My company runs Trend Micro Worry-Free Business Security 7.0 Service Pack 1. An employee from a different office (not running TrendMicro) hooked up his computer in our office today and within a couple hours I got a report from TM that a virus was found on his computer. TM was already installed on his computer because until about 8 months ago, he was part of this office, he relocated to the other office, but now he's relocated back here again. It looks to me like TM did not install updates while he was at the other office, since they're released from our server here, but when he reconnected it updated ran the scan and reported what it found back to our server which then gave me the report.
Here's the report from TrendMicro:
Viruses/Malware name: TROJ_CHEPVIL.CK
File name: Ticket-064-2011.zip (Ticket-064-2011.exe)
Path: C:\Documents and Settings\[Employee]\Local Settings\Temp\
Scan Type: Scheduled Scan
Action Taken: Virus successfully detected, but infected file cannot be uploaded to the Security Server for quarantine.
I spoke to the employee about his computer and he said that it sometimes gets slow, but mostly when he's running a lot of things on it or after some time. He normally shuts his computer off at night and on in the morning to help with the slowness. He said that occasionally he'll get a stop script notice or error. He has a custom-built computer (brand labeled Nobilis), Pentium D/2.80GHz, 1 GB RAM, running Windows XP Service Pack 3.
ClamWin Free antivirus was installed and running on his computer, I've removed it now so that it won't interfere with TrendMicro. After rebooting he noticed some "new icons" on his desktop that he did not put there, I've attached a screenshot. We've deleted the icons.

I'm a new student to GeekU so I'm looking at this from a learning perspective

OTL logfile created on: 2/13/2012 1:52:00 PM - Run 1
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Documents and Settings\[Employee]\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
958.48 Mb Total Physical Memory | 614.54 Mb Available Physical Memory | 64.12% Memory free
2.26 Gb Paging File | 1.82 Gb Available in Paging File | 80.76% Paging File free
Paging file location(s): C:\pagefile.sys 0 0 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 33.39 Gb Total Space | 15.89 Gb Free Space | 47.59% Space Free | Partition Type: NTFS
Computer Name: [EMPLOYEE]-XP | User Name: [Employee] | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - [2012/02/13 13:46:58 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\[Employee]\Desktop\OTL.exe
PRC - [2011/11/25 06:27:48 | 001,081,024 | ---- | M] (Trend Micro Inc.) -- C:\Program Files\Trend Micro\UniClient\UiFrmwrk\uiSeAgnt.exe
PRC - [2011/11/16 12:54:26 | 000,689,680 | ---- | M] (Trend Micro Inc.) -- C:\Program Files\Trend Micro\Client Server Security Agent\TmListen.exe
PRC - [2011/10/23 01:15:52 | 000,086,016 | ---- | M] (alch) -- C:\Program Files\ClamWin\bin\ClamTray.exe
PRC - [2011/10/17 07:41:42 | 000,133,424 | ---- | M] (Trend Micro Inc.) -- C:\Program Files\Trend Micro\UniClient\UiFrmwrk\uiWatchDog.exe
PRC - [2011/09/27 01:32:18 | 000,196,512 | ---- | M] (Trend Micro Inc.) -- C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe
PRC - [2011/08/16 01:26:46 | 000,142,952 | ---- | M] (Trend Micro Inc.) -- C:\Program Files\Trend Micro\AMSP\coreFrameworkHost.exe
PRC - [2011/07/07 19:31:08 | 000,259,848 | ---- | M] (Microsoft Corporation.) -- C:\Program Files\Microsoft\BingBar\BingApp.exe
PRC - [2011/07/07 19:31:06 | 000,391,944 | ---- | M] (Microsoft Corporation.) -- C:\Program Files\Microsoft\BingBar\BingBar.exe
PRC - [2011/06/15 17:33:20 | 000,249,648 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft\BingBar\SeaPort.EXE
PRC - [2011/04/28 09:48:42 | 000,438,272 | ---- | M] (RealVNC Ltd.) -- C:\Program Files\RealVNC\VNC4\WinVNC4.exe
PRC - [2010/10/29 15:12:22 | 001,652,736 | R--- | M] (AWS Convergence Technologies, Inc.) -- C:\Program Files\AWS\WeatherBug\Weather.exe
PRC - [2008/06/10 03:27:04 | 000,144,784 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
PRC - [2008/06/10 03:27:03 | 000,329,104 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre1.6.0_07\bin\jucheck.exe
PRC - [2008/04/14 04:42:20 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2008/04/09 12:04:32 | 001,892,430 | ---- | M] (Toshiba America) -- C:\Program Files\Toshiba\Net Phone\netphone.exe
PRC - [2008/04/09 11:59:30 | 000,073,728 | ---- | M] (Computer Telephony Solutions) -- C:\Program Files\Toshiba\Net Phone\CTSppDialerEXE.exe
PRC - [2008/04/09 11:08:26 | 000,454,656 | ---- | M] (Toshiba America) -- C:\Program Files\Toshiba\Net Phone\npmsgpop.exe
PRC - [2007/07/16 12:07:52 | 000,094,208 | ---- | M] (Computer Telephony Solutions) -- C:\Program Files\Toshiba\Net Phone\CallHistoryExe.exe
PRC - [1999/09/30 20:31:38 | 000,869,376 | ---- | M] (Fred's Software) -- C:\Program Files\PrintKey2000\Printkey2000.exe
========== Modules (No Company Name) ==========
MOD - [2011/11/16 12:37:40 | 000,126,976 | ---- | M] () -- C:\Program Files\Trend Micro\Client Server Security Agent\libTmHttpClient.dll
MOD - [2011/11/16 12:37:26 | 000,233,472 | ---- | M] () -- C:\Program Files\Trend Micro\Client Server Security Agent\libTmHttpServer.dll
MOD - [2011/10/05 08:15:22 | 000,174,624 | ---- | M] () -- C:\Program Files\Trend Micro\UniClient\plugins\LUADLL.dll
MOD - [2011/01/04 03:53:52 | 000,442,368 | ---- | M] () -- C:\Program Files\Trend Micro\AMSP\sqlite3.dll
MOD - [2011/01/04 03:53:52 | 000,057,344 | ---- | M] () -- C:\Program Files\Trend Micro\AMSP\boost_date_time-vc80-mt-1_36.dll
MOD - [2011/01/04 03:53:52 | 000,049,152 | ---- | M] () -- C:\Program Files\Trend Micro\AMSP\boost_thread-vc80-mt-1_36.dll
MOD - [2011/01/04 03:53:26 | 001,081,344 | ---- | M] () -- C:\Program Files\Trend Micro\AMSP\libprotobuf.dll
MOD - [2011/01/03 13:53:54 | 000,057,344 | ---- | M] () -- C:\Program Files\Trend Micro\Client Server Security Agent\boost_date_time-vc80-mt-1_36.dll
MOD - [2011/01/03 13:53:54 | 000,049,152 | ---- | M] () -- C:\Program Files\Trend Micro\Client Server Security Agent\boost_thread-vc80-mt-1_36.dll
MOD - [2009/05/26 20:06:28 | 000,913,408 | ---- | M] () -- C:\Program Files\Yahoo!\Messenger\yui.dll
MOD - [2005/04/05 09:57:16 | 000,061,440 | ---- | M] () -- C:\WINDOWS\system32\CTSMail.dll
MOD - [2005/02/08 17:23:10 | 000,979,005 | ---- | M] () -- C:\Program Files\ClamWin\bin\python23.dll
MOD - [2004/11/20 03:27:54 | 000,106,496 | ---- | M] () -- C:\Program Files\ClamWin\lib\shell.pyd
MOD - [2004/11/20 03:27:54 | 000,086,016 | ---- | M] () -- C:\Program Files\ClamWin\lib\win32gui.pyd
MOD - [2004/11/20 03:27:54 | 000,077,824 | ---- | M] () -- C:\Program Files\ClamWin\lib\win32file.pyd
MOD - [2004/11/20 03:27:54 | 000,069,632 | ---- | M] () -- C:\Program Files\ClamWin\lib\win32api.pyd
MOD - [2004/11/20 03:27:54 | 000,065,536 | ---- | M] () -- C:\Program Files\ClamWin\lib\win32security.pyd
MOD - [2004/11/20 03:27:54 | 000,036,864 | ---- | M] () -- C:\Program Files\ClamWin\lib\win32process.pyd
MOD - [2004/11/20 03:27:54 | 000,024,576 | ---- | M] () -- C:\Program Files\ClamWin\lib\win32pipe.pyd
MOD - [2004/11/20 03:27:54 | 000,024,576 | ---- | M] () -- C:\Program Files\ClamWin\lib\win32event.pyd
MOD - [2004/10/11 20:22:18 | 000,315,392 | ---- | M] () -- C:\Program Files\ClamWin\lib\pythoncom23.dll
MOD - [2004/10/11 20:21:26 | 000,094,208 | ---- | M] () -- C:\Program Files\ClamWin\lib\pywintypes23.dll
MOD - [2004/05/25 21:20:30 | 000,036,864 | ---- | M] () -- C:\Program Files\ClamWin\lib\_winreg.pyd
MOD - [2004/05/25 21:19:32 | 000,045,117 | ---- | M] () -- C:\Program Files\ClamWin\lib\datetime.pyd
MOD - [2004/05/25 21:18:42 | 000,495,616 | ---- | M] () -- C:\Program Files\ClamWin\lib\_ssl.pyd
MOD - [2004/05/25 21:18:28 | 000,057,401 | ---- | M] () -- C:\Program Files\ClamWin\lib\_sre.pyd
MOD - [2004/05/25 21:18:20 | 000,049,212 | ---- | M] () -- C:\Program Files\ClamWin\lib\_socket.pyd
MOD - [2004/05/25 21:17:14 | 000,622,651 | ---- | M] () -- C:\Program Files\ClamWin\lib\_bsddb.pyd
MOD - [2004/01/15 14:45:22 | 000,061,440 | ---- | M] () -- C:\Program Files\ClamWin\lib\_ctypes.pyd
MOD - [2003/10/01 13:40:00 | 002,240,512 | ---- | M] () -- C:\Program Files\ClamWin\lib\wxc.pyd
MOD - [2003/10/01 11:43:02 | 003,239,936 | ---- | M] () -- C:\Program Files\ClamWin\lib\wxmsw24h.dll
MOD - [2003/08/10 09:14:40 | 000,061,440 | ---- | M] () -- C:\Program Files\ClamWin\lib\mxDateTime.pyd
MOD - [2001/10/28 15:42:30 | 000,116,224 | ---- | M] () -- C:\WINDOWS\system32\pdfcmnnt.dll
========== Win32 Services (SafeList) ==========
SRV - File not found [Disabled | Stopped] -- -- (HidServ)
SRV - [2011/11/16 12:54:26 | 000,689,680 | ---- | M] (Trend Micro Inc.) [On_Demand | Running] -- C:\Program Files\Trend Micro\Client Server Security Agent\tmlisten.exe -- (TmListen)
SRV - [2011/09/27 01:32:18 | 000,196,512 | ---- | M] (Trend Micro Inc.) [Auto | Running] -- C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe -- (Amsp)
SRV - [2011/07/07 19:31:08 | 000,195,336 | ---- | M] (Microsoft Corporation.) [On_Demand | Stopped] -- C:\Program Files\Microsoft\BingBar\BBSvc.EXE -- (BBSvc)
SRV - [2011/06/15 17:33:20 | 000,249,648 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft\BingBar\SeaPort.EXE -- (BBUpdate)
SRV - [2011/04/28 09:48:42 | 000,438,272 | ---- | M] (RealVNC Ltd.) [Auto | Running] -- C:\Program Files\RealVNC\VNC4\WinVNC4.exe -- (WinVNC4)
========== Driver Services (SafeList) ==========
DRV - File not found [Kernel | Disabled | Running] -- -- (tmtdi)
DRV - File not found [Kernel | Unknown | Running] -- -- (TmPreFilter)
DRV - [2011/06/23 09:34:42 | 000,081,168 | ---- | M] (Trend Micro Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\tmactmon.sys -- (tmactmon)
DRV - [2011/06/23 09:34:32 | 000,065,296 | ---- | M] (Trend Micro Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\tmevtmgr.sys -- (tmevtmgr)
DRV - [2011/06/23 09:34:24 | 000,191,248 | ---- | M] (Trend Micro Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\tmcomm.sys -- (tmcomm)
DRV - [2010/09/30 15:59:48 | 000,341,072 | ---- | M] (Trend Micro Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\TM_CFW.sys -- (tmcfw)
DRV - [2009/03/25 05:29:52 | 000,130,432 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtnicxp.sys -- (RTL8023xp)
DRV - [2008/04/13 16:05:40 | 000,020,992 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\RTL8139.sys -- (rtl8139) Realtek RTL8139(A/B/C)
DRV - [2005/09/23 17:56:28 | 003,966,976 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2001/09/14 09:35:58 | 000,027,519 | ---- | M] (Linksys) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\USB100M.SYS -- (USB-100)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.msn.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = www.bing.com [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.ecamarketing.com/page/home
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ==========
FF - prefs.js..extensions.enabledItems: {22C7F6C6-8D67-4534-92B5-529A0EC09405}:5.8.0.1092
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\WINDOWS\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6: C:\Program Files\Yahoo!\Shared\npYState.dll (Yahoo! Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@facebook.com/FBPlugin,version=1.0.3: C:\Documents and Settings\[Employee]\Application Data\Facebook\npfbplugin_1_0_3.dll File not found
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{22C7F6C6-8D67-4534-92B5-529A0EC09405}: C:\Program Files\Trend Micro\AMSP\module\20004\FxExt\firefoxextension\
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 10.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012/02/13 08:48:01 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 10.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012/01/12 12:45:23 | 000,000,000 | ---D | M]
[2009/10/01 15:08:28 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\[Employee]\Application Data\Mozilla\Extensions
[2010/08/04 12:13:59 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\[Employee]\Application Data\Mozilla\Firefox\Profiles\ehbc7jkl.default\extensions
[2011/10/12 12:32:25 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2012/02/13 08:47:59 | 000,134,104 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2010/03/30 12:44:28 | 000,027,976 | ---- | M] (WebEx Communications, Inc) -- C:\Program Files\mozilla firefox\plugins\atgpcdec.dll
[2010/03/30 12:44:29 | 000,126,360 | ---- | M] (WebEx Communications, Inc) -- C:\Program Files\mozilla firefox\plugins\atgpcext.dll
[2009/12/17 11:00:27 | 000,046,408 | ---- | M] () -- C:\Program Files\mozilla firefox\plugins\atmccli.dll
[2010/03/30 12:45:07 | 000,098,712 | ---- | M] (WebEx Communications, Inc) -- C:\Program Files\mozilla firefox\plugins\ieatgpc.dll
[2010/03/30 12:44:23 | 000,060,824 | ---- | M] (WebEx Communications, Inc) -- C:\Program Files\mozilla firefox\plugins\npatgpc.dll
[2011/09/28 18:26:50 | 000,002,252 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml
[2011/11/11 08:04:14 | 000,002,040 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\twitter.xml
O1 HOSTS File: ([2009/05/13 12:49:15 | 000,306,096 | R--- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: 127.0.0.1 www.007guard.com
O1 - Hosts: 127.0.0.1 007guard.com
O1 - Hosts: 127.0.0.1 008i.com
O1 - Hosts: 127.0.0.1 www.008k.com
O1 - Hosts: 127.0.0.1 008k.com
O1 - Hosts: 127.0.0.1 www.00hq.com
O1 - Hosts: 127.0.0.1 00hq.com
O1 - Hosts: 127.0.0.1 010402.com
O1 - Hosts: 127.0.0.1 www.032439.com
O1 - Hosts: 127.0.0.1 032439.com
O1 - Hosts: 127.0.0.1 www.0scan.com
O1 - Hosts: 127.0.0.1 0scan.com
O1 - Hosts: 127.0.0.1 www.1000gratisproben.com
O1 - Hosts: 127.0.0.1 1000gratisproben.com
O1 - Hosts: 127.0.0.1 www.1001namen.com
O1 - Hosts: 127.0.0.1 1001namen.com
O1 - Hosts: 127.0.0.1 100888290cs.com
O1 - Hosts: 127.0.0.1 www.100888290cs.com
O1 - Hosts: 127.0.0.1 100sexlinks.com
O1 - Hosts: 127.0.0.1 www.100sexlinks.com
O1 - Hosts: 127.0.0.1 10sek.com
O1 - Hosts: 127.0.0.1 www.10sek.com
O1 - Hosts: 127.0.0.1 www.1-2005-search.com
O1 - Hosts: 127.0.0.1 1-2005-search.com
O1 - Hosts: 10539 more lines...
O2 - BHO: (TmIEPlugInBHO Class) - {1CA1377B-DC1D-4A52-9585-6E06050FAC53} - C:\Program Files\Trend Micro\AMSP\Module\20004\1.6.1242\6.6.1089\TmIEPlg.dll File not found
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (SSVHelper Class) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {604BC32A-9680-40D1-9AC6-E06B23A1BA4C} - No CLSID value found.
O4 - HKLM..\Run: [Alcmtr] C:\WINDOWS\ALCMTR.EXE (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [ClamWin] C:\Program Files\ClamWin\bin\ClamTray.exe (alch)
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [Trend Micro Client Framework] C:\Program Files\Trend Micro\UniClient\UiFrmWrk\UIWatchDog.exe (Trend Micro Inc.)
O4 - HKCU..\Run: [Messenger (Yahoo!)] C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe (Yahoo! Inc.)
O4 - HKCU..\Run: [Weather] C:\Program Files\AWS\WeatherBug\Weather.exe (AWS Convergence Technologies, Inc.)
O4 - Startup: C:\Documents and Settings\[Employee]\Start Menu\Programs\Startup\connect eca.bat ()
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Net Phone.lnk = C:\Program Files\Toshiba\Net Phone\netphone.exe (Toshiba America)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Printkey2000.lnk = C:\Program Files\PrintKey2000\Printkey2000.exe (Fred's Software)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255
O9 - Extra 'Tools' menuitem : Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\npjpi160_07.dll (Sun Microsystems, Inc.)
O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O16 - DPF: {119CE688-A7E9-1941-8E10-F42990BBA4C4} https://fiserv.assur.../ASRrptview.cab (FISERV FIPSCO Report Viewer)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macr...director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://update.micros...b?1242241285578 (MUWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_07)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_07)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_07)
O16 - DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} https://avivausa.web...bex/ieatgpc.cab (GpcContainer Class)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.ad...Plus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 204.130.255.3 209.63.0.6
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{332A02B6-663C-4684-95EB-36AE244E7546}: DhcpNameServer = 67.152.160.87 209.98.204.98
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{CDB7B9E5-9B98-4843-9CB9-7E4D38293F03}: DhcpNameServer = 204.130.255.3 209.63.0.6
O18 - Protocol\Handler\tmpx {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\AMSP\Module\20004\1.6.1242\6.6.1089\TmIEPlg.dll File not found
O18 - Protocol\Handler\tmtbim {0B37915C-8B98-4B9E-80D4-464D2C830D10} - C:\Program Files\Trend Micro\Client Server Security Agent\UIFrameWork\ProToolbarIMRatingActiveX.dll (Trend Micro Inc.)
O20 - HKLM Winlogon: Shell - (Explorer.exe) -C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) -C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O24 - Desktop Components:0 () - file:///C:/DOCUME~1/ADAM~1.HOR/LOCALS~1/Temp/msohtmlclip1/01/clip_image002.gif
O24 - Desktop Components:1 (My Current Home Page) - About:Home
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/05/13 11:25:48 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O33 - MountPoints2\##bravoserver#office2007\Shell - "" = AutoRun
O33 - MountPoints2\##bravoserver#office2007\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\##bravoserver#office2007\Shell\AutoRun\command - "" = Z:\SETUP.EXE
O33 - MountPoints2\##bravoserver#office2007\Shell\configure\command - "" = Z:\SETUP.EXE
O33 - MountPoints2\##bravoserver#office2007\Shell\install\command - "" = Z:\SETUP.EXE
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
========== Files/Folders - Created Within 30 Days ==========
[2012/02/13 13:51:44 | 000,584,192 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\[Employee]\Desktop\OTL.exe
[2012/02/13 09:10:37 | 000,341,072 | ---- | C] (Trend Micro Inc.) -- C:\WINDOWS\System32\drivers\TM_CFW.sys
[2012/02/13 09:02:38 | 000,191,248 | ---- | C] (Trend Micro Inc.) -- C:\WINDOWS\System32\drivers\tmcomm.sys
[2012/02/13 09:02:38 | 000,081,168 | ---- | C] (Trend Micro Inc.) -- C:\WINDOWS\System32\drivers\tmactmon.sys
[2012/02/13 09:02:38 | 000,065,296 | ---- | C] (Trend Micro Inc.) -- C:\WINDOWS\System32\drivers\tmevtmgr.sys
[2012/02/13 09:00:22 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Trend Micro Worry-Free Business Security Agent
[2012/02/13 08:57:03 | 000,000,000 | ---D | C] -- C:\WINDOWS\LastGood
[2012/02/10 12:42:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\[Employee]\My Documents\Downloads
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2012/02/13 13:46:58 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\[Employee]\Desktop\OTL.exe
[2012/02/13 08:57:39 | 000,435,688 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2012/02/13 08:57:39 | 000,068,584 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2012/02/13 08:41:46 | 000,018,804 | ---- | M] () -- C:\WINDOWS\cfgall.ini
[2012/02/13 08:35:20 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2012/02/13 08:32:48 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2012/02/10 21:52:03 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2012/02/10 14:17:00 | 000,000,218 | ---- | M] () -- C:\WINDOWS\tasks\JkDefrag.job
[2012/02/10 13:36:00 | 000,000,664 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat
[2012/02/10 09:34:23 | 000,357,202 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Genworth.pdf
[2012/02/10 08:00:27 | 000,255,166 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Marriott Bonus Gold.pdf
[2012/02/09 13:07:22 | 000,184,794 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\08-413-1 (05-09) Agent Guide_agent guide.pdf
[2012/02/09 13:06:18 | 000,163,433 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\AAA8378 (12-11) Final.pdf
[2012/02/09 13:05:52 | 000,006,376 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Description2012020913053469.pdf
[2012/02/09 12:28:54 | 000,042,485 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Zach 10 year certain.pdf
[2012/02/09 12:28:05 | 000,039,722 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Zach Life and 10.pdf
[2012/02/09 11:16:21 | 000,065,727 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Good Illustration.pdf
[2012/02/09 10:45:11 | 000,255,180 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Marriott 51yr old.pdf
[2012/02/09 10:34:02 | 000,973,290 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Sentinel_Contract.pdf
[2012/02/09 10:33:06 | 000,255,277 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Girjis.pdf
[2012/02/09 10:28:17 | 000,666,746 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\FL Annuity Brochure.pdf
[2012/02/09 10:26:45 | 000,348,200 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\FL Rate Sheet.pdf
[2012/02/09 10:26:35 | 000,891,483 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\FL Annuity app pack .pdf
[2012/02/09 10:26:21 | 000,242,323 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\FL Quick Sheet.pdf
[2012/02/09 10:09:48 | 001,282,774 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\LIBR Flip chart.pdf
[2012/02/09 10:08:42 | 001,896,181 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\PeopleService.pdf
[2012/02/09 10:02:58 | 000,043,009 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Zietlow Life and 10.pdf
[2012/02/08 14:59:02 | 001,291,480 | ---- | M] () -- C:\Documents and Settings\[Employee]\Desktop\FFEC Free Report.pdf
[2012/02/08 13:33:59 | 001,406,532 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Director Application and disclosure with rider.pdf
[2012/02/08 09:48:37 | 000,962,547 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\LIBR Sale Brochure TX.pdf
[2012/02/08 09:48:20 | 001,327,654 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Sales Brochure TX.pdf
[2012/02/08 09:47:57 | 001,281,488 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Retirement Gold TX.pdf
[2012/02/08 09:12:05 | 000,098,630 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Sider.PDF
[2012/02/07 15:55:28 | 000,044,170 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\eca_myga_comparison.pdf
[2012/02/07 13:45:17 | 000,348,200 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\IA Personal Choice Annuity RATE SHEET.pdf
[2012/02/07 13:45:00 | 000,276,668 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\IA_AnnuityQuickSheet.pdf
[2012/02/07 13:44:39 | 000,987,676 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\IA_AppPack.pdf
[2012/02/07 12:31:46 | 000,627,778 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Equitrust.pdf
[2012/02/07 12:27:29 | 000,013,285 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Replacement.pdf
[2012/02/07 12:27:19 | 000,037,780 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Transfer or 1035.pdf
[2012/02/07 12:26:57 | 000,111,089 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Buyers Guide.pdf
[2012/02/07 12:26:46 | 000,045,074 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Disclosure.pdf
[2012/02/07 12:26:36 | 000,037,682 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Suitability.pdf
[2012/02/07 12:26:13 | 000,044,936 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Eleo Application.pdf
[2012/02/07 11:29:14 | 000,043,430 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\20 year certain Cole.pdf
[2012/02/07 11:28:09 | 000,043,496 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\15 yr certain Cole.pdf
[2012/02/07 11:27:07 | 000,043,429 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\10 year certain Cole.pdf
[2012/02/07 09:51:53 | 000,097,393 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Zietlow.PDF
[2012/02/07 09:24:17 | 000,255,288 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Huntoon 150k 50yr old.pdf
[2012/02/07 08:01:38 | 000,595,869 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\ING_Life.pdf
[2012/02/06 09:24:07 | 000,094,826 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Karzen.PDF
[2012/02/03 11:55:37 | 000,065,707 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Chapin 100k joint.pdf
[2012/02/03 11:52:42 | 000,065,607 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\chapin 100k 10 year deferr.pdf
[2012/02/03 09:43:13 | 000,540,102 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\365i product profile.pdf
[2012/02/03 09:42:32 | 000,570,531 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Income Maximizer.pdf
[2012/02/03 09:40:33 | 000,570,531 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Income Rider Maximizer.pdf
[2012/02/03 09:39:29 | 000,066,900 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Additional Riders page 365i.pdf
[2012/02/03 09:33:53 | 000,775,229 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Allianz 365i Brochure.pdf
[2012/02/03 08:51:23 | 000,049,692 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Partial Withdrawal.pdf
[2012/02/03 08:39:08 | 000,255,195 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Bonus Gold 20k Mariott.pdf
[2012/02/03 08:38:14 | 000,255,161 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Bonus Gold 9k Marriott.pdf
[2012/02/02 14:09:32 | 000,775,862 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Liberty_Life_web_contract.pdf
[2012/02/02 14:07:53 | 000,372,078 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Liberty brochure and spec sheet.pdf
[2012/02/02 13:51:13 | 000,352,266 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Liberty app pack.pdf
[2012/02/02 12:34:27 | 000,004,879 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Leach income riders.pdf
[2012/02/02 12:26:31 | 000,856,032 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Leach Symetra deferr 4 years.pdf
[2012/02/02 12:14:40 | 000,092,865 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Secure American FL Leach.PDF
[2012/02/02 08:15:28 | 000,348,200 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Sentinel Personal Choice Annuity RATE SHEET.pdf
[2012/02/02 08:15:10 | 000,276,668 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\SSLANQS11-OT_AnnuityQuickSheet.pdf
[2012/02/02 08:14:32 | 000,670,340 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\IA Brochure.pdf
[2012/02/01 14:23:46 | 000,372,081 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Spec Sheet and Annuity Brochure.pdf
[2012/02/01 14:22:59 | 000,352,280 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Application Packet.pdf
[2012/02/01 13:44:44 | 000,019,265 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\North American Director.pdf
[2012/02/01 13:43:45 | 000,019,197 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\North American Flex III.pdf
[2012/02/01 13:42:45 | 000,019,193 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\North American Flex II.pdf
[2012/02/01 13:10:01 | 000,065,668 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Kevin Flex III Income.pdf
[2012/02/01 13:09:05 | 000,065,759 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Kevin Flex II Income.pdf
[2012/02/01 13:07:52 | 000,065,752 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Kevin Director Income.pdf
[2012/02/01 12:11:43 | 000,065,755 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Marie Flex III Income.pdf
[2012/02/01 12:10:01 | 000,065,757 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Marie Flex II Income.pdf
[2012/02/01 12:09:08 | 000,065,742 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Marie Director Income.pdf
[2012/02/01 10:25:43 | 000,065,697 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Heikenberry Flex III Income.pdf
[2012/02/01 10:24:59 | 000,065,697 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Heikenberry Flex II Income.pdf
[2012/02/01 10:24:15 | 000,065,693 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Heikenberry Director Income Rider.pdf
[2012/02/01 09:48:57 | 000,020,198 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Heikenberry Director.pdf
[2012/02/01 09:24:30 | 000,255,166 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\57 Female 9k Bonus Gold.pdf
[2012/02/01 09:23:27 | 000,255,237 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\59 male Bonus Gold.pdf
[2012/02/01 08:17:12 | 000,042,773 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Tangney Life and 5 63k.pdf
[2012/02/01 08:16:23 | 000,042,803 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Tangney Life and 10 63k.pdf
[2012/02/01 08:15:23 | 000,042,802 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Tangney Life and 10.pdf
[2012/02/01 08:14:32 | 000,042,773 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Tangney Life and 5.pdf
[2012/01/30 15:59:55 | 000,027,244 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Aviva 300k.pdf
[2012/01/30 15:50:55 | 000,223,696 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\American Equity 300k.pdf
[2012/01/30 15:44:56 | 000,098,998 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Great American 300k.PDF
[2012/01/30 12:27:25 | 000,288,317 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Pomerance Annuitize at 78.pdf
[2012/01/30 10:19:46 | 000,330,237 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\ECA_PRELIM_HIPAA.pdf
[2012/01/27 14:14:04 | 000,038,061 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Male 41 25k.pdf
[2012/01/27 14:13:26 | 000,036,645 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Male 41 50k annual.pdf
[2012/01/27 14:12:43 | 000,038,482 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Male 41 100k annual.pdf
[2012/01/27 14:10:47 | 000,038,721 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\F45 100k annual.pdf
[2012/01/27 14:08:37 | 000,038,080 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\F 25k annual.pdf
[2012/01/27 14:07:32 | 000,037,003 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Female 45 50k annual.pdf
[2012/01/27 14:03:36 | 000,039,135 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\45male 50k annual life only.pdf
[2012/01/27 13:59:13 | 000,038,865 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\18F 50k Annual Life only.pdf
[2012/01/27 13:30:13 | 000,098,484 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Great American 75k.PDF
[2012/01/27 13:29:52 | 000,098,402 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Great American 50k.PDF
[2012/01/27 11:10:42 | 000,429,703 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Allianz Joine.pdf
[2012/01/27 11:08:53 | 000,429,505 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Allianz.pdf
[2012/01/27 08:55:19 | 001,336,208 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\2012275502834654.pdf
[2012/01/27 08:12:08 | 000,041,009 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Principal Installment refund.pdf
[2012/01/27 08:09:13 | 000,100,853 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Cash refund american national.pdf
[2012/01/27 08:06:17 | 000,429,490 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Allianz LIfe and 5 certain.pdf
[2012/01/27 07:59:39 | 000,429,458 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Allianz Bruins.pdf
[2012/01/26 12:53:44 | 000,407,783 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Great_American_Contract.pdf
[2012/01/26 09:51:00 | 000,371,688 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Reliance_Standard.pdf
[2012/01/26 09:50:11 | 000,312,753 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Reliance Standard Eleos application.pdf
[2012/01/26 09:44:58 | 000,575,360 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Reliance Standard Eleos.pdf
[2012/01/26 08:25:51 | 000,384,043 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Principal.pdf
[2012/01/25 16:06:06 | 000,118,878 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Spec sheet.pdf
[2012/01/25 16:04:48 | 000,237,427 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Brochure.pdf
[2012/01/25 16:03:48 | 001,115,679 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Anico Citadel application.pdf
[2012/01/25 15:49:14 | 001,060,168 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Allianz_Preferred.pdf
[2012/01/25 15:48:38 | 000,445,612 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\American_National.pdf
[2012/01/25 15:22:40 | 000,193,475 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Brokerage Life Interest Rates_February2012.pdf
[2012/01/25 15:16:01 | 001,013,568 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Prosperity Elite Series.pdf
[2012/01/25 15:14:53 | 000,541,040 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\4% and 6%.pdf
[2012/01/25 15:13:10 | 000,563,766 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\7% rider.pdf
[2012/01/25 15:12:37 | 000,979,952 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\ADV1013.pdf
[2012/01/25 12:24:46 | 000,096,625 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\1307146.pdf
[2012/01/25 11:03:27 | 000,000,227 | ---- | M] () -- C:\Documents and Settings\[Employee]\Desktop\MultiVantage5_Agent_Guide.pdf.url
[2012/01/25 11:03:23 | 000,000,231 | ---- | M] () -- C:\Documents and Settings\[Employee]\Desktop\MultiVantage5_Client_Brochure.pdf.url
[2012/01/25 11:03:13 | 000,000,230 | ---- | M] () -- C:\Documents and Settings\[Employee]\Desktop\MultiVantage5_Flier_5367_0511.pdf.url
[2012/01/25 10:05:44 | 000,036,231 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\9800 Life and 10.pdf
[2012/01/25 10:03:57 | 000,036,369 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\9800 Life and 5.pdf
[2012/01/25 10:03:09 | 000,036,624 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\9800 Life only.pdf
[2012/01/25 10:02:12 | 000,040,967 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\14523 Life and 5.pdf
[2012/01/25 10:00:44 | 000,039,705 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\14523 Life and 10.pdf
[2012/01/25 09:59:43 | 000,039,280 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\11435 Life and 10.pdf
[2012/01/25 09:58:51 | 000,039,671 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\11435 Life and 5.pdf
[2012/01/25 09:58:03 | 000,038,080 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\11435 life only.pdf
[2012/01/25 09:57:09 | 000,038,086 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\14523 life only.pdf
[2012/01/24 14:14:06 | 003,569,573 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\1122-SB-03.11.11.pdf
[2012/01/24 11:42:51 | 001,018,271 | ---- | M] () -- C:\Documents and Settings\[Employee]\Desktop\491000100 2012-01-13 082354 MasterDex 10 Plus App Kit.pdf
[2012/01/23 11:00:42 | 000,098,594 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Johnson Income Sustainer Plus 37k.PDF
[2012/01/23 11:00:11 | 000,098,760 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Johnson Income Sustainer Plus 74k.PDF
[2012/01/23 10:51:53 | 000,098,900 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Perkins Income Sustainer Plus.PDF
[2012/01/23 10:51:27 | 000,095,149 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Perkins Income Sustainer.PDF
[2012/01/23 10:50:53 | 000,082,503 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Perkins No riders.PDF
[2012/01/20 11:21:24 | 001,108,956 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Genworth Application.pdf
[2012/01/20 11:15:52 | 000,928,726 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\LSW.pdf
[2012/01/20 08:51:43 | 000,040,150 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\guide.pdf
[2012/01/19 16:42:35 | 000,008,817 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\Life and 10 year certain.pdf
[2012/01/19 16:40:46 | 000,008,253 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\10 year certain.pdf
[2012/01/19 15:26:22 | 000,710,124 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\FandG.pdf
[2012/01/19 14:30:36 | 000,501,964 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\B1080310NWSafeReturnBrochure1111.pdf
[2012/01/19 14:30:01 | 000,175,033 | ---- | M] () -- C:\Documents and Settings\[Employee]\My Documents\B6033111NW IncomeSustainer Plus Brochure.pdf
[2012/01/19 08:37:44 | 000,060,304 | ---- | M] () -- C:\Documents and Settings\[Employee]\g2mdlhlpx.exe
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
========== Files Created - No Company Name ==========
[2012/02/10 09:34:23 | 000,357,202 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Genworth.pdf
[2012/02/10 08:00:23 | 000,255,166 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Marriott Bonus Gold.pdf
[2012/02/09 13:07:21 | 000,184,794 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\08-413-1 (05-09) Agent Guide_agent guide.pdf
[2012/02/09 13:06:16 | 000,163,433 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\AAA8378 (12-11) Final.pdf
[2012/02/09 13:05:51 | 000,006,376 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Description2012020913053469.pdf
[2012/02/09 12:28:54 | 000,042,485 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Zach 10 year certain.pdf
[2012/02/09 12:28:05 | 000,039,722 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Zach Life and 10.pdf
[2012/02/09 11:16:21 | 000,065,727 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Good Illustration.pdf
[2012/02/09 10:45:10 | 000,255,180 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Marriott 51yr old.pdf
[2012/02/09 10:34:02 | 000,973,290 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Sentinel_Contract.pdf
[2012/02/09 10:33:05 | 000,255,277 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Girjis.pdf
[2012/02/09 10:28:15 | 000,666,746 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\FL Annuity Brochure.pdf
[2012/02/09 10:26:45 | 000,348,200 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\FL Rate Sheet.pdf
[2012/02/09 10:26:32 | 000,891,483 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\FL Annuity app pack .pdf
[2012/02/09 10:26:21 | 000,242,323 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\FL Quick Sheet.pdf
[2012/02/09 10:09:48 | 001,282,774 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\LIBR Flip chart.pdf
[2012/02/09 10:08:36 | 001,896,181 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\PeopleService.pdf
[2012/02/09 10:02:58 | 000,043,009 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Zietlow Life and 10.pdf
[2012/02/08 14:59:02 | 001,291,480 | ---- | C] () -- C:\Documents and Settings\[Employee]\Desktop\FFEC Free Report.pdf
[2012/02/08 13:33:59 | 001,406,532 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Director Application and disclosure with rider.pdf
[2012/02/08 09:48:34 | 000,962,547 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\LIBR Sale Brochure TX.pdf
[2012/02/08 09:48:16 | 001,327,654 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Sales Brochure TX.pdf
[2012/02/08 09:47:52 | 001,281,488 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Retirement Gold TX.pdf
[2012/02/08 09:12:04 | 000,098,630 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Sider.PDF
[2012/02/07 13:45:16 | 000,348,200 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\IA Personal Choice Annuity RATE SHEET.pdf
[2012/02/07 13:45:00 | 000,276,668 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\IA_AnnuityQuickSheet.pdf
[2012/02/07 13:44:35 | 000,987,676 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\IA_AppPack.pdf
[2012/02/07 12:31:46 | 000,627,778 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Equitrust.pdf
[2012/02/07 12:27:29 | 000,013,285 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Replacement.pdf
[2012/02/07 12:27:19 | 000,037,780 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Transfer or 1035.pdf
[2012/02/07 12:26:57 | 000,111,089 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Buyers Guide.pdf
[2012/02/07 12:26:46 | 000,045,074 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Disclosure.pdf
[2012/02/07 12:26:36 | 000,037,682 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Suitability.pdf
[2012/02/07 12:26:12 | 000,044,936 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Eleo Application.pdf
[2012/02/07 11:29:14 | 000,043,430 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\20 year certain Cole.pdf
[2012/02/07 11:28:09 | 000,043,496 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\15 yr certain Cole.pdf
[2012/02/07 11:27:07 | 000,043,429 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\10 year certain Cole.pdf
[2012/02/07 09:51:52 | 000,097,393 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Zietlow.PDF
[2012/02/07 09:24:16 | 000,255,288 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Huntoon 150k 50yr old.pdf
[2012/02/07 08:01:38 | 000,595,869 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\ING_Life.pdf
[2012/02/06 09:01:31 | 000,094,826 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Karzen.PDF
[2012/02/03 11:55:37 | 000,065,707 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Chapin 100k joint.pdf
[2012/02/03 11:52:40 | 000,065,607 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\chapin 100k 10 year deferr.pdf
[2012/02/03 09:43:13 | 000,540,102 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\365i product profile.pdf
[2012/02/03 09:42:32 | 000,570,531 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Income Maximizer.pdf
[2012/02/03 09:40:33 | 000,570,531 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Income Rider Maximizer.pdf
[2012/02/03 09:39:29 | 000,066,900 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Additional Riders page 365i.pdf
[2012/02/03 09:33:50 | 000,775,229 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Allianz 365i Brochure.pdf
[2012/02/03 08:51:23 | 000,049,692 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Partial Withdrawal.pdf
[2012/02/03 08:39:08 | 000,255,195 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Bonus Gold 20k Mariott.pdf
[2012/02/03 08:38:07 | 000,255,161 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Bonus Gold 9k Marriott.pdf
[2012/02/02 14:09:32 | 000,775,862 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Liberty_Life_web_contract.pdf
[2012/02/02 14:07:53 | 000,372,078 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Liberty brochure and spec sheet.pdf
[2012/02/02 13:51:13 | 000,352,266 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Liberty app pack.pdf
[2012/02/02 12:34:27 | 000,004,879 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Leach income riders.pdf
[2012/02/02 12:26:31 | 000,856,032 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Leach Symetra deferr 4 years.pdf
[2012/02/02 12:14:39 | 000,092,865 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Secure American FL Leach.PDF
[2012/02/02 08:15:27 | 000,348,200 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Sentinel Personal Choice Annuity RATE SHEET.pdf
[2012/02/02 08:15:09 | 000,276,668 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\SSLANQS11-OT_AnnuityQuickSheet.pdf
[2012/02/02 08:14:31 | 000,670,340 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\IA Brochure.pdf
[2012/02/01 14:23:46 | 000,372,081 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Spec Sheet and Annuity Brochure.pdf
[2012/02/01 14:22:59 | 000,352,280 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Application Packet.pdf
[2012/02/01 13:44:44 | 000,019,265 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\North American Director.pdf
[2012/02/01 13:43:45 | 000,019,197 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\North American Flex III.pdf
[2012/02/01 13:42:45 | 000,019,193 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\North American Flex II.pdf
[2012/02/01 13:10:01 | 000,065,668 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Kevin Flex III Income.pdf
[2012/02/01 13:09:04 | 000,065,759 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Kevin Flex II Income.pdf
[2012/02/01 13:07:52 | 000,065,752 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Kevin Director Income.pdf
[2012/02/01 12:11:43 | 000,065,755 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Marie Flex III Income.pdf
[2012/02/01 12:10:01 | 000,065,757 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Marie Flex II Income.pdf
[2012/02/01 12:09:08 | 000,065,742 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Marie Director Income.pdf
[2012/02/01 10:25:43 | 000,065,697 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Heikenberry Flex III Income.pdf
[2012/02/01 10:24:59 | 000,065,697 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Heikenberry Flex II Income.pdf
[2012/02/01 10:24:15 | 000,065,693 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Heikenberry Director Income Rider.pdf
[2012/02/01 09:48:57 | 000,020,198 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Heikenberry Director.pdf
[2012/02/01 09:24:30 | 000,255,166 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\57 Female 9k Bonus Gold.pdf
[2012/02/01 09:23:26 | 000,255,237 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\59 male Bonus Gold.pdf
[2012/02/01 08:17:12 | 000,042,773 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Tangney Life and 5 63k.pdf
[2012/02/01 08:16:23 | 000,042,803 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Tangney Life and 10 63k.pdf
[2012/02/01 08:15:23 | 000,042,802 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Tangney Life and 10.pdf
[2012/02/01 08:14:32 | 000,042,773 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Tangney Life and 5.pdf
[2012/01/30 15:59:55 | 000,027,244 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Aviva 300k.pdf
[2012/01/30 15:50:54 | 000,223,696 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\American Equity 300k.pdf
[2012/01/30 15:44:55 | 000,098,998 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Great American 300k.PDF
[2012/01/30 12:27:25 | 000,288,317 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Pomerance Annuitize at 78.pdf
[2012/01/30 10:19:44 | 000,330,237 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\ECA_PRELIM_HIPAA.pdf
[2012/01/27 14:14:04 | 000,038,061 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Male 41 25k.pdf
[2012/01/27 14:13:26 | 000,036,645 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Male 41 50k annual.pdf
[2012/01/27 14:12:43 | 000,038,482 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Male 41 100k annual.pdf
[2012/01/27 14:10:47 | 000,038,721 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\F45 100k annual.pdf
[2012/01/27 14:08:37 | 000,038,080 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\F 25k annual.pdf
[2012/01/27 14:07:32 | 000,037,003 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Female 45 50k annual.pdf
[2012/01/27 14:03:36 | 000,039,135 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\45male 50k annual life only.pdf
[2012/01/27 13:59:12 | 000,038,865 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\18F 50k Annual Life only.pdf
[2012/01/27 13:30:13 | 000,098,484 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Great American 75k.PDF
[2012/01/27 13:29:51 | 000,098,402 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Great American 50k.PDF
[2012/01/27 11:10:42 | 000,429,703 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Allianz Joine.pdf
[2012/01/27 11:08:53 | 000,429,505 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Allianz.pdf
[2012/01/27 08:55:19 | 001,336,208 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\2012275502834654.pdf
[2012/01/27 08:12:08 | 000,041,009 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Principal Installment refund.pdf
[2012/01/27 08:09:13 | 000,100,853 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Cash refund american national.pdf
[2012/01/27 08:06:17 | 000,429,490 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Allianz LIfe and 5 certain.pdf
[2012/01/27 07:59:39 | 000,429,458 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Allianz Bruins.pdf
[2012/01/26 12:53:44 | 000,407,783 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Great_American_Contract.pdf
[2012/01/26 09:51:00 | 000,371,688 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Reliance_Standard.pdf
[2012/01/26 09:50:11 | 000,312,753 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Reliance Standard Eleos application.pdf
[2012/01/26 09:44:56 | 000,575,360 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Reliance Standard Eleos.pdf
[2012/01/26 08:25:51 | 000,384,043 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Principal.pdf
[2012/01/25 16:06:06 | 000,118,878 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Spec sheet.pdf
[2012/01/25 16:04:48 | 000,237,427 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Brochure.pdf
[2012/01/25 16:03:48 | 001,115,679 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Anico Citadel application.pdf
[2012/01/25 15:49:14 | 001,060,168 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Allianz_Preferred.pdf
[2012/01/25 15:48:38 | 000,445,612 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\American_National.pdf
[2012/01/25 15:22:40 | 000,193,475 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Brokerage Life Interest Rates_February2012.pdf
[2012/01/25 15:16:01 | 001,013,568 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Prosperity Elite Series.pdf
[2012/01/25 15:14:53 | 000,541,040 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\4% and 6%.pdf
[2012/01/25 15:13:10 | 000,563,766 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\7% rider.pdf
[2012/01/25 15:12:37 | 000,979,952 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\ADV1013.pdf
[2012/01/25 12:24:46 | 000,096,625 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\1307146.pdf
[2012/01/25 11:03:27 | 000,000,227 | ---- | C] () -- C:\Documents and Settings\[Employee]\Desktop\MultiVantage5_Agent_Guide.pdf.url
[2012/01/25 11:03:23 | 000,000,231 | ---- | C] () -- C:\Documents and Settings\[Employee]\Desktop\MultiVantage5_Client_Brochure.pdf.url
[2012/01/25 11:03:13 | 000,000,230 | ---- | C] () -- C:\Documents and Settings\[Employee]\Desktop\MultiVantage5_Flier_5367_0511.pdf.url
[2012/01/25 10:05:44 | 000,036,231 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\9800 Life and 10.pdf
[2012/01/25 10:03:57 | 000,036,369 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\9800 Life and 5.pdf
[2012/01/25 10:03:09 | 000,036,624 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\9800 Life only.pdf
[2012/01/25 10:02:12 | 000,040,967 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\14523 Life and 5.pdf
[2012/01/25 10:00:44 | 000,039,705 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\14523 Life and 10.pdf
[2012/01/25 09:59:43 | 000,039,280 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\11435 Life and 10.pdf
[2012/01/25 09:58:51 | 000,039,671 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\11435 Life and 5.pdf
[2012/01/25 09:58:03 | 000,038,080 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\11435 life only.pdf
[2012/01/25 09:56:02 | 000,038,086 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\14523 life only.pdf
[2012/01/24 14:14:05 | 003,569,573 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\1122-SB-03.11.11.pdf
[2012/01/24 11:42:50 | 001,018,271 | ---- | C] () -- C:\Documents and Settings\[Employee]\Desktop\491000100 2012-01-13 082354 MasterDex 10 Plus App Kit.pdf
[2012/01/23 11:00:41 | 000,098,594 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Johnson Income Sustainer Plus 37k.PDF
[2012/01/23 11:00:10 | 000,098,760 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Johnson Income Sustainer Plus 74k.PDF
[2012/01/23 10:51:52 | 000,098,900 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Perkins Income Sustainer Plus.PDF
[2012/01/23 10:51:26 | 000,095,149 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Perkins Income Sustainer.PDF
[2012/01/23 10:50:52 | 000,082,503 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Perkins No riders.PDF
[2012/01/20 12:26:10 | 000,044,170 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\eca_myga_comparison.pdf
[2012/01/20 11:21:24 | 001,108,956 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Genworth Application.pdf
[2012/01/20 11:15:52 | 000,928,726 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\LSW.pdf
[2012/01/20 08:51:43 | 000,040,150 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\guide.pdf
[2012/01/19 16:42:35 | 000,008,817 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\Life and 10 year certain.pdf
[2012/01/19 16:40:46 | 000,008,253 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\10 year certain.pdf
[2012/01/19 15:26:22 | 000,710,124 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\FandG.pdf
[2012/01/19 14:30:36 | 000,501,964 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\B1080310NWSafeReturnBrochure1111.pdf
[2012/01/19 14:30:01 | 000,175,033 | ---- | C] () -- C:\Documents and Settings\[Employee]\My Documents\B6033111NW IncomeSustainer Plus Brochure.pdf
[2011/12/23 09:41:49 | 000,000,048 | ---- | C] () -- C:\WINDOWS\ACare.ini
[2011/12/23 09:41:43 | 000,000,242 | ---- | C] () -- C:\WINDOWS\SLasstcare.ini
[2011/12/12 14:52:47 | 000,000,552 | ---- | C] () -- C:\WINDOWS\System32\d3d8caps.dat
[2011/09/12 08:35:06 | 000,000,027 | ---- | C] () -- C:\WINDOWS\INSDESK.INI
[2011/09/12 08:29:50 | 000,000,072 | ---- | C] () -- C:\WINDOWS\L&EAPPS.INI
[2011/08/18 23:33:53 | 000,102,400 | ---- | C] () -- C:\WINDOWS\RegBootClean.exe
[2010/12/29 09:39:26 | 000,164,864 | ---- | C] () -- C:\Program Files\UNWISE.EXE
[2010/08/16 10:35:29 | 000,005,910 | ---- | C] () -- C:\WINDOWS\cfgspyrt.ini
[2010/08/16 10:35:27 | 000,006,794 | ---- | C] () -- C:\WINDOWS\cfgrt.ini
[2010/08/11 14:29:49 | 000,006,007 | ---- | C] () -- C:\WINDOWS\cfgspyps.ini
[2010/08/11 14:29:45 | 000,006,859 | ---- | C] () -- C:\WINDOWS\cfgps.ini
[2010/07/21 10:52:52 | 000,000,068 | ---- | C] () -- C:\WINDOWS\pmlfo.ini
[2010/01/26 12:50:23 | 000,000,046 | ---- | C] () -- C:\WINDOWS\aisbma.ini
[2010/01/04 09:36:38 | 000,000,101 | ---- | C] () -- C:\WINDOWS\applink.ini
[2010/01/04 09:36:38 | 000,000,097 | ---- | C] () -- C:\WINDOWS\Utdsysap.ini
[2010/01/04 09:36:04 | 000,000,000 | ---- | C] () -- C:\WINDOWS\tmp.ini
[2009/12/17 10:56:40 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2009/10/12 15:49:11 | 000,937,984 | ---- | C] () -- C:\WINDOWS\System32\CTS_G729A.dll
[2009/10/12 15:49:10 | 000,061,440 | ---- | C] () -- C:\WINDOWS\System32\CTSMail.dll
[2009/10/01 14:35:05 | 000,018,804 | ---- | C] () -- C:\WINDOWS\cfgall.ini
[2009/05/13 13:05:38 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2009/05/13 12:54:43 | 000,000,476 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2009/05/13 12:45:46 | 000,116,224 | ---- | C] () -- C:\WINDOWS\System32\pdfcmnnt.dll
[2009/05/13 11:28:31 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2009/05/13 11:22:24 | 000,021,640 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2009/05/13 06:15:42 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2009/05/13 06:14:23 | 000,266,208 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2009/03/03 11:18:04 | 000,073,728 | ---- | C] () -- C:\WINDOWS\System32\RtNicProp32.dll
[2008/04/14 04:55:28 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\Dcache.bin
[2006/12/31 07:57:08 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2004/08/04 06:00:00 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2004/08/04 06:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2004/08/04 06:00:00 | 000,435,688 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2004/08/04 06:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2004/08/04 06:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2004/08/04 06:00:00 | 000,068,584 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2004/08/04 06:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2004/08/04 06:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2004/08/04 06:00:00 | 000,004,463 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2004/08/04 06:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
========== LOP Check ==========
[2009/10/12 15:52:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\[Employee]\Application Data\CTS
[2011/05/24 07:08:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\[Employee]\Application Data\WeatherBug
[2012/01/25 14:08:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\[Employee]\Application Data\webex
[2011/10/20 14:27:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\[Employee]\Application Data\{46E346C1-4789-4221-9206-F4B0BC9AAABC}
[2011/12/12 14:50:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Electronic Arts
[2009/10/06 13:55:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\LJZsoft
[2012/01/23 13:17:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Origin
[2010/07/12 12:34:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Penn Mutual Life
[2012/02/10 14:17:00 | 000,000,218 | ---- | M] () -- C:\WINDOWS\Tasks\JkDefrag.job
========== Purity Check ==========
< End of report >
Thank you!
Aristazi