[code] OTS logfile created on: 7/18/2009 4:12:35 PM - Run 1 OTS by OldTimer - Version 3.0.9.3 Folder = C:\Documents and Settings\ding\Desktop Windows XP Professional Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 6.0.2900.2180) Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy 2.00 Gb Total Physical Memory | 1.29 Gb Available Physical Memory | 64.68% Memory free 3.85 Gb Paging File | 3.22 Gb Available in Paging File | 83.64% Paging File free Paging file location(s): C:\pagefile.sys 2046 4092 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 126.96 Gb Total Space | 69.64 Gb Free Space | 54.85% Space Free | Partition Type: NTFS Drive D: | 105.92 Gb Total Space | 0.92 Gb Free Space | 0.87% Space Free | Partition Type: NTFS E: Drive not present or media not loaded F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: DING-2453C70363 Current User Name: ding Logged in as Administrator. Current Boot Mode: Normal Scan Mode: All users Company Name Whitelist: On Skip Microsoft Files: Off File Age = 30 Days [Processes - Safe List] egui.exe -> C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe -> [2009/04/09 15:17:56 | 02,029,640 | ---- | M] (ESET) ekrn.exe -> C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe -> [2009/04/09 15:19:08 | 00,731,840 | ---- | M] (ESET) explorer.exe -> C:\WINDOWS\Explorer.EXE -> [2004/08/04 06:56:50 | 01,032,192 | ---- | M] (Microsoft Corporation) firefox.exe -> C:\Program Files\Mozilla Firefox\firefox.exe -> [2009/06/03 10:50:39 | 00,307,704 | ---- | M] (Mozilla Corporation) groovemonitor.exe -> C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe -> [2006/10/27 01:47:42 | 00,031,016 | ---- | M] (Microsoft Corporation) javaw.exe -> C:\Program Files\Java\jre6\bin\javaw.exe -> [2009/03/09 05:19:13 | 00,144,792 | ---- | M] (Sun Microsystems, Inc.) jqs.exe -> C:\Program Files\Java\jre6\bin\jqs.exe -> [2009/03/09 05:19:15 | 00,152,984 | ---- | M] (Sun Microsystems, Inc.) jusched.exe -> C:\Program Files\Java\jre6\bin\jusched.exe -> [2009/03/09 05:19:17 | 00,148,888 | ---- | M] (Sun Microsystems, Inc.) limewireturbo.exe -> C:\Program Files\LimeWireTurbo\LimeWireTurbo.exe -> [2008/03/28 16:37:12 | 00,401,408 | ---- | M] (PRO Sharing LLC) nbservice.exe -> C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe -> [2009/05/15 07:35:52 | 00,935,208 | ---- | M] (Nero AG) nclrssrv.exe -> C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe -> [2008/11/26 12:35:00 | 00,119,808 | ---- | M] () nclusbsrv.exe -> C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe -> [2009/03/09 13:44:12 | 00,130,560 | ---- | M] () nmindexingservice.exe -> C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe -> [2006/12/23 18:54:04 | 00,262,144 | ---- | M] (Nero AG) nvsvc32.exe -> C:\WINDOWS\System32\nvsvc32.exe -> [2007/11/07 07:00:00 | 00,155,716 | ---- | M] (NVIDIA Corporation) ots.exe -> C:\Documents and Settings\ding\Desktop\OTS.exe -> [2009/07/18 16:09:23 | 00,513,536 | ---- | M] (OldTimer Tools) pcsuite.exe -> C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe -> [2009/03/20 14:32:32 | 01,312,256 | ---- | M] (Nokia) pdvdserv.exe -> C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe -> [2006/11/23 16:10:42 | 00,056,928 | ---- | M] (Cyberlink Corp.) richvideo.exe -> C:\Program Files\CyberLink\Shared Files\RichVideo.exe -> [2005/08/08 05:54:00 | 00,167,936 | ---- | M] () rthdcpl.exe -> C:\WINDOWS\RTHDCPL.EXE -> [2007/04/12 17:33:10 | 16,132,608 | R--- | M] (Realtek Semiconductor Corp.) servicelayer.exe -> C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -> [2009/03/04 11:25:12 | 00,621,056 | ---- | M] (Nokia.) spuvolumewatcher.exe -> C:\Program Files\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe -> [2007/11/22 11:49:08 | 00,385,024 | ---- | M] (Sony Corporation) usbguard.exe -> C:\Program Files\USB Disk Security\USBGuard.exe -> [2008/04/06 22:39:26 | 00,798,720 | ---- | M] (http://www.zbshareware.com) ymsgr_tray.exe -> C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe -> [2009/02/04 17:57:42 | 00,079,088 | ---- | M] (Yahoo! Inc.) [Win32 Services - Safe List] (helpsvc) Help and Support [Win32_Shared | Auto | Running] -> C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll -> [2004/08/04 06:56:46 | 00,038,912 | ---- | M] (Microsoft Corporation) (JavaQuickStarterService) Java Quick Starter [Win32_Own | Auto | Running] -> C:\Program Files\Java\jre6\bin\jqs.exe -> [2009/03/09 05:19:15 | 00,152,984 | ---- | M] (Sun Microsystems, Inc.) (Microsoft Office Groove Audit Service) Microsoft Office Groove Audit Service [Win32_Own | On_Demand | Stopped] -> C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe -> [2006/10/27 01:47:54 | 00,065,824 | ---- | M] (Microsoft Corporation) (NBService) NBService [Win32_Own | On_Demand | Stopped] -> C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe -> [2007/01/05 14:41:10 | 00,774,144 | ---- | M] (Nero AG) (Nero BackItUp Scheduler 4.0) Nero BackItUp Scheduler 4.0 [Win32_Own | Auto | Running] -> C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe -> [2009/05/15 07:35:52 | 00,935,208 | ---- | M] (Nero AG) (NMIndexingService) NMIndexingService [Win32_Own | On_Demand | Running] -> C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe -> [2006/12/23 18:54:04 | 00,262,144 | ---- | M] (Nero AG) (npggsvc) nProtect GameGuard Service [Win32_Own | On_Demand | Stopped] -> C:\WINDOWS\System32\GameMon.des -> [2009/02/23 01:50:00 | 02,839,290 | ---- | M] (INCA Internet Co., Ltd.) (NVSvc) NVIDIA Display Driver Service [Win32_Own | Auto | Running] -> C:\WINDOWS\System32\nvsvc32.exe -> [2007/11/07 07:00:00 | 00,155,716 | ---- | M] (NVIDIA Corporation) (odserv) Microsoft Office Diagnostics Service [Win32_Own | On_Demand | Stopped] -> C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE -> [2006/10/26 20:49:34 | 00,441,136 | ---- | M] (Microsoft Corporation) (ose) Office Source Engine [Win32_Own | On_Demand | Stopped] -> C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE -> [2006/10/26 15:03:08 | 00,145,184 | ---- | M] (Microsoft Corporation) (RichVideo) Cyberlink RichVideo Service(CRVS) [Win32_Own | Auto | Running] -> C:\Program Files\CyberLink\Shared Files\RichVideo.exe -> [2005/08/08 05:54:00 | 00,167,936 | ---- | M] () (ServiceLayer) ServiceLayer [Win32_Own | On_Demand | Running] -> C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -> [2009/03/04 11:25:12 | 00,621,056 | ---- | M] (Nokia.) (Visual Studio Analyzer RPC bridge) Visual Studio Analyzer RPC bridge [Win32_Own | On_Demand | Stopped] -> C:\Program Files\Microsoft Visual Studio\Common\Tools\VS-Ent98\Vanalyzr\varpc.exe -> [1998/06/06 01:00:00 | 00,034,036 | ---- | M] (Microsoft Corporation) (WMPNetworkSvc) Windows Media Player Network Sharing Service [Win32_Own | On_Demand | Stopped] -> C:\Program Files\Windows Media Player\WMPNetwk.exe -> [2006/10/18 21:05:24 | 00,913,408 | ---- | M] (Microsoft Corporation) (EHttpSrv) ESET HTTP Server [Win32_Own | On_Demand | Stopped] -> C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe -> [2009/04/09 15:29:20 | 00,020,680 | ---- | M] (ESET) (ekrn) ESET Service [Win32_Own | Auto | Running] -> C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe -> [2009/04/09 15:19:08 | 00,731,840 | ---- | M] (ESET) [Driver Services - Safe List] (Egatebus) Egatebus [Kernel | On_Demand | Running] -> C:\WINDOWS\System32\drivers\egatebus.sys -> [2005/03/01 11:43:20 | 00,011,264 | R--- | M] (axalto) (Egatecard) Egatecard [Kernel | On_Demand | Stopped] -> C:\WINDOWS\System32\Drivers\egate.sys -> [2005/03/01 11:43:20 | 00,013,312 | R--- | M] (axalto) (Egaterdr) Egaterdr [Kernel | On_Demand | Running] -> C:\WINDOWS\System32\drivers\egaterdr.sys -> [2005/03/01 11:43:20 | 00,010,752 | R--- | M] (axalto) (FTDIBUS) UST Pro II Device Driver [Kernel | On_Demand | Stopped] -> C:\WINDOWS\System32\drivers\ftdibus.sys -> [2004/04/20 20:34:00 | 00,024,209 | ---- | M] (FTDI Ltd.) (FTSER2K) USB Serial Port Driver [Kernel | On_Demand | Stopped] -> C:\WINDOWS\System32\drivers\ftser2k.sys -> [2004/04/20 20:35:00 | 00,057,404 | ---- | M] (FTDI Ltd.) (gdrv) gdrv [Kernel | On_Demand | Stopped] -> C:\WINDOWS\gdrv.sys -> [2009/02/17 20:41:18 | 00,015,600 | ---- | M] (Windows (R) 2000 DDK provider) (ggflt) SEMC USB Flash Driver Filter [Kernel | On_Demand | Stopped] -> C:\WINDOWS\System32\DRIVERS\ggflt.sys -> [2008/03/20 17:39:04 | 00,013,352 | ---- | M] (Sony Ericsson Mobile Communications) (ggsemc) SEMC USB Flash Driver [Kernel | On_Demand | Stopped] -> C:\WINDOWS\System32\DRIVERS\ggsemc.sys -> [2008/03/20 17:39:04 | 00,021,672 | ---- | M] (Sony Ericsson Mobile Communications) (HDAudBus) Microsoft UAA Bus Driver for High Definition Audio [Kernel | On_Demand | Running] -> C:\WINDOWS\System32\DRIVERS\HDAudBus.sys -> [2005/01/07 18:07:18 | 00,138,752 | ---- | M] (Windows (R) Server 2003 DDK provider) (IntcAzAudAddService) Service for Realtek HD Audio (WDM) [Kernel | On_Demand | Running] -> C:\WINDOWS\System32\drivers\RtkHDAud.sys -> [2007/04/23 18:12:28 | 04,402,176 | R--- | M] (Realtek Semiconductor Corp.) (motccgp) Motorola USB Composite Device Driver [Kernel | On_Demand | Stopped] -> C:\WINDOWS\System32\DRIVERS\motccgp.sys -> [2007/11/02 15:36:10 | 00,018,176 | ---- | M] (Motorola) (motccgpfl) MotCcgpFlService [Kernel | On_Demand | Stopped] -> C:\WINDOWS\System32\DRIVERS\motccgpfl.sys -> [2007/01/22 19:33:00 | 00,007,680 | ---- | M] (Motorola) (MotDev) Motorola Inc. USB Device [Kernel | On_Demand | Stopped] -> C:\WINDOWS\System32\DRIVERS\motodrv.sys -> [2007/10/10 17:41:50 | 00,042,112 | ---- | M] (Motorola Inc) (motmodem) Motorola USB CDC ACM Driver [Kernel | On_Demand | Stopped] -> C:\WINDOWS\System32\DRIVERS\motmodem.sys -> [2007/06/18 15:18:26 | 00,023,680 | ---- | M] (Motorola) (nmwcd) Nokia USB Phone Parent [Kernel | On_Demand | Stopped] -> C:\WINDOWS\System32\drivers\ccdcmb.sys -> [2009/02/09 07:37:46 | 00,017,664 | ---- | M] (Nokia) (nmwcdc) Nokia USB Generic [Kernel | On_Demand | Stopped] -> C:\WINDOWS\System32\drivers\ccdcmbo.sys -> [2009/02/09 07:37:46 | 00,022,016 | ---- | M] (Nokia) (npf) NetGroup Packet Filter Driver [Kernel | Auto | Running] -> C:\WINDOWS\System32\drivers\npf.sys -> [2007/11/16 04:30:48 | 00,034,064 | ---- | M] (CACE Technologies) (nv) nv [Kernel | On_Demand | Running] -> C:\WINDOWS\System32\DRIVERS\nv4_mini.sys -> [2007/11/07 07:00:00 | 07,429,088 | ---- | M] (NVIDIA Corporation) (oreans32) oreans32 [Kernel | System | Running] -> C:\WINDOWS\System32\drivers\oreans32.sys -> [2009/05/16 19:18:48 | 00,033,824 | ---- | M] () (pccsmcfd) PCCS Mode Change Filter Driver [Kernel | On_Demand | Stopped] -> C:\WINDOWS\System32\DRIVERS\pccsmcfd.sys -> [2008/08/26 10:26:12 | 00,018,816 | ---- | M] (Nokia) (Ptilink) Direct Parallel Link Driver [Kernel | On_Demand | Running] -> C:\WINDOWS\System32\DRIVERS\ptilink.sys -> [2001/08/23 19:00:00 | 00,017,792 | ---- | M] (Parallel Technologies, Inc.) (PxHelp20) PxHelp20 [Kernel | Boot | Running] -> C:\WINDOWS\system32\Drivers\PxHelp20.sys -> [2006/11/02 16:57:04 | 00,036,624 | ---- | M] (Sonic Solutions) (R5BaseSmc) USB Token Holder Service [Kernel | On_Demand | Running] -> C:\WINDOWS\System32\DRIVERS\smccard.sys -> [2009/04/03 15:30:07 | 00,012,800 | ---- | M] (OEM) (RTLE8023xp) Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver [Kernel | On_Demand | Running] -> C:\WINDOWS\System32\DRIVERS\Rtenicxp.sys -> [2007/03/01 16:05:38 | 00,090,496 | R--- | M] (Realtek Semiconductor Corporation ) (Secdrv) Secdrv [Kernel | Auto | Running] -> C:\WINDOWS\System32\DRIVERS\secdrv.sys -> [2009/03/28 07:48:10 | 00,163,644 | ---- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) (sscdbus) SAMSUNG USB Composite Device driver (WDM) [Kernel | On_Demand | Stopped] -> C:\WINDOWS\System32\DRIVERS\sscdbus.sys -> [2005/12/22 12:24:50 | 00,080,272 | ---- | M] (MCCI) (sscdmdfl) SAMSUNG CDMA Modem Filter [Kernel | On_Demand | Stopped] -> C:\WINDOWS\System32\DRIVERS\sscdmdfl.sys -> [2005/12/22 12:24:52 | 00,010,864 | ---- | M] (MCCI) (sscdmdm) SAMSUNG CDMA Modem Drivers [Kernel | On_Demand | Stopped] -> C:\WINDOWS\System32\DRIVERS\sscdmdm.sys -> [2005/12/22 12:24:52 | 00,137,884 | ---- | M] (MCCI) (token) USB Token Service [Kernel | On_Demand | Running] -> C:\WINDOWS\System32\DRIVERS\eps2kt1.sys -> [2009/04/03 15:30:07 | 00,021,888 | ---- | M] () (UFS2XX) UFS2XX.SYS UFS2 device driver [Kernel | On_Demand | Running] -> C:\WINDOWS\System32\drivers\UFS2XX.sys -> [2007/06/27 07:05:52 | 00,053,184 | ---- | M] (FTDI Ltd.) (Universal Box) Universal Box.SYS Universal Box device driver [Kernel | On_Demand | Stopped] -> C:\WINDOWS\System32\drivers\Universal Box.sys -> [2008/03/13 19:51:52 | 00,057,536 | ---- | M] (FTDI Ltd.) (upperdev) upperdev [Kernel | On_Demand | Stopped] -> C:\WINDOWS\System32\DRIVERS\usbser_lowerflt.sys -> [2009/02/09 07:37:48 | 00,007,808 | ---- | M] (Nokia) (usb2vcom) USB to Serial Bridge Controller [Kernel | On_Demand | Stopped] -> C:\WINDOWS\System32\Drivers\usb2vcom.sys -> [2005/07/11 13:26:54 | 00,027,616 | ---- | M] () (usbser) USB Modem Driver [Kernel | On_Demand | Stopped] -> C:\WINDOWS\System32\DRIVERS\usbser.sys -> [2004/08/04 00:08:44 | 00,025,600 | ---- | M] (Microsoft Corporation) (vsbus) Virtual Serial Bus Enumerator [Kernel | On_Demand | Running] -> C:\WINDOWS\System32\DRIVERS\vsb.sys -> [2008/07/24 06:29:16 | 00,015,264 | ---- | M] () (vserial) ELTIMA Virtual Serial Ports Driver [Kernel | On_Demand | Stopped] -> C:\WINDOWS\System32\DRIVERS\vserial.sys -> [2008/07/24 06:29:16 | 00,047,744 | ---- | M] () (ehdrv) ehdrv [Kernel | System | Running] -> C:\WINDOWS\System32\DRIVERS\ehdrv.sys -> [2009/04/09 15:18:02 | 00,107,256 | ---- | M] (ESET) (eamon) eamon [File_System | Auto | Running] -> C:\WINDOWS\System32\DRIVERS\eamon.sys -> [2009/04/09 15:10:30 | 00,113,960 | ---- | M] (ESET) (epfwtdir) epfwtdir [Kernel | System | Running] -> C:\WINDOWS\System32\DRIVERS\epfwtdir.sys -> [2009/04/09 15:21:12 | 00,094,360 | ---- | M] (ESET) [Registry - Safe List] < Internet Explorer Settings [HKEY_LOCAL_MACHINE\] > -> -> HKEY_LOCAL_MACHINE\: Main\\"Default_Page_URL" -> http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome -> HKEY_LOCAL_MACHINE\: Main\\"Default_Search_URL" -> http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch -> HKEY_LOCAL_MACHINE\: Main\\"Local Page" -> %SystemRoot%\system32\blank.htm -> HKEY_LOCAL_MACHINE\: Main\\"Search Page" -> http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch -> HKEY_LOCAL_MACHINE\: Main\\"Start Page" -> http://www.yahoo.com -> HKEY_LOCAL_MACHINE\: Search\\"CustomizeSearch" -> http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm -> HKEY_LOCAL_MACHINE\: Search\\"SearchAssistant" -> http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm -> < Internet Explorer Settings [HKEY_USERS\.DEFAULT\] > -> -> HKEY_USERS\.DEFAULT\: Main\\"Search Page" -> http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch -> HKEY_USERS\.DEFAULT\: Main\\"Start Page" -> http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome -> HKEY_USERS\.DEFAULT\: "ProxyEnable" -> 0 -> < Internet Explorer Settings [HKEY_USERS\S-1-5-18\] > -> -> HKEY_USERS\S-1-5-18\: Main\\"Search Page" -> http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch -> HKEY_USERS\S-1-5-18\: Main\\"Start Page" -> http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome -> HKEY_USERS\S-1-5-18\: "ProxyEnable" -> 0 -> < Internet Explorer Settings [HKEY_USERS\S-1-5-19\] > -> -> < Internet Explorer Settings [HKEY_USERS\S-1-5-20\] > -> -> < Internet Explorer Settings [HKEY_USERS\S-1-5-21-1390067357-1592454029-839522115-1003\] > -> -> HKEY_USERS\S-1-5-21-1390067357-1592454029-839522115-1003\: Main\\"Local Page" -> C:\WINDOWS\system32\blank.htm -> HKEY_USERS\S-1-5-21-1390067357-1592454029-839522115-1003\: Main\\"Search Page" -> http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch -> HKEY_USERS\S-1-5-21-1390067357-1592454029-839522115-1003\: Main\\"Start Page" -> http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome -> HKEY_USERS\S-1-5-21-1390067357-1592454029-839522115-1003\: SearchURL\\"provider" -> -> HKEY_USERS\S-1-5-21-1390067357-1592454029-839522115-1003\: "ProxyEnable" -> 0 -> < FireFox Settings [Prefs.js] > -> C:\Documents and Settings\ding\Application Data\Mozilla\FireFox\Profiles\ofzmw58f.default\prefs.js -> browser.search.defaultthis.engineName -> "P2P_Energy Customized Web Search" -> browser.search.defaulturl -> "http://search.conduit.com/ResultsExt.aspx?ctid=CT1269415&SearchSource=3&q=" -> browser.startup.homepage -> "http://search.orbitdownloader.com" -> extensions.enabledItems -> {CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}:6.0.11 -> extensions.enabledItems -> {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}:6.0.13 -> extensions.enabledItems -> jqs@sun.com:1.0 -> extensions.enabledItems -> {4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac}:1.5.48.2 -> extensions.enabledItems -> orbit_ffext@orbitdownloader:2.02 -> extensions.enabledItems -> {2bae58c2-79f9-45d1-a286-81f911301c3a}:1.5.47.1 -> extensions.enabledItems -> bkmrksync@nokia.com:1.0.0.704 -> extensions.enabledItems -> {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.0.11 -> keyword.URL -> "http://search.conduit.com/ResultsExt.aspx?ctid=CT1269415&SearchSource=2&q=" -> < FireFox Extensions [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla HKLM\software\mozilla\Firefox\Extensions -> -> HKLM\software\mozilla\Firefox\Extensions\\jqs@sun.com -> C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF [C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF] -> [2009/03/10 06:34:02 | 00,000,000 | ---D | M] HKLM\software\mozilla\Firefox\Extensions\\bkmrksync@nokia.com -> C:\PROGRAM FILES\NOKIA\NOKIA PC SUITE 7\BKMRKSYNC [C:\PROGRAM FILES\NOKIA\NOKIA PC SUITE 7\BKMRKSYNC\] -> [2009/05/08 20:24:50 | 00,000,000 | ---D | M] HKLM\software\mozilla\Mozilla Firefox 3.0.11\extensions -> -> HKLM\software\mozilla\Mozilla Firefox 3.0.11\extensions\\Components -> C:\PROGRAM FILES\MOZILLA FIREFOX\COMPONENTS [C:\PROGRAM FILES\MOZILLA FIREFOX\COMPONENTS] -> [2009/06/19 19:56:29 | 00,000,000 | ---D | M] HKLM\software\mozilla\Mozilla Firefox 3.0.11\extensions\\Plugins -> C:\PROGRAM FILES\MOZILLA FIREFOX\PLUGINS [C:\PROGRAM FILES\MOZILLA FIREFOX\PLUGINS] -> [2009/06/19 19:56:29 | 00,000,000 | ---D | M] HKLM\software\mozilla\Thunderbird\Extensions -> -> HKLM\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com -> C:\PROGRAM FILES\ESET\ESET NOD32 ANTIVIRUS\MOZILLA THUNDERBIRD -> < FireFox Extensions [User Folders] > -> -> C:\Documents and Settings\ding\Application Data\mozilla\Extensions -> [2009/02/28 16:26:48 | 00,000,000 | ---D | M] -> C:\Documents and Settings\ding\Application Data\mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384} -> [2009/02/28 16:26:48 | 00,000,000 | ---D | M] -> C:\Documents and Settings\ding\Application Data\mozilla\Extensions\mozswing@mozswing.org -> [2009/02/28 16:26:48 | 00,000,000 | ---D | M] -> C:\Documents and Settings\ding\Application Data\mozilla\Firefox\Profiles\ofzmw58f.default\extensions -> [2009/07/01 17:20:38 | 00,097,420 | ---- | M] () -> C:\Documents and Settings\ding\Application Data\mozilla\Firefox\Profiles\ofzmw58f.default\extensions\{2bae58c2-79f9-45d1-a286-81f911301c3a} -> [2009/07/01 17:20:38 | 00,097,420 | ---- | M] () -> C:\Documents and Settings\ding\Application Data\mozilla\Firefox\Profiles\ofzmw58f.default\extensions\{4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac} -> [2009/07/01 17:20:38 | 00,097,420 | ---- | M] () < FireFox SearchPlugins [User Folders] > -> C:\Documents and Settings\ding\Application Data\Mozilla\FireFox\Profiles\ofzmw58f.default\searchplugins\ -> C:\Documents and Settings\ding\Application Data\Mozilla\FireFox\Profiles\ofzmw58f.default\searchplugins -> [2009/03/13 15:26:16 | 00,000,000 | ---D | M] conduit.xml -> C:\Documents and Settings\ding\Application Data\Mozilla\FireFox\Profiles\ofzmw58f.default\searchplugins\conduit.xml -> [2008/11/18 22:50:00 | 00,000,882 | ---- | M] () < FireFox Extensions [Program Folders] > -> -> C:\PROGRAM FILES\MOZILLA FIREFOX\extensions -> [2009/06/03 11:00:56 | 09,777,144 | ---- | M] (Mozilla Foundation) -> C:\PROGRAM FILES\MOZILLA FIREFOX\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} -> [2009/06/03 11:00:56 | 09,777,144 | ---- | M] (Mozilla Foundation) -> C:\PROGRAM FILES\MOZILLA FIREFOX\extensions\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA} -> [2009/06/03 11:00:56 | 09,777,144 | ---- | M] (Mozilla Foundation) -> C:\PROGRAM FILES\MOZILLA FIREFOX\extensions\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} -> [2009/06/03 11:00:56 | 09,777,144 | ---- | M] (Mozilla Foundation) < FireFox Components [Program Folders] > -> C:\PROGRAM FILES\MOZILLA FIREFOX\components\ -> C:\PROGRAM FILES\MOZILLA FIREFOX\components -> [2009/06/19 19:56:29 | 00,000,000 | ---D | M] browserdirprovider.dll -> C:\PROGRAM FILES\MOZILLA FIREFOX\components\browserdirprovider.dll -> [2009/06/03 11:00:58 | 00,023,032 | ---- | M] (Mozilla Foundation) brwsrcmp.dll -> C:\PROGRAM FILES\MOZILLA FIREFOX\components\brwsrcmp.dll -> [2009/06/03 11:00:59 | 00,134,648 | ---- | M] (Mozilla Foundation) < FireFox Plugins [Program Folders] > -> C:\PROGRAM FILES\MOZILLA FIREFOX\plugins\ -> C:\PROGRAM FILES\MOZILLA FIREFOX\plugins -> [2009/06/19 19:56:29 | 00,000,000 | ---D | M] npdeploytk.dll -> C:\PROGRAM FILES\MOZILLA FIREFOX\plugins\npdeploytk.dll -> [2009/03/09 05:19:09 | 00,410,984 | ---- | M] (Sun Microsystems, Inc.) npnul32.dll -> C:\PROGRAM FILES\MOZILLA FIREFOX\plugins\npnul32.dll -> [2009/06/03 11:01:00 | 00,065,528 | ---- | M] (mozilla.org) nppdf32.dll -> C:\PROGRAM FILES\MOZILLA FIREFOX\plugins\nppdf32.dll -> [2004/12/14 02:19:18 | 00,057,344 | ---- | M] (Adobe Systems Inc.) < FireFox SearchPlugins [Program Folders] > -> C:\PROGRAM FILES\MOZILLA FIREFOX\searchplugins\ -> C:\PROGRAM FILES\MOZILLA FIREFOX\searchplugins -> [2009/06/19 19:56:31 | 00,000,000 | ---D | M] amazondotcom.xml -> C:\PROGRAM FILES\MOZILLA FIREFOX\searchplugins\amazondotcom.xml -> [2009/06/03 07:18:22 | 00,001,394 | ---- | M] () answers.xml -> C:\PROGRAM FILES\MOZILLA FIREFOX\searchplugins\answers.xml -> [2009/06/03 07:18:22 | 00,002,193 | ---- | M] () creativecommons.xml -> C:\PROGRAM FILES\MOZILLA FIREFOX\searchplugins\creativecommons.xml -> [2009/06/03 07:18:22 | 00,001,534 | ---- | M] () eBay.xml -> C:\PROGRAM FILES\MOZILLA FIREFOX\searchplugins\eBay.xml -> [2009/06/03 07:18:22 | 00,002,343 | ---- | M] () google.xml -> C:\PROGRAM FILES\MOZILLA FIREFOX\searchplugins\google.xml -> [2009/06/03 07:18:22 | 00,001,706 | ---- | M] () wikipedia.xml -> C:\PROGRAM FILES\MOZILLA FIREFOX\searchplugins\wikipedia.xml -> [2009/06/03 07:18:22 | 00,001,178 | ---- | M] () yahoo.xml -> C:\PROGRAM FILES\MOZILLA FIREFOX\searchplugins\yahoo.xml -> [2009/06/03 07:18:22 | 00,000,792 | ---- | M] () Hosts file not found -> -> < BHO's [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\ -> {000123B4-9B42-4900-B3F7-F4B073EFC214} [HKLM] -> C:\Program Files\Orbitdownloader\orbitcth.dll [Octh Class] -> [2009/06/26 10:46:46 | 00,179,400 | ---- | M] (Orbitdownloader.com) < Internet Explorer ToolBars [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ToolBar -> "{2bae58c2-79f9-45d1-a286-81f911301c3a}" [HKLM] -> C:\Program Files\P2P_Energy\tbP2P0.dll [P2P Energy Toolbar] -> File not found "{930f1200-f5f1-4870-bac6-e233ec8e7023}" [HKLM] -> C:\Program Files\Softonic_English\tbSof1.dll [Softonic English Toolbar] -> [2009/02/27 14:48:17 | 01,883,672 | ---- | M] (Conduit Ltd.) "{C55BBCD6-41AD-48AD-9953-3609C48EACC7}" [HKLM] -> C:\Program Files\Orbitdownloader\GrabPro.dll [Grab Pro] -> [2009/06/26 10:46:46 | 00,658,552 | ---- | M] () "{EE5D279F-081B-4404-994D-C6B60AAEBA6D}" [HKLM] -> C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll [EPSON Web-To-Page] -> [2005/02/22 13:50:34 | 00,368,640 | ---- | M] (SEIKO EPSON CORPORATION) "{EF99BD32-C1FB-11D2-892F-0090271D4F88}" [HKLM] -> C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll [Yahoo! Toolbar] -> [2008/07/28 18:47:40 | 00,882,416 | ---- | M] (Yahoo! Inc.) < Internet Explorer ToolBars [HKEY_USERS\S-1-5-21-1390067357-1592454029-839522115-1003\] > -> HKEY_USERS\S-1-5-21-1390067357-1592454029-839522115-1003\Software\Microsoft\Internet Explorer\Toolbar\ -> WebBrowser\\"{C55BBCD6-41AD-48AD-9953-3609C48EACC7}" [HKLM] -> C:\Program Files\Orbitdownloader\GrabPro.dll [Grab Pro] -> [2009/06/26 10:46:46 | 00,658,552 | ---- | M] () WebBrowser\\"{EF99BD32-C1FB-11D2-892F-0090271D4F88}" [HKLM] -> C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll [Yahoo! Toolbar] -> [2008/07/28 18:47:40 | 00,882,416 | ---- | M] (Yahoo! Inc.) < Run [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run -> "egui" -> C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe ["C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice] -> [2009/04/09 15:17:56 | 02,029,640 | ---- | M] (ESET) "GrooveMonitor" -> C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe ["C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"] -> [2006/10/27 01:47:42 | 00,031,016 | ---- | M] (Microsoft Corporation) "LanguageShortcut" -> C:\Program Files\CyberLink\PowerDVD\Language\Language.exe ["C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"] -> [2006/12/05 23:55:32 | 00,054,832 | ---- | M] () "NeroFilterCheck" -> C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe] -> [2006/01/12 16:40:44 | 00,155,648 | ---- | M] (Nero AG) "NvCplDaemon" -> C:\WINDOWS\System32\NvCpl.DLL [RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup] -> [2007/11/07 07:00:00 | 08,523,776 | ---- | M] (NVIDIA Corporation) "NvMediaCenter" -> C:\WINDOWS\System32\NvMcTray.DLL [RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit] -> [2007/11/07 07:00:00 | 00,081,920 | ---- | M] (NVIDIA Corporation) "nwiz" -> C:\WINDOWS\System32\nwiz.exe [nwiz.exe /install] -> [2007/04/19 12:26:00 | 01,626,112 | ---- | M] () "RemoteControl" -> C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe ["C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"] -> [2006/11/23 16:10:42 | 00,056,928 | ---- | M] (Cyberlink Corp.) "RTHDCPL" -> C:\WINDOWS\RTHDCPL.exe [RTHDCPL.EXE] -> [2007/04/12 17:33:10 | 16,132,608 | R--- | M] (Realtek Semiconductor Corp.) "SunJavaUpdateSched" -> C:\Program Files\Java\jre6\bin\jusched.exe ["C:\Program Files\Java\jre6\bin\jusched.exe"] -> [2009/03/09 05:19:17 | 00,148,888 | ---- | M] (Sun Microsystems, Inc.) "USB Antivirus" -> C:\Program Files\USB Disk Security\USBGuard.exe [C:\Program Files\USB Disk Security\USBGuard.exe] -> [2008/04/06 22:39:26 | 00,798,720 | ---- | M] (http://www.zbshareware.com) < Run [HKEY_USERS\S-1-5-21-1390067357-1592454029-839522115-1003\] > -> HKEY_USERS\S-1-5-21-1390067357-1592454029-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Run -> "ding" -> C:\Documents and Settings\ding\ding.exe [C:\Documents and Settings\ding\ding.exe] -> File not found "EPSON Stylus Photo R230 Series" -> C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAIP.EXE [C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAIP.EXE /FU "C:\WINDOWS\TEMP\E_S131.tmp" /EF "HKCU"] -> [2006/12/25 13:00:00 | 00,177,664 | ---- | M] (SEIKO EPSON CORPORATION) "Messenger (Yahoo!)" -> C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe ["C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet] -> [2009/02/04 17:57:42 | 04,363,504 | ---- | M] (Yahoo! Inc.) "PC Suite Tray" -> C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe ["C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray] -> [2009/03/20 14:32:32 | 01,312,256 | ---- | M] (Nokia) < All Users Startup Folder > -> C:\Documents and Settings\All Users\Start Menu\Programs\Startup -> C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Reader Speed Launch.lnk -> C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe -> [2004/12/14 04:44:06 | 00,029,696 | ---- | M] (Adobe Systems Incorporated) < Default User Startup Folder > -> C:\Documents and Settings\Default User\Start Menu\Programs\Startup -> < ding Startup Folder > -> C:\Documents and Settings\ding\Start Menu\Programs\Startup -> C:\Documents and Settings\ding\Start Menu\Programs\Startup\Picture Motion Browser Media Check Tool.lnk -> C:\Program Files\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe -> [2007/11/22 11:49:08 | 00,385,024 | ---- | M] (Sony Corporation) < Software Policy Settings [HKEY_USERS\S-1-5-21-1390067357-1592454029-839522115-1003] > -> HKEY_USERS\S-1-5-21-1390067357-1592454029-839522115-1003\SOFTWARE\Policies\Microsoft\Internet Explorer -> < CurrentVersion Policy Settings - Explorer [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer \\"HonorAutoRunSetting" -> [1] -> File not found \\"NoDriveAutoRun" -> [67108863] -> File not found \\"NoDriveTypeAutoRun" -> [255] -> File not found < CurrentVersion Policy Settings - System [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System \\"dontdisplaylastusername" -> [0] -> File not found \\"legalnoticecaption" -> [] -> File not found \\"legalnoticetext" -> [] -> File not found \\"shutdownwithoutlogon" -> [1] -> File not found \\"undockwithoutlogon" -> [1] -> File not found < CurrentVersion Policy Settings [HKEY_USERS\.DEFAULT] > -> HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer -> HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer \\"NoDriveTypeAutoRun" -> [145] -> File not found < CurrentVersion Policy Settings [HKEY_USERS\.DEFAULT] > -> HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System -> < CurrentVersion Policy Settings [HKEY_USERS\S-1-5-18] > -> HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer -> HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer \\"NoDriveTypeAutoRun" -> [145] -> File not found < CurrentVersion Policy Settings [HKEY_USERS\S-1-5-18] > -> HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System -> < CurrentVersion Policy Settings [HKEY_USERS\S-1-5-19] > -> HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer -> HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer \\"NoDriveTypeAutoRun" -> [145] -> File not found < CurrentVersion Policy Settings [HKEY_USERS\S-1-5-20] > -> HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer -> HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer \\"NoDriveTypeAutoRun" -> [145] -> File not found < CurrentVersion Policy Settings [HKEY_USERS\S-1-5-21-1390067357-1592454029-839522115-1003] > -> HKEY_USERS\S-1-5-21-1390067357-1592454029-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer -> HKEY_USERS\S-1-5-21-1390067357-1592454029-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer \\"NoDriveTypeAutoRun" -> [159] -> File not found < CurrentVersion Policy Settings [HKEY_USERS\S-1-5-21-1390067357-1592454029-839522115-1003] > -> HKEY_USERS\S-1-5-21-1390067357-1592454029-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System -> < Internet Explorer Menu Extensions [HKEY_USERS\S-1-5-21-1390067357-1592454029-839522115-1003\] > -> HKEY_USERS\S-1-5-21-1390067357-1592454029-839522115-1003\Software\Microsoft\Internet Explorer\MenuExt\ -> &Download by Orbit -> C:\Program Files\Orbitdownloader\orbitmxt.dll [res://C:\Program Files\Orbitdownloader\orbitmxt.dll/201] -> [2009/06/26 10:46:44 | 00,101,496 | ---- | M] (Orbitdownloader.com) &Grab video by Orbit -> C:\Program Files\Orbitdownloader\orbitmxt.dll [res://C:\Program Files\Orbitdownloader\orbitmxt.dll/204] -> [2009/06/26 10:46:44 | 00,101,496 | ---- | M] (Orbitdownloader.com) Do&wnload selected by Orbit -> C:\Program Files\Orbitdownloader\orbitmxt.dll [res://C:\Program Files\Orbitdownloader\orbitmxt.dll/203] -> [2009/06/26 10:46:44 | 00,101,496 | ---- | M] (Orbitdownloader.com) Down&load all by Orbit -> C:\Program Files\Orbitdownloader\orbitmxt.dll [res://C:\Program Files\Orbitdownloader\orbitmxt.dll/202] -> [2009/06/26 10:46:44 | 00,101,496 | ---- | M] (Orbitdownloader.com) E&xport to Microsoft Excel -> C:\Program Files\Microsoft Office\Office12\EXCEL.EXE [res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000] -> [2006/10/27 16:07:36 | 17,891,112 | ---- | M] (Microsoft Corporation) < Internet Explorer Extensions [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\ -> {2670000A-7350-4f3c-8081-5663EE0C6C49}:{48E73304-E1D6-4330-914C-F5F514E3486C} [HKLM] -> C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll [Button: Send to OneNote] -> [2006/10/26 21:32:42 | 00,604,000 | ---- | M] (Microsoft Corporation) {2670000A-7350-4f3c-8081-5663EE0C6C49}:{48E73304-E1D6-4330-914C-F5F514E3486C} [HKLM] -> C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll [Menu: S&end to OneNote] -> [2006/10/26 21:32:42 | 00,604,000 | ---- | M] (Microsoft Corporation) {92780B25-18CC-41C8-B9BE-3C9C571A8263}:{FF059E31-CC5A-4E2E-BF3B-96E929D65503} [HKLM] -> C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL [Button: Research] -> [2006/10/26 21:12:22 | 00,040,424 | ---- | M] (Microsoft Corporation) {FB5F1910-F110-11d2-BB9E-00C04F795683}:Exec [HKLM] -> C:\Program Files\Messenger\msmsgs.exe [Button: Messenger] -> [2004/08/04 02:06:34 | 01,667,584 | ---- | M] (Microsoft Corporation) {FB5F1910-F110-11d2-BB9E-00C04F795683}:Exec [HKLM] -> C:\Program Files\Messenger\msmsgs.exe [Menu: Windows Messenger] -> [2004/08/04 02:06:34 | 01,667,584 | ---- | M] (Microsoft Corporation) < Internet Explorer Extensions [HKEY_USERS\.DEFAULT\] > -> HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\Extensions\ -> CmdMapping\\"{FB5F1910-F110-11d2-BB9E-00C04F795683}" [HKLM] -> C:\Program Files\Messenger\msmsgs.exe [Messenger] -> [2004/08/04 02:06:34 | 01,667,584 | ---- | M] (Microsoft Corporation) < Internet Explorer Extensions [HKEY_USERS\S-1-5-18\] > -> HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\Extensions\ -> CmdMapping\\"{FB5F1910-F110-11d2-BB9E-00C04F795683}" [HKLM] -> C:\Program Files\Messenger\msmsgs.exe [Messenger] -> [2004/08/04 02:06:34 | 01,667,584 | ---- | M] (Microsoft Corporation) < Internet Explorer Extensions [HKEY_USERS\S-1-5-21-1390067357-1592454029-839522115-1003\] > -> HKEY_USERS\S-1-5-21-1390067357-1592454029-839522115-1003\Software\Microsoft\Internet Explorer\Extensions\ -> CmdMapping\\"{2670000A-7350-4f3c-8081-5663EE0C6C49}" [HKLM] -> C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll [Send to OneNote] -> [2006/10/26 21:32:42 | 00,604,000 | ---- | M] (Microsoft Corporation) CmdMapping\\"{92780B25-18CC-41C8-B9BE-3C9C571A8263}" [HKLM] -> C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL [Research] -> [2006/10/26 21:12:22 | 00,040,424 | ---- | M] (Microsoft Corporation) CmdMapping\\"{FB5F1910-F110-11d2-BB9E-00C04F795683}" [HKLM] -> C:\Program Files\Messenger\msmsgs.exe [Messenger] -> [2004/08/04 02:06:34 | 01,667,584 | ---- | M] (Microsoft Corporation) < Internet Explorer Plugins [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Plugins\ -> PluginsPageFriendlyName -> Microsoft ActiveX Gallery -> PluginsPage -> http://activex.microsoft.com/controls/find.asp?ext=%s&mime=%s -> < Default Prefix > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\DefaultPrefix "" -> http:// < Trusted Sites Domains [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> [Key] 1 domain(s) found. -> 1 domain(s) and sub-domain(s) not assigned to a zone. < Trusted Sites Ranges [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> [Key] 0 range(s) found. -> < Trusted Sites Domains [HKEY_USERS\.DEFAULT\] > -> HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> [Key] 0 domain(s) found. -> < Trusted Sites Ranges [HKEY_USERS\.DEFAULT\] > -> HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> [Key] 0 range(s) found. -> < Trusted Sites Domains [HKEY_USERS\S-1-5-18\] > -> HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> [Key] 0 domain(s) found. -> < Trusted Sites Ranges [HKEY_USERS\S-1-5-18\] > -> HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> [Key] 0 range(s) found. -> < Trusted Sites Domains [HKEY_USERS\S-1-5-19\] > -> HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> [Key] 0 domain(s) found. -> < Trusted Sites Ranges [HKEY_USERS\S-1-5-19\] > -> HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> [Key] 0 range(s) found. -> < Trusted Sites Domains [HKEY_USERS\S-1-5-20\] > -> HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> [Key] 0 domain(s) found. -> < Trusted Sites Ranges [HKEY_USERS\S-1-5-20\] > -> HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> [Key] 0 range(s) found. -> < Trusted Sites Domains [HKEY_USERS\S-1-5-21-1390067357-1592454029-839522115-1003\] > -> HKEY_USERS\S-1-5-21-1390067357-1592454029-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> HKEY_USERS\S-1-5-21-1390067357-1592454029-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> [Key] 0 domain(s) found. -> < Trusted Sites Ranges [HKEY_USERS\S-1-5-21-1390067357-1592454029-839522115-1003\] > -> HKEY_USERS\S-1-5-21-1390067357-1592454029-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> HKEY_USERS\S-1-5-21-1390067357-1592454029-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> [Key] 0 range(s) found. -> < Downloaded Program Files > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\ -> {8AD9C840-044E-11D1-B3E9-00805F499D93} [HKLM] -> http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab [Java Plug-in 1.6.0_13] -> {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} [HKLM] -> http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab [Java Plug-in 1.6.0_13] -> {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} [HKLM] -> http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab [Java Plug-in 1.6.0_13] -> < Name Servers [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\ -> DhcpNameServer -> 192.168.1.1 -> < Name Servers [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Adapters\ -> {35E7F6EB-C0C9-487E-9BC2-35E80C0C89EF}\\DhcpNameServer -> 192.168.1.1 (Realtek RTL8168/8111 PCI-E Gigabit Ethernet NIC) -> < Winlogon settings [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon -> *Shell* -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell -> Explorer.exe -> C:\WINDOWS\explorer.exe -> [2004/08/04 06:56:50 | 01,032,192 | ---- | M] (Microsoft Corporation) *MultiFile Done* -> -> < ShellExecuteHooks [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks -> "{B5A7F190-DDA6-4420-B3BA-52453494E6CD}" [HKLM] -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [Groove GFS Stub Execution Hook] -> [2006/10/27 01:48:42 | 02,210,608 | ---- | M] (Microsoft Corporation) < Domain Profile Authorized Applications List > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List -> "%windir%\system32\sessmgr.exe" -> C:\WINDOWS\System32\sessmgr.exe [%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019] -> [2004/08/04 06:56:58 | 00,140,800 | ---- | M] (Microsoft Corporation) < Standard Profile Authorized Applications List > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List -> "%windir%\system32\sessmgr.exe" -> C:\WINDOWS\System32\sessmgr.exe [%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019] -> [2004/08/04 06:56:58 | 00,140,800 | ---- | M] (Microsoft Corporation) "\??\C:\WINDOWS\system32\winlogon.exe" -> C:\WINDOWS\System32\winlogon.exe [\??\C:\WINDOWS\system32\winlogon.exe:*:enabled:@shell32.dll,-1] -> [2004/08/04 06:56:58 | 00,502,272 | ---- | M] (Microsoft Corporation) "C:\Alyn\ThreeKingdoms\ThreeKingdoms.exe" -> C:\Alyn\ThreeKingdoms\ThreeKingdoms.exe [C:\Alyn\ThreeKingdoms\ThreeKingdoms.exe:*:Enabled:ThreeKingdoms] -> File not found "C:\Program Files\DNA\btdna.exe" -> C:\Program Files\DNA\btdna.exe [C:\Program Files\DNA\btdna.exe:*:Enabled:DNA] -> File not found "C:\Program Files\Garena\Garena.exe" -> C:\Program Files\Garena\Garena.exe [C:\Program Files\Garena\Garena.exe:*:Disabled:Garena] -> File not found "C:\Program Files\Internet Explorer\iexplore.exe" -> C:\Program Files\Internet Explorer\iexplore.exe [C:\Program Files\Internet Explorer\iexplore.exe:*:Enabled:Internet Explorer] -> [2004/08/04 06:56:52 | 00,093,184 | ---- | M] (Microsoft Corporation) "C:\Program Files\Java\jre6\bin\javaw.exe" -> C:\Program Files\Java\jre6\bin\javaw.exe [C:\Program Files\Java\jre6\bin\javaw.exe:*:Enabled:Java(TM) Platform SE binary] -> [2009/03/09 05:19:13 | 00,144,792 | ---- | M] (Sun Microsystems, Inc.) "C:\Program Files\LimeWire\LimeWire.exe" -> C:\Program Files\LimeWire\LimeWire.exe [C:\Program Files\LimeWire\LimeWire.exe:*:Enabled:LimeWire] -> [2009/03/11 04:10:51 | 00,139,776 | ---- | M] (Lime Wire, LLC) "C:\Program Files\Microsoft Office\Office12\GROOVE.EXE" -> C:\Program Files\Microsoft Office\Office12\GROOVE.EXE [C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove] -> [2006/10/27 16:37:44 | 00,338,216 | ---- | M] (Microsoft Corporation) "C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE" -> C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE [C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote] -> [2006/10/27 16:03:04 | 01,018,664 | ---- | M] (Microsoft Corporation) "C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE" -> C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE [C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook] -> [2006/10/27 16:16:48 | 12,813,096 | ---- | M] (Microsoft Corporation) "C:\Program Files\Microsoft Visual Studio\COMMON\Tools\VS-Ent98\Vanalyzr\VARPC.EXE" -> C:\Program Files\Microsoft Visual Studio\COMMON\Tools\VS-Ent98\Vanalyzr\VARPC.EXE [C:\Program Files\Microsoft Visual Studio\COMMON\Tools\VS-Ent98\Vanalyzr\VARPC.EXE:*:Enabled:Microsoft (R) Visual Studio VSA RPC Event Creator] -> [1998/06/06 01:00:00 | 00,034,036 | ---- | M] (Microsoft Corporation) "C:\Program Files\Orbitdownloader\orbitdm.exe" -> C:\Program Files\Orbitdownloader\orbitdm.exe [C:\Program Files\Orbitdownloader\orbitdm.exe:*:Enabled:Orbit] -> [2009/06/26 10:46:46 | 01,719,496 | ---- | M] (Orbitdownloader.com) "C:\Program Files\Orbitdownloader\orbitnet.exe" -> C:\Program Files\Orbitdownloader\orbitnet.exe [C:\Program Files\Orbitdownloader\orbitnet.exe:*:Enabled:Orbit] -> [2009/06/24 10:38:34 | 00,557,056 | ---- | M] (Orbitdownloader.com) "C:\Program Files\softnyx\GunboundWC\GunBound.gme" -> C:\Program Files\softnyx\GunboundWC\GunBound.gme [C:\Program Files\softnyx\GunboundWC\GunBound.gme:*:Disabled:GunBound] -> File not found "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -> C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe [C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe:*:Enabled:Yahoo! Messenger] -> [2009/02/04 17:57:42 | 04,363,504 | ---- | M] (Yahoo! Inc.) < SafeBoot AlternateShell [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot -> "AlternateShell" -> cmd.exe -> < CDROM Autorun Setting [HKEY_LOCAL_MACHINE]> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom -> "AutoRun" -> 1 -> "DisplayName" -> CD-ROM Driver -> "ImagePath" -> [system32\DRIVERS\cdrom.sys] -> File not found < Drives with AutoRun files > -> -> C:\AUTOEXEC.BAT [] -> C:\AUTOEXEC.BAT [ NTFS ] -> [2009/02/17 20:42:38 | 00,000,000 | ---- | M] () < MountPoints2 [HKEY_CURRENT_USER] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2 -> [Registry - Additional Scans - Safe List] < EventViewer Logs - Last 10 Errors > -> Event Information -> Description Application [ Error ] 7/14/2009 8:57:01 AM Computer Name = DING-2453C70363 | Source = Application Hang | ID = 1002 -> Description = Hanging application iexplore.exe, version 6.0.2900.2180, hang module hungapp, version 0.0.0.0, hang address 0x00000000. Application [ Error ] 7/14/2009 9:06:06 AM Computer Name = DING-2453C70363 | Source = Application Hang | ID = 1002 -> Description = Hanging application iexplore.exe, version 6.0.2900.2180, hang module hungapp, version 0.0.0.0, hang address 0x00000000. Application [ Error ] 7/14/2009 9:06:08 AM Computer Name = DING-2453C70363 | Source = Application Hang | ID = 1002 -> Description = Hanging application iexplore.exe, version 6.0.2900.2180, hang module hungapp, version 0.0.0.0, hang address 0x00000000. Application [ Error ] 7/14/2009 1:12:09 PM Computer Name = DING-2453C70363 | Source = Application Hang | ID = 1002 -> Description = Hanging application iexplore.exe, version 6.0.2900.2180, hang module hungapp, version 0.0.0.0, hang address 0x00000000. Application [ Error ] 7/14/2009 1:13:00 PM Computer Name = DING-2453C70363 | Source = Application Hang | ID = 1002 -> Description = Hanging application iexplore.exe, version 6.0.2900.2180, hang module hungapp, version 0.0.0.0, hang address 0x00000000. Application [ Error ] 7/14/2009 1:13:26 PM Computer Name = DING-2453C70363 | Source = Application Hang | ID = 1002 -> Description = Hanging application iexplore.exe, version 6.0.2900.2180, hang module hungapp, version 0.0.0.0, hang address 0x00000000. Application [ Error ] 7/16/2009 5:51:33 AM Computer Name = DING-2453C70363 | Source = NTBackup | ID = 8001 -> Description = End Backup of 'E:' 'Warnings or errors were encountered.' Verify: Off Mode: Append Type: Normal Consult the backup report for more details. Application [ Error ] 7/17/2009 11:29:55 PM Computer Name = DING-2453C70363 | Source = crypt32 | ID = 131080 -> Description = Failed auto update retrieval of third-party root list sequence number from: with error: This operation returned because the timeout period expired. Application [ Error ] 7/17/2009 11:30:27 PM Computer Name = DING-2453C70363 | Source = crypt32 | ID = 131080 -> Description = Failed auto update retrieval of third-party root list sequence number from: with error: This operation returned because the timeout period expired. Application [ Error ] 7/18/2009 12:02:40 AM Computer Name = DING-2453C70363 | Source = Application Hang | ID = 1002 -> Description = Hanging application iexplore.exe, version 6.0.2900.2180, hang module hungapp, version 0.0.0.0, hang address 0x00000000. System [ Error ] 3/20/2009 11:21:29 AM Computer Name = DING-2453C70363 | Source = SideBySide | ID = 16842811 -> Description = Generate Activation Context failed for C:\Documents and Settings\ding\Application Data\Mozilla\Firefox\Profiles\ofzmw58f.default\extensions\{2bae58c2-79f9-45d1-a286-81f911301c3a}\components\FFAlert.dll. Reference error message: The operation completed successfully. . System [ Error ] 3/20/2009 11:21:29 AM Computer Name = DING-2453C70363 | Source = SideBySide | ID = 16842784 -> Description = Dependent Assembly Microsoft.VC90.CRT could not be found and Last Error was The referenced assembly is not installed on your system. System [ Error ] 3/20/2009 11:21:29 AM Computer Name = DING-2453C70363 | Source = SideBySide | ID = 16842811 -> Description = Resolve Partial Assembly failed for Microsoft.VC90.CRT. Reference error message: The referenced assembly is not installed on your system. . System [ Error ] 3/20/2009 11:21:29 AM Computer Name = DING-2453C70363 | Source = SideBySide | ID = 16842811 -> Description = Generate Activation Context failed for C:\Documents and Settings\ding\Application Data\Mozilla\Firefox\Profiles\ofzmw58f.default\extensions\{2bae58c2-79f9-45d1-a286-81f911301c3a}\components\FFAlert.dll. Reference error message: The operation completed successfully. . System [ Error ] 3/20/2009 11:21:30 AM Computer Name = DING-2453C70363 | Source = SideBySide | ID = 16842784 -> Description = Dependent Assembly Microsoft.VC90.CRT could not be found and Last Error was The referenced assembly is not installed on your system. System [ Error ] 3/20/2009 11:21:30 AM Computer Name = DING-2453C70363 | Source = SideBySide | ID = 16842811 -> Description = Resolve Partial Assembly failed for Microsoft.VC90.CRT. Reference error message: The referenced assembly is not installed on your system. . System [ Error ] 3/20/2009 11:21:30 AM Computer Name = DING-2453C70363 | Source = SideBySide | ID = 16842811 -> Description = Generate Activation Context failed for C:\Documents and Settings\ding\Application Data\Mozilla\Firefox\Profiles\ofzmw58f.default\extensions\{2bae58c2-79f9-45d1-a286-81f911301c3a}\components\FFAlert.dll. Reference error message: The operation completed successfully. . System [ Error ] 3/20/2009 11:21:30 AM Computer Name = DING-2453C70363 | Source = SideBySide | ID = 16842784 -> Description = Dependent Assembly Microsoft.VC90.CRT could not be found and Last Error was The referenced assembly is not installed on your system. System [ Error ] 3/20/2009 11:21:30 AM Computer Name = DING-2453C70363 | Source = SideBySide | ID = 16842811 -> Description = Resolve Partial Assembly failed for Microsoft.VC90.CRT. Reference error message: The referenced assembly is not installed on your system. . System [ Error ] 3/20/2009 11:21:30 AM Computer Name = DING-2453C70363 | Source = SideBySide | ID = 16842811 -> Description = Generate Activation Context failed for C:\Documents and Settings\ding\Application Data\Mozilla\Firefox\Profiles\ofzmw58f.default\extensions\{2bae58c2-79f9-45d1-a286-81f911301c3a}\components\FFAlert.dll. Reference error message: The operation completed successfully. . [Files/Folders - Created Within 30 Days] 2 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> 4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> Rapidown -> C:\Program Files\Rapidown -> [2015/03/13 20:13:56 | 00,000,000 | ---D | C] wmpns.dll -> C:\WINDOWS\System32\wmpns.dll -> [2015/03/12 23:02:21 | 00,221,184 | ---- | C] (Microsoft Corporation) OTS.exe -> C:\Documents and Settings\ding\Desktop\OTS.exe -> [2009/07/18 16:09:05 | 00,513,536 | ---- | C] (OldTimer Tools) LastGood -> C:\WINDOWS\LastGood -> [2009/07/18 11:32:15 | 00,000,000 | ---D | C] appmgmt -> C:\WINDOWS\System32\appmgmt -> [2009/07/18 11:26:22 | 00,000,000 | ---D | C] nud32 instuller -> C:\Documents and Settings\ding\Desktop\nud32 instuller -> [2009/07/18 11:24:26 | 00,000,000 | ---D | C] JAFSetup_1.98.62.exe -> C:\Documents and Settings\ding\Desktop\JAFSetup_1.98.62.exe -> [2009/07/17 18:44:14 | 18,249,007 | ---- | C] (ODEON.CN) NtmsData -> C:\WINDOWS\System32\NtmsData -> [2009/07/16 15:35:38 | 00,000,000 | ---D | C] reconnect charger -> C:\Documents and Settings\ding\My Documents\reconnect charger -> [2009/07/15 18:08:08 | 00,000,000 | ---D | C] USB.Disk.Security.v5.1.0.15 -> C:\Documents and Settings\ding\My Documents\USB.Disk.Security.v5.1.0.15 -> [2009/07/15 01:24:01 | 00,000,000 | ---D | C] USB.Disk.Security.v5.1.0.15.rar -> C:\Documents and Settings\ding\My Documents\USB.Disk.Security.v5.1.0.15.rar -> [2009/07/15 01:18:39 | 00,996,763 | ---- | C] () Malwarebytes -> C:\Documents and Settings\ding\Application Data\Malwarebytes -> [2009/07/14 21:09:32 | 00,000,000 | ---D | C] Malwarebytes' Anti-Malware.lnk -> C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk -> [2009/07/14 21:09:23 | 00,000,696 | ---- | C] () mbamswissarmy.sys -> C:\WINDOWS\System32\drivers\mbamswissarmy.sys -> [2009/07/14 21:09:19 | 00,038,160 | ---- | C] (Malwarebytes Corporation) mbam.sys -> C:\WINDOWS\System32\drivers\mbam.sys -> [2009/07/14 21:09:16 | 00,019,096 | ---- | C] (Malwarebytes Corporation) Malwarebytes -> C:\Documents and Settings\All Users\Application Data\Malwarebytes -> [2009/07/14 21:09:16 | 00,000,000 | ---D | C] Malwarebytes' Anti-Malware -> C:\Program Files\Malwarebytes' Anti-Malware -> [2009/07/14 21:09:15 | 00,000,000 | ---D | C] WinPcap -> C:\Program Files\WinPcap -> [2009/07/14 21:07:20 | 00,000,000 | ---D | C] NirCmd.exe -> C:\WINDOWS\NirCmd.exe -> [2009/07/14 21:00:23 | 00,051,200 | ---- | C] (NirSoft) install.exe -> C:\Documents and Settings\ding\My Documents\install.exe -> [2009/07/14 20:49:25 | 00,711,686 | ---- | C] () USB Disk Security.lnk -> C:\Documents and Settings\All Users\Desktop\USB Disk Security.lnk -> [2009/07/14 20:34:07 | 00,000,675 | ---- | C] () USB_Disk_Security.zip -> C:\Documents and Settings\ding\My Documents\USB_Disk_Security.zip -> [2009/07/14 20:26:40 | 01,041,214 | ---- | C] () MSXML 4.0 -> C:\Program Files\MSXML 4.0 -> [2009/07/14 00:35:45 | 00,000,000 | ---D | C] Samsung_Cable_Selector_v1.2.part1.rar -> C:\Documents and Settings\ding\Desktop\Samsung_Cable_Selector_v1.2.part1.rar -> [2009/07/13 21:17:19 | 00,300,000 | ---- | C] () ustpro cable3.01.rar -> C:\Documents and Settings\ding\Desktop\ustpro cable3.01.rar -> [2009/07/13 21:10:09 | 00,013,803 | ---- | C] () New Folder -> C:\Documents and Settings\ding\Desktop\New Folder -> [2009/07/13 19:22:23 | 00,000,000 | ---D | C] mucltui.dll -> C:\WINDOWS\System32\mucltui.dll -> [2009/07/12 22:57:23 | 00,268,648 | ---- | C] (Microsoft Corporation) muweb.dll -> C:\WINDOWS\System32\muweb.dll -> [2009/07/12 22:57:23 | 00,208,744 | ---- | C] (Microsoft Corporation) mucltui.dll.mui -> C:\WINDOWS\System32\mucltui.dll.mui -> [2009/07/12 22:57:23 | 00,027,496 | ---- | C] (Microsoft Corporation) lsd_rm-84_v5.0705.3.0.1.rar -> C:\Documents and Settings\ding\My Documents\lsd_rm-84_v5.0705.3.0.1.rar -> [2009/07/12 05:53:28 | 38,913,337 | ---- | C] () Picture Motion Browser -> C:\Documents and Settings\ding\My Documents\Picture Motion Browser -> [2009/07/10 17:20:12 | 00,000,000 | ---D | C] Sony Corporation -> C:\Documents and Settings\ding\Application Data\Sony Corporation -> [2009/07/10 06:47:32 | 00,000,000 | ---D | C] xinput1_3.dll -> C:\WINDOWS\System32\xinput1_3.dll -> [2009/07/10 06:41:52 | 00,081,768 | ---- | C] (Microsoft Corporation) xactengine2_7.dll -> C:\WINDOWS\System32\xactengine2_7.dll -> [2009/07/10 06:41:50 | 00,261,480 | ---- | C] (Microsoft Corporation) D3DCompiler_33.dll -> C:\WINDOWS\System32\D3DCompiler_33.dll -> [2009/07/10 06:41:48 | 01,123,696 | ---- | C] (Microsoft Corporation) d3dx10_33.dll -> C:\WINDOWS\System32\d3dx10_33.dll -> [2009/07/10 06:41:48 | 00,443,752 | ---- | C] (Microsoft Corporation) d3dx9_33.dll -> C:\WINDOWS\System32\d3dx9_33.dll -> [2009/07/10 06:41:45 | 03,495,784 | ---- | C] (Microsoft Corporation) d3dx9_32.dll -> C:\WINDOWS\System32\d3dx9_32.dll -> [2009/07/10 06:41:44 | 03,426,072 | ---- | C] (Microsoft Corporation) xactengine2_6.dll -> C:\WINDOWS\System32\xactengine2_6.dll -> [2009/07/10 06:41:44 | 00,255,848 | ---- | C] (Microsoft Corporation) xactengine2_5.dll -> C:\WINDOWS\System32\xactengine2_5.dll -> [2009/07/10 06:41:44 | 00,251,672 | ---- | C] (Microsoft Corporation) d3dx9_31.dll -> C:\WINDOWS\System32\d3dx9_31.dll -> [2009/07/10 06:41:43 | 02,414,360 | ---- | C] (Microsoft Corporation) xactengine2_4.dll -> C:\WINDOWS\System32\xactengine2_4.dll -> [2009/07/10 06:41:43 | 00,237,848 | ---- | C] (Microsoft Corporation) xactengine2_3.dll -> C:\WINDOWS\System32\xactengine2_3.dll -> [2009/07/10 06:41:43 | 00,236,824 | ---- | C] (Microsoft Corporation) xactengine2_2.dll -> C:\WINDOWS\System32\xactengine2_2.dll -> [2009/07/10 06:41:43 | 00,230,168 | ---- | C] (Microsoft Corporation) xinput1_2.dll -> C:\WINDOWS\System32\xinput1_2.dll -> [2009/07/10 06:41:43 | 00,062,744 | ---- | C] (Microsoft Corporation) x3daudio1_1.dll -> C:\WINDOWS\System32\x3daudio1_1.dll -> [2009/07/10 06:41:43 | 00,015,128 | ---- | C] (Microsoft Corporation) xactengine2_1.dll -> C:\WINDOWS\System32\xactengine2_1.dll -> [2009/07/10 06:41:42 | 00,229,584 | ---- | C] (Microsoft Corporation) xinput1_1.dll -> C:\WINDOWS\System32\xinput1_1.dll -> [2009/07/10 06:41:42 | 00,062,672 | ---- | C] (Microsoft Corporation) d3dx9_29.dll -> C:\WINDOWS\System32\d3dx9_29.dll -> [2009/07/10 06:41:41 | 02,332,368 | ---- | C] (Microsoft Corporation) xactengine2_0.dll -> C:\WINDOWS\System32\xactengine2_0.dll -> [2009/07/10 06:41:41 | 00,230,096 | ---- | C] (Microsoft Corporation) x3daudio1_0.dll -> C:\WINDOWS\System32\x3daudio1_0.dll -> [2009/07/10 06:41:41 | 00,014,032 | ---- | C] (Microsoft Corporation) Picture Motion Browser Media Check Tool.lnk -> C:\Documents and Settings\ding\Start Menu\Programs\Startup\Picture Motion Browser Media Check Tool.lnk -> [2009/07/10 06:41:02 | 00,001,941 | ---- | C] () Handycam Utility.lnk -> C:\Documents and Settings\All Users\Desktop\Handycam Utility.lnk -> [2009/07/10 06:40:38 | 00,001,864 | ---- | C] () PMB - Picture Motion Browser.lnk -> C:\Documents and Settings\All Users\Desktop\PMB - Picture Motion Browser.lnk -> [2009/07/10 06:39:53 | 00,001,873 | ---- | C] () PMB Guide.lnk -> C:\Documents and Settings\All Users\Desktop\PMB Guide.lnk -> [2009/07/10 06:39:53 | 00,001,740 | ---- | C] () Sony Corporation -> C:\Documents and Settings\All Users\Application Data\Sony Corporation -> [2009/07/10 06:35:42 | 00,000,000 | ---D | C] DCR-SR45 Handbook (PDF).lnk -> C:\Documents and Settings\All Users\Desktop\DCR-SR45 Handbook (PDF).lnk -> [2009/07/10 06:31:10 | 00,001,829 | ---- | C] () Sony -> C:\Program Files\Sony -> [2009/07/10 06:31:08 | 00,000,000 | ---D | C] lsd_rh-122_v3.10.rar -> C:\Documents and Settings\ding\My Documents\lsd_rh-122_v3.10.rar -> [2009/07/07 21:54:47 | 05,565,407 | ---- | C] () lsd_rh-122_v3.70.rar -> C:\Documents and Settings\ding\My Documents\lsd_rh-122_v3.70.rar -> [2009/07/07 21:45:04 | 05,192,711 | ---- | C] () NOK_fLASH -> C:\Documents and Settings\ding\Desktop\NOK_fLASH -> [2009/07/07 20:33:43 | 00,000,000 | ---D | C] lsd_rm-243_v6.51.rar -> C:\Documents and Settings\ding\My Documents\lsd_rm-243_v6.51.rar -> [2009/07/07 19:55:40 | 51,432,841 | ---- | C] () eg0bus.exe -> C:\WINDOWS\eg0bus.exe -> [2009/07/06 20:48:52 | 00,024,576 | ---- | C] (VsH-GsM.com) USTPro2.lnk -> C:\Documents and Settings\ding\Desktop\USTPro2.lnk -> [2009/07/06 20:46:17 | 00,000,628 | ---- | C] () msvcr70.dll -> C:\WINDOWS\System32\msvcr70.dll -> [2009/07/06 20:46:04 | 00,344,064 | ---- | C] (Microsoft Corporation) mfc71d.dll -> C:\WINDOWS\System32\mfc71d.dll -> [2009/07/06 20:46:03 | 02,179,072 | ---- | C] (Microsoft Corporation) mfc70.dll -> C:\WINDOWS\System32\mfc70.dll -> [2009/07/06 20:46:03 | 00,974,848 | ---- | C] (Microsoft Corporation) DLPORTIO.dll -> C:\WINDOWS\System32\DLPORTIO.dll -> [2009/07/06 20:46:03 | 00,034,816 | ---- | C] (Scientific Software Tools, Inc.) REGTOOL5.DLL -> C:\WINDOWS\System32\REGTOOL5.DLL -> [2009/07/06 20:46:03 | 00,032,768 | ---- | C] (Microsoft Corporation) setg.inf -> C:\WINDOWS\setg.inf -> [2009/07/06 20:46:03 | 00,000,137 | ---- | C] () USTPro2_v9510 -> C:\Documents and Settings\ding\Desktop\USTPro2_v9510 -> [2009/07/06 20:44:44 | 00,000,000 | ---D | C] Nero -> C:\Documents and Settings\ding\Application Data\Nero -> [2009/07/05 21:31:28 | 00,000,000 | ---D | C] Windows Sidebar -> C:\Program Files\Windows Sidebar -> [2009/07/05 21:26:15 | 00,000,000 | ---D | C] Irremote.ini -> C:\WINDOWS\Irremote.ini -> [2009/07/05 21:25:57 | 00,004,757 | ---- | C] () Nero StartSmart.lnk -> C:\Documents and Settings\All Users\Desktop\Nero StartSmart.lnk -> [2009/07/05 21:19:01 | 00,002,369 | ---- | C] () Nero -> C:\Program Files\Common Files\Nero -> [2009/07/05 21:18:20 | 00,000,000 | ---D | C] d3dx9_30.dll -> C:\WINDOWS\System32\d3dx9_30.dll -> [2009/07/05 21:18:15 | 02,388,176 | ---- | C] (Microsoft Corporation) scbase.inf -> C:\WINDOWS\System32\scbase.inf -> [2009/07/05 19:32:03 | 00,005,226 | ---- | C] () W95INF32.DLL -> C:\WINDOWS\System32\W95INF32.DLL -> [2009/07/05 19:32:03 | 00,004,608 | ---- | C] (Microsoft Corporation) W95INF16.DLL -> C:\WINDOWS\System32\W95INF16.DLL -> [2009/07/05 19:32:03 | 00,002,272 | ---- | C] (Microsoft Corporation) UST_Errors.lnk -> C:\Documents and Settings\ding\Desktop\UST_Errors.lnk -> [2009/07/05 19:32:03 | 00,000,645 | ---- | C] () UST_Important.lnk -> C:\Documents and Settings\ding\Desktop\UST_Important.lnk -> [2009/07/05 19:32:03 | 00,000,640 | ---- | C] () SN Reader.lnk -> C:\Documents and Settings\ding\Desktop\SN Reader.lnk -> [2009/07/05 19:32:03 | 00,000,628 | ---- | C] () str679.dll -> C:\WINDOWS\System32\str679.dll -> [2009/07/05 19:32:02 | 00,499,712 | ---- | C] (DoneEx Software) SVRPSCR.vxd -> C:\WINDOWS\System32\SVRPSCR.vxd -> [2009/07/05 19:32:02 | 00,009,339 | ---- | C] () SVRSTCS.vxd -> C:\WINDOWS\System32\SVRSTCS.vxd -> [2009/07/05 19:32:02 | 00,008,387 | ---- | C] () comcat.dll -> C:\WINDOWS\comcat.dll -> [2009/07/05 19:32:02 | 00,003,584 | ---- | C] (Microsoft Corporation) axbind.reg -> C:\WINDOWS\System32\axbind.reg -> [2009/07/05 19:32:02 | 00,000,259 | ---- | C] () UST Pro 2 -> C:\Program Files\UST Pro 2 -> [2009/07/05 19:32:02 | 00,000,000 | ---D | C] tantrascam.docx -> C:\Documents and Settings\ding\My Documents\tantrascam.docx -> [2009/07/03 11:08:34 | 02,928,312 | ---- | C] () DESERT SONG.pptx -> C:\Documents and Settings\ding\My Documents\DESERT SONG.pptx -> [2009/07/01 21:51:15 | 00,087,731 | ---- | C] () Brwstr.part02.rar -> C:\Documents and Settings\ding\My Documents\Brwstr.part02.rar -> [2009/07/01 19:10:02 | 10,407,8000 | ---- | C] () Desert Song.docx -> C:\Documents and Settings\ding\Desktop\Desert Song.docx -> [2009/07/01 18:48:55 | 00,220,084 | ---- | C] () TTOP.123.DotNXT.part1.rar -> C:\Documents and Settings\ding\My Documents\TTOP.123.DotNXT.part1.rar -> [2009/07/01 14:51:13 | 42,010,2144 | ---- | C] () Opera -> C:\Documents and Settings\ding\Local Settings\Application Data\Opera -> [2009/07/01 14:45:30 | 00,000,000 | ---D | C] Opera -> C:\Documents and Settings\ding\Application Data\Opera -> [2009/07/01 14:45:30 | 00,000,000 | ---D | C] Opera.lnk -> C:\Documents and Settings\All Users\Desktop\Opera.lnk -> [2009/07/01 14:45:23 | 00,000,592 | ---- | C] () Opera -> C:\Program Files\Opera -> [2009/07/01 14:45:21 | 00,000,000 | ---D | C] GrabPro -> C:\Documents and Settings\ding\Application Data\GrabPro -> [2009/07/01 14:38:07 | 00,000,000 | ---D | C] Desert Song.docx -> C:\Documents and Settings\ding\My Documents\Desert Song.docx -> [2009/06/29 20:32:08 | 00,216,684 | ---- | C] () father.docx -> C:\Documents and Settings\ding\My Documents\father.docx -> [2009/06/28 08:13:56 | 00,010,674 | ---- | C] () OEMINFO.INI -> C:\WINDOWS\System32\OEMINFO.INI -> [2009/06/23 22:04:03 | 00,000,226 | ---- | C] () Mozilla Firefox.lnk -> C:\Documents and Settings\All Users\Desktop\Mozilla Firefox.lnk -> [2009/06/19 19:56:32 | 00,001,602 | ---- | C] () oreans32.sys -> C:\WINDOWS\System32\drivers\oreans32.sys -> [2009/05/16 19:18:48 | 00,033,824 | ---- | C] () usb2vcom.sys -> C:\WINDOWS\System32\drivers\usb2vcom.sys -> [2009/05/01 13:38:20 | 00,027,616 | ---- | C] () SagemDD_v5.8.INI -> C:\WINDOWS\SagemDD_v5.8.INI -> [2009/04/03 18:05:47 | 00,000,064 | ---- | C] () eps2kt1.sys -> C:\WINDOWS\System32\drivers\eps2kt1.sys -> [2009/04/03 15:30:07 | 00,021,888 | ---- | C] () R5CoInst.dll -> C:\WINDOWS\System32\R5CoInst.dll -> [2009/04/03 15:30:07 | 00,004,608 | ---- | C] () PICSDK.ini -> C:\WINDOWS\System32\PICSDK.ini -> [2009/03/29 09:00:31 | 00,000,097 | ---- | C] () CDER230.ini -> C:\WINDOWS\CDER230.ini -> [2009/03/29 08:59:01 | 00,000,025 | ---- | C] () mdm.ini -> C:\WINDOWS\mdm.ini -> [2009/02/28 16:23:36 | 00,000,126 | ---- | C] () ODBC.INI -> C:\WINDOWS\ODBC.INI -> [2009/02/28 16:23:32 | 00,000,288 | ---- | C] () NeroDigital.ini -> C:\WINDOWS\NeroDigital.ini -> [2009/02/26 10:03:42 | 00,000,069 | ---- | C] () slbmgpg.dll -> C:\WINDOWS\System32\slbmgpg.dll -> [2009/02/18 08:42:00 | 00,028,160 | R--- | C] () ftdiun2k.ini -> C:\WINDOWS\System32\ftdiun2k.ini -> [2008/07/24 06:29:18 | 00,000,222 | ---- | C] () vserial.sys -> C:\WINDOWS\System32\drivers\vserial.sys -> [2008/07/24 06:29:16 | 00,047,744 | ---- | C] () vsb.sys -> C:\WINDOWS\System32\drivers\vsb.sys -> [2008/07/24 06:29:16 | 00,015,264 | ---- | C] () nvwdmcpl.dll -> C:\WINDOWS\System32\nvwdmcpl.dll -> [2007/11/07 07:00:00 | 01,703,936 | ---- | C] () nview.dll -> C:\WINDOWS\System32\nview.dll -> [2007/11/07 07:00:00 | 01,474,560 | ---- | C] () nvwimg.dll -> C:\WINDOWS\System32\nvwimg.dll -> [2007/11/07 07:00:00 | 01,019,904 | ---- | C] () nvshell.dll -> C:\WINDOWS\System32\nvshell.dll -> [2007/11/07 07:00:00 | 00,466,944 | ---- | C] () nvhwvid.dll -> C:\WINDOWS\System32\nvhwvid.dll -> [2007/04/19 12:26:00 | 00,581,632 | ---- | C] () nvnt4cpl.dll -> C:\WINDOWS\System32\nvnt4cpl.dll -> [2007/04/19 12:26:00 | 00,286,720 | ---- | C] () pthreadVC.dll -> C:\WINDOWS\System32\pthreadVC.dll -> [2006/04/23 07:00:10 | 00,053,299 | ---- | C] () win.ini -> C:\WINDOWS\win.ini -> [2001/08/23 19:00:00 | 00,000,603 | ---- | C] () system.ini -> C:\WINDOWS\system.ini -> [2001/08/23 19:00:00 | 00,000,231 | ---- | C] () REPUTIL.DLL -> C:\WINDOWS\System32\REPUTIL.DLL -> [1998/06/10 01:00:00 | 00,015,120 | ---- | C] () JAUTOEXP.INI -> C:\WINDOWS\JAUTOEXP.INI -> [1998/05/18 01:00:00 | 00,014,017 | ---- | C] () FRONTPG.INI -> C:\WINDOWS\FRONTPG.INI -> [1998/04/24 01:00:00 | 00,000,218 | ---- | C] () [Files/Folders - Modified Within 30 Days] 142 C:\Documents and Settings\ding\Local Settings\Temp\*.tmp files -> C:\Documents and Settings\ding\Local Settings\Temp\*.tmp -> 1 C:\Documents and Settings\ding\Local Settings\Temp\is-9RFQ0.tmp\_isetup\*.tmp files -> C:\Documents and Settings\ding\Local Settings\Temp\is-9RFQ0.tmp\_isetup\*.tmp -> OTS.exe -> C:\Documents and Settings\ding\Desktop\OTS.exe -> [2009/07/18 16:09:23 | 00,513,536 | ---- | M] (OldTimer Tools) NTUSER.DAT -> C:\Documents and Settings\ding\NTUSER.DAT -> [2009/07/18 14:36:46 | 04,718,592 | -H-- | M] () wpa.dbl -> C:\WINDOWS\System32\wpa.dbl -> [2009/07/18 11:27:42 | 00,002,206 | ---- | M] () Perflib_Perfdata_a4.dat -> C:\WINDOWS\Temp\Perflib_Perfdata_a4.dat -> [2009/07/18 11:27:37 | 00,016,384 | ---- | M] () SA.DAT -> C:\WINDOWS\tasks\SA.DAT -> [2009/07/18 11:27:28 | 00,000,006 | -H-- | M] () bootstat.dat -> C:\WINDOWS\bootstat.dat -> [2009/07/18 11:27:26 | 00,002,048 | --S- | M] () ntuser.ini -> C:\Documents and Settings\ding\ntuser.ini -> [2009/07/18 11:26:49 | 00,000,178 | -HS- | M] () JAFSetup_1.98.62.exe -> C:\Documents and Settings\ding\Desktop\JAFSetup_1.98.62.exe -> [2009/07/17 18:57:56 | 18,249,007 | ---- | M] (ODEON.CN) ISSetup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{02874305-8F15-4934-A58F-242A42CD64C8}\Disk1\ISSetup.dll -> [2009/07/17 17:16:00 | 00,492,032 | ---- | M] () setup.exe -> C:\Documents and Settings\ding\Local Settings\Temp\{DE57257E-AB16-447D-8F75-7A36CB6BCC90}\Disk1\setup.exe -> [2009/07/17 17:16:00 | 00,455,600 | ---- | M] () setup.exe -> C:\Documents and Settings\ding\Local Settings\Temp\{02874305-8F15-4934-A58F-242A42CD64C8}\Disk1\setup.exe -> [2009/07/17 17:16:00 | 00,455,600 | ---- | M] () _setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{DE57257E-AB16-447D-8F75-7A36CB6BCC90}\Disk1\_setup.dll -> [2009/07/17 17:16:00 | 00,373,680 | ---- | M] () _Setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{DE57257E-AB16-447D-8F75-7A36CB6BCC90}\_Setup.dll -> [2009/07/17 17:16:00 | 00,373,680 | ---- | M] () _setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{66F97254-52A6-45A5-B067-39933C05CA0A}\Disk1\_setup.dll -> [2009/07/17 17:16:00 | 00,373,680 | ---- | M] () _Setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{66F97254-52A6-45A5-B067-39933C05CA0A}\_Setup.dll -> [2009/07/17 17:16:00 | 00,373,680 | ---- | M] () _setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{02874305-8F15-4934-A58F-242A42CD64C8}\Disk1\_setup.dll -> [2009/07/17 17:16:00 | 00,373,680 | ---- | M] () _Setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{02874305-8F15-4934-A58F-242A42CD64C8}\_Setup.dll -> [2009/07/17 17:16:00 | 00,373,680 | ---- | M] () ISSetup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{DE57257E-AB16-447D-8F75-7A36CB6BCC90}\Disk1\ISSetup.dll -> [2009/07/17 17:15:59 | 00,492,032 | ---- | M] (Macrovision Corporation) ISSetup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{66F97254-52A6-45A5-B067-39933C05CA0A}\Disk1\ISSetup.dll -> [2009/07/17 17:15:59 | 00,492,032 | ---- | M] (Macrovision Corporation) ISSetup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{607C148F-0FDB-4476-9963-D1730E4F1EC3}\Disk1\ISSetup.dll -> [2009/07/17 17:15:59 | 00,492,032 | ---- | M] (Macrovision Corporation) ISSetup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{5C52F48D-C566-4007-BC1D-AA87F5530375}\Disk1\ISSetup.dll -> [2009/07/17 17:15:59 | 00,492,032 | ---- | M] (Macrovision Corporation) setup.exe -> C:\Documents and Settings\ding\Local Settings\Temp\{66F97254-52A6-45A5-B067-39933C05CA0A}\Disk1\setup.exe -> [2009/07/17 17:15:59 | 00,455,600 | ---- | M] (Macrovision Corporation) setup.exe -> C:\Documents and Settings\ding\Local Settings\Temp\{607C148F-0FDB-4476-9963-D1730E4F1EC3}\Disk1\setup.exe -> [2009/07/17 17:15:59 | 00,455,600 | ---- | M] (Macrovision Corporation) setup.exe -> C:\Documents and Settings\ding\Local Settings\Temp\{5C52F48D-C566-4007-BC1D-AA87F5530375}\Disk1\setup.exe -> [2009/07/17 17:15:59 | 00,455,600 | ---- | M] (Macrovision Corporation) _setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{607C148F-0FDB-4476-9963-D1730E4F1EC3}\Disk1\_setup.dll -> [2009/07/17 17:15:59 | 00,373,680 | ---- | M] (Macrovision Corporation) _Setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{607C148F-0FDB-4476-9963-D1730E4F1EC3}\_Setup.dll -> [2009/07/17 17:15:59 | 00,373,680 | ---- | M] (Macrovision Corporation) _setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{208501BA-B42E-49FB-AB2E-8F44F3AC5F0E}\Disk1\_setup.dll -> [2009/07/17 17:15:59 | 00,373,680 | ---- | M] (Macrovision Corporation) _Setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{208501BA-B42E-49FB-AB2E-8F44F3AC5F0E}\_Setup.dll -> [2009/07/17 17:15:59 | 00,373,680 | ---- | M] (Macrovision Corporation) _setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{5C52F48D-C566-4007-BC1D-AA87F5530375}\Disk1\_setup.dll -> [2009/07/17 17:15:59 | 00,373,680 | ---- | M] () _Setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{5C52F48D-C566-4007-BC1D-AA87F5530375}\_Setup.dll -> [2009/07/17 17:15:59 | 00,373,680 | ---- | M] () ISSetup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{F81D8682-A3CF-49C8-8D61-34F32A2683E7}\Disk1\ISSetup.dll -> [2009/07/17 17:15:58 | 00,492,032 | ---- | M] (Macrovision Corporation) ISSetup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{9DEB3B04-452C-46E8-AAFF-81EB1693DE49}\Disk1\ISSetup.dll -> [2009/07/17 17:15:58 | 00,492,032 | ---- | M] (Macrovision Corporation) ISSetup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{7EA0BBB7-555A-4677-B6E5-38BBEB414371}\Disk1\ISSetup.dll -> [2009/07/17 17:15:58 | 00,492,032 | ---- | M] (Macrovision Corporation) ISSetup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{362311E5-329B-4B4B-8918-805BCA4BBE35}\Disk1\ISSetup.dll -> [2009/07/17 17:15:58 | 00,492,032 | ---- | M] (Macrovision Corporation) ISSetup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{2349EE3F-D9D0-476F-8C27-113A90FC00C2}\Disk1\ISSetup.dll -> [2009/07/17 17:15:58 | 00,492,032 | ---- | M] (Macrovision Corporation) ISSetup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{208501BA-B42E-49FB-AB2E-8F44F3AC5F0E}\Disk1\ISSetup.dll -> [2009/07/17 17:15:58 | 00,492,032 | ---- | M] (Macrovision Corporation) ISSetup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{19A6E925-E470-4229-91CD-B4E67EE912B9}\Disk1\ISSetup.dll -> [2009/07/17 17:15:58 | 00,492,032 | ---- | M] (Macrovision Corporation) ISSetup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{0078E01D-277F-4533-BE11-B2CC8C41B16D}\Disk1\ISSetup.dll -> [2009/07/17 17:15:58 | 00,492,032 | ---- | M] (Macrovision Corporation) setup.exe -> C:\Documents and Settings\ding\Local Settings\Temp\{F81D8682-A3CF-49C8-8D61-34F32A2683E7}\Disk1\setup.exe -> [2009/07/17 17:15:58 | 00,455,600 | ---- | M] (Macrovision Corporation) setup.exe -> C:\Documents and Settings\ding\Local Settings\Temp\{9DEB3B04-452C-46E8-AAFF-81EB1693DE49}\Disk1\setup.exe -> [2009/07/17 17:15:58 | 00,455,600 | ---- | M] (Macrovision Corporation) setup.exe -> C:\Documents and Settings\ding\Local Settings\Temp\{7EA0BBB7-555A-4677-B6E5-38BBEB414371}\Disk1\setup.exe -> [2009/07/17 17:15:58 | 00,455,600 | ---- | M] (Macrovision Corporation) setup.exe -> C:\Documents and Settings\ding\Local Settings\Temp\{362311E5-329B-4B4B-8918-805BCA4BBE35}\Disk1\setup.exe -> [2009/07/17 17:15:58 | 00,455,600 | ---- | M] (Macrovision Corporation) setup.exe -> C:\Documents and Settings\ding\Local Settings\Temp\{2349EE3F-D9D0-476F-8C27-113A90FC00C2}\Disk1\setup.exe -> [2009/07/17 17:15:58 | 00,455,600 | ---- | M] (Macrovision Corporation) setup.exe -> C:\Documents and Settings\ding\Local Settings\Temp\{208501BA-B42E-49FB-AB2E-8F44F3AC5F0E}\Disk1\setup.exe -> [2009/07/17 17:15:58 | 00,455,600 | ---- | M] (Macrovision Corporation) setup.exe -> C:\Documents and Settings\ding\Local Settings\Temp\{19A6E925-E470-4229-91CD-B4E67EE912B9}\Disk1\setup.exe -> [2009/07/17 17:15:58 | 00,455,600 | ---- | M] (Macrovision Corporation) setup.exe -> C:\Documents and Settings\ding\Local Settings\Temp\{0078E01D-277F-4533-BE11-B2CC8C41B16D}\Disk1\setup.exe -> [2009/07/17 17:15:58 | 00,455,600 | ---- | M] (Macrovision Corporation) _setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{F81D8682-A3CF-49C8-8D61-34F32A2683E7}\Disk1\_setup.dll -> [2009/07/17 17:15:58 | 00,373,680 | ---- | M] (Macrovision Corporation) _Setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{F81D8682-A3CF-49C8-8D61-34F32A2683E7}\_Setup.dll -> [2009/07/17 17:15:58 | 00,373,680 | ---- | M] (Macrovision Corporation) _setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{9DEB3B04-452C-46E8-AAFF-81EB1693DE49}\Disk1\_setup.dll -> [2009/07/17 17:15:58 | 00,373,680 | ---- | M] (Macrovision Corporation) _Setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{9DEB3B04-452C-46E8-AAFF-81EB1693DE49}\_Setup.dll -> [2009/07/17 17:15:58 | 00,373,680 | ---- | M] (Macrovision Corporation) _setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{7EA0BBB7-555A-4677-B6E5-38BBEB414371}\Disk1\_setup.dll -> [2009/07/17 17:15:58 | 00,373,680 | ---- | M] (Macrovision Corporation) _Setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{7EA0BBB7-555A-4677-B6E5-38BBEB414371}\_Setup.dll -> [2009/07/17 17:15:58 | 00,373,680 | ---- | M] (Macrovision Corporation) _setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{362311E5-329B-4B4B-8918-805BCA4BBE35}\Disk1\_setup.dll -> [2009/07/17 17:15:58 | 00,373,680 | ---- | M] (Macrovision Corporation) _Setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{362311E5-329B-4B4B-8918-805BCA4BBE35}\_Setup.dll -> [2009/07/17 17:15:58 | 00,373,680 | ---- | M] (Macrovision Corporation) _setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{2349EE3F-D9D0-476F-8C27-113A90FC00C2}\Disk1\_setup.dll -> [2009/07/17 17:15:58 | 00,373,680 | ---- | M] (Macrovision Corporation) _Setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{2349EE3F-D9D0-476F-8C27-113A90FC00C2}\_Setup.dll -> [2009/07/17 17:15:58 | 00,373,680 | ---- | M] (Macrovision Corporation) _setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{19A6E925-E470-4229-91CD-B4E67EE912B9}\Disk1\_setup.dll -> [2009/07/17 17:15:58 | 00,373,680 | ---- | M] (Macrovision Corporation) _Setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{19A6E925-E470-4229-91CD-B4E67EE912B9}\_Setup.dll -> [2009/07/17 17:15:58 | 00,373,680 | ---- | M] (Macrovision Corporation) _setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{0078E01D-277F-4533-BE11-B2CC8C41B16D}\Disk1\_setup.dll -> [2009/07/17 17:15:58 | 00,373,680 | ---- | M] (Macrovision Corporation) _Setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{0078E01D-277F-4533-BE11-B2CC8C41B16D}\_Setup.dll -> [2009/07/17 17:15:58 | 00,373,680 | ---- | M] (Macrovision Corporation) ISSetup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{5B04795D-A8A6-4773-A58A-1B07EC01C50E}\Disk1\ISSetup.dll -> [2009/07/17 17:15:57 | 00,492,032 | ---- | M] (Macrovision Corporation) setup.exe -> C:\Documents and Settings\ding\Local Settings\Temp\{5B04795D-A8A6-4773-A58A-1B07EC01C50E}\Disk1\setup.exe -> [2009/07/17 17:15:57 | 00,455,600 | ---- | M] (Macrovision Corporation) _setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{87162F72-6E29-49F7-81F2-3F604B1F4FDE}\Disk1\_setup.dll -> [2009/07/17 17:15:57 | 00,373,680 | ---- | M] (Macrovision Corporation) _Setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{87162F72-6E29-49F7-81F2-3F604B1F4FDE}\_Setup.dll -> [2009/07/17 17:15:57 | 00,373,680 | ---- | M] (Macrovision Corporation) _setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{5B04795D-A8A6-4773-A58A-1B07EC01C50E}\Disk1\_setup.dll -> [2009/07/17 17:15:57 | 00,373,680 | ---- | M] (Macrovision Corporation) _Setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{5B04795D-A8A6-4773-A58A-1B07EC01C50E}\_Setup.dll -> [2009/07/17 17:15:57 | 00,373,680 | ---- | M] (Macrovision Corporation) _setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{21D53CD4-43C6-45FB-B188-FBE795D5C8C9}\Disk1\_setup.dll -> [2009/07/17 17:15:57 | 00,373,680 | ---- | M] (Macrovision Corporation) _Setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{21D53CD4-43C6-45FB-B188-FBE795D5C8C9}\_Setup.dll -> [2009/07/17 17:15:57 | 00,373,680 | ---- | M] (Macrovision Corporation) ISSetup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{E2C98D6B-88B7-4A70-B0E6-1194F052B7A9}\Disk1\ISSetup.dll -> [2009/07/17 17:15:56 | 00,492,032 | ---- | M] (Macrovision Corporation) ISSetup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{D80822EB-2E6B-4FBB-B6B5-1931C7501FBD}\Disk1\ISSetup.dll -> [2009/07/17 17:15:56 | 00,492,032 | ---- | M] (Macrovision Corporation) ISSetup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{87162F72-6E29-49F7-81F2-3F604B1F4FDE}\Disk1\ISSetup.dll -> [2009/07/17 17:15:56 | 00,492,032 | ---- | M] (Macrovision Corporation) ISSetup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{34169442-0D90-4A60-B106-D2D1B91ADA77}\Disk1\ISSetup.dll -> [2009/07/17 17:15:56 | 00,492,032 | ---- | M] (Macrovision Corporation) ISSetup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{21D53CD4-43C6-45FB-B188-FBE795D5C8C9}\Disk1\ISSetup.dll -> [2009/07/17 17:15:56 | 00,492,032 | ---- | M] (Macrovision Corporation) ISSetup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{18B14591-4128-4536-AEE9-514304AF6EF4}\Disk1\ISSetup.dll -> [2009/07/17 17:15:56 | 00,492,032 | ---- | M] (Macrovision Corporation) setup.exe -> C:\Documents and Settings\ding\Local Settings\Temp\{E2C98D6B-88B7-4A70-B0E6-1194F052B7A9}\Disk1\setup.exe -> [2009/07/17 17:15:56 | 00,455,600 | ---- | M] (Macrovision Corporation) setup.exe -> C:\Documents and Settings\ding\Local Settings\Temp\{D80822EB-2E6B-4FBB-B6B5-1931C7501FBD}\Disk1\setup.exe -> [2009/07/17 17:15:56 | 00,455,600 | ---- | M] (Macrovision Corporation) setup.exe -> C:\Documents and Settings\ding\Local Settings\Temp\{87162F72-6E29-49F7-81F2-3F604B1F4FDE}\Disk1\setup.exe -> [2009/07/17 17:15:56 | 00,455,600 | ---- | M] (Macrovision Corporation) setup.exe -> C:\Documents and Settings\ding\Local Settings\Temp\{34169442-0D90-4A60-B106-D2D1B91ADA77}\Disk1\setup.exe -> [2009/07/17 17:15:56 | 00,455,600 | ---- | M] (Macrovision Corporation) setup.exe -> C:\Documents and Settings\ding\Local Settings\Temp\{21D53CD4-43C6-45FB-B188-FBE795D5C8C9}\Disk1\setup.exe -> [2009/07/17 17:15:56 | 00,455,600 | ---- | M] (Macrovision Corporation) setup.exe -> C:\Documents and Settings\ding\Local Settings\Temp\{18B14591-4128-4536-AEE9-514304AF6EF4}\Disk1\setup.exe -> [2009/07/17 17:15:56 | 00,455,600 | ---- | M] (Macrovision Corporation) _setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{E2C98D6B-88B7-4A70-B0E6-1194F052B7A9}\Disk1\_setup.dll -> [2009/07/17 17:15:56 | 00,373,680 | ---- | M] (Macrovision Corporation) _Setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{E2C98D6B-88B7-4A70-B0E6-1194F052B7A9}\_Setup.dll -> [2009/07/17 17:15:56 | 00,373,680 | ---- | M] (Macrovision Corporation) _setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{D80822EB-2E6B-4FBB-B6B5-1931C7501FBD}\Disk1\_setup.dll -> [2009/07/17 17:15:56 | 00,373,680 | ---- | M] (Macrovision Corporation) _Setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{D80822EB-2E6B-4FBB-B6B5-1931C7501FBD}\_Setup.dll -> [2009/07/17 17:15:56 | 00,373,680 | ---- | M] (Macrovision Corporation) _setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{A5494F3E-A365-43A5-A476-EF962F400CC7}\Disk1\_setup.dll -> [2009/07/17 17:15:56 | 00,373,680 | ---- | M] (Macrovision Corporation) _Setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{A5494F3E-A365-43A5-A476-EF962F400CC7}\_Setup.dll -> [2009/07/17 17:15:56 | 00,373,680 | ---- | M] (Macrovision Corporation) _setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{34169442-0D90-4A60-B106-D2D1B91ADA77}\Disk1\_setup.dll -> [2009/07/17 17:15:56 | 00,373,680 | ---- | M] (Macrovision Corporation) _Setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{34169442-0D90-4A60-B106-D2D1B91ADA77}\_Setup.dll -> [2009/07/17 17:15:56 | 00,373,680 | ---- | M] (Macrovision Corporation) _setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{18B14591-4128-4536-AEE9-514304AF6EF4}\Disk1\_setup.dll -> [2009/07/17 17:15:56 | 00,373,680 | ---- | M] (Macrovision Corporation) _Setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{18B14591-4128-4536-AEE9-514304AF6EF4}\_Setup.dll -> [2009/07/17 17:15:56 | 00,373,680 | ---- | M] (Macrovision Corporation) ISSetup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{A5494F3E-A365-43A5-A476-EF962F400CC7}\Disk1\ISSetup.dll -> [2009/07/17 17:15:55 | 00,492,032 | ---- | M] (Macrovision Corporation) ISSetup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{390A409C-49AD-40A9-AD31-60507C373796}\Disk1\ISSetup.dll -> [2009/07/17 17:15:55 | 00,492,032 | ---- | M] (Macrovision Corporation) setup.exe -> C:\Documents and Settings\ding\Local Settings\Temp\{A5494F3E-A365-43A5-A476-EF962F400CC7}\Disk1\setup.exe -> [2009/07/17 17:15:55 | 00,455,600 | ---- | M] (Macrovision Corporation) setup.exe -> C:\Documents and Settings\ding\Local Settings\Temp\{390A409C-49AD-40A9-AD31-60507C373796}\Disk1\setup.exe -> [2009/07/17 17:15:55 | 00,455,600 | ---- | M] (Macrovision Corporation) _setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{390A409C-49AD-40A9-AD31-60507C373796}\Disk1\_setup.dll -> [2009/07/17 17:15:55 | 00,373,680 | ---- | M] (Macrovision Corporation) _Setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{390A409C-49AD-40A9-AD31-60507C373796}\_Setup.dll -> [2009/07/17 17:15:55 | 00,373,680 | ---- | M] (Macrovision Corporation) _Setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{A8A25AFA-F27A-4C52-8A86-2545356CC460}\_Setup.dll -> [2009/07/17 17:15:50 | 00,373,680 | ---- | M] (Macrovision Corporation) _Setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{76CD6DB0-D53C-4F40-82B5-50EFCF9B17F0}\_Setup.dll -> [2009/07/17 17:15:50 | 00,373,680 | ---- | M] (Macrovision Corporation) _Setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{4793421B-D032-47FC-962D-DB62F7DEB33D}\_Setup.dll -> [2009/07/17 17:15:50 | 00,373,680 | ---- | M] (Macrovision Corporation) _setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{D48B0C93-704F-40FD-8179-A5E098FF8550}\Disk1\_setup.dll -> [2009/07/17 17:15:49 | 00,373,680 | ---- | M] (Macrovision Corporation) _Setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{D48B0C93-704F-40FD-8179-A5E098FF8550}\_Setup.dll -> [2009/07/17 17:15:49 | 00,373,680 | ---- | M] (Macrovision Corporation) _setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{C3DF2728-C0B4-45B1-BE35-E7C6C0379AF5}\Disk1\_setup.dll -> [2009/07/17 17:15:49 | 00,373,680 | ---- | M] (Macrovision Corporation) _Setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{C3DF2728-C0B4-45B1-BE35-E7C6C0379AF5}\_Setup.dll -> [2009/07/17 17:15:49 | 00,373,680 | ---- | M] (Macrovision Corporation) _Setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{AA7DD217-EBEC-4CA2-8945-12A535ACAA58}\_Setup.dll -> [2009/07/17 17:15:49 | 00,373,680 | ---- | M] (Macrovision Corporation) _setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{A117CBC3-C12C-45C9-9503-DEFB9FC036CA}\Disk1\_setup.dll -> [2009/07/17 17:15:49 | 00,373,680 | ---- | M] (Macrovision Corporation) _Setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{A117CBC3-C12C-45C9-9503-DEFB9FC036CA}\_Setup.dll -> [2009/07/17 17:15:49 | 00,373,680 | ---- | M] (Macrovision Corporation) _setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{552097BC-CC4B-4F47-91A5-42C349CE8D86}\Disk1\_setup.dll -> [2009/07/17 17:15:49 | 00,373,680 | ---- | M] (Macrovision Corporation) _Setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{552097BC-CC4B-4F47-91A5-42C349CE8D86}\_Setup.dll -> [2009/07/17 17:15:49 | 00,373,680 | ---- | M] (Macrovision Corporation) _setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{40CD9D63-B2CC-4C7E-86E2-37926E3282C2}\Disk1\_setup.dll -> [2009/07/17 17:15:49 | 00,373,680 | ---- | M] (Macrovision Corporation) _Setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{40CD9D63-B2CC-4C7E-86E2-37926E3282C2}\_Setup.dll -> [2009/07/17 17:15:49 | 00,373,680 | ---- | M] (Macrovision Corporation) ISSetup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{C3DF2728-C0B4-45B1-BE35-E7C6C0379AF5}\Disk1\ISSetup.dll -> [2009/07/17 17:15:48 | 00,492,032 | ---- | M] (Macrovision Corporation) ISSetup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{40CD9D63-B2CC-4C7E-86E2-37926E3282C2}\Disk1\ISSetup.dll -> [2009/07/17 17:15:48 | 00,492,032 | ---- | M] (Macrovision Corporation) setup.exe -> C:\Documents and Settings\ding\Local Settings\Temp\{EDAEB28A-6919-4722-94E7-789E7C369935}\Disk1\setup.exe -> [2009/07/17 17:15:48 | 00,455,600 | ---- | M] (Macrovision Corporation) setup.exe -> C:\Documents and Settings\ding\Local Settings\Temp\{D48B0C93-704F-40FD-8179-A5E098FF8550}\Disk1\setup.exe -> [2009/07/17 17:15:48 | 00,455,600 | ---- | M] (Macrovision Corporation) setup.exe -> C:\Documents and Settings\ding\Local Settings\Temp\{C3DF2728-C0B4-45B1-BE35-E7C6C0379AF5}\Disk1\setup.exe -> [2009/07/17 17:15:48 | 00,455,600 | ---- | M] (Macrovision Corporation) setup.exe -> C:\Documents and Settings\ding\Local Settings\Temp\{A117CBC3-C12C-45C9-9503-DEFB9FC036CA}\Disk1\setup.exe -> [2009/07/17 17:15:48 | 00,455,600 | ---- | M] (Macrovision Corporation) setup.exe -> C:\Documents and Settings\ding\Local Settings\Temp\{552097BC-CC4B-4F47-91A5-42C349CE8D86}\Disk1\setup.exe -> [2009/07/17 17:15:48 | 00,455,600 | ---- | M] (Macrovision Corporation) setup.exe -> C:\Documents and Settings\ding\Local Settings\Temp\{40CD9D63-B2CC-4C7E-86E2-37926E3282C2}\Disk1\setup.exe -> [2009/07/17 17:15:48 | 00,455,600 | ---- | M] (Macrovision Corporation) _setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{EDAEB28A-6919-4722-94E7-789E7C369935}\Disk1\_setup.dll -> [2009/07/17 17:15:48 | 00,373,680 | ---- | M] (Macrovision Corporation) _Setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{EDAEB28A-6919-4722-94E7-789E7C369935}\_Setup.dll -> [2009/07/17 17:15:48 | 00,373,680 | ---- | M] (Macrovision Corporation) _setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{7CCDC658-A8D0-4E7D-B25D-D49C3171C258}\Disk1\_setup.dll -> [2009/07/17 17:15:48 | 00,373,680 | ---- | M] (Macrovision Corporation) _Setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{7CCDC658-A8D0-4E7D-B25D-D49C3171C258}\_Setup.dll -> [2009/07/17 17:15:48 | 00,373,680 | ---- | M] (Macrovision Corporation) _setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{5C088FF2-F99C-4299-B310-5D09B66F1A37}\Disk1\_setup.dll -> [2009/07/17 17:15:48 | 00,373,680 | ---- | M] (Macrovision Corporation) _Setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{5C088FF2-F99C-4299-B310-5D09B66F1A37}\_Setup.dll -> [2009/07/17 17:15:48 | 00,373,680 | ---- | M] (Macrovision Corporation) _setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{59EC1A67-0788-4102-B4E0-9BC4418A6D22}\Disk1\_setup.dll -> [2009/07/17 17:15:48 | 00,373,680 | ---- | M] (Macrovision Corporation) _Setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{59EC1A67-0788-4102-B4E0-9BC4418A6D22}\_Setup.dll -> [2009/07/17 17:15:48 | 00,373,680 | ---- | M] (Macrovision Corporation) ISSetup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{EDAEB28A-6919-4722-94E7-789E7C369935}\Disk1\ISSetup.dll -> [2009/07/17 17:15:47 | 00,492,032 | ---- | M] (Macrovision Corporation) ISSetup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{D48B0C93-704F-40FD-8179-A5E098FF8550}\Disk1\ISSetup.dll -> [2009/07/17 17:15:47 | 00,492,032 | ---- | M] (Macrovision Corporation) ISSetup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{A117CBC3-C12C-45C9-9503-DEFB9FC036CA}\Disk1\ISSetup.dll -> [2009/07/17 17:15:47 | 00,492,032 | ---- | M] (Macrovision Corporation) ISSetup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{5C088FF2-F99C-4299-B310-5D09B66F1A37}\Disk1\ISSetup.dll -> [2009/07/17 17:15:47 | 00,492,032 | ---- | M] (Macrovision Corporation) ISSetup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{59EC1A67-0788-4102-B4E0-9BC4418A6D22}\Disk1\ISSetup.dll -> [2009/07/17 17:15:47 | 00,492,032 | ---- | M] (Macrovision Corporation) ISSetup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{552097BC-CC4B-4F47-91A5-42C349CE8D86}\Disk1\ISSetup.dll -> [2009/07/17 17:15:47 | 00,492,032 | ---- | M] (Macrovision Corporation) setup.exe -> C:\Documents and Settings\ding\Local Settings\Temp\{9F508E61-F692-4C75-BB67-5EA2115659A8}\Disk1\setup.exe -> [2009/07/17 17:15:47 | 00,455,600 | ---- | M] (Macrovision Corporation) setup.exe -> C:\Documents and Settings\ding\Local Settings\Temp\{7CCDC658-A8D0-4E7D-B25D-D49C3171C258}\Disk1\setup.exe -> [2009/07/17 17:15:47 | 00,455,600 | ---- | M] (Macrovision Corporation) setup.exe -> C:\Documents and Settings\ding\Local Settings\Temp\{5C088FF2-F99C-4299-B310-5D09B66F1A37}\Disk1\setup.exe -> [2009/07/17 17:15:47 | 00,455,600 | ---- | M] (Macrovision Corporation) setup.exe -> C:\Documents and Settings\ding\Local Settings\Temp\{59EC1A67-0788-4102-B4E0-9BC4418A6D22}\Disk1\setup.exe -> [2009/07/17 17:15:47 | 00,455,600 | ---- | M] (Macrovision Corporation) _setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{9F508E61-F692-4C75-BB67-5EA2115659A8}\Disk1\_setup.dll -> [2009/07/17 17:15:47 | 00,373,680 | ---- | M] (Macrovision Corporation) _Setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{9F508E61-F692-4C75-BB67-5EA2115659A8}\_Setup.dll -> [2009/07/17 17:15:47 | 00,373,680 | ---- | M] (Macrovision Corporation) _setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{6458AC52-EB31-489D-B12E-8C672418412A}\Disk1\_setup.dll -> [2009/07/17 17:15:47 | 00,373,680 | ---- | M] (Macrovision Corporation) _Setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{6458AC52-EB31-489D-B12E-8C672418412A}\_Setup.dll -> [2009/07/17 17:15:47 | 00,373,680 | ---- | M] (Macrovision Corporation) _setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{2C7B8C82-3D9E-4E54-B066-D1FD0A4094C9}\Disk1\_setup.dll -> [2009/07/17 17:15:47 | 00,373,680 | ---- | M] (Macrovision Corporation) _Setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{2C7B8C82-3D9E-4E54-B066-D1FD0A4094C9}\_Setup.dll -> [2009/07/17 17:15:47 | 00,373,680 | ---- | M] (Macrovision Corporation) _setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{10F399B3-18A2-4DB2-8CB1-E57C4D2E4951}\Disk1\_setup.dll -> [2009/07/17 17:15:47 | 00,373,680 | ---- | M] (Macrovision Corporation) _Setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{10F399B3-18A2-4DB2-8CB1-E57C4D2E4951}\_Setup.dll -> [2009/07/17 17:15:47 | 00,373,680 | ---- | M] (Macrovision Corporation) ISSetup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{9F508E61-F692-4C75-BB67-5EA2115659A8}\Disk1\ISSetup.dll -> [2009/07/17 17:15:46 | 00,492,032 | ---- | M] (Macrovision Corporation) ISSetup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{7CCDC658-A8D0-4E7D-B25D-D49C3171C258}\Disk1\ISSetup.dll -> [2009/07/17 17:15:46 | 00,492,032 | ---- | M] (Macrovision Corporation) ISSetup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{6458AC52-EB31-489D-B12E-8C672418412A}\Disk1\ISSetup.dll -> [2009/07/17 17:15:46 | 00,492,032 | ---- | M] (Macrovision Corporation) setup.exe -> C:\Documents and Settings\ding\Local Settings\Temp\{6458AC52-EB31-489D-B12E-8C672418412A}\Disk1\setup.exe -> [2009/07/17 17:15:46 | 00,455,600 | ---- | M] (Macrovision Corporation) setup.exe -> C:\Documents and Settings\ding\Local Settings\Temp\{2C7B8C82-3D9E-4E54-B066-D1FD0A4094C9}\Disk1\setup.exe -> [2009/07/17 17:15:46 | 00,455,600 | ---- | M] (Macrovision Corporation) _setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{5D47E2C2-FCB8-49EF-9FCE-6208EE3A0A1A}\Disk1\_setup.dll -> [2009/07/17 17:15:46 | 00,373,680 | ---- | M] (Macrovision Corporation) _Setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{5D47E2C2-FCB8-49EF-9FCE-6208EE3A0A1A}\_Setup.dll -> [2009/07/17 17:15:46 | 00,373,680 | ---- | M] (Macrovision Corporation) ISSetup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{2C7B8C82-3D9E-4E54-B066-D1FD0A4094C9}\Disk1\ISSetup.dll -> [2009/07/17 17:15:45 | 00,492,032 | ---- | M] (Macrovision Corporation) ISSetup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{10F399B3-18A2-4DB2-8CB1-E57C4D2E4951}\Disk1\ISSetup.dll -> [2009/07/17 17:15:45 | 00,492,032 | ---- | M] (Macrovision Corporation) setup.exe -> C:\Documents and Settings\ding\Local Settings\Temp\{5D47E2C2-FCB8-49EF-9FCE-6208EE3A0A1A}\Disk1\setup.exe -> [2009/07/17 17:15:45 | 00,455,600 | ---- | M] (Macrovision Corporation) setup.exe -> C:\Documents and Settings\ding\Local Settings\Temp\{10F399B3-18A2-4DB2-8CB1-E57C4D2E4951}\Disk1\setup.exe -> [2009/07/17 17:15:45 | 00,455,600 | ---- | M] (Macrovision Corporation) ISSetup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{E558DE6C-D50A-4D7C-B608-A4E62B88C079}\Disk1\ISSetup.dll -> [2009/07/17 17:15:44 | 00,492,032 | ---- | M] (Macrovision Corporation) ISSetup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{5D47E2C2-FCB8-49EF-9FCE-6208EE3A0A1A}\Disk1\ISSetup.dll -> [2009/07/17 17:15:44 | 00,492,032 | ---- | M] (Macrovision Corporation) ISSetup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{037EAE57-0E6B-4B1A-8E51-2CDEDC2F7D1F}\Disk1\ISSetup.dll -> [2009/07/17 17:15:44 | 00,492,032 | ---- | M] (Macrovision Corporation) setup.exe -> C:\Documents and Settings\ding\Local Settings\Temp\{E558DE6C-D50A-4D7C-B608-A4E62B88C079}\Disk1\setup.exe -> [2009/07/17 17:15:44 | 00,455,600 | ---- | M] (Macrovision Corporation) setup.exe -> C:\Documents and Settings\ding\Local Settings\Temp\{037EAE57-0E6B-4B1A-8E51-2CDEDC2F7D1F}\Disk1\setup.exe -> [2009/07/17 17:15:44 | 00,455,600 | ---- | M] (Macrovision Corporation) _setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{E558DE6C-D50A-4D7C-B608-A4E62B88C079}\Disk1\_setup.dll -> [2009/07/17 17:15:44 | 00,373,680 | ---- | M] (Macrovision Corporation) _Setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{E558DE6C-D50A-4D7C-B608-A4E62B88C079}\_Setup.dll -> [2009/07/17 17:15:44 | 00,373,680 | ---- | M] (Macrovision Corporation) _setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{037EAE57-0E6B-4B1A-8E51-2CDEDC2F7D1F}\Disk1\_setup.dll -> [2009/07/17 17:15:44 | 00,373,680 | ---- | M] (Macrovision Corporation) _Setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{037EAE57-0E6B-4B1A-8E51-2CDEDC2F7D1F}\_Setup.dll -> [2009/07/17 17:15:44 | 00,373,680 | ---- | M] (Macrovision Corporation) ISSetup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{C372889F-AE15-4DE4-A1A7-72271295B1F6}\Disk1\ISSetup.dll -> [2009/07/17 17:15:43 | 00,492,032 | ---- | M] (Macrovision Corporation) ISSetup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{BBFE8CA4-196E-479C-8362-1404271214B7}\Disk1\ISSetup.dll -> [2009/07/17 17:15:43 | 00,492,032 | ---- | M] (Macrovision Corporation) ISSetup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{AF26F8E7-B6BF-4C0C-ACAB-005327B7A48F}\Disk1\ISSetup.dll -> [2009/07/17 17:15:43 | 00,492,032 | ---- | M] (Macrovision Corporation) ISSetup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{770EF67F-2394-4496-B7AC-77DB7944FC3E}\Disk1\ISSetup.dll -> [2009/07/17 17:15:43 | 00,492,032 | ---- | M] (Macrovision Corporation) ISSetup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{6AC9984A-8932-4660-A0D2-2EDE05D4FD83}\Disk1\ISSetup.dll -> [2009/07/17 17:15:43 | 00,492,032 | ---- | M] (Macrovision Corporation) ISSetup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{4EE05D48-D71A-4B12-9636-9B7B0EE10EA2}\Disk1\ISSetup.dll -> [2009/07/17 17:15:43 | 00,492,032 | ---- | M] (Macrovision Corporation) ISSetup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{39FF75BD-F13B-4F8E-8B90-C2D29B31B9DC}\Disk1\ISSetup.dll -> [2009/07/17 17:15:43 | 00,492,032 | ---- | M] (Macrovision Corporation) ISSetup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{3751AF65-3156-498A-89CC-F2028A4F6017}\Disk1\ISSetup.dll -> [2009/07/17 17:15:43 | 00,492,032 | ---- | M] (Macrovision Corporation) ISSetup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{0DF480E1-680E-496E-9051-B7DBE6EE99DD}\Disk1\ISSetup.dll -> [2009/07/17 17:15:43 | 00,492,032 | ---- | M] (Macrovision Corporation) setup.exe -> C:\Documents and Settings\ding\Local Settings\Temp\{C372889F-AE15-4DE4-A1A7-72271295B1F6}\Disk1\setup.exe -> [2009/07/17 17:15:43 | 00,455,600 | ---- | M] (Macrovision Corporation) setup.exe -> C:\Documents and Settings\ding\Local Settings\Temp\{BBFE8CA4-196E-479C-8362-1404271214B7}\Disk1\setup.exe -> [2009/07/17 17:15:43 | 00,455,600 | ---- | M] (Macrovision Corporation) setup.exe -> C:\Documents and Settings\ding\Local Settings\Temp\{AF26F8E7-B6BF-4C0C-ACAB-005327B7A48F}\Disk1\setup.exe -> [2009/07/17 17:15:43 | 00,455,600 | ---- | M] (Macrovision Corporation) setup.exe -> C:\Documents and Settings\ding\Local Settings\Temp\{770EF67F-2394-4496-B7AC-77DB7944FC3E}\Disk1\setup.exe -> [2009/07/17 17:15:43 | 00,455,600 | ---- | M] (Macrovision Corporation) setup.exe -> C:\Documents and Settings\ding\Local Settings\Temp\{6AC9984A-8932-4660-A0D2-2EDE05D4FD83}\Disk1\setup.exe -> [2009/07/17 17:15:43 | 00,455,600 | ---- | M] (Macrovision Corporation) setup.exe -> C:\Documents and Settings\ding\Local Settings\Temp\{4EE05D48-D71A-4B12-9636-9B7B0EE10EA2}\Disk1\setup.exe -> [2009/07/17 17:15:43 | 00,455,600 | ---- | M] (Macrovision Corporation) setup.exe -> C:\Documents and Settings\ding\Local Settings\Temp\{39FF75BD-F13B-4F8E-8B90-C2D29B31B9DC}\Disk1\setup.exe -> [2009/07/17 17:15:43 | 00,455,600 | ---- | M] (Macrovision Corporation) setup.exe -> C:\Documents and Settings\ding\Local Settings\Temp\{3751AF65-3156-498A-89CC-F2028A4F6017}\Disk1\setup.exe -> [2009/07/17 17:15:43 | 00,455,600 | ---- | M] (Macrovision Corporation) setup.exe -> C:\Documents and Settings\ding\Local Settings\Temp\{0DF480E1-680E-496E-9051-B7DBE6EE99DD}\Disk1\setup.exe -> [2009/07/17 17:15:43 | 00,455,600 | ---- | M] (Macrovision Corporation) _setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{C372889F-AE15-4DE4-A1A7-72271295B1F6}\Disk1\_setup.dll -> [2009/07/17 17:15:43 | 00,373,680 | ---- | M] (Macrovision Corporation) _Setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{C372889F-AE15-4DE4-A1A7-72271295B1F6}\_Setup.dll -> [2009/07/17 17:15:43 | 00,373,680 | ---- | M] (Macrovision Corporation) _setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{BBFE8CA4-196E-479C-8362-1404271214B7}\Disk1\_setup.dll -> [2009/07/17 17:15:43 | 00,373,680 | ---- | M] (Macrovision Corporation) _Setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{BBFE8CA4-196E-479C-8362-1404271214B7}\_Setup.dll -> [2009/07/17 17:15:43 | 00,373,680 | ---- | M] (Macrovision Corporation) _setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{AF26F8E7-B6BF-4C0C-ACAB-005327B7A48F}\Disk1\_setup.dll -> [2009/07/17 17:15:43 | 00,373,680 | ---- | M] (Macrovision Corporation) _Setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{AF26F8E7-B6BF-4C0C-ACAB-005327B7A48F}\_Setup.dll -> [2009/07/17 17:15:43 | 00,373,680 | ---- | M] (Macrovision Corporation) _setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{770EF67F-2394-4496-B7AC-77DB7944FC3E}\Disk1\_setup.dll -> [2009/07/17 17:15:43 | 00,373,680 | ---- | M] (Macrovision Corporation) _Setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{770EF67F-2394-4496-B7AC-77DB7944FC3E}\_Setup.dll -> [2009/07/17 17:15:43 | 00,373,680 | ---- | M] (Macrovision Corporation) _setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{6AC9984A-8932-4660-A0D2-2EDE05D4FD83}\Disk1\_setup.dll -> [2009/07/17 17:15:43 | 00,373,680 | ---- | M] (Macrovision Corporation) _Setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{6AC9984A-8932-4660-A0D2-2EDE05D4FD83}\_Setup.dll -> [2009/07/17 17:15:43 | 00,373,680 | ---- | M] (Macrovision Corporation) _setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{4EE05D48-D71A-4B12-9636-9B7B0EE10EA2}\Disk1\_setup.dll -> [2009/07/17 17:15:43 | 00,373,680 | ---- | M] (Macrovision Corporation) _Setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{4EE05D48-D71A-4B12-9636-9B7B0EE10EA2}\_Setup.dll -> [2009/07/17 17:15:43 | 00,373,680 | ---- | M] (Macrovision Corporation) _setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{39FF75BD-F13B-4F8E-8B90-C2D29B31B9DC}\Disk1\_setup.dll -> [2009/07/17 17:15:43 | 00,373,680 | ---- | M] (Macrovision Corporation) _Setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{39FF75BD-F13B-4F8E-8B90-C2D29B31B9DC}\_Setup.dll -> [2009/07/17 17:15:43 | 00,373,680 | ---- | M] (Macrovision Corporation) _setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{3751AF65-3156-498A-89CC-F2028A4F6017}\Disk1\_setup.dll -> [2009/07/17 17:15:43 | 00,373,680 | ---- | M] (Macrovision Corporation) _Setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{3751AF65-3156-498A-89CC-F2028A4F6017}\_Setup.dll -> [2009/07/17 17:15:43 | 00,373,680 | ---- | M] (Macrovision Corporation) _setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{0DF480E1-680E-496E-9051-B7DBE6EE99DD}\Disk1\_setup.dll -> [2009/07/17 17:15:43 | 00,373,680 | ---- | M] (Macrovision Corporation) _Setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{0DF480E1-680E-496E-9051-B7DBE6EE99DD}\_Setup.dll -> [2009/07/17 17:15:43 | 00,373,680 | ---- | M] (Macrovision Corporation) Perflib_Perfdata_fec.dat -> C:\WINDOWS\Temp\Perflib_Perfdata_fec.dat -> [2009/07/17 15:08:56 | 00,016,384 | ---- | M] () Perflib_Perfdata_f78.dat -> C:\Documents and Settings\ding\Local Settings\Temp\Perflib_Perfdata_f78.dat -> [2009/07/17 15:08:56 | 00,016,384 | ---- | M] () eg0bus.exe -> C:\WINDOWS\eg0bus.exe -> [2009/07/17 14:54:35 | 00,024,576 | ---- | M] (VsH-GsM.com) Perflib_Perfdata_bc.dat -> C:\WINDOWS\Temp\Perflib_Perfdata_bc.dat -> [2009/07/17 12:20:44 | 00,016,384 | ---- | M] () NeroDigital.ini -> C:\WINDOWS\NeroDigital.ini -> [2009/07/17 11:40:01 | 00,000,069 | ---- | M] () DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini -> C:\Documents and Settings\ding\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini -> [2009/07/17 11:40:00 | 00,020,992 | ---- | M] () Perflib_Perfdata_714.dat -> C:\WINDOWS\Temp\Perflib_Perfdata_714.dat -> [2009/07/16 14:49:14 | 00,016,384 | ---- | M] () imsins.BAK -> C:\WINDOWS\imsins.BAK -> [2009/07/15 19:58:53 | 00,001,374 | ---- | M] () qmgr1.dat -> C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat -> [2009/07/15 18:08:54 | 00,004,617 | ---- | M] () qmgr0.dat -> C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat -> [2009/07/15 18:08:54 | 00,004,232 | ---- | M] () USB.Disk.Security.v5.1.0.15.rar -> C:\Documents and Settings\ding\My Documents\USB.Disk.Security.v5.1.0.15.rar -> [2009/07/15 01:18:39 | 00,996,763 | ---- | M] () ipndcbkkxe.exe -> C:\WINDOWS\Temp\ipndcbkkxe.exe -> [2009/07/14 21:11:40 | 00,000,529 | ---- | M] () Malwarebytes' Anti-Malware.lnk -> C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk -> [2009/07/14 21:09:23 | 00,000,696 | ---- | M] () install.exe -> C:\Documents and Settings\ding\My Documents\install.exe -> [2009/07/14 20:49:25 | 00,711,686 | ---- | M] () USB Disk Security.lnk -> C:\Documents and Settings\All Users\Desktop\USB Disk Security.lnk -> [2009/07/14 20:34:07 | 00,000,675 | ---- | M] () USB_Disk_Security.zip -> C:\Documents and Settings\ding\My Documents\USB_Disk_Security.zip -> [2009/07/14 20:26:40 | 01,041,214 | ---- | M] () Perflib_Perfdata_2cc.dat -> C:\WINDOWS\Temp\Perflib_Perfdata_2cc.dat -> [2009/07/14 20:09:46 | 00,016,384 | ---- | M] () Perflib_Perfdata_28c.dat -> C:\WINDOWS\Temp\Perflib_Perfdata_28c.dat -> [2009/07/14 07:29:39 | 00,016,384 | ---- | M] () Samsung_Cable_Selector_v1.2.part1.rar -> C:\Documents and Settings\ding\Desktop\Samsung_Cable_Selector_v1.2.part1.rar -> [2009/07/13 21:17:22 | 00,300,000 | ---- | M] () ustpro cable3.01.rar -> C:\Documents and Settings\ding\Desktop\ustpro cable3.01.rar -> [2009/07/13 21:10:10 | 00,013,803 | ---- | M] () Perflib_Perfdata_2a4.dat -> C:\WINDOWS\Temp\Perflib_Perfdata_2a4.dat -> [2009/07/13 13:48:02 | 00,016,384 | ---- | M] () mbamswissarmy.sys -> C:\WINDOWS\System32\drivers\mbamswissarmy.sys -> [2009/07/13 13:36:34 | 00,038,160 | ---- | M] (Malwarebytes Corporation) mbam.sys -> C:\WINDOWS\System32\drivers\mbam.sys -> [2009/07/13 13:36:12 | 00,019,096 | ---- | M] (Malwarebytes Corporation) Perflib_Perfdata_194.dat -> C:\WINDOWS\Temp\Perflib_Perfdata_194.dat -> [2009/07/13 08:00:00 | 00,016,384 | ---- | M] () lsd_rm-84_v5.0705.3.0.1.rar -> C:\Documents and Settings\ding\My Documents\lsd_rm-84_v5.0705.3.0.1.rar -> [2009/07/12 06:14:34 | 38,913,337 | ---- | M] () vbaddin.ini -> C:\WINDOWS\vbaddin.ini -> [2009/07/11 23:02:40 | 00,000,108 | ---- | M] () Perflib_Perfdata_218.dat -> C:\WINDOWS\Temp\Perflib_Perfdata_218.dat -> [2009/07/10 08:49:04 | 00,016,384 | ---- | M] () Picture Motion Browser Media Check Tool.lnk -> C:\Documents and Settings\ding\Start Menu\Programs\Startup\Picture Motion Browser Media Check Tool.lnk -> [2009/07/10 06:41:02 | 00,001,941 | ---- | M] () Handycam Utility.lnk -> C:\Documents and Settings\All Users\Desktop\Handycam Utility.lnk -> [2009/07/10 06:40:38 | 00,001,864 | ---- | M] () PMB - Picture Motion Browser.lnk -> C:\Documents and Settings\All Users\Desktop\PMB - Picture Motion Browser.lnk -> [2009/07/10 06:39:53 | 00,001,873 | ---- | M] () PMB Guide.lnk -> C:\Documents and Settings\All Users\Desktop\PMB Guide.lnk -> [2009/07/10 06:39:53 | 00,001,740 | ---- | M] () DCR-SR45 Handbook (PDF).lnk -> C:\Documents and Settings\All Users\Desktop\DCR-SR45 Handbook (PDF).lnk -> [2009/07/10 06:31:10 | 00,001,829 | ---- | M] () Perflib_Perfdata_110.dat -> C:\WINDOWS\Temp\Perflib_Perfdata_110.dat -> [2009/07/09 15:06:28 | 00,016,384 | ---- | M] () lsd_rh-122_v3.10.rar -> C:\Documents and Settings\ding\My Documents\lsd_rh-122_v3.10.rar -> [2009/07/07 21:57:37 | 05,565,407 | ---- | M] () lsd_rh-122_v3.70.rar -> C:\Documents and Settings\ding\My Documents\lsd_rh-122_v3.70.rar -> [2009/07/07 21:47:45 | 05,192,711 | ---- | M] () lsd_rm-243_v6.51.rar -> C:\Documents and Settings\ding\My Documents\lsd_rm-243_v6.51.rar -> [2009/07/07 20:23:33 | 51,432,841 | ---- | M] () UST_Errors.lnk -> C:\Documents and Settings\ding\Desktop\UST_Errors.lnk -> [2009/07/07 05:30:05 | 00,000,645 | ---- | M] () UST_Important.lnk -> C:\Documents and Settings\ding\Desktop\UST_Important.lnk -> [2009/07/07 05:30:05 | 00,000,640 | ---- | M] () USTPro2.lnk -> C:\Documents and Settings\ding\Desktop\USTPro2.lnk -> [2009/07/07 05:30:05 | 00,000,628 | ---- | M] () SN Reader.lnk -> C:\Documents and Settings\ding\Desktop\SN Reader.lnk -> [2009/07/07 05:30:05 | 00,000,628 | ---- | M] () FNTCACHE.DAT -> C:\WINDOWS\System32\FNTCACHE.DAT -> [2009/07/07 05:10:13 | 00,264,616 | ---- | M] () Irremote.ini -> C:\WINDOWS\Irremote.ini -> [2009/07/05 21:25:57 | 00,004,757 | ---- | M] () Nero StartSmart.lnk -> C:\Documents and Settings\All Users\Desktop\Nero StartSmart.lnk -> [2009/07/05 21:19:01 | 00,002,369 | ---- | M] () _shfoldr.dll -> C:\Documents and Settings\ding\Local Settings\Temp\is-9RFQ0.tmp\_isetup\_shfoldr.dll -> [2009/07/05 19:31:41 | 00,023,312 | ---- | M] (Microsoft Corporation) Perflib_Perfdata_7f8.dat -> C:\WINDOWS\Temp\Perflib_Perfdata_7f8.dat -> [2009/07/04 05:27:59 | 00,016,384 | ---- | M] () tantrascam.docx -> C:\Documents and Settings\ding\My Documents\tantrascam.docx -> [2009/07/03 11:08:35 | 02,928,312 | ---- | M] () DESERT SONG.pptx -> C:\Documents and Settings\ding\My Documents\DESERT SONG.pptx -> [2009/07/02 10:52:25 | 00,087,731 | ---- | M] () Desert Song.docx -> C:\Documents and Settings\ding\Desktop\Desert Song.docx -> [2009/07/01 20:03:30 | 00,220,084 | ---- | M] () Brwstr.part02.rar -> C:\Documents and Settings\ding\My Documents\Brwstr.part02.rar -> [2009/07/01 19:54:49 | 10,407,8000 | ---- | M] () TTOP.123.DotNXT.part1.rar -> C:\Documents and Settings\ding\My Documents\TTOP.123.DotNXT.part1.rar -> [2009/07/01 17:05:39 | 42,010,2144 | ---- | M] () Opera.lnk -> C:\Documents and Settings\All Users\Desktop\Opera.lnk -> [2009/07/01 14:45:24 | 00,000,592 | ---- | M] () Perflib_Perfdata_d88.dat -> C:\WINDOWS\Temp\Perflib_Perfdata_d88.dat -> [2009/07/01 07:08:55 | 00,016,384 | ---- | M] () Desert Song.docx -> C:\Documents and Settings\ding\My Documents\Desert Song.docx -> [2009/07/01 07:03:58 | 00,216,684 | ---- | M] () father.docx -> C:\Documents and Settings\ding\My Documents\father.docx -> [2009/06/28 08:13:57 | 00,010,674 | ---- | M] () dsetup32.dll -> C:\Documents and Settings\ding\Local Settings\Temp\NERO1004803\unit_tpi_directx-9c-redist-d3dx9-30\dsetup32.dll -> [2009/06/24 16:46:27 | 02,248,984 | ---- | M] (Microsoft Corporation) DXSETUP.exe -> C:\Documents and Settings\ding\Local Settings\Temp\NERO1004803\unit_tpi_directx-9c-redist-d3dx9-30\DXSETUP.exe -> [2009/06/24 16:46:27 | 00,484,632 | ---- | M] (Microsoft Corporation) DSETUP.dll -> C:\Documents and Settings\ding\Local Settings\Temp\NERO1004803\unit_tpi_directx-9c-redist-d3dx9-30\DSETUP.dll -> [2009/06/24 16:46:27 | 00,074,520 | ---- | M] (Microsoft Corporation) WindowsInstaller-KB893803-v2-x86.exe -> C:\Documents and Settings\ding\Local Settings\Temp\NERO1004803\unit_tpi_windows-installer-3.1\WindowsInstaller-KB893803-v2-x86.exe -> [2009/06/24 16:44:26 | 02,585,872 | ---- | M] (Microsoft Corporation) OEMINFO.INI -> C:\WINDOWS\System32\OEMINFO.INI -> [2009/06/23 22:33:40 | 00,000,226 | ---- | M] () Perflib_Perfdata_258.dat -> C:\WINDOWS\Temp\Perflib_Perfdata_258.dat -> [2009/06/23 20:24:47 | 00,016,384 | ---- | M] () Perflib_Perfdata_d9c.dat -> C:\WINDOWS\Temp\Perflib_Perfdata_d9c.dat -> [2009/06/23 10:28:07 | 00,016,384 | ---- | M] () Perflib_Perfdata_c0.dat -> C:\WINDOWS\Temp\Perflib_Perfdata_c0.dat -> [2009/06/23 06:45:04 | 00,016,384 | ---- | M] () IconCache.db -> C:\Documents and Settings\ding\Local Settings\Application Data\IconCache.db -> [2009/06/20 12:15:20 | 02,115,588 | -H-- | M] () Mozilla Firefox.lnk -> C:\Documents and Settings\All Users\Desktop\Mozilla Firefox.lnk -> [2009/06/19 19:56:32 | 00,001,602 | ---- | M] () Perflib_Perfdata_464.dat -> C:\WINDOWS\Temp\Perflib_Perfdata_464.dat -> [2009/06/17 17:20:52 | 00,016,384 | ---- | M] () Perflib_Perfdata_5fc.dat -> C:\WINDOWS\Temp\Perflib_Perfdata_5fc.dat -> [2009/06/15 13:15:38 | 00,016,384 | ---- | M] () Perflib_Perfdata_b78.dat -> C:\WINDOWS\Temp\Perflib_Perfdata_b78.dat -> [2009/06/12 18:02:00 | 00,016,384 | ---- | M] () Perflib_Perfdata_b00.dat -> C:\Documents and Settings\ding\Local Settings\Temp\Perflib_Perfdata_b00.dat -> [2009/06/12 18:01:59 | 00,016,384 | ---- | M] () Perflib_Perfdata_f8.dat -> C:\WINDOWS\Temp\Perflib_Perfdata_f8.dat -> [2009/06/11 21:16:23 | 00,016,384 | ---- | M] () Perflib_Perfdata_968.dat -> C:\WINDOWS\Temp\Perflib_Perfdata_968.dat -> [2009/06/08 22:57:04 | 00,016,384 | ---- | M] () setup.exe -> C:\Documents and Settings\ding\Local Settings\Temp\{B2212D77-7C0C-4025-A0C3-C830AEAC6414}\setup.exe -> [2009/06/07 16:21:31 | 00,393,216 | ---- | M] (Acresso Software Inc.) Perflib_Perfdata_618.dat -> C:\WINDOWS\Temp\Perflib_Perfdata_618.dat -> [2009/06/05 09:08:38 | 00,016,384 | ---- | M] () Perflib_Perfdata_508.dat -> C:\WINDOWS\Temp\Perflib_Perfdata_508.dat -> [2009/06/04 08:14:34 | 00,016,384 | ---- | M] () ipclog.exe -> C:\Documents and Settings\ding\Local Settings\Temp\NERO1004803\ipclog.exe -> [2009/05/25 17:59:05 | 00,124,200 | ---- | M] (Nero AG) setupx.exe -> C:\Documents and Settings\ding\Local Settings\Temp\NERO1004803\setupx.exe -> [2009/05/25 17:59:03 | 05,731,624 | ---- | M] (Nero AG) setup.exe -> C:\Documents and Settings\ding\Local Settings\Temp\bye198.tmp\Disk1\setup.exe -> [2009/05/23 08:20:29 | 00,109,800 | ---- | M] (InstallShield Software Corporation) _Setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\isp196.tmp\_Setup.dll -> [2009/05/23 08:19:58 | 00,155,648 | ---- | M] (InstallShield Software Corporation) setup.exe -> C:\Documents and Settings\ding\Local Settings\Temp\bye596.tmp\Disk1\setup.exe -> [2009/05/22 21:11:03 | 00,109,800 | ---- | M] (InstallShield Software Corporation) _Setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\isp594.tmp\_Setup.dll -> [2009/05/22 21:10:56 | 00,380,928 | ---- | M] (Macrovision Corporation) Perflib_Perfdata_9e8.dat -> C:\WINDOWS\Temp\Perflib_Perfdata_9e8.dat -> [2009/05/20 19:48:00 | 00,016,384 | ---- | M] () Perflib_Perfdata_7a8.dat -> C:\WINDOWS\Temp\Perflib_Perfdata_7a8.dat -> [2009/05/20 07:47:50 | 00,016,384 | ---- | M] () Perflib_Perfdata_63c.dat -> C:\WINDOWS\Temp\Perflib_Perfdata_63c.dat -> [2009/05/19 13:08:48 | 00,016,384 | ---- | M] () Perflib_Perfdata_650.dat -> C:\WINDOWS\Temp\Perflib_Perfdata_650.dat -> [2009/05/13 07:37:18 | 00,016,384 | ---- | M] () setup.exe -> C:\Documents and Settings\ding\Local Settings\Temp\bye518.tmp\Disk1\setup.exe -> [2009/05/09 06:51:38 | 00,109,800 | ---- | M] (InstallShield Software Corporation) _Setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\isp516.tmp\_Setup.dll -> [2009/05/09 06:51:24 | 00,155,648 | ---- | M] (InstallShield Software Corporation) setup.exe -> C:\Documents and Settings\ding\Local Settings\Temp\bye4EB.tmp\Disk1\setup.exe -> [2009/05/09 06:43:42 | 00,121,064 | ---- | M] (Macrovision Corporation) _Setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\isp4E0.tmp\_Setup.dll -> [2009/05/09 06:42:30 | 00,155,648 | ---- | M] (InstallShield Software Corporation) Perflib_Perfdata_f70.dat -> C:\WINDOWS\Temp\Perflib_Perfdata_f70.dat -> [2009/04/29 11:10:36 | 00,016,384 | ---- | M] () Perflib_Perfdata_e38.dat -> C:\WINDOWS\Temp\Perflib_Perfdata_e38.dat -> [2009/04/28 17:50:06 | 00,016,384 | ---- | M] () Perflib_Perfdata_428.dat -> C:\WINDOWS\Temp\Perflib_Perfdata_428.dat -> [2009/04/28 08:41:27 | 00,016,384 | ---- | M] () Perflib_Perfdata_f48.dat -> C:\WINDOWS\Temp\Perflib_Perfdata_f48.dat -> [2009/04/25 15:27:21 | 00,016,384 | ---- | M] () Perflib_Perfdata_ce8.dat -> C:\Documents and Settings\ding\Local Settings\Temp\Perflib_Perfdata_ce8.dat -> [2009/04/25 08:19:48 | 00,016,384 | ---- | M] () Perflib_Perfdata_ec8.dat -> C:\WINDOWS\Temp\Perflib_Perfdata_ec8.dat -> [2009/04/23 14:04:53 | 00,016,384 | ---- | M] () Perflib_Perfdata_ab8.dat -> C:\WINDOWS\Temp\Perflib_Perfdata_ab8.dat -> [2009/04/22 13:17:26 | 00,016,384 | ---- | M] () Perflib_Perfdata_b70.dat -> C:\WINDOWS\Temp\Perflib_Perfdata_b70.dat -> [2009/04/09 11:02:12 | 00,016,384 | ---- | M] () Perflib_Perfdata_b74.dat -> C:\WINDOWS\Temp\Perflib_Perfdata_b74.dat -> [2009/04/08 11:19:57 | 00,016,384 | ---- | M] () Perflib_Perfdata_96c.dat -> C:\WINDOWS\Temp\Perflib_Perfdata_96c.dat -> [2009/04/08 09:34:16 | 00,016,384 | ---- | M] () Eps_Reg.exe -> C:\Documents and Settings\ding\Local Settings\Temp\ft8.tm!\Eps_Reg.exe -> [2009/04/03 16:15:31 | 00,176,128 | ---- | M] (ft) R5CoInst.dll -> C:\Documents and Settings\ding\Local Settings\Temp\ft8.tm!\R5CoInst.dll -> [2009/04/03 16:15:31 | 00,004,608 | ---- | M] () Eps_Reg.exe -> C:\Documents and Settings\ding\Local Settings\Temp\ft2288.tm!\Eps_Reg.exe -> [2009/04/03 15:30:07 | 00,176,128 | ---- | M] (ft) R5CoInst.dll -> C:\Documents and Settings\ding\Local Settings\Temp\ft2288.tm!\R5CoInst.dll -> [2009/04/03 15:30:07 | 00,004,608 | ---- | M] () Perflib_Perfdata_988.dat -> C:\WINDOWS\Temp\Perflib_Perfdata_988.dat -> [2009/04/02 12:07:34 | 00,016,384 | ---- | M] () _Setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{0052B588-D1E8-4C25-9B94-498F90F67E25}\_Setup.dll -> [2009/04/02 08:45:53 | 00,373,680 | ---- | M] (Macrovision Corporation) Perflib_Perfdata_d94.dat -> C:\WINDOWS\Temp\Perflib_Perfdata_d94.dat -> [2009/03/29 06:38:02 | 00,016,384 | ---- | M] () jre-6u13-windows-i586-p-iftw.exe -> C:\Documents and Settings\ding\Local Settings\Temp\jre-6u13-windows-i586-p-iftw.exe -> [2009/03/25 15:02:45 | 00,607,640 | ---- | M] (Sun Microsystems, Inc.) Perflib_Perfdata_fa8.dat -> C:\WINDOWS\Temp\Perflib_Perfdata_fa8.dat -> [2009/03/24 20:39:08 | 00,016,384 | ---- | M] () hhcolreg.dat -> C:\Documents and Settings\All Users\Application Data\Microsoft\HTML Help\hhcolreg.dat -> [2009/03/21 15:45:26 | 00,001,306 | ---- | M] () bassmod.dll -> C:\Documents and Settings\ding\Local Settings\Temp\bassmod.dll -> [2009/03/20 09:09:36 | 00,034,308 | ---- | M] () Perflib_Perfdata_f00.dat -> C:\WINDOWS\Temp\Perflib_Perfdata_f00.dat -> [2009/03/16 06:31:04 | 00,016,384 | ---- | M] () Perflib_Perfdata_748.dat -> C:\Documents and Settings\ding\Local Settings\Temp\Perflib_Perfdata_748.dat -> [2009/03/14 13:23:31 | 00,016,384 | ---- | M] () Perflib_Perfdata_f04.dat -> C:\WINDOWS\Temp\Perflib_Perfdata_f04.dat -> [2009/02/27 23:07:17 | 00,016,384 | ---- | M] () Perflib_Perfdata_fc0.dat -> C:\WINDOWS\Temp\Perflib_Perfdata_fc0.dat -> [2009/02/24 07:13:18 | 00,016,384 | ---- | M] () Perflib_Perfdata_514.dat -> C:\WINDOWS\Temp\Perflib_Perfdata_514.dat -> [2009/02/23 08:33:23 | 00,016,384 | ---- | M] () Perflib_Perfdata_7d0.dat -> C:\WINDOWS\Temp\Perflib_Perfdata_7d0.dat -> [2009/02/21 05:51:35 | 00,016,384 | ---- | M] () opa12.dat -> C:\Documents and Settings\All Users\Application Data\Microsoft\OFFICE\DATA\opa12.dat -> [2009/02/20 18:49:05 | 00,008,206 | ---- | M] () Perflib_Perfdata_584.dat -> C:\WINDOWS\Temp\Perflib_Perfdata_584.dat -> [2009/02/20 18:33:29 | 00,016,384 | ---- | M] () Perflib_Perfdata_60c.dat -> C:\WINDOWS\Temp\Perflib_Perfdata_60c.dat -> [2009/02/18 08:28:53 | 00,016,384 | ---- | M] () Perflib_Perfdata_5e8.dat -> C:\WINDOWS\Temp\Perflib_Perfdata_5e8.dat -> [2009/02/18 07:18:24 | 00,016,384 | ---- | M] () Perflib_Perfdata_494.dat -> C:\WINDOWS\Temp\Perflib_Perfdata_494.dat -> [2009/02/18 06:56:41 | 00,016,384 | ---- | M] () Perflib_Perfdata_c78.dat -> C:\WINDOWS\Temp\Perflib_Perfdata_c78.dat -> [2009/02/18 06:17:39 | 00,016,384 | ---- | M] () _Setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\isp11.tmp\_Setup.dll -> [2009/02/17 21:32:36 | 00,368,640 | ---- | M] (Macrovision Corporation) vlc-0.9.8a-win32.exe -> C:\Documents and Settings\ding\Local Settings\Temp\vlc-0.9.8a-win32.exe -> [2008/12/09 16:02:46 | 16,320,472 | ---- | M] () ywiseext.dll -> C:\Documents and Settings\ding\Local Settings\Temp\4791210\ywiseext.dll -> [2008/12/04 14:51:04 | 00,126,976 | ---- | M] (Yahoo! Inc.) Softonic_English.exe -> C:\Documents and Settings\ding\Local Settings\Temp\Softonic_English.exe -> [2008/11/03 16:51:24 | 01,312,528 | ---- | M] () _isD8.exe -> C:\Documents and Settings\ding\Local Settings\Temp\_isD8.exe -> [2007/04/05 15:09:38 | 00,455,600 | R--- | M] (Macrovision Corporation) _is146.exe -> C:\Documents and Settings\ding\Local Settings\Temp\_is146.exe -> [2007/04/05 15:09:38 | 00,455,600 | R--- | M] (Macrovision Corporation) _is121.exe -> C:\Documents and Settings\ding\Local Settings\Temp\_is121.exe -> [2007/04/05 15:09:38 | 00,455,600 | R--- | M] (Macrovision Corporation) ISSetup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{BD92DDEF-806B-40EA-B8F5-7C399BB8A10E}\ISSetup.dll -> [2007/04/05 15:07:44 | 00,492,032 | R--- | M] (Macrovision Corporation) ISSetup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{98032927-9687-48CB-A1DC-0861A0830B51}\ISSetup.dll -> [2007/04/05 15:07:44 | 00,492,032 | R--- | M] (Macrovision Corporation) ISSetup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{2C98EFBD-7613-4FA5-8F3B-8F77CBBD4E28}\ISSetup.dll -> [2007/04/05 15:07:44 | 00,492,032 | R--- | M] (Macrovision Corporation) _is1C.exe -> C:\Documents and Settings\ding\Local Settings\Temp\_is1C.exe -> [2007/03/27 09:11:02 | 00,455,600 | R--- | M] (Macrovision Corporation) ISSetup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{B97D74DB-DA06-4A08-90D9-74AF26D604AF}\ISSetup.dll -> [2007/01/20 03:43:24 | 00,492,032 | R--- | M] (Macrovision Corporation) packmanenu.dll -> C:\Documents and Settings\ding\Local Settings\Temp\IPMx3\Lang\PackMan\ENU\packmanenu.dll -> [2006/12/06 15:59:16 | 00,028,672 | ---- | M] () ISSetup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{59B9D3EE-891F-4202-BD96-D6E619CB4501}\ISSetup.dll -> [2006/11/01 12:32:36 | 00,552,214 | R--- | M] (Macrovision Corporation) _is133.exe -> C:\Documents and Settings\ding\Local Settings\Temp\_is133.exe -> [2006/11/01 12:32:36 | 00,455,600 | R--- | M] (Macrovision Corporation) _Setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{59B9D3EE-891F-4202-BD96-D6E619CB4501}\_Setup.dll -> [2006/11/01 12:32:36 | 00,385,968 | R--- | M] (Macrovision Corporation) ose00000.exe -> C:\Documents and Settings\ding\Local Settings\Temp\ose00000.exe -> [2006/10/28 07:14:30 | 00,145,184 | R--- | M] (Microsoft Corporation) _Setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{BD92DDEF-806B-40EA-B8F5-7C399BB8A10E}\_Setup.dll -> [2006/05/18 00:21:08 | 00,373,680 | R--- | M] (Macrovision Corporation) _Setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{B97D74DB-DA06-4A08-90D9-74AF26D604AF}\_Setup.dll -> [2006/05/18 00:21:08 | 00,373,680 | R--- | M] (Macrovision Corporation) _Setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{98032927-9687-48CB-A1DC-0861A0830B51}\_Setup.dll -> [2006/05/18 00:21:08 | 00,373,680 | R--- | M] (Macrovision Corporation) _Setup.dll -> C:\Documents and Settings\ding\Local Settings\Temp\{2C98EFBD-7613-4FA5-8F3B-8F77CBBD4E28}\_Setup.dll -> [2006/05/18 00:21:08 | 00,373,680 | R--- | M] (Macrovision Corporation) setup_wm.exe -> C:\Documents and Settings\ding\Local Settings\Temp\setup_wm.exe -> [2004/08/04 06:56:58 | 00,774,144 | ---- | M] (Microsoft Corporation) PLUninst.exe -> C:\WINDOWS\Temp\PLUninst.exe -> [2003/06/27 18:50:24 | 00,126,976 | ---- | M] () [File - Lop Check] Application Data -> C:\Documents and Settings\All Users\Application Data -> [2009/07/14 21:09:16 | 00,000,000 | RH-D | M] CyberLink -> C:\Documents and Settings\All Users\Application Data\CyberLink -> [2009/02/26 10:07:10 | 00,000,000 | ---D | M] EPSON -> C:\Documents and Settings\All Users\Application Data\EPSON -> [2009/03/29 09:00:13 | 00,000,000 | ---D | M] ESET -> C:\Documents and Settings\All Users\Application Data\ESET -> [2009/02/18 10:04:41 | 00,000,000 | ---D | M] Installations -> C:\Documents and Settings\All Users\Application Data\Installations -> [2009/05/08 20:22:04 | 00,000,000 | ---D | M] PC Suite -> C:\Documents and Settings\All Users\Application Data\PC Suite -> [2009/04/19 16:21:49 | 00,000,000 | ---D | M] UDL -> C:\Documents and Settings\All Users\Application Data\UDL -> [2009/03/29 09:02:37 | 00,000,000 | ---D | M] Application Data -> C:\Documents and Settings\Default User\Application Data -> [2009/02/18 03:24:19 | 00,000,000 | RH-D | M] Application Data -> C:\Documents and Settings\ding\Application Data -> [2009/07/14 21:09:32 | 00,000,000 | RH-D | M] .# -> C:\Documents and Settings\ding\Application Data\.# -> [2009/06/14 08:21:56 | 00,000,000 | -HSD | M] Ahead -> C:\Documents and Settings\ding\Application Data\Ahead -> [2009/04/06 09:14:51 | 00,000,000 | ---D | M] CyberLink -> C:\Documents and Settings\ding\Application Data\CyberLink -> [2009/02/26 10:07:11 | 00,000,000 | ---D | M] dvdcss -> C:\Documents and Settings\ding\Application Data\dvdcss -> [2009/03/11 22:26:06 | 00,000,000 | ---D | M] EPSON -> C:\Documents and Settings\ding\Application Data\EPSON -> [2009/04/02 14:30:53 | 00,000,000 | ---D | M] GrabPro -> C:\Documents and Settings\ding\Application Data\GrabPro -> [2009/07/01 14:38:07 | 00,000,000 | ---D | M] LimeWire -> C:\Documents and Settings\ding\Application Data\LimeWire -> [2009/03/13 07:13:21 | 00,000,000 | ---D | M] LimeWireTurbo -> C:\Documents and Settings\ding\Application Data\LimeWireTurbo -> [2009/03/14 15:46:26 | 00,000,000 | ---D | M] Nokia -> C:\Documents and Settings\ding\Application Data\Nokia -> [2009/05/08 21:01:39 | 00,000,000 | ---D | M] Opera -> C:\Documents and Settings\ding\Application Data\Opera -> [2009/07/01 14:45:30 | 00,000,000 | ---D | M] Orbit -> C:\Documents and Settings\ding\Application Data\Orbit -> [2009/07/14 21:12:01 | 00,000,000 | ---D | M] PC Suite -> C:\Documents and Settings\ding\Application Data\PC Suite -> [2009/05/15 09:46:13 | 00,000,000 | ---D | M] Recruitment Viewer -> C:\Documents and Settings\ding\Application Data\Recruitment Viewer -> [2009/05/23 10:56:43 | 00,000,000 | ---D | M] URSE Games -> C:\Documents and Settings\ding\Application Data\URSE Games -> [2009/04/14 12:30:55 | 00,000,000 | ---D | M] Application Data -> C:\Documents and Settings\LocalService\Application Data -> [2009/02/17 20:45:16 | 00,000,000 | ---D | M] Application Data -> C:\Documents and Settings\NetworkService\Application Data -> [2009/02/17 20:44:54 | 00,000,000 | ---D | M] C:\WINDOWS\Tasks\ -> C:\WINDOWS\Tasks -> [2009/04/23 08:06:41 | 00,000,000 | --SD | M] desktop.ini -> C:\WINDOWS\Tasks\desktop.ini -> [2001/08/23 19:00:00 | 00,000,065 | RH-- | M] () SA.DAT -> C:\WINDOWS\Tasks\SA.DAT -> [2009/07/18 11:27:28 | 00,000,006 | -H-- | M] () [File - Purity Scan] < End of report > [/code]