OTL logfile created on: 11/28/2010 11:46:04 PM - Run 1
OTL by OldTimer - Version 3.2.17.3 Folder = C:\Users\Will\Downloads
64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
6.00 Gb Total Physical Memory | 4.00 Gb Available Physical Memory | 62.00% Memory free
12.00 Gb Paging File | 10.00 Gb Available in Paging File | 80.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 465.66 Gb Total Space | 323.33 Gb Free Space | 69.43% Space Free | Partition Type: NTFS
Drive D: | 465.75 Gb Total Space | 465.65 Gb Free Space | 99.98% Space Free | Partition Type: NTFS
Computer Name: WILL-DESKTOP | User Name: Will | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ========== PRC - [2010/11/28 23:43:47 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Users\Will\Downloads\OTL.exe
PRC - [2010/11/26 12:44:03 | 001,242,448 | ---- | M] (Valve Corporation) -- C:\Program Files (x86)\Steam\steam.exe
PRC - [2010/10/29 05:56:25 | 000,910,296 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
PRC - [2010/10/12 18:11:42 | 004,258,136 | ---- | M] (AOL Inc.) -- C:\Program Files (x86)\AIM\aim.exe
PRC - [2010/09/12 03:06:36 | 000,202,256 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe
PRC - [2009/11/24 18:51:40 | 000,081,000 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashDisp.exe
PRC - [2009/11/24 18:51:35 | 000,138,680 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashServ.exe
PRC - [2009/11/24 18:51:21 | 000,254,040 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
PRC - [2009/11/24 18:48:48 | 000,352,920 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
PRC - [2009/11/24 18:43:56 | 000,018,752 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
PRC - [2009/11/10 18:05:34 | 000,248,320 | ---- | M] () -- C:\Program Files (x86)\Razer\Lachesis\razerhid.exe
PRC - [2009/10/30 06:57:08 | 000,369,200 | ---- | M] (DT Soft Ltd) -- C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
PRC - [2009/10/14 13:36:56 | 002,793,304 | ---- | M] () -- C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe
PRC - [2009/10/07 01:47:22 | 000,125,464 | ---- | M] (Logitech Inc.) -- C:\Program Files (x86)\Common Files\LogiShrd\LVMVFM\LVPrS64H.exe
PRC - [2009/07/16 15:35:42 | 005,458,704 | ---- | M] (Logitech Inc.) -- C:\Program Files (x86)\Logitech\Logitech Vid\Vid.exe
PRC - [2009/04/23 06:29:18 | 007,418,368 | ---- | M] (OpenOffice.org) -- C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
PRC - [2009/04/23 06:29:14 | 007,424,000 | ---- | M] (OpenOffice.org) -- C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
PRC - [2008/06/15 12:14:30 | 001,692,672 | ---- | M] (PANTERASoft) -- C:\Program Files (x86)\HDD Health\hddhealth.exe
PRC - [2007/06/05 10:37:12 | 000,163,840 | ---- | M] (Razer Inc.) -- C:\Program Files (x86)\Razer\Lachesis\razerofa.exe
========== Modules (SafeList) ========== MOD - [2010/11/28 23:43:47 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Users\Will\Downloads\OTL.exe
MOD - [2010/09/12 03:06:56 | 000,040,960 | ---- | M] () -- C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Chrome\Hook\rpchromebrowserrecordhelper.dll
MOD - [2010/08/21 00:21:32 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\comctl32.dll
MOD - [2003/03/18 15:14:52 | 000,499,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\MSVCP71.dll
MOD - [2003/02/20 22:42:22 | 000,348,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\MSVCR71.dll
========== Win32 Services (SafeList) ========== SRV:
64bit: - [2009/11/24 22:17:16 | 000,202,752 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
SRV:
64bit: - [2009/11/24 18:51:35 | 000,138,680 | ---- | M] (ALWIL Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast4\ashServ.exe -- (avast! Antivirus)
SRV:
64bit: - [2009/11/24 18:51:21 | 000,254,040 | ---- | M] (ALWIL Software) [On_Demand | Running] -- C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe -- (avast! Mail Scanner)
SRV:
64bit: - [2009/11/24 18:48:48 | 000,352,920 | ---- | M] (ALWIL Software) [On_Demand | Running] -- C:\Program Files\Alwil Software\Avast4\ashWebSv.exe -- (avast! Web Scanner)
SRV:
64bit: - [2009/11/24 18:43:56 | 000,018,752 | ---- | M] (ALWIL Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe -- (aswUpdSv)
SRV:
64bit: - [2009/10/07 01:47:10 | 000,191,000 | ---- | M] (Logitech Inc.) [Auto | Running] -- C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe -- (LVPrcS64)
SRV:
64bit: - [2009/07/13 20:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2010/09/15 21:12:00 | 000,411,432 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2010/03/18 12:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2009/06/10 16:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
========== Driver Services (SafeList) ========== DRV:
64bit: - [2010/02/01 02:48:29 | 000,834,544 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd)
DRV:
64bit: - [2009/12/19 09:11:40 | 000,314,400 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:
64bit: - [2009/11/24 22:52:14 | 006,174,720 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (atikmdag)
DRV:
64bit: - [2009/11/24 18:50:05 | 000,022,096 | ---- | M] (ALWIL Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV:
64bit: - [2009/11/24 18:49:56 | 000,065,616 | ---- | M] (ALWIL Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV:
64bit: - [2009/10/16 21:09:14 | 000,029,952 | ---- | M] (Razer (Asia-Pacific) Pte Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Lachesis.sys -- (VaneFltr)
DRV:
64bit: - [2009/10/07 08:49:28 | 006,379,288 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lvuvc64.sys -- (LVUVC64) Logitech QuickCam Pro 5000(UVC)
DRV:
64bit: - [2009/10/07 08:47:46 | 000,327,704 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lvrs64.sys -- (LVRS64)
DRV:
64bit: - [2009/10/07 08:45:38 | 000,271,640 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lvpopf64.sys -- (lvpopf64)
DRV:
64bit: - [2009/10/07 01:45:50 | 000,030,232 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\LVPr2M64.sys -- (LVPr2Mon)
DRV:
64bit: - [2009/10/07 01:45:50 | 000,030,232 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LVPr2M64.sys -- (LVPr2M64)
DRV:
64bit: - [2009/09/30 09:34:30 | 000,121,872 | ---- | M] (ATI Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AtiHdmi.sys -- (AtiHdmiService)
DRV:
64bit: - [2009/08/28 19:42:52 | 000,049,152 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64)
DRV:
64bit: - [2009/07/13 20:52:21 | 000,106,576 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:
64bit: - [2009/07/13 20:52:21 | 000,028,752 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:
64bit: - [2009/07/13 20:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:
64bit: - [2009/07/13 20:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:
64bit: - [2009/07/13 20:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:
64bit: - [2009/07/13 20:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:
64bit: - [2009/06/17 07:19:14 | 000,015,208 | ---- | M] (Secunia) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\psi_mf.sys -- (PSI)
DRV:
64bit: - [2009/06/10 15:38:56 | 000,000,308 | ---- | M] () [File_System | On_Demand | Running] -- C:\Windows\SysNative\wbem\ntfs.mof -- (Ntfs)
DRV:
64bit: - [2009/06/10 15:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:
64bit: - [2009/06/10 15:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:
64bit: - [2009/06/10 15:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:
64bit: - [2009/06/10 15:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:
64bit: - [2009/05/18 14:17:08 | 000,034,152 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)
DRV - [2009/12/16 16:27:00 | 000,007,408 | R--- | M] ( SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | On_Demand | Stopped] -- C:\Program Files (x86)\SUPERAntiSpyware\SASENUM.SYS -- (SASENUM)
DRV - [2009/12/16 16:26:58 | 000,009,968 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Stopped] -- C:\Program Files (x86)\SUPERAntiSpyware\sasdifsv.sys -- (SASDIFSV)
DRV - [2009/12/16 16:26:56 | 000,074,480 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Stopped] -- C:\Program Files (x86)\SUPERAntiSpyware\SASKUTIL.SYS -- (SASKUTIL)
========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = [Binary data over 100 bytes]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
http://store.steampowered.com/IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache =
http://www.msn.com/IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 09 B2 8D C3 DD 97 CA 01 [binary data]
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 1
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=127.0.0.1:23012
========== FireFox ========== FF - prefs.js..browser.startup.homepage: "
http://store.steampowered.com/|http://www.gametap.com/|http://www.gog.com/en/frontpage/"
FF - prefs.js..extensions.enabledItems:
[email protected]:1.1.1.0014
FF - prefs.js..extensions.enabledItems: {ABDE892B-13A8-4d1b-88E6-365A6E755758}:1.1.5
FF - prefs.js..network.proxy.http: "127.0.0.1"
FF - prefs.js..network.proxy.http_port: 50370
FF - HKLM\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2010/09/12 03:06:56 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.15\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2010/10/29 05:56:25 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.15\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2010/10/29 05:56:25 | 000,000,000 | ---D | M]
[2010/01/17 20:38:09 | 000,000,000 | ---D | M] -- C:\Users\Will\AppData\Roaming\Mozilla\Extensions
[2010/11/27 23:34:09 | 000,000,000 | ---D | M] -- C:\Users\Will\AppData\Roaming\Mozilla\Firefox\Profiles\xptvc9dx.default\extensions
[2010/02/01 02:48:52 | 000,000,000 | ---D | M] -- C:\Users\Will\AppData\Roaming\Mozilla\Firefox\Profiles\xptvc9dx.default\extensions\
[email protected][2010/02/01 02:48:48 | 000,002,055 | ---- | M] () -- C:\Users\Will\AppData\Roaming\Mozilla\Firefox\Profiles\xptvc9dx.default\searchplugins\daemon-search.xml
[2010/11/27 23:34:09 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Mozilla Firefox\extensions
[2010/02/17 17:21:02 | 000,238,776 | ---- | M] (Pando Networks) -- C:\Program Files (x86)\Mozilla Firefox\plugins\npPandoWebInst.dll
O1 HOSTS File: ([2009/06/10 16:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
O3:
64bit: - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll ()
O3 - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll ()
O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
O3:
64bit: - HKCU\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
O4:
64bit: - HKLM..\Run: [] File not found
O4:
64bit: - HKLM..\Run: [Launch LCDMon] C:\Program Files\Logitech\G-series Software\LCDMon.exe (Logitech Inc.)
O4:
64bit: - HKLM..\Run: [Launch LGDCore] C:\Program Files\Logitech\G-series Software\LGDCore.exe (Logitech Inc.)
O4:
64bit: - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [AppleSyncNotifier] C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe (Apple Inc.)
O4 - HKLM..\Run: [ATICustomerCare] C:\Program Files (x86)\ATI\ATICustomerCare\ATICustomerCare.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [avast!] C:\Program Files\Alwil Software\Avast4\ashDisp.exe (ALWIL Software)
O4 - HKLM..\Run: [Lachesis] C:\Program Files (x86)\Razer\Lachesis\razerhid.exe ()
O4 - HKLM..\Run: [LogitechQuickCamRibbon] C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe ()
O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [TkBellExe] C:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe (RealNetworks, Inc.)
O4 - HKCU..\Run: [Aim] C:\Program Files (x86)\AIM\aim.exe (AOL Inc.)
O4 - HKCU..\Run: [DAEMON Tools Lite] C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKCU..\Run: [HDDHealth] C:\Program Files (x86)\HDD Health\HDDHealth.exe (PANTERASoft)
O4 - HKCU..\Run: [jgyjwhrk] C:\Users\Will\AppData\Local\Temp\kkrmqceja\ohesbyjtsbl.exe ()
O4 - HKCU..\Run: [Logitech Vid] C:\Program Files (x86)\Logitech\Logitech Vid\vid.exe (Logitech Inc.)
O4 - HKCU..\Run: [Pando Media Booster] C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe ()
O4 - HKCU..\Run: [Steam] C:\Program Files (x86)\Steam\Steam.exe (Valve Corporation)
O4 - Startup: C:\Users\Will\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.1.lnk = C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93}
http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}
http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab (Java Plug-in 1.6.0_13)
O16 - DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}
http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}
http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000}
http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O20:
64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:
64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:
64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - Winlogon\Notify\!SASWinLogon: DllName - C:\Program Files (x86)\SUPERAntiSpyware\SASWINLO.dll - C:\Program Files (x86)\SUPERAntiSpyware\SASWINLO.dll (SUPERAntiSpyware.com)
O21:
64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O22:
64bit: - SharedTaskScheduler: {1984DD45-52CF-49cd-AB77-18F378FEA264} - FencesShellExt - C:\Program Files (x86)\Stardock\Fences\FencesMenu64.dll (Stardock)
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files (x86)\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com)
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{4889a322-f022-11df-95b2-001fbc0119d1}\Shell - "" = AutoRun
O33 - MountPoints2\{4889a322-f022-11df-95b2-001fbc0119d1}\Shell\AutoRun\command - "" = G:\TL-Bootstrap.exe -- File not found
O33 - MountPoints2\{63afdb93-0f06-11df-b303-001fbc0119d1}\Shell - "" = AutoRun
O33 - MountPoints2\{63afdb93-0f06-11df-b303-001fbc0119d1}\Shell\AutoRun\command - "" = F:\_AUTORUN\AUTORUN.EXE -- File not found
O33 - MountPoints2\{63afdb93-0f06-11df-b303-001fbc0119d1}\Shell\instDX\command - "" = F:\directX\dxsetup.exe -- File not found
O33 - MountPoints2\{63afdb93-0f06-11df-b303-001fbc0119d1}\Shell\readme\command - "" = notepad readme.txt
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35:
64bit: - HKLM\..comfile [open] -- "%1" %*
O35:
64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:
64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:
64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
SafeBootMin:
64bit: AppMgmt - Service
SafeBootMin:
64bit: Base - Driver Group
SafeBootMin:
64bit: Boot Bus Extender - Driver Group
SafeBootMin:
64bit: Boot file system - Driver Group
SafeBootMin:
64bit: File system - Driver Group
SafeBootMin:
64bit: Filter - Driver Group
SafeBootMin:
64bit: HelpSvc - Service
SafeBootMin:
64bit: PCI Configuration - Driver Group
SafeBootMin:
64bit: PEVSystemStart - Service
SafeBootMin:
64bit: PNP Filter - Driver Group
SafeBootMin:
64bit: Primary disk - Driver Group
SafeBootMin:
64bit: procexp90.Sys - Driver
SafeBootMin:
64bit: sacsvr - Service
SafeBootMin:
64bit: SCSI Class - Driver Group
SafeBootMin:
64bit: System Bus Extender - Driver Group
SafeBootMin:
64bit: vmms - Service
SafeBootMin:
64bit: WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SafeBootMin:
64bit: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin:
64bit: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin:
64bit: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin:
64bit: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin:
64bit: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin:
64bit: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin:
64bit: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin:
64bit: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin:
64bit: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin:
64bit: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin:
64bit: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin:
64bit: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin:
64bit: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin:
64bit: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin:
64bit: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin:
64bit: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin:
64bit: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootMin: AppMgmt - Service
SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: HelpSvc - Service
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PEVSystemStart - Service
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Primary disk - Driver Group
SafeBootMin: procexp90.Sys - Driver
SafeBootMin: sacsvr - Service
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: vmms - Service
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootNet:
64bit: AppMgmt - Service
SafeBootNet:
64bit: Base - Driver Group
SafeBootNet:
64bit: Boot Bus Extender - Driver Group
SafeBootNet:
64bit: Boot file system - Driver Group
SafeBootNet:
64bit: File system - Driver Group
SafeBootNet:
64bit: Filter - Driver Group
SafeBootNet:
64bit: HelpSvc - Service
SafeBootNet:
64bit: Messenger - Service
SafeBootNet:
64bit: NDIS Wrapper - Driver Group
SafeBootNet:
64bit: NetBIOSGroup - Driver Group
SafeBootNet:
64bit: NetDDEGroup - Driver Group
SafeBootNet:
64bit: Network - Driver Group
SafeBootNet:
64bit: NetworkProvider - Driver Group
SafeBootNet:
64bit: PCI Configuration - Driver Group
SafeBootNet:
64bit: PEVSystemStart - Service
SafeBootNet:
64bit: PNP Filter - Driver Group
SafeBootNet:
64bit: PNP_TDI - Driver Group
SafeBootNet:
64bit: Primary disk - Driver Group
SafeBootNet:
64bit: procexp90.Sys - Driver
SafeBootNet:
64bit: rdsessmgr - Service
SafeBootNet:
64bit: sacsvr - Service
SafeBootNet:
64bit: SCSI Class - Driver Group
SafeBootNet:
64bit: Streams Drivers - Driver Group
SafeBootNet:
64bit: System Bus Extender - Driver Group
SafeBootNet:
64bit: TDI - Driver Group
SafeBootNet:
64bit: vmms - Service
SafeBootNet:
64bit: WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SafeBootNet:
64bit: WudfUsbccidDriver - Driver
SafeBootNet:
64bit: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet:
64bit: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet:
64bit: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet:
64bit: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet:
64bit: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet:
64bit: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet:
64bit: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet:
64bit: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet:
64bit: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet:
64bit: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet:
64bit: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet:
64bit: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet:
64bit: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet:
64bit: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet:
64bit: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet:
64bit: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet:
64bit: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet:
64bit: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet:
64bit: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet:
64bit: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet:
64bit: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet:
64bit: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootNet: AppMgmt - Service
SafeBootNet: Base - Driver Group
SafeBootNet: Boot Bus Extender - Driver Group
SafeBootNet: Boot file system - Driver Group
SafeBootNet: File system - Driver Group
SafeBootNet: Filter - Driver Group
SafeBootNet: HelpSvc - Service
SafeBootNet: Messenger - Service
SafeBootNet: NDIS Wrapper - Driver Group
SafeBootNet: NetBIOSGroup - Driver Group
SafeBootNet: NetDDEGroup - Driver Group
SafeBootNet: Network - Driver Group
SafeBootNet: NetworkProvider - Driver Group
SafeBootNet: PCI Configuration - Driver Group
SafeBootNet: PEVSystemStart - Service
SafeBootNet: PNP Filter - Driver Group
SafeBootNet: PNP_TDI - Driver Group
SafeBootNet: Primary disk - Driver Group
SafeBootNet: procexp90.Sys - Driver
SafeBootNet: rdsessmgr - Service
SafeBootNet: sacsvr - Service
SafeBootNet: SCSI Class - Driver Group
SafeBootNet: Streams Drivers - Driver Group
SafeBootNet: System Bus Extender - Driver Group
SafeBootNet: TDI - Driver Group
SafeBootNet: vmms - Service
SafeBootNet: WudfUsbccidDriver - Driver
SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
ActiveX:
64bit: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX:
64bit: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX:
64bit: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX:
64bit: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX:
64bit: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX:
64bit: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX:
64bit: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX:
64bit: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX:
64bit: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX:
64bit: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX:
64bit: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX:
64bit: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX:
64bit: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX:
64bit: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -BaseSettings
ActiveX:
64bit: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
ActiveX:
64bit: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX:
64bit: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX:
64bit: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX:
64bit: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX:
64bit: {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework
ActiveX:
64bit: {FEBEF00C-046D-438D-8A88-BF94A6C9E703} - .NET Framework
ActiveX:
64bit: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
ActiveX:
64bit: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\System32\ie4uinit.exe -UserIconConfig
ActiveX:
64bit: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles(x86)%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\SysWOW64\ie4uinit.exe -BaseSettings
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\SysWOW64\Rundll32.exe C:\Windows\SysWOW64\mscories.dll,Install
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {D27CDB6E-AE6D-11CF-96B8-444553540000} - Adobe Flash Player
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\SysWOW64\ie4uinit.exe -UserIconConfig
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\SysWOW64\rundll32.exe" "C:\Windows\SysWOW64\iedkcs32.dll",BrandIEActiveSetup SIGNUP
Drivers32:
64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32:
64bit: VIDC.FPS1 - frapsv64.dll (Beepa P/L)
Drivers32:
64bit: vidc.i420 - lvcod64.dll (Logitech Inc.)
Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
Drivers32: vidc.DIVX - C:\Windows\SysWow64\DivX.dll (DivX, Inc.)
Drivers32: VIDC.FPS1 - C:\Windows\SysWow64\frapsvid.dll (Beepa P/L)
Drivers32: vidc.i420 - C:\Windows\SysWow64\lvcodec2.dll (Logitech Inc.)
Drivers32: vidc.yv12 - C:\Windows\SysWow64\DivX.dll (DivX, Inc.)
========== Files/Folders - Created Within 30 Days ========== [2010/11/27 22:31:53 | 000,000,000 | R--D | C] -- C:\32788R22FWJFW
[2010/11/26 12:56:52 | 000,000,000 | ---D | C] -- C:\Users\Will\Documents\SimCity 4
[2010/11/21 21:27:50 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Graboid
[2010/11/09 20:28:43 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\GearBunnies
[2010/11/06 14:28:53 | 000,000,000 | ---D | C] -- C:\Users\Will\Documents\Electronic Arts
[2010/10/30 21:51:29 | 000,000,000 | ---D | C] -- C:\Users\Will\Desktop\bronxtale-td
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
========== Files - Modified Within 30 Days ========== [2010/11/28 22:57:00 | 000,000,894 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2010/11/28 21:57:00 | 000,000,890 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2010/11/28 21:07:20 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2010/11/28 18:31:44 | 000,000,496 | -H-- | M] () -- C:\Windows\tasks\Norton Security Scan for Will.job
[2010/11/27 22:28:53 | 000,000,000 | ---- | M] () -- C:\Windows\LCDMedia.INI
[2010/11/27 22:28:03 | 003,981,232 | ---- | M] () -- C:\Users\Will\Desktop\commy.exe.exe
[2010/11/27 22:21:15 | 000,913,714 | ---- | M] () -- C:\Users\Will\Desktop\SecurityCheck.exe
[2010/11/27 19:19:39 | 000,726,316 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2010/11/27 19:19:39 | 000,623,940 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2010/11/27 19:19:39 | 000,106,316 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2010/11/27 17:35:54 | 000,013,632 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2010/11/27 17:35:54 | 000,013,632 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2010/11/27 17:28:38 | 529,928,191 | -HS- | M] () -- C:\hiberfil.sys
[2010/11/27 11:31:27 | 000,001,009 | ---- | M] () -- C:\Users\Public\Desktop\MW.lnk
[2010/11/26 12:45:11 | 000,000,221 | ---- | M] () -- C:\Users\Will\Desktop\SimCity 4 Deluxe.url
[2010/11/26 12:45:11 | 000,000,221 | ---- | M] () -- C:\Users\Will\Desktop\Recettear An Item Shop's Tale.url
[2010/11/26 12:45:11 | 000,000,221 | ---- | M] () -- C:\Users\Will\Desktop\Puzzle Agent.url
[2010/11/26 12:45:11 | 000,000,221 | ---- | M] () -- C:\Users\Will\Desktop\Jolly Rover.url
[2010/11/26 12:45:11 | 000,000,221 | ---- | M] () -- C:\Users\Will\Desktop\And Yet It Moves.url
[2010/11/26 12:45:11 | 000,000,220 | ---- | M] () -- C:\Users\Will\Desktop\Gish.url
[2010/11/10 18:09:28 | 000,000,767 | ---- | M] () -- C:\Users\Will\Desktop\Ywain-(Hib) Eldritch.gbt
[2010/11/09 20:28:43 | 000,000,968 | ---- | M] () -- C:\Users\Public\Desktop\LottoBunny.lnk
[2010/11/09 20:28:43 | 000,000,968 | ---- | M] () -- C:\Users\Public\Desktop\GearBunnyX.lnk
[2010/11/09 20:28:43 | 000,000,963 | ---- | M] () -- C:\Users\Public\Desktop\GearBunny Classic.lnk
[2010/11/09 20:28:43 | 000,000,963 | ---- | M] () -- C:\Users\Public\Desktop\DataBunny.lnk
[2010/11/08 11:57:49 | 000,002,340 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
[2010/10/31 20:44:34 | 000,000,006 | ---- | M] () -- C:\Users\Will\AppData\Roaming\start
[2010/10/31 20:43:32 | 000,000,006 | ---- | M] () -- C:\Users\Will\AppData\Roaming\completescan
[2010/10/31 20:35:25 | 000,000,010 | ---- | M] () -- C:\Users\Will\AppData\Roaming\install
[2010/10/31 20:34:41 | 000,000,207 | ---- | M] () -- C:\Users\Will\AppData\Roaming\dkfjasdfshd.bat
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
========== Files Created - No Company Name ========== [2010/11/27 22:28:53 | 000,000,000 | ---- | C] () -- C:\Windows\LCDMedia.INI
[2010/11/27 22:24:08 | 003,981,232 | ---- | C] () -- C:\Users\Will\Desktop\commy.exe.exe
[2010/11/27 22:18:11 | 000,913,714 | ---- | C] () -- C:\Users\Will\Desktop\SecurityCheck.exe
[2010/11/26 12:45:11 | 000,000,221 | ---- | C] () -- C:\Users\Will\Desktop\SimCity 4 Deluxe.url
[2010/11/26 12:45:11 | 000,000,221 | ---- | C] () -- C:\Users\Will\Desktop\Recettear An Item Shop's Tale.url
[2010/11/26 12:45:11 | 000,000,221 | ---- | C] () -- C:\Users\Will\Desktop\Puzzle Agent.url
[2010/11/26 12:45:11 | 000,000,221 | ---- | C] () -- C:\Users\Will\Desktop\Jolly Rover.url
[2010/11/26 12:45:11 | 000,000,221 | ---- | C] () -- C:\Users\Will\Desktop\And Yet It Moves.url
[2010/11/26 12:45:11 | 000,000,220 | ---- | C] () -- C:\Users\Will\Desktop\Gish.url
[2010/11/10 18:09:28 | 000,000,767 | ---- | C] () -- C:\Users\Will\Desktop\Ywain-(Hib) Eldritch.gbt
[2010/11/09 20:28:43 | 000,000,968 | ---- | C] () -- C:\Users\Public\Desktop\LottoBunny.lnk
[2010/11/09 20:28:43 | 000,000,968 | ---- | C] () -- C:\Users\Public\Desktop\GearBunnyX.lnk
[2010/11/09 20:28:43 | 000,000,963 | ---- | C] () -- C:\Users\Public\Desktop\GearBunny Classic.lnk
[2010/11/09 20:28:43 | 000,000,963 | ---- | C] () -- C:\Users\Public\Desktop\DataBunny.lnk
[2010/10/31 20:44:34 | 000,000,006 | ---- | C] () -- C:\Users\Will\AppData\Roaming\start
[2010/10/31 20:43:32 | 000,000,006 | ---- | C] () -- C:\Users\Will\AppData\Roaming\completescan
[2010/10/31 20:35:25 | 000,000,010 | ---- | C] () -- C:\Users\Will\AppData\Roaming\install
[2010/10/31 20:34:41 | 000,000,207 | ---- | C] () -- C:\Users\Will\AppData\Roaming\dkfjasdfshd.bat
[2010/06/13 15:55:12 | 000,000,047 | ---- | C] () -- C:\Windows\NeroDigital.ini
[2010/02/20 19:12:44 | 000,000,268 | ---- | C] () -- C:\Windows\{789289CA-F73A-4A16-A331-54D498CE069F}_WiseFW.ini
[2009/07/13 18:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
[2009/07/13 16:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
[2008/10/07 09:13:30 | 000,197,912 | ---- | C] () -- C:\Windows\SysWow64\physxcudart_20.dll
[2008/10/07 09:13:22 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelTraditionalChinese.dll
[2008/10/07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSwedish.dll
[2008/10/07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSpanish.dll
[2008/10/07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSimplifiedChinese.dll
[2008/10/07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelPortugese.dll
[2008/10/07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelKorean.dll
[2008/10/07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelJapanese.dll
[2008/10/07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelGerman.dll
[2008/10/07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelFrench.dll
========== LOP Check ========== [2010/10/22 20:23:29 | 000,000,000 | ---D | M] -- C:\Users\Will\AppData\Roaming\acccore
[2010/10/30 23:50:08 | 000,000,000 | ---D | M] -- C:\Users\Will\AppData\Roaming\BitTorrent
[2010/02/18 00:00:22 | 000,000,000 | ---D | M] -- C:\Users\Will\AppData\Roaming\DAEMON Tools Lite
[2010/08/29 17:17:04 | 000,000,000 | ---D | M] -- C:\Users\Will\AppData\Roaming\Electronic Arts
[2010/02/16 02:22:59 | 000,000,000 | ---D | M] -- C:\Users\Will\AppData\Roaming\Leadertech
[2010/04/03 01:23:31 | 000,000,000 | ---D | M] -- C:\Users\Will\AppData\Roaming\LimeWire
[2010/05/01 01:14:46 | 000,000,000 | ---D | M] -- C:\Users\Will\AppData\Roaming\Mobipocket
[2010/04/05 02:34:46 | 000,000,000 | ---D | M] -- C:\Users\Will\AppData\Roaming\OpenOffice.org
[2010/01/28 02:24:54 | 000,000,000 | ---D | M] -- C:\Users\Will\AppData\Roaming\Razer
[2010/01/27 18:19:42 | 000,000,000 | ---D | M] -- C:\Users\Will\AppData\Roaming\runic games
[2010/01/17 20:58:25 | 000,000,000 | ---D | M] -- C:\Users\Will\AppData\Roaming\Stardock
[2009/07/14 00:08:49 | 000,024,896 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
========== Purity Check ========== ========== Custom Scans ========== < %SYSTEMDRIVE%\*.exe > < %systemroot%\*. /mp /s > < c:\$recycle.bin\*.* /s >[2010/11/22 22:58:15 | 000,000,129 | -HS- | M] () -- c:\$recycle.bin\S-1-5-20\desktop.ini
[2010/07/25 20:23:40 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$I0FSZWP.ipa
[2010/10/30 21:53:01 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$I0QWSLP.pak
[2010/09/23 23:43:36 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$I0XJWJE.ipa
[2010/10/30 23:50:03 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$I10BMOR.r02
[2010/06/13 19:46:46 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$I11DRDX.avi
[2010/05/07 00:29:45 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$I1916WI.avi
[2010/10/30 21:53:01 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$I1BT8ZA.pak
[2010/05/07 00:29:27 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$I1IN7P9.torrent
[2010/10/30 21:53:01 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$I1N2WS9.pak
[2010/06/13 19:46:46 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$I22WLZH.torrent
[2010/06/13 19:42:31 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$I2TZ09D.avi
[2010/05/07 00:29:51 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$I2WDHKJ.mkv
[2010/05/18 02:07:46 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$I2WNXAA.ipa
[2010/10/30 23:50:03 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$I33JMNC.r04
[2010/05/09 03:28:18 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$I36RKUO.ipa
[2010/09/11 17:59:50 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$I38U5YO.mkv
[2010/05/07 00:29:51 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$I38ZZ9X.mkv
[2010/10/30 23:50:03 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$I3E56ZA.r42
[2010/10/30 23:50:03 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$I3OKDD9.r32
[2010/10/30 23:50:03 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$I3S91HQ.r24
[2010/10/30 23:50:03 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$I3U93C8.r12
[2010/10/30 23:50:03 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$I4FILG9.r06
[2010/07/03 12:51:13 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$I4JBWUK.ipa
[2010/10/30 21:53:01 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$I4JU7FW.pak
[2010/10/30 23:50:03 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$I4RFPNO.r31
[2010/09/23 23:50:24 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$I4UL11S.avi
[2010/07/25 20:24:40 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$I509VFX.ipa
[2010/09/11 17:59:51 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$I52DKTM.nfo
[2010/10/30 23:50:03 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$I56E0O8.r09
[2010/09/03 01:31:43 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$I5P2M5K.ipa
[2010/05/07 00:29:51 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$I5YY9XO.srt
[2010/05/07 00:29:51 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$I621J62.srt
[2010/05/07 00:29:51 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$I65ZXGY.torrent
[2010/05/27 11:47:41 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$I68EQ1Z.ipa
[2010/10/30 23:50:03 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$I692X7Q.r44
[2010/09/03 01:31:16 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$I6BJ59L.ipa
[2010/05/07 00:29:45 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$I6BK1XA.torrent
[2010/05/27 11:48:57 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$I6QQUEK.ipa
[2010/09/23 23:50:24 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$I71XN0C.avi
[2010/09/03 01:31:27 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$I726FLZ.ipa
[2010/05/07 00:29:51 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$I740IKY.mkv
[2010/09/23 23:43:41 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$I754WHY.ipa
[2010/07/03 12:51:36 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$I77JGQ9.ipa
[2010/07/25 20:25:33 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$I79WH0S.ipa
[2010/07/03 12:51:06 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$I7C29J5.ipa
[2010/09/23 23:42:51 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$I7H7NVR.ipa
[2010/05/07 00:29:51 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$I7HEBTD.srt
[2010/09/23 23:50:24 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$I7ZU5J9.avi
[2010/10/30 23:50:03 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$I82MOYS.r20
[2010/08/19 03:27:31 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$I8BS4GQ.ipa
[2010/10/30 23:50:03 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$I8GQG1Y.r25
[2010/05/07 00:29:51 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$I8I26X9.srt
[2010/10/30 21:53:01 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$I8I7CH8.pak
[2010/05/27 11:47:23 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$I8THZTS.ipa
[2010/07/03 12:52:05 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$I8Y8IEM.ipa
[2010/10/30 21:53:01 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$I96CED3.pak
[2010/07/03 12:51:19 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$I97NTFB.ipa
[2010/09/23 23:50:24 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$IA0ON57.avi
[2010/09/11 17:59:51 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$IA1JMTB.jpg
[2010/10/10 15:38:28 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$IA38Z5N
[2010/10/10 15:40:50 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$IA3PCO8
[2010/09/11 17:59:50 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$IAAARHQ.nfo
[2010/09/23 23:43:13 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$IAEBV2E.ipa
[2010/10/30 23:50:03 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$IAINJ19.r29
[2010/05/07 00:29:51 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$IARZRAR.mkv
[2010/05/22 16:47:42 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$IAWCB5B
[2010/10/30 23:50:03 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$IAZDZ0K.r34
[2010/10/30 21:53:01 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$IB12NGD.pak
[2010/07/03 12:51:51 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$IB1STSS.ipa
[2010/09/11 17:59:51 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$IBBQTJ6.avi
[2010/05/18 02:07:54 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$IBJ3KQK.ipa
[2010/10/30 23:50:03 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$IBOI3H0.r43
[2010/05/07 00:29:51 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$IBXWSNB.mkv
[2010/07/25 20:24:26 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$IBZ2QC9.ipa
[2010/05/07 00:29:51 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$ICLQN2Q.mkv
[2010/09/11 17:59:50 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$ICUWDHT.avi
[2010/10/30 23:50:03 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$ICV8RRC.nfo
[2010/07/25 20:24:35 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$ICXJZ55.ipa
[2010/10/30 23:50:03 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$ID5JTCO.r07
[2010/07/03 12:50:52 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$ID8NWML.ipa
[2010/09/03 01:32:55 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$IDGCLG8.ipa
[2010/07/03 12:52:26 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$IDNEOSQ.ipa
[2010/09/23 23:42:57 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$IDSC9TJ.ipa
[2010/05/07 00:29:27 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$IDU5MKN.txt
[2010/07/03 12:50:59 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$IDV9FAG.ipa
[2010/05/27 11:49:16 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$IEC83RU.ipa
[2010/11/22 22:36:44 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$IEMA0QK.png
[2010/05/07 00:29:51 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$IEN8UXS.mkv
[2010/10/30 23:50:03 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$IETCHQW.r39
[2010/05/07 00:29:51 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$IEVIHOH.srt
[2010/09/23 23:43:00 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$IFC2L5V.ipa
[2010/10/30 23:50:03 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$IFDH0CY.r46
[2010/05/27 11:49:04 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$IFJ2G8Q.ipa
[2010/09/03 01:31:13 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$IFJEC72.ipa
[2010/06/13 19:53:37 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$IFN8HG6.avi
[2010/08/14 11:41:16 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$IFWYAHA.ipa
[2010/07/25 20:24:59 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$IFZ0C3M.ipa
[2010/10/30 23:50:03 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$IG31YEQ.r36
[2010/05/07 00:29:27 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$IG4PYZH.txt
[2010/09/23 23:50:24 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$IG748TL.avi
[2010/08/14 11:41:27 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$IG7R9WT.ipa
[2010/10/30 23:50:03 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$IGCVKD0.r30
[2010/08/14 11:40:51 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$IGJBHN2.ipa
[2010/09/11 17:59:50 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$IGNUNH7.nfo
[2010/07/03 12:52:16 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$IGPY59N.ipa
[2010/10/30 23:50:03 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$IGSJNGT.r28
[2010/07/03 12:51:40 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$IGT3FJR.ipa
[2010/09/23 23:50:24 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$IGTQFWC.avi
[2010/09/11 17:59:51 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$IH4OR6L.txt
[2010/07/03 12:52:03 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$IH5LYTO.ipa
[2010/05/07 00:29:27 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$IHER0WI.txt
[2010/07/03 12:51:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$IHGSUIH.ipa
[2010/05/12 13:27:37 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$IHTH3T9.ipa
[2010/05/07 00:29:45 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$IIAN02W.torrent
[2010/09/23 23:50:24 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$IIGUAMZ.avi
[2010/10/30 23:50:03 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$IIJ9CJ9.r03
[2010/10/30 23:50:03 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$IIQVL18.r22
[2010/10/30 23:50:03 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$IISURAF.r45
[2010/10/30 21:53:01 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$IJAZIXY.pak
[2010/07/25 20:25:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$IJDLHX3.ipa
[2010/10/30 23:50:03 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$IJPNR66.r16
[2010/10/30 23:50:03 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$IJTMJ93.idx
[2010/05/30 11:28:52 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$IJTTD7C.ipa
[2010/06/18 23:42:21 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$IJWAIPJ.ipa
[2010/08/14 11:41:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$IJWI996.ipa
[2010/09/03 01:32:42 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$IJX3QCQ.ipa
[2010/10/30 23:50:03 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$IJXYG63.r23
[2010/10/30 23:50:03 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$IKDA1RH.r21
[2010/07/03 12:52:38 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$IKDM1VH.ipa
[2010/10/30 23:50:03 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$IL6WPAP.torrent
[2010/09/23 23:50:24 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$IL7L1EE.avi
[2010/10/30 23:50:03 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$IL7SEIC.r08
[2010/09/27 00:43:00 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2479393777-1000\$ILB7K9B
[2010/09/03 01:32:00 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1823074419-131638360-2