1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

Search Redirect Virus - getting worse.

Discussion in 'Virus & Other Malware Removal' started by 07tcbsp, Feb 26, 2012.

Thread Status:
Not open for further replies.
Advertisement
  1. 07tcbsp

    07tcbsp Thread Starter

    Joined:
    Apr 10, 2007
    Messages:
    47
    I posted a while back for some help on this, but now the issue is getting worse. With any browser I use, and any search engine I use, I get redirected to another site. If I am quick enough I can use the back button to navigate back to the intended site. It is starting to get to the point where searches are REALLY slow and redirect constantly. I've tried running Malware Bytes, SUPER anti spyware, and ad-aware. Everything says ok. Cleared all my temp folders/files and tried adjusting my startup cfg through msconfig. About the only other thing I notice is that every time I start my computer, there is a screen that pops up and closes so quick I cannot even tell what it is. All I can tell is that the box is a blank white.

    My System:
    Windows 7 64bit
    intel i3-550
    6gb of ram
    Its an Oe Dell inspiron 580 with a cheap aftermarket gpu card.

    I use the computer mostly for gaming, but I also read e-mails, browse the net, and use it for media purposes.

    As per the first sticky post in this sub-forum, here is my HiJack this log:

    Logfile of Trend Micro HijackThis v2.0.4
    Scan saved at 7:01:20 PM, on 2/26/2012
    Platform: Windows 7 (WinNT 6.00.3504)
    MSIE: Internet Explorer v9.00 (9.00.8112.16421)
    Boot mode: Normal

    Running processes:
    C:\Program Files\Dell\DellDock\DockLogin.exe
    C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWService.exe
    C:\Program Files (x86)\Games\Steam\Steam.exe
    C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
    C:\Program Files\DAEMON Tools Lite\DTLite.exe
    C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
    C:\Program Files (x86)\Games\Gbridge LLC\Gbridge\pstartw.exe
    C:\Program Files (x86)\Games\Gbridge LLC\Gbridge\Gbridge.exe
    C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
    C:\Program Files (x86)\TightVNC\tvnserver.exe
    C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWTray.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Program Files\Mozilla Firefox\plugin-container.exe
    C:\Program Files\BitTorrent\BitTorrent.exe
    C:\Program Files\Games\Diablo II\Game.exe
    C:\Program Files (x86)\Google\Google Earth\client\googleearth.exe
    C:\Program Files (x86)\HijackThis\Trend Micro\HiJackThis\HiJackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://g.msn.com/USCON/1
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
    R3 - URLSearchHook: (no name) - {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - (no file)
    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
    O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
    O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (file missing)
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.6.0_22\bin\jp2ssv.dll (file missing)
    O4 - HKLM\..\Run: [tvncontrol] "C:\Program Files (x86)\TightVNC\tvnserver.exe" -controlservice -slave
    O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
    O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Games\Steam\steam.exe" -silent
    O4 - HKCU\..\Run: [BitTorrent] "C:\Program Files\BitTorrent\BitTorrent.exe" /MINIMIZED
    O4 - HKCU\..\Run: [Pando Media Booster] C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
    O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
    O4 - HKCU\..\Run: [Google Update] "C:\Users\Computer 2\AppData\Local\Google\Update\GoogleUpdate.exe" /c
    O4 - HKCU\..\Run: [7BB5BD2A71B624D69C472CCBFE6114951D56C5E2._service_run] "C:\Users\Computer 2\AppData\Local\Google\Chrome\Application\chrome.exe" --type=service
    O4 - HKCU\..\Run: [Gbridge] "C:\Program Files (x86)\Games\Gbridge LLC\Gbridge\pstartw.exe" "C:\Program Files (x86)\Games\Gbridge LLC\Gbridge\Gbridge.exe" -autostart
    O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
    O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
    O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
    O4 - HKUS\S-1-5-18\..\RunOnce: [adaware] reg.exe delete "HKCU\Software\AppDataLow\Software\adaware" /f (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\RunOnce: [adaware] reg.exe delete "HKCU\Software\AppDataLow\Software\adaware" /f (User 'Default user')
    O4 - .DEFAULT User Startup: Dell Dock First Run.lnk = C:\Program Files\Dell\DellDock\DellDock.exe (User 'Default user')
    O4 - Startup: Dell Dock.lnk = C:\Program Files\Dell\DellDock\DellDock.exe
    O9 - Extra button: @C:\Program Files (x86)\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
    O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
    O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
    O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
    O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
    O15 - Trusted IP range: http://192.168.0.1
    O15 - ESC Trusted IP range: http://192.168.0.1
    O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
    O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
    O23 - Service: SAS Core Service (!SASCORE) - SUPERAntiSpyware.com - C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
    O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
    O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
    O23 - Service: Dock Login Service (DockLoginService) - Stardock Corporation - C:\Program Files\Dell\DellDock\DockLogin.exe
    O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
    O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
    O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
    O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
    O23 - Service: Hi-Rez Studios Authenticate and Update Service (HiPatchService) - Hi-Rez Studios - C:\Program Files (x86)\Games\Hi-Rez Studios\HiPatchService.exe
    O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
    O23 - Service: Lavasoft Ad-Aware Service - Lavasoft Limited - C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWService.exe
    O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
    O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
    O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
    O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
    O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
    O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
    O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
    O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
    O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
    O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
    O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
    O23 - Service: TightVNC Server (tvnserver) - GlavSoft LLC. - C:\Program Files (x86)\TightVNC\tvnserver.exe
    O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
    O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
    O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
    O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
    O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
    O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
    O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
    O23 - Service: Wyse PocketCloud (WysePocketCloud) - Unknown owner - C:\Program Files (x86)\Wyse\PocketCloud Windows Companion\PocketCloudService.exe

    --
    End of file - 9397 bytes

    Also as per the first sticky post in this sub-forum, my DDS log is on standby. I did not run GMER as I am on a 64 bit os.

    I want to thank anyone in advanced for their help.

    THANK YOU!
     
  2. 07tcbsp

    07tcbsp Thread Starter

    Joined:
    Apr 10, 2007
    Messages:
    47
  3. 07tcbsp

    07tcbsp Thread Starter

    Joined:
    Apr 10, 2007
    Messages:
    47
  4. mambass

    mambass

    Joined:
    Apr 11, 2008
    Messages:
    141
    Hi 07tcbsp, :)

    Welcome to the Tech Support Guy's Virus & Other Malware Removal forum.

    My nickname is mambass and I'll be helping you with any malware problems.

    Before we begin...please read and follow these important guidelines so things will proceed smoothly.

    1. The instructions being given are for YOUR computer and system only!
      Using these instructions on a different computer can cause damage to that computer and possibly render it inoperable!
    2. Please read all instructions carefully before executing them and perform the steps in the order given.
      lf you have any questions or problems executing these instructions, <<STOP>> do not proceed but rather post back with the question or problem.
    3. Your security programs may give warnings for some of the tools I will ask you to use. Be assured that any links I give are safe.
    4. You must have Administrator rights permissions for this computer.
    5. DO NOT run any other fix or removal tools unless instructed to do so!
    6. DO NOT install any other software or hardware during the cleaning process. This adds more items to be researched.
    7. Only post your problem at one (1) help site. Applying fixes from multiple help sites can cause problems.
    8. Only reply to this thread. Do not start another thread.
    9. The absence of symptoms does not imply the absence of malware. Please, continue responding, until I give you the "All Clean".
    10. You might want to place a link to this thread in your Favorites/Bookmarks for easy access.
    11. The logs I request can take a while to research, so please be patient.
    12. I am currently in training at Malware Removal University. Each set of instructions that I provide will be reviewed by a faculty member before being posted to this thread. This process may add a small amount of time to my replies. On the positive side, you will have two people working together to resolve your malware issues.
    Because of this, I advise you to backup any personal files and folders before you start.

    How to back up or transfer your data on a Windows-based computer

    -----------------------------------------------------------

    I am currently reviewing your log and will return as soon as possible with additional instructions.

    Thanks,

    mambass
     
  5. mambass

    mambass

    Joined:
    Apr 11, 2008
    Messages:
    141
    Hi 07tcbsp, :)

    I'll be glad to work with you on this computer. This help is however conditional on your agreeing to the following:

    1. All P2P software much be removed
      The following P2P (Peer to Peer) programs appear to be installed on your computer:
      Please note whenever you use any form of P2P networking to download files you can anticipate infestations of malware to occur.
      P2P file sharing used to be fairly safe. This is no longer true. Continue to use P2P sharing at your own risk! Keep in mind that this practice may be the source of your current malware infestation.

      References citing the risk factors of using P2P programs:
      How to boost your malware defense and protect your PC
      How to Prevent the Online Invasion of Spyware and Adware

      I strongly recommend that you uninstall the programs identified above as well as any other P2P software that may be installed however that choice is up to you.
      • If you choose NOT to remove these programs, please indicate that in your next reply.
      • If you choose to remove the programs then perform the following steps:
        • Click Start > Control Panel and then double-click on Programs and Features.
        • Right-click BitTorrent, choose Uninstall/Change, and give permission to Continue.
        • Right-click BitTorrentBar Toolbar, choose Uninstall/Change, and give permission to Continue.
        • Right-click Pando Media Booster, choose Uninstall/Change, and give permission to Continue.
          Take extra care in answering questions posed by any Uninstaller.
        • Reboot (restart) your computer.

    2. Upgrade to SP1 after the computer has been cleaned
      The HiJackThis log indicates that you have Windows 7 installed without Service Pack 1 (SP1). Not keeping current with all security patches is an invitation for malware to infect your system. DO NOT upgrade to SP1 at this time, however in your reply please indicate whether you are willing to upgrade to Windows 7 SP1 after your computer has been cleaned of malware.

    If you agree to both of the above conditions then please perform the following step.

    • Run a Scan with OTL
      1. Click here to download OTL.exe by Old Timer and save it to your Desktop.
      2. Right-click the OTL icon on your Desktop and select Run As Administrator to run the program.
      3. Check the boxes labeled :
        • Include 64 bit scans
        • Scan All Users
        • LOP check
        • Purity check
        • Extra Registry > Use SafeList
      4. Make sure all other windows are closed so that it can run uninterrupted.
      5. Click on the Run Scan button at the top left hand corner. Do not change any settings unless otherwise told to do so. The scan won't take long.
      6. When the scan completes, it will open two notepad windows. OTL.Txt will be displayed and Extras.Txt will be minimized. These are saved in the same location as OTL. (desktop)
      7. Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time, and post them as a reply. Use separate replies if more convenient.


    Please include in your reply:
    1. The text of any error messages and/or a description of any problems you encountered while performing these steps.
    2. Your agreement to upgrade to SP1 after your computer has been cleaned of malware.
    3. The contents of the OTL.txt and Extras.txt logs.


    mambass
     
  6. 07tcbsp

    07tcbsp Thread Starter

    Joined:
    Apr 10, 2007
    Messages:
    47
    Thank you for the reply.

    I uninstalled both BitTorrent and Pando Media Booster, although I am not entirely sure why the latter had been installed on my computer.

    I am more than willing to update my Windows to SP1 once this is taken care of. I usually keep my computers well up to date.

    Everything went pretty smoothly, although there was a 3-5 second hang up in OTL when it got to "Scanning Module: Appid"
    (I don't really thing this was abnormal, although windows did deem this hang as "program not responding")

    I am going to upload the contents of OTL.txt in an attachment as it seems the website won't let me copy/paste the lengthy contents of it in a post.

    Thank you for your help.

    Here is the contents of Extras.txt:

    OTL Extras logfile created on: 3/11/2012 5:34:21 PM - Run 1
    OTL by OldTimer - Version 3.2.36.3 Folder = C:\Users\Computer 2\Downloads
    64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
    Internet Explorer (Version = 9.0.8112.16421)
    Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

    5.87 Gb Total Physical Memory | 3.97 Gb Available Physical Memory | 67.70% Memory free
    11.73 Gb Paging File | 9.82 Gb Available in Paging File | 83.74% Paging File free
    Paging file location(s): ?:\pagefile.sys [binary data]

    %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
    Drive C: | 685.79 Gb Total Space | 461.17 Gb Free Space | 67.25% Space Free | Partition Type: NTFS
    Drive I: | 1863.01 Gb Total Space | 1109.31 Gb Free Space | 59.54% Space Free | Partition Type: NTFS
    Drive J: | 177.57 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS

    Computer Name: PC1 | User Name: Computer 2 | Logged in as Administrator.
    Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
    Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

    ========== Extra Registry (SafeList) ==========


    ========== File Associations ==========

    64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
    .html[@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
    .url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
    .cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
    .html [@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)

    [HKEY_USERS\S-1-5-21-302620351-3888842133-4152310273-1001\SOFTWARE\Classes\<extension>]
    .html [@ = htmlfile] -- Reg Error: Key error. File not found

    ========== Shell Spawning ==========

    64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
    batfile [open] -- "%1" %*
    cmdfile [open] -- "%1" %*
    comfile [open] -- "%1" %*
    exefile [open] -- "%1" %*
    helpfile [open] -- Reg Error: Key error.
    htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" -nohome (Microsoft Corporation)
    htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
    inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
    InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
    InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
    piffile [open] -- "%1" %*
    regfile [merge] -- Reg Error: Key error.
    scrfile [config] -- "%1"
    scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
    scrfile [open] -- "%1" /S
    txtfile [edit] -- Reg Error: Key error.
    Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
    Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
    Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
    Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
    Folder [explore] -- Reg Error: Value error.
    Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
    batfile [open] -- "%1" %*
    cmdfile [open] -- "%1" %*
    comfile [open] -- "%1" %*
    cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
    exefile [open] -- "%1" %*
    helpfile [open] -- Reg Error: Key error.
    htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" -nohome (Microsoft Corporation)
    htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
    inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
    piffile [open] -- "%1" %*
    regfile [merge] -- Reg Error: Key error.
    scrfile [config] -- "%1"
    scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
    scrfile [open] -- "%1" /S
    txtfile [edit] -- Reg Error: Key error.
    Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
    Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
    Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
    Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
    Folder [explore] -- Reg Error: Value error.
    Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

    ========== Security Center Settings ==========

    64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
    "cval" = 1

    64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

    64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
    "VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
    "AntiVirusOverride" = 0
    "AntiSpywareOverride" = 0
    "FirewallOverride" = 0

    64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

    ========== System Restore Settings ==========

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
    "DisableSR" = 0

    ========== Firewall Settings ==========

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
    "DisableNotifications" = 0
    "EnableFirewall" = 1

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
    "DisableNotifications" = 0
    "EnableFirewall" = 1

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
    "DisableNotifications" = 0
    "EnableFirewall" = 1

    ========== Authorized Applications List ==========


    ========== HKEY_LOCAL_MACHINE Uninstall List ==========

    64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
    "{071c9b48-7c32-4621-a0ac-3f809523288f}" = Microsoft Visual C++ 2005 Redistributable (x64)
    "{1B8ABA62-74F0-47ED-B18C-A43128E591B8}" = Windows Live ID Sign-in Assistant
    "{3D3E663D-4E7E-4577-A560-7ECDDD45548A}" = PVSonyDll
    "{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
    "{5EB6F3CB-46F4-451F-A028-7F6D8D35D7D0}" = Windows Live Language Selector
    "{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
    "{656DEEDE-F6AC-47CA-A568-A1B4E34B5760}" = Windows Live Remote Service Resources
    "{847B0532-55E3-4AAF-8D7B-E3A1A7CD17E5}" = Windows Live Remote Client Resources
    "{8EBA8727-ADC2-477B-9D9A-1A1836BE4E05}" = Dell Edoc Viewer
    "{90140000-0018-0000-1000-0000000FF1CE}" = Microsoft Office PowerPoint 2010
    "{90140000-0018-0000-1000-0000000FF1CE}_Office14.POWERPOINT_{7BC9B5EB-125A-4E9B-97E1-8D85B5E960B8}" = Microsoft Office 2010 Service Pack 1 (SP1)
    "{90140000-0018-0409-1000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2010
    "{90140000-0018-0409-1000-0000000FF1CE}_Office14.POWERPOINT_{EC583796-6BBB-47DD-B9CE-B5DA12D71135}" = Microsoft Office 2010 Service Pack 1 (SP1)
    "{90140000-001F-0409-1000-0000000FF1CE}" = Microsoft Office Proof (English) 2010
    "{90140000-001F-0409-1000-0000000FF1CE}_Office14.POWERPOINT_{0242505C-4E90-407F-9299-B5B275F50D86}" = Microsoft Office 2010 Service Pack 1 (SP1)
    "{90140000-001F-040C-1000-0000000FF1CE}" = Microsoft Office Proof (French) 2010
    "{90140000-001F-040C-1000-0000000FF1CE}_Office14.POWERPOINT_{B51389C8-2890-4633-81D8-47D2A7402274}" = Microsoft Office 2010 Service Pack 1 (SP1)
    "{90140000-001F-0C0A-1000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2010
    "{90140000-001F-0C0A-1000-0000000FF1CE}_Office14.POWERPOINT_{1779650B-2E44-4A19-8DF6-3866D645764A}" = Microsoft Office 2010 Service Pack 1 (SP1)
    "{90140000-002C-0409-1000-0000000FF1CE}" = Microsoft Office Proofing (English) 2010
    "{90140000-002C-0409-1000-0000000FF1CE}_Office14.POWERPOINT_{270CA0B9-9881-44DB-BC3B-37C7E66A044A}" = Microsoft Office 2010 Service Pack 1 (SP1)
    "{90140000-0043-0000-1000-0000000FF1CE}" = Microsoft Office Office 32-bit Components 2010
    "{90140000-0043-0000-1000-0000000FF1CE}_Office14.POWERPOINT_{E8B6D35B-0B6F-4DCE-9493-859BF3809A7F}" = Microsoft Office 2010 Service Pack 1 (SP1)
    "{90140000-0043-0409-1000-0000000FF1CE}" = Microsoft Office Shared 32-bit MUI (English) 2010
    "{90140000-0043-0409-1000-0000000FF1CE}_Office14.POWERPOINT_{FCD1C311-8B02-4DBD-BA46-1079C629577E}" = Microsoft Office 2010 Service Pack 1 (SP1)
    "{90140000-006E-0409-1000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2010
    "{90140000-006E-0409-1000-0000000FF1CE}_Office14.POWERPOINT_{516CA4A9-98E6-4F77-A863-CBD8487368E4}" = Microsoft Office 2010 Service Pack 1 (SP1)
    "{90140000-0115-0409-1000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2010
    "{90140000-0115-0409-1000-0000000FF1CE}_Office14.POWERPOINT_{516CA4A9-98E6-4F77-A863-CBD8487368E4}" = Microsoft Office 2010 Service Pack 1 (SP1)
    "{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
    "{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}" = Microsoft Visual C++ 2005 Redistributable (x64)
    "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision" = NVIDIA 3D Vision Driver 260.99
    "{B2FE1952-0186-46c3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = NVIDIA Control Panel 260.99
    "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Graphics Driver 260.99
    "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA PhysX System Software 9.10.0514
    "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver" = NVIDIA HD Audio Driver 1.1.9.0
    "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
    "{B6E3757B-5E77-3915-866A-CCFC4B8D194C}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053
    "{C73A3942-84C8-4597-9F9B-EE227DCBA758}" = Dell Dock
    "{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}" = SUPERAntiSpyware
    "{DA54F80E-261C-41A2-A855-549A144F2F59}" = Windows Live MIME IFilter
    "{DF6D988A-EEA0-4277-AAB8-158E086E439B}" = Windows Live Remote Client
    "{E02A6548-6FDE-40E2-8ED9-119D7D7E641F}" = Windows Live Remote Service
    "{EEB3F6BB-318D-4CE5-989F-8191FCBFB578}" = Ventrilo Client for Windows x64
    "{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
    "Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX 64-bit
    "Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin 64-bit
    "Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
    "Office14.POWERPOINT" = Microsoft PowerPoint 2010

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
    "{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
    "{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
    "{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
    "{19BA08F7-C728-469C-8A35-BFBD3633BE08}" = Windows Live Movie Maker
    "{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
    "{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update
    "{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
    "{23B4636C-A780-4FEB-B4C9-A2564E9B9F7C}" = Multimedia Card Reader
    "{2902F983-B4C1-44BA-B85D-5C6D52E2C441}" = Windows Live Mesh ActiveX Control for Remote Connections
    "{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
    "{34F4D9A4-42C2-4348-BEF4-E553C84549E7}" = Windows Live Photo Gallery
    "{3C7839E7-21F4-49E0-B4D5-AC8ED818CCB0}" = NETGEAR WNDA3100v2 wireless USB 2.0 adapter
    "{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF010}" = Tribes Ascend Closed Beta
    "{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC}" = Hi-Rez Studios Authenticate and Update Service
    "{3E171899-0175-47CC-84C4-562ACDD4C021}" = OpenOffice.org 3.3
    "{45A66726-69BC-466B-A7A4-12FCBA4883D7}" = HiJackThis
    "{4CB0307C-565E-4441-86BE-0DF2E4FB828C}" = Microsoft Games for Windows Marketplace
    "{4CBABDFD-49F8-47FD-BE7D-ECDE7270525A}" = Windows Live PIMT Platform
    "{50816F92-1652-4A7C-B9BC-48F682742C4B}" = Messenger Companion
    "{5A3C1721-F8ED-11E0-8AFB-B8AC6F97B88E}" = Google Earth
    "{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
    "{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
    "{6A05FEDF-662E-46BF-8A25-010E3F1C9C69}" = Windows Live UX Platform Language Pack
    "{6F3D2F66-F050-45E3-BEB1-6523FE6D6690}" = MotoHelper MergeModules
    "{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
    "{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
    "{72DF62BD-FF36-424E-AA5F-D89BAFF2C249}" = RollerCoaster Tycoon 2
    "{77C84C38-E592-4A33-AB99-FA524120452F}" = Ad-Aware
    "{78A96B4C-A643-4D0F-98C2-A8E16A6669F9}" = Windows Live Messenger Companion Core
    "{80956555-A512-4190-9CAD-B000C36D6B6B}" = Windows Live Messenger
    "{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
    "{83A606F5-BF6F-42ED-9F33-B9F74297CDED}" = Need for Speed(TM) Hot Pursuit
    "{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
    "{8C6D6116-B724-4810-8F2D-D047E6B7D68E}" = Mesh Runtime
    "{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
    "{909F8EBC-EC7F-48FF-0085-475D818F0F31}" = Need for Speed Underground 2
    "{92606477-9366-4D3B-8AE3-6BE4B29727AB}" = League of Legends
    "{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
    "{95140000-0070-0000-0000-0000000FF1CE}" = Microsoft Office 2010
    "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
    "{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
    "{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
    "{A0C91188-C88F-4E86-93E6-CD7C9A266649}" = Windows Live Mesh
    "{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer
    "{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
    "{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
    "{AA31EA7B-7917-4000-949B-38E91F848A25}" = Internet Explorer
    "{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
    "{AAF454FC-82CA-4F29-AB31-6A109485E76E}" = Windows Live Writer
    "{AC76BA86-7AD7-1033-7B44-AA1000000001}" = Adobe Reader X (10.1.2)
    "{B1AD83A0-DC92-41E3-B111-E9472349768C}" = RollerCoaster Tycoon 2: Wacky Worlds
    "{B4E343DD-BAAB-4D59-AD9C-DEA0AFE09DF1}" = Mumble 1.2.3
    "{B700113B-24A8-4D4C-8484-0CC944F764C8}" = Google SketchUp 8
    "{B9DB4C76-01A4-46D5-8910-F7AA6376DBAF}" = NVIDIA PhysX
    "{BA1E1AFD-D1F2-4C52-88C3-186FC5E61604}" = RollerCoaster Tycoon 2: Time Twister
    "{C66824E4-CBB3-4851-BB3F-E8CFD6350923}" = Windows Live Mail
    "{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
    "{D0B44725-3666-492D-BEF6-587A14BD9BD9}" = MSVCRT_amd64
    "{D24DB8B9-BB6C-4334-9619-BA1C650E13D3}" = Microsoft Primary Interoperability Assemblies 2005
    "{D436F577-1695-4D2F-8B44-AC76C99E0002}" = Windows Live Photo Common
    "{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
    "{DDC8BDEE-DCAC-404D-8257-3E8D4B782467}" = Windows Live Writer Resources
    "{DECDCB7C-58CC-4865-91AF-627F9798FE48}" = Windows Live Mesh
    "{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
    "{EB4DF488-AAEF-406F-A341-CB2AAA315B90}" = Windows Live Messenger
    "{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
    "{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}" = Intel(R) Graphics Media Accelerator Driver
    "{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
    "{F2508213-9989-4E85-A078-72BE483917EF}" = Microsoft Games for Windows - LIVE Redistributable
    "{FE044230-9CA5-43F7-9B58-5AC5A28A1F33}" = Windows Live Essentials
    "{FE23D063-934D-4829-A0D8-00634CE79B4A}" = Adobe AIR
    "{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
    "7-Zip" = 7-Zip 9.20
    "Ad-Aware Browsing Protection" = Ad-Aware Browsing Protection
    "Adobe AIR" = Adobe AIR
    "DAEMON Tools Lite" = DAEMON Tools Lite
    "Dell Dock" = Dell Dock
    "Diablo II" = Diablo II
    "FLV Player2.0.25" = FLV Player
    "Gbridge" = Gbridge (remove only)
    "Guild Wars" = Guild Wars
    "InstallShield_{23B4636C-A780-4FEB-B4C9-A2564E9B9F7C}" = Multimedia Card Reader
    "KLiteCodecPack_is1" = K-Lite Codec Pack 7.2.0 (Full)
    "Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware version 1.51.2.1300
    "Mozilla Firefox 10.0.2 (x86 en-US)" = Mozilla Firefox 10.0.2 (x86 en-US)
    "NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver
    "RealAlt_is1" = Real Alternative 2.0.2
    "RollerCoaster Tycoon Setup" = Roll
    "Simple Port Forwarding" = Simple Port Forwarding
    "ST6UNST #1" = Hero Editor V1.04
    "StarCraft II" = StarCraft II
    "Steam App 10" = Counter-Strike
    "Steam App 12100" = Grand Theft Auto III
    "Steam App 12110" = Grand Theft Auto: Vice City
    "Steam App 12120" = Grand Theft Auto: San Andreas
    "Steam App 12160" = Midnight Club II
    "Steam App 12190" = Wild Metal Country
    "Steam App 12210" = Grand Theft Auto IV
    "Steam App 12220" = Grand Theft Auto: Episodes from Liberty City
    "Steam App 15100" = Assassin's Creed
    "Steam App 17020" = Global Agenda
    "Steam App 17430" = Need for Speed: Undercover
    "Steam App 17510" = Age of Chivalry
    "Steam App 17520" = Synergy
    "Steam App 220" = Half-Life 2
    "Steam App 2310" = Quake
    "Steam App 240" = Counter-Strike: Source
    "Steam App 2400" = The Ship
    "Steam App 24870" = Need for Speed: SHIFT
    "Steam App 280" = Half-Life: Source
    "Steam App 30" = Day of Defeat
    "Steam App 300" = Day of Defeat: Source
    "Steam App 320" = Half-Life 2: Deathmatch
    "Steam App 3480" = Peggle Deluxe
    "Steam App 38830" = Crimecraft: BLEEDOUT
    "Steam App 400" = Portal
    "Steam App 440" = Team Fortress 2
    "Steam App 500" = Left 4 Dead
    "Steam App 550" = Left 4 Dead 2
    "Steam App 92000" = Hydrophobia: Prophecy
    "WinLiveSuite" = Windows Live Essentials

    ========== HKEY_USERS Uninstall List ==========

    [HKEY_USERS\S-1-5-21-302620351-3888842133-4152310273-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
    "Google Chrome" = Google Chrome

    ========== Last 10 Event Log Errors ==========

    Error reading Event Logs: The Event Service is not operating properly or the Event Logs are corrupt!

    < End of report >
     

    Attached Files:

    • OTL.Txt
      File size:
      420.9 KB
      Views:
      1
  7. mambass

    mambass

    Joined:
    Apr 11, 2008
    Messages:
    141
    Hi 07tcbsp,

    Thank you for the logs. :)

    I understand that the OTL.txt log was too big to post. I'm going to post it to this thread in multiple segments so that Teachers and others at my site can review that information.

    You do not need to take any action at this point. I will analyze the logs and post back a new set of instructions shortly.

    mambass




    OTL logfile created on: 3/11/2012 5:34:21 PM - Run 1
    OTL by OldTimer - Version 3.2.36.3 Folder = C:\Users\Computer 2\Downloads
    64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
    Internet Explorer (Version = 9.0.8112.16421)
    Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

    5.87 Gb Total Physical Memory | 3.97 Gb Available Physical Memory | 67.70% Memory free
    11.73 Gb Paging File | 9.82 Gb Available in Paging File | 83.74% Paging File free
    Paging file location(s): ?:\pagefile.sys [binary data]

    %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
    Drive C: | 685.79 Gb Total Space | 461.17 Gb Free Space | 67.25% Space Free | Partition Type: NTFS
    Drive I: | 1863.01 Gb Total Space | 1109.31 Gb Free Space | 59.54% Space Free | Partition Type: NTFS
    Drive J: | 177.57 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS

    Computer Name: PC1 | User Name: Computer 2 | Logged in as Administrator.
    Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
    Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

    ========== Processes (SafeList) ==========

    PRC - [2012/03/11 17:32:07 | 000,594,944 | ---- | M] (OldTimer Tools) -- C:\Users\Computer 2\Downloads\OTL.exe
    PRC - [2012/01/03 06:10:42 | 000,063,928 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
    PRC - [2011/12/11 22:42:58 | 002,152,152 | ---- | M] (Lavasoft Limited) -- C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWService.exe
    PRC - [2011/12/11 22:42:58 | 001,187,072 | ---- | M] (Lavasoft Limited) -- C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWTray.exe
    PRC - [2011/08/22 01:38:18 | 003,678,208 | ---- | M] (Gbridge LLC) -- C:\Program Files (x86)\Games\Gbridge LLC\Gbridge\Gbridge.exe
    PRC - [2011/08/07 09:58:04 | 001,242,448 | ---- | M] (Valve Corporation) -- C:\Program Files (x86)\Games\Steam\Steam.exe
    PRC - [2011/08/02 00:33:30 | 004,910,912 | ---- | M] (DT Soft Ltd) -- C:\Program Files\DAEMON Tools Lite\DTLite.exe
    PRC - [2010/10/16 12:46:40 | 000,369,256 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
    PRC - [2010/06/09 23:18:56 | 000,090,912 | ---- | M] () -- C:\Program Files (x86)\Games\Gbridge LLC\Gbridge\pstartw.exe
    PRC - [2009/06/09 07:11:14 | 000,155,648 | ---- | M] (Stardock Corporation) -- C:\Program Files\Dell\DellDock\DockLogin.exe


    ========== Modules (No Company Name) ==========

    MOD - [2012/02/23 22:21:15 | 014,415,144 | ---- | M] () -- C:\Program Files (x86)\Games\Steam\bin\libcef.dll
    MOD - [2012/02/23 22:21:09 | 000,914,216 | ---- | M] () -- C:\Program Files (x86)\Games\Steam\bin\avcodec-52.dll
    MOD - [2012/02/23 22:21:09 | 000,857,896 | ---- | M] () -- C:\Program Files (x86)\Games\Steam\bin\chromehtml.dll
    MOD - [2012/02/23 22:21:09 | 000,155,432 | ---- | M] () -- C:\Program Files (x86)\Games\Steam\bin\avformat-52.dll
    MOD - [2012/02/23 22:21:09 | 000,091,432 | ---- | M] () -- C:\Program Files (x86)\Games\Steam\bin\avutil-50.dll
    MOD - [2010/06/09 23:18:56 | 000,090,912 | ---- | M] () -- C:\Program Files (x86)\Games\Gbridge LLC\Gbridge\pstartw.exe


    ========== Win32 Services (SafeList) ==========

    SRV:64bit: - [2011/08/11 16:38:04 | 000,140,672 | ---- | M] (SUPERAntiSpyware.com) [Auto | Running] -- C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE -- (!SASCORE)
    SRV:64bit: - [2010/04/14 13:08:30 | 001,052,328 | ---- | M] ( ) [Disabled | Stopped] -- C:\Windows\SysNative\lxeccoms.exe -- (lxec_device)
    SRV:64bit: - [2009/07/13 18:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
    SRV:64bit: - [2009/06/09 07:11:14 | 000,155,648 | ---- | M] (Stardock Corporation) [Auto | Running] -- C:\Program Files\Dell\DellDock\DockLogin.exe -- (DockLoginService)
    SRV - [2012/02/20 21:26:30 | 000,008,704 | ---- | M] (Hi-Rez Studios) [Auto | Running] -- C:\Program Files (x86)\Games\Hi-Rez Studios\HiPatchService.exe -- (HiPatchService)
    SRV - [2012/01/03 06:10:42 | 000,063,928 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
    SRV - [2011/12/11 22:42:58 | 002,152,152 | ---- | M] (Lavasoft Limited) [Auto | Running] -- C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWService.exe -- (Lavasoft Ad-Aware Service)
    SRV - [2011/12/08 19:50:59 | 000,419,624 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
    SRV - [2011/05/05 23:22:36 | 000,066,872 | ---- | M] () [Disabled | Stopped] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)
    SRV - [2010/10/16 12:46:40 | 000,369,256 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
    SRV - [2010/08/19 15:25:00 | 000,272,864 | ---- | M] () [Disabled | Stopped] -- C:\Program Files (x86)\NETGEAR\WNDA3100v2\WifiSvc.exe -- (WSWNDA3100)
    SRV - [2010/03/18 14:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
    SRV - [2009/06/10 14:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)


    ========== Driver Services (SafeList) ==========

    DRV:64bit: - [2011/12/02 08:49:14 | 000,069,376 | ---- | M] (Lavasoft AB) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\Lbd.sys -- (Lbd)
    DRV:64bit: - [2011/08/11 20:28:18 | 000,526,392 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd)
    DRV:64bit: - [2011/07/22 09:26:56 | 000,014,928 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\sasdifsv64.sys -- (SASDIFSV)
    DRV:64bit: - [2011/07/12 14:55:18 | 000,012,368 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\saskutil64.sys -- (SASKUTIL)
    DRV:64bit: - [2011/03/10 23:22:41 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
    DRV:64bit: - [2011/03/10 23:22:40 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
    DRV:64bit: - [2010/09/07 13:08:55 | 000,155,752 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA)
    DRV:64bit: - [2010/04/01 07:47:10 | 010,322,848 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
    DRV:64bit: - [2010/02/27 08:32:14 | 000,158,976 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Impcd.sys -- (Impcd)
    DRV:64bit: - [2010/02/03 22:38:32 | 000,271,872 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud) Intel(R)
    DRV:64bit: - [2010/02/03 11:20:32 | 000,047,632 | ---- | M] (CACE Technologies, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\npf.sys -- (NPF)
    DRV:64bit: - [2009/11/06 08:40:26 | 000,838,136 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bcmwlhigh664.sys -- (BCMH43XX)
    DRV:64bit: - [2009/10/24 02:49:46 | 001,542,656 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr)
    DRV:64bit: - [2009/10/16 04:32:24 | 000,321,064 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\k57nd60a.sys -- (k57nd60a) Broadcom NetLink (TM)
    DRV:64bit: - [2009/10/12 22:54:50 | 000,048,192 | ---- | M] (Gbridge LLC) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\gbridge64.sys -- (gbridge)
    DRV:64bit: - [2009/09/17 13:54:54 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (HECIx64) Intel(R)
    DRV:64bit: - [2009/07/13 18:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
    DRV:64bit: - [2009/07/13 18:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
    DRV:64bit: - [2009/07/13 18:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
    DRV:64bit: - [2009/07/13 18:47:48 | 000,023,104 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
    DRV:64bit: - [2009/07/13 18:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
    DRV:64bit: - [2009/06/10 13:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
    DRV:64bit: - [2009/06/10 13:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
    DRV:64bit: - [2009/06/10 13:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
    DRV:64bit: - [2009/06/10 13:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
    DRV:64bit: - [2008/04/16 15:49:34 | 000,028,416 | ---- | M] (Research In Motion Limited) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RimUsb_AMD64.sys -- (RimUsb)
    DRV:64bit: - [2007/01/19 18:24:24 | 000,025,312 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\SCMNdisP.sys -- (SCMNdisP)
    DRV:64bit: - [2006/11/01 11:51:00 | 000,151,656 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WimFltr.sys -- (WimFltr)
    DRV - [2011/12/11 22:43:10 | 000,017,152 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Program Files (x86)\Lavasoft\Ad-Aware\kernexplorer64.sys -- (Lavasoft Kernexplorer)
    DRV - [2009/07/13 18:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)


    ========== Standard Registry (SafeList) ==========


    ========== Internet Explorer ==========

    IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {F75ECAE9-BE57-4F4A-8C98-DFF27153A019}
    IE:64bit: - HKLM\..\SearchScopes\{F75ECAE9-BE57-4F4A-8C98-DFF27153A019}: "URL" = http://www.bing.com/search?q={searchTerms}&form=DLCDF8&pc=MDDC&src=IE-SearchBox
    IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/
    IE - HKLM\..\SearchScopes,DefaultScope = {2F83074E-DF48-4034-A916-00BAD1B5C8F3}
    IE - HKLM\..\SearchScopes\{2F83074E-DF48-4034-A916-00BAD1B5C8F3}: "URL" = http://www.bing.com/search?q={searchTerms}&form=DLCDF8&pc=MDDC&src=IE-SearchBox


    IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

    IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



    IE - HKU\S-1-5-21-302620351-3888842133-4152310273-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://g.msn.com/USCON/1
    IE - HKU\S-1-5-21-302620351-3888842133-4152310273-1001\..\URLSearchHook: {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - No CLSID value found
    IE - HKU\S-1-5-21-302620351-3888842133-4152310273-1001\..\SearchScopes,DefaultScope = {2F83074E-DF48-4034-A916-00BAD1B5C8F3}
    IE - HKU\S-1-5-21-302620351-3888842133-4152310273-1001\..\SearchScopes\{3BD44F0E-0596-4008-AEE0-45D47E3A8F0E}: "URL" = http://www.google.com/search?ie=utf-8&oe=utf-8&rlz=1V4IPYX&q={searchTerms}
    IE - HKU\S-1-5-21-302620351-3888842133-4152310273-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

    ========== FireFox ==========

    FF - prefs.js..browser.search.selectedEngine: "Search the Web"
    FF - prefs.js..browser.search.update: false
    FF - prefs.js..browser.startup.homepage: "about:home"

    FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_1_102.dll File not found
    FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
    FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
    FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll ()
    FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
    FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
    FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\4.1.10111.0\npctrl.dll ( Microsoft Corporation)
    FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
    FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
    FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
    FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
    FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
    FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
    FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll File not found
    FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.450: C:\Program Files (x86)\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
    FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.448: C:\Program Files (x86)\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
    FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found
    FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.)
    FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.)
    FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
    FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Computer 2\AppData\Local\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.)
    FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Computer 2\AppData\Local\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.)

    FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 10.0.2\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012/02/17 23:07:56 | 000,000,000 | ---D | M]
    FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 10.0.2\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins

    [2011/04/12 21:26:09 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Computer 2\AppData\Roaming\Mozilla\Extensions
    [2012/01/22 13:33:22 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Computer 2\AppData\Roaming\Mozilla\Firefox\Profiles\u38rqjsl.default\extensions
    [2011/11/26 00:47:32 | 000,000,000 | ---D | M] (Flash and Video Download) -- C:\Users\Computer 2\AppData\Roaming\Mozilla\Firefox\Profiles\u38rqjsl.default\extensions\{bee6eb20-01e0-ebd1-da83-080329fb9a3a}
    () (No name found) -- C:\USERS\COMPUTER 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\U38RQJSL.DEFAULT\EXTENSIONS\{37E4D8EA-8BDA-4831-8EA1-89053939A250}.XPI
    () (No name found) -- C:\USERS\COMPUTER 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\U38RQJSL.DEFAULT\EXTENSIONS\{DDC359D1-844A-42A7-9AA1-88A850A938A8}.XPI
    () (No name found) -- C:\USERS\COMPUTER 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\U38RQJSL.DEFAULT\EXTENSIONS\[email protected]

    ========== Chrome ==========

    CHR - default_search_provider: Google (Enabled)
    CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:eek:riginalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
    CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms}
    CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Computer 2\AppData\Local\Google\Chrome\Application\16.0.912.75\gcswf32.dll
    CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll
    CHR - plugin: Java Deployment Toolkit 6.0.290.11 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll
    CHR - plugin: Java(TM) Platform SE 6 U29 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll
    CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll
    CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files (x86)\Microsoft Silverlight\4.0.60831.0\npctrl.dll
    CHR - plugin: RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) (Enabled) = C:\Program Files (x86)\Real Alternative\browser\plugins\nppl3260.dll
    CHR - plugin: RealPlayer Version Plugin (Enabled) = C:\Program Files (x86)\Real Alternative\browser\plugins\nprpjplug.dll
    CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL
    CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL
    CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
    CHR - plugin: Native Client (Enabled) = C:\Users\Computer 2\AppData\Local\Google\Chrome\Application\16.0.912.75\ppGoogleNaClPluginChrome.dll
    CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\Computer 2\AppData\Local\Google\Chrome\Application\16.0.912.75\pdf.dll
    CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.79\npGoogleUpdate3.dll
    CHR - plugin: NVIDIA 3D Vision (Enabled) = C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll
    CHR - plugin: NVIDIA 3D VISION (Enabled) = C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll
    CHR - plugin: Pando Web Plugin (Enabled) = C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll
    CHR - plugin: Windows Live\u0099 Photo Gallery (Enabled) = C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
    CHR - plugin: Default Plug-in (Enabled) = default_plugin
    CHR - Extension: YouTube = C:\Users\Computer 2\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2_0\
    CHR - Extension: Google Search = C:\Users\Computer 2\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.14_0\
    CHR - Extension: Gmail = C:\Users\Computer 2\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\6.1.3_0\

    O1 HOSTS File: ([2011/12/12 21:16:23 | 000,000,803 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
    O2:64bit: - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll File not found
    O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL File not found
    O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.6.0_22\bin\jp2ssv.dll File not found
    O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
    O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
    O3 - HKU\S-1-5-21-302620351-3888842133-4152310273-1001\..\Toolbar\WebBrowser: (no name) - {88C7F2AA-F93F-432C-8F0E-B7D85967A527} - No CLSID value found.
    O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
    O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
    O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
    O4:64bit: - HKLM..\Run: [PocketCloud Location] "C:\Program Files (x86)\Wyse\PocketCloud Windows Companion\WyseBrowser.exe" File not found
    O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
    O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
    O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
    O4 - HKU\S-1-5-21-302620351-3888842133-4152310273-1001..\Run: [BitTorrent] "C:\Program Files\BitTorrent\BitTorrent.exe" /MINIMIZED File not found
    O4 - HKU\S-1-5-21-302620351-3888842133-4152310273-1001..\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
    O4 - HKU\S-1-5-21-302620351-3888842133-4152310273-1001..\Run: [Gbridge] C:\Program Files (x86)\Games\Gbridge LLC\Gbridge\pstartw.exe ()
    O4 - HKU\S-1-5-21-302620351-3888842133-4152310273-1001..\Run: [Steam] C:\Program Files (x86)\Games\Steam\steam.exe (Valve Corporation)
    O4 - HKU\.DEFAULT..\RunOnce: [adaware] reg.exe delete "HKCU\Software\AppDataLow\Software\adaware" /f File not found
    O4 - HKU\.DEFAULT..\RunOnce: [adaware_XP] reg.exe delete "HKCU\Software\adaware" /f File not found
    O4 - HKU\S-1-5-18..\RunOnce: [adaware] reg.exe delete "HKCU\Software\AppDataLow\Software\adaware" /f File not found
    O4 - HKU\S-1-5-18..\RunOnce: [adaware_XP] reg.exe delete "HKCU\Software\adaware" /f File not found
    O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
    O4 - Startup: C:\Users\Computer 2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock.lnk = File not found
    O4 - Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock First Run.lnk = File not found
    O4 - Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock First Run.lnk = File not found
    O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
    O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
    O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
    O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
    O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
    O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
    O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SoftwareSASGeneration = 1
    O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Recovery present
    O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Recovery present
    O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Recovery present
    O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Recovery present
    O7 - HKU\S-1-5-21-302620351-3888842133-4152310273-1001\Software\Policies\Microsoft\Internet Explorer\Recovery present
    O7 - HKU\S-1-5-21-302620351-3888842133-4152310273-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = -33
    O1364bit: - gopher Prefix: missing
    O13 - gopher Prefix: missing
    O15 - HKU\S-1-5-21-302620351-3888842133-4152310273-1001\..Trusted Ranges: Range1979 ([http] in Trusted sites)
    O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.239.255.254
    O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{4606F86A-42E5-413B-8446-C23910380560}: DhcpNameServer = 192.168.0.1
    O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{5416A3B2-2F96-4FEB-A169-BE0B1C5FDE4B}: DhcpNameServer = 192.168.1.254
    O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{795829FA-04CA-45AD-86A1-0CA98AB334EB}: DhcpNameServer = 10.239.255.254
    O18:64bit: - Protocol\Handler\livecall - No CLSID value found
    O18:64bit: - Protocol\Handler\msnim - No CLSID value found
    O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
    O18:64bit: - Protocol\Handler\wlpg - No CLSID value found
    O18 - Protocol\Handler\ms-help - No CLSID value found
    O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
    O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
    O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
    O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
    O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
    O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
    O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
    O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
    O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
    O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
    O32 - HKLM CDRom: AutoRun - 1
    O32 - AutoRun File - [1999/05/29 01:08:54 | 000,000,061 | R--- | M] () - J:\AUTORUN.INF -- [ CDFS ]
    O33 - MountPoints2\{5c87857d-7447-11e0-9e1f-842b2bb7c82a}\Shell - "" = AutoRun
    O33 - MountPoints2\{5c87857d-7447-11e0-9e1f-842b2bb7c82a}\Shell\AutoRun\command - "" = J:\SETUP.EXE -- [1999/05/29 01:08:54 | 000,082,432 | R--- | M] ()
    O33 - MountPoints2\{ae85a522-44c7-11e1-bd88-842b2bb7c82a}\Shell - "" = AutoRun
    O33 - MountPoints2\{ae85a522-44c7-11e1-bd88-842b2bb7c82a}\Shell\AutoRun\command - "" = M:\setup.exe -a
    O34 - HKLM BootExecute: (autocheck autochk *)
    O34 - HKLM BootExecute: (lsdelete)
    O35:64bit: - HKLM\..comfile [open] -- "%1" %*
    O35:64bit: - HKLM\..exefile [open] -- "%1" %*
    O35 - HKLM\..comfile [open] -- "%1" %*
    O35 - HKLM\..exefile [open] -- "%1" %*
    O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
    O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
    O37 - HKLM\...com [@ = comfile] -- "%1" %*
    O37 - HKLM\...exe [@ = exefile] -- "%1" %*

    ========== Files/Folders - Created Within 30 Days ==========

    [2012/03/11 17:28:25 | 000,000,000 | -HSD | C] -- C:\Config.Msi
    [2012/02/15 04:00:39 | 000,096,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
    [2012/02/15 04:00:38 | 002,308,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
    [2012/02/15 04:00:38 | 000,237,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\url.dll
    [2012/02/15 04:00:38 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\url.dll
    [2012/02/15 04:00:38 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
    [2012/02/15 04:00:38 | 000,072,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
    [2012/02/15 04:00:37 | 001,493,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl
    [2012/02/15 04:00:37 | 001,427,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl
    [2012/02/15 04:00:37 | 000,818,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
    [2012/02/15 04:00:37 | 000,716,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
    [2012/02/15 04:00:37 | 000,248,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
    [2012/02/14 18:07:26 | 000,509,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntshrui.dll
    [2012/02/14 18:07:24 | 000,515,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\timedate.cpl
    [2012/02/14 18:07:24 | 000,478,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\timedate.cpl
    [2012/02/14 18:06:57 | 000,634,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msvcrt.dll
    [2012/02/12 21:35:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gbridge
    [2012/02/12 21:35:09 | 000,000,000 | ---D | C] -- C:\Users\Computer 2\AppData\Roaming\Gbridge
    [2 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
    [1 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]

    ========== Files - Modified Within 30 Days ==========

    [2012/03/11 17:36:05 | 000,726,444 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
    [2012/03/11 17:36:05 | 000,624,162 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
    [2012/03/11 17:36:05 | 000,106,538 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
    [2012/03/11 17:36:01 | 000,000,906 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
    [2012/03/11 17:34:01 | 000,000,928 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-302620351-3888842133-4152310273-1001UA.job
    [2012/03/11 17:30:31 | 000,000,902 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
    [2012/03/11 17:29:41 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
    [2012/03/11 17:29:32 | 429,219,839 | -HS- | M] () -- C:\hiberfil.sys
    [2012/03/11 12:27:43 | 000,014,240 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
    [2012/03/11 12:27:43 | 000,014,240 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
    [2012/03/11 10:30:34 | 000,000,064 | ---- | M] () -- C:\Windows\SysWow64\rp_stats.dat
    [2012/03/11 10:30:34 | 000,000,044 | ---- | M] () -- C:\Windows\SysWow64\rp_rules.dat
    [2012/03/10 19:35:49 | 000,000,876 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-302620351-3888842133-4152310273-1001Core.job
    [2012/03/08 20:26:15 | 000,414,368 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
    [2012/03/07 21:49:48 | 000,028,243 | ---- | M] () -- C:\Users\Computer 2\Documents\Budget.ods
    [2012/02/15 04:23:36 | 000,321,208 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
    [2012/02/12 23:42:31 | 000,000,093 | ---- | M] () -- C:\Windows\Gbridge.INI
    [2012/02/12 21:35:12 | 000,002,247 | ---- | M] () -- C:\Users\Public\Desktop\Gbridge.lnk
    [2012/02/11 20:09:26 | 000,299,193 | ---- | M] () -- C:\Users\Computer 2\Documents\Mom Receipt.jpg
    [2 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
    [1 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]

    ========== Files Created - No Company Name ==========

    [2012/02/12 23:42:31 | 000,000,093 | ---- | C] () -- C:\Windows\Gbridge.INI
    [2012/02/12 21:35:12 | 000,002,247 | ---- | C] () -- C:\Users\Public\Desktop\Gbridge.lnk
    [2012/02/11 20:09:26 | 000,299,193 | ---- | C] () -- C:\Users\Computer 2\Documents\Mom Receipt.jpg
    [2011/12/11 22:41:09 | 000,000,064 | ---- | C] () -- C:\Windows\SysWow64\rp_stats.dat
    [2011/12/11 22:41:09 | 000,000,044 | ---- | C] () -- C:\Windows\SysWow64\rp_rules.dat
    [2011/08/06 16:04:39 | 000,053,299 | ---- | C] () -- C:\Windows\SysWow64\pthreadVC.dll
    [2011/07/31 20:09:16 | 000,299,008 | ---- | C] () -- C:\Windows\SysWow64\lxecsm.dll
    [2011/07/31 20:09:16 | 000,023,552 | ---- | C] () -- C:\Windows\SysWow64\lxecsmr.dll
    [2011/07/31 13:43:04 | 000,045,568 | ---- | C] () -- C:\Windows\UniFish3.exe
    [2011/07/31 12:41:31 | 000,000,263 | ---- | C] () -- C:\Windows\PowerReg.dat
    [2011/07/08 20:25:39 | 000,175,616 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll
    [2011/07/08 20:25:39 | 000,000,038 | ---- | C] () -- C:\Windows\avisplitter.ini
    [2011/07/08 20:25:38 | 000,644,608 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll
    [2011/07/08 20:25:38 | 000,243,200 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll
    [2011/07/08 20:25:38 | 000,073,216 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll
    [2011/05/05 23:22:51 | 000,183,112 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe
    [2011/05/05 23:22:36 | 000,066,872 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe
    [2011/04/12 21:26:06 | 000,000,000 | ---- | C] () -- C:\Windows\nsreg.dat
    [2011/04/09 18:55:28 | 000,179,261 | ---- | C] () -- C:\Windows\SysWow64\xlive.dll.cat
    [2011/02/19 11:53:23 | 000,021,840 | ---- | C] () -- C:\Windows\SysWow64\SIntfNT.dll
    [2011/02/19 11:53:22 | 000,017,212 | ---- | C] () -- C:\Windows\SysWow64\SIntf32.dll
    [2011/02/19 11:53:22 | 000,012,067 | ---- | C] () -- C:\Windows\SysWow64\SIntf16.dll
    [2011/02/19 11:45:43 | 000,042,888 | ---- | C] () -- C:\Windows\DIIUnin.dat
    [2010/12/26 18:57:46 | 000,000,268 | ---- | C] () -- C:\Windows\{EEB3F6BB-318D-4CE5-989F-8191FCBFB578}_WiseFW.ini
    [2010/12/26 15:49:13 | 000,743,066 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
    [2010/12/15 18:27:07 | 000,870,560 | ---- | C] () -- C:\Windows\SysWow64\igkrng575.bin
    [2010/12/15 18:27:07 | 000,208,896 | ---- | C] () -- C:\Windows\SysWow64\iglhsip32.dll
    [2010/12/15 18:27:07 | 000,143,360 | ---- | C] () -- C:\Windows\SysWow64\iglhcp32.dll
    [2010/12/15 18:27:05 | 000,104,636 | ---- | C] () -- C:\Windows\SysWow64\igfcg575m.bin
    [2010/12/15 18:27:04 | 000,127,868 | ---- | C] () -- C:\Windows\SysWow64\igcompkrng575.bin

    Continued in next post ...
     
  8. mambass

    mambass

    Joined:
    Apr 11, 2008
    Messages:
    141
    Hi 07tcbsp,

    Thank you for the logs. :)

    I understand that the OTL.txt log was too big to post. I'm going to post it to this thread in multiple segments so that Teachers and others at my site can review that information.

    You do not need to take any action at this point. I will analyze the logs and post back a new set of instructions shortly.

    mambass

    Continued from previous post ...

    ========== LOP Check ==========

    [2011/12/01 21:35:42 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\.minecraft
    [2011/11/08 18:19:22 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\a0yyccS1ivD3nFa
    [2011/11/08 19:21:56 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\A1n5E9UtAoGdZjB
    [2011/11/08 18:15:54 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\a2oobbF4pmG5sJd
    [2011/11/08 18:17:57 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\A333ppnG5aQHdW7
    [2011/11/08 18:42:34 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\a444pmmH5sQ7d
    [2011/11/08 18:18:26 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\A555aQQJ6dWKfR9
    [2011/11/08 18:19:08 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\a555sWWJ7dE8gZq
    [2011/11/08 18:19:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\A55ssWJJ7dL8
    [2011/11/08 19:07:58 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\a6dEK8ZhXjeBzNx
    [2011/11/08 19:00:25 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\a6Wf9ZjwIrNxuSb
    [2011/11/08 18:16:22 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\A88ggRZqq
    [2011/11/08 19:17:05 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\a9hTXwjUeI
    [2011/11/08 19:08:49 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\a9ZjwVtc3a67LTh
    [2011/11/08 18:22:26 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\AAA00uccS2bD3nG
    [2011/11/08 19:18:22 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\AaQJ6dWK8
    [2011/11/08 19:07:00 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ACeIBrzON0Sb
    [2011/11/08 19:07:01 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ACeIzy0uSbna
    [2011/11/08 19:07:01 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ACIzy0u2pGQ6
    [2011/11/08 19:07:01 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ACIzyu256KRg
    [2011/11/08 19:21:11 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\acoHJ8YwkVlB1v2
    [2011/11/08 18:12:11 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\AddWWK8ffR9hTqj
    [2011/11/08 18:58:35 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\AE8ZYwVltNAv2bp
    [2011/11/08 18:39:42 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\AEELL8gTTZhYCkU
    [2011/11/08 19:08:49 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\aELgqCIlt0SboaW
    [2011/11/08 18:13:05 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\aF333pmG5a
    [2011/11/08 18:10:25 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\AFFF3ppmG5aJ6WK
    [2011/11/08 18:12:37 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\AffRRL99gTXjYek
    [2011/11/08 18:56:38 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\aFmsJEfZTw
    [2011/11/08 18:59:11 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\AGaH6WfLgZjwVlt
    [2011/11/08 18:41:41 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\AGGG5ssQJ6dK8RZ
    [2011/11/08 19:08:19 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\agTZqjYCwI
    [2011/11/08 18:35:20 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\AhhhYCCwkUVlOBx
    [2011/11/08 19:04:43 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\AhTXwjUCI
    [2011/11/08 19:04:43 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\AhTXwjUCl
    [2011/11/08 18:10:28 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ahYYXXwjUVelB
    [2011/11/08 19:22:03 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\aibp4aQHsKfLg
    [2011/11/08 18:19:25 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\AiibbD33pnGaQ6s
    [2011/11/08 18:38:04 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ajjjYCeekIrzOtA
    [2011/11/08 19:22:30 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\amG5JEf9XUlrN
    [2011/11/08 18:27:52 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\AmmmH66sWJ7ELgT
    [2011/11/08 19:07:17 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Ana6JEgqC
    [2011/11/08 18:36:03 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\AnnGG4amH6sW
    [2011/11/08 18:35:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ANNyyxAA1
    [2011/11/08 18:41:22 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\AooobFF3pmG5QJd
    [2011/11/08 19:15:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\aOtzP0yc12FpH
    [2011/11/08 18:23:21 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\AP00yycA1ivD
    [2011/11/08 19:16:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\APNyAuDobFp5
    [2011/11/08 18:35:35 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ApppmmH5sQJ7EKg
    [2011/11/08 18:44:31 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\AQJJJ6dEK8fR
    [2011/11/08 19:23:26 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\AqjYCwkIVlxuSbo
    [2011/11/08 19:23:26 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\AqjYCwkIVxSo4HW
    [2011/11/08 18:23:57 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\aQQQH66dWK7RL
    [2011/11/08 19:00:00 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\AqYeVOxu2Dp4HWf
    [2011/11/08 19:19:20 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\aRA7N6I4wohDZ
    [2011/11/08 18:58:29 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ArltPc1vna5JEgq
    [2011/11/08 18:50:25 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\aRRRZqqhYXwkVeO
    [2011/11/08 19:24:29 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\aS2ibD3pn4Q6W7L
    [2011/11/08 19:20:49 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\AS2ibF3p5
    [2011/11/08 18:33:22 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\asssWKK7fEL9TZj
    [2011/11/08 18:59:18 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\AtNc1D2o4GsJ8hj
    [2011/11/08 18:32:46 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\attzzPNNycAuv
    [2011/11/08 18:58:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\auSoFm5Qd8LhX
    [2011/11/08 18:58:56 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\AVOxuSina
    [2011/11/08 18:11:21 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\AvvDD2oon
    [2011/11/08 18:51:33 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\aWWJJddL8gRqYwU
    [2011/11/08 19:16:13 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Ax0uc13GaHWf
    [2011/11/08 19:16:07 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\AxA0uvS2i3GaHW7
    [2011/11/08 19:16:07 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\AxA0uvS2i3GaHWL
    [2011/11/08 19:16:07 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\AxA0uvS2iFpGaHd
    [2011/11/08 19:16:07 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\AxA0uvS2ip5Qd79
    [2011/11/08 19:16:08 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\AxA0uvSib3G6fgC
    [2011/11/08 18:26:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\aXXwwjUUVeIBtPN
    [2011/11/08 19:05:02 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Ay1v2npHsJdKR9Y
    [2011/11/08 19:18:02 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\AyA1ivD2o
    [2011/11/08 18:56:20 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ayxuS2Fp5Q6W7R9
    [2011/11/08 18:24:29 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\AZZ99hYXXjUVeIt
    [2011/11/08 18:25:30 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\B000uvvS2ibFpn5
    [2011/11/08 19:22:44 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\B048rishxodkcmg
    [2011/11/08 19:06:10 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\b124578hjlP1om6
    [2011/11/08 18:28:08 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\b44pmmH5sJ7
    [2011/11/08 19:00:17 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\b4pmG5sQJdKfZh
    [2011/11/08 19:16:32 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\B6Cnk2hu8NJBpq2
    [2011/11/08 18:40:49 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\b99ggTXXqjYekVr
    [2011/11/08 18:59:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Bb34ms7EgqCUlBP
    [2011/11/08 19:15:19 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\bbD3p4QHs79
    [2011/11/08 19:15:19 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\bbD3pGaHW7L
    [2011/11/08 18:47:15 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\bcSSS1ivD3on4a
    [2011/11/08 18:21:07 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\BD333pnG4aQH6
    [2011/11/08 18:59:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\BD3onG4am6W7E8T
    [2011/11/08 18:20:29 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\bDD33pnnG4aH6WK
    [2011/11/08 19:04:32 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\bE8RYkeOzy1Dn4m
    [2011/11/08 18:56:42 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\belOtP0c1DopHQ7
    [2011/11/08 19:18:23 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\bfRL9hTqCIrNAu
    [2011/11/08 18:13:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\bgggTZZqhYC
    [2011/11/08 18:14:16 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\BhhhYXXwkU
    [2011/11/08 18:56:09 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\bi4dYIupdTlyvF5
    [2011/11/08 19:15:19 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\bibD3pGas9j
    [2011/11/08 19:23:51 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\bibDna6JEgqCkr
    [2011/11/08 18:57:44 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\BiGsLZwOub
    [2011/11/08 18:20:43 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\bIIBBrzzONyA0vS
    [2011/11/08 18:56:15 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\bjCelzNyAvo3GaJ
    [2011/11/08 18:14:19 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\BjjjYYCwkIVrONx
    [2011/11/08 19:18:09 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\BK8fRL9hTjeBOxu
    [2011/11/08 18:33:01 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\bkkIIBrzzOy
    [2011/11/08 18:53:33 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\bkkIVrlONtP0c1b
    [2011/11/08 19:16:53 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\bkVlt0Ai2Fms7KR
    [2011/11/08 19:18:34 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\BL9TXjYCeIrt0
    [2011/11/08 18:52:27 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\bnnF4pmH5sJ7E8R
    [2011/11/08 19:23:45 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\BOidjO2aEY
    [2011/11/08 18:34:16 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\booonGG4mHsW7fL
    [2011/11/08 19:15:19 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\bp4Hsf9ZkrN
    [2011/11/08 19:05:33 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\bpGQ6KRgqkr
    [2011/11/08 19:00:17 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\bpm5sQJ6dKfZhw
    [2011/11/08 19:00:17 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\bpmG5QJ6dKfZhw
    [2011/11/08 18:31:01 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\bppnnG44aQHsW7f
    [2011/11/08 18:50:21 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\BPPNNyccA1vD2bF
    [2011/11/08 18:21:41 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\bqjjUUCekIBrONx
    [2011/11/08 18:46:19 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\BQQJJ66dWK8RL
    [2011/11/08 19:04:56 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\BrlONxuSb3Gm6W7
    [2011/11/08 18:28:59 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\bRRLL99gTXqYCk
    [2011/11/08 19:24:53 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\brzONtxA0c2
    [2011/11/08 19:07:27 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\bsfTwOuDaJgCl0S
    [2011/11/08 18:56:14 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\BsLqwlPiF5JE8RY
    [2011/11/08 18:44:46 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\bsssQJJ6dEKfR9h
    [2011/11/08 19:08:49 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\BThwVOxy1Dna5JE
    [2011/11/08 19:04:56 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\bTqCUlt0Si3n4m5
    [2011/11/08 18:21:27 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\BTTXXqjYCekIVzN
    [2011/11/08 18:39:01 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\BTXXqjjUCekBrON
    [2011/11/08 18:33:26 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\buuvvS22ibFpn5
    [2011/11/08 18:10:49 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\BvvSS2iibF
    [2011/11/08 18:42:23 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\bvvvD33onF4
    [2011/11/08 19:00:26 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\BWEZkO0vFsERwOy
    [2011/11/08 19:18:00 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\bWf8ZqhwUlt0Sv3
    [2011/11/08 19:24:53 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\BWK7fRL9gXjCkVz
    [2011/11/08 18:25:42 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\BwwjjUVVelItz
    [2011/11/08 18:20:11 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\BWWWJ77dEL
    [2011/11/08 19:08:11 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\bXwUeBz0ci2n4m
    [2011/11/08 18:37:39 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\BXXXqjjYCekVrzN
    [2011/11/08 18:12:19 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\c00yycS11vD3
    [2011/11/08 18:18:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\C11uuvDD2ob4pG5
    [2011/11/08 19:19:59 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\C1vD2oobF4mGsJd
    [2011/11/08 18:20:50 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\c333onnF4
    [2011/11/08 19:17:34 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\c36gUPFEk048V1m
    [2011/11/08 19:08:48 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\C3pnQH6sW7E9Zj
    [2011/11/08 18:52:23 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\C44ppGGsQJ6
    [2011/11/08 19:19:39 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\c5JEgqXkeOzy
    [2011/11/08 18:23:29 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\c777fEEL8
    [2011/11/08 18:19:50 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\C777fEEL9gT
    [2011/11/08 18:19:11 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\c77ffELL9gZqjCw
    [2011/11/08 18:47:46 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\c88ffRZZ9hTwjCe
    [2011/11/08 18:59:59 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\c8fLhqCkBOy0vba
    [2011/11/08 19:22:31 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\c8fRL9hTXjCkBzy
    [2011/11/08 18:57:01 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\c8gRZqhYX
    [2011/11/08 18:39:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\caaamHH5sWJ7ELg
    [2011/11/08 19:07:25 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Cb3na6KRgqCkrNA
    [2011/11/08 18:10:21 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\cbbDD3ppn
    [2011/11/08 18:58:53 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\CDaWLhVty1Dna5J
    [2011/11/08 18:17:25 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\CddEEL88gRqhYwk
    [2011/11/08 18:35:59 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\CdEEL8ggRZh
    [2011/11/08 19:08:35 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\cdELgRZqhXkVlBz
    [2011/11/08 18:33:30 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\CeeelIIBrzPyxA
    [2011/11/08 19:09:15 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\CF4HQ7KRhwUeIz
    [2011/11/08 19:09:15 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\CF4p5Q7K8RhwUe
    [2011/11/08 18:22:46 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\CfEELL8gTZqhCwU
    [2011/11/08 18:40:04 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\cffRRZ9hhXwjUeI
    [2011/11/08 18:53:37 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\CfRLLggXqjYeIrz
    [2011/11/08 18:56:19 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\CfZhwUeIrNAu2b3
    [2011/11/08 18:56:18 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\CgRZhXkeOz0c1vo
    [2011/11/08 19:07:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\CgTqhwkVOx01Dna
    [2011/11/08 18:32:35 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ChhhYYXwkUVeOBz
    [2011/11/08 18:58:11 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ChlAF7hlybQ
    [2011/11/08 19:23:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\CIbfr3RzFRr
    [2011/11/08 18:18:08 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\cIIIVVrzONtx0uS
    [2011/11/08 18:46:31 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ciivvD33onFa
    [2011/11/08 18:59:04 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\CIzy1Dbp5Jd
    [2011/11/08 19:08:35 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\cJ7dELgRZhXkVlB
    [2011/11/08 18:21:11 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\cJJ66dEEK8fZ9TX
    [2011/11/08 18:31:59 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\cjjjYCCwkIrlOtP
    [2011/11/08 18:59:15 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ckIBrzONy
    [2011/11/08 18:38:42 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\CkkIIVrrzOtxAuc
    [2011/11/08 18:38:15 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\cLL88gRRZqhXwUV
    [2011/11/08 18:30:09 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ClOOBBtzP0yc1i
    [2011/11/08 19:06:48 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\CLRhwVOz0AiDoF
    [2011/11/08 19:05:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\cmG5aQJ6d8Rh
    [2011/11/08 19:05:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\cmG5aQJ6dKfL
    [2011/11/08 19:07:16 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\cnaHWf8ZY
    [2011/11/08 19:22:20 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ConF4pm5sJd8ZYw
    [2011/11/08 19:20:22 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ConG4amH6W7E8TY
    [2011/11/08 18:58:18 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\cOtAc2DaWLjwIlN
    [2011/11/08 19:15:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\cP0yc1i2FpHs7y1
    [2011/11/08 18:26:51 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\cQQQJ66dWK8fL9T
    [2011/11/08 19:24:55 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\csWJ7dEL8RqYwUe
    [2011/11/08 18:58:38 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\CTYkUrOt0Sv3FmW
    [2011/11/08 19:08:53 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\cTZqCIrNPciD
    [2011/11/08 18:56:16 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\CUkrNAvi3GQd7LT
    [2011/11/08 19:19:00 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\cUVelIBtzy1Dbm5
    [2011/11/08 18:51:45 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\cuvSSiiF3pn5
    [2011/11/08 18:11:57 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\CuvvSS2obF3pG5Q
    [2011/11/08 19:21:19 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\cVrNAc2DnaHK
    [2011/11/08 19:23:26 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\CwkIVlOxuSbo4HW
    [2011/11/08 19:23:26 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\CwkIVxSo4HW7Lgq
    [2011/11/08 18:10:14 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\CXwwwjUCelIBrPy
    [2011/11/08 18:47:42 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\cXXqqjUCekIBrOy
    [2011/11/08 19:05:03 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\CxxxASSoFpa
    [2011/11/08 19:24:53 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\CYCekIVrzNx0c2b
    [2011/11/08 19:24:31 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\CYVzAom7gXl
    [2011/11/08 19:16:07 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\cyxA0uvS23GaHW7
    [2011/11/08 18:58:22 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\czONtxA0u
    [2011/11/08 18:25:38 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\czPPNNycA1uv2oF
    [2011/11/08 18:56:43 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\CZXjUVetA4d
    [2011/11/08 19:17:48 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\d0oQZePub5EZjBu
    [2011/11/08 18:56:42 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\D1voFa5JEgZhwUe
    [2011/11/08 18:34:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\d444ammH5sWJ
    [2011/11/08 19:05:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\d6dWK8fRLhjeBOx
    [2011/11/08 18:47:03 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\D7ffRLL9gTXqYCk
    [2011/11/08 19:04:34 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\D8RL9hXUeIz
    [2011/11/08 19:05:03 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\dAASSoFpaWfL
    [2012/01/29 18:28:23 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\DAEMON Tools Lite
    [2011/11/08 19:06:16 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\daQJdWK8fLhq
    [2011/11/08 19:06:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Db5dLXCVtuipQs
    [2011/11/08 19:24:53 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\DbD3pnG4aHsKfLg
    [2011/11/08 19:24:53 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\dCekIVrzO
    [2011/11/08 19:22:55 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\dCelIBzA1v2FmaJ
    [2011/11/08 18:30:52 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\DCwwkkUVrlOBtPy
    [2011/11/08 18:46:23 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\DDD2obFF4pm5sJ
    [2011/11/08 19:19:59 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\DE8R9TwClBzNAu2
    [2011/11/08 18:57:38 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\deBOxu2FnaHW7Rg
    [2011/11/08 18:44:49 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\deellOBtz
    [2011/11/08 18:56:42 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\DelOtP0c1DopHQ7
    [2011/11/08 18:57:55 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\DERqXUeBPy1vomJ
    [2011/11/08 19:07:35 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\DF3pnG5aHW7
    [2011/11/08 18:16:19 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\DFFF4ppmG5sQ6dK
    [2011/11/08 18:27:32 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\DgggTZZqjYCkIV
    [2011/11/08 18:40:27 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\DggRRZqhhYwkUel
    [2011/11/08 18:47:30 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\DhhhYXXwjUVeIBz
    [2011/11/08 18:57:34 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\DHW7LgqCIlt
    [2011/11/08 19:19:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\dhYXwUltNAvo4m5
    [2011/11/08 18:43:39 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\DIIIrrzONtxAuc2
    [2011/11/08 18:44:38 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\DIVVrrlONtx
    [2011/11/08 19:18:09 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\DJ6dWK8f9TjeBOx
    [2011/11/08 18:45:55 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\dLL99gTTXqjCeIV
    [2011/11/08 18:25:01 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\dLLL9ggTZqjCwIV
    [2011/11/08 18:49:23 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\DlllIBBrzPNx1u
    [2011/11/08 18:13:29 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\DmmGG5aQJ6dWKfL
    [2011/11/08 19:16:06 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\dmsJKf9TjCByAuo
    [2011/11/08 18:36:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\doobbF33pmGa
    [2011/11/08 18:34:07 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\dpmmH55sQ
    [2011/11/08 19:19:27 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\dpnG4aQH6W7E9Zj
    [2011/11/08 18:43:51 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\dPP00yccA1iD2nF
    [2011/11/08 18:58:57 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\DQHsf9TYklt0SiD
    [2011/11/08 18:32:42 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\DqqqjUUeekB
    [2011/11/08 19:04:35 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\DRL9hXjkzxu
    [2011/11/08 18:54:17 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\dS11ibD3oG4aHsJ
    [2011/11/08 18:58:59 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\dSnmJ8qUBciFsdK
    [2011/11/08 18:54:09 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\dsQJJddK8gR9
    [2011/11/08 19:16:43 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\dUPy1vo4HWd8RqX
    [2011/11/08 18:46:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\DuuuvDD2obFpmGs
    [2011/11/08 19:20:38 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\dVelIBtzPyAuDo4
    [2011/11/08 18:21:57 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\DWWJJ7fEELgTZhC
    [2011/11/08 18:25:50 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\dwwkkUVVrlOt
    [2011/11/08 19:22:42 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\DxnRIca9ISH
    [2011/11/08 18:38:38 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\dxP00uccS1iD3n4
    [2011/11/08 18:56:45 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\dXUkBzNAuSb3nQd
    [2011/11/08 18:12:15 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\DXXXwjjUVelItzN
    [2011/11/08 18:57:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\DycA1ivD2np
    [2011/11/08 18:27:48 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\DycccA1ivD2
    [2011/11/08 19:16:18 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\dYCwIltiG
    [2011/11/08 19:16:18 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\dYCwNPci3
    [2011/11/08 18:21:30 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\dyyxxA11uvSo
    [2011/11/08 18:19:57 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\DYYXXwjUUVlIBzP
    [2011/11/08 18:56:43 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\dZXjUVetA4dT
    [2011/11/08 18:11:50 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\DZZqqhYYCwkVrO
    [2011/11/08 19:18:59 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\E01D4H5sW7LRhwU
    [2011/11/08 19:18:59 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\E0S1v3Fm5W7LRhw
    [2011/11/08 19:17:08 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\E1i3Fms7E8ZXkVl
    [2011/11/08 19:17:08 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\E1i3Fms7LgZYkVl
    [2011/11/08 19:05:45 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\e1iDnp5JE8ZYjV
    [2011/11/08 19:18:02 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\E1ivD2nF4HQd8
    [2011/11/08 19:18:02 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\E1ivD2onF5JEg
    [2011/11/08 18:10:53 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\E222obbF4pm5sQ6
    [2011/11/08 18:34:44 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\E22iibFF3pG5aH6
    [2011/11/08 18:59:35 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\e2b3GQdKRgX
    [2011/11/08 18:25:54 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\e3ppnnG5aQH6WKf
    [2011/11/08 19:20:39 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\e4pmG5sQ6RXezA
    [2011/11/08 19:16:06 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\E4pmsJ6Kf9TjClr
    [2011/11/08 19:23:18 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\e5PRFtZmOQjuKr
    [2011/11/08 18:28:48 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\E666dEEK8fR9hXw
    [2011/11/08 18:52:39 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\E6ddWK7fL9gTqYe
    [2011/11/08 19:16:48 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\e6sWJLThwVO
    [2011/11/08 18:42:07 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\E777ffEL9gTZjYw
    [2011/11/08 19:08:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\E7dK8gRZ9YUeItN
    [2011/11/08 18:33:55 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\e888f99hTXqjCe
    [2011/11/08 18:45:13 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\e8ggTTZqhYCwkVl
    [2011/11/08 18:58:03 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\EAF6hI0pWTVA3sT
    [2011/11/08 19:07:41 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ebD3onG4aHsJE8T
    [2011/11/08 19:22:09 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\EC2Rt4ZPmqPFLVA
    [2011/11/08 18:09:56 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\EcccSS2ibD
    [2011/11/08 19:17:53 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\eDbp5JE8ZhwCIzy
    [2011/11/08 19:06:56 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\EF5dRXezy0i3aWf
    [2011/11/08 19:08:06 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ef8ZYkrOxy1Do4s
    [2011/11/08 18:43:55 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\eFFF4aamH5sW7d
    [2011/11/08 19:18:22 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\eFLUyFEXB1F
    [2011/11/08 18:12:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\EGG44ammH6sJ7EL
    [2011/11/08 18:57:44 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\eGWTIxiGsLZwOub
    [2011/11/08 19:19:18 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Eih3X2ZA8NQCbfz
    [2011/11/08 19:20:49 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\eIIIBzzONyx0uSi
    [2011/11/08 18:31:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\EJJ77dEEL8gZqYX
    [2011/11/08 18:58:16 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ejUCkBrzOx0vi3G
    [2011/11/08 19:18:16 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ejuHYu4Ekc4Eky4
    [2011/11/08 19:19:00 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\eK8gRZ9hYwU
    [2011/11/08 18:16:43 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\eKK88fRRZ9TXwUC
    [2011/11/08 18:43:43 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\EmmmG55aQJ
    [2011/11/08 19:06:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\EnG47gjCIlxu1Dn
    [2011/11/08 19:06:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\EnG4HWf9TjCIltP
    [2011/11/08 18:57:21 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\EoFms7LRhwVOzy1
    [2011/11/08 18:18:57 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\eOOBBtxPP0cS1v3
    [2011/11/08 18:28:52 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\EpmmHH5sQJ7dE8R
    [2011/11/08 18:20:22 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ePPNNyycA1u
    [2011/11/08 19:22:54 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\eQJ6dEK8fZh
    [2011/11/08 19:06:16 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\EQJdWK8fR9TjC
    [2011/11/08 18:58:17 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\eqUeBrz0Sbp5Qd7
    [2011/11/08 19:24:28 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ERgXqjYCeVzNx0S
    [2011/11/08 18:59:11 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\erlOtPucSbo4ms
    [2011/11/08 18:59:15 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\erONyxAuSip
    [2011/11/08 19:00:17 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\eRZ9hXjCIzy1vo3
    [2011/11/08 19:07:38 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ERZ9hXwjUeBPcu2
    [2011/11/08 19:05:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ERZ9XUltNA
    [2011/11/08 19:19:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\esQJ6dEK8R9TUeI
    [2011/11/08 18:22:50 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ESSS2iibD3pn4
    [2011/11/08 18:45:17 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\essWWK77fELgTqY
    [2011/11/08 19:06:27 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\EsTPFQhzSG
    [2011/11/08 19:19:27 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\EtAcS2ibDpGas7E
    [2011/11/08 18:14:58 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ETTTXqqjYC
    [2011/11/08 18:57:00 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\EuDaK9YrPiGsEgq
    [2011/11/08 18:40:31 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\EuuucSS1ibDonGa
    [2011/11/08 18:22:38 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\evDD22obF4pm5sJ
    [2011/11/08 18:15:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\EVVVrllONtx0uS1
    [2011/11/08 19:08:10 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\EWfgCIVOxuSi3
    [2011/11/08 19:04:56 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ewkIrlONtuSbo4m
    [2011/11/08 18:22:02 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\eWWWJ77fEL8
    [2011/11/08 19:08:08 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\exA1u2Fp5Qd
    [2011/11/08 18:22:34 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\EXqqjjUCekIBzOy
    [2011/11/08 19:08:31 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\EXUeBPy1DnpHQ7K
    [2011/11/08 18:49:27 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\eXwwwjUelIBtzN1
    [2011/11/08 18:45:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ExxxAA1uvS2oF
    [2011/11/08 18:39:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\EYYCCekIVrzONx0
    [2011/11/08 19:22:20 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\EzP0ycA1iDoFpHs
    [2011/11/08 19:22:42 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\F0HYc5e2KkiKIi7
    [2011/11/08 18:34:39 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\f2iiibD3pnG4a6E
    [2011/11/08 19:18:02 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\F2nF4HQd89YwUeB
    [2011/11/08 18:33:06 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\f333pnG5aQ
    [2011/11/08 18:21:53 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\F44aamH55sJ7
    [2011/11/08 19:18:01 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\F4HJEL8RZ
    [2011/11/08 19:00:17 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\F4pmG5sQJdKfZhU
    [2011/11/08 19:00:17 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\F4pmG5sQJdKfZhX
    [2011/11/08 19:22:31 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\f6K8fRL9hX
    [2011/11/08 19:23:26 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\f7fEL9gTZjCkVlP
    [2011/11/08 19:24:53 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\f7fRL9gTXjCkVzN
    [2011/11/08 19:24:53 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\f7fRLgTXqCkVzNx
    [2011/11/08 18:19:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\f8ggTTZqhYCwUVl
    [2011/11/08 19:08:54 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\f8TZqhYwkVlB0Sv
    [2011/11/08 19:07:58 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\f9TXwjUelB
    [2011/11/08 18:52:04 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\faQJJddK8fR9Tqj
    [2011/11/08 18:57:05 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\FAu2Dna6Wf9TjwI
    [2011/11/08 19:23:51 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\FbDna6JEgqCkrBx
    [2011/11/08 18:52:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\FbF44pmGs
    [2011/11/08 19:18:03 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\fBtPcu2Fm5QdKRh
    [2011/11/08 19:22:31 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\FCekIBrzOx0bGdL
    [2011/11/08 19:19:22 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\FcQVDKlbLNGT
    [2011/11/08 19:23:51 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\fCwkIVrlOtPuSiD
    [2011/11/08 18:09:46 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\fddWWK8ffR9hTqU
    [2011/11/08 19:19:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\fdEK8fRZ9TUeIrP
    [2011/11/08 18:16:54 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\FeeekIIBrzONxAu
    [2011/11/08 18:43:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\feellIBBtzPyc1u
    [2011/11/08 19:20:38 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\fEK8gRZ9hX
    [2011/11/08 18:29:31 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\fellIIBtzPNyA1v
    [2011/11/08 19:20:39 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\fG5sQ6RXezA2mJf
    [2011/11/08 19:07:41 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\fGamH6sWJfLgZCk
    [2011/11/08 19:22:20 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\FH5sQJ7dEg9w
    [2011/11/08 18:32:03 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\fHH66dWW7fL9g
    [2011/11/08 18:18:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\fHHH6ssWK7fE9gZ
    [2011/11/08 18:12:01 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\fhhhYXXwjUVlI
    [2011/11/08 18:24:37 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\fiibbD33on4am6s
    [2011/11/08 18:29:03 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\fIIIBrrzONyx0
    [2011/11/08 19:23:16 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\FImBJPK1RDTFCpe
    [2011/11/08 19:19:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\FjUeBPNcu2Fp5Q6
    [2011/11/08 18:27:41 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\fjUUUCekIBrzOyA
    [2011/11/08 18:36:56 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\FjYYCCekIVrz
    [2011/11/08 19:21:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\FKgRZ9hYXjVl
    [2011/11/08 19:21:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\FKgRZhXwjVlB
    [2011/11/08 19:16:54 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\FkVlt0Ai2Fms7KR
    [2011/11/08 18:53:21 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\flIBBzzPyxAuS
    [2011/11/08 19:06:53 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\flONtxP0ubGmW7E
    [2011/11/08 18:57:51 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\FmH5sQ7EKgZhXVl
    [2011/11/08 19:07:41 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\fnG4amH6sJE8TqY
    [2011/11/08 19:07:41 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\fnG4amH6sJfLgZh
    [2011/11/08 19:07:41 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\fnG4amH6sJLgZCk
    [2011/11/08 19:07:41 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\fnGamH6sW7E8TqC
    [2011/11/08 19:18:01 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Fona5WJdE
    [2011/11/08 19:22:27 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\FONtx0ucSb4KgYr
    [2011/11/08 19:19:59 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\FoobF44pG5Jd
    [2011/11/08 18:40:56 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\FoonnF44amHs
    [2011/11/08 19:20:49 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\fOONNyxA0uv2b35
    [2011/11/08 19:20:49 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\fOOONyxA0uvSiFG
    [2011/11/08 19:06:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\fpnG47gjCIlxu1D
    [2011/11/08 19:06:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\fpnG4HWf9TjCIlt
    [2011/11/08 19:06:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\fpnG4Q6sKEgqCIl
    [2011/11/08 19:06:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\fpnG4Qs7LgqCIxc
    [2011/11/08 18:09:39 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\FPPP0yycA1iD2nF
    [2011/11/08 19:05:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\fQ6EKf9TjClrNAv
    [2011/11/08 18:30:02 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\fqjjUUCekIBrONx
    [2011/11/08 19:19:27 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\FQsWK7fELTjCIrO
    [2011/11/08 19:22:55 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\FrzNyxA1u
    [2011/11/08 19:24:53 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\FrzONtxA0c2b
    [2011/11/08 18:26:17 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\FrzzPPNyxA1uS2b
    [2011/11/08 18:36:18 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\FS11iivD3
    [2011/11/08 18:58:56 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\fTqjCekIVNAci3G
    [2011/11/08 18:13:26 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\FtttxAA0ucS2bDp
    [2011/11/08 18:58:56 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\fTXjekIVNAci3Ga
    [2011/11/08 18:33:18 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\fUUUVrrlOBtx0y1
    [2011/11/08 18:20:01 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\fVVrrlOOBtP0yS1
    [2011/11/08 18:47:11 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\fVVVellOBtzPyc1
    [2011/11/08 18:45:51 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\FVVVONttxP0cSib
    [2011/11/08 18:15:23 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\FxxxP00ucS1iD3n
    [2011/11/08 18:57:01 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Fy1Dn4HsJ
    [2011/11/08 18:53:25 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\fYXwwUUelOBz0c1
    [2011/11/08 18:37:03 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\fyyycAA1uvDob4p
    [2011/11/08 18:33:14 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\fzzPP0ccA1iD2n4
    [2011/11/08 19:24:29 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\g0ucS2ibDpGaHsK
    [2011/11/08 19:06:38 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\g1ib3o4Hs7LThwV
    [2011/11/08 19:06:38 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\g1ibD3aJgCl0v4W
    [2011/11/08 18:33:38 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\G222onnF4pm5sJ7
    [2011/11/08 18:18:22 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\g22iibD3pnG4aHs
    [2011/11/08 18:50:51 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\G22oobF33pG5aJd
    [2011/11/08 18:37:18 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\g22oonF4pmH5QJd
    [2011/11/08 19:05:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\G3mG5aQJ68
    [2011/11/08 19:07:35 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\g5aWfLTjeVzx0S
    [2011/11/08 18:24:21 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\g66ddWKK8fR9hX
    [2011/11/08 18:31:16 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\G66ssWJJ7f
    [2011/11/08 18:10:10 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\G777fRRL9gTXjYe
    [2011/11/08 18:51:41 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\G77fEL9gTZjYwIr
    [2011/11/08 18:13:33 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\G888ggRZ9h
    [2011/11/08 19:18:09 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\g8fRL9hTjeBOxu2
    [2011/11/08 18:57:02 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\G9hYXjVIzy1vo4m
    [2011/11/08 19:20:46 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Ga7TkNSo6Ehr0vn
    [2011/11/08 18:46:55 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\gBBBttxP0ycSiv3
    [2011/11/08 18:20:53 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\GbDD33pnG4aQ6sK
    [2012/02/25 12:53:48 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Gbridge
    [2011/11/08 19:18:21 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\gBt0Avo4ms7KRhw
    [2011/11/08 18:18:33 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\gCwwkkUVrlOBxPy
    [2011/11/08 18:56:44 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\GdLjrAoma6WfL
    [2011/11/08 18:58:33 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\GEgqCUlBP1
    [2011/11/08 18:53:41 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\GFF3pmG5aJ6dKfL
    [2011/11/08 19:17:54 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\GGa6WfLTjeVzNAu
    [2011/11/08 18:23:49 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ggTTZZqhYCwkVrO
    [2011/11/08 18:58:13 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\GH6sWK7fE9TYVtS
    [2011/11/08 18:58:13 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\GH6sWK7fE9ZCIrO
    [2011/11/08 18:58:13 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\GH6sWK7fE9ZYkrO
    [2011/11/08 18:58:13 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\GH6sWK7fE9ZYVtS
    [2011/11/08 18:32:11 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\giiivDD2onF5sJ7
    [2011/11/08 18:58:16 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\gIrzOyAv2bp
    [2011/11/08 18:34:03 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\GJ77dEEK8g
    [2011/11/08 18:57:09 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\gJLUN2aRCt2GsEq
    [2011/11/08 18:21:00 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\GjUUVVelIB
    [2011/11/08 19:08:51 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\gjzD5KhUrA2
    [2011/11/08 19:05:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\GK8ZhwUlBzyAu2b
    [2011/11/08 18:58:16 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\gkBrzOy0v2b
    [2011/11/08 19:20:13 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\gKCuGEwPo7YtipE
    [2011/11/08 19:06:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\GKEgqCIlO0Sbo4m
    [2011/11/08 18:39:21 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\gkIIBBrzONA0v2b
    [2011/11/08 19:22:45 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\glIBrzNyAu2b3m5
    [2011/11/08 18:38:19 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\GmmHH6sWJ7fELgZ
    [2011/11/08 18:57:58 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\GNAu2bp4HWf9Z
    [2011/11/08 19:04:56 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\gONtxP0uc1b3n4m
    [2011/11/08 18:56:20 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\gONyx0Sbp5Q6W7
    [2011/11/08 19:18:23 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\GpmG5aQJ6W8R9TU
    [2011/11/08 19:17:24 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\GpmG5sJE8ZTje
    [2011/11/08 18:57:57 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\GPNxu2Fma6KRhqC
    [2011/11/08 18:10:18 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\gPP00yccS1iD3nF
    [2011/11/08 18:42:00 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\gppmmH5sQJ7
    [2011/11/08 18:29:50 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\gPPNNyccA1vD2bF
    [2011/11/08 19:04:56 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\grlONt0Sbo4m6Wf
    [2011/11/08 19:04:56 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\grlONxuSb3Gm6W7
    [2011/11/08 19:19:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\GRZhTXjUCI
    [2011/11/08 19:16:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\GttzzyAuDb
    [2011/11/08 19:16:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\GttzzyAuDo
    [2011/11/08 18:52:00 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\GTXXqjYCeIVrOtA
    [2011/11/08 18:51:49 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\gUUCelIBrPN
    [2011/11/08 18:59:15 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\GuvS2ibF3n5Q6W7
    [2011/11/08 18:53:10 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\gUVVrlOBtP0ySiD
    [2011/11/08 18:58:22 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\GVrOtxA0u2DnaHs
    [2011/11/08 18:49:58 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\GvvvS2ibF3pn5aH
    [2011/11/08 18:29:46 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\gvvvSS2obF3pG5Q
    [2011/11/08 19:24:29 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\GWK7fEL9gZjCkVl
    [2011/11/08 18:17:29 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\gwwkkIVrrlN
    [2011/11/08 18:29:43 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\GXqqjjYCek
    [2011/11/08 18:31:24 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\gXXXqjjUCekBrON
    [2011/11/08 18:11:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\GYYYXwwkUVeOBzP
    [2011/11/08 19:20:38 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\GZ9hYXwjUeItP
    [2011/11/08 19:16:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\GzzzN1v2oF
    [2011/11/08 18:47:26 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\gzzzPNNyxA1uS2b
    [2011/11/08 19:16:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\GzzzPNyAuD

    Continued in next post ...
     
  9. mambass

    mambass

    Joined:
    Apr 11, 2008
    Messages:
    141
    Hi 07tcbsp,

    Thank you for the logs. :)

    I understand that the OTL.txt log was too big to post. I'm going to post it to this thread in multiple segments so that Teachers and others at my site can review that information.

    You do not need to take any action at this point. I will analyze the logs and post back a new set of instructions shortly.

    mambass

    Continued from previous post ...

    [2011/11/08 18:50:06 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\h111iivD2onFpm5
    [2011/11/08 18:59:58 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\h1S2o3mG5
    [2011/11/08 19:04:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\h2ibF3pnaHWfLTq
    [2011/11/08 18:44:35 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\H33oonFF4am5sJ
    [2011/11/08 18:15:26 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\H33ppnGG5aQ6dK7
    [2011/11/08 18:14:51 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\h44ppmG55
    [2011/11/08 19:16:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\H4RzFgtFfrF8e0G
    [2011/11/08 18:40:08 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\H55ssQJJ7dK8gZ9
    [2011/11/08 19:18:34 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\h5aQH6dWKfLgXYe
    [2011/11/08 19:18:34 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\h5aQH6dWKfLTjCk
    [2011/11/08 18:19:29 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\h88ffRLL9hTq
    [2011/11/08 19:17:07 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\haQHs7EgqCIlt0S
    [2011/11/08 19:20:38 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\hcA1uv2ob
    [2011/11/08 18:26:02 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\HD22oobF4pmGsQ6
    [2011/11/08 18:20:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\HEEEK88gRZ9YXjU
    [2011/11/08 18:58:21 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\HeIN1omQEZwerxv
    [2011/11/08 18:56:15 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\helzNyA1vo3G
    [2011/11/08 18:39:05 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\hFF44pmmG5QJ
    [2011/11/08 19:18:34 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\hG5aQHdWKfLgXYe
    [2011/11/08 19:19:39 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\HH5JEgqXkeO
    [2011/11/08 18:31:28 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\HhhTTXwwjUC
    [2011/11/08 19:18:09 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\HhTjeBOxu2bp5HW
    [2011/11/08 19:18:09 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\HhTjeBOxu2nH9ex
    [2011/06/22 18:45:18 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Hi-Rez Studios
    [2011/11/08 18:30:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\HJJJ6ddWK8fR9hX
    [2011/11/08 19:07:38 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\hjUVeBPcu
    [2011/11/08 19:24:02 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\hjUVelIBtPcu
    [2011/11/08 19:08:48 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\hK7fELgZjwVOxu1
    [2011/11/08 19:05:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\hlIBrzPNyvo3m5J
    [2011/11/08 19:05:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\hlIrzPNyAvo3m5J
    [2011/11/08 18:26:13 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\HLLL9ggTXqj
    [2011/11/08 19:06:11 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\hlrNxuSo3
    [2011/11/08 18:49:07 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\hnFF44pmH5sQ
    [2011/11/08 19:20:00 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\hoFpGaJdKR9TqUe
    [2011/11/08 18:26:25 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\hOOONttxP0uc1iD
    [2011/11/08 18:50:17 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\HOOONyyAA0v
    [2011/11/08 19:24:45 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\hQ8hwVIzy
    [2011/11/08 19:23:49 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\HqCIzyAvi3GQdKR
    [2011/11/08 19:19:58 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\HRZ9XwjUVlI
    [2011/11/08 19:00:17 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\hsQJ6dEK8R9wCIz
    [2011/11/08 18:32:49 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\hssW77dEL8gRZhX
    [2011/11/08 19:00:10 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Ht0ci3o4HW7LTq
    [2011/11/08 19:20:55 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\hTI1pKXB0pdXObs
    [2011/11/08 18:31:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\htttxPP0ucSibDo
    [2011/11/08 19:09:03 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\htxA0uS2iDn4
    [2011/11/08 19:09:03 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\htxA0uS2iDpG
    [2011/11/08 19:07:38 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\hUVeBPcu2
    [2011/11/08 19:21:25 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\HwVlt0Svo4HWd8q
    [2011/11/08 18:16:05 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\hwwwjUUCe
    [2011/11/08 19:24:02 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\hXjUVelIBzcu
    [2011/11/08 18:57:05 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\hxP0ci3GaHW7Lgq
    [2011/11/08 19:24:02 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\hXwjUVelItPc
    [2011/11/08 18:56:50 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\hYkrNAc2Dna6KEg
    [2011/11/08 18:59:44 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Hyvbm6fhUrNAvi
    [2011/11/08 18:29:19 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\hZqqjjYCw
    [2011/11/08 18:17:32 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\HzzPPNyyxA1
    [2011/11/08 18:56:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\i0Sb3pna6K
    [2011/11/08 18:56:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\i0Sb3pnQs7
    [2011/11/08 19:23:51 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\i1ibDna6JEgqC
    [2011/11/08 18:59:37 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\I1ivD24Hs
    [2011/11/08 19:17:22 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\i269ktiaW8qkVlx
    [2011/11/08 19:00:03 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\I2ob4msQJEf9Tje
    [2011/11/08 18:57:58 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\i5aQdWK7fLgXj
    [2011/11/08 18:16:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\i66ddWK77f
    [2011/11/08 18:30:13 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\I6ssWWJ7f
    [2011/11/08 19:08:51 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\i7KRhwVIzy1Dbp5
    [2011/11/08 19:18:58 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\i7LTjwVOt0Si3Gm
    [2011/11/08 18:13:15 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\i99ggTXXqjCekVr
    [2011/11/08 19:22:32 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\iA0ubpHfjO26q
    [2011/11/08 19:22:45 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ICelIBrzPyAuSoF
    [2011/11/08 19:16:41 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ICrOxu2Fn56K
    [2011/11/08 18:11:46 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\IDDD2oobF4pm5sJ
    [2011/11/08 18:20:57 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\idddWKK8fRLhTqj
    [2011/11/08 19:24:29 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\IG4aQH6sW7Lg
    [2011/11/08 18:39:13 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\IH66ssWJ7fELgZq
    [2011/11/08 18:09:42 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\IHH66sWJJ
    [2011/11/08 18:58:57 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\iibD3onG4m6JL
    [2011/11/08 18:58:57 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\iibDnm6sJLZYk
    [2011/11/08 19:22:29 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\iiDnam5JEgqXUlt
    [2011/11/08 18:30:17 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\iIIIVrrzONtx0uS
    [2011/11/08 19:20:00 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\IjCkBOyAuSipadf
    [2011/11/08 19:04:55 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ijCwkIrlOtuSbo4
    [2011/11/08 18:52:16 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\iJJ7fEL8gTqhC
    [2011/11/08 18:13:19 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\IjjjUUCelIBrPNx
    [2011/11/08 19:18:03 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\IlBtNAvo4GQd8Zh
    [2011/11/08 18:59:11 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\IlONPucS1boGaHs
    [2011/11/08 18:59:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\IlOt0ucSboGmsJE
    [2011/11/08 18:59:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\IlOtPucSbo4msJE
    [2011/11/08 18:31:32 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\innFF4pmH5sQJdK
    [2011/11/08 19:20:21 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\IONtxPu1iDoG
    [2011/11/08 18:41:18 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\IOONNtxxA0uS
    [2011/11/08 18:50:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\iPNNyycA1uvDob4
    [2011/11/08 18:36:07 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\IrrrzOONt
    [2011/11/08 19:05:52 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\IrzyAvo3Ga6WfLT
    [2011/11/08 18:58:11 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\iS5LwtimKwB14dT
    [2011/11/08 18:53:45 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ItzzPNycAuvDoFp
    [2011/11/08 18:14:09 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\IuvvSS2ibF3pG5Q
    [2011/11/08 19:23:26 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\IWK7fEL9gZjCkVl
    [2011/11/08 19:24:53 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\IWK7fRL9gXjCkVz
    [2011/11/08 19:18:09 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\IWK8fRL9hjeBOxu
    [2011/11/08 18:23:41 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\iwwjjUCelI
    [2011/11/08 19:04:51 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\iYCwkIVrlNx0c
    [2011/11/08 19:20:32 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\j0osLhVx1n5EqUt
    [2011/11/08 19:24:01 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\j0pKqlSmTlvWY
    [2011/11/08 18:56:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\J0Sb3pna6
    [2011/11/08 18:56:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\J0Sb3pnQs
    [2011/11/08 19:16:08 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\j0uv235Qd79XYer
    [2011/11/08 19:16:07 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\j0uvS2ibF5Qd79X
    [2011/11/08 19:16:08 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\j0uvSi3G6fgCrAS
    [2011/11/08 19:16:08 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\j0uvSibF3G6fgCr
    [2011/11/08 18:57:10 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\J1Dnam6Jf8ZhwVl
    [2011/11/08 19:05:07 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\j1vo4m5JE8ZhwVI
    [2011/11/08 18:38:11 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\J22oobF44pG5sJd
    [2011/11/08 18:17:43 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\J333pnnG5aQHdW7
    [2011/11/08 18:30:21 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\j33pm55aQJdW8fL
    [2011/11/08 18:50:44 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\j555sWWJ7dELgRq
    [2011/11/08 19:20:49 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\j55aQ6dWK8fR9Tq
    [2011/11/08 19:18:08 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\J5aQJ6dWKfLhjeB
    [2011/11/08 19:18:33 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\J6dWK7fRL
    [2011/11/08 19:22:31 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\j9hTXqjUCkBzyAu
    [2011/11/08 18:58:16 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\J9hTXqUeBz0Sbp5
    [2011/11/08 18:31:44 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\jaaaQJ66dWKfR9T
    [2011/11/08 19:18:09 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\JaQJ6dWK89TjeBO
    [2011/11/08 18:46:03 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\jbbFF4ppmGsQJdE
    [2011/11/08 18:15:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\jbFFF3pnG5aQHdK
    [2011/11/08 18:57:03 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\jBrzy1Sbp5
    [2011/11/08 18:48:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\jCCeekIBBrONyAu
    [2011/11/08 18:29:58 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\jccSS1iiD3
    [2011/11/08 19:22:20 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\jD2onF4pm5Q7E8Z
    [2011/11/08 19:06:06 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\JDb4m5Q6E8R9TwU
    [2011/11/08 18:54:13 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\jDD3onF4am5sJ
    [2011/11/08 19:16:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\JddKR9TwC
    [2011/11/08 18:27:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\JddWWK77fRLgTqj
    [2011/11/08 19:22:20 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\jDonF4m5sJK9XlN
    [2011/11/08 19:19:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\jDqigS8cENQB5kG
    [2011/11/08 19:04:34 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\JdWK8fL9T
    [2011/11/08 19:04:34 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\JdWK8fRL9
    [2011/11/08 19:16:15 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\JdZjINAuDbpGQ68
    [2011/11/08 18:21:45 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\JeeelIIBrzPy
    [2011/11/08 18:56:42 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\jEgZXjUVet
    [2011/11/08 19:24:03 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\JelIBtzPcuF69e1
    [2011/11/08 19:24:02 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\JelIBtzPNc1v2b4
    [2011/11/08 19:09:25 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\JF3pmG5aQ6W8
    [2011/11/08 18:53:17 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\jF3ppGGaQH6W7R9
    [2011/11/08 18:58:26 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\JGs6EfZTwUlzAu2
    [2011/11/08 19:15:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\jH5sQJ7dEg
    [2011/11/08 19:20:49 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\jibF3GaQHd
    [2011/11/08 19:16:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\JJddKR9Tw
    [2011/11/08 19:16:18 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\jjYCwNPci3Gm6Lh
    [2011/11/08 18:58:13 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\jK7fEL9gTYVtS3m
    [2011/11/08 19:22:54 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\JmG5sQJ6d
    [2011/11/08 18:28:32 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\jnFF44amH5
    [2011/11/08 18:48:51 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\JNNttxPP0cSibDo
    [2011/11/08 19:16:16 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Jo4GQ6KfZTwUlBN
    [2011/11/08 18:56:42 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\JPS1vo4msJEgqXU
    [2011/11/08 19:18:22 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\jQJ6dWK8fL
    [2011/11/08 18:36:59 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\jQJJJ6dWK8
    [2011/11/08 18:24:05 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\jQJJJ7dEK8gR9hX
    [2011/11/08 19:07:23 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\JqXUlt0Avo4HQd8
    [2011/11/08 18:57:10 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\jqYkIOxuSb
    [2011/11/08 18:50:29 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\jS11iibD3o
    [2011/11/08 18:14:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\jssQQJ6ddK8fR9T
    [2011/11/08 18:58:29 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\jt0c1vDo4Hs7Egq
    [2011/11/08 18:49:15 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\jTTTXqqjYC
    [2011/11/08 19:05:13 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\jUCIzyAviFn5Hd7
    [2011/11/08 18:58:30 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Jv2onFp5Q7K9jeB
    [2011/11/08 18:58:30 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\JvD2onFp5Jd8ZYj
    [2011/11/08 18:31:09 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\jVeellIBtPNyA1v
    [2011/11/08 18:56:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\JVlOxySv4
    [2011/11/08 19:20:38 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\jwjUVelIBzNc1v2
    [2011/11/08 18:59:11 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\JwkIVrlONPuS
    [2011/11/08 19:22:32 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\JxA0ubGdLjVt
    [2011/11/08 19:22:31 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\JxA0uSbp5HWf
    [2011/11/08 19:23:51 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\jxP0ucS1i3
    [2011/11/08 19:20:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\JXUeOtPy1
    [2011/11/08 18:56:16 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\jXUkrNAvi3GQd7L
    [2011/11/08 19:22:27 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\jYCekVrzOt0c2
    [2011/11/08 19:08:08 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\JyxA1uSo3
    [2011/11/08 18:20:39 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\jZZqqjYYCwIVrON
    [2011/11/08 18:39:52 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\JZZZqhhYCwkUrlB
    [2011/11/08 18:52:54 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\K00ucS2ibDpn4Q6
    [2011/11/08 18:38:00 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\k00uucS11iD3oGa
    [2011/11/08 18:40:45 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\k11iibDD3on
    [2011/11/08 18:59:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\k1ib34ms7EgqCUl
    [2011/11/08 18:59:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\k1iDo4HWfLThwUl
    [2011/11/08 19:16:15 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\K1oHdZjINAuDbpG
    [2011/11/08 19:24:43 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\k2aRCyiQLCtiQLw
    [2011/11/08 18:17:01 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\k33oonG44mH6sJf
    [2011/11/08 19:20:22 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\K4amH6sWJfLgZYk
    [2011/11/08 19:22:20 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\K4pmH5sQJd
    [2011/11/08 19:21:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\k5sQJK8gRhweItP
    [2011/11/08 18:42:37 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\K888gTTZqhYCkUr
    [2011/11/08 19:06:08 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\k99gqYwIrOtPc1b
    [2011/11/08 18:46:59 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\K99gTZqqjYwkIrl
    [2011/11/08 19:16:16 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\k9XjeBzx1voFpGQ
    [2011/11/08 18:11:25 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\KaaamHH6sW
    [2011/11/08 18:26:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\KaaammH5sWJ7ELg
    [2011/11/08 19:06:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\kbD3pnG47gjCIl
    [2011/11/08 19:06:46 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\kbD3pnG4HWf9Tj
    [2011/11/08 19:06:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\kbD3pnG4KEgqCI
    [2011/11/08 18:12:58 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\KBtttxP0yc
    [2011/11/08 19:24:50 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Kc3m7gCl0v4W8Ye
    [2011/11/08 19:20:19 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Kd8ZTjeBPy
    [2011/11/08 18:37:56 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\kDD33onFFamH5W
    [2011/11/08 18:36:15 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\KDDD2oobF4pG5QJ
    [2011/11/08 18:15:33 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\KEEEL88gTZqYCkU
    [2011/11/08 19:19:41 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\KeIrzPNyx1vb3G6
    [2011/11/08 18:58:59 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\kEK8gRZ9hwUltN
    [2011/11/08 19:19:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\KelIBrzPNx1v2Fm
    [2011/11/08 19:19:41 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\KelIBrzPNx1vo3G
    [2011/11/08 19:18:03 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\kelIBtPcuDbp5Qd
    [2011/11/08 18:23:45 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\KFF44pmmH5sJ7EK
    [2011/11/08 19:06:17 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\KfRgqYkIrNxu2
    [2011/11/08 18:14:33 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\kGGG5aaQH6dW7fL
    [2011/11/08 19:19:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\kgR9hYwjUBPcu2
    [2011/11/08 18:31:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\KgTTTXqjYCekIrO
    [2011/11/08 18:56:15 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\KhwCelzNyAvo3Ga
    [2011/11/08 19:21:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\KhYXkelOBzy1vFp
    [2011/11/08 19:19:41 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\KIBrPNyxAuo3GQd
    [2011/11/08 18:18:01 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\KJ66ddEK8fRZ9Tw
    [2011/11/08 19:19:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\kJ6dEK8fRhXjCIr
    [2011/11/08 18:48:05 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\kjjUUCellIrzPyx
    [2011/11/08 19:08:10 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\KjVx2nHfZkVOxS3
    [2011/11/08 18:57:58 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\kjYCekIVzNAu2bp
    [2011/11/08 19:06:52 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\KKf9ZYkrlNx0Si3
    [2011/11/08 19:24:53 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\KkIVrzONtA
    [2011/11/08 18:53:13 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\KKK7fEL9gZqjCkV
    [2011/11/08 18:15:19 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\kkUUVVelOBtzPy
    [2011/11/08 19:19:01 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\klIBtzPcu2Fm5Jd
    [2011/11/08 19:19:00 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\klIBtzPNyAuDoFp
    [2011/11/08 18:25:21 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\KlOONNtxP0uc1iD
    [2011/11/08 18:37:31 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\KmmHH5sWWJdELgZ
    [2011/11/08 18:56:57 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\KnFEZXlP12mJg
    [2011/11/08 18:56:46 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\knG4a6W79ZjwIl
    [2011/11/08 18:58:33 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\KNPc1Dna6J
    [2011/11/08 19:19:18 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\KnX2RcU3TuKzGj1
    [2011/11/08 19:18:23 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\kob3pmaQJdKfLhq
    [2011/11/08 18:14:44 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\kOOONttxP0uc1iD
    [2011/11/08 19:00:15 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\kOtPySDn4Hs
    [2011/11/08 18:23:38 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\kppnnG55aQHdW7f
    [2011/11/08 19:19:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\kQJ6dEK8fZhXjCI
    [2011/11/08 19:06:16 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\KR9hXUlrNAuSbpG
    [2011/11/08 18:59:15 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\krONyxAuSip
    [2011/11/08 19:08:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\KRZqhYXwkVlBzy1
    [2011/11/08 19:16:41 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\kTeBrzONA2Q
    [2011/11/08 18:48:21 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\KUUCCekIIrzONx0
    [2011/11/08 18:46:35 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\kuuccS1iiD3on4m
    [2011/11/08 18:22:10 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\KUUUCeekIBrzNyA
    [2011/11/08 18:51:13 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\kvDD22onF4p
    [2011/11/08 19:05:03 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\KvSSoFp5Qd8R9
    [2011/11/08 18:44:23 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\KVVrrzONtx
    [2011/11/08 19:08:13 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\KW89XUrx2p
    [2011/11/08 18:25:05 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\KWWKK7fRL9gTqjC
    [2011/11/08 18:41:33 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\kXXqqjYCekI
    [2011/11/08 18:59:37 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\KYkeOPy1v2Fms
    [2011/11/08 18:43:28 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\kZ99hhTXwjUClIr
    [2011/11/08 19:08:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\KZqhYXwkUeOtPc1
    [2011/11/08 18:22:21 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\L00uucSS1iD3nGa
    [2011/11/08 19:18:28 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\l1HRlus9ISa9rid
    [2011/11/08 18:59:37 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\L2npHs7EgZh
    [2011/11/08 19:18:21 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\l48V0osKhVtP
    [2011/11/08 18:58:56 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\l5aHdWK7R
    [2011/11/08 18:57:48 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\L5dKRhXUeIzyAvi
    [2011/11/08 18:58:37 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\L67LqeIzNAuiDn4
    [2011/11/08 19:21:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\L7dEK8gRZhX
    [2011/11/08 19:24:53 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\L7fRL9gTXjCkVzN
    [2011/11/08 19:20:38 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\L8gRZ9hYXjV
    [2011/11/08 19:17:06 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\l9hTqCkrNAviFn5
    [2011/11/08 19:17:06 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\l9hTqUkrNxu2Fn5
    [2011/11/08 19:20:00 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\l9jlPAS356fhjkO
    [2011/11/08 18:42:41 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\lA00uucS2
    [2011/11/08 18:59:15 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\LA0uvS2ibnaHd7
    [2011/11/08 19:08:08 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\lA1u2Fp5JW8L
    [2011/11/08 19:08:08 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\lA1u2Fp5Qd8X
    [2011/11/08 19:08:08 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\lA1u2FpQdLqe
    [2011/11/08 18:46:39 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\LAA00uvvS2iF3nG
    [2011/11/08 18:56:46 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\LaHs7LgqCIltc3m
    [2011/11/08 18:12:08 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\lbbbD33pnG4QHsW
    [2011/11/08 19:21:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\lBtzPNycAuDoFGR
    [2011/11/08 19:24:26 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\lCDqiEOnd
    [2011/11/08 19:17:09 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ld8R9TjeB
    [2011/11/08 18:30:29 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\lddEEK8ggR9h
    [2011/11/08 19:21:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\LdKgRZhXwVl
    [2011/11/08 19:18:09 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ldWK8f9hTjeBOxu
    [2011/11/08 19:18:09 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ldWK8fRL9TjeBOx
    [2010/12/26 14:48:49 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Leadertech
    [2011/11/08 18:15:44 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\LeeelOOBtzP
    [2011/11/08 19:05:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\LEK8ZhwUlBzyAu2
    [2011/11/08 18:14:30 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\lGGG44amH
    [2011/11/08 19:24:32 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\LgXlNv4Q8Tez1b5
    [2011/11/08 19:24:29 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\LH6sWK7L9jwVNu
    [2011/11/08 18:42:19 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\lhhYYXwjjVelItP
    [2011/11/08 18:16:08 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\lhYYYXwkUVelOtP
    [2011/11/08 18:57:58 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\LIVrNAu2DnQ
    [2011/11/08 19:18:08 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\LjUeBPxAu2FpGa
    [2011/11/08 19:09:03 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\LK7fRLgqYkrOtA
    [2011/11/08 18:28:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\LkkkUVVrlOBtP0c
    [2011/11/08 19:22:55 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\LlIBrzNyx1v23ma
    [2011/11/08 19:22:55 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\LlIBzA1uv2FmaJW
    [2011/11/08 19:21:59 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\lN8xWznqSfrG8BF
    [2011/11/08 19:16:42 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\LNAc2Dna6Kf9ZY
    [2011/11/08 18:59:42 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Lo4HsJEg9YwVIt
    [2011/11/08 19:22:45 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\LobF3pmG5Q6
    [2011/11/08 19:22:45 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\LobF3pmG5QK
    [2011/07/01 19:45:08 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\LolClient
    [2011/11/08 19:07:33 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\LP2sgUP2ms6
    [2011/11/08 18:56:42 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\LpmHQ7dEKZhXjVl
    [2011/11/08 18:43:16 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\LPP00yccS1iD3nF
    [2011/11/08 19:20:21 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\LPuc1ibD3n4m6W
    [2011/11/08 18:52:43 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\lqqjUCekIrzOyAu
    [2011/11/08 18:26:43 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\LrrllONNtx0uc1
    [2011/11/08 18:57:50 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\LSi3na6JfLThCUl
    [2011/11/08 18:43:20 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\lsWWKK7fE
    [2011/11/08 19:06:59 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Lt0Avo4HQ7K
    [2011/11/08 18:57:00 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\lTqYkrOxu2Dna6K
    [2011/11/08 18:17:11 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\LtttzPP0ycA
    [2011/11/08 18:29:15 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\LTZZqqhYCwkUrlB
    [2011/11/08 19:22:49 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\lU0osgU0oQZV
    [2011/11/08 19:22:45 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\lUCelIBrzNAuSoF
    [2011/11/08 18:36:43 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\LUUUVeelIBtzNyA
    [2011/11/08 18:13:43 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\LuuuvSS2obF
    [2011/11/08 18:27:28 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\lUUVVrlOBtxP
    [2011/11/08 19:16:45 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\LVeBPcu2b4G
    [2011/11/08 19:20:44 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\lvGKwrvGK
    [2011/11/08 18:35:43 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\LVrrllONtxP0cSi
    [2011/11/08 18:11:42 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\lvvvS22ib
    [2011/11/08 18:10:32 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\LxPPP0ycS1ivDoF
    [2011/11/08 19:08:07 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\LYrPiFsLhVz1n5E
    [2011/11/08 18:40:19 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\lzOONNyxA0uv2iF
    [2011/11/08 18:16:33 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\m1iivvD2on
    [2011/11/08 18:41:11 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\m222onnF4pmHsQ7
    [2011/11/08 18:26:28 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\m555aQQH6d
    [2011/11/08 18:56:14 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\m5JE8RYjeBPcu2F
    [2011/11/08 19:18:09 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\m9hTjeBOxu2nH9e
    [2011/11/08 18:38:31 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\mBBBtzzPNyc1uD2
    [2011/11/08 18:43:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\mDD33onGG4mH6W7
    [2011/11/08 18:59:59 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\mdK8fLhqCkBOy0v
    [2011/11/08 18:50:09 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\mffEEL8ggTqhY
    [2011/11/08 19:22:30 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\mG5JEf9XUlrNx
    [2011/11/08 18:36:27 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\mGGG4aaQH6sW7
    [2011/11/08 18:49:35 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\mgTTTZqhYCwkU
    [2011/11/08 18:22:54 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\mjjjUCeekI
    [2011/11/08 19:17:38 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\mjUVelIBtPyAuDo
    [2011/11/08 19:05:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\mK8ZhwUlBzyAu2b
    [2011/11/08 19:05:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\mKf9TjCIrNAu2b3
    [2011/11/08 19:20:43 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\mmLXB1pEYI146hl
    [2011/11/08 19:08:11 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\mn4pH5QJ7KgZX
    [2011/11/08 19:08:11 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\mnF4m5QJ7E8R9
    [2011/11/08 18:37:27 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\mnnnF44mH5sJd
    [2011/11/08 18:22:42 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\mNNyycAA1uv2oF4
    [2011/11/08 19:22:45 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\mPNyA1uvSoFpGad
    [2012/01/20 23:02:28 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Mumble
    [2011/11/08 18:13:54 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\mUUCCekIIBzONx0
    [2011/11/08 18:49:31 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\mwkkVeelOB
    [2011/11/08 19:07:00 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\mXjUCeBzyA
    [2011/11/08 19:06:52 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\mxP0uc1ib3n4m6W
    [2011/11/08 19:07:00 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\mXqjUCIzyu
    [2011/11/08 19:19:00 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\mXwjUVelItPcu2F
    [2011/11/08 19:19:00 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\mXwjUVelItPy1Db
    [2011/11/08 18:52:19 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\n0uccS2iD
    [2011/11/08 18:38:58 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\n333pnnG4
    [2011/11/08 18:20:32 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\N55aaQJJ6dW8fL9
    [2011/11/08 18:58:56 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\N5aHdWK7RgX
    [2011/11/08 18:58:56 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\N5aQH6dWKRg
    [2011/11/08 18:58:56 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\N5H6dWK7Rgq
    [2011/11/08 18:37:11 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\N6ssWJJ7fL8gZqY
    [2011/11/08 19:07:54 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\nA0uvS2bFn56Kf9
    [2011/11/08 19:07:54 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\nA0vS2ibFpGaJW9
    [2011/11/08 18:59:58 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\NA1uvS2ob3m56W8
    [2011/11/08 18:32:23 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\NaaQQH6ddW7fR9g
    [2011/11/08 19:18:03 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\nAvo4GQd8ZhwUlr
    [2011/11/08 18:56:56 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\nb3Ga6s7LThCUrB
    [2011/11/08 18:32:27 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\NbbFF3ppmG5QJdW
    [2011/11/08 19:05:51 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\nbF4pmG5sJE8
    [2011/11/08 18:57:35 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Nbo4sLhVx1om7gX
    [2011/11/08 19:00:02 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\NBtPc1uv2bm
    [2011/11/08 19:18:02 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\nD2onF45JEg9YwU
    [2011/11/08 18:33:34 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\nddEEK8gRZ9h
    [2011/11/08 19:15:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\NdEL8gRqXUltPy1
    [2011/11/08 19:15:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\NdL8gRhwUltPyAv
    [2011/11/08 19:08:56 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\neBPxu2F4GQd8ZT
    [2011/11/08 18:41:48 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\NEEEL8gTZhYCkUr
    [2011/11/08 19:21:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\nEK8gRZhXjVl
    [2011/11/08 19:21:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\nEKgRZ9hYwVl
    [2011/11/08 18:59:58 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\nelIBzy1Do4Gs6E
    [2011/11/08 19:22:06 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\nePuF5dZjBx2
    [2011/11/08 19:22:46 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\nF3pmG5aQKRh
    [2011/11/08 18:40:15 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\nfEELL9gTZqj
    [2011/11/08 18:25:13 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\NGG55sQQJ6dK8R
    [2011/11/08 18:56:56 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\nGs7LThwUlBPy1v
    [2011/11/08 19:21:21 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\NIiKI3ENaqyHYc5
    [2011/11/08 19:22:20 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\NJ7dE89wIyD4Q8
    [2011/11/08 18:56:43 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\NjUVetA4dTBAoGd
    [2011/11/08 19:21:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\nKgRZhXwjVlB
    [2011/11/08 18:41:56 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\nkkIIBrrzONxAuv
    [2011/11/08 18:34:56 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\nkUUVVelOBtz0yA
    [2011/11/08 19:07:34 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\nL9hTXjeB
    [2011/11/08 19:07:34 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\nL9hTXqjU
    [2011/11/08 19:07:34 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\nL9hTXUIz
    [2011/11/08 18:12:29 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\nlOOBBtzP0yc1iD
    [2011/11/08 18:43:59 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\NlOOONtxP0u
    [2011/11/08 18:35:15 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\NmHH55sWJ7dE8g
    [2011/11/08 18:42:53 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\NmmHH5sQQ7d
    [2011/11/08 18:48:32 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\NmmHH6sWWJfELgT
    [2011/11/08 18:10:04 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\NmmmH55sQJ7dKgZ
    [2011/11/08 19:22:42 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\NNFWjxnRIca9IS
    [2011/11/08 19:18:34 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\NnG5aQH6dKfLgXY
    [2011/11/08 18:20:04 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\nNNttxxA0uc2iD3
    [2011/11/08 18:34:21 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\nOONNtSn4HJg
    [2011/11/08 18:56:57 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\nP0y1vonFms7gXl
    [2011/11/08 19:23:56 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\nPba7hVyn
    [2011/11/08 19:04:31 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\npW9YrxDaKgCrP1
    [2011/11/08 18:20:18 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\NqjjjUCekIBrzNx
    [2011/11/08 18:35:27 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\NrzzOONyxA0uS2b
    [2011/11/08 19:04:39 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\NS2ibF3p5Qd7Lg
    [2011/11/08 18:19:01 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\nSSS22ibD
    [2011/11/08 19:24:29 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\nsWK7L9gjwVNuDG
    [2011/11/08 19:17:51 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\nTIA3HLCNS47hOi
    [2011/11/08 19:17:51 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\nTkA3HLwxD6gU0o
    [2011/11/08 18:18:04 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\NTTZZqhhYCwUVlO
    [2011/11/08 18:27:02 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\NTXXqqjYCekIrzN
    [2011/11/08 18:56:20 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\NUeIrNAu2b3GQ6
    [2011/11/08 18:47:38 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\nuuucSS1ibDonGa
    [2011/11/08 18:58:11 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\nUv7VDElD6wPSpJ
    [2011/11/08 18:59:58 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\nVelIBPcuDo4ms6
    [2011/11/08 18:59:58 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\nVelIBzNAuDopGQ
    [2011/11/08 19:08:49 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\NWK7fE9ZjwOuDGa
    [2011/11/08 18:14:05 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\NwwkkIVrrONtx0
    [2011/11/08 18:16:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\nXXwwkUUV
    [2011/11/08 19:23:52 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ny1Dn5EZkBcDnpH
    [2011/11/08 18:09:53 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\NYYCCwkkUVrOBxP
    [2011/11/08 18:59:34 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\NzONyxA0uSiFpGa

    Continued in next post ...
     
  10. mambass

    mambass

    Joined:
    Apr 11, 2008
    Messages:
    141
    Hi 07tcbsp,

    Thank you for the logs. :)

    I understand that the OTL.txt log was too big to post. I'm going to post it to this thread in multiple segments so that Teachers and others at my site can review that information.

    You do not need to take any action at this point. I will analyze the logs and post back a new set of instructions shortly.

    mambass

    Continued from previous post ...

    [2011/11/08 19:18:34 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\o0Si3naHWfLTjwI
    [2011/11/08 19:19:37 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\o0vi3GQd7LTjCI
    [2011/11/08 19:06:27 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\o0vSb3naHW7LTqC
    [2011/11/08 18:09:35 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\o111uvvD2obFpm
    [2011/11/08 18:40:34 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\O33ppnGG5aQ6dK7
    [2011/11/08 19:06:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\o47gjCIlOxu1Dna
    [2011/11/08 19:06:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\o4aQH6sWKf9TjCI
    [2011/11/08 19:06:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\o4aQH6sWKLgqCIx
    [2011/11/08 18:58:56 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\O5aHdWK7Rg
    [2011/11/08 18:47:07 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\O666dWWK8f
    [2011/11/08 18:27:24 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\o888gRRZ9hYwjU
    [2011/11/08 19:06:26 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\O8ZTjeBPxu2FpGQ
    [2011/11/08 18:29:27 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\O99hhTXXqjCekBr
    [2011/11/08 18:28:28 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\O99hhYXwwjVel
    [2011/11/08 19:06:16 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\o9hXUlrNAuSbpGa
    [2011/11/08 18:35:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\oAAA0uvSS2bF3nG
    [2011/11/08 18:28:24 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\oaaaQJJ6dWK8RL
    [2011/11/08 18:31:05 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ObbbF3mGaQ
    [2011/11/08 18:13:01 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\OccSS2iibD
    [2011/11/08 19:17:06 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\OCrx2pQ7TerxSDn
    [2011/11/08 19:08:19 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ocS2bDpnGaH
    [2011/11/08 19:05:33 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Od8LTjeBOy0SbpG
    [2011/11/08 18:48:13 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ODD33onnG4aH6WJ
    [2011/11/08 19:21:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\odEK8gRZhXj
    [2011/11/08 19:21:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\odKgRZhXwVl
    [2011/11/08 19:21:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\oEK8gRZhXjV
    [2011/11/08 19:17:34 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\OeybJ9ex2m6Rq
    [2011/11/08 18:16:01 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\offfRLL9gTXjYek
    [2011/11/08 18:25:58 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\offfRLL9hTXqUCk
    [2011/11/08 19:00:17 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\OG5QJ6dEKfZhwUe
    [2011/11/08 19:08:07 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\og9XUVelItPyAuD
    [2011/11/08 19:24:29 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ogXqjYekrNx0ciD
    [2011/11/08 18:18:29 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\OhhYYXwjUV
    [2011/11/08 19:22:06 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ohwUeIzy1Db
    [2011/11/08 18:56:56 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\oib3Ga6s7LThCU
    [2011/11/08 19:22:55 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\oIBrzNyxAuSom9O
    [2011/11/08 19:22:55 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\oIBzA1uvSoFmaJW
    [2011/11/08 19:06:29 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\oiDnaHWd8ZYkVOt
    [2011/11/08 19:24:53 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\oIVrzONtx0c
    [2011/11/08 19:21:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\oKgRZhXwjVl
    [2011/11/08 18:58:29 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\olBP0ycA1v2np5
    [2011/11/08 19:18:01 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\oon4HWJdLRqXklB
    [2011/11/08 18:23:01 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\oOOOBttzP0yA1vD
    [2011/08/11 20:28:48 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\OpenCandy
    [2011/05/19 21:03:33 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\OpenOffice.org
    [2011/11/08 18:20:46 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\OPPPNyycA1uv2oF
    [2011/11/08 18:34:31 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\oqqqYCCwkUVlBtP
    [2011/11/08 19:06:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\oQs7LgqCIxci3GH
    [2011/11/08 19:08:19 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\oS2bDpnG4Qs
    [2011/11/08 19:17:57 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\os7KR9YjUIzy1Db
    [2011/11/08 19:19:37 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\oSpHfTeIzt0SiD
    [2011/11/08 18:58:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\OSpJRqINv3Q7TeI
    [2011/11/08 18:24:17 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\oSS22ibbD3nG4Q
    [2011/11/08 19:19:27 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\OsWK7fEL9ZjwIrO
    [2011/11/08 19:21:11 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Otyc1Dn4HJd8ZhX
    [2011/11/08 19:23:38 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Ov7VvQw1JU
    [2011/11/08 18:58:59 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ovaJ8qUBciFsdKg
    [2011/11/08 18:13:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ovDD22onF4pm5sJ
    [2011/11/08 19:24:27 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\OvoF3pmG5Q68R
    [2011/11/08 18:57:58 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\oVrNAu2DnQs
    [2011/11/08 18:51:02 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\oVVrrllONtx0uS1
    [2011/11/08 19:19:17 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\OWxLyE07I9v8O
    [2011/11/08 19:24:29 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\OxA0ucS2iDpGaHs
    [2011/11/08 19:24:29 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\OxA0uS2bDpGaHsK
    [2011/11/08 19:24:29 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\OxA0uS2ib3n4Q6W
    [2011/11/08 19:22:42 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\OxaXAQqAQq0Hh
    [2011/11/08 19:08:54 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\oxPci3FmsJd8Zhw
    [2011/11/08 18:17:54 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\OxxxP00ucS1bD
    [2011/11/08 19:22:45 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\oYPFKUPvFmsJE8
    [2011/11/08 18:57:51 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\OYXwUltNAv2Fp5J
    [2011/11/08 18:57:51 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\OYXwVltNAv2Fms6
    [2011/11/08 18:11:11 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\oYYXXwkkUVl
    [2011/11/08 19:06:16 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\oZhwCIrNAuoFm5Q
    [2011/11/08 18:52:58 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ozOONyxAuvS
    [2011/11/08 19:08:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\oZqhYXwkUeOtP1D
    [2011/11/08 19:08:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\oZqhYXwkUeOtPc1
    [2011/11/08 19:08:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\oZqhYXwkUeOtPy1
    [2011/11/08 18:43:01 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ozzOONttx0uc2i
    [2011/11/08 18:15:51 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ozzzOONyxA0uS2b
    [2011/11/08 18:50:59 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\P11iivD3onF4aHs
    [2011/11/08 18:51:52 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\P4aamH5sJ7dE8Rq
    [2011/11/08 19:24:29 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\p6sWK7fELgZjCkV
    [2011/11/08 18:45:09 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\P777dEEL8gRqhXw
    [2011/11/08 19:05:25 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\P7fEL9ZjCIrOxu1
    [2011/11/08 19:22:38 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\p9xJeFgNp9On8Bo
    [2011/11/08 18:44:42 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\pA00uuvS2ibF
    [2011/11/08 18:45:21 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\PAA0uuvS2ibF3n5
    [2011/11/08 19:24:28 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\paQdK7R9XjCkrOt
    [2011/11/08 19:16:16 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\PAuo4GQ6KfZTwUl
    [2011/11/08 18:17:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\pBBttzP00cA1iDo
    [2011/03/15 18:26:25 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\PCDr
    [2011/11/08 19:07:55 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Pci3Gas7LTj
    [2011/11/08 18:58:59 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\PciFsdK8gZhwUl
    [2011/11/08 18:53:53 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\pCwkkUVrO
    [2011/11/08 18:48:44 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\pddEEK8ffR9hTwj
    [2011/11/08 18:58:59 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\pdEL8gRZqUBciFs
    [2011/11/08 19:18:02 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\PF4pHJEgZYwUeIt
    [2011/11/08 18:58:35 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\pf9TjCIrNxuSbpG
    [2011/11/08 18:19:04 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\PFFF3ppmG5aJ6dK
    [2011/11/08 19:04:54 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\pFma6KRhq
    [2011/11/08 18:27:19 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\pggRRZZ9hYXj
    [2011/11/08 18:09:50 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\PhhhYXXwjUVeIBz
    [2011/11/08 18:13:58 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\PIBBttzPNycA1v
    [2011/11/08 19:05:14 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\PIrOx0ci3GaHs7L
    [2011/11/08 18:58:57 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\pjekIVOxuSinaHs
    [2011/11/08 19:05:13 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\PjUCkrNxu2Fna6W
    [2011/11/08 18:57:23 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\pkIBrzONy0Sb
    [2011/11/08 18:17:04 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\PKK77fRRL9TXqYC
    [2011/11/08 18:51:10 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\PlllIBBrzPNxAuv
    [2011/11/08 18:52:31 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\PlOOBtxP0cS1v3
    [2011/11/08 19:15:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\PmH5sJ7dKg9XUIz
    [2011/11/08 19:15:37 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\PmH5sQ7ZhVz12Qf
    [2011/11/08 18:49:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\pmmmH55sQJ7dK8R
    [2011/11/08 18:28:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\pNttxxP0u
    [2011/11/08 19:21:34 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\PNtx0ucS1Dna6JE
    [2011/11/08 19:05:51 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\pob4pmG5sJd8
    [2011/11/08 19:05:51 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\pobF4pmG5QE8
    [2011/11/08 18:18:11 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\PooobbF3pmG5QJd
    [2011/11/08 18:11:04 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\POOONNyxA0uv2i
    [2011/11/08 18:36:32 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ppnnGG4aQH6sK7E
    [2011/11/08 18:43:32 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\pppmmH55sQJdE8g
    [2011/11/08 18:15:08 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\pPPP0uucS1ib3oG
    [2011/11/08 19:09:03 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\pQH6s7LgqCIlt0S
    [2011/11/08 18:12:22 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\PQQHH6ddWKfRLgT
    [2011/11/08 18:56:03 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\prBPci3Fms7LRhw
    [2011/11/08 19:07:34 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\pRL9hTXUk
    [2011/11/08 19:22:03 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\PrlNP0ucSiDoGaH
    [2011/11/08 19:22:45 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\przPNyA1uSoFpGa
    [2011/11/08 18:44:07 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\PRZZ99hTXwjUelB
    [2011/11/08 18:42:04 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\PUVVrrlOBtxPyc1
    [2011/11/08 19:20:20 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\PUzuFQRhqCkrNx
    [2011/11/08 19:04:39 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\PvS2ibF3p5Qd7L
    [2011/11/08 19:22:03 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\pWK7fEL9gqCkVlP
    [2011/11/08 19:05:25 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\PWK7fELTjCIrt0c
    [2011/11/08 18:48:09 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\pwwwjUUVelIB
    [2011/11/08 18:33:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\pxxxP00ucS1b
    [2011/11/08 18:35:00 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\PYYYCwwkUVrOBxP
    [2011/11/08 18:59:38 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\PZ9hYXwjUtAomJf
    [2011/11/08 19:07:34 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\PzNyxu2FmaJWfLh
    [2011/11/08 19:07:34 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\PzPNyxAu2Fp5JWf
    [2011/11/08 19:07:34 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\PzPNyxuSbp5JWfL
    [2011/11/08 18:32:31 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Q222oobF4pmGsQ
    [2011/11/08 19:16:39 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\q22o4m5Q7E8R9Yw
    [2011/11/08 19:22:31 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Q2Fma6K8fLhXjCk
    [2011/11/08 19:16:39 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\q2on4m5Q7E8RhXw
    [2011/11/08 18:56:03 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\q2QLVc6gVynJqB2
    [2011/11/08 18:57:57 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Q5aQH6dWKfL
    [2011/11/08 19:18:01 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\q5WJdEL8gZhX
    [2011/11/08 18:35:31 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\q666dEEK8fR9hXw
    [2011/11/08 18:42:26 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Q666sWWK7fELgT
    [2011/11/08 19:04:34 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Q6dWK8RL9XUeIzN
    [2011/11/08 18:56:20 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Q7cWwA5Xy4fwzb6
    [2011/11/08 18:23:05 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\q88ggTZZqhYwkVr
    [2011/11/08 18:38:23 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\q999gTTXqjYCkIr
    [2011/11/08 19:18:22 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\qaQJ6dWK8
    [2011/11/08 19:24:29 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\QbD3pnG4aHsKLgZ
    [2011/11/08 19:22:45 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\qbF4GQJE8ZTjClB
    [2011/11/08 18:53:06 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\QccA1ivD2oF4m5Q
    [2011/11/08 18:34:52 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\qccAA1uuvDobFpm
    [2011/11/08 18:38:50 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\QccAA1uvD2obFpG
    [2011/11/08 18:48:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\QccSS1ivvDon4a
    [2011/11/08 18:44:53 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\QDDD3oonG4am6s
    [2011/11/08 18:57:46 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\QDWhxoJYtDsZlum
    [2011/11/08 19:00:02 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\qeBPci2Fms7K
    [2011/11/08 18:31:48 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\qEEKK8ffRZhXwUC
    [2011/11/08 19:20:49 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\qGGG5aQ6dWKfR9T
    [2011/11/08 19:00:06 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\qhCkVlt0c1v3n4m
    [2011/11/08 18:28:04 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\QhhhTXXwjUCeIB
    [2011/11/08 19:08:54 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\QHsWJ7fE8TqYwUl
    [2011/11/08 18:48:01 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\qiibbF33p
    [2011/11/08 18:11:39 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\qIIVVrlOONxP0c1
    [2011/11/08 18:52:50 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\QJ7ddLLgRZq
    [2011/11/08 18:38:35 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\QJJJ7ddEL8g
    [2011/11/08 19:20:49 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\QjjUUCkIIrzOyA
    [2011/11/08 19:20:49 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\QjUCCekIBrzNyA
    [2011/11/08 19:20:49 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\QjUUCkIIrzONx0
    [2011/11/08 18:19:39 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\qkkIIBrrzONxAuv
    [2011/11/08 18:18:19 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\qkkUUVrllOtxPyc
    [2011/11/08 18:42:57 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\qllOOBttxPycSiv
    [2011/11/08 19:15:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\qmH5sJ7dK
    [2011/11/08 19:15:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\qmH5sQ7Zh
    [2011/11/08 18:57:57 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Qn5aQH6dW7R
    [2011/11/08 18:23:13 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\qnnnG55aQH6WK7R
    [2011/11/08 19:00:28 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\qNv4QKhCz1b5W9q
    [2011/11/08 18:45:32 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\QOOOBttx0ycSiv3
    [2011/11/08 19:18:22 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\QPy1vobF3m5Q6W
    [2011/11/08 19:06:16 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\qRL9hTXqjCIzy0S
    [2011/11/08 18:16:50 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\qrrllONNt
    [2011/11/08 19:07:35 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\QS2ibFnG5WfLTje
    [2011/11/08 18:33:59 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\qTTXXwjUC
    [2011/11/08 19:04:43 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\qTXjUCIrN
    [2011/11/08 19:16:38 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\QTYYYCwkUVr
    [2011/11/08 19:05:33 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\qu2pQ79XCkrNASb
    [2011/11/08 18:50:13 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\QuuucSS2ibD3nGa
    [2011/11/08 18:41:45 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\QUUUVeelOBtz0yA
    [2011/11/08 18:30:48 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\QUUUVeelOBzP0c1
    [2011/11/08 19:19:41 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Quvo3GQd8RhqCrA
    [2011/11/08 19:19:41 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\QuvSb3G6RqkNvF5
    [2011/11/08 18:56:16 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Qvi3GQd7LTjeIz
    [2011/11/08 18:53:29 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\qwkkUVrlO
    [2011/11/08 19:22:06 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\qwVIzy1Dbp5Qd8Z
    [2011/11/08 18:51:17 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\qWWJJ7fEL8gTZhC
    [2011/11/08 18:34:35 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\QwwkkIVrrlNtx01
    [2011/11/08 18:14:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\QwwkkUVeeOBtz0c
    [2011/11/08 18:49:11 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\qwwkkUVVrlOtx0y
    [2011/11/08 18:43:05 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\QxAA00uvS2ibFpG
    [2011/11/08 18:56:16 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\qXUkrNAvi3GQd7L
    [2011/11/08 18:13:22 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\qyyccS11i
    [2011/11/08 19:05:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\QzPNyAvo3m5JKR9
    [2011/11/08 19:05:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\QzPNyAvo3m5Q68R
    [2011/11/08 19:07:34 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\qzPNyxAu2Fp5JWf
    [2011/11/08 18:25:33 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\qZZ99hTTXwUCeIB
    [2011/11/08 18:30:44 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\QzzzPNNycA1vDo
    [2011/11/08 18:40:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\r000yccS1iv3oF4
    [2011/11/08 19:20:21 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\R0uc1iD3oGaHsJ
    [2011/11/08 19:05:54 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\R1Dna6JEgqCUlt0
    [2011/11/08 19:06:46 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\R2ip5Qd7LTjeVOx
    [2011/11/08 18:59:37 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\R2npHs7EgZh
    [2011/11/08 18:26:21 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\R555sQQJ7dEKgR9
    [2011/11/08 18:28:39 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\r55aaQH6dWK7fLg
    [2011/11/08 19:20:39 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\R5sQ6RXezA2mJfT
    [2011/11/08 19:05:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\R6EKf9TjClrNAvo
    [2011/11/08 18:39:56 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\r9ggTTXqjYCeIVz
    [2011/11/08 18:51:06 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\RaQQQH6dWK7fR9
    [2011/11/08 18:17:50 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\rBBBttzP0ycAiv2
    [2011/11/08 18:30:24 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\RBBBtzzPNyc1uv2
    [2011/11/08 19:15:19 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\rbD3p4QHs79Z
    [2011/11/08 18:59:37 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\RD2npHs7EgZ
    [2011/11/08 18:56:10 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\RdWK7fRL9Tq
    [2011/11/08 18:14:01 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\RFFF4aamH5sW7dL
    [2011/11/08 18:11:07 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\RG55ssQJ6dEKfR9
    [2011/11/08 18:39:17 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\RGG44aQH6sWK7E9
    [2011/11/08 18:56:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\RGsfZYkVOxy1DnH
    [2011/11/08 19:04:50 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\rINAvFaKg
    [2011/11/08 18:49:19 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\rjjjUUeekIBzOyx
    [2011/11/08 18:11:14 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\rkkIIVrll
    [2011/11/08 18:24:09 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\rkkUUVellBtzPyA
    [2011/11/08 19:05:03 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\RllIBrryxuSb3ad
    [2011/11/08 19:15:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\RlOBtzP0yv2
    [2011/11/08 18:24:49 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\rmmHH5ssQJ7EKgR
    [2011/11/08 18:41:07 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\rNNNyxxA1uv2ob3
    [2011/11/08 19:07:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\rNxuSiDGm
    [2011/11/08 19:21:11 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\rOBtyc1Dn4HJd8Z
    [2011/11/08 18:59:17 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ROBtzP0yc1v
    [2011/11/08 18:56:20 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\RONyx0Sbp5Q6W7
    [2011/11/08 18:23:53 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\rQQQH66sWK7fL9T
    [2011/11/08 18:53:57 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\RRL99TTqjYC
    [2011/11/08 18:37:35 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\RrrrlOONtxP0cSi
    [2011/11/08 19:08:51 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\rRwIyDpJf
    [2011/11/08 19:00:05 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\rrx2n6fTezASpH7
    [2011/11/08 18:11:32 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\RRZZ99hTXwjUClB
    [2011/11/08 18:56:55 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\rsKfL9TqC
    [2011/11/08 18:36:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\RTTTZqqhCUr
    [2011/11/08 19:00:29 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\RWf9XqCIzt0Sbp
    [2011/11/08 19:16:53 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\rwkVOxuD6gU0
    [2011/11/08 19:08:11 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\rwUeBz0ci2n4m5Q
    [2011/11/08 18:36:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\rWWKKfRLL9TX
    [2011/11/08 18:58:18 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\rXqCIrOtAc2DaWL
    [2011/11/08 18:22:06 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\rxxAA0uucS2bDpn
    [2011/11/08 18:59:15 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\RyxAuS2ibp5HW7
    [2011/11/08 19:24:28 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\RYyp8eu59BSQ9Ck
    [2011/11/08 18:46:11 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\RYYYCwkkIVrONxP
    [2011/11/08 18:24:25 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\RZZ99hTXXwU
    [2011/11/08 18:14:23 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\s000uvvS2ib
    [2011/11/08 19:20:35 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\s0iGdLqItSpH7T
    [2011/11/08 19:15:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\S0yc1D2on4m5JdK
    [2011/11/08 19:15:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\S0ycAv2F4m5VIAo
    [2011/11/08 19:15:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\S0ycDn4pm5JdKg9
    [2011/11/08 18:48:28 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\S0yyccA1ivD2nFp
    [2011/11/08 19:06:34 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\s1Do4HWd8ZhwVOz
    [2011/11/08 19:06:52 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\S2afjzcG6gktcD4
    [2011/11/08 19:06:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\S2ibD3pnG7gjC
    [2011/11/08 18:35:24 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\s2iibbD3pnG4QHs
    [2011/11/08 19:06:21 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\S2sglvsYzodjx
    [2011/11/08 18:37:52 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\S444pmmH5s
    [2011/11/08 18:57:42 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\S4J9eyoQRU
    [2011/11/08 18:24:13 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\s777fEEL8gTZhYw
    [2011/11/08 18:21:19 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\s888gRRZqhYXkUe
    [2011/11/08 18:15:58 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\SammHH5sWJ7dL8T
    [2011/11/08 19:15:19 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\sbD3pGaHW7LTjwO
    [2011/11/08 18:58:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\SbD3pnG4aHsKf
    [2011/11/08 18:32:15 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\sCCwwkUUVrlBtP0
    [2011/11/08 19:16:14 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\sD3oFms7dLRqYk
    [2011/11/08 18:41:29 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\sDDD3oonG4am6sJ
    [2011/11/08 19:20:17 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\SdXOiHgrSa
    [2011/11/08 19:20:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Se0GLISHZObWYxF
    [2011/11/08 18:39:31 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\SeeekIIBrzOyx0u
    [2011/11/08 18:40:38 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\SEEKK8ffRZ9TXjU
    [2011/11/08 18:27:56 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\sekkIIBrzONyA0v
    [2011/11/08 18:10:43 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\sellIIBtzPN
    [2011/11/08 18:35:08 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\sffRRL99gTXjYek
    [2011/11/08 18:11:00 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\SgggTZZqjY
    [2011/11/08 18:41:03 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\SH66ddWK7fRLgTq
    [2011/11/08 18:16:29 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\sjjjUCCelIBrPNx
    [2011/11/08 19:20:49 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\SkIIBBrzONxAuv2
    [2011/11/08 19:20:49 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\SkIIBBrzONyx0uS
    [2011/11/08 19:20:49 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\SkIIBrzzNyxAuv2
    [2011/11/08 19:20:22 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\sL8gTCkrBPySv3
    [2011/11/08 18:57:13 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\sltNADpJZexFJ9U
    [2011/11/08 19:18:08 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\smG5aQJ6dKfLhj
    [2011/11/08 19:07:15 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\So3GQd8LTjeBOxu
    [2011/11/08 18:57:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\sOBtP0ycAiDoFHQ
    [2011/11/08 18:57:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\sOBtP0ycAiDop5J
    [2011/05/19 20:53:19 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\SoftGrid Client
    [2011/11/08 18:20:08 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\soobbF4pmG5sQ6E
    [2011/11/08 18:10:35 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\spnnGG4aQH6sK7E
    [2011/11/08 19:19:00 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ssQ7dEK8gZhXjVl
    [2011/11/08 18:17:22 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\SsQQJJ6dEK
    [2011/11/08 18:45:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\sssWWK77fE9gTqj
    [2011/11/08 19:06:16 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\sTjUCekIBy0SbpG
    [2011/11/08 19:16:39 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Stva7RXety1vn
    [2011/11/08 19:06:16 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\sTXUCeIBNx0SiFp
    [2011/11/08 19:18:33 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\STXUkBOxAuSb3n5
    [2011/11/08 19:16:46 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\su2b3p5QHd7RgqC
    [2011/11/08 19:18:03 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\SUVelBtNAvo4GQd
    [2011/11/08 18:48:17 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\sVVrrzOONtA0uS2
    [2011/11/08 18:37:07 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\SwkkUUVelOBzPyc
    [2011/11/08 18:56:51 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\SxP0uSbo4HWf8Th
    [2011/11/08 19:08:19 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\SYCwkIVrlNxu1
    [2011/11/08 18:51:29 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\SYXXwjUVlIBtPyA
    [2011/11/08 19:16:38 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\SYYYCwwkUVrlB
    [2011/11/08 19:08:19 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\SzONt0c2Dp4Q6W7
    [2011/11/08 19:00:02 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\T2Fms7KRhwVIzy1
    [2011/11/08 18:21:34 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\T44ppmHH5sQ7dK8
    [2011/11/08 19:19:59 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\T555sQ6dE8R9TwC
    [2011/11/08 19:07:58 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\T56EKRZ9TwUeBzN
    [2011/11/08 18:38:08 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\T888fRRL9hTqjCk
    [2011/11/08 19:08:07 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\t9YjVelIBzNc1v2
    [2011/11/08 19:17:00 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\taJW8fLTXj
    [2011/11/08 18:56:16 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\TAvi3GQd7LTj
    [2011/11/08 18:56:16 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\TAvi3n5Hd7Lg
    [2011/11/08 18:22:57 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\TbbbF44pmG5sJ6E
    [2011/11/08 19:04:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\TbF3pQ7TeOxu2Dn
    [2011/11/08 18:34:26 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\TDDD3oonF4aHsW7
    [2011/11/08 19:22:21 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\TdE89wIyD4Q8TeP
    [2011/11/08 18:44:27 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\teekIBBrzONxAuv
    [2011/11/08 18:32:19 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\TEELL9ggTqjYwkV
    [2011/11/08 18:10:00 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\tFF33pmmG5
    [2011/11/08 18:18:50 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\tfRRRL9hTXqjUeI
    [2011/11/08 18:19:32 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\TgggRZZ9h
    [2011/11/08 18:45:43 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\TggRRZ99h
    [2011/11/08 19:22:51 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\tGKwzS5fjOS5fjO
    [2011/11/08 18:12:54 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\TgRRZZ9hYXwjVeI
    [2011/11/08 19:08:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\tgRZ9hYeltNAuDF
    [2011/11/08 18:57:51 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\tH5sQ7E8R9YwVlB
    [2011/11/08 18:58:13 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\tH6sWK7fE9ZCIrO
    [2011/11/08 18:46:51 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\thhYYXwwkUeOBzP
    [2011/11/08 19:06:38 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\TibD3aJgCl0v4W8
    [2011/10/15 13:15:41 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\TightVNC
    [2011/11/08 19:05:13 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\tIrNAu2b3Ga6K
    [2011/11/08 19:00:10 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\TIrOx0ciDom6
    [2011/11/08 19:05:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\TIrzPNyAvo3m5Q6
    [2011/11/08 18:25:17 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\tivvD22onF4pH5Q
    [2011/11/08 18:24:41 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\TjjjYCCekIVrONx
    [2011/11/08 19:06:50 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\tJW8LTqCIzy0v2F
    [2011/11/08 19:06:50 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\tJWfLTjeBOy0v2F
    [2011/11/08 18:45:01 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\TkkkIBBrzONxAu2
    [2011/11/08 18:29:11 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\tllOOBttzPycAiv
    [2011/11/08 19:23:51 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\tlONtxP0uSi3Ga6
    [2011/11/08 19:23:51 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\tlONtxP0uSi3nas
    [2011/11/08 19:23:51 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\tlONtxP0uSiDna6
    [2011/11/08 19:23:51 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\tlONtxP0uSiDnas
    [2011/11/08 19:04:39 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\tNAu2b3pmJWfL
    [2011/11/08 19:22:44 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\TNDKjtofkcmTOvW
    [2011/11/08 19:08:51 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\tnJqlA4dYB1pEhU
    [2011/11/08 18:44:15 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\tnnF44amH5sWJdL
    [2011/11/08 18:43:24 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\tNNNyxxA0uvSib3
    [2011/11/08 18:57:57 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\tNxu2Fma6KRhqCk
    [2011/11/08 18:57:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\TOBtP0ycAiDoFHQ
    [2011/11/08 19:16:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\TODWYPFEUAmflvG
    [2011/11/08 18:19:43 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ToobbF4ppm5s
    [2011/12/11 23:31:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\TP
    [2011/11/08 19:21:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\TPNycA1uv
    [2011/11/08 18:35:51 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\tPPNyyxA1u
    [2011/11/08 18:38:27 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\tQQQJ66dWK8fL9T
    [2011/11/08 19:22:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\tqtodjypRlva9
    [2011/11/08 18:17:08 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\TRRZZ9hTTXjUClI
    [2011/11/08 18:59:58 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\TS2o3mG5a
    [2011/11/08 18:59:56 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\tS6Cu6qxaq
    [2011/11/08 19:06:00 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\TTqCrP1nH
    [2011/11/08 18:15:05 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\TttzzP00y
    [2011/11/08 19:09:03 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\TtxA0ucS2b3n
    [2011/11/08 19:09:03 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\TtxA0uS2iDn4
    [2011/11/08 19:24:29 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\TucS2ibD3n4Q6W7
    [2011/11/08 18:59:58 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\TuvS2obF3
    [2011/11/08 18:52:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\TUVVelOBtP0yAiD
    [2011/11/08 18:59:18 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\tvD2obF4msJEf
    [2011/11/08 18:35:55 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\tVeellIBtzPNc
    [2011/11/08 18:29:39 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\tVrrllONtxP0cSi
    [2011/11/08 18:29:54 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\tWWJJ7ddEL8RZ
    [2011/11/08 18:44:03 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\tXXqqjUUCekBr
    [2011/11/08 18:28:20 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\TxxxA00uc
    [2011/11/08 19:08:07 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\TycA1uvD2p5QdKf
    [2011/11/08 19:16:37 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\TydBpXuKrGjSKIb
    [2011/11/08 19:06:38 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\tYkVOtPuSiD4HWf
    [2011/11/08 19:06:38 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\tYVOtPuS1b34Hs7
    [2011/11/08 19:24:02 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\tZ9hYXjUVl
    [2011/11/08 19:24:53 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\tzONtxA0uSiDn
    [2011/11/08 18:12:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\TzPPNNyxAuv2oF3
    [2011/11/08 18:56:56 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\TZYwUrBtPySv
    [2011/11/08 18:53:49 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\tzzP0ycA1iD2n4m
    [2011/11/08 18:52:08 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\TzzPNycA1uD2
    [2011/11/08 19:20:38 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\u2obF4pmGs6R
    [2011/11/08 19:07:49 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\U6hlNv3QLkua9z
    [2011/11/08 18:57:05 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\u6W7LgqCwUlt
    [2011/11/08 18:29:07 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\u88ffRZZ9hTw
    [2011/11/08 18:57:08 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\U9TjeIrNAv2Fp5Q
    [2011/11/08 18:33:51 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\UA00uucS2ibD3n4
    [2011/11/08 19:18:33 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\UA0uS2b3pGaHdK
    [2011/11/08 18:18:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\UAA00uuvS2i
    [2011/11/08 19:18:09 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\uaQJ6dWK8R9TjeB
    [2011/02/27 21:17:46 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Ubisoft
    [2011/11/08 19:20:49 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\uCCCekIBrzONxAu
    [2011/11/08 19:22:27 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\UCekVrzONx0c2D
    [2011/11/08 19:06:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\UD3pnG4HWf9TjC
    [2011/11/08 19:06:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\UD3pnG4KEgqCIl
    [2012/01/28 12:18:58 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\UDC Profiles
    [2011/11/08 19:16:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\uddEKfZTw
    [2011/11/08 19:16:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\uddKR9TwC
    [2011/11/08 19:05:07 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\uE8ZhwVItNAuDo4
    [2011/11/08 19:06:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\UeBPy1vo3Ga6Kf9
    [2011/11/08 18:56:20 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\uEidUiJj1mfwzb6
    [2011/11/08 18:37:43 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\UekkIIBrzONyA0
    [2011/11/08 18:57:11 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\uF4asEZwBipQd89
    [2011/11/08 18:10:07 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ufffEEL8g
    [2011/11/08 19:04:43 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\uG5Q6EfZ9TwUIrP
    [2011/11/08 18:16:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\UGGG44amH6s
    [2011/11/08 18:56:43 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\UgZXjUVetA4
    [2011/11/08 19:06:41 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\UH6Wf9XYkrNAci3
    [2011/11/08 18:49:43 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\UhTTXXqjUCekBrO
    [2011/11/08 19:18:28 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\uI1F69kA3
    [2011/11/08 19:07:35 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\uibF3pnG5
    [2011/11/08 19:05:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\UJ6d8RLhTCrx2p
    [2011/11/08 19:18:23 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\UJ6dWK8fR9T
    [2011/11/08 18:51:37 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\UJ77fEL8gZqhCkV
    [2011/11/08 19:24:27 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\UjeBPcu2Fms6Ef9
    [2011/11/08 18:13:51 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\uJJ77fEL8gTq
    [2011/11/08 18:27:44 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\uJJJ6ddEK8fR9hX
    [2011/11/08 18:36:52 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\UjjYCwkIVrlOtPc
    [2011/11/08 19:22:55 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\UjUCelIBrNx1v23
    [2011/11/08 19:04:34 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\uK8RL9hXU
    [2011/11/08 18:59:15 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ukIBrzONy
    [2011/11/08 18:49:03 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\uKKK88fRZ9hT
    [2011/11/08 19:18:31 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ukPDH8kziFsERhX
    [2011/11/08 19:05:32 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\uKR9XUlBzyAS
    [2011/11/08 18:56:50 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ukrONx0SbpGQs7L
    [2011/11/08 19:08:54 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\UlOBt0Sv3na5Wd
    [2011/11/08 19:19:20 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\uLx6I3TuJl4YiKz
    [2011/11/08 19:04:56 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\UnF4aHWLZYk
    [2011/11/08 19:19:26 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\uNFdTIx2pa6K
    [2011/11/08 19:05:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\uNyAvo3mGaJd8Rh
    [2011/11/08 19:05:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\uNyAvo3mGaJKR9T
    [2011/11/08 18:59:41 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\UoHfZkB0Si3naHs
    [2011/11/08 19:05:09 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\UqCIzt0c2Dn
    [2011/11/08 18:30:57 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\uqqhhYCCw
    [2011/11/08 18:17:15 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\UrlllONtxP0uc1b
    [2011/11/08 18:12:26 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\uRRZZ9hhTXjUClI
    [2011/11/08 18:20:15 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\UssWWK7ffL9gTqY
    [2011/11/08 19:07:27 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\uTCl0v4sW78ZYke
    [2011/11/08 18:56:15 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\UTjCelzNyAvo3Ga
    [2011/11/08 19:22:54 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\UtPNAu2F4m5Q6E
    [2011/11/08 18:25:25 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\UTTXXqjjYCkIVzO
    [2011/11/08 19:08:53 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\uTZjwIrNPciD
    [2011/11/08 18:56:41 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\uUGkQrnkbWqV
    [2011/11/08 18:58:37 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\uuiDn4HKf9qCIrt
    [2011/11/08 18:40:23 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\UuuuvSS2obFpm5
    [2011/11/08 19:08:08 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\uvD2Fp5JEf9XUer
    [2011/11/08 18:31:52 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\uVeellIBtzPNcAu
    [2011/11/08 19:09:16 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Uvo4GQd8ZTjeBPx
    [2011/11/08 19:21:19 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\uVrNAc2DnaHK
    [2011/11/08 18:50:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\uVVVrllONtxPuc1
    [2011/11/08 19:17:05 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\uwjUeIrNxu2F
    [2011/11/08 19:04:34 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\uWK8RL9hX
    [2011/11/08 19:19:37 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Ux0viFpGQd7
    [2011/11/08 18:58:22 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\UxA0ucS2ip4
    [2011/11/08 19:17:05 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\uXjUlrNAvo3G
    [2011/11/08 18:28:55 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\uxxP00ycS1iv3oF
    [2011/11/08 18:40:00 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\uXXqqjUCekIBrOy
    [2011/11/08 18:40:52 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\UxxxA11uvS2
    [2011/11/08 19:05:03 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\UyyxxASoFpa

    Continued in next post ...
     
  11. mambass

    mambass

    Joined:
    Apr 11, 2008
    Messages:
    141
    Hi 07tcbsp,

    Thank you for the logs. :)

    I understand that the OTL.txt log was too big to post. I'm going to post it to this thread in multiple segments so that Teachers and others at my site can review that information.

    You do not need to take any action at this point. I will analyze the logs and post back a new set of instructions shortly.

    mambass

    Continued from previous post ...

    [2011/11/08 19:07:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\v0c1Dn4Hs7E8Z
    [2011/11/08 19:07:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\v0c1DnaHs7E8Z
    [2011/11/08 18:56:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\v0Sb3pna6K
    [2011/11/08 18:56:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\v0Sb3pnQs7
    [2011/11/08 19:22:32 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\v0ubpHfjO26qt
    [2011/11/08 19:22:31 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\v0uS2Fna6WRgq
    [2011/11/08 18:57:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\v0ycA1ivDo
    [2011/11/08 19:18:21 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\v1oHdZwkUe
    [2011/11/08 18:32:38 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\v2iibbD3pnG4QHs
    [2011/11/08 19:06:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\V3pnG47gjCIlxu1
    [2011/11/08 19:06:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\V3pnG4HWf9TjCIl
    [2011/11/08 19:06:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\V3pnG4Qs7LgqCIx
    [2011/11/08 19:16:06 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\V4pmsJ6Kf9TjClr
    [2011/11/08 18:47:19 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\V777fEEL9gTZjYw
    [2011/11/08 18:13:08 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\V77ddEK88gZ9
    [2011/11/08 18:15:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\v999hTTXwj
    [2011/11/08 18:38:46 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\VaaaQJJ6dWKfL9T
    [2011/11/08 19:07:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\vc1Dn4Hs7E8Zh
    [2011/11/08 18:12:33 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\vD33oonG4a
    [2011/11/08 19:24:42 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\vecnJ9ecF69exF6
    [2011/11/08 18:57:59 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\vEgqCIlt0SDoG
    [2011/11/08 19:22:27 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\VekVrzONt0c2b4K
    [2011/11/08 19:06:14 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Vf8ZqhwVltPci3F
    [2011/11/08 19:16:07 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\VGKwIN2pQd8R9Tj
    [2011/11/08 18:11:29 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\vH66ddWK7fRLgTq
    [2011/11/08 19:08:55 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\VhwVlt0ciDn4HQd
    [2011/11/08 19:08:55 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\VhYwVlt0AinHdZj
    [2011/11/08 19:07:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\vi3n4Hs7E8RqY
    [2011/11/08 18:45:28 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\viiivDD2onF4mHs
    [2011/11/08 19:05:16 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\vivD2onF4mQdKg9
    [2011/11/08 19:20:21 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\vIVrlONtxu
    [2011/11/08 19:05:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\VJ6dWK8fR9TjeBO
    [2011/11/08 18:30:06 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\vJJ66dEK8fRZ9Tw
    [2011/11/08 19:18:33 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\vK7fRL9TXj
    [2011/11/08 19:04:34 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\vK8fRL9hTj
    [2011/11/08 19:04:34 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\vK8fRL9hTq
    [2011/11/08 18:58:59 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\VK8gRZ9hYwUltNA
    [2011/11/08 19:04:34 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\vK8RL9hXjk
    [2011/11/08 19:04:34 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\vK8RL9hXUe
    [2011/11/08 19:16:43 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\VkUlBPySvoFm5Wd
    [2011/11/08 19:08:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\VL8gRZqhYwUeOtP
    [2011/11/08 19:08:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\VLgRZqhYXkVlBzc
    [2011/11/08 19:08:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\VLgRZqhYXkVlBzy
    [2011/11/08 18:21:38 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\VLLL8ggTZqhYwkV
    [2011/11/08 18:26:09 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\VlllOONtxP0u
    [2011/11/08 19:08:54 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\VlOBt0Sv3na5Wd8
    [2011/11/08 19:00:15 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\VlOBtPy1vo4H
    [2011/11/08 18:58:38 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Vm6Jf8TYk
    [2011/11/08 18:44:11 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\VnnnF44pmH5sJ7E
    [2011/11/08 18:44:19 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\VNNNtxxP0ucSib3
    [2011/11/08 18:51:56 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\VNNtxP0ucSib3n4
    [2011/11/08 19:18:16 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\VNpKCPnJYxoEk0F
    [2011/11/08 19:07:41 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\VonG4amH6W7LgZC
    [2011/11/08 18:59:15 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\VONyxA0uv2bG
    [2011/11/08 18:18:43 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\vooonFF4amH5WJd
    [2011/11/08 19:05:41 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\vop5Qd8ZYj
    [2011/11/08 19:06:28 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\VOt0Sbo4ms7LTqC
    [2011/11/08 19:16:39 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\VP3HEqUOPy1vn4H
    [2011/11/08 18:58:13 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Vpn4aQ6sW7E9ZCl
    [2011/11/08 18:57:51 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\vRZ9hYXwVltPy
    [2011/11/08 19:09:03 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\vS2ibD3nGQ67Lgq
    [2011/11/08 19:00:31 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\vSv3na5JE8RhXUl
    [2011/11/08 18:47:54 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\vttxxP00ycSiv3o
    [2011/11/08 19:22:55 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\VUCelIBrzNx1v23
    [2011/11/08 18:59:11 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\vVrlOt0ucboGm
    [2011/11/08 19:17:05 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\vwjUeIrNxu2Fm
    [2011/11/08 19:16:15 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Vwket0Avo4HQ
    [2011/11/08 18:10:39 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\VWWKK8ffRL9TXjU
    [2011/11/08 18:24:01 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\vxAA11uvS2
    [2011/11/08 18:49:50 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\vxPPP0ycS1ivD
    [2011/11/08 19:08:17 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\vXUlrNAvo3ma6Kf
    [2011/11/08 19:05:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\vyAvo3mG5JKR9Tj
    [2011/11/08 19:05:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\vyAvo3mG5JW8Rhj
    [2011/11/08 18:57:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\vycA1ivD2n
    [2011/11/08 19:07:16 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\vYkrNAci3GQ6KEg
    [2011/11/08 19:20:30 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\VyoQLCybHRCt
    [2011/11/08 19:05:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\vyxA1uvS2b3m5Q6
    [2011/11/08 18:14:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\VyyxxA0uuv2ib3p
    [2011/11/08 19:20:21 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\w0Sb3na6KEgZjCk
    [2011/11/08 19:19:37 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\W0vi3GQd7LTj
    [2011/11/08 19:07:00 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\W4GQdKRhXUlrNAv
    [2011/11/08 19:06:43 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\w4H6s7LgqC
    [2011/11/08 18:15:30 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\w55ssQJ77EK8gZh
    [2011/11/08 18:45:59 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\w5aaQQJ6dWK8RLh
    [2011/11/08 19:05:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\w5aQJ6dWKfLhj
    [2011/11/08 19:17:08 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\W6fZklBPyi3Fms7
    [2011/11/08 18:29:23 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\W999gTTXqjYCkIr
    [2011/11/08 19:16:07 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\wA0uv235Qd79XYe
    [2011/11/08 19:16:07 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\wA0uvS2i3GaHWLq
    [2011/11/08 19:16:07 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\wA0uvS2ib3GaHWL
    [2011/11/08 19:16:07 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\wA0uvS2ibp5Qd79
    [2011/11/08 19:16:08 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\wA0uvSi3G6fgCrA
    [2011/11/08 19:16:08 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\wA0uvSibFG6fgCr
    [2011/11/08 19:22:45 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\wA1uvS2ob3m5Qd8
    [2011/11/08 18:31:56 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\WammHH5sW
    [2011/11/08 18:34:48 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\wBBBrzzPNyxAuv2
    [2011/11/08 18:56:59 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Wbp5Hd7RT
    [2011/11/08 19:19:41 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\WCeIBrPNyAuo3GQ
    [2011/11/08 19:23:51 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\WcS1ib3Ga6JE
    [2011/11/08 18:17:39 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\WDD33onnG
    [2011/11/08 18:23:09 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\WEEELL9gTZqjCwI
    [2011/11/08 18:56:42 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\wEgZXjUVet
    [2011/11/08 19:19:41 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\WeIrzPNyx1vb3G6
    [2011/11/08 19:20:38 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\WelIBtzPNc1v2bp
    [2011/11/08 19:22:20 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\WF4m5sQJ7
    [2011/11/08 19:17:23 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\wF4pmHJEg9XUlBP
    [2011/11/08 18:15:37 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\WfffRLL9gTXj
    [2011/11/08 19:19:18 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\WFkFh29AdIpLN6V
    [2011/11/08 18:50:32 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\wggTTXqjjCekIrO
    [2011/11/08 19:17:33 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\WgkximECB3JYzod
    [2011/11/08 18:38:54 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\WgTTZqhYYwkU
    [2011/11/08 19:22:54 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\WH8wtc2F4
    [2011/11/08 18:17:46 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\whhhTTXwjUCeI
    [2011/11/08 18:51:25 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\wIBrrPPNxA1vS
    [2011/11/08 18:14:26 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\WiivvD22o
    [2011/11/08 18:58:29 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\WivD2onFp5Jd8ZY
    [2011/11/08 18:50:02 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\wjjjUCCelIBzPyx
    [2011/11/08 18:41:25 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\wjUUVVelIB
    [2011/11/08 19:23:26 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\wjYCwkIVlxuSbo4
    [2011/11/08 19:23:26 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\wjYCwkIVxSo4HW7
    [2011/11/08 18:23:34 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\WkkIIVrrl
    [2011/11/08 18:39:09 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\wkkkUVVelOBzPyc
    [2011/11/08 18:46:27 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\wmmmHH5sQJ
    [2011/11/08 19:19:42 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\WNAv2Fna6Kf9XYV
    [2011/11/08 19:19:27 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\WnG4aQ6s9jwVlt0
    [2011/11/08 19:19:27 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\WnG4aQH6sKfLZjw
    [2011/11/08 18:47:23 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\wnnGG5aaQH6WKfR
    [2011/11/08 18:42:30 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\WNNNyxxA1
    [2011/11/08 19:08:19 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\wONtAu2bDpGaHW7
    [2011/11/08 18:28:16 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\WOONNtxxP0uS1bD
    [2011/11/08 18:25:09 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\wooobFF3pmG5QJd
    [2011/11/08 18:36:11 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\WppmmGG5aQJdW8f
    [2011/11/08 18:21:04 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\WPPP0yycS1iv
    [2011/11/08 18:27:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\WQQQH66dWK7RLgT
    [2011/11/08 18:16:15 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\WS22iibF3pnG5Q6
    [2011/11/08 18:56:49 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\WTUeBOx0vi3na6K
    [2011/11/08 19:19:28 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\wUVrlOBtx0
    [2011/11/08 19:24:03 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\WVelIBtzPcuF69e
    [2011/11/08 19:22:55 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\WvS2o3maJWf9XUk
    [2011/11/08 18:12:44 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\wvvvDD2onF4pH5Q
    [2011/11/08 19:09:00 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\wwOyDaJgXl0v4Q8
    [2011/11/08 19:19:37 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Wx0viFpGQd7R
    [2011/11/08 18:30:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\wXXqqjYYCeIVzOt
    [2011/11/08 18:16:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\wxxxP00ucS1iD3n
    [2011/11/08 19:15:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\wycv2F4pm5Q7ZwI
    [2011/11/08 18:39:25 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\WZ99hhTXwjUClIr
    [2011/11/08 18:53:02 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\wZ9hhTXwUC
    [2011/11/08 18:59:37 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\WZqhYXwkUeOt
    [2011/11/08 18:37:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\wZZZ9hhTXwjCeIB
    [2011/11/08 19:22:54 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\x0cAv2Fms7KRhwV
    [2011/11/08 18:35:39 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\x11iivD3nF4amsW
    [2011/11/08 19:20:21 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\x1ibDonG4m6W7E8
    [2011/11/08 18:25:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\X222onnF4pH5sJ7
    [2011/11/08 19:24:52 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\X4sKhVz1b5dZjBy
    [2011/11/08 19:05:02 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\X5QdKgZhXwVlB
    [2011/11/08 19:07:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\x7fL8gTqhwVOx0
    [2011/11/08 18:42:49 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\X88ffRZZ9h
    [2011/11/08 18:57:23 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\X8fR9hTXUkBzNxu
    [2011/11/08 18:27:59 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\X9hhTTXwjU
    [2011/11/08 19:08:43 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\x9rodjyp7e0
    [2011/11/08 18:57:38 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\x9XUeBzNAvi3na
    [2011/11/08 18:58:29 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\XA1ivD2onp5Jd8Z
    [2011/11/08 18:24:53 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\XaammH5ssW
    [2011/11/08 19:22:54 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\xcAv2Fms7KRhwVI
    [2011/11/08 18:37:23 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\XccAA1uvD2ob4pG
    [2011/11/08 19:09:22 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\xci3GQ6KEgZ
    [2011/11/08 19:22:28 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\XcS2bp6EqkNc3aW
    [2011/11/08 18:43:09 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\XeellIIBrP
    [2011/11/08 19:07:58 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\XEfZTXwjUeIrPyA
    [2011/11/08 19:05:46 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\XeIzy1Db4m5JE8Z
    [2011/11/08 19:05:17 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\XeltN1vbp5JEf9X
    [2011/11/08 18:57:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\xeOzy1Dn4HQd8ZY
    [2011/11/08 19:08:49 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\XfELgqCIlt0Sboa
    [2011/11/08 18:27:08 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\XffEEL9gTZqjCkV
    [2011/11/08 18:27:16 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\XFFF3ppmG5aJ6WK
    [2011/11/08 18:17:18 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\XFFF3ppnG5
    [2011/11/08 18:45:24 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\xfffRRZ9hTX
    [2011/11/08 19:19:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\XFms6KRhXUlrN
    [2011/11/08 18:54:01 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\xfRLLhhXqjUeIBz
    [2011/11/08 19:04:55 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\xGa6W7LgZjCkVOt
    [2011/11/08 19:21:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\xgRZhXwjVlBzNc
    [2011/11/08 19:04:43 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\xhTXwjUClzAS3ad
    [2011/11/08 18:22:13 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\xJ77ddEK8gRZhYw
    [2011/11/08 19:07:58 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\XJEfZTXwjIrPyAu
    [2011/11/08 18:19:53 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\xJJ66dWKK8RL9Tq
    [2011/11/08 18:48:25 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\xJJJ6ddEK8fR9hX
    [2011/11/08 19:24:02 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\XjUVelIBtPcu2
    [2011/11/08 18:48:55 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\XjYYYCekIVrzNt0
    [2011/11/08 18:58:57 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\xkIVOxuSinaHsf9
    [2011/11/08 18:16:26 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\xLL99gTZZqYCwIr
    [2011/11/08 19:09:03 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\xLTjeVrONx0SiDp
    [2011/11/08 18:57:31 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Xo4HQd8ZYw
    [2011/11/08 18:57:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\XOBtP0ycAiDoFHQ
    [2011/11/08 19:22:31 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\XOyxA0uS2F
    [2011/11/08 19:18:08 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\XpmG5aQJ6W8R9
    [2011/11/08 19:05:52 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\xpmG5sQ6KRhwCI
    [2011/11/08 18:19:18 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\XPPNNyccA1
    [2011/11/08 18:54:05 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\xQJJ6dEK8RZ9TwU
    [2011/11/08 18:47:57 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\XqqqjYYCwkIrlNt
    [2011/11/08 19:23:22 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\xQXxaZN37hBSFW8
    [2011/11/08 18:48:59 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\XRL99hTTXqUCeIr
    [2011/11/08 18:12:04 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\xrllOOBtxP0yc1
    [2011/11/08 19:05:03 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\xrryxAuSoFpad8R
    [2011/11/08 19:05:03 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\xrrzPPNyxA1uSoF
    [2011/11/08 18:49:39 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\XS22iibD3pnGaQ6
    [2011/11/08 18:13:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\xTTTZqqhYCwkVrO
    [2011/11/08 19:06:27 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\xtxuSb3GQs7
    [2011/11/08 18:41:37 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\xUCCCekIBrzONx0
    [2011/11/08 18:30:33 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\xuuucSS1ibD3nGa
    [2011/11/08 18:57:03 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\XuvDo4m56Kf9Tje
    [2011/11/08 18:45:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\XvDD33onF4am5sJ
    [2011/11/08 18:57:09 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\XviFna6Kf9XYk
    [2011/11/08 19:05:46 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\XVIzy1Dbp5JEf9X
    [2011/11/08 18:10:46 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\XVVVrrlONtxPuc1
    [2011/11/08 18:59:38 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\XwjUlNvF5E
    [2011/11/08 18:29:35 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\XWWWJ77dEL8gZqY
    [2011/11/08 18:42:45 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\XXXqjjUCekIrONx
    [2011/11/08 18:46:43 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\xyyxAA1uvS2ob3
    [2011/11/08 19:00:28 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\xzAop6RwezA235J
    [2011/11/08 18:26:57 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\XzOONNyxA0uv2
    [2011/11/08 18:35:04 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\XZZZqjjYCwIVO
    [2011/11/08 19:09:19 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\y1n5EqwVOzy1Dn
    [2011/11/08 18:32:57 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Y2iiiDD3pnG4Q
    [2011/11/08 19:15:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Y5sQ7ZhVz1
    [2011/11/08 18:22:17 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Y5ssWJJ7dE
    [2011/11/08 18:58:13 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Y7fEL9gTZYVtS3m
    [2011/11/08 18:58:13 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Y7fEL9gZClPiGsE
    [2011/11/08 18:56:11 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Y82VpCmI5I4kb
    [2011/11/08 19:08:57 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\y9TjeBPxu2Fma6K
    [2011/11/08 19:24:53 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\YA0ucS2ib3n4Q6K
    [2011/11/08 19:24:53 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\YA0ucS2ib3n4Q6W
    [2011/11/08 18:51:21 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\YaQQH6dWKfRLgXj
    [2011/11/08 18:20:25 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\yBBBtxxP0yc1iv3
    [2011/11/08 18:58:29 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\YcA1ivD2oFms7Kg
    [2011/11/08 19:06:34 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Yci3Fms7RwOyDpQ
    [2011/11/08 19:19:27 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\YD3pnG4aQ6W7E
    [2011/11/08 19:04:50 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\YeIVOx0cbp4Hs7L
    [2011/11/08 19:24:29 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\YekVrzONtAuSb
    [2011/11/08 19:24:28 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\YekVrzONtAuSi
    [2011/11/08 18:57:57 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\YF3pn5aQHd
    [2011/11/08 19:23:19 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\yf4xjHuYsSX
    [2011/11/08 19:08:17 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Yf9XUlrNAvo3ma6
    [2011/11/08 19:20:22 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\YfEL8gTCkrBPy
    [2011/11/08 18:33:43 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\YfffEEL8gTZqYCk
    [2011/11/08 18:58:32 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\yfL9gqCIrNAci3n
    [2011/11/08 19:17:54 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\yGa6WfL9XYkrNAu
    [2011/11/08 18:56:18 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\YgRZhXkeOz0c1vo
    [2011/11/08 18:47:34 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\YHH55sWWJ7EL8RZ
    [2011/11/08 18:52:35 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\yHH6sWK7fE9gZjC
    [2011/11/08 18:56:54 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\YhlA4dhIus9eyb6
    [2011/11/08 19:07:34 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\yhTXUkrNAv2
    [2011/11/08 19:18:09 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\yjeBOxu2bp5HWf9
    [2011/11/08 19:20:38 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\YjUVelIBtPyAuDo
    [2011/11/08 18:59:59 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\yK8fLhqCkBOy0vb
    [2011/11/08 19:22:31 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\yK8fRL9hTqUeIr
    [2011/11/08 18:26:32 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\YKKK8ffRZ9
    [2011/11/08 18:41:00 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ykkkIVVrlONxPuc
    [2011/11/08 18:23:25 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ykUUVVrlOBtxPy
    [2011/11/08 19:08:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ym5sQJdK8R9YeI
    [2011/11/08 19:18:23 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ymaQJ6dWKfLhqCI
    [2011/11/08 19:18:23 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ymG5aQJ6dKfLTje
    [2011/11/08 19:18:02 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Yn4HQd8ZYwUeOt0
    [2011/11/08 18:43:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ynFF44pmH5sQ7dK
    [2011/11/08 19:16:07 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\yNyxA0uvS3GaHW7
    [2011/11/08 19:16:07 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\yNyxA0uvSi3GaHW
    [2011/11/08 18:56:49 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\yo3GaJW8f9TUeBO
    [2011/11/08 19:06:33 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Yo4ms7LThwVOt0S
    [2011/11/08 18:40:41 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\YOBBBtzP0y
    [2011/11/08 18:11:53 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\yOONNtxxA0cS2bD
    [2011/11/08 18:32:07 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\yQJJ66dE8fZ9TXj
    [2011/11/08 18:32:53 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\yrllOONtxP0uc1
    [2011/11/08 19:18:09 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\yTjeBOxu2bp5HWf
    [2011/11/08 18:31:20 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ytttxxA0ucS2bDp
    [2011/11/08 19:07:34 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\yTXjeBOxuSi
    [2011/11/08 18:57:58 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\yTXqjYCekVzNAu2
    [2011/11/08 19:07:34 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\yTXUIzy0v2b
    [2011/11/08 18:21:23 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ytxxxP0ucS1ib3n
    [2011/11/08 19:23:26 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\yTZqjYCwkVlxuSb
    [2011/11/08 19:08:09 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\YUeIrOAu2b3Ga
    [2011/11/08 19:05:17 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\YVeltP1b5E9UBPx
    [2011/11/08 19:24:02 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\YwjUVelIBzcuF
    [2011/11/08 18:56:21 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\YWK7fTCVAu2bp
    [2011/11/08 18:24:33 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\yWWWJJ7dEL8gZqY
    [2011/11/08 18:36:22 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\YwwwkIIVrlOtx0u
    [2011/11/08 19:15:19 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\YxA0ucSib3Gas9j
    [2011/11/08 18:42:15 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\yxAA11uvS2ob3pG
    [2011/11/08 18:56:16 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\YXUkrNAvi3GQd7L
    [2011/11/08 18:18:54 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\YYXXwwjUVelItzN
    [2011/11/08 19:22:31 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\YzOxA0ubGd
    [2011/11/08 18:57:01 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\z1Dn4HWd8R
    [2011/11/08 18:22:29 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\z222iibF3p
    [2011/11/08 19:18:33 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\z3pn5aQH6W7R9Tj
    [2011/11/08 18:47:50 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Z444pmmH5sQJdE8
    [2011/11/08 19:24:28 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Z5aQdK7fRgXjCkr
    [2011/11/08 18:57:51 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\z5sQJ7dE8R9YwUl
    [2011/11/08 18:26:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Z6ddWWK7f
    [2011/11/08 18:41:14 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\z88ggTZqhYCwUVl
    [2011/11/08 19:19:58 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Z8gRZ9YXw
    [2011/11/08 18:49:54 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\z999gTTZqj
    [2011/11/08 18:46:15 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Z999gTXXqYCe
    [2011/11/08 19:05:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\z9hTjeBOxu2bp5H
    [2011/11/08 18:41:52 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\zaaaQHH6sW
    [2011/11/08 19:20:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ZafjOSGJqlcoHEZ
    [2011/11/08 18:59:58 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\zBPcuDo4ms6KRhw
    [2011/11/08 19:22:45 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ZBrzPNyA1v2b3m5
    [2011/11/08 19:24:37 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Zc1Dbp5Qd8ZTjeB
    [2011/11/08 18:12:51 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\zdddWKK8fRLhTXj
    [2011/11/08 18:21:49 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\zddEEK8gRZ
    [2011/11/08 19:06:26 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\zE8ZTjeBPxu2FpG
    [2011/11/08 18:15:01 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\zeeelIIBrz
    [2011/11/08 18:26:06 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\zELL88gRZqhYwkV
    [2011/11/08 18:33:10 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ZFF44pmGG5QJ6EK
    [2011/11/08 18:15:16 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ZfffRZZ9hTXw
    [2011/11/08 18:14:37 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\zfffRZZ9hTXwUCl
    [2011/11/08 19:08:14 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\zfhUBx2pHfXez
    [2011/11/08 19:00:17 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\zG5QJ6dEKfZhwUe
    [2011/11/08 18:28:43 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ZGGG5aaQJ6dK8RL
    [2011/11/08 19:19:00 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ZhYXwjUVeItPcu2
    [2011/11/08 18:59:58 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\zIBzNAuDopGQ6E8
    [2011/11/08 18:59:58 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\zIBzy1Do4Gs6Ef9
    [2011/11/08 18:48:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ziiibbD3pnG4QHs
    [2011/11/08 18:19:15 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\zkkIIBrrzO
    [2011/11/08 19:05:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\zL9hTjeBOxu2bp5
    [2011/11/08 19:09:23 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ZLgTqCUltPci3Fa
    [2011/11/08 18:24:45 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ZLLL9hhTXqjCekB
    [2011/11/08 18:10:57 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\zmmHH5ssWJ7ELgR
    [2011/11/08 19:05:16 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ZnaHWdLgqXUlt0c
    [2011/11/08 18:16:57 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ZNNyycAA1uD2oF4
    [2011/11/08 18:11:18 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ZNNyyxAA1
    [2011/11/08 19:21:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ZNycA1uvD
    [2011/11/08 18:21:15 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ZNyyccA1uvD2bFp
    [2011/11/08 19:17:14 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\zobF4ms6Ef9XjCI
    [2011/11/08 19:24:53 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\zONtxA0uc2b3n
    [2011/11/08 19:04:56 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ZONtxP0uc1b3n4m
    [2011/11/08 19:04:56 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ZONxuSb3Gm6W7LT
    [2011/11/08 19:20:38 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\zPNycA1uv2b4m5Q
    [2011/11/08 18:18:15 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ZpppmHH5sQJdEKg
    [2011/11/08 19:19:27 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ZqjCekIrztAc2b3
    [2011/11/08 18:23:17 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\zQQJ66dEK8fR9hX
    [2011/11/08 19:19:16 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Zr6zHInYDZAKtGe
    [2011/11/08 18:44:57 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\zrrzzONttA0uc
    [2011/11/08 18:59:38 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\zRZ9hYXwjVlzyAv
    [2011/11/08 18:45:05 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\zRZZ99hTXwjUClB
    [2011/11/08 19:20:39 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ZsQ6RXezA2mJfTe
    [2011/11/08 19:20:39 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ZsQJ6fTjClrNAu2
    [2011/11/08 19:22:20 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\zsQJ7dE89wIyD
    [2011/11/08 19:20:22 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\zsWJ7fEL8T
    [2011/11/08 19:05:24 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\zsWK7fEL9ZjCIrN
    [2011/11/08 19:05:24 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\zsWK7fEL9ZjCIrO
    [2011/11/08 19:05:25 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\zsWK7fELTjCIrt0
    [2011/11/08 18:13:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\zTTTXqqjYCeIVrO
    [2011/11/08 19:16:38 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ZTYYYCwkU
    [2011/11/08 18:42:11 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ZuuvvS22ibFpn5a
    [2011/11/08 19:05:25 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ZVrOxuc1DnaHWf8
    [2011/11/08 19:21:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\zwkUVelOB1v2FpH
    [2011/11/08 18:57:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\zXUltNADpdTBu
    [2011/11/08 19:08:35 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\zXwkUVelOt
    [2011/11/08 19:06:50 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\zZhTjeIzy1
    [2011/05/30 10:40:18 | 000,032,590 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU(113).TXT
    [2011/12/20 17:58:57 | 000,032,556 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT

    ========== Purity Check ==========

    End of OTL.txt log
     
  12. mambass

    mambass

    Joined:
    Apr 11, 2008
    Messages:
    141
    Hi 07tcbsp,

    You're welcome. :)

    Please print these instructions because you will not have access to the Internet while performing some of the tasks below.

    • Move OTL to the Desktop
      Please move OTL.exe from C:\Users\Computer 2\Downloads to your Desktop.
      You may want to change your Firefox (or other browser) download default to "Always ask me where to save files" since most of our tools need to be saved to the Desktop.

    • Punkbuster warning
      I see you have Punkbuster installed.( read the section on Published features) This is spyware. Punkbuster can take control over various aspects of your computer, and some gaming tools not unlike Punkbuster also hinder their removals. By the definition we handle here, Punkbuster is actual spyware. Therefore, I now ask you to decide the following:
      • Either we try to leave Punkbuster alone but there is no guarantee a spyware component doesn't 'accidentally' get taken out; so Punkbuster might break. This will, of course, also break your ability to play games using Punkbuster enabled servers.
      • Or we can just remove Punkbuster. You can reinstall it afterwards if you wish, but please keep in mind that It is spyware.
      • Another option is to not clean this computer at all. This ensures Punkbuster will continue to function.
      Please let me know what you would like to do.

    • Download tools to be used
      Please download the following tools but do not run them until instructed.
      1. Click here to download DeFogger by jpshortstuff and save it to your Desktop.
      2. Click here to download TDSSKiller and save it to your Desktop.
      3. Click here to download aswMBR.exe and save it to your Desktop.

    • Defogger
      1. Right-click the DeFogger.exe icon on your Desktop and then select Run As Administrator to run the tool. The application window will appear.
      2. Click the Disable button to disable your CD Emulation drivers.
      3. Click Yes in the message window to continue.
      4. A 'Finished!' message will appear. Click OK.
      5. Click OK when DeFogger asks to reboot the machine.

        Do not re-enable these drivers until otherwise instructed.
        IMPORTANT: If you receive an error message while running DeFogger, please post the log defogger_disable which will appear on your desktop and skip the remaining steps below.

    • TDSSKiller
      1. Right-click the TDSSKiller.exe icon on your Desktop and select Run As Administrator to launch it.
      2. Click on Start Scan, to start the scan.
      3. When the scan has finished, if it finds anything where "Cure" is an option, please click on the drop down arrow next to Cure and select Skip
      4. Now click on Report to open the log file created by TDSSKiller in your root directory C:\
      5. To find the log go to Start > Computer > C:
      6. Post the contents of that log in your next reply please.
      7. DO NOT TRY TO FIX (CURE) ANYTHING AT THIS POINT

    • aswMBR
      1. Right-click the aswMBR.exe icon and select Run As Administrator to run it.
      2. Click the Scan button.
      3. After a short while when the scan reports "Scan finished successfully", click Save log & save the log to your desktop.
      4. Click OK. Two files will be created, aswMBR.txt & a file named MBR.dat
      5. Save MBR.dat to a USB flash drive. This is a backup of your MBR (Master Boot record). Do not delete this file.
      6. NOTE: Do not click to fix anything at this stage!
      7. Click EXIT.
      8. Copy & Paste the contents of aswMBR.txt into your next reply.


    Please include in your reply:
    1. The text of any error messages and/or a description of any problems you encountered while performing these steps.
    2. An indication of how you would like to deal with Punkbuster.
    3. The contents of the TDSSKiller log.
    4. The contents of the aswMBR.txt log.


    mambass
     
  13. 07tcbsp

    07tcbsp Thread Starter

    Joined:
    Apr 10, 2007
    Messages:
    47
    1. Everything went through smoothly, no hiccups or hangs. The only thing I noticed is when I ran aswMBR, it suggested I install Avast aswell.

    2. Lets get rid of Punkbuster. I don't know how/why its on my computer.

    3. Going to post in a few separate posts.

    4. aswMBR version 0.9.9.1649 Copyright(c) 2011 AVAST Software
    Run date: 2012-03-12 19:38:07
    -----------------------------
    19:38:07.019 OS Version: Windows x64 6.1.7600
    19:38:07.019 Number of processors: 4 586 0x2505
    19:38:07.019 ComputerName: PC1 UserName:
    19:38:10.079 Initialize success
    19:38:22.999 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0
    19:38:22.999 Disk 0 Vendor: ST3750528AS CC46 Size: 715404MB BusType: 3
    19:38:23.029 Disk 0 MBR read successfully
    19:38:23.029 Disk 0 MBR scan
    19:38:23.039 Disk 0 Windows VISTA default MBR code
    19:38:23.039 Disk 0 MBR hidden
    19:38:23.039 Disk 0 Partition 1 00 DE Dell Utility Dell 8.0 39 MB offset 63
    19:38:23.059 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 13118 MB offset 81920
    19:38:23.069 Disk 0 Partition 3 00 07 HPFS/NTFS NTFS 702245 MB offset 26947584
    19:38:23.099 Disk 0 Partition 4 80 (A) 17 Hidd HPFS/NTFS NTFS 1 MB offset 1465145344
    19:38:23.109 Disk 0 Partition 4 **SUSPICIOUS**
    19:38:23.139 Disk 0 scanning C:\Windows\system32\drivers
    19:38:29.149 Service scanning
    19:38:38.999 Modules scanning
    19:38:39.513 Disk 0 trace - called modules:
    19:38:39.529 ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys >>UNKNOWN [0xfffffa8006423334]<<ataport.SYS pciide.sys PCIIDEX.SYS hal.dll atapi.sys
    19:38:39.545 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa8006410060]
    19:38:39.545 3 CLASSPNP.SYS[fffff880018c843f] -> nt!IofCallDriver -> [0xfffffa80061f79b0]
    19:38:39.545 5 ACPI.sys[fffff88000ec2781] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP0T0L0-0[0xfffffa80061f3680]
    19:38:39.545 \Driver\atapi[0xfffffa80061eee70] -> IRP_MJ_INTERNAL_DEVICE_CONTROL -> 0xfffffa8006423334
    19:38:39.560 Scan finished successfully
    19:38:53.679 Disk 0 MBR has been saved successfully to "C:\Users\Computer 2\Desktop\MBR.dat"
    19:38:53.679 The log file has been saved successfully to "C:\Users\Computer 2\Desktop\aswMBR.txt"

    Please See Next Post for TDSSKiller log...
     
  14. 07tcbsp

    07tcbsp Thread Starter

    Joined:
    Apr 10, 2007
    Messages:
    47
    Continued From Previous Post...

    19:36:13.0328 0668 TDSS rootkit removing tool 2.7.20.0 Mar 9 2012 17:10:43
    19:36:13.0868 0668 ============================================================
    19:36:13.0868 0668 Current date / time: 2012/03/12 19:36:13.0868
    19:36:13.0868 0668 SystemInfo:
    19:36:13.0868 0668
    19:36:13.0868 0668 OS Version: 6.1.7600 ServicePack: 0.0
    19:36:13.0868 0668 Product type: Workstation
    19:36:13.0868 0668 ComputerName: PC1
    19:36:13.0868 0668 UserName: Computer 2
    19:36:13.0868 0668 Windows directory: C:\Windows
    19:36:13.0868 0668 System windows directory: C:\Windows
    19:36:13.0868 0668 Running under WOW64
    19:36:13.0868 0668 Processor architecture: Intel x64
    19:36:13.0868 0668 Number of processors: 4
    19:36:13.0868 0668 Page size: 0x1000
    19:36:13.0868 0668 Boot type: Normal boot
    19:36:13.0868 0668 ============================================================
    19:36:14.0868 0668 Drive \Device\Harddisk0\DR0 - Size: 0xAEA8CDE000 (698.64 Gb), SectorSize: 0x200, Cylinders: 0x16441, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
    19:36:14.0878 0668 Drive \Device\Harddisk5\DR5 - Size: 0x1D1C1116000 (1863.02 Gb), SectorSize: 0x200, Cylinders: 0x3B601, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
    19:36:14.0878 0668 \Device\Harddisk0\DR0:
    19:36:14.0878 0668 MBR used
    19:36:14.0878 0668 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x14000, BlocksNum 0x199F000
    19:36:14.0878 0668 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x19B3000, BlocksNum 0x55B92800
    19:36:14.0878 0668 \Device\Harddisk5\DR5:
    19:36:14.0878 0668 MBR used
    19:36:14.0878 0668 \Device\Harddisk5\DR5\Partition0: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0xE8E07482
    19:36:14.0928 0668 Initialize success
    19:36:14.0928 0668 ============================================================
    19:36:18.0518 3528 ============================================================
    19:36:18.0518 3528 Scan started
    19:36:18.0518 3528 Mode: Manual;
    19:36:18.0518 3528 ============================================================
    19:36:20.0328 3528 1394ohci (969c91060cbb5d17cb8440b5f78b4c51) C:\Windows\system32\DRIVERS\1394ohci.sys
    19:36:20.0338 3528 1394ohci - ok
    19:36:20.0368 3528 ACPI (6f11e88748cdefd2f76aa215f97ddfe5) C:\Windows\system32\DRIVERS\ACPI.sys
    19:36:20.0368 3528 ACPI - ok
    19:36:20.0388 3528 AcpiPmi (63b05a0420ce4bf0e4af6dcc7cada254) C:\Windows\system32\DRIVERS\acpipmi.sys
    19:36:20.0398 3528 AcpiPmi - ok
    19:36:20.0438 3528 adp94xx (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\DRIVERS\adp94xx.sys
    19:36:20.0438 3528 adp94xx - ok
    19:36:20.0448 3528 adpahci (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\DRIVERS\adpahci.sys
    19:36:20.0458 3528 adpahci - ok
    19:36:20.0468 3528 adpu320 (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\DRIVERS\adpu320.sys
    19:36:20.0468 3528 adpu320 - ok
    19:36:20.0518 3528 AFD (db9d6c6b2cd95a9ca414d045b627422e) C:\Windows\system32\drivers\afd.sys
    19:36:20.0528 3528 AFD - ok
    19:36:20.0558 3528 agp440 (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\DRIVERS\agp440.sys
    19:36:20.0558 3528 agp440 - ok
    19:36:20.0578 3528 aliide (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\DRIVERS\aliide.sys
    19:36:20.0578 3528 aliide - ok
    19:36:20.0608 3528 amdide (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\DRIVERS\amdide.sys
    19:36:20.0608 3528 amdide - ok
    19:36:20.0618 3528 AmdK8 (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\DRIVERS\amdk8.sys
    19:36:20.0618 3528 AmdK8 - ok
    19:36:20.0628 3528 AmdPPM (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\DRIVERS\amdppm.sys
    19:36:20.0628 3528 AmdPPM - ok
    19:36:20.0658 3528 amdsata (ec7ebab00a4d8448bab68d1e49b4beb9) C:\Windows\system32\drivers\amdsata.sys
    19:36:20.0658 3528 amdsata - ok
    19:36:20.0688 3528 amdsbs (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\DRIVERS\amdsbs.sys
    19:36:20.0688 3528 amdsbs - ok
    19:36:20.0708 3528 amdxata (db27766102c7bf7e95140a2aa81d042e) C:\Windows\system32\drivers\amdxata.sys
    19:36:20.0708 3528 amdxata - ok
    19:36:20.0728 3528 AppID (42fd751b27fa0e9c69bb39f39e409594) C:\Windows\system32\drivers\appid.sys
    19:36:20.0728 3528 AppID - ok
    19:36:20.0758 3528 arc (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\DRIVERS\arc.sys
    19:36:20.0758 3528 arc - ok
    19:36:20.0778 3528 arcsas (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\DRIVERS\arcsas.sys
    19:36:20.0778 3528 arcsas - ok
    19:36:20.0798 3528 AsyncMac (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys
    19:36:20.0798 3528 AsyncMac - ok
    19:36:20.0828 3528 atapi (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\DRIVERS\atapi.sys
    19:36:20.0828 3528 atapi - ok
    19:36:20.0888 3528 athr (195786ed7a26e1913a4f9799fdbc2c71) C:\Windows\system32\DRIVERS\athrx.sys
    19:36:20.0908 3528 athr - ok
    19:36:20.0948 3528 b06bdrv (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\DRIVERS\bxvbda.sys
    19:36:20.0948 3528 b06bdrv - ok
    19:36:20.0968 3528 b57nd60a (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys
    19:36:20.0968 3528 b57nd60a - ok
    19:36:21.0028 3528 BCMH43XX (e49110a58a32e9450356686a95dd7763) C:\Windows\system32\DRIVERS\bcmwlhigh664.sys
    19:36:21.0048 3528 BCMH43XX - ok
    19:36:21.0068 3528 Beep (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys
    19:36:21.0068 3528 Beep - ok
    19:36:21.0078 3528 blbdrive (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\DRIVERS\blbdrive.sys
    19:36:21.0078 3528 blbdrive - ok
    19:36:21.0118 3528 bowser (19d20159708e152267e53b66677a4995) C:\Windows\system32\DRIVERS\bowser.sys
    19:36:21.0118 3528 bowser - ok
    19:36:21.0128 3528 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\DRIVERS\BrFiltLo.sys
    19:36:21.0128 3528 BrFiltLo - ok
    19:36:21.0148 3528 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\DRIVERS\BrFiltUp.sys
    19:36:21.0148 3528 BrFiltUp - ok
    19:36:21.0158 3528 Brserid (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys
    19:36:21.0168 3528 Brserid - ok
    19:36:21.0178 3528 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys
    19:36:21.0178 3528 BrSerWdm - ok
    19:36:21.0198 3528 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys
    19:36:21.0198 3528 BrUsbMdm - ok
    19:36:21.0208 3528 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys
    19:36:21.0208 3528 BrUsbSer - ok
    19:36:21.0218 3528 BTCFilterService - ok
    19:36:21.0228 3528 BTHMODEM (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\DRIVERS\bthmodem.sys
    19:36:21.0228 3528 BTHMODEM - ok
    19:36:21.0258 3528 cdfs (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys
    19:36:21.0268 3528 cdfs - ok
    19:36:21.0318 3528 cdrom (83d2d75e1efb81b3450c18131443f7db) C:\Windows\system32\DRIVERS\cdrom.sys
    19:36:21.0318 3528 cdrom - ok
    19:36:21.0338 3528 circlass (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\DRIVERS\circlass.sys
    19:36:21.0338 3528 circlass - ok
    19:36:21.0368 3528 CLFS (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys
    19:36:21.0368 3528 CLFS - ok
    19:36:21.0418 3528 CmBatt (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\DRIVERS\CmBatt.sys
    19:36:21.0418 3528 CmBatt - ok
    19:36:21.0438 3528 cmdide (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\DRIVERS\cmdide.sys
    19:36:21.0438 3528 cmdide - ok
    19:36:21.0468 3528 CNG (937beb186a735aca91d717044a49d17e) C:\Windows\system32\Drivers\cng.sys
    19:36:21.0478 3528 CNG - ok
    19:36:21.0488 3528 Compbatt (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\DRIVERS\compbatt.sys
    19:36:21.0488 3528 Compbatt - ok
    19:36:21.0498 3528 CompositeBus (f26b3a86f6fa87ca360b879581ab4123) C:\Windows\system32\DRIVERS\CompositeBus.sys
    19:36:21.0508 3528 CompositeBus - ok
    19:36:21.0518 3528 crcdisk (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\DRIVERS\crcdisk.sys
    19:36:21.0518 3528 crcdisk - ok
    19:36:21.0558 3528 DfsC (9c253ce7311ca60fc11c774692a13208) C:\Windows\system32\Drivers\dfsc.sys
    19:36:21.0558 3528 DfsC - ok
    19:36:21.0588 3528 discache (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys
    19:36:21.0588 3528 discache - ok
    19:36:21.0618 3528 Disk (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\DRIVERS\disk.sys
    19:36:21.0618 3528 Disk - ok
    19:36:21.0678 3528 drmkaud (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys
    19:36:21.0678 3528 drmkaud - ok
    19:36:21.0748 3528 DXGKrnl (1633b9abf52784a1331476397a48cbef) C:\Windows\System32\drivers\dxgkrnl.sys
    19:36:21.0748 3528 DXGKrnl - ok
    19:36:21.0778 3528 EagleX64 - ok
    19:36:21.0858 3528 ebdrv (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\DRIVERS\evbda.sys
    19:36:21.0928 3528 ebdrv - ok
    19:36:21.0948 3528 elxstor (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\DRIVERS\elxstor.sys
    19:36:21.0948 3528 elxstor - ok
    19:36:21.0968 3528 ErrDev (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\DRIVERS\errdev.sys
    19:36:21.0968 3528 ErrDev - ok
    19:36:21.0978 3528 exfat (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys
    19:36:21.0988 3528 exfat - ok
    19:36:22.0038 3528 fastfat (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys
    19:36:22.0038 3528 fastfat - ok
    19:36:22.0068 3528 fdc (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\DRIVERS\fdc.sys
    19:36:22.0068 3528 fdc - ok
    19:36:22.0108 3528 FileInfo (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys
    19:36:22.0118 3528 FileInfo - ok
    19:36:22.0138 3528 Filetrace (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys
    19:36:22.0138 3528 Filetrace - ok
    19:36:22.0148 3528 flpydisk (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\DRIVERS\flpydisk.sys
    19:36:22.0148 3528 flpydisk - ok
    19:36:22.0178 3528 FltMgr (f7866af72abbaf84b1fa5aa195378c59) C:\Windows\system32\drivers\fltmgr.sys
    19:36:22.0178 3528 FltMgr - ok
    19:36:22.0198 3528 FsDepends (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys
    19:36:22.0198 3528 FsDepends - ok
    19:36:22.0218 3528 Fs_Rec (e95ef8547de20cf0603557c0cf7a9462) C:\Windows\system32\drivers\Fs_Rec.sys
    19:36:22.0218 3528 Fs_Rec - ok
    19:36:22.0238 3528 fvevol (ae87ba80d0ec3b57126ed2cdc15b24ed) C:\Windows\system32\DRIVERS\fvevol.sys
    19:36:22.0238 3528 fvevol - ok
    19:36:22.0258 3528 gagp30kx (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\DRIVERS\gagp30kx.sys
    19:36:22.0258 3528 gagp30kx - ok
    19:36:22.0308 3528 gbridge (830e853d557da8f4d9449699e53cbee0) C:\Windows\system32\DRIVERS\gbridge64.sys
    19:36:22.0308 3528 gbridge - ok
    19:36:22.0338 3528 hcw85cir (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys
    19:36:22.0338 3528 hcw85cir - ok
    19:36:22.0378 3528 HdAudAddService (6410f6f415b2a5a9037224c41da8bf12) C:\Windows\system32\drivers\HdAudio.sys
    19:36:22.0388 3528 HdAudAddService - ok
    19:36:22.0418 3528 HDAudBus (0a49913402747a0b67de940fb42cbdbb) C:\Windows\system32\DRIVERS\HDAudBus.sys
    19:36:22.0418 3528 HDAudBus - ok
    19:36:22.0438 3528 HECIx64 (b6ac71aaa2b10848f57fc49d55a651af) C:\Windows\system32\DRIVERS\HECIx64.sys
    19:36:22.0438 3528 HECIx64 - ok
    19:36:22.0458 3528 HidBatt (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\DRIVERS\HidBatt.sys
    19:36:22.0458 3528 HidBatt - ok
    19:36:22.0468 3528 HidBth (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\DRIVERS\hidbth.sys
    19:36:22.0468 3528 HidBth - ok
    19:36:22.0478 3528 HidIr (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\DRIVERS\hidir.sys
    19:36:22.0478 3528 HidIr - ok
    19:36:22.0488 3528 HidUsb (b3bf6b5b50006def50b66306d99fcf6f) C:\Windows\system32\DRIVERS\hidusb.sys
    19:36:22.0498 3528 HidUsb - ok
    19:36:22.0538 3528 HpSAMD (0886d440058f203eba0e1825e4355914) C:\Windows\system32\DRIVERS\HpSAMD.sys
    19:36:22.0548 3528 HpSAMD - ok
    19:36:22.0578 3528 HTTP (cee049cac4efa7f4e1e4ad014414a5d4) C:\Windows\system32\drivers\HTTP.sys
    19:36:22.0588 3528 HTTP - ok
    19:36:22.0598 3528 hwpolicy (f17766a19145f111856378df337a5d79) C:\Windows\system32\drivers\hwpolicy.sys
    19:36:22.0598 3528 hwpolicy - ok
    19:36:22.0608 3528 i8042prt (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\DRIVERS\i8042prt.sys
    19:36:22.0608 3528 i8042prt - ok
    19:36:22.0638 3528 iaStorV (b75e45c564e944a2657167d197ab29da) C:\Windows\system32\drivers\iaStorV.sys
    19:36:22.0638 3528 iaStorV - ok
    19:36:22.0818 3528 igfx (09ce164afa8483e41808784d7fca154e) C:\Windows\system32\DRIVERS\igdkmd64.sys
    19:36:22.0968 3528 igfx - ok
    19:36:22.0998 3528 iirsp (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\DRIVERS\iirsp.sys
    19:36:22.0998 3528 iirsp - ok
    19:36:23.0048 3528 Impcd (dd587a55390ed2295bce6d36ad567da9) C:\Windows\system32\DRIVERS\Impcd.sys
    19:36:23.0048 3528 Impcd - ok
    19:36:23.0118 3528 IntcAzAudAddService (e9befd8c6a1db3b544b61647dda35f62) C:\Windows\system32\drivers\RTKVHD64.sys
    19:36:23.0128 3528 IntcAzAudAddService - ok
    19:36:23.0148 3528 IntcDAud (58cf58dee26c909bd6f977b61d246295) C:\Windows\system32\DRIVERS\IntcDAud.sys
    19:36:23.0158 3528 IntcDAud - ok
    19:36:23.0178 3528 intelide (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\DRIVERS\intelide.sys
    19:36:23.0178 3528 intelide - ok
    19:36:23.0208 3528 intelppm (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\DRIVERS\intelppm.sys
    19:36:23.0208 3528 intelppm - ok
    19:36:23.0238 3528 IpFilterDriver (722dd294df62483cecaae6e094b4d695) C:\Windows\system32\DRIVERS\ipfltdrv.sys
    19:36:23.0248 3528 IpFilterDriver - ok
    19:36:23.0278 3528 IPMIDRV (e2b4a4494db7cb9b89b55ca268c337c5) C:\Windows\system32\DRIVERS\IPMIDrv.sys
    19:36:23.0278 3528 IPMIDRV - ok
    19:36:23.0288 3528 IPNAT (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys
    19:36:23.0288 3528 IPNAT - ok
    19:36:23.0318 3528 IRENUM (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys
    19:36:23.0318 3528 IRENUM - ok
    19:36:23.0338 3528 isapnp (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\DRIVERS\isapnp.sys
    19:36:23.0338 3528 isapnp - ok
    19:36:23.0358 3528 iScsiPrt (fa4d2557de56d45b0a346f93564be6e1) C:\Windows\system32\DRIVERS\msiscsi.sys
    19:36:23.0358 3528 iScsiPrt - ok
    19:36:23.0408 3528 k57nd60a (9d7ea8c7215d8d4ae7be110eee61085d) C:\Windows\system32\DRIVERS\k57nd60a.sys
    19:36:23.0408 3528 k57nd60a - ok
    19:36:23.0428 3528 kbdclass (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\DRIVERS\kbdclass.sys
    19:36:23.0428 3528 kbdclass - ok
    19:36:23.0468 3528 kbdhid (6def98f8541e1b5dceb2c822a11f7323) C:\Windows\system32\DRIVERS\kbdhid.sys
    19:36:23.0478 3528 kbdhid - ok
    19:36:23.0498 3528 KSecDD (16c1b906fc5ead84769f90b736b6bf0e) C:\Windows\system32\Drivers\ksecdd.sys
    19:36:23.0498 3528 KSecDD - ok
    19:36:23.0538 3528 KSecPkg (0b711550c56444879d71c7daabda6c83) C:\Windows\system32\Drivers\ksecpkg.sys
    19:36:23.0538 3528 KSecPkg - ok
    19:36:23.0558 3528 ksthunk (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys
    19:36:23.0558 3528 ksthunk - ok
    19:36:23.0648 3528 Lavasoft Kernexplorer (9a7fa6371f68335fd3c3d6488bc5a9f8) C:\Program Files (x86)\Lavasoft\Ad-Aware\KernExplorer64.sys
    19:36:23.0648 3528 Lavasoft Kernexplorer - ok
    19:36:23.0658 3528 Lbd (c8b3131857931ae76798a741cc52b021) C:\Windows\system32\DRIVERS\Lbd.sys
    19:36:23.0658 3528 Lbd - ok
    19:36:23.0688 3528 lltdio (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys
    19:36:23.0698 3528 lltdio - ok
    19:36:23.0728 3528 LSI_FC (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\DRIVERS\lsi_fc.sys
    19:36:23.0728 3528 LSI_FC - ok
    19:36:23.0748 3528 LSI_SAS (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\DRIVERS\lsi_sas.sys
    19:36:23.0748 3528 LSI_SAS - ok
    19:36:23.0768 3528 LSI_SAS2 (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\DRIVERS\lsi_sas2.sys
    19:36:23.0768 3528 LSI_SAS2 - ok
    19:36:23.0788 3528 LSI_SCSI (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\DRIVERS\lsi_scsi.sys
    19:36:23.0788 3528 LSI_SCSI - ok
    19:36:23.0808 3528 luafv (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys
    19:36:23.0808 3528 luafv - ok
    19:36:23.0858 3528 megasas (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\DRIVERS\megasas.sys
    19:36:23.0858 3528 megasas - ok
    19:36:23.0878 3528 MegaSR (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\DRIVERS\MegaSR.sys
    19:36:23.0878 3528 MegaSR - ok
    19:36:23.0938 3528 Modem (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys
    19:36:23.0938 3528 Modem - ok
    19:36:23.0958 3528 monitor (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys
    19:36:23.0958 3528 monitor - ok
    19:36:23.0958 3528 motandroidusb - ok
    19:36:23.0968 3528 motccgp - ok
    19:36:23.0978 3528 motccgpfl - ok
    19:36:24.0028 3528 motmodem - ok
    19:36:24.0038 3528 MotoSwitchService - ok
    19:36:24.0048 3528 Motousbnet - ok
    19:36:24.0068 3528 motusbdevice - ok
    19:36:24.0088 3528 mouclass (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\DRIVERS\mouclass.sys
    19:36:24.0088 3528 mouclass - ok
    19:36:24.0128 3528 mouhid (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys
    19:36:24.0128 3528 mouhid - ok
    19:36:24.0158 3528 mountmgr (791af66c4d0e7c90a3646066386fb571) C:\Windows\system32\drivers\mountmgr.sys
    19:36:24.0158 3528 mountmgr - ok
    19:36:24.0178 3528 mpio (609d1d87649ecc19796f4d76d4c15cea) C:\Windows\system32\DRIVERS\mpio.sys
    19:36:24.0188 3528 mpio - ok
    19:36:24.0208 3528 mpsdrv (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys
    19:36:24.0208 3528 mpsdrv - ok
    19:36:24.0228 3528 MRxDAV (30524261bb51d96d6fcbac20c810183c) C:\Windows\system32\drivers\mrxdav.sys
    19:36:24.0228 3528 MRxDAV - ok
    19:36:24.0268 3528 mrxsmb (040d62a9d8ad28922632137acdd984f2) C:\Windows\system32\DRIVERS\mrxsmb.sys
    19:36:24.0278 3528 mrxsmb - ok
    19:36:24.0318 3528 mrxsmb10 (f0067552f8f9b33d7c59403ab808a3cb) C:\Windows\system32\DRIVERS\mrxsmb10.sys
    19:36:24.0328 3528 mrxsmb10 - ok
    19:36:24.0338 3528 mrxsmb20 (3c142d31de9f2f193218a53fe2632051) C:\Windows\system32\DRIVERS\mrxsmb20.sys
    19:36:24.0338 3528 mrxsmb20 - ok
    19:36:24.0368 3528 msahci (bccf16d5fb1109162380e3e28dc9e4e5) C:\Windows\system32\DRIVERS\msahci.sys
    19:36:24.0368 3528 msahci - ok
    19:36:24.0388 3528 msdsm (8d27b597229aed79430fb9db3bcbfbd0) C:\Windows\system32\DRIVERS\msdsm.sys
    19:36:24.0398 3528 msdsm - ok
    19:36:24.0408 3528 Msfs (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys
    19:36:24.0408 3528 Msfs - ok
    19:36:24.0418 3528 mshidkmdf (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys
    19:36:24.0418 3528 mshidkmdf - ok
    19:36:24.0448 3528 msisadrv (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\DRIVERS\msisadrv.sys
    19:36:24.0448 3528 msisadrv - ok
    19:36:24.0478 3528 MSKSSRV (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys
    19:36:24.0478 3528 MSKSSRV - ok
    19:36:24.0498 3528 MSPCLOCK (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys
    19:36:24.0498 3528 MSPCLOCK - ok
    19:36:24.0518 3528 MSPQM (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys
    19:36:24.0518 3528 MSPQM - ok
    19:36:24.0528 3528 MsRPC (89cb141aa8616d8c6a4610fa26c60964) C:\Windows\system32\drivers\MsRPC.sys
    19:36:24.0538 3528 MsRPC - ok
    19:36:24.0548 3528 mssmbios (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\DRIVERS\mssmbios.sys
    19:36:24.0548 3528 mssmbios - ok
    19:36:24.0578 3528 MSTEE (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys
    19:36:24.0578 3528 MSTEE - ok
    19:36:24.0588 3528 MTConfig (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\DRIVERS\MTConfig.sys
    19:36:24.0588 3528 MTConfig - ok
    19:36:24.0618 3528 Mup (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys
    19:36:24.0618 3528 Mup - ok
    19:36:24.0648 3528 NativeWifiP (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS\nwifi.sys
    19:36:24.0648 3528 NativeWifiP - ok
    19:36:24.0688 3528 NDIS (cad515dbd07d082bb317d9928ce8962c) C:\Windows\system32\drivers\ndis.sys
    19:36:24.0698 3528 NDIS - ok
    19:36:24.0728 3528 NdisCap (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS\ndiscap.sys
    19:36:24.0728 3528 NdisCap - ok
    19:36:24.0758 3528 NdisTapi (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS\ndistapi.sys
    19:36:24.0758 3528 NdisTapi - ok
    19:36:24.0778 3528 Ndisuio (f105ba1e22bf1f2ee8f005d4305e4bec) C:\Windows\system32\DRIVERS\ndisuio.sys
    19:36:24.0778 3528 Ndisuio - ok
    19:36:24.0798 3528 NdisWan (557dfab9ca1fcb036ac77564c010dad3) C:\Windows\system32\DRIVERS\ndiswan.sys
    19:36:24.0798 3528 NdisWan - ok
    19:36:24.0808 3528 NDProxy (659b74fb74b86228d6338d643cd3e3cf) C:\Windows\system32\drivers\NDProxy.sys
    19:36:24.0808 3528 NDProxy - ok
    19:36:24.0828 3528 NetBIOS (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS\netbios.sys
    19:36:24.0828 3528 NetBIOS - ok
    19:36:24.0838 3528 NetBT (9162b273a44ab9dce5b44362731d062a) C:\Windows\system32\DRIVERS\netbt.sys
    19:36:24.0848 3528 NetBT - ok
    19:36:24.0868 3528 nfrd960 (77889813be4d166cdab78ddba990da92) C:\Windows\system32\DRIVERS\nfrd960.sys
    19:36:24.0868 3528 nfrd960 - ok
    19:36:24.0918 3528 NPF (c31fa031335eff434b2d94278e74bcce) C:\Windows\system32\DRIVERS\npf.sys
    19:36:24.0918 3528 NPF - ok
    19:36:24.0948 3528 Npfs (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys
    19:36:24.0948 3528 Npfs - ok
    19:36:24.0968 3528 nsiproxy (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers\nsiproxy.sys
    19:36:24.0968 3528 nsiproxy - ok
    19:36:25.0038 3528 Ntfs (378e0e0dfea67d98ae6ea53adbbd76bc) C:\Windows\system32\drivers\Ntfs.sys
    19:36:25.0068 3528 Ntfs - ok
    19:36:25.0108 3528 Null (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys
    19:36:25.0108 3528 Null - ok
    19:36:25.0128 3528 NVHDA (ed9380f201c8126425c09bed96dbe1e5) C:\Windows\system32\drivers\nvhda64v.sys
    19:36:25.0128 3528 NVHDA - ok
    19:36:25.0368 3528 nvlddmkm (bbe872a814b00798c2d568d46c42a71b) C:\Windows\system32\DRIVERS\nvlddmkm.sys
    19:36:25.0408 3528 nvlddmkm - ok
    19:36:25.0458 3528 nvraid (a4d9c9a608a97f59307c2f2600edc6a4) C:\Windows\system32\drivers\nvraid.sys
    19:36:25.0458 3528 nvraid - ok
    19:36:25.0488 3528 nvstor (6c1d5f70e7a6a3fd1c90d840edc048b9) C:\Windows\system32\drivers\nvstor.sys
    19:36:25.0488 3528 nvstor - ok
    19:36:25.0508 3528 nv_agp (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\DRIVERS\nv_agp.sys
    19:36:25.0508 3528 nv_agp - ok
    19:36:25.0538 3528 ohci1394 (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\DRIVERS\ohci1394.sys
    19:36:25.0538 3528 ohci1394 - ok
    19:36:25.0608 3528 Parport (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\DRIVERS\parport.sys
    19:36:25.0608 3528 Parport - ok
    19:36:25.0648 3528 partmgr (7daa117143316c4a1537e074a5a9eaf0) C:\Windows\system32\drivers\partmgr.sys
    19:36:25.0648 3528 partmgr - ok
    19:36:25.0678 3528 pci (f36f6504009f2fb0dfd1b17a116ad74b) C:\Windows\system32\DRIVERS\pci.sys
    19:36:25.0678 3528 pci - ok
    19:36:25.0698 3528 pciide (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\DRIVERS\pciide.sys
    19:36:25.0698 3528 pciide - ok
    19:36:25.0718 3528 pcmcia (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\DRIVERS\pcmcia.sys
    19:36:25.0728 3528 pcmcia - ok
    19:36:25.0738 3528 pcw (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys
    19:36:25.0748 3528 pcw - ok
    19:36:25.0778 3528 PEAUTH (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys
    19:36:25.0778 3528 PEAUTH - ok
    19:36:25.0848 3528 PptpMiniport (27cc19e81ba5e3403c48302127bda717) C:\Windows\system32\DRIVERS\raspptp.sys
    19:36:25.0848 3528 PptpMiniport - ok
    19:36:25.0868 3528 Processor (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\DRIVERS\processr.sys
    19:36:25.0868 3528 Processor - ok
    19:36:25.0898 3528 Psched (ee992183bd8eaefd9973f352e587a299) C:\Windows\system32\DRIVERS\pacer.sys
    19:36:25.0898 3528 Psched - ok
    19:36:25.0938 3528 ql2300 (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\DRIVERS\ql2300.sys
    19:36:25.0978 3528 ql2300 - ok
    19:36:25.0988 3528 ql40xx (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\DRIVERS\ql40xx.sys
    19:36:25.0988 3528 ql40xx - ok
    19:36:26.0008 3528 QWAVEdrv (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys
    19:36:26.0008 3528 QWAVEdrv - ok
    19:36:26.0058 3528 RasAcd (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERS\rasacd.sys
    19:36:26.0058 3528 RasAcd - ok
    19:36:26.0088 3528 RasAgileVpn (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys
    19:36:26.0088 3528 RasAgileVpn - ok
    19:36:26.0108 3528 Rasl2tp (87a6e852a22991580d6d39adc4790463) C:\Windows\system32\DRIVERS\rasl2tp.sys
    19:36:26.0108 3528 Rasl2tp - ok
    19:36:26.0128 3528 RasPppoe (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERS\raspppoe.sys
    19:36:26.0128 3528 RasPppoe - ok
    19:36:26.0138 3528 RasSstp (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERS\rassstp.sys
    19:36:26.0148 3528 RasSstp - ok
    19:36:26.0158 3528 rdbss (3bac8142102c15d59a87757c1d41dce5) C:\Windows\system32\DRIVERS\rdbss.sys
    19:36:26.0168 3528 rdbss - ok
    19:36:26.0168 3528 rdpbus (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\DRIVERS\rdpbus.sys
    19:36:26.0178 3528 rdpbus - ok
    19:36:26.0188 3528 RDPCDD (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys
    19:36:26.0188 3528 RDPCDD - ok
    19:36:26.0208 3528 RDPENCDD (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\drivers\rdpencdd.sys
    19:36:26.0208 3528 RDPENCDD - ok
    19:36:26.0218 3528 RDPREFMP (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\drivers\rdprefmp.sys
    19:36:26.0228 3528 RDPREFMP - ok
    19:36:26.0238 3528 RDPWD (8a3e6bea1c53ea6177fe2b6eba2c80d7) C:\Windows\system32\drivers\RDPWD.sys
    19:36:26.0238 3528 RDPWD - ok
    19:36:26.0268 3528 rdyboost (634b9a2181d98f15941236886164ec8b) C:\Windows\system32\drivers\rdyboost.sys
    19:36:26.0268 3528 rdyboost - ok
    19:36:26.0298 3528 RimUsb (5790bca445cc40df8b38c2c48608aac2) C:\Windows\system32\Drivers\RimUsb_AMD64.sys
    19:36:26.0308 3528 RimUsb - ok
    19:36:26.0338 3528 rspndr (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERS\rspndr.sys
    19:36:26.0338 3528 rspndr - ok
    19:36:26.0388 3528 SASDIFSV (3289766038db2cb14d07dc84392138d5) C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS
    19:36:26.0388 3528 SASDIFSV - ok
    19:36:26.0418 3528 SASKUTIL (58a38e75f3316a83c23df6173d41f2b5) C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS
    19:36:26.0418 3528 SASKUTIL - ok
    19:36:26.0438 3528 sbp2port (e3bbb89983daf5622c1d50cf49f28227) C:\Windows\system32\DRIVERS\sbp2port.sys
    19:36:26.0438 3528 sbp2port - ok
    19:36:26.0458 3528 scfilter (c94da20c7e3ba1dca269bc8460d98387) C:\Windows\system32\DRIVERS\scfilter.sys
    19:36:26.0458 3528 scfilter - ok
    19:36:26.0508 3528 SCMNdisP (6011cdf54bb6f4c69f38faccdad73d7e) C:\Windows\system32\DRIVERS\scmndisp.sys
    19:36:26.0508 3528 SCMNdisP - ok
    19:36:26.0528 3528 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys
    19:36:26.0528 3528 secdrv - ok
    19:36:26.0548 3528 Serenum (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\DRIVERS\serenum.sys
    19:36:26.0548 3528 Serenum - ok
    19:36:26.0558 3528 Serial (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\DRIVERS\serial.sys
    19:36:26.0558 3528 Serial - ok
    19:36:26.0568 3528 sermouse (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\DRIVERS\sermouse.sys
    19:36:26.0568 3528 sermouse - ok
    19:36:26.0588 3528 sffdisk (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\DRIVERS\sffdisk.sys
    19:36:26.0588 3528 sffdisk - ok
    19:36:26.0608 3528 sffp_mmc (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\DRIVERS\sffp_mmc.sys
    19:36:26.0608 3528 sffp_mmc - ok
    19:36:26.0618 3528 sffp_sd (178298f767fe638c9fedcbdef58bb5e4) C:\Windows\system32\DRIVERS\sffp_sd.sys
    19:36:26.0618 3528 sffp_sd - ok
    19:36:26.0628 3528 sfloppy (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\DRIVERS\sfloppy.sys
    19:36:26.0628 3528 sfloppy - ok
    19:36:26.0638 3528 SiSRaid2 (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\DRIVERS\SiSRaid2.sys
    19:36:26.0638 3528 SiSRaid2 - ok
    19:36:26.0648 3528 SiSRaid4 (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\DRIVERS\sisraid4.sys
    19:36:26.0648 3528 SiSRaid4 - ok
    19:36:26.0658 3528 Smb (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys
    19:36:26.0658 3528 Smb - ok
    19:36:26.0688 3528 spldr (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys
    19:36:26.0688 3528 spldr - ok
    19:36:26.0718 3528 sptd - ok
    19:36:26.0778 3528 srv (2408c0366d96bcdf63e8f1c78e4a29c5) C:\Windows\system32\DRIVERS\srv.sys
    19:36:26.0788 3528 srv - ok
    19:36:26.0818 3528 srv2 (76548f7b818881b47d8d1ae1be9c11f8) C:\Windows\system32\DRIVERS\srv2.sys
    19:36:26.0818 3528 srv2 - ok
    19:36:26.0838 3528 srvnet (0af6e19d39c70844c5caa8fb0183c36e) C:\Windows\system32\DRIVERS\srvnet.sys
    19:36:26.0838 3528 srvnet - ok
    19:36:26.0928 3528 stexstor (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\DRIVERS\stexstor.sys
    19:36:26.0928 3528 stexstor - ok
    19:36:26.0958 3528 swenum (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\DRIVERS\swenum.sys
    19:36:26.0958 3528 swenum - ok
    19:36:27.0058 3528 Tcpip (f18f56efc0bfb9c87ba01c37b27f4da5) C:\Windows\system32\drivers\tcpip.sys
    19:36:27.0098 3528 Tcpip - ok
    19:36:27.0138 3528 TCPIP6 (f18f56efc0bfb9c87ba01c37b27f4da5) C:\Windows\system32\DRIVERS\tcpip.sys
    19:36:27.0148 3528 TCPIP6 - ok
    19:36:27.0168 3528 tcpipreg (76d078af6f587b162d50210f761eb9ed) C:\Windows\system32\drivers\tcpipreg.sys
    19:36:27.0168 3528 tcpipreg - ok
    19:36:27.0218 3528 TDPIPE (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers\tdpipe.sys
    19:36:27.0218 3528 TDPIPE - ok
    19:36:27.0238 3528 TDTCP (e4245bda3190a582d55ed09e137401a9) C:\Windows\system32\drivers\tdtcp.sys
    19:36:27.0238 3528 TDTCP - ok
    19:36:27.0258 3528 tdx (079125c4b17b01fcaeebce0bcb290c0f) C:\Windows\system32\DRIVERS\tdx.sys
    19:36:27.0268 3528 tdx - ok
    19:36:27.0278 3528 TermDD (c448651339196c0e869a355171875522) C:\Windows\system32\DRIVERS\termdd.sys
    19:36:27.0278 3528 TermDD - ok
    19:36:27.0318 3528 tssecsrv (61b96c26131e37b24e93327a0bd1fb95) C:\Windows\system32\DRIVERS\tssecsrv.sys
    19:36:27.0318 3528 tssecsrv - ok
    19:36:27.0338 3528 tunnel (3836171a2cdf3af8ef10856db9835a70) C:\Windows\system32\DRIVERS\tunnel.sys
    19:36:27.0338 3528 tunnel - ok
    19:36:27.0358 3528 uagp35 (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\DRIVERS\uagp35.sys
    19:36:27.0358 3528 uagp35 - ok
    19:36:27.0388 3528 udfs (31ba4a33afab6a69ea092b18017f737f) C:\Windows\system32\DRIVERS\udfs.sys
    19:36:27.0398 3528 udfs - ok
    19:36:27.0418 3528 uliagpkx (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\DRIVERS\uliagpkx.sys
    19:36:27.0418 3528 uliagpkx - ok
    19:36:27.0448 3528 umbus (eab6c35e62b1b0db0d1b48b671d3a117) C:\Windows\system32\DRIVERS\umbus.sys
    19:36:27.0448 3528 umbus - ok
    19:36:27.0468 3528 UmPass (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\DRIVERS\umpass.sys
    19:36:27.0468 3528 UmPass - ok
    19:36:27.0488 3528 usbaudio (77b01bc848298223a95d4ec23e1785a1) C:\Windows\system32\drivers\usbaudio.sys
    19:36:27.0498 3528 usbaudio - ok
    19:36:27.0528 3528 usbccgp (b26afb54a534d634523c4fb66765b026) C:\Windows\system32\DRIVERS\usbccgp.sys
    19:36:27.0528 3528 usbccgp - ok
    19:36:27.0558 3528 usbcir (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\DRIVERS\usbcir.sys
    19:36:27.0568 3528 usbcir - ok
    19:36:27.0588 3528 usbehci (fbb21ebe49f6d560db37ac25fbc68e66) C:\Windows\system32\drivers\usbehci.sys
    19:36:27.0588 3528 usbehci - ok
    19:36:27.0628 3528 usbhub (6b7a8a99c4a459e73c286a6763ea24cc) C:\Windows\system32\DRIVERS\usbhub.sys
    19:36:27.0638 3528 usbhub - ok
    19:36:27.0668 3528 usbohci (8c88aa7617b4cbc2e4bed61d26b33a27) C:\Windows\system32\drivers\usbohci.sys
    19:36:27.0668 3528 usbohci - ok
    19:36:27.0698 3528 usbprint (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS\usbprint.sys
    19:36:27.0698 3528 usbprint - ok
    19:36:27.0718 3528 USBSTOR (f39983647bc1f3e6100778ddfe9dce29) C:\Windows\system32\DRIVERS\USBSTOR.SYS
    19:36:27.0718 3528 USBSTOR - ok
    19:36:27.0748 3528 usbuhci (0b5b3b2df3fd1709618acfa50b8392b0) C:\Windows\system32\drivers\usbuhci.sys
    19:36:27.0748 3528 usbuhci - ok
    19:36:27.0778 3528 vdrvroot (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\DRIVERS\vdrvroot.sys
    19:36:27.0778 3528 vdrvroot - ok
    19:36:27.0798 3528 vga (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys
    19:36:27.0798 3528 vga - ok
    19:36:27.0818 3528 VgaSave (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys
    19:36:27.0818 3528 VgaSave - ok
    19:36:27.0838 3528 vhdmp (c82e748660f62a242b2dfac1442f22a4) C:\Windows\system32\DRIVERS\vhdmp.sys
    19:36:27.0838 3528 vhdmp - ok
    19:36:27.0858 3528 viaide (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\DRIVERS\viaide.sys
    19:36:27.0868 3528 viaide - ok
    19:36:27.0898 3528 volmgr (2b1a3dae2b4e70dbba822b7a03fbd4a3) C:\Windows\system32\DRIVERS\volmgr.sys
    19:36:27.0898 3528 volmgr - ok
    19:36:27.0918 3528 volmgrx (99b0cbb569ca79acaed8c91461d765fb) C:\Windows\system32\drivers\volmgrx.sys
    19:36:27.0928 3528 volmgrx - ok
    19:36:27.0938 3528 volsnap (58f82eed8ca24b461441f9c3e4f0bf5c) C:\Windows\system32\DRIVERS\volsnap.sys
    19:36:27.0948 3528 volsnap - ok
    19:36:27.0968 3528 vsmraid (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\DRIVERS\vsmraid.sys
    19:36:27.0968 3528 vsmraid - ok
    19:36:27.0988 3528 vwifibus (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\system32\DRIVERS\vwifibus.sys
    19:36:27.0988 3528 vwifibus - ok
    19:36:28.0018 3528 vwififlt (6a3d66263414ff0d6fa754c646612f3f) C:\Windows\system32\DRIVERS\vwififlt.sys
    19:36:28.0018 3528 vwififlt - ok
    19:36:28.0028 3528 WacomPen (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\DRIVERS\wacompen.sys
    19:36:28.0028 3528 WacomPen - ok
    19:36:28.0048 3528 WANARP (47ca49400643effd3f1c9a27e1d69324) C:\Windows\system32\DRIVERS\wanarp.sys
    19:36:28.0058 3528 WANARP - ok
    19:36:28.0058 3528 Wanarpv6 (47ca49400643effd3f1c9a27e1d69324) C:\Windows\system32\DRIVERS\wanarp.sys
    19:36:28.0058 3528 Wanarpv6 - ok
    19:36:28.0078 3528 Wd (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\DRIVERS\wd.sys
    19:36:28.0078 3528 Wd - ok
    19:36:28.0128 3528 Wdf01000 (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys
    19:36:28.0148 3528 Wdf01000 - ok
    19:36:28.0178 3528 WfpLwf (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys
    19:36:28.0178 3528 WfpLwf - ok
    19:36:28.0238 3528 WimFltr (b14ef15bd757fa488f9c970eee9c0d35) C:\Windows\system32\DRIVERS\wimfltr.sys
    19:36:28.0238 3528 WimFltr - ok
    19:36:28.0248 3528 WIMMount (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys
    19:36:28.0248 3528 WIMMount - ok
    19:36:28.0308 3528 WinUsb (4d52c872018af7e18d078978dcc3f6f2) C:\Windows\system32\DRIVERS\WinUsb.sys
    19:36:28.0308 3528 WinUsb - ok
    19:36:28.0338 3528 WmiAcpi (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\DRIVERS\wmiacpi.sys
    19:36:28.0338 3528 WmiAcpi - ok
    19:36:28.0378 3528 ws2ifsl (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys
    19:36:28.0388 3528 ws2ifsl - ok
    19:36:28.0418 3528 WudfPf (c63907207b837a5c05cf6d1606aa0008) C:\Windows\system32\drivers\WudfPf.sys
    19:36:28.0418 3528 WudfPf - ok
    19:36:28.0438 3528 WUDFRd (d885a873d733020f8b9b9ff4b1666158) C:\Windows\system32\DRIVERS\WUDFRd.sys
    19:36:28.0448 3528 WUDFRd - ok
    19:36:28.0478 3528 MBR (0x1B8) (cdb4de4bbd714f152979da2dcbef57eb) \Device\Harddisk0\DR0
    19:36:28.0508 3528 \Device\Harddisk0\DR0 ( Rootkit.Boot.SST.b ) - infected
    19:36:28.0508 3528 \Device\Harddisk0\DR0 - detected Rootkit.Boot.SST.b (0)
    19:36:28.0528 3528 MBR (0x1B8) (5fb38429d5d77768867c76dcbdb35194) \Device\Harddisk5\DR5
    19:36:28.0538 3528 \Device\Harddisk5\DR5 - ok
    19:36:28.0568 3528 Boot (0x1200) (1936fd5dacd385d9b0f3afac3d679a60) \Device\Harddisk0\DR0\Partition0
    19:36:28.0578 3528 \Device\Harddisk0\DR0\Partition0 - ok
    19:36:28.0598 3528 Boot (0x1200) (976c36ac8983e5e4b875c3bcf2fe81a9) \Device\Harddisk0\DR0\Partition1
    19:36:28.0598 3528 \Device\Harddisk0\DR0\Partition1 - ok
    19:36:28.0598 3528 Boot (0x1200) (7bd4ee2385ea6391445cbd4f3bd5a5ec) \Device\Harddisk5\DR5\Partition0
    19:36:28.0608 3528 \Device\Harddisk5\DR5\Partition0 - ok
    19:36:28.0608 3528 ============================================================
    19:36:28.0608 3528 Scan finished
    19:36:28.0608 3528 ============================================================

    Please See Next Post...
     
  15. 07tcbsp

    07tcbsp Thread Starter

    Joined:
    Apr 10, 2007
    Messages:
    47
    Continued From Previous Post

    19:36:28.0618 1924 Detected object count: 1
    19:36:28.0618 1924 Actual detected object count: 1
    19:36:52.0738 1924 \Device\Harddisk0\DR0 ( Rootkit.Boot.SST.b ) - skipped by user
    19:36:52.0738 1924 \Device\Harddisk0\DR0 ( Rootkit.Boot.SST.b ) - User select action: Skip
    19:36:59.0858 3420 ============================================================
    19:36:59.0858 3420 Scan started
    19:36:59.0858 3420 Mode: Manual;
    19:36:59.0858 3420 ============================================================
    19:37:00.0418 3420 1394ohci (969c91060cbb5d17cb8440b5f78b4c51) C:\Windows\system32\DRIVERS\1394ohci.sys
    19:37:00.0428 3420 1394ohci - ok
    19:37:00.0458 3420 ACPI (6f11e88748cdefd2f76aa215f97ddfe5) C:\Windows\system32\DRIVERS\ACPI.sys
    19:37:00.0458 3420 ACPI - ok
    19:37:00.0478 3420 AcpiPmi (63b05a0420ce4bf0e4af6dcc7cada254) C:\Windows\system32\DRIVERS\acpipmi.sys
    19:37:00.0478 3420 AcpiPmi - ok
    19:37:00.0538 3420 adp94xx (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\DRIVERS\adp94xx.sys
    19:37:00.0538 3420 adp94xx - ok
    19:37:00.0558 3420 adpahci (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\DRIVERS\adpahci.sys
    19:37:00.0558 3420 adpahci - ok
    19:37:00.0568 3420 adpu320 (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\DRIVERS\adpu320.sys
    19:37:00.0568 3420 adpu320 - ok
    19:37:00.0608 3420 AFD (db9d6c6b2cd95a9ca414d045b627422e) C:\Windows\system32\drivers\afd.sys
    19:37:00.0618 3420 AFD - ok
    19:37:00.0638 3420 agp440 (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\DRIVERS\agp440.sys
    19:37:00.0638 3420 agp440 - ok
    19:37:00.0658 3420 aliide (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\DRIVERS\aliide.sys
    19:37:00.0658 3420 aliide - ok
    19:37:00.0678 3420 amdide (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\DRIVERS\amdide.sys
    19:37:00.0678 3420 amdide - ok
    19:37:00.0688 3420 AmdK8 (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\DRIVERS\amdk8.sys
    19:37:00.0688 3420 AmdK8 - ok
    19:37:00.0698 3420 AmdPPM (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\DRIVERS\amdppm.sys
    19:37:00.0698 3420 AmdPPM - ok
    19:37:00.0728 3420 amdsata (ec7ebab00a4d8448bab68d1e49b4beb9) C:\Windows\system32\drivers\amdsata.sys
    19:37:00.0728 3420 amdsata - ok
    19:37:00.0738 3420 amdsbs (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\DRIVERS\amdsbs.sys
    19:37:00.0738 3420 amdsbs - ok
    19:37:00.0768 3420 amdxata (db27766102c7bf7e95140a2aa81d042e) C:\Windows\system32\drivers\amdxata.sys
    19:37:00.0768 3420 amdxata - ok
    19:37:00.0788 3420 AppID (42fd751b27fa0e9c69bb39f39e409594) C:\Windows\system32\drivers\appid.sys
    19:37:00.0788 3420 AppID - ok
    19:37:00.0808 3420 arc (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\DRIVERS\arc.sys
    19:37:00.0818 3420 arc - ok
    19:37:00.0828 3420 arcsas (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\DRIVERS\arcsas.sys
    19:37:00.0828 3420 arcsas - ok
    19:37:00.0858 3420 AsyncMac (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys
    19:37:00.0858 3420 AsyncMac - ok
    19:37:00.0888 3420 atapi (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\DRIVERS\atapi.sys
    19:37:00.0888 3420 atapi - ok
    19:37:00.0948 3420 athr (195786ed7a26e1913a4f9799fdbc2c71) C:\Windows\system32\DRIVERS\athrx.sys
    19:37:00.0958 3420 athr - ok
    19:37:00.0988 3420 b06bdrv (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\DRIVERS\bxvbda.sys
    19:37:00.0988 3420 b06bdrv - ok
    19:37:01.0008 3420 b57nd60a (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys
    19:37:01.0008 3420 b57nd60a - ok
    19:37:01.0058 3420 BCMH43XX (e49110a58a32e9450356686a95dd7763) C:\Windows\system32\DRIVERS\bcmwlhigh664.sys
    19:37:01.0068 3420 BCMH43XX - ok
    19:37:01.0088 3420 Beep (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys
    19:37:01.0088 3420 Beep - ok
    19:37:01.0108 3420 blbdrive (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\DRIVERS\blbdrive.sys
    19:37:01.0108 3420 blbdrive - ok
    19:37:01.0138 3420 bowser (19d20159708e152267e53b66677a4995) C:\Windows\system32\DRIVERS\bowser.sys
    19:37:01.0148 3420 bowser - ok
    19:37:01.0148 3420 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\DRIVERS\BrFiltLo.sys
    19:37:01.0148 3420 BrFiltLo - ok
    19:37:01.0168 3420 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\DRIVERS\BrFiltUp.sys
    19:37:01.0168 3420 BrFiltUp - ok
    19:37:01.0188 3420 Brserid (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys
    19:37:01.0188 3420 Brserid - ok
    19:37:01.0198 3420 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys
    19:37:01.0198 3420 BrSerWdm - ok
    19:37:01.0208 3420 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys
    19:37:01.0208 3420 BrUsbMdm - ok
    19:37:01.0258 3420 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys
    19:37:01.0258 3420 BrUsbSer - ok
    19:37:01.0278 3420 BTCFilterService - ok
    19:37:01.0318 3420 BTHMODEM (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\DRIVERS\bthmodem.sys
    19:37:01.0318 3420 BTHMODEM - ok
    19:37:01.0338 3420 cdfs (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys
    19:37:01.0338 3420 cdfs - ok
    19:37:01.0378 3420 cdrom (83d2d75e1efb81b3450c18131443f7db) C:\Windows\system32\DRIVERS\cdrom.sys
    19:37:01.0388 3420 cdrom - ok
    19:37:01.0398 3420 circlass (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\DRIVERS\circlass.sys
    19:37:01.0398 3420 circlass - ok
    19:37:01.0428 3420 CLFS (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys
    19:37:01.0438 3420 CLFS - ok
    19:37:01.0458 3420 CmBatt (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\DRIVERS\CmBatt.sys
    19:37:01.0458 3420 CmBatt - ok
    19:37:01.0478 3420 cmdide (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\DRIVERS\cmdide.sys
    19:37:01.0478 3420 cmdide - ok
    19:37:01.0508 3420 CNG (937beb186a735aca91d717044a49d17e) C:\Windows\system32\Drivers\cng.sys
    19:37:01.0518 3420 CNG - ok
    19:37:01.0528 3420 Compbatt (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\DRIVERS\compbatt.sys
    19:37:01.0528 3420 Compbatt - ok
    19:37:01.0538 3420 CompositeBus (f26b3a86f6fa87ca360b879581ab4123) C:\Windows\system32\DRIVERS\CompositeBus.sys
    19:37:01.0538 3420 CompositeBus - ok
    19:37:01.0588 3420 crcdisk (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\DRIVERS\crcdisk.sys
    19:37:01.0588 3420 crcdisk - ok
    19:37:01.0668 3420 DfsC (9c253ce7311ca60fc11c774692a13208) C:\Windows\system32\Drivers\dfsc.sys
    19:37:01.0668 3420 DfsC - ok
    19:37:01.0688 3420 discache (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys
    19:37:01.0688 3420 discache - ok
    19:37:01.0728 3420 Disk (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\DRIVERS\disk.sys
    19:37:01.0728 3420 Disk - ok
    19:37:01.0768 3420 drmkaud (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys
    19:37:01.0768 3420 drmkaud - ok
    19:37:01.0828 3420 DXGKrnl (1633b9abf52784a1331476397a48cbef) C:\Windows\System32\drivers\dxgkrnl.sys
    19:37:01.0838 3420 DXGKrnl - ok
    19:37:01.0838 3420 EagleX64 - ok
    19:37:01.0918 3420 ebdrv (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\DRIVERS\evbda.sys
    19:37:01.0948 3420 ebdrv - ok
    19:37:01.0968 3420 elxstor (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\DRIVERS\elxstor.sys
    19:37:01.0968 3420 elxstor - ok
    19:37:01.0988 3420 ErrDev (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\DRIVERS\errdev.sys
    19:37:01.0988 3420 ErrDev - ok
    19:37:02.0008 3420 exfat (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys
    19:37:02.0008 3420 exfat - ok
    19:37:02.0028 3420 fastfat (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys
    19:37:02.0028 3420 fastfat - ok
    19:37:02.0038 3420 fdc (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\DRIVERS\fdc.sys
    19:37:02.0038 3420 fdc - ok
    19:37:02.0058 3420 FileInfo (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys
    19:37:02.0058 3420 FileInfo - ok
    19:37:02.0078 3420 Filetrace (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys
    19:37:02.0078 3420 Filetrace - ok
    19:37:02.0078 3420 flpydisk (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\DRIVERS\flpydisk.sys
    19:37:02.0078 3420 flpydisk - ok
    19:37:02.0098 3420 FltMgr (f7866af72abbaf84b1fa5aa195378c59) C:\Windows\system32\drivers\fltmgr.sys
    19:37:02.0098 3420 FltMgr - ok
    19:37:02.0118 3420 FsDepends (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys
    19:37:02.0118 3420 FsDepends - ok
    19:37:02.0128 3420 Fs_Rec (e95ef8547de20cf0603557c0cf7a9462) C:\Windows\system32\drivers\Fs_Rec.sys
    19:37:02.0128 3420 Fs_Rec - ok
    19:37:02.0178 3420 fvevol (ae87ba80d0ec3b57126ed2cdc15b24ed) C:\Windows\system32\DRIVERS\fvevol.sys
    19:37:02.0178 3420 fvevol - ok
    19:37:02.0198 3420 gagp30kx (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\DRIVERS\gagp30kx.sys
    19:37:02.0198 3420 gagp30kx - ok
    19:37:02.0238 3420 gbridge (830e853d557da8f4d9449699e53cbee0) C:\Windows\system32\DRIVERS\gbridge64.sys
    19:37:02.0238 3420 gbridge - ok
    19:37:02.0258 3420 hcw85cir (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys
    19:37:02.0258 3420 hcw85cir - ok
    19:37:02.0308 3420 HdAudAddService (6410f6f415b2a5a9037224c41da8bf12) C:\Windows\system32\drivers\HdAudio.sys
    19:37:02.0318 3420 HdAudAddService - ok
    19:37:02.0348 3420 HDAudBus (0a49913402747a0b67de940fb42cbdbb) C:\Windows\system32\DRIVERS\HDAudBus.sys
    19:37:02.0348 3420 HDAudBus - ok
    19:37:02.0378 3420 HECIx64 (b6ac71aaa2b10848f57fc49d55a651af) C:\Windows\system32\DRIVERS\HECIx64.sys
    19:37:02.0378 3420 HECIx64 - ok
    19:37:02.0388 3420 HidBatt (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\DRIVERS\HidBatt.sys
    19:37:02.0388 3420 HidBatt - ok
    19:37:02.0398 3420 HidBth (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\DRIVERS\hidbth.sys
    19:37:02.0398 3420 HidBth - ok
    19:37:02.0408 3420 HidIr (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\DRIVERS\hidir.sys
    19:37:02.0408 3420 HidIr - ok
    19:37:02.0418 3420 HidUsb (b3bf6b5b50006def50b66306d99fcf6f) C:\Windows\system32\DRIVERS\hidusb.sys
    19:37:02.0418 3420 HidUsb - ok
    19:37:02.0448 3420 HpSAMD (0886d440058f203eba0e1825e4355914) C:\Windows\system32\DRIVERS\HpSAMD.sys
    19:37:02.0448 3420 HpSAMD - ok
    19:37:02.0478 3420 HTTP (cee049cac4efa7f4e1e4ad014414a5d4) C:\Windows\system32\drivers\HTTP.sys
    19:37:02.0488 3420 HTTP - ok
    19:37:02.0498 3420 hwpolicy (f17766a19145f111856378df337a5d79) C:\Windows\system32\drivers\hwpolicy.sys
    19:37:02.0498 3420 hwpolicy - ok
    19:37:02.0518 3420 i8042prt (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\DRIVERS\i8042prt.sys
    19:37:02.0518 3420 i8042prt - ok
    19:37:02.0558 3420 iaStorV (b75e45c564e944a2657167d197ab29da) C:\Windows\system32\drivers\iaStorV.sys
    19:37:02.0558 3420 iaStorV - ok
    19:37:02.0748 3420 igfx (09ce164afa8483e41808784d7fca154e) C:\Windows\system32\DRIVERS\igdkmd64.sys
    19:37:02.0788 3420 igfx - ok
    19:37:02.0818 3420 iirsp (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\DRIVERS\iirsp.sys
    19:37:02.0818 3420 iirsp - ok
    19:37:02.0848 3420 Impcd (dd587a55390ed2295bce6d36ad567da9) C:\Windows\system32\DRIVERS\Impcd.sys
    19:37:02.0848 3420 Impcd - ok
    19:37:02.0908 3420 IntcAzAudAddService (e9befd8c6a1db3b544b61647dda35f62) C:\Windows\system32\drivers\RTKVHD64.sys
    19:37:02.0908 3420 IntcAzAudAddService - ok
    19:37:02.0938 3420 IntcDAud (58cf58dee26c909bd6f977b61d246295) C:\Windows\system32\DRIVERS\IntcDAud.sys
    19:37:02.0938 3420 IntcDAud - ok
    19:37:02.0968 3420 intelide (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\DRIVERS\intelide.sys
    19:37:02.0968 3420 intelide - ok
    19:37:02.0978 3420 intelppm (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\DRIVERS\intelppm.sys
    19:37:02.0978 3420 intelppm - ok
    19:37:03.0008 3420 IpFilterDriver (722dd294df62483cecaae6e094b4d695) C:\Windows\system32\DRIVERS\ipfltdrv.sys
    19:37:03.0008 3420 IpFilterDriver - ok
    19:37:03.0018 3420 IPMIDRV (e2b4a4494db7cb9b89b55ca268c337c5) C:\Windows\system32\DRIVERS\IPMIDrv.sys
    19:37:03.0018 3420 IPMIDRV - ok
    19:37:03.0028 3420 IPNAT (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys
    19:37:03.0028 3420 IPNAT - ok
    19:37:03.0038 3420 IRENUM (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys
    19:37:03.0038 3420 IRENUM - ok
    19:37:03.0048 3420 isapnp (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\DRIVERS\isapnp.sys
    19:37:03.0048 3420 isapnp - ok
    19:37:03.0068 3420 iScsiPrt (fa4d2557de56d45b0a346f93564be6e1) C:\Windows\system32\DRIVERS\msiscsi.sys
    19:37:03.0078 3420 iScsiPrt - ok
    19:37:03.0098 3420 k57nd60a (9d7ea8c7215d8d4ae7be110eee61085d) C:\Windows\system32\DRIVERS\k57nd60a.sys
    19:37:03.0098 3420 k57nd60a - ok
    19:37:03.0118 3420 kbdclass (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\DRIVERS\kbdclass.sys
    19:37:03.0118 3420 kbdclass - ok
    19:37:03.0158 3420 kbdhid (6def98f8541e1b5dceb2c822a11f7323) C:\Windows\system32\DRIVERS\kbdhid.sys
    19:37:03.0158 3420 kbdhid - ok
    19:37:03.0188 3420 KSecDD (16c1b906fc5ead84769f90b736b6bf0e) C:\Windows\system32\Drivers\ksecdd.sys
    19:37:03.0188 3420 KSecDD - ok
    19:37:03.0208 3420 KSecPkg (0b711550c56444879d71c7daabda6c83) C:\Windows\system32\Drivers\ksecpkg.sys
    19:37:03.0208 3420 KSecPkg - ok
    19:37:03.0218 3420 ksthunk (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys
    19:37:03.0218 3420 ksthunk - ok
    19:37:03.0268 3420 Lavasoft Kernexplorer (9a7fa6371f68335fd3c3d6488bc5a9f8) C:\Program Files (x86)\Lavasoft\Ad-Aware\KernExplorer64.sys
    19:37:03.0268 3420 Lavasoft Kernexplorer - ok
    19:37:03.0278 3420 Lbd (c8b3131857931ae76798a741cc52b021) C:\Windows\system32\DRIVERS\Lbd.sys
    19:37:03.0288 3420 Lbd - ok
    19:37:03.0298 3420 lltdio (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys
    19:37:03.0298 3420 lltdio - ok
    19:37:03.0345 3420 LSI_FC (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\DRIVERS\lsi_fc.sys
    19:37:03.0345 3420 LSI_FC - ok
    19:37:03.0361 3420 LSI_SAS (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\DRIVERS\lsi_sas.sys
    19:37:03.0361 3420 LSI_SAS - ok
    19:37:03.0376 3420 LSI_SAS2 (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\DRIVERS\lsi_sas2.sys
    19:37:03.0376 3420 LSI_SAS2 - ok
    19:37:03.0396 3420 LSI_SCSI (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\DRIVERS\lsi_scsi.sys
    19:37:03.0396 3420 LSI_SCSI - ok
    19:37:03.0416 3420 luafv (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys
    19:37:03.0416 3420 luafv - ok
    19:37:03.0436 3420 megasas (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\DRIVERS\megasas.sys
    19:37:03.0436 3420 megasas - ok
    19:37:03.0446 3420 MegaSR (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\DRIVERS\MegaSR.sys
    19:37:03.0446 3420 MegaSR - ok
    19:37:03.0466 3420 Modem (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys
    19:37:03.0466 3420 Modem - ok
    19:37:03.0476 3420 monitor (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys
    19:37:03.0476 3420 monitor - ok
    19:37:03.0486 3420 motandroidusb - ok
    19:37:03.0496 3420 motccgp - ok
    19:37:03.0506 3420 motccgpfl - ok
    19:37:03.0506 3420 motmodem - ok
    19:37:03.0516 3420 MotoSwitchService - ok
    19:37:03.0526 3420 Motousbnet - ok
    19:37:03.0536 3420 motusbdevice - ok
    19:37:03.0556 3420 mouclass (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\DRIVERS\mouclass.sys
    19:37:03.0556 3420 mouclass - ok
    19:37:03.0576 3420 mouhid (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys
    19:37:03.0576 3420 mouhid - ok
    19:37:03.0596 3420 mountmgr (791af66c4d0e7c90a3646066386fb571) C:\Windows\system32\drivers\mountmgr.sys
    19:37:03.0596 3420 mountmgr - ok
    19:37:03.0616 3420 mpio (609d1d87649ecc19796f4d76d4c15cea) C:\Windows\system32\DRIVERS\mpio.sys
    19:37:03.0616 3420 mpio - ok
    19:37:03.0636 3420 mpsdrv (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys
    19:37:03.0636 3420 mpsdrv - ok
    19:37:03.0646 3420 MRxDAV (30524261bb51d96d6fcbac20c810183c) C:\Windows\system32\drivers\mrxdav.sys
    19:37:03.0646 3420 MRxDAV - ok
    19:37:03.0686 3420 mrxsmb (040d62a9d8ad28922632137acdd984f2) C:\Windows\system32\DRIVERS\mrxsmb.sys
    19:37:03.0686 3420 mrxsmb - ok
    19:37:03.0736 3420 mrxsmb10 (f0067552f8f9b33d7c59403ab808a3cb) C:\Windows\system32\DRIVERS\mrxsmb10.sys
    19:37:03.0736 3420 mrxsmb10 - ok
    19:37:03.0756 3420 mrxsmb20 (3c142d31de9f2f193218a53fe2632051) C:\Windows\system32\DRIVERS\mrxsmb20.sys
    19:37:03.0756 3420 mrxsmb20 - ok
    19:37:03.0786 3420 msahci (bccf16d5fb1109162380e3e28dc9e4e5) C:\Windows\system32\DRIVERS\msahci.sys
    19:37:03.0786 3420 msahci - ok
    19:37:03.0806 3420 msdsm (8d27b597229aed79430fb9db3bcbfbd0) C:\Windows\system32\DRIVERS\msdsm.sys
    19:37:03.0806 3420 msdsm - ok
    19:37:03.0826 3420 Msfs (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys
    19:37:03.0826 3420 Msfs - ok
    19:37:03.0846 3420 mshidkmdf (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys
    19:37:03.0846 3420 mshidkmdf - ok
    19:37:03.0906 3420 msisadrv (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\DRIVERS\msisadrv.sys
    19:37:03.0906 3420 msisadrv - ok
    19:37:03.0936 3420 MSKSSRV (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys
    19:37:03.0936 3420 MSKSSRV - ok
    19:37:03.0946 3420 MSPCLOCK (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys
    19:37:03.0956 3420 MSPCLOCK - ok
    19:37:03.0966 3420 MSPQM (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys
    19:37:03.0966 3420 MSPQM - ok
    19:37:03.0986 3420 MsRPC (89cb141aa8616d8c6a4610fa26c60964) C:\Windows\system32\drivers\MsRPC.sys
    19:37:03.0996 3420 MsRPC - ok
    19:37:04.0006 3420 mssmbios (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\DRIVERS\mssmbios.sys
    19:37:04.0006 3420 mssmbios - ok
    19:37:04.0026 3420 MSTEE (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys
    19:37:04.0026 3420 MSTEE - ok
    19:37:04.0036 3420 MTConfig (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\DRIVERS\MTConfig.sys
    19:37:04.0036 3420 MTConfig - ok
    19:37:04.0056 3420 Mup (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys
    19:37:04.0056 3420 Mup - ok
    19:37:04.0076 3420 NativeWifiP (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS\nwifi.sys
    19:37:04.0086 3420 NativeWifiP - ok
    19:37:04.0116 3420 NDIS (cad515dbd07d082bb317d9928ce8962c) C:\Windows\system32\drivers\ndis.sys
    19:37:04.0116 3420 NDIS - ok
    19:37:04.0136 3420 NdisCap (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS\ndiscap.sys
    19:37:04.0136 3420 NdisCap - ok
    19:37:04.0176 3420 NdisTapi (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS\ndistapi.sys
    19:37:04.0176 3420 NdisTapi - ok
    19:37:04.0186 3420 Ndisuio (f105ba1e22bf1f2ee8f005d4305e4bec) C:\Windows\system32\DRIVERS\ndisuio.sys
    19:37:04.0196 3420 Ndisuio - ok
    19:37:04.0206 3420 NdisWan (557dfab9ca1fcb036ac77564c010dad3) C:\Windows\system32\DRIVERS\ndiswan.sys
    19:37:04.0216 3420 NdisWan - ok
    19:37:04.0226 3420 NDProxy (659b74fb74b86228d6338d643cd3e3cf) C:\Windows\system32\drivers\NDProxy.sys
    19:37:04.0226 3420 NDProxy - ok
    19:37:04.0236 3420 NetBIOS (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS\netbios.sys
    19:37:04.0236 3420 NetBIOS - ok
    19:37:04.0256 3420 NetBT (9162b273a44ab9dce5b44362731d062a) C:\Windows\system32\DRIVERS\netbt.sys
    19:37:04.0256 3420 NetBT - ok
    19:37:04.0286 3420 nfrd960 (77889813be4d166cdab78ddba990da92) C:\Windows\system32\DRIVERS\nfrd960.sys
    19:37:04.0286 3420 nfrd960 - ok
    19:37:04.0316 3420 NPF (c31fa031335eff434b2d94278e74bcce) C:\Windows\system32\DRIVERS\npf.sys
    19:37:04.0316 3420 NPF - ok
    19:37:04.0346 3420 Npfs (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys
    19:37:04.0346 3420 Npfs - ok
    19:37:04.0366 3420 nsiproxy (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers\nsiproxy.sys
    19:37:04.0366 3420 nsiproxy - ok
    19:37:04.0436 3420 Ntfs (378e0e0dfea67d98ae6ea53adbbd76bc) C:\Windows\system32\drivers\Ntfs.sys
    19:37:04.0446 3420 Ntfs - ok
    19:37:04.0486 3420 Null (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys
    19:37:04.0486 3420 Null - ok
    19:37:04.0526 3420 NVHDA (ed9380f201c8126425c09bed96dbe1e5) C:\Windows\system32\drivers\nvhda64v.sys
    19:37:04.0526 3420 NVHDA - ok
    19:37:04.0756 3420 nvlddmkm (bbe872a814b00798c2d568d46c42a71b) C:\Windows\system32\DRIVERS\nvlddmkm.sys
    19:37:04.0806 3420 nvlddmkm - ok
    19:37:04.0836 3420 nvraid (a4d9c9a608a97f59307c2f2600edc6a4) C:\Windows\system32\drivers\nvraid.sys
    19:37:04.0836 3420 nvraid - ok
    19:37:04.0856 3420 nvstor (6c1d5f70e7a6a3fd1c90d840edc048b9) C:\Windows\system32\drivers\nvstor.sys
    19:37:04.0866 3420 nvstor - ok
    19:37:04.0876 3420 nv_agp (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\DRIVERS\nv_agp.sys
    19:37:04.0876 3420 nv_agp - ok
    19:37:04.0906 3420 ohci1394 (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\DRIVERS\ohci1394.sys
    19:37:04.0906 3420 ohci1394 - ok
    19:37:04.0936 3420 Parport (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\DRIVERS\parport.sys
    19:37:04.0936 3420 Parport - ok
    19:37:04.0956 3420 partmgr (7daa117143316c4a1537e074a5a9eaf0) C:\Windows\system32\drivers\partmgr.sys
    19:37:04.0956 3420 partmgr - ok
    19:37:04.0986 3420 pci (f36f6504009f2fb0dfd1b17a116ad74b) C:\Windows\system32\DRIVERS\pci.sys
    19:37:04.0986 3420 pci - ok
    19:37:05.0006 3420 pciide (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\DRIVERS\pciide.sys
    19:37:05.0006 3420 pciide - ok
    19:37:05.0026 3420 pcmcia (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\DRIVERS\pcmcia.sys
    19:37:05.0026 3420 pcmcia - ok
    19:37:05.0046 3420 pcw (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys
    19:37:05.0046 3420 pcw - ok
    19:37:05.0076 3420 PEAUTH (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys
    19:37:05.0076 3420 PEAUTH - ok
    19:37:05.0116 3420 PptpMiniport (27cc19e81ba5e3403c48302127bda717) C:\Windows\system32\DRIVERS\raspptp.sys
    19:37:05.0116 3420 PptpMiniport - ok
    19:37:05.0156 3420 Processor (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\DRIVERS\processr.sys
    19:37:05.0156 3420 Processor - ok
    19:37:05.0206 3420 Psched (ee992183bd8eaefd9973f352e587a299) C:\Windows\system32\DRIVERS\pacer.sys
    19:37:05.0206 3420 Psched - ok
    19:37:05.0266 3420 ql2300 (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\DRIVERS\ql2300.sys
    19:37:05.0276 3420 ql2300 - ok
    19:37:05.0286 3420 ql40xx (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\DRIVERS\ql40xx.sys
    19:37:05.0286 3420 ql40xx - ok
    19:37:05.0296 3420 QWAVEdrv (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys
    19:37:05.0306 3420 QWAVEdrv - ok
    19:37:05.0326 3420 RasAcd (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERS\rasacd.sys
    19:37:05.0326 3420 RasAcd - ok
    19:37:05.0336 3420 RasAgileVpn (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys
    19:37:05.0346 3420 RasAgileVpn - ok
    19:37:05.0386 3420 Rasl2tp (87a6e852a22991580d6d39adc4790463) C:\Windows\system32\DRIVERS\rasl2tp.sys
    19:37:05.0386 3420 Rasl2tp - ok
    19:37:05.0426 3420 RasPppoe (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERS\raspppoe.sys
    19:37:05.0426 3420 RasPppoe - ok
    19:37:05.0466 3420 RasSstp (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERS\rassstp.sys
    19:37:05.0466 3420 RasSstp - ok
    19:37:05.0486 3420 rdbss (3bac8142102c15d59a87757c1d41dce5) C:\Windows\system32\DRIVERS\rdbss.sys
    19:37:05.0486 3420 rdbss - ok
    19:37:05.0496 3420 rdpbus (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\DRIVERS\rdpbus.sys
    19:37:05.0496 3420 rdpbus - ok
    19:37:05.0516 3420 RDPCDD (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys
    19:37:05.0516 3420 RDPCDD - ok
    19:37:05.0526 3420 RDPENCDD (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\drivers\rdpencdd.sys
    19:37:05.0526 3420 RDPENCDD - ok
    19:37:05.0536 3420 RDPREFMP (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\drivers\rdprefmp.sys
    19:37:05.0536 3420 RDPREFMP - ok
    19:37:05.0556 3420 RDPWD (8a3e6bea1c53ea6177fe2b6eba2c80d7) C:\Windows\system32\drivers\RDPWD.sys
    19:37:05.0556 3420 RDPWD - ok
    19:37:05.0586 3420 rdyboost (634b9a2181d98f15941236886164ec8b) C:\Windows\system32\drivers\rdyboost.sys
    19:37:05.0586 3420 rdyboost - ok
    19:37:05.0616 3420 RimUsb (5790bca445cc40df8b38c2c48608aac2) C:\Windows\system32\Drivers\RimUsb_AMD64.sys
    19:37:05.0616 3420 RimUsb - ok
    19:37:05.0636 3420 rspndr (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERS\rspndr.sys
    19:37:05.0646 3420 rspndr - ok
    19:37:05.0706 3420 SASDIFSV (3289766038db2cb14d07dc84392138d5) C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS
    19:37:05.0706 3420 SASDIFSV - ok
    19:37:05.0716 3420 SASKUTIL (58a38e75f3316a83c23df6173d41f2b5) C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS
    19:37:05.0726 3420 SASKUTIL - ok
    19:37:05.0746 3420 sbp2port (e3bbb89983daf5622c1d50cf49f28227) C:\Windows\system32\DRIVERS\sbp2port.sys
    19:37:05.0746 3420 sbp2port - ok
    19:37:05.0766 3420 scfilter (c94da20c7e3ba1dca269bc8460d98387) C:\Windows\system32\DRIVERS\scfilter.sys
    19:37:05.0766 3420 scfilter - ok
    19:37:05.0806 3420 SCMNdisP (6011cdf54bb6f4c69f38faccdad73d7e) C:\Windows\system32\DRIVERS\scmndisp.sys
    19:37:05.0806 3420 SCMNdisP - ok
    19:37:05.0826 3420 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys
    19:37:05.0826 3420 secdrv - ok
    19:37:05.0846 3420 Serenum (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\DRIVERS\serenum.sys
    19:37:05.0846 3420 Serenum - ok
    19:37:05.0856 3420 Serial (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\DRIVERS\serial.sys
    19:37:05.0856 3420 Serial - ok
    19:37:05.0866 3420 sermouse (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\DRIVERS\sermouse.sys
    19:37:05.0866 3420 sermouse - ok
    19:37:05.0886 3420 sffdisk (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\DRIVERS\sffdisk.sys
    19:37:05.0886 3420 sffdisk - ok
    19:37:05.0896 3420 sffp_mmc (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\DRIVERS\sffp_mmc.sys
    19:37:05.0896 3420 sffp_mmc - ok
    19:37:05.0906 3420 sffp_sd (178298f767fe638c9fedcbdef58bb5e4) C:\Windows\system32\DRIVERS\sffp_sd.sys
    19:37:05.0906 3420 sffp_sd - ok
    19:37:05.0916 3420 sfloppy (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\DRIVERS\sfloppy.sys
    19:37:05.0916 3420 sfloppy - ok
    19:37:05.0936 3420 SiSRaid2 (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\DRIVERS\SiSRaid2.sys
    19:37:05.0936 3420 SiSRaid2 - ok
    19:37:05.0946 3420 SiSRaid4 (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\DRIVERS\sisraid4.sys
    19:37:05.0956 3420 SiSRaid4 - ok
    19:37:05.0996 3420 Smb (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys
    19:37:05.0996 3420 Smb - ok
    19:37:06.0056 3420 spldr (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys
    19:37:06.0056 3420 spldr - ok
    19:37:06.0066 3420 sptd - ok
    19:37:06.0136 3420 srv (2408c0366d96bcdf63e8f1c78e4a29c5) C:\Windows\system32\DRIVERS\srv.sys
    19:37:06.0136 3420 srv - ok
    19:37:06.0156 3420 srv2 (76548f7b818881b47d8d1ae1be9c11f8) C:\Windows\system32\DRIVERS\srv2.sys
    19:37:06.0156 3420 srv2 - ok
    19:37:06.0176 3420 srvnet (0af6e19d39c70844c5caa8fb0183c36e) C:\Windows\system32\DRIVERS\srvnet.sys
    19:37:06.0176 3420 srvnet - ok
    19:37:06.0186 3420 stexstor (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\DRIVERS\stexstor.sys
    19:37:06.0186 3420 stexstor - ok
    19:37:06.0206 3420 swenum (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\DRIVERS\swenum.sys
    19:37:06.0206 3420 swenum - ok
    19:37:06.0306 3420 Tcpip (f18f56efc0bfb9c87ba01c37b27f4da5) C:\Windows\system32\drivers\tcpip.sys
    19:37:06.0326 3420 Tcpip - ok
    19:37:06.0376 3420 TCPIP6 (f18f56efc0bfb9c87ba01c37b27f4da5) C:\Windows\system32\DRIVERS\tcpip.sys
    19:37:06.0386 3420 TCPIP6 - ok
    19:37:06.0396 3420 tcpipreg (76d078af6f587b162d50210f761eb9ed) C:\Windows\system32\drivers\tcpipreg.sys
    19:37:06.0396 3420 tcpipreg - ok
    19:37:06.0416 3420 TDPIPE (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers\tdpipe.sys
    19:37:06.0416 3420 TDPIPE - ok
    19:37:06.0466 3420 TDTCP (e4245bda3190a582d55ed09e137401a9) C:\Windows\system32\drivers\tdtcp.sys
    19:37:06.0466 3420 TDTCP - ok
    19:37:06.0486 3420 tdx (079125c4b17b01fcaeebce0bcb290c0f) C:\Windows\system32\DRIVERS\tdx.sys
    19:37:06.0486 3420 tdx - ok
    19:37:06.0506 3420 TermDD (c448651339196c0e869a355171875522) C:\Windows\system32\DRIVERS\termdd.sys
    19:37:06.0506 3420 TermDD - ok
    19:37:06.0546 3420 tssecsrv (61b96c26131e37b24e93327a0bd1fb95) C:\Windows\system32\DRIVERS\tssecsrv.sys
    19:37:06.0546 3420 tssecsrv - ok
    19:37:06.0576 3420 tunnel (3836171a2cdf3af8ef10856db9835a70) C:\Windows\system32\DRIVERS\tunnel.sys
    19:37:06.0576 3420 tunnel - ok
    19:37:06.0596 3420 uagp35 (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\DRIVERS\uagp35.sys
    19:37:06.0596 3420 uagp35 - ok
    19:37:06.0626 3420 udfs (31ba4a33afab6a69ea092b18017f737f) C:\Windows\system32\DRIVERS\udfs.sys
    19:37:06.0626 3420 udfs - ok
    19:37:06.0646 3420 uliagpkx (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\DRIVERS\uliagpkx.sys
    19:37:06.0646 3420 uliagpkx - ok
    19:37:06.0656 3420 umbus (eab6c35e62b1b0db0d1b48b671d3a117) C:\Windows\system32\DRIVERS\umbus.sys
    19:37:06.0656 3420 umbus - ok
    19:37:06.0676 3420 UmPass (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\DRIVERS\umpass.sys
    19:37:06.0676 3420 UmPass - ok
    19:37:06.0736 3420 usbaudio (77b01bc848298223a95d4ec23e1785a1) C:\Windows\system32\drivers\usbaudio.sys
    19:37:06.0736 3420 usbaudio - ok
    19:37:06.0776 3420 usbccgp (b26afb54a534d634523c4fb66765b026) C:\Windows\system32\DRIVERS\usbccgp.sys
    19:37:06.0776 3420 usbccgp - ok
    19:37:06.0796 3420 usbcir (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\DRIVERS\usbcir.sys
    19:37:06.0796 3420 usbcir - ok
    19:37:06.0836 3420 usbehci (fbb21ebe49f6d560db37ac25fbc68e66) C:\Windows\system32\drivers\usbehci.sys
    19:37:06.0836 3420 usbehci - ok
    19:37:06.0866 3420 usbhub (6b7a8a99c4a459e73c286a6763ea24cc) C:\Windows\system32\DRIVERS\usbhub.sys
    19:37:06.0876 3420 usbhub - ok
    19:37:06.0916 3420 usbohci (8c88aa7617b4cbc2e4bed61d26b33a27) C:\Windows\system32\drivers\usbohci.sys
    19:37:06.0916 3420 usbohci - ok
    19:37:06.0916 3420 usbprint (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS\usbprint.sys
    19:37:06.0916 3420 usbprint - ok
    19:37:06.0936 3420 USBSTOR (f39983647bc1f3e6100778ddfe9dce29) C:\Windows\system32\DRIVERS\USBSTOR.SYS
    19:37:06.0936 3420 USBSTOR - ok
    19:37:06.0996 3420 usbuhci (0b5b3b2df3fd1709618acfa50b8392b0) C:\Windows\system32\drivers\usbuhci.sys
    19:37:06.0996 3420 usbuhci - ok
    19:37:07.0036 3420 vdrvroot (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\DRIVERS\vdrvroot.sys
    19:37:07.0036 3420 vdrvroot - ok
    19:37:07.0066 3420 vga (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys
    19:37:07.0066 3420 vga - ok
    19:37:07.0096 3420 VgaSave (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys
    19:37:07.0096 3420 VgaSave - ok
    19:37:07.0126 3420 vhdmp (c82e748660f62a242b2dfac1442f22a4) C:\Windows\system32\DRIVERS\vhdmp.sys
    19:37:07.0126 3420 vhdmp - ok
    19:37:07.0156 3420 viaide (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\DRIVERS\viaide.sys
    19:37:07.0156 3420 viaide - ok
    19:37:07.0176 3420 volmgr (2b1a3dae2b4e70dbba822b7a03fbd4a3) C:\Windows\system32\DRIVERS\volmgr.sys
    19:37:07.0176 3420 volmgr - ok
    19:37:07.0206 3420 volmgrx (99b0cbb569ca79acaed8c91461d765fb) C:\Windows\system32\drivers\volmgrx.sys
    19:37:07.0206 3420 volmgrx - ok
    19:37:07.0226 3420 volsnap (58f82eed8ca24b461441f9c3e4f0bf5c) C:\Windows\system32\DRIVERS\volsnap.sys
    19:37:07.0226 3420 volsnap - ok
    19:37:07.0246 3420 vsmraid (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\DRIVERS\vsmraid.sys
    19:37:07.0256 3420 vsmraid - ok
    19:37:07.0276 3420 vwifibus (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\system32\DRIVERS\vwifibus.sys
    19:37:07.0276 3420 vwifibus - ok
    19:37:07.0286 3420 vwififlt (6a3d66263414ff0d6fa754c646612f3f) C:\Windows\system32\DRIVERS\vwififlt.sys
    19:37:07.0286 3420 vwififlt - ok
    19:37:07.0306 3420 WacomPen (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\DRIVERS\wacompen.sys
    19:37:07.0306 3420 WacomPen - ok
    19:37:07.0316 3420 WANARP (47ca49400643effd3f1c9a27e1d69324) C:\Windows\system32\DRIVERS\wanarp.sys
    19:37:07.0316 3420 WANARP - ok
    19:37:07.0326 3420 Wanarpv6 (47ca49400643effd3f1c9a27e1d69324) C:\Windows\system32\DRIVERS\wanarp.sys
    19:37:07.0326 3420 Wanarpv6 - ok
    19:37:07.0336 3420 Wd (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\DRIVERS\wd.sys
    19:37:07.0336 3420 Wd - ok
    19:37:07.0366 3420 Wdf01000 (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys
    19:37:07.0366 3420 Wdf01000 - ok
    19:37:07.0386 3420 WfpLwf (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys
    19:37:07.0386 3420 WfpLwf - ok
    19:37:07.0426 3420 WimFltr (b14ef15bd757fa488f9c970eee9c0d35) C:\Windows\system32\DRIVERS\wimfltr.sys
    19:37:07.0426 3420 WimFltr - ok
    19:37:07.0436 3420 WIMMount (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys
    19:37:07.0436 3420 WIMMount - ok
    19:37:07.0486 3420 WinUsb (4d52c872018af7e18d078978dcc3f6f2) C:\Windows\system32\DRIVERS\WinUsb.sys
    19:37:07.0486 3420 WinUsb - ok
    19:37:07.0506 3420 WmiAcpi (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\DRIVERS\wmiacpi.sys
    19:37:07.0506 3420 WmiAcpi - ok
    19:37:07.0536 3420 ws2ifsl (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys
    19:37:07.0536 3420 ws2ifsl - ok
    19:37:07.0586 3420 WudfPf (c63907207b837a5c05cf6d1606aa0008) C:\Windows\system32\drivers\WudfPf.sys
    19:37:07.0586 3420 WudfPf - ok
    19:37:07.0606 3420 WUDFRd (d885a873d733020f8b9b9ff4b1666158) C:\Windows\system32\DRIVERS\WUDFRd.sys
    19:37:07.0606 3420 WUDFRd - ok
    19:37:07.0636 3420 MBR (0x1B8) (cdb4de4bbd714f152979da2dcbef57eb) \Device\Harddisk0\DR0
    19:37:07.0666 3420 \Device\Harddisk0\DR0 ( Rootkit.Boot.SST.b ) - infected
    19:37:07.0666 3420 \Device\Harddisk0\DR0 - detected Rootkit.Boot.SST.b (0)
    19:37:07.0686 3420 MBR (0x1B8) (5fb38429d5d77768867c76dcbdb35194) \Device\Harddisk5\DR5
    19:37:07.0696 3420 \Device\Harddisk5\DR5 - ok
    19:37:07.0706 3420 Boot (0x1200) (1936fd5dacd385d9b0f3afac3d679a60) \Device\Harddisk0\DR0\Partition0
    19:37:07.0706 3420 \Device\Harddisk0\DR0\Partition0 - ok
    19:37:07.0716 3420 Boot (0x1200) (976c36ac8983e5e4b875c3bcf2fe81a9) \Device\Harddisk0\DR0\Partition1
    19:37:07.0726 3420 \Device\Harddisk0\DR0\Partition1 - ok
    19:37:07.0726 3420 Boot (0x1200) (7bd4ee2385ea6391445cbd4f3bd5a5ec) \Device\Harddisk5\DR5\Partition0
    19:37:07.0726 3420 \Device\Harddisk5\DR5\Partition0 - ok
    19:37:07.0726 3420 ============================================================
    19:37:07.0726 3420 Scan finished
    19:37:07.0726 3420 ============================================================
    19:37:07.0736 2896 Detected object count: 1
    19:37:07.0736 2896 Actual detected object count: 1
    19:37:13.0112 2896 \Device\Harddisk0\DR0 ( Rootkit.Boot.SST.b ) - skipped by user
    19:37:13.0112 2896 \Device\Harddisk0\DR0 ( Rootkit.Boot.SST.b ) - User select action: Skip
    19:37:47.0666 3276 Deinitialize success

    Thank you for all of your help!
     
  16. Sponsor

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Loading...
Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/1042870

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice