
 
< %systemroot%\system32\spool\prtprocs\w32x86\*.* >
 
< %systemroot%\REPAIR\*.bak1 >
 
< %systemroot%\REPAIR\*.ini >
 
< %systemroot%\system32\*.jpg >
 
< %systemroot%\*.jpg >
 
< %systemroot%\*.png >
 
< %systemroot%\*.scr >
 
< %systemroot%\*._sy >
 
< %APPDATA%\Adobe\Update\*.* >
 
< %ALLUSERSPROFILE%\Favorites\*.* >
 
< %APPDATA%\Microsoft\*.* >
 
< %PROGRAMFILES%\*.* >
[2009/07/14 11:54:24 | 000,000,174 | -HS- | M] () -- C:\Program Files (x86)\desktop.ini
 
< %APPDATA%\Update\*.* >
 
< %systemroot%\*. /mp /s >
 
< dir "%systemdrive%\*" /S /A:L /C >
 Volume in drive C has no label.
 Volume Serial Number is BE1A-2DB3
 Directory of C:\
07/14/2009  12:08 PM    <JUNCTION>     Documents and Settings [C:\Users]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings
07/14/2009  12:08 PM    <SYMLINKD>     All Users [C:\ProgramData]
07/14/2009  12:08 PM    <JUNCTION>     Default User [C:\Users\Default]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Administrator
06/02/2014  08:56 AM    <JUNCTION>     Application Data [C:\Users\Administrator\AppData\Roaming]
06/02/2014  08:56 AM    <JUNCTION>     Cookies [C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Cookies]
06/02/2014  08:56 AM    <JUNCTION>     Local Settings [C:\Users\Administrator\AppData\Local]
06/02/2014  08:56 AM    <JUNCTION>     My Documents [C:\Users\Administrator\Documents]
06/02/2014  08:56 AM    <JUNCTION>     NetHood [C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Network Shortcuts]
06/02/2014  08:56 AM    <JUNCTION>     PrintHood [C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Printer Shortcuts]
06/02/2014  08:56 AM    <JUNCTION>     Recent [C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent]
06/02/2014  08:56 AM    <JUNCTION>     SendTo [C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\SendTo]
06/02/2014  08:56 AM    <JUNCTION>     Start Menu [C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu]
06/02/2014  08:56 AM    <JUNCTION>     Templates [C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Administrator\AppData\Local
06/02/2014  08:56 AM    <JUNCTION>     Application Data [C:\Users\Administrator\AppData\Local]
06/02/2014  08:56 AM    <JUNCTION>     History [C:\Users\Administrator\AppData\Local\Microsoft\Windows\History]
06/02/2014  08:56 AM    <JUNCTION>     Temporary Internet Files [C:\Users\Administrator\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Administrator\Documents
06/02/2014  08:56 AM    <JUNCTION>     My Music [C:\Users\Administrator\Music]
06/02/2014  08:56 AM    <JUNCTION>     My Pictures [C:\Users\Administrator\Pictures]
06/02/2014  08:56 AM    <JUNCTION>     My Videos [C:\Users\Administrator\Videos]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\All Users
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\ProgramData]
07/14/2009  12:08 PM    <JUNCTION>     Desktop [C:\Users\Public\Desktop]
07/14/2009  12:08 PM    <JUNCTION>     Documents [C:\Users\Public\Documents]
07/14/2009  12:08 PM    <JUNCTION>     Favorites [C:\Users\Public\Favorites]
07/14/2009  12:08 PM    <JUNCTION>     Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM    <JUNCTION>     Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\All Users\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\ProgramData]
07/14/2009  12:08 PM    <JUNCTION>     Desktop [C:\Users\Public\Desktop]
07/14/2009  12:08 PM    <JUNCTION>     Documents [C:\Users\Public\Documents]
07/14/2009  12:08 PM    <JUNCTION>     Favorites [C:\Users\Public\Favorites]
07/14/2009  12:08 PM    <JUNCTION>     Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM    <JUNCTION>     Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\All Users\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\ProgramData]
07/14/2009  12:08 PM    <JUNCTION>     Desktop [C:\Users\Public\Desktop]
07/14/2009  12:08 PM    <JUNCTION>     Documents [C:\Users\Public\Documents]
07/14/2009  12:08 PM    <JUNCTION>     Favorites [C:\Users\Public\Favorites]
07/14/2009  12:08 PM    <JUNCTION>     Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM    <JUNCTION>     Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\All Users\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\ProgramData]
07/14/2009  12:08 PM    <JUNCTION>     Desktop [C:\Users\Public\Desktop]
07/14/2009  12:08 PM    <JUNCTION>     Documents [C:\Users\Public\Documents]
07/14/2009  12:08 PM    <JUNCTION>     Favorites [C:\Users\Public\Favorites]
07/14/2009  12:08 PM    <JUNCTION>     Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM    <JUNCTION>     Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\ProgramData]
07/14/2009  12:08 PM    <JUNCTION>     Desktop [C:\Users\Public\Desktop]
07/14/2009  12:08 PM    <JUNCTION>     Documents [C:\Users\Public\Documents]
07/14/2009  12:08 PM    <JUNCTION>     Favorites [C:\Users\Public\Favorites]
07/14/2009  12:08 PM    <JUNCTION>     Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM    <JUNCTION>     Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\ProgramData]
07/14/2009  12:08 PM    <JUNCTION>     Desktop [C:\Users\Public\Desktop]
07/14/2009  12:08 PM    <JUNCTION>     Documents [C:\Users\Public\Documents]
07/14/2009  12:08 PM    <JUNCTION>     Favorites [C:\Users\Public\Favorites]
07/14/2009  12:08 PM    <JUNCTION>     Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM    <JUNCTION>     Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\ProgramData]
07/14/2009  12:08 PM    <JUNCTION>     Desktop [C:\Users\Public\Desktop]
07/14/2009  12:08 PM    <JUNCTION>     Documents [C:\Users\Public\Documents]
07/14/2009  12:08 PM    <JUNCTION>     Favorites [C:\Users\Public\Favorites]
07/14/2009  12:08 PM    <JUNCTION>     Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM    <JUNCTION>     Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\ProgramData]
07/14/2009  12:08 PM    <JUNCTION>     Desktop [C:\Users\Public\Desktop]
07/14/2009  12:08 PM    <JUNCTION>     Documents [C:\Users\Public\Documents]
07/14/2009  12:08 PM    <JUNCTION>     Favorites [C:\Users\Public\Favorites]
07/14/2009  12:08 PM    <JUNCTION>     Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM    <JUNCTION>     Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\ProgramData]
07/14/2009  12:08 PM    <JUNCTION>     Desktop [C:\Users\Public\Desktop]
07/14/2009  12:08 PM    <JUNCTION>     Documents [C:\Users\Public\Documents]
07/14/2009  12:08 PM    <JUNCTION>     Favorites [C:\Users\Public\Favorites]
07/14/2009  12:08 PM    <JUNCTION>     Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM    <JUNCTION>     Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\ProgramData]
07/14/2009  12:08 PM    <JUNCTION>     Desktop [C:\Users\Public\Desktop]
07/14/2009  12:08 PM    <JUNCTION>     Documents [C:\Users\Public\Documents]
07/14/2009  12:08 PM    <JUNCTION>     Favorites [C:\Users\Public\Favorites]
07/14/2009  12:08 PM    <JUNCTION>     Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM    <JUNCTION>     Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\ProgramData]
07/14/2009  12:08 PM    <JUNCTION>     Desktop [C:\Users\Public\Desktop]
07/14/2009  12:08 PM    <JUNCTION>     Documents [C:\Users\Public\Documents]
07/14/2009  12:08 PM    <JUNCTION>     Favorites [C:\Users\Public\Favorites]
07/14/2009  12:08 PM    <JUNCTION>     Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM    <JUNCTION>     Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\ProgramData]
07/14/2009  12:08 PM    <JUNCTION>     Desktop [C:\Users\Public\Desktop]
07/14/2009  12:08 PM    <JUNCTION>     Documents [C:\Users\Public\Documents]
07/14/2009  12:08 PM    <JUNCTION>     Favorites [C:\Users\Public\Favorites]
07/14/2009  12:08 PM    <JUNCTION>     Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM    <JUNCTION>     Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\ProgramData]
07/14/2009  12:08 PM    <JUNCTION>     Desktop [C:\Users\Public\Desktop]
07/14/2009  12:08 PM    <JUNCTION>     Documents [C:\Users\Public\Documents]
07/14/2009  12:08 PM    <JUNCTION>     Favorites [C:\Users\Public\Favorites]
07/14/2009  12:08 PM    <JUNCTION>     Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM    <JUNCTION>     Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [.]
07/14/2009  12:08 PM    <JUNCTION>     Desktop [.]
07/14/2009  12:08 PM    <JUNCTION>     Documents [.]
07/14/2009  12:08 PM    <JUNCTION>     Favorites [.]
07/14/2009  12:08 PM    <JUNCTION>     Start Menu [.]
07/14/2009  12:08 PM    <JUNCTION>     Templates [.]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
07/14/2009  12:08 PM    <JUNCTION>     My Music [C:\Users\Public\Music]
07/14/2009  12:08 PM    <JUNCTION>     My Pictures [.]
07/14/2009  12:08 PM    <JUNCTION>     My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
07/14/2009  12:08 PM    <JUNCTION>     My Music [C:\Users\Public\Music]
07/14/2009  12:08 PM    <JUNCTION>     My Pictures [C:\Users\Public\Pictures]
07/14/2009  12:08 PM    <JUNCTION>     My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
07/14/2009  12:08 PM    <JUNCTION>     My Music [C:\Users\Public\Music]
07/14/2009  12:08 PM    <JUNCTION>     My Pictures [C:\Users\Public\Pictures]
07/14/2009  12:08 PM    <JUNCTION>     My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
07/14/2009  12:08 PM    <JUNCTION>     My Music [C:\Users\Public\Music]
07/14/2009  12:08 PM    <JUNCTION>     My Pictures [C:\Users\Public\Pictures]
07/14/2009  12:08 PM    <JUNCTION>     My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
07/14/2009  12:08 PM    <JUNCTION>     My Music [C:\Users\Public\Music]
07/14/2009  12:08 PM    <JUNCTION>     My Pictures [C:\Users\Public\Pictures]
07/14/2009  12:08 PM    <JUNCTION>     My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
07/14/2009  12:08 PM    <JUNCTION>     My Music [C:\Users\Public\Music]
07/14/2009  12:08 PM    <JUNCTION>     My Pictures [C:\Users\Public\Pictures]
07/14/2009  12:08 PM    <JUNCTION>     My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
07/14/2009  12:08 PM    <JUNCTION>     My Music [C:\Users\Public\Music]
07/14/2009  12:08 PM    <JUNCTION>     My Pictures [C:\Users\Public\Pictures]
07/14/2009  12:08 PM    <JUNCTION>     My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
07/14/2009  12:08 PM    <JUNCTION>     My Music [C:\Users\Public\Music]
07/14/2009  12:08 PM    <JUNCTION>     My Pictures [C:\Users\Public\Pictures]
07/14/2009  12:08 PM    <JUNCTION>     My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Documents
07/14/2009  12:08 PM    <JUNCTION>     My Music [C:\Users\Public\Music]
07/14/2009  12:08 PM    <JUNCTION>     My Pictures [C:\Users\Public\Pictures]
07/14/2009  12:08 PM    <JUNCTION>     My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Documents
07/14/2009  12:08 PM    <JUNCTION>     My Music [C:\Users\Public\Music]
07/14/2009  12:08 PM    <JUNCTION>     My Pictures [C:\Users\Public\Pictures]
07/14/2009  12:08 PM    <JUNCTION>     My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\All Users\Application Data\Application Data\Documents
07/14/2009  12:08 PM    <JUNCTION>     My Music [C:\Users\Public\Music]
07/14/2009  12:08 PM    <JUNCTION>     My Pictures [C:\Users\Public\Pictures]
07/14/2009  12:08 PM    <JUNCTION>     My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\All Users\Application Data\Documents
07/14/2009  12:08 PM    <JUNCTION>     My Music [C:\Users\Public\Music]
07/14/2009  12:08 PM    <JUNCTION>     My Pictures [C:\Users\Public\Pictures]
07/14/2009  12:08 PM    <JUNCTION>     My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\All Users\Documents
07/14/2009  12:08 PM    <JUNCTION>     My Music [C:\Users\Public\Music]
07/14/2009  12:08 PM    <JUNCTION>     My Pictures [C:\Users\Public\Pictures]
07/14/2009  12:08 PM    <JUNCTION>     My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Roaming]
07/14/2009  12:08 PM    <JUNCTION>     Cookies [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Cookies]
07/14/2009  12:08 PM    <JUNCTION>     Local Settings [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     My Documents [C:\Users\Default\Documents]
07/14/2009  12:08 PM    <JUNCTION>     NetHood [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Network Shortcuts]
07/14/2009  12:08 PM    <JUNCTION>     PrintHood [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Printer Shortcuts]
07/14/2009  12:08 PM    <JUNCTION>     Recent [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Recent]
07/14/2009  12:08 PM    <JUNCTION>     SendTo [C:\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo]
07/14/2009  12:08 PM    <JUNCTION>     Start Menu [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM    <JUNCTION>     Templates [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default\AppData\Local
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default\AppData\Local\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default\AppData\Local\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default\AppData\Local\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default\AppData\Local\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [.]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [.]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default\Documents
07/14/2009  12:08 PM    <JUNCTION>     My Music [C:\Users\Default\Music]
07/14/2009  12:08 PM    <JUNCTION>     My Pictures [C:\Users\Default\Pictures]
07/14/2009  12:08 PM    <JUNCTION>     My Videos [C:\Users\Default\Videos]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default\Local Settings
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default\Local Settings\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default\Local Settings\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default\Local Settings\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default\Local Settings\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [.]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [.]
07/14/2009  12:08 PM    <JUNCTION>     History [.]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [.]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default\My Documents
07/14/2009  12:08 PM    <JUNCTION>     My Music [C:\Users\Default\Music]
07/14/2009  12:08 PM    <JUNCTION>     My Pictures [C:\Users\Default\Pictures]
07/14/2009  12:08 PM    <JUNCTION>     My Videos [C:\Users\Default\Videos]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default User
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Roaming]
07/14/2009  12:08 PM    <JUNCTION>     Cookies [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Cookies]
07/14/2009  12:08 PM    <JUNCTION>     Local Settings [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     My Documents [C:\Users\Default\Documents]
07/14/2009  12:08 PM    <JUNCTION>     NetHood [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Network Shortcuts]
07/14/2009  12:08 PM    <JUNCTION>     PrintHood [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Printer Shortcuts]
07/14/2009  12:08 PM    <JUNCTION>     Recent [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Recent]
07/14/2009  12:08 PM    <JUNCTION>     SendTo [C:\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo]
07/14/2009  12:08 PM    <JUNCTION>     Start Menu [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM    <JUNCTION>     Templates [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default User\AppData\Local
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default User\AppData\Local\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default User\AppData\Local\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default User\AppData\Local\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default User\AppData\Local\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default User\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default User\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default User\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default User\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default User\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default User\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default User\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [.]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default User\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [.]
07/14/2009  12:08 PM    <JUNCTION>     History [.]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [.]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default User\Documents
07/14/2009  12:08 PM    <JUNCTION>     My Music [C:\Users\Default\Music]
07/14/2009  12:08 PM    <JUNCTION>     My Pictures [C:\Users\Default\Pictures]
07/14/2009  12:08 PM    <JUNCTION>     My Videos [C:\Users\Default\Videos]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default User\Local Settings
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default User\Local Settings\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default User\Local Settings\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default User\Local Settings\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default User\Local Settings\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default User\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default User\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default User\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default User\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default User\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default User\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default User\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [.]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default User\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [.]
07/14/2009  12:08 PM    <JUNCTION>     History [.]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [.]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Default User\My Documents
07/14/2009  12:08 PM    <JUNCTION>     My Music [C:\Users\Default\Music]
07/14/2009  12:08 PM    <JUNCTION>     My Pictures [C:\Users\Default\Pictures]
07/14/2009  12:08 PM    <JUNCTION>     My Videos [C:\Users\Default\Videos]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\phuong
05/31/2014  10:23 AM    <JUNCTION>     Application Data [C:\Users\phuong\AppData\Roaming]
05/31/2014  10:23 AM    <JUNCTION>     Cookies [C:\Users\phuong\AppData\Roaming\Microsoft\Windows\Cookies]
05/31/2014  10:23 AM    <JUNCTION>     Local Settings [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM    <JUNCTION>     My Documents [C:\Users\phuong\Documents]
05/31/2014  10:23 AM    <JUNCTION>     NetHood [C:\Users\phuong\AppData\Roaming\Microsoft\Windows\Network Shortcuts]
05/31/2014  10:23 AM    <JUNCTION>     PrintHood [C:\Users\phuong\AppData\Roaming\Microsoft\Windows\Printer Shortcuts]
05/31/2014  10:23 AM    <JUNCTION>     Recent [C:\Users\phuong\AppData\Roaming\Microsoft\Windows\Recent]
05/31/2014  10:23 AM    <JUNCTION>     SendTo [C:\Users\phuong\AppData\Roaming\Microsoft\Windows\SendTo]
05/31/2014  10:23 AM    <JUNCTION>     Start Menu [C:\Users\phuong\AppData\Roaming\Microsoft\Windows\Start Menu]
05/31/2014  10:23 AM    <JUNCTION>     Templates [C:\Users\phuong\AppData\Roaming\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\phuong\AppData\Local
05/31/2014  10:23 AM    <JUNCTION>     Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM    <JUNCTION>     History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM    <JUNCTION>     Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\phuong\AppData\Local\Application Data
05/31/2014  10:23 AM    <JUNCTION>     Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM    <JUNCTION>     History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM    <JUNCTION>     Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\phuong\AppData\Local\Application Data\Application Data
05/31/2014  10:23 AM    <JUNCTION>     Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM    <JUNCTION>     History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM    <JUNCTION>     Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\phuong\AppData\Local\Application Data\Application Data\Application Data
05/31/2014  10:23 AM    <JUNCTION>     Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM    <JUNCTION>     History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM    <JUNCTION>     Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\phuong\AppData\Local\Application Data\Application Data\Application Data\Application Data
05/31/2014  10:23 AM    <JUNCTION>     Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM    <JUNCTION>     History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM    <JUNCTION>     Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\phuong\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  10:23 AM    <JUNCTION>     Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM    <JUNCTION>     History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM    <JUNCTION>     Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\phuong\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  10:23 AM    <JUNCTION>     Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM    <JUNCTION>     History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM    <JUNCTION>     Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\phuong\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  10:23 AM    <JUNCTION>     Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM    <JUNCTION>     History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM    <JUNCTION>     Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\phuong\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  10:23 AM    <JUNCTION>     Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM    <JUNCTION>     History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM    <JUNCTION>     Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\phuong\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  10:23 AM    <JUNCTION>     Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM    <JUNCTION>     History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM    <JUNCTION>     Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\phuong\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  10:23 AM    <JUNCTION>     Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM    <JUNCTION>     History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM    <JUNCTION>     Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\phuong\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  10:23 AM    <JUNCTION>     Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM    <JUNCTION>     History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM    <JUNCTION>     Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\phuong\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  10:23 AM    <JUNCTION>     Application Data [.]
05/31/2014  10:23 AM    <JUNCTION>     History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM    <JUNCTION>     Temporary Internet Files [.]
               0 File(s)              0 bytes


#3 BillGatesBoss

BillGatesBoss

    New Member

  • New Member
  • Pip
  • 3 posts

Posted 02 June 2014 - 12:37 AM

Directory of C:\Documents and Settings\phuong\Documents
05/31/2014  10:23 AM    <JUNCTION>     My Music [C:\Users\phuong\Music]
05/31/2014  10:23 AM    <JUNCTION>     My Pictures [C:\Users\phuong\Pictures]
05/31/2014  10:23 AM    <JUNCTION>     My Videos [C:\Users\phuong\Videos]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\phuong\Local Settings
05/31/2014  10:23 AM    <JUNCTION>     Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM    <JUNCTION>     History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM    <JUNCTION>     Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\phuong\Local Settings\Application Data
05/31/2014  10:23 AM    <JUNCTION>     Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM    <JUNCTION>     History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM    <JUNCTION>     Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\phuong\Local Settings\Application Data\Application Data
05/31/2014  10:23 AM    <JUNCTION>     Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM    <JUNCTION>     History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM    <JUNCTION>     Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\phuong\Local Settings\Application Data\Application Data\Application Data
05/31/2014  10:23 AM    <JUNCTION>     Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM    <JUNCTION>     History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM    <JUNCTION>     Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\phuong\Local Settings\Application Data\Application Data\Application Data\Application Data
05/31/2014  10:23 AM    <JUNCTION>     Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM    <JUNCTION>     History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM    <JUNCTION>     Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\phuong\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  10:23 AM    <JUNCTION>     Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM    <JUNCTION>     History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM    <JUNCTION>     Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\phuong\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  10:23 AM    <JUNCTION>     Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM    <JUNCTION>     History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM    <JUNCTION>     Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\phuong\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  10:23 AM    <JUNCTION>     Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM    <JUNCTION>     History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM    <JUNCTION>     Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\phuong\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  10:23 AM    <JUNCTION>     Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM    <JUNCTION>     History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM    <JUNCTION>     Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\phuong\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  10:23 AM    <JUNCTION>     Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM    <JUNCTION>     History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM    <JUNCTION>     Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\phuong\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  10:23 AM    <JUNCTION>     Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM    <JUNCTION>     History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM    <JUNCTION>     Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\phuong\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  10:23 AM    <JUNCTION>     Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM    <JUNCTION>     History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM    <JUNCTION>     Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\phuong\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  10:23 AM    <JUNCTION>     Application Data [.]
05/31/2014  10:23 AM    <JUNCTION>     History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM    <JUNCTION>     Temporary Internet Files [.]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\phuong\My Documents
05/31/2014  10:23 AM    <JUNCTION>     My Music [C:\Users\phuong\Music]
05/31/2014  10:23 AM    <JUNCTION>     My Pictures [C:\Users\phuong\Pictures]
05/31/2014  10:23 AM    <JUNCTION>     My Videos [C:\Users\phuong\Videos]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\Public\Documents
07/14/2009  12:08 PM    <JUNCTION>     My Music [C:\Users\Public\Music]
07/14/2009  12:08 PM    <JUNCTION>     My Pictures [C:\Users\Public\Pictures]
07/14/2009  12:08 PM    <JUNCTION>     My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\UpdatusUser
05/31/2014  11:12 AM    <JUNCTION>     Application Data [C:\Users\UpdatusUser\AppData\Roaming]
05/31/2014  11:12 AM    <JUNCTION>     Cookies [C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Cookies]
05/31/2014  11:12 AM    <JUNCTION>     Local Settings [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM    <JUNCTION>     My Documents [C:\Users\UpdatusUser\Documents]
05/31/2014  11:12 AM    <JUNCTION>     NetHood [C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Network Shortcuts]
05/31/2014  11:12 AM    <JUNCTION>     PrintHood [C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Printer Shortcuts]
05/31/2014  11:12 AM    <JUNCTION>     Recent [C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Recent]
05/31/2014  11:12 AM    <JUNCTION>     SendTo [C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\SendTo]
05/31/2014  11:12 AM    <JUNCTION>     Start Menu [C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu]
05/31/2014  11:12 AM    <JUNCTION>     Templates [C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\UpdatusUser\AppData\Local
05/31/2014  11:12 AM    <JUNCTION>     Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM    <JUNCTION>     History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM    <JUNCTION>     Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\UpdatusUser\AppData\Local\Application Data
05/31/2014  11:12 AM    <JUNCTION>     Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM    <JUNCTION>     History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM    <JUNCTION>     Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\UpdatusUser\AppData\Local\Application Data\Application Data
05/31/2014  11:12 AM    <JUNCTION>     Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM    <JUNCTION>     History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM    <JUNCTION>     Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\UpdatusUser\AppData\Local\Application Data\Application Data\Application Data
05/31/2014  11:12 AM    <JUNCTION>     Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM    <JUNCTION>     History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM    <JUNCTION>     Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\UpdatusUser\AppData\Local\Application Data\Application Data\Application Data\Application Data
05/31/2014  11:12 AM    <JUNCTION>     Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM    <JUNCTION>     History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM    <JUNCTION>     Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\UpdatusUser\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  11:12 AM    <JUNCTION>     Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM    <JUNCTION>     History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM    <JUNCTION>     Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\UpdatusUser\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  11:12 AM    <JUNCTION>     Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM    <JUNCTION>     History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM    <JUNCTION>     Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\UpdatusUser\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  11:12 AM    <JUNCTION>     Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM    <JUNCTION>     History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM    <JUNCTION>     Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\UpdatusUser\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  11:12 AM    <JUNCTION>     Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM    <JUNCTION>     History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM    <JUNCTION>     Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\UpdatusUser\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  11:12 AM    <JUNCTION>     Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM    <JUNCTION>     History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM    <JUNCTION>     Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\UpdatusUser\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  11:12 AM    <JUNCTION>     Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM    <JUNCTION>     History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM    <JUNCTION>     Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\UpdatusUser\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  11:12 AM    <JUNCTION>     Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM    <JUNCTION>     History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM    <JUNCTION>     Temporary Internet Files [.]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\UpdatusUser\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  11:12 AM    <JUNCTION>     Application Data [.]
05/31/2014  11:12 AM    <JUNCTION>     History [.]
05/31/2014  11:12 AM    <JUNCTION>     Temporary Internet Files [.]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\UpdatusUser\Documents
05/31/2014  11:12 AM    <JUNCTION>     My Music [C:\Users\UpdatusUser\Music]
05/31/2014  11:12 AM    <JUNCTION>     My Pictures [C:\Users\UpdatusUser\Pictures]
05/31/2014  11:12 AM    <JUNCTION>     My Videos [C:\Users\UpdatusUser\Videos]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\UpdatusUser\Local Settings
05/31/2014  11:12 AM    <JUNCTION>     Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM    <JUNCTION>     History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM    <JUNCTION>     Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\UpdatusUser\Local Settings\Application Data
05/31/2014  11:12 AM    <JUNCTION>     Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM    <JUNCTION>     History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM    <JUNCTION>     Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\UpdatusUser\Local Settings\Application Data\Application Data
05/31/2014  11:12 AM    <JUNCTION>     Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM    <JUNCTION>     History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM    <JUNCTION>     Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\UpdatusUser\Local Settings\Application Data\Application Data\Application Data
05/31/2014  11:12 AM    <JUNCTION>     Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM    <JUNCTION>     History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM    <JUNCTION>     Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\UpdatusUser\Local Settings\Application Data\Application Data\Application Data\Application Data
05/31/2014  11:12 AM    <JUNCTION>     Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM    <JUNCTION>     History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM    <JUNCTION>     Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\UpdatusUser\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  11:12 AM    <JUNCTION>     Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM    <JUNCTION>     History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM    <JUNCTION>     Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\UpdatusUser\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  11:12 AM    <JUNCTION>     Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM    <JUNCTION>     History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM    <JUNCTION>     Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\UpdatusUser\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  11:12 AM    <JUNCTION>     Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM    <JUNCTION>     History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM    <JUNCTION>     Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\UpdatusUser\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  11:12 AM    <JUNCTION>     Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM    <JUNCTION>     History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM    <JUNCTION>     Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\UpdatusUser\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  11:12 AM    <JUNCTION>     Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM    <JUNCTION>     History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM    <JUNCTION>     Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\UpdatusUser\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  11:12 AM    <JUNCTION>     Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM    <JUNCTION>     History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM    <JUNCTION>     Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\UpdatusUser\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  11:12 AM    <JUNCTION>     Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM    <JUNCTION>     History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM    <JUNCTION>     Temporary Internet Files [.]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\UpdatusUser\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  11:12 AM    <JUNCTION>     Application Data [.]
05/31/2014  11:12 AM    <JUNCTION>     History [.]
05/31/2014  11:12 AM    <JUNCTION>     Temporary Internet Files [.]
               0 File(s)              0 bytes
 Directory of C:\Documents and Settings\UpdatusUser\My Documents
05/31/2014  11:12 AM    <JUNCTION>     My Music [C:\Users\UpdatusUser\Music]
05/31/2014  11:12 AM    <JUNCTION>     My Pictures [C:\Users\UpdatusUser\Pictures]
05/31/2014  11:12 AM    <JUNCTION>     My Videos [C:\Users\UpdatusUser\Videos]
               0 File(s)              0 bytes
 Directory of C:\ProgramData
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\ProgramData]
07/14/2009  12:08 PM    <JUNCTION>     Desktop [C:\Users\Public\Desktop]
07/14/2009  12:08 PM    <JUNCTION>     Documents [C:\Users\Public\Documents]
07/14/2009  12:08 PM    <JUNCTION>     Favorites [C:\Users\Public\Favorites]
07/14/2009  12:08 PM    <JUNCTION>     Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM    <JUNCTION>     Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\ProgramData\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\ProgramData]
07/14/2009  12:08 PM    <JUNCTION>     Desktop [C:\Users\Public\Desktop]
07/14/2009  12:08 PM    <JUNCTION>     Documents [C:\Users\Public\Documents]
07/14/2009  12:08 PM    <JUNCTION>     Favorites [C:\Users\Public\Favorites]
07/14/2009  12:08 PM    <JUNCTION>     Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM    <JUNCTION>     Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\ProgramData\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\ProgramData]
07/14/2009  12:08 PM    <JUNCTION>     Desktop [C:\Users\Public\Desktop]
07/14/2009  12:08 PM    <JUNCTION>     Documents [C:\Users\Public\Documents]
07/14/2009  12:08 PM    <JUNCTION>     Favorites [C:\Users\Public\Favorites]
07/14/2009  12:08 PM    <JUNCTION>     Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM    <JUNCTION>     Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\ProgramData\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\ProgramData]
07/14/2009  12:08 PM    <JUNCTION>     Desktop [C:\Users\Public\Desktop]
07/14/2009  12:08 PM    <JUNCTION>     Documents [C:\Users\Public\Documents]
07/14/2009  12:08 PM    <JUNCTION>     Favorites [C:\Users\Public\Favorites]
07/14/2009  12:08 PM    <JUNCTION>     Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM    <JUNCTION>     Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\ProgramData\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\ProgramData]
07/14/2009  12:08 PM    <JUNCTION>     Desktop [C:\Users\Public\Desktop]
07/14/2009  12:08 PM    <JUNCTION>     Documents [C:\Users\Public\Documents]
07/14/2009  12:08 PM    <JUNCTION>     Favorites [C:\Users\Public\Favorites]
07/14/2009  12:08 PM    <JUNCTION>     Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM    <JUNCTION>     Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\ProgramData]
07/14/2009  12:08 PM    <JUNCTION>     Desktop [C:\Users\Public\Desktop]
07/14/2009  12:08 PM    <JUNCTION>     Documents [C:\Users\Public\Documents]
07/14/2009  12:08 PM    <JUNCTION>     Favorites [C:\Users\Public\Favorites]
07/14/2009  12:08 PM    <JUNCTION>     Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM    <JUNCTION>     Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\ProgramData]
07/14/2009  12:08 PM    <JUNCTION>     Desktop [C:\Users\Public\Desktop]
07/14/2009  12:08 PM    <JUNCTION>     Documents [C:\Users\Public\Documents]
07/14/2009  12:08 PM    <JUNCTION>     Favorites [C:\Users\Public\Favorites]
07/14/2009  12:08 PM    <JUNCTION>     Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM    <JUNCTION>     Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\ProgramData]
07/14/2009  12:08 PM    <JUNCTION>     Desktop [C:\Users\Public\Desktop]
07/14/2009  12:08 PM    <JUNCTION>     Documents [C:\Users\Public\Documents]
07/14/2009  12:08 PM    <JUNCTION>     Favorites [C:\Users\Public\Favorites]
07/14/2009  12:08 PM    <JUNCTION>     Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM    <JUNCTION>     Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\ProgramData]
07/14/2009  12:08 PM    <JUNCTION>     Desktop [C:\Users\Public\Desktop]
07/14/2009  12:08 PM    <JUNCTION>     Documents [C:\Users\Public\Documents]
07/14/2009  12:08 PM    <JUNCTION>     Favorites [C:\Users\Public\Favorites]
07/14/2009  12:08 PM    <JUNCTION>     Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM    <JUNCTION>     Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\ProgramData]
07/14/2009  12:08 PM    <JUNCTION>     Desktop [C:\Users\Public\Desktop]
07/14/2009  12:08 PM    <JUNCTION>     Documents [C:\Users\Public\Documents]
07/14/2009  12:08 PM    <JUNCTION>     Favorites [C:\Users\Public\Favorites]
07/14/2009  12:08 PM    <JUNCTION>     Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM    <JUNCTION>     Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\ProgramData]
07/14/2009  12:08 PM    <JUNCTION>     Desktop [C:\Users\Public\Desktop]
07/14/2009  12:08 PM    <JUNCTION>     Documents [C:\Users\Public\Documents]
07/14/2009  12:08 PM    <JUNCTION>     Favorites [C:\Users\Public\Favorites]
07/14/2009  12:08 PM    <JUNCTION>     Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM    <JUNCTION>     Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\ProgramData]
07/14/2009  12:08 PM    <JUNCTION>     Desktop [C:\Users\Public\Desktop]
07/14/2009  12:08 PM    <JUNCTION>     Documents [C:\Users\Public\Documents]
07/14/2009  12:08 PM    <JUNCTION>     Favorites [C:\Users\Public\Favorites]
07/14/2009  12:08 PM    <JUNCTION>     Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM    <JUNCTION>     Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\ProgramData]
07/14/2009  12:08 PM    <JUNCTION>     Desktop [C:\Users\Public\Desktop]
07/14/2009  12:08 PM    <JUNCTION>     Documents [C:\Users\Public\Documents]
07/14/2009  12:08 PM    <JUNCTION>     Favorites [C:\Users\Public\Favorites]
07/14/2009  12:08 PM    <JUNCTION>     Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM    <JUNCTION>     Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\ProgramData]
07/14/2009  12:08 PM    <JUNCTION>     Desktop [C:\Users\Public\Desktop]
07/14/2009  12:08 PM    <JUNCTION>     Documents [C:\Users\Public\Documents]
07/14/2009  12:08 PM    <JUNCTION>     Favorites [C:\Users\Public\Favorites]
07/14/2009  12:08 PM    <JUNCTION>     Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM    <JUNCTION>     Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [.]
07/14/2009  12:08 PM    <JUNCTION>     Desktop [.]
07/14/2009  12:08 PM    <JUNCTION>     Documents [.]
07/14/2009  12:08 PM    <JUNCTION>     Favorites [.]
07/14/2009  12:08 PM    <JUNCTION>     Start Menu [.]
07/14/2009  12:08 PM    <JUNCTION>     Templates [.]
               0 File(s)              0 bytes
 Directory of C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
07/14/2009  12:08 PM    <JUNCTION>     My Music [C:\Users\Public\Music]
07/14/2009  12:08 PM    <JUNCTION>     My Pictures [C:\Users\Public\Pictures]
07/14/2009  12:08 PM    <JUNCTION>     My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
07/14/2009  12:08 PM    <JUNCTION>     My Music [C:\Users\Public\Music]
07/14/2009  12:08 PM    <JUNCTION>     My Pictures [C:\Users\Public\Pictures]
07/14/2009  12:08 PM    <JUNCTION>     My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
07/14/2009  12:08 PM    <JUNCTION>     My Music [C:\Users\Public\Music]
07/14/2009  12:08 PM    <JUNCTION>     My Pictures [C:\Users\Public\Pictures]
07/14/2009  12:08 PM    <JUNCTION>     My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
07/14/2009  12:08 PM    <JUNCTION>     My Music [C:\Users\Public\Music]
07/14/2009  12:08 PM    <JUNCTION>     My Pictures [C:\Users\Public\Pictures]
07/14/2009  12:08 PM    <JUNCTION>     My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
07/14/2009  12:08 PM    <JUNCTION>     My Music [C:\Users\Public\Music]
07/14/2009  12:08 PM    <JUNCTION>     My Pictures [C:\Users\Public\Pictures]
07/14/2009  12:08 PM    <JUNCTION>     My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
07/14/2009  12:08 PM    <JUNCTION>     My Music [C:\Users\Public\Music]
07/14/2009  12:08 PM    <JUNCTION>     My Pictures [C:\Users\Public\Pictures]
07/14/2009  12:08 PM    <JUNCTION>     My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
07/14/2009  12:08 PM    <JUNCTION>     My Music [C:\Users\Public\Music]
07/14/2009  12:08 PM    <JUNCTION>     My Pictures [C:\Users\Public\Pictures]
07/14/2009  12:08 PM    <JUNCTION>     My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
07/14/2009  12:08 PM    <JUNCTION>     My Music [C:\Users\Public\Music]
07/14/2009  12:08 PM    <JUNCTION>     My Pictures [C:\Users\Public\Pictures]
07/14/2009  12:08 PM    <JUNCTION>     My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
07/14/2009  12:08 PM    <JUNCTION>     My Music [C:\Users\Public\Music]
07/14/2009  12:08 PM    <JUNCTION>     My Pictures [C:\Users\Public\Pictures]
07/14/2009  12:08 PM    <JUNCTION>     My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Documents
07/14/2009  12:08 PM    <JUNCTION>     My Music [C:\Users\Public\Music]
07/14/2009  12:08 PM    <JUNCTION>     My Pictures [C:\Users\Public\Pictures]
07/14/2009  12:08 PM    <JUNCTION>     My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\ProgramData\Application Data\Application Data\Application Data\Documents
07/14/2009  12:08 PM    <JUNCTION>     My Music [C:\Users\Public\Music]
07/14/2009  12:08 PM    <JUNCTION>     My Pictures [C:\Users\Public\Pictures]
07/14/2009  12:08 PM    <JUNCTION>     My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\ProgramData\Application Data\Application Data\Documents
07/14/2009  12:08 PM    <JUNCTION>     My Music [C:\Users\Public\Music]
07/14/2009  12:08 PM    <JUNCTION>     My Pictures [C:\Users\Public\Pictures]
07/14/2009  12:08 PM    <JUNCTION>     My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\ProgramData\Application Data\Documents
07/14/2009  12:08 PM    <JUNCTION>     My Music [C:\Users\Public\Music]
07/14/2009  12:08 PM    <JUNCTION>     My Pictures [C:\Users\Public\Pictures]
07/14/2009  12:08 PM    <JUNCTION>     My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\ProgramData\Documents
07/14/2009  12:08 PM    <JUNCTION>     My Music [C:\Users\Public\Music]
07/14/2009  12:08 PM    <JUNCTION>     My Pictures [C:\Users\Public\Pictures]
07/14/2009  12:08 PM    <JUNCTION>     My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\Users
07/14/2009  12:08 PM    <SYMLINKD>     All Users [C:\ProgramData]
07/14/2009  12:08 PM    <JUNCTION>     Default User [C:\Users\Default]
               0 File(s)              0 bytes
 Directory of C:\Users\Administrator
06/02/2014  08:56 AM    <JUNCTION>     Application Data [C:\Users\Administrator\AppData\Roaming]
06/02/2014  08:56 AM    <JUNCTION>     Cookies [C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Cookies]
06/02/2014  08:56 AM    <JUNCTION>     Local Settings [C:\Users\Administrator\AppData\Local]
06/02/2014  08:56 AM    <JUNCTION>     My Documents [C:\Users\Administrator\Documents]
06/02/2014  08:56 AM    <JUNCTION>     NetHood [C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Network Shortcuts]
06/02/2014  08:56 AM    <JUNCTION>     PrintHood [C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Printer Shortcuts]
06/02/2014  08:56 AM    <JUNCTION>     Recent [C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent]
06/02/2014  08:56 AM    <JUNCTION>     SendTo [C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\SendTo]
06/02/2014  08:56 AM    <JUNCTION>     Start Menu [C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu]
06/02/2014  08:56 AM    <JUNCTION>     Templates [C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\Users\Administrator\AppData\Local
06/02/2014  08:56 AM    <JUNCTION>     Application Data [C:\Users\Administrator\AppData\Local]
06/02/2014  08:56 AM    <JUNCTION>     History [C:\Users\Administrator\AppData\Local\Microsoft\Windows\History]
06/02/2014  08:56 AM    <JUNCTION>     Temporary Internet Files [C:\Users\Administrator\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Administrator\Documents
06/02/2014  08:56 AM    <JUNCTION>     My Music [C:\Users\Administrator\Music]
06/02/2014  08:56 AM    <JUNCTION>     My Pictures [C:\Users\Administrator\Pictures]
06/02/2014  08:56 AM    <JUNCTION>     My Videos [C:\Users\Administrator\Videos]
               0 File(s)              0 bytes
 Directory of C:\Users\All Users
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\ProgramData]
07/14/2009  12:08 PM    <JUNCTION>     Desktop [C:\Users\Public\Desktop]
07/14/2009  12:08 PM    <JUNCTION>     Documents [C:\Users\Public\Documents]
07/14/2009  12:08 PM    <JUNCTION>     Favorites [C:\Users\Public\Favorites]
07/14/2009  12:08 PM    <JUNCTION>     Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM    <JUNCTION>     Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\Users\All Users\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\ProgramData]
07/14/2009  12:08 PM    <JUNCTION>     Desktop [C:\Users\Public\Desktop]
07/14/2009  12:08 PM    <JUNCTION>     Documents [C:\Users\Public\Documents]
07/14/2009  12:08 PM    <JUNCTION>     Favorites [C:\Users\Public\Favorites]
07/14/2009  12:08 PM    <JUNCTION>     Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM    <JUNCTION>     Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\Users\All Users\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\ProgramData]
07/14/2009  12:08 PM    <JUNCTION>     Desktop [C:\Users\Public\Desktop]
07/14/2009  12:08 PM    <JUNCTION>     Documents [C:\Users\Public\Documents]
07/14/2009  12:08 PM    <JUNCTION>     Favorites [C:\Users\Public\Favorites]
07/14/2009  12:08 PM    <JUNCTION>     Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM    <JUNCTION>     Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\Users\All Users\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\ProgramData]
07/14/2009  12:08 PM    <JUNCTION>     Desktop [C:\Users\Public\Desktop]
07/14/2009  12:08 PM    <JUNCTION>     Documents [C:\Users\Public\Documents]
07/14/2009  12:08 PM    <JUNCTION>     Favorites [C:\Users\Public\Favorites]
07/14/2009  12:08 PM    <JUNCTION>     Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM    <JUNCTION>     Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\Users\All Users\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\ProgramData]
07/14/2009  12:08 PM    <JUNCTION>     Desktop [C:\Users\Public\Desktop]
07/14/2009  12:08 PM    <JUNCTION>     Documents [C:\Users\Public\Documents]
07/14/2009  12:08 PM    <JUNCTION>     Favorites [C:\Users\Public\Favorites]
07/14/2009  12:08 PM    <JUNCTION>     Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM    <JUNCTION>     Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\ProgramData]
07/14/2009  12:08 PM    <JUNCTION>     Desktop [C:\Users\Public\Desktop]
07/14/2009  12:08 PM    <JUNCTION>     Documents [C:\Users\Public\Documents]
07/14/2009  12:08 PM    <JUNCTION>     Favorites [C:\Users\Public\Favorites]
07/14/2009  12:08 PM    <JUNCTION>     Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM    <JUNCTION>     Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\ProgramData]
07/14/2009  12:08 PM    <JUNCTION>     Desktop [C:\Users\Public\Desktop]
07/14/2009  12:08 PM    <JUNCTION>     Documents [C:\Users\Public\Documents]
07/14/2009  12:08 PM    <JUNCTION>     Favorites [C:\Users\Public\Favorites]
07/14/2009  12:08 PM    <JUNCTION>     Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM    <JUNCTION>     Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\ProgramData]
07/14/2009  12:08 PM    <JUNCTION>     Desktop [C:\Users\Public\Desktop]
07/14/2009  12:08 PM    <JUNCTION>     Documents [C:\Users\Public\Documents]
07/14/2009  12:08 PM    <JUNCTION>     Favorites [C:\Users\Public\Favorites]
07/14/2009  12:08 PM    <JUNCTION>     Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM    <JUNCTION>     Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\ProgramData]
07/14/2009  12:08 PM    <JUNCTION>     Desktop [C:\Users\Public\Desktop]
07/14/2009  12:08 PM    <JUNCTION>     Documents [C:\Users\Public\Documents]
07/14/2009  12:08 PM    <JUNCTION>     Favorites [C:\Users\Public\Favorites]
07/14/2009  12:08 PM    <JUNCTION>     Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM    <JUNCTION>     Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\ProgramData]
07/14/2009  12:08 PM    <JUNCTION>     Desktop [C:\Users\Public\Desktop]
07/14/2009  12:08 PM    <JUNCTION>     Documents [C:\Users\Public\Documents]
07/14/2009  12:08 PM    <JUNCTION>     Favorites [C:\Users\Public\Favorites]
07/14/2009  12:08 PM    <JUNCTION>     Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM    <JUNCTION>     Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\ProgramData]
07/14/2009  12:08 PM    <JUNCTION>     Desktop [C:\Users\Public\Desktop]
07/14/2009  12:08 PM    <JUNCTION>     Documents [C:\Users\Public\Documents]
07/14/2009  12:08 PM    <JUNCTION>     Favorites [C:\Users\Public\Favorites]
07/14/2009  12:08 PM    <JUNCTION>     Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM    <JUNCTION>     Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\ProgramData]
07/14/2009  12:08 PM    <JUNCTION>     Desktop [C:\Users\Public\Desktop]
07/14/2009  12:08 PM    <JUNCTION>     Documents [C:\Users\Public\Documents]
07/14/2009  12:08 PM    <JUNCTION>     Favorites [C:\Users\Public\Favorites]
07/14/2009  12:08 PM    <JUNCTION>     Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM    <JUNCTION>     Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\ProgramData]
07/14/2009  12:08 PM    <JUNCTION>     Desktop [C:\Users\Public\Desktop]
07/14/2009  12:08 PM    <JUNCTION>     Documents [C:\Users\Public\Documents]
07/14/2009  12:08 PM    <JUNCTION>     Favorites [C:\Users\Public\Favorites]
07/14/2009  12:08 PM    <JUNCTION>     Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM    <JUNCTION>     Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\ProgramData]
07/14/2009  12:08 PM    <JUNCTION>     Desktop [C:\Users\Public\Desktop]
07/14/2009  12:08 PM    <JUNCTION>     Documents [C:\Users\Public\Documents]
07/14/2009  12:08 PM    <JUNCTION>     Favorites [C:\Users\Public\Favorites]
07/14/2009  12:08 PM    <JUNCTION>     Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM    <JUNCTION>     Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [.]
07/14/2009  12:08 PM    <JUNCTION>     Desktop [.]
07/14/2009  12:08 PM    <JUNCTION>     Documents [.]
07/14/2009  12:08 PM    <JUNCTION>     Favorites [.]
07/14/2009  12:08 PM    <JUNCTION>     Start Menu [.]
07/14/2009  12:08 PM    <JUNCTION>     Templates [.]
               0 File(s)              0 bytes
 Directory of C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
07/14/2009  12:08 PM    <JUNCTION>     My Music [C:\Users\Public\Music]
07/14/2009  12:08 PM    <JUNCTION>     My Pictures [.]
07/14/2009  12:08 PM    <JUNCTION>     My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
07/14/2009  12:08 PM    <JUNCTION>     My Music [C:\Users\Public\Music]
07/14/2009  12:08 PM    <JUNCTION>     My Pictures [C:\Users\Public\Pictures]
07/14/2009  12:08 PM    <JUNCTION>     My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
07/14/2009  12:08 PM    <JUNCTION>     My Music [C:\Users\Public\Music]
07/14/2009  12:08 PM    <JUNCTION>     My Pictures [C:\Users\Public\Pictures]
07/14/2009  12:08 PM    <JUNCTION>     My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
07/14/2009  12:08 PM    <JUNCTION>     My Music [C:\Users\Public\Music]
07/14/2009  12:08 PM    <JUNCTION>     My Pictures [C:\Users\Public\Pictures]
07/14/2009  12:08 PM    <JUNCTION>     My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
07/14/2009  12:08 PM    <JUNCTION>     My Music [C:\Users\Public\Music]
07/14/2009  12:08 PM    <JUNCTION>     My Pictures [C:\Users\Public\Pictures]
07/14/2009  12:08 PM    <JUNCTION>     My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
07/14/2009  12:08 PM    <JUNCTION>     My Music [C:\Users\Public\Music]
07/14/2009  12:08 PM    <JUNCTION>     My Pictures [C:\Users\Public\Pictures]
07/14/2009  12:08 PM    <JUNCTION>     My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
07/14/2009  12:08 PM    <JUNCTION>     My Music [C:\Users\Public\Music]
07/14/2009  12:08 PM    <JUNCTION>     My Pictures [C:\Users\Public\Pictures]
07/14/2009  12:08 PM    <JUNCTION>     My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
07/14/2009  12:08 PM    <JUNCTION>     My Music [C:\Users\Public\Music]
07/14/2009  12:08 PM    <JUNCTION>     My Pictures [C:\Users\Public\Pictures]
07/14/2009  12:08 PM    <JUNCTION>     My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
07/14/2009  12:08 PM    <JUNCTION>     My Music [C:\Users\Public\Music]
07/14/2009  12:08 PM    <JUNCTION>     My Pictures [C:\Users\Public\Pictures]
07/14/2009  12:08 PM    <JUNCTION>     My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Documents
07/14/2009  12:08 PM    <JUNCTION>     My Music [C:\Users\Public\Music]
07/14/2009  12:08 PM    <JUNCTION>     My Pictures [C:\Users\Public\Pictures]
07/14/2009  12:08 PM    <JUNCTION>     My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\Users\All Users\Application Data\Application Data\Application Data\Documents
07/14/2009  12:08 PM    <JUNCTION>     My Music [C:\Users\Public\Music]
07/14/2009  12:08 PM    <JUNCTION>     My Pictures [C:\Users\Public\Pictures]
07/14/2009  12:08 PM    <JUNCTION>     My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\Users\All Users\Application Data\Application Data\Documents
07/14/2009  12:08 PM    <JUNCTION>     My Music [C:\Users\Public\Music]
07/14/2009  12:08 PM    <JUNCTION>     My Pictures [C:\Users\Public\Pictures]
07/14/2009  12:08 PM    <JUNCTION>     My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\Users\All Users\Application Data\Documents
07/14/2009  12:08 PM    <JUNCTION>     My Music [C:\Users\Public\Music]
07/14/2009  12:08 PM    <JUNCTION>     My Pictures [C:\Users\Public\Pictures]
07/14/2009  12:08 PM    <JUNCTION>     My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\Users\All Users\Documents
07/14/2009  12:08 PM    <JUNCTION>     My Music [C:\Users\Public\Music]
07/14/2009  12:08 PM    <JUNCTION>     My Pictures [C:\Users\Public\Pictures]
07/14/2009  12:08 PM    <JUNCTION>     My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\Users\Default
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Roaming]
07/14/2009  12:08 PM    <JUNCTION>     Cookies [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Cookies]
07/14/2009  12:08 PM    <JUNCTION>     Local Settings [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     My Documents [C:\Users\Default\Documents]
07/14/2009  12:08 PM    <JUNCTION>     NetHood [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Network Shortcuts]
07/14/2009  12:08 PM    <JUNCTION>     PrintHood [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Printer Shortcuts]
07/14/2009  12:08 PM    <JUNCTION>     Recent [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Recent]
07/14/2009  12:08 PM    <JUNCTION>     SendTo [C:\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo]
07/14/2009  12:08 PM    <JUNCTION>     Start Menu [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM    <JUNCTION>     Templates [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\Users\Default\AppData\Local
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default\AppData\Local\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default\AppData\Local\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default\AppData\Local\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default\AppData\Local\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [.]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [.]
               0 File(s)              0 bytes
 Directory of C:\Users\Default\Documents
07/14/2009  12:08 PM    <JUNCTION>     My Music [C:\Users\Default\Music]
07/14/2009  12:08 PM    <JUNCTION>     My Pictures [C:\Users\Default\Pictures]
07/14/2009  12:08 PM    <JUNCTION>     My Videos [C:\Users\Default\Videos]
               0 File(s)              0 bytes
 Directory of C:\Users\Default\Local Settings
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default\Local Settings\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default\Local Settings\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default\Local Settings\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default\Local Settings\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [.]
               0 File(s)              0 bytes
 Directory of C:\Users\Default\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [.]
07/14/2009  12:08 PM    <JUNCTION>     History [.]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [.]
               0 File(s)              0 bytes
 Directory of C:\Users\Default\My Documents
07/14/2009  12:08 PM    <JUNCTION>     My Music [C:\Users\Default\Music]
07/14/2009  12:08 PM    <JUNCTION>     My Pictures [C:\Users\Default\Pictures]
07/14/2009  12:08 PM    <JUNCTION>     My Videos [C:\Users\Default\Videos]
               0 File(s)              0 bytes
 Directory of C:\Users\Default User
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Roaming]
07/14/2009  12:08 PM    <JUNCTION>     Cookies [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Cookies]
07/14/2009  12:08 PM    <JUNCTION>     Local Settings [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     My Documents [C:\Users\Default\Documents]
07/14/2009  12:08 PM    <JUNCTION>     NetHood [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Network Shortcuts]
07/14/2009  12:08 PM    <JUNCTION>     PrintHood [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Printer Shortcuts]
07/14/2009  12:08 PM    <JUNCTION>     Recent [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Recent]
07/14/2009  12:08 PM    <JUNCTION>     SendTo [C:\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo]
07/14/2009  12:08 PM    <JUNCTION>     Start Menu [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu]
07/14/2009  12:08 PM    <JUNCTION>     Templates [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\Users\Default User\AppData\Local
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default User\AppData\Local\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default User\AppData\Local\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default User\AppData\Local\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default User\AppData\Local\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default User\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default User\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default User\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default User\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default User\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default User\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default User\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default User\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [.]
               0 File(s)              0 bytes
 Directory of C:\Users\Default User\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [.]
07/14/2009  12:08 PM    <JUNCTION>     History [.]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [.]
               0 File(s)              0 bytes
 Directory of C:\Users\Default User\Documents
07/14/2009  12:08 PM    <JUNCTION>     My Music [C:\Users\Default\Music]
07/14/2009  12:08 PM    <JUNCTION>     My Pictures [C:\Users\Default\Pictures]
07/14/2009  12:08 PM    <JUNCTION>     My Videos [C:\Users\Default\Videos]
               0 File(s)              0 bytes
 Directory of C:\Users\Default User\Local Settings
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default User\Local Settings\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default User\Local Settings\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default User\Local Settings\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default User\Local Settings\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default User\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default User\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default User\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default User\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default User\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default User\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default User\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\Default User\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [C:\Users\Default\AppData\Local]
07/14/2009  12:08 PM    <JUNCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [.]
               0 File(s)              0 bytes
 Directory of C:\Users\Default User\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
07/14/2009  12:08 PM    <JUNCTION>     Application Data [.]
07/14/2009  12:08 PM    <JUNCTION>     History [.]
07/14/2009  12:08 PM    <JUNCTION>     Temporary Internet Files [.]
               0 File(s)              0 bytes
 Directory of C:\Users\Default User\My Documents
07/14/2009  12:08 PM    <JUNCTION>     My Music [C:\Users\Default\Music]
07/14/2009  12:08 PM    <JUNCTION>     My Pictures [C:\Users\Default\Pictures]
07/14/2009  12:08 PM    <JUNCTION>     My Videos [C:\Users\Default\Videos]
               0 File(s)              0 bytes
 Directory of C:\Users\phuong
05/31/2014  10:23 AM    <JUNCTION>     Application Data [C:\Users\phuong\AppData\Roaming]
05/31/2014  10:23 AM    <JUNCTION>     Cookies [C:\Users\phuong\AppData\Roaming\Microsoft\Windows\Cookies]
05/31/2014  10:23 AM    <JUNCTION>     Local Settings [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM    <JUNCTION>     My Documents [C:\Users\phuong\Documents]
05/31/2014  10:23 AM    <JUNCTION>     NetHood [C:\Users\phuong\AppData\Roaming\Microsoft\Windows\Network Shortcuts]
05/31/2014  10:23 AM    <JUNCTION>     PrintHood [C:\Users\phuong\AppData\Roaming\Microsoft\Windows\Printer Shortcuts]
05/31/2014  10:23 AM    <JUNCTION>     Recent [C:\Users\phuong\AppData\Roaming\Microsoft\Windows\Recent]
05/31/2014  10:23 AM    <JUNCTION>     SendTo [C:\Users\phuong\AppData\Roaming\Microsoft\Windows\SendTo]
05/31/2014  10:23 AM    <JUNCTION>     Start Menu [C:\Users\phuong\AppData\Roaming\Microsoft\Windows\Start Menu]
05/31/2014  10:23 AM    <JUNCTION>     Templates [C:\Users\phuong\AppData\Roaming\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\Users\phuong\AppData\Local
05/31/2014  10:23 AM    <JUNCTION>     Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM    <JUNCTION>     History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM    <JUNCTION>     Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\phuong\AppData\Local\Application Data
05/31/2014  10:23 AM    <JUNCTION>     Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM    <JUNCTION>     History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM    <JUNCTION>     Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\phuong\AppData\Local\Application Data\Application Data
05/31/2014  10:23 AM    <JUNCTION>     Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM    <JUNCTION>     History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM    <JUNCTION>     Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\phuong\AppData\Local\Application Data\Application Data\Application Data
05/31/2014  10:23 AM    <JUNCTION>     Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM    <JUNCTION>     History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM    <JUNCTION>     Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\phuong\AppData\Local\Application Data\Application Data\Application Data\Application Data
05/31/2014  10:23 AM    <JUNCTION>     Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM    <JUNCTION>     History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM    <JUNCTION>     Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\phuong\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  10:23 AM    <JUNCTION>     Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM    <JUNCTION>     History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM    <JUNCTION>     Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\phuong\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  10:23 AM    <JUNCTION>     Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM    <JUNCTION>     History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM    <JUNCTION>     Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\phuong\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  10:23 AM    <JUNCTION>     Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM    <JUNCTION>     History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM    <JUNCTION>     Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\phuong\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  10:23 AM    <JUNCTION>     Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM    <JUNCTION>     History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM    <JUNCTION>     Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\phuong\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  10:23 AM    <JUNCTION>     Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM    <JUNCTION>     History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM    <JUNCTION>     Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\phuong\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  10:23 AM    <JUNCTION>     Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM    <JUNCTION>     History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM    <JUNCTION>     Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\phuong\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  10:23 AM    <JUNCTION>     Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM    <JUNCTION>     History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM    <JUNCTION>     Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\phuong\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  10:23 AM    <JUNCTION>     Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM    <JUNCTION>     History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM    <JUNCTION>     Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\phuong\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  10:23 AM    <JUNCTION>     Application Data [.]
05/31/2014  10:23 AM    <JUNCTION>     History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM    <JUNCTION>     Temporary Internet Files [.]
               0 File(s)              0 bytes
 Directory of C:\Users\phuong\Documents
05/31/2014  10:23 AM    <JUNCTION>     My Music [C:\Users\phuong\Music]
05/31/2014  10:23 AM    <JUNCTION>     My Pictures [C:\Users\phuong\Pictures]
05/31/2014  10:23 AM    <JUNCTION>     My Videos [C:\Users\phuong\Videos]
               0 File(s)              0 bytes
 Directory of C:\Users\phuong\Local Settings
05/31/2014  10:23 AM    <JUNCTION>     Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM    <JUNCTION>     History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM    <JUNCTION>     Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\phuong\Local Settings\Application Data
05/31/2014  10:23 AM    <JUNCTION>     Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM    <JUNCTION>     History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM    <JUNCTION>     Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\phuong\Local Settings\Application Data\Application Data
05/31/2014  10:23 AM    <JUNCTION>     Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM    <JUNCTION>     History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM    <JUNCTION>     Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\phuong\Local Settings\Application Data\Application Data\Application Data
05/31/2014  10:23 AM    <JUNCTION>     Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM    <JUNCTION>     History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM    <JUNCTION>     Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\phuong\Local Settings\Application Data\Application Data\Application Data\Application Data
05/31/2014  10:23 AM    <JUNCTION>     Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM    <JUNCTION>     History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM    <JUNCTION>     Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\phuong\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  10:23 AM    <JUNCTION>     Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM    <JUNCTION>     History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM    <JUNCTION>     Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\phuong\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  10:23 AM    <JUNCTION>     Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM    <JUNCTION>     History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM    <JUNCTION>     Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\phuong\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  10:23 AM    <JUNCTION>     Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM    <JUNCTION>     History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM    <JUNCTION>     Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\phuong\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  10:23 AM    <JUNCTION>     Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM    <JUNCTION>     History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM    <JUNCTION>     Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\phuong\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  10:23 AM    <JUNCTION>     Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM    <JUNCTION>     History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM    <JUNCTION>     Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\phuong\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  10:23 AM    <JUNCTION>     Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM    <JUNCTION>     History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM    <JUNCTION>     Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\phuong\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  10:23 AM    <JUNCTION>     Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM    <JUNCTION>     History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM    <JUNCTION>     Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\phuong\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  10:23 AM    <JUNCTION>     Application Data [C:\Users\phuong\AppData\Local]
05/31/2014  10:23 AM    <JUNCTION>     History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM    <JUNCTION>     Temporary Internet Files [C:\Users\phuong\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\phuong\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  10:23 AM    <JUNCTION>     Application Data [.]
05/31/2014  10:23 AM    <JUNCTION>     History [C:\Users\phuong\AppData\Local\Microsoft\Windows\History]
05/31/2014  10:23 AM    <JUNCTION>     Temporary Internet Files [.]
               0 File(s)              0 bytes
 Directory of C:\Users\phuong\My Documents
05/31/2014  10:23 AM    <JUNCTION>     My Music [C:\Users\phuong\Music]
05/31/2014  10:23 AM    <JUNCTION>     My Pictures [C:\Users\phuong\Pictures]
05/31/2014  10:23 AM    <JUNCTION>     My Videos [C:\Users\phuong\Videos]
               0 File(s)              0 bytes
 Directory of C:\Users\Public\Documents
07/14/2009  12:08 PM    <JUNCTION>     My Music [C:\Users\Public\Music]
07/14/2009  12:08 PM    <JUNCTION>     My Pictures [C:\Users\Public\Pictures]
07/14/2009  12:08 PM    <JUNCTION>     My Videos [C:\Users\Public\Videos]
               0 File(s)              0 bytes
 Directory of C:\Users\UpdatusUser
05/31/2014  11:12 AM    <JUNCTION>     Application Data [C:\Users\UpdatusUser\AppData\Roaming]
05/31/2014  11:12 AM    <JUNCTION>     Cookies [C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Cookies]
05/31/2014  11:12 AM    <JUNCTION>     Local Settings [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM    <JUNCTION>     My Documents [C:\Users\UpdatusUser\Documents]
05/31/2014  11:12 AM    <JUNCTION>     NetHood [C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Network Shortcuts]
05/31/2014  11:12 AM    <JUNCTION>     PrintHood [C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Printer Shortcuts]
05/31/2014  11:12 AM    <JUNCTION>     Recent [C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Recent]
05/31/2014  11:12 AM    <JUNCTION>     SendTo [C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\SendTo]
05/31/2014  11:12 AM    <JUNCTION>     Start Menu [C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu]
05/31/2014  11:12 AM    <JUNCTION>     Templates [C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Templates]
               0 File(s)              0 bytes
 Directory of C:\Users\UpdatusUser\AppData\Local
05/31/2014  11:12 AM    <JUNCTION>     Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM    <JUNCTION>     History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM    <JUNCTION>     Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\UpdatusUser\AppData\Local\Application Data
05/31/2014  11:12 AM    <JUNCTION>     Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM    <JUNCTION>     History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM    <JUNCTION>     Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\UpdatusUser\AppData\Local\Application Data\Application Data
05/31/2014  11:12 AM    <JUNCTION>     Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM    <JUNCTION>     History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM    <JUNCTION>     Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\UpdatusUser\AppData\Local\Application Data\Application Data\Application Data
05/31/2014  11:12 AM    <JUNCTION>     Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM    <JUNCTION>     History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM    <JUNCTION>     Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\UpdatusUser\AppData\Local\Application Data\Application Data\Application Data\Application Data
05/31/2014  11:12 AM    <JUNCTION>     Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM    <JUNCTION>     History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM    <JUNCTION>     Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\UpdatusUser\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  11:12 AM    <JUNCTION>     Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM    <JUNCTION>     History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM    <JUNCTION>     Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\UpdatusUser\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  11:12 AM    <JUNCTION>     Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM    <JUNCTION>     History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM    <JUNCTION>     Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\UpdatusUser\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  11:12 AM    <JUNCTION>     Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM    <JUNCTION>     History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM    <JUNCTION>     Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\UpdatusUser\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  11:12 AM    <JUNCTION>     Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM    <JUNCTION>     History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM    <JUNCTION>     Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\UpdatusUser\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  11:12 AM    <JUNCTION>     Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM    <JUNCTION>     History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM    <JUNCTION>     Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\UpdatusUser\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  11:12 AM    <JUNCTION>     Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM    <JUNCTION>     History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM    <JUNCTION>     Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\UpdatusUser\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  11:12 AM    <JUNCTION>     Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM    <JUNCTION>     History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM    <JUNCTION>     Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\UpdatusUser\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  11:12 AM    <JUNCTION>     Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM    <JUNCTION>     History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM    <JUNCTION>     Temporary Internet Files [.]
               0 File(s)              0 bytes
 Directory of C:\Users\UpdatusUser\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  11:12 AM    <JUNCTION>     Application Data [.]
05/31/2014  11:12 AM    <JUNCTION>     History [.]
05/31/2014  11:12 AM    <JUNCTION>     Temporary Internet Files [.]
               0 File(s)              0 bytes
 Directory of C:\Users\UpdatusUser\Documents
05/31/2014  11:12 AM    <JUNCTION>     My Music [C:\Users\UpdatusUser\Music]
05/31/2014  11:12 AM    <JUNCTION>     My Pictures [C:\Users\UpdatusUser\Pictures]
05/31/2014  11:12 AM    <JUNCTION>     My Videos [C:\Users\UpdatusUser\Videos]
               0 File(s)              0 bytes
 Directory of C:\Users\UpdatusUser\Local Settings
05/31/2014  11:12 AM    <JUNCTION>     Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM    <JUNCTION>     History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM    <JUNCTION>     Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\UpdatusUser\Local Settings\Application Data
05/31/2014  11:12 AM    <JUNCTION>     Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM    <JUNCTION>     History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM    <JUNCTION>     Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\UpdatusUser\Local Settings\Application Data\Application Data
05/31/2014  11:12 AM    <JUNCTION>     Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM    <JUNCTION>     History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM    <JUNCTION>     Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\UpdatusUser\Local Settings\Application Data\Application Data\Application Data
05/31/2014  11:12 AM    <JUNCTION>     Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM    <JUNCTION>     History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM    <JUNCTION>     Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\UpdatusUser\Local Settings\Application Data\Application Data\Application Data\Application Data
05/31/2014  11:12 AM    <JUNCTION>     Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM    <JUNCTION>     History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM    <JUNCTION>     Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\UpdatusUser\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  11:12 AM    <JUNCTION>     Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM    <JUNCTION>     History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM    <JUNCTION>     Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\UpdatusUser\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  11:12 AM    <JUNCTION>     Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM    <JUNCTION>     History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM    <JUNCTION>     Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\UpdatusUser\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  11:12 AM    <JUNCTION>     Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM    <JUNCTION>     History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM    <JUNCTION>     Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\UpdatusUser\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  11:12 AM    <JUNCTION>     Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM    <JUNCTION>     History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM    <JUNCTION>     Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\UpdatusUser\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  11:12 AM    <JUNCTION>     Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM    <JUNCTION>     History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM    <JUNCTION>     Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\UpdatusUser\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  11:12 AM    <JUNCTION>     Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM    <JUNCTION>     History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM    <JUNCTION>     Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\UpdatusUser\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  11:12 AM    <JUNCTION>     Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM    <JUNCTION>     History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM    <JUNCTION>     Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 File(s)              0 bytes
 Directory of C:\Users\UpdatusUser\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  11:12 AM    <JUNCTION>     Application Data [C:\Users\UpdatusUser\AppData\Local]
05/31/2014  11:12 AM    <JUNCTION>     History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
05/31/2014  11:12 AM    <JUNCTION>     Temporary Internet Files [.]
               0 File(s)              0 bytes
 Directory of C:\Users\UpdatusUser\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
05/31/2014  11:12 AM    <JUNCTION>     Application Data [.]
05/31/2014  11:12 AM    <JUNCTION>     History [.]
05/31/2014  11:12 AM    <JUNCTION>     Temporary Internet Files [.]
               0 File(s)              0 bytes
 Directory of C:\Users\UpdatusUser\My Documents
05/31/2014  11:12 AM    <JUNCTION>     My Music [C:\Users\UpdatusUser\Music]
05/31/2014  11:12 AM    <JUNCTION>     My Pictures [C:\Users\UpdatusUser\Pictures]
05/31/2014  11:12 AM    <JUNCTION>     My Videos [C:\Users\UpdatusUser\Videos]
               0 File(s)              0 bytes
     Total Files Listed:
               0 File(s)              0 bytes
            1206 Dir(s)  72,491,917,312 bytes free
 
< %systemroot%\System32\config\*.sav >
 
< %PROGRAMFILES%\bak. /s >
 
< %systemroot%\system32\bak. /s >
 
< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >
[2009/07/14 12:01:14 | 000,000,442 | -HS- | M] () -- C:\ProgramData\Start Menu\desktop.ini
 
< %systemroot%\system32\config\systemprofile\*.dat /x >
 
< %systemroot%\*.config >
 
< %systemroot%\system32\*.db >
 
< %PROGRAMFILES%\Internet Explorer\*.dat >
 
< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >
[2014/05/31 10:23:58 | 000,000,221 | -HS- | M] () -- C:\Users\phuong\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini
 
< %USERPROFILE%\Desktop\*.exe >
 
< %PROGRAMFILES%\Common Files\*.* >
 
< %systemroot%\*.src >
 
< %systemroot%\install\*.* >
 
< %systemroot%\system32\DLL\*.* >
 
< %systemroot%\system32\HelpFiles\*.* >
 
< %systemroot%\system32\rundll\*.* >
 
< %systemroot%\winn32\*.* >
 
< %systemroot%\Java\*.* >
 
< %systemroot%\system32\test\*.* >
 
< %systemroot%\system32\Rundll32\*.* >
 
< %systemroot%\AppPatch\Custom\*.* >
 
< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >
 
< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >
 
< End of report >

Related Topics



0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users