[code] OTScanIt logfile created on: 21.03.2008 12:08:38 OTScanIt by OldTimer - Version 1.0.6.0 Folder = C:\Documents and Settings\Administrator\Desktop\OTScanIt Windows XP Professional Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 7.0.5730.13) Locale: 00000418 | Country: Romania | Language: ROM | Date Format: dd.MM.yyyy 766,73 Mb Total Physical Memory | 506,61 Mb Available Physical Memory | 66,07% Memory free 1,83 Gb Paging File | 1,61 Gb Available in Paging File | 88,00% Paging File free Paging file location(s): C:\pagefile.sys 1152 2304; %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 24,41 Gb Total Space | 13,12 Gb Free Space | 53,73% Space Free | Partition Type: NTFS Drive D: | 25,69 Gb Total Space | 0,77 Gb Free Space | 3,02% Space Free | Partition Type: NTFS E: Drive not present or media not loaded Drive F: | 24,41 Gb Total Space | 1,52 Gb Free Space | 6,24% Space Free | Partition Type: NTFS G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: HOME-1234567891 Current User Name: Administrator Logged in as Administrator. Current Boot Mode: Normal Scan Mode: All users [Processes - Non-Microsoft Only] applemobiledeviceservice.exe -> %CommonProgramFiles%\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe -> Apple, Inc. [Ver = 1, 14, 0, 0 | Size = 110592 bytes | Modified Date = 18.02.2008 11:16:30 | Attr = ] ekrn.exe -> %ProgramFiles%\ESET\ESET NOD32 Antivirus\ekrn.exe -> ESET [Ver = 3.0.621 | Size = 468224 bytes | Modified Date = 21.12.2007 08:21:16 | Attr = ] egui.exe -> %ProgramFiles%\ESET\ESET NOD32 Antivirus\egui.exe -> ESET [Ver = 3.0.621 | Size = 1443072 bytes | Modified Date = 21.12.2007 08:21:06 | Attr = ] vm303_sti.exe -> %SystemRoot%\VM303_STI.EXE -> Vimicro [Ver = 3, 5, 930, 9 | Size = 61440 bytes | Modified Date = 22.12.2005 08:10:54 | Attr = R ] lastfmhelper.exe -> %ProgramFiles%\Last.fm\LastFMHelper.exe -> Last.fm [Ver = 1.4.2.59470 | Size = 106496 bytes | Modified Date = 08.01.2008 16:23:18 | Attr = ] generic.exe -> %CommonProgramFiles%\Teleca Shared\Generic.exe -> Teleca AB [Ver = 1, 4, 13, 0 | Size = 983040 bytes | Modified Date = 20.12.2006 12:34:02 | Attr = R ] epmworker.exe -> %ProgramFiles%\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe -> Sony Ericsson Mobile Communications AB [Ver = 1, 2, 0,1221 | Size = 872448 bytes | Modified Date = 11.12.2006 08:16:10 | Attr = R ] otscanit.exe -> %UserProfile%\Desktop\OTScanIt\OTScanIt.exe -> OldTimer Tools [Ver = 1.0.6.0 | Size = 311808 bytes | Modified Date = 19.03.2008 18:01:26 | Attr = ] [Win32 Services - Non-Microsoft Only] (Apple Mobile Device) Apple Mobile Device [Win32_Own | Auto | Running] -> %CommonProgramFiles%\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe -> Apple, Inc. [Ver = 1, 14, 0, 0 | Size = 110592 bytes | Modified Date = 18.02.2008 11:16:30 | Attr = ] (dmadmin) Logical Disk Manager Administrative Service [Win32_Shared | On_Demand | Stopped] -> %SystemRoot%\system32\dmadmin.exe -> Microsoft Corp., Veritas Software [Ver = 2600.2180.503.0 | Size = 224768 bytes | Modified Date = 27.10.2005 06:12:52 | Attr = ] (EhttpSrv) Eset HTTP Server [Win32_Own | On_Demand | Stopped] -> %ProgramFiles%\ESET\ESET NOD32 Antivirus\EHttpSrv.exe -> ESET [Ver = 3.0.621 | Size = 19200 bytes | Modified Date = 21.12.2007 08:22:44 | Attr = ] (ekrn) Eset Service [Win32_Own | Auto | Running] -> %ProgramFiles%\ESET\ESET NOD32 Antivirus\ekrn.exe -> ESET [Ver = 3.0.621 | Size = 468224 bytes | Modified Date = 21.12.2007 08:21:16 | Attr = ] (IDriverT) InstallDriver Table Manager [Win32_Own | On_Demand | Stopped] -> %CommonProgramFiles%\InstallShield\Driver\1150\Intel 32\IDriverT.exe -> Macrovision Corporation [Ver = 11.50.42618 | Size = 69632 bytes | Modified Date = 14.11.2005 01:06:04 | Attr = ] [Registry - Non-Microsoft Only] < Run [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run -> BigDog303 -> %SystemRoot%\VM303_STI.EXE -> Vimicro [Ver = 3, 5, 930, 9 | Size = 61440 bytes | Modified Date = 22.12.2005 08:10:54 | Attr = R ] C-Media Mixer -> %SystemRoot%\mixer.exe -> C-Media Electronic Inc. (www.cmedia.com.tw) [Ver = 1.55 | Size = 1581056 bytes | Modified Date = 12.07.2002 10:33:12 | Attr = ] egui -> %ProgramFiles%\ESET\ESET NOD32 Antivirus\egui.exe -> ESET [Ver = 3.0.621 | Size = 1443072 bytes | Modified Date = 21.12.2007 08:21:06 | Attr = ] QuickTime Task -> %ProgramFiles%\QuickTime\QTTask.exe -> Apple Inc. [Ver = 7.4.1 | Size = 385024 bytes | Modified Date = 31.01.2008 23:13:08 | Attr = ] Sony Ericsson PC Suite -> %ProgramFiles%\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe -> [Ver = 2.0.8.121 | Size = 495616 bytes | Modified Date = 26.01.2007 13:36:44 | Attr = R ] WinampAgent -> %ProgramFiles%\Winamp\winampa.exe -> [Ver = | Size = 37376 bytes | Modified Date = 16.01.2008 00:54:54 | Attr = ] < OptionalComponents [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\ -> IMAIL-> Installed = 1 -> MAPI-> Installed = 1 -> MSFS-> Installed = 1 -> < Run [HKEY_CURRENT_USER\] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run -> DAEMON Tools Lite -> %ProgramFiles%\DAEMON Tools Lite\daemon.exe -> DT Soft Ltd [Ver = 4.12.1.0 | Size = 486856 bytes | Modified Date = 14.02.2008 01:09:40 | Attr = ] Free Download Manager -> %ProgramFiles%\Free Download Manager\fdm.exe -> File not found SpybotSD TeaTimer -> %ProgramFiles%\Spybot - Search & Destroy\TeaTimer.exe -> Safer Networking Limited [Ver = 1, 5, 2, 16 | Size = 2097488 bytes | Modified Date = 28.01.2008 11:43:40 | Attr = RHS] SUPERAntiSpyware -> -> File not found Yahoo! Pager -> %ProgramFiles%\Yahoo!\Messenger\YahooMessenger.exe -> Yahoo! Inc. [Ver = 8,1,0,421 | Size = 4670704 bytes | Modified Date = 30.08.2007 17:43:18 | Attr = ] < Run [HKEY_USERS\.DEFAULT\] > -> HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run -> Free Download Manager -> %ProgramFiles%\Free Download Manager\fdm.exe -> File not found TaskSwitchXP -> %ProgramFiles%\TaskSwitchXP\TaskSwitchXP.exe -> File not found < Run [HKEY_USERS\S-1-5-18\] > -> HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run -> Free Download Manager -> %ProgramFiles%\Free Download Manager\fdm.exe -> File not found TaskSwitchXP -> %ProgramFiles%\TaskSwitchXP\TaskSwitchXP.exe -> File not found < Run [HKEY_USERS\S-1-5-19\] > -> HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Run -> Free Download Manager -> %ProgramFiles%\Free Download Manager\fdm.exe -> File not found TaskSwitchXP -> %ProgramFiles%\TaskSwitchXP\TaskSwitchXP.exe -> File not found < Run [HKEY_USERS\S-1-5-20\] > -> HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Run -> Free Download Manager -> %ProgramFiles%\Free Download Manager\fdm.exe -> File not found TaskSwitchXP -> %ProgramFiles%\TaskSwitchXP\TaskSwitchXP.exe -> File not found < Run [HKEY_USERS\S-1-5-21-1960408961-329068152-682003330-500\] > -> HKEY_USERS\S-1-5-21-1960408961-329068152-682003330-500\SOFTWARE\Microsoft\Windows\CurrentVersion\Run -> DAEMON Tools Lite -> %ProgramFiles%\DAEMON Tools Lite\daemon.exe -> DT Soft Ltd [Ver = 4.12.1.0 | Size = 486856 bytes | Modified Date = 14.02.2008 01:09:40 | Attr = ] Free Download Manager -> %ProgramFiles%\Free Download Manager\fdm.exe -> File not found SpybotSD TeaTimer -> %ProgramFiles%\Spybot - Search & Destroy\TeaTimer.exe -> Safer Networking Limited [Ver = 1, 5, 2, 16 | Size = 2097488 bytes | Modified Date = 28.01.2008 11:43:40 | Attr = RHS] SUPERAntiSpyware -> -> File not found Yahoo! Pager -> %ProgramFiles%\Yahoo!\Messenger\YahooMessenger.exe -> Yahoo! Inc. [Ver = 8,1,0,421 | Size = 4670704 bytes | Modified Date = 30.08.2007 17:43:18 | Attr = ] < Administrator Startup Folder > -> C:\Documents and Settings\Administrator\Start Menu\Programs\Startup -> %UserProfile%\Start Menu\Programs\Startup\Last.fm Helper.lnk -> %ProgramFiles%\Last.fm\LastFMHelper.exe -> Last.fm [Ver = 1.4.2.59470 | Size = 106496 bytes | Modified Date = 08.01.2008 16:23:18 | Attr = ] < All Users Startup Folder > -> C:\Documents and Settings\All Users\Start Menu\Programs\Startup -> < Default User Startup Folder > -> C:\Documents and Settings\Default User\Start Menu\Programs\Startup -> < Karina Startup Folder > -> C:\Documents and Settings\Karina\Start Menu\Programs\Startup -> %SystemDrive%\Documents and Settings\Karina\Start Menu\Programs\Startup\Last.fm Helper.lnk -> %ProgramFiles%\Last.fm\LastFMHelper.exe -> Last.fm [Ver = 1.4.2.59470 | Size = 106496 bytes | Modified Date = 08.01.2008 16:23:18 | Attr = ] < tata Startup Folder > -> C:\Documents and Settings\tata\Start Menu\Programs\Startup -> %SystemDrive%\Documents and Settings\tata\Start Menu\Programs\Startup\Last.fm Helper.lnk -> %ProgramFiles%\Last.fm\LastFMHelper.exe -> Last.fm [Ver = 1.4.2.59470 | Size = 106496 bytes | Modified Date = 08.01.2008 16:23:18 | Attr = ] < ShellExecuteHooks [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks -> {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} [HKEY_LOCAL_MACHINE] -> %ProgramFiles%\SUPERAntiSpyware\SASSEH.DLL [] -> SuperAdBlocker.com [Ver = 1, 0, 0, 1008 | Size = 77824 bytes | Modified Date = 20.12.2006 12:55:48 | Attr = ] < SecurityProviders [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\\SecurityProviders -> < Winlogon settings [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon -> < Winlogon settings [HKEY_CURRENT_USER] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon -> < Winlogon settings [HKEY_USERS\.DEFAULT] > -> HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon -> < Winlogon settings [HKEY_USERS\S-1-5-18] > -> HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon -> < Winlogon settings [HKEY_USERS\S-1-5-19] > -> HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon -> < Winlogon settings [HKEY_USERS\S-1-5-20] > -> HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon -> < Winlogon settings [HKEY_USERS\S-1-5-21-1960408961-329068152-682003330-500] > -> HKEY_USERS\S-1-5-21-1960408961-329068152-682003330-500\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon -> < CurrentVersion Policy Settings [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDesktopCleanupWizard -> 1 -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\ForceClassicControlPanel -> 1 -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoRemoteRecursiveEvents -> 1 -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\MemCheckBoxInRunDlg -> 1 -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\DisableCAD -> 1 -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\NonEnum\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\NonEnum\\{BDEADF00-C265-11D0-BCED-00A0C90AB50F} -> 1 -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\NonEnum\\{6DFD7C5C-2451-11d3-A299-00C04F8EF6AF} -> 1073741857 -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\NonEnum\\{0DF44EAA-FF21-4412-828E-260A8728E7F1} -> 32 -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\\dontdisplaylastusername -> 0 -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\\legalnoticecaption -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\\legalnoticetext -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\\shutdownwithoutlogon -> 1 -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\\undockwithoutlogon -> 1 -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\\NoInternetOpenWith -> 1 -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\\DisableCAD -> 1 -> < CurrentVersion Policy Settings [HKEY_CURRENT_USER] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ -> -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ComDlg32\ -> -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ComDlg32\Placesbar\ -> -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ComDlg32\Placesbar\\Place0 -> C:\ -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ComDlg32\Placesbar\\Place1 -> D:\ -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ComDlg32\Placesbar\\Place2 -> E:\ -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ComDlg32\Placesbar\\Place3 -> 0 -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ComDlg32\Placesbar\\Place4 -> 18 -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\ -> -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDriveTypeAutoRun -> 145 -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoSharedDocuments -> 1 -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\ClearRecentDocsOnExit -> 1 -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoRecentDocsMenu -> 1 -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoRecentDocsHistory -> 1 -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoInstrumentation -> 1 -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoSMHelp -> 1 -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoSaveSettings -> 0 -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\DisableCAD -> 0 -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\ -> -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\\DisableCAD -> 1 -> < CurrentVersion Policy Settings [HKEY_USERS\.DEFAULT] > -> HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ -> HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ -> -> HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ComDlg32\ -> -> HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ComDlg32\Placesbar\ -> -> HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ComDlg32\Placesbar\\Place0 -> C:\ -> HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ComDlg32\Placesbar\\Place1 -> D:\ -> HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ComDlg32\Placesbar\\Place2 -> E:\ -> HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ComDlg32\Placesbar\\Place3 -> 0 -> HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ComDlg32\Placesbar\\Place4 -> 18 -> HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\ -> -> HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDriveTypeAutoRun -> 145 -> HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoSharedDocuments -> 1 -> HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\ClearRecentDocsOnExit -> 1 -> HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoRecentDocsMenu -> 1 -> HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoRecentDocsHistory -> 1 -> HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoInstrumentation -> 1 -> HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoSMHelp -> 1 -> < CurrentVersion Policy Settings [HKEY_USERS\S-1-5-18] > -> HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ -> HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ -> -> HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ComDlg32\ -> -> HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ComDlg32\Placesbar\ -> -> HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ComDlg32\Placesbar\\Place0 -> C:\ -> HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ComDlg32\Placesbar\\Place1 -> D:\ -> HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ComDlg32\Placesbar\\Place2 -> E:\ -> HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ComDlg32\Placesbar\\Place3 -> 0 -> HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ComDlg32\Placesbar\\Place4 -> 18 -> HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\ -> -> HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDriveTypeAutoRun -> 145 -> HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoSharedDocuments -> 1 -> HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\ClearRecentDocsOnExit -> 1 -> HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoRecentDocsMenu -> 1 -> HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoRecentDocsHistory -> 1 -> HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoInstrumentation -> 1 -> HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoSMHelp -> 1 -> < CurrentVersion Policy Settings [HKEY_USERS\S-1-5-19] > -> HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ -> HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ -> -> HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ComDlg32\ -> -> HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ComDlg32\Placesbar\ -> -> HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ComDlg32\Placesbar\\Place0 -> C:\ -> HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ComDlg32\Placesbar\\Place1 -> D:\ -> HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ComDlg32\Placesbar\\Place2 -> E:\ -> HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ComDlg32\Placesbar\\Place3 -> 0 -> HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ComDlg32\Placesbar\\Place4 -> 18 -> HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\ -> -> HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDriveTypeAutoRun -> 145 -> HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoSharedDocuments -> 1 -> HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\ClearRecentDocsOnExit -> 1 -> HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoRecentDocsMenu -> 1 -> HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoRecentDocsHistory -> 1 -> HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoInstrumentation -> 1 -> HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoSMHelp -> 1 -> < CurrentVersion Policy Settings [HKEY_USERS\S-1-5-20] > -> HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ -> HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ -> -> HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ComDlg32\ -> -> HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ComDlg32\Placesbar\ -> -> HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ComDlg32\Placesbar\\Place0 -> C:\ -> HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ComDlg32\Placesbar\\Place1 -> D:\ -> HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ComDlg32\Placesbar\\Place2 -> E:\ -> HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ComDlg32\Placesbar\\Place3 -> 0 -> HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ComDlg32\Placesbar\\Place4 -> 18 -> HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\ -> -> HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDriveTypeAutoRun -> 145 -> HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoSharedDocuments -> 1 -> HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\ClearRecentDocsOnExit -> 1 -> HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoRecentDocsMenu -> 1 -> HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoRecentDocsHistory -> 1 -> HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoInstrumentation -> 1 -> HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoSMHelp -> 1 -> < CurrentVersion Policy Settings [HKEY_USERS\S-1-5-21-1960408961-329068152-682003330-500] > -> HKEY_USERS\S-1-5-21-1960408961-329068152-682003330-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ -> HKEY_USERS\S-1-5-21-1960408961-329068152-682003330-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ -> -> HKEY_USERS\S-1-5-21-1960408961-329068152-682003330-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ComDlg32\ -> -> HKEY_USERS\S-1-5-21-1960408961-329068152-682003330-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ComDlg32\Placesbar\ -> -> HKEY_USERS\S-1-5-21-1960408961-329068152-682003330-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ComDlg32\Placesbar\\Place0 -> C:\ -> HKEY_USERS\S-1-5-21-1960408961-329068152-682003330-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ComDlg32\Placesbar\\Place1 -> D:\ -> HKEY_USERS\S-1-5-21-1960408961-329068152-682003330-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ComDlg32\Placesbar\\Place2 -> E:\ -> HKEY_USERS\S-1-5-21-1960408961-329068152-682003330-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ComDlg32\Placesbar\\Place3 -> 0 -> HKEY_USERS\S-1-5-21-1960408961-329068152-682003330-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ComDlg32\Placesbar\\Place4 -> 18 -> HKEY_USERS\S-1-5-21-1960408961-329068152-682003330-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\ -> -> HKEY_USERS\S-1-5-21-1960408961-329068152-682003330-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDriveTypeAutoRun -> 145 -> HKEY_USERS\S-1-5-21-1960408961-329068152-682003330-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoSharedDocuments -> 1 -> HKEY_USERS\S-1-5-21-1960408961-329068152-682003330-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\ClearRecentDocsOnExit -> 1 -> HKEY_USERS\S-1-5-21-1960408961-329068152-682003330-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoRecentDocsMenu -> 1 -> HKEY_USERS\S-1-5-21-1960408961-329068152-682003330-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoRecentDocsHistory -> 1 -> HKEY_USERS\S-1-5-21-1960408961-329068152-682003330-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoInstrumentation -> 1 -> HKEY_USERS\S-1-5-21-1960408961-329068152-682003330-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoSMHelp -> 1 -> HKEY_USERS\S-1-5-21-1960408961-329068152-682003330-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoSaveSettings -> 0 -> HKEY_USERS\S-1-5-21-1960408961-329068152-682003330-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\DisableCAD -> 0 -> HKEY_USERS\S-1-5-21-1960408961-329068152-682003330-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\ -> -> HKEY_USERS\S-1-5-21-1960408961-329068152-682003330-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\\DisableCAD -> 1 -> < HOSTS File > (228598 bytes) -> C:\WINDOWS\System32\drivers\etc\Hosts -> < Internet Explorer Settings [HKEY_LOCAL_MACHINE\] > -> -> HKEY_LOCAL_MACHINE\: Main\\Default_Page_URL -> http://go.microsoft.com/fwlink/?LinkId=69157 -> HKEY_LOCAL_MACHINE\: Main\\Default_Search_URL -> http://go.microsoft.com/fwlink/?LinkId=54896 -> HKEY_LOCAL_MACHINE\: Main\\Local Page -> %SystemRoot%\system32\blank.htm -> HKEY_LOCAL_MACHINE\: Main\\Search Page -> http://go.microsoft.com/fwlink/?LinkId=54896 -> HKEY_LOCAL_MACHINE\: Main\\Start Page -> http://go.microsoft.com/fwlink/?LinkId=69157 -> HKEY_LOCAL_MACHINE\: Search\\CustomizeSearch -> http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm -> HKEY_LOCAL_MACHINE\: Search\\SearchAssistant -> http://www.google.com/ie_rsearch.html -> < Internet Explorer Settings [HKEY_CURRENT_USER\] > -> -> HKEY_CURRENT_USER\: Main\\Search Bar -> http://www.google.com/ie_rsearch.html -> HKEY_CURRENT_USER\: Main\\Search Page -> http://www.google.com -> HKEY_CURRENT_USER\: Main\\Start Page -> about:blank -> HKEY_CURRENT_USER\: SearchURL\\ -> http://www.google.com/keyword/%s[Reg Error: Value provider does not exist or could not be read.] -> HKEY_CURRENT_USER\: URLSearchHooks\\{EF99BD32-C1FB-11D2-892F-0090271D4F88} [HKEY_LOCAL_MACHINE] -> %ProgramFiles%\Yahoo!\Companion\Installs\cpn\yt.dll [Yahoo! ¤u¨ã¦C] -> Yahoo! Inc. [Ver = 2007, 12, 18, 1 | Size = 817936 bytes | Modified Date = 18.12.2007 23:49:22 | Attr = ] HKEY_CURRENT_USER\: ProxyEnable -> 0 -> < Internet Explorer Settings [HKEY_USERS\.DEFAULT\] > -> -> HKEY_USERS\.DEFAULT\: ProxyEnable -> 0 -> < Internet Explorer Settings [HKEY_USERS\S-1-5-18\] > -> -> HKEY_USERS\S-1-5-18\: ProxyEnable -> 0 -> < Internet Explorer Settings [HKEY_USERS\S-1-5-19\] > -> -> < Internet Explorer Settings [HKEY_USERS\S-1-5-20\] > -> -> < Internet Explorer Settings [HKEY_USERS\S-1-5-21-1960408961-329068152-682003330-500\] > -> -> HKEY_USERS\S-1-5-21-1960408961-329068152-682003330-500\: Main\\Search Bar -> http://www.google.com/ie_rsearch.html -> HKEY_USERS\S-1-5-21-1960408961-329068152-682003330-500\: Main\\Search Page -> http://www.google.com -> HKEY_USERS\S-1-5-21-1960408961-329068152-682003330-500\: Main\\Start Page -> about:blank -> HKEY_USERS\S-1-5-21-1960408961-329068152-682003330-500\: SearchURL\\ -> http://www.google.com/keyword/%s[Reg Error: Value provider does not exist or could not be read.] -> HKEY_USERS\S-1-5-21-1960408961-329068152-682003330-500\: URLSearchHooks\\{EF99BD32-C1FB-11D2-892F-0090271D4F88} [HKEY_LOCAL_MACHINE] -> %ProgramFiles%\Yahoo!\Companion\Installs\cpn\yt.dll [Yahoo! ¤u¨ã¦C] -> Yahoo! Inc. [Ver = 2007, 12, 18, 1 | Size = 817936 bytes | Modified Date = 18.12.2007 23:49:22 | Attr = ] HKEY_USERS\S-1-5-21-1960408961-329068152-682003330-500\: ProxyEnable -> 0 -> < Trusted Sites Domains [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> [Key] 4253 domain(s) found. -> 32 domain(s) and sub-domain(s) not assigned to a zone. < Trusted Sites Ranges [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> [Key] 77 range(s) found. -> < Trusted Sites Domains [HKEY_CURRENT_USER\] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> [Key] 4252 domain(s) found. -> 31 domain(s) and sub-domain(s) not assigned to a zone. < Trusted Sites Ranges [HKEY_CURRENT_USER\] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> [Key] 77 range(s) found. -> < Trusted Sites Domains [HKEY_USERS\.DEFAULT\] > -> HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> [Key] 4252 domain(s) found. -> 31 domain(s) and sub-domain(s) not assigned to a zone. < Trusted Sites Ranges [HKEY_USERS\.DEFAULT\] > -> HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> [Key] 77 range(s) found. -> < Trusted Sites Domains [HKEY_USERS\S-1-5-18\] > -> HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> [Key] 4252 domain(s) found. -> 31 domain(s) and sub-domain(s) not assigned to a zone. < Trusted Sites Ranges [HKEY_USERS\S-1-5-18\] > -> HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> [Key] 77 range(s) found. -> < Trusted Sites Domains [HKEY_USERS\S-1-5-19\] > -> HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> [Key] 0 domain(s) found. -> < Trusted Sites Ranges [HKEY_USERS\S-1-5-19\] > -> HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> [Key] 0 range(s) found. -> < Trusted Sites Domains [HKEY_USERS\S-1-5-20\] > -> HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> [Key] 0 domain(s) found. -> < Trusted Sites Ranges [HKEY_USERS\S-1-5-20\] > -> HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> [Key] 0 range(s) found. -> < Trusted Sites Domains [HKEY_USERS\S-1-5-21-1960408961-329068152-682003330-500\] > -> HKEY_USERS\S-1-5-21-1960408961-329068152-682003330-500\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> HKEY_USERS\S-1-5-21-1960408961-329068152-682003330-500\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> [Key] 4252 domain(s) found. -> 31 domain(s) and sub-domain(s) not assigned to a zone. < Trusted Sites Ranges [HKEY_USERS\S-1-5-21-1960408961-329068152-682003330-500\] > -> HKEY_USERS\S-1-5-21-1960408961-329068152-682003330-500\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> HKEY_USERS\S-1-5-21-1960408961-329068152-682003330-500\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> [Key] 77 range(s) found. -> < BHO's [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\ -> {02478D38-C3F9-4efb-9B51-7695ECA05670} [HKEY_LOCAL_MACHINE] -> %ProgramFiles%\Yahoo!\Companion\Installs\cpn\yt.dll [&Yahoo! Toolbar Helper] -> Yahoo! Inc. [Ver = 2007, 12, 18, 1 | Size = 817936 bytes | Modified Date = 18.12.2007 23:49:22 | Attr = ] {53707962-6F74-2D53-2644-206D7942484F} [HKEY_LOCAL_MACHINE] -> %ProgramFiles%\Spybot - Search & Destroy\SDHelper.dll [Spybot-S&D IE Protection] -> Safer Networking Limited [Ver = 1, 5, 0, 11 | Size = 1554256 bytes | Modified Date = 28.01.2008 11:43:28 | Attr = ] {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} [HKEY_LOCAL_MACHINE] -> %ProgramFiles%\Yahoo!\Common\yiesrvc.dll [Yahoo! IE Services Button] -> Yahoo! Inc. [Ver = 2007, 12, 12, 1 | Size = 222448 bytes | Modified Date = 13.12.2007 00:09:42 | Attr = ] < Internet Explorer ToolBars [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ToolBar -> {EF99BD32-C1FB-11D2-892F-0090271D4F88} [HKEY_LOCAL_MACHINE] -> %ProgramFiles%\Yahoo!\Companion\Installs\cpn\yt.dll [Yahoo! ¤u¨ã¦C] -> Yahoo! Inc. [Ver = 2007, 12, 18, 1 | Size = 817936 bytes | Modified Date = 18.12.2007 23:49:22 | Attr = ] < Internet Explorer ToolBars [HKEY_CURRENT_USER\] > -> HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\ -> WebBrowser\\{4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} [HKEY_LOCAL_MACHINE] -> Reg Error: Key does not exist or could not be opened. [Reg Error: Key does not exist or could not be opened.] -> File not found < Internet Explorer ToolBars [HKEY_USERS\S-1-5-21-1960408961-329068152-682003330-500\] > -> HKEY_USERS\S-1-5-21-1960408961-329068152-682003330-500\Software\Microsoft\Internet Explorer\Toolbar\ -> WebBrowser\\{4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} [HKEY_LOCAL_MACHINE] -> Reg Error: Key does not exist or could not be opened. [Reg Error: Key does not exist or could not be opened.] -> File not found < Internet Explorer Extensions [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\ -> {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897}:{5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} [HKEY_LOCAL_MACHINE] -> %ProgramFiles%\Yahoo!\Common\yiesrvc.dll [Yahoo! Services] -> Yahoo! Inc. [Ver = 2007, 12, 12, 1 | Size = 222448 bytes | Modified Date = 13.12.2007 00:09:42 | Attr = ] {DFB852A3-47F8-48C4-A200-58CAB36FD2A2}:{53707962-6F74-2D53-2644-206D7942484F} [HKEY_LOCAL_MACHINE] -> %ProgramFiles%\Spybot - Search & Destroy\SDHelper.dll [Spybot - Search & Destroy Configuration] -> Safer Networking Limited [Ver = 1, 5, 0, 11 | Size = 1554256 bytes | Modified Date = 28.01.2008 11:43:28 | Attr = ] < Internet Explorer Menu Extensions [HKEY_USERS\.DEFAULT\] > -> HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\MenuExt\ -> Download all by Free Download Manager -> -> File not found Download by Free Download Manager -> -> File not found Download selected by Free Download Manager -> -> File not found Download web site by Free Download Manager -> -> File not found < Internet Explorer Menu Extensions [HKEY_USERS\S-1-5-18\] > -> HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\MenuExt\ -> Download all by Free Download Manager -> -> File not found Download by Free Download Manager -> -> File not found Download selected by Free Download Manager -> -> File not found Download web site by Free Download Manager -> -> File not found < Internet Explorer Menu Extensions [HKEY_USERS\S-1-5-19\] > -> HKEY_USERS\S-1-5-19\Software\Microsoft\Internet Explorer\MenuExt\ -> Download all by Free Download Manager -> -> File not found Download by Free Download Manager -> -> File not found Download selected by Free Download Manager -> -> File not found Download web site by Free Download Manager -> -> File not found < Internet Explorer Menu Extensions [HKEY_USERS\S-1-5-20\] > -> HKEY_USERS\S-1-5-20\Software\Microsoft\Internet Explorer\MenuExt\ -> Download all by Free Download Manager -> -> File not found Download by Free Download Manager -> -> File not found Download selected by Free Download Manager -> -> File not found Download web site by Free Download Manager -> -> File not found < Internet Explorer Plugins [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Plugins\ -> PluginsPageFriendlyName -> Microsoft ActiveX Gallery -> PluginsPage -> http://activex.microsoft.com/controls/find.asp?ext=%s&mime=%s -> < DNS Name Servers [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Adapters\ -> {454EF16C-6EE7-4100-935F-08B5C1CCABEE} -> (Realtek RTL8139 Family PCI Fast Ethernet NIC) -> {484858B2-978F-4B5C-8155-41FF67CD37C2} -> (Realtek RTL8139 Family PCI Fast Ethernet NIC) -> {4FF708AC-86C4-4B8E-86FD-FC151D43A53C} -> () -> {5B85094F-D81F-46D7-B47E-E12552CBF5D7} -> (Sony Ericsson Device 0A1 USB Ethernet Emulation (NDIS 5)) -> < Protocol Handlers [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\ -> msdaipp: [HKEY_LOCAL_MACHINE] -> Reg Error: Key does not exist or could not be opened.[Reg Error: Value does not exist or could not be read.] -> File not found skype4com:{FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} [HKEY_LOCAL_MACHINE] -> %CommonProgramFiles%\Skype\Skype4COM.dll[IEProtocolHandler Class] -> Skype Technologies [Ver = 1, 0, 28, 2 | Size = 1934672 bytes | Modified Date = 06.02.2008 18:24:10 | Attr = R ] < Downloaded Program Files > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\ -> {30528230-99f7-4bb4-88d8-fa1d4f56a2ab}[HKEY_LOCAL_MACHINE] -> C:\Program Files\Yahoo!\Common\Yinsthelper.dll[Installation Support] -> {8AD9C840-044E-11D1-B3E9-00805F499D93}[HKEY_LOCAL_MACHINE] -> http://java.sun.com/update/1.5.0/jinstall-1_5_0_05-windows-i586.cab[Java Plug-in 1.5.0_05] -> {CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA}[HKEY_LOCAL_MACHINE] -> http://java.sun.com/update/1.5.0/jinstall-1_5_0_05-windows-i586.cab[Java Plug-in 1.5.0_05] -> [Files/Folders - Created Within 90 days] AUTOEXEC.BAT -> %SystemDrive%\AUTOEXEC.BAT -> [Ver = | Size = 0 bytes | Created Date = 12.02.2008 16:48:47 | Attr = ] boot.ini -> %SystemDrive%\boot.ini -> [Ver = | Size = 211 bytes | Created Date = 12.02.2008 18:31:42 | Attr = HS] CONFIG.SYS -> %SystemDrive%\CONFIG.SYS -> [Ver = | Size = 0 bytes | Created Date = 12.02.2008 16:48:47 | Attr = ] creativitate -> %SystemDrive%\creativitate -> [Folder | Created Date = 10.03.2008 15:05:21 | Attr = ] Deckard -> %SystemDrive%\Deckard -> [Folder | Created Date = 21.03.2008 02:46:11 | Attr = ] Documents and Settings -> %SystemDrive%\Documents and Settings -> [Folder | Created Date = 12.02.2008 18:32:20 | Attr = ] IO.SYS -> %SystemDrive%\IO.SYS -> [Ver = | Size = 0 bytes | Created Date = 12.02.2008 16:48:47 | Attr = RHS] kav -> %SystemDrive%\kav -> [Folder | Created Date = 12.02.2008 17:38:30 | Attr = ] MSDOS.SYS -> %SystemDrive%\MSDOS.SYS -> [Ver = | Size = 0 bytes | Created Date = 12.02.2008 16:48:47 | Attr = RHS] MSOCache -> %SystemDrive%\MSOCache -> [Folder | Created Date = 15.02.2008 16:17:27 | Attr = RH ] Program Files -> %ProgramFiles% -> [Folder | Created Date = 12.02.2008 18:33:32 | Attr = ] RECYCLER -> %SystemDrive%\RECYCLER -> [Folder | Created Date = 17.02.2008 12:22:41 | Attr = HS] System Volume Information -> %SystemDrive%\System Volume Information -> [Folder | Created Date = 12.02.2008 18:32:19 | Attr = HS] totalcmd -> %SystemDrive%\totalcmd -> [Folder | Created Date = 12.02.2008 18:27:18 | Attr = ] WINDOWS -> %SystemRoot% -> [Folder | Created Date = 12.02.2008 18:28:30 | Attr = ] FP4.CAT -> %SystemRoot%\System32\dllcache\FP4.CAT -> [Ver = | Size = 31281 bytes | Created Date = 12.02.2008 18:32:51 | Attr = ] HPCRDP.CAT -> %SystemRoot%\System32\dllcache\HPCRDP.CAT -> [Ver = | Size = 13472 bytes | Created Date = 12.02.2008 18:32:51 | Attr = ] IASNT4.CAT -> %SystemRoot%\System32\dllcache\IASNT4.CAT -> [Ver = | Size = 8574 bytes | Created Date = 12.02.2008 18:32:51 | Attr = ] IMS.CAT -> %SystemRoot%\System32\dllcache\IMS.CAT -> [Ver = | Size = 13753 bytes | Created Date = 12.02.2008 18:32:51 | Attr = ] MAPIMIG.CAT -> %SystemRoot%\System32\dllcache\MAPIMIG.CAT -> [Ver = | Size = 399645 bytes | Created Date = 12.02.2008 18:32:51 | Attr = ] mediactr.cat -> %SystemRoot%\System32\dllcache\mediactr.cat -> [Ver = | Size = 31965 bytes | Created Date = 12.02.2008 18:32:51 | Attr = ] MSTSWEB.CAT -> %SystemRoot%\System32\dllcache\MSTSWEB.CAT -> [Ver = | Size = 7245 bytes | Created Date = 12.02.2008 18:32:51 | Attr = ] MW770.CAT -> %SystemRoot%\System32\dllcache\MW770.CAT -> [Ver = | Size = 37484 bytes | Created Date = 12.02.2008 18:32:51 | Attr = ] NT5.CAT -> %SystemRoot%\System32\dllcache\NT5.CAT -> [Ver = | Size = 2012670 bytes | Created Date = 12.02.2008 18:32:50 | Attr = ] NT5IIS.CAT -> %SystemRoot%\System32\dllcache\NT5IIS.CAT -> [Ver = | Size = 797189 bytes | Created Date = 12.02.2008 18:32:51 | Attr = ] NT5INF.CAT -> %SystemRoot%\System32\dllcache\NT5INF.CAT -> [Ver = | Size = 502724 bytes | Created Date = 12.02.2008 18:32:50 | Attr = ] NTPRINT.CAT -> %SystemRoot%\System32\dllcache\NTPRINT.CAT -> [Ver = | Size = 1086058 bytes | Created Date = 12.02.2008 18:32:50 | Attr = ] OEMBIOS.CAT -> %SystemRoot%\System32\dllcache\OEMBIOS.CAT -> [Ver = | Size = 7382 bytes | Created Date = 12.02.2008 18:32:51 | Attr = ] SP2.CAT -> %SystemRoot%\System32\dllcache\SP2.CAT -> [Ver = | Size = 1042903 bytes | Created Date = 12.02.2008 18:32:50 | Attr = ] tabletpc.cat -> %SystemRoot%\System32\dllcache\tabletpc.cat -> [Ver = | Size = 110116 bytes | Created Date = 12.02.2008 18:32:51 | Attr = ] wmerrenu.cat -> %SystemRoot%\System32\dllcache\wmerrenu.cat -> [Ver = | Size = 7334 bytes | Created Date = 12.02.2008 18:32:51 | Attr = ] ati2mtag.sys -> %SystemRoot%\System32\drivers\ati2mtag.sys -> ATI Technologies Inc. [Ver = 6.14.10.6462 | Size = 701440 bytes | Created Date = 12.02.2008 20:25:13 | Attr = ] cdr4_xp.sys -> %SystemRoot%\System32\drivers\cdr4_xp.sys -> Sonic Solutions [Ver = 8.0.0.212 | Size = 9336 bytes | Created Date = 12.02.2008 19:03:42 | Attr = ] cdralw2k.sys -> %SystemRoot%\System32\drivers\cdralw2k.sys -> Sonic Solutions [Ver = 8.0.0.212 | Size = 9464 bytes | Created Date = 12.02.2008 19:03:42 | Attr = ] cmaudio.sys -> %SystemRoot%\System32\drivers\cmaudio.sys -> C-Media Inc [Ver = 5.12.01.0639 | Size = 379726 bytes | Created Date = 12.02.2008 19:39:58 | Attr = ] disdn -> %SystemRoot%\System32\drivers\disdn -> [Folder | Created Date = 12.02.2008 18:28:30 | Attr = ] etc -> %SystemRoot%\System32\drivers\etc -> [Folder | Created Date = 12.02.2008 18:28:30 | Attr = ] hosts.20080320-175647.backup -> %SystemRoot%\System32\drivers\etc\hosts.20080320-175647.backup -> [Ver = | Size = 734 bytes | Created Date = 20.03.2008 17:56:47 | Attr = ] hosts.ics -> %SystemRoot%\System32\drivers\etc\hosts.ics -> [Ver = | Size = 499 bytes | Created Date = 12.02.2008 18:12:57 | Attr = ] k510bus.sys -> %SystemRoot%\System32\drivers\k510bus.sys -> MCCI [Ver = V4.34 | Size = 58288 bytes | Created Date = 25.02.2008 14:47:47 | Attr = R ] k510cm.sys -> %SystemRoot%\System32\drivers\k510cm.sys -> MCCI [Ver = V4.34 | Size = 6176 bytes | Created Date = 27.02.2008 15:41:26 | Attr = R ] k510cmnt.sys -> %SystemRoot%\System32\drivers\k510cmnt.sys -> MCCI [Ver = V4.34 | Size = 6176 bytes | Created Date = 27.02.2008 15:41:26 | Attr = R ] k510mdfl.sys -> %SystemRoot%\System32\drivers\k510mdfl.sys -> MCCI [Ver = V4.34 | Size = 8336 bytes | Created Date = 27.02.2008 15:41:26 | Attr = R ] k510mdm.sys -> %SystemRoot%\System32\drivers\k510mdm.sys -> MCCI [Ver = V4.34 | Size = 94064 bytes | Created Date = 27.02.2008 15:41:26 | Attr = R ] k510mgmt.sys -> %SystemRoot%\System32\drivers\k510mgmt.sys -> MCCI [Ver = V4.34 | Size = 85408 bytes | Created Date = 29.02.2008 19:36:30 | Attr = R ] k510obex.sys -> %SystemRoot%\System32\drivers\k510obex.sys -> MCCI [Ver = V4.34 | Size = 83344 bytes | Created Date = 29.02.2008 18:52:54 | Attr = R ] k510wh.sys -> %SystemRoot%\System32\drivers\k510wh.sys -> MCCI [Ver = V4.34 | Size = 5808 bytes | Created Date = 25.02.2008 14:47:47 | Attr = R ] k510whnt.sys -> %SystemRoot%\System32\drivers\k510whnt.sys -> MCCI [Ver = V4.34 | Size = 5808 bytes | Created Date = 25.02.2008 14:47:47 | Attr = R ] PxHelp20.sys -> %SystemRoot%\System32\drivers\PxHelp20.sys -> Sonic Solutions [Ver = 3.00.56a | Size = 43528 bytes | Created Date = 12.02.2008 19:03:42 | Attr = ] RTL8139.sys -> %SystemRoot%\System32\drivers\RTL8139.sys -> Realtek Semiconductor Corporation [Ver = 5.398.613.2003 built by: WinDDK | Size = 20992 bytes | Created Date = 12.02.2008 18:34:54 | Attr = ] sea1bus.sys -> %SystemRoot%\System32\drivers\sea1bus.sys -> MCCI [Ver = V4.34 | Size = 61536 bytes | Created Date = 20.02.2008 09:07:28 | Attr = R ] sea1cm.sys -> %SystemRoot%\System32\drivers\sea1cm.sys -> MCCI [Ver = V4.34 | Size = 6240 bytes | Created Date = 21.02.2008 14:51:13 | Attr = R ] sea1cmnt.sys -> %SystemRoot%\System32\drivers\sea1cmnt.sys -> MCCI [Ver = V4.34 | Size = 6240 bytes | Created Date = 21.02.2008 14:51:13 | Attr = R ] sea1cr.sys -> %SystemRoot%\System32\drivers\sea1cr.sys -> MCCI [Ver = V4.34 | Size = 4128 bytes | Created Date = 26.02.2008 08:33:01 | Attr = R ] sea1mdfl.sys -> %SystemRoot%\System32\drivers\sea1mdfl.sys -> MCCI [Ver = V4.34 | Size = 9360 bytes | Created Date = 21.02.2008 14:51:13 | Attr = R ] sea1mdm.sys -> %SystemRoot%\System32\drivers\sea1mdm.sys -> MCCI [Ver = V4.34 | Size = 97088 bytes | Created Date = 21.02.2008 14:51:13 | Attr = R ] sea1mgmt.sys -> %SystemRoot%\System32\drivers\sea1mgmt.sys -> MCCI [Ver = V4.34 | Size = 88624 bytes | Created Date = 25.02.2008 20:20:00 | Attr = R ] sea1nd5.sys -> %SystemRoot%\System32\drivers\sea1nd5.sys -> MCCI [Ver = V4.34 | Size = 18704 bytes | Created Date = 26.02.2008 21:57:11 | Attr = R ] sea1obex.sys -> %SystemRoot%\System32\drivers\sea1obex.sys -> MCCI [Ver = V4.34 | Size = 86432 bytes | Created Date = 25.02.2008 18:12:51 | Attr = R ] sea1unic.sys -> %SystemRoot%\System32\drivers\sea1unic.sys -> MCCI [Ver = V4.34 | Size = 90800 bytes | Created Date = 26.02.2008 08:33:01 | Attr = R ] sea1wh.sys -> %SystemRoot%\System32\drivers\sea1wh.sys -> MCCI [Ver = V4.34 | Size = 5872 bytes | Created Date = 20.02.2008 09:07:28 | Attr = R ] sea1whnt.sys -> %SystemRoot%\System32\drivers\sea1whnt.sys -> MCCI [Ver = V4.34 | Size = 5872 bytes | Created Date = 20.02.2008 09:07:28 | Attr = R ] sptd.sys -> %SystemRoot%\System32\drivers\sptd.sys -> [Ver = | Size = 716272 bytes | Created Date = 19.02.2008 18:40:43 | Attr = ] usbVM303.sys -> %SystemRoot%\System32\drivers\usbVM303.sys -> Vimicro Corporation [Ver = 3, 5, 1013, 10 | Size = 390849 bytes | Created Date = 17.02.2008 20:35:36 | Attr = R ] $winnt$.inf -> %SystemRoot%\System32\$winnt$.inf -> [Ver = | Size = 1020 bytes | Created Date = 12.02.2008 18:31:39 | Attr = ] %DataFolder% -> %SystemRoot%\System32\%DataFolder% -> [Folder | Created Date = 14.02.2008 15:37:51 | Attr = ] 1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> 1025 -> %SystemRoot%\System32\1025 -> [Folder | Created Date = 12.02.2008 18:28:30 | Attr = ] 1028 -> %SystemRoot%\System32\1028 -> [Folder | Created Date = 12.02.2008 18:28:30 | Attr = ] 1031 -> %SystemRoot%\System32\1031 -> [Folder | Created Date = 12.02.2008 18:28:30 | Attr = ] 1033 -> %SystemRoot%\System32\1033 -> [Folder | Created Date = 12.02.2008 18:28:30 | Attr = ] 1037 -> %SystemRoot%\System32\1037 -> [Folder | Created Date = 12.02.2008 18:28:30 | Attr = ] 1041 -> %SystemRoot%\System32\1041 -> [Folder | Created Date = 12.02.2008 18:28:30 | Attr = ] 1042 -> %SystemRoot%\System32\1042 -> [Folder | Created Date = 12.02.2008 18:28:30 | Attr = ] 1054 -> %SystemRoot%\System32\1054 -> [Folder | Created Date = 12.02.2008 18:28:30 | Attr = ] 2052 -> %SystemRoot%\System32\2052 -> [Folder | Created Date = 12.02.2008 18:28:30 | Attr = ] 3076 -> %SystemRoot%\System32\3076 -> [Folder | Created Date = 12.02.2008 18:28:30 | Attr = ] 3com_dmi -> %SystemRoot%\System32\3com_dmi -> [Folder | Created Date = 12.02.2008 18:28:30 | Attr = ] a15.tbl -> %SystemRoot%\System32\a15.tbl -> [Ver = | Size = 1460 bytes | Created Date = 12.02.2008 18:38:51 | Attr = ] a234.tbl -> %SystemRoot%\System32\a234.tbl -> [Ver = | Size = 44370 bytes | Created Date = 12.02.2008 18:38:51 | Attr = ] a3d.dll -> %SystemRoot%\System32\a3d.dll -> Sensaura Ltd [Ver = 4.12.01.2008a | Size = 712704 bytes | Created Date = 12.02.2008 19:39:38 | Attr = ] acode.tbl -> %SystemRoot%\System32\acode.tbl -> [Ver = | Size = 44370 bytes | Created Date = 12.02.2008 18:38:51 | Attr = ] amcompat.tlb -> %SystemRoot%\System32\amcompat.tlb -> [Ver = | Size = 16832 bytes | Created Date = 12.02.2008 16:48:38 | Attr = ] appmgmt -> %SystemRoot%\System32\appmgmt -> [Folder | Created Date = 12.02.2008 20:23:19 | Attr = ] arphr.tbl -> %SystemRoot%\System32\arphr.tbl -> [Ver = | Size = 110566 bytes | Created Date = 12.02.2008 18:38:52 | Attr = ] arptr.tbl -> %SystemRoot%\System32\arptr.tbl -> [Ver = | Size = 16312 bytes | Created Date = 12.02.2008 18:38:52 | Attr = ] array30.tab -> %SystemRoot%\System32\array30.tab -> [Ver = | Size = 146126 bytes | Created Date = 12.02.2008 18:38:52 | Attr = ] arrayhw.tab -> %SystemRoot%\System32\arrayhw.tab -> [Ver = | Size = 18600 bytes | Created Date = 12.02.2008 18:38:52 | Attr = ] ati2cqag.dll -> %SystemRoot%\System32\ati2cqag.dll -> ATI Technologies Inc. [Ver = 6.14.10.0233 | Size = 229376 bytes | Created Date = 12.02.2008 20:25:14 | Attr = ] ati2dvag.dll -> %SystemRoot%\System32\ati2dvag.dll -> ATI Technologies Inc. [Ver = 6.14.10.6462 | Size = 201728 bytes | Created Date = 12.02.2008 20:25:14 | Attr = ] ati3d1ag.dll -> %SystemRoot%\System32\ati3d1ag.dll -> ATI Technologies Inc. [Ver = 6.14.10.4071 | Size = 870784 bytes | Created Date = 12.02.2008 18:35:13 | Attr = ] ati3duag.dll -> %SystemRoot%\System32\ati3duag.dll -> ATI Technologies Inc. [Ver = 6.14.10.0231 | Size = 1888992 bytes | Created Date = 12.02.2008 20:25:14 | Attr = ] atifglpf.xml -> %SystemRoot%\System32\atifglpf.xml -> [Ver = | Size = 9054 bytes | Created Date = 12.02.2008 19:54:52 | Attr = R ] atiicdxx.dat -> %SystemRoot%\System32\atiicdxx.dat -> [Ver = | Size = 72105 bytes | Created Date = 12.02.2008 19:54:51 | Attr = R ] atiiiexx.dll -> %SystemRoot%\System32\atiiiexx.dll -> ATI Technologies Inc. [Ver = 6.14.10.4004 | Size = 294912 bytes | Created Date = 12.02.2008 19:54:55 | Attr = R ] ativvaxx.dll -> %SystemRoot%\System32\ativvaxx.dll -> ATI Technologies Inc. [Ver = 6.14.01.0009 | Size = 516768 bytes | Created Date = 12.02.2008 20:25:14 | Attr = ] Audio3D.dll -> %SystemRoot%\System32\Audio3D.dll -> Sensaura Ltd [Ver = 4.12.01.2008a | Size = 712704 bytes | Created Date = 12.02.2008 19:39:38 | Attr = ] AUTOEXEC.NT -> %SystemRoot%\System32\AUTOEXEC.NT -> [Ver = | Size = 1688 bytes | Created Date = 12.02.2008 18:33:22 | Attr = ] big5.nls -> %SystemRoot%\System32\big5.nls -> [Ver = | Size = 66728 bytes | Created Date = 12.02.2008 18:38:50 | Attr = ] bopomofo.nls -> %SystemRoot%\System32\bopomofo.nls -> [Ver = | Size = 82172 bytes | Created Date = 12.02.2008 18:38:50 | Attr = ] bopomofo.uce -> %SystemRoot%\System32\bopomofo.uce -> [Ver = | Size = 22984 bytes | Created Date = 12.02.2008 16:45:20 | Attr = ] CatRoot -> %SystemRoot%\System32\CatRoot -> [Folder | Created Date = 12.02.2008 18:32:41 | Attr = ] CatRoot2 -> %SystemRoot%\System32\CatRoot2 -> [Folder | Created Date = 12.02.2008 18:32:41 | Attr = ] cdplayer.exe.manifest -> %SystemRoot%\System32\cdplayer.exe.manifest -> [Ver = | Size = 749 bytes | Created Date = 12.02.2008 16:47:36 | Attr = RH ] CMMGR32.EXE -> %SystemRoot%\System32\CMMGR32.EXE -> [Ver = | Size = 0 bytes | Created Date = 20.03.2008 21:29:55 | Attr = ] cmnprop.dll -> %SystemRoot%\System32\cmnprop.dll -> C-Media Corporation [Ver = 5.00.2195.11 | Size = 32768 bytes | Created Date = 12.02.2008 19:39:42 | Attr = ] Com -> %SystemRoot%\System32\Com -> [Folder | Created Date = 12.02.2008 16:45:09 | Attr = ] config -> %SystemRoot%\System32\config -> [Folder | Created Date = 12.02.2008 18:28:30 | Attr = ] CONFIG.NT -> %SystemRoot%\System32\CONFIG.NT -> [Ver = | Size = 2577 bytes | Created Date = 12.02.2008 16:48:47 | Attr = ] c_10001.nls -> %SystemRoot%\System32\c_10001.nls -> [Ver = | Size = 162850 bytes | Created Date = 12.02.2008 18:38:08 | Attr = ] c_10002.nls -> %SystemRoot%\System32\c_10002.nls -> [Ver = | Size = 195618 bytes | Created Date = 12.02.2008 18:38:51 | Attr = ] c_10003.nls -> %SystemRoot%\System32\c_10003.nls -> [Ver = | Size = 177698 bytes | Created Date = 12.02.2008 18:38:34 | Attr = ] c_10004.nls -> %SystemRoot%\System32\c_10004.nls -> [Ver = | Size = 66082 bytes | Created Date = 12.02.2008 18:38:03 | Attr = ] c_10005.nls -> %SystemRoot%\System32\c_10005.nls -> [Ver = | Size = 66082 bytes | Created Date = 12.02.2008 18:38:00 | Attr = ] c_10006.nls -> %SystemRoot%\System32\c_10006.nls -> [Ver = | Size = 66082 bytes | Created Date = 12.02.2008 18:33:28 | Attr = ] c_10007.nls -> %SystemRoot%\System32\c_10007.nls -> [Ver = | Size = 66082 bytes | Created Date = 12.02.2008 18:33:29 | Attr = ] c_10008.nls -> %SystemRoot%\System32\c_10008.nls -> [Ver = | Size = 173602 bytes | Created Date = 12.02.2008 18:38:43 | Attr = ] c_10010.nls -> %SystemRoot%\System32\c_10010.nls -> [Ver = | Size = 66082 bytes | Created Date = 12.02.2008 18:33:25 | Attr = ] c_10017.nls -> %SystemRoot%\System32\c_10017.nls -> [Ver = | Size = 66082 bytes | Created Date = 12.02.2008 18:33:29 | Attr = ] c_10021.nls -> %SystemRoot%\System32\c_10021.nls -> [Ver = | Size = 66082 bytes | Created Date = 12.02.2008 18:37:54 | Attr = ] c_10029.nls -> %SystemRoot%\System32\c_10029.nls -> [Ver = | Size = 66082 bytes | Created Date = 12.02.2008 18:33:25 | Attr = ] c_10081.nls -> %SystemRoot%\System32\c_10081.nls -> [Ver = | Size = 66082 bytes | Created Date = 12.02.2008 18:33:30 | Attr = ] c_10082.nls -> %SystemRoot%\System32\c_10082.nls -> [Ver = | Size = 66082 bytes | Created Date = 12.02.2008 18:33:25 | Attr = ] c_1361.nls -> %SystemRoot%\System32\c_1361.nls -> [Ver = | Size = 189986 bytes | Created Date = 12.02.2008 18:38:33 | Attr = ] c_20000.nls -> %SystemRoot%\System32\c_20000.nls -> [Ver = | Size = 180258 bytes | Created Date = 12.02.2008 18:38:09 | Attr = ] c_20127.nls -> %SystemRoot%\System32\c_20127.nls -> [Ver = | Size = 66082 bytes | Created Date = 12.02.2008 18:33:24 | Attr = ] c_20290.nls -> %SystemRoot%\System32\c_20290.nls -> [Ver = | Size = 66082 bytes | Created Date = 12.02.2008 18:38:08 | Attr = ] c_20932.nls -> %SystemRoot%\System32\c_20932.nls -> [Ver = | Size = 180770 bytes | Created Date = 12.02.2008 18:38:09 | Attr = ] c_20936.nls -> %SystemRoot%\System32\c_20936.nls -> [Ver = | Size = 173602 bytes | Created Date = 12.02.2008 18:38:09 | Attr = ] c_20949.nls -> %SystemRoot%\System32\c_20949.nls -> [Ver = | Size = 177698 bytes | Created Date = 12.02.2008 18:38:09 | Attr = ] c_21027.nls -> %SystemRoot%\System32\c_21027.nls -> [Ver = | Size = 66082 bytes | Created Date = 12.02.2008 18:38:08 | Attr = ] C_28594.NLS -> %SystemRoot%\System32\C_28594.NLS -> [Ver = | Size = 66082 bytes | Created Date = 12.02.2008 18:33:27 | Attr = ] C_28595.NLS -> %SystemRoot%\System32\C_28595.NLS -> [Ver = | Size = 66082 bytes | Created Date = 12.02.2008 18:33:29 | Attr = ] C_28596.NLS -> %SystemRoot%\System32\C_28596.NLS -> [Ver = | Size = 66082 bytes | Created Date = 12.02.2008 18:38:03 | Attr = ] C_28597.NLS -> %SystemRoot%\System32\C_28597.NLS -> [Ver = | Size = 66082 bytes | Created Date = 12.02.2008 18:33:28 | Attr = ] c_28599.nls -> %SystemRoot%\System32\c_28599.nls -> [Ver = | Size = 66082 bytes | Created Date = 12.02.2008 18:33:30 | Attr = ] c_28603.nls -> %SystemRoot%\System32\c_28603.nls -> [Ver = | Size = 66082 bytes | Created Date = 12.02.2008 18:33:31 | Attr = ] c_708.nls -> %SystemRoot%\System32\c_708.nls -> [Ver = | Size = 66082 bytes | Created Date = 12.02.2008 18:38:03 | Attr = ] c_720.nls -> %SystemRoot%\System32\c_720.nls -> [Ver = | Size = 66594 bytes | Created Date = 12.02.2008 18:38:03 | Attr = ] c_737.nls -> %SystemRoot%\System32\c_737.nls -> [Ver = | Size = 66594 bytes | Created Date = 12.02.2008 18:33:28 | Attr = ] c_852.nls -> %SystemRoot%\System32\c_852.nls -> [Ver = | Size = 66594 bytes | Created Date = 12.02.2008 18:33:25 | Attr = ] c_855.nls -> %SystemRoot%\System32\c_855.nls -> [Ver = | Size = 66594 bytes | Created Date = 12.02.2008 18:33:27 | Attr = ] c_857.nls -> %SystemRoot%\System32\c_857.nls -> [Ver = | Size = 66594 bytes | Created Date = 12.02.2008 18:33:30 | Attr = ] c_862.nls -> %SystemRoot%\System32\c_862.nls -> [Ver = | Size = 66594 bytes | Created Date = 12.02.2008 18:38:00 | Attr = ] c_864.nls -> %SystemRoot%\System32\c_864.nls -> [Ver = | Size = 66594 bytes | Created Date = 12.02.2008 18:38:03 | Attr = ] c_866.nls -> %SystemRoot%\System32\c_866.nls -> [Ver = | Size = 66594 bytes | Created Date = 12.02.2008 18:33:27 | Attr = ] c_869.nls -> %SystemRoot%\System32\c_869.nls -> [Ver = | Size = 66594 bytes | Created Date = 12.02.2008 18:33:28 | Attr = ] c_875.nls -> %SystemRoot%\System32\c_875.nls -> [Ver = | Size = 66082 bytes | Created Date = 12.02.2008 18:33:28 | Attr = ] dayiphr.tbl -> %SystemRoot%\System32\dayiphr.tbl -> [Ver = | Size = 520 bytes | Created Date = 12.02.2008 18:38:51 | Attr = ] dayiptr.tbl -> %SystemRoot%\System32\dayiptr.tbl -> [Ver = | Size = 700 bytes | Created Date = 12.02.2008 18:38:51 | Attr = ] desktop.ini -> %SystemRoot%\System32\desktop.ini -> [Ver = | Size = 2 bytes | Created Date = 12.02.2008 16:47:00 | Attr = ] dgrpsetu.dll -> %SystemRoot%\System32\dgrpsetu.dll -> Digi International, Inc. [Ver = 2.3.7 | Size = 176157 bytes | Created Date = 12.02.2008 18:33:24 | Attr = ] dgsetup.dll -> %SystemRoot%\System32\dgsetup.dll -> Digi International [Ver = v3.7.3.0 | Size = 85020 bytes | Created Date = 12.02.2008 18:33:24 | Attr = ] dhcp -> %SystemRoot%\System32\dhcp -> [Folder | Created Date = 12.02.2008 18:28:30 | Attr = ] DirectX -> %SystemRoot%\System32\DirectX -> [Folder | Created Date = 12.02.2008 16:47:17 | Attr = ] dllcache -> %SystemRoot%\System32\dllcache -> [Folder | Created Date = 12.02.2008 18:28:30 | Attr = RHS] drivers -> %SystemRoot%\System32\drivers -> [Folder | Created Date = 12.02.2008 18:28:30 | Attr = ] DRVSTORE -> %SystemRoot%\System32\DRVSTORE -> [Folder | Created Date = 20.02.2008 09:03:28 | Attr = ] emptyregdb.dat -> %SystemRoot%\System32\emptyregdb.dat -> [Ver = | Size = 21640 bytes | Created Date = 12.02.2008 16:46:05 | Attr = ] en-US -> %SystemRoot%\System32\en-US -> [Folder | Created Date = 17.02.2008 10:35:35 | Attr = ] EqnClass.Dll -> %SystemRoot%\System32\EqnClass.Dll -> Equinox Systems Inc. [Ver = 5.0u(58) | Size = 103424 bytes | Created Date = 12.02.2008 18:33:23 | Attr = ] export -> %SystemRoot%\System32\export -> [Folder | Created Date = 12.02.2008 18:28:30 | Attr = ] FNTCACHE.DAT -> %SystemRoot%\System32\FNTCACHE.DAT -> [Ver = | Size = 263024 bytes | Created Date = 12.02.2008 18:32:19 | Attr = ] gb2312.uce -> %SystemRoot%\System32\gb2312.uce -> [Ver = | Size = 24006 bytes | Created Date = 12.02.2008 16:45:20 | Attr = ] hticons.dll -> %SystemRoot%\System32\hticons.dll -> Hilgraeve, Inc. [Ver = 5.1.2600.0 | Size = 44544 bytes | Created Date = 12.02.2008 16:45:25 | Attr = ] hypertrm.dll -> %SystemRoot%\System32\hypertrm.dll -> Hilgraeve, Inc. [Ver = 5.1.2600.2563 | Size = 347136 bytes | Created Date = 12.02.2008 16:45:12 | Attr = ] ias -> %SystemRoot%\System32\ias -> [Folder | Created Date = 12.02.2008 18:28:30 | Attr = ] icsxml -> %SystemRoot%\System32\icsxml -> [Folder | Created Date = 12.02.2008 18:28:30 | Attr = ] ideograf.uce -> %SystemRoot%\System32\ideograf.uce -> [Ver = | Size = 60458 bytes | Created Date = 12.02.2008 16:45:20 | Attr = ] IME -> %SystemRoot%\System32\IME -> [Folder | Created Date = 12.02.2008 18:28:30 | Attr = ] inetsrv -> %SystemRoot%\System32\inetsrv -> [Folder | Created Date = 12.02.2008 18:28:30 | Attr = ] java.exe -> %SystemRoot%\System32\java.exe -> Sun Microsystems, Inc. [Ver = 5.0.50.5 | Size = 49248 bytes | Created Date = 12.02.2008 16:49:43 | Attr = ] javaw.exe -> %SystemRoot%\System32\javaw.exe -> Sun Microsystems, Inc. [Ver = 5.0.50.5 | Size = 49250 bytes | Created Date = 12.02.2008 16:49:43 | Attr = ] javaws.exe -> %SystemRoot%\System32\javaws.exe -> Sun Microsystems, Inc. [Ver = 5.0.50.5 | Size = 127078 bytes | Created Date = 12.02.2008 16:49:43 | Attr = ] jpicpl32.cpl -> %SystemRoot%\System32\jpicpl32.cpl -> Sun Microsystems, Inc. [Ver = 5.0.50.5 | Size = 49265 bytes | Created Date = 12.02.2008 16:49:43 | Attr = ] kanji_1.uce -> %SystemRoot%\System32\kanji_1.uce -> [Ver = | Size = 6948 bytes | Created Date = 12.02.2008 16:45:20 | Attr = ] kanji_2.uce -> %SystemRoot%\System32\kanji_2.uce -> [Ver = | Size = 8484 bytes | Created Date = 12.02.2008 16:45:20 | Attr = ] korean.uce -> %SystemRoot%\System32\korean.uce -> [Ver = | Size = 12876 bytes | Created Date = 12.02.2008 16:45:20 | Attr = ] ksc.nls -> %SystemRoot%\System32\ksc.nls -> [Ver = | Size = 47066 bytes | Created Date = 12.02.2008 18:38:33 | Attr = ] lcphrase.tbl -> %SystemRoot%\System32\lcphrase.tbl -> [Ver = | Size = 211938 bytes | Created Date = 12.02.2008 18:38:52 | Attr = ] lcptr.tbl -> %SystemRoot%\System32\lcptr.tbl -> [Ver = | Size = 24114 bytes | Created Date = 12.02.2008 18:38:51 | Attr = ] LogFiles -> %SystemRoot%\System32\LogFiles -> [Folder | Created Date = 14.02.2008 18:03:54 | Attr = ] logonui.exe.manifest -> %SystemRoot%\System32\logonui.exe.manifest -> [Ver = | Size = 488 bytes | Created Date = 12.02.2008 16:47:43 | Attr = RH ] Macromed -> %SystemRoot%\System32\Macromed -> [Folder | Created Date = 12.02.2008 16:46:51 | Attr = ] Microsoft -> %SystemRoot%\System32\Microsoft -> [Folder | Created Date = 12.02.2008 17:01:02 | Attr = S] msdayi.tbl -> %SystemRoot%\System32\msdayi.tbl -> [Ver = | Size = 116285 bytes | Created Date = 12.02.2008 18:38:51 | Attr = ] MsDtc -> %SystemRoot%\System32\MsDtc -> [Folder | Created Date = 12.02.2008 16:45:10 | Attr = ] msdtcprf.h -> %SystemRoot%\System32\msdtcprf.h -> [Ver = | Size = 768 bytes | Created Date = 12.02.2008 16:45:18 | Attr = ] msdtcprf.ini -> %SystemRoot%\System32\msdtcprf.ini -> [Ver = | Size = 1931 bytes | Created Date = 12.02.2008 16:45:18 | Attr = ] msssc.dll -> %SystemRoot%\System32\msssc.dll -> [Ver = | Size = 44 bytes | Created Date = 12.02.2008 19:33:19 | Attr = ] mui -> %SystemRoot%\System32\mui -> [Folder | Created Date = 12.02.2008 18:28:30 | Attr = ] ncpa.cpl.manifest -> %SystemRoot%\System32\ncpa.cpl.manifest -> [Ver = | Size = 749 bytes | Created Date = 12.02.2008 16:47:36 | Attr = RH ] npp -> %SystemRoot%\System32\npp -> [Folder | Created Date = 12.02.2008 18:28:30 | Attr = ] nscompat.tlb -> %SystemRoot%\System32\nscompat.tlb -> [Ver = | Size = 23392 bytes | Created Date = 12.02.2008 16:48:38 | Attr = ] nwc.cpl.manifest -> %SystemRoot%\System32\nwc.cpl.manifest -> [Ver = | Size = 749 bytes | Created Date = 12.02.2008 16:47:36 | Attr = RH ] oobe -> %SystemRoot%\System32\oobe -> [Folder | Created Date = 12.02.2008 18:28:30 | Attr = ] OpenExpert -> %SystemRoot%\System32\OpenExpert -> [Folder | Created Date = 12.02.2008 18:28:30 | Attr = ] PerfStringBackup.INI -> %SystemRoot%\System32\PerfStringBackup.INI -> [Ver = | Size = 466370 bytes | Created Date = 12.02.2008 18:33:36 | Attr = ] phon.tbl -> %SystemRoot%\System32\phon.tbl -> [Ver = | Size = 4071 bytes | Created Date = 12.02.2008 18:38:51 | Attr = ] phoncode.tbl -> %SystemRoot%\System32\phoncode.tbl -> [Ver = | Size = 43242 bytes | Created Date = 12.02.2008 18:38:51 | Attr = ] phonptr.tbl -> %SystemRoot%\System32\phonptr.tbl -> [Ver = | Size = 2714 bytes | Created Date = 12.02.2008 18:38:51 | Attr = ] PINTLPAD.HLP -> %SystemRoot%\System32\PINTLPAD.HLP -> [Ver = | Size = 14821 bytes | Created Date = 12.02.2008 18:38:50 | Attr = ] PINTLPAE.HLP -> %SystemRoot%\System32\PINTLPAE.HLP -> [Ver = | Size = 16254 bytes | Created Date = 12.02.2008 18:38:50 | Attr = ] prc.nls -> %SystemRoot%\System32\prc.nls -> [Ver = | Size = 83748 bytes | Created Date = 12.02.2008 18:38:43 | Attr = ] prcp.nls -> %SystemRoot%\System32\prcp.nls -> [Ver = | Size = 83748 bytes | Created Date = 12.02.2008 18:38:43 | Attr = ] PreInstall -> %SystemRoot%\System32\PreInstall -> [Folder | Created Date = 12.02.2008 18:28:30 | Attr = ] px.dll -> %SystemRoot%\System32\px.dll -> Sonic Solutions [Ver = 3.6.36.500 | Size = 547576 bytes | Created Date = 12.02.2008 19:03:41 | Attr = ] pxafs.dll -> %SystemRoot%\System32\pxafs.dll -> Sonic Solutions [Ver = 3.6.36.500 | Size = 129784 bytes | Created Date = 12.02.2008 19:03:41 | Attr = ] pxcpya64.exe -> %SystemRoot%\System32\pxcpya64.exe -> Sonic Solutions [Ver = 1.00.40a | Size = 64760 bytes | Created Date = 12.02.2008 19:03:42 | Attr = ] pxdrv.dll -> %SystemRoot%\System32\pxdrv.dll -> Sonic Solutions [Ver = 1.02.05a | Size = 510712 bytes | Created Date = 12.02.2008 19:03:41 | Attr = ] pxhpinst.exe -> %SystemRoot%\System32\pxhpinst.exe -> Sonic Solutions [Ver = 3.00.56a | Size = 72440 bytes | Created Date = 12.02.2008 19:03:42 | Attr = ] pxinsa64.exe -> %SystemRoot%\System32\pxinsa64.exe -> Sonic Solutions [Ver = 3.00.56a | Size = 64760 bytes | Created Date = 12.02.2008 19:03:42 | Attr = ] pxmas.dll -> %SystemRoot%\System32\pxmas.dll -> Sonic Solutions [Ver = 3.6.36.500 | Size = 187128 bytes | Created Date = 12.02.2008 19:03:41 | Attr = ] pxsfs.dll -> %SystemRoot%\System32\pxsfs.dll -> Sonic Solutions [Ver = 3.6.36.500 | Size = 1628920 bytes | Created Date = 12.02.2008 19:03:41 | Attr = ] pxwave.dll -> %SystemRoot%\System32\pxwave.dll -> Sonic Solutions [Ver = 3.6.36.500 | Size = 379640 bytes | Created Date = 12.02.2008 19:03:41 | Attr = ] quartz.vxd -> %SystemRoot%\System32\quartz.vxd -> [Ver = | Size = 5672 bytes | Created Date = 12.02.2008 19:41:11 | Attr = ] QuickTime.qts -> %SystemRoot%\System32\QuickTime.qts -> Apple Inc. [Ver = 7.4.1 | Size = 57344 bytes | Created Date = 31.01.2008 23:13:18 | Attr = ] QuickTimeVR.qtx -> %SystemRoot%\System32\QuickTimeVR.qtx -> Apple Inc. [Ver = 7.4.1 | Size = 90112 bytes | Created Date = 31.01.2008 23:13:18 | Attr = ] ras -> %SystemRoot%\System32\ras -> [Folder | Created Date = 12.02.2008 18:28:30 | Attr = ] ReinstallBackups -> %SystemRoot%\System32\ReinstallBackups -> [Folder | Created Date = 12.02.2008 19:54:47 | Attr = ] Restore -> %SystemRoot%\System32\Restore -> [Folder | Created Date = 12.02.2008 16:46:41 | Attr = ] sapi.cpl.manifest -> %SystemRoot%\System32\sapi.cpl.manifest -> [Ver = | Size = 749 bytes | Created Date = 12.02.2008 16:47:36 | Attr = RH ] Setup -> %SystemRoot%\System32\Setup -> [Folder | Created Date = 12.02.2008 18:28:30 | Attr = ] ShellExt -> %SystemRoot%\System32\ShellExt -> [Folder | Created Date = 12.02.2008 18:28:30 | Attr = ] shiftjis.uce -> %SystemRoot%\System32\shiftjis.uce -> [Ver = | Size = 16740 bytes | Created Date = 12.02.2008 16:45:20 | Attr = ] SoftwareDistribution -> %SystemRoot%\System32\SoftwareDistribution -> [Folder | Created Date = 12.02.2008 16:50:42 | Attr = ] spool -> %SystemRoot%\System32\spool -> [Folder | Created Date = 12.02.2008 18:28:30 | Attr = ] spxcoins.dll -> %SystemRoot%\System32\spxcoins.dll -> Perle Systems Ltd. [Ver = 1.0.0.0007 | Size = 24661 bytes | Created Date = 12.02.2008 18:33:23 | Attr = ] subrange.uce -> %SystemRoot%\System32\subrange.uce -> [Ver = | Size = 93702 bytes | Created Date = 12.02.2008 16:45:21 | Attr = ] tm20dec.ax -> %SystemRoot%\System32\tm20dec.ax -> The Duck Corporation [Ver = 2.98.3.16 | Size = 140800 bytes | Created Date = 12.02.2008 19:42:17 | Attr = ] tslabels.h -> %SystemRoot%\System32\tslabels.h -> [Ver = | Size = 3286 bytes | Created Date = 12.02.2008 16:45:18 | Attr = ] tslabels.ini -> %SystemRoot%\System32\tslabels.ini -> [Ver = | Size = 13223 bytes | Created Date = 12.02.2008 16:45:19 | Attr = ] UPX -> %SystemRoot%\System32\UPX -> [Folder | Created Date = 12.02.2008 18:28:30 | Attr = ] URTTEMP -> %SystemRoot%\System32\URTTEMP -> [Folder | Created Date = 12.02.2008 19:56:44 | Attr = ] usmt -> %SystemRoot%\System32\usmt -> [Folder | Created Date = 12.02.2008 18:28:30 | Attr = ] usrlogon.cmd -> %SystemRoot%\System32\usrlogon.cmd -> [Ver = | Size = 1161 bytes | Created Date = 12.02.2008 16:45:19 | Attr = ] vidx16.dll -> %SystemRoot%\System32\vidx16.dll -> [Ver = | Size = 10240 bytes | Created Date = 12.02.2008 19:41:11 | Attr = ] VM303Prp.Ax -> %SystemRoot%\System32\VM303Prp.Ax -> Vimicro [Ver = 3.5.1025. 9 | Size = 270421 bytes | Created Date = 17.02.2008 20:35:37 | Attr = R ] VM303STI.dll -> %SystemRoot%\System32\VM303STI.dll -> VM [Ver = 4.2.510.21 | Size = 81920 bytes | Created Date = 17.02.2008 20:35:37 | Attr = R ] vxblock.dll -> %SystemRoot%\System32\vxblock.dll -> Sonic Solutions [Ver = 1.00.74a | Size = 39672 bytes | Created Date = 12.02.2008 19:03:41 | Attr = ] wbem -> %SystemRoot%\System32\wbem -> [Folder | Created Date = 12.02.2008 18:28:30 | Attr = ] WindowsLogon.manifest -> %SystemRoot%\System32\WindowsLogon.manifest -> [Ver = | Size = 488 bytes | Created Date = 12.02.2008 16:47:43 | Attr = RH ] WINPY.MB -> %SystemRoot%\System32\WINPY.MB -> [Ver = | Size = 1783864 bytes | Created Date = 12.02.2008 18:38:44 | Attr = ] wins -> %SystemRoot%\System32\wins -> [Folder | Created Date = 12.02.2008 18:28:30 | Attr = ] WINSP.MB -> %SystemRoot%\System32\WINSP.MB -> [Ver = | Size = 1564868 bytes | Created Date = 12.02.2008 18:38:44 | Attr = ] WINZM.MB -> %SystemRoot%\System32\WINZM.MB -> [Ver = | Size = 1223500 bytes | Created Date = 12.02.2008 18:38:44 | Attr = ] wmimgmt.msc -> %SystemRoot%\System32\wmimgmt.msc -> [Ver = | Size = 63488 bytes | Created Date = 12.02.2008 16:45:13 | Attr = ] wuaucpl.cpl.manifest -> %SystemRoot%\System32\wuaucpl.cpl.manifest -> [Ver = | Size = 749 bytes | Created Date = 12.02.2008 16:47:36 | Attr = RH ] xjis.nls -> %SystemRoot%\System32\xjis.nls -> [Ver = | Size = 28288 bytes | Created Date = 12.02.2008 18:38:08 | Attr = ] $hf_mig$ -> %SystemRoot%\$hf_mig$ -> [Folder | Created Date = 15.02.2008 08:21:47 | Attr = H ] 3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> $NtServicePackUninstallIDNMitigationAPIs$ -> %SystemRoot%\$NtServicePackUninstallIDNMitigationAPIs$ -> [Folder | Created Date = 17.02.2008 10:34:26 | Attr = H ] $NtServicePackUninstallNLSDownlevelMapping$ -> %SystemRoot%\$NtServicePackUninstallNLSDownlevelMapping$ -> [Folder | Created Date = 17.02.2008 10:34:15 | Attr = H ] addins -> %SystemRoot%\addins -> [Folder | Created Date = 12.02.2008 18:28:30 | Attr = ] addonsql -> %SystemRoot%\addonsql -> [Folder | Created Date = 12.02.2008 18:28:30 | Attr = ] AppPatch -> %SystemRoot%\AppPatch -> [Folder | Created Date = 12.02.2008 18:28:30 | Attr = ] ARJ.PIF -> %SystemRoot%\ARJ.PIF -> [Ver = | Size = 545 bytes | Created Date = 12.02.2008 18:27:18 | Attr = ] assembly -> %SystemRoot%\assembly -> [Folder | Created Date = 12.02.2008 17:01:50 | Attr = R S] Blue Lace 16.bmp -> %SystemRoot%\Blue Lace 16.bmp -> [Ver = | Size = 1272 bytes | Created Date = 12.02.2008 16:45:21 | Attr = ] bootstat.dat -> %SystemRoot%\bootstat.dat -> [Ver = | Size = 2048 bytes | Created Date = 12.02.2008 16:51:04 | Attr = S] cmaudio.dat -> %SystemRoot%\cmaudio.dat -> [Ver = | Size = 20333 bytes | Created Date = 12.02.2008 19:39:58 | Attr = ] cmaudio.ini -> %SystemRoot%\cmaudio.ini -> [Ver = | Size = 18210 bytes | Created Date = 12.02.2008 19:39:58 | Attr = ] CMCDPLAY.INI -> %SystemRoot%\CMCDPLAY.INI -> [Ver = | Size = 26 bytes | Created Date = 12.02.2008 19:39:32 | Attr = ] cmijack.dat -> %SystemRoot%\cmijack.dat -> [Ver = | Size = 36924 bytes | Created Date = 12.02.2008 19:39:58 | Attr = ] cmijack.ini -> %SystemRoot%\cmijack.ini -> [Ver = | Size = 28238 bytes | Created Date = 12.02.2008 19:39:58 | Attr = ] CMISETUP.INI -> %SystemRoot%\CMISETUP.INI -> [Ver = | Size = 411 bytes | Created Date = 12.02.2008 19:39:35 | Attr = ] CMMIXER.INI -> %SystemRoot%\CMMIXER.INI -> [Ver = | Size = 101 bytes | Created Date = 12.02.2008 20:27:44 | Attr = ] cmuninst.dat -> %SystemRoot%\cmuninst.dat -> C-Media Electronics Inc. [Ver = 1, 0, 0, 7 | Size = 135168 bytes | Created Date = 12.02.2008 19:39:42 | Attr = ] cmuninst.exe -> %SystemRoot%\cmuninst.exe -> C-Media Electronics Inc. [Ver = 1, 0, 0, 7 | Size = 139264 bytes | Created Date = 12.02.2008 19:39:43 | Attr = ] Coffee Bean.bmp -> %SystemRoot%\Coffee Bean.bmp -> [Ver = | Size = 17062 bytes | Created Date = 12.02.2008 16:45:21 | Attr = ] Config -> %SystemRoot%\Config -> [Folder | Created Date = 12.02.2008 18:28:30 | Attr = ] Connection Wizard -> %SystemRoot%\Connection Wizard -> [Folder | Created Date = 12.02.2008 18:28:30 | Attr = ] control.ini -> %SystemRoot%\control.ini -> [Ver = | Size = 0 bytes | Created Date = 12.02.2008 16:48:47 | Attr = ] CSC -> %SystemRoot%\CSC -> [Folder | Created Date = 13.02.2008 12:17:29 | Attr = ] Cursors -> %SystemRoot%\Cursors -> [Folder | Created Date = 12.02.2008 18:28:30 | Attr = ] Debug -> %SystemRoot%\Debug -> [Folder | Created Date = 12.02.2008 18:28:30 | Attr = ] desktop.ini -> %SystemRoot%\desktop.ini -> [Ver = | Size = 2 bytes | Created Date = 12.02.2008 16:47:00 | Attr = ] Downloaded Installations -> %SystemRoot%\Downloaded Installations -> [Folder | Created Date = 20.02.2008 09:02:59 | Attr = ] Downloaded Program Files -> %SystemRoot%\Downloaded Program Files -> [Folder | Created Date = 12.02.2008 16:47:43 | Attr = S] Driver Cache -> %SystemRoot%\Driver Cache -> [Folder | Created Date = 12.02.2008 18:28:30 | Attr = ] ehome -> %SystemRoot%\ehome -> [Folder | Created Date = 12.02.2008 18:28:30 | Attr = ] ERDNT -> %SystemRoot%\ERDNT -> [Folder | Created Date = 21.03.2008 02:47:20 | Attr = ] FeatherTexture.bmp -> %SystemRoot%\FeatherTexture.bmp -> [Ver = | Size = 16730 bytes | Created Date = 12.02.2008 16:45:21 | Attr = ] Fonts -> %SystemRoot%\Fonts -> [Folder | Created Date = 12.02.2008 18:28:30 | Attr = R S] Gone Fishing.bmp -> %SystemRoot%\Gone Fishing.bmp -> [Ver = | Size = 17336 bytes | Created Date = 12.02.2008 16:45:21 | Attr = ] Greenstone.bmp -> %SystemRoot%\Greenstone.bmp -> [Ver = | Size = 26582 bytes | Created Date = 12.02.2008 16:45:21 | Attr = ] Help -> %SystemRoot%\Help -> [Folder | Created Date = 12.02.2008 18:28:30 | Attr = ] ie7 -> %SystemRoot%\ie7 -> [Folder | Created Date = 17.02.2008 10:34:37 | Attr = H ] ie7updates -> %SystemRoot%\ie7updates -> [Folder | Created Date = 17.02.2008 10:36:43 | Attr = ] ime -> %SystemRoot%\ime -> [Folder | Created Date = 12.02.2008 18:28:30 | Attr = ] imsins.BAK -> %SystemRoot%\imsins.BAK -> [Ver = | Size = 1374 bytes | Created Date = 12.02.2008 18:33:38 | Attr = ] inf -> %SystemRoot%\inf -> [Folder | Created Date = 12.02.2008 18:28:30 | Attr = H ] Installer -> %SystemRoot%\Installer -> [Folder | Created Date = 12.02.2008 18:33:36 | Attr = HS] Internet Logs -> %SystemRoot%\Internet Logs -> [Folder | Created Date = 12.02.2008 17:51:31 | Attr = ] IsUninst.exe -> %SystemRoot%\IsUninst.exe -> InstallShield Software Corporation [Ver = 5, 51, 138, 0 | Size = 306688 bytes | Created Date = 12.02.2008 19:40:16 | Attr = ] java -> %SystemRoot%\java -> [Folder | Created Date = 12.02.2008 18:28:30 | Attr = ] LHA.PIF -> %SystemRoot%\LHA.PIF -> [Ver = | Size = 545 bytes | Created Date = 12.02.2008 18:27:18 | Attr = ] Media -> %SystemRoot%\Media -> [Folder | Created Date = 12.02.2008 18:28:30 | Attr = ] Microsoft.NET -> %SystemRoot%\Microsoft.NET -> [Folder | Created Date = 12.02.2008 17:01:40 | Attr = ] Minidump -> %SystemRoot%\Minidump -> [Folder | Created Date = 13.03.2008 20:50:22 | Attr = ] mixer.exe -> %SystemRoot%\mixer.exe -> C-Media Electronic Inc. (www.cmedia.com.tw) [Ver = 1.55 | Size = 1581056 bytes | Created Date = 12.02.2008 19:39:49 | Attr = ] mixerdef.ini -> %SystemRoot%\mixerdef.ini -> [Ver = | Size = 4333 bytes | Created Date = 12.02.2008 19:41:01 | Attr = ] mozver.dat -> %SystemRoot%\mozver.dat -> [Ver = | Size = 5829 bytes | Created Date = 12.02.2008 16:49:08 | Attr = ] msagent -> %SystemRoot%\msagent -> [Folder | Created Date = 12.02.2008 18:28:30 | Attr = ] msapps -> %SystemRoot%\msapps -> [Folder | Created Date = 12.02.2008 18:28:30 | Attr = ] mui -> %SystemRoot%\mui -> [Folder | Created Date = 12.02.2008 18:28:30 | Attr = ] network diagnostic -> %SystemRoot%\network diagnostic -> [Folder | Created Date = 17.02.2008 10:33:22 | Attr = ] NOCLOSE.PIF -> %SystemRoot%\NOCLOSE.PIF -> [Ver = | Size = 545 bytes | Created Date = 12.02.2008 18:27:18 | Attr = ] nsreg.dat -> %SystemRoot%\nsreg.dat -> [Ver = | Size = 0 bytes | Created Date = 12.02.2008 17:48:17 | Attr = ] ODBC.INI -> %SystemRoot%\ODBC.INI -> [Ver = | Size = 376 bytes | Created Date = 15.02.2008 16:22:36 | Attr = ] ODBCINST.INI -> %SystemRoot%\ODBCINST.INI -> [Ver = | Size = 4161 bytes | Created Date = 12.02.2008 18:33:35 | Attr = ] Offline Web Pages -> %SystemRoot%\Offline Web Pages -> [Folder | Created Date = 12.02.2008 16:47:43 | Attr = R ] pchealth -> %SystemRoot%\pchealth -> [Folder | Created Date = 12.02.2008 18:28:30 | Attr = ] PeerNet -> %SystemRoot%\PeerNet -> [Folder | Created Date = 12.02.2008 18:28:30 | Attr = ] PIF -> %SystemRoot%\PIF -> [Folder | Created Date = 17.02.2008 23:02:02 | Attr = H ] PKUNZIP.PIF -> %SystemRoot%\PKUNZIP.PIF -> [Ver = | Size = 545 bytes | Created Date = 12.02.2008 18:27:18 | Attr = ] PKZIP.PIF -> %SystemRoot%\PKZIP.PIF -> [Ver = | Size = 545 bytes | Created Date = 12.02.2008 18:27:18 | Attr = ] Prairie Wind.bmp -> %SystemRoot%\Prairie Wind.bmp -> [Ver = | Size = 65954 bytes | Created Date = 12.02.2008 16:45:21 | Attr = ] Prefetch -> %SystemRoot%\Prefetch -> [Folder | Created Date = 12.02.2008 17:01:03 | Attr = ] Provisioning -> %SystemRoot%\Provisioning -> [Folder | Created Date = 12.02.2008 18:28:30 | Attr = ] pss -> %SystemRoot%\pss -> [Folder | Created Date = 15.02.2008 07:51:21 | Attr = ] QTFont.for -> %SystemRoot%\QTFont.for -> [Ver = | Size = 1409 bytes | Created Date = 08.03.2008 23:08:59 | Attr = ] QTFont.qfn -> %SystemRoot%\QTFont.qfn -> [Ver = | Size = 54156 bytes | Created Date = 08.03.2008 23:08:59 | Attr = H ] RAR.PIF -> %SystemRoot%\RAR.PIF -> [Ver = | Size = 545 bytes | Created Date = 12.02.2008 18:27:18 | Attr = ] Registration -> %SystemRoot%\Registration -> [Folder | Created Date = 12.02.2008 16:45:52 | Attr = ] REGLOCS.OLD -> %SystemRoot%\REGLOCS.OLD -> [Ver = | Size = 8192 bytes | Created Date = 12.02.2008 17:01:01 | Attr = ] repair -> %SystemRoot%\repair -> [Folder | Created Date = 12.02.2008 18:28:30 | Attr = ] Resources -> %SystemRoot%\Resources -> [Folder | Created Date = 12.02.2008 18:28:30 | Attr = ] Rhododendron.bmp -> %SystemRoot%\Rhododendron.bmp -> [Ver = | Size = 17362 bytes | Created Date = 12.02.2008 16:45:21 | Attr = ] River Sumida.bmp -> %SystemRoot%\River Sumida.bmp -> [Ver = | Size = 26680 bytes | Created Date = 12.02.2008 16:45:21 | Attr = ] Santa Fe Stucco.bmp -> %SystemRoot%\Santa Fe Stucco.bmp -> [Ver = | Size = 65832 bytes | Created Date = 12.02.2008 16:45:21 | Attr = ] security -> %SystemRoot%\security -> [Folder | Created Date = 12.02.2008 18:28:30 | Attr = ] SHELLNEW -> %SystemRoot%\SHELLNEW -> [Folder | Created Date = 15.02.2008 16:20:45 | Attr = ] Soap Bubbles.bmp -> %SystemRoot%\Soap Bubbles.bmp -> [Ver = | Size = 65978 bytes | Created Date = 12.02.2008 16:45:21 | Attr = ] SoftwareDistribution -> %SystemRoot%\SoftwareDistribution -> [Folder | Created Date = 12.02.2008 18:28:30 | Attr = ] Sun -> %SystemRoot%\Sun -> [Folder | Created Date = 13.02.2008 17:32:21 | Attr = ] system -> %SystemRoot%\system -> [Folder | Created Date = 12.02.2008 18:28:30 | Attr = ] system32 -> %SystemRoot%\system32 -> [Folder | Created Date = 12.02.2008 18:28:30 | Attr = ] Tasks -> %SystemRoot%\Tasks -> [Folder | Created Date = 12.02.2008 16:46:53 | Attr = S] Temp -> %SystemRoot%\Temp -> [Folder | Created Date = 12.02.2008 18:28:30 | Attr = ] twain_32 -> %SystemRoot%\twain_32 -> [Folder | Created Date = 12.02.2008 18:28:30 | Attr = ] UC.PIF -> %SystemRoot%\UC.PIF -> [Ver = | Size = 545 bytes | Created Date = 12.02.2008 18:27:18 | Attr = ] vb.ini -> %SystemRoot%\vb.ini -> [Ver = | Size = 36 bytes | Created Date = 12.02.2008 16:45:56 | Attr = ] vbaddin.ini -> %SystemRoot%\vbaddin.ini -> [Ver = | Size = 37 bytes | Created Date = 12.02.2008 16:45:56 | Attr = ] vm303.mid -> %SystemRoot%\vm303.mid -> [Ver = | Size = 3930 bytes | Created Date = 17.02.2008 20:02:43 | Attr = R ] VM303Cap.exe -> %SystemRoot%\VM303Cap.exe -> www.zsmc.com.cn [Ver = 4, 2, 627, 37 | Size = 102400 bytes | Created Date = 17.02.2008 20:35:39 | Attr = R ] VM303_STI.EXE -> %SystemRoot%\VM303_STI.EXE -> Vimicro [Ver = 3, 5, 930, 9 | Size = 61440 bytes | Created Date = 17.02.2008 20:35:38 | Attr = R ] WBEM -> %SystemRoot%\WBEM -> [Folder | Created Date = 17.02.2008 10:35:36 | Attr = ] wcx_ftp.ini -> %SystemRoot%\wcx_ftp.ini -> [Ver = | Size = 165 bytes | Created Date = 10.03.2008 16:06:42 | Attr = ] Web -> %SystemRoot%\Web -> [Folder | Created Date = 12.02.2008 18:28:30 | Attr = R ] wincmd.ini -> %SystemRoot%\wincmd.ini -> [Ver = | Size = 2731 bytes | Created Date = 12.02.2008 18:27:18 | Attr = ] WindowsShell.Manifest -> %SystemRoot%\WindowsShell.Manifest -> [Ver = | Size = 749 bytes | Created Date = 12.02.2008 16:47:36 | Attr = RH ] WININIT.INI -> %SystemRoot%\WININIT.INI -> [Ver = | Size = 10 bytes | Created Date = 12.02.2008 20:23:21 | Attr = ] winnt.bmp -> %SystemRoot%\winnt.bmp -> [Ver = | Size = 48680 bytes | Created Date = 12.02.2008 16:47:00 | Attr = HS] winnt256.bmp -> %SystemRoot%\winnt256.bmp -> [Ver = | Size = 48680 bytes | Created Date = 12.02.2008 16:47:00 | Attr = HS] WinSxS -> %SystemRoot%\WinSxS -> [Folder | Created Date = 12.02.2008 18:28:30 | Attr = ] WMSysPr9.prx -> %SystemRoot%\WMSysPr9.prx -> [Ver = | Size = 316640 bytes | Created Date = 12.02.2008 16:48:38 | Attr = ] Zapotec.bmp -> %SystemRoot%\Zapotec.bmp -> [Ver = | Size = 9522 bytes | Created Date = 12.02.2008 16:45:21 | Attr = ] AppleSoftwareUpdate.job -> %SystemRoot%\tasks\AppleSoftwareUpdate.job -> [Ver = | Size = 284 bytes | Created Date = 08.03.2008 23:07:43 | Attr = ] desktop.ini -> %SystemRoot%\tasks\desktop.ini -> [Ver = | Size = 65 bytes | Created Date = 12.02.2008 16:46:53 | Attr = RH ] SA.DAT -> %SystemRoot%\tasks\SA.DAT -> [Ver = | Size = 6 bytes | Created Date = 12.02.2008 17:01:03 | Attr = H ] [Files Created - Additional Folder Scans - Non-Microsoft Only] Adobe -> %AllUsersProfile%\Application Data\Adobe -> [Folder | Created Date = 12.02.2008 16:50:12 | Attr = ] Apple -> %AllUsersProfile%\Application Data\Apple -> [Folder | Created Date = 08.03.2008 23:07:02 | Attr = ] Apple Computer -> %AllUsersProfile%\Application Data\Apple Computer -> [Folder | Created Date = 08.03.2008 23:07:53 | Attr = ] desktop.ini -> %AllUsersProfile%\Application Data\desktop.ini -> [Ver = | Size = 62 bytes | Created Date = 12.02.2008 18:33:14 | Attr = HS] ESET -> %AllUsersProfile%\Application Data\ESET -> [Folder | Created Date = 16.02.2008 19:34:21 | Attr = ] ezsid.dat -> %AllUsersProfile%\Application Data\ezsid.dat -> [Ver = | Size = 32 bytes | Created Date = 19.02.2008 21:40:47 | Attr = ] Last.fm -> %AllUsersProfile%\Application Data\Last.fm -> [Folder | Created Date = 12.02.2008 20:00:27 | Attr = ] Microsoft -> %AllUsersProfile%\Application Data\Microsoft -> [Folder | Created Date = 12.02.2008 18:32:35 | Attr = S] Skype -> %AllUsersProfile%\Application Data\Skype -> [Folder | Created Date = 19.02.2008 21:39:06 | Attr = ] Sony Ericsson -> %AllUsersProfile%\Application Data\Sony Ericsson -> [Folder | Created Date = 20.02.2008 09:03:22 | Attr = ] Spybot - Search & Destroy -> %AllUsersProfile%\Application Data\Spybot - Search & Destroy -> [Folder | Created Date = 20.03.2008 17:17:38 | Attr = ] SUPERAntiSpyware.com -> %AllUsersProfile%\Application Data\SUPERAntiSpyware.com -> [Folder | Created Date = 20.03.2008 21:23:09 | Attr = ] Teleca -> %AllUsersProfile%\Application Data\Teleca -> [Folder | Created Date = 20.02.2008 09:03:02 | Attr = ] Yahoo! -> %AllUsersProfile%\Application Data\Yahoo! -> [Folder | Created Date = 12.02.2008 17:59:01 | Attr = ] Adobe -> %AppData%\Adobe -> [Folder | Created Date = 12.02.2008 17:43:23 | Attr = ] Apple Computer -> %AppData%\Apple Computer -> [Folder | Created Date = 10.03.2008 21:17:04 | Attr = ] ATI -> %AppData%\ATI -> [Folder | Created Date = 12.02.2008 20:19:08 | Attr = ] DAEMON Tools -> %AppData%\DAEMON Tools -> [Folder | Created Date = 19.02.2008 18:40:42 | Attr = ] desktop.ini -> %AppData%\desktop.ini -> [Ver = | Size = 62 bytes | Created Date = 12.02.2008 17:01:22 | Attr = HS] ESET -> %AppData%\ESET -> [Folder | Created Date = 16.02.2008 19:35:10 | Attr = ] Macromedia -> %AppData%\Macromedia -> [Folder | Created Date = 12.02.2008 17:35:31 | Attr = ] Microsoft -> %AppData%\Microsoft -> [Folder | Created Date = 12.02.2008 17:01:21 | Attr = S] Mozilla -> %AppData%\Mozilla -> [Folder | Created Date = 12.02.2008 17:01:21 | Attr = ] Real -> %AppData%\Real -> [Folder | Created Date = 12.02.2008 17:01:21 | Attr = ] Sony Ericsson -> %AppData%\Sony Ericsson -> [Folder | Created Date = 20.02.2008 09:05:23 | Attr = ] Sports Interactive -> %AppData%\Sports Interactive -> [Folder | Created Date = 16.02.2008 23:34:58 | Attr = ] Sun -> %AppData%\Sun -> [Folder | Created Date = 13.02.2008 17:32:21 | Attr = ] SUPERAntiSpyware.com -> %AppData%\SUPERAntiSpyware.com -> [Folder | Created Date = 20.03.2008 21:23:05 | Attr = ] Talkback -> %AppData%\Talkback -> [Folder | Created Date = 12.02.2008 17:48:23 | Attr = ] Teleca -> %AppData%\Teleca -> [Folder | Created Date = 20.02.2008 09:07:09 | Attr = ] uTorrent -> %AppData%\uTorrent -> [Folder | Created Date = 16.02.2008 23:18:39 | Attr = ] vlc -> %AppData%\vlc -> [Folder | Created Date = 19.02.2008 00:11:04 | Attr = ] Winamp -> %AppData%\Winamp -> [Folder | Created Date = 12.02.2008 19:03:38 | Attr = ] Adobe -> %UserProfile%\Local Settings\Application Data\Adobe -> [Folder | Created Date = 12.02.2008 17:43:24 | Attr = ] Apple Computer -> %UserProfile%\Local Settings\Application Data\Apple Computer -> [Folder | Created Date = 09.03.2008 01:21:57 | Attr = ] ApplicationHistory -> %UserProfile%\Local Settings\Application Data\ApplicationHistory -> [Folder | Created Date = 12.02.2008 20:19:07 | Attr = ] ATI -> %UserProfile%\Local Settings\Application Data\ATI -> [Folder | Created Date = 12.02.2008 20:19:08 | Attr = ] DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini -> %UserProfile%\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini -> [Ver = | Size = 30208 bytes | Created Date = 18.02.2008 15:53:23 | Attr = ] ESET -> %UserProfile%\Local Settings\Application Data\ESET -> [Folder | Created Date = 20.03.2008 14:41:51 | Attr = ] fusioncache.dat -> %UserProfile%\Local Settings\Application Data\fusioncache.dat -> [Ver = | Size = 136 bytes | Created Date = 12.02.2008 20:19:07 | Attr = ] GDIPFONTCACHEV1.DAT -> %UserProfile%\Local Settings\Application Data\GDIPFONTCACHEV1.DAT -> [Ver = | Size = 63680 bytes | Created Date = 12.02.2008 20:19:12 | Attr = ] GHISLER -> %UserProfile%\Local Settings\Application Data\GHISLER -> [Folder | Created Date = 12.02.2008 18:44:28 | Attr = ] IconCache.db -> %UserProfile%\Local Settings\Application Data\IconCache.db -> [Ver = | Size = 3781136 bytes | Created Date = 12.02.2008 17:06:23 | Attr = H ] Last.fm -> %UserProfile%\Local Settings\Application Data\Last.fm -> [Folder | Created Date = 12.02.2008 20:00:06 | Attr = ] Microsoft -> %UserProfile%\Local Settings\Application Data\Microsoft -> [Folder | Created Date = 12.02.2008 17:01:21 | Attr = ] Mozilla -> %UserProfile%\Local Settings\Application Data\Mozilla -> [Folder | Created Date = 12.02.2008 17:48:12 | Attr = ] Sony Ericsson -> %UserProfile%\Local Settings\Application Data\Sony Ericsson -> [Folder | Created Date = 20.02.2008 09:07:54 | Attr = ] desktop.ini -> %AllUsersProfile%\Documents\desktop.ini -> [Ver = | Size = 62 bytes | Created Date = 12.02.2008 18:33:14 | Attr = HS] My Music -> %AllUsersProfile%\Documents\My Music -> [Folder | Created Date = 12.02.2008 18:33:39 | Attr = R ] My Pictures -> %AllUsersProfile%\Documents\My Pictures -> [Folder | Created Date = 12.02.2008 16:46:29 | Attr = R ] My Videos -> %AllUsersProfile%\Documents\My Videos -> [Folder | Created Date = 22.02.2008 00:13:04 | Attr = R ] Sports Interactive -> %AllUsersProfile%\Documents\Sports Interactive -> [Folder | Created Date = 16.02.2008 23:34:58 | Attr = ] Downloads -> %UserProfile%\My Documents\Downloads -> [Folder | Created Date = 16.02.2008 23:20:25 | Attr = ] FIFA 08 -> %UserProfile%\My Documents\FIFA 08 -> [Folder | Created Date = 19.02.2008 19:24:32 | Attr = ] img013.jpg -> %UserProfile%\My Documents\img013.jpg -> [Ver = | Size = 154065 bytes | Created Date = 27.02.2008 09:22:31 | Attr = ] img014.jpg -> %UserProfile%\My Documents\img014.jpg -> [Ver = | Size = 143195 bytes | Created Date = 27.02.2008 09:22:33 | Attr = ] img015.jpg -> %UserProfile%\My Documents\img015.jpg -> [Ver = | Size = 97934 bytes | Created Date = 27.02.2008 09:22:36 | Attr = ] My Music -> %UserProfile%\My Documents\My Music -> [Folder | Created Date = 20.02.2008 09:08:41 | Attr = ] My Pictures -> %UserProfile%\My Documents\My Pictures -> [Folder | Created Date = 05.03.2008 23:35:51 | Attr = R ] My Videos -> %UserProfile%\My Documents\My Videos -> [Folder | Created Date = 10.03.2008 19:40:36 | Attr = R ] New Folder -> %UserProfile%\My Documents\New Folder -> [Folder | Created Date = 16.02.2008 14:05:55 | Attr = ] Sports Interactive -> %UserProfile%\My Documents\Sports Interactive -> [Folder | Created Date = 16.02.2008 23:33:50 | Attr = ] Adobe Reader 7.0.lnk -> %AllUsersProfile%\Desktop\Adobe Reader 7.0.lnk -> [Ver = | Size = 1740 bytes | Created Date = 12.02.2008 16:50:12 | Attr = ] CCleaner.lnk -> %AllUsersProfile%\Desktop\CCleaner.lnk -> [Ver = | Size = 706 bytes | Created Date = 12.02.2008 16:46:07 | Attr = ] Disc2Phone.lnk -> %AllUsersProfile%\Desktop\Disc2Phone.lnk -> [Ver = | Size = 1675 bytes | Created Date = 20.02.2008 09:08:22 | Attr = ] Football Manager 2008.lnk -> %AllUsersProfile%\Desktop\Football Manager 2008.lnk -> [Ver = | Size = 918 bytes | Created Date = 16.02.2008 23:18:03 | Attr = ] Mozilla Firefox.lnk -> %AllUsersProfile%\Desktop\Mozilla Firefox.lnk -> [Ver = | Size = 1602 bytes | Created Date = 12.02.2008 17:48:01 | Attr = ] QuickTime Player.lnk -> %AllUsersProfile%\Desktop\QuickTime Player.lnk -> [Ver = | Size = 1604 bytes | Created Date = 08.03.2008 23:08:07 | Attr = ] Samsung PC Studio Internet Access 1.0.lnk -> %AllUsersProfile%\Desktop\Samsung PC Studio Internet Access 1.0.lnk -> [Ver = | Size = 871 bytes | Created Date = 29.02.2008 22:16:49 | Attr = ] Samsung PC Studio PIM & File Manager 1.0.lnk -> %AllUsersProfile%\Desktop\Samsung PC Studio PIM & File Manager 1.0.lnk -> [Ver = | Size = 859 bytes | Created Date = 29.02.2008 22:16:17 | Attr = ] Skype.lnk -> %AllUsersProfile%\Desktop\Skype.lnk -> [Ver = | Size = 1872 bytes | Created Date = 19.02.2008 21:39:19 | Attr = ] Sony Ericsson PC Suite.lnk -> %AllUsersProfile%\Desktop\Sony Ericsson PC Suite.lnk -> [Ver = | Size = 2046 bytes | Created Date = 20.02.2008 09:03:26 | Attr = ] Winamp.lnk -> %AllUsersProfile%\Desktop\Winamp.lnk -> [Ver = | Size = 664 bytes | Created Date = 12.02.2008 19:03:57 | Attr = ] Yahoo! Mail.lnk -> %AllUsersProfile%\Desktop\Yahoo! Mail.lnk -> [Ver = | Size = 1535 bytes | Created Date = 20.03.2008 22:25:01 | Attr = ] Yahoo! Messenger.lnk -> %AllUsersProfile%\Desktop\Yahoo! Messenger.lnk -> [Ver = | Size = 812 bytes | Created Date = 20.03.2008 22:24:14 | Attr = ] 06-04-01 - XFM Radio.zip -> %UserProfile%\Desktop\06-04-01 - XFM Radio.zip -> [Ver = | Size = 5894597 bytes | Created Date = 20.03.2008 12:53:14 | Attr = ] 09-03-04 - 2 Meter Sessis, Holland.zip -> %UserProfile%\Desktop\09-03-04 - 2 Meter Sessis, Holland.zip -> [Ver = | Size = 25570695 bytes | Created Date = 20.03.2008 12:44:21 | Attr = ] 100sscam -> %UserProfile%\Desktop\100sscam -> [Folder | Created Date = 05.03.2008 23:38:57 | Attr = ] 100_Best_of_All_time___054_Kiss___I_Was_Made_For_Loving_You_1979.mp3 -> %UserProfile%\Desktop\100_Best_of_All_time___054_Kiss___I_Was_Made_For_Loving_You_1979.mp3 -> [Ver = | Size = 4341760 bytes | Created Date = 05.03.2008 14:52:31 | Attr = ] 25-Pink Floyd-Speak to MeBreathe.mp3 -> %UserProfile%\Desktop\25-Pink Floyd-Speak to MeBreathe.mp3 -> [Ver = | Size = 7376992 bytes | Created Date = 10.03.2008 21:22:33 | Attr = ] 26-Pink Floyd-Money.mp3 -> %UserProfile%\Desktop\26-Pink Floyd-Money.mp3 -> [Ver = | Size = 10097639 bytes | Created Date = 10.03.2008 21:22:34 | Attr = ] 27-Pink Floyd-Wish you Were Here.mp3 -> %UserProfile%\Desktop\27-Pink Floyd-Wish you Were Here.mp3 -> [Ver = | Size = 7143173 bytes | Created Date = 10.03.2008 21:22:35 | Attr = ] 28-Pink Floyd-Comfortably Numb.mp3 -> %UserProfile%\Desktop\28-Pink Floyd-Comfortably Numb.mp3 -> [Ver = | Size = 11769504 bytes | Created Date = 10.03.2008 21:22:36 | Attr = ] Adele - Chasing Pavements.mp3 -> %UserProfile%\Desktop\Adele - Chasing Pavements.mp3 -> [Ver = | Size = 5143044 bytes | Created Date = 17.03.2008 22:04:33 | Attr = ] afdbl -> %UserProfile%\Desktop\afdbl -> [Folder | Created Date = 08.03.2008 12:16:54 | Attr = ] Anna Nalick - Citadel.mp3 -> %UserProfile%\Desktop\Anna Nalick - Citadel.mp3 -> [Ver = | Size = 4588907 bytes | Created Date = 19.03.2008 20:11:26 | Attr = ] auspices.pdf -> %UserProfile%\Desktop\auspices.pdf -> [Ver = | Size = 171984 bytes | Created Date = 14.03.2008 11:57:40 | Attr = ] capcane_rationament.pdf -> %UserProfile%\Desktop\capcane_rationament.pdf -> [Ver = | Size = 542058 bytes | Created Date = 25.02.2008 18:18:29 | Attr = ] Categorizare.doc -> %UserProfile%\Desktop\Categorizare.doc -> [Ver = | Size = 162304 bytes | Created Date = 25.02.2008 18:18:42 | Attr = ] Conform listei centralizate a Directiei Generale de Evidenta Informatizata a Persoanei.doc -> %UserProfile%\Desktop\Conform listei centralizate a Directiei Generale de Evidenta Informatizata a Persoanei.doc -> [Ver = | Size = 20992 bytes | Created Date = 10.03.2008 17:32:05 | Attr = ] Dezv-prenat-II_07-08.doc -> %UserProfile%\Desktop\Dezv-prenat-II_07-08.doc -> [Ver = | Size = 323584 bytes | Created Date = 07.03.2008 09:11:38 | Attr = ] Dezv-prenat-I_07-08.doc -> %UserProfile%\Desktop\Dezv-prenat-I_07-08.doc -> [Ver = | Size = 1153024 bytes | Created Date = 07.03.2008 09:10:07 | Attr = ] djdeep-happiness.mp3 -> %UserProfile%\Desktop\djdeep-happiness.mp3 -> [Ver = | Size = 3566444 bytes | Created Date = 24.02.2008 12:22:35 | Attr = ] dss.exe -> %UserProfile%\Desktop\dss.exe -> [Ver = 3, 2, 8, 1 | Size = 686630 bytes | Created Date = 21.03.2008 02:40:23 | Attr = ] Dunarea batrana by SIDEXPLOZIA.AVI -> %UserProfile%\Desktop\Dunarea batrana by SIDEXPLOZIA.AVI -> [Ver = | Size = 50551652 bytes | Created Date = 10.03.2008 22:40:54 | Attr = ] Dunarea Batrana.mp3 -> %UserProfile%\Desktop\Dunarea Batrana.mp3 -> [Ver = | Size = 6264070 bytes | Created Date = 10.03.2008 19:53:08 | Attr = ] Dunarea_Noaptea.jpg -> %UserProfile%\Desktop\Dunarea_Noaptea.jpg -> [Ver = | Size = 324807 bytes | Created Date = 11.03.2008 10:44:20 | Attr = ] Elli_Kokkinou___Den_ginete.mp3 -> %UserProfile%\Desktop\Elli_Kokkinou___Den_ginete.mp3 -> [Ver = | Size = 6512747 bytes | Created Date = 13.02.2008 17:37:54 | Attr = ] Euristici.doc -> %UserProfile%\Desktop\Euristici.doc -> [Ver = | Size = 114176 bytes | Created Date = 25.02.2008 18:18:50 | Attr = ] Evaluarea.jpg -> %UserProfile%\Desktop\Evaluarea.jpg -> [Ver = | Size = 110566 bytes | Created Date = 26.02.2008 08:35:14 | Attr = ] faza de pe e-joy ro.pdf -> %UserProfile%\Desktop\faza de pe e-joy ro.pdf -> [Ver = | Size = 232791 bytes | Created Date = 12.03.2008 18:26:11 | Attr = ] Five_For_Fighting-Live-2007-KzT -> %UserProfile%\Desktop\Five_For_Fighting-Live-2007-KzT -> [Folder | Created Date = 18.02.2008 21:00:47 | Attr = ] fm2008_802_boxed-pc.exe -> %UserProfile%\Desktop\fm2008_802_boxed-pc.exe -> Sports Interactive Ltd [Ver = (c)Sports Interactive Ltd2007 | Size = 151071181 bytes | Created Date = 10.03.2008 22:47:21 | Attr = ] Forever-dancing-01-Carry-On.mp3 -> %UserProfile%\Desktop\Forever-dancing-01-Carry-On.mp3 -> [Ver = | Size = 6748585 bytes | Created Date = 17.02.2008 15:59:19 | Attr = ] Formarea impresiilor.doc -> %UserProfile%\Desktop\Formarea impresiilor.doc -> [Ver = | Size = 59904 bytes | Created Date = 25.02.2008 18:19:25 | Attr = ] funny-pictures-watching-sports-cat.jpg -> %UserProfile%\Desktop\funny-pictures-watching-sports-cat.jpg -> [Ver = | Size = 33070 bytes | Created Date = 10.03.2008 22:33:49 | Attr = ] HijackThis.lnk -> %UserProfile%\Desktop\HijackThis.lnk -> [Ver = | Size = 1734 bytes | Created Date = 20.03.2008 15:54:35 | Attr = ] HiJackThis_v2.exe -> %UserProfile%\Desktop\HiJackThis_v2.exe -> Trend Micro Inc. [Ver = 2.00 | Size = 1308216 bytes | Created Date = 20.03.2008 15:26:18 | Attr = ] HJTInstall.exe -> %UserProfile%\Desktop\HJTInstall.exe -> Trend Micro Inc. [Ver = 2.00.2 | Size = 812344 bytes | Created Date = 20.03.2008 15:50:56 | Attr = ] House.4x12.HDTV.Xvid.Mp3.Sub.Esp.[www.SuBTorrents.com] -> %UserProfile%\Desktop\House.4x12.HDTV.Xvid.Mp3.Sub.Esp.[www.SuBTorrents.com] -> [Folder | Created Date = 18.02.2008 01:40:14 | Attr = ] immoland -> %UserProfile%\Desktop\immoland -> [Folder | Created Date = 13.03.2008 16:31:47 | Attr = ] intalnire mz -> %UserProfile%\Desktop\intalnire mz -> [Folder | Created Date = 28.02.2008 21:30:41 | Attr = ] intre om si maimuta.pdf -> %UserProfile%\Desktop\intre om si maimuta.pdf -> [Ver = | Size = 1740635 bytes | Created Date = 20.03.2008 14:25:52 | Attr = ] Manics - Umbrella (rihanna cover).mp3 -> %UserProfile%\Desktop\Manics - Umbrella (rihanna cover).mp3 -> [Ver = | Size = 5152896 bytes | Created Date = 14.03.2008 12:55:32 | Attr = ] mlalfh -> %UserProfile%\Desktop\mlalfh -> [Folder | Created Date = 08.03.2008 11:34:03 | Attr = ] msgr8us.exe -> %UserProfile%\Desktop\msgr8us.exe -> Yahoo! Inc. [Ver = 2008.03.14.02 | Size = 446000 bytes | Created Date = 20.03.2008 22:23:03 | Attr = ] mzmanager.lnk -> %UserProfile%\Desktop\mzmanager.lnk -> [Ver = | Size = 567 bytes | Created Date = 29.02.2008 13:11:27 | Attr = ] ne-cesar.doc -> %UserProfile%\Desktop\ne-cesar.doc -> [Ver = | Size = 30208 bytes | Created Date = 21.02.2008 21:43:03 | Attr = ] New Folder -> %UserProfile%\Desktop\New Folder -> [Folder | Created Date = 01.03.2008 17:06:03 | Attr = ] NIGHTLOOSERS - Betivan Ratat.mp3 -> %UserProfile%\Desktop\NIGHTLOOSERS - Betivan Ratat.mp3 -> [Ver = | Size = 3311438 bytes | Created Date = 07.03.2008 14:36:43 | Attr = ] oDC.lnk -> %UserProfile%\Desktop\oDC.lnk -> [Ver = | Size = 468 bytes | Created Date = 16.02.2008 23:42:37 | Attr = ] OTScanIt -> %UserProfile%\Desktop\OTScanIt -> [Folder | Created Date = 21.03.2008 12:04:58 | Attr = ] OTScanIt.exe -> %UserProfile%\Desktop\OTScanIt.exe -> [Ver = | Size = 482640 bytes | Created Date = 21.03.2008 12:04:20 | Attr = ] p4.png -> %UserProfile%\Desktop\p4.png -> [Ver = | Size = 100129 bytes | Created Date = 01.03.2008 11:37:22 | Attr = ] Plan seminarii.jpg -> %UserProfile%\Desktop\Plan seminarii.jpg -> [Ver = | Size = 288605 bytes | Created Date = 26.02.2008 08:35:11 | Attr = ] poze -> %UserProfile%\Desktop\poze -> [Folder | Created Date = 12.02.2008 20:15:08 | Attr = ] poze gl -> %UserProfile%\Desktop\poze gl -> [Folder | Created Date = 06.03.2008 14:27:46 | Attr = ] primul-stejar-sadit-de.html -> %UserProfile%\Desktop\primul-stejar-sadit-de.html -> [Ver = | Size = 40144 bytes | Created Date = 10.03.2008 22:18:32 | Attr = ] primul-stejar-sadit-de_files -> %UserProfile%\Desktop\primul-stejar-sadit-de_files -> [Folder | Created Date = 10.03.2008 22:18:32 | Attr = ] Profiles -> %UserProfile%\Desktop\Profiles -> [Folder | Created Date = 20.03.2008 14:53:30 | Attr = ] Shema - Modelul continuumului în formarea impresiilor.doc -> %UserProfile%\Desktop\Shema - Modelul continuumului în formarea impresiilor.doc -> [Ver = | Size = 33792 bytes | Created Date = 25.02.2008 18:19:34 | Attr = ] Spybot - Search & Destroy.lnk -> %UserProfile%\Desktop\Spybot - Search & Destroy.lnk -> [Ver = | Size = 933 bytes | Created Date = 20.03.2008 17:17:48 | Attr = ] spybotsd152.exe -> %UserProfile%\Desktop\spybotsd152.exe -> Safer Networking Limited [Ver = 1.5.2 | Size = 9722720 bytes | Created Date = 20.03.2008 17:07:38 | Attr = ] SUPERAntiSpyware Free Edition.lnk -> %UserProfile%\Desktop\SUPERAntiSpyware Free Edition.lnk -> [Ver = | Size = 780 bytes | Created Date = 20.03.2008 21:23:05 | Attr = ] TEMA SEMINAR.doc -> %UserProfile%\Desktop\TEMA SEMINAR.doc -> [Ver = | Size = 29696 bytes | Created Date = 17.03.2008 17:18:59 | Attr = ] The Corrs - Time enough for tears.mp3 -> %UserProfile%\Desktop\The Corrs - Time enough for tears.mp3 -> [Ver = | Size = 7282688 bytes | Created Date = 06.03.2008 17:25:15 | Attr = ] Timbaland ft. Keri Hilson and Nicole Scherzinger - Scream.mp3 -> %UserProfile%\Desktop\Timbaland ft. Keri Hilson and Nicole Scherzinger - Scream.mp3 -> [Ver = | Size = 9381888 bytes | Created Date = 18.03.2008 13:07:47 | Attr = ] Total Commander.lnk -> %UserProfile%\Desktop\Total Commander.lnk -> [Ver = | Size = 548 bytes | Created Date = 12.02.2008 18:27:19 | Attr = ] Triple J Australia Acoustic Session 9-1-07.rar -> %UserProfile%\Desktop\Triple J Australia Acoustic Session 9-1-07.rar -> [Ver = | Size = 36696504 bytes | Created Date = 26.02.2008 14:52:08 | Attr = ] wordpress cel mai nou -> %UserProfile%\Desktop\wordpress cel mai nou -> [Folder | Created Date = 10.03.2008 19:41:55 | Attr = ] wordpress-2.3.3 -> %UserProfile%\Desktop\wordpress-2.3.3 -> [Folder | Created Date = 10.03.2008 16:52:29 | Attr = ] wordpress-2.3.3.zip -> %UserProfile%\Desktop\wordpress-2.3.3.zip -> [Ver = | Size = 1066640 bytes | Created Date = 10.03.2008 15:58:18 | Attr = ] wordpress.2007-01-04.xml -> %UserProfile%\Desktop\wordpress.2007-01-04.xml -> [Ver = | Size = 63585 bytes | Created Date = 10.03.2008 19:39:34 | Attr = ] wordpress.2007-01-05.xml -> %UserProfile%\Desktop\wordpress.2007-01-05.xml -> [Ver = | Size = 8599 bytes | Created Date = 10.03.2008 19:39:38 | Attr = ] wordpress.2007-01-06.xml -> %UserProfile%\Desktop\wordpress.2007-01-06.xml -> [Ver = | Size = 69523 bytes | Created Date = 10.03.2008 19:39:38 | Attr = ] wordpress.2007-04-13.xml -> %UserProfile%\Desktop\wordpress.2007-04-13.xml -> [Ver = | Size = 120652 bytes | Created Date = 10.03.2008 19:37:02 | Attr = ] wordpress.2007-05-19.xml -> %UserProfile%\Desktop\wordpress.2007-05-19.xml -> [Ver = | Size = 142078 bytes | Created Date = 10.03.2008 19:37:02 | Attr = ] wordpress.2008-01-08.xml -> %UserProfile%\Desktop\wordpress.2008-01-08.xml -> [Ver = | Size = 325990 bytes | Created Date = 10.03.2008 19:37:02 | Attr = ] _FLAC_EAC_CUE__Pink_Floyd___Pulse__Live___colombo_bt_org_.torrent -> %UserProfile%\Desktop\_FLAC_EAC_CUE__Pink_Floyd___Pulse__Live___colombo_bt_org_.torrent -> [Ver = | Size = 74892 bytes | Created Date = 18.03.2008 13:53:53 | Attr = ] µTorrent.lnk -> %UserProfile%\Desktop\µTorrent.lnk -> [Ver = | Size = 630 bytes | Created Date = 16.02.2008 23:18:43 | Attr = ] desktop.ini -> %AllUsersProfile%\Start Menu\Programs\Startup\desktop.ini -> [Ver = | Size = 84 bytes | Created Date = 12.02.2008 18:33:14 | Attr = HS] desktop.ini -> %UserProfile%\Start Menu\Programs\Startup\desktop.ini -> [Ver = | Size = 84 bytes | Created Date = 12.02.2008 17:01:21 | Attr = HS] Last.fm Helper.lnk -> %UserProfile%\Start Menu\Programs\Startup\Last.fm Helper.lnk -> [Ver = | Size = 655 bytes | Created Date = 12.02.2008 20:00:06 | Attr = ] Adobe -> %CommonProgramFiles%\Adobe -> [Folder | Created Date = 12.02.2008 16:50:12 | Attr = ] Apple -> %CommonProgramFiles%\Apple -> [Folder | Created Date = 08.03.2008 23:07:02 | Attr = ] DESIGNER -> %CommonProgramFiles%\DESIGNER -> [Folder | Created Date = 15.02.2008 16:20:56 | Attr = ] InstallShield -> %CommonProgramFiles%\InstallShield -> [Folder | Created Date = 12.02.2008 19:53:25 | Attr = ] Java -> %CommonProgramFiles%\Java -> [Folder | Created Date = 12.02.2008 16:49:22 | Attr = ] Microsoft Shared -> %CommonProgramFiles%\Microsoft Shared -> [Folder | Created Date = 12.02.2008 18:33:32 | Attr = ] MSSoap -> %CommonProgramFiles%\MSSoap -> [Folder | Created Date = 12.02.2008 16:46:53 | Attr = ] ODBC -> %CommonProgramFiles%\ODBC -> [Folder | Created Date = 12.02.2008 18:33:35 | Attr = ] Services -> %CommonProgramFiles%\Services -> [Folder | Created Date = 12.02.2008 16:46:54 | Attr = ] Skype -> %CommonProgramFiles%\Skype -> [Folder | Created Date = 19.02.2008 21:39:16 | Attr = ] Sony Ericsson Shared -> %CommonProgramFiles%\Sony Ericsson Shared -> [Folder | Created Date = 20.02.2008 09:03:08 | Attr = ] SpeechEngines -> %CommonProgramFiles%\SpeechEngines -> [Folder | Created Date = 12.02.2008 18:33:32 | Attr = ] System -> %CommonProgramFiles%\System -> [Folder | Created Date = 12.02.2008 16:46:36 | Attr = ] Teleca Shared -> %CommonProgramFiles%\Teleca Shared -> [Folder | Created Date = 20.02.2008 09:03:03 | Attr = ] Wise Installation Wizard -> %CommonProgramFiles%\Wise Installation Wizard -> [Folder | Created Date = 20.03.2008 21:22:55 | Attr = ] [Files/Folders - Modified Within 90 days] AUTOEXEC.BAT -> %SystemDrive%\AUTOEXEC.BAT -> [Ver = | Size = 0 bytes | Modified Date = 12.02.2008 16:48:47 | Attr = ] boot.ini -> %SystemDrive%\boot.ini -> [Ver = | Size = 211 bytes | Modified Date = 12.02.2008 16:41:08 | Attr = HS] CONFIG.SYS -> %SystemDrive%\CONFIG.SYS -> [Ver = | Size = 0 bytes | Modified Date = 12.02.2008 16:48:47 | Attr = ] creativitate -> %SystemDrive%\creativitate -> [Folder | Modified Date = 10.03.2008 21:42:05 | Attr = ] Deckard -> %SystemDrive%\Deckard -> [Folder | Modified Date = 21.03.2008 02:46:11 | Attr = ] Documents and Settings -> %SystemDrive%\Documents and Settings -> [Folder | Modified Date = 16.02.2008 11:14:40 | Attr = ] IO.SYS -> %SystemDrive%\IO.SYS -> [Ver = | Size = 0 bytes | Modified Date = 12.02.2008 16:48:47 | Attr = RHS] kav -> %SystemDrive%\kav -> [Folder | Modified Date = 12.02.2008 17:38:30 | Attr = ] MSDOS.SYS -> %SystemDrive%\MSDOS.SYS -> [Ver = | Size = 0 bytes | Modified Date = 12.02.2008 16:48:47 | Attr = RHS] MSOCache -> %SystemDrive%\MSOCache -> [Folder | Modified Date = 15.02.2008 16:17:27 | Attr = RH ] Program Files -> %ProgramFiles% -> [Folder | Modified Date = 20.03.2008 21:23:05 | Attr = ] RECYCLER -> %SystemDrive%\RECYCLER -> [Folder | Modified Date = 29.02.2008 22:21:21 | Attr = HS] System Volume Information -> %SystemDrive%\System Volume Information -> [Folder | Modified Date = 21.03.2008 02:47:15 | Attr = HS] totalcmd -> %SystemDrive%\totalcmd -> [Folder | Modified Date = 12.02.2008 18:27:23 | Attr = ] WINDOWS -> %SystemRoot% -> [Folder | Modified Date = 21.03.2008 02:51:38 | Attr = ] disdn -> %SystemRoot%\System32\drivers\disdn -> [Folder | Modified Date = 12.02.2008 18:28:30 | Attr = ] etc -> %SystemRoot%\System32\drivers\etc -> [Folder | Modified Date = 12.02.2008 18:29:38 | Attr = ] hosts -> %SystemRoot%\System32\drivers\etc\hosts -> [Ver = | Size = 228598 bytes | Modified Date = 20.03.2008 17:56:47 | Attr = R ] hosts.ics -> %SystemRoot%\System32\drivers\etc\hosts.ics -> [Ver = | Size = 499 bytes | Modified Date = 21.03.2008 11:22:04 | Attr = ] sptd.sys -> %SystemRoot%\System32\drivers\sptd.sys -> [Ver = | Size = 716272 bytes | Modified Date = 19.02.2008 18:40:43 | Attr = ] $winnt$.inf -> %SystemRoot%\System32\$winnt$.inf -> [Ver = | Size = 1020 bytes | Modified Date = 12.02.2008 16:51:09 | Attr = ] %DataFolder% -> %SystemRoot%\System32\%DataFolder% -> [Folder | Modified Date = 14.02.2008 15:38:34 | Attr = ] 1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> 1025 -> %SystemRoot%\System32\1025 -> [Folder | Modified Date = 12.02.2008 18:28:30 | Attr = ] 1028 -> %SystemRoot%\System32\1028 -> [Folder | Modified Date = 12.02.2008 18:28:30 | Attr = ] 1031 -> %SystemRoot%\System32\1031 -> [Folder | Modified Date = 12.02.2008 18:28:30 | Attr = ] 1033 -> %SystemRoot%\System32\1033 -> [Folder | Modified Date = 12.02.2008 18:32:16 | Attr = ] 1037 -> %SystemRoot%\System32\1037 -> [Folder | Modified Date = 12.02.2008 18:28:30 | Attr = ] 1041 -> %SystemRoot%\System32\1041 -> [Folder | Modified Date = 12.02.2008 18:28:30 | Attr = ] 1042 -> %SystemRoot%\System32\1042 -> [Folder | Modified Date = 12.02.2008 18:28:30 | Attr = ] 1054 -> %SystemRoot%\System32\1054 -> [Folder | Modified Date = 12.02.2008 18:28:30 | Attr = ] 2052 -> %SystemRoot%\System32\2052 -> [Folder | Modified Date = 12.02.2008 18:28:30 | Attr = ] 3076 -> %SystemRoot%\System32\3076 -> [Folder | Modified Date = 12.02.2008 18:28:30 | Attr = ] 3com_dmi -> %SystemRoot%\System32\3com_dmi -> [Folder | Modified Date = 12.02.2008 18:28:30 | Attr = ] amcompat.tlb -> %SystemRoot%\System32\amcompat.tlb -> [Ver = | Size = 16832 bytes | Modified Date = 12.02.2008 19:41:24 | Attr = ] appmgmt -> %SystemRoot%\System32\appmgmt -> [Folder | Modified Date = 12.02.2008 20:23:19 | Attr = ] CatRoot -> %SystemRoot%\System32\CatRoot -> [Folder | Modified Date = 15.02.2008 08:14:08 | Attr = ] CatRoot2 -> %SystemRoot%\System32\CatRoot2 -> [Folder | Modified Date = 21.03.2008 02:57:00 | Attr = ] cdplayer.exe.manifest -> %SystemRoot%\System32\cdplayer.exe.manifest -> [Ver = | Size = 749 bytes | Modified Date = 12.02.2008 16:47:36 | Attr = RH ] CMMGR32.EXE -> %SystemRoot%\System32\CMMGR32.EXE -> [Ver = | Size = 0 bytes | Modified Date = 20.03.2008 21:29:55 | Attr = ] Com -> %SystemRoot%\System32\Com -> [Folder | Modified Date = 12.02.2008 16:45:18 | Attr = ] config -> %SystemRoot%\System32\config -> [Folder | Modified Date = 17.02.2008 10:35:39 | Attr = ] CONFIG.NT -> %SystemRoot%\System32\CONFIG.NT -> [Ver = | Size = 2577 bytes | Modified Date = 12.02.2008 16:48:47 | Attr = ] dhcp -> %SystemRoot%\System32\dhcp -> [Folder | Modified Date = 12.02.2008 18:28:30 | Attr = ] DirectX -> %SystemRoot%\System32\DirectX -> [Folder | Modified Date = 12.02.2008 16:47:17 | Attr = ] dllcache -> %SystemRoot%\System32\dllcache -> [Folder | Modified Date = 19.02.2008 01:30:02 | Attr = RHS] drivers -> %SystemRoot%\System32\drivers -> [Folder | Modified Date = 08.03.2008 23:08:53 | Attr = ] DRVSTORE -> %SystemRoot%\System32\DRVSTORE -> [Folder | Modified Date = 08.03.2008 23:07:24 | Attr = ] emptyregdb.dat -> %SystemRoot%\System32\emptyregdb.dat -> [Ver = | Size = 21640 bytes | Modified Date = 12.02.2008 16:46:05 | Attr = ] en-US -> %SystemRoot%\System32\en-US -> [Folder | Modified Date = 17.02.2008 10:37:20 | Attr = ] export -> %SystemRoot%\System32\export -> [Folder | Modified Date = 12.02.2008 18:28:30 | Attr = ] FNTCACHE.DAT -> %SystemRoot%\System32\FNTCACHE.DAT -> [Ver = | Size = 263024 bytes | Modified Date = 17.02.2008 15:19:09 | Attr = ] ias -> %SystemRoot%\System32\ias -> [Folder | Modified Date = 12.02.2008 18:29:22 | Attr = ] icsxml -> %SystemRoot%\System32\icsxml -> [Folder | Modified Date = 12.02.2008 18:29:36 | Attr = ] IME -> %SystemRoot%\System32\IME -> [Folder | Modified Date = 12.02.2008 18:28:30 | Attr = ] inetsrv -> %SystemRoot%\System32\inetsrv -> [Folder | Modified Date = 12.02.2008 18:28:30 | Attr = ] LogFiles -> %SystemRoot%\System32\LogFiles -> [Folder | Modified Date = 14.02.2008 18:03:54 | Attr = ] logonui.exe.manifest -> %SystemRoot%\System32\logonui.exe.manifest -> [Ver = | Size = 488 bytes | Modified Date = 12.02.2008 16:47:43 | Attr = RH ] Macromed -> %SystemRoot%\System32\Macromed -> [Folder | Modified Date = 19.02.2008 19:15:02 | Attr = ] Microsoft -> %SystemRoot%\System32\Microsoft -> [Folder | Modified Date = 12.02.2008 17:01:02 | Attr = S] MsDtc -> %SystemRoot%\System32\MsDtc -> [Folder | Modified Date = 12.02.2008 16:45:51 | Attr = ] msssc.dll -> %SystemRoot%\System32\msssc.dll -> [Ver = | Size = 44 bytes | Modified Date = 12.02.2008 19:35:42 | Attr = ] mui -> %SystemRoot%\System32\mui -> [Folder | Modified Date = 12.02.2008 18:28:30 | Attr = ] ncpa.cpl.manifest -> %SystemRoot%\System32\ncpa.cpl.manifest -> [Ver = | Size = 749 bytes | Modified Date = 12.02.2008 16:47:36 | Attr = RH ] npp -> %SystemRoot%\System32\npp -> [Folder | Modified Date = 12.02.2008 18:31:04 | Attr = ] nscompat.tlb -> %SystemRoot%\System32\nscompat.tlb -> [Ver = | Size = 23392 bytes | Modified Date = 12.02.2008 19:41:24 | Attr = ] nwc.cpl.manifest -> %SystemRoot%\System32\nwc.cpl.manifest -> [Ver = | Size = 749 bytes | Modified Date = 12.02.2008 16:47:36 | Attr = RH ] oobe -> %SystemRoot%\System32\oobe -> [Folder | Modified Date = 12.02.2008 16:47:09 | Attr = ] OpenExpert -> %SystemRoot%\System32\OpenExpert -> [Folder | Modified Date = 12.02.2008 18:32:17 | Attr = ] perfc009.dat -> %SystemRoot%\System32\perfc009.dat -> [Ver = | Size = 61016 bytes | Modified Date = 15.02.2008 09:57:09 | Attr = ] perfh009.dat -> %SystemRoot%\System32\perfh009.dat -> [Ver = | Size = 398114 bytes | Modified Date = 15.02.2008 09:57:09 | Attr = ] PerfStringBackup.INI -> %SystemRoot%\System32\PerfStringBackup.INI -> [Ver = | Size = 466370 bytes | Modified Date = 15.02.2008 09:57:09 | Attr = ] PreInstall -> %SystemRoot%\System32\PreInstall -> [Folder | Modified Date = 12.02.2008 18:28:30 | Attr = ] QuickTime.qts -> %SystemRoot%\System32\QuickTime.qts -> Apple Inc. [Ver = 7.4.1 | Size = 57344 bytes | Modified Date = 31.01.2008 23:13:18 | Attr = ] QuickTimeVR.qtx -> %SystemRoot%\System32\QuickTimeVR.qtx -> Apple Inc. [Ver = 7.4.1 | Size = 90112 bytes | Modified Date = 31.01.2008 23:13:18 | Attr = ] ras -> %SystemRoot%\System32\ras -> [Folder | Modified Date = 12.02.2008 18:29:40 | Attr = ] ReinstallBackups -> %SystemRoot%\System32\ReinstallBackups -> [Folder | Modified Date = 12.02.2008 19:54:57 | Attr = ] Restore -> %SystemRoot%\System32\Restore -> [Folder | Modified Date = 12.02.2008 16:46:55 | Attr = ] sapi.cpl.manifest -> %SystemRoot%\System32\sapi.cpl.manifest -> [Ver = | Size = 749 bytes | Modified Date = 12.02.2008 16:47:36 | Attr = RH ] Setup -> %SystemRoot%\System32\Setup -> [Folder | Modified Date = 12.02.2008 18:31:17 | Attr = ] ShellExt -> %SystemRoot%\System32\ShellExt -> [Folder | Modified Date = 12.02.2008 18:32:17 | Attr = ] SoftwareDistribution -> %SystemRoot%\System32\SoftwareDistribution -> [Folder | Modified Date = 12.02.2008 16:50:42 | Attr = ] spool -> %SystemRoot%\System32\spool -> [Folder | Modified Date = 12.02.2008 16:41:30 | Attr = ] UPX -> %SystemRoot%\System32\UPX -> [Folder | Modified Date = 12.02.2008 18:30:03 | Attr = ] URTTEMP -> %SystemRoot%\System32\URTTEMP -> [Folder | Modified Date = 12.02.2008 19:56:44 | Attr = ] usmt -> %SystemRoot%\System32\usmt -> [Folder | Modified Date = 12.02.2008 18:32:17 | Attr = ] wbem -> %SystemRoot%\System32\wbem -> [Folder | Modified Date = 12.02.2008 16:46:18 | Attr = ] WindowsLogon.manifest -> %SystemRoot%\System32\WindowsLogon.manifest -> [Ver = | Size = 488 bytes | Modified Date = 12.02.2008 16:47:43 | Attr = RH ] wins -> %SystemRoot%\System32\wins -> [Folder | Modified Date = 12.02.2008 18:28:30 | Attr = ] wpa.dbl -> %SystemRoot%\System32\wpa.dbl -> [Ver = | Size = 2206 bytes | Modified Date = 16.03.2008 11:35:07 | Attr = ] wuaucpl.cpl.manifest -> %SystemRoot%\System32\wuaucpl.cpl.manifest -> [Ver = | Size = 749 bytes | Modified Date = 12.02.2008 16:47:36 | Attr = RH ] $hf_mig$ -> %SystemRoot%\$hf_mig$ -> [Folder | Modified Date = 18.02.2008 11:04:02 | Attr = H ] 3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> $NtServicePackUninstallIDNMitigationAPIs$ -> %SystemRoot%\$NtServicePackUninstallIDNMitigationAPIs$ -> [Folder | Modified Date = 17.02.2008 10:34:26 | Attr = H ] $NtServicePackUninstallNLSDownlevelMapping$ -> %SystemRoot%\$NtServicePackUninstallNLSDownlevelMapping$ -> [Folder | Modified Date = 17.02.2008 10:34:15 | Attr = H ] addins -> %SystemRoot%\addins -> [Folder | Modified Date = 12.02.2008 18:28:30 | Attr = ] addonsql -> %SystemRoot%\addonsql -> [Folder | Modified Date = 12.02.2008 18:32:17 | Attr = ] AppPatch -> %SystemRoot%\AppPatch -> [Folder | Modified Date = 12.02.2008 18:31:22 | Attr = ] assembly -> %SystemRoot%\assembly -> [Folder | Modified Date = 12.02.2008 19:57:00 | Attr = R S] bootstat.dat -> %SystemRoot%\bootstat.dat -> [Ver = | Size = 2048 bytes | Modified Date = 21.03.2008 11:21:43 | Attr = S] CMCDPLAY.INI -> %SystemRoot%\CMCDPLAY.INI -> [Ver = | Size = 26 bytes | Modified Date = 12.02.2008 19:49:22 | Attr = ] CMISETUP.INI -> %SystemRoot%\CMISETUP.INI -> [Ver = | Size = 411 bytes | Modified Date = 12.02.2008 19:49:23 | Attr = ] CMMIXER.INI -> %SystemRoot%\CMMIXER.INI -> [Ver = | Size = 101 bytes | Modified Date = 12.02.2008 20:27:44 | Attr = ] Config -> %SystemRoot%\Config -> [Folder | Modified Date = 12.02.2008 18:28:30 | Attr = ] Connection Wizard -> %SystemRoot%\Connection Wizard -> [Folder | Modified Date = 12.02.2008 18:28:30 | Attr = ] control.ini -> %SystemRoot%\control.ini -> [Ver = | Size = 0 bytes | Modified Date = 12.02.2008 16:48:47 | Attr = ] CSC -> %SystemRoot%\CSC -> [Folder | Modified Date = 13.02.2008 12:17:29 | Attr = ] Cursors -> %SystemRoot%\Cursors -> [Folder | Modified Date = 12.02.2008 16:45:24 | Attr = ] Debug -> %SystemRoot%\Debug -> [Folder | Modified Date = 17.02.2008 10:24:18 | Attr = ] Downloaded Installations -> %SystemRoot%\Downloaded Installations -> [Folder | Modified Date = 20.02.2008 09:02:59 | Attr = ] Downloaded Program Files -> %SystemRoot%\Downloaded Program Files -> [Folder | Modified Date = 17.02.2008 20:02:42 | Attr = S] Driver Cache -> %SystemRoot%\Driver Cache -> [Folder | Modified Date = 12.02.2008 18:28:30 | Attr = ] ehome -> %SystemRoot%\ehome -> [Folder | Modified Date = 12.02.2008 18:31:17 | Attr = ] ERDNT -> %SystemRoot%\ERDNT -> [Folder | Modified Date = 21.03.2008 02:47:20 | Attr = ] Fonts -> %SystemRoot%\Fonts -> [Folder | Modified Date = 29.02.2008 22:16:50 | Attr = R S] Help -> %SystemRoot%\Help -> [Folder | Modified Date = 17.02.2008 15:19:08 | Attr = ] ie7 -> %SystemRoot%\ie7 -> [Folder | Modified Date = 17.02.2008 10:35:20 | Attr = H ] ie7updates -> %SystemRoot%\ie7updates -> [Folder | Modified Date = 17.02.2008 10:39:23 | Attr = ] ime -> %SystemRoot%\ime -> [Folder | Modified Date = 12.02.2008 18:39:10 | Attr = ] imsins.BAK -> %SystemRoot%\imsins.BAK -> [Ver = | Size = 1374 bytes | Modified Date = 17.02.2008 10:40:43 | Attr = ] inf -> %SystemRoot%\inf -> [Folder | Modified Date = 10.03.2008 15:04:39 | Attr = H ] Installer -> %SystemRoot%\Installer -> [Folder | Modified Date = 20.03.2008 21:23:07 | Attr = HS] Internet Logs -> %SystemRoot%\Internet Logs -> [Folder | Modified Date = 15.02.2008 07:55:38 | Attr = ] java -> %SystemRoot%\java -> [Folder | Modified Date = 12.02.2008 18:28:30 | Attr = ] Media -> %SystemRoot%\Media -> [Folder | Modified Date = 17.02.2008 10:35:29 | Attr = ] Microsoft.NET -> %SystemRoot%\Microsoft.NET -> [Folder | Modified Date = 12.02.2008 18:20:42 | Attr = ] Minidump -> %SystemRoot%\Minidump -> [Folder | Modified Date = 13.03.2008 20:50:22 | Attr = ] mixerdef.ini -> %SystemRoot%\mixerdef.ini -> [Ver = | Size = 4333 bytes | Modified Date = 12.02.2008 19:45:06 | Attr = ] mozver.dat -> %SystemRoot%\mozver.dat -> [Ver = | Size = 5829 bytes | Modified Date = 12.02.2008 17:51:17 | Attr = ] msagent -> %SystemRoot%\msagent -> [Folder | Modified Date = 15.02.2008 09:55:35 | Attr = ] msapps -> %SystemRoot%\msapps -> [Folder | Modified Date = 17.02.2008 13:01:51 | Attr = ] mui -> %SystemRoot%\mui -> [Folder | Modified Date = 12.02.2008 18:31:17 | Attr = ] network diagnostic -> %SystemRoot%\network diagnostic -> [Folder | Modified Date = 17.02.2008 10:33:22 | Attr = ] nsreg.dat -> %SystemRoot%\nsreg.dat -> [Ver = | Size = 0 bytes | Modified Date = 12.02.2008 17:48:17 | Attr = ] ODBC.INI -> %SystemRoot%\ODBC.INI -> [Ver = | Size = 376 bytes | Modified Date = 20.02.2008 17:29:35 | Attr = ] ODBCINST.INI -> %SystemRoot%\ODBCINST.INI -> [Ver = | Size = 4161 bytes | Modified Date = 12.02.2008 16:48:33 | Attr = ] Offline Web Pages -> %SystemRoot%\Offline Web Pages -> [Folder | Modified Date = 12.02.2008 16:47:43 | Attr = R ] pchealth -> %SystemRoot%\pchealth -> [Folder | Modified Date = 12.02.2008 17:01:40 | Attr = ] PeerNet -> %SystemRoot%\PeerNet -> [Folder | Modified Date = 12.02.2008 18:31:11 | Attr = ] PIF -> %SystemRoot%\PIF -> [Folder | Modified Date = 17.02.2008 23:02:02 | Attr = H ] Prefetch -> %SystemRoot%\Prefetch -> [Folder | Modified Date = 21.03.2008 12:06:07 | Attr = ] Provisioning -> %SystemRoot%\Provisioning -> [Folder | Modified Date = 12.02.2008 18:28:30 | Attr = ] pss -> %SystemRoot%\pss -> [Folder | Modified Date = 15.02.2008 07:51:21 | Attr = ] QTFont.for -> %SystemRoot%\QTFont.for -> [Ver = | Size = 1409 bytes | Modified Date = 08.03.2008 23:09:15 | Attr = ] QTFont.qfn -> %SystemRoot%\QTFont.qfn -> [Ver = | Size = 54156 bytes | Modified Date = 20.03.2008 23:43:15 | Attr = H ] Registration -> %SystemRoot%\Registration -> [Folder | Modified Date = 15.02.2008 08:39:42 | Attr = ] REGLOCS.OLD -> %SystemRoot%\REGLOCS.OLD -> [Ver = | Size = 8192 bytes | Modified Date = 12.02.2008 17:01:01 | Attr = ] repair -> %SystemRoot%\repair -> [Folder | Modified Date = 12.02.2008 18:28:30 | Attr = ] Resources -> %SystemRoot%\Resources -> [Folder | Modified Date = 12.02.2008 18:28:30 | Attr = ] security -> %SystemRoot%\security -> [Folder | Modified Date = 12.02.2008 17:06:27 | Attr = ] SHELLNEW -> %SystemRoot%\SHELLNEW -> [Folder | Modified Date = 15.02.2008 16:21:33 | Attr = ] SoftwareDistribution -> %SystemRoot%\SoftwareDistribution -> [Folder | Modified Date = 15.02.2008 08:14:57 | Attr = ] Sun -> %SystemRoot%\Sun -> [Folder | Modified Date = 13.02.2008 17:32:21 | Attr = ] system -> %SystemRoot%\system -> [Folder | Modified Date = 15.02.2008 16:17:46 | Attr = ] system.ini -> %SystemRoot%\system.ini -> [Ver = | Size = 231 bytes | Modified Date = 12.02.2008 18:33:31 | Attr = ] system32 -> %SystemRoot%\system32 -> [Folder | Modified Date = 20.03.2008 22:24:04 | Attr = ] Tasks -> %SystemRoot%\Tasks -> [Folder | Modified Date = 08.03.2008 23:07:43 | Attr = S] Temp -> %SystemRoot%\Temp -> [Folder | Modified Date = 21.03.2008 12:07:09 | Attr = ] twain_32 -> %SystemRoot%\twain_32 -> [Folder | Modified Date = 17.02.2008 20:35:40 | Attr = ] vb.ini -> %SystemRoot%\vb.ini -> [Ver = | Size = 36 bytes | Modified Date = 12.02.2008 16:45:56 | Attr = ] vbaddin.ini -> %SystemRoot%\vbaddin.ini -> [Ver = | Size = 37 bytes | Modified Date = 12.02.2008 16:45:56 | Attr = ] WBEM -> %SystemRoot%\WBEM -> [Folder | Modified Date = 17.02.2008 10:35:36 | Attr = ] wcx_ftp.ini -> %SystemRoot%\wcx_ftp.ini -> [Ver = | Size = 165 bytes | Modified Date = 10.03.2008 19:42:01 | Attr = ] Web -> %SystemRoot%\Web -> [Folder | Modified Date = 12.02.2008 19:55:31 | Attr = R ] win.ini -> %SystemRoot%\win.ini -> [Ver = | Size = 662 bytes | Modified Date = 17.02.2008 20:31:27 | Attr = ] wincmd.ini -> %SystemRoot%\wincmd.ini -> [Ver = | Size = 2731 bytes | Modified Date = 10.03.2008 21:42:26 | Attr = ] WindowsShell.Manifest -> %SystemRoot%\WindowsShell.Manifest -> [Ver = | Size = 749 bytes | Modified Date = 12.02.2008 16:47:36 | Attr = RH ] WININIT.INI -> %SystemRoot%\WININIT.INI -> [Ver = | Size = 10 bytes | Modified Date = 12.02.2008 20:23:26 | Attr = ] WinSxS -> %SystemRoot%\WinSxS -> [Folder | Modified Date = 08.03.2008 23:07:02 | Attr = ] WMSysPr9.prx -> %SystemRoot%\WMSysPr9.prx -> [Ver = | Size = 316640 bytes | Modified Date = 12.02.2008 16:48:39 | Attr = ] AppleSoftwareUpdate.job -> %SystemRoot%\tasks\AppleSoftwareUpdate.job -> [Ver = | Size = 284 bytes | Modified Date = 19.03.2008 10:26:01 | Attr = ] SA.DAT -> %SystemRoot%\tasks\SA.DAT -> [Ver = | Size = 6 bytes | Modified Date = 21.03.2008 11:21:48 | Attr = H ] qmgr0.dat -> C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat -> [Ver = | Size = 6632 bytes | Modified Date = 21.03.2008 11:22:53 | Attr = ] qmgr1.dat -> C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat -> [Ver = | Size = 6632 bytes | Modified Date = 21.03.2008 11:22:53 | Attr = ] opa11.dat -> C:\Documents and Settings\All Users\Application Data\Microsoft\OFFICE\DATA\opa11.dat -> [Ver = | Size = 8206 bytes | Modified Date = 15.02.2008 16:23:02 | Attr = ] SSUPDATE.EXE -> C:\Documents and Settings\Administrator\Local Settings\Temp\SSUPDATE.EXE -> SUPERAntiSpyware.com [Ver = 1, 0, 0, 1030 | Size = 143360 bytes | Modified Date = 17.02.2006 15:55:46 | Attr = ] 2 C:\Documents and Settings\Administrator\Local Settings\Temp\*.tmp files -> C:\Documents and Settings\Administrator\Local Settings\Temp\*.tmp -> md5deep.exe -> C:\Documents and Settings\Administrator\Local Settings\Temp\~ctqotmd.tmp\md5deep.exe -> [Ver = | Size = 21504 bytes | Modified Date = 30.07.2007 04:23:07 | Attr = ] sed.exe -> C:\Documents and Settings\Administrator\Local Settings\Temp\~ctqotmd.tmp\sed.exe -> [Ver = | Size = 37376 bytes | Modified Date = 30.07.2007 04:23:07 | Attr = ] swreg.exe -> C:\Documents and Settings\Administrator\Local Settings\Temp\~ctqotmd.tmp\swreg.exe -> SteelWerX [Ver = 2.0.2.0 | Size = 119296 bytes | Modified Date = 30.07.2007 04:23:07 | Attr = ] dss.dll -> C:\Documents and Settings\Administrator\Local Settings\Temp\~ctqotmd.tmp\dss.dll -> [Ver = | Size = 37888 bytes | Modified Date = 14.10.2007 08:42:28 | Attr = ] [Files Modified - Additional Folder Scans - Non-Microsoft Only] Adobe -> %AllUsersProfile%\Application Data\Adobe -> [Folder | Modified Date = 12.02.2008 16:50:12 | Attr = ] Apple -> %AllUsersProfile%\Application Data\Apple -> [Folder | Modified Date = 08.03.2008 23:07:02 | Attr = ] Apple Computer -> %AllUsersProfile%\Application Data\Apple Computer -> [Folder | Modified Date = 08.03.2008 23:08:33 | Attr = ] desktop.ini -> %AllUsersProfile%\Application Data\desktop.ini -> [Ver = | Size = 62 bytes | Modified Date = 12.02.2008 18:33:14 | Attr = HS] ESET -> %AllUsersProfile%\Application Data\ESET -> [Folder | Modified Date = 16.02.2008 19:34:21 | Attr = ] ezsid.dat -> %AllUsersProfile%\Application Data\ezsid.dat -> [Ver = | Size = 32 bytes | Modified Date = 19.02.2008 21:40:47 | Attr = ] Last.fm -> %AllUsersProfile%\Application Data\Last.fm -> [Folder | Modified Date = 12.02.2008 20:00:27 | Attr = ] Microsoft -> %AllUsersProfile%\Application Data\Microsoft -> [Folder | Modified Date = 15.02.2008 16:20:41 | Attr = S] Skype -> %AllUsersProfile%\Application Data\Skype -> [Folder | Modified Date = 19.02.2008 21:39:18 | Attr = ] Sony Ericsson -> %AllUsersProfile%\Application Data\Sony Ericsson -> [Folder | Modified Date = 20.02.2008 09:03:22 | Attr = ] Spybot - Search & Destroy -> %AllUsersProfile%\Application Data\Spybot - Search & Destroy -> [Folder | Modified Date = 20.03.2008 17:18:00 | Attr = ] SUPERAntiSpyware.com -> %AllUsersProfile%\Application Data\SUPERAntiSpyware.com -> [Folder | Modified Date = 20.03.2008 21:23:09 | Attr = ] Teleca -> %AllUsersProfile%\Application Data\Teleca -> [Folder | Modified Date = 20.02.2008 09:03:26 | Attr = ] Yahoo! -> %AllUsersProfile%\Application Data\Yahoo! -> [Folder | Modified Date = 20.03.2008 22:25:00 | Attr = ] Adobe -> %AppData%\Adobe -> [Folder | Modified Date = 12.02.2008 17:51:21 | Attr = ] Apple Computer -> %AppData%\Apple Computer -> [Folder | Modified Date = 20.03.2008 18:28:51 | Attr = ] ATI -> %AppData%\ATI -> [Folder | Modified Date = 12.02.2008 20:19:08 | Attr = ] DAEMON Tools -> %AppData%\DAEMON Tools -> [Folder | Modified Date = 19.02.2008 18:40:42 | Attr = ] desktop.ini -> %AppData%\desktop.ini -> [Ver = | Size = 62 bytes | Modified Date = 12.02.2008 18:33:14 | Attr = HS] ESET -> %AppData%\ESET -> [Folder | Modified Date = 16.02.2008 19:35:10 | Attr = ] Macromedia -> %AppData%\Macromedia -> [Folder | Modified Date = 12.02.2008 17:35:31 | Attr = ] Microsoft -> %AppData%\Microsoft -> [Folder | Modified Date = 20.03.2008 21:23:07 | Attr = S] Mozilla -> %AppData%\Mozilla -> [Folder | Modified Date = 12.02.2008 17:48:12 | Attr = ] Real -> %AppData%\Real -> [Folder | Modified Date = 12.02.2008 16:50:30 | Attr = ] Sony Ericsson -> %AppData%\Sony Ericsson -> [Folder | Modified Date = 20.02.2008 09:05:23 | Attr = ] Sports Interactive -> %AppData%\Sports Interactive -> [Folder | Modified Date = 10.03.2008 22:37:45 | Attr = ] Sun -> %AppData%\Sun -> [Folder | Modified Date = 13.02.2008 17:32:21 | Attr = ] SUPERAntiSpyware.com -> %AppData%\SUPERAntiSpyware.com -> [Folder | Modified Date = 20.03.2008 21:23:05 | Attr = ] Talkback -> %AppData%\Talkback -> [Folder | Modified Date = 12.02.2008 17:48:23 | Attr = ] Teleca -> %AppData%\Teleca -> [Folder | Modified Date = 20.02.2008 09:07:09 | Attr = ] uTorrent -> %AppData%\uTorrent -> [Folder | Modified Date = 18.02.2008 22:33:57 | Attr = ] vlc -> %AppData%\vlc -> [Folder | Modified Date = 19.02.2008 00:11:04 | Attr = ] Winamp -> %AppData%\Winamp -> [Folder | Modified Date = 12.02.2008 20:58:37 | Attr = ] Adobe -> %UserProfile%\Local Settings\Application Data\Adobe -> [Folder | Modified Date = 13.02.2008 13:07:56 | Attr = ] Apple Computer -> %UserProfile%\Local Settings\Application Data\Apple Computer -> [Folder | Modified Date = 20.03.2008 18:28:51 | Attr = ] ApplicationHistory -> %UserProfile%\Local Settings\Application Data\ApplicationHistory -> [Folder | Modified Date = 08.03.2008 22:23:27 | Attr = ] ATI -> %UserProfile%\Local Settings\Application Data\ATI -> [Folder | Modified Date = 12.02.2008 20:19:08 | Attr = ] DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini -> %UserProfile%\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini -> [Ver = | Size = 30208 bytes | Modified Date = 21.03.2008 12:02:55 | Attr = ] ESET -> %UserProfile%\Local Settings\Application Data\ESET -> [Folder | Modified Date = 20.03.2008 14:41:51 | Attr = ] fusioncache.dat -> %UserProfile%\Local Settings\Application Data\fusioncache.dat -> [Ver = | Size = 136 bytes | Modified Date = 12.02.2008 20:19:07 | Attr = ] GDIPFONTCACHEV1.DAT -> %UserProfile%\Local Settings\Application Data\GDIPFONTCACHEV1.DAT -> [Ver = | Size = 63680 bytes | Modified Date = 20.02.2008 09:08:41 | Attr = ] GHISLER -> %UserProfile%\Local Settings\Application Data\GHISLER -> [Folder | Modified Date = 12.02.2008 18:44:28 | Attr = ] IconCache.db -> %UserProfile%\Local Settings\Application Data\IconCache.db -> [Ver = | Size = 3781136 bytes | Modified Date = 21.03.2008 03:25:20 | Attr = H ] Last.fm -> %UserProfile%\Local Settings\Application Data\Last.fm -> [Folder | Modified Date = 20.03.2008 12:54:10 | Attr = ] Microsoft -> %UserProfile%\Local Settings\Application Data\Microsoft -> [Folder | Modified Date = 10.03.2008 22:30:59 | Attr = ] Mozilla -> %UserProfile%\Local Settings\Application Data\Mozilla -> [Folder | Modified Date = 12.02.2008 17:48:12 | Attr = ] Sony Ericsson -> %UserProfile%\Local Settings\Application Data\Sony Ericsson -> [Folder | Modified Date = 20.02.2008 09:07:54 | Attr = ] desktop.ini -> %AllUsersProfile%\Documents\desktop.ini -> [Ver = | Size = 62 bytes | Modified Date = 12.02.2008 18:33:14 | Attr = HS] My Music -> %AllUsersProfile%\Documents\My Music -> [Folder | Modified Date = 12.02.2008 16:48:40 | Attr = R ] My Pictures -> %AllUsersProfile%\Documents\My Pictures -> [Folder | Modified Date = 12.02.2008 16:47:00 | Attr = R ] My Videos -> %AllUsersProfile%\Documents\My Videos -> [Folder | Modified Date = 22.02.2008 00:13:04 | Attr = R ] Sports Interactive -> %AllUsersProfile%\Documents\Sports Interactive -> [Folder | Modified Date = 10.03.2008 22:37:45 | Attr = ] Downloads -> %UserProfile%\My Documents\Downloads -> [Folder | Modified Date = 16.02.2008 23:20:25 | Attr = ] FIFA 08 -> %UserProfile%\My Documents\FIFA 08 -> [Folder | Modified Date = 20.02.2008 20:13:07 | Attr = ] img013.jpg -> %UserProfile%\My Documents\img013.jpg -> [Ver = | Size = 154065 bytes | Modified Date = 27.02.2008 09:22:33 | Attr = ] img014.jpg -> %UserProfile%\My Documents\img014.jpg -> [Ver = | Size = 143195 bytes | Modified Date = 27.02.2008 09:22:35 | Attr = ] img015.jpg -> %UserProfile%\My Documents\img015.jpg -> [Ver = | Size = 97934 bytes | Modified Date = 27.02.2008 09:22:37 | Attr = ] My Music -> %UserProfile%\My Documents\My Music -> [Folder | Modified Date = 20.03.2008 22:25:01 | Attr = ] My Pictures -> %UserProfile%\My Documents\My Pictures -> [Folder | Modified Date = 20.03.2008 22:25:01 | Attr = R ] My Videos -> %UserProfile%\My Documents\My Videos -> [Folder | Modified Date = 10.03.2008 19:40:36 | Attr = R ] New Folder -> %UserProfile%\My Documents\New Folder -> [Folder | Modified Date = 16.02.2008 14:05:55 | Attr = ] Sports Interactive -> %UserProfile%\My Documents\Sports Interactive -> [Folder | Modified Date = 16.02.2008 23:33:50 | Attr = ] Adobe Reader 7.0.lnk -> %AllUsersProfile%\Desktop\Adobe Reader 7.0.lnk -> [Ver = | Size = 1740 bytes | Modified Date = 12.02.2008 16:50:12 | Attr = ] CCleaner.lnk -> %AllUsersProfile%\Desktop\CCleaner.lnk -> [Ver = | Size = 706 bytes | Modified Date = 12.02.2008 16:46:07 | Attr = ] Disc2Phone.lnk -> %AllUsersProfile%\Desktop\Disc2Phone.lnk -> [Ver = | Size = 1675 bytes | Modified Date = 20.02.2008 09:08:22 | Attr = ] Football Manager 2008.lnk -> %AllUsersProfile%\Desktop\Football Manager 2008.lnk -> [Ver = | Size = 918 bytes | Modified Date = 10.03.2008 22:41:19 | Attr = ] Mozilla Firefox.lnk -> %AllUsersProfile%\Desktop\Mozilla Firefox.lnk -> [Ver = | Size = 1602 bytes | Modified Date = 12.02.2008 17:48:01 | Attr = ] QuickTime Player.lnk -> %AllUsersProfile%\Desktop\QuickTime Player.lnk -> [Ver = | Size = 1604 bytes | Modified Date = 08.03.2008 23:08:07 | Attr = ] Samsung PC Studio Internet Access 1.0.lnk -> %AllUsersProfile%\Desktop\Samsung PC Studio Internet Access 1.0.lnk -> [Ver = | Size = 871 bytes | Modified Date = 29.02.2008 22:16:49 | Attr = ] Samsung PC Studio PIM & File Manager 1.0.lnk -> %AllUsersProfile%\Desktop\Samsung PC Studio PIM & File Manager 1.0.lnk -> [Ver = | Size = 859 bytes | Modified Date = 29.02.2008 22:16:17 | Attr = ] Skype.lnk -> %AllUsersProfile%\Desktop\Skype.lnk -> [Ver = | Size = 1872 bytes | Modified Date = 19.02.2008 21:39:19 | Attr = ] Sony Ericsson PC Suite.lnk -> %AllUsersProfile%\Desktop\Sony Ericsson PC Suite.lnk -> [Ver = | Size = 2046 bytes | Modified Date = 20.02.2008 09:03:26 | Attr = ] Winamp.lnk -> %AllUsersProfile%\Desktop\Winamp.lnk -> [Ver = | Size = 664 bytes | Modified Date = 12.02.2008 19:03:57 | Attr = ] Yahoo! Mail.lnk -> %AllUsersProfile%\Desktop\Yahoo! Mail.lnk -> [Ver = | Size = 1535 bytes | Modified Date = 20.03.2008 22:25:01 | Attr = ] Yahoo! Messenger.lnk -> %AllUsersProfile%\Desktop\Yahoo! Messenger.lnk -> [Ver = | Size = 812 bytes | Modified Date = 20.03.2008 22:24:14 | Attr = ] 06-04-01 - XFM Radio.zip -> %UserProfile%\Desktop\06-04-01 - XFM Radio.zip -> [Ver = | Size = 5894597 bytes | Modified Date = 20.03.2008 12:53:26 | Attr = ] 09-03-04 - 2 Meter Sessis, Holland.zip -> %UserProfile%\Desktop\09-03-04 - 2 Meter Sessis, Holland.zip -> [Ver = | Size = 25570695 bytes | Modified Date = 20.03.2008 12:46:07 | Attr = ] 100sscam -> %UserProfile%\Desktop\100sscam -> [Folder | Modified Date = 05.03.2008 23:38:57 | Attr = ] 100_Best_of_All_time___054_Kiss___I_Was_Made_For_Loving_You_1979.mp3 -> %UserProfile%\Desktop\100_Best_of_All_time___054_Kiss___I_Was_Made_For_Loving_You_1979.mp3 -> [Ver = | Size = 4341760 bytes | Modified Date = 05.03.2008 14:52:58 | Attr = ] Adele - Chasing Pavements.mp3 -> %UserProfile%\Desktop\Adele - Chasing Pavements.mp3 -> [Ver = | Size = 5143044 bytes | Modified Date = 17.03.2008 22:07:04 | Attr = ] afdbl -> %UserProfile%\Desktop\afdbl -> [Folder | Modified Date = 08.03.2008 12:16:54 | Attr = ] Anna Nalick - Citadel.mp3 -> %UserProfile%\Desktop\Anna Nalick - Citadel.mp3 -> [Ver = | Size = 4588907 bytes | Modified Date = 19.03.2008 20:12:12 | Attr = ] auspices.pdf -> %UserProfile%\Desktop\auspices.pdf -> [Ver = | Size = 171984 bytes | Modified Date = 14.03.2008 11:57:44 | Attr = ] capcane_rationament.pdf -> %UserProfile%\Desktop\capcane_rationament.pdf -> [Ver = | Size = 542058 bytes | Modified Date = 25.02.2008 18:18:28 | Attr = ] Categorizare.doc -> %UserProfile%\Desktop\Categorizare.doc -> [Ver = | Size = 162304 bytes | Modified Date = 25.02.2008 18:18:37 | Attr = ] Conform listei centralizate a Directiei Generale de Evidenta Informatizata a Persoanei.doc -> %UserProfile%\Desktop\Conform listei centralizate a Directiei Generale de Evidenta Informatizata a Persoanei.doc -> [Ver = | Size = 20992 bytes | Modified Date = 10.03.2008 17:32:08 | Attr = ] Dezv-prenat-II_07-08.doc -> %UserProfile%\Desktop\Dezv-prenat-II_07-08.doc -> [Ver = | Size = 323584 bytes | Modified Date = 07.03.2008 09:11:38 | Attr = ] Dezv-prenat-I_07-08.doc -> %UserProfile%\Desktop\Dezv-prenat-I_07-08.doc -> [Ver = | Size = 1153024 bytes | Modified Date = 07.03.2008 09:10:05 | Attr = ] djdeep-happiness.mp3 -> %UserProfile%\Desktop\djdeep-happiness.mp3 -> [Ver = | Size = 3566444 bytes | Modified Date = 24.02.2008 12:26:57 | Attr = ] dss.exe -> %UserProfile%\Desktop\dss.exe -> [Ver = 3, 2, 8, 1 | Size = 686630 bytes | Modified Date = 21.03.2008 02:40:19 | Attr = ] Dunarea batrana by SIDEXPLOZIA.AVI -> %UserProfile%\Desktop\Dunarea batrana by SIDEXPLOZIA.AVI -> [Ver = | Size = 50551652 bytes | Modified Date = 10.03.2008 22:46:22 | Attr = ] Dunarea Batrana.mp3 -> %UserProfile%\Desktop\Dunarea Batrana.mp3 -> [Ver = | Size = 6264070 bytes | Modified Date = 10.03.2008 19:53:57 | Attr = ] Dunarea_Noaptea.jpg -> %UserProfile%\Desktop\Dunarea_Noaptea.jpg -> [Ver = | Size = 324807 bytes | Modified Date = 11.03.2008 10:44:26 | Attr = ] Elli_Kokkinou___Den_ginete.mp3 -> %UserProfile%\Desktop\Elli_Kokkinou___Den_ginete.mp3 -> [Ver = | Size = 6512747 bytes | Modified Date = 13.02.2008 17:40:36 | Attr = ] Euristici.doc -> %UserProfile%\Desktop\Euristici.doc -> [Ver = | Size = 114176 bytes | Modified Date = 25.02.2008 18:18:49 | Attr = ] Evaluarea.jpg -> %UserProfile%\Desktop\Evaluarea.jpg -> [Ver = | Size = 110566 bytes | Modified Date = 26.02.2008 08:35:18 | Attr = ] faza de pe e-joy ro.pdf -> %UserProfile%\Desktop\faza de pe e-joy ro.pdf -> [Ver = | Size = 232791 bytes | Modified Date = 12.03.2008 18:26:21 | Attr = ] Five_For_Fighting-Live-2007-KzT -> %UserProfile%\Desktop\Five_For_Fighting-Live-2007-KzT -> [Folder | Modified Date = 18.02.2008 21:19:16 | Attr = ] fm2008_802_boxed-pc.exe -> %UserProfile%\Desktop\fm2008_802_boxed-pc.exe -> Sports Interactive Ltd [Ver = (c)Sports Interactive Ltd2007 | Size = 151071181 bytes | Modified Date = 10.03.2008 23:03:40 | Attr = ] Forever-dancing-01-Carry-On.mp3 -> %UserProfile%\Desktop\Forever-dancing-01-Carry-On.mp3 -> [Ver = | Size = 6748585 bytes | Modified Date = 17.02.2008 16:12:12 | Attr = ] Formarea impresiilor.doc -> %UserProfile%\Desktop\Formarea impresiilor.doc -> [Ver = | Size = 59904 bytes | Modified Date = 25.02.2008 18:19:23 | Attr = ] funny-pictures-watching-sports-cat.jpg -> %UserProfile%\Desktop\funny-pictures-watching-sports-cat.jpg -> [Ver = | Size = 33070 bytes | Modified Date = 10.03.2008 22:33:49 | Attr = ] HijackThis.lnk -> %UserProfile%\Desktop\HijackThis.lnk -> [Ver = | Size = 1734 bytes | Modified Date = 20.03.2008 15:54:35 | Attr = ] HiJackThis_v2.exe -> %UserProfile%\Desktop\HiJackThis_v2.exe -> Trend Micro Inc. [Ver = 2.00 | Size = 1308216 bytes | Modified Date = 20.03.2008 15:26:32 | Attr = ] HJTInstall.exe -> %UserProfile%\Desktop\HJTInstall.exe -> Trend Micro Inc. [Ver = 2.00.2 | Size = 812344 bytes | Modified Date = 20.03.2008 15:54:08 | Attr = ] House.4x12.HDTV.Xvid.Mp3.Sub.Esp.[www.SuBTorrents.com] -> %UserProfile%\Desktop\House.4x12.HDTV.Xvid.Mp3.Sub.Esp.[www.SuBTorrents.com] -> [Folder | Modified Date = 19.02.2008 00:06:08 | Attr = ] immoland -> %UserProfile%\Desktop\immoland -> [Folder | Modified Date = 13.03.2008 16:52:39 | Attr = ] intalnire mz -> %UserProfile%\Desktop\intalnire mz -> [Folder | Modified Date = 28.02.2008 21:44:06 | Attr = ] intre om si maimuta.pdf -> %UserProfile%\Desktop\intre om si maimuta.pdf -> [Ver = | Size = 1740635 bytes | Modified Date = 20.03.2008 14:26:04 | Attr = ] Manics - Umbrella (rihanna cover).mp3 -> %UserProfile%\Desktop\Manics - Umbrella (rihanna cover).mp3 -> [Ver = | Size = 5152896 bytes | Modified Date = 14.03.2008 12:57:00 | Attr = ] mlalfh -> %UserProfile%\Desktop\mlalfh -> [Folder | Modified Date = 08.03.2008 11:34:04 | Attr = ] msgr8us.exe -> %UserProfile%\Desktop\msgr8us.exe -> Yahoo! Inc. [Ver = 2008.03.14.02 | Size = 446000 bytes | Modified Date = 20.03.2008 22:23:03 | Attr = ] mzmanager.lnk -> %UserProfile%\Desktop\mzmanager.lnk -> [Ver = | Size = 567 bytes | Modified Date = 29.02.2008 13:11:27 | Attr = ] ne-cesar.doc -> %UserProfile%\Desktop\ne-cesar.doc -> [Ver = | Size = 30208 bytes | Modified Date = 21.02.2008 21:43:03 | Attr = ] New Folder -> %UserProfile%\Desktop\New Folder -> [Folder | Modified Date = 01.03.2008 17:06:30 | Attr = ] NIGHTLOOSERS - Betivan Ratat.mp3 -> %UserProfile%\Desktop\NIGHTLOOSERS - Betivan Ratat.mp3 -> [Ver = | Size = 3311438 bytes | Modified Date = 08.03.2008 12:04:23 | Attr = ] oDC.lnk -> %UserProfile%\Desktop\oDC.lnk -> [Ver = | Size = 468 bytes | Modified Date = 16.02.2008 23:42:37 | Attr = ] OTScanIt -> %UserProfile%\Desktop\OTScanIt -> [Folder | Modified Date = 21.03.2008 12:04:58 | Attr = ] OTScanIt.exe -> %UserProfile%\Desktop\OTScanIt.exe -> [Ver = | Size = 482640 bytes | Modified Date = 21.03.2008 12:04:26 | Attr = ] p4.png -> %UserProfile%\Desktop\p4.png -> [Ver = | Size = 100129 bytes | Modified Date = 01.03.2008 11:37:25 | Attr = ] Plan seminarii.jpg -> %UserProfile%\Desktop\Plan seminarii.jpg -> [Ver = | Size = 288605 bytes | Modified Date = 26.02.2008 08:35:15 | Attr = ] poze -> %UserProfile%\Desktop\poze -> [Folder | Modified Date = 12.02.2008 20:34:15 | Attr = ] poze gl -> %UserProfile%\Desktop\poze gl -> [Folder | Modified Date = 06.03.2008 18:09:21 | Attr = ] primul-stejar-sadit-de.html -> %UserProfile%\Desktop\primul-stejar-sadit-de.html -> [Ver = | Size = 40144 bytes | Modified Date = 10.03.2008 22:18:33 | Attr = ] primul-stejar-sadit-de_files -> %UserProfile%\Desktop\primul-stejar-sadit-de_files -> [Folder | Modified Date = 10.03.2008 22:18:33 | Attr = ] Profiles -> %UserProfile%\Desktop\Profiles -> [Folder | Modified Date = 20.03.2008 14:57:21 | Attr = ] Shema - Modelul continuumului în formarea impresiilor.doc -> %UserProfile%\Desktop\Shema - Modelul continuumului în formarea impresiilor.doc -> [Ver = | Size = 33792 bytes | Modified Date = 25.02.2008 18:19:32 | Attr = ] Spybot - Search & Destroy.lnk -> %UserProfile%\Desktop\Spybot - Search & Destroy.lnk -> [Ver = | Size = 933 bytes | Modified Date = 20.03.2008 17:17:48 | Attr = ] spybotsd152.exe -> %UserProfile%\Desktop\spybotsd152.exe -> Safer Networking Limited [Ver = 1.5.2 | Size = 9722720 bytes | Modified Date = 20.03.2008 17:15:11 | Attr = ] SUPERAntiSpyware Free Edition.lnk -> %UserProfile%\Desktop\SUPERAntiSpyware Free Edition.lnk -> [Ver = | Size = 780 bytes | Modified Date = 20.03.2008 21:23:05 | Attr = ] TEMA SEMINAR.doc -> %UserProfile%\Desktop\TEMA SEMINAR.doc -> [Ver = | Size = 29696 bytes | Modified Date = 17.03.2008 17:18:54 | Attr = ] The Corrs - Time enough for tears.mp3 -> %UserProfile%\Desktop\The Corrs - Time enough for tears.mp3 -> [Ver = | Size = 7282688 bytes | Modified Date = 06.03.2008 17:29:03 | Attr = ] Timbaland ft. Keri Hilson and Nicole Scherzinger - Scream.mp3 -> %UserProfile%\Desktop\Timbaland ft. Keri Hilson and Nicole Scherzinger - Scream.mp3 -> [Ver = | Size = 9381888 bytes | Modified Date = 18.03.2008 13:14:53 | Attr = ] Total Commander.lnk -> %UserProfile%\Desktop\Total Commander.lnk -> [Ver = | Size = 548 bytes | Modified Date = 12.02.2008 18:27:19 | Attr = ] Triple J Australia Acoustic Session 9-1-07.rar -> %UserProfile%\Desktop\Triple J Australia Acoustic Session 9-1-07.rar -> [Ver = | Size = 36696504 bytes | Modified Date = 26.02.2008 14:54:37 | Attr = ] wordpress cel mai nou -> %UserProfile%\Desktop\wordpress cel mai nou -> [Folder | Modified Date = 10.03.2008 19:48:46 | Attr = ] wordpress-2.3.3 -> %UserProfile%\Desktop\wordpress-2.3.3 -> [Folder | Modified Date = 10.03.2008 16:52:29 | Attr = ] wordpress-2.3.3.zip -> %UserProfile%\Desktop\wordpress-2.3.3.zip -> [Ver = | Size = 1066640 bytes | Modified Date = 10.03.2008 15:58:21 | Attr = ] wordpress.2008-01-08.xml -> %UserProfile%\Desktop\wordpress.2008-01-08.xml -> [Ver = | Size = 325990 bytes | Modified Date = 09.01.2008 03:11:44 | Attr = ] _FLAC_EAC_CUE__Pink_Floyd___Pulse__Live___colombo_bt_org_.torrent -> %UserProfile%\Desktop\_FLAC_EAC_CUE__Pink_Floyd___Pulse__Live___colombo_bt_org_.torrent -> [Ver = | Size = 74892 bytes | Modified Date = 18.03.2008 13:53:51 | Attr = ] µTorrent.lnk -> %UserProfile%\Desktop\µTorrent.lnk -> [Ver = | Size = 630 bytes | Modified Date = 16.02.2008 23:18:43 | Attr = ] desktop.ini -> %AllUsersProfile%\Start Menu\Programs\Startup\desktop.ini -> [Ver = | Size = 84 bytes | Modified Date = 12.02.2008 16:48:52 | Attr = HS] desktop.ini -> %UserProfile%\Start Menu\Programs\Startup\desktop.ini -> [Ver = | Size = 84 bytes | Modified Date = 12.02.2008 16:48:52 | Attr = HS] Last.fm Helper.lnk -> %UserProfile%\Start Menu\Programs\Startup\Last.fm Helper.lnk -> [Ver = | Size = 655 bytes | Modified Date = 21.03.2008 11:45:50 | Attr = ] Adobe -> %CommonProgramFiles%\Adobe -> [Folder | Modified Date = 12.02.2008 16:50:12 | Attr = ] Apple -> %CommonProgramFiles%\Apple -> [Folder | Modified Date = 08.03.2008 23:07:02 | Attr = ] DESIGNER -> %CommonProgramFiles%\DESIGNER -> [Folder | Modified Date = 15.02.2008 16:20:56 | Attr = ] InstallShield -> %CommonProgramFiles%\InstallShield -> [Folder | Modified Date = 29.02.2008 22:16:07 | Attr = ] Java -> %CommonProgramFiles%\Java -> [Folder | Modified Date = 12.02.2008 16:49:22 | Attr = ] Microsoft Shared -> %CommonProgramFiles%\Microsoft Shared -> [Folder | Modified Date = 15.02.2008 16:21:40 | Attr = ] MSSoap -> %CommonProgramFiles%\MSSoap -> [Folder | Modified Date = 12.02.2008 16:46:53 | Attr = ] ODBC -> %CommonProgramFiles%\ODBC -> [Folder | Modified Date = 12.02.2008 18:33:35 | Attr = ] Services -> %CommonProgramFiles%\Services -> [Folder | Modified Date = 12.02.2008 16:46:55 | Attr = ] Skype -> %CommonProgramFiles%\Skype -> [Folder | Modified Date = 19.02.2008 21:39:16 | Attr = ] Sony Ericsson Shared -> %CommonProgramFiles%\Sony Ericsson Shared -> [Folder | Modified Date = 20.02.2008 09:03:08 | Attr = ] SpeechEngines -> %CommonProgramFiles%\SpeechEngines -> [Folder | Modified Date = 12.02.2008 18:33:32 | Attr = ] System -> %CommonProgramFiles%\System -> [Folder | Modified Date = 15.02.2008 08:42:06 | Attr = ] Teleca Shared -> %CommonProgramFiles%\Teleca Shared -> [Folder | Modified Date = 20.02.2008 09:03:24 | Attr = ] Wise Installation Wizard -> %CommonProgramFiles%\Wise Installation Wizard -> [Folder | Modified Date = 20.03.2008 21:22:55 | Attr = ] [File - Purity Scan: Additional Folder Scans - Non-Microsoft Only] < End of report > [/code]