Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

Sound problems + scan logs


  • Please log in to reply

#1
G.C.

G.C.

    New Member

  • Member
  • Pip
  • 1 posts
Good day,

I have recently been experiencing some slowdowns and other problems with my computer. I have Kaspersky installed with autoupdates. Did all the things in the guide (systemrestorepoint failed: error - initiation of process failed, I don't know why), cleaned a lot and things are running smoother now. Nero 7 had been causing problems (process hanging on reboot), so my friend removed it from msconfig & updated Nero. It seems to operate OK now.

Only one problem remains: my sound is not as it used to be. The problem started before I did all what I described above, of course, but all the cleaning I did did not fix that. My sound is kinda muffled, not so clear as it used to be. Could it be because of malware? All drivers are OK (no yellow icons) in Device Manager.

I did a RootRepeal scan and an OTL scan, and here are the logs:

=======================================================================
RootRepeal:
------------
ROOTREPEAL © AD, 2007-2009
==================================================
Scan Start Time: 2009/09/07 17:42
Program Version: Version 1.3.5.0
Windows Version: Windows XP SP3
==================================================

Drivers
-------------------
Name: mouhid
Image Path: \Driver\mouhid
Address: 0xBA448000 Size: 21568 File Visible: No Signed: -
Status: Hidden from the Windows API!

Name: rootrepeal.sys
Image Path: C:\WINDOWS\system32\drivers\rootrepeal.sys
Address: 0xA648C000 Size: 49152 File Visible: No Signed: -
Status: -

SSDT
-------------------
#: 011 Function Name: NtAdjustPrivilegesToken
Status: Hooked by "C:\WINDOWS\system32\DRIVERS\klif.sys" at address 0xa7f89a72

#: 025 Function Name: NtClose
Status: Hooked by "C:\WINDOWS\system32\DRIVERS\klif.sys" at address 0xa7f8a01e

#: 031 Function Name: NtConnectPort
Status: Hooked by "C:\WINDOWS\system32\DRIVERS\klif.sys" at address 0xa7f8ba82

#: 037 Function Name: NtCreateFile
Status: Hooked by "C:\WINDOWS\system32\DRIVERS\klif.sys" at address 0xa7f8b438

#: 041 Function Name: NtCreateKey
Status: Hooked by "C:\WINDOWS\system32\DRIVERS\klif.sys" at address 0xa7f891e8

#: 052 Function Name: NtCreateSymbolicLinkObject
Status: Hooked by "C:\WINDOWS\system32\DRIVERS\klif.sys" at address 0xa7f8d3e4

#: 053 Function Name: NtCreateThread
Status: Hooked by "C:\WINDOWS\system32\DRIVERS\klif.sys" at address 0xa7f89e1a

#: 063 Function Name: NtDeleteKey
Status: Hooked by "C:\WINDOWS\system32\DRIVERS\klif.sys" at address 0xa7f8962a

#: 065 Function Name: NtDeleteValueKey
Status: Hooked by "C:\WINDOWS\system32\DRIVERS\klif.sys" at address 0xa7f8982a

#: 066 Function Name: NtDeviceIoControlFile
Status: Hooked by "C:\WINDOWS\system32\DRIVERS\klif.sys" at address 0xa7f8b744

#: 068 Function Name: NtDuplicateObject
Status: Hooked by "C:\WINDOWS\system32\DRIVERS\klif.sys" at address 0xa7f8d8f0

#: 071 Function Name: NtEnumerateKey
Status: Hooked by "C:\WINDOWS\system32\DRIVERS\klif.sys" at address 0xa7f89940

#: 073 Function Name: NtEnumerateValueKey
Status: Hooked by "C:\WINDOWS\system32\DRIVERS\klif.sys" at address 0xa7f899a8

#: 084 Function Name: NtFsControlFile
Status: Hooked by "C:\WINDOWS\system32\DRIVERS\klif.sys" at address 0xa7f8b5fa

#: 097 Function Name: NtLoadDriver
Status: Hooked by "C:\WINDOWS\system32\DRIVERS\klif.sys" at address 0xa7f8cea8

#: 116 Function Name: NtOpenFile
Status: Hooked by "C:\WINDOWS\system32\DRIVERS\klif.sys" at address 0xa7f8b294

#: 119 Function Name: NtOpenKey
Status: Hooked by "C:\WINDOWS\system32\DRIVERS\klif.sys" at address 0xa7f8934a

#: 122 Function Name: NtOpenProcess
Status: Hooked by "C:\WINDOWS\system32\DRIVERS\klif.sys" at address 0xa7f89c40

#: 125 Function Name: NtOpenSection
Status: Hooked by "C:\WINDOWS\system32\DRIVERS\klif.sys" at address 0xa7f8d40e

#: 128 Function Name: NtOpenThread
Status: Hooked by "C:\WINDOWS\system32\DRIVERS\klif.sys" at address 0xa7f89b96

#: 160 Function Name: NtQueryKey
Status: Hooked by "C:\WINDOWS\system32\DRIVERS\klif.sys" at address 0xa7f89a10

#: 161 Function Name: NtQueryMultipleValueKey
Status: Hooked by "C:\WINDOWS\system32\DRIVERS\klif.sys" at address 0xa7f89714

#: 177 Function Name: NtQueryValueKey
Status: Hooked by "C:\WINDOWS\system32\DRIVERS\klif.sys" at address 0xa7f894f2

#: 180 Function Name: NtQueueApcThread
Status: Hooked by "C:\WINDOWS\system32\DRIVERS\klif.sys" at address 0xa7f8d110

#: 193 Function Name: NtReplaceKey
Status: Hooked by "C:\WINDOWS\system32\DRIVERS\klif.sys" at address 0xa7f88e6a

#: 200 Function Name: NtRequestWaitReplyPort
Status: Hooked by "C:\WINDOWS\system32\DRIVERS\klif.sys" at address 0xa7f8c30c

#: 204 Function Name: NtRestoreKey
Status: Hooked by "C:\WINDOWS\system32\DRIVERS\klif.sys" at address 0xa7f88fcc

#: 206 Function Name: NtResumeThread
Status: Hooked by "C:\WINDOWS\system32\DRIVERS\klif.sys" at address 0xa7f8d7c0

#: 207 Function Name: NtSaveKey
Status: Hooked by "C:\WINDOWS\system32\DRIVERS\klif.sys" at address 0xa7f88c68

#: 210 Function Name: NtSecureConnectPort
Status: Hooked by "C:\WINDOWS\system32\DRIVERS\klif.sys" at address 0xa7f8b924

#: 213 Function Name: NtSetContextThread
Status: Hooked by "C:\WINDOWS\system32\DRIVERS\klif.sys" at address 0xa7f89f18

#: 237 Function Name: NtSetSecurityObject
Status: Hooked by "C:\WINDOWS\system32\DRIVERS\klif.sys" at address 0xa7f8cfa2

#: 240 Function Name: NtSetSystemInformation
Status: Hooked by "C:\WINDOWS\system32\DRIVERS\klif.sys" at address 0xa7f8d438

#: 247 Function Name: NtSetValueKey
Status: Hooked by "C:\WINDOWS\system32\DRIVERS\klif.sys" at address 0xa7f893a0

#: 253 Function Name: NtSuspendProcess
Status: Hooked by "C:\WINDOWS\system32\DRIVERS\klif.sys" at address 0xa7f8d51c

#: 254 Function Name: NtSuspendThread
Status: Hooked by "C:\WINDOWS\system32\DRIVERS\klif.sys" at address 0xa7f8d648

#: 255 Function Name: NtSystemDebugControl
Status: Hooked by "C:\WINDOWS\system32\DRIVERS\klif.sys" at address 0xa7f8cdd4

#: 257 Function Name: NtTerminateProcess
Status: Hooked by "C:\Program Files\SUPERAntiSpyware\SASKUTIL.sys" at address 0xa7e3b0b0

#: 277 Function Name: NtWriteVirtualMemory
Status: Hooked by "C:\WINDOWS\system32\DRIVERS\klif.sys" at address 0xa7f89d5c

==EOF==

OTL
------------

OTL logfile created on: 07/09/2009 17:49:00 - Run 1
OTL by OldTimer - Version 3.0.10.7 Folder = D:\_Software\_Diagnostics\OTL
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 0000040D | Country: ישראל | Language: HEB | Date Format: dd/MM/yyyy

1.99 Gb Total Physical Memory | 1.40 Gb Available Physical Memory | 70.30% Memory free
4.00 Gb Paging File | 4.00 Gb Available in Paging File | 100.00% Paging File free
Paging file location(s): D:\pagefile.sys 3096 3096 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 48.83 Gb Total Space | 24.79 Gb Free Space | 50.75% Space Free | Partition Type: NTFS
Drive D: | 100.21 Gb Total Space | 95.16 Gb Free Space | 94.96% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: ABCDE
Current User Name: מוריה
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard

========== Processes (SafeList) ==========

PRC - [2008/04/14 05:17:43 | 01,202,176 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Explorer.EXE
PRC - [2007/07/12 07:00:32 | 00,142,104 | R--- | M] (Intel Corporation) -- C:\WINDOWS\System32\igfxtray.exe
PRC - [2007/07/12 07:00:28 | 00,162,584 | R--- | M] (Intel Corporation) -- C:\WINDOWS\System32\hkcmd.exe
PRC - [2007/07/12 07:00:29 | 00,138,008 | R--- | M] (Intel Corporation) -- C:\WINDOWS\System32\igfxpers.exe
PRC - [2007/06/13 09:49:22 | 16,377,344 | R--- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\RTHDCPL.EXE
PRC - [2007/07/12 07:00:32 | 00,252,696 | R--- | M] (Intel Corporation) -- C:\WINDOWS\System32\igfxsrvc.exe
PRC - [2006/11/23 16:10:42 | 00,056,928 | ---- | M] (Cyberlink Corp.) -- C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
PRC - [2009/02/13 00:13:41 | 00,201,992 | ---- | M] (Kaspersky Lab) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
PRC - [2007/03/11 22:34:40 | 00,049,152 | ---- | M] (Hewlett-Packard Co.) -- C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
PRC - [2008/10/25 11:44:34 | 00,031,072 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
PRC - [2008/12/03 19:05:04 | 00,184,320 | ---- | M] () -- C:\Program Files\AMT Media Manager\AMTDeviceService.exe
PRC - [2009/09/05 22:38:33 | 01,994,480 | ---- | M] (SUPERAntiSpyware.com) -- C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
PRC - [2009/03/05 16:07:20 | 02,260,480 | RHS- | M] (Safer-Networking Ltd.) -- C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
PRC - [2009/05/28 16:32:28 | 00,380,416 | ---- | M] (tzuk) -- C:\Program Files\Sandboxie\SbieCtrl.exe
PRC - [2003/04/06 01:06:58 | 00,028,672 | ---- | M] (Hewlett-Packard) -- C:\Program Files\HP\Digital Imaging\bin\hpotdd01.exe
PRC - [2008/10/25 08:18:50 | 00,098,696 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
PRC - [2009/02/13 00:13:41 | 00,201,992 | ---- | M] (Kaspersky Lab) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
PRC - [2006/10/26 14:40:34 | 00,335,872 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
PRC - [2006/12/19 10:30:26 | 00,081,920 | ---- | M] (Prolific Technology Inc.) -- C:\WINDOWS\System32\IoctlSvc.exe
PRC - [2005/08/07 15:54:00 | 00,167,936 | ---- | M] () -- C:\Program Files\CyberLink\Shared Files\RichVideo.exe
PRC - [2009/05/28 16:32:26 | 00,053,760 | ---- | M] (tzuk) -- C:\Program Files\Sandboxie\SbieSvc.exe
PRC - [2008/01/22 11:13:26 | 00,275,752 | ---- | M] (Nero AG) -- C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
PRC - [2009/09/07 17:45:22 | 00,514,048 | ---- | M] (OldTimer Tools) -- D:\_Software\_Diagnostics\OTL\OTL.exe

========== Win32 Services (SafeList) ==========

SRV - [2009/02/13 00:13:41 | 00,201,992 | ---- | M] (Kaspersky Lab) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe -- (AVP [Auto | Running])
SRV - [2008/04/14 05:17:26 | 00,038,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll -- (helpsvc [Auto | Running])
SRV - [2007/03/11 22:24:50 | 00,217,088 | ---- | M] (Hewlett-Packard Co.) -- C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll -- (hpqcxs08 [On_Demand | Running])
SRV - [2007/03/11 23:02:52 | 00,131,072 | ---- | M] (Hewlett-Packard Co.) -- C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll -- (hpqddsvc [Auto | Running])
SRV - [2006/10/26 14:40:34 | 00,335,872 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe -- (MDM [Auto | Running])
SRV - [2008/10/25 11:44:08 | 00,065,888 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe -- (Microsoft Office Groove Audit Service [On_Demand | Stopped])
SRV - [2008/04/08 09:56:30 | 00,800,040 | ---- | M] (Nero AG) -- C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe -- (NBService [On_Demand | Stopped])
SRV - [2006/11/08 17:35:36 | 00,043,520 | ---- | M] (Hewlett-Packard) -- C:\WINDOWS\System32\HPZinw12.dll -- (Net Driver HPZ12 [Auto | Running])
SRV - [2008/01/22 11:13:26 | 00,275,752 | ---- | M] (Nero AG) -- C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe -- (NMIndexingService [On_Demand | Running])
SRV - [2008/11/04 01:06:28 | 00,441,712 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE -- (odserv [On_Demand | Stopped])
SRV - [2006/10/26 14:03:08 | 00,145,184 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE -- (ose [On_Demand | Stopped])
SRV - [2006/12/19 10:30:26 | 00,081,920 | ---- | M] (Prolific Technology Inc.) -- C:\WINDOWS\System32\IoctlSvc.exe -- (PLFlash DeviceIoControl Service [Auto | Running])
SRV - [2006/11/08 17:35:38 | 00,053,248 | ---- | M] (Hewlett-Packard) -- C:\WINDOWS\System32\HPZipm12.dll -- (Pml Driver HPZ12 [Auto | Running])
SRV - [2005/08/07 15:54:00 | 00,167,936 | ---- | M] () -- C:\Program Files\CyberLink\Shared Files\RichVideo.exe -- (RichVideo [Auto | Running])
SRV - [2009/05/28 16:32:26 | 00,053,760 | ---- | M] (tzuk) -- C:\Program Files\Sandboxie\SbieSvc.exe -- (SbieSvc [Auto | Running])
SRV - [2006/12/01 13:06:10 | 00,908,800 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Media Player\WMPNetwk.exe -- (WMPNetworkSvc [On_Demand | Stopped])

========== Driver Services (SafeList) ==========

DRV - [2008/04/13 19:36:05 | 00,144,384 | ---- | M] (Windows ® Server 2003 DDK provider) -- C:\WINDOWS\System32\DRIVERS\HDAudBus.sys -- (HDAudBus [On_Demand | Running])
DRV - [2007/03/08 07:20:48 | 00,049,920 | R--- | M] (HP) -- C:\WINDOWS\System32\DRIVERS\HPZid412.sys -- (HPZid412 [On_Demand | Running])
DRV - [2007/03/08 07:20:49 | 00,016,496 | R--- | M] (HP) -- C:\WINDOWS\System32\DRIVERS\HPZipr12.sys -- (HPZipr12 [On_Demand | Running])
DRV - [2007/03/08 07:20:50 | 00,021,568 | R--- | M] (HP) -- C:\WINDOWS\System32\DRIVERS\HPZius12.sys -- (HPZius12 [On_Demand | Running])
DRV - [2007/07/12 07:00:34 | 05,761,728 | R--- | M] (Intel Corporation) -- C:\WINDOWS\System32\DRIVERS\igxpmp32.sys -- (ialm [On_Demand | Running])
DRV - [2007/06/22 13:14:40 | 04,432,384 | R--- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\System32\drivers\RtkHDAud.sys -- (IntcAzAudAddService [On_Demand | Running])
DRV - [2008/04/16 14:23:44 | 00,112,144 | ---- | M] (Kaspersky Lab) -- C:\WINDOWS\system32\drivers\kl1.sys -- (kl1 [Boot | Running])
DRV - [2009/05/26 21:52:59 | 00,033,808 | ---- | M] (Kaspersky Lab) -- C:\WINDOWS\system32\drivers\klbg.sys -- (klbg [Boot | Running])
DRV - [2009/05/26 21:52:59 | 00,213,520 | ---- | M] (Kaspersky Lab) -- C:\WINDOWS\System32\DRIVERS\klif.sys -- (KLIF [System | Running])
DRV - [2008/03/25 20:07:10 | 00,024,592 | ---- | M] (Kaspersky Lab) -- C:\WINDOWS\System32\DRIVERS\klim5.sys -- (klim5 [On_Demand | Running])
DRV - [2004/09/21 13:43:34 | 00,017,792 | ---- | M] (Parallel Technologies, Inc.) -- C:\WINDOWS\System32\DRIVERS\ptilink.sys -- (Ptilink [On_Demand | Running])
DRV - [2007/07/12 07:00:26 | 00,090,880 | R--- | M] (Realtek Semiconductor Corporation ) -- C:\WINDOWS\System32\DRIVERS\Rtenicxp.sys -- (RTLE8023xp [On_Demand | Running])
DRV - [2009/09/05 22:38:34 | 00,009,968 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) -- C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS -- (SASDIFSV [System | Running])
DRV - [2009/01/15 16:17:42 | 00,007,408 | R--- | M] ( SUPERAdBlocker.com and SUPERAntiSpyware.com) -- C:\Program Files\SUPERAntiSpyware\SASENUM.SYS -- (SASENUM [On_Demand | Running])
DRV - [2009/09/05 22:38:33 | 00,074,480 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) -- C:\Program Files\SUPERAntiSpyware\SASKUTIL.sys -- (SASKUTIL [System | Running])
DRV - [2009/05/28 16:32:24 | 00,108,032 | ---- | M] (tzuk) -- C:\Program Files\Sandboxie\SbieDrv.sys -- (SbieDrv [On_Demand | Running])
DRV - [2008/04/13 19:39:15 | 00,020,480 | ---- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) -- C:\WINDOWS\System32\DRIVERS\secdrv.sys -- (Secdrv [On_Demand | Stopped])
DRV - [2001/08/17 14:56:16 | 00,007,552 | ---- | M] (Sony Corporation) -- C:\WINDOWS\System32\DRIVERS\SONYPVU1.SYS -- (SONYPVU1 [On_Demand | Stopped])

========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft....k/?LinkId=69157
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft....k/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft....k/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft....k/?LinkId=69157
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn...st/srchcust.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn...st/srchasst.htm

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft...amp;ar=iesearch
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://netex.mako.co...&Flavor=General
IE - URLSearchHook: - Reg Error: Key error. File not found
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.startup.homepage: "http://netex.mako.co...Flavor=General"
FF - prefs.js..extensions.enabledItems: {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.5.2

FF - HKLM\software\mozilla\Mozilla Firefox 3.5.2\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2009/09/05 23:11:12 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.2\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2009/09/05 23:11:06 | 00,000,000 | ---D | M]

[2009/09/05 23:11:31 | 00,000,000 | ---D | M] -- C:\Documents and Settings\מוריה\Application Data\mozilla\Extensions
[2009/09/05 23:11:31 | 00,000,000 | ---D | M] -- C:\Documents and Settings\מוריה\Application Data\mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
[2009/09/05 23:11:31 | 00,000,000 | ---D | M] -- C:\Documents and Settings\מוריה\Application Data\mozilla\Firefox\Profiles\jx5hzocp.default\extensions
[2009/09/05 23:11:06 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions
[2009/09/05 23:11:06 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2009/07/30 14:26:53 | 00,023,544 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browserdirprovider.dll
[2009/07/30 14:26:54 | 00,137,208 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\brwsrcmp.dll
[2009/07/30 14:26:55 | 00,065,016 | ---- | M] (mozilla.org) -- C:\Program Files\mozilla firefox\plugins\npnul32.dll
[2009/07/30 10:24:20 | 00,001,394 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazondotcom.xml
[2009/07/30 10:24:20 | 00,002,193 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\answers.xml
[2009/07/30 10:24:20 | 00,001,534 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\creativecommons.xml
[2009/07/30 10:24:20 | 00,002,344 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay.xml
[2009/07/30 10:24:20 | 00,002,371 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\google.xml
[2009/07/30 10:24:20 | 00,001,178 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia.xml
[2009/07/30 10:24:20 | 00,000,792 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo.xml

O1 HOSTS File: (734 bytes) - C:\WINDOWS\System32\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (IEVkbdBHO Class) - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\ievkbd.dll (Kaspersky Lab)
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Alcmtr] C:\WINDOWS\ALCMTR.EXE (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [AMTDeviceService] C:\Program Files\AMT Media Manager\AMTDeviceService.exe ()
O4 - HKLM..\Run: [AVP] C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe (Kaspersky Lab)
O4 - HKLM..\Run: [GrooveMonitor] C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe (Microsoft Corporation)
O4 - HKLM..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe (Intel Corporation)
O4 - HKLM..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe (Hewlett-Packard Co.)
O4 - HKLM..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe (Intel Corporation)
O4 - HKLM..\Run: [LanguageShortcut] C:\Program Files\CyberLink\PowerDVD\Language\Language.exe ()
O4 - HKLM..\Run: [Persistence] C:\WINDOWS\System32\igfxpers.exe (Intel Corporation)
O4 - HKLM..\Run: [RemoteControl] C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe (Cyberlink Corp.)
O4 - HKLM..\Run: [RTHDCPL] C:\WINDOWS\RTHDCPL.EXE (Realtek Semiconductor Corp.)
O4 - HKCU..\Run: [SandboxieControl] C:\Program Files\Sandboxie\SbieCtrl.exe (tzuk)
O4 - HKCU..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.)
O4 - HKCU..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe (SUPERAntiSpyware.com)
O4 - Startup: C:\Documents and Settings\All Users\תפריט התחלה\תוכניות\הפעלה\hpoddt01.exe.lnk = C:\Program Files\HP\Digital Imaging\bin\hpotdd01.exe (Hewlett-Packard)
O4 - Startup: C:\Documents and Settings\מוריה\תפריט התחלה\תוכניות\הפעלה\ERUNT AutoBackup.lnk = C:\Program Files\ERUNT\AUTOBACK.EXE ()
O4 - Startup: C:\Documents and Settings\מוריה\תפריט התחלה\תוכניות\הפעלה\גוזר מסך של OneNote 2007 ו- Launcher.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: &ייצוא אל Microsoft Excel - C:\Program Files\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation)
O9 - Extra Button: Web traffic protection statistics - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\SCIEPlgn.dll (Kaspersky Lab)
O9 - Extra Button: שלח אל OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : ש&לח אל OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O9 - Extra 'Tools' menuitem : @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe (Microsoft Corporation)
O9 - Extra Button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation)
O15 - HKLM\..Trusted Domains: 1 domain(s) and sub-domain(s) not assigned to a zone.
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.100.101.1
O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ipp - No CLSID value found
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp - No CLSID value found
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Filter: - text/xml - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - AppInit_DLLs: (C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd.dll) - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\mzvkbd.dll (Kaspersky Lab)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\Explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\!SASWinLogon: DllName - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL (SUPERAntiSpyware.com)
O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll - C:\WINDOWS\System32\igfxdev.dll (Intel Corporation)
O20 - Winlogon\Notify\klogon: DllName - C:\WINDOWS\system32\klogon.dll - C:\WINDOWS\System32\klogon.dll (Kaspersky Lab)
O24 - Desktop Components:0 () - http://b.static.ak.f...e_small_ie6.png
O24 - Desktop Components:1 (דף הבית הנוכחי שלי) - About:Home
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com)
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
O31 - SafeBoot: AlternateShell - cmd.exe
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2007/10/23 11:00:43 | 00,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O33 - MountPoints2\{808dced2-5cdc-11de-adcd-0019d1a7e29f}\Shell\AutoRun\command - "" = F:\e2.cmd -- File not found
O33 - MountPoints2\{808dced2-5cdc-11de-adcd-0019d1a7e29f}\Shell\open\Command - "" = F:\e2.cmd -- File not found
O33 - MountPoints2\{fc9b0e67-efb3-11dd-acd2-0019d1a7e29f}\Shell - "" = AutoRun
O33 - MountPoints2\{fc9b0e67-efb3-11dd-acd2-0019d1a7e29f}\Shell\AutoRun\command - "" = F:\MediaManager.exe -- File not found
O34 - HKLM BootExecute: (autocheck) - File not found
O34 - HKLM BootExecute: (autochk) - C:\WINDOWS\System32\autochk.exe (Microsoft Corporation)
O34 - HKLM BootExecute: (*) - File not found

NetSvcs: 6to4 - Service key not found. File not found
NetSvcs: Ias - Service key not found. File not found
NetSvcs: Iprip - Service key not found. File not found
NetSvcs: Irmon - Service key not found. File not found
NetSvcs: NWCWorkstation - Service key not found. File not found
NetSvcs: Nwsapagent - Service key not found. File not found
NetSvcs: WmdmPmSp - Service key not found. File not found
NetSvcs: helpsvc - C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll (Microsoft Corporation)

========== Files/Folders - Created Within 30 Days ==========

[4 C:\WINDOWS\System32\*.tmp files]
[4 C:\WINDOWS\*.tmp files]
[6 C:\Documents and Settings\מוריה\My Documents\*.tmp files]
[2009/09/07 17:39:47 | 00,000,000 | ---D | C] -- C:\WINDOWS\ERDNT
[2009/09/07 17:39:01 | 00,000,767 | ---- | C] () -- C:\Documents and Settings\מוריה\תפריט התחלה\תוכניות\הפעלה\ERUNT AutoBackup.lnk
[2009/09/07 17:38:37 | 00,000,000 | ---D | C] -- C:\Program Files\ERUNT
[2009/09/07 16:56:35 | 00,002,361 | ---- | C] () -- C:\Documents and Settings\All Users\שולחן העבודה\Nero StartSmart Essentials.lnk
[2009/09/07 16:56:35 | 00,001,879 | ---- | C] () -- C:\Documents and Settings\All Users\שולחן העבודה\Nero Online Upgrade.lnk
[2009/09/07 16:56:00 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Ahead
[2009/09/07 16:47:46 | 00,000,000 | ---D | C] -- C:\Sandbox
[2009/09/07 16:44:59 | 00,000,766 | ---- | C] () -- C:\Documents and Settings\מוריה\שולחן העבודה\Sandboxed Web Browser.lnk
[2009/09/07 16:44:42 | 00,001,436 | ---- | C] () -- C:\WINDOWS\Sandboxie.ini
[2009/09/07 16:44:15 | 00,000,000 | ---D | C] -- C:\Program Files\Sandboxie
[2009/09/07 16:39:12 | 00,000,000 | ---D | C] -- C:\Documents and Settings\מוריה\Application Data\Ahead
[2009/09/07 16:38:29 | 02,388,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_30.dll
[2009/09/07 16:38:28 | 02,323,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_28.dll
[2009/09/07 16:19:04 | 03,550,592 | ---- | C] (Sysinternals - www.sysinternals.com) -- C:\Documents and Settings\מוריה\שולחן העבודה\procexp.exe
[2009/09/07 16:16:27 | 00,000,000 | ---D | C] -- C:\WINDOWS\pss
[2009/09/06 00:07:19 | 00,000,000 | ---D | C] -- C:\Program Files\Spybot - Search & Destroy
[2009/09/06 00:07:19 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
[2009/09/05 23:45:12 | 00,000,000 | ---D | C] -- C:\Documents and Settings\מוריה\Application Data\WinRAR
[2009/09/05 23:44:36 | 00,000,000 | ---D | C] -- C:\Program Files\WinRAR
[2009/09/05 23:42:23 | 00,000,000 | ---D | C] -- C:\Documents and Settings\מוריה\My Documents\Downloads
[2009/09/05 23:11:11 | 00,000,000 | ---D | C] -- C:\Documents and Settings\מוריה\Application Data\Mozilla
[2009/09/05 23:11:07 | 00,001,620 | ---- | C] () -- C:\Documents and Settings\מוריה\שולחן העבודה\Mozilla Firefox.lnk
[2009/09/05 23:11:05 | 00,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[2009/09/05 23:00:55 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\zh-TW
[2009/09/05 23:00:55 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\zh-HK
[2009/09/05 23:00:55 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\tr-TR
[2009/09/05 23:00:55 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\sv-SE
[2009/09/05 23:00:55 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\pt-BR
[2009/09/05 23:00:55 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\nl-NL
[2009/09/05 23:00:55 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\nb-NO
[2009/09/05 23:00:55 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\ko-KR
[2009/09/05 23:00:55 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\it-IT
[2009/09/05 23:00:55 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\fr-FR
[2009/09/05 23:00:55 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\fi-FI
[2009/09/05 23:00:55 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\es-ES
[2009/09/05 23:00:55 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\en-US
[2009/09/05 23:00:55 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\el-GR
[2009/09/05 23:00:55 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\de-DE
[2009/09/05 23:00:55 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\da-DK
[2009/09/05 23:00:55 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\ar-SA
[2009/09/05 21:59:16 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com
[2009/09/05 21:59:07 | 00,000,780 | ---- | C] () -- C:\Documents and Settings\מוריה\שולחן העבודה\SUPERAntiSpyware Free Edition.lnk
[2009/09/05 21:59:05 | 00,000,000 | ---D | C] -- C:\Program Files\SUPERAntiSpyware
[2009/09/05 21:59:05 | 00,000,000 | ---D | C] -- C:\Documents and Settings\מוריה\Application Data\SUPERAntiSpyware.com
[2009/09/05 21:58:40 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Wise Installation Wizard
[2009/09/05 21:45:03 | 00,000,000 | ---D | C] -- C:\Documents and Settings\מוריה\Application Data\Malwarebytes
[2009/09/05 21:44:59 | 00,038,160 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2009/09/05 21:44:58 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Malwarebytes
[2009/09/05 21:44:52 | 00,019,096 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2009/09/05 21:44:52 | 00,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2009/09/05 21:34:45 | 00,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2009/09/05 21:34:43 | 00,000,000 | ---D | C] -- C:\Documents and Settings\מוריה\Local Settings\Application Data\Mozilla
[2009/09/04 10:05:45 | 00,040,108 | ---- | C] () -- C:\Documents and Settings\מוריה\My Documents\פרוייקט.docx
[2009/09/04 09:36:05 | 00,088,576 | ---- | C] () -- C:\Documents and Settings\מוריה\My Documents\פרוייקט.doc
[2009/09/03 12:13:25 | 00,229,888 | ---- | C] () -- C:\fellini 10 .6.09.doc
[2009/09/03 12:13:25 | 00,221,184 | ---- | C] () -- C:\fellini9 .6.09.doc
[2009/09/03 12:13:25 | 00,169,592 | ---- | C] () -- C:\curriculum.february.. 2009.tif
[2009/09/03 12:13:25 | 00,143,872 | ---- | C] () -- C:\cavaglion.submitted.doc
[2009/09/03 12:13:25 | 00,140,288 | ---- | C] () -- C:\cavaglion.submitted.SIGNS.doc
[2009/09/03 12:13:25 | 00,123,904 | ---- | C] () -- C:\ariel. april2009ES.doc
[2009/09/03 12:13:25 | 00,073,728 | ---- | C] () -- C:\curriculum. june. 2009.hebrew.doc
[2009/09/03 12:13:25 | 00,073,728 | ---- | C] () -- C:\curriculum. august. 2009.hebrew.doc
[2009/09/03 12:13:25 | 00,059,112 | ---- | C] () -- C:\C--Documents and Settings-......92F4923-20090525172945[1]0001.tif
[2009/09/03 12:13:25 | 00,059,112 | ---- | C] () -- C:\C--Documents and Settings-......92F4923-20090525172945[1].tif
[2009/09/03 12:13:25 | 00,058,440 | ---- | C] () -- C:\C--Documents and Settings-......YGBJPC1-20090617150509[1].tif
[2009/09/03 12:13:25 | 00,039,640 | ---- | C] () -- C:\Document2.tif
[2009/09/03 12:13:25 | 00,035,328 | ---- | C] () -- C:\fellini.doc
[2009/09/03 12:13:25 | 00,031,242 | ---- | C] () -- C:\C--Documents and Settings-......IE5-KB53AEBH-CAVAGLION[1].tif
[2009/09/03 12:13:25 | 00,026,232 | ---- | C] () -- C:\Document10006.tif
[2009/09/03 12:13:25 | 00,019,102 | ---- | C] () -- C:\Document10005.tif
[2009/09/03 12:13:25 | 00,018,092 | ---- | C] () -- C:\Document10004.tif
[2009/09/03 12:13:25 | 00,014,938 | ---- | C] () -- C:\Document1.tif
[2009/09/03 12:13:25 | 00,013,719 | ---- | C] () -- C:\Dr.docx
[2009/09/03 12:13:25 | 00,008,352 | ---- | C] () -- C:\Document10002.tif
[2009/09/03 12:13:25 | 00,006,802 | ---- | C] () -- C:\Document10001.tif
[2009/09/03 12:13:25 | 00,005,708 | ---- | C] () -- C:\Document10003.tif
[2009/09/03 12:13:25 | 00,000,000 | ---D | C] -- C:\21b50056f73d671896f7
[2009/09/03 12:13:25 | 00,000,000 | ---- | C] () -- C:\a Publication Idea Form 01.doc_aq.doc_aq.doc
[2009/09/03 12:13:24 | 00,852,118 | ---- | C] (3rd Eye Solutions ) -- C:\בבל טרובל.exe
[2009/09/03 12:13:24 | 00,262,025 | ---- | C] () -- C:\2009138[1].pdf
[2009/09/03 12:13:24 | 00,175,378 | ---- | C] () -- C:\84.95.5.230-uwc-webmail-msg_fs_lr0001.tif
[2009/09/03 12:13:24 | 00,129,952 | ---- | C] () -- C:\84.95.5.230-uwc-webmail-msg_fs_lr.tif
[2009/09/03 12:13:24 | 00,114,508 | ---- | C] () -- C:\84.95.5.230-uwc-webmail-msg_fs_lr0004.tif
[2009/09/03 12:13:24 | 00,102,918 | ---- | C] () -- C:\84.95.5.230-uwc-webmail-msg_fs_lr0002.tif
[2009/09/03 12:13:24 | 00,102,904 | ---- | C] () -- C:\84.95.5.230-uwc-webmail-msg_fs_lr0003.tif
[2009/09/03 12:13:24 | 00,082,706 | ---- | C] () -- C:\84.95.5.230-uwc-webmail-attach-iti2809893.tif
[2009/09/03 12:13:24 | 00,053,622 | ---- | C] () -- C:\%D7%AA%D7%A4%D7%99%D7%9C%D7%94%20%D7%9C%D7%94%D7%99%D7%95%D7%AA%20%D7%90%D7%9E%D7%90[1].tif
[2009/09/03 12:13:24 | 00,038,272 | ---- | C] () -- C:\84.95.5.230-uwc-webmail-popup.tif
[2009/09/03 12:13:24 | 00,033,932 | ---- | C] () -- C:\84.95.5.230-uwc-webmail-attach-inv1980302.tif
[2009/09/03 12:13:24 | 00,033,284 | ---- | C] () -- C:\A3%20%D7%A7%D7%A9%D7%A8%20%D7%97%D7%95%D7%92%20%D7%A0%D7%95%D7%A2%D7%A8%2D%D7%A9%D7%91%D7%AA%20%D7%AA%D7%A8%D7%95%D7%9E%D7%94%20%D7%AA%D7%A9%D7%A1%27%27%D7%98[1].tif
[2009/09/03 12:13:24 | 00,018,860 | ---- | C] () -- C:\׳׳‘׳™׳˜׳œ[1]0001.tif
[2009/09/03 12:13:24 | 00,018,860 | ---- | C] () -- C:\׳׳‘׳™׳˜׳œ[1].tif
[2009/09/03 12:13:24 | 00,015,000 | ---- | C] () -- C:\84.95.5.230-uwc-webmail-attach-vht883937.tif
[2009/09/03 12:13:24 | 00,000,000 | R--D | C] -- C:\My Videos
[2009/09/03 12:13:23 | 00,000,000 | ---D | C] -- C:\מחברות של OneNote
[2009/09/03 12:12:55 | 00,000,000 | R--D | C] -- C:\My Pictures
[2009/09/03 12:11:54 | 00,220,160 | ---- | C] () -- C:\talkback.1.8.09gabiESAug 3.doc
[2009/09/03 12:11:54 | 00,190,976 | ---- | C] () -- C:\talkback.5.8.09.doc
[2009/09/03 12:11:54 | 00,178,558 | ---- | C] () -- C:\C--Documents and Settings-......on%20Cavaglion-Jungian[1].tif
[2009/09/03 12:11:54 | 00,173,056 | ---- | C] () -- C:\עבודת סמנריון-מין מגדר.doc
[2009/09/03 12:11:54 | 00,148,992 | ---- | C] () -- C:\fellinibook.1909.doc
[2009/09/03 12:11:54 | 00,148,480 | ---- | C] () -- C:\fellinibook.3909.doc
[2009/09/03 12:11:54 | 00,130,324 | ---- | C] () -- C:\84.95.5.230-uwc-webmail-msg_fs_lr0008.tif
[2009/09/03 12:11:54 | 00,123,468 | ---- | C] () -- C:\84.95.5.230-uwc-webmail-msg_fs_lr0007.tif
[2009/09/03 12:11:54 | 00,099,310 | ---- | C] () -- C:\www.beitshmuel.com-index2.tif
[2009/09/03 12:11:54 | 00,076,672 | ---- | C] () -- C:\images.kidstv.co.il-files-imagecache-kids-285x-_scale_cr.tif
[2009/09/03 12:11:54 | 00,075,264 | ---- | C] () -- C:\curriculum. september. 2009.hebrew.doc
[2009/09/03 12:11:54 | 00,074,151 | ---- | C] () -- C:\עבודת סמנריון-מין מגדר.docx
[2009/09/03 12:11:54 | 00,035,276 | ---- | C] () -- C:\www.secure-paiement-reservation.com-checkInVoucherSmall.tif
[2009/09/03 12:11:54 | 00,031,232 | ---- | C] () -- C:\malla.kathmandu.doc
[2009/09/03 12:11:54 | 00,027,114 | ---- | C] () -- C:\צןפים.TIF
[2009/09/03 12:11:54 | 00,027,114 | ---- | C] () -- C:\www.zofim.org.il-pics-magazin-ishur%20horim0001.tif
[2009/09/03 12:11:54 | 00,027,114 | ---- | C] () -- C:\C--Documents and Settings-......A9ILA7X0-ishur%20horim[1].tif
[2009/09/03 12:11:54 | 00,027,014 | ---- | C] () -- C:\הדפסת פקס בעמוד מלא0009.tif
[2009/09/03 12:11:54 | 00,027,014 | ---- | C] () -- C:\הדפסת פקס בעמוד מלא0008.tif
[2009/09/03 12:11:54 | 00,027,014 | ---- | C] () -- C:\הדפסת פקס בעמוד מלא0007.tif
[2009/09/03 12:11:54 | 00,023,040 | ---- | C] () -- C:\רשתי-תוספות.doc
[2009/09/03 12:11:54 | 00,021,500 | ---- | C] () -- C:\Document10008.tif
[2009/09/03 12:11:54 | 00,019,834 | ---- | C] () -- C:\Document10007.tif
[2009/09/03 12:11:54 | 00,017,350 | ---- | C] () -- C:\84.95.5.230-uwc-webmail-attach-inv1976191.tif
[2009/09/03 12:11:54 | 00,016,110 | ---- | C] () -- C:\www.beitshmuel.com-MySite8-print_recipt.tif
[2009/09/03 12:11:54 | 00,000,311 | ---- | C] () -- C:\קיצור דרך אל ‎My Documents.lnk
[2009/09/03 12:11:54 | 00,000,000 | R--D | C] -- C:\My Music
[2009/09/03 12:11:54 | 00,000,000 | ---D | C] -- C:\eMule AdunanzA
[2009/09/03 12:11:54 | 00,000,000 | ---D | C] -- C:\CyberLink
[2009/09/03 12:11:53 | 01,003,356 | ---- | C] () -- C:\פסיכוס0002.tif
[2009/09/03 12:11:53 | 00,726,348 | ---- | C] () -- C:\פסיכוס0001.tif
[2009/09/03 12:11:53 | 00,726,348 | ---- | C] () -- C:\פסיכוס.tif
[2009/09/03 12:11:53 | 00,305,341 | ---- | C] () -- C:\תמונה 004.jpg
[2009/09/03 12:11:53 | 00,174,592 | ---- | C] () -- C:\talkback.1.8.09gabi.doc
[2009/09/03 12:11:53 | 00,147,079 | ---- | C] () -- C:\תמונה חדשה.JPG
[2009/09/03 12:11:53 | 00,127,242 | ---- | C] () -- C:\84.95.5.230-uwc-webmail-msg_fs_lr0006.tif
[2009/09/03 12:11:53 | 00,127,242 | ---- | C] () -- C:\84.95.5.230-uwc-webmail-msg_fs_lr0005.tif
[2009/09/03 12:11:53 | 00,059,904 | ---- | C] () -- C:\פסיכופתולוגיה. מועד א.doc
[2009/09/03 12:11:53 | 00,059,904 | ---- | C] () -- C:\פסיכופתולוגיה. מועד א ומועד ב.doc
[2009/09/03 12:11:53 | 00,052,860 | ---- | C] () -- C:\part1.tif
[2009/09/03 12:11:53 | 00,046,592 | ---- | C] () -- C:\סילבוס קאבאליון- סטייה חברתית.תשע.doc
[2009/09/03 12:11:53 | 00,046,080 | ---- | C] () -- C:\מאי.doc
[2009/09/03 12:11:53 | 00,045,948 | ---- | C] () -- C:\עבודת ספר.tif
[2009/09/03 12:11:53 | 00,032,256 | ---- | C] () -- C:\פרוטוקול שטרם.doc
[2009/09/03 12:11:53 | 00,030,208 | ---- | C] () -- C:\מבחן באיכותני.doc
[2009/09/03 12:11:53 | 00,026,624 | ---- | C] () -- C:\רשימת טלפונים.doc
[2009/09/03 12:11:53 | 00,024,316 | ---- | C] () -- C:\reservations.egged.co.il-webetickets-Moudle-Orders-Orde.tif
[2009/09/03 12:11:53 | 00,022,445 | ---- | C] () -- C:\מאי.docx
[2009/09/03 12:11:53 | 00,015,119 | ---- | C] () -- C:\עבודת ספר.docx
[2009/09/03 12:11:53 | 00,013,892 | ---- | C] () -- C:\בעה.tif
[2009/09/03 12:11:53 | 00,013,120 | ---- | C] () -- C:\סדר העבודה של חול.docx
[2009/09/03 12:11:53 | 00,012,747 | ---- | C] () -- C:\בעה.docx
[2009/09/03 12:11:53 | 00,012,586 | ---- | C] () -- C:\וואלה חדשות.docx
[2009/09/03 12:11:53 | 00,012,048 | ---- | C] () -- C:\רשימת טלפונים.tif
[2009/09/03 12:11:53 | 00,000,112 | ---- | C] () -- C:\PDVD_MediaDisc.PlayList
[2009/09/03 12:11:53 | 00,000,000 | ---- | C] () -- C:\talkback.27.7.09.doc
[2009/09/03 12:11:52 | 01,145,733 | ---- | C] () -- C:\תמונה 008.JPG
[2009/09/03 12:11:52 | 00,721,920 | ---- | C] () -- C:\הדפסת פקס בעמוד מלא0006.tif
[2009/09/03 12:11:52 | 00,721,920 | ---- | C] () -- C:\הדפסת פקס בעמוד מלא0005.tif
[2009/09/03 12:11:52 | 00,352,212 | ---- | C] () -- C:\www.myfirsthomepage.co.il-games-color13.tif
[2009/09/03 12:11:52 | 00,309,672 | ---- | C] () -- C:\www.myfirsthomepage.co.il-games-color130001.tif
[2009/09/03 12:11:52 | 00,308,320 | ---- | C] () -- C:\www.myfirsthomepage.co.il-games-color130002.tif
[2009/09/03 12:11:52 | 00,173,464 | ---- | C] () -- C:\wildthing_mamr77is.sis
[2009/09/03 12:11:52 | 00,160,428 | ---- | C] () -- C:\הדפסת פקס בעמוד מלא.tif
[2009/09/03 12:11:52 | 00,143,722 | ---- | C] () -- C:\www.expedia.com-pub-agent.tif
[2009/09/03 12:11:52 | 00,125,314 | ---- | C] () -- C:\הדפסת פקס בעמוד מלא0002.tif
[2009/09/03 12:11:52 | 00,097,156 | ---- | C] () -- C:\www.ebookers.com-book-bookingconfirmation.tif
[2009/09/03 12:11:52 | 00,093,696 | ---- | C] () -- C:\talkback.22.7.09.doc
[2009/09/03 12:11:52 | 00,093,696 | ---- | C] () -- C:\talkback.21.7.09.doc
[2009/09/03 12:11:52 | 00,086,518 | ---- | C] () -- C:\www.tandf.co.uk-journals-authors-style-layout-tf_1.tif
[2009/09/03 12:11:52 | 00,080,384 | ---- | C] () -- C:\המכללה האקדמית אשקלון. מבחנים פסיכופתו'.doc
[2009/09/03 12:11:52 | 00,058,912 | ---- | C] () -- C:\הדפסת פקס בעמוד מלא0001.tif
[2009/09/03 12:11:52 | 00,056,917 | ---- | C] () -- C:\The[1].Last.King.Of.Scotland[2006]DvDrip[Eng]-aXXo [mininova].torrent
[2009/09/03 12:11:52 | 00,045,568 | ---- | C] () -- C:\אלינה קורן - סטייה חברתית.doc
[2009/09/03 12:11:52 | 00,027,114 | ---- | C] () -- C:\www.zofim.org.il-pics-magazin-ishur%20horim.tif
[2009/09/03 12:11:52 | 00,026,624 | ---- | C] () -- C:\talkback.sydney.doc
[2009/09/03 12:11:52 | 00,019,886 | ---- | C] () -- C:\דוח א.tif
[2009/09/03 12:11:52 | 00,018,660 | ---- | C] () -- C:\הדפסת צילום עמוד מלא0001.tif
[2009/09/03 12:11:52 | 00,018,660 | ---- | C] () -- C:\הדפסת צילום עמוד מלא.tif
[2009/09/03 12:11:52 | 00,018,660 | ---- | C] () -- C:\הדפסת פקס בעמוד מלא0004.tif
[2009/09/03 12:11:52 | 00,014,434 | ---- | C] () -- C:\הדפסת פקס בעמוד מלא0003.tif
[2009/09/03 12:11:52 | 00,012,145 | ---- | C] () -- C:\Contagion plague.docx
[2009/09/03 12:11:52 | 00,011,980 | ---- | C] () -- C:\בס.docx
[2009/09/03 12:11:52 | 00,011,278 | ---- | C] () -- C:\בנוסף לסיטואציה המשמעתית בה נתקל עשהאל בנושא הזבל בשטח.docx
[2009/09/03 12:11:51 | 02,635,264 | ---- | C] () -- C:\תורת הענישה. ביבליוגרפיה. מתוקנת. מאי 2008.doc
[2009/09/03 12:11:51 | 01,067,520 | ---- | C] () -- C:\פרקים 5-3, 8 לעיון המחבר.doc
[2009/09/03 12:11:51 | 00,229,888 | ---- | C] () -- C:\פליטים. מאמר.doc
[2009/09/03 12:11:51 | 00,229,888 | ---- | C] () -- C:\סמינריון. סחר בנשים. עבודה סופית.doc
[2009/09/03 12:11:51 | 00,201,216 | ---- | C] () -- C:\שרית בגידה באינטרנט.doc
[2009/09/03 12:11:51 | 00,147,456 | ---- | C] () -- C:\סמינריון-נוער עבריין מבית חרדי.doc
[2009/09/03 12:11:51 | 00,093,832 | ---- | C] () -- C:\סמינריון. סחר בנשים. עבודה סופית.2.docx
[2009/09/03 12:11:51 | 00,074,752 | ---- | C] () -- C:\talkback.18.7.09.doc
[2009/09/03 12:11:51 | 00,072,669 | ---- | C] () -- C:\סמינריון-נוער עבריין מבית חרדי.docx
[2009/09/03 12:11:51 | 00,039,936 | ---- | C] () -- C:\talkback.16.7.09.doc
[2009/09/03 12:11:51 | 00,030,720 | ---- | C] () -- C:\פסיכופתולוגיה מועד ג.doc
[2009/09/03 12:11:51 | 00,024,064 | ---- | C] () -- C:\קאבאליון.סילבוס. פסיכופתולוגיה.doc
[2009/09/03 12:11:51 | 00,012,807 | ---- | C] () -- C:\שינוי מטלה.docx
[2009/09/03 12:11:50 | 00,307,200 | ---- | C] () -- C:\סמינריון- המתת חסד- סופי.doc
[2009/09/03 12:11:50 | 00,160,256 | ---- | C] () -- C:\satanism[1].not submitted.doc
[2009/09/03 12:11:50 | 00,133,850 | ---- | C] () -- C:\סמינריון- המתת חסד- סופי.2.docx
[2009/09/03 12:11:50 | 00,126,976 | ---- | C] () -- C:\sahar.doc
[2009/09/03 12:11:50 | 00,092,063 | ---- | C] () -- C:\סילבוס החברה הישראלית.rtf
[2009/09/03 12:11:50 | 00,064,512 | ---- | C] () -- C:\סילבוס אבהות שנת שביתה.doc
[2009/09/03 12:11:50 | 00,053,760 | ---- | C] () -- C:\סילבוס. סטיה מין ומגדר . תשע.doc
[2009/09/03 12:11:50 | 00,031,232 | ---- | C] () -- C:\סילבוס החברה הישראלית. תשע.doc
[2009/09/03 12:11:50 | 00,028,160 | ---- | C] () -- C:\סילבוס. חברה ישראלית.doc
[2009/09/03 12:11:50 | 00,027,136 | ---- | C] () -- C:\סילבוסים. פסיכופתולוגיה. 2008.doc
[2009/09/03 12:11:50 | 00,025,600 | ---- | C] () -- C:\סילבוסים. פסיכופתולוגיה. תשע.doc
[2009/09/03 12:11:50 | 00,024,186 | ---- | C] () -- C:\סילבוס. סטיה מין ומגדר 2008.docx
[2009/09/03 12:11:50 | 00,016,502 | ---- | C] () -- C:\סילבוס החברה הישראלית. 2008.docx
[2009/09/03 12:11:50 | 00,013,601 | ---- | C] () -- C:\סילבוסים. פסיכופתולוגיה. 2008.docx
[2009/09/03 12:11:50 | 00,013,372 | ---- | C] () -- C:\סילבוסים. פסיכופתולוגיה.docx
[2009/09/03 12:11:50 | 00,011,288 | ---- | C] () -- C:\מירושלים.docx
[2009/09/03 12:11:49 | 00,264,192 | ---- | C] () -- C:\ביבליוגרפיה.שוהם.doc
[2009/09/03 12:11:49 | 00,208,384 | ---- | C] () -- C:\Publication Idea Form.doc
[2009/09/03 12:11:49 | 00,198,656 | ---- | C] () -- C:\אורי תימור.doc
[2009/09/03 12:11:49 | 00,115,810 | ---- | C] () -- C:\qualitative%20sociolgy%20-%20proffs1.pdf
[2009/09/03 12:11:49 | 00,112,640 | ---- | C] () -- C:\טופס דוגמא למבנה סלבוס תשסט.doc
[2009/09/03 12:11:49 | 00,072,704 | ---- | C] () -- C:\the little princess.30.10.08(gabi).doc
[2009/09/03 12:11:49 | 00,054,941 | ---- | C] () -- C:\בדיחות שירה.docx
[2009/09/03 12:11:49 | 00,050,688 | ---- | C] () -- C:\דקל. תזה.doc
[2009/09/03 12:11:49 | 00,029,184 | ---- | C] () -- C:\ירושה.doc
[2009/09/03 12:11:49 | 00,026,017 | ---- | C] () -- C:\מאמו.docx
[2009/09/03 12:11:49 | 00,022,316 | ---- | C] () -- C:\המקרה המיוחד של ארצות הברית.docx
[2009/09/03 12:11:49 | 00,015,073 | ---- | C] () -- C:\היפיפיה הנרדמת.docx
[2009/09/03 12:11:49 | 00,014,414 | ---- | C] () -- C:\המכללה האקדמית אשקלון.docx
[2009/09/03 12:11:49 | 00,013,425 | ---- | C] () -- C:\מבוא.docx
[2009/09/03 12:11:49 | 00,012,754 | ---- | C] () -- C:\Trafficking in Women for Sex in a Glocal Contextabstract.docx
[2009/09/03 12:11:49 | 00,012,436 | ---- | C] () -- C:\אבי שלום.docx
[2009/09/03 12:11:49 | 00,012,138 | ---- | C] () -- C:\המכללה אקדמית אשקלון.docx
[2009/09/03 12:11:49 | 00,011,751 | ---- | C] () -- C:\אפרת שלום רב.docx
[2009/09/03 12:11:44 | 10,465,7543 | ---- | C] () -- C:\Over[1].The.Hedge.2006.DVDRip.XviD.Heb.Dubbed-ZiON-DiSHi-iL.NeT.part1.rar
[2009/09/03 12:11:44 | 00,073,366 | ---- | C] () -- C:\The Cultural Denial of Sexual Slavery.cavaglion.docx
[2009/09/03 12:11:44 | 00,052,257 | ---- | C] () -- C:\The Cultural Denial of Sexual Slavery.2 (נשמר אוטומטית).docx
[2009/09/03 12:11:44 | 00,022,528 | ---- | C] () -- C:\the denial. addictions..doc
[2009/09/03 12:11:43 | 10,076,540 | ---- | C] () -- C:\shoambook.26608gabi.rtf
[2009/09/03 12:11:43 | 01,707,583 | ---- | C] () -- C:\stya.JPG
[2009/09/03 12:11:43 | 01,204,495 | ---- | C] () -- C:\shoambook.26608gabi.docx
[2009/09/03 12:11:43 | 00,442,458 | ---- | C] () -- C:\meyda.education.gov.il...009-interni-arabs-MATHARB.tif
[2009/09/03 12:11:43 | 00,217,277 | ---- | C] () -- C:\proof reading.pdf
[2009/09/03 12:11:43 | 00,087,040 | ---- | C] () -- C:\princess and butterfly Eng.191008.doc
[2009/09/03 12:11:43 | 00,064,626 | ---- | C] () -- C:\scotland.docx
[2009/09/03 12:11:43 | 00,043,352 | ---- | C] () -- C:\The Cultural Denial of Sexual Slavery.2.docx
[2009/09/03 12:11:43 | 00,026,624 | ---- | C] () -- C:\princess and bibliography.doc
[2009/09/03 12:11:43 | 00,022,016 | ---- | C] () -- C:\The Cultural Denial of Sexual Slavery 28.3.08.doc
[2009/09/03 12:11:43 | 00,011,967 | ---- | C] () -- C:\The Cultural Denial of Sexual Slaver1.docx
[2009/09/03 12:11:41 | 34,819,584 | ---- | C] () -- C:\Presentation. satanism. cavaglion.ppt
[2009/09/03 12:11:41 | 00,559,616 | ---- | C] () -- C:\mally.2608.doc
[2009/09/03 12:11:41 | 00,399,884 | ---- | C] () -- C:\On the concept of moral panic -- Garland 4 (1) 9 -- Crime, Media, Culture.mht
