[code] OTScanIt logfile created on: 27/03/2008 22:09:02 OTScanIt by OldTimer - Version 1.0.7.0 Folder = C:\Documents and Settings\Feoras\Desktop\OTScanIt Windows XP Professional Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 7.0.5730.13) Locale: 00001809 | Country: Ireland | Language: ENI | Date Format: dd/MM/yyyy 1.50 Gb Total Physical Memory | 0.99 Gb Available Physical Memory | 65.70% Memory free 3.35 Gb Paging File | 2.89 Gb Available in Paging File | 86.30% Paging File free Paging file location(s): C:\pagefile.sys 2046 4092; %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 46.58 Gb Total Space | 37.75 Gb Free Space | 81.05% Space Free | Partition Type: NTFS Drive D: | 149.05 Gb Total Space | 128.36 Gb Free Space | 86.12% Space Free | Partition Type: NTFS Drive E: | 149.04 Gb Total Space | 142.29 Gb Free Space | 95.47% Space Free | Partition Type: NTFS F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Drive L: | 316.91 Gb Total Space | 64.47 Gb Free Space | 20.34% Space Free | Partition Type: NTFS Computer Name: MEDION Current User Name: Feoras Logged in as Administrator. Current Boot Mode: Normal Scan Mode: All users [Processes - Non-Microsoft Only] aawservice.exe -> E:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe -> Lavasoft [Ver = 7,0,2,7 | Size = 607576 bytes | Modified Date = 22/03/2008 16:34:10 | Attr = ] aswupdsv.exe -> e:\Program Files\Alwil Software\Avast4\aswUpdSv.exe -> ALWIL Software [Ver = 4, 8, 1142, 0 | Size = 17272 bytes | Modified Date = 10/03/2008 13:09:18 | Attr = ] ashserv.exe -> e:\Program Files\Alwil Software\Avast4\ashServ.exe -> ALWIL Software [Ver = 4, 8, 1142, 0 | Size = 140664 bytes | Modified Date = 10/03/2008 13:22:05 | Attr = ] lexbces.exe -> %SystemRoot%\system32\LEXBCES.EXE -> Lexmark International, Inc. [Ver = 8.19 | Size = 303104 bytes | Modified Date = 23/09/2003 01:42:00 | Attr = ] lexpps.exe -> %SystemRoot%\system32\LEXPPS.EXE -> Lexmark International, Inc. [Ver = 8.19 | Size = 174592 bytes | Modified Date = 23/09/2003 01:37:18 | Attr = ] jusched.exe -> %ProgramFiles%\Java\jre1.6.0_05\bin\jusched.exe -> Sun Microsystems, Inc. [Ver = 6.0.50.13 | Size = 144784 bytes | Modified Date = 22/02/2008 04:25:21 | Attr = ] mom.exe -> %ProgramFiles%\ATI Technologies\ATI.ACE\Core-Static\MOM.exe -> Advanced Micro Devices Inc. [Ver = 2.0.0.0 | Size = 49152 bytes | Modified Date = 17/07/2007 11:13:56 | Attr = ] dit.exe -> %SystemRoot%\Dit.exe -> ICSI Technology Ltd. [Ver = V2.12.0720 | Size = 90112 bytes | Modified Date = 20/07/2004 18:18:54 | Attr = ] thguard.exe -> %ProgramFiles%\TrojanHunter 5.0\THGuard.exe -> Mischel Internet Security [Ver = 5.0.0.278 | Size = 1047712 bytes | Modified Date = 08/02/2008 11:22:08 | Attr = ] ashdisp.exe -> E:\Program Files\Alwil Software\Avast4\ashDisp.exe -> ALWIL Software [Ver = 4, 8, 1142, 0 | Size = 79224 bytes | Modified Date = 10/03/2008 13:22:12 | Attr = ] nmindexstoresvr.exe -> %CommonProgramFiles%\Nero\Lib\NMIndexStoreSvr.exe -> Nero AG [Ver = 3.2.5.0 | Size = 1688872 bytes | Modified Date = 13/12/2007 19:10:56 | Attr = ] ccc.exe -> %ProgramFiles%\ATI Technologies\ATI.ACE\Core-Static\CCC.exe -> ATI Technologies Inc. [Ver = 2.0.0.0 | Size = 49152 bytes | Modified Date = 17/07/2007 11:13:34 | Attr = ] bluesoleil.exe -> %ProgramFiles%\IVT Corporation\BlueSoleil\BlueSoleil.exe -> IVT Corporation [Ver = 1, 6, 2, 0 | Size = 1208320 bytes | Modified Date = 15/06/2005 17:47:10 | Attr = ] btntservice.exe -> %ProgramFiles%\IVT Corporation\BlueSoleil\BTNtService.exe -> [Ver = | Size = 110592 bytes | Modified Date = 06/04/2005 16:03:28 | Attr = ] client32.exe -> E:\Program Files\NetSupport Manager\client32.exe -> NetSupport Ltd [Ver = V10.00 | Size = 24640 bytes | Modified Date = 10/11/2006 13:38:16 | Attr = ] raconfig2500.exe -> %ProgramFiles%\RALINK\RT2500 USB Wireless LAN Card\Installer\WINXP\RaConfig2500.exe -> Ralink Technology, Corp. [Ver = 2, 2, 4, 0 | Size = 528384 bytes | Modified Date = 22/01/2005 15:07:12 | Attr = ] nbservice.exe -> E:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe -> Nero AG [Ver = 3, 2, 3, 0 | Size = 869672 bytes | Modified Date = 03/12/2007 14:21:24 | Attr = ] hamachi.exe -> E:\Program Files\Hamachi\hamachi.exe -> LogMeIn Inc. [Ver = 1, 0, 2, 5 | Size = 624416 bytes | Modified Date = 05/02/2008 22:39:37 | Attr = ] generic.exe -> %CommonProgramFiles%\Teleca Shared\Generic.exe -> Teleca AB [Ver = 1.5.0.395 | Size = 983040 bytes | Modified Date = 16/03/2007 03:23:20 | Attr = R ] epmworker.exe -> E:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe -> Sony Ericsson Mobile Communications AB [Ver = 1, 2, 0,1236 | Size = 880640 bytes | Modified Date = 11/07/2007 15:57:42 | Attr = R ] pnkbstra.exe -> %SystemRoot%\system32\PnkBstrA.exe -> [Ver = | Size = 66872 bytes | Modified Date = 26/01/2008 16:55:40 | Attr = ] nmindexingservice.exe -> %CommonProgramFiles%\Nero\Lib\NMIndexingService.exe -> Nero AG [Ver = 3.2.5.0 | Size = 447784 bytes | Modified Date = 13/12/2007 19:10:56 | Attr = ] otscanit.exe -> %UserProfile%\Desktop\OTScanIt\OTScanIt.exe -> OldTimer Tools [Ver = 1.0.7.0 | Size = 369152 bytes | Modified Date = 27/03/2008 00:38:50 | Attr = ] [Win32 Services - Non-Microsoft Only] (aawservice) Ad-Aware 2007 Service [Win32_Own | Auto | Running] -> E:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe -> Lavasoft [Ver = 7,0,2,7 | Size = 607576 bytes | Modified Date = 22/03/2008 16:34:10 | Attr = ] (aswUpdSv) avast! iAVS4 Control Service [Win32_Own | Auto | Running] -> e:\Program Files\Alwil Software\Avast4\aswUpdSv.exe -> ALWIL Software [Ver = 4, 8, 1142, 0 | Size = 17272 bytes | Modified Date = 10/03/2008 13:09:18 | Attr = ] (Ati HotKey Poller) Ati HotKey Poller [Win32_Own | Disabled | Stopped] -> %SystemRoot%\system32\ati2evxx.exe -> ATI Technologies Inc. [Ver = 6.14.10.4183 | Size = 495616 bytes | Modified Date = 05/12/2007 02:53:58 | Attr = ] (ATI Smart) ATI Smart [Win32_Own | Auto | Stopped] -> %SystemRoot%\system32\ati2sgag.exe -> [Ver = 5.13.0027 | Size = 593920 bytes | Modified Date = 05/12/2007 14:17:00 | Attr = ] (avast! Antivirus) avast! Antivirus [Win32_Own | Auto | Running] -> e:\Program Files\Alwil Software\Avast4\ashServ.exe -> ALWIL Software [Ver = 4, 8, 1142, 0 | Size = 140664 bytes | Modified Date = 10/03/2008 13:22:05 | Attr = ] (avast! Mail Scanner) avast! Mail Scanner [Win32_Own | On_Demand | Stopped] -> e:\Program Files\Alwil Software\Avast4\ashMaiSv.exe -> ALWIL Software [Ver = 4, 8, 1142, 0 | Size = 247160 bytes | Modified Date = 10/03/2008 13:21:42 | Attr = ] (avast! Web Scanner) avast! Web Scanner [Win32_Own | On_Demand | Stopped] -> e:\Program Files\Alwil Software\Avast4\ashWebSv.exe -> ALWIL Software [Ver = 4, 8, 1142, 0 | Size = 345464 bytes | Modified Date = 10/03/2008 13:18:42 | Attr = ] (BlueSoleil Hid Service) BlueSoleil Hid Service [Win32_Own | Auto | Running] -> %ProgramFiles%\IVT Corporation\BlueSoleil\BTNtService.exe -> [Ver = | Size = 110592 bytes | Modified Date = 06/04/2005 16:03:28 | Attr = ] (Client32) Client32 [Win32_Own | Auto | Running] -> E:\Program Files\NetSupport Manager\client32.exe -> NetSupport Ltd [Ver = V10.00 | Size = 24640 bytes | Modified Date = 10/11/2006 13:38:16 | Attr = ] (dmadmin) Logical Disk Manager Administrative Service [Win32_Shared | On_Demand | Stopped] -> %SystemRoot%\system32\dmadmin.exe -> Microsoft Corp., Veritas Software [Ver = 2600.2180.503.0 | Size = 224768 bytes | Modified Date = 04/08/2004 12:00:00 | Attr = ] (IDriverT) InstallDriver Table Manager [Win32_Own | On_Demand | Stopped] -> %CommonProgramFiles%\InstallShield\Driver\1150\Intel 32\IDriverT.exe -> Macrovision Corporation [Ver = 11.50.42618 | Size = 69632 bytes | Modified Date = 14/11/2005 01:06:04 | Attr = ] (idsvc) Windows CardSpace [Win32_Shared | Unknown | Stopped] -> -> File not found (Imapi Helper) Imapi Helper [Win32_Own | On_Demand | Stopped] -> E:\Program Files\Alex Feinman\ISO Recorder\ImapiHelper.exe -> Alex Feinman [Ver = 1.0.0.0 | Size = 163840 bytes | Modified Date = 05/01/2006 00:06:02 | Attr = ] (LexBceS) LexBce Server [Win32_Own | Auto | Running] -> %SystemRoot%\system32\LEXBCES.EXE -> Lexmark International, Inc. [Ver = 8.19 | Size = 303104 bytes | Modified Date = 23/09/2003 01:42:00 | Attr = ] (Nero BackItUp Scheduler 3) Nero BackItUp Scheduler 3 [Win32_Own | Auto | Running] -> E:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe -> Nero AG [Ver = 3, 2, 3, 0 | Size = 869672 bytes | Modified Date = 03/12/2007 14:21:24 | Attr = ] (NMIndexingService) NMIndexingService [Win32_Own | On_Demand | Running] -> %CommonProgramFiles%\Nero\Lib\NMIndexingService.exe -> Nero AG [Ver = 3.2.5.0 | Size = 447784 bytes | Modified Date = 13/12/2007 19:10:56 | Attr = ] (PnkBstrA) PnkBstrA [Win32_Own | Auto | Running] -> %SystemRoot%\system32\PnkBstrA.exe -> [Ver = | Size = 66872 bytes | Modified Date = 26/01/2008 16:55:40 | Attr = ] (WinVNC4) VNC Server Version 4 [Win32_Own | Auto | Stopped] -> e:\Program Files\RealVNC\VNC4\winvnc4.exe -> RealVNC Ltd. [Ver = 4.1.2 | Size = 439248 bytes | Modified Date = 12/05/2006 15:04:08 | Attr = ] (x10nets) X10 Device Network Service [Win32_Own | On_Demand | Stopped] -> %CommonProgramFiles%\X10\Common\X10nets.exe -> X10 [Ver = 1, 0, 0, 1 | Size = 20480 bytes | Modified Date = 12/11/2001 13:31:48 | Attr = ] [Registry - Non-Microsoft Only] < Run [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run -> Adobe Reader Speed Launcher -> %ProgramFiles%\Adobe\Reader 8.0\Reader\reader_sl.exe -> Adobe Systems Incorporated [Ver = 8.0.0.0 | Size = 39792 bytes | Modified Date = 10/10/2007 19:51:56 | Attr = ] avast! -> e:\Program Files\Alwil Software\Avast4\ashDisp.exe -> ALWIL Software [Ver = 4, 8, 1142, 0 | Size = 79224 bytes | Modified Date = 10/03/2008 13:22:12 | Attr = ] Cmaudio -> -> File not found Dit -> %SystemRoot%\Dit.exe -> ICSI Technology Ltd. [Ver = V2.12.0720 | Size = 90112 bytes | Modified Date = 20/07/2004 18:18:54 | Attr = ] Keyboard Status -> %ProgramFiles%\Medion\KeyStat\KeyStat.exe -> [Ver = | Size = 411648 bytes | Modified Date = 25/01/2005 11:03:52 | Attr = ] Lexmark X6100 Series -> %ProgramFiles%\Lexmark X6100 Series\lxbfbmgr.exe -> Lexmark International, Inc. [Ver = 0.1.25.0 | Size = 57344 bytes | Modified Date = 23/09/2003 02:01:40 | Attr = ] NBKeyScan -> E:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe -> Nero AG [Ver = 3, 2, 3, 0 | Size = 2213160 bytes | Modified Date = 03/12/2007 14:21:24 | Attr = ] NeroFilterCheck -> %CommonProgramFiles%\Nero\Lib\NeroCheck.exe -> Nero AG [Ver = 1, 0, 0, 6 | Size = 153136 bytes | Modified Date = 01/03/2007 14:57:24 | Attr = ] Sony Ericsson PC Suite -> E:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe -> [Ver = 2.2.12.63 | Size = 528384 bytes | Modified Date = 13/06/2007 08:16:02 | Attr = R ] StartCCC -> %ProgramFiles%\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe -> [Ver = | Size = 90112 bytes | Modified Date = 10/11/2006 12:35:24 | Attr = ] SunJavaUpdateSched -> %ProgramFiles%\Java\jre1.6.0_05\bin\jusched.exe -> Sun Microsystems, Inc. [Ver = 6.0.50.13 | Size = 144784 bytes | Modified Date = 22/02/2008 04:25:21 | Attr = ] THGuard -> %ProgramFiles%\TrojanHunter 5.0\THGuard.exe -> Mischel Internet Security [Ver = 5.0.0.278 | Size = 1047712 bytes | Modified Date = 08/02/2008 11:22:08 | Attr = ] < OptionalComponents [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\ -> IMAIL-> Installed = 1 -> MAPI-> Installed = 1 -> MSFS-> Installed = 1 -> < Run [HKEY_CURRENT_USER\] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run -> IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA} -> %CommonProgramFiles%\Nero\Lib\NMIndexStoreSvr.exe -> Nero AG [Ver = 3.2.5.0 | Size = 1688872 bytes | Modified Date = 13/12/2007 19:10:56 | Attr = ] NBJ -> %ProgramFiles%\Ahead\Nero BackItUp\NBJ.exe -> File not found SpybotSD TeaTimer -> e:\Program Files\Spybot - Search & Destroy\TeaTimer.exe -> Safer Networking Limited [Ver = 1, 5, 2, 16 | Size = 2097488 bytes | Modified Date = 28/01/2008 11:43:40 | Attr = RHS] < Run [HKEY_USERS\S-1-5-21-725345543-651377827-2147112213-1003\] > -> HKEY_USERS\S-1-5-21-725345543-651377827-2147112213-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Run -> IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA} -> %CommonProgramFiles%\Nero\Lib\NMIndexStoreSvr.exe -> Nero AG [Ver = 3.2.5.0 | Size = 1688872 bytes | Modified Date = 13/12/2007 19:10:56 | Attr = ] NBJ -> %ProgramFiles%\Ahead\Nero BackItUp\NBJ.exe -> File not found SpybotSD TeaTimer -> e:\Program Files\Spybot - Search & Destroy\TeaTimer.exe -> Safer Networking Limited [Ver = 1, 5, 2, 16 | Size = 2097488 bytes | Modified Date = 28/01/2008 11:43:40 | Attr = RHS] < All Users Startup Folder > -> C:\Documents and Settings\All Users\Start Menu\Programs\Startup -> %AllUsersProfile%\Start Menu\Programs\Startup\BlueSoleil.lnk -> %ProgramFiles%\IVT Corporation\BlueSoleil\BlueSoleil.exe -> IVT Corporation [Ver = 1, 6, 2, 0 | Size = 1208320 bytes | Modified Date = 15/06/2005 17:47:10 | Attr = ] %AllUsersProfile%\Start Menu\Programs\Startup\RaConfig2500.lnk -> %ProgramFiles%\RALINK\RT2500 USB Wireless LAN Card\Installer\WINXP\RaConfig2500.exe -> Ralink Technology, Corp. [Ver = 2, 2, 4, 0 | Size = 528384 bytes | Modified Date = 22/01/2005 15:07:12 | Attr = ] < Default User Startup Folder > -> C:\Documents and Settings\Default User\Start Menu\Programs\Startup -> < Feoras Startup Folder > -> C:\Documents and Settings\Feoras\Start Menu\Programs\Startup -> %UserProfile%\Start Menu\Programs\Startup\hamachi.lnk -> E:\Program Files\Hamachi\hamachi.exe -> LogMeIn Inc. [Ver = 1, 0, 2, 5 | Size = 624416 bytes | Modified Date = 05/02/2008 22:39:37 | Attr = ] %UserProfile%\Start Menu\Programs\Startup\Ryanair Bargains 1.0.lnk -> E:\Program Files\Ryanair Bargains\1.0\RyanairBargains.exe -> [Ver = 1.1.24.241 | Size = 1289216 bytes | Modified Date = 13/11/2007 21:29:28 | Attr = ] < SecurityProviders [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\\SecurityProviders -> < Winlogon settings [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon -> < Winlogon settings [HKEY_CURRENT_USER] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon -> < Winlogon settings [HKEY_USERS\.DEFAULT] > -> HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon -> < Winlogon settings [HKEY_USERS\S-1-5-18] > -> HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon -> < Winlogon settings [HKEY_USERS\S-1-5-19] > -> HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon -> < Winlogon settings [HKEY_USERS\S-1-5-20] > -> HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon -> < Winlogon settings [HKEY_USERS\S-1-5-21-725345543-651377827-2147112213-1003] > -> HKEY_USERS\S-1-5-21-725345543-651377827-2147112213-1003\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon -> < Winlogon\Notify settings [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ -> AtiExtEvent -> %SystemRoot%\system32\ati2evxx.dll -> ATI Technologies Inc. [Ver = 6.14.10.4176 | Size = 122880 bytes | Modified Date = 05/12/2007 02:55:20 | Attr = ] < CurrentVersion Policy Settings [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ActiveDesktop\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDriveAutoRun -> 67108863 -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDriveTypeAutoRun -> 255 -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\NonEnum\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\NonEnum\\{BDEADF00-C265-11D0-BCED-00A0C90AB50F} -> 1 -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\NonEnum\\{6DFD7C5C-2451-11d3-A299-00C04F8EF6AF} -> 1073741857 -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\NonEnum\\{0DF44EAA-FF21-4412-828E-260A8728E7F1} -> 32 -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\\dontdisplaylastusername -> 0 -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\\legalnoticecaption -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\\legalnoticetext -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\\shutdownwithoutlogon -> 1 -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\\undockwithoutlogon -> 1 -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\\DisableRegistryTools -> 0 -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\\HideLegacyLogonScripts -> 0 -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\\HideLogoffScripts -> 0 -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\\RunLogonScriptSync -> 1 -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\\RunStartupScriptSync -> 1 -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\\HideStartupScripts -> 0 -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Uninstall\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\WindowsUpdate\ -> -> < CurrentVersion Policy Settings [HKEY_CURRENT_USER] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ -> -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ActiveDesktop\ -> -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Associations\ -> -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\ -> -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDriveTypeAutoRun -> 145 -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run\ -> -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\ -> -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\HideLegacyLogonScripts -> 0 -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\HideLogoffScripts -> 0 -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\RunLogonScriptSync -> 1 -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\RunStartupScriptSync -> 1 -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\HideStartupScripts -> 0 -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\WindowsUpdate\ -> -> < CurrentVersion Policy Settings [HKEY_USERS\.DEFAULT] > -> HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ -> HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ -> -> HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\ -> -> HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDriveTypeAutoRun -> 145 -> HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\run\ -> -> HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\ -> -> < CurrentVersion Policy Settings [HKEY_USERS\S-1-5-18] > -> HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ -> HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ -> -> HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\ -> -> HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDriveTypeAutoRun -> 145 -> HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\run\ -> -> HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\ -> -> < CurrentVersion Policy Settings [HKEY_USERS\S-1-5-19] > -> HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ -> HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ -> -> HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\ -> -> HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDriveTypeAutoRun -> 145 -> < CurrentVersion Policy Settings [HKEY_USERS\S-1-5-20] > -> HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ -> HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ -> -> HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\ -> -> HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDriveTypeAutoRun -> 145 -> < CurrentVersion Policy Settings [HKEY_USERS\S-1-5-21-725345543-651377827-2147112213-1003] > -> HKEY_USERS\S-1-5-21-725345543-651377827-2147112213-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ -> HKEY_USERS\S-1-5-21-725345543-651377827-2147112213-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ -> -> HKEY_USERS\S-1-5-21-725345543-651377827-2147112213-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ActiveDesktop\ -> -> HKEY_USERS\S-1-5-21-725345543-651377827-2147112213-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Associations\ -> -> HKEY_USERS\S-1-5-21-725345543-651377827-2147112213-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\ -> -> HKEY_USERS\S-1-5-21-725345543-651377827-2147112213-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDriveTypeAutoRun -> 145 -> HKEY_USERS\S-1-5-21-725345543-651377827-2147112213-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run\ -> -> HKEY_USERS\S-1-5-21-725345543-651377827-2147112213-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\ -> -> HKEY_USERS\S-1-5-21-725345543-651377827-2147112213-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\HideLegacyLogonScripts -> 0 -> HKEY_USERS\S-1-5-21-725345543-651377827-2147112213-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\HideLogoffScripts -> 0 -> HKEY_USERS\S-1-5-21-725345543-651377827-2147112213-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\RunLogonScriptSync -> 1 -> HKEY_USERS\S-1-5-21-725345543-651377827-2147112213-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\RunStartupScriptSync -> 1 -> HKEY_USERS\S-1-5-21-725345543-651377827-2147112213-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\HideStartupScripts -> 0 -> HKEY_USERS\S-1-5-21-725345543-651377827-2147112213-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\WindowsUpdate\ -> -> < HOSTS File > (27 bytes) -> C:\WINDOWS\System32\drivers\etc\Hosts -> < Internet Explorer Settings [HKEY_LOCAL_MACHINE\] > -> -> HKEY_LOCAL_MACHINE\: Main\\Default_Page_URL -> http://go.microsoft.com/fwlink/?LinkId=69157 -> HKEY_LOCAL_MACHINE\: Main\\Default_Search_URL -> http://go.microsoft.com/fwlink/?LinkId=54896 -> HKEY_LOCAL_MACHINE\: Main\\Local Page -> %SystemRoot%\system32\blank.htm -> HKEY_LOCAL_MACHINE\: Main\\Search Page -> http://go.microsoft.com/fwlink/?LinkId=54896 -> HKEY_LOCAL_MACHINE\: Main\\Start Page -> http://go.microsoft.com/fwlink/?LinkId=69157 -> HKEY_LOCAL_MACHINE\: Search\\CustomizeSearch -> http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm -> HKEY_LOCAL_MACHINE\: Search\\SearchAssistant -> http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm -> < Internet Explorer Settings [HKEY_CURRENT_USER\] > -> -> HKEY_CURRENT_USER\: Main\\Local Page -> C:\WINDOWS\system32\blank.htm -> HKEY_CURRENT_USER\: Main\\Search Page -> http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch -> HKEY_CURRENT_USER\: Main\\Start Page -> http://www.google.ie/ -> HKEY_CURRENT_USER\: ProxyEnable -> 0 -> < Internet Explorer Settings [HKEY_USERS\.DEFAULT\] > -> -> HKEY_USERS\.DEFAULT\: Main\\Search Page -> http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch -> HKEY_USERS\.DEFAULT\: Main\\Start Page -> http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome -> HKEY_USERS\.DEFAULT\: ProxyEnable -> 0 -> < Internet Explorer Settings [HKEY_USERS\S-1-5-18\] > -> -> HKEY_USERS\S-1-5-18\: Main\\Search Page -> http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch -> HKEY_USERS\S-1-5-18\: Main\\Start Page -> http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome -> HKEY_USERS\S-1-5-18\: ProxyEnable -> 0 -> < Internet Explorer Settings [HKEY_USERS\S-1-5-19\] > -> -> < Internet Explorer Settings [HKEY_USERS\S-1-5-20\] > -> -> < Internet Explorer Settings [HKEY_USERS\S-1-5-21-725345543-651377827-2147112213-1003\] > -> -> HKEY_USERS\S-1-5-21-725345543-651377827-2147112213-1003\: Main\\Local Page -> C:\WINDOWS\system32\blank.htm -> HKEY_USERS\S-1-5-21-725345543-651377827-2147112213-1003\: Main\\Search Page -> http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch -> HKEY_USERS\S-1-5-21-725345543-651377827-2147112213-1003\: Main\\Start Page -> http://www.google.ie/ -> HKEY_USERS\S-1-5-21-725345543-651377827-2147112213-1003\: ProxyEnable -> 0 -> < Trusted Sites Domains [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> [Key] 1 domain(s) found. -> 1 domain(s) and sub-domain(s) not assigned to a zone. < Trusted Sites Ranges [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> [Key] 0 range(s) found. -> < Trusted Sites Domains [HKEY_CURRENT_USER\] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> [Key] 0 domain(s) found. -> < Trusted Sites Ranges [HKEY_CURRENT_USER\] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> [Key] 0 range(s) found. -> < Trusted Sites Domains [HKEY_USERS\.DEFAULT\] > -> HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> [Key] 0 domain(s) found. -> < Trusted Sites Ranges [HKEY_USERS\.DEFAULT\] > -> HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> [Key] 0 range(s) found. -> < Trusted Sites Domains [HKEY_USERS\S-1-5-18\] > -> HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> [Key] 0 domain(s) found. -> < Trusted Sites Ranges [HKEY_USERS\S-1-5-18\] > -> HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> [Key] 0 range(s) found. -> < Trusted Sites Domains [HKEY_USERS\S-1-5-19\] > -> HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> [Key] 0 domain(s) found. -> < Trusted Sites Ranges [HKEY_USERS\S-1-5-19\] > -> HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> [Key] 0 range(s) found. -> < Trusted Sites Domains [HKEY_USERS\S-1-5-20\] > -> HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> [Key] 0 domain(s) found. -> < Trusted Sites Ranges [HKEY_USERS\S-1-5-20\] > -> HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> [Key] 0 range(s) found. -> < Trusted Sites Domains [HKEY_USERS\S-1-5-21-725345543-651377827-2147112213-1003\] > -> HKEY_USERS\S-1-5-21-725345543-651377827-2147112213-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> HKEY_USERS\S-1-5-21-725345543-651377827-2147112213-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> [Key] 0 domain(s) found. -> < Trusted Sites Ranges [HKEY_USERS\S-1-5-21-725345543-651377827-2147112213-1003\] > -> HKEY_USERS\S-1-5-21-725345543-651377827-2147112213-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> HKEY_USERS\S-1-5-21-725345543-651377827-2147112213-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> [Key] 0 range(s) found. -> < BHO's [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\ -> {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} [HKEY_LOCAL_MACHINE] -> %CommonProgramFiles%\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [Adobe PDF Reader Link Helper] -> Adobe Systems Incorporated [Ver = 8.0.0.2006102200 | Size = 62080 bytes | Modified Date = 22/10/2006 23:08:42 | Attr = ] {53707962-6F74-2D53-2644-206D7942484F} [HKEY_LOCAL_MACHINE] -> e:\Program Files\Spybot - Search & Destroy\SDHelper.dll [Spybot-S&D IE Protection] -> Safer Networking Limited [Ver = 1, 5, 0, 11 | Size = 1554256 bytes | Modified Date = 28/01/2008 11:43:28 | Attr = ] {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} [HKEY_LOCAL_MACHINE] -> %ProgramFiles%\Java\jre1.6.0_05\bin\ssv.dll [SSVHelper Class] -> Sun Microsystems, Inc. [Ver = 6.0.50.13 | Size = 509328 bytes | Modified Date = 22/02/2008 04:25:19 | Attr = ] {D187A56B-A33F-4CBE-9D77-459FC0BAE012} [HKEY_LOCAL_MACHINE] -> %ProgramFiles%\Burn4Free Toolbar\v3.3.0.1\Burn4Free_Toolbar.dll [Burn4Free Toolbar Helper] -> [Ver = 3,3,0,1 | Size = 806912 bytes | Modified Date = 11/03/2008 19:51:27 | Attr = ] < Internet Explorer ToolBars [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ToolBar -> {4F11ACBB-393F-4C86-A214-FF3D0D155CC3} [HKEY_LOCAL_MACHINE] -> %ProgramFiles%\Burn4Free Toolbar\v3.3.0.1\Burn4Free_Toolbar.dll [Burn4Free Toolbar] -> [Ver = 3,3,0,1 | Size = 806912 bytes | Modified Date = 11/03/2008 19:51:27 | Attr = ] < Internet Explorer ToolBars [HKEY_CURRENT_USER\] > -> HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\ -> WebBrowser\\{4F11ACBB-393F-4C86-A214-FF3D0D155CC3} [HKEY_LOCAL_MACHINE] -> %ProgramFiles%\Burn4Free Toolbar\v3.3.0.1\Burn4Free_Toolbar.dll [Burn4Free Toolbar] -> [Ver = 3,3,0,1 | Size = 806912 bytes | Modified Date = 11/03/2008 19:51:27 | Attr = ] < Internet Explorer ToolBars [HKEY_USERS\S-1-5-21-725345543-651377827-2147112213-1003\] > -> HKEY_USERS\S-1-5-21-725345543-651377827-2147112213-1003\Software\Microsoft\Internet Explorer\Toolbar\ -> WebBrowser\\{4F11ACBB-393F-4C86-A214-FF3D0D155CC3} [HKEY_LOCAL_MACHINE] -> %ProgramFiles%\Burn4Free Toolbar\v3.3.0.1\Burn4Free_Toolbar.dll [Burn4Free Toolbar] -> [Ver = 3,3,0,1 | Size = 806912 bytes | Modified Date = 11/03/2008 19:51:27 | Attr = ] < Internet Explorer Extensions [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\ -> {08B0E5C0-4FCB-11CF-AAA5-00401C608501}:{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBC} [HKEY_LOCAL_MACHINE] -> %ProgramFiles%\Java\jre1.6.0_05\bin\npjpi160_05.dll [Sun Java Console] -> Sun Microsystems, Inc. [Ver = 6.0.50.13 | Size = 132496 bytes | Modified Date = 22/02/2008 04:25:19 | Attr = ] {08B0E5C0-4FCB-11CF-AAA5-00401C608501}:{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBC} [HKEY_CURRENT_USER] -> %ProgramFiles%\Java\jre1.6.0_05\bin\ssv.dll [Sun Java Console] -> Sun Microsystems, Inc. [Ver = 6.0.50.13 | Size = 509328 bytes | Modified Date = 22/02/2008 04:25:19 | Attr = ] {DFB852A3-47F8-48C4-A200-58CAB36FD2A2}:{53707962-6F74-2D53-2644-206D7942484F} [HKEY_LOCAL_MACHINE] -> e:\Program Files\Spybot - Search & Destroy\SDHelper.dll [Spybot - Search && Destroy Configuration] -> Safer Networking Limited [Ver = 1, 5, 0, 11 | Size = 1554256 bytes | Modified Date = 28/01/2008 11:43:28 | Attr = ] < Internet Explorer Plugins [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Plugins\ -> PluginsPageFriendlyName -> Microsoft ActiveX Gallery -> PluginsPage -> http://activex.microsoft.com/controls/find.asp?ext=%s&mime=%s -> < DNS Name Servers [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Adapters\ -> {26AC46FB-82FD-4BFD-B4E3-E77E98DA2BA4} -> 62.231.32.10,62.231.32.11 (VIA Rhine III Fast Ethernet Adapter) -> {27F6ECE0-8140-48C2-B99F-32CBB9D1D956} -> (1394 Net Adapter) -> {7591E901-AFCA-471E-8ADC-4B84DD5ACA35} -> (Sony Ericsson Device 816 USB Ethernet Emulation (NDIS 5)) -> {77B8A2D9-8E0C-42A0-A17E-D60ABC221B82} -> (Windows Mobile-based Device) -> {A4B753D4-A54E-44F6-86FF-6CABA946A9D5} -> () -> {ACC9D3C2-A3F9-4424-A08B-D0B1C29D946F} -> () -> {C3CB649E-24A1-49FE-A85E-AD7FC9E797A4} -> (RT2500 USB Wireless LAN Card) -> {C7A28084-C272-49E5-A803-EF27C3F971C1} -> () -> {F71EAB47-ECB7-44EF-BCAC-9EB6616D9884} -> () -> {FF4ADE22-FB99-4A4F-8548-805921C82024} -> (Windows Mobile-based Device) -> < Protocol Handlers [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\ -> ipp: [HKEY_LOCAL_MACHINE] -> No CLSID value msdaipp: [HKEY_LOCAL_MACHINE] -> No CLSID value skype4com:{FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} [HKEY_LOCAL_MACHINE] -> %CommonProgramFiles%\Skype\Skype4COM.dll[IEProtocolHandler Class] -> Skype Technologies [Ver = 1, 0, 28, 2 | Size = 1934672 bytes | Modified Date = 07/12/2007 15:08:02 | Attr = R ] < Downloaded Program Files > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\ -> {6E32070A-766D-4EE6-879C-DC1FA91D2FC3}[HKEY_LOCAL_MACHINE] -> http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1200469765031[MUWebControl Class] -> {8AD9C840-044E-11D1-B3E9-00805F499D93}[HKEY_LOCAL_MACHINE] -> http://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab[Java Plug-in 1.6.0_05] -> {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}[HKEY_LOCAL_MACHINE] -> http://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab[Java Plug-in 1.6.0_03] -> {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}[HKEY_LOCAL_MACHINE] -> http://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab[Java Plug-in 1.6.0_05] -> {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}[HKEY_LOCAL_MACHINE] -> http://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab[Java Plug-in 1.6.0_05] -> {D27CDB6E-AE6D-11CF-96B8-444553540000}[HKEY_LOCAL_MACHINE] -> http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab[Shockwave Flash Object] -> [Registry - Additional Scans - Non-Microsoft Only] < BotCheck > -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole\\DefaultLaunchPermission -> (binary data) -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole\\MachineLaunchRestriction -> (binary data) -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole\\MachineAccessRestriction -> (binary data) -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole\\EnableDCOM -> Y -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole\AppCompat\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole\AppCompat\ActivationSecurityCheckExemptionList\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole\AppCompat\ActivationSecurityCheckExemptionList\\{A50398B8-9075-4FBF-A7A1-456BF21937AD} -> 1 -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole\AppCompat\ActivationSecurityCheckExemptionList\\{AD65A69D-3831-40D7-9629-9B0B50A93843} -> 1 -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole\AppCompat\ActivationSecurityCheckExemptionList\\{0040D221-54A1-11D1-9DE0-006097042D69} -> 1 -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole\AppCompat\ActivationSecurityCheckExemptionList\\{2A6D72F1-6E7E-4702-B99C-E40D3DED33C3} -> 1 -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole\NONREDIST\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole\NONREDIST\\System.EnterpriseServices.Thunk.dll -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\\FirstRunDisabled -> 1 -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\\AntiVirusDisableNotify -> 0 -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\\FirewallDisableNotify -> 0 -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\\UpdatesDisableNotify -> 0 -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\\AntiVirusOverride -> 0 -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\\FirewallOverride -> 0 -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\ -> -> *Authentication Packages* -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\\Authentication Packages -> msv1_0 -> %SystemRoot%\system32\msv1_0.dll -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 129536 bytes | Modified Date = 04/08/2004 12:00:00 | Attr = ] *MultiFile Done* -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\\Bounds -> (binary data) -> *Security Packages* -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\\Security Packages -> kerberos -> %SystemRoot%\system32\kerberos.dll -> Microsoft Corporation [Ver = 5.1.2600.2698 (xpsp_sp2_gdr.050614-1522) | Size = 295936 bytes | Modified Date = 15/06/2005 17:49:30 | Attr = ] msv1_0 -> %SystemRoot%\system32\msv1_0.dll -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 129536 bytes | Modified Date = 04/08/2004 12:00:00 | Attr = ] schannel -> %SystemRoot%\system32\schannel.dll -> Microsoft Corporation [Ver = 5.1.2600.3126 (xpsp_sp2_gdr.070425-0226) | Size = 144896 bytes | Modified Date = 25/04/2007 14:21:15 | Attr = ] wdigest -> %SystemRoot%\system32\wdigest.dll -> Microsoft Corporation [Ver = 5.1.2600.2874 (xpsp_sp2_gdr.060323-1516) | Size = 49152 bytes | Modified Date = 24/03/2006 04:37:50 | Attr = ] *MultiFile Done* -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\\ImpersonatePrivilegeUpgradeToolHasRun -> 1 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\\LsaPid -> 1256 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\\SecureBoot -> 1 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\\auditbaseobjects -> 0 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\\crashonauditfail -> 0 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\\disabledomaincreds -> 0 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\\everyoneincludesanonymous -> 0 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\\fipsalgorithmpolicy -> 0 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\\forceguest -> 1 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\\fullprivilegeauditing -> (binary data) -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\\limitblankpassworduse -> 1 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\\lmcompatibilitylevel -> 0 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\\nodefaultadminowner -> 1 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\\nolmhash -> 0 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\\restrictanonymous -> 0 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\\restrictanonymoussam -> 1 -> *Notification Packages* -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\\Notification Packages -> scecli -> %SystemRoot%\system32\scecli.dll -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 180224 bytes | Modified Date = 04/08/2004 12:00:00 | Attr = ] *MultiFile Done* -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\\enabledcom -> y -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\AccessProviders\ -> -> *ProviderOrder* -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\AccessProviders\\ProviderOrder -> Windows NT Access Provider -> -> File not found *MultiFile Done* -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\AccessProviders\Windows NT Access Provider\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\AccessProviders\Windows NT Access Provider\\ProviderPath -> C:\WINDOWS\system32\ntmarta.dll [%SystemRoot%\system32\ntmarta.dll] -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 118784 bytes | Modified Date = 04/08/2004 12:00:00 | Attr = ] HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Audit\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Audit\PerUserAuditing\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Audit\PerUserAuditing\System\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Data\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Data\\Pattern -> (binary data) -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\GBG\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\GBG\\GrafBlumGroup -> (binary data) -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\JD\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\JD\\Lookup -> (binary data) -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Kerberos\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Kerberos\Domains\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Kerberos\SidCache\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0\\Auth132 -> C:\WINDOWS\system32\iissuba.dll [IISSUBA] -> Microsoft Corporation [Ver = 6.0.2600.0 (xpclient.010817-1148) | Size = 9216 bytes | Modified Date = 04/08/2004 12:00:00 | Attr = ] HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0\\ntlmminclientsec -> 0 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0\\ntlmminserversec -> 0 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Skew1\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Skew1\\SkewMatrix -> (binary data) -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\SSO\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\SSO\Passport1.4\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\SSO\Passport1.4\\SSOURL -> http://www.passport.com -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\SspiCache\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\SspiCache\\Time -> (binary data) -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\SspiCache\digest.dll\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\SspiCache\digest.dll\\Name -> Digest -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\SspiCache\digest.dll\\Comment -> Digest SSPI Authentication Package -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\SspiCache\digest.dll\\Capabilities -> 16464 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\SspiCache\digest.dll\\RpcId -> 65535 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\SspiCache\digest.dll\\Version -> 1 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\SspiCache\digest.dll\\TokenSize -> 65535 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\SspiCache\digest.dll\\Time -> (binary data) -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\SspiCache\digest.dll\\Type -> 49 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\SspiCache\msapsspc.dll\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\SspiCache\msapsspc.dll\\Name -> DPA -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\SspiCache\msapsspc.dll\\Comment -> DPA Security Package -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\SspiCache\msapsspc.dll\\Capabilities -> 55 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\SspiCache\msapsspc.dll\\RpcId -> 17 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\SspiCache\msapsspc.dll\\Version -> 1 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\SspiCache\msapsspc.dll\\TokenSize -> 768 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\SspiCache\msapsspc.dll\\Time -> (binary data) -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\SspiCache\msapsspc.dll\\Type -> 49 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\SspiCache\msnsspc.dll\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\SspiCache\msnsspc.dll\\Name -> MSN -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\SspiCache\msnsspc.dll\\Comment -> MSN Security Package -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\SspiCache\msnsspc.dll\\Capabilities -> 55 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\SspiCache\msnsspc.dll\\RpcId -> 18 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\SspiCache\msnsspc.dll\\Version -> 1 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\SspiCache\msnsspc.dll\\TokenSize -> 768 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\SspiCache\msnsspc.dll\\Time -> (binary data) -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\SspiCache\msnsspc.dll\\Type -> 49 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\\DependOnGroup -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\\DependOnService -> Netman;WinMgmt; -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\\Description -> Provides network address translation, addressing, name resolution and/or intrusion prevention services for a home or small office network. -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\\DisplayName -> Windows Firewall/Internet Connection Sharing (ICS) -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\\ErrorControl -> 1 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\\ImagePath -> C:\WINDOWS\system32\svchost.exe [%SystemRoot%\System32\svchost.exe -k netsvcs] -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 14336 bytes | Modified Date = 04/08/2004 12:00:00 | Attr = ] HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\\ObjectName -> LocalSystem -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\\Start -> 2 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\\Type -> 32 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Epoch\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Epoch\\Epoch -> 11527 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\\ServiceDll -> C:\WINDOWS\system32\ipnathlp.dll [%SystemRoot%\System32\ipnathlp.dll] -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 331264 bytes | Modified Date = 04/08/2004 12:00:00 | Attr = ] HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List\\%windir%\system32\sessmgr.exe -> C:\WINDOWS\system32\sessmgr.exe [%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019] -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 140800 bytes | Modified Date = 04/08/2004 12:00:00 | Attr = ] HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List\\%windir%\Network Diagnostic\xpnetdiag.exe -> C:\WINDOWS\network diagnostic\xpnetdiag.exe [%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000] -> Microsoft Corporation [Ver = 5.1.2600.3012 (xpsp.061010-0355) | Size = 557568 bytes | Modified Date = 10/10/2006 12:44:50 | Attr = ] HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List\\E:\Program Files\Microsoft ActiveSync\rapimgr.exe -> E:\Program Files\Microsoft ActiveSync\rapimgr.exe:169.254.2.0 [E:\Program Files\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager] -> File not found HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List\\E:\Program Files\Microsoft ActiveSync\wcescomm.exe -> E:\Program Files\Microsoft ActiveSync\wcescomm.exe:169.254.2.0 [E:\Program Files\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager] -> File not found HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List\\E:\Program Files\Microsoft ActiveSync\WCESMgr.exe -> E:\Program Files\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0 [E:\Program Files\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application] -> File not found HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List\\26675:TCP -> 26675:TCP:169.254.2.0/255.255.255.0:Enabled:ActiveSync Service -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\RestrictedServices\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\RestrictedServices\Static\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\RestrictedServices\Static\System\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\RestrictedServices\Static\System\\SearchIndexer-1 -> V2.0|Action=Block|Dir=In|App=%SystemRoot%\system32\SearchIndexer.exe|Svc=WSearch|Name=Block all inbound traffic to SearchIndexer| -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\RestrictedServices\Static\System\\SearchIndexer-2 -> V2.0|Action=Block|Dir=Out|App=%SystemRoot%\system32\SearchIndexer.exe|Svc=WSearch|Name=Block all outbound traffic from SearchIndexer| -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\RestrictedServices\Static\System\\SearchFilterHost-1 -> V2.0|Action=Block|Dir=In|App=%SystemRoot%\system32\SearchFilterHost.exe|Name=Block all inbound traffic to SearchFilterHost| -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\RestrictedServices\Static\System\\SearchFilterHost-2 -> V2.0|Action=Block|Dir=Out|App=%SystemRoot%\system32\SearchFilterHost.exe|Name=Block all outbound traffic from SearchFilterHost| -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\\EnableFirewall -> 0 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\%windir%\system32\sessmgr.exe -> C:\WINDOWS\system32\sessmgr.exe [%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019] -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 140800 bytes | Modified Date = 04/08/2004 12:00:00 | Attr = ] HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe -> C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe [C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe:*:Enabled:Bluetooth Application] -> IVT Corporation [Ver = 1, 6, 2, 0 | Size = 1208320 bytes | Modified Date = 15/06/2005 17:47:10 | Attr = ] HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\%windir%\Network Diagnostic\xpnetdiag.exe -> C:\WINDOWS\network diagnostic\xpnetdiag.exe [%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000] -> Microsoft Corporation [Ver = 5.1.2600.3012 (xpsp.061010-0355) | Size = 557568 bytes | Modified Date = 10/10/2006 12:44:50 | Attr = ] HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\E:\Program Files\GRISOFT\AVG7\avgamsvr.exe -> E:\Program Files\GRISOFT\AVG7\avgamsvr.exe [E:\Program Files\GRISOFT\AVG7\avgamsvr.exe:*:Enabled:avgamsvr.exe] -> GRISOFT, s.r.o. [Ver = 7.5.0.496 | Size = 418816 bytes | Modified Date = 22/03/2008 16:56:03 | Attr = ] HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\E:\Program Files\GRISOFT\AVG7\avgemc.exe -> E:\Program Files\GRISOFT\AVG7\avgemc.exe [E:\Program Files\GRISOFT\AVG7\avgemc.exe:*:Enabled:avgemc.exe] -> GRISOFT, s.r.o. [Ver = 7.5.0.510 | Size = 406528 bytes | Modified Date = 22/03/2008 16:56:03 | Attr = ] HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\E:\Program Files\Microsoft ActiveSync\rapimgr.exe -> E:\Program Files\Microsoft ActiveSync\rapimgr.exe:169.254.2.0 [E:\Program Files\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager] -> File not found HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\E:\Program Files\Microsoft ActiveSync\wcescomm.exe -> E:\Program Files\Microsoft ActiveSync\wcescomm.exe:169.254.2.0 [E:\Program Files\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager] -> File not found HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\E:\Program Files\Microsoft ActiveSync\WCESMgr.exe -> E:\Program Files\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0 [E:\Program Files\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application] -> File not found HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\E:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE -> E:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE [E:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook] -> Microsoft Corporation [Ver = 12.0.6300.5000 | Size = 12829216 bytes | Modified Date = 12/12/2007 23:56:18 | Attr = ] HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\E:\Program Files\Microsoft Office\Office12\GROOVE.EXE -> E:\Program Files\Microsoft Office\Office12\GROOVE.EXE [E:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove] -> Microsoft Corporation [Ver = 12.0.6211.1000 | Size = 340856 bytes | Modified Date = 29/08/2007 00:23:36 | Attr = ] HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\E:\Program Files\Microsoft Office\Office12\ONENOTE.EXE -> E:\Program Files\Microsoft Office\Office12\ONENOTE.EXE [E:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote] -> Microsoft Corporation [Ver = 12.0.6211.1000 | Size = 1022840 bytes | Modified Date = 28/08/2007 23:43:30 | Attr = ] HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\E:\Program Files\NetSupport Manager\client32.exe -> E:\Program Files\NetSupport Manager\client32.exe [E:\Program Files\NetSupport Manager\client32.exe:*:Enabled:NetSupport Client] -> NetSupport Ltd [Ver = V10.00 | Size = 24640 bytes | Modified Date = 10/11/2006 13:38:16 | Attr = ] HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\E:\Program Files\NetSupport Manager\PCICTLUI.EXE -> E:\Program Files\NetSupport Manager\PCICTLUI.EXE [E:\Program Files\NetSupport Manager\PCICTLUI.EXE:*:Enabled:NetSupport Control] -> NetSupport Ltd [Ver = V10.00 | Size = 41021 bytes | Modified Date = 10/11/2006 13:38:00 | Attr = ] HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\E:\Program Files\NetSupport Manager\pcideply.exe -> E:\Program Files\NetSupport Manager\pcideply.exe [E:\Program Files\NetSupport Manager\pcideply.exe:*:Enabled:NetSupport Deploy] -> NetSupport Ltd [Ver = V10.00 | Size = 40960 bytes | Modified Date = 10/11/2006 13:17:22 | Attr = ] HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\E:\Program Files\NetSupport Manager\PCISA.EXE -> E:\Program Files\NetSupport Manager\PCISA.EXE [E:\Program Files\NetSupport Manager\PCISA.EXE:*:Enabled:NetSupport Scripting Agent] -> NetSupport Ltd [Ver = V10.00 | Size = 176189 bytes | Modified Date = 10/11/2006 13:38:20 | Attr = ] HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\E:\Program Files\NetSupport Manager\pciscrui.exe -> E:\Program Files\NetSupport Manager\pciscrui.exe [E:\Program Files\NetSupport Manager\pciscrui.exe:*:Enabled:NetSupport Script Editor] -> NetSupport Ltd [Ver = V10.00 | Size = 372800 bytes | Modified Date = 10/11/2006 13:38:22 | Attr = ] HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\E:\Program Files\NetSupport Manager\runscrip.exe -> E:\Program Files\NetSupport Manager\runscrip.exe [E:\Program Files\NetSupport Manager\runscrip.exe:*:Enabled:NetSupport Run Script] -> NetSupport Ltd [Ver = V10.00 | Size = 98368 bytes | Modified Date = 10/11/2006 13:38:22 | Attr = ] HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\\26675:TCP -> 26675:TCP:169.254.2.0/255.255.255.0:Enabled:ActiveSync Service -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Setup\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Setup\\ServiceUpgrade -> 1 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Setup\InterfacesUnfirewalledAtUpdate\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Setup\InterfacesUnfirewalledAtUpdate\\All -> 1 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Enum\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Enum\\0 -> Root\LEGACY_SHAREDACCESS\0000 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Enum\\Count -> 1 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Enum\\NextInstance -> 1 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\\Type -> 32 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\\Start -> 2 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\\ErrorControl -> 1 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\\ImagePath -> C:\WINDOWS\system32\svchost.exe [%systemroot%\system32\svchost.exe -k netsvcs] -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 14336 bytes | Modified Date = 04/08/2004 12:00:00 | Attr = ] HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\\DisplayName -> Automatic Updates -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\\ObjectName -> LocalSystem -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\\Description -> Enables the download and installation of Windows updates. If this service is disabled, this computer will not be able to use the Automatic Updates feature or the Windows Update Web site. -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\Parameters\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\Parameters\\ServiceDll -> C:\WINDOWS\system32\wuauserv.dll [C:\WINDOWS\system32\wuauserv.dll] -> Microsoft Corporation [Ver = 5.4.3790.2180 (xpsp_sp2_rtm.040803-2158) | Size = 6656 bytes | Modified Date = 04/08/2004 12:00:00 | Attr = ] HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\Security\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\Security\\Security -> (binary data) -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\Enum\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\Enum\\0 -> Root\LEGACY_WUAUSERV\0000 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\Enum\\Count -> 1 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\Enum\\NextInstance -> 1 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteRegistry\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteRegistry\\Description -> Enables remote users to modify registry settings on this computer. If this service is stopped, the registry can be modified only by users on this computer. If this service is disabled, any services that explicitly depend on it will fail to start. -> *DependOnService* -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteRegistry\\DependOnService -> RPCSS -> %SystemRoot%\system32\rpcss.dll -> Microsoft Corporation [Ver = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528) | Size = 397824 bytes | Modified Date = 26/07/2005 04:39:49 | Attr = ] *MultiFile Done* -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteRegistry\\DisplayName -> Remote Registry -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteRegistry\\ErrorControl -> 1 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteRegistry\\ImagePath -> C:\WINDOWS\system32\svchost.exe [%SystemRoot%\system32\svchost.exe -k LocalService] -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 14336 bytes | Modified Date = 04/08/2004 12:00:00 | Attr = ] HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteRegistry\\ObjectName -> NT AUTHORITY\LocalService -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteRegistry\\Group -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteRegistry\\Start -> 2 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteRegistry\\Type -> 32 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteRegistry\\FailureActions -> (binary data) -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Parameters\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Parameters\\ServiceDll -> C:\WINDOWS\system32\regsvc.dll [%SystemRoot%\system32\regsvc.dll] -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 59904 bytes | Modified Date = 04/08/2004 12:00:00 | Attr = ] HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security\\Security -> (binary data) -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Enum\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Enum\\0 -> Root\LEGACY_REMOTEREGISTRY\0000 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Enum\\Count -> 1 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Enum\\NextInstance -> 1 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TlntSvr\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TlntSvr\\Type -> 16 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TlntSvr\\Start -> 4 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TlntSvr\\ErrorControl -> 1 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TlntSvr\\ImagePath -> C:\WINDOWS\system32\tlntsvr.exe [C:\WINDOWS\system32\tlntsvr.exe] -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 73216 bytes | Modified Date = 04/08/2004 12:00:00 | Attr = ] HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TlntSvr\\DisplayName -> Telnet -> *DependOnService* -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TlntSvr\\DependOnService -> RPCSS -> %SystemRoot%\system32\rpcss.dll -> Microsoft Corporation [Ver = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528) | Size = 397824 bytes | Modified Date = 26/07/2005 04:39:49 | Attr = ] TCPIP -> -> File not found NTLMSSP -> -> File not found *MultiFile Done* -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TlntSvr\\DependOnGroup -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TlntSvr\\ObjectName -> LocalSystem -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TlntSvr\\Description -> Enables a remote user to log on to this computer and run programs, and supports various TCP/IP Telnet clients, including UNIX-based and Windows-based computers. If this service is stopped, remote user access to programs might be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TlntSvr\Security\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TlntSvr\Security\\Security -> (binary data) -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Hardware Profiles\Current\Software\Microsoft\windows\CurrentVersion\Internet Settings\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Hardware Profiles\Current\Software\Microsoft\windows\CurrentVersion\Internet Settings\\ProxyEnable -> 0 -> < ControlSets > HKEY_LOCAL_MACHINE\SYSTEM\Select\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\Select\\Current -> 1 -> HKEY_LOCAL_MACHINE\SYSTEM\Select\\Default -> 1 -> HKEY_LOCAL_MACHINE\SYSTEM\Select\\Failed -> 0 -> HKEY_LOCAL_MACHINE\SYSTEM\Select\\LastKnownGood -> 2 -> [Files/Folders - Created Within 90 days] 4bfe13da4b108c333602cab0 -> %SystemDrive%\4bfe13da4b108c333602cab0 -> [Folder | Created Date = 16/01/2008 19:30:38 | Attr = ] 99296fd6168a9ad18e1b -> %SystemDrive%\99296fd6168a9ad18e1b -> [Folder | Created Date = 16/01/2008 19:30:55 | Attr = ] a875fa28c8c0c5cdc3 -> %SystemDrive%\a875fa28c8c0c5cdc3 -> [Folder | Created Date = 16/01/2008 19:32:32 | Attr = ] AUTOEXEC.BAT -> %SystemDrive%\AUTOEXEC.BAT -> [Ver = | Size = 0 bytes | Created Date = 16/01/2008 07:09:44 | Attr = ] BagleFix -> %SystemDrive%\BagleFix -> [Folder | Created Date = 22/03/2008 21:27:57 | Attr = ] boot.ini -> %SystemDrive%\boot.ini -> [Ver = | Size = 211 bytes | Created Date = 19/03/2008 22:02:57 | Attr = ] boot.ini~ -> %SystemDrive%\boot.ini~ -> [Ver = | Size = 229 bytes | Created Date = 16/01/2008 06:52:00 | Attr = HS] Config.Msi -> %SystemDrive%\Config.Msi -> [Folder | Created Date = 27/03/2008 08:40:35 | Attr = HS] CONFIG.SYS -> %SystemDrive%\CONFIG.SYS -> [Ver = | Size = 0 bytes | Created Date = 16/01/2008 07:09:44 | Attr = ] Documents and Settings -> %SystemDrive%\Documents and Settings -> [Folder | Created Date = 16/01/2008 06:52:51 | Attr = ] Intel -> %SystemDrive%\Intel -> [Folder | Created Date = 24/02/2008 20:32:41 | Attr = ] IO.SYS -> %SystemDrive%\IO.SYS -> [Ver = | Size = 0 bytes | Created Date = 16/01/2008 07:09:44 | Attr = RHS] lj632 -> %SystemDrive%\lj632 -> [Folder | Created Date = 17/01/2008 11:21:53 | Attr = ] Lxk6100 -> %SystemDrive%\Lxk6100 -> [Folder | Created Date = 17/01/2008 10:58:10 | Attr = ] MSDOS.SYS -> %SystemDrive%\MSDOS.SYS -> [Ver = | Size = 0 bytes | Created Date = 16/01/2008 07:09:44 | Attr = RHS] Program Files -> %ProgramFiles% -> [Folder | Created Date = 16/01/2008 06:53:46 | Attr = R ] QooBox -> %SystemDrive%\QooBox -> [Folder | Created Date = 27/03/2008 07:49:48 | Attr = ] RECYCLER -> %SystemDrive%\RECYCLER -> [Folder | Created Date = 16/01/2008 07:25:35 | Attr = HS] System Volume Information -> %SystemDrive%\System Volume Information -> [Folder | Created Date = 16/01/2008 06:50:48 | Attr = HS] WINDOWS -> %SystemRoot% -> [Folder | Created Date = 16/01/2008 06:47:00 | Attr = ] big5.nls -> %SystemRoot%\System32\dllcache\big5.nls -> [Ver = | Size = 66728 bytes | Created Date = 16/01/2008 07:10:16 | Attr = ] bopomofo.nls -> %SystemRoot%\System32\dllcache\bopomofo.nls -> [Ver = | Size = 82172 bytes | Created Date = 16/01/2008 07:10:16 | Attr = ] cap7146.sys -> %SystemRoot%\System32\dllcache\cap7146.sys -> Philips Semiconductors GmbH [Ver = 1.00 (XPClient.010817-1148) | Size = 54528 bytes | Created Date = 16/01/2008 07:10:22 | Attr = ] chtskf.dll -> %SystemRoot%\System32\dllcache\chtskf.dll -> [Ver = | Size = 173568 bytes | Created Date = 16/01/2008 07:10:24 | Attr = ] c_10001.nls -> %SystemRoot%\System32\dllcache\c_10001.nls -> [Ver = | Size = 162850 bytes | Created Date = 16/01/2008 07:10:17 | Attr = ] c_10002.nls -> %SystemRoot%\System32\dllcache\c_10002.nls -> [Ver = | Size = 195618 bytes | Created Date = 16/01/2008 07:10:17 | Attr = ] c_10003.nls -> %SystemRoot%\System32\dllcache\c_10003.nls -> [Ver = | Size = 177698 bytes | Created Date = 16/01/2008 07:10:17 | Attr = ] c_10004.nls -> %SystemRoot%\System32\dllcache\c_10004.nls -> [Ver = | Size = 66082 bytes | Created Date = 16/01/2008 07:10:17 | Attr = ] c_10005.nls -> %SystemRoot%\System32\dllcache\c_10005.nls -> [Ver = | Size = 66082 bytes | Created Date = 16/01/2008 07:10:17 | Attr = ] c_10006.nls -> %SystemRoot%\System32\dllcache\c_10006.nls -> [Ver = | Size = 66082 bytes | Created Date = 16/01/2008 06:53:40 | Attr = ] c_10007.nls -> %SystemRoot%\System32\dllcache\c_10007.nls -> [Ver = | Size = 66082 bytes | Created Date = 16/01/2008 06:53:42 | Attr = ] c_10008.nls -> %SystemRoot%\System32\dllcache\c_10008.nls -> [Ver = | Size = 173602 bytes | Created Date = 16/01/2008 07:10:17 | Attr = ] c_10010.nls -> %SystemRoot%\System32\dllcache\c_10010.nls -> [Ver = | Size = 66082 bytes | Created Date = 16/01/2008 06:53:37 | Attr = ] c_10017.nls -> %SystemRoot%\System32\dllcache\c_10017.nls -> [Ver = | Size = 66082 bytes | Created Date = 16/01/2008 06:53:42 | Attr = ] c_10021.nls -> %SystemRoot%\System32\dllcache\c_10021.nls -> [Ver = | Size = 66082 bytes | Created Date = 16/01/2008 07:10:17 | Attr = ] c_10029.nls -> %SystemRoot%\System32\dllcache\c_10029.nls -> [Ver = | Size = 66082 bytes | Created Date = 16/01/2008 06:53:37 | Attr = ] c_10081.nls -> %SystemRoot%\System32\dllcache\c_10081.nls -> [Ver = | Size = 66082 bytes | Created Date = 16/01/2008 06:53:43 | Attr = ] c_10082.nls -> %SystemRoot%\System32\dllcache\c_10082.nls -> [Ver = | Size = 66082 bytes | Created Date = 16/01/2008 06:53:37 | Attr = ] c_1047.nls -> %SystemRoot%\System32\dllcache\c_1047.nls -> [Ver = | Size = 66082 bytes | Created Date = 16/01/2008 07:10:17 | Attr = ] c_1140.nls -> %SystemRoot%\System32\dllcache\c_1140.nls -> [Ver = | Size = 66082 bytes | Created Date = 16/01/2008 07:10:17 | Attr = ] c_1141.nls -> %SystemRoot%\System32\dllcache\c_1141.nls -> [Ver = | Size = 66082 bytes | Created Date = 16/01/2008 07:10:17 | Attr = ] c_1142.nls -> %SystemRoot%\System32\dllcache\c_1142.nls -> [Ver = | Size = 66082 bytes | Created Date = 16/01/2008 07:10:18 | Attr = ] c_1143.nls -> %SystemRoot%\System32\dllcache\c_1143.nls -> [Ver = | Size = 66082 bytes | Created Date = 16/01/2008 07:10:18 | Attr = ] c_1144.nls -> %SystemRoot%\System32\dllcache\c_1144.nls -> [Ver = | Size = 66082 bytes | Created Date = 16/01/2008 07:10:18 | Attr = ] c_1145.nls -> %SystemRoot%\System32\dllcache\c_1145.nls -> [Ver = | Size = 66082 bytes | Created Date = 16/01/2008 07:10:18 | Attr = ] c_1146.nls -> %SystemRoot%\System32\dllcache\c_1146.nls -> [Ver = | Size = 66082 bytes | Created Date = 16/01/2008 07:10:18 | Attr = ] c_1147.nls -> %SystemRoot%\System32\dllcache\c_1147.nls -> [Ver = | Size = 66082 bytes | Created Date = 16/01/2008 07:10:18 | Attr = ] c_1148.nls -> %SystemRoot%\System32\dllcache\c_1148.nls -> [Ver = | Size = 66082 bytes | Created Date = 16/01/2008 07:10:18 | Attr = ] c_1149.nls -> %SystemRoot%\System32\dllcache\c_1149.nls -> [Ver = | Size = 66082 bytes | Created Date = 16/01/2008 07:10:18 | Attr = ] c_1361.nls -> %SystemRoot%\System32\dllcache\c_1361.nls -> [Ver = | Size = 189986 bytes | Created Date = 16/01/2008 07:10:18 | Attr = ] c_20000.nls -> %SystemRoot%\System32\dllcache\c_20000.nls -> [Ver = | Size = 180258 bytes | Created Date = 16/01/2008 07:10:18 | Attr = ] c_20001.nls -> %SystemRoot%\System32\dllcache\c_20001.nls -> [Ver = | Size = 186402 bytes | Created Date = 16/01/2008 07:10:18 | Attr = ] c_20002.nls -> %SystemRoot%\System32\dllcache\c_20002.nls -> [Ver = | Size = 173602 bytes | Created Date = 16/01/2008 07:10:18 | Attr = ] c_20003.nls -> %SystemRoot%\System32\dllcache\c_20003.nls -> [Ver = | Size = 185378 bytes | Created Date = 16/01/2008 07:10:19 | Attr = ] c_20004.nls -> %SystemRoot%\System32\dllcache\c_20004.nls -> [Ver = | Size = 180258 bytes | Created Date = 16/01/2008 07:10:19 | Attr = ] c_20005.nls -> %SystemRoot%\System32\dllcache\c_20005.nls -> [Ver = | Size = 187938 bytes | Created Date = 16/01/2008 07:10:19 | Attr = ] c_20105.nls -> %SystemRoot%\System32\dllcache\c_20105.nls -> [Ver = | Size = 66082 bytes | Created Date = 16/01/2008 07:10:19 | Attr = ] c_20106.nls -> %SystemRoot%\System32\dllcache\c_20106.nls -> [Ver = | Size = 66082 bytes | Created Date = 16/01/2008 07:10:19 | Attr = ] c_20107.nls -> %SystemRoot%\System32\dllcache\c_20107.nls -> [Ver = | Size = 66082 bytes | Created Date = 16/01/2008 07:10:19 | Attr = ] c_20108.nls -> %SystemRoot%\System32\dllcache\c_20108.nls -> [Ver = | Size = 66082 bytes | Created Date = 16/01/2008 07:10:19 | Attr = ] c_20127.nls -> %SystemRoot%\System32\dllcache\c_20127.nls -> [Ver = | Size = 66082 bytes | Created Date = 16/01/2008 06:53:35 | Attr = ] c_20269.nls -> %SystemRoot%\System32\dllcache\c_20269.nls -> [Ver = | Size = 66082 bytes | Created Date = 16/01/2008 07:10:19 | Attr = ] c_20273.nls -> %SystemRoot%\System32\dllcache\c_20273.nls -> [Ver = | Size = 66082 bytes | Created Date = 16/01/2008 07:10:19 | Attr = ] c_20277.nls -> %SystemRoot%\System32\dllcache\c_20277.nls -> [Ver = | Size = 66082 bytes | Created Date = 16/01/2008 07:10:19 | Attr = ] c_20278.nls -> %SystemRoot%\System32\dllcache\c_20278.nls -> [Ver = | Size = 66082 bytes | Created Date = 16/01/2008 07:10:19 | Attr = ] c_20280.nls -> %SystemRoot%\System32\dllcache\c_20280.nls -> [Ver = | Size = 66082 bytes | Created Date = 16/01/2008 07:10:19 | Attr = ] c_20284.nls -> %SystemRoot%\System32\dllcache\c_20284.nls -> [Ver = | Size = 66082 bytes | Created Date = 16/01/2008 07:10:19 | Attr = ] c_20285.nls -> %SystemRoot%\System32\dllcache\c_20285.nls -> [Ver = | Size = 66082 bytes | Created Date = 16/01/2008 07:10:20 | Attr = ] c_20290.nls -> %SystemRoot%\System32\dllcache\c_20290.nls -> [Ver = | Size = 66082 bytes | Created Date = 16/01/2008 07:10:20 | Attr = ] c_20297.nls -> %SystemRoot%\System32\dllcache\c_20297.nls -> [Ver = | Size = 66082 bytes | Created Date = 16/01/2008 07:10:20 | Attr = ] c_20420.nls -> %SystemRoot%\System32\dllcache\c_20420.nls -> [Ver = | Size = 66082 bytes | Created Date = 16/01/2008 07:10:20 | Attr = ] c_20423.nls -> %SystemRoot%\System32\dllcache\c_20423.nls -> [Ver = | Size = 66082 bytes | Created Date = 16/01/2008 07:10:20 | Attr = ] c_20424.nls -> %SystemRoot%\System32\dllcache\c_20424.nls -> [Ver = | Size = 66082 bytes | Created Date = 16/01/2008 07:10:20 | Attr = ] c_20833.nls -> %SystemRoot%\System32\dllcache\c_20833.nls -> [Ver = | Size = 66082 bytes | Created Date = 16/01/2008 07:10:20 | Attr = ] c_20838.nls -> %SystemRoot%\System32\dllcache\c_20838.nls -> [Ver = | Size = 66082 bytes | Created Date = 16/01/2008 07:10:20 | Attr = ] c_20871.nls -> %SystemRoot%\System32\dllcache\c_20871.nls -> [Ver = | Size = 66082 bytes | Created Date = 16/01/2008 07:10:20 | Attr = ] c_20880.nls -> %SystemRoot%\System32\dllcache\c_20880.nls -> [Ver = | Size = 66082 bytes | Created Date = 16/01/2008 07:10:20 | Attr = ] c_20924.nls -> %SystemRoot%\System32\dllcache\c_20924.nls -> [Ver = | Size = 66082 bytes | Created Date = 16/01/2008 07:10:20 | Attr = ] c_20932.nls -> %SystemRoot%\System32\dllcache\c_20932.nls -> [Ver = | Size = 180770 bytes | Created Date = 16/01/2008 07:10:20 | Attr = ] c_20936.nls -> %SystemRoot%\System32\dllcache\c_20936.nls -> [Ver = | Size = 173602 bytes | Created Date = 16/01/2008 07:10:20 | Attr = ] c_20949.nls -> %SystemRoot%\System32\dllcache\c_20949.nls -> [Ver = | Size = 177698 bytes | Created Date = 16/01/2008 07:10:20 | Attr = ] c_21025.nls -> %SystemRoot%\System32\dllcache\c_21025.nls -> [Ver = | Size = 66082 bytes | Created Date = 16/01/2008 07:10:21 | Attr = ] c_21027.nls -> %SystemRoot%\System32\dllcache\c_21027.nls -> [Ver = | Size = 66082 bytes | Created Date = 16/01/2008 07:10:21 | Attr = ] c_28594.nls -> %SystemRoot%\System32\dllcache\c_28594.nls -> [Ver = | Size = 66082 bytes | Created Date = 16/01/2008 06:53:39 | Attr = ] c_28595.nls -> %SystemRoot%\System32\dllcache\c_28595.nls -> [Ver = | Size = 66082 bytes | Created Date = 16/01/2008 06:53:42 | Attr = ] c_28596.nls -> %SystemRoot%\System32\dllcache\c_28596.nls -> [Ver = | Size = 66082 bytes | Created Date = 16/01/2008 07:10:21 | Attr = ] c_28597.nls -> %SystemRoot%\System32\dllcache\c_28597.nls -> [Ver = | Size = 66082 bytes | Created Date = 16/01/2008 06:53:40 | Attr = ] c_28599.nls -> %SystemRoot%\System32\dllcache\c_28599.nls -> [Ver = | Size = 66082 bytes | Created Date = 16/01/2008 06:53:43 | Attr = ] c_28603.nls -> %SystemRoot%\System32\dllcache\c_28603.nls -> [Ver = | Size = 66082 bytes | Created Date = 16/01/2008 06:53:45 | Attr = ] c_708.nls -> %SystemRoot%\System32\dllcache\c_708.nls -> [Ver = | Size = 66082 bytes | Created Date = 16/01/2008 07:10:21 | Attr = ] c_720.nls -> %SystemRoot%\System32\dllcache\c_720.nls -> [Ver = | Size = 66594 bytes | Created Date = 16/01/2008 07:10:21 | Attr = ] c_737.nls -> %SystemRoot%\System32\dllcache\c_737.nls -> [Ver = | Size = 66594 bytes | Created Date = 16/01/2008 06:53:40 | Attr = ] c_852.nls -> %SystemRoot%\System32\dllcache\c_852.nls -> [Ver = | Size = 66594 bytes | Created Date = 16/01/2008 06:53:37 | Attr = ] c_855.nls -> %SystemRoot%\System32\dllcache\c_855.nls -> [Ver = | Size = 66594 bytes | Created Date = 16/01/2008 06:53:39 | Attr = ] c_857.nls -> %SystemRoot%\System32\dllcache\c_857.nls -> [Ver = | Size = 66594 bytes | Created Date = 16/01/2008 06:53:43 | Attr = ] c_858.nls -> %SystemRoot%\System32\dllcache\c_858.nls -> [Ver = | Size = 66594 bytes | Created Date = 16/01/2008 07:10:21 | Attr = ] c_862.nls -> %SystemRoot%\System32\dllcache\c_862.nls -> [Ver = | Size = 66594 bytes | Created Date = 16/01/2008 07:10:21 | Attr = ] c_864.nls -> %SystemRoot%\System32\dllcache\c_864.nls -> [Ver = | Size = 66594 bytes | Created Date = 16/01/2008 07:10:21 | Attr = ] c_866.nls -> %SystemRoot%\System32\dllcache\c_866.nls -> [Ver = | Size = 66594 bytes | Created Date = 16/01/2008 06:53:39 | Attr = ] c_869.nls -> %SystemRoot%\System32\dllcache\c_869.nls -> [Ver = | Size = 66594 bytes | Created Date = 16/01/2008 06:53:40 | Attr = ] c_870.nls -> %SystemRoot%\System32\dllcache\c_870.nls -> [Ver = | Size = 66082 bytes | Created Date = 16/01/2008 07:10:21 | Attr = ] c_875.nls -> %SystemRoot%\System32\dllcache\c_875.nls -> [Ver = | Size = 66082 bytes | Created Date = 16/01/2008 06:53:40 | Attr = ] dgrpsetu.dll -> %SystemRoot%\System32\dllcache\dgrpsetu.dll -> Digi International, Inc. [Ver = 2.3.7 | Size = 176157 bytes | Created Date = 16/01/2008 06:53:35 | Attr = ] dgsetup.dll -> %SystemRoot%\System32\dllcache\dgsetup.dll -> Digi International [Ver = v3.7.3.0 | Size = 85020 bytes | Created Date = 16/01/2008 06:53:35 | Attr = ] eqnclass.dll -> %SystemRoot%\System32\dllcache\eqnclass.dll -> Equinox Systems Inc. [Ver = 5.0u(58) | Size = 103424 bytes | Created Date = 16/01/2008 06:53:34 | Attr = ] esucmd.dll -> %SystemRoot%\System32\dllcache\esucmd.dll -> SEIKO EPSON CORP. [Ver = 1.00 | Size = 31744 bytes | Created Date = 16/01/2008 07:10:30 | Attr = ] esuimgd.dll -> %SystemRoot%\System32\dllcache\esuimgd.dll -> SEIKO EPSON CORP. [Ver = 1.00 | Size = 57856 bytes | Created Date = 16/01/2008 07:10:30 | Attr = ] esunid.dll -> %SystemRoot%\System32\dllcache\esunid.dll -> SEIKO EPSON CORP. [Ver = 1.00 | Size = 45056 bytes | Created Date = 16/01/2008 07:10:30 | Attr = ] FP4.CAT -> %SystemRoot%\System32\dllcache\FP4.CAT -> [Ver = | Size = 31281 bytes | Created Date = 16/01/2008 06:53:24 | Attr = ] fpencode.dll -> %SystemRoot%\System32\dllcache\fpencode.dll -> [Ver = | Size = 94208 bytes | Created Date = 16/01/2008 07:10:32 | Attr = ] hanja.lex -> %SystemRoot%\System32\dllcache\hanja.lex -> [Ver = | Size = 108827 bytes | Created Date = 16/01/2008 07:10:36 | Attr = ] HPCRDP.CAT -> %SystemRoot%\System32\dllcache\HPCRDP.CAT -> [Ver = | Size = 13472 bytes | Created Date = 16/01/2008 06:53:24 | Attr = ] htrn_jis.dll -> %SystemRoot%\System32\dllcache\htrn_jis.dll -> Hilgraeve, Inc. [Ver = 5.1.2600.0 | Size = 13312 bytes | Created Date = 16/01/2008 07:06:45 | Attr = ] hwxjpn.dll -> %SystemRoot%\System32\dllcache\hwxjpn.dll -> [Ver = | Size = 13463552 bytes | Created Date = 16/01/2008 07:10:40 | Attr = ] IASNT4.CAT -> %SystemRoot%\System32\dllcache\IASNT4.CAT -> [Ver = | Size = 8574 bytes | Created Date = 16/01/2008 06:53:25 | Attr = ] imekr.lex -> %SystemRoot%\System32\dllcache\imekr.lex -> [Ver = | Size = 134339 bytes | Created Date = 16/01/2008 07:10:49 | Attr = ] imjpinst.exe -> %SystemRoot%\System32\dllcache\imjpinst.exe -> [Ver = | Size = 196665 bytes | Created Date = 16/01/2008 07:10:50 | Attr = ] IMS.CAT -> %SystemRoot%\System32\dllcache\IMS.CAT -> [Ver = | Size = 13753 bytes | Created Date = 16/01/2008 06:53:24 | Attr = ] imscinst.exe -> %SystemRoot%\System32\dllcache\imscinst.exe -> [Ver = | Size = 59392 bytes | Created Date = 16/01/2008 07:10:51 | Attr = ] isrdbg32.dll -> %SystemRoot%\System32\dllcache\isrdbg32.dll -> Intel Corporation [Ver = 0.0 | Size = 32768 bytes | Created Date = 16/01/2008 07:07:46 | Attr = ] korwbrkr.lex -> %SystemRoot%\System32\dllcache\korwbrkr.lex -> [Ver = | Size = 1158818 bytes | Created Date = 16/01/2008 07:10:57 | Attr = ] ksc.nls -> %SystemRoot%\System32\dllcache\ksc.nls -> [Ver = | Size = 47066 bytes | Created Date = 16/01/2008 07:10:57 | Attr = ] ltts1033.lxa -> %SystemRoot%\System32\dllcache\ltts1033.lxa -> [Ver = | Size = 643717 bytes | Created Date = 16/01/2008 06:53:47 | Attr = ] MAPIMIG.CAT -> %SystemRoot%\System32\dllcache\MAPIMIG.CAT -> [Ver = | Size = 399645 bytes | Created Date = 16/01/2008 06:53:24 | Attr = ] mediactr.cat -> %SystemRoot%\System32\dllcache\mediactr.cat -> [Ver = | Size = 31965 bytes | Created Date = 16/01/2008 06:53:25 | Attr = ] mplayer2.exe -> %SystemRoot%\System32\dllcache\mplayer2.exe -> [Ver = | Size = 4639 bytes | Created Date = 16/01/2008 07:07:58 | Attr = ] msdvbnp.ax -> %SystemRoot%\System32\dllcache\msdvbnp.ax -> [Ver = | Size = 56832 bytes | Created Date = 16/01/2008 20:18:59 | Attr = ] msinfo.dll -> %SystemRoot%\System32\dllcache\msinfo.dll -> [Ver = 7, 0, 0, 0 | Size = 376320 bytes | Created Date = 16/01/2008 07:07:48 | Attr = ] MSMSGS.CAT -> %SystemRoot%\System32\dllcache\MSMSGS.CAT -> [Ver = | Size = 9581 bytes | Created Date = 16/01/2008 06:53:24 | Attr = ] msn7.cat -> %SystemRoot%\System32\dllcache\msn7.cat -> [Ver = | Size = 24209 bytes | Created Date = 16/01/2008 06:53:25 | Attr = ] msn9.cat -> %SystemRoot%\System32\dllcache\msn9.cat -> [Ver = | Size = 11651 bytes | Created Date = 16/01/2008 06:53:25 | Attr = ] MSTSWEB.CAT -> %SystemRoot%\System32\dllcache\MSTSWEB.CAT -> [Ver = | Size = 7245 bytes | Created Date = 16/01/2008 06:53:25 | Attr = ] MW770.CAT -> %SystemRoot%\System32\dllcache\MW770.CAT -> [Ver = | Size = 37484 bytes | Created Date = 16/01/2008 06:53:24 | Attr = ] netfx.cat -> %SystemRoot%\System32\dllcache\netfx.cat -> [Ver = | Size = 141702 bytes | Created Date = 16/01/2008 06:53:25 | Attr = ] nls302en.lex -> %SystemRoot%\System32\dllcache\nls302en.lex -> [Ver = | Size = 4399505 bytes | Created Date = 16/01/2008 07:08:37 | Attr = ] NT5.CAT -> %SystemRoot%\System32\dllcache\NT5.CAT -> [Ver = | Size = 2012670 bytes | Created Date = 16/01/2008 06:53:23 | Attr = ] NT5IIS.CAT -> %SystemRoot%\System32\dllcache\NT5IIS.CAT -> [Ver = | Size = 797189 bytes | Created Date = 16/01/2008 06:53:24 | Attr = ] NT5INF.CAT -> %SystemRoot%\System32\dllcache\NT5INF.CAT -> [Ver = | Size = 502724 bytes | Created Date = 16/01/2008 06:53:23 | Attr = ] NTPRINT.CAT -> %SystemRoot%\System32\dllcache\NTPRINT.CAT -> [Ver = | Size = 1086058 bytes | Created Date = 16/01/2008 06:53:24 | Attr = ] OEMBIOS.CAT -> %SystemRoot%\System32\dllcache\OEMBIOS.CAT -> [Ver = | Size = 7382 bytes | Created Date = 16/01/2008 06:53:25 | Attr = ] pinball.exe -> %SystemRoot%\System32\dllcache\pinball.exe -> Cinematronics [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 281088 bytes | Created Date = 16/01/2008 07:06:22 | Attr = ] pintlcsa.dll -> %SystemRoot%\System32\dllcache\pintlcsa.dll -> [Ver = | Size = 175104 bytes | Created Date = 16/01/2008 07:11:09 | Attr = ] prc.nls -> %SystemRoot%\System32\dllcache\prc.nls -> [Ver = | Size = 83748 bytes | Created Date = 16/01/2008 07:11:10 | Attr = ] prcp.nls -> %SystemRoot%\System32\dllcache\prcp.nls -> [Ver = | Size = 83748 bytes | Created Date = 16/01/2008 07:11:11 | Attr = ] psisdecd.dll -> %SystemRoot%\System32\dllcache\psisdecd.dll -> [Ver = | Size = 363520 bytes | Created Date = 16/01/2008 20:18:59 | Attr = ] psisrndr.ax -> %SystemRoot%\System32\dllcache\psisrndr.ax -> [Ver = | Size = 33280 bytes | Created Date = 16/01/2008 20:18:58 | Attr = ] r1033tts.lxa -> %SystemRoot%\System32\dllcache\r1033tts.lxa -> [Ver = | Size = 605050 bytes | Created Date = 16/01/2008 06:53:47 | Attr = ] rw330ext.dll -> %SystemRoot%\System32\dllcache\rw330ext.dll -> Ricoh Co., Ltd. [Ver = 5, 0, 2419, 1 | Size = 26624 bytes | Created Date = 16/01/2008 07:11:14 | Attr = ] rwia001.dll -> %SystemRoot%\System32\dllcache\rwia001.dll -> Ricoh Co., Ltd. [Ver = 5, 0, 2419, 1 | Size = 79872 bytes | Created Date = 16/01/2008 07:11:14 | Attr = ] rwia330.dll -> %SystemRoot%\System32\dllcache\rwia330.dll -> Ricoh Co., Ltd. [Ver = 5, 0, 2419, 1 | Size = 79872 bytes | Created Date = 16/01/2008 07:11:14 | Attr = ] sam.sdf -> %SystemRoot%\System32\dllcache\sam.sdf -> [Ver = | Size = 888 bytes | Created Date = 16/01/2008 06:53:47 | Attr = ] sam.spd -> %SystemRoot%\System32\dllcache\sam.spd -> [Ver = | Size = 1685606 bytes | Created Date = 16/01/2008 06:53:47 | Attr = ] SP2.CAT -> %SystemRoot%\System32\dllcache\SP2.CAT -> [Ver = | Size = 1042903 bytes | Created Date = 16/01/2008 06:53:24 | Attr = ] spxcoins.dll -> %SystemRoot%\System32\dllcache\spxcoins.dll -> Perle Systems Ltd. [Ver = 1.0.0.0007 | Size = 24661 bytes | Created Date = 16/01/2008 06:53:35 | Attr = ] srframe.mmf -> %SystemRoot%\System32\dllcache\srframe.mmf -> [Ver = | Size = 984 bytes | Created Date = 16/01/2008 07:08:08 | Attr = ] tabletpc.cat -> %SystemRoot%\System32\dllcache\tabletpc.cat -> [Ver = | Size = 110116 bytes | Created Date = 16/01/2008 06:53:25 | Attr = ] wmerrenu.cat -> %SystemRoot%\System32\dllcache\wmerrenu.cat -> [Ver = | Size = 7334 bytes | Created Date = 16/01/2008 06:53:24 | Attr = ] xjis.nls -> %SystemRoot%\System32\dllcache\xjis.nls -> [Ver = | Size = 28288 bytes | Created Date = 16/01/2008 07:11:32 | Attr = ] aavmker4.sys -> %SystemRoot%\System32\drivers\aavmker4.sys -> ALWIL Software [Ver = 4.8.1142.0 | Size = 26752 bytes | Created Date = 22/03/2008 21:46:18 | Attr = ] AegisP.sys -> %SystemRoot%\System32\drivers\AegisP.sys -> Meetinghouse Data Communications [Ver = 3.0.0.6 | Size = 15939 bytes | Created Date = 16/01/2008 07:48:24 | Attr = ] aswFsBlk.sys -> %SystemRoot%\System32\drivers\aswFsBlk.sys -> ALWIL Software [Ver = 4.8.1142.0 | Size = 20560 bytes | Created Date = 22/03/2008 22:12:14 | Attr = ] aswmon.sys -> %SystemRoot%\System32\drivers\aswmon.sys -> ALWIL Software [Ver = 4.7.1098.0 | Size = 93264 bytes | Created Date = 22/03/2008 21:46:16 | Attr = ] aswmon2.sys -> %SystemRoot%\System32\drivers\aswmon2.sys -> ALWIL Software [Ver = 4.8.1142.0 | Size = 94544 bytes | Created Date = 22/03/2008 21:46:16 | Attr = ] aswRdr.sys -> %SystemRoot%\System32\drivers\aswRdr.sys -> ALWIL Software [Ver = 4.8.1142.0 | Size = 23152 bytes | Created Date = 22/03/2008 21:46:18 | Attr = ] aswSP.sys -> %SystemRoot%\System32\drivers\aswSP.sys -> ALWIL Software [Ver = 4.8.1142.0 | Size = 57424 bytes | Created Date = 22/03/2008 22:12:14 | Attr = ] aswTdi.sys -> %SystemRoot%\System32\drivers\aswTdi.sys -> ALWIL Software [Ver = 4.8.1142.0 | Size = 42912 bytes | Created Date = 22/03/2008 21:46:18 | Attr = ] avg7core.sys -> %SystemRoot%\System32\drivers\avg7core.sys -> GRISOFT, s.r.o. [Ver = 7.5.0.498 | Size = 821856 bytes | Created Date = 19/01/2008 22:22:20 | Attr = ] avg7rsw.sys -> %SystemRoot%\System32\drivers\avg7rsw.sys -> GRISOFT, s.r.o. [Ver = 7,0,0,340 | Size = 4224 bytes | Created Date = 19/01/2008 22:22:22 | Attr = ] avg7rsxp.sys -> %SystemRoot%\System32\drivers\avg7rsxp.sys -> GRISOFT, s.r.o. [Ver = 7.5.0.442 | Size = 27776 bytes | Created Date = 19/01/2008 22:22:22 | Attr = ] avgtdi.sys -> %SystemRoot%\System32\drivers\avgtdi.sys -> GRISOFT, s.r.o. [Ver = 7,0,0,346 | Size = 4960 bytes | Created Date = 19/01/2008 22:22:23 | Attr = ] disdn -> %SystemRoot%\System32\drivers\disdn -> [Folder | Created Date = 16/01/2008 06:47:00 | Attr = ] etc -> %SystemRoot%\System32\drivers\etc -> [Folder | Created Date = 16/01/2008 06:47:00 | Attr = ] fetnd5b.sys -> %SystemRoot%\System32\drivers\fetnd5b.sys -> VIA Technologies, Inc. [Ver = 3.32.00.0417 | Size = 42496 bytes | Created Date = 16/01/2008 07:25:25 | Attr = ] gdihook5.sys -> %SystemRoot%\System32\drivers\gdihook5.sys -> NetSupport Ltd [Ver = V10.00 | Size = 24634 bytes | Created Date = 19/01/2008 10:30:53 | Attr = ] ggsemc.sys -> %SystemRoot%\System32\drivers\ggsemc.sys -> Sony Ericsson Mobile Communications [Ver = 1.0.0.5 | Size = 8704 bytes | Created Date = 11/03/2008 10:58:30 | Attr = ] hamachi.sys -> %SystemRoot%\System32\drivers\hamachi.sys -> LogMeIn, Inc. [Ver = 6.0.2.2 | Size = 25280 bytes | Created Date = 05/02/2008 22:27:12 | Attr = ] pcisys.sys -> %SystemRoot%\System32\drivers\pcisys.sys -> NetSupport Ltd [Ver = V10.00D | Size = 32824 bytes | Created Date = 19/01/2008 10:30:56 | Attr = ] PnkBstrK.sys -> %SystemRoot%\System32\drivers\PnkBstrK.sys -> [Ver = | Size = 22328 bytes | Created Date = 26/01/2008 16:56:12 | Attr = ] rt2500usb.sys -> %SystemRoot%\System32\drivers\rt2500usb.sys -> Ralink Technology Inc. [Ver = 2.00.00.0000 | Size = 147328 bytes | Created Date = 16/01/2008 07:46:45 | Attr = ] s816bus.sys -> %SystemRoot%\System32\drivers\s816bus.sys -> MCCI Corporation [Ver = V4.40 | Size = 81832 bytes | Created Date = 15/03/2008 21:54:44 | Attr = R ] s816cm.sys -> %SystemRoot%\System32\drivers\s816cm.sys -> MCCI Corporation [Ver = V4.40 | Size = 11176 bytes | Created Date = 15/03/2008 21:54:48 | Attr = R ] s816cmnt.sys -> %SystemRoot%\System32\drivers\s816cmnt.sys -> MCCI Corporation [Ver = V4.40 | Size = 11176 bytes | Created Date = 15/03/2008 21:54:48 | Attr = R ] s816cr.sys -> %SystemRoot%\System32\drivers\s816cr.sys -> MCCI Corporation [Ver = V4.40 | Size = 9768 bytes | Created Date = 15/03/2008 21:55:03 | Attr = R ] s816mdfl.sys -> %SystemRoot%\System32\drivers\s816mdfl.sys -> MCCI Corporation [Ver = V4.40 | Size = 13864 bytes | Created Date = 15/03/2008 21:54:48 | Attr = R ] s816mdm.sys -> %SystemRoot%\System32\drivers\s816mdm.sys -> MCCI Corporation [Ver = V4.40 | Size = 107304 bytes | Created Date = 15/03/2008 21:54:48 | Attr = R ] s816mgmt.sys -> %SystemRoot%\System32\drivers\s816mgmt.sys -> MCCI Corporation [Ver = V4.40 | Size = 99112 bytes | Created Date = 15/03/2008 21:55:02 | Attr = R ] s816nd5.sys -> %SystemRoot%\System32\drivers\s816nd5.sys -> MCCI Corporation [Ver = V4.40 | Size = 21928 bytes | Created Date = 15/03/2008 21:55:28 | Attr = R ] s816obex.sys -> %SystemRoot%\System32\drivers\s816obex.sys -> MCCI Corporation [Ver = V4.40 | Size = 97320 bytes | Created Date = 15/03/2008 21:54:58 | Attr = R ] s816unic.sys -> %SystemRoot%\System32\drivers\s816unic.sys -> MCCI [Ver = V4.40 | Size = 97704 bytes | Created Date = 15/03/2008 21:55:03 | Attr = R ] s816wh.sys -> %SystemRoot%\System32\drivers\s816wh.sys -> MCCI Corporation [Ver = V4.40 | Size = 11176 bytes | Created Date = 15/03/2008 21:54:44 | Attr = R ] s816whnt.sys -> %SystemRoot%\System32\drivers\s816whnt.sys -> MCCI Corporation [Ver = V4.40 | Size = 11176 bytes | Created Date = 15/03/2008 21:54:44 | Attr = R ] tmcomm.sys -> %SystemRoot%\System32\drivers\tmcomm.sys -> Trend Micro Inc. [Ver = 1.6.0.1059 | Size = 102664 bytes | Created Date = 22/03/2008 15:11:10 | Attr = ] UMDF -> %SystemRoot%\System32\drivers\UMDF -> [Folder | Created Date = 16/01/2008 19:30:53 | Attr = ] MsftWdf_user_01_00_00.Wdf -> %SystemRoot%\System32\drivers\UMDF\MsftWdf_user_01_00_00.Wdf -> [Ver = | Size = 0 bytes | Created Date = 16/01/2008 19:30:54 | Attr = H ] USBCRFT.SYS -> %SystemRoot%\System32\drivers\USBCRFT.SYS -> ICSI Technology Ltd. [Ver = V2.11.0718 | Size = 17408 bytes | Created Date = 16/01/2008 07:24:06 | Attr = ] vim.sys -> %SystemRoot%\System32\drivers\vim.sys -> [Ver = | Size = 5248 bytes | Created Date = 27/01/2008 13:07:20 | Attr = ] x10ufx2.sys -> %SystemRoot%\System32\drivers\x10ufx2.sys -> X10 Wireless Technology, Inc. [Ver = 3.0.0.187 | Size = 17792 bytes | Created Date = 16/01/2008 07:57:05 | Attr = ] $winnt$.inf -> %SystemRoot%\System32\$winnt$.inf -> [Ver = | Size = 261 bytes | Created Date = 16/01/2008 06:51:58 | Attr = ] 1025 -> %SystemRoot%\System32\1025 -> [Folder | Created Date = 16/01/2008 06:47:00 | Attr = ] 9 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> 1028 -> %SystemRoot%\System32\1028 -> [Folder | Created Date = 16/01/2008 06:47:00 | Attr = ] 1031 -> %SystemRoot%\System32\1031 -> [Folder | Created Date = 16/01/2008 06:47:00 | Attr = ] 1033 -> %SystemRoot%\System32\1033 -> [Folder | Created Date = 16/01/2008 06:47:00 | Attr = ] 1037 -> %SystemRoot%\System32\1037 -> [Folder | Created Date = 16/01/2008 06:47:00 | Attr = ] 1041 -> %SystemRoot%\System32\1041 -> [Folder | Created Date = 16/01/2008 06:47:00 | Attr = ] 1042 -> %SystemRoot%\System32\1042 -> [Folder | Created Date = 16/01/2008 06:47:00 | Attr = ] 1054 -> %SystemRoot%\System32\1054 -> [Folder | Created Date = 16/01/2008 06:47:00 | Attr = ] 2052 -> %SystemRoot%\System32\2052 -> [Folder | Created Date = 16/01/2008 06:47:00 | Attr = ] 3076 -> %SystemRoot%\System32\3076 -> [Folder | Created Date = 16/01/2008 06:47:00 | Attr = ] 3com_dmi -> %SystemRoot%\System32\3com_dmi -> [Folder | Created Date = 16/01/2008 06:47:00 | Attr = ] actskin4.ocx -> %SystemRoot%\System32\actskin4.ocx -> [Ver = 4, 2, 7, 3 | Size = 380928 bytes | Created Date = 22/03/2008 21:46:04 | Attr = ] amcompat.tlb -> %SystemRoot%\System32\amcompat.tlb -> [Ver = | Size = 16832 bytes | Created Date = 16/01/2008 07:09:41 | Attr = ] AsUninst.exe -> %SystemRoot%\System32\AsUninst.exe -> Willow Software [Ver = 1.00.0016 | Size = 75264 bytes | Created Date = 01/03/2008 20:18:48 | Attr = ] asutl8.dll -> %SystemRoot%\System32\asutl8.dll -> [Ver = | Size = 29696 bytes | Created Date = 01/03/2008 20:18:48 | Attr = ] aswBoot.exe -> %SystemRoot%\System32\aswBoot.exe -> ALWIL Software [Ver = 4, 8, 1142, 0 | Size = 1141112 bytes | Created Date = 22/03/2008 21:46:04 | Attr = ] ati2sgag.exe -> %SystemRoot%\System32\ati2sgag.exe -> [Ver = 5.13.0027 | Size = 593920 bytes | Created Date = 16/01/2008 07:17:36 | Attr = ] autoexec.nt -> %SystemRoot%\System32\autoexec.nt -> [Ver = | Size = 1765 bytes | Created Date = 19/01/2008 10:30:56 | Attr = ] AvastSS.scr -> %SystemRoot%\System32\AvastSS.scr -> ALWIL Software [Ver = 4, 8, 1142, 0 | Size = 95608 bytes | Created Date = 22/03/2008 21:46:17 | Attr = ] b4fm.dll -> %SystemRoot%\System32\b4fm.dll -> [Ver = | Size = 223744 bytes | Created Date = 29/02/2008 04:14:04 | Attr = ] bopomofo.uce -> %SystemRoot%\System32\bopomofo.uce -> [Ver = | Size = 22984 bytes | Created Date = 16/01/2008 07:06:39 | Attr = ] CatRoot -> %SystemRoot%\System32\CatRoot -> [Folder | Created Date = 16/01/2008 06:53:15 | Attr = ] CatRoot2 -> %SystemRoot%\System32\CatRoot2 -> [Folder | Created Date = 16/01/2008 06:53:15 | Attr = ] cdplayer.exe.manifest -> %SystemRoot%\System32\cdplayer.exe.manifest -> [Ver = | Size = 749 bytes | Created Date = 16/01/2008 07:08:49 | Attr = RH ] cfgocvga.dll -> %SystemRoot%\System32\cfgocvga.dll -> [Ver = | Size = 2004 bytes | Created Date = 18/02/2008 17:20:08 | Attr = ] clhook4.dll -> %SystemRoot%\System32\clhook4.dll -> [Ver = | Size = 73785 bytes | Created Date = 19/01/2008 10:30:56 | Attr = ] CmdLineExt.dll -> %SystemRoot%\System32\CmdLineExt.dll -> Sony DADC Austria AG. [Ver = 1,0,201,0 | Size = 98304 bytes | Created Date = 18/01/2008 19:32:37 | Attr = ] Com -> %SystemRoot%\System32\Com -> [Folder | Created Date = 16/01/2008 07:06:17 | Attr = ] config -> %SystemRoot%\System32\config -> [Folder | Created Date = 16/01/2008 06:47:00 | Attr = ] CONFIG.NT -> %SystemRoot%\System32\CONFIG.NT -> [Ver = | Size = 2626 bytes | Created Date = 16/01/2008 07:09:44 | Attr = ] CSVer.dll -> %SystemRoot%\System32\CSVer.dll -> Windows XP Bundled build C-Centric Single User [Ver = 8, 3, 1, 1010 | Size = 53248 bytes | Created Date = 24/02/2008 20:32:55 | Attr = ] c_10006.nls -> %SystemRoot%\System32\c_10006.nls -> [Ver = | Size = 66082 bytes | Created Date = 16/01/2008 06:53:40 | Attr = ] c_10007.nls -> %SystemRoot%\System32\c_10007.nls -> [Ver = | Size = 66082 bytes | Created Date = 16/01/2008 06:53:42 | Attr = ] c_10010.nls -> %SystemRoot%\System32\c_10010.nls -> [Ver = | Size = 66082 bytes | Created Date = 16/01/2008 06:53:37 | Attr = ] c_10017.nls -> %SystemRoot%\System32\c_10017.nls -> [Ver = | Size = 66082 bytes | Created Date = 16/01/2008 06:53:42 | Attr = ] c_10029.nls -> %SystemRoot%\System32\c_10029.nls -> [Ver = | Size = 66082 bytes | Created Date = 16/01/2008 06:53:37 | Attr = ] c_10081.nls -> %SystemRoot%\System32\c_10081.nls -> [Ver = | Size = 66082 bytes | Created Date = 16/01/2008 06:53:43 | Attr = ] c_10082.nls -> %SystemRoot%\System32\c_10082.nls -> [Ver = | Size = 66082 bytes | Created Date = 16/01/2008 06:53:37 | Attr = ] c_20127.nls -> %SystemRoot%\System32\c_20127.nls -> [Ver = | Size = 66082 bytes | Created Date = 16/01/2008 06:53:35 | Attr = ] C_28594.NLS -> %SystemRoot%\System32\C_28594.NLS -> [Ver = | Size = 66082 bytes | Created Date = 16/01/2008 06:53:39 | Attr = ] C_28595.NLS -> %SystemRoot%\System32\C_28595.NLS -> [Ver = | Size = 66082 bytes | Created Date = 16/01/2008 06:53:42 | Attr = ] C_28597.NLS -> %SystemRoot%\System32\C_28597.NLS -> [Ver = | Size = 66082 bytes | Created Date = 16/01/2008 06:53:40 | Attr = ] c_28599.nls -> %SystemRoot%\System32\c_28599.nls -> [Ver = | Size = 66082 bytes | Created Date = 16/01/2008 06:53:43 | Attr = ] c_28603.nls -> %SystemRoot%\System32\c_28603.nls -> [Ver = | Size = 66082 bytes | Created Date = 16/01/2008 06:53:45 | Attr = ] c_737.nls -> %SystemRoot%\System32\c_737.nls -> [Ver = | Size = 66594 bytes | Created Date = 16/01/2008 06:53:40 | Attr = ] c_852.nls -> %SystemRoot%\System32\c_852.nls -> [Ver = | Size = 66594 bytes | Created Date = 16/01/2008 06:53:37 | Attr = ] c_855.nls -> %SystemRoot%\System32\c_855.nls -> [Ver = | Size = 66594 bytes | Created Date = 16/01/2008 06:53:39 | Attr = ] c_857.nls -> %SystemRoot%\System32\c_857.nls -> [Ver = | Size = 66594 bytes | Created Date = 16/01/2008 06:53:43 | Attr = ] c_866.nls -> %SystemRoot%\System32\c_866.nls -> [Ver = | Size = 66594 bytes | Created Date = 16/01/2008 06:53:39 | Attr = ] c_869.nls -> %SystemRoot%\System32\c_869.nls -> [Ver = | Size = 66594 bytes | Created Date = 16/01/2008 06:53:40 | Attr = ] c_875.nls -> %SystemRoot%\System32\c_875.nls -> [Ver = | Size = 66082 bytes | Created Date = 16/01/2008 06:53:40 | Attr = ] DEDriverDLL.dll -> %SystemRoot%\System32\DEDriverDLL.dll -> [Ver = | Size = 45056 bytes | Created Date = 16/01/2008 07:46:45 | Attr = ] desktop.ini -> %SystemRoot%\System32\desktop.ini -> [Ver = | Size = 2 bytes | Created Date = 16/01/2008 07:08:12 | Attr = ] dgrpsetu.dll -> %SystemRoot%\System32\dgrpsetu.dll -> Digi International, Inc. [Ver = 2.3.7 | Size = 176157 bytes | Created Date = 16/01/2008 06:53:35 | Attr = ] dgsetup.dll -> %SystemRoot%\System32\dgsetup.dll -> Digi International [Ver = v3.7.3.0 | Size = 85020 bytes | Created Date = 16/01/2008 06:53:35 | Attr = ] dhcp -> %SystemRoot%\System32\dhcp -> [Folder | Created Date = 16/01/2008 06:47:00 | Attr = ] DirectX -> %SystemRoot%\System32\DirectX -> [Folder | Created Date = 16/01/2008 07:08:31 | Attr = ] dllcache -> %SystemRoot%\System32\dllcache -> [Folder | Created Date = 16/01/2008 06:47:00 | Attr = RHS] drivers -> %SystemRoot%\System32\drivers -> [Folder | Created Date = 16/01/2008 06:47:00 | Attr = H ] DRVSTORE -> %SystemRoot%\System32\DRVSTORE -> [Folder | Created Date = 24/02/2008 20:32:55 | Attr = ] emptyregdb.dat -> %SystemRoot%\System32\emptyregdb.dat -> [Ver = | Size = 21640 bytes | Created Date = 16/01/2008 07:07:16 | Attr = ] en-US -> %SystemRoot%\System32\en-US -> [Folder | Created Date = 16/01/2008 08:48:51 | Attr = ] EqnClass.Dll -> %SystemRoot%\System32\EqnClass.Dll -> Equinox Systems Inc. [Ver = 5.0u(58) | Size = 103424 bytes | Created Date = 16/01/2008 06:53:34 | Attr = ] export -> %SystemRoot%\System32\export -> [Folder | Created Date = 16/01/2008 06:47:00 | Attr = ] fdsv.exe -> %SystemRoot%\System32\fdsv.exe -> Smallfrogs Studio [Ver = 1.0.0.10 | Size = 73728 bytes | Created Date = 27/03/2008 07:49:42 | Attr = ] FNTCACHE.DAT -> %SystemRoot%\System32\FNTCACHE.DAT -> [Ver = | Size = 267008 bytes | Created Date = 16/01/2008 06:52:50 | Attr = ] gb2312.uce -> %SystemRoot%\System32\gb2312.uce -> [Ver = | Size = 24006 bytes | Created Date = 16/01/2008 07:06:39 | Attr = ] gdihook5.dll -> %SystemRoot%\System32\gdihook5.dll -> NetSupport Ltd [Ver = V10.00 | Size = 25146 bytes | Created Date = 19/01/2008 10:30:53 | Attr = ] grep.exe -> %SystemRoot%\System32\grep.exe -> [Ver = | Size = 80412 bytes | Created Date = 27/03/2008 07:49:42 | Attr = ] hticons.dll -> %SystemRoot%\System32\hticons.dll -> Hilgraeve, Inc. [Ver = 5.1.2600.0 | Size = 44544 bytes | Created Date = 16/01/2008 07:06:45 | Attr = ] hypertrm.dll -> %SystemRoot%\System32\hypertrm.dll -> Hilgraeve, Inc. [Ver = 5.1.2600.2563 | Size = 347136 bytes | Created Date = 16/01/2008 07:06:21 | Attr = ] ias -> %SystemRoot%\System32\ias -> [Folder | Created Date = 16/01/2008 06:47:00 | Attr = ] icsxml -> %SystemRoot%\System32\icsxml -> [Folder | Created Date = 16/01/2008 06:47:00 | Attr = ] ideograf.uce -> %SystemRoot%\System32\ideograf.uce -> [Ver = | Size = 60458 bytes | Created Date = 16/01/2008 07:06:39 | Attr = ] IME -> %SystemRoot%\System32\IME -> [Folder | Created Date = 16/01/2008 06:47:00 | Attr = ] inetsrv -> %SystemRoot%\System32\inetsrv -> [Folder | Created Date = 16/01/2008 06:47:00 | Attr = ] Install2500USB.dll -> %SystemRoot%\System32\Install2500USB.dll -> [Ver = | Size = 73728 bytes | Created Date = 16/01/2008 07:46:45 | Attr = ] INSTMON.EXE -> %SystemRoot%\System32\INSTMON.EXE -> [Ver = | Size = 40960 bytes | Created Date = 20/01/2008 11:32:31 | Attr = ] isrdbg32.dll -> %SystemRoot%\System32\isrdbg32.dll -> Intel Corporation [Ver = 0.0 | Size = 32768 bytes | Created Date = 16/01/2008 07:07:46 | Attr = ] java.exe -> %SystemRoot%\System32\java.exe -> Sun Microsystems, Inc. [Ver = 6.0.50.13 | Size = 135168 bytes | Created Date = 27/03/2008 08:52:02 | Attr = ] javacpl.cpl -> %SystemRoot%\System32\javacpl.cpl -> Sun Microsystems, Inc. [Ver = 6.0.50.13 | Size = 69632 bytes | Created Date = 20/01/2008 16:43:45 | Attr = ] javaw.exe -> %SystemRoot%\System32\javaw.exe -> Sun Microsystems, Inc. [Ver = 6.0.50.13 | Size = 135168 bytes | Created Date = 27/03/2008 08:52:02 | Attr = ] javaws.exe -> %SystemRoot%\System32\javaws.exe -> Sun Microsystems, Inc. [Ver = 6.0.50.13 | Size = 139264 bytes | Created Date = 27/03/2008 08:52:02 | Attr = ] kanji_1.uce -> %SystemRoot%\System32\kanji_1.uce -> [Ver = | Size = 6948 bytes | Created Date = 16/01/2008 07:06:39 | Attr = ] kanji_2.uce -> %SystemRoot%\System32\kanji_2.uce -> [Ver = | Size = 8484 bytes | Created Date = 16/01/2008 07:06:39 | Attr = ] korean.uce -> %SystemRoot%\System32\korean.uce -> [Ver = | Size = 12876 bytes | Created Date = 16/01/2008 07:06:39 | Attr = ] LEX2KUSB.DLL -> %SystemRoot%\System32\LEX2KUSB.DLL -> Lexmark International, Inc. [Ver = 8.19 | Size = 196096 bytes | Created Date = 20/01/2008 11:32:47 | Attr = ] LEXBCE.DLL -> %SystemRoot%\System32\LEXBCE.DLL -> Lexmark International, Inc. [Ver = 8.19 | Size = 147456 bytes | Created Date = 20/01/2008 11:32:47 | Attr = ] LEXBCES.EXE -> %SystemRoot%\System32\LEXBCES.EXE -> Lexmark International, Inc. [Ver = 8.19 | Size = 303104 bytes | Created Date = 20/01/2008 11:32:47 | Attr = ] lexlmpm.dll -> %SystemRoot%\System32\lexlmpm.dll -> Lexmark International, Inc. [Ver = 8.19 | Size = 192512 bytes | Created Date = 20/01/2008 11:32:47 | Attr = ] LEXP2P32.DLL -> %SystemRoot%\System32\LEXP2P32.DLL -> Lexmark International, Inc. [Ver = 8.19 | Size = 201216 bytes | Created Date = 20/01/2008 11:32:47 | Attr = ] LEXPING.EXE -> %SystemRoot%\System32\LEXPING.EXE -> Lexmark International, Inc. [Ver = 8,10,0,0 | Size = 155648 bytes | Created Date = 20/01/2008 11:32:32 | Attr = ] LEXPPS.EXE -> %SystemRoot%\System32\LEXPPS.EXE -> Lexmark International, Inc. [Ver = 8.19 | Size = 174592 bytes | Created Date = 20/01/2008 11:32:47 | Attr = ] LogFiles -> %SystemRoot%\System32\LogFiles -> [Folder | Created Date = 16/01/2008 19:30:53 | Attr = ] logonui.exe.manifest -> %SystemRoot%\System32\logonui.exe.manifest -> [Ver = | Size = 488 bytes | Created Date = 16/01/2008 07:08:54 | Attr = RH ] LXBF.LOC -> %SystemRoot%\System32\LXBF.LOC -> [Ver = | Size = 447 bytes | Created Date = 20/01/2008 11:32:32 | Attr = ] LXBFCFG.EXE -> %SystemRoot%\System32\LXBFCFG.EXE -> Lexmark International, Inc. [Ver = 8,10,0,0 | Size = 126976 bytes | Created Date = 20/01/2008 11:32:31 | Attr = ] lxbfcinf.dll -> %SystemRoot%\System32\lxbfcinf.dll -> Lexmark International, Inc. [Ver = 1.0.12.0 | Size = 57344 bytes | Created Date = 20/01/2008 11:32:33 | Attr = ] lxbfcoin.dll -> %SystemRoot%\System32\lxbfcoin.dll -> Lexmark International, Inc. [Ver = 1.0.12.0 | Size = 49152 bytes | Created Date = 20/01/2008 11:32:33 | Attr = ] lxbfcoin.ini -> %SystemRoot%\System32\lxbfcoin.ini -> [Ver = | Size = 188 bytes | Created Date = 20/01/2008 11:32:33 | Attr = ] lxbfcomm.dll -> %SystemRoot%\System32\lxbfcomm.dll -> Lexmark International, Inc. [Ver = 8,10,0,0 | Size = 286720 bytes | Created Date = 20/01/2008 11:32:48 | Attr = ] LXBFCU.DLL -> %SystemRoot%\System32\LXBFCU.DLL -> Lexmark International Inc. [Ver = 1.0.12.0 | Size = 69632 bytes | Created Date = 20/01/2008 11:32:31 | Attr = ] LXBFCUR.DLL -> %SystemRoot%\System32\LXBFCUR.DLL -> Lexmark International Inc. [Ver = 1.0.12.0 | Size = 90112 bytes | Created Date = 20/01/2008 11:32:32 | Attr = ] LXBFDRV.CNT -> %SystemRoot%\System32\LXBFDRV.CNT -> [Ver = | Size = 2190 bytes | Created Date = 20/01/2008 11:32:33 | Attr = ] LXBFDRV.HLP -> %SystemRoot%\System32\LXBFDRV.HLP -> [Ver = | Size = 495089 bytes | Created Date = 20/01/2008 11:32:33 | Attr = ] LXBFIH.EXE -> %SystemRoot%\System32\LXBFIH.EXE -> [Ver = | Size = 86016 bytes | Created Date = 20/01/2008 11:32:32 | Attr = ] LXBFJSWR.DLL -> %SystemRoot%\System32\LXBFJSWR.DLL -> Lexmark International Inc. [Ver = 0.1.23.0 | Size = 479232 bytes | Created Date = 20/01/2008 11:32:32 | Attr = ] LXBFLCNP.DLL -> %SystemRoot%\System32\LXBFLCNP.DLL -> [Ver = | Size = 77824 bytes | Created Date = 20/01/2008 11:32:31 | Attr = ] LXBFLCNT.DLL -> %SystemRoot%\System32\LXBFLCNT.DLL -> Lexmark International, Inc. [Ver = 8,10,0,0 | Size = 217088 bytes | Created Date = 20/01/2008 11:32:31 | Attr = ] LXBFLPA.CNT -> %SystemRoot%\System32\LXBFLPA.CNT -> [Ver = | Size = 19 bytes | Created Date = 20/01/2008 11:32:33 | Attr = ] LXBFLPA.HLP -> %SystemRoot%\System32\LXBFLPA.HLP -> [Ver = | Size = 1510655 bytes | Created Date = 20/01/2008 11:32:33 | Attr = ] LXBFLSNT.EXE -> %SystemRoot%\System32\LXBFLSNT.EXE -> Lexmark International, Inc. [Ver = 8,10,0,0 | Size = 544768 bytes | Created Date = 20/01/2008 11:32:31 | Attr = ] LXBFMA.CNT -> %SystemRoot%\System32\LXBFMA.CNT -> [Ver = | Size = 249 bytes | Created Date = 20/01/2008 11:32:33 | Attr = ] LXBFPMNT.DLL -> %SystemRoot%\System32\LXBFPMNT.DLL -> Lexmark International, Inc. [Ver = 8,10,0,0 | Size = 286720 bytes | Created Date = 20/01/2008 11:32:31 | Attr = ] lxbfpwr.dll -> %SystemRoot%\System32\lxbfpwr.dll -> Lexmark International, Inc. [Ver = 0, 1, 61, 1 | Size = 73728 bytes | Created Date = 20/01/2008 11:32:48 | Attr = ] lxbfscin.dll -> %SystemRoot%\System32\lxbfscin.dll -> Lexmark International, Inc. [Ver = 1.0.12.0 | Size = 69632 bytes | Created Date = 20/01/2008 11:32:34 | Attr = ] LXBFUTIL.DLL -> %SystemRoot%\System32\LXBFUTIL.DLL -> Lexmark International Inc. [Ver = 1.0.12.0 | Size = 352256 bytes | Created Date = 20/01/2008 11:32:32 | Attr = ] lxbfvs.dll -> %SystemRoot%\System32\lxbfvs.dll -> [Ver = | Size = 40960 bytes | Created Date = 20/01/2008 11:32:48 | Attr = ] Macromed -> %SystemRoot%\System32\Macromed -> [Folder | Created Date = 16/01/2008 07:07:59 | Attr = ] Microsoft -> %SystemRoot%\System32\Microsoft -> [Folder | Created Date = 16/01/2008 07:13:28 | Attr = S] MsDtc -> %SystemRoot%\System32\MsDtc -> [Folder | Created Date = 16/01/2008 07:06:18 | Attr = ] msdtcprf.h -> %SystemRoot%\System32\msdtcprf.h -> [Ver = | Size = 768 bytes | Created Date = 16/01/2008 07:06:37 | Attr = ] msdtcprf.ini -> %SystemRoot%\System32\msdtcprf.ini -> [Ver = | Size = 1931 bytes | Created Date = 16/01/2008 07:06:37 | Attr = ] MSDvbNP.ax -> %SystemRoot%\System32\MSDvbNP.ax -> [Ver = | Size = 56832 bytes | Created Date = 16/01/2008 20:18:59 | Attr = ] mui -> %SystemRoot%\System32\mui -> [Folder | Created Date = 16/01/2008 06:47:00 | Attr = ] ncpa.cpl.manifest -> %SystemRoot%\System32\ncpa.cpl.manifest -> [Ver = | Size = 749 bytes | Created Date = 16/01/2008 07:08:49 | Attr = RH ] npp -> %SystemRoot%\System32\npp -> [Folder | Created Date = 16/01/2008 06:47:00 | Attr = ] nscompat.tlb -> %SystemRoot%\System32\nscompat.tlb -> [Ver = | Size = 23392 bytes | Created Date = 16/01/2008 07:09:41 | Attr = ] ntsim.sys -> %SystemRoot%\System32\ntsim.sys -> VIA Networking Technologies, Inc. [Ver = 1.07.00.0007 | Size = 7040 bytes | Created Date = 16/01/2008 07:25:25 | Attr = ] nwc.cpl.manifest -> %SystemRoot%\System32\nwc.cpl.manifest -> [Ver = | Size = 749 bytes | Created Date = 16/01/2008 07:08:49 | Attr = RH ] oobe -> %SystemRoot%\System32\oobe -> [Folder | Created Date = 16/01/2008 06:47:00 | Attr = ] pcigina.dll -> %SystemRoot%\System32\pcigina.dll -> [Ver = | Size = 28729 bytes | Created Date = 19/01/2008 10:30:56 | Attr = ] pcimon.dll -> %SystemRoot%\System32\pcimon.dll -> [Ver = | Size = 98360 bytes | Created Date = 19/01/2008 10:30:56 | Attr = ] pcimsg.dll -> %SystemRoot%\System32\pcimsg.dll -> [Ver = | Size = 36912 bytes | Created Date = 19/01/2008 10:30:56 | Attr = ] pcisys.ntk -> %SystemRoot%\System32\pcisys.ntk -> [Ver = | Size = 8 bytes | Created Date = 19/01/2008 10:30:57 | Attr = ] pcivdd.dll -> %SystemRoot%\System32\pcivdd.dll -> [Ver = | Size = 20536 bytes | Created Date = 19/01/2008 10:30:56 | Attr = ] PerfStringBackup.INI -> %SystemRoot%\System32\PerfStringBackup.INI -> [Ver = | Size = 555932 bytes | Created Date = 16/01/2008 06:53:50 | Attr = ] PnkBstrA.exe -> %SystemRoot%\System32\PnkBstrA.exe -> [Ver = | Size = 66872 bytes | Created Date = 26/01/2008 16:55:40 | Attr = ] PnkBstrB.exe -> %SystemRoot%\System32\PnkBstrB.exe -> [Ver = | Size = 107832 bytes | Created Date = 26/01/2008 16:56:09 | Attr = ] PreInstall -> %SystemRoot%\System32\PreInstall -> [Folder | Created Date = 16/01/2008 07:58:29 | Attr = ] PsisDecd.dll -> %SystemRoot%\System32\PsisDecd.dll -> [Ver = | Size = 363520 bytes | Created Date = 16/01/2008 20:18:59 | Attr = ] PsisRndr.ax -> %SystemRoot%\System32\PsisRndr.ax -> [Ver = | Size = 33280 bytes | Created Date = 16/01/2008 20:18:58 | Attr = ] ras -> %SystemRoot%\System32\ras -> [Folder | Created Date = 16/01/2008 06:47:00 | Attr = ] ReinstallBackups -> %SystemRoot%\System32\ReinstallBackups -> [Folder | Created Date = 16/01/2008 07:24:25 | Attr = ] Restore -> %SystemRoot%\System32\Restore -> [Folder | Created Date = 16/01/2008 07:07:47 | Attr = ] RoboEX32.DLL -> %SystemRoot%\System32\RoboEX32.DLL -> Blue Sky Software Corporation. [Ver = 7.00.142 | Size = 317952 bytes | Created Date = 19/01/2008 10:29:56 | Attr = ] sapi.cpl.manifest -> %SystemRoot%\System32\sapi.cpl.manifest -> [Ver = | Size = 749 bytes | Created Date = 16/01/2008 07:08:49 | Attr = RH ] sed.exe -> %SystemRoot%\System32\sed.exe -> [Ver = | Size = 98816 bytes | Created Date = 27/03/2008 07:49:42 | Attr = ] Setup -> %SystemRoot%\System32\Setup -> [Folder | Created Date = 16/01/2008 06:47:00 | Attr = ] ShellExt -> %SystemRoot%\System32\ShellExt -> [Folder | Created Date = 16/01/2008 06:47:00 | Attr = ] shiftjis.uce -> %SystemRoot%\System32\shiftjis.uce -> [Ver = | Size = 16740 bytes | Created Date = 16/01/2008 07:06:39 | Attr = ] SoftwareDistribution -> %SystemRoot%\System32\SoftwareDistribution -> [Folder | Created Date = 16/01/2008 07:25:57 | Attr = ] spool -> %SystemRoot%\System32\spool -> [Folder | Created Date = 16/01/2008 06:47:00 | Attr = ] spxcoins.dll -> %SystemRoot%\System32\spxcoins.dll -> Perle Systems Ltd. [Ver = 1.0.0.0007 | Size = 24661 bytes | Created Date = 16/01/2008 06:53:35 | Attr = ] streamhlp.dll -> %SystemRoot%\System32\streamhlp.dll -> [Ver = | Size = 59392 bytes | Created Date = 22/03/2008 14:44:44 | Attr = R ] subrange.uce -> %SystemRoot%\System32\subrange.uce -> [Ver = | Size = 93702 bytes | Created Date = 16/01/2008 07:06:39 | Attr = ] swreg.exe -> %SystemRoot%\System32\swreg.exe -> SteelWerX [Ver = 3.0.0.0 | Size = 161792 bytes | Created Date = 27/03/2008 07:49:42 | Attr = ] swsc.exe -> %SystemRoot%\System32\swsc.exe -> SteelWerX [Ver = 2.0.0.5 | Size = 136704 bytes | Created Date = 27/03/2008 07:49:42 | Attr = ] swxcacls.exe -> %SystemRoot%\System32\swxcacls.exe -> SteelWerX [Ver = 1.0.1.1 | Size = 212480 bytes | Created Date = 27/03/2008 07:49:42 | Attr = ] temp -> %SystemRoot%\System32\temp -> [Folder | Created Date = 15/03/2008 17:10:44 | Attr = ] tslabels.h -> %SystemRoot%\System32\tslabels.h -> [Ver = | Size = 3286 bytes | Created Date = 16/01/2008 07:06:37 | Attr = ] tslabels.ini -> %SystemRoot%\System32\tslabels.ini -> [Ver = | Size = 13223 bytes | Created Date = 16/01/2008 07:06:37 | Attr = ] URTTemp -> %SystemRoot%\System32\URTTemp -> [Folder | Created Date = 16/01/2008 19:26:10 | Attr = ] usmt -> %SystemRoot%\System32\usmt -> [Folder | Created Date = 16/01/2008 06:47:00 | Attr = ] usrlogon.cmd -> %SystemRoot%\System32\usrlogon.cmd -> [Ver = | Size = 1161 bytes | Created Date = 16/01/2008 07:06:38 | Attr = ] VFind.exe -> %SystemRoot%\System32\VFind.exe -> [Ver = | Size = 49152 bytes | Created Date = 27/03/2008 07:49:42 | Attr = ] wbem -> %SystemRoot%\System32\wbem -> [Folder | Created Date = 16/01/2008 06:47:00 | Attr = ] WindowsLogon.manifest -> %SystemRoot%\System32\WindowsLogon.manifest -> [Ver = | Size = 488 bytes | Created Date = 16/01/2008 07:08:54 | Attr = RH ] wins -> %SystemRoot%\System32\wins -> [Folder | Created Date = 16/01/2008 06:47:00 | Attr = ] wmimgmt.msc -> %SystemRoot%\System32\wmimgmt.msc -> [Ver = | Size = 63488 bytes | Created Date = 16/01/2008 07:06:32 | Attr = ] wpa.bak -> %SystemRoot%\System32\wpa.bak -> [Ver = | Size = 2422 bytes | Created Date = 16/01/2008 07:54:06 | Attr = ] WRLSetup.exe -> %SystemRoot%\System32\WRLSetup.exe -> [Ver = | Size = 36864 bytes | Created Date = 16/01/2008 07:46:45 | Attr = ] wuaucpl.cpl.manifest -> %SystemRoot%\System32\wuaucpl.cpl.manifest -> [Ver = | Size = 749 bytes | Created Date = 16/01/2008 07:08:49 | Attr = RH ] xircom -> %SystemRoot%\System32\xircom -> [Folder | Created Date = 16/01/2008 07:09:59 | Attr = ] XPSViewer -> %SystemRoot%\System32\XPSViewer -> [Folder | Created Date = 16/01/2008 19:33:28 | Attr = ] zip.exe -> %SystemRoot%\System32\zip.exe -> [Ver = | Size = 68096 bytes | Created Date = 27/03/2008 07:49:42 | Attr = ] $hf_mig$ -> %SystemRoot%\$hf_mig$ -> [Folder | Created Date = 16/01/2008 07:58:27 | Attr = H ] 3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> $MSI31Uninstall_KB893803v2$ -> %SystemRoot%\$MSI31Uninstall_KB893803v2$ -> [Folder | Created Date = 16/01/2008 07:58:18 | Attr = H ] $NtServicePackUninstallIDNMitigationAPIs$ -> %SystemRoot%\$NtServicePackUninstallIDNMitigationAPIs$ -> [Folder | Created Date = 16/01/2008 08:48:04 | Attr = H ] $NtServicePackUninstallNLSDownlevelMapping$ -> %SystemRoot%\$NtServicePackUninstallNLSDownlevelMapping$ -> [Folder | Created Date = 16/01/2008 08:47:48 | Attr = H ] 7091.bmp -> %SystemRoot%\7091.bmp -> [Ver = | Size = 44752 bytes | Created Date = 16/01/2008 07:58:58 | Attr = H ] addins -> %SystemRoot%\addins -> [Folder | Created Date = 16/01/2008 06:47:00 | Attr = ] AppPatch -> %SystemRoot%\AppPatch -> [Folder | Created Date = 16/01/2008 06:47:00 | Attr = ] assembly -> %SystemRoot%\assembly -> [Folder | Created Date = 16/01/2008 19:26:11 | Attr = R S] Blue Lace 16.bmp -> %SystemRoot%\Blue Lace 16.bmp -> [Ver = | Size = 1272 bytes | Created Date = 16/01/2008 07:06:40 | Attr = ] bootstat.dat -> %SystemRoot%\bootstat.dat -> [Ver = | Size = 2048 bytes | Created Date = 16/01/2008 07:11:40 | Attr = S] Burn4Free_Toolbar_Uninstaller_7937.exe -> %SystemRoot%\Burn4Free_Toolbar_Uninstaller_7937.exe -> Burn4Free [Ver = 4.2.0.0 | Size = 232034 bytes | Created Date = 11/03/2008 19:51:28 | Attr = ] Coffee Bean.bmp -> %SystemRoot%\Coffee Bean.bmp -> [Ver = | Size = 17062 bytes | Created Date = 16/01/2008 07:06:40 | Attr = ] Config -> %SystemRoot%\Config -> [Folder | Created Date = 16/01/2008 06:47:00 | Attr = ] Connection Wizard -> %SystemRoot%\Connection Wizard -> [Folder | Created Date = 16/01/2008 06:47:00 | Attr = ] control.ini -> %SystemRoot%\control.ini -> [Ver = | Size = 0 bytes | Created Date = 16/01/2008 07:09:44 | Attr = ] CSC -> %SystemRoot%\CSC -> [Folder | Created Date = 20/01/2008 10:34:58 | Attr = HS] Cursors -> %SystemRoot%\Cursors -> [Folder | Created Date = 16/01/2008 06:47:00 | Attr = ] Debug -> %SystemRoot%\Debug -> [Folder | Created Date = 16/01/2008 06:47:00 | Attr = ] desktop.ini -> %SystemRoot%\desktop.ini -> [Ver = | Size = 2 bytes | Created Date = 16/01/2008 07:08:12 | Attr = ] Dit.DLL -> %SystemRoot%\Dit.DLL -> ICSI [Ver = V2.12.0721 | Size = 290816 bytes | Created Date = 16/01/2008 07:24:06 | Attr = ] Dit.exe -> %SystemRoot%\Dit.exe -> ICSI Technology Ltd. [Ver = V2.12.0720 | Size = 90112 bytes | Created Date = 16/01/2008 07:24:06 | Attr = ] Dit.INI -> %SystemRoot%\Dit.INI -> [Ver = | Size = 269 bytes | Created Date = 16/01/2008 07:24:06 | Attr = ] DitExp.exe -> %SystemRoot%\DitExp.exe -> ICSI [Ver = V2.00.0711 | Size = 61440 bytes | Created Date = 16/01/2008 07:24:06 | Attr = ] Downloaded Installations -> %SystemRoot%\Downloaded Installations -> [Folder | Created Date = 20/01/2008 10:15:55 | Attr = ] Downloaded Program Files -> %SystemRoot%\Downloaded Program Files -> [Folder | Created Date = 16/01/2008 07:08:54 | Attr = S] Driver Cache -> %SystemRoot%\Driver Cache -> [Folder | Created Date = 16/01/2008 06:47:00 | Attr = ] ehome -> %SystemRoot%\ehome -> [Folder | Created Date = 16/01/2008 06:47:00 | Attr = ] erdnt -> %SystemRoot%\erdnt -> [Folder | Created Date = 27/03/2008 07:50:13 | Attr = ] FeatherTexture.bmp -> %SystemRoot%\FeatherTexture.bmp -> [Ver = | Size = 16730 bytes | Created Date = 16/01/2008 07:06:40 | Attr = ] filespecrtrt2500USB -> %SystemRoot%\filespecrtrt2500USB -> [Ver = | Size = 131 bytes | Created Date = 16/01/2008 07:46:45 | Attr = ] Fonts -> %SystemRoot%\Fonts -> [Folder | Created Date = 16/01/2008 06:47:00 | Attr = R S] Gone Fishing.bmp -> %SystemRoot%\Gone Fishing.bmp -> [Ver = | Size = 17336 bytes | Created Date = 16/01/2008 07:06:40 | Attr = ] Greenstone.bmp -> %SystemRoot%\Greenstone.bmp -> [Ver = | Size = 26582 bytes | Created Date = 16/01/2008 07:06:40 | Attr = ] Help -> %SystemRoot%\Help -> [Folder | Created Date = 16/01/2008 06:47:00 | Attr = ] ICCLR.INF -> %SystemRoot%\ICCLR.INF -> [Ver = | Size = 573 bytes | Created Date = 16/01/2008 07:24:03 | Attr = ] ie7 -> %SystemRoot%\ie7 -> [Folder | Created Date = 16/01/2008 08:48:12 | Attr = H ] ie7updates -> %SystemRoot%\ie7updates -> [Folder | Created Date = 16/01/2008 08:49:06 | Attr = ] ime -> %SystemRoot%\ime -> [Folder | Created Date = 16/01/2008 06:47:00 | Attr = ] imsins.BAK -> %SystemRoot%\imsins.BAK -> [Ver = | Size = 1374 bytes | Created Date = 16/01/2008 06:53:52 | Attr = ] inf -> %SystemRoot%\inf -> [Folder | Created Date = 16/01/2008 06:47:00 | Attr = H ] Installer -> %SystemRoot%\Installer -> [Folder | Created Date = 16/01/2008 06:53:50 | Attr = HS] java -> %SystemRoot%\java -> [Folder | Created Date = 16/01/2008 06:47:00 | Attr = ] lexstat.ini -> %SystemRoot%\lexstat.ini -> [Ver = | Size = 393 bytes | Created Date = 20/01/2008 11:33:02 | Attr = ] Media -> %SystemRoot%\Media -> [Folder | Created Date = 16/01/2008 06:47:00 | Attr = ] Microsoft.NET -> %SystemRoot%\Microsoft.NET -> [Folder | Created Date = 16/01/2008 19:26:11 | Attr = ] Minidump -> %SystemRoot%\Minidump -> [Folder | Created Date = 22/03/2008 11:17:09 | Attr = ] mozver.dat -> %SystemRoot%\mozver.dat -> [Ver = | Size = 1397 bytes | Created Date = 17/01/2008 16:38:16 | Attr = ] msagent -> %SystemRoot%\msagent -> [Folder | Created Date = 16/01/2008 06:47:00 | Attr = ] msapps -> %SystemRoot%\msapps -> [Folder | Created Date = 16/01/2008 06:47:00 | Attr = ] mui -> %SystemRoot%\mui -> [Folder | Created Date = 16/01/2008 06:47:00 | Attr = ] NeroDigital.ini -> %SystemRoot%\NeroDigital.ini -> [Ver = | Size = 69 bytes | Created Date = 10/02/2008 19:42:54 | Attr = ] network diagnostic -> %SystemRoot%\network diagnostic -> [Folder | Created Date = 16/01/2008 08:46:59 | Attr = ] Nircmd.exe -> %SystemRoot%\Nircmd.exe -> NirSoft [Ver = 2.05 | Size = 28160 bytes | Created Date = 27/03/2008 07:49:42 | Attr = ] nsreg.dat -> %SystemRoot%\nsreg.dat -> [Ver = | Size = 0 bytes | Created Date = 17/01/2008 10:43:43 | Attr = ] ODBCINST.INI -> %SystemRoot%\ODBCINST.INI -> [Ver = | Size = 4161 bytes | Created Date = 16/01/2008 06:53:49 | Attr = ] Offline Web Pages -> %SystemRoot%\Offline Web Pages -> [Folder | Created Date = 16/01/2008 07:08:54 | Attr = R ] pchealth -> %SystemRoot%\pchealth -> [Folder | Created Date = 16/01/2008 06:47:00 | Attr = ] PeerNet -> %SystemRoot%\PeerNet -> [Folder | Created Date = 16/01/2008 06:47:00 | Attr = ] Prairie Wind.bmp -> %SystemRoot%\Prairie Wind.bmp -> [Ver = | Size = 65954 bytes | Created Date = 16/01/2008 07:06:40 | Attr = ] Prefetch -> %SystemRoot%\Prefetch -> [Folder | Created Date = 16/01/2008 07:13:28 | Attr = ] Provisioning -> %SystemRoot%\Provisioning -> [Folder | Created Date = 16/01/2008 06:47:00 | Attr = ] pss -> %SystemRoot%\pss -> [Folder | Created Date = 19/03/2008 09:38:26 | Attr = ] RegisteredPackages -> %SystemRoot%\RegisteredPackages -> [Folder | Created Date = 16/01/2008 19:27:42 | Attr = ] Registration -> %SystemRoot%\Registration -> [Folder | Created Date = 16/01/2008 07:07:05 | Attr = ] REGLOCS.OLD -> %SystemRoot%\REGLOCS.OLD -> [Ver = | Size = 8192 bytes | Created Date = 16/01/2008 07:12:24 | Attr = ] repair -> %SystemRoot%\repair -> [Folder | Created Date = 16/01/2008 06:47:00 | Attr = ] Resources -> %SystemRoot%\Resources -> [Folder | Created Date = 16/01/2008 06:47:00 | Attr = ] Rhododendron.bmp -> %SystemRoot%\Rhododendron.bmp -> [Ver = | Size = 17362 bytes | Created Date = 16/01/2008 07:06:40 | Attr = ] River Sumida.bmp -> %SystemRoot%\River Sumida.bmp -> [Ver = | Size = 26680 bytes | Created Date = 16/01/2008 07:06:40 | Attr = ] Santa Fe Stucco.bmp -> %SystemRoot%\Santa Fe Stucco.bmp -> [Ver = | Size = 65832 bytes | Created Date = 16/01/2008 07:06:40 | Attr = ] security -> %SystemRoot%\security -> [Folder | Created Date = 16/01/2008 06:47:00 | Attr = ] SHELLNEW -> %SystemRoot%\SHELLNEW -> [Folder | Created Date = 20/01/2008 11:08:33 | Attr = ] Soap Bubbles.bmp -> %SystemRoot%\Soap Bubbles.bmp -> [Ver = | Size = 65978 bytes | Created Date = 16/01/2008 07:06:40 | Attr = ] SoftwareDistribution -> %SystemRoot%\SoftwareDistribution -> [Folder | Created Date = 16/01/2008 07:13:29 | Attr = ] srchasst -> %SystemRoot%\srchasst -> [Folder | Created Date = 16/01/2008 07:08:00 | Attr = ] Sun -> %SystemRoot%\Sun -> [Folder | Created Date = 20/01/2008 16:50:08 | Attr = ] system -> %SystemRoot%\system -> [Folder | Created Date = 16/01/2008 06:47:00 | Attr = ] system32 -> %SystemRoot%\system32 -> [Folder | Created Date = 16/01/2008 06:47:00 | Attr = ] Tasks -> %SystemRoot%\Tasks -> [Folder | Created Date = 16/01/2008 07:08:04 | Attr = S] TEMP -> %SystemRoot%\TEMP -> [Folder | Created Date = 27/03/2008 08:14:42 | Attr = ] twain_32 -> %SystemRoot%\twain_32 -> [Folder | Created Date = 16/01/2008 06:47:00 | Attr = ] uninst.exe -> %SystemRoot%\uninst.exe -> InstallShield Corporation, Inc. [Ver = 2.20.926.0 | Size = 299520 bytes | Created Date = 16/01/2008 07:31:35 | Attr = ] Unwise.exe -> %SystemRoot%\Unwise.exe -> [Ver = | Size = 127184 bytes | Created Date = 16/01/2008 07:57:05 | Attr = ] vb.ini -> %SystemRoot%\vb.ini -> [Ver = | Size = 36 bytes | Created Date = 16/01/2008 07:07:08 | Attr = ] vbaddin.ini -> %SystemRoot%\vbaddin.ini -> [Ver = | Size = 37 bytes | Created Date = 16/01/2008 07:07:08 | Attr = ] vpd.properties -> %SystemRoot%\vpd.properties -> [Ver = | Size = 7449 bytes | Created Date = 18/01/2008 18:23:44 | Attr = ] WBEM -> %SystemRoot%\WBEM -> [Folder | Created Date = 16/01/2008 08:48:52 | Attr = ] Web -> %SystemRoot%\Web -> [Folder | Created Date = 16/01/2008 06:47:00 | Attr = R ] WindowsShell.Manifest -> %SystemRoot%\WindowsShell.Manifest -> [Ver = | Size = 749 bytes | Created Date = 16/01/2008 07:08:49 | Attr = RH ] winnt.bmp -> %SystemRoot%\winnt.bmp -> [Ver = | Size = 48680 bytes | Created Date = 16/01/2008 07:08:12 | Attr = HS] winnt256.bmp -> %SystemRoot%\winnt256.bmp -> [Ver = | Size = 48680 bytes | Created Date = 16/01/2008 07:08:13 | Attr = HS] WinSxS -> %SystemRoot%\WinSxS -> [Folder | Created Date = 16/01/2008 06:47:00 | Attr = ] WMSysPr9.prx -> %SystemRoot%\WMSysPr9.prx -> [Ver = | Size = 316640 bytes | Created Date = 16/01/2008 07:09:40 | Attr = ] Zapotec.bmp -> %SystemRoot%\Zapotec.bmp -> [Ver = | Size = 9522 bytes | Created Date = 16/01/2008 07:06:40 | Attr = ] desktop.ini -> %SystemRoot%\tasks\desktop.ini -> [Ver = | Size = 65 bytes | Created Date = 16/01/2008 07:08:04 | Attr = RH ] SA.DAT -> %SystemRoot%\tasks\SA.DAT -> [Ver = | Size = 6 bytes | Created Date = 16/01/2008 07:13:28 | Attr = H ] [Files Created - Additional Folder Scans - Non-Microsoft Only] Adobe -> %AllUsersProfile%\Application Data\Adobe -> [Folder | Created Date = 17/01/2008 17:12:08 | Attr = ] ATI -> %AllUsersProfile%\Application Data\ATI -> [Folder | Created Date = 26/01/2008 14:21:43 | Attr = ] Avg7 -> %AllUsersProfile%\Application Data\Avg7 -> [Folder | Created Date = 01/03/2008 11:59:49 | Attr = ] Bluetooth -> %AllUsersProfile%\Application Data\Bluetooth -> [Folder | Created Date = 16/01/2008 07:27:50 | Attr = ] desktop.ini -> %AllUsersProfile%\Application Data\desktop.ini -> [Ver = | Size = 62 bytes | Created Date = 16/01/2008 06:53:25 | Attr = HS] ezsid.dat -> %AllUsersProfile%\Application Data\ezsid.dat -> [Ver = | Size = 32 bytes | Created Date = 03/02/2008 10:26:59 | Attr = ] Lavasoft -> %AllUsersProfile%\Application Data\Lavasoft -> [Folder | Created Date = 22/03/2008 16:32:30 | Attr = ] Microsoft -> %AllUsersProfile%\Application Data\Microsoft -> [Folder | Created Date = 16/01/2008 06:53:09 | Attr = S] Microsoft Help -> %AllUsersProfile%\Application Data\Microsoft Help -> [Folder | Created Date = 20/01/2008 11:08:15 | Attr = ] Nero -> %AllUsersProfile%\Application Data\Nero -> [Folder | Created Date = 10/02/2008 18:38:08 | Attr = ] Skype -> %AllUsersProfile%\Application Data\Skype -> [Folder | Created Date = 03/02/2008 10:25:15 | Attr = ] Sony Ericsson -> %AllUsersProfile%\Application Data\Sony Ericsson -> [Folder | Created Date = 13/03/2008 04:59:49 | Attr = ] Spybot - Search & Destroy -> %AllUsersProfile%\Application Data\Spybot - Search & Destroy -> [Folder | Created Date = 22/03/2008 22:28:33 | Attr = ] Teleca -> %AllUsersProfile%\Application Data\Teleca -> [Folder | Created Date = 13/03/2008 04:59:49 | Attr = ] Windows Genuine Advantage -> %AllUsersProfile%\Application Data\Windows Genuine Advantage -> [Folder | Created Date = 16/01/2008 08:24:46 | Attr = ] $_hpcst$.hpc -> %AppData%\$_hpcst$.hpc -> [Ver = | Size = 2528 bytes | Created Date = 20/01/2008 09:59:03 | Attr = ] .emacs.d -> %AppData%\.emacs.d -> [Folder | Created Date = 16/02/2008 11:12:41 | Attr = ] Adobe -> %AppData%\Adobe -> [Folder | Created Date = 17/01/2008 16:49:27 | Attr = ] Anvil Studio -> %AppData%\Anvil Studio -> [Folder | Created Date = 01/03/2008 20:18:59 | Attr = ] ATI -> %AppData%\ATI -> [Folder | Created Date = 26/01/2008 14:21:43 | Attr = ] desktop.ini -> %AppData%\desktop.ini -> [Ver = | Size = 62 bytes | Created Date = 16/01/2008 07:14:19 | Attr = HS] dvdcss -> %AppData%\dvdcss -> [Folder | Created Date = 20/01/2008 14:28:19 | Attr = ] Hamachi -> %AppData%\Hamachi -> [Folder | Created Date = 05/02/2008 22:38:55 | Attr = ] Help -> %AppData%\Help -> [Folder | Created Date = 27/01/2008 15:30:23 | Attr = ] Identities -> %AppData%\Identities -> [Folder | Created Date = 16/01/2008 07:14:25 | Attr = ] Macromedia -> %AppData%\Macromedia -> [Folder | Created Date = 17/01/2008 08:05:13 | Attr = ] Microsoft -> %AppData%\Microsoft -> [Folder | Created Date = 16/01/2008 07:14:19 | Attr = S] Mozilla -> %AppData%\Mozilla -> [Folder | Created Date = 17/01/2008 10:43:41 | Attr = ] Nero -> %AppData%\Nero -> [Folder | Created Date = 10/02/2008 18:40:21 | Attr = ] Skype -> %AppData%\Skype -> [Folder | Created Date = 03/02/2008 10:26:02 | Attr = ] skypePM -> %AppData%\skypePM -> [Folder | Created Date = 03/02/2008 10:26:59 | Attr = ] Sony Ericsson -> %AppData%\Sony Ericsson -> [Folder | Created Date = 13/03/2008 05:01:29 | Attr = ] Sun -> %AppData%\Sun -> [Folder | Created Date = 20/01/2008 16:50:07 | Attr = ] Talkback -> %AppData%\Talkback -> [Folder | Created Date = 17/01/2008 10:43:49 | Attr = ] Teleca -> %AppData%\Teleca -> [Folder | Created Date = 13/03/2008 05:14:34 | Attr = ] Thunderbird -> %AppData%\Thunderbird -> [Folder | Created Date = 17/01/2008 10:43:41 | Attr = ] TrojanHunter -> %AppData%\TrojanHunter -> [Folder | Created Date = 27/03/2008 19:11:51 | Attr = ] vlc -> %AppData%\vlc -> [Folder | Created Date = 20/01/2008 12:54:08 | Attr = ] Windows Desktop Search -> %AppData%\Windows Desktop Search -> [Folder | Created Date = 20/01/2008 12:42:12 | Attr = ] Winff -> %AppData%\Winff -> [Folder | Created Date = 20/02/2008 09:29:09 | Attr = ] WinRAR -> %AppData%\WinRAR -> [Folder | Created Date = 20/01/2008 10:01:08 | Attr = ] Adobe -> %UserProfile%\Local Settings\Application Data\Adobe -> [Folder | Created Date = 17/01/2008 17:12:20 | Attr = ] Ahead -> %UserProfile%\Local Settings\Application Data\Ahead -> [Folder | Created Date = 10/02/2008 18:41:26 | Attr = ] ApplicationHistory -> %UserProfile%\Local Settings\Application Data\ApplicationHistory -> [Folder | Created Date = 17/01/2008 08:58:48 | Attr = ] ATI -> %UserProfile%\Local Settings\Application Data\ATI -> [Folder | Created Date = 26/01/2008 14:21:43 | Attr = ] DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini -> %UserProfile%\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini -> [Ver = | Size = 38400 bytes | Created Date = 16/01/2008 19:28:50 | Attr = ] GDIPFONTCACHEV1.DAT -> %UserProfile%\Local Settings\Application Data\GDIPFONTCACHEV1.DAT -> [Ver = | Size = 68856 bytes | Created Date = 16/01/2008 07:28:24 | Attr = ] Help -> %UserProfile%\Local Settings\Application Data\Help -> [Folder | Created Date = 27/01/2008 15:30:23 | Attr = ] IconCache.db -> %UserProfile%\Local Settings\Application Data\IconCache.db -> [Ver = | Size = 2642382 bytes | Created Date = 16/01/2008 07:26:59 | Attr = H ] Identities -> %UserProfile%\Local Settings\Application Data\Identities -> [Folder | Created Date = 20/01/2008 12:42:14 | Attr = ] Microsoft -> %UserProfile%\Local Settings\Application Data\Microsoft -> [Folder | Created Date = 16/01/2008 07:14:19 | Attr = ] Microsoft Help -> %UserProfile%\Local Settings\Application Data\Microsoft Help -> [Folder | Created Date = 20/01/2008 11:08:19 | Attr = ] Mozilla -> %UserProfile%\Local Settings\Application Data\Mozilla -> [Folder | Created Date = 17/01/2008 10:46:59 | Attr = ] Myst V End of Ages -> %UserProfile%\Local Settings\Application Data\Myst V End of Ages -> [Folder | Created Date = 18/01/2008 19:32:55 | Attr = ] RyanairBargains -> %UserProfile%\Local Settings\Application Data\RyanairBargains -> [Folder | Created Date = 13/02/2008 12:34:44 | Attr = ] Sony Ericsson -> %UserProfile%\Local Settings\Application Data\Sony Ericsson -> [Folder | Created Date = 13/03/2008 05:01:42 | Attr = ] Thunderbird -> %UserProfile%\Local Settings\Application Data\Thunderbird -> [Folder | Created Date = 17/01/2008 10:43:41 | Attr = ] desktop.ini -> %AllUsersProfile%\Documents\desktop.ini -> [Ver = | Size = 62 bytes | Created Date = 16/01/2008 06:53:25 | Attr = HS] My Music -> %AllUsersProfile%\Documents\My Music -> [Folder | Created Date = 16/01/2008 07:07:00 | Attr = R ] My Pictures -> %AllUsersProfile%\Documents\My Pictures -> [Folder | Created Date = 16/01/2008 07:07:34 | Attr = R ] My Videos -> %AllUsersProfile%\Documents\My Videos -> [Folder | Created Date = 16/01/2008 07:06:07 | Attr = R ] 04-04-2007 13;58;38.PDF -> D:\MyDocuments\04-04-2007 13;58;38.PDF -> [Ver = | Size = 18244653 bytes | Created Date = 22/01/2008 12:37:14 | Attr = ] 2007applicants.xls -> D:\MyDocuments\2007applicants.xls -> [Ver = | Size = 26624 bytes | Created Date = 22/01/2008 12:37:14 | Attr = ] 24-03-2006 15;25;57.PDF -> D:\MyDocuments\24-03-2006 15;25;57.PDF -> [Ver = | Size = 11684929 bytes | Created Date = 22/01/2008 12:37:14 | Attr = ] 24-03-2006 15;31;24.PDF -> D:\MyDocuments\24-03-2006 15;31;24.PDF -> [Ver = | Size = 13150308 bytes | Created Date = 22/01/2008 12:37:15 | Attr = ] 24-03-2006 15;32;35.PDF -> D:\MyDocuments\24-03-2006 15;32;35.PDF -> [Ver = | Size = 135251 bytes | Created Date = 22/01/2008 12:37:15 | Attr = ] 24-03-2006 15;34;07.PDF -> D:\MyDocuments\24-03-2006 15;34;07.PDF -> [Ver = | Size = 6109227 bytes | Created Date = 22/01/2008 12:37:15 | Attr = ] 24-03-2006 15;43;27.PDF -> D:\MyDocuments\24-03-2006 15;43;27.PDF -> [Ver = | Size = 118358634 bytes | Created Date = 22/01/2008 12:37:15 | Attr = ] 4x4.xls -> D:\MyDocuments\4x4.xls -> [Ver = | Size = 308736 bytes | Created Date = 22/01/2008 12:37:18 | Attr = ] 80s.m3u -> D:\MyDocuments\80s.m3u -> [Ver = | Size = 14956 bytes | Created Date = 22/01/2008 12:37:18 | Attr = ] Adobe -> D:\MyDocuments\Adobe -> [Folder | Created Date = 22/01/2008 12:44:02 | Attr = ] 3 D:\MyDocuments\*.tmp files -> D:\MyDocuments\*.tmp -> Aeronautical Terminology and Definitions.doc -> D:\MyDocuments\Aeronautical Terminology and Definitions.doc -> [Ver = | Size = 22528 bytes | Created Date = 22/01/2008 12:37:18 | Attr = ] audiobooks investing.nri -> D:\MyDocuments\audiobooks investing.nri -> [Ver = | Size = 5211 bytes | Created Date = 22/01/2008 12:37:18 | Attr = ] Autocad Drawings -> D:\MyDocuments\Autocad Drawings -> [Folder | Created Date = 22/01/2008 12:44:02 | Attr = ] Autodata -> D:\MyDocuments\Autodata -> [Folder | Created Date = 22/01/2008 12:44:02 | Attr = ] Basic Robot Description.docx -> D:\MyDocuments\Basic Robot Description.docx -> [Ver = | Size = 11574 bytes | Created Date = 22/01/2008 12:37:18 | Attr = ] Bluetooth -> D:\MyDocuments\Bluetooth -> [Folder | Created Date = 22/01/2008 12:44:02 | Attr = ] Book1.xls -> D:\MyDocuments\Book1.xls -> [Ver = | Size = 20480 bytes | Created