[code] WinPFind35 logfile created on: 3/03/2008 8:12:00 AM WinPFind35U Version 1.0.3.0 Folder = C:\Documents and Settings\Owner\Desktop\WinPFind35u Windows XP Home Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 7.0.5730.13) Locale: 00000C09 | Country: Australia | Language: ENA | Date Format: d/MM/yyyy 2.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 100.00% Memory free 4.00 Gb Paging File | 4.00 Gb Available in Paging File | 100.00% Paging File free Paging file location(s): C:\pagefile.sys 2046 4092; %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 149.05 Gb Total Space | 97.29 Gb Free Space | 65.28% Space Free | Partition Type: NTFS D: Drive not present or media not loaded E: Drive not present or media not loaded F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: USER-BB3FF93408 Current User Name: Owner Logged in as Administrator. Current Boot Mode: Normal Scan Mode: All users [Processes - Non-Microsoft Only] aawservice.exe -> %ProgramFiles%\Lavasoft\Ad-Aware 2007\aawservice.exe -> Lavasoft [Ver = 7,0,2,6 | Size = 587096 bytes | Modified Date = 4/01/2008 1:27:08 PM | Attr = ] rthdcpl.exe -> %SystemRoot%\RTHDCPL.exe -> Realtek Semiconductor Corp. [Ver = 2.1.2.9 | Size = 16126464 bytes | Modified Date = 21/03/2007 4:49:20 PM | Attr = R ] avgcc.exe -> %ProgramFiles%\Grisoft\AVG7\avgcc.exe -> GRISOFT, s.r.o. [Ver = 7.5.0.504 | Size = 579072 bytes | Modified Date = 25/02/2008 4:35:44 PM | Attr = ] applemobiledeviceservice.exe -> %CommonProgramFiles%\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe -> Apple, Inc. [Ver = 1, 14, 0, 0 | Size = 110592 bytes | Modified Date = 15/01/2008 2:40:04 AM | Attr = ] avgamsvr.exe -> %ProgramFiles%\Grisoft\AVG7\avgamsvr.exe -> GRISOFT, s.r.o. [Ver = 7.5.0.496 | Size = 418816 bytes | Modified Date = 25/02/2008 4:35:44 PM | Attr = ] avgupsvc.exe -> %ProgramFiles%\Grisoft\AVG7\avgupsvc.exe -> GRISOFT, s.r.o. [Ver = 7.5.0.420 | Size = 49664 bytes | Modified Date = 25/02/2008 4:35:45 PM | Attr = ] mdnsresponder.exe -> %ProgramFiles%\Bonjour\mDNSResponder.exe -> Apple Inc. [Ver = 1,0,4,12 | Size = 229376 bytes | Modified Date = 24/07/2007 3:17:08 PM | Attr = ] lssrvc.exe -> %CommonProgramFiles%\LightScribe\LSSrvc.exe -> Hewlett-Packard Company [Ver = 1.10.13.1 | Size = 79136 bytes | Modified Date = 23/08/2007 5:40:48 PM | Attr = ] nvsvc32.exe -> %SystemRoot%\system32\nvsvc32.exe -> NVIDIA Corporation [Ver = 6.14.11.6921 | Size = 155716 bytes | Modified Date = 5/12/2007 1:41:00 AM | Attr = ] pnkbstra.exe -> %SystemRoot%\system32\PnkBstrA.exe -> [Ver = | Size = 66872 bytes | Modified Date = 2/02/2008 4:03:56 PM | Attr = ] winpfind35u.exe -> %UserProfile%\Desktop\WinPFind35u\WinPFind35U.exe -> OldTimer Tools [Ver = 1.0.3.0 | Size = 310784 bytes | Modified Date = 1/03/2008 1:06:42 AM | Attr = ] [Win32 Services - Non-Microsoft Only] (aawservice) Ad-Aware 2007 Service [Win32_Own | Auto | Running] -> %ProgramFiles%\Lavasoft\Ad-Aware 2007\aawservice.exe -> Lavasoft [Ver = 7,0,2,6 | Size = 587096 bytes | Modified Date = 4/01/2008 1:27:08 PM | Attr = ] (Adobe LM Service) Adobe LM Service [Win32_Own | On_Demand | Stopped] -> %CommonProgramFiles%\Adobe Systems Shared\Service\Adobelmsvc.exe -> Adobe Systems [Ver = 2.67.010 | Size = 72704 bytes | Modified Date = 17/02/2008 8:59:47 PM | Attr = ] (Apple Mobile Device) Apple Mobile Device [Win32_Own | Auto | Running] -> %CommonProgramFiles%\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe -> Apple, Inc. [Ver = 1, 14, 0, 0 | Size = 110592 bytes | Modified Date = 15/01/2008 2:40:04 AM | Attr = ] (Avg7Alrt) AVG7 Alert Manager Server [Win32_Own | Auto | Running] -> %ProgramFiles%\Grisoft\AVG7\avgamsvr.exe -> GRISOFT, s.r.o. [Ver = 7.5.0.496 | Size = 418816 bytes | Modified Date = 25/02/2008 4:35:44 PM | Attr = ] (Avg7UpdSvc) AVG7 Update Service [Win32_Own | Auto | Running] -> %ProgramFiles%\Grisoft\AVG7\avgupsvc.exe -> GRISOFT, s.r.o. [Ver = 7.5.0.420 | Size = 49664 bytes | Modified Date = 25/02/2008 4:35:45 PM | Attr = ] (Bonjour Service) Bonjour Service [Win32_Own | Auto | Running] -> %ProgramFiles%\Bonjour\mDNSResponder.exe -> Apple Inc. [Ver = 1,0,4,12 | Size = 229376 bytes | Modified Date = 24/07/2007 3:17:08 PM | Attr = ] (dmadmin) Logical Disk Manager Administrative Service [Win32_Shared | On_Demand | Stopped] -> %SystemRoot%\system32\dmadmin.exe -> Microsoft Corp., Veritas Software [Ver = 2600.2180.503.0 | Size = 224768 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] (gusvc) Google Updater Service [Win32_Own | On_Demand | Stopped] -> %ProgramFiles%\Google\Common\Google Updater\GoogleUpdaterService.exe -> Google [Ver = 2.0.734.29932.beta | Size = 138168 bytes | Modified Date = 3/02/2008 5:27:18 PM | Attr = ] (iPod Service) iPod Service [Win32_Own | On_Demand | Stopped] -> %ProgramFiles%\iPod\bin\iPodService.exe -> Apple Inc. [Ver = 7.6.0.29 | Size = 504104 bytes | Modified Date = 15/01/2008 3:22:44 AM | Attr = ] (LightScribeService) LightScribeService Direct Disc Labeling Service [Win32_Own | Auto | Running] -> %CommonProgramFiles%\LightScribe\LSSrvc.exe -> Hewlett-Packard Company [Ver = 1.10.13.1 | Size = 79136 bytes | Modified Date = 23/08/2007 5:40:48 PM | Attr = ] (NVSvc) NVIDIA Display Driver Service [Win32_Own | Auto | Running] -> %SystemRoot%\system32\nvsvc32.exe -> NVIDIA Corporation [Ver = 6.14.11.6921 | Size = 155716 bytes | Modified Date = 5/12/2007 1:41:00 AM | Attr = ] (PnkBstrA) PnkBstrA [Win32_Own | Auto | Running] -> %SystemRoot%\system32\PnkBstrA.exe -> [Ver = | Size = 66872 bytes | Modified Date = 2/02/2008 4:03:56 PM | Attr = ] [Registry - Non-Microsoft Only] < Run [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run -> Alcmtr -> %SystemRoot%\Alcmtr.exe -> Realtek Semiconductor Corp. [Ver = 1.6.0.2 | Size = 69632 bytes | Modified Date = 3/05/2005 8:43:28 PM | Attr = R ] AVG7_CC -> %ProgramFiles%\Grisoft\AVG7\avgcc.exe -> GRISOFT, s.r.o. [Ver = 7.5.0.504 | Size = 579072 bytes | Modified Date = 25/02/2008 4:35:44 PM | Attr = ] NvCplDaemon -> %SystemRoot%\system32\nvcpl.dll -> NVIDIA Corporation [Ver = 6.14.11.6921 | Size = 8523776 bytes | Modified Date = 5/12/2007 1:41:00 AM | Attr = ] NvMediaCenter -> %SystemRoot%\system32\nvmctray.dll -> NVIDIA Corporation [Ver = 6.14.11.6921 | Size = 81920 bytes | Modified Date = 5/12/2007 1:41:00 AM | Attr = ] nwiz -> %SystemRoot%\system32\nwiz.exe -> [Ver = | Size = 1626112 bytes | Modified Date = 5/12/2007 1:41:00 AM | Attr = ] RTHDCPL -> %SystemRoot%\RTHDCPL.exe -> Realtek Semiconductor Corp. [Ver = 2.1.2.9 | Size = 16126464 bytes | Modified Date = 21/03/2007 4:49:20 PM | Attr = R ] < OptionalComponents [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\ -> IMAIL-> Installed = 1 -> MAPI-> Installed = 1 -> MSFS-> Installed = 1 -> < Run [HKEY_USERS\.DEFAULT\] > -> HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run -> AVG7_Run -> %ProgramFiles%\Grisoft\AVG7\avgw.exe -> GRISOFT, s.r.o. [Ver = 7.5.0.502 | Size = 219136 bytes | Modified Date = 25/02/2008 4:35:45 PM | Attr = ] < Run [HKEY_USERS\S-1-5-18\] > -> HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run -> AVG7_Run -> %ProgramFiles%\Grisoft\AVG7\avgw.exe -> GRISOFT, s.r.o. [Ver = 7.5.0.502 | Size = 219136 bytes | Modified Date = 25/02/2008 4:35:45 PM | Attr = ] < Run [HKEY_USERS\S-1-5-19\] > -> HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Run -> AVG7_Run -> %ProgramFiles%\Grisoft\AVG7\avgw.exe -> GRISOFT, s.r.o. [Ver = 7.5.0.502 | Size = 219136 bytes | Modified Date = 25/02/2008 4:35:45 PM | Attr = ] < Run [HKEY_USERS\S-1-5-20\] > -> HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Run -> AVG7_Run -> %ProgramFiles%\Grisoft\AVG7\avgw.exe -> GRISOFT, s.r.o. [Ver = 7.5.0.502 | Size = 219136 bytes | Modified Date = 25/02/2008 4:35:45 PM | Attr = ] < All Users Startup Folder > -> C:\Documents and Settings\All Users\Start Menu\Programs\Startup -> < Default User Startup Folder > -> C:\Documents and Settings\Default User\Start Menu\Programs\Startup -> < Owner Startup Folder > -> C:\Documents and Settings\Owner\Start Menu\Programs\Startup -> < AppInit_DLLs [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_DLLs -> *AppInit_DLLs* -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_Dlls -> wbsys.dll -> %SystemRoot%\system32\wbsys.dll -> Stardock.Net, Inc [Ver = 4, 0, 0, 0 | Size = 36864 bytes | Modified Date = 26/02/2003 8:27:44 PM | Attr = ] *MultiFile Done* -> -> < ShellExecuteHooks [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks -> {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} [HKEY_LOCAL_MACHINE] -> %ProgramFiles%\SUPERAntiSpyware\SASSEH.DLL [] -> SuperAdBlocker.com [Ver = 1, 0, 0, 1008 | Size = 77824 bytes | Modified Date = 20/12/2006 1:55:48 PM | Attr = ] < SecurityProviders [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\\SecurityProviders -> < Winlogon settings [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon -> < Winlogon settings [HKEY_CURRENT_USER] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon -> < Winlogon settings [HKEY_USERS\.DEFAULT] > -> HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon -> < Winlogon settings [HKEY_USERS\S-1-5-18] > -> HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon -> < Winlogon settings [HKEY_USERS\S-1-5-19] > -> HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon -> < Winlogon settings [HKEY_USERS\S-1-5-20] > -> HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon -> < Winlogon settings [HKEY_USERS\S-1-5-21-1220945662-813497703-839522115-1003] > -> HKEY_USERS\S-1-5-21-1220945662-813497703-839522115-1003\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon -> < Winlogon\Notify settings [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ -> !SASWinLogon -> %ProgramFiles%\SUPERAntiSpyware\SASWINLO.dll -> SUPERAntiSpyware.com [Ver = 1, 0, 0, 1046 | Size = 294912 bytes | Modified Date = 19/04/2007 1:41:36 PM | Attr = ] WBSrv -> %ProgramFiles%\Stardock\Object Desktop\WindowBlinds\WbSrv.dll -> Stardock [Ver = 5, 0, 0, 1 | Size = 176128 bytes | Modified Date = 20/12/2005 10:57:44 PM | Attr = ] < CurrentVersion Policy Settings [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\NonEnum\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\NonEnum\\{BDEADF00-C265-11D0-BCED-00A0C90AB50F} -> 1 -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\NonEnum\\{6DFD7C5C-2451-11d3-A299-00C04F8EF6AF} -> 1073741857 -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\NonEnum\\{0DF44EAA-FF21-4412-828E-260A8728E7F1} -> 32 -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\\dontdisplaylastusername -> 0 -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\\legalnoticecaption -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\\legalnoticetext -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\\shutdownwithoutlogon -> 1 -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\\undockwithoutlogon -> 1 -> < CurrentVersion Policy Settings [HKEY_CURRENT_USER] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ -> -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\ -> -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDriveTypeAutoRun -> 145 -> < CurrentVersion Policy Settings [HKEY_USERS\.DEFAULT] > -> HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ -> HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ -> -> HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\ -> -> HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDriveTypeAutoRun -> 145 -> < CurrentVersion Policy Settings [HKEY_USERS\S-1-5-18] > -> HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ -> HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ -> -> HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\ -> -> HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDriveTypeAutoRun -> 145 -> < CurrentVersion Policy Settings [HKEY_USERS\S-1-5-19] > -> HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ -> HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ -> -> HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\ -> -> HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDriveTypeAutoRun -> 145 -> < CurrentVersion Policy Settings [HKEY_USERS\S-1-5-20] > -> HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ -> HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ -> -> HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\ -> -> HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDriveTypeAutoRun -> 145 -> < CurrentVersion Policy Settings [HKEY_USERS\S-1-5-21-1220945662-813497703-839522115-1003] > -> HKEY_USERS\S-1-5-21-1220945662-813497703-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ -> HKEY_USERS\S-1-5-21-1220945662-813497703-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ -> -> HKEY_USERS\S-1-5-21-1220945662-813497703-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\ -> -> HKEY_USERS\S-1-5-21-1220945662-813497703-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDriveTypeAutoRun -> 145 -> < HOSTS File > (734 bytes) -> C:\WINDOWS\System32\drivers\etc\Hosts -> < Internet Explorer Settings [HKEY_LOCAL_MACHINE\] > -> -> HKEY_LOCAL_MACHINE\: Main\\Default_Page_URL -> http://go.microsoft.com/fwlink/?LinkId=69157 -> HKEY_LOCAL_MACHINE\: Main\\Default_Search_URL -> http://go.microsoft.com/fwlink/?LinkId=54896 -> HKEY_LOCAL_MACHINE\: Main\\Local Page -> %SystemRoot%\system32\blank.htm -> HKEY_LOCAL_MACHINE\: Main\\Search Page -> http://go.microsoft.com/fwlink/?LinkId=54896 -> HKEY_LOCAL_MACHINE\: Main\\Start Page -> http://go.microsoft.com/fwlink/?LinkId=69157 -> HKEY_LOCAL_MACHINE\: Search\\CustomizeSearch -> http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm -> HKEY_LOCAL_MACHINE\: Search\\SearchAssistant -> http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm -> < Internet Explorer Settings [HKEY_CURRENT_USER\] > -> -> HKEY_CURRENT_USER\: Main\\Local Page -> C:\WINDOWS\system32\blank.htm -> HKEY_CURRENT_USER\: Main\\Search Page -> http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch -> HKEY_CURRENT_USER\: Main\\Start Page -> http://www.google.com/ -> HKEY_CURRENT_USER\: ProxyEnable -> 0 -> HKEY_CURRENT_USER\: ProxyOverride -> *.local -> < Internet Explorer Settings [HKEY_USERS\.DEFAULT\] > -> -> HKEY_USERS\.DEFAULT\: ProxyEnable -> 0 -> < Internet Explorer Settings [HKEY_USERS\S-1-5-18\] > -> -> HKEY_USERS\S-1-5-18\: ProxyEnable -> 0 -> < Internet Explorer Settings [HKEY_USERS\S-1-5-19\] > -> -> < Internet Explorer Settings [HKEY_USERS\S-1-5-20\] > -> -> < Internet Explorer Settings [HKEY_USERS\S-1-5-21-1220945662-813497703-839522115-1003\] > -> -> HKEY_USERS\S-1-5-21-1220945662-813497703-839522115-1003\: Main\\Local Page -> C:\WINDOWS\system32\blank.htm -> HKEY_USERS\S-1-5-21-1220945662-813497703-839522115-1003\: Main\\Search Page -> http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch -> HKEY_USERS\S-1-5-21-1220945662-813497703-839522115-1003\: Main\\Start Page -> http://www.google.com/ -> HKEY_USERS\S-1-5-21-1220945662-813497703-839522115-1003\: ProxyEnable -> 0 -> HKEY_USERS\S-1-5-21-1220945662-813497703-839522115-1003\: ProxyOverride -> *.local -> < Trusted Sites Domains [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> [Key] 1 domain(s) found. -> 1 domain(s) and sub-domain(s) not assigned to a zone. < Trusted Sites Ranges [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> [Key] 0 range(s) found. -> < Trusted Sites Domains [HKEY_CURRENT_USER\] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> [Key] 0 domain(s) found. -> < Trusted Sites Ranges [HKEY_CURRENT_USER\] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> [Key] 0 range(s) found. -> < Trusted Sites Domains [HKEY_USERS\.DEFAULT\] > -> HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> [Key] 0 domain(s) found. -> < Trusted Sites Ranges [HKEY_USERS\.DEFAULT\] > -> HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> [Key] 0 range(s) found. -> < Trusted Sites Domains [HKEY_USERS\S-1-5-18\] > -> HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> [Key] 0 domain(s) found. -> < Trusted Sites Ranges [HKEY_USERS\S-1-5-18\] > -> HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> [Key] 0 range(s) found. -> < Trusted Sites Domains [HKEY_USERS\S-1-5-19\] > -> HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> [Key] 0 domain(s) found. -> < Trusted Sites Ranges [HKEY_USERS\S-1-5-19\] > -> HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> [Key] 0 range(s) found. -> < Trusted Sites Domains [HKEY_USERS\S-1-5-20\] > -> HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> [Key] 0 domain(s) found. -> < Trusted Sites Ranges [HKEY_USERS\S-1-5-20\] > -> HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> [Key] 0 range(s) found. -> < Trusted Sites Domains [HKEY_USERS\S-1-5-21-1220945662-813497703-839522115-1003\] > -> HKEY_USERS\S-1-5-21-1220945662-813497703-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> HKEY_USERS\S-1-5-21-1220945662-813497703-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> [Key] 0 domain(s) found. -> < Trusted Sites Ranges [HKEY_USERS\S-1-5-21-1220945662-813497703-839522115-1003\] > -> HKEY_USERS\S-1-5-21-1220945662-813497703-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> HKEY_USERS\S-1-5-21-1220945662-813497703-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> [Key] 0 range(s) found. -> < BHO's [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\ -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} [HKEY_LOCAL_MACHINE] -> %ProgramFiles%\Java\jre1.6.0_04\bin\ssv.dll [SSVHelper Class] -> Sun Microsystems, Inc. [Ver = 6.0.40.12 | Size = 509328 bytes | Modified Date = 14/12/2007 3:42:36 AM | Attr = ] {7E853D72-626A-48EC-A868-BA8D5E23E045} [HKEY_LOCAL_MACHINE] -> Reg Error: Key does not exist or could not be opened. [Reg Error: Key does not exist or could not be opened.] -> File not found {AA58ED58-01DD-4d91-8333-CF10577473F7} [HKEY_LOCAL_MACHINE] -> %ProgramFiles%\Google\GoogleToolbar1.dll [Google Toolbar Helper] -> Google Inc. [Ver = 4, 0, 1601, 4978 | Size = 2403392 bytes | Modified Date = 3/02/2008 5:27:18 PM | Attr = R ] {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} [HKEY_LOCAL_MACHINE] -> %ProgramFiles%\Google\GoogleToolbarNotifier\2.0.1121.2472\swg.dll [Google Toolbar Notifier BHO] -> Google Inc. [Ver = 2, 0, 1121, 2472 | Size = 323568 bytes | Modified Date = 13/02/2008 3:49:48 PM | Attr = ] < Internet Explorer ToolBars [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ToolBar -> {2318C2B1-4965-11d4-9B18-009027A5CD4F} [HKEY_LOCAL_MACHINE] -> %ProgramFiles%\Google\GoogleToolbar1.dll [&Google] -> Google Inc. [Ver = 4, 0, 1601, 4978 | Size = 2403392 bytes | Modified Date = 3/02/2008 5:27:18 PM | Attr = R ] < Internet Explorer ToolBars [HKEY_CURRENT_USER\] > -> HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\ -> WebBrowser\\{2318C2B1-4965-11D4-9B18-009027A5CD4F} [HKEY_LOCAL_MACHINE] -> %ProgramFiles%\Google\GoogleToolbar1.dll [&Google] -> Google Inc. [Ver = 4, 0, 1601, 4978 | Size = 2403392 bytes | Modified Date = 3/02/2008 5:27:18 PM | Attr = R ] < Internet Explorer ToolBars [HKEY_USERS\S-1-5-21-1220945662-813497703-839522115-1003\] > -> HKEY_USERS\S-1-5-21-1220945662-813497703-839522115-1003\Software\Microsoft\Internet Explorer\Toolbar\ -> WebBrowser\\{2318C2B1-4965-11D4-9B18-009027A5CD4F} [HKEY_LOCAL_MACHINE] -> %ProgramFiles%\Google\GoogleToolbar1.dll [&Google] -> Google Inc. [Ver = 4, 0, 1601, 4978 | Size = 2403392 bytes | Modified Date = 3/02/2008 5:27:18 PM | Attr = R ] < Internet Explorer Plugins [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Plugins\ -> PluginsPageFriendlyName -> Microsoft ActiveX Gallery -> PluginsPage -> http://activex.microsoft.com/controls/find.asp?ext=%s&mime=%s -> < DNS Name Servers [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Adapters\ -> {148092D1-AADD-448A-BA97-58F23BB05BB4} -> () -> {D4D22804-0937-4386-9486-4D3A562C5C70} -> (Attansic L1 Gigabit Ethernet 10/100/1000Base-T Controller) -> < Winsock2 Catalogs [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\ -> NameSpace_Catalog5\Catalog_Entries\000000000004 [mdnsNSP] -> %ProgramFiles%\Bonjour\mdnsNSP.dll -> Apple Inc. [Ver = 1,0,4,12 | Size = 147456 bytes | Modified Date = 24/07/2007 3:17:08 PM | Attr = ] < Protocol Handlers [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\ -> ipp: [HKEY_LOCAL_MACHINE] -> Reg Error: Key does not exist or could not be opened.[Reg Error: Value does not exist or could not be read.] -> File not found msdaipp: [HKEY_LOCAL_MACHINE] -> Reg Error: Key does not exist or could not be opened.[Reg Error: Value does not exist or could not be read.] -> File not found < Downloaded Program Files > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\ -> {48DD0448-9209-4F81-9F6D-D83562940134}[HKEY_LOCAL_MACHINE] -> http://lads.myspace.com/upload/MySpaceUploader1006.cab[MySpace Uploader Control] -> {6414512B-B978-451D-A0D8-FCFDF33E833C}[HKEY_LOCAL_MACHINE] -> http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1201922026312[WUWebControl Class] -> {67A5F8DC-1A4B-4D66-9F24-A704AD929EEE}[HKEY_LOCAL_MACHINE] -> http://www.systemrequirementslab.com/sysreqlab2.cab[System Requirements Lab Class] -> {8AD9C840-044E-11D1-B3E9-00805F499D93}[HKEY_LOCAL_MACHINE] -> http://java.sun.com/update/1.6.0/jinstall-1_6_0_04-windows-i586.cab[Java Plug-in 1.6.0_04] -> {8FFBE65D-2C9C-4669-84BD-5829DC0B603C}[HKEY_LOCAL_MACHINE] -> http://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab[Reg Error: Key does not exist or could not be opened.] -> {CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}[HKEY_LOCAL_MACHINE] -> http://java.sun.com/update/1.6.0/jinstall-1_6_0_04-windows-i586.cab[Java Plug-in 1.6.0_04] -> {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}[HKEY_LOCAL_MACHINE] -> http://java.sun.com/update/1.6.0/jinstall-1_6_0_04-windows-i586.cab[Java Plug-in 1.6.0_04] -> {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7}[HKEY_LOCAL_MACHINE] -> http://www.adobe.com/products/acrobat/nos/gp.cab[get_atlcom Class] -> [Registry - Additional Scans - Non-Microsoft Only] < Disabled MSConfig Folder Items [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\ -> C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Gamma Loader.lnk -> %CommonProgramFiles%\Adobe\Calibration\Adobe Gamma Loader.exe -> Adobe Systems, Inc. [Ver = 1, 0, 0, 1 | Size = 113664 bytes | Modified Date = 4/11/1999 3:06:48 PM | Attr = ] C:^Documents and Settings^Owner^Start Menu^Programs^Startup^Adobe Gamma.lnk -> %CommonProgramFiles%\Adobe\Calibration\Adobe Gamma Loader.exe -> Adobe Systems, Inc. [Ver = 1, 0, 0, 1 | Size = 113664 bytes | Modified Date = 4/11/1999 3:06:48 PM | Attr = ] < Disabled MSConfig Registry Items [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\ -> Adobe Photo Downloader hkey=HKLM key=SOFTWARE\Microsoft\Windows\CurrentVersion\Run -> %ProgramFiles%\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe -> Adobe Systems Incorporated [Ver = 3.2.0.77764 | Size = 63712 bytes | Modified Date = 9/03/2007 11:09:58 AM | Attr = ] iTunesHelper hkey=HKLM key=SOFTWARE\Microsoft\Windows\CurrentVersion\Run -> %ProgramFiles%\iTunes\iTunesHelper.exe -> Apple Inc. [Ver = 7.6.0.29 | Size = 267048 bytes | Modified Date = 15/01/2008 3:22:56 AM | Attr = ] LightScribe Control Panel hkey=HKCU key=SOFTWARE\Microsoft\Windows\CurrentVersion\Run -> %CommonProgramFiles%\LightScribe\LightScribeControlPanel.exe -> Hewlett-Packard Company [Ver = 1.10.13.1 | Size = 455968 bytes | Modified Date = 23/08/2007 5:36:30 PM | Attr = ] NeroFilterCheck hkey=HKLM key=SOFTWARE\Microsoft\Windows\CurrentVersion\Run -> %SystemRoot%\system32\NeroCheck.exe -> Nero AG [Ver = 1, 0, 0, 5 | Size = 155648 bytes | Modified Date = 12/01/2006 4:40:44 PM | Attr = ] QuickTime Task hkey=HKLM key=SOFTWARE\Microsoft\Windows\CurrentVersion\Run -> %ProgramFiles%\QuickTime\QTTask.exe -> Apple Inc. [Ver = 7.4 | Size = 385024 bytes | Modified Date = 10/01/2008 3:27:36 PM | Attr = ] SunJavaUpdateSched hkey=HKLM key=SOFTWARE\Microsoft\Windows\CurrentVersion\Run -> %ProgramFiles%\Java\jre1.6.0_04\bin\jusched.exe -> Sun Microsystems, Inc. [Ver = 6.0.40.12 | Size = 144784 bytes | Modified Date = 14/12/2007 3:42:38 AM | Attr = ] swg hkey=HKCU key=SOFTWARE\Microsoft\Windows\CurrentVersion\Run -> %ProgramFiles%\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe -> Google Inc. [Ver = 2, 0, 301, 1654 | Size = 68856 bytes | Modified Date = 13/02/2008 3:49:48 PM | Attr = ] < File Associations - Select to Repair > -> HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\ -> .bat [@ = batfile] -> -> File not found .cmd [@ = cmdfile] -> -> File not found .com [@ = comfile] -> -> File not found .exe [@ = exefile] -> -> File not found .pif [@ = piffile] -> -> File not found .scr [@ = scrfile] -> -> File not found [Files/Folders - Created Within 90 days] $VAULT$.AVG -> %SystemDrive%\$VAULT$.AVG -> [Folder | Created Date = 28/02/2008 10:49:07 PM | Attr = RH ] 095251c9c742872e732a -> %SystemDrive%\095251c9c742872e732a -> [Folder | Created Date = 15/02/2008 4:19:59 PM | Attr = ] boot.ini -> %SystemDrive%\boot.ini -> [Ver = | Size = 215 bytes | Modified Date = 29/02/2008 7:11:10 PM | Attr = HS] Deckard -> %SystemDrive%\Deckard -> [Folder | Created Date = 3/03/2008 7:46:29 AM | Attr = ] Documents and Settings -> %SystemDrive%\Documents and Settings -> [Folder | Created Date = 2/02/2008 9:41:57 PM | Attr = ] e776921f33af7c4e7c56b91f95e5d02a -> %SystemDrive%\e776921f33af7c4e7c56b91f95e5d02a -> [Folder | Created Date = 15/02/2008 4:19:39 PM | Attr = ] Intel -> %SystemDrive%\Intel -> [Folder | Created Date = 2/02/2008 12:02:13 PM | Attr = ] IO.SYS -> %SystemDrive%\IO.SYS -> [Ver = | Size = 0 bytes | Modified Date = 2/02/2008 11:55:52 AM | Attr = RHS] MSDOS.SYS -> %SystemDrive%\MSDOS.SYS -> [Ver = | Size = 0 bytes | Modified Date = 2/02/2008 11:55:52 AM | Attr = RHS] MSOCache -> %SystemDrive%\MSOCache -> [Folder | Created Date = 26/02/2008 5:27:58 PM | Attr = RH ] NVIDIA -> %SystemDrive%\NVIDIA -> [Folder | Created Date = 2/02/2008 12:33:07 PM | Attr = ] Program Files -> %ProgramFiles% -> [Folder | Created Date = 2/02/2008 9:44:30 PM | Attr = R ] RECYCLER -> %SystemDrive%\RECYCLER -> [Folder | Created Date = 2/02/2008 1:36:45 PM | Attr = HS] System Volume Information -> %SystemDrive%\System Volume Information -> [Folder | Created Date = 2/02/2008 9:41:56 PM | Attr = HS] WINDOWS -> %SystemRoot% -> [Folder | Created Date = 2/02/2008 9:35:42 PM | Attr = ] _OTMoveIt -> %SystemDrive%\_OTMoveIt -> [Folder | Created Date = 1/03/2008 6:21:50 PM | Attr = ] big5.nls -> %SystemRoot%\System32\dllcache\big5.nls -> [Ver = | Size = 66728 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] bopomofo.nls -> %SystemRoot%\System32\dllcache\bopomofo.nls -> [Ver = | Size = 82172 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] cap7146.sys -> %SystemRoot%\System32\dllcache\cap7146.sys -> Philips Semiconductors GmbH [Ver = 1.00 (XPClient.010817-1148) | Size = 54528 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] chtskf.dll -> %SystemRoot%\System32\dllcache\chtskf.dll -> [Ver = | Size = 173568 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_10001.nls -> %SystemRoot%\System32\dllcache\c_10001.nls -> [Ver = | Size = 162850 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_10002.nls -> %SystemRoot%\System32\dllcache\c_10002.nls -> [Ver = | Size = 195618 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_10003.nls -> %SystemRoot%\System32\dllcache\c_10003.nls -> [Ver = | Size = 177698 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_10004.nls -> %SystemRoot%\System32\dllcache\c_10004.nls -> [Ver = | Size = 66082 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_10005.nls -> %SystemRoot%\System32\dllcache\c_10005.nls -> [Ver = | Size = 66082 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_10006.nls -> %SystemRoot%\System32\dllcache\c_10006.nls -> [Ver = | Size = 66082 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_10007.nls -> %SystemRoot%\System32\dllcache\c_10007.nls -> [Ver = | Size = 66082 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_10008.nls -> %SystemRoot%\System32\dllcache\c_10008.nls -> [Ver = | Size = 173602 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_10010.nls -> %SystemRoot%\System32\dllcache\c_10010.nls -> [Ver = | Size = 66082 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_10017.nls -> %SystemRoot%\System32\dllcache\c_10017.nls -> [Ver = | Size = 66082 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_10021.nls -> %SystemRoot%\System32\dllcache\c_10021.nls -> [Ver = | Size = 66082 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_10029.nls -> %SystemRoot%\System32\dllcache\c_10029.nls -> [Ver = | Size = 66082 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_10081.nls -> %SystemRoot%\System32\dllcache\c_10081.nls -> [Ver = | Size = 66082 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_10082.nls -> %SystemRoot%\System32\dllcache\c_10082.nls -> [Ver = | Size = 66082 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_1047.nls -> %SystemRoot%\System32\dllcache\c_1047.nls -> [Ver = | Size = 66082 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_1140.nls -> %SystemRoot%\System32\dllcache\c_1140.nls -> [Ver = | Size = 66082 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_1141.nls -> %SystemRoot%\System32\dllcache\c_1141.nls -> [Ver = | Size = 66082 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_1142.nls -> %SystemRoot%\System32\dllcache\c_1142.nls -> [Ver = | Size = 66082 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_1143.nls -> %SystemRoot%\System32\dllcache\c_1143.nls -> [Ver = | Size = 66082 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_1144.nls -> %SystemRoot%\System32\dllcache\c_1144.nls -> [Ver = | Size = 66082 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_1145.nls -> %SystemRoot%\System32\dllcache\c_1145.nls -> [Ver = | Size = 66082 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_1146.nls -> %SystemRoot%\System32\dllcache\c_1146.nls -> [Ver = | Size = 66082 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_1147.nls -> %SystemRoot%\System32\dllcache\c_1147.nls -> [Ver = | Size = 66082 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_1148.nls -> %SystemRoot%\System32\dllcache\c_1148.nls -> [Ver = | Size = 66082 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_1149.nls -> %SystemRoot%\System32\dllcache\c_1149.nls -> [Ver = | Size = 66082 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_1361.nls -> %SystemRoot%\System32\dllcache\c_1361.nls -> [Ver = | Size = 189986 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_20000.nls -> %SystemRoot%\System32\dllcache\c_20000.nls -> [Ver = | Size = 180258 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_20001.nls -> %SystemRoot%\System32\dllcache\c_20001.nls -> [Ver = | Size = 186402 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_20002.nls -> %SystemRoot%\System32\dllcache\c_20002.nls -> [Ver = | Size = 173602 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_20003.nls -> %SystemRoot%\System32\dllcache\c_20003.nls -> [Ver = | Size = 185378 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_20004.nls -> %SystemRoot%\System32\dllcache\c_20004.nls -> [Ver = | Size = 180258 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_20005.nls -> %SystemRoot%\System32\dllcache\c_20005.nls -> [Ver = | Size = 187938 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_20105.nls -> %SystemRoot%\System32\dllcache\c_20105.nls -> [Ver = | Size = 66082 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_20106.nls -> %SystemRoot%\System32\dllcache\c_20106.nls -> [Ver = | Size = 66082 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_20107.nls -> %SystemRoot%\System32\dllcache\c_20107.nls -> [Ver = | Size = 66082 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_20108.nls -> %SystemRoot%\System32\dllcache\c_20108.nls -> [Ver = | Size = 66082 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_20127.nls -> %SystemRoot%\System32\dllcache\c_20127.nls -> [Ver = | Size = 66082 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_20269.nls -> %SystemRoot%\System32\dllcache\c_20269.nls -> [Ver = | Size = 66082 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_20273.nls -> %SystemRoot%\System32\dllcache\c_20273.nls -> [Ver = | Size = 66082 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_20277.nls -> %SystemRoot%\System32\dllcache\c_20277.nls -> [Ver = | Size = 66082 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_20278.nls -> %SystemRoot%\System32\dllcache\c_20278.nls -> [Ver = | Size = 66082 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_20280.nls -> %SystemRoot%\System32\dllcache\c_20280.nls -> [Ver = | Size = 66082 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_20284.nls -> %SystemRoot%\System32\dllcache\c_20284.nls -> [Ver = | Size = 66082 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_20285.nls -> %SystemRoot%\System32\dllcache\c_20285.nls -> [Ver = | Size = 66082 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_20290.nls -> %SystemRoot%\System32\dllcache\c_20290.nls -> [Ver = | Size = 66082 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_20297.nls -> %SystemRoot%\System32\dllcache\c_20297.nls -> [Ver = | Size = 66082 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_20420.nls -> %SystemRoot%\System32\dllcache\c_20420.nls -> [Ver = | Size = 66082 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_20423.nls -> %SystemRoot%\System32\dllcache\c_20423.nls -> [Ver = | Size = 66082 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_20424.nls -> %SystemRoot%\System32\dllcache\c_20424.nls -> [Ver = | Size = 66082 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_20833.nls -> %SystemRoot%\System32\dllcache\c_20833.nls -> [Ver = | Size = 66082 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_20838.nls -> %SystemRoot%\System32\dllcache\c_20838.nls -> [Ver = | Size = 66082 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_20871.nls -> %SystemRoot%\System32\dllcache\c_20871.nls -> [Ver = | Size = 66082 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_20880.nls -> %SystemRoot%\System32\dllcache\c_20880.nls -> [Ver = | Size = 66082 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_20924.nls -> %SystemRoot%\System32\dllcache\c_20924.nls -> [Ver = | Size = 66082 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_20932.nls -> %SystemRoot%\System32\dllcache\c_20932.nls -> [Ver = | Size = 180770 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_20936.nls -> %SystemRoot%\System32\dllcache\c_20936.nls -> [Ver = | Size = 173602 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_20949.nls -> %SystemRoot%\System32\dllcache\c_20949.nls -> [Ver = | Size = 177698 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_21025.nls -> %SystemRoot%\System32\dllcache\c_21025.nls -> [Ver = | Size = 66082 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_21027.nls -> %SystemRoot%\System32\dllcache\c_21027.nls -> [Ver = | Size = 66082 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_28594.nls -> %SystemRoot%\System32\dllcache\c_28594.nls -> [Ver = | Size = 66082 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_28595.nls -> %SystemRoot%\System32\dllcache\c_28595.nls -> [Ver = | Size = 66082 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_28596.nls -> %SystemRoot%\System32\dllcache\c_28596.nls -> [Ver = | Size = 66082 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_28597.nls -> %SystemRoot%\System32\dllcache\c_28597.nls -> [Ver = | Size = 66082 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_28599.nls -> %SystemRoot%\System32\dllcache\c_28599.nls -> [Ver = | Size = 66082 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_28603.nls -> %SystemRoot%\System32\dllcache\c_28603.nls -> [Ver = | Size = 66082 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_708.nls -> %SystemRoot%\System32\dllcache\c_708.nls -> [Ver = | Size = 66082 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_720.nls -> %SystemRoot%\System32\dllcache\c_720.nls -> [Ver = | Size = 66594 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_737.nls -> %SystemRoot%\System32\dllcache\c_737.nls -> [Ver = | Size = 66594 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_852.nls -> %SystemRoot%\System32\dllcache\c_852.nls -> [Ver = | Size = 66594 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_855.nls -> %SystemRoot%\System32\dllcache\c_855.nls -> [Ver = | Size = 66594 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_857.nls -> %SystemRoot%\System32\dllcache\c_857.nls -> [Ver = | Size = 66594 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_858.nls -> %SystemRoot%\System32\dllcache\c_858.nls -> [Ver = | Size = 66594 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_862.nls -> %SystemRoot%\System32\dllcache\c_862.nls -> [Ver = | Size = 66594 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_864.nls -> %SystemRoot%\System32\dllcache\c_864.nls -> [Ver = | Size = 66594 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_866.nls -> %SystemRoot%\System32\dllcache\c_866.nls -> [Ver = | Size = 66594 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_869.nls -> %SystemRoot%\System32\dllcache\c_869.nls -> [Ver = | Size = 66594 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_870.nls -> %SystemRoot%\System32\dllcache\c_870.nls -> [Ver = | Size = 66082 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_875.nls -> %SystemRoot%\System32\dllcache\c_875.nls -> [Ver = | Size = 66082 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] dgrpsetu.dll -> %SystemRoot%\System32\dllcache\dgrpsetu.dll -> Digi International, Inc. [Ver = 2.3.7 | Size = 176157 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] dgsetup.dll -> %SystemRoot%\System32\dllcache\dgsetup.dll -> Digi International [Ver = v3.7.3.0 | Size = 85020 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] eqnclass.dll -> %SystemRoot%\System32\dllcache\eqnclass.dll -> Equinox Systems Inc. [Ver = 5.0u(58) | Size = 103424 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] esucmd.dll -> %SystemRoot%\System32\dllcache\esucmd.dll -> SEIKO EPSON CORP. [Ver = 1.00 | Size = 31744 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] esuimgd.dll -> %SystemRoot%\System32\dllcache\esuimgd.dll -> SEIKO EPSON CORP. [Ver = 1.00 | Size = 57856 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] esunid.dll -> %SystemRoot%\System32\dllcache\esunid.dll -> SEIKO EPSON CORP. [Ver = 1.00 | Size = 45056 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] FP4.CAT -> %SystemRoot%\System32\dllcache\FP4.CAT -> [Ver = | Size = 31281 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] fpencode.dll -> %SystemRoot%\System32\dllcache\fpencode.dll -> [Ver = | Size = 94208 bytes | Modified Date = 24/03/2003 4:52:04 PM | Attr = ] hanja.lex -> %SystemRoot%\System32\dllcache\hanja.lex -> [Ver = | Size = 108827 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] HPCRDP.CAT -> %SystemRoot%\System32\dllcache\HPCRDP.CAT -> [Ver = | Size = 13472 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] htrn_jis.dll -> %SystemRoot%\System32\dllcache\htrn_jis.dll -> Hilgraeve, Inc. [Ver = 5.1.2600.0 | Size = 13312 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] hwxjpn.dll -> %SystemRoot%\System32\dllcache\hwxjpn.dll -> [Ver = | Size = 13463552 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] IASNT4.CAT -> %SystemRoot%\System32\dllcache\IASNT4.CAT -> [Ver = | Size = 8574 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] imekr.lex -> %SystemRoot%\System32\dllcache\imekr.lex -> [Ver = | Size = 134339 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] imjpinst.exe -> %SystemRoot%\System32\dllcache\imjpinst.exe -> [Ver = | Size = 196665 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] IMS.CAT -> %SystemRoot%\System32\dllcache\IMS.CAT -> [Ver = | Size = 13753 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] imscinst.exe -> %SystemRoot%\System32\dllcache\imscinst.exe -> [Ver = | Size = 59392 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] isrdbg32.dll -> %SystemRoot%\System32\dllcache\isrdbg32.dll -> Intel Corporation [Ver = 0.0 | Size = 32768 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] korwbrkr.lex -> %SystemRoot%\System32\dllcache\korwbrkr.lex -> [Ver = | Size = 1158818 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] ksc.nls -> %SystemRoot%\System32\dllcache\ksc.nls -> [Ver = | Size = 47066 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] ltts1033.lxa -> %SystemRoot%\System32\dllcache\ltts1033.lxa -> [Ver = | Size = 643717 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] MAPIMIG.CAT -> %SystemRoot%\System32\dllcache\MAPIMIG.CAT -> [Ver = | Size = 399645 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] mplayer2.exe -> %SystemRoot%\System32\dllcache\mplayer2.exe -> [Ver = | Size = 4639 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] msinfo.dll -> %SystemRoot%\System32\dllcache\msinfo.dll -> [Ver = 7, 0, 0, 0 | Size = 376320 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] MSMSGS.CAT -> %SystemRoot%\System32\dllcache\MSMSGS.CAT -> [Ver = | Size = 9581 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] msn7.cat -> %SystemRoot%\System32\dllcache\msn7.cat -> [Ver = | Size = 24209 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] msn9.cat -> %SystemRoot%\System32\dllcache\msn9.cat -> [Ver = | Size = 11651 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] MSTSWEB.CAT -> %SystemRoot%\System32\dllcache\MSTSWEB.CAT -> [Ver = | Size = 7245 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] MW770.CAT -> %SystemRoot%\System32\dllcache\MW770.CAT -> [Ver = | Size = 37484 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] nls302en.lex -> %SystemRoot%\System32\dllcache\nls302en.lex -> [Ver = | Size = 4399505 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] NT5.CAT -> %SystemRoot%\System32\dllcache\NT5.CAT -> [Ver = | Size = 2012670 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] NT5IIS.CAT -> %SystemRoot%\System32\dllcache\NT5IIS.CAT -> [Ver = | Size = 797189 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] NT5INF.CAT -> %SystemRoot%\System32\dllcache\NT5INF.CAT -> [Ver = | Size = 384906 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] NTPRINT.CAT -> %SystemRoot%\System32\dllcache\NTPRINT.CAT -> [Ver = | Size = 1086058 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] nv4_disp.dll -> %SystemRoot%\System32\dllcache\nv4_disp.dll -> NVIDIA Corporation [Ver = 6.14.11.6921 | Size = 5773568 bytes | Modified Date = 5/12/2007 1:41:00 AM | Attr = ] nv4_mini.sys -> %SystemRoot%\System32\dllcache\nv4_mini.sys -> NVIDIA Corporation [Ver = 6.14.11.6921 | Size = 7435392 bytes | Modified Date = 5/12/2007 1:41:00 AM | Attr = ] OEMBIOS.CAT -> %SystemRoot%\System32\dllcache\OEMBIOS.CAT -> [Ver = | Size = 7382 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] pinball.exe -> %SystemRoot%\System32\dllcache\pinball.exe -> Cinematronics [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 281088 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] pintlcsa.dll -> %SystemRoot%\System32\dllcache\pintlcsa.dll -> [Ver = | Size = 175104 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] prc.nls -> %SystemRoot%\System32\dllcache\prc.nls -> [Ver = | Size = 83748 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] prcp.nls -> %SystemRoot%\System32\dllcache\prcp.nls -> [Ver = | Size = 83748 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] r1033tts.lxa -> %SystemRoot%\System32\dllcache\r1033tts.lxa -> [Ver = | Size = 605050 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] sam.sdf -> %SystemRoot%\System32\dllcache\sam.sdf -> [Ver = | Size = 888 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] sam.spd -> %SystemRoot%\System32\dllcache\sam.spd -> [Ver = | Size = 1685606 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] SP2.CAT -> %SystemRoot%\System32\dllcache\SP2.CAT -> [Ver = | Size = 1042903 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] spxcoins.dll -> %SystemRoot%\System32\dllcache\spxcoins.dll -> Perle Systems Ltd. [Ver = 1.0.0.0007 | Size = 24661 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] srframe.mmf -> %SystemRoot%\System32\dllcache\srframe.mmf -> [Ver = | Size = 984 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] startoc.cat -> %SystemRoot%\System32\dllcache\startoc.cat -> [Ver = | Size = 168806 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] wmerrenu.cat -> %SystemRoot%\System32\dllcache\wmerrenu.cat -> [Ver = | Size = 7334 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] ASACPI.sys -> %SystemRoot%\System32\drivers\ASACPI.sys -> [Ver = 1043, 2, 15, 37 | Size = 5810 bytes | Modified Date = 13/08/2004 8:56:20 PM | Attr = R ] ASUSHWIO.SYS -> %SystemRoot%\System32\drivers\ASUSHWIO.SYS -> [Ver = | Size = 10288 bytes | Modified Date = 11/10/2006 1:33:58 PM | Attr = ] atl01_xp.sys -> %SystemRoot%\System32\drivers\atl01_xp.sys -> Attansic Technology corporation. [Ver = 2.1.6000.0 | Size = 38656 bytes | Modified Date = 15/03/2007 4:12:02 PM | Attr = R ] avg7core.sys -> %SystemRoot%\System32\drivers\avg7core.sys -> GRISOFT, s.r.o. [Ver = 7.5.0.498 | Size = 821856 bytes | Modified Date = 25/02/2008 4:35:49 PM | Attr = ] avg7rsw.sys -> %SystemRoot%\System32\drivers\avg7rsw.sys -> GRISOFT, s.r.o. [Ver = 7,0,0,340 | Size = 4224 bytes | Modified Date = 25/02/2008 4:35:51 PM | Attr = ] avg7rsxp.sys -> %SystemRoot%\System32\drivers\avg7rsxp.sys -> GRISOFT, s.r.o. [Ver = 7.5.0.442 | Size = 27776 bytes | Modified Date = 25/02/2008 4:35:51 PM | Attr = ] avgclean.sys -> %SystemRoot%\System32\drivers\avgclean.sys -> GRISOFT, s.r.o. [Ver = 1.0.0.14 | Size = 10760 bytes | Modified Date = 25/02/2008 4:35:57 PM | Attr = ] avgmfx86.sys -> %SystemRoot%\System32\drivers\avgmfx86.sys -> GRISOFT, s.r.o. [Ver = 7.5.0.510 | Size = 26952 bytes | Modified Date = 25/02/2008 4:35:57 PM | Attr = ] d344bus.sys -> %SystemRoot%\System32\drivers\d344bus.sys -> [Ver = 3.44.0.0 built by: WinDDK | Size = 137216 bytes | Modified Date = 27/12/2003 8:42:12 PM | Attr = ] d344prt.sys -> %SystemRoot%\System32\drivers\d344prt.sys -> [Ver = 3.44.0.0 built by: WinDDK | Size = 5248 bytes | Modified Date = 27/12/2003 2:38:10 AM | Attr = ] disdn -> %SystemRoot%\System32\drivers\disdn -> [Folder | Created Date = 2/02/2008 9:35:42 PM | Attr = ] etc -> %SystemRoot%\System32\drivers\etc -> [Folder | Created Date = 2/02/2008 9:35:42 PM | Attr = ] hosts.msn -> %SystemRoot%\System32\drivers\etc\hosts.msn -> [Ver = | Size = 734 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] INF -> %SystemRoot%\System32\drivers\INF -> [Folder | Created Date = 2/02/2008 12:02:48 PM | Attr = ] oem0.inf -> %SystemRoot%\System32\drivers\INF\oem0.inf -> [Ver = | Size = 0 bytes | Modified Date = 2/02/2008 12:01:00 PM | Attr = H ] oem0.PNF -> %SystemRoot%\System32\drivers\INF\oem0.PNF -> [Ver = | Size = 0 bytes | Modified Date = 2/02/2008 12:01:00 PM | Attr = H ] oem1.inf -> %SystemRoot%\System32\drivers\INF\oem1.inf -> [Ver = | Size = 0 bytes | Modified Date = 2/02/2008 12:02:25 PM | Attr = H ] oem1.PNF -> %SystemRoot%\System32\drivers\INF\oem1.PNF -> [Ver = | Size = 0 bytes | Modified Date = 2/02/2008 12:02:25 PM | Attr = H ] oem2.inf -> %SystemRoot%\System32\drivers\INF\oem2.inf -> [Ver = | Size = 0 bytes | Modified Date = 2/02/2008 12:02:28 PM | Attr = H ] oem2.PNF -> %SystemRoot%\System32\drivers\INF\oem2.PNF -> [Ver = | Size = 0 bytes | Modified Date = 2/02/2008 12:02:28 PM | Attr = H ] oem3.inf -> %SystemRoot%\System32\drivers\INF\oem3.inf -> [Ver = | Size = 0 bytes | Modified Date = 2/02/2008 12:02:33 PM | Attr = H ] oem3.PNF -> %SystemRoot%\System32\drivers\INF\oem3.PNF -> [Ver = | Size = 0 bytes | Modified Date = 2/02/2008 12:02:33 PM | Attr = H ] oem4.inf -> %SystemRoot%\System32\drivers\INF\oem4.inf -> [Ver = | Size = 0 bytes | Modified Date = 2/02/2008 12:02:42 PM | Attr = H ] oem4.PNF -> %SystemRoot%\System32\drivers\INF\oem4.PNF -> [Ver = | Size = 0 bytes | Modified Date = 2/02/2008 12:02:42 PM | Attr = H ] oem5.inf -> %SystemRoot%\System32\drivers\INF\oem5.inf -> [Ver = | Size = 0 bytes | Modified Date = 2/02/2008 12:02:43 PM | Attr = H ] oem5.PNF -> %SystemRoot%\System32\drivers\INF\oem5.PNF -> [Ver = | Size = 0 bytes | Modified Date = 2/02/2008 12:02:43 PM | Attr = H ] nv4_mini.sys -> %SystemRoot%\System32\drivers\nv4_mini.sys -> NVIDIA Corporation [Ver = 6.14.11.6921 | Size = 7435392 bytes | Modified Date = 5/12/2007 1:41:00 AM | Attr = ] pcouffin.sys -> %SystemRoot%\System32\drivers\pcouffin.sys -> VSO Software [Ver = 1.37 | Size = 47360 bytes | Modified Date = 21/02/2008 9:33:12 PM | Attr = ] PnkBstrK.sys -> %SystemRoot%\System32\drivers\PnkBstrK.sys -> [Ver = | Size = 22328 bytes | Modified Date = 20/02/2008 4:26:52 PM | Attr = ] pxhelp20.sys -> %SystemRoot%\System32\drivers\pxhelp20.sys -> Sonic Solutions [Ver = 2.02.62a | Size = 20016 bytes | Modified Date = 17/02/2008 8:57:10 PM | Attr = ] RtkHDAud.sys -> %SystemRoot%\System32\drivers\RtkHDAud.sys -> Realtek Semiconductor Corp. [Ver = 5.10.0.5391 built by: WinDDK | Size = 4395008 bytes | Modified Date = 26/03/2007 9:21:06 PM | Attr = R ] system32 -> %SystemRoot%\System32\drivers\system32 -> [Folder | Created Date = 2/02/2008 12:02:48 PM | Attr = ] DRIVERS -> %SystemRoot%\System32\drivers\system32\DRIVERS -> [Folder | Created Date = 2/02/2008 12:02:48 PM | Attr = ] UMDF -> %SystemRoot%\System32\drivers\UMDF -> [Folder | Created Date = 15/02/2008 4:19:56 PM | Attr = ] MsftWdf_user_01_00_00.Wdf -> %SystemRoot%\System32\drivers\UMDF\MsftWdf_user_01_00_00.Wdf -> [Ver = | Size = 0 bytes | Modified Date = 15/02/2008 4:19:58 PM | Attr = H ] $winnt$.inf -> %SystemRoot%\System32\$winnt$.inf -> [Ver = | Size = 261 bytes | Modified Date = 2/02/2008 11:57:36 AM | Attr = ] 1025 -> %SystemRoot%\System32\1025 -> [Folder | Created Date = 2/02/2008 9:35:42 PM | Attr = ] 4 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> 1028 -> %SystemRoot%\System32\1028 -> [Folder | Created Date = 2/02/2008 9:35:42 PM | Attr = ] 1031 -> %SystemRoot%\System32\1031 -> [Folder | Created Date = 2/02/2008 9:35:42 PM | Attr = ] 1033 -> %SystemRoot%\System32\1033 -> [Folder | Created Date = 2/02/2008 9:35:42 PM | Attr = ] 1037 -> %SystemRoot%\System32\1037 -> [Folder | Created Date = 2/02/2008 9:35:42 PM | Attr = ] 1041 -> %SystemRoot%\System32\1041 -> [Folder | Created Date = 2/02/2008 9:35:42 PM | Attr = ] 1042 -> %SystemRoot%\System32\1042 -> [Folder | Created Date = 2/02/2008 9:35:42 PM | Attr = ] 1054 -> %SystemRoot%\System32\1054 -> [Folder | Created Date = 2/02/2008 9:35:42 PM | Attr = ] 2052 -> %SystemRoot%\System32\2052 -> [Folder | Created Date = 2/02/2008 9:35:42 PM | Attr = ] 3076 -> %SystemRoot%\System32\3076 -> [Folder | Created Date = 2/02/2008 9:35:42 PM | Attr = ] 3com_dmi -> %SystemRoot%\System32\3com_dmi -> [Folder | Created Date = 2/02/2008 9:35:42 PM | Attr = ] ac3acm.acm -> %SystemRoot%\System32\ac3acm.acm -> fccHandler [Ver = 1, 40, 0, 0 | Size = 118784 bytes | Modified Date = 21/09/2007 1:52:46 AM | Attr = ] ac3filter.ax -> %SystemRoot%\System32\ac3filter.ax -> [Ver = 0.68b | Size = 172032 bytes | Modified Date = 3/04/2003 12:17:40 AM | Attr = ] AGEIA -> %SystemRoot%\System32\AGEIA -> [Folder | Created Date = 2/02/2008 4:29:03 PM | Attr = ] ALSndMgr.cpl -> %SystemRoot%\System32\ALSndMgr.cpl -> Realtek Semiconductor Corp. [Ver = 1, 0, 0, 10 | Size = 299008 bytes | Modified Date = 21/09/2005 12:25:50 PM | Attr = R ] amcompat.tlb -> %SystemRoot%\System32\amcompat.tlb -> [Ver = | Size = 16832 bytes | Modified Date = 15/02/2008 4:20:46 PM | Attr = ] Attansic -> %SystemRoot%\System32\Attansic -> [Folder | Created Date = 2/02/2008 12:11:38 PM | Attr = ] AUTOEXEC.NT -> %SystemRoot%\System32\AUTOEXEC.NT -> [Ver = | Size = 1688 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] bopomofo.uce -> %SystemRoot%\System32\bopomofo.uce -> [Ver = | Size = 22984 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] BuzzingBee.wav -> %SystemRoot%\System32\BuzzingBee.wav -> [Ver = | Size = 146650 bytes | Modified Date = 2/02/2008 12:11:17 PM | Attr = ] CanonIJ Uninstaller Information -> %SystemRoot%\System32\CanonIJ Uninstaller Information -> [Folder | Created Date = 5/02/2008 8:48:51 PM | Attr = H ] CatRoot -> %SystemRoot%\System32\CatRoot -> [Folder | Created Date = 2/02/2008 9:42:20 PM | Attr = ] CatRoot2 -> %SystemRoot%\System32\CatRoot2 -> [Folder | Created Date = 2/02/2008 9:42:20 PM | Attr = ] cdplayer.exe.manifest -> %SystemRoot%\System32\cdplayer.exe.manifest -> [Ver = | Size = 749 bytes | Modified Date = 2/02/2008 11:55:09 AM | Attr = RH ] ChCfg.exe -> %SystemRoot%\System32\ChCfg.exe -> [Ver = | Size = 49152 bytes | Modified Date = 1/08/2006 5:02:32 PM | Attr = R ] CmdLineExt.dll -> %SystemRoot%\System32\CmdLineExt.dll -> Sony DADC Austria AG. [Ver = 1,1,221,0 | Size = 107888 bytes | Modified Date = 2/02/2008 5:27:18 PM | Attr = ] CmdLineExt03.dll -> %SystemRoot%\System32\CmdLineExt03.dll -> [Ver = | Size = 43520 bytes | Modified Date = 20/02/2008 5:38:57 PM | Attr = ] CNCC960.DLL -> %SystemRoot%\System32\CNCC960.DLL -> CANON INC. [Ver = 0, 2, 7, 0 | Size = 1298432 bytes | Modified Date = 20/07/2006 3:51:16 PM | Attr = ] CNCI960.DLL -> %SystemRoot%\System32\CNCI960.DLL -> CANON INC. [Ver = 2, 0, 0, 0 | Size = 57344 bytes | Modified Date = 20/07/2006 3:51:10 PM | Attr = ] CNCL960.DLL -> %SystemRoot%\System32\CNCL960.DLL -> Canon Inc. [Ver = 1.00 | Size = 139264 bytes | Modified Date = 26/05/2006 10:55:08 AM | Attr = ] cnco960.dll -> %SystemRoot%\System32\cnco960.dll -> Canon Inc. [Ver = 1.4 | Size = 106496 bytes | Modified Date = 29/06/2006 2:29:00 PM | Attr = ] CNMLM8C.DLL -> %SystemRoot%\System32\CNMLM8C.DLL -> CANON INC. [Ver = 2.00.4.13 | Size = 197632 bytes | Modified Date = 13/09/2006 5:00:00 AM | Attr = ] Com -> %SystemRoot%\System32\Com -> [Folder | Created Date = 2/02/2008 11:52:41 AM | Attr = ] config -> %SystemRoot%\System32\config -> [Folder | Created Date = 2/02/2008 9:35:42 PM | Attr = ] CONFIG.NT -> %SystemRoot%\System32\CONFIG.NT -> [Ver = | Size = 2577 bytes | Modified Date = 2/02/2008 11:55:52 AM | Attr = ] c_10006.nls -> %SystemRoot%\System32\c_10006.nls -> [Ver = | Size = 66082 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_10007.nls -> %SystemRoot%\System32\c_10007.nls -> [Ver = | Size = 66082 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_10010.nls -> %SystemRoot%\System32\c_10010.nls -> [Ver = | Size = 66082 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_10017.nls -> %SystemRoot%\System32\c_10017.nls -> [Ver = | Size = 66082 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_10029.nls -> %SystemRoot%\System32\c_10029.nls -> [Ver = | Size = 66082 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_10081.nls -> %SystemRoot%\System32\c_10081.nls -> [Ver = | Size = 66082 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_10082.nls -> %SystemRoot%\System32\c_10082.nls -> [Ver = | Size = 66082 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_20127.nls -> %SystemRoot%\System32\c_20127.nls -> [Ver = | Size = 66082 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] C_28594.NLS -> %SystemRoot%\System32\C_28594.NLS -> [Ver = | Size = 66082 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] C_28595.NLS -> %SystemRoot%\System32\C_28595.NLS -> [Ver = | Size = 66082 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] C_28597.NLS -> %SystemRoot%\System32\C_28597.NLS -> [Ver = | Size = 66082 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_28599.nls -> %SystemRoot%\System32\c_28599.nls -> [Ver = | Size = 66082 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_28603.nls -> %SystemRoot%\System32\c_28603.nls -> [Ver = | Size = 66082 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_737.nls -> %SystemRoot%\System32\c_737.nls -> [Ver = | Size = 66594 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_852.nls -> %SystemRoot%\System32\c_852.nls -> [Ver = | Size = 66594 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_855.nls -> %SystemRoot%\System32\c_855.nls -> [Ver = | Size = 66594 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_857.nls -> %SystemRoot%\System32\c_857.nls -> [Ver = | Size = 66594 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_866.nls -> %SystemRoot%\System32\c_866.nls -> [Ver = | Size = 66594 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_869.nls -> %SystemRoot%\System32\c_869.nls -> [Ver = | Size = 66594 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] c_875.nls -> %SystemRoot%\System32\c_875.nls -> [Ver = | Size = 66082 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] d3d9caps.dat -> %SystemRoot%\System32\d3d9caps.dat -> [Ver = | Size = 664 bytes | Modified Date = 2/02/2008 12:36:06 PM | Attr = ] desktop.ini -> %SystemRoot%\System32\desktop.ini -> [Ver = | Size = 2 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] dgrpsetu.dll -> %SystemRoot%\System32\dgrpsetu.dll -> Digi International, Inc. [Ver = 2.3.7 | Size = 176157 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] dgsetup.dll -> %SystemRoot%\System32\dgsetup.dll -> Digi International [Ver = v3.7.3.0 | Size = 85020 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] dhcp -> %SystemRoot%\System32\dhcp -> [Folder | Created Date = 2/02/2008 9:35:42 PM | Attr = ] DirectX -> %SystemRoot%\System32\DirectX -> [Folder | Created Date = 2/02/2008 11:54:53 AM | Attr = ] divx.dll -> %SystemRoot%\System32\divx.dll -> DivX, Inc. [Ver = 6.8.0.14 | Size = 682496 bytes | Modified Date = 4/12/2007 2:33:16 AM | Attr = ] dllcache -> %SystemRoot%\System32\dllcache -> [Folder | Created Date = 2/02/2008 9:35:42 PM | Attr = RHS] dpl100.dll -> %SystemRoot%\System32\dpl100.dll -> DivX, Inc. [Ver = 1, 2, 0, 40 | Size = 81920 bytes | Modified Date = 29/11/2007 11:28:24 PM | Attr = ] drivers -> %SystemRoot%\System32\drivers -> [Folder | Created Date = 2/02/2008 9:35:42 PM | Attr = ] drv23260.dll -> %SystemRoot%\System32\drv23260.dll -> RealNetworks, Inc. [Ver = 6.0.7.3928 | Size = 176165 bytes | Modified Date = 29/09/2006 11:26:22 AM | Attr = ] drv33260.dll -> %SystemRoot%\System32\drv33260.dll -> RealNetworks, Inc. [Ver = 6.0.7.4085 | Size = 208935 bytes | Modified Date = 29/09/2006 11:25:38 AM | Attr = ] drv43260.dll -> %SystemRoot%\System32\drv43260.dll -> RealNetworks, Inc. [Ver = 6.0.7.2389 | Size = 217127 bytes | Modified Date = 29/09/2006 11:24:48 AM | Attr = ] DRVSTORE -> %SystemRoot%\System32\DRVSTORE -> [Folder | Created Date = 2/02/2008 12:02:25 PM | Attr = ] emptyregdb.dat -> %SystemRoot%\System32\emptyregdb.dat -> [Ver = | Size = 21640 bytes | Modified Date = 2/02/2008 11:53:57 AM | Attr = ] en-US -> %SystemRoot%\System32\en-US -> [Folder | Created Date = 2/02/2008 4:28:01 PM | Attr = ] EqnClass.Dll -> %SystemRoot%\System32\EqnClass.Dll -> Equinox Systems Inc. [Ver = 5.0u(58) | Size = 103424 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] export -> %SystemRoot%\System32\export -> [Folder | Created Date = 2/02/2008 9:35:42 PM | Attr = ] ffdshow.ax -> %SystemRoot%\System32\ffdshow.ax -> [Ver = 1, 0, 0, 1 | Size = 1761280 bytes | Modified Date = 12/10/2004 2:46:32 PM | Attr = ] ffdshow.reg -> %SystemRoot%\System32\ffdshow.reg -> [Ver = | Size = 34820 bytes | Modified Date = 10/09/2004 1:50:48 PM | Attr = ] ff_vfw.dll -> %SystemRoot%\System32\ff_vfw.dll -> [Ver = | Size = 7680 bytes | Modified Date = 24/12/2007 1:49:52 PM | Attr = ] ff_vfw.dll.manifest -> %SystemRoot%\System32\ff_vfw.dll.manifest -> [Ver = | Size = 547 bytes | Modified Date = 10/07/2007 5:10:12 PM | Attr = ] FNTCACHE.DAT -> %SystemRoot%\System32\FNTCACHE.DAT -> [Ver = | Size = 197752 bytes | Modified Date = 26/02/2008 6:55:55 PM | Attr = ] gb2312.uce -> %SystemRoot%\System32\gb2312.uce -> [Ver = | Size = 24006 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] hticons.dll -> %SystemRoot%\System32\hticons.dll -> Hilgraeve, Inc. [Ver = 5.1.2600.0 | Size = 44544 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] hypertrm.dll -> %SystemRoot%\System32\hypertrm.dll -> Hilgraeve, Inc. [Ver = 5.1.2600.2563 | Size = 347136 bytes | Modified Date = 18/11/2004 3:41:24 AM | Attr = ] ias -> %SystemRoot%\System32\ias -> [Folder | Created Date = 2/02/2008 9:35:42 PM | Attr = ] icsxml -> %SystemRoot%\System32\icsxml -> [Folder | Created Date = 2/02/2008 9:35:42 PM | Attr = ] ideograf.uce -> %SystemRoot%\System32\ideograf.uce -> [Ver = | Size = 60458 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] ImagX7.dll -> %SystemRoot%\System32\ImagX7.dll -> Pegasus Imaging Corp. [Ver = 7.0.46.0 | Size = 1568768 bytes | Modified Date = 26/07/2004 5:16:10 PM | Attr = ] ImagXpr7.dll -> %SystemRoot%\System32\ImagXpr7.dll -> Pegasus Imaging Corp. [Ver = 7.0.46.0 | Size = 476320 bytes | Modified Date = 26/07/2004 5:16:10 PM | Attr = ] ImagXR7.dll -> %SystemRoot%\System32\ImagXR7.dll -> Pegasus Imaging Corp. [Ver = 7.0.476.0 | Size = 262144 bytes | Modified Date = 26/07/2004 5:16:10 PM | Attr = ] ImagXRA7.dll -> %SystemRoot%\System32\ImagXRA7.dll -> Pegasus Imaging Corp. [Ver = 7.0.476.0 | Size = 471040 bytes | Modified Date = 26/07/2004 5:16:10 PM | Attr = ] IME -> %SystemRoot%\System32\IME -> [Folder | Created Date = 2/02/2008 9:35:42 PM | Attr = ] inetsrv -> %SystemRoot%\System32\inetsrv -> [Folder | Created Date = 2/02/2008 9:35:42 PM | Attr = ] isrdbg32.dll -> %SystemRoot%\System32\isrdbg32.dll -> Intel Corporation [Ver = 0.0 | Size = 32768 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] java.exe -> %SystemRoot%\System32\java.exe -> Sun Microsystems, Inc. [Ver = 6.0.40.12 | Size = 135168 bytes | Modified Date = 14/12/2007 12:57:22 AM | Attr = ] javacpl.cpl -> %SystemRoot%\System32\javacpl.cpl -> Sun Microsystems, Inc. [Ver = 6.0.40.12 | Size = 69632 bytes | Modified Date = 14/12/2007 1:59:16 AM | Attr = ] javaw.exe -> %SystemRoot%\System32\javaw.exe -> Sun Microsystems, Inc. [Ver = 6.0.40.12 | Size = 135168 bytes | Modified Date = 14/12/2007 12:57:24 AM | Attr = ] javaws.exe -> %SystemRoot%\System32\javaws.exe -> Sun Microsystems, Inc. [Ver = 6.0.40.12 | Size = 139264 bytes | Modified Date = 14/12/2007 1:59:16 AM | Attr = ] kanji_1.uce -> %SystemRoot%\System32\kanji_1.uce -> [Ver = | Size = 6948 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] kanji_2.uce -> %SystemRoot%\System32\kanji_2.uce -> [Ver = | Size = 8484 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] keystone.exe -> %SystemRoot%\System32\keystone.exe -> [Ver = | Size = 425984 bytes | Modified Date = 5/12/2007 1:41:00 AM | Attr = ] korean.uce -> %SystemRoot%\System32\korean.uce -> [Ver = | Size = 12876 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] lameACM.acm -> %SystemRoot%\System32\lameACM.acm -> http://www.mp3dev.org/ [Ver = 0.9.1 | Size = 389120 bytes | Modified Date = 24/09/2006 4:11:00 PM | Attr = ] lame_acm.xml -> %SystemRoot%\System32\lame_acm.xml -> [Ver = | Size = 414 bytes | Modified Date = 3/10/2007 4:03:30 PM | Attr = ] Lang -> %SystemRoot%\System32\Lang -> [Folder | Created Date = 2/02/2008 12:11:16 PM | Attr = ] libavcodec.dll -> %SystemRoot%\System32\libavcodec.dll -> [Ver = | Size = 2255360 bytes | Modified Date = 12/10/2004 2:40:58 PM | Attr = ] libmpeg2_ff.dll -> %SystemRoot%\System32\libmpeg2_ff.dll -> [Ver = | Size = 112640 bytes | Modified Date = 4/10/2004 1:50:26 AM | Attr = ] libmplayer.dll -> %SystemRoot%\System32\libmplayer.dll -> [Ver = | Size = 395776 bytes | Modified Date = 5/10/2004 4:16:08 PM | Attr = ] LogFiles -> %SystemRoot%\System32\LogFiles -> [Folder | Created Date = 2/02/2008 4:03:56 PM | Attr = ] logonui.exe.manifest -> %SystemRoot%\System32\logonui.exe.manifest -> [Ver = | Size = 488 bytes | Modified Date = 2/02/2008 11:55:13 AM | Attr = RH ] LoopyMusic.wav -> %SystemRoot%\System32\LoopyMusic.wav -> [Ver = | Size = 940794 bytes | Modified Date = 2/02/2008 12:11:16 PM | Attr = ] lsdelete.exe -> %SystemRoot%\System32\lsdelete.exe -> [Ver = | Size = 12632 bytes | Modified Date = 14/12/2007 11:32:52 AM | Attr = ] Macromed -> %SystemRoot%\System32\Macromed -> [Folder | Created Date = 2/02/2008 11:54:23 AM | Attr = ] Microsoft -> %SystemRoot%\System32\Microsoft -> [Folder | Created Date = 2/02/2008 11:59:42 AM | Attr = S] MsDtc -> %SystemRoot%\System32\MsDtc -> [Folder | Created Date = 2/02/2008 11:52:43 AM | Attr = ] msdtcprf.h -> %SystemRoot%\System32\msdtcprf.h -> [Ver = | Size = 768 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] msdtcprf.ini -> %SystemRoot%\System32\msdtcprf.ini -> [Ver = | Size = 1931 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] mui -> %SystemRoot%\System32\mui -> [Folder | Created Date = 2/02/2008 9:35:42 PM | Attr = ] ncpa.cpl.manifest -> %SystemRoot%\System32\ncpa.cpl.manifest -> [Ver = | Size = 749 bytes | Modified Date = 2/02/2008 11:55:09 AM | Attr = RH ] NeroCheck.exe -> %SystemRoot%\System32\NeroCheck.exe -> Nero AG [Ver = 1, 0, 0, 5 | Size = 155648 bytes | Modified Date = 12/01/2006 4:40:44 PM | Attr = ] npp -> %SystemRoot%\System32\npp -> [Folder | Created Date = 2/02/2008 9:35:42 PM | Attr = ] nscompat.tlb -> %SystemRoot%\System32\nscompat.tlb -> [Ver = | Size = 23392 bytes | Modified Date = 15/02/2008 4:20:46 PM | Attr = ] nv4_disp.dll -> %SystemRoot%\System32\nv4_disp.dll -> NVIDIA Corporation [Ver = 6.14.11.6921 | Size = 5773568 bytes | Modified Date = 5/12/2007 1:41:00 AM | Attr = ] nvapi.dll -> %SystemRoot%\System32\nvapi.dll -> NVIDIA Corporation [Ver = 6.14.11.6921 | Size = 385024 bytes | Modified Date = 5/12/2007 1:41:00 AM | Attr = ] nvappbar.exe -> %SystemRoot%\System32\nvappbar.exe -> [Ver = | Size = 442368 bytes | Modified Date = 5/12/2007 1:41:00 AM | Attr = ] nvapps.xml -> %SystemRoot%\System32\nvapps.xml -> [Ver = | Size = 163353 bytes | Modified Date = 2/02/2008 12:37:54 PM | Attr = ] nvcod.dll -> %SystemRoot%\System32\nvcod.dll -> NVIDIA Corporation [Ver = 1 , 0 , 0 , 35 | Size = 35328 bytes | Modified Date = 5/12/2007 1:41:00 AM | Attr = ] nvcodins.dll -> %SystemRoot%\System32\nvcodins.dll -> NVIDIA Corporation [Ver = 1 , 0 , 0 , 35 | Size = 35328 bytes | Modified Date = 5/12/2007 1:41:00 AM | Attr = ] nvcolor.exe -> %SystemRoot%\System32\nvcolor.exe -> NVIDIA Corporation [Ver = 6.14.11.6921 | Size = 147456 bytes | Modified Date = 5/12/2007 1:41:00 AM | Attr = ] nvcpl.cpl -> %SystemRoot%\System32\nvcpl.cpl -> NVIDIA Corporation [Ver = 1.5.30.38 | Size = 413696 bytes | Modified Date = 5/12/2007 1:41:00 AM | Attr = ] nvcpl.dll -> %SystemRoot%\System32\nvcpl.dll -> NVIDIA Corporation [Ver = 6.14.11.6921 | Size = 8523776 bytes | Modified Date = 5/12/2007 1:41:00 AM | Attr = ] nvcplui.exe -> %SystemRoot%\System32\nvcplui.exe -> NVIDIA Corporation [Ver = 1.5.30.38 | Size = 753664 bytes | Modified Date = 5/12/2007 1:41:00 AM | Attr = ] nvcuda.dll -> %SystemRoot%\System32\nvcuda.dll -> NVIDIA Corporation [Ver = 6.14.11.6921 | Size = 1089536 bytes | Modified Date = 5/12/2007 1:41:00 AM | Attr = ] nvdisp.nvu -> %SystemRoot%\System32\nvdisp.nvu -> [Ver = | Size = 17737 bytes | Modified Date = 5/12/2007 1:41:00 AM | Attr = ] nvdisps.dll -> %SystemRoot%\System32\nvdisps.dll -> NVIDIA Corporation [Ver = 6.14.11.6921 | Size = 6549504 bytes | Modified Date = 5/12/2007 1:41:00 AM | Attr = ] nvdspsch.exe -> %SystemRoot%\System32\nvdspsch.exe -> [Ver = | Size = 1339392 bytes | Modified Date = 5/12/2007 1:41:00 AM | Attr = ] nvexpbar.dll -> %SystemRoot%\System32\nvexpbar.dll -> NVIDIA Corporation [Ver = 1.5.30.38 | Size = 307200 bytes | Modified Date = 5/12/2007 1:41:00 AM | Attr = ] nvgames.dll -> %SystemRoot%\System32\nvgames.dll -> NVIDIA Corporation [Ver = 6.14.11.6921 | Size = 3420160 bytes | Modified Date = 5/12/2007 1:41:00 AM | Attr = ] nview.dll -> %SystemRoot%\System32\nview.dll -> [Ver = | Size = 1474560 bytes | Modified Date = 5/12/2007 1:41:00 AM | Attr = ] nvmccs.dll -> %SystemRoot%\System32\nvmccs.dll -> NVIDIA Corporation [Ver = 6.14.11.6921 | Size = 229376 bytes | Modified Date = 5/12/2007 1:41:00 AM | Attr = ] nvmccsrs.dll -> %SystemRoot%\System32\nvmccsrs.dll -> NVIDIA Corporation [Ver = 6.14.11.6921 | Size = 45056 bytes | Modified Date = 5/12/2007 1:41:00 AM | Attr = ] nvmccss.dll -> %SystemRoot%\System32\nvmccss.dll -> NVIDIA Corporation [Ver = 6.14.11.6921 | Size = 188416 bytes | Modified Date = 5/12/2007 1:41:00 AM | Attr = ] nvmctray.dll -> %SystemRoot%\System32\nvmctray.dll -> NVIDIA Corporation [Ver = 6.14.11.6921 | Size = 81920 bytes | Modified Date = 5/12/2007 1:41:00 AM | Attr = ] nvmobls.dll -> %SystemRoot%\System32\nvmobls.dll -> NVIDIA Corporation [Ver = 6.14.11.6921 | Size = 1228800 bytes | Modified Date = 5/12/2007 1:41:00 AM | Attr = ] nvnt4cpl.dll -> %SystemRoot%\System32\nvnt4cpl.dll -> [Ver = | Size = 286720 bytes | Modified Date = 5/12/2007 1:41:00 AM | Attr = ] nvoglnt.dll -> %SystemRoot%\System32\nvoglnt.dll -> NVIDIA Corporation [Ver = 6.14.11.6921 | Size = 6901760 bytes | Modified Date = 5/12/2007 1:41:00 AM | Attr = ] nvshell.dll -> %SystemRoot%\System32\nvshell.dll -> [Ver = | Size = 466944 bytes | Modified Date = 5/12/2007 1:41:00 AM | Attr = ] nvsvc32.exe -> %SystemRoot%\System32\nvsvc32.exe -> NVIDIA Corporation [Ver = 6.14.11.6921 | Size = 155716 bytes | Modified Date = 5/12/2007 1:41:00 AM | Attr = ] nvtuicpl.cpl -> %SystemRoot%\System32\nvtuicpl.cpl -> [Ver = | Size = 73728 bytes | Modified Date = 5/12/2007 1:41:00 AM | Attr = ] nvudisp.exe -> %SystemRoot%\System32\nvudisp.exe -> NVIDIA Corporation [Ver = 1 , 1 , 1 , 0 | Size = 356352 bytes | Modified Date = 5/12/2007 1:41:00 AM | Attr = ] NVUNINST.EXE -> %SystemRoot%\System32\NVUNINST.EXE -> NVIDIA Corporation [Ver = 1 , 1 , 1 , 0 | Size = 356352 bytes | Modified Date = 5/12/2007 2:53:08 AM | Attr = ] nvvitvs.dll -> %SystemRoot%\System32\nvvitvs.dll -> NVIDIA Corporation [Ver = 6.14.11.6921 | Size = 3710976 bytes | Modified Date = 5/12/2007 1:41:00 AM | Attr = ] nvwddi.dll -> %SystemRoot%\System32\nvwddi.dll -> NVIDIA Corporation [Ver = 6.14.11.6921 | Size = 81920 bytes | Modified Date = 5/12/2007 1:41:00 AM | Attr = ] nvwdmcpl.dll -> %SystemRoot%\System32\nvwdmcpl.dll -> [Ver = | Size = 1703936 bytes | Modified Date = 5/12/2007 1:41:00 AM | Attr = ] nvwimg.dll -> %SystemRoot%\System32\nvwimg.dll -> [Ver = | Size = 1019904 bytes | Modified Date = 5/12/2007 1:41:00 AM | Attr = ] nvwss.dll -> %SystemRoot%\System32\nvwss.dll -> NVIDIA Corporation [Ver = 6.14.11.6921 | Size = 2498560 bytes | Modified Date = 5/12/2007 1:41:00 AM | Attr = ] nwc.cpl.manifest -> %SystemRoot%\System32\nwc.cpl.manifest -> [Ver = | Size = 749 bytes | Modified Date = 2/02/2008 11:55:09 AM | Attr = RH ] nwiz.exe -> %SystemRoot%\System32\nwiz.exe -> [Ver = | Size = 1626112 bytes | Modified Date = 5/12/2007 1:41:00 AM | Attr = ] oobe -> %SystemRoot%\System32\oobe -> [Folder | Created Date = 2/02/2008 9:35:42 PM | Attr = ] pbsvc.exe -> %SystemRoot%\System32\pbsvc.exe -> [Ver = | Size = 669184 bytes | Modified Date = 2/02/2008 4:03:56 PM | Attr = ] PerfStringBackup.INI -> %SystemRoot%\System32\PerfStringBackup.INI -> [Ver = | Size = 439552 bytes | Modified Date = 2/02/2008 5:49:24 PM | Attr = ] Pncrt.dll -> %SystemRoot%\System32\Pncrt.dll -> RealNetworks, Inc. [Ver = 4.20.0000 | Size = 273408 bytes | Modified Date = 8/03/1998 7:28:54 PM | Attr = ] PnkBstrA.exe -> %SystemRoot%\System32\PnkBstrA.exe -> [Ver = | Size = 66872 bytes | Modified Date = 2/02/2008 4:03:56 PM | Attr = ] PnkBstrB.exe -> %SystemRoot%\System32\PnkBstrB.exe -> [Ver = | Size = 107832 bytes | Modified Date = 20/02/2008 4:26:45 PM | Attr = ] PreInstall -> %SystemRoot%\System32\PreInstall -> [Folder | Created Date = 2/02/2008 1:22:49 PM | Attr = ] px.dll -> %SystemRoot%\System32\px.dll -> Sonic Solutions [Ver = 2.4.29.500 | Size = 372736 bytes | Modified Date = 17/02/2008 8:57:10 PM | Attr = ] pxdrv.dll -> %SystemRoot%\System32\pxdrv.dll -> Sonic Solutions [Ver = 1.01.47a | Size = 417792 bytes | Modified Date = 17/02/2008 8:57:10 PM | Attr = ] pxhpinst.exe -> %SystemRoot%\System32\pxhpinst.exe -> [Ver = | Size = 53248 bytes | Modified Date = 17/02/2008 8:57:10 PM | Attr = ] pxmas.dll -> %SystemRoot%\System32\pxmas.dll -> Sonic Solutions [Ver = 2.4.29.500 | Size = 172032 bytes | Modified Date = 17/02/2008 8:57:10 PM | Attr = ] pxwave.dll -> %SystemRoot%\System32\pxwave.dll -> Sonic Solutions [Ver = 2.4.29.500 | Size = 339968 bytes | Modified Date = 17/02/2008 8:57:10 PM | Attr = ] qt-dx331.dll -> %SystemRoot%\System32\qt-dx331.dll -> [Ver = | Size = 3596288 bytes | Modified Date = 29/11/2007 11:30:28 PM | Attr = ] QuickTime.qts -> %SystemRoot%\System32\QuickTime.qts -> Apple Inc. [Ver = 7.4 | Size = 57344 bytes | Modified Date = 10/01/2008 3:27:44 PM | Attr = ] QuickTimeVR.qtx -> %SystemRoot%\System32\QuickTimeVR.qtx -> Apple Inc. [Ver = 7.4 | Size = 90112 bytes | Modified Date = 10/01/2008 3:27:46 PM | Attr = ] ras -> %SystemRoot%\System32\ras -> [Folder | Created Date = 2/02/2008 9:35:42 PM | Attr = ] ReinstallBackups -> %SystemRoot%\System32\ReinstallBackups -> [Folder | Created Date = 2/02/2008 12:02:26 PM | Attr = ] Restore -> %SystemRoot%\System32\Restore -> [Folder | Created Date = 2/02/2008 11:54:11 AM | Attr = ] RTCOM -> %SystemRoot%\System32\RTCOM -> [Folder | Created Date = 2/02/2008 12:09:51 PM | Attr = ] RTSndMgr.cpl -> %SystemRoot%\System32\RTSndMgr.cpl -> Realtek Semiconductor Corp. [Ver = 1, 0, 0, 9 | Size = 282624 bytes | Modified Date = 18/08/2006 8:58:12 AM | Attr = R ] sapi.cpl.manifest -> %SystemRoot%\System32\sapi.cpl.manifest -> [Ver = | Size = 749 bytes | Modified Date = 2/02/2008 11:55:09 AM | Attr = RH ] scvhost -> %SystemRoot%\System32\scvhost -> [Ver = | Size = 43800 bytes | Modified Date = 25/02/2008 4:41:02 PM | Attr = ] Setup -> %SystemRoot%\System32\Setup -> [Folder | Created Date = 2/02/2008 9:35:42 PM | Attr = ] ShellExt -> %SystemRoot%\System32\ShellExt -> [Folder | Created Date = 2/02/2008 9:35:42 PM | Attr = ] shiftjis.uce -> %SystemRoot%\System32\shiftjis.uce -> [Ver = | Size = 16740 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] SoftwareDistribution -> %SystemRoot%\System32\SoftwareDistribution -> [Folder | Created Date = 2/02/2008 1:15:09 PM | Attr = ] spool -> %SystemRoot%\System32\spool -> [Folder | Created Date = 2/02/2008 9:35:42 PM | Attr = ] spxcoins.dll -> %SystemRoot%\System32\spxcoins.dll -> Perle Systems Ltd. [Ver = 1.0.0.0007 | Size = 24661 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] subrange.uce -> %SystemRoot%\System32\subrange.uce -> [Ver = | Size = 93702 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] TomsMoComp_ff.dll -> %SystemRoot%\System32\TomsMoComp_ff.dll -> [Ver = | Size = 262144 bytes | Modified Date = 12/10/2004 2:42:30 PM | Attr = ] tslabels.h -> %SystemRoot%\System32\tslabels.h -> [Ver = | Size = 3286 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] tslabels.ini -> %SystemRoot%\System32\tslabels.ini -> [Ver = | Size = 13223 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] TwnLib20.dll -> %SystemRoot%\System32\TwnLib20.dll -> Pegasus Software [Ver = 2.02.010 | Size = 106496 bytes | Modified Date = 26/06/2000 11:45:30 AM | Attr = ] TwnLib4.dll -> %SystemRoot%\System32\TwnLib4.dll -> Pegasus Imaging Corp. [Ver = 4.0.14.0 | Size = 364544 bytes | Modified Date = 9/07/2004 9:43:56 AM | Attr = ] unrar.dll -> %SystemRoot%\System32\unrar.dll -> [Ver = | Size = 164352 bytes | Modified Date = 4/09/2007 5:56:10 PM | Attr = ] URTTemp -> %SystemRoot%\System32\URTTemp -> [Folder | Created Date = 2/02/2008 4:05:10 PM | Attr = ] usmt -> %SystemRoot%\System32\usmt -> [Folder | Created Date = 2/02/2008 9:35:42 PM | Attr = ] usrlogon.cmd -> %SystemRoot%\System32\usrlogon.cmd -> [Ver = | Size = 1161 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] vxblock.dll -> %SystemRoot%\System32\vxblock.dll -> Sonic Solutions [Ver = 1.00.62a | Size = 28672 bytes | Modified Date = 17/02/2008 8:57:10 PM | Attr = ] wbem -> %SystemRoot%\System32\wbem -> [Folder | Created Date = 2/02/2008 9:35:42 PM | Attr = ] wbload.dll -> %SystemRoot%\System32\wbload.dll -> [Ver = | Size = 20480 bytes | Modified Date = 22/01/2005 6:05:48 PM | Attr = ] wbsys.dll -> %SystemRoot%\System32\wbsys.dll -> Stardock.Net, Inc [Ver = 4, 0, 0, 0 | Size = 36864 bytes | Modified Date = 26/02/2003 8:27:44 PM | Attr = ] WindowsLogon.manifest -> %SystemRoot%\System32\WindowsLogon.manifest -> [Ver = | Size = 488 bytes | Modified Date = 2/02/2008 11:55:13 AM | Attr = RH ] wins -> %SystemRoot%\System32\wins -> [Folder | Created Date = 2/02/2008 9:35:42 PM | Attr = ] wmimgmt.msc -> %SystemRoot%\System32\wmimgmt.msc -> [Ver = | Size = 63488 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] wpa.bak -> %SystemRoot%\System32\wpa.bak -> [Ver = | Size = 1316 bytes | Modified Date = 2/02/2008 5:22:42 PM | Attr = ] wuaucpl.cpl.manifest -> %SystemRoot%\System32\wuaucpl.cpl.manifest -> [Ver = | Size = 749 bytes | Modified Date = 2/02/2008 11:55:09 AM | Attr = RH ] xircom -> %SystemRoot%\System32\xircom -> [Folder | Created Date = 2/02/2008 11:56:11 AM | Attr = ] xvid.ax -> %SystemRoot%\System32\xvid.ax -> [Ver = | Size = 372736 bytes | Modified Date = 30/03/2003 8:08:00 PM | Attr = ] xvidcore.dll -> %SystemRoot%\System32\xvidcore.dll -> [Ver = | Size = 755027 bytes | Modified Date = 10/01/2008 1:15:30 PM | Attr = ] xvidvfw.dll -> %SystemRoot%\System32\xvidvfw.dll -> [Ver = | Size = 159839 bytes | Modified Date = 10/01/2008 1:16:20 PM | Attr = ] yv12vfw.dll -> %SystemRoot%\System32\yv12vfw.dll -> www.helixcommunity.org [Ver = R1.02 | Size = 217088 bytes | Modified Date = 25/01/2004 5:18:44 PM | Attr = ] $hf_mig$ -> %SystemRoot%\$hf_mig$ -> [Folder | Created Date = 2/02/2008 11:56:02 AM | Attr = H ] 4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> $MSI31Uninstall_KB893803v2$ -> %SystemRoot%\$MSI31Uninstall_KB893803v2$ -> [Folder | Created Date = 2/02/2008 1:22:40 PM | Attr = H ] $NtServicePackUninstallIDNMitigationAPIs$ -> %SystemRoot%\$NtServicePackUninstallIDNMitigationAPIs$ -> [Folder | Created Date = 2/02/2008 4:27:03 PM | Attr = H ] $NtServicePackUninstallNLSDownlevelMapping$ -> %SystemRoot%\$NtServicePackUninstallNLSDownlevelMapping$ -> [Folder | Created Date = 2/02/2008 4:26:54 PM | Attr = H ] addins -> %SystemRoot%\addins -> [Folder | Created Date = 2/02/2008 9:35:42 PM | Attr = ] Alcmtr.exe -> %SystemRoot%\Alcmtr.exe -> Realtek Semiconductor Corp. [Ver = 1.6.0.2 | Size = 69632 bytes | Modified Date = 3/05/2005 8:43:28 PM | Attr = R ] alcwzrd.exe -> %SystemRoot%\alcwzrd.exe -> RealTek Semicoductor Corp. [Ver = 1.1.0.36 | Size = 2808832 bytes | Modified Date = 4/05/2006 6:26:36 PM | Attr = R ] AppPatch -> %SystemRoot%\AppPatch -> [Folder | Created Date = 2/02/2008 9:35:42 PM | Attr = ] Ascd_log.ini -> %SystemRoot%\Ascd_log.ini -> [Ver = | Size = 14593 bytes | Modified Date = 2/02/2008 12:21:07 PM | Attr = ] Ascd_tmp.ini -> %SystemRoot%\Ascd_tmp.ini -> [Ver = | Size = 14277 bytes | Modified Date = 2/02/2008 12:01:00 PM | Attr = ] assembly -> %SystemRoot%\assembly -> [Folder | Created Date = 2/02/2008 4:05:11 PM | Attr = R S] ASUSInstAll -> %SystemRoot%\ASUSInstAll -> [Folder | Created Date = 2/02/2008 12:07:54 PM | Attr = ] Blue Lace 16.bmp -> %SystemRoot%\Blue Lace 16.bmp -> [Ver = | Size = 1272 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] bootstat.dat -> %SystemRoot%\bootstat.dat -> [Ver = | Size = 2048 bytes | Modified Date = 3/03/2008 8:07:25 AM | Attr = S] Coffee Bean.bmp -> %SystemRoot%\Coffee Bean.bmp -> [Ver = | Size = 17062 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] Config -> %SystemRoot%\Config -> [Folder | Created Date = 2/02/2008 9:35:42 PM | Attr = ] Connection Wizard -> %SystemRoot%\Connection Wizard -> [Folder | Created Date = 2/02/2008 9:35:42 PM | Attr = ] control.ini -> %SystemRoot%\control.ini -> [Ver = | Size = 0 bytes | Modified Date = 2/02/2008 11:55:52 AM | Attr = ] Cursors -> %SystemRoot%\Cursors -> [Folder | Created Date = 2/02/2008 9:35:42 PM | Attr = ] Debug -> %SystemRoot%\Debug -> [Folder | Created Date = 2/02/2008 9:35:42 PM | Attr = ] desktop.ini -> %SystemRoot%\desktop.ini -> [Ver = | Size = 2 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] Downloaded Installations -> %SystemRoot%\Downloaded Installations -> [Folder | Created Date = 2/02/2008 3:39:57 PM | Attr = ] Downloaded Program Files -> %SystemRoot%\Downloaded Program Files -> [Folder | Created Date = 2/02/2008 11:55:13 AM | Attr = S] Driver Cache -> %SystemRoot%\Driver Cache -> [Folder | Created Date = 2/02/2008 9:35:42 PM | Attr = ] ERDNT -> %SystemRoot%\ERDNT -> [Folder | Created Date = 3/03/2008 7:46:49 AM | Attr = ] FeatherTexture.bmp -> %SystemRoot%\FeatherTexture.bmp -> [Ver = | Size = 16730 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] Fonts -> %SystemRoot%\Fonts -> [Folder | Created Date = 2/02/2008 9:35:42 PM | Attr = R S] ftpcache -> %SystemRoot%\ftpcache -> [Folder | Created Date = 2/02/2008 3:02:24 PM | Attr = HS] game.ini -> %SystemRoot%\game.ini -> [Ver = | Size = 316 bytes | Modified Date = 2/02/2008 4:21:35 PM | Attr = ] Gone Fishing.bmp -> %SystemRoot%\Gone Fishing.bmp -> [Ver = | Size = 17336 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] Greenstone.bmp -> %SystemRoot%\Greenstone.bmp -> [Ver = | Size = 26582 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] Help -> %SystemRoot%\Help -> [Folder | Created Date = 2/02/2008 9:35:42 PM | Attr = ] HideWin.exe -> %SystemRoot%\HideWin.exe -> Realtek Semiconductor Corp. [Ver = 1.0.0.1 | Size = 315392 bytes | Modified Date = 2/02/2008 12:09:05 PM | Attr = ] ie7 -> %SystemRoot%\ie7 -> [Folder | Created Date = 3/02/2008 4:05:20 PM | Attr = H ] ie7updates -> %SystemRoot%\ie7updates -> [Folder | Created Date = 2/02/2008 4:28:08 PM | Attr = ] ime -> %SystemRoot%\ime -> [Folder | Created Date = 2/02/2008 9:35:42 PM | Attr = ] imsins.BAK -> %SystemRoot%\imsins.BAK -> [Ver = | Size = 1374 bytes | Modified Date = 17/02/2008 3:00:44 AM | Attr = ] inf -> %SystemRoot%\inf -> [Folder | Created Date = 2/02/2008 9:35:42 PM | Attr = H ] Installer -> %SystemRoot%\Installer -> [Folder | Created Date = 2/02/2008 9:44:34 PM | Attr = HS] java -> %SystemRoot%\java -> [Folder | Created Date = 2/02/2008 9:35:42 PM | Attr = ] Media -> %SystemRoot%\Media -> [Folder | Created Date = 2/02/2008 9:35:42 PM | Attr = ] MicCal.exe -> %SystemRoot%\MicCal.exe -> Realtek Semiconductor Corp. [Ver = 1.1.1.6 | Size = 2157568 bytes | Modified Date = 11/10/2006 7:42:58 PM | Attr = R ] Microsoft.NET -> %SystemRoot%\Microsoft.NET -> [Folder | Created Date = 2/02/2008 4:05:11 PM | Attr = ] msagent -> %SystemRoot%\msagent -> [Folder | Created Date = 2/02/2008 9:35:42 PM | Attr = ] msapps -> %SystemRoot%\msapps -> [Folder | Created Date = 2/02/2008 9:35:42 PM | Attr = ] mui -> %SystemRoot%\mui -> [Folder | Created Date = 2/02/2008 9:35:42 PM | Attr = ] NeroDigital.ini -> %SystemRoot%\NeroDigital.ini -> [Ver = | Size = 116 bytes | Modified Date = 28/02/2008 5:54:24 PM | Attr = ] network diagnostic -> %SystemRoot%\network diagnostic -> [Folder | Created Date = 2/02/2008 4:26:05 PM | Attr = ] nview -> %SystemRoot%\nview -> [Folder | Created Date = 2/02/2008 12:33:24 PM | Attr = ] ODBC.INI -> %SystemRoot%\ODBC.INI -> [Ver = | Size = 376 bytes | Modified Date = 26/02/2008 5:31:15 PM | Attr = ] ODBCINST.INI -> %SystemRoot%\ODBCINST.INI -> [Ver = | Size = 4161 bytes | Modified Date = 2/02/2008 11:55:42 AM | Attr = ] Offline Web Pages -> %SystemRoot%\Offline Web Pages -> [Folder | Created Date = 2/02/2008 11:55:13 AM | Attr = R ] pchealth -> %SystemRoot%\pchealth -> [Folder | Created Date = 2/02/2008 9:35:42 PM | Attr = ] PeerNet -> %SystemRoot%\PeerNet -> [Folder | Created Date = 2/02/2008 9:35:42 PM | Attr = ] Prairie Wind.bmp -> %SystemRoot%\Prairie Wind.bmp -> [Ver = | Size = 65954 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] Prefetch -> %SystemRoot%\Prefetch -> [Folder | Created Date = 2/02/2008 11:59:43 AM | Attr = ] Provisioning -> %SystemRoot%\Provisioning -> [Folder | Created Date = 2/02/2008 9:35:42 PM | Attr = ] pss -> %SystemRoot%\pss -> [Folder | Created Date = 2/02/2008 4:58:06 PM | Attr = ] QTFont.for -> %SystemRoot%\QTFont.for -> [Ver = | Size = 1409 bytes | Modified Date = 19/02/2008 9:22:59 PM | Attr = ] QTFont.qfn -> %SystemRoot%\QTFont.qfn -> [Ver = | Size = 54156 bytes | Modified Date = 28/02/2008 5:54:35 PM | Attr = H ] Registration -> %SystemRoot%\Registration -> [Folder | Created Date = 2/02/2008 11:53:46 AM | Attr = ] REGLOCS.OLD -> %SystemRoot%\REGLOCS.OLD -> [Ver = | Size = 8192 bytes | Modified Date = 2/02/2008 11:58:35 AM | Attr = ] repair -> %SystemRoot%\repair -> [Folder | Created Date = 2/02/2008 9:35:42 PM | Attr = ] Resources -> %SystemRoot%\Resources -> [Folder | Created Date = 2/02/2008 9:35:42 PM | Attr = ] Rhododendron.bmp -> %SystemRoot%\Rhododendron.bmp -> [Ver = | Size = 17362 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] River Sumida.bmp -> %SystemRoot%\River Sumida.bmp -> [Ver = | Size = 26680 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] RTHDCPL.exe -> %SystemRoot%\RTHDCPL.exe -> Realtek Semiconductor Corp. [Ver = 2.1.2.9 | Size = 16126464 bytes | Modified Date = 21/03/2007 4:49:20 PM | Attr = R ] RTLCPL.exe -> %SystemRoot%\RTLCPL.exe -> Realtek Semiconductor Corp. [Ver = 1.0.1.65 | Size = 9715200 bytes | Modified Date = 23/03/2007 9:19:10 PM | Attr = R ] RtlExUpd.dll -> %SystemRoot%\RtlExUpd.dll -> Realtek Semiconductor Corp. [Ver = 1, 0, 0, 7 | Size = 520192 bytes | Modified Date = 12/01/2007 6:54:44 PM | Attr = R ] RtlUpd.exe -> %SystemRoot%\RtlUpd.exe -> Realtek Semiconductor Corp. [Ver = 2, 7, 0, 6 | Size = 1191936 bytes | Modified Date = 16/01/2007 12:39:36 PM | Attr = R ] Santa Fe Stucco.bmp -> %SystemRoot%\Santa Fe Stucco.bmp -> [Ver = | Size = 65832 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] security -> %SystemRoot%\security -> [Folder | Created Date = 2/02/2008 9:35:42 PM | Attr = ] SHELLNEW -> %SystemRoot%\SHELLNEW -> [Folder | Created Date = 26/02/2008 5:30:03 PM | Attr = ] SkyTel.exe -> %SystemRoot%\SkyTel.exe -> Realtek Semiconductor Corp. [Ver = 2.0.1.7 | Size = 1822720 bytes | Modified Date = 16/03/2007 5:06:54 PM | Attr = R ] Soap Bubbles.bmp -> %SystemRoot%\Soap Bubbles.bmp -> [Ver = | Size = 65978 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] SoftwareDistribution -> %SystemRoot%\SoftwareDistribution -> [Folder | Created Date = 2/02/2008 11:59:44 AM | Attr = ] SoundMan.exe -> %SystemRoot%\SoundMan.exe -> Realtek Semiconductor Corp. [Ver = 1, 0, 0, 30 | Size = 86016 bytes | Modified Date = 21/07/2006 6:14:36 PM | Attr = R ] srchasst -> %SystemRoot%\srchasst -> [Folder | Created Date = 2/02/2008 11:54:24 AM | Attr = ] system -> %SystemRoot%\system -> [Folder | Created Date = 2/02/2008 9:35:42 PM | Attr = ] system32 -> %SystemRoot%\system32 -> [Folder | Created Date = 2/02/2008 9:35:42 PM | Attr = ] system32CmdLineExt.dll -> %SystemRoot%\system32CmdLineExt.dll -> Sony DADC Austria AG. [Ver = 1,0,201,0 | Size = 98304 bytes | Modified Date = 19/02/2008 9:29:21 PM | Attr = ] Tasks -> %SystemRoot%\Tasks -> [Folder | Created Date = 2/02/2008 11:54:28 AM | Attr = S] Temp -> %SystemRoot%\Temp -> [Folder | Created Date = 2/02/2008 9:35:42 PM | Attr = ] twain_32 -> %SystemRoot%\twain_32 -> [Folder | Created Date = 2/02/2008 9:35:42 PM | Attr = ] vb.ini -> %SystemRoot%\vb.ini -> [Ver = | Size = 36 bytes | Modified Date = 2/02/2008 11:53:50 AM | Attr = ] vbaddin.ini -> %SystemRoot%\vbaddin.ini -> [Ver = | Size = 37 bytes | Modified Date = 2/02/2008 11:53:50 AM | Attr = ] WB.ini -> %SystemRoot%\WB.ini -> [Ver = | Size = 0 bytes | Modified Date = 3/02/2008 6:30:48 PM | Attr = ] WBEM -> %SystemRoot%\WBEM -> [Folder | Created Date = 2/02/2008 4:28:01 PM | Attr = ] Web -> %SystemRoot%\Web -> [Folder | Created Date = 2/02/2008 9:35:42 PM | Attr = R ] WindowsShell.Manifest -> %SystemRoot%\WindowsShell.Manifest -> [Ver = | Size = 749 bytes | Modified Date = 2/02/2008 11:55:09 AM | Attr = RH ] winnt.bmp -> %SystemRoot%\winnt.bmp -> [Ver = | Size = 48680 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = HS] winnt256.bmp -> %SystemRoot%\winnt256.bmp -> [Ver = | Size = 48680 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = HS] WinSxS -> %SystemRoot%\WinSxS -> [Folder | Created Date = 2/02/2008 9:35:42 PM | Attr = ] WMSysPr9.prx -> %SystemRoot%\WMSysPr9.prx -> [Ver = | Size = 316640 bytes | Modified Date = 15/02/2008 4:20:20 PM | Attr = ] wmsysprx.prx -> %SystemRoot%\wmsysprx.prx -> [Ver = | Size = 299552 bytes | Modified Date = 24/02/2003 6:17:32 PM | Attr = ] Zapotec.bmp -> %SystemRoot%\Zapotec.bmp -> [Ver = | Size = 9522 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = ] AppleSoftwareUpdate.job -> %SystemRoot%\tasks\AppleSoftwareUpdate.job -> [Ver = | Size = 284 bytes | Modified Date = 14/02/2008 7:21:00 AM | Attr = ] desktop.ini -> %SystemRoot%\tasks\desktop.ini -> [Ver = | Size = 65 bytes | Modified Date = 28/02/2006 10:00:00 PM | Attr = RH ] SA.DAT -> %SystemRoot%\tasks\SA.DAT -> [Ver = | Size = 6 bytes | Modified Date = 3/03/2008 8:07:28 AM | Attr = H ] [Files Created - Additional Folder Scans - Non-Microsoft Only] Adobe -> %AllUsersProfile%\Application Data\Adobe -> [Folder | Created Date = 2/02/2008 4:10:27 PM | Attr = ] Adobe Systems -> %AllUsersProfile%\Application Data\Adobe Systems -> [Folder | Created Date = 17/02/2008 8:59:50 PM | Attr = ] Apple -> %AllUsersProfile%\Application Data\Apple -> [Folder | Created Date = 3/02/2008 4:26:09 PM | Attr = ] Apple Computer -> %AllUsersProfile%\Application Data\Apple Computer -> [Folder | Created Date = 3/02/2008 4:26:29 PM | Attr = ] avg7 -> %AllUsersProfile%\Application Data\avg7 -> [Folder | Created Date = 25/02/2008 4:35:41 PM | Attr = ] CanonBJ -> %AllUsersProfile%\Application Data\CanonBJ -> [Folder | Created Date = 5/02/2008 8:48:55 PM | Attr = H ] desktop.ini -> %AllUsersProfile%\Application Data\desktop.ini -> [Ver = | Size = 62 bytes | Modified Date = 2/02/2008 9:44:09 PM | Attr = HS] Google -> %AllUsersProfile%\Application Data\Google -> [Folder | Created Date = 3/02/2008 5:27:19 PM | Attr = ] Grisoft -> %AllUsersProfile%\Application Data\Grisoft -> [Folder | Created Date = 25/02/2008 4:35:41 PM | Attr = ] Lavasoft -> %AllUsersProfile%\Application Data\Lavasoft -> [Folder | Created Date = 26/02/2008 8:28:17 PM | Attr = ] LightScribe -> %AllUsersProfile%\Application Data\LightScribe -> [Folder | Created Date = 19/02/2008 8:20:54 PM | Attr = ] Macrovision -> %AllUsersProfile%\Application Data\Macrovision -> [Folder | Created Date = 2/02/2008 4:09:27 PM | Attr = ] Messenger Plus! -> %AllUsersProfile%\Application Data\Messenger Plus! -> [Folder | Created Date = 2/03/2008 8:11:16 PM | Attr = ] Microsoft -> %AllUsersProfile%\Application Data\Microsoft -> [Folder | Created Date = 2/02/2008 9:42:14 PM | Attr = S] SUPERAntiSpyware.com -> %AllUsersProfile%\Application Data\SUPERAntiSpyware.com -> [Folder | Created Date = 26/02/2008 9:11:25 PM | Attr = ] TEMP -> %AllUsersProfile%\Application Data\TEMP -> [Folder | Created Date = 2/02/2008 12:35:17 PM | Attr = ] @Alternate Data Stream - 122 bytes -> %AllUsersProfile%\Application Data\TEMP:229670E5 @Alternate Data Stream - 102 bytes -> %AllUsersProfile%\Application Data\TEMP:8C35AEA7 Windows Genuine Advantage -> %AllUsersProfile%\Application Data\Windows Genuine Advantage -> [Folder | Created Date = 11/02/2008 5:17:50 PM | Attr = ] WLInstaller -> %AllUsersProfile%\Application Data\WLInstaller -> [Folder | Created Date = 2/02/2008 5:00:33 PM | Attr = ] Acoustica -> %AppData%\Acoustica -> [Folder | Created Date = 19/02/2008 6:53:00 PM | Attr = ] Adobe -> %AppData%\Adobe -> [Folder | Created Date = 2/02/2008 4:10:17 PM | Attr = ] Apple Computer -> %AppData%\Apple Computer -> [Folder | Created Date = 3/02/2008 4:27:05 PM | Attr = ] AVG7 -> %AppData%\AVG7 -> [Folder | Created Date = 25/02/2008 4:36:10 PM | Attr = ] Canon -> %AppData%\Canon -> [Folder | Created Date = 20/02/2008 8:10:10 AM | Attr = ] CD-LabelPrint -> %AppData%\CD-LabelPrint -> [Folder | Created Date = 20/02/2008 8:10:18 AM | Attr = ] desktop.ini -> %AppData%\desktop.ini -> [Ver = | Size = 62 bytes | Modified Date = 2/02/2008 9:44:09 PM | Attr = HS] Google -> %AppData%\Google -> [Folder | Created Date = 3/02/2008 5:27:51 PM | Attr = ] Identities -> %AppData%\Identities -> [Folder | Created Date = 2/02/2008 12:00:00 PM | Attr = ] inst.exe -> %AppData%\inst.exe -> [Ver = | Size = 87608 bytes | Modified Date = 21/02/2008 9:33:12 PM | Attr = ] InstallShield Installation Information -> %AppData%\InstallShield Installation Information -> [Folder | Created Date = 2/02/2008 4:37:26 PM | Attr = ] Macromedia -> %AppData%\Macromedia -> [Folder | Created Date = 2/02/2008 3:02:26 PM | Attr = ] Media Player Classic -> %AppData%\Media Player Classic -> [Folder | Created Date = 15/02/2008 4:44:42 PM | Attr = ] Microsoft -> %AppData%\Microsoft -> [Folder | Created Date = 2/02/2008 11:59:48 AM | Attr = S] pcouffin.cat -> %AppData%\pcouffin.cat -> [Ver = | Size = 7887 bytes | Modified Date = 21/02/2008 9:33:12 PM | Attr = ] pcouffin.inf -> %AppData%\pcouffin.inf -> [Ver = | Size = 1144 bytes | Modified Date = 21/02/2008 9:33:12 PM | Attr = ] pcouffin.sys -> %AppData%\pcouffin.sys -> VSO Software [Ver = 1.37 | Size = 47360 bytes | Modified Date = 21/02/2008 9:33:12 PM | Attr = ] PnkBstrK.sys -> %AppData%\PnkBstrK.sys -> [Ver = | Size = 22328 bytes | Modified Date = 2/02/2008 4:04:31 PM | Attr = ] SecuROM -> %AppData%\SecuROM -> [Folder | Created Date = 2/02/2008 5:27:18 PM | Attr = RH ] SUPERAntiSpyware.com -> %AppData%\SUPERAntiSpyware.com -> [Folder | Created Date = 26/02/2008 9:11:15 PM | Attr = ] uTorrent -> %AppData%\uTorrent -> [Folder | Created Date = 15/02/2008 5:33:02 PM | Attr = ] Vso -> %AppData%\Vso -> [Folder | Created Date = 21/02/2008 9:33:12 PM | Attr = ] Adobe -> %UserProfile%\Local Settings\Application Data\Adobe -> [Folder | Created Date = 17/02/2008 9:24:52 PM | Attr = ] Ahead -> %UserProfile%\Local Settings\Application Data\Ahead -> [Folder | Created Date = 21/02/2008 6:47:45 PM | Attr = ] Apple -> %UserProfile%\Local Settings\Application Data\Apple -> [Folder | Created Date = 3/02/2008 4:26:23 PM | Attr = ] Apple Computer -> %UserProfile%\Local Settings\Application Data\Apple Computer -> [Folder | Created Date = 3/02/2008 4:25:52 PM | Attr = ] ApplicationHistory -> %UserProfile%\Local Settings\Application Data\ApplicationHistory -> [Folder | Created Date = 2/02/2008 5:41:49 PM | Attr = ] DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini -> %UserProfile%\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini -> [Ver = | Size = 11776 bytes | Modified Date = 25/02/2008 7:25:55 PM | Attr = ] GDIPFONTCACHEV1.DAT -> %UserProfile%\Local Settings\Application Data\GDIPFONTCACHEV1.DAT -> [Ver = | Size = 44816 bytes | Modified Date = 28/02/2008 5:54:44 PM | Attr = ] Google -> %UserProfile%\Local Settings\Application Data\Google -> [Folder | Created Date = 3/02/2008 5:27:51 PM | Attr = ] IconCache.db -> %UserProfile%\Local Settings\Application Data\IconCache.db -> [Ver = | Size = 4808892 bytes | Modified Date = 18/02/2008 8:16:09 AM | Attr = H ] id Software -> %UserProfile%\Local Settings\Application Data\id Software -> [Folder | Created Date = 2/02/2008 5:29:35 PM | Attr = ] Identities -> %UserProfile%\Local Settings\Application Data\Identities -> [Folder | Created Date = 3/02/2008 5:55:23 PM | Attr = ] Microsoft -> %UserProfile%\Local Settings\Application Data\Microsoft -> [Folder | Created Date = 2/02/2008 11:59:48 AM | Attr = ] Steam -> %UserProfile%\Local Settings\Application Data\Steam -> [Folder | Created Date = 2/02/2008 4:10:44 PM | Attr = ] Adobe PDF -> %AllUsersProfile%\Documents\Adobe PDF -> [Folder | Created Date = 17/02/2008 9:21:12 PM | Attr = ] desktop.ini -> %AllUsersProfile%\Documents\desktop.ini -> [Ver = | Size = 62 bytes | Modified Date = 2/02/2008 9:44:09 PM | Attr = HS] My Music -> %AllUsersProfile%\Documents\My Music -> [Folder | Created Date = 2/02/2008 11:53:30 AM | Attr = R ] My Pictures -> %AllUsersProfile%\Documents\My Pictures -> [Folder | Created Date = 2/02/2008 11:53:58 AM | Attr = R ] My Videos -> %AllUsersProfile%\Documents\My Videos -> [Folder | Created Date = 15/02/2008 4:24:18 PM | Attr = R ] Adobe -> %UserProfile%\My Documents\Adobe -> [Folder | Created Date = 17/02/2008 9:24:43 PM | Attr = ] Battlefield 2 -> %UserProfile%\My Documents\Battlefield 2 -> [Folder | Created Date = 29/02/2008 6:09:58 PM | Attr = ] ConvertXtoDVD -> %UserProfile%\My Documents\ConvertXtoDVD -> [Folder | Created Date = 21/02/2008 9:34:37 PM | Attr = ] desktop.ini -> %UserProfile%\My Documents\desktop.ini -> [Ver = | Size = 76 bytes | Modified Date = 3/02/2008 4:10:32 PM | Attr = HS] Downloads -> %UserProfile%\My Documents\Downloads -> [Folder | Created Date = 15/02/2008 7:01:18 PM | Attr = ] id Software -> %UserProfile%\My Documents\id Software -> [Folder | Created Date = 2/02/2008 5:29:45 PM | Attr = ] Image.nrg -> %UserProfile%\My Documents\Image.nrg -> [Ver = | Size = 2366341276 bytes | Modified Date = 21/02/2008 10:17:53 PM | Attr = ] My Games -> %UserProfile%\My Documents\My Games -> [Folder | Created Date = 2/02/2008 4:37:31 PM | Attr = ] My Music -> %UserProfile%\My Documents\My Music -> [Folder | Created Date = 18/02/2008 4:29:15 PM | Attr = R ] My Pictures -> %UserProfile%\My Documents\My Pictures -> [Folder | Created Date = 18/02/2008 5:21:10 PM | Attr = R ] My Received Files -> %UserProfile%\My Documents\My Received Files -> [Folder | Created Date = 21/02/2008 8:58:18 PM | Attr = ] My Sharing Folders.lnk -> %UserProfile%\My Documents\My Sharing Folders.lnk -> [Ver = | Size = 571 bytes | Modified Date = 2/03/2008 8:18:09 PM | Attr = ] My Videos -> %UserProfile%\My Documents\My Videos -> [Folder | Created Date = 18/02/2008 5:21:10 PM | Attr = R ] Sam Chalk.mpg -> %UserProfile%\My Documents\Sam Chalk.mpg -> [Ver = | Size = 553625600 bytes | Modified Date = 21/02/2008 8:19:46 PM | Attr = ] Sam Chalk.vob -> %UserProfile%\My Documents\Sam Chalk.vob -> [Ver = | Size = 1660813312 bytes | Modified Date = 21/02/2008 9:02:21 PM | Attr = ] TRADING HOURS.doc -> %UserProfile%\My Documents\TRADING HOURS.doc -> [Ver = | Size = 19968 bytes | Modified Date = 2/03/2008 9:44:34 PM | Attr = ] Applications.lnk -> %UserProfile%\Desktop\Applications.lnk -> [Ver = | Size = 1389 bytes | Modified Date = 3/02/2008 4:01:50 PM | Attr = ] ATF-Cleaner.exe -> %UserProfile%\Desktop\ATF-Cleaner.exe -> Atribune.org [Ver = 3.00.0002 | Size = 50688 bytes | Modified Date = 1/03/2008 6:22:13 PM | Attr = ] @Alternate Data Stream - 26 bytes -> %UserProfile%\Desktop\ATF-Cleaner.exe:Zone.Identifier Cracks - ISO's.lnk -> %UserProfile%\Desktop\Cracks - ISO's.lnk -> [Ver = | Size = 609 bytes | Modified Date = 7/02/2008 9:13:43 PM | Attr = ] DANIEL.lnk -> %UserProfile%\Desktop\DANIEL.lnk -> [Ver = | Size = 1304 bytes | Modified Date = 3/02/2008 1:07:20 PM | Attr = ] DR watson post mortem (I know its been covered) - Geeks to Go!.url -> %UserProfile%\Desktop\DR watson post mortem (I know its been covered) - Geeks to Go!.url -> [Ver = | Size = 2950 bytes | Modified Date = 3/03/2008 8:09:37 AM | Attr = ] @Alternate Data Stream - 1406 bytes -> %UserProfile%\Desktop\DR watson post mortem (I know its been covered) - Geeks to Go!.url:favicon dss.exe -> %UserProfile%\Desktop\dss.exe -> [Ver = 3, 2, 8, 1 | Size = 686630 bytes | Modified Date = 3/03/2008 7:46:15 AM | Attr = ] @Alternate Data Stream - 26 bytes -> %UserProfile%\Desktop\dss.exe:Zone.Identifier Games -> %UserProfile%\Desktop\Games -> [Folder | Created Date = 2/02/2008 3:40:10 PM | Attr = R ] WinPFind35u -> %UserProfile%\Desktop\WinPFind35u -> [Folder | Created Date = 3/03/2008 8:10:14 AM | Attr = ] WinPFind35u.exe -> %UserProfile%\Desktop\WinPFind35u.exe -> [Ver = | Size = 482000 bytes | Modified Date = 3/03/2008 8:10:00 AM | Attr = ] @Alternate Data Stream - 26 bytes -> %UserProfile%\Desktop\WinPFind35u.exe:Zone.Identifier desktop.ini -> %AllUsersProfile%\Start Menu\Programs\Startup\desktop.ini -> [Ver = | Size = 84 bytes | Modified Date = 2/02/2008 11:55:54 AM | Attr = HS] desktop.ini -> %UserProfile%\Start Menu\Programs\Startup\desktop.ini -> [Ver = | Size = 84 bytes | Modified Date = 2/02/2008 11:55:54 AM | Attr = HS] Adobe -> %CommonProgramFiles%\Adobe -> [Folder | Created Date = 2/02/2008 4:08:54 PM | Attr = ] Adobe Systems Shared -> %CommonProgramFiles%\Adobe Systems Shared -> [Folder | Created Date = 2/02/2008 4:09:26 PM | Attr = ] Ahead -> %CommonProgramFiles%\Ahead -> [Folder | Created Date = 11/02/2008 5:11:37 PM | Attr = ] Apple -> %CommonProgramFiles%\Apple -> [Folder | Created Date = 3/02/2008 4:26:09 PM | Attr = ] DESIGNER -> %CommonProgramFiles%\DESIGNER -> [Folder | Created Date = 26/02/2008 5:30:22 PM | Attr = ] InstallShield -> %CommonProgramFiles%\InstallShield -> [Folder | Created Date = 2/02/2008 12:09:02 PM | Attr = ] Java -> %CommonProgramFiles%\Java -> [Folder | Created Date = 20/02/2008 5:15:35 PM | Attr = ] LightScribe -> %CommonProgramFiles%\LightScribe -> [Folder | Created Date = 11/02/2008 5:12:27 PM | Attr = ] Microsoft Shared -> %CommonProgramFiles%\Microsoft Shared -> [Folder | Created Date = 2/02/2008 9:44:30 PM | Attr = ] MSSoap -> %CommonProgramFiles%\MSSoap -> [Folder | Created Date = 2/02/2008 11:54:27 AM | Attr = ] Nero -> %CommonProgramFiles%\Nero -> [Folder | Created Date = 11/02/2008 5:12:40 PM | Attr = ] ODBC -> %CommonProgramFiles%\ODBC -> [Folder | Created Date = 2/02/2008 9:44:33 PM | Attr = ] Services -> %CommonProgramFiles%\Services -> [Folder | Created Date = 2/02/2008 11:54:30 AM | Attr = ] SpeechEngines -> %CommonProgramFiles%\SpeechEngines -> [Folder | Created Date = 2/02/2008 9:44:31 PM | Attr = ] System -> %CommonProgramFiles%\System -> [Folder | Created Date = 2/02/2008 11:54:00 AM | Attr = ] WindowsLiveInstaller -> %CommonProgramFiles%\WindowsLiveInstaller -> [Folder | Created Date = 2/02/2008 5:00:45 PM | Attr = HS] Wise Installation Wizard -> %CommonProgramFiles%\Wise Installation Wizard -> [Folder | Created Date = 2/02/2008 4:28:57 PM | Attr = ] [Files/Folders - Modified Within 90 days] $VAULT$.AVG -> %SystemDrive%\$VAULT$.AVG -> [Folder | Modified Date = 28/02/2008 10:49:07 PM | Attr = RH ] 095251c9c742872e732a -> %SystemDrive%\095251c9c742872e732a -> [Folder | Modified Date = 15/02/2008 4:20:22 PM | Attr = ] boot.ini -> %SystemDrive%\boot.ini -> [Ver = | Size = 215 bytes | Modified Date = 29/02/2008 7:11:10 PM | Attr = HS] Deckard -> %SystemDrive%\Deckard -> [Folder | Modified Date = 3/03/2008 7:46:29 AM | Attr = ] Documents and Settings -> %SystemDrive%\Documents and Settings -> [Folder | Modified Date = 2/02/2008 11:59:48 AM | Attr = ] e776921f33af7c4e7c56b91f95e5d02a -> %SystemDrive%\e776921f33af7c4e7c56b91f95e5d02a -> [Folder | Modified Date = 15/02/2008 4:19:58 PM | Attr = ] Intel -> %SystemDrive%\Intel -> [Folder | Modified Date = 2/02/2008 12:02:13 PM | Attr = ] IO.SYS -> %SystemDrive%\IO.SYS -> [Ver = | Size = 0 bytes | Modified Date = 2/02/2008 11:55:52 AM | Attr = RHS] MSDOS.SYS -> %SystemDrive%\MSDOS.SYS -> [Ver = | Size = 0 bytes | Modified Date = 2/02/2008 11:55:52 AM | Attr = RHS] MSOCache -> %SystemDrive%\MSOCache -> [Folder | Modified Date = 26/02/2008 5:27:58 PM | Attr = RH ] NVIDIA -> %SystemDrive%\NVIDIA -> [Folder | Modified Date = 2/02/2008 12:33:07 PM | Attr = ] Program Files -> %ProgramFiles% -> [Folder | Modified Date = 2/03/2008 8:02:17 PM | Attr = R ] RECYCLER -> %SystemDrive%\RECYCLER -> [Folder | Modified Date = 2/02/2008 1:36:45 PM | Attr = HS] System Volume Information -> %SystemDrive%\System Volume Information -> [Folder | Modified Date = 2/02/2008 11:59:44 AM | Attr = HS] WINDOWS -> %SystemRoot% -> [Folder | Modified Date = 3/03/2008 7:46:49 AM | Attr = ] _OTMoveIt -> %SystemDrive%\_OTMoveIt -> [Folder | Modified Date = 1/03/2008 6:21:50 PM | Attr = ] nv4_disp.dll -> %SystemRoot%\System32\dllcache\nv4_disp.dll -> NVIDIA Corporation [Ver = 6.14.11.6921 | Size = 5773568 bytes | Modified Date = 5/12/2007 1:41:00 AM | Attr = ] nv4_mini.sys -> %SystemRoot%\System32\dllcache\nv4_mini.sys -> NVIDIA Corporation [Ver = 6.14.11.6921 | Size = 7435392 bytes | Modified Date = 5/12/2007 1:41:00 AM | Attr = ] avg7core.sys -> %SystemRoot%\System32\drivers\avg7core.sys -> GRISOFT, s.r.o. [Ver = 7.5.0.498 | Size = 821856 bytes | Modified Date = 25/02/2008 4:35:49 PM | Attr = ] avg7rsw.sys -> %SystemRoot%\System32\drivers\avg7rsw.sys -> GRISOFT, s.r.o. [Ver = 7,0,0,340 | Size = 4224 bytes | Modified Date = 25/02/2008 4:35:51 PM | Attr = ] avg7rsxp.sys -> %SystemRoot%\System32\drivers\avg7rsxp.sys -> GRISOFT, s.r.o. [Ver = 7.5.0.442 | Size = 27776 bytes | Modified Date = 25/02/2008 4:35:51 PM | Attr = ] avgclean.sys -> %SystemRoot%\System32\drivers\avgclean.sys -> GRISOFT, s.r.o. [Ver = 1.0.0.14 | Size = 10760 bytes | Modified Date = 25/02/2008 4:35:57 PM | Attr = ] avgmfx86.sys -> %SystemRoot%\System32\drivers\avgmfx86.sys -> GRISOFT, s.r.o. [Ver = 7.5.0.510 | Size = 26952 bytes | Modified Date = 25/02/2008 4:35:57 PM | Attr = ] disdn -> %SystemRoot%\System32\drivers\disdn -> [Folder | Modified Date = 2/02/2008 9:35:42 PM | Attr = ] etc -> %SystemRoot%\System32\drivers\etc -> [Folder | Modified Date = 2/02/2008 9:37:20 PM | Attr = ] INF -> %SystemRoot%\System32\drivers\INF -> [Folder | Modified Date = 2/02/2008 12:02:48 PM | Attr = ] oem0.inf -> %SystemRoot%\System32\drivers\INF\oem0.inf -> [Ver = | Size = 0 bytes | Modified Date = 2/02/2008 12:01:00 PM | Attr = H ] oem0.PNF -> %SystemRoot%\System32\drivers\INF\oem0.PNF -> [Ver = | Size = 0 bytes | Modified Date = 2/02/2008 12:01:00 PM | Attr = H ] oem1.inf -> %SystemRoot%\System32\drivers\INF\oem1.inf -> [Ver = | Size = 0 bytes | Modified Date = 2/02/2008 12:02:25 PM | Attr = H ] oem1.PNF -> %SystemRoot%\System32\drivers\INF\oem1.PNF -> [Ver = | Size = 0 bytes | Modified Date = 2/02/2008 12:02:25 PM | Attr = H ] oem2.inf -> %SystemRoot%\System32\drivers\INF\oem2.inf -> [Ver = | Size = 0 bytes | Modified Date = 2/02/2008 12:02:28 PM | Attr = H ] oem2.PNF -> %SystemRoot%\System32\drivers\INF\oem2.PNF -> [Ver = | Size = 0 bytes | Modified Date = 2/02/2008 12:02:28 PM | Attr = H ] oem3.inf -> %SystemRoot%\System32\drivers\INF\oem3.inf -> [Ver = | Size = 0 bytes | Modified Date = 2/02/2008 12:02:33 PM | Attr = H ] oem3.PNF -> %SystemRoot%\System32\drivers\INF\oem3.PNF -> [Ver = | Size = 0 bytes | Modified Date = 2/02/2008 12:02:33 PM | Attr = H ] oem4.inf -> %SystemRoot%\System32\drivers\INF\oem4.inf -> [Ver = | Size = 0 bytes | Modified Date = 2/02/2008 12:02:42 PM | Attr = H ] oem4.PNF -> %SystemRoot%\System32\drivers\INF\oem4.PNF -> [Ver = | Size = 0 bytes | Modified Date = 2/02/2008 12:02:42 PM | Attr = H ] oem5.inf -> %SystemRoot%\System32\drivers\INF\oem5.inf -> [Ver = | Size = 0 bytes | Modified Date = 2/02/2008 12:02:43 PM | Attr = H ] oem5.PNF -> %SystemRoot%\System32\drivers\INF\oem5.PNF -> [Ver = | Size = 0 bytes | Modified Date = 2/02/2008 12:02:43 PM | Attr = H ] nv4_mini.sys -> %SystemRoot%\System32\drivers\nv4_mini.sys -> NVIDIA Corporation [Ver = 6.14.11.6921 | Size = 7435392 bytes | Modified Date = 5/12/2007 1:41:00 AM | Attr = ] pcouffin.sys -> %SystemRoot%\System32\drivers\pcouffin.sys -> VSO Software [Ver = 1.37 | Size = 47360 bytes | Modified Date = 21/02/2008 9:33:12 PM | Attr = ] PnkBstrK.sys -> %SystemRoot%\System32\drivers\PnkBstrK.sys -> [Ver = | Size = 22328 bytes | Modified Date = 20/02/2008 4:26:52 PM | Attr = ] pxhelp20.sys -> %SystemRoot%\System32\drivers\pxhelp20.sys -> Sonic Solutions [Ver = 2.02.62a | Size = 20016 bytes | Modified Date = 17/02/2008 8:57:10 PM | Attr = ] system32 -> %SystemRoot%\System32\drivers\system32 -> [Folder | Modified Date = 2/02/2008 12:02:48 PM | Attr = ] DRIVERS -> %SystemRoot%\System32\drivers\system32\DRIVERS -> [Folder | Modified Date = 2/02/2008 12:02:48 PM | Attr = ] UMDF -> %SystemRoot%\System32\drivers\UMDF -> [Folder | Modified Date = 15/02/2008 4:20:17 PM | Attr = ] MsftWdf_user_01_00_00.Wdf -> %SystemRoot%\System32\drivers\UMDF\MsftWdf_user_01_00_00.Wdf -> [Ver = | Size = 0 bytes | Modified Date = 15/02/2008 4:19:58 PM | Attr = H ] $winnt$.inf -> %SystemRoot%\System32\$winnt$.inf -> [Ver = | Size = 261 bytes | Modified Date = 2/02/2008 11:57:36 AM | Attr = ] 1025 -> %SystemRoot%\System32\1025 -> [Folder | Modified Date = 2/02/2008 9:35:42 PM | Attr = ] 4 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> 1028 -> %SystemRoot%\System32\1028 -> [Folder | Modified Date = 2/02/2008 9:35:42 PM | Attr = ] 1031 -> %SystemRoot%\System32\1031 -> [Folder | Modified Date = 2/02/2008 9:35:42 PM | Attr = ] 1033 -> %SystemRoot%\System32\1033 -> [Folder | Modified Date = 2/02/2008 9:36:48 PM | Attr = ] 1037 -> %SystemRoot%\System32\1037 -> [Folder | Modified Date = 2/02/2008 9:35:42 PM | Attr = ] 1041 -> %SystemRoot%\System32\1041 -> [Folder | Modified Date = 2/02/2008 9:35:42 PM | Attr = ] 1042 -> %SystemRoot%\System32\1042 -> [Folder | Modified Date = 2/02/2008 9:35:42 PM | Attr = ] 1054 -> %SystemRoot%\System32\1054 -> [Folder | Modified Date = 2/02/2008 9:35:42 PM | Attr = ] 2052 -> %SystemRoot%\System32\2052 -> [Folder | Modified Date = 2/02/2008 9:35:42 PM | Attr = ] 3076 -> %SystemRoot%\System32\3076 -> [Folder | Modified Date = 2/02/2008 9:35:42 PM | Attr = ] 3com_dmi -> %SystemRoot%\System32\3com_dmi -> [Folder | Modified Date = 2/02/2008 9:35:42 PM | Attr = ] AGEIA -> %SystemRoot%\System32\AGEIA -> [Folder | Modified Date = 2/02/2008 4:29:03 PM | Attr = ] amcompat.tlb -> %SystemRoot%\System32\amcompat.tlb -> [Ver = | Size = 16832 bytes | Modified Date = 15/02/2008 4:20:46 PM | Attr = ] Attansic -> %SystemRoot%\System32\Attansic -> [Folder | Modified Date = 2/02/2008 12:11:38 PM | Attr = ] BuzzingBee.wav -> %SystemRoot%\System32\BuzzingBee.wav -> [Ver = | Size = 146650 bytes | Modified Date = 2/02/2008 12:11:17 PM | Attr = ] CanonIJ Uninstaller Information -> %SystemRoot%\System32\CanonIJ Uninstaller Information -> [Folder | Modified Date = 5/02/2008 8:48:51 PM | Attr = H ] CatRoot -> %SystemRoot%\System32\CatRoot -> [Folder | Modified Date = 17/02/2008 3:02:16 AM | Attr = ] CatRoot2 -> %SystemRoot%\System32\CatRoot2 -> [Folder | Modified Date = 3/03/2008 7:47:05 AM | Attr = ] cdplayer.exe.manifest -> %SystemRoot%\System32\cdplayer.exe.manifest -> [Ver = | Size = 749 bytes | Modified Date = 2/02/2008 11:55:09 AM | Attr = RH ] CmdLineExt.dll -> %SystemRoot%\System32\CmdLineExt.dll -> Sony DADC Austria AG. [Ver = 1,1,221,0 | Size = 107888 bytes | Modified Date = 2/02/2008 5:27:18 PM | Attr = ] CmdLineExt03.dll -> %SystemRoot%\System32\CmdLineExt03.dll -> [Ver = | Size = 43520 bytes | Modified Date = 20/02/2008 5:38:57 PM | Attr = ] Com -> %SystemRoot%\System32\Com -> [Folder | Modified Date = 2/02/2008 5:44:02 PM | Attr = ] config -> %SystemRoot%\System32\config -> [Folder | Modified Date = 2/02/2008 4:28:03 PM | Attr = ] CONFIG.NT -> %SystemRoot%\System32\CONFIG.NT -> [Ver = | Size = 2577 bytes | Modified Date = 2/02/2008 11:55:52 AM | Attr = ] d3d9caps.dat -> %SystemRoot%\System32\d3d9caps.dat -> [Ver = | Size = 664 bytes | Modified Date = 2/02/2008 12:36:06 PM | Attr = ] dhcp -> %SystemRoot%\System32\dhcp -> [Folder | Modified Date = 2/02/2008 9:35:42 PM | Attr = ] DirectX -> %SystemRoot%\System32\DirectX -> [Folder | Modified Date = 29/02/2008 6:10:27 PM | Attr = ] dllcache -> %SystemRoot%\System32\dllcache -> [Folder | Modified Date = 26/02/2008 8:16:57 PM | Attr = RHS] drivers -> %SystemRoot%\System32\drivers -> [Folder | Modified Date = 26/02/2008 8:28:17 PM | Attr = ] DRVSTORE -> %SystemRoot%\System32\DRVSTORE -> [Folder | Modified Date = 2/02/2008 4:29:10 PM | Attr = ] emptyregdb.dat -> %SystemRoot%\System32\emptyregdb.dat -> [Ver = | Size = 21640 bytes | Modified Date = 2/02/2008 11:53:57 AM | Attr = ] en-US -> %SystemRoot%\System32\en-US -> [Folder | Modified Date = 3/02/2008 4:06:32 PM | Attr = ] export -> %SystemRoot%\System32\export -> [Folder | Modified Date = 2/02/2008 9:35:42 PM | Attr = ] ff_vfw.dll -> %SystemRoot%\System32\ff_vfw.dll -> [Ver = | Size = 7680 bytes | Modified Date = 24/12/2007 1:49:52 PM | Attr = ] FNTCACHE.DAT -> %SystemRoot%\System32\FNTCACHE.DAT -> [Ver = | Size = 197752 bytes | Modified Date = 26/02/2008 6:55:55 PM | Attr = ] ias -> %SystemRoot%\System32\ias -> [Folder | Modified Date = 2/02/2008 9:36:52 PM | Attr = ] icsxml -> %SystemRoot%\System32\icsxml -> [Folder | Modified Date = 2/02/2008 9:37:15 PM | Attr = ] IME -> %SystemRoot%\System32\IME -> [Folder | Modified Date = 2/02/2008 9:35:42 PM | Attr = ] inetsrv -> %SystemRoot%\System32\inetsrv -> [Folder | Modified Date = 2/02/2008 9:35:42 PM | Attr = ] java.exe -> %SystemRoot%\System32\java.exe -> Sun Microsystems, Inc. [Ver = 6.0.40.12 | Size = 135168 bytes | Modified Date = 14/12/2007 12:57:22 AM | Attr = ] javacpl.cpl -> %SystemRoot%\System32\javacpl.cpl -> Sun Microsystems, Inc. [Ver = 6.0.40.12 | Size = 69632 bytes | Modified Date = 14/12/2007 1:59:16 AM | Attr = ] javaw.exe -> %SystemRoot%\System32\javaw.exe -> Sun Microsystems, Inc. [Ver = 6.0.40.12 | Size = 135168 bytes | Modified Date = 14/12/2007 12:57:24 AM | Attr = ] javaws.exe -> %SystemRoot%\System32\javaws.exe -> Sun Microsystems, Inc. [Ver = 6.0.40.12 | Size = 139264 bytes | Modified Date = 14/12/2007 1:59:16 AM | Attr = ] keystone.exe -> %SystemRoot%\System32\keystone.exe -> [Ver = | Size = 425984 bytes | Modified Date = 5/12/2007 1:41:00 AM | Attr = ] Lang -> %SystemRoot%\System32\Lang -> [Folder | Modified Date = 2/02/2008 12:11:16 PM | Attr = ] LogFiles -> %SystemRoot%\System32\LogFiles -> [Folder | Modified Date = 15/02/2008 4:19:56 PM | Attr = ] logonui.exe.manifest -> %SystemRoot%\System32\logonui.exe.manifest -> [Ver = | Size = 488 bytes | Modified Date = 2/02/2008 11:55:13 AM | Attr = RH ] LoopyMusic.wav -> %SystemRoot%\System32\LoopyMusic.wav -> [Ver = | Size = 940794 bytes | Modified Date = 2/02/2008 12:11:16 PM | Attr = ] lsdelete.exe -> %SystemRoot%\System32\lsdelete.exe -> [Ver = | Size = 12632 bytes | Modified Date = 14/12/2007 11:32:52 AM | Attr = ] Macromed -> %SystemRoot%\System32\Macromed -> [Folder | Modified Date = 3/02/2008 6:26:47 PM | Attr = ] Microsoft -> %SystemRoot%\System32\Microsoft -> [Folder | Modified Date = 2/02/2008 11:59:42 AM | Attr = S] MsDtc -> %SystemRoot%\System32\MsDtc -> [Folder | Modified Date = 2/02/2008 11:53:45 AM | Attr = ] mui -> %SystemRoot%\System32\mui -> [Folder | Modified Date = 2/02/2008 4:05:17 PM | Attr = ] ncpa.cpl.manifest -> %SystemRoot%\System32\ncpa.cpl.manifest -> [Ver = | Size = 749 bytes | Modified Date = 2/02/2008 11:55:09 AM | Attr = RH ] npp -> %SystemRoot%\System32\npp -> [Folder | Modified Date = 2/02/2008 9:40:11 PM | Attr = ] nscompat.tlb -> %SystemRoot%\System32\nscompat.tlb -> [Ver = | Size = 23392 bytes | Modified Date = 15/02/2008 4:20:46 PM | Attr = ] nv4_disp.dll -> %SystemRoot%\System32\nv4_disp.dll -> NVIDIA Corporation [Ver = 6.14.11.6921 | Size = 5773568 bytes | Modified Date = 5/12/2007 1:41:00 AM | Attr = ] nvapi.dll -> %SystemRoot%\System32\nvapi.dll -> NVIDIA Corporation [Ver = 6.14.11.6921 | Size = 385024 bytes | Modified Date = 5/12/2007 1:41:00 AM | Attr = ] nvappbar.exe -> %SystemRoot%\System32\nvappbar.exe -> [Ver = | Size = 442368 bytes | Modified Date = 5/12/2007 1:41:00 AM | Attr = ] nvapps.xml -> %SystemRoot%\System32\nvapps.xml -> [Ver = | Size = 163353 bytes | Modified Date = 2/02/2008 12:37:54 PM | Attr = ] nvcod.dll -> %SystemRoot%\System32\nvcod.dll -> NVIDIA Corporation [Ver = 1 , 0 , 0 , 35 | Size = 35328 bytes | Modified Date = 5/12/2007 1:41:00 AM | Attr = ] nvcodins.dll -> %SystemRoot%\System32\nvcodins.dll -> NVIDIA Corporation [Ver = 1 , 0 , 0 , 35 | Size = 35328 bytes | Modified Date = 5/12/2007 1:41:00 AM | Attr = ] nvcolor.exe -> %SystemRoot%\System32\nvcolor.exe -> NVIDIA Corporation [Ver = 6.14.11.6921 | Size = 147456 bytes | Modified Date = 5/12/2007 1:41:00 AM | Attr = ] nvcpl.cpl -> %SystemRoot%\System32\nvcpl.cpl -> NVIDIA Corporation [Ver = 1.5.30.38 | Size = 413696 bytes | Modified Date = 5/12/2007 1:41:00 AM | Attr = ] nvcpl.dll -> %SystemRoot%\System32\nvcpl.dll -> NVIDIA Corporation [Ver = 6.14.11.6921 | Size = 8523776 bytes | Modified Date = 5/12/2007 1:41:00 AM | Attr = ] nvcplui.exe -> %SystemRoot%\System32\nvcplui.exe -> NVIDIA Corporation [Ver = 1.5.30.38 | Size = 753664 bytes | Modified Date = 5/12/2007 1:41:00 AM | Attr = ] nvcuda.dll -> %SystemRoot%\System32\nvcuda.dll -> NVIDIA Corporation [Ver = 6.14.11.6921 | Size = 1089536 bytes | Modified Date = 5/12/2007 1:41:00 AM | Attr = ] nvdisp.nvu -> %SystemRoot%\System32\nvdisp.nvu -> [Ver = | Size = 17737 bytes | Modified Date = 5/12/2007 1:41:00 AM | Attr = ] nvdisps.dll -> %SystemRoot%\System32\nvdisps.dll -> NVIDIA Corporation [Ver = 6.14.11.6921 | Size = 6549504 bytes | Modified Date = 5/12/2007 1:41:00 AM | Attr = ] nvdspsch.exe -> %SystemRoot%\System32\nvdspsch.exe -> [Ver = | Size = 1339392 bytes | Modified Date = 5/12/2007 1:41:00 AM | Attr = ] nvexpbar.dll -> %SystemRoot%\System32\nvexpbar.dll -> NVIDIA Corporation [Ver = 1.5.30.38 | Size = 307200 bytes | Modified Date = 5/12/2007 1:41:00 AM | Attr = ] nvgames.dll -> %SystemRoot%\System32\nvgames.dll -> NVIDIA Corporation [Ver = 6.14.11.6921 | Size = 3420160 bytes | Modified Date = 5/12/2007 1:41:00 AM | Attr = ] nview.dll -> %SystemRoot%\System32\nview.dll -> [Ver = | Size = 1474560 bytes | Modified Date = 5/12/2007 1:41:00 AM | Attr = ] nvmccs.dll -> %SystemRoot%\System32\nvmccs.dll -> NVIDIA Corporation [Ver = 6.14.11.6921 | Size = 229376 bytes | Modified Date = 5/12/2007 1:41:00 AM | Attr = ] nvmccsrs.dll -> %SystemRoot%\System32\nvmccsrs.dll -> NVIDIA Corporation [Ver = 6.14.11.6921 | Size = 45056 bytes | Modified Date = 5/12/2007 1:41:00 AM | Attr = ] nvmccss.dll -> %SystemRoot%\System32\nvmccss.dll -> NVIDIA Corporation [Ver = 6.14.11.6921 | Size = 188416 bytes | Modified Date = 5/12/2007 1:41:00 AM | Attr = ] nvmctray.dll -> %SystemRoot%\System32\nvmctray.dll -> NVIDIA Corporation [Ver = 6.14.11.6921 | Size = 81920 bytes | Modified Date = 5/12/2007 1:41:00 AM | Attr = ] nvmobls.dll -> %SystemRoot%\System32\nvmobls.dll -> NVIDIA Corporation [Ver = 6.14.11.6921 | Size = 1228800 bytes | Modified Date = 5/12/2007 1:41:00 AM | Attr = ] nvnt4cpl.dll -> %SystemRoot%\System32\nvnt4cpl.dll -> [Ver = | Size = 286720 bytes | Modified Date = 5/12/2007 1:41:00 AM | Attr = ] nvoglnt.dll -> %SystemRoot%\System32\nvoglnt.dll -> NVIDIA Corporation [Ver = 6.14.11.6921 | Size = 6901760 bytes | Modified Date = 5/12/2007 1:41:00 AM | Attr = ] nvshell.dll -> %SystemRoot%\System32\nvshell.dll -> [Ver = | Size = 466944 bytes | Modified Date = 5/12/2007 1:41:00 AM | Attr = ] nvsvc32.exe -> %SystemRoot%\System32\nvsvc32.exe -> NVIDIA Corporation [Ver = 6.14.11.6921 | Size = 155716 bytes | Modified Date = 5/12/2007 1:41:00 AM | Attr = ] nvtuicpl.cpl -> %SystemRoot%\System32\nvtuicpl.cpl -> [Ver = | Size = 73728 bytes | Modified Date = 5/12/2007 1:41:00 AM | Attr = ] nvudisp.exe -> %SystemRoot%\System32\nvudisp.exe -> NVIDIA Corporation [Ver = 1 , 1 , 1 , 0 | Size = 356352 bytes | Modified Date = 5/12/2007 1:41:00 AM | Attr = ] NVUNINST.EXE -> %SystemRoot%\System32\NVUNINST.EXE -> NVIDIA Corporation [Ver = 1 , 1 , 1 , 0 | Size = 356352 bytes | Modified Date = 5/12/2007 2:53:08 AM | Attr = ] nvvitvs.dll -> %SystemRoot%\System32\nvvitvs.dll -> NVIDIA Corporation [Ver = 6.14.11.6921 | Size = 3710976 bytes | Modified Date = 5/12/2007 1:41:00 AM | Attr = ] nvwddi.dll -> %SystemRoot%\System32\nvwddi.dll -> NVIDIA Corporation [Ver = 6.14.11.6921 | Size = 81920 bytes | Modified Date = 5/12/2007 1:41:00 AM | Attr = ] nvwdmcpl.dll -> %SystemRoot%\System32\nvwdmcpl.dll -> [Ver = | Size = 1703936 bytes | Modified Date = 5/12/2007 1:41:00 AM | Attr = ] nvwimg.dll -> %SystemRoot%\System32\nvwimg.dll -> [Ver = | Size = 1019904 bytes | Modified Date = 5/12/2007 1:41:00 AM | Attr = ] nvwss.dll -> %SystemRoot%\System32\nvwss.dll -> NVIDIA Corporation [Ver = 6.14.11.6921 | Size = 2498560 bytes | Modified Date = 5/12/2007 1:41:00 AM | Attr = ] nwc.cpl.manifest -> %SystemRoot%\System32\nwc.cpl.manifest -> [Ver = | Size = 749 bytes | Modified Date = 2/02/2008 11:55:09 AM | Attr = RH ] nwiz.exe -> %SystemRoot%\System32\nwiz.exe -> [Ver = | Size = 1626112 bytes | Modified Date = 5/12/2007 1:41:00 AM | Attr = ] oobe -> %SystemRoot%\System32\oobe -> [Folder | Modified Date = 2/02/2008 11:54:46 AM | Attr = ] pbsvc.exe -> %SystemRoot%\System32\pbsvc.exe -> [Ver = | Size = 669184 bytes | Modified Date = 2/02/2008 4:03:56 PM | Attr = ] perfc009.dat -> %SystemRoot%\System32\perfc009.dat -> [Ver = | Size = 53220 bytes | Modified Date = 2/02/2008 5:49:24 PM | Attr = ] perfh009.dat -> %SystemRoot%\System32\perfh009.dat -> [Ver = | Size = 381124 bytes | Modified Date = 2/02/2008 5:49:24 PM | Attr = ] PerfStringBackup.INI -> %SystemRoot%\System32\PerfStringBackup.INI -> [Ver = | Size = 439552 bytes | Modified Date = 2/02/2008 5:49:24 PM | Attr = ] PnkBstrA.exe -> %SystemRoot%\System32\PnkBstrA.exe -> [Ver = | Size = 66872 bytes | Modified Date = 2/02/2008 4:03:56 PM | Attr = ] PnkBstrB.exe -> %SystemRoot%\System32\PnkBstrB.exe -> [Ver = | Size = 107832 bytes | Modified Date = 20/02/2008 4:26:45 PM | Attr = ] PreInstall -> %SystemRoot%\System32\PreInstall -> [Folder | Modified Date = 2/02/2008 1:22:49 PM | Attr = ] px.dll -> %SystemRoot%\System32\px.dll -> Sonic Solutions [Ver = 2.4.29.500 | Size = 372736 bytes | Modified Date = 17/02/2008 8:57:10 PM | Attr = ] pxdrv.dll -> %SystemRoot%\System32\pxdrv.dll -> Sonic Solutions [Ver = 1.01.47a | Size = 417792 bytes | Modified Date = 17/02/2008 8:57:10 PM | Attr = ] pxhpinst.exe -> %SystemRoot%\System32\pxhpinst.exe -> [Ver = | Size = 53248 bytes | Modified Date = 17/02/2008 8:57:10 PM | Attr = ] pxmas.dll -> %SystemRoot%\System32\pxmas.dll -> Sonic Solutions [Ver = 2.4.29.500 | Size = 172032 bytes | Modified Date = 17/02/2008 8:57:10 PM | Attr = ] pxwave.dll -> %SystemRoot%\System32\pxwave.dll -> Sonic Solutions [Ver = 2.4.29.500 | Size = 339968 bytes | Modified Date = 17/02/2008 8:57:10 PM | Attr = ] QuickTime.qts -> %SystemRoot%\System32\QuickTime.qts -> Apple Inc. [Ver = 7.4 | Size = 57344 bytes | Modified Date = 10/01/2008 3:27:44 PM | Attr = ] QuickTimeVR.qtx -> %SystemRoot%\System32\QuickTimeVR.qtx -> Apple Inc. [Ver = 7.4 | Size = 90112 bytes | Modified Date = 10/01/2008 3:27:46 PM | Attr = ] ras -> %SystemRoot%\System32\ras -> [Folder | Modified Date = 2/02/2008 9:37:31 PM | Attr = ] ReinstallBackups -> %SystemRoot%\System32\ReinstallBackups -> [Folder | Modified Date = 2/02/2008 3:40:04 PM | Attr = ] Restore -> %SystemRoot%\System32\Restore -> [Folder | Modified Date = 2/02/2008 11:59:44 AM | Attr = ] RTCOM -> %SystemRoot%\System32\RTCOM -> [Folder | Modified Date = 2/02/2008 12:21:04 PM | Attr = ] sapi.cpl.manifest -> %SystemRoot%\System32\sapi.cpl.manifest -> [Ver = | Size = 749 bytes | Modified Date = 2/02/2008 11:55:09 AM | Attr = RH ] scvhost -> %SystemRoot%\System32\scvhost -> [Ver = | Size = 43800 bytes | Modified Date = 25/02/2008 4:41:02 PM | Attr = ] Setup -> %SystemRoot%\System32\Setup -> [Folder | Modified Date = 2/02/2008 9:40:43 PM | Attr = ] ShellExt -> %SystemRoot%\System32\ShellExt -> [Folder | Modified Date = 2/02/2008 9:35:42 PM | Attr = ] SoftwareDistribution -> %SystemRoot%\System32\SoftwareDistribution -> [Folder | Modified Date = 2/02/2008 1:15:09 PM | Attr = ] spool -> %SystemRoot%\System32\spool -> [Folder | Modified Date = 2/02/2008 11:52:13 AM | Attr = ] URTTemp -> %SystemRoot%\System32\URTTemp -> [Folder | Modified Date = 2/02/2008 4:05:34 PM | Attr = ] usmt -> %SystemRoot%\System32\usmt -> [Folder | Modified Date = 2/02/2008 9:40:36 PM | Attr = ] vxblock.dll -> %SystemRoot%\System32\vxblock.dll -> Sonic Solutions [Ver = 1.00.62a | Size = 28672 bytes | Modified Date = 17/02/2008 8:57:10 PM | Attr = ] wbem -> %SystemRoot%\System32\wbem -> [Folder | Modified Date = 2/02/2008 11:56:11 AM | Attr = ] WindowsLogon.manifest -> %SystemRoot%\System32\WindowsLogon.manifest -> [Ver = | Size = 488 bytes | Modified Date = 2/02/2008 11:55:13 AM | Attr = RH ] wins -> %SystemRoot%\System32\wins -> [Folder | Modified Date = 2/02/2008 9:35:42 PM | Attr = ] wpa.bak -> %SystemRoot%\System32\wpa.bak -> [Ver = | Size = 1316 bytes | Modified Date = 2/02/2008 5:22:42 PM | Attr = ] wpa.dbl -> %SystemRoot%\System32\wpa.dbl -> [Ver = | Size = 1374 bytes | Modified Date = 2/03/2008 10:53:55 PM | Attr = ] wuaucpl.cpl.manifest -> %SystemRoot%\System32\wuaucpl.cpl.manifest -> [Ver = | Size = 749 bytes | Modified Date = 2/02/2008 11:55:09 AM | Attr = RH ] xircom -> %SystemRoot%\System32\xircom -> [Folder | Modified Date = 2/02/2008 11:56:11 AM | Attr = ] xvidcore.dll -> %SystemRoot%\System32\xvidcore.dll -> [Ver = | Size = 755027 bytes | Modified Date = 10/01/2008 1:15:30 PM | Attr = ] xvidvfw.dll -> %SystemRoot%\System32\xvidvfw.dll -> [Ver = | Size = 159839 bytes | Modified Date = 10/01/2008 1:16:20 PM | Attr = ] $hf_mig$ -> %SystemRoot%\$hf_mig$ -> [Folder | Modified Date = 13/02/2008 3:55:29 PM | Attr = H ] 4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> $MSI31Uninstall_KB893803v2$ -> %SystemRoot%\$MSI31Uninstall_KB893803v2$ -> [Folder | Modified Date = 2/02/2008 1:22:45 PM | Attr = H ] $NtServicePackUninstallIDNMitigationAPIs$ -> %SystemRoot%\$NtServicePackUninstallIDNMitigationAPIs$ -> [Folder | Modified Date = 2/02/2008 4:27:03 PM | Attr = H ] $NtServicePackUninstallNLSDownlevelMapping$ -> %SystemRoot%\$NtServicePackUninstallNLSDownlevelMapping$ -> [Folder | Modified Date = 2/02/2008 4:26:54 PM | Attr = H ] addins -> %SystemRoot%\addins -> [Folder | Modified Date = 2/02/2008 9:35:42 PM | Attr = ] AppPatch -> %SystemRoot%\AppPatch -> [Folder | Modified Date = 15/02/2008 4:23:35 PM | Attr = ] Ascd_log.ini -> %SystemRoot%\Ascd_log.ini -> [Ver = | Size = 14593 bytes | Modified Date = 2/02/2008 12:21:07 PM | Attr = ] Ascd_tmp.ini -> %SystemRoot%\Ascd_tmp.ini -> [Ver = | Size = 14277 bytes | Modified Date = 2/02/2008 12:01:00 PM | Attr = ] assembly -> %SystemRoot%\assembly -> [Folder | Modified Date = 2/02/2008 5:42:09 PM | Attr = R S] ASUSInstAll -> %SystemRoot%\ASUSInstAll -> [Folder | Modified Date = 2/02/2008 12:07:57 PM | Attr = ] bootstat.dat -> %SystemRoot%\bootstat.dat -> [Ver = | Size = 2048 bytes | Modified Date = 3/03/2008 8:07:25 AM | Attr = S] Config -> %SystemRoot%\Config -> [Folder | Modified Date = 2/02/2008 9:35:42 PM | Attr = ] Connection Wizard -> %SystemRoot%\Connection Wizard -> [Folder | Modified Date = 2/02/2008 9:35:42 PM | Attr = ] control.ini -> %SystemRoot%\control.ini -> [Ver = | Size = 0 bytes | Modified Date = 2/02/2008 11:55:52 AM | Attr = ] Cursors -> %SystemRoot%\Cursors -> [Folder | Modified Date = 2/02/2008 11:53:21 AM | Attr = ] Debug -> %SystemRoot%\Debug -> [Folder | Modified Date = 2/02/2008 9:41:59 PM | Attr = ] Downloaded Installations -> %SystemRoot%\Downloaded Installations -> [Folder | Modified Date = 26/02/2008 6:00:53 PM | Attr = ] Downloaded Program Files -> %SystemRoot%\Downloaded Program Files -> [Folder | Modified Date = 2/03/2008 11:20:56 AM | Attr = S] Driver Cache -> %SystemRoot%\Driver Cache -> [Folder | Modified Date = 2/02/2008 9:35:42 PM | Attr = ] ERDNT -> %SystemRoot%\ERDNT -> [Folder | Modified Date = 3/03/2008 7:46:49 AM | Attr = ] Fonts -> %SystemRoot%\Fonts -> [Folder | Modified Date = 26/02/2008 6:12:42 PM | Attr = R S] ftpcache -> %SystemRoot%\ftpcache -> [Folder | Modified Date = 2/02/2008 3:02:24 PM | Attr = HS] game.ini -> %SystemRoot%\game.ini -> [Ver = | Size = 316 bytes | Modified Date = 2/02/2008 4:21:35 PM | Attr = ] Help -> %SystemRoot%\Help -> [Folder | Modified Date = 15/02/2008 4:20:40 PM | Attr = ] HideWin.exe -> %SystemRoot%\HideWin.exe -> Realtek Semiconductor Corp. [Ver = 1.0.0.1 | Size = 315392 bytes | Modified Date = 2/02/2008 12:09:05 PM | Attr = ] ie7 -> %SystemRoot%\ie7 -> [Folder | Modified Date = 3/02/2008 4:05:51 PM | Attr = H ] ie7updates -> %SystemRoot%\ie7updates -> [Folder | Modified Date = 3/02/2008 1:03:35 PM | Attr = ] ime -> %SystemRoot%\ime -> [Folder | Modified Date = 2/02/2008 11:56:11 AM | Attr = ] imsins.BAK -> %SystemRoot%\imsins.BAK -> [Ver = | Size = 1374 bytes | Modified Date = 17/02/2008 3:00:44 AM | Attr = ] inf -> %SystemRoot%\inf -> [Folder | Modified Date = 26/02/2008 5:57:45 PM | Attr = H ] Installer -> %SystemRoot%\Installer -> [Folder | Modified Date = 27/02/2008 8:04:39 AM | Attr = HS] java -> %SystemRoot%\java -> [Folder | Modified Date = 2/02/2008 9:35:42 PM | Attr = ] Media -> %SystemRoot%\Media -> [Folder | Modified Date = 8/02/2008 4:07:31 PM | Attr = ] Microsoft.NET -> %SystemRoot%\Microsoft.NET -> [Folder | Modified Date = 2/02/2008 5:08:19 PM | Attr = ] msagent -> %SystemRoot%\msagent -> [Folder | Modified Date = 2/02/2008 5:47:49 PM | Attr = ] msapps -> %SystemRoot%\msapps -> [Folder | Modified Date = 2/02/2008 9:35:42 PM | Attr = ] mui -> %SystemRoot%\mui -> [Folder | Modified Date = 2/02/2008 9:35:42 PM | Attr = ] NeroDigital.ini -> %SystemRoot%\NeroDigital.ini -> [Ver = | Size = 116 bytes | Modified Date = 28/02/2008 5:54:24 PM | Attr = ] network diagnostic -> %SystemRoot%\network diagnostic -> [Folder | Modified Date = 2/02/2008 4:26:05 PM | Attr = ] nview -> %SystemRoot%\nview -> [Folder | Modified Date = 2/02/2008 12:33:24 PM | Attr = ] ODBC.INI -> %SystemRoot%\ODBC.INI -> [Ver = | Size = 376 bytes | Modified Date = 26/02/2008 5:31:15 PM | Attr = ] ODBCINST.INI -> %SystemRoot%\ODBCINST.INI -> [Ver = | Size = 4161 bytes | Modified Date = 2/02/2008 11:55:42 AM | Attr = ] Offline Web Pages -> %SystemRoot%\Offline Web Pages -> [Folder | Modified Date = 2/02/2008 11:55:13 AM | Attr = R ] pchealth -> %SystemRoot%\pchealth -> [Folder | Modified Date = 2/02/2008 11:54:14 AM | Attr = ] PeerNet -> %SystemRoot%\PeerNet -> [Folder | Modified Date = 2/02/2008 9:40:20 PM | Attr = ] Prefetch -> %SystemRoot%\Prefetch -> [Folder | Modified Date = 3/03/2008 8:11:39 AM | Attr = ] Provisioning -> %SystemRoot%\Provisioning -> [Folder | Modified Date = 2/02/2008 9:35:42 PM | Attr = ] pss -> %SystemRoot%\pss -> [Folder | Modified Date = 18/02/2008 10:04:17 PM | Attr = ] QTFont.for -> %SystemRoot%\QTFont.for -> [Ver = | Size = 1409 bytes | Modified Date = 19/02/2008 9:22:59 PM | Attr = ] QTFont.qfn -> %SystemRoot%\QTFont.qfn -> [Ver = | Size = 54156 bytes | Modified Date = 28/02/2008 5:54:35 PM | Attr = H ] Registration -> %SystemRoot%\Registration -> [Folder | Modified Date = 2/02/2008 5:42:45 PM | Attr = ] REGLOCS.OLD -> %SystemRoot%\REGLOCS.OLD -> [Ver = | Size = 8192 bytes | Modified Date = 2/02/2008 11:58:35 AM | Attr = ] repair -> %SystemRoot%\repair -> [Folder | Modified Date = 2/02/2008 9:35:42 PM | Attr = ] Resources -> %SystemRoot%\Resources -> [Folder | Modified Date = 2/02/2008 9:35:42 PM | Attr = ] security -> %SystemRoot%\security -> [Folder | Modified Date = 2/02/2008 12:08:03 PM | Attr = ] SHELLNEW -> %SystemRoot%\SHELLNEW -> [Folder | Modified Date = 26/02/2008 5:30:47 PM | Attr = ] SoftwareDistribution -> %SystemRoot%\SoftwareDistribution -> [Folder | Modified Date = 15/02/2008 4:07:00 PM | Attr = ] srchasst -> %SystemRoot%\srchasst -> [Folder | Modified Date = 2/02/2008 11:54:59 AM | Attr = ] system -> %SystemRoot%\system -> [Folder | Modified Date = 26/02/2008 5:28:03 PM | Attr = ] system.ini -> %SystemRoot%\system.ini -> [Ver = | Size = 227 bytes | Modified Date = 26/02/2008 6:03:33 PM | Attr = ] system32 -> %SystemRoot%\system32 -> [Folder | Modified Date = 2/03/2008 11:20:55 AM | Attr = ] system32CmdLineExt.dll -> %SystemRoot%\system32CmdLineExt.dll -> Sony DADC Austria AG. [Ver = 1,0,201,0 | Size = 98304 bytes | Modified Date = 19/02/2008 9:29:21 PM | Attr = ] Tasks -> %SystemRoot%\Tasks -> [Folder | Modified Date = 3/02/2008 4:26:23 PM | Attr = S] Temp -> %SystemRoot%\Temp -> [Folder | Modified Date = 3/03/2008 8:07:38 AM | Attr = ] twain_32 -> %SystemRoot%\twain_32 -> [Folder | Modified Date = 2/02/2008 9:37:48 PM | Attr = ] vb.ini -> %SystemRoot%\vb.ini -> [Ver = | Size = 36 bytes | Modified Date = 2/02/2008 11:53:50 AM | Attr = ] vbaddin.ini -> %SystemRoot%\vbaddin.ini -> [Ver = | Size = 37 bytes | Modified Date = 2/02/2008 11:53:50 AM | Attr = ] WB.ini -> %SystemRoot%\WB.ini -> [Ver = | Size = 0 bytes | Modified Date = 3/02/2008 6:30:48 PM | Attr = ] WBEM -> %SystemRoot%\WBEM -> [Folder | Modified Date = 3/02/2008 4:06:03 PM | Attr = ] Web -> %SystemRoot%\Web -> [Folder | Modified Date = 2/02/2008 11:55:15 AM | Attr = R ] win.ini -> %SystemRoot%\win.ini -> [Ver = | Size = 603 bytes | Modified Date = 27/02/2008 8:04:07 AM | Attr = ] WindowsShell.Manifest -> %SystemRoot%\WindowsShell.Manifest -> [Ver = | Size = 749 bytes | Modified Date = 2/02/2008 11:55:09 AM | Attr = RH ] WinSxS -> %SystemRoot%\WinSxS -> [Folder | Modified Date = 18/02/2008 8:15:56 AM | Attr = ] WMSysPr9.prx -> %SystemRoot%\WMSysPr9.prx -> [Ver = | Size = 316640 bytes | Modified Date = 15/02/2008 4:20:20 PM | Attr = ] AppleSoftwareUpdate.job -> %SystemRoot%\tasks\AppleSoftwareUpdate.job -> [Ver = | Size = 284 bytes | Modified Date = 14/02/2008 7:21:00 AM | Attr = ] SA.DAT -> %SystemRoot%\tasks\SA.DAT -> [Ver = | Size = 6 bytes | Modified Date = 3/03/2008 8:07:28 AM | Attr = H ] qmgr0.dat -> C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat -> [Ver = | Size = 4617 bytes | Modified Date = 27/02/2008 7:40:34 AM | Attr = ] qmgr1.dat -> C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat -> [Ver = | Size = 4232 bytes | Modified Date = 27/02/2008 7:40:35 AM | Attr = ] opa11.dat -> C:\Documents and Settings\All Users\Application Data\Microsoft\OFFICE\DATA\opa11.dat -> [Ver = | Size = 11078 bytes | Modified Date = 26/02/2008 5:49:24 PM | Attr = ] _is4.exe -> C:\Documents and Settings\Owner\Local Settings\Temp\_is4.exe -> Macrovision Corporation [Ver = 12.0.49974 | Size = 455600 bytes | Modified Date = 25/05/2006 3:10:42 AM | Attr = R ] 30 C:\Documents and Settings\Owner\Local Settings\Temp\*.tmp files -> C:\Documents and Settings\Owner\Local Settings\Temp\*.tmp -> SetupUT3.exe -> C:\Documents and Settings\Owner\Local Settings\Temp\{5038BA3E-1A58-452C-8031-3C23023F8180}\SetupUT3.exe -> Epic Games [Ver = 1.00.000 | Size = 343696 bytes | Modified Date = 24/10/2007 9:47:25 PM | Attr = R ] dxsetup.exe -> C:\Documents and Settings\Owner\Local Settings\Temp\{82B83422-CA5C-4136-9E69-420CDBC18A25}\{04858915-9F49-4B2A-AED4-DC49A7DE6A7B}\dxsetup.exe -> Microsoft Corporation [Ver = 4.9.0.0904 | Size = 480976 bytes | Modified Date = 21/04/2005 10:43:22 AM | Attr = ] dxsetup.exe -> C:\Documents and Settings\Owner\Local Settings\Temp\{8A0A5971-3992-428B-97E3-0EBC283BE543}\{50D4CB89-AF34-4978-96DC-C3034062E901}\dxsetup.exe -> Microsoft Corporation [Ver = 4.9.0.0904 | Size = 480976 bytes | Modified Date = 26/10/2005 9:22:20 PM | Attr = ] SetupUT3.exe -> C:\Documents and Settings\Owner\Local Settings\Temp\{DAF0AC74-03DE-4B22-BE53-D873402CC0E6}\SetupUT3.exe -> Epic Games [Ver = 1.00.000 | Size = 343696 bytes | Modified Date = 24/10/2007 9:47:25 PM | Attr = R ] md5deep.exe -> C:\Documents and Settings\Owner\Local Settings\Temp\~czejdxo.tmp\md5deep.exe -> [Ver = | Size = 21504 bytes | Modified Date = 30/07/2007 12:23:07 PM | Attr = ] sed.exe -> C:\Documents and Settings\Owner\Local Settings\Temp\~czejdxo.tmp\sed.exe -> [Ver = | Size = 37376 bytes | Modified Date = 30/07/2007 12:23:07 PM | Attr = ] swreg.exe -> C:\Documents and Settings\Owner\Local Settings\Temp\~czejdxo.tmp\swreg.exe -> SteelWerX [Ver = 2.0.2.0 | Size = 119296 bytes | Modified Date = 30/07/2007 12:23:07 PM | Attr = ] md5deep.exe -> C:\Documents and Settings\Owner\Local Settings\Temp\~lkcgcen.tmp\md5deep.exe -> [Ver = | Size = 21504 bytes | Modified Date = 30/07/2007 12:23:07 PM | Attr = ] sed.exe -> C:\Documents and Settings\Owner\Local Settings\Temp\~lkcgcen.tmp\sed.exe -> [Ver = | Size = 37376 bytes | Modified Date = 30/07/2007 12:23:07 PM | Attr = ] swreg.exe -> C:\Documents and Settings\Owner\Local Settings\Temp\~lkcgcen.tmp\swreg.exe -> SteelWerX [Ver = 2.0.2.0 | Size = 119296 bytes | Modified Date = 30/07/2007 12:23:07 PM | Attr = ] md5deep.exe -> C:\Documents and Settings\Owner\Local Settings\Temp\~tpcpzio.tmp\md5deep.exe -> [Ver = | Size = 21504 bytes | Modified Date = 30/07/2007 12:23:07 PM | Attr = ] sed.exe -> C:\Documents and Settings\Owner\Local Settings\Temp\~tpcpzio.tmp\sed.exe -> [Ver = | Size = 37376 bytes | Modified Date = 30/07/2007 12:23:07 PM | Attr = ] swreg.exe -> C:\Documents and Settings\Owner\Local Settings\Temp\~tpcpzio.tmp\swreg.exe -> SteelWerX [Ver = 2.0.2.0 | Size = 119296 bytes | Modified Date = 30/07/2007 12:23:07 PM | Attr = ] DSETUP.dll -> C:\Documents and Settings\Owner\Local Settings\Temp\{82B83422-CA5C-4136-9E69-420CDBC18A25}\{04858915-9F49-4B2A-AED4-DC49A7DE6A7B}\DSETUP.dll -> Microsoft Corporation [Ver = 4.9.0.0904 | Size = 72400 bytes | Modified Date = 21/04/2005 10:43:20 AM | Attr = ] dsetup32.dll -> C:\Documents and Settings\Owner\Local Settings\Temp\{82B83422-CA5C-4136-9E69-420CDBC18A25}\{04858915-9F49-4B2A-AED4-DC49A7DE6A7B}\dsetup32.dll -> Microsoft Corporation [Ver = 4.9.0.0904 | Size = 2245328 bytes | Modified Date = 21/04/2005 10:43:20 AM | Attr = ] DSETUP.dll -> C:\Documents and Settings\Owner\Local Settings\Temp\{8A0A5971-3992-428B-97E3-0EBC283BE543}\{50D4CB89-AF34-4978-96DC-C3034062E901}\DSETUP.dll -> Microsoft Corporation [Ver = 4.9.0.0904 | Size = 72400 bytes | Modified Date = 26/10/2005 9:22:18 PM | Attr = ] dsetup32.dll -> C:\Documents and Settings\Owner\Local Settings\Temp\{8A0A5971-3992-428B-97E3-0EBC283BE543}\{50D4CB89-AF34-4978-96DC-C3034062E901}\dsetup32.dll -> Microsoft Corporation [Ver = 4.9.0.0904 | Size = 2245328 bytes | Modified Date = 26/10/2005 9:22:18 PM | Attr = ] ISSetup.dll -> C:\Documents and Settings\Owner\Local Settings\Temp\{8C44F0DE-BB08-41A8-81D6-86A84C2F3CC9}\ISSetup.dll -> Macrovision Corporation [Ver = 12.0.49974 | Size = 552214 bytes | Modified Date = 2/12/2006 5:21:18 AM | Attr = R ] _Setup.dll -> C:\Documents and Settings\Owner\Local Settings\Temp\{8C44F0DE-BB08-41A8-81D6-86A84C2F3CC9}\_Setup.dll -> Macrovision Corporation [Ver = 12.0.49974 | Size = 373680 bytes | Modified Date = 18/05/2006 2:21:08 AM | Attr = R ] dss.dll -> C:\Documents and Settings\Owner\Local Settings\Temp\~czejdxo.tmp\dss.dll -> [Ver = | Size = 37888 bytes | Modified Date = 14/10/2007 4:42:28 PM | Attr = ] dss.dll -> C:\Documents and Settings\Owner\Local Settings\Temp\~lkcgcen.tmp\dss.dll -> [Ver = | Size = 37888 bytes | Modified Date = 14/10/2007 4:42:28 PM | Attr = ] dss.dll -> C:\Documents and Settings\Owner\Local Settings\Temp\~tpcpzio.tmp\dss.dll -> [Ver = | Size = 37888 bytes | Modified Date = 14/10/2007 4:42:28 PM | Attr = ] _ISMSIDEL.INI -> C:\Documents and Settings\Owner\Local Settings\Temp\{DAF0AC74-03DE-4B22-BE53-D873402CC0E6}\_ISMSIDEL.INI -> [Ver = | Size = 109 bytes | Modified Date = 2/02/2008 4:38:07 PM | Attr = ] [Files Modified - Additional Folder Scans - Non-Microsoft Only] Adobe -> %AllUsersProfile%\Application Data\Adobe -> [Folder | Modified Date = 2/03/2008 2:05:22 PM | Attr = ] Adobe Systems -> %AllUsersProfile%\Application Data\Adobe Systems -> [Folder | Modified Date = 17/02/2008 8:59:50 PM | Attr = ] Apple -> %AllUsersProfile%\Application Data\Apple -> [Folder | Modified Date = 3/02/2008 4:26:09 PM | Attr = ] Apple Computer -> %AllUsersProfile%\Application Data\Apple Computer -> [Folder | Modified Date = 3/02/2008 4:26:54 PM | Attr = ] avg7 -> %AllUsersProfile%\Application Data\avg7 -> [Folder | Modified Date = 25/02/2008 4:37:45 PM | Attr = ] CanonBJ -> %AllUsersProfile%\Application Data\CanonBJ -> [Folder | Modified Date = 5/02/2008 8:48:55 PM | Attr = H ] desktop.ini -> %AllUsersProfile%\Application Data\desktop.ini -> [Ver = | Size = 62 bytes | Modified Date = 2/02/2008 9:44:09 PM | Attr = HS] Google -> %AllUsersProfile%\Application Data\Google -> [Folder | Modified Date = 3/02/2008 5:27:19 PM | Attr = ] Grisoft -> %AllUsersProfile%\Application Data\Grisoft -> [Folder | Modified Date = 25/02/2008 4:35:41 PM | Attr = ] Lavasoft -> %AllUsersProfile%\Application Data\Lavasoft -> [Folder | Modified Date = 26/02/2008 8:29:50 PM | Attr = ] LightScribe -> %AllUsersProfile%\Application Data\LightScribe -> [Folder | Modified Date = 19/02/2008 8:20:54 PM | Attr = ] Macrovision -> %AllUsersProfile%\Application Data\Macrovision -> [Folder | Modified Date = 2/02/2008 4:09:27 PM | Attr = ] Messenger Plus! -> %AllUsersProfile%\Application Data\Messenger Plus! -> [Folder | Modified Date = 2/03/2008 8:11:16 PM | Attr = ] Microsoft -> %AllUsersProfile%\Application Data\Microsoft -> [Folder | Modified Date = 26/02/2008 5:29:16 PM | Attr = S] SUPERAntiSpyware.com -> %AllUsersProfile%\Application Data\SUPERAntiSpyware.com -> [Folder | Modified Date = 26/02/2008 9:11:25 PM | Attr = ] TEMP -> %AllUsersProfile%\Application Data\TEMP -> [Folder | Modified Date = 25/02/2008 4:13:28 PM | Attr = ] @Alternate Data Stream - 122 bytes -> %AllUsersProfile%\Application Data\TEMP:229670E5 @Alternate Data Stream - 102 bytes -> %AllUsersProfile%\Application Data\TEMP:8C35AEA7 Windows Genuine Advantage -> %AllUsersProfile%\Application Data\Windows Genuine Advantage -> [Folder | Modified Date = 11/02/2008 5:17:50 PM | Attr = ] WLInstaller -> %AllUsersProfile%\Application Data\WLInstaller -> [Folder | Modified Date = 2/02/2008 5:00:33 PM | Attr = ] Acoustica -> %AppData%\Acoustica -> [Folder | Modified Date = 19/02/2008 6:53:00 PM | Attr = ] Adobe -> %AppData%\Adobe -> [Folder | Modified Date = 2/03/2008 2:05:22 PM | Attr = ] Apple Computer -> %AppData%\Apple Computer -> [Folder | Modified Date = 28/02/2008 5:55:58 PM | Attr = ] AVG7 -> %AppData%\AVG7 -> [Folder | Modified Date = 25/02/2008 4:37:44 PM | Attr = ] Canon -> %AppData%\Canon -> [Folder | Modified Date = 20/02/2008 8:10:10 AM | Attr = ] CD-LabelPrint -> %AppData%\CD-LabelPrint -> [Folder | Modified Date = 20/02/2008 8:10:18 AM | Attr = ] desktop.ini -> %AppData%\desktop.ini -> [Ver = | Size = 62 bytes | Modified Date = 2/02/2008 9:44:09 PM | Attr = HS] Google -> %AppData%\Google -> [Folder | Modified Date = 3/02/2008 5:27:51 PM | Attr = ] Identities -> %AppData%\Identities -> [Folder | Modified Date = 2/02/2008 12:00:00 PM | Attr = ] inst.exe -> %AppData%\inst.exe -> [Ver = | Size = 87608 bytes | Modified Date = 21/02/2008 9:33:12 PM | Attr = ] InstallShield Installation Information -> %AppData%\InstallShield Installation Information -> [Folder | Modified Date = 2/02/2008 4:37:26 PM | Attr = ] Macromedia -> %AppData%\Macromedia -> [Folder | Modified Date = 2/02/2008 3:02:26 PM | Attr = ] Media Player Classic -> %AppData%\Media Player Classic -> [Folder | Modified Date = 15/02/2008 4:44:42 PM | Attr = ] Microsoft -> %AppData%\Microsoft -> [Folder | Modified Date = 26/02/2008 6:06:43 PM | Attr = S] pcouffin.cat -> %AppData%\pcouffin.cat -> [Ver = | Size = 7887 bytes | Modified Date = 21/02/2008 9:33:12 PM | Attr = ] pcouffin.inf -> %AppData%\pcouffin.inf -> [Ver = | Size = 1144 bytes | Modified Date = 21/02/2008 9:33:12 PM | Attr = ] pcouffin.sys -> %AppData%\pcouffin.sys -> VSO Software [Ver = 1.37 | Size = 47360 bytes | Modified Date = 21/02/2008 9:33:12 PM | Attr = ] PnkBstrK.sys -> %AppData%\PnkBstrK.sys -> [Ver = | Size = 22328 bytes | Modified Date = 2/02/2008 4:04:31 PM | Attr = ] SecuROM -> %AppData%\SecuROM -> [Folder | Modified Date = 2/02/2008 5:27:18 PM | Attr = RH ] SUPERAntiSpyware.com -> %AppData%\SUPERAntiSpyware.com -> [Folder | Modified Date = 26/02/2008 9:11:15 PM | Attr = ] uTorrent -> %AppData%\uTorrent -> [Folder | Modified Date = 21/02/2008 9:58:11 PM | Attr = ] Vso -> %AppData%\Vso -> [Folder | Modified Date = 21/02/2008 10:15:17 PM | Attr = ] Adobe -> %UserProfile%\Local Settings\Application Data\Adobe -> [Folder | Modified Date = 17/02/2008 9:25:32 PM | Attr = ] Ahead -> %UserProfile%\Local Settings\Application Data\Ahead -> [Folder | Modified Date = 21/02/2008 6:47:45 PM | Attr = ] Apple -> %UserProfile%\Local Settings\Application Data\Apple -> [Folder | Modified Date = 3/02/2008 4:26:23 PM | Attr = ] Apple Computer -> %UserProfile%\Local Settings\Application Data\Apple Computer -> [Folder | Modified Date = 3/02/2008 4:27:05 PM | Attr = ] ApplicationHistory -> %UserProfile%\Local Settings\Application Data\ApplicationHistory -> [Folder | Modified Date = 2/02/2008 5:42:45 PM | Attr = ] DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini -> %UserProfile%\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini -> [Ver = | Size = 11776 bytes | Modified Date = 25/02/2008 7:25:55 PM | Attr = ] GDIPFONTCACHEV1.DAT -> %UserProfile%\Local Settings\Application Data\GDIPFONTCACHEV1.DAT -> [Ver = | Size = 44816 bytes | Modified Date = 28/02/2008 5:54:44 PM | Attr = ] Google -> %UserProfile%\Local Settings\Application Data\Google -> [Folder | Modified Date = 7/02/2008 5:14:29 PM | Attr = ] IconCache.db -> %UserProfile%\Local Settings\Application Data\IconCache.db -> [Ver = | Size = 4808892 bytes | Modified Date = 18/02/2008 8:16:09 AM | Attr = H ] id Software -> %UserProfile%\Local Settings\Application Data\id Software -> [Folder | Modified Date = 2/02/2008 5:29:35 PM | Attr = ] Identities -> %UserProfile%\Local Settings\Application Data\Identities -> [Folder | Modified Date = 3/02/2008 5:55:23 PM | Attr = ] Microsoft -> %UserProfile%\Local Settings\Application Data\Microsoft -> [Folder | Modified Date = 26/02/2008 5:29:16 PM | Attr = ] Steam -> %UserProfile%\Local Settings\Application Data\Steam -> [Folder | Modified Date = 2/02/2008 4:10:44 PM | Attr = ] Adobe PDF -> %AllUsersProfile%\Documents\Adobe PDF -> [Folder | Modified Date = 17/02/2008 9:21:17 PM | Attr = ] desktop.ini -> %AllUsersProfile%\Documents\desktop.ini -> [Ver = | Size = 62 bytes | Modified Date = 2/02/2008 9:44:09 PM | Attr = HS] My Music -> %AllUsersProfile%\Documents\My Music -> [Folder | Modified Date = 15/02/2008 4:20:22 PM | Attr = R ] My Pictures -> %AllUsersProfile%\Documents\My Pictures -> [Folder | Modified Date = 2/02/2008 11:54:36 AM | Attr = R ] My Videos -> %AllUsersProfile%\Documents\My Videos -> [Folder | Modified Date = 15/02/2008 4:24:18 PM | Attr = R ] Adobe -> %UserProfile%\My Documents\Adobe -> [Folder | Modified Date = 17/02/2008 9:24:43 PM | Attr = ] Battlefield 2 -> %UserProfile%\My Documents\Battlefield 2 -> [Folder | Modified Date = 2/03/2008 11:03:01 PM | Attr = ] ConvertXtoDVD -> %UserProfile%\My Documents\ConvertXtoDVD -> [Folder | Modified Date = 21/02/2008 9:36:47 PM | Attr = ] desktop.ini -> %UserProfile%\My Documents\desktop.ini -> [Ver = | Size = 76 bytes | Modified Date = 3/02/2008 4:10:32 PM | Attr = HS] Downloads -> %UserProfile%\My Documents\Downloads -> [Folder | Modified Date = 21/02/2008 9:20:47 PM | Attr = ] id Software -> %UserProfile%\My Documents\id Software -> [Folder | Modified Date = 2/02/2008 5:29:45 PM | Attr = ] Image.nrg -> %UserProfile%\My Documents\Image.nrg -> [Ver = | Size = 2366341276 bytes | Modified Date = 21/02/2008 10:17:53 PM | Attr = ] My Games -> %UserProfile%\My Documents\My Games -> [Folder | Modified Date = 2/02/2008 6:15:25 PM | Attr = ] My Music -> %UserProfile%\My Documents\My Music -> [Folder | Modified Date = 18/02/2008 4:29:15 PM | Attr = R ] My Pictures -> %UserProfile%\My Documents\My Pictures -> [Folder | Modified Date = 18/02/2008 5:21:10 PM | Attr = R ] My Received Files -> %UserProfile%\My Documents\My Received Files -> [Folder | Modified Date = 21/02/2008 8:58:18 PM | Attr = ] My Sharing Folders.lnk -> %UserProfile%\My Documents\My Sharing Folders.lnk -> [Ver = | Size = 571 bytes | Modified Date = 2/03/2008 8:18:09 PM | Attr = ] My Videos -> %UserProfile%\My Documents\My Videos -> [Folder | Modified Date = 18/02/2008 5:21:10 PM | Attr = R ] Sam Chalk.mpg -> %UserProfile%\My Documents\Sam Chalk.mpg -> [Ver = | Size = 553625600 bytes | Modified Date = 21/02/2008 8:19:46 PM | Attr = ] Sam Chalk.vob -> %UserProfile%\My Documents\Sam Chalk.vob -> [Ver = | Size = 1660813312 bytes | Modified Date = 21/02/2008 9:02:21 PM | Attr = ] TRADING HOURS.doc -> %UserProfile%\My Documents\TRADING HOURS.doc -> [Ver = | Size = 19968 bytes | Modified Date = 2/03/2008 9:44:34 PM | Attr = ] Applications.lnk -> %UserProfile%\Desktop\Applications.lnk -> [Ver = | Size = 1389 bytes | Modified Date = 3/02/2008 4:01:50 PM | Attr = ] ATF-Cleaner.exe -> %UserProfile%\Desktop\ATF-Cleaner.exe -> Atribune.org [Ver = 3.00.0002 | Size = 50688 bytes | Modified Date = 1/03/2008 6:22:13 PM | Attr = ] @Alternate Data Stream - 26 bytes -> %UserProfile%\Desktop\ATF-Cleaner.exe:Zone.Identifier Cracks - ISO's.lnk -> %UserProfile%\Desktop\Cracks - ISO's.lnk -> [Ver = | Size = 609 bytes | Modified Date = 7/02/2008 9:13:43 PM | Attr = ] DANIEL.lnk -> %UserProfile%\Desktop\DANIEL.lnk -> [Ver = | Size = 1304 bytes | Modified Date = 3/02/2008 1:07:20 PM | Attr = ] DR watson post mortem (I know its been covered) - Geeks to Go!.url -> %UserProfile%\Desktop\DR watson post mortem (I know its been covered) - Geeks to Go!.url -> [Ver = | Size = 2950 bytes | Modified Date = 3/03/2008 8:09:37 AM | Attr = ] @Alternate Data Stream - 1406 bytes -> %UserProfile%\Desktop\DR watson post mortem (I know its been covered) - Geeks to Go!.url:favicon dss.exe -> %UserProfile%\Desktop\dss.exe -> [Ver = 3, 2, 8, 1 | Size = 686630 bytes | Modified Date = 3/03/2008 7:46:15 AM | Attr = ] @Alternate Data Stream - 26 bytes -> %UserProfile%\Desktop\dss.exe:Zone.Identifier Games -> %UserProfile%\Desktop\Games -> [Folder | Modified Date = 29/02/2008 11:57:08 PM | Attr = R ] WinPFind35u -> %UserProfile%\Desktop\WinPFind35u -> [Folder | Modified Date = 3/03/2008 8:10:14 AM | Attr = ] WinPFind35u.exe -> %UserProfile%\Desktop\WinPFind35u.exe -> [Ver = | Size = 482000 bytes | Modified Date = 3/03/2008 8:10:00 AM | Attr = ] @Alternate Data Stream - 26 bytes -> %UserProfile%\Desktop\WinPFind35u.exe:Zone.Identifier desktop.ini -> %AllUsersProfile%\Start Menu\Programs\Startup\desktop.ini -> [Ver = | Size = 84 bytes | Modified Date = 2/02/2008 11:55:54 AM | Attr = HS] desktop.ini -> %UserProfile%\Start Menu\Programs\Startup\desktop.ini -> [Ver = | Size = 84 bytes | Modified Date = 2/02/2008 11:55:54 AM | Attr = HS] Adobe -> %CommonProgramFiles%\Adobe -> [Folder | Modified Date = 26/02/2008 6:00:57 PM | Attr = ] Adobe Systems Shared -> %CommonProgramFiles%\Adobe Systems Shared -> [Folder | Modified Date = 2/02/2008 4:09:26 PM | Attr = ] Ahead -> %CommonProgramFiles%\Ahead -> [Folder | Modified Date = 11/02/2008 5:11:37 PM | Attr = ] Apple -> %CommonProgramFiles%\Apple -> [Folder | Modified Date = 3/02/2008 4:26:09 PM | Attr = ] DESIGNER -> %CommonProgramFiles%\DESIGNER -> [Folder | Modified Date = 26/02/2008 5:30:22 PM | Attr = ] InstallShield -> %CommonProgramFiles%\InstallShield -> [Folder | Modified Date = 8/02/2008 8:04:50 AM | Attr = ] Java -> %CommonProgramFiles%\Java -> [Folder | Modified Date = 20/02/2008 5:15:35 PM | Attr = ] LightScribe -> %CommonProgramFiles%\LightScribe -> [Folder | Modified Date = 19/02/2008 8:20:54 PM | Attr = ] Microsoft Shared -> %CommonProgramFiles%\Microsoft Shared -> [Folder | Modified Date = 26/02/2008 6:12:29 PM | Attr = ] MSSoap -> %CommonProgramFiles%\MSSoap -> [Folder | Modified Date = 2/02/2008 11:54:27 AM | Attr = ] Nero -> %CommonProgramFiles%\Nero -> [Folder | Modified Date = 11/02/2008 5:12:40 PM | Attr = ] ODBC -> %CommonProgramFiles%\ODBC -> [Folder | Modified Date = 2/02/2008 9:44:33 PM | Attr = ] Services -> %CommonProgramFiles%\Services -> [Folder | Modified Date = 2/02/2008 11:54:30 AM | Attr = ] SpeechEngines -> %CommonProgramFiles%\SpeechEngines -> [Folder | Modified Date = 2/02/2008 9:44:31 PM | Attr = ] System -> %CommonProgramFiles%\System -> [Folder | Modified Date = 26/02/2008 5:30:06 PM | Attr = ] WindowsLiveInstaller -> %CommonProgramFiles%\WindowsLiveInstaller -> [Folder | Modified Date = 2/02/2008 5:08:22 PM | Attr = HS] Wise Installation Wizard -> %CommonProgramFiles%\Wise Installation Wizard -> [Folder | Modified Date = 26/02/2008 9:11:05 PM | Attr = ] [File - Purity Scan: Additional Folder Scans - Non-Microsoft Only] < End of report > [/code]