Jump to content

Free help from tech experts
Welcome to Geeks to Go forums. Create a FREE account now to gain access to all our features. Once registered and logged in, you will be able to create topics, post replies to existing topics, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more. Best of all, registration and all assistance is 100% free! This message, and all ads will be removed once you sign in.
Create an Account Login to Account

Windows Update not working and Search Engine hijacked [Solved]


  • This topic is locked This topic is locked

#16
Babine

Babine

    Member

  • Member
  • PipPip
  • 58 posts
I followed all the instructions, and the scan starts, but before like anything actually gets scanned, the system reboots. I have retried doing the scan, but same result. And when it restarts the computer, I can no longer run windows normally and have to click on the last configured mode that worked.
  • 0

Similar Topics: Windows Update not working and Search Engine hijacked [Solved]     x


#17
azarl

azarl

    GeekU Teacher

  • GeekU Moderator
  • 20,069 posts
Is it running now?
  • 0

#18
Babine

Babine

    Member

  • Member
  • PipPip
  • 58 posts
No, I just did the instructions again, and the same results. The computer will restart.
  • 0

#19
azarl

azarl

    GeekU Teacher

  • GeekU Moderator
  • 20,069 posts
Try this:

OTM
Please download OTM
  • Save it to your desktop.
  • Please double-click OTM to run it. (Note: If you are running on Vista, right-click on the file and choose Run As Administrator).
  • Copy the lines in the codebox below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose Copy):
    :Processes
    explorer.exe
    
    :Files
    C:\WINDOWS\system32\drivers\atapi.sys | C:\atapi.sys |/replace
    
    :Commands[purity]
    [emptytemp]
    [Reboot]
  • Return to OTM, right click in the "Paste Instructions for Items to be Moved" window (under the yellow bar) and choose Paste.
  • Click the red Moveit! button.
  • Copy everything in the Results window (under the green bar) to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose copy), and paste it in your next reply.
  • Close OTM and reboot your PC.
Note: If a file or folder cannot be moved immediately you may be asked to reboot the machine to finish the move process. If you are asked to reboot the machine choose Yes. In this case, after the reboot, open Notepad (Start->All Programs->Accessories->Notepad), click File->Open, in the File Name box enter *.log and press the Enter key, navigate to the C:\_OTMoveIt\MovedFiles folder, and open the newest .log file present, and copy/paste the contents of that document back here in your next post.
  • 0

#20
Babine

Babine

    Member

  • Member
  • PipPip
  • 58 posts
All processes killed
========== PROCESSES ==========
No active process named explorer.exe was found!
========== FILES ==========
File C:\atapi.sys | not found.
Error: Unable to interpret <:Commands[purity]> in the current context!
Error: Unable to interpret <[emptytemp]> in the current context!
Error: Unable to interpret <[Reboot]> in the current context!

OTM by OldTimer - Version 3.1.10.1 log created on 04102010_092939
  • 0

#21
azarl

azarl

    GeekU Teacher

  • GeekU Moderator
  • 20,069 posts
» Step 1 «
Run OTL
  • Under the Custom Scans/Fixes box at the bottom, paste in the following

    :Processes 
    
    :Services
    
    :Files
    C:\WINDOWS\Driver Cache\i386\sp3.cab:atapi.sys /E
    
    :Commands
    [purity]
    [emptytemp]
    
    [Reboot]
  • Then click the Run Fix button at the top
  • Let the program run unhindered, reboot the PC when it is done
  • Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.
» Step 2 «
Using windows explorer please check C:\ and confirm that C:\atapi.sys is present

If so...

» Step 3 «
Please run OTM again
  • Please double-click OTM to run it. (Note: If you are running on Vista, right-click on the file and choose Run As Administrator).
  • Copy the lines in the codebox below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose Copy):
    :Processes
    explorer.exe
    
    :Files
    C:\WINDOWS\system32\drivers\atapi.sys | C:\atapi.sys |/replace
    
    :Commands[purity]
    [emptytemp]
    [Reboot]
  • Return to OTM, right click in the "Paste Instructions for Items to be Moved" window (under the yellow bar) and choose Paste.
  • Click the red Moveit! button.
  • Copy everything in the Results window (under the green bar) to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose copy), and paste it in your next reply.
  • Close OTM and reboot your PC.
Note: If a file or folder cannot be moved immediately you may be asked to reboot the machine to finish the move process. If you are asked to reboot the machine choose Yes. In this case, after the reboot, open Notepad (Start->All Programs->Accessories->Notepad), click File->Open, in the File Name box enter *.log and press the Enter key, navigate to the C:\_OTMoveIt\MovedFiles folder, and open the newest .log file present, and copy/paste the contents of that document back here in your next post.
  • 0

#22
Babine

Babine

    Member

  • Member
  • PipPip
  • 58 posts
OTL logfile created on: 4/10/2010 8:47:01 PM - Run 6
OTL by OldTimer - Version 3.2.1.0 Folder = C:\Documents and Settings\Henry\Desktop\New Folder (3)
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.5512)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

2.00 Gb Total Physical Memory | 1.00 Gb Available Physical Memory | 68.00% Memory free
4.00 Gb Paging File | 3.00 Gb Available in Paging File | 86.00% Paging File free
Paging file location(s): c:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 298.09 Gb Total Space | 275.84 Gb Free Space | 92.54% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: HENRYLAU
Current User Name: Henry
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: On
Skip Microsoft Files: On
File Age = 14 Days
Output = Standard
Quick Scan

========== Processes (SafeList) ==========

PRC - [2010/04/07 16:19:35 | 000,561,664 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Henry\Desktop\New Folder (3)\OTL.exe
PRC - [2010/04/02 14:13:41 | 000,910,296 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2010/03/26 01:09:58 | 010,358,568 | ---- | M] (Apple Inc.) -- C:\Program Files\iTunes\iTunes.exe
PRC - [2010/03/19 10:49:20 | 000,144,672 | ---- | M] (Apple Inc.) -- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
PRC - [2010/03/09 03:24:10 | 002,769,336 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast5\AvastUI.exe
PRC - [2010/03/09 03:24:08 | 000,040,384 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
PRC - [2009/11/22 15:44:16 | 002,384,240 | ---- | M] (Check Point Software Technologies LTD) -- C:\WINDOWS\system32\ZoneLabs\vsmon.exe
PRC - [2009/11/22 15:42:50 | 001,037,192 | ---- | M] (Check Point Software Technologies LTD) -- C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
PRC - [2009/10/26 21:42:42 | 000,718,232 | ---- | M] (Pelmorex Media Inc.) -- C:\Documents and Settings\Henry\Local Settings\Application Data\TheWeatherNetwork\WeatherEye\WeatherEye.exe
PRC - [2009/05/27 03:27:04 | 029,262,680 | ---- | M] (Microsoft Corporation) -- c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
PRC - [2009/02/06 17:07:48 | 000,027,512 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Live\Contacts\wlcomm.exe
PRC - [2008/11/24 22:31:12 | 000,087,904 | ---- | M] (Microsoft Corporation) -- c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
PRC - [2008/11/24 22:31:08 | 000,239,968 | ---- | M] (Microsoft Corporation) -- c:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe
PRC - [2008/04/14 05:00:00 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe


========== Modules (SafeList) ==========

MOD - [2010/04/07 16:19:35 | 000,561,664 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Henry\Desktop\New Folder (3)\OTL.exe


========== Win32 Services (SafeList) ==========

SRV - [2010/03/19 10:49:20 | 000,144,672 | ---- | M] (Apple Inc.) [Auto | Running] -- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe -- (Apple Mobile Device)
SRV - [2010/03/09 03:24:08 | 000,040,384 | ---- | M] (ALWIL Software) [On_Demand | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Web Scanner)
SRV - [2010/03/09 03:24:08 | 000,040,384 | ---- | M] (ALWIL Software) [On_Demand | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Mail Scanner)
SRV - [2010/03/09 03:24:08 | 000,040,384 | ---- | M] (ALWIL Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Antivirus)
SRV - [2009/11/22 15:44:16 | 002,384,240 | ---- | M] (Check Point Software Technologies LTD) [Auto | Running] -- C:\WINDOWS\System32\ZoneLabs\vsmon.exe -- (vsmon)
SRV - [2009/05/27 03:27:04 | 029,262,680 | ---- | M] (Microsoft Corporation) [Auto | Running] -- c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe -- (MSSQL$SQLEXPRESS) SQL Server (SQLEXPRESS)
SRV - [2008/11/24 22:31:12 | 000,087,904 | ---- | M] (Microsoft Corporation) [Auto | Running] -- c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe -- (SQLWriter)
SRV - [2008/11/24 22:31:08 | 000,239,968 | ---- | M] (Microsoft Corporation) [Auto | Running] -- c:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe -- (SQLBrowser)
SRV - [2008/11/24 22:31:08 | 000,045,408 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- c:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe -- (MSSQLServerADHelper)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.eset.com/online-scanner#
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 1
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=127.0.0.1:5555

========== FireFox ==========

FF - prefs.js..browser.search.selectedEngine: "Wikipedia (en)"
FF - prefs.js..browser.startup.homepage: "www.sympatico.msn.ca"
FF - prefs.js..extensions.enabledItems: SkipScreen@SkipScreen:0.4.7amo
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: noia2_option@kk.noia:3.76
FF - prefs.js..extensions.enabledItems: browserhighlighter@ebay.com:1.0
FF - prefs.js..extensions.enabledItems: {d8c77b75-d01d-cd98-1b00-c1fb57b20e1e}:4.6.6.6
FF - prefs.js..extensions.enabledItems: {9f08cb5a-76b1-4bcf-aff9-90e1a5d60b1e}:3.76


FF - HKLM\software\mozilla\Mozilla Firefox 3.6.3\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010/04/02 14:13:44 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.3\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010/04/02 14:13:44 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird

[2009/10/11 20:47:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Henry\Application Data\Mozilla\Extensions
[2009/10/11 20:47:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Henry\Application Data\Mozilla\Extensions\mozswing@mozswing.org
[2010/04/10 19:54:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\4ovd82lm.default\extensions
[2009/09/02 07:44:34 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\4ovd82lm.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010/04/03 19:44:27 | 000,000,000 | ---D | M] (Noia 2.0 (eXtreme)) -- C:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\4ovd82lm.default\extensions\{9f08cb5a-76b1-4bcf-aff9-90e1a5d60b1e}
[2010/04/03 19:44:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\4ovd82lm.default\extensions\noia2_option@kk.noia
[2010/04/03 19:44:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\4ovd82lm.default\extensions\SkipScreen@SkipScreen
[2009/11/12 18:55:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Henry\Application Data\Mozilla\Sunbird\Profiles\srg3s7iq.default\extensions
[2010/04/10 19:54:50 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions
[2010/04/06 15:38:47 | 000,000,000 | ---D | M] (z) -- C:\Program Files\Mozilla Firefox\extensions\{d8c77b75-d01d-cd98-1b00-c1fb57b20e1e}
[2010/04/10 20:45:30 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions\browserhighlighter@ebay.com
[2010/04/03 23:06:01 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions\browserhighlighter@ebay.com-trash

O1 HOSTS File: ([2010/04/02 15:53:34 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
O3 - HKLM\..\Toolbar: (no name) - {472734EA-242A-422B-ADF8-83D1E48CC825} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - No CLSID value found.
O4 - HKLM..\Run: [avast5] C:\Program Files\Alwil Software\Avast5\AvastUI.exe (ALWIL Software)
O4 - HKLM..\Run: [ZoneAlarm Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe (Check Point Software Technologies LTD)
O4 - HKCU..\Run: [WeatherEye] C:\Documents and Settings\Henry\Local Settings\Application Data\TheWeatherNetwork\WeatherEye\WeatherEye.exe (Pelmorex Media Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Advanced\Folder\Hidden\SHOWALL: CheckedValue = 1
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Advanced\Folder\Hidden\SHOWALL: CheckedValue = 1
O8 - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation)
O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://go.microsoft....k/?linkid=39204 (Windows Genuine Advantage Validation Tool)
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} http://cdn.scan.onec...lscbase6087.cab (Windows Live Safety Center Base Module)
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset...lineScanner.cab (Reg Error: Key error.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_19)
O16 - DPF: {CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_19)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_19)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload.ma...ash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 64.59.144.90 64.59.144.91
O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll - C:\WINDOWS\System32\igfxdev.dll (Intel Corporation)
O24 - Desktop WallPaper: C:\Documents and Settings\Henry\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Henry\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/02/03 04:50:11 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKCU\...exe [@ = exefile] -- Reg Error: Key error. File not found

========== Files/Folders - Created Within 14 Days ==========

[2010/04/10 16:07:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Henry\Local Settings\Application Data\frkbpvnxn
[2010/04/10 09:29:39 | 000,000,000 | ---D | C] -- C:\_OTM
[2010/04/10 09:28:25 | 000,510,464 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Henry\Desktop\OTM.exe
[2010/04/10 08:55:23 | 000,000,000 | --SD | C] -- C:\ComboFix
[2010/04/08 19:10:19 | 000,000,000 | ---D | C] -- C:\_OTL
[2010/04/08 19:07:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Henry\Desktop\GooredFix Backups
[2010/04/08 18:59:54 | 000,070,858 | ---- | C] (jpshortstuff) -- C:\Documents and Settings\Henry\Desktop\GooredFix.exe
[2010/04/07 16:50:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Henry\Desktop\New Folder (3)
[2010/04/07 11:56:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft
[2010/04/04 22:11:02 | 000,000,000 | ---D | C] -- C:\HelpAsst_backup
[2010/04/04 17:53:50 | 000,178,000 | ---- | C] (Kaspersky Lab) -- C:\Documents and Settings\Henry\Desktop\TDSSKiller.exe
[2010/04/04 11:10:59 | 000,019,024 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswFsBlk.sys
[2010/04/04 11:10:58 | 000,162,640 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswSP.sys
[2010/04/04 11:10:57 | 000,023,376 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswRdr.sys
[2010/04/04 11:10:56 | 000,046,672 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswTdi.sys
[2010/04/04 11:10:55 | 000,100,432 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswmon2.sys
[2010/04/04 11:10:55 | 000,094,800 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswmon.sys
[2010/04/04 11:10:54 | 000,028,880 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aavmker4.sys
[2010/04/04 11:10:46 | 000,153,184 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\aswBoot.exe
[2010/04/04 11:10:46 | 000,038,848 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\avastSS.scr
[2010/04/04 11:10:44 | 000,000,000 | ---D | C] -- C:\Program Files\Alwil Software
[2010/04/04 11:10:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Alwil Software
[2010/04/04 11:00:09 | 000,000,000 | ---D | C] -- C:\Program Files\ERUNT
[2010/04/03 23:31:43 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\CatRoot2
[2010/04/03 23:00:58 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Henry\My Documents\ForceField Shared Files
[2010/04/03 23:00:58 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Henry\Application Data\CheckPoint
[2010/04/03 23:00:50 | 000,000,000 | ---D | C] -- C:\Program Files\CheckPoint
[2010/04/03 23:00:44 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\ZoneLabs
[2010/04/03 23:00:43 | 000,000,000 | ---D | C] -- C:\Program Files\Zone Labs
[2010/04/03 23:00:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\Internet Logs
[2010/04/03 22:59:42 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Henry\Desktop\Anti-Virus
[2010/04/03 22:55:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Henry\My Documents\Simply Super Software
[2010/04/03 22:43:05 | 000,000,000 | -HSD | C] -- C:\RECYCLER
[2010/04/03 22:03:30 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Henry\Local Settings\Application Data\Graboid_Inc
[2010/04/03 22:03:20 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Henry\Application Data\MozillaControl
[2010/04/03 22:03:19 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Henry\Local Settings\Application Data\Graboid
[2010/04/03 22:01:45 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla ActiveX Control v1.7.12
[2010/04/03 21:58:55 | 000,000,000 | ---D | C] -- C:\Program Files\Graboid
[2010/04/03 20:31:02 | 000,000,000 | ---D | C] -- C:\Program Files\SpywareBlaster
[2010/04/03 17:21:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Application Data\AdobeUM
[2010/04/03 17:20:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Adobe
[2010/04/02 18:45:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Local Settings\Application Data\iklphushm
[2010/04/02 15:52:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\temp
[2010/04/02 15:21:15 | 000,000,000 | RHSD | C] -- C:\cmdcons
[2010/04/02 15:17:05 | 000,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe
[2010/04/02 15:17:05 | 000,161,792 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe
[2010/04/02 15:17:05 | 000,136,704 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe
[2010/04/02 15:17:05 | 000,031,232 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe
[2010/04/02 15:16:59 | 000,000,000 | ---D | C] -- C:\WINDOWS\ERDNT
[2010/04/02 15:11:53 | 000,000,000 | ---D | C] -- C:\Qoobox
[2010/04/02 15:07:04 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java
[2010/04/02 15:07:00 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Sun
[2010/04/02 15:06:39 | 000,000,000 | ---D | C] -- C:\Program Files\Sun
[2010/04/02 15:01:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Local Settings\Application Data\qsexfthui
[2010/04/02 14:23:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Application Data\Adobe
[2010/04/02 13:36:40 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2010/04/02 13:36:38 | 000,020,824 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2010/04/02 13:36:38 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2010/04/01 23:30:25 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Henry\Local Settings\Application Data\ESET
[2010/04/01 22:59:39 | 000,050,376 | ---- | C] (Prevx) -- C:\WINDOWS\System32\drivers\pxrts.sys
[2010/04/01 22:59:32 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\PrevxCSI
[2010/04/01 21:10:22 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Live Safety Center
[2010/04/01 21:05:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Local Settings\Application Data\ESET
[2010/04/01 20:58:17 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\ESET
[2010/04/01 18:57:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Henry\Local Settings\Application Data\WMTools Downloaded Files
[2010/04/01 18:47:48 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Documents\My Videos
[2010/04/01 18:38:21 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Henry\Desktop\Soft Product
[2010/03/31 21:17:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Application Data\Macromedia
[2010/03/31 20:41:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Application Data\Adobe
[2010/03/31 20:08:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft
[2010/03/31 19:57:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Application Data\Sun
[2010/03/31 18:02:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Application Data\Macromedia
[2010/03/30 17:39:54 | 000,000,000 | ---D | C] -- C:\Program Files\iPod
[2010/03/30 17:39:50 | 000,000,000 | ---D | C] -- C:\Program Files\iTunes
[2010/03/30 17:39:50 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2010/03/30 17:37:38 | 000,000,000 | ---D | C] -- C:\Program Files\QuickTime
[2010/03/30 17:35:45 | 000,000,000 | ---D | C] -- C:\Program Files\Bonjour
[2010/02/12 18:19:45 | 000,000,000 | --SD | M] -- C:\Documents and Settings\NetworkService\Application Data\Microsoft
[2009/08/28 14:52:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Apple
[2009/02/03 04:50:09 | 000,000,000 | --SD | M] -- C:\Documents and Settings\LocalService\Application Data\Microsoft
[1 C:\Documents and Settings\Henry\My Documents\*.tmp files -> C:\Documents and Settings\Henry\My Documents\*.tmp -> ]

========== Files - Modified Within 14 Days ==========

[2010/04/10 20:41:16 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2010/04/10 20:40:54 | 000,012,598 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010/04/10 20:40:49 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010/04/10 20:39:46 | 004,718,592 | ---- | M] () -- C:\Documents and Settings\Henry\ntuser.dat
[2010/04/10 20:39:46 | 000,000,178 | -HS- | M] () -- C:\Documents and Settings\Henry\ntuser.ini
[2010/04/10 19:42:54 | 000,002,137 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\iTunes.lnk
[2010/04/10 09:28:23 | 000,510,464 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Henry\Desktop\OTM.exe
[2010/04/09 14:52:00 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2010/04/08 19:17:22 | 000,100,908 | ---- | M] () -- C:\Documents and Settings\Henry\Desktop\SystemLook.exe
[2010/04/08 18:59:52 | 000,070,858 | ---- | M] (jpshortstuff) -- C:\Documents and Settings\Henry\Desktop\GooredFix.exe
[2010/04/06 23:57:12 | 000,026,112 | ---- | M] () -- C:\Documents and Settings\Henry\My Documents\Eco Journal.doc
[2010/04/06 23:16:32 | 000,140,343 | ---- | M] () -- C:\Documents and Settings\Henry\My Documents\Hot stuff.JPG
[2010/04/06 19:43:17 | 000,012,937 | ---- | M] () -- C:\Documents and Settings\Henry\My Documents\C6V3.docx
[2010/04/06 15:39:35 | 000,489,296 | ---- | M] () -- C:\Documents and Settings\Henry\Desktop\HelpAsst_mebroot_fix.exe
[2010/04/06 15:38:47 | 000,096,704 | ---- | M] () -- C:\WINDOWS\System32\6f685ed4.exe
[2010/04/05 23:51:44 | 000,033,792 | ---- | M] () -- C:\Documents and Settings\Henry\My Documents\Physics Lab.doc
[2010/04/05 20:53:03 | 000,028,672 | ---- | M] () -- C:\Documents and Settings\Henry\My Documents\French Project.doc
[2010/04/05 18:23:36 | 000,027,136 | ---- | M] () -- C:\Documents and Settings\Henry\My Documents\The Book of Negroes.doc
[2010/04/05 16:26:41 | 000,027,648 | ---- | M] () -- C:\Documents and Settings\Henry\My Documents\C6V2.doc
[2010/04/05 11:42:24 | 003,907,460 | R--- | M] () -- C:\Documents and Settings\Henry\Desktop\svchost.com.exe
[2010/04/04 23:06:13 | 000,025,088 | ---- | M] () -- C:\Documents and Settings\Henry\My Documents\C6V1.doc
[2010/04/04 22:01:17 | 000,024,576 | ---- | M] () -- C:\Documents and Settings\Henry\My Documents\11th Hour Movie CritiqueHenry Lau.doc
[2010/04/04 20:49:05 | 000,013,676 | -HS- | M] () -- C:\Documents and Settings\Henry\Local Settings\Application Data\VHx0W
[2010/04/04 20:49:05 | 000,013,676 | -HS- | M] () -- C:\Documents and Settings\All Users\Application Data\VHx0W
[2010/04/04 19:58:05 | 000,056,916 | -H-- | M] () -- C:\WINDOWS\System32\mlfcache.dat
[2010/04/04 11:10:55 | 000,002,626 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT
[2010/04/03 23:02:21 | 004,839,310 | -H-- | M] () -- C:\Documents and Settings\Henry\Local Settings\Application Data\IconCache.db
[2010/04/03 23:01:25 | 000,422,437 | ---- | M] () -- C:\WINDOWS\System32\vsconfig.xml
[2010/04/03 23:00:49 | 000,004,212 | -H-- | M] () -- C:\WINDOWS\System32\zllictbl.dat
[2010/04/03 22:18:24 | 000,000,227 | ---- | M] () -- C:\WINDOWS\system.ini
[2010/04/03 22:01:29 | 000,000,719 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\VLC media player.lnk
[2010/04/02 16:40:52 | 000,000,664 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat
[2010/04/02 15:53:34 | 000,000,027 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2010/04/02 15:21:18 | 000,000,281 | RHS- | M] () -- C:\boot.ini
[2010/04/02 13:12:29 | 000,016,384 | ---- | M] () -- C:\Documents and Settings\Henry\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/04/02 11:27:09 | 000,015,344 | -HS- | M] () -- C:\Documents and Settings\Henry\Local Settings\Application Data\LK2mfPE2j
[2010/04/02 11:27:09 | 000,015,344 | -HS- | M] () -- C:\Documents and Settings\All Users\Application Data\LK2mfPE2j
[2010/04/02 11:25:03 | 000,182,784 | -HS- | M] () -- C:\Documents and Settings\Henry\Local Settings\Application Data\2927340765.dll
[2010/04/01 22:59:39 | 000,050,376 | ---- | M] (Prevx) -- C:\WINDOWS\System32\drivers\pxrts.sys
[2010/03/31 23:07:29 | 000,030,208 | ---- | M] () -- C:\Documents and Settings\Henry\My Documents\Chapter 5 QuestionsHenry Lau.doc
[2010/03/30 17:37:54 | 000,001,604 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\QuickTime Player.lnk
[2010/03/29 16:53:01 | 007,494,865 | ---- | M] () -- C:\Documents and Settings\Henry\My Documents\ApprenticeWorkbook.pdf
[2010/03/29 15:24:58 | 000,038,224 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2010/03/29 15:24:46 | 000,020,824 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2010/03/28 15:31:51 | 000,034,816 | ---- | M] () -- C:\Documents and Settings\Henry\My Documents\Geometry workbook answers.doc
[1 C:\Documents and Settings\Henry\My Documents\*.tmp files -> C:\Documents and Settings\Henry\My Documents\*.tmp -> ]

========== Files Created - No Company Name ==========

[2010/04/08 19:17:24 | 000,100,908 | ---- | C] () -- C:\Documents and Settings\Henry\Desktop\SystemLook.exe
[2010/04/06 23:57:12 | 000,026,112 | ---- | C] () -- C:\Documents and Settings\Henry\My Documents\Eco Journal.doc
[2010/04/06 19:14:59 | 000,012,937 | ---- | C] () -- C:\Documents and Settings\Henry\My Documents\C6V3.docx
[2010/04/06 18:32:44 | 000,140,343 | ---- | C] () -- C:\Documents and Settings\Henry\My Documents\Hot stuff.JPG
[2010/04/06 15:38:47 | 000,096,704 | ---- | C] () -- C:\WINDOWS\System32\6f685ed4.exe
[2010/04/05 23:51:44 | 000,033,792 | ---- | C] () -- C:\Documents and Settings\Henry\My Documents\Physics Lab.doc
[2010/04/05 20:53:03 | 000,028,672 | ---- | C] () -- C:\Documents and Settings\Henry\My Documents\French Project.doc
[2010/04/05 11:42:42 | 000,027,648 | ---- | C] () -- C:\Documents and Settings\Henry\My Documents\C6V2.doc
[2010/04/05 11:42:13 | 003,907,460 | R--- | C] () -- C:\Documents and Settings\Henry\Desktop\svchost.com.exe
[2010/04/04 22:10:24 | 000,489,296 | ---- | C] () -- C:\Documents and Settings\Henry\Desktop\HelpAsst_mebroot_fix.exe
[2010/04/04 22:09:07 | 000,025,088 | ---- | C] () -- C:\Documents and Settings\Henry\My Documents\C6V1.doc
[2010/04/04 20:47:10 | 000,013,676 | -HS- | C] () -- C:\Documents and Settings\Henry\Local Settings\Application Data\VHx0W
[2010/04/04 20:47:10 | 000,013,676 | -HS- | C] () -- C:\Documents and Settings\All Users\Application Data\VHx0W
[2010/04/03 23:00:49 | 000,004,212 | -H-- | C] () -- C:\WINDOWS\System32\zllictbl.dat
[2010/04/03 23:00:43 | 000,422,437 | ---- | C] () -- C:\WINDOWS\System32\vsconfig.xml
[2010/04/03 22:55:46 | 000,153,088 | ---- | C] () -- C:\WINDOWS\System32\UNRAR3.dll
[2010/04/03 22:55:46 | 000,075,264 | ---- | C] () -- C:\WINDOWS\System32\unacev2.dll
[2010/04/03 22:01:29 | 000,000,719 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\VLC media player.lnk
[2010/04/02 22:37:00 | 000,024,576 | ---- | C] () -- C:\Documents and Settings\Henry\My Documents\11th Hour Movie CritiqueHenry Lau.doc
[2010/04/02 16:40:52 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2010/04/02 15:21:18 | 000,000,211 | ---- | C] () -- C:\Boot.bak
[2010/04/02 15:21:16 | 000,260,272 | ---- | C] () -- C:\cmldr
[2010/04/02 15:17:05 | 000,261,632 | ---- | C] () -- C:\WINDOWS\PEV.exe
[2010/04/02 15:17:05 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe
[2010/04/02 15:17:05 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe
[2010/04/02 15:17:05 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe
[2010/04/02 11:25:03 | 000,182,784 | -HS- | C] () -- C:\Documents and Settings\Henry\Local Settings\Application Data\2927340765.dll
[2010/04/02 11:23:46 | 000,015,344 | -HS- | C] () -- C:\Documents and Settings\Henry\Local Settings\Application Data\LK2mfPE2j
[2010/04/02 11:23:46 | 000,015,344 | -HS- | C] () -- C:\Documents and Settings\All Users\Application Data\LK2mfPE2j
[2010/03/31 21:03:41 | 000,030,208 | ---- | C] () -- C:\Documents and Settings\Henry\My Documents\Chapter 5 QuestionsHenry Lau.doc
[2010/03/30 17:40:31 | 000,002,137 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\iTunes.lnk
[2010/03/30 17:37:54 | 000,001,604 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\QuickTime Player.lnk
[2010/03/29 16:53:01 | 007,494,865 | ---- | C] () -- C:\Documents and Settings\Henry\My Documents\ApprenticeWorkbook.pdf
[2010/03/28 18:18:59 | 003,482,145 | ---- | C] () -- C:\Documents and Settings\Henry\Desktop\New Radicals - Someday We'll Know.mp3
[2010/03/28 15:31:50 | 000,034,816 | ---- | C] () -- C:\Documents and Settings\Henry\My Documents\Geometry workbook answers.doc
[2010/02/21 22:53:25 | 000,000,327 | ---- | C] () -- C:\Documents and Settings\Henry\mbr.log
[2010/02/21 22:10:25 | 000,000,048 | ---- | C] () -- C:\WINDOWS\wininit.ini
[2010/02/01 14:12:31 | 000,012,686 | -HS- | C] () -- C:\Documents and Settings\Henry\Local Settings\Application Data\u1ly73
[2009/12/15 17:13:21 | 000,012,098 | ---- | C] () -- C:\Documents and Settings\Henry\hs_err_pid3928.log
[2009/12/11 02:37:56 | 000,536,576 | ---- | C] () -- C:\WINDOWS\System32\crash_report.dll
[2009/09/22 10:57:45 | 000,000,028 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2009/08/22 22:33:01 | 004,718,592 | ---- | C] () -- C:\Documents and Settings\Henry\ntuser.dat
[2009/08/22 20:45:40 | 000,000,075 | ---- | C] () -- C:\Documents and Settings\Henry\Local Settings\Application Data\FASTWiz.log
[2009/08/22 18:49:27 | 000,016,384 | ---- | C] () -- C:\Documents and Settings\Henry\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009/08/21 21:13:00 | 000,001,024 | -H-- | C] () -- C:\Documents and Settings\Henry\ntuser.dat.LOG
[2009/08/21 21:13:00 | 000,000,178 | -HS- | C] () -- C:\Documents and Settings\Henry\ntuser.ini
[2009/08/21 21:12:49 | 000,262,144 | ---- | C] () -- C:\Documents and Settings\All Users\NTUSER.DAT
[2009/08/21 21:12:49 | 000,001,024 | -H-- | C] () -- C:\Documents and Settings\All Users\NTUSER.DAT.LOG
[2009/08/19 18:23:26 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini
[2009/02/03 05:13:31 | 000,003,972 | ---- | C] () -- C:\WINDOWS\System32\drivers\PciBus.sys
[2009/02/03 05:09:03 | 000,147,456 | R--- | C] () -- C:\WINDOWS\System32\igfxCoIn_v4864.dll
[2009/01/21 11:53:37 | 000,001,466 | ---- | C] () -- C:\WINDOWS\System32\OEMINFO.INI
[1996/04/03 12:33:26 | 000,005,248 | ---- | C] () -- C:\WINDOWS\System32\giveio.sys

========== LOP Check ==========

[2010/04/04 11:10:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Alwil Software
[2009/08/22 23:04:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Azureus
[2010/04/01 20:58:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\ESET
[2010/04/01 22:59:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\PrevxCSI
[2010/02/01 18:16:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TEMP
[2010/03/30 17:40:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2009/09/11 16:41:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{755AC846-7372-4AC8-8550-C52491DAA8BD}
[2009/08/21 21:28:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
[2009/08/23 08:16:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Henry\Application Data\Azureus
[2010/04/03 23:00:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Henry\Application Data\CheckPoint
[2010/03/14 17:58:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Henry\Application Data\LimeWire

========== Purity Check ==========



========== Alternate Data Streams ==========

@Alternate Data Stream - 143 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:8C35AEA7
@Alternate Data Stream - 115 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:A8ADE5D8
@Alternate Data Stream - 103 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:DFC5A2B2
< End of report >
  • 0

#23
Babine

Babine

    Member

  • Member
  • PipPip
  • 58 posts
Regarding the second and third step, I looked in the C drive, and found the atapi.sys, but when I run the OTM, it says atapi.sys in where you wanted me to look isn't there. Ill post the log of the OTM I ran, and the picture of how the file looks like in the C drive.

All processes killed
========== PROCESSES ==========
No active process named explorer.exe was found!
========== FILES ==========
File C:\atapi.sys | not found.
Error: Unable to interpret <:Commands[purity]> in the current context!
Error: Unable to interpret <[emptytemp]> in the current context!
Error: Unable to interpret <[Reboot]> in the current context!

OTM by OldTimer - Version 3.1.10.1 log created on 04102010_205513

Attached Thumbnails

  • untitled.JPG

  • 0

#24
emeraldnzl

emeraldnzl

    GeekU Instructor

  • GeekU Moderator
  • 17,196 posts
Hi Babine,

azarl is tied up elswhere, so you will have to put up with me for now. :)

Looking at your logs has made me think I would like to revisit something:

Please delete your version of ComboFix, including the folders C:\Qoobox and C:\Combofix, and download a new version of Combofix.

Download ComboFix from one of these locations:

NOTE: If you are guest watching this topic. ComboFix is a very powerful tool. The disclaimer clearly states that you should not use it without asupervision. There is good reason for this as ComboFix can, and sometimes does, run into conflict on a computer and render it unusable.

Link 1
Link 2
* IMPORTANT !!! Save ComboFix.exe to your Desktop

  • Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools
  • Double click on ComboFix.exe & follow the prompts.
  • As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.
  • Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.

**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.

Posted Image


Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:

Posted Image

Click on Yes, to continue scanning for malware.

When finished, it will produce a log for you. Please include the C:\ComboFix.txt in your next reply.
  • 0

#25
Babine

Babine

    Member

  • Member
  • PipPip
  • 58 posts
Hi emeraldnzl,

Thank you for the ongoing support. I ran the ComboFix, and unfortunately, like previous efforts, while running the scan, the computer restarts, and I am not even able to start up normally. I have to start with the last known configuration that worked.
  • 0

#26
emeraldnzl

emeraldnzl

    GeekU Instructor

  • GeekU Moderator
  • 17,196 posts
Hello again Babine,

unfortunately, like previous efforts, while running the scan, the computer restarts, and I am not even able to start up normally.


Okay, let's see if we can find some information on ComboFix's actions.

Right click on Start > Explore and navigate to:

C:\QooBox\LastRun\ <--Data from failed CF runs are stored here.

You should be able to find the data for the failed run there.

Alternatively :\Qoobox folder (most likely C:\Qoobox\ComboFix.txt) . Note ComboFix.txt may be numbered like this ComboFix2.txt.

Copy and past the contents of the text file back here.
  • 0

#27
Babine

Babine

    Member

  • Member
  • PipPip
  • 58 posts
Hello

I checked the locations, but found no files. The only type of log at all in the Qoobox folder is a blank catchme.log in the quarantine folder.

Edited by Babine, 11 April 2010 - 01:22 AM.

  • 0

#28
emeraldnzl

emeraldnzl

    GeekU Instructor

  • GeekU Moderator
  • 17,196 posts

I checked the locations, but found no files.


Moving on then.


Please go HERE and download FileLister.
  • Save it to your Desktop
  • Rt Click ->> Extract all ->> And extract it to your Desktop
  • Additional help on extracting zip files can be found HERE
  • Open the File Lister Folder.
  • Note: Leave the FileLister.vbe file in the folder and run it from there.
Posted Image
  • Rt Click FileLister.vbe ->>Select Open Then Open to confirm.
  • When the program is fnished it will produce a log for you C:\Files.txt
Copy and paste the contents of that log in your reply.
  • 0

#29
Babine

Babine

    Member

  • Member
  • PipPip
  • 58 posts
The log I found in C is blank, but I did find a log called files.txt in the FileLister folder and it's as follows. (There is also a Hidden.txt and UNI.txt in the folder)


+++++++++++++++++++++++++++
+ File Lister Version 1.1.4 +
+ +
+ By bamajim / SpywareHammer.com +
+++++++++++++++++++++++++++

Report ran on --->>> 4/11/2010 12:37:52 AM

====== Running Processes ======

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe
C:\Documents and Settings\Henry\Local Settings\Application Data\TheWeatherNetwork\WeatherEye\WeatherEye.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\jqs.exe
c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\iTunes\iTunes.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\System32\WScript.exe
C:\Program Files\Internet Explorer\iexplore.exe

====== BHO's ======
BHO: (NO NAME) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll

BHO: (NO NAME) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll

BHO: (NO NAME) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

====== System Keys (some whitelisted items will not be shown)======

Winlogon\Userinit = C:\WINDOWS\system32\userinit.exe,
Winlogon\Shell = Explorer.exe

====== HKLM\~\Run Keys ======

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

[RTHDCPL] = RTHDCPL.EXE
[GrooveMonitor] = "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
[iTunesHelper] = "C:\Program Files\iTunes\iTunesHelper.exe"
[ZoneAlarm Client] = "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
[avast5] = C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui
[QuickTime Task] = "C:\Program Files\QuickTime\qttask.exe" -atboottime

====== HKCU\~\Run Keys ======

[WeatherEye] = C:\Documents and Settings\Henry\Local Settings\Application Data\TheWeatherNetwork\WeatherEye\WeatherEye.exe
[msnmsgr] = "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
[ctfmon.exe] = C:\WINDOWS\system32\ctfmon.exe

====== DNS Info (List may be empty) ======


NV Hostname = HenryLau
DataBasePath = %SystemRoot%\System32\drivers\etc
ForwardBroadcasts = 0
IPEnableRouter = 0
Hostname = HenryLau
UseDomainNameDevolution = 1
DeadGWDetectDefault = 1
DontAddDefaultGatewayDefault = 0
TCPFinWait2Delay = 16
GlobalMaxTcpWindowSize = 64240
DhcpDomain = vc.shawcable.net
DhcpNameServer = 64.59.144.90 64.59.144.91

====== Folders and Files from "%\" and "%\Windows" Created Last 60 Days ======

4/2/2010 3:21:15 PM 8104118 C:\cmdcons
4/2/2010 3:21:16 PM 860672 C:\cmdcons\SYSTEM32
4/10/2010 10:50:20 PM 17232759 C:\ComboFix
4/10/2010 10:50:21 PM 4371 C:\ComboFix\N_
4/4/2010 10:11:02 PM 190978263 C:\HelpAsst_backup
4/4/2010 10:11:04 PM 190679527 C:\HelpAsst_backup\C
4/4/2010 10:11:04 PM 190679527 C:\HelpAsst_backup\C\DOCUME~1
4/4/2010 10:11:04 PM 190679527 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1
4/4/2010 10:11:09 PM 26700364 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data
4/4/2010 10:11:09 PM 2163569 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Adobe
4/4/2010 10:11:09 PM 390723 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Adobe\Acrobat
4/4/2010 10:11:09 PM 390723 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Adobe\Acrobat\7.0
4/4/2010 10:11:09 PM 103 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Adobe\Acrobat\7.0\Collab
4/4/2010 10:11:09 PM 10 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Adobe\Acrobat\7.0\JavaScripts
4/4/2010 10:11:09 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Adobe\Acrobat\7.0\Messages
4/4/2010 10:11:09 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Adobe\Acrobat\7.0\Messages\ENU
4/4/2010 10:11:09 PM 870 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Adobe\Acrobat\7.0\Preferences
4/4/2010 10:11:09 PM 246172 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Adobe\Acrobat\7.0\Updater
4/4/2010 10:11:09 PM 1772846 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Adobe\Flash Player
4/4/2010 10:11:09 PM 1772846 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Adobe\Flash Player\AssetCache
4/4/2010 10:11:09 PM 1772846 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Adobe\Flash Player\AssetCache\7B9LXST8
4/4/2010 10:11:10 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\AdobeUM
4/4/2010 10:11:10 PM 1565661 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Apple Computer
4/4/2010 10:11:10 PM 1148 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Apple Computer\Cookies
4/4/2010 10:11:10 PM 203887 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Apple Computer\iTunes
4/4/2010 10:11:10 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Apple Computer\iTunes\iTunes Plug-ins
4/4/2010 10:11:10 PM 100668 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Apple Computer\Logs
4/4/2010 10:11:10 PM 100005 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Apple Computer\Logs\CrashReporter
4/4/2010 10:11:10 PM 100005 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Apple Computer\Logs\CrashReporter\MobileDevice
4/4/2010 10:11:10 PM 100005 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Apple Computer\Logs\CrashReporter\MobileDevice\iPod
4/4/2010 10:11:10 PM 663 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Apple Computer\Logs\DeviceLink
4/4/2010 10:11:10 PM 1010676 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Apple Computer\MobileSync
4/4/2010 10:11:10 PM 1010676 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Apple Computer\MobileSync\Backup
4/4/2010 10:11:10 PM 1010676 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Apple Computer\MobileSync\Backup\9721a0242684ffed3898a9a4c5847f10143d397e
4/4/2010 10:11:11 PM 1361 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Apple Computer\Preferences
4/4/2010 10:11:11 PM 73 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Apple Computer\Preferences\ByHost
4/4/2010 10:11:11 PM 2032 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Apple Computer\QuickTime
4/4/2010 10:11:11 PM 38911 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Apple Computer\Safari
4/4/2010 10:11:11 PM 38911 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Apple Computer\Safari\PubSub
4/4/2010 10:11:11 PM 37888 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Apple Computer\Safari\PubSub\Database
4/4/2010 10:11:11 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Apple Computer\Safari\PubSub\Feeds
4/4/2010 10:11:11 PM 206978 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Apple Computer\SyncServices
4/4/2010 10:11:11 PM 206978 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Apple Computer\SyncServices\Local
4/4/2010 10:11:11 PM 29 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Apple Computer\SyncServices\Local\clientdata
4/4/2010 10:11:11 PM 17 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Apple Computer\SyncServices\Local\clientdata\928ce871e31e838b84dc3874b86b384438631594
4/4/2010 10:11:11 PM 12 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Apple Computer\SyncServices\Local\clientdata\ebf0f86d30f0f15eb295a85fd1c590756e81420a
4/4/2010 10:11:11 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Apple Computer\WebKit
4/4/2010 10:11:11 PM 614711 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Azureus
4/4/2010 10:11:11 PM 133654 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Azureus\active
4/4/2010 10:11:11 PM 25797 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Azureus\dht
4/4/2010 10:11:11 PM 322217 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Azureus\logs
4/4/2010 10:11:11 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Azureus\logs\save
4/4/2010 10:11:11 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Azureus\media
4/4/2010 10:11:11 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Azureus\media\azpd
4/4/2010 10:11:11 PM 16032 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Azureus\net
4/4/2010 10:11:11 PM 215 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Azureus\plugins
4/4/2010 10:11:11 PM 215 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Azureus\plugins\azupnpav
4/4/2010 10:11:11 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Azureus\shares
4/4/2010 10:11:11 PM 16170 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Azureus\tmp
4/4/2010 10:11:12 PM 63128 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Azureus\torrents
4/4/2010 10:11:12 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Azureus\updates
4/4/2010 10:11:12 PM 16440 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\DivX
4/4/2010 10:11:12 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\DivX\DivX Codec
4/4/2010 10:11:12 PM 16440 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\DivX\DivX Player
4/4/2010 10:11:12 PM 199 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\dvdcss
4/4/2010 10:11:12 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\dvdcss\01_06_2009-2009060123193700
4/4/2010 10:11:12 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Identities
4/4/2010 10:11:12 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Identities\{5222BCBA-71BB-40CC-8399-78839B57C8D6}
4/4/2010 10:11:12 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\InstallShield
4/4/2010 10:11:12 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\InstallShield\ISEngine12.0
4/4/2010 10:11:12 PM 13208439 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\LimeWire
4/4/2010 10:11:12 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\LimeWire\.AppSpecialShare
4/4/2010 10:11:12 PM 10423523 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\LimeWire\browser
4/4/2010 10:11:12 PM 10423523 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\LimeWire\browser\xulrunner
4/4/2010 10:11:12 PM 1734501 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\LimeWire\browser\xulrunner\chrome
4/4/2010 10:11:13 PM 2346277 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\LimeWire\browser\xulrunner\components
4/4/2010 10:11:15 PM 15101 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\LimeWire\browser\xulrunner\defaults
4/4/2010 10:11:16 PM 7383 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\LimeWire\browser\xulrunner\defaults\autoconfig
4/4/2010 10:11:16 PM 3930 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\LimeWire\browser\xulrunner\defaults\pref
4/4/2010 10:11:16 PM 3788 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\LimeWire\browser\xulrunner\defaults\profile
4/4/2010 10:11:16 PM 1741 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\LimeWire\browser\xulrunner\defaults\profile\chrome
4/4/2010 10:11:16 PM 1894 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\LimeWire\browser\xulrunner\defaults\profile\US
4/4/2010 10:11:16 PM 1741 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\LimeWire\browser\xulrunner\defaults\profile\US\chrome
4/4/2010 10:11:16 PM 612845 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\LimeWire\browser\xulrunner\dictionaries
4/4/2010 10:11:16 PM 76335 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\LimeWire\browser\xulrunner\greprefs
4/4/2010 10:11:16 PM 174783 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\LimeWire\browser\xulrunner\modules
4/4/2010 10:11:16 PM 57344 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\LimeWire\browser\xulrunner\plugins
4/4/2010 10:11:17 PM 368828 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\LimeWire\browser\xulrunner\res
4/4/2010 10:11:17 PM 72215 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\LimeWire\browser\xulrunner\res\dtd
4/4/2010 10:11:17 PM 80646 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\LimeWire\browser\xulrunner\res\entityTables
4/4/2010 10:11:17 PM 79512 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\LimeWire\browser\xulrunner\res\fonts
4/4/2010 10:11:17 PM 619 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\LimeWire\browser\xulrunner\res\html
4/4/2010 10:11:17 PM 7490 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\LimeWire\certificate
4/4/2010 10:11:17 PM 1274290 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\LimeWire\mozilla-profile
4/4/2010 10:11:17 PM 792303 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\LimeWire\mozilla-profile\Cache
4/4/2010 10:11:18 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\LimeWire\mozilla-profile\extensions
4/4/2010 10:11:18 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\LimeWire\mozilla-profile\updates
4/4/2010 10:11:18 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\LimeWire\mozilla-profile\updates\0
4/4/2010 10:11:18 PM 1088870 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\LimeWire\promotion
4/4/2010 10:11:18 PM 18343 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\LimeWire\uploads.dat
4/4/2010 10:11:18 PM 17815 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\LimeWire\xml
4/4/2010 10:11:18 PM 17815 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\LimeWire\xml\data
4/4/2010 10:11:18 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Macromedia
4/4/2010 10:11:18 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Macromedia\Flash Player
4/4/2010 10:11:18 PM 401391 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Malwarebytes
4/4/2010 10:11:18 PM 401391 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Malwarebytes\Malwarebytes' Anti-Malware
4/4/2010 10:11:18 PM 3443 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs
4/4/2010 10:11:18 PM 397948 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine
4/4/2010 10:11:18 PM 5796377 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft
4/4/2010 10:11:18 PM 126976 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\Access
4/4/2010 10:11:18 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\AddIns
4/4/2010 10:11:18 PM 176212 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\Address Book
4/4/2010 10:11:18 PM 868 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\CLR Security Config
4/4/2010 10:11:18 PM 868 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\CLR Security Config\v2.0.50727.42
4/4/2010 10:11:18 PM 7340 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\CLView
4/4/2010 10:11:18 PM 7340 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\CLView\1033
4/4/2010 10:11:18 PM 524 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\Credentials
4/4/2010 10:11:18 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\Credentials\S-1-5-21-1123432360-247674877-3292285946-1004
4/4/2010 10:11:18 PM 524 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\Credentials\S-1-5-21-1123432360-247674877-3292285946-1005
4/4/2010 10:11:18 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\Credentials\S-1-5-21-1844237615-1592454029-1417001333-1003
4/4/2010 10:11:18 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\Credentials\S-1-5-21-3179742922-496393314-3364022493-1003
4/4/2010 10:11:18 PM 693257 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\CryptnetUrlCache
4/4/2010 10:11:18 PM 688983 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\CryptnetUrlCache\Content
4/4/2010 10:11:18 PM 4274 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\CryptnetUrlCache\MetaData
4/4/2010 10:11:18 PM 144 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\Crypto
4/4/2010 10:11:18 PM 144 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\Crypto\RSA
4/4/2010 10:11:18 PM 144 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\Crypto\RSA\S-1-5-21-1123432360-247674877-3292285946-1005
4/4/2010 10:11:18 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\Crypto\RSA\S-1-5-21-1844237615-1592454029-1417001333-1003
4/4/2010 10:11:18 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\Crypto\RSA\S-1-5-21-3179742922-496393314-3364022493-1003
4/4/2010 10:11:18 PM 322380 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\Document Building Blocks
4/4/2010 10:11:18 PM 322380 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\Document Building Blocks\1033
4/4/2010 10:11:18 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\Excel
4/4/2010 10:11:18 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\Excel\XLSTART
4/4/2010 10:11:18 PM 8766 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\HTML Help
4/4/2010 10:11:18 PM 20203 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\IdentityCRL
4/4/2010 10:11:18 PM 20203 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\IdentityCRL\production
4/4/2010 10:11:19 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\InfoPath
4/4/2010 10:11:19 PM 28695 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\Internet Explorer
4/4/2010 10:11:19 PM 5237 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\Internet Explorer\Quick Launch
4/4/2010 10:11:19 PM 154 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\Media Player
4/4/2010 10:11:19 PM 1100 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\Microsoft ICE
4/4/2010 10:11:19 PM 1100 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\Microsoft ICE\1.2.3.1
4/4/2010 10:11:19 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\MMC
4/4/2010 10:11:19 PM 15939 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\MSDN
4/4/2010 10:11:19 PM 4278 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\MSDN\8.0
4/4/2010 10:11:19 PM 11661 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\MSDN\9.0
4/4/2010 10:11:19 PM 1088 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\MSN Messenger
4/4/2010 10:11:19 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\MSN Messenger\1118414697
4/4/2010 10:11:19 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\MSN Messenger\1563830294
4/4/2010 10:11:19 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\MSN Messenger\1846895057
4/4/2010 10:11:19 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\MSN Messenger\3116472834
4/4/2010 10:11:19 PM 263851 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\Office
4/4/2010 10:11:19 PM 29753 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\Office\Recent
4/4/2010 10:11:19 PM 292599 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\OneNote
4/4/2010 10:11:19 PM 292599 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\OneNote\12.0
4/4/2010 10:11:19 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\Outlook
4/4/2010 10:11:19 PM 55 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\PowerPoint
4/4/2010 10:11:19 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\Proof
4/4/2010 10:11:19 PM 2036 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\Protect
4/4/2010 10:11:19 PM 1188 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\Protect\S-1-5-21-1123432360-247674877-3292285946-1005
4/4/2010 10:11:19 PM 412 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\Protect\S-1-5-21-1844237615-1592454029-1417001333-1003
4/4/2010 10:11:19 PM 412 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\Protect\S-1-5-21-3179742922-496393314-3364022493-1003
4/4/2010 10:11:19 PM 758 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\Publisher
4/4/2010 10:11:19 PM 940 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\Speech
4/4/2010 10:11:19 PM 940 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\Speech\Files
4/4/2010 10:11:19 PM 940 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\Speech\Files\UserLexicons
4/4/2010 10:11:19 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\SystemCertificates
4/4/2010 10:11:19 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\SystemCertificates\My
4/4/2010 10:11:19 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\SystemCertificates\My\Certificates
4/4/2010 10:11:19 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\SystemCertificates\My\CRLs
4/4/2010 10:11:19 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\SystemCertificates\My\CTLs
4/4/2010 10:11:19 PM 19225 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\Templates
4/4/2010 10:11:19 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\Templates\Document Themes
4/4/2010 10:11:19 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\Templates\Document Themes\Theme Colors
4/4/2010 10:11:19 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\Templates\Document Themes\Theme Effects
4/4/2010 10:11:19 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\Templates\Document Themes\Theme Fonts
4/4/2010 10:11:19 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\Templates\SmartArt Graphics
4/4/2010 10:11:19 PM 338 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\UProof
4/4/2010 10:11:19 PM 3433248 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\VisualStudio
4/4/2010 10:11:19 PM 3433248 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\VisualStudio\9.0
4/4/2010 10:11:20 PM 19190 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\VisualStudio\9.0\1033
4/4/2010 10:11:20 PM 11676 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\VisualStudio\9.0\Aliases
4/4/2010 10:11:20 PM 11676 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\VisualStudio\9.0\Aliases\1033
4/4/2010 10:11:20 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\VisualStudio\9.0\AutoRecoverDat
4/4/2010 10:11:20 PM 3142478 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\VisualStudio\9.0\ReflectedSchemas
4/4/2010 10:11:20 PM 2746 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\VisualStudio\9.0\ServerExplorer
4/4/2010 10:11:20 PM 50144 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\VisualStudio\9.0\StartPageCache
4/4/2010 10:11:20 PM 4304 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\VisualStudio\9.0\VS Help Data
4/4/2010 10:11:20 PM 4278 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\VSA
4/4/2010 10:11:20 PM 4278 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\VSA\9.0
4/4/2010 10:11:20 PM 5759 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\Windows
4/4/2010 10:11:20 PM 5759 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\Windows\Themes
4/4/2010 10:11:20 PM 347628 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\Windows Messenger
4/4/2010 10:11:20 PM 347628 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\Windows Messenger\1563830294
4/4/2010 10:11:20 PM 22016 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\Word
4/4/2010 10:11:20 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Microsoft\Word\STARTUP
4/4/2010 10:11:20 PM 2261237 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Mozilla
4/4/2010 10:11:20 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Mozilla\Extensions
4/4/2010 10:11:20 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Mozilla\Extensions\mozswing@mozswing.org
4/4/2010 10:11:20 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
4/4/2010 10:11:20 PM 1908625 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Mozilla\Firefox
4/4/2010 10:11:20 PM 67703 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Mozilla\Firefox\Crash Reports
4/4/2010 10:11:20 PM 66435 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Mozilla\Firefox\Crash Reports\pending
4/4/2010 10:11:20 PM 561 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Mozilla\Firefox\Crash Reports\submitted
4/4/2010 10:11:20 PM 1840811 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Mozilla\Firefox\Profiles
4/4/2010 10:11:20 PM 1840811 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Mozilla\Firefox\Profiles\4ovd82lm.default
4/4/2010 10:11:20 PM 460 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Mozilla\Firefox\Profiles\4ovd82lm.default\adblockplus
4/4/2010 10:11:20 PM 174157 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Mozilla\Firefox\Profiles\4ovd82lm.default\bookmarkbackups
4/4/2010 10:11:21 PM 1622 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Mozilla\Firefox\Profiles\4ovd82lm.default\chrome
4/4/2010 10:11:21 PM 257085 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Mozilla\Firefox\Profiles\4ovd82lm.default\extensions
4/4/2010 10:11:21 PM 178040 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Mozilla\Firefox\Profiles\4ovd82lm.default\extensions\SkipScreen@SkipScreen
4/4/2010 10:11:21 PM 174087 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Mozilla\Firefox\Profiles\4ovd82lm.default\extensions\SkipScreen@SkipScreen\chrome
4/4/2010 10:11:21 PM 1771 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Mozilla\Firefox\Profiles\4ovd82lm.default\extensions\SkipScreen@SkipScreen\defaults
4/4/2010 10:11:21 PM 1771 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Mozilla\Firefox\Profiles\4ovd82lm.default\extensions\SkipScreen@SkipScreen\defaults\preferences
4/4/2010 10:11:21 PM 31094 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Mozilla\Firefox\Profiles\4ovd82lm.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
4/4/2010 10:11:21 PM 27394 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Mozilla\Firefox\Profiles\4ovd82lm.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}\chrome
4/4/2010 10:11:21 PM 424 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Mozilla\Firefox\Profiles\4ovd82lm.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}\defaults
4/4/2010 10:11:21 PM 424 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Mozilla\Firefox\Profiles\4ovd82lm.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}\defaults\preferences
4/4/2010 10:11:21 PM 47951 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Mozilla\Firefox\Profiles\4ovd82lm.default\extensions\{9f08cb5a-76b1-4bcf-aff9-90e1a5d60b1e}
4/4/2010 10:11:21 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Mozilla\Firefox\Profiles\4ovd82lm.default\extensions\{9f08cb5a-76b1-4bcf-aff9-90e1a5d60b1e}\chrome
4/4/2010 10:11:21 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Mozilla\Firefox\Profiles\4ovd82lm.default\minidumps
4/4/2010 10:11:21 PM 10240 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Mozilla\Firefox\Profiles\4ovd82lm.default\OfflineCache
4/4/2010 10:11:21 PM 352612 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Mozilla\Sunbird
4/4/2010 10:11:21 PM 352501 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Mozilla\Sunbird\Profiles
4/4/2010 10:11:21 PM 352501 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Mozilla\Sunbird\Profiles\srg3s7iq.default
4/4/2010 10:11:21 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Mozilla\Sunbird\Profiles\srg3s7iq.default\extensions
4/4/2010 10:11:21 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\PC Tools
4/4/2010 10:11:21 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\PC Tools\Spyware Doctor
4/4/2010 10:11:21 PM 59880 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\skypePM
4/4/2010 10:11:21 PM 153312 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Sun
4/4/2010 10:11:21 PM 153312 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Sun\Java
4/4/2010 10:11:21 PM 736 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Sun\Java\Deployment
4/4/2010 10:11:21 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Sun\Java\Deployment\cache
4/4/2010 10:11:21 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Sun\Java\Deployment\ext
4/4/2010 10:11:21 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Sun\Java\Deployment\log
4/4/2010 10:11:21 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Sun\Java\Deployment\security
4/4/2010 10:11:21 PM 152576 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Sun\Java\jre1.6.0_15
4/4/2010 10:11:21 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\SUPERAntiSpyware.com
4/4/2010 10:11:21 PM 3696 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Talkback
4/4/2010 10:11:21 PM 3696 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Talkback\MozillaOrg
4/4/2010 10:11:21 PM 3696 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Talkback\MozillaOrg\Sunbird05
4/4/2010 10:11:21 PM 3696 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Talkback\MozillaOrg\Sunbird05\Win32
4/4/2010 10:11:21 PM 3696 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\Talkback\MozillaOrg\Sunbird05\Win32\2008091720
4/4/2010 10:11:21 PM 455378 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\vlc
4/4/2010 10:11:21 PM 12 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Application Data\WinRAR
4/4/2010 10:11:21 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Cookies
4/4/2010 10:11:21 PM 62871920 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop
4/4/2010 10:11:22 PM 2921 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\3540 - Pokemon Platinum (U)(Xenophobia)
4/4/2010 10:11:22 PM 168960 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\Dad's pictures
4/4/2010 10:11:22 PM 1314985 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\New Folder
4/4/2010 10:11:22 PM 2921 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\New Folder\3540 - Pokemon Platinum (U)(Xenophobia)
4/4/2010 10:11:22 PM 701855 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\New Folder\NO$GBA
4/4/2010 10:11:22 PM 246117 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\New Folder\NO$GBA\BATTERY
4/4/2010 10:11:22 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\New Folder\NO$GBA\SLOT
4/4/2010 10:11:22 PM 1824408 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\Pictures
4/4/2010 10:11:22 PM 38 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\Program Files
4/4/2010 10:11:22 PM 38 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\Program Files\Microsoft Visual Studio 8
4/4/2010 10:11:22 PM 38 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\Program Files\Microsoft Visual Studio 8\SDK
4/4/2010 10:11:22 PM 38 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\Program Files\Microsoft Visual Studio 8\SDK\v2.0
4/4/2010 10:11:22 PM 38 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\Program Files\Microsoft Visual Studio 8\SDK\v2.0\GuiDebug
4/4/2010 10:11:22 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\Remote Debugger
4/4/2010 10:11:22 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\Remote Debugger\x64
4/4/2010 10:11:22 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\Remote Debugger\x86
4/4/2010 10:11:22 PM 639 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\Samples
4/4/2010 10:11:22 PM 639 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\Samples\Automation
4/4/2010 10:11:22 PM 123340 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\Setup
4/4/2010 10:11:22 PM 38001979 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\Visual Studio 2005 Professional Edition - CD 1 (English)
4/4/2010 10:11:22 PM 38001979 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\Visual Studio 2005 Professional Edition - CD 1 (English)\en_vs_2005_pro_cd1
4/4/2010 10:11:27 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\Visual Studio 2005 Professional Edition - CD 1 (English)\en_vs_2005_pro_cd1\Program Files
4/4/2010 10:11:27 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\Visual Studio 2005 Professional Edition - CD 1 (English)\en_vs_2005_pro_cd1\Program Files\Microsoft Visual Studio 8
4/4/2010 10:11:27 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\Visual Studio 2005 Professional Edition - CD 1 (English)\en_vs_2005_pro_cd1\Program Files\Microsoft Visual Studio 8\SDK
4/4/2010 10:11:27 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\Visual Studio 2005 Professional Edition - CD 1 (English)\en_vs_2005_pro_cd1\Program Files\Microsoft Visual Studio 8\SDK\v2.0
4/4/2010 10:11:27 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\Visual Studio 2005 Professional Edition - CD 1 (English)\en_vs_2005_pro_cd1\Program Files\Microsoft Visual Studio 8\SDK\v2.0\Bootstrapper
4/4/2010 10:11:27 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\Visual Studio 2005 Professional Edition - CD 1 (English)\en_vs_2005_pro_cd1\Program Files\Microsoft Visual Studio 8\SDK\v2.0\Bootstrapper\Packages
4/4/2010 10:11:27 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\Visual Studio 2005 Professional Edition - CD 1 (English)\en_vs_2005_pro_cd1\Program Files\Microsoft Visual Studio 8\SDK\v2.0\Bootstrapper\Packages\WindowsInstaller3_1
4/4/2010 10:11:27 PM 6470160 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\Visual Studio 2005 Professional Edition - CD 1 (English)\en_vs_2005_pro_cd1\Setup
4/4/2010 10:11:28 PM 69877 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\Visual Studio 2005 Professional Edition - CD 1 (English)\en_vs_2005_pro_cd1\Setup\images
4/4/2010 10:11:28 PM 817296 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\Visual Studio 2005 Professional Edition - CD 1 (English)\en_vs_2005_pro_cd1\Setup\VSSetupWatson
4/4/2010 10:11:28 PM 109120 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\Visual Studio 2005 Professional Edition - CD 1 (English)\en_vs_2005_pro_cd1\Setup\VSSetupWatson\1033
4/4/2010 10:11:28 PM 564608 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\Visual Studio 2005 Professional Edition - CD 1 (English)\en_vs_2005_pro_cd1\wcu
4/4/2010 10:11:28 PM 398528 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\Visual Studio 2005 Professional Edition - CD 1 (English)\en_vs_2005_pro_cd1\wcu\64bitPrereq
4/4/2010 10:11:28 PM 398528 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\Visual Studio 2005 Professional Edition - CD 1 (English)\en_vs_2005_pro_cd1\wcu\64bitPrereq\x64
4/4/2010 10:11:28 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\Visual Studio 2005 Professional Edition - CD 1 (English)\en_vs_2005_pro_cd1\wcu\DExplore
4/4/2010 10:11:28 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\Visual Studio 2005 Professional Edition - CD 1 (English)\en_vs_2005_pro_cd1\wcu\dotNetFramework
4/4/2010 10:11:28 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\Visual Studio 2005 Professional Edition - CD 1 (English)\en_vs_2005_pro_cd1\wcu\dotNetFramework\x64
4/4/2010 10:11:28 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\Visual Studio 2005 Professional Edition - CD 1 (English)\en_vs_2005_pro_cd1\wcu\mdac28
4/4/2010 10:11:28 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\Visual Studio 2005 Professional Edition - CD 1 (English)\en_vs_2005_pro_cd1\wcu\msi31
4/4/2010 10:11:28 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\Visual Studio 2005 Professional Edition - CD 1 (English)\en_vs_2005_pro_cd1\wcu\MSXML
4/4/2010 10:11:28 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\Visual Studio 2005 Professional Edition - CD 1 (English)\en_vs_2005_pro_cd1\wcu\msxml6
4/4/2010 10:11:28 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\Visual Studio 2005 Professional Edition - CD 1 (English)\en_vs_2005_pro_cd1\wcu\msxml6\x64
4/4/2010 10:11:28 PM 17791706 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\Visual Studio 2008 Professional Edition (x86 and x64 WoW) - DVD (English)
4/4/2010 10:11:28 PM 17791706 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\Visual Studio 2008 Professional Edition (x86 and x64 WoW) - DVD (English)\en_visual_studio_2008_professional_x86_x64wow_dvd_X14-26326
4/4/2010 10:11:28 PM 10766143 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\Visual Studio 2008 Professional Edition (x86 and x64 WoW) - DVD (English)\en_visual_studio_2008_professional_x86_x64wow_dvd_X14-26326\msdn
4/4/2010 10:11:28 PM 416554 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\Visual Studio 2008 Professional Edition (x86 and x64 WoW) - DVD (English)\en_visual_studio_2008_professional_x86_x64wow_dvd_X14-26326\msdn\Program Files
4/4/2010 10:11:28 PM 416554 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\Visual Studio 2008 Professional Edition (x86 and x64 WoW) - DVD (English)\en_visual_studio_2008_professional_x86_x64wow_dvd_X14-26326\msdn\Program Files\MSDN
4/4/2010 10:11:28 PM 416554 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\Visual Studio 2008 Professional Edition (x86 and x64 WoW) - DVD (English)\en_visual_studio_2008_professional_x86_x64wow_dvd_X14-26326\msdn\Program Files\MSDN\MSDN9.0
4/4/2010 10:11:28 PM 416554 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\Visual Studio 2008 Professional Edition (x86 and x64 WoW) - DVD (English)\en_visual_studio_2008_professional_x86_x64wow_dvd_X14-26326\msdn\Program Files\MSDN\MSDN9.0\CSetupMM
4/4/2010 10:11:29 PM 5755460 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\Visual Studio 2008 Professional Edition (x86 and x64 WoW) - DVD (English)\en_visual_studio_2008_professional_x86_x64wow_dvd_X14-26326\msdn\Setup
4/4/2010 10:11:29 PM 191414 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\Visual Studio 2008 Professional Edition (x86 and x64 WoW) - DVD (English)\en_visual_studio_2008_professional_x86_x64wow_dvd_X14-26326\msdn\Setup\images
4/4/2010 10:11:29 PM 826872 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\Visual Studio 2008 Professional Edition (x86 and x64 WoW) - DVD (English)\en_visual_studio_2008_professional_x86_x64wow_dvd_X14-26326\msdn\Setup\VSSetupWatson
4/4/2010 10:11:30 PM 111616 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\Visual Studio 2008 Professional Edition (x86 and x64 WoW) - DVD (English)\en_visual_studio_2008_professional_x86_x64wow_dvd_X14-26326\msdn\Setup\VSSetupWatson\1033
4/4/2010 10:11:30 PM 3209416 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\Visual Studio 2008 Professional Edition (x86 and x64 WoW) - DVD (English)\en_visual_studio_2008_professional_x86_x64wow_dvd_X14-26326\msdn\WCU
4/4/2010 10:11:30 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\Visual Studio 2008 Professional Edition (x86 and x64 WoW) - DVD (English)\en_visual_studio_2008_professional_x86_x64wow_dvd_X14-26326\msdn\WCU\DExplore
4/4/2010 10:11:30 PM 3209416 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\Visual Studio 2008 Professional Edition (x86 and x64 WoW) - DVD (English)\en_visual_studio_2008_professional_x86_x64wow_dvd_X14-26326\msdn\WCU\dotNetFramework
4/4/2010 10:11:30 PM 3205632 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\Visual Studio 2008 Professional Edition (x86 and x64 WoW) - DVD (English)\en_visual_studio_2008_professional_x86_x64wow_dvd_X14-26326\msdn\WCU\dotNetFramework\dotNetFX20
4/4/2010 10:11:30 PM 3784 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\Visual Studio 2008 Professional Edition (x86 and x64 WoW) - DVD (English)\en_visual_studio_2008_professional_x86_x64wow_dvd_X14-26326\msdn\WCU\dotNetFramework\dotNetMSP
4/4/2010 10:11:30 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\Visual Studio 2008 Professional Edition (x86 and x64 WoW) - DVD (English)\en_visual_studio_2008_professional_x86_x64wow_dvd_X14-26326\msdn\WCU\dotNetFramework\dotNetMSP\x64
4/4/2010 10:11:30 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\Visual Studio 2008 Professional Edition (x86 and x64 WoW) - DVD (English)\en_visual_studio_2008_professional_x86_x64wow_dvd_X14-26326\msdn\WCU\dotNetFramework\dotNetMSP\x86
4/4/2010 10:11:30 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\Visual Studio 2008 Professional Edition (x86 and x64 WoW) - DVD (English)\en_visual_studio_2008_professional_x86_x64wow_dvd_X14-26326\msdn\WCU\msi31
4/4/2010 10:11:30 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\Visual Studio 2008 Professional Edition (x86 and x64 WoW) - DVD (English)\en_visual_studio_2008_professional_x86_x64wow_dvd_X14-26326\Program Files
4/4/2010 10:11:30 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\Visual Studio 2008 Professional Edition (x86 and x64 WoW) - DVD (English)\en_visual_studio_2008_professional_x86_x64wow_dvd_X14-26326\Program Files\Microsoft SDKs
4/4/2010 10:11:30 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\Visual Studio 2008 Professional Edition (x86 and x64 WoW) - DVD (English)\en_visual_studio_2008_professional_x86_x64wow_dvd_X14-26326\Program Files\Microsoft SDKs\Windows
4/4/2010 10:11:30 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\Visual Studio 2008 Professional Edition (x86 and x64 WoW) - DVD (English)\en_visual_studio_2008_professional_x86_x64wow_dvd_X14-26326\Program Files\Microsoft SDKs\Windows\v6.0A
4/4/2010 10:11:30 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\Visual Studio 2008 Professional Edition (x86 and x64 WoW) - DVD (English)\en_visual_studio_2008_professional_x86_x64wow_dvd_X14-26326\Program Files\Microsoft SDKs\Windows\v6.0A\Bootstrapper
4/4/2010 10:11:30 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\Visual Studio 2008 Professional Edition (x86 and x64 WoW) - DVD (English)\en_visual_studio_2008_professional_x86_x64wow_dvd_X14-26326\Program Files\Microsoft SDKs\Windows\v6.0A\Bootstrapper\Packages
4/4/2010 10:11:30 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\Visual Studio 2008 Professional Edition (x86 and x64 WoW) - DVD (English)\en_visual_studio_2008_professional_x86_x64wow_dvd_X14-26326\Remote Debugger
4/4/2010 10:11:30 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\Visual Studio 2008 Professional Edition (x86 and x64 WoW) - DVD (English)\en_visual_studio_2008_professional_x86_x64wow_dvd_X14-26326\Remote Debugger\x64
4/4/2010 10:11:30 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\Visual Studio 2008 Professional Edition (x86 and x64 WoW) - DVD (English)\en_visual_studio_2008_professional_x86_x64wow_dvd_X14-26326\Remote Debugger\x86
4/4/2010 10:11:30 PM 639 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\Visual Studio 2008 Professional Edition (x86 and x64 WoW) - DVD (English)\en_visual_studio_2008_professional_x86_x64wow_dvd_X14-26326\Samples
4/4/2010 10:11:30 PM 639 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\Visual Studio 2008 Professional Edition (x86 and x64 WoW) - DVD (English)\en_visual_studio_2008_professional_x86_x64wow_dvd_X14-26326\Samples\Automation
4/4/2010 10:11:30 PM 7024924 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\Visual Studio 2008 Professional Edition (x86 and x64 WoW) - DVD (English)\en_visual_studio_2008_professional_x86_x64wow_dvd_X14-26326\Setup
4/4/2010 10:11:31 PM 191414 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\Visual Studio 2008 Professional Edition (x86 and x64 WoW) - DVD (English)\en_visual_studio_2008_professional_x86_x64wow_dvd_X14-26326\Setup\images
4/4/2010 10:11:32 PM 826872 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\Visual Studio 2008 Professional Edition (x86 and x64 WoW) - DVD (English)\en_visual_studio_2008_professional_x86_x64wow_dvd_X14-26326\Setup\VSSetupWatson
4/4/2010 10:11:32 PM 111616 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\Visual Studio 2008 Professional Edition (x86 and x64 WoW) - DVD (English)\en_visual_studio_2008_professional_x86_x64wow_dvd_X14-26326\Setup\VSSetupWatson\1033
4/4/2010 10:11:32 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\Visual Studio 2008 Professional Edition (x86 and x64 WoW) - DVD (English)\en_visual_studio_2008_professional_x86_x64wow_dvd_X14-26326\WCU
4/4/2010 10:11:32 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\Visual Studio 2008 Professional Edition (x86 and x64 WoW) - DVD (English)\en_visual_studio_2008_professional_x86_x64wow_dvd_X14-26326\WCU\64bitPrereq
4/4/2010 10:11:32 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\Visual Studio 2008 Professional Edition (x86 and x64 WoW) - DVD (English)\en_visual_studio_2008_professional_x86_x64wow_dvd_X14-26326\WCU\64bitPrereq\x64
4/4/2010 10:11:32 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\Visual Studio 2008 Professional Edition (x86 and x64 WoW) - DVD (English)\en_visual_studio_2008_professional_x86_x64wow_dvd_X14-26326\WCU\ARM
4/4/2010 10:11:32 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\Visual Studio 2008 Professional Edition (x86 and x64 WoW) - DVD (English)\en_visual_studio_2008_professional_x86_x64wow_dvd_X14-26326\WCU\Crystal Reports
4/4/2010 10:11:32 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\Visual Studio 2008 Professional Edition (x86 and x64 WoW) - DVD (English)\en_visual_studio_2008_professional_x86_x64wow_dvd_X14-26326\WCU\DExplore
4/4/2010 10:11:32 PM 1077128 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\wcu
4/4/2010 10:11:32 PM 911048 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\wcu\ARM
4/4/2010 10:11:32 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\wcu\JSharpRedistCore
4/4/2010 10:11:32 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\wcu\NetCF
4/4/2010 10:11:32 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\wcu\SDK
4/4/2010 10:11:32 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\wcu\SDK\x64
4/4/2010 10:11:32 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\wcu\SQLCE
4/4/2010 10:11:32 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\wcu\SSE
4/4/2010 10:11:32 PM 537522 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\YCCD
4/4/2010 10:11:32 PM 113152 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\YCCD\To send
4/4/2010 10:11:32 PM 1070 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Favorites
4/4/2010 10:11:32 PM 632 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Favorites\Links
4/4/2010 10:11:32 PM 30272245 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings
4/4/2010 10:11:32 PM 29862357 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data
4/4/2010 10:11:32 PM 116168 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Adobe
4/4/2010 10:11:32 PM 114687 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Adobe\Acrobat
4/4/2010 10:11:32 PM 114687 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Adobe\Acrobat\7.0
4/4/2010 10:11:32 PM 114687 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Adobe\Acrobat\7.0\Cache
4/4/2010 10:11:32 PM 107221 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Adobe\Acrobat\7.0\Cache\Search70
4/4/2010 10:11:32 PM 1481 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Adobe\Color
4/4/2010 10:11:32 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Apple
4/4/2010 10:11:32 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Apple\Apple Software Update
4/4/2010 10:11:32 PM 1114599 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Apple Computer
4/4/2010 10:11:32 PM 458857 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Apple Computer\iTunes
4/4/2010 10:11:32 PM 598768 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Apple Computer\QuickTime
4/4/2010 10:11:32 PM 589732 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Apple Computer\QuickTime\downloads
4/4/2010 10:11:32 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Apple Computer\QuickTime\downloads\00
4/4/2010 10:11:32 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Apple Computer\QuickTime\downloads\00\02
4/4/2010 10:11:32 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Apple Computer\QuickTime\downloads\01
4/4/2010 10:11:32 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Apple Computer\QuickTime\downloads\01\10
4/4/2010 10:11:32 PM 275405 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Apple Computer\QuickTime\downloads\02
4/4/2010 10:11:32 PM 275405 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Apple Computer\QuickTime\downloads\02\15
4/4/2010 10:11:32 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Apple Computer\QuickTime\downloads\05
4/4/2010 10:11:32 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Apple Computer\QuickTime\downloads\05\13
4/4/2010 10:11:32 PM 1796 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Apple Computer\QuickTime\downloads\06
4/4/2010 10:11:32 PM 1796 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Apple Computer\QuickTime\downloads\06\01
4/4/2010 10:11:32 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Apple Computer\QuickTime\downloads\07
4/4/2010 10:11:32 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Apple Computer\QuickTime\downloads\07\02
4/4/2010 10:11:33 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Apple Computer\QuickTime\downloads\07\15
4/4/2010 10:11:33 PM 3574 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Apple Computer\QuickTime\downloads\08
4/4/2010 10:11:33 PM 3574 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Apple Computer\QuickTime\downloads\08\11
4/4/2010 10:11:33 PM 276870 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Apple Computer\QuickTime\downloads\09
4/4/2010 10:11:33 PM 275103 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Apple Computer\QuickTime\downloads\09\00
4/4/2010 10:11:33 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Apple Computer\QuickTime\downloads\09\01
4/4/2010 10:11:33 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Apple Computer\QuickTime\downloads\09\03
4/4/2010 10:11:33 PM 1767 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Apple Computer\QuickTime\downloads\09\07
4/4/2010 10:11:33 PM 1780 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Apple Computer\QuickTime\downloads\10
4/4/2010 10:11:33 PM 1780 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Apple Computer\QuickTime\downloads\10\11
4/4/2010 10:11:33 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Apple Computer\QuickTime\downloads\11
4/4/2010 10:11:33 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Apple Computer\QuickTime\downloads\11\05
4/4/2010 10:11:33 PM 927 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Apple Computer\QuickTime\downloads\12
4/4/2010 10:11:33 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Apple Computer\QuickTime\downloads\12\00
4/4/2010 10:11:33 PM 927 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Apple Computer\QuickTime\downloads\12\14
4/4/2010 10:11:33 PM 29380 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Apple Computer\QuickTime\downloads\13
4/4/2010 10:11:33 PM 29380 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Apple Computer\QuickTime\downloads\13\06
4/4/2010 10:11:33 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Apple Computer\QuickTime\downloads\15
4/4/2010 10:11:33 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Apple Computer\QuickTime\downloads\15\09
4/4/2010 10:11:33 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Apple Computer\Safari
4/4/2010 10:11:33 PM 56974 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Apple Computer\WebKit
4/4/2010 10:11:33 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\fqicql
4/4/2010 10:11:33 PM 21619388 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft
4/4/2010 10:11:33 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\CD Burning
4/4/2010 10:11:33 PM 974227 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\CoreCon
4/4/2010 10:11:33 PM 974227 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\CoreCon\1.0
4/4/2010 10:11:33 PM 1 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\CoreCon\1.0\notification
4/4/2010 10:11:33 PM 578 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\Credentials
4/4/2010 10:11:33 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\Credentials\S-1-5-21-1123432360-247674877-3292285946-1004
4/4/2010 10:11:33 PM 578 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\Credentials\S-1-5-21-1123432360-247674877-3292285946-1005
4/4/2010 10:11:33 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\Credentials\S-1-5-21-1844237615-1592454029-1417001333-1003
4/4/2010 10:11:33 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\Credentials\S-1-5-21-3179742922-496393314-3364022493-1003
4/4/2010 10:11:33 PM 245980 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\FORMS
4/4/2010 10:11:33 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\HelpCtr
4/4/2010 10:11:33 PM 28 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\InfoPath
4/4/2010 10:11:33 PM 4 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\InfoPath\FormCache2
4/4/2010 10:11:33 PM 4 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\InfoPath\FormCache2\24CBF0EF.A7B
4/4/2010 10:11:33 PM 16384 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\Internet Explorer
4/4/2010 10:11:33 PM 852250 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\Media Player
4/4/2010 10:11:33 PM 6758290 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\Messenger
4/4/2010 10:11:33 PM 41859 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\Messenger\h.lau@live.ca
4/4/2010 10:11:33 PM 25424 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\Messenger\h.lau@live.ca\ObjectStore
4/4/2010 10:11:33 PM 25424 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\Messenger\h.lau@live.ca\ObjectStore\UserTile
4/4/2010 10:11:33 PM 16435 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\Messenger\h.lau@live.ca\SocialNews
4/4/2010 10:11:33 PM 2553756 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\Messenger\little_kevin_94@hotmail.com
4/4/2010 10:11:33 PM 2501211 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\Messenger\little_kevin_94@hotmail.com\ObjectStore
4/4/2010 10:11:33 PM 368801 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\Messenger\little_kevin_94@hotmail.com\ObjectStore\Backgrounds
4/4/2010 10:11:33 PM 799970 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\Messenger\little_kevin_94@hotmail.com\ObjectStore\DynamicBackgrounds
4/4/2010 10:11:34 PM 1330209 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\Messenger\little_kevin_94@hotmail.com\ObjectStore\Scenes
4/4/2010 10:11:34 PM 2231 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\Messenger\little_kevin_94@hotmail.com\ObjectStore\UserTile
4/4/2010 10:11:34 PM 52545 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\Messenger\little_kevin_94@hotmail.com\SocialNews
4/4/2010 10:11:34 PM 4162675 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\Messenger\too_tall_dude@hotmail.com
4/4/2010 10:11:34 PM 4089868 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\Messenger\too_tall_dude@hotmail.com\ObjectStore
4/4/2010 10:11:34 PM 431063 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\Messenger\too_tall_dude@hotmail.com\ObjectStore\Backgrounds
4/4/2010 10:11:34 PM 866375 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\Messenger\too_tall_dude@hotmail.com\ObjectStore\DynamicBackgrounds
4/4/2010 10:11:34 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\Messenger\too_tall_dude@hotmail.com\ObjectStore\Photoshare
4/4/2010 10:11:34 PM 1500641 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\Messenger\too_tall_dude@hotmail.com\ObjectStore\Scenes
4/4/2010 10:11:35 PM 636224 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\Messenger\too_tall_dude@hotmail.com\ObjectStore\UserTile
4/4/2010 10:11:36 PM 655565 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\Messenger\too_tall_dude@hotmail.com\ObjectStore\Winks3
4/4/2010 10:11:37 PM 72807 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\Messenger\too_tall_dude@hotmail.com\SocialNews
4/4/2010 10:11:37 PM 3730 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\MSDN
4/4/2010 10:11:37 PM 1794 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\MSDN\8.0
4/4/2010 10:11:37 PM 1936 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\MSDN\9.0
4/4/2010 10:11:37 PM 4760358 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\Office
4/4/2010 10:11:37 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\Office\12.0
4/4/2010 10:11:37 PM 4688192 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\Office\Groove
4/4/2010 10:11:37 PM 2758976 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\Office\Groove\System
4/4/2010 10:11:37 PM 344 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\Office\Groove\System\Groovebinaryfilestore.xss_
4/4/2010 10:11:37 PM 16384 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\Office\Groove\System\_systeminstall_
4/4/2010 10:11:37 PM 1929216 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\Office\Groove\User
4/4/2010 10:11:38 PM 438272 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\Office\Groove\User\Accounts
4/4/2010 10:11:38 PM 102400 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\Office\Groove\User\Accounts\Gkekd3dp7ea92sr224u7cz3ijzhrcs3yxivtzes
4/4/2010 10:11:38 PM 64401 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\Office\OffDiag
4/4/2010 10:11:38 PM 6737 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\Office\ONetConfig
4/4/2010 10:11:38 PM 1089168 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\OneNote
4/4/2010 10:11:38 PM 1089168 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\OneNote\12.0
4/4/2010 10:11:38 PM 1089168 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\OneNote\12.0\Backup
4/4/2010 10:11:38 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\OneNote\12.0\Backup\OneNote 2007 Guide
4/4/2010 10:11:38 PM 213632 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\OneNote\12.0\Backup\Personal Notebook
4/4/2010 10:11:38 PM 43800 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\OneNote\12.0\Backup\Unfiled Notes
4/4/2010 10:11:38 PM 831736 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\OneNote\12.0\Backup\Work Notebook
4/4/2010 10:11:38 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\OneNote\12.0\OneNoteOfflineCache_Files
4/4/2010 10:11:38 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\Outlook
4/4/2010 10:11:38 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\Portable Devices
4/4/2010 10:11:38 PM 77 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\Silverlight
4/4/2010 10:11:38 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\Silverlight\is
4/4/2010 10:11:38 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\Silverlight\is\l1wfuvvm.bm1
4/4/2010 10:11:38 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\Silverlight\is\l1wfuvvm.bm1\ocsvjtmp.0bp
4/4/2010 10:11:38 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\Silverlight\is\l1wfuvvm.bm1\ocsvjtmp.0bp\1
4/4/2010 10:11:38 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\Silverlight\is\l1wfuvvm.bm1\ocsvjtmp.0bp\1\l
4/4/2010 10:11:38 PM 3882761 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\VisualStudio
4/4/2010 10:11:38 PM 3882761 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\VisualStudio\9.0
4/4/2010 10:11:39 PM 296999 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\VisualStudio\9.0\1033
4/4/2010 10:11:39 PM 1936 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\VSA
4/4/2010 10:11:39 PM 1936 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\VSA\9.0
4/4/2010 10:11:39 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\VSCommon
4/4/2010 10:11:39 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\VSCommon\9.0
4/4/2010 10:11:39 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\VSCommon\9.0\SQM
4/4/2010 10:11:39 PM 263168 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\Windows
4/4/2010 10:11:39 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\Windows Live
4/4/2010 10:11:39 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\Windows Live\SqmApi
4/4/2010 10:11:39 PM 2745088 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\Windows Live Contacts
4/4/2010 10:11:39 PM 8276 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\Windows Live Contacts\{1b4272e5-be7a-460c-b5eb-2e321809d875}
4/4/2010 10:11:39 PM 8276 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\Windows Live Contacts\{1b4272e5-be7a-460c-b5eb-2e321809d875}\DBStore
4/4/2010 10:11:39 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\Windows Live Contacts\{1b4272e5-be7a-460c-b5eb-2e321809d875}\DBStore\LogFiles
4/4/2010 10:11:39 PM 8276 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\Windows Live Contacts\{2ba4d8dc-c169-4a6e-9e27-3d247a6f8d84}
4/4/2010 10:11:39 PM 8276 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\Windows Live Contacts\{2ba4d8dc-c169-4a6e-9e27-3d247a6f8d84}\DBStore
4/4/2010 10:11:39 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\Windows Live Contacts\{2ba4d8dc-c169-4a6e-9e27-3d247a6f8d84}\DBStore\LogFiles
4/4/2010 10:11:39 PM 8276 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\Windows Live Contacts\{4ef737f9-6b2e-4f8e-b014-f90983a65aed}
4/4/2010 10:11:39 PM 8276 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\Windows Live Contacts\{4ef737f9-6b2e-4f8e-b014-f90983a65aed}\DBStore
4/4/2010 10:11:39 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\Windows Live Contacts\{4ef737f9-6b2e-4f8e-b014-f90983a65aed}\DBStore\LogFiles
4/4/2010 10:11:39 PM 8276 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\Windows Live Contacts\{75765b07-b3d3-4670-837f-0e17fa35b2e8}
4/4/2010 10:11:39 PM 8276 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\Windows Live Contacts\{75765b07-b3d3-4670-837f-0e17fa35b2e8}\DBStore
4/4/2010 10:11:39 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\Windows Live Contacts\{75765b07-b3d3-4670-837f-0e17fa35b2e8}\DBStore\LogFiles
4/4/2010 10:11:39 PM 1351854 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\Windows Live Contacts\{a8904cfc-5a7c-4c92-85c6-afae75f5300c}
4/4/2010 10:11:39 PM 1351854 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\Windows Live Contacts\{a8904cfc-5a7c-4c92-85c6-afae75f5300c}\DBStore
4/4/2010 10:11:39 PM 16384 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\Windows Live Contacts\{a8904cfc-5a7c-4c92-85c6-afae75f5300c}\DBStore\Backup
4/4/2010 10:11:39 PM 16384 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\Windows Live Contacts\{a8904cfc-5a7c-4c92-85c6-afae75f5300c}\DBStore\Backup\new
4/4/2010 10:11:39 PM 1048576 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\Windows Live Contacts\{a8904cfc-5a7c-4c92-85c6-afae75f5300c}\DBStore\LogFiles
4/4/2010 10:11:39 PM 1351854 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\Windows Live Contacts\{bcb0a872-8468-416a-ab7b-82c9fa80a57b}
4/4/2010 10:11:39 PM 1351854 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\Windows Live Contacts\{bcb0a872-8468-416a-ab7b-82c9fa80a57b}\DBStore
4/4/2010 10:11:39 PM 16384 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\Windows Live Contacts\{bcb0a872-8468-416a-ab7b-82c9fa80a57b}\DBStore\Backup
4/4/2010 10:11:39 PM 16384 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\Windows Live Contacts\{bcb0a872-8468-416a-ab7b-82c9fa80a57b}\DBStore\Backup\new
4/4/2010 10:11:39 PM 1048576 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\Windows Live Contacts\{bcb0a872-8468-416a-ab7b-82c9fa80a57b}\DBStore\LogFiles
4/4/2010 10:11:39 PM 8276 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\Windows Live Contacts\{fdad4889-f875-4941-8de0-83b618a7e52a}
4/4/2010 10:11:39 PM 8276 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\Windows Live Contacts\{fdad4889-f875-4941-8de0-83b618a7e52a}\DBStore
4/4/2010 10:11:39 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\Windows Live Contacts\{fdad4889-f875-4941-8de0-83b618a7e52a}\DBStore\LogFiles
4/4/2010 10:11:39 PM 25365 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\Windows Media
4/4/2010 10:11:39 PM 11018 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\Windows Media\11.0
4/4/2010 10:11:39 PM 14347 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft\Windows Media\9.0
4/4/2010 10:11:39 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Microsoft Help
4/4/2010 10:11:39 PM 1919822 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Mozilla
4/4/2010 10:11:39 PM 118698 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Mozilla\Firefox
4/4/2010 10:11:39 PM 118698 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Mozilla\Firefox\Mozilla Firefox
4/4/2010 10:11:39 PM 111651 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Mozilla\Firefox\Mozilla Firefox\updates
4/4/2010 10:11:39 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Mozilla\Firefox\Mozilla Firefox\updates\0
4/4/2010 10:11:39 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Mozilla\Firefox\Profiles
4/4/2010 10:11:39 PM 1801124 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Mozilla\Sunbird
4/4/2010 10:11:39 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Mozilla\Sunbird\Mozilla Sunbird
4/4/2010 10:11:39 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Mozilla\Sunbird\Mozilla Sunbird\updates
4/4/2010 10:11:39 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Mozilla\Sunbird\Mozilla Sunbird\updates\0
4/4/2010 10:11:39 PM 1801124 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Mozilla\Sunbird\Profiles
4/4/2010 10:11:39 PM 1801124 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\Mozilla\Sunbird\Profiles\srg3s7iq.default
4/4/2010 10:11:39 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\NOS
4/4/2010 10:11:39 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\PCHealth
4/4/2010 10:11:39 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\PCHealth\ErrorRep
4/4/2010 10:11:39 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\PCHealth\ErrorRep\QSignoff
4/4/2010 10:11:39 PM 1781313 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\TheWeatherNetwork
4/4/2010 10:11:39 PM 1781313 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\TheWeatherNetwork\WeatherEye
4/4/2010 10:11:39 PM 9102 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Application Data\TheWeatherNetwork\WeatherEye\cache
4/4/2010 10:11:40 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Apps
4/4/2010 10:11:40 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Apps\2.0
4/4/2010 10:11:40 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Apps\2.0\KAHERZ34.MAM
4/4/2010 10:11:40 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Apps\2.0\KAHERZ34.MAM\4K37VMT9.7VZ
4/4/2010 10:11:40 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Apps\2.0\KAHERZ34.MAM\4K37VMT9.7VZ\manifests
4/4/2010 10:11:40 PM 409826 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\History
4/4/2010 10:11:40 PM 409713 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\History\History.IE5
4/4/2010 10:11:40 PM 32768 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\History\History.IE5\MSHist012009081920090820
4/4/2010 10:11:40 PM 32768 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\History\History.IE5\MSHist012010020120100208
4/4/2010 10:11:40 PM 32768 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\History\History.IE5\MSHist012010020820100215
4/4/2010 10:11:40 PM 32768 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\History\History.IE5\MSHist012010021520100216
4/4/2010 10:11:40 PM 81920 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\History\History.IE5\MSHist012010021620100217
4/4/2010 10:11:40 PM 32768 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\History\History.IE5\MSHist012010021720100218
4/4/2010 10:11:40 PM 32768 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\History\History.IE5\MSHist012010021820100219
4/4/2010 10:11:40 PM 32768 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\History\History.IE5\MSHist012010021920100220
4/4/2010 10:11:40 PM 32768 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\History\History.IE5\MSHist012010022020100221
4/4/2010 10:11:40 PM 32768 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\History\History.IE5\MSHist012010022120100222
4/4/2010 10:11:40 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Temp
4/4/2010 10:11:40 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Local Settings\Temporary Internet Files
4/4/2010 10:11:40 PM 67297740 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents
4/4/2010 10:11:40 PM 1511560 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\Downloads
4/4/2010 10:11:40 PM 12800 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\LimeWire
4/4/2010 10:11:40 PM 12800 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\LimeWire\Incomplete
4/4/2010 10:11:40 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\LimeWire\Saved
4/4/2010 10:11:40 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\LimeWire\Store Purchased
4/4/2010 10:11:40 PM 18125564 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My eBooks
4/4/2010 10:11:41 PM 248832 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My eBooks\AQOTWF
4/4/2010 10:11:41 PM 4427051 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My eBooks\Business
4/4/2010 10:11:41 PM 3262251 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My eBooks\Business\Business Project
4/4/2010 10:11:41 PM 2368924 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My eBooks\Business\Business Project\Completed
4/4/2010 10:11:41 PM 183183 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My eBooks\Business\Business Project\To Be Printed
4/4/2010 10:11:41 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My eBooks\Business\Business Project\To Be Worked On
4/4/2010 10:11:41 PM 780694 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My eBooks\Elementary School
4/4/2010 10:11:42 PM 890370 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My eBooks\English
4/4/2010 10:11:42 PM 88064 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My eBooks\Foods
4/4/2010 10:11:42 PM 173568 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My eBooks\French
4/4/2010 10:11:42 PM 4303857 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My eBooks\Other
4/4/2010 10:11:43 PM 2870414 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My eBooks\Other\Totem Pole Powerpoints
4/4/2010 10:11:43 PM 33792 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My eBooks\Other\Totem Pole Powerpoints\IMPORTANT OPEN ME!!! - IBLOCK ASSEMBLY
4/4/2010 10:11:43 PM 2622518 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My eBooks\Other\Totem Pole Powerpoints\Totem Poles
4/4/2010 10:11:43 PM 7168 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My eBooks\Other\Totem Pole Powerpoints\Totem Poles\Chris
4/4/2010 10:11:43 PM 686174 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My eBooks\Other\Totem Pole Powerpoints\Totem Poles\Henry
4/4/2010 10:11:43 PM 6144 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My eBooks\Other\Totem Pole Powerpoints\Totem Poles\Marcus
4/4/2010 10:11:43 PM 1179319 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My eBooks\Other\Totem Pole Powerpoints\Totem Poles\New Folder
4/4/2010 10:11:44 PM 558592 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My eBooks\Personal Planning 10
4/4/2010 10:11:44 PM 204800 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My eBooks\Resume's
4/4/2010 10:11:44 PM 509102 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My eBooks\Science
4/4/2010 10:11:44 PM 225792 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My eBooks\Science\New Folder
4/4/2010 10:11:44 PM 4109084 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My eBooks\Socials
4/4/2010 10:11:44 PM 1195946 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My eBooks\Socials\Book Reports
4/4/2010 10:11:45 PM 175555 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My eBooks\Socials\Chapter Questions
4/4/2010 10:11:45 PM 150785 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My eBooks\Socials\Eco Journals
4/4/2010 10:11:46 PM 472820 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My eBooks\Socials\Movie Critiques
4/4/2010 10:11:46 PM 156437 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My eBooks\Socials\Other
4/4/2010 10:11:46 PM 1236039 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My eBooks\Socials\Vocabulary
4/4/2010 10:11:47 PM 8276223 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music
4/4/2010 10:11:47 PM 8275404 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes
4/4/2010 10:11:47 PM 6445926 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork
4/4/2010 10:11:47 PM 6445926 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache
4/4/2010 10:11:47 PM 6445926 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B
4/4/2010 10:11:47 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\00
4/4/2010 10:11:47 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\00\09
4/4/2010 10:11:47 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\00\09\14
4/4/2010 10:11:47 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\01
4/4/2010 10:11:47 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\01\10
4/4/2010 10:11:47 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\01\10\12
4/4/2010 10:11:47 PM 566562 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\02
4/4/2010 10:11:47 PM 48356 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\02\08
4/4/2010 10:11:47 PM 48356 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\02\08\03
4/4/2010 10:11:47 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\02\09
4/4/2010 10:11:47 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\02\09\10
4/4/2010 10:11:47 PM 310979 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\02\11
4/4/2010 10:11:47 PM 310979 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\02\11\12
4/4/2010 10:11:47 PM 207227 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\02\15
4/4/2010 10:11:47 PM 207227 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\02\15\05
4/4/2010 10:11:47 PM 320879 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\03
4/4/2010 10:11:47 PM 85687 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\03\03
4/4/2010 10:11:47 PM 85687 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\03\03\02
4/4/2010 10:11:47 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\03\05
4/4/2010 10:11:47 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\03\05\08
4/4/2010 10:11:47 PM 235192 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\03\14
4/4/2010 10:11:47 PM 235192 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\03\14\07
4/4/2010 10:11:47 PM 486676 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\04
4/4/2010 10:11:47 PM 234931 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\04\03
4/4/2010 10:11:47 PM 234931 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\04\03\10
4/4/2010 10:11:47 PM 251745 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\04\14
4/4/2010 10:11:47 PM 251745 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\04\14\09
4/4/2010 10:11:47 PM 284895 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\05
4/4/2010 10:11:47 PM 232762 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\05\04
4/4/2010 10:11:47 PM 82613 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\05\04\02
4/4/2010 10:11:47 PM 150149 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\05\04\13
4/4/2010 10:11:47 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\05\11
4/4/2010 10:11:47 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\05\11\01
4/4/2010 10:11:47 PM 52133 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\05\14
4/4/2010 10:11:47 PM 52133 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\05\14\14
4/4/2010 10:11:48 PM 363125 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\06
4/4/2010 10:11:48 PM 363125 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\06\08
4/4/2010 10:11:48 PM 363125 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\06\08\15
4/4/2010 10:11:48 PM 812802 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\07
4/4/2010 10:11:48 PM 98957 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\07\04
4/4/2010 10:11:48 PM 98957 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\07\04\07
4/4/2010 10:11:48 PM 238583 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\07\09
4/4/2010 10:11:48 PM 238583 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\07\09\07
4/4/2010 10:11:48 PM 475262 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\07\12
4/4/2010 10:11:48 PM 27079 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\07\12\06
4/4/2010 10:11:48 PM 448183 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\07\12\14
4/4/2010 10:11:48 PM 1264728 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\08
4/4/2010 10:11:48 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\08\02
4/4/2010 10:11:48 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\08\02\05
4/4/2010 10:11:48 PM 754441 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\08\05
4/4/2010 10:11:48 PM 388702 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\08\05\10
4/4/2010 10:11:48 PM 365739 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\08\05\12
4/4/2010 10:11:48 PM 122211 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\08\10
4/4/2010 10:11:48 PM 122211 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\08\10\11
4/4/2010 10:11:48 PM 388076 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\08\13
4/4/2010 10:11:48 PM 388076 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\08\13\11
4/4/2010 10:11:48 PM 44742 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\09
4/4/2010 10:11:48 PM 44742 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\09\01
4/4/2010 10:11:48 PM 44742 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\09\01\15
4/4/2010 10:11:48 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\10
4/4/2010 10:11:48 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\10\13
4/4/2010 10:11:48 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\10\13\14
4/4/2010 10:11:48 PM 854849 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\11
4/4/2010 10:11:48 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\11\00
4/4/2010 10:11:48 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\11\00\14
4/4/2010 10:11:48 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\11\04
4/4/2010 10:11:48 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\11\04\06
4/4/2010 10:11:48 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\11\07
4/4/2010 10:11:48 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\11\07\02
4/4/2010 10:11:48 PM 370271 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\11\08
4/4/2010 10:11:48 PM 370271 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\11\08\14
4/4/2010 10:11:48 PM 79198 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\11\10
4/4/2010 10:11:48 PM 79198 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\11\10\11
4/4/2010 10:11:48 PM 405380 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\11\15
4/4/2010 10:11:48 PM 405380 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\11\15\13
4/4/2010 10:11:48 PM 475150 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\12
4/4/2010 10:11:48 PM 129971 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\12\03
4/4/2010 10:11:48 PM 129971 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\12\03\01
4/4/2010 10:11:48 PM 59775 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\12\07
4/4/2010 10:11:48 PM 59775 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\12\07\11
4/4/2010 10:11:48 PM 285404 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\12\11
4/4/2010 10:11:48 PM 285404 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\12\11\12
4/4/2010 10:11:48 PM 161251 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\13
4/4/2010 10:11:48 PM 68915 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\13\02
4/4/2010 10:11:48 PM 68915 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\13\02\01
4/4/2010 10:11:48 PM 92336 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\13\12
4/4/2010 10:11:48 PM 92336 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\13\12\14
4/4/2010 10:11:48 PM 105932 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\14
4/4/2010 10:11:48 PM 105932 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\14\04
4/4/2010 10:11:48 PM 105932 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\14\04\07
4/4/2010 10:11:48 PM 704335 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\15
4/4/2010 10:11:48 PM 328891 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\15\00
4/4/2010 10:11:48 PM 328891 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\15\00\15
4/4/2010 10:11:48 PM 375444 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\15\10
4/4/2010 10:11:48 PM 340875 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\15\10\01
4/4/2010 10:11:49 PM 34569 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Album Artwork\Cache\5BB35D91B05BE70B\15\10\15
4/4/2010 10:11:49 PM 1014229 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\iTunes Music
4/4/2010 10:11:49 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\iTunes Music\Automatically Add to iTunes
4/4/2010 10:11:49 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\iTunes Music\Downloads
4/4/2010 10:11:49 PM 1013924 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\iTunes Music\Mobile Applications
4/4/2010 10:11:49 PM 102209 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Music\iTunes\Previous iTunes Libraries
4/4/2010 10:11:49 PM 3049443 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Pictures
4/4/2010 10:11:49 PM 30742084 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Received Files
4/4/2010 10:11:50 PM 665430 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Received Files\Documents
4/4/2010 10:11:51 PM 463215 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Received Files\Genuine_In_5_sec
4/4/2010 10:11:51 PM 19707112 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Received Files\too_tall_dude1563830294
4/4/2010 10:11:51 PM 19707112 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Received Files\too_tall_dude1563830294\History
4/4/2010 10:11:55 PM 4682 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Videos
4/4/2010 10:11:55 PM 4500 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Videos\DivX Movies
4/4/2010 10:11:55 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\My Videos\DivX Movies\Temporary Downloaded Files
4/4/2010 10:11:55 PM 711627 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\New Folder
4/4/2010 10:11:55 PM 1171544 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\OneNote Notebooks
4/4/2010 10:11:55 PM 4984 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\OneNote Notebooks\OneNote 2007 Guide
4/4/2010 10:11:55 PM 221096 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\OneNote Notebooks\Personal Notebook
4/4/2010 10:11:55 PM 839112 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\OneNote Notebooks\Work Notebook
4/4/2010 10:11:55 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\PassMark
4/4/2010 10:11:55 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\PassMark\BurnInTest
4/4/2010 10:11:55 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\Visual Studio 2005
4/4/2010 10:11:55 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\Visual Studio 2005\Templates
4/4/2010 10:11:55 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\Visual Studio 2005\Templates\ItemTemplates
4/4/2010 10:11:55 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\Visual Studio 2005\Templates\ProjectTemplates
4/4/2010 10:11:55 PM 3034099 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\Visual Studio 2008
4/4/2010 10:11:55 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\Visual Studio 2008\Code Snippets
4/4/2010 10:11:55 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\Visual Studio 2008\Code Snippets\Visual Basic
4/4/2010 10:11:55 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\Visual Studio 2008\Code Snippets\Visual Basic\My Code Snippets
4/4/2010 10:11:55 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\Visual Studio 2008\Code Snippets\Visual C#
4/4/2010 10:11:55 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\Visual Studio 2008\Code Snippets\Visual C#\My Code Snippets
4/4/2010 10:11:55 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\Visual Studio 2008\Code Snippets\XML
4/4/2010 10:11:55 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\Visual Studio 2008\Code Snippets\XML\My Xml Snippets
4/4/2010 10:11:55 PM 2745073 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\Visual Studio 2008\Projects
4/4/2010 10:11:55 PM 2027761 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\Visual Studio 2008\Projects\gdfgdf
4/4/2010 10:11:56 PM 2014642 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\Visual Studio 2008\Projects\gdfgdf\gdfgdf
4/4/2010 10:11:56 PM 1986555 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\Visual Studio 2008\Projects\gdfgdf\gdfgdf\Debug
4/4/2010 10:11:56 PM 717312 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\Visual Studio 2008\Projects\VSMacros80
4/4/2010 10:11:56 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\Visual Studio 2008\Projects\VSMacros80\MyMacros
4/4/2010 10:11:56 PM 717312 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\Visual Studio 2008\Projects\VSMacros80\Samples
4/4/2010 10:11:56 PM 289026 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\Visual Studio 2008\Settings
4/4/2010 10:11:56 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\Visual Studio 2008\Templates
4/4/2010 10:11:56 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\Visual Studio 2008\Templates\ItemTemplates
4/4/2010 10:11:56 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\Visual Studio 2008\Templates\ItemTemplates\Visual Basic
4/4/2010 10:11:56 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\Visual Studio 2008\Templates\ItemTemplates\Visual C#
4/4/2010 10:11:56 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\Visual Studio 2008\Templates\ItemTemplates\Visual Web Developer
4/4/2010 10:11:56 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\Visual Studio 2008\Templates\ProjectTemplates
4/4/2010 10:11:56 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\Visual Studio 2008\Templates\ProjectTemplates\Visual Basic
4/4/2010 10:11:56 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\Visual Studio 2008\Templates\ProjectTemplates\Visual C#
4/4/2010 10:11:56 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\Visual Studio 2008\Templates\ProjectTemplates\Visual Web Developer
4/4/2010 10:11:56 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\NetHood
4/4/2010 10:11:56 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\PrintHood
4/4/2010 10:11:56 PM 1930 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Recent
4/4/2010 10:11:56 PM 181 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\SendTo
4/4/2010 10:11:56 PM 34449 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Start Menu
4/4/2010 10:11:56 PM 33695 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Start Menu\Programs
4/4/2010 10:11:56 PM 16642 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Start Menu\Programs\Accessories
4/4/2010 10:11:56 PM 6445 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Start Menu\Programs\Accessories\Accessibility
4/4/2010 10:11:56 PM 888 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Start Menu\Programs\Accessories\Entertainment
4/4/2010 10:11:56 PM 4579 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Start Menu\Programs\LimeWire
4/4/2010 10:11:56 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Start Menu\Programs\Sony Ericsson
4/4/2010 10:11:56 PM 2603 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Start Menu\Programs\SpeedFan
4/4/2010 10:11:56 PM 84 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Start Menu\Programs\Startup
4/4/2010 10:11:56 PM 3564 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Start Menu\Programs\TheWeatherNetwork
4/4/2010 10:11:57 PM 2093 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Start Menu\Programs\WinRAR
4/4/2010 10:11:57 PM 37456 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Templates
4/4/2010 10:11:57 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Tracing
4/4/2010 10:11:57 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Tracing\WPPMedia
4/4/2010 10:11:57 PM 32808 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\UserData
4/4/2010 10:11:57 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\UserData\6UKAD1RJ
4/4/2010 10:11:57 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\UserData\7LRBY08K
4/4/2010 10:11:57 PM 40 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\UserData\GA29PPZM
4/4/2010 10:11:57 PM 0 C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\UserData\QF0PITDC
4/10/2010 10:49:53 PM 10638 C:\Qoobox
4/10/2010 10:50:38 PM 10587 C:\Qoobox\BackEnv
4/10/2010 10:50:21 PM 0 C:\Qoobox\LastRun
4/10/2010 10:49:53 PM 51 C:\Qoobox\Quarantine
4/10/2010 10:51:16 PM 0 C:\Qoobox\Quarantine\C
4/10/2010 10:49:53 PM 0 C:\Qoobox\Quarantine\Registry_backups
4/10/2010 10:50:21 PM 0 C:\Qoobox\Test
4/10/2010 10:50:21 PM 0 C:\Qoobox\TestC
4/3/2010 10:43:05 PM 85 C:\RECYCLER
4/3/2010 10:43:05 PM 85 C:\RECYCLER\S-1-5-21-1123432360-247674877-3292285946-1005
4/8/2010 7:10:19 PM 76427 C:\_OTL
4/8/2010 7:10:19 PM 76427 C:\_OTL\MovedFiles
4/8/2010 7:10:19 PM 40778 C:\_OTL\MovedFiles\04082010_191019
4/8/2010 7:12:49 PM 40778 C:\_OTL\MovedFiles\04082010_191019\C_Documents and Settings
4/8/2010 7:12:49 PM 40778 C:\_OTL\MovedFiles\04082010_191019\C_Documents and Settings\NetworkService
4/8/2010 7:12:49 PM 40778 C:\_OTL\MovedFiles\04082010_191019\C_Documents and Settings\NetworkService\Local Settings
4/8/2010 7:12:49 PM 40778 C:\_OTL\MovedFiles\04082010_191019\C_Documents and Settings\NetworkService\Local Settings\Temporary Internet Files
4/8/2010 7:12:49 PM 40778 C:\_OTL\MovedFiles\04082010_191019\C_Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5
4/8/2010 7:12:50 PM 1288 C:\_OTL\MovedFiles\04082010_191019\C_Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\1NPSBUCB
4/8/2010 7:12:49 PM 22857 C:\_OTL\MovedFiles\04082010_191019\C_Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\8NC3O6LU
4/8/2010 7:12:49 PM 3638 C:\_OTL\MovedFiles\04082010_191019\C_Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\FTAMW2HC
4/8/2010 7:12:49 PM 12995 C:\_OTL\MovedFiles\04082010_191019\C_Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\WDEXQ1C5
4/10/2010 8:39:31 PM 21093 C:\_OTL\MovedFiles\04102010_203931
4/10/2010 8:41:09 PM 21093 C:\_OTL\MovedFiles\04102010_203931\C_Documents and Settings
4/10/2010 8:41:09 PM 21093 C:\_OTL\MovedFiles\04102010_203931\C_Documents and Settings\NetworkService
4/10/2010 8:41:09 PM 21093 C:\_OTL\MovedFiles\04102010_203931\C_Documents and Settings\NetworkService\Local Settings
4/10/2010 8:41:09 PM 21093 C:\_OTL\MovedFiles\04102010_203931\C_Documents and Settings\NetworkService\Local Settings\Temporary Internet Files
4/10/2010 8:41:09 PM 21093 C:\_OTL\MovedFiles\04102010_203931\C_Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5
4/10/2010 8:41:09 PM 6139 C:\_OTL\MovedFiles\04102010_203931\C_Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\JFJZ32AT
4/10/2010 8:41:09 PM 59 C:\_OTL\MovedFiles\04102010_203931\C_Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\VUTCSOEL
4/10/2010 8:41:09 PM 14895 C:\_OTL\MovedFiles\04102010_203931\C_Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\ZA6EJ6XM
4/10/2010 9:29:39 AM 1752 C:\_OTM
4/10/2010 9:29:39 AM 1752 C:\_OTM\MovedFiles
4/10/2010 9:29:39 AM 0 C:\_OTM\MovedFiles\04102010_092939
4/10/2010 8:55:13 PM 0 C:\_OTM\MovedFiles\04102010_205513
4/8/2010 7:10:20 PM 96512 32 C:\atapi.sys
4/2/2010 3:21:18 PM 211 32 C:\Boot.bak
4/2/2010 3:21:16 PM 260272 32 C:\cmldr
4/4/2010 10:11:01 PM 1824 32 C:\HelpAsst.log
4/2/2010 6:30:03 PM 478 32 C:\rkill.log
4/5/2010 11:15:46 AM 20890 32 C:\TDSSKiller.txt
2/11/2010 1:08:02 AM 960119 C:\WINDOWS\$NtUninstallKB971468$
2/11/2010 1:08:02 AM 626167 C:\WINDOWS\$NtUninstallKB971468$\spuninst
2/11/2010 1:06:58 AM 1935135 C:\WINDOWS\$NtUninstallKB975560$
2/11/2010 1:06:58 AM 626975 C:\WINDOWS\$NtUninstallKB975560$\spuninst
3/10/2010 11:59:33 PM 4185193 C:\WINDOWS\$NtUninstallKB975561$
3/10/2010 11:59:33 PM 626281 C:\WINDOWS\$NtUninstallKB975561$\spuninst
2/11/2010 1:07:04 AM 1100159 C:\WINDOWS\$NtUninstallKB975713$
2/11/2010 1:07:04 AM 626047 C:\WINDOWS\$NtUninstallKB975713$\spuninst
2/11/2010 1:06:20 AM 13222122 C:\WINDOWS\$NtUninstallKB977165$
2/11/2010 1:06:20 AM 628458 C:\WINDOWS\$NtUninstallKB977165$\spuninst
2/11/2010 1:06:31 AM 806423 C:\WINDOWS\$NtUninstallKB977914$
2/11/2010 1:06:31 AM 628759 C:\WINDOWS\$NtUninstallKB977914$\spuninst
2/11/2010 1:07:07 AM 658363 C:\WINDOWS\$NtUninstallKB978037$
2/11/2010 1:07:07 AM 626107 C:\WINDOWS\$NtUninstallKB978037$\spuninst
2/11/2010 1:07:01 AM 1081760 C:\WINDOWS\$NtUninstallKB978251$
2/11/2010 1:07:01 AM 626464 C:\WINDOWS\$NtUninstallKB978251$\spuninst
2/11/2010 1:08:06 AM 1915406 C:\WINDOWS\$NtUninstallKB978262$
2/11/2010 1:08:06 AM 625166 C:\WINDOWS\$NtUninstallKB978262$\spuninst
2/11/2010 1:06:26 AM 968907 C:\WINDOWS\$NtUninstallKB978706$
2/11/2010 1:06:26 AM 625867 C:\WINDOWS\$NtUninstallKB978706$\spuninst
2/25/2010 1:02:34 AM 787203 C:\WINDOWS\$NtUninstallKB979306$
2/25/2010 1:02:34 AM 642819 C:\WINDOWS\$NtUninstallKB979306$\spuninst
4/1/2010 7:51:01 AM 9769886 C:\WINDOWS\$NtUninstallKB980182$
4/1/2010 7:51:01 AM 632734 C:\WINDOWS\$NtUninstallKB980182$\spuninst
4/2/2010 3:16:59 PM 137871115 C:\WINDOWS\ERDNT
4/4/2010 11:00:34 AM 56114025 C:\WINDOWS\ERDNT\4-4-2010
4/4/2010 11:00:35 AM 4599808 C:\WINDOWS\ERDNT\4-4-2010\Users
4/4/2010 11:00:35 AM 4399104 C:\WINDOWS\ERDNT\4-4-2010\Users\00000001
4/4/2010 11:00:35 AM 200704 C:\WINDOWS\ERDNT\4-4-2010\Users\00000002
4/2/2010 3:37:17 PM 20858352 C:\WINDOWS\ERDNT\cache
4/2/2010 3:16:59 PM 60898628 C:\WINDOWS\ERDNT\Hiv-backup
4/10/2010 10:50:36 PM 5414912 C:\WINDOWS\ERDNT\Hiv-backup\Users
4/10/2010 10:50:36 PM 245760 C:\WINDOWS\ERDNT\Hiv-backup\Users\00000001
4/10/2010 10:50:36 PM 8192 C:\WINDOWS\ERDNT\Hiv-backup\Users\00000002
4/10/2010 10:50:36 PM 241664 C:\WINDOWS\ERDNT\Hiv-backup\Users\00000003
4/10/2010 10:50:37 PM 8192 C:\WINDOWS\ERDNT\Hiv-backup\Users\00000004
4/10/2010 10:50:37 PM 4710400 C:\WINDOWS\ERDNT\Hiv-backup\Users\00000005
4/10/2010 10:50:37 PM 200704 C:\WINDOWS\ERDNT\Hiv-backup\Users\00000006
4/3/2010 11:00:16 PM 103299393 C:\WINDOWS\Internet Logs
2/13/2010 11:30:52 AM 5234 C:\WINDOWS\pss
4/2/2010 3:52:17 PM 33024 C:\WINDOWS\temp
4/10/2010 10:58:42 PM 0 C:\WINDOWS\temp\babv.tmp
4/11/2010 12:28:47 AM 0 C:\WINDOWS\temp\bfnc.tmp
4/10/2010 10:16:50 PM 0 C:\WINDOWS\temp\cbms.tmp
4/10/2010 9:56:48 PM 0 C:\WINDOWS\temp\dcir.tmp
4/10/2010 10:36:50 PM 0 C:\WINDOWS\temp\dtbw.tmp
4/10/2010 9:31:46 PM 0 C:\WINDOWS\temp\eewg.tmp
4/10/2010 8:45:52 PM 0 C:\WINDOWS\temp\fthx.tmp
4/10/2010 9:41:48 PM 0 C:\WINDOWS\temp\gpxy.tmp
4/10/2010 10:01:49 PM 0 C:\WINDOWS\temp\grde.tmp
4/10/2010 11:18:43 PM 0 C:\WINDOWS\temp\hpyl.tmp
4/10/2010 8:50:52 PM 0 C:\WINDOWS\temp\idxb.tmp
4/11/2010 12:03:45 AM 0 C:\WINDOWS\temp\iedk.tmp
4/10/2010 11:13:43 PM 0 C:\WINDOWS\temp\ihbc.tmp
4/10/2010 10:21:50 PM 0 C:\WINDOWS\temp\infa.tmp
4/10/2010 10:06:49 PM 0 C:\WINDOWS\temp\irhp.tmp
4/10/2010 10:41:51 PM 0 C:\WINDOWS\temp\jgkt.tmp
4/10/2010 10:51:57 PM 0 C:\WINDOWS\temp\jhso.tmp
4/10/2010 8:40:02 PM 0 C:\WINDOWS\temp\kcpy.tmp
4/10/2010 10:31:50 PM 0 C:\WINDOWS\temp\klsi.tmp
4/10/2010 9:36:47 PM 0 C:\WINDOWS\temp\kovp.tmp
4/10/2010 9:11:45 PM 0 C:\WINDOWS\temp\lvra.tmp
4/11/2010 12:33:47 AM 0 C:\WINDOWS\temp\majl.tmp
4/10/2010 11:23:43 PM 0 C:\WINDOWS\temp\molo.tmp
4/10/2010 9:46:48 PM 0 C:\WINDOWS\temp\mqvh.tmp
4/10/2010 9:21:45 PM 0 C:\WINDOWS\temp\ogcu.tmp
4/11/2010 12:08:46 AM 0 C:\WINDOWS\temp\pgyy.tmp
4/10/2010 11:28:44 PM 0 C:\WINDOWS\temp\pmoq.tmp
4/10/2010 11:58:45 PM 0 C:\WINDOWS\temp\qvtr.tmp
4/10/2010 9:26:46 PM 0 C:\WINDOWS\temp\ravu.tmp
4/11/2010 12:13:46 AM 0 C:\WINDOWS\temp\rbra.tmp
4/10/2010 10:46:51 PM 0 C:\WINDOWS\temp\rmss.tmp
4/10/2010 10:11:49 PM 0 C:\WINDOWS\temp\rqln.tmp
4/10/2010 9:06:40 PM 0 C:\WINDOWS\temp\spwi.tmp
4/10/2010 11:43:44 PM 0 C:\WINDOWS\temp\srpa.tmp
4/10/2010 10:26:50 PM 0 C:\WINDOWS\temp\thcv.tmp
4/10/2010 11:03:42 PM 0 C:\WINDOWS\temp\tynt.tmp
4/10/2010 11:33:44 PM 0 C:\WINDOWS\temp\viiv.tmp
4/10/2010 9:01:40 PM 0 C:\WINDOWS\temp\vkoi.tmp
4/11/2010 12:18:46 AM 0 C:\WINDOWS\temp\vnnv.tmp
4/11/2010 12:23:46 AM 0 C:\WINDOWS\temp\voub.tmp
4/10/2010 9:51:48 PM 0 C:\WINDOWS\temp\vpon.tmp
4/10/2010 9:16:45 PM 0 C:\WINDOWS\temp\wtwm.tmp
4/10/2010 11:08:43 PM 0 C:\WINDOWS\temp\xhcp.tmp
4/10/2010 11:38:44 PM 0 C:\WINDOWS\temp\ycyj.tmp
4/10/2010 11:48:45 PM 0 C:\WINDOWS\temp\ynfh.tmp
4/10/2010 11:53:45 PM 0 C:\WINDOWS\temp\yrkg.tmp
4/8/2010 7:12:58 PM 0 C:\WINDOWS\temp\_avast5_
4/2/2010 3:17:05 PM 80412 32 C:\WINDOWS\grep.exe
2/11/2010 1:08:02 AM 8063 32 C:\WINDOWS\KB971468.log
3/10/2010 11:59:20 PM 6267 32 C:\WINDOWS\KB975561.log
2/11/2010 1:06:10 AM 8255 32 C:\WINDOWS\KB977165.log
2/11/2010 1:07:01 AM 6606 32 C:\WINDOWS\KB978251.log
2/11/2010 1:08:05 AM 7551 32 C:\WINDOWS\KB978262.log
2/25/2010 1:02:33 AM 3777 32 C:\WINDOWS\KB979306.log
3/31/2010 7:50:38 AM 15242 32 C:\WINDOWS\KB980182.log
2/21/2010 10:52:20 PM 77312 32 C:\WINDOWS\mbr.exe
4/2/2010 3:17:05 PM 31232 32 C:\WINDOWS\NIRCMD.exe
2/12/2010 5:57:36 PM 283830 32 C:\WINDOWS\ntbtlog.txt
4/2/2010 3:17:05 PM 261632 32 C:\WINDOWS\PEV.exe
4/2/2010 3:17:05 PM 98816 32 C:\WINDOWS\sed.exe
4/2/2010 3:17:05 PM 161792 32 C:\WINDOWS\SWREG.exe
4/2/2010 3:17:05 PM 136704 32 C:\WINDOWS\SWSC.exe
4/2/2010 3:17:05 PM 212480 32 C:\WINDOWS\SWXCACLS.exe
4/2/2010 1:12:28 PM 44032 38 C:\WINDOWS\Thumbs.db
2/21/2010 10:10:25 PM 48 32 C:\WINDOWS\wininit.ini
4/2/2010 3:17:05 PM 68096 32 C:\WINDOWS\zip.exe
4/3/2010 11:31:43 PM 5843691 C:\WINDOWS\system32\CatRoot2
4/3/2010 11:31:43 PM 1056776 C:\WINDOWS\system32\CatRoot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}
4/3/2010 11:31:44 PM 3153928 C:\WINDOWS\system32\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}
4/3/2010 11:00:44 PM 13433582 C:\WINDOWS\system32\ZoneLabs
4/3/2010 11:00:44 PM 3925096 C:\WINDOWS\system32\ZoneLabs\lib
4/3/2010 11:00:44 PM 534560 C:\WINDOWS\system32\ZoneLabs\lib\pyd
4/3/2010 11:00:49 PM 0 C:\WINDOWS\system32\ZoneLabs\streamapi
4/3/2010 11:00:49 PM 37 C:\WINDOWS\system32\ZoneLabs\Updates
4/6/2010 3:38:47 PM 96704 32 C:\WINDOWS\system32\6f685ed4.exe
4/4/2010 11:10:46 AM 153184 32 C:\WINDOWS\system32\aswBoot.exe
4/4/2010 11:10:46 AM 38848 32 C:\WINDOWS\system32\avastSS.scr
4/2/2010 4:40:52 PM 664 32 C:\WINDOWS\system32\d3d9caps.dat
2/12/2010 11:46:14 AM 107808 32 C:\WINDOWS\system32\dns-sd.exe
2/12/2010 11:46:14 AM 91424 32 C:\WINDOWS\system32\dnssd.dll
2/15/2010 11:51:10 AM 21504 32 C:\WINDOWS\system32\hidserv.dll
2/21/2010 10:03:24 PM 45 32 C:\WINDOWS\system32\initdebug.nfo
4/2/2010 3:06:29 PM 145184 32 C:\WINDOWS\system32\java.exe
4/2/2010 3:06:29 PM 73728 32 C:\WINDOWS\system32\javacpl.cpl
4/2/2010 3:06:29 PM 145184 32 C:\WINDOWS\system32\javaw.exe
4/2/2010 3:06:29 PM 153376 32 C:\WINDOWS\system32\javaws.exe
2/12/2010 6:19:23 PM 181632 0 C:\WINDOWS\system32\MpSigStub.exe
3/17/2010 9:53:42 PM 69632 32 C:\WINDOWS\system32\QuickTime.qts
3/17/2010 9:53:42 PM 94208 32 C:\WINDOWS\system32\QuickTimeVR.qtx
4/3/2010 10:39:54 PM 5632 38 C:\WINDOWS\system32\Thumbs.db
4/3/2010 10:55:46 PM 75264 32 C:\WINDOWS\system32\unacev2.dll
4/3/2010 10:55:46 PM 153088 32 C:\WINDOWS\system32\UNRAR3.dll
4/3/2010 11:00:43 PM 422437 32 C:\WINDOWS\system32\vsconfig.xml
4/3/2010 11:00:16 PM 112008 32 C:\WINDOWS\system32\vsdata.dll
4/3/2010 11:00:43 PM 486280 32 C:\WINDOWS\system32\vsdatant.sys
4/3/2010 11:00:16 PM 227720 32 C:\WINDOWS\system32\vsinit.dll
4/3/2010 11:00:44 PM 107912 32 C:\WINDOWS\system32\vsmonapi.dll
4/3/2010 11:00:44 PM 299912 32 C:\WINDOWS\system32\vspubapi.dll
4/3/2010 11:00:49 PM 58248 32 C:\WINDOWS\system32\vsregexp.dll
4/3/2010 11:00:16 PM 621960 32 C:\WINDOWS\system32\vsutil.dll
4/3/2010 11:00:44 PM 41864 32 C:\WINDOWS\system32\vswmi.dll
4/3/2010 11:00:44 PM 109960 32 C:\WINDOWS\system32\vsxml.dll
4/3/2010 11:00:48 PM 69000 32 C:\WINDOWS\system32\zlcomm.dll
4/3/2010 11:00:48 PM 103816 32 C:\WINDOWS\system32\zlcommdb.dll
4/3/2010 11:00:49 PM 4212 34 C:\WINDOWS\system32\zllictbl.dat
4/3/2010 11:00:44 PM 1238408 32 C:\WINDOWS\system32\zpeng25.dll
4/3/2010 10:55:46 PM 69632 32 C:\WINDOWS\system32\ztvcabinet.dll

====== "\Administrator & All Users\Startup" Last 60 Days======




====== "\Program Files" Last 60 Days======

4/4/2010 11:10:44 AM 124755676 C:\Program Files\Alwil Software
3/30/2010 5:35:45 PM 599827 C:\Program Files\Bonjour
4/3/2010 11:00:50 PM 67164 C:\Program Files\CheckPoint
4/4/2010 11:00:09 AM 669141 C:\Program Files\ERUNT
4/3/2010 9:58:55 PM 0 C:\Program Files\Graboid
3/30/2010 5:39:54 PM 1582707 C:\Program Files\iPod
3/30/2010 5:39:50 PM 126582341 C:\Program Files\iTunes
4/2/2010 1:36:38 PM 3947723 C:\Program Files\Malwarebytes' Anti-Malware
4/3/2010 10:01:45 PM 2004 C:\Program Files\Mozilla ActiveX Control v1.7.12
3/30/2010 5:37:38 PM 76382286 C:\Program Files\QuickTime
4/3/2010 8:31:02 PM 5296752 C:\Program Files\SpywareBlaster
4/2/2010 3:06:39 PM 27262507 C:\Program Files\Sun
2/12/2010 6:04:03 PM 0 C:\Program Files\SUPERAntiSpyware
4/1/2010 9:10:22 PM 59784791 C:\Program Files\Windows Live Safety Center
4/3/2010 11:00:43 PM 18745051 C:\Program Files\Zone Labs

======"Drivers" Modified Last 60 Days======

4/4/2010 11:10:54 AM 28880 32 C:\WINDOWS\system32\drivers\aavmker4.sys
4/4/2010 11:10:59 AM 19024 32 C:\WINDOWS\system32\drivers\aswFsBlk.sys
4/4/2010 11:10:55 AM 94800 32 C:\WINDOWS\system32\drivers\aswmon.sys
4/4/2010 11:10:55 AM 100432 32 C:\WINDOWS\system32\drivers\aswmon2.sys
4/4/2010 11:10:57 AM 23376 32 C:\WINDOWS\system32\drivers\aswRdr.sys
4/4/2010 11:10:58 AM 162640 32 C:\WINDOWS\system32\drivers\aswSP.sys
4/4/2010 11:10:56 AM 46672 32 C:\WINDOWS\system32\drivers\aswTdi.sys
4/14/2008 5:00:00 AM 96512 32 C:\WINDOWS\system32\drivers\atapi.sys
4/2/2010 1:36:38 PM 20824 32 C:\WINDOWS\system32\drivers\mbam.sys
4/2/2010 1:36:40 PM 38224 32 C:\WINDOWS\system32\drivers\mbamswissarmy.sys
4/1/2010 10:59:39 PM 50376 32 C:\WINDOWS\system32\drivers\pxrts.sys
4/14/2008 5:00:00 AM 4224 32 C:\WINDOWS\system32\drivers\rdpcdd.sys
4/5/2010 11:15:46 AM 96512 32 C:\WINDOWS\system32\drivers\tsk27.svs

====== Files Deleted under "%Temp%" ======

34 Files deleted

======"All Users\Application Data" Last 60 Days======

4/4/2010 11:10:44 AM 11093161 C:\Documents and Settings\All Users\Application Data\Alwil Software
4/4/2010 11:10:44 AM 11093161 C:\Documents and Settings\All Users\Application Data\Alwil Software\Avast5
4/4/2010 11:11:03 AM 0 C:\Documents and Settings\All Users\Application Data\Alwil Software\Avast5\arpot
4/4/2010 11:11:03 AM 0 C:\Documents and Settings\All Users\Application Data\Alwil Software\Avast5\arpot\TEMP
4/4/2010 11:11:00 AM 0 C:\Documents and Settings\All Users\Application Data\Alwil Software\Avast5\backup
4/4/2010 11:11:00 AM 937308 C:\Documents and Settings\All Users\Application Data\Alwil Software\Avast5\chest
4/4/2010 11:11:00 AM 0 C:\Documents and Settings\All Users\Application Data\Alwil Software\Avast5\fw
4/4/2010 11:10:47 AM 14020 C:\Documents and Settings\All Users\Application Data\Alwil Software\Avast5\HtmlData
4/4/2010 11:11:00 AM 0 C:\Documents and Settings\All Users\Application Data\Alwil Software\Avast5\integ
4/4/2010 11:11:00 AM 0 C:\Documents and Settings\All Users\Application Data\Alwil Software\Avast5\journal
4/4/2010 11:11:00 AM 9617393 C:\Documents and Settings\All Users\Application Data\Alwil Software\Avast5\log
4/4/2010 11:11:00 AM 0 C:\Documents and Settings\All Users\Application Data\Alwil Software\Avast5\moved
4/4/2010 11:11:00 AM 38759 C:\Documents and Settings\All Users\Application Data\Alwil Software\Avast5\report
4/4/2010 11:10:46 AM 203326 C:\Documents and Settings\All Users\Application Data\Alwil Software\Avast5\sounds
4/4/2010 11:10:47 AM 144294 C:\Documents and Settings\All Users\Application Data\Alwil Software\Avast5\sounds\1033
4/1/2010 8:58:17 PM 4693 C:\Documents and Settings\All Users\Application Data\ESET
4/1/2010 8:58:17 PM 4693 C:\Documents and Settings\All Users\Application Data\ESET\ESET NOD32 Antivirus
4/1/2010 8:58:17 PM 549 C:\Documents and Settings\All Users\Application Data\ESET\ESET NOD32 Antivirus\Charon
4/1/2010 8:58:18 PM 2955 C:\Documents and Settings\All Users\Application Data\ESET\ESET NOD32 Antivirus\Stats
4/1/2010 10:59:32 PM 0 C:\Documents and Settings\All Users\Application Data\PrevxCSI
4/2/2010 3:07:00 PM 126 C:\Documents and Settings\All Users\Application Data\Sun
4/2/2010 3:07:05 PM 119 C:\Documents and Settings\All Users\Application Data\Sun\Java
4/2/2010 3:07:05 PM 119 C:\Documents and Settings\All Users\Application Data\Sun\Java\Java Update
4/2/2010 3:07:00 PM 7 C:\Documents and Settings\All Users\Application Data\Sun\JavaDB Server 10.5.3.0
4/2/2010 3:07:00 PM 7 C:\Documents and Settings\All Users\Application Data\Sun\JavaDB Server 10.5.3.0\servicetag
2/12/2010 6:04:12 PM 0 C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com
2/12/2010 6:04:12 PM 0 C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware
3/30/2010 5:39:50 PM 541387 C:\Documents and Settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
3/30/2010 5:40:30 PM 541387 C:\Documents and Settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521}\x86
3/30/2010 5:40:30 PM 133968 C:\Documents and Settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521}\x86\x86
4/2/2010 11:23:46 AM 15344 38 C:\Documents and Settings\All Users\Application Data\LK2mfPE2j
4/4/2010 8:47:10 PM 13676 38 C:\Documents and Settings\All Users\Application Data\VHx0W

====== HKLM\~\ShellServiceObjectDelayLoad======

PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} - %SystemRoot%\system32\SHELL32.dll

CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} - %SystemRoot%\system32\SHELL32.dll

WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - %Systemroot%\system32\webcheck.dll

SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} - %systemroot%\system32\stobject.dll

WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll


====== HKLM\~\SharedTaskScheduler======

Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - %SystemRoot%\system32\browseui.dll

Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - %SystemRoot%\system32\browseui.dll

======HKLM\~\msconfig\startupreg======

HKLM\Software\microsoft\shared tools\msconfig\startupreg\iTunesHelper
HKLM\Software\microsoft\shared tools\msconfig\startupreg\msnmsgr
HKLM\Software\microsoft\shared tools\msconfig\startupreg\QuickTime Task

====== Services ( Services that are Whitelisted are not shown) ======

aswFsBlk (aswFsBlk)- C:\WINDOWS\system32\drivers\aswFsBlk.sys - Auto/Running
aswSP (aswSP)- C:\WINDOWS\system32\drivers\aswSP.sys - System/Running
gdrv (gdrv)- \??\C:\WINDOWS\gdrv.sys - Manual/Stopped
NdisIP (Microsoft TV/Video Connection)- C:\WINDOWS\system32\DRIVERS\NdisIP.sys - Manual/Stopped
pxrts (pxrts)- C:\WINDOWS\system32\drivers\pxrts.sys - Auto/Running
QCDonner (Logitech QuickCam Express)- C:\WINDOWS\system32\DRIVERS\OVCD.sys - Manual/Stopped
RTLE8023xp (Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver)- C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys - Manual/Running
s1018bus (Sony Ericsson Device 1018 driver (WDM))- C:\WINDOWS\system32\DRIVERS\s1018bus.sys - Manual/Stopped
s1018mdfl (Sony Ericsson Device 1018 USB WMC Modem Filter)- C:\WINDOWS\system32\DRIVERS\s1018mdfl.sys - Manual/Stopped
s1018mdm (Sony Ericsson Device 1018 USB WMC Modem Driver)- C:\WINDOWS\system32\DRIVERS\s1018mdm.sys - Manual/Stopped
s1018mgmt (Sony Ericsson Device 1018 USB WMC Device Management Drivers (WDM))- C:\WINDOWS\system32\DRIVERS\s1018mgmt.sys - Manual/Stopped
s1018nd5 (Sony Ericsson Device 1018 USB Ethernet Emulation (NDIS))- C:\WINDOWS\system32\DRIVERS\s1018nd5.sys - Manual/Stopped
s1018obex (Sony Ericsson Device 1018 USB WMC OBEX Interface)- C:\WINDOWS\system32\DRIVERS\s1018obex.sys - Manual/Stopped
s1018unic (Sony Ericsson Device 1018 USB Ethernet Emulation (WDM))- C:\WINDOWS\system32\DRIVERS\s1018unic.sys - Manual/Stopped
SLIP (BDA Slip De-Framer)- C:\WINDOWS\system32\DRIVERS\SLIP.sys - Manual/Stopped
USBAAPL (Apple Mobile USB Driver)- C:\WINDOWS\system32\Drivers\usbaapl.sys - Manual/Stopped
WpdUsb (WpdUsb)- C:\WINDOWS\system32\DRIVERS\wpdusb.sys - Manual/Stopped
zbokwl (zbokwl)- - Boot/Stopped

====== Uninstall List ======

A file named 'UNI.txt' was created and saved to
FileListers default location. Post the results if requested.

======== Other Info ========

TOTAL PHYSICAL RAM: 2136 MB

Boot Info

[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
C:\CMDCONS\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Home Edition" /noexecute=optin /fastdetect

OS Type: Microsoft Windows XP Home Edition
Build: 5.1.2600
Service Pack: 3.0

====== Files with Hidden Attributes======

A file named 'Hidden.txt' was created and saved to
FileListers default location. Post the results if requested.

==End of Report==
  • 0

#30
emeraldnzl

emeraldnzl

    GeekU Instructor

  • GeekU Moderator
  • 17,196 posts
Hi Babine,

I think we have a new variant of a particular infection here. There is a hint of it in that last log.

To confirm, I would like you to run this one. You did run GMER before, this time I want you to change the boxes you check slightly. Please follow the instructions very carefully.

If still have GMER on your machine then follow the instructions below for running it. If not then:

Download the GMER Rootkit Scanner. Unzip it to your Desktop.

Before scanning, make sure all other running programs are closed and no other actions like a scheduled antivirus scan will occur while the scan is being performed. Do not use your computer for anything else during the scan.

Extract the contents of the zipped file to desktop.

Double-click gmer.exe. The program will begin to run.

**Caution**
These types of scans can produce false positives. Do NOT take any action on any
"<--- ROOKIT" entries unless advised!

Posted Image

If possible rootkit activity is found, you will be asked if you would like to perform a full scan.
  • Click NO then use the following settings for a more complete scan..
  • In the right of the panel, you will see a list of boxes that have been checked ... Ensure the following are un-checked.
    • IAT/EAT
    • Drives/Partition other than Systemdrive (typically C:\)
    • Show All (don't miss this one)

    Posted Image
  • Now click the Scan button.
    Once the scan is complete, you may receive another notice about rootkit activity.
  • Click OK.
  • GMER will produce a log. Click on the [Save..] button, and in the File name area, type in GMER.txt
  • Save it where you can easily find it, such as your desktop.
Post the contents of GMER.txt in your next reply.
  • 0


0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

featured