Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

file recovery fake, cant view any drives or open anything [Closed]

Started by words120 , Aug 02 2012 11:57 AM

  • This topic is locked This topic is locked

#1
words120
Posted 02 August 2012 - 11:57 AM

words120

    New Member

  • Member
  • Pip
  • 4 posts
I have an Asus g73jw a1 with windows 7 64bit. last night after a restart all of my desktop icons were gone and when I go to computer and click on any drive it says this folder is empty.then a program called file recovery showed up out of nowhere. It does a fake scan on your computer and they says you need to purchase software to fix all the hard drive problems. I am currently in safe mode with networking running a scan with malware bytes.My computer is screwed for lack of a better term.
  • 0

Advertisements

#2
words120
Posted 02 August 2012 - 11:59 AM

words120

    New Member

  • Topic Starter
  • Member
  • Pip
  • 4 posts
Please just tell me whatever other information you guys need to help me work this thing out
  • 0

#3
CompCav
Posted 02 August 2012 - 12:42 PM

CompCav

    Member 5k

  • Expert
  • 12,454 posts
Hi, words120! Posted ImageMy nick name is CompCav and I will be assisting you with your Malware/Security problems. Please make sure you read all of the instructions and fixes thoroughly before continuing with them. If you have any questions or you are unsure about anything, just ask and I will help you out. :)

If you have resolved the issues you were originally experiencing, or have received help elsewhere, please let me know so that this topic can be closed.


Please make sure you are saving and printing the instructions out prior to each fix, this way you will have them on hand just in case you are unable to access this site. One of the steps I will be asking you to do requires you to boot into Safe Mode and this process will be much easier for you to perform if the instructions are printed out for you to follow.

If you are ready to get started, please review and follow these guidelines so that we resolve your issues in a timely and effective manner:
  • Logs from malware removal programs (OTL is one of them) can take some time to analyze. I need you to be patient while I analyze any logs you post.
  • Please make sure to carefully read any instructions that I give you. Since I cannot see or directly interact with your computer I am dependent on you to "be my eyes" and provide as much information as you can regarding the current state of your computer.
  • If you're not sure, or if something unexpected happens, do NOT continue! Stop and ask!
  • These instructions have been specifically tailored to your computer and the issues you are experiencing with your computer. These instructions are not suitable for any other computer, even if the issues are fairly similar.
  • Do not do things I do not ask for, such as running a spyware scan on your computer. However, the one thing that you should always do, is to make sure your anti-virus definitions are up-to-date!
  • Please do not use the Attachment feature for any log file. Just do a Copy/Paste of the entire contents of the log file inside your post and submit.
  • You must reply within four days failure to reply will result in the topic being closed!
  • Please do not PM me directly for help. If you have any questions, post them in this topic. PM me only if I have not responded to your last post in 2 days.
  • Lastly, I am no magician. I will try very hard to fix your issues, but no promises can be made. Also be aware that some infections are so severe that you might need to ultimately reformat your hard drive and reinstall the operating system.
    Don't worry, this only happens in severe cases, but it sadly does happen. Please have the software and storage media for backing up your data available.

Step 1.

  • Download RogueKiller and save it on your desktop.
  • Quit all programs
  • Start RogueKiller.exe.
  • Wait until Prescan has finished ...
  • Click on Scan
  • Note: If RogueKiller will not run please try it several times, if it still does not run rename it winlogon.com and try it several times.
Posted Image
  • Wait for the end of the scan.
  • The report has been created on the desktop.
  • Click on the Delete button.
Posted Image
  • The report has been created on the desktop.

  • Next click on ShortcutsFix

    Posted Image
  • The report has been created on the desktop.

Please post:

All RKreport.txt text files located on your desktop.


Step 2.

Download aswMBR.exe ( 1.8mb ) to your desktop.
Double click the aswMBR.exe to run it Click the "Scan" button to start scan

Posted Image

On completion of the scan click save log, save it to your desktop and post in your next reply

Posted Image

If it does not run rename it iexplore.exe and try it again.


Step 3.

Download OTL to your Desktop
  • Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
  • Select Scan All Users
  • Select Lop Check and Purity Check
  • Under the Custom Scan box paste this in
    netsvcs
    %SYSTEMDRIVE%\*.exe
    /md5start
    services.*
    explorer.exe
    winlogon.exe
    Userinit.exe
    svchost.exe
    /md5stop
    HKEY_CURRENT_USER\Software\Microsoft\Windows Media\WMSDK\Local\AutoProxyCache /s
    CREATERESTOREPOINT
  • Click the Quick Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
  • When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
  • Post both logs


Step 4.

Please post:

All RKreport.txt files
aswMBR log
OTL.txt
Extras.txt

Give me an update on your computer's issues.
  • 0

#4
words120
Posted 02 August 2012 - 01:48 PM

words120

    New Member

  • Topic Starter
  • Member
  • Pip
  • 4 posts
Thank you for your help here are the log files

rkreport1
RogueKiller V7.6.4 [07/17/2012] by Tigzy
mail: tigzyRK<at>gmail<dot>com
Feedback: http://www.geekstogo...13-roguekiller/
Blog: http://tigzyrk.blogspot.com

Operating System: Windows 7 (6.1.7600 ) 64 bits version
Started in : Safe mode with network support
User: Jimmy [Admin rights]
Mode: Scan -- Date: 08/02/2012 15:09:05

¤¤¤ Bad processes: 0 ¤¤¤

¤¤¤ Registry Entries: 71 ¤¤¤
[BLACKLIST DLL] HKUS\S-1-5-19[...]\Run : ODUI (rundll32.exe "C:\Users\Jimmy\AppData\Local\PMB Files\ODUI\hstiktkb.dll",CreateInstance) -> FOUND
[BLACKLIST DLL] HKUS\S-1-5-20[...]\Run : ODUI (rundll32.exe "C:\Users\Jimmy\AppData\Local\PMB Files\ODUI\hstiktkb.dll",CreateInstance) -> FOUND
[SUSP PATH] At18.job @ : C:\ProgramData\A3bJmlsI.exe -> FOUND
[SUSP PATH] At17.job @ : C:\ProgramData\A3bJmlsI.exe -> FOUND
[SUSP PATH] At16.job @ : C:\ProgramData\A3bJmlsI.exe -> FOUND
[SUSP PATH] At15.job @ : C:\ProgramData\A3bJmlsI.exe -> FOUND
[SUSP PATH] At14.job @ : C:\ProgramData\A3bJmlsI.exe -> FOUND
[SUSP PATH] At13.job @ : C:\ProgramData\A3bJmlsI.exe -> FOUND
[SUSP PATH] At12.job @ : C:\ProgramData\A3bJmlsI.exe -> FOUND
[SUSP PATH] At11.job @ : C:\ProgramData\A3bJmlsI.exe -> FOUND
[SUSP PATH] At10.job @ : C:\ProgramData\A3bJmlsI.exe -> FOUND
[SUSP PATH] At1.job @ : C:\ProgramData\A3bJmlsI.exe -> FOUND
[SUSP PATH] At27.job @ : C:\ProgramData\A3bJmlsI.exe_ -> FOUND
[SUSP PATH] At26.job @ : C:\ProgramData\A3bJmlsI.exe_ -> FOUND
[SUSP PATH] At25.job @ : C:\ProgramData\A3bJmlsI.exe_ -> FOUND
[SUSP PATH] At24.job @ : C:\ProgramData\A3bJmlsI.exe -> FOUND
[SUSP PATH] At23.job @ : C:\ProgramData\A3bJmlsI.exe -> FOUND
[SUSP PATH] At22.job @ : C:\ProgramData\A3bJmlsI.exe -> FOUND
[SUSP PATH] At21.job @ : C:\ProgramData\A3bJmlsI.exe -> FOUND
[SUSP PATH] At20.job @ : C:\ProgramData\A3bJmlsI.exe -> FOUND
[SUSP PATH] At2.job @ : C:\ProgramData\A3bJmlsI.exe -> FOUND
[SUSP PATH] At19.job @ : C:\ProgramData\A3bJmlsI.exe -> FOUND
[SUSP PATH] At36.job @ : C:\ProgramData\A3bJmlsI.exe_ -> FOUND
[SUSP PATH] At35.job @ : C:\ProgramData\A3bJmlsI.exe_ -> FOUND
[SUSP PATH] At34.job @ : C:\ProgramData\A3bJmlsI.exe_ -> FOUND
[SUSP PATH] At33.job @ : C:\ProgramData\A3bJmlsI.exe_ -> FOUND
[SUSP PATH] At32.job @ : C:\ProgramData\A3bJmlsI.exe_ -> FOUND
[SUSP PATH] At31.job @ : C:\ProgramData\A3bJmlsI.exe_ -> FOUND
[SUSP PATH] At30.job @ : C:\ProgramData\A3bJmlsI.exe_ -> FOUND
[SUSP PATH] At3.job @ : C:\ProgramData\A3bJmlsI.exe -> FOUND
[SUSP PATH] At29.job @ : C:\ProgramData\A3bJmlsI.exe_ -> FOUND
[SUSP PATH] At28.job @ : C:\ProgramData\A3bJmlsI.exe_ -> FOUND
[SUSP PATH] At45.job @ : C:\ProgramData\A3bJmlsI.exe_ -> FOUND
[SUSP PATH] At44.job @ : C:\ProgramData\A3bJmlsI.exe_ -> FOUND
[SUSP PATH] At43.job @ : C:\ProgramData\A3bJmlsI.exe_ -> FOUND
[SUSP PATH] At42.job @ : C:\ProgramData\A3bJmlsI.exe_ -> FOUND
[SUSP PATH] At41.job @ : C:\ProgramData\A3bJmlsI.exe_ -> FOUND
[SUSP PATH] At40.job @ : C:\ProgramData\A3bJmlsI.exe_ -> FOUND
[SUSP PATH] At4.job @ : C:\ProgramData\A3bJmlsI.exe -> FOUND
[SUSP PATH] At39.job @ : C:\ProgramData\A3bJmlsI.exe_ -> FOUND
[SUSP PATH] At38.job @ : C:\ProgramData\A3bJmlsI.exe_ -> FOUND
[SUSP PATH] At37.job @ : C:\ProgramData\A3bJmlsI.exe_ -> FOUND
[SUSP PATH] At9.job @ : C:\ProgramData\A3bJmlsI.exe -> FOUND
[SUSP PATH] At8.job @ : C:\ProgramData\A3bJmlsI.exe -> FOUND
[SUSP PATH] At7.job @ : C:\ProgramData\A3bJmlsI.exe -> FOUND
[SUSP PATH] At6.job @ : C:\ProgramData\A3bJmlsI.exe -> FOUND
[SUSP PATH] At5.job @ : C:\ProgramData\A3bJmlsI.exe -> FOUND
[SUSP PATH] At48.job @ : C:\ProgramData\A3bJmlsI.exe_ -> FOUND
[SUSP PATH] At47.job @ : C:\ProgramData\A3bJmlsI.exe_ -> FOUND
[SUSP PATH] At46.job @ : C:\ProgramData\A3bJmlsI.exe_ -> FOUND
[HJ] HKLM\[...]\System : ConsentPromptBehaviorAdmin (0) -> FOUND
[HJ] HKLM\[...]\System : EnableLUA (0) -> FOUND
[WallPP] HKCU\[...]\Desktop : Wallpaper () -> FOUND
[ZeroAccess] HKCR\[...]\InprocServer32 : (C:\Users\Jimmy\AppData\Local\{e235a710-5ffe-dfaa-701d-268bd1a78a02}\n.) -> FOUND
[HJ] HKCU\[...]\Advanced : Start_ShowMyDocs (0) -> FOUND
[HJ] HKCU\[...]\Advanced : Start_ShowRecentDocs (0) -> FOUND
[HJ] HKCU\[...]\Advanced : Start_ShowUser (0) -> FOUND
[HJ] HKCU\[...]\Advanced : Start_ShowMyPics (0) -> FOUND
[HJ] HKCU\[...]\Advanced : Start_ShowMyGames (0) -> FOUND
[HJ] HKCU\[...]\Advanced : Start_ShowMyMusic (0) -> FOUND
[HJ] HKCU\[...]\Advanced : Start_ShowControlPanel (0) -> FOUND
[HJ] HKCU\[...]\Advanced : Start_ShowHelp (0) -> FOUND
[HJ] HKCU\[...]\Advanced : Start_ShowPrinters (0) -> FOUND
[HJ] HKCU\[...]\Advanced : Start_ShowRun (0) -> FOUND
[HJ] HKCU\[...]\Advanced : Start_ShowSetProgramAccessAndDefaults (0) -> FOUND
[HJ] HKCU\[...]\Advanced : Start_TrackProgs (0) -> FOUND
[HJ] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> FOUND
[HJ] HKCU\[...]\ClassicStartMenu : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> FOUND
[HJ] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> FOUND
[HJ] HKCU\[...]\ClassicStartMenu : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> FOUND
[HJ] HKCU\[...]\ClassicStartMenu : {645FF040-5081-101B-9F08-00AA002F954E} (1) -> FOUND

¤¤¤ Particular Files / Folders: ¤¤¤

¤¤¤ Driver: [NOT LOADED] ¤¤¤

¤¤¤ Infection : ZeroAccess ¤¤¤

¤¤¤ HOSTS File: ¤¤¤
127.0.0.1 localhost
127.0.0.1 activate.adobe.com
127.0.0.1 3dns-3.adobe.com
127.0.0.1 adobe-dns-2.adobe.com
127.0.0.1 adobe-dns-3.adobe.com
127.0.0.1 ereg.wip3.adobe.com
127.0.0.1 activate-sea.adobe.com
127.0.0.1 wip3.adobe.com
127.0.0.1 wwis-dubc1-vip60.adobe.com
127.0.0.1 activate-sjc0.adobe.com
127.0.0.1 practivate.adobe.com
127.0.0.1 ereg.adobe.com
127.0.0.1 activate.wip3.adobe.com
127.0.0.1 3dns-2.adobe.com
127.0.0.1 adobe-dns.adobe.com
::1 localhost


¤¤¤ MBR Check: ¤¤¤

+++++ PhysicalDrive0: ST9500420AS +++++
--- User ---
[MBR] 697fe5d5f8f6c594432ea117b4bfe546
[BSP] b8e681ec20f3f51e484d81d4ade624cc : Windows 7 MBR Code
Partition table:
0 - [XXXXXX] FAT32-LBA (0x1c) [HIDDEN!] Offset (sectors): 63 | Size: 22003 Mo
1 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 45062325 | Size: 119231 Mo
2 - [XXXXXX] EXTEN-LBA (0x0f) [VISIBLE] Offset (sectors): 289249280 | Size: 335704 Mo
User = LL1 ... OK!
User = LL2 ... OK!

+++++ PhysicalDrive1: ST9500420AS +++++
--- User ---
[MBR] 346058a5405d7640af2af52e3b13b18c
[BSP] e6c2cebec9d5914c6fe029aa4b621d92 : Windows Vista/7 MBR Code
Partition table:
0 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 238459 Mo
1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 488366080 | Size: 238477 Mo
User = LL1 ... OK!
User = LL2 ... OK!

Finished : << RKreport[1].txt >>
RKreport[1].txt


RK REPORT 2

ogueKiller V7.6.4 [07/17/2012] by Tigzy
mail: tigzyRK<at>gmail<dot>com
Feedback: http://www.geekstogo...13-roguekiller/
Blog: http://tigzyrk.blogspot.com

Operating System: Windows 7 (6.1.7600 ) 64 bits version
Started in : Safe mode with network support
User: Jimmy [Admin rights]
Mode: Remove -- Date: 08/02/2012 15:09:36

¤¤¤ Bad processes: 0 ¤¤¤

¤¤¤ Registry Entries: 71 ¤¤¤
[BLACKLIST DLL] HKUS\S-1-5-19[...]\Run : ODUI (rundll32.exe "C:\Users\Jimmy\AppData\Local\PMB Files\ODUI\hstiktkb.dll",CreateInstance) -> DELETED
[BLACKLIST DLL] HKUS\S-1-5-20[...]\Run : ODUI (rundll32.exe "C:\Users\Jimmy\AppData\Local\PMB Files\ODUI\hstiktkb.dll",CreateInstance) -> DELETED
[SUSP PATH] At18.job @ : C:\ProgramData\A3bJmlsI.exe -> DELETED
[SUSP PATH] At17.job @ : C:\ProgramData\A3bJmlsI.exe -> DELETED
[SUSP PATH] At16.job @ : C:\ProgramData\A3bJmlsI.exe -> DELETED
[SUSP PATH] At15.job @ : C:\ProgramData\A3bJmlsI.exe -> DELETED
[SUSP PATH] At14.job @ : C:\ProgramData\A3bJmlsI.exe -> DELETED
[SUSP PATH] At13.job @ : C:\ProgramData\A3bJmlsI.exe -> DELETED
[SUSP PATH] At12.job @ : C:\ProgramData\A3bJmlsI.exe -> DELETED
[SUSP PATH] At11.job @ : C:\ProgramData\A3bJmlsI.exe -> DELETED
[SUSP PATH] At10.job @ : C:\ProgramData\A3bJmlsI.exe -> DELETED
[SUSP PATH] At1.job @ : C:\ProgramData\A3bJmlsI.exe -> DELETED
[SUSP PATH] At27.job @ : C:\ProgramData\A3bJmlsI.exe_ -> DELETED
[SUSP PATH] At26.job @ : C:\ProgramData\A3bJmlsI.exe_ -> DELETED
[SUSP PATH] At25.job @ : C:\ProgramData\A3bJmlsI.exe_ -> DELETED
[SUSP PATH] At24.job @ : C:\ProgramData\A3bJmlsI.exe -> DELETED
[SUSP PATH] At23.job @ : C:\ProgramData\A3bJmlsI.exe -> DELETED
[SUSP PATH] At22.job @ : C:\ProgramData\A3bJmlsI.exe -> DELETED
[SUSP PATH] At21.job @ : C:\ProgramData\A3bJmlsI.exe -> DELETED
[SUSP PATH] At20.job @ : C:\ProgramData\A3bJmlsI.exe -> DELETED
[SUSP PATH] At2.job @ : C:\ProgramData\A3bJmlsI.exe -> DELETED
[SUSP PATH] At19.job @ : C:\ProgramData\A3bJmlsI.exe -> DELETED
[SUSP PATH] At36.job @ : C:\ProgramData\A3bJmlsI.exe_ -> DELETED
[SUSP PATH] At35.job @ : C:\ProgramData\A3bJmlsI.exe_ -> DELETED
[SUSP PATH] At34.job @ : C:\ProgramData\A3bJmlsI.exe_ -> DELETED
[SUSP PATH] At33.job @ : C:\ProgramData\A3bJmlsI.exe_ -> DELETED
[SUSP PATH] At32.job @ : C:\ProgramData\A3bJmlsI.exe_ -> DELETED
[SUSP PATH] At31.job @ : C:\ProgramData\A3bJmlsI.exe_ -> DELETED
[SUSP PATH] At30.job @ : C:\ProgramData\A3bJmlsI.exe_ -> DELETED
[SUSP PATH] At3.job @ : C:\ProgramData\A3bJmlsI.exe -> DELETED
[SUSP PATH] At29.job @ : C:\ProgramData\A3bJmlsI.exe_ -> DELETED
[SUSP PATH] At28.job @ : C:\ProgramData\A3bJmlsI.exe_ -> DELETED
[SUSP PATH] At45.job @ : C:\ProgramData\A3bJmlsI.exe_ -> DELETED
[SUSP PATH] At44.job @ : C:\ProgramData\A3bJmlsI.exe_ -> DELETED
[SUSP PATH] At43.job @ : C:\ProgramData\A3bJmlsI.exe_ -> DELETED
[SUSP PATH] At42.job @ : C:\ProgramData\A3bJmlsI.exe_ -> DELETED
[SUSP PATH] At41.job @ : C:\ProgramData\A3bJmlsI.exe_ -> DELETED
[SUSP PATH] At40.job @ : C:\ProgramData\A3bJmlsI.exe_ -> DELETED
[SUSP PATH] At4.job @ : C:\ProgramData\A3bJmlsI.exe -> DELETED
[SUSP PATH] At39.job @ : C:\ProgramData\A3bJmlsI.exe_ -> DELETED
[SUSP PATH] At38.job @ : C:\ProgramData\A3bJmlsI.exe_ -> DELETED
[SUSP PATH] At37.job @ : C:\ProgramData\A3bJmlsI.exe_ -> DELETED
[SUSP PATH] At9.job @ : C:\ProgramData\A3bJmlsI.exe -> DELETED
[SUSP PATH] At8.job @ : C:\ProgramData\A3bJmlsI.exe -> DELETED
[SUSP PATH] At7.job @ : C:\ProgramData\A3bJmlsI.exe -> DELETED
[SUSP PATH] At6.job @ : C:\ProgramData\A3bJmlsI.exe -> DELETED
[SUSP PATH] At5.job @ : C:\ProgramData\A3bJmlsI.exe -> DELETED
[SUSP PATH] At48.job @ : C:\ProgramData\A3bJmlsI.exe_ -> DELETED
[SUSP PATH] At47.job @ : C:\ProgramData\A3bJmlsI.exe_ -> DELETED
[SUSP PATH] At46.job @ : C:\ProgramData\A3bJmlsI.exe_ -> DELETED
[HJ] HKLM\[...]\System : ConsentPromptBehaviorAdmin (0) -> REPLACED (2)
[HJ] HKLM\[...]\System : EnableLUA (0) -> REPLACED (1)
[WallPP] HKCU\[...]\Desktop : Wallpaper () -> REPLACED (C:\Users\Jimmy\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg)
[ZeroAccess] HKCR\[...]\InprocServer32 : (C:\Users\Jimmy\AppData\Local\{e235a710-5ffe-dfaa-701d-268bd1a78a02}\n.) -> REPLACED (c:\windows\system32\shell32.dll)
[HJ] HKCU\[...]\Advanced : Start_ShowMyDocs (0) -> REPLACED (1)
[HJ] HKCU\[...]\Advanced : Start_ShowRecentDocs (0) -> REPLACED (1)
[HJ] HKCU\[...]\Advanced : Start_ShowUser (0) -> REPLACED (1)
[HJ] HKCU\[...]\Advanced : Start_ShowMyPics (0) -> REPLACED (1)
[HJ] HKCU\[...]\Advanced : Start_ShowMyGames (0) -> REPLACED (1)
[HJ] HKCU\[...]\Advanced : Start_ShowMyMusic (0) -> REPLACED (1)
[HJ] HKCU\[...]\Advanced : Start_ShowControlPanel (0) -> REPLACED (1)
[HJ] HKCU\[...]\Advanced : Start_ShowHelp (0) -> REPLACED (1)
[HJ] HKCU\[...]\Advanced : Start_ShowPrinters (0) -> REPLACED (1)
[HJ] HKCU\[...]\Advanced : Start_ShowRun (0) -> REPLACED (1)
[HJ] HKCU\[...]\Advanced : Start_ShowSetProgramAccessAndDefaults (0) -> REPLACED (1)
[HJ] HKCU\[...]\Advanced : Start_TrackProgs (0) -> REPLACED (1)
[HJ] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> REPLACED (0)
[HJ] HKCU\[...]\ClassicStartMenu : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> REPLACED (0)
[HJ] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> REPLACED (0)
[HJ] HKCU\[...]\ClassicStartMenu : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> REPLACED (0)
[HJ] HKCU\[...]\ClassicStartMenu : {645FF040-5081-101B-9F08-00AA002F954E} (1) -> REPLACED (0)

¤¤¤ Particular Files / Folders: ¤¤¤

¤¤¤ Driver: [NOT LOADED] ¤¤¤

¤¤¤ Infection : ZeroAccess ¤¤¤

¤¤¤ HOSTS File: ¤¤¤
127.0.0.1 localhost
127.0.0.1 activate.adobe.com
127.0.0.1 3dns-3.adobe.com
127.0.0.1 adobe-dns-2.adobe.com
127.0.0.1 adobe-dns-3.adobe.com
127.0.0.1 ereg.wip3.adobe.com
127.0.0.1 activate-sea.adobe.com
127.0.0.1 wip3.adobe.com
127.0.0.1 wwis-dubc1-vip60.adobe.com
127.0.0.1 activate-sjc0.adobe.com
127.0.0.1 practivate.adobe.com
127.0.0.1 ereg.adobe.com
127.0.0.1 activate.wip3.adobe.com
127.0.0.1 3dns-2.adobe.com
127.0.0.1 adobe-dns.adobe.com
::1 localhost


¤¤¤ MBR Check: ¤¤¤

+++++ PhysicalDrive0: ST9500420AS +++++
--- User ---
[MBR] 697fe5d5f8f6c594432ea117b4bfe546
[BSP] b8e681ec20f3f51e484d81d4ade624cc : Windows 7 MBR Code
Partition table:
0 - [XXXXXX] FAT32-LBA (0x1c) [HIDDEN!] Offset (sectors): 63 | Size: 22003 Mo
1 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 45062325 | Size: 119231 Mo
2 - [XXXXXX] EXTEN-LBA (0x0f) [VISIBLE] Offset (sectors): 289249280 | Size: 335704 Mo
User = LL1 ... OK!
User = LL2 ... OK!

+++++ PhysicalDrive1: ST9500420AS +++++
--- User ---
[MBR] 346058a5405d7640af2af52e3b13b18c
[BSP] e6c2cebec9d5914c6fe029aa4b621d92 : Windows Vista/7 MBR Code
Partition table:
0 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 238459 Mo
1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 488366080 | Size: 238477 Mo
User = LL1 ... OK!
User = LL2 ... OK!

Finished : << RKreport[2].txt >>
RKreport[1].txt ; RKreport[2].txt


RK Report 3

RogueKiller V7.6.4 [07/17/2012] by Tigzy
mail: tigzyRK<at>gmail<dot>com
Feedback: http://www.geekstogo...13-roguekiller/
Blog: http://tigzyrk.blogspot.com

Operating System: Windows 7 (6.1.7600 ) 64 bits version
Started in : Safe mode with network support
User: Jimmy [Admin rights]
Mode: Shortcuts HJfix -- Date: 08/02/2012 15:16:40

¤¤¤ Bad processes: 0 ¤¤¤

¤¤¤ Driver: [NOT LOADED] ¤¤¤

¤¤¤ File attributes restored: ¤¤¤
Desktop: Success 552 / Fail 0
Quick launch: Success 20 / Fail 0
Programs: Success 58186 / Fail 0
Start menu: Success 128 / Fail 0
User folder: Success 12090 / Fail 0
My documents: Success 735 / Fail 0
My favorites: Success 30 / Fail 0
My pictures: Success 63 / Fail 0
My music: Success 1026 / Fail 0
My videos: Success 1 / Fail 0
Local drives: Success 63742 / Fail 0
Backup: [FOUND] Success 0 / Fail 0

Drives:
[C:] \Device\HarddiskVolume2 -- 0x3 --> Restored
[D:] \Device\HarddiskVolume3 -- 0x3 --> Restored
[E:] \Device\CdRom0 -- 0x5 --> Skipped
[F:] \Device\HarddiskVolume4 -- 0x3 --> Restored
[G:] \Device\HarddiskVolume5 -- 0x3 --> Restored
[I:] \Device\CdRom1 -- 0x5 --> Skipped
[J:] \Device\CdRom2 -- 0x5 --> Skipped

¤¤¤ Infection : Rogue.FakeHDD ¤¤¤

Finished : << RKreport[3].txt >>
RKreport[1].txt ; RKreport[2].txt ; RKreport[3].txt


ASMBR Log

aswMBR version 0.9.9.1665 Copyright© 2011 AVAST Software
Run date: 2012-08-02 15:23:57
-----------------------------
15:23:57.331 OS Version: Windows x64 6.1.7600
15:23:57.331 Number of processors: 8 586 0x1E05
15:23:57.332 ComputerName: JIMMY-LAPTOP UserName: Jimmy
15:24:02.253 Initialize success
15:24:15.731 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1
15:24:15.745 Disk 0 Vendor: ST950042 0003 Size: 476940MB BusType: 3
15:24:15.747 Disk 1 \Device\Harddisk1\DR1 -> \Device\Ide\IAAStorageDevice-2
15:24:15.749 Disk 1 Vendor: ST950042 0003 Size: 476940MB BusType: 3
15:24:15.762 Disk 0 MBR read successfully
15:24:15.765 Disk 0 MBR scan
15:24:15.768 Disk 0 Windows 7 default MBR code
15:24:15.771 Disk 0 Partition 1 00 1C Hidd FAT32 LBA MSDOS5.0 22003 MB offset 63
15:24:15.803 Disk 0 Partition 2 80 (A) 07 HPFS/NTFS NTFS 119231 MB offset 45062325
15:24:15.806 Disk 0 Partition - 00 0F Extended LBA 335704 MB offset 289249280
15:24:15.827 Disk 0 Partition 3 00 07 HPFS/NTFS NTFS 335689 MB offset 289251328
15:24:15.851 Disk 0 scanning C:\Windows\system32\drivers
15:24:23.063 Service scanning
15:24:35.164 Modules scanning
15:24:35.830 Disk 0 trace - called modules:
15:24:35.877 ntoskrnl.exe CLASSPNP.SYS disk.sys PCTCore64.sys ACPI.sys iaStor.sys hal.dll
15:24:35.898 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa8007ec4060]
15:24:35.904 3 CLASSPNP.SYS[fffff8800107543f] -> nt!IofCallDriver -> [0xfffffa8007cf4cf0]
15:24:35.910 5 PCTCore64.sys[fffff880015aa720] -> nt!IofCallDriver -> [0xfffffa8007b6ce40]
15:24:35.916 7 ACPI.sys[fffff88000fae781] -> nt!IofCallDriver -> \Device\Ide\IAAStorageDevice-1[0xfffffa8007b6b050]
15:24:35.943 Scan finished successfully
15:27:56.888 Disk 0 MBR has been saved successfully to "C:\Users\Jimmy\Desktop\MBR.dat"
15:27:56.893 The log file has been saved successfully to "C:\Users\Jimmy\Desktop\aswMBR.txt"



OTL.txt




ernet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

7.93 Gb Total Physical Memory | 6.54 Gb Available Physical Memory | 82.56% Memory free
15.85 Gb Paging File | 14.65 Gb Available in Paging File | 92.40% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 116.44 Gb Total Space | 4.62 Gb Free Space | 3.97% Space Free | Partition Type: NTFS
Drive D: | 327.82 Gb Total Space | 187.21 Gb Free Space | 57.11% Space Free | Partition Type: NTFS
Drive F: | 232.87 Gb Total Space | 143.42 Gb Free Space | 61.59% Space Free | Partition Type: NTFS
Drive G: | 232.89 Gb Total Space | 196.71 Gb Free Space | 84.47% Space Free | Partition Type: NTFS

Computer Name: JIMMY-LAPTOP | User Name: Jimmy | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: All users | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2012/08/02 15:28:28 | 000,597,504 | ---- | M] (OldTimer Tools) -- C:\Users\Jimmy\Downloads\OTL.exe
PRC - [2012/08/02 15:23:57 | 004,731,392 | ---- | M] (AVAST Software) -- C:\Users\Jimmy\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YCV4RRWT\aswMBR.exe
PRC - [2012/08/02 15:08:33 | 001,552,384 | ---- | M] () -- C:\Users\Jimmy\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QHCAVVF9\RogueKiller.exe
PRC - [2012/06/22 15:34:12 | 002,673,624 | ---- | M] (PC Tools) -- C:\Program Files (x86)\PC Tools\PC Tools Security\pctsGui.exe
PRC - [2012/06/22 15:34:12 | 001,118,680 | ---- | M] (PC Tools) -- C:\Program Files (x86)\PC Tools\PC Tools Security\pctsSvc.exe
PRC - [2012/06/22 14:21:50 | 000,402,368 | ---- | M] (PC Tools) -- C:\Program Files (x86)\PC Tools\PC Tools Security\pctsAuxs.exe


========== Modules (No Company Name) ==========


========== Win32 Services (SafeList) ==========

SRV:64bit: - [2010/11/11 18:00:32 | 000,467,696 | -H-- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Zune\ZuneWlanCfgSvc.exe -- (ZuneWlanCfgSvc)
SRV:64bit: - [2010/11/11 18:00:32 | 000,306,416 | -H-- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Zune\WMZuneComm.exe -- (WMZuneComm)
SRV:64bit: - [2010/11/11 17:59:36 | 008,251,120 | -H-- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Zune\ZuneNss.exe -- (ZuneNetworkSvc)
SRV:64bit: - [2010/09/22 22:10:10 | 000,057,184 | -H-- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Live\Mesh\wlcrasvc.exe -- (wlcrasvc)
SRV:64bit: - [2010/06/28 17:57:15 | 000,040,384 | ---- | M] (AVAST Software) [On_Demand | Stopped] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Web Scanner)
SRV:64bit: - [2010/06/28 17:57:15 | 000,040,384 | ---- | M] (AVAST Software) [On_Demand | Stopped] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Mail Scanner)
SRV:64bit: - [2010/06/28 17:57:15 | 000,040,384 | ---- | M] (AVAST Software) [Auto | Stopped] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Antivirus)
SRV:64bit: - [2010/06/22 15:20:42 | 000,379,520 | ---- | M] (ASUSTeK Computer Inc.) [Auto | Stopped] -- C:\Windows\SysNative\FBAgent.exe -- (AFBAgent)
SRV:64bit: - [2010/04/16 20:07:42 | 000,134,928 | -H-- | M] (Intel® Corporation) [Auto | Stopped] -- C:\Program Files\Intel\TurboBoost\TurboBoost.exe -- (TurboBoost)
SRV:64bit: - [2010/03/12 00:13:54 | 000,873,248 | -H-- | M] (Broadcom Corporation.) [Auto | Stopped] -- C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe -- (btwdins)
SRV - [2012/07/19 20:15:35 | 000,113,120 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2012/07/03 13:19:28 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2012/06/22 15:34:12 | 001,118,680 | ---- | M] (PC Tools) [Auto | Running] -- C:\Program Files (x86)\PC Tools\PC Tools Security\pctsSvc.exe -- (sdCoreService)
SRV - [2012/06/22 14:21:50 | 000,402,368 | ---- | M] (PC Tools) [Auto | Running] -- C:\Program Files (x86)\PC Tools\PC Tools Security\pctsAuxs.exe -- (sdAuxService)
SRV - [2012/06/22 11:38:46 | 000,575,448 | ---- | M] (Threat Expert Ltd.) [Auto | Stopped] -- C:\Program Files (x86)\PC Tools\PC Tools Security\BDT\BDTUpdateService.exe -- (Browser Defender Update Service)
SRV - [2012/05/31 14:33:56 | 000,385,416 | ---- | M] (BlueStack Systems, Inc.) [Auto | Stopped] -- C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe -- (BstHdLogRotatorSvc)
SRV - [2012/05/31 14:33:10 | 000,397,704 | ---- | M] (BlueStack Systems, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\BlueStacks\HD-Service.exe -- (BstHdAndroidSvc)
SRV - [2012/05/15 02:21:40 | 000,382,272 | ---- | M] (NVIDIA Corporation) [Auto | Stopped] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
SRV - [2011/02/22 22:35:06 | 000,407,336 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2010/12/24 21:36:54 | 000,079,360 | ---- | M] (Creative Labs) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe -- (Creative Audio Engine Licensing Service)
SRV - [2010/12/24 21:36:52 | 000,079,360 | ---- | M] (Creative Labs) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe -- (Creative ALchemy AL6 Licensing Service)
SRV - [2010/08/20 22:47:58 | 000,077,312 | ---- | M] () [Auto | Stopped] -- C:\ExpressGateUtil\VAWinService.exe -- (VideAceWindowsService)
SRV - [2010/04/29 14:30:44 | 000,091,456 | ---- | M] () [Auto | Stopped] -- C:\Program Files (x86)\Motorola\MotoConnectService\MotoConnectService.exe -- (MotoConnect Service)
SRV - [2010/03/18 17:16:28 | 000,130,384 | -H-- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2010/02/19 14:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard)
SRV - [2009/12/15 14:39:38 | 000,096,896 | ---- | M] (ASUS) [Auto | Stopped] -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe -- (ATKGFNEXSrv)
SRV - [2009/09/30 23:34:22 | 002,314,240 | ---- | M] (Intel Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe -- (UNS)
SRV - [2009/09/30 23:33:08 | 000,262,144 | ---- | M] (Intel Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe -- (LMS)
SRV - [2009/06/15 21:30:42 | 000,084,536 | ---- | M] (ASUS) [Auto | Stopped] -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe -- (ASLDRService)
SRV - [2009/06/10 17:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)


========== Driver Services (SafeList) ==========

DRV:64bit: - [2012/08/02 14:58:34 | 000,030,496 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hitmanpro36.sys -- (hitmanpro36)
DRV:64bit: - [2012/06/22 15:35:00 | 000,251,560 | ---- | M] (PC Tools) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\PCTSD64.sys -- (PCTSD)
DRV:64bit: - [2012/06/22 11:39:20 | 000,085,224 | ---- | M] (PC Tools) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\PCTBD64.sys -- (PCTBD)
DRV:64bit: - [2012/04/23 12:36:50 | 000,426,616 | ---- | M] (PC Tools) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\PCTCore64.sys -- (PCTCore)
DRV:64bit: - [2012/04/18 13:08:03 | 000,188,736 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA)
DRV:64bit: - [2012/03/01 02:54:38 | 000,022,896 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2012/02/28 11:43:12 | 000,453,896 | ---- | M] (PC Tools) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\pctDS64.sys -- (pctDS)
DRV:64bit: - [2011/08/02 18:38:56 | 000,051,712 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64)
DRV:64bit: - [2011/03/11 02:22:41 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011/03/11 02:22:40 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2011/03/02 02:55:42 | 000,254,528 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV:64bit: - [2010/09/24 23:24:26 | 000,229,376 | ---- | M] (Fresco Logic) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\FLxHCIc.sys -- (FLxHCIc)
DRV:64bit: - [2010/09/24 23:24:26 | 000,069,120 | ---- | M] (Fresco Logic) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\FLxHCIh.sys -- (FLxHCIh)
DRV:64bit: - [2010/09/23 04:36:48 | 000,048,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\fssfltr.sys -- (fssfltr)
DRV:64bit: - [2010/07/25 23:27:33 | 000,318,056 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RtsPStor.sys -- (RSPCIESTOR)
DRV:64bit: - [2010/06/28 17:39:49 | 000,432,720 | ---- | M] (ALWIL Software) [File_System | System | Stopped] -- C:\Windows\SysNative\drivers\aswSnx.sys -- (aswSnx)
DRV:64bit: - [2010/06/28 17:37:56 | 000,051,280 | ---- | M] (ALWIL Software) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\aswTdi.sys -- (aswTdi)
DRV:64bit: - [2010/06/28 17:37:36 | 000,121,936 | ---- | M] (ALWIL Software) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\aswSP.sys -- (aswSP)
DRV:64bit: - [2010/06/28 17:33:17 | 000,028,752 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswRdr.sys -- (aswRdr)
DRV:64bit: - [2010/06/28 17:33:00 | 000,061,008 | ---- | M] (ALWIL Software) [File_System | Auto | Stopped] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV:64bit: - [2010/06/28 17:32:36 | 000,020,048 | ---- | M] (ALWIL Software) [File_System | Auto | Stopped] -- C:\Windows\SysNative\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV:64bit: - [2010/04/21 03:47:49 | 000,076,912 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\L1C62x64.sys -- (L1C)
DRV:64bit: - [2010/04/16 20:07:28 | 000,013,832 | ---- | M] () [Kernel | Auto | Stopped] -- C:\Windows\SysNative\drivers\TurboB.sys -- (TurboB)
DRV:64bit: - [2010/03/19 07:00:00 | 000,055,856 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\PxHlpa64.sys -- (PxHlpa64)
DRV:64bit: - [2010/03/04 23:19:45 | 000,316,464 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP)
DRV:64bit: - [2010/03/03 07:51:39 | 000,540,696 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)
DRV:64bit: - [2010/03/02 04:45:23 | 001,594,368 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr)
DRV:64bit: - [2010/01/15 01:23:19 | 000,098,344 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwaudio.sys -- (btwaudio)
DRV:64bit: - [2010/01/15 01:23:13 | 000,132,648 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwavdt.sys -- (btwavdt)
DRV:64bit: - [2010/01/15 01:23:09 | 000,021,288 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwrchid.sys -- (btwrchid)
DRV:64bit: - [2010/01/11 20:36:32 | 000,011,520 | ---- | M] (Primax Ltd) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Asusgms.sys -- (AsusgmsFltr)
DRV:64bit: - [2009/12/14 04:03:49 | 000,053,800 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btusbflt.sys -- (btusbflt)
DRV:64bit: - [2009/11/17 19:11:59 | 000,032,344 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\MBfilt64.sys -- (MBfilt)
DRV:64bit: - [2009/09/17 16:54:54 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (HECIx64)
DRV:64bit: - [2009/08/19 22:41:37 | 001,800,192 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\snp2uvc.sys -- (SNP2UVC)
DRV:64bit: - [2009/08/14 02:10:18 | 000,073,984 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\xusb21.sys -- (xusb21)
DRV:64bit: - [2009/07/26 22:54:30 | 000,090,544 | ---- | M] (PowerISO Computing, Inc.) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\scdemu.sys -- (SCDEmu)
DRV:64bit: - [2009/07/20 05:29:39 | 000,015,416 | ---- | M] ( ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\kbfiltr.sys -- (kbfiltr)
DRV:64bit: - [2009/07/13 21:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009/07/13 21:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009/07/13 21:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2009/07/13 21:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009/06/10 16:35:57 | 000,056,832 | ---- | M] (Silicon Integrated Systems Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SiSG664.sys -- (SiSGbeLH)
DRV:64bit: - [2009/06/10 16:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009/06/10 16:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009/06/10 16:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009/06/10 16:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2009/05/18 14:17:08 | 000,034,152 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)
DRV:64bit: - [2009/05/13 13:07:20 | 000,015,928 | ---- | M] (ASUS) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ATK64AMD.sys -- (MTsensor)
DRV:64bit: - [2009/04/07 02:33:07 | 000,035,104 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwl2cap.sys -- (btwl2cap)
DRV:64bit: - [2008/05/23 21:27:28 | 000,154,168 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WimFltr.sys -- (WimFltr)
DRV:64bit: - [2007/05/14 16:06:18 | 000,027,520 | ---- | M] (Research In Motion Limited) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RimUsb_AMD64.sys -- (RimUsb)
DRV - [2012/05/31 14:33:50 | 000,075,144 | ---- | M] (BlueStack Systems) [Kernel | Auto | Stopped] -- C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys -- (BstHdDrv)
DRV - [2010/02/24 15:14:22 | 000,146,928 | ---- | M] (CyberLink Corp.) [2011/02/22 15:53:14] [Kernel | Auto | Stopped] -- C:\Program Files (x86)\CyberLink\PowerDVD9\000.fcl -- ({B154377D-700F-42cc-9474-23858FBDF4BD})
DRV - [2009/07/13 21:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
DRV - [2009/07/02 21:36:14 | 000,015,416 | ---- | M] (ASUS) [Kernel | Auto | Stopped] -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys -- (ASMMAP64)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://asus.msn.com
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...rc=IE-SearchBox
IE:64bit: - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.co...g}&sourceid=ie7
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://asus.msn.com
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...rc=IE-SearchBox
IE - HKLM\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: "URL" = http://www.google.co...ng}&rlz=1I7ASUT
IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.co...g}&sourceid=ie7


IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



IE - HKU\S-1-5-21-627423442-2963774430-1367278436-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus.msn.com
IE - HKU\S-1-5-21-627423442-2963774430-1367278436-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.ask.com/?l=dis&o=14196
IE - HKU\S-1-5-21-627423442-2963774430-1367278436-1001\..\URLSearchHook: {472734EA-242A-422b-ADF8-83D1E48CC825} - C:\Program Files (x86)\PC Tools\PC Tools Security\BDT\PCTBrowserDefender.dll (Threat Expert Ltd.)
IE - HKU\S-1-5-21-627423442-2963774430-1367278436-1001\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-627423442-2963774430-1367278436-1001\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: "URL" = http://www.google.co...ng}&rlz=1I7ASUT
IE - HKU\S-1-5-21-627423442-2963774430-1367278436-1001\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.co...g}&sourceid=ie7
IE - HKU\S-1-5-21-627423442-2963774430-1367278436-1001\..\SearchScopes\{7951D190-6B55-4130-8925-60E4F43E600D}: "URL" = http://websearch.ask...60-26F890FFE9A6
IE - HKU\S-1-5-21-627423442-2963774430-1367278436-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-627423442-2963774430-1367278436-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - prefs.js..browser.search.defaultengine: "Ask.com"
FF - prefs.js..browser.search.defaultenginename: "Ask.com"
FF - prefs.js..browser.search.order.1: "Ask.com"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "about:home"
FF - prefs.js..extensions.enabledItems: {22C7F6C6-8D67-4534-92B5-529A0EC09405}:6.5.0.1234
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
FF - prefs.js..extensions.enabledItems: {AB2CE124-6272-4b12-94A9-7303C7397BD1}:5.2.0.7165
FF - prefs.js..keyword.URL: "http://www.google.co...ient&gfns=1&q="
FF - prefs.js..network.proxy.type: 0


FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_3_300_265.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_265.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.3.1: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.3.1: C:\Program Files (x86)\Oracle\JavaFX 2.0 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@Skype Limited.com/Facebook Video Calling Plugin: C:\Users\Jimmy\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{cb84136f-9c44-433a-9048-c5cd9df1dc16}: C:\Program Files (x86)\PC Tools\PC Tools Security\BDT\Firefox\ [2012/08/02 14:11:56 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012/07/19 20:15:35 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012/03/20 12:33:31 | 000,000,000 | ---D | M]

[2011/02/22 19:13:43 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Jimmy\AppData\Roaming\Mozilla\Extensions
[2012/07/10 03:46:17 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Jimmy\AppData\Roaming\Mozilla\Firefox\Profiles\tkmjh3d4.default\extensions
[2011/12/17 00:00:28 | 000,000,000 | ---D | M] (XUL Cache) -- C:\Users\Jimmy\AppData\Roaming\Mozilla\Firefox\Profiles\tkmjh3d4.default\extensions\{e022b213-1262-4d05-8383-0b30fd2fcae0}
[2011/11/07 13:46:38 | 000,002,568 | ---- | M] () -- C:\Users\Jimmy\AppData\Roaming\Mozilla\Firefox\Profiles\tkmjh3d4.default\searchplugins\askcom.xml
[2012/06/07 20:48:52 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions
[2012/06/07 20:48:52 | 000,000,000 | ---D | M] (Click to call with Skype) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2011/06/11 01:19:18 | 000,550,833 | ---- | M] () (No name found) -- C:\USERS\JIMMY\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\TKMJH3D4.DEFAULT\EXTENSIONS\[email protected]
[2012/07/19 20:15:35 | 000,136,672 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2011/10/09 10:33:50 | 000,002,252 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
[2011/11/08 23:49:10 | 000,002,040 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\twitter.xml

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms}
CHR - homepage: http://www.google.co...=ASUT&bmod=ASUT

O1 HOSTS File: ([2010/05/13 18:53:40 | 000,001,204 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: 127.0.0.1 activate.adobe.com
O1 - Hosts: 127.0.0.1 3dns-3.adobe.com
O1 - Hosts: 127.0.0.1 adobe-dns-2.adobe.com
O1 - Hosts: 127.0.0.1 adobe-dns-3.adobe.com
O1 - Hosts: 127.0.0.1 ereg.wip3.adobe.com
O1 - Hosts: 127.0.0.1 activate-sea.adobe.com
O1 - Hosts: 127.0.0.1 wip3.adobe.com
O1 - Hosts: 127.0.0.1 wwis-dubc1-vip60.adobe.com
O1 - Hosts: 127.0.0.1 activate-sjc0.adobe.com
O1 - Hosts: 127.0.0.1 practivate.adobe.com
O1 - Hosts: 127.0.0.1 ereg.adobe.com
O1 - Hosts: 127.0.0.1 activate.wip3.adobe.com
O1 - Hosts: 127.0.0.1 3dns-2.adobe.com
O1 - Hosts: 127.0.0.1 adobe-dns.adobe.com
O1 - Hosts: ::1 localhost
O2:64bit: - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O2:64bit: - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg64.dll (Google Inc.)
O2 - BHO: (PC Tools Browser Guard BHO) - {2A0F3D1B-0909-4FF4-B272-609CCE6054E7} - C:\Program Files (x86)\PC Tools\PC Tools Security\BDT\PCTBrowserDefender.dll (Threat Expert Ltd.)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll (Google Inc.)
O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Oracle\JavaFX 2.0 Runtime\bin\jp2ssv.dll (Oracle Corporation)
O3:64bit: - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (PC Tools Browser Guard) - {472734EA-242A-422B-ADF8-83D1E48CC825} - C:\Program Files (x86)\PC Tools\PC Tools Security\BDT\PCTBrowserDefender.dll (Threat Expert Ltd.)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKU\S-1-5-21-627423442-2963774430-1367278436-1001\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O4:64bit: - HKLM..\Run: [ASUS WebStorage] C:\Program Files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe ()
O4:64bit: - HKLM..\Run: [IntelTBRunOnce] wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs" File not found
O4:64bit: - HKLM..\Run: [Setwallpaper] c:\programdata\SetWallpaper.cmd File not found
O4:64bit: - HKLM..\Run: [THXCfg64] C:\Windows\SysNative\THXCfg64.DLL (Creative Technology Ltd.)
O4 - HKLM..\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe (ASUS)
O4 - HKLM..\Run: [avast5] C:\Program Files\Alwil Software\Avast5\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [BDRegion] C:\Program Files (x86)\CyberLink\Shared files\brs.exe (cyberlink)
O4 - HKLM..\Run: [Boingo Wi-Fi] C:\Program Files (x86)\Boingo\Boingo Wi-Fi\Boingo.lnk ()
O4 - HKLM..\Run: [CPMonitor] C:\Program Files (x86)\Roxio\CinePlayer\5.0\CPMonitor.exe ()
O4 - HKLM..\Run: [Gaming Mouse Hid] C:\Program Files (x86)\Gaming Mouse\hid.exe ()
O4 - HKLM..\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe (ASUS)
O4 - HKLM..\Run: [ISTray] C:\Program Files (x86)\PC Tools\PC Tools Security\pctsGui.exe (PC Tools)
O4 - HKLM..\Run: [SessionLogon] C:\ExpressGateUtil\SessionLogon.exe File not found
O4 - HKLM..\Run: [THX TruStudio NB Settings] C:\Program Files (x86)\Creative\THX TruStudio\THXNBSet\THXAudNB.exe (Creative Technology Ltd)
O4 - HKLM..\Run: [UpdateLBPShortCut] C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKLM..\Run: [UpdateP2GoShortCut] C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKLM..\Run: [UpdReg] C:\Windows\Updreg.EXE (Creative Technology Ltd.)
O4 - HKLM..\Run: [VAWinAgent] C:\ExpressGateUtil\VAWinAgent.exe ()
O4 - HKLM..\Run: [Wireless Console 3] C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe ()
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-627423442-2963774430-1367278436-1001..\Run: [Facebook Update] C:\Users\Jimmy\AppData\Local\Facebook\Update\FacebookUpdate.exe (Facebook Inc.)
O4 - HKU\S-1-5-21-627423442-2963774430-1367278436-1001..\Run: [Steam] D:\Steam\steam.exe (Valve Corporation)
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O7 - HKU\S-1-5-21-627423442-2963774430-1367278436-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-627423442-2963774430-1367278436-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HideSCAHealth = 1
O9 - Extra Button: Click to call with Skype - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Click to call with Skype - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000010 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000001 - C:\Program Files (x86)\Common Files\PC Tools\Lsp\PCTLsp64.dll (PC Tools Research Pty Ltd.)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000002 - C:\Program Files (x86)\Common Files\PC Tools\Lsp\PCTLsp64.dll (PC Tools Research Pty Ltd.)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000003 - C:\Program Files (x86)\Common Files\PC Tools\Lsp\PCTLsp64.dll (PC Tools Research Pty Ltd.)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000004 - C:\Program Files (x86)\Common Files\PC Tools\Lsp\PCTLsp64.dll (PC Tools Research Pty Ltd.)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000005 - C:\Program Files (x86)\Common Files\PC Tools\Lsp\PCTLsp64.dll (PC Tools Research Pty Ltd.)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000006 - C:\Program Files (x86)\Common Files\PC Tools\Lsp\PCTLsp64.dll (PC Tools Research Pty Ltd.)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000018 - C:\Program Files (x86)\Common Files\PC Tools\Lsp\PCTLsp64.dll (PC Tools Research Pty Ltd.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000010 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Program Files (x86)\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Program Files (x86)\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Program Files (x86)\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Program Files (x86)\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Program Files (x86)\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Program Files (x86)\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000018 - C:\Program Files (x86)\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O15 - HKU\.DEFAULT\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites)
O15 - HKU\.DEFAULT\..Trusted Domains: freerealms.com ([]* in Trusted sites)
O15 - HKU\.DEFAULT\..Trusted Domains: soe.com ([]* in Trusted sites)
O15 - HKU\.DEFAULT\..Trusted Domains: sony.com ([]* in Trusted sites)
O15 - HKU\S-1-5-18\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites)
O15 - HKU\S-1-5-18\..Trusted Domains: freerealms.com ([]* in Trusted sites)
O15 - HKU\S-1-5-18\..Trusted Domains: soe.com ([]* in Trusted sites)
O15 - HKU\S-1-5-18\..Trusted Domains: sony.com ([]* in Trusted sites)
O15 - HKU\S-1-5-19\..Trusted Domains: clonewarsadventures.com ([]* in )
O15 - HKU\S-1-5-19\..Trusted Domains: freerealms.com ([]* in )
O15 - HKU\S-1-5-19\..Trusted Domains: soe.com ([]* in )
O15 - HKU\S-1-5-19\..Trusted Domains: sony.com ([]* in )
O15 - HKU\S-1-5-20\..Trusted Domains: clonewarsadventures.com ([]* in )
O15 - HKU\S-1-5-20\..Trusted Domains: freerealms.com ([]* in )
O15 - HKU\S-1-5-20\..Trusted Domains: soe.com ([]* in )
O15 - HKU\S-1-5-20\..Trusted Domains: sony.com ([]* in )
O15 - HKU\S-1-5-21-627423442-2963774430-1367278436-1001\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites)
O15 - HKU\S-1-5-21-627423442-2963774430-1367278436-1001\..Trusted Domains: freerealms.com ([]* in Trusted sites)
O15 - HKU\S-1-5-21-627423442-2963774430-1367278436-1001\..Trusted Domains: soe.com ([]* in Trusted sites)
O15 - HKU\S-1-5-21-627423442-2963774430-1367278436-1001\..Trusted Domains: sony.com ([]* in Trusted sites)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/...indows-i586.cab (Java Plug-in 10.3.1)
O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-0017-0000-0003-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.7.0_03)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.7.0_03)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{76D2193D-3082-4704-8375-A1F33383B4C4}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{D3917F6E-A890-4B99-9212-10982D591C2A}: DhcpNameServer = 192.168.1.1
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18:64bit: - Protocol\Handler\skype-ie-addon-data - No CLSID value found
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18:64bit: - Protocol\Handler\wlpg - No CLSID value found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{7b40a99e-4cf0-11e0-8903-74f06dc1f852}\Shell - "" = AutoRun
O33 - MountPoints2\{7b40a99e-4cf0-11e0-8903-74f06dc1f852}\Shell\AutoRun\command - "" = H:\TL-Bootstrap.exe
O33 - MountPoints2\{92759ffc-4374-11e0-a040-74f06dc1f852}\Shell - "" = AutoRun
O33 - MountPoints2\{92759ffc-4374-11e0-a040-74f06dc1f852}\Shell\AutoRun\command - "" = I:\setup.exe
O33 - MountPoints2\{9844d380-4055-11e0-adc6-74f06dc1f852}\Shell - "" = AutoRun
O33 - MountPoints2\{9844d380-4055-11e0-adc6-74f06dc1f852}\Shell\AutoRun\command - "" = H:\LaunchU3.exe -a
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)


CREATERESTOREPOINT
Unable to start System Restore Service. Error code 1084

========== Files/Folders - Created Within 30 Days ==========

[2012/08/02 15:08:48 | 000,000,000 | ---D | C] -- C:\Users\Jimmy\Desktop\RK_Quarantine
[2012/08/02 14:19:10 | 000,000,000 | ---D | C] -- C:\ProgramData\HitmanPro
[2012/08/02 14:16:48 | 000,000,000 | ---D | C] -- C:\Users\Jimmy\Desktop\rkill-backup
[2012/08/02 14:11:55 | 002,267,096 | ---- | C] (Threat Expert Ltd.) -- C:\Windows\PCTBDCore.dll
[2012/08/02 14:11:55 | 001,689,560 | ---- | C] (Threat Expert Ltd.) -- C:\Windows\PCTBDRes.dll
[2012/08/02 14:11:55 | 000,149,464 | ---- | C] (PC Tools) -- C:\Windows\SGDetectionTool.dll
[2012/08/02 14:11:55 | 000,085,224 | ---- | C] (PC Tools) -- C:\Windows\SysNative\drivers\PCTBD64.sys
[2012/08/02 14:11:15 | 000,341,200 | ---- | C] (PC Tools) -- C:\Windows\SysNative\drivers\pctgntdi64.sys
[2012/08/02 14:11:15 | 000,145,464 | ---- | C] (PC Tools) -- C:\Windows\SysNative\drivers\pctwfpfilter64.sys
[2012/08/02 14:11:13 | 000,014,808 | ---- | C] (PC Tools) -- C:\Windows\SysNative\drivers\pctBTFix64.sys
[2012/08/02 14:11:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Tools Security
[2012/08/02 14:11:11 | 000,092,928 | ---- | C] (PC Tools) -- C:\Windows\SysNative\drivers\pctplsg64.sys
[2012/08/02 14:11:04 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\PC Tools
[2012/08/02 14:09:48 | 001,096,176 | ---- | C] (PC Tools) -- C:\Windows\SysNative\drivers\pctEFA64.sys
[2012/08/02 14:09:48 | 000,453,896 | ---- | C] (PC Tools) -- C:\Windows\SysNative\drivers\pctDS64.sys
[2012/08/02 14:09:47 | 000,426,616 | ---- | C] (PC Tools) -- C:\Windows\SysNative\drivers\PCTCore64.sys
[2012/08/02 14:09:46 | 000,251,560 | ---- | C] (PC Tools) -- C:\Windows\SysNative\drivers\PCTSD64.sys
[2012/08/02 14:09:46 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\PC Tools
[2012/08/02 14:09:25 | 000,000,000 | ---D | C] -- C:\Users\Jimmy\AppData\Roaming\TestApp
[2012/08/02 14:09:25 | 000,000,000 | ---D | C] -- C:\ProgramData\PC Tools
[2012/08/02 02:35:23 | 000,000,000 | ---D | C] -- C:\Users\Jimmy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\File Recovery
[2012/07/27 21:00:35 | 000,000,000 | ---D | C] -- C:\ProgramData\225932DF004E8D06C40B590B4F147CE7
[2012/07/27 10:51:21 | 000,000,000 | -HSD | C] -- C:\Windows\SysNative\%APPDATA%
[2012/07/24 11:20:43 | 000,000,000 | ---D | C] -- C:\Users\Jimmy\AppData\Local\Macromedia
[2012/07/24 11:20:28 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\Macromed
[2012/07/17 00:54:24 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
[2012/07/17 00:54:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Skype
[2012/07/10 14:51:49 | 000,000,000 | ---D | C] -- C:\Users\Jimmy\riotsGamesLogs
[2012/07/05 17:06:07 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BlueStacks
[2012/07/05 17:06:07 | 000,000,000 | ---D | C] -- C:\ProgramData\BlueStacks
[2012/07/05 17:06:07 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\BlueStacks
[2012/07/05 17:03:26 | 003,785,096 | ---- | C] (BlueStack Systems, Inc.) -- C:\Users\Jimmy\Desktop\BlueStacks-ThinInstaller_0.7.0.722.exe
[2012/07/05 17:03:26 | 000,000,000 | ---D | C] -- C:\Users\Jimmy\AppData\Local\BlueStacksSetup
[2012/07/05 17:03:26 | 000,000,000 | ---D | C] -- C:\Users\Jimmy\AppData\Local\BlueStacks
[2011/08/27 18:16:24 | 814,326,520 | ---- | C] (Acresso Software Inc. ) -- C:\Program Files (x86)\MTGOinstall.exe
[1 C:\Users\Jimmy\Desktop\*.tmp files -> C:\Users\Jimmy\Desktop\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2012/08/02 15:27:56 | 000,000,512 | ---- | M] () -- C:\Users\Jimmy\Desktop\MBR.dat
[2012/08/02 15:06:16 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012/08/02 15:06:11 | 2087,989,247 | -HS- | M] () -- C:\hiberfil.sys
[2012/08/02 14:59:36 | 000,002,392 | ---- | M] () -- C:\Windows\SysNative\AutoRunFilter.ini
[2012/08/02 14:59:32 | 000,001,567 | ---- | M] () -- C:\Windows\SysNative\ServiceFilter.ini
[2012/08/02 14:59:03 | 000,000,908 | -H-- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012/08/02 14:58:34 | 000,030,496 | ---- | M] () -- C:\Windows\SysNative\drivers\hitmanpro36.sys
[2012/08/02 14:56:00 | 000,004,230 | ---- | M] () -- C:\Windows\SysNative\.crusader
[2012/08/02 14:11:13 | 000,002,273 | ---- | M] () -- C:\Users\Public\Desktop\PC Tools Spyware Doctor with AntiVirus.lnk
[2012/08/02 13:43:37 | 000,000,072 | ---- | M] () -- C:\ProgramData\-P0LhWq4JaMxCpmr
[2012/08/02 13:43:37 | 000,000,072 | ---- | M] () -- C:\ProgramData\-P0LhWq4JaMxCpm
[2012/08/02 13:42:54 | 000,000,368 | ---- | M] () -- C:\ProgramData\P0LhWq4JaMxCpm
[2012/08/02 12:23:32 | 000,045,056 | ---- | M] () -- C:\Windows\SysNative\acovcnt.exe
[2012/08/02 12:18:35 | 000,739,744 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2012/08/02 12:18:35 | 000,632,930 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2012/08/02 12:18:35 | 000,110,564 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2012/08/02 12:12:06 | 000,000,912 | -H-- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012/08/02 02:51:50 | 000,009,920 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012/08/02 02:51:50 | 000,009,920 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012/08/02 02:35:23 | 000,000,681 | ---- | M] () -- C:\Users\Jimmy\Application Data\Microsoft\Internet Explorer\Quick Launch\File_Recovery.lnk
[2012/08/02 02:35:23 | 000,000,657 | ---- | M] () -- C:\Users\Jimmy\Desktop\File_Recovery.lnk
[2012/08/02 00:41:00 | 000,000,928 | -H-- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-627423442-2963774430-1367278436-1001UA.job
[2012/07/31 18:41:00 | 000,000,906 | -H-- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-627423442-2963774430-1367278436-1001Core.job
[2012/07/27 10:54:01 | 000,001,439 | ---- | M] () -- C:\Users\Jimmy\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2012/07/21 17:32:40 | 000,000,969 | ---- | M] () -- C:\Users\Jimmy\Application Data\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk
[2012/07/19 20:15:37 | 000,002,046 | ---- | M] () -- C:\Users\Jimmy\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2012/07/12 03:20:24 | 004,826,224 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2012/07/05 17:06:23 | 000,001,557 | ---- | M] () -- C:\Users\Jimmy\Desktop\Apps.lnk
[2012/07/05 17:06:21 | 000,001,881 | ---- | M] () -- C:\Users\Jimmy\Desktop\Start BlueStacks.lnk
[2012/07/05 17:03:12 | 003,785,096 | ---- | M] (BlueStack Systems, Inc.) -- C:\Users\Jimmy\Desktop\BlueStacks-ThinInstaller_0.7.0.722.exe
[1 C:\Users\Jimmy\Desktop\*.tmp files -> C:\Users\Jimmy\Desktop\*.tmp -> ]

========== Files Created - No Company Name ==========

[2012/08/02 15:27:56 | 000,000,512 | ---- | C] () -- C:\Users\Jimmy\Desktop\MBR.dat
[2012/08/02 14:58:34 | 000,030,496 | ---- | C] () -- C:\Windows\SysNative\drivers\hitmanpro36.sys
[2012/08/02 14:56:00 | 000,004,230 | ---- | C] () -- C:\Windows\SysNative\.crusader
[2012/08/02 14:11:55 | 000,767,960 | ---- | C] () -- C:\Windows\BDTSupport.dll
[2012/08/02 14:11:55 | 000,003,488 | ---- | C] () -- C:\Windows\UDB.zip
[2012/08/02 14:11:55 | 000,000,882 | ---- | C] () -- C:\Windows\RegSDImport.xml
[2012/08/02 14:11:55 | 000,000,879 | ---- | C] () -- C:\Windows\RegISSImport.xml
[2012/08/02 14:11:55 | 000,000,131 | ---- | C] () -- C:\Windows\IDB.zip
[2012/08/02 14:11:13 | 000,002,273 | ---- | C] () -- C:\Users\Public\Desktop\PC Tools Spyware Doctor with AntiVirus.lnk
[2012/08/02 02:35:23 | 000,000,681 | ---- | C] () -- C:\Users\Jimmy\Application Data\Microsoft\Internet Explorer\Quick Launch\File_Recovery.lnk
[2012/08/02 02:35:23 | 000,000,657 | ---- | C] () -- C:\Users\Jimmy\Desktop\File_Recovery.lnk
[2012/08/02 02:35:23 | 000,000,072 | ---- | C] () -- C:\ProgramData\-P0LhWq4JaMxCpmr
[2012/08/02 02:35:23 | 000,000,072 | ---- | C] () -- C:\ProgramData\-P0LhWq4JaMxCpm
[2012/08/02 02:35:20 | 000,000,368 | ---- | C] () -- C:\ProgramData\P0LhWq4JaMxCpm
[2012/07/21 17:32:40 | 000,000,969 | ---- | C] () -- C:\Users\Jimmy\Application Data\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk
[2012/07/05 17:06:23 | 000,001,557 | ---- | C] () -- C:\Users\Jimmy\Desktop\Apps.lnk
[2012/07/05 17:06:21 | 000,001,881 | ---- | C] () -- C:\Users\Jimmy\Desktop\Start BlueStacks.lnk
[2012/05/15 02:21:50 | 000,423,744 | -H-- | C] () -- C:\Windows\SysWow64\nvStreaming.exe
[2011/11/20 14:07:58 | 000,111,704 | -H-- | C] () -- C:\Windows\SysWow64\mlfcache.dat
[2011/11/20 01:31:18 | 1272,409,933 | -H-- | C] () -- C:\Program Files\Adobe. Photoshop CS5.1 Extended Edition.exe
[2011/09/28 17:44:14 | 000,179,271 | -H-- | C] () -- C:\Windows\SysWow64\xlive.dll.cat
[2011/08/03 21:35:13 | 000,000,410 | -H-- | C] () -- C:\Windows\BRWMARK.INI
[2011/08/03 21:35:13 | 000,000,034 | -H-- | C] () -- C:\Windows\SysWow64\BD2140.DAT
[2011/07/03 15:22:22 | 000,000,129 | ---- | C] () -- C:\Users\Jimmy\jagex_runescape_preferences2.dat
[2011/07/03 15:19:47 | 000,000,034 | ---- | C] () -- C:\Users\Jimmy\jagex_runescape_preferences.dat
[2011/03/17 14:28:15 | 000,012,800 | -H-- | C] () -- C:\Windows\DCEBoot64.exe
[2011/03/16 17:44:58 | 000,000,023 | -H-- | C] () -- C:\Windows\BlendSettings.ini
[2011/03/09 03:37:50 | 000,000,056 | -H-- | C] () -- C:\Windows\SysWow64\ezsidmv.dat
[2011/02/28 04:06:33 | 000,004,608 | -H-- | C] () -- C:\Users\Jimmy\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/02/27 22:35:39 | 000,743,798 | -H-- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2011/02/22 21:14:52 | 000,000,262 | -H-- | C] () -- C:\Windows\{EEB3F6BB-318D-4CE5-989F-8191FCBFB578}_WiseFW.ini
[2011/02/22 18:47:40 | 000,000,024 | -H-- | C] () -- C:\Windows\ATKPF.ini
[2010/12/24 21:36:56 | 000,001,200 | -H-- | C] () -- C:\Windows\THXCfg_SP_APOIM.ini
[2010/12/24 21:36:56 | 000,001,099 | -H-- | C] () -- C:\Windows\THXCfg_HP_APOIM.ini
[2010/12/24 21:36:56 | 000,001,099 | -H-- | C] () -- C:\Windows\THXCfg_APOIM.ini
[2010/12/24 21:36:55 | 000,181,760 | -H-- | C] () -- C:\Windows\SysWow64\APOMngr.DLL
[2010/12/24 21:36:55 | 000,073,728 | -H-- | C] () -- C:\Windows\SysWow64\CmdRtr.DLL
[2010/12/24 21:15:34 | 000,131,472 | ---- | C] () -- C:\ProgramData\FullRemove.exe

========== LOP Check ==========

[2012/04/18 22:04:18 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\.minecraft
[2011/11/07 23:31:27 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\a7fEL8ghYUlBx01
[2011/11/07 23:07:52 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\AA11uuvD2obF4m5
[2011/11/07 22:37:22 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\aAAA0uucS2ib3pG
[2011/11/07 22:47:11 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\aaammH6ssJ
[2011/11/07 23:32:41 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\aBtxP0ycSiDoFmW
[2011/11/07 23:32:42 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\ac1Dnp5sJ8hjeIz
[2011/11/07 23:37:37 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\AcbGH7wrO
[2011/11/07 23:39:20 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\acSSiDoonF
[2011/11/07 22:42:52 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\aD33ppnG4aQH6W7
[2011/11/07 23:10:41 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\ADDD33onG4am6sJ
[2011/11/07 23:05:39 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\aHH66sWKK7EL9Tq
[2011/11/07 23:32:18 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\ajCeBrNxAu
[2011/11/07 23:39:03 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\ajCkBzNx0SiFpGa
[2011/11/07 22:44:50 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\AJJ77fEEL8gZqYC
[2011/11/07 23:41:23 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\allIIBrrPNyAS3m
[2011/11/07 23:41:23 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\allIIBzPyxuSo3m
[2011/02/22 18:49:39 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\Amazon
[2011/11/07 23:01:23 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\AOOBttPP0yc1iD2
[2011/11/07 23:40:55 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\Apa6Wf9TjeVz
[2011/11/07 22:55:10 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\APNNyyxA1
[2011/11/07 22:42:31 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\AQQJJ6dEK8fR
[2011/11/07 22:48:15 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\AsssWWJ7d
[2011/02/22 18:55:30 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\Asus WebStorage
[2011/11/07 23:12:11 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\aUUCCeelIBrPNxA
[2011/11/07 23:37:43 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\AVlBtP0Ai
[2011/11/07 23:12:17 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\AyyyxAA0uvS2
[2011/11/07 23:40:42 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\AZhCUrOtPySi
[2011/11/07 23:40:04 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\b4m5JdLRqYkVtyv
[2011/11/07 22:48:57 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\B777fRRL9gTqjCe
[2011/11/07 23:19:29 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\B888fRRL9hTqjCe
[2011/11/07 23:40:03 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\B8TqCkVOtP1DoFm
[2011/11/07 23:01:04 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\b9hhhYXwjUVelB
[2011/11/07 23:00:05 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\BAA11ivvD2oF4mH
[2011/11/07 23:39:30 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\bd8R9YwUeBzN1Do
[2011/11/07 22:48:50 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\bdEEKK8fRZ9hXwU
[2011/11/07 23:32:36 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\BDnFad8ZYw
[2011/11/07 23:33:41 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\BFsKYjeBPcu2Fms
[2011/11/07 22:31:54 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\BGGG5ssQJ6dE8fZ
[2011/11/07 22:38:38 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\bIIBBrzPPNxA1v2
[2011/11/07 22:38:17 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\BIIBBtzzPNyA1
[2011/11/07 22:52:38 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\BllOOBttzPycAiD
[2011/11/07 23:32:19 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\BNyxAuv2FmJ8TCz
[2011/11/07 23:40:17 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\bOSnWZVx1GsLYrP
[2011/11/07 22:44:14 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\BRRLL9hhTXjUCkI
[2011/11/07 23:07:28 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\BRRZZ9hhYXwUVlI
[2011/11/07 23:41:23 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\BtttzPNc1uDoF
[2011/11/07 22:50:39 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\bTXXqqjYCek
[2011/11/07 23:39:22 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\bUUCCekIIBzONx0
[2011/11/07 23:32:36 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\BvDon4msdZ
[2011/11/07 23:39:14 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\BvvDD3oonF4mH
[2011/11/07 22:44:07 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\BVVeelOOBtz0yA1
[2011/11/07 22:49:59 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\bvvSS2obbFp
[2011/11/07 23:19:35 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\bYYYCeekIVrONxA
[2011/11/07 23:33:01 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\BZUP3JqOAnQZeyo
[2011/11/07 23:32:51 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\c0Svo4ms7LgqXUl
[2011/11/07 23:04:02 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\C44aaQHH6sW7fL
[2011/11/07 23:32:11 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\c5WqrSDGQ6KEgYN
[2011/11/07 22:28:22 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\C666sWWK7fELgTq
[2011/11/07 23:01:57 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\c77ddELL8
[2011/11/07 22:54:11 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\c99hhYXXwjUelBt
[2011/11/07 22:45:31 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\CbbbF44pmG5sJ6E
[2011/11/07 23:40:32 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\CccSS1v3n4am5W7
[2011/11/07 23:37:34 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\cD4sdRjrx1o3
[2011/11/07 23:32:41 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\CgqhYkrlOtPySi
[2011/11/20 14:07:15 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2011/11/07 22:57:48 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\ciiibDD3onG4mHs
[2011/11/07 22:38:58 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\cjjUUCekkIrzOyx
[2011/11/07 22:31:34 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\CK88ggRZ9hYXwUe
[2011/11/07 22:53:57 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\cmGG55sQJ6dE8fZ
[2011/11/07 22:52:58 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\cmmmHH5sQJ7dK8R
[2011/11/20 02:09:59 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant
[2011/11/07 23:39:59 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\cOt0c1v2n4HsJdK
[2011/11/07 23:05:33 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\CpnnnG5aQH6dW7R
[2011/11/07 22:32:35 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\cPP00uccS1iD
[2011/11/07 23:39:55 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\CppmH55s7E8R9X
[2011/11/07 23:39:54 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\CppmmH5ssQ7dE8
[2011/11/07 22:41:28 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\CPPPNyyxA1u
[2011/11/07 23:14:26 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\CqqhhYXwwkVelBz
[2011/11/07 23:38:53 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\cS22iib3n5QR
[2011/11/07 23:31:46 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\cu2qYeIzNxuS
[2011/11/07 22:49:31 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\CVVrrlONtxP0uSi
[2011/11/07 23:33:58 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\CwkIVlOtx0ciDna
[2011/11/07 23:04:55 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\CXXXqjjYCekIrzN
[2011/11/07 22:58:59 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\cXXXqqjUCekIrzN
[2011/11/07 22:48:29 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\cYYYCwwkUVrOBxP
[2011/11/07 22:52:17 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\cZZqqhYCCwUVrOt
[2011/11/07 23:18:49 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\d222oobF4
[2011/11/07 23:05:58 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\d33ppnG55aH6
[2011/11/07 22:34:58 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\d555sQQJ7dE8gZ9
[2011/11/07 23:09:25 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\D55ssQJJ6dE8fZ9
[2011/11/07 23:15:23 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\d999gTTZq
[2011/11/07 23:39:01 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\D9wetyubmQE
[2011/11/07 22:47:56 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\dAAA1iivD2oF4mH
[2011/03/02 02:57:47 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\DAEMON Tools Lite
[2011/11/07 23:39:29 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\daWETYIO0134678
[2011/11/07 23:37:42 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\dBx0c1voFaHs7E8
[2011/11/07 23:38:34 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\DdKfLgXYeIr
[2011/11/08 00:08:09 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\DdLgZhXkVltPyi2
[2011/11/07 22:40:00 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\DHH55sQJ7dEK8R9
[2011/11/07 23:40:34 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\Dms7E8RZhXjVlPc
[2011/11/07 23:18:54 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\dNNyyxA11uS2oFp
[2011/11/07 23:41:02 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\dOtPyAiDoFpHs7E
[2011/11/07 23:00:39 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\dpppmmH5s
[2011/11/07 22:50:52 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\drrrzzPNyxA1vSo
[2011/11/07 23:38:53 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\DrrzNyxuvS2bFpG
[2011/11/07 22:51:51 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\drrzzONtt
[2011/11/07 23:40:49 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\dRTUryuopQWRTUI
[2011/11/07 22:58:21 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\DTTXXqjjYCe
[2011/11/07 23:11:58 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\dTTXXqjjYCeIVzO
[2011/11/07 23:32:26 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\DW9YVx1n6EqUtSo
[2011/11/07 23:40:38 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\dXwjVelIBzycv2b
[2011/11/07 23:13:14 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\dyyycA1uuv2ob4m
[2011/11/07 23:32:55 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\E01Do4HWf8ZYkrB
[2011/11/07 22:55:54 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\e111uuvS2obFpm5
[2011/11/07 23:40:18 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\e1v2n4m5Q7EgZhX
[2011/11/07 23:41:10 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\e3n4Q6W7E9TqYwI
[2011/11/07 23:06:36 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\e666dWWK8fR
[2011/11/07 23:38:15 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\e66K7fLTqYC
[2011/11/07 23:33:13 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\EaH6dRTjeVOt0Sp
[2011/11/07 23:40:03 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\EBPy13Fm5JLgh
[2011/11/07 22:50:13 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\eCCCellIBrz
[2011/11/07 22:28:01 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\ehhTTXwjjUelIr
[2011/11/07 22:54:51 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\EhTTXXqjUCekIrO
[2011/11/07 22:59:25 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\eJJJ7ffEL8gTqh
[2011/11/07 23:02:36 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\ejjjUUVelIBtPNc
[2011/11/07 22:40:47 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\ekkUUVrrlOBxPyc
[2011/11/07 23:38:53 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\EnnGG5aQHd7LgXY
[2011/11/07 23:01:43 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\ENyyccA1uvD2b
[2011/11/07 23:33:37 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\eo3GQdKR9UkOy0S
[2011/11/07 23:15:58 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\eOOOBttzP0y
[2011/11/07 23:41:23 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\EpmmG5ssQJdE8f9
[2011/11/07 23:31:35 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\eQJdK9qCkrNxuS3
[2011/11/07 22:42:05 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\eSS11ibDD3nG4m6
[2011/11/07 23:33:53 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\esWK7ELgZCIrOPc
[2011/11/07 23:41:23 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\eTTXXwjjUClIBPy
[2011/11/07 23:31:54 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\EuS2Fp5JWR9qCrN
[2011/11/07 23:31:56 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\ewkIVltPcDoaHsL
[2011/11/07 23:14:44 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\eWWWJ77dEL8
[2011/11/07 22:30:52 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\eXXXqqjYCekIrzN
[2011/11/07 22:43:53 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\EYYYXwwjUVelBtP
[2011/11/07 23:09:57 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\F000yccS1
[2011/11/07 23:32:35 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\f9TqYCwkIOx0c
[2011/11/07 23:39:59 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\Fa5W7EL8RqYwUeO
[2011/11/07 23:38:20 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\faQQH6K7fgXjCkV
[2011/11/07 23:33:14 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\fbnGaKLqCkrNPc1
[2011/11/07 23:39:59 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\fc1D2on4ms
[2011/11/07 22:33:51 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\FCCeelIIB
[2011/11/07 23:37:57 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\fD33onaHsWJ7E8R
[2011/11/07 22:27:19 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\FEELL8ggTZqYCkU
[2011/11/07 23:37:57 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\FgRZZqhYwkUVlB0
[2011/11/07 23:38:50 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\FIIVVrlOx
[2011/11/07 22:30:46 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\FJJJ66dEK8fR9hX
[2011/11/07 23:40:09 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\fKgZYwUIzN124
[2011/11/07 23:15:39 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\fKK88gRRZ9hXwUV
[2011/11/07 23:37:30 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\fm5d89jlP1SFp
[2011/11/07 22:28:49 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\fNNNyccA1uv2oF4
[2011/11/07 22:44:56 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\foonnF4pmH
[2011/11/07 23:39:58 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\fOtxyc13oa
[2011/11/07 23:04:36 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\FQQHH6ssWK7ELgT
[2011/11/07 22:29:09 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\fQQJJ6dWWKfRLhX
[2011/07/07 13:18:26 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\FrostWire
[2011/11/07 23:31:56 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\FS2ib3naH7EgZYk
[2011/11/07 23:32:41 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\fs7E8gTZYkVOx0c
[2011/11/07 23:33:07 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\fsQJd8fZhjeIzAv
[2011/11/07 23:33:56 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\fUCIBryxAu2bp
[2011/11/07 23:16:55 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\fuuccS2iiD
[2011/11/07 23:38:54 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\FXXqYekIVzNx
[2011/11/07 22:59:04 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\FYCCeekIVrzONx0
[2011/11/07 23:32:35 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\fYCwkVlNx01Dn
[2011/11/07 23:37:21 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\FzOONNtxA0uc2iD
[2011/11/07 23:33:19 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\G0ucS1i3GmW7LTq
[2011/11/07 22:50:33 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\g222oobF3pmGaQ
[2011/11/07 23:07:08 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\g2ooonF4pmH5sJ
[2011/11/07 22:50:58 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\g33ppnG55aH6dK7
[2011/11/07 23:13:28 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\G77ddEKK8gZ9h
[2012/08/02 04:05:58 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\Gaming Mouse
[2011/11/07 22:42:46 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\GCeeelIBrzPNyAu
[2011/11/07 23:33:27 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\GeIBzOx0Si
[2011/11/07 22:41:02 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\GJ777fEL8gTZq
[2011/11/07 22:41:22 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\gJJ77ddEK8gZ9YX
[2011/11/07 23:38:59 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\gkIVrNxASiDpGaH
[2011/11/07 23:07:33 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\GlllIIBtzPNyA
[2011/11/07 22:47:36 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\gmmmH55sQJ7EK8R
[2011/11/07 22:51:38 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\GQQHH6ssWK7EL
[2011/11/07 22:35:39 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\gRRLL9ggTXqYCkI
[2011/11/07 23:08:25 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\GtttxPP0ycSiv3o
[2011/11/07 23:03:16 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\GTXXwwjUCelIrzN
[2011/11/07 23:41:23 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\gUUCCelIBrzPyx1
[2011/11/07 23:11:14 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\GuuvvS22ib3pn
[2011/11/07 23:39:54 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\GvvvD22onF
[2011/11/07 22:42:10 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\gVVVellOBtzPyc1
[2011/11/07 23:38:20 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\GWWWK77RL9XjYeV
[2011/11/07 22:47:50 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\gxxPP0ycS1ivDoF
[2011/11/07 23:41:18 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\gyAuSoFpGaJ
[2011/11/07 22:42:25 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\GYXXwwjUVe
[2011/11/07 23:31:23 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\GzP0ycA1iDnpH
[2011/11/07 22:43:27 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\H1iivvD3onF4aH
[2011/11/07 23:18:30 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\h4ppmmG5sQJ6dKf
[2011/11/07 22:27:40 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\H777dEEK8gRZhYw
[2011/11/07 22:45:37 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\H7ffRRL9gTX
[2011/11/07 23:41:23 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\HBBrrPPNyA1S3m5
[2011/11/07 23:41:23 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\HBBrrPPNyxA1vSo
[2011/11/07 22:29:03 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\hDDD2oonF4pm5sJ
[2011/11/07 23:33:55 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\HEg9XjeBzNAu2bp
[2011/11/07 23:15:09 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\HgRRRZqhYXw
[2011/11/07 23:40:42 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\HHsfLTqCUlt0ioH
[2011/11/07 23:03:41 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\hibbFF3pnG5aQ6W
[2011/11/07 22:44:35 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\HNNNtxxP0ucSib
[2011/11/07 22:26:44 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\HQHH66dWK7fR9gX
[2011/11/07 23:33:00 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\HqrcGJgqCUl
[2011/11/07 23:31:58 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\HRhwjCIrzNA
[2011/11/07 22:32:50 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\HssWWK7fEL9gTqY
[2011/11/07 23:38:53 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\hTqUeIBrzNxuv2b
[2011/11/07 22:40:20 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\HTTTXqqjUCeIBz
[2011/11/07 22:40:41 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\hTTTXqqjYCeIVrO
[2011/11/07 23:38:04 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\HUeIrN1SFG689q
[2011/11/07 22:31:48 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\hWJJ77dEL
[2011/11/07 22:49:53 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\HwwwjUUVelIBzPy
[2011/11/07 23:37:57 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\hYYYwwkUVelBzPy
[2011/11/07 22:32:29 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\hzzOONyyxAuvSib
[2011/11/07 23:32:45 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\I0Sbo4m6JEgqYwU
[2011/11/07 23:38:25 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\I2b3pnGaa
[2011/11/07 22:59:47 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\i66ddEK88f
[2011/11/07 23:37:49 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\I6EfZ9TwUeIr
[2011/11/07 23:33:57 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\I7E9TZjwk
[2011/11/07 23:38:03 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\i8RqYUeOzci4JgX
[2011/11/07 22:50:19 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\iaaaQJJ6dW
[2011/11/07 22:27:05 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\iammHH6sWJ7fL8T
[2011/11/07 23:41:05 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\ib3GHsKfLgqYw
[2011/11/07 22:55:48 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\iBttzzPNycA1vDo
[2011/11/07 22:46:12 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\IfffEEL9gTZqYCk
[2011/11/07 23:32:35 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\IfLTjwkVOx0S
[2011/11/07 23:18:35 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\IG55aaQJ6dWKfR9
[2011/11/07 23:38:19 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\IGG55aQHH6WK7Lg
[2011/11/07 23:33:06 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\IH5sWd8ZYklt0Ai
[2011/11/07 23:19:54 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\iiibbD33pn4aQ
[2011/11/07 23:39:22 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\ijjUUCeekIBzOyx
[2011/11/07 22:44:29 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\ijjYYCeekIrzO
[2011/11/07 23:08:11 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\illlOBBtzP0yA1v
[2011/11/07 23:33:13 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\IONxAuF3p5HKRgX
[2011/11/07 23:38:50 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\iOOOBttxP0yS1iD
[2011/11/07 23:37:53 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\IpHsJdKgZYwUeIt
[2011/11/07 22:56:32 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\ipppmGG5sQJ6EKf
[2011/11/07 23:02:56 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\iPPPNNycA1uv2oF
[2011/11/07 23:38:49 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\IQHH6ssWK7fE
[2011/11/07 23:38:21 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\irOtu1bDnG
[2011/11/07 22:58:45 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\ItttxAA0ucS2bDp
[2011/11/07 23:38:20 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\iuuu22ib3pGQHWK
[2011/11/07 22:57:24 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\IUUUVrrlO
[2011/11/07 23:32:46 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\Ivo4Hs78YVz1oH7
[2011/11/07 23:38:57 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\iWWWK88fRL9hX
[2011/11/07 23:31:50 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\IxcSiD3pG
[2011/11/07 23:20:32 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\izzPPNyyxA1vSob
[2011/11/07 23:40:33 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\j00ySivDn4msJdL
[2011/11/07 23:40:42 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\J1voFaHsJ
[2011/11/07 23:39:57 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\j34HW7E9Tj
[2011/11/07 22:59:18 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\jbbFF3pmG5Q6dKf
[2011/11/07 22:47:31 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\jBBttxPP0yc1iD3
[2011/11/07 22:26:38 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\jcccA11uvD2bFpm
[2011/11/07 23:11:52 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\jCCeekIIBr
[2011/11/07 23:39:54 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\jF44ppmH5sQJd
[2011/11/07 23:33:25 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\JFmsJEg9XUltPcu
[2011/11/07 23:01:37 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\JhhYYXwwkUVlOtz
[2011/11/07 23:33:37 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\jhTXeIzyxS
[2011/11/07 23:20:13 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\jiiibFF3pn
[2011/11/07 23:02:02 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\JjjjUUVelIBtPNc
[2011/11/07 23:39:25 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\JkrOBx0c1iDnmsd
[2011/11/07 23:09:44 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\jmmHH5ssQJ7EKgR
[2011/11/07 23:12:30 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\JPPNNyxxA
[2011/11/07 22:58:07 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\JpppnGG4aQH6WKf
[2011/11/07 23:39:31 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\JQJJ78ZjVltNuop
[2011/11/07 23:39:22 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\JqqjjUCeekBrzNx
[2011/11/07 23:39:30 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\JQQQJd8R9YwUeBz
[2011/11/07 23:41:23 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\JR9hhTXwjCelBzy
[2011/11/07 23:31:48 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\js7KR9XjVltNAvo
[2011/11/07 23:32:23 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\ju2Fms6Kf9
[2011/11/07 23:38:24 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\Jx0uSb33pGadWfL
[2011/11/07 23:33:18 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\JXjeVzt0uSbp
[2011/11/07 23:41:08 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\JyAuDoFpG
[2011/11/07 23:33:06 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\jYklt0Ai2p5Jd8Z
[2011/11/07 23:40:54 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\JZXeBP1245689jC
[2011/11/07 23:08:47 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\K888fRRL9hTqjUe
[2011/11/07 23:39:18 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\kddWWK77fRgTXjC
[2011/11/07 23:38:19 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\kdWKfLhTXUeIrOx
[2011/11/07 23:37:57 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\KEE8ggZZqYwkU
[2011/11/07 23:13:08 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\keellIBttzNyc1
[2011/11/07 22:37:42 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\kFFF4aamH5sJ7E
[2011/11/07 23:31:40 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\kG5QJdKR9TqUeOu
[2011/11/07 23:06:17 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\kGGG5aaQH6d
[2011/11/07 22:38:03 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\khhYYXwjUVelIt
[2011/11/07 23:40:00 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\kly1DoFpGsJdKf
[2011/11/07 22:26:17 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\kmmHH5sWWJd
[2011/11/07 23:38:19 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\knnGG5aQH6dW7R
[2011/11/07 23:40:00 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\kVtcvFGJEfTUBy
[2011/11/07 23:01:18 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\kVVVrllOBtxPyc1
[2011/11/07 22:26:23 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\KYYXXwjUVelIBzN
[2011/11/07 23:31:34 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\kZYkeBci2npQKRh
[2011/11/07 23:20:08 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\l111uvvS2
[2011/11/07 23:32:20 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\L56KRgXjYeIrNAc
[2011/11/07 22:40:06 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\L66ddWK8fRL9hX
[2011/11/07 23:19:49 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\LAA00uvSSib
[2011/11/07 23:39:54 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\LAAA11ivD2on4pH
[2011/11/07 23:32:21 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\LbD3o4mHsJEghCl
[2011/11/07 23:31:51 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\lCwrNPciDna6JE8
[2011/11/07 22:56:26 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\LDDD2oonF4pm5sJ
[2011/11/07 23:32:27 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\ldE8ZYwVIzy1
[2011/11/07 23:37:15 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\lEEKK8fRRZhT
[2011/11/07 23:40:03 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\lEL8TqYkOPSn5dR
[2011/11/07 23:31:16 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\LG5aaHHdWK7R9TX
[2011/11/07 22:30:32 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\lGGG55aQJ6dW8fL
[2011/11/07 22:46:37 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\LhhYYXwwkUVlOtz
[2011/11/07 23:05:52 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\LiibbF33pn5
[2011/11/07 23:33:31 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\LjeBPcu2FGQ6KRh
[2011/11/07 23:39:22 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\lkkIIBrzzNyA0vS
[2011/11/07 23:39:22 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\lkkIIBrzzNyx0v2
[2011/11/07 23:39:22 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\lkkkIBBrzONyA0v
[2011/11/07 22:36:35 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\LlOOBBtzP0y
[2012/04/25 13:14:18 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\LolClient
[2012/05/23 15:39:16 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\LolClient2
[2011/11/07 23:17:00 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\LOONNtxxP0uS1bD
[2011/11/07 22:31:27 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\LqhhYYCwkUV
[2011/11/07 22:57:42 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\lSS22ibbD3nG4QH
[2011/11/07 22:47:17 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\LssWWJ7ddE8
[2011/11/07 23:40:32 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\lsWJfLgZYwUVlBx
[2011/11/07 22:36:20 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\LsWJJ7ddELgRZhY
[2011/11/07 23:40:32 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\lsWWJ77fLgZqYwU
[2011/11/07 23:39:30 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\Lvv2on4m5QJKgZ
[2011/11/07 23:33:53 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\lWKEgZCIrOPci3n
[2011/11/07 23:37:47 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\LwOP13as7ghUByi
[2011/11/07 23:38:58 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\lYIrzOONtxA0cSi
[2011/11/07 23:38:04 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\Lyu2oFp5Q6W8R9T
[2011/11/07 23:41:05 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\lZluQhBva9VupWT
[2011/11/07 23:39:31 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\LzN1DobFQKZXCBN
[2011/11/07 23:39:31 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\LzNAuDo4m5Q6E8R
[2011/11/07 23:33:39 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\mDnamHs7dL
[2011/11/07 23:39:18 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\mGG55aQQH6dK7
[2011/11/07 23:41:23 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\mIIIBzPyxuSo3m5
[2011/11/07 23:37:52 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\mm5W7E8RhXkVlBz
[2011/11/07 23:05:20 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\mnnGG4aamHsWJfE
[2011/07/25 13:51:39 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\Movie Label
[2011/11/07 23:38:20 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\mWK7ggTXjCIrOtA
[2011/11/07 23:14:50 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\mWWWJ77dEL
[2011/11/07 23:38:02 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\mx01voFaH5Jd8Rq
[2011/11/07 23:41:23 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\N66ddEK8fRh
[2011/11/07 22:32:14 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\N66ddWK8fRL9hXj
[2011/11/07 23:40:51 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\n69kAp7Yt3WqOSn
[2011/11/07 22:34:38 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\N777ddEL8gRZhYw
[2011/11/07 23:38:49 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\n777fLTTZqjCwIr
[2011/11/07 22:37:01 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\N888fRRL9hTqjUe
[2011/11/07 23:10:03 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\NBBBtzzP0yc1iD2
[2011/11/07 23:39:22 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\NBBrrzONyx0u3pH
[2011/11/07 23:31:56 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\ncSibDnQ6KgZwIl
[2011/11/07 23:33:09 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\nf9ZjwVu1DnaHW7
[2011/11/07 23:37:57 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\NhhYkkUVelt0c1v
[2011/11/07 23:33:08 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\NIrzNA1vF5WLqIz
[2011/11/07 23:39:55 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\NKKK8ggRZ9hXjlB
[2011/11/07 22:33:57 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\NkkkIVVrzONxAuc
[2011/11/07 23:08:06 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\nkkUUVVrlOBxPyc
[2011/11/07 23:20:27 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\nlllIIBrzPNyA1v
[2011/11/07 22:33:36 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\nmGG55aQJ6dWKfL
[2011/11/07 23:40:03 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\Nna6W7LgZhC
[2011/11/07 23:41:22 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\noonFHsQd
[2011/11/07 23:14:12 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\nPPNNyxxA1uS2bF
[2011/11/07 22:52:11 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\npppnGG4aQHs
[2011/11/07 22:43:33 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\NRRRZqqhYXw
[2011/11/07 23:33:34 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\NuiG6EZkNc13GH
[2011/11/07 22:33:31 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\NUUUVeelIBtzNyA
[2011/11/07 23:33:11 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\NyAvoFms7RhjlNv
[2011/11/07 23:40:38 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\nYwwkeOBt0y1vo4
[2011/11/07 22:57:10 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\NyyccA1iiv2on4p
[2011/11/07 23:33:31 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\nz1o4s6KRhUlrNA
[2011/11/07 23:33:33 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\O0uin6KEgZYkr
[2011/11/07 22:34:12 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\o22iibFF3pn5aHd
[2011/11/07 23:32:14 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\o8fZXweBzNuopa6
[2011/11/07 22:45:10 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\oBBttxPP0yS
[2011/11/07 23:06:11 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\OFF33pmmG5
[2011/11/07 23:41:21 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\OhhYXwklBz0Ai
[2011/11/07 23:39:13 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\okVzNx0ciDp
[2011/11/07 23:38:41 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\On4HsJdLgZhwU
[2011/11/07 23:18:16 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\onnnG55aQH6WKfR
[2011/11/07 23:32:51 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\oo4HW7LgZhXUeBP
[2011/11/07 23:16:17 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\oqqqhYYXwkUelOt
[2011/11/07 23:41:16 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\oRqYwUlBz0c1DoF
[2011/11/07 23:41:16 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\oRZqYwUeOtPc1v2
[2011/11/07 23:38:27 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\OtPyAiDoFpHJKZX
[2011/11/07 23:13:48 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\OuvvvD2obF4pm5Q
[2011/11/07 23:41:23 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\OwjjUUCelIBzPyA
[2011/11/07 23:32:14 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\owUlrNAu2Fma6KR
[2011/11/07 23:41:23 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\OwwwjjUCelIBzPy
[2011/11/07 23:37:25 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\OyyxAuv2FpGaQ6W
[2011/11/07 22:39:19 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\p0uuccS1ibD3nGa
[2011/11/07 22:54:16 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\P1uuvvS2obF3pGa
[2011/11/07 22:29:30 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\P22iibD33pG4aHs
[2011/11/07 23:39:27 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\p2b3mGGQW8RhTjC
[2011/11/07 23:32:40 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\p6sWJ7E8Z
[2011/11/07 22:56:51 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\P8gggRZ9hYXwjVl
[2011/11/07 23:39:27 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\P8RL9XjeIrOy0u
[2011/11/07 22:29:44 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\P999gTTXqjY
[2011/11/07 23:38:53 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\paaQQH6dW7fL9Tq
[2011/11/07 23:31:50 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\PaQH6dWK79XYkrO
[2011/11/07 22:46:32 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\PDD33onnG4aH6WJ
[2011/11/07 23:13:34 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\PddWWK88fRLhTqj
[2011/11/07 23:37:43 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\peBPA2ps7ZXVlB0
[2011/11/07 23:32:35 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\pf9XjeVzNAc2p4Q
[2011/11/07 22:34:52 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\pffEEL88gTZhYwk
[2011/11/07 22:31:07 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\pGGG55aQH6dW
[2011/11/07 23:38:59 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\pii3GQWLgjwV
[2011/11/07 23:12:55 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\PjjjUUCelIBrPN
[2011/11/07 23:17:38 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\PkIIVVrzONt
[2011/11/07 23:37:43 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\pkkUeOtPc1v2FpH
[2011/11/07 23:33:32 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\PkrNxu2Fna6KRg
[2011/11/07 23:16:03 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\plIIBBtzP
[2011/11/07 23:11:33 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\PLL99gTXXqYCeIr
[2011/11/07 22:34:32 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\PmmmH66sWJ7ELgT
[2011/11/07 23:40:03 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\PoGHsJE8TqC
[2011/11/07 23:40:38 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\pqqhhYXXwkUelBt
[2011/11/07 23:41:06 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\pqYwINPuSiDo
[2011/11/07 23:39:27 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\PRL9hTqUeIrOyA
[2011/11/07 23:06:30 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\PsssQJJ6dEK
[2011/11/07 22:43:07 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\pttxxA0ucS2ib3n
[2011/11/07 23:37:44 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\pwwwjVItPy1v2Fp
[2011/11/07 23:32:01 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\Px0Sb3GQs7L
[2011/11/07 22:32:56 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\PXXwwkUVVeOBtPy
[2011/11/07 23:14:07 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\q444pmmG5
[2011/11/07 23:33:53 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\Q4HsWKEgZCIrOPc
[2011/11/07 23:33:53 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\Q4HsWKfL9ZCIrOP
[2011/11/07 23:03:21 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\qBBrrzPNNyA1uSo
[2011/11/07 22:41:08 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\qddEEK88g
[2011/11/07 23:33:49 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\QE8ZYkrlBPy13F
[2011/11/07 23:08:31 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\QFFF4aamH5sW7d
[2011/11/07 23:37:22 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\qIIVVrllONxP
[2011/11/07 23:38:24 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\QIx0uSb33GadWfL
[2011/11/07 23:17:19 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\QkkkIIVrlONtP0
[2011/11/07 23:32:43 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\QNuopEeIBNAvo3
[2011/11/07 23:33:34 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\QpGQ6KEgZYkrNPc
[2011/11/07 22:36:55 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\qpppmmH5sQJ7EKg
[2011/11/07 22:53:12 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\QQQJJ7ddEKgRZhY
[2011/11/07 23:39:54 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\QVeelOBtzP0yA1v
[2011/11/07 23:10:36 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\QxAA00ucS2ib3pG
[2011/11/07 23:41:14 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\QxvbnQWRXCVN023
[2011/11/07 22:54:31 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\R11uuvD2obF
[2011/11/07 23:33:04 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\r2bp4Qs7EgqYkrN
[2011/11/07 22:40:26 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\R777fRRL9gTqYCk
[2011/11/07 23:00:58 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\R77ddEL8gRZ
[2011/11/07 23:38:03 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\r88R9hTXw
[2011/11/07 23:40:03 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\R8TqhYkOPSn5dRh
[2011/11/07 23:40:36 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\R9qCIrNx0c2bp4
[2011/11/07 23:09:39 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\RammmH5sWJ7dE8R
[2011/11/07 22:45:52 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\RbbbF33pnG5aH6W
[2011/11/07 23:33:01 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\Rd8ZYjeIzy1voG
[2011/11/07 23:12:49 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\RddEEK8ggR9hYwj
[2011/11/07 22:49:17 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\rEELL9ggTZqYCkI
[2011/11/07 22:45:16 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\REKK88gRZ9h
[2011/11/07 23:38:16 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\RfE9TqYCwIrNt0
[2011/11/07 23:33:19 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\rfXItSpsLqCrOxu
[2011/11/07 23:38:55 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\rhYCwVVrlOBxPyc
[2011/11/07 23:31:31 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\ribF3pnG5HdKfLT
[2011/11/07 23:40:01 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\RIrOyAv2bFnaHKL
[2011/11/07 22:52:52 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\RLLL8ggRZqhXwkV
[2011/11/07 23:33:43 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\RlNt0ci3oms
[2011/11/07 22:27:46 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\RmGG55aQJ6d
[2011/11/07 22:29:50 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\ROBBttxP0ycSiv
[2011/11/07 23:13:53 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\RpppmGG5aQJ
[2011/11/07 23:10:55 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\rpppnGG4aQH6WKf
[2011/11/07 23:38:19 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\RQQHH6dWK7f9gqY
[2011/11/07 22:43:13 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\RrllOOBtxP0yS1
[2011/11/07 22:51:12 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\RrrzzONNyxAuv2i
[2011/11/07 23:33:14 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\RtxP0ucS1b3n4m
[2011/11/07 23:05:14 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\rtxxxA0ucS2i
[2011/11/07 23:33:20 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\RUltPc1Dn4HWd8Z
[2011/11/07 23:10:16 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\RwwwkIIVrlOtxP
[2011/11/07 23:38:59 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\S0234Q6W7E9ZjCk
[2011/11/07 23:33:58 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\s1bDoaH6sE8
[2011/11/07 23:40:38 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\S7ELgqYwketPyAi
[2011/11/07 22:37:36 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\S9ggTTZqjYCwI
[2011/11/07 22:46:51 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\SbDD33onG4amH
[2011/11/07 23:39:59 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\SBPyADnFp5s7EZj
[2011/11/07 23:14:31 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\sddEEK88gR9hYw
[2011/11/07 22:35:33 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\SellIIBrzPNyA1v
[2011/11/07 23:33:53 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\sG4sWKfLTqCIrOP
[2011/11/07 23:38:15 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\SH66ssWK7f
[2011/11/07 23:33:57 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\SH6s7E9TZYwIrOt
[2011/11/07 23:02:16 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\SkUUUVelOB
[2011/11/07 22:33:10 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\SOOOBttxP0yc1iD
[2011/11/07 23:33:46 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\SPNxu2Fma6KR9
[2011/06/05 21:33:28 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\SPORE
[2011/11/07 23:37:38 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\ssJdhXjVltP
[2011/02/24 03:22:36 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\Stardock
[2011/11/07 23:33:15 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\StPci3F4m5
[2011/11/07 22:28:07 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\stttxAA0ucSib3p
[2011/11/07 23:39:22 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\sTTTXqqjUCeIBz
[2011/11/07 23:39:22 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\sTTXXqjjUCeIBz
[2011/11/07 23:39:22 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\sTXXXqjUCekIBz
[2011/11/07 23:40:47 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\sUOPSDF5EZwetyi
[2011/11/07 23:32:43 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\swjCelrPxu2Fma6
[2011/08/28 19:31:38 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\SystemRequirementsLab
[2011/11/07 23:38:49 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\T22iibD3pG4aHsW
[2011/11/07 23:41:00 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\t2ib3nG5HdKfL
[2011/11/07 23:32:06 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\T5W9Yrcaf
[2011/11/07 22:37:16 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\TAA00uvvS
[2011/11/07 23:40:55 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\tadf9TUIO02pa6W
[2011/11/07 22:46:18 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\TBBBtxxP0yc1iD3
[2011/11/07 22:49:38 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\TcccA11iv
[2011/11/07 22:39:39 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\tdddELL8gRZqYXk
[2011/11/07 23:40:47 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\tdLRhXkVlBz0c1v
[2011/11/07 22:37:57 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\TELL88gTZqhYwkV
[2012/08/02 14:09:25 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\TestApp
[2011/11/07 22:51:18 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\TffEEL99g
[2011/11/07 22:35:53 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\thhhTXXqjUCeIBz
[2011/11/07 23:39:22 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\tK88fRL9hT
[2011/11/07 23:32:37 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\TnFad8ZYwOyJ
[2011/11/07 23:38:25 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\TOttAuSiD3nGQ67
[2011/11/07 23:38:25 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\TOtxuin4HKLTjCk
[2011/11/07 23:41:22 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\tpHsJd8R9Y
[2011/11/07 23:10:22 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\tPP00ycSSivDon4
[2011/11/07 23:06:55 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\tppmmG5aQJ6dW8R
[2011/11/07 22:51:57 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\TppnnG44aQHsW7f
[2011/11/07 22:35:13 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\tPPNNyycA1uD2bF
[2011/11/07 23:40:56 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\tQ8XkN2Gd9YrADa
[2011/11/07 22:55:15 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\tqqqjUUCekIBzOy
[2011/11/07 23:41:23 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\tssQQJ6dEK
[2011/11/07 23:38:25 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\tWKfRRL9gXYVtc3
[2011/11/07 23:34:05 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\twVIzAom78YVzA2
[2011/11/07 23:37:57 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\u000yc1iD3onaHs
[2011/11/07 23:09:01 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\u55ssQJ6dEK8
[2011/11/07 23:03:56 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\UaaQQJ66dWKfR9h
[2011/11/07 23:07:47 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\uBBBtzzP0ycA
[2011/03/04 04:10:13 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\Ubisoft
[2011/11/07 22:39:04 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\UCCCwkkIVrlOtx
[2011/11/07 23:38:58 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\uCeekkINuSiFpGa
[2011/11/07 22:57:29 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\udEELL8gRZqhYwU
[2011/11/07 22:41:44 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\UFFF33pnG5aQ6dK
[2011/11/07 23:08:42 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\UGGG5ssQJ6dE8f
[2011/11/07 22:30:26 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\uggRRZ99hYwjUel
[2011/11/07 23:39:27 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\ujCkBzNvi3n5QdK
[2011/11/07 22:35:59 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\ukIIVVrlONtx0uS
[2011/11/07 23:31:55 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\UOt0uS2ib3n
[2011/11/07 23:31:41 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\up4HWf9ZY
[2011/11/07 22:36:41 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\uppmmGssQJdEKfZ
[2011/11/07 23:32:05 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\uQd7R9gqYkrN
[2011/11/07 23:11:39 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\urrrzzONtxA0cSi
[2011/11/07 23:32:19 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\USb3GQ6KRgXYkr
[2012/07/23 12:16:49 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\uTorrent
[2011/11/07 23:31:46 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\uu2qYeIzNxuS
[2011/11/07 23:33:25 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\UUeBPci2Fms78ZY
[2011/11/07 23:39:31 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\uwlzNAv2b3m5Q6W
[2011/11/07 22:29:24 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\uXXXqqjUC
[2011/11/07 22:58:01 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\UYCCeekIVrzONx0
[2011/11/07 23:31:51 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\uZqjYCwkVNxc
[2011/11/07 22:56:13 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\v2oobbF4pmG5sJd
[2011/11/07 22:32:08 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\V44ppmHH5
[2011/11/07 22:48:10 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\V555sWWJ7
[2011/11/07 22:34:18 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\v66ssWJ77f
[2011/11/07 23:37:22 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\V99ggTZqjYCwkVl
[2011/11/07 23:40:41 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\vbD3n4H6WfgZCIr
[2011/11/07 23:12:36 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\veekkIBrrONyx0v
[2011/11/07 22:53:37 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\vffRRZ9hTXwjU
[2011/11/07 23:37:44 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\VhwUeIzNc1DoFp5
[2011/11/07 23:38:28 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\vjjjUCCelI
[2011/11/07 22:54:56 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\vkkkIVVrzONtA0c
[2011/11/07 23:41:17 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\VpHsJd8gZhXj
[2011/11/07 23:05:01 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\VPP00uccS1iD3nG
[2011/11/07 23:04:22 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\vPPP0uucS1
[2011/11/08 00:08:09 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\Vs6d8ZhwjClzyAv
[2011/11/07 23:33:11 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\Vs7LRZYUlBPcvF5
[2011/11/07 23:40:56 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\VSiDpGaHW7E9TqY
[2011/11/07 23:11:00 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\VssWWJ77f
[2011/11/07 23:39:44 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\VTCVB0ioasER
[2011/11/07 22:33:16 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\VtttzPPNycA1vDo
[2011/11/07 23:38:28 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\vUeIzNx1oF
[2011/11/07 23:04:41 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\vWWJJ7ffELgTZhY
[2011/11/07 23:39:28 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\VxAA0c2b3naHsKf
[2011/11/07 23:41:05 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\W2bpGHsKfLTq
[2011/11/07 22:41:50 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\W333onnG4am6sJ7
[2011/11/07 22:53:32 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\w44ppmH55sJ7dK8
[2011/11/07 23:31:58 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\W4ms6KRhwCIrNAu
[2011/11/07 23:09:06 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\w888fRRZ9hTXjUe
[2011/11/07 23:19:08 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\W99hhYXXwjUelBt
[2011/11/07 23:33:38 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\waQH6sWf9TjwVOt
[2011/11/07 23:40:38 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\WBBBttPcv2oF
[2011/11/07 23:39:01 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\wBzNcuDoFpGsJ6K
[2011/11/07 23:38:02 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\wc1v3n4msWdEgZh
[2011/11/07 23:38:02 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\wcSi3n4mHWdLgZh
[2011/11/07 23:37:57 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\WdddE88gZqhY
[2011/11/07 23:37:57 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\WdddE8ggZqhw
[2011/11/07 23:38:56 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\WdE8ggRZ9YwjeBt
[2011/11/07 23:31:22 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\WfEL8gTZqYwUrOt
[2011/11/07 23:33:41 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\WhwCIzy1Sb3Ga6K
[2011/11/07 23:40:32 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\whYYwUVlOBxPyci
[2011/11/07 23:38:53 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\wiib3nG5aQ6Kf
[2011/08/27 18:52:04 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\Wizards of the Coast
[2011/11/07 22:38:44 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\WjYYYCekI
[2011/11/07 23:39:54 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\wnFF44pmH5sQJ
[2011/11/07 23:39:54 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\wnnnF44pmH5s7
[2011/11/07 23:39:54 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\wnnnF44pmH5sJ
[2011/11/07 23:39:54 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\wnnnFF4pmH5sJ
[2011/11/07 23:32:43 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\wo3GQd8LhjerNS3
[2011/11/07 22:39:45 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\wooobFF4pmG5QJd
[2011/11/07 22:49:11 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\wQQQHH6dWK7fL9T
[2011/11/07 23:17:13 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\WqqqjYYCekIV
[2011/11/07 22:30:11 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\WRRZZ9hhYXjUVlI
[2011/11/07 23:37:18 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\WSS11ivvD3oF
[2011/11/07 23:03:02 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\wSSS22obF3pm5aJ
[2011/11/07 22:46:57 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\WssWWJ77dE8gRqh
[2011/11/07 23:15:28 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\WssWWJ77fE8gTqh
[2011/11/07 23:32:51 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\wSvo4HW7LgZhXUe
[2011/11/07 22:58:26 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\wwwwkIIVrlONx
[2011/11/07 23:17:57 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\wyyxxA0uuv2ib
[2011/11/07 22:48:36 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\WzzzPNNyxA1u
[2011/11/07 23:37:43 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\x00yA1ivoFpHsJE
[2011/11/07 23:38:04 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\x2oFp5Q6W8R9TqU
[2011/11/07 23:00:45 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\x444pmmH5sQ7dK8
[2011/11/07 23:32:23 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\X6Kf9XjIzAvoFp5
[2011/11/07 23:02:42 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\X888fRRL9hTXjUe
[2011/11/07 22:35:19 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\x99hhTXwwjCelBz
[2011/11/07 22:43:47 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\XaammH5ssW7dE
[2011/11/07 23:32:53 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\xAu2Fma6KRhqCIr
[2011/11/07 22:36:14 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\XbbDD3oonG4mHsW
[2011/11/07 23:40:30 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\XdK8fLhXjUCkr
[2011/11/07 23:33:21 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\XEKg9XwjeBPcu2F
[2011/11/07 23:33:20 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\Xf8ZYkrBxySvFa5
[2011/11/07 23:16:23 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\XhhYYXwkkUelOtz
[2011/11/07 22:55:29 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\XhTTXXwjUCelB
[2011/11/07 23:39:54 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\XkkUVeelOBtP0cA
[2011/11/07 22:28:28 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\XmmHH6ssWJfE8Tq
[2011/11/07 23:40:35 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\Xob3m5JdKfLhXjC
[2011/11/07 23:04:16 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\XppnnG4aaQ6sW7f
[2011/11/07 23:40:41 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\xqYeIrOtAuSiDpa
[2011/11/07 22:30:05 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\XSS11ibbD3nG4
[2011/11/07 23:15:04 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\XsWWJJ7fEL8gZqY
[2011/11/07 23:19:15 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\XTTTXqqjYC
[2011/11/07 23:33:32 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\xUCkrNxu2Fna6K
[2011/11/07 23:40:41 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\XuuSibpGaH6Wfgk
[2011/11/07 23:38:54 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\XVrrzzNx0c2bpGa
[2011/11/07 23:32:43 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\XXwjCelrPxu2Fma
[2011/11/07 23:32:17 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\XZhYwelBPc
[2011/11/07 23:00:19 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\Y444ammH5sW7dL8
[2011/11/07 23:16:41 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\y555ssWJ7dELgRq
[2011/11/07 23:40:38 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\y8RZ9XjUVelBtP
[2011/11/07 23:39:22 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\Y999hhTXqjUCk
[2011/11/07 23:39:22 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\Y999hTTXqjUek
[2011/11/07 23:41:24 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\Ya8TCByvbGHKLgq
[2011/11/07 23:33:14 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\yasKLgjwrNu
[2011/11/07 22:51:32 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\YBBBrrzONyxAuv2
[2011/11/07 23:31:59 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\yBPxuSbpGQd8LTj
[2011/11/07 23:32:10 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\YBrONy0v2pGQd7L
[2011/11/07 23:40:34 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\Yc1DoFp56E8R9Tw
[2011/11/07 23:03:35 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\yD22oobF4pm
[2011/11/07 23:39:54 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\yDDD2oonF4p
[2011/11/07 23:15:44 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\ydEEKK8fRZ9hTwU
[2011/11/07 23:31:50 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\YdK7fgqCkr
[2011/11/07 23:32:12 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\YeBzy1iDnp5JE8Z
[2011/11/07 23:37:30 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\yFpG68R9XkIrOx0
[2011/11/07 23:39:27 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\yFpmG5QWKfLhCkB
[2011/11/07 23:38:24 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\yFppn56dWfR9gX
[2011/11/07 23:40:38 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\ygRZhXwUVlBzyc
[2011/11/07 22:55:34 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\yIIBBrzzPNyA1vS
[2011/11/07 23:07:14 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\yJJ66ddEK8fZ9TX
[2011/11/07 23:38:20 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\yKK77fRL9gTqjCk
[2011/11/07 22:28:42 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\YkkUUVrrlOBxPyc
[2011/11/07 23:34:10 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\ykVOxPyciDn
[2011/11/07 22:45:58 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\YmmmH66sWJ7EL8T
[2011/11/07 23:38:20 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\YOxuuibpG4aQKEg
[2011/11/07 22:52:31 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\YqqqjYYCwkIVlOt
[2011/11/07 22:57:05 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\yrrrlOOBtxP0cS
[2011/11/07 23:09:20 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\YssQQJ77dE
[2011/11/07 22:56:45 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\yssWWJ7dEL8gRqY
[2011/11/07 23:17:33 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\yTTXXqjjUCkIBzO
[2011/11/07 23:32:04 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\Yv2FmaJdWf
[2011/11/07 22:39:25 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\YvDDD3onF4amH
[2011/11/07 23:32:02 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\ywkIlt0S1b34HWf
[2011/11/07 23:40:33 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\YyccSSiDn4m5JdL
[2011/11/07 23:40:32 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\YyyccSiDon4m5W7
[2011/11/07 23:06:49 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\Z11uuvDD2ob4pG5
[2011/11/07 23:18:11 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\Z222obbF3pm5aJ6
[2011/11/07 23:11:19 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\z33ppnG4aQH6sKf
[2011/11/07 23:16:36 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\Z7ffEEL8g
[2011/11/07 23:33:37 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\zBrzONyxASbn5W7
[2011/11/07 22:26:58 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\ZCCCekkrzNyA
[2011/11/07 23:02:22 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\zDD22obbF4pG5QJ
[2011/11/07 23:39:55 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\zddEEK8gRZ9hXjV
[2011/11/07 22:53:18 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\ZdEEK88fRZ9TXjU
[2011/11/07 23:31:31 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\zF3G5aQH6W7R9CI
[2011/11/07 23:41:13 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\ZFpmsJdKfZhXjCl
[2011/11/07 22:59:58 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\ZHHH6ssWK7fE9gZ
[2011/11/07 23:32:40 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\ZiD3onG4a6W7Egq
[2011/11/07 22:54:36 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\ZjjjUUCekIBr
[2011/11/07 22:59:40 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\zkkkUVVrlOBxP
[2011/11/07 23:37:35 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\zKRCIrNyy0Sb3n5
[2011/11/07 23:40:33 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\znn44mm5W7E8ghX
[2011/11/07 23:37:30 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\ZOx0v2bpGa6W
[2011/11/07 22:58:40 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\ZppnnG55a
[2011/11/07 22:53:51 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\zPPPNyycA1uv2oF
[2011/11/07 23:17:52 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\ZqqjjUCeekBrzNx
[2011/11/07 23:00:25 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\ZQQQJ77dEK8RZhY
[2011/11/07 22:27:26 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\ZttzzP00ycAi
[2011/11/07 22:31:13 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\zTTZZqhYYCkUVlB
[2011/11/07 22:56:07 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\zvDDD2onF4pmHsJ
[2011/11/07 23:33:13 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\zXUeBONyx0SFp
[2012/07/31 18:41:00 | 000,000,906 | -H-- | M] () -- C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-627423442-2963774430-1367278436-1001Core.job
[2012/08/02 00:41:00 | 000,000,928 | -H-- | M] () -- C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-627423442-2963774430-1367278436-1001UA.job
[2012/03/06 12:43:39 | 000,032,604 | -H-- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT

========== Purity Check ==========



========== Custom Scans ==========

< %SYSTEMDRIVE%\*.exe >

< MD5 for: EXPLORER.EXE >
[2011/02/26 02:23:14 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=0862495E0C825893DB75EF44FAEA8E93 -- C:\Windows\explorer.exe
[2011/02/26 02:23:14 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=0862495E0C825893DB75EF44FAEA8E93 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_adc24107935a7e25\explorer.exe
[2011/02/26 01:19:21 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_ba87e574ddfe652d\explorer.exe
[2009/07/13 21:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_b7fe430bc7ce3761\explorer.exe
[2011/02/26 01:51:13 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=255CF508D7CFB10E0794D6AC93280BD8 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_b8ce9756e0b786a4\explorer.exe
[2010/12/24 21:07:38 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_b819b343c7ba6202\explorer.exe
[2011/02/26 01:33:07 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=2AF58D15EDC06EC6FDACCE1F19482BBF -- C:\Windows\SysWOW64\explorer.exe
[2011/02/26 01:33:07 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=2AF58D15EDC06EC6FDACCE1F19482BBF -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_b816eb59c7bb4020\explorer.exe
[2011/02/25 02:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_afa79dc39081d0ba\explorer.exe
[2011/02/26 02:14:34 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=3B69712041F3D63605529BD66DC00C48 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_b0333b22a99da332\explorer.exe
[2010/11/20 08:17:09 | 002,616,320 | -H-- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_ba2f56d3c4bcbafb\explorer.exe
[2010/12/24 20:55:51 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=700073016DAC1C3D2E7E2CE4223334B6 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_ae84b558ac4eb41c\explorer.exe
[2011/02/25 01:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_b9fc4815c4e292b5\explorer.exe
[2010/12/24 21:07:38 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=9AAAEC8DAC27AA17B053E6352AD233AE -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_adc508f19359a007\explorer.exe
[2010/12/24 20:55:51 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=9FF6C4C91A3711C0A3B18F87B08B518D -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_b8d95faae0af7617\explorer.exe
[2010/11/20 09:24:45 | 002,872,320 | -H-- | M] (Microsoft Corporation) MD5=AC4C51EB24AA95B77F705AB159189E24 -- C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_afdaac81905bf900\explorer.exe
[2010/12/24 21:07:38 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=B8EC4BD49CE8F6FC457721BFC210B67F -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_ae46d6aeac7ca7c7\explorer.exe
[2010/12/24 20:55:51 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=B95EEB0F4E5EFBF1038A35B3351CF047 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_b853c407c78e3ba9\explorer.exe
[2009/07/13 21:39:10 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=C235A51CB740E45FFA0EBFB9BAFCDA64 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_ada998b9936d7566\explorer.exe
[2010/12/24 21:07:38 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=C76153C7ECA00FA852BB0C193378F917 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_b89b8100e0dd69c2\explorer.exe
[2011/02/26 02:26:45 | 002,870,784 | ---- | M] (Microsoft Corporation) MD5=E38899074D4951D31B4040E994DD7C8D -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_ae79ed04ac56c4a9\explorer.exe
[2010/12/24 20:55:51 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=F170B4A061C9E026437B193B4D571799 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_adff19b5932d79ae\explorer.exe

< MD5 for: SERVICES >
[2009/06/10 17:00:26 | 000,017,463 | ---- | M] () MD5=D9E1A01B480D961B7CF0509D597A92D6 -- C:\Windows\winsxs\amd64_microsoft-windows-w..nfrastructure-other_31bf3856ad364e35_6.1.7600.16385_none_6079f415110c0210\services

< MD5 for: SERVICES.EXE >
[2009/07/13 21:39:37 | 000,328,704 | -H-- | M] (Microsoft Corporation) MD5=24ACB7E5BE595468E3B9AA488B9B4FCB -- C:\Windows\SysNative\services.exe
[2009/07/13 21:39:37 | 000,328,704 | -H-- | M] (Microsoft Corporation) MD5=24ACB7E5BE595468E3B9AA488B9B4FCB -- C:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_2b54b20ee6fa07b1\services.exe

< MD5 for: SERVICES.EXE.MUI >
[2009/07/13 22:25:40 | 000,017,408 | ---- | M] (Microsoft Corporation) MD5=6507BF0DC2D1F5F32493C288EAA59277 -- C:\Windows\SysNative\en-US\services.exe.mui
[2009/07/13 22:25:40 | 000,017,408 | ---- | M] (Microsoft Corporation) MD5=6507BF0DC2D1F5F32493C288EAA59277 -- C:\Windows\winsxs\amd64_microsoft-windows-s..ontroller.resources_31bf3856ad364e35_6.1.7600.16385_en-us_c5f238be3fa63468\services.exe.mui

< MD5 for: SERVICES.HEARSTMAGS[1].XML >
[2012/07/28 17:31:55 | 000,000,013 | -H-- | M] () MD5=C1DDEA3EF6BBEF3E7060A1A9AD89E4C5 -- C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Internet Explorer\DOMStore\3H997B9E\services.hearstmags[1].xml

< MD5 for: SERVICES.LNK >
[2009/07/14 00:54:05 | 000,001,288 | -H-- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 -- C:\Windows\Temp\smtmp\1\Programs\Administrative Tools\services.lnk

< MD5 for: SERVICES.MOCHIADS.COM.SOL >
[2012/07/28 20:56:17 | 000,000,426 | -H-- | M] () MD5=EEB5616AA5856B8A53C36FC130B94624 -- C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\AHHDRYM9\mochiads.com\services.mochiads.com.sol

< MD5 for: SERVICES.MOF >
[2009/06/10 16:44:06 | 000,002,866 | ---- | M] () MD5=26A11C895A7F0B6D32105EBE127D8500 -- C:\Windows\SysNative\wbem\services.mof
[2009/06/10 16:44:06 | 000,002,866 | ---- | M] () MD5=26A11C895A7F0B6D32105EBE127D8500 -- C:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_2b54b20ee6fa07b1\services.mof

< MD5 for: SERVICES.MSC >
[2009/07/13 22:23:30 | 000,092,745 | ---- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 -- C:\Windows\SysNative\en-US\services.msc
[2009/06/10 16:38:36 | 000,092,745 | ---- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 -- C:\Windows\SysNative\services.msc
[2009/07/13 22:08:50 | 000,092,745 | ---- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 -- C:\Windows\SysWOW64\en-US\services.msc
[2009/06/10 17:21:09 | 000,092,745 | ---- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 -- C:\Windows\SysWOW64\services.msc
[2009/07/13 22:23:30 | 000,092,745 | ---- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 -- C:\Windows\winsxs\amd64_microsoft-windows-s..cessnapin.resources_31bf3856ad364e35_6.1.7600.16385_en-us_003408aa160fce5b\services.msc
[2009/06/10 16:38:36 | 000,092,745 | ---- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 -- C:\Windows\winsxs\amd64_microsoft-windows-servicessnapin_31bf3856ad364e35_6.1.7600.16385_none_2b58d44b5f6beb8a\services.msc
[2009/07/13 22:08:50 | 000,092,745 | ---- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 -- C:\Windows\winsxs\x86_microsoft-windows-s..cessnapin.resources_31bf3856ad364e35_6.1.7600.16385_en-us_a4156d265db25d25\services.msc
[2009/06/10 17:21:09 | 000,092,745 | ---- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 -- C:\Windows\winsxs\x86_microsoft-windows-servicessnapin_31bf3856ad364e35_6.1.7600.16385_none_cf3a38c7a70e7a54\services.msc

< MD5 for: SERVICES.PTXML >
[2009/07/13 16:16:17 | 000,001,061 | ---- | M] () MD5=640D7DD61B1CFA6C96F80F68F78CDFA7 -- C:\Windows\SysNative\wdi\perftrack\Services.ptxml
[2009/07/13 16:16:17 | 000,001,061 | ---- | M] () MD5=640D7DD61B1CFA6C96F80F68F78CDFA7 -- C:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_2b54b20ee6fa07b1\Services.ptxml

< MD5 for: SVCHOST.EXE >
[2009/07/13 21:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\SysWOW64\svchost.exe
[2009/07/13 21:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\winsxs\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_b591afc466a15356\svchost.exe
[2012/07/03 13:46:42 | 000,217,672 | ---- | M] () MD5=8A7F34F0BBD076EC3815680A7309114F -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\Chameleon\svchost.exe
[2009/07/13 21:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\SysNative\svchost.exe
[2009/07/13 21:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\winsxs\amd64_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_11b04b481efec48c\svchost.exe

< MD5 for: USERINIT.EXE >
[2010/11/20 08:17:48 | 000,026,624 | -H-- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe
[2009/07/13 21:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\SysWOW64\userinit.exe
[2009/07/13 21:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe
[2009/07/13 21:39:48 | 000,030,208 | ---- | M] (Microsoft Corporation) MD5=6F8F1376A13114CC10C0E69274F5A4DE -- C:\Windows\SysNative\userinit.exe
[2009/07/13 21:39:48 | 000,030,208 | ---- | M] (Microsoft Corporation) MD5=6F8F1376A13114CC10C0E69274F5A4DE -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_381dabbceb60feb2\userinit.exe
[2010/11/20 09:25:24 | 000,030,720 | -H-- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_3a4ebf84e84f824c\userinit.exe

< MD5 for: WINLOGON.EXE >
[2010/11/20 09:25:30 | 000,390,656 | -H-- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636\winlogon.exe
[2009/07/13 21:39:52 | 000,389,120 | ---- | M] (Microsoft Corporation) MD5=132328DF455B0028F13BF0ABEE51A63A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_cbb7f2bdeea2829c\winlogon.exe
[2012/07/03 13:46:42 | 000,217,672 | ---- | M] () MD5=8A7F34F0BBD076EC3815680A7309114F -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\Chameleon\winlogon.exe
[2010/12/24 21:07:38 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=A93D41A4D4B0D91C072D11DD8AF266DE -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_cc522fd507b468f8\winlogon.exe
[2010/12/24 21:07:38 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=DA3E2A6FA9660CC75B471530CE88453A -- C:\Windows\SysNative\winlogon.exe
[2010/12/24 21:07:38 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=DA3E2A6FA9660CC75B471530CE88453A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_cbe534e7ee8042ad\winlogon.exe

< HKEY_CURRENT_USER\Software\Microsoft\Windows Media\WMSDK\Local\AutoProxyCache /s >

========== Alternate Data Streams ==========

@Alternate Data Stream - 166 bytes -> C:\ProgramData\Temp:DFC5A2B2
@Alternate Data Stream - 161 bytes -> C:\ProgramData\Temp:DFC5A2B2
@Alternate Data Stream - 151 bytes -> C:\ProgramData\Temp:30E53875
@Alternate Data Stream - 127 bytes -> C:\ProgramData\Temp:430C6D84

< End of report >







OEXTRA

OTL Extras logfile created on: 8/2/2012 3:30:10 PM - Run 1
OTL by OldTimer - Version 3.2.55.0 Folder = C:\Users\Jimmy\Downloads
64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

7.93 Gb Total Physical Memory | 6.54 Gb Available Physical Memory | 82.56% Memory free
15.85 Gb Paging File | 14.65 Gb Available in Paging File | 92.40% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 116.44 Gb Total Space | 4.62 Gb Free Space | 3.97% Space Free | Partition Type: NTFS
Drive D: | 327.82 Gb Total Space | 187.21 Gb Free Space | 57.11% Space Free | Partition Type: NTFS
Drive F: | 232.87 Gb Total Space | 143.42 Gb Free Space | 61.59% Space Free | Partition Type: NTFS
Drive G: | 232.89 Gb Total Space | 196.71 Gb Free Space | 84.47% Space Free | Partition Type: NTFS

Computer Name: JIMMY-LAPTOP | User Name: Jimmy | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: All users | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)

[HKEY_USERS\S-1-5-21-627423442-2963774430-1367278436-1001\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [Bridge] -- C:\Program Files (x86)\Adobe\Adobe Bridge CS5.1\Bridge.exe "%L" (Adobe Systems, Inc.)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [Bridge] -- C:\Program Files (x86)\Adobe\Adobe Bridge CS5.1\Bridge.exe "%L" (Adobe Systems, Inc.)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"AntiVirusDisableNotify" = 0
"AntiVirusOverride" = 1
"FirewallDisableNotify" = 0
"FirewallOverride" = 1
"UpdatesDisableNotify" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

========== Firewall Settings ==========

========== Authorized Applications List ==========


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]

========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{07EEE598-5F21-4B57-B40B-46592625B3D9}" = Zune Language Pack (PTB)
"{13F4A7F3-EABC-4261-AF6B-1317777F0755}" = Fast Boot
"{1AAF3A3B-7B32-4DDF-8ABB-438DAEB46EEC}" = Windows Live Family Safety
"{1B8ABA62-74F0-47ED-B18C-A43128E591B8}" = Windows Live ID Sign-in Assistant
"{1E9FC118-651D-4934-97BE-E53CAE5C7D45}" = Microsoft_VC80_MFCLOC_x86_x64
"{1EB2CFC3-E1C5-4FC4-B1F8-549DD6242C67}" = Windows Live Remote Service Resources
"{206BD2C5-DE08-4577-A0D7-D441A79D5A3A}" = Windows Live Remote Client Resources
"{289809B1-078A-49F3-83D0-7E51715B3915}" = Windows Live Family Safety
"{2C4E2E4E-A7C9-4CCB-BF03-FE6EBD5D4AB7}" = Windows Mobile Device Updater Component
"{37DEBC1E-0A1F-448A-8DDD-A2FF4B1578EB}" = Motorola Driver Installation 4.6.0
"{3946328A-5B3A-434C-A22B-64CF6652FBAD}" = Windows Live Family Safety
"{39F4C6F9-618A-4E5B-8FB2-6BD661174E32}" = Intel® Turbo Boost Technology Monitor
"{401C50F6-B443-43EE-8F27-A80DB19B03FD}" = Windows Live Family Safety
"{4569AD91-47F4-4D9E-8FC9-717EC32D7AE1}" = Microsoft_VC80_CRT_x86_x64
"{46A5FBE9-ADB3-4493-A1CC-B4CFFD24D26A}" = Windows Live Family Safety
"{5C93E291-A1CC-4E51-85C6-E194209FCDB4}" = Zune Language Pack (PTG)
"{5E2CD4FB-4538-4831-8176-05D653C3E6D4}" = Windows Live Remote Service Resources
"{5EB6F3CB-46F4-451F-A028-7F6D8D35D7D0}" = Windows Live Language Selector
"{656DEEDE-F6AC-47CA-A568-A1B4E34B5760}" = Windows Live Remote Service Resources
"{6740BCB0-5863-47F4-80F4-44F394DE4FE2}" = Zune Language Pack (NLD)
"{692CCE55-9EAE-4F57-A834-092882E7FE0B}" = Windows Live Remote Client Resources
"{6B33492E-FBBC-4EC3-8738-09E16E395A10}" = Zune Language Pack (ESP)
"{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}" = Bonjour
"{7006ED29-58F2-40C3-AE87-039287AD20B6}" = Zune
"{75104836-CAC7-444E-A39E-3F54151942F5}" = Apple Mobile Device Support
"{7F2540AD-FD82-427A-8FDC-33EC53C8B17A}" = Fresco Logic USB3.0 Host Controller
"{825C7D3F-D0B3-49D5-A42B-CBB0FBE85E99}" = Windows Live Remote Client Resources
"{847B0532-55E3-4AAF-8D7B-E3A1A7CD17E5}" = Windows Live Remote Client Resources
"{8557397C-A42D-486F-97B3-A2CBC2372593}" = Microsoft_VC90_ATL_x86_x64
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8EB588BD-D398-40D0-ADF7-BE1CEEF7C116}" = Windows Live Remote Client Resources
"{90BF0360-A1DB-4599-A643-95AB90A52C1E}" = Microsoft_VC90_MFCLOC_x86_x64
"{911519EB-BD75-4B3B-BD17-BA3747C9B854}" = Windows Live Family Safety
"{91EFE3A1-585E-4F66-B5F6-F118F56C4C47}" = ASUS Power4Gear Hybrid
"{925D058B-564A-443A-B4B2-7E90C6432E55}" = Microsoft_VC80_ATL_x86_x64
"{92A3CA0D-55CD-4C5D-BA95-5C2600C20F26}" = Microsoft_VC90_CRT_x86_x64
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9E9D49A4-1DF4-4138-B7DB-5D87A893088E}" = WIDCOMM Bluetooth Software
"{A472B9E4-0AFF-4F7B-B25D-F64F8E928AAB}" = Microsoft_VC90_MFC_x86_x64
"{A679FBE4-BA2D-4514-8834-030982C8B31A}" = Windows Live Remote Service Resources
"{aac9fcc4-dd9e-4add-901c-b5496a07ab2e}" = Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175
"{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{AE91E0F3-C49A-4EF4-8B98-A07BD409EB90}" = Windows Live Remote Service Resources
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision" = NVIDIA 3D Vision Driver 301.42
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = NVIDIA Control Panel 301.42
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Graphics Driver 301.42
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA PhysX System Software 9.12.0213
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver" = NVIDIA HD Audio Driver 1.3.16.0
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B750FA38-7AB0-42CB-ACBB-E7DBE9FF603F}" = Windows Live Remote Client Resources
"{BE236D9A-52EC-4A17-82DA-84B5EAD31E3E}" = Zune Language Pack (DEU)
"{C5D37FFA-7483-410B-982B-91E93FD3B7DA}" = Zune Language Pack (ITA)
"{C68D33B1-0204-4EBE-BC45-A6E432B1D13A}" = Zune Language Pack (FRA)
"{C8C1BAD5-54E6-4146-AD07-3A8AD36569C3}" = Microsoft_VC80_MFC_x86_x64
"{D66F0C3C-24F2-4463-9E2F-4381E5C40A26}" = iTunes
"{DA54F80E-261C-41A2-A855-549A144F2F59}" = Windows Live MIME IFilter
"{DF6D988A-EEA0-4277-AAB8-158E086E439B}" = Windows Live Remote Client
"{E02A6548-6FDE-40E2-8ED9-119D7D7E641F}" = Windows Live Remote Service
"{EEB3F6BB-318D-4CE5-989F-8191FCBFB578}" = Ventrilo Client for Windows x64
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"{FAA3933C-6F0D-4350-B66B-9D7F7031343E}" = Windows Live Remote Service Resources
"{FE4BE0BD-1EDB-4D24-9614-847B3C472887}" = Windows Live Family Safety
"2AA10AB519DC7432D599A0E860206A7DDCC27764" = Windows Driver Package - Broadcom Bluetooth (07/29/2009 6.1.7100.0)
"3BA80AB4C7E9F8497C115C844953A3D4BEB84D21" = Windows Driver Package - Broadcom HIDClass (07/28/2009 6.2.0.9800)
"6B6B5E96843E55CF5CF8C7E45FB457F1FE642FF1" = Windows Driver Package - Broadcom Bluetooth (07/30/2009 6.2.0.9405)
"7341A1B43E7FE58942EB1E820A17C18305DFBCE6" = Windows Driver Package - Broadcom Bluetooth (01/19/2010 6.2.0.1417)
"85CE3A3657FAE5FD305B143E90E6FC89BA53001C" = Windows Driver Package - Broadcom (BTHUSB) Bluetooth (02/25/2010 6.2.0.9419)
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"NVIDIA Display Control Panel" = NVIDIA Display Control Panel
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"USB2.0 UVC 2M WebCam" = USB2.0 UVC 2M WebCam
"WinRAR archiver" = WinRAR archiver
"Zune" = Zune

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{000F2A10-9CDF-47BF-9CF2-9AC87567B433}" = Windows Live Photo Common
"{03241D8D-2217-42F7-9FCB-6A68D141C14D}" = Windows Live 软件包
"{033E378E-6AD3-4AD5-BDEB-CBD69B31046C}" = Microsoft_VC90_ATL_x86
"{04668DF2-D32F-4555-9C7E-35523DCD6544}" = Control ActiveX de Windows Live Mesh para conexiones remotas
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{08D2E121-7F6A-43EB-97FD-629B44903403}" = Microsoft_VC90_CRT_x86
"{0969AF05-4FF6-4C00-9406-43599238DE0D}" = ASUS Splendid Video Enhancement Technology
"{09F56A49-A7B1-4AAB-95B9-D13094254AD1}" = Windows Live UX Platform Language Pack
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{0C4FF2FE-9E75-4DBF-B2DA-11CE1F10C4B5}" = Roxio AACS Certificate
"{0D261C88-454B-46FE-B43B-640E621BDA11}" = Windows Live Mail
"{0EC0B576-90F9-43C3-8FAD-A4902DF4B8F4}" = Galeria de Fotografias do Windows Live
"{0F3647F8-E51D-4FCC-8862-9A8D0C5ACF25}" = Microsoft_VC80_ATL_x86
"{1111706F-666A-4037-7777-203328764D10}" = JavaFX 2.0.3
"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer
"{198EA334-8A3F-4CB2-9D61-6C10B8168A6F}" = Windows Live Writer
"{19BA08F7-C728-469C-8A35-BFBD3633BE08}" = Windows Live Movie Maker
"{1DBD1F12-ED93-49C0-A7CC-56CBDE488158}" = ASUS LifeFrame3
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{20FDF948-C8ED-4543-A539-F7F4AEF5AFA2}" = Wireless Console 3
"{21B49B4A-BBC3-4A09-9C68-6C3CC0B1EA01}" = Windows Live Messenger
"{23181592-0ECD-4A16-81C6-F0424D2DCABF}" = Windows Live UX Platform Language Pack
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{25A381E1-0AB9-4E7A-ACCE-BA49D519CF4E}" = Windows Live Mail
"{26A24AE4-039D-4CA4-87B4-2F83216024FF}" = Java™ 6 Update 24
"{26A24AE4-039D-4CA4-87B4-2F83217003FF}" = Java™ 7 Update 3
"{2902F983-B4C1-44BA-B85D-5C6D52E2C441}" = Windows Live Mesh ActiveX Control for Remote Connections
"{29373E24-AC72-424E-8F2A-FB0F9436F21F}" = Windows Live Photo Common
"{2AD2DD70-27F7-4343-BB4E-DE50A32D854B}" = Windows Live Messenger
"{2B81872B-A054-48DA-BE3B-FA5C164C303A}" = ASUS FancyStart
"{2C13F8C1-570B-42A9-87B4-8C7903ECD602}" = ObjectDock Free
"{2C865FB0-051E-4D22-AC62-428E035AEAF0}" = Windows Live Mesh
"{317D56AC-0DB3-48F5-929A-42032DAC9AD7}" = Windows Live Writer
"{32C01DD0-3260-4D2B-BDB2-36CEC3E5B27A}" = Windows Live UX Platform Language Pack
"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
"{341697D8-9923-445E-B42A-529E5A99CB7A}" = syncables desktop SE
"{34319F1F-7CF2-4CC9-B357-1AE7D2FF3AC5}" = Windows Live
"{343666E2-A059-48AC-AD67-230BF74E2DB2}" = Apple Application Support
"{34F4D9A4-42C2-4348-BEF4-E553C84549E7}" = Windows Live Photo Gallery
"{3521BDBD-D453-5D9F-AA55-44B75D214629}" = Adobe Community Help
"{370F888E-42A7-4911-9E34-7D74632E17EB}" = Windows Live Photo Common
"{3A09ED0F-8DDF-47BB-B53D-841AB9D1D3A7}" = Complemento Messenger
"{3B11D799-48E0-48ED-BFD7-EA655676D8BB}" = Star Wars: The Old Republic
"{3B9A92DA-6374-4872-B646-253F18624D5F}" = Windows Live Writer
"{40BF1E83-20EB-11D8-97C5-0009C5020658}" = CyberLink Power2Go
"{488F0347-C4A7-4374-91A7-30818BEDA710}" = Galerie de photos Windows Live
"{48C0DC5E-820A-44F2-890E-29B68EDD3C78}" = Windows Live Writer
"{499DED08-6FA8-4749-8E94-8526CC9D1CA8}" = ExpressGate Cloud
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4A275FD1-2F24-4274-8C01-813F5AD1A92D}" = Windows Live Messenger
"{4CB0307C-565E-4441-86BE-0DF2E4FB828C}" = Microsoft Games for Windows Marketplace
"{4CBABDFD-49F8-47FD-BE7D-ECDE7270525A}" = Windows Live PIMT Platform
"{50816F92-1652-4A7C-B9BC-48F682742C4B}" = Messenger Companion
"{55D003F4-9599-44BF-BA9E-95D060730DD3}" = Contrôle ActiveX Windows Live Mesh pour connexions à distance
"{588CE0C0-860B-49A8-AFCF-3C69465B345F}" = Windows Live Mesh
"{5900B642-869A-4753-B103-E4BF92E03629}" = Roxio CinePlayer
"{5B65EF64-1DFA-414A-8C94-7BB726158E21}" = ControlDeck
"{5C83944D-5319-4AD6-A803-C08446B27596}" = BlueStacks
"{5D273F60-0525-48BA-A5FB-D0CAA4A952AE}" = Windows Live Movie Maker
"{6057E21C-ABE9-4059-AE3E-3BEB9925E660}" = Windows Live Messenger
"{622DE1BE-9EDE-49D3-B349-29D64760342A}" = 適用遠端連線的 Windows Live Mesh ActiveX 控制項
"{62687B11-58B5-4A18-9BC3-9DF4CE03F194}" = Windows Live Writer Resources
"{635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A}" = Microsoft_VC90_MFC_x86
"{63AE67AA-1AB1-4565-B4EF-ABBC5C841E8D}" = Windows Live Messenger
"{64452561-169F-4A36-A2FF-B5E118EC65F5}" = ASUS SmartLogon
"{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel® Management Engine Components
"{6807427D-8D68-4D30-AF5B-0B38F8F948C8}" = Windows Live Writer Resources
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{6A05FEDF-662E-46BF-8A25-010E3F1C9C69}" = Windows Live UX Platform Language Pack
"{6CB36609-E3A6-446C-A3C1-C71E311D2B9C}" = Windows Live Movie Maker
"{6DEC8BD5-7574-47FA-B080-492BBBE2FEA3}" = Windows Live Movie Maker
"{6E5324C1-84FC-4F76-9A3A-C65E07F80EE6}" = Complément Messenger
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{7115EEBC-DA7B-434C-B81C-EA5B26EA9A94}" = Windows Live Writer Resources
"{753F0A72-59C3-41CE-A36A-F2DF2079275C}" = Windows Live Mail
"{76046298-768C-492C-8C93-2983C9E3719E}" = Windows Live UX Platform Language Pack
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{78A96B4C-A643-4D0F-98C2-A8E16A6669F9}" = Windows Live Messenger Companion Core
"{78DAE910-CA72-450E-AD22-772CB1A00678}" = Windows Live Mesh
"{7B982EBD-D017-4527-BF1A-FC489EC6B100}" = Windows Live 照片库
"{7BF67A61-BE7C-4806-B93C-97F299D6A6FE}" = ASUS AI Recovery
"{7CAC6A44-C3DE-4153-ACA6-7524602C789E}" = Facebook Video Calling 1.2.0.159
"{7D1C7B9F-2744-4388-B128-5C75B8BCCC84}" = Windows Live Essentials
"{7F061FA8-5A87-4758-876B-17EE28B358D0}" = Messenger 浏览器插件
"{80956555-A512-4190-9CAD-B000C36D6B6B}" = Windows Live Messenger
"{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}" = Microsoft Games for Windows - LIVE Redistributable
"{841F1FB4-FDF8-461C-A496-3E1CFD84C0B5}" = Windows Live Mesh
"{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
"{8C6D6116-B724-4810-8F2D-D047E6B7D68E}" = Mesh Runtime
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{8F21291E-0444-4B1D-B9F9-4370A73E346D}" = WinFlash
"{903EDF14-4E28-4463-AA5E-4AEE71C0263B}" = Windows Live Movie Maker
"{9158FF30-78D7-40EF-B83E-451AC5334640}" = Adobe Photoshop CS5.1
"{92606477-9366-4D3B-8AE3-6BE4B29727AB}" = League of Legends
"{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}" = Microsoft_VC80_CRT_x86
"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
"{939C80FA-96C9-44A6-B318-8E7D8BD8481B}" = Messenger Companion
"{95140000-0070-0000-0000-0000000FF1CE}" = Microsoft Office 2010
"{980A182F-E0A2-4A40-94C1-AE0C1235902E}" = Pando Media Booster
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9D48531D-2135-49FC-BC29-ACCDA5396A76}" = ASUS MultiFrame
"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
"{9DF0196F-B6B8-4C3A-8790-DE42AA530101}" = SPORE™
"{9FAE6E8D-E686-49F5-A574-0A58DFD9580C}" = Windows Live Mail
"{A0B91308-6666-4249-8FF6-1E11AFD75FE1}" = Windows Live Mail
"{A0C91188-C88F-4E86-93E6-CD7C9A266649}" = Windows Live Mesh
"{A357EF4C-2B6F-4980-ACA9-B1E42A74D7F3}" = Red Faction Guerrilla
"{A41A708E-3BE6-4561-855D-44027C1CF0F8}" = Windows Live Photo Common
"{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer
"{A78FE97A-C0C8-49CE-89D0-EDD524A17392}" = PDF Settings CS5
"{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}" = CyberLink PowerDVD 9
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
"{AAF454FC-82CA-4F29-AB31-6A109485E76E}" = Windows Live Writer
"{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}" = ATK Package
"{AF7733C1-FB0B-4FED-9730-E0433AF7A2EF}" = Magic Online
"{AF9E97C1-7431-426D-A8D5-ABE40995C0B1}" = DirectX 9 Runtime
"{B11AB9C8-18A6-41DC-98B4-4988CC030136}" = THX TruStudio
"{B618C3BF-5142-4630-81DD-F96864F97C7E}" = Windows Live Essentials
"{B653A2EC-D816-4498-A4FD-651047AB9DC9}" = Boingo Wi-Fi
"{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Click to Call with Skype
"{B6D38690-755E-4F40-A35A-23F8BC2B86AC}" = Microsoft_VC90_MFCLOC_x86
"{C03F3D5B-0D83-4F81-A324-32F4E7F1BF6A}" = Roxio CinePlayer
"{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}" = The Sims™ 3
"{C1594429-8296-4652-BF54-9DBE4932A44C}" = Realtek PCIE Card Reader
"{C52DE33F-117A-4EC8-8A32-084E828D7B1E}" = Gaming Mouse
"{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = CyberLink LabelPrint
"{C66824E4-CBB3-4851-BB3F-E8CFD6350923}" = Windows Live Mail
"{C893D8C0-1BA0-4517-B11C-E89B65E72F70}" = Windows Live Photo Common
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{CF088261-BC81-4FB9-9BA0-7B5B9602D01A}" = Messenger 分享元件
"{D0B44725-3666-492D-BEF6-587A14BD9BD9}" = MSVCRT_amd64
"{D1A19B02-817E-4296-A45B-07853FD74D57}" = Microsoft_VC80_MFC_x86
"{D436F577-1695-4D2F-8B44-AC76C99E0002}" = Windows Live Photo Common
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{D92BBB52-82FF-42ED-8A3C-4E062F944AB7}" = Microsoft_VC80_MFCLOC_x86
"{DA909E62-3B45-4BA1-8B58-FCAEBA4BCEC9}" = NVIDIA PhysX
"{DAEF48AD-89C8-4A93-B1DD-45B7E4FB6071}" = Windows Live Movie Maker
"{DDC5B3E0-C656-4070-9CF0-E592EC60AD42}" = MotoConnect
"{DDC8BDEE-DCAC-404D-8257-3E8D4B782467}" = Windows Live Writer Resources
"{DE8F99FD-2FC7-4C98-AA67-2729FDE1F040}" = Windows Live Writer Resources
"{DECDCB7C-58CC-4865-91AF-627F9798FE48}" = Windows Live Mesh
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E1845F1C-068C-F8F4-D31D-D3540D47C453}" = Adobe Download Assistant
"{E3E71D07-CD27-46CB-8448-16D4FB29AA13}" = Microsoft WSE 3.0 Runtime
"{E54EEB5D-41ED-40FE-B4A8-8565DB81469B}" = Controlo ActiveX do Windows Live Mesh para Ligaçơes Remotas
"{E62E0550-C098-43A2-B54B-03FB1E634483}" = Windows Live Writer
"{E657B243-9AD4-4ECC-BE81-4CCF8D667FD0}" = ASUS Live Update
"{E71E60C1-533E-45A5-8D80-E475E88D2B17}_is1" = Game Park Console
"{E727A662-AF9F-4DEE-81C5-F4A1686F3DFC}" = Windows Live Writer Resources
"{E85A4EFC-82F2-4CEE-8A8E-62FDAD353A66}" = Galería fotográfica de Windows Live
"{EB4DF488-AAEF-406F-A341-CB2AAA315B90}" = Windows Live Messenger
"{EC877639-07AB-495C-BFD1-D63AF9140810}" = Roxio Activation Module
"{EC8BD21F-0CA0-4BBF-97D9-4A52B30041A1}" = ASUS Virtual Camera
"{ED86C4AB-D1E5-42CF-BFA3-56BAAE617D4E}" = Windows Live UX Platform Language Pack
"{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}" = Skype™ 5.10
"{EEF99142-3357-402C-B298-DEC303E12D92}" = Windows Live 影像中心
"{EF7EAB13-46FC-49DD-8E3C-AAF8A286C5BB}" = Windows Live 程式集
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F992409C-9D10-4AE2-BAEB-B5409AD3785E}" = 用于远程连接的 Windows Live Mesh ActiveX 控件(简体中文)
"{FCDE76CB-989D-4E32-9739-6A272D2B0ED7}" = Windows Live Mesh
"{FE044230-9CA5-43F7-9B58-5AC5A28A1F33}" = Windows Live Essentials
"{FE23D063-934D-4829-A0D8-00634CE79B4A}" = Adobe AIR
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Amazon Kindle For PC" = Amazon Kindle For PC v1.0
"Ant Movie Catalog_is1" = Ant Movie Catalog
"ASUS AP Bank_is1" = ASUS AP Bank
"ASUS WebStorage" = ASUS WebStorage
"Asus_G73_Screensaver" = Asus_G73_Screensaver
"Browser Defender_is1" = Browser Guard 4.0
"ca_movielabel_is1" = Movie Label 2012 v7.0.1
"chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Community Help
"com.adobe.downloadassistant.AdobeDownloadAssistant" = Adobe Download Assistant
"DAEMON Tools Lite" = DAEMON Tools Lite
"Diablo III" = Diablo III
"EADM" = EA Download Manager
"Google Chrome" = Google Chrome
"Governor of Poker" = Governor of Poker
"IL Download Manager" = IL Download Manager
"InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}" = CyberLink Power2Go
"InstallShield_{499DED08-6FA8-4749-8E94-8526CC9D1CA8}" = ExpressGate Cloud
"InstallShield_{A357EF4C-2B6F-4980-ACA9-B1E42A74D7F3}" = Red Faction Guerrilla
"InstallShield_{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}" = CyberLink PowerDVD 9
"InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = CyberLink LabelPrint
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware version 1.62.0.1300
"Mozilla Firefox 14.0.1 (x86 en-US)" = Mozilla Firefox 14.0.1 (x86 en-US)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver
"ObjectDock Free" = ObjectDock Free
"PowerISO" = PowerISO
"Spyware Doctor" = PC Tools Spyware Doctor with AntiVirus 9.0
"Steam App 12110" = Grand Theft Auto: Vice City
"Steam App 15100" = Assassin's Creed
"Steam App 15120" = Tom Clancy's Rainbow Six: Vegas 2
"Steam App 17300" = Crysis
"Steam App 19900" = Far Cry 2
"Steam App 21980" = Call of Juarez: Bound in Blood
"Steam App 220" = Half-Life 2
"Steam App 22330" = The Elder Scrolls IV: Oblivion
"Steam App 340" = Half-Life 2: Lost Coast
"Steam App 380" = Half-Life 2: Episode One
"Steam App 400" = Portal
"Steam App 420" = Half-Life 2: Episode Two
"Steam App 440" = Team Fortress 2
"Steam App 49470" = Magic: The Gathering — Duels of the Planeswalkers 2012
"Steam App 520" = Team Fortress 2 Beta
"Steam App 57300" = Amnesia: The Dark Descent
"Steam App 72850" = The Elder Scrolls V: Skyrim
"Steam App 8980" = Borderlands
"SystemRequirementsLab" = System Requirements Lab
"uTorrent" = µTorrent
"VLC media player" = VLC media player 1.1.7
"WinLiveSuite" = Windows Live Essentials
"World of Goo" = World of Goo
"World of Warcraft" = World of Warcraft

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-627423442-2963774430-1367278436-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"SOE-EverQuest II Extended" = EverQuest II Extended

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 7/28/2012 2:19:05 AM | Computer Name = Jimmy-Laptop | Source = Application Error | ID = 1000
Description = Faulting application name: svchost.exe, version: 6.1.7600.16385, time
stamp: 0x4a5bc3c5 Faulting module name: jscript9.dll, version: 9.0.8112.16447, time
stamp: 0x4fc9cfc6 Exception code: 0xc0000005 Fault offset: 0x000adc5d Faulting process
id: 0x17ac Faulting application start time: 0x01cd6c8456d02307 Faulting application
path: \\.\globalroot\systemroot\svchost.exe Faulting module path: C:\Windows\SysWOW64\jscript9.dll
Report
Id: 211c03bf-d87c-11e1-a4b6-74f06dc1f852

Error - 7/28/2012 3:04:58 AM | Computer Name = Jimmy-Laptop | Source = Application Error | ID = 1000
Description = Faulting application name: svchost.exe, version: 6.1.7600.16385, time
stamp: 0x4a5bc3c5 Faulting module name: jscript9.dll, version: 9.0.8112.16447, time
stamp: 0x4fc9cfc6 Exception code: 0xc0000005 Fault offset: 0x000adc5d Faulting process
id: 0xcf8 Faulting application start time: 0x01cd6c89147cc23e Faulting application
path: \\.\globalroot\systemroot\svchost.exe Faulting module path: C:\Windows\SysWOW64\jscript9.dll
Report
Id: 89fe3a6c-d882-11e1-a4b6-74f06dc1f852

Error - 7/28/2012 3:45:03 AM | Computer Name = Jimmy-Laptop | Source = Application Error | ID = 1000
Description = Faulting application name: svchost.exe, version: 6.1.7600.16385, time
stamp: 0x4a5bc3c5 Faulting module name: jscript9.dll, version: 9.0.8112.16447, time
stamp: 0x4fc9cfc6 Exception code: 0xc0000005 Fault offset: 0x000adc5d Faulting process
id: 0x1ac4 Faulting application start time: 0x01cd6c8f6a78e6f0 Faulting application
path: \\.\globalroot\systemroot\svchost.exe Faulting module path: C:\Windows\SysWOW64\jscript9.dll
Report
Id: 23a4afbb-d888-11e1-a4b6-74f06dc1f852

Error - 7/28/2012 3:58:20 AM | Computer Name = Jimmy-Laptop | Source = Application Error | ID = 1000
Description = Faulting application name: svchost.exe, version: 6.1.7600.16385, time
stamp: 0x4a5bc3c5 Faulting module name: Flash10w.ocx, version: 10.3.183.7, time
stamp: 0x4e52e8e0 Exception code: 0xc0000005 Fault offset: 0x00193899 Faulting process
id: 0x1ee8 Faulting application start time: 0x01cd6c95062705a7 Faulting application
path: \\.\globalroot\systemroot\svchost.exe Faulting module path: C:\Windows\SysWOW64\Macromed\Flash\Flash10w.ocx
Report
Id: ff0ac623-d889-11e1-a4b6-74f06dc1f852

Error - 7/28/2012 4:29:17 AM | Computer Name = Jimmy-Laptop | Source = Application Error | ID = 1000
Description = Faulting application name: svchost.exe, version: 6.1.7600.16385, time
stamp: 0x4a5bc3c5 Faulting module name: jscript9.dll, version: 9.0.8112.16447, time
stamp: 0x4fc9cfc6 Exception code: 0xc0000005 Fault offset: 0x000d0c53 Faulting process
id: 0x16a8 Faulting application start time: 0x01cd6c96d71edeb0 Faulting application
path: \\.\globalroot\systemroot\svchost.exe Faulting module path: C:\Windows\SysWOW64\jscript9.dll
Report
Id: 51d789f2-d88e-11e1-a4b6-74f06dc1f852

Error - 7/28/2012 5:18:48 AM | Computer Name = Jimmy-Laptop | Source = Application Error | ID = 1000
Description = Faulting application name: svchost.exe, version: 6.1.7600.16385, time
stamp: 0x4a5bc3c5 Faulting module name: jscript9.dll, version: 9.0.8112.16447, time
stamp: 0x4fc9cfc6 Exception code: 0xc0000005 Fault offset: 0x000adc5d Faulting process
id: 0x18e0 Faulting application start time: 0x01cd6c9b35ee9531 Faulting application
path: \\.\globalroot\systemroot\svchost.exe Faulting module path: C:\Windows\SysWOW64\jscript9.dll
Report
Id: 3c759416-d895-11e1-a4b6-74f06dc1f852

Error - 7/28/2012 4:45:30 PM | Computer Name = Jimmy-Laptop | Source = Application Error | ID = 1000
Description = Faulting application name: svchost.exe, version: 6.1.7600.16385, time
stamp: 0x4a5bc3c5 Faulting module name: jscript9.dll, version: 9.0.8112.16447, time
stamp: 0x4fc9cfc6 Exception code: 0xc0000005 Fault offset: 0x000adc5d Faulting process
id: 0x80c Faulting application start time: 0x01cd6cf4596aa46d Faulting application
path: \\.\globalroot\systemroot\svchost.exe Faulting module path: C:\Windows\SysWOW64\jscript9.dll
Report
Id: 2aacf50c-d8f5-11e1-80a0-74f06dc1f852

Error - 7/28/2012 4:52:31 PM | Computer Name = Jimmy-Laptop | Source = Application Error | ID = 1000
Description = Faulting application name: HD-LogRotator.exe, version: 0.7.0.722,
time stamp: 0x4fc733f7 Faulting module name: KERNEL32.dll_unloaded, version: 0.0.0.0,
time stamp: 0x4e211484 Exception code: 0xc0000005 Fault offset: 0x76b41dd5 Faulting
process id: 0xffc Faulting application start time: 0x01cd6d02e7340ffe Faulting application
path: C:\Program Files (x86)\BlueStacks\HD-LogRotator.exe Faulting module path:
KERNEL32.dll Report Id: 25803aba-d8f6-11e1-80a0-74f06dc1f852

Error - 7/28/2012 6:40:00 PM | Computer Name = Jimmy-Laptop | Source = Application Hang | ID = 1002
Description = The program ACMON.exe version 1.0.8.0 stopped interacting with Windows
and was closed. To see if more information about the problem is available, check
the problem history in the Action Center control panel. Process ID: cf0 Start Time:
01cd6d11cae83010 Termination Time: 0 Application Path: C:\Program Files (x86)\ASUS\Splendid\ACMON.exe

Report
Id: 1f3557ce-d905-11e1-84ad-74f06dc1f852

Error - 7/31/2012 12:54:06 PM | Computer Name = Jimmy-Laptop | Source = Application Hang | ID = 1002
Description = The program firefox.exe version 14.0.1.4577 stopped interacting with
Windows and was closed. To see if more information about the problem is available,
check the problem history in the Action Center control panel. Process ID: 1d4c Start
Time: 01cd6e25d52b9685 Termination Time: 166 Application Path: C:\Program Files (x86)\Mozilla
Firefox\firefox.exe Report Id:

Error - 7/31/2012 3:54:09 PM | Computer Name = Jimmy-Laptop | Source = Application Error | ID = 1000
Description = Faulting application name: LolClient.exe, version: 2.0.2.12610, time
stamp: 0x4c00573a Faulting module name: Adobe AIR.dll, version: 3.1.0.4880, time
stamp: 0x4eb75fb9 Exception code: 0xc0000005 Fault offset: 0x000781a4 Faulting process
id: 0x1b40 Faulting application start time: 0x01cd6f3c22540062 Faulting application
path: C:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.0.176\deploy\LolClient.exe
Faulting
module path: C:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.0.176\deploy\Adobe
AIR\Versions\1.0\Adobe AIR.dll Report Id: 7d80a4ce-db49-11e1-bbdf-74f06dc1f852

[ Media Center Events ]
Error - 7/22/2011 9:35:38 AM | Computer Name = Jimmy-Laptop | Source = MCUpdate | ID = 0
Description = 9:35:38 AM - Error connecting to the internet. 9:35:38 AM - Unable
to contact server..

Error - 7/22/2011 9:35:45 AM | Computer Name = Jimmy-Laptop | Source = MCUpdate | ID = 0
Description = 9:35:43 AM - Error connecting to the internet. 9:35:43 AM - Unable
to contact server..

Error - 7/26/2011 1:33:05 PM | Computer Name = Jimmy-Laptop | Source = MCUpdate | ID = 0
Description = 1:32:58 PM - Error connecting to the internet. 1:32:58 PM - Unable
to contact server..

Error - 7/26/2011 2:33:11 PM | Computer Name = Jimmy-Laptop | Source = MCUpdate | ID = 0
Description = 2:33:10 PM - Error connecting to the internet. 2:33:10 PM - Unable
to contact server..

Error - 7/26/2011 3:33:18 PM | Computer Name = Jimmy-Laptop | Source = MCUpdate | ID = 0
Description = 3:33:16 PM - Error connecting to the internet. 3:33:16 PM - Unable
to contact server..

Error - 7/26/2011 4:33:24 PM | Computer Name = Jimmy-Laptop | Source = MCUpdate | ID = 0
Description = 4:33:22 PM - Error connecting to the internet. 4:33:22 PM - Unable
to contact server..

Error - 8/2/2011 9:29:12 PM | Computer Name = Jimmy-Laptop | Source = MCUpdate | ID = 0
Description = 9:29:10 PM - Error connecting to the internet. 9:29:10 PM - Unable
to contact server..

Error - 8/7/2011 9:18:46 PM | Computer Name = Jimmy-Laptop | Source = MCUpdate | ID = 0
Description = 9:18:41 PM - Failed to retrieve SportsSchedule (Error: Unable to connect
to the remote server)

Error - 8/17/2011 11:27:01 AM | Computer Name = Jimmy-Laptop | Source = MCUpdate | ID = 0
Description = 11:27:01 AM - Error connecting to the internet. 11:27:01 AM - Unable
to contact server..

Error - 8/17/2011 11:27:28 AM | Computer Name = Jimmy-Laptop | Source = MCUpdate | ID = 0
Description = 11:27:06 AM - Error connecting to the internet. 11:27:06 AM - Unable
to contact server..

[ System Events ]
Error - 11/8/2011 12:04:22 AM | Computer Name = Jimmy-Laptop | Source = Service Control Manager | ID = 7001
Description = The Computer Browser service depends on the Server service which failed
to start because of the following error: %%1068

Error - 11/8/2011 12:08:30 AM | Computer Name = Jimmy-Laptop | Source = DCOM | ID = 10010
Description =

Error - 11/8/2011 10:50:35 PM | Computer Name = Jimmy-Laptop | Source = EventLog | ID = 6008
Description = The previous system shutdown at 9:41:08 PM on ?11/?8/?2011 was unexpected.

Error - 11/23/2011 3:30:38 AM | Computer Name = Jimmy-Laptop | Source = EventLog | ID = 6008
Description = The previous system shutdown at 2:29:42 AM on ?11/?23/?2011 was unexpected.

Error - 12/5/2011 1:38:03 PM | Computer Name = Jimmy-Laptop | Source = EventLog | ID = 6008
Description = The previous system shutdown at 12:28:12 PM on ?12/?5/?2011 was unexpected.

Error - 12/6/2011 2:04:18 AM | Computer Name = Jimmy-Laptop | Source = EventLog | ID = 6008
Description = The previous system shutdown at 5:37:56 PM on ?12/?5/?2011 was unexpected.

Error - 12/13/2011 10:45:45 PM | Computer Name = Jimmy-Laptop | Source = Tcpip | ID = 4199
Description = The system detected an address conflict for IP address 192.168.1.3
with the system having network hardware address 00-02-6F-6F-65-F1. Network operations
on this system may be disrupted as a result.

Error - 12/20/2011 2:31:05 PM | Computer Name = Jimmy-Laptop | Source = Tcpip | ID = 4199
Description = The system detected an address conflict for IP address 192.168.1.3
with the system having network hardware address 00-04-76-6F-30-A4. Network operations
on this system may be disrupted as a result.

Error - 12/20/2011 5:46:11 PM | Computer Name = Jimmy-Laptop | Source = Tcpip | ID = 4199
Description = The system detected an address conflict for IP address 192.168.1.2
with the system having network hardware address 00-18-8B-6F-6A-D4. Network operations
on this system may be disrupted as a result.

Error - 12/31/2011 11:42:25 AM | Computer Name = Jimmy-Laptop | Source = EventLog | ID = 6008
Description = The previous system shutdown at 10:39:58 AM on ?12/?31/?2011 was unexpected.
  • 0

#5
CompCav
Posted 02 August 2012 - 02:23 PM

CompCav

    Member 5k

  • Expert
  • 12,454 posts
Step 1.

Uninstall uTorrent , P2P is just a highway for malware into your computer.


Step 2.

If you have Malwarebytes 1.6 or better installed please disable it for the duration of this run
To disable MBAM
Open the scanner and select the protection tab
Remove the tick from "Start with Windows"
Reboot and then run OTL
Posted Image




  • Please reopen Posted Image on your desktop.
  • Copy and Paste the following code into the Posted Image textbox.

    :OTL
IE - HKU\S-1-5-21-627423442-2963774430-1367278436-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.ask.com/?l=dis&o=14196
IE - HKU\S-1-5-21-627423442-2963774430-1367278436-1001\..\SearchScopes\{7951D190-6B55-4130-8925-60E4F43E600D}: "URL" = http://websearch.ask...60-26F890FFE9A6
FF - prefs.js..browser.search.defaultengine: "Ask.com"
FF - prefs.js..browser.search.defaultenginename: "Ask.com"
FF - prefs.js..browser.search.order.1: "Ask.com"
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.3.1: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.3.1: C:\Program Files (x86)\Oracle\JavaFX 2.0 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation)
[2011/12/17 00:00:28 | 000,000,000 | ---D | M] (XUL Cache) -- C:\Users\Jimmy\AppData\Roaming\Mozilla\Firefox\Profiles\tkmjh3d4.default\extensions\{e022b213-1262-4d05-8383-0b30fd2fcae0}
[2011/11/07 13:46:38 | 000,002,568 | ---- | M] () -- C:\Users\Jimmy\AppData\Roaming\Mozilla\Firefox\Profiles\tkmjh3d4.default\searchplugins\askcom.xml
O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Oracle\JavaFX 2.0 Runtime\bin\jp2ssv.dll (Oracle Corporation)
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKU\S-1-5-21-627423442-2963774430-1367278436-1001\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/...indows-i586.cab (Java Plug-in 10.3.1)
O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-0017-0000-0003-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.7.0_03)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.7.0_03)
O33 - MountPoints2\{7b40a99e-4cf0-11e0-8903-74f06dc1f852}\Shell - "" = AutoRun
O33 - MountPoints2\{7b40a99e-4cf0-11e0-8903-74f06dc1f852}\Shell\AutoRun\command - "" = H:\TL-Bootstrap.exe
O33 - MountPoints2\{92759ffc-4374-11e0-a040-74f06dc1f852}\Shell - "" = AutoRun
O33 - MountPoints2\{92759ffc-4374-11e0-a040-74f06dc1f852}\Shell\AutoRun\command - "" = I:\setup.exe
O33 - MountPoints2\{9844d380-4055-11e0-adc6-74f06dc1f852}\Shell - "" = AutoRun
O33 - MountPoints2\{9844d380-4055-11e0-adc6-74f06dc1f852}\Shell\AutoRun\command - "" = H:\LaunchU3.exe -a
[2012/07/27 21:00:35 | 000,000,000 | ---D | C] -- C:\ProgramData\225932DF004E8D06C40B590B4F147CE7
[2012/07/27 10:51:21 | 000,000,000 | -HSD | C] -- C:\Windows\SysNative\%APPDATA%
[2012/08/02 13:43:37 | 000,000,072 | ---- | M] () -- C:\ProgramData\-P0LhWq4JaMxCpmr
[2012/08/02 13:43:37 | 000,000,072 | ---- | M] () -- C:\ProgramData\-P0LhWq4JaMxCpm
[2012/08/02 13:42:54 | 000,000,368 | ---- | M] () -- C:\ProgramData\P0LhWq4JaMxCpm
[2012/08/02 02:35:23 | 000,000,681 | ---- | M] () -- C:\Users\Jimmy\Application Data\Microsoft\Internet Explorer\Quick Launch\File_Recovery.lnk
[2012/08/02 02:35:23 | 000,000,657 | ---- | M] () -- C:\Users\Jimmy\Desktop\File_Recovery.lnk
[2012/07/21 17:32:40 | 000,000,969 | ---- | M] () -- C:\Users\Jimmy\Application Data\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk
[2011/11/07 23:31:27 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\a7fEL8ghYUlBx01
[2011/11/07 23:07:52 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\AA11uuvD2obF4m5
[2011/11/07 22:37:22 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\aAAA0uucS2ib3pG
[2011/11/07 22:47:11 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\aaammH6ssJ
[2011/11/07 23:32:41 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\aBtxP0ycSiDoFmW
[2011/11/07 23:32:42 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\ac1Dnp5sJ8hjeIz
[2011/11/07 23:37:37 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\AcbGH7wrO
[2011/11/07 23:39:20 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\acSSiDoonF
[2011/11/07 22:42:52 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\aD33ppnG4aQH6W7
[2011/11/07 23:10:41 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\ADDD33onG4am6sJ
[2011/11/07 23:05:39 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\aHH66sWKK7EL9Tq
[2011/11/07 23:32:18 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\ajCeBrNxAu
[2011/11/07 23:39:03 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\ajCkBzNx0SiFpGa
[2011/11/07 22:44:50 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\AJJ77fEEL8gZqYC
[2011/11/07 23:41:23 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\allIIBrrPNyAS3m
[2011/11/07 23:41:23 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\allIIBzPyxuSo3m
[2011/02/22 18:49:39 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\Amazon
[2011/11/07 23:01:23 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\AOOBttPP0yc1iD2
[2011/11/07 23:40:55 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\Apa6Wf9TjeVz
[2011/11/07 22:55:10 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\APNNyyxA1
[2011/11/07 22:42:31 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\AQQJJ6dEK8fR
[2011/11/07 22:48:15 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\AsssWWJ7d
[2011/02/22 18:55:30 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\Asus WebStorage
[2011/11/07 23:12:11 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\aUUCCeelIBrPNxA
[2011/11/07 23:37:43 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\AVlBtP0Ai
[2011/11/07 23:12:17 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\AyyyxAA0uvS2
[2011/11/07 23:40:42 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\AZhCUrOtPySi
[2011/11/07 23:40:04 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\b4m5JdLRqYkVtyv
[2011/11/07 22:48:57 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\B777fRRL9gTqjCe
[2011/11/07 23:19:29 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\B888fRRL9hTqjCe
[2011/11/07 23:40:03 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\B8TqCkVOtP1DoFm
[2011/11/07 23:01:04 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\b9hhhYXwjUVelB
[2011/11/07 23:00:05 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\BAA11ivvD2oF4mH
[2011/11/07 23:39:30 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\bd8R9YwUeBzN1Do
[2011/11/07 22:48:50 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\bdEEKK8fRZ9hXwU
[2011/11/07 23:32:36 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\BDnFad8ZYw
[2011/11/07 23:33:41 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\BFsKYjeBPcu2Fms
[2011/11/07 22:31:54 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\BGGG5ssQJ6dE8fZ
[2011/11/07 22:38:38 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\bIIBBrzPPNxA1v2
[2011/11/07 22:38:17 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\BIIBBtzzPNyA1
[2011/11/07 22:52:38 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\BllOOBttzPycAiD
[2011/11/07 23:32:19 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\BNyxAuv2FmJ8TCz
[2011/11/07 23:40:17 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\bOSnWZVx1GsLYrP
[2011/11/07 22:44:14 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\BRRLL9hhTXjUCkI
[2011/11/07 23:07:28 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\BRRZZ9hhYXwUVlI
[2011/11/07 23:41:23 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\BtttzPNc1uDoF
[2011/11/07 22:50:39 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\bTXXqqjYCek
[2011/11/07 23:39:22 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\bUUCCekIIBzONx0
[2011/11/07 23:32:36 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\BvDon4msdZ
[2011/11/07 23:39:14 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\BvvDD3oonF4mH
[2011/11/07 22:44:07 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\BVVeelOOBtz0yA1
[2011/11/07 22:49:59 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\bvvSS2obbFp
[2011/11/07 23:19:35 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\bYYYCeekIVrONxA
[2011/11/07 23:33:01 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\BZUP3JqOAnQZeyo
[2011/11/07 23:32:51 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\c0Svo4ms7LgqXUl
[2011/11/07 23:04:02 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\C44aaQHH6sW7fL
[2011/11/07 23:32:11 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\c5WqrSDGQ6KEgYN
[2011/11/07 22:28:22 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\C666sWWK7fELgTq
[2011/11/07 23:01:57 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\c77ddELL8
[2011/11/07 22:54:11 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\c99hhYXXwjUelBt
[2011/11/07 22:45:31 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\CbbbF44pmG5sJ6E
[2011/11/07 23:40:32 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\CccSS1v3n4am5W7
[2011/11/07 23:37:34 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\cD4sdRjrx1o3
[2011/11/07 23:32:41 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\CgqhYkrlOtPySi
[2011/11/07 22:57:48 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\ciiibDD3onG4mHs
[2011/11/07 22:38:58 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\cjjUUCekkIrzOyx
[2011/11/07 22:31:34 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\CK88ggRZ9hYXwUe
[2011/11/07 22:53:57 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\cmGG55sQJ6dE8fZ
[2011/11/07 22:52:58 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\cmmmHH5sQJ7dK8R
[2011/11/07 23:39:59 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\cOt0c1v2n4HsJdK
[2011/11/07 23:05:33 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\CpnnnG5aQH6dW7R
[2011/11/07 22:32:35 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\cPP00uccS1iD
[2011/11/07 23:39:55 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\CppmH55s7E8R9X
[2011/11/07 23:39:54 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\CppmmH5ssQ7dE8
[2011/11/07 22:41:28 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\CPPPNyyxA1u
[2011/11/07 23:14:26 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\CqqhhYXwwkVelBz
[2011/11/07 23:38:53 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\cS22iib3n5QR
[2011/11/07 23:31:46 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\cu2qYeIzNxuS
[2011/11/07 22:49:31 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\CVVrrlONtxP0uSi
[2011/11/07 23:33:58 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\CwkIVlOtx0ciDna
[2011/11/07 23:04:55 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\CXXXqjjYCekIrzN
[2011/11/07 22:58:59 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\cXXXqqjUCekIrzN
[2011/11/07 22:48:29 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\cYYYCwwkUVrOBxP
[2011/11/07 22:52:17 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\cZZqqhYCCwUVrOt
[2011/11/07 23:18:49 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\d222oobF4
[2011/11/07 23:05:58 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\d33ppnG55aH6
[2011/11/07 22:34:58 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\d555sQQJ7dE8gZ9
[2011/11/07 23:09:25 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\D55ssQJJ6dE8fZ9
[2011/11/07 23:15:23 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\d999gTTZq
[2011/11/07 23:39:01 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\D9wetyubmQE
[2011/11/07 22:47:56 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\dAAA1iivD2oF4mH
[2011/03/02 02:57:47 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\DAEMON Tools Lite
[2011/11/07 23:39:29 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\daWETYIO0134678
[2011/11/07 23:37:42 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\dBx0c1voFaHs7E8
[2011/11/07 23:38:34 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\DdKfLgXYeIr
[2011/11/08 00:08:09 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\DdLgZhXkVltPyi2
[2011/11/07 22:40:00 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\DHH55sQJ7dEK8R9
[2011/11/07 23:40:34 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\Dms7E8RZhXjVlPc
[2011/11/07 23:18:54 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\dNNyyxA11uS2oFp
[2011/11/07 23:41:02 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\dOtPyAiDoFpHs7E
[2011/11/07 23:00:39 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\dpppmmH5s
[2011/11/07 22:50:52 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\drrrzzPNyxA1vSo
[2011/11/07 23:38:53 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\DrrzNyxuvS2bFpG
[2011/11/07 22:51:51 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\drrzzONtt
[2011/11/07 23:40:49 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\dRTUryuopQWRTUI
[2011/11/07 22:58:21 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\DTTXXqjjYCe
[2011/11/07 23:11:58 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\dTTXXqjjYCeIVzO
[2011/11/07 23:32:26 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\DW9YVx1n6EqUtSo
[2011/11/07 23:40:38 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\dXwjVelIBzycv2b
[2011/11/07 23:13:14 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\dyyycA1uuv2ob4m
[2011/11/07 23:32:55 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\E01Do4HWf8ZYkrB
[2011/11/07 22:55:54 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\e111uuvS2obFpm5
[2011/11/07 23:40:18 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\e1v2n4m5Q7EgZhX
[2011/11/07 23:41:10 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\e3n4Q6W7E9TqYwI
[2011/11/07 23:06:36 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\e666dWWK8fR
[2011/11/07 23:38:15 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\e66K7fLTqYC
[2011/11/07 23:33:13 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\EaH6dRTjeVOt0Sp
[2011/11/07 23:40:03 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\EBPy13Fm5JLgh
[2011/11/07 22:50:13 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\eCCCellIBrz
[2011/11/07 22:28:01 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\ehhTTXwjjUelIr
[2011/11/07 22:54:51 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\EhTTXXqjUCekIrO
[2011/11/07 22:59:25 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\eJJJ7ffEL8gTqh
[2011/11/07 23:02:36 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\ejjjUUVelIBtPNc
[2011/11/07 22:40:47 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\ekkUUVrrlOBxPyc
[2011/11/07 23:38:53 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\EnnGG5aQHd7LgXY
[2011/11/07 23:01:43 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\ENyyccA1uvD2b
[2011/11/07 23:33:37 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\eo3GQdKR9UkOy0S
[2011/11/07 23:15:58 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\eOOOBttzP0y
[2011/11/07 23:41:23 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\EpmmG5ssQJdE8f9
[2011/11/07 23:31:35 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\eQJdK9qCkrNxuS3
[2011/11/07 22:42:05 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\eSS11ibDD3nG4m6
[2011/11/07 23:33:53 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\esWK7ELgZCIrOPc
[2011/11/07 23:41:23 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\eTTXXwjjUClIBPy
[2011/11/07 23:31:54 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\EuS2Fp5JWR9qCrN
[2011/11/07 23:31:56 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\ewkIVltPcDoaHsL
[2011/11/07 23:14:44 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\eWWWJ77dEL8
[2011/11/07 22:30:52 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\eXXXqqjYCekIrzN
[2011/11/07 22:43:53 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\EYYYXwwjUVelBtP
[2011/11/07 23:09:57 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\F000yccS1
[2011/11/07 23:32:35 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\f9TqYCwkIOx0c
[2011/11/07 23:39:59 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\Fa5W7EL8RqYwUeO
[2011/11/07 23:38:20 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\faQQH6K7fgXjCkV
[2011/11/07 23:33:14 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\fbnGaKLqCkrNPc1
[2011/11/07 23:39:59 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\fc1D2on4ms
[2011/11/07 22:33:51 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\FCCeelIIB
[2011/11/07 23:37:57 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\fD33onaHsWJ7E8R
[2011/11/07 22:27:19 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\FEELL8ggTZqYCkU
[2011/11/07 23:37:57 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\FgRZZqhYwkUVlB0
[2011/11/07 23:38:50 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\FIIVVrlOx
[2011/11/07 22:30:46 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\FJJJ66dEK8fR9hX
[2011/11/07 23:40:09 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\fKgZYwUIzN124
[2011/11/07 23:15:39 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\fKK88gRRZ9hXwUV
[2011/11/07 23:37:30 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\fm5d89jlP1SFp
[2011/11/07 22:28:49 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\fNNNyccA1uv2oF4
[2011/11/07 22:44:56 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\foonnF4pmH
[2011/11/07 23:39:58 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\fOtxyc13oa
[2011/11/07 23:04:36 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\FQQHH6ssWK7ELgT
[2011/11/07 22:29:09 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\fQQJJ6dWWKfRLhX
[2011/07/07 13:18:26 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\FrostWire
[2011/11/07 23:31:56 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\FS2ib3naH7EgZYk
[2011/11/07 23:32:41 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\fs7E8gTZYkVOx0c
[2011/11/07 23:33:07 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\fsQJd8fZhjeIzAv
[2011/11/07 23:33:56 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\fUCIBryxAu2bp
[2011/11/07 23:16:55 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\fuuccS2iiD
[2011/11/07 23:38:54 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\FXXqYekIVzNx
[2011/11/07 22:59:04 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\FYCCeekIVrzONx0
[2011/11/07 23:32:35 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\fYCwkVlNx01Dn
[2011/11/07 23:37:21 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\FzOONNtxA0uc2iD
[2011/11/07 23:33:19 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\G0ucS1i3GmW7LTq
[2011/11/07 22:50:33 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\g222oobF3pmGaQ
[2011/11/07 23:07:08 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\g2ooonF4pmH5sJ
[2011/11/07 22:50:58 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\g33ppnG55aH6dK7
[2011/11/07 23:13:28 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\G77ddEKK8gZ9h
[2012/08/02 04:05:58 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\Gaming Mouse
[2011/11/07 22:42:46 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\GCeeelIBrzPNyAu
[2011/11/07 23:33:27 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\GeIBzOx0Si
[2011/11/07 22:41:02 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\GJ777fEL8gTZq
[2011/11/07 22:41:22 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\gJJ77ddEK8gZ9YX
[2011/11/07 23:38:59 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\gkIVrNxASiDpGaH
[2011/11/07 23:07:33 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\GlllIIBtzPNyA
[2011/11/07 22:47:36 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\gmmmH55sQJ7EK8R
[2011/11/07 22:51:38 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\GQQHH6ssWK7EL
[2011/11/07 22:35:39 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\gRRLL9ggTXqYCkI
[2011/11/07 23:08:25 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\GtttxPP0ycSiv3o
[2011/11/07 23:03:16 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\GTXXwwjUCelIrzN
[2011/11/07 23:41:23 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\gUUCCelIBrzPyx1
[2011/11/07 23:11:14 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\GuuvvS22ib3pn
[2011/11/07 23:39:54 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\GvvvD22onF
[2011/11/07 22:42:10 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\gVVVellOBtzPyc1
[2011/11/07 23:38:20 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\GWWWK77RL9XjYeV
[2011/11/07 22:47:50 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\gxxPP0ycS1ivDoF
[2011/11/07 23:41:18 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\gyAuSoFpGaJ
[2011/11/07 22:42:25 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\GYXXwwjUVe
[2011/11/07 23:31:23 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\GzP0ycA1iDnpH
[2011/11/07 22:43:27 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\H1iivvD3onF4aH
[2011/11/07 23:18:30 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\h4ppmmG5sQJ6dKf
[2011/11/07 22:27:40 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\H777dEEK8gRZhYw
[2011/11/07 22:45:37 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\H7ffRRL9gTX
[2011/11/07 23:41:23 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\HBBrrPPNyA1S3m5
[2011/11/07 23:41:23 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\HBBrrPPNyxA1vSo
[2011/11/07 22:29:03 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\hDDD2oonF4pm5sJ
[2011/11/07 23:33:55 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\HEg9XjeBzNAu2bp
[2011/11/07 23:15:09 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\HgRRRZqhYXw
[2011/11/07 23:40:42 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\HHsfLTqCUlt0ioH
[2011/11/07 23:03:41 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\hibbFF3pnG5aQ6W
[2011/11/07 22:44:35 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\HNNNtxxP0ucSib
[2011/11/07 22:26:44 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\HQHH66dWK7fR9gX
[2011/11/07 23:33:00 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\HqrcGJgqCUl
[2011/11/07 23:31:58 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\HRhwjCIrzNA
[2011/11/07 22:32:50 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\HssWWK7fEL9gTqY
[2011/11/07 23:38:53 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\hTqUeIBrzNxuv2b
[2011/11/07 22:40:20 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\HTTTXqqjUCeIBz
[2011/11/07 22:40:41 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\hTTTXqqjYCeIVrO
[2011/11/07 23:38:04 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\HUeIrN1SFG689q
[2011/11/07 22:31:48 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\hWJJ77dEL
[2011/11/07 22:49:53 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\HwwwjUUVelIBzPy
[2011/11/07 23:37:57 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\hYYYwwkUVelBzPy
[2011/11/07 22:32:29 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\hzzOONyyxAuvSib
[2011/11/07 23:32:45 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\I0Sbo4m6JEgqYwU
[2011/11/07 23:38:25 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\I2b3pnGaa
[2011/11/07 22:59:47 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\i66ddEK88f
[2011/11/07 23:37:49 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\I6EfZ9TwUeIr
[2011/11/07 23:33:57 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\I7E9TZjwk
[2011/11/07 23:38:03 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\i8RqYUeOzci4JgX
[2011/11/07 22:50:19 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\iaaaQJJ6dW
[2011/11/07 22:27:05 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\iammHH6sWJ7fL8T
[2011/11/07 23:41:05 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\ib3GHsKfLgqYw
[2011/11/07 22:55:48 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\iBttzzPNycA1vDo
[2011/11/07 22:46:12 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\IfffEEL9gTZqYCk
[2011/11/07 23:32:35 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\IfLTjwkVOx0S
[2011/11/07 23:18:35 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\IG55aaQJ6dWKfR9
[2011/11/07 23:38:19 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\IGG55aQHH6WK7Lg
[2011/11/07 23:33:06 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\IH5sWd8ZYklt0Ai
[2011/11/07 23:19:54 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\iiibbD33pn4aQ
[2011/11/07 23:39:22 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\ijjUUCeekIBzOyx
[2011/11/07 22:44:29 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\ijjYYCeekIrzO
[2011/11/07 23:08:11 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\illlOBBtzP0yA1v
[2011/11/07 23:33:13 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\IONxAuF3p5HKRgX
[2011/11/07 23:38:50 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\iOOOBttxP0yS1iD
[2011/11/07 23:37:53 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\IpHsJdKgZYwUeIt
[2011/11/07 22:56:32 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\ipppmGG5sQJ6EKf
[2011/11/07 23:02:56 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\iPPPNNycA1uv2oF
[2011/11/07 23:38:49 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\IQHH6ssWK7fE
[2011/11/07 23:38:21 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\irOtu1bDnG
[2011/11/07 22:58:45 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\ItttxAA0ucS2bDp
[2011/11/07 23:38:20 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\iuuu22ib3pGQHWK
[2011/11/07 22:57:24 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\IUUUVrrlO
[2011/11/07 23:32:46 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\Ivo4Hs78YVz1oH7
[2011/11/07 23:38:57 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\iWWWK88fRL9hX
[2011/11/07 23:31:50 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\IxcSiD3pG
[2011/11/07 23:20:32 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\izzPPNyyxA1vSob
[2011/11/07 23:40:33 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\j00ySivDn4msJdL
[2011/11/07 23:40:42 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\J1voFaHsJ
[2011/11/07 23:39:57 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\j34HW7E9Tj
[2011/11/07 22:59:18 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\jbbFF3pmG5Q6dKf
[2011/11/07 22:47:31 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\jBBttxPP0yc1iD3
[2011/11/07 22:26:38 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\jcccA11uvD2bFpm
[2011/11/07 23:11:52 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\jCCeekIIBr
[2011/11/07 23:39:54 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\jF44ppmH5sQJd
[2011/11/07 23:33:25 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\JFmsJEg9XUltPcu
[2011/11/07 23:01:37 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\JhhYYXwwkUVlOtz
[2011/11/07 23:33:37 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\jhTXeIzyxS
[2011/11/07 23:20:13 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\jiiibFF3pn
[2011/11/07 23:02:02 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\JjjjUUVelIBtPNc
[2011/11/07 23:39:25 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\JkrOBx0c1iDnmsd
[2011/11/07 23:09:44 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\jmmHH5ssQJ7EKgR
[2011/11/07 23:12:30 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\JPPNNyxxA
[2011/11/07 22:58:07 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\JpppnGG4aQH6WKf
[2011/11/07 23:39:31 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\JQJJ78ZjVltNuop
[2011/11/07 23:39:22 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\JqqjjUCeekBrzNx
[2011/11/07 23:39:30 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\JQQQJd8R9YwUeBz
[2011/11/07 23:41:23 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\JR9hhTXwjCelBzy
[2011/11/07 23:31:48 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\js7KR9XjVltNAvo
[2011/11/07 23:32:23 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\ju2Fms6Kf9
[2011/11/07 23:38:24 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\Jx0uSb33pGadWfL
[2011/11/07 23:33:18 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\JXjeVzt0uSbp
[2011/11/07 23:41:08 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\JyAuDoFpG
[2011/11/07 23:33:06 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\jYklt0Ai2p5Jd8Z
[2011/11/07 23:40:54 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\JZXeBP1245689jC
[2011/11/07 23:08:47 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\K888fRRL9hTqjUe
[2011/11/07 23:39:18 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\kddWWK77fRgTXjC
[2011/11/07 23:38:19 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\kdWKfLhTXUeIrOx
[2011/11/07 23:37:57 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\KEE8ggZZqYwkU
[2011/11/07 23:13:08 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\keellIBttzNyc1
[2011/11/07 22:37:42 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\kFFF4aamH5sJ7E
[2011/11/07 23:31:40 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\kG5QJdKR9TqUeOu
[2011/11/07 23:06:17 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\kGGG5aaQH6d
[2011/11/07 22:38:03 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\khhYYXwjUVelIt
[2011/11/07 23:40:00 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\kly1DoFpGsJdKf
[2011/11/07 22:26:17 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\kmmHH5sWWJd
[2011/11/07 23:38:19 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\knnGG5aQH6dW7R
[2011/11/07 23:40:00 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\kVtcvFGJEfTUBy
[2011/11/07 23:01:18 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\kVVVrllOBtxPyc1
[2011/11/07 22:26:23 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\KYYXXwjUVelIBzN
[2011/11/07 23:31:34 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\kZYkeBci2npQKRh
[2011/11/07 23:20:08 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\l111uvvS2
[2011/11/07 23:32:20 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\L56KRgXjYeIrNAc
[2011/11/07 22:40:06 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\L66ddWK8fRL9hX
[2011/11/07 23:19:49 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\LAA00uvSSib
[2011/11/07 23:39:54 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\LAAA11ivD2on4pH
[2011/11/07 23:32:21 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\LbD3o4mHsJEghCl
[2011/11/07 23:31:51 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\lCwrNPciDna6JE8
[2011/11/07 22:56:26 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\LDDD2oonF4pm5sJ
[2011/11/07 23:32:27 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\ldE8ZYwVIzy1
[2011/11/07 23:37:15 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\lEEKK8fRRZhT
[2011/11/07 23:40:03 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\lEL8TqYkOPSn5dR
[2011/11/07 23:31:16 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\LG5aaHHdWK7R9TX
[2011/11/07 22:30:32 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\lGGG55aQJ6dW8fL
[2011/11/07 22:46:37 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\LhhYYXwwkUVlOtz
[2011/11/07 23:05:52 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\LiibbF33pn5
[2011/11/07 23:33:31 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\LjeBPcu2FGQ6KRh
[2011/11/07 23:39:22 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\lkkIIBrzzNyA0vS
[2011/11/07 23:39:22 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\lkkIIBrzzNyx0v2
[2011/11/07 23:39:22 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\lkkkIBBrzONyA0v
[2011/11/07 22:36:35 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\LlOOBBtzP0y
[2011/11/07 23:17:00 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\LOONNtxxP0uS1bD
[2011/11/07 22:31:27 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\LqhhYYCwkUV
[2011/11/07 22:57:42 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\lSS22ibbD3nG4QH
[2011/11/07 22:47:17 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\LssWWJ7ddE8
[2011/11/07 23:40:32 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\lsWJfLgZYwUVlBx
[2011/11/07 22:36:20 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\LsWJJ7ddELgRZhY
[2011/11/07 23:40:32 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\lsWWJ77fLgZqYwU
[2011/11/07 23:39:30 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\Lvv2on4m5QJKgZ
[2011/11/07 23:33:53 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\lWKEgZCIrOPci3n
[2011/11/07 23:37:47 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\LwOP13as7ghUByi
[2011/11/07 23:38:58 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\lYIrzOONtxA0cSi
[2011/11/07 23:38:04 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\Lyu2oFp5Q6W8R9T
[2011/11/07 23:41:05 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\lZluQhBva9VupWT
[2011/11/07 23:39:31 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\LzN1DobFQKZXCBN
[2011/11/07 23:39:31 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\LzNAuDo4m5Q6E8R
[2011/11/07 23:33:39 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\mDnamHs7dL
[2011/11/07 23:39:18 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\mGG55aQQH6dK7
[2011/11/07 23:41:23 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\mIIIBzPyxuSo3m5
[2011/11/07 23:37:52 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\mm5W7E8RhXkVlBz
[2011/11/07 23:05:20 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\mnnGG4aamHsWJfE
[2011/11/07 23:38:20 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\mWK7ggTXjCIrOtA
[2011/11/07 23:14:50 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\mWWWJ77dEL
[2011/11/07 23:38:02 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\mx01voFaH5Jd8Rq
[2011/11/07 23:41:23 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\N66ddEK8fRh
[2011/11/07 22:32:14 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\N66ddWK8fRL9hXj
[2011/11/07 23:40:51 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\n69kAp7Yt3WqOSn
[2011/11/07 22:34:38 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\N777ddEL8gRZhYw
[2011/11/07 23:38:49 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\n777fLTTZqjCwIr
[2011/11/07 22:37:01 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\N888fRRL9hTqjUe
[2011/11/07 23:10:03 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\NBBBtzzP0yc1iD2
[2011/11/07 23:39:22 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\NBBrrzONyx0u3pH
[2011/11/07 23:31:56 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\ncSibDnQ6KgZwIl
[2011/11/07 23:33:09 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\nf9ZjwVu1DnaHW7
[2011/11/07 23:37:57 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\NhhYkkUVelt0c1v
[2011/11/07 23:33:08 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\NIrzNA1vF5WLqIz
[2011/11/07 23:39:55 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\NKKK8ggRZ9hXjlB
[2011/11/07 22:33:57 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\NkkkIVVrzONxAuc
[2011/11/07 23:08:06 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\nkkUUVVrlOBxPyc
[2011/11/07 23:20:27 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\nlllIIBrzPNyA1v
[2011/11/07 22:33:36 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\nmGG55aQJ6dWKfL
[2011/11/07 23:40:03 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\Nna6W7LgZhC
[2011/11/07 23:41:22 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\noonFHsQd
[2011/11/07 23:14:12 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\nPPNNyxxA1uS2bF
[2011/11/07 22:52:11 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\npppnGG4aQHs
[2011/11/07 22:43:33 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\NRRRZqqhYXw
[2011/11/07 23:33:34 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\NuiG6EZkNc13GH
[2011/11/07 22:33:31 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\NUUUVeelIBtzNyA
[2011/11/07 23:33:11 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\NyAvoFms7RhjlNv
[2011/11/07 23:40:38 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\nYwwkeOBt0y1vo4
[2011/11/07 22:57:10 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\NyyccA1iiv2on4p
[2011/11/07 23:33:31 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\nz1o4s6KRhUlrNA
[2011/11/07 23:33:33 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\O0uin6KEgZYkr
[2011/11/07 22:34:12 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\o22iibFF3pn5aHd
[2011/11/07 23:32:14 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\o8fZXweBzNuopa6
[2011/11/07 22:45:10 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\oBBttxPP0yS
[2011/11/07 23:06:11 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\OFF33pmmG5
[2011/11/07 23:41:21 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\OhhYXwklBz0Ai
[2011/11/07 23:39:13 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\okVzNx0ciDp
[2011/11/07 23:38:41 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\On4HsJdLgZhwU
[2011/11/07 23:18:16 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\onnnG55aQH6WKfR
[2011/11/07 23:32:51 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\oo4HW7LgZhXUeBP
[2011/11/07 23:16:17 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\oqqqhYYXwkUelOt
[2011/11/07 23:41:16 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\oRqYwUlBz0c1DoF
[2011/11/07 23:41:16 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\oRZqYwUeOtPc1v2
[2011/11/07 23:38:27 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\OtPyAiDoFpHJKZX
[2011/11/07 23:13:48 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\OuvvvD2obF4pm5Q
[2011/11/07 23:41:23 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\OwjjUUCelIBzPyA
[2011/11/07 23:32:14 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\owUlrNAu2Fma6KR
[2011/11/07 23:41:23 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\OwwwjjUCelIBzPy
[2011/11/07 23:37:25 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\OyyxAuv2FpGaQ6W
[2011/11/07 22:39:19 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\p0uuccS1ibD3nGa
[2011/11/07 22:54:16 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\P1uuvvS2obF3pGa
[2011/11/07 22:29:30 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\P22iibD33pG4aHs
[2011/11/07 23:39:27 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\p2b3mGGQW8RhTjC
[2011/11/07 23:32:40 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\p6sWJ7E8Z
[2011/11/07 22:56:51 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\P8gggRZ9hYXwjVl
[2011/11/07 23:39:27 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\P8RL9XjeIrOy0u
[2011/11/07 22:29:44 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\P999gTTXqjY
[2011/11/07 23:38:53 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\paaQQH6dW7fL9Tq
[2011/11/07 23:31:50 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\PaQH6dWK79XYkrO
[2011/11/07 22:46:32 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\PDD33onnG4aH6WJ
[2011/11/07 23:13:34 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\PddWWK88fRLhTqj
[2011/11/07 23:37:43 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\peBPA2ps7ZXVlB0
[2011/11/07 23:32:35 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\pf9XjeVzNAc2p4Q
[2011/11/07 22:34:52 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\pffEEL88gTZhYwk
[2011/11/07 22:31:07 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\pGGG55aQH6dW
[2011/11/07 23:38:59 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\pii3GQWLgjwV
[2011/11/07 23:12:55 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\PjjjUUCelIBrPN
[2011/11/07 23:17:38 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\PkIIVVrzONt
[2011/11/07 23:37:43 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\pkkUeOtPc1v2FpH
[2011/11/07 23:33:32 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\PkrNxu2Fna6KRg
[2011/11/07 23:16:03 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\plIIBBtzP
[2011/11/07 23:11:33 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\PLL99gTXXqYCeIr
[2011/11/07 22:34:32 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\PmmmH66sWJ7ELgT
[2011/11/07 23:40:03 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\PoGHsJE8TqC
[2011/11/07 23:40:38 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\pqqhhYXXwkUelBt
[2011/11/07 23:41:06 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\pqYwINPuSiDo
[2011/11/07 23:39:27 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\PRL9hTqUeIrOyA
[2011/11/07 23:06:30 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\PsssQJJ6dEK
[2011/11/07 22:43:07 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\pttxxA0ucS2ib3n
[2011/11/07 23:37:44 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\pwwwjVItPy1v2Fp
[2011/11/07 23:32:01 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\Px0Sb3GQs7L
[2011/11/07 22:32:56 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\PXXwwkUVVeOBtPy
[2011/11/07 23:14:07 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\q444pmmG5
[2011/11/07 23:33:53 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\Q4HsWKEgZCIrOPc
[2011/11/07 23:33:53 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\Q4HsWKfL9ZCIrOP
[2011/11/07 23:03:21 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\qBBrrzPNNyA1uSo
[2011/11/07 22:41:08 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\qddEEK88g
[2011/11/07 23:33:49 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\QE8ZYkrlBPy13F
[2011/11/07 23:08:31 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\QFFF4aamH5sW7d
[2011/11/07 23:37:22 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\qIIVVrllONxP
[2011/11/07 23:38:24 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\QIx0uSb33GadWfL
[2011/11/07 23:17:19 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\QkkkIIVrlONtP0
[2011/11/07 23:32:43 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\QNuopEeIBNAvo3
[2011/11/07 23:33:34 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\QpGQ6KEgZYkrNPc
[2011/11/07 22:36:55 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\qpppmmH5sQJ7EKg
[2011/11/07 22:53:12 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\QQQJJ7ddEKgRZhY
[2011/11/07 23:39:54 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\QVeelOBtzP0yA1v
[2011/11/07 23:10:36 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\QxAA00ucS2ib3pG
[2011/11/07 23:41:14 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\QxvbnQWRXCVN023
[2011/11/07 22:54:31 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\R11uuvD2obF
[2011/11/07 23:33:04 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\r2bp4Qs7EgqYkrN
[2011/11/07 22:40:26 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\R777fRRL9gTqYCk
[2011/11/07 23:00:58 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\R77ddEL8gRZ
[2011/11/07 23:38:03 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\r88R9hTXw
[2011/11/07 23:40:03 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\R8TqhYkOPSn5dRh
[2011/11/07 23:40:36 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\R9qCIrNx0c2bp4
[2011/11/07 23:09:39 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\RammmH5sWJ7dE8R
[2011/11/07 22:45:52 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\RbbbF33pnG5aH6W
[2011/11/07 23:33:01 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\Rd8ZYjeIzy1voG
[2011/11/07 23:12:49 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\RddEEK8ggR9hYwj
[2011/11/07 22:49:17 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\rEELL9ggTZqYCkI
[2011/11/07 22:45:16 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\REKK88gRZ9h
[2011/11/07 23:38:16 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\RfE9TqYCwIrNt0
[2011/11/07 23:33:19 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\rfXItSpsLqCrOxu
[2011/11/07 23:38:55 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\rhYCwVVrlOBxPyc
[2011/11/07 23:31:31 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\ribF3pnG5HdKfLT
[2011/11/07 23:40:01 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\RIrOyAv2bFnaHKL
[2011/11/07 22:52:52 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\RLLL8ggRZqhXwkV
[2011/11/07 23:33:43 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\RlNt0ci3oms
[2011/11/07 22:27:46 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\RmGG55aQJ6d
[2011/11/07 22:29:50 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\ROBBttxP0ycSiv
[2011/11/07 23:13:53 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\RpppmGG5aQJ
[2011/11/07 23:10:55 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\rpppnGG4aQH6WKf
[2011/11/07 23:38:19 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\RQQHH6dWK7f9gqY
[2011/11/07 22:43:13 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\RrllOOBtxP0yS1
[2011/11/07 22:51:12 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\RrrzzONNyxAuv2i
[2011/11/07 23:33:14 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\RtxP0ucS1b3n4m
[2011/11/07 23:05:14 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\rtxxxA0ucS2i
[2011/11/07 23:33:20 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\RUltPc1Dn4HWd8Z
[2011/11/07 23:10:16 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\RwwwkIIVrlOtxP
[2011/11/07 23:38:59 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\S0234Q6W7E9ZjCk
[2011/11/07 23:33:58 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\s1bDoaH6sE8
[2011/11/07 23:40:38 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\S7ELgqYwketPyAi
[2011/11/07 22:37:36 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\S9ggTTZqjYCwI
[2011/11/07 22:46:51 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\SbDD33onG4amH
[2011/11/07 23:39:59 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\SBPyADnFp5s7EZj
[2011/11/07 23:14:31 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\sddEEK88gR9hYw
[2011/11/07 22:35:33 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\SellIIBrzPNyA1v
[2011/11/07 23:33:53 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\sG4sWKfLTqCIrOP
[2011/11/07 23:38:15 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\SH66ssWK7f
[2011/11/07 23:33:57 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\SH6s7E9TZYwIrOt
[2011/11/07 23:02:16 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\SkUUUVelOB
[2011/11/07 22:33:10 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\SOOOBttxP0yc1iD
[2011/11/07 23:33:46 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\SPNxu2Fma6KR9
[2011/06/05 21:33:28 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\SPORE
[2011/11/07 23:37:38 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\ssJdhXjVltP
[2011/11/07 23:33:15 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\StPci3F4m5
[2011/11/07 22:28:07 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\stttxAA0ucSib3p
[2011/11/07 23:39:22 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\sTTTXqqjUCeIBz
[2011/11/07 23:39:22 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\sTTXXqjjUCeIBz
[2011/11/07 23:39:22 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\sTXXXqjUCekIBz
[2011/11/07 23:40:47 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\sUOPSDF5EZwetyi
[2011/11/07 23:32:43 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\swjCelrPxu2Fma6
[2011/11/07 23:38:49 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\T22iibD3pG4aHsW
[2011/11/07 23:41:00 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\t2ib3nG5HdKfL
[2011/11/07 23:32:06 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\T5W9Yrcaf
[2011/11/07 22:37:16 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\TAA00uvvS
[2011/11/07 23:40:55 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\tadf9TUIO02pa6W
[2011/11/07 22:46:18 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\TBBBtxxP0yc1iD3
[2011/11/07 22:49:38 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\TcccA11iv
[2011/11/07 22:39:39 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\tdddELL8gRZqYXk
[2011/11/07 23:40:47 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\tdLRhXkVlBz0c1v
[2011/11/07 22:37:57 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\TELL88gTZqhYwkV
[2011/11/07 22:51:18 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\TffEEL99g
[2011/11/07 22:35:53 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\thhhTXXqjUCeIBz
[2011/11/07 23:39:22 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\tK88fRL9hT
[2011/11/07 23:32:37 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\TnFad8ZYwOyJ
[2011/11/07 23:38:25 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\TOttAuSiD3nGQ67
[2011/11/07 23:38:25 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\TOtxuin4HKLTjCk
[2011/11/07 23:41:22 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\tpHsJd8R9Y
[2011/11/07 23:10:22 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\tPP00ycSSivDon4
[2011/11/07 23:06:55 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\tppmmG5aQJ6dW8R
[2011/11/07 22:51:57 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\TppnnG44aQHsW7f
[2011/11/07 22:35:13 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\tPPNNyycA1uD2bF
[2011/11/07 23:40:56 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\tQ8XkN2Gd9YrADa
[2011/11/07 22:55:15 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\tqqqjUUCekIBzOy
[2011/11/07 23:41:23 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\tssQQJ6dEK
[2011/11/07 23:38:25 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\tWKfRRL9gXYVtc3
[2011/11/07 23:34:05 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\twVIzAom78YVzA2
[2011/11/07 23:37:57 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\u000yc1iD3onaHs
[2011/11/07 23:09:01 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\u55ssQJ6dEK8
[2011/11/07 23:03:56 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\UaaQQJ66dWKfR9h
[2011/11/07 23:07:47 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\uBBBtzzP0ycA
[2011/11/07 22:39:04 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\UCCCwkkIVrlOtx
[2011/11/07 23:38:58 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\uCeekkINuSiFpGa
[2011/11/07 22:57:29 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\udEELL8gRZqhYwU
[2011/11/07 22:41:44 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\UFFF33pnG5aQ6dK
[2011/11/07 23:08:42 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\UGGG5ssQJ6dE8f
[2011/11/07 22:30:26 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\uggRRZ99hYwjUel
[2011/11/07 23:39:27 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\ujCkBzNvi3n5QdK
[2011/11/07 22:35:59 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\ukIIVVrlONtx0uS
[2011/11/07 23:31:55 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\UOt0uS2ib3n
[2011/11/07 23:31:41 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\up4HWf9ZY
[2011/11/07 22:36:41 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\uppmmGssQJdEKfZ
[2011/11/07 23:32:05 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\uQd7R9gqYkrN
[2011/11/07 23:11:39 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\urrrzzONtxA0cSi
[2011/11/07 23:32:19 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\USb3GQ6KRgXYkr
[2012/07/23 12:16:49 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\uTorrent
[2011/11/07 23:31:46 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\uu2qYeIzNxuS
[2011/11/07 23:33:25 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\UUeBPci2Fms78ZY
[2011/11/07 23:39:31 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\uwlzNAv2b3m5Q6W
[2011/11/07 22:29:24 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\uXXXqqjUC
[2011/11/07 22:58:01 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\UYCCeekIVrzONx0
[2011/11/07 23:31:51 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\uZqjYCwkVNxc
[2011/11/07 22:56:13 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\v2oobbF4pmG5sJd
[2011/11/07 22:32:08 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\V44ppmHH5
[2011/11/07 22:48:10 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\V555sWWJ7
[2011/11/07 22:34:18 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\v66ssWJ77f
[2011/11/07 23:37:22 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\V99ggTZqjYCwkVl
[2011/11/07 23:40:41 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\vbD3n4H6WfgZCIr
[2011/11/07 23:12:36 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\veekkIBrrONyx0v
[2011/11/07 22:53:37 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\vffRRZ9hTXwjU
[2011/11/07 23:37:44 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\VhwUeIzNc1DoFp5
[2011/11/07 23:38:28 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\vjjjUCCelI
[2011/11/07 22:54:56 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\vkkkIVVrzONtA0c
[2011/11/07 23:41:17 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\VpHsJd8gZhXj
[2011/11/07 23:05:01 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\VPP00uccS1iD3nG
[2011/11/07 23:04:22 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\vPPP0uucS1
[2011/11/08 00:08:09 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\Vs6d8ZhwjClzyAv
[2011/11/07 23:33:11 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\Vs7LRZYUlBPcvF5
[2011/11/07 23:40:56 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\VSiDpGaHW7E9TqY
[2011/11/07 23:11:00 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\VssWWJ77f
[2011/11/07 23:39:44 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\VTCVB0ioasER
[2011/11/07 22:33:16 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\VtttzPPNycA1vDo
[2011/11/07 23:38:28 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\vUeIzNx1oF
[2011/11/07 23:04:41 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\vWWJJ7ffELgTZhY
[2011/11/07 23:39:28 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\VxAA0c2b3naHsKf
[2011/11/07 23:41:05 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\W2bpGHsKfLTq
[2011/11/07 22:41:50 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\W333onnG4am6sJ7
[2011/11/07 22:53:32 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\w44ppmH55sJ7dK8
[2011/11/07 23:31:58 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\W4ms6KRhwCIrNAu
[2011/11/07 23:09:06 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\w888fRRZ9hTXjUe
[2011/11/07 23:19:08 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\W99hhYXXwjUelBt
[2011/11/07 23:33:38 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\waQH6sWf9TjwVOt
[2011/11/07 23:40:38 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\WBBBttPcv2oF
[2011/11/07 23:39:01 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\wBzNcuDoFpGsJ6K
[2011/11/07 23:38:02 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\wc1v3n4msWdEgZh
[2011/11/07 23:38:02 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\wcSi3n4mHWdLgZh
[2011/11/07 23:37:57 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\WdddE88gZqhY
[2011/11/07 23:37:57 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\WdddE8ggZqhw
[2011/11/07 23:38:56 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\WdE8ggRZ9YwjeBt
[2011/11/07 23:31:22 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\WfEL8gTZqYwUrOt
[2011/11/07 23:33:41 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\WhwCIzy1Sb3Ga6K
[2011/11/07 23:40:32 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\whYYwUVlOBxPyci
[2011/11/07 23:38:53 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\wiib3nG5aQ6Kf
[2011/11/07 22:38:44 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\WjYYYCekI
[2011/11/07 23:39:54 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\wnFF44pmH5sQJ
[2011/11/07 23:39:54 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\wnnnF44pmH5s7
[2011/11/07 23:39:54 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\wnnnF44pmH5sJ
[2011/11/07 23:39:54 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\wnnnFF4pmH5sJ
[2011/11/07 23:32:43 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\wo3GQd8LhjerNS3
[2011/11/07 22:39:45 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\wooobFF4pmG5QJd
[2011/11/07 22:49:11 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\wQQQHH6dWK7fL9T
[2011/11/07 23:17:13 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\WqqqjYYCekIV
[2011/11/07 22:30:11 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\WRRZZ9hhYXjUVlI
[2011/11/07 23:37:18 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\WSS11ivvD3oF
[2011/11/07 23:03:02 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\wSSS22obF3pm5aJ
[2011/11/07 22:46:57 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\WssWWJ77dE8gRqh
[2011/11/07 23:15:28 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\WssWWJ77fE8gTqh
[2011/11/07 23:32:51 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\wSvo4HW7LgZhXUe
[2011/11/07 22:58:26 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\wwwwkIIVrlONx
[2011/11/07 23:17:57 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\wyyxxA0uuv2ib
[2011/11/07 22:48:36 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\WzzzPNNyxA1u
[2011/11/07 23:37:43 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\x00yA1ivoFpHsJE
[2011/11/07 23:38:04 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\x2oFp5Q6W8R9TqU
[2011/11/07 23:00:45 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\x444pmmH5sQ7dK8
[2011/11/07 23:32:23 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\X6Kf9XjIzAvoFp5
[2011/11/07 23:02:42 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\X888fRRL9hTXjUe
[2011/11/07 22:35:19 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\x99hhTXwwjCelBz
[2011/11/07 22:43:47 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\XaammH5ssW7dE
[2011/11/07 23:32:53 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\xAu2Fma6KRhqCIr
[2011/11/07 22:36:14 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\XbbDD3oonG4mHsW
[2011/11/07 23:40:30 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\XdK8fLhXjUCkr
[2011/11/07 23:33:21 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\XEKg9XwjeBPcu2F
[2011/11/07 23:33:20 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\Xf8ZYkrBxySvFa5
[2011/11/07 23:16:23 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\XhhYYXwkkUelOtz
[2011/11/07 22:55:29 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\XhTTXXwjUCelB
[2011/11/07 23:39:54 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\XkkUVeelOBtP0cA
[2011/11/07 22:28:28 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\XmmHH6ssWJfE8Tq
[2011/11/07 23:40:35 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\Xob3m5JdKfLhXjC
[2011/11/07 23:04:16 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\XppnnG4aaQ6sW7f
[2011/11/07 23:40:41 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\xqYeIrOtAuSiDpa
[2011/11/07 22:30:05 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\XSS11ibbD3nG4
[2011/11/07 23:15:04 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\XsWWJJ7fEL8gZqY
[2011/11/07 23:19:15 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\XTTTXqqjYC
[2011/11/07 23:33:32 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\xUCkrNxu2Fna6K
[2011/11/07 23:40:41 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\XuuSibpGaH6Wfgk
[2011/11/07 23:38:54 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\XVrrzzNx0c2bpGa
[2011/11/07 23:32:43 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\XXwjCelrPxu2Fma
[2011/11/07 23:32:17 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\XZhYwelBPc
[2011/11/07 23:00:19 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\Y444ammH5sW7dL8
[2011/11/07 23:16:41 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\y555ssWJ7dELgRq
[2011/11/07 23:40:38 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\y8RZ9XjUVelBtP
[2011/11/07 23:39:22 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\Y999hhTXqjUCk
[2011/11/07 23:39:22 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\Y999hTTXqjUek
[2011/11/07 23:41:24 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\Ya8TCByvbGHKLgq
[2011/11/07 23:33:14 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\yasKLgjwrNu
[2011/11/07 22:51:32 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\YBBBrrzONyxAuv2
[2011/11/07 23:31:59 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\yBPxuSbpGQd8LTj
[2011/11/07 23:32:10 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\YBrONy0v2pGQd7L
[2011/11/07 23:40:34 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\Yc1DoFp56E8R9Tw
[2011/11/07 23:03:35 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\yD22oobF4pm
[2011/11/07 23:39:54 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\yDDD2oonF4p
[2011/11/07 23:15:44 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\ydEEKK8fRZ9hTwU
[2011/11/07 23:31:50 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\YdK7fgqCkr
[2011/11/07 23:32:12 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\YeBzy1iDnp5JE8Z
[2011/11/07 23:37:30 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\yFpG68R9XkIrOx0
[2011/11/07 23:39:27 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\yFpmG5QWKfLhCkB
[2011/11/07 23:38:24 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\yFppn56dWfR9gX
[2011/11/07 23:40:38 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\ygRZhXwUVlBzyc
[2011/11/07 22:55:34 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\yIIBBrzzPNyA1vS
[2011/11/07 23:07:14 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\yJJ66ddEK8fZ9TX
[2011/11/07 23:38:20 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\yKK77fRL9gTqjCk
[2011/11/07 22:28:42 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\YkkUUVrrlOBxPyc
[2011/11/07 23:34:10 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\ykVOxPyciDn
[2011/11/07 22:45:58 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\YmmmH66sWJ7EL8T
[2011/11/07 23:38:20 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\YOxuuibpG4aQKEg
[2011/11/07 22:52:31 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\YqqqjYYCwkIVlOt
[2011/11/07 22:57:05 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\yrrrlOOBtxP0cS
[2011/11/07 23:09:20 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\YssQQJ77dE
[2011/11/07 22:56:45 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\yssWWJ7dEL8gRqY
[2011/11/07 23:17:33 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\yTTXXqjjUCkIBzO
[2011/11/07 23:32:04 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\Yv2FmaJdWf
[2011/11/07 22:39:25 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\YvDDD3onF4amH
[2011/11/07 23:32:02 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\ywkIlt0S1b34HWf
[2011/11/07 23:40:33 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\YyccSSiDn4m5JdL
[2011/11/07 23:40:32 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\YyyccSiDon4m5W7
[2011/11/07 23:06:49 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\Z11uuvDD2ob4pG5
[2011/11/07 23:18:11 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\Z222obbF3pm5aJ6
[2011/11/07 23:11:19 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\z33ppnG4aQH6sKf
[2011/11/07 23:16:36 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\Z7ffEEL8g
[2011/11/07 23:33:37 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\zBrzONyxASbn5W7
[2011/11/07 22:26:58 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\ZCCCekkrzNyA
[2011/11/07 23:02:22 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\zDD22obbF4pG5QJ
[2011/11/07 23:39:55 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\zddEEK8gRZ9hXjV
[2011/11/07 22:53:18 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\ZdEEK88fRZ9TXjU
[2011/11/07 23:31:31 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\zF3G5aQH6W7R9CI
[2011/11/07 23:41:13 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\ZFpmsJdKfZhXjCl
[2011/11/07 22:59:58 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\ZHHH6ssWK7fE9gZ
[2011/11/07 23:32:40 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\ZiD3onG4a6W7Egq
[2011/11/07 22:54:36 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\ZjjjUUCekIBr
[2011/11/07 22:59:40 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\zkkkUVVrlOBxP
[2011/11/07 23:37:35 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\zKRCIrNyy0Sb3n5
[2011/11/07 23:40:33 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\znn44mm5W7E8ghX
[2011/11/07 23:37:30 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\ZOx0v2bpGa6W
[2011/11/07 22:58:40 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\ZppnnG55a
[2011/11/07 22:53:51 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\zPPPNyycA1uv2oF
[2011/11/07 23:17:52 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\ZqqjjUCeekBrzNx
[2011/11/07 23:00:25 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\ZQQQJ77dEK8RZhY
[2011/11/07 22:27:26 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\ZttzzP00ycAi
[2011/11/07 22:31:13 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\zTTZZqhYYCkUVlB
[2011/11/07 22:56:07 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\zvDDD2onF4pmHsJ
[2011/11/07 23:33:13 | 000,000,000 | ---D | M] -- C:\Users\Jimmy\AppData\Roaming\zXUeBONyx0SFp

:files
ipconfig /flushdns /c


:reg


:Commands
[purity]
[resethosts]
[emptytemp]
[createrestorepoint]
  • Push Posted Image
  • OTL may ask to reboot the machine. Please do so if asked.
  • Click the OK button.
  • A report will open. Copy and Paste that report in your next reply.
  • If the machine reboots, the log will be located at C:\_OTL\MovedFiles\mmddyyyy_hhmmss.log, where mmddyyyy_hhmmss is the date and the time of the tool run.


Step 3.

Download and Install Combofix

Download ComboFix from one of the following locations:

Link 1
Link 2

VERY IMPORTANT !!! Save ComboFix.exe to your Desktop * IMPORTANT - Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you have difficulty properly disabling your protective programs, refer to this link here

Double click on ComboFix.exe & follow the prompts.
Accept the disclaimer and allow to update if it asks

Posted Image

Posted Image

When finished, it produces a log for you.
Please include the C:\ComboFix.txt in your next reply.



Notes:
1. Do not mouse-click Combofix's window while it is running. That may cause it to stall.
2. Do not "re-run" Combofix. If you have a problem, reply back for further instructions

Please make sure you include the combo fix log in your next reply as well as describe how your computer is running now

After the run you may have internet problems or access to something problems. Simply reboot the computer.


Step 4.

Please post:

OTL fix log
ComboFix.txt


Update me on how your computer is running.
  • 0

#6
words120
Posted 02 August 2012 - 03:42 PM

words120

    New Member

  • Topic Starter
  • Member
  • Pip
  • 4 posts
Here are the logs : OTLFIX

All processes killed
========== OTL ==========
HKU\S-1-5-21-627423442-2963774430-1367278436-1001\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
Registry key HKEY_USERS\S-1-5-21-627423442-2963774430-1367278436-1001\Software\Microsoft\Internet Explorer\SearchScopes\{7951D190-6B55-4130-8925-60E4F43E600D}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7951D190-6B55-4130-8925-60E4F43E600D}\ not found.
Prefs.js: "Ask.com" removed from browser.search.defaultengine
Prefs.js: "Ask.com" removed from browser.search.defaultenginename
Prefs.js: "Ask.com" removed from browser.search.order.1
Prefs.js: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24 removed from extensions.enabledItems
Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@java.com/DTPlugin,version=10.3.1\ deleted successfully.
C:\Windows\system32\npDeployJava1.dll moved successfully.
Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.3.1\ deleted successfully.
C:\Program Files (x86)\Oracle\JavaFX 2.0 Runtime\bin\plugin2\npjp2.dll moved successfully.
C:\Users\Jimmy\AppData\Roaming\Mozilla\Firefox\Profiles\tkmjh3d4.default\extensions\{e022b213-1262-4d05-8383-0b30fd2fcae0}\defaults\preferences folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\Mozilla\Firefox\Profiles\tkmjh3d4.default\extensions\{e022b213-1262-4d05-8383-0b30fd2fcae0}\defaults folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\Mozilla\Firefox\Profiles\tkmjh3d4.default\extensions\{e022b213-1262-4d05-8383-0b30fd2fcae0}\chrome folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\Mozilla\Firefox\Profiles\tkmjh3d4.default\extensions\{e022b213-1262-4d05-8383-0b30fd2fcae0} folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\Mozilla\Firefox\Profiles\tkmjh3d4.default\searchplugins\askcom.xml moved successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{DBC80044-A445-435b-BC74-9C25C1C588A9}\ deleted successfully.
C:\Program Files (x86)\Oracle\JavaFX 2.0 Runtime\bin\jp2ssv.dll moved successfully.
64bit-Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\Locked deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\Locked deleted successfully.
Registry value HKEY_USERS\S-1-5-21-627423442-2963774430-1367278436-1001\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{D4027C7F-154A-4066-A1AD-4243D8127440} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}\ not found.
Starting removal of ActiveX control {8AD9C840-044E-11D1-B3E9-00805F499D93}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ deleted successfully.
Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ deleted successfully.
Registry key HKEY_USERS\.DEFAULT\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found.
Starting removal of ActiveX control {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_USERS\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}\ not found.
Starting removal of ActiveX control {CAFEEFAC-0017-0000-0003-ABCDEFFEDCBA}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0017-0000-0003-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0003-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0003-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_USERS\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0003-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0017-0000-0003-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0003-ABCDEFFEDCBA}\ not found.
Starting removal of ActiveX control {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{7b40a99e-4cf0-11e0-8903-74f06dc1f852}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7b40a99e-4cf0-11e0-8903-74f06dc1f852}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{7b40a99e-4cf0-11e0-8903-74f06dc1f852}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7b40a99e-4cf0-11e0-8903-74f06dc1f852}\ not found.
File H:\TL-Bootstrap.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{92759ffc-4374-11e0-a040-74f06dc1f852}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{92759ffc-4374-11e0-a040-74f06dc1f852}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{92759ffc-4374-11e0-a040-74f06dc1f852}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{92759ffc-4374-11e0-a040-74f06dc1f852}\ not found.
File I:\setup.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{9844d380-4055-11e0-adc6-74f06dc1f852}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9844d380-4055-11e0-adc6-74f06dc1f852}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{9844d380-4055-11e0-adc6-74f06dc1f852}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9844d380-4055-11e0-adc6-74f06dc1f852}\ not found.
File H:\LaunchU3.exe -a not found.
Folder C:\ProgramData\225932DF004E8D06C40B590B4F147CE7\ not found.
C:\Windows\SysNative\%APPDATA%\Microsoft\Windows\IETldCache folder moved successfully.
C:\Windows\SysNative\%APPDATA%\Microsoft\Windows folder moved successfully.
C:\Windows\SysNative\%APPDATA%\Microsoft folder moved successfully.
C:\Windows\SysNative\%APPDATA% folder moved successfully.
C:\ProgramData\-P0LhWq4JaMxCpmr moved successfully.
C:\ProgramData\-P0LhWq4JaMxCpm moved successfully.
C:\ProgramData\P0LhWq4JaMxCpm moved successfully.
C:\Users\Jimmy\Application Data\Microsoft\Internet Explorer\Quick Launch\File_Recovery.lnk moved successfully.
C:\Users\Jimmy\Desktop\File_Recovery.lnk moved successfully.
C:\Users\Jimmy\Application Data\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk moved successfully.
C:\Users\Jimmy\AppData\Roaming\a7fEL8ghYUlBx01 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\AA11uuvD2obF4m5 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\aAAA0uucS2ib3pG folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\aaammH6ssJ folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\aBtxP0ycSiDoFmW folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\ac1Dnp5sJ8hjeIz folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\AcbGH7wrO folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\acSSiDoonF folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\aD33ppnG4aQH6W7 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\ADDD33onG4am6sJ folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\aHH66sWKK7EL9Tq folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\ajCeBrNxAu folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\ajCkBzNx0SiFpGa folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\AJJ77fEEL8gZqYC folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\allIIBrrPNyAS3m folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\allIIBzPyxuSo3m folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\Amazon folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\AOOBttPP0yc1iD2 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\Apa6Wf9TjeVz folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\APNNyyxA1 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\AQQJJ6dEK8fR folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\AsssWWJ7d folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\Asus WebStorage\UNIQUE folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\Asus WebStorage\TempUpload folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\Asus WebStorage\TempDownload folder moved successfully.
Folder move failed. C:\Users\Jimmy\AppData\Roaming\Asus WebStorage scheduled to be moved on reboot.
C:\Users\Jimmy\AppData\Roaming\aUUCCeelIBrPNxA folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\AVlBtP0Ai folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\AyyyxAA0uvS2 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\AZhCUrOtPySi folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\b4m5JdLRqYkVtyv folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\B777fRRL9gTqjCe folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\B888fRRL9hTqjCe folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\B8TqCkVOtP1DoFm folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\b9hhhYXwjUVelB folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\BAA11ivvD2oF4mH folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\bd8R9YwUeBzN1Do folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\bdEEKK8fRZ9hXwU folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\BDnFad8ZYw folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\BFsKYjeBPcu2Fms folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\BGGG5ssQJ6dE8fZ folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\bIIBBrzPPNxA1v2 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\BIIBBtzzPNyA1 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\BllOOBttzPycAiD folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\BNyxAuv2FmJ8TCz folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\bOSnWZVx1GsLYrP folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\BRRLL9hhTXjUCkI folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\BRRZZ9hhYXwUVlI folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\BtttzPNc1uDoF folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\bTXXqqjYCek folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\bUUCCekIIBzONx0 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\BvDon4msdZ folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\BvvDD3oonF4mH folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\BVVeelOOBtz0yA1 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\bvvSS2obbFp folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\bYYYCeekIVrONxA folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\BZUP3JqOAnQZeyo folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\c0Svo4ms7LgqXUl folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\C44aaQHH6sW7fL folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\c5WqrSDGQ6KEgYN folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\C666sWWK7fELgTq folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\c77ddELL8 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\c99hhYXXwjUelBt folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\CbbbF44pmG5sJ6E folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\CccSS1v3n4am5W7 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\cD4sdRjrx1o3 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\CgqhYkrlOtPySi folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\ciiibDD3onG4mHs folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\cjjUUCekkIrzOyx folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\CK88ggRZ9hYXwUe folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\cmGG55sQJ6dE8fZ folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\cmmmHH5sQJ7dK8R folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\cOt0c1v2n4HsJdK folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\CpnnnG5aQH6dW7R folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\cPP00uccS1iD folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\CppmH55s7E8R9X folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\CppmmH5ssQ7dE8 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\CPPPNyyxA1u folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\CqqhhYXwwkVelBz folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\cS22iib3n5QR folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\cu2qYeIzNxuS folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\CVVrrlONtxP0uSi folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\CwkIVlOtx0ciDna folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\CXXXqjjYCekIrzN folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\cXXXqqjUCekIrzN folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\cYYYCwwkUVrOBxP folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\cZZqqhYCCwUVrOt folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\d222oobF4 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\d33ppnG55aH6 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\d555sQQJ7dE8gZ9 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\D55ssQJJ6dE8fZ9 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\d999gTTZq folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\D9wetyubmQE folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\dAAA1iivD2oF4mH folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\DAEMON Tools Lite\IconsCache folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\DAEMON Tools Lite folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\daWETYIO0134678 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\dBx0c1voFaHs7E8 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\DdKfLgXYeIr folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\DdLgZhXkVltPyi2 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\DHH55sQJ7dEK8R9 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\Dms7E8RZhXjVlPc folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\dNNyyxA11uS2oFp folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\dOtPyAiDoFpHs7E folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\dpppmmH5s folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\drrrzzPNyxA1vSo folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\DrrzNyxuvS2bFpG folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\drrzzONtt folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\dRTUryuopQWRTUI folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\DTTXXqjjYCe folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\dTTXXqjjYCeIVzO folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\DW9YVx1n6EqUtSo folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\dXwjVelIBzycv2b folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\dyyycA1uuv2ob4m folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\E01Do4HWf8ZYkrB folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\e111uuvS2obFpm5 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\e1v2n4m5Q7EgZhX folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\e3n4Q6W7E9TqYwI folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\e666dWWK8fR folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\e66K7fLTqYC folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\EaH6dRTjeVOt0Sp folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\EBPy13Fm5JLgh folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\eCCCellIBrz folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\ehhTTXwjjUelIr folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\EhTTXXqjUCekIrO folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\eJJJ7ffEL8gTqh folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\ejjjUUVelIBtPNc folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\ekkUUVrrlOBxPyc folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\EnnGG5aQHd7LgXY folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\ENyyccA1uvD2b folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\eo3GQdKR9UkOy0S folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\eOOOBttzP0y folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\EpmmG5ssQJdE8f9 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\eQJdK9qCkrNxuS3 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\eSS11ibDD3nG4m6 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\esWK7ELgZCIrOPc folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\eTTXXwjjUClIBPy folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\EuS2Fp5JWR9qCrN folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\ewkIVltPcDoaHsL folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\eWWWJ77dEL8 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\eXXXqqjYCekIrzN folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\EYYYXwwjUVelBtP folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\F000yccS1 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\f9TqYCwkIOx0c folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\Fa5W7EL8RqYwUeO folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\faQQH6K7fgXjCkV folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\fbnGaKLqCkrNPc1 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\fc1D2on4ms folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\FCCeelIIB folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\fD33onaHsWJ7E8R folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\FEELL8ggTZqYCkU folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\FgRZZqhYwkUVlB0 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\FIIVVrlOx folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\FJJJ66dEK8fR9hX folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\fKgZYwUIzN124 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\fKK88gRRZ9hXwUV folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\fm5d89jlP1SFp folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\fNNNyccA1uv2oF4 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\foonnF4pmH folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\fOtxyc13oa folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\FQQHH6ssWK7ELgT folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\fQQJJ6dWWKfRLhX folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\FrostWire\themes\frostwirePro_theme folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\FrostWire\themes folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\FrostWire\image_cache\static.frostwire.com\images\overlays folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\FrostWire\image_cache\static.frostwire.com\images\banners folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\FrostWire\image_cache\static.frostwire.com\images folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\FrostWire\image_cache\static.frostwire.com folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\FrostWire\image_cache folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\FrostWire\azureus\torrents folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\FrostWire\azureus\tmp folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\FrostWire\azureus\plugins folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\FrostWire\azureus\net folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\FrostWire\azureus\logs\save folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\FrostWire\azureus\logs folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\FrostWire\azureus\dht folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\FrostWire\azureus\active folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\FrostWire\azureus folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\FrostWire\.NetworkShare\Incomplete folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\FrostWire\.NetworkShare folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\FrostWire\.AppSpecialShare folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\FrostWire folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\FS2ib3naH7EgZYk folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\fs7E8gTZYkVOx0c folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\fsQJd8fZhjeIzAv folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\fUCIBryxAu2bp folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\fuuccS2iiD folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\FXXqYekIVzNx folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\FYCCeekIVrzONx0 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\fYCwkVlNx01Dn folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\FzOONNtxA0uc2iD folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\G0ucS1i3GmW7LTq folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\g222oobF3pmGaQ folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\g2ooonF4pmH5sJ folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\g33ppnG55aH6dK7 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\G77ddEKK8gZ9h folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\Gaming Mouse folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\GCeeelIBrzPNyAu folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\GeIBzOx0Si folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\GJ777fEL8gTZq folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\gJJ77ddEK8gZ9YX folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\gkIVrNxASiDpGaH folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\GlllIIBtzPNyA folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\gmmmH55sQJ7EK8R folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\GQQHH6ssWK7EL folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\gRRLL9ggTXqYCkI folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\GtttxPP0ycSiv3o folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\GTXXwwjUCelIrzN folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\gUUCCelIBrzPyx1 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\GuuvvS22ib3pn folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\GvvvD22onF folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\gVVVellOBtzPyc1 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\GWWWK77RL9XjYeV folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\gxxPP0ycS1ivDoF folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\gyAuSoFpGaJ folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\GYXXwwjUVe folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\GzP0ycA1iDnpH folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\H1iivvD3onF4aH folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\h4ppmmG5sQJ6dKf folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\H777dEEK8gRZhYw folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\H7ffRRL9gTX folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\HBBrrPPNyA1S3m5 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\HBBrrPPNyxA1vSo folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\hDDD2oonF4pm5sJ folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\HEg9XjeBzNAu2bp folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\HgRRRZqhYXw folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\HHsfLTqCUlt0ioH folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\hibbFF3pnG5aQ6W folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\HNNNtxxP0ucSib folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\HQHH66dWK7fR9gX folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\HqrcGJgqCUl folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\HRhwjCIrzNA folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\HssWWK7fEL9gTqY folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\hTqUeIBrzNxuv2b folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\HTTTXqqjUCeIBz folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\hTTTXqqjYCeIVrO folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\HUeIrN1SFG689q folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\hWJJ77dEL folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\HwwwjUUVelIBzPy folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\hYYYwwkUVelBzPy folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\hzzOONyyxAuvSib folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\I0Sbo4m6JEgqYwU folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\I2b3pnGaa folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\i66ddEK88f folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\I6EfZ9TwUeIr folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\I7E9TZjwk folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\i8RqYUeOzci4JgX folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\iaaaQJJ6dW folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\iammHH6sWJ7fL8T folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\ib3GHsKfLgqYw folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\iBttzzPNycA1vDo folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\IfffEEL9gTZqYCk folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\IfLTjwkVOx0S folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\IG55aaQJ6dWKfR9 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\IGG55aQHH6WK7Lg folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\IH5sWd8ZYklt0Ai folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\iiibbD33pn4aQ folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\ijjUUCeekIBzOyx folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\ijjYYCeekIrzO folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\illlOBBtzP0yA1v folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\IONxAuF3p5HKRgX folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\iOOOBttxP0yS1iD folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\IpHsJdKgZYwUeIt folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\ipppmGG5sQJ6EKf folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\iPPPNNycA1uv2oF folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\IQHH6ssWK7fE folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\irOtu1bDnG folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\ItttxAA0ucS2bDp folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\iuuu22ib3pGQHWK folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\IUUUVrrlO folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\Ivo4Hs78YVz1oH7 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\iWWWK88fRL9hX folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\IxcSiD3pG folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\izzPPNyyxA1vSob folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\j00ySivDn4msJdL folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\J1voFaHsJ folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\j34HW7E9Tj folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\jbbFF3pmG5Q6dKf folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\jBBttxPP0yc1iD3 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\jcccA11uvD2bFpm folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\jCCeekIIBr folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\jF44ppmH5sQJd folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\JFmsJEg9XUltPcu folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\JhhYYXwwkUVlOtz folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\jhTXeIzyxS folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\jiiibFF3pn folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\JjjjUUVelIBtPNc folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\JkrOBx0c1iDnmsd folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\jmmHH5ssQJ7EKgR folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\JPPNNyxxA folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\JpppnGG4aQH6WKf folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\JQJJ78ZjVltNuop folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\JqqjjUCeekBrzNx folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\JQQQJd8R9YwUeBz folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\JR9hhTXwjCelBzy folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\js7KR9XjVltNAvo folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\ju2Fms6Kf9 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\Jx0uSb33pGadWfL folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\JXjeVzt0uSbp folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\JyAuDoFpG folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\jYklt0Ai2p5Jd8Z folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\JZXeBP1245689jC folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\K888fRRL9hTqjUe folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\kddWWK77fRgTXjC folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\kdWKfLhTXUeIrOx folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\KEE8ggZZqYwkU folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\keellIBttzNyc1 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\kFFF4aamH5sJ7E folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\kG5QJdKR9TqUeOu folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\kGGG5aaQH6d folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\khhYYXwjUVelIt folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\kly1DoFpGsJdKf folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\kmmHH5sWWJd folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\knnGG5aQH6dW7R folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\kVtcvFGJEfTUBy folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\kVVVrllOBtxPyc1 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\KYYXXwjUVelIBzN folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\kZYkeBci2npQKRh folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\l111uvvS2 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\L56KRgXjYeIrNAc folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\L66ddWK8fRL9hX folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\LAA00uvSSib folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\LAAA11ivD2on4pH folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\LbD3o4mHsJEghCl folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\lCwrNPciDna6JE8 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\LDDD2oonF4pm5sJ folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\ldE8ZYwVIzy1 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\lEEKK8fRRZhT folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\lEL8TqYkOPSn5dR folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\LG5aaHHdWK7R9TX folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\lGGG55aQJ6dW8fL folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\LhhYYXwwkUVlOtz folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\LiibbF33pn5 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\LjeBPcu2FGQ6KRh folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\lkkIIBrzzNyA0vS folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\lkkIIBrzzNyx0v2 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\lkkkIBBrzONyA0v folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\LlOOBBtzP0y folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\LOONNtxxP0uS1bD folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\LqhhYYCwkUV folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\lSS22ibbD3nG4QH folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\LssWWJ7ddE8 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\lsWJfLgZYwUVlBx folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\LsWJJ7ddELgRZhY folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\lsWWJ77fLgZqYwU folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\Lvv2on4m5QJKgZ folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\lWKEgZCIrOPci3n folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\LwOP13as7ghUByi folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\lYIrzOONtxA0cSi folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\Lyu2oFp5Q6W8R9T folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\lZluQhBva9VupWT folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\LzN1DobFQKZXCBN folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\LzNAuDo4m5Q6E8R folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\mDnamHs7dL folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\mGG55aQQH6dK7 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\mIIIBzPyxuSo3m5 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\mm5W7E8RhXkVlBz folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\mnnGG4aamHsWJfE folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\mWK7ggTXjCIrOtA folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\mWWWJ77dEL folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\mx01voFaH5Jd8Rq folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\N66ddEK8fRh folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\N66ddWK8fRL9hXj folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\n69kAp7Yt3WqOSn folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\N777ddEL8gRZhYw folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\n777fLTTZqjCwIr folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\N888fRRL9hTqjUe folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\NBBBtzzP0yc1iD2 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\NBBrrzONyx0u3pH folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\ncSibDnQ6KgZwIl folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\nf9ZjwVu1DnaHW7 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\NhhYkkUVelt0c1v folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\NIrzNA1vF5WLqIz folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\NKKK8ggRZ9hXjlB folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\NkkkIVVrzONxAuc folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\nkkUUVVrlOBxPyc folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\nlllIIBrzPNyA1v folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\nmGG55aQJ6dWKfL folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\Nna6W7LgZhC folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\noonFHsQd folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\nPPNNyxxA1uS2bF folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\npppnGG4aQHs folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\NRRRZqqhYXw folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\NuiG6EZkNc13GH folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\NUUUVeelIBtzNyA folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\NyAvoFms7RhjlNv folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\nYwwkeOBt0y1vo4 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\NyyccA1iiv2on4p folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\nz1o4s6KRhUlrNA folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\O0uin6KEgZYkr folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\o22iibFF3pn5aHd folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\o8fZXweBzNuopa6 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\oBBttxPP0yS folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\OFF33pmmG5 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\OhhYXwklBz0Ai folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\okVzNx0ciDp folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\On4HsJdLgZhwU folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\onnnG55aQH6WKfR folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\oo4HW7LgZhXUeBP folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\oqqqhYYXwkUelOt folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\oRqYwUlBz0c1DoF folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\oRZqYwUeOtPc1v2 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\OtPyAiDoFpHJKZX folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\OuvvvD2obF4pm5Q folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\OwjjUUCelIBzPyA folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\owUlrNAu2Fma6KR folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\OwwwjjUCelIBzPy folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\OyyxAuv2FpGaQ6W folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\p0uuccS1ibD3nGa folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\P1uuvvS2obF3pGa folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\P22iibD33pG4aHs folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\p2b3mGGQW8RhTjC folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\p6sWJ7E8Z folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\P8gggRZ9hYXwjVl folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\P8RL9XjeIrOy0u folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\P999gTTXqjY folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\paaQQH6dW7fL9Tq folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\PaQH6dWK79XYkrO folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\PDD33onnG4aH6WJ folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\PddWWK88fRLhTqj folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\peBPA2ps7ZXVlB0 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\pf9XjeVzNAc2p4Q folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\pffEEL88gTZhYwk folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\pGGG55aQH6dW folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\pii3GQWLgjwV folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\PjjjUUCelIBrPN folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\PkIIVVrzONt folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\pkkUeOtPc1v2FpH folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\PkrNxu2Fna6KRg folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\plIIBBtzP folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\PLL99gTXXqYCeIr folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\PmmmH66sWJ7ELgT folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\PoGHsJE8TqC folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\pqqhhYXXwkUelBt folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\pqYwINPuSiDo folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\PRL9hTqUeIrOyA folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\PsssQJJ6dEK folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\pttxxA0ucS2ib3n folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\pwwwjVItPy1v2Fp folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\Px0Sb3GQs7L folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\PXXwwkUVVeOBtPy folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\q444pmmG5 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\Q4HsWKEgZCIrOPc folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\Q4HsWKfL9ZCIrOP folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\qBBrrzPNNyA1uSo folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\qddEEK88g folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\QE8ZYkrlBPy13F folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\QFFF4aamH5sW7d folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\qIIVVrllONxP folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\QIx0uSb33GadWfL folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\QkkkIIVrlONtP0 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\QNuopEeIBNAvo3 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\QpGQ6KEgZYkrNPc folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\qpppmmH5sQJ7EKg folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\QQQJJ7ddEKgRZhY folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\QVeelOBtzP0yA1v folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\QxAA00ucS2ib3pG folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\QxvbnQWRXCVN023 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\R11uuvD2obF folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\r2bp4Qs7EgqYkrN folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\R777fRRL9gTqYCk folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\R77ddEL8gRZ folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\r88R9hTXw folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\R8TqhYkOPSn5dRh folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\R9qCIrNx0c2bp4 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\RammmH5sWJ7dE8R folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\RbbbF33pnG5aH6W folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\Rd8ZYjeIzy1voG folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\RddEEK8ggR9hYwj folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\rEELL9ggTZqYCkI folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\REKK88gRZ9h folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\RfE9TqYCwIrNt0 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\rfXItSpsLqCrOxu folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\rhYCwVVrlOBxPyc folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\ribF3pnG5HdKfLT folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\RIrOyAv2bFnaHKL folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\RLLL8ggRZqhXwkV folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\RlNt0ci3oms folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\RmGG55aQJ6d folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\ROBBttxP0ycSiv folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\RpppmGG5aQJ folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\rpppnGG4aQH6WKf folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\RQQHH6dWK7f9gqY folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\RrllOOBtxP0yS1 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\RrrzzONNyxAuv2i folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\RtxP0ucS1b3n4m folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\rtxxxA0ucS2i folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\RUltPc1Dn4HWd8Z folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\RwwwkIIVrlOtxP folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\S0234Q6W7E9ZjCk folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\s1bDoaH6sE8 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\S7ELgqYwketPyAi folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\S9ggTTZqjYCwI folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\SbDD33onG4amH folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\SBPyADnFp5s7EZj folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\sddEEK88gR9hYw folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\SellIIBrzPNyA1v folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\sG4sWKfLTqCIrOP folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\SH66ssWK7f folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\SH6s7E9TZYwIrOt folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\SkUUUVelOB folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\SOOOBttxP0yc1iD folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\SPNxu2Fma6KR9 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\SPORE\Temp folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\SPORE\Preferences folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\SPORE\MVJCache folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\SPORE\Games\Game0.old folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\SPORE\Games\Game0 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\SPORE\Games folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\SPORE\CityMusic folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\SPORE folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\ssJdhXjVltP folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\StPci3F4m5 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\stttxAA0ucSib3p folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\sTTTXqqjUCeIBz folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\sTTXXqjjUCeIBz folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\sTXXXqjUCekIBz folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\sUOPSDF5EZwetyi folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\swjCelrPxu2Fma6 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\T22iibD3pG4aHsW folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\t2ib3nG5HdKfL folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\T5W9Yrcaf folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\TAA00uvvS folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\tadf9TUIO02pa6W folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\TBBBtxxP0yc1iD3 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\TcccA11iv folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\tdddELL8gRZqYXk folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\tdLRhXkVlBz0c1v folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\TELL88gTZqhYwkV folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\TffEEL99g folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\thhhTXXqjUCeIBz folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\tK88fRL9hT folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\TnFad8ZYwOyJ folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\TOttAuSiD3nGQ67 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\TOtxuin4HKLTjCk folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\tpHsJd8R9Y folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\tPP00ycSSivDon4 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\tppmmG5aQJ6dW8R folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\TppnnG44aQHsW7f folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\tPPNNyycA1uD2bF folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\tQ8XkN2Gd9YrADa folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\tqqqjUUCekIBzOy folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\tssQQJ6dEK folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\tWKfRRL9gXYVtc3 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\twVIzAom78YVzA2 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\u000yc1iD3onaHs folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\u55ssQJ6dEK8 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\UaaQQJ66dWKfR9h folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\uBBBtzzP0ycA folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\UCCCwkkIVrlOtx folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\uCeekkINuSiFpGa folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\udEELL8gRZqhYwU folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\UFFF33pnG5aQ6dK folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\UGGG5ssQJ6dE8f folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\uggRRZ99hYwjUel folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\ujCkBzNvi3n5QdK folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\ukIIVVrlONtx0uS folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\UOt0uS2ib3n folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\up4HWf9ZY folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\uppmmGssQJdEKfZ folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\uQd7R9gqYkrN folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\urrrzzONtxA0cSi folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\USb3GQ6KRgXYkr folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\uTorrent\dlimagecache folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\uTorrent\Cache folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\uTorrent\apps folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\uTorrent folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\uu2qYeIzNxuS folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\UUeBPci2Fms78ZY folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\uwlzNAv2b3m5Q6W folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\uXXXqqjUC folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\UYCCeekIVrzONx0 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\uZqjYCwkVNxc folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\v2oobbF4pmG5sJd folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\V44ppmHH5 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\V555sWWJ7 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\v66ssWJ77f folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\V99ggTZqjYCwkVl folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\vbD3n4H6WfgZCIr folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\veekkIBrrONyx0v folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\vffRRZ9hTXwjU folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\VhwUeIzNc1DoFp5 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\vjjjUCCelI folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\vkkkIVVrzONtA0c folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\VpHsJd8gZhXj folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\VPP00uccS1iD3nG folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\vPPP0uucS1 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\Vs6d8ZhwjClzyAv folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\Vs7LRZYUlBPcvF5 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\VSiDpGaHW7E9TqY folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\VssWWJ77f folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\VTCVB0ioasER folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\VtttzPPNycA1vDo folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\vUeIzNx1oF folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\vWWJJ7ffELgTZhY folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\VxAA0c2b3naHsKf folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\W2bpGHsKfLTq folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\W333onnG4am6sJ7 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\w44ppmH55sJ7dK8 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\W4ms6KRhwCIrNAu folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\w888fRRZ9hTXjUe folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\W99hhYXXwjUelBt folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\waQH6sWf9TjwVOt folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\WBBBttPcv2oF folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\wBzNcuDoFpGsJ6K folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\wc1v3n4msWdEgZh folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\wcSi3n4mHWdLgZh folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\WdddE88gZqhY folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\WdddE8ggZqhw folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\WdE8ggRZ9YwjeBt folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\WfEL8gTZqYwUrOt folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\WhwCIzy1Sb3Ga6K folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\whYYwUVlOBxPyci folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\wiib3nG5aQ6Kf folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\WjYYYCekI folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\wnFF44pmH5sQJ folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\wnnnF44pmH5s7 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\wnnnF44pmH5sJ folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\wnnnFF4pmH5sJ folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\wo3GQd8LhjerNS3 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\wooobFF4pmG5QJd folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\wQQQHH6dWK7fL9T folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\WqqqjYYCekIV folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\WRRZZ9hhYXjUVlI folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\WSS11ivvD3oF folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\wSSS22obF3pm5aJ folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\WssWWJ77dE8gRqh folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\WssWWJ77fE8gTqh folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\wSvo4HW7LgZhXUe folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\wwwwkIIVrlONx folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\wyyxxA0uuv2ib folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\WzzzPNNyxA1u folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\x00yA1ivoFpHsJE folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\x2oFp5Q6W8R9TqU folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\x444pmmH5sQ7dK8 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\X6Kf9XjIzAvoFp5 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\X888fRRL9hTXjUe folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\x99hhTXwwjCelBz folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\XaammH5ssW7dE folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\xAu2Fma6KRhqCIr folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\XbbDD3oonG4mHsW folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\XdK8fLhXjUCkr folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\XEKg9XwjeBPcu2F folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\Xf8ZYkrBxySvFa5 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\XhhYYXwkkUelOtz folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\XhTTXXwjUCelB folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\XkkUVeelOBtP0cA folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\XmmHH6ssWJfE8Tq folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\Xob3m5JdKfLhXjC folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\XppnnG4aaQ6sW7f folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\xqYeIrOtAuSiDpa folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\XSS11ibbD3nG4 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\XsWWJJ7fEL8gZqY folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\XTTTXqqjYC folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\xUCkrNxu2Fna6K folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\XuuSibpGaH6Wfgk folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\XVrrzzNx0c2bpGa folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\XXwjCelrPxu2Fma folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\XZhYwelBPc folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\Y444ammH5sW7dL8 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\y555ssWJ7dELgRq folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\y8RZ9XjUVelBtP folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\Y999hhTXqjUCk folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\Y999hTTXqjUek folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\Ya8TCByvbGHKLgq folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\yasKLgjwrNu folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\YBBBrrzONyxAuv2 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\yBPxuSbpGQd8LTj folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\YBrONy0v2pGQd7L folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\Yc1DoFp56E8R9Tw folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\yD22oobF4pm folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\yDDD2oonF4p folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\ydEEKK8fRZ9hTwU folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\YdK7fgqCkr folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\YeBzy1iDnp5JE8Z folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\yFpG68R9XkIrOx0 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\yFpmG5QWKfLhCkB folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\yFppn56dWfR9gX folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\ygRZhXwUVlBzyc folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\yIIBBrzzPNyA1vS folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\yJJ66ddEK8fZ9TX folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\yKK77fRL9gTqjCk folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\YkkUUVrrlOBxPyc folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\ykVOxPyciDn folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\YmmmH66sWJ7EL8T folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\YOxuuibpG4aQKEg folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\YqqqjYYCwkIVlOt folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\yrrrlOOBtxP0cS folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\YssQQJ77dE folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\yssWWJ7dEL8gRqY folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\yTTXXqjjUCkIBzO folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\Yv2FmaJdWf folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\YvDDD3onF4amH folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\ywkIlt0S1b34HWf folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\YyccSSiDn4m5JdL folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\YyyccSiDon4m5W7 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\Z11uuvDD2ob4pG5 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\Z222obbF3pm5aJ6 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\z33ppnG4aQH6sKf folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\Z7ffEEL8g folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\zBrzONyxASbn5W7 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\ZCCCekkrzNyA folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\zDD22obbF4pG5QJ folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\zddEEK8gRZ9hXjV folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\ZdEEK88fRZ9TXjU folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\zF3G5aQH6W7R9CI folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\ZFpmsJdKfZhXjCl folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\ZHHH6ssWK7fE9gZ folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\ZiD3onG4a6W7Egq folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\ZjjjUUCekIBr folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\zkkkUVVrlOBxP folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\zKRCIrNyy0Sb3n5 folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\znn44mm5W7E8ghX folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\ZOx0v2bpGa6W folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\ZppnnG55a folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\zPPPNyycA1uv2oF folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\ZqqjjUCeekBrzNx folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\ZQQQJ77dEK8RZhY folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\ZttzzP00ycAi folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\zTTZZqhYYCkUVlB folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\zvDDD2onF4pmHsJ folder moved successfully.
C:\Users\Jimmy\AppData\Roaming\zXUeBONyx0SFp folder moved successfully.
========== FILES ==========
< ipconfig /flushdns /c >
Windows IP Configuration
Successfully flushed the DNS Resolver Cache.
C:\Users\Jimmy\Downloads\cmd.bat deleted successfully.
C:\Users\Jimmy\Downloads\cmd.txt deleted successfully.
========== REGISTRY ==========
========== COMMANDS ==========
C:\Windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Flash cache emptied: 56475 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Jimmy
->Temp folder emptied: 3692232905 bytes
->Temporary Internet Files folder emptied: 115880112 bytes
->Java cache emptied: 1237549 bytes
->FireFox cache emptied: 66393364 bytes
->Google Chrome cache emptied: 856432 bytes
->Flash cache emptied: 62785 bytes

User: Public

User: UpdatusUser

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 28845530 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 367975235 bytes
RecycleBin emptied: 1182266610 bytes

Total Files Cleaned = 5,203.00 mb

Restore point Set: OTL Restore Point

OTL by OldTimer - Version 3.2.55.0 log created on 08022012_164503

Files\Folders moved on Reboot...
C:\Users\Jimmy\AppData\Roaming\Asus WebStorage folder moved successfully.
C:\Users\Jimmy\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.

PendingFileRenameOperations files...
File C:\Users\Jimmy\AppData\Roaming\Asus WebStorage not found!
File C:\Users\Jimmy\AppData\Local\Temp\FXSAPIDebugLogFile.txt not found!

Registry entries deleted on Reboot...




Combo fix: ComboFix 12-07-31.03 - Jimmy 08/02/2012 17:12:38.1.8 - x64
Microsoft Windows 7 Home Premium 6.1.7600.0.1252.1.1033.18.8116.5864 [GMT -4:00]
Running from: c:\users\Jimmy\Desktop\ComboFix.exe
AV: avast! Antivirus *Enabled/Outdated* {C37D8F93-0602-E43C-40AA-47DAD597F308}
SP: avast! Antivirus *Enabled/Outdated* {781C6E77-2038-EBB2-7A1A-7CA8AE10B9B5}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\esupport\eDriver\Software\ASUS\MultiFrame\XP32_Vista32_Vista64_Win7_32_Win7_64_1.0.0021\Desktop_.ini
c:\program files (x86)\sss
c:\program files (x86)\sss\CinePlayer\5.0\AACSCert.rxc
c:\program files (x86)\sss\CinePlayer\5.0\AS_Storage_w32.dll
c:\program files (x86)\sss\CinePlayer\5.0\AutoRunHandler.dll
c:\program files (x86)\sss\CinePlayer\5.0\CinePlayer.exe
c:\program files (x86)\sss\CinePlayer\5.0\CinePlayer.exe.config
c:\program files (x86)\sss\CinePlayer\5.0\CP50BD7.rxc
c:\program files (x86)\sss\CinePlayer\5.0\CPMonitor.exe
c:\program files (x86)\sss\CinePlayer\5.0\CpPluginFrameWork.dll
c:\program files (x86)\sss\CinePlayer\5.0\cvmi.dll
c:\program files (x86)\sss\CinePlayer\5.0\DefaultCursor.png
c:\program files (x86)\sss\CinePlayer\5.0\DVDDriverControl.1.0.manifest
c:\program files (x86)\sss\CinePlayer\5.0\DVDDriverControl.dll
c:\program files (x86)\sss\CinePlayer\5.0\Filters\AS_Storage_w32.dll
c:\program files (x86)\sss\CinePlayer\5.0\Filters\CinemasterAudio.DLL
c:\program files (x86)\sss\CinePlayer\5.0\Filters\CinemasterVCDNav.dll
c:\program files (x86)\sss\CinePlayer\5.0\Filters\CinemasterVideo.DLL
c:\program files (x86)\sss\CinePlayer\5.0\Filters\cv200.dll
c:\program files (x86)\sss\CinePlayer\5.0\Filters\cxcore200.dll
c:\program files (x86)\sss\CinePlayer\5.0\Filters\DirectShowTap.ax
c:\program files (x86)\sss\CinePlayer\5.0\Filters\DolbyHph.dll
c:\program files (x86)\sss\CinePlayer\5.0\Filters\HDAVSink.dll
c:\program files (x86)\sss\CinePlayer\5.0\Filters\Microsoft.VC80.OpenMP.manifest
c:\program files (x86)\sss\CinePlayer\5.0\Filters\Mpeg2VidIFrameDec.dll
c:\program files (x86)\sss\CinePlayer\5.0\Filters\msvcp71.dll
c:\program files (x86)\sss\CinePlayer\5.0\Filters\msvcr71.dll
c:\program files (x86)\sss\CinePlayer\5.0\Filters\roxio86_demux_mp4_ds.ax
c:\program files (x86)\sss\CinePlayer\5.0\Filters\Sonic3DConverter.dll
c:\program files (x86)\sss\CinePlayer\5.0\Filters\SonicDVDDashVRNav.dll
c:\program files (x86)\sss\CinePlayer\5.0\Filters\SonicDVDNavigator.dll
c:\program files (x86)\sss\CinePlayer\5.0\Filters\SonicHDDemuxer.dll
c:\program files (x86)\sss\CinePlayer\5.0\Filters\SonicMCDVD_32.DLL
c:\program files (x86)\sss\CinePlayer\5.0\Filters\SonicQtFilter.dll
c:\program files (x86)\sss\CinePlayer\5.0\Filters\SonicSM.dll
c:\program files (x86)\sss\CinePlayer\5.0\Filters\vcomp.dll
c:\program files (x86)\sss\CinePlayer\5.0\HDR.1.0.manifest
c:\program files (x86)\sss\CinePlayer\5.0\Help\CHS\CinePlayer.chm
c:\program files (x86)\sss\CinePlayer\5.0\Help\CHT\CinePlayer.chm
c:\program files (x86)\sss\CinePlayer\5.0\Help\DEU\CinePlayer.chm
c:\program files (x86)\sss\CinePlayer\5.0\Help\ENU\CinePlayer.chm
c:\program files (x86)\sss\CinePlayer\5.0\Help\ESN\CinePlayer.chm
c:\program files (x86)\sss\CinePlayer\5.0\Help\FRA\CinePlayer.chm
c:\program files (x86)\sss\CinePlayer\5.0\Help\ITA\CinePlayer.chm
c:\program files (x86)\sss\CinePlayer\5.0\Help\JPN\CinePlayer.chm
c:\program files (x86)\sss\CinePlayer\5.0\Help\KOR\CinePlayer.chm
c:\program files (x86)\sss\CinePlayer\5.0\Help\NLD\CinePlayer.chm
c:\program files (x86)\sss\CinePlayer\5.0\Help\PTG\CinePlayer.chm
c:\program files (x86)\sss\CinePlayer\5.0\HomePermitsManaged.dll
c:\program files (x86)\sss\CinePlayer\5.0\lib\basis.jar
c:\program files (x86)\sss\CinePlayer\5.0\lib\btclasses.zip
c:\program files (x86)\sss\CinePlayer\5.0\lib\content-types.properties
c:\program files (x86)\sss\CinePlayer\5.0\lib\ext\sunjce_provider.jar
c:\program files (x86)\sss\CinePlayer\5.0\lib\foundation_security.jar
c:\program files (x86)\sss\CinePlayer\5.0\lib\j2me_xml_cdc.jar
c:\program files (x86)\sss\CinePlayer\5.0\lib\jaas.jar
c:\program files (x86)\sss\CinePlayer\5.0\lib\javatv.jar
c:\program files (x86)\sss\CinePlayer\5.0\lib\jce.jar
c:\program files (x86)\sss\CinePlayer\5.0\lib\jsse-cdc.jar
c:\program files (x86)\sss\CinePlayer\5.0\lib\security\cacerts
c:\program files (x86)\sss\CinePlayer\5.0\lib\security\java.policy
c:\program files (x86)\sss\CinePlayer\5.0\lib\security\java.security
c:\program files (x86)\sss\CinePlayer\5.0\lib\security\local_policy.jar
c:\program files (x86)\sss\CinePlayer\5.0\lib\security\US_export_policy.jar
c:\program files (x86)\sss\CinePlayer\5.0\lib\SonicAWT.jar
c:\program files (x86)\sss\CinePlayer\5.0\lib\SonicBDJ.jar
c:\program files (x86)\sss\CinePlayer\5.0\lib\sunrsasign.jar
c:\program files (x86)\sss\CinePlayer\5.0\lib\zi\America\Los_Angeles
c:\program files (x86)\sss\CinePlayer\5.0\lib\zi\Asia\Calcutta
c:\program files (x86)\sss\CinePlayer\5.0\lib\zi\Asia\Novosibirsk
c:\program files (x86)\sss\CinePlayer\5.0\lib\zi\GMT
c:\program files (x86)\sss\CinePlayer\5.0\lib\zi\ZoneInfoMappings
c:\program files (x86)\sss\CinePlayer\5.0\license.txt
c:\program files (x86)\sss\CinePlayer\5.0\Microsoft.DirectX.Direct3D.dll
c:\program files (x86)\sss\CinePlayer\5.0\Microsoft.DirectX.Direct3DX.dll
c:\program files (x86)\sss\CinePlayer\5.0\Microsoft.DirectX.dll
c:\program files (x86)\sss\CinePlayer\5.0\Microsoft.VC80.CRT.manifest
c:\program files (x86)\sss\CinePlayer\5.0\MSVCP70.DLL
c:\program files (x86)\sss\CinePlayer\5.0\msvcp80.dll
c:\program files (x86)\sss\CinePlayer\5.0\MSVCR70.DLL
c:\program files (x86)\sss\CinePlayer\5.0\msvcr80.dll
c:\program files (x86)\sss\CinePlayer\5.0\Plugins\BW.skn
c:\program files (x86)\sss\CinePlayer\5.0\Plugins\DVDDriveControlLib.dll
c:\program files (x86)\sss\CinePlayer\5.0\Plugins\Interop.SHDocVw.dll
c:\program files (x86)\sss\CinePlayer\5.0\Plugins\Microsoft.mshtml.dll
c:\program files (x86)\sss\CinePlayer\5.0\Plugins\player.config.xml
c:\program files (x86)\sss\CinePlayer\5.0\Plugins\PlayerPlugin.dll
c:\program files (x86)\sss\CinePlayer\5.0\Plugins\SonicLib.dll
c:\program files (x86)\sss\CinePlayer\5.0\Plugins\SplashTitle.skn
c:\program files (x86)\sss\CinePlayer\5.0\Plugins\SPLDav.skn
c:\program files (x86)\sss\CinePlayer\5.0\Plugins\SPLRox.skn
c:\program files (x86)\sss\CinePlayer\5.0\Plugins\TransCursor.cur
c:\program files (x86)\sss\CinePlayer\5.0\Plugins\WB.skn
c:\program files (x86)\sss\CinePlayer\5.0\QuickTimePlayer.dll
c:\program files (x86)\sss\CinePlayer\5.0\RcFramework.dll
c:\program files (x86)\sss\CinePlayer\5.0\Renderer.dll
c:\program files (x86)\sss\CinePlayer\5.0\RendererLib.dll
c:\program files (x86)\sss\CinePlayer\5.0\RoxUtils.dll
c:\program files (x86)\sss\CinePlayer\5.0\RxCommonUI.dll
c:\program files (x86)\sss\CinePlayer\5.0\SFXPlugins\StandardFX_Plugin.dll
c:\program files (x86)\sss\CinePlayer\5.0\SharpZipLib.dll
c:\program files (x86)\sss\CinePlayer\5.0\SlideshowPlayer.dll
c:\program files (x86)\sss\CinePlayer\5.0\SonicBDAVPlayer.dll
c:\program files (x86)\sss\CinePlayer\5.0\SonicBDAVPlayer2x.dll
c:\program files (x86)\sss\CinePlayer\5.0\SonicBDROMPlayer.dll
c:\program files (x86)\sss\CinePlayer\5.0\SonicDigital.dll
c:\program files (x86)\sss\CinePlayer\5.0\SonicMediaPlayer.5.0.manifest
c:\program files (x86)\sss\CinePlayer\5.0\SonicMediaPlayer.dll
c:\program files (x86)\sss\CinePlayer\5.0\SonicMediaPlayerLib5.dll
c:\program files (x86)\sss\CinePlayer\5.0\SonicS3DDetector.1.0.manifest
c:\program files (x86)\sss\CinePlayer\5.0\SonicS3DDetector.dll
c:\program files (x86)\sss\CinePlayer\5.0\SonicS3DDetectorLib.dll
c:\program files (x86)\sss\CinePlayer\5.0\SonicText\ENU.txt
c:\program files (x86)\sss\CinePlayer\5.0\SPLUI.dll
c:\program files (x86)\sss\CinePlayer\5.0\stdole.dll
c:\program files (x86)\sss\CinePlayer\5.0\StreamIdentifier.dll
c:\program files (x86)\sss\CinePlayer\5.0\SYSDetectingForBDPlay.1.0.manifest
c:\program files (x86)\sss\CinePlayer\5.0\SYSDetectingForBDPlay.dll
c:\program files (x86)\sss\CinePlayer\5.0\SYSDetectingForBDPlayLib.dll
c:\program files (x86)\sss\CinePlayer\Certificates\NActReq3.rxc
c:\programdata\FullRemove.exe
c:\windows\msvcr71.dll
c:\windows\SysWow64\URTTemp
c:\windows\SysWow64\URTTemp\regtlib.exe
.
.
((((((((((((((((((((((((( Files Created from 2012-07-02 to 2012-08-02 )))))))))))))))))))))))))))))))
.
.
2012-08-02 21:19 . 2012-08-02 21:19 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-08-02 20:55 . 2012-08-02 20:55 -------- d-----w- c:\users\Jimmy\AppData\Roaming\Asus WebStorage
2012-08-02 20:55 . 2012-08-02 20:55 -------- d-----w- c:\users\Jimmy\AppData\Roaming\Gaming Mouse
2012-08-02 20:45 . 2012-08-02 20:45 -------- d-----w- C:\_OTL
2012-08-02 18:58 . 2012-08-02 18:58 30496 ----a-w- c:\windows\system32\drivers\hitmanpro36.sys
2012-08-02 18:19 . 2012-08-02 18:55 -------- d-----w- c:\programdata\HitmanPro
2012-08-02 18:11 . 2012-06-22 15:39 85224 ----a-w- c:\windows\system32\drivers\PCTBD64.sys
2012-08-02 18:09 . 2012-06-22 19:35 251560 ----a-w- c:\windows\system32\drivers\PCTSD64.sys
2012-08-02 18:09 . 2012-08-02 18:11 -------- d-----w- c:\programdata\PC Tools
2012-08-02 18:09 . 2012-08-02 18:09 -------- d-----w- c:\users\Jimmy\AppData\Roaming\TestApp
2012-07-28 01:00 . 2012-07-29 01:13 -------- d-----w- c:\programdata\225932DF004E8D06C40B590B4F147CE7
2012-07-24 15:20 . 2012-07-24 15:20 -------- d-----w- c:\users\Jimmy\AppData\Local\Macromedia
2012-07-24 15:20 . 2012-07-24 15:20 426184 ---ha-w- c:\windows\SysWow64\FlashPlayerApp.exe
2012-07-24 15:20 . 2012-07-24 15:20 -------- d-----w- c:\windows\system32\Macromed
2012-07-17 04:54 . 2012-07-17 04:54 -------- d-----w- c:\program files (x86)\Common Files\Skype
2012-07-12 07:02 . 2012-06-12 03:02 3147264 ----a-w- c:\windows\system32\win32k.sys
2012-07-11 16:43 . 2012-06-06 05:50 2003968 ----a-w- c:\windows\system32\msxml6.dll
2012-07-11 16:43 . 2012-06-06 05:50 1880064 ----a-w- c:\windows\system32\msxml3.dll
2012-07-11 16:43 . 2012-06-06 05:09 1389568 ----a-w- c:\windows\SysWow64\msxml6.dll
2012-07-11 16:43 . 2012-06-06 05:09 1236992 ----a-w- c:\windows\SysWow64\msxml3.dll
2012-07-11 16:43 . 2012-06-09 05:30 14165504 ----a-w- c:\windows\system32\shell32.dll
2012-07-11 16:42 . 2012-06-02 05:38 95088 ----a-w- c:\windows\system32\drivers\ksecdd.sys
2012-07-11 16:42 . 2012-06-02 05:38 152432 ----a-w- c:\windows\system32\drivers\ksecpkg.sys
2012-07-11 16:42 . 2012-06-02 05:37 459216 ----a-w- c:\windows\system32\drivers\cng.sys
2012-07-11 16:42 . 2012-06-02 05:27 340992 ----a-w- c:\windows\system32\schannel.dll
2012-07-11 16:42 . 2012-06-02 05:27 307200 ----a-w- c:\windows\system32\ncrypt.dll
2012-07-11 16:42 . 2012-06-02 04:48 22016 ----a-w- c:\windows\SysWow64\secur32.dll
2012-07-11 16:42 . 2012-06-02 04:48 225280 ----a-w- c:\windows\SysWow64\schannel.dll
2012-07-11 16:42 . 2012-06-02 04:47 219136 ----a-w- c:\windows\SysWow64\ncrypt.dll
2012-07-11 16:42 . 2012-06-02 04:42 96768 ----a-w- c:\windows\SysWow64\sspicli.dll
2012-07-11 16:42 . 2012-06-06 05:50 1425408 ----a-w- c:\program files\Common Files\System\ado\msado15.dll
2012-07-11 16:42 . 2012-06-06 05:09 987136 ----a-w- c:\program files (x86)\Common Files\System\ado\msado15.dll
2012-07-10 18:51 . 2012-07-11 20:13 -------- d-----w- c:\users\Jimmy\riotsGamesLogs
2012-07-05 21:06 . 2012-08-02 19:53 -------- d-----w- c:\program files (x86)\BlueStacks
2012-07-05 21:03 . 2012-07-05 21:05 -------- d-----w- c:\users\Jimmy\AppData\Local\BlueStacksSetup
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-08-02 21:21 . 2011-02-22 13:44 45056 ----a-w- c:\windows\system32\acovcnt.exe
2012-07-24 15:20 . 2011-06-15 05:33 70344 ---ha-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-07-03 17:46 . 2011-02-23 01:00 24904 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-06-25 20:04 . 2012-06-25 20:04 1394248 ---ha-w- c:\windows\SysWow64\msxml4.dll
2012-06-22 14:43 . 2012-08-02 18:11 3488 ----a-w- c:\windows\UDB.zip
2012-06-22 14:43 . 2012-08-02 18:11 131 ----a-w- c:\windows\IDB.zip
2012-06-02 22:19 . 2012-06-19 06:07 38424 ----a-w- c:\windows\system32\wups.dll
2012-06-02 22:19 . 2012-06-19 06:07 2428952 ----a-w- c:\windows\system32\wuaueng.dll
2012-06-02 22:19 . 2012-06-19 06:07 57880 ----a-w- c:\windows\system32\wuauclt.exe
2012-06-02 22:19 . 2012-06-19 06:07 44056 ----a-w- c:\windows\system32\wups2.dll
2012-06-02 22:19 . 2012-06-19 06:07 701976 ----a-w- c:\windows\system32\wuapi.dll
2012-06-02 22:15 . 2012-06-19 06:07 2622464 ----a-w- c:\windows\system32\wucltux.dll
2012-06-02 22:15 . 2012-06-19 06:07 99840 ----a-w- c:\windows\system32\wudriver.dll
2012-06-02 19:19 . 2012-06-19 06:07 186752 ----a-w- c:\windows\system32\wuwebv.dll
2012-06-02 19:15 . 2012-06-19 06:07 36864 ----a-w- c:\windows\system32\wuapp.exe
2012-05-15 10:48 . 2012-06-17 23:22 8139072 ----a-w- c:\windows\system32\nvcuda.dll
2012-05-15 10:48 . 2012-06-17 23:22 5982528 ---ha-w- c:\windows\SysWow64\nvcuda.dll
2012-05-15 10:48 . 2012-06-17 23:22 2881856 ----a-w- c:\windows\system32\nvcuvenc.dll
2012-05-15 10:48 . 2012-06-17 23:22 2681664 ----a-w- c:\windows\system32\nvcuvid.dll
2012-05-15 10:48 . 2012-06-17 23:22 25743168 ----a-w- c:\windows\system32\nvoglv64.dll
2012-05-15 10:48 . 2012-06-17 23:22 2524992 ---ha-w- c:\windows\SysWow64\nvcuvid.dll
2012-05-15 10:48 . 2012-06-17 23:22 25248064 ----a-w- c:\windows\system32\nvcompiler.dll
2012-05-15 10:48 . 2012-06-17 23:22 2445120 ---ha-w- c:\windows\SysWow64\nvcuvenc.dll
2012-05-15 10:48 . 2012-06-17 23:22 2368832 ---ha-w- c:\windows\SysWow64\nvapi.dll
2012-05-15 10:48 . 2012-06-17 23:22 19607872 ---ha-w- c:\windows\SysWow64\nvoglv32.dll
2012-05-15 10:48 . 2012-06-17 23:22 17551680 ---ha-w- c:\windows\SysWow64\nvcompiler.dll
2012-05-15 10:48 . 2012-06-17 23:22 1738048 ----a-w- c:\windows\system32\nvdispco64.dll
2012-05-15 10:48 . 2012-06-17 23:22 1468224 ----a-w- c:\windows\system32\nvgenco64.dll
2012-05-15 10:48 . 2012-06-17 23:22 14298944 ----a-w- c:\windows\system32\drivers\nvlddmkm.sys
2012-05-15 10:48 . 2010-10-28 19:24 8105280 ---ha-w- c:\windows\SysWow64\nvwgf2um.dll
2012-05-15 10:48 . 2010-10-28 19:24 68928 ----a-w- c:\windows\system32\OpenCL.dll
2012-05-15 10:48 . 2010-10-28 19:24 61248 ---ha-w- c:\windows\SysWow64\OpenCL.dll
2012-05-15 10:48 . 2010-10-28 19:24 2741568 ----a-w- c:\windows\system32\nvapi64.dll
2012-05-15 10:48 . 2010-10-28 19:24 18044224 ----a-w- c:\windows\system32\nvd3dumx.dll
2012-05-15 10:48 . 2010-10-28 19:24 15322432 ---ha-w- c:\windows\SysWow64\nvd3dum.dll
2012-05-15 10:48 . 2010-10-28 19:24 10194752 ----a-w- c:\windows\system32\nvwgf2umx.dll
2012-05-15 09:29 . 2010-10-29 08:38 889664 ----a-w- c:\windows\system32\nvvsvc.exe
2012-05-15 09:29 . 2010-10-29 08:38 63296 ----a-w- c:\windows\system32\nvshext.dll
2012-05-15 09:29 . 2010-10-29 08:38 2561856 ----a-w- c:\windows\system32\nvsvcr.dll
2012-05-15 09:29 . 2010-10-29 08:38 118080 ----a-w- c:\windows\system32\nvmctray.dll
2012-05-15 09:29 . 2010-10-29 08:38 3149632 ----a-w- c:\windows\system32\nvsvc64.dll
2012-05-15 09:28 . 2010-10-29 08:38 6151488 ----a-w- c:\windows\system32\nvcpl.dll
2012-05-15 06:21 . 2012-05-15 06:21 423744 ---ha-w- c:\windows\SysWow64\nvStreaming.exe
2011-11-20 05:40 . 2011-11-20 05:31 1272409933 ---ha-w- c:\program files\Adobe. Photoshop CS5.1 Extended Edition.exe
2011-08-27 22:46 . 2011-08-27 22:16 814326520 ----a-w- c:\program files (x86)\MTGOinstall.exe
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\snxPluginsShell]
@="{F4B3B0AA-13D1-4a36-BDA2-2055B0F3D5DE}"
[HKEY_CLASSES_ROOT\CLSID\{F4B3B0AA-13D1-4a36-BDA2-2055B0F3D5DE}]
2010-06-28 21:59 153184 ----a-w- c:\program files\Alwil Software\Avast5\snxPlugins.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Steam"="d:\steam\steam.exe" [2011-08-03 1242448]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-07-14 1475072]
"Facebook Update"="c:\users\Jimmy\AppData\Local\Facebook\Update\FacebookUpdate.exe" [2012-07-11 138096]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"UpdateLBPShortCut"="c:\program files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe" [2009-05-20 222504]
"UpdateP2GoShortCut"="c:\program files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" [2009-05-20 222504]
"Boingo Wi-Fi"="c:\program files (x86)\Boingo\Boingo Wi-Fi\Boingo.lnk" [2010-12-25 2429]
"ATKMEDIA"="c:\program files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe" [2010-10-07 170624]
"HControlUser"="c:\program files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe" [2009-06-19 105016]
"THX TruStudio NB Settings"="c:\program files (x86)\Creative\THX TruStudio\THXNBSet\THXAudNB.exe" [2010-03-24 899072]
"UpdReg"="c:\windows\UpdReg.EXE" [2000-05-11 90112]
"CPMonitor"="c:\program files (x86)\Roxio\CinePlayer\5.0\CPMonitor.exe" [2010-10-08 84464]
"VAWinAgent"="c:\expressgateutil\VAWinAgent.exe" [2010-08-13 21504]
"Gaming Mouse Hid"="c:\program files (x86)\Gaming Mouse\hid.exe" [2010-01-19 428544]
"BDRegion"="c:\program files (x86)\Cyberlink\Shared files\brs.exe" [2010-02-24 75048]
"Wireless Console 3"="c:\program files (x86)\ASUS\Wireless Console 3\wcourier.exe" [2010-09-23 1601536]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro36]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro36.sys]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HitmanPro36Crusader]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HitmanPro36CrusaderBoot]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdAuxService]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdCoreService]
@="Service"
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001
"FirewallOverride"=dword:00000001
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 gupdate;Google Update Service (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-12-25 135664]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-07-03 160944]
R3 Creative ALchemy AL6 Licensing Service;Creative ALchemy AL6 Licensing Service;c:\program files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [2010-12-25 79360]
R3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service;c:\program files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [2010-12-25 79360]
R3 gupdatem;Google Update Service (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-12-25 135664]
R3 hitmanpro36;HitmanPro 3.6 Support Driver;c:\windows\system32\drivers\hitmanpro36.sys [2012-08-02 30496]
R3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-07-20 113120]
R3 PCTBD;PC Tools Browser Defender Driver;c:\windows\system32\Drivers\PCTBD64.sys [2012-06-22 85224]
R3 sdAuxService;PC Tools Auxiliary Service;c:\program files (x86)\PC Tools\PC Tools Security\pctsAuxs.exe [2012-06-22 402368]
R3 SiSGbeLH;SiS191/SiS190 Ethernet Device NDIS 6.0 Driver;c:\windows\system32\DRIVERS\SiSG664.sys [2009-06-10 56832]
R3 SwitchBoard;Adobe SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [2011-08-02 51712]
R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [2011-02-26 1255736]
R3 WMZuneComm;Zune Windows Mobile Connectivity Service;c:\program files\Zune\WMZuneComm.exe [2010-11-11 306416]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-23 57184]
S0 PCTCore;PCTools KDS;c:\windows\system32\drivers\PCTCore64.sys [2012-04-23 426616]
S0 pctDS;PC Tools Data Store;c:\windows\system32\drivers\pctDS64.sys [2012-02-28 453896]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys [2010-03-19 55856]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2011-03-02 254528]
S1 PCTSD;PC Tools Spyware Doctor Driver;c:\windows\system32\Drivers\PCTSD64.sys [2012-06-22 251560]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
S2 {B154377D-700F-42cc-9474-23858FBDF4BD};Power Control [2011/02/22 15:53];c:\program files (x86)\CyberLink\PowerDVD9\000.fcl [2010-02-24 19:14 146928]
S2 AFBAgent;AFBAgent;c:\windows\system32\FBAgent.exe [2010-06-22 379520]
S2 ASMMAP64;ASMMAP64;c:\program files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [2009-07-03 15416]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2010-06-28 61008]
S2 Browser Defender Update Service;Browser Defender Update Service;c:\program files (x86)\PC Tools\PC Tools Security\BDT\BDTUpdateService.exe [2012-06-22 575448]
S2 MotoConnect Service;MotoConnect Service;c:\program files (x86)\Motorola\MotoConnectService\MotoConnectService.exe [2010-04-29 91456]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2012-05-15 382272]
S2 TurboB;Turbo Boost UI Monitor driver;c:\windows\system32\DRIVERS\TurboB.sys [2010-04-17 13832]
S2 TurboBoost;Intel® Turbo Boost Technology Monitor;c:\program files\Intel\TurboBoost\TurboBoost.exe [2010-04-17 134928]
S2 UNS;Intel® Management & Security Application User Notification Service;c:\program files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe [2009-10-01 2314240]
S2 VideAceWindowsService;VideAceWindowsService;c:\expressgateutil\VAWinService.exe [2010-08-21 77312]
S3 AsusgmsFltr;Gaming Mouse;c:\windows\system32\drivers\Asusgms.sys [2010-01-12 11520]
S3 btusbflt;Bluetooth USB Filter;c:\windows\system32\drivers\btusbflt.sys [2009-12-14 53800]
S3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [2009-04-07 35104]
S3 FLxHCIc;Fresco Logic xHCI (USB3) Device Driver;c:\windows\system32\DRIVERS\FLxHCIc.sys [2010-09-25 229376]
S3 FLxHCIh;Fresco Logic xHCI (USB3) Hub Device Driver;c:\windows\system32\DRIVERS\FLxHCIh.sys [2010-09-25 69120]
S3 HECIx64;Intel® Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [2009-09-17 56344]
S3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x64.sys [2010-04-21 76912]
S3 MBfilt;MBfilt;c:\windows\system32\drivers\MBfilt64.sys [2009-11-17 32344]
S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda64v.sys [2012-04-18 188736]
S3 RSPCIESTOR;Realtek PCIE CardReader Driver;c:\windows\system32\DRIVERS\RtsPStor.sys [2010-07-26 318056]
.
.
Contents of the 'Scheduled Tasks' folder
.
2012-07-31 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-627423442-2963774430-1367278436-1001Core.job
- c:\users\Jimmy\AppData\Local\Facebook\Update\FacebookUpdate.exe [2011-08-19 22:36]
.
2012-08-02 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-627423442-2963774430-1367278436-1001UA.job
- c:\users\Jimmy\AppData\Local\Facebook\Update\FacebookUpdate.exe [2011-08-19 22:36]
.
2012-08-02 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-12-25 01:06]
.
2012-08-02 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-12-25 01:06]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AsusWSShellExt_B]
@="{6D4133E5-0742-4ADC-8A8C-9303440F7190}"
[HKEY_CLASSES_ROOT\CLSID\{6D4133E5-0742-4ADC-8A8C-9303440F7190}]
2009-11-26 05:49 70656 ----a-w- c:\program files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSShellExt64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AsusWSShellExt_O]
@="{64174815-8D98-4CE6-8646-4C039977D808}"
[HKEY_CLASSES_ROOT\CLSID\{64174815-8D98-4CE6-8646-4C039977D808}]
2009-11-26 05:49 70656 ----a-w- c:\program files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSShellExt64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\snxPluginsShell]
@="{F4B3B0AA-13D1-4a36-BDA2-2055B0F3D5DE}"
[HKEY_CLASSES_ROOT\CLSID\{F4B3B0AA-13D1-4a36-BDA2-2055B0F3D5DE}]
2010-06-28 21:56 177416 ----a-w- c:\program files\Alwil Software\Avast5\snxPlugins64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ASUS WebStorage"="c:\program files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe" [2010-03-16 1754448]
"IntelTBRunOnce"="wscript.exe" [2009-07-14 168960]
"THXCfg64"="c:\windows\system32\THXCfg64.dll" [2009-10-15 17920]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x0
.
------- Supplementary Scan -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page =
mStart Page = hxxp://asus.msn.com
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local
LSP: c:\program files (x86)\Common Files\PC Tools\Lsp\PCTLsp.dll
Trusted Zone: clonewarsadventures.com
Trusted Zone: freerealms.com
Trusted Zone: soe.com
Trusted Zone: sony.com
TCP: DhcpNameServer = 192.168.1.1
FF - ProfilePath - c:\users\Jimmy\AppData\Roaming\Mozilla\Firefox\Profiles\tkmjh3d4.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - about:home
FF - user.js: general.useragent.extra.brc -
.
- - - - ORPHANS REMOVED - - - -
.
Wow6432Node-HKLM-Run-SessionLogon - c:\expressgateutil\SessionLogon.exe
HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
HKLM-Run-Setwallpaper - c:\programdata\SetWallpaper.cmd
AddRemove-Steam App 220 - c:\program files (x86)\Steam\steam.exe
AddRemove-Steam App 340 - c:\program files (x86)\Steam\steam.exe
AddRemove-Steam App 380 - c:\program files (x86)\Steam\steam.exe
AddRemove-Steam App 400 - c:\program files (x86)\Steam\steam.exe
AddRemove-Steam App 420 - c:\program files (x86)\Steam\steam.exe
AddRemove-Steam App 440 - c:\program files (x86)\Steam\steam.exe
AddRemove-Steam App 520 - c:\program files (x86)\Steam\steam.exe
AddRemove-Steam App 8980 - c:\program files (x86)\Steam\steam.exe
.
.
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\services\{B154377D-700F-42cc-9474-23858FBDF4BD}]
"ImagePath"="\??\c:\program files (x86)\CyberLink\PowerDVD9\000.fcl"
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\Approved Extensions]
@Denied: (2) (LocalSystem)
"{2318C2B1-4965-11D4-9B18-009027A5CD4F}"=hex:51,66,7a,6c,4c,1d,38,12,df,c1,0b,
27,57,07,ba,54,e4,0e,43,d0,22,fb,89,5b
"{9030D464-4C02-4ABF-8ECC-5164760863C6}"=hex:51,66,7a,6c,4c,1d,38,12,0a,d7,23,
94,30,02,d1,0f,f1,da,12,24,73,56,27,d2
"{9FDDE16B-836F-4806-AB1F-1455CBEFF289}"=hex:51,66,7a,6c,4c,1d,38,12,05,e2,ce,
9b,5d,cd,68,0d,d4,09,57,15,ce,b1,b6,9d
"{AA58ED58-01DD-4D91-8333-CF10577473F7}"=hex:51,66,7a,6c,4c,1d,38,12,36,ee,4b,
ae,ef,4f,ff,08,fc,25,8c,50,52,2a,37,e3
"{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}"=hex:51,66,7a,6c,4c,1d,38,12,07,5b,93,
aa,6e,60,ba,0b,f0,6d,b2,b7,80,44,00,83
"{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}"=hex:51,66,7a,6c,4c,1d,38,12,2d,dd,7a,
ab,6a,33,56,03,c9,ec,8d,26,b0,f3,64,49
"{C84D72FE-E17D-4195-BB24-76C02E2E7C4E}"=hex:51,66,7a,6c,4c,1d,38,12,90,71,5e,
cc,4f,af,fb,04,c4,32,35,80,2b,70,38,5a
"{DBC80044-A445-435B-BC74-9C25C1C588A9}"=hex:51,66,7a,6c,4c,1d,38,12,2a,03,db,
df,77,ea,35,06,c3,62,df,65,c4,9b,cc,bd
.
[HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\ApprovedExtensionsMigration]
@Denied: (2) (LocalSystem)
"Timestamp"=hex:16,12,ef,d2,28,6c,cd,01
.
[HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\User Preferences]
@Denied: (2) (LocalSystem)
"88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,80,e5,1e,76,4c,50,bf,4e,88,9d,25,\
"2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,80,e5,1e,76,4c,50,bf,4e,88,9d,25,\
.
[HKEY_USERS\S-1-5-21-627423442-2963774430-1367278436-1001\Software\SecuROM\License information*]
"datasecu"=hex:03,e1,7c,46,1d,7a,63,c4,bc,31,7f,ef,06,10,a7,12,95,b5,3c,be,93,
a6,bc,62,ed,e8,ff,05,91,32,3f,1d,90,eb,f8,73,f4,28,dd,8c,0a,90,0d,a9,77,46,\
"rkeysecu"=hex:7d,40,10,cb,c7,39,e0,67,0a,69,a8,47,07,da,5b,5c
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10w_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10w_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10w.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10w.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10w.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10w.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Other Running Processes ------------------------
.
c:\program files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
c:\program files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
c:\program files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
c:\program files (x86)\ASUS\SmartLogon\sensorsrv.exe
c:\program files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
c:\windows\AsScrPro.exe
c:\program files (x86)\CyberLink\Power2Go\CLMLSvc.exe
c:\program files (x86)\Motorola\MotoConnectService\MotoConnect.exe
c:\program files (x86)\ASUS\ControlDeck\ControlDeck.exe
.
**************************************************************************
.
Completion time: 2012-08-02 17:27:49 - machine was rebooted
ComboFix-quarantined-files.txt 2012-08-02 21:27
.
Pre-Run: 10,273,161,216 bytes free
Post-Run: 9,958,055,936 bytes free
.
- - End Of File - - 4E55CFFD3F418DB9D7DA07C39F4E943A
  • 0

#7
CompCav
Posted 02 August 2012 - 03:45 PM

CompCav

    Member 5k

  • Expert
  • 12,454 posts
Update me on how your computer is running. :)
  • 0

#8
CompCav
Posted 07 August 2012 - 10:36 AM

CompCav

    Member 5k

  • Expert
  • 12,454 posts
Due to lack of feedback, this topic has been closed.

If you need this topic reopened, please contact a staff member. This applies only to the original topic starter. Everyone else please begin a New Topic.
  • 0
Back to Virus, Spyware, Malware Removal · Next Unread Topic →




Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

  1. Geeks to Go Community
  2. → Security
  3. → Virus, Spyware, Malware Removal

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP