ComboFix Deletion Log
ComboFix 07-12-17.1 - Tom Robinson 2007-12-18 12:57:34.2 -
FAT32x86
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.372 [GMT -5:00]
Running from: C:\Documents and Settings\[removed]\Desktop\ComboFix.exe
Command switches used :: C:\Documents and Settings\Tom Robinson\Desktop\CFScript.txt
FILE
C:\WINDOWS\GPInstall.exe
C:\WINDOWS\ST5UNST.000
C:\WINDOWS\ST5UNST.001
C:\WINDOWS\ST5UNST.002
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
C:\Documents and Settings\All Users\Application Data\PopCap
C:\Documents and Settings\All Users\Application Data\PopCap\Amazing Adventures\Ben Dover.mse
C:\Documents and Settings\All Users\Application Data\PopCap\Amazing Adventures\highscore.mse
C:\Documents and Settings\All Users\Application Data\PopCap\Amazing Adventures\options.mso
C:\Documents and Settings\All Users\Application Data\PopCap\Amazing Adventures\players.mse
C:\Temp\saat
C:\Temp\saat\GENRL\Bank_001\sound_001.wav
C:\Temp\saat\GENRL\Bank_001\sound_002.wav
C:\Temp\saat\GENRL\Bank_002\sound_001.wav
C:\Temp\saat\GENRL\Bank_002\sound_002.wav
C:\Temp\saat\GENRL\Bank_002\sound_003.wav
C:\Temp\saat\GENRL\Bank_003\sound_001.wav
C:\Temp\saat\GENRL\Bank_003\sound_002.wav
C:\Temp\saat\GENRL\Bank_003\sound_003.wav
C:\Temp\saat\GENRL\Bank_003\sound_004.wav
C:\Temp\saat\GENRL\Bank_004\sound_001.wav
C:\Temp\saat\GENRL\Bank_004\sound_002.wav
C:\Temp\saat\GENRL\Bank_005\sound_001.wav
C:\Temp\saat\GENRL\Bank_005\sound_002.wav
C:\Temp\saat\GENRL\Bank_005\sound_003.wav
C:\Temp\saat\GENRL\Bank_006\sound_001.wav
C:\Temp\saat\GENRL\Bank_006\sound_002.wav
C:\Temp\saat\GENRL\Bank_006\sound_003.wav
C:\Temp\saat\GENRL\Bank_006\sound_004.wav
C:\Temp\saat\GENRL\Bank_007\sound_001.wav
C:\Temp\saat\GENRL\Bank_007\sound_002.wav
C:\Temp\saat\GENRL\Bank_008\sound_001.wav
C:\Temp\saat\GENRL\Bank_008\sound_002.wav
C:\Temp\saat\GENRL\Bank_009\sound_001.wav
C:\Temp\saat\GENRL\Bank_009\sound_002.wav
C:\Temp\saat\GENRL\Bank_009\sound_003.wav
C:\Temp\saat\GENRL\Bank_010\sound_001.wav
C:\Temp\saat\GENRL\Bank_010\sound_002.wav
C:\Temp\saat\GENRL\Bank_011\sound_001.wav
C:\Temp\saat\GENRL\Bank_011\sound_002.wav
C:\Temp\saat\GENRL\Bank_011\sound_003.wav
C:\Temp\saat\GENRL\Bank_012\sound_001.wav
C:\Temp\saat\GENRL\Bank_012\sound_002.wav
C:\Temp\saat\GENRL\Bank_013\sound_001.wav
C:\Temp\saat\GENRL\Bank_013\sound_002.wav
C:\Temp\saat\GENRL\Bank_013\sound_003.wav
C:\Temp\saat\GENRL\Bank_013\sound_004.wav
C:\Temp\saat\GENRL\Bank_013\sound_005.wav
C:\Temp\saat\GENRL\Bank_014\sound_001.wav
C:\Temp\saat\GENRL\Bank_014\sound_002.wav
C:\Temp\saat\GENRL\Bank_015\sound_001.wav
C:\Temp\saat\GENRL\Bank_015\sound_002.wav
C:\Temp\saat\GENRL\Bank_016\sound_001.wav
C:\Temp\saat\GENRL\Bank_017\sound_001.wav
C:\Temp\saat\GENRL\Bank_018\sound_001.wav
C:\Temp\saat\GENRL\Bank_018\sound_002.wav
C:\Temp\saat\GENRL\Bank_019\sound_001.wav
C:\Temp\saat\GENRL\Bank_019\sound_002.wav
C:\Temp\saat\GENRL\Bank_020\sound_001.wav
C:\Temp\saat\GENRL\Bank_020\sound_002.wav
C:\Temp\saat\GENRL\Bank_020\sound_003.wav
C:\Temp\saat\GENRL\Bank_021\sound_001.wav
C:\Temp\saat\GENRL\Bank_021\sound_002.wav
C:\Temp\saat\GENRL\Bank_021\sound_003.wav
C:\Temp\saat\GENRL\Bank_021\sound_004.wav
C:\Temp\saat\GENRL\Bank_021\sound_005.wav
C:\Temp\saat\GENRL\Bank_021\sound_006.wav
C:\Temp\saat\GENRL\Bank_021\sound_007.wav
C:\Temp\saat\GENRL\Bank_021\sound_008.wav
C:\Temp\saat\GENRL\Bank_021\sound_009.wav
C:\Temp\saat\GENRL\Bank_021\sound_010.wav
C:\Temp\saat\GENRL\Bank_021\sound_011.wav
C:\Temp\saat\GENRL\Bank_021\sound_012.wav
C:\Temp\saat\GENRL\Bank_021\sound_013.wav
C:\Temp\saat\GENRL\Bank_021\sound_014.wav
C:\Temp\saat\GENRL\Bank_021\sound_015.wav
C:\Temp\saat\GENRL\Bank_021\sound_016.wav
C:\Temp\saat\GENRL\Bank_021\sound_017.wav
C:\Temp\saat\GENRL\Bank_021\sound_018.wav
C:\Temp\saat\GENRL\Bank_021\sound_019.wav
C:\Temp\saat\GENRL\Bank_021\sound_020.wav
C:\Temp\saat\GENRL\Bank_021\sound_021.wav
C:\Temp\saat\GENRL\Bank_021\sound_022.wav
C:\Temp\saat\GENRL\Bank_021\sound_023.wav
C:\Temp\saat\GENRL\Bank_021\sound_024.wav
C:\Temp\saat\GENRL\Bank_022\sound_001.wav
C:\Temp\saat\GENRL\Bank_022\sound_002.wav
C:\Temp\saat\GENRL\Bank_022\sound_003.wav
C:\Temp\saat\GENRL\Bank_023\sound_001.wav
C:\Temp\saat\GENRL\Bank_023\sound_002.wav
C:\Temp\saat\GENRL\Bank_023\sound_003.wav
C:\Temp\saat\GENRL\Bank_024\sound_001.wav
C:\Temp\saat\GENRL\Bank_024\sound_002.wav
C:\Temp\saat\GENRL\Bank_024\sound_003.wav
C:\Temp\saat\GENRL\Bank_025\sound_001.wav
C:\Temp\saat\GENRL\Bank_025\sound_002.wav
C:\Temp\saat\GENRL\Bank_025\sound_003.wav
C:\Temp\saat\GENRL\Bank_026\sound_001.wav
C:\Temp\saat\GENRL\Bank_026\sound_002.wav
C:\Temp\saat\GENRL\Bank_027\sound_001.wav
C:\Temp\saat\GENRL\Bank_027\sound_002.wav
C:\Temp\saat\GENRL\Bank_027\sound_003.wav
C:\Temp\saat\GENRL\Bank_028\sound_001.wav
C:\Temp\saat\GENRL\Bank_028\sound_002.wav
C:\Temp\saat\GENRL\Bank_029\sound_001.wav
C:\Temp\saat\GENRL\Bank_029\sound_002.wav
C:\Temp\saat\GENRL\Bank_029\sound_003.wav
C:\Temp\saat\GENRL\Bank_030\sound_001.wav
C:\Temp\saat\GENRL\Bank_030\sound_002.wav
C:\Temp\saat\GENRL\Bank_030\sound_003.wav
C:\Temp\saat\GENRL\Bank_031\sound_001.wav
C:\Temp\saat\GENRL\Bank_031\sound_002.wav
C:\Temp\saat\GENRL\Bank_032\sound_001.wav
C:\Temp\saat\GENRL\Bank_032\sound_002.wav
C:\Temp\saat\GENRL\Bank_032\sound_003.wav
C:\Temp\saat\GENRL\Bank_033\sound_001.wav
C:\Temp\saat\GENRL\Bank_033\sound_002.wav
C:\Temp\saat\GENRL\Bank_033\sound_003.wav
C:\Temp\saat\GENRL\Bank_033\sound_004.wav
C:\Temp\saat\GENRL\Bank_033\sound_005.wav
C:\Temp\saat\GENRL\Bank_033\sound_006.wav
C:\Temp\saat\GENRL\Bank_033\sound_007.wav
C:\Temp\saat\GENRL\Bank_033\sound_008.wav
C:\Temp\saat\GENRL\Bank_033\sound_009.wav
C:\Temp\saat\GENRL\Bank_033\sound_010.wav
C:\Temp\saat\GENRL\Bank_033\sound_011.wav
C:\Temp\saat\GENRL\Bank_033\sound_012.wav
C:\Temp\saat\GENRL\Bank_033\sound_013.wav
C:\Temp\saat\GENRL\Bank_033\sound_014.wav
C:\Temp\saat\GENRL\Bank_033\sound_015.wav
C:\Temp\saat\GENRL\Bank_033\sound_016.wav
C:\Temp\saat\GENRL\Bank_033\sound_017.wav
C:\Temp\saat\GENRL\Bank_033\sound_018.wav
C:\Temp\saat\GENRL\Bank_033\sound_019.wav
C:\Temp\saat\GENRL\Bank_033\sound_020.wav
C:\Temp\saat\GENRL\Bank_033\sound_021.wav
C:\Temp\saat\GENRL\Bank_033\sound_022.wav
C:\Temp\saat\GENRL\Bank_033\sound_023.wav
C:\Temp\saat\GENRL\Bank_033\sound_024.wav
C:\Temp\saat\GENRL\Bank_033\sound_025.wav
C:\Temp\saat\GENRL\Bank_033\sound_026.wav
C:\Temp\saat\GENRL\Bank_033\sound_027.wav
C:\Temp\saat\GENRL\Bank_033\sound_028.wav
C:\Temp\saat\GENRL\Bank_033\sound_029.wav
C:\Temp\saat\GENRL\Bank_033\sound_030.wav
C:\Temp\saat\GENRL\Bank_033\sound_031.wav
C:\Temp\saat\GENRL\Bank_033\sound_032.wav
C:\Temp\saat\GENRL\Bank_033\sound_033.wav
C:\Temp\saat\GENRL\Bank_033\sound_034.wav
C:\Temp\saat\GENRL\Bank_033\sound_035.wav
C:\Temp\saat\GENRL\Bank_033\sound_036.wav
C:\Temp\saat\GENRL\Bank_033\sound_037.wav
C:\Temp\saat\GENRL\Bank_033\sound_038.wav
C:\Temp\saat\GENRL\Bank_033\sound_039.wav
C:\Temp\saat\GENRL\Bank_033\sound_040.wav
C:\Temp\saat\GENRL\Bank_033\sound_041.wav
C:\Temp\saat\GENRL\Bank_033\sound_042.wav
C:\Temp\saat\GENRL\Bank_033\sound_043.wav
C:\Temp\saat\GENRL\Bank_033\sound_044.wav
C:\Temp\saat\GENRL\Bank_033\sound_045.wav
C:\Temp\saat\GENRL\Bank_033\sound_046.wav
C:\Temp\saat\GENRL\Bank_033\sound_047.wav
C:\Temp\saat\GENRL\Bank_033\sound_048.wav
C:\Temp\saat\GENRL\Bank_033\sound_049.wav
C:\Temp\saat\GENRL\Bank_033\sound_050.wav
C:\Temp\saat\GENRL\Bank_033\sound_051.wav
C:\Temp\saat\GENRL\Bank_033\sound_052.wav
C:\Temp\saat\GENRL\Bank_033\sound_053.wav
C:\Temp\saat\GENRL\Bank_033\sound_054.wav
C:\Temp\saat\GENRL\Bank_033\sound_055.wav
C:\Temp\saat\GENRL\Bank_033\sound_056.wav
C:\Temp\saat\GENRL\Bank_033\sound_057.wav
C:\Temp\saat\GENRL\Bank_033\sound_058.wav
C:\Temp\saat\GENRL\Bank_033\sound_059.wav
C:\Temp\saat\GENRL\Bank_033\sound_060.wav
C:\Temp\saat\GENRL\Bank_033\sound_061.wav
C:\Temp\saat\GENRL\Bank_033\sound_062.wav
C:\Temp\saat\GENRL\Bank_033\sound_063.wav
C:\Temp\saat\GENRL\Bank_033\sound_064.wav
C:\Temp\saat\GENRL\Bank_033\sound_065.wav
C:\Temp\saat\GENRL\Bank_033\sound_066.wav
C:\Temp\saat\GENRL\Bank_033\sound_067.wav
C:\Temp\saat\GENRL\Bank_033\sound_068.wav
C:\Temp\saat\GENRL\Bank_033\sound_069.wav
C:\Temp\saat\GENRL\Bank_033\sound_070.wav
C:\Temp\saat\GENRL\Bank_033\sound_071.wav
C:\Temp\saat\GENRL\Bank_033\sound_072.wav
C:\Temp\saat\GENRL\Bank_034\sound_001.wav
C:\Temp\saat\GENRL\Bank_034\sound_002.wav
C:\Temp\saat\GENRL\Bank_035\sound_001.wav
C:\Temp\saat\GENRL\Bank_035\sound_002.wav
C:\Temp\saat\GENRL\Bank_035\sound_003.wav
C:\Temp\saat\GENRL\Bank_036\sound_001.wav
C:\Temp\saat\GENRL\Bank_036\sound_002.wav
C:\Temp\saat\GENRL\Bank_037\sound_001.wav
C:\Temp\saat\GENRL\Bank_037\sound_002.wav
C:\Temp\saat\GENRL\Bank_037\sound_003.wav
C:\Temp\saat\GENRL\Bank_038\sound_001.wav
C:\Temp\saat\GENRL\Bank_038\sound_002.wav
C:\Temp\saat\GENRL\Bank_038\sound_003.wav
C:\Temp\saat\GENRL\Bank_038\sound_004.wav
C:\Temp\saat\GENRL\Bank_038\sound_005.wav
C:\Temp\saat\GENRL\Bank_039\sound_001.wav
C:\Temp\saat\GENRL\Bank_039\sound_002.wav
C:\Temp\saat\GENRL\Bank_040\sound_001.wav
C:\Temp\saat\GENRL\Bank_040\sound_002.wav
C:\Temp\saat\GENRL\Bank_040\sound_003.wav
C:\Temp\saat\GENRL\Bank_041\sound_001.wav
C:\Temp\saat\GENRL\Bank_041\sound_002.wav
C:\Temp\saat\GENRL\Bank_042\sound_001.wav
C:\Temp\saat\GENRL\Bank_042\sound_002.wav
C:\Temp\saat\GENRL\Bank_042\sound_003.wav
C:\Temp\saat\GENRL\Bank_043\sound_001.wav
C:\Temp\saat\GENRL\Bank_043\sound_002.wav
C:\Temp\saat\GENRL\Bank_044\sound_001.wav
C:\Temp\saat\GENRL\Bank_044\sound_002.wav
C:\Temp\saat\GENRL\Bank_044\sound_003.wav
C:\Temp\saat\GENRL\Bank_045\sound_001.wav
C:\Temp\saat\GENRL\Bank_045\sound_002.wav
C:\Temp\saat\GENRL\Bank_045\sound_003.wav
C:\Temp\saat\GENRL\Bank_046\sound_001.wav
C:\Temp\saat\GENRL\Bank_046\sound_002.wav
C:\Temp\saat\GENRL\Bank_046\sound_003.wav
C:\Temp\saat\GENRL\Bank_046\sound_004.wav
C:\Temp\saat\GENRL\Bank_046\sound_005.wav
C:\Temp\saat\GENRL\Bank_047\sound_001.wav
C:\Temp\saat\GENRL\Bank_047\sound_002.wav
C:\Temp\saat\GENRL\Bank_048\sound_001.wav
C:\Temp\saat\GENRL\Bank_048\sound_002.wav
C:\Temp\saat\GENRL\Bank_049\sound_001.wav
C:\Temp\saat\GENRL\Bank_049\sound_002.wav
C:\Temp\saat\GENRL\Bank_050\sound_001.wav
C:\Temp\saat\GENRL\Bank_050\sound_002.wav
C:\Temp\saat\GENRL\Bank_050\sound_003.wav
C:\Temp\saat\GENRL\Bank_051\sound_001.wav
C:\Temp\saat\GENRL\Bank_051\sound_002.wav
C:\Temp\saat\GENRL\Bank_051\sound_003.wav
C:\Temp\saat\GENRL\Bank_052\sound_001.wav
C:\Temp\saat\GENRL\Bank_052\sound_002.wav
C:\Temp\saat\GENRL\Bank_052\sound_003.wav
C:\Temp\saat\GENRL\Bank_053\sound_001.wav
C:\Temp\saat\GENRL\Bank_053\sound_002.wav
C:\Temp\saat\GENRL\Bank_053\sound_003.wav
C:\Temp\saat\GENRL\Bank_053\sound_004.wav
C:\Temp\saat\GENRL\Bank_053\sound_005.wav
C:\Temp\saat\GENRL\Bank_053\sound_006.wav
C:\Temp\saat\GENRL\Bank_053\sound_007.wav
C:\Temp\saat\GENRL\Bank_053\sound_008.wav
C:\Temp\saat\GENRL\Bank_053\sound_009.wav
C:\Temp\saat\GENRL\Bank_053\sound_010.wav
C:\Temp\saat\GENRL\Bank_053\sound_011.wav
C:\Temp\saat\GENRL\Bank_053\sound_012.wav
C:\Temp\saat\GENRL\Bank_053\sound_013.wav
C:\Temp\saat\GENRL\Bank_053\sound_014.wav
C:\Temp\saat\GENRL\Bank_053\sound_015.wav
C:\Temp\saat\GENRL\Bank_053\sound_016.wav
C:\Temp\saat\GENRL\Bank_053\sound_017.wav
C:\Temp\saat\GENRL\Bank_053\sound_018.wav
C:\Temp\saat\GENRL\Bank_053\sound_019.wav
C:\Temp\saat\GENRL\Bank_053\sound_020.wav
C:\Temp\saat\GENRL\Bank_053\sound_021.wav
C:\Temp\saat\GENRL\Bank_053\sound_022.wav
C:\Temp\saat\GENRL\Bank_053\sound_023.wav
C:\Temp\saat\GENRL\Bank_053\sound_024.wav
C:\Temp\saat\GENRL\Bank_053\sound_025.wav
C:\Temp\saat\GENRL\Bank_053\sound_026.wav
C:\Temp\saat\GENRL\Bank_054\sound_001.wav
C:\Temp\saat\GENRL\Bank_054\sound_002.wav
C:\Temp\saat\GENRL\Bank_054\sound_003.wav
C:\Temp\saat\GENRL\Bank_054\sound_004.wav
C:\Temp\saat\GENRL\Bank_054\sound_005.wav
C:\Temp\saat\GENRL\Bank_054\sound_006.wav
C:\Temp\saat\GENRL\Bank_054\sound_007.wav
C:\Temp\saat\GENRL\Bank_054\sound_008.wav
C:\Temp\saat\GENRL\Bank_054\sound_009.wav
C:\Temp\saat\GENRL\Bank_055\sound_001.wav
C:\Temp\saat\GENRL\Bank_055\sound_002.wav
C:\Temp\saat\GENRL\Bank_056\sound_001.wav
C:\Temp\saat\GENRL\Bank_056\sound_002.wav
C:\Temp\saat\GENRL\Bank_056\sound_003.wav
C:\Temp\saat\GENRL\Bank_057\sound_001.wav
C:\Temp\saat\GENRL\Bank_057\sound_002.wav
C:\Temp\saat\GENRL\Bank_058\sound_001.wav
C:\Temp\saat\GENRL\Bank_058\sound_002.wav
C:\Temp\saat\GENRL\Bank_058\sound_003.wav
C:\Temp\saat\GENRL\Bank_059\sound_001.wav
C:\Temp\saat\GENRL\Bank_059\sound_002.wav
C:\Temp\saat\GENRL\Bank_060\sound_001.wav
C:\Temp\saat\GENRL\Bank_060\sound_002.wav
C:\Temp\saat\GENRL\Bank_061\sound_001.wav
C:\Temp\saat\GENRL\Bank_061\sound_002.wav
C:\Temp\saat\GENRL\Bank_062\sound_001.wav
C:\Temp\saat\GENRL\Bank_062\sound_002.wav
C:\Temp\saat\GENRL\Bank_063\sound_001.wav
C:\Temp\saat\GENRL\Bank_063\sound_002.wav
C:\Temp\saat\GENRL\Bank_063\sound_003.wav
C:\Temp\saat\GENRL\Bank_063\sound_004.wav
C:\Temp\saat\GENRL\Bank_063\sound_005.wav
C:\Temp\saat\GENRL\Bank_064\sound_001.wav
C:\Temp\saat\GENRL\Bank_064\sound_002.wav
C:\Temp\saat\GENRL\Bank_065\sound_001.wav
C:\Temp\saat\GENRL\Bank_065\sound_002.wav
C:\Temp\saat\GENRL\Bank_065\sound_003.wav
C:\Temp\saat\GENRL\Bank_066\sound_001.wav
C:\Temp\saat\GENRL\Bank_066\sound_002.wav
C:\Temp\saat\GENRL\Bank_067\sound_001.wav
C:\Temp\saat\GENRL\Bank_067\sound_002.wav
C:\Temp\saat\GENRL\Bank_067\sound_003.wav
C:\Temp\saat\GENRL\Bank_068\sound_001.wav
C:\Temp\saat\GENRL\Bank_068\sound_002.wav
C:\Temp\saat\GENRL\Bank_068\sound_003.wav
C:\Temp\saat\GENRL\Bank_068\sound_004.wav
C:\Temp\saat\GENRL\Bank_068\sound_005.wav
C:\Temp\saat\GENRL\Bank_068\sound_006.wav
C:\Temp\saat\GENRL\Bank_068\sound_007.wav
C:\Temp\saat\GENRL\Bank_068\sound_008.wav
C:\Temp\saat\GENRL\Bank_068\sound_009.wav
C:\Temp\saat\GENRL\Bank_068\sound_010.wav
C:\Temp\saat\GENRL\Bank_068\sound_011.wav
C:\Temp\saat\GENRL\Bank_068\sound_012.wav
C:\Temp\saat\GENRL\Bank_069\sound_001.wav
C:\Temp\saat\GENRL\Bank_069\sound_002.wav
C:\Temp\saat\GENRL\Bank_070\sound_001.wav
C:\Temp\saat\GENRL\Bank_070\sound_002.wav
C:\Temp\saat\GENRL\Bank_070\sound_003.wav
C:\Temp\saat\GENRL\Bank_071\sound_001.wav
C:\Temp\saat\GENRL\Bank_071\sound_002.wav
C:\Temp\saat\GENRL\Bank_072\sound_001.wav
C:\Temp\saat\GENRL\Bank_072\sound_002.wav
C:\Temp\saat\GENRL\Bank_072\sound_003.wav
C:\Temp\saat\GENRL\Bank_073\sound_001.wav
C:\Temp\saat\GENRL\Bank_073\sound_002.wav
C:\Temp\saat\GENRL\Bank_073\sound_003.wav
C:\Temp\saat\GENRL\Bank_073\sound_004.wav
C:\Temp\saat\GENRL\Bank_074\sound_001.wav
C:\Temp\saat\GENRL\Bank_074\sound_002.wav
C:\Temp\saat\GENRL\Bank_075\sound_001.wav
C:\Temp\saat\GENRL\Bank_075\sound_002.wav
C:\Temp\saat\GENRL\Bank_075\sound_003.wav
C:\Temp\saat\GENRL\Bank_076\sound_001.wav
C:\Temp\saat\GENRL\Bank_076\sound_002.wav
C:\Temp\saat\GENRL\Bank_076\sound_003.wav
C:\Temp\saat\GENRL\Bank_076\sound_004.wav
C:\Temp\saat\GENRL\Bank_076\sound_005.wav
C:\Temp\saat\GENRL\Bank_076\sound_006.wav
C:\Temp\saat\GENRL\Bank_076\sound_007.wav
C:\Temp\saat\GENRL\Bank_076\sound_008.wav
C:\Temp\saat\GENRL\Bank_077\sound_001.wav
C:\Temp\saat\GENRL\Bank_077\sound_002.wav
C:\Temp\saat\GENRL\Bank_078\sound_001.wav
C:\Temp\saat\GENRL\Bank_078\sound_002.wav
C:\Temp\saat\GENRL\Bank_078\sound_003.wav
C:\Temp\saat\GENRL\Bank_079\sound_001.wav
C:\Temp\saat\GENRL\Bank_079\sound_002.wav
C:\Temp\saat\GENRL\Bank_079\sound_003.wav
C:\Temp\saat\GENRL\Bank_079\sound_004.wav
C:\Temp\saat\GENRL\Bank_080\sound_001.wav
C:\Temp\saat\GENRL\Bank_080\sound_002.wav
C:\Temp\saat\GENRL\Bank_081\sound_001.wav
C:\Temp\saat\GENRL\Bank_081\sound_002.wav
C:\Temp\saat\GENRL\Bank_081\sound_003.wav
C:\Temp\saat\GENRL\Bank_082\sound_001.wav
C:\Temp\saat\GENRL\Bank_082\sound_002.wav
C:\Temp\saat\GENRL\Bank_083\sound_001.wav
C:\Temp\saat\GENRL\Bank_083\sound_002.wav
C:\Temp\saat\GENRL\Bank_083\sound_003.wav
C:\Temp\saat\GENRL\Bank_084\sound_001.wav
C:\Temp\saat\GENRL\Bank_084\sound_002.wav
C:\Temp\saat\GENRL\Bank_085\sound_001.wav
C:\Temp\saat\GENRL\Bank_085\sound_002.wav
C:\Temp\saat\GENRL\Bank_085\sound_003.wav
C:\Temp\saat\GENRL\Bank_086\sound_001.wav
C:\Temp\saat\GENRL\Bank_086\sound_002.wav
C:\Temp\saat\GENRL\Bank_087\sound_001.wav
C:\Temp\saat\GENRL\Bank_087\sound_002.wav
C:\Temp\saat\GENRL\Bank_087\sound_003.wav
C:\Temp\saat\GENRL\Bank_088\sound_001.wav
C:\Temp\saat\GENRL\Bank_088\sound_002.wav
C:\Temp\saat\GENRL\Bank_089\sound_001.wav
C:\Temp\saat\GENRL\Bank_089\sound_002.wav
C:\Temp\saat\GENRL\Bank_089\sound_003.wav
C:\Temp\saat\GENRL\Bank_090\sound_001.wav
C:\Temp\saat\GENRL\Bank_090\sound_002.wav
C:\Temp\saat\GENRL\Bank_091\sound_001.wav
C:\Temp\saat\GENRL\Bank_091\sound_002.wav
C:\Temp\saat\GENRL\Bank_091\sound_003.wav
C:\Temp\saat\GENRL\Bank_092\sound_001.wav
C:\Temp\saat\GENRL\Bank_092\sound_002.wav
C:\Temp\saat\GENRL\Bank_093\sound_001.wav
C:\Temp\saat\GENRL\Bank_093\sound_002.wav
C:\Temp\saat\GENRL\Bank_093\sound_003.wav
C:\Temp\saat\GENRL\Bank_094\sound_001.wav
C:\Temp\saat\GENRL\Bank_094\sound_002.wav
C:\Temp\saat\GENRL\Bank_095\sound_001.wav
C:\Temp\saat\GENRL\Bank_095\sound_002.wav
C:\Temp\saat\GENRL\Bank_095\sound_003.wav
C:\Temp\saat\GENRL\Bank_096\sound_001.wav
C:\Temp\saat\GENRL\Bank_096\sound_002.wav
C:\Temp\saat\GENRL\Bank_097\sound_001.wav
C:\Temp\saat\GENRL\Bank_097\sound_002.wav
C:\Temp\saat\GENRL\Bank_097\sound_003.wav
C:\Temp\saat\GENRL\Bank_098\sound_001.wav
C:\Temp\saat\GENRL\Bank_098\sound_002.wav
C:\Temp\saat\GENRL\Bank_098\sound_003.wav
C:\Temp\saat\GENRL\Bank_098\sound_004.wav
C:\Temp\saat\GENRL\Bank_099\sound_001.wav
C:\Temp\saat\GENRL\Bank_099\sound_002.wav
C:\Temp\saat\GENRL\Bank_099\sound_003.wav
C:\Temp\saat\GENRL\Bank_099\sound_004.wav
C:\Temp\saat\GENRL\Bank_099\sound_005.wav
C:\Temp\saat\GENRL\Bank_099\sound_006.wav
C:\Temp\saat\GENRL\Bank_099\sound_007.wav
C:\Temp\saat\GENRL\Bank_099\sound_008.wav
C:\Temp\saat\GENRL\Bank_099\sound_009.wav
C:\Temp\saat\GENRL\Bank_099\sound_010.wav
C:\Temp\saat\GENRL\Bank_099\sound_011.wav
C:\Temp\saat\GENRL\Bank_099\sound_012.wav
C:\Temp\saat\GENRL\Bank_099\sound_013.wav
C:\Temp\saat\GENRL\Bank_099\sound_014.wav
C:\Temp\saat\GENRL\Bank_099\sound_015.wav
C:\Temp\saat\GENRL\Bank_099\sound_016.wav
C:\Temp\saat\GENRL\Bank_100\sound_001.wav
C:\Temp\saat\GENRL\Bank_101\sound_001.wav
C:\Temp\saat\GENRL\Bank_102\sound_001.wav
C:\Temp\saat\GENRL\Bank_103\sound_001.wav
C:\Temp\saat\GENRL\Bank_103\sound_002.wav
C:\Temp\saat\GENRL\Bank_104\sound_001.wav
C:\Temp\saat\GENRL\Bank_105\sound_001.wav
C:\Temp\saat\GENRL\Bank_105\sound_002.wav
C:\Temp\saat\GENRL\Bank_105\sound_003.wav
C:\Temp\saat\GENRL\Bank_106\sound_001.wav
C:\Temp\saat\GENRL\Bank_107\sound_001.wav
C:\Temp\saat\GENRL\Bank_108\sound_001.wav
C:\Temp\saat\GENRL\Bank_108\sound_002.wav
C:\Temp\saat\GENRL\Bank_109\sound_001.wav
C:\Temp\saat\GENRL\Bank_109\sound_002.wav
C:\Temp\saat\GENRL\Bank_109\sound_003.wav
C:\Temp\saat\GENRL\Bank_110\sound_001.wav
C:\Temp\saat\GENRL\Bank_110\sound_002.wav
C:\Temp\saat\GENRL\Bank_111\sound_001.wav
C:\Temp\saat\GENRL\Bank_111\sound_002.wav
C:\Temp\saat\GENRL\Bank_111\sound_003.wav
C:\Temp\saat\GENRL\Bank_112\sound_001.wav
C:\Temp\saat\GENRL\Bank_112\sound_002.wav
C:\Temp\saat\GENRL\Bank_113\sound_001.wav
C:\Temp\saat\GENRL\Bank_113\sound_002.wav
C:\Temp\saat\GENRL\Bank_113\sound_003.wav
C:\Temp\saat\GENRL\Bank_114\sound_001.wav
C:\Temp\saat\GENRL\Bank_114\sound_002.wav
C:\Temp\saat\GENRL\Bank_115\sound_001.wav
C:\Temp\saat\GENRL\Bank_115\sound_002.wav
C:\Temp\saat\GENRL\Bank_115\sound_003.wav
C:\Temp\saat\GENRL\Bank_115\sound_004.wav
C:\Temp\saat\GENRL\Bank_115\sound_005.wav
C:\Temp\saat\GENRL\Bank_115\sound_006.wav
C:\Temp\saat\GENRL\Bank_116\sound_001.wav
C:\Temp\saat\GENRL\Bank_116\sound_002.wav
C:\Temp\saat\GENRL\Bank_117\sound_001.wav
C:\Temp\saat\GENRL\Bank_117\sound_002.wav
C:\Temp\saat\GENRL\Bank_117\sound_003.wav
C:\Temp\saat\GENRL\Bank_118\sound_001.wav
C:\Temp\saat\GENRL\Bank_118\sound_002.wav
C:\Temp\saat\GENRL\Bank_119\sound_001.wav
C:\Temp\saat\GENRL\Bank_119\sound_002.wav
C:\Temp\saat\GENRL\Bank_119\sound_003.wav
C:\Temp\saat\GENRL\Bank_120\sound_001.wav
C:\Temp\saat\GENRL\Bank_120\sound_002.wav
C:\Temp\saat\GENRL\Bank_120\sound_003.wav
C:\Temp\saat\GENRL\Bank_121\sound_001.wav
C:\Temp\saat\GENRL\Bank_121\sound_002.wav
C:\Temp\saat\GENRL\Bank_121\sound_003.wav
C:\Temp\saat\GENRL\Bank_122\sound_001.wav
C:\Temp\saat\GENRL\Bank_122\sound_002.wav
C:\Temp\saat\GENRL\Bank_122\sound_003.wav
C:\Temp\saat\GENRL\Bank_122\sound_004.wav
C:\Temp\saat\GENRL\Bank_122\sound_005.wav
C:\Temp\saat\GENRL\Bank_123\sound_001.wav
C:\Temp\saat\GENRL\Bank_123\sound_002.wav
C:\Temp\saat\GENRL\Bank_124\sound_001.wav
C:\Temp\saat\GENRL\Bank_124\sound_002.wav
C:\Temp\saat\GENRL\Bank_124\sound_003.wav
C:\Temp\saat\GENRL\Bank_125\sound_001.wav
C:\Temp\saat\GENRL\Bank_125\sound_002.wav
C:\Temp\saat\GENRL\Bank_125\sound_003.wav
C:\Temp\saat\GENRL\Bank_125\sound_004.wav
C:\Temp\saat\GENRL\Bank_125\sound_005.wav
C:\Temp\saat\GENRL\Bank_125\sound_006.wav
C:\Temp\saat\GENRL\Bank_126\sound_001.wav
C:\Temp\saat\GENRL\Bank_126\sound_002.wav
C:\Temp\saat\GENRL\Bank_126\sound_003.wav
C:\Temp\saat\GENRL\Bank_126\sound_004.wav
C:\Temp\saat\GENRL\Bank_126\sound_005.wav
C:\Temp\saat\GENRL\Bank_126\sound_006.wav
C:\Temp\saat\GENRL\Bank_126\sound_007.wav
C:\Temp\saat\GENRL\Bank_126\sound_008.wav
C:\Temp\saat\GENRL\Bank_126\sound_009.wav
C:\Temp\saat\GENRL\Bank_126\sound_010.wav
C:\Temp\saat\GENRL\Bank_127\sound_001.wav
C:\Temp\saat\GENRL\Bank_127\sound_002.wav
C:\Temp\saat\GENRL\Bank_127\sound_003.wav
C:\Temp\saat\GENRL\Bank_127\sound_004.wav
C:\Temp\saat\GENRL\Bank_127\sound_005.wav
C:\Temp\saat\GENRL\Bank_127\sound_006.wav
C:\Temp\saat\GENRL\Bank_128\sound_001.wav
C:\Temp\saat\GENRL\Bank_128\sound_002.wav
C:\Temp\saat\GENRL\Bank_129\sound_001.wav
C:\Temp\saat\GENRL\Bank_129\sound_002.wav
C:\Temp\saat\GENRL\Bank_130\sound_001.wav
C:\Temp\saat\GENRL\Bank_130\sound_002.wav
C:\Temp\saat\GENRL\Bank_131\sound_001.wav
C:\Temp\saat\GENRL\Bank_131\sound_002.wav
C:\Temp\saat\GENRL\Bank_131\sound_003.wav
C:\Temp\saat\GENRL\Bank_132\sound_001.wav
C:\Temp\saat\GENRL\Bank_132\sound_002.wav
C:\Temp\saat\GENRL\Bank_132\sound_003.wav
C:\Temp\saat\GENRL\Bank_132\sound_004.wav
C:\Temp\saat\GENRL\Bank_132\sound_005.wav
C:\Temp\saat\GENRL\Bank_132\sound_006.wav
C:\Temp\saat\GENRL\Bank_132\sound_007.wav
C:\Temp\saat\GENRL\Bank_132\sound_008.wav
C:\Temp\saat\GENRL\Bank_132\sound_009.wav
C:\Temp\saat\GENRL\Bank_132\sound_010.wav
C:\Temp\saat\GENRL\Bank_132\sound_011.wav
C:\Temp\saat\GENRL\Bank_132\sound_012.wav
C:\Temp\saat\GENRL\Bank_132\sound_013.wav
C:\Temp\saat\GENRL\Bank_132\sound_014.wav
C:\Temp\saat\GENRL\Bank_132\sound_015.wav
C:\Temp\saat\GENRL\Bank_132\sound_016.wav
C:\Temp\saat\GENRL\Bank_132\sound_017.wav
C:\Temp\saat\GENRL\Bank_132\sound_018.wav
C:\Temp\saat\GENRL\Bank_132\sound_019.wav
C:\Temp\saat\GENRL\Bank_132\sound_020.wav
C:\Temp\saat\GENRL\Bank_132\sound_021.wav
C:\Temp\saat\GENRL\Bank_132\sound_022.wav
C:\Temp\saat\GENRL\Bank_132\sound_023.wav
C:\Temp\saat\GENRL\Bank_132\sound_024.wav
C:\Temp\saat\GENRL\Bank_132\sound_025.wav
C:\Temp\saat\GENRL\Bank_132\sound_026.wav
C:\Temp\saat\GENRL\Bank_132\sound_027.wav
C:\Temp\saat\GENRL\Bank_132\sound_028.wav
C:\Temp\saat\GENRL\Bank_132\sound_029.wav
C:\Temp\saat\GENRL\Bank_132\sound_030.wav
C:\Temp\saat\GENRL\Bank_132\sound_031.wav
C:\Temp\saat\GENRL\Bank_132\sound_032.wav
C:\Temp\saat\GENRL\Bank_132\sound_033.wav
C:\Temp\saat\GENRL\Bank_132\sound_034.wav
C:\Temp\saat\GENRL\Bank_132\sound_035.wav
C:\Temp\saat\GENRL\Bank_132\sound_036.wav
C:\Temp\saat\GENRL\Bank_132\sound_037.wav
C:\Temp\saat\GENRL\Bank_132\sound_038.wav
C:\Temp\saat\GENRL\Bank_132\sound_039.wav
C:\Temp\saat\GENRL\Bank_132\sound_040.wav
C:\Temp\saat\GENRL\Bank_132\sound_041.wav
C:\Temp\saat\GENRL\Bank_132\sound_042.wav
C:\Temp\saat\GENRL\Bank_132\sound_043.wav
C:\Temp\saat\GENRL\Bank_132\sound_044.wav
C:\Temp\saat\GENRL\Bank_132\sound_045.wav
C:\Temp\saat\GENRL\Bank_133\sound_001.wav
C:\Temp\saat\GENRL\Bank_133\sound_002.wav
C:\Temp\saat\GENRL\Bank_134\sound_001.wav
C:\Temp\saat\GENRL\Bank_134\sound_002.wav
C:\Temp\saat\GENRL\Bank_134\sound_003.wav
C:\Temp\saat\GENRL\Bank_135\sound_001.wav
C:\Temp\saat\GENRL\Bank_135\sound_002.wav
C:\Temp\saat\GENRL\Bank_136\sound_001.wav
C:\Temp\saat\GENRL\Bank_136\sound_002.wav
C:\Temp\saat\GENRL\Bank_136\sound_003.wav
C:\Temp\saat\GENRL\Bank_137\sound_001.wav
C:\Temp\saat\GENRL\Bank_137\sound_002.wav
C:\Temp\saat\GENRL\Bank_137\sound_003.wav
C:\Temp\saat\GENRL\Bank_137\sound_004.wav
C:\Temp\saat\GENRL\Bank_137\sound_005.wav
C:\Temp\saat\GENRL\Bank_137\sound_006.wav
C:\Temp\saat\GENRL\Bank_137\sound_007.wav
C:\Temp\saat\GENRL\Bank_137\sound_008.wav
C:\Temp\saat\GENRL\Bank_137\sound_009.wav
C:\Temp\saat\GENRL\Bank_137\sound_010.wav
C:\Temp\saat\GENRL\Bank_137\sound_011.wav
C:\Temp\saat\GENRL\Bank_137\sound_012.wav
C:\Temp\saat\GENRL\Bank_137\sound_013.wav
C:\Temp\saat\GENRL\Bank_137\sound_014.wav
C:\Temp\saat\GENRL\Bank_137\sound_015.wav
C:\Temp\saat\GENRL\Bank_137\sound_016.wav
C:\Temp\saat\GENRL\Bank_137\sound_017.wav
C:\Temp\saat\GENRL\Bank_137\sound_018.wav
C:\Temp\saat\GENRL\Bank_137\sound_019.wav
C:\Temp\saat\GENRL\Bank_137\sound_020.wav
C:\Temp\saat\GENRL\Bank_137\sound_021.wav
C:\Temp\saat\GENRL\Bank_137\sound_022.wav
C:\Temp\saat\GENRL\Bank_137\sound_023.wav
C:\Temp\saat\GENRL\Bank_137\sound_024.wav
C:\Temp\saat\GENRL\Bank_137\sound_025.wav
C:\Temp\saat\GENRL\Bank_137\sound_026.wav
C:\Temp\saat\GENRL\Bank_137\sound_027.wav
C:\Temp\saat\GENRL\Bank_137\sound_028.wav
C:\Temp\saat\GENRL\Bank_137\sound_029.wav
C:\Temp\saat\GENRL\Bank_137\sound_030.wav
C:\Temp\saat\GENRL\Bank_137\sound_031.wav
C:\Temp\saat\GENRL\Bank_137\sound_032.wav
C:\Temp\saat\GENRL\Bank_137\sound_033.wav
C:\Temp\saat\GENRL\Bank_137\sound_034.wav
C:\Temp\saat\GENRL\Bank_137\sound_035.wav
C:\Temp\saat\GENRL\Bank_137\sound_036.wav
C:\Temp\saat\GENRL\Bank_137\sound_037.wav
C:\Temp\saat\GENRL\Bank_137\sound_038.wav
C:\Temp\saat\GENRL\Bank_137\sound_039.wav
C:\Temp\saat\GENRL\Bank_137\sound_040.wav
C:\Temp\saat\GENRL\Bank_137\sound_041.wav
C:\Temp\saat\GENRL\Bank_137\sound_042.wav
C:\Temp\saat\GENRL\Bank_137\sound_043.wav
C:\Temp\saat\GENRL\Bank_137\sound_044.wav
C:\Temp\saat\GENRL\Bank_137\sound_045.wav
C:\Temp\saat\GENRL\Bank_137\sound_046.wav
C:\Temp\saat\GENRL\Bank_137\sound_047.wav
C:\Temp\saat\GENRL\Bank_137\sound_048.wav
C:\Temp\saat\GENRL\Bank_137\sound_049.wav
C:\Temp\saat\GENRL\Bank_137\sound_050.wav
C:\Temp\saat\GENRL\Bank_137\sound_051.wav
C:\Temp\saat\GENRL\Bank_137\sound_052.wav
C:\Temp\saat\GENRL\Bank_137\sound_053.wav
C:\Temp\saat\GENRL\Bank_137\sound_054.wav
C:\Temp\saat\GENRL\Bank_137\sound_055.wav
C:\Temp\saat\GENRL\Bank_137\sound_056.wav
C:\Temp\saat\GENRL\Bank_137\sound_057.wav
C:\Temp\saat\GENRL\Bank_137\sound_058.wav
C:\Temp\saat\GENRL\Bank_137\sound_059.wav
C:\Temp\saat\GENRL\Bank_137\sound_060.wav
C:\Temp\saat\GENRL\Bank_137\sound_061.wav
C:\Temp\saat\GENRL\Bank_137\sound_062.wav
C:\Temp\saat\GENRL\Bank_137\sound_063.wav
C:\Temp\saat\GENRL\Bank_137\sound_064.wav
C:\Temp\saat\GENRL\Bank_137\sound_065.wav
C:\Temp\saat\GENRL\Bank_137\sound_066.wav
C:\Temp\saat\GENRL\Bank_137\sound_067.wav
C:\Temp\saat\GENRL\Bank_137\sound_068.wav
C:\Temp\saat\GENRL\Bank_137\sound_069.wav
C:\Temp\saat\GENRL\Bank_137\sound_070.wav
C:\Temp\saat\GENRL\Bank_137\sound_071.wav
C:\Temp\saat\GENRL\Bank_137\sound_072.wav
C:\Temp\saat\GENRL\Bank_137\sound_073.wav
C:\Temp\saat\GENRL\Bank_137\sound_074.wav
C:\Temp\saat\GENRL\Bank_137\sound_075.wav
C:\Temp\saat\GENRL\Bank_137\sound_076.wav
C:\Temp\saat\GENRL\Bank_137\sound_077.wav
C:\Temp\saat\GENRL\Bank_137\sound_078.wav
C:\Temp\saat\GENRL\Bank_137\sound_079.wav
C:\Temp\saat\GENRL\Bank_137\sound_080.wav
C:\Temp\saat\GENRL\Bank_137\sound_081.wav
C:\Temp\saat\GENRL\Bank_137\sound_082.wav
C:\Temp\saat\GENRL\Bank_137\sound_083.wav
C:\Temp\saat\GENRL\Bank_137\sound_084.wav
C:\Temp\saat\GENRL\Bank_137\sound_085.wav
C:\Temp\saat\GENRL\sfx_import.ini
C:\WINDOWS\GPInstall.exe
C:\WINDOWS\ST5UNST.000
C:\WINDOWS\ST5UNST.001
C:\WINDOWS\ST5UNST.002
.
((((((((((((((((((((((((( Files Created from 2007-11-18 to 2007-12-18 )))))))))))))))))))))))))))))))
.
2007-12-17 23:00 . 2007-12-17 23:00 d——– C:\ConvertedAudio
2007-12-17 22:59 . 2007-12-17 22:59 d——– C:\Program Files\Softdiv Audio Converter
2007-12-17 22:51 . 2007-12-17 22:51 d——– C:\Program Files\DivX
2007-12-17 10:41 . 2007-12-17 10:41 d——– C:\download
2007-12-17 10:41 . 2007-12-17 10:41 d——– C:\Documents and Settings\Tom Robinson\Application Data\Offline Explorer
2007-12-13 16:04 . 2007-12-13 16:04 d——– C:\Program Files\abcache
2007-12-13 16:03 . 2007-12-13 16:03 d——– C:\Program Files\ui
2007-12-13 16:03 . 2007-12-13 16:04 d——– C:\Program Files\PlugCFG
2007-12-13 16:03 . 2007-12-13 16:04 d——– C:\Program Files\Help
2007-12-13 16:03 . 2007-12-13 16:03 d——– C:\Program Files\autoback
2007-12-11 17:32 . 2007-12-11 17:32 156,992 –a—— C:\WINDOWS\system32\DivXCodecVersionChecker.exe
2007-12-05 16:50 . 2007-12-05 16:50 d——– C:\Program Files\Super Compressor
2007-12-05 15:42 . 2007-12-05 15:42 d——– C:\Program Files\Microsoft ActiveSync
2007-12-04 18:36 . 2007-12-04 18:36 d——– C:\Documents and Settings\Tom Robinson\Application Data\NCH Swift Sound
2007-12-04 18:36 . 2007-12-04 18:36 d——– C:\Documents and Settings\All Users\Application Data\NCH Swift Sound
2007-11-29 16:14 . 2007-11-29 16:14 d——– C:\Program Files\ZModeler
2007-11-26 16:52 . 2007-11-26 16:52 d——– C:\WINDOWS\San Andreas Mod Installer
2007-11-21 12:34 . 2007-11-21 12:34 d——– C:\Program Files\Gmax
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2007-12-13 21:12 1,446 —-a-w C:\Program Files\gmax.ini
2007-12-13 21:11 64 —-a-w C:\Program Files\maxscrpt.dsk
2007-12-13 21:05 300 —-a-w C:\Program Files\gmax.log
2007-12-13 21:04 124 —-a-w C:\Program Files\plugin.ini
2007-11-13 10:25 20,480 —-a-w C:\WINDOWS\system32\drivers\secdrv.sys
2007-10-30 23:42 3,590,656 —-a-w C:\WINDOWS\system32\dllcache\mshtml.dll
2007-10-29 22:35 1,287,680 —-a-w C:\WINDOWS\system32\quartz.dll
2007-10-29 22:35 1,287,680 —-a-w C:\WINDOWS\system32\dllcache\quartz.dll
2007-10-27 22:39 228,864 —-a-w C:\WINDOWS\system32\wmasf.dll
2007-10-27 22:39 228,864 —-a-w C:\WINDOWS\system32\dllcache\wmasf.dll
2007-10-26 03:34 8,460,288 —-a-w C:\WINDOWS\system32\dllcache\shell32.dll
2007-10-20 17:52 ——— d—–w C:\Documents and Settings\Tom Robinson\Application Data\AVG7
2007-10-20 17:51 ——— d—–w C:\Documents and Settings\LocalService\Application Data\AVG7
2007-10-20 17:43 ——— d—–w C:\Documents and Settings\All Users\Application Data\Avg7
2007-10-18 15:39 ——— d—–w C:\Documents and Settings\All Users\Application Data\Symantec
2007-10-18 15:38 ——— d—–w C:\Program Files\Common Files\Symantec Shared
2007-10-10 23:56 824,832 —-a-w C:\WINDOWS\system32\dllcache\wininet.dll
2007-10-10 23:56 671,232 —-a-w C:\WINDOWS\system32\dllcache\mstime.dll
2007-10-10 23:56 232,960 —-a-w C:\WINDOWS\system32\dllcache\webcheck.dll
2007-10-10 23:56 105,984 —-a-w C:\WINDOWS\system32\dllcache\url.dll
2007-10-10 23:56 102,400 —-a-w C:\WINDOWS\system32\dllcache\occache.dll
2007-10-10 23:56 1,159,680 —-a-w C:\WINDOWS\system32\dllcache\urlmon.dll
2007-10-10 23:55 63,488 ——w C:\WINDOWS\system32\dllcache\icardie.dll
2007-10-10 23:55 6,065,664 ——w C:\WINDOWS\system32\dllcache\ieframe.dll
2007-10-10 23:55 52,224 ——w C:\WINDOWS\system32\dllcache\msfeedsbs.dll
2007-10-10 23:55 478,208 —-a-w C:\WINDOWS\system32\dllcache\mshtmled.dll
2007-10-10 23:55 459,264 ——w C:\WINDOWS\system32\dllcache\msfeeds.dll
2007-10-10 23:55 44,544 —-a-w C:\WINDOWS\system32\dllcache\iernonce.dll
2007-10-10 23:55 384,512 —-a-w C:\WINDOWS\system32\dllcache\iedkcs32.dll
2007-10-10 23:55 383,488 ——w C:\WINDOWS\system32\dllcache\ieapfltr.dll
2007-10-10 23:55 27,648 —-a-w C:\WINDOWS\system32\dllcache\jsproxy.dll
2007-10-10 23:55 267,776 ——w C:\WINDOWS\system32\dllcache\iertutil.dll
2007-10-10 23:55 230,400 —-a-w C:\WINDOWS\system32\dllcache\ieaksie.dll
2007-10-10 23:55 214,528 —-a-w C:\WINDOWS\system32\dllcache\dxtrans.dll
2007-10-10 23:55 193,024 —-a-w C:\WINDOWS\system32\dllcache\msrating.dll
2007-10-10 23:55 153,088 —-a-w C:\WINDOWS\system32\dllcache\ieakeng.dll
2007-10-10 23:55 132,608 —-a-w C:\WINDOWS\system32\dllcache\extmgr.dll
2007-10-10 23:55 124,928 —-a-w C:\WINDOWS\system32\dllcache\advpack.dll
2007-10-10 10:59 70,656 —-a-w C:\WINDOWS\system32\dllcache\ie4uinit.exe
2007-10-10 10:59 625,152 —-a-w C:\WINDOWS\system32\dllcache\iexplore.exe
2007-10-10 10:59 13,824 ——w C:\WINDOWS\system32\dllcache\ieudinit.exe
2007-10-10 05:46 161,792 —-a-w C:\WINDOWS\system32\dllcache\ieakui.dll
2007-09-19 17:09 356,352 —-a-w C:\WINDOWS\eSellerateEngine.dll
2007-03-12 21:26 0 —h–w C:\Program Files\AppUpdate.log
2002-10-31 20:13 295,946 —-a-w C:\Program Files\Readme.Rtf
.
((((((((((((((((((((((((((((( snapshot@2007-12-17_22.24.07.39 )))))))))))))))))))))))))))))))))))))))))
.
+ 2007-03-13 15:57:12 163,328 —-a-w C:\WINDOWS\erdnt\subs\F3M\ERDNT.EXE
+ 2003-12-22 13:20:26 69,632 —-a-w C:\WINDOWS\system32\akrip32.dll
- 2003-08-07 06:01:50 237,568 —-a-w C:\WINDOWS\system32\lame_enc.dll
+ 2003-12-22 13:20:26 233,472 —-a-w C:\WINDOWS\system32\lame_enc.dll
+ 2003-12-22 13:20:26 188,416 —-a-w C:\WINDOWS\system32\lame_enca.dll
- 2002-12-03 08:02:58 491,520 —-a-w C:\WINDOWS\system32\NCTAudioFile.dll
+ 2003-12-22 13:20:26 1,703,936 —-a-w C:\WINDOWS\system32\NCTAudioFile.dll
- 2002-12-03 08:07:08 168,448 —-a-w C:\WINDOWS\system32\NCTAudioPlayer.dll
+ 2003-12-22 13:20:26 274,432 —-a-w C:\WINDOWS\system32\NCTAudioPlayer.dll
+ 2003-12-22 13:20:26 282,624 —-a-w C:\WINDOWS\system32\NCTAudioVisualization.dll
+ 2003-12-22 13:20:26 4,608 —-a-w C:\WINDOWS\system32\W95INF32.DLL
+ 2003-12-22 13:20:26 212,992 —-a-w C:\WINDOWS\system32\wodShellMenu.dll
+ 2007-12-18 17:45:06 16,384 —-a-w C:\WINDOWS\Temp\Perflib_Perfdata_234.dat
+ 2007-12-18 17:44:58 16,384 —-a-w C:\WINDOWS\Temp\Perflib_Perfdata_660.dat
+ 2007-12-18 17:46:10 16,384 —-a-w C:\WINDOWS\Temp\Perflib_Perfdata_d6c.dat
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-10 20:00]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ePower_DMC"="C:\Acer\Empowering Technology\ePower\ePower_DMC.exe" [2006-05-30 12:11]
"TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" [2006-12-26 11:24]
"SynTPEnh"="C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" [2006-03-03 13:07]
"SkyTel"="SkyTel.EXE" [2006-05-16 03:04 C:\WINDOWS\SkyTel.exe]
"RTHDCPL"="RTHDCPL.EXE" [2006-06-27 23:54 C:\WINDOWS\RTHDCPL.exe]
"ntiMUI"="C:\Program Files\NewTech Infosystems\NTI CD & DVD-Maker 7\ntiMUI.exe" [2005-05-11 17:15]
"LManager"="C:\PROGRA~1\LAUNCH~1\LManager.exe" [2006-06-23 06:59]
"eRecoveryService"="C:\Acer\Empowering Technology\eRecovery\eRAgent.exe" [2006-06-01 14:40]
"Boot"="C:\Acer\Empowering Technology\ePower\Boot.exe" [2006-03-15 22:12]
"AzMixerSel"="C:\Program Files\Realtek\InstallShield\AzMixerSel.exe" [2006-04-14 22:35]
"Acer ePresentation HPD"="C:\Acer\Empowering Technology\ePresentation\ePresentation.exe" [2006-03-31 16:39]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 01:11]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2007-10-10 19:51]
"!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 05:25]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2007-10-16 17:18]
"AVG7_CC"="C:\PROGRA~1\Grisoft\AVG7\avgcc.exe" [2007-10-24 10:00]
"WarReg_PopUp"="C:\Acer\WR_PopUp\WarReg_PopUp.exe" [2006-09-23 13:08]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"AVG7_Run"="C:\PROGRA~1\Grisoft\AVG7\avgw.exe" [2007-10-24 10:00]
C:\Documents and Settings\Tom Robinson\Start Menu\Programs\Startup\
SpywareGuard.lnk - C:\Program Files\SpywareGuard\sgmain.exe [2003-08-29 19:05:35]
C:\Documents and Settings\All Users\Start Menu\Programs\Startup\
Acer Empowering Technology.lnk - C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe [2006-03-27 11:37:58]
Extender Resource Monitor.lnk - C:\WINDOWS\ehome\RMSysTry.exe [2005-10-20 19:55:40]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"InstallVisualStyle"= C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles
"InstallTheme"= C:\WINDOWS\Resources\Themes\Royale.theme
R0 UBHelper;UBHelper;C:\WINDOWS\system32\drivers\UBHelper.sys [2004-12-17 16:14]
R1 oreans32;oreans32;C:\WINDOWS\system32\drivers\oreans32.sys [2007-07-19 12:45]
R2 DritekPortIO;Dritek General Port I/O;C:\PROGRA~1\LAUNCH~1\DPortIO.sys [2005-12-23 01:13]
R2 int15;int15;C:\WINDOWS\system32\drivers\int15.sys [2006-06-02 13:59]
R2 RMSvc;Media Center Extender Resource Monitor;C:\WINDOWS\ehome\RMSvc.exe [2005-10-20 19:55]
R2 tvicport;tvicport;C:\WINDOWS\system32\drivers\tvicport.sys [2006-06-02 13:59]
R3 DKbFltr;Dritek Keyboard Filter Driver;C:\WINDOWS\system32\DRIVERS\DKbFltr.sys [2004-12-07 23:10]
R3 EMSCR;EMSCR;C:\WINDOWS\system32\DRIVERS\EMS7SK.sys [2006-05-24 19:19]
R3 ESDCR;ESDCR;C:\WINDOWS\system32\DRIVERS\ESD7SK.sys [2006-05-24 19:19]
R3 ESMCR;ESMCR;C:\WINDOWS\system32\DRIVERS\ESM7SK.sys [2006-05-24 19:19]
S2 eLock2BurnerLockDriver;eLock2BurnerLockDriver;C:\WINDOWS\system32\eLock2BurnerLockDriver.sys []
S2 eLock2FSCTLDriver;eLock2FSCTLDriver;C:\WINDOWS\system32\eLock2FSCTLDriver.sys []
S3 LTower;LEGO USB Tower Driver;C:\WINDOWS\system32\Drivers\LTower.sys [2004-01-22 17:15]
S3 PsSdk30;PsSdk30;C:\WINDOWS\system32\Drivers\PsSdk30.drv []
S3 QWAVE;QWAVE service;C:\WINDOWS\system32\svchost.exe -k QWAVE []
S3 QWAVEDRV;QWAVE driver;C:\WINDOWS\system32\DRIVERS\qwavedrv.sys [2005-10-20 20:20]
S3 SRS_SSCFilter;SRS Labs Audio Sandbox (WDM);C:\WINDOWS\system32\drivers\srs_sscfilter_i386.sys [2007-02-23 14:06]
S3 xbreader;MaxDrive XBox Driver (xbreader.sys);C:\WINDOWS\system32\Drivers\xbreader.sys [2001-01-02 23:53]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
QWAVE REG_MULTI_SZ QWAVE
.
**************************************************************************
catchme 0.3.1333 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,
http://www.gmer.net
Rootkit scan 2007-12-18 13:06:29
Windows 5.1.2600 Service Pack 2 FAT NTAPI
scanning hidden processes …
scanning hidden autostart entries …
scanning hidden files …
scan completed successfully
hidden files: 0
**************************************************************************
.
Completion time: 2007-12-18 13:07:58
.
2007-12-13 03:37:02 — E O F —
HijackThis Log
Logfile of HijackThis v1.99.1
Scan saved at 1:13:22 PM, on 12/18/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\WINDOWS\ehome\RMSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Acer\Empowering Technology\ePower\ePower_DMC.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\RTHDCPL.EXE
C:\PROGRA~1\LAUNCH~1\LManager.exe
C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe
C:\WINDOWS\ehome\RMSysTry.exe
C:\Program Files\SpywareGuard\sgmain.exe
C:\WINDOWS\system32\wbem\unsecapp.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\SpywareGuard\sgbhp.exe
C:\PROGRA~1\Grisoft\AVG7\avgw.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\explorer.exe
C:\Program Files\Hijackthis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://acer.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: SnagIt Toolbar Loader - {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:\Program Files\TechSmith\SnagIt 8\SnagItBHO.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: (no name) - {02DCA195-602B-4B1F-83FF-381B7E804BDB} - C:\WINDOWS\system32\HDBHO.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SpywareGuard Download Protection - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:\Program Files\SpywareGuard\dlprotect.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: FlashFXP Helper for Internet Explorer - {E5A1691B-D188-4419-AD02-90002030B8EE} - C:\PROGRA~1\FlashFXP\IEFlash.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\system32\msdxm.ocx
O3 - Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - (no file)
O3 - Toolbar: ImageShack Toolbar - {6932D140-ABC4-4073-A44C-D4A541665E35} - C:\WINDOWS\ImageShackToolbar\ImageShackToolbar.dll
O3 - Toolbar: SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files\TechSmith\SnagIt 8\SnagItIEAddin.dll
O4 - HKLM\..\Run: [ePower_DMC] C:\Acer\Empowering Technology\ePower\ePower_DMC.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SynTPEnh] "C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [ntiMUI] "C:\Program Files\NewTech Infosystems\NTI CD & DVD-Maker 7\ntiMUI.exe"
O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\LManager.exe
O4 - HKLM\..\Run: [eRecoveryService] "C:\Acer\Empowering Technology\eRecovery\eRAgent.exe"
O4 - HKLM\..\Run: [Boot] "C:\Acer\Empowering Technology\ePower\Boot.exe"
O4 - HKLM\..\Run: [AzMixerSel] "C:\Program Files\Realtek\InstallShield\AzMixerSel.exe"
O4 - HKLM\..\Run: [Acer ePresentation HPD] "C:\Acer\Empowering Technology\ePresentation\ePresentation.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [WarReg_PopUp] C:\Acer\WR_PopUp\WarReg_PopUp.exe /idle
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: SpywareGuard.lnk = C:\Program Files\SpywareGuard\sgmain.exe
O4 - Global Startup: Acer Empowering Technology.lnk = C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe
O4 - Global Startup: Extender Resource Monitor.lnk = C:\WINDOWS\ehome\RMSysTry.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O11 - Options group: [INTERNATIONAL] International*
O15 - Trusted Zone:
http://www.forumshare.net
O15 - Trusted Zone:
http://toolbar.imageshack.us
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://appldnld.apple.com.edgesuite.net/co…ex/qtplugin.cab
O16 - DPF: {6932D140-ABC4-4073-A44C-D4A541665E35} (ImageShack Toolbar) -
http://toolbar.imageshack.us/toolbar/ImageShackToolbar.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) -
http://www.update.microsoft.com/microsoftu…b?1185458324171
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) -
http://fpdownload2.macromedia.com/get/shoc…ash/swflash.cab
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Memory Check Service (AcerMemUsageCheckService) - Acer Inc. - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: iPod Service - Unknown owner - C:\Program Files\iPod\bin\iPodService.exe (file missing)
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
If you still need help, Scan again with HijackThis, and copy/paste" a new log file into this thread.Also please describe how your computer behaves at the moment.