[code] OTScanIt2 logfile created on: 23/3/2009 18:54:42 - Run 1 OTScanIt2 by OldTimer - Version 1.0.9.0 Folder = C:\Documents and Settings\simone\桌面\OTScanIt2 Windows XP Home Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 6.0.2900.2180) Locale: 00000C04 | Country: 香港特別行政區 | Language: ZHH | Date Format: d/M/yyyy 502.42 Mb Total Physical Memory | 268.64 Mb Available Physical Memory | 53.47% Memory free 842.23 Mb Paging File | 620.58 Mb Available in Paging File | 73.68% Paging File free Paging file location(s): C:\pagefile.sys 372 744; %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 35.00 Gb Total Space | 3.14 Gb Free Space | 8.98% Space Free | Partition Type: NTFS D: Drive not present or media not loaded E: Drive not present or media not loaded F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: SNNECP Current User Name: simone Logged in as Administrator. Current Boot Mode: Normal Scan Mode: All users Whitelist: On File Age = 30 Days [Processes - Safe List] agrsmmsg.exe -> %SystemRoot%\AGRSMMSG.exe -> [2003/10/23 14:21:56 | 00,088,363 | ---- | M] (Agere Systems) apdproxy.exe -> %ProgramFiles%\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe -> [2005/06/06 23:46:24 | 00,057,344 | ---- | M] (Adobe Systems Incorporated) apntex.exe -> %ProgramFiles%\Apoint2K\Apntex.exe -> [2003/02/26 11:08:42 | 00,045,056 | ---- | M] (Alps Electric Co., Ltd.) apoint.exe -> %ProgramFiles%\Apoint2K\Apoint.exe -> [2004/02/27 11:27:50 | 00,135,168 | ---- | M] (Alps Electric Co., Ltd.) avgnt.exe -> %ProgramFiles%\Avira\AntiVir PersonalEdition Classic\avgnt.exe -> [2008/06/12 13:28:45 | 00,266,497 | ---- | M] (Avira GmbH) avguard.exe -> %ProgramFiles%\Avira\AntiVir PersonalEdition Classic\avguard.exe -> [2008/10/15 13:30:02 | 00,151,297 | ---- | M] (Avira GmbH) conime.exe -> %SystemRoot%\system32\conime.exe -> [2004/08/12 09:16:18 | 00,027,648 | ---- | M] (Microsoft Corporation) explorer.exe -> %SystemRoot%\Explorer.EXE -> [2004/08/12 09:16:20 | 00,976,896 | ---- | M] (Microsoft Corporation) googlepinyindaemon.exe -> %ProgramFiles%\Google\Google Pinyin\GooglePinyinDaemon.exe -> [2008/10/17 16:38:36 | 00,308,720 | ---- | M] (Google Inc.) hidfind.exe -> %ProgramFiles%\Apoint2K\HidFind.exe -> [2004/03/11 17:40:18 | 00,040,960 | ---- | M] (Alps Electric Co., Ltd.) hkcmd.exe -> %SystemRoot%\System32\hkcmd.exe -> [2004/01/16 00:07:10 | 00,118,784 | ---- | M] (Intel Corporation) jusched.exe -> %ProgramFiles%\Java\jre1.6.0_06\bin\jusched.exe -> [2008/03/25 04:28:02 | 00,144,784 | ---- | M] (Sun Microsystems, Inc.) necmfk.exe -> %ProgramFiles%\necmfk\necmfk.exe -> [2004/02/10 19:02:22 | 00,062,976 | ---- | M] (NEC) otscanit2.exe -> %UserProfile%\桌面\OTScanIt2\OTScanIt2.exe -> [2009/03/22 18:23:22 | 00,491,520 | ---- | M] (OldTimer Tools) qttask.exe -> %ProgramFiles%\QuickTime\QTTask.exe -> [2009/01/05 16:18:48 | 00,413,696 | ---- | M] (Apple Inc.) sched.exe -> %ProgramFiles%\Avira\AntiVir PersonalEdition Classic\sched.exe -> [2008/10/15 13:31:53 | 00,068,865 | ---- | M] (Avira GmbH) sclauncher.exe -> %ProgramFiles%\SimpleCenter\bin\win\sclauncher.exe -> [2007/01/30 10:40:54 | 00,094,208 | ---- | M] (Universal Electronics Inc.) smagent.exe -> %ProgramFiles%\Analog Devices\SoundMAX\SMAgent.exe -> [2002/09/20 15:50:10 | 00,045,056 | ---- | M] (Analog Devices, Inc.) tsnp2std.exe -> %SystemRoot%\tsnp2std.exe -> [2006/01/16 14:06:42 | 00,114,688 | ---- | M] () vsnp2std.exe -> %SystemRoot%\vsnp2std.exe -> [2006/01/06 13:57:06 | 00,344,064 | ---- | M] (Sonix) wscntfy.exe -> %SystemRoot%\system32\wscntfy.exe -> [2004/08/12 09:16:22 | 00,013,824 | ---- | M] (Microsoft Corporation) [Win32 Services - Safe List] (AntiVirScheduler) Avira AntiVir Personal - Free Antivirus Scheduler [Win32_Own | Auto | Running] -> %ProgramFiles%\Avira\AntiVir PersonalEdition Classic\sched.exe -> [2008/10/15 13:31:53 | 00,068,865 | ---- | M] (Avira GmbH) (AntiVirService) Avira AntiVir Personal - Free Antivirus Guard [Win32_Own | Auto | Running] -> %ProgramFiles%\Avira\AntiVir PersonalEdition Classic\avguard.exe -> [2008/10/15 13:30:02 | 00,151,297 | ---- | M] (Avira GmbH) (aspnet_state) ASP.NET State Service [Win32_Own | On_Demand | Stopped] -> %SystemRoot%\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe -> [2005/09/23 07:28:32 | 00,029,896 | ---- | M] (Microsoft Corporation) (clr_optimization_v2.0.50727_32) .NET Runtime Optimization Service v2.0.50727_X86 [Win32_Own | On_Demand | Stopped] -> %SystemRoot%\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -> [2005/09/23 07:28:56 | 00,066,240 | ---- | M] (Microsoft Corporation) (helpsvc) Help and Support [Win32_Shared | Auto | Running] -> %SystemRoot%\PCHealth\HelpCtr\Binaries\pchsvc.dll -> [2004/08/12 09:16:15 | 00,038,912 | ---- | M] (Microsoft Corporation) (ServiceLayer) ServiceLayer [Win32_Own | On_Demand | Stopped] -> %ProgramFiles%\PC Connectivity Solution\ServiceLayer.exe -> [2007/02/08 16:13:46 | 00,212,480 | ---- | M] (Nokia.) (SoundMAX Agent Service (default)) SoundMAX Agent Service [Win32_Own | Auto | Running] -> %ProgramFiles%\Analog Devices\SoundMAX\SMAgent.exe -> [2002/09/20 15:50:10 | 00,045,056 | ---- | M] (Analog Devices, Inc.) (usnjsvc) Messenger Sharing Folders USN Journal Reader service [Win32_Own | On_Demand | Stopped] -> %ProgramFiles%\Windows Live\Messenger\usnsvc.exe -> [2007/10/18 11:31:54 | 00,098,328 | ---- | M] (Microsoft Corporation) (WindowsTelephony) Windows Telephony [Win32_Own | Auto | Stopped] -> -> File not found (WMPNetworkSvc) Windows Media Player Network Sharing Service [Win32_Own | On_Demand | Stopped] -> %ProgramFiles%\Windows Media Player\WMPNetwk.exe -> [2006/11/02 23:09:48 | 00,897,024 | ---- | M] (Microsoft Corporation) [Driver Services - Safe List] (aeaudio) aeaudio [Kernel | On_Demand | Running] -> %SystemRoot%\system32\drivers\aeaudio.sys -> [2003/10/23 20:17:10 | 00,100,384 | ---- | M] (Andrea Electronics Corporation) (AgereSoftModem) Agere Systems Soft Modem [Kernel | On_Demand | Running] -> %SystemRoot%\System32\DRIVERS\AGRSM.sys -> [2003/10/23 14:22:10 | 01,205,324 | ---- | M] (Agere Systems) (AliIde) AliIde [Kernel | Boot | Running] -> %SystemRoot%\System32\DRIVERS\aliide.sys -> [2001/08/17 13:51:56 | 00,005,248 | ---- | M] (Acer Laboratories Inc.) (amdagp) AMD AGP Bus Filter Driver [Kernel | Boot | Running] -> %SystemRoot%\System32\DRIVERS\amdagp.sys -> [2004/08/04 14:07:42 | 00,043,008 | ---- | M] (Advanced Micro Devices, Inc.) (ApfiltrService) NEC VersaGlide Filter Driver [Kernel | On_Demand | Running] -> %SystemRoot%\System32\DRIVERS\Apfiltr.sys -> [2004/04/08 23:32:04 | 00,098,433 | ---- | M] (Alps Electric Co., Ltd.) (asc) asc [Kernel | Boot | Running] -> %SystemRoot%\System32\DRIVERS\asc.sys -> [2001/08/17 13:52:00 | 00,026,496 | ---- | M] (Advanced System Products, Inc.) (asc3550) asc3550 [Kernel | Boot | Running] -> %SystemRoot%\System32\DRIVERS\asc3550.sys -> [2001/08/17 13:51:58 | 00,014,848 | ---- | M] (Advanced System Products, Inc.) (Aspi32) Aspi32 [Kernel | Auto | Running] -> %SystemRoot%\System32\drivers\aspi32.sys -> [2002/05/06 11:01:14 | 00,016,512 | ---- | M] (Adaptec) (avgio) avgio [Kernel | System | Running] -> %ProgramFiles%\Avira\AntiVir PersonalEdition Classic\avgio.sys -> [2007/02/27 14:25:01 | 00,011,840 | ---- | M] (Avira GmbH) (avgntflt) avgntflt [File_System | On_Demand | Running] -> %ProgramFiles%\Avira\AntiVir PersonalEdition Classic\avgntflt.sys -> [2008/05/20 15:29:41 | 00,052,032 | ---- | M] (Avira GmbH) (avipbb) avipbb [Kernel | System | Running] -> %SystemRoot%\system32\DRIVERS\avipbb.sys -> [2008/10/30 10:21:03 | 00,075,072 | ---- | M] (Avira GmbH) (CmdIde) CmdIde [Kernel | Boot | Running] -> %SystemRoot%\System32\DRIVERS\cmdide.sys -> [2001/08/31 19:16:32 | 00,006,656 | ---- | M] (CMD Technology, Inc.) (dac2w2k) dac2w2k [Kernel | Boot | Running] -> %SystemRoot%\System32\DRIVERS\dac2w2k.sys -> [2001/08/17 13:52:16 | 00,179,584 | ---- | M] (Mylex Corporation) (E100B) Intel(R) PRO Adapter Driver [Kernel | On_Demand | Running] -> %SystemRoot%\System32\DRIVERS\e100b325.sys -> [2003/10/28 12:09:54 | 00,153,088 | ---- | M] (Intel Corporation) (FsVga) FsVga [Kernel | System | Running] -> %SystemRoot%\System32\DRIVERS\fsvga.sys -> [2002/09/13 12:00:00 | 00,012,160 | ---- | M] (Microsoft Corporation) (gmer) gmer [Kernel | On_Demand | Stopped] -> %SystemRoot%\gmer.ini -> [2008/12/19 02:46:17 | 00,000,349 | ---- | M] () (gv3) Intel GV3 處理器驅動程式 [Kernel | On_Demand | Stopped] -> %SystemRoot%\System32\DRIVERS\gv3.sys -> [2002/11/20 14:52:54 | 00,032,512 | ---- | M] (Microsoft Corporation) (ialm) ialm [Kernel | On_Demand | Running] -> %SystemRoot%\System32\DRIVERS\ialmnt5.sys -> [2004/03/05 10:46:58 | 00,095,579 | ---- | M] (Intel Corporation) (MFKGTKEY) MFKGTKEY [Kernel | System | Running] -> %SystemRoot%\system32\drivers\mfkgtkey.sys -> [2004/05/14 19:51:32 | 00,017,920 | ---- | M] (NEC Corporation) (mraid35x) mraid35x [Kernel | Boot | Running] -> %SystemRoot%\System32\DRIVERS\mraid35x.sys -> [2001/08/17 13:52:12 | 00,017,280 | ---- | M] (American Megatrends Inc.) (nmwcd) Nokia USB Phone Parent [Kernel | On_Demand | Stopped] -> %SystemRoot%\system32\drivers\nmwcd.sys -> [2007/02/22 10:15:56 | 00,137,216 | ---- | M] (Nokia) (nmwcdc) Nokia USB Generic [Kernel | On_Demand | Stopped] -> %SystemRoot%\system32\drivers\nmwcdc.sys -> [2007/02/22 10:15:14 | 00,008,320 | ---- | M] (Nokia) (nmwcdcj) Nokia USB Port [Kernel | On_Demand | Stopped] -> %SystemRoot%\system32\drivers\nmwcdcj.sys -> [2007/02/22 10:15:14 | 00,012,288 | ---- | M] (Nokia) (nmwcdcm) Nokia USB Modem [Kernel | On_Demand | Stopped] -> %SystemRoot%\system32\drivers\nmwcdcm.sys -> [2007/02/22 10:15:14 | 00,012,288 | ---- | M] (Nokia) (Pcouffin) VSO Software pcouffin [Kernel | On_Demand | Stopped] -> %SystemRoot%\System32\Drivers\Pcouffin.sys -> [2008/05/24 20:29:58 | 00,047,360 | ---- | M] (VSO Software) (pfc) Padus ASPI Shell [Kernel | On_Demand | Running] -> %SystemRoot%\system32\drivers\pfc.sys -> [2006/11/15 17:48:55 | 00,009,856 | ---- | M] (Padus, Inc.) (PQNTDrv) PQNTDrv [Kernel | System | Running] -> %SystemRoot%\System32\drivers\PQNTDRV.sys -> [2002/09/16 17:14:32 | 00,004,228 | ---- | M] (PowerQuest Corporation) (Ps2Led) NEC Note Keyboard with One-touch start buttons [Kernel | On_Demand | Running] -> %SystemRoot%\System32\DRIVERS\Ps2Led.sys -> [2004/03/16 11:58:22 | 00,008,448 | ---- | M] (NEC Corporation) (Ps2LedIF) Ps2LedIF [Kernel | System | Running] -> %SystemRoot%\system32\drivers\ps2ledif.sys -> [2003/01/10 15:39:32 | 00,005,376 | ---- | M] (NEC Corporation) (Ptilink) 直接平行連接埠連結驅動程式 [Kernel | On_Demand | Running] -> %SystemRoot%\System32\DRIVERS\ptilink.sys -> [2002/09/13 12:00:00 | 00,017,792 | ---- | M] (Parallel Technologies, Inc.) (PxHelp20) PxHelp20 [Kernel | Boot | Running] -> %SystemRoot%\System32\DRIVERS\PxHelp20.sys -> [2008/04/08 07:16:45 | 00,043,872 | ---- | M] (Sonic Solutions) (ql1080) ql1080 [Kernel | Boot | Running] -> %SystemRoot%\System32\DRIVERS\ql1080.sys -> [2001/08/17 13:52:20 | 00,040,320 | ---- | M] (QLogic Corporation) (ql12160) ql12160 [Kernel | Boot | Running] -> %SystemRoot%\System32\DRIVERS\ql12160.sys -> [2001/08/17 13:52:20 | 00,045,312 | ---- | M] (QLogic Corporation) (ql1280) ql1280 [Kernel | Boot | Running] -> %SystemRoot%\System32\DRIVERS\ql1280.sys -> [2001/08/17 13:52:18 | 00,049,024 | ---- | M] (QLogic Corporation) (R592) R592 [Kernel | Boot | Running] -> %SystemRoot%\System32\DRIVERS\R592.sys -> [2004/01/18 14:01:46 | 00,054,912 | ---- | M] (REDC) (Rismxdp) Ricoh xD-Picture Card Driver [Kernel | Boot | Running] -> %SystemRoot%\System32\DRIVERS\Rismxdp.sys -> [2004/02/18 20:25:26 | 00,303,360 | ---- | M] (REDC) (Secdrv) Secdrv [Kernel | Auto | Running] -> %SystemRoot%\System32\DRIVERS\secdrv.sys -> [2008/01/08 23:13:30 | 00,163,644 | ---- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) (sisagp) SIS AGP Bus Filter [Kernel | Boot | Running] -> %SystemRoot%\System32\DRIVERS\sisagp.sys -> [2004/08/04 14:07:42 | 00,041,088 | ---- | M] (Silicon Integrated Systems Corporation) (smwdm) smwdm [Kernel | On_Demand | Running] -> %SystemRoot%\system32\drivers\smwdm.sys -> [2003/10/30 09:48:46 | 00,593,408 | ---- | M] (Analog Devices, Inc.) (SNP2STD) USB2.0 PC Camera (SNP2STD) [Kernel | On_Demand | Stopped] -> %SystemRoot%\system32\DRIVERS\snp2sxp.sys -> [2006/01/19 11:34:32 | 10,221,440 | ---- | M] () (SONYPVU1) Sony USB Filter Driver (SONYPVU1) [Kernel | On_Demand | Stopped] -> %SystemRoot%\System32\DRIVERS\SONYPVU1.SYS -> [2001/08/17 13:56:16 | 00,007,552 | ---- | M] (Sony Corporation) (Sparrow) Sparrow [Kernel | Boot | Running] -> %SystemRoot%\System32\DRIVERS\sparrow.sys -> [2001/08/17 14:07:44 | 00,019,072 | ---- | M] (Adaptec, Inc.) (ssmdrv) ssmdrv [Kernel | System | Running] -> %SystemRoot%\system32\DRIVERS\ssmdrv.sys -> [2007/03/01 09:34:22 | 00,028,352 | ---- | M] (Avira GmbH) (symc810) symc810 [Kernel | Boot | Running] -> %SystemRoot%\System32\DRIVERS\symc810.sys -> [2001/08/17 14:07:34 | 00,016,256 | ---- | M] (Symbios Logic Inc.) (symc8xx) symc8xx [Kernel | Boot | Running] -> %SystemRoot%\System32\DRIVERS\symc8xx.sys -> [2001/08/17 14:07:36 | 00,032,640 | ---- | M] (LSI Logic) (sym_hi) sym_hi [Kernel | Boot | Running] -> %SystemRoot%\System32\DRIVERS\sym_hi.sys -> [2001/08/17 14:07:40 | 00,028,384 | ---- | M] (LSI Logic) (sym_u3) sym_u3 [Kernel | Boot | Running] -> %SystemRoot%\System32\DRIVERS\sym_u3.sys -> [2001/08/17 14:07:42 | 00,030,688 | ---- | M] (LSI Logic) (ultra) ultra [Kernel | Boot | Running] -> %SystemRoot%\System32\DRIVERS\ultra.sys -> [2001/08/17 13:52:22 | 00,036,736 | ---- | M] (Promise Technology, Inc.) (usbbus) LGE Mobile Composite USB Device [Kernel | On_Demand | Stopped] -> %SystemRoot%\system32\DRIVERS\lgusbbus.sys -> [2005/05/27 03:01:18 | 00,021,344 | ---- | M] (LG Electronics Inc.) (USBModem) LGE Mobile USB Modem [Kernel | On_Demand | Stopped] -> %SystemRoot%\system32\DRIVERS\lgusbmodem.sys -> [2005/06/25 10:36:16 | 00,039,036 | ---- | M] (LG Electronics Inc.) (w22n51) Intel(R) PRO/Wireless 2200 Adapter 雄最唗 [Kernel | On_Demand | Running] -> %SystemRoot%\System32\DRIVERS\w22n51.sys -> [2004/03/08 03:43:10 | 01,657,344 | ---- | M] (Intel® Corporation) ({6080A529-897E-4629-A488-ABA0C29B635E}) Intel(R) Graphics Platform (SoftBIOS) Driver [Kernel | On_Demand | Running] -> %SystemRoot%\system32\drivers\ialmsbw.sys -> [2004/03/05 10:48:02 | 00,122,942 | ---- | M] (Intel Corporation) ({D31A0762-0CEB-444e-ACFF-B049A1F6FE91}) Intel(R) Graphics Chipset (KCH) Driver [Kernel | On_Demand | Running] -> %SystemRoot%\system32\drivers\ialmkchw.sys -> [2004/03/05 10:47:56 | 00,099,002 | ---- | M] (Intel Corporation) ({E2B953A6-195A-44F9-9BA3-3D5F4E32BB55}) AIM 3.0 Part 01 Codec Driver CH-7009-A/CH-7011 [Kernel | On_Demand | Running] -> %SystemRoot%\system32\drivers\wA301a.sys -> [2004/03/05 10:47:02 | 00,033,847 | ---- | M] (Intel Corporation) [Registry - Safe List] < Internet Explorer Settings [HKEY_LOCAL_MACHINE\] > -> -> HKEY_LOCAL_MACHINE\: Main\\"Default_Page_URL" -> http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome -> HKEY_LOCAL_MACHINE\: Main\\"Default_Search_URL" -> http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch -> HKEY_LOCAL_MACHINE\: Main\\"Local Page" -> %SystemRoot%\system32\blank.htm -> HKEY_LOCAL_MACHINE\: Main\\"Search Page" -> http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch -> HKEY_LOCAL_MACHINE\: Main\\"Start Page" -> http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home -> HKEY_LOCAL_MACHINE\: Search\\"CustomizeSearch" -> http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm -> HKEY_LOCAL_MACHINE\: Search\\"SearchAssistant" -> http://www.myway.com/mysearch/?ptnrS=BW -> < Internet Explorer Settings [HKEY_CURRENT_USER\] > -> -> HKEY_CURRENT_USER\: Main\\"Local Page" -> C:\WINDOWS\system32\blank.htm -> HKEY_CURRENT_USER\: Main\\"Page_Transitions" -> Reg Error: Invalid data type. -> HKEY_CURRENT_USER\: Main\\"Search Page" -> http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch -> HKEY_CURRENT_USER\: Main\\"Start Page" -> http://www.google.com -> HKEY_CURRENT_USER\: SearchURL\\"provider" -> -> HKEY_CURRENT_USER\: "ProxyEnable" -> 0 -> < Internet Explorer Settings [HKEY_USERS\.DEFAULT\] > -> -> HKEY_USERS\.DEFAULT\: "ProxyEnable" -> 0 -> < Internet Explorer Settings [HKEY_USERS\S-1-5-18\] > -> -> HKEY_USERS\S-1-5-18\: "ProxyEnable" -> 0 -> < Internet Explorer Settings [HKEY_USERS\S-1-5-19\] > -> -> HKEY_USERS\S-1-5-19\: "ProxyEnable" -> 0 -> < Internet Explorer Settings [HKEY_USERS\S-1-5-20\] > -> -> HKEY_USERS\S-1-5-20\: "ProxyEnable" -> 0 -> < Internet Explorer Settings [HKEY_USERS\S-1-5-21-2416478673-1163175544-1116799606-1005\] > -> -> HKEY_USERS\S-1-5-21-2416478673-1163175544-1116799606-1005\: Main\\"Local Page" -> C:\WINDOWS\system32\blank.htm -> HKEY_USERS\S-1-5-21-2416478673-1163175544-1116799606-1005\: Main\\"Page_Transitions" -> Reg Error: Invalid data type. -> HKEY_USERS\S-1-5-21-2416478673-1163175544-1116799606-1005\: Main\\"Search Page" -> http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch -> HKEY_USERS\S-1-5-21-2416478673-1163175544-1116799606-1005\: Main\\"Start Page" -> http://www.google.com -> HKEY_USERS\S-1-5-21-2416478673-1163175544-1116799606-1005\: SearchURL\\"provider" -> -> HKEY_USERS\S-1-5-21-2416478673-1163175544-1116799606-1005\: "ProxyEnable" -> 0 -> < FireFox Settings [Prefs.js] > -> C:\Documents and Settings\simone\Application Data\Mozilla\FireFox\Profiles\hvnqe8hm.default\prefs.js -> extensions.enabledItems -> {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.0.7 -> < FireFox Extensions [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla HKLM\software\mozilla\Mozilla Firefox 3.0.7\extensions -> -> HKLM\software\mozilla\Mozilla Firefox 3.0.7\extensions\\Components -> %ProgramFiles%\MOZILLA FIREFOX\COMPONENTS [C:\PROGRAM FILES\MOZILLA FIREFOX\COMPONENTS] -> [2009/03/22 13:43:57 | 00,000,000 | ---D | M] HKLM\software\mozilla\Mozilla Firefox 3.0.7\extensions\\Plugins -> %ProgramFiles%\MOZILLA FIREFOX\PLUGINS [C:\PROGRAM FILES\MOZILLA FIREFOX\PLUGINS] -> [2009/03/21 19:53:44 | 00,000,000 | ---D | M] < FireFox Extensions [User Folders] > -> -> C:\Documents and Settings\simone\Application Data\mozilla\Extensions -> [2009/02/10 16:55:54 | 00,000,000 | ---D | M] -> C:\Documents and Settings\simone\Application Data\mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384} -> [2009/02/10 16:55:54 | 00,000,000 | ---D | M] -> C:\Documents and Settings\simone\Application Data\mozilla\Firefox\Profiles\hvnqe8hm.default\extensions -> [2009/03/21 20:00:50 | 00,096,270 | ---- | M] () < FireFox Extensions [Program Folders] > -> -> C:\PROGRAM FILES\MOZILLA FIREFOX\extensions -> [2009/03/07 15:21:10 | 09,742,840 | ---- | M] (Mozilla Foundation) -> C:\PROGRAM FILES\MOZILLA FIREFOX\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} -> [2009/03/07 15:21:10 | 09,742,840 | ---- | M] (Mozilla Foundation) < FireFox Components [Program Folders] > -> C:\PROGRAM FILES\MOZILLA FIREFOX\components\ -> C:\PROGRAM FILES\MOZILLA FIREFOX\components -> [2009/03/22 13:43:57 | 00,000,000 | ---D | M] browserdirprovider.dll -> C:\PROGRAM FILES\MOZILLA FIREFOX\components\browserdirprovider.dll -> [2009/03/07 15:21:00 | 00,023,032 | ---- | M] (Mozilla Foundation) brwsrcmp.dll -> C:\PROGRAM FILES\MOZILLA FIREFOX\components\brwsrcmp.dll -> [2009/03/07 15:21:00 | 00,134,648 | ---- | M] (Mozilla Foundation) < FireFox Plugins [Program Folders] > -> C:\PROGRAM FILES\MOZILLA FIREFOX\plugins\ -> C:\PROGRAM FILES\MOZILLA FIREFOX\plugins -> [2009/03/21 19:53:44 | 00,000,000 | ---D | M] npnul32.dll -> C:\PROGRAM FILES\MOZILLA FIREFOX\plugins\npnul32.dll -> [2009/03/07 15:21:03 | 00,065,528 | ---- | M] (mozilla.org) npqtplugin.dll -> C:\PROGRAM FILES\MOZILLA FIREFOX\plugins\npqtplugin.dll -> [2009/03/21 19:53:44 | 00,143,360 | ---- | M] (Apple Inc.) npqtplugin2.dll -> C:\PROGRAM FILES\MOZILLA FIREFOX\plugins\npqtplugin2.dll -> [2009/03/21 19:53:44 | 00,143,360 | ---- | M] (Apple Inc.) npqtplugin3.dll -> C:\PROGRAM FILES\MOZILLA FIREFOX\plugins\npqtplugin3.dll -> [2009/03/21 19:53:44 | 00,143,360 | ---- | M] (Apple Inc.) npqtplugin4.dll -> C:\PROGRAM FILES\MOZILLA FIREFOX\plugins\npqtplugin4.dll -> [2009/03/21 19:53:44 | 00,143,360 | ---- | M] (Apple Inc.) npqtplugin5.dll -> C:\PROGRAM FILES\MOZILLA FIREFOX\plugins\npqtplugin5.dll -> [2009/03/21 19:53:44 | 00,143,360 | ---- | M] (Apple Inc.) npqtplugin6.dll -> C:\PROGRAM FILES\MOZILLA FIREFOX\plugins\npqtplugin6.dll -> [2009/03/21 19:53:44 | 00,143,360 | ---- | M] (Apple Inc.) QuickTimePlugin.class -> C:\PROGRAM FILES\MOZILLA FIREFOX\plugins\QuickTimePlugin.cla -> [2009/03/21 19:53:43 | 00,004,208 | ---- | M] () < FireFox SearchPlugins [Program Folders] > -> C:\PROGRAM FILES\MOZILLA FIREFOX\searchplugins\ -> C:\PROGRAM FILES\MOZILLA FIREFOX\searchplugins -> [2009/02/10 16:55:27 | 00,000,000 | ---D | M] creativecommons.xml -> C:\PROGRAM FILES\MOZILLA FIREFOX\searchplugins\creativecommons.xml -> [2008/03/08 17:35:22 | 00,001,534 | ---- | M] () findbook-zh-TW.xml -> C:\PROGRAM FILES\MOZILLA FIREFOX\searchplugins\findbook-zh-TW.xml -> [2008/04/08 16:33:48 | 00,002,646 | ---- | M] () google.xml -> C:\PROGRAM FILES\MOZILLA FIREFOX\searchplugins\google.xml -> [2008/04/16 12:08:20 | 00,001,706 | ---- | M] () wikipedia-zh-TW.xml -> C:\PROGRAM FILES\MOZILLA FIREFOX\searchplugins\wikipedia-zh-TW.xml -> [2008/04/07 02:07:26 | 00,001,222 | ---- | M] () yahoo-answer-zh-TW.xml -> C:\PROGRAM FILES\MOZILLA FIREFOX\searchplugins\yahoo-answer-zh-TW.xml -> [2008/08/17 02:39:48 | 00,001,350 | ---- | M] () yahoo-bid-zh-TW.xml -> C:\PROGRAM FILES\MOZILLA FIREFOX\searchplugins\yahoo-bid-zh-TW.xml -> [2008/08/17 02:39:48 | 00,000,834 | ---- | M] () yahoo-zh-TW.xml -> C:\PROGRAM FILES\MOZILLA FIREFOX\searchplugins\yahoo-zh-TW.xml -> [2008/08/17 02:39:48 | 00,000,843 | ---- | M] () < HOSTS File > (686 bytes and 19 lines) -> C:\WINDOWS\System32\drivers\etc\Hosts -> Reset Hosts 127.0.0.1 localhost < BHO's [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\ -> {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} [HKLM] -> %ProgramFiles%\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [Adobe PDF Reader Link Helper] -> [2006/12/18 04:16:42 | 00,059,032 | ---- | M] (Adobe Systems Incorporated) {68F9551E-0411-48E4-9AAF-4BC42A6A46BE} [HKLM] -> %ProgramFiles%\Canon\Easy-WebPrint\EWPBrowseLoader.dll [EWPBrowseObject Class] -> [2006/06/09 14:37:54 | 00,034,304 | ---- | M] () {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} [HKLM] -> %ProgramFiles%\Java\jre1.6.0_06\bin\ssv.dll [SSVHelper Class] -> [2008/03/25 04:28:01 | 00,509,328 | ---- | M] (Sun Microsystems, Inc.) {9030D464-4C02-4ABF-8ECC-5164760863C6} [HKLM] -> %CommonProgramFiles%\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [Windows Live Sign-in Helper] -> [2007/09/20 10:30:18 | 00,328,752 | ---- | M] (Microsoft Corporation) < Internet Explorer ToolBars [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ToolBar -> "{327C2873-E90D-4c37-AA9D-10AC9BABA46C}" [HKLM] -> %ProgramFiles%\Canon\Easy-WebPrint\Toolband.dll [Easy-WebPrint] -> [2006/06/09 14:39:38 | 00,552,960 | ---- | M] () "{ED1184DA-E57E-4480-99D0-A16809037F54}" [HKLM] -> %ProgramFiles%\eSnips\SnipBar.dll [eSnips] -> [2007/12/10 14:00:10 | 00,278,528 | ---- | M] (eSnips Ltd.) < Internet Explorer ToolBars [HKEY_CURRENT_USER\] > -> HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\ -> ShellBrowser\\"{42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6}" [HKLM] -> Reg Error: Key error. [Reg Error: Key error.] -> File not found WebBrowser\\"{0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7}" [HKLM] -> Reg Error: Key error. [Reg Error: Key error.] -> File not found WebBrowser\\"{42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6}" [HKLM] -> Reg Error: Key error. [Reg Error: Key error.] -> File not found WebBrowser\\"{EF99BD32-C1FB-11D2-892F-0090271D4F88}" [HKLM] -> Reg Error: Key error. [Yahoo! 工具列] -> File not found < Internet Explorer ToolBars [HKEY_USERS\S-1-5-21-2416478673-1163175544-1116799606-1005\] > -> HKEY_USERS\S-1-5-21-2416478673-1163175544-1116799606-1005\Software\Microsoft\Internet Explorer\Toolbar\ -> ShellBrowser\\"{42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6}" [HKLM] -> Reg Error: Key error. [Reg Error: Key error.] -> File not found WebBrowser\\"{0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7}" [HKLM] -> Reg Error: Key error. [Reg Error: Key error.] -> File not found WebBrowser\\"{42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6}" [HKLM] -> Reg Error: Key error. [Reg Error: Key error.] -> File not found WebBrowser\\"{EF99BD32-C1FB-11D2-892F-0090271D4F88}" [HKLM] -> Reg Error: Key error. [Yahoo! 工具列] -> File not found < Run [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run -> "Adobe Photo Downloader" -> %ProgramFiles%\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe ["C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"] -> [2005/06/06 23:46:24 | 00,057,344 | ---- | M] (Adobe Systems Incorporated) "AGRSMMSG" -> %SystemRoot%\AGRSMMSG.exe [AGRSMMSG.exe] -> [2003/10/23 14:21:56 | 00,088,363 | ---- | M] (Agere Systems) "Apoint" -> %ProgramFiles%\Apoint2K\Apoint.exe [C:\Program Files\Apoint2K\Apoint.exe] -> [2004/02/27 11:27:50 | 00,135,168 | ---- | M] (Alps Electric Co., Ltd.) "avgnt" -> %ProgramFiles%\Avira\AntiVir PersonalEdition Classic\avgnt.exe ["C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min] -> [2008/06/12 13:28:45 | 00,266,497 | ---- | M] (Avira GmbH) "Google IME Autoupdater" -> %ProgramFiles%\Google\Google Pinyin\GooglePinyinDaemon.exe ["C:\Program Files\Google\Google Pinyin\GooglePinyinDaemon.exe"] -> [2008/10/17 16:38:36 | 00,308,720 | ---- | M] (Google Inc.) "HotKeysCmds" -> %SystemRoot%\System32\hkcmd.exe [C:\WINDOWS\System32\hkcmd.exe] -> [2004/01/16 00:07:10 | 00,118,784 | ---- | M] (Intel Corporation) "IMJPMIG8.1" -> %SystemRoot%\IME\imjp8_1\IMJPMIG.EXE ["C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32] -> [2004/08/04 13:31:59 | 00,208,952 | ---- | M] (Microsoft Corporation) "NECMFK" -> %ProgramFiles%\necmfk\necmfk.exe [C:\Program Files\necmfk\necmfk.exe] -> [2004/02/10 19:02:22 | 00,062,976 | ---- | M] (NEC) "NeroFilterCheck" -> %SystemRoot%\system32\NeroCheck.exe [C:\WINDOWS\system32\NeroCheck.exe] -> [2001/07/09 10:50:42 | 00,155,648 | ---- | M] (Ahead Software Gmbh) "PHIME2002A" -> %SystemRoot%\System32\IME\TINTLGNT\TINTSETP.EXE [C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName] -> [2004/08/12 09:16:22 | 00,455,168 | ---- | M] (Microsoft Corporation) "PHIME2002ASync" -> [C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC] -> File not found "QuickTime Task" -> %ProgramFiles%\QuickTime\QTTask.exe ["C:\Program Files\QuickTime\QTTask.exe" -atboottime] -> [2009/01/05 16:18:48 | 00,413,696 | ---- | M] (Apple Inc.) "sclauncher" -> %ProgramFiles%\SimpleCenter\bin\win\sclauncher.exe [C:\Program Files\SimpleCenter\bin\win\sclauncher.exe] -> [2007/01/30 10:40:54 | 00,094,208 | ---- | M] (Universal Electronics Inc.) "snp2std" -> %SystemRoot%\vsnp2std.exe [C:\WINDOWS\vsnp2std.exe] -> [2006/01/06 13:57:06 | 00,344,064 | ---- | M] (Sonix) "SunJavaUpdateSched" -> %ProgramFiles%\Java\jre1.6.0_06\bin\jusched.exe ["C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe"] -> [2008/03/25 04:28:02 | 00,144,784 | ---- | M] (Sun Microsystems, Inc.) "tsnp2std" -> %SystemRoot%\tsnp2std.exe [C:\WINDOWS\tsnp2std.exe] -> [2006/01/16 14:06:42 | 00,114,688 | ---- | M] () < Administrator Startup Folder > -> C:\Documents and Settings\Administrator\「開始」功能表\程式集\啟動 -> < All Users Startup Folder > -> C:\Documents and Settings\All Users\「開始」功能表\程式集\啟動 -> < Default User Startup Folder > -> C:\Documents and Settings\Default User\「開始」功能表\程式集\啟動 -> < simone Startup Folder > -> C:\Documents and Settings\simone\「開始」功能表\程式集\啟動 -> < Software Policy Settings [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer -> < Software Policy Settings [HKEY_CURRENT_USER] > -> HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Internet Explorer -> < Software Policy Settings [HKEY_USERS\S-1-5-21-2416478673-1163175544-1116799606-1005] > -> HKEY_USERS\S-1-5-21-2416478673-1163175544-1116799606-1005\SOFTWARE\Policies\Microsoft\Internet Explorer -> < CurrentVersion Policy Settings - Explorer [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer -> < CurrentVersion Policy Settings - System [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System \\"dontdisplaylastusername" -> [0] -> File not found \\"legalnoticecaption" -> [] -> File not found \\"legalnoticetext" -> [] -> File not found \\"shutdownwithoutlogon" -> [1] -> File not found \\"undockwithoutlogon" -> [1] -> File not found < CurrentVersion Policy Settings - Explorer [HKEY_CURRENT_USER] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer \\"NoDriveTypeAutoRun" -> [FF 00 00 00 [binary data]] -> File not found < CurrentVersion Policy Settings - System [HKEY_CURRENT_USER] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System -> < CurrentVersion Policy Settings [HKEY_USERS\.DEFAULT] > -> HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer -> HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer \\"NoDriveTypeAutoRun" -> [145] -> File not found < CurrentVersion Policy Settings [HKEY_USERS\.DEFAULT] > -> HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System -> < CurrentVersion Policy Settings [HKEY_USERS\S-1-5-18] > -> HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer -> HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer \\"NoDriveTypeAutoRun" -> [145] -> File not found < CurrentVersion Policy Settings [HKEY_USERS\S-1-5-18] > -> HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System -> < CurrentVersion Policy Settings [HKEY_USERS\S-1-5-19] > -> HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer -> HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer \\"NoDriveTypeAutoRun" -> [145] -> File not found < CurrentVersion Policy Settings [HKEY_USERS\S-1-5-20] > -> HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer -> HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer \\"NoDriveTypeAutoRun" -> [145] -> File not found < CurrentVersion Policy Settings [HKEY_USERS\S-1-5-21-2416478673-1163175544-1116799606-1005] > -> HKEY_USERS\S-1-5-21-2416478673-1163175544-1116799606-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer -> HKEY_USERS\S-1-5-21-2416478673-1163175544-1116799606-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer \\"NoDriveTypeAutoRun" -> [FF 00 00 00 [binary data]] -> File not found < CurrentVersion Policy Settings [HKEY_USERS\S-1-5-21-2416478673-1163175544-1116799606-1005] > -> HKEY_USERS\S-1-5-21-2416478673-1163175544-1116799606-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System -> < Internet Explorer Menu Extensions [HKEY_CURRENT_USER\] > -> HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\ -> &Download All with FlashGet -> Reg Error: Value error. [Reg Error: Value error.] -> File not found &Download with FlashGet -> Reg Error: Value error. [Reg Error: Value error.] -> File not found Easy-WebPrint Add To Print List -> %ProgramFiles%\Canon\Easy-WebPrint\Toolband.dll [res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_AddToList.html] -> [2006/06/09 14:39:38 | 00,552,960 | ---- | M] () Easy-WebPrint High Speed Print -> %ProgramFiles%\Canon\Easy-WebPrint\Toolband.dll [res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_HSPrint.html] -> [2006/06/09 14:39:38 | 00,552,960 | ---- | M] () Easy-WebPrint Preview -> %ProgramFiles%\Canon\Easy-WebPrint\Toolband.dll [res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_Preview.html] -> [2006/06/09 14:39:38 | 00,552,960 | ---- | M] () Easy-WebPrint Print -> %ProgramFiles%\Canon\Easy-WebPrint\Toolband.dll [res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_Print.html] -> [2006/06/09 14:39:38 | 00,552,960 | ---- | M] () Open using &Advanced JPEG Compressor -> %ProgramFiles%\Advanced JPEG Compressor\ajcieex.htm [C:\Program Files\Advanced JPEG Compressor\ajcieex.htm] -> [2001/11/21 19:10:28 | 00,000,415 | ---- | M] () Snip to my eSnips account -> %ProgramFiles%\eSnips\res\SnipIt.htm [C:\Program Files\eSnips\res\SnipIt.htm] -> [2005/04/14 12:39:30 | 00,000,301 | ---- | M] () 用維棠下載視頻 -> %UserProfile%\My Documents\#My DL\Vidown\vd_link.htm [C:\Documents and Settings\simone\My Documents\#My DL\Vidown\vd_link.htm] -> [2007/06/10 22:47:20 | 00,001,838 | ---- | M] () < Internet Explorer Menu Extensions [HKEY_USERS\S-1-5-21-2416478673-1163175544-1116799606-1005\] > -> HKEY_USERS\S-1-5-21-2416478673-1163175544-1116799606-1005\Software\Microsoft\Internet Explorer\MenuExt\ -> &Download All with FlashGet -> Reg Error: Value error. [Reg Error: Value error.] -> File not found &Download with FlashGet -> Reg Error: Value error. [Reg Error: Value error.] -> File not found Easy-WebPrint Add To Print List -> %ProgramFiles%\Canon\Easy-WebPrint\Toolband.dll [res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_AddToList.html] -> [2006/06/09 14:39:38 | 00,552,960 | ---- | M] () Easy-WebPrint High Speed Print -> %ProgramFiles%\Canon\Easy-WebPrint\Toolband.dll [res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_HSPrint.html] -> [2006/06/09 14:39:38 | 00,552,960 | ---- | M] () Easy-WebPrint Preview -> %ProgramFiles%\Canon\Easy-WebPrint\Toolband.dll [res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_Preview.html] -> [2006/06/09 14:39:38 | 00,552,960 | ---- | M] () Easy-WebPrint Print -> %ProgramFiles%\Canon\Easy-WebPrint\Toolband.dll [res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_Print.html] -> [2006/06/09 14:39:38 | 00,552,960 | ---- | M] () Open using &Advanced JPEG Compressor -> %ProgramFiles%\Advanced JPEG Compressor\ajcieex.htm [C:\Program Files\Advanced JPEG Compressor\ajcieex.htm] -> [2001/11/21 19:10:28 | 00,000,415 | ---- | M] () Snip to my eSnips account -> %ProgramFiles%\eSnips\res\SnipIt.htm [C:\Program Files\eSnips\res\SnipIt.htm] -> [2005/04/14 12:39:30 | 00,000,301 | ---- | M] () 用維棠下載視頻 -> %UserProfile%\My Documents\#My DL\Vidown\vd_link.htm [C:\Documents and Settings\simone\My Documents\#My DL\Vidown\vd_link.htm] -> [2007/06/10 22:47:20 | 00,001,838 | ---- | M] () < Internet Explorer Extensions [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\ -> {08B0E5C0-4FCB-11CF-AAA5-00401C608501}:{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBC} [HKLM] -> %ProgramFiles%\Java\jre1.6.0_06\bin\npjpi160_06.dll [Menu: Sun Java 主控台] -> [2008/03/25 04:28:01 | 00,132,496 | ---- | M] (Sun Microsystems, Inc.) {B863453A-26C3-4e1f-A54D-A2CD196348E9}:Exec [HKLM] -> %ProgramFiles%\ICQLite\ICQLite.exe [Button: ICQ Lite] -> [2006/07/11 18:06:40 | 03,144,800 | ---- | M] (ICQ Ltd.) {B863453A-26C3-4e1f-A54D-A2CD196348E9}:Exec [HKLM] -> %ProgramFiles%\ICQLite\ICQLite.exe [Menu: ICQ Lite] -> [2006/07/11 18:06:40 | 03,144,800 | ---- | M] (ICQ Ltd.) {e2e2dd38-d088-4134-82b7-f2ba38496583}:Exec [HKLM] -> %SystemRoot%\Network Diagnostic\xpnetdiag.exe [Menu: @xpsp3res.dll,-20001] -> [2006/10/10 20:44:50 | 00,557,568 | ---- | M] (Microsoft Corporation) < Internet Explorer Extensions [HKEY_CURRENT_USER\] > -> HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Extensions\ -> CmdMapping\\"{08B0E5C0-4FCB-11CF-AAA5-00401C608501}" [HKLM] -> %SystemRoot%\System32\msjava.dll [Web Browser Applet Control] -> [2003/02/28 18:26:26 | 00,947,472 | ---- | M] (Microsoft Corporation) CmdMapping\\"{09EA1F80-F40A-11D1-B792-444553540001}" [HKLM] -> [Reg Error: Key error.] -> File not found CmdMapping\\"{1F460357-8A94-4D71-9CA3-AA4ACF32ED8E}" [HKLM] -> [Reg Error: Key error.] -> File not found CmdMapping\\"{274700CA-7D69-4114-B4FC-D64D810CA56D}" [HKLM] -> [Reg Error: Key error.] -> File not found CmdMapping\\"{B863453A-26C3-4e1f-A54D-A2CD196348E9}" [HKLM] -> %ProgramFiles%\ICQLite\ICQLite.exe [ICQ Lite] -> [2006/07/11 18:06:40 | 03,144,800 | ---- | M] (ICQ Ltd.) CmdMapping\\"{C7B0FC38-DBF2-422E-8A90-AF58BBBC3C6A}" [HKLM] -> [Reg Error: Key error.] -> File not found CmdMapping\\"{D6E814A0-E0C5-11d4-8D29-0050BA6940E3}" [HKLM] -> [Reg Error: Key error.] -> File not found CmdMapping\\"{DFB852A3-47F8-48C4-A200-58CAB36FD2A2}" [HKLM] -> [Reg Error: Key error.] -> File not found CmdMapping\\"{e2e2dd38-d088-4134-82b7-f2ba38496583}" [HKLM] -> %SystemRoot%\Network Diagnostic\xpnetdiag.exe [@xpsp3res.dll,-20001] -> [2006/10/10 20:44:50 | 00,557,568 | ---- | M] (Microsoft Corporation) < Internet Explorer Extensions [HKEY_USERS\.DEFAULT\] > -> HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\Extensions\ -> CmdMapping\\"{08B0E5C0-4FCB-11CF-AAA5-00401C608501}" [HKLM] -> %SystemRoot%\System32\msjava.dll [Web Browser Applet Control] -> [2003/02/28 18:26:26 | 00,947,472 | ---- | M] (Microsoft Corporation) CmdMapping\\"{D6E814A0-E0C5-11d4-8D29-0050BA6940E3}" [HKLM] -> [Reg Error: Key error.] -> File not found CmdMapping\\"{FB5F1910-F110-11d2-BB9E-00C04F795683}" [HKLM] -> [Reg Error: Key error.] -> File not found < Internet Explorer Extensions [HKEY_USERS\S-1-5-18\] > -> HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\Extensions\ -> CmdMapping\\"{08B0E5C0-4FCB-11CF-AAA5-00401C608501}" [HKLM] -> %SystemRoot%\System32\msjava.dll [Web Browser Applet Control] -> [2003/02/28 18:26:26 | 00,947,472 | ---- | M] (Microsoft Corporation) CmdMapping\\"{D6E814A0-E0C5-11d4-8D29-0050BA6940E3}" [HKLM] -> [Reg Error: Key error.] -> File not found CmdMapping\\"{FB5F1910-F110-11d2-BB9E-00C04F795683}" [HKLM] -> [Reg Error: Key error.] -> File not found < Internet Explorer Extensions [HKEY_USERS\S-1-5-21-2416478673-1163175544-1116799606-1005\] > -> HKEY_USERS\S-1-5-21-2416478673-1163175544-1116799606-1005\Software\Microsoft\Internet Explorer\Extensions\ -> CmdMapping\\"{08B0E5C0-4FCB-11CF-AAA5-00401C608501}" [HKLM] -> %SystemRoot%\System32\msjava.dll [Web Browser Applet Control] -> [2003/02/28 18:26:26 | 00,947,472 | ---- | M] (Microsoft Corporation) CmdMapping\\"{09EA1F80-F40A-11D1-B792-444553540001}" [HKLM] -> [Reg Error: Key error.] -> File not found CmdMapping\\"{1F460357-8A94-4D71-9CA3-AA4ACF32ED8E}" [HKLM] -> [Reg Error: Key error.] -> File not found CmdMapping\\"{274700CA-7D69-4114-B4FC-D64D810CA56D}" [HKLM] -> [Reg Error: Key error.] -> File not found CmdMapping\\"{B863453A-26C3-4e1f-A54D-A2CD196348E9}" [HKLM] -> %ProgramFiles%\ICQLite\ICQLite.exe [ICQ Lite] -> [2006/07/11 18:06:40 | 03,144,800 | ---- | M] (ICQ Ltd.) CmdMapping\\"{C7B0FC38-DBF2-422E-8A90-AF58BBBC3C6A}" [HKLM] -> [Reg Error: Key error.] -> File not found CmdMapping\\"{D6E814A0-E0C5-11d4-8D29-0050BA6940E3}" [HKLM] -> [Reg Error: Key error.] -> File not found CmdMapping\\"{DFB852A3-47F8-48C4-A200-58CAB36FD2A2}" [HKLM] -> [Reg Error: Key error.] -> File not found CmdMapping\\"{e2e2dd38-d088-4134-82b7-f2ba38496583}" [HKLM] -> %SystemRoot%\Network Diagnostic\xpnetdiag.exe [@xpsp3res.dll,-20001] -> [2006/10/10 20:44:50 | 00,557,568 | ---- | M] (Microsoft Corporation) < Internet Explorer Plugins [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Plugins\ -> PluginsPageFriendlyName -> Microsoft ActiveX Gallery -> PluginsPage -> http://activex.microsoft.com/controls/find.asp?ext=%s&mime=%s -> < Default Prefix > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\DefaultPrefix "" -> http:// < Trusted Sites Domains [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> [Key] 5443 domain(s) found. -> 49 domain(s) and sub-domain(s) not assigned to a zone. < Trusted Sites Ranges [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> [Key] 77 range(s) found. -> < Trusted Sites Domains [HKEY_CURRENT_USER\] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> [Key] 7689 domain(s) found. -> .[msn] -> My Computer -> gpl.download_free.fr [*] -> 信任的網站 -> www_google.com [http] -> 信任的網站 -> 56 domain(s) and sub-domain(s) not assigned to a zone. < Trusted Sites Ranges [HKEY_CURRENT_USER\] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> [Key] 77 range(s) found. -> < Trusted Sites Domains [HKEY_USERS\.DEFAULT\] > -> HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> [Key] 5442 domain(s) found. -> 48 domain(s) and sub-domain(s) not assigned to a zone. < Trusted Sites Ranges [HKEY_USERS\.DEFAULT\] > -> HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> [Key] 77 range(s) found. -> < Trusted Sites Domains [HKEY_USERS\S-1-5-18\] > -> HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> [Key] 5442 domain(s) found. -> 48 domain(s) and sub-domain(s) not assigned to a zone. < Trusted Sites Ranges [HKEY_USERS\S-1-5-18\] > -> HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> [Key] 77 range(s) found. -> < Trusted Sites Domains [HKEY_USERS\S-1-5-19\] > -> HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> [Key] 0 domain(s) found. -> < Trusted Sites Ranges [HKEY_USERS\S-1-5-19\] > -> HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> [Key] 0 range(s) found. -> < Trusted Sites Domains [HKEY_USERS\S-1-5-20\] > -> HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> [Key] 0 domain(s) found. -> < Trusted Sites Ranges [HKEY_USERS\S-1-5-20\] > -> HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> [Key] 0 range(s) found. -> < Trusted Sites Domains [HKEY_USERS\S-1-5-21-2416478673-1163175544-1116799606-1005\] > -> HKEY_USERS\S-1-5-21-2416478673-1163175544-1116799606-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> HKEY_USERS\S-1-5-21-2416478673-1163175544-1116799606-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> [Key] 7689 domain(s) found. -> .[msn] -> My Computer -> gpl.download_free.fr [*] -> 信任的網站 -> www_google.com [http] -> 信任的網站 -> 56 domain(s) and sub-domain(s) not assigned to a zone. < Trusted Sites Ranges [HKEY_USERS\S-1-5-21-2416478673-1163175544-1116799606-1005\] > -> HKEY_USERS\S-1-5-21-2416478673-1163175544-1116799606-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> HKEY_USERS\S-1-5-21-2416478673-1163175544-1116799606-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> [Key] 77 range(s) found. -> < Downloaded Program Files > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\ -> {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} [HKLM] -> [Java Plug-in 1.6.0_06] -> DirectAnimation Java Classes [HKLM] -> file://C:\WINDOWS\Java\classes\dajava.cab [Reg Error: Key error.] -> Microsoft XML Parser for Java [HKLM] -> file://C:\WINDOWS\Java\classes\xmldso.cab [Reg Error: Key error.] -> < DNS Name Servers [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Adapters\ -> {0C567889-F206-4851-8BF6-E8E9169BA9F9} -> (Intel(R) PRO/100 VE Network Connection) -> {33CE4BF5-2E6D-4829-850A-30DF62C99FDF} -> (1394 Net Adapter) -> {35AC4EED-1FE5-47B0-9DE0-0151F9F7DEA0} -> () -> {8F3D6839-07F4-46E4-864A-A941F10C9664} -> (Intel(R) PRO/Wireless 2200BG Network Connection) -> < Winlogon settings [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon -> *Shell* -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell -> Explorer.exe -> %SystemRoot%\Explorer.exe -> [2004/08/12 09:16:20 | 00,976,896 | ---- | M] (Microsoft Corporation) *MultiFile Done* -> -> < Winlogon\Notify settings [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ -> igfxcui -> %SystemRoot%\system32\igfxsrvc.dll -> [2004/01/16 00:06:18 | 00,323,584 | ---- | M] (Intel Corporation) < Domain Profile Authorized Applications List > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List -> "%windir%\Network Diagnostic\xpnetdiag.exe" -> C:\WINDOWS\Network Diagnostic\xpnetdiag.exe [%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000] -> [2006/10/10 20:44:50 | 00,557,568 | ---- | M] (Microsoft Corporation) "%windir%\system32\sessmgr.exe" -> C:\WINDOWS\system32\sessmgr.exe [%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019] -> [2004/08/12 09:16:22 | 00,136,704 | ---- | M] (Microsoft Corporation) "C:\Program Files\Windows Live\Messenger\livecall.exe" -> C:\Program Files\Windows Live\Messenger\livecall.exe [C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)] -> [2007/10/02 17:18:24 | 00,304,488 | ---- | M] (Microsoft Corporation) "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" -> C:\Program Files\Windows Live\Messenger\msnmsgr.exe [C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger] -> [2007/10/18 11:34:02 | 05,724,184 | ---- | M] (Microsoft Corporation) < Standard Profile Authorized Applications List > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List -> "%windir%\Network Diagnostic\xpnetdiag.exe" -> C:\WINDOWS\Network Diagnostic\xpnetdiag.exe [%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000] -> [2006/10/10 20:44:50 | 00,557,568 | ---- | M] (Microsoft Corporation) "%windir%\system32\sessmgr.exe" -> C:\WINDOWS\system32\sessmgr.exe [%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019] -> [2004/08/12 09:16:22 | 00,136,704 | ---- | M] (Microsoft Corporation) "C:\Documents and Settings\simone\Local Settings\Temp\IXP000.TMP\SMPCSetup.exe" -> C:\Documents and Settings\simone\Local Settings\Temp\IXP000.TMP\SMPCSetup.exe [C:\Documents and Settings\simone\Local Settings\Temp\IXP000.TMP\SMPCSetup.exe:*:Enabled:SMPCSetup] -> File not found "C:\Documents and Settings\simone\Local Settings\Temp\IXP000.TMP\smwinvnc.exe" -> C:\Documents and Settings\simone\Local Settings\Temp\IXP000.TMP\smwinvnc.exe [C:\Documents and Settings\simone\Local Settings\Temp\IXP000.TMP\smwinvnc.exe:*:Enabled:TightVNC Win32 Server] -> File not found "C:\Program Files\ICQLite\ICQLite.exe" -> C:\Program Files\ICQLite\ICQLite.exe [C:\Program Files\ICQLite\ICQLite.exe:*:Enabled:ICQ Lite] -> [2006/07/11 18:06:40 | 03,144,800 | ---- | M] (ICQ Ltd.) "C:\Program Files\Windows Live\Messenger\livecall.exe" -> C:\Program Files\Windows Live\Messenger\livecall.exe [C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)] -> [2007/10/02 17:18:24 | 00,304,488 | ---- | M] (Microsoft Corporation) "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" -> C:\Program Files\Windows Live\Messenger\msnmsgr.exe [C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger] -> [2007/10/18 11:34:02 | 05,724,184 | ---- | M] (Microsoft Corporation) "C:\WINDOWS\system32\drivers\svchost.exe" -> C:\WINDOWS\system32\drivers\svchost.exe [C:\WINDOWS\system32\drivers\svchost.exe:*:Disabled:svchost] -> File not found < SafeBoot AlternateShell [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot -> "AlternateShell" -> cmd.exe -> < CDROM Autorun Setting [HKEY_LOCAL_MACHINE]> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom -> "AutoRun" -> 1 -> "DisplayName" -> CD-ROM Driver -> "ImagePath" -> %SystemRoot%\System32\DRIVERS\cdrom.sys [System32\DRIVERS\cdrom.sys] -> [2004/08/04 13:59:52 | 00,049,536 | ---- | M] (Microsoft Corporation) < MountPoints2 [HKEY_CURRENT_USER] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2 -> [Registry - Additional Scans - Safe List] < EventViewer Logs - Last 10 Errors > -> Event Information -> Description Application [ Error ] 19/3/2009 21:44:18 Computer Name = SNNECP | Source = Application Error | ID = 1000 -> Description = 失敗的應用程式 svchost.exe,版本 5.1.2600.2180,失敗的模組 netapi32.dll,版本 5.1.2600.2180,錯誤位址 0x0000a3c0。 Application [ Error ] 20/3/2009 14:36:49 Computer Name = SNNECP | Source = Application Error | ID = 1000 -> Description = 失敗的應用程式 svchost.exe,版本 5.1.2600.2180,失敗的模組 unknown,版本 0.0.0.0,錯誤位址 0x6f8917c2。 Application [ Error ] 21/3/2009 4:12:23 Computer Name = SNNECP | Source = Application Error | ID = 1000 -> Description = 失敗的應用程式 svchost.exe,版本 5.1.2600.2180,失敗的模組 unknown,版本 0.0.0.0,錯誤位址 0x6f8916e2。 Application [ Error ] 21/3/2009 6:58:00 Computer Name = SNNECP | Source = Application Error | ID = 1000 -> Description = 失敗的應用程式 svchost.exe,版本 5.1.2600.2180,失敗的模組 unknown,版本 0.0.0.0,錯誤位址 0x001f1cb0。 Application [ Error ] 21/3/2009 7:34:11 Computer Name = SNNECP | Source = Application Error | ID = 1000 -> Description = 失敗的應用程式 svchost.exe,版本 5.1.2600.2180,失敗的模組 unknown,版本 0.0.0.0,錯誤位址 0x6f8916e2。 Application [ Error ] 21/3/2009 7:52:32 Computer Name = SNNECP | Source = Application Error | ID = 1000 -> Description = 失敗的應用程式 svchost.exe,版本 5.1.2600.2180,失敗的模組 netapi32.dll,版本 5.1.2600.2180,錯誤位址 0x0000a3c0。 Application [ Error ] 21/3/2009 8:25:33 Computer Name = SNNECP | Source = Application Error | ID = 1000 -> Description = 失敗的應用程式 svchost.exe,版本 5.1.2600.2180,失敗的模組 unknown,版本 0.0.0.0,錯誤位址 0x6f8917c2。 Application [ Error ] 21/3/2009 15:11:41 Computer Name = SNNECP | Source = Application Error | ID = 1000 -> Description = 失敗的應用程式 svchost.exe,版本 5.1.2600.2180,失敗的模組 unknown,版本 0.0.0.0,錯誤位址 0x6f8916e2。 Application [ Error ] 22/3/2009 12:43:14 Computer Name = SNNECP | Source = Application Error | ID = 1000 -> Description = 失敗的應用程式 svchost.exe,版本 5.1.2600.2180,失敗的模組 unknown,版本 0.0.0.0,錯誤位址 0x001f1cb0。 Application [ Error ] 22/3/2009 13:18:36 Computer Name = SNNECP | Source = Application Error | ID = 1000 -> Description = 失敗的應用程式 svchost.exe,版本 5.1.2600.2180,失敗的模組 unknown,版本 0.0.0.0,錯誤位址 0x6f8916e2。 System [ Error ] 22/3/2009 18:07:59 Computer Name = SNNECP | Source = Service Control Manager | ID = 7034 -> Description = WebClient 服務意外地終止。已經發生 1 次。 System [ Error ] 22/3/2009 18:08:29 Computer Name = SNNECP | Source = Service Control Manager | ID = 7023 -> Description = Remote Access Connection Manager 服務因下列錯誤而終止: %%126 System [ Error ] 22/3/2009 18:51:18 Computer Name = SNNECP | Source = Service Control Manager | ID = 7023 -> Description = Remote Access Connection Manager 服務因下列錯誤而終止: %%126 System [ Error ] 23/3/2009 5:02:57 Computer Name = SNNECP | Source = Service Control Manager | ID = 7023 -> Description = System Event Notification 服務因下列錯誤而終止: %%126 System [ Error ] 23/3/2009 5:03:07 Computer Name = SNNECP | Source = Service Control Manager | ID = 7023 -> Description = Remote Access Connection Manager 服務因下列錯誤而終止: %%126 System [ Error ] 23/3/2009 5:25:22 Computer Name = SNNECP | Source = Service Control Manager | ID = 7023 -> Description = Remote Access Connection Manager 服務因下列錯誤而終止: %%126 System [ Error ] 23/3/2009 6:05:25 Computer Name = SNNECP | Source = Service Control Manager | ID = 7023 -> Description = Remote Access Connection Manager 服務因下列錯誤而終止: %%126 System [ Error ] 23/3/2009 6:05:41 Computer Name = SNNECP | Source = Service Control Manager | ID = 7023 -> Description = Remote Access Connection Manager 服務因下列錯誤而終止: %%126 System [ Error ] 23/3/2009 6:06:07 Computer Name = SNNECP | Source = Service Control Manager | ID = 7023 -> Description = Remote Access Connection Manager 服務因下列錯誤而終止: %%126 System [ Error ] 23/3/2009 6:12:38 Computer Name = SNNECP | Source = Service Control Manager | ID = 7023 -> Description = System Event Notification 服務因下列錯誤而終止: %%126 [Files/Folders - Created Within 30 Days] OTScanIt2 -> %UserProfile%\桌面\OTScanIt2 -> [2009/03/23 18:49:52 | 00,000,000 | ---D | C] Recent -> %UserProfile%\Recent -> [2009/03/23 18:47:01 | 00,000,000 | RH-D | C] OTScanIt2.exe -> %UserProfile%\桌面\OTScanIt2.exe -> [2009/03/23 18:03:53 | 00,662,639 | ---- | C] () DoctorWeb -> %UserProfile%\DoctorWeb -> [2009/03/23 01:10:18 | 00,000,000 | ---D | C] Books_LINKS_FDA Ban -> %UserProfile%\My Documents\Books_LINKS_FDA Ban -> [2009/03/23 00:54:03 | 00,000,000 | ---D | C] drweb-cureit.exe -> %UserProfile%\桌面\drweb-cureit.exe -> [2009/03/23 00:52:35 | 13,180,328 | ---- | C] (Doctor Web, Ltd.) press -> %UserProfile%\桌面\press -> [2009/03/23 00:49:44 | 00,000,000 | ---D | C] VIDEOS+pics-to be rearranged -> %UserProfile%\桌面\VIDEOS+pics-to be rearranged -> [2009/03/23 00:33:14 | 00,000,000 | ---D | C] QuickTime -> %ProgramFiles%\QuickTime -> [2009/03/21 19:52:42 | 00,000,000 | ---D | C] Apple Computer -> %AllUsersProfile%\Application Data\Apple Computer -> [2009/03/21 19:52:39 | 00,000,000 | ---D | C] Mattress -> %UserProfile%\My Documents\Mattress -> [2009/03/18 01:07:04 | 00,000,000 | ---D | C] Rooter$ -> %SystemDrive%\Rooter$ -> [2009/03/16 16:23:15 | 00,000,000 | ---D | C] Rooter.exe -> %UserProfile%\桌面\Rooter.exe -> [2009/03/16 16:11:33 | 00,267,612 | ---- | C] () OTListIt2.exe -> %UserProfile%\桌面\OTListIt2.exe -> [2009/03/16 15:57:45 | 00,499,712 | ---- | C] (OldTimer Tools) news -> %UserProfile%\桌面\news -> [2009/03/16 06:24:14 | 00,000,000 | ---D | C] FORUM -> %UserProfile%\桌面\FORUM -> [2009/03/16 04:48:29 | 00,000,000 | ---D | C] Malwarebytes -> %AppData%\Malwarebytes -> [2009/03/14 05:11:15 | 00,000,000 | ---D | C] Malwarebytes -> %AllUsersProfile%\Application Data\Malwarebytes -> [2009/03/14 05:11:00 | 00,000,000 | ---D | C] #DL_malwarebytes -> %UserProfile%\My Documents\#DL_malwarebytes -> [2009/03/14 05:09:21 | 00,000,000 | ---D | C] #HijackThis -> %UserProfile%\My Documents\#HijackThis -> [2009/03/08 07:25:08 | 00,000,000 | ---D | C] avgntdd.sys -> %SystemRoot%\System32\drivers\avgntdd.sys -> [2009/03/05 03:54:56 | 00,045,376 | ---- | C] (Avira GmbH) avgntmgr.sys -> %SystemRoot%\System32\drivers\avgntmgr.sys -> [2009/03/05 03:54:56 | 00,022,336 | ---- | C] (Avira GmbH) ssmdrv.sys -> %SystemRoot%\System32\drivers\ssmdrv.sys -> [2009/03/05 03:54:55 | 00,028,352 | ---- | C] (Avira GmbH) avipbb.sys -> %SystemRoot%\System32\drivers\avipbb.sys -> [2009/03/05 03:54:52 | 00,075,072 | ---- | C] (Avira GmbH) Avira -> %ProgramFiles%\Avira -> [2009/03/05 03:54:51 | 00,000,000 | ---D | C] Avira -> %AllUsersProfile%\Application Data\Avira -> [2009/03/05 03:54:51 | 00,000,000 | ---D | C] Press Release-resize -> %UserProfile%\桌面\Press Release-resize -> [2009/03/03 17:29:48 | 00,000,000 | ---D | C] IRDC.URL -> %UserProfile%\桌面\IRDC.URL -> [2009/02/24 13:14:29 | 00,000,048 | ---- | C] () CCleaner -> %ProgramFiles%\CCleaner -> [2009/02/23 16:44:29 | 00,000,000 | ---D | C] [Files/Folders - Modified Within 30 Days] 1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> necmfk.ini -> %SystemRoot%\necmfk.ini -> [2009/03/23 18:12:28 | 00,000,968 | ---- | M] () 1-Click Maintenance.job -> %SystemRoot%\tasks\1-Click Maintenance.job -> [2009/03/23 18:12:26 | 00,000,488 | ---- | M] () SA.DAT -> %SystemRoot%\tasks\SA.DAT -> [2009/03/23 18:12:26 | 00,000,006 | -H-- | M] () bootstat.dat -> %SystemRoot%\bootstat.dat -> [2009/03/23 18:12:22 | 00,002,048 | --S- | M] () NTUSER.DAT -> %UserProfile%\NTUSER.DAT -> [2009/03/23 18:08:55 | 19,136,512 | ---- | M] () ntuser.ini -> %UserProfile%\ntuser.ini -> [2009/03/23 18:08:43 | 00,000,278 | -HS- | M] () OTScanIt2.exe -> %UserProfile%\桌面\OTScanIt2.exe -> [2009/03/23 18:03:56 | 00,662,639 | ---- | M] () drweb-cureit.exe -> %UserProfile%\桌面\drweb-cureit.exe -> [2009/03/23 01:07:56 | 13,180,328 | ---- | M] (Doctor Web, Ltd.) DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini -> %UserProfile%\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini -> [2009/03/23 00:40:10 | 00,059,904 | ---- | M] () AppleSoftwareUpdate.job -> %SystemRoot%\tasks\AppleSoftwareUpdate.job -> [2009/03/21 19:41:03 | 00,000,284 | ---- | M] () Rooter.exe -> %UserProfile%\桌面\Rooter.exe -> [2009/03/16 16:11:45 | 00,267,612 | ---- | M] () OTListIt2.exe -> %UserProfile%\桌面\OTListIt2.exe -> [2009/03/16 15:57:46 | 00,499,712 | ---- | M] (OldTimer Tools) wpa.dbl -> %SystemRoot%\System32\wpa.dbl -> [2009/03/16 01:07:46 | 00,001,170 | ---- | M] () GDIPFONTCACHEV1.DAT -> %AppData%\GDIPFONTCACHEV1.DAT -> [2009/03/13 01:06:48 | 00,027,328 | ---- | M] () GDIPFONTCACHEV1.DAT -> %UserProfile%\Local Settings\Application Data\GDIPFONTCACHEV1.DAT -> [2009/03/10 00:13:45 | 00,027,328 | ---- | M] () FNTCACHE.DAT -> %SystemRoot%\System32\FNTCACHE.DAT -> [2009/03/09 23:05:17 | 00,128,504 | ---- | M] () AUDIOGENIE2.DLL -> %SystemRoot%\System32\AUDIOGENIE2.DLL -> [2009/03/04 03:44:12 | 00,323,584 | ---- | M] (Stefan Toengi) HOSTS -> %SystemRoot%\System32\drivers\etc\HOSTS -> [2009/03/04 02:14:13 | 00,000,686 | ---- | M] () NJCOM.INI -> %SystemRoot%\NJCOM.INI -> [2009/02/26 00:09:26 | 00,000,376 | ---- | M] () hosts.20090226-035615.backup -> %SystemRoot%\System32\drivers\etc\hosts.20090226-035615.backup -> [2009/02/25 11:39:00 | 00,297,202 | R--- | M] () hosts.20090225-113900.backup -> %SystemRoot%\System32\drivers\etc\hosts.20090225-113900.backup -> [2009/02/25 11:19:07 | 00,000,686 | ---- | M] () IRDC.URL -> %UserProfile%\桌面\IRDC.URL -> [2009/02/24 13:14:29 | 00,000,048 | ---- | M] () qmgr0.dat -> %AllUsersProfile%\Application Data\Microsoft\Network\Downloader\qmgr0.dat -> [2008/12/29 18:52:12 | 00,004,232 | ---- | M] () qmgr1.dat -> %AllUsersProfile%\Application Data\Microsoft\Network\Downloader\qmgr1.dat -> [2008/12/29 18:52:06 | 00,005,488 | ---- | M] () data.dat -> %AllUsersProfile%\Application Data\Microsoft\Office\Data\data.dat -> [2004/12/03 01:19:27 | 00,001,388 | ---- | M] () hhcolreg.dat -> %AllUsersProfile%\Application Data\Microsoft\HTML Help\hhcolreg.dat -> [2004/10/21 08:14:14 | 00,001,305 | ---- | M] () [Files/Folders - Unicode - All] Eng_Chinese Sentences_吵架必?英?99句.doc -> C:\Documents and Settings\simone\My Documents\Eng_Chinese Sentences_吵架必备英语99句.doc -> [2008/01/30 02:07:41 | 00,032,256 | ---- | M] () 激?_MY QUOTES -> C:\Documents and Settings\simone\My Documents\激励_MY QUOTES -> [2009/03/03 18:21:34 | 00,000,000 | ---D | M] 生命來換取微薄的金錢.txt -> C:\Documents and Settings\simone\My Documents\激励_MY QUOTES\生命來換取微薄的金錢.txt -> [2008/12/03 13:30:03 | 00,001,262 | ---- | M] () 行遠必自邇.txt -> C:\Documents and Settings\simone\My Documents\激励_MY QUOTES\行遠必自邇.txt -> [2008/11/21 06:43:13 | 00,000,298 | ---- | M] () 讀萬卷書 不如行萬里路,行萬里路不如閱人無數,閱人無數不如名師指路.txt -> C:\Documents and Settings\simone\My Documents\激励_MY QUOTES\讀萬卷書 不如行萬里路,行萬里路不如閱人無數,閱人無數不如名師指路.txt -> [2008/10/21 04:41:51 | 00,000,408 | ---- | M] () 激?_Related QUOTES -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES -> [2008/12/16 05:38:47 | 00,000,000 | ---D | M] #Books_發明疾病的人 -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\#Books_發明疾病的人 -> [2007/10/24 23:07:05 | 00,000,000 | ---D | M] Reclaiming our health-ISBN-10_0915811804_ISBN-13_978-0915811809.jpg -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\#Books_發明疾病的人\Reclaiming our health-ISBN-10_0915811804_ISBN-13_978-0915811809.jpg -> [2006/12/25 00:06:54 | 00,051,508 | ---- | M] () Thumbs.db -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\#Books_發明疾病的人\Thumbs.db -> [2007/11/13 18:19:34 | 00,009,728 | -HS- | M] () 一顆價值十億的藥丸.doc -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\#Books_發明疾病的人\一顆價值十億的藥丸.doc -> [2006/12/24 12:19:56 | 00,083,456 | ---- | M] () 別讓醫院殺了你-critical condition.doc -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\#Books_發明疾病的人\別讓醫院殺了你-critical condition.doc -> [2006/12/24 11:12:24 | 00,198,144 | ---- | M] () 神奇的輔?Q10(CoQ10)Ⅰ+ II.doc -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\#Books_發明疾病的人\神奇的輔酶Q10(CoQ10)Ⅰ+ II.doc -> [2006/12/25 09:35:00 | 00,044,544 | ---- | M] () 發明疾病的人.doc -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\#Books_發明疾病的人\發明疾病的人.doc -> [2006/12/24 11:52:18 | 00,063,488 | ---- | M] () 「心靈雞湯」.txt -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\「心靈雞湯」.txt -> [2004/12/05 04:32:17 | 00,003,142 | ---- | M] () birds of sorrow??地?想.txt -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\birds of sorrow执着地梦想.txt -> [2004/12/24 10:35:37 | 00,005,482 | ---- | M] () ebook網頁 -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\ebook網頁 -> [2007/11/07 02:45:55 | 00,000,000 | ---D | M] Untitled.URL -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\ebook網頁\Untitled.URL -> [2007/11/06 16:50:08 | 00,000,105 | ---- | M] () www.books-in-english.com - Your free book-downloads Audio books, stories, texts and e-books to print!.URL -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\ebook網頁\www.books-in-english.com - Your free book-downloads Audio books, stories, texts and e-books to print!.URL -> [2007/11/06 20:05:33 | 00,000,091 | ---- | M] () 中?成?典故 - 高清晰PDF下?-?代文?下?.URL -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\ebook網頁\中华成语典故 - 高清晰PDF下载-现代文学下载.URL -> [2007/11/06 20:43:26 | 00,000,078 | ---- | M] () 天堂的信---小故事中的大智慧下?-交?技巧下?.URL -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\ebook網頁\天堂的信---小故事中的大智慧下载-交际技巧下载.URL -> [2007/11/06 04:03:19 | 00,000,078 | ---- | M] () 成功 - 耕耘网在?????.URL -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\ebook網頁\成功 - 耕耘网在线学习视频.URL -> [2007/11/06 16:56:08 | 00,000,052 | ---- | M] () 成功在?一?网-成功站-每天?步一步??!.URL -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\ebook網頁\成功在线一点网-成功站-每天进步一步点点!.URL -> [2007/11/07 01:25:01 | 00,000,057 | ---- | M] () 成功?道-推荐????-每天?步一步??!.URL -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\ebook網頁\成功频道-推荐阅读图书-每天进步一步点点!.URL -> [2007/11/07 01:24:47 | 00,000,077 | ---- | M] () 迅雷旗下狗狗影?搜索-?什么幸?的人?幸?倒霉的人老倒霉.URL -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\ebook網頁\迅雷旗下狗狗影视搜索-为什么幸运的人总幸运倒霉的人老倒霉.URL -> [2007/11/06 16:24:09 | 00,000,175 | ---- | M] () ??的?渡者?子?--公益?子?免??子??子?下?.URL -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\ebook網頁\时间的摆渡者电子书--公益电子书免费电子书电子书下载.URL -> [2007/11/06 16:51:39 | 00,000,063 | ---- | M] () ?安之??行??大? - ?????料下?,???源.URL -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\ebook網頁\陈安之选对行业赚大钱 - 学习视频资料下载,学习资源.URL -> [2007/11/06 16:41:14 | 00,000,071 | ---- | M] () MOtivational ARTICLE_Ch -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\MOtivational ARTICLE_Ch -> [2008/11/21 06:37:56 | 00,000,000 | ---D | M] 30天 改 變 你 的 人 生 (安 東 尼 羅 賓 ).doc -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\MOtivational ARTICLE_Ch\30天 改 變 你 的 人 生 (安 東 尼 羅 賓 ).doc -> [2004/12/19 13:15:32 | 00,133,632 | ---- | M] () 5塊錢.txt -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\MOtivational ARTICLE_Ch\5塊錢.txt -> [2005/01/10 13:37:23 | 00,001,470 | ---- | M] () airline joke.txt -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\MOtivational ARTICLE_Ch\airline joke.txt -> [2005/03/14 23:46:15 | 00,011,978 | ---- | M] () asthma.pdf -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\MOtivational ARTICLE_Ch\asthma.pdf -> [2005/05/03 20:31:15 | 00,097,840 | ---- | M] () autism.doc -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\MOtivational ARTICLE_Ch\autism.doc -> [2005/04/29 17:00:19 | 00,050,688 | ---- | M] () BOOK REVIEW_CH.pdf -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\MOtivational ARTICLE_Ch\BOOK REVIEW_CH.pdf -> [2006/05/10 18:11:03 | 00,308,419 | ---- | M] () Honore de Balzac.txt -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\MOtivational ARTICLE_Ch\Honoré de Balzac.txt -> [2004/12/19 06:11:00 | 00,000,094 | ---- | M] () The Butterfly's Struggle.txt -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\MOtivational ARTICLE_Ch\The Butterfly's Struggle.txt -> [2005/03/14 23:32:51 | 00,007,148 | ---- | M] () Zinc and Manganese in the Schizophrenias.doc -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\MOtivational ARTICLE_Ch\Zinc and Manganese in the Schizophrenias.doc -> [2005/05/03 16:28:52 | 00,096,256 | ---- | M] () 一位是中國人,另一位是美國人.txt -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\MOtivational ARTICLE_Ch\一位是中國人,另一位是美國人.txt -> [2005/01/11 03:54:10 | 00,001,238 | ---- | M] () 一碗湯麵.txt -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\MOtivational ARTICLE_Ch\一碗湯麵.txt -> [2005/01/10 05:30:08 | 00,005,654 | ---- | M] () 心靈悸動.txt -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\MOtivational ARTICLE_Ch\心靈悸動.txt -> [2005/01/10 13:47:41 | 00,004,930 | ---- | M] () 水?歌?_重上井岡山.doc -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\MOtivational ARTICLE_Ch\水调歌头_重上井岡山.doc -> [2008/11/21 06:34:05 | 00,027,648 | ---- | M] () 出口與藉口.txt -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\MOtivational ARTICLE_Ch\出口與藉口.txt -> [2005/01/10 06:08:54 | 00,001,410 | ---- | M] () 好文章分享_農夫的一頭驢子.txt -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\MOtivational ARTICLE_Ch\好文章分享_農夫的一頭驢子.txt -> [2005/01/10 05:43:07 | 00,008,247 | ---- | M] () 成功?理人研??.doc -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\MOtivational ARTICLE_Ch\成功经理人研讨会.doc -> [2005/03/16 04:07:20 | 00,258,048 | ---- | M] () 成為老鷹,別當鴨子!你就是天生贏家!.txt -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\MOtivational ARTICLE_Ch\成為老鷹,別當鴨子!你就是天生贏家!.txt -> [2005/01/10 07:10:56 | 00,005,158 | ---- | M] () 成語故事_鄭人買履.doc -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\MOtivational ARTICLE_Ch\成語故事_鄭人買履.doc -> [2007/11/23 00:51:56 | 00,026,624 | ---- | M] () 有位智者即說_幾分容忍,幾分度量,終必能化干戈為玉帛。」.txt -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\MOtivational ARTICLE_Ch\有位智者即說_幾分容忍,幾分度量,終必能化干戈為玉帛。」.txt -> [2005/01/10 05:18:48 | 00,002,578 | ---- | M] () 你一小時可以賺多少錢.txt -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\MOtivational ARTICLE_Ch\你一小時可以賺多少錢.txt -> [2005/01/11 04:21:27 | 00,002,518 | ---- | M] () 你們剛才說的都不算.txt -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\MOtivational ARTICLE_Ch\你們剛才說的都不算.txt -> [2005/01/10 13:27:12 | 00,001,538 | ---- | M] () 把握身邊每一次相遇 ~.txt -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\MOtivational ARTICLE_Ch\把握身邊每一次相遇 ~.txt -> [2005/01/11 04:38:56 | 00,001,122 | ---- | M] () 改造自己.txt -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\MOtivational ARTICLE_Ch\改造自己.txt -> [2005/01/10 19:51:30 | 00,001,560 | ---- | M] () 李??披露他的?心世界.doc -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\MOtivational ARTICLE_Ch\李显龙披露他的内心世界.doc -> [2005/04/14 05:19:40 | 00,027,648 | ---- | M] () 沒有想過_當你汲汲營營的為了工作而加班.txt -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\MOtivational ARTICLE_Ch\沒有想過_當你汲汲營營的為了工作而加班.txt -> [2005/01/10 14:00:58 | 00,003,402 | ---- | M] () 兩個修女.txt -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\MOtivational ARTICLE_Ch\兩個修女.txt -> [2005/01/10 07:17:22 | 00,001,530 | ---- | M] () 科 學 家 -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\MOtivational ARTICLE_Ch\科 學 家 -> [2006/06/24 13:56:42 | 00,000,000 | ---D | M] Antoine-Laurent Lavoisier.txt -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\MOtivational ARTICLE_Ch\科 學 家\Antoine-Laurent Lavoisier.txt -> [2004/12/12 07:30:03 | 00,008,206 | ---- | M] () Antoine-Laurent Lavoisier拉瓦? (1743-1794).txt -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\MOtivational ARTICLE_Ch\科 學 家\Antoine-Laurent Lavoisier拉瓦锡 (1743-1794).txt -> [2004/12/12 07:08:20 | 00,006,236 | ---- | M] () 牛? (1643-1727).txt -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\MOtivational ARTICLE_Ch\科 學 家\牛顿 (1643-1727).txt -> [2004/12/12 07:06:52 | 00,023,900 | ---- | M] () 挫折感,早在年輕時用光了.txt -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\MOtivational ARTICLE_Ch\挫折感,早在年輕時用光了.txt -> [2005/01/10 06:15:14 | 00,003,698 | ---- | M] () 祝賀詞.txt -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\MOtivational ARTICLE_Ch\祝賀詞.txt -> [2006/01/29 01:21:12 | 00,000,156 | ---- | M] () 財富.成功.愛.txt -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\MOtivational ARTICLE_Ch\財富.成功.愛.txt -> [2005/01/10 13:50:33 | 00,001,804 | ---- | M] () 常用中文??的英?.doc -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\MOtivational ARTICLE_Ch\常用中文谚语的英译.doc -> [2005/08/19 18:13:54 | 00,030,720 | ---- | M] () 飯後來瓶清涼飲料超爽!然後…得腸癌!.txt -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\MOtivational ARTICLE_Ch\飯後來瓶清涼飲料超爽!然後…得腸癌!.txt -> [2005/01/10 19:49:41 | 00,001,340 | ---- | M] () 感 想_每一天,都是那麼的特別.txt -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\MOtivational ARTICLE_Ch\感 想_每一天,都是那麼的特別.txt -> [2005/01/10 05:19:04 | 00,001,676 | ---- | M] () 夢想成真.txt -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\MOtivational ARTICLE_Ch\夢想成真.txt -> [2005/12/23 02:23:20 | 00,000,060 | ---- | M] () ?雨新雨.txt -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\MOtivational ARTICLE_Ch\旧雨新雨.txt -> [2005/01/12 04:28:54 | 00,001,200 | ---- | M] () ?后忌.doc -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\MOtivational ARTICLE_Ch\饭后忌.doc -> [2005/02/26 06:44:01 | 00,029,184 | ---- | M] () Motivational_gy16.com -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\Motivational_gy16.com -> [2007/11/07 22:43:39 | 00,000,000 | ---D | M] 人生的兩個機會.doc -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\Motivational_gy16.com\人生的兩個機會.doc -> [2007/11/07 15:22:00 | 00,038,400 | ---- | M] () 人生經典格言.doc -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\Motivational_gy16.com\人生經典格言.doc -> [2007/11/07 15:55:07 | 00,026,624 | ---- | M] () 人活?要有?.doc -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\Motivational_gy16.com\人活着要有梦.doc -> [2007/11/06 16:47:20 | 00,025,600 | ---- | M] () 成功八步.doc -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\Motivational_gy16.com\成功八步.doc -> [2007/11/07 01:01:46 | 00,026,624 | ---- | M] () 成功是一架梯子.doc -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\Motivational_gy16.com\成功是一架梯子.doc -> [2007/11/07 17:44:06 | 00,028,160 | ---- | M] () 成功跳入招聘.doc -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\Motivational_gy16.com\成功跳入招聘.doc -> [2007/11/07 16:33:12 | 00,038,912 | ---- | M] () 科?家与死神.doc -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\Motivational_gy16.com\科学家与死神.doc -> [2007/11/07 16:02:32 | 00,024,576 | ---- | M] () 神匣.doc -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\Motivational_gy16.com\神匣.doc -> [2007/11/07 17:06:04 | 00,027,648 | ---- | M] () 推?秘?是什么-喬吉拉德.doc -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\Motivational_gy16.com\推销秘诀是什么-喬吉拉德.doc -> [2007/11/07 16:51:24 | 00,029,696 | ---- | M] () 教你一招——???言的心理秘?.doc -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\Motivational_gy16.com\教你一招——开会发言的心理秘诀.doc -> [2007/11/07 16:38:10 | 00,025,600 | ---- | M] () 跳蚤人生啟示錄.doc -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\Motivational_gy16.com\跳蚤人生啟示錄.doc -> [2007/11/07 15:53:48 | 00,030,720 | ---- | M] () ?聊就是人生的地?.doc -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\Motivational_gy16.com\无聊就是人生的地狱.doc -> [2007/11/07 15:59:48 | 00,025,600 | ---- | M] () ??你的优?.doc -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\Motivational_gy16.com\经营你的优势.doc -> [2007/11/07 17:21:30 | 00,028,160 | ---- | M] () poems.txt -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\poems.txt -> [2004/12/07 21:03:35 | 00,008,922 | ---- | M] () Thumbs.db -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\Thumbs.db -> [2008/12/16 05:38:47 | 00,006,144 | -HS- | M] () 一年之?在于春 A year.doc -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\一年之计在于春 A year.doc -> [2006/02/04 17:51:29 | 00,057,344 | ---- | M] () 人不怕笨、不怕醜,只怕沒方向.txt -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\人不怕笨、不怕醜,只怕沒方向.txt -> [2005/08/19 18:33:19 | 00,004,719 | ---- | M] () 人生不要提前出局--你不可忽視的健康財.txt -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\人生不要提前出局--你不可忽視的健康財.txt -> [2004/12/31 02:02:03 | 00,009,194 | ---- | M] () 人生如戲.txt -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\人生如戲.txt -> [2004/12/31 10:35:09 | 00,000,770 | ---- | M] () 人生啟示錄.txt -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\人生啟示錄.txt -> [2004/12/05 04:20:43 | 00,000,938 | ---- | M] () 小河流的旅程.txt -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\小河流的旅程.txt -> [2007/10/19 04:05:17 | 00,001,846 | ---- | M] () 不管別人是否摸魚,我一定要捕魚!.txt -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\不管別人是否摸魚,我一定要捕魚!.txt -> [2004/12/31 01:38:39 | 00,002,835 | ---- | M] () 五隻猴子的啟示.txt -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\五隻猴子的啟示.txt -> [2004/12/31 03:15:12 | 00,001,232 | ---- | M] () 分享如何成?成功的直??.doc -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\分享如何成为成功的直销员.doc -> [2007/10/24 18:34:18 | 00,052,736 | ---- | M] () 成功激??料_?什么要上成功??程的十二?理由.txt -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\成功激励资料_为什么要上成功学课程的十二个理由.txt -> [2004/12/15 02:56:28 | 00,012,652 | ---- | M] () 成語 .doc -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\成語 .doc -> [2007/10/26 22:39:55 | 00,274,432 | ---- | M] () 投 資 的 秘 訣.txt -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\投 資 的 秘 訣.txt -> [2004/12/05 06:48:13 | 00,003,748 | ---- | M] () 改 變_鬼與農夫.txt -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\改 變_鬼與農夫.txt -> [2004/12/05 04:02:15 | 00,002,660 | ---- | M] () 李 踐 -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\李 踐 -> [2008/11/21 06:25:19 | 00,000,000 | ---D | M] ( 李 踐 訪 談 之 二 )成功需要知行合一.doc -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\李 踐\( 李 踐 訪 談 之 二 )成功需要知行合一.doc -> [2004/12/17 00:09:05 | 00,046,592 | ---- | M] () (??集??裁李???) 成功必有方法.doc -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\李 踐\(风驰集团总裁李践访谈) 成功必有方法.doc -> [2004/12/16 23:09:35 | 00,055,296 | ---- | M] () 2做自己想做的人-李?行?成功?.txt -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\李 踐\2做自己想做的人-李践行动成功学.txt -> [2004/12/18 06:21:00 | 00,004,016 | ---- | M] () lijian.jpg -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\李 踐\lijian.jpg -> [2004/12/16 23:20:54 | 00,048,134 | ---- | M] () sample.bmp -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\李 踐\sample.bmp -> [2005/03/13 02:21:08 | 00,230,454 | ---- | M] () sample2.bmp -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\李 踐\sample2.bmp -> [2005/03/13 02:23:05 | 00,230,454 | ---- | M] () talk-lijian.jpg -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\李 踐\talk-lijian.jpg -> [2004/12/16 22:34:27 | 00,015,231 | ---- | M] () Thumbs.db -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\李 踐\Thumbs.db -> [2007/02/12 00:32:23 | 00,026,624 | -HS- | M] () 人与人之?只有很小的差异.txt -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\李 踐\人与人之间只有很小的差异.txt -> [2004/12/17 00:30:51 | 00,000,312 | ---- | M] () 如何提高自我价值.txt -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\李 踐\如何提高自我价值.txt -> [2004/12/15 07:25:20 | 00,003,456 | ---- | M] () 李 踐 _行 動 成 功 學 創 始 人.doc -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\李 踐\李 踐 _行 動 成 功 學 創 始 人.doc -> [2004/12/17 00:02:25 | 00,124,416 | ---- | M] () 李踐_討飯孩子的夢想成就了創業傳奇.doc -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\李 踐\李踐_討飯孩子的夢想成就了創業傳奇.doc -> [2008/11/10 01:20:19 | 00,038,912 | ---- | M] () 李? ....txt -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\李 踐\李践 ....txt -> [2004/12/15 07:29:41 | 00,002,226 | ---- | M] () 李???之三.txt -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\李 踐\李践访谈之三.txt -> [2004/12/17 00:40:05 | 00,005,000 | ---- | M] () 做自己想做的人-李?行?成功?.txt -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\李 踐\做自己想做的人-李践行动成功学.txt -> [2004/12/15 02:42:49 | 00,004,042 | ---- | M] () ?容?介.txt -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\李 踐\内容简介.txt -> [2004/12/17 01:02:04 | 00,001,802 | ---- | M] () 李嘉城﹕賺大錢比賺小錢容易.txt -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\李嘉城﹕賺大錢比賺小錢容易.txt -> [2008/10/15 18:27:59 | 00,000,078 | ---- | M] () 周嶸簡介.doc -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\周嶸簡介.doc -> [2008/10/10 15:10:39 | 00,025,088 | ---- | M] () 幸運,永遠跟隨勇敢實踐的人!.txt -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\幸運,永遠跟隨勇敢實踐的人!.txt -> [2004/12/31 02:18:32 | 00,004,901 | ---- | M] () 林梧桐_我的自傳.jpg -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\林梧桐_我的自傳.jpg -> [2007/10/30 05:33:18 | 00,033,428 | ---- | M] () 林梧桐病逝.doc -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\林梧桐病逝.doc -> [2007/10/30 05:39:35 | 00,040,448 | ---- | M] () 林梧桐愚公精神??云?.doc -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\林梧桐愚公精神开创云顶.doc -> [2007/10/30 05:53:22 | 00,051,712 | ---- | M] () 杯子和湖水的故事.doc -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\杯子和湖水的故事.doc -> [2007/10/15 03:13:24 | 00,025,600 | ---- | M] () 直銷世紀 -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\直銷世紀 -> [2007/10/24 18:45:35 | 00,000,000 | ---D | M] 「歸零」的人生無限寬廣.doc -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\直銷世紀\「歸零」的人生無限寬廣.doc -> [2007/10/24 14:55:53 | 00,027,136 | ---- | M] () Thumbs.db -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\直銷世紀\Thumbs.db -> [2007/11/13 18:19:36 | 00,024,064 | -HS- | M] () 中?直?网cndsa.com.URL -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\直銷世紀\中国直销网cndsa.com.URL -> [2007/10/24 15:04:40 | 00,000,074 | ---- | M] () 分享如何成?成功的直??_1cr88.com.URL -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\直銷世紀\分享如何成为成功的直销员_1cr88.com.URL -> [2007/10/24 18:45:06 | 00,000,083 | ---- | M] () 成功行銷領導者的基本心態.doc -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\直銷世紀\成功行銷領導者的基本心態.doc -> [2007/10/24 14:58:03 | 00,028,672 | ---- | M] () 我的成功.jpg -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\直銷世紀\我的成功.jpg -> [2007/10/24 14:34:21 | 00,416,095 | ---- | M] () 直銷世紀雜誌.jpg -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\直銷世紀\直銷世紀雜誌.jpg -> [2007/10/24 14:33:43 | 00,334,196 | ---- | M] () 知行合一.情義相融.doc -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\直銷世紀\知行合一.情義相融.doc -> [2007/10/24 15:03:51 | 00,030,208 | ---- | M] () 首頁 - 直銷百科-DSWiki.URL -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\直銷世紀\首頁 - 直銷百科-DSWiki.URL -> [2007/10/24 15:07:20 | 00,000,078 | ---- | M] () 從一數到十心想能事成.doc -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\直銷世紀\從一數到十心想能事成.doc -> [2007/10/24 15:00:41 | 00,028,160 | ---- | M] () 贏得一生.jpg -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\直銷世紀\贏得一生.jpg -> [2007/10/24 14:32:34 | 00,306,001 | ---- | M] () 直銷世紀訂單 -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\直銷世紀訂單 -> [2007/08/15 12:52:31 | 00,000,000 | ---D | M] 051002_10.JPG -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\直銷世紀訂單\051002_10.JPG -> [2007/08/15 02:35:42 | 00,061,023 | ---- | M] () mlm.jpg -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\直銷世紀訂單\mlm.jpg -> [2007/08/15 02:30:37 | 00,271,961 | ---- | M] () mlm-c.jpg -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\直銷世紀訂單\mlm-c.jpg -> [2007/08/15 02:33:58 | 00,279,576 | ---- | M] () Thumbs.db -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\直銷世紀訂單\Thumbs.db -> [2007/08/15 14:40:25 | 00,020,480 | -HS- | M] () 空杯心態.doc -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\空杯心態.doc -> [2007/10/15 03:16:27 | 00,024,576 | ---- | M] () 為自己創造一片天空.txt -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\為自己創造一片天空.txt -> [2004/12/31 01:10:04 | 00,001,403 | ---- | M] () 時間老人和科學家.doc -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\時間老人和科學家.doc -> [2007/10/26 00:59:56 | 00,038,912 | ---- | M] () 逃避不一定躲得過面對不一定最難受.doc -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\逃避不一定躲得過面對不一定最難受.doc -> [2006/02/04 18:05:42 | 00,063,488 | ---- | M] () 馬雲_永不放棄.doc -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\馬雲_永不放棄.doc -> [2008/10/10 10:17:26 | 00,164,864 | ---- | M] () 馬雲_永不放棄.jpg -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\馬雲_永不放棄.jpg -> [2008/10/10 10:15:47 | 00,165,805 | ---- | M] () 高效能人士的七???.doc -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\高效能人士的七个习惯.doc -> [2007/10/25 13:48:36 | 00,037,376 | ---- | M] () 做引導別人的尾燈.txt -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\做引導別人的尾燈.txt -> [2004/12/31 01:06:17 | 00,002,100 | ---- | M] () 張艾嘉的故事.txt -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\張艾嘉的故事.txt -> [2004/12/31 02:54:19 | 00,009,968 | ---- | M] () 提倡有靈魂的知識經濟.txt -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\提倡有靈魂的知識經濟.txt -> [2004/12/31 02:05:08 | 00,008,544 | ---- | M] () 愛因斯坦和牛頓有自閉症.doc -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\愛因斯坦和牛頓有自閉症.doc -> [2007/08/18 13:15:35 | 00,058,368 | ---- | M] () 錢不是萬能、沒錢萬萬不能」.txt -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\錢不是萬能、沒錢萬萬不能」.txt -> [2004/12/05 04:19:08 | 00,004,836 | ---- | M] () 蘋果裡的一顆星.txt -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\蘋果裡的一顆星.txt -> [2004/12/31 01:52:44 | 00,002,443 | ---- | M] () ??老人?.doc -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\时间老人说.doc -> [2007/10/26 01:17:42 | 00,032,256 | ---- | M] () ?“80后”:?斗改?命??在名言激?中前行--文化--人民网.URL -> C:\Documents and Settings\simone\My Documents\激励_Related QUOTES\给“80后”:奋斗改变命运 在名言激励中前行--文化--人民网.URL -> [2007/10/15 03:08:38 | 00,000,082 | ---- | M] () [Alternate Data Streams] @Alternate Data Stream - 0 bytes -> %UserProfile%\My Documents\Thumbs.db:encryptable [File - Lop Check] Application Data -> C:\Documents and Settings\Administrator\Application Data -> [2003/03/26 09:52:20 | 00,000,000 | RH-D | M] Application Data -> C:\Documents and Settings\All Users\Application Data -> [2009/03/21 19:52:39 | 00,000,000 | RH-D | M] ACD Systems -> C:\Documents and Settings\All Users\Application Data\ACD Systems -> [2007/02/21 00:51:43 | 00,000,000 | ---D | M] AVS4YOU -> C:\Documents and Settings\All Users\Application Data\AVS4YOU -> [2008/11/30 03:40:51 | 00,000,000 | ---D | M] CanonBJ -> C:\Documents and Settings\All Users\Application Data\CanonBJ -> [2007/04/12 01:01:08 | 00,000,000 | -H-D | M] CyberLink -> C:\Documents and Settings\All Users\Application Data\CyberLink -> [2004/06/18 12:33:51 | 00,000,000 | ---D | M] Fellowes -> C:\Documents and Settings\All Users\Application Data\Fellowes -> [2006/03/11 00:30:03 | 00,000,000 | ---D | M] MSN6 -> C:\Documents and Settings\All Users\Application Data\MSN6 -> [2004/10/12 23:24:41 | 00,000,000 | ---D | M] Nokia -> C:\Documents and Settings\All Users\Application Data\Nokia -> [2008/03/14 18:02:15 | 00,000,000 | ---D | M] PC Suite -> C:\Documents and Settings\All Users\Application Data\PC Suite -> [2008/03/14 18:15:07 | 00,000,000 | ---D | M] SBSI -> C:\Documents and Settings\All Users\Application Data\SBSI -> [2003/03/26 10:03:10 | 00,000,000 | ---D | M] ScanSoft -> C:\Documents and Settings\All Users\Application Data\ScanSoft -> [2007/04/12 01:20:02 | 00,000,000 | ---D | M] TEMP -> C:\Documents and Settings\All Users\Application Data\TEMP -> [2008/11/05 06:58:58 | 00,000,000 | ---D | M] Application Data -> C:\Documents and Settings\Default User\Application Data -> [2003/03/26 09:52:20 | 00,000,000 | RH-D | M] Application Data -> C:\Documents and Settings\LocalService\Application Data -> [2006/02/28 03:11:50 | 00,000,000 | ---D | M] Canon -> C:\Documents and Settings\LocalService\Application Data\Canon -> [2006/02/28 05:35:39 | 00,000,000 | ---D | M] Application Data -> C:\Documents and Settings\NetworkService\Application Data -> [2005/10/07 20:49:19 | 00,000,000 | ---D | M] Application Data -> C:\Documents and Settings\simone\Application Data -> [2009/03/14 05:11:15 | 00,000,000 | RH-D | M] ACD Systems -> C:\Documents and Settings\simone\Application Data\ACD Systems -> [2006/11/15 17:53:44 | 00,000,000 | ---D | M] Ahead -> C:\Documents and Settings\simone\Application Data\Ahead -> [2004/10/09 21:24:40 | 00,000,000 | ---D | M] ArcSoft -> C:\Documents and Settings\simone\Application Data\ArcSoft -> [2005/08/20 19:41:03 | 00,000,000 | ---D | M] authorPOINT -> C:\Documents and Settings\simone\Application Data\authorPOINT -> [2009/03/14 01:23:48 | 00,000,000 | ---D | M] AVS4YOU -> C:\Documents and Settings\simone\Application Data\AVS4YOU -> [2008/11/30 03:41:18 | 00,000,000 | ---D | M] Canon -> C:\Documents and Settings\simone\Application Data\Canon -> [2009/02/21 18:58:54 | 00,000,000 | ---D | M] CD-LabelPrint -> C:\Documents and Settings\simone\Application Data\CD-LabelPrint -> [2007/04/12 15:09:29 | 00,000,000 | ---D | M] CyberLink -> C:\Documents and Settings\simone\Application Data\CyberLink -> [2004/09/30 19:34:27 | 00,000,000 | ---D | M] dvdcss -> C:\Documents and Settings\simone\Application Data\dvdcss -> [2005/08/17 03:32:02 | 00,000,000 | ---D | M] eBookPro6 -> C:\Documents and Settings\simone\Application Data\eBookPro6 -> [2008/07/04 17:49:57 | 00,000,000 | ---D | M] gtk-2.0 -> C:\Documents and Settings\simone\Application Data\gtk-2.0 -> [2008/10/07 12:25:33 | 00,000,000 | ---D | M] ICQ Toolbar -> C:\Documents and Settings\simone\Application Data\ICQ Toolbar -> [2007/04/01 00:53:46 | 00,000,000 | ---D | M] ICQLite -> C:\Documents and Settings\simone\Application Data\ICQLite -> [2007/04/08 00:22:25 | 00,000,000 | ---D | M] JAGED Inc -> C:\Documents and Settings\simone\Application Data\JAGED Inc -> [2008/11/25 07:36:39 | 00,000,000 | ---D | M] Leadertech -> C:\Documents and Settings\simone\Application Data\Leadertech -> [2004/09/30 23:40:01 | 00,000,000 | ---D | M] MSN6 -> C:\Documents and Settings\simone\Application Data\MSN6 -> [2006/06/24 06:42:01 | 00,000,000 | ---D | M] NewSoft -> C:\Documents and Settings\simone\Application Data\NewSoft -> [2007/04/12 16:31:33 | 00,000,000 | ---D | M] Nokia -> C:\Documents and Settings\simone\Application Data\Nokia -> [2008/03/14 18:11:11 | 00,000,000 | ---D | M] Nokia Multimedia Player -> C:\Documents and Settings\simone\Application Data\Nokia Multimedia Player -> [2008/05/18 10:34:26 | 00,000,000 | ---D | M] NSeries -> C:\Documents and Settings\simone\Application Data\NSeries -> [2008/03/14 18:37:49 | 00,000,000 | ---D | M] PC Suite -> C:\Documents and Settings\simone\Application Data\PC Suite -> [2008/03/15 06:22:24 | 00,000,000 | ---D | M] RecordPad -> C:\Documents and Settings\simone\Application Data\RecordPad -> [2006/04/18 16:20:26 | 00,000,000 | ---D | M] ScanSoft -> C:\Documents and Settings\simone\Application Data\ScanSoft -> [2007/04/12 01:20:09 | 00,000,000 | ---D | M] Vso -> C:\Documents and Settings\simone\Application Data\Vso -> [2008/10/11 11:01:03 | 00,000,000 | ---D | M] C:\WINDOWS\Tasks\ -> C:\WINDOWS\Tasks -> [2008/12/20 21:34:07 | 00,000,000 | --SD | M] 1-Click Maintenance.job -> C:\WINDOWS\Tasks\1-Click Maintenance.job -> [2009/03/23 18:12:26 | 00,000,488 | ---- | M] () AppleSoftwareUpdate.job -> C:\WINDOWS\Tasks\AppleSoftwareUpdate.job -> [2009/03/21 19:41:03 | 00,000,284 | ---- | M] () desktop.ini -> C:\WINDOWS\Tasks\desktop.ini -> [2002/09/13 12:00:00 | 00,000,065 | RH-- | M] () SA.DAT -> C:\WINDOWS\Tasks\SA.DAT -> [2009/03/23 18:12:26 | 00,000,006 | -H-- | M] () [File - Purity Scan] [CatchMe Rootkit Scan by GMER] < Windows folder & sub-folders > scanning hidden processes ... scanning hidden services & system hive ... [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Network\{4D36E972-E325-11CE-BFC1-08002BE10318}\Descriptions] "\x77cf\x5349s^L?\xe48ec\x8c66?????"=str(7):"1\0" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Network\{4D36E972-E325-11CE-BFC1-08002BE10318}\Descriptions] "\x77cf\x5349s^L?\xe48ec\x8c66?????"=str(7):"1\0" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanserver\Shares] "pSh\xf322j?"=str(7):"CSCFlags=0\0MaxUses=4294967295\0Path=Canon MP830 Series Printer,LocalsplOnly\0Permissions=0\0Remark=Canon MP830 Series Printer\0Type=1\0" "pSh\xf322j2??"=str(7):"CSCFlags=0\0MaxUses=4294967295\0Path=Canon MP830 FAX,LocalsplOnly\0Permissions=0\0Remark=Canon MP830 FAX\0Type=1\0" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Control\Network\{4D36E972-E325-11CE-BFC1-08002BE10318}\Descriptions] "\x77cf\x5349s^L?\xe48ec\x8c66?????"=str(7):"1\0" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Services\lanmanserver\Shares] "pSh\xf322j?"=str(7):"CSCFlags=0\0MaxUses=4294967295\0Path=Canon MP830 Series Printer,LocalsplOnly\0Permissions=0\0Remark=Canon MP830 Series Printer\0Type=1\0" "pSh\xf322j2??"=str(7):"CSCFlags=0\0MaxUses=4294967295\0Path=Canon MP830 FAX,LocalsplOnly\0Permissions=0\0Remark=Canon MP830 FAX\0Type=1\0" scanning hidden registry entries ... [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Control Panel\Cursors\Schemes] "\x828f?}vr???"=""C:\WINDOWS\Cursors\3dwarro.cur,,C:\WINDOWS\Cursors\appstar3.ani,C:\WINDOWS\Cursors\hourgla3.ani,C:\WINDOWS\Cursors\cross.cur,,,C:\WINDOWS\Cursors\3dwno.cur,C:\WINDOWS\Cursors\3dwns.cur,C:\WINDOWS\Cursors\3dwwe.cur,C:\WINDOWS\Cursors\3dwnwse.cur,C:\WINDOWS\Cursors\3dwnesw.cur,C:\WINDOWS\Cursors\3dwmove.cur,"" "Kb\x69d4 ?1??"=""C:\WINDOWS\Cursors\harrow.cur,,C:\WINDOWS\Cursors\handapst.ani,C:\WINDOWS\Cursors\hand.ani,C:\WINDOWS\Cursors\hcross.cur,C:\WINDOWS\Cursors\hibeam.cur,,C:\WINDOWS\Cursors\hnodrop.cur,C:\WINDOWS\Cursors\hns.cur,C:\WINDOWS\Cursors\hwe.cur,C:\WINDOWS\Cursors\hnwse.cur,C:\WINDOWS\Cursors\hnesw.cur,C:\WINDOWS\Cursors\hmove.cur,"" "Kb\x69d4 ?2??"=""C:\WINDOWS\Cursors\harrow.cur,,C:\WINDOWS\Cursors\handapst.ani,C:\WINDOWS\Cursors\handwait.ani,C:\WINDOWS\Cursors\hcross.cur,C:\WINDOWS\Cursors\hibeam.cur,,C:\WINDOWS\Cursors\handno.ani,C:\WINDOWS\Cursors\handns.ani,C:\WINDOWS\Cursors\handwe.ani,C:\WINDOWS\Cursors\handnwse.ani,C:\WINDOWS\Cursors\handnesw.ani,C:\WINDOWS\Cursors\hmove.cur,"" "P`??"=""C:\WINDOWS\Cursors\3dgarro.cur,,C:\WINDOWS\Cursors\dinosaur.ani,C:\WINDOWS\Cursors\dinosau2.ani,C:\WINDOWS\Cursors\cross.cur,,,C:\WINDOWS\Cursors\banana.ani,C:\WINDOWS\Cursors\3dsns.cur,C:\WINDOWS\Cursors\3dgwe.cur,C:\WINDOWS\Cursors\3dsnwse.cur,C:\WINDOWS\Cursors\3dgnesw.cur,C:\WINDOWS\Cursors\3dsmove.cur,"" "\x8e90\n?_??"=""C:\WINDOWS\Cursors\harrow.cur,,C:\WINDOWS\Cursors\horse.ani,C:\WINDOWS\Cursors\barber.ani,C:\WINDOWS\Cursors\hcross.cur,C:\WINDOWS\Cursors\hibeam.cur,,C:\WINDOWS\Cursors\coin.ani,C:\WINDOWS\Cursors\3dgns.cur,C:\WINDOWS\Cursors\3dgwe.cur,C:\WINDOWS\Cursors\3dgnwse.cur,C:\WINDOWS\Cursors\3dgnesw.cur,C:\WINDOWS\Cursors\3dgmove.cur,"" "\ac\x87c3\x8dcb??"=""C:\WINDOWS\Cursors\harrow.cur,,C:\WINDOWS\Cursors\drum.ani,C:\WINDOWS\Cursors\metronom.ani,C:\WINDOWS\Cursors\hcross.cur,C:\WINDOWS\Cursors\hibeam.cur,,C:\WINDOWS\Cursors\piano.ani,C:\WINDOWS\Cursors\hns.cur,C:\WINDOWS\Cursors\hwe.cur,C:\WINDOWS\Cursors\hnwse.cur,C:\WINDOWS\Cursors\hnesw.cur,C:\WINDOWS\Cursors\hmove.cur,"" ">e'Y"=""C:\WINDOWS\Cursors\larrow.cur,,C:\WINDOWS\Cursors\lappstrt.cur,C:\WINDOWS\Cursors\lwait.cur,C:\WINDOWS\Cursors\lcross.cur,C:\WINDOWS\Cursors\libeam.cur,,C:\WINDOWS\Cursors\lnodrop.cur,C:\WINDOWS\Cursors\lns.cur,C:\WINDOWS\Cursors\lwe.cur,C:\WINDOWS\Cursors\lnwse.cur,C:\WINDOWS\Cursors\lnesw.cur,C:\WINDOWS\Cursors\lmove.cur,"" "?OY?"=""C:\WINDOWS\Cursors\fillitup.ani,,C:\WINDOWS\Cursors\raindrop.ani,C:\WINDOWS\Cursors\counter.ani,C:\WINDOWS\Cursors\cross.cur,,,C:\WINDOWS\Cursors\wagtail.ani,C:\WINDOWS\Cursors\sizens.ani,C:\WINDOWS\Cursors\sizewe.ani,C:\WINDOWS\Cursors\sizenwse.ani,C:\WINDOWS\Cursors\sizenesw.ani,"" "\x828f??r????"=""C:\WINDOWS\Cursors\3dgarro.cur,,C:\WINDOWS\Cursors\appstar2.ani,C:\WINDOWS\Cursors\hourgla2.ani,C:\WINDOWS\Cursors\cross.cur,,,C:\WINDOWS\Cursors\3dgno.cur,C:\WINDOWS\Cursors\3dgns.cur,C:\WINDOWS\Cursors\3dgwe.cur,C:\WINDOWS\Cursors\3dgnwse.cur,C:\WINDOWS\Cursors\3dgnesw.cur,C:\WINDOWS\Cursors\3dgmove.cur,"" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\VolumeCaches\?d?[?\xe9e0\xe1e5q_\x67e3] @="{67cf8cbd-e5c0-44f7-9de5-e1d599d626d8}" "Description"="\x5982\x679c\x60a8\x8981\x89e3\x9664\x5b89\x88dd\x9019\x4e00\x7248 Windows\xff0c\x4e26\x56de\x5230\x60a8\x4e4b\x524d\x7684\x4f5c\x696d\x7cfb\x7d71\x7684\x8a71\xff0c\x60a8\x5c07\x9700\x8981\x9019\x4e9b\x6a94\x6848\x3002" "Display"="\x4e4b\x524d\x4f5c\x696d\x7cfb\x7d71\x7684\x5099\x4efd\x6a94\x6848" "IconPath"=str(2):"%SystemRoot%\system32\osuninst.EXE,0" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SUPER ] "DisplayName"="SUPER ?Version 2008.bld.33 (Sep 2, 2008)" "UninstallString"="C:\PROGRA~1\ERIGHT~1\SUPER\Setup.exe /remove /q0" "InstallDate"="2008-09-30 10:46:09" "InstallLocation"="C:\Program Files\eRightSoft\SUPER" "InstallSource"="C:\Documents and Settings\simone\\x684c\x9762" "DisplayIcon"="C:\Program Files\eRightSoft\SUPER\SUPER.exe" "DisplayVersion"="Version 2008.bld.33 (Sep 2, 2008)" "VersionMajor"=dword:00000000 "VersionMinor"=dword:00000000 "Publisher"="eRightSoft" "HelpLink"="http://www.eRightSoft.com" "URLInfoAbout"="http://www.eRightSoft.com" "URLUpdateInfo"="http://www.eRightSoft.com" "Contact"="support@eRightSoft.com" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontMapper] "0}\16f??"=dword:00008088 "\x90010}\16f???"=dword:00000088 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Fonts] "\31jwi? ?(?T?r?u?e?T?y?p?e?)??"="KAIU.TTF" "0}\16f? ?&? ?\x90010}\16f? ?(?T?r?u?e?T?y?p?e?)????"="MINGLIU.TTC" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Applets\Volume Control\SoundMAX Digital Audio\\4\xe6b3\xe8dbc6R] "LineStates"=hex:04,00,00,00,04,93,f3,97,a7,63,36,52,00,00,00,00,00,00,00,00,00,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Applets\Volume Control\SoundMAX Digital Audio\??\x54436R] "LineStates"=hex:00,00,00,00,f3,97,cf,91,a7,63,36,52,00,00,00,00,00,00,00,00,00,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Favorites\#\xe45b}] "Order"=hex:08,00,00,00,02,00,00,00,98,02,00,00,01,00,00,00,05,00,00,00,16,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\_U\x6090] "Order"=hex:08,00,00,00,02,00,00,00,0c,00,00,00,01,00,00,00,00,00,00,00 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\\x8dcb\x82f1\eZ\2j-N\x5133] "Order"=hex:08,00,00,00,02,00,00,00,84,00,00,00,01,00,00,00,01,00,00,00,78,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\\x8dcb\x82f1\eZ\2j-N\x5133\Documentation] "Order"=hex:08,00,00,00,02,00,00,00,0c,00,00,00,01,00,00,00,00,00,00,00 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\\21b\xf0c5IQ\xedb6\x70d7\4\xe64aV] "Order"=hex:08,00,00,00,02,00,00,00,00,01,00,00,01,00,00,00,02,00,00,00,78,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\\21b\xf0c5IQ\xedb6\x70d7\4\xe64aV\Documentation] "Order"=hex:08,00,00,00,02,00,00,00,92,00,00,00,01,00,00,00,01,00,00,00,86,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\?\x8b78\xf3bb?] "Order"=hex:08,00,00,00,02,00,00,00,32,01,00,00,01,00,00,00,02,00,00,00,78,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\J?j4X] "Order"=hex:08,00,00,00,02,00,00,00,ce,06,00,00,01,00,00,00,0b,00,00,00,82,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\D\xe825\\x6c14(u\vz\17_] "Order"=hex:08,00,00,00,02,00,00,00,4a,0b,00,00,01,00,00,00,13,00,00,00,7c,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\D\xe825\\x6c14(u\vz\17_\Microsoft \x4e92\x52d5\x5f0f\x6559\x5b78] "Order"=hex:08,00,00,00,02,00,00,00,20,01,00,00,01,00,00,00,02,00,00,00,88,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\D\xe825\\x6c14(u\vz\17_\TS\x547d\x5b01wQ] "Order"=hex:08,00,00,00,02,00,00,00,42,02,00,00,01,00,00,00,04,00,00,00,92,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\D\xe825\\x6c14(u\vz\17_\\eZ\2j] "Order"=hex:08,00,00,00,02,00,00,00,60,02,00,00,01,00,00,00,04,00,00,00,86,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\D\xe825\\x6c14(u\vz\17_\\xe0d9q}\x5b01wQ] "Order"=hex:08,00,00,00,02,00,00,00,c0,04,00,00,01,00,00,00,08,00,00,00,8e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\D\xe825\\x6c14(u\vz\17_\\32?] "Order"=hex:08,00,00,00,02,00,00,00,cc,03,00,00,01,00,00,00,06,00,00,00,aa,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\GrpConv\MapGroups] "J?j4X?"="\x9644\x5c6c\x61c9\x7528\x7a0b\x5f0f\\x904a\x6a02\x5834" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{7EC9950F-90C6-288C-52D3-764A701DA1DA}] "oalhkajaadglbcaecclppgnicblbhd"=hex:64,61,6c,6a,6b,6b,65,6b,00,70 "oahicemjdnngabppfbbmeogmaeafge"=hex:6a,61,6c,6a,6f,6b,63,6a,6e,6e,67,70,67,66,6c,62,6c,6a,61,70,00,.. "nafiebondgfbdnmgnalhdnkgkkme"=hex:69,61,68,6a,6d,6b,69,62,70,67,64,6d,70,65,63,70,69,62,00,00 [HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Network\\xf4e8\x8b78\x258f?hV] "SaveSettings"="1" [HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Network\:O\rghV\xfe43\6t\x55ff] "SaveSettings"="1" [HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Network\O(u\5\x80\xfe43\6t\x55ff] "SaveSettings"="1" [HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Network\\x74e0\x7d88O(u\5\x80\xfe43\6t\x55ff] "SaveSettings"="1" [HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Twain] "\20??O\xed91???"="C:\WINDOWS\Twain_32\MP830\CISDS.DS" scanning hidden files ... C:\WINDOWS\Registration\Registration\CRMLog C:\WINDOWS\Registration\Registration\R000000000007.clb 22316 bytes C:\WINDOWS\Registration\Registration\R000000000008.clb 22796 bytes C:\WINDOWS\Registration\Registration\{02D4B3F1-FD88-11D1-960D-00805FC79235}.{39CE0090-1733-41B3-8B95-0FD649253D58}.crmlog 1048576 bytes scan completed successfully hidden processes: 0 hidden services: 0 hidden files: 10 < Document and Settings folder & sub folders > scanning hidden files ... C:\Documents and Settings\All Users\Application Data\TEMP:5C321E34 115 bytes C:\Documents and Settings\simone\Favorites\CNN\cancer cell_Research News The Telomere Crisis A Crucial Stage in Breast Cancer.url:favicon 3638 bytes C:\Documents and Settings\simone\My Documents\Elken\Own Folder\病 C:\Documents and Settings\simone\My Documents\My Pictures\MP Navigator\$$Elken Club\LiveXtra File\ C:\Documents and Settings\simone\My Documents\激 C:\Documents and Settings\simone\My Documents\激 C:\Documents and Settings\simone\My Documents\激 C:\Documents and Settings\simone\My Documents\激 C:\Documents and Settings\simone\My Documents\激 C:\Documents and Settings\simone\桌面\INbox\SONGS\#INCOMPLETE\[HIFI天碟] 《原音探究2》 scan completed successfully hidden files: 2020 < End of report > [/code]