[2009/09/03 12:11:41 | 00,281,088 | ---- | C] () -- C:\NPD6[1].doc
[2009/09/03 12:11:41 | 00,206,336 | ---- | C] () -- C:\MOTHERS. Contextualizing Rational Choice Theory.doc
[2009/09/03 12:11:41 | 00,134,656 | ---- | C] () -- C:\ParentsWhoKill_rev.helene.doc
[2009/09/03 12:11:41 | 00,125,952 | ---- | C] () -- C:\guidelines_for_reviewer_10_40.doc
[2009/09/03 12:11:41 | 00,100,114 | ---- | C] () -- C:\mothers who kill.5.08.pdf
[2009/09/03 12:11:41 | 00,095,744 | ---- | C] () -- C:\Presentation.3.cultural hero.doc
[2009/09/03 12:11:41 | 00,083,456 | ---- | C] () -- C:\mothers and fathers[2ES][1].last.doc
[2009/09/03 12:11:41 | 00,077,312 | ---- | C] () -- C:\mothers who kill_rev[1].march 2006.doc
[2009/09/03 12:11:41 | 00,074,240 | ---- | C] () -- C:\mothers who kill. cavaglion.doc
[2009/09/03 12:11:41 | 00,062,464 | ---- | C] () -- C:\nomipaper.doc
[2009/09/03 12:11:41 | 00,056,320 | ---- | C] () -- C:\PRESENTATION.3.MOTHERS.doc
[2009/09/03 12:11:41 | 00,048,128 | ---- | C] () -- C:\predators. 31409.doc
[2009/09/03 12:11:41 | 00,047,616 | ---- | C] () -- C:\predators. 31407.doc
[2009/09/03 12:11:41 | 00,041,984 | ---- | C] () -- C:\Pimstein.doc
[2009/09/03 12:11:41 | 00,038,400 | ---- | C] () -- C:\Noy[1].doc
[2009/09/03 12:11:41 | 00,031,232 | ---- | C] () -- C:\Letter to Gabi Cavilyon - RE Applicant to Hasava Program.doc
[2009/09/03 12:11:41 | 00,018,422 | ---- | C] () -- C:\permesso_uscita_marito.pdf
[2009/09/03 12:11:41 | 00,011,550 | ---- | C] () -- C:\Gabriel Cavaglion is social worker.docx
[2009/09/03 11:33:21 | 00,148,480 | ---- | C] () -- C:\Documents and Settings\מוריה\My Documents\fellinibook.3909.doc
[2009/09/03 09:21:18 | 00,100,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iecompat.dll
[2009/09/03 09:19:20 | 00,000,000 | ---D | C] -- C:\WINDOWS\ie8updates
[2009/09/03 09:18:14 | 00,012,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\xpshims.dll
[2009/09/03 09:18:13 | 11,067,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ieframe.dll
[2009/09/03 09:18:13 | 01,985,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iertutil.dll
[2009/09/03 09:18:13 | 00,594,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msfeeds.dll
[2009/09/03 09:18:13 | 00,246,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ieproxy.dll
[2009/09/03 09:18:13 | 00,055,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msfeedsbs.dll
[2009/09/03 09:17:02 | 00,000,000 | ---D | C] -- C:\WINDOWS\WBEM
[2009/09/03 09:14:17 | 00,000,000 | -H-D | C] -- C:\WINDOWS\ie8
[2009/09/03 07:47:55 | 00,027,014 | ---- | C] () -- C:\Documents and Settings\מוריה\My Documents\הדפסת פקס בעמוד מלא0009.tif
[2009/09/03 07:46:40 | 00,027,114 | ---- | C] () -- C:\Documents and Settings\מוריה\My Documents\C--Documents and Settings-......A9ILA7X0-ishur%20horim[1].tif
[2009/09/03 07:43:24 | 00,027,014 | ---- | C] () -- C:\Documents and Settings\מוריה\My Documents\הדפסת פקס בעמוד מלא0008.tif
[2009/09/02 15:25:17 | 00,000,000 | ---D | C] -- C:\Documents and Settings\מוריה\Application Data\dvdcss
[2009/09/02 15:24:52 | 00,000,000 | ---D | C] -- C:\Documents and Settings\מוריה\Application Data\vlc
[2009/09/02 15:24:07 | 00,000,719 | ---- | C] () -- C:\Documents and Settings\All Users\שולחן העבודה\VLC media player.lnk
[2009/09/02 15:23:48 | 00,000,000 | ---D | C] -- C:\Program Files\VideoLAN
[2009/09/02 06:17:48 | 00,027,014 | ---- | C] () -- C:\Documents and Settings\מוריה\My Documents\הדפסת פקס בעמוד מלא0007.tif
[2009/09/02 06:17:22 | 00,027,114 | ---- | C] () -- C:\Documents and Settings\מוריה\My Documents\צןפים.TIF
[2009/09/02 06:15:30 | 00,027,114 | ---- | C] () -- C:\Documents and Settings\מוריה\My Documents\www.zofim.org.il-pics-magazin-ishur%20horim0001.tif
[2009/09/01 17:37:44 | 00,173,056 | ---- | C] () -- C:\Documents and Settings\מוריה\My Documents\עבודת סמנריון-מין מגדר.doc
[2009/09/01 17:37:36 | 00,074,151 | ---- | C] () -- C:\Documents and Settings\מוריה\My Documents\עבודת סמנריון-מין מגדר.docx
[2009/09/01 08:54:51 | 00,000,162 | -H-- | C] () -- C:\Documents and Settings\מוריה\My Documents\~$ellini.doc
[2009/09/01 08:54:35 | 00,000,162 | -H-- | C] () -- C:\Documents and Settings\מוריה\My Documents\~$llinibook.1909.doc
[2009/09/01 08:54:34 | 00,148,992 | ---- | C] () -- C:\Documents and Settings\מוריה\My Documents\fellinibook.1909.doc
[2009/08/31 11:20:22 | 00,130,324 | ---- | C] () -- C:\Documents and Settings\מוריה\My Documents\84.95.5.230-uwc-webmail-msg_fs_lr0008.tif
[2009/08/30 11:13:20 | 00,023,040 | ---- | C] () -- C:\Documents and Settings\מוריה\My Documents\רשתי-תוספות.doc
[2009/08/27 19:12:06 | 00,076,672 | ---- | C] () -- C:\Documents and Settings\מוריה\My Documents\images.kidstv.co.il-files-imagecache-kids-285x-_scale_cr.tif
[2009/08/27 18:55:34 | 00,031,232 | ---- | C] () -- C:\Documents and Settings\מוריה\My Documents\malla.kathmandu.doc
[2009/08/27 18:54:23 | 00,021,500 | ---- | C] () -- C:\Documents and Settings\מוריה\My Documents\Document10008.tif
[2009/08/27 18:52:05 | 00,035,276 | ---- | C] () -- C:\Documents and Settings\מוריה\My Documents\www.secure-paiement-reservation.com-checkInVoucherSmall.tif
[2009/08/27 12:10:51 | 00,000,990 | ---- | C] () -- C:\Documents and Settings\מוריה\שולחן העבודה\downloads.bak
[2009/08/27 12:10:45 | 00,000,000 | ---D | C] -- C:\Documents and Settings\מוריה\שולחן העבודה\webserver
[2009/08/27 12:10:45 | 00,000,000 | ---D | C] -- C:\Documents and Settings\מוריה\שולחן העבודה\temp
[2009/08/27 12:10:45 | 00,000,000 | ---D | C] -- C:\Documents and Settings\מוריה\שולחן העבודה\skins
[2009/08/27 12:10:45 | 00,000,000 | ---D | C] -- C:\Documents and Settings\מוריה\שולחן העבודה\incoming
[2009/08/27 12:06:43 | 00,465,798 | ---- | C] () -- C:\Documents and Settings\מוריה\שולחן העבודה\IRIMG4.BMP
[2009/08/27 12:06:43 | 00,465,798 | ---- | C] () -- C:\Documents and Settings\מוריה\שולחן העבודה\IRIMG3.BMP
[2009/08/27 12:06:43 | 00,465,798 | ---- | C] () -- C:\Documents and Settings\מוריה\שולחן העבודה\IRIMG2.BMP
[2009/08/27 12:06:43 | 00,150,114 | ---- | C] () -- C:\Documents and Settings\מוריה\שולחן העבודה\IRIMG1.BMP
[2009/08/27 12:06:43 | 00,046,147 | ---- | C] () -- C:\Documents and Settings\מוריה\שולחן העבודה\IRIMG3.JPG
[2009/08/27 12:06:43 | 00,011,435 | ---- | C] () -- C:\Documents and Settings\מוריה\שולחן העבודה\IRIMG4.JPG
[2009/08/27 12:06:43 | 00,002,495 | ---- | C] () -- C:\Documents and Settings\מוריה\שולחן העבודה\IRIMG2.JPG
[2009/08/27 12:06:43 | 00,002,362 | ---- | C] () -- C:\Documents and Settings\מוריה\שולחן העבודה\IRIMG1.JPG
[2009/08/27 12:06:43 | 00,001,405 | ---- | C] () -- C:\Documents and Settings\All Users\שולחן העבודה\TLN eMule.lnk
[2009/08/27 12:06:42 | 00,000,000 | ---D | C] -- C:\Documents and Settings\מוריה\שולחן העבודה\WiN.ViSTA.Connections.eMule.Patch
[2009/08/27 12:06:41 | 00,000,000 | ---D | C] -- C:\Documents and Settings\מוריה\שולחן העבודה\wapserver
[2009/08/27 12:06:41 | 00,000,000 | ---D | C] -- C:\Documents and Settings\מוריה\שולחן העבודה\lang
[2009/08/27 12:06:41 | 00,000,000 | ---D | C] -- C:\Documents and Settings\מוריה\שולחן העבודה\config
[2009/08/27 12:06:40 | 00,093,064 | ---- | C] () -- C:\Documents and Settings\מוריה\שולחן העבודה\irunin.dat
[2009/08/27 12:06:40 | 00,020,330 | ---- | C] () -- C:\Documents and Settings\מוריה\שולחן העבודה\irunin.xml
[2009/08/27 12:06:40 | 00,000,000 | ---D | C] -- C:\WINDOWS\TLN eMule Booster MOD
[2009/08/26 11:35:14 | 00,075,264 | ---- | C] () -- C:\Documents and Settings\מוריה\My Documents\curriculum. september. 2009.hebrew.doc
[2009/08/25 14:00:07 | 00,178,558 | ---- | C] () -- C:\Documents and Settings\מוריה\My Documents\C--Documents and Settings-......on%20Cavaglion-Jungian[1].tif
[2009/08/25 07:59:26 | 00,123,468 | ---- | C] () -- C:\Documents and Settings\מוריה\My Documents\84.95.5.230-uwc-webmail-msg_fs_lr0007.tif
[2009/08/22 20:45:35 | 00,000,000 | ---D | C] -- C:\Documents and Settings\מוריה\My Documents\eMule AdunanzA
[2009/08/22 20:45:22 | 00,000,739 | ---- | C] () -- C:\Documents and Settings\מוריה\שולחן העבודה\eMule AdunanzA.lnk
[2009/08/22 20:45:00 | 00,000,000 | ---D | C] -- C:\Program Files\eMule AdunanzA
[2009/08/22 20:45:00 | 00,000,000 | ---D | C] -- C:\Documents and Settings\מוריה\Application Data\eMule AdunanzA
[2009/08/22 20:38:34 | 73,260,4416 | ---- | C] () -- C:\Documents and Settings\מוריה\שולחן העבודה\ARRIVEDERCI, AMORE CIAO M. Soavi.avi
[2009/08/22 20:37:34 | 73,393,9712 | ---- | C] () -- C:\Documents and Settings\מוריה\שולחן העבודה\LE CONSEGUENZE DELL'AMORE P. Sorrentino.avi
[2009/08/22 20:36:33 | 73,401,9584 | ---- | C] () -- C:\Documents and Settings\מוריה\שולחן העבודה\IO NON HO PAURA G. Salvatores.avi
[2009/08/22 20:35:33 | 73,494,5280 | ---- | C] () -- C:\Documents and Settings\מוריה\שולחן העבודה\COME DIO COMANDA G. Salvatores.avi
[2009/08/22 20:34:11 | 73,607,1680 | ---- | C] () -- C:\Documents and Settings\מוריה\שולחן העבודה\LA RAGAZZA DEL LAGO A. Molaioli.avi
[2009/08/22 20:33:40 | 00,000,038 | ---- | C] () -- C:\WINDOWS\MMVSource.INI
[2009/08/19 16:57:55 | 00,017,350 | ---- | C] () -- C:\Documents and Settings\מוריה\My Documents\84.95.5.230-uwc-webmail-attach-inv1976191.tif
[2009/08/18 11:23:20 | 00,099,310 | ---- | C] () -- C:\Documents and Settings\מוריה\My Documents\www.beitshmuel.com-index2.tif
[2009/08/18 11:17:45 | 00,016,110 | ---- | C] () -- C:\Documents and Settings\מוריה\My Documents\www.beitshmuel.com-MySite8-print_recipt.tif
[2009/08/16 18:50:10 | 00,000,000 | ---D | C] -- C:\Documents and Settings\מוריה\Local Settings\Application Data\Help
[2009/08/16 18:50:10 | 00,000,000 | ---D | C] -- C:\Documents and Settings\מוריה\Application Data\Help
[2009/08/15 22:37:29 | 00,019,834 | ---- | C] () -- C:\Documents and Settings\מוריה\My Documents\Document10007.tif
[2009/08/13 20:47:38 | 00,000,000 | ---D | C] -- C:\Documents and Settings\מוריה\Local Settings\Application Data\_
[2009/08/12 12:34:01 | 00,128,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dhtmled.ocx
[2009/08/12 12:33:51 | 01,315,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msoe.dll
[2009/08/03 15:07:42 | 00,403,816 | ---- | C] () -- C:\WINDOWS\System32\OGACheckControl.dll
[2008/12/17 23:47:35 | 00,077,824 | ---- | C] () -- C:\WINDOWS\System32\csdlocalmon.dll
[2008/11/04 14:32:22 | 00,000,034 | ---- | C] () -- C:\WINDOWS\ANCIENT SPIDER.INI
[2008/11/03 17:08:43 | 00,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2007/10/23 11:19:23 | 00,204,800 | R--- | C] () -- C:\WINDOWS\System32\igfxCoIn_v4837.dll
[2007/05/15 11:07:10 | 00,069,632 | ---- | C] () -- C:\WINDOWS\System32\CSD_IRIVER_GEN.DLL
[2004/09/21 13:43:48 | 00,000,716 | ---- | C] () -- C:\WINDOWS\win.ini
[2004/09/21 13:43:42 | 00,000,227 | ---- | C] () -- C:\WINDOWS\system.ini

========== Files - Modified Within 30 Days ==========

[4 C:\WINDOWS\System32\*.tmp files]
[4 C:\WINDOWS\*.tmp files]
[6 C:\Documents and Settings\מוריה\My Documents\*.tmp files]
[2009/09/07 17:39:01 | 00,000,767 | ---- | M] () -- C:\Documents and Settings\מוריה\תפריט התחלה\תוכניות\הפעלה\ERUNT AutoBackup.lnk
[2009/09/07 17:03:51 | 00,654,062 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI
[2009/09/07 17:03:51 | 00,314,644 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2009/09/07 17:03:51 | 00,250,286 | ---- | M] () -- C:\WINDOWS\System32\perfh00d.dat
[2009/09/07 17:03:51 | 00,040,972 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2009/09/07 17:03:51 | 00,040,956 | ---- | M] () -- C:\WINDOWS\System32\perfc00d.dat
[2009/09/07 16:59:35 | 00,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2009/09/07 16:59:18 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2009/09/07 16:59:16 | 00,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2009/09/07 16:58:29 | 04,386,848 | -HS- | M] () -- C:\WINDOWS\System32\drivers\fidbox.dat
[2009/09/07 16:58:29 | 00,630,816 | -HS- | M] () -- C:\WINDOWS\System32\drivers\fidbox2.dat
[2009/09/07 16:58:29 | 00,037,448 | -HS- | M] () -- C:\WINDOWS\System32\drivers\fidbox.idx
[2009/09/07 16:58:29 | 00,004,284 | -HS- | M] () -- C:\WINDOWS\System32\drivers\fidbox2.idx
[2009/09/07 16:56:35 | 00,002,361 | ---- | M] () -- C:\Documents and Settings\All Users\שולחן העבודה\Nero StartSmart Essentials.lnk
[2009/09/07 16:56:35 | 00,001,879 | ---- | M] () -- C:\Documents and Settings\All Users\שולחן העבודה\Nero Online Upgrade.lnk
[2009/09/07 16:54:45 | 00,001,436 | ---- | M] () -- C:\WINDOWS\Sandboxie.ini
[2009/09/07 16:44:15 | 00,000,766 | ---- | M] () -- C:\Documents and Settings\מוריה\שולחן העבודה\Sandboxed Web Browser.lnk
[2009/09/07 16:28:46 | 00,000,716 | ---- | M] () -- C:\WINDOWS\win.ini
[2009/09/07 16:28:46 | 00,000,227 | ---- | M] () -- C:\WINDOWS\system.ini
[2009/09/07 16:28:46 | 00,000,211 | -HS- | M] () -- C:\boot.ini
[2009/09/05 23:11:07 | 00,001,620 | ---- | M] () -- C:\Documents and Settings\מוריה\שולחן העבודה\Mozilla Firefox.lnk
[2009/09/05 23:03:05 | 00,364,912 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2009/09/05 21:59:07 | 00,000,780 | ---- | M] () -- C:\Documents and Settings\מוריה\שולחן העבודה\SUPERAntiSpyware Free Edition.lnk
[2009/09/05 21:34:45 | 00,000,000 | ---- | M] () -- C:\WINDOWS\nsreg.dat
[2009/09/04 10:05:45 | 00,040,108 | ---- | M] () -- C:\Documents and Settings\מוריה\My Documents\פרוייקט.docx
[2009/09/04 09:51:40 | 00,088,576 | ---- | M] () -- C:\Documents and Settings\מוריה\My Documents\פרוייקט.doc
[2009/09/04 09:32:28 | 00,002,463 | ---- | M] () -- C:\Documents and Settings\מוריה\שולחן העבודה\Microsoft Office Word 2007.lnk
[2009/09/03 11:33:22 | 00,148,480 | ---- | M] () -- C:\fellinibook.3909.doc
[2009/09/03 11:33:22 | 00,148,480 | ---- | M] () -- C:\Documents and Settings\מוריה\My Documents\fellinibook.3909.doc
[2009/09/03 09:21:17 | 00,001,355 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2009/09/03 07:47:55 | 00,027,014 | ---- | M] () -- C:\הדפסת פקס בעמוד מלא0009.tif
[2009/09/03 07:47:55 | 00,027,014 | ---- | M] () -- C:\Documents and Settings\מוריה\My Documents\הדפסת פקס בעמוד מלא0009.tif
[2009/09/03 07:46:40 | 00,027,114 | ---- | M] () -- C:\Documents and Settings\מוריה\My Documents\C--Documents and Settings-......A9ILA7X0-ishur%20horim[1].tif
[2009/09/03 07:46:40 | 00,027,114 | ---- | M] () -- C:\C--Documents and Settings-......A9ILA7X0-ishur%20horim[1].tif
[2009/09/03 07:43:24 | 00,027,014 | ---- | M] () -- C:\הדפסת פקס בעמוד מלא0008.tif
[2009/09/03 07:43:24 | 00,027,014 | ---- | M] () -- C:\Documents and Settings\מוריה\My Documents\הדפסת פקס בעמוד מלא0008.tif
[2009/09/02 15:24:07 | 00,000,719 | ---- | M] () -- C:\Documents and Settings\All Users\שולחן העבודה\VLC media player.lnk
[2009/09/02 15:18:10 | 00,000,069 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
[2009/09/02 06:17:48 | 00,027,014 | ---- | M] () -- C:\הדפסת פקס בעמוד מלא0007.tif
[2009/09/02 06:17:48 | 00,027,014 | ---- | M] () -- C:\Documents and Settings\מוריה\My Documents\הדפסת פקס בעמוד מלא0007.tif
[2009/09/02 06:17:22 | 00,027,114 | ---- | M] () -- C:\צןפים.TIF
[2009/09/02 06:17:22 | 00,027,114 | ---- | M] () -- C:\Documents and Settings\מוריה\My Documents\צןפים.TIF
[2009/09/02 06:15:30 | 00,027,114 | ---- | M] () -- C:\www.zofim.org.il-pics-magazin-ishur%20horim0001.tif
[2009/09/02 06:15:30 | 00,027,114 | ---- | M] () -- C:\Documents and Settings\מוריה\My Documents\www.zofim.org.il-pics-magazin-ishur%20horim0001.tif
[2009/09/01 17:37:45 | 00,173,056 | ---- | M] () -- C:\עבודת סמנריון-מין מגדר.doc
[2009/09/01 17:37:45 | 00,173,056 | ---- | M] () -- C:\Documents and Settings\מוריה\My Documents\עבודת סמנריון-מין מגדר.doc
[2009/09/01 17:37:36 | 00,074,151 | ---- | M] () -- C:\עבודת סמנריון-מין מגדר.docx
[2009/09/01 17:37:36 | 00,074,151 | ---- | M] () -- C:\Documents and Settings\מוריה\My Documents\עבודת סמנריון-מין מגדר.docx
[2009/09/01 10:57:40 | 00,148,992 | ---- | M] () -- C:\fellinibook.1909.doc
[2009/09/01 10:57:40 | 00,148,992 | ---- | M] () -- C:\Documents and Settings\מוריה\My Documents\fellinibook.1909.doc
[2009/09/01 08:54:51 | 00,000,162 | -H-- | M] () -- C:\Documents and Settings\מוריה\My Documents\~$ellini.doc
[2009/09/01 08:54:35 | 00,000,162 | -H-- | M] () -- C:\Documents and Settings\מוריה\My Documents\~$llinibook.1909.doc
[2009/08/31 11:20:22 | 00,130,324 | ---- | M] () -- C:\Documents and Settings\מוריה\My Documents\84.95.5.230-uwc-webmail-msg_fs_lr0008.tif
[2009/08/31 11:20:22 | 00,130,324 | ---- | M] () -- C:\84.95.5.230-uwc-webmail-msg_fs_lr0008.tif
[2009/08/30 11:13:20 | 00,023,040 | ---- | M] () -- C:\רשתי-תוספות.doc
[2009/08/30 11:13:20 | 00,023,040 | ---- | M] () -- C:\Documents and Settings\מוריה\My Documents\רשתי-תוספות.doc
[2009/08/29 21:24:44 | 00,000,038 | ---- | M] () -- C:\WINDOWS\MMVSource.INI
[2009/08/27 19:12:06 | 00,076,672 | ---- | M] () -- C:\images.kidstv.co.il-files-imagecache-kids-285x-_scale_cr.tif
[2009/08/27 19:12:06 | 00,076,672 | ---- | M] () -- C:\Documents and Settings\מוריה\My Documents\images.kidstv.co.il-files-imagecache-kids-285x-_scale_cr.tif
[2009/08/27 19:05:15 | 00,006,656 | ---- | M] () -- C:\Documents and Settings\מוריה\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009/08/27 18:55:35 | 00,031,232 | ---- | M] () -- C:\malla.kathmandu.doc
[2009/08/27 18:55:35 | 00,031,232 | ---- | M] () -- C:\Documents and Settings\מוריה\My Documents\malla.kathmandu.doc
[2009/08/27 18:54:23 | 00,021,500 | ---- | M] () -- C:\Documents and Settings\מוריה\My Documents\Document10008.tif
[2009/08/27 18:54:23 | 00,021,500 | ---- | M] () -- C:\Document10008.tif
[2009/08/27 18:52:05 | 00,035,276 | ---- | M] () -- C:\www.secure-paiement-reservation.com-checkInVoucherSmall.tif
[2009/08/27 18:52:05 | 00,035,276 | ---- | M] () -- C:\Documents and Settings\מוריה\My Documents\www.secure-paiement-reservation.com-checkInVoucherSmall.tif
[2009/08/27 13:24:17 | 00,000,990 | ---- | M] () -- C:\Documents and Settings\מוריה\שולחן העבודה\downloads.bak
[2009/08/27 12:06:57 | 00,020,330 | ---- | M] () -- C:\Documents and Settings\מוריה\שולחן העבודה\irunin.xml
[2009/08/27 12:06:43 | 00,001,405 | ---- | M] () -- C:\Documents and Settings\All Users\שולחן העבודה\TLN eMule.lnk
[2009/08/27 12:06:40 | 00,093,064 | ---- | M] () -- C:\Documents and Settings\מוריה\שולחן העבודה\irunin.dat
[2009/08/27 12:05:20 | 00,465,798 | ---- | M] () -- C:\Documents and Settings\מוריה\שולחן העבודה\IRIMG4.BMP
[2009/08/27 12:05:20 | 00,465,798 | ---- | M] () -- C:\Documents and Settings\מוריה\שולחן העבודה\IRIMG3.BMP
[2009/08/27 12:05:20 | 00,465,798 | ---- | M] () -- C:\Documents and Settings\מוריה\שולחן העבודה\IRIMG2.BMP
[2009/08/27 12:05:20 | 00,150,114 | ---- | M] () -- C:\Documents and Settings\מוריה\שולחן העבודה\IRIMG1.BMP
[2009/08/27 12:05:20 | 00,046,147 | ---- | M] () -- C:\Documents and Settings\מוריה\שולחן העבודה\IRIMG3.JPG
[2009/08/27 12:05:20 | 00,011,435 | ---- | M] () -- C:\Documents and Settings\מוריה\שולחן העבודה\IRIMG4.JPG
[2009/08/27 12:05:20 | 00,002,495 | ---- | M] () -- C:\Documents and Settings\מוריה\שולחן העבודה\IRIMG2.JPG
[2009/08/27 12:05:20 | 00,002,362 | ---- | M] () -- C:\Documents and Settings\מוריה\שולחן העבודה\IRIMG1.JPG
[2009/08/26 11:35:14 | 00,075,264 | ---- | M] () -- C:\Documents and Settings\מוריה\My Documents\curriculum. september. 2009.hebrew.doc
[2009/08/26 11:35:14 | 00,075,264 | ---- | M] () -- C:\curriculum. september. 2009.hebrew.doc
[2009/08/25 14:00:08 | 00,178,558 | ---- | M] () -- C:\Documents and Settings\מוריה\My Documents\C--Documents and Settings-......on%20Cavaglion-Jungian[1].tif
[2009/08/25 14:00:08 | 00,178,558 | ---- | M] () -- C:\C--Documents and Settings-......on%20Cavaglion-Jungian[1].tif
[2009/08/25 07:59:27 | 00,123,468 | ---- | M] () -- C:\Documents and Settings\מוריה\My Documents\84.95.5.230-uwc-webmail-msg_fs_lr0007.tif
[2009/08/25 07:59:27 | 00,123,468 | ---- | M] () -- C:\84.95.5.230-uwc-webmail-msg_fs_lr0007.tif
[2009/08/22 20:45:22 | 00,000,739 | ---- | M] () -- C:\Documents and Settings\מוריה\שולחן העבודה\eMule AdunanzA.lnk
[2009/08/19 16:57:55 | 00,017,350 | ---- | M] () -- C:\Documents and Settings\מוריה\My Documents\84.95.5.230-uwc-webmail-attach-inv1976191.tif
[2009/08/19 16:57:55 | 00,017,350 | ---- | M] () -- C:\84.95.5.230-uwc-webmail-attach-inv1976191.tif
[2009/08/18 11:23:20 | 00,099,310 | ---- | M] () -- C:\www.beitshmuel.com-index2.tif
[2009/08/18 11:23:20 | 00,099,310 | ---- | M] () -- C:\Documents and Settings\מוריה\My Documents\www.beitshmuel.com-index2.tif
[2009/08/18 11:17:45 | 00,016,110 | ---- | M] () -- C:\www.beitshmuel.com-MySite8-print_recipt.tif
[2009/08/18 11:17:45 | 00,016,110 | ---- | M] () -- C:\Documents and Settings\מוריה\My Documents\www.beitshmuel.com-MySite8-print_recipt.tif
[2009/08/15 22:37:29 | 00,019,834 | ---- | M] () -- C:\Documents and Settings\מוריה\My Documents\Document10007.tif
[2009/08/15 22:37:29 | 00,019,834 | ---- | M] () -- C:\Document10007.tif
[2009/08/12 19:48:42 | 00,022,016 | ---- | M] () -- C:\The Cultural Denial of Sexual Slavery 28.3.08.doc

========== Custom Scans ==========


< %SYSTEMDRIVE%\*.exe >
[2009/04/03 13:31:56 | 00,852,118 | ---- | M] (3rd Eye Solutions ) -- C:\בבל טרובל.exe

< %systemroot%\system32\eventlog.dll >
[2008/04/14 05:17:19 | 00,056,320 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\eventlog.dll
[4 C:\WINDOWS\system32\*.tmp files]

< %systemroot%\system32\scecli.dll >
[2008/04/14 05:17:28 | 00,183,808 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\scecli.dll
[4 C:\WINDOWS\system32\*.tmp files]

< %systemroot%\netlogon.dll >

< %systemroot%\system32\cngaudit.dll >

< %systemroot%\system32\sceclt.dll >

< %systemroot%\ntelogon.dll >

< %systemroot%\system32\logevent.dll >

========== Files - Unicode (All) ==========
[2008/11/04 23:34:34 | 00,011,680 | ---- | M] ()(C:\??????? ????.docx) -- C:\性格構會藉前索 链入页面.docx
[2009/08/13 20:06:32 | 00,000,427 | ---- | C] ()(C:\Documents and Settings\מוריה\שולחן העבודה\?????????????????????????L????????????) -- C:\Documents and Settings\מוריה\שולחן העבודה\㩃䑜䍏䵕繅就䔱䌳ㅾ䱜䍏䱁繓就敔灭呜偍㈱〵㠱ㄳ㈹⸲䵘L祍倠捩畴敲屳捓湡〰㄰琮晩
[2009/08/13 20:06:32 | 00,000,427 | ---- | M] ()(C:\Documents and Settings\מוריה\שולחן העבודה\?????????????????????????L????????????) -- C:\Documents and Settings\מוריה\שולחן העבודה\㩃䑜䍏䵕繅就䔱䌳ㅾ䱜䍏䱁繓就敔灭呜偍㈱〵㠱ㄳ㈹⸲䵘L祍倠捩畴敲屳捓湡〰㄰琮晩
[2009/09/03 12:11:52 | 00,011,680 | ---- | C] ()(C:\??????? ????.docx) -- C:\性格構會藉前索 链入页面.docx
< End of report >

OTL: Extras:
------------

OTL Extras logfile created on: 07/09/2009 17:49:00 - Run 1
OTL by OldTimer - Version 3.0.10.7 Folder = D:\_Software\_Diagnostics\OTL
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 0000040D | Country: ישראל | Language: HEB | Date Format: dd/MM/yyyy

1.99 Gb Total Physical Memory | 1.40 Gb Available Physical Memory | 70.30% Memory free
4.00 Gb Paging File | 4.00 Gb Available in Paging File | 100.00% Paging File free
Paging file location(s): D:\pagefile.sys 3096 3096 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 48.83 Gb Total Space | 24.79 Gb Free Space | 50.75% Space Free | Partition Type: NTFS
Drive D: | 100.21 Gb Total Space | 95.16 Gb Free Space | 94.96% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: ABCDE
Current User Name: מוריה
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html [@ = htmlfile] -- C:\Program Files\Internet Explorer\IEXPLORE.EXE (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring" = 1
"" =

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE" = C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook -- (Microsoft Corporation)
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE" = C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove -- (Microsoft Corporation)
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE" = C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote -- (Microsoft Corporation)
"%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation)
"C:\Program Files\eMule AdunanzA\eMule_AdnzA.exe" = C:\Program Files\eMule AdunanzA\eMule_AdnzA.exe:*:Disabled:eMule -- (http://www.emule-project.net)
"C:\Program Files\Common Files\Ahead\Nero Web\SetupX.exe" = C:\Program Files\Common Files\Ahead\Nero Web\SetupX.exe:*:Enabled:Nero ProductSetup -- (Nero AG)
"C:\Documents and Settings\מוריה\Local Settings\Temp\Nero Web\SetupXu.exe" = C:\Documents and Settings\מוריה\Local Settings\Temp\Nero Web\SetupXu.exe:*:Enabled:Nero ProductSetup -- File not found