Date = 22/01/2008 12:37:18 | Attr = ] Book1.xlsx -> D:\MyDocuments\Book1.xlsx -> [Ver = | Size = 9943 bytes | Created Date = 22/01/2008 12:37:18 | Attr = ] calendar 16-9-07.csv -> D:\MyDocuments\calendar 16-9-07.csv -> [Ver = | Size = 206675 bytes | Created Date = 22/01/2008 12:37:18 | Attr = ] calendar 17-9-07.ics -> D:\MyDocuments\calendar 17-9-07.ics -> [Ver = | Size = 70885 bytes | Created Date = 22/01/2008 12:37:18 | Attr = ] calendar 3-8-07.csv -> D:\MyDocuments\calendar 3-8-07.csv -> [Ver = | Size = 131018 bytes | Created Date = 22/01/2008 12:37:18 | Attr = ] Capture.mpg -> D:\MyDocuments\Capture.mpg -> [Ver = | Size = 4096 bytes | Created Date = 22/01/2008 12:37:18 | Attr = ] Colorado Diary.docx -> D:\MyDocuments\Colorado Diary.docx -> [Ver = | Size = 12358 bytes | Created Date = 22/01/2008 12:37:18 | Attr = ] Colorado PERA DC Plan.docx -> D:\MyDocuments\Colorado PERA DC Plan.docx -> [Ver = | Size = 17121 bytes | Created Date = 22/01/2008 12:37:18 | Attr = ] Colour Choices in order of preference.doc -> D:\MyDocuments\Colour Choices in order of preference.doc -> [Ver = | Size = 22016 bytes | Created Date = 22/01/2008 12:37:18 | Attr = ] conditional option selling.doc -> D:\MyDocuments\conditional option selling.doc -> [Ver = | Size = 779264 bytes | Created Date = 22/01/2008 12:37:18 | Attr = ] consent to travel.docx -> D:\MyDocuments\consent to travel.docx -> [Ver = | Size = 13434 bytes | Created Date = 22/01/2008 12:37:18 | Attr = ] contacts.csv -> D:\MyDocuments\contacts.csv -> [Ver = | Size = 13331 bytes | Created Date = 22/01/2008 12:37:18 | Attr = ] Copy (2) of Bluetooth -> D:\MyDocuments\Copy (2) of Bluetooth -> [Folder | Created Date = 22/01/2008 13:41:24 | Attr = ] Copy of Bluetooth -> D:\MyDocuments\Copy of Bluetooth -> [Folder | Created Date = 22/01/2008 12:44:02 | Attr = ] Copy of Downloads -> D:\MyDocuments\Copy of Downloads -> [Folder | Created Date = 22/01/2008 12:44:02 | Attr = ] Copy of High Rollers Education Template.xls -> D:\MyDocuments\Copy of High Rollers Education Template.xls -> [Ver = | Size = 44032 bytes | Created Date = 22/01/2008 12:37:18 | Attr = ] Copy of My Music -> D:\MyDocuments\Copy of My Music -> [Folder | Created Date = 22/01/2008 13:41:21 | Attr = R ] Copy of My Videos -> D:\MyDocuments\Copy of My Videos -> [Folder | Created Date = 22/01/2008 13:41:18 | Attr = R ] Copy of PDP course -> D:\MyDocuments\Copy of PDP course -> [Folder | Created Date = 22/01/2008 12:43:52 | Attr = ] Copy of simulator tech log.xls -> D:\MyDocuments\Copy of simulator tech log.xls -> [Ver = | Size = 42496 bytes | Created Date = 22/01/2008 12:37:18 | Attr = ] Copy of SnagIt Catalog -> D:\MyDocuments\Copy of SnagIt Catalog -> [Folder | Created Date = 22/01/2008 12:43:51 | Attr = ] Copy of ten year get rich plan.xls -> D:\MyDocuments\Copy of ten year get rich plan.xls -> [Ver = | Size = 55808 bytes | Created Date = 22/01/2008 12:37:18 | Attr = ] Corel User Files -> D:\MyDocuments\Corel User Files -> [Folder | Created Date = 22/01/2008 12:43:51 | Attr = ] cv etc -> D:\MyDocuments\cv etc -> [Folder | Created Date = 22/01/2008 12:43:51 | Attr = ] CyberLink -> D:\MyDocuments\CyberLink -> [Folder | Created Date = 22/01/2008 12:43:51 | Attr = ] Default.avi -> D:\MyDocuments\Default.avi -> [Ver = | Size = 30608986 bytes | Created Date = 22/01/2008 12:37:18 | Attr = ] Default.mpg -> D:\MyDocuments\Default.mpg -> [Ver = | Size = 450078720 bytes | Created Date = 22/01/2008 12:37:19 | Attr = ] Desktop -> D:\MyDocuments\Desktop -> [Folder | Created Date = 22/01/2008 12:42:39 | Attr = ] desktop.ini -> D:\MyDocuments\desktop.ini -> [Ver = | Size = 77 bytes | Created Date = 22/01/2008 12:37:27 | Attr = HS] Doc1.docx -> D:\MyDocuments\Doc1.docx -> [Ver = | Size = 793791 bytes | Created Date = 22/01/2008 12:37:27 | Attr = ] Downloaded Installations -> D:\MyDocuments\Downloaded Installations -> [Folder | Created Date = 22/01/2008 12:42:29 | Attr = ] Downloads -> D:\MyDocuments\Downloads -> [Folder | Created Date = 22/01/2008 12:42:26 | Attr = ] drawings -> D:\MyDocuments\drawings -> [Folder | Created Date = 22/01/2008 12:42:26 | Attr = ] Dreamcatcher.doc -> D:\MyDocuments\Dreamcatcher.doc -> [Ver = | Size = 37376 bytes | Created Date = 22/01/2008 12:37:27 | Attr = ] educational -> D:\MyDocuments\educational -> [Folder | Created Date = 22/01/2008 12:42:24 | Attr = ] f12129.pdf -> D:\MyDocuments\f12129.pdf -> [Ver = | Size = 32502 bytes | Created Date = 22/01/2008 12:37:27 | Attr = ] feverchart.xls -> D:\MyDocuments\feverchart.xls -> [Ver = | Size = 19456 bytes | Created Date = 22/01/2008 12:37:27 | Attr = ] FirstClass -> D:\MyDocuments\FirstClass -> [Folder | Created Date = 22/01/2008 12:42:24 | Attr = ] FTD PROBLEMS.xls -> D:\MyDocuments\FTD PROBLEMS.xls -> [Ver = | Size = 42496 bytes | Created Date = 22/01/2008 12:37:27 | Attr = ] ftse350-1.csv -> D:\MyDocuments\ftse350-1.csv -> [Ver = | Size = 31838 bytes | Created Date = 22/01/2008 12:37:27 | Attr = ] ftse350-1.xlsx -> D:\MyDocuments\ftse350-1.xlsx -> [Ver = | Size = 47464 bytes | Created Date = 22/01/2008 12:37:27 | Attr = ] gocs achievement award.doc -> D:\MyDocuments\gocs achievement award.doc -> [Ver = | Size = 58368 bytes | Created Date = 22/01/2008 12:37:27 | Attr = ] gripper bracket.dxf -> D:\MyDocuments\gripper bracket.dxf -> [Ver = | Size = 264482 bytes | Created Date = 22/01/2008 12:37:27 | Attr = ] Guitar Shed -> D:\MyDocuments\Guitar Shed -> [Folder | Created Date = 22/01/2008 12:42:24 | Attr = ] ha-diary.doc -> D:\MyDocuments\ha-diary.doc -> [Ver = | Size = 29696 bytes | Created Date = 22/01/2008 12:37:28 | Attr = ] HR meeting agenda 220507.doc -> D:\MyDocuments\HR meeting agenda 220507.doc -> [Ver = | Size = 79872 bytes | Created Date = 22/01/2008 12:37:28 | Attr = ] ICQ Lite -> D:\MyDocuments\ICQ Lite -> [Folder | Created Date = 22/01/2008 12:42:24 | Attr = ] INVESTMENT CLUB ACCOUNT AGREEMENT.doc -> D:\MyDocuments\INVESTMENT CLUB ACCOUNT AGREEMENT.doc -> [Ver = | Size = 74240 bytes | Created Date = 22/01/2008 12:37:28 | Attr = ] irish life.doc -> D:\MyDocuments\irish life.doc -> [Ver = | Size = 46592 bytes | Created Date = 22/01/2008 12:37:28 | Attr = ] irish songs.docx -> D:\MyDocuments\irish songs.docx -> [Ver = | Size = 29896 bytes | Created Date = 22/01/2008 12:37:28 | Attr = ] JmwA.tmp -> D:\MyDocuments\JmwA.tmp -> [Folder | Created Date = 22/01/2008 12:42:11 | Attr = ] kids.JPG -> D:\MyDocuments\kids.JPG -> [Ver = | Size = 75966 bytes | Created Date = 22/01/2008 12:37:28 | Attr = ] lastscan.jpg -> D:\MyDocuments\lastscan.jpg -> [Ver = | Size = 439745 bytes | Created Date = 22/01/2008 12:37:28 | Attr = ] marathon training plan 2007.xlsx -> D:\MyDocuments\marathon training plan 2007.xlsx -> [Ver = | Size = 63212 bytes | Created Date = 22/01/2008 12:37:28 | Attr = ] mechatrons -> D:\MyDocuments\mechatrons -> [Folder | Created Date = 24/01/2008 21:10:11 | Attr = ] mechs.avi -> D:\MyDocuments\mechs.avi -> [Ver = | Size = 18734706 bytes | Created Date = 22/01/2008 12:37:28 | Attr = ] mindmap.xls -> D:\MyDocuments\mindmap.xls -> [Ver = | Size = 129536 bytes | Created Date = 22/01/2008 12:37:28 | Attr = ] @Alternate Data Stream - 26 bytes -> D:\MyDocuments\mindmap.xls:Zone.Identifier modern plant rubot driving base quote.xlsx -> D:\MyDocuments\modern plant rubot driving base quote.xlsx -> [Ver = | Size = 12621 bytes | Created Date = 22/01/2008 12:37:28 | Attr = ] moneytalks.avi -> D:\MyDocuments\moneytalks.avi -> [Ver = | Size = 918950400 bytes | Created Date = 22/01/2008 12:37:28 | Attr = ] My eBooks -> D:\MyDocuments\My eBooks -> [Folder | Created Date = 22/01/2008 12:42:10 | Attr = ] My Library -> D:\MyDocuments\My Library -> [Folder | Created Date = 22/01/2008 12:42:08 | Attr = ] My Music -> D:\MyDocuments\My Music -> [Folder | Created Date = 22/01/2008 12:42:08 | Attr = S] My Pictures -> D:\MyDocuments\My Pictures -> [Folder | Created Date = 22/01/2008 12:40:03 | Attr = R ] My Portfolio Backup_2006-03-31_220745.mbf -> D:\MyDocuments\My Portfolio Backup_2006-03-31_220745.mbf -> [Ver = | Size = 517706 bytes | Created Date = 22/01/2008 12:37:47 | Attr = R ] My Portfolio Backup_2006-03-31_224538.mbf -> D:\MyDocuments\My Portfolio Backup_2006-03-31_224538.mbf -> [Ver = | Size = 517364 bytes | Created Date = 22/01/2008 12:37:47 | Attr = R ] My Portfolio Backup_2006-04-05_204204.mbf -> D:\MyDocuments\My Portfolio Backup_2006-04-05_204204.mbf -> [Ver = | Size = 524246 bytes | Created Date = 22/01/2008 12:37:47 | Attr = R ] My Portfolio Backup_2006-04-06_131339.mbf -> D:\MyDocuments\My Portfolio Backup_2006-04-06_131339.mbf -> [Ver = | Size = 448696 bytes | Created Date = 22/01/2008 12:37:47 | Attr = R ] My Portfolio Backup_2006-04-06_142612.mbf -> D:\MyDocuments\My Portfolio Backup_2006-04-06_142612.mbf -> [Ver = | Size = 450634 bytes | Created Date = 22/01/2008 12:37:47 | Attr = R ] My Portfolio Backup_2006-04-06_143202.mbf -> D:\MyDocuments\My Portfolio Backup_2006-04-06_143202.mbf -> [Ver = | Size = 450400 bytes | Created Date = 22/01/2008 12:37:47 | Attr = R ] My Portfolio.mny -> D:\MyDocuments\My Portfolio.mny -> [Ver = | Size = 3641344 bytes | Created Date = 22/01/2008 12:37:47 | Attr = ] My Received Files -> D:\MyDocuments\My Received Files -> [Folder | Created Date = 22/01/2008 12:40:03 | Attr = ] My Shapes -> D:\MyDocuments\My Shapes -> [Folder | Created Date = 22/01/2008 12:40:03 | Attr = S] My Skype Content -> D:\MyDocuments\My Skype Content -> [Folder | Created Date = 22/01/2008 12:40:03 | Attr = ] My Skype Pictures -> D:\MyDocuments\My Skype Pictures -> [Folder | Created Date = 22/01/2008 12:40:02 | Attr = ] My Skype Received Files -> D:\MyDocuments\My Skype Received Files -> [Folder | Created Date = 22/01/2008 12:39:59 | Attr = ] My valuline spreadfinder -> D:\MyDocuments\My valuline spreadfinder -> [Ver = | Size = 1390 bytes | Created Date = 22/01/2008 12:37:47 | Attr = ] My Videos -> D:\MyDocuments\My Videos -> [Folder | Created Date = 22/01/2008 12:39:56 | Attr = R ] My Wallpapers -> D:\MyDocuments\My Wallpapers -> [Folder | Created Date = 22/01/2008 12:39:56 | Attr = R ] My Web Sites -> D:\MyDocuments\My Web Sites -> [Folder | Created Date = 22/01/2008 12:39:49 | Attr = S] NeroVision -> D:\MyDocuments\NeroVision -> [Folder | Created Date = 22/01/2008 12:39:49 | Attr = ] neverhood -> D:\MyDocuments\neverhood -> [Folder | Created Date = 22/01/2008 12:39:49 | Attr = ] notpron solutions log.xlsx -> D:\MyDocuments\notpron solutions log.xlsx -> [Ver = | Size = 10612 bytes | Created Date = 22/01/2008 12:37:47 | Attr = ] OBT42BLD.DOC -> D:\MyDocuments\OBT42BLD.DOC -> [Ver = | Size = 27136 bytes | Created Date = 22/01/2008 12:37:47 | Attr = ] OneNote Notebooks -> D:\MyDocuments\OneNote Notebooks -> [Folder | Created Date = 22/01/2008 12:39:49 | Attr = ] Online Check.docx -> D:\MyDocuments\Online Check.docx -> [Ver = | Size = 20326 bytes | Created Date = 22/01/2008 12:37:47 | Attr = ] OOB42PRT.DOC -> D:\MyDocuments\OOB42PRT.DOC -> [Ver = | Size = 5376 bytes | Created Date = 22/01/2008 12:37:47 | Attr = ] OOBOT42.DOC -> D:\MyDocuments\OOBOT42.DOC -> [Ver = | Size = 51712 bytes | Created Date = 22/01/2008 12:37:47 | Attr = ] Outlook PST files -> D:\MyDocuments\Outlook PST files -> [Folder | Created Date = 22/01/2008 12:39:39 | Attr = ] Outlook.pst -> D:\MyDocuments\Outlook.pst -> [Ver = | Size = 390087680 bytes | Created Date = 22/01/2008 12:37:47 | Attr = ] paper1.jpg -> D:\MyDocuments\paper1.jpg -> [Ver = | Size = 841206 bytes | Created Date = 22/01/2008 12:37:58 | Attr = ] paper2.jpg -> D:\MyDocuments\paper2.jpg -> [Ver = | Size = 1160320 bytes | Created Date = 22/01/2008 12:37:58 | Attr = ] PDP course -> D:\MyDocuments\PDP course -> [Folder | Created Date = 22/01/2008 12:39:34 | Attr = ] pera memorial.doc -> D:\MyDocuments\pera memorial.doc -> [Ver = | Size = 23552 bytes | Created Date = 22/01/2008 12:37:58 | Attr = ] Peter Redmond C V .doc -> D:\MyDocuments\Peter Redmond C V .doc -> [Ver = | Size = 65024 bytes | Created Date = 22/01/2008 12:37:58 | Attr = ] Peter Redmonds Schedule.doc -> D:\MyDocuments\Peter Redmonds Schedule.doc -> [Ver = | Size = 28672 bytes | Created Date = 22/01/2008 12:37:58 | Attr = ] petescalendar22-6-06.CSV -> D:\MyDocuments\petescalendar22-6-06.CSV -> [Ver = | Size = 478226 bytes | Created Date = 22/01/2008 12:37:58 | Attr = ] PP_DVRMS.TMP -> D:\MyDocuments\PP_DVRMS.TMP -> [Folder | Created Date = 22/01/2008 12:39:34 | Attr = H ] profit calc (version 1).xls -> D:\MyDocuments\profit calc (version 1).xls -> [Ver = | Size = 16896 bytes | Created Date = 22/01/2008 12:37:58 | Attr = ] profit calc.xls -> D:\MyDocuments\profit calc.xls -> [Ver = | Size = 16896 bytes | Created Date = 22/01/2008 12:37:58 | Attr = ] programming -> D:\MyDocuments\programming -> [Folder | Created Date = 22/01/2008 12:39:34 | Attr = ] psun postmortem.doc -> D:\MyDocuments\psun postmortem.doc -> [Ver = | Size = 31744 bytes | Created Date = 22/01/2008 12:37:58 | Attr = ] rec_FIREFOX_16-10-11.mp3 -> D:\MyDocuments\rec_FIREFOX_16-10-11.mp3 -> [Ver = | Size = 41316 bytes | Created Date = 22/01/2008 12:37:58 | Attr = ] relay2-1.123 -> D:\MyDocuments\relay2-1.123 -> [Ver = | Size = 330776 bytes | Created Date = 22/01/2008 12:37:58 | Attr = ] relay2.123 -> D:\MyDocuments\relay2.123 -> [Ver = | Size = 121138 bytes | Created Date = 22/01/2008 12:37:58 | Attr = ] response to COS.doc -> D:\MyDocuments\response to COS.doc -> [Ver = | Size = 41984 bytes | Created Date = 22/01/2008 12:37:58 | Attr = ] risk assessment (2).doc -> D:\MyDocuments\risk assessment (2).doc -> [Ver = | Size = 41472 bytes | Created Date = 22/01/2008 12:37:58 | Attr = ] Robots -> D:\MyDocuments\Robots -> [Folder | Created Date = 22/01/2008 12:39:33 | Attr = ] rods roboteers money 2006.xls -> D:\MyDocuments\rods roboteers money 2006.xls -> [Ver = | Size = 14848 bytes | Created Date = 22/01/2008 12:37:58 | Attr = ] Rogue Trooper -> D:\MyDocuments\Rogue Trooper -> [Folder | Created Date = 22/01/2008 12:39:33 | Attr = ] rpm to mph.xlsx -> D:\MyDocuments\rpm to mph.xlsx -> [Ver = | Size = 8638 bytes | Created Date = 22/01/2008 12:37:58 | Attr = ] RuBot -> D:\MyDocuments\RuBot -> [Folder | Created Date = 22/01/2008 12:39:32 | Attr = ] RuBot II (DiVX).avi -> D:\MyDocuments\RuBot II (DiVX).avi -> [Ver = | Size = 20690614 bytes | Created Date = 22/01/2008 12:37:58 | Attr = ] RuBot II Clip.avi -> D:\MyDocuments\RuBot II Clip.avi -> [Ver = | Size = 30757590 bytes | Created Date = 22/01/2008 12:38:01 | Attr = ] RuBot II Demo.mpg -> D:\MyDocuments\RuBot II Demo.mpg -> [Ver = | Size = 19331032 bytes | Created Date = 22/01/2008 12:38:07 | Attr = ] RuBot II.avi -> D:\MyDocuments\RuBot II.avi -> [Ver = | Size = 331896320 bytes | Created Date = 22/01/2008 12:38:09 | Attr = ] rubot servo values.xlsx -> D:\MyDocuments\rubot servo values.xlsx -> [Ver = | Size = 10524 bytes | Created Date = 22/01/2008 12:38:23 | Attr = ] Rubot.htm -> D:\MyDocuments\Rubot.htm -> [Ver = | Size = 51628 bytes | Created Date = 22/01/2008 12:38:23 | Attr = ] RuBot.mpg -> D:\MyDocuments\RuBot.mpg -> [Ver = | Size = 60125184 bytes | Created Date = 22/01/2008 12:38:23 | Attr = ] rubot.pub -> D:\MyDocuments\rubot.pub -> [Ver = | Size = 59904 bytes | Created Date = 22/01/2008 12:38:27 | Attr = ] Rubot_files -> D:\MyDocuments\Rubot_files -> [Folder | Created Date = 22/01/2008 12:39:32 | Attr = ] sample.htm -> D:\MyDocuments\sample.htm -> [Ver = | Size = 15966 bytes | Created Date = 22/01/2008 12:38:27 | Attr = ] sandy's 42nd card.pub -> D:\MyDocuments\sandy's 42nd card.pub -> [Ver = | Size = 951808 bytes | Created Date = 22/01/2008 12:38:27 | Attr = ] santa parcel.doc -> D:\MyDocuments\santa parcel.doc -> [Ver = | Size = 926208 bytes | Created Date = 22/01/2008 12:38:27 | Attr = ] Saoirse Redmond ivites.docx -> D:\MyDocuments\Saoirse Redmond ivites.docx -> [Ver = | Size = 257348 bytes | Created Date = 22/01/2008 12:38:27 | Attr = ] sean -> D:\MyDocuments\sean -> [Folder | Created Date = 22/01/2008 12:39:32 | Attr = ] Sean Ryan -> D:\MyDocuments\Sean Ryan -> [Folder | Created Date = 22/01/2008 12:39:32 | Attr = ] seans pocket money.xls -> D:\MyDocuments\seans pocket money.xls -> [Ver = | Size = 20992 bytes | Created Date = 22/01/2008 12:38:27 | Attr = ] sfdb_ou.dat -> D:\MyDocuments\sfdb_ou.dat -> [Ver = | Size = 84 bytes | Created Date = 22/01/2008 12:38:27 | Attr = ] SharePoint Drafts -> D:\MyDocuments\SharePoint Drafts -> [Folder | Created Date = 22/01/2008 12:39:32 | Attr = S] Skype%20Recording%20WinXp%2012202004[1].pdf -> D:\MyDocuments\Skype%20Recording%20WinXp%2012202004[1].pdf -> [Ver = | Size = 448403 bytes | Created Date = 22/01/2008 12:38:27 | Attr = ] SnagIt Catalog -> D:\MyDocuments\SnagIt Catalog -> [Folder | Created Date = 22/01/2008 12:39:32 | Attr = ] snapshot(0).bmp -> D:\MyDocuments\snapshot(0).bmp -> [Ver = | Size = 1228854 bytes | Created Date = 22/01/2008 12:38:27 | Attr = ] snapshot(1).bmp -> D:\MyDocuments\snapshot(1).bmp -> [Ver = | Size = 1228854 bytes | Created Date = 22/01/2008 12:38:27 | Attr = ] snapshot(2).bmp -> D:\MyDocuments\snapshot(2).bmp -> [Ver = | Size = 1228854 bytes | Created Date = 22/01/2008 12:38:27 | Attr = ] snapshot.bmp -> D:\MyDocuments\snapshot.bmp -> [Ver = | Size = 1228854 bytes | Created Date = 22/01/2008 12:38:27 | Attr = ] Symantec -> D:\MyDocuments\Symantec -> [Folder | Created Date = 22/01/2008 12:39:32 | Attr = ] Technical Report on Pilatus FTD Annual Inspection.doc -> D:\MyDocuments\Technical Report on Pilatus FTD Annual Inspection.doc -> [Ver = | Size = 40960 bytes | Created Date = 22/01/2008 12:38:27 | Attr = ] Technical Report.doc -> D:\MyDocuments\Technical Report.doc -> [Ver = | Size = 27136 bytes | Created Date = 22/01/2008 12:38:27 | Attr = ] ten year get rich plan (Autosaved).xls -> D:\MyDocuments\ten year get rich plan (Autosaved).xls -> [Ver = | Size = 52224 bytes | Created Date = 22/01/2008 12:38:27 | Attr = ] ten year get rich plan.xls -> D:\MyDocuments\ten year get rich plan.xls -> [Ver = | Size = 55296 bytes | Created Date = 22/01/2008 12:38:27 | Attr = ] test myst.avi -> D:\MyDocuments\test myst.avi -> [Ver = | Size = 4355584 bytes | Created Date = 22/01/2008 12:38:27 | Attr = ] Thumbs.db -> D:\MyDocuments\Thumbs.db -> [Ver = | Size = 135168 bytes | Created Date = 22/01/2008 12:38:27 | Attr = HS] @Alternate Data Stream - 0 bytes -> D:\MyDocuments\Thumbs.db:encryptable TICN -> D:\MyDocuments\TICN -> [Folder | Created Date = 22/01/2008 12:39:32 | Attr = ] TradeTrakker Data -> D:\MyDocuments\TradeTrakker Data -> [Folder | Created Date = 22/01/2008 12:39:32 | Attr = ] Types of Orders.doc -> D:\MyDocuments\Types of Orders.doc -> [Ver = | Size = 23552 bytes | Created Date = 22/01/2008 12:38:27 | Attr = ] Ulead DVD MovieFactory 4.0 Disc Creator -> D:\MyDocuments\Ulead DVD MovieFactory 4.0 Disc Creator -> [Folder | Created Date = 22/01/2008 12:38:27 | Attr = ] Ulead DVD Workshop -> D:\MyDocuments\Ulead DVD Workshop -> [Folder | Created Date = 22/01/2008 12:38:27 | Attr = ] UserImages.bmp -> D:\MyDocuments\UserImages.bmp -> [Ver = | Size = 43062 bytes | Created Date = 22/01/2008 12:38:27 | Attr = ] V3 Dismantle Guide.pdf -> D:\MyDocuments\V3 Dismantle Guide.pdf -> [Ver = | Size = 536349 bytes | Created Date = 22/01/2008 12:38:27 | Attr = ] VC DV Scan -> D:\MyDocuments\VC DV Scan -> [Folder | Created Date = 22/01/2008 12:38:27 | Attr = ] Video Capture -> D:\MyDocuments\Video Capture -> [Folder | Created Date = 22/01/2008 12:38:27 | Attr = ] Video Editor -> D:\MyDocuments\Video Editor -> [Folder | Created Date = 22/01/2008 12:38:27 | Attr = ] videos -> D:\MyDocuments\videos -> [Folder | Created Date = 22/01/2008 12:38:27 | Attr = ] VIO -> D:\MyDocuments\VIO -> [Folder | Created Date = 22/01/2008 12:38:27 | Attr = ] Web Easy -> D:\MyDocuments\Web Easy -> [Folder | Created Date = 22/01/2008 12:38:27 | Attr = ] Wingwalker_EI_TECH-DEV_ApplicationForm2007 04.doc -> D:\MyDocuments\Wingwalker_EI_TECH-DEV_ApplicationForm2007 04.doc -> [Ver = | Size = 571904 bytes | Created Date = 22/01/2008 12:38:27 | Attr = ] ~$believe that the commandant has totally misunderstood the focus how I have been wronged.docx -> D:\MyDocuments\~$believe that the commandant has totally misunderstood the focus how I have been wronged.docx -> [Ver = | Size = 162 bytes | Created Date = 22/01/2008 12:38:27 | Attr = H ] ~$in santa letter.doc -> D:\MyDocuments\~$in santa letter.doc -> [Ver = | Size = 162 bytes | Created Date = 22/01/2008 12:38:27 | Attr = H ] ~$lorado Diary.docx -> D:\MyDocuments\~$lorado Diary.docx -> [Ver = | Size = 162 bytes | Created Date = 22/01/2008 12:38:27 | Attr = H ] ~$lorado PERA DC Plan.docx -> D:\MyDocuments\~$lorado PERA DC Plan.docx -> [Ver = | Size = 162 bytes | Created Date = 22/01/2008 12:38:27 | Attr = H ] ~$marathon training plan 2007.xlsx -> D:\MyDocuments\~$marathon training plan 2007.xlsx -> [Ver = | Size = 165 bytes | Created Date = 22/01/2008 12:38:27 | Attr = H ] ~$notpron solutions log.xlsx -> D:\MyDocuments\~$notpron solutions log.xlsx -> [Ver = | Size = 165 bytes | Created Date = 22/01/2008 12:38:27 | Attr = H ] ~$nsent to travel.docx -> D:\MyDocuments\~$nsent to travel.docx -> [Ver = | Size = 162 bytes | Created Date = 22/01/2008 12:38:27 | Attr = H ] ~$Rubot.htm -> D:\MyDocuments\~$Rubot.htm -> [Ver = | Size = 162 bytes | Created Date = 22/01/2008 12:38:27 | Attr = H ] ~$ter Redmond C V .doc -> D:\MyDocuments\~$ter Redmond C V .doc -> [Ver = | Size = 162 bytes | Created Date = 22/01/2008 12:38:27 | Attr = H ] ~$VESTMENT CLUB ACCOUNT AGREEMENT.doc -> D:\MyDocuments\~$VESTMENT CLUB ACCOUNT AGREEMENT.doc -> [Ver = | Size = 162 bytes | Created Date = 22/01/2008 12:38:27 | Attr = H ] Ad-Aware 2007.lnk -> %AllUsersProfile%\Desktop\Ad-Aware 2007.lnk -> [Ver = | Size = 1662 bytes | Created Date = 22/03/2008 16:32:32 | Attr = ] Ad-Watch 2007.lnk -> %AllUsersProfile%\Desktop\Ad-Watch 2007.lnk -> [Ver = | Size = 1662 bytes | Created Date = 22/03/2008 16:32:32 | Attr = ] Adobe Reader 8.lnk -> %AllUsersProfile%\Desktop\Adobe Reader 8.lnk -> [Ver = | Size = 1729 bytes | Created Date = 17/01/2008 17:12:11 | Attr = ] avast! Antivirus.lnk -> %AllUsersProfile%\Desktop\avast! Antivirus.lnk -> [Ver = | Size = 803 bytes | Created Date = 22/03/2008 21:46:18 | Attr = ] BlueSoleil.lnk -> %AllUsersProfile%\Desktop\BlueSoleil.lnk -> [Ver = | Size = 1874 bytes | Created Date = 16/01/2008 07:21:24 | Attr = ] Burn4Free.lnk -> %AllUsersProfile%\Desktop\Burn4Free.lnk -> [Ver = | Size = 598 bytes | Created Date = 11/03/2008 19:51:25 | Attr = ] Launch SlingPlayer.lnk -> %AllUsersProfile%\Desktop\Launch SlingPlayer.lnk -> [Ver = | Size = 1740 bytes | Created Date = 20/01/2008 10:16:23 | Attr = ] Lexmark X6100 Series All-In-One Center.lnk -> %AllUsersProfile%\Desktop\Lexmark X6100 Series All-In-One Center.lnk -> [Ver = | Size = 770 bytes | Created Date = 20/01/2008 11:33:27 | Attr = ] Mozilla Firefox.lnk -> %AllUsersProfile%\Desktop\Mozilla Firefox.lnk -> [Ver = | Size = 1602 bytes | Created Date = 17/01/2008 10:46:57 | Attr = ] Mozilla Thunderbird.lnk -> %AllUsersProfile%\Desktop\Mozilla Thunderbird.lnk -> [Ver = | Size = 1668 bytes | Created Date = 18/01/2008 08:28:50 | Attr = ] Myst V End of Ages.lnk -> %AllUsersProfile%\Desktop\Myst V End of Ages.lnk -> [Ver = | Size = 851 bytes | Created Date = 18/01/2008 18:18:20 | Attr = ] Nero Home.lnk -> %AllUsersProfile%\Desktop\Nero Home.lnk -> [Ver = | Size = 1350 bytes | Created Date = 10/02/2008 18:41:15 | Attr = ] Nero StartSmart.lnk -> %AllUsersProfile%\Desktop\Nero StartSmart.lnk -> [Ver = | Size = 1424 bytes | Created Date = 10/02/2008 18:41:15 | Attr = ] Skype.lnk -> %AllUsersProfile%\Desktop\Skype.lnk -> [Ver = | Size = 1870 bytes | Created Date = 03/02/2008 10:25:24 | Attr = ] Sony Ericsson PC Suite.lnk -> %AllUsersProfile%\Desktop\Sony Ericsson PC Suite.lnk -> [Ver = | Size = 2046 bytes | Created Date = 13/03/2008 05:01:24 | Attr = ] VLC media player.lnk -> %AllUsersProfile%\Desktop\VLC media player.lnk -> [Ver = | Size = 623 bytes | Created Date = 20/01/2008 12:51:01 | Attr = ] AdbeRdr811_en_US.exe -> %UserProfile%\Desktop\AdbeRdr811_en_US.exe -> [Ver = 1.0.0.921 | Size = 23405072 bytes | Created Date = 17/01/2008 17:06:22 | Attr = ] avg75free_516a1225.exe -> %UserProfile%\Desktop\avg75free_516a1225.exe -> [Ver = | Size = 32981120 bytes | Created Date = 19/01/2008 20:34:45 | Attr = ] avgarkt-setup-1.1.0.42.exe -> %UserProfile%\Desktop\avgarkt-setup-1.1.0.42.exe -> [Ver = | Size = 423736 bytes | Created Date = 19/01/2008 20:34:30 | Attr = ] CJXP6100EN.exe -> %UserProfile%\Desktop\CJXP6100EN.exe -> [Ver = | Size = 31108096 bytes | Created Date = 17/01/2008 10:52:25 | Attr = ] Combo-Fix.exe -> %UserProfile%\Desktop\Combo-Fix.exe -> [Ver = | Size = 1599547 bytes | Created Date = 27/03/2008 07:48:34 | Attr = ] GameSpy Arcade.lnk -> %UserProfile%\Desktop\GameSpy Arcade.lnk -> [Ver = | Size = 585 bytes | Created Date = 26/01/2008 16:35:10 | Attr = ] lj632en.exe -> %UserProfile%\Desktop\lj632en.exe -> [Ver = | Size = 930800 bytes | Created Date = 17/01/2008 11:21:46 | Attr = ] OTScanIt -> %UserProfile%\Desktop\OTScanIt -> [Folder | Created Date = 27/03/2008 21:58:06 | Attr = ] OTScanIt.exe -> %UserProfile%\Desktop\OTScanIt.exe -> [Ver = | Size = 540404 bytes | Created Date = 27/03/2008 21:57:41 | Attr = ] setup.msi -> %UserProfile%\Desktop\setup.msi -> [Ver = | Size = 7886336 bytes | Created Date = 20/01/2008 09:55:39 | Attr = ] Spybot - Search & Destroy.lnk -> %UserProfile%\Desktop\Spybot - Search & Destroy.lnk -> [Ver = | Size = 807 bytes | Created Date = 22/03/2008 22:28:42 | Attr = ] thinkorswim.lnk -> %UserProfile%\Desktop\thinkorswim.lnk -> [Ver = | Size = 700 bytes | Created Date = 25/01/2008 20:03:30 | Attr = ] thinkorswim_installer.exe -> %UserProfile%\Desktop\thinkorswim_installer.exe -> thinkorswim, Inc. [Ver = desktop | Size = 12984832 bytes | Created Date = 25/01/2008 19:55:44 | Attr = ] Thunderbird Setup 2.0.0.9.exe -> %UserProfile%\Desktop\Thunderbird Setup 2.0.0.9.exe -> Mozilla [Ver = 4.42 | Size = 6525288 bytes | Created Date = 18/01/2008 08:26:50 | Attr = ] TrojanHunter.lnk -> %UserProfile%\Desktop\TrojanHunter.lnk -> [Ver = | Size = 692 bytes | Created Date = 22/03/2008 14:44:48 | Attr = ] VIReader.lnk -> %UserProfile%\Desktop\VIReader.lnk -> [Ver = | Size = 2147 bytes | Created Date = 27/01/2008 16:57:57 | Attr = ] Virtual Intelligence Matrix 1.0 -> %UserProfile%\Desktop\Virtual Intelligence Matrix 1.0 -> [Folder | Created Date = 27/01/2008 19:30:25 | Attr = ] Virtual Intelligence Matrix.lnk -> %UserProfile%\Desktop\Virtual Intelligence Matrix.lnk -> [Ver = | Size = 595 bytes | Created Date = 27/01/2008 13:06:58 | Attr = ] vlc-0.8.6d-win32.exe -> %UserProfile%\Desktop\vlc-0.8.6d-win32.exe -> [Ver = | Size = 9733451 bytes | Created Date = 20/01/2008 12:45:41 | Attr = ] VNC Viewer 4.lnk -> %UserProfile%\Desktop\VNC Viewer 4.lnk -> [Ver = | Size = 593 bytes | Created Date = 21/03/2008 10:46:38 | Attr = ] Wolfenstein - Enemy Territory.lnk -> %UserProfile%\Desktop\Wolfenstein - Enemy Territory.lnk -> [Ver = | Size = 619 bytes | Created Date = 26/01/2008 16:34:05 | Attr = ] wrar371.exe -> %UserProfile%\Desktop\wrar371.exe -> [Ver = | Size = 1206366 bytes | Created Date = 20/01/2008 10:00:43 | Attr = ] XS++ -> %UserProfile%\Desktop\XS++ -> [Folder | Created Date = 11/03/2008 10:59:42 | Attr = ] BlueSoleil.lnk -> %AllUsersProfile%\Start Menu\Programs\Startup\BlueSoleil.lnk -> [Ver = | Size = 1886 bytes | Created Date = 21/03/2008 10:23:46 | Attr = ] desktop.ini -> %AllUsersProfile%\Start Menu\Programs\Startup\desktop.ini -> [Ver = | Size = 84 bytes | Created Date = 16/01/2008 06:53:25 | Attr = HS] RaConfig2500.lnk -> %AllUsersProfile%\Start Menu\Programs\Startup\RaConfig2500.lnk -> [Ver = | Size = 1975 bytes | Created Date = 21/03/2008 10:23:46 | Attr = ] Windows Desktop Search.lnk -> %AllUsersProfile%\Start Menu\Programs\Startup\Windows Desktop Search.lnk -> [Ver = | Size = 1787 bytes | Created Date = 21/03/2008 10:23:46 | Attr = ] desktop.ini -> %UserProfile%\Start Menu\Programs\Startup\desktop.ini -> [Ver = | Size = 84 bytes | Created Date = 16/01/2008 07:14:19 | Attr = HS] hamachi.lnk -> %UserProfile%\Start Menu\Programs\Startup\hamachi.lnk -> [Ver = | Size = 544 bytes | Created Date = 21/03/2008 10:23:46 | Attr = ] Ryanair Bargains 1.0.lnk -> %UserProfile%\Start Menu\Programs\Startup\Ryanair Bargains 1.0.lnk -> [Ver = | Size = 635 bytes | Created Date = 21/03/2008 10:23:46 | Attr = ] Adobe -> %CommonProgramFiles%\Adobe -> [Folder | Created Date = 17/01/2008 17:12:02 | Attr = ] DESIGNER -> %CommonProgramFiles%\DESIGNER -> [Folder | Created Date = 20/01/2008 11:11:18 | Attr = ] InstallShield -> %CommonProgramFiles%\InstallShield -> [Folder | Created Date = 16/01/2008 07:16:57 | Attr = ] Java -> %CommonProgramFiles%\Java -> [Folder | Created Date = 20/01/2008 16:41:30 | Attr = ] Microsoft Shared -> %CommonProgramFiles%\Microsoft Shared -> [Folder | Created Date = 16/01/2008 06:53:46 | Attr = ] MSSoap -> %CommonProgramFiles%\MSSoap -> [Folder | Created Date = 16/01/2008 07:08:03 | Attr = ] Nero -> %CommonProgramFiles%\Nero -> [Folder | Created Date = 10/02/2008 18:38:08 | Attr = ] ODBC -> %CommonProgramFiles%\ODBC -> [Folder | Created Date = 16/01/2008 06:53:49 | Attr = ] Services -> %CommonProgramFiles%\Services -> [Folder | Created Date = 16/01/2008 07:08:06 | Attr = ] Skype -> %CommonProgramFiles%\Skype -> [Folder | Created Date = 03/02/2008 10:25:22 | Attr = ] Sony Ericsson Shared -> %CommonProgramFiles%\Sony Ericsson Shared -> [Folder | Created Date = 13/03/2008 05:01:19 | Attr = ] SpeechEngines -> %CommonProgramFiles%\SpeechEngines -> [Folder | Created Date = 16/01/2008 06:53:47 | Attr = ] System -> %CommonProgramFiles%\System -> [Folder | Created Date = 16/01/2008 07:07:36 | Attr = ] Teleca Shared -> %CommonProgramFiles%\Teleca Shared -> [Folder | Created Date = 13/03/2008 05:01:18 | Attr = ] Wise Installation Wizard -> %CommonProgramFiles%\Wise Installation Wizard -> [Folder | Created Date = 22/03/2008 16:31:37 | Attr = ] X10 -> %CommonProgramFiles%\X10 -> [Folder | Created Date = 16/01/2008 07:57:05 | Attr = ] [Files/Folders - Modified Within 90 days] 4bfe13da4b108c333602cab0 -> %SystemDrive%\4bfe13da4b108c333602cab0 -> [Folder | Modified Date = 16/01/2008 19:30:54 | Attr = ] 99296fd6168a9ad18e1b -> %SystemDrive%\99296fd6168a9ad18e1b -> [Folder | Modified Date = 16/01/2008 19:31:29 | Attr = ] a875fa28c8c0c5cdc3 -> %SystemDrive%\a875fa28c8c0c5cdc3 -> [Folder | Modified Date = 16/01/2008 19:32:36 | Attr = ] AUTOEXEC.BAT -> %SystemDrive%\AUTOEXEC.BAT -> [Ver = | Size = 0 bytes | Modified Date = 16/01/2008 07:09:44 | Attr = ] BagleFix -> %SystemDrive%\BagleFix -> [Folder | Modified Date = 22/03/2008 21:27:57 | Attr = ] boot.ini -> %SystemDrive%\boot.ini -> [Ver = | Size = 211 bytes | Modified Date = 21/03/2008 10:23:34 | Attr = ] boot.ini~ -> %SystemDrive%\boot.ini~ -> [Ver = | Size = 229 bytes | Modified Date = 19/03/2008 09:40:28 | Attr = HS] Config.Msi -> %SystemDrive%\Config.Msi -> [Folder | Modified Date = 27/03/2008 22:02:37 | Attr = HS] CONFIG.SYS -> %SystemDrive%\CONFIG.SYS -> [Ver = | Size = 0 bytes | Modified Date = 16/01/2008 07:09:44 | Attr = ] Documents and Settings -> %SystemDrive%\Documents and Settings -> [Folder | Modified Date = 20/01/2008 11:44:24 | Attr = ] Intel -> %SystemDrive%\Intel -> [Folder | Modified Date = 24/02/2008 20:32:41 | Attr = ] IO.SYS -> %SystemDrive%\IO.SYS -> [Ver = | Size = 0 bytes | Modified Date = 16/01/2008 07:09:44 | Attr = RHS] lj632 -> %SystemDrive%\lj632 -> [Folder | Modified Date = 17/01/2008 11:21:53 | Attr = ] Lxk6100 -> %SystemDrive%\Lxk6100 -> [Folder | Modified Date = 17/01/2008 10:58:18 | Attr = ] MSDOS.SYS -> %SystemDrive%\MSDOS.SYS -> [Ver = | Size = 0 bytes | Modified Date = 16/01/2008 07:09:44 | Attr = RHS] Program Files -> %ProgramFiles% -> [Folder | Modified Date = 27/03/2008 17:45:13 | Attr = R ] QooBox -> %SystemDrive%\QooBox -> [Folder | Modified Date = 27/03/2008 17:22:19 | Attr = ] RECYCLER -> %SystemDrive%\RECYCLER -> [Folder | Modified Date = 16/01/2008 07:25:35 | Attr = HS] System Volume Information -> %SystemDrive%\System Volume Information -> [Folder | Modified Date = 27/03/2008 08:16:58 | Attr = HS] WINDOWS -> %SystemRoot% -> [Folder | Modified Date = 27/03/2008 22:03:25 | Attr = ] aavmker4.sys -> %SystemRoot%\System32\drivers\aavmker4.sys -> ALWIL Software [Ver = 4.8.1142.0 | Size = 26752 bytes | Modified Date = 10/03/2008 13:16:08 | Attr = ] AegisP.sys -> %SystemRoot%\System32\drivers\AegisP.sys -> Meetinghouse Data Communications [Ver = 3.0.0.6 | Size = 15939 bytes | Modified Date = 16/01/2008 07:48:24 | Attr = ] aswFsBlk.sys -> %SystemRoot%\System32\drivers\aswFsBlk.sys -> ALWIL Software [Ver = 4.8.1142.0 | Size = 20560 bytes | Modified Date = 10/03/2008 13:21:21 | Attr = ] aswmon.sys -> %SystemRoot%\System32\drivers\aswmon.sys -> ALWIL Software [Ver = 4.7.1098.0 | Size = 93264 bytes | Modified Date = 17/01/2008 16:34:01 | Attr = ] aswmon2.sys -> %SystemRoot%\System32\drivers\aswmon2.sys -> ALWIL Software [Ver = 4.8.1142.0 | Size = 94544 bytes | Modified Date = 10/03/2008 13:21:02 | Attr = ] aswRdr.sys -> %SystemRoot%\System32\drivers\aswRdr.sys -> ALWIL Software [Ver = 4.8.1142.0 | Size = 23152 bytes | Modified Date = 10/03/2008 13:17:31 | Attr = ] aswSP.sys -> %SystemRoot%\System32\drivers\aswSP.sys -> ALWIL Software [Ver = 4.8.1142.0 | Size = 57424 bytes | Modified Date = 10/03/2008 13:19:02 | Attr = ] aswTdi.sys -> %SystemRoot%\System32\drivers\aswTdi.sys -> ALWIL Software [Ver = 4.8.1142.0 | Size = 42912 bytes | Modified Date = 10/03/2008 13:16:27 | Attr = ] avg7core.sys -> %SystemRoot%\System32\drivers\avg7core.sys -> GRISOFT, s.r.o. [Ver = 7.5.0.498 | Size = 821856 bytes | Modified Date = 19/01/2008 22:22:20 | Attr = ] avg7rsw.sys -> %SystemRoot%\System32\drivers\avg7rsw.sys -> GRISOFT, s.r.o. [Ver = 7,0,0,340 | Size = 4224 bytes | Modified Date = 19/01/2008 22:22:22 | Attr = ] avg7rsxp.sys -> %SystemRoot%\System32\drivers\avg7rsxp.sys -> GRISOFT, s.r.o. [Ver = 7.5.0.442 | Size = 27776 bytes | Modified Date = 19/01/2008 22:22:22 | Attr = ] avgtdi.sys -> %SystemRoot%\System32\drivers\avgtdi.sys -> GRISOFT, s.r.o. [Ver = 7,0,0,346 | Size = 4960 bytes | Modified Date = 19/01/2008 22:22:23 | Attr = ] disdn -> %SystemRoot%\System32\drivers\disdn -> [Folder | Modified Date = 16/01/2008 06:47:00 | Attr = ] etc -> %SystemRoot%\System32\drivers\etc -> [Folder | Modified Date = 27/03/2008 17:19:27 | Attr = ] hosts -> %SystemRoot%\System32\drivers\etc\hosts -> [Ver = | Size = 27 bytes | Modified Date = 27/03/2008 17:19:27 | Attr = ] hamachi.sys -> %SystemRoot%\System32\drivers\hamachi.sys -> LogMeIn, Inc. [Ver = 6.0.2.2 | Size = 25280 bytes | Modified Date = 05/02/2008 22:39:37 | Attr = ] PnkBstrK.sys -> %SystemRoot%\System32\drivers\PnkBstrK.sys -> [Ver = | Size = 22328 bytes | Modified Date = 27/01/2008 20:50:20 | Attr = ] tmcomm.sys -> %SystemRoot%\System32\drivers\tmcomm.sys -> Trend Micro Inc. [Ver = 1.6.0.1059 | Size = 102664 bytes | Modified Date = 27/03/2008 07:44:25 | Attr = ] UMDF -> %SystemRoot%\System32\drivers\UMDF -> [Folder | Modified Date = 16/01/2008 19:31:20 | Attr = ] MsftWdf_user_01_00_00.Wdf -> %SystemRoot%\System32\drivers\UMDF\MsftWdf_user_01_00_00.Wdf -> [Ver = | Size = 0 bytes | Modified Date = 16/01/2008 19:30:54 | Attr = H ] USBCRFT.SYS -> %SystemRoot%\System32\drivers\USBCRFT.SYS -> ICSI Technology Ltd. [Ver = V2.11.0718 | Size = 17408 bytes | Modified Date = 27/03/2008 22:03:02 | Attr = ] vim.sys -> %SystemRoot%\System32\drivers\vim.sys -> [Ver = | Size = 5248 bytes | Modified Date = 27/01/2008 19:40:56 | Attr = ] $winnt$.inf -> %SystemRoot%\System32\$winnt$.inf -> [Ver = | Size = 261 bytes | Modified Date = 16/01/2008 07:11:40 | Attr = ] 1025 -> %SystemRoot%\System32\1025 -> [Folder | Modified Date = 16/01/2008 06:47:00 | Attr = ] 9 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> 1028 -> %SystemRoot%\System32\1028 -> [Folder | Modified Date = 16/01/2008 06:47:00 | Attr = ] 1031 -> %SystemRoot%\System32\1031 -> [Folder | Modified Date = 16/01/2008 06:47:00 | Attr = ] 1033 -> %SystemRoot%\System32\1033 -> [Folder | Modified Date = 16/01/2008 06:47:45 | Attr = ] 1037 -> %SystemRoot%\System32\1037 -> [Folder | Modified Date = 16/01/2008 06:47:00 | Attr = ] 1041 -> %SystemRoot%\System32\1041 -> [Folder | Modified Date = 16/01/2008 06:47:00 | Attr = ] 1042 -> %SystemRoot%\System32\1042 -> [Folder | Modified Date = 16/01/2008 06:47:00 | Attr = ] 1054 -> %SystemRoot%\System32\1054 -> [Folder | Modified Date = 16/01/2008 06:47:00 | Attr = ] 2052 -> %SystemRoot%\System32\2052 -> [Folder | Modified Date = 16/01/2008 06:47:00 | Attr = ] 3076 -> %SystemRoot%\System32\3076 -> [Folder | Modified Date = 16/01/2008 06:47:00 | Attr = ] 3com_dmi -> %SystemRoot%\System32\3com_dmi -> [Folder | Modified Date = 16/01/2008 06:47:00 | Attr = ] amcompat.tlb -> %SystemRoot%\System32\amcompat.tlb -> [Ver = | Size = 16832 bytes | Modified Date = 16/01/2008 20:04:41 | Attr = ] aswBoot.exe -> %SystemRoot%\System32\aswBoot.exe -> ALWIL Software [Ver = 4, 8, 1142, 0 | Size = 1141112 bytes | Modified Date = 10/03/2008 13:26:35 | Attr = ] autoexec.nt -> %SystemRoot%\System32\autoexec.nt -> [Ver = | Size = 1765 bytes | Modified Date = 19/01/2008 10:30:56 | Attr = ] AvastSS.scr -> %SystemRoot%\System32\AvastSS.scr -> ALWIL Software [Ver = 4, 8, 1142, 0 | Size = 95608 bytes | Modified Date = 10/03/2008 13:14:51 | Attr = ] b4fm.dll -> %SystemRoot%\System32\b4fm.dll -> [Ver = | Size = 223744 bytes | Modified Date = 29/02/2008 04:14:04 | Attr = ] CatRoot -> %SystemRoot%\System32\CatRoot -> [Folder | Modified Date = 20/01/2008 12:39:40 | Attr = ] CatRoot2 -> %SystemRoot%\System32\CatRoot2 -> [Folder | Modified Date = 27/03/2008 17:20:53 | Attr = ] cdplayer.exe.manifest -> %SystemRoot%\System32\cdplayer.exe.manifest -> [Ver = | Size = 749 bytes | Modified Date = 16/01/2008 07:08:49 | Attr = RH ] cfgocvga.dll -> %SystemRoot%\System32\cfgocvga.dll -> [Ver = | Size = 2004 bytes | Modified Date = 18/02/2008 17:20:08 | Attr = ] CmdLineExt.dll -> %SystemRoot%\System32\CmdLineExt.dll -> Sony DADC Austria AG. [Ver = 1,0,201,0 | Size = 98304 bytes | Modified Date = 18/01/2008 19:32:37 | Attr = ] Com -> %SystemRoot%\System32\Com -> [Folder | Modified Date = 16/01/2008 08:28:51 | Attr = ] config -> %SystemRoot%\System32\config -> [Folder | Modified Date = 27/03/2008 17:16:52 | Attr = ] CONFIG.NT -> %SystemRoot%\System32\CONFIG.NT -> [Ver = | Size = 2626 bytes | Modified Date = 27/03/2008 08:18:10 | Attr = ] dhcp -> %SystemRoot%\System32\dhcp -> [Folder | Modified Date = 16/01/2008 06:47:00 | Attr = ] DirectX -> %SystemRoot%\System32\DirectX -> [Folder | Modified Date = 16/01/2008 19:27:21 | Attr = ] dllcache -> %SystemRoot%\System32\dllcache -> [Folder | Modified Date = 27/03/2008 08:43:22 | Attr = RHS] drivers -> %SystemRoot%\System32\drivers -> [Folder | Modified Date = 27/03/2008 22:00:17 | Attr = H ] DRVSTORE -> %SystemRoot%\System32\DRVSTORE -> [Folder | Modified Date = 13/03/2008 05:03:35 | Attr = ] emptyregdb.dat -> %SystemRoot%\System32\emptyregdb.dat -> [Ver = | Size = 21640 bytes | Modified Date = 16/01/2008 07:07:16 | Attr = ] en-US -> %SystemRoot%\System32\en-US -> [Folder | Modified Date = 20/01/2008 12:38:46 | Attr = ] export -> %SystemRoot%\System32\export -> [Folder | Modified Date = 16/01/2008 06:47:00 | Attr = ] FNTCACHE.DAT -> %SystemRoot%\System32\FNTCACHE.DAT -> [Ver = | Size = 267008 bytes | Modified Date = 21/02/2008 21:02:52 | Attr = ] ias -> %SystemRoot%\System32\ias -> [Folder | Modified Date = 16/01/2008 06:47:49 | Attr = ] icsxml -> %SystemRoot%\System32\icsxml -> [Folder | Modified Date = 16/01/2008 06:48:11 | Attr = ] IME -> %SystemRoot%\System32\IME -> [Folder | Modified Date = 16/01/2008 06:47:00 | Attr = ] inetsrv -> %SystemRoot%\System32\inetsrv -> [Folder | Modified Date = 16/01/2008 06:47:00 | Attr = ] java.exe -> %SystemRoot%\System32\java.exe -> Sun Microsystems, Inc. [Ver = 6.0.50.13 | Size = 135168 bytes | Modified Date = 22/02/2008 01:23:35 | Attr = ] javacpl.cpl -> %SystemRoot%\System32\javacpl.cpl -> Sun Microsystems, Inc. [Ver = 6.0.50.13 | Size = 69632 bytes | Modified Date = 22/02/2008 02:33:31 | Attr = ] javaw.exe -> %SystemRoot%\System32\javaw.exe -> Sun Microsystems, Inc. [Ver = 6.0.50.13 | Size = 135168 bytes | Modified Date = 22/02/2008 01:23:39 | Attr = ] javaws.exe -> %SystemRoot%\System32\javaws.exe -> Sun Microsystems, Inc. [Ver = 6.0.50.13 | Size = 139264 bytes | Modified Date = 22/02/2008 02:33:32 | Attr = ] LogFiles -> %SystemRoot%\System32\LogFiles -> [Folder | Modified Date = 26/01/2008 16:55:40 | Attr = ] logonui.exe.manifest -> %SystemRoot%\System32\logonui.exe.manifest -> [Ver = | Size = 488 bytes | Modified Date = 16/01/2008 07:08:54 | Attr = RH ] Macromed -> %SystemRoot%\System32\Macromed -> [Folder | Modified Date = 16/01/2008 07:07:59 | Attr = ] Microsoft -> %SystemRoot%\System32\Microsoft -> [Folder | Modified Date = 16/01/2008 07:13:28 | Attr = S] MsDtc -> %SystemRoot%\System32\MsDtc -> [Folder | Modified Date = 16/01/2008 07:07:04 | Attr = ] mui -> %SystemRoot%\System32\mui -> [Folder | Modified Date = 16/01/2008 06:47:00 | Attr = ] ncpa.cpl.manifest -> %SystemRoot%\System32\ncpa.cpl.manifest -> [Ver = | Size = 749 bytes | Modified Date = 16/01/2008 07:08:49 | Attr = RH ] npp -> %SystemRoot%\System32\npp -> [Folder | Modified Date = 16/01/2008 06:51:17 | Attr = ] nscompat.tlb -> %SystemRoot%\System32\nscompat.tlb -> [Ver = | Size = 23392 bytes | Modified Date = 16/01/2008 20:04:41 | Attr = ] nwc.cpl.manifest -> %SystemRoot%\System32\nwc.cpl.manifest -> [Ver = | Size = 749 bytes | Modified Date = 16/01/2008 07:08:49 | Attr = RH ] oobe -> %SystemRoot%\System32\oobe -> [Folder | Modified Date = 16/01/2008 07:08:23 | Attr = ] pcisys.ntk -> %SystemRoot%\System32\pcisys.ntk -> [Ver = | Size = 8 bytes | Modified Date = 27/03/2008 22:02:35 | Attr = ] perfc009.dat -> %SystemRoot%\System32\perfc009.dat -> [Ver = | Size = 79662 bytes | Modified Date = 27/03/2008 08:21:15 | Attr = ] perfh009.dat -> %SystemRoot%\System32\perfh009.dat -> [Ver = | Size = 466346 bytes | Modified Date = 27/03/2008 08:21:15 | Attr = ] PerfStringBackup.INI -> %SystemRoot%\System32\PerfStringBackup.INI -> [Ver = | Size = 555932 bytes | Modified Date = 27/03/2008 08:21:15 | Attr = ] PnkBstrA.exe -> %SystemRoot%\System32\PnkBstrA.exe -> [Ver = | Size = 66872 bytes | Modified Date = 26/01/2008 16:55:40 | Attr = ] PnkBstrB.exe -> %SystemRoot%\System32\PnkBstrB.exe -> [Ver = | Size = 107832 bytes | Modified Date = 27/01/2008 20:50:13 | Attr = ] PreInstall -> %SystemRoot%\System32\PreInstall -> [Folder | Modified Date = 16/01/2008 07:58:29 | Attr = ] ras -> %SystemRoot%\System32\ras -> [Folder | Modified Date = 16/01/2008 06:48:32 | Attr = ] ReinstallBackups -> %SystemRoot%\System32\ReinstallBackups -> [Folder | Modified Date = 27/03/2008 08:17:44 | Attr = ] Restore -> %SystemRoot%\System32\Restore -> [Folder | Modified Date = 27/03/2008 08:16:58 | Attr = ] sapi.cpl.manifest -> %SystemRoot%\System32\sapi.cpl.manifest -> [Ver = | Size = 749 bytes | Modified Date = 16/01/2008 07:08:49 | Attr = RH ] Setup -> %SystemRoot%\System32\Setup -> [Folder | Modified Date = 16/01/2008 06:51:51 | Attr = ] ShellExt -> %SystemRoot%\System32\ShellExt -> [Folder | Modified Date = 16/01/2008 06:47:00 | Attr = ] SoftwareDistribution -> %SystemRoot%\System32\SoftwareDistribution -> [Folder | Modified Date = 16/01/2008 07:25:57 | Attr = ] spool -> %SystemRoot%\System32\spool -> [Folder | Modified Date = 16/01/2008 19:32:47 | Attr = ] streamhlp.dll -> %SystemRoot%\System32\streamhlp.dll -> [Ver = | Size = 59392 bytes | Modified Date = 22/03/2008 14:44:48 | Attr = R ] temp -> %SystemRoot%\System32\temp -> [Folder | Modified Date = 15/03/2008 17:11:02 | Attr = ] URTTemp -> %SystemRoot%\System32\URTTemp -> [Folder | Modified Date = 16/01/2008 19:26:17 | Attr = ] usmt -> %SystemRoot%\System32\usmt -> [Folder | Modified Date = 20/01/2008 11:18:44 | Attr = ] wbem -> %SystemRoot%\System32\wbem -> [Folder | Modified Date = 20/01/2008 12:28:17 | Attr = ] WindowsLogon.manifest -> %SystemRoot%\System32\WindowsLogon.manifest -> [Ver = | Size = 488 bytes | Modified Date = 16/01/2008 07:08:54 | Attr = RH ] wins -> %SystemRoot%\System32\wins -> [Folder | Modified Date = 16/01/2008 06:47:00 | Attr = ] wpa.bak -> %SystemRoot%\System32\wpa.bak -> [Ver = | Size = 2422 bytes | Modified Date = 16/01/2008 07:54:06 | Attr = ] wpa.dbl -> %SystemRoot%\System32\wpa.dbl -> [Ver = | Size = 2422 bytes | Modified Date = 27/03/2008 22:03:28 | Attr = ] wuaucpl.cpl.manifest -> %SystemRoot%\System32\wuaucpl.cpl.manifest -> [Ver = | Size = 749 bytes | Modified Date = 16/01/2008 07:08:49 | Attr = RH ] xircom -> %SystemRoot%\System32\xircom -> [Folder | Modified Date = 16/01/2008 07:09:59 | Attr = ] XPSViewer -> %SystemRoot%\System32\XPSViewer -> [Folder | Modified Date = 20/01/2008 10:57:06 | Attr = ] $hf_mig$ -> %SystemRoot%\$hf_mig$ -> [Folder | Modified Date = 27/03/2008 08:23:20 | Attr = H ] 3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> $MSI31Uninstall_KB893803v2$ -> %SystemRoot%\$MSI31Uninstall_KB893803v2$ -> [Folder | Modified Date = 16/01/2008 07:58:23 | Attr = H ] $NtServicePackUninstallIDNMitigationAPIs$ -> %SystemRoot%\$NtServicePackUninstallIDNMitigationAPIs$ -> [Folder | Modified Date = 16/01/2008 08:48:04 | Attr = H ] $NtServicePackUninstallNLSDownlevelMapping$ -> %SystemRoot%\$NtServicePackUninstallNLSDownlevelMapping$ -> [Folder | Modified Date = 16/01/2008 08:47:48 | Attr = H ] addins -> %SystemRoot%\addins -> [Folder | Modified Date = 16/01/2008 06:47:00 | Attr = ] AppPatch -> %SystemRoot%\AppPatch -> [Folder | Modified Date = 16/01/2008 20:04:20 | Attr = ] assembly -> %SystemRoot%\assembly -> [Folder | Modified Date = 26/01/2008 14:21:28 | Attr = R S] bootstat.dat -> %SystemRoot%\bootstat.dat -> [Ver = | Size = 2048 bytes | Modified Date = 27/03/2008 22:02:43 | Attr = S] Burn4Free_Toolbar_Uninstaller_7937.exe -> %SystemRoot%\Burn4Free_Toolbar_Uninstaller_7937.exe -> Burn4Free [Ver = 4.2.0.0 | Size = 232034 bytes | Modified Date = 11/03/2008 19:51:28 | Attr = ] Config -> %SystemRoot%\Config -> [Folder | Modified Date = 16/01/2008 06:47:00 | Attr = ] Connection Wizard -> %SystemRoot%\Connection Wizard -> [Folder | Modified Date = 16/01/2008 06:47:00 | Attr = ] control.ini -> %SystemRoot%\control.ini -> [Ver = | Size = 0 bytes | Modified Date = 16/01/2008 07:09:44 | Attr = ] CSC -> %SystemRoot%\CSC -> [Folder | Modified Date = 27/03/2008 07:42:01 | Attr = HS] Cursors -> %SystemRoot%\Cursors -> [Folder | Modified Date = 10/02/2008 18:38:04 | Attr = ] Debug -> %SystemRoot%\Debug -> [Folder | Modified Date = 16/01/2008 06:52:53 | Attr = ] Downloaded Installations -> %SystemRoot%\Downloaded Installations -> [Folder | Modified Date = 13/03/2008 05:00:56 | Attr = ] Downloaded Program Files -> %SystemRoot%\Downloaded Program Files -> [Folder | Modified Date = 17/01/2008 08:05:09 | Attr = S] Driver Cache -> %SystemRoot%\Driver Cache -> [Folder | Modified Date = 16/01/2008 06:47:00 | Attr = ] ehome -> %SystemRoot%\ehome -> [Folder | Modified Date = 16/01/2008 06:51:34 | Attr = ] erdnt -> %SystemRoot%\erdnt -> [Folder | Modified Date = 27/03/2008 17:16:45 | Attr = ] Fonts -> %SystemRoot%\Fonts -> [Folder | Modified Date = 13/02/2008 12:34:44 | Attr = R S] Help -> %SystemRoot%\Help -> [Folder | Modified Date = 20/01/2008 09:58:07 | Attr = ] ie7 -> %SystemRoot%\ie7 -> [Folder | Modified Date = 16/01/2008 08:48:44 | Attr = H ] ie7updates -> %SystemRoot%\ie7updates -> [Folder | Modified Date = 27/03/2008 08:40:59 | Attr = ] ime -> %SystemRoot%\ime -> [Folder | Modified Date = 16/01/2008 07:09:59 | Attr = ] imsins.BAK -> %SystemRoot%\imsins.BAK -> [Ver = | Size = 1374 bytes | Modified Date = 27/03/2008 08:41:19 | Attr = ] inf -> %SystemRoot%\inf -> [Folder | Modified Date = 27/03/2008 21:59:57 | Attr = H ] Installer -> %SystemRoot%\Installer -> [Folder | Modified Date = 27/03/2008 22:01:07 | Attr = HS] java -> %SystemRoot%\java -> [Folder | Modified Date = 16/01/2008 06:47:00 | Attr = ] lexstat.ini -> %SystemRoot%\lexstat.ini -> [Ver = | Size = 393 bytes | Modified Date = 27/01/2008 20:46:39 | Attr = ] Media -> %SystemRoot%\Media -> [Folder | Modified Date = 16/01/2008 08:48:48 | Attr = ] Microsoft.NET -> %SystemRoot%\Microsoft.NET -> [Folder | Modified Date = 20/01/2008 11:02:06 | Attr = ] Minidump -> %SystemRoot%\Minidump -> [Folder | Modified Date = 27/03/2008 07:41:59 | Attr = ] mozver.dat -> %SystemRoot%\mozver.dat -> [Ver = | Size = 1397 bytes | Modified Date = 20/01/2008 16:49:45 | Attr = ] msagent -> %SystemRoot%\msagent -> [Folder | Modified Date = 16/01/2008 19:05:23 | Attr = ] msapps -> %SystemRoot%\msapps -> [Folder | Modified Date = 16/01/2008 06:47:00 | Attr = ] mui -> %SystemRoot%\mui -> [Folder | Modified Date = 16/01/2008 06:51:34 | Attr = ] NeroDigital.ini -> %SystemRoot%\NeroDigital.ini -> [Ver = | Size = 69 bytes | Modified Date = 27/03/2008 17:44:37 | Attr = ] network diagnostic -> %SystemRoot%\network diagnostic -> [Folder | Modified Date = 16/01/2008 08:46:59 | Attr = ] nsreg.dat -> %SystemRoot%\nsreg.dat -> [Ver = | Size = 0 bytes | Modified Date = 17/01/2008 10:43:43 | Attr = ] ODBCINST.INI -> %SystemRoot%\ODBCINST.INI -> [Ver = | Size = 4161 bytes | Modified Date = 16/01/2008 07:09:34 | Attr = ] Offline Web Pages -> %SystemRoot%\Offline Web Pages -> [Folder | Modified Date = 16/01/2008 07:08:54 | Attr = R ] pchealth -> %SystemRoot%\pchealth -> [Folder | Modified Date = 16/01/2008 07:07:50 | Attr = ] PeerNet -> %SystemRoot%\PeerNet -> [Folder | Modified Date = 16/01/2008 06:51:26 | Attr = ] Prefetch -> %SystemRoot%\Prefetch -> [Folder | Modified Date = 27/03/2008 08:17:43 | Attr = ] Provisioning -> %SystemRoot%\Provisioning -> [Folder | Modified Date = 16/01/2008 06:47:00 | Attr = ] pss -> %SystemRoot%\pss -> [Folder | Modified Date = 19/03/2008 09:39:27 | Attr = ] RegisteredPackages -> %SystemRoot%\RegisteredPackages -> [Folder | Modified Date = 16/01/2008 19:27:51 | Attr = ] Registration -> %SystemRoot%\Registration -> [Folder | Modified Date = 17/01/2008 08:58:27 | Attr = ] REGLOCS.OLD -> %SystemRoot%\REGLOCS.OLD -> [Ver = | Size = 8192 bytes | Modified Date = 16/01/2008 07:12:24 | Attr = ] repair -> %SystemRoot%\repair -> [Folder | Modified Date = 27/03/2008 08:19:19 | Attr = ] Resources -> %SystemRoot%\Resources -> [Folder | Modified Date = 16/01/2008 06:47:00 | Attr = ] security -> %SystemRoot%\security -> [Folder | Modified Date = 16/01/2008 20:03:43 | Attr = ] SHELLNEW -> %SystemRoot%\SHELLNEW -> [Folder | Modified Date = 20/01/2008 11:08:47 | Attr = ] SoftwareDistribution -> %SystemRoot%\SoftwareDistribution -> [Folder | Modified Date = 16/01/2008 07:47:43 | Attr = ] srchasst -> %SystemRoot%\srchasst -> [Folder | Modified Date = 16/01/2008 07:08:38 | Attr = ] Sun -> %SystemRoot%\Sun -> [Folder | Modified Date = 20/01/2008 16:50:08 | Attr = ] system -> %SystemRoot%\system -> [Folder | Modified Date = 27/03/2008 17:28:28 | Attr = ] system.ini -> %SystemRoot%\system.ini -> [Ver = | Size = 227 bytes | Modified Date = 27/03/2008 17:19:39 | Attr = ] system32 -> %SystemRoot%\system32 -> [Folder | Modified Date = 27/03/2008 22:00:17 | Attr = ] Tasks -> %SystemRoot%\Tasks -> [Folder | Modified Date = 16/01/2008 07:13:28 | Attr = S] TEMP -> %SystemRoot%\TEMP -> [Folder | Modified Date = 27/03/2008 22:03:33 | Attr = ] twain_32 -> %SystemRoot%\twain_32 -> [Folder | Modified Date = 20/01/2008 11:32:42 | Attr = ] vb.ini -> %SystemRoot%\vb.ini -> [Ver = | Size = 36 bytes | Modified Date = 16/01/2008 07:07:08 | Attr = ] vbaddin.ini -> %SystemRoot%\vbaddin.ini -> [Ver = | Size = 37 bytes | Modified Date = 16/01/2008 07:07:08 | Attr = ] vpd.properties -> %SystemRoot%\vpd.properties -> [Ver = | Size = 7449 bytes | Modified Date = 18/01/2008 18:23:44 | Attr = ] WBEM -> %SystemRoot%\WBEM -> [Folder | Modified Date = 16/01/2008 08:48:52 | Attr = ] Web -> %SystemRoot%\Web -> [Folder | Modified Date = 16/01/2008 07:08:57 | Attr = R ] win.ini -> %SystemRoot%\win.ini -> [Ver = | Size = 582 bytes | Modified Date = 21/03/2008 10:23:34 | Attr = ] WindowsShell.Manifest -> %SystemRoot%\WindowsShell.Manifest -> [Ver = | Size = 749 bytes | Modified Date = 16/01/2008 07:08:49 | Attr = RH ] WinSxS -> %SystemRoot%\WinSxS -> [Folder | Modified Date = 27/03/2008 08:40:53 | Attr = ] WMSysPr9.prx -> %SystemRoot%\WMSysPr9.prx -> [Ver = | Size = 316640 bytes | Modified Date = 16/01/2008 19:27:48 | Attr = ] SA.DAT -> %SystemRoot%\tasks\SA.DAT -> [Ver = | Size = 6 bytes | Modified Date = 27/03/2008 22:02:48 | Attr = H ] qmgr0.dat -> C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat -> [Ver = | Size = 5350 bytes | Modified Date = 27/03/2008 08:35:09 | Attr = ] qmgr1.dat -> C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat -> [Ver = | Size = 4232 bytes | Modified Date = 27/03/2008 08:35:10 | Attr = ] opa12.dat -> C:\Documents and Settings\All Users\Application Data\Microsoft\OFFICE\DATA\opa12.dat -> [Ver = | Size = 8206 bytes | Modified Date = 20/01/2008 12:28:14 | Attr = ] Perflib_Perfdata_820.dat -> C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Temp\usgthrsvc\Perflib_Perfdata_820.dat -> [Ver = | Size = 16384 bytes | Modified Date = 27/03/2008 22:03:21 | Attr = ] 2 C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Temp\usgthrsvc\*.tmp files -> C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Temp\usgthrsvc\*.tmp -> Perflib_Perfdata_220.dat -> C:\WINDOWS\TEMP\Perflib_Perfdata_220.dat -> [Ver = | Size = 16384 bytes | Modified Date = 27/03/2008 22:02:48 | Attr = ] 1 C:\WINDOWS\Temp\*.tmp files -> C:\WINDOWS\Temp\*.tmp -> aswUpdSum.ini -> C:\WINDOWS\TEMP\aswUpdSum.ini -> [Ver = | Size = 102 bytes | Modified Date = 27/03/2008 22:03:18 | Attr = ] 1 C:\WINDOWS\Temp\*.tmp files -> C:\WINDOWS\Temp\*.tmp -> [Files Modified - Additional Folder Scans - Non-Microsoft Only] Adobe -> %AllUsersProfile%\Application Data\Adobe -> [Folder | Modified Date = 17/01/2008 17:12:20 | Attr = ] ATI -> %AllUsersProfile%\Application Data\ATI -> [Folder | Modified Date = 26/01/2008 14:21:43 | Attr = ] Avg7 -> %AllUsersProfile%\Application Data\Avg7 -> [Folder | Modified Date = 27/03/2008 17:28:01 | Attr = ] Bluetooth -> %AllUsersProfile%\Application Data\Bluetooth -> [Folder | Modified Date = 16/01/2008 07:28:05 | Attr = ] desktop.ini -> %AllUsersProfile%\Application Data\desktop.ini -> [Ver = | Size = 62 bytes | Modified Date = 16/01/2008 06:53:25 | Attr = HS] ezsid.dat -> %AllUsersProfile%\Application Data\ezsid.dat -> [Ver = | Size = 32 bytes | Modified Date = 03/02/2008 10:26:59 | Attr = ] Lavasoft -> %AllUsersProfile%\Application Data\Lavasoft -> [Folder | Modified Date = 22/03/2008 16:33:10 | Attr = ] Microsoft -> %AllUsersProfile%\Application Data\Microsoft -> [Folder | Modified Date = 02/02/2008 14:19:30 | Attr = S] Microsoft Help -> %AllUsersProfile%\Application Data\Microsoft Help -> [Folder | Modified Date = 27/03/2008 08:46:29 | Attr = ] Nero -> %AllUsersProfile%\Application Data\Nero -> [Folder | Modified Date = 10/02/2008 18:38:09 | Attr = ] Skype -> %AllUsersProfile%\Application Data\Skype -> [Folder | Modified Date = 03/02/2008 10:25:23 | Attr = ] Sony Ericsson -> %AllUsersProfile%\Application Data\Sony Ericsson -> [Folder | Modified Date = 13/03/2008 05:01:22 | Attr = ] Spybot - Search & Destroy -> %AllUsersProfile%\Application Data\Spybot - Search & Destroy -> [Folder | Modified Date = 27/03/2008 18:16:18 | Attr = ] Teleca -> %AllUsersProfile%\Application Data\Teleca -> [Folder | Modified Date = 13/03/2008 05:01:24 | Attr = ] Windows Genuine Advantage -> %AllUsersProfile%\Application Data\Windows Genuine Advantage -> [Folder | Modified Date = 16/01/2008 08:24:46 | Attr = ] $_hpcst$.hpc -> %AppData%\$_hpcst$.hpc -> [Ver = | Size = 2528 bytes | Modified Date = 20/01/2008 09:59:03 | Attr = ] .emacs.d -> %AppData%\.emacs.d -> [Folder | Modified Date = 16/02/2008 11:12:41 | Attr = ] Adobe -> %AppData%\Adobe -> [Folder | Modified Date = 17/01/2008 17:13:56 | Attr = ] Anvil Studio -> %AppData%\Anvil Studio -> [Folder | Modified Date = 01/03/2008 21:43:52 | Attr = ] ATI -> %AppData%\ATI -> [Folder | Modified Date = 26/01/2008 14:21:43 | Attr = ] desktop.ini -> %AppData%\desktop.ini -> [Ver = | Size = 62 bytes | Modified Date = 16/01/2008 06:53:25 | Attr = HS] dvdcss -> %AppData%\dvdcss -> [Folder | Modified Date = 07/02/2008 14:20:12 | Attr = ] Hamachi -> %AppData%\Hamachi -> [Folder | Modified Date = 27/03/2008 22:03:46 | Attr = ] Help -> %AppData%\Help -> [Folder | Modified Date = 27/01/2008 15:30:23 | Attr = ] Identities -> %AppData%\Identities -> [Folder | Modified Date = 16/01/2008 07:14:25 | Attr = ] Macromedia -> %AppData%\Macromedia -> [Folder | Modified Date = 17/01/2008 08:05:13 | Attr = ] Microsoft -> %AppData%\Microsoft -> [Folder | Modified Date = 24/02/2008 21:10:48 | Attr = S] Mozilla -> %AppData%\Mozilla -> [Folder | Modified Date = 17/01/2008 10:46:59 | Attr = ] Nero -> %AppData%\Nero -> [Folder | Modified Date = 10/02/2008 18:40:21 | Attr = ] Skype -> %AppData%\Skype -> [Folder | Modified Date = 08/03/2008 23:41:29 | Attr = ] skypePM -> %AppData%\skypePM -> [Folder | Modified Date = 08/03/2008 21:37:16 | Attr = ] Sony Ericsson -> %AppData%\Sony Ericsson -> [Folder | Modified Date = 13/03/2008 05:01:29 | Attr = ] Sun -> %AppData%\Sun -> [Folder | Modified Date = 20/01/2008 16:50:07 | Attr = ] Talkback -> %AppData%\Talkback -> [Folder | Modified Date = 17/01/2008 10:43:49 | Attr = ] Teleca -> %AppData%\Teleca -> [Folder | Modified Date = 15/03/2008 21:55:35 | Attr = ] Thunderbird -> %AppData%\Thunderbird -> [Folder | Modified Date = 19/01/2008 12:38:06 | Attr = ] TrojanHunter -> %AppData%\TrojanHunter -> [Folder | Modified Date = 27/03/2008 19:11:51 | Attr = ] vlc -> %AppData%\vlc -> [Folder | Modified Date = 20/01/2008 12:59:43 | Attr = ] Windows Desktop Search -> %AppData%\Windows Desktop Search -> [Folder | Modified Date = 20/01/2008 12:42:12 | Attr = ] Winff -> %AppData%\Winff -> [Folder | Modified Date = 20/02/2008 09:29:53 | Attr = ] WinRAR -> %AppData%\WinRAR -> [Folder | Modified Date = 20/01/2008 10:01:08 | Attr = ] Adobe -> %UserProfile%\Local Settings\Application Data\Adobe -> [Folder | Modified Date = 17/01/2008 17:14:15 | Attr = ] Ahead -> %UserProfile%\Local Settings\Application Data\Ahead -> [Folder | Modified Date = 10/02/2008 18:41:26 | Attr = ] ApplicationHistory -> %UserProfile%\Local Settings\Application Data\ApplicationHistory -> [Folder | Modified Date = 17/01/2008 09:00:06 | Attr = ] ATI -> %UserProfile%\Local Settings\Application Data\ATI -> [Folder | Modified Date = 26/01/2008 14:21:43 | Attr = ] DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini -> %UserProfile%\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini -> [Ver = | Size = 38400 bytes | Modified Date = 22/03/2008 21:05:17 | Attr = ] GDIPFONTCACHEV1.DAT -> %UserProfile%\Local Settings\Application Data\GDIPFONTCACHEV1.DAT -> [Ver = | Size = 68856 bytes | Modified Date = 21/02/2008 21:08:34 | Attr = ] Help -> %UserProfile%\Local Settings\Application Data\Help -> [Folder | Modified Date = 27/01/2008 15:30:23 | Attr = ] IconCache.db -> %UserProfile%\Local Settings\Application Data\IconCache.db -> [Ver = | Size = 2642382 bytes | Modified Date = 05/02/2008 22:33:42 | Attr = H ] Identities -> %UserProfile%\Local Settings\Application Data\Identities -> [Folder | Modified Date = 20/01/2008 12:42:14 | Attr = ] Microsoft -> %UserProfile%\Local Settings\Application Data\Microsoft -> [Folder | Modified Date = 20/01/2008 12:42:15 | Attr = ] Microsoft Help -> %UserProfile%\Local Settings\Application Data\Microsoft Help -> [Folder | Modified Date = 20/01/2008 11:08:19 | Attr = ] Mozilla -> %UserProfile%\Local Settings\Application Data\Mozilla -> [Folder | Modified Date = 17/01/2008 10:46:59 | Attr = ] Myst V End of Ages -> %UserProfile%\Local Settings\Application Data\Myst V End of Ages -> [Folder | Modified Date = 18/01/2008 19:33:41 | Attr = ] RyanairBargains -> %UserProfile%\Local Settings\Application Data\RyanairBargains -> [Folder | Modified Date = 13/02/2008 12:34:44 | Attr = ] Sony Ericsson -> %UserProfile%\Local Settings\Application Data\Sony Ericsson -> [Folder | Modified Date = 13/03/2008 05:01:42 | Attr = ] Thunderbird -> %UserProfile%\Local Settings\Application Data\Thunderbird -> [Folder | Modified Date = 19/01/2008 12:36:19 | Attr = ] desktop.ini -> %AllUsersProfile%\Documents\desktop.ini -> [Ver = | Size = 62 bytes | Modified Date = 16/01/2008 06:53:25 | Attr = HS] My Music -> %AllUsersProfile%\Documents\My Music -> [Folder | Modified Date = 16/01/2008 19:31:29 | Attr = R ] My Pictures -> %AllUsersProfile%\Documents\My Pictures -> [Folder | Modified Date = 16/01/2008 07:08:13 | Attr = R ] My Videos -> %AllUsersProfile%\Documents\My Videos -> [Folder | Modified Date = 16/01/2008 07:06:07 | Attr = R ] Adobe -> D:\MyDocuments\Adobe -> [Folder | Modified Date = 22/01/2008 12:44:02 | Attr = ] 3 D:\MyDocuments\*.tmp files -> D:\MyDocuments\*.tmp -> Autocad Drawings -> D:\MyDocuments\Autocad Drawings -> [Folder | Modified Date = 22/01/2008 12:44:02 | Attr = ] Autodata -> D:\MyDocuments\Autodata -> [Folder | Modified Date = 22/01/2008 12:44:02 | Attr = ] Bluetooth -> D:\MyDocuments\Bluetooth -> [Folder | Modified Date = 22/01/2008 12:44:02 | Attr = ] Copy (2) of Bluetooth -> D:\MyDocuments\Copy (2) of Bluetooth -> [Folder | Modified Date = 22/01/2008 13:41:25 | Attr = ] Copy of Bluetooth -> D:\MyDocuments\Copy of Bluetooth -> [Folder | Modified Date = 22/01/2008 12:44:02 | Attr = ] Copy of Downloads -> D:\MyDocuments\Copy of Downloads -> [Folder | Modified Date = 22/01/2008 12:44:02 | Attr = ] Copy of My Music -> D:\MyDocuments\Copy of My Music -> [Folder | Modified Date = 24/02/2008 21:29:16 | Attr = R ] Copy of My Videos -> D:\MyDocuments\Copy of My Videos -> [Folder | Modified Date = 22/01/2008 13:41:21 | Attr = R ] Copy of PDP course -> D:\MyDocuments\Copy of PDP course -> [Folder | Modified Date = 22/01/2008 12:43:59 | Attr = ] Copy of SnagIt Catalog -> D:\MyDocuments\Copy of SnagIt Catalog -> [Folder | Modified Date = 24/02/2008 21:29:16 | Attr = ] Corel User Files -> D:\MyDocuments\Corel User Files -> [Folder | Modified Date = 22/01/2008 12:43:51 | Attr = ] cv etc -> D:\MyDocuments\cv etc -> [Folder | Modified Date = 22/01/2008 12:43:51 | Attr = ] CyberLink -> D:\MyDocuments\CyberLink -> [Folder | Modified Date = 22/01/2008 12:43:51 | Attr = ] Desktop -> D:\MyDocuments\Desktop -> [Folder | Modified Date = 22/03/2008 10:00:03 | Attr = ] desktop.ini -> D:\MyDocuments\desktop.ini -> [Ver = | Size = 77 bytes | Modified Date = 22/01/2008 13:41:13 | Attr = HS] Downloaded Installations -> D:\MyDocuments\Downloaded Installations -> [Folder | Modified Date = 22/01/2008 12:42:29 | Attr = ] Downloads -> D:\MyDocuments\Downloads -> [Folder | Modified Date = 26/01/2008 14:46:33 | Attr = ] drawings -> D:\MyDocuments\drawings -> [Folder | Modified Date = 22/01/2008 12:42:26 | Attr = ] educational -> D:\MyDocuments\educational -> [Folder | Modified Date = 22/01/2008 12:42:26 | Attr = ] FirstClass -> D:\MyDocuments\FirstClass -> [Folder | Modified Date = 22/01/2008 12:42:24 | Attr = ] Guitar Shed -> D:\MyDocuments\Guitar Shed -> [Folder | Modified Date = 22/01/2008 12:42:24 | Attr = ] ICQ Lite -> D:\MyDocuments\ICQ Lite -> [Folder | Modified Date = 22/01/2008 12:42:24 | Attr = ] INVESTMENT CLUB ACCOUNT AGREEMENT.doc -> D:\MyDocuments\INVESTMENT CLUB ACCOUNT AGREEMENT.doc -> [Ver = | Size = 74240 bytes | Modified Date = 06/01/2008 22:07:03 | Attr = ] jetpacs -> D:\MyDocuments\jetpacs -> [Folder | Modified Date = 22/01/2008 12:42:24 | Attr = ] JmwA.tmp -> D:\MyDocuments\JmwA.tmp -> [Folder | Modified Date = 22/01/2008 12:42:11 | Attr = ] lastscan.jpg -> D:\MyDocuments\lastscan.jpg -> [Ver = | Size = 439745 bytes | Modified Date = 08/01/2008 19:26:16 | Attr = ] mechatrons -> D:\MyDocuments\mechatrons -> [Folder | Modified Date = 26/02/2008 21:08:50 | Attr = ] My eBooks -> D:\MyDocuments\My eBooks -> [Folder | Modified Date = 22/01/2008 12:42:11 | Attr = ] My Library -> D:\MyDocuments\My Library -> [Folder | Modified Date = 22/01/2008 12:42:08 | Attr = ] My Music -> D:\MyDocuments\My Music -> [Folder | Modified Date = 01/03/2008 20:19:00 | Attr = S] My Pictures -> D:\MyDocuments\My Pictures -> [Folder | Modified Date = 14/03/2008 09:04:38 | Attr = R ] My Received Files -> D:\MyDocuments\My Received Files -> [Folder | Modified Date = 22/01/2008 12:40:03 | Attr = ] My Shapes -> D:\MyDocuments\My Shapes -> [Folder | Modified Date = 22/01/2008 12:40:03 | Attr = S] My Skype Content -> D:\MyDocuments\My Skype Content -> [Folder | Modified Date = 22/01/2008 12:40:03 | Attr = ] My Skype Pictures -> D:\MyDocuments\My Skype Pictures -> [Folder | Modified Date = 22/01/2008 12:40:03 | Attr = ] My Skype Received Files -> D:\MyDocuments\My Skype Received Files -> [Folder | Modified Date = 22/01/2008 12:40:01 | Attr = ] My Videos -> D:\MyDocuments\My Videos -> [Folder | Modified Date = 22/01/2008 12:39:58 | Attr = R ] My Wallpapers -> D:\MyDocuments\My Wallpapers -> [Folder | Modified Date = 22/01/2008 12:39:56 | Attr = R ] My Web Sites -> D:\MyDocuments\My Web Sites -> [Folder | Modified Date = 22/01/2008 12:39:55 | Attr = S] NeroVision -> D:\MyDocuments\NeroVision -> [Folder | Modified Date = 22/01/2008 12:39:49 | Attr = ] neverhood -> D:\MyDocuments\neverhood -> [Folder | Modified Date = 24/02/2008 21:29:19 | Attr = ] OneNote Notebooks -> D:\MyDocuments\OneNote Notebooks -> [Folder | Modified Date = 22/01/2008 12:39:49 | Attr = ] Outlook PST files -> D:\MyDocuments\Outlook PST files -> [Folder | Modified Date = 19/03/2008 09:30:46 | Attr = ] PDP course -> D:\MyDocuments\PDP course -> [Folder | Modified Date = 22/01/2008 12:39:37 | Attr = ] PP_DVRMS.TMP -> D:\MyDocuments\PP_DVRMS.TMP -> [Folder | Modified Date = 22/01/2008 12:39:34 | Attr = H ] programming -> D:\MyDocuments\programming -> [Folder | Modified Date = 22/01/2008 12:39:34 | Attr = ] Robots -> D:\MyDocuments\Robots -> [Folder | Modified Date = 22/01/2008 12:39:33 | Attr = ] Rogue Trooper -> D:\MyDocuments\Rogue Trooper -> [Folder | Modified Date = 22/01/2008 12:39:33 | Attr = ] RuBot -> D:\MyDocuments\RuBot -> [Folder | Modified Date = 22/01/2008 12:39:33 | Attr = ] Rubot_files -> D:\MyDocuments\Rubot_files -> [Folder | Modified Date = 22/01/2008 12:39:32 | Attr = ] Saoirse Redmond ivites.docx -> D:\MyDocuments\Saoirse Redmond ivites.docx -> [Ver = | Size = 257348 bytes | Modified Date = 13/01/2008 21:35:17 | Attr = ] sean -> D:\MyDocuments\sean -> [Folder | Modified Date = 22/01/2008 12:39:32 | Attr = ] Sean Ryan -> D:\MyDocuments\Sean Ryan -> [Folder | Modified Date = 22/01/2008 12:39:32 | Attr = ] SharePoint Drafts -> D:\MyDocuments\SharePoint Drafts -> [Folder | Modified Date = 22/01/2008 12:39:32 | Attr = S] SnagIt Catalog -> D:\MyDocuments\SnagIt Catalog -> [Folder | Modified Date = 22/01/2008 12:39:32 | Attr = ] Symantec -> D:\MyDocuments\Symantec -> [Folder | Modified Date = 22/01/2008 12:39:32 | Attr = ] Thumbs.db -> D:\MyDocuments\Thumbs.db -> [Ver = | Size = 135168 bytes | Modified Date = 24/02/2008 21:29:22 | Attr = HS] @Alternate Data Stream - 0 bytes -> D:\MyDocuments\Thumbs.db:encryptable TICN -> D:\MyDocuments\TICN -> [Folder | Modified Date = 22/01/2008 12:39:32 | Attr = ] TradeTrakker Data -> D:\MyDocuments\TradeTrakker Data -> [Folder | Modified Date = 22/01/2008 12:39:32 | Attr = ] Ulead DVD MovieFactory 4.0 Disc Creator -> D:\MyDocuments\Ulead DVD MovieFactory 4.0 Disc Creator -> [Folder | Modified Date = 22/01/2008 12:39:32 | Attr = ] Ulead DVD Workshop -> D:\MyDocuments\Ulead DVD Workshop -> [Folder | Modified Date = 22/01/2008 12:38:27 | Attr = ] VC DV Scan -> D:\MyDocuments\VC DV Scan -> [Folder | Modified Date = 22/01/2008 12:38:27 | Attr = ] Video Capture -> D:\MyDocuments\Video Capture -> [Folder | Modified Date = 22/01/2008 12:38:27 | Attr = ] Video Editor -> D:\MyDocuments\Video Editor -> [Folder | Modified Date = 22/01/2008 12:38:27 | Attr = ] videos -> D:\MyDocuments\videos -> [Folder | Modified Date = 22/01/2008 12:38:27 | Attr = ] VIO -> D:\MyDocuments\VIO -> [Folder | Modified Date = 22/01/2008 12:38:27 | Attr = ] Web Easy -> D:\MyDocuments\Web Easy -> [Folder | Modified Date = 22/01/2008 12:38:27 | Attr = ] ~$VESTMENT CLUB ACCOUNT AGREEMENT.doc -> D:\MyDocuments\~$VESTMENT CLUB ACCOUNT AGREEMENT.doc -> [Ver = | Size = 162 bytes | Modified Date = 06/01/2008 22:07:03 | Attr = H ] Ad-Aware 2007.lnk -> %AllUsersProfile%\Desktop\Ad-Aware 2007.lnk -> [Ver = | Size = 1662 bytes | Modified Date = 22/03/2008 16:32:33 | Attr = ] Ad-Watch 2007.lnk -> %AllUsersProfile%\Desktop\Ad-Watch 2007.lnk -> [Ver = | Size = 1662 bytes | Modified Date = 22/03/2008 16:32:32 | Attr = ] Adobe Reader 8.lnk -> %AllUsersProfile%\Desktop\Adobe Reader 8.lnk -> [Ver = | Size = 1729 bytes | Modified Date = 17/01/2008 17:12:11 | Attr = ] avast! Antivirus.lnk -> %AllUsersProfile%\Desktop\avast! Antivirus.lnk -> [Ver = | Size = 803 bytes | Modified Date = 22/03/2008 21:46:18 | Attr = ] BlueSoleil.lnk -> %AllUsersProfile%\Desktop\BlueSoleil.lnk -> [Ver = | Size = 1874 bytes | Modified Date = 16/01/2008 07:21:24 | Attr = ] Burn4Free.lnk -> %AllUsersProfile%\Desktop\Burn4Free.lnk -> [Ver = | Size = 598 bytes | Modified Date = 11/03/2008 19:51:25 | Attr = ] Launch SlingPlayer.lnk -> %AllUsersProfile%\Desktop\Launch SlingPlayer.lnk -> [Ver = | Size = 1740 bytes | Modified Date = 20/01/2008 10:16:23 | Attr = ] Lexmark X6100 Series All-In-One Center.lnk -> %AllUsersProfile%\Desktop\Lexmark X6100 Series All-In-One Center.lnk -> [Ver = | Size = 770 bytes | Modified Date = 20/01/2008 11:33:27 | Attr = ] Mozilla Firefox.lnk -> %AllUsersProfile%\Desktop\Mozilla Firefox.lnk -> [Ver = | Size = 1602 bytes | Modified Date = 17/01/2008 10:46:57 | Attr = ] Mozilla Thunderbird.lnk -> %AllUsersProfile%\Desktop\Mozilla Thunderbird.lnk -> [Ver = | Size = 1668 bytes | Modified Date = 18/01/2008 08:28:50 | Attr = ] Myst V End of Ages.lnk -> %AllUsersProfile%\Desktop\Myst V End of Ages.lnk -> [Ver = | Size = 851 bytes | Modified Date = 18/01/2008 18:18:20 | Attr = ] Nero Home.lnk -> %AllUsersProfile%\Desktop\Nero Home.lnk -> [Ver = | Size = 1350 bytes | Modified Date = 16/02/2008 10:58:34 | Attr = ] Nero StartSmart.lnk -> %AllUsersProfile%\Desktop\Nero StartSmart.lnk -> [Ver = | Size = 1424 bytes | Modified Date = 16/02/2008 10:58:34 | Attr = ] Skype.lnk -> %AllUsersProfile%\Desktop\Skype.lnk -> [Ver = | Size = 1870 bytes | Modified Date = 03/02/2008 10:25:24 | Attr = ] Sony Ericsson PC Suite.lnk -> %AllUsersProfile%\Desktop\Sony Ericsson PC Suite.lnk -> [Ver = | Size = 2046 bytes | Modified Date = 13/03/2008 05:01:24 | Attr = ] VLC media player.lnk -> %AllUsersProfile%\Desktop\VLC media player.lnk -> [Ver = | Size = 623 bytes | Modified Date = 20/01/2008 12:51:01 | Attr = ] AdbeRdr811_en_US.exe -> %UserProfile%\Desktop\AdbeRdr811_en_US.exe -> [Ver = 1.0.0.921 | Size = 23405072 bytes | Modified Date = 17/01/2008 17:10:03 | Attr = ] avg75free_516a1225.exe -> %UserProfile%\Desktop\avg75free_516a1225.exe -> [Ver = | Size = 32981120 bytes | Modified Date = 19/01/2008 21:55:02 | Attr = ] avgarkt-setup-1.1.0.42.exe -> %UserProfile%\Desktop\avgarkt-setup-1.1.0.42.exe -> [Ver = | Size = 423736 bytes | Modified Date = 19/01/2008 20:34:32 | Attr = ] CJXP6100EN.exe -> %UserProfile%\Desktop\CJXP6100EN.exe -> [Ver = | Size = 31108096 bytes | Modified Date = 17/01/2008 10:55:39 | Attr = ] Combo-Fix.exe -> %UserProfile%\Desktop\Combo-Fix.exe -> [Ver = | Size = 1599547 bytes | Modified Date = 27/03/2008 07:48:31 | Attr = ] GameSpy Arcade.lnk -> %UserProfile%\Desktop\GameSpy Arcade.lnk -> [Ver = | Size = 585 bytes | Modified Date = 26/01/2008 16:35:10 | Attr = ] lj632en.exe -> %UserProfile%\Desktop\lj632en.exe -> [Ver = | Size = 930800 bytes | Modified Date = 17/01/2008 11:21:40 | Attr = ] OTScanIt -> %UserProfile%\Desktop\OTScanIt -> [Folder | Modified Date = 27/03/2008 21:58:06 | Attr = ] OTScanIt.exe -> %UserProfile%\Desktop\OTScanIt.exe -> [Ver = | Size = 540404 bytes | Modified Date = 27/03/2008 21:57:37 | Attr = ] setup.msi -> %UserProfile%\Desktop\setup.msi -> [Ver = | Size = 7886336 bytes | Modified Date = 20/01/2008 09:56:08 | Attr = ] Spybot - Search & Destroy.lnk -> %UserProfile%\Desktop\Spybot - Search & Destroy.lnk -> [Ver = | Size = 807 bytes | Modified Date = 22/03/2008 22:28:42 | Attr = ] thinkorswim.lnk -> %UserProfile%\Desktop\thinkorswim.lnk -> [Ver = | Size = 700 bytes | Modified Date = 25/01/2008 20:03:30 | Attr = ] thinkorswim_installer.exe -> %UserProfile%\Desktop\thinkorswim_installer.exe -> thinkorswim, Inc. [Ver = desktop | Size = 12984832 bytes | Modified Date = 25/01/2008 19:58:31 | Attr = ] Thunderbird Setup 2.0.0.9.exe -> %UserProfile%\Desktop\Thunderbird Setup 2.0.0.9.exe -> Mozilla [Ver = 4.42 | Size = 6525288 bytes | Modified Date = 18/01/2008 08:27:07 | Attr = ] TrojanHunter.lnk -> %UserProfile%\Desktop\TrojanHunter.lnk -> [Ver = | Size = 692 bytes | Modified Date = 27/03/2008 17:45:24 | Attr = ] VIReader.lnk -> %UserProfile%\Desktop\VIReader.lnk -> [Ver = | Size = 2147 bytes | Modified Date = 27/01/2008 19:40:13 | Attr = ] Virtual Intelligence Matrix 1.0 -> %UserProfile%\Desktop\Virtual Intelligence Matrix 1.0 -> [Folder | Modified Date = 22/03/2008 09:48:09 | Attr = ] Virtual Intelligence Matrix.lnk -> %UserProfile%\Desktop\Virtual Intelligence Matrix.lnk -> [Ver = | Size = 595 bytes | Modified Date = 27/01/2008 13:06:58 | Attr = ] vlc-0.8.6d-win32.exe -> %UserProfile%\Desktop\vlc-0.8.6d-win32.exe -> [Ver = | Size = 9733451 bytes | Modified Date = 20/01/2008 12:46:35 | Attr = ] VNC Viewer 4.lnk -> %UserProfile%\Desktop\VNC Viewer 4.lnk -> [Ver = | Size = 593 bytes | Modified Date = 21/03/2008 10:46:38 | Attr = ] Wolfenstein - Enemy Territory.lnk -> %UserProfile%\Desktop\Wolfenstein - Enemy Territory.lnk -> [Ver = | Size = 619 bytes | Modified Date = 26/01/2008 16:34:05 | Attr = ] wrar371.exe -> %UserProfile%\Desktop\wrar371.exe -> [Ver = | Size = 1206366 bytes | Modified Date = 20/01/2008 10:00:40 | Attr = ] XS++ -> %UserProfile%\Desktop\XS++ -> [Folder | Modified Date = 11/03/2008 11:13:11 | Attr = ] BlueSoleil.lnk -> %AllUsersProfile%\Start Menu\Programs\Startup\BlueSoleil.lnk -> [Ver = | Size = 1886 bytes | Modified Date = 16/01/2008 07:21:24 | Attr = ] desktop.ini -> %AllUsersProfile%\Start Menu\Programs\Startup\desktop.ini -> [Ver = | Size = 84 bytes | Modified Date = 16/01/2008 07:09:48 | Attr = HS] RaConfig2500.lnk -> %AllUsersProfile%\Start Menu\Programs\Startup\RaConfig2500.lnk -> [Ver = | Size = 1975 bytes | Modified Date = 16/01/2008 07:48:27 | Attr = ] Windows Desktop Search.lnk -> %AllUsersProfile%\Start Menu\Programs\Startup\Windows Desktop Search.lnk -> [Ver = | Size = 1787 bytes | Modified Date = 20/01/2008 12:38:50 | Attr = ] desktop.ini -> %UserProfile%\Start Menu\Programs\Startup\desktop.ini -> [Ver = | Size = 84 bytes | Modified Date = 16/01/2008 07:09:48 | Attr = HS] hamachi.lnk -> %UserProfile%\Start Menu\Programs\Startup\hamachi.lnk -> [Ver = | Size = 544 bytes | Modified Date = 05/02/2008 22:39:37 | Attr = ] Ryanair Bargains 1.0.lnk -> %UserProfile%\Start Menu\Programs\Startup\Ryanair Bargains 1.0.lnk -> [Ver = | Size = 635 bytes | Modified Date = 13/02/2008 12:34:45 | Attr = ] Adobe -> %CommonProgramFiles%\Adobe -> [Folder | Modified Date = 17/01/2008 17:12:10 | Attr = ] DESIGNER -> %CommonProgramFiles%\DESIGNER -> [Folder | Modified Date = 20/01/2008 11:11:18 | Attr = ] InstallShield -> %CommonProgramFiles%\InstallShield -> [Folder | Modified Date = 16/01/2008 07:18:11 | Attr = ] Java -> %CommonProgramFiles%\Java -> [Folder | Modified Date = 20/01/2008 16:41:30 | Attr = ] Microsoft Shared -> %CommonProgramFiles%\Microsoft Shared -> [Folder | Modified Date = 11/03/2008 11:08:10 | Attr = ] MSSoap -> %CommonProgramFiles%\MSSoap -> [Folder | Modified Date = 16/01/2008 07:08:03 | Attr = ] Nero -> %CommonProgramFiles%\Nero -> [Folder | Modified Date = 10/02/2008 18:39:01 | Attr = ] ODBC -> %CommonProgramFiles%\ODBC -> [Folder | Modified Date = 16/01/2008 06:53:49 | Attr = ] Services -> %CommonProgramFiles%\Services -> [Folder | Modified Date = 16/01/2008 07:08:06 | Attr = ] Skype -> %CommonProgramFiles%\Skype -> [Folder | Modified Date = 03/02/2008 10:25:22 | Attr = ] Sony Ericsson Shared -> %CommonProgramFiles%\Sony Ericsson Shared -> [Folder | Modified Date = 13/03/2008 05:01:22 | Attr = ] SpeechEngines -> %CommonProgramFiles%\SpeechEngines -> [Folder | Modified Date = 16/01/2008 06:53:47 | Attr = ] System -> %CommonProgramFiles%\System -> [Folder | Modified Date = 20/01/2008 11:08:40 | Attr = ] Teleca Shared -> %CommonProgramFiles%\Teleca Shared -> [Folder | Modified Date = 13/03/2008 05:03:09 | Attr = ] Wise Installation Wizard -> %CommonProgramFiles%\Wise Installation Wizard -> [Folder | Modified Date = 22/03/2008 16:31:37 | Attr = ] X10 -> %CommonProgramFiles%\X10 -> [Folder | Modified Date = 16/01/2008 07:57:05 | Attr = ] [File - Purity Scan: Additional Folder Scans - Non-Microsoft Only] < End of report > [/code]