Tech Support Guy banner
  • IMPORTANT: Only authorized members may reply to threads in this forum due to the complexity of the malware removal process. Authorized members include Malware Specialists and Trainees, Administrators, Moderators, and Trusted Advisors. Regular members are not permitted to reply, and any such posts will be deleted without notice or further explanation. Notice
Status
Not open for further replies.

Search Redirect Virus - getting worse.

3K views 21 replies 2 participants last post by  mambass 
#1 ·
I posted a while back for some help on this, but now the issue is getting worse. With any browser I use, and any search engine I use, I get redirected to another site. If I am quick enough I can use the back button to navigate back to the intended site. It is starting to get to the point where searches are REALLY slow and redirect constantly. I've tried running Malware Bytes, SUPER anti spyware, and ad-aware. Everything says ok. Cleared all my temp folders/files and tried adjusting my startup cfg through msconfig. About the only other thing I notice is that every time I start my computer, there is a screen that pops up and closes so quick I cannot even tell what it is. All I can tell is that the box is a blank white.

My System:
Windows 7 64bit
intel i3-550
6gb of ram
Its an Oe Dell inspiron 580 with a cheap aftermarket gpu card.

I use the computer mostly for gaming, but I also read e-mails, browse the net, and use it for media purposes.

As per the first sticky post in this sub-forum, here is my HiJack this log:

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 7:01:20 PM, on 2/26/2012
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Program Files\Dell\DellDock\DockLogin.exe
C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWService.exe
C:\Program Files (x86)\Games\Steam\Steam.exe
C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\Program Files (x86)\Games\Gbridge LLC\Gbridge\pstartw.exe
C:\Program Files (x86)\Games\Gbridge LLC\Gbridge\Gbridge.exe
C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
C:\Program Files (x86)\TightVNC\tvnserver.exe
C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWTray.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Program Files\BitTorrent\BitTorrent.exe
C:\Program Files\Games\Diablo II\Game.exe
C:\Program Files (x86)\Google\Google Earth\client\googleearth.exe
C:\Program Files (x86)\HijackThis\Trend Micro\HiJackThis\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://g.msn.com/USCON/1
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R3 - URLSearchHook: (no name) - {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (file missing)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.6.0_22\bin\jp2ssv.dll (file missing)
O4 - HKLM\..\Run: [tvncontrol] "C:\Program Files (x86)\TightVNC\tvnserver.exe" -controlservice -slave
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Games\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [BitTorrent] "C:\Program Files\BitTorrent\BitTorrent.exe" /MINIMIZED
O4 - HKCU\..\Run: [Pando Media Booster] C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Google Update] "C:\Users\Computer 2\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [7BB5BD2A71B624D69C472CCBFE6114951D56C5E2._service_run] "C:\Users\Computer 2\AppData\Local\Google\Chrome\Application\chrome.exe" --type=service
O4 - HKCU\..\Run: [Gbridge] "C:\Program Files (x86)\Games\Gbridge LLC\Gbridge\pstartw.exe" "C:\Program Files (x86)\Games\Gbridge LLC\Gbridge\Gbridge.exe" -autostart
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [adaware] reg.exe delete "HKCU\Software\AppDataLow\Software\adaware" /f (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [adaware] reg.exe delete "HKCU\Software\AppDataLow\Software\adaware" /f (User 'Default user')
O4 - .DEFAULT User Startup: Dell Dock First Run.lnk = C:\Program Files\Dell\DellDock\DellDock.exe (User 'Default user')
O4 - Startup: Dell Dock.lnk = C:\Program Files\Dell\DellDock\DellDock.exe
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted IP range: http://192.168.0.1
O15 - ESC Trusted IP range: http://192.168.0.1
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: SAS Core Service (!SASCORE) - SUPERAntiSpyware.com - C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Dock Login Service (DockLoginService) - Stardock Corporation - C:\Program Files\Dell\DellDock\DockLogin.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Hi-Rez Studios Authenticate and Update Service (HiPatchService) - Hi-Rez Studios - C:\Program Files (x86)\Games\Hi-Rez Studios\HiPatchService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft Limited - C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: TightVNC Server (tvnserver) - GlavSoft LLC. - C:\Program Files (x86)\TightVNC\tvnserver.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: Wyse PocketCloud (WysePocketCloud) - Unknown owner - C:\Program Files (x86)\Wyse\PocketCloud Windows Companion\PocketCloudService.exe

--
End of file - 9397 bytes

Also as per the first sticky post in this sub-forum, my DDS log is on standby. I did not run GMER as I am on a 64 bit os.

I want to thank anyone in advanced for their help.

THANK YOU!
 
See less See more
#4 ·
Hi 07tcbsp, :)

Welcome to the Tech Support Guy's Virus & Other Malware Removal forum.

My nickname is mambass and I'll be helping you with any malware problems.

Before we begin...please read and follow these important guidelines so things will proceed smoothly.

  1. The instructions being given are for YOUR computer and system only!
    Using these instructions on a different computer can cause damage to that computer and possibly render it inoperable!
  2. Please read all instructions carefully before executing them and perform the steps in the order given.
    lf you have any questions or problems executing these instructions, <<STOP>> do not proceed but rather post back with the question or problem.
  3. Your security programs may give warnings for some of the tools I will ask you to use. Be assured that any links I give are safe.
  4. You must have Administrator rights permissions for this computer.
  5. DO NOT run any other fix or removal tools unless instructed to do so!
  6. DO NOT install any other software or hardware during the cleaning process. This adds more items to be researched.
  7. Only post your problem at one (1) help site. Applying fixes from multiple help sites can cause problems.
  8. Only reply to this thread. Do not start another thread.
  9. The absence of symptoms does not imply the absence of malware. Please, continue responding, until I give you the "All Clean".
  10. You might want to place a link to this thread in your Favorites/Bookmarks for easy access.
  11. The logs I request can take a while to research, so please be patient.
  12. I am currently in training at Malware Removal University. Each set of instructions that I provide will be reviewed by a faculty member before being posted to this thread. This process may add a small amount of time to my replies. On the positive side, you will have two people working together to resolve your malware issues.
Please be aware that removing Malware is a potentially hazardous undertaking. I will take care not to knowingly suggest courses of action that might damage your computer. However it is impossible for me to foresee all interactions that may happen between the software on your computer and those we'll use to clear you of infection, and I cannot guarantee the safety of your system. It is possible that we might encounter situations where the only recourse is to re-format and re-install your operating system, or to necessitate you taking your computer to a repair shop.
Because of this, I advise you to backup any personal files and folders before you start.

How to back up or transfer your data on a Windows-based computer

-----------------------------------------------------------

I am currently reviewing your log and will return as soon as possible with additional instructions.

Thanks,

mambass
 
#5 ·
Hi 07tcbsp, :)

I'll be glad to work with you on this computer. This help is however conditional on your agreeing to the following:

  1. All P2P software much be removed
    The following P2P (Peer to Peer) programs appear to be installed on your computer:
    BitTorrent
    Pando Media Booster
    Please note whenever you use any form of P2P networking to download files you can anticipate infestations of malware to occur.
    P2P file sharing used to be fairly safe. This is no longer true. Continue to use P2P sharing at your own risk! Keep in mind that this practice may be the source of your current malware infestation.

    References citing the risk factors of using P2P programs:
    How to boost your malware defense and protect your PC
    How to Prevent the Online Invasion of Spyware and Adware

    I strongly recommend that you uninstall the programs identified above as well as any other P2P software that may be installed however that choice is up to you.
    • If you choose NOT to remove these programs, please indicate that in your next reply.
    • If you choose to remove the programs then perform the following steps:
      • Click Start > Control Panel and then double-click on Programs and Features.
      • Right-click BitTorrent, choose Uninstall/Change, and give permission to Continue.
      • Right-click BitTorrentBar Toolbar, choose Uninstall/Change, and give permission to Continue.
      • Right-click Pando Media Booster, choose Uninstall/Change, and give permission to Continue.
        Take extra care in answering questions posed by any Uninstaller.
      • Reboot (restart) your computer.
  2. Upgrade to SP1 after the computer has been cleaned
    The HiJackThis log indicates that you have Windows 7 installed without Service Pack 1 (SP1). Not keeping current with all security patches is an invitation for malware to infect your system. DO NOT upgrade to SP1 at this time, however in your reply please indicate whether you are willing to upgrade to Windows 7 SP1 after your computer has been cleaned of malware.

If you agree to both of the above conditions then please perform the following step.

  • Run a Scan with OTL
    1. Click here to download OTL.exe by Old Timer and save it to your Desktop.
    2. Right-click the OTL icon on your Desktop and select Run As Administrator to run the program.
    3. Check the boxes labeled :
      • Include 64 bit scans
      • Scan All Users
      • LOP check
      • Purity check
      • Extra Registry > Use SafeList
    4. Make sure all other windows are closed so that it can run uninterrupted.
    5. Click on the Run Scan button at the top left hand corner. Do not change any settings unless otherwise told to do so. The scan won't take long.
    6. When the scan completes, it will open two notepad windows. OTL.Txt will be displayed and Extras.Txt will be minimized. These are saved in the same location as OTL. (desktop)
    7. Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time, and post them as a reply. Use separate replies if more convenient.

Please include in your reply:
  1. The text of any error messages and/or a description of any problems you encountered while performing these steps.
  2. Your agreement to upgrade to SP1 after your computer has been cleaned of malware.
  3. The contents of the OTL.txt and Extras.txt logs.

mambass
 
#6 ·
Thank you for the reply.

I uninstalled both BitTorrent and Pando Media Booster, although I am not entirely sure why the latter had been installed on my computer.

I am more than willing to update my Windows to SP1 once this is taken care of. I usually keep my computers well up to date.

Everything went pretty smoothly, although there was a 3-5 second hang up in OTL when it got to "Scanning Module: Appid"
(I don't really thing this was abnormal, although windows did deem this hang as "program not responding")

I am going to upload the contents of OTL.txt in an attachment as it seems the website won't let me copy/paste the lengthy contents of it in a post.

Thank you for your help.

Here is the contents of Extras.txt:

OTL Extras logfile created on: 3/11/2012 5:34:21 PM - Run 1
OTL by OldTimer - Version 3.2.36.3 Folder = C:\Users\Computer 2\Downloads
64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

5.87 Gb Total Physical Memory | 3.97 Gb Available Physical Memory | 67.70% Memory free
11.73 Gb Paging File | 9.82 Gb Available in Paging File | 83.74% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 685.79 Gb Total Space | 461.17 Gb Free Space | 67.25% Space Free | Partition Type: NTFS
Drive I: | 1863.01 Gb Total Space | 1109.31 Gb Free Space | 59.54% Space Free | Partition Type: NTFS
Drive J: | 177.57 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS

Computer Name: PC1 | User Name: Computer 2 | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========

========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html[@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
.html [@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)

[HKEY_USERS\S-1-5-21-302620351-3888842133-4152310273-1001\SOFTWARE\Classes\<extension>]
.html [@ = htmlfile] -- Reg Error: Key error. File not found

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" -nohome (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" -nohome (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

========== Authorized Applications List ==========

========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{071c9b48-7c32-4621-a0ac-3f809523288f}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{1B8ABA62-74F0-47ED-B18C-A43128E591B8}" = Windows Live ID Sign-in Assistant
"{3D3E663D-4E7E-4577-A560-7ECDDD45548A}" = PVSonyDll
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{5EB6F3CB-46F4-451F-A028-7F6D8D35D7D0}" = Windows Live Language Selector
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{656DEEDE-F6AC-47CA-A568-A1B4E34B5760}" = Windows Live Remote Service Resources
"{847B0532-55E3-4AAF-8D7B-E3A1A7CD17E5}" = Windows Live Remote Client Resources
"{8EBA8727-ADC2-477B-9D9A-1A1836BE4E05}" = Dell Edoc Viewer
"{90140000-0018-0000-1000-0000000FF1CE}" = Microsoft Office PowerPoint 2010
"{90140000-0018-0000-1000-0000000FF1CE}_Office14.POWERPOINT_{7BC9B5EB-125A-4E9B-97E1-8D85B5E960B8}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0018-0409-1000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2010
"{90140000-0018-0409-1000-0000000FF1CE}_Office14.POWERPOINT_{EC583796-6BBB-47DD-B9CE-B5DA12D71135}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0409-1000-0000000FF1CE}" = Microsoft Office Proof (English) 2010
"{90140000-001F-0409-1000-0000000FF1CE}_Office14.POWERPOINT_{0242505C-4E90-407F-9299-B5B275F50D86}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-040C-1000-0000000FF1CE}" = Microsoft Office Proof (French) 2010
"{90140000-001F-040C-1000-0000000FF1CE}_Office14.POWERPOINT_{B51389C8-2890-4633-81D8-47D2A7402274}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0C0A-1000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2010
"{90140000-001F-0C0A-1000-0000000FF1CE}_Office14.POWERPOINT_{1779650B-2E44-4A19-8DF6-3866D645764A}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-002C-0409-1000-0000000FF1CE}" = Microsoft Office Proofing (English) 2010
"{90140000-002C-0409-1000-0000000FF1CE}_Office14.POWERPOINT_{270CA0B9-9881-44DB-BC3B-37C7E66A044A}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0043-0000-1000-0000000FF1CE}" = Microsoft Office Office 32-bit Components 2010
"{90140000-0043-0000-1000-0000000FF1CE}_Office14.POWERPOINT_{E8B6D35B-0B6F-4DCE-9493-859BF3809A7F}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0043-0409-1000-0000000FF1CE}" = Microsoft Office Shared 32-bit MUI (English) 2010
"{90140000-0043-0409-1000-0000000FF1CE}_Office14.POWERPOINT_{FCD1C311-8B02-4DBD-BA46-1079C629577E}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-006E-0409-1000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2010
"{90140000-006E-0409-1000-0000000FF1CE}_Office14.POWERPOINT_{516CA4A9-98E6-4F77-A863-CBD8487368E4}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0115-0409-1000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2010
"{90140000-0115-0409-1000-0000000FF1CE}_Office14.POWERPOINT_{516CA4A9-98E6-4F77-A863-CBD8487368E4}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision" = NVIDIA 3D Vision Driver 260.99
"{B2FE1952-0186-46c3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = NVIDIA Control Panel 260.99
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Graphics Driver 260.99
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA PhysX System Software 9.10.0514
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver" = NVIDIA HD Audio Driver 1.1.9.0
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B6E3757B-5E77-3915-866A-CCFC4B8D194C}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053
"{C73A3942-84C8-4597-9F9B-EE227DCBA758}" = Dell Dock
"{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}" = SUPERAntiSpyware
"{DA54F80E-261C-41A2-A855-549A144F2F59}" = Windows Live MIME IFilter
"{DF6D988A-EEA0-4277-AAB8-158E086E439B}" = Windows Live Remote Client
"{E02A6548-6FDE-40E2-8ED9-119D7D7E641F}" = Windows Live Remote Service
"{EEB3F6BB-318D-4CE5-989F-8191FCBFB578}" = Ventrilo Client for Windows x64
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX 64-bit
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin 64-bit
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Office14.POWERPOINT" = Microsoft PowerPoint 2010

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{19BA08F7-C728-469C-8A35-BFBD3633BE08}" = Windows Live Movie Maker
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{23B4636C-A780-4FEB-B4C9-A2564E9B9F7C}" = Multimedia Card Reader
"{2902F983-B4C1-44BA-B85D-5C6D52E2C441}" = Windows Live Mesh ActiveX Control for Remote Connections
"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
"{34F4D9A4-42C2-4348-BEF4-E553C84549E7}" = Windows Live Photo Gallery
"{3C7839E7-21F4-49E0-B4D5-AC8ED818CCB0}" = NETGEAR WNDA3100v2 wireless USB 2.0 adapter
"{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF010}" = Tribes Ascend Closed Beta
"{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC}" = Hi-Rez Studios Authenticate and Update Service
"{3E171899-0175-47CC-84C4-562ACDD4C021}" = OpenOffice.org 3.3
"{45A66726-69BC-466B-A7A4-12FCBA4883D7}" = HiJackThis
"{4CB0307C-565E-4441-86BE-0DF2E4FB828C}" = Microsoft Games for Windows Marketplace
"{4CBABDFD-49F8-47FD-BE7D-ECDE7270525A}" = Windows Live PIMT Platform
"{50816F92-1652-4A7C-B9BC-48F682742C4B}" = Messenger Companion
"{5A3C1721-F8ED-11E0-8AFB-B8AC6F97B88E}" = Google Earth
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6A05FEDF-662E-46BF-8A25-010E3F1C9C69}" = Windows Live UX Platform Language Pack
"{6F3D2F66-F050-45E3-BEB1-6523FE6D6690}" = MotoHelper MergeModules
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{72DF62BD-FF36-424E-AA5F-D89BAFF2C249}" = RollerCoaster Tycoon 2
"{77C84C38-E592-4A33-AB99-FA524120452F}" = Ad-Aware
"{78A96B4C-A643-4D0F-98C2-A8E16A6669F9}" = Windows Live Messenger Companion Core
"{80956555-A512-4190-9CAD-B000C36D6B6B}" = Windows Live Messenger
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{83A606F5-BF6F-42ED-9F33-B9F74297CDED}" = Need for Speed(TM) Hot Pursuit
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8C6D6116-B724-4810-8F2D-D047E6B7D68E}" = Mesh Runtime
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{909F8EBC-EC7F-48FF-0085-475D818F0F31}" = Need for Speed Underground 2
"{92606477-9366-4D3B-8AE3-6BE4B29727AB}" = League of Legends
"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
"{95140000-0070-0000-0000-0000000FF1CE}" = Microsoft Office 2010
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
"{A0C91188-C88F-4E86-93E6-CD7C9A266649}" = Windows Live Mesh
"{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AA31EA7B-7917-4000-949B-38E91F848A25}" = Internet Explorer
"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
"{AAF454FC-82CA-4F29-AB31-6A109485E76E}" = Windows Live Writer
"{AC76BA86-7AD7-1033-7B44-AA1000000001}" = Adobe Reader X (10.1.2)
"{B1AD83A0-DC92-41E3-B111-E9472349768C}" = RollerCoaster Tycoon 2: Wacky Worlds
"{B4E343DD-BAAB-4D59-AD9C-DEA0AFE09DF1}" = Mumble 1.2.3
"{B700113B-24A8-4D4C-8484-0CC944F764C8}" = Google SketchUp 8
"{B9DB4C76-01A4-46D5-8910-F7AA6376DBAF}" = NVIDIA PhysX
"{BA1E1AFD-D1F2-4C52-88C3-186FC5E61604}" = RollerCoaster Tycoon 2: Time Twister
"{C66824E4-CBB3-4851-BB3F-E8CFD6350923}" = Windows Live Mail
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{D0B44725-3666-492D-BEF6-587A14BD9BD9}" = MSVCRT_amd64
"{D24DB8B9-BB6C-4334-9619-BA1C650E13D3}" = Microsoft Primary Interoperability Assemblies 2005
"{D436F577-1695-4D2F-8B44-AC76C99E0002}" = Windows Live Photo Common
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{DDC8BDEE-DCAC-404D-8257-3E8D4B782467}" = Windows Live Writer Resources
"{DECDCB7C-58CC-4865-91AF-627F9798FE48}" = Windows Live Mesh
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{EB4DF488-AAEF-406F-A341-CB2AAA315B90}" = Windows Live Messenger
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}" = Intel(R) Graphics Media Accelerator Driver
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F2508213-9989-4E85-A078-72BE483917EF}" = Microsoft Games for Windows - LIVE Redistributable
"{FE044230-9CA5-43F7-9B58-5AC5A28A1F33}" = Windows Live Essentials
"{FE23D063-934D-4829-A0D8-00634CE79B4A}" = Adobe AIR
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"7-Zip" = 7-Zip 9.20
"Ad-Aware Browsing Protection" = Ad-Aware Browsing Protection
"Adobe AIR" = Adobe AIR
"DAEMON Tools Lite" = DAEMON Tools Lite
"Dell Dock" = Dell Dock
"Diablo II" = Diablo II
"FLV Player2.0.25" = FLV Player
"Gbridge" = Gbridge (remove only)
"Guild Wars" = Guild Wars
"InstallShield_{23B4636C-A780-4FEB-B4C9-A2564E9B9F7C}" = Multimedia Card Reader
"KLiteCodecPack_is1" = K-Lite Codec Pack 7.2.0 (Full)
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware version 1.51.2.1300
"Mozilla Firefox 10.0.2 (x86 en-US)" = Mozilla Firefox 10.0.2 (x86 en-US)
"NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver
"RealAlt_is1" = Real Alternative 2.0.2
"RollerCoaster Tycoon Setup" = Roll
"Simple Port Forwarding" = Simple Port Forwarding
"ST6UNST #1" = Hero Editor V1.04
"StarCraft II" = StarCraft II
"Steam App 10" = Counter-Strike
"Steam App 12100" = Grand Theft Auto III
"Steam App 12110" = Grand Theft Auto: Vice City
"Steam App 12120" = Grand Theft Auto: San Andreas
"Steam App 12160" = Midnight Club II
"Steam App 12190" = Wild Metal Country
"Steam App 12210" = Grand Theft Auto IV
"Steam App 12220" = Grand Theft Auto: Episodes from Liberty City
"Steam App 15100" = Assassin's Creed
"Steam App 17020" = Global Agenda
"Steam App 17430" = Need for Speed: Undercover
"Steam App 17510" = Age of Chivalry
"Steam App 17520" = Synergy
"Steam App 220" = Half-Life 2
"Steam App 2310" = Quake
"Steam App 240" = Counter-Strike: Source
"Steam App 2400" = The Ship
"Steam App 24870" = Need for Speed: SHIFT
"Steam App 280" = Half-Life: Source
"Steam App 30" = Day of Defeat
"Steam App 300" = Day of Defeat: Source
"Steam App 320" = Half-Life 2: Deathmatch
"Steam App 3480" = Peggle Deluxe
"Steam App 38830" = Crimecraft: BLEEDOUT
"Steam App 400" = Portal
"Steam App 440" = Team Fortress 2
"Steam App 500" = Left 4 Dead
"Steam App 550" = Left 4 Dead 2
"Steam App 92000" = Hydrophobia: Prophecy
"WinLiveSuite" = Windows Live Essentials

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-302620351-3888842133-4152310273-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Google Chrome" = Google Chrome

========== Last 10 Event Log Errors ==========

Error reading Event Logs: The Event Service is not operating properly or the Event Logs are corrupt!

< End of report >
 

Attachments

#7 ·
Hi 07tcbsp,

Thank you for the logs. :)

I understand that the OTL.txt log was too big to post. I'm going to post it to this thread in multiple segments so that Teachers and others at my site can review that information.

You do not need to take any action at this point. I will analyze the logs and post back a new set of instructions shortly.

mambass

OTL logfile created on: 3/11/2012 5:34:21 PM - Run 1
OTL by OldTimer - Version 3.2.36.3 Folder = C:\Users\Computer 2\Downloads
64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

5.87 Gb Total Physical Memory | 3.97 Gb Available Physical Memory | 67.70% Memory free
11.73 Gb Paging File | 9.82 Gb Available in Paging File | 83.74% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 685.79 Gb Total Space | 461.17 Gb Free Space | 67.25% Space Free | Partition Type: NTFS
Drive I: | 1863.01 Gb Total Space | 1109.31 Gb Free Space | 59.54% Space Free | Partition Type: NTFS
Drive J: | 177.57 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS

Computer Name: PC1 | User Name: Computer 2 | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2012/03/11 17:32:07 | 000,594,944 | ---- | M] (OldTimer Tools) -- C:\Users\Computer 2\Downloads\OTL.exe
PRC - [2012/01/03 06:10:42 | 000,063,928 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2011/12/11 22:42:58 | 002,152,152 | ---- | M] (Lavasoft Limited) -- C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWService.exe
PRC - [2011/12/11 22:42:58 | 001,187,072 | ---- | M] (Lavasoft Limited) -- C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWTray.exe
PRC - [2011/08/22 01:38:18 | 003,678,208 | ---- | M] (Gbridge LLC) -- C:\Program Files (x86)\Games\Gbridge LLC\Gbridge\Gbridge.exe
PRC - [2011/08/07 09:58:04 | 001,242,448 | ---- | M] (Valve Corporation) -- C:\Program Files (x86)\Games\Steam\Steam.exe
PRC - [2011/08/02 00:33:30 | 004,910,912 | ---- | M] (DT Soft Ltd) -- C:\Program Files\DAEMON Tools Lite\DTLite.exe
PRC - [2010/10/16 12:46:40 | 000,369,256 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
PRC - [2010/06/09 23:18:56 | 000,090,912 | ---- | M] () -- C:\Program Files (x86)\Games\Gbridge LLC\Gbridge\pstartw.exe
PRC - [2009/06/09 07:11:14 | 000,155,648 | ---- | M] (Stardock Corporation) -- C:\Program Files\Dell\DellDock\DockLogin.exe

========== Modules (No Company Name) ==========

MOD - [2012/02/23 22:21:15 | 014,415,144 | ---- | M] () -- C:\Program Files (x86)\Games\Steam\bin\libcef.dll
MOD - [2012/02/23 22:21:09 | 000,914,216 | ---- | M] () -- C:\Program Files (x86)\Games\Steam\bin\avcodec-52.dll
MOD - [2012/02/23 22:21:09 | 000,857,896 | ---- | M] () -- C:\Program Files (x86)\Games\Steam\bin\chromehtml.dll
MOD - [2012/02/23 22:21:09 | 000,155,432 | ---- | M] () -- C:\Program Files (x86)\Games\Steam\bin\avformat-52.dll
MOD - [2012/02/23 22:21:09 | 000,091,432 | ---- | M] () -- C:\Program Files (x86)\Games\Steam\bin\avutil-50.dll
MOD - [2010/06/09 23:18:56 | 000,090,912 | ---- | M] () -- C:\Program Files (x86)\Games\Gbridge LLC\Gbridge\pstartw.exe

========== Win32 Services (SafeList) ==========

SRV:64bit: - [2011/08/11 16:38:04 | 000,140,672 | ---- | M] (SUPERAntiSpyware.com) [Auto | Running] -- C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE -- (!SASCORE)
SRV:64bit: - [2010/04/14 13:08:30 | 001,052,328 | ---- | M] ( ) [Disabled | Stopped] -- C:\Windows\SysNative\lxeccoms.exe -- (lxec_device)
SRV:64bit: - [2009/07/13 18:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:64bit: - [2009/06/09 07:11:14 | 000,155,648 | ---- | M] (Stardock Corporation) [Auto | Running] -- C:\Program Files\Dell\DellDock\DockLogin.exe -- (DockLoginService)
SRV - [2012/02/20 21:26:30 | 000,008,704 | ---- | M] (Hi-Rez Studios) [Auto | Running] -- C:\Program Files (x86)\Games\Hi-Rez Studios\HiPatchService.exe -- (HiPatchService)
SRV - [2012/01/03 06:10:42 | 000,063,928 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2011/12/11 22:42:58 | 002,152,152 | ---- | M] (Lavasoft Limited) [Auto | Running] -- C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWService.exe -- (Lavasoft Ad-Aware Service)
SRV - [2011/12/08 19:50:59 | 000,419,624 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2011/05/05 23:22:36 | 000,066,872 | ---- | M] () [Disabled | Stopped] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)
SRV - [2010/10/16 12:46:40 | 000,369,256 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
SRV - [2010/08/19 15:25:00 | 000,272,864 | ---- | M] () [Disabled | Stopped] -- C:\Program Files (x86)\NETGEAR\WNDA3100v2\WifiSvc.exe -- (WSWNDA3100)
SRV - [2010/03/18 14:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2009/06/10 14:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)

========== Driver Services (SafeList) ==========

DRV:64bit: - [2011/12/02 08:49:14 | 000,069,376 | ---- | M] (Lavasoft AB) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\Lbd.sys -- (Lbd)
DRV:64bit: - [2011/08/11 20:28:18 | 000,526,392 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd)
DRV:64bit: - [2011/07/22 09:26:56 | 000,014,928 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\sasdifsv64.sys -- (SASDIFSV)
DRV:64bit: - [2011/07/12 14:55:18 | 000,012,368 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\saskutil64.sys -- (SASKUTIL)
DRV:64bit: - [2011/03/10 23:22:41 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011/03/10 23:22:40 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2010/09/07 13:08:55 | 000,155,752 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA)
DRV:64bit: - [2010/04/01 07:47:10 | 010,322,848 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
DRV:64bit: - [2010/02/27 08:32:14 | 000,158,976 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Impcd.sys -- (Impcd)
DRV:64bit: - [2010/02/03 22:38:32 | 000,271,872 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud) Intel(R)
DRV:64bit: - [2010/02/03 11:20:32 | 000,047,632 | ---- | M] (CACE Technologies, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\npf.sys -- (NPF)
DRV:64bit: - [2009/11/06 08:40:26 | 000,838,136 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bcmwlhigh664.sys -- (BCMH43XX)
DRV:64bit: - [2009/10/24 02:49:46 | 001,542,656 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr)
DRV:64bit: - [2009/10/16 04:32:24 | 000,321,064 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\k57nd60a.sys -- (k57nd60a) Broadcom NetLink (TM)
DRV:64bit: - [2009/10/12 22:54:50 | 000,048,192 | ---- | M] (Gbridge LLC) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\gbridge64.sys -- (gbridge)
DRV:64bit: - [2009/09/17 13:54:54 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (HECIx64) Intel(R)
DRV:64bit: - [2009/07/13 18:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009/07/13 18:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009/07/13 18:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2009/07/13 18:47:48 | 000,023,104 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2009/07/13 18:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009/06/10 13:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009/06/10 13:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009/06/10 13:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009/06/10 13:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2008/04/16 15:49:34 | 000,028,416 | ---- | M] (Research In Motion Limited) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RimUsb_AMD64.sys -- (RimUsb)
DRV:64bit: - [2007/01/19 18:24:24 | 000,025,312 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\SCMNdisP.sys -- (SCMNdisP)
DRV:64bit: - [2006/11/01 11:51:00 | 000,151,656 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WimFltr.sys -- (WimFltr)
DRV - [2011/12/11 22:43:10 | 000,017,152 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Program Files (x86)\Lavasoft\Ad-Aware\kernexplorer64.sys -- (Lavasoft Kernexplorer)
DRV - [2009/07/13 18:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {F75ECAE9-BE57-4F4A-8C98-DFF27153A019}
IE:64bit: - HKLM\..\SearchScopes\{F75ECAE9-BE57-4F4A-8C98-DFF27153A019}: "URL" = http://www.bing.com/search?q={searchTerms}&form=DLCDF8&pc=MDDC&src=IE-SearchBox
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/
IE - HKLM\..\SearchScopes,DefaultScope = {2F83074E-DF48-4034-A916-00BAD1B5C8F3}
IE - HKLM\..\SearchScopes\{2F83074E-DF48-4034-A916-00BAD1B5C8F3}: "URL" = http://www.bing.com/search?q={searchTerms}&form=DLCDF8&pc=MDDC&src=IE-SearchBox

IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-302620351-3888842133-4152310273-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://g.msn.com/USCON/1
IE - HKU\S-1-5-21-302620351-3888842133-4152310273-1001\..\URLSearchHook: {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - No CLSID value found
IE - HKU\S-1-5-21-302620351-3888842133-4152310273-1001\..\SearchScopes,DefaultScope = {2F83074E-DF48-4034-A916-00BAD1B5C8F3}
IE - HKU\S-1-5-21-302620351-3888842133-4152310273-1001\..\SearchScopes\{3BD44F0E-0596-4008-AEE0-45D47E3A8F0E}: "URL" = http://www.google.com/search?ie=utf-8&oe=utf-8&rlz=1V4IPYX&q={searchTerms}
IE - HKU\S-1-5-21-302620351-3888842133-4152310273-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.selectedEngine: "Search the Web"
FF - prefs.js..browser.search.update: false
FF - prefs.js..browser.startup.homepage: "about:home"

FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_1_102.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\4.1.10111.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll File not found
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.450: C:\Program Files (x86)\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.448: C:\Program Files (x86)\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Computer 2\AppData\Local\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Computer 2\AppData\Local\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 10.0.2\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012/02/17 23:07:56 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 10.0.2\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins

[2011/04/12 21:26:09 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Computer 2\AppData\Roaming\Mozilla\Extensions
[2012/01/22 13:33:22 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Computer 2\AppData\Roaming\Mozilla\Firefox\Profiles\u38rqjsl.default\extensions
[2011/11/26 00:47:32 | 000,000,000 | ---D | M] (Flash and Video Download) -- C:\Users\Computer 2\AppData\Roaming\Mozilla\Firefox\Profiles\u38rqjsl.default\extensions\{bee6eb20-01e0-ebd1-da83-080329fb9a3a}
() (No name found) -- C:\USERS\COMPUTER 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\U38RQJSL.DEFAULT\EXTENSIONS\{37E4D8EA-8BDA-4831-8EA1-89053939A250}.XPI
() (No name found) -- C:\USERS\COMPUTER 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\U38RQJSL.DEFAULT\EXTENSIONS\{DDC359D1-844A-42A7-9AA1-88A850A938A8}.XPI
() (No name found) -- C:\USERS\COMPUTER 2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\U38RQJSL.DEFAULT\EXTENSIONS\FIREBUG@SOFTWARE.JOEHEWITT.COM.XPI

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:eek:riginalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms}
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Computer 2\AppData\Local\Google\Chrome\Application\16.0.912.75\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll
CHR - plugin: Java Deployment Toolkit 6.0.290.11 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll
CHR - plugin: Java(TM) Platform SE 6 U29 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll
CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll
CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files (x86)\Microsoft Silverlight\4.0.60831.0\npctrl.dll
CHR - plugin: RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) (Enabled) = C:\Program Files (x86)\Real Alternative\browser\plugins\nppl3260.dll
CHR - plugin: RealPlayer Version Plugin (Enabled) = C:\Program Files (x86)\Real Alternative\browser\plugins\nprpjplug.dll
CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL
CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Users\Computer 2\AppData\Local\Google\Chrome\Application\16.0.912.75\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\Computer 2\AppData\Local\Google\Chrome\Application\16.0.912.75\pdf.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.79\npGoogleUpdate3.dll
CHR - plugin: NVIDIA 3D Vision (Enabled) = C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll
CHR - plugin: NVIDIA 3D VISION (Enabled) = C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll
CHR - plugin: Pando Web Plugin (Enabled) = C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll
CHR - plugin: Windows Live\u0099 Photo Gallery (Enabled) = C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
CHR - plugin: Default Plug-in (Enabled) = default_plugin
CHR - Extension: YouTube = C:\Users\Computer 2\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2_0\
CHR - Extension: Google Search = C:\Users\Computer 2\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.14_0\
CHR - Extension: Gmail = C:\Users\Computer 2\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\6.1.3_0\

O1 HOSTS File: ([2011/12/12 21:16:23 | 000,000,803 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:64bit: - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll File not found
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL File not found
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.6.0_22\bin\jp2ssv.dll File not found
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKU\S-1-5-21-302620351-3888842133-4152310273-1001\..\Toolbar\WebBrowser: (no name) - {88C7F2AA-F93F-432C-8F0E-B7D85967A527} - No CLSID value found.
O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [PocketCloud Location] "C:\Program Files (x86)\Wyse\PocketCloud Windows Companion\WyseBrowser.exe" File not found
O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-302620351-3888842133-4152310273-1001..\Run: [BitTorrent] "C:\Program Files\BitTorrent\BitTorrent.exe" /MINIMIZED File not found
O4 - HKU\S-1-5-21-302620351-3888842133-4152310273-1001..\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKU\S-1-5-21-302620351-3888842133-4152310273-1001..\Run: [Gbridge] C:\Program Files (x86)\Games\Gbridge LLC\Gbridge\pstartw.exe ()
O4 - HKU\S-1-5-21-302620351-3888842133-4152310273-1001..\Run: [Steam] C:\Program Files (x86)\Games\Steam\steam.exe (Valve Corporation)
O4 - HKU\.DEFAULT..\RunOnce: [adaware] reg.exe delete "HKCU\Software\AppDataLow\Software\adaware" /f File not found
O4 - HKU\.DEFAULT..\RunOnce: [adaware_XP] reg.exe delete "HKCU\Software\adaware" /f File not found
O4 - HKU\S-1-5-18..\RunOnce: [adaware] reg.exe delete "HKCU\Software\AppDataLow\Software\adaware" /f File not found
O4 - HKU\S-1-5-18..\RunOnce: [adaware_XP] reg.exe delete "HKCU\Software\adaware" /f File not found
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - Startup: C:\Users\Computer 2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock.lnk = File not found
O4 - Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock First Run.lnk = File not found
O4 - Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock First Run.lnk = File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SoftwareSASGeneration = 1
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Recovery present
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Recovery present
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Recovery present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Recovery present
O7 - HKU\S-1-5-21-302620351-3888842133-4152310273-1001\Software\Policies\Microsoft\Internet Explorer\Recovery present
O7 - HKU\S-1-5-21-302620351-3888842133-4152310273-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = -33
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O15 - HKU\S-1-5-21-302620351-3888842133-4152310273-1001\..Trusted Ranges: Range1979 ([http] in Trusted sites)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.239.255.254
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{4606F86A-42E5-413B-8446-C23910380560}: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{5416A3B2-2F96-4FEB-A169-BE0B1C5FDE4B}: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{795829FA-04CA-45AD-86A1-0CA98AB334EB}: DhcpNameServer = 10.239.255.254
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18:64bit: - Protocol\Handler\wlpg - No CLSID value found
O18 - Protocol\Handler\ms-help - No CLSID value found
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [1999/05/29 01:08:54 | 000,000,061 | R--- | M] () - J:\AUTORUN.INF -- [ CDFS ]
O33 - MountPoints2\{5c87857d-7447-11e0-9e1f-842b2bb7c82a}\Shell - "" = AutoRun
O33 - MountPoints2\{5c87857d-7447-11e0-9e1f-842b2bb7c82a}\Shell\AutoRun\command - "" = J:\SETUP.EXE -- [1999/05/29 01:08:54 | 000,082,432 | R--- | M] ()
O33 - MountPoints2\{ae85a522-44c7-11e1-bd88-842b2bb7c82a}\Shell - "" = AutoRun
O33 - MountPoints2\{ae85a522-44c7-11e1-bd88-842b2bb7c82a}\Shell\AutoRun\command - "" = M:\setup.exe -a
O34 - HKLM BootExecute: (autocheck autochk *)
O34 - HKLM BootExecute: (lsdelete)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2012/03/11 17:28:25 | 000,000,000 | -HSD | C] -- C:\Config.Msi
[2012/02/15 04:00:39 | 000,096,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
[2012/02/15 04:00:38 | 002,308,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
[2012/02/15 04:00:38 | 000,237,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\url.dll
[2012/02/15 04:00:38 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\url.dll
[2012/02/15 04:00:38 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
[2012/02/15 04:00:38 | 000,072,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
[2012/02/15 04:00:37 | 001,493,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl
[2012/02/15 04:00:37 | 001,427,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl
[2012/02/15 04:00:37 | 000,818,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
[2012/02/15 04:00:37 | 000,716,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
[2012/02/15 04:00:37 | 000,248,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
[2012/02/14 18:07:26 | 000,509,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntshrui.dll
[2012/02/14 18:07:24 | 000,515,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\timedate.cpl
[2012/02/14 18:07:24 | 000,478,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\timedate.cpl
[2012/02/14 18:06:57 | 000,634,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msvcrt.dll
[2012/02/12 21:35:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gbridge
[2012/02/12 21:35:09 | 000,000,000 | ---D | C] -- C:\Users\Computer 2\AppData\Roaming\Gbridge
[2 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[1 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2012/03/11 17:36:05 | 000,726,444 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2012/03/11 17:36:05 | 000,624,162 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2012/03/11 17:36:05 | 000,106,538 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2012/03/11 17:36:01 | 000,000,906 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012/03/11 17:34:01 | 000,000,928 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-302620351-3888842133-4152310273-1001UA.job
[2012/03/11 17:30:31 | 000,000,902 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012/03/11 17:29:41 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012/03/11 17:29:32 | 429,219,839 | -HS- | M] () -- C:\hiberfil.sys
[2012/03/11 12:27:43 | 000,014,240 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012/03/11 12:27:43 | 000,014,240 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012/03/11 10:30:34 | 000,000,064 | ---- | M] () -- C:\Windows\SysWow64\rp_stats.dat
[2012/03/11 10:30:34 | 000,000,044 | ---- | M] () -- C:\Windows\SysWow64\rp_rules.dat
[2012/03/10 19:35:49 | 000,000,876 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-302620351-3888842133-4152310273-1001Core.job
[2012/03/08 20:26:15 | 000,414,368 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2012/03/07 21:49:48 | 000,028,243 | ---- | M] () -- C:\Users\Computer 2\Documents\Budget.ods
[2012/02/15 04:23:36 | 000,321,208 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2012/02/12 23:42:31 | 000,000,093 | ---- | M] () -- C:\Windows\Gbridge.INI
[2012/02/12 21:35:12 | 000,002,247 | ---- | M] () -- C:\Users\Public\Desktop\Gbridge.lnk
[2012/02/11 20:09:26 | 000,299,193 | ---- | M] () -- C:\Users\Computer 2\Documents\Mom Receipt.jpg
[2 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[1 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]

========== Files Created - No Company Name ==========

[2012/02/12 23:42:31 | 000,000,093 | ---- | C] () -- C:\Windows\Gbridge.INI
[2012/02/12 21:35:12 | 000,002,247 | ---- | C] () -- C:\Users\Public\Desktop\Gbridge.lnk
[2012/02/11 20:09:26 | 000,299,193 | ---- | C] () -- C:\Users\Computer 2\Documents\Mom Receipt.jpg
[2011/12/11 22:41:09 | 000,000,064 | ---- | C] () -- C:\Windows\SysWow64\rp_stats.dat
[2011/12/11 22:41:09 | 000,000,044 | ---- | C] () -- C:\Windows\SysWow64\rp_rules.dat
[2011/08/06 16:04:39 | 000,053,299 | ---- | C] () -- C:\Windows\SysWow64\pthreadVC.dll
[2011/07/31 20:09:16 | 000,299,008 | ---- | C] () -- C:\Windows\SysWow64\lxecsm.dll
[2011/07/31 20:09:16 | 000,023,552 | ---- | C] () -- C:\Windows\SysWow64\lxecsmr.dll
[2011/07/31 13:43:04 | 000,045,568 | ---- | C] () -- C:\Windows\UniFish3.exe
[2011/07/31 12:41:31 | 000,000,263 | ---- | C] () -- C:\Windows\PowerReg.dat
[2011/07/08 20:25:39 | 000,175,616 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll
[2011/07/08 20:25:39 | 000,000,038 | ---- | C] () -- C:\Windows\avisplitter.ini
[2011/07/08 20:25:38 | 000,644,608 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll
[2011/07/08 20:25:38 | 000,243,200 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll
[2011/07/08 20:25:38 | 000,073,216 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll
[2011/05/05 23:22:51 | 000,183,112 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe
[2011/05/05 23:22:36 | 000,066,872 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe
[2011/04/12 21:26:06 | 000,000,000 | ---- | C] () -- C:\Windows\nsreg.dat
[2011/04/09 18:55:28 | 000,179,261 | ---- | C] () -- C:\Windows\SysWow64\xlive.dll.cat
[2011/02/19 11:53:23 | 000,021,840 | ---- | C] () -- C:\Windows\SysWow64\SIntfNT.dll
[2011/02/19 11:53:22 | 000,017,212 | ---- | C] () -- C:\Windows\SysWow64\SIntf32.dll
[2011/02/19 11:53:22 | 000,012,067 | ---- | C] () -- C:\Windows\SysWow64\SIntf16.dll
[2011/02/19 11:45:43 | 000,042,888 | ---- | C] () -- C:\Windows\DIIUnin.dat
[2010/12/26 18:57:46 | 000,000,268 | ---- | C] () -- C:\Windows\{EEB3F6BB-318D-4CE5-989F-8191FCBFB578}_WiseFW.ini
[2010/12/26 15:49:13 | 000,743,066 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2010/12/15 18:27:07 | 000,870,560 | ---- | C] () -- C:\Windows\SysWow64\igkrng575.bin
[2010/12/15 18:27:07 | 000,208,896 | ---- | C] () -- C:\Windows\SysWow64\iglhsip32.dll
[2010/12/15 18:27:07 | 000,143,360 | ---- | C] () -- C:\Windows\SysWow64\iglhcp32.dll
[2010/12/15 18:27:05 | 000,104,636 | ---- | C] () -- C:\Windows\SysWow64\igfcg575m.bin
[2010/12/15 18:27:04 | 000,127,868 | ---- | C] () -- C:\Windows\SysWow64\igcompkrng575.bin

Continued in next post ...
 
#8 ·
Hi 07tcbsp,

Thank you for the logs. :)

I understand that the OTL.txt log was too big to post. I'm going to post it to this thread in multiple segments so that Teachers and others at my site can review that information.

You do not need to take any action at this point. I will analyze the logs and post back a new set of instructions shortly.

mambass

Continued from previous post ...

========== LOP Check ==========

[2011/12/01 21:35:42 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\.minecraft
[2011/11/08 18:19:22 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\a0yyccS1ivD3nFa
[2011/11/08 19:21:56 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\A1n5E9UtAoGdZjB
[2011/11/08 18:15:54 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\a2oobbF4pmG5sJd
[2011/11/08 18:17:57 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\A333ppnG5aQHdW7
[2011/11/08 18:42:34 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\a444pmmH5sQ7d
[2011/11/08 18:18:26 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\A555aQQJ6dWKfR9
[2011/11/08 18:19:08 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\a555sWWJ7dE8gZq
[2011/11/08 18:19:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\A55ssWJJ7dL8
[2011/11/08 19:07:58 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\a6dEK8ZhXjeBzNx
[2011/11/08 19:00:25 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\a6Wf9ZjwIrNxuSb
[2011/11/08 18:16:22 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\A88ggRZqq
[2011/11/08 19:17:05 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\a9hTXwjUeI
[2011/11/08 19:08:49 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\a9ZjwVtc3a67LTh
[2011/11/08 18:22:26 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\AAA00uccS2bD3nG
[2011/11/08 19:18:22 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\AaQJ6dWK8
[2011/11/08 19:07:00 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ACeIBrzON0Sb
[2011/11/08 19:07:01 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ACeIzy0uSbna
[2011/11/08 19:07:01 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ACIzy0u2pGQ6
[2011/11/08 19:07:01 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ACIzyu256KRg
[2011/11/08 19:21:11 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\acoHJ8YwkVlB1v2
[2011/11/08 18:12:11 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\AddWWK8ffR9hTqj
[2011/11/08 18:58:35 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\AE8ZYwVltNAv2bp
[2011/11/08 18:39:42 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\AEELL8gTTZhYCkU
[2011/11/08 19:08:49 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\aELgqCIlt0SboaW
[2011/11/08 18:13:05 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\aF333pmG5a
[2011/11/08 18:10:25 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\AFFF3ppmG5aJ6WK
[2011/11/08 18:12:37 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\AffRRL99gTXjYek
[2011/11/08 18:56:38 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\aFmsJEfZTw
[2011/11/08 18:59:11 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\AGaH6WfLgZjwVlt
[2011/11/08 18:41:41 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\AGGG5ssQJ6dK8RZ
[2011/11/08 19:08:19 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\agTZqjYCwI
[2011/11/08 18:35:20 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\AhhhYCCwkUVlOBx
[2011/11/08 19:04:43 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\AhTXwjUCI
[2011/11/08 19:04:43 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\AhTXwjUCl
[2011/11/08 18:10:28 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ahYYXXwjUVelB
[2011/11/08 19:22:03 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\aibp4aQHsKfLg
[2011/11/08 18:19:25 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\AiibbD33pnGaQ6s
[2011/11/08 18:38:04 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ajjjYCeekIrzOtA
[2011/11/08 19:22:30 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\amG5JEf9XUlrN
[2011/11/08 18:27:52 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\AmmmH66sWJ7ELgT
[2011/11/08 19:07:17 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Ana6JEgqC
[2011/11/08 18:36:03 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\AnnGG4amH6sW
[2011/11/08 18:35:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ANNyyxAA1
[2011/11/08 18:41:22 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\AooobFF3pmG5QJd
[2011/11/08 19:15:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\aOtzP0yc12FpH
[2011/11/08 18:23:21 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\AP00yycA1ivD
[2011/11/08 19:16:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\APNyAuDobFp5
[2011/11/08 18:35:35 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ApppmmH5sQJ7EKg
[2011/11/08 18:44:31 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\AQJJJ6dEK8fR
[2011/11/08 19:23:26 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\AqjYCwkIVlxuSbo
[2011/11/08 19:23:26 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\AqjYCwkIVxSo4HW
[2011/11/08 18:23:57 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\aQQQH66dWK7RL
[2011/11/08 19:00:00 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\AqYeVOxu2Dp4HWf
[2011/11/08 19:19:20 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\aRA7N6I4wohDZ
[2011/11/08 18:58:29 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ArltPc1vna5JEgq
[2011/11/08 18:50:25 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\aRRRZqqhYXwkVeO
[2011/11/08 19:24:29 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\aS2ibD3pn4Q6W7L
[2011/11/08 19:20:49 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\AS2ibF3p5
[2011/11/08 18:33:22 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\asssWKK7fEL9TZj
[2011/11/08 18:59:18 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\AtNc1D2o4GsJ8hj
[2011/11/08 18:32:46 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\attzzPNNycAuv
[2011/11/08 18:58:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\auSoFm5Qd8LhX
[2011/11/08 18:58:56 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\AVOxuSina
[2011/11/08 18:11:21 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\AvvDD2oon
[2011/11/08 18:51:33 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\aWWJJddL8gRqYwU
[2011/11/08 19:16:13 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Ax0uc13GaHWf
[2011/11/08 19:16:07 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\AxA0uvS2i3GaHW7
[2011/11/08 19:16:07 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\AxA0uvS2i3GaHWL
[2011/11/08 19:16:07 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\AxA0uvS2iFpGaHd
[2011/11/08 19:16:07 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\AxA0uvS2ip5Qd79
[2011/11/08 19:16:08 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\AxA0uvSib3G6fgC
[2011/11/08 18:26:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\aXXwwjUUVeIBtPN
[2011/11/08 19:05:02 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Ay1v2npHsJdKR9Y
[2011/11/08 19:18:02 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\AyA1ivD2o
[2011/11/08 18:56:20 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ayxuS2Fp5Q6W7R9
[2011/11/08 18:24:29 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\AZZ99hYXXjUVeIt
[2011/11/08 18:25:30 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\B000uvvS2ibFpn5
[2011/11/08 19:22:44 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\B048rishxodkcmg
[2011/11/08 19:06:10 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\b124578hjlP1om6
[2011/11/08 18:28:08 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\b44pmmH5sJ7
[2011/11/08 19:00:17 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\b4pmG5sQJdKfZh
[2011/11/08 19:16:32 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\B6Cnk2hu8NJBpq2
[2011/11/08 18:40:49 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\b99ggTXXqjYekVr
[2011/11/08 18:59:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Bb34ms7EgqCUlBP
[2011/11/08 19:15:19 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\bbD3p4QHs79
[2011/11/08 19:15:19 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\bbD3pGaHW7L
[2011/11/08 18:47:15 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\bcSSS1ivD3on4a
[2011/11/08 18:21:07 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\BD333pnG4aQH6
[2011/11/08 18:59:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\BD3onG4am6W7E8T
[2011/11/08 18:20:29 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\bDD33pnnG4aH6WK
[2011/11/08 19:04:32 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\bE8RYkeOzy1Dn4m
[2011/11/08 18:56:42 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\belOtP0c1DopHQ7
[2011/11/08 19:18:23 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\bfRL9hTqCIrNAu
[2011/11/08 18:13:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\bgggTZZqhYC
[2011/11/08 18:14:16 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\BhhhYXXwkU
[2011/11/08 18:56:09 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\bi4dYIupdTlyvF5
[2011/11/08 19:15:19 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\bibD3pGas9j
[2011/11/08 19:23:51 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\bibDna6JEgqCkr
[2011/11/08 18:57:44 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\BiGsLZwOub
[2011/11/08 18:20:43 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\bIIBBrzzONyA0vS
[2011/11/08 18:56:15 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\bjCelzNyAvo3GaJ
[2011/11/08 18:14:19 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\BjjjYYCwkIVrONx
[2011/11/08 19:18:09 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\BK8fRL9hTjeBOxu
[2011/11/08 18:33:01 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\bkkIIBrzzOy
[2011/11/08 18:53:33 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\bkkIVrlONtP0c1b
[2011/11/08 19:16:53 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\bkVlt0Ai2Fms7KR
[2011/11/08 19:18:34 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\BL9TXjYCeIrt0
[2011/11/08 18:52:27 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\bnnF4pmH5sJ7E8R
[2011/11/08 19:23:45 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\BOidjO2aEY
[2011/11/08 18:34:16 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\booonGG4mHsW7fL
[2011/11/08 19:15:19 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\bp4Hsf9ZkrN
[2011/11/08 19:05:33 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\bpGQ6KRgqkr
[2011/11/08 19:00:17 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\bpm5sQJ6dKfZhw
[2011/11/08 19:00:17 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\bpmG5QJ6dKfZhw
[2011/11/08 18:31:01 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\bppnnG44aQHsW7f
[2011/11/08 18:50:21 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\BPPNNyccA1vD2bF
[2011/11/08 18:21:41 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\bqjjUUCekIBrONx
[2011/11/08 18:46:19 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\BQQJJ66dWK8RL
[2011/11/08 19:04:56 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\BrlONxuSb3Gm6W7
[2011/11/08 18:28:59 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\bRRLL99gTXqYCk
[2011/11/08 19:24:53 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\brzONtxA0c2
[2011/11/08 19:07:27 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\bsfTwOuDaJgCl0S
[2011/11/08 18:56:14 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\BsLqwlPiF5JE8RY
[2011/11/08 18:44:46 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\bsssQJJ6dEKfR9h
[2011/11/08 19:08:49 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\BThwVOxy1Dna5JE
[2011/11/08 19:04:56 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\bTqCUlt0Si3n4m5
[2011/11/08 18:21:27 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\BTTXXqjYCekIVzN
[2011/11/08 18:39:01 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\BTXXqjjUCekBrON
[2011/11/08 18:33:26 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\buuvvS22ibFpn5
[2011/11/08 18:10:49 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\BvvSS2iibF
[2011/11/08 18:42:23 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\bvvvD33onF4
[2011/11/08 19:00:26 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\BWEZkO0vFsERwOy
[2011/11/08 19:18:00 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\bWf8ZqhwUlt0Sv3
[2011/11/08 19:24:53 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\BWK7fRL9gXjCkVz
[2011/11/08 18:25:42 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\BwwjjUVVelItz
[2011/11/08 18:20:11 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\BWWWJ77dEL
[2011/11/08 19:08:11 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\bXwUeBz0ci2n4m
[2011/11/08 18:37:39 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\BXXXqjjYCekVrzN
[2011/11/08 18:12:19 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\c00yycS11vD3
[2011/11/08 18:18:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\C11uuvDD2ob4pG5
[2011/11/08 19:19:59 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\C1vD2oobF4mGsJd
[2011/11/08 18:20:50 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\c333onnF4
[2011/11/08 19:17:34 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\c36gUPFEk048V1m
[2011/11/08 19:08:48 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\C3pnQH6sW7E9Zj
[2011/11/08 18:52:23 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\C44ppGGsQJ6
[2011/11/08 19:19:39 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\c5JEgqXkeOzy
[2011/11/08 18:23:29 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\c777fEEL8
[2011/11/08 18:19:50 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\C777fEEL9gT
[2011/11/08 18:19:11 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\c77ffELL9gZqjCw
[2011/11/08 18:47:46 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\c88ffRZZ9hTwjCe
[2011/11/08 18:59:59 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\c8fLhqCkBOy0vba
[2011/11/08 19:22:31 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\c8fRL9hTXjCkBzy
[2011/11/08 18:57:01 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\c8gRZqhYX
[2011/11/08 18:39:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\caaamHH5sWJ7ELg
[2011/11/08 19:07:25 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Cb3na6KRgqCkrNA
[2011/11/08 18:10:21 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\cbbDD3ppn
[2011/11/08 18:58:53 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\CDaWLhVty1Dna5J
[2011/11/08 18:17:25 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\CddEEL88gRqhYwk
[2011/11/08 18:35:59 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\CdEEL8ggRZh
[2011/11/08 19:08:35 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\cdELgRZqhXkVlBz
[2011/11/08 18:33:30 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\CeeelIIBrzPyxA
[2011/11/08 19:09:15 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\CF4HQ7KRhwUeIz
[2011/11/08 19:09:15 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\CF4p5Q7K8RhwUe
[2011/11/08 18:22:46 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\CfEELL8gTZqhCwU
[2011/11/08 18:40:04 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\cffRRZ9hhXwjUeI
[2011/11/08 18:53:37 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\CfRLLggXqjYeIrz
[2011/11/08 18:56:19 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\CfZhwUeIrNAu2b3
[2011/11/08 18:56:18 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\CgRZhXkeOz0c1vo
[2011/11/08 19:07:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\CgTqhwkVOx01Dna
[2011/11/08 18:32:35 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ChhhYYXwkUVeOBz
[2011/11/08 18:58:11 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ChlAF7hlybQ
[2011/11/08 19:23:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\CIbfr3RzFRr
[2011/11/08 18:18:08 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\cIIIVVrzONtx0uS
[2011/11/08 18:46:31 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ciivvD33onFa
[2011/11/08 18:59:04 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\CIzy1Dbp5Jd
[2011/11/08 19:08:35 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\cJ7dELgRZhXkVlB
[2011/11/08 18:21:11 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\cJJ66dEEK8fZ9TX
[2011/11/08 18:31:59 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\cjjjYCCwkIrlOtP
[2011/11/08 18:59:15 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ckIBrzONy
[2011/11/08 18:38:42 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\CkkIIVrrzOtxAuc
[2011/11/08 18:38:15 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\cLL88gRRZqhXwUV
[2011/11/08 18:30:09 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ClOOBBtzP0yc1i
[2011/11/08 19:06:48 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\CLRhwVOz0AiDoF
[2011/11/08 19:05:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\cmG5aQJ6d8Rh
[2011/11/08 19:05:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\cmG5aQJ6dKfL
[2011/11/08 19:07:16 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\cnaHWf8ZY
[2011/11/08 19:22:20 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ConF4pm5sJd8ZYw
[2011/11/08 19:20:22 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ConG4amH6W7E8TY
[2011/11/08 18:58:18 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\cOtAc2DaWLjwIlN
[2011/11/08 19:15:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\cP0yc1i2FpHs7y1
[2011/11/08 18:26:51 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\cQQQJ66dWK8fL9T
[2011/11/08 19:24:55 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\csWJ7dEL8RqYwUe
[2011/11/08 18:58:38 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\CTYkUrOt0Sv3FmW
[2011/11/08 19:08:53 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\cTZqCIrNPciD
[2011/11/08 18:56:16 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\CUkrNAvi3GQd7LT
[2011/11/08 19:19:00 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\cUVelIBtzy1Dbm5
[2011/11/08 18:51:45 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\cuvSSiiF3pn5
[2011/11/08 18:11:57 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\CuvvSS2obF3pG5Q
[2011/11/08 19:21:19 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\cVrNAc2DnaHK
[2011/11/08 19:23:26 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\CwkIVlOxuSbo4HW
[2011/11/08 19:23:26 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\CwkIVxSo4HW7Lgq
[2011/11/08 18:10:14 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\CXwwwjUCelIBrPy
[2011/11/08 18:47:42 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\cXXqqjUCekIBrOy
[2011/11/08 19:05:03 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\CxxxASSoFpa
[2011/11/08 19:24:53 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\CYCekIVrzNx0c2b
[2011/11/08 19:24:31 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\CYVzAom7gXl
[2011/11/08 19:16:07 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\cyxA0uvS23GaHW7
[2011/11/08 18:58:22 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\czONtxA0u
[2011/11/08 18:25:38 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\czPPNNycA1uv2oF
[2011/11/08 18:56:43 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\CZXjUVetA4d
[2011/11/08 19:17:48 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\d0oQZePub5EZjBu
[2011/11/08 18:56:42 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\D1voFa5JEgZhwUe
[2011/11/08 18:34:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\d444ammH5sWJ
[2011/11/08 19:05:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\d6dWK8fRLhjeBOx
[2011/11/08 18:47:03 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\D7ffRLL9gTXqYCk
[2011/11/08 19:04:34 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\D8RL9hXUeIz
[2011/11/08 19:05:03 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\dAASSoFpaWfL
[2012/01/29 18:28:23 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\DAEMON Tools Lite
[2011/11/08 19:06:16 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\daQJdWK8fLhq
[2011/11/08 19:06:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Db5dLXCVtuipQs
[2011/11/08 19:24:53 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\DbD3pnG4aHsKfLg
[2011/11/08 19:24:53 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\dCekIVrzO
[2011/11/08 19:22:55 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\dCelIBzA1v2FmaJ
[2011/11/08 18:30:52 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\DCwwkkUVrlOBtPy
[2011/11/08 18:46:23 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\DDD2obFF4pm5sJ
[2011/11/08 19:19:59 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\DE8R9TwClBzNAu2
[2011/11/08 18:57:38 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\deBOxu2FnaHW7Rg
[2011/11/08 18:44:49 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\deellOBtz
[2011/11/08 18:56:42 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\DelOtP0c1DopHQ7
[2011/11/08 18:57:55 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\DERqXUeBPy1vomJ
[2011/11/08 19:07:35 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\DF3pnG5aHW7
[2011/11/08 18:16:19 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\DFFF4ppmG5sQ6dK
[2011/11/08 18:27:32 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\DgggTZZqjYCkIV
[2011/11/08 18:40:27 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\DggRRZqhhYwkUel
[2011/11/08 18:47:30 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\DhhhYXXwjUVeIBz
[2011/11/08 18:57:34 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\DHW7LgqCIlt
[2011/11/08 19:19:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\dhYXwUltNAvo4m5
[2011/11/08 18:43:39 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\DIIIrrzONtxAuc2
[2011/11/08 18:44:38 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\DIVVrrlONtx
[2011/11/08 19:18:09 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\DJ6dWK8f9TjeBOx
[2011/11/08 18:45:55 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\dLL99gTTXqjCeIV
[2011/11/08 18:25:01 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\dLLL9ggTZqjCwIV
[2011/11/08 18:49:23 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\DlllIBBrzPNx1u
[2011/11/08 18:13:29 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\DmmGG5aQJ6dWKfL
[2011/11/08 19:16:06 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\dmsJKf9TjCByAuo
[2011/11/08 18:36:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\doobbF33pmGa
[2011/11/08 18:34:07 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\dpmmH55sQ
[2011/11/08 19:19:27 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\dpnG4aQH6W7E9Zj
[2011/11/08 18:43:51 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\dPP00yccA1iD2nF
[2011/11/08 18:58:57 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\DQHsf9TYklt0SiD
[2011/11/08 18:32:42 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\DqqqjUUeekB
[2011/11/08 19:04:35 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\DRL9hXjkzxu
[2011/11/08 18:54:17 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\dS11ibD3oG4aHsJ
[2011/11/08 18:58:59 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\dSnmJ8qUBciFsdK
[2011/11/08 18:54:09 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\dsQJJddK8gR9
[2011/11/08 19:16:43 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\dUPy1vo4HWd8RqX
[2011/11/08 18:46:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\DuuuvDD2obFpmGs
[2011/11/08 19:20:38 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\dVelIBtzPyAuDo4
[2011/11/08 18:21:57 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\DWWJJ7fEELgTZhC
[2011/11/08 18:25:50 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\dwwkkUVVrlOt
[2011/11/08 19:22:42 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\DxnRIca9ISH
[2011/11/08 18:38:38 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\dxP00uccS1iD3n4
[2011/11/08 18:56:45 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\dXUkBzNAuSb3nQd
[2011/11/08 18:12:15 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\DXXXwjjUVelItzN
[2011/11/08 18:57:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\DycA1ivD2np
[2011/11/08 18:27:48 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\DycccA1ivD2
[2011/11/08 19:16:18 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\dYCwIltiG
[2011/11/08 19:16:18 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\dYCwNPci3
[2011/11/08 18:21:30 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\dyyxxA11uvSo
[2011/11/08 18:19:57 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\DYYXXwjUUVlIBzP
[2011/11/08 18:56:43 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\dZXjUVetA4dT
[2011/11/08 18:11:50 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\DZZqqhYYCwkVrO
[2011/11/08 19:18:59 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\E01D4H5sW7LRhwU
[2011/11/08 19:18:59 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\E0S1v3Fm5W7LRhw
[2011/11/08 19:17:08 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\E1i3Fms7E8ZXkVl
[2011/11/08 19:17:08 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\E1i3Fms7LgZYkVl
[2011/11/08 19:05:45 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\e1iDnp5JE8ZYjV
[2011/11/08 19:18:02 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\E1ivD2nF4HQd8
[2011/11/08 19:18:02 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\E1ivD2onF5JEg
[2011/11/08 18:10:53 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\E222obbF4pm5sQ6
[2011/11/08 18:34:44 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\E22iibFF3pG5aH6
[2011/11/08 18:59:35 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\e2b3GQdKRgX
[2011/11/08 18:25:54 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\e3ppnnG5aQH6WKf
[2011/11/08 19:20:39 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\e4pmG5sQ6RXezA
[2011/11/08 19:16:06 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\E4pmsJ6Kf9TjClr
[2011/11/08 19:23:18 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\e5PRFtZmOQjuKr
[2011/11/08 18:28:48 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\E666dEEK8fR9hXw
[2011/11/08 18:52:39 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\E6ddWK7fL9gTqYe
[2011/11/08 19:16:48 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\e6sWJLThwVO
[2011/11/08 18:42:07 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\E777ffEL9gTZjYw
[2011/11/08 19:08:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\E7dK8gRZ9YUeItN
[2011/11/08 18:33:55 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\e888f99hTXqjCe
[2011/11/08 18:45:13 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\e8ggTTZqhYCwkVl
[2011/11/08 18:58:03 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\EAF6hI0pWTVA3sT
[2011/11/08 19:07:41 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ebD3onG4aHsJE8T
[2011/11/08 19:22:09 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\EC2Rt4ZPmqPFLVA
[2011/11/08 18:09:56 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\EcccSS2ibD
[2011/11/08 19:17:53 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\eDbp5JE8ZhwCIzy
[2011/11/08 19:06:56 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\EF5dRXezy0i3aWf
[2011/11/08 19:08:06 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ef8ZYkrOxy1Do4s
[2011/11/08 18:43:55 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\eFFF4aamH5sW7d
[2011/11/08 19:18:22 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\eFLUyFEXB1F
[2011/11/08 18:12:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\EGG44ammH6sJ7EL
[2011/11/08 18:57:44 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\eGWTIxiGsLZwOub
[2011/11/08 19:19:18 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Eih3X2ZA8NQCbfz
[2011/11/08 19:20:49 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\eIIIBzzONyx0uSi
[2011/11/08 18:31:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\EJJ77dEEL8gZqYX
[2011/11/08 18:58:16 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ejUCkBrzOx0vi3G
[2011/11/08 19:18:16 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ejuHYu4Ekc4Eky4
[2011/11/08 19:19:00 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\eK8gRZ9hYwU
[2011/11/08 18:16:43 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\eKK88fRRZ9TXwUC
[2011/11/08 18:43:43 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\EmmmG55aQJ
[2011/11/08 19:06:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\EnG47gjCIlxu1Dn
[2011/11/08 19:06:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\EnG4HWf9TjCIltP
[2011/11/08 18:57:21 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\EoFms7LRhwVOzy1
[2011/11/08 18:18:57 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\eOOBBtxPP0cS1v3
[2011/11/08 18:28:52 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\EpmmHH5sQJ7dE8R
[2011/11/08 18:20:22 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ePPNNyycA1u
[2011/11/08 19:22:54 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\eQJ6dEK8fZh
[2011/11/08 19:06:16 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\EQJdWK8fR9TjC
[2011/11/08 18:58:17 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\eqUeBrz0Sbp5Qd7
[2011/11/08 19:24:28 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ERgXqjYCeVzNx0S
[2011/11/08 18:59:11 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\erlOtPucSbo4ms
[2011/11/08 18:59:15 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\erONyxAuSip
[2011/11/08 19:00:17 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\eRZ9hXjCIzy1vo3
[2011/11/08 19:07:38 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ERZ9hXwjUeBPcu2
[2011/11/08 19:05:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ERZ9XUltNA
[2011/11/08 19:19:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\esQJ6dEK8R9TUeI
[2011/11/08 18:22:50 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ESSS2iibD3pn4
[2011/11/08 18:45:17 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\essWWK77fELgTqY
[2011/11/08 19:06:27 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\EsTPFQhzSG
[2011/11/08 19:19:27 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\EtAcS2ibDpGas7E
[2011/11/08 18:14:58 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ETTTXqqjYC
[2011/11/08 18:57:00 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\EuDaK9YrPiGsEgq
[2011/11/08 18:40:31 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\EuuucSS1ibDonGa
[2011/11/08 18:22:38 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\evDD22obF4pm5sJ
[2011/11/08 18:15:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\EVVVrllONtx0uS1
[2011/11/08 19:08:10 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\EWfgCIVOxuSi3
[2011/11/08 19:04:56 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ewkIrlONtuSbo4m
[2011/11/08 18:22:02 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\eWWWJ77fEL8
[2011/11/08 19:08:08 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\exA1u2Fp5Qd
[2011/11/08 18:22:34 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\EXqqjjUCekIBzOy
[2011/11/08 19:08:31 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\EXUeBPy1DnpHQ7K
[2011/11/08 18:49:27 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\eXwwwjUelIBtzN1
[2011/11/08 18:45:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ExxxAA1uvS2oF
[2011/11/08 18:39:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\EYYCCekIVrzONx0
[2011/11/08 19:22:20 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\EzP0ycA1iDoFpHs
[2011/11/08 19:22:42 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\F0HYc5e2KkiKIi7
[2011/11/08 18:34:39 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\f2iiibD3pnG4a6E
[2011/11/08 19:18:02 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\F2nF4HQd89YwUeB
[2011/11/08 18:33:06 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\f333pnG5aQ
[2011/11/08 18:21:53 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\F44aamH55sJ7
[2011/11/08 19:18:01 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\F4HJEL8RZ
[2011/11/08 19:00:17 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\F4pmG5sQJdKfZhU
[2011/11/08 19:00:17 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\F4pmG5sQJdKfZhX
[2011/11/08 19:22:31 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\f6K8fRL9hX
[2011/11/08 19:23:26 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\f7fEL9gTZjCkVlP
[2011/11/08 19:24:53 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\f7fRL9gTXjCkVzN
[2011/11/08 19:24:53 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\f7fRLgTXqCkVzNx
[2011/11/08 18:19:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\f8ggTTZqhYCwUVl
[2011/11/08 19:08:54 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\f8TZqhYwkVlB0Sv
[2011/11/08 19:07:58 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\f9TXwjUelB
[2011/11/08 18:52:04 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\faQJJddK8fR9Tqj
[2011/11/08 18:57:05 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\FAu2Dna6Wf9TjwI
[2011/11/08 19:23:51 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\FbDna6JEgqCkrBx
[2011/11/08 18:52:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\FbF44pmGs
[2011/11/08 19:18:03 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\fBtPcu2Fm5QdKRh
[2011/11/08 19:22:31 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\FCekIBrzOx0bGdL
[2011/11/08 19:19:22 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\FcQVDKlbLNGT
[2011/11/08 19:23:51 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\fCwkIVrlOtPuSiD
[2011/11/08 18:09:46 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\fddWWK8ffR9hTqU
[2011/11/08 19:19:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\fdEK8fRZ9TUeIrP
[2011/11/08 18:16:54 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\FeeekIIBrzONxAu
[2011/11/08 18:43:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\feellIBBtzPyc1u
[2011/11/08 19:20:38 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\fEK8gRZ9hX
[2011/11/08 18:29:31 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\fellIIBtzPNyA1v
[2011/11/08 19:20:39 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\fG5sQ6RXezA2mJf
[2011/11/08 19:07:41 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\fGamH6sWJfLgZCk
[2011/11/08 19:22:20 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\FH5sQJ7dEg9w
[2011/11/08 18:32:03 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\fHH66dWW7fL9g
[2011/11/08 18:18:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\fHHH6ssWK7fE9gZ
[2011/11/08 18:12:01 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\fhhhYXXwjUVlI
[2011/11/08 18:24:37 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\fiibbD33on4am6s
[2011/11/08 18:29:03 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\fIIIBrrzONyx0
[2011/11/08 19:23:16 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\FImBJPK1RDTFCpe
[2011/11/08 19:19:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\FjUeBPNcu2Fp5Q6
[2011/11/08 18:27:41 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\fjUUUCekIBrzOyA
[2011/11/08 18:36:56 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\FjYYCCekIVrz
[2011/11/08 19:21:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\FKgRZ9hYXjVl
[2011/11/08 19:21:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\FKgRZhXwjVlB
[2011/11/08 19:16:54 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\FkVlt0Ai2Fms7KR
[2011/11/08 18:53:21 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\flIBBzzPyxAuS
[2011/11/08 19:06:53 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\flONtxP0ubGmW7E
[2011/11/08 18:57:51 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\FmH5sQ7EKgZhXVl
[2011/11/08 19:07:41 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\fnG4amH6sJE8TqY
[2011/11/08 19:07:41 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\fnG4amH6sJfLgZh
[2011/11/08 19:07:41 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\fnG4amH6sJLgZCk
[2011/11/08 19:07:41 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\fnGamH6sW7E8TqC
[2011/11/08 19:18:01 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Fona5WJdE
[2011/11/08 19:22:27 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\FONtx0ucSb4KgYr
[2011/11/08 19:19:59 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\FoobF44pG5Jd
[2011/11/08 18:40:56 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\FoonnF44amHs
[2011/11/08 19:20:49 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\fOONNyxA0uv2b35
[2011/11/08 19:20:49 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\fOOONyxA0uvSiFG
[2011/11/08 19:06:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\fpnG47gjCIlxu1D
[2011/11/08 19:06:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\fpnG4HWf9TjCIlt
[2011/11/08 19:06:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\fpnG4Q6sKEgqCIl
[2011/11/08 19:06:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\fpnG4Qs7LgqCIxc
[2011/11/08 18:09:39 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\FPPP0yycA1iD2nF
[2011/11/08 19:05:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\fQ6EKf9TjClrNAv
[2011/11/08 18:30:02 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\fqjjUUCekIBrONx
[2011/11/08 19:19:27 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\FQsWK7fELTjCIrO
[2011/11/08 19:22:55 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\FrzNyxA1u
[2011/11/08 19:24:53 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\FrzONtxA0c2b
[2011/11/08 18:26:17 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\FrzzPPNyxA1uS2b
[2011/11/08 18:36:18 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\FS11iivD3
[2011/11/08 18:58:56 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\fTqjCekIVNAci3G
[2011/11/08 18:13:26 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\FtttxAA0ucS2bDp
[2011/11/08 18:58:56 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\fTXjekIVNAci3Ga
[2011/11/08 18:33:18 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\fUUUVrrlOBtx0y1
[2011/11/08 18:20:01 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\fVVrrlOOBtP0yS1
[2011/11/08 18:47:11 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\fVVVellOBtzPyc1
[2011/11/08 18:45:51 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\FVVVONttxP0cSib
[2011/11/08 18:15:23 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\FxxxP00ucS1iD3n
[2011/11/08 18:57:01 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Fy1Dn4HsJ
[2011/11/08 18:53:25 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\fYXwwUUelOBz0c1
[2011/11/08 18:37:03 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\fyyycAA1uvDob4p
[2011/11/08 18:33:14 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\fzzPP0ccA1iD2n4
[2011/11/08 19:24:29 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\g0ucS2ibDpGaHsK
[2011/11/08 19:06:38 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\g1ib3o4Hs7LThwV
[2011/11/08 19:06:38 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\g1ibD3aJgCl0v4W
[2011/11/08 18:33:38 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\G222onnF4pm5sJ7
[2011/11/08 18:18:22 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\g22iibD3pnG4aHs
[2011/11/08 18:50:51 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\G22oobF33pG5aJd
[2011/11/08 18:37:18 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\g22oonF4pmH5QJd
[2011/11/08 19:05:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\G3mG5aQJ68
[2011/11/08 19:07:35 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\g5aWfLTjeVzx0S
[2011/11/08 18:24:21 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\g66ddWKK8fR9hX
[2011/11/08 18:31:16 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\G66ssWJJ7f
[2011/11/08 18:10:10 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\G777fRRL9gTXjYe
[2011/11/08 18:51:41 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\G77fEL9gTZjYwIr
[2011/11/08 18:13:33 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\G888ggRZ9h
[2011/11/08 19:18:09 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\g8fRL9hTjeBOxu2
[2011/11/08 18:57:02 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\G9hYXjVIzy1vo4m
[2011/11/08 19:20:46 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Ga7TkNSo6Ehr0vn
[2011/11/08 18:46:55 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\gBBBttxP0ycSiv3
[2011/11/08 18:20:53 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\GbDD33pnG4aQ6sK
[2012/02/25 12:53:48 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Gbridge
[2011/11/08 19:18:21 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\gBt0Avo4ms7KRhw
[2011/11/08 18:18:33 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\gCwwkkUVrlOBxPy
[2011/11/08 18:56:44 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\GdLjrAoma6WfL
[2011/11/08 18:58:33 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\GEgqCUlBP1
[2011/11/08 18:53:41 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\GFF3pmG5aJ6dKfL
[2011/11/08 19:17:54 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\GGa6WfLTjeVzNAu
[2011/11/08 18:23:49 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ggTTZZqhYCwkVrO
[2011/11/08 18:58:13 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\GH6sWK7fE9TYVtS
[2011/11/08 18:58:13 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\GH6sWK7fE9ZCIrO
[2011/11/08 18:58:13 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\GH6sWK7fE9ZYkrO
[2011/11/08 18:58:13 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\GH6sWK7fE9ZYVtS
[2011/11/08 18:32:11 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\giiivDD2onF5sJ7
[2011/11/08 18:58:16 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\gIrzOyAv2bp
[2011/11/08 18:34:03 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\GJ77dEEK8g
[2011/11/08 18:57:09 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\gJLUN2aRCt2GsEq
[2011/11/08 18:21:00 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\GjUUVVelIB
[2011/11/08 19:08:51 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\gjzD5KhUrA2
[2011/11/08 19:05:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\GK8ZhwUlBzyAu2b
[2011/11/08 18:58:16 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\gkBrzOy0v2b
[2011/11/08 19:20:13 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\gKCuGEwPo7YtipE
[2011/11/08 19:06:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\GKEgqCIlO0Sbo4m
[2011/11/08 18:39:21 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\gkIIBBrzONA0v2b
[2011/11/08 19:22:45 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\glIBrzNyAu2b3m5
[2011/11/08 18:38:19 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\GmmHH6sWJ7fELgZ
[2011/11/08 18:57:58 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\GNAu2bp4HWf9Z
[2011/11/08 19:04:56 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\gONtxP0uc1b3n4m
[2011/11/08 18:56:20 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\gONyx0Sbp5Q6W7
[2011/11/08 19:18:23 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\GpmG5aQJ6W8R9TU
[2011/11/08 19:17:24 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\GpmG5sJE8ZTje
[2011/11/08 18:57:57 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\GPNxu2Fma6KRhqC
[2011/11/08 18:10:18 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\gPP00yccS1iD3nF
[2011/11/08 18:42:00 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\gppmmH5sQJ7
[2011/11/08 18:29:50 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\gPPNNyccA1vD2bF
[2011/11/08 19:04:56 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\grlONt0Sbo4m6Wf
[2011/11/08 19:04:56 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\grlONxuSb3Gm6W7
[2011/11/08 19:19:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\GRZhTXjUCI
[2011/11/08 19:16:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\GttzzyAuDb
[2011/11/08 19:16:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\GttzzyAuDo
[2011/11/08 18:52:00 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\GTXXqjYCeIVrOtA
[2011/11/08 18:51:49 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\gUUCelIBrPN
[2011/11/08 18:59:15 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\GuvS2ibF3n5Q6W7
[2011/11/08 18:53:10 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\gUVVrlOBtP0ySiD
[2011/11/08 18:58:22 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\GVrOtxA0u2DnaHs
[2011/11/08 18:49:58 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\GvvvS2ibF3pn5aH
[2011/11/08 18:29:46 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\gvvvSS2obF3pG5Q
[2011/11/08 19:24:29 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\GWK7fEL9gZjCkVl
[2011/11/08 18:17:29 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\gwwkkIVrrlN
[2011/11/08 18:29:43 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\GXqqjjYCek
[2011/11/08 18:31:24 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\gXXXqjjUCekBrON
[2011/11/08 18:11:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\GYYYXwwkUVeOBzP
[2011/11/08 19:20:38 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\GZ9hYXwjUeItP
[2011/11/08 19:16:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\GzzzN1v2oF
[2011/11/08 18:47:26 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\gzzzPNNyxA1uS2b
[2011/11/08 19:16:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\GzzzPNyAuD

Continued in next post ...
 
#9 ·
Hi 07tcbsp,

Thank you for the logs. :)

I understand that the OTL.txt log was too big to post. I'm going to post it to this thread in multiple segments so that Teachers and others at my site can review that information.

You do not need to take any action at this point. I will analyze the logs and post back a new set of instructions shortly.

mambass

Continued from previous post ...

[2011/11/08 18:50:06 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\h111iivD2onFpm5
[2011/11/08 18:59:58 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\h1S2o3mG5
[2011/11/08 19:04:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\h2ibF3pnaHWfLTq
[2011/11/08 18:44:35 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\H33oonFF4am5sJ
[2011/11/08 18:15:26 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\H33ppnGG5aQ6dK7
[2011/11/08 18:14:51 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\h44ppmG55
[2011/11/08 19:16:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\H4RzFgtFfrF8e0G
[2011/11/08 18:40:08 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\H55ssQJJ7dK8gZ9
[2011/11/08 19:18:34 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\h5aQH6dWKfLgXYe
[2011/11/08 19:18:34 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\h5aQH6dWKfLTjCk
[2011/11/08 18:19:29 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\h88ffRLL9hTq
[2011/11/08 19:17:07 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\haQHs7EgqCIlt0S
[2011/11/08 19:20:38 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\hcA1uv2ob
[2011/11/08 18:26:02 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\HD22oobF4pmGsQ6
[2011/11/08 18:20:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\HEEEK88gRZ9YXjU
[2011/11/08 18:58:21 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\HeIN1omQEZwerxv
[2011/11/08 18:56:15 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\helzNyA1vo3G
[2011/11/08 18:39:05 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\hFF44pmmG5QJ
[2011/11/08 19:18:34 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\hG5aQHdWKfLgXYe
[2011/11/08 19:19:39 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\HH5JEgqXkeO
[2011/11/08 18:31:28 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\HhhTTXwwjUC
[2011/11/08 19:18:09 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\HhTjeBOxu2bp5HW
[2011/11/08 19:18:09 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\HhTjeBOxu2nH9ex
[2011/06/22 18:45:18 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Hi-Rez Studios
[2011/11/08 18:30:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\HJJJ6ddWK8fR9hX
[2011/11/08 19:07:38 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\hjUVeBPcu
[2011/11/08 19:24:02 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\hjUVelIBtPcu
[2011/11/08 19:08:48 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\hK7fELgZjwVOxu1
[2011/11/08 19:05:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\hlIBrzPNyvo3m5J
[2011/11/08 19:05:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\hlIrzPNyAvo3m5J
[2011/11/08 18:26:13 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\HLLL9ggTXqj
[2011/11/08 19:06:11 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\hlrNxuSo3
[2011/11/08 18:49:07 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\hnFF44pmH5sQ
[2011/11/08 19:20:00 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\hoFpGaJdKR9TqUe
[2011/11/08 18:26:25 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\hOOONttxP0uc1iD
[2011/11/08 18:50:17 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\HOOONyyAA0v
[2011/11/08 19:24:45 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\hQ8hwVIzy
[2011/11/08 19:23:49 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\HqCIzyAvi3GQdKR
[2011/11/08 19:19:58 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\HRZ9XwjUVlI
[2011/11/08 19:00:17 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\hsQJ6dEK8R9wCIz
[2011/11/08 18:32:49 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\hssW77dEL8gRZhX
[2011/11/08 19:00:10 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Ht0ci3o4HW7LTq
[2011/11/08 19:20:55 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\hTI1pKXB0pdXObs
[2011/11/08 18:31:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\htttxPP0ucSibDo
[2011/11/08 19:09:03 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\htxA0uS2iDn4
[2011/11/08 19:09:03 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\htxA0uS2iDpG
[2011/11/08 19:07:38 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\hUVeBPcu2
[2011/11/08 19:21:25 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\HwVlt0Svo4HWd8q
[2011/11/08 18:16:05 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\hwwwjUUCe
[2011/11/08 19:24:02 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\hXjUVelIBzcu
[2011/11/08 18:57:05 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\hxP0ci3GaHW7Lgq
[2011/11/08 19:24:02 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\hXwjUVelItPc
[2011/11/08 18:56:50 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\hYkrNAc2Dna6KEg
[2011/11/08 18:59:44 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Hyvbm6fhUrNAvi
[2011/11/08 18:29:19 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\hZqqjjYCw
[2011/11/08 18:17:32 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\HzzPPNyyxA1
[2011/11/08 18:56:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\i0Sb3pna6K
[2011/11/08 18:56:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\i0Sb3pnQs7
[2011/11/08 19:23:51 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\i1ibDna6JEgqC
[2011/11/08 18:59:37 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\I1ivD24Hs
[2011/11/08 19:17:22 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\i269ktiaW8qkVlx
[2011/11/08 19:00:03 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\I2ob4msQJEf9Tje
[2011/11/08 18:57:58 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\i5aQdWK7fLgXj
[2011/11/08 18:16:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\i66ddWK77f
[2011/11/08 18:30:13 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\I6ssWWJ7f
[2011/11/08 19:08:51 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\i7KRhwVIzy1Dbp5
[2011/11/08 19:18:58 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\i7LTjwVOt0Si3Gm
[2011/11/08 18:13:15 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\i99ggTXXqjCekVr
[2011/11/08 19:22:32 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\iA0ubpHfjO26q
[2011/11/08 19:22:45 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ICelIBrzPyAuSoF
[2011/11/08 19:16:41 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ICrOxu2Fn56K
[2011/11/08 18:11:46 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\IDDD2oobF4pm5sJ
[2011/11/08 18:20:57 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\idddWKK8fRLhTqj
[2011/11/08 19:24:29 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\IG4aQH6sW7Lg
[2011/11/08 18:39:13 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\IH66ssWJ7fELgZq
[2011/11/08 18:09:42 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\IHH66sWJJ
[2011/11/08 18:58:57 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\iibD3onG4m6JL
[2011/11/08 18:58:57 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\iibDnm6sJLZYk
[2011/11/08 19:22:29 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\iiDnam5JEgqXUlt
[2011/11/08 18:30:17 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\iIIIVrrzONtx0uS
[2011/11/08 19:20:00 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\IjCkBOyAuSipadf
[2011/11/08 19:04:55 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ijCwkIrlOtuSbo4
[2011/11/08 18:52:16 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\iJJ7fEL8gTqhC
[2011/11/08 18:13:19 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\IjjjUUCelIBrPNx
[2011/11/08 19:18:03 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\IlBtNAvo4GQd8Zh
[2011/11/08 18:59:11 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\IlONPucS1boGaHs
[2011/11/08 18:59:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\IlOt0ucSboGmsJE
[2011/11/08 18:59:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\IlOtPucSbo4msJE
[2011/11/08 18:31:32 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\innFF4pmH5sQJdK
[2011/11/08 19:20:21 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\IONtxPu1iDoG
[2011/11/08 18:41:18 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\IOONNtxxA0uS
[2011/11/08 18:50:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\iPNNyycA1uvDob4
[2011/11/08 18:36:07 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\IrrrzOONt
[2011/11/08 19:05:52 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\IrzyAvo3Ga6WfLT
[2011/11/08 18:58:11 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\iS5LwtimKwB14dT
[2011/11/08 18:53:45 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ItzzPNycAuvDoFp
[2011/11/08 18:14:09 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\IuvvSS2ibF3pG5Q
[2011/11/08 19:23:26 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\IWK7fEL9gZjCkVl
[2011/11/08 19:24:53 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\IWK7fRL9gXjCkVz
[2011/11/08 19:18:09 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\IWK8fRL9hjeBOxu
[2011/11/08 18:23:41 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\iwwjjUCelI
[2011/11/08 19:04:51 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\iYCwkIVrlNx0c
[2011/11/08 19:20:32 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\j0osLhVx1n5EqUt
[2011/11/08 19:24:01 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\j0pKqlSmTlvWY
[2011/11/08 18:56:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\J0Sb3pna6
[2011/11/08 18:56:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\J0Sb3pnQs
[2011/11/08 19:16:08 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\j0uv235Qd79XYer
[2011/11/08 19:16:07 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\j0uvS2ibF5Qd79X
[2011/11/08 19:16:08 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\j0uvSi3G6fgCrAS
[2011/11/08 19:16:08 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\j0uvSibF3G6fgCr
[2011/11/08 18:57:10 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\J1Dnam6Jf8ZhwVl
[2011/11/08 19:05:07 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\j1vo4m5JE8ZhwVI
[2011/11/08 18:38:11 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\J22oobF44pG5sJd
[2011/11/08 18:17:43 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\J333pnnG5aQHdW7
[2011/11/08 18:30:21 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\j33pm55aQJdW8fL
[2011/11/08 18:50:44 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\j555sWWJ7dELgRq
[2011/11/08 19:20:49 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\j55aQ6dWK8fR9Tq
[2011/11/08 19:18:08 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\J5aQJ6dWKfLhjeB
[2011/11/08 19:18:33 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\J6dWK7fRL
[2011/11/08 19:22:31 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\j9hTXqjUCkBzyAu
[2011/11/08 18:58:16 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\J9hTXqUeBz0Sbp5
[2011/11/08 18:31:44 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\jaaaQJ66dWKfR9T
[2011/11/08 19:18:09 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\JaQJ6dWK89TjeBO
[2011/11/08 18:46:03 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\jbbFF4ppmGsQJdE
[2011/11/08 18:15:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\jbFFF3pnG5aQHdK
[2011/11/08 18:57:03 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\jBrzy1Sbp5
[2011/11/08 18:48:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\jCCeekIBBrONyAu
[2011/11/08 18:29:58 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\jccSS1iiD3
[2011/11/08 19:22:20 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\jD2onF4pm5Q7E8Z
[2011/11/08 19:06:06 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\JDb4m5Q6E8R9TwU
[2011/11/08 18:54:13 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\jDD3onF4am5sJ
[2011/11/08 19:16:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\JddKR9TwC
[2011/11/08 18:27:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\JddWWK77fRLgTqj
[2011/11/08 19:22:20 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\jDonF4m5sJK9XlN
[2011/11/08 19:19:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\jDqigS8cENQB5kG
[2011/11/08 19:04:34 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\JdWK8fL9T
[2011/11/08 19:04:34 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\JdWK8fRL9
[2011/11/08 19:16:15 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\JdZjINAuDbpGQ68
[2011/11/08 18:21:45 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\JeeelIIBrzPy
[2011/11/08 18:56:42 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\jEgZXjUVet
[2011/11/08 19:24:03 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\JelIBtzPcuF69e1
[2011/11/08 19:24:02 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\JelIBtzPNc1v2b4
[2011/11/08 19:09:25 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\JF3pmG5aQ6W8
[2011/11/08 18:53:17 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\jF3ppGGaQH6W7R9
[2011/11/08 18:58:26 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\JGs6EfZTwUlzAu2
[2011/11/08 19:15:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\jH5sQJ7dEg
[2011/11/08 19:20:49 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\jibF3GaQHd
[2011/11/08 19:16:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\JJddKR9Tw
[2011/11/08 19:16:18 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\jjYCwNPci3Gm6Lh
[2011/11/08 18:58:13 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\jK7fEL9gTYVtS3m
[2011/11/08 19:22:54 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\JmG5sQJ6d
[2011/11/08 18:28:32 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\jnFF44amH5
[2011/11/08 18:48:51 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\JNNttxPP0cSibDo
[2011/11/08 19:16:16 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Jo4GQ6KfZTwUlBN
[2011/11/08 18:56:42 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\JPS1vo4msJEgqXU
[2011/11/08 19:18:22 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\jQJ6dWK8fL
[2011/11/08 18:36:59 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\jQJJJ6dWK8
[2011/11/08 18:24:05 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\jQJJJ7dEK8gR9hX
[2011/11/08 19:07:23 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\JqXUlt0Avo4HQd8
[2011/11/08 18:57:10 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\jqYkIOxuSb
[2011/11/08 18:50:29 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\jS11iibD3o
[2011/11/08 18:14:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\jssQQJ6ddK8fR9T
[2011/11/08 18:58:29 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\jt0c1vDo4Hs7Egq
[2011/11/08 18:49:15 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\jTTTXqqjYC
[2011/11/08 19:05:13 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\jUCIzyAviFn5Hd7
[2011/11/08 18:58:30 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Jv2onFp5Q7K9jeB
[2011/11/08 18:58:30 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\JvD2onFp5Jd8ZYj
[2011/11/08 18:31:09 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\jVeellIBtPNyA1v
[2011/11/08 18:56:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\JVlOxySv4
[2011/11/08 19:20:38 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\jwjUVelIBzNc1v2
[2011/11/08 18:59:11 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\JwkIVrlONPuS
[2011/11/08 19:22:32 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\JxA0ubGdLjVt
[2011/11/08 19:22:31 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\JxA0uSbp5HWf
[2011/11/08 19:23:51 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\jxP0ucS1i3
[2011/11/08 19:20:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\JXUeOtPy1
[2011/11/08 18:56:16 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\jXUkrNAvi3GQd7L
[2011/11/08 19:22:27 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\jYCekVrzOt0c2
[2011/11/08 19:08:08 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\JyxA1uSo3
[2011/11/08 18:20:39 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\jZZqqjYYCwIVrON
[2011/11/08 18:39:52 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\JZZZqhhYCwkUrlB
[2011/11/08 18:52:54 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\K00ucS2ibDpn4Q6
[2011/11/08 18:38:00 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\k00uucS11iD3oGa
[2011/11/08 18:40:45 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\k11iibDD3on
[2011/11/08 18:59:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\k1ib34ms7EgqCUl
[2011/11/08 18:59:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\k1iDo4HWfLThwUl
[2011/11/08 19:16:15 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\K1oHdZjINAuDbpG
[2011/11/08 19:24:43 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\k2aRCyiQLCtiQLw
[2011/11/08 18:17:01 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\k33oonG44mH6sJf
[2011/11/08 19:20:22 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\K4amH6sWJfLgZYk
[2011/11/08 19:22:20 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\K4pmH5sQJd
[2011/11/08 19:21:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\k5sQJK8gRhweItP
[2011/11/08 18:42:37 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\K888gTTZqhYCkUr
[2011/11/08 19:06:08 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\k99gqYwIrOtPc1b
[2011/11/08 18:46:59 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\K99gTZqqjYwkIrl
[2011/11/08 19:16:16 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\k9XjeBzx1voFpGQ
[2011/11/08 18:11:25 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\KaaamHH6sW
[2011/11/08 18:26:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\KaaammH5sWJ7ELg
[2011/11/08 19:06:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\kbD3pnG47gjCIl
[2011/11/08 19:06:46 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\kbD3pnG4HWf9Tj
[2011/11/08 19:06:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\kbD3pnG4KEgqCI
[2011/11/08 18:12:58 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\KBtttxP0yc
[2011/11/08 19:24:50 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Kc3m7gCl0v4W8Ye
[2011/11/08 19:20:19 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Kd8ZTjeBPy
[2011/11/08 18:37:56 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\kDD33onFFamH5W
[2011/11/08 18:36:15 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\KDDD2oobF4pG5QJ
[2011/11/08 18:15:33 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\KEEEL88gTZqYCkU
[2011/11/08 19:19:41 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\KeIrzPNyx1vb3G6
[2011/11/08 18:58:59 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\kEK8gRZ9hwUltN
[2011/11/08 19:19:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\KelIBrzPNx1v2Fm
[2011/11/08 19:19:41 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\KelIBrzPNx1vo3G
[2011/11/08 19:18:03 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\kelIBtPcuDbp5Qd
[2011/11/08 18:23:45 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\KFF44pmmH5sJ7EK
[2011/11/08 19:06:17 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\KfRgqYkIrNxu2
[2011/11/08 18:14:33 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\kGGG5aaQH6dW7fL
[2011/11/08 19:19:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\kgR9hYwjUBPcu2
[2011/11/08 18:31:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\KgTTTXqjYCekIrO
[2011/11/08 18:56:15 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\KhwCelzNyAvo3Ga
[2011/11/08 19:21:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\KhYXkelOBzy1vFp
[2011/11/08 19:19:41 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\KIBrPNyxAuo3GQd
[2011/11/08 18:18:01 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\KJ66ddEK8fRZ9Tw
[2011/11/08 19:19:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\kJ6dEK8fRhXjCIr
[2011/11/08 18:48:05 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\kjjUUCellIrzPyx
[2011/11/08 19:08:10 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\KjVx2nHfZkVOxS3
[2011/11/08 18:57:58 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\kjYCekIVzNAu2bp
[2011/11/08 19:06:52 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\KKf9ZYkrlNx0Si3
[2011/11/08 19:24:53 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\KkIVrzONtA
[2011/11/08 18:53:13 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\KKK7fEL9gZqjCkV
[2011/11/08 18:15:19 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\kkUUVVelOBtzPy
[2011/11/08 19:19:01 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\klIBtzPcu2Fm5Jd
[2011/11/08 19:19:00 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\klIBtzPNyAuDoFp
[2011/11/08 18:25:21 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\KlOONNtxP0uc1iD
[2011/11/08 18:37:31 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\KmmHH5sWWJdELgZ
[2011/11/08 18:56:57 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\KnFEZXlP12mJg
[2011/11/08 18:56:46 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\knG4a6W79ZjwIl
[2011/11/08 18:58:33 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\KNPc1Dna6J
[2011/11/08 19:19:18 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\KnX2RcU3TuKzGj1
[2011/11/08 19:18:23 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\kob3pmaQJdKfLhq
[2011/11/08 18:14:44 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\kOOONttxP0uc1iD
[2011/11/08 19:00:15 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\kOtPySDn4Hs
[2011/11/08 18:23:38 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\kppnnG55aQHdW7f
[2011/11/08 19:19:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\kQJ6dEK8fZhXjCI
[2011/11/08 19:06:16 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\KR9hXUlrNAuSbpG
[2011/11/08 18:59:15 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\krONyxAuSip
[2011/11/08 19:08:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\KRZqhYXwkVlBzy1
[2011/11/08 19:16:41 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\kTeBrzONA2Q
[2011/11/08 18:48:21 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\KUUCCekIIrzONx0
[2011/11/08 18:46:35 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\kuuccS1iiD3on4m
[2011/11/08 18:22:10 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\KUUUCeekIBrzNyA
[2011/11/08 18:51:13 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\kvDD22onF4p
[2011/11/08 19:05:03 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\KvSSoFp5Qd8R9
[2011/11/08 18:44:23 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\KVVrrzONtx
[2011/11/08 19:08:13 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\KW89XUrx2p
[2011/11/08 18:25:05 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\KWWKK7fRL9gTqjC
[2011/11/08 18:41:33 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\kXXqqjYCekI
[2011/11/08 18:59:37 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\KYkeOPy1v2Fms
[2011/11/08 18:43:28 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\kZ99hhTXwjUClIr
[2011/11/08 19:08:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\KZqhYXwkUeOtPc1
[2011/11/08 18:22:21 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\L00uucSS1iD3nGa
[2011/11/08 19:18:28 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\l1HRlus9ISa9rid
[2011/11/08 18:59:37 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\L2npHs7EgZh
[2011/11/08 19:18:21 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\l48V0osKhVtP
[2011/11/08 18:58:56 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\l5aHdWK7R
[2011/11/08 18:57:48 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\L5dKRhXUeIzyAvi
[2011/11/08 18:58:37 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\L67LqeIzNAuiDn4
[2011/11/08 19:21:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\L7dEK8gRZhX
[2011/11/08 19:24:53 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\L7fRL9gTXjCkVzN
[2011/11/08 19:20:38 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\L8gRZ9hYXjV
[2011/11/08 19:17:06 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\l9hTqCkrNAviFn5
[2011/11/08 19:17:06 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\l9hTqUkrNxu2Fn5
[2011/11/08 19:20:00 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\l9jlPAS356fhjkO
[2011/11/08 18:42:41 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\lA00uucS2
[2011/11/08 18:59:15 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\LA0uvS2ibnaHd7
[2011/11/08 19:08:08 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\lA1u2Fp5JW8L
[2011/11/08 19:08:08 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\lA1u2Fp5Qd8X
[2011/11/08 19:08:08 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\lA1u2FpQdLqe
[2011/11/08 18:46:39 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\LAA00uvvS2iF3nG
[2011/11/08 18:56:46 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\LaHs7LgqCIltc3m
[2011/11/08 18:12:08 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\lbbbD33pnG4QHsW
[2011/11/08 19:21:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\lBtzPNycAuDoFGR
[2011/11/08 19:24:26 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\lCDqiEOnd
[2011/11/08 19:17:09 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ld8R9TjeB
[2011/11/08 18:30:29 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\lddEEK8ggR9h
[2011/11/08 19:21:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\LdKgRZhXwVl
[2011/11/08 19:18:09 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ldWK8f9hTjeBOxu
[2011/11/08 19:18:09 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ldWK8fRL9TjeBOx
[2010/12/26 14:48:49 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Leadertech
[2011/11/08 18:15:44 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\LeeelOOBtzP
[2011/11/08 19:05:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\LEK8ZhwUlBzyAu2
[2011/11/08 18:14:30 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\lGGG44amH
[2011/11/08 19:24:32 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\LgXlNv4Q8Tez1b5
[2011/11/08 19:24:29 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\LH6sWK7L9jwVNu
[2011/11/08 18:42:19 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\lhhYYXwjjVelItP
[2011/11/08 18:16:08 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\lhYYYXwkUVelOtP
[2011/11/08 18:57:58 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\LIVrNAu2DnQ
[2011/11/08 19:18:08 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\LjUeBPxAu2FpGa
[2011/11/08 19:09:03 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\LK7fRLgqYkrOtA
[2011/11/08 18:28:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\LkkkUVVrlOBtP0c
[2011/11/08 19:22:55 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\LlIBrzNyx1v23ma
[2011/11/08 19:22:55 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\LlIBzA1uv2FmaJW
[2011/11/08 19:21:59 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\lN8xWznqSfrG8BF
[2011/11/08 19:16:42 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\LNAc2Dna6Kf9ZY
[2011/11/08 18:59:42 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Lo4HsJEg9YwVIt
[2011/11/08 19:22:45 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\LobF3pmG5Q6
[2011/11/08 19:22:45 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\LobF3pmG5QK
[2011/07/01 19:45:08 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\LolClient
[2011/11/08 19:07:33 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\LP2sgUP2ms6
[2011/11/08 18:56:42 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\LpmHQ7dEKZhXjVl
[2011/11/08 18:43:16 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\LPP00yccS1iD3nF
[2011/11/08 19:20:21 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\LPuc1ibD3n4m6W
[2011/11/08 18:52:43 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\lqqjUCekIrzOyAu
[2011/11/08 18:26:43 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\LrrllONNtx0uc1
[2011/11/08 18:57:50 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\LSi3na6JfLThCUl
[2011/11/08 18:43:20 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\lsWWKK7fE
[2011/11/08 19:06:59 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Lt0Avo4HQ7K
[2011/11/08 18:57:00 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\lTqYkrOxu2Dna6K
[2011/11/08 18:17:11 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\LtttzPP0ycA
[2011/11/08 18:29:15 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\LTZZqqhYCwkUrlB
[2011/11/08 19:22:49 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\lU0osgU0oQZV
[2011/11/08 19:22:45 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\lUCelIBrzNAuSoF
[2011/11/08 18:36:43 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\LUUUVeelIBtzNyA
[2011/11/08 18:13:43 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\LuuuvSS2obF
[2011/11/08 18:27:28 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\lUUVVrlOBtxP
[2011/11/08 19:16:45 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\LVeBPcu2b4G
[2011/11/08 19:20:44 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\lvGKwrvGK
[2011/11/08 18:35:43 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\LVrrllONtxP0cSi
[2011/11/08 18:11:42 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\lvvvS22ib
[2011/11/08 18:10:32 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\LxPPP0ycS1ivDoF
[2011/11/08 19:08:07 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\LYrPiFsLhVz1n5E
[2011/11/08 18:40:19 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\lzOONNyxA0uv2iF
[2011/11/08 18:16:33 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\m1iivvD2on
[2011/11/08 18:41:11 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\m222onnF4pmHsQ7
[2011/11/08 18:26:28 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\m555aQQH6d
[2011/11/08 18:56:14 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\m5JE8RYjeBPcu2F
[2011/11/08 19:18:09 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\m9hTjeBOxu2nH9e
[2011/11/08 18:38:31 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\mBBBtzzPNyc1uD2
[2011/11/08 18:43:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\mDD33onGG4mH6W7
[2011/11/08 18:59:59 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\mdK8fLhqCkBOy0v
[2011/11/08 18:50:09 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\mffEEL8ggTqhY
[2011/11/08 19:22:30 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\mG5JEf9XUlrNx
[2011/11/08 18:36:27 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\mGGG4aaQH6sW7
[2011/11/08 18:49:35 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\mgTTTZqhYCwkU
[2011/11/08 18:22:54 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\mjjjUCeekI
[2011/11/08 19:17:38 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\mjUVelIBtPyAuDo
[2011/11/08 19:05:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\mK8ZhwUlBzyAu2b
[2011/11/08 19:05:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\mKf9TjCIrNAu2b3
[2011/11/08 19:20:43 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\mmLXB1pEYI146hl
[2011/11/08 19:08:11 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\mn4pH5QJ7KgZX
[2011/11/08 19:08:11 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\mnF4m5QJ7E8R9
[2011/11/08 18:37:27 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\mnnnF44mH5sJd
[2011/11/08 18:22:42 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\mNNyycAA1uv2oF4
[2011/11/08 19:22:45 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\mPNyA1uvSoFpGad
[2012/01/20 23:02:28 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Mumble
[2011/11/08 18:13:54 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\mUUCCekIIBzONx0
[2011/11/08 18:49:31 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\mwkkVeelOB
[2011/11/08 19:07:00 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\mXjUCeBzyA
[2011/11/08 19:06:52 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\mxP0uc1ib3n4m6W
[2011/11/08 19:07:00 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\mXqjUCIzyu
[2011/11/08 19:19:00 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\mXwjUVelItPcu2F
[2011/11/08 19:19:00 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\mXwjUVelItPy1Db
[2011/11/08 18:52:19 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\n0uccS2iD
[2011/11/08 18:38:58 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\n333pnnG4
[2011/11/08 18:20:32 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\N55aaQJJ6dW8fL9
[2011/11/08 18:58:56 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\N5aHdWK7RgX
[2011/11/08 18:58:56 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\N5aQH6dWKRg
[2011/11/08 18:58:56 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\N5H6dWK7Rgq
[2011/11/08 18:37:11 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\N6ssWJJ7fL8gZqY
[2011/11/08 19:07:54 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\nA0uvS2bFn56Kf9
[2011/11/08 19:07:54 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\nA0vS2ibFpGaJW9
[2011/11/08 18:59:58 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\NA1uvS2ob3m56W8
[2011/11/08 18:32:23 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\NaaQQH6ddW7fR9g
[2011/11/08 19:18:03 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\nAvo4GQd8ZhwUlr
[2011/11/08 18:56:56 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\nb3Ga6s7LThCUrB
[2011/11/08 18:32:27 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\NbbFF3ppmG5QJdW
[2011/11/08 19:05:51 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\nbF4pmG5sJE8
[2011/11/08 18:57:35 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Nbo4sLhVx1om7gX
[2011/11/08 19:00:02 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\NBtPc1uv2bm
[2011/11/08 19:18:02 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\nD2onF45JEg9YwU
[2011/11/08 18:33:34 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\nddEEK8gRZ9h
[2011/11/08 19:15:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\NdEL8gRqXUltPy1
[2011/11/08 19:15:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\NdL8gRhwUltPyAv
[2011/11/08 19:08:56 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\neBPxu2F4GQd8ZT
[2011/11/08 18:41:48 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\NEEEL8gTZhYCkUr
[2011/11/08 19:21:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\nEK8gRZhXjVl
[2011/11/08 19:21:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\nEKgRZ9hYwVl
[2011/11/08 18:59:58 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\nelIBzy1Do4Gs6E
[2011/11/08 19:22:06 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\nePuF5dZjBx2
[2011/11/08 19:22:46 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\nF3pmG5aQKRh
[2011/11/08 18:40:15 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\nfEELL9gTZqj
[2011/11/08 18:25:13 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\NGG55sQQJ6dK8R
[2011/11/08 18:56:56 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\nGs7LThwUlBPy1v
[2011/11/08 19:21:21 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\NIiKI3ENaqyHYc5
[2011/11/08 19:22:20 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\NJ7dE89wIyD4Q8
[2011/11/08 18:56:43 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\NjUVetA4dTBAoGd
[2011/11/08 19:21:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\nKgRZhXwjVlB
[2011/11/08 18:41:56 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\nkkIIBrrzONxAuv
[2011/11/08 18:34:56 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\nkUUVVelOBtz0yA
[2011/11/08 19:07:34 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\nL9hTXjeB
[2011/11/08 19:07:34 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\nL9hTXqjU
[2011/11/08 19:07:34 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\nL9hTXUIz
[2011/11/08 18:12:29 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\nlOOBBtzP0yc1iD
[2011/11/08 18:43:59 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\NlOOONtxP0u
[2011/11/08 18:35:15 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\NmHH55sWJ7dE8g
[2011/11/08 18:42:53 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\NmmHH5sQQ7d
[2011/11/08 18:48:32 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\NmmHH6sWWJfELgT
[2011/11/08 18:10:04 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\NmmmH55sQJ7dKgZ
[2011/11/08 19:22:42 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\NNFWjxnRIca9IS
[2011/11/08 19:18:34 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\NnG5aQH6dKfLgXY
[2011/11/08 18:20:04 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\nNNttxxA0uc2iD3
[2011/11/08 18:34:21 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\nOONNtSn4HJg
[2011/11/08 18:56:57 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\nP0y1vonFms7gXl
[2011/11/08 19:23:56 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\nPba7hVyn
[2011/11/08 19:04:31 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\npW9YrxDaKgCrP1
[2011/11/08 18:20:18 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\NqjjjUCekIBrzNx
[2011/11/08 18:35:27 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\NrzzOONyxA0uS2b
[2011/11/08 19:04:39 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\NS2ibF3p5Qd7Lg
[2011/11/08 18:19:01 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\nSSS22ibD
[2011/11/08 19:24:29 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\nsWK7L9gjwVNuDG
[2011/11/08 19:17:51 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\nTIA3HLCNS47hOi
[2011/11/08 19:17:51 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\nTkA3HLwxD6gU0o
[2011/11/08 18:18:04 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\NTTZZqhhYCwUVlO
[2011/11/08 18:27:02 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\NTXXqqjYCekIrzN
[2011/11/08 18:56:20 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\NUeIrNAu2b3GQ6
[2011/11/08 18:47:38 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\nuuucSS1ibDonGa
[2011/11/08 18:58:11 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\nUv7VDElD6wPSpJ
[2011/11/08 18:59:58 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\nVelIBPcuDo4ms6
[2011/11/08 18:59:58 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\nVelIBzNAuDopGQ
[2011/11/08 19:08:49 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\NWK7fE9ZjwOuDGa
[2011/11/08 18:14:05 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\NwwkkIVrrONtx0
[2011/11/08 18:16:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\nXXwwkUUV
[2011/11/08 19:23:52 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ny1Dn5EZkBcDnpH
[2011/11/08 18:09:53 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\NYYCCwkkUVrOBxP
[2011/11/08 18:59:34 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\NzONyxA0uSiFpGa

Continued in next post ...
 
#10 ·
Hi 07tcbsp,

Thank you for the logs. :)

I understand that the OTL.txt log was too big to post. I'm going to post it to this thread in multiple segments so that Teachers and others at my site can review that information.

You do not need to take any action at this point. I will analyze the logs and post back a new set of instructions shortly.

mambass

Continued from previous post ...

[2011/11/08 19:18:34 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\o0Si3naHWfLTjwI
[2011/11/08 19:19:37 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\o0vi3GQd7LTjCI
[2011/11/08 19:06:27 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\o0vSb3naHW7LTqC
[2011/11/08 18:09:35 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\o111uvvD2obFpm
[2011/11/08 18:40:34 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\O33ppnGG5aQ6dK7
[2011/11/08 19:06:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\o47gjCIlOxu1Dna
[2011/11/08 19:06:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\o4aQH6sWKf9TjCI
[2011/11/08 19:06:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\o4aQH6sWKLgqCIx
[2011/11/08 18:58:56 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\O5aHdWK7Rg
[2011/11/08 18:47:07 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\O666dWWK8f
[2011/11/08 18:27:24 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\o888gRRZ9hYwjU
[2011/11/08 19:06:26 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\O8ZTjeBPxu2FpGQ
[2011/11/08 18:29:27 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\O99hhTXXqjCekBr
[2011/11/08 18:28:28 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\O99hhYXwwjVel
[2011/11/08 19:06:16 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\o9hXUlrNAuSbpGa
[2011/11/08 18:35:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\oAAA0uvSS2bF3nG
[2011/11/08 18:28:24 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\oaaaQJJ6dWK8RL
[2011/11/08 18:31:05 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ObbbF3mGaQ
[2011/11/08 18:13:01 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\OccSS2iibD
[2011/11/08 19:17:06 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\OCrx2pQ7TerxSDn
[2011/11/08 19:08:19 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ocS2bDpnGaH
[2011/11/08 19:05:33 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Od8LTjeBOy0SbpG
[2011/11/08 18:48:13 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ODD33onnG4aH6WJ
[2011/11/08 19:21:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\odEK8gRZhXj
[2011/11/08 19:21:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\odKgRZhXwVl
[2011/11/08 19:21:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\oEK8gRZhXjV
[2011/11/08 19:17:34 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\OeybJ9ex2m6Rq
[2011/11/08 18:16:01 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\offfRLL9gTXjYek
[2011/11/08 18:25:58 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\offfRLL9hTXqUCk
[2011/11/08 19:00:17 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\OG5QJ6dEKfZhwUe
[2011/11/08 19:08:07 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\og9XUVelItPyAuD
[2011/11/08 19:24:29 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ogXqjYekrNx0ciD
[2011/11/08 18:18:29 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\OhhYYXwjUV
[2011/11/08 19:22:06 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ohwUeIzy1Db
[2011/11/08 18:56:56 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\oib3Ga6s7LThCU
[2011/11/08 19:22:55 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\oIBrzNyxAuSom9O
[2011/11/08 19:22:55 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\oIBzA1uvSoFmaJW
[2011/11/08 19:06:29 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\oiDnaHWd8ZYkVOt
[2011/11/08 19:24:53 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\oIVrzONtx0c
[2011/11/08 19:21:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\oKgRZhXwjVl
[2011/11/08 18:58:29 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\olBP0ycA1v2np5
[2011/11/08 19:18:01 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\oon4HWJdLRqXklB
[2011/11/08 18:23:01 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\oOOOBttzP0yA1vD
[2011/08/11 20:28:48 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\OpenCandy
[2011/05/19 21:03:33 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\OpenOffice.org
[2011/11/08 18:20:46 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\OPPPNyycA1uv2oF
[2011/11/08 18:34:31 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\oqqqYCCwkUVlBtP
[2011/11/08 19:06:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\oQs7LgqCIxci3GH
[2011/11/08 19:08:19 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\oS2bDpnG4Qs
[2011/11/08 19:17:57 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\os7KR9YjUIzy1Db
[2011/11/08 19:19:37 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\oSpHfTeIzt0SiD
[2011/11/08 18:58:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\OSpJRqINv3Q7TeI
[2011/11/08 18:24:17 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\oSS22ibbD3nG4Q
[2011/11/08 19:19:27 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\OsWK7fEL9ZjwIrO
[2011/11/08 19:21:11 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Otyc1Dn4HJd8ZhX
[2011/11/08 19:23:38 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Ov7VvQw1JU
[2011/11/08 18:58:59 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ovaJ8qUBciFsdKg
[2011/11/08 18:13:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ovDD22onF4pm5sJ
[2011/11/08 19:24:27 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\OvoF3pmG5Q68R
[2011/11/08 18:57:58 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\oVrNAu2DnQs
[2011/11/08 18:51:02 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\oVVrrllONtx0uS1
[2011/11/08 19:19:17 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\OWxLyE07I9v8O
[2011/11/08 19:24:29 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\OxA0ucS2iDpGaHs
[2011/11/08 19:24:29 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\OxA0uS2bDpGaHsK
[2011/11/08 19:24:29 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\OxA0uS2ib3n4Q6W
[2011/11/08 19:22:42 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\OxaXAQqAQq0Hh
[2011/11/08 19:08:54 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\oxPci3FmsJd8Zhw
[2011/11/08 18:17:54 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\OxxxP00ucS1bD
[2011/11/08 19:22:45 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\oYPFKUPvFmsJE8
[2011/11/08 18:57:51 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\OYXwUltNAv2Fp5J
[2011/11/08 18:57:51 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\OYXwVltNAv2Fms6
[2011/11/08 18:11:11 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\oYYXXwkkUVl
[2011/11/08 19:06:16 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\oZhwCIrNAuoFm5Q
[2011/11/08 18:52:58 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ozOONyxAuvS
[2011/11/08 19:08:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\oZqhYXwkUeOtP1D
[2011/11/08 19:08:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\oZqhYXwkUeOtPc1
[2011/11/08 19:08:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\oZqhYXwkUeOtPy1
[2011/11/08 18:43:01 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ozzOONttx0uc2i
[2011/11/08 18:15:51 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ozzzOONyxA0uS2b
[2011/11/08 18:50:59 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\P11iivD3onF4aHs
[2011/11/08 18:51:52 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\P4aamH5sJ7dE8Rq
[2011/11/08 19:24:29 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\p6sWK7fELgZjCkV
[2011/11/08 18:45:09 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\P777dEEL8gRqhXw
[2011/11/08 19:05:25 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\P7fEL9ZjCIrOxu1
[2011/11/08 19:22:38 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\p9xJeFgNp9On8Bo
[2011/11/08 18:44:42 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\pA00uuvS2ibF
[2011/11/08 18:45:21 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\PAA0uuvS2ibF3n5
[2011/11/08 19:24:28 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\paQdK7R9XjCkrOt
[2011/11/08 19:16:16 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\PAuo4GQ6KfZTwUl
[2011/11/08 18:17:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\pBBttzP00cA1iDo
[2011/03/15 18:26:25 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\PCDr
[2011/11/08 19:07:55 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Pci3Gas7LTj
[2011/11/08 18:58:59 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\PciFsdK8gZhwUl
[2011/11/08 18:53:53 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\pCwkkUVrO
[2011/11/08 18:48:44 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\pddEEK8ffR9hTwj
[2011/11/08 18:58:59 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\pdEL8gRZqUBciFs
[2011/11/08 19:18:02 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\PF4pHJEgZYwUeIt
[2011/11/08 18:58:35 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\pf9TjCIrNxuSbpG
[2011/11/08 18:19:04 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\PFFF3ppmG5aJ6dK
[2011/11/08 19:04:54 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\pFma6KRhq
[2011/11/08 18:27:19 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\pggRRZZ9hYXj
[2011/11/08 18:09:50 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\PhhhYXXwjUVeIBz
[2011/11/08 18:13:58 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\PIBBttzPNycA1v
[2011/11/08 19:05:14 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\PIrOx0ci3GaHs7L
[2011/11/08 18:58:57 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\pjekIVOxuSinaHs
[2011/11/08 19:05:13 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\PjUCkrNxu2Fna6W
[2011/11/08 18:57:23 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\pkIBrzONy0Sb
[2011/11/08 18:17:04 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\PKK77fRRL9TXqYC
[2011/11/08 18:51:10 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\PlllIBBrzPNxAuv
[2011/11/08 18:52:31 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\PlOOBtxP0cS1v3
[2011/11/08 19:15:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\PmH5sJ7dKg9XUIz
[2011/11/08 19:15:37 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\PmH5sQ7ZhVz12Qf
[2011/11/08 18:49:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\pmmmH55sQJ7dK8R
[2011/11/08 18:28:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\pNttxxP0u
[2011/11/08 19:21:34 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\PNtx0ucS1Dna6JE
[2011/11/08 19:05:51 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\pob4pmG5sJd8
[2011/11/08 19:05:51 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\pobF4pmG5QE8
[2011/11/08 18:18:11 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\PooobbF3pmG5QJd
[2011/11/08 18:11:04 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\POOONNyxA0uv2i
[2011/11/08 18:36:32 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ppnnGG4aQH6sK7E
[2011/11/08 18:43:32 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\pppmmH55sQJdE8g
[2011/11/08 18:15:08 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\pPPP0uucS1ib3oG
[2011/11/08 19:09:03 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\pQH6s7LgqCIlt0S
[2011/11/08 18:12:22 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\PQQHH6ddWKfRLgT
[2011/11/08 18:56:03 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\prBPci3Fms7LRhw
[2011/11/08 19:07:34 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\pRL9hTXUk
[2011/11/08 19:22:03 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\PrlNP0ucSiDoGaH
[2011/11/08 19:22:45 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\przPNyA1uSoFpGa
[2011/11/08 18:44:07 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\PRZZ99hTXwjUelB
[2011/11/08 18:42:04 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\PUVVrrlOBtxPyc1
[2011/11/08 19:20:20 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\PUzuFQRhqCkrNx
[2011/11/08 19:04:39 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\PvS2ibF3p5Qd7L
[2011/11/08 19:22:03 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\pWK7fEL9gqCkVlP
[2011/11/08 19:05:25 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\PWK7fELTjCIrt0c
[2011/11/08 18:48:09 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\pwwwjUUVelIB
[2011/11/08 18:33:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\pxxxP00ucS1b
[2011/11/08 18:35:00 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\PYYYCwwkUVrOBxP
[2011/11/08 18:59:38 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\PZ9hYXwjUtAomJf
[2011/11/08 19:07:34 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\PzNyxu2FmaJWfLh
[2011/11/08 19:07:34 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\PzPNyxAu2Fp5JWf
[2011/11/08 19:07:34 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\PzPNyxuSbp5JWfL
[2011/11/08 18:32:31 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Q222oobF4pmGsQ
[2011/11/08 19:16:39 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\q22o4m5Q7E8R9Yw
[2011/11/08 19:22:31 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Q2Fma6K8fLhXjCk
[2011/11/08 19:16:39 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\q2on4m5Q7E8RhXw
[2011/11/08 18:56:03 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\q2QLVc6gVynJqB2
[2011/11/08 18:57:57 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Q5aQH6dWKfL
[2011/11/08 19:18:01 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\q5WJdEL8gZhX
[2011/11/08 18:35:31 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\q666dEEK8fR9hXw
[2011/11/08 18:42:26 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Q666sWWK7fELgT
[2011/11/08 19:04:34 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Q6dWK8RL9XUeIzN
[2011/11/08 18:56:20 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Q7cWwA5Xy4fwzb6
[2011/11/08 18:23:05 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\q88ggTZZqhYwkVr
[2011/11/08 18:38:23 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\q999gTTXqjYCkIr
[2011/11/08 19:18:22 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\qaQJ6dWK8
[2011/11/08 19:24:29 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\QbD3pnG4aHsKLgZ
[2011/11/08 19:22:45 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\qbF4GQJE8ZTjClB
[2011/11/08 18:53:06 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\QccA1ivD2oF4m5Q
[2011/11/08 18:34:52 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\qccAA1uuvDobFpm
[2011/11/08 18:38:50 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\QccAA1uvD2obFpG
[2011/11/08 18:48:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\QccSS1ivvDon4a
[2011/11/08 18:44:53 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\QDDD3oonG4am6s
[2011/11/08 18:57:46 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\QDWhxoJYtDsZlum
[2011/11/08 19:00:02 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\qeBPci2Fms7K
[2011/11/08 18:31:48 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\qEEKK8ffRZhXwUC
[2011/11/08 19:20:49 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\qGGG5aQ6dWKfR9T
[2011/11/08 19:00:06 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\qhCkVlt0c1v3n4m
[2011/11/08 18:28:04 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\QhhhTXXwjUCeIB
[2011/11/08 19:08:54 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\QHsWJ7fE8TqYwUl
[2011/11/08 18:48:01 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\qiibbF33p
[2011/11/08 18:11:39 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\qIIVVrlOONxP0c1
[2011/11/08 18:52:50 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\QJ7ddLLgRZq
[2011/11/08 18:38:35 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\QJJJ7ddEL8g
[2011/11/08 19:20:49 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\QjjUUCkIIrzOyA
[2011/11/08 19:20:49 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\QjUCCekIBrzNyA
[2011/11/08 19:20:49 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\QjUUCkIIrzONx0
[2011/11/08 18:19:39 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\qkkIIBrrzONxAuv
[2011/11/08 18:18:19 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\qkkUUVrllOtxPyc
[2011/11/08 18:42:57 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\qllOOBttxPycSiv
[2011/11/08 19:15:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\qmH5sJ7dK
[2011/11/08 19:15:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\qmH5sQ7Zh
[2011/11/08 18:57:57 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Qn5aQH6dW7R
[2011/11/08 18:23:13 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\qnnnG55aQH6WK7R
[2011/11/08 19:00:28 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\qNv4QKhCz1b5W9q
[2011/11/08 18:45:32 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\QOOOBttx0ycSiv3
[2011/11/08 19:18:22 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\QPy1vobF3m5Q6W
[2011/11/08 19:06:16 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\qRL9hTXqjCIzy0S
[2011/11/08 18:16:50 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\qrrllONNt
[2011/11/08 19:07:35 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\QS2ibFnG5WfLTje
[2011/11/08 18:33:59 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\qTTXXwjUC
[2011/11/08 19:04:43 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\qTXjUCIrN
[2011/11/08 19:16:38 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\QTYYYCwkUVr
[2011/11/08 19:05:33 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\qu2pQ79XCkrNASb
[2011/11/08 18:50:13 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\QuuucSS2ibD3nGa
[2011/11/08 18:41:45 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\QUUUVeelOBtz0yA
[2011/11/08 18:30:48 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\QUUUVeelOBzP0c1
[2011/11/08 19:19:41 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Quvo3GQd8RhqCrA
[2011/11/08 19:19:41 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\QuvSb3G6RqkNvF5
[2011/11/08 18:56:16 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Qvi3GQd7LTjeIz
[2011/11/08 18:53:29 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\qwkkUVrlO
[2011/11/08 19:22:06 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\qwVIzy1Dbp5Qd8Z
[2011/11/08 18:51:17 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\qWWJJ7fEL8gTZhC
[2011/11/08 18:34:35 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\QwwkkIVrrlNtx01
[2011/11/08 18:14:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\QwwkkUVeeOBtz0c
[2011/11/08 18:49:11 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\qwwkkUVVrlOtx0y
[2011/11/08 18:43:05 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\QxAA00uvS2ibFpG
[2011/11/08 18:56:16 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\qXUkrNAvi3GQd7L
[2011/11/08 18:13:22 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\qyyccS11i
[2011/11/08 19:05:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\QzPNyAvo3m5JKR9
[2011/11/08 19:05:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\QzPNyAvo3m5Q68R
[2011/11/08 19:07:34 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\qzPNyxAu2Fp5JWf
[2011/11/08 18:25:33 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\qZZ99hTTXwUCeIB
[2011/11/08 18:30:44 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\QzzzPNNycA1vDo
[2011/11/08 18:40:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\r000yccS1iv3oF4
[2011/11/08 19:20:21 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\R0uc1iD3oGaHsJ
[2011/11/08 19:05:54 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\R1Dna6JEgqCUlt0
[2011/11/08 19:06:46 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\R2ip5Qd7LTjeVOx
[2011/11/08 18:59:37 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\R2npHs7EgZh
[2011/11/08 18:26:21 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\R555sQQJ7dEKgR9
[2011/11/08 18:28:39 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\r55aaQH6dWK7fLg
[2011/11/08 19:20:39 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\R5sQ6RXezA2mJfT
[2011/11/08 19:05:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\R6EKf9TjClrNAvo
[2011/11/08 18:39:56 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\r9ggTTXqjYCeIVz
[2011/11/08 18:51:06 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\RaQQQH6dWK7fR9
[2011/11/08 18:17:50 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\rBBBttzP0ycAiv2
[2011/11/08 18:30:24 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\RBBBtzzPNyc1uv2
[2011/11/08 19:15:19 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\rbD3p4QHs79Z
[2011/11/08 18:59:37 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\RD2npHs7EgZ
[2011/11/08 18:56:10 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\RdWK7fRL9Tq
[2011/11/08 18:14:01 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\RFFF4aamH5sW7dL
[2011/11/08 18:11:07 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\RG55ssQJ6dEKfR9
[2011/11/08 18:39:17 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\RGG44aQH6sWK7E9
[2011/11/08 18:56:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\RGsfZYkVOxy1DnH
[2011/11/08 19:04:50 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\rINAvFaKg
[2011/11/08 18:49:19 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\rjjjUUeekIBzOyx
[2011/11/08 18:11:14 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\rkkIIVrll
[2011/11/08 18:24:09 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\rkkUUVellBtzPyA
[2011/11/08 19:05:03 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\RllIBrryxuSb3ad
[2011/11/08 19:15:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\RlOBtzP0yv2
[2011/11/08 18:24:49 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\rmmHH5ssQJ7EKgR
[2011/11/08 18:41:07 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\rNNNyxxA1uv2ob3
[2011/11/08 19:07:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\rNxuSiDGm
[2011/11/08 19:21:11 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\rOBtyc1Dn4HJd8Z
[2011/11/08 18:59:17 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ROBtzP0yc1v
[2011/11/08 18:56:20 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\RONyx0Sbp5Q6W7
[2011/11/08 18:23:53 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\rQQQH66sWK7fL9T
[2011/11/08 18:53:57 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\RRL99TTqjYC
[2011/11/08 18:37:35 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\RrrrlOONtxP0cSi
[2011/11/08 19:08:51 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\rRwIyDpJf
[2011/11/08 19:00:05 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\rrx2n6fTezASpH7
[2011/11/08 18:11:32 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\RRZZ99hTXwjUClB
[2011/11/08 18:56:55 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\rsKfL9TqC
[2011/11/08 18:36:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\RTTTZqqhCUr
[2011/11/08 19:00:29 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\RWf9XqCIzt0Sbp
[2011/11/08 19:16:53 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\rwkVOxuD6gU0
[2011/11/08 19:08:11 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\rwUeBz0ci2n4m5Q
[2011/11/08 18:36:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\rWWKKfRLL9TX
[2011/11/08 18:58:18 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\rXqCIrOtAc2DaWL
[2011/11/08 18:22:06 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\rxxAA0uucS2bDpn
[2011/11/08 18:59:15 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\RyxAuS2ibp5HW7
[2011/11/08 19:24:28 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\RYyp8eu59BSQ9Ck
[2011/11/08 18:46:11 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\RYYYCwkkIVrONxP
[2011/11/08 18:24:25 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\RZZ99hTXXwU
[2011/11/08 18:14:23 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\s000uvvS2ib
[2011/11/08 19:20:35 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\s0iGdLqItSpH7T
[2011/11/08 19:15:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\S0yc1D2on4m5JdK
[2011/11/08 19:15:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\S0ycAv2F4m5VIAo
[2011/11/08 19:15:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\S0ycDn4pm5JdKg9
[2011/11/08 18:48:28 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\S0yyccA1ivD2nFp
[2011/11/08 19:06:34 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\s1Do4HWd8ZhwVOz
[2011/11/08 19:06:52 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\S2afjzcG6gktcD4
[2011/11/08 19:06:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\S2ibD3pnG7gjC
[2011/11/08 18:35:24 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\s2iibbD3pnG4QHs
[2011/11/08 19:06:21 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\S2sglvsYzodjx
[2011/11/08 18:37:52 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\S444pmmH5s
[2011/11/08 18:57:42 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\S4J9eyoQRU
[2011/11/08 18:24:13 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\s777fEEL8gTZhYw
[2011/11/08 18:21:19 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\s888gRRZqhYXkUe
[2011/11/08 18:15:58 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\SammHH5sWJ7dL8T
[2011/11/08 19:15:19 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\sbD3pGaHW7LTjwO
[2011/11/08 18:58:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\SbD3pnG4aHsKf
[2011/11/08 18:32:15 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\sCCwwkUUVrlBtP0
[2011/11/08 19:16:14 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\sD3oFms7dLRqYk
[2011/11/08 18:41:29 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\sDDD3oonG4am6sJ
[2011/11/08 19:20:17 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\SdXOiHgrSa
[2011/11/08 19:20:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Se0GLISHZObWYxF
[2011/11/08 18:39:31 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\SeeekIIBrzOyx0u
[2011/11/08 18:40:38 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\SEEKK8ffRZ9TXjU
[2011/11/08 18:27:56 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\sekkIIBrzONyA0v
[2011/11/08 18:10:43 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\sellIIBtzPN
[2011/11/08 18:35:08 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\sffRRL99gTXjYek
[2011/11/08 18:11:00 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\SgggTZZqjY
[2011/11/08 18:41:03 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\SH66ddWK7fRLgTq
[2011/11/08 18:16:29 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\sjjjUCCelIBrPNx
[2011/11/08 19:20:49 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\SkIIBBrzONxAuv2
[2011/11/08 19:20:49 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\SkIIBBrzONyx0uS
[2011/11/08 19:20:49 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\SkIIBrzzNyxAuv2
[2011/11/08 19:20:22 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\sL8gTCkrBPySv3
[2011/11/08 18:57:13 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\sltNADpJZexFJ9U
[2011/11/08 19:18:08 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\smG5aQJ6dKfLhj
[2011/11/08 19:07:15 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\So3GQd8LTjeBOxu
[2011/11/08 18:57:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\sOBtP0ycAiDoFHQ
[2011/11/08 18:57:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\sOBtP0ycAiDop5J
[2011/05/19 20:53:19 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\SoftGrid Client
[2011/11/08 18:20:08 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\soobbF4pmG5sQ6E
[2011/11/08 18:10:35 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\spnnGG4aQH6sK7E
[2011/11/08 19:19:00 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ssQ7dEK8gZhXjVl
[2011/11/08 18:17:22 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\SsQQJJ6dEK
[2011/11/08 18:45:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\sssWWK77fE9gTqj
[2011/11/08 19:06:16 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\sTjUCekIBy0SbpG
[2011/11/08 19:16:39 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Stva7RXety1vn
[2011/11/08 19:06:16 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\sTXUCeIBNx0SiFp
[2011/11/08 19:18:33 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\STXUkBOxAuSb3n5
[2011/11/08 19:16:46 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\su2b3p5QHd7RgqC
[2011/11/08 19:18:03 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\SUVelBtNAvo4GQd
[2011/11/08 18:48:17 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\sVVrrzOONtA0uS2
[2011/11/08 18:37:07 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\SwkkUUVelOBzPyc
[2011/11/08 18:56:51 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\SxP0uSbo4HWf8Th
[2011/11/08 19:08:19 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\SYCwkIVrlNxu1
[2011/11/08 18:51:29 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\SYXXwjUVlIBtPyA
[2011/11/08 19:16:38 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\SYYYCwwkUVrlB
[2011/11/08 19:08:19 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\SzONt0c2Dp4Q6W7
[2011/11/08 19:00:02 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\T2Fms7KRhwVIzy1
[2011/11/08 18:21:34 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\T44ppmHH5sQ7dK8
[2011/11/08 19:19:59 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\T555sQ6dE8R9TwC
[2011/11/08 19:07:58 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\T56EKRZ9TwUeBzN
[2011/11/08 18:38:08 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\T888fRRL9hTqjCk
[2011/11/08 19:08:07 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\t9YjVelIBzNc1v2
[2011/11/08 19:17:00 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\taJW8fLTXj
[2011/11/08 18:56:16 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\TAvi3GQd7LTj
[2011/11/08 18:56:16 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\TAvi3n5Hd7Lg
[2011/11/08 18:22:57 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\TbbbF44pmG5sJ6E
[2011/11/08 19:04:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\TbF3pQ7TeOxu2Dn
[2011/11/08 18:34:26 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\TDDD3oonF4aHsW7
[2011/11/08 19:22:21 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\TdE89wIyD4Q8TeP
[2011/11/08 18:44:27 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\teekIBBrzONxAuv
[2011/11/08 18:32:19 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\TEELL9ggTqjYwkV
[2011/11/08 18:10:00 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\tFF33pmmG5
[2011/11/08 18:18:50 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\tfRRRL9hTXqjUeI
[2011/11/08 18:19:32 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\TgggRZZ9h
[2011/11/08 18:45:43 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\TggRRZ99h
[2011/11/08 19:22:51 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\tGKwzS5fjOS5fjO
[2011/11/08 18:12:54 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\TgRRZZ9hYXwjVeI
[2011/11/08 19:08:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\tgRZ9hYeltNAuDF
[2011/11/08 18:57:51 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\tH5sQ7E8R9YwVlB
[2011/11/08 18:58:13 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\tH6sWK7fE9ZCIrO
[2011/11/08 18:46:51 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\thhYYXwwkUeOBzP
[2011/11/08 19:06:38 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\TibD3aJgCl0v4W8
[2011/10/15 13:15:41 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\TightVNC
[2011/11/08 19:05:13 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\tIrNAu2b3Ga6K
[2011/11/08 19:00:10 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\TIrOx0ciDom6
[2011/11/08 19:05:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\TIrzPNyAvo3m5Q6
[2011/11/08 18:25:17 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\tivvD22onF4pH5Q
[2011/11/08 18:24:41 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\TjjjYCCekIVrONx
[2011/11/08 19:06:50 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\tJW8LTqCIzy0v2F
[2011/11/08 19:06:50 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\tJWfLTjeBOy0v2F
[2011/11/08 18:45:01 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\TkkkIBBrzONxAu2
[2011/11/08 18:29:11 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\tllOOBttzPycAiv
[2011/11/08 19:23:51 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\tlONtxP0uSi3Ga6
[2011/11/08 19:23:51 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\tlONtxP0uSi3nas
[2011/11/08 19:23:51 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\tlONtxP0uSiDna6
[2011/11/08 19:23:51 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\tlONtxP0uSiDnas
[2011/11/08 19:04:39 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\tNAu2b3pmJWfL
[2011/11/08 19:22:44 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\TNDKjtofkcmTOvW
[2011/11/08 19:08:51 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\tnJqlA4dYB1pEhU
[2011/11/08 18:44:15 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\tnnF44amH5sWJdL
[2011/11/08 18:43:24 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\tNNNyxxA0uvSib3
[2011/11/08 18:57:57 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\tNxu2Fma6KRhqCk
[2011/11/08 18:57:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\TOBtP0ycAiDoFHQ
[2011/11/08 19:16:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\TODWYPFEUAmflvG
[2011/11/08 18:19:43 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ToobbF4ppm5s
[2011/12/11 23:31:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\TP
[2011/11/08 19:21:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\TPNycA1uv
[2011/11/08 18:35:51 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\tPPNyyxA1u
[2011/11/08 18:38:27 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\tQQQJ66dWK8fL9T
[2011/11/08 19:22:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\tqtodjypRlva9
[2011/11/08 18:17:08 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\TRRZZ9hTTXjUClI
[2011/11/08 18:59:58 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\TS2o3mG5a
[2011/11/08 18:59:56 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\tS6Cu6qxaq
[2011/11/08 19:06:00 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\TTqCrP1nH
[2011/11/08 18:15:05 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\TttzzP00y
[2011/11/08 19:09:03 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\TtxA0ucS2b3n
[2011/11/08 19:09:03 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\TtxA0uS2iDn4
[2011/11/08 19:24:29 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\TucS2ibD3n4Q6W7
[2011/11/08 18:59:58 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\TuvS2obF3
[2011/11/08 18:52:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\TUVVelOBtP0yAiD
[2011/11/08 18:59:18 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\tvD2obF4msJEf
[2011/11/08 18:35:55 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\tVeellIBtzPNc
[2011/11/08 18:29:39 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\tVrrllONtxP0cSi
[2011/11/08 18:29:54 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\tWWJJ7ddEL8RZ
[2011/11/08 18:44:03 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\tXXqqjUUCekBr
[2011/11/08 18:28:20 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\TxxxA00uc
[2011/11/08 19:08:07 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\TycA1uvD2p5QdKf
[2011/11/08 19:16:37 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\TydBpXuKrGjSKIb
[2011/11/08 19:06:38 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\tYkVOtPuSiD4HWf
[2011/11/08 19:06:38 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\tYVOtPuS1b34Hs7
[2011/11/08 19:24:02 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\tZ9hYXjUVl
[2011/11/08 19:24:53 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\tzONtxA0uSiDn
[2011/11/08 18:12:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\TzPPNNyxAuv2oF3
[2011/11/08 18:56:56 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\TZYwUrBtPySv
[2011/11/08 18:53:49 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\tzzP0ycA1iD2n4m
[2011/11/08 18:52:08 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\TzzPNycA1uD2
[2011/11/08 19:20:38 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\u2obF4pmGs6R
[2011/11/08 19:07:49 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\U6hlNv3QLkua9z
[2011/11/08 18:57:05 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\u6W7LgqCwUlt
[2011/11/08 18:29:07 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\u88ffRZZ9hTw
[2011/11/08 18:57:08 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\U9TjeIrNAv2Fp5Q
[2011/11/08 18:33:51 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\UA00uucS2ibD3n4
[2011/11/08 19:18:33 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\UA0uS2b3pGaHdK
[2011/11/08 18:18:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\UAA00uuvS2i
[2011/11/08 19:18:09 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\uaQJ6dWK8R9TjeB
[2011/02/27 21:17:46 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Ubisoft
[2011/11/08 19:20:49 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\uCCCekIBrzONxAu
[2011/11/08 19:22:27 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\UCekVrzONx0c2D
[2011/11/08 19:06:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\UD3pnG4HWf9TjC
[2011/11/08 19:06:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\UD3pnG4KEgqCIl
[2012/01/28 12:18:58 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\UDC Profiles
[2011/11/08 19:16:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\uddEKfZTw
[2011/11/08 19:16:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\uddKR9TwC
[2011/11/08 19:05:07 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\uE8ZhwVItNAuDo4
[2011/11/08 19:06:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\UeBPy1vo3Ga6Kf9
[2011/11/08 18:56:20 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\uEidUiJj1mfwzb6
[2011/11/08 18:37:43 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\UekkIIBrzONyA0
[2011/11/08 18:57:11 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\uF4asEZwBipQd89
[2011/11/08 18:10:07 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ufffEEL8g
[2011/11/08 19:04:43 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\uG5Q6EfZ9TwUIrP
[2011/11/08 18:16:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\UGGG44amH6s
[2011/11/08 18:56:43 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\UgZXjUVetA4
[2011/11/08 19:06:41 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\UH6Wf9XYkrNAci3
[2011/11/08 18:49:43 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\UhTTXXqjUCekBrO
[2011/11/08 19:18:28 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\uI1F69kA3
[2011/11/08 19:07:35 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\uibF3pnG5
[2011/11/08 19:05:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\UJ6d8RLhTCrx2p
[2011/11/08 19:18:23 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\UJ6dWK8fR9T
[2011/11/08 18:51:37 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\UJ77fEL8gZqhCkV
[2011/11/08 19:24:27 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\UjeBPcu2Fms6Ef9
[2011/11/08 18:13:51 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\uJJ77fEL8gTq
[2011/11/08 18:27:44 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\uJJJ6ddEK8fR9hX
[2011/11/08 18:36:52 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\UjjYCwkIVrlOtPc
[2011/11/08 19:22:55 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\UjUCelIBrNx1v23
[2011/11/08 19:04:34 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\uK8RL9hXU
[2011/11/08 18:59:15 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ukIBrzONy
[2011/11/08 18:49:03 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\uKKK88fRZ9hT
[2011/11/08 19:18:31 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ukPDH8kziFsERhX
[2011/11/08 19:05:32 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\uKR9XUlBzyAS
[2011/11/08 18:56:50 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ukrONx0SbpGQs7L
[2011/11/08 19:08:54 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\UlOBt0Sv3na5Wd
[2011/11/08 19:19:20 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\uLx6I3TuJl4YiKz
[2011/11/08 19:04:56 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\UnF4aHWLZYk
[2011/11/08 19:19:26 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\uNFdTIx2pa6K
[2011/11/08 19:05:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\uNyAvo3mGaJd8Rh
[2011/11/08 19:05:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\uNyAvo3mGaJKR9T
[2011/11/08 18:59:41 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\UoHfZkB0Si3naHs
[2011/11/08 19:05:09 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\UqCIzt0c2Dn
[2011/11/08 18:30:57 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\uqqhhYCCw
[2011/11/08 18:17:15 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\UrlllONtxP0uc1b
[2011/11/08 18:12:26 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\uRRZZ9hhTXjUClI
[2011/11/08 18:20:15 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\UssWWK7ffL9gTqY
[2011/11/08 19:07:27 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\uTCl0v4sW78ZYke
[2011/11/08 18:56:15 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\UTjCelzNyAvo3Ga
[2011/11/08 19:22:54 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\UtPNAu2F4m5Q6E
[2011/11/08 18:25:25 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\UTTXXqjjYCkIVzO
[2011/11/08 19:08:53 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\uTZjwIrNPciD
[2011/11/08 18:56:41 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\uUGkQrnkbWqV
[2011/11/08 18:58:37 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\uuiDn4HKf9qCIrt
[2011/11/08 18:40:23 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\UuuuvSS2obFpm5
[2011/11/08 19:08:08 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\uvD2Fp5JEf9XUer
[2011/11/08 18:31:52 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\uVeellIBtzPNcAu
[2011/11/08 19:09:16 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Uvo4GQd8ZTjeBPx
[2011/11/08 19:21:19 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\uVrNAc2DnaHK
[2011/11/08 18:50:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\uVVVrllONtxPuc1
[2011/11/08 19:17:05 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\uwjUeIrNxu2F
[2011/11/08 19:04:34 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\uWK8RL9hX
[2011/11/08 19:19:37 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Ux0viFpGQd7
[2011/11/08 18:58:22 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\UxA0ucS2ip4
[2011/11/08 19:17:05 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\uXjUlrNAvo3G
[2011/11/08 18:28:55 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\uxxP00ycS1iv3oF
[2011/11/08 18:40:00 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\uXXqqjUCekIBrOy
[2011/11/08 18:40:52 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\UxxxA11uvS2
[2011/11/08 19:05:03 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\UyyxxASoFpa

Continued in next post ...
 
#11 ·
Hi 07tcbsp,

Thank you for the logs. :)

I understand that the OTL.txt log was too big to post. I'm going to post it to this thread in multiple segments so that Teachers and others at my site can review that information.

You do not need to take any action at this point. I will analyze the logs and post back a new set of instructions shortly.

mambass

Continued from previous post ...

[2011/11/08 19:07:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\v0c1Dn4Hs7E8Z
[2011/11/08 19:07:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\v0c1DnaHs7E8Z
[2011/11/08 18:56:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\v0Sb3pna6K
[2011/11/08 18:56:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\v0Sb3pnQs7
[2011/11/08 19:22:32 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\v0ubpHfjO26qt
[2011/11/08 19:22:31 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\v0uS2Fna6WRgq
[2011/11/08 18:57:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\v0ycA1ivDo
[2011/11/08 19:18:21 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\v1oHdZwkUe
[2011/11/08 18:32:38 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\v2iibbD3pnG4QHs
[2011/11/08 19:06:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\V3pnG47gjCIlxu1
[2011/11/08 19:06:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\V3pnG4HWf9TjCIl
[2011/11/08 19:06:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\V3pnG4Qs7LgqCIx
[2011/11/08 19:16:06 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\V4pmsJ6Kf9TjClr
[2011/11/08 18:47:19 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\V777fEEL9gTZjYw
[2011/11/08 18:13:08 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\V77ddEK88gZ9
[2011/11/08 18:15:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\v999hTTXwj
[2011/11/08 18:38:46 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\VaaaQJJ6dWKfL9T
[2011/11/08 19:07:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\vc1Dn4Hs7E8Zh
[2011/11/08 18:12:33 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\vD33oonG4a
[2011/11/08 19:24:42 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\vecnJ9ecF69exF6
[2011/11/08 18:57:59 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\vEgqCIlt0SDoG
[2011/11/08 19:22:27 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\VekVrzONt0c2b4K
[2011/11/08 19:06:14 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Vf8ZqhwVltPci3F
[2011/11/08 19:16:07 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\VGKwIN2pQd8R9Tj
[2011/11/08 18:11:29 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\vH66ddWK7fRLgTq
[2011/11/08 19:08:55 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\VhwVlt0ciDn4HQd
[2011/11/08 19:08:55 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\VhYwVlt0AinHdZj
[2011/11/08 19:07:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\vi3n4Hs7E8RqY
[2011/11/08 18:45:28 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\viiivDD2onF4mHs
[2011/11/08 19:05:16 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\vivD2onF4mQdKg9
[2011/11/08 19:20:21 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\vIVrlONtxu
[2011/11/08 19:05:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\VJ6dWK8fR9TjeBO
[2011/11/08 18:30:06 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\vJJ66dEK8fRZ9Tw
[2011/11/08 19:18:33 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\vK7fRL9TXj
[2011/11/08 19:04:34 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\vK8fRL9hTj
[2011/11/08 19:04:34 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\vK8fRL9hTq
[2011/11/08 18:58:59 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\VK8gRZ9hYwUltNA
[2011/11/08 19:04:34 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\vK8RL9hXjk
[2011/11/08 19:04:34 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\vK8RL9hXUe
[2011/11/08 19:16:43 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\VkUlBPySvoFm5Wd
[2011/11/08 19:08:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\VL8gRZqhYwUeOtP
[2011/11/08 19:08:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\VLgRZqhYXkVlBzc
[2011/11/08 19:08:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\VLgRZqhYXkVlBzy
[2011/11/08 18:21:38 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\VLLL8ggTZqhYwkV
[2011/11/08 18:26:09 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\VlllOONtxP0u
[2011/11/08 19:08:54 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\VlOBt0Sv3na5Wd8
[2011/11/08 19:00:15 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\VlOBtPy1vo4H
[2011/11/08 18:58:38 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Vm6Jf8TYk
[2011/11/08 18:44:11 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\VnnnF44pmH5sJ7E
[2011/11/08 18:44:19 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\VNNNtxxP0ucSib3
[2011/11/08 18:51:56 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\VNNtxP0ucSib3n4
[2011/11/08 19:18:16 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\VNpKCPnJYxoEk0F
[2011/11/08 19:07:41 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\VonG4amH6W7LgZC
[2011/11/08 18:59:15 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\VONyxA0uv2bG
[2011/11/08 18:18:43 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\vooonFF4amH5WJd
[2011/11/08 19:05:41 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\vop5Qd8ZYj
[2011/11/08 19:06:28 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\VOt0Sbo4ms7LTqC
[2011/11/08 19:16:39 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\VP3HEqUOPy1vn4H
[2011/11/08 18:58:13 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Vpn4aQ6sW7E9ZCl
[2011/11/08 18:57:51 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\vRZ9hYXwVltPy
[2011/11/08 19:09:03 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\vS2ibD3nGQ67Lgq
[2011/11/08 19:00:31 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\vSv3na5JE8RhXUl
[2011/11/08 18:47:54 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\vttxxP00ycSiv3o
[2011/11/08 19:22:55 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\VUCelIBrzNx1v23
[2011/11/08 18:59:11 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\vVrlOt0ucboGm
[2011/11/08 19:17:05 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\vwjUeIrNxu2Fm
[2011/11/08 19:16:15 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Vwket0Avo4HQ
[2011/11/08 18:10:39 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\VWWKK8ffRL9TXjU
[2011/11/08 18:24:01 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\vxAA11uvS2
[2011/11/08 18:49:50 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\vxPPP0ycS1ivD
[2011/11/08 19:08:17 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\vXUlrNAvo3ma6Kf
[2011/11/08 19:05:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\vyAvo3mG5JKR9Tj
[2011/11/08 19:05:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\vyAvo3mG5JW8Rhj
[2011/11/08 18:57:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\vycA1ivD2n
[2011/11/08 19:07:16 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\vYkrNAci3GQ6KEg
[2011/11/08 19:20:30 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\VyoQLCybHRCt
[2011/11/08 19:05:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\vyxA1uvS2b3m5Q6
[2011/11/08 18:14:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\VyyxxA0uuv2ib3p
[2011/11/08 19:20:21 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\w0Sb3na6KEgZjCk
[2011/11/08 19:19:37 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\W0vi3GQd7LTj
[2011/11/08 19:07:00 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\W4GQdKRhXUlrNAv
[2011/11/08 19:06:43 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\w4H6s7LgqC
[2011/11/08 18:15:30 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\w55ssQJ77EK8gZh
[2011/11/08 18:45:59 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\w5aaQQJ6dWK8RLh
[2011/11/08 19:05:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\w5aQJ6dWKfLhj
[2011/11/08 19:17:08 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\W6fZklBPyi3Fms7
[2011/11/08 18:29:23 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\W999gTTXqjYCkIr
[2011/11/08 19:16:07 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\wA0uv235Qd79XYe
[2011/11/08 19:16:07 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\wA0uvS2i3GaHWLq
[2011/11/08 19:16:07 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\wA0uvS2ib3GaHWL
[2011/11/08 19:16:07 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\wA0uvS2ibp5Qd79
[2011/11/08 19:16:08 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\wA0uvSi3G6fgCrA
[2011/11/08 19:16:08 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\wA0uvSibFG6fgCr
[2011/11/08 19:22:45 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\wA1uvS2ob3m5Qd8
[2011/11/08 18:31:56 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\WammHH5sW
[2011/11/08 18:34:48 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\wBBBrzzPNyxAuv2
[2011/11/08 18:56:59 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Wbp5Hd7RT
[2011/11/08 19:19:41 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\WCeIBrPNyAuo3GQ
[2011/11/08 19:23:51 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\WcS1ib3Ga6JE
[2011/11/08 18:17:39 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\WDD33onnG
[2011/11/08 18:23:09 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\WEEELL9gTZqjCwI
[2011/11/08 18:56:42 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\wEgZXjUVet
[2011/11/08 19:19:41 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\WeIrzPNyx1vb3G6
[2011/11/08 19:20:38 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\WelIBtzPNc1v2bp
[2011/11/08 19:22:20 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\WF4m5sQJ7
[2011/11/08 19:17:23 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\wF4pmHJEg9XUlBP
[2011/11/08 18:15:37 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\WfffRLL9gTXj
[2011/11/08 19:19:18 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\WFkFh29AdIpLN6V
[2011/11/08 18:50:32 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\wggTTXqjjCekIrO
[2011/11/08 19:17:33 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\WgkximECB3JYzod
[2011/11/08 18:38:54 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\WgTTZqhYYwkU
[2011/11/08 19:22:54 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\WH8wtc2F4
[2011/11/08 18:17:46 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\whhhTTXwjUCeI
[2011/11/08 18:51:25 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\wIBrrPPNxA1vS
[2011/11/08 18:14:26 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\WiivvD22o
[2011/11/08 18:58:29 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\WivD2onFp5Jd8ZY
[2011/11/08 18:50:02 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\wjjjUCCelIBzPyx
[2011/11/08 18:41:25 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\wjUUVVelIB
[2011/11/08 19:23:26 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\wjYCwkIVlxuSbo4
[2011/11/08 19:23:26 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\wjYCwkIVxSo4HW7
[2011/11/08 18:23:34 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\WkkIIVrrl
[2011/11/08 18:39:09 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\wkkkUVVelOBzPyc
[2011/11/08 18:46:27 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\wmmmHH5sQJ
[2011/11/08 19:19:42 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\WNAv2Fna6Kf9XYV
[2011/11/08 19:19:27 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\WnG4aQ6s9jwVlt0
[2011/11/08 19:19:27 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\WnG4aQH6sKfLZjw
[2011/11/08 18:47:23 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\wnnGG5aaQH6WKfR
[2011/11/08 18:42:30 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\WNNNyxxA1
[2011/11/08 19:08:19 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\wONtAu2bDpGaHW7
[2011/11/08 18:28:16 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\WOONNtxxP0uS1bD
[2011/11/08 18:25:09 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\wooobFF3pmG5QJd
[2011/11/08 18:36:11 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\WppmmGG5aQJdW8f
[2011/11/08 18:21:04 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\WPPP0yycS1iv
[2011/11/08 18:27:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\WQQQH66dWK7RLgT
[2011/11/08 18:16:15 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\WS22iibF3pnG5Q6
[2011/11/08 18:56:49 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\WTUeBOx0vi3na6K
[2011/11/08 19:19:28 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\wUVrlOBtx0
[2011/11/08 19:24:03 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\WVelIBtzPcuF69e
[2011/11/08 19:22:55 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\WvS2o3maJWf9XUk
[2011/11/08 18:12:44 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\wvvvDD2onF4pH5Q
[2011/11/08 19:09:00 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\wwOyDaJgXl0v4Q8
[2011/11/08 19:19:37 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Wx0viFpGQd7R
[2011/11/08 18:30:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\wXXqqjYYCeIVzOt
[2011/11/08 18:16:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\wxxxP00ucS1iD3n
[2011/11/08 19:15:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\wycv2F4pm5Q7ZwI
[2011/11/08 18:39:25 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\WZ99hhTXwjUClIr
[2011/11/08 18:53:02 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\wZ9hhTXwUC
[2011/11/08 18:59:37 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\WZqhYXwkUeOt
[2011/11/08 18:37:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\wZZZ9hhTXwjCeIB
[2011/11/08 19:22:54 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\x0cAv2Fms7KRhwV
[2011/11/08 18:35:39 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\x11iivD3nF4amsW
[2011/11/08 19:20:21 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\x1ibDonG4m6W7E8
[2011/11/08 18:25:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\X222onnF4pH5sJ7
[2011/11/08 19:24:52 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\X4sKhVz1b5dZjBy
[2011/11/08 19:05:02 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\X5QdKgZhXwVlB
[2011/11/08 19:07:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\x7fL8gTqhwVOx0
[2011/11/08 18:42:49 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\X88ffRZZ9h
[2011/11/08 18:57:23 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\X8fR9hTXUkBzNxu
[2011/11/08 18:27:59 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\X9hhTTXwjU
[2011/11/08 19:08:43 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\x9rodjyp7e0
[2011/11/08 18:57:38 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\x9XUeBzNAvi3na
[2011/11/08 18:58:29 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\XA1ivD2onp5Jd8Z
[2011/11/08 18:24:53 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\XaammH5ssW
[2011/11/08 19:22:54 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\xcAv2Fms7KRhwVI
[2011/11/08 18:37:23 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\XccAA1uvD2ob4pG
[2011/11/08 19:09:22 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\xci3GQ6KEgZ
[2011/11/08 19:22:28 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\XcS2bp6EqkNc3aW
[2011/11/08 18:43:09 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\XeellIIBrP
[2011/11/08 19:07:58 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\XEfZTXwjUeIrPyA
[2011/11/08 19:05:46 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\XeIzy1Db4m5JE8Z
[2011/11/08 19:05:17 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\XeltN1vbp5JEf9X
[2011/11/08 18:57:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\xeOzy1Dn4HQd8ZY
[2011/11/08 19:08:49 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\XfELgqCIlt0Sboa
[2011/11/08 18:27:08 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\XffEEL9gTZqjCkV
[2011/11/08 18:27:16 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\XFFF3ppmG5aJ6WK
[2011/11/08 18:17:18 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\XFFF3ppnG5
[2011/11/08 18:45:24 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\xfffRRZ9hTX
[2011/11/08 19:19:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\XFms6KRhXUlrN
[2011/11/08 18:54:01 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\xfRLLhhXqjUeIBz
[2011/11/08 19:04:55 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\xGa6W7LgZjCkVOt
[2011/11/08 19:21:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\xgRZhXwjVlBzNc
[2011/11/08 19:04:43 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\xhTXwjUClzAS3ad
[2011/11/08 18:22:13 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\xJ77ddEK8gRZhYw
[2011/11/08 19:07:58 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\XJEfZTXwjIrPyAu
[2011/11/08 18:19:53 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\xJJ66dWKK8RL9Tq
[2011/11/08 18:48:25 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\xJJJ6ddEK8fR9hX
[2011/11/08 19:24:02 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\XjUVelIBtPcu2
[2011/11/08 18:48:55 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\XjYYYCekIVrzNt0
[2011/11/08 18:58:57 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\xkIVOxuSinaHsf9
[2011/11/08 18:16:26 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\xLL99gTZZqYCwIr
[2011/11/08 19:09:03 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\xLTjeVrONx0SiDp
[2011/11/08 18:57:31 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Xo4HQd8ZYw
[2011/11/08 18:57:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\XOBtP0ycAiDoFHQ
[2011/11/08 19:22:31 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\XOyxA0uS2F
[2011/11/08 19:18:08 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\XpmG5aQJ6W8R9
[2011/11/08 19:05:52 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\xpmG5sQ6KRhwCI
[2011/11/08 18:19:18 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\XPPNNyccA1
[2011/11/08 18:54:05 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\xQJJ6dEK8RZ9TwU
[2011/11/08 18:47:57 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\XqqqjYYCwkIrlNt
[2011/11/08 19:23:22 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\xQXxaZN37hBSFW8
[2011/11/08 18:48:59 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\XRL99hTTXqUCeIr
[2011/11/08 18:12:04 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\xrllOOBtxP0yc1
[2011/11/08 19:05:03 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\xrryxAuSoFpad8R
[2011/11/08 19:05:03 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\xrrzPPNyxA1uSoF
[2011/11/08 18:49:39 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\XS22iibD3pnGaQ6
[2011/11/08 18:13:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\xTTTZqqhYCwkVrO
[2011/11/08 19:06:27 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\xtxuSb3GQs7
[2011/11/08 18:41:37 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\xUCCCekIBrzONx0
[2011/11/08 18:30:33 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\xuuucSS1ibD3nGa
[2011/11/08 18:57:03 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\XuvDo4m56Kf9Tje
[2011/11/08 18:45:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\XvDD33onF4am5sJ
[2011/11/08 18:57:09 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\XviFna6Kf9XYk
[2011/11/08 19:05:46 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\XVIzy1Dbp5JEf9X
[2011/11/08 18:10:46 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\XVVVrrlONtxPuc1
[2011/11/08 18:59:38 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\XwjUlNvF5E
[2011/11/08 18:29:35 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\XWWWJ77dEL8gZqY
[2011/11/08 18:42:45 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\XXXqjjUCekIrONx
[2011/11/08 18:46:43 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\xyyxAA1uvS2ob3
[2011/11/08 19:00:28 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\xzAop6RwezA235J
[2011/11/08 18:26:57 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\XzOONNyxA0uv2
[2011/11/08 18:35:04 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\XZZZqjjYCwIVO
[2011/11/08 19:09:19 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\y1n5EqwVOzy1Dn
[2011/11/08 18:32:57 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Y2iiiDD3pnG4Q
[2011/11/08 19:15:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Y5sQ7ZhVz1
[2011/11/08 18:22:17 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Y5ssWJJ7dE
[2011/11/08 18:58:13 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Y7fEL9gTZYVtS3m
[2011/11/08 18:58:13 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Y7fEL9gZClPiGsE
[2011/11/08 18:56:11 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Y82VpCmI5I4kb
[2011/11/08 19:08:57 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\y9TjeBPxu2Fma6K
[2011/11/08 19:24:53 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\YA0ucS2ib3n4Q6K
[2011/11/08 19:24:53 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\YA0ucS2ib3n4Q6W
[2011/11/08 18:51:21 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\YaQQH6dWKfRLgXj
[2011/11/08 18:20:25 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\yBBBtxxP0yc1iv3
[2011/11/08 18:58:29 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\YcA1ivD2oFms7Kg
[2011/11/08 19:06:34 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Yci3Fms7RwOyDpQ
[2011/11/08 19:19:27 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\YD3pnG4aQ6W7E
[2011/11/08 19:04:50 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\YeIVOx0cbp4Hs7L
[2011/11/08 19:24:29 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\YekVrzONtAuSb
[2011/11/08 19:24:28 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\YekVrzONtAuSi
[2011/11/08 18:57:57 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\YF3pn5aQHd
[2011/11/08 19:23:19 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\yf4xjHuYsSX
[2011/11/08 19:08:17 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Yf9XUlrNAvo3ma6
[2011/11/08 19:20:22 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\YfEL8gTCkrBPy
[2011/11/08 18:33:43 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\YfffEEL8gTZqYCk
[2011/11/08 18:58:32 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\yfL9gqCIrNAci3n
[2011/11/08 19:17:54 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\yGa6WfL9XYkrNAu
[2011/11/08 18:56:18 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\YgRZhXkeOz0c1vo
[2011/11/08 18:47:34 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\YHH55sWWJ7EL8RZ
[2011/11/08 18:52:35 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\yHH6sWK7fE9gZjC
[2011/11/08 18:56:54 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\YhlA4dhIus9eyb6
[2011/11/08 19:07:34 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\yhTXUkrNAv2
[2011/11/08 19:18:09 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\yjeBOxu2bp5HWf9
[2011/11/08 19:20:38 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\YjUVelIBtPyAuDo
[2011/11/08 18:59:59 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\yK8fLhqCkBOy0vb
[2011/11/08 19:22:31 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\yK8fRL9hTqUeIr
[2011/11/08 18:26:32 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\YKKK8ffRZ9
[2011/11/08 18:41:00 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ykkkIVVrlONxPuc
[2011/11/08 18:23:25 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ykUUVVrlOBtxPy
[2011/11/08 19:08:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ym5sQJdK8R9YeI
[2011/11/08 19:18:23 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ymaQJ6dWKfLhqCI
[2011/11/08 19:18:23 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ymG5aQJ6dKfLTje
[2011/11/08 19:18:02 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Yn4HQd8ZYwUeOt0
[2011/11/08 18:43:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ynFF44pmH5sQ7dK
[2011/11/08 19:16:07 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\yNyxA0uvS3GaHW7
[2011/11/08 19:16:07 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\yNyxA0uvSi3GaHW
[2011/11/08 18:56:49 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\yo3GaJW8f9TUeBO
[2011/11/08 19:06:33 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Yo4ms7LThwVOt0S
[2011/11/08 18:40:41 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\YOBBBtzP0y
[2011/11/08 18:11:53 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\yOONNtxxA0cS2bD
[2011/11/08 18:32:07 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\yQJJ66dE8fZ9TXj
[2011/11/08 18:32:53 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\yrllOONtxP0uc1
[2011/11/08 19:18:09 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\yTjeBOxu2bp5HWf
[2011/11/08 18:31:20 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ytttxxA0ucS2bDp
[2011/11/08 19:07:34 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\yTXjeBOxuSi
[2011/11/08 18:57:58 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\yTXqjYCekVzNAu2
[2011/11/08 19:07:34 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\yTXUIzy0v2b
[2011/11/08 18:21:23 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ytxxxP0ucS1ib3n
[2011/11/08 19:23:26 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\yTZqjYCwkVlxuSb
[2011/11/08 19:08:09 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\YUeIrOAu2b3Ga
[2011/11/08 19:05:17 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\YVeltP1b5E9UBPx
[2011/11/08 19:24:02 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\YwjUVelIBzcuF
[2011/11/08 18:56:21 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\YWK7fTCVAu2bp
[2011/11/08 18:24:33 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\yWWWJJ7dEL8gZqY
[2011/11/08 18:36:22 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\YwwwkIIVrlOtx0u
[2011/11/08 19:15:19 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\YxA0ucSib3Gas9j
[2011/11/08 18:42:15 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\yxAA11uvS2ob3pG
[2011/11/08 18:56:16 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\YXUkrNAvi3GQd7L
[2011/11/08 18:18:54 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\YYXXwwjUVelItzN
[2011/11/08 19:22:31 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\YzOxA0ubGd
[2011/11/08 18:57:01 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\z1Dn4HWd8R
[2011/11/08 18:22:29 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\z222iibF3p
[2011/11/08 19:18:33 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\z3pn5aQH6W7R9Tj
[2011/11/08 18:47:50 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Z444pmmH5sQJdE8
[2011/11/08 19:24:28 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Z5aQdK7fRgXjCkr
[2011/11/08 18:57:51 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\z5sQJ7dE8R9YwUl
[2011/11/08 18:26:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Z6ddWWK7f
[2011/11/08 18:41:14 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\z88ggTZqhYCwUVl
[2011/11/08 19:19:58 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Z8gRZ9YXw
[2011/11/08 18:49:54 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\z999gTTZqj
[2011/11/08 18:46:15 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Z999gTXXqYCe
[2011/11/08 19:05:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\z9hTjeBOxu2bp5H
[2011/11/08 18:41:52 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\zaaaQHH6sW
[2011/11/08 19:20:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ZafjOSGJqlcoHEZ
[2011/11/08 18:59:58 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\zBPcuDo4ms6KRhw
[2011/11/08 19:22:45 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ZBrzPNyA1v2b3m5
[2011/11/08 19:24:37 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Zc1Dbp5Qd8ZTjeB
[2011/11/08 18:12:51 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\zdddWKK8fRLhTXj
[2011/11/08 18:21:49 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\zddEEK8gRZ
[2011/11/08 19:06:26 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\zE8ZTjeBPxu2FpG
[2011/11/08 18:15:01 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\zeeelIIBrz
[2011/11/08 18:26:06 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\zELL88gRZqhYwkV
[2011/11/08 18:33:10 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ZFF44pmGG5QJ6EK
[2011/11/08 18:15:16 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ZfffRZZ9hTXw
[2011/11/08 18:14:37 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\zfffRZZ9hTXwUCl
[2011/11/08 19:08:14 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\zfhUBx2pHfXez
[2011/11/08 19:00:17 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\zG5QJ6dEKfZhwUe
[2011/11/08 18:28:43 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ZGGG5aaQJ6dK8RL
[2011/11/08 19:19:00 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ZhYXwjUVeItPcu2
[2011/11/08 18:59:58 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\zIBzNAuDopGQ6E8
[2011/11/08 18:59:58 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\zIBzy1Do4Gs6Ef9
[2011/11/08 18:48:36 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ziiibbD3pnG4QHs
[2011/11/08 18:19:15 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\zkkIIBrrzO
[2011/11/08 19:05:47 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\zL9hTjeBOxu2bp5
[2011/11/08 19:09:23 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ZLgTqCUltPci3Fa
[2011/11/08 18:24:45 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ZLLL9hhTXqjCekB
[2011/11/08 18:10:57 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\zmmHH5ssWJ7ELgR
[2011/11/08 19:05:16 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ZnaHWdLgqXUlt0c
[2011/11/08 18:16:57 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ZNNyycAA1uD2oF4
[2011/11/08 18:11:18 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ZNNyyxAA1
[2011/11/08 19:21:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ZNycA1uvD
[2011/11/08 18:21:15 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ZNyyccA1uvD2bFp
[2011/11/08 19:17:14 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\zobF4ms6Ef9XjCI
[2011/11/08 19:24:53 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\zONtxA0uc2b3n
[2011/11/08 19:04:56 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ZONtxP0uc1b3n4m
[2011/11/08 19:04:56 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ZONxuSb3Gm6W7LT
[2011/11/08 19:20:38 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\zPNycA1uv2b4m5Q
[2011/11/08 18:18:15 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ZpppmHH5sQJdEKg
[2011/11/08 19:19:27 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ZqjCekIrztAc2b3
[2011/11/08 18:23:17 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\zQQJ66dEK8fR9hX
[2011/11/08 19:19:16 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\Zr6zHInYDZAKtGe
[2011/11/08 18:44:57 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\zrrzzONttA0uc
[2011/11/08 18:59:38 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\zRZ9hYXwjVlzyAv
[2011/11/08 18:45:05 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\zRZZ99hTXwjUClB
[2011/11/08 19:20:39 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ZsQ6RXezA2mJfTe
[2011/11/08 19:20:39 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ZsQJ6fTjClrNAu2
[2011/11/08 19:22:20 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\zsQJ7dE89wIyD
[2011/11/08 19:20:22 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\zsWJ7fEL8T
[2011/11/08 19:05:24 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\zsWK7fEL9ZjCIrN
[2011/11/08 19:05:24 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\zsWK7fEL9ZjCIrO
[2011/11/08 19:05:25 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\zsWK7fELTjCIrt0
[2011/11/08 18:13:40 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\zTTTXqqjYCeIVrO
[2011/11/08 19:16:38 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ZTYYYCwkU
[2011/11/08 18:42:11 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ZuuvvS22ibFpn5a
[2011/11/08 19:05:25 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\ZVrOxuc1DnaHWf8
[2011/11/08 19:21:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\zwkUVelOB1v2FpH
[2011/11/08 18:57:12 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\zXUltNADpdTBu
[2011/11/08 19:08:35 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\zXwkUVelOt
[2011/11/08 19:06:50 | 000,000,000 | ---D | M] -- C:\Users\Computer 2\AppData\Roaming\zZhTjeIzy1
[2011/05/30 10:40:18 | 000,032,590 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU(113).TXT
[2011/12/20 17:58:57 | 000,032,556 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT

========== Purity Check ==========

End of OTL.txt log
 
#12 ·
Hi 07tcbsp,

Thank you for your help.
You're welcome. :)

Please print these instructions because you will not have access to the Internet while performing some of the tasks below.

  • Move OTL to the Desktop
    Please move OTL.exe from C:\Users\Computer 2\Downloads to your Desktop.
    You may want to change your Firefox (or other browser) download default to "Always ask me where to save files" since most of our tools need to be saved to the Desktop.
  • Punkbuster warning
    I see you have Punkbuster installed.( read the section on Published features) This is spyware. Punkbuster can take control over various aspects of your computer, and some gaming tools not unlike Punkbuster also hinder their removals. By the definition we handle here, Punkbuster is actual spyware. Therefore, I now ask you to decide the following:
    • Either we try to leave Punkbuster alone but there is no guarantee a spyware component doesn't 'accidentally' get taken out; so Punkbuster might break. This will, of course, also break your ability to play games using Punkbuster enabled servers.
    • Or we can just remove Punkbuster. You can reinstall it afterwards if you wish, but please keep in mind that It is spyware.
    • Another option is to not clean this computer at all. This ensures Punkbuster will continue to function.
    Please let me know what you would like to do.
  • Download tools to be used
    Please download the following tools but do not run them until instructed.
    1. Click here to download DeFogger by jpshortstuff and save it to your Desktop.
    2. Click here to download TDSSKiller and save it to your Desktop.
    3. Click here to download aswMBR.exe and save it to your Desktop.
  • Defogger
    1. Right-click the DeFogger.exe icon on your Desktop and then select Run As Administrator to run the tool. The application window will appear.
    2. Click the Disable button to disable your CD Emulation drivers.
    3. Click Yes in the message window to continue.
    4. A 'Finished!' message will appear. Click OK.
    5. Click OK when DeFogger asks to reboot the machine.

      Do not re-enable these drivers until otherwise instructed.
      IMPORTANT: If you receive an error message while running DeFogger, please post the log defogger_disable which will appear on your desktop and skip the remaining steps below.
  • TDSSKiller
    1. Right-click the TDSSKiller.exe icon on your Desktop and select Run As Administrator to launch it.
    2. Click on Start Scan, to start the scan.
    3. When the scan has finished, if it finds anything where "Cure" is an option, please click on the drop down arrow next to Cure and select Skip
    4. Now click on Report to open the log file created by TDSSKiller in your root directory C:\
    5. To find the log go to Start > Computer > C:
    6. Post the contents of that log in your next reply please.
    7. DO NOT TRY TO FIX (CURE) ANYTHING AT THIS POINT
  • aswMBR
    1. Right-click the aswMBR.exe icon and select Run As Administrator to run it.
    2. Click the Scan button.
    3. After a short while when the scan reports "Scan finished successfully", click Save log & save the log to your desktop.
    4. Click OK. Two files will be created, aswMBR.txt & a file named MBR.dat
    5. Save MBR.dat to a USB flash drive. This is a backup of your MBR (Master Boot record). Do not delete this file.
    6. NOTE: Do not click to fix anything at this stage!
    7. Click EXIT.
    8. Copy & Paste the contents of aswMBR.txt into your next reply.

Please include in your reply:
  1. The text of any error messages and/or a description of any problems you encountered while performing these steps.
  2. An indication of how you would like to deal with Punkbuster.
  3. The contents of the TDSSKiller log.
  4. The contents of the aswMBR.txt log.

mambass
 
#13 ·
Please include in your reply:
  1. The text of any error messages and/or a description of any problems you encountered while performing these steps.
  2. An indication of how you would like to deal with Punkbuster.
  3. The contents of the TDSSKiller log.
  4. The contents of the aswMBR.txt log.

mambass
1. Everything went through smoothly, no hiccups or hangs. The only thing I noticed is when I ran aswMBR, it suggested I install Avast aswell.

2. Lets get rid of Punkbuster. I don't know how/why its on my computer.

3. Going to post in a few separate posts.

4. aswMBR version 0.9.9.1649 Copyright(c) 2011 AVAST Software
Run date: 2012-03-12 19:38:07
-----------------------------
19:38:07.019 OS Version: Windows x64 6.1.7600
19:38:07.019 Number of processors: 4 586 0x2505
19:38:07.019 ComputerName: PC1 UserName:
19:38:10.079 Initialize success
19:38:22.999 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0
19:38:22.999 Disk 0 Vendor: ST3750528AS CC46 Size: 715404MB BusType: 3
19:38:23.029 Disk 0 MBR read successfully
19:38:23.029 Disk 0 MBR scan
19:38:23.039 Disk 0 Windows VISTA default MBR code
19:38:23.039 Disk 0 MBR hidden
19:38:23.039 Disk 0 Partition 1 00 DE Dell Utility Dell 8.0 39 MB offset 63
19:38:23.059 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 13118 MB offset 81920
19:38:23.069 Disk 0 Partition 3 00 07 HPFS/NTFS NTFS 702245 MB offset 26947584
19:38:23.099 Disk 0 Partition 4 80 (A) 17 Hidd HPFS/NTFS NTFS 1 MB offset 1465145344
19:38:23.109 Disk 0 Partition 4 **SUSPICIOUS**
19:38:23.139 Disk 0 scanning C:\Windows\system32\drivers
19:38:29.149 Service scanning
19:38:38.999 Modules scanning
19:38:39.513 Disk 0 trace - called modules:
19:38:39.529 ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys >>UNKNOWN [0xfffffa8006423334]<<ataport.SYS pciide.sys PCIIDEX.SYS hal.dll atapi.sys
19:38:39.545 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa8006410060]
19:38:39.545 3 CLASSPNP.SYS[fffff880018c843f] -> nt!IofCallDriver -> [0xfffffa80061f79b0]
19:38:39.545 5 ACPI.sys[fffff88000ec2781] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP0T0L0-0[0xfffffa80061f3680]
19:38:39.545 \Driver\atapi[0xfffffa80061eee70] -> IRP_MJ_INTERNAL_DEVICE_CONTROL -> 0xfffffa8006423334
19:38:39.560 Scan finished successfully
19:38:53.679 Disk 0 MBR has been saved successfully to "C:\Users\Computer 2\Desktop\MBR.dat"
19:38:53.679 The log file has been saved successfully to "C:\Users\Computer 2\Desktop\aswMBR.txt"

Please See Next Post for TDSSKiller log...
 
#14 ·
Continued From Previous Post...

19:36:13.0328 0668 TDSS rootkit removing tool 2.7.20.0 Mar 9 2012 17:10:43
19:36:13.0868 0668 ============================================================
19:36:13.0868 0668 Current date / time: 2012/03/12 19:36:13.0868
19:36:13.0868 0668 SystemInfo:
19:36:13.0868 0668
19:36:13.0868 0668 OS Version: 6.1.7600 ServicePack: 0.0
19:36:13.0868 0668 Product type: Workstation
19:36:13.0868 0668 ComputerName: PC1
19:36:13.0868 0668 UserName: Computer 2
19:36:13.0868 0668 Windows directory: C:\Windows
19:36:13.0868 0668 System windows directory: C:\Windows
19:36:13.0868 0668 Running under WOW64
19:36:13.0868 0668 Processor architecture: Intel x64
19:36:13.0868 0668 Number of processors: 4
19:36:13.0868 0668 Page size: 0x1000
19:36:13.0868 0668 Boot type: Normal boot
19:36:13.0868 0668 ============================================================
19:36:14.0868 0668 Drive \Device\Harddisk0\DR0 - Size: 0xAEA8CDE000 (698.64 Gb), SectorSize: 0x200, Cylinders: 0x16441, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
19:36:14.0878 0668 Drive \Device\Harddisk5\DR5 - Size: 0x1D1C1116000 (1863.02 Gb), SectorSize: 0x200, Cylinders: 0x3B601, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
19:36:14.0878 0668 \Device\Harddisk0\DR0:
19:36:14.0878 0668 MBR used
19:36:14.0878 0668 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x14000, BlocksNum 0x199F000
19:36:14.0878 0668 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x19B3000, BlocksNum 0x55B92800
19:36:14.0878 0668 \Device\Harddisk5\DR5:
19:36:14.0878 0668 MBR used
19:36:14.0878 0668 \Device\Harddisk5\DR5\Partition0: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0xE8E07482
19:36:14.0928 0668 Initialize success
19:36:14.0928 0668 ============================================================
19:36:18.0518 3528 ============================================================
19:36:18.0518 3528 Scan started
19:36:18.0518 3528 Mode: Manual;
19:36:18.0518 3528 ============================================================
19:36:20.0328 3528 1394ohci (969c91060cbb5d17cb8440b5f78b4c51) C:\Windows\system32\DRIVERS\1394ohci.sys
19:36:20.0338 3528 1394ohci - ok
19:36:20.0368 3528 ACPI (6f11e88748cdefd2f76aa215f97ddfe5) C:\Windows\system32\DRIVERS\ACPI.sys
19:36:20.0368 3528 ACPI - ok
19:36:20.0388 3528 AcpiPmi (63b05a0420ce4bf0e4af6dcc7cada254) C:\Windows\system32\DRIVERS\acpipmi.sys
19:36:20.0398 3528 AcpiPmi - ok
19:36:20.0438 3528 adp94xx (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\DRIVERS\adp94xx.sys
19:36:20.0438 3528 adp94xx - ok
19:36:20.0448 3528 adpahci (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\DRIVERS\adpahci.sys
19:36:20.0458 3528 adpahci - ok
19:36:20.0468 3528 adpu320 (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\DRIVERS\adpu320.sys
19:36:20.0468 3528 adpu320 - ok
19:36:20.0518 3528 AFD (db9d6c6b2cd95a9ca414d045b627422e) C:\Windows\system32\drivers\afd.sys
19:36:20.0528 3528 AFD - ok
19:36:20.0558 3528 agp440 (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\DRIVERS\agp440.sys
19:36:20.0558 3528 agp440 - ok
19:36:20.0578 3528 aliide (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\DRIVERS\aliide.sys
19:36:20.0578 3528 aliide - ok
19:36:20.0608 3528 amdide (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\DRIVERS\amdide.sys
19:36:20.0608 3528 amdide - ok
19:36:20.0618 3528 AmdK8 (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\DRIVERS\amdk8.sys
19:36:20.0618 3528 AmdK8 - ok
19:36:20.0628 3528 AmdPPM (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\DRIVERS\amdppm.sys
19:36:20.0628 3528 AmdPPM - ok
19:36:20.0658 3528 amdsata (ec7ebab00a4d8448bab68d1e49b4beb9) C:\Windows\system32\drivers\amdsata.sys
19:36:20.0658 3528 amdsata - ok
19:36:20.0688 3528 amdsbs (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\DRIVERS\amdsbs.sys
19:36:20.0688 3528 amdsbs - ok
19:36:20.0708 3528 amdxata (db27766102c7bf7e95140a2aa81d042e) C:\Windows\system32\drivers\amdxata.sys
19:36:20.0708 3528 amdxata - ok
19:36:20.0728 3528 AppID (42fd751b27fa0e9c69bb39f39e409594) C:\Windows\system32\drivers\appid.sys
19:36:20.0728 3528 AppID - ok
19:36:20.0758 3528 arc (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\DRIVERS\arc.sys
19:36:20.0758 3528 arc - ok
19:36:20.0778 3528 arcsas (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\DRIVERS\arcsas.sys
19:36:20.0778 3528 arcsas - ok
19:36:20.0798 3528 AsyncMac (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys
19:36:20.0798 3528 AsyncMac - ok
19:36:20.0828 3528 atapi (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\DRIVERS\atapi.sys
19:36:20.0828 3528 atapi - ok
19:36:20.0888 3528 athr (195786ed7a26e1913a4f9799fdbc2c71) C:\Windows\system32\DRIVERS\athrx.sys
19:36:20.0908 3528 athr - ok
19:36:20.0948 3528 b06bdrv (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\DRIVERS\bxvbda.sys
19:36:20.0948 3528 b06bdrv - ok
19:36:20.0968 3528 b57nd60a (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys
19:36:20.0968 3528 b57nd60a - ok
19:36:21.0028 3528 BCMH43XX (e49110a58a32e9450356686a95dd7763) C:\Windows\system32\DRIVERS\bcmwlhigh664.sys
19:36:21.0048 3528 BCMH43XX - ok
19:36:21.0068 3528 Beep (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys
19:36:21.0068 3528 Beep - ok
19:36:21.0078 3528 blbdrive (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\DRIVERS\blbdrive.sys
19:36:21.0078 3528 blbdrive - ok
19:36:21.0118 3528 bowser (19d20159708e152267e53b66677a4995) C:\Windows\system32\DRIVERS\bowser.sys
19:36:21.0118 3528 bowser - ok
19:36:21.0128 3528 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\DRIVERS\BrFiltLo.sys
19:36:21.0128 3528 BrFiltLo - ok
19:36:21.0148 3528 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\DRIVERS\BrFiltUp.sys
19:36:21.0148 3528 BrFiltUp - ok
19:36:21.0158 3528 Brserid (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys
19:36:21.0168 3528 Brserid - ok
19:36:21.0178 3528 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys
19:36:21.0178 3528 BrSerWdm - ok
19:36:21.0198 3528 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys
19:36:21.0198 3528 BrUsbMdm - ok
19:36:21.0208 3528 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys
19:36:21.0208 3528 BrUsbSer - ok
19:36:21.0218 3528 BTCFilterService - ok
19:36:21.0228 3528 BTHMODEM (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\DRIVERS\bthmodem.sys
19:36:21.0228 3528 BTHMODEM - ok
19:36:21.0258 3528 cdfs (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys
19:36:21.0268 3528 cdfs - ok
19:36:21.0318 3528 cdrom (83d2d75e1efb81b3450c18131443f7db) C:\Windows\system32\DRIVERS\cdrom.sys
19:36:21.0318 3528 cdrom - ok
19:36:21.0338 3528 circlass (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\DRIVERS\circlass.sys
19:36:21.0338 3528 circlass - ok
19:36:21.0368 3528 CLFS (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys
19:36:21.0368 3528 CLFS - ok
19:36:21.0418 3528 CmBatt (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\DRIVERS\CmBatt.sys
19:36:21.0418 3528 CmBatt - ok
19:36:21.0438 3528 cmdide (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\DRIVERS\cmdide.sys
19:36:21.0438 3528 cmdide - ok
19:36:21.0468 3528 CNG (937beb186a735aca91d717044a49d17e) C:\Windows\system32\Drivers\cng.sys
19:36:21.0478 3528 CNG - ok
19:36:21.0488 3528 Compbatt (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\DRIVERS\compbatt.sys
19:36:21.0488 3528 Compbatt - ok
19:36:21.0498 3528 CompositeBus (f26b3a86f6fa87ca360b879581ab4123) C:\Windows\system32\DRIVERS\CompositeBus.sys
19:36:21.0508 3528 CompositeBus - ok
19:36:21.0518 3528 crcdisk (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\DRIVERS\crcdisk.sys
19:36:21.0518 3528 crcdisk - ok
19:36:21.0558 3528 DfsC (9c253ce7311ca60fc11c774692a13208) C:\Windows\system32\Drivers\dfsc.sys
19:36:21.0558 3528 DfsC - ok
19:36:21.0588 3528 discache (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys
19:36:21.0588 3528 discache - ok
19:36:21.0618 3528 Disk (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\DRIVERS\disk.sys
19:36:21.0618 3528 Disk - ok
19:36:21.0678 3528 drmkaud (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys
19:36:21.0678 3528 drmkaud - ok
19:36:21.0748 3528 DXGKrnl (1633b9abf52784a1331476397a48cbef) C:\Windows\System32\drivers\dxgkrnl.sys
19:36:21.0748 3528 DXGKrnl - ok
19:36:21.0778 3528 EagleX64 - ok
19:36:21.0858 3528 ebdrv (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\DRIVERS\evbda.sys
19:36:21.0928 3528 ebdrv - ok
19:36:21.0948 3528 elxstor (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\DRIVERS\elxstor.sys
19:36:21.0948 3528 elxstor - ok
19:36:21.0968 3528 ErrDev (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\DRIVERS\errdev.sys
19:36:21.0968 3528 ErrDev - ok
19:36:21.0978 3528 exfat (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys
19:36:21.0988 3528 exfat - ok
19:36:22.0038 3528 fastfat (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys
19:36:22.0038 3528 fastfat - ok
19:36:22.0068 3528 fdc (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\DRIVERS\fdc.sys
19:36:22.0068 3528 fdc - ok
19:36:22.0108 3528 FileInfo (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys
19:36:22.0118 3528 FileInfo - ok
19:36:22.0138 3528 Filetrace (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys
19:36:22.0138 3528 Filetrace - ok
19:36:22.0148 3528 flpydisk (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\DRIVERS\flpydisk.sys
19:36:22.0148 3528 flpydisk - ok
19:36:22.0178 3528 FltMgr (f7866af72abbaf84b1fa5aa195378c59) C:\Windows\system32\drivers\fltmgr.sys
19:36:22.0178 3528 FltMgr - ok
19:36:22.0198 3528 FsDepends (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys
19:36:22.0198 3528 FsDepends - ok
19:36:22.0218 3528 Fs_Rec (e95ef8547de20cf0603557c0cf7a9462) C:\Windows\system32\drivers\Fs_Rec.sys
19:36:22.0218 3528 Fs_Rec - ok
19:36:22.0238 3528 fvevol (ae87ba80d0ec3b57126ed2cdc15b24ed) C:\Windows\system32\DRIVERS\fvevol.sys
19:36:22.0238 3528 fvevol - ok
19:36:22.0258 3528 gagp30kx (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\DRIVERS\gagp30kx.sys
19:36:22.0258 3528 gagp30kx - ok
19:36:22.0308 3528 gbridge (830e853d557da8f4d9449699e53cbee0) C:\Windows\system32\DRIVERS\gbridge64.sys
19:36:22.0308 3528 gbridge - ok
19:36:22.0338 3528 hcw85cir (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys
19:36:22.0338 3528 hcw85cir - ok
19:36:22.0378 3528 HdAudAddService (6410f6f415b2a5a9037224c41da8bf12) C:\Windows\system32\drivers\HdAudio.sys
19:36:22.0388 3528 HdAudAddService - ok
19:36:22.0418 3528 HDAudBus (0a49913402747a0b67de940fb42cbdbb) C:\Windows\system32\DRIVERS\HDAudBus.sys
19:36:22.0418 3528 HDAudBus - ok
19:36:22.0438 3528 HECIx64 (b6ac71aaa2b10848f57fc49d55a651af) C:\Windows\system32\DRIVERS\HECIx64.sys
19:36:22.0438 3528 HECIx64 - ok
19:36:22.0458 3528 HidBatt (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\DRIVERS\HidBatt.sys
19:36:22.0458 3528 HidBatt - ok
19:36:22.0468 3528 HidBth (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\DRIVERS\hidbth.sys
19:36:22.0468 3528 HidBth - ok
19:36:22.0478 3528 HidIr (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\DRIVERS\hidir.sys
19:36:22.0478 3528 HidIr - ok
19:36:22.0488 3528 HidUsb (b3bf6b5b50006def50b66306d99fcf6f) C:\Windows\system32\DRIVERS\hidusb.sys
19:36:22.0498 3528 HidUsb - ok
19:36:22.0538 3528 HpSAMD (0886d440058f203eba0e1825e4355914) C:\Windows\system32\DRIVERS\HpSAMD.sys
19:36:22.0548 3528 HpSAMD - ok
19:36:22.0578 3528 HTTP (cee049cac4efa7f4e1e4ad014414a5d4) C:\Windows\system32\drivers\HTTP.sys
19:36:22.0588 3528 HTTP - ok
19:36:22.0598 3528 hwpolicy (f17766a19145f111856378df337a5d79) C:\Windows\system32\drivers\hwpolicy.sys
19:36:22.0598 3528 hwpolicy - ok
19:36:22.0608 3528 i8042prt (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\DRIVERS\i8042prt.sys
19:36:22.0608 3528 i8042prt - ok
19:36:22.0638 3528 iaStorV (b75e45c564e944a2657167d197ab29da) C:\Windows\system32\drivers\iaStorV.sys
19:36:22.0638 3528 iaStorV - ok
19:36:22.0818 3528 igfx (09ce164afa8483e41808784d7fca154e) C:\Windows\system32\DRIVERS\igdkmd64.sys
19:36:22.0968 3528 igfx - ok
19:36:22.0998 3528 iirsp (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\DRIVERS\iirsp.sys
19:36:22.0998 3528 iirsp - ok
19:36:23.0048 3528 Impcd (dd587a55390ed2295bce6d36ad567da9) C:\Windows\system32\DRIVERS\Impcd.sys
19:36:23.0048 3528 Impcd - ok
19:36:23.0118 3528 IntcAzAudAddService (e9befd8c6a1db3b544b61647dda35f62) C:\Windows\system32\drivers\RTKVHD64.sys
19:36:23.0128 3528 IntcAzAudAddService - ok
19:36:23.0148 3528 IntcDAud (58cf58dee26c909bd6f977b61d246295) C:\Windows\system32\DRIVERS\IntcDAud.sys
19:36:23.0158 3528 IntcDAud - ok
19:36:23.0178 3528 intelide (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\DRIVERS\intelide.sys
19:36:23.0178 3528 intelide - ok
19:36:23.0208 3528 intelppm (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\DRIVERS\intelppm.sys
19:36:23.0208 3528 intelppm - ok
19:36:23.0238 3528 IpFilterDriver (722dd294df62483cecaae6e094b4d695) C:\Windows\system32\DRIVERS\ipfltdrv.sys
19:36:23.0248 3528 IpFilterDriver - ok
19:36:23.0278 3528 IPMIDRV (e2b4a4494db7cb9b89b55ca268c337c5) C:\Windows\system32\DRIVERS\IPMIDrv.sys
19:36:23.0278 3528 IPMIDRV - ok
19:36:23.0288 3528 IPNAT (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys
19:36:23.0288 3528 IPNAT - ok
19:36:23.0318 3528 IRENUM (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys
19:36:23.0318 3528 IRENUM - ok
19:36:23.0338 3528 isapnp (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\DRIVERS\isapnp.sys
19:36:23.0338 3528 isapnp - ok
19:36:23.0358 3528 iScsiPrt (fa4d2557de56d45b0a346f93564be6e1) C:\Windows\system32\DRIVERS\msiscsi.sys
19:36:23.0358 3528 iScsiPrt - ok
19:36:23.0408 3528 k57nd60a (9d7ea8c7215d8d4ae7be110eee61085d) C:\Windows\system32\DRIVERS\k57nd60a.sys
19:36:23.0408 3528 k57nd60a - ok
19:36:23.0428 3528 kbdclass (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\DRIVERS\kbdclass.sys
19:36:23.0428 3528 kbdclass - ok
19:36:23.0468 3528 kbdhid (6def98f8541e1b5dceb2c822a11f7323) C:\Windows\system32\DRIVERS\kbdhid.sys
19:36:23.0478 3528 kbdhid - ok
19:36:23.0498 3528 KSecDD (16c1b906fc5ead84769f90b736b6bf0e) C:\Windows\system32\Drivers\ksecdd.sys
19:36:23.0498 3528 KSecDD - ok
19:36:23.0538 3528 KSecPkg (0b711550c56444879d71c7daabda6c83) C:\Windows\system32\Drivers\ksecpkg.sys
19:36:23.0538 3528 KSecPkg - ok
19:36:23.0558 3528 ksthunk (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys
19:36:23.0558 3528 ksthunk - ok
19:36:23.0648 3528 Lavasoft Kernexplorer (9a7fa6371f68335fd3c3d6488bc5a9f8) C:\Program Files (x86)\Lavasoft\Ad-Aware\KernExplorer64.sys
19:36:23.0648 3528 Lavasoft Kernexplorer - ok
19:36:23.0658 3528 Lbd (c8b3131857931ae76798a741cc52b021) C:\Windows\system32\DRIVERS\Lbd.sys
19:36:23.0658 3528 Lbd - ok
19:36:23.0688 3528 lltdio (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys
19:36:23.0698 3528 lltdio - ok
19:36:23.0728 3528 LSI_FC (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\DRIVERS\lsi_fc.sys
19:36:23.0728 3528 LSI_FC - ok
19:36:23.0748 3528 LSI_SAS (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\DRIVERS\lsi_sas.sys
19:36:23.0748 3528 LSI_SAS - ok
19:36:23.0768 3528 LSI_SAS2 (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\DRIVERS\lsi_sas2.sys
19:36:23.0768 3528 LSI_SAS2 - ok
19:36:23.0788 3528 LSI_SCSI (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\DRIVERS\lsi_scsi.sys
19:36:23.0788 3528 LSI_SCSI - ok
19:36:23.0808 3528 luafv (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys
19:36:23.0808 3528 luafv - ok
19:36:23.0858 3528 megasas (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\DRIVERS\megasas.sys
19:36:23.0858 3528 megasas - ok
19:36:23.0878 3528 MegaSR (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\DRIVERS\MegaSR.sys
19:36:23.0878 3528 MegaSR - ok
19:36:23.0938 3528 Modem (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys
19:36:23.0938 3528 Modem - ok
19:36:23.0958 3528 monitor (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys
19:36:23.0958 3528 monitor - ok
19:36:23.0958 3528 motandroidusb - ok
19:36:23.0968 3528 motccgp - ok
19:36:23.0978 3528 motccgpfl - ok
19:36:24.0028 3528 motmodem - ok
19:36:24.0038 3528 MotoSwitchService - ok
19:36:24.0048 3528 Motousbnet - ok
19:36:24.0068 3528 motusbdevice - ok
19:36:24.0088 3528 mouclass (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\DRIVERS\mouclass.sys
19:36:24.0088 3528 mouclass - ok
19:36:24.0128 3528 mouhid (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys
19:36:24.0128 3528 mouhid - ok
19:36:24.0158 3528 mountmgr (791af66c4d0e7c90a3646066386fb571) C:\Windows\system32\drivers\mountmgr.sys
19:36:24.0158 3528 mountmgr - ok
19:36:24.0178 3528 mpio (609d1d87649ecc19796f4d76d4c15cea) C:\Windows\system32\DRIVERS\mpio.sys
19:36:24.0188 3528 mpio - ok
19:36:24.0208 3528 mpsdrv (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys
19:36:24.0208 3528 mpsdrv - ok
19:36:24.0228 3528 MRxDAV (30524261bb51d96d6fcbac20c810183c) C:\Windows\system32\drivers\mrxdav.sys
19:36:24.0228 3528 MRxDAV - ok
19:36:24.0268 3528 mrxsmb (040d62a9d8ad28922632137acdd984f2) C:\Windows\system32\DRIVERS\mrxsmb.sys
19:36:24.0278 3528 mrxsmb - ok
19:36:24.0318 3528 mrxsmb10 (f0067552f8f9b33d7c59403ab808a3cb) C:\Windows\system32\DRIVERS\mrxsmb10.sys
19:36:24.0328 3528 mrxsmb10 - ok
19:36:24.0338 3528 mrxsmb20 (3c142d31de9f2f193218a53fe2632051) C:\Windows\system32\DRIVERS\mrxsmb20.sys
19:36:24.0338 3528 mrxsmb20 - ok
19:36:24.0368 3528 msahci (bccf16d5fb1109162380e3e28dc9e4e5) C:\Windows\system32\DRIVERS\msahci.sys
19:36:24.0368 3528 msahci - ok
19:36:24.0388 3528 msdsm (8d27b597229aed79430fb9db3bcbfbd0) C:\Windows\system32\DRIVERS\msdsm.sys
19:36:24.0398 3528 msdsm - ok
19:36:24.0408 3528 Msfs (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys
19:36:24.0408 3528 Msfs - ok
19:36:24.0418 3528 mshidkmdf (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys
19:36:24.0418 3528 mshidkmdf - ok
19:36:24.0448 3528 msisadrv (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\DRIVERS\msisadrv.sys
19:36:24.0448 3528 msisadrv - ok
19:36:24.0478 3528 MSKSSRV (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys
19:36:24.0478 3528 MSKSSRV - ok
19:36:24.0498 3528 MSPCLOCK (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys
19:36:24.0498 3528 MSPCLOCK - ok
19:36:24.0518 3528 MSPQM (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys
19:36:24.0518 3528 MSPQM - ok
19:36:24.0528 3528 MsRPC (89cb141aa8616d8c6a4610fa26c60964) C:\Windows\system32\drivers\MsRPC.sys
19:36:24.0538 3528 MsRPC - ok
19:36:24.0548 3528 mssmbios (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\DRIVERS\mssmbios.sys
19:36:24.0548 3528 mssmbios - ok
19:36:24.0578 3528 MSTEE (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys
19:36:24.0578 3528 MSTEE - ok
19:36:24.0588 3528 MTConfig (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\DRIVERS\MTConfig.sys
19:36:24.0588 3528 MTConfig - ok
19:36:24.0618 3528 Mup (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys
19:36:24.0618 3528 Mup - ok
19:36:24.0648 3528 NativeWifiP (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS\nwifi.sys
19:36:24.0648 3528 NativeWifiP - ok
19:36:24.0688 3528 NDIS (cad515dbd07d082bb317d9928ce8962c) C:\Windows\system32\drivers\ndis.sys
19:36:24.0698 3528 NDIS - ok
19:36:24.0728 3528 NdisCap (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS\ndiscap.sys
19:36:24.0728 3528 NdisCap - ok
19:36:24.0758 3528 NdisTapi (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS\ndistapi.sys
19:36:24.0758 3528 NdisTapi - ok
19:36:24.0778 3528 Ndisuio (f105ba1e22bf1f2ee8f005d4305e4bec) C:\Windows\system32\DRIVERS\ndisuio.sys
19:36:24.0778 3528 Ndisuio - ok
19:36:24.0798 3528 NdisWan (557dfab9ca1fcb036ac77564c010dad3) C:\Windows\system32\DRIVERS\ndiswan.sys
19:36:24.0798 3528 NdisWan - ok
19:36:24.0808 3528 NDProxy (659b74fb74b86228d6338d643cd3e3cf) C:\Windows\system32\drivers\NDProxy.sys
19:36:24.0808 3528 NDProxy - ok
19:36:24.0828 3528 NetBIOS (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS\netbios.sys
19:36:24.0828 3528 NetBIOS - ok
19:36:24.0838 3528 NetBT (9162b273a44ab9dce5b44362731d062a) C:\Windows\system32\DRIVERS\netbt.sys
19:36:24.0848 3528 NetBT - ok
19:36:24.0868 3528 nfrd960 (77889813be4d166cdab78ddba990da92) C:\Windows\system32\DRIVERS\nfrd960.sys
19:36:24.0868 3528 nfrd960 - ok
19:36:24.0918 3528 NPF (c31fa031335eff434b2d94278e74bcce) C:\Windows\system32\DRIVERS\npf.sys
19:36:24.0918 3528 NPF - ok
19:36:24.0948 3528 Npfs (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys
19:36:24.0948 3528 Npfs - ok
19:36:24.0968 3528 nsiproxy (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers\nsiproxy.sys
19:36:24.0968 3528 nsiproxy - ok
19:36:25.0038 3528 Ntfs (378e0e0dfea67d98ae6ea53adbbd76bc) C:\Windows\system32\drivers\Ntfs.sys
19:36:25.0068 3528 Ntfs - ok
19:36:25.0108 3528 Null (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys
19:36:25.0108 3528 Null - ok
19:36:25.0128 3528 NVHDA (ed9380f201c8126425c09bed96dbe1e5) C:\Windows\system32\drivers\nvhda64v.sys
19:36:25.0128 3528 NVHDA - ok
19:36:25.0368 3528 nvlddmkm (bbe872a814b00798c2d568d46c42a71b) C:\Windows\system32\DRIVERS\nvlddmkm.sys
19:36:25.0408 3528 nvlddmkm - ok
19:36:25.0458 3528 nvraid (a4d9c9a608a97f59307c2f2600edc6a4) C:\Windows\system32\drivers\nvraid.sys
19:36:25.0458 3528 nvraid - ok
19:36:25.0488 3528 nvstor (6c1d5f70e7a6a3fd1c90d840edc048b9) C:\Windows\system32\drivers\nvstor.sys
19:36:25.0488 3528 nvstor - ok
19:36:25.0508 3528 nv_agp (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\DRIVERS\nv_agp.sys
19:36:25.0508 3528 nv_agp - ok
19:36:25.0538 3528 ohci1394 (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\DRIVERS\ohci1394.sys
19:36:25.0538 3528 ohci1394 - ok
19:36:25.0608 3528 Parport (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\DRIVERS\parport.sys
19:36:25.0608 3528 Parport - ok
19:36:25.0648 3528 partmgr (7daa117143316c4a1537e074a5a9eaf0) C:\Windows\system32\drivers\partmgr.sys
19:36:25.0648 3528 partmgr - ok
19:36:25.0678 3528 pci (f36f6504009f2fb0dfd1b17a116ad74b) C:\Windows\system32\DRIVERS\pci.sys
19:36:25.0678 3528 pci - ok
19:36:25.0698 3528 pciide (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\DRIVERS\pciide.sys
19:36:25.0698 3528 pciide - ok
19:36:25.0718 3528 pcmcia (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\DRIVERS\pcmcia.sys
19:36:25.0728 3528 pcmcia - ok
19:36:25.0738 3528 pcw (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys
19:36:25.0748 3528 pcw - ok
19:36:25.0778 3528 PEAUTH (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys
19:36:25.0778 3528 PEAUTH - ok
19:36:25.0848 3528 PptpMiniport (27cc19e81ba5e3403c48302127bda717) C:\Windows\system32\DRIVERS\raspptp.sys
19:36:25.0848 3528 PptpMiniport - ok
19:36:25.0868 3528 Processor (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\DRIVERS\processr.sys
19:36:25.0868 3528 Processor - ok
19:36:25.0898 3528 Psched (ee992183bd8eaefd9973f352e587a299) C:\Windows\system32\DRIVERS\pacer.sys
19:36:25.0898 3528 Psched - ok
19:36:25.0938 3528 ql2300 (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\DRIVERS\ql2300.sys
19:36:25.0978 3528 ql2300 - ok
19:36:25.0988 3528 ql40xx (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\DRIVERS\ql40xx.sys
19:36:25.0988 3528 ql40xx - ok
19:36:26.0008 3528 QWAVEdrv (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys
19:36:26.0008 3528 QWAVEdrv - ok
19:36:26.0058 3528 RasAcd (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERS\rasacd.sys
19:36:26.0058 3528 RasAcd - ok
19:36:26.0088 3528 RasAgileVpn (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys
19:36:26.0088 3528 RasAgileVpn - ok
19:36:26.0108 3528 Rasl2tp (87a6e852a22991580d6d39adc4790463) C:\Windows\system32\DRIVERS\rasl2tp.sys
19:36:26.0108 3528 Rasl2tp - ok
19:36:26.0128 3528 RasPppoe (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERS\raspppoe.sys
19:36:26.0128 3528 RasPppoe - ok
19:36:26.0138 3528 RasSstp (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERS\rassstp.sys
19:36:26.0148 3528 RasSstp - ok
19:36:26.0158 3528 rdbss (3bac8142102c15d59a87757c1d41dce5) C:\Windows\system32\DRIVERS\rdbss.sys
19:36:26.0168 3528 rdbss - ok
19:36:26.0168 3528 rdpbus (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\DRIVERS\rdpbus.sys
19:36:26.0178 3528 rdpbus - ok
19:36:26.0188 3528 RDPCDD (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys
19:36:26.0188 3528 RDPCDD - ok
19:36:26.0208 3528 RDPENCDD (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\drivers\rdpencdd.sys
19:36:26.0208 3528 RDPENCDD - ok
19:36:26.0218 3528 RDPREFMP (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\drivers\rdprefmp.sys
19:36:26.0228 3528 RDPREFMP - ok
19:36:26.0238 3528 RDPWD (8a3e6bea1c53ea6177fe2b6eba2c80d7) C:\Windows\system32\drivers\RDPWD.sys
19:36:26.0238 3528 RDPWD - ok
19:36:26.0268 3528 rdyboost (634b9a2181d98f15941236886164ec8b) C:\Windows\system32\drivers\rdyboost.sys
19:36:26.0268 3528 rdyboost - ok
19:36:26.0298 3528 RimUsb (5790bca445cc40df8b38c2c48608aac2) C:\Windows\system32\Drivers\RimUsb_AMD64.sys
19:36:26.0308 3528 RimUsb - ok
19:36:26.0338 3528 rspndr (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERS\rspndr.sys
19:36:26.0338 3528 rspndr - ok
19:36:26.0388 3528 SASDIFSV (3289766038db2cb14d07dc84392138d5) C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS
19:36:26.0388 3528 SASDIFSV - ok
19:36:26.0418 3528 SASKUTIL (58a38e75f3316a83c23df6173d41f2b5) C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS
19:36:26.0418 3528 SASKUTIL - ok
19:36:26.0438 3528 sbp2port (e3bbb89983daf5622c1d50cf49f28227) C:\Windows\system32\DRIVERS\sbp2port.sys
19:36:26.0438 3528 sbp2port - ok
19:36:26.0458 3528 scfilter (c94da20c7e3ba1dca269bc8460d98387) C:\Windows\system32\DRIVERS\scfilter.sys
19:36:26.0458 3528 scfilter - ok
19:36:26.0508 3528 SCMNdisP (6011cdf54bb6f4c69f38faccdad73d7e) C:\Windows\system32\DRIVERS\scmndisp.sys
19:36:26.0508 3528 SCMNdisP - ok
19:36:26.0528 3528 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys
19:36:26.0528 3528 secdrv - ok
19:36:26.0548 3528 Serenum (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\DRIVERS\serenum.sys
19:36:26.0548 3528 Serenum - ok
19:36:26.0558 3528 Serial (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\DRIVERS\serial.sys
19:36:26.0558 3528 Serial - ok
19:36:26.0568 3528 sermouse (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\DRIVERS\sermouse.sys
19:36:26.0568 3528 sermouse - ok
19:36:26.0588 3528 sffdisk (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\DRIVERS\sffdisk.sys
19:36:26.0588 3528 sffdisk - ok
19:36:26.0608 3528 sffp_mmc (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\DRIVERS\sffp_mmc.sys
19:36:26.0608 3528 sffp_mmc - ok
19:36:26.0618 3528 sffp_sd (178298f767fe638c9fedcbdef58bb5e4) C:\Windows\system32\DRIVERS\sffp_sd.sys
19:36:26.0618 3528 sffp_sd - ok
19:36:26.0628 3528 sfloppy (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\DRIVERS\sfloppy.sys
19:36:26.0628 3528 sfloppy - ok
19:36:26.0638 3528 SiSRaid2 (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\DRIVERS\SiSRaid2.sys
19:36:26.0638 3528 SiSRaid2 - ok
19:36:26.0648 3528 SiSRaid4 (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\DRIVERS\sisraid4.sys
19:36:26.0648 3528 SiSRaid4 - ok
19:36:26.0658 3528 Smb (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys
19:36:26.0658 3528 Smb - ok
19:36:26.0688 3528 spldr (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys
19:36:26.0688 3528 spldr - ok
19:36:26.0718 3528 sptd - ok
19:36:26.0778 3528 srv (2408c0366d96bcdf63e8f1c78e4a29c5) C:\Windows\system32\DRIVERS\srv.sys
19:36:26.0788 3528 srv - ok
19:36:26.0818 3528 srv2 (76548f7b818881b47d8d1ae1be9c11f8) C:\Windows\system32\DRIVERS\srv2.sys
19:36:26.0818 3528 srv2 - ok
19:36:26.0838 3528 srvnet (0af6e19d39c70844c5caa8fb0183c36e) C:\Windows\system32\DRIVERS\srvnet.sys
19:36:26.0838 3528 srvnet - ok
19:36:26.0928 3528 stexstor (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\DRIVERS\stexstor.sys
19:36:26.0928 3528 stexstor - ok
19:36:26.0958 3528 swenum (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\DRIVERS\swenum.sys
19:36:26.0958 3528 swenum - ok
19:36:27.0058 3528 Tcpip (f18f56efc0bfb9c87ba01c37b27f4da5) C:\Windows\system32\drivers\tcpip.sys
19:36:27.0098 3528 Tcpip - ok
19:36:27.0138 3528 TCPIP6 (f18f56efc0bfb9c87ba01c37b27f4da5) C:\Windows\system32\DRIVERS\tcpip.sys
19:36:27.0148 3528 TCPIP6 - ok
19:36:27.0168 3528 tcpipreg (76d078af6f587b162d50210f761eb9ed) C:\Windows\system32\drivers\tcpipreg.sys
19:36:27.0168 3528 tcpipreg - ok
19:36:27.0218 3528 TDPIPE (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers\tdpipe.sys
19:36:27.0218 3528 TDPIPE - ok
19:36:27.0238 3528 TDTCP (e4245bda3190a582d55ed09e137401a9) C:\Windows\system32\drivers\tdtcp.sys
19:36:27.0238 3528 TDTCP - ok
19:36:27.0258 3528 tdx (079125c4b17b01fcaeebce0bcb290c0f) C:\Windows\system32\DRIVERS\tdx.sys
19:36:27.0268 3528 tdx - ok
19:36:27.0278 3528 TermDD (c448651339196c0e869a355171875522) C:\Windows\system32\DRIVERS\termdd.sys
19:36:27.0278 3528 TermDD - ok
19:36:27.0318 3528 tssecsrv (61b96c26131e37b24e93327a0bd1fb95) C:\Windows\system32\DRIVERS\tssecsrv.sys
19:36:27.0318 3528 tssecsrv - ok
19:36:27.0338 3528 tunnel (3836171a2cdf3af8ef10856db9835a70) C:\Windows\system32\DRIVERS\tunnel.sys
19:36:27.0338 3528 tunnel - ok
19:36:27.0358 3528 uagp35 (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\DRIVERS\uagp35.sys
19:36:27.0358 3528 uagp35 - ok
19:36:27.0388 3528 udfs (31ba4a33afab6a69ea092b18017f737f) C:\Windows\system32\DRIVERS\udfs.sys
19:36:27.0398 3528 udfs - ok
19:36:27.0418 3528 uliagpkx (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\DRIVERS\uliagpkx.sys
19:36:27.0418 3528 uliagpkx - ok
19:36:27.0448 3528 umbus (eab6c35e62b1b0db0d1b48b671d3a117) C:\Windows\system32\DRIVERS\umbus.sys
19:36:27.0448 3528 umbus - ok
19:36:27.0468 3528 UmPass (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\DRIVERS\umpass.sys
19:36:27.0468 3528 UmPass - ok
19:36:27.0488 3528 usbaudio (77b01bc848298223a95d4ec23e1785a1) C:\Windows\system32\drivers\usbaudio.sys
19:36:27.0498 3528 usbaudio - ok
19:36:27.0528 3528 usbccgp (b26afb54a534d634523c4fb66765b026) C:\Windows\system32\DRIVERS\usbccgp.sys
19:36:27.0528 3528 usbccgp - ok
19:36:27.0558 3528 usbcir (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\DRIVERS\usbcir.sys
19:36:27.0568 3528 usbcir - ok
19:36:27.0588 3528 usbehci (fbb21ebe49f6d560db37ac25fbc68e66) C:\Windows\system32\drivers\usbehci.sys
19:36:27.0588 3528 usbehci - ok
19:36:27.0628 3528 usbhub (6b7a8a99c4a459e73c286a6763ea24cc) C:\Windows\system32\DRIVERS\usbhub.sys
19:36:27.0638 3528 usbhub - ok
19:36:27.0668 3528 usbohci (8c88aa7617b4cbc2e4bed61d26b33a27) C:\Windows\system32\drivers\usbohci.sys
19:36:27.0668 3528 usbohci - ok
19:36:27.0698 3528 usbprint (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS\usbprint.sys
19:36:27.0698 3528 usbprint - ok
19:36:27.0718 3528 USBSTOR (f39983647bc1f3e6100778ddfe9dce29) C:\Windows\system32\DRIVERS\USBSTOR.SYS
19:36:27.0718 3528 USBSTOR - ok
19:36:27.0748 3528 usbuhci (0b5b3b2df3fd1709618acfa50b8392b0) C:\Windows\system32\drivers\usbuhci.sys
19:36:27.0748 3528 usbuhci - ok
19:36:27.0778 3528 vdrvroot (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\DRIVERS\vdrvroot.sys
19:36:27.0778 3528 vdrvroot - ok
19:36:27.0798 3528 vga (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys
19:36:27.0798 3528 vga - ok
19:36:27.0818 3528 VgaSave (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys
19:36:27.0818 3528 VgaSave - ok
19:36:27.0838 3528 vhdmp (c82e748660f62a242b2dfac1442f22a4) C:\Windows\system32\DRIVERS\vhdmp.sys
19:36:27.0838 3528 vhdmp - ok
19:36:27.0858 3528 viaide (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\DRIVERS\viaide.sys
19:36:27.0868 3528 viaide - ok
19:36:27.0898 3528 volmgr (2b1a3dae2b4e70dbba822b7a03fbd4a3) C:\Windows\system32\DRIVERS\volmgr.sys
19:36:27.0898 3528 volmgr - ok
19:36:27.0918 3528 volmgrx (99b0cbb569ca79acaed8c91461d765fb) C:\Windows\system32\drivers\volmgrx.sys
19:36:27.0928 3528 volmgrx - ok
19:36:27.0938 3528 volsnap (58f82eed8ca24b461441f9c3e4f0bf5c) C:\Windows\system32\DRIVERS\volsnap.sys
19:36:27.0948 3528 volsnap - ok
19:36:27.0968 3528 vsmraid (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\DRIVERS\vsmraid.sys
19:36:27.0968 3528 vsmraid - ok
19:36:27.0988 3528 vwifibus (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\system32\DRIVERS\vwifibus.sys
19:36:27.0988 3528 vwifibus - ok
19:36:28.0018 3528 vwififlt (6a3d66263414ff0d6fa754c646612f3f) C:\Windows\system32\DRIVERS\vwififlt.sys
19:36:28.0018 3528 vwififlt - ok
19:36:28.0028 3528 WacomPen (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\DRIVERS\wacompen.sys
19:36:28.0028 3528 WacomPen - ok
19:36:28.0048 3528 WANARP (47ca49400643effd3f1c9a27e1d69324) C:\Windows\system32\DRIVERS\wanarp.sys
19:36:28.0058 3528 WANARP - ok
19:36:28.0058 3528 Wanarpv6 (47ca49400643effd3f1c9a27e1d69324) C:\Windows\system32\DRIVERS\wanarp.sys
19:36:28.0058 3528 Wanarpv6 - ok
19:36:28.0078 3528 Wd (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\DRIVERS\wd.sys
19:36:28.0078 3528 Wd - ok
19:36:28.0128 3528 Wdf01000 (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys
19:36:28.0148 3528 Wdf01000 - ok
19:36:28.0178 3528 WfpLwf (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys
19:36:28.0178 3528 WfpLwf - ok
19:36:28.0238 3528 WimFltr (b14ef15bd757fa488f9c970eee9c0d35) C:\Windows\system32\DRIVERS\wimfltr.sys
19:36:28.0238 3528 WimFltr - ok
19:36:28.0248 3528 WIMMount (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys
19:36:28.0248 3528 WIMMount - ok
19:36:28.0308 3528 WinUsb (4d52c872018af7e18d078978dcc3f6f2) C:\Windows\system32\DRIVERS\WinUsb.sys
19:36:28.0308 3528 WinUsb - ok
19:36:28.0338 3528 WmiAcpi (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\DRIVERS\wmiacpi.sys
19:36:28.0338 3528 WmiAcpi - ok
19:36:28.0378 3528 ws2ifsl (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys
19:36:28.0388 3528 ws2ifsl - ok
19:36:28.0418 3528 WudfPf (c63907207b837a5c05cf6d1606aa0008) C:\Windows\system32\drivers\WudfPf.sys
19:36:28.0418 3528 WudfPf - ok
19:36:28.0438 3528 WUDFRd (d885a873d733020f8b9b9ff4b1666158) C:\Windows\system32\DRIVERS\WUDFRd.sys
19:36:28.0448 3528 WUDFRd - ok
19:36:28.0478 3528 MBR (0x1B8) (cdb4de4bbd714f152979da2dcbef57eb) \Device\Harddisk0\DR0
19:36:28.0508 3528 \Device\Harddisk0\DR0 ( Rootkit.Boot.SST.b ) - infected
19:36:28.0508 3528 \Device\Harddisk0\DR0 - detected Rootkit.Boot.SST.b (0)
19:36:28.0528 3528 MBR (0x1B8) (5fb38429d5d77768867c76dcbdb35194) \Device\Harddisk5\DR5
19:36:28.0538 3528 \Device\Harddisk5\DR5 - ok
19:36:28.0568 3528 Boot (0x1200) (1936fd5dacd385d9b0f3afac3d679a60) \Device\Harddisk0\DR0\Partition0
19:36:28.0578 3528 \Device\Harddisk0\DR0\Partition0 - ok
19:36:28.0598 3528 Boot (0x1200) (976c36ac8983e5e4b875c3bcf2fe81a9) \Device\Harddisk0\DR0\Partition1
19:36:28.0598 3528 \Device\Harddisk0\DR0\Partition1 - ok
19:36:28.0598 3528 Boot (0x1200) (7bd4ee2385ea6391445cbd4f3bd5a5ec) \Device\Harddisk5\DR5\Partition0
19:36:28.0608 3528 \Device\Harddisk5\DR5\Partition0 - ok
19:36:28.0608 3528 ============================================================
19:36:28.0608 3528 Scan finished
19:36:28.0608 3528 ============================================================

Please See Next Post...
 
#15 ·
Continued From Previous Post

19:36:28.0618 1924 Detected object count: 1
19:36:28.0618 1924 Actual detected object count: 1
19:36:52.0738 1924 \Device\Harddisk0\DR0 ( Rootkit.Boot.SST.b ) - skipped by user
19:36:52.0738 1924 \Device\Harddisk0\DR0 ( Rootkit.Boot.SST.b ) - User select action: Skip
19:36:59.0858 3420 ============================================================
19:36:59.0858 3420 Scan started
19:36:59.0858 3420 Mode: Manual;
19:36:59.0858 3420 ============================================================
19:37:00.0418 3420 1394ohci (969c91060cbb5d17cb8440b5f78b4c51) C:\Windows\system32\DRIVERS\1394ohci.sys
19:37:00.0428 3420 1394ohci - ok
19:37:00.0458 3420 ACPI (6f11e88748cdefd2f76aa215f97ddfe5) C:\Windows\system32\DRIVERS\ACPI.sys
19:37:00.0458 3420 ACPI - ok
19:37:00.0478 3420 AcpiPmi (63b05a0420ce4bf0e4af6dcc7cada254) C:\Windows\system32\DRIVERS\acpipmi.sys
19:37:00.0478 3420 AcpiPmi - ok
19:37:00.0538 3420 adp94xx (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\DRIVERS\adp94xx.sys
19:37:00.0538 3420 adp94xx - ok
19:37:00.0558 3420 adpahci (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\DRIVERS\adpahci.sys
19:37:00.0558 3420 adpahci - ok
19:37:00.0568 3420 adpu320 (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\DRIVERS\adpu320.sys
19:37:00.0568 3420 adpu320 - ok
19:37:00.0608 3420 AFD (db9d6c6b2cd95a9ca414d045b627422e) C:\Windows\system32\drivers\afd.sys
19:37:00.0618 3420 AFD - ok
19:37:00.0638 3420 agp440 (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\DRIVERS\agp440.sys
19:37:00.0638 3420 agp440 - ok
19:37:00.0658 3420 aliide (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\DRIVERS\aliide.sys
19:37:00.0658 3420 aliide - ok
19:37:00.0678 3420 amdide (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\DRIVERS\amdide.sys
19:37:00.0678 3420 amdide - ok
19:37:00.0688 3420 AmdK8 (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\DRIVERS\amdk8.sys
19:37:00.0688 3420 AmdK8 - ok
19:37:00.0698 3420 AmdPPM (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\DRIVERS\amdppm.sys
19:37:00.0698 3420 AmdPPM - ok
19:37:00.0728 3420 amdsata (ec7ebab00a4d8448bab68d1e49b4beb9) C:\Windows\system32\drivers\amdsata.sys
19:37:00.0728 3420 amdsata - ok
19:37:00.0738 3420 amdsbs (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\DRIVERS\amdsbs.sys
19:37:00.0738 3420 amdsbs - ok
19:37:00.0768 3420 amdxata (db27766102c7bf7e95140a2aa81d042e) C:\Windows\system32\drivers\amdxata.sys
19:37:00.0768 3420 amdxata - ok
19:37:00.0788 3420 AppID (42fd751b27fa0e9c69bb39f39e409594) C:\Windows\system32\drivers\appid.sys
19:37:00.0788 3420 AppID - ok
19:37:00.0808 3420 arc (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\DRIVERS\arc.sys
19:37:00.0818 3420 arc - ok
19:37:00.0828 3420 arcsas (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\DRIVERS\arcsas.sys
19:37:00.0828 3420 arcsas - ok
19:37:00.0858 3420 AsyncMac (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys
19:37:00.0858 3420 AsyncMac - ok
19:37:00.0888 3420 atapi (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\DRIVERS\atapi.sys
19:37:00.0888 3420 atapi - ok
19:37:00.0948 3420 athr (195786ed7a26e1913a4f9799fdbc2c71) C:\Windows\system32\DRIVERS\athrx.sys
19:37:00.0958 3420 athr - ok
19:37:00.0988 3420 b06bdrv (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\DRIVERS\bxvbda.sys
19:37:00.0988 3420 b06bdrv - ok
19:37:01.0008 3420 b57nd60a (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys
19:37:01.0008 3420 b57nd60a - ok
19:37:01.0058 3420 BCMH43XX (e49110a58a32e9450356686a95dd7763) C:\Windows\system32\DRIVERS\bcmwlhigh664.sys
19:37:01.0068 3420 BCMH43XX - ok
19:37:01.0088 3420 Beep (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys
19:37:01.0088 3420 Beep - ok
19:37:01.0108 3420 blbdrive (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\DRIVERS\blbdrive.sys
19:37:01.0108 3420 blbdrive - ok
19:37:01.0138 3420 bowser (19d20159708e152267e53b66677a4995) C:\Windows\system32\DRIVERS\bowser.sys
19:37:01.0148 3420 bowser - ok
19:37:01.0148 3420 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\DRIVERS\BrFiltLo.sys
19:37:01.0148 3420 BrFiltLo - ok
19:37:01.0168 3420 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\DRIVERS\BrFiltUp.sys
19:37:01.0168 3420 BrFiltUp - ok
19:37:01.0188 3420 Brserid (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys
19:37:01.0188 3420 Brserid - ok
19:37:01.0198 3420 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys
19:37:01.0198 3420 BrSerWdm - ok
19:37:01.0208 3420 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys
19:37:01.0208 3420 BrUsbMdm - ok
19:37:01.0258 3420 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys
19:37:01.0258 3420 BrUsbSer - ok
19:37:01.0278 3420 BTCFilterService - ok
19:37:01.0318 3420 BTHMODEM (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\DRIVERS\bthmodem.sys
19:37:01.0318 3420 BTHMODEM - ok
19:37:01.0338 3420 cdfs (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys
19:37:01.0338 3420 cdfs - ok
19:37:01.0378 3420 cdrom (83d2d75e1efb81b3450c18131443f7db) C:\Windows\system32\DRIVERS\cdrom.sys
19:37:01.0388 3420 cdrom - ok
19:37:01.0398 3420 circlass (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\DRIVERS\circlass.sys
19:37:01.0398 3420 circlass - ok
19:37:01.0428 3420 CLFS (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys
19:37:01.0438 3420 CLFS - ok
19:37:01.0458 3420 CmBatt (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\DRIVERS\CmBatt.sys
19:37:01.0458 3420 CmBatt - ok
19:37:01.0478 3420 cmdide (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\DRIVERS\cmdide.sys
19:37:01.0478 3420 cmdide - ok
19:37:01.0508 3420 CNG (937beb186a735aca91d717044a49d17e) C:\Windows\system32\Drivers\cng.sys
19:37:01.0518 3420 CNG - ok
19:37:01.0528 3420 Compbatt (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\DRIVERS\compbatt.sys
19:37:01.0528 3420 Compbatt - ok
19:37:01.0538 3420 CompositeBus (f26b3a86f6fa87ca360b879581ab4123) C:\Windows\system32\DRIVERS\CompositeBus.sys
19:37:01.0538 3420 CompositeBus - ok
19:37:01.0588 3420 crcdisk (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\DRIVERS\crcdisk.sys
19:37:01.0588 3420 crcdisk - ok
19:37:01.0668 3420 DfsC (9c253ce7311ca60fc11c774692a13208) C:\Windows\system32\Drivers\dfsc.sys
19:37:01.0668 3420 DfsC - ok
19:37:01.0688 3420 discache (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys
19:37:01.0688 3420 discache - ok
19:37:01.0728 3420 Disk (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\DRIVERS\disk.sys
19:37:01.0728 3420 Disk - ok
19:37:01.0768 3420 drmkaud (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys
19:37:01.0768 3420 drmkaud - ok
19:37:01.0828 3420 DXGKrnl (1633b9abf52784a1331476397a48cbef) C:\Windows\System32\drivers\dxgkrnl.sys
19:37:01.0838 3420 DXGKrnl - ok
19:37:01.0838 3420 EagleX64 - ok
19:37:01.0918 3420 ebdrv (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\DRIVERS\evbda.sys
19:37:01.0948 3420 ebdrv - ok
19:37:01.0968 3420 elxstor (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\DRIVERS\elxstor.sys
19:37:01.0968 3420 elxstor - ok
19:37:01.0988 3420 ErrDev (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\DRIVERS\errdev.sys
19:37:01.0988 3420 ErrDev - ok
19:37:02.0008 3420 exfat (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys
19:37:02.0008 3420 exfat - ok
19:37:02.0028 3420 fastfat (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys
19:37:02.0028 3420 fastfat - ok
19:37:02.0038 3420 fdc (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\DRIVERS\fdc.sys
19:37:02.0038 3420 fdc - ok
19:37:02.0058 3420 FileInfo (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys
19:37:02.0058 3420 FileInfo - ok
19:37:02.0078 3420 Filetrace (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys
19:37:02.0078 3420 Filetrace - ok
19:37:02.0078 3420 flpydisk (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\DRIVERS\flpydisk.sys
19:37:02.0078 3420 flpydisk - ok
19:37:02.0098 3420 FltMgr (f7866af72abbaf84b1fa5aa195378c59) C:\Windows\system32\drivers\fltmgr.sys
19:37:02.0098 3420 FltMgr - ok
19:37:02.0118 3420 FsDepends (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys
19:37:02.0118 3420 FsDepends - ok
19:37:02.0128 3420 Fs_Rec (e95ef8547de20cf0603557c0cf7a9462) C:\Windows\system32\drivers\Fs_Rec.sys
19:37:02.0128 3420 Fs_Rec - ok
19:37:02.0178 3420 fvevol (ae87ba80d0ec3b57126ed2cdc15b24ed) C:\Windows\system32\DRIVERS\fvevol.sys
19:37:02.0178 3420 fvevol - ok
19:37:02.0198 3420 gagp30kx (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\DRIVERS\gagp30kx.sys
19:37:02.0198 3420 gagp30kx - ok
19:37:02.0238 3420 gbridge (830e853d557da8f4d9449699e53cbee0) C:\Windows\system32\DRIVERS\gbridge64.sys
19:37:02.0238 3420 gbridge - ok
19:37:02.0258 3420 hcw85cir (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys
19:37:02.0258 3420 hcw85cir - ok
19:37:02.0308 3420 HdAudAddService (6410f6f415b2a5a9037224c41da8bf12) C:\Windows\system32\drivers\HdAudio.sys
19:37:02.0318 3420 HdAudAddService - ok
19:37:02.0348 3420 HDAudBus (0a49913402747a0b67de940fb42cbdbb) C:\Windows\system32\DRIVERS\HDAudBus.sys
19:37:02.0348 3420 HDAudBus - ok
19:37:02.0378 3420 HECIx64 (b6ac71aaa2b10848f57fc49d55a651af) C:\Windows\system32\DRIVERS\HECIx64.sys
19:37:02.0378 3420 HECIx64 - ok
19:37:02.0388 3420 HidBatt (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\DRIVERS\HidBatt.sys
19:37:02.0388 3420 HidBatt - ok
19:37:02.0398 3420 HidBth (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\DRIVERS\hidbth.sys
19:37:02.0398 3420 HidBth - ok
19:37:02.0408 3420 HidIr (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\DRIVERS\hidir.sys
19:37:02.0408 3420 HidIr - ok
19:37:02.0418 3420 HidUsb (b3bf6b5b50006def50b66306d99fcf6f) C:\Windows\system32\DRIVERS\hidusb.sys
19:37:02.0418 3420 HidUsb - ok
19:37:02.0448 3420 HpSAMD (0886d440058f203eba0e1825e4355914) C:\Windows\system32\DRIVERS\HpSAMD.sys
19:37:02.0448 3420 HpSAMD - ok
19:37:02.0478 3420 HTTP (cee049cac4efa7f4e1e4ad014414a5d4) C:\Windows\system32\drivers\HTTP.sys
19:37:02.0488 3420 HTTP - ok
19:37:02.0498 3420 hwpolicy (f17766a19145f111856378df337a5d79) C:\Windows\system32\drivers\hwpolicy.sys
19:37:02.0498 3420 hwpolicy - ok
19:37:02.0518 3420 i8042prt (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\DRIVERS\i8042prt.sys
19:37:02.0518 3420 i8042prt - ok
19:37:02.0558 3420 iaStorV (b75e45c564e944a2657167d197ab29da) C:\Windows\system32\drivers\iaStorV.sys
19:37:02.0558 3420 iaStorV - ok
19:37:02.0748 3420 igfx (09ce164afa8483e41808784d7fca154e) C:\Windows\system32\DRIVERS\igdkmd64.sys
19:37:02.0788 3420 igfx - ok
19:37:02.0818 3420 iirsp (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\DRIVERS\iirsp.sys
19:37:02.0818 3420 iirsp - ok
19:37:02.0848 3420 Impcd (dd587a55390ed2295bce6d36ad567da9) C:\Windows\system32\DRIVERS\Impcd.sys
19:37:02.0848 3420 Impcd - ok
19:37:02.0908 3420 IntcAzAudAddService (e9befd8c6a1db3b544b61647dda35f62) C:\Windows\system32\drivers\RTKVHD64.sys
19:37:02.0908 3420 IntcAzAudAddService - ok
19:37:02.0938 3420 IntcDAud (58cf58dee26c909bd6f977b61d246295) C:\Windows\system32\DRIVERS\IntcDAud.sys
19:37:02.0938 3420 IntcDAud - ok
19:37:02.0968 3420 intelide (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\DRIVERS\intelide.sys
19:37:02.0968 3420 intelide - ok
19:37:02.0978 3420 intelppm (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\DRIVERS\intelppm.sys
19:37:02.0978 3420 intelppm - ok
19:37:03.0008 3420 IpFilterDriver (722dd294df62483cecaae6e094b4d695) C:\Windows\system32\DRIVERS\ipfltdrv.sys
19:37:03.0008 3420 IpFilterDriver - ok
19:37:03.0018 3420 IPMIDRV (e2b4a4494db7cb9b89b55ca268c337c5) C:\Windows\system32\DRIVERS\IPMIDrv.sys
19:37:03.0018 3420 IPMIDRV - ok
19:37:03.0028 3420 IPNAT (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys
19:37:03.0028 3420 IPNAT - ok
19:37:03.0038 3420 IRENUM (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys
19:37:03.0038 3420 IRENUM - ok
19:37:03.0048 3420 isapnp (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\DRIVERS\isapnp.sys
19:37:03.0048 3420 isapnp - ok
19:37:03.0068 3420 iScsiPrt (fa4d2557de56d45b0a346f93564be6e1) C:\Windows\system32\DRIVERS\msiscsi.sys
19:37:03.0078 3420 iScsiPrt - ok
19:37:03.0098 3420 k57nd60a (9d7ea8c7215d8d4ae7be110eee61085d) C:\Windows\system32\DRIVERS\k57nd60a.sys
19:37:03.0098 3420 k57nd60a - ok
19:37:03.0118 3420 kbdclass (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\DRIVERS\kbdclass.sys
19:37:03.0118 3420 kbdclass - ok
19:37:03.0158 3420 kbdhid (6def98f8541e1b5dceb2c822a11f7323) C:\Windows\system32\DRIVERS\kbdhid.sys
19:37:03.0158 3420 kbdhid - ok
19:37:03.0188 3420 KSecDD (16c1b906fc5ead84769f90b736b6bf0e) C:\Windows\system32\Drivers\ksecdd.sys
19:37:03.0188 3420 KSecDD - ok
19:37:03.0208 3420 KSecPkg (0b711550c56444879d71c7daabda6c83) C:\Windows\system32\Drivers\ksecpkg.sys
19:37:03.0208 3420 KSecPkg - ok
19:37:03.0218 3420 ksthunk (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys
19:37:03.0218 3420 ksthunk - ok
19:37:03.0268 3420 Lavasoft Kernexplorer (9a7fa6371f68335fd3c3d6488bc5a9f8) C:\Program Files (x86)\Lavasoft\Ad-Aware\KernExplorer64.sys
19:37:03.0268 3420 Lavasoft Kernexplorer - ok
19:37:03.0278 3420 Lbd (c8b3131857931ae76798a741cc52b021) C:\Windows\system32\DRIVERS\Lbd.sys
19:37:03.0288 3420 Lbd - ok
19:37:03.0298 3420 lltdio (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys
19:37:03.0298 3420 lltdio - ok
19:37:03.0345 3420 LSI_FC (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\DRIVERS\lsi_fc.sys
19:37:03.0345 3420 LSI_FC - ok
19:37:03.0361 3420 LSI_SAS (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\DRIVERS\lsi_sas.sys
19:37:03.0361 3420 LSI_SAS - ok
19:37:03.0376 3420 LSI_SAS2 (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\DRIVERS\lsi_sas2.sys
19:37:03.0376 3420 LSI_SAS2 - ok
19:37:03.0396 3420 LSI_SCSI (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\DRIVERS\lsi_scsi.sys
19:37:03.0396 3420 LSI_SCSI - ok
19:37:03.0416 3420 luafv (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys
19:37:03.0416 3420 luafv - ok
19:37:03.0436 3420 megasas (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\DRIVERS\megasas.sys
19:37:03.0436 3420 megasas - ok
19:37:03.0446 3420 MegaSR (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\DRIVERS\MegaSR.sys
19:37:03.0446 3420 MegaSR - ok
19:37:03.0466 3420 Modem (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys
19:37:03.0466 3420 Modem - ok
19:37:03.0476 3420 monitor (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys
19:37:03.0476 3420 monitor - ok
19:37:03.0486 3420 motandroidusb - ok
19:37:03.0496 3420 motccgp - ok
19:37:03.0506 3420 motccgpfl - ok
19:37:03.0506 3420 motmodem - ok
19:37:03.0516 3420 MotoSwitchService - ok
19:37:03.0526 3420 Motousbnet - ok
19:37:03.0536 3420 motusbdevice - ok
19:37:03.0556 3420 mouclass (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\DRIVERS\mouclass.sys
19:37:03.0556 3420 mouclass - ok
19:37:03.0576 3420 mouhid (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys
19:37:03.0576 3420 mouhid - ok
19:37:03.0596 3420 mountmgr (791af66c4d0e7c90a3646066386fb571) C:\Windows\system32\drivers\mountmgr.sys
19:37:03.0596 3420 mountmgr - ok
19:37:03.0616 3420 mpio (609d1d87649ecc19796f4d76d4c15cea) C:\Windows\system32\DRIVERS\mpio.sys
19:37:03.0616 3420 mpio - ok
19:37:03.0636 3420 mpsdrv (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys
19:37:03.0636 3420 mpsdrv - ok
19:37:03.0646 3420 MRxDAV (30524261bb51d96d6fcbac20c810183c) C:\Windows\system32\drivers\mrxdav.sys
19:37:03.0646 3420 MRxDAV - ok
19:37:03.0686 3420 mrxsmb (040d62a9d8ad28922632137acdd984f2) C:\Windows\system32\DRIVERS\mrxsmb.sys
19:37:03.0686 3420 mrxsmb - ok
19:37:03.0736 3420 mrxsmb10 (f0067552f8f9b33d7c59403ab808a3cb) C:\Windows\system32\DRIVERS\mrxsmb10.sys
19:37:03.0736 3420 mrxsmb10 - ok
19:37:03.0756 3420 mrxsmb20 (3c142d31de9f2f193218a53fe2632051) C:\Windows\system32\DRIVERS\mrxsmb20.sys
19:37:03.0756 3420 mrxsmb20 - ok
19:37:03.0786 3420 msahci (bccf16d5fb1109162380e3e28dc9e4e5) C:\Windows\system32\DRIVERS\msahci.sys
19:37:03.0786 3420 msahci - ok
19:37:03.0806 3420 msdsm (8d27b597229aed79430fb9db3bcbfbd0) C:\Windows\system32\DRIVERS\msdsm.sys
19:37:03.0806 3420 msdsm - ok
19:37:03.0826 3420 Msfs (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys
19:37:03.0826 3420 Msfs - ok
19:37:03.0846 3420 mshidkmdf (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys
19:37:03.0846 3420 mshidkmdf - ok
19:37:03.0906 3420 msisadrv (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\DRIVERS\msisadrv.sys
19:37:03.0906 3420 msisadrv - ok
19:37:03.0936 3420 MSKSSRV (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys
19:37:03.0936 3420 MSKSSRV - ok
19:37:03.0946 3420 MSPCLOCK (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys
19:37:03.0956 3420 MSPCLOCK - ok
19:37:03.0966 3420 MSPQM (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys
19:37:03.0966 3420 MSPQM - ok
19:37:03.0986 3420 MsRPC (89cb141aa8616d8c6a4610fa26c60964) C:\Windows\system32\drivers\MsRPC.sys
19:37:03.0996 3420 MsRPC - ok
19:37:04.0006 3420 mssmbios (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\DRIVERS\mssmbios.sys
19:37:04.0006 3420 mssmbios - ok
19:37:04.0026 3420 MSTEE (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys
19:37:04.0026 3420 MSTEE - ok
19:37:04.0036 3420 MTConfig (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\DRIVERS\MTConfig.sys
19:37:04.0036 3420 MTConfig - ok
19:37:04.0056 3420 Mup (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys
19:37:04.0056 3420 Mup - ok
19:37:04.0076 3420 NativeWifiP (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS\nwifi.sys
19:37:04.0086 3420 NativeWifiP - ok
19:37:04.0116 3420 NDIS (cad515dbd07d082bb317d9928ce8962c) C:\Windows\system32\drivers\ndis.sys
19:37:04.0116 3420 NDIS - ok
19:37:04.0136 3420 NdisCap (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS\ndiscap.sys
19:37:04.0136 3420 NdisCap - ok
19:37:04.0176 3420 NdisTapi (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS\ndistapi.sys
19:37:04.0176 3420 NdisTapi - ok
19:37:04.0186 3420 Ndisuio (f105ba1e22bf1f2ee8f005d4305e4bec) C:\Windows\system32\DRIVERS\ndisuio.sys
19:37:04.0196 3420 Ndisuio - ok
19:37:04.0206 3420 NdisWan (557dfab9ca1fcb036ac77564c010dad3) C:\Windows\system32\DRIVERS\ndiswan.sys
19:37:04.0216 3420 NdisWan - ok
19:37:04.0226 3420 NDProxy (659b74fb74b86228d6338d643cd3e3cf) C:\Windows\system32\drivers\NDProxy.sys
19:37:04.0226 3420 NDProxy - ok
19:37:04.0236 3420 NetBIOS (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS\netbios.sys
19:37:04.0236 3420 NetBIOS - ok
19:37:04.0256 3420 NetBT (9162b273a44ab9dce5b44362731d062a) C:\Windows\system32\DRIVERS\netbt.sys
19:37:04.0256 3420 NetBT - ok
19:37:04.0286 3420 nfrd960 (77889813be4d166cdab78ddba990da92) C:\Windows\system32\DRIVERS\nfrd960.sys
19:37:04.0286 3420 nfrd960 - ok
19:37:04.0316 3420 NPF (c31fa031335eff434b2d94278e74bcce) C:\Windows\system32\DRIVERS\npf.sys
19:37:04.0316 3420 NPF - ok
19:37:04.0346 3420 Npfs (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys
19:37:04.0346 3420 Npfs - ok
19:37:04.0366 3420 nsiproxy (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers\nsiproxy.sys
19:37:04.0366 3420 nsiproxy - ok
19:37:04.0436 3420 Ntfs (378e0e0dfea67d98ae6ea53adbbd76bc) C:\Windows\system32\drivers\Ntfs.sys
19:37:04.0446 3420 Ntfs - ok
19:37:04.0486 3420 Null (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys
19:37:04.0486 3420 Null - ok
19:37:04.0526 3420 NVHDA (ed9380f201c8126425c09bed96dbe1e5) C:\Windows\system32\drivers\nvhda64v.sys
19:37:04.0526 3420 NVHDA - ok
19:37:04.0756 3420 nvlddmkm (bbe872a814b00798c2d568d46c42a71b) C:\Windows\system32\DRIVERS\nvlddmkm.sys
19:37:04.0806 3420 nvlddmkm - ok
19:37:04.0836 3420 nvraid (a4d9c9a608a97f59307c2f2600edc6a4) C:\Windows\system32\drivers\nvraid.sys
19:37:04.0836 3420 nvraid - ok
19:37:04.0856 3420 nvstor (6c1d5f70e7a6a3fd1c90d840edc048b9) C:\Windows\system32\drivers\nvstor.sys
19:37:04.0866 3420 nvstor - ok
19:37:04.0876 3420 nv_agp (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\DRIVERS\nv_agp.sys
19:37:04.0876 3420 nv_agp - ok
19:37:04.0906 3420 ohci1394 (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\DRIVERS\ohci1394.sys
19:37:04.0906 3420 ohci1394 - ok
19:37:04.0936 3420 Parport (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\DRIVERS\parport.sys
19:37:04.0936 3420 Parport - ok
19:37:04.0956 3420 partmgr (7daa117143316c4a1537e074a5a9eaf0) C:\Windows\system32\drivers\partmgr.sys
19:37:04.0956 3420 partmgr - ok
19:37:04.0986 3420 pci (f36f6504009f2fb0dfd1b17a116ad74b) C:\Windows\system32\DRIVERS\pci.sys
19:37:04.0986 3420 pci - ok
19:37:05.0006 3420 pciide (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\DRIVERS\pciide.sys
19:37:05.0006 3420 pciide - ok
19:37:05.0026 3420 pcmcia (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\DRIVERS\pcmcia.sys
19:37:05.0026 3420 pcmcia - ok
19:37:05.0046 3420 pcw (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys
19:37:05.0046 3420 pcw - ok
19:37:05.0076 3420 PEAUTH (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys
19:37:05.0076 3420 PEAUTH - ok
19:37:05.0116 3420 PptpMiniport (27cc19e81ba5e3403c48302127bda717) C:\Windows\system32\DRIVERS\raspptp.sys
19:37:05.0116 3420 PptpMiniport - ok
19:37:05.0156 3420 Processor (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\DRIVERS\processr.sys
19:37:05.0156 3420 Processor - ok
19:37:05.0206 3420 Psched (ee992183bd8eaefd9973f352e587a299) C:\Windows\system32\DRIVERS\pacer.sys
19:37:05.0206 3420 Psched - ok
19:37:05.0266 3420 ql2300 (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\DRIVERS\ql2300.sys
19:37:05.0276 3420 ql2300 - ok
19:37:05.0286 3420 ql40xx (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\DRIVERS\ql40xx.sys
19:37:05.0286 3420 ql40xx - ok
19:37:05.0296 3420 QWAVEdrv (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys
19:37:05.0306 3420 QWAVEdrv - ok
19:37:05.0326 3420 RasAcd (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERS\rasacd.sys
19:37:05.0326 3420 RasAcd - ok
19:37:05.0336 3420 RasAgileVpn (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys
19:37:05.0346 3420 RasAgileVpn - ok
19:37:05.0386 3420 Rasl2tp (87a6e852a22991580d6d39adc4790463) C:\Windows\system32\DRIVERS\rasl2tp.sys
19:37:05.0386 3420 Rasl2tp - ok
19:37:05.0426 3420 RasPppoe (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERS\raspppoe.sys
19:37:05.0426 3420 RasPppoe - ok
19:37:05.0466 3420 RasSstp (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERS\rassstp.sys
19:37:05.0466 3420 RasSstp - ok
19:37:05.0486 3420 rdbss (3bac8142102c15d59a87757c1d41dce5) C:\Windows\system32\DRIVERS\rdbss.sys
19:37:05.0486 3420 rdbss - ok
19:37:05.0496 3420 rdpbus (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\DRIVERS\rdpbus.sys
19:37:05.0496 3420 rdpbus - ok
19:37:05.0516 3420 RDPCDD (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys
19:37:05.0516 3420 RDPCDD - ok
19:37:05.0526 3420 RDPENCDD (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\drivers\rdpencdd.sys
19:37:05.0526 3420 RDPENCDD - ok
19:37:05.0536 3420 RDPREFMP (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\drivers\rdprefmp.sys
19:37:05.0536 3420 RDPREFMP - ok
19:37:05.0556 3420 RDPWD (8a3e6bea1c53ea6177fe2b6eba2c80d7) C:\Windows\system32\drivers\RDPWD.sys
19:37:05.0556 3420 RDPWD - ok
19:37:05.0586 3420 rdyboost (634b9a2181d98f15941236886164ec8b) C:\Windows\system32\drivers\rdyboost.sys
19:37:05.0586 3420 rdyboost - ok
19:37:05.0616 3420 RimUsb (5790bca445cc40df8b38c2c48608aac2) C:\Windows\system32\Drivers\RimUsb_AMD64.sys
19:37:05.0616 3420 RimUsb - ok
19:37:05.0636 3420 rspndr (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERS\rspndr.sys
19:37:05.0646 3420 rspndr - ok
19:37:05.0706 3420 SASDIFSV (3289766038db2cb14d07dc84392138d5) C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS
19:37:05.0706 3420 SASDIFSV - ok
19:37:05.0716 3420 SASKUTIL (58a38e75f3316a83c23df6173d41f2b5) C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS
19:37:05.0726 3420 SASKUTIL - ok
19:37:05.0746 3420 sbp2port (e3bbb89983daf5622c1d50cf49f28227) C:\Windows\system32\DRIVERS\sbp2port.sys
19:37:05.0746 3420 sbp2port - ok
19:37:05.0766 3420 scfilter (c94da20c7e3ba1dca269bc8460d98387) C:\Windows\system32\DRIVERS\scfilter.sys
19:37:05.0766 3420 scfilter - ok
19:37:05.0806 3420 SCMNdisP (6011cdf54bb6f4c69f38faccdad73d7e) C:\Windows\system32\DRIVERS\scmndisp.sys
19:37:05.0806 3420 SCMNdisP - ok
19:37:05.0826 3420 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys
19:37:05.0826 3420 secdrv - ok
19:37:05.0846 3420 Serenum (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\DRIVERS\serenum.sys
19:37:05.0846 3420 Serenum - ok
19:37:05.0856 3420 Serial (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\DRIVERS\serial.sys
19:37:05.0856 3420 Serial - ok
19:37:05.0866 3420 sermouse (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\DRIVERS\sermouse.sys
19:37:05.0866 3420 sermouse - ok
19:37:05.0886 3420 sffdisk (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\DRIVERS\sffdisk.sys
19:37:05.0886 3420 sffdisk - ok
19:37:05.0896 3420 sffp_mmc (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\DRIVERS\sffp_mmc.sys
19:37:05.0896 3420 sffp_mmc - ok
19:37:05.0906 3420 sffp_sd (178298f767fe638c9fedcbdef58bb5e4) C:\Windows\system32\DRIVERS\sffp_sd.sys
19:37:05.0906 3420 sffp_sd - ok
19:37:05.0916 3420 sfloppy (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\DRIVERS\sfloppy.sys
19:37:05.0916 3420 sfloppy - ok
19:37:05.0936 3420 SiSRaid2 (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\DRIVERS\SiSRaid2.sys
19:37:05.0936 3420 SiSRaid2 - ok
19:37:05.0946 3420 SiSRaid4 (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\DRIVERS\sisraid4.sys
19:37:05.0956 3420 SiSRaid4 - ok
19:37:05.0996 3420 Smb (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys
19:37:05.0996 3420 Smb - ok
19:37:06.0056 3420 spldr (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys
19:37:06.0056 3420 spldr - ok
19:37:06.0066 3420 sptd - ok
19:37:06.0136 3420 srv (2408c0366d96bcdf63e8f1c78e4a29c5) C:\Windows\system32\DRIVERS\srv.sys
19:37:06.0136 3420 srv - ok
19:37:06.0156 3420 srv2 (76548f7b818881b47d8d1ae1be9c11f8) C:\Windows\system32\DRIVERS\srv2.sys
19:37:06.0156 3420 srv2 - ok
19:37:06.0176 3420 srvnet (0af6e19d39c70844c5caa8fb0183c36e) C:\Windows\system32\DRIVERS\srvnet.sys
19:37:06.0176 3420 srvnet - ok
19:37:06.0186 3420 stexstor (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\DRIVERS\stexstor.sys
19:37:06.0186 3420 stexstor - ok
19:37:06.0206 3420 swenum (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\DRIVERS\swenum.sys
19:37:06.0206 3420 swenum - ok
19:37:06.0306 3420 Tcpip (f18f56efc0bfb9c87ba01c37b27f4da5) C:\Windows\system32\drivers\tcpip.sys
19:37:06.0326 3420 Tcpip - ok
19:37:06.0376 3420 TCPIP6 (f18f56efc0bfb9c87ba01c37b27f4da5) C:\Windows\system32\DRIVERS\tcpip.sys
19:37:06.0386 3420 TCPIP6 - ok
19:37:06.0396 3420 tcpipreg (76d078af6f587b162d50210f761eb9ed) C:\Windows\system32\drivers\tcpipreg.sys
19:37:06.0396 3420 tcpipreg - ok
19:37:06.0416 3420 TDPIPE (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers\tdpipe.sys
19:37:06.0416 3420 TDPIPE - ok
19:37:06.0466 3420 TDTCP (e4245bda3190a582d55ed09e137401a9) C:\Windows\system32\drivers\tdtcp.sys
19:37:06.0466 3420 TDTCP - ok
19:37:06.0486 3420 tdx (079125c4b17b01fcaeebce0bcb290c0f) C:\Windows\system32\DRIVERS\tdx.sys
19:37:06.0486 3420 tdx - ok
19:37:06.0506 3420 TermDD (c448651339196c0e869a355171875522) C:\Windows\system32\DRIVERS\termdd.sys
19:37:06.0506 3420 TermDD - ok
19:37:06.0546 3420 tssecsrv (61b96c26131e37b24e93327a0bd1fb95) C:\Windows\system32\DRIVERS\tssecsrv.sys
19:37:06.0546 3420 tssecsrv - ok
19:37:06.0576 3420 tunnel (3836171a2cdf3af8ef10856db9835a70) C:\Windows\system32\DRIVERS\tunnel.sys
19:37:06.0576 3420 tunnel - ok
19:37:06.0596 3420 uagp35 (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\DRIVERS\uagp35.sys
19:37:06.0596 3420 uagp35 - ok
19:37:06.0626 3420 udfs (31ba4a33afab6a69ea092b18017f737f) C:\Windows\system32\DRIVERS\udfs.sys
19:37:06.0626 3420 udfs - ok
19:37:06.0646 3420 uliagpkx (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\DRIVERS\uliagpkx.sys
19:37:06.0646 3420 uliagpkx - ok
19:37:06.0656 3420 umbus (eab6c35e62b1b0db0d1b48b671d3a117) C:\Windows\system32\DRIVERS\umbus.sys
19:37:06.0656 3420 umbus - ok
19:37:06.0676 3420 UmPass (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\DRIVERS\umpass.sys
19:37:06.0676 3420 UmPass - ok
19:37:06.0736 3420 usbaudio (77b01bc848298223a95d4ec23e1785a1) C:\Windows\system32\drivers\usbaudio.sys
19:37:06.0736 3420 usbaudio - ok
19:37:06.0776 3420 usbccgp (b26afb54a534d634523c4fb66765b026) C:\Windows\system32\DRIVERS\usbccgp.sys
19:37:06.0776 3420 usbccgp - ok
19:37:06.0796 3420 usbcir (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\DRIVERS\usbcir.sys
19:37:06.0796 3420 usbcir - ok
19:37:06.0836 3420 usbehci (fbb21ebe49f6d560db37ac25fbc68e66) C:\Windows\system32\drivers\usbehci.sys
19:37:06.0836 3420 usbehci - ok
19:37:06.0866 3420 usbhub (6b7a8a99c4a459e73c286a6763ea24cc) C:\Windows\system32\DRIVERS\usbhub.sys
19:37:06.0876 3420 usbhub - ok
19:37:06.0916 3420 usbohci (8c88aa7617b4cbc2e4bed61d26b33a27) C:\Windows\system32\drivers\usbohci.sys
19:37:06.0916 3420 usbohci - ok
19:37:06.0916 3420 usbprint (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS\usbprint.sys
19:37:06.0916 3420 usbprint - ok
19:37:06.0936 3420 USBSTOR (f39983647bc1f3e6100778ddfe9dce29) C:\Windows\system32\DRIVERS\USBSTOR.SYS
19:37:06.0936 3420 USBSTOR - ok
19:37:06.0996 3420 usbuhci (0b5b3b2df3fd1709618acfa50b8392b0) C:\Windows\system32\drivers\usbuhci.sys
19:37:06.0996 3420 usbuhci - ok
19:37:07.0036 3420 vdrvroot (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\DRIVERS\vdrvroot.sys
19:37:07.0036 3420 vdrvroot - ok
19:37:07.0066 3420 vga (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys
19:37:07.0066 3420 vga - ok
19:37:07.0096 3420 VgaSave (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys
19:37:07.0096 3420 VgaSave - ok
19:37:07.0126 3420 vhdmp (c82e748660f62a242b2dfac1442f22a4) C:\Windows\system32\DRIVERS\vhdmp.sys
19:37:07.0126 3420 vhdmp - ok
19:37:07.0156 3420 viaide (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\DRIVERS\viaide.sys
19:37:07.0156 3420 viaide - ok
19:37:07.0176 3420 volmgr (2b1a3dae2b4e70dbba822b7a03fbd4a3) C:\Windows\system32\DRIVERS\volmgr.sys
19:37:07.0176 3420 volmgr - ok
19:37:07.0206 3420 volmgrx (99b0cbb569ca79acaed8c91461d765fb) C:\Windows\system32\drivers\volmgrx.sys
19:37:07.0206 3420 volmgrx - ok
19:37:07.0226 3420 volsnap (58f82eed8ca24b461441f9c3e4f0bf5c) C:\Windows\system32\DRIVERS\volsnap.sys
19:37:07.0226 3420 volsnap - ok
19:37:07.0246 3420 vsmraid (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\DRIVERS\vsmraid.sys
19:37:07.0256 3420 vsmraid - ok
19:37:07.0276 3420 vwifibus (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\system32\DRIVERS\vwifibus.sys
19:37:07.0276 3420 vwifibus - ok
19:37:07.0286 3420 vwififlt (6a3d66263414ff0d6fa754c646612f3f) C:\Windows\system32\DRIVERS\vwififlt.sys
19:37:07.0286 3420 vwififlt - ok
19:37:07.0306 3420 WacomPen (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\DRIVERS\wacompen.sys
19:37:07.0306 3420 WacomPen - ok
19:37:07.0316 3420 WANARP (47ca49400643effd3f1c9a27e1d69324) C:\Windows\system32\DRIVERS\wanarp.sys
19:37:07.0316 3420 WANARP - ok
19:37:07.0326 3420 Wanarpv6 (47ca49400643effd3f1c9a27e1d69324) C:\Windows\system32\DRIVERS\wanarp.sys
19:37:07.0326 3420 Wanarpv6 - ok
19:37:07.0336 3420 Wd (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\DRIVERS\wd.sys
19:37:07.0336 3420 Wd - ok
19:37:07.0366 3420 Wdf01000 (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys
19:37:07.0366 3420 Wdf01000 - ok
19:37:07.0386 3420 WfpLwf (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys
19:37:07.0386 3420 WfpLwf - ok
19:37:07.0426 3420 WimFltr (b14ef15bd757fa488f9c970eee9c0d35) C:\Windows\system32\DRIVERS\wimfltr.sys
19:37:07.0426 3420 WimFltr - ok
19:37:07.0436 3420 WIMMount (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys
19:37:07.0436 3420 WIMMount - ok
19:37:07.0486 3420 WinUsb (4d52c872018af7e18d078978dcc3f6f2) C:\Windows\system32\DRIVERS\WinUsb.sys
19:37:07.0486 3420 WinUsb - ok
19:37:07.0506 3420 WmiAcpi (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\DRIVERS\wmiacpi.sys
19:37:07.0506 3420 WmiAcpi - ok
19:37:07.0536 3420 ws2ifsl (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys
19:37:07.0536 3420 ws2ifsl - ok
19:37:07.0586 3420 WudfPf (c63907207b837a5c05cf6d1606aa0008) C:\Windows\system32\drivers\WudfPf.sys
19:37:07.0586 3420 WudfPf - ok
19:37:07.0606 3420 WUDFRd (d885a873d733020f8b9b9ff4b1666158) C:\Windows\system32\DRIVERS\WUDFRd.sys
19:37:07.0606 3420 WUDFRd - ok
19:37:07.0636 3420 MBR (0x1B8) (cdb4de4bbd714f152979da2dcbef57eb) \Device\Harddisk0\DR0
19:37:07.0666 3420 \Device\Harddisk0\DR0 ( Rootkit.Boot.SST.b ) - infected
19:37:07.0666 3420 \Device\Harddisk0\DR0 - detected Rootkit.Boot.SST.b (0)
19:37:07.0686 3420 MBR (0x1B8) (5fb38429d5d77768867c76dcbdb35194) \Device\Harddisk5\DR5
19:37:07.0696 3420 \Device\Harddisk5\DR5 - ok
19:37:07.0706 3420 Boot (0x1200) (1936fd5dacd385d9b0f3afac3d679a60) \Device\Harddisk0\DR0\Partition0
19:37:07.0706 3420 \Device\Harddisk0\DR0\Partition0 - ok
19:37:07.0716 3420 Boot (0x1200) (976c36ac8983e5e4b875c3bcf2fe81a9) \Device\Harddisk0\DR0\Partition1
19:37:07.0726 3420 \Device\Harddisk0\DR0\Partition1 - ok
19:37:07.0726 3420 Boot (0x1200) (7bd4ee2385ea6391445cbd4f3bd5a5ec) \Device\Harddisk5\DR5\Partition0
19:37:07.0726 3420 \Device\Harddisk5\DR5\Partition0 - ok
19:37:07.0726 3420 ============================================================
19:37:07.0726 3420 Scan finished
19:37:07.0726 3420 ============================================================
19:37:07.0736 2896 Detected object count: 1
19:37:07.0736 2896 Actual detected object count: 1
19:37:13.0112 2896 \Device\Harddisk0\DR0 ( Rootkit.Boot.SST.b ) - skipped by user
19:37:13.0112 2896 \Device\Harddisk0\DR0 ( Rootkit.Boot.SST.b ) - User select action: Skip
19:37:47.0666 3276 Deinitialize success

Thank you for all of your help!
 
#16 ·
Hi 07tcbsp,

Rootkit Warning

Your computer has multiple infections, including a rootkit.
A rootkit is a set of software tools intended for concealing running processes, files or system data from the operating system.

You are strongly advised to do the following:
  1. Disconnect the computer from the Internet and from any networked computers until it is cleaned.
  2. Call all your banks, financial institutions, credit card companies and inform them that you may be a victim of identity theft and put a watch on your accounts.
    If you don't mind the hassle, change all your account numbers.
  3. From a clean computer, change all your passwords
    (Internet login, your email address(es), financial accounts, PayPal, eBay, Amazon and any online activities you carry out which require a username and password).
    • Important: DO NOT change your passwords from this computer, the attacker can still get all the new passwords and transaction records.
  4. Back up all your important data except programs. The programs can be reinstalled back from the original disc or from the Net.

Due to its rootkit functionality, your computer is very likely to have been compromised and there is no way that it can be trusted again.
Many experts in the security community believe that once infected with this type of trojan, the best course of action would be to do a reformat and re-installation of the operating system (OS).

This decision will have to be made by you.

To help you understand more, please take some time to read the following articles:
What are rootkits from Wikipedia
When should I re-format and reinstall my OS
What are Remote Access Trojans and why are they dangerous
How do I respond to a possible identity theft and how do I prevent it
Back up and restore: frequently asked questions
How to back up or transfer your data on a Windows-based computer

Please let me know how you wish to proceed.

mambass
 
#17 ·
Thank you for the reply. Im fairly confident my personal stuff is secure as I always keep a close eye on it and nothing has changed. I will take the corrective action though. I actually already decided I wanted to reinstall windows, but the problem is that I don't have any back up or reinstall cd's at all. I don't have a partitioned hard drive with a reinstall on it either. What options do I have other than buying a completely new windows install?

Thank you for all of your help.
 
#18 ·
Hi 07tcbsp, :)

The aswMBR log indicates that you have a Dell partition. It is possible that this partition could be used along with a Dell recovery disk to restore your computer to its out-of-the-box state. If this is correct then you might be able to access that partition by pressing Ctrl+F10 at boot up. If that doesn't work then Dell Support should be able to provide instructions for accessing that partition.

Dell Support could assist you in the recovery process and could let you know what options exist should you not be able to locate the recovery disk (e.g., you may be able to purchase one from them at a cost less than that of a new Windows CD). This of course would mean that all of the files that you have accumulated would be lost and that applications that were not initially on your computer would need to be reinstalled. You would therefore want to backup all non-executable files that you would like to retain (including application data files such as e-mails, contact lists, browser favorites, etc.) prior to restoring the computer to its original state. You would also need to immediately bring Windows and all other applications up-to-date with respect to all security patches after performing the recovery and before surfing the net.

If Dell indicates that this is not an option then an alternative would be to reformat your disk and install a new version of Windows. If that's not practical then we can attempt to clean the computer however we cannot guarantee that it can be trusted.

I hope that this has addressed your questions. Please let me know how you would like to proceed from here.

mambass
 
#19 ·
I'm game for reinstalling windows, but I don't know how I am going to go about it. I tried running through how I know how to do it with no avail. I tried doing ctrl+f10 but all that yielded was memory test and system test. I guess my next move is to contact Dell and figure out what they can do for me. My next question is, I have an external hard drive connected to my computer 24/7. Is there a chance that this is infected aswell? I know I should have made a back up disc from the get go, but that was just horrible planning on my part. I did change all my passwords. Google informed me that my e-mail had been accessed from India. Thats more than enough to scare me, lmfao. I just hope no other information was gotten to. I just had my credit checked today, and all my accounts look fine, so I think im going to be okay. Thanks again for all of your help. I appreciate it.
 
#20 ·
Hi 07tcbsp, :)

07tcbsp said:
I guess my next move is to contact Dell and figure out what they can do for me.
That sounds like a good plan. :up:

07tcbsp said:
My next question is, I have an external hard drive connected to my computer 24/7. Is there a chance that this is infected aswell?
Your data files should be OK. Executable files should not be trusted. You will need to reinstall all applications that are not automatically installed as a part of the recovery process. After you have installed an antivirus product and have updated its files as well as installed all security patches for the operating system and all applications, you can then bring your non-executable files over to the recovered system and then run a full antivirus scan of your system.

Please let me know what you learn from Dell and how you would like to proceed from here.

mambass
 
#21 ·
Dell said that my computer is registered under another name. Who's name that is I do not know, considering I bought this computer brand new. They also told me that my only options at this point was $129 for a 1 time fix or $329 for a 1 year support of all dell computers I know for all software. Seeing as how I could just buy a new operating system for that, I wasn't willing to pay. I found out how to access my system recovery stuff, but it looks like those files are corrupt and it hangs before you get to the screen. It looks like my only option at this point is to just reinstall windows with a new windows disc... A little disappointed but it is what it is I guess.

After I get my computer back up and running, what would you suggest for an antivirus software?

Thanks for your help. Im going to go find a new copy of windows 7 and commence reinstallation now.
 
#22 ·
Hi 07tcbsp, :)

When considering costs, don't forget the cost of layered software that may have been installed on your computer when you bought it from Dell. That software also will be lost when you reformat your disk. You might want to review the list of applications installed on your computer and consider which ones are used and then determine your ability to reinstall those applications. It would probably be best to do this before reformatting your disk.

Provided below is a portion of my standard post once we've removed malware from a system. It contains information that may help you from becoming infected again in the future. The section Read and stay informed below identifies some free antivirus software that you may wish to consider.

The important thing now is to actively do things that will help keep you from getting infected in the future.

  1. Keep Antivirus and applications updated
    This is the MOST IMPORTANT thing that you can do to keep from becoming infected.
    • Keep Microsoft products up-to-date with the latest security patches. Either
      • Enable some level of Automatic Updates
        • Click Start > Control Panel. The Control Panel window will be displayed.
        • Click the Windows Update entry. The Windows Update frame will be displayed.
        • Click the Change setting link in the left column of the window. The Choose how Windows can install updates frame will be displayed.
        • Select the option which best fits your needs.
      • Or click Start > All Programs > Windows Update on a regular basis and follow the instructions to install all important updates.
    • I personally use and recommend the free Secunia Personal Software Inspector (PSI). This program will keep you aware of software that is installed on your computer that contains security vulnerabilities for which security patches exist. I have mine set to automatically scan my computer weekly.
    • All updates are important but pay particular attention to updates for all browsers as well as Microsoft, Java and Adobe products. These are widely-used products that Malware writers frequently target.
  2. Read and stay informed!

    To help minimize the chances of becoming re-infected, please read.
    Computer Security - a short guide to staying safer online

    If your computer is running slowly after your clean up, please read.
    What to do if your Computer is running slowly

I would be grateful if you could reply to this post so that I know you have read it and, if you've no other questions, the thread can be closed.

Good luck with the reinstall. :)

mambass
 
Status
Not open for further replies.
You have insufficient privileges to reply here.
Top