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{10E1E87C-656C-4D08-86D6-5443D28583BE}" = TrayApp
"{13F00518-807A-4B3A-83B0-A7CD90F3A398}" = MarketResearch
"{1753255A-0AEB-4220-8C75-607B73F0C133}" = Copy
"{1B602410-D983-4947-98FE-EE749073D15E}" = GamingHarbor Toolbar
"{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = DVD Suite
"{29FA38B4-0AE4-4D0D-8A51-6165BB990BB0}" = WebReg
"{2F28B3C9-2C89-4206-8B33-8ADC9577C49B}" = Scan
"{350C97B4-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{487B0B9B-DCD4-440D-89A0-A6EDE1A545A3}" = HPSSupply
"{543E938C-BDC4-4933-A612-01293996845F}" = UnloadSupport
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{6580C5A3-2336-4EC5-85F1-3448C5F6208A}" = Kaspersky Anti-Virus 2009
"{66E6CE0C-5A1E-430C-B40A-0C90FF1804A8}" = eSupportQFolder
"{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = PowerDVD
"{6ECB39BD-73C2-44DD-B1A0-898207C58D8B}" = HP Photo and Imaging 2.0 - All-in-One Drivers
"{6F5E2F4A-377D-4700-B0E3-8F7F7507EA15}" = CustomerResearchQFolder
"{706BB40A-4102-4c89-8107-DC68C4EBD19B}" = HP Deskjet All-In-One Software 9.0
"{716E0306-8318-4364-8B8F-0CC4E9376BAC}" = MSXML 4.0 SP2 Parser and SDK
"{80AAD9DF-7E64-40D2-80D2-BECA41593EEB}" = AMT Media Manager
"{824D3839-DAA1-4315-A822-7AE3E620E528}" = VideoToolkit01
"{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-110287927}" = Ancient Spiders Solitaire
"{8389382B-53BA-4A87-8854-91E3D80A5AC7}" = HP Photosmart Essential2.01
"{8C6027FD-53DC-446D-BB75-CACD7028A134}" = HP Update
"{90120000-0010-040D-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders (Hebrew) 12
"{90120000-0011-0000-0000-0000000FF1CE}" = Microsoft Office Professional Plus 2007
"{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0015-040D-0000-0000000FF1CE}" = Microsoft Office Access MUI (Hebrew) 2007
"{90120000-0015-040D-0000-0000000FF1CE}_ENTERPRISER_{A5B40B57-F7E1-4C88-A3A4-D1E1C07F023F}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0015-040D-0000-0000000FF1CE}_PROPLUS_{A5B40B57-F7E1-4C88-A3A4-D1E1C07F023F}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0016-040D-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Hebrew) 2007
"{90120000-0016-040D-0000-0000000FF1CE}_ENTERPRISER_{A5B40B57-F7E1-4C88-A3A4-D1E1C07F023F}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0016-040D-0000-0000000FF1CE}_PROPLUS_{A5B40B57-F7E1-4C88-A3A4-D1E1C07F023F}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-040D-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Hebrew) 2007
"{90120000-0018-040D-0000-0000000FF1CE}_ENTERPRISER_{A5B40B57-F7E1-4C88-A3A4-D1E1C07F023F}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-040D-0000-0000000FF1CE}_PROPLUS_{A5B40B57-F7E1-4C88-A3A4-D1E1C07F023F}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0019-040D-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Hebrew) 2007
"{90120000-0019-040D-0000-0000000FF1CE}_ENTERPRISER_{A5B40B57-F7E1-4C88-A3A4-D1E1C07F023F}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0019-040D-0000-0000000FF1CE}_PROPLUS_{A5B40B57-F7E1-4C88-A3A4-D1E1C07F023F}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001A-040D-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Hebrew) 2007
"{90120000-001A-040D-0000-0000000FF1CE}_ENTERPRISER_{A5B40B57-F7E1-4C88-A3A4-D1E1C07F023F}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001A-040D-0000-0000000FF1CE}_PROPLUS_{A5B40B57-F7E1-4C88-A3A4-D1E1C07F023F}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-040D-0000-0000000FF1CE}" = Microsoft Office Word MUI (Hebrew) 2007
"{90120000-001B-040D-0000-0000000FF1CE}_ENTERPRISER_{A5B40B57-F7E1-4C88-A3A4-D1E1C07F023F}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-040D-0000-0000000FF1CE}_PROPLUS_{A5B40B57-F7E1-4C88-A3A4-D1E1C07F023F}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001F-0401-0000-0000000FF1CE}" = Microsoft Office Proof (Arabic) 2007
"{90120000-001F-0401-0000-0000000FF1CE}_ENTERPRISER_{14809F99-C601-4D4A-9391-F1E8FAA964C5}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0401-0000-0000000FF1CE}_PROPLUS_{14809F99-C601-4D4A-9391-F1E8FAA964C5}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISER_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}_PROPLUS_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_ENTERPRISER_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-040C-0000-0000000FF1CE}_PROPLUS_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-040D-0000-0000000FF1CE}" = Microsoft Office Proof (Hebrew) 2007
"{90120000-001F-040D-0000-0000000FF1CE}_ENTERPRISER_{D51DB996-6D46-4195-B495-5E96F61A3CB9}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-040D-0000-0000000FF1CE}_PROPLUS_{D51DB996-6D46-4195-B495-5E96F61A3CB9}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0419-0000-0000000FF1CE}" = Microsoft Office Proof (Russian) 2007
"{90120000-001F-0419-0000-0000000FF1CE}_ENTERPRISER_{57A92C5E-E76A-49CC-9EC2-A7B6CE1255EA}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0419-0000-0000000FF1CE}_PROPLUS_{57A92C5E-E76A-49CC-9EC2-A7B6CE1255EA}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-002C-040D-0000-0000000FF1CE}" = Microsoft Office Proofing (Hebrew) 2007
"{90120000-0044-040D-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Hebrew) 2007
"{90120000-0044-040D-0000-0000000FF1CE}_ENTERPRISER_{A5B40B57-F7E1-4C88-A3A4-D1E1C07F023F}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0044-040D-0000-0000000FF1CE}_PROPLUS_{A5B40B57-F7E1-4C88-A3A4-D1E1C07F023F}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}_ENTERPRISER_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-006E-040D-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Hebrew) 2007
"{90120000-006E-040D-0000-0000000FF1CE}_ENTERPRISER_{C4FDF834-B4AF-4B5E-8901-5146204B58CC}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-006E-040D-0000-0000000FF1CE}_PROPLUS_{C4FDF834-B4AF-4B5E-8901-5146204B58CC}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00A1-040D-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Hebrew) 2007
"{90120000-00A1-040D-0000-0000000FF1CE}_ENTERPRISER_{A5B40B57-F7E1-4C88-A3A4-D1E1C07F023F}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00BA-0409-0000-0000000FF1CE}" = Microsoft Office Groove MUI (English) 2007
"{90120000-00BA-0409-0000-0000000FF1CE}_ENTERPRISER_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0114-040D-0000-0000000FF1CE}" = Microsoft Office Groove Setup Metadata MUI (Hebrew) 2007
"{90120000-0114-040D-0000-0000000FF1CE}_ENTERPRISER_{A5B40B57-F7E1-4C88-A3A4-D1E1C07F023F}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{91120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{91120000-0030-0000-0000-0000000FF1CE}_ENTERPRISER_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{93F54611-2701-454e-94AB-623F458D9E6B}" = DeviceDiscovery
"{972B1D9B-0EAD-49E8-B7D6-3B83FD5665B1}" = Nokia Connectivity Cable Driver
"{9867A917-5D17-40DE-83BA-BEA5293194B1}" = HP Photo and Imaging 2.0 - All-in-One
"{A3FD0CA9-884F-4525-97B8-0AE6179302E6}" = F2100
"{A9C365A3-06C0-43b4-A2DB-EDF0A6079AA9}" = DJ_AIO_Software
"{AB5D51AE-EBC3-438D-872C-705C7C2084B0}" = DeviceManagementQFolder
"{AC76BA86-7AD7-1033-7B44-A81300000003}" = Adobe Reader 8.1.3
"{AEA07F97-9088-497c-8821-0F36BD5DC251}" = HPProductAssistant
"{AF7FC1CA-79DF-43c3-90A3-33EFEB9294CE}" = AIO_Scan
"{B2544A03-10D0-4E5E-BA69-0362FFC20D18}" = OGA Notifier 2.0.0048.0
"{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy
"{B4B1F18B-5CED-4f8f-8A8F-1BD0503C222E}" = DJ_AIO_ProductContext
"{BCD6CD1A-0DBE-412E-9F25-3B500D1E6BA1}" = SolutionCenter
"{C9BED750-1211-4480-B1A5-718A3BE15525}" = REALTEK GbE & FE Ethernet PCI-E NIC Driver
"{CDC7BEC8-D631-4e36-81D7-FC3689209AA6}" = F2100_Help
"{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}" = SUPERAntiSpyware Free Edition
"{D0E39A1D-0CEE-4D85-B4A2-E3BE990D075E}" = Destination Component
"{E2662C24-B31E-4349-A084-32EB76E8B760}" = BufferChm
"{E9C18EBD-85BE-47D0-AA73-3FEDCC976B04}" = Toolbox
"{EB48851B-96A4-489f-9F95-29F3731E9764}" = F2100_doccd
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F1E63043-54FC-429B-AB2C-31AF9FBA4BC7}" = 32 Bit HP CIO Components Installer
"{F56D6F46-1D62-4734-BF12-6457A1ED17BD}" = DJ_AIO_Software_min
"{F72E2DDC-3DB8-4190-A21D-63883D955FE7}" = PSSWCORE
"{F90D6825-8F1F-4E3A-9E42-A9C8A9DD1033}" = Nero 7 Essentials
"{FD8D8B04-BEAD-4A55-AA1D-62D2373E7DEA}" = Status
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"eMule AdunanzA" = AdunanzA
"ENTERPRISER" = Microsoft Office Enterprise 2007
"ERUNT_is1" = ERUNT 1.1j
"HDMI" = Intel® Graphics Media Accelerator Driver
"HP Imaging Device Functions" = HP Imaging Device Functions 9.0
"HP Photosmart Essential" = HP Photosmart Essential 2.01
"HP Solution Center & Imaging Support Tools" = HP Solution Center 9.0
"HPExtendedCapabilities" = HP Customer Participation Program 9.0
"ie8" = Windows Internet Explorer 8
"InstallWIX_{6580C5A3-2336-4EC5-85F1-3448C5F6208A}" = Kaspersky Anti-Virus 2009
"iriver Firmware Updater" = iriver Firmware Updater (remove only)
"iriver plus 3" = iriver plus 3 (remove only)
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Movie Converter" = Movie Converter (remove only)
"Mozilla Firefox (3.5.2)" = Mozilla Firefox (3.5.2)
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"OtiotPele_is1" = OtiotPele 1.0
"PROPLUS" = Microsoft Office Professional Plus 2007
"Sandboxie" = Sandboxie 3.38
"TLN eMule Booster MOD" = TLN eMule Booster MOD
"VLC media player" = VLC media player 1.0.1
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"Windows XP Service Pack" = Windows XP Service Pack 3
"WinRAR archiver" = WinRAR archiver
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 04/09/2009 02:01:41 | Computer Name = ABCDE | Source = Application Error | ID = 1000
Description = ‏‏תקלה ביישום iexplore.exe, גירסה 8.0.6001.18702, תקלה במודול npieaddon.dll,
גירסה 3.6.2.4500, כתובת התקלה 0x0000b8e7‏.

Error - 04/09/2009 03:07:15 | Computer Name = ABCDE | Source = Application Error | ID = 1000
Description = ‏‏תקלה ביישום iexplore.exe, גירסה 8.0.6001.18702, תקלה במודול npieaddon.dll,
גירסה 3.6.2.4500, כתובת התקלה 0x0000b8e7‏.

Error - 04/09/2009 03:12:11 | Computer Name = ABCDE | Source = Application Error | ID = 1001
Description = ‏‏Bucket של תקלה 1412788706.

Error - 04/09/2009 05:24:43 | Computer Name = ABCDE | Source = Application Error | ID = 1000
Description = ‏‏תקלה ביישום iexplore.exe, גירסה 8.0.6001.18702, תקלה במודול npieaddon.dll,
גירסה 3.6.2.4500, כתובת התקלה 0x0000b8e7‏.

Error - 04/09/2009 08:38:18 | Computer Name = ABCDE | Source = Application Error | ID = 1000
Description = ‏‏תקלה ביישום iexplore.exe, גירסה 8.0.6001.18702, תקלה במודול npieaddon.dll,
גירסה 3.6.2.4500, כתובת התקלה 0x0000b8e7‏.

Error - 04/09/2009 11:00:00 | Computer Name = ABCDE | Source = Application Error | ID = 1000
Description = ‏‏תקלה ביישום iexplore.exe, גירסה 8.0.6001.18702, תקלה במודול npieaddon.dll,
גירסה 3.6.2.4500, כתובת התקלה 0x0000b8e7‏.

Error - 04/09/2009 11:21:40 | Computer Name = ABCDE | Source = Application Error | ID = 1000
Description = ‏‏תקלה ביישום iexplore.exe, גירסה 8.0.6001.18702, תקלה במודול npieaddon.dll,
גירסה 3.6.2.4500, כתובת התקלה 0x0000b8e7‏.

Error - 05/09/2009 14:28:21 | Computer Name = ABCDE | Source = Application Hang | ID = 1002
Description = ‏‏יישום לא מגיב iexplore.exe, גירסה 8.0.6001.18702, מודול חוסר תגובה
hungapp, גירסה 0.0.0.0, כתובת חוסר תגובה 0x00000000‏.

Error - 05/09/2009 16:36:45 | Computer Name = ABCDE | Source = Application Error | ID = 1000
Description = ‏‏תקלה ביישום explorer.exe, גירסה 6.0.2900.5512, תקלה במודול medialibrarynse.dll,
גירסה 1.5.13.0, כתובת התקלה 0x000082a2‏.

Error - 07/09/2009 09:38:06 | Computer Name = ABCDE | Source = MsiInstaller | ID = 10005
Description = Product: Nero 7 Essentials -- Error 2228.Database: . Unknown table
'ComponentCT' in SQL query: SELECT Component.Component, Component.ComponentId,
Component.Directory_, Component.Attributes, Component.Condition, Component.KeyPath,
ComponentCT.Misc, ComponentCT.OrigName, File.File, File.FileName, File.FileSize,
File.Version, File.Language, File.Attributes, File.Sequence, FileCT.MD5 FROM Component,
ComponentCT, File, FileCT WHERE( (Component.Component = File.Component_) AND (Component.Component
= ComponentCT.Component) AND (File.File = FileCT.File)) ORDER BY Component.Component.

[ OSession Events ]
Error - 08/12/2008 14:28:41 | Computer Name = ABCDE | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 44446
seconds with 14400 seconds of active time. This session ended with a crash.

Error - 09/12/2008 14:18:24 | Computer Name = ABCDE | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 9238
seconds with 5340 seconds of active time. This session ended with a crash.

Error - 22/12/2008 14:24:52 | Computer Name = ABCDE | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 41906
seconds with 14520 seconds of active time. This session ended with a crash.

Error - 03/02/2009 08:54:46 | Computer Name = ABCDE | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 108690
seconds with 2220 seconds of active time. This session ended with a crash.

Error - 16/02/2009 14:25:51 | Computer Name = ABCDE | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 35127
seconds with 3240 seconds of active time. This session ended with a crash.

Error - 23/02/2009 13:59:50 | Computer Name = ABCDE | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 3, Application Name: Microsoft Office PowerPoint, Application
Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session
lasted 37467 seconds with 180 seconds of active time. This session ended with a
crash.

Error - 18/03/2009 14:44:11 | Computer Name = ABCDE | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 22469
seconds with 540 seconds of active time. This session ended with a crash.

Error - 12/07/2009 03:03:45 | Computer Name = ABCDE | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
12.0.6504.5000, Microsoft Office Version: 12.0.6215.1000. This session lasted 4
seconds with 0 seconds of active time. This session ended with a crash.

Error - 12/07/2009 03:03:55 | Computer Name = ABCDE | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
12.0.6504.5000, Microsoft Office Version: 12.0.6215.1000. This session lasted 4
seconds with 0 seconds of active time. This session ended with a crash.

Error - 12/07/2009 03:04:02 | Computer Name = ABCDE | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
12.0.6504.5000, Microsoft Office Version: 12.0.6215.1000. This session lasted 7
seconds with 0 seconds of active time. This session ended with a crash.

[ System Events ]
Error - 26/08/2009 09:14:33 | Computer Name = ABCDE | Source = Cdrom | ID = 262151
Description = ‏‏בהתקן \Device\CdRom0 נמצא בלוק פגום.

Error - 26/08/2009 09:14:39 | Computer Name = ABCDE | Source = Cdrom | ID = 262151
Description = ‏‏בהתקן \Device\CdRom0 נמצא בלוק פגום.

Error - 26/08/2009 09:14:45 | Computer Name = ABCDE | Source = Cdrom | ID = 262151
Description = ‏‏בהתקן \Device\CdRom0 נמצא בלוק פגום.

Error - 26/08/2009 09:14:51 | Computer Name = ABCDE | Source = Cdrom | ID = 262151
Description = ‏‏בהתקן \Device\CdRom0 נמצא בלוק פגום.

Error - 26/08/2009 09:14:57 | Computer Name = ABCDE | Source = Cdrom | ID = 262151
Description = ‏‏בהתקן \Device\CdRom0 נמצא בלוק פגום.

Error - 26/08/2009 09:15:04 | Computer Name = ABCDE | Source = Cdrom | ID = 262151
Description = ‏‏בהתקן \Device\CdRom0 נמצא בלוק פגום.

Error - 26/08/2009 09:15:10 | Computer Name = ABCDE | Source = Cdrom | ID = 262151
Description = ‏‏בהתקן \Device\CdRom0 נמצא בלוק פגום.

Error - 26/08/2009 09:15:16 | Computer Name = ABCDE | Source = Cdrom | ID = 262151
Description = ‏‏בהתקן \Device\CdRom0 נמצא בלוק פגום.

Error - 26/08/2009 09:15:22 | Computer Name = ABCDE | Source = Cdrom | ID = 262151
Description = ‏‏בהתקן \Device\CdRom0 נמצא בלוק פגום.

Error - 26/08/2009 09:15:35 | Computer Name = ABCDE | Source = Cdrom | ID = 262151
Description = ‏‏בהתקן \Device\CdRom0 נמצא בלוק פגום.


< End of report >

=======================================================================

Please let me know if any malware is causing the problem.

Thanks you very much,
G. Cavallion.
  • 0

Advertisements







Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP