Advertisement

There's no such thing as a stupid question, but they're the easiest to answer.
Login
Search

Advertisement

Virus & Other Malware Removal Virus & Other Malware Removal
Search Search
Search for:
Tech Support Guy > > >

UNWANTED! Commercial audio ads playing through speakers Can't get rid of it!

(In Progress)
(!)

matrix721's Avatar
matrix721 matrix721 is offline
Computer Specs
Junior Member with 6 posts.
THREAD STARTER
 
Join Date: Jan 2012
Experience: Intermediate
31-Jan-2012, 01:41 PM #1
UNWANTED! Commercial audio ads playing through speakers Can't get rid of it!
Even when the computer is sitting idle out of the blue you will hear a commercial for Harrah's casino! This happens various times throughout the day.....PLEASE help me get rid of this mess!

here is my log of DDS
Hijack isnt letting me create a log file, it keeps denying permission even though i am administrator so I cant post that log file here.....


DDS:


.
DDS (Ver_2011-08-26.01) - NTFSAMD64
Internet Explorer: 9.0.8112.16421
Run by Christopher at 12:15:36 on 2012-01-31
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.12287.9269 [GMT -5:00]
.
AV: Lavasoft Ad-Watch Live! Anti-Virus *Enabled/Updated* {9FF26384-70D4-CE6B-3ECB-E759A6A40116}
AV: Microsoft Security Essentials *Enabled/Updated* {108DAC43-C256-20B7-BB05-914135DA5160}
SP: Microsoft Security Essentials *Enabled/Updated* {ABEC4DA7-E46C-2F39-81B5-AA334E5D1BDD}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Lavasoft Ad-Watch Live! *Enabled/Updated* {24938260-56EE-C1E5-047B-DC2BDD234BAB}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
C:\Windows\system32\nvvsvc.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files\Microsoft LifeCam\MSCamS64.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Windows\vVX3000.exe
C:\Program Files\NetWorx\networx.exe
C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
C:\Program Files (x86)\Gomez\GomezPEER\bin\GomezPEER.exe
C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Logitech\SetPoint\x86\SetPoint32.exe
C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.EXE
C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
C:\Users\Christopher\AppData\Local\Google\Update\1.3.21.99\GoogleCrashHandl er.exe
C:\Users\Christopher\AppData\Local\Google\Update\1.3.21.99\GoogleCrashHandl er64.exe
C:\Windows\system32\taskhost.exe
C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWTray.exe
C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWService.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files (x86)\Internet Explorer\IELowutil.exe
C:\PROGRA~2\Gomez\GOMEZP~1\jre\bin\java.exe
C:\Windows\system32\conhost.exe
C:\Users\Christopher\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Christopher\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\SysWOW64\rundll32.exe
C:\Users\Christopher\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Christopher\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\DllHost.exe
C:\Windows\system32\DllHost.exe
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\conhost.exe
C:\Windows\SysWOW64\cscript.exe
C:\Windows\system32\wbem\wmiprvse.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.google.com/
uInternet Settings,ProxyServer = http=;ftp=;https=;
mWinlogon: Userinit=userinit.exe
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO: Java(tm) Plug-In SSV Helper: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll
BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
uRun: [Xvid] C:\Program Files (x86)\Xvid\CheckUpdate.exe
uRun: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
uRun: [Google Update] "C:\Users\Christopher\AppData\Local\Google\Update\GoogleUpdate.exe" /c
mRun: [NUSB3MON] "C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
mRun: [DivXUpdate] "C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
mRun: [LifeCam] "C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe"
mRun: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
mRun: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
mRunOnce: [Malwarebytes Anti-Malware] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
StartupFolder: C:\Users\CHRIST~1\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startu p\LOGITE~1.LNK - C:\Program Files (x86)\Common Files\LogiShrd\eReg\SetPoint\eReg.exe
StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\GOMEZP~1.LNK - C:\Program Files (x86)\Gomez\GomezPEER\bin\GomezPEER.exe
StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\LOGITE~1.LNK - C:\Program Files\Logitech\SetPoint\SetPoint.exe
mPolicies-explorer: NoActiveDesktop = 1 (0x1)
mPolicies-explorer: NoActiveDesktopChanges = 1 (0x1)
mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
TCP: DhcpNameServer = 192.168.2.1 192.168.1.254
TCP: Interfaces\{66E5A4FD-8D9A-4D63-83E1-EE7E7648CCA8} : DhcpNameServer = 192.168.2.1 192.168.1.254
Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
BHO-X64: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO-X64: AcroIEHelperStub - No File
BHO-X64: Java(tm) Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll
BHO-X64: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO-X64: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
mRun-x64: [NUSB3MON] "C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
mRun-x64: [DivXUpdate] "C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
mRun-x64: [LifeCam] "C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe"
mRun-x64: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
mRun-x64: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
mRun-x64: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
mRunOnce-x64: [Malwarebytes Anti-Malware] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
.
============= SERVICES / DRIVERS ===============
.
R0 Lbd;Lbd;C:\Windows\system32\DRIVERS\Lbd.sys --> C:\Windows\system32\DRIVERS\Lbd.sys [?]
R1 MpFilter;Microsoft Malware Protection Driver;C:\Windows\system32\DRIVERS\MpFilter.sys --> C:\Windows\system32\DRIVERS\MpFilter.sys [?]
R2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWService.exe [2011-12-23 2152152]
R2 nvUpdatusService;NVIDIA Update Service Daemon;C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-8-29 2214504]
R3 Lavasoft Kernexplorer;Lavasoft helper driver;C:\Program Files (x86)\Lavasoft\Ad-Aware\kernexplorer64.sys [2011-12-26 17152]
R3 LEqdUsb;Logitech SetPoint Unifying KMDF USB Filter;C:\Windows\system32\DRIVERS\LEqdUsb.Sys --> C:\Windows\system32\DRIVERS\LEqdUsb.Sys [?]
R3 LHidEqd;Logitech SetPoint Unifying KMDF HID Filter;C:\Windows\system32\DRIVERS\LHidEqd.Sys --> C:\Windows\system32\DRIVERS\LHidEqd.Sys [?]
R3 MpNWMon;Microsoft Malware Protection Network Driver;C:\Windows\system32\DRIVERS\MpNWMon.sys --> C:\Windows\system32\DRIVERS\MpNWMon.sys [?]
R3 NisDrv;Microsoft Network Inspection System;C:\Windows\system32\DRIVERS\NisDrvWFP.sys --> C:\Windows\system32\DRIVERS\NisDrvWFP.sys [?]
R3 NisSrv;Microsoft Network Inspection;C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe [2011-4-27 288272]
R3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;C:\Windows\system32\DRIVERS\nusb3hub.sys --> C:\Windows\system32\DRIVERS\nusb3hub.sys [?]
R3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;C:\Windows\system32\DRIVERS\nusb3xhc.sys --> C:\Windows\system32\DRIVERS\nusb3xhc.sys [?]
R3 RTL8167;Realtek 8167 NT Driver;C:\Windows\system32\DRIVERS\Rt64win7.sys --> C:\Windows\system32\DRIVERS\Rt64win7.sys [?]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]
S3 TsUsbFlt;TsUsbFlt;C:\Windows\system32\drivers\tsusbflt.sys --> C:\Windows\system32\drivers\tsusbflt.sys [?]
S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\system32\Wat\WatAdminSvc.exe --> C:\Windows\system32\Wat\WatAdminSvc.exe [?]
.
=============== Created Last 30 ================
.
2012-01-31 16:51:48 388096 ----a-r- C:\Users\Christopher\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2012-01-31 16:51:48 -------- d-----w- C:\Program Files (x86)\Trend Micro
2012-01-31 15:52:10 8602168 ----a-w- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{1831FAAB-102C-41B7-B566-A20CD437D211}\mpengine.dll
2012-01-30 07:17:25 -------- d-----w- C:\Program Files (x86)\Drakensang Online
2012-01-30 07:15:35 472808 ----a-w- C:\Windows\SysWow64\deployJava1.dll
2012-01-29 12:41:42 -------- d-----w- C:\Users\Christopher\AppData\Local\{71693CC0-9151-4D3A-8C8B-42A3F2470990}
2012-01-29 12:41:26 -------- d-----w- C:\Users\Christopher\AppData\Local\{7710D764-EEF6-4ADD-A4ED-412719178347}
2012-01-26 23:47:25 190992 ----a-w- C:\Windows\System32\BtCoreIf.dll
2012-01-26 23:47:15 96272 ----a-w- C:\Windows\System32\KemXML.dll
2012-01-26 23:47:15 235536 ----a-w- C:\Windows\System32\KemUtil.dll
2012-01-26 23:47:15 235536 ----a-w- C:\Windows\System32\kemutb.dll
2012-01-26 23:47:15 159248 ----a-w- C:\Windows\System32\KemWnd.dll
2012-01-26 13:04:27 -------- d-----w- C:\Users\Christopher\AppData\Local\{877FFD6A-5F3B-4DB6-ABFF-81A178CF6CD4}
2012-01-26 13:04:10 -------- d-----w- C:\Users\Christopher\AppData\Local\{9F9FA987-9B6D-4724-98F9-D6B1E23E867B}
2012-01-26 08:17:41 -------- d-----w- C:\Users\Christopher\AppData\Local\{0E1B863D-291F-4E51-BBEF-3CEA5ED88700}
2012-01-26 08:17:29 -------- d-----w- C:\Users\Christopher\AppData\Local\{B90B74A3-76BD-4A05-9D35-EA888F126171}
2012-01-21 06:09:21 -------- d-----w- C:\Users\Christopher\AppData\Local\Google
2012-01-15 08:56:08 -------- d-----w- C:\Users\Christopher\AppData\Roaming\Malwarebytes
2012-01-15 08:56:03 -------- d-----w- C:\ProgramData\Malwarebytes
2012-01-15 08:56:02 23152 ----a-w- C:\Windows\System32\drivers\mbam.sys
2012-01-15 08:56:02 -------- d-----w- C:\Program Files (x86)\Malwarebytes' Anti-Malware
2012-01-14 15:19:40 -------- d-----w- C:\Program Files (x86)\Eligium
2012-01-14 05:44:31 -------- d-----w- C:\Users\Christopher\AppData\Local\DDMSettings
2012-01-14 05:38:28 -------- d-----w- C:\Program Files (x86)\Common Files\PX Storage Engine
2012-01-14 05:28:24 -------- d-----w- C:\Users\Christopher\AppData\Local\{9D22CCB4-0022-4808-92F6-CC2B0AC01D3F}
2012-01-12 11:22:26 -------- d-----w- C:\Users\Christopher\AppData\Local\{50141784-1CAA-4D4E-B884-F7B6F3DF29E0}
2012-01-12 11:22:09 -------- d-----w- C:\Users\Christopher\AppData\Local\{FB760361-7314-4AF7-AF89-FA735CD21BE2}
2012-01-11 17:23:29 514560 ----a-w- C:\Windows\SysWow64\qdvd.dll
2012-01-11 17:23:29 1572864 ----a-w- C:\Windows\System32\quartz.dll
2012-01-11 17:23:29 1328128 ----a-w- C:\Windows\SysWow64\quartz.dll
2012-01-11 17:23:28 366592 ----a-w- C:\Windows\System32\qdvd.dll
2012-01-11 17:23:18 1731920 ----a-w- C:\Windows\System32\ntdll.dll
2012-01-11 17:23:18 1292080 ----a-w- C:\Windows\SysWow64\ntdll.dll
2012-01-11 17:23:17 77312 ----a-w- C:\Windows\System32\packager.dll
2012-01-11 17:23:17 67072 ----a-w- C:\Windows\SysWow64\packager.dll
2012-01-11 00:17:12 -------- d-----w- C:\Users\Christopher\AppData\Local\{23C7B086-D585-4B89-857E-8CC75977FD7B}
2012-01-11 00:16:58 -------- d-----w- C:\Users\Christopher\AppData\Local\{27B062C5-7975-40AD-8AF8-3765F2F2B003}
2012-01-08 19:40:09 -------- d-----w- C:\Users\Christopher\AppData\Local\Geckofx
2012-01-08 19:40:05 -------- d-----w- C:\Users\Christopher\AppData\Roaming\Firefly Studios
2012-01-04 00:48:42 354176 ----a-w- C:\Windows\SysWow64\DivXControlPanelApplet.cpl
2012-01-01 19:38:07 -------- d-----w- C:\temp4
.
==================== Find3M ====================
.
2012-01-31 12:44:20 279656 ------w- C:\Windows\System32\MpSigStub.exe
2011-12-27 02:56:35 55384 ----a-w- C:\Windows\System32\drivers\SBREDrv.sys
2011-12-27 02:56:26 16432 ----a-w- C:\Windows\System32\lsdelete.exe
2011-12-23 12:12:12 69376 ----a-w- C:\Windows\System32\drivers\Lbd.sys
2011-11-24 04:52:09 3145216 ----a-w- C:\Windows\System32\win32k.sys
2011-11-17 06:49:14 95600 ----a-w- C:\Windows\System32\drivers\ksecdd.sys
2011-11-17 06:49:14 152432 ----a-w- C:\Windows\System32\drivers\ksecpkg.sys
2011-11-17 06:44:43 459232 ----a-w- C:\Windows\System32\drivers\cng.sys
2011-11-17 06:35:28 395776 ----a-w- C:\Windows\System32\webio.dll
2011-11-17 06:35:26 29184 ----a-w- C:\Windows\System32\sspisrv.dll
2011-11-17 06:35:26 136192 ----a-w- C:\Windows\System32\sspicli.dll
2011-11-17 06:35:25 340992 ----a-w- C:\Windows\System32\schannel.dll
2011-11-17 06:35:25 28160 ----a-w- C:\Windows\System32\secur32.dll
2011-11-17 06:35:19 1447936 ----a-w- C:\Windows\System32\lsasrv.dll
2011-11-17 06:33:55 31232 ----a-w- C:\Windows\System32\lsass.exe
2011-11-17 05:35:02 314880 ----a-w- C:\Windows\SysWow64\webio.dll
2011-11-17 05:34:52 224768 ----a-w- C:\Windows\SysWow64\schannel.dll
2011-11-17 05:34:52 22016 ----a-w- C:\Windows\SysWow64\secur32.dll
2011-11-17 05:28:48 96768 ----a-w- C:\Windows\SysWow64\sspicli.dll
2011-11-16 00:33:26 414368 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
2011-11-05 05:32:50 2048 ----a-w- C:\Windows\System32\tzres.dll
2011-11-05 04:26:03 2048 ----a-w- C:\Windows\SysWow64\tzres.dll
2011-11-04 01:53:39 2309120 ----a-w- C:\Windows\System32\jscript9.dll
2011-11-04 01:44:47 1390080 ----a-w- C:\Windows\System32\wininet.dll
2011-11-04 01:44:21 1493504 ----a-w- C:\Windows\System32\inetcpl.cpl
2011-11-04 01:34:43 2382848 ----a-w- C:\Windows\System32\mshtml.tlb
2011-11-03 22:47:42 1798144 ----a-w- C:\Windows\SysWow64\jscript9.dll
2011-11-03 22:40:21 1427456 ----a-w- C:\Windows\SysWow64\inetcpl.cpl
2011-11-03 22:39:47 1127424 ----a-w- C:\Windows\SysWow64\wininet.dll
2011-11-03 22:31:57 2382848 ----a-w- C:\Windows\SysWow64\mshtml.tlb
.
============= FINISH: 12:15:52.28 ===============
jeffce's Avatar
jeffce   (Jeff) jeffce is offline jeffce is authorized to help remove malware.
jeffce has a Photo Album
Malware Removal Specialist with 1,727 posts.
 
Join Date: May 2011
31-Jan-2012, 01:49 PM #2
Hi and Welcome!! My name is Jeff. I would be more than happy to take a look at your malware results logs and help you with solving any malware problems you might have. Logs can take a while to research, so please be patient and know that I am working hard to get you a clean and functional system back in your hands. I'd be grateful if you would note the following:
  • I will be working on your Malware issues, this may or may not, solve other issues you have with your machine.
  • Please subscribe to this topic, if you haven't already.
  • The fixes are specific to your problem and should only be used for the issues on this machine.
  • Please continue to review my answers until I tell you your machine appears to be clear. Absence of symptoms does not mean that everything is clear.
  • It's often worth reading through these instructions and printing them for ease of reference.
  • If you don't know or understand something, please don't hesitate to say or ask!! It's better to be sure and safe than sorry.
  • Please reply to this thread. Do not start a new topic.

IMPORTANT NOTE : Please do not delete anything unless instructed to.
DO NOT use any TOOLS such as Combofix or HijackThis fixes without supervision.
Doing so could make your system inoperable and could require a full reinstall of your OS losing all your programs and data.


Vista and Windows 7 users:
These tools MUST be run from the executable (.exe) every time you run them
with Admin Rights (Right click, choose "Run as Administrator")


Stay with this topic until I give you the all clean post.

First we need to make all files and folders VISIBLE:
  • Go to start>control panel>folder options>view
  • Choose to "show hidden files and folders,"
  • Uncheck the "hide protected operating system files" and the "hide extensions for know file types" boxes.
  • Close the window with OK
----------

Please download aswMBR to your desktop.
  • Right click and Run as Administrator the aswMBR icon to run it.
  • Click the Scan button to start scan.
  • When it finishes, press the save log button, save the logfile to your desktop and post its contents in your next reply.


Click the image to enlarge it
----------
matrix721's Avatar
matrix721 matrix721 is offline
Computer Specs
Junior Member with 6 posts.
THREAD STARTER
 
Join Date: Jan 2012
Experience: Intermediate
31-Jan-2012, 02:30 PM #3
aswmbr ran -- Log File
aswMBR version 0.9.9.1532 Copyright(c) 2011 AVAST Software
Run date: 2012-01-31 12:53:03
-----------------------------
12:53:03.334 OS Version: Windows x64 6.1.7601 Service Pack 1
12:53:03.335 Number of processors: 4 586 0x403
12:53:03.335 ComputerName: CHRISTOPHER-PC UserName: Christopher
12:53:06.679 Initialize success
12:59:31.145 AVAST engine defs: 12013100
12:59:53.101 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0
12:59:53.106 Disk 0 Vendor: ST3500418AS CC46 Size: 476940MB BusType: 3
12:59:53.111 Disk 1 \Device\Harddisk1\DR1 -> \Device\Ide\IdeDeviceP1T0L0-1
12:59:53.116 Disk 1 Vendor: WDC_WD5002AALX-00J37A0 15.01H15 Size: 476940MB BusType: 3
12:59:53.136 Disk 0 MBR read successfully
12:59:53.138 Disk 0 MBR scan
12:59:53.142 Disk 0 Windows 7 default MBR code
12:59:53.150 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 100 MB offset 2048
12:59:53.215 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 476838 MB offset 206848
12:59:53.242 Service scanning
12:59:53.689 Service MpNWMon C:\Windows\system32\DRIVERS\MpNWMon.sys **LOCKED** 32
12:59:54.252 Modules scanning
12:59:54.261 Disk 0 trace - called modules:
12:59:54.285 ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys ataport.SYS pciide.sys PCIIDEX.SYS hal.dll atapi.sys
12:59:54.294 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa800ab60060]
12:59:54.305 3 CLASSPNP.SYS[fffff8800197143f] -> nt!IofCallDriver -> [0xfffffa8009b50580]
12:59:54.315 5 ACPI.sys[fffff88000e547a1] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP0T0L0-0[0xfffffa8009b54060]
12:59:56.074 AVAST engine scan C:\Windows
12:59:59.927 AVAST engine scan C:\Windows\system32
13:03:34.068 AVAST engine scan C:\Windows\system32\drivers
13:03:53.793 AVAST engine scan C:\Users\Christopher
13:22:11.626 AVAST engine scan C:\ProgramData
13:25:42.985 Scan finished successfully
13:26:23.717 Disk 0 MBR has been saved successfully to "C:\Users\Christopher\Desktop\MBR.dat"
13:26:23.779 The log file has been saved successfully to "C:\Users\Christopher\Desktop\aswMBR.txt"
jeffce's Avatar
jeffce   (Jeff) jeffce is offline jeffce is authorized to help remove malware.
jeffce has a Photo Album
Malware Removal Specialist with 1,727 posts.
 
Join Date: May 2011
31-Jan-2012, 02:42 PM #4
Hi matrix721,

Download Combofix from either of the links below, and save it to your desktop.
Link 1
Link 2

**Note: It is important that it is saved directly to your desktop**

--------------------------------------------------------------------

IMPORTANT - Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you have difficulty properly disabling your protective programs, refer to this link here

--------------------------------------------------------------------

Right-Click and Run as Administrator on ComboFix.exe & follow the prompts.
  • When finished, it will produce a report for you.
  • Please post the C:\ComboFix.txt for further review.
----------
matrix721's Avatar
matrix721 matrix721 is offline
Computer Specs
Junior Member with 6 posts.
THREAD STARTER
 
Join Date: Jan 2012
Experience: Intermediate
01-Feb-2012, 02:11 AM #5
combofix....and VERY CONFUSED!
I downloaded this thing and told it to run....it shown a window saying "process01 completed......etc etc...then it proceeded DELETING stuff without asking me anything.....

It deleted a program called gomez peer which I have been using for over 10 years without incident.....

heres the log file it's huge!


ComboFix 12-01-31.01 - Christopher 02/01/2012 0:50.1.4 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.12287.9573 [GMT -5:00]
Running from: c:\users\Christopher\Downloads\ComboFix.exe
AV: Lavasoft Ad-Watch Live! Anti-Virus *Disabled/Updated* {9FF26384-70D4-CE6B-3ECB-E759A6A40116}
AV: Microsoft Security Essentials *Disabled/Updated* {108DAC43-C256-20B7-BB05-914135DA5160}
SP: Lavasoft Ad-Watch Live! *Disabled/Updated* {24938260-56EE-C1E5-047B-DC2BDD234BAB}
SP: Microsoft Security Essentials *Disabled/Updated* {ABEC4DA7-E46C-2F39-81B5-AA334E5D1BDD}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\Gomez
c:\program files (x86)\Gomez\GomezPEER\agents\agents.xml
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\image\gozilla.zip
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\.autoreg
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\AccessibleMarshal.dll
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\application.ini
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\blocklist.xml
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\browserconfig.properties
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\chrome\browser.jar
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\chrome\browser.manifest
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\chrome\classic.jar
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\chrome\classic.manifest
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\chrome\comm.jar
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\chrome\comm.manifest
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\chrome\en-US.jar
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\chrome\en-US.manifest
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\chrome\pippki.jar
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\chrome\pippki.manifest
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\chrome\reporter.jar
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\chrome\reporter.manifest
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\chrome\toolkit.jar
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\chrome\toolkit.manifest
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\components\aboutCertError.js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\components\aboutPrivateBrowsin g.js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\components\aboutRights.js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\components\aboutRobots.js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\components\aboutSessionRestore .js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\components\browserdirprovider. dll
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\components\brwsrcmp.dll
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\components\FeedConverter.js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\components\FeedProcessor.js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\components\FeedWriter.js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\components\flashplayer.xpt
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\components\fuelApplication.js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\components\gomezplugin.xpt
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\components\jsconsole-clhandler.js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\components\NetworkGeolocationP rovider.js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\components\nsAddonRepository.j s
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\components\nsBadCertHandler.js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\components\nsBlocklistService. js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\components\nsBrowserContentHan dler.js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\components\nsBrowserGlue.js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\components\nsContentDispatchCh ooser.js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\components\nsContentPrefServic e.js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\components\nsDefaultCLH.js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\components\nsDownloadManagerUI .js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\components\nsExtensionManager. js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\components\nsHandlerService.js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\components\nsHelperAppDlg.js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\components\nsLivemarkService.j s
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\components\nsLoginInfo.js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\components\nsLoginManager.js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\components\nsLoginManagerPromp ter.js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\components\nsMicrosummaryServi ce.js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\components\nsPlacesDBFlush.js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\components\nsPlacesTransaction sService.js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\components\nsPostUpdateWin.js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\components\nsPrivateBrowsingSe rvice.js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\components\nsProxyAutoConfig.j s
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\components\nsSafebrowsingAppli cation.js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\components\nsSearchService.js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\components\nsSearchSuggestions .js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\components\nsSessionStartup.js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\components\nsSessionStore.js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\components\nsSetDefaultBrowser .js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\components\nsSidebar.js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\components\nsTaggingService.js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\components\nsTryToClose.js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\components\nsUpdateService.js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\components\nsUrlClassifierLib. js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\components\nsUrlClassifierList Manager.js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\components\nsURLFormatter.js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\components\nsWebHandlerApp.js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\components\pluginGlue.js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\components\storage-Legacy.js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\components\storage-mozStorage.js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\components\txEXSLTRegExFunctio ns.js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\components\WebContentConverter .js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\crashreporter-override.ini
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\crashreporter.exe
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\crashreporter.ini
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\defaults\autoconfig\platform.j s
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\defaults\autoconfig\prefcalls. js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\defaults\pref\channel-prefs.js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\defaults\pref\firefox-branding.js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\defaults\pref\firefox-l10n.js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\defaults\pref\firefox.js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\defaults\pref\reporter.js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\defaults\profile\bookmarks.htm l
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\defaults\profile\chrome\userCh rome-example.css
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\defaults\profile\chrome\userCo ntent-example.css
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\defaults\profile\localstore.rd f
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\defaults\profile\mimeTypes.rdf
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\defaults\profile\prefs.js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\dictionaries\en-US.aff
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\dictionaries\en-US.dic
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\extensions\{8ea9957e-2953-402f-80e0-bceb5f169d6f}\chrome.manifest
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\extensions\{8ea9957e-2953-402f-80e0-bceb5f169d6f}\chrome\xhtmlmp.jar
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\extensions\{8ea9957e-2953-402f-80e0-bceb5f169d6f}\components\xhtmlmp-logging.js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\extensions\{8ea9957e-2953-402f-80e0-bceb5f169d6f}\components\xhtmlmp-multipartmixed-service.js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\extensions\{8ea9957e-2953-402f-80e0-bceb5f169d6f}\components\xhtmlmp-service.js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\extensions\{8ea9957e-2953-402f-80e0-bceb5f169d6f}\defaults\preferences\xhtmlmp.js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\extensions\{8ea9957e-2953-402f-80e0-bceb5f169d6f}\install.rdf
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\extensions\{8ea9957e-2953-402f-80e0-bceb5f169d6f}\readme.txt
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}\install.rdf
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\extensions\{c4dc572a-3295-40eb-b30f-b54aa4cdc4b7}\chrome.manifest
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\extensions\{c4dc572a-3295-40eb-b30f-b54aa4cdc4b7}\chrome\wmlbrowser.jar
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\extensions\{c4dc572a-3295-40eb-b30f-b54aa4cdc4b7}\components\wml-service.js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\extensions\{c4dc572a-3295-40eb-b30f-b54aa4cdc4b7}\defaults\preferences\prefs.js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\extensions\{c4dc572a-3295-40eb-b30f-b54aa4cdc4b7}\install.js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\extensions\{c4dc572a-3295-40eb-b30f-b54aa4cdc4b7}\install.rdf
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\extensions\gomezagent@gomez.co m\chrome.manifest
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\extensions\gomezagent@gomez.co m\chrome\gomezagent.jar
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\extensions\gomezagent@gomez.co m\components\agent-alogger-service.js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\extensions\gomezagent@gomez.co m\components\agent-cache-service.js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\extensions\gomezagent@gomez.co m\components\agent-filter-service.js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\extensions\gomezagent@gomez.co m\components\agent-prompt-service.js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\extensions\gomezagent@gomez.co m\components\agent-psrbuilder-service.js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\extensions\gomezagent@gomez.co m\components\agent-scoe-service.js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\extensions\gomezagent@gomez.co m\components\agent-stats-service.js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\extensions\gomezagent@gomez.co m\components\agent-utility-service.js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\extensions\gomezagent@gomez.co m\components\agent-visualresult-service.js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\extensions\gomezagent@gomez.co m\components\browser-monitor-service.js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\extensions\gomezagent@gomez.co m\components\gsl-converter-service.js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\extensions\gomezagent@gomez.co m\components\http-event-service.js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\extensions\gomezagent@gomez.co m\components\IPageSpeedGomezData.xpt
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\extensions\gomezagent@gomez.co m\components\IPageSpeedRules.xpt
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\extensions\gomezagent@gomez.co m\components\nsIFxAgent.xpt
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\extensions\gomezagent@gomez.co m\components\nsIMachineInfo.dll
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\extensions\gomezagent@gomez.co m\components\nsIMachineInfo.xpt
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\extensions\gomezagent@gomez.co m\components\nsITraceRoute.dll
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\extensions\gomezagent@gomez.co m\components\nsITraceRoute.xpt
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\extensions\gomezagent@gomez.co m\components\pagespeed.dll
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\extensions\gomezagent@gomez.co m\components\txn-executor.js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\extensions\gomezagent@gomez.co m\components\txn-server-service.js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\extensions\gomezagent@gomez.co m\components\zconsole-server-service.js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\extensions\gomezagent@gomez.co m\config\loggerConfig.js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\extensions\gomezagent@gomez.co m\install.rdf
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\extensions\gomezagent@gomez.co m\modules\beautify.jsm
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\extensions\gomezagent@gomez.co m\modules\ComponentLogger.js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\extensions\gomezagent@gomez.co m\modules\gsl2shim.js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\extensions\gomezagent@gomez.co m\modules\io.jsm
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\extensions\gomezagent@gomez.co m\modules\json2.jsm
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\extensions\gomezagent@gomez.co m\modules\psrtest.js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\extensions\gomezagent@gomez.co m\modules\utils.jsm
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\extensions\gomezagent@gomez.co m\modules\version.jsm
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\extensions\gomezagent@gomez.co m\modules\zipit.jsm
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\freebl3.chk
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\freebl3.dll
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\gomez-tools\awaitfile.exe
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\gomez-tools\gozilla-launch.cmd
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\gomez-tools\gozilla-provision-sa.cmd
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\gomez-tools\gozilla-provision.cmd
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\gozilla.exe
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\greprefs\all.js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\greprefs\security-prefs.js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\greprefs\xpinstall.js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\js3250.dll
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\LICENSE
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\log4cplus.dll
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\log4cplus.properties
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\modules\debug.js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\modules\distribution.js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\modules\DownloadLastDir.jsm
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\modules\DownloadUtils.jsm
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\modules\ISO8601DateUtils.jsm
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\modules\Microformats.js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\modules\openLocationLastURL.js m
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\modules\PlacesDBUtils.jsm
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\modules\PluralForm.jsm
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\modules\SpatialNavigation.js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\modules\utils.js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\modules\WindowDraggingUtils.js m
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\modules\XPCOMUtils.jsm
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\mozcrt19.dll
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\nspr4.dll
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\nss3.dll
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\nssckbi.dll
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\nssdbm3.chk
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\nssdbm3.dll
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\nssutil3.dll
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\platform.ini
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\plc4.dll
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\plds4.dll
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\plugins\npgfp.dll
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\plugins\npgslp.dll
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\plugins\npgswf32.dll
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\plugins\npnul32.dll
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\plugins\NPSWF32.dll
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\README.txt
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\removed-files
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\res\arrow.gif
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\res\arrowd.gif
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\res\broken-image.gif
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\res\charsetalias.properties
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\res\charsetData.properties
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\res\contenteditable.css
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\res\designmode.css
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\res\dtd\mathml.dtd
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\res\dtd\xhtml11.dtd
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\res\EditorOverride.css
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\res\entityTables\html40Latin1. properties
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\res\entityTables\html40Special .properties
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\res\entityTables\html40Symbols .properties
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\res\entityTables\htmlEntityVer sions.properties
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\res\entityTables\mathml20.prop erties
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\res\entityTables\transliterate .properties
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\res\fonts\mathfont.properties
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\res\fonts\mathfontStandardSymb olsL.properties
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\res\fonts\mathfontSTIXNonUnico de.properties
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\res\fonts\mathfontSTIXSize1.pr operties
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\res\fonts\mathfontSymbol.prope rties
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\res\fonts\mathfontUnicode.prop erties
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\res\forms.css
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\res\grabber.gif
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\res\hiddenWindow.html
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\res\html.css
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\res\html\folder.png
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\res\langGroups.properties
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\res\language.properties
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\res\loading-image.gif
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\res\mathml.css
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\res\quirk.css
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\res\svg.css
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\res\table-add-column-after-active.gif
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\res\table-add-column-after-hover.gif
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\res\table-add-column-after.gif
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\res\table-add-column-before-active.gif
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\res\table-add-column-before-hover.gif
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\res\table-add-column-before.gif
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\res\table-add-row-after-active.gif
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\res\table-add-row-after-hover.gif
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\res\table-add-row-after.gif
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\res\table-add-row-before-active.gif
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\res\table-add-row-before-hover.gif
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\res\table-add-row-before.gif
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\res\table-remove-column-active.gif
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\res\table-remove-column-hover.gif
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\res\table-remove-column.gif
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\res\table-remove-row-active.gif
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\res\table-remove-row-hover.gif
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\res\table-remove-row.gif
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\res\ua.css
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\res\viewsource.css
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\res\wincharset.properties
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\searchplugins\amazondotcom.xml
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\searchplugins\answers.xml
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\searchplugins\creativecommons. xml
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\searchplugins\eBay.xml
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\searchplugins\google.xml
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\searchplugins\wikipedia.xml
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\searchplugins\yahoo.xml
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\smime3.dll
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\softokn3.chk
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\softokn3.dll
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\sqlite3.dll
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\ssl3.dll
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\agt_0\ScriptCache \sizzle20090425wrb
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\agt_0_template\bo okmarkbackups\bookmarks-2011-10-10.json
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\agt_0_template\Ca che\_CACHE_001_
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\agt_0_template\Ca che\_CACHE_002_
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\agt_0_template\Ca che\_CACHE_003_
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\agt_0_template\Ca che\_CACHE_MAP_
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\agt_0_template\ce rt8.db
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\agt_0_template\co mpatibility.ini
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\agt_0_template\co mpreg.dat
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\agt_0_template\co ntent-prefs.sqlite
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\agt_0_template\co okies.sqlite
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\agt_0_template\do wnloads.sqlite
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\agt_0_template\ex tensions.cache
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\agt_0_template\ex tensions.ini
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\agt_0_template\ex tensions.rdf
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\agt_0_template\fo rmhistory.sqlite
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\agt_0_template\ke y3.db
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\agt_0_template\lo calstore.rdf
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\agt_0_template\mi meTypes.rdf
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\agt_0_template\Of flineCache\index.sqlite
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\agt_0_template\pe rmissions.sqlite
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\agt_0_template\pl aces.sqlite-journal
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\agt_0_template\pl aces.sqlite
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\agt_0_template\pr efs.js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\agt_0_template\pr ofile.done
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\agt_0_template\se arch.json
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\agt_0_template\se arch.sqlite
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\agt_0_template\se cmod.db
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\agt_0_template\si gnons.sqlite
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\agt_0_template\we bappsstore.sqlite
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\agt_0_template\XP C.mfl
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\agt_0_template\xp ti.dat
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\agt_0_template\XU L.mfl
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\agt-0-ga.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-17-38-36_PapaJohns.com_Online_Order_Pizza_LM_-_FF_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-17-39-27_Pizza_Hut_Online_Order_Pizza_LM_-_FF_Age_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-17-40-35_Dominos.com_Online_Order_Pizza_LM_-_FF_A_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-17-41-34_FMStocks5_-_FF_Agent_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-17-45-56_Firstrade_LMHP-FF-Brokerage-US_-_FF_Agen_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-17-50-26_Hyatt_Hotels_LMHP-FF-Hotels_and_Resorts-_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-17-51-20_Fiserv-LM_-_FF_Agent_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-17-55-58_Firstbank_of_Puerto_Rico_LMHP-FF-Banking_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-18-1-10_Volkswagen_LMHP-FF-Automotive-US_-_FF_Ag_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-18-11-13_HSS_webtma.net_Browse_Biomed_-_LM_FF_Age_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-18-15-40_MacMall_LM_-_FF_Agent_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-18-16-9_ADT-LM_-_FF_Agent_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-18-20-51_Saks_Fifth_Avenue_LMHP-FF35-Retail-US_-__agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-18-21-16_Digg_-_FF_Agent_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-18-26-0_Tripres_LMHP-FF-Top_Travel_Aggregators-U_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-18-34-32_Center_Search_LM_-_FF_Agent_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-18-36-26_Cincinnatibell.com_-_Last_Mile_Single_Pa_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-18-40-50_Aetna_Group_LMHP-FF-Insurance_Health-US__agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-18-5-47_Medieval_Times_ec2_LM_-_FF_Agent_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-18-55-58_www2.blackrock.com_-_FF_Agent_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-18-56-24_Fat_Burning_Furnace_LMHP-FF-Health_Infor_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-18-6-16_www.metlife.com_-_HP_-_LM_-_FF_Agent_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-19-0-45_ProductFinder-Cable_-_FF_Agent_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-19-10-50_Garmin_Home_-_FF_Agent_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-19-20-55_Fat_Burning_Furnace_LMHP-FF-Health_Infor_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-19-25-31_shine-global-HBB_-_FF_Agent_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-19-30-32_Geo_Beacon_Servers_-_FF_Agent_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-19-35-27_FlashFF2_-_FF_Agent_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-19-36-8_Facebook_LMHP-FF-Media-SocialNetworking-_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-19-41-15_Wells_Fargo_Bank_LMHP-FF35-Banking-US_-__agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-19-45-44_EZ_Prints_LM_-_FF_Agent_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-19-46-14_Air_France_LMHP-FF-Airlines-US_-_FF_Agen_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-19-5-47_Neiman_Marcus_LMHP-FF35-Retail-US_-_FF_A_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-19-50-41_World_Wrestling_Entertainment_LMHP-FF-Me_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-19-56-23_ATT_PoC_-_www.att.net_FF_LM_-_FF_Agent_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-19-6-15_sports-global-HBB_-_FF_Agent_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-20-1-9_UCC_City_SF_-_FF_Agent_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-20-15-30_NHL_LMHP-FF-Media-Sports-US_-_FF_Agent_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-20-16-2_Slate_LMHP-FF-Media-News-US_-_FF_Agent_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-20-20-46_Movies_AB_List_Attrib_-_LM_-_FF_Agent_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-20-21-25_www.lexmark.com_HP_-_LM_-_FF_Agent_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-20-29-59_Dominos1_-_FF_Agent_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-20-30-59_WholeFoods_-_FF_Agent_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-20-35-39_New_Putnam_Advisor_7-18-2011_LM_-_FF_Age_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-20-36-26_SupportSubCategory-Cable_-_FF_Agent_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-20-40-54_Nationwide_LMHP-FF35-Insurance-US_-_FF_A_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-20-41-21_Cheap_Carribean_LMHP-FF-Top_Travel_Aggre_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-20-49-53_Esurance_LMHP-FF35-Insurance-US_-_FF_Age_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-20-5-49_Astoria_Federal_LMHP-FF-Banking-US_-_FF__agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-20-50-29_GE_Peak_-_FF_Agent_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-20-55-50_AppliedDiscoveryLM_-_FF_Agent_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-20-6-12_Subaru_LMHP-FF-Automotive-US_-_FF_Agent_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-20-6-37_Overstock_LMHP-FF35-Retail-US_-_FF_Agent_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-21-10-47_Choice_Hotels_International_LMHP-FF-Hote_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-21-11-21_LegacyCategory-Cable_-_FF_Agent_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-21-17-18_Bankofamerica-Cards_-_LM_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-21-18-35_Rates_Peer_Test_-_FF_Agent_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-21-19-16_Nave_Federal_Peer_Test_1_-_FF_Agent_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-21-21-19_4_step_app_okta_LM_-_FF_Agent_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-21-22-58_US_Flickr_photo_page_LegoDash_-_FF_Agent_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-21-25-59_SeamlessWeb_LM_Menu_Search_-_FF_Agent_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-21-30-49_WC_1A_Login_-_FF_Agent_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-21-35-35_Sportsman_Homepage_LM_-_FF_Agent_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-21-40-37_Memorial_Hermann_Healthcare_System_LMHP-_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-21-41-45_IASIS_Healthcare_LMHP-FF-Healthcare_Faci_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-21-43-18_Impulsedriven_Main_Homepage_-_Europe_-_F_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-21-44-24_Barnes_and_Noble_LMHP-FF35-Retail-US_-_F_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-21-45-19_BayCare_Health_System_LMHP-FF-Healthcare_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-21-45-50_Jaguar_LMHP-FF-Automotive-US_-_FF_Agent_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-21-5-54_M_and_T_Bank_LMHP-FF35-Banking-US_-_FF_A_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-21-51-3_Citi_Credit_Cards_-_HP_-_FF_Agent_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-21-51-36_www.yahoo.com_-_test_-_FF_Agent_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-21-52-28_Union_Bank_LMHP-FF-Banking-US_-_FF_Agent_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-21-53-11_Family_Doctor_LMHP-FF-Health_Information_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-21-53-47_Continental_Airlines_LMHP-FF-Airlines-US_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-21-54-15_PNC_Bank_LMHP-FF-Credit_Card-US_-_FF_Age_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-21-54-41_Sears_LMHP-FF35-Retail-US_-_FF_Agent_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-21-55-9_Nissan_LMHP-FF-Automotive-US_-_FF_Agent_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-21-6-21_Trinity_Health_LMHP-FF-Healthcare_Facili_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-22-1-6_GGP-dining-Entertainment-Stonebriar-LM_-_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-22-11-17_Banner_Health_LMHP-FF-Healthcare_Facilit_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-22-11-39_First_Tennessee_Bank_LMHP-FF-Banking-US__agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-22-12-30_SunTrust_Bank_LMHP-FF35-Banking-US_-_FF__agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-22-12-8_Dell_LMHP-FF35-Retail-US_-_FF_Agent_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-22-13-47_iSeatz-ASA_ASA_HotelQuery_LM2_-_FF_Agent_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-22-14-57_Eddie_Bauer_LMHP-FF35-Retail-US_-_FF_Age_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-22-15-23_Beachbody_LMHP-FF-Health_Information-US__agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-22-15-50_last-mile-pricegrabber_-_FF_Agent_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-22-2-1_Fitness_Magazine_LMHP-FF-Health_Informat_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-22-20-48_CosmopolitanHoteLasVegas_HM_-_FF_Agent_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-22-21-23_Dodge_LMHP-FF-Automotive-US_-_FF_Agent_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-22-21-44_thehairlossresource.com_search_LM_-_FF_A_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-22-22-22_Cars_LM_-_FF_Agent_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-22-22-49_Deviant_Art_LMHP-FF-Media-SocialNetworki_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-22-23-43_US_Flickr_lightbox_page_LegoDash_-_FF_Ag_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-22-24-14_The_Buckle_Home_Page_-_FF_Agent_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-22-24-35_ATT_PoC_-_www.att.net_FF_LM_-_FF_Agent_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-22-25-15_Virgin_America_LMHP-FF-Airlines-US_-_FF__agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-22-25-51_Beachbody_LMHP-FF-Health_Information-US__agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-22-26-27_Resort_Vacations_To_Go_LMHP-FF-Top_Trave_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-22-3-55_Priceline_LMHP-FF-Top_Travel_Aggregators_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-22-30-55_Sprint.com_DNS_Test_-_FF_Agent_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-22-31-26_www.esteelauder.com_-_FF_Agent_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-22-36-1_Community_Home_Page_-_FF_Agent_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-22-37-20_A_Lab_-_Bloom_Two_Step_-_FF_Agent_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-22-37-42_Hotel_US_SP_LM_-_FF_Agent_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-22-38-5_www.duke-energy.com_LM2_-_FF_Agent_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-22-4-56_Buy_LMHP-FF35-Retail-US_-_FF_Agent_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-22-40-49_SOS_LM_test_-_FF_Agent_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-22-41-19_1800flowers_Home_Page_-_Last_Mile_-_FF_A_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-22-46-6_Sandals_Resorts_LMHP-FF-Hotels_and_Resor_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-22-5-41_Search_GSA_Results_Page_-_FF_Agent_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-22-50-47_Sutter_Health_LMHP-FF-Healthcare_Facilit_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-22-51-13_NHL_LMHP-FF-Media-Sports-US_-_FF_Agent_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-22-55-55_Air_Canada_LMHP-FF-Airlines-US_-_FF_Agen_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-23-0-22_Shaun-Apple-Akamai_-_FF_Agent_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-23-1-7_MySpace_DNS_-_FF_Agent_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-23-10-38_thehairlossresource.com_search_LM_-_FF_A_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-23-11-0_OfficeMax_LMHP-FF35-Retail-US_-_FF_Agent_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-23-15-47_www.esteelauder.com_-_FF_Agent_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-23-20-44_Wells_Fargo_Bank_LMHP-FF35-Banking-US_-__agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-23-25-30_MSS_Member_Join_Page_-_FF_Agent_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-23-26-3_spiegel-transx-LM_-_FF_Agent_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-23-30-40_US_News_SlideShowPage_Lego_-_FF_Agent_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-23-35-43_deepdiscount.com_LM_-_FF_Agent_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-23-40-43_Pershing_External_Top_10_FF_LM_-_FF_Agen_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-23-45-19_Nokia_Maps_Driving_Directions_-_FF_Agent_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-23-45-50_Nokia_Maps_Find_business_-_FF_Agent_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-23-46-25_Nokia_Maps_home_page_-_FF_Agent_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-23-46-47_Nokia_Maps_Find_location_-_FF_Agent_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-23-47-14_Nokia_Maps_traffic_page_-_FF_Agent_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-23-47-54_JPMC_www.navycash.com_-_FF_Agent_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-23-48-32_PapaJohns.com_Online_Order_Pizza_LM_-_FF_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-23-49-22_Pizza_Hut_Online_Order_Pizza_LM_-_FF_Age_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-23-5-25_FMStocks1_-_FF_Agent_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-23-5-43_FMStocks3_-_FF_Agent_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-23-50-23_Dominos.com_Online_Order_Pizza_LM_-_FF_A_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-23-56-11_LifePoint_Hospitals_LMHP-FF-Healthcare_F_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-1-31-23-6-2_KeyBank_LMHP-FF35-Banking-US_-_FF_Agent_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-2-1-0-10-39_Alaska_Homepage_-_LM_-_FF_Agent_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-2-1-0-11-9_Staples_-_Search_LM_-_FF_Agent_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-2-1-0-15-54_Trader_Joes_LM_-_FF_Agent_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-2-1-0-21-20_BMW_LMHP-FF-Automotive-US_-_FF_Agent_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-2-1-0-26-36_Bank_of_America_LMHP-FF35-Banking-US_-_F_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-2-1-0-26-8_Lockerz_LMHP-FF-Media-SocialNetworking-U_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-2-1-0-31-15_Unumprovident_Corp._Group_LMHP-FF-Insura_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-2-1-0-35-48_www.budget.com_LM_-_FF_Agent_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-2-1-0-36-20_Memorial_Hermann_Healthcare_System_LMHP-_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-2-1-0-40-45_BlogTalk_Radio_LMHP-FF-Media-SocialNetwo_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-2-1-0-41-23_Advocate_Health_Care_LMHP-FF-Healthcare__agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-2-1-0-49-55_Rates_Peer_Test_-_FF_Agent_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-2-1-0-5-46_Registration_iframe_-_FF_Agent_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\storage\FF35\log\txn-gn-2012-2-1-0-6-5_LLBean_LMHP-FF35-Retail-US_-_FF_Agent_agt-0.log
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\uninstall\helper.exe
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\update.locale
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\updater.exe
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\updater.ini
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\version.txt
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\work\work_pool\FF35\agt_0\book markbackups\bookmarks-2011-10-10.json
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\work\work_pool\FF35\agt_0\Cach e\_CACHE_001_
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\work\work_pool\FF35\agt_0\Cach e\_CACHE_002_
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\work\work_pool\FF35\agt_0\Cach e\_CACHE_003_
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\work\work_pool\FF35\agt_0\Cach e\_CACHE_MAP_
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\work\work_pool\FF35\agt_0\cert 8.db
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\work\work_pool\FF35\agt_0\comp atibility.ini
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\work\work_pool\FF35\agt_0\comp reg.dat
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\work\work_pool\FF35\agt_0\cont ent-prefs.sqlite
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\work\work_pool\FF35\agt_0\cook ies.sqlite
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\work\work_pool\FF35\agt_0\down loads.sqlite
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\work\work_pool\FF35\agt_0\exte nsions.cache
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\work\work_pool\FF35\agt_0\exte nsions.ini
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\work\work_pool\FF35\agt_0\exte nsions.rdf
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\work\work_pool\FF35\agt_0\form history.sqlite
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\work\work_pool\FF35\agt_0\key3 .db
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\work\work_pool\FF35\agt_0\loca lstore.rdf
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\work\work_pool\FF35\agt_0\mime Types.rdf
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\work\work_pool\FF35\agt_0\Offl ineCache\index.sqlite
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\work\work_pool\FF35\agt_0\perm issions.sqlite
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\work\work_pool\FF35\agt_0\plac es.sqlite-journal
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\work\work_pool\FF35\agt_0\plac es.sqlite
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\work\work_pool\FF35\agt_0\plug inreg.dat
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\work\work_pool\FF35\agt_0\pref s.js
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\work\work_pool\FF35\agt_0\prof ile.done
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\work\work_pool\FF35\agt_0\sear ch.json
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\work\work_pool\FF35\agt_0\sear ch.sqlite
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\work\work_pool\FF35\agt_0\secm od.db
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\work\work_pool\FF35\agt_0\sign ons.sqlite
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\work\work_pool\FF35\agt_0\urlc lassifier3.sqlite
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\work\work_pool\FF35\agt_0\weba ppsstore.sqlite
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\work\work_pool\FF35\agt_0\XPC. mfl
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\work\work_pool\FF35\agt_0\xpti .dat
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\work\work_pool\FF35\agt_0\XUL. mfl
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\xpcom.dll
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\xul.dll
c:\program files (x86)\Gomez\GomezPEER\agents\gozilla\runtime\zlib1.dll
c:\program files (x86)\Gomez\GomezPEER\bin\GomezPEER.exe
c:\program files (x86)\Gomez\GomezPEER\cache\helper\databank.002.js
c:\program files (x86)\Gomez\GomezPEER\cache\helper\databank.003.js
c:\program files (x86)\Gomez\GomezPEER\cache\helper\GomezGlobalFunctions.006.js
c:\program files (x86)\Gomez\GomezPEER\cache\helper\GomezGlobalFunctions.008.js
c:\program files (x86)\Gomez\GomezPEER\cache\helper\static_helpers.003.js
c:\program files (x86)\Gomez\GomezPEER\cache\helper\url_helpers.003.js
c:\program files (x86)\Gomez\GomezPEER\cache\params.xml
c:\program files (x86)\Gomez\GomezPEER\cache\Respawn.class
c:\program files (x86)\Gomez\GomezPEER\country_list.txt
c:\program files (x86)\Gomez\GomezPEER\decode.exe
c:\program files (x86)\Gomez\GomezPEER\dll.log
c:\program files (x86)\Gomez\GomezPEER\getclean.exe
c:\program files (x86)\Gomez\GomezPEER\gomez.dat
c:\program files (x86)\Gomez\GomezPEER\gomez.dat.backup1
c:\program files (x86)\Gomez\GomezPEER\gomez.dat.backup2
c:\program files (x86)\Gomez\GomezPEER\gomez.dat.backup3
c:\program files (x86)\Gomez\GomezPEER\hs_err_pid4516.log
c:\program files (x86)\Gomez\GomezPEER\hs_err_pid4904.log
c:\program files (x86)\Gomez\GomezPEER\javparms.dat
c:\program files (x86)\Gomez\GomezPEER\jre\bin\attach.dll
c:\program files (x86)\Gomez\GomezPEER\jre\bin\awt.dll
c:\program files (x86)\Gomez\GomezPEER\jre\bin\axbridge.dll
c:\program files (x86)\Gomez\GomezPEER\jre\bin\client\classes.jsa
c:\program files (x86)\Gomez\GomezPEER\jre\bin\client\jvm.dll
c:\program files (x86)\Gomez\GomezPEER\jre\bin\client\Xusage.txt
c:\program files (x86)\Gomez\GomezPEER\jre\bin\cmm.dll
c:\program files (x86)\Gomez\GomezPEER\jre\bin\comfyj.lic
c:\program files (x86)\Gomez\GomezPEER\jre\bin\dcpr.dll
c:\program files (x86)\Gomez\GomezPEER\jre\bin\deploy.dll
c:\program files (x86)\Gomez\GomezPEER\jre\bin\dt_shmem.dll
c:\program files (x86)\Gomez\GomezPEER\jre\bin\dt_socket.dll
c:\program files (x86)\Gomez\GomezPEER\jre\bin\eula.dll
c:\program files (x86)\Gomez\GomezPEER\jre\bin\fontmanager.dll
c:\program files (x86)\Gomez\GomezPEER\jre\bin\hpi.dll
c:\program files (x86)\Gomez\GomezPEER\jre\bin\hprof.dll
c:\program files (x86)\Gomez\GomezPEER\jre\bin\ICE_JNIRegistry.dll
c:\program files (x86)\Gomez\GomezPEER\jre\bin\instrument.dll
c:\program files (x86)\Gomez\GomezPEER\jre\bin\ioser12.dll
c:\program files (x86)\Gomez\GomezPEER\jre\bin\j2pcsc.dll
c:\program files (x86)\Gomez\GomezPEER\jre\bin\j2pkcs11.dll
c:\program files (x86)\Gomez\GomezPEER\jre\bin\jaas_nt.dll
c:\program files (x86)\Gomez\GomezPEER\jre\bin\java-rmi.exe
c:\program files (x86)\Gomez\GomezPEER\jre\bin\java.dll
c:\program files (x86)\Gomez\GomezPEER\jre\bin\java.exe
c:\program files (x86)\Gomez\GomezPEER\jre\bin\java_crw_demo.dll
c:\program files (x86)\Gomez\GomezPEER\jre\bin\javacpl.cpl
c:\program files (x86)\Gomez\GomezPEER\jre\bin\javacpl.exe
c:\program files (x86)\Gomez\GomezPEER\jre\bin\javaw.exe
c:\program files (x86)\Gomez\GomezPEER\jre\bin\javaws.exe
c:\program files (x86)\Gomez\GomezPEER\jre\bin\jawt.dll
c:\program files (x86)\Gomez\GomezPEER\jre\bin\JdbcOdbc.dll
c:\program files (x86)\Gomez\GomezPEER\jre\bin\jdwp.dll
c:\program files (x86)\Gomez\GomezPEER\jre\bin\jexplorer.lic
c:\program files (x86)\Gomez\GomezPEER\jre\bin\jli.dll
c:\program files (x86)\Gomez\GomezPEER\jre\bin\jniwrap.dll
c:\program files (x86)\Gomez\GomezPEER\jre\bin\jniwrap.lic
c:\program files (x86)\Gomez\GomezPEER\jre\bin\jpeg.dll
c:\program files (x86)\Gomez\GomezPEER\jre\bin\jpicom.dll
c:\program files (x86)\Gomez\GomezPEER\jre\bin\jpiexp.dll
c:\program files (x86)\Gomez\GomezPEER\jre\bin\jpinscp.dll
c:\program files (x86)\Gomez\GomezPEER\jre\bin\jpioji.dll
c:\program files (x86)\Gomez\GomezPEER\jre\bin\jpishare.dll
c:\program files (x86)\Gomez\GomezPEER\jre\bin\jsound.dll
c:\program files (x86)\Gomez\GomezPEER\jre\bin\jsoundds.dll
c:\program files (x86)\Gomez\GomezPEER\jre\bin\jucheck.exe
c:\program files (x86)\Gomez\GomezPEER\jre\bin\jureg.exe
c:\program files (x86)\Gomez\GomezPEER\jre\bin\jusched.exe
c:\program files (x86)\Gomez\GomezPEER\jre\bin\keytool.exe
c:\program files (x86)\Gomez\GomezPEER\jre\bin\kinit.exe
c:\program files (x86)\Gomez\GomezPEER\jre\bin\klist.exe
c:\program files (x86)\Gomez\GomezPEER\jre\bin\ktab.exe
c:\program files (x86)\Gomez\GomezPEER\jre\bin\management.dll
c:\program files (x86)\Gomez\GomezPEER\jre\bin\Microsoft.VC80.CRT.manifest
c:\program files (x86)\Gomez\GomezPEER\jre\bin\msvcm80.dll
c:\program files (x86)\Gomez\GomezPEER\jre\bin\msvcp80.dll
c:\program files (x86)\Gomez\GomezPEER\jre\bin\msvcr71.dll
c:\program files (x86)\Gomez\GomezPEER\jre\bin\msvcr80.dll
c:\program files (x86)\Gomez\GomezPEER\jre\bin\net.dll
c:\program files (x86)\Gomez\GomezPEER\jre\bin\nio.dll
c:\program files (x86)\Gomez\GomezPEER\jre\bin\npjava11.dll
c:\program files (x86)\Gomez\GomezPEER\jre\bin\npjava12.dll
c:\program files (x86)\Gomez\GomezPEER\jre\bin\npjava13.dll
c:\program files (x86)\Gomez\GomezPEER\jre\bin\npjava14.dll
c:\program files (x86)\Gomez\GomezPEER\jre\bin\npjava32.dll
c:\program files (x86)\Gomez\GomezPEER\jre\bin\npjpi160.dll
c:\program files (x86)\Gomez\GomezPEER\jre\bin\npjpi160_03.dll
c:\program files (x86)\Gomez\GomezPEER\jre\bin\npoji610.dll
c:\program files (x86)\Gomez\GomezPEER\jre\bin\npt.dll
c:\program files (x86)\Gomez\GomezPEER\jre\bin\orbd.exe
c:\program files (x86)\Gomez\GomezPEER\jre\bin\pack200.exe
c:\program files (x86)\Gomez\GomezPEER\jre\bin\policytool.exe
c:\program files (x86)\Gomez\GomezPEER\jre\bin\porivonet.dll
c:\program files (x86)\Gomez\GomezPEER\jre\bin\PorivoProcess.dll
c:\program files (x86)\Gomez\GomezPEER\jre\bin\regutils.dll
c:\program files (x86)\Gomez\GomezPEER\jre\bin\rmi.dll
c:\program files (x86)\Gomez\GomezPEER\jre\bin\rmid.exe
c:\program files (x86)\Gomez\GomezPEER\jre\bin\rmiregistry.exe
c:\program files (x86)\Gomez\GomezPEER\jre\bin\server\jvm.dll
c:\program files (x86)\Gomez\GomezPEER\jre\bin\server\Xusage.txt
c:\program files (x86)\Gomez\GomezPEER\jre\bin\servertool.exe
c:\program files (x86)\Gomez\GomezPEER\jre\bin\splashscreen.dll
c:\program files (x86)\Gomez\GomezPEER\jre\bin\ssv.dll
c:\program files (x86)\Gomez\GomezPEER\jre\bin\sunmscapi.dll
c:\program files (x86)\Gomez\GomezPEER\jre\bin\SystemInfo.dll
c:\program files (x86)\Gomez\GomezPEER\jre\bin\tnameserv.exe
c:\program files (x86)\Gomez\GomezPEER\jre\bin\unicows.dll
c:\program files (x86)\Gomez\GomezPEER\jre\bin\unpack.dll
c:\program files (x86)\Gomez\GomezPEER\jre\bin\unpack200.exe
c:\program files (x86)\Gomez\GomezPEER\jre\bin\verify.dll
c:\program files (x86)\Gomez\GomezPEER\jre\bin\w2k_lsa_auth.dll
c:\program files (x86)\Gomez\GomezPEER\jre\bin\WinTimer.dll
c:\program files (x86)\Gomez\GomezPEER\jre\bin\wsdetect.dll
c:\program files (x86)\Gomez\GomezPEER\jre\bin\zip.dll
c:\program files (x86)\Gomez\GomezPEER\jre\COPYRIGHT
c:\program files (x86)\Gomez\GomezPEER\jre\lib\audio\soundbank.gm
c:\program files (x86)\Gomez\GomezPEER\jre\lib\calendars.properties
c:\program files (x86)\Gomez\GomezPEER\jre\lib\charsets.jar
c:\program files (x86)\Gomez\GomezPEER\jre\lib\classlist
c:\program files (x86)\Gomez\GomezPEER\jre\lib\cmm\CIEXYZ.pf
c:\program files (x86)\Gomez\GomezPEER\jre\lib\cmm\GRAY.pf
c:\program files (x86)\Gomez\GomezPEER\jre\lib\cmm\LINEAR_RGB.pf
c:\program files (x86)\Gomez\GomezPEER\jre\lib\cmm\PYCC.pf
c:\program files (x86)\Gomez\GomezPEER\jre\lib\cmm\sRGB.pf
c:\program files (x86)\Gomez\GomezPEER\jre\lib\content-types.properties
c:\program files (x86)\Gomez\GomezPEER\jre\lib\deploy.jar
c:\program files (x86)\Gomez\GomezPEER\jre\lib\deploy\ffjcext.zip
c:\program files (x86)\Gomez\GomezPEER\jre\lib\deploy\messages.properties
c:\program files (x86)\Gomez\GomezPEER\jre\lib\deploy\messages_de.properties
c:\program files (x86)\Gomez\GomezPEER\jre\lib\deploy\messages_es.properties
c:\program files (x86)\Gomez\GomezPEER\jre\lib\deploy\messages_fr.properties
c:\program files (x86)\Gomez\GomezPEER\jre\lib\deploy\messages_it.properties
c:\program files (x86)\Gomez\GomezPEER\jre\lib\deploy\messages_ja.properties
c:\program files (x86)\Gomez\GomezPEER\jre\lib\deploy\messages_ko.properties
c:\program files (x86)\Gomez\GomezPEER\jre\lib\deploy\messages_sv.properties
c:\program files (x86)\Gomez\GomezPEER\jre\lib\deploy\messages_zh_CN.properties
c:\program files (x86)\Gomez\GomezPEER\jre\lib\deploy\messages_zh_HK.properties
c:\program files (x86)\Gomez\GomezPEER\jre\lib\deploy\messages_zh_TW.properties
c:\program files (x86)\Gomez\GomezPEER\jre\lib\deploy\splash.jpg
c:\program files (x86)\Gomez\GomezPEER\jre\lib\endorsed\xalan.jar
c:\program files (x86)\Gomez\GomezPEER\jre\lib\ext\commons-codec.jar
c:\program files (x86)\Gomez\GomezPEER\jre\lib\ext\commons-lang.jar
c:\program files (x86)\Gomez\GomezPEER\jre\lib\ext\css.jar
c:\program files (x86)\Gomez\GomezPEER\jre\lib\ext\dnsjava.jar
c:\program files (x86)\Gomez\GomezPEER\jre\lib\ext\dnsns.jar
c:\program files (x86)\Gomez\GomezPEER\jre\lib\ext\gomez-webcore.jar
c:\program files (x86)\Gomez\GomezPEER\jre\lib\ext\HeartBeatProject.jar
c:\program files (x86)\Gomez\GomezPEER\jre\lib\ext\jdom.jar
c:\program files (x86)\Gomez\GomezPEER\jre\lib\ext\JNIRegistry.jar
c:\program files (x86)\Gomez\GomezPEER\jre\lib\ext\jniwrap.jar
c:\program files (x86)\Gomez\GomezPEER\jre\lib\ext\js.jar
c:\program files (x86)\Gomez\GomezPEER\jre\lib\ext\jstools.jar
c:\program files (x86)\Gomez\GomezPEER\jre\lib\ext\Kernel.jar
c:\program files (x86)\Gomez\GomezPEER\jre\lib\ext\localedata.jar
c:\program files (x86)\Gomez\GomezPEER\jre\lib\ext\log4j.jar
c:\program files (x86)\Gomez\GomezPEER\jre\lib\ext\meta-index
c:\program files (x86)\Gomez\GomezPEER\jre\lib\ext\nekohtml.jar
c:\program files (x86)\Gomez\GomezPEER\jre\lib\ext\oro.jar
c:\program files (x86)\Gomez\GomezPEER\jre\lib\ext\peergui.jar
c:\program files (x86)\Gomez\GomezPEER\jre\lib\ext\PeerReviewProject.jar
c:\program files (x86)\Gomez\GomezPEER\jre\lib\ext\poi.jar
c:\program files (x86)\Gomez\GomezPEER\jre\lib\ext\porivo-agent.jar
c:\program files (x86)\Gomez\GomezPEER\jre\lib\ext\porivo-lib.jar
c:\program files (x86)\Gomez\GomezPEER\jre\lib\ext\porivo-modules.jar
c:\program files (x86)\Gomez\GomezPEER\jre\lib\ext\porivo-utils.jar
c:\program files (x86)\Gomez\GomezPEER\jre\lib\ext\sunjce_provider.jar
c:\program files (x86)\Gomez\GomezPEER\jre\lib\ext\sunmscapi.jar
c:\program files (x86)\Gomez\GomezPEER\jre\lib\ext\sunpkcs11.jar
c:\program files (x86)\Gomez\GomezPEER\jre\lib\ext\winpack.jar
c:\program files (x86)\Gomez\GomezPEER\jre\lib\ext\xerces.jar
c:\program files (x86)\Gomez\GomezPEER\jre\lib\flavormap.properties
c:\program files (x86)\Gomez\GomezPEER\jre\lib\fontconfig.98.bfc
c:\program files (x86)\Gomez\GomezPEER\jre\lib\fontconfig.98.properties.src
c:\program files (x86)\Gomez\GomezPEER\jre\lib\fontconfig.bfc
c:\program files (x86)\Gomez\GomezPEER\jre\lib\fontconfig.properties.src
c:\program files (x86)\Gomez\GomezPEER\jre\lib\fonts\LucidaBrightDemiBold.ttf
c:\program files (x86)\Gomez\GomezPEER\jre\lib\fonts\LucidaBrightDemiItalic.ttf
c:\program files (x86)\Gomez\GomezPEER\jre\lib\fonts\LucidaBrightItalic.ttf
c:\program files (x86)\Gomez\GomezPEER\jre\lib\fonts\LucidaBrightRegular.ttf
c:\program files (x86)\Gomez\GomezPEER\jre\lib\fonts\LucidaSansDemiBold.ttf
c:\program files (x86)\Gomez\GomezPEER\jre\lib\fonts\LucidaSansRegular.ttf
c:\program files (x86)\Gomez\GomezPEER\jre\lib\fonts\LucidaTypewriterBold.ttf
c:\program files (x86)\Gomez\GomezPEER\jre\lib\fonts\LucidaTypewriterRegular.ttf
c:\program files (x86)\Gomez\GomezPEER\jre\lib\i386\jvm.cfg
c:\program files (x86)\Gomez\GomezPEER\jre\lib\im\indicim.jar
c:\program files (x86)\Gomez\GomezPEER\jre\lib\im\thaiim.jar
c:\program files (x86)\Gomez\GomezPEER\jre\lib\images\cursors\cursors.properties
c:\program files (x86)\Gomez\GomezPEER\jre\lib\images\cursors\invalid32x32.gif
c:\program files (x86)\Gomez\GomezPEER\jre\lib\images\cursors\win32_CopyDrop32x32.gif
c:\program files (x86)\Gomez\GomezPEER\jre\lib\images\cursors\win32_CopyNoDrop32x32.gif
c:\program files (x86)\Gomez\GomezPEER\jre\lib\images\cursors\win32_LinkDrop32x32.gif
c:\program files (x86)\Gomez\GomezPEER\jre\lib\images\cursors\win32_LinkNoDrop32x32.gif
c:\program files (x86)\Gomez\GomezPEER\jre\lib\images\cursors\win32_MoveDrop32x32.gif
c:\program files (x86)\Gomez\GomezPEER\jre\lib\images\cursors\win32_MoveNoDrop32x32.gif
c:\program files (x86)\Gomez\GomezPEER\jre\lib\javaws.jar
c:\program files (x86)\Gomez\GomezPEER\jre\lib\jce.jar
c:\program files (x86)\Gomez\GomezPEER\jre\lib\jsse.jar
c:\program files (x86)\Gomez\GomezPEER\jre\lib\jvm.hprof.txt
c:\program files (x86)\Gomez\GomezPEER\jre\lib\logging.properties
c:\program files (x86)\Gomez\GomezPEER\jre\lib\management-agent.jar
c:\program files (x86)\Gomez\GomezPEER\jre\lib\management\jmxremote.access
c:\program files (x86)\Gomez\GomezPEER\jre\lib\management\jmxremote.password.template
c:\program files (x86)\Gomez\GomezPEER\jre\lib\management\management.properties
c:\program files (x86)\Gomez\GomezPEER\jre\lib\management\snmp.acl.template
c:\program files (x86)\Gomez\GomezPEER\jre\lib\meta-index
c:\program files (x86)\Gomez\GomezPEER\jre\lib\net.properties
c:\program files (x86)\Gomez\GomezPEER\jre\lib\plugin.jar
c:\program files (x86)\Gomez\GomezPEER\jre\lib\psfont.properties.ja
c:\program files (x86)\Gomez\GomezPEER\jre\lib\psfontj2d.properties
c:\program files (x86)\Gomez\GomezPEER\jre\lib\resources.jar
c:\program files (x86)\Gomez\GomezPEER\jre\lib\rt.jar
c:\program files (x86)\Gomez\GomezPEER\jre\lib\security\cacerts
c:\program files (x86)\Gomez\GomezPEER\jre\lib\security\gsr.policy
c:\program files (x86)\Gomez\GomezPEER\jre\lib\security\java.policy
c:\program files (x86)\Gomez\GomezPEER\jre\lib\security\java.security
c:\program files (x86)\Gomez\GomezPEER\jre\lib\security\javaws.policy
c:\program files (x86)\Gomez\GomezPEER\jre\lib\security\local_policy.jar
c:\program files (x86)\Gomez\GomezPEER\jre\lib\security\US_export_policy.jar
c:\program files (x86)\Gomez\GomezPEER\jre\lib\sound.properties
c:\program files (x86)\Gomez\GomezPEER\jre\lib\tzmappings
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Africa\Abidjan
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Africa\Accra
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Africa\Addis_Ababa
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Africa\Algiers
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Africa\Asmara
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Africa\Asmera
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Africa\Bamako
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Africa\Bangui
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Africa\Banjul
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Africa\Bissau
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Africa\Blantyre
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Africa\Brazzaville
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Africa\Bujumbura
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Africa\Cairo
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Africa\Casablanca
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Africa\Ceuta
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Africa\Conakry
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Africa\Dakar
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Africa\Dar_es_Salaam
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Africa\Djibouti
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Africa\Douala
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Africa\El_Aaiun
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Africa\Freetown
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Africa\Gaborone
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Africa\Harare
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Africa\Johannesburg
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Africa\Kampala
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Africa\Khartoum
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Africa\Kigali
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Africa\Kinshasa
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Africa\Lagos
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Africa\Libreville
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Africa\Lome
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Africa\Luanda
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Africa\Lubumbashi
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Africa\Lusaka
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Africa\Malabo
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Africa\Maputo
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Africa\Maseru
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Africa\Mbabane
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Africa\Mogadishu
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Africa\Monrovia
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Africa\Nairobi
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Africa\Ndjamena
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Africa\Niamey
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Africa\Nouakchott
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Africa\Ouagadougou
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Africa\Porto-Novo
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Africa\Sao_Tome
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Africa\Tripoli
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Africa\Tunis
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Africa\Windhoek
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Adak
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Anchorage
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Anguilla
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Antigua
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Araguaina
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Argentina\Buenos_Aires
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Argentina\Catamarca
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Argentina\Cordoba
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Argentina\Jujuy
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Argentina\La_Rioja
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Argentina\Mendoza
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Argentina\Rio_Gallegos
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Argentina\San_Juan
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Argentina\Tucuman
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Argentina\Ushuaia
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Aruba
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Asuncion
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Atikokan
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Bahia
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Barbados
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Belem
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Belize
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Blanc-Sablon
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Boa_Vista
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Bogota
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Boise
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Cambridge_Bay
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Campo_Grande
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Cancun
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Caracas
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Cayenne
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Cayman
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Chicago
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Chihuahua
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Costa_Rica
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Cuiaba
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Curacao
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Danmarkshavn
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Dawson
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Dawson_Creek
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Denver
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Detroit
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Dominica
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Edmonton
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Eirunepe
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\El_Salvador
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Fortaleza
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Glace_Bay
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Godthab
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Goose_Bay
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Grand_Turk
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Grenada
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Guadeloupe
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Guatemala
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Guayaquil
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Guyana
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Halifax
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Havana
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Hermosillo
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Indiana\Indianapolis
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Indiana\Knox
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Indiana\Marengo
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Indiana\Petersburg
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Indiana\Tell_City
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Indiana\Vevay
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Indiana\Vincennes
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Indiana\Winamac
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Inuvik
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Iqaluit
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Jamaica
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Juneau
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Kentucky\Louisville
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Kentucky\Monticello
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\La_Paz
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Lima
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Los_Angeles
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Maceio
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Managua
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Manaus
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Martinique
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Mazatlan
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Menominee
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Merida
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Mexico_City
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Miquelon
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Moncton
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Monterrey
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Montevideo
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Montreal
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Montserrat
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Nassau
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\New_York
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Nipigon
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Nome
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Noronha
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\North_Dakota\Center
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\North_Dakota\New_Salem
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Panama
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Pangnirtung
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Paramaribo
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Phoenix
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Port-au-Prince
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Port_of_Spain
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Porto_Velho
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Puerto_Rico
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Rainy_River
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Rankin_Inlet
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Recife
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Regina
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Resolute
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Rio_Branco
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Santiago
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Santo_Domingo
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Sao_Paulo
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Scoresbysund
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\St_Johns
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\St_Kitts
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\St_Lucia
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\St_Thomas
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\St_Vincent
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Swift_Current
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Tegucigalpa
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Thule
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Thunder_Bay
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Tijuana
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Toronto
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Tortola
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Vancouver
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Whitehorse
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Winnipeg
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Yakutat
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\America\Yellowknife
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Antarctica\Casey
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Antarctica\Davis
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Antarctica\DumontDUrville
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Antarctica\Mawson
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Antarctica\McMurdo
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Antarctica\Palmer
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Antarctica\Rothera
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Antarctica\Syowa
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Antarctica\Vostok
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Asia\Aden
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Asia\Almaty
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Asia\Amman
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Asia\Anadyr
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Asia\Aqtau
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Asia\Aqtobe
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Asia\Ashgabat
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Asia\Baghdad
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Asia\Bahrain
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Asia\Baku
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Asia\Bangkok
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Asia\Beirut
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Asia\Bishkek
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Asia\Brunei
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Asia\Calcutta
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Asia\Choibalsan
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Asia\Chongqing
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Asia\Colombo
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Asia\Damascus
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Asia\Dhaka
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Asia\Dili
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Asia\Dubai
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Asia\Dushanbe
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Asia\Gaza
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Asia\Harbin
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Asia\Hong_Kong
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Asia\Hovd
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Asia\Irkutsk
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Asia\Jakarta
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Asia\Jayapura
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Asia\Jerusalem
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Asia\Kabul
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Asia\Kamchatka
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Asia\Karachi
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Asia\Kashgar
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Asia\Katmandu
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Asia\Krasnoyarsk
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Asia\Kuala_Lumpur
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Asia\Kuching
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Asia\Kuwait
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Asia\Macau
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Asia\Magadan
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Asia\Makassar
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Asia\Manila
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Asia\Muscat
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Asia\Nicosia
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Asia\Novosibirsk
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Asia\Omsk
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Asia\Oral
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Asia\Phnom_Penh
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Asia\Pontianak
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Asia\Pyongyang
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Asia\Qatar
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Asia\Qyzylorda
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Asia\Rangoon
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Asia\Riyadh
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Asia\Riyadh87
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Asia\Riyadh88
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Asia\Riyadh89
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Asia\Saigon
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Asia\Sakhalin
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Asia\Samarkand
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Asia\Seoul
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Asia\Shanghai
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Asia\Singapore
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Asia\Taipei
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Asia\Tashkent
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Asia\Tbilisi
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Asia\Tehran
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Asia\Thimphu
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Asia\Tokyo
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Asia\Ulaanbaatar
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Asia\Urumqi
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Asia\Vientiane
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Asia\Vladivostok
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Asia\Yakutsk
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Asia\Yekaterinburg
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Asia\Yerevan
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Atlantic\Azores
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Atlantic\Bermuda
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Atlantic\Canary
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Atlantic\Cape_Verde
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Atlantic\Faeroe
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Atlantic\Faroe
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Atlantic\Madeira
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Atlantic\Reykjavik
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Atlantic\South_Georgia
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Atlantic\St_Helena
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Atlantic\Stanley
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Australia\Adelaide
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Australia\Brisbane
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Australia\Broken_Hill
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Australia\Currie
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Australia\Darwin
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Australia\Eucla
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Australia\Hobart
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Australia\Lindeman
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Australia\Lord_Howe
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Australia\Melbourne
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Australia\Perth
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Australia\Sydney
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\CET
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\CST6CDT
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\EET
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\EST
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\EST5EDT
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Etc\GMT-1
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Etc\GMT-10
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Etc\GMT-11
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Etc\GMT-12
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Etc\GMT-13
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Etc\GMT-14
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Etc\GMT-2
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Etc\GMT-3
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Etc\GMT-4
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Etc\GMT-5
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Etc\GMT-6
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Etc\GMT-7
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Etc\GMT-8
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Etc\GMT-9
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Etc\GMT
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Etc\GMT+1
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Etc\GMT+10
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Etc\GMT+11
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Etc\GMT+12
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Etc\GMT+2
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Etc\GMT+3
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Etc\GMT+4
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Etc\GMT+5
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Etc\GMT+6
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Etc\GMT+7
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Etc\GMT+8
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Etc\GMT+9
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Etc\UCT
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Etc\UTC
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Europe\Amsterdam
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Europe\Andorra
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Europe\Athens
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Europe\Belgrade
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Europe\Berlin
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Europe\Brussels
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Europe\Bucharest
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Europe\Budapest
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Europe\Chisinau
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Europe\Copenhagen
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Europe\Dublin
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Europe\Gibraltar
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Europe\Helsinki
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Europe\Istanbul
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Europe\Kaliningrad
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Europe\Kiev
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Europe\Lisbon
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Europe\London
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Europe\Luxembourg
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Europe\Madrid
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Europe\Malta
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Europe\Minsk
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Europe\Monaco
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Europe\Moscow
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Europe\Oslo
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Europe\Paris
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Europe\Prague
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Europe\Riga
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Europe\Rome
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Europe\Samara
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Europe\Simferopol
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Europe\Sofia
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Europe\Stockholm
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Europe\Tallinn
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Europe\Tirane
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Europe\Uzhgorod
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Europe\Vaduz
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Europe\Vienna
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Europe\Vilnius
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Europe\Volgograd
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Europe\Warsaw
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Europe\Zaporozhye
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Europe\Zurich
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\GMT
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\HST
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Indian\Antananarivo
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Indian\Chagos
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Indian\Christmas
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Indian\Cocos
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Indian\Comoro
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Indian\Kerguelen
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Indian\Mahe
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Indian\Maldives
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Indian\Mauritius
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Indian\Mayotte
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Indian\Reunion
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\MET
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\MST
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\MST7MDT
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Pacific\Apia
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Pacific\Auckland
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Pacific\Chatham
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Pacific\Easter
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Pacific\Efate
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Pacific\Enderbury
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Pacific\Fakaofo
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Pacific\Fiji
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Pacific\Funafuti
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Pacific\Galapagos
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Pacific\Gambier
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Pacific\Guadalcanal
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Pacific\Guam
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Pacific\Honolulu
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Pacific\Johnston
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Pacific\Kiritimati
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Pacific\Kosrae
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Pacific\Kwajalein
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Pacific\Majuro
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Pacific\Marquesas
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Pacific\Midway
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Pacific\Nauru
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Pacific\Niue
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Pacific\Norfolk
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Pacific\Noumea
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Pacific\Pago_Pago
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Pacific\Palau
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Pacific\Pitcairn
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Pacific\Ponape
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Pacific\Port_Moresby
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Pacific\Rarotonga
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Pacific\Saipan
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Pacific\Tahiti
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Pacific\Tarawa
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Pacific\Tongatapu
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Pacific\Truk
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Pacific\Wake
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\Pacific\Wallis
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\PST8PDT
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\SystemV\AST4
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\SystemV\AST4ADT
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\SystemV\CST6
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\SystemV\CST6CDT
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\SystemV\EST5
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\SystemV\EST5EDT
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\SystemV\HST10
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\SystemV\MST7
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\SystemV\MST7MDT
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\SystemV\PST8
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\SystemV\PST8PDT
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\SystemV\YST9
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\SystemV\YST9YDT
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\WET
c:\program files (x86)\Gomez\GomezPEER\jre\lib\zi\ZoneInfoMappings
c:\program files (x86)\Gomez\GomezPEER\jre\LICENSE
c:\program files (x86)\Gomez\GomezPEER\jre\LICENSE.rtf
c:\program files (x86)\Gomez\GomezPEER\jre\LICENSE_de.rtf
c:\program files (x86)\Gomez\GomezPEER\jre\LICENSE_es.rtf
c:\program files (x86)\Gomez\GomezPEER\jre\LICENSE_fr.rtf
c:\program files (x86)\Gomez\GomezPEER\jre\LICENSE_it.rtf
c:\program files (x86)\Gomez\GomezPEER\jre\LICENSE_ja.rtf
c:\program files (x86)\Gomez\GomezPEER\jre\LICENSE_ko.rtf
c:\program files (x86)\Gomez\GomezPEER\jre\LICENSE_sv.rtf
c:\program files (x86)\Gomez\GomezPEER\jre\LICENSE_zh_CN.rtf
c:\program files (x86)\Gomez\GomezPEER\jre\LICENSE_zh_TW.rtf
c:\program files (x86)\Gomez\GomezPEER\jre\README.txt
c:\program files (x86)\Gomez\GomezPEER\jre\THIRDPARTYLICENSEREADME.txt
c:\program files (x86)\Gomez\GomezPEER\jre\Welcome.html
c:\program files (x86)\Gomez\GomezPEER\mname.ini
c:\program files (x86)\Gomez\GomezPEER\par2.exe
c:\program files (x86)\Gomez\GomezPEER\peer.log
c:\program files (x86)\Gomez\GomezPEER\ReadMe.txt
c:\program files (x86)\Gomez\GomezPEER\Respawn.log
c:\program files (x86)\Gomez\GomezPEER\tools\bind\bind.zip
c:\program files (x86)\Gomez\GomezPEER\uninstall.exe
c:\users\Christopher\AppData\Roaming\inst.exe
c:\users\Christopher\AppData\Roaming\vso_ts_preview.xml
.
.
((((((((((((((((((((((((( Files Created from 2012-01-01 to 2012-02-01 )))))))))))))))))))))))))))))))
.
.
2012-01-31 16:51 . 2012-01-31 16:51 388096 ----a-r- c:\users\Christopher\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2012-01-31 16:51 . 2012-01-31 16:51 -------- d-----w- c:\program files (x86)\Trend Micro
2012-01-31 15:52 . 2012-01-06 05:15 8602168 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{1831FAAB-102C-41B7-B566-A20CD437D211}\mpengine.dll
2012-01-30 07:17 . 2012-01-30 07:17 -------- d-----w- c:\program files (x86)\Drakensang Online
2012-01-30 07:15 . 2012-01-30 07:15 -------- d-----w- c:\program files (x86)\Common Files\Java
2012-01-30 07:15 . 2012-01-30 07:15 472808 ----a-w- c:\windows\SysWow64\deployJava1.dll
2012-01-30 07:15 . 2012-01-30 07:15 -------- d-----w- c:\program files (x86)\Java
2012-01-26 23:49 . 2012-01-26 23:49 -------- d-----w- c:\users\Christopher\AppData\Roaming\Logitech
2012-01-26 23:47 . 2012-01-26 23:49 -------- d-----w- c:\program files (x86)\Common Files\LogiShrd
2012-01-26 23:47 . 2009-07-20 17:33 190992 ----a-w- c:\windows\system32\BtCoreIf.dll
2012-01-26 23:47 . 2009-07-20 17:35 96272 ----a-w- c:\windows\system32\KemXML.dll
2012-01-26 23:47 . 2009-07-20 17:34 159248 ----a-w- c:\windows\system32\KemWnd.dll
2012-01-26 23:47 . 2009-07-20 17:34 235536 ----a-w- c:\windows\system32\KemUtil.dll
2012-01-26 23:47 . 2009-07-20 17:34 235536 ----a-w- c:\windows\system32\kemutb.dll
2012-01-26 23:46 . 2012-01-26 23:46 -------- d-----w- c:\programdata\Logitech
2012-01-26 23:46 . 2012-01-26 23:49 -------- d-----w- c:\program files\Common Files\Logishrd
2012-01-26 23:46 . 2012-01-26 23:46 -------- d-----w- c:\program files\Logitech
2012-01-26 23:46 . 2012-01-26 23:49 -------- d-----w- c:\programdata\LogiShrd
2012-01-21 06:09 . 2012-01-21 06:12 -------- d-----w- c:\users\Christopher\AppData\Local\Google
2012-01-15 08:56 . 2012-01-15 08:56 -------- d-----w- c:\users\Christopher\AppData\Roaming\Malwarebytes
2012-01-15 08:56 . 2012-01-15 08:56 -------- d-----w- c:\programdata\Malwarebytes
2012-01-15 08:56 . 2012-01-31 06:39 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2012-01-15 08:56 . 2011-12-10 20:24 23152 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-01-14 15:19 . 2012-01-14 15:29 -------- d-----w- c:\program files (x86)\Eligium
2012-01-14 05:44 . 2012-01-14 05:44 -------- d-----w- c:\users\Christopher\AppData\Local\DDMSettings
2012-01-14 05:38 . 2012-01-14 05:58 -------- d-----w- c:\program files (x86)\Common Files\PX Storage Engine
2012-01-11 17:23 . 2011-10-26 05:25 1572864 ----a-w- c:\windows\system32\quartz.dll
2012-01-11 17:23 . 2011-10-26 04:32 514560 ----a-w- c:\windows\SysWow64\qdvd.dll
2012-01-11 17:23 . 2011-10-26 04:32 1328128 ----a-w- c:\windows\SysWow64\quartz.dll
2012-01-11 17:23 . 2011-10-26 05:25 366592 ----a-w- c:\windows\system32\qdvd.dll
2012-01-11 17:23 . 2011-11-17 06:41 1731920 ----a-w- c:\windows\system32\ntdll.dll
2012-01-11 17:23 . 2011-11-17 05:38 1292080 ----a-w- c:\windows\SysWow64\ntdll.dll
2012-01-11 17:23 . 2011-11-19 14:58 77312 ----a-w- c:\windows\system32\packager.dll
2012-01-11 17:23 . 2011-11-19 14:01 67072 ----a-w- c:\windows\SysWow64\packager.dll
2012-01-08 19:40 . 2012-01-08 19:40 -------- d-----w- c:\users\Christopher\AppData\Local\Geckofx
2012-01-08 19:40 . 2012-01-08 19:40 -------- d-----w- c:\users\Christopher\AppData\Roaming\Firefly Studios
2012-01-04 00:48 . 2012-01-04 00:48 354176 ----a-w- c:\windows\SysWow64\DivXControlPanelApplet.cpl
2012-01-02 23:52 . 2012-01-14 05:49 -------- d-----w- c:\users\Christopher\AppData\Roaming\DivX
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-01-31 12:44 . 2011-08-30 02:37 279656 ------w- c:\windows\system32\MpSigStub.exe
2012-01-06 05:15 . 2011-08-31 08:25 8602168 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2011-12-27 02:56 . 2011-12-27 02:56 55384 ----a-w- c:\windows\system32\drivers\SBREDrv.sys
2011-12-27 02:56 . 2011-12-27 04:24 16432 ----a-w- c:\windows\system32\lsdelete.exe
2011-12-23 12:12 . 2011-12-27 02:44 69376 ----a-w- c:\windows\system32\drivers\Lbd.sys
2011-11-24 04:52 . 2011-12-14 20:46 3145216 ----a-w- c:\windows\system32\win32k.sys
2011-11-16 00:33 . 2011-08-30 02:58 414368 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2011-11-05 05:32 . 2011-12-14 20:46 2048 ----a-w- c:\windows\system32\tzres.dll
2011-11-05 04:26 . 2011-12-14 20:46 2048 ----a-w- c:\windows\SysWow64\tzres.dll
2011-11-04 01:53 . 2011-12-15 08:01 2309120 ----a-w- c:\windows\system32\jscript9.dll
2011-11-04 01:44 . 2011-12-15 08:01 1390080 ----a-w- c:\windows\system32\wininet.dll
2011-11-04 01:44 . 2011-12-15 08:01 1493504 ----a-w- c:\windows\system32\inetcpl.cpl
2011-11-04 01:34 . 2011-12-15 08:01 2382848 ----a-w- c:\windows\system32\mshtml.tlb
2011-11-03 22:47 . 2011-12-15 08:01 1798144 ----a-w- c:\windows\SysWow64\jscript9.dll
2011-11-03 22:40 . 2011-12-15 08:01 1427456 ----a-w- c:\windows\SysWow64\inetcpl.cpl
2011-11-03 22:39 . 2011-12-15 08:01 1127424 ----a-w- c:\windows\SysWow64\wininet.dll
2011-11-03 22:31 . 2011-12-15 08:01 2382848 ----a-w- c:\windows\SysWow64\mshtml.tlb
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Xvid"="c:\program files (x86)\Xvid\CheckUpdate.exe" [2011-01-17 8192]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ru n]
"NUSB3MON"="c:\program files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [2010-11-17 113288]
"DivXUpdate"="c:\program files (x86)\DivX\DivX Update\DivXUpdate.exe" [2011-07-28 1259376]
"LifeCam"="c:\program files (x86)\Microsoft LifeCam\LifeExp.exe" [2010-05-20 119152]
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2011-09-07 37296]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-03-30 937920]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2011-06-09 254696]
.
c:\users\Christopher\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Logitech . Product Registration.lnk - c:\program files (x86)\Common Files\LogiShrd\eReg\SetPoint\eReg.exe [2008-11-7 517384]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
GomezPEER.lnk - c:\program files (x86)\Gomez\GomezPEER\bin\GomezPEER.exe [N/A]
Logitech SetPoint.lnk - c:\program files\Logitech\SetPoint\SetPoint.exe [2012-1-26 1207312]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\syste m]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"mixer5"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavaso ft Ad-Aware Service]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSv c]
@="Service"
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R3 1394hub;1394 Enabled Hub;c:\windows\System32\svchost.exe [2009-07-14 27136]
R3 MpNWMon;Microsoft Malware Protection Network Driver;c:\windows\system32\DRIVERS\MpNWMon.sys [x]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys [x]
R3 NisSrv;Microsoft Network Inspection;c:\program files\Microsoft Security Client\Antimalware\NisSrv.exe [2011-04-27 288272]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [x]
S0 Lbd;Lbd;c:\windows\system32\DRIVERS\Lbd.sys [x]
S2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files (x86)\Lavasoft\Ad-Aware\AAWService.exe [2011-12-27 2152152]
S2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-05-21 2214504]
S3 Lavasoft Kernexplorer;Lavasoft helper driver;c:\program files (x86)\Lavasoft\Ad-Aware\KernExplorer64.sys [2011-12-27 17152]
S3 LEqdUsb;Logitech SetPoint Unifying KMDF USB Filter;c:\windows\system32\DRIVERS\LEqdUsb.Sys [x]
S3 LHidEqd;Logitech SetPoint Unifying KMDF HID Filter;c:\windows\system32\DRIVERS\LHidEqd.Sys [x]
S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys [x]
S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys [x]
S3 pcouffin;VSO Software pcouffin;c:\windows\system32\Drivers\pcouffin.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]
.
.
--- Other Services/Drivers In Memory ---
.
*NewlyCreated* - LAVASOFT_KERNEXPLORER
*NewlyCreated* - WS2IFSL
.
Contents of the 'Scheduled Tasks' folder
.
2012-02-01 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2636145936-1658262236-103114967-1000Core.job
- c:\users\Christopher\AppData\Local\Google\Update\GoogleUpdate.exe [2012-01-21 06:09]
.
2012-02-01 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2636145936-1658262236-103114967-1000UA.job
- c:\users\Christopher\AppData\Local\Google\Update\GoogleUpdate.exe [2012-01-21 06:09]
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-11-19 11613288]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2011-06-15 1436736]
"VX3000"="c:\windows\vVX3000.exe" [2010-05-20 762736]
"NetWorx"="c:\program files\NetWorx\networx.exe" [2012-01-24 4662784]
"Logitech Download Assistant"="c:\windows\system32\rundll32.exe" [2009-07-14 45568]
"Kernel and Hardware Abstraction Layer"="KHALMNPR.EXE" [2009-06-17 130576]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x0
.
------- Supplementary Scan -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.google.com/
uInternet Settings,ProxyServer = http=;ftp=;https=;
TCP: DhcpNameServer = 192.168.2.1 192.168.1.254
.
- - - - ORPHANS REMOVED - - - -
.
AddRemove-GomezPEER - c:\program files (x86)\Gomez\GomezPEER\uninstall.exe
.
.
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\Approved Extensions]
@Denied: (2) (LocalSystem)
"{2AAE80CE-5D5E-4AD2-B722-E9E0A506CE52}"=hex:51,66,7a,6c,4c,1d,38,12,a0,83,bd,
2e,6c,13,bc,0f,c8,34,aa,a0,a0,58,8a,46
"{326E768D-4182-46FD-9C16-1449A49795F4}"=hex:51,66,7a,6c,4c,1d,38,12,e3,75,7d,
36,b0,0f,93,03,e3,00,57,09,a1,c9,d1,e0
.
[HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\ApprovedExtensionsMigration]
@Denied: (2) (LocalSystem)
"Timestamp"=hex:93,1e,a0,1a,2c,70,cc,01
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil11e_Ac tiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil11e_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11e.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11e.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11e.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11e.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Other Running Processes ------------------------
.
c:\program files (x86)\Lavasoft\Ad-Aware\AAWTray.exe
.
**************************************************************************
.
Completion time: 2012-02-01 00:57:35 - machine was rebooted
ComboFix-quarantined-files.txt 2012-02-01 05:57
.
Pre-Run: 322,543,280,128 bytes free
Post-Run: 324,354,113,536 bytes free
.
- - End Of File - - BB8E10048C059E0584EC678348104D5B
jeffce's Avatar
jeffce   (Jeff) jeffce is offline jeffce is authorized to help remove malware.
jeffce has a Photo Album
Malware Removal Specialist with 1,727 posts.
 
Join Date: May 2011
01-Feb-2012, 09:15 AM #6
Hi matrix721,

Let me check something before we move on with ComboFix.

Download CKScanner by askey127 from Here & save it to your Desktop.
  • Right-click and Run as Administrator CKScanner.exe then click Search For Files
  • When the cursor hourglass disappears, click Save List To File
  • A message box will verify the file saved
  • Double-click the CKFiles.txt icon on your desktop then copy/paste the contents in your next reply
----------
matrix721's Avatar
matrix721 matrix721 is offline
Computer Specs
Junior Member with 6 posts.
THREAD STARTER
 
Join Date: Jan 2012
Experience: Intermediate
01-Feb-2012, 12:02 PM #7
CKScanner - Additional Security Risks - These are not necessarily bad
scanner sequence 3.MN.11.PELBJW
----- EOF -----
matrix721's Avatar
matrix721 matrix721 is offline
Computer Specs
Junior Member with 6 posts.
THREAD STARTER
 
Join Date: Jan 2012
Experience: Intermediate
01-Feb-2012, 12:03 PM #8
nothing there. that didnt find anything.....
jeffce's Avatar
jeffce   (Jeff) jeffce is offline jeffce is authorized to help remove malware.
jeffce has a Photo Album
Malware Removal Specialist with 1,727 posts.
 
Join Date: May 2011
01-Feb-2012, 04:18 PM #9
Hi matrix,

Please download TDSSKiller.zip
  • Extract it to your desktop
  • Right-click and Run as Administrator TDSSKiller.exe
  • Press Start Scan
    • Only if Malicious objects are found then ensure Cure is selected
    • Then click Continue > Reboot now
  • Copy and paste the log in your next reply
    • A copy of the log will be saved automatically to the root of the drive (typically C:\)
----------
matrix721's Avatar
matrix721 matrix721 is offline
Computer Specs
Junior Member with 6 posts.
THREAD STARTER
 
Join Date: Jan 2012
Experience: Intermediate
03-Feb-2012, 11:44 AM #10
TDSS Killer Results
10:39:17.0804 4220 TDSS rootkit removing tool 2.7.9.0 Feb 1 2012 09:28:49਍ഀ
10:39:18.0513 4220 ============================================================਍ഀ
10:39:18.0513 4220 Current date / time: 2012/02/03 10:39:18.0513਍ഀ
10:39:18.0513 4220 SystemInfo:਍ഀ
10:39:18.0513 4220 ਍ഀ
10:39:18.0513 4220 OS Version: 6.1.7601 ServicePack: 1.0਍ഀ
10:39:18.0513 4220 Product type: Workstation਍ഀ
10:39:18.0513 4220 ComputerName: CHRISTOPHER-PC਍ഀ
10:39:18.0513 4220 UserName: Christopher਍ഀ
10:39:18.0513 4220 Windows directory: C:\Windows਍ഀ
10:39:18.0513 4220 System windows directory: C:\Windows਍ഀ
10:39:18.0513 4220 Running under WOW64਍ഀ
10:39:18.0513 4220 Processor architecture: Intel x64਍ഀ
10:39:18.0513 4220 Number of processors: 4਍ഀ
10:39:18.0513 4220 Page size: 0x1000਍ഀ
10:39:18.0513 4220 Boot type: Normal boot਍ഀ
10:39:18.0513 4220 ============================================================਍ഀ
10:39:19.0327 4220 Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040਍ഀ
10:39:19.0337 4220 Drive \Device\Harddisk1\DR1 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040਍ഀ
10:39:19.0337 4220 Drive \Device\Harddisk2\DR4 - Size: 0x1DE000000 (7.47 Gb), SectorSize: 0x200, Cylinders: 0x3CE, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'਍ഀ
10:39:19.0337 4220 \Device\Harddisk0\DR0:਍ഀ
10:39:19.0337 4220 MBR used਍ഀ
10:39:19.0337 4220 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000਍ഀ
10:39:19.0337 4220 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x3A353000਍ഀ
10:39:19.0337 4220 \Device\Harddisk1\DR1:਍ഀ
10:39:19.0337 4220 MBR used਍ഀ
10:39:19.0337 4220 \Device\Harddisk1\DR1\Partition0: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x3A380D41਍ഀ
10:39:19.0337 4220 \Device\Harddisk2\DR4:਍ഀ
10:39:19.0337 4220 MBR used਍ഀ
10:39:19.0384 4220 Initialize success਍ഀ
10:39:19.0384 4220 ============================================================਍ഀ
10:39:30.0917 4376 ============================================================਍ഀ
10:39:30.0917 4376 Scan started਍ഀ
10:39:30.0917 4376 Mode: Manual; ਍ഀ
10:39:30.0917 4376 ============================================================਍ഀ
10:39:32.0377 4376 1394hub - ok਍ഀ
10:39:32.0432 4376 1394ohci (a87d604aea360176311474c87a63bb88) C:\Windows\system32\drivers\1394ohci.sys਍ഀ
10:39:32.0461 4376 1394ohci - ok਍ഀ
10:39:32.0572 4376 ACPI (d81d9e70b8a6dd14d42d7b4efa65d5f2) C:\Windows\system32\drivers\ACPI.sys਍ഀ
10:39:32.0579 4376 ACPI - ok਍ഀ
10:39:32.0614 4376 AcpiPmi (99f8e788246d495ce3794d7e7821d2ca) C:\Windows\system32\drivers\acpipmi.sys਍ഀ
10:39:32.0617 4376 AcpiPmi - ok਍ഀ
10:39:32.0659 4376 adp94xx (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\DRIVERS\adp94xx.sys਍ഀ
10:39:32.0669 4376 adp94xx - ok਍ഀ
10:39:32.0691 4376 adpahci (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\DRIVERS\adpahci.sys਍ഀ
10:39:32.0699 4376 adpahci - ok਍ഀ
10:39:32.0715 4376 adpu320 (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\DRIVERS\adpu320.sys਍ഀ
10:39:32.0718 4376 adpu320 - ok਍ഀ
10:39:32.0769 4376 AFD (d5b031c308a409a0a576bff4cf083d30) C:\Windows\system32\drivers\afd.sys਍ഀ
10:39:32.0774 4376 AFD - ok਍ഀ
10:39:32.0805 4376 agp440 (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\drivers\agp440.sys਍ഀ
10:39:32.0807 4376 agp440 - ok਍ഀ
10:39:32.0846 4376 aliide (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\drivers\aliide.sys਍ഀ
10:39:32.0848 4376 aliide - ok਍ഀ
10:39:32.0864 4376 amdide (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\drivers\amdide.sys਍ഀ
10:39:32.0866 4376 amdide - ok਍ഀ
10:39:32.0900 4376 AmdK8 (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\DRIVERS\amdk8.sys਍ഀ
10:39:32.0902 4376 AmdK8 - ok਍ഀ
10:39:32.0924 4376 AmdPPM (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\DRIVERS\amdppm.sys਍ഀ
10:39:32.0927 4376 AmdPPM - ok਍ഀ
10:39:32.0962 4376 amdsata (d4121ae6d0c0e7e13aa221aa57ef2d49) C:\Windows\system32\drivers\amdsata.sys਍ഀ
10:39:32.0966 4376 amdsata - ok਍ഀ
10:39:32.0993 4376 amdsbs (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\DRIVERS\amdsbs.sys਍ഀ
10:39:32.0998 4376 amdsbs - ok਍ഀ
10:39:33.0018 4376 amdxata (540daf1cea6094886d72126fd7c33048) C:\Windows\system32\drivers\amdxata.sys਍ഀ
10:39:33.0019 4376 amdxata - ok਍ഀ
10:39:33.0062 4376 AppID (89a69c3f2f319b43379399547526d952) C:\Windows\system32\drivers\appid.sys਍ഀ
10:39:33.0065 4376 AppID - ok਍ഀ
10:39:33.0101 4376 arc (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\DRIVERS\arc.sys਍ഀ
10:39:33.0103 4376 arc - ok਍ഀ
10:39:33.0116 4376 arcsas (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\DRIVERS\arcsas.sys਍ഀ
10:39:33.0118 4376 arcsas - ok਍ഀ
10:39:33.0153 4376 aswFsBlk (ce6d8bcc4787704ea4feeb92b0d0caf8) C:\Windows\system32\drivers\aswFsBlk.sys਍ഀ
10:39:33.0154 4376 aswFsBlk - ok਍ഀ
10:39:33.0174 4376 aswMonFlt (0debeb2e3fbd0bf5343125cce617f105) C:\Windows\system32\drivers\aswMonFlt.sys਍ഀ
10:39:33.0176 4376 aswMonFlt - ok਍ഀ
10:39:33.0199 4376 aswRdr (952edc2e81f85d1781958d4128bf59f8) C:\Windows\system32\drivers\aswRdr.sys਍ഀ
10:39:33.0200 4376 aswRdr - ok਍ഀ
10:39:33.0241 4376 aswSnx (dd383e2ac941c545a85ab72503da6c12) C:\Windows\system32\drivers\aswSnx.sys਍ഀ
10:39:33.0247 4376 aswSnx - ok਍ഀ
10:39:33.0264 4376 aswSP (ef5403fb8b2dcb791ec365fdf6040a4a) C:\Windows\system32\drivers\aswSP.sys਍ഀ
10:39:33.0268 4376 aswSP - ok਍ഀ
10:39:33.0286 4376 aswTdi (34165da5c6b30c0f9d61246bf8a28040) C:\Windows\system32\drivers\aswTdi.sys਍ഀ
10:39:33.0288 4376 aswTdi - ok਍ഀ
10:39:33.0310 4376 AsyncMac (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys਍ഀ
10:39:33.0311 4376 AsyncMac - ok਍ഀ
10:39:33.0340 4376 atapi (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\drivers\atapi.sys਍ഀ
10:39:33.0341 4376 atapi - ok਍ഀ
10:39:33.0409 4376 b06bdrv (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\DRIVERS\bxvbda.sys਍ഀ
10:39:33.0419 4376 b06bdrv - ok਍ഀ
10:39:33.0441 4376 b57nd60a (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys਍ഀ
10:39:33.0445 4376 b57nd60a - ok਍ഀ
10:39:33.0461 4376 Beep (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys਍ഀ
10:39:33.0462 4376 Beep - ok਍ഀ
10:39:33.0493 4376 blbdrive (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\DRIVERS\blbdrive.sys਍ഀ
10:39:33.0494 4376 blbdrive - ok਍ഀ
10:39:33.0519 4376 bowser (6c02a83164f5cc0a262f4199f0871cf5) C:\Windows\system32\DRIVERS\bowser.sys਍ഀ
10:39:33.0521 4376 bowser - ok਍ഀ
10:39:33.0528 4376 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\DRIVERS\BrFiltLo.sys਍ഀ
10:39:33.0529 4376 BrFiltLo - ok਍ഀ
10:39:33.0536 4376 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\DRIVERS\BrFiltUp.sys਍ഀ
10:39:33.0537 4376 BrFiltUp - ok਍ഀ
10:39:33.0566 4376 BridgeMP (5c2f352a4e961d72518261257aae204b) C:\Windows\system32\DRIVERS\bridge.sys਍ഀ
10:39:33.0567 4376 BridgeMP - ok਍ഀ
10:39:33.0586 4376 Brserid (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys਍ഀ
10:39:33.0590 4376 Brserid - ok਍ഀ
10:39:33.0605 4376 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys਍ഀ
10:39:33.0607 4376 BrSerWdm - ok਍ഀ
10:39:33.0614 4376 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys਍ഀ
10:39:33.0615 4376 BrUsbMdm - ok਍ഀ
10:39:33.0622 4376 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys਍ഀ
10:39:33.0623 4376 BrUsbSer - ok਍ഀ
10:39:33.0641 4376 BTHMODEM (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\DRIVERS\bthmodem.sys਍ഀ
10:39:33.0643 4376 BTHMODEM - ok਍ഀ
10:39:33.0657 4376 catchme - ok਍ഀ
10:39:33.0671 4376 cdfs (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys਍ഀ
10:39:33.0673 4376 cdfs - ok਍ഀ
10:39:33.0715 4376 cdrom (f036ce71586e93d94dab220d7bdf4416) C:\Windows\system32\DRIVERS\cdrom.sys਍ഀ
10:39:33.0720 4376 cdrom - ok਍ഀ
10:39:33.0760 4376 circlass (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\DRIVERS\circlass.sys਍ഀ
10:39:33.0764 4376 circlass - ok਍ഀ
10:39:33.0793 4376 CLFS (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys਍ഀ
10:39:33.0801 4376 CLFS - ok਍ഀ
10:39:33.0840 4376 CmBatt (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\DRIVERS\CmBatt.sys਍ഀ
10:39:33.0840 4376 CmBatt - ok਍ഀ
10:39:33.0868 4376 cmdide (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\drivers\cmdide.sys਍ഀ
10:39:33.0869 4376 cmdide - ok਍ഀ
10:39:33.0906 4376 CNG (c4943b6c962e4b82197542447ad599f4) C:\Windows\system32\Drivers\cng.sys਍ഀ
10:39:33.0915 4376 CNG - ok਍ഀ
10:39:33.0932 4376 Compbatt (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\DRIVERS\compbatt.sys਍ഀ
10:39:33.0934 4376 Compbatt - ok਍ഀ
10:39:33.0972 4376 CompositeBus (03edb043586cceba243d689bdda370a8) C:\Windows\system32\drivers\CompositeBus.sys਍ഀ
10:39:33.0974 4376 CompositeBus - ok਍ഀ
10:39:34.0002 4376 crcdisk (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\DRIVERS\crcdisk.sys਍ഀ
10:39:34.0003 4376 crcdisk - ok਍ഀ
10:39:34.0038 4376 DfsC (9bb2ef44eaa163b29c4a4587887a0fe4) C:\Windows\system32\Drivers\dfsc.sys਍ഀ
10:39:34.0040 4376 DfsC - ok਍ഀ
10:39:34.0055 4376 discache (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys਍ഀ
10:39:34.0056 4376 discache - ok਍ഀ
10:39:34.0092 4376 Disk (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\DRIVERS\disk.sys਍ഀ
10:39:34.0093 4376 Disk - ok਍ഀ
10:39:34.0123 4376 drmkaud (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys਍ഀ
10:39:34.0125 4376 drmkaud - ok਍ഀ
10:39:34.0160 4376 DXGKrnl (f5bee30450e18e6b83a5012c100616fd) C:\Windows\System32\drivers\dxgkrnl.sys਍ഀ
10:39:34.0179 4376 DXGKrnl - ok਍ഀ
10:39:34.0275 4376 ebdrv (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\DRIVERS\evbda.sys਍ഀ
10:39:34.0325 4376 ebdrv - ok਍ഀ
10:39:34.0369 4376 elxstor (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\DRIVERS\elxstor.sys਍ഀ
10:39:34.0375 4376 elxstor - ok਍ഀ
10:39:34.0391 4376 ErrDev (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\drivers\errdev.sys਍ഀ
10:39:34.0406 4376 ErrDev - ok਍ഀ
10:39:34.0422 4376 exfat (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys਍ഀ
10:39:34.0422 4376 exfat - ok਍ഀ
10:39:34.0444 4376 fastfat (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys਍ഀ
10:39:34.0447 4376 fastfat - ok਍ഀ
10:39:34.0460 4376 fdc (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\DRIVERS\fdc.sys਍ഀ
10:39:34.0461 4376 fdc - ok਍ഀ
10:39:34.0480 4376 FileInfo (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys਍ഀ
10:39:34.0487 4376 FileInfo - ok਍ഀ
10:39:34.0508 4376 Filetrace (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys਍ഀ
10:39:34.0509 4376 Filetrace - ok਍ഀ
10:39:34.0517 4376 flpydisk (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\DRIVERS\flpydisk.sys਍ഀ
10:39:34.0518 4376 flpydisk - ok਍ഀ
10:39:34.0563 4376 FltMgr (da6b67270fd9db3697b20fce94950741) C:\Windows\system32\drivers\fltmgr.sys਍ഀ
10:39:34.0569 4376 FltMgr - ok਍ഀ
10:39:34.0605 4376 FsDepends (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys਍ഀ
10:39:34.0609 4376 FsDepends - ok਍ഀ
10:39:34.0624 4376 Fs_Rec (e95ef8547de20cf0603557c0cf7a9462) C:\Windows\system32\drivers\Fs_Rec.sys਍ഀ
10:39:34.0626 4376 Fs_Rec - ok਍ഀ
10:39:34.0654 4376 fvevol (1f7b25b858fa27015169fe95e54108ed) C:\Windows\system32\DRIVERS\fvevol.sys਍ഀ
10:39:34.0656 4376 fvevol - ok਍ഀ
10:39:34.0681 4376 gagp30kx (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\DRIVERS\gagp30kx.sys਍ഀ
10:39:34.0683 4376 gagp30kx - ok਍ഀ
10:39:34.0702 4376 hcw85cir (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys਍ഀ
10:39:34.0703 4376 hcw85cir - ok਍ഀ
10:39:34.0750 4376 HdAudAddService (975761c778e33cd22498059b91e7373a) C:\Windows\system32\drivers\HdAudio.sys਍ഀ
10:39:34.0758 4376 HdAudAddService - ok਍ഀ
10:39:34.0796 4376 HDAudBus (97bfed39b6b79eb12cddbfeed51f56bb) C:\Windows\system32\drivers\HDAudBus.sys਍ഀ
10:39:34.0801 4376 HDAudBus - ok਍ഀ
10:39:34.0829 4376 HidBatt (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\DRIVERS\HidBatt.sys਍ഀ
10:39:34.0830 4376 HidBatt - ok਍ഀ
10:39:34.0838 4376 HidBth (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\DRIVERS\hidbth.sys਍ഀ
10:39:34.0840 4376 HidBth - ok਍ഀ
10:39:34.0847 4376 HidIr (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\DRIVERS\hidir.sys਍ഀ
10:39:34.0849 4376 HidIr - ok਍ഀ
10:39:34.0920 4376 HidUsb (9592090a7e2b61cd582b612b6df70536) C:\Windows\system32\DRIVERS\hidusb.sys਍ഀ
10:39:34.0923 4376 HidUsb - ok਍ഀ
10:39:34.0970 4376 HpSAMD (39d2abcd392f3d8a6dce7b60ae7b8efc) C:\Windows\system32\drivers\HpSAMD.sys਍ഀ
10:39:34.0972 4376 HpSAMD - ok਍ഀ
10:39:35.0017 4376 HTTP (0ea7de1acb728dd5a369fd742d6eee28) C:\Windows\system32\drivers\HTTP.sys਍ഀ
10:39:35.0032 4376 HTTP - ok਍ഀ
10:39:35.0068 4376 hwpolicy (a5462bd6884960c9dc85ed49d34ff392) C:\Windows\system32\drivers\hwpolicy.sys਍ഀ
10:39:35.0069 4376 hwpolicy - ok਍ഀ
10:39:35.0102 4376 i8042prt (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\drivers\i8042prt.sys਍ഀ
10:39:35.0104 4376 i8042prt - ok਍ഀ
10:39:35.0130 4376 iaStorV (aaaf44db3bd0b9d1fb6969b23ecc8366) C:\Windows\system32\drivers\iaStorV.sys਍ഀ
10:39:35.0135 4376 iaStorV - ok਍ഀ
10:39:35.0161 4376 iirsp (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\DRIVERS\iirsp.sys਍ഀ
10:39:35.0163 4376 iirsp - ok਍ഀ
10:39:35.0248 4376 IntcAzAudAddService (589b94a9b73a0e819ff873743a480834) C:\Windows\system32\drivers\RTKVHD64.sys਍ഀ
10:39:35.0299 4376 IntcAzAudAddService - ok਍ഀ
10:39:35.0330 4376 intelide (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\drivers\intelide.sys਍ഀ
10:39:35.0331 4376 intelide - ok਍ഀ
10:39:35.0344 4376 intelppm (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\DRIVERS\intelppm.sys਍ഀ
10:39:35.0345 4376 intelppm - ok਍ഀ
10:39:35.0372 4376 IpFilterDriver (c9f0e1bd74365a8771590e9008d22ab6) C:\Windows\system32\DRIVERS\ipfltdrv.sys਍ഀ
10:39:35.0374 4376 IpFilterDriver - ok਍ഀ
10:39:35.0404 4376 IPMIDRV (0fc1aea580957aa8817b8f305d18ca3a) C:\Windows\system32\drivers\IPMIDrv.sys਍ഀ
10:39:35.0406 4376 IPMIDRV - ok਍ഀ
10:39:35.0421 4376 IPNAT (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys਍ഀ
10:39:35.0423 4376 IPNAT - ok਍ഀ
10:39:35.0427 4376 IRENUM (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys਍ഀ
10:39:35.0427 4376 IRENUM - ok਍ഀ
10:39:35.0458 4376 isapnp (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\drivers\isapnp.sys਍ഀ
10:39:35.0458 4376 isapnp - ok਍ഀ
10:39:35.0491 4376 iScsiPrt (d931d7309deb2317035b07c9f9e6b0bd) C:\Windows\system32\drivers\msiscsi.sys਍ഀ
10:39:35.0494 4376 iScsiPrt - ok਍ഀ
10:39:35.0518 4376 kbdclass (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\DRIVERS\kbdclass.sys਍ഀ
10:39:35.0519 4376 kbdclass - ok਍ഀ
10:39:35.0532 4376 kbdhid (0705eff5b42a9db58548eec3b26bb484) C:\Windows\system32\DRIVERS\kbdhid.sys਍ഀ
10:39:35.0534 4376 kbdhid - ok਍ഀ
10:39:35.0565 4376 KSecDD (da1e991a61cfdd755a589e206b97644b) C:\Windows\system32\Drivers\ksecdd.sys਍ഀ
10:39:35.0566 4376 KSecDD - ok਍ഀ
10:39:35.0602 4376 KSecPkg (7e33198d956943a4f11a5474c1e9106f) C:\Windows\system32\Drivers\ksecpkg.sys਍ഀ
10:39:35.0606 4376 KSecPkg - ok਍ഀ
10:39:35.0634 4376 ksthunk (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys਍ഀ
10:39:35.0635 4376 ksthunk - ok਍ഀ
10:39:35.0691 4376 LEqdUsb (becbd7cd46776b8739ee18061f45a581) C:\Windows\system32\DRIVERS\LEqdUsb.Sys਍ഀ
10:39:35.0693 4376 LEqdUsb - ok਍ഀ
10:39:35.0709 4376 LHidEqd (21d6bd7d62c270059eb8e2b1d4095880) C:\Windows\system32\DRIVERS\LHidEqd.Sys਍ഀ
10:39:35.0711 4376 LHidEqd - ok਍ഀ
10:39:35.0742 4376 LHidFilt (b6552d382ff070b4ed34cbd6737277c0) C:\Windows\system32\DRIVERS\LHidFilt.Sys਍ഀ
10:39:35.0744 4376 LHidFilt - ok਍ഀ
10:39:35.0794 4376 lltdio (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys਍ഀ
10:39:35.0797 4376 lltdio - ok਍ഀ
10:39:35.0818 4376 LMouFilt (73c1f563ab73d459dffe682d66476558) C:\Windows\system32\DRIVERS\LMouFilt.Sys਍ഀ
10:39:35.0821 4376 LMouFilt - ok਍ഀ
10:39:35.0853 4376 LSI_FC (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\DRIVERS\lsi_fc.sys਍ഀ
10:39:35.0855 4376 LSI_FC - ok਍ഀ
10:39:35.0864 4376 LSI_SAS (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\DRIVERS\lsi_sas.sys਍ഀ
10:39:35.0866 4376 LSI_SAS - ok਍ഀ
10:39:35.0881 4376 LSI_SAS2 (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\DRIVERS\lsi_sas2.sys਍ഀ
10:39:35.0882 4376 LSI_SAS2 - ok਍ഀ
10:39:35.0897 4376 LSI_SCSI (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\DRIVERS\lsi_scsi.sys਍ഀ
10:39:35.0899 4376 LSI_SCSI - ok਍ഀ
10:39:35.0927 4376 luafv (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys਍ഀ
10:39:35.0929 4376 luafv - ok਍ഀ
10:39:35.0947 4376 megasas (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\DRIVERS\megasas.sys਍ഀ
10:39:35.0948 4376 megasas - ok਍ഀ
10:39:35.0964 4376 MegaSR (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\DRIVERS\MegaSR.sys਍ഀ
10:39:35.0968 4376 MegaSR - ok਍ഀ
10:39:35.0988 4376 Modem (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys਍ഀ
10:39:35.0989 4376 Modem - ok਍ഀ
10:39:36.0027 4376 monitor (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys਍ഀ
10:39:36.0030 4376 monitor - ok਍ഀ
10:39:36.0065 4376 mouclass (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\DRIVERS\mouclass.sys਍ഀ
10:39:36.0068 4376 mouclass - ok਍ഀ
10:39:36.0097 4376 mouhid (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys਍ഀ
10:39:36.0100 4376 mouhid - ok਍ഀ
10:39:36.0136 4376 mountmgr (32e7a3d591d671a6df2db515a5cbe0fa) C:\Windows\system32\drivers\mountmgr.sys਍ഀ
10:39:36.0139 4376 mountmgr - ok਍ഀ
10:39:36.0161 4376 mpio (a44b420d30bd56e145d6a2bc8768ec58) C:\Windows\system32\drivers\mpio.sys਍ഀ
10:39:36.0165 4376 mpio - ok਍ഀ
10:39:36.0193 4376 mpsdrv (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys਍ഀ
10:39:36.0195 4376 mpsdrv - ok਍ഀ
10:39:36.0227 4376 MRxDAV (dc722758b8261e1abafd31a3c0a66380) C:\Windows\system32\drivers\mrxdav.sys਍ഀ
10:39:36.0229 4376 MRxDAV - ok਍ഀ
10:39:36.0252 4376 mrxsmb (a5d9106a73dc88564c825d317cac68ac) C:\Windows\system32\DRIVERS\mrxsmb.sys਍ഀ
10:39:36.0254 4376 mrxsmb - ok਍ഀ
10:39:36.0272 4376 mrxsmb10 (d711b3c1d5f42c0c2415687be09fc163) C:\Windows\system32\DRIVERS\mrxsmb10.sys਍ഀ
10:39:36.0275 4376 mrxsmb10 - ok਍ഀ
10:39:36.0292 4376 mrxsmb20 (9423e9d355c8d303e76b8cfbd8a5c30c) C:\Windows\system32\DRIVERS\mrxsmb20.sys਍ഀ
10:39:36.0294 4376 mrxsmb20 - ok਍ഀ
10:39:36.0326 4376 msahci (c25f0bafa182cbca2dd3c851c2e75796) C:\Windows\system32\drivers\msahci.sys਍ഀ
10:39:36.0328 4376 msahci - ok਍ഀ
10:39:36.0374 4376 msdsm (db801a638d011b9633829eb6f663c900) C:\Windows\system32\drivers\msdsm.sys਍ഀ
10:39:36.0376 4376 msdsm - ok਍ഀ
10:39:36.0402 4376 Msfs (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys਍ഀ
10:39:36.0403 4376 Msfs - ok਍ഀ
10:39:36.0421 4376 mshidkmdf (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys਍ഀ
10:39:36.0423 4376 mshidkmdf - ok਍ഀ
10:39:36.0453 4376 msisadrv (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\drivers\msisadrv.sys਍ഀ
10:39:36.0454 4376 msisadrv - ok਍ഀ
10:39:36.0474 4376 MSKSSRV (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys਍ഀ
10:39:36.0474 4376 MSKSSRV - ok਍ഀ
10:39:36.0490 4376 MSPCLOCK (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys਍ഀ
10:39:36.0490 4376 MSPCLOCK - ok਍ഀ
10:39:36.0510 4376 MSPQM (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys਍ഀ
10:39:36.0511 4376 MSPQM - ok਍ഀ
10:39:36.0546 4376 MsRPC (759a9eeb0fa9ed79da1fb7d4ef78866d) C:\Windows\system32\drivers\MsRPC.sys਍ഀ
10:39:36.0549 4376 MsRPC - ok਍ഀ
10:39:36.0567 4376 mssmbios (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\drivers\mssmbios.sys਍ഀ
10:39:36.0569 4376 mssmbios - ok਍ഀ
10:39:36.0585 4376 MSTEE (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys਍ഀ
10:39:36.0586 4376 MSTEE - ok਍ഀ
10:39:36.0608 4376 MTConfig (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\DRIVERS\MTConfig.sys਍ഀ
10:39:36.0609 4376 MTConfig - ok਍ഀ
10:39:36.0629 4376 Mup (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys਍ഀ
10:39:36.0630 4376 Mup - ok਍ഀ
10:39:36.0670 4376 NativeWifiP (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS\nwifi.sys਍ഀ
10:39:36.0674 4376 NativeWifiP - ok਍ഀ
10:39:36.0746 4376 NDIS (79b47fd40d9a817e932f9d26fac0a81c) C:\Windows\system32\drivers\ndis.sys਍ഀ
10:39:36.0763 4376 NDIS - ok਍ഀ
10:39:36.0777 4376 NdisCap (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS\ndiscap.sys਍ഀ
10:39:36.0779 4376 NdisCap - ok਍ഀ
10:39:36.0799 4376 NdisTapi (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS\ndistapi.sys਍ഀ
10:39:36.0801 4376 NdisTapi - ok਍ഀ
10:39:36.0829 4376 Ndisuio (136185f9fb2cc61e573e676aa5402356) C:\Windows\system32\DRIVERS\ndisuio.sys਍ഀ
10:39:36.0832 4376 Ndisuio - ok਍ഀ
10:39:36.0873 4376 NdisWan (53f7305169863f0a2bddc49e116c2e11) C:\Windows\system32\DRIVERS\ndiswan.sys਍ഀ
10:39:36.0878 4376 NdisWan - ok਍ഀ
10:39:36.0913 4376 NDProxy (015c0d8e0e0421b4cfd48cffe2825879) C:\Windows\system32\drivers\NDProxy.sys਍ഀ
10:39:36.0915 4376 NDProxy - ok਍ഀ
10:39:36.0925 4376 NetBIOS (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS\netbios.sys਍ഀ
10:39:36.0926 4376 NetBIOS - ok਍ഀ
10:39:36.0959 4376 NetBT (09594d1089c523423b32a4229263f068) C:\Windows\system32\DRIVERS\netbt.sys਍ഀ
10:39:36.0962 4376 NetBT - ok਍ഀ
10:39:37.0006 4376 nfrd960 (77889813be4d166cdab78ddba990da92) C:\Windows\system32\DRIVERS\nfrd960.sys਍ഀ
10:39:37.0007 4376 nfrd960 - ok਍ഀ
10:39:37.0024 4376 Npfs (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys਍ഀ
10:39:37.0025 4376 Npfs - ok਍ഀ
10:39:37.0051 4376 nsiproxy (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers\nsiproxy.sys਍ഀ
10:39:37.0053 4376 nsiproxy - ok਍ഀ
10:39:37.0120 4376 Ntfs (a2f74975097f52a00745f9637451fdd8) C:\Windows\system32\drivers\Ntfs.sys਍ഀ
10:39:37.0151 4376 Ntfs - ok਍ഀ
10:39:37.0182 4376 Null (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys਍ഀ
10:39:37.0183 4376 Null - ok਍ഀ
10:39:37.0227 4376 nusb3hub (0ebc9d13cd96c15b1b18d8678a609e4b) C:\Windows\system32\DRIVERS\nusb3hub.sys਍ഀ
10:39:37.0229 4376 nusb3hub - ok਍ഀ
10:39:37.0244 4376 nusb3xhc (7bdec000d56d485021d9c1e63c2f81ca) C:\Windows\system32\DRIVERS\nusb3xhc.sys਍ഀ
10:39:37.0247 4376 nusb3xhc - ok਍ഀ
10:39:37.0462 4376 nvlddmkm (b34e9bfbd9c61048ef6281c3e7ec210a) C:\Windows\system32\DRIVERS\nvlddmkm.sys਍ഀ
10:39:37.0650 4376 nvlddmkm - ok਍ഀ
10:39:37.0689 4376 nvraid (0a92cb65770442ed0dc44834632f66ad) C:\Windows\system32\drivers\nvraid.sys਍ഀ
10:39:37.0690 4376 nvraid - ok਍ഀ
10:39:37.0706 4376 nvstor (dab0e87525c10052bf65f06152f37e4a) C:\Windows\system32\drivers\nvstor.sys਍ഀ
10:39:37.0710 4376 nvstor - ok਍ഀ
10:39:37.0747 4376 nv_agp (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\drivers\nv_agp.sys਍ഀ
10:39:37.0749 4376 nv_agp - ok਍ഀ
10:39:37.0774 4376 ohci1394 (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\drivers\ohci1394.sys਍ഀ
10:39:37.0776 4376 ohci1394 - ok਍ഀ
10:39:37.0806 4376 Parport (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\DRIVERS\parport.sys਍ഀ
10:39:37.0808 4376 Parport - ok਍ഀ
10:39:37.0839 4376 partmgr (871eadac56b0a4c6512bbe32753ccf79) C:\Windows\system32\drivers\partmgr.sys਍ഀ
10:39:37.0842 4376 partmgr - ok਍ഀ
10:39:37.0865 4376 pci (94575c0571d1462a0f70bde6bd6ee6b3) C:\Windows\system32\drivers\pci.sys਍ഀ
10:39:37.0870 4376 pci - ok਍ഀ
10:39:37.0902 4376 pciide (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\drivers\pciide.sys਍ഀ
10:39:37.0903 4376 pciide - ok਍ഀ
10:39:37.0925 4376 pcmcia (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\DRIVERS\pcmcia.sys਍ഀ
10:39:37.0931 4376 pcmcia - ok਍ഀ
10:39:37.0970 4376 pcouffin (af7ce12c4f3dc8cb2b07685c916bbcfe) C:\Windows\system32\Drivers\pcouffin.sys਍ഀ
10:39:37.0974 4376 pcouffin - ok਍ഀ
10:39:37.0998 4376 pcw (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys਍ഀ
10:39:38.0000 4376 pcw - ok਍ഀ
10:39:38.0029 4376 PEAUTH (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys਍ഀ
10:39:38.0036 4376 PEAUTH - ok਍ഀ
10:39:38.0096 4376 PptpMiniport (f92a2c41117a11a00be01ca01a7fcde9) C:\Windows\system32\DRIVERS\raspptp.sys਍ഀ
10:39:38.0098 4376 PptpMiniport - ok਍ഀ
10:39:38.0113 4376 Processor (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\DRIVERS\processr.sys਍ഀ
10:39:38.0115 4376 Processor - ok਍ഀ
10:39:38.0151 4376 Psched (0557cf5a2556bd58e26384169d72438d) C:\Windows\system32\DRIVERS\pacer.sys਍ഀ
10:39:38.0156 4376 Psched - ok਍ഀ
10:39:38.0194 4376 ql2300 (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\DRIVERS\ql2300.sys਍ഀ
10:39:38.0220 4376 ql2300 - ok਍ഀ
10:39:38.0243 4376 ql40xx (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\DRIVERS\ql40xx.sys਍ഀ
10:39:38.0246 4376 ql40xx - ok਍ഀ
10:39:38.0265 4376 QWAVEdrv (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys਍ഀ
10:39:38.0267 4376 QWAVEdrv - ok਍ഀ
10:39:38.0274 4376 RasAcd (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERS\rasacd.sys਍ഀ
10:39:38.0275 4376 RasAcd - ok਍ഀ
10:39:38.0298 4376 RasAgileVpn (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys਍ഀ
10:39:38.0300 4376 RasAgileVpn - ok਍ഀ
10:39:38.0331 4376 Rasl2tp (471815800ae33e6f1c32fb1b97c490ca) C:\Windows\system32\DRIVERS\rasl2tp.sys਍ഀ
10:39:38.0333 4376 Rasl2tp - ok਍ഀ
10:39:38.0352 4376 RasPppoe (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERS\raspppoe.sys਍ഀ
10:39:38.0355 4376 RasPppoe - ok਍ഀ
10:39:38.0364 4376 RasSstp (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERS\rassstp.sys਍ഀ
10:39:38.0366 4376 RasSstp - ok਍ഀ
10:39:38.0399 4376 rdbss (77f665941019a1594d887a74f301fa2f) C:\Windows\system32\DRIVERS\rdbss.sys਍ഀ
10:39:38.0402 4376 rdbss - ok਍ഀ
10:39:38.0418 4376 rdpbus (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\DRIVERS\rdpbus.sys਍ഀ
10:39:38.0420 4376 rdpbus - ok਍ഀ
10:39:38.0438 4376 RDPCDD (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys਍ഀ
10:39:38.0439 4376 RDPCDD - ok਍ഀ
10:39:38.0454 4376 RDPENCDD (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\drivers\rdpencdd.sys਍ഀ
10:39:38.0455 4376 RDPENCDD - ok਍ഀ
10:39:38.0467 4376 RDPREFMP (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\drivers\rdprefmp.sys਍ഀ
10:39:38.0469 4376 RDPREFMP - ok਍ഀ
10:39:38.0495 4376 RDPWD (15b66c206b5cb095bab980553f38ed23) C:\Windows\system32\drivers\RDPWD.sys਍ഀ
10:39:38.0497 4376 RDPWD - ok਍ഀ
10:39:38.0542 4376 rdyboost (34ed295fa0121c241bfef24764fc4520) C:\Windows\system32\drivers\rdyboost.sys਍ഀ
10:39:38.0547 4376 rdyboost - ok਍ഀ
10:39:38.0605 4376 rspndr (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERS\rspndr.sys਍ഀ
10:39:38.0605 4376 rspndr - ok਍ഀ
10:39:38.0649 4376 RTL8167 (2777226ee8bf50b059d7a7c90177e99c) C:\Windows\system32\DRIVERS\Rt64win7.sys਍ഀ
10:39:38.0653 4376 RTL8167 - ok਍ഀ
10:39:38.0680 4376 sbp2port (ac03af3329579fffb455aa2daabbe22b) C:\Windows\system32\drivers\sbp2port.sys਍ഀ
10:39:38.0682 4376 sbp2port - ok਍ഀ
10:39:38.0711 4376 scfilter (253f38d0d7074c02ff8deb9836c97d2b) C:\Windows\system32\DRIVERS\scfilter.sys਍ഀ
10:39:38.0713 4376 scfilter - ok਍ഀ
10:39:38.0739 4376 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys਍ഀ
10:39:38.0742 4376 secdrv - ok਍ഀ
10:39:38.0767 4376 Serenum (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\DRIVERS\serenum.sys਍ഀ
10:39:38.0769 4376 Serenum - ok਍ഀ
10:39:38.0794 4376 Serial (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\DRIVERS\serial.sys਍ഀ
10:39:38.0796 4376 Serial - ok਍ഀ
10:39:38.0826 4376 sermouse (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\DRIVERS\sermouse.sys਍ഀ
10:39:38.0827 4376 sermouse - ok਍ഀ
10:39:38.0864 4376 sffdisk (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\drivers\sffdisk.sys਍ഀ
10:39:38.0865 4376 sffdisk - ok਍ഀ
10:39:38.0876 4376 sffp_mmc (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\drivers\sffp_mmc.sys਍ഀ
10:39:38.0877 4376 sffp_mmc - ok਍ഀ
10:39:38.0889 4376 sffp_sd (dd85b78243a19b59f0637dcf284da63c) C:\Windows\system32\drivers\sffp_sd.sys਍ഀ
10:39:38.0890 4376 sffp_sd - ok਍ഀ
10:39:38.0909 4376 sfloppy (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\DRIVERS\sfloppy.sys਍ഀ
10:39:38.0910 4376 sfloppy - ok਍ഀ
10:39:38.0933 4376 SiSRaid2 (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\DRIVERS\SiSRaid2.sys਍ഀ
10:39:38.0935 4376 SiSRaid2 - ok਍ഀ
10:39:38.0947 4376 SiSRaid4 (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\DRIVERS\sisraid4.sys਍ഀ
10:39:38.0949 4376 SiSRaid4 - ok਍ഀ
10:39:38.0972 4376 Smb (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys਍ഀ
10:39:38.0973 4376 Smb - ok਍ഀ
10:39:38.0996 4376 spldr (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys਍ഀ
10:39:38.0997 4376 spldr - ok਍ഀ
10:39:39.0033 4376 srv (441fba48bff01fdb9d5969ebc1838f0b) C:\Windows\system32\DRIVERS\srv.sys਍ഀ
10:39:39.0038 4376 srv - ok਍ഀ
10:39:39.0053 4376 srv2 (b4adebbf5e3677cce9651e0f01f7cc28) C:\Windows\system32\DRIVERS\srv2.sys਍ഀ
10:39:39.0057 4376 srv2 - ok਍ഀ
10:39:39.0068 4376 srvnet (27e461f0be5bff5fc737328f749538c3) C:\Windows\system32\DRIVERS\srvnet.sys਍ഀ
10:39:39.0070 4376 srvnet - ok਍ഀ
10:39:39.0095 4376 stexstor (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\DRIVERS\stexstor.sys਍ഀ
10:39:39.0096 4376 stexstor - ok਍ഀ
10:39:39.0132 4376 swenum (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\drivers\swenum.sys਍ഀ
10:39:39.0133 4376 swenum - ok਍ഀ
10:39:39.0191 4376 Tcpip (fc62769e7bff2896035aeed399108162) C:\Windows\system32\drivers\tcpip.sys਍ഀ
10:39:39.0217 4376 Tcpip - ok਍ഀ
10:39:39.0257 4376 TCPIP6 (fc62769e7bff2896035aeed399108162) C:\Windows\system32\DRIVERS\tcpip.sys਍ഀ
10:39:39.0264 4376 TCPIP6 - ok਍ഀ
10:39:39.0297 4376 tcpipreg (df687e3d8836bfb04fcc0615bf15a519) C:\Windows\system32\drivers\tcpipreg.sys਍ഀ
10:39:39.0298 4376 tcpipreg - ok਍ഀ
10:39:39.0320 4376 TDPIPE (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers\tdpipe.sys਍ഀ
10:39:39.0323 4376 TDPIPE - ok਍ഀ
10:39:39.0334 4376 TDTCP (e4245bda3190a582d55ed09e137401a9) C:\Windows\system32\drivers\tdtcp.sys਍ഀ
10:39:39.0337 4376 TDTCP - ok਍ഀ
10:39:39.0395 4376 tdx (ddad5a7ab24d8b65f8d724f5c20fd806) C:\Windows\system32\DRIVERS\tdx.sys਍ഀ
10:39:39.0399 4376 tdx - ok਍ഀ
10:39:39.0432 4376 TermDD (561e7e1f06895d78de991e01dd0fb6e5) C:\Windows\system32\drivers\termdd.sys਍ഀ
10:39:39.0434 4376 TermDD - ok਍ഀ
10:39:39.0477 4376 tssecsrv (ce18b2cdfc837c99e5fae9ca6cba5d30) C:\Windows\system32\DRIVERS\tssecsrv.sys਍ഀ
10:39:39.0478 4376 tssecsrv - ok਍ഀ
10:39:39.0525 4376 TsUsbFlt (d11c783e3ef9a3c52c0ebe83cc5000e9) C:\Windows\system32\drivers\tsusbflt.sys਍ഀ
10:39:39.0528 4376 TsUsbFlt - ok਍ഀ
10:39:39.0567 4376 tunnel (3566a8daafa27af944f5d705eaa64894) C:\Windows\system32\DRIVERS\tunnel.sys਍ഀ
10:39:39.0569 4376 tunnel - ok਍ഀ
10:39:39.0593 4376 uagp35 (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\DRIVERS\uagp35.sys਍ഀ
10:39:39.0595 4376 uagp35 - ok਍ഀ
10:39:39.0618 4376 udfs (ff4232a1a64012baa1fd97c7b67df593) C:\Windows\system32\DRIVERS\udfs.sys਍ഀ
10:39:39.0618 4376 udfs - ok਍ഀ
10:39:39.0658 4376 uliagpkx (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\drivers\uliagpkx.sys਍ഀ
10:39:39.0660 4376 uliagpkx - ok਍ഀ
10:39:39.0679 4376 umbus (dc54a574663a895c8763af0fa1ff7561) C:\Windows\system32\drivers\umbus.sys਍ഀ
10:39:39.0681 4376 umbus - ok਍ഀ
10:39:39.0692 4376 UmPass (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\DRIVERS\umpass.sys਍ഀ
10:39:39.0693 4376 UmPass - ok਍ഀ
10:39:39.0734 4376 usbaudio (82e8f44688e6fac57b5b7c6fc7adbc2a) C:\Windows\system32\drivers\usbaudio.sys਍ഀ
10:39:39.0736 4376 usbaudio - ok਍ഀ
10:39:39.0755 4376 usbccgp (6f1a3157a1c89435352ceb543cdb359c) C:\Windows\system32\DRIVERS\usbccgp.sys਍ഀ
10:39:39.0757 4376 usbccgp - ok਍ഀ
10:39:39.0788 4376 usbcir (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\drivers\usbcir.sys਍ഀ
10:39:39.0790 4376 usbcir - ok਍ഀ
10:39:39.0810 4376 usbehci (c025055fe7b87701eb042095df1a2d7b) C:\Windows\system32\DRIVERS\usbehci.sys਍ഀ
10:39:39.0812 4376 usbehci - ok਍ഀ
10:39:39.0842 4376 usbhub (287c6c9410b111b68b52ca298f7b8c24) C:\Windows\system32\DRIVERS\usbhub.sys਍ഀ
10:39:39.0846 4376 usbhub - ok਍ഀ
10:39:39.0859 4376 usbohci (9840fc418b4cbd632d3d0a667a725c31) C:\Windows\system32\DRIVERS\usbohci.sys਍ഀ
10:39:39.0860 4376 usbohci - ok਍ഀ
10:39:39.0893 4376 usbprint (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS\usbprint.sys਍ഀ
10:39:39.0896 4376 usbprint - ok਍ഀ
10:39:39.0921 4376 usbscan (aaa2513c8aed8b54b189fd0c6b1634c0) C:\Windows\system32\DRIVERS\usbscan.sys਍ഀ
10:39:39.0924 4376 usbscan - ok਍ഀ
10:39:39.0947 4376 USBSTOR (fed648b01349a3c8395a5169db5fb7d6) C:\Windows\system32\DRIVERS\USBSTOR.SYS਍ഀ
10:39:39.0949 4376 USBSTOR - ok਍ഀ
10:39:39.0970 4376 usbuhci (62069a34518bcf9c1fd9e74b3f6db7cd) C:\Windows\system32\drivers\usbuhci.sys਍ഀ
10:39:39.0971 4376 usbuhci - ok਍ഀ
10:39:39.0996 4376 vdrvroot (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\drivers\vdrvroot.sys਍ഀ
10:39:39.0998 4376 vdrvroot - ok਍ഀ
10:39:40.0021 4376 vga (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys਍ഀ
10:39:40.0022 4376 vga - ok਍ഀ
10:39:40.0031 4376 VgaSave (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys਍ഀ
10:39:40.0033 4376 VgaSave - ok਍ഀ
10:39:40.0049 4376 vhdmp (2ce2df28c83aeaf30084e1b1eb253cbb) C:\Windows\system32\drivers\vhdmp.sys਍ഀ
10:39:40.0051 4376 vhdmp - ok਍ഀ
10:39:40.0080 4376 viaide (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\drivers\viaide.sys਍ഀ
10:39:40.0081 4376 viaide - ok਍ഀ
10:39:40.0094 4376 volmgr (d2aafd421940f640b407aefaaebd91b0) C:\Windows\system32\drivers\volmgr.sys਍ഀ
10:39:40.0096 4376 volmgr - ok਍ഀ
10:39:40.0124 4376 volmgrx (a255814907c89be58b79ef2f189b843b) C:\Windows\system32\drivers\volmgrx.sys਍ഀ
10:39:40.0128 4376 volmgrx - ok਍ഀ
10:39:40.0146 4376 volsnap (0d08d2f3b3ff84e433346669b5e0f639) C:\Windows\system32\drivers\volsnap.sys਍ഀ
10:39:40.0147 4376 volsnap - ok਍ഀ
10:39:40.0170 4376 vsmraid (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\DRIVERS\vsmraid.sys਍ഀ
10:39:40.0172 4376 vsmraid - ok਍ഀ
10:39:40.0191 4376 vwifibus (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\System32\drivers\vwifibus.sys਍ഀ
10:39:40.0193 4376 vwifibus - ok਍ഀ
10:39:40.0259 4376 VX3000 (c366ae91d2cc2c1c25380061d235c36b) C:\Windows\system32\DRIVERS\VX3000.sys਍ഀ
10:39:40.0285 4376 VX3000 - ok਍ഀ
10:39:40.0304 4376 WacomPen (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\DRIVERS\wacompen.sys਍ഀ
10:39:40.0305 4376 WacomPen - ok਍ഀ
10:39:40.0346 4376 WANARP (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys਍ഀ
10:39:40.0350 4376 WANARP - ok਍ഀ
10:39:40.0363 4376 Wanarpv6 (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys਍ഀ
10:39:40.0365 4376 Wanarpv6 - ok਍ഀ
10:39:40.0395 4376 Wd (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\DRIVERS\wd.sys਍ഀ
10:39:40.0396 4376 Wd - ok਍ഀ
10:39:40.0414 4376 Wdf01000 (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys਍ഀ
10:39:40.0421 4376 Wdf01000 - ok਍ഀ
10:39:40.0454 4376 WfpLwf (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys਍ഀ
10:39:40.0456 4376 WfpLwf - ok਍ഀ
10:39:40.0475 4376 WIMMount (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys਍ഀ
10:39:40.0476 4376 WIMMount - ok਍ഀ
10:39:40.0538 4376 WinUsb (fe88b288356e7b47b74b13372add906d) C:\Windows\system32\DRIVERS\WinUsb.sys਍ഀ
10:39:40.0540 4376 WinUsb - ok਍ഀ
10:39:40.0573 4376 WmiAcpi (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\drivers\wmiacpi.sys਍ഀ
10:39:40.0576 4376 WmiAcpi - ok਍ഀ
10:39:40.0617 4376 ws2ifsl (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys਍ഀ
10:39:40.0619 4376 ws2ifsl - ok਍ഀ
10:39:40.0657 4376 WudfPf (d3381dc54c34d79b22cee0d65ba91b7c) C:\Windows\system32\drivers\WudfPf.sys਍ഀ
10:39:40.0657 4376 WudfPf - ok਍ഀ
10:39:40.0672 4376 WUDFRd (cf8d590be3373029d57af80914190682) C:\Windows\system32\DRIVERS\WUDFRd.sys਍ഀ
10:39:40.0688 4376 WUDFRd - ok਍ഀ
10:39:40.0718 4376 MBR (0x1B8) (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk0\DR0਍ഀ
10:39:40.0766 4376 \Device\Harddisk0\DR0 - ok਍ഀ
10:39:40.0769 4376 MBR (0x1B8) (8f558eb6672622401da993e1e865c861) \Device\Harddisk1\DR1਍ഀ
10:39:40.0816 4376 \Device\Harddisk1\DR1 - ok਍ഀ
10:39:40.0824 4376 MBR (0x1B8) (27c1aaac93ae07687ff20e9d03d646c2) \Device\Harddisk2\DR4਍ഀ
10:39:50.0869 4376 \Device\Harddisk2\DR4 - ok਍ഀ
10:39:50.0875 4376 Boot (0x1200) (322af39903296e61da2089dfc090916a) \Device\Harddisk0\DR0\Partition0਍ഀ
10:39:50.0877 4376 \Device\Harddisk0\DR0\Partition0 - ok਍ഀ
10:39:50.0896 4376 Boot (0x1200) (a030704dfc7c4eb70a77ab3fffce27f7) \Device\Harddisk0\DR0\Partition1਍ഀ
10:39:50.0897 4376 \Device\Harddisk0\DR0\Partition1 - ok਍ഀ
10:39:50.0899 4376 Boot (0x1200) (f5aeb47801e21645835037cd7ff1f14d) \Device\Harddisk1\DR1\Partition0਍ഀ
10:39:50.0900 4376 \Device\Harddisk1\DR1\Partition0 - ok਍ഀ
10:39:50.0901 4376 ============================================================਍ഀ
10:39:50.0901 4376 Scan finished਍ഀ
10:39:50.0901 4376 ============================================================਍ഀ
10:39:50.0908 1972 Detected object count: 0਍ഀ
10:39:50.0908 1972 Actual detected object count: 0਍ഀ
jeffce's Avatar
jeffce   (Jeff) jeffce is offline jeffce is authorized to help remove malware.
jeffce has a Photo Album
Malware Removal Specialist with 1,727 posts.
 
Join Date: May 2011
03-Feb-2012, 03:16 PM #11
Hi matrix,
  • Please open Notepad (Start -> Run -> type notepad in the Open field -> OK) and copy and paste the text present inside the code box below:
    Code:
    ClearJavaCache::
    
    DDS::
    uInternet Settings,ProxyServer = http=;ftp=;https=;
    StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\GOMEZP~1.LNK - C:\Program Files (x86)\Gomez\GomezPEER\bin\GomezPEER.exe
    BHO-X64: AcroIEHelperStub - No File
    
    Folder::
    C:\Users\Christopher\AppData\Local\{71693CC0-9151-4D3A-8C8B-42A3F2470990}
    C:\Users\Christopher\AppData\Local\{7710D764-EEF6-4ADD-A4ED-412719178347}
    C:\Users\Christopher\AppData\Local\{877FFD6A-5F3B-4DB6-ABFF-81A178CF6CD4}
    C:\Users\Christopher\AppData\Local\{9F9FA987-9B6D-4724-98F9-D6B1E23E867B}
    C:\Users\Christopher\AppData\Local\{0E1B863D-291F-4E51-BBEF-3CEA5ED88700}
    C:\Users\Christopher\AppData\Local\{B90B74A3-76BD-4A05-9D35-EA888F126171}
    C:\Users\Christopher\AppData\Local\{9D22CCB4-0022-4808-92F6-CC2B0AC01D3F}
    C:\Users\Christopher\AppData\Local\{50141784-1CAA-4D4E-B884-F7B6F3DF29E0}
    C:\Users\Christopher\AppData\Local\{FB760361-7314-4AF7-AF89-FA735CD21BE2}
    C:\Users\Christopher\AppData\Local\{23C7B086-D585-4B89-857E-8CC75977FD7B}
    C:\Users\Christopher\AppData\Local\{27B062C5-7975-40AD-8AF8-3765F2F2B003}
    
    DirLook::
    C:\temp4
    c:\program files (x86)\Eligium
    
    RegLock::
    [HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\Approved Extensions]
    [HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\ApprovedExtensionsMigration]
  • Save this as CFScript.txt and change the "Save as type" to "All Files" and place it on your desktop.


  • Very Important! Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before following the steps below. They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results".
  • Referring to the screenshot above, drag CFScript.txt into ComboFix.exe.
  • ComboFix will now run a scan on your system. It may reboot your system when it finishes. This is normal.
  • When finished, it shall produce a log for you. Copy and paste the contents of the log in your next reply.
CAUTION: Do not mouse-click ComboFix's window while it is running. That may cause it to stall.
----------
jeffce's Avatar
jeffce   (Jeff) jeffce is offline jeffce is authorized to help remove malware.
jeffce has a Photo Album
Malware Removal Specialist with 1,727 posts.
 
Join Date: May 2011
12-Feb-2012, 12:01 PM #12
Due to lack of response...I will be unsubscribing from this topic.
As Seen On

BBC, Reader's Digest, PC Magazine, Today Show, Money Magazine
WELCOME TO TECH SUPPORT GUY!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.


(clock)
THIS THREAD HAS EXPIRED.
Are you having the same problem? We have volunteers ready to answer your question, but first you'll have to join for free. Need help getting started? Check out our Welcome Guide.

Search Tech Support Guy

Find the solution to your
computer problem!




Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools


WELCOME
You Are Using: Server ID
Trusted Website Back to the Top ↑