Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Virus in my computer [Closed]


  • This topic is locked This topic is locked

#1
cachep

cachep

    New Member

  • Member
  • Pip
  • 1 posts
Dear all

This is log of OTL in my computer

I install NIS 2013 but it alway have notice Email error.

Thanks

OTL logfile created on: 7/30/2013 9:51:17 AM - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = H:\Document - Desktop\MY DOCUMENTS\Downloads\Programs
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

1.89 Gb Total Physical Memory | 0.72 Gb Available Physical Memory | 37.98% Memory free
3.74 Gb Paging File | 2.76 Gb Available in Paging File | 73.80% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 56.48 Gb Total Space | 47.61 Gb Free Space | 84.30% Space Free | Partition Type: NTFS
Drive D: | 26.83 Gb Total Space | 23.30 Gb Free Space | 86.86% Space Free | Partition Type: NTFS
Drive E: | 25.12 Gb Total Space | 20.81 Gb Free Space | 82.85% Space Free | Partition Type: NTFS
Drive F: | 40.62 Gb Total Space | 37.46 Gb Free Space | 92.21% Space Free | Partition Type: NTFS
Drive G: | 1035.07 Gb Total Space | 562.75 Gb Free Space | 54.37% Space Free | Partition Type: NTFS
Drive H: | 827.93 Gb Total Space | 630.03 Gb Free Space | 76.10% Space Free | Partition Type: NTFS
Drive I: | 589.14 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS

Computer Name: KHO-SATO | User Name: KHO SATO | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2013/07/30 09:50:31 | 000,602,112 | ---- | M] (OldTimer Tools) -- H:\Document - Desktop\MY DOCUMENTS\Downloads\Programs\OTL.exe
PRC - [2013/07/30 08:40:25 | 000,920,472 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2013/07/29 23:58:47 | 001,175,552 | RH-- | M] (Microsoft Corporation) -- C:\WINDOWS\Temp\temp17.exe
PRC - [2013/07/26 20:32:03 | 003,624,528 | ---- | M] (Tonec Inc.) -- C:\Program Files\Internet Download Manager\IDMan.exe
PRC - [2013/05/25 07:47:30 | 027,776,968 | ---- | M] (Dropbox, Inc.) -- C:\Documents and Settings\KHO SATO\Application Data\Dropbox\bin\Dropbox.exe
PRC - [2013/05/21 11:44:22 | 000,144,368 | R--- | M] (Symantec Corporation) -- C:\Program Files\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe
PRC - [2012/12/12 20:44:48 | 000,268,248 | ---- | M] (Tonec Inc.) -- C:\Program Files\Internet Download Manager\IEMonitor.exe
PRC - [2008/04/14 19:00:00 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2006/04/19 06:55:00 | 000,217,088 | ---- | M] () -- C:\Program Files\UniKey\UniKeyNT.exe
PRC - [2003/04/17 15:21:52 | 000,138,240 | ---- | M] (CANON INC.) -- C:\WINDOWS\system32\spool\drivers\w32x86\3\CAP2SWK.EXE
PRC - [2003/04/17 15:21:52 | 000,061,224 | ---- | M] (CANON INC.) -- C:\WINDOWS\system32\CAP2RSK.EXE
PRC - [2003/04/17 15:21:52 | 000,030,720 | ---- | M] (CANON INC.) -- C:\WINDOWS\system32\spool\drivers\w32x86\3\CAP2LAK.EXE


========== Modules (No Company Name) ==========

MOD - [2013/07/30 09:13:59 | 016,166,280 | ---- | M] () -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_8_800_94.dll
MOD - [2013/07/30 08:40:25 | 003,285,912 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll
MOD - [2013/03/14 03:48:52 | 024,978,944 | ---- | M] () -- C:\Documents and Settings\KHO SATO\Application Data\Dropbox\bin\libcef.dll
MOD - [2012/11/14 06:32:50 | 003,558,400 | ---- | M] () -- C:\Documents and Settings\KHO SATO\Application Data\Dropbox\bin\wxmsw28uh_vc.dll
MOD - [2012/05/30 21:51:08 | 000,699,280 | R--- | M] () -- C:\Program Files\Norton Internet Security\Engine\20.4.0.40\wincfi39.dll
MOD - [2008/04/14 19:00:00 | 000,059,904 | ---- | M] () -- C:\WINDOWS\system32\devenum.dll
MOD - [2008/04/14 19:00:00 | 000,015,360 | ---- | M] () -- C:\WINDOWS\system32\tsd32.dll
MOD - [2008/04/14 19:00:00 | 000,014,336 | ---- | M] () -- C:\WINDOWS\system32\msdmo.dll
MOD - [2006/04/19 06:55:00 | 000,217,088 | ---- | M] () -- C:\Program Files\UniKey\UniKeyNT.exe
MOD - [2006/04/19 06:53:51 | 000,188,416 | ---- | M] () -- C:\Program Files\UniKey\UKHook40.dll


========== Services (SafeList) ==========

SRV - [2013/07/30 08:40:25 | 000,117,144 | ---- | M] (Mozilla Foundation) [Disabled | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2013/07/29 23:42:11 | 000,655,624 | ---- | M] (Acresso Software Inc.) [Disabled | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2013/06/21 09:53:36 | 000,162,408 | R--- | M] (Skype Technologies) [Disabled | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2013/05/21 11:44:22 | 000,144,368 | R--- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe -- (NIS)
SRV - [2012/07/16 18:48:00 | 000,365,376 | ---- | M] (Intel Corporation) [Disabled | Stopped] -- C:\Program Files\Intel\Intel® Management Engine Components\UNS\UNS.exe -- (UNS)
SRV - [2012/07/16 18:47:58 | 000,277,824 | ---- | M] (Intel Corporation) [Disabled | Stopped] -- C:\Program Files\Intel\Intel® Management Engine Components\LMS\LMS.exe -- (LMS)
SRV - [2012/07/16 18:47:44 | 000,166,720 | ---- | M] (Intel Corporation) [Disabled | Stopped] -- C:\Program Files\Intel\Intel® Management Engine Components\DAL\Jhi_service.exe -- (jhi_service)
SRV - [2012/06/19 19:03:28 | 000,462,088 | ---- | M] (Intel® Corporation) [Disabled | Stopped] -- C:\Program Files\Intel\iCLS Client\HeciServer.exe -- (Intel®


========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP)
DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump)
DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc)
DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt)
DRV - File not found [Kernel | System | Stopped] -- -- (Changer)
DRV - [2013/07/29 23:58:50 | 000,050,704 | ---- | M] (CACE Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\npf.sys -- (NPF)
DRV - [2013/07/29 22:44:19 | 000,142,496 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\SYMEVENT.SYS -- (SymEvent)
DRV - [2013/07/29 17:11:10 | 001,611,992 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\Definitions\VirusDefs\20130729.007\NAVEX15.SYS -- (NAVEX15)
DRV - [2013/07/29 17:11:10 | 000,376,480 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys -- (eeCtrl)
DRV - [2013/07/29 17:11:10 | 000,106,656 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys -- (EraserUtilRebootDrv)
DRV - [2013/07/29 17:11:10 | 000,093,272 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\Definitions\VirusDefs\20130729.007\NAVENG.SYS -- (NAVENG)
DRV - [2013/07/26 15:27:36 | 000,373,728 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\Definitions\IPSDefs\20130727.001\IDSXpx86.sys -- (IDSxpx86)
DRV - [2013/06/27 16:57:42 | 000,118,344 | ---- | M] (Tonec Inc.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\idmtdi.sys -- (IDMTDI)
DRV - [2013/05/23 12:25:28 | 000,934,488 | R--- | M] (Symantec Corporation) [File_System | Boot | Running] -- C:\WINDOWS\system32\drivers\NIS\1404000.028\SymEFA.sys -- (SymEFA)
DRV - [2013/05/21 12:02:00 | 000,367,704 | R--- | M] (Symantec Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\NIS\1404000.028\SymDS.sys -- (SymDS)
DRV - [2013/05/21 11:41:34 | 001,002,072 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\Definitions\BASHDefs\20130715.001\BHDrvx86.sys -- (BHDrvx86)
DRV - [2013/05/16 12:02:14 | 000,603,224 | R--- | M] (Symantec Corporation) [File_System | On_Demand | Running] -- C:\WINDOWS\system32\drivers\NIS\1404000.028\srtsp.sys -- (SRTSP)
DRV - [2013/04/25 07:43:56 | 000,396,760 | R--- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\NIS\1404000.028\symtdi.sys -- (SYMTDI)
DRV - [2013/04/16 09:41:14 | 000,134,744 | R--- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\NIS\1404000.028\ccSetx86.sys -- (ccSet_NIS)
DRV - [2013/03/05 09:14:18 | 000,044,064 | R--- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\SymIM.sys -- (SymIMMP)
DRV - [2013/03/05 09:14:18 | 000,044,064 | R--- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\SymIM.sys -- (SymIM)
DRV - [2013/03/05 08:39:19 | 000,175,264 | R--- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\NIS\1404000.028\Ironx86.sys -- (SymIRON)
DRV - [2013/03/05 08:21:35 | 000,032,344 | R--- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\NIS\1404000.028\srtspx.sys -- (SRTSPX)
DRV - [2012/07/02 22:16:00 | 000,055,104 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HECI.sys -- (MEI)
DRV - [2012/04/25 22:09:00 | 000,082,032 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\l1c51x86.sys -- (L1c)
DRV - [2006/11/25 11:43:04 | 000,067,584 | ---- | M] (EZB Systems, Inc.) [File_System | System | Running] -- C:\Program Files\UltraISO\drivers\ISODrive.sys -- (ISODrive)
DRV - [2003/04/17 15:21:52 | 000,023,232 | ---- | M] (CANON INC.) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\CAP2LPT.SYS -- (RapidPort2)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.c...ferrer:source?}

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKCU\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689
IE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.co...ch?q={searc---- | m] (microsoft corporation)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.useDBForOrder: "false"
FF - prefs.js..extensions.enabledAddons: %7Ba0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7%7D:20130515
FF - prefs.js..extensions.enabledAddons: mozilla_cc%40internetdownloadmanager.com:7.3.55
FF - prefs.js..extensions.enabledAddons: %7B2D3F3651-74B9-4795-BDEC-6DA2F431CB62%7D:2013.4.1.2
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:22.0
FF - prefs.js..browser.startup.homepage: ""


FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42: C:\Program Files\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater: C:\Program Files\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF - HKLM\Software\MozillaPlugins\@messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6: C:\Program Files\Yahoo!\Shared\npYState.dll (Yahoo! Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{BBDA0591-3099-440a-AA10-41764D9DB4DB}: C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\IPSFFPlgn\ [2013/07/29 22:44:39 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}: C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\coFFPlgn\ [2013/07/30 08:53:07 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 22.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 22.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\[email protected]: C:\Documents and Settings\KHO SATO\Application Data\IDM\idmmzcc5 [2013/07/29 23:06:38 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\SeaMonkey\Extensions\\[email protected]: C:\Documents and Settings\KHO SATO\Application Data\IDM\idmmzcc5 [2013/07/29 23:06:38 | 000,000,000 | ---D | M]

[2013/07/29 22:43:42 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\KHO SATO\Application Data\Mozilla\Extensions
[2013/07/29 23:24:06 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\KHO SATO\Application Data\Mozilla\Firefox\Profiles\3usn91m5.default\extensions
[2013/07/29 22:52:46 | 000,000,000 | ---D | M] (Yahoo! Toolbar) -- C:\Documents and Settings\KHO SATO\Application Data\Mozilla\Firefox\Profiles\3usn91m5.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
[2013/07/29 23:06:05 | 000,000,000 | ---D | M] (WOT) -- C:\Documents and Settings\KHO SATO\Application Data\Mozilla\Firefox\Profiles\3usn91m5.default\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
[2013/07/29 23:18:37 | 000,002,506 | ---- | M] () -- C:\Documents and Settings\KHO SATO\Application Data\Mozilla\Firefox\Profiles\3usn91m5.default\searchplugins\safesearch.xml
[2013/07/30 08:40:19 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\browser\extensions
[2013/07/30 08:40:25 | 000,000,000 | ---D | M] (Default) -- C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2013/07/30 08:53:07 | 000,000,000 | ---D | M] (Norton Toolbar) -- C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\NORTON\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\COFFPLGN
[2013/07/29 23:06:38 | 000,000,000 | ---D | M] (IDM CC) -- C:\DOCUMENTS AND SETTINGS\KHO SATO\APPLICATION DATA\IDM\IDMMZCC5

O1 HOSTS File: ([2008/04/14 19:00:00 | 000,000,734 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (IDM integration (IDMIEHlprObj Class)) - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll (Internet Download Manager, Tonec Inc.)
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - No CLSID value found.
O2 - BHO: (Norton Identity Protection) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton Internet Security\Engine\20.4.0.40\CoIEPlg.dll (Symantec Corporation)
O2 - BHO: (Norton Vulnerability Protection) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton Internet Security\Engine\20.4.0.40\IPS\IPSBHO.dll (Symantec Corporation)
O3 - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Internet Security\Engine\20.4.0.40\CoIEPlg.dll (Symantec Corporation)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - No CLSID value found.
O4 - HKLM..\Run: [CAP2ON] C:\WINDOWS\system32\spool\drivers\w32x86\3\CAP2ONN.EXE (CANON INC.)
O4 - HKLM..\Run: [NetworkSaver] C:\WINDOWS\Temp\temp17.exe (Microsoft Corporation)
O4 - HKCU..\Run: [IDMan] C:\Program Files\Internet Download Manager\IDMan.exe (Tonec Inc.)
O4 - HKCU..\Run: [uTorrent] C:\Documents and Settings\KHO SATO\Application Data\uTorrent\uTorrent.exe (BitTorrent Inc.)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Canon LASER SHOT LBP-1210 Status Window.LNK = C:\WINDOWS\system32\spool\drivers\w32x86\3\CAP2LAK.EXE (CANON INC.)
O4 - Startup: C:\Documents and Settings\KHO SATO\Start Menu\Programs\Startup\Dropbox.lnk = C:\Documents and Settings\KHO SATO\Application Data\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\WINDOWS\System32\GPhotos.scr (Google Inc.)
O8 - Extra context menu item: Download all links with IDM - C:\Program Files\Internet Download Manager\IEGetAll.htm ()
O8 - Extra context menu item: Download with IDM - C:\Program Files\Internet Download Manager\IEExt.htm ()
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.250
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{73FB71E1-CE70-451E-A46F-1D7100E9980B}: DhcpNameServer = 192.168.1.250
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\WINDOWS\Web\Wallpaper\Bliss.bmp
O24 - Desktop BackupWallPaper: C:\WINDOWS\Web\Wallpaper\Bliss.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2013/07/29 22:14:38 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2013/07/10 08:23:13 | 000,000,000 | ---D | M] - G:\Autoreiji.2010.720p.Bluray.DD5.1.x264-ESiR -- [ NTFS ]
O32 - AutoRun File - [2008/04/14 19:00:00 | 000,000,110 | R--- | M] () - I:\AUTORUN.INF -- [ CDFS ]
O33 - MountPoints2\{0ed1a938-f898-11e2-b04b-806d6172696f}\Shell - "" = AutoRun
O33 - MountPoints2\{0ed1a938-f898-11e2-b04b-806d6172696f}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{0ed1a938-f898-11e2-b04b-806d6172696f}\Shell\AutoRun\command - "" = I:\SETUP.EXE -- [2008/04/14 19:00:00 | 001,314,816 | R--- | M] (Microsoft Corporation)
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

========== Files/Folders - Created Within 30 Days ==========

[2013/07/30 09:36:02 | 000,044,064 | R--- | C] (Symantec Corporation) -- C:\WINDOWS\System32\drivers\SymIM.sys
[2013/07/30 09:36:00 | 000,000,000 | ---D | C] -- C:\WINDOWS\LastGood
[2013/07/30 09:15:43 | 000,000,000 | -HSD | C] -- C:\Config.Msi
[2013/07/30 09:14:19 | 000,000,000 | ---D | C] -- C:\Documents and Settings\KHO SATO\Application Data\MSNInstaller
[2013/07/30 08:40:19 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[2013/07/30 08:39:34 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Canon LASER SHOT LBP-1210
[2013/07/30 08:18:41 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
[2013/07/30 05:01:45 | 000,000,000 | -HSD | C] -- C:\WINDOWS\Installer
[2013/07/30 05:01:45 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\ODBC
[2013/07/30 05:01:42 | 000,000,000 | R--D | C] -- C:\Program Files
[2013/07/30 05:01:42 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\SpeechEngines
[2013/07/30 05:01:42 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Microsoft Shared
[2013/07/30 05:01:42 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files
[2013/07/30 05:01:25 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Startup
[2013/07/30 05:01:25 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Start Menu
[2013/07/30 05:01:25 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Documents
[2013/07/30 05:01:25 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\All Users\Templates
[2013/07/30 05:01:25 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Favorites
[2013/07/30 05:01:25 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Desktop
[2013/07/30 05:01:15 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\CatRoot2
[2013/07/30 05:01:15 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\CatRoot
[2013/07/30 05:01:09 | 000,000,000 | --SD | C] -- C:\Documents and Settings\All Users\Application Data\Microsoft
[2013/07/30 05:01:09 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\All Users\Application Data
[2013/07/30 05:00:51 | 000,000,000 | -HSD | C] -- C:\System Volume Information
[2013/07/30 05:00:51 | 000,000,000 | ---D | C] -- C:\Documents and Settings
[2013/07/30 04:55:58 | 000,000,000 | R-SD | C] -- C:\WINDOWS\Fonts
[2013/07/30 04:55:58 | 000,000,000 | RHSD | C] -- C:\WINDOWS\System32\dllcache
[2013/07/30 04:55:58 | 000,000,000 | R--D | C] -- C:\WINDOWS\Web
[2013/07/30 04:55:58 | 000,000,000 | -H-D | C] -- C:\WINDOWS\inf
[2013/07/30 04:55:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\WinSxS
[2013/07/30 04:55:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\wins
[2013/07/30 04:55:58 | 000,000,000 | ---D | C] -- C:\WINDOWS
[2013/07/30 04:55:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\wbem
[2013/07/30 04:55:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\usmt
[2013/07/30 04:55:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\twain_32
[2013/07/30 04:55:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\Temp
[2013/07/30 04:55:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\system32
[2013/07/30 04:55:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\system
[2013/07/30 04:55:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\spool
[2013/07/30 04:55:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\ShellExt
[2013/07/30 04:55:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Setup
[2013/07/30 04:55:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\security
[2013/07/30 04:55:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\scripting
[2013/07/30 04:55:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\Resources
[2013/07/30 04:55:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\repair
[2013/07/30 04:55:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\ras
[2013/07/30 04:55:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\Provisioning
[2013/07/30 04:55:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\PeerNet
[2013/07/30 04:55:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\pchealth
[2013/07/30 04:55:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\oobe
[2013/07/30 04:55:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\npp
[2013/07/30 04:55:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\Network Diagnostic
[2013/07/30 04:55:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\mui
[2013/07/30 04:55:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\mui
[2013/07/30 04:55:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\msapps
[2013/07/30 04:55:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\msagent
[2013/07/30 04:55:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\Media
[2013/07/30 04:55:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\L2Schemas
[2013/07/30 04:55:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\java
[2013/07/30 04:55:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\inetsrv
[2013/07/30 04:55:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\IME
[2013/07/30 04:55:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\ime
[2013/07/30 04:55:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\icsxml
[2013/07/30 04:55:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\ias
[2013/07/30 04:55:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\Help
[2013/07/30 04:55:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\export
[2013/07/30 04:55:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\etc
[2013/07/30 04:55:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\en
[2013/07/30 04:55:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\ehome
[2013/07/30 04:55:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers
[2013/07/30 04:55:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\Driver Cache
[2013/07/30 04:55:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\disdn
[2013/07/30 04:55:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\dhcp
[2013/07/30 04:55:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\Debug
[2013/07/30 04:55:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\Cursors
[2013/07/30 04:55:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\Connection Wizard
[2013/07/30 04:55:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\config
[2013/07/30 04:55:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\Config
[2013/07/30 04:55:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\AppPatch
[2013/07/30 04:55:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\addins
[2013/07/30 04:55:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\3com_dmi
[2013/07/30 04:55:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\3076
[2013/07/30 04:55:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\2052
[2013/07/30 04:55:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1054
[2013/07/30 04:55:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1042
[2013/07/30 04:55:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1041
[2013/07/30 04:55:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1037
[2013/07/30 04:55:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1033
[2013/07/30 04:55:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1031
[2013/07/30 04:55:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1028
[2013/07/30 04:55:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1025
[2013/07/30 03:41:15 | 000,000,000 | ---D | C] -- C:\Program Files\Dropbox
[2013/07/30 03:36:14 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\KHO SATO\IETldCache
[2013/07/30 03:18:29 | 000,000,000 | ---D | C] -- C:\WINDOWS\ie8updates
[2013/07/30 03:18:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\WBEM
[2013/07/30 03:17:29 | 000,000,000 | -H-D | C] -- C:\WINDOWS\ie8
[2013/07/29 23:58:50 | 000,281,104 | ---- | C] (CACE Technologies, Inc.) -- C:\WINDOWS\System32\wpcap.dll
[2013/07/29 23:58:50 | 000,100,880 | ---- | C] (CACE Technologies, Inc.) -- C:\WINDOWS\System32\Packet.dll
[2013/07/29 23:58:50 | 000,050,704 | ---- | C] (CACE Technologies, Inc.) -- C:\WINDOWS\System32\drivers\npf.sys
[2013/07/29 23:51:00 | 000,000,000 | ---D | C] -- C:\Program Files\MSBuild
[2013/07/29 23:50:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\XPSViewer
[2013/07/29 23:50:54 | 000,000,000 | ---D | C] -- C:\Program Files\Reference Assemblies
[2013/07/29 23:49:19 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\PreInstall
[2013/07/29 23:49:17 | 000,000,000 | -H-D | C] -- C:\WINDOWS\$hf_mig$
[2013/07/29 23:48:40 | 000,000,000 | R-SD | C] -- C:\WINDOWS\assembly
[2013/07/29 23:48:19 | 000,000,000 | ---D | C] -- C:\WINDOWS\Microsoft.NET
[2013/07/29 23:47:43 | 000,000,000 | ---D | C] -- C:\WINDOWS\pss
[2013/07/29 23:47:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\KHO SATO\Local Settings\Application Data\Adobe
[2013/07/29 23:45:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Adobe
[2013/07/29 23:44:35 | 000,000,000 | ---D | C] -- C:\Program Files\Adobe
[2013/07/29 23:42:11 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Macrovision Shared
[2013/07/29 23:39:29 | 000,000,000 | -H-D | C] -- C:\WINDOWS\PIF
[2013/07/29 23:39:27 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe
[2013/07/29 23:35:33 | 000,000,000 | --SD | C] -- C:\Documents and Settings\KHO SATO\UserData
[2013/07/29 23:31:11 | 000,000,000 | ---D | C] -- C:\Documents and Settings\KHO SATO\Application Data\uTorrent
[2013/07/29 23:27:10 | 000,000,000 | -HSD | C] -- C:\RECYCLER
[2013/07/29 23:23:54 | 000,508,416 | ---- | C] (VNG Corporation) -- C:\Documents and Settings\KHO SATO\Application Data\laban.exe
[2013/07/29 23:22:07 | 000,000,000 | ---D | C] -- C:\Program Files\PANDORA.TV
[2013/07/29 23:21:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\KHO SATO\Start Menu\Programs\The KMPlayer
[2013/07/29 23:21:23 | 000,000,000 | ---D | C] -- C:\Program Files\The KMPlayer
[2013/07/29 23:15:41 | 000,000,000 | ---D | C] -- C:\Documents and Settings\KHO SATO\Application Data\BabSolution
[2013/07/29 23:15:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\SoftwareDistribution
[2013/07/29 23:14:30 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Babylon
[2013/07/29 23:14:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\KHO SATO\Application Data\Babylon
[2013/07/29 23:14:26 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Your Uninstaller! 7
[2013/07/29 23:14:20 | 000,000,000 | ---D | C] -- C:\Program Files\Your Uninstaller! 7
[2013/07/29 23:13:56 | 000,000,000 | ---D | C] -- C:\Documents and Settings\KHO SATO\Application Data\URSoft
[2013/07/29 23:13:53 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\TEMP
[2013/07/29 23:06:51 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Picasa 3
[2013/07/29 23:06:32 | 000,000,000 | ---D | C] -- C:\Documents and Settings\KHO SATO\Application Data\IDM
[2013/07/29 23:06:32 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\IDM
[2013/07/29 23:06:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\KHO SATO\Application Data\DMCache
[2013/07/29 23:06:13 | 000,000,000 | ---D | C] -- C:\Documents and Settings\KHO SATO\Start Menu\Programs\Internet Download Manager
[2013/07/29 23:06:13 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Internet Download Manager
[2013/07/29 23:06:10 | 000,000,000 | ---D | C] -- C:\Program Files\Internet Download Manager
[2013/07/29 23:04:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\KHO SATO\Local Settings\Application Data\Google
[2013/07/29 23:04:40 | 000,000,000 | ---D | C] -- C:\Program Files\Foxit Software
[2013/07/29 23:04:16 | 000,000,000 | ---D | C] -- C:\Program Files\Google
[2013/07/29 23:01:11 | 000,000,000 | ---D | C] -- C:\Documents and Settings\KHO SATO\Start Menu\Programs\Dropbox
[2013/07/29 23:00:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\KHO SATO\Application Data\Dropbox
[2013/07/29 22:55:53 | 000,000,000 | ---D | C] -- C:\Documents and Settings\KHO SATO\Application Data\Skype
[2013/07/29 22:55:46 | 000,000,000 | R--D | C] -- C:\Program Files\Skype
[2013/07/29 22:55:46 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Skype
[2013/07/29 22:55:46 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Skype
[2013/07/29 22:55:32 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Skype
[2013/07/29 22:55:22 | 000,000,000 | ---D | C] -- C:\Documents and Settings\KHO SATO\Application Data\Macromedia
[2013/07/29 22:55:22 | 000,000,000 | ---D | C] -- C:\Documents and Settings\KHO SATO\Application Data\Adobe
[2013/07/29 22:54:34 | 000,000,000 | ---D | C] -- C:\Documents and Settings\KHO SATO\Application Data\WinRAR
[2013/07/29 22:54:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Application Data\Softland
[2013/07/29 22:54:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\KHO SATO\Application Data\Softland
[2013/07/29 22:54:00 | 000,023,376 | ---- | C] (Softland) -- C:\WINDOWS\System32\dopdfmn7.dll
[2013/07/29 22:54:00 | 000,020,816 | ---- | C] (Softland) -- C:\WINDOWS\System32\dopdfmi7.dll
[2013/07/29 22:53:59 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\doPDF 7
[2013/07/29 22:53:56 | 000,000,000 | ---D | C] -- C:\Program Files\Softland
[2013/07/29 22:53:12 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\UltraISO
[2013/07/29 22:53:10 | 000,000,000 | ---D | C] -- C:\Program Files\UltraISO
[2013/07/29 22:53:10 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\EZB Systems
[2013/07/29 22:52:21 | 000,000,000 | ---D | C] -- C:\Documents and Settings\KHO SATO\Application Data\Yahoo!
[2013/07/29 22:52:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Yahoo! Messenger
[2013/07/29 22:52:02 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Yahoo!
[2013/07/29 22:47:45 | 000,000,000 | ---D | C] -- C:\Documents and Settings\KHO SATO\Application Data\TuneUp Software
[2013/07/29 22:47:40 | 000,000,000 | ---D | C] -- C:\Program Files\TuneUp Utilities 2013
[2013/07/29 22:47:34 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\TuneUp Software
[2013/07/29 22:47:18 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\All Users\Application Data\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}
[2013/07/29 22:47:18 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\All Users\Application Data\Common Files
[2013/07/29 22:47:08 | 000,000,000 | ---D | C] -- C:\Documents and Settings\KHO SATO\Start Menu\Programs\UniKey Vietnamese Input Method
[2013/07/29 22:47:08 | 000,000,000 | ---D | C] -- C:\Program Files\UniKey
[2013/07/29 22:46:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\WinRAR
[2013/07/29 22:46:26 | 000,000,000 | ---D | C] -- C:\Documents and Settings\KHO SATO\Start Menu\Programs\WinRAR
[2013/07/29 22:46:20 | 000,000,000 | ---D | C] -- C:\Program Files\WinRAR
[2013/07/29 22:44:19 | 000,142,496 | ---- | C] (Symantec Corporation) -- C:\WINDOWS\System32\drivers\SYMEVENT.SYS
[2013/07/29 22:44:19 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Symantec Shared
[2013/07/29 22:44:19 | 000,000,000 | ---D | C] -- C:\Program Files\Symantec
[2013/07/29 22:44:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\KHO SATO\Desktop
[2013/07/29 22:44:08 | 000,934,488 | R--- | C] (Symantec Corporation) -- C:\WINDOWS\System32\drivers\NIS\1404000.028\SymEFA.sys
[2013/07/29 22:44:08 | 000,603,224 | R--- | C] (Symantec Corporation) -- C:\WINDOWS\System32\drivers\NIS\1404000.028\srtsp.sys
[2013/07/29 22:44:08 | 000,396,760 | R--- | C] (Symantec Corporation) -- C:\WINDOWS\System32\drivers\NIS\1404000.028\symtdi.sys
[2013/07/29 22:44:08 | 000,367,704 | R--- | C] (Symantec Corporation) -- C:\WINDOWS\System32\drivers\NIS\1404000.028\SymDS.sys
[2013/07/29 22:44:08 | 000,352,344 | R--- | C] (Symantec Corporation) -- C:\WINDOWS\System32\drivers\NIS\1404000.028\symtdiv.sys
[2013/07/29 22:44:08 | 000,339,544 | R--- | C] (Symantec Corporation) -- C:\WINDOWS\System32\drivers\NIS\1404000.028\symnets.sys
[2013/07/29 22:44:08 | 000,175,264 | R--- | C] (Symantec Corporation) -- C:\WINDOWS\System32\drivers\NIS\1404000.028\Ironx86.sys
[2013/07/29 22:44:08 | 000,134,744 | R--- | C] (Symantec Corporation) -- C:\WINDOWS\System32\drivers\NIS\1404000.028\ccSetx86.sys
[2013/07/29 22:44:08 | 000,032,344 | R--- | C] (Symantec Corporation) -- C:\WINDOWS\System32\drivers\NIS\1404000.028\srtspx.sys
[2013/07/29 22:44:08 | 000,021,400 | R--- | C] (Symantec Corporation) -- C:\WINDOWS\System32\drivers\NIS\1404000.028\SymELAM.sys
[2013/07/29 22:43:47 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\NIS
[2013/07/29 22:43:47 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\NIS\1404000.028
[2013/07/29 22:43:45 | 000,000,000 | ---D | C] -- C:\Program Files\Norton Internet Security
[2013/07/29 22:43:45 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Norton Internet Security
[2013/07/29 22:43:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\KHO SATO\Local Settings\Application Data\Mozilla
[2013/07/29 22:43:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\KHO SATO\Application Data\Mozilla
[2013/07/29 22:43:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Norton
[2013/07/29 22:43:27 | 000,000,000 | ---D | C] -- C:\Program Files\NortonInstaller
[2013/07/29 22:43:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\NortonInstaller
[2013/07/29 22:43:18 | 000,000,000 | ---D | C] -- C:\Program Files\Yahoo!
[2013/07/29 22:41:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Microsoft Office
[2013/07/29 22:41:14 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\DESIGNER
[2013/07/29 22:39:56 | 000,000,000 | ---D | C] -- C:\WINDOWS\SHELLNEW
[2013/07/29 22:39:46 | 000,000,000 | ---D | C] -- C:\Documents and Settings\KHO SATO\Local Settings\Application Data\Microsoft Help
[2013/07/29 22:39:44 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Office
[2013/07/29 22:39:43 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Microsoft Help
[2013/07/29 22:39:34 | 000,000,000 | RH-D | C] -- C:\MSOCache
[2013/07/29 22:35:21 | 000,000,000 | ---D | C] -- C:\Program Files\VIA
[2013/07/29 22:35:18 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\InstallShield
[2013/07/29 22:30:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Intel
[2013/07/29 22:29:42 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\postureAgent
[2013/07/29 22:29:24 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\DRVSTORE
[2013/07/29 22:29:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Mozilla
[2013/07/29 22:29:04 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Maintenance Service
[2013/07/29 22:29:03 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox.bak
[2013/07/29 22:28:20 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Atheros_L1e
[2013/07/29 22:28:02 | 000,000,000 | ---D | C] -- C:\Intel
[2013/07/29 22:28:00 | 000,000,000 | -H-D | C] -- C:\Program Files\InstallShield Installation Information
[2013/07/29 22:28:00 | 000,000,000 | ---D | C] -- C:\Program Files\Intel
[2013/07/29 22:27:59 | 000,000,000 | ---D | C] -- C:\Documents and Settings\KHO SATO\Application Data\InstallShield
[2013/07/29 22:19:59 | 000,000,000 | ---D | C] -- C:\Documents and Settings\KHO SATO\Application Data\Identities
[2013/07/29 22:19:58 | 000,000,000 | -H-D | C] -- C:\Program Files\Uninstall Information
[2013/07/29 22:19:54 | 000,000,000 | --SD | C] -- C:\Documents and Settings\KHO SATO\Application Data\Microsoft
[2013/07/29 22:19:54 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\KHO SATO\SendTo
[2013/07/29 22:19:54 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\KHO SATO\Recent
[2013/07/29 22:19:54 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\KHO SATO\Application Data
[2013/07/29 22:19:54 | 000,000,000 | R--D | C] -- C:\Documents and Settings\KHO SATO\Start Menu\Programs\Startup
[2013/07/29 22:19:54 | 000,000,000 | R--D | C] -- C:\Documents and Settings\KHO SATO\Start Menu
[2013/07/29 22:19:54 | 000,000,000 | R--D | C] -- C:\Documents and Settings\KHO SATO\Favorites
[2013/07/29 22:19:54 | 000,000,000 | R--D | C] -- C:\Documents and Settings\KHO SATO\Start Menu\Programs\Accessories
[2013/07/29 22:19:54 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\KHO SATO\Cookies
[2013/07/29 22:19:54 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\KHO SATO\Templates
[2013/07/29 22:19:54 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\KHO SATO\PrintHood
[2013/07/29 22:19:54 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\KHO SATO\NetHood
[2013/07/29 22:19:54 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\KHO SATO\Local Settings
[2013/07/29 22:19:54 | 000,000,000 | ---D | C] -- C:\Documents and Settings\KHO SATO\Local Settings\Application Data\Microsoft
[2013/07/29 22:19:14 | 000,000,000 | ---D | C] -- C:\WINDOWS\SoftwareDistribution
[2013/07/29 22:19:13 | 000,000,000 | --SD | C] -- C:\WINDOWS\System32\Microsoft
[2013/07/29 22:19:13 | 000,000,000 | ---D | C] -- C:\WINDOWS\Prefetch
[2013/07/29 22:19:12 | 000,000,000 | --SD | C] -- C:\Documents and Settings\LocalService\Application Data\Microsoft
[2013/07/29 22:19:12 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft
[2013/07/29 22:16:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft
[2013/07/29 22:16:30 | 000,000,000 | --SD | C] -- C:\Documents and Settings\NetworkService\Application Data\Microsoft
[2013/07/29 22:15:44 | 000,079,872 | ---- | C] (Ricoh Co., Ltd.) -- C:\WINDOWS\System32\dllcache\rwia330.dll
[2013/07/29 22:15:44 | 000,079,872 | ---- | C] (Ricoh Co., Ltd.) -- C:\WINDOWS\System32\dllcache\rwia001.dll
[2013/07/29 22:15:44 | 000,029,184 | ---- | C] (Ricoh Co., Ltd.) -- C:\WINDOWS\System32\dllcache\rw330ext.dll
[2013/07/29 22:15:07 | 000,054,528 | ---- | C] (Philips Semiconductors GmbH) -- C:\WINDOWS\System32\dllcache\cap7146.sys
[2013/07/29 22:14:50 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\xircom
[2013/07/29 22:14:50 | 000,000,000 | ---D | C] -- C:\Program Files\xerox
[2013/07/29 22:14:50 | 000,000,000 | ---D | C] -- C:\Program Files\microsoft frontpage
[2013/07/29 22:14:03 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\All Users\DRM
[2013/07/29 22:13:58 | 000,000,000 | --SD | C] -- C:\WINDOWS\Downloaded Program Files
[2013/07/29 22:13:58 | 000,000,000 | R--D | C] -- C:\WINDOWS\Offline Web Pages
[2013/07/29 22:13:53 | 000,000,000 | -H-D | C] -- C:\Program Files\WindowsUpdate
[2013/07/29 22:13:38 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\DirectX
[2013/07/29 22:13:26 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Services
[2013/07/29 22:13:24 | 000,000,000 | --SD | C] -- C:\WINDOWS\Tasks
[2013/07/29 22:13:23 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\MSSoap
[2013/07/29 22:13:20 | 000,000,000 | ---D | C] -- C:\WINDOWS\srchasst
[2013/07/29 22:13:20 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Macromed
[2013/07/29 22:13:14 | 000,000,000 | ---D | C] -- C:\Program Files\Movie Maker
[2013/07/29 22:12:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Restore
[2013/07/29 22:12:54 | 000,000,000 | ---D | C] -- C:\Program Files\NetMeeting
[2013/07/29 22:12:52 | 000,000,000 | ---D | C] -- C:\Program Files\Outlook Express
[2013/07/29 22:12:47 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\System
[2013/07/29 22:12:46 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Documents\My Pictures
[2013/07/29 22:12:46 | 000,000,000 | ---D | C] -- C:\Program Files\Internet Explorer
[2013/07/29 22:12:33 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Games
[2013/07/29 22:12:24 | 000,000,000 | ---D | C] -- C:\Program Files\ComPlus Applications
[2013/07/29 22:12:19 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools
[2013/07/29 22:12:19 | 000,000,000 | ---D | C] -- C:\WINDOWS\Registration
[2013/07/29 22:12:14 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Documents\My Music
[2013/07/29 22:12:14 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Media Player
[2013/07/29 22:12:14 | 000,000,000 | ---D | C] -- C:\Program Files\Online Services
[2013/07/29 22:12:09 | 000,000,000 | ---D | C] -- C:\Program Files\Messenger
[2013/07/29 22:12:06 | 000,000,000 | ---D | C] -- C:\Program Files\MSN Gaming Zone
[2013/07/29 22:11:39 | 000,281,088 | ---- | C] (Cinematronics) -- C:\WINDOWS\System32\dllcache\pinball.exe
[2013/07/29 22:11:39 | 000,000,000 | ---D | C] -- C:\Program Files\MSN
[2013/07/29 22:11:38 | 000,000,000 | ---D | C] -- C:\Program Files\Windows NT
[2013/07/29 22:11:37 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\en-US
[2013/07/29 22:11:35 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\MsDtc
[2013/07/29 22:11:33 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Com
[2013/07/29 22:11:23 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Documents\My Videos
[2013/07/29 22:11:07 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Accessories
[2013/07/29 20:45:58 | 000,000,000 | ---D | C] -- H:\Document - Desktop\MY DOCUMENTS\My ISO Files
[2013/07/29 02:53:21 | 000,082,032 | ---- | C] (Atheros Communications, Inc.) -- C:\WINDOWS\System32\drivers\l1c51x86.sys
[2013/07/26 19:55:29 | 000,118,344 | ---- | C] (Tonec Inc.) -- C:\WINDOWS\System32\drivers\idmtdi.sys
[2013/07/23 20:40:31 | 000,000,000 | ---D | C] -- H:\Document - Desktop\Desktop\FB32. HDSD
[2013/07/20 16:33:34 | 000,000,000 | --SD | C] -- H:\Document - Desktop\MY DOCUMENTS\My Data Sources
[2013/07/17 11:29:11 | 000,000,000 | ---D | C] -- H:\Document - Desktop\Desktop\an
[2013/07/13 10:51:48 | 000,000,000 | ---D | C] -- H:\Document - Desktop\Desktop\C Linh
[2013/07/12 13:52:35 | 000,000,000 | ---D | C] -- H:\Document - Desktop\Desktop\Trang
[2013/07/10 16:27:44 | 000,000,000 | ---D | C] -- H:\Document - Desktop\Desktop\HEAT PUMP
[2013/07/08 14:24:26 | 000,000,000 | ---D | C] -- H:\Document - Desktop\Desktop\PHAN MEM
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2013/07/30 09:50:34 | 000,518,701 | ---- | M] () -- C:\WINDOWS\System32\drivers\NIS\1404000.028\Cat.DB
[2013/07/30 09:09:11 | 015,692,515 | ---- | M] () -- H:\Document - Desktop\Desktop\Voice 003.m4a
[2013/07/30 09:08:56 | 000,000,000 | ---- | M] () -- H:\Document - Desktop\Desktop\2013-7-29 Folangsi August Special Promo.pdf.part
[2013/07/30 09:08:56 | 000,000,000 | ---- | M] () -- H:\Document - Desktop\Desktop\2013-7-29 Folangsi August Special Promo.pdf
[2013/07/30 08:53:31 | 000,002,228 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2013/07/30 08:51:11 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2013/07/30 08:39:35 | 000,001,059 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Canon LASER SHOT LBP-1210.LNK
[2013/07/30 08:39:35 | 000,001,058 | ---- | M] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Canon LASER SHOT LBP-1210 Status Window.LNK
[2013/07/30 05:09:23 | 000,004,444 | ---- | M] () -- C:\WINDOWS\System32\pid.PNF
[2013/07/30 03:41:24 | 000,001,037 | ---- | M] () -- C:\Documents and Settings\KHO SATO\Start Menu\Programs\Startup\Dropbox.lnk
[2013/07/30 03:40:21 | 000,433,186 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2013/07/30 03:40:21 | 000,067,764 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2013/07/30 03:36:16 | 000,000,815 | ---- | M] () -- C:\Documents and Settings\KHO SATO\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2013/07/30 03:35:42 | 002,636,408 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2013/07/30 03:19:48 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2013/07/29 23:58:50 | 000,281,104 | ---- | M] (CACE Technologies, Inc.) -- C:\WINDOWS\System32\wpcap.dll
[2013/07/29 23:58:50 | 000,100,880 | ---- | M] (CACE Technologies, Inc.) -- C:\WINDOWS\System32\Packet.dll
[2013/07/29 23:58:50 | 000,050,704 | ---- | M] (CACE Technologies, Inc.) -- C:\WINDOWS\System32\drivers\npf.sys
[2013/07/29 23:54:13 | 000,008,192 | ---- | M] () -- C:\Documents and Settings\KHO SATO\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2013/07/29 23:48:15 | 000,000,211 | -HS- | M] () -- C:\boot.ini
[2013/07/29 23:07:40 | 000,000,777 | ---- | M] () -- C:\Documents and Settings\KHO SATO\Application Data\Microsoft\Internet Explorer\Quick Launch\Picasa 3.lnk
[2013/07/29 22:52:03 | 000,000,820 | ---- | M] () -- C:\Documents and Settings\KHO SATO\Application Data\Microsoft\Internet Explorer\Quick Launch\Yahoo! Messenger.lnk
[2013/07/29 22:47:08 | 000,000,732 | ---- | M] () -- C:\Documents and Settings\KHO SATO\Application Data\Microsoft\Internet Explorer\Quick Launch\UniKey.lnk
[2013/07/29 22:44:19 | 000,142,496 | ---- | M] (Symantec Corporation) -- C:\WINDOWS\System32\drivers\SYMEVENT.SYS
[2013/07/29 22:44:19 | 000,007,611 | ---- | M] () -- C:\WINDOWS\System32\drivers\SYMEVENT.CAT
[2013/07/29 22:44:19 | 000,000,805 | ---- | M] () -- C:\WINDOWS\System32\drivers\SYMEVENT.INF
[2013/07/29 22:29:05 | 000,000,742 | ---- | M] () -- C:\Documents and Settings\KHO SATO\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2013/07/29 22:20:05 | 000,000,079 | ---- | M] () -- C:\Documents and Settings\KHO SATO\Application Data\Microsoft\Internet Explorer\Quick Launch\Show Desktop.scf
[2013/07/29 22:16:33 | 000,008,192 | ---- | M] () -- C:\WINDOWS\REGLOCS.OLD
[2013/07/29 22:16:02 | 000,000,261 | ---- | M] () -- C:\WINDOWS\System32\$winnt$.inf
[2013/07/29 22:14:38 | 000,002,577 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT
[2013/07/29 22:14:38 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS
[2013/07/29 22:14:38 | 000,000,000 | RHS- | M] () -- C:\IO.SYS
[2013/07/29 22:14:38 | 000,000,000 | ---- | M] () -- C:\CONFIG.SYS
[2013/07/29 22:14:38 | 000,000,000 | ---- | M] () -- C:\AUTOEXEC.BAT
[2013/07/29 22:14:36 | 000,316,640 | ---- | M] () -- C:\WINDOWS\WMSysPr9.prx
[2013/07/29 22:14:36 | 000,023,392 | ---- | M] () -- C:\WINDOWS\System32\nscompat.tlb
[2013/07/29 22:14:36 | 000,016,832 | ---- | M] () -- C:\WINDOWS\System32\amcompat.tlb
[2013/07/29 22:14:28 | 000,004,161 | ---- | M] () -- C:\WINDOWS\ODBCINST.INI
[2013/07/29 22:12:32 | 000,021,640 | ---- | M] () -- C:\WINDOWS\System32\emptyregdb.dat
[2013/07/26 12:58:48 | 000,236,399 | ---- | M] () -- H:\Document - Desktop\Desktop\A LONG PATAYA 14-6-2013.pdf
[2013/07/25 10:24:18 | 000,134,603 | ---- | M] () -- H:\Document - Desktop\Desktop\20130716_133058.jpg
[2013/07/25 10:22:48 | 000,193,756 | ---- | M] () -- H:\Document - Desktop\Desktop\20130718_100824.jpg
[2013/07/20 21:32:24 | 000,063,146 | ---- | M] () -- H:\Document - Desktop\Desktop\1005752_646977218647150_1555929877_n.jpg
[2013/07/11 19:32:31 | 000,272,754 | ---- | M] () -- H:\Document - Desktop\Desktop\Mast_Guide_Bearings.pdf
[2013/07/10 14:38:41 | 000,213,274 | ---- | M] () -- H:\Document - Desktop\MY DOCUMENTS\SCG T7.pdf
[2013/07/08 17:23:45 | 000,000,833 | ---- | M] () -- H:\Document - Desktop\Desktop\Shortcut to AC-HANG DA BAO GIA.lnk
[2013/07/08 17:23:45 | 000,000,833 | ---- | M] () -- H:\Document - Desktop\Desktop\Shortcut to AB-HANG DA BAO GIA.lnk
[2013/07/08 17:23:45 | 000,000,721 | ---- | M] () -- H:\Document - Desktop\Desktop\Shortcut to HANG CAN BAO GIA.lnk
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files Created - No Company Name ==========

[2013/07/30 09:09:01 | 015,692,515 | ---- | C] () -- H:\Document - Desktop\Desktop\Voice 003.m4a
[2013/07/30 09:08:56 | 000,000,000 | ---- | C] () -- H:\Document - Desktop\Desktop\2013-7-29 Folangsi August Special Promo.pdf.part
[2013/07/30 09:08:56 | 000,000,000 | ---- | C] () -- H:\Document - Desktop\Desktop\2013-7-29 Folangsi August Special Promo.pdf
[2013/07/30 08:39:35 | 000,001,058 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Canon LASER SHOT LBP-1210 Status Window.LNK
[2013/07/30 08:39:34 | 000,001,059 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Canon LASER SHOT LBP-1210.LNK
[2013/07/30 05:09:23 | 000,004,444 | ---- | C] () -- C:\WINDOWS\System32\pid.PNF
[2013/07/30 05:01:47 | 000,001,374 | ---- | C] () -- C:\WINDOWS\imsins.BAK
[2013/07/30 05:01:45 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2013/07/30 05:01:43 | 001,685,606 | ---- | C] () -- C:\WINDOWS\System32\dllcache\sam.spd
[2013/07/30 05:01:43 | 000,643,717 | ---- | C] () -- C:\WINDOWS\System32\dllcache\ltts1033.lxa
[2013/07/30 05:01:43 | 000,605,050 | ---- | C] () -- C:\WINDOWS\System32\dllcache\r1033tts.lxa
[2013/07/30 05:01:43 | 000,000,888 | ---- | C] () -- C:\WINDOWS\System32\dllcache\sam.sdf
[2013/07/30 05:01:31 | 000,001,688 | ---- | C] () -- C:\WINDOWS\System32\AUTOEXEC.NT
[2013/07/30 05:01:24 | 002,144,487 | ---- | C] () -- C:\WINDOWS\System32\dllcache\NT5.CAT
[2013/07/30 05:01:24 | 001,296,669 | ---- | C] () -- C:\WINDOWS\System32\dllcache\SP3.CAT
[2013/07/30 05:01:24 | 000,797,189 | ---- | C] () -- C:\WINDOWS\System32\dllcache\NT5IIS.CAT
[2013/07/30 05:01:24 | 000,522,220 | ---- | C] () -- C:\WINDOWS\System32\dllcache\NT5INF.CAT
[2013/07/30 05:01:24 | 000,399,645 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MAPIMIG.CAT
[2013/07/30 05:01:24 | 000,144,484 | ---- | C] () -- C:\WINDOWS\System32\dllcache\netfx.cat
[2013/07/30 05:01:24 | 000,112,918 | ---- | C] () -- C:\WINDOWS\System32\dllcache\tabletpc.cat
[2013/07/30 05:01:24 | 000,037,484 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MW770.CAT
[2013/07/30 05:01:24 | 000,034,747 | ---- | C] () -- C:\WINDOWS\System32\dllcache\mediactr.cat
[2013/07/30 05:01:24 | 000,034,063 | ---- | C] () -- C:\WINDOWS\System32\dllcache\FP4.CAT
[2013/07/30 05:01:24 | 000,026,991 | ---- | C] () -- C:\WINDOWS\System32\dllcache\msn7.cat
[2013/07/30 05:01:24 | 000,016,535 | ---- | C] () -- C:\WINDOWS\System32\dllcache\IMS.CAT
[2013/07/30 05:01:24 | 000,014,433 | ---- | C] () -- C:\WINDOWS\System32\dllcache\msn9.cat
[2013/07/30 05:01:24 | 000,013,472 | ---- | C] () -- C:\WINDOWS\System32\dllcache\HPCRDP.CAT
[2013/07/30 05:01:24 | 000,012,363 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MSMSGS.CAT
[2013/07/30 05:01:24 | 000,010,027 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MSTSWEB.CAT
[2013/07/30 05:01:24 | 000,008,574 | ---- | C] () -- C:\WINDOWS\System32\dllcache\IASNT4.CAT
[2013/07/30 05:01:24 | 000,007,382 | ---- | C] () -- C:\WINDOWS\System32\dllcache\OEMBIOS.CAT
[2013/07/30 05:01:24 | 000,007,334 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmerrenu.cat
[2013/07/30 05:00:51 | 002,636,408 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2013/07/30 05:00:08 | 000,000,211 | -HS- | C] () -- C:\boot.ini
[2013/07/30 05:00:05 | 000,000,261 | ---- | C] () -- C:\WINDOWS\System32\$winnt$.inf
[2013/07/30 03:36:16 | 000,000,803 | ---- | C] () -- C:\Documents and Settings\KHO SATO\Start Menu\Programs\Internet Explorer.lnk
[2013/07/30 00:04:24 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll
[2013/07/30 00:04:24 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\dllcache\iacenc.dll
[2013/07/29 23:54:10 | 000,008,192 | ---- | C] () -- C:\Documents and Settings\KHO SATO\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2013/07/29 23:51:41 | 001,175,840 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat
[2013/07/29 23:45:17 | 000,001,002 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Adobe Extension Manager CS4.lnk
[2013/07/29 23:44:37 | 000,001,104 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Adobe ExtendScript Toolkit CS4.lnk
[2013/07/29 23:08:13 | 000,014,818 | ---- | C] () -- C:\WINDOWS\System32\drivers\NIS\1404000.028\VT20130115.021
[2013/07/29 23:07:40 | 000,000,777 | ---- | C] () -- C:\Documents and Settings\KHO SATO\Application Data\Microsoft\Internet Explorer\Quick Launch\Picasa 3.lnk
[2013/07/29 23:01:25 | 000,001,037 | ---- | C] () -- C:\Documents and Settings\KHO SATO\Start Menu\Programs\Startup\Dropbox.lnk
[2013/07/29 22:54:00 | 000,007,549 | ---- | C] () -- C:\WINDOWS\System32\dopdf7.ctm
[2013/07/29 22:52:03 | 000,000,820 | ---- | C] () -- C:\Documents and Settings\KHO SATO\Application Data\Microsoft\Internet Explorer\Quick Launch\Yahoo! Messenger.lnk
[2013/07/29 22:47:08 | 000,000,732 | ---- | C] () -- C:\Documents and Settings\KHO SATO\Application Data\Microsoft\Internet Explorer\Quick Launch\UniKey.lnk
[2013/07/29 22:44:22 | 000,518,701 | ---- | C] () -- C:\WINDOWS\System32\drivers\NIS\1404000.028\Cat.DB
[2013/07/29 22:44:19 | 000,007,611 | ---- | C] () -- C:\WINDOWS\System32\drivers\SYMEVENT.CAT
[2013/07/29 22:44:19 | 000,000,805 | ---- | C] () -- C:\WINDOWS\System32\drivers\SYMEVENT.INF
[2013/07/29 22:44:01 | 000,003,434 | R--- | C] () -- C:\WINDOWS\System32\drivers\NIS\1404000.028\SymEFA.inf
[2013/07/29 22:44:01 | 000,002,852 | R--- | C] () -- C:\WINDOWS\System32\drivers\NIS\1404000.028\SymDS.inf
[2013/07/29 22:44:01 | 000,001,468 | R--- | C] () -- C:\WINDOWS\System32\drivers\NIS\1404000.028\SymNetV.inf
[2013/07/29 22:44:01 | 000,001,440 | R--- | C] () -- C:\WINDOWS\System32\drivers\NIS\1404000.028\SymNet.inf
[2013/07/29 22:44:01 | 000,001,389 | R--- | C] () -- C:\WINDOWS\System32\drivers\NIS\1404000.028\srtspx.inf
[2013/07/29 22:44:01 | 000,001,388 | R--- | C] () -- C:\WINDOWS\System32\drivers\NIS\1404000.028\srtsp.inf
[2013/07/29 22:44:01 | 000,000,996 | R--- | C] () -- C:\WINDOWS\System32\drivers\NIS\1404000.028\symELAM.inf
[2013/07/29 22:44:01 | 000,000,827 | R--- | C] () -- C:\WINDOWS\System32\drivers\NIS\1404000.028\ccSetx86.inf
[2013/07/29 22:44:01 | 000,000,737 | R--- | C] () -- C:\WINDOWS\System32\drivers\NIS\1404000.028\Iron.inf
[2013/07/29 22:43:47 | 000,014,818 | R--- | C] () -- C:\WINDOWS\System32\drivers\NIS\1404000.028\SymVTcer.dat
[2013/07/29 22:43:47 | 000,009,670 | R--- | C] () -- C:\WINDOWS\System32\drivers\NIS\1404000.028\SymELAM.cat
[2013/07/29 22:43:47 | 000,008,067 | R--- | C] () -- C:\WINDOWS\System32\drivers\NIS\1404000.028\SymNet.cat
[2013/07/29 22:43:47 | 000,008,059 | R--- | C] () -- C:\WINDOWS\System32\drivers\NIS\1404000.028\SymDS.cat
[2013/07/29 22:43:47 | 000,008,059 | R--- | C] () -- C:\WINDOWS\System32\drivers\NIS\1404000.028\srtsp.cat
[2013/07/29 22:43:47 | 000,007,877 | R--- | C] () -- C:\WINDOWS\System32\drivers\NIS\1404000.028\symnetv.cat
[2013/07/29 22:43:47 | 000,007,667 | R--- | C] () -- C:\WINDOWS\System32\drivers\NIS\1404000.028\ccsetx86.cat
[2013/07/29 22:43:47 | 000,007,593 | R--- | C] () -- C:\WINDOWS\System32\drivers\NIS\1404000.028\iron.cat
[2013/07/29 22:43:47 | 000,007,583 | R--- | C] () -- C:\WINDOWS\System32\drivers\NIS\1404000.028\SymEFA.cat
[2013/07/29 22:43:47 | 000,007,581 | R--- | C] () -- C:\WINDOWS\System32\drivers\NIS\1404000.028\srtspx.cat
[2013/07/29 22:43:47 | 000,000,172 | ---- | C] () -- C:\WINDOWS\System32\drivers\NIS\1404000.028\isolate.ini
[2013/07/29 22:35:37 | 000,156,020 | ---- | C] () -- C:\WINDOWS\System32\Gfxres.he-IL.resources
[2013/07/29 22:35:37 | 000,143,191 | ---- | C] () -- C:\WINDOWS\System32\Gfxres.ro-RO.resources
[2013/07/29 22:35:37 | 000,139,623 | ---- | C] () -- C:\WINDOWS\System32\Gfxres.fi-FI.resources
[2013/07/29 22:35:37 | 000,001,023 | ---- | C] () -- C:\WINDOWS\System32\igxpxa32.vp
[2013/07/29 22:35:36 | 001,674,683 | ---- | C] () -- C:\WINDOWS\System32\igxpxa32.cpa
[2013/07/29 22:35:36 | 000,261,208 | ---- | C] () -- C:\WINDOWS\System32\igfcg600m.bin
[2013/07/29 22:35:36 | 000,206,074 | ---- | C] () -- C:\WINDOWS\System32\Gfxres.el-GR.resources
[2013/07/29 22:35:36 | 000,190,306 | ---- | C] () -- C:\WINDOWS\System32\Gfxres.ru-RU.resources
[2013/07/29 22:35:36 | 000,163,151 | ---- | C] () -- C:\WINDOWS\System32\Gfxres.ar-SA.resources
[2013/07/29 22:35:36 | 000,139,095 | ---- | C] () -- C:\WINDOWS\System32\Gfxres.sk-SK.resources
[2013/07/29 22:35:36 | 000,138,414 | ---- | C] () -- C:\WINDOWS\System32\Gfxres.hr-HR.resources
[2013/07/29 22:35:36 | 000,135,443 | ---- | C] () -- C:\WINDOWS\System32\Gfxres.sl-SI.resources
[2013/07/29 22:35:36 | 000,122,610 | ---- | C] () -- C:\WINDOWS\System32\Gfxres.zh-CN.resources
[2013/07/29 22:35:36 | 000,009,216 | ---- | C] ( ) -- C:\WINDOWS\System32\IGFXDEVLib.dll
[2013/07/29 22:35:35 | 000,146,945 | ---- | C] () -- C:\WINDOWS\System32\Gfxres.it-IT.resources
[2013/07/29 22:35:35 | 000,145,559 | ---- | C] () -- C:\WINDOWS\System32\Gfxres.ko-KR.resources
[2013/07/29 22:35:35 | 000,142,754 | ---- | C] () -- C:\WINDOWS\System32\Gfxres.fr-FR.resources
[2013/07/29 22:35:35 | 000,142,035 | ---- | C] () -- C:\WINDOWS\System32\Gfxres.tr-TR.resources
[2013/07/29 22:35:35 | 000,141,601 | ---- | C] () -- C:\WINDOWS\System32\Gfxres.pt-BR.resources
[2013/07/29 22:35:35 | 000,141,258 | ---- | C] () -- C:\WINDOWS\System32\Gfxres.nl-NL.resources
[2013/07/29 22:35:35 | 000,140,501 | ---- | C] () -- C:\WINDOWS\System32\Gfxres.pt-PT.resources
[2013/07/29 22:35:35 | 000,140,404 | ---- | C] () -- C:\WINDOWS\System32\Gfxres.sv-SE.resources
[2013/07/29 22:35:35 | 000,139,864 | ---- | C] () -- C:\WINDOWS\System32\Gfxres.pl-PL.resources
[2013/07/29 22:35:35 | 000,130,387 | ---- | C] () -- C:\WINDOWS\System32\Gfxres.en-US.resources
[2013/07/29 22:35:35 | 000,042,616 | ---- | C] () -- C:\WINDOWS\System32\igxpxs32.vp
[2013/07/29 22:35:34 | 000,963,144 | ---- | C] () -- C:\WINDOWS\System32\igkrng600.bin
[2013/07/29 22:35:34 | 000,219,089 | ---- | C] () -- C:\WINDOWS\System32\Gfxres.th-TH.resources
[2013/07/29 22:35:34 | 000,160,273 | ---- | C] () -- C:\WINDOWS\System32\Gfxres.ja-JP.resources
[2013/07/29 22:35:34 | 000,145,804 | ---- | C] () -- C:\WINDOWS\System32\igcompkrng600.bin
[2013/07/29 22:35:34 | 000,144,621 | ---- | C] () -- C:\WINDOWS\System32\Gfxres.es-ES.resources
[2013/07/29 22:35:34 | 000,144,501 | ---- | C] () -- C:\WINDOWS\System32\Gfxres.de-DE.resources
[2013/07/29 22:35:34 | 000,141,134 | ---- | C] () -- C:\WINDOWS\System32\Gfxres.hu-HU.resources
[2013/07/29 22:35:34 | 000,139,839 | ---- | C] () -- C:\WINDOWS\System32\Gfxres.cs-CZ.resources
[2013/07/29 22:35:34 | 000,135,396 | ---- | C] () -- C:\WINDOWS\System32\Gfxres.nb-NO.resources
[2013/07/29 22:35:34 | 000,134,952 | ---- | C] () -- C:\WINDOWS\System32\Gfxres.da-DK.resources
[2013/07/29 22:35:34 | 000,124,032 | ---- | C] () -- C:\WINDOWS\System32\Gfxres.zh-TW.resources
[2013/07/29 22:35:34 | 000,058,558 | ---- | C] () -- C:\WINDOWS\System32\igxpxk32.vp
[2013/07/29 22:35:34 | 000,000,264 | ---- | C] () -- C:\WINDOWS\System32\GfxUI.exe.config
[2013/07/29 22:29:05 | 000,000,742 | ---- | C] () -- C:\Documents and Settings\KHO SATO\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2013/07/29 22:25:15 | 000,001,486 | ---- | C] () -- C:\WINDOWS\System32\noise.kor
[2013/07/29 22:25:14 | 001,158,818 | ---- | C] () -- C:\WINDOWS\System32\korwbrkr.lex
[2013/07/29 22:25:14 | 001,158,818 | ---- | C] () -- C:\WINDOWS\System32\dllcache\korwbrkr.lex
[2013/07/29 22:25:14 | 000,002,060 | ---- | C] () -- C:\WINDOWS\System32\noise.jpn
[2013/07/29 22:25:08 | 000,211,938 | ---- | C] () -- C:\WINDOWS\System32\lcphrase.tbl
[2013/07/29 22:25:08 | 000,146,126 | ---- | C] () -- C:\WINDOWS\System32\array30.tab
[2013/07/29 22:25:08 | 000,110,566 | ---- | C] () -- C:\WINDOWS\System32\arphr.tbl
[2013/07/29 22:25:08 | 000,043,242 | ---- | C] () -- C:\WINDOWS\System32\phoncode.tbl
[2013/07/29 22:25:08 | 000,024,114 | ---- | C] () -- C:\WINDOWS\System32\lcptr.tbl
[2013/07/29 22:25:08 | 000,018,600 | ---- | C] () -- C:\WINDOWS\System32\arrayhw.tab
[2013/07/29 22:25:08 | 000,016,312 | ---- | C] () -- C:\WINDOWS\System32\arptr.tbl
[2013/07/29 22:25:08 | 000,004,071 | ---- | C] () -- C:\WINDOWS\System32\phon.tbl
[2013/07/29 22:25:08 | 000,002,714 | ---- | C] () -- C:\WINDOWS\System32\phonptr.tbl
[2013/07/29 22:25:07 | 000,116,285 | ---- | C] () -- C:\WINDOWS\System32\msdayi.tbl
[2013/07/29 22:25:07 | 000,044,370 | ---- | C] () -- C:\WINDOWS\System32\acode.tbl
[2013/07/29 22:25:07 | 000,044,370 | ---- | C] () -- C:\WINDOWS\System32\a234.tbl
[2013/07/29 22:25:07 | 000,001,460 | ---- | C] () -- C:\WINDOWS\System32\a15.tbl
[2013/07/29 22:25:07 | 000,000,700 | ---- | C] () -- C:\WINDOWS\System32\dayiptr.tbl
[2013/07/29 22:25:07 | 000,000,520 | ---- | C] () -- C:\WINDOWS\System32\dayiphr.tbl
[2013/07/29 22:25:05 | 001,783,864 | ---- | C] () -- C:\WINDOWS\System32\WINPY.MB
[2013/07/29 22:25:05 | 001,564,868 | ---- | C] () -- C:\WINDOWS\System32\WINSP.MB
[2013/07/29 22:25:05 | 001,223,500 | ---- | C] () -- C:\WINDOWS\System32\WINZM.MB
[2013/07/29 22:25:02 | 000,134,339 | ---- | C] () -- C:\WINDOWS\System32\dllcache\imekr.lex
[2013/07/29 22:25:02 | 000,108,827 | ---- | C] () -- C:\WINDOWS\System32\dllcache\hanja.lex
[2013/07/29 22:24:46 | 000,173,568 | ---- | C] () -- C:\WINDOWS\System32\dllcache\chtskf.dll
[2013/07/29 22:24:44 | 000,175,104 | ---- | C] () -- C:\WINDOWS\System32\dllcache\pintlcsa.dll
[2013/07/29 22:24:41 | 000,059,392 | ---- | C] () -- C:\WINDOWS\System32\dllcache\imscinst.exe
[2013/07/29 22:24:35 | 013,463,552 | ---- | C] () -- C:\WINDOWS\System32\dllcache\hwxjpn.dll
[2013/07/29 22:24:35 | 000,196,665 | ---- | C] () -- C:\WINDOWS\System32\dllcache\imjpinst.exe
[2013/07/29 22:20:05 | 000,000,079 | ---- | C] () -- C:\Documents and Settings\KHO SATO\Application Data\Microsoft\Internet Explorer\Quick Launch\Show Desktop.scf
[2013/07/29 22:19:58 | 000,000,815 | ---- | C] () -- C:\Documents and Settings\KHO SATO\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2013/07/29 22:16:33 | 000,008,192 | ---- | C] () -- C:\WINDOWS\REGLOCS.OLD
[2013/07/29 22:16:02 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2013/07/29 22:15:14 | 000,094,208 | ---- | C] () -- C:\WINDOWS\System32\dllcache\fpencode.dll
[2013/07/29 22:14:38 | 000,002,577 | ---- | C] () -- C:\WINDOWS\System32\CONFIG.NT
[2013/07/29 22:14:38 | 000,000,000 | RHS- | C] () -- C:\MSDOS.SYS
[2013/07/29 22:14:38 | 000,000,000 | RHS- | C] () -- C:\IO.SYS
[2013/07/29 22:14:38 | 000,000,000 | ---- | C] () -- C:\CONFIG.SYS
[2013/07/29 22:14:38 | 000,000,000 | ---- | C] () -- C:\AUTOEXEC.BAT
[2013/07/29 22:14:36 | 000,023,392 | ---- | C] () -- C:\WINDOWS\System32\nscompat.tlb
[2013/07/29 22:14:36 | 000,016,832 | ---- | C] () -- C:\WINDOWS\System32\amcompat.tlb
[2013/07/29 22:14:35 | 000,316,640 | ---- | C] () -- C:\WINDOWS\WMSysPr9.prx
[2013/07/29 22:13:44 | 004,399,505 | ---- | C] () -- C:\WINDOWS\System32\dllcache\nls302en.lex
[2013/07/29 22:13:32 | 000,048,680 | -HS- | C] () -- C:\WINDOWS\winnt256.bmp
[2013/07/29 22:13:32 | 000,048,680 | -HS- | C] () -- C:\WINDOWS\winnt.bmp
[2013/07/29 22:13:28 | 000,000,984 | ---- | C] () -- C:\WINDOWS\System32\dllcache\srframe.mmf
[2013/07/29 22:12:59 | 000,376,832 | ---- | C] () -- C:\WINDOWS\System32\dllcache\msinfo.dll
[2013/07/29 22:12:32 | 000,021,640 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2013/07/29 22:11:55 | 000,065,978 | ---- | C] () -- C:\WINDOWS\Soap Bubbles.bmp
[2013/07/29 22:11:55 | 000,065,954 | ---- | C] () -- C:\WINDOWS\Prairie Wind.bmp
[2013/07/29 22:11:55 | 000,065,832 | ---- | C] () -- C:\WINDOWS\Santa Fe Stucco.bmp
[2013/07/29 22:11:55 | 000,026,680 | ---- | C] () -- C:\WINDOWS\River Sumida.bmp
[2013/07/29 22:11:55 | 000,026,582 | ---- | C] () -- C:\WINDOWS\Greenstone.bmp
[2013/07/29 22:11:55 | 000,017,362 | ---- | C] () -- C:\WINDOWS\Rhododendron.bmp
[2013/07/29 22:11:55 | 000,017,336 | ---- | C] () -- C:\WINDOWS\Gone Fishing.bmp
[2013/07/29 22:11:55 | 000,017,062 | ---- | C] () -- C:\WINDOWS\Coffee Bean.bmp
[2013/07/29 22:11:55 | 000,016,730 | ---- | C] () -- C:\WINDOWS\FeatherTexture.bmp
[2013/07/29 22:11:55 | 000,009,522 | ---- | C] () -- C:\WINDOWS\Zapotec.bmp
[2013/07/29 22:11:55 | 000,001,272 | ---- | C] () -- C:\WINDOWS\Blue Lace 16.bmp
[2013/07/29 22:11:53 | 000,003,286 | ---- | C] () -- C:\WINDOWS\System32\tslabels.h
[2013/07/29 22:11:53 | 000,001,161 | ---- | C] () -- C:\WINDOWS\System32\usrlogon.cmd
[2013/07/29 22:11:52 | 000,000,768 | ---- | C] () -- C:\WINDOWS\System32\msdtcprf.h
[2013/07/29 22:11:48 | 000,063,488 | ---- | C] () -- C:\WINDOWS\System32\wmimgmt.msc
[2013/07/29 03:30:33 | 011,705,846 | ---- | C] () -- H:\Document - Desktop\Desktop\YS_FORKLIFT PARTS.pdf
[2013/07/29 03:30:32 | 000,272,754 | ---- | C] () -- H:\Document - Desktop\Desktop\Mast_Guide_Bearings.pdf
[2013/07/29 03:30:32 | 000,000,833 | ---- | C] () -- H:\Document - Desktop\Desktop\Shortcut to AC-HANG DA BAO GIA.lnk
[2013/07/29 03:30:32 | 000,000,833 | ---- | C] () -- H:\Document - Desktop\Desktop\Shortcut to AB-HANG DA BAO GIA.lnk
[2013/07/29 03:30:32 | 000,000,721 | ---- | C] () -- H:\Document - Desktop\Desktop\Shortcut to HANG CAN BAO GIA.lnk
[2013/07/29 03:30:30 | 010,255,672 | ---- | C] () -- H:\Document - Desktop\Desktop\Excel_Function_and_Formulas.chm
[2013/07/29 03:30:29 | 034,749,969 | ---- | C] () -- H:\Document - Desktop\Desktop\CLUTCH KITS CATALOGE.pdf
[2013/07/29 03:30:28 | 045,155,328 | ---- | C] () -- H:\Document - Desktop\Desktop\CLUTCH DISC CATALOGE.pdf
[2013/07/29 03:30:24 | 000,236,399 | ---- | C] () -- H:\Document - Desktop\Desktop\A LONG PATAYA 14-6-2013.pdf
[2013/07/29 03:30:24 | 000,193,756 | ---- | C] () -- H:\Document - Desktop\Desktop\20130718_100824.jpg
[2013/07/29 03:30:24 | 000,134,603 | ---- | C] () -- H:\Document - Desktop\Desktop\20130716_133058.jpg
[2013/07/29 03:30:24 | 000,063,146 | ---- | C] () -- H:\Document - Desktop\Desktop\1005752_646977218647150_1555929877_n.jpg
[2013/07/10 14:38:35 | 000,213,274 | ---- | C] () -- H:\Document - Desktop\MY DOCUMENTS\SCG T7.pdf
[2012/06/19 18:48:46 | 000,001,536 | ---- | C] () -- C:\WINDOWS\System32\IusEventLog.dll

========== ZeroAccess Check ==========

[2013/07/29 23:48:41 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shdocvw.dll -- [2013/05/29 14:42:02 | 001,510,400 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = C:\WINDOWS\system32\wbem\fastprox.dll -- [2009/02/09 19:10:48 | 000,473,600 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = C:\WINDOWS\system32\wbem\wbemess.dll -- [2008/04/14 19:00:00 | 000,273,920 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

========== LOP Check ==========

[2013/07/29 23:14:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Babylon
[2013/07/29 22:47:18 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Application Data\Common Files
[2013/07/29 23:06:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\IDM
[2013/07/30 09:12:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TEMP
[2013/07/29 22:47:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TuneUp Software
[2013/07/29 22:47:18 | 000,000,000 | -HSD | M] -- C:\Documents and Settings\All Users\Application Data\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}
[2013/07/29 23:30:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\KHO SATO\Application Data\BabSolution
[2013/07/29 23:14:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\KHO SATO\Application Data\Babylon
[2013/07/30 09:10:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\KHO SATO\Application Data\DMCache
[2013/07/30 09:06:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\KHO SATO\Application Data\Dropbox
[2013/07/29 23:18:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\KHO SATO\Application Data\IDM
[2013/07/30 09:14:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\KHO SATO\Application Data\MSNInstaller
[2013/07/29 22:54:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\KHO SATO\Application Data\Softland
[2013/07/29 22:47:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\KHO SATO\Application Data\TuneUp Software
[2013/07/29 23:13:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\KHO SATO\Application Data\URSoft
[2013/07/30 09:05:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\KHO SATO\Application Data\uTorrent

========== Purity Check ==========



========== Files - Unicode (All) ==========
[2013/07/30 09:11:41 | 000,000,000 | ---D | M](H:\Document - Desktop\MY DOCUMENTS\Trang t?i xu?ng) -- H:\Document - Desktop\MY DOCUMENTS\Trang tải xuống
[2013/07/29 03:30:24 | 000,137,728 | ---- | C] ()(H:\Document - Desktop\Desktop\16-7 confirm AC??.xls) -- H:\Document - Desktop\Desktop\16-7 confirm AC确认.xls
[2013/07/26 13:05:08 | 000,137,728 | ---- | M] ()(H:\Document - Desktop\Desktop\16-7 confirm AC??.xls) -- H:\Document - Desktop\Desktop\16-7 confirm AC确认.xls
[2013/07/19 08:37:17 | 000,000,000 | ---D | M](H:\Document - Desktop\Desktop\ch? ha) -- H:\Document - Desktop\Desktop\chị ha
[2013/07/08 14:24:11 | 000,000,000 | ---D | C](H:\Document - Desktop\Desktop\ch? ha) -- H:\Document - Desktop\Desktop\chị ha
[2013/06/14 10:15:36 | 000,232,608 | ---- | M] ()(H:\Document - Desktop\MY DOCUMENTS\A NGUYÊN ÐÔNG H?I B?N TRE 14-6-2013.pdf) -- H:\Document - Desktop\MY DOCUMENTS\A NGUYÊN ĐÔNG HẢI BẾN TRE 14-6-2013.pdf
[2013/06/14 10:15:25 | 000,232,608 | ---- | C] ()(H:\Document - Desktop\MY DOCUMENTS\A NGUYÊN ÐÔNG H?I B?N TRE 14-6-2013.pdf) -- H:\Document - Desktop\MY DOCUMENTS\A NGUYÊN ĐÔNG HẢI BẾN TRE 14-6-2013.pdf
[2013/04/18 09:03:35 | 000,000,000 | ---D | C](H:\Document - Desktop\MY DOCUMENTS\Trang t?i xu?ng) -- H:\Document - Desktop\MY DOCUMENTS\Trang tải xuống

========== Alternate Data Streams ==========

@Alternate Data Stream - 172 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:1CE11B51

< End of report >


Edited by cachep, 29 July 2013 - 08:59 PM.

  • 0

Advertisements


#2
crooleeck

crooleeck

    Member

  • Member
  • PipPipPip
  • 882 posts
Hi cachep and welcome at GeekstoGo!

I'm crooleeck and I'll try to help you. But first please notice that I'm not limitless, I'm not familiar with all software, I don't know everything. However, it has taken me years to learn what I know. I would be glad to help you.

Fight against malware is NOT instantaneous, most infections require several courses of action to completely eradicate. It's also time-consuming, so be patient! We all like to know final result, so if you have since resolved the issues you were originally experiencing, or have received help elsewhere, please post.

Note:
  • Please watch this topic.
  • Do exactly - step by step - what I wish for. Don't be afraid! If there's anything you don't understand, stop and ask!
  • Please don't run unsupervised tools or fix on your own without my direction - it can be dangerous.
  • You must reply within 3 days or your topic will be closed

Please be patient with me as I am currently in training, and all of my responses to you have to be reviewed by my instructor before I post them. Just keep in mind that you get the advantage as you have 2 people examining your issue.

Step 1:
  • Download aswMBR to your desktop.
  • Double click the aswMBR.exe to run it.
  • Agreed to update.
  • Click the Scan button to start scan.

    Posted Image
  • On completion of the scan click Save log, save it to your desktop as asw.txt and post in your next reply.

    Posted Image
  • On completion of the scan click Save log, save it to your desktop and post in your next reply

Please post also content H:\Document - Desktop\MY DOCUMENTS\Downloads\Programs\Extras.txt
  • 0

#3
Essexboy

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts
Due to lack of feedback, this topic has been closed.

If you need this topic reopened, please contact a staff member. This applies only to the original topic starter. Everyone else please begin a New Topic.
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP