Now try to start Windows in Normal Mode. If you get there delete your version of Combofix.exe and download new one. Run scan and post log as I described before.

Can't open any programs except photoshop not even OTL
Started by
neataznyam
, Mar 21 2012 10:25 PM
#61
Posted 03 April 2012 - 02:38 AM

Now try to start Windows in Normal Mode. If you get there delete your version of Combofix.exe and download new one. Run scan and post log as I described before.
#62
Posted 03 April 2012 - 02:39 AM

are those desirable conclusions?
#63
Posted 03 April 2012 - 02:55 AM

can i use the usb to transfer it?
#64
Posted 03 April 2012 - 02:56 AM

Yes you can.
#65
Posted 03 April 2012 - 03:04 AM

i tried to run it in safe mode and normal and still wouldn't open
#66
Posted 03 April 2012 - 03:19 AM

Can you try to run TheKiller or OTL now?
What is current system status? Problems?
What is current system status? Problems?
#67
Posted 03 April 2012 - 03:20 AM

still can't open the programs
#68
Posted 03 April 2012 - 03:53 AM

Can you please do one more scan with FRST64.exe. I need to see where we stand now. Maybe infection returned when you start windows.
#69
Posted 03 April 2012 - 04:07 AM

Scan result of Farbar Recovery Scan Tool Version: 15-03-2012
Ran by SYSTEM at 03-04-2012 03:03:03
Running from F:\
Windows 7 Home Premium (X64) OS Language: English(US)
The current controlset is ControlSet001
========================== Registry (Whitelisted) =============
HKLM\...\Run: [AdobeAAMUpdater-1.0] "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [499608 2011-03-30] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [HDAudDeck] C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe -r [2439072 2010-05-24] (VIA)
HKLM-x32\...\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin [406992 2010-02-22] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS4ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin [611712 2008-08-14] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" [254696 2011-04-08] (Sun Microsystems, Inc.)
HKLM-x32\...\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [843712 2012-01-02] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun [98304 2010-09-30] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [Malwarebytes' Anti-Malware] "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray [460872 2012-01-13] (Malwarebytes Corporation)
HKLM-x32\...\Run: [AdobeCS5.5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe" -launchedbylogin [1523360 2011-01-12] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [] [x]
HKLM-x32\...\Run: [Adobe Acrobat Speed Launcher] "C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe" [36760 2010-10-25] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Acrobat Assistant 8.0] "C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe" [821144 2010-10-25] (Adobe Systems Inc.)
HKU\henry\...\Run: [EPSON Stylus Photo 1400 Series] C:\Windows\system32\spool\DRIVERS\x64\3\E_FATIBUA.EXE /FU "C:\Windows\TEMP\E_S6141.tmp" /EF "HKCU" [x]
HKU\henry\...\Run: [AdobeBridge] [x]
HKU\henry\...\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun [1305408 2011-01-05] (DT Soft Ltd)
HKU\henry\...\Run: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background [4283256 2011-05-13] (Microsoft Corporation)
HKU\henry\...\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /nosplash /minimized [19550344 2011-10-13] (Skype Technologies S.A.)
HKU\henry\...\Run: [Akamai NetSession Interface] "C:\Users\henry\AppData\Local\Akamai\netsession_win.exe" [3329824 2012-02-02] (Akamai Technologies, Inc)
HKU\henry\...\Run: [HydraVisionDesktopManager] "C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe" [393216 2010-09-30] (AMD)
HKU\henry\...\Run: [HydraVisionMDEngine] "C:\Program Files (x86)\ATI Technologies\HydraVision\HydraMD.exe" [569344 2010-09-30] (AMD)
HKU\henry\...\Run: [Steam] "C:\Program Files (x86)\Steam\Steam.exe" -silent [1242448 2012-02-07] (Valve Corporation)
HKU\henry\...\Run: [Messenger (Yahoo!)] "C:\PROGRA~2\Yahoo!\Messenger\YahooMessenger.exe" -quiet [6497592 2012-01-04] (Yahoo! Inc.)
HKU\henry\...\Run: [Aim] "C:\Program Files (x86)\AIM\aim.exe" /d locale=en-US [4321112 2012-02-29] (AOL Inc.)
Tcpip\Parameters: [DhcpNameServer] 76.14.0.8 76.14.0.9
==================== Services (Whitelisted) ======
2 EPSON_PM_RPCV4_01; C:\ProgramData\EPSON\EPW!3 SSRP\E_S30RP1.EXE [102400 2006-04-18] (SEIKO EPSON CORPORATION)
3 FLEXnet Licensing Service 64; "C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe" [1038088 2011-05-26] (Acresso Software Inc.)
2 Lavasoft Ad-Aware Service; "C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWService.exe" [2152152 2011-09-02] (Lavasoft Limited)
2 MBAMService; "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe" [652360 2012-01-13] (Malwarebytes Corporation)
2 TabletServicePen; C:\Windows\system32\Pen_Tablet.exe [5414184 2009-07-15] (Wacom Technology, Corp.)
2 WTouchService; C:\Program Files\WTouch\WTouchService.exe [127272 2009-07-15] (Wacom Technology, Corp.)
2 Akamai; c:\program files (x86)\common files\akamai/netsession_win_7de0ed9.dll [x]
========================== Drivers (Whitelisted) =============
2 adfs; C:\Windows\System32\Drivers\adfs.sys [88632 2008-06-27] (Adobe Systems, Inc.)
2 adfs; C:\Windows\SysWow64\Drivers\adfs.sys [74720 2008-08-14] (Adobe Systems, Inc.)
3 DrvAgent64; C:\Windows\SysWow64\Drivers\DrvAgent64.sys [21712 2011-12-04] (Phoenix Technologies)
1 dtsoftbus01; C:\Windows\System32\Drivers\dtsoftbus01.sys [254528 2011-01-19] (DT Soft Ltd)
3 Gun; \??\C:\Game\SoftnyxGame\GunBoundIS\Gun64.sys [45176 2011-06-24] ()
3 ivusb; C:\Windows\System32\Drivers\ivusb.sys [29720 2010-07-28] (Initio Corporation)
3 Lavasoft Kernexplorer; \??\C:\Program Files (x86)\Lavasoft\Ad-Aware\KernExplorer64.sys [17152 2011-08-09] ()
0 Lbd; C:\Windows\System32\Drivers\Lbd.sys [69376 2011-07-21] (Lavasoft AB)
3 MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [23152 2011-12-10] (Malwarebytes Corporation)
3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-07-15] ()
3 NVENETFD; C:\Windows\System32\DRIVERS\nvm62x64.sys [408960 2009-06-10] (NVIDIA Corporation)
0 nvstor64; C:\Windows\System32\Drivers\nvstor64.sys [244328 2010-04-08] (NVIDIA Corporation)
3 wacmoumonitor; C:\Windows\System32\Drivers\wacmoumonitor.sys [18216 2010-01-24] (Wacom Technology)
3 wacommousefilter; C:\Windows\System32\Drivers\wacommousefilter.sys [12848 2007-02-16] (Wacom Technology)
3 WacomVKHid; C:\Windows\System32\Drivers\WacomVKHid.sys [12976 2007-02-15] (Wacom Technology)
3 AODDriver4.0; [x]
2 AODDriver4.01; \??\C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [x]
4 nvlddmkm; C:\Windows\System32\DRIVERS\nvlddmkm.sys [x]
3 NVNET; C:\Windows\System32\DRIVERS\nvmf6264.sys [x]
3 wacomvhid; C:\Windows\System32\DRIVERS\wacomvhid.sys [x]
========================== NetSvcs (Whitelisted) ===========
NETSVC: tgsrvc_smartagent
============ One Month Created Files and Folders ==============
2012-04-03 00:52 - 2012-04-03 00:57 - 4453973 ____A (Swearware) C:\Users\henry\Downloads\ComboFix.exe
2012-04-03 00:35 - 2012-04-03 03:03 - 0000000 ____D C:\FRST
2012-04-02 22:23 - 2012-04-03 09:32 - 4453973 ____A (Swearware) C:\Users\henry\Desktop\svscsv.com
2012-04-02 21:47 - 2012-04-02 21:47 - 4453973 ____A (Swearware) C:\Users\henry\Desktop\svchostt.com
2012-04-02 12:21 - 2012-04-02 12:21 - 0000000 ____A C:\Files.txt
2012-04-02 12:19 - 2012-04-02 12:21 - 0000000 ____D C:\Users\henry\Desktop\FileLister Folder
2012-04-02 12:01 - 2012-04-02 23:48 - 0020359 ____A C:\Users\henry\Desktop\FileLister.zip
2012-04-01 19:39 - 2012-04-02 06:26 - 98077435 ____A (Igor Pavlov) C:\Users\henry\Desktop\OTLPEStd.exe
2012-04-01 19:36 - 2012-04-01 19:36 - 0274888 ____A C:\Windows\Minidump\040112-24538-01.dmp
2012-04-01 18:46 - 2012-03-29 13:54 - 0132597 ____A C:\Users\henry\Desktop\Flash_Disinfector.exe
2012-04-01 18:38 - 2012-04-02 06:26 - 98077435 ____A (Igor Pavlov) C:\Users\henry\Desktop\svchost.exe (2).exe
2012-03-29 01:56 - 2012-03-29 13:47 - 0294400 ____A C:\Users\henry\Desktop\exeHelper.com
2012-03-29 01:13 - 2012-03-29 01:14 - 0013365 ____A C:\Users\henry\Desktop\New Text Document.txt
2012-03-29 00:08 - 2012-03-29 00:08 - 44238026 ____A C:\Users\henry\Desktop\color4.psd
2012-03-28 23:58 - 2012-03-28 23:58 - 44007097 ____A C:\Users\henry\Desktop\color3.psd
2012-03-28 23:48 - 2012-03-28 23:50 - 44379196 ____A C:\Users\henry\Desktop\color2.psd
2012-03-28 22:51 - 2012-03-28 22:51 - 42427168 ____A C:\Users\henry\Desktop\color1.psd
2012-03-28 15:05 - 2012-03-28 15:05 - 0110590 ____A C:\Users\henry\Desktop\003[1].JPG
2012-03-28 12:07 - 2012-03-28 12:07 - 0751581 ____A (maliprog @ Geekstogo) C:\Users\henry\Desktop\TheKiller2.scr
2012-03-28 12:04 - 2012-03-28 12:04 - 0751581 ____A (maliprog @ Geekstogo) C:\Users\henry\Downloads\TheKiller.scr
2012-03-26 19:51 - 2012-03-28 19:05 - 54543243 ____A C:\Users\henry\Desktop\sssss (2).psd
2012-03-26 12:43 - 2012-03-26 12:43 - 10165440 ____A (Microsoft Corporation) C:\Users\henry\Desktop\mseinstall.exe
2012-03-26 12:40 - 2012-03-26 12:47 - 0002150 ____A C:\Windows\epplauncher.mif
2012-03-26 12:37 - 2012-03-26 12:37 - 10165440 ____A (Microsoft Corporation) C:\Users\henry\Downloads\mseinstall.exe
2012-03-25 22:30 - 2012-03-26 09:31 - 256982966 ____A C:\Users\henry\Desktop\kav_rescue_10.iso
2012-03-25 19:17 - 2012-03-25 19:21 - 178789312 ____A (Kaspersky Lab) C:\Users\henry\Downloads\kis2012_12.0.0.374aEN_2778.exe
2012-03-25 19:07 - 2012-03-25 19:08 - 18099082 ____A C:\Users\henry\Downloads\kav_rescue_10.iso.g19r5to.partial
2012-03-24 23:39 - 2012-03-24 23:39 - 0000129 ____A C:\Windows\System32\MRT.INI
2012-03-24 20:54 - 2012-02-09 22:36 - 1544192 ____A (Microsoft Corporation) C:\Windows\System32\DWrite.dll
2012-03-24 20:54 - 2012-02-09 21:38 - 1077248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2012-03-24 20:54 - 2012-02-02 20:34 - 3145728 ____A (Microsoft Corporation) C:\Windows\System32\win32k.sys
2012-03-24 20:54 - 2012-01-24 22:38 - 0149504 ____A (Microsoft Corporation) C:\Windows\System32\rdpcorekmts.dll
2012-03-24 20:54 - 2012-01-24 22:38 - 0077312 ____A (Microsoft Corporation) C:\Windows\System32\rdpwsx.dll
2012-03-24 20:54 - 2012-01-24 22:33 - 0009216 ____A (Microsoft Corporation) C:\Windows\System32\rdrmemptylst.exe
2012-03-24 20:45 - 2012-03-24 20:45 - 0274888 ____A C:\Windows\Minidump\032412-22027-01.dmp
2012-03-24 20:12 - 2012-02-16 22:38 - 1031680 ____A (Microsoft Corporation) C:\Windows\System32\rdpcore.dll
2012-03-24 20:12 - 2012-02-16 21:34 - 0826880 ____A (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll
2012-03-24 20:12 - 2012-02-16 20:58 - 0210944 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\rdpwd.sys
2012-03-24 20:12 - 2012-02-16 20:57 - 0023552 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tdtcp.sys
2012-03-21 20:39 - 2012-03-21 23:47 - 14082558 ____A C:\Users\henry\Desktop\sssss.psd
2012-03-21 20:30 - 2012-03-22 03:16 - 0063052 ____A C:\Users\henry\Desktop\Photo 99.jpg
2012-03-21 20:23 - 2012-03-22 08:14 - 0594432 ____A (OldTimer Tools) C:\Users\henry\Desktop\svchost.exe.exe
2012-03-21 20:02 - 2009-07-13 17:14 - 0020480 ____A (Microsoft Corporation) C:\Windows\svchost.exe
2012-03-21 16:24 - 2012-03-21 16:24 - 64784733 ____A C:\Users\henry\Desktop\progress of 3 weeks.psd
2012-03-21 14:02 - 2012-03-21 14:02 - 1977044 ____A C:\Users\henry\Desktop\final scne3.jpg
2012-03-21 13:01 - 2012-03-21 13:01 - 0000000 ____D C:\Users\henry\AppData\Local\{C025742C-FE8A-4939-ABA2-0E018F6821A5}
2012-03-21 13:00 - 2012-03-21 13:01 - 0000000 ____D C:\Users\henry\AppData\Local\{3B6DB259-A9FA-4CA7-B29B-6F1EFC819C94}
2012-03-21 00:42 - 2012-03-21 00:42 - 0000000 ____D C:\Users\henry\AppData\Local\{FEF4CBE1-6973-4D71-88F9-C7A656EFE5AC}
2012-03-20 12:42 - 2012-03-20 12:42 - 0000000 ____D C:\Users\henry\AppData\Local\{19DA093A-3CF8-4AF1-8400-A4C1CA4004EF}
2012-03-20 12:41 - 2012-03-21 00:42 - 0000000 ____D C:\Users\henry\AppData\Local\{374C5AC8-F957-4B0D-B00E-8E137F1EF1AB}
2012-03-19 21:05 - 2012-03-19 21:46 - 0022245 ____A C:\Users\henry\Desktop\pinball.odt
2012-03-19 15:08 - 2012-03-19 15:08 - 0000000 ____D C:\Users\henry\AppData\Local\{F959C390-FD7C-40A7-B7CE-2B716273A019}
2012-03-19 15:07 - 2012-03-19 15:08 - 0000000 ____D C:\Users\henry\AppData\Local\{70925E63-9DEF-493B-B2E0-9CF56444FCC7}
2012-03-17 20:57 - 2012-03-17 20:57 - 0000000 ____D C:\Users\henry\AppData\Local\{B309C81B-53D5-4529-96ED-A183AAB850CD}
2012-03-17 20:57 - 2012-03-17 20:57 - 0000000 ____D C:\Users\henry\AppData\Local\{543EEA10-5C4B-4C53-8B5B-EAC4B1204E49}
2012-03-17 11:07 - 2012-03-17 11:07 - 1712906 ____A C:\Users\henry\Desktop\girlandtheredumbrella.jpg
2012-03-17 01:39 - 2012-03-17 01:39 - 0000000 ____D C:\Users\henry\AppData\Local\{B4A96DEB-DEBB-4EDB-B3F8-5184EA92748F}
2012-03-16 19:49 - 2012-03-20 21:59 - 74955469 ____A C:\Users\henry\Desktop\final scne.psd
2012-03-16 13:48 - 2012-04-02 12:08 - 0000000 ____D C:\Users\henry\Desktop\desert final scene
2012-03-16 13:38 - 2012-03-17 01:39 - 0000000 ____D C:\Users\henry\AppData\Local\{52A8B52C-7ECA-41B5-9A82-F4669CA78101}
2012-03-16 13:38 - 2012-03-16 13:38 - 0000000 ____D C:\Users\henry\AppData\Local\{30E2248F-152C-41C3-9C50-FAE8418B43CE}
2012-03-16 01:37 - 2012-03-16 01:37 - 0000000 ____D C:\Users\henry\AppData\Local\{BD0BEE27-6E90-4170-89CF-E3F066B3195C}
2012-03-16 01:37 - 2012-03-16 01:37 - 0000000 ____D C:\Users\henry\AppData\Local\{762ED396-E7EE-4042-8774-37E282E6FFE6}
2012-03-15 01:10 - 2012-03-15 01:10 - 0000000 ____D C:\Users\henry\AppData\Local\{4AFF59CA-A3C8-4AE3-A574-CE16EBEF1880}
2012-03-14 13:09 - 2012-03-15 01:10 - 0000000 ____D C:\Users\henry\AppData\Local\{B7E9FCFF-7243-4E10-9AE1-0C2E8251B1E4}
2012-03-14 13:09 - 2012-03-14 13:09 - 0000000 ____D C:\Users\henry\AppData\Local\{55F57402-A538-493D-8663-7992040F8AFC}
2012-03-14 00:41 - 2012-03-14 00:41 - 0000000 ____D C:\Users\henry\AppData\Local\{E4BE028C-A095-46B9-B4BA-D48BEA97DD8D}
2012-03-13 13:59 - 2009-07-15 08:13 - 0392488 ____A (Wacom Technology, Corp.) C:\Windows\SysWOW64\Pen_Tablet.dln
2012-03-13 12:40 - 2012-03-14 00:41 - 0000000 ____D C:\Users\henry\AppData\Local\{96E20A9F-8A76-4500-B5F8-8ECC06E4084C}
2012-03-13 12:40 - 2012-03-13 12:40 - 0000000 ____D C:\Users\henry\AppData\Local\{B9CF85E9-91D6-476B-B75D-1A6293554775}
2012-03-12 23:57 - 2012-03-12 23:57 - 0000000 ____D C:\Users\henry\AppData\Local\{EA1916BE-FF27-40F9-9CE0-33A47746818C}
2012-03-12 23:57 - 2012-03-12 23:57 - 0000000 ____D C:\Users\henry\AppData\Local\{937E6033-B994-46DF-9C78-520A5F0CFE28}
2012-03-12 20:35 - 2012-03-12 20:35 - 0000225 ____A C:\Users\henry\Documents\hjiohoihio.rtf
2012-03-12 20:21 - 2012-03-12 20:22 - 0000000 ____D C:\Users\henry\Desktop\Pathfinder RPG
2012-03-12 12:22 - 2012-03-12 12:22 - 0000000 ____A C:\Users\henry\Desktop\install_flash_player_64bit.exe
2012-03-12 11:56 - 2012-03-12 11:56 - 0000000 ____D C:\Users\henry\AppData\Local\{E58D3ACD-CCFD-48BC-A9D1-42D295E23CB0}
2012-03-12 11:56 - 2012-03-12 11:56 - 0000000 ____D C:\Users\henry\AppData\Local\{7E293F7F-6AD9-40F8-BBFD-80C091D49DA7}
2012-03-12 01:44 - 2012-03-12 16:48 - 0027230 ____A C:\Users\henry\Desktop\bradly.odt
2012-03-12 00:20 - 2012-03-12 00:20 - 3784114 ____A C:\Users\henry\Desktop\figure.psd
2012-03-11 18:38 - 2012-03-11 18:39 - 0000000 ____D C:\Users\henry\AppData\Local\{CDCFCD60-F9F4-40F4-A466-EBED2757AABC}
2012-03-11 18:38 - 2012-03-11 18:38 - 0000000 ____D C:\Users\henry\AppData\Local\{B868F692-7A42-40A6-B8F0-29F0D0649688}
2012-03-10 16:09 - 2012-03-10 16:09 - 0000000 ____D C:\Users\henry\AppData\Local\{9AFEA366-0149-43CB-ABB9-15929029E251}
2012-03-10 16:09 - 2012-03-10 16:09 - 0000000 ____D C:\Users\henry\AppData\Local\{19D43604-FB12-4DBF-A165-DEBC1C30D647}
2012-03-09 11:26 - 2012-03-09 11:26 - 27578386 ____A C:\Users\henry\Desktop\character dull.psd
2012-03-09 10:38 - 2012-03-09 10:38 - 0000000 ____D C:\Users\henry\AppData\Roaming\Adobe Mini Bridge CS5.1
2012-03-09 00:22 - 2012-03-09 00:22 - 0000000 ____D C:\Users\henry\AppData\Local\{615FFADE-7433-477A-BC6F-A18E8B40396C}
2012-03-09 00:22 - 2012-03-09 00:22 - 0000000 ____D C:\Users\henry\AppData\Local\{5F4D5251-636A-4D00-AEBD-037BC00150EA}
2012-03-08 12:42 - 2012-03-08 12:42 - 0000000 ____D C:\Users\Default\AppData\Roaming\Macromedia
2012-03-08 12:42 - 2012-03-08 12:42 - 0000000 ____D C:\Users\Default User\AppData\Roaming\Macromedia
2012-03-08 12:21 - 2012-03-08 12:21 - 0000000 ____D C:\Users\henry\AppData\Local\{F2863DA3-3B36-4396-8F8C-DCCADB8F5702}
2012-03-08 12:21 - 2012-03-08 12:21 - 0000000 ____D C:\Users\henry\AppData\Local\{BE63C8E8-01F7-4C9B-A072-C1F2A8B3554B}
2012-03-08 03:00 - 2011-12-13 23:43 - 17790464 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2012-03-08 03:00 - 2011-12-13 23:16 - 10887168 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2012-03-08 03:00 - 2011-12-13 23:11 - 2308096 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2012-03-08 03:00 - 2011-12-13 23:04 - 1390080 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2012-03-08 03:00 - 2011-12-13 23:04 - 1345536 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2012-03-08 03:00 - 2011-12-13 23:03 - 1493504 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2012-03-08 03:00 - 2011-12-13 23:03 - 0237056 ____A (Microsoft Corporation) C:\Windows\System32\url.dll
2012-03-08 03:00 - 2011-12-13 23:01 - 0085504 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2012-03-08 03:00 - 2011-12-13 23:00 - 0818688 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2012-03-08 03:00 - 2011-12-13 22:59 - 2144256 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2012-03-08 03:00 - 2011-12-13 22:57 - 2382848 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2012-03-08 03:00 - 2011-12-13 22:57 - 0096256 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2012-03-08 03:00 - 2011-12-13 22:53 - 0248320 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2012-03-08 03:00 - 2011-12-13 19:30 - 12282368 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2012-03-08 03:00 - 2011-12-13 19:10 - 9705472 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2012-03-08 03:00 - 2011-12-13 19:04 - 1798656 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2012-03-08 03:00 - 2011-12-13 18:57 - 1127424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2012-03-08 03:00 - 2011-12-13 18:57 - 1103360 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2012-03-08 03:00 - 2011-12-13 18:56 - 1427456 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2012-03-08 03:00 - 2011-12-13 18:55 - 0231936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2012-03-08 03:00 - 2011-12-13 18:54 - 0065024 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2012-03-08 03:00 - 2011-12-13 18:53 - 0716800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2012-03-08 03:00 - 2011-12-13 18:52 - 1792000 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2012-03-08 03:00 - 2011-12-13 18:50 - 2382848 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2012-03-08 03:00 - 2011-12-13 18:50 - 0072704 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2012-03-08 03:00 - 2011-12-13 18:47 - 0176640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2012-03-07 20:39 - 2012-03-07 20:39 - 0001720 ____A C:\Users\Public\Desktop\Play League of Legends.lnk
2012-03-07 19:43 - 2012-03-07 19:43 - 0000000 ____D C:\Riot Games
2012-03-07 19:41 - 2012-03-07 19:42 - 0000854 ____A C:\Users\henry\Desktop\gc.log
2012-03-07 19:10 - 2012-03-07 19:40 - 0001911 ____A C:\Users\Public\Desktop\AIM.lnk
2012-03-07 19:10 - 2012-03-07 19:40 - 0000000 ____D C:\Program Files (x86)\AIM
2012-03-07 19:10 - 2012-03-07 19:38 - 0000000 ____D C:\Users\henry\AppData\Local\AIM
2012-03-07 19:10 - 2012-03-07 19:15 - 0000000 ____D C:\Users\henry\AppData\Roaming\acccore
2012-03-07 19:10 - 2012-03-07 19:10 - 0000000 ____D C:\Users\All Users\AIM
2012-03-07 19:10 - 2012-03-07 19:10 - 0000000 ____D C:\ProgramData\AIM
2012-03-07 19:07 - 2012-03-07 19:07 - 0463080 ____A (CNET Download.com) C:\Users\henry\Desktop\cnet2_Install_AIM_exe.exe
2012-03-07 19:03 - 2012-03-07 19:03 - 0000000 ____A C:\Users\henry\Desktop\AIM_Install.exe
2012-03-07 17:59 - 2012-01-04 02:44 - 14172672 ____A (Microsoft Corporation) C:\Windows\System32\shell32.dll
2012-03-07 17:59 - 2012-01-04 02:44 - 0509952 ____A (Microsoft Corporation) C:\Windows\System32\ntshrui.dll
2012-03-07 17:59 - 2012-01-04 00:59 - 12872704 ____A (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2012-03-07 17:59 - 2012-01-04 00:58 - 0442880 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ntshrui.dll
2012-03-07 17:59 - 2011-12-29 22:26 - 0515584 ____A (Microsoft Corporation) C:\Windows\System32\timedate.cpl
2012-03-07 17:59 - 2011-12-29 21:27 - 0478720 ____A (Microsoft Corporation) C:\Windows\SysWOW64\timedate.cpl
2012-03-07 17:59 - 2011-12-27 19:59 - 0498688 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\afd.sys
2012-03-07 17:59 - 2011-12-16 00:46 - 0634880 ____A (Microsoft Corporation) C:\Windows\System32\msvcrt.dll
2012-03-07 17:59 - 2011-12-15 23:52 - 0690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msvcrt.dll
2012-03-07 17:53 - 2012-03-07 17:53 - 0000000 ____D C:\Users\henry\AppData\Local\{A24E1888-7B91-47AA-86CE-4FE264919155}
2012-03-07 17:53 - 2012-03-07 17:53 - 0000000 ____D C:\Users\henry\AppData\Local\{515AF329-D58A-433E-95F5-6DCAB8B31B73}
2012-03-07 17:10 - 2012-03-07 17:46 - 0000000 ____D C:\Program Files (x86)\McAfee Security Scan
2012-03-07 14:37 - 2012-03-14 19:54 - 8375123 ____A C:\Users\henry\Desktop\onghenry.psd
2012-03-07 13:31 - 2012-03-07 13:31 - 0000000 ____D C:\Users\henry\AppData\Local\{A6C61CAA-E846-49AA-84C3-43478DB370C5}
2012-03-07 13:31 - 2012-03-07 13:31 - 0000000 ____D C:\Users\henry\AppData\Local\{42F826B1-7F03-4915-B6B4-C25614E3493D}
2012-03-07 02:02 - 2012-03-07 02:02 - 0000000 ____D C:\Users\henry\Desktop\portfolio final
2012-03-07 01:30 - 2012-03-07 01:31 - 0000000 ____D C:\Users\henry\AppData\Local\{FED365D3-EB1E-4B37-AA89-AA1D4B819569}
2012-03-07 01:30 - 2012-03-07 01:30 - 0000000 ____D C:\Users\henry\AppData\Local\{F0F3A29E-FE1D-46F2-B9AB-725B13287884}
2012-03-06 13:30 - 2012-03-06 13:30 - 0000000 ____D C:\Users\henry\AppData\Local\{8C1F5A68-BCC1-46E8-AE11-1894C4D3D6FF}
2012-03-06 13:30 - 2012-03-06 13:30 - 0000000 ____D C:\Users\henry\AppData\Local\{34362D3D-4C32-4A39-AA1C-4E9943083BE1}
2012-03-06 12:58 - 2012-03-07 00:46 - 0250554 ____A C:\Users\henry\Desktop\kris.pdf
2012-03-06 01:29 - 2012-03-06 01:29 - 0000000 ____D C:\Users\henry\AppData\Local\{D69BCD4A-AA4D-4FBB-8D50-0ACD2932E618}
2012-03-06 01:29 - 2012-03-06 01:29 - 0000000 ____D C:\Users\henry\AppData\Local\{559D1BE0-F725-4E5F-B1DE-9E298F400323}
2012-03-05 13:29 - 2012-03-05 13:29 - 0000000 ____D C:\Users\henry\AppData\Local\{D574F574-AFC3-478E-A710-C6F839DEBED2}
2012-03-05 13:28 - 2012-03-05 13:29 - 0000000 ____D C:\Users\henry\AppData\Local\{B3F5A0E9-370D-42E3-9FEA-AC30CEABB316}
2012-03-05 01:28 - 2012-03-05 01:28 - 0000000 ____D C:\Users\henry\AppData\Local\{9E610E66-9D4F-4D6C-8EFE-914AAD720CC4}
2012-03-04 19:43 - 2012-03-04 19:43 - 2228848 ____A C:\Users\henry\Desktop\Abandoned town.jpg
2012-03-04 19:31 - 2012-03-04 20:08 - 0000000 ____D C:\Users\henry\Desktop\Ong_Henry
2012-03-04 17:08 - 2012-03-04 22:27 - 0020153 ____A C:\Users\henry\Desktop\card.odt
2012-03-04 13:28 - 2012-03-04 13:28 - 0000000 ____D C:\Users\henry\AppData\Local\{279EF88E-A970-41D5-83F8-E90FB4224446}
2012-03-04 13:27 - 2012-03-05 01:28 - 0000000 ____D C:\Users\henry\AppData\Local\{208709C4-C72E-4BEB-BA58-B5785A45FED3}
2012-03-04 01:27 - 2012-03-04 01:27 - 0000000 ____D C:\Users\henry\AppData\Local\{D9BD6237-26A6-4008-B388-97E32E5EC499}
2012-03-04 01:27 - 2012-03-04 01:27 - 0000000 ____D C:\Users\henry\AppData\Local\{7A23DFE7-94F3-4366-93BE-06639FE0BC0E}
============ 3 Months Modified Files and Folders =============
2012-04-03 12:45 - 2012-04-03 01:03 - 4453973 ____A (Swearware) C:\Users\henry\Desktop\ComboFix.com.exe
2012-04-03 09:32 - 2012-04-02 22:23 - 4453973 ____A (Swearware) C:\Users\henry\Desktop\svscsv.com
2012-04-03 03:03 - 2012-04-03 00:35 - 0000000 ____D C:\FRST
2012-04-03 01:03 - 2009-07-13 21:13 - 0780156 ____A C:\Windows\System32\PerfStringBackup.INI
2012-04-03 01:02 - 2012-02-06 15:50 - 2304914 ____A C:\Windows\ntbtlog.txt
2012-04-03 00:59 - 2011-08-10 10:42 - 0102944 ____A C:\aaw7boot.log
2012-04-03 00:59 - 2010-11-05 22:25 - 2146873344 __ASH C:\hiberfil.sys
2012-04-03 00:58 - 2010-11-05 22:29 - 1985522 ____A C:\Windows\WindowsUpdate.log
2012-04-03 00:57 - 2012-04-03 00:52 - 4453973 ____A (Swearware) C:\Users\henry\Downloads\ComboFix.exe
2012-04-03 00:55 - 2009-07-13 20:45 - 0016720 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2012-04-03 00:55 - 2009-07-13 20:45 - 0016720 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2012-04-03 00:47 - 2011-06-01 13:43 - 0000000 ____D C:\Users\henry\AppData\Roaming\WTablet
2012-04-03 00:46 - 2012-02-06 15:52 - 0003818 ____A C:\Windows\setupact.log
2012-04-03 00:46 - 2012-02-03 00:20 - 0000892 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2012-04-03 00:46 - 2009-07-13 21:08 - 0032646 ____A C:\Windows\Tasks\SCHEDLGU.TXT
2012-04-03 00:46 - 2009-07-13 21:08 - 0000006 ___AH C:\Windows\Tasks\SA.DAT
2012-04-02 23:48 - 2012-04-02 12:01 - 0020359 ____A C:\Users\henry\Desktop\FileLister.zip
2012-04-02 21:47 - 2012-04-02 21:47 - 4453973 ____A (Swearware) C:\Users\henry\Desktop\svchostt.com
2012-04-02 12:21 - 2012-04-02 12:21 - 0000000 ____A C:\Files.txt
2012-04-02 12:21 - 2012-04-02 12:19 - 0000000 ____D C:\Users\henry\Desktop\FileLister Folder
2012-04-02 12:08 - 2012-03-16 13:48 - 0000000 ____D C:\Users\henry\Desktop\desert final scene
2012-04-02 06:26 - 2012-04-01 19:39 - 98077435 ____A (Igor Pavlov) C:\Users\henry\Desktop\OTLPEStd.exe
2012-04-02 06:26 - 2012-04-01 18:38 - 98077435 ____A (Igor Pavlov) C:\Users\henry\Desktop\svchost.exe (2).exe
2012-04-01 19:36 - 2012-04-01 19:36 - 0274888 ____A C:\Windows\Minidump\040112-24538-01.dmp
2012-04-01 19:36 - 2011-12-03 19:22 - 359864899 ____A C:\Windows\MEMORY.DMP
2012-04-01 19:36 - 2010-12-01 20:10 - 0000000 ____D C:\Windows\Minidump
2012-03-29 13:54 - 2012-04-01 18:46 - 0132597 ____A C:\Users\henry\Desktop\Flash_Disinfector.exe
2012-03-29 13:47 - 2012-03-29 01:56 - 0294400 ____A C:\Users\henry\Desktop\exeHelper.com
2012-03-29 01:45 - 2011-04-09 11:59 - 0000000 ____D C:\Users\henry\Desktop\movies
2012-03-29 01:14 - 2012-03-29 01:13 - 0013365 ____A C:\Users\henry\Desktop\New Text Document.txt
2012-03-29 00:36 - 2012-02-03 00:20 - 0000896 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2012-03-29 00:08 - 2012-03-29 00:08 - 44238026 ____A C:\Users\henry\Desktop\color4.psd
2012-03-28 23:58 - 2012-03-28 23:58 - 44007097 ____A C:\Users\henry\Desktop\color3.psd
2012-03-28 23:50 - 2012-03-28 23:48 - 44379196 ____A C:\Users\henry\Desktop\color2.psd
2012-03-28 22:51 - 2012-03-28 22:51 - 42427168 ____A C:\Users\henry\Desktop\color1.psd
2012-03-28 19:05 - 2012-03-26 19:51 - 54543243 ____A C:\Users\henry\Desktop\sssss (2).psd
2012-03-28 15:21 - 2011-12-09 18:35 - 0000000 ____D C:\Users\henry\AppData\Local\ElevatedDiagnostics
2012-03-28 15:05 - 2012-03-28 15:05 - 0110590 ____A C:\Users\henry\Desktop\003[1].JPG
2012-03-28 12:07 - 2012-03-28 12:07 - 0751581 ____A (maliprog @ Geekstogo) C:\Users\henry\Desktop\TheKiller2.scr
2012-03-28 12:04 - 2012-03-28 12:04 - 0751581 ____A (maliprog @ Geekstogo) C:\Users\henry\Downloads\TheKiller.scr
2012-03-26 12:47 - 2012-03-26 12:40 - 0002150 ____A C:\Windows\epplauncher.mif
2012-03-26 12:43 - 2012-03-26 12:43 - 10165440 ____A (Microsoft Corporation) C:\Users\henry\Desktop\mseinstall.exe
2012-03-26 12:37 - 2012-03-26 12:37 - 10165440 ____A (Microsoft Corporation) C:\Users\henry\Downloads\mseinstall.exe
2012-03-26 12:35 - 2009-07-13 19:20 - 0000000 ____D C:\Windows\System32\NDF
2012-03-26 09:31 - 2012-03-25 22:30 - 256982966 ____A C:\Users\henry\Desktop\kav_rescue_10.iso
2012-03-25 19:21 - 2012-03-25 19:17 - 178789312 ____A (Kaspersky Lab) C:\Users\henry\Downloads\kis2012_12.0.0.374aEN_2778.exe
2012-03-25 19:08 - 2012-03-25 19:07 - 18099082 ____A C:\Users\henry\Downloads\kav_rescue_10.iso.g19r5to.partial
2012-03-25 18:20 - 2009-07-13 20:45 - 4866976 ____A C:\Windows\System32\FNTCACHE.DAT
2012-03-24 23:39 - 2012-03-24 23:39 - 0000129 ____A C:\Windows\System32\MRT.INI
2012-03-24 23:38 - 2010-05-24 13:32 - 56297240 ____A (Microsoft Corporation) C:\Windows\System32\MRT.exe
2012-03-24 20:51 - 2009-07-13 19:20 - 0000000 ____D C:\Windows\System32\config\TxR
2012-03-24 20:45 - 2012-03-24 20:45 - 0274888 ____A C:\Windows\Minidump\032412-22027-01.dmp
2012-03-24 20:45 - 2011-10-26 11:57 - 0016924 ____A C:\Windows\PFRO.log
2012-03-24 20:42 - 2010-12-01 19:05 - 0000000 ____D C:\users\henry
2012-03-22 08:14 - 2012-03-21 20:23 - 0594432 ____A (OldTimer Tools) C:\Users\henry\Desktop\svchost.exe.exe
2012-03-22 03:16 - 2012-03-21 20:30 - 0063052 ____A C:\Users\henry\Desktop\Photo 99.jpg
2012-03-21 23:47 - 2012-03-21 20:39 - 14082558 ____A C:\Users\henry\Desktop\sssss.psd
2012-03-21 23:34 - 2011-01-07 02:55 - 0000000 ____D C:\Users\henry\AppData\Local\CrashDumps
2012-03-21 20:00 - 2012-02-07 23:55 - 0000000 ____D C:\Program Files (x86)\Steam
2012-03-21 20:00 - 2011-11-09 17:31 - 0000000 ____D C:\Users\henry\AppData\Local\Akamai
2012-03-21 20:00 - 2011-05-20 19:06 - 0000000 ____D C:\Users\All Users\PMB Files
2012-03-21 20:00 - 2011-05-20 19:06 - 0000000 ____D C:\ProgramData\PMB Files
2012-03-21 20:00 - 2010-12-03 15:40 - 0000000 ____D C:\Program Files\WTouch
2012-03-21 20:00 - 2010-12-03 15:38 - 0000000 ____D C:\Windows\System32\WTablet
2012-03-21 20:00 - 2010-12-03 15:38 - 0000000 ____D C:\Program Files (x86)\Tablet
2012-03-21 20:00 - 2010-12-02 01:16 - 0000000 ____D C:\Users\henry\AppData\Roaming\vlc
2012-03-21 20:00 - 2010-12-01 19:28 - 0000000 ____D C:\Program Files (x86)\Guild Wars
2012-03-21 20:00 - 2010-12-01 19:17 - 0000000 ____D C:\Program Files (x86)\Mozilla Firefox
2012-03-21 19:38 - 2011-05-20 19:06 - 0000000 ____D C:\Users\henry\AppData\Local\PMB Files
2012-03-21 17:34 - 2011-07-26 13:17 - 0000000 ____D C:\Users\henry\riotsGamesLogs
2012-03-21 16:24 - 2012-03-21 16:24 - 64784733 ____A C:\Users\henry\Desktop\progress of 3 weeks.psd
2012-03-21 14:02 - 2012-03-21 14:02 - 1977044 ____A C:\Users\henry\Desktop\final scne3.jpg
2012-03-21 13:01 - 2012-03-21 13:01 - 0000000 ____D C:\Users\henry\AppData\Local\{C025742C-FE8A-4939-ABA2-0E018F6821A5}
2012-03-21 13:01 - 2012-03-21 13:00 - 0000000 ____D C:\Users\henry\AppData\Local\{3B6DB259-A9FA-4CA7-B29B-6F1EFC819C94}
2012-03-21 13:01 - 2011-07-03 23:49 - 0000000 ____D C:\Users\henry\AppData\Local\Windows Live
2012-03-21 13:00 - 2011-07-04 01:06 - 0000000 ____D C:\Users\henry\Tracing
2012-03-21 00:42 - 2012-03-21 00:42 - 0000000 ____D C:\Users\henry\AppData\Local\{FEF4CBE1-6973-4D71-88F9-C7A656EFE5AC}
2012-03-21 00:42 - 2012-03-20 12:41 - 0000000 ____D C:\Users\henry\AppData\Local\{374C5AC8-F957-4B0D-B00E-8E137F1EF1AB}
2012-03-20 21:59 - 2012-03-16 19:49 - 74955469 ____A C:\Users\henry\Desktop\final scne.psd
2012-03-20 12:42 - 2012-03-20 12:42 - 0000000 ____D C:\Users\henry\AppData\Local\{19DA093A-3CF8-4AF1-8400-A4C1CA4004EF}
2012-03-19 21:46 - 2012-03-19 21:05 - 0022245 ____A C:\Users\henry\Desktop\pinball.odt
2012-03-19 15:08 - 2012-03-19 15:08 - 0000000 ____D C:\Users\henry\AppData\Local\{F959C390-FD7C-40A7-B7CE-2B716273A019}
2012-03-19 15:08 - 2012-03-19 15:07 - 0000000 ____D C:\Users\henry\AppData\Local\{70925E63-9DEF-493B-B2E0-9CF56444FCC7}
2012-03-17 20:57 - 2012-03-17 20:57 - 0000000 ____D C:\Users\henry\AppData\Local\{B309C81B-53D5-4529-96ED-A183AAB850CD}
2012-03-17 20:57 - 2012-03-17 20:57 - 0000000 ____D C:\Users\henry\AppData\Local\{543EEA10-5C4B-4C53-8B5B-EAC4B1204E49}
2012-03-17 11:07 - 2012-03-17 11:07 - 1712906 ____A C:\Users\henry\Desktop\girlandtheredumbrella.jpg
2012-03-17 01:39 - 2012-03-17 01:39 - 0000000 ____D C:\Users\henry\AppData\Local\{B4A96DEB-DEBB-4EDB-B3F8-5184EA92748F}
2012-03-17 01:39 - 2012-03-16 13:38 - 0000000 ____D C:\Users\henry\AppData\Local\{52A8B52C-7ECA-41B5-9A82-F4669CA78101}
2012-03-16 13:38 - 2012-03-16 13:38 - 0000000 ____D C:\Users\henry\AppData\Local\{30E2248F-152C-41C3-9C50-FAE8418B43CE}
2012-03-16 01:37 - 2012-03-16 01:37 - 0000000 ____D C:\Users\henry\AppData\Local\{BD0BEE27-6E90-4170-89CF-E3F066B3195C}
2012-03-16 01:37 - 2012-03-16 01:37 - 0000000 ____D C:\Users\henry\AppData\Local\{762ED396-E7EE-4042-8774-37E282E6FFE6}
2012-03-15 01:10 - 2012-03-15 01:10 - 0000000 ____D C:\Users\henry\AppData\Local\{4AFF59CA-A3C8-4AE3-A574-CE16EBEF1880}
2012-03-15 01:10 - 2012-03-14 13:09 - 0000000 ____D C:\Users\henry\AppData\Local\{B7E9FCFF-7243-4E10-9AE1-0C2E8251B1E4}
2012-03-14 19:54 - 2012-03-07 14:37 - 8375123 ____A C:\Users\henry\Desktop\onghenry.psd
2012-03-14 13:09 - 2012-03-14 13:09 - 0000000 ____D C:\Users\henry\AppData\Local\{55F57402-A538-493D-8663-7992040F8AFC}
2012-03-14 00:41 - 2012-03-14 00:41 - 0000000 ____D C:\Users\henry\AppData\Local\{E4BE028C-A095-46B9-B4BA-D48BEA97DD8D}
2012-03-14 00:41 - 2012-03-13 12:40 - 0000000 ____D C:\Users\henry\AppData\Local\{96E20A9F-8A76-4500-B5F8-8ECC06E4084C}
2012-03-13 22:33 - 2011-08-12 22:33 - 0000064 ____A C:\Windows\SysWOW64\rp_stats.dat
2012-03-13 22:33 - 2011-08-12 22:33 - 0000044 ____A C:\Windows\SysWOW64\rp_rules.dat
2012-03-13 12:40 - 2012-03-13 12:40 - 0000000 ____D C:\Users\henry\AppData\Local\{B9CF85E9-91D6-476B-B75D-1A6293554775}
2012-03-13 12:39 - 2012-01-22 23:44 - 0001039 ____A C:\Users\henry\Start Menu\Programs\Startup\ZooskMessenger.lnk
2012-03-13 12:39 - 2012-01-22 23:44 - 0001039 ____A C:\Users\henry\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ZooskMessenger.lnk
2012-03-12 23:57 - 2012-03-12 23:57 - 0000000 ____D C:\Users\henry\AppData\Local\{EA1916BE-FF27-40F9-9CE0-33A47746818C}
2012-03-12 23:57 - 2012-03-12 23:57 - 0000000 ____D C:\Users\henry\AppData\Local\{937E6033-B994-46DF-9C78-520A5F0CFE28}
2012-03-12 20:35 - 2012-03-12 20:35 - 0000225 ____A C:\Users\henry\Documents\hjiohoihio.rtf
2012-03-12 20:22 - 2012-03-12 20:21 - 0000000 ____D C:\Users\henry\Desktop\Pathfinder RPG
2012-03-12 17:54 - 2012-02-27 19:07 - 41357358 ____A C:\Users\henry\Desktop\olaas.psd
2012-03-12 16:48 - 2012-03-12 01:44 - 0027230 ____A C:\Users\henry\Desktop\bradly.odt
2012-03-12 12:22 - 2012-03-12 12:22 - 0000000 ____A C:\Users\henry\Desktop\install_flash_player_64bit.exe
2012-03-12 11:56 - 2012-03-12 11:56 - 0000000 ____D C:\Users\henry\AppData\Local\{E58D3ACD-CCFD-48BC-A9D1-42D295E23CB0}
2012-03-12 11:56 - 2012-03-12 11:56 - 0000000 ____D C:\Users\henry\AppData\Local\{7E293F7F-6AD9-40F8-BBFD-80C091D49DA7}
2012-03-12 00:20 - 2012-03-12 00:20 - 3784114 ____A C:\Users\henry\Desktop\figure.psd
2012-03-11 18:39 - 2012-03-11 18:38 - 0000000 ____D C:\Users\henry\AppData\Local\{CDCFCD60-F9F4-40F4-A466-EBED2757AABC}
2012-03-11 18:38 - 2012-03-11 18:38 - 0000000 ____D C:\Users\henry\AppData\Local\{B868F692-7A42-40A6-B8F0-29F0D0649688}
2012-03-10 16:09 - 2012-03-10 16:09 - 0000000 ____D C:\Users\henry\AppData\Local\{9AFEA366-0149-43CB-ABB9-15929029E251}
2012-03-10 16:09 - 2012-03-10 16:09 - 0000000 ____D C:\Users\henry\AppData\Local\{19D43604-FB12-4DBF-A165-DEBC1C30D647}
2012-03-09 11:26 - 2012-03-09 11:26 - 27578386 ____A C:\Users\henry\Desktop\character dull.psd
2012-03-09 10:38 - 2012-03-09 10:38 - 0000000 ____D C:\Users\henry\AppData\Roaming\Adobe Mini Bridge CS5.1
2012-03-09 00:22 - 2012-03-09 00:22 - 0000000 ____D C:\Users\henry\AppData\Local\{615FFADE-7433-477A-BC6F-A18E8B40396C}
2012-03-09 00:22 - 2012-03-09 00:22 - 0000000 ____D C:\Users\henry\AppData\Local\{5F4D5251-636A-4D00-AEBD-037BC00150EA}
2012-03-08 12:42 - 2012-03-08 12:42 - 0000000 ____D C:\Users\Default\AppData\Roaming\Macromedia
2012-03-08 12:42 - 2012-03-08 12:42 - 0000000 ____D C:\Users\Default User\AppData\Roaming\Macromedia
2012-03-08 12:42 - 2010-12-01 19:36 - 0000000 ____D C:\Program Files (x86)\Adobe
2012-03-08 12:21 - 2012-03-08 12:21 - 0000000 ____D C:\Users\henry\AppData\Local\{F2863DA3-3B36-4396-8F8C-DCCADB8F5702}
2012-03-08 12:21 - 2012-03-08 12:21 - 0000000 ____D C:\Users\henry\AppData\Local\{BE63C8E8-01F7-4C9B-A072-C1F2A8B3554B}
2012-03-08 03:25 - 2010-12-01 19:08 - 0000174 ___SH C:\Users\henry\Start Menu\Programs\Startup\desktop.ini
2012-03-08 03:25 - 2010-12-01 19:08 - 0000174 ___SH C:\Users\henry\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini
2012-03-08 03:24 - 2010-06-21 15:41 - 0000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2012-03-08 03:04 - 2011-02-08 11:41 - 0796360 ____A C:\Windows\SysWOW64\PerfStringBackup.INI
2012-03-08 03:04 - 2011-02-08 11:41 - 0000000 ____D C:\Program Files (x86)\Microsoft Application Virtualization Client
2012-03-07 20:39 - 2012-03-07 20:39 - 0001720 ____A C:\Users\Public\Desktop\Play League of Legends.lnk
2012-03-07 19:43 - 2012-03-07 19:43 - 0000000 ____D C:\Riot Games
2012-03-07 19:42 - 2012-03-07 19:41 - 0000854 ____A C:\Users\henry\Desktop\gc.log
2012-03-07 19:41 - 2010-12-01 19:18 - 0001107 ___AH C:\IPH.PH
2012-03-07 19:40 - 2012-03-07 19:10 - 0001911 ____A C:\Users\Public\Desktop\AIM.lnk
2012-03-07 19:40 - 2012-03-07 19:10 - 0000000 ____D C:\Program Files (x86)\AIM
2012-03-07 19:38 - 2012-03-07 19:10 - 0000000 ____D C:\Users\henry\AppData\Local\AIM
2012-03-07 19:15 - 2012-03-07 19:10 - 0000000 ____D C:\Users\henry\AppData\Roaming\acccore
2012-03-07 19:10 - 2012-03-07 19:10 - 0000000 ____D C:\Users\All Users\AIM
2012-03-07 19:10 - 2012-03-07 19:10 - 0000000 ____D C:\ProgramData\AIM
2012-03-07 19:09 - 2010-12-01 19:17 - 8239264 ____A (AOL Inc.) C:\Users\henry\Downloads\Install_AIM.exe
2012-03-07 19:09 - 2010-12-01 19:05 - 0000000 ____D C:\Users\henry\AppData\LocalLow
2012-03-07 19:07 - 2012-03-07 19:07 - 0463080 ____A (CNET Download.com) C:\Users\henry\Desktop\cnet2_Install_AIM_exe.exe
2012-03-07 19:03 - 2012-03-07 19:03 - 0000000 ____A C:\Users\henry\Desktop\AIM_Install.exe
2012-03-07 18:46 - 2010-12-04 01:00 - 0000000 ____D C:\Users\henry\AppData\Roaming\BitComet
2012-03-07 17:53 - 2012-03-07 17:53 - 0000000 ____D C:\Users\henry\AppData\Local\{A24E1888-7B91-47AA-86CE-4FE264919155}
2012-03-07 17:53 - 2012-03-07 17:53 - 0000000 ____D C:\Users\henry\AppData\Local\{515AF329-D58A-433E-95F5-6DCAB8B31B73}
2012-03-07 17:46 - 2012-03-07 17:10 - 0000000 ____D C:\Program Files (x86)\McAfee Security Scan
2012-03-07 17:46 - 2011-06-13 15:52 - 0000000 ____D C:\Users\All Users\Spybot - Search & Destroy
2012-03-07 17:46 - 2011-06-13 15:52 - 0000000 ____D C:\ProgramData\Spybot - Search & Destroy
2012-03-07 17:45 - 2012-02-27 02:12 - 0000000 ____D C:\Users\henry\Desktop\DesertCliff-tutorial
2012-03-07 17:42 - 2011-02-08 11:42 - 0000000 ____D C:\Users\henry\AppData\Roaming\SoftGrid Client
2012-03-07 17:42 - 2010-12-01 19:34 - 0000000 ____D C:\Users\henry\AppData\Roaming\Adobe
2012-03-07 13:31 - 2012-03-07 13:31 - 0000000 ____D C:\Users\henry\AppData\Local\{A6C61CAA-E846-49AA-84C3-43478DB370C5}
2012-03-07 13:31 - 2012-03-07 13:31 - 0000000 ____D C:\Users\henry\AppData\Local\{42F826B1-7F03-4915-B6B4-C25614E3493D}
2012-03-07 02:02 - 2012-03-07 02:02 - 0000000 ____D C:\Users\henry\Desktop\portfolio final
2012-03-07 01:31 - 2012-03-07 01:30 - 0000000 ____D C:\Users\henry\AppData\Local\{FED365D3-EB1E-4B37-AA89-AA1D4B819569}
2012-03-07 01:30 - 2012-03-07 01:30 - 0000000 ____D C:\Users\henry\AppData\Local\{F0F3A29E-FE1D-46F2-B9AB-725B13287884}
2012-03-07 00:46 - 2012-03-06 12:58 - 0250554 ____A C:\Users\henry\Desktop\kris.pdf
2012-03-06 13:30 - 2012-03-06 13:30 - 0000000 ____D C:\Users\henry\AppData\Local\{8C1F5A68-BCC1-46E8-AE11-1894C4D3D6FF}
2012-03-06 13:30 - 2012-03-06 13:30 - 0000000 ____D C:\Users\henry\AppData\Local\{34362D3D-4C32-4A39-AA1C-4E9943083BE1}
2012-03-06 01:29 - 2012-03-06 01:29 - 0000000 ____D C:\Users\henry\AppData\Local\{D69BCD4A-AA4D-4FBB-8D50-0ACD2932E618}
2012-03-06 01:29 - 2012-03-06 01:29 - 0000000 ____D C:\Users\henry\AppData\Local\{559D1BE0-F725-4E5F-B1DE-9E298F400323}
2012-03-05 13:29 - 2012-03-05 13:29 - 0000000 ____D C:\Users\henry\AppData\Local\{D574F574-AFC3-478E-A710-C6F839DEBED2}
2012-03-05 13:29 - 2012-03-05 13:28 - 0000000 ____D C:\Users\henry\AppData\Local\{B3F5A0E9-370D-42E3-9FEA-AC30CEABB316}
2012-03-05 01:28 - 2012-03-05 01:28 - 0000000 ____D C:\Users\henry\AppData\Local\{9E610E66-9D4F-4D6C-8EFE-914AAD720CC4}
2012-03-05 01:28 - 2012-03-04 13:27 - 0000000 ____D C:\Users\henry\AppData\Local\{208709C4-C72E-4BEB-BA58-B5785A45FED3}
2012-03-04 22:27 - 2012-03-04 17:08 - 0020153 ____A C:\Users\henry\Desktop\card.odt
2012-03-04 20:08 - 2012-03-04 19:31 - 0000000 ____D C:\Users\henry\Desktop\Ong_Henry
2012-03-04 20:01 - 2011-12-16 20:12 - 0000000 ____D C:\Users\henry\Desktop\real final
2012-03-04 19:43 - 2012-03-04 19:43 - 2228848 ____A C:\Users\henry\Desktop\Abandoned town.jpg
2012-03-04 19:30 - 2012-02-15 19:16 - 23747045 ____A C:\Users\henry\Desktop\red girl2.psd
2012-03-04 13:28 - 2012-03-04 13:28 - 0000000 ____D C:\Users\henry\AppData\Local\{279EF88E-A970-41D5-83F8-E90FB4224446}
2012-03-04 01:27 - 2012-03-04 01:27 - 0000000 ____D C:\Users\henry\AppData\Local\{D9BD6237-26A6-4008-B388-97E32E5EC499}
2012-03-04 01:27 - 2012-03-04 01:27 - 0000000 ____D C:\Users\henry\AppData\Local\{7A23DFE7-94F3-4366-93BE-06639FE0BC0E}
2012-03-03 13:27 - 2012-03-03 13:26 - 0000000 ____D C:\Users\henry\AppData\Local\{1EAE8B1C-2D2F-4A20-901D-52941288D79F}
2012-03-03 13:26 - 2012-03-03 13:26 - 0000000 ____D C:\Users\henry\AppData\Local\{E0A374B8-E62B-4E96-9619-668FD747EF8B}
2012-03-03 01:26 - 2012-03-03 01:26 - 0000000 ____D C:\Users\henry\AppData\Local\{6BD7D511-D165-4556-9A2D-1C8464AF522B}
2012-03-03 01:26 - 2012-03-03 01:26 - 0000000 ____D C:\Users\henry\AppData\Local\{0BDBF274-E424-4B49-9BE9-1A33D0664CEE}
2012-03-02 13:25 - 2012-03-02 13:25 - 0000000 ____D C:\Users\henry\AppData\Local\{7FB0131B-2005-4306-A7DD-5E7C1B867740}
2012-03-02 13:25 - 2012-03-02 13:25 - 0000000 ____D C:\Users\henry\AppData\Local\{452F73C8-29E7-4DC6-9CBF-D199319320F7}
2012-03-01 23:14 - 2012-03-01 23:14 - 0000000 ____D C:\Users\henry\AppData\Local\{CF969DD0-9DA3-4211-BE25-902B110EC4AC}
2012-03-01 23:14 - 2012-03-01 23:13 - 0000000 ____D C:\Users\henry\AppData\Local\{4AF96651-0D67-4F30-91D7-80A71A9D8515}
2012-02-29 21:05 - 2012-02-29 17:10 - 1307435 ____A C:\Users\henry\Desktop\newqguy.jpg
2012-02-29 15:49 - 2012-02-29 15:49 - 0059767 ____A C:\Users\henry\Desktop\GordorianFront_fg.jpg
2012-02-29 14:04 - 2012-02-29 14:04 - 0000000 ____D C:\Users\henry\AppData\Local\{4F01EDF1-A143-431A-A552-119588908A9C}
2012-02-29 14:04 - 2012-02-29 14:04 - 0000000 ____D C:\Users\henry\AppData\Local\{44DB2657-02F4-4316-A3E1-041A5B45BA47}
2012-02-29 03:29 - 2012-02-27 03:20 - 79587457 ____A C:\Users\henry\Desktop\gas station.psd
2012-02-29 02:04 - 2012-02-29 02:04 - 0000000 ____D C:\Users\henry\AppData\Local\{D446D861-C8A4-43FE-8F4B-8F2E03BCFD88}
2012-02-29 02:04 - 2012-02-29 02:03 - 0000000 ____D C:\Users\henry\AppData\Local\{FAEFD702-7BF5-4B5B-A656-73BD22BCB029}
2012-02-28 14:03 - 2012-02-28 14:03 - 0000000 ____D C:\Users\henry\AppData\Local\{949A6181-D1FA-47A8-B981-A2B2DBBDE03D}
2012-02-28 14:03 - 2012-02-28 14:03 - 0000000 ____D C:\Users\henry\AppData\Local\{605549EE-0AE0-471C-9439-0CB2CB1A31BB}
2012-02-28 02:03 - 2012-02-28 02:02 - 0000000 ____D C:\Users\henry\AppData\Local\{ED7980F5-8CA5-4C67-AC84-7D4D62BB91F7}
2012-02-28 02:02 - 2012-02-27 14:01 - 0000000 ____D C:\Users\henry\AppData\Local\{240EA13A-4AE5-46BF-9B7F-4CFF6400C4C5}
2012-02-27 21:00 - 2012-02-27 21:00 - 1361399 ____A C:\Users\henry\Desktop\olaas2.jpg
2012-02-27 16:13 - 2011-11-12 01:33 - 0000000 ____D C:\Users\henry\Desktop\redo
2012-02-27 14:02 - 2012-02-27 14:02 - 0000000 ____D C:\Users\henry\AppData\Local\{F00C992D-8F23-4B6B-975B-7080B553DA10}
2012-02-27 09:56 - 2012-02-26 22:10 - 0537894 ____A C:\Users\henry\Desktop\chris.pdf
2012-02-27 03:20 - 2012-02-27 03:19 - 15123376 ____A C:\Users\henry\Desktop\gas station.pdf
2012-02-26 22:14 - 2012-02-26 22:14 - 3254215 ____A C:\Users\henry\Desktop\cghris.jpg
2012-02-26 19:20 - 2012-02-26 19:20 - 0000000 ____D C:\Users\henry\AppData\Local\{BADAEC31-FD3B-4A81-96DB-C396DC54AFF0}
2012-02-26 19:20 - 2012-02-26 19:20 - 0000000 ____D C:\Users\henry\AppData\Local\{1D938DD8-6A4A-42EA-959B-D827B07BC98C}
2012-02-26 01:17 - 2012-02-26 01:17 - 0000000 ____D C:\Users\henry\AppData\Local\{1CCE0747-47F1-454F-8F70-95D8BE268A61}
2012-02-26 01:17 - 2012-02-25 13:16 - 0000000 ____D C:\Users\henry\AppData\Local\{764E1182-96E9-4D8F-9845-4A5D163FF63A}
2012-02-25 13:23 - 2012-02-25 13:21 - 144127603 ____A C:\Users\henry\Desktop\desertcliff-tutorial.zip
2012-02-25 13:16 - 2012-02-25 13:16 - 0000000 ____D C:\Users\henry\AppData\Local\{78D5BB10-EBCC-4A7D-9189-DF2467E84842}
2012-02-25 03:09 - 2012-02-25 03:09 - 0422885 ____A C:\Users\henry\Desktop\1722-1-1322380748.jpg
2012-02-24 22:22 - 2012-02-24 22:22 - 0000000 ____D C:\Users\henry\AppData\Local\{B58B0078-39FA-4EFE-AD9B-0D8842299B56}
2012-02-24 22:22 - 2012-02-24 22:22 - 0000000 ____D C:\Users\henry\AppData\Local\{92A89C9B-94E3-4970-A1AB-00DB7B3F4136}
2012-02-23 01:40 - 2012-02-23 01:40 - 3387220 ____A C:\Users\henry\Desktop\henry_ong_character.pdf
2012-02-23 01:40 - 2012-02-22 23:04 - 1316830 ____A C:\Users\henry\Desktop\Henry_Ong_Character.jpg
2012-02-23 01:39 - 2012-02-23 01:39 - 3204946 ____A C:\Users\henry\Desktop\henry_ong_character.psd
2012-02-23 01:20 - 2012-02-23 01:20 - 0735293 ____A C:\Users\henry\Desktop\sword2.psd
2012-02-22 21:55 - 2012-02-22 21:55 - 0000000 ____D C:\Users\henry\AppData\Local\{FF59D539-C61A-4F72-A5D7-9BC87890A14F}
2012-02-22 21:54 - 2012-02-22 21:54 - 0000000 ____D C:\Users\henry\AppData\Local\{A67476DE-C13B-48D1-97C6-D9AAB097DFDF}
2012-02-22 03:00 - 2012-02-22 03:00 - 0053760 ____A C:\Users\henry\Desktop\Copyright-Symbol-psd29676.png
2012-02-22 01:21 - 2012-02-22 01:21 - 0000000 ____D C:\Users\henry\AppData\Local\{F27F9EC9-8C69-4F86-9D75-C07D6B6B6D92}
2012-02-22 01:21 - 2012-02-22 01:21 - 0000000 ____D C:\Users\henry\AppData\Local\{3B1E5A94-51BB-4FD7-826E-899795BBAC89}
2012-02-21 13:21 - 2012-02-21 13:20 - 0000000 ____D C:\Users\henry\AppData\Local\{8887F20D-F8C5-449D-95CA-98AE662DAEE7}
2012-02-21 13:20 - 2012-02-21 13:20 - 0000000 ____D C:\Users\henry\AppData\Local\{6B476DA4-0B60-4FB3-B87F-BCD135666C69}
2012-02-21 01:07 - 2012-02-21 01:07 - 0000000 ____D C:\Users\henry\AppData\Local\{C90B6CFD-6E34-487D-8337-F9283D246839}
2012-02-21 01:07 - 2012-02-20 13:05 - 0000000 ____D C:\Users\henry\AppData\Local\{23D96AAC-5C62-4358-B238-4571FF4512AF}
2012-02-20 13:09 - 2012-02-20 13:09 - 0008443 ____A C:\Users\henry\Desktop\Henry Ong.pdf
2012-02-20 13:06 - 2012-02-20 13:06 - 0000000 ____D C:\Users\henry\AppData\Local\{FCF785AA-CA6F-4689-AFD2-7880B790BF51}
2012-02-20 02:11 - 2012-02-20 02:11 - 0156521 ____A C:\Users\henry\Desktop\Leg_Armor_by_yangfeili.png
2012-02-19 19:33 - 2012-02-19 19:33 - 0000000 ____D C:\Users\henry\AppData\Local\{A8BA8ECF-A59E-4741-BDF0-77D4195B56C0}
2012-02-19 19:33 - 2012-02-19 19:32 - 0000000 ____D C:\Users\henry\AppData\Local\{C7E768EF-F08A-4E76-8A52-50E5E0FD3F3A}
2012-02-19 19:30 - 2010-12-10 23:56 - 0000000 ____D C:\WTablet
2012-02-19 06:38 - 2012-02-18 18:58 - 0214622 ____A C:\Users\henry\Desktop\vcharater.pdf
2012-02-19 06:32 - 2012-02-18 18:58 - 0243552 ____A C:\Users\henry\Desktop\cjarcter.pdf
2012-02-19 02:09 - 2012-02-19 02:09 - 0000000 ____D C:\Users\henry\AppData\Local\{84CB3007-071B-4765-B79A-6C60C02B9ADB}
2012-02-19 02:09 - 2012-02-18 14:08 - 0000000 ____D C:\Users\henry\AppData\Local\{307F2228-690E-4872-893C-9A799FCA6720}
2012-02-18 14:29 - 2012-02-18 14:29 - 28414228 ____A C:\Users\henry\Desktop\canyon.psd
2012-02-18 14:09 - 2012-02-18 14:08 - 0000000 ____D C:\Users\henry\AppData\Local\{7978DE6F-51C2-4B22-89DC-B282BF9A7AF9}
2012-02-18 02:08 - 2012-02-18 02:08 - 0000000 ____D C:\Users\henry\AppData\Local\{EFBBE3F7-4F59-4A1D-AAAA-88539FB3A620}
2012-02-18 02:08 - 2012-02-18 02:08 - 0000000 ____D C:\Users\henry\AppData\Local\{1B9C6715-98CE-4748-A191-B93B69F24E86}
2012-02-17 14:07 - 2012-02-17 14:07 - 0000000 ____D C:\Users\henry\AppData\Local\{FE4667A8-CD5C-4516-85D3-B9DE9B9F3F3B}
2012-02-17 14:07 - 2012-02-17 14:07 - 0000000 ____D C:\Users\henry\AppData\Local\{956E4263-64EB-4D94-B4A0-0331997691CB}
2012-02-16 22:55 - 2012-02-16 22:54 - 0000000 ____D C:\Users\henry\AppData\Local\{F6F80A24-4C04-41F1-932C-6E57BE86D5E0}
2012-02-16 22:54 - 2012-02-16 22:54 - 0000000 ____D C:\Users\henry\AppData\Local\{CDCD482C-9E34-4377-A263-214EC9DF2171}
2012-02-16 22:38 - 2012-03-24 20:12 - 1031680 ____A (Microsoft Corporation) C:\Windows\System32\rdpcore.dll
2012-02-16 21:34 - 2012-03-24 20:12 - 0826880 ____A (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll
2012-02-16 20:58 - 2012-03-24 20:12 - 0210944 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\rdpwd.sys
2012-02-16 20:57 - 2012-03-24 20:12 - 0023552 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tdtcp.sys
2012-02-16 02:48 - 2012-02-16 02:39 - 23824716 ____A C:\Users\henry\Desktop\red girl221.psd
2012-02-16 02:26 - 2012-02-16 02:26 - 2227850 ____A C:\Users\henry\Desktop\red girl22.jpg
2012-02-16 01:32 - 2012-02-16 01:32 - 0000000 ____D C:\Users\henry\AppData\Local\{F96ACB2C-5447-470D-85D4-BCCC3AA574E1}
2012-02-16 01:32 - 2012-02-16 01:32 - 0000000 ____D C:\Users\henry\AppData\Local\{D4244FE5-9073-4896-B168-121E3715E42C}
2012-02-15 13:32 - 2012-02-15 13:31 - 0000000 ____D C:\Users\henry\AppData\Local\{AFD8B044-B5CC-4B8C-8D71-31CD291F8C6C}
2012-02-15 13:31 - 2012-02-15 13:31 - 0000000 ____D C:\Users\henry\AppData\Local\{D86933D8-27B5-4FB4-BD19-7131738D3A17}
2012-02-15 01:27 - 2012-02-15 01:27 - 0000000 ____D C:\Users\henry\AppData\Local\{D429B9FF-DD7F-4462-AB8D-337E726F7D77}
2012-02-15 01:27 - 2012-02-15 01:27 - 0000000 ____D C:\Users\henry\AppData\Local\{5B2511EE-7035-40E4-A92A-AC03E6F6FFB7}
2012-02-14 23:46 - 2012-02-14 23:46 - 0356397 ____A C:\Users\henry\Desktop\Henry_Ong_Gree.pdf
2012-02-14 13:26 - 2012-02-14 13:26 - 0000000 ____D C:\Users\henry\AppData\Local\{FCB51EFC-F66C-4B78-945B-1E1D035D46F8}
2012-02-14 13:26 - 2012-02-14 13:26 - 0000000 ____D C:\Users\henry\AppData\Local\{6A3AEA4A-4B1D-4E59-8153-049EDCC2D16F}
2012-02-14 13:25 - 2010-12-01 19:08 - 0066224 ____A C:\Users\henry\AppData\Local\GDIPFONTCACHEV1.DAT
2012-02-14 02:40 - 2012-02-11 02:19 - 13954197 ____A C:\Users\henry\Desktop\lol thumbvb.psd
2012-02-14 01:09 - 2012-02-14 01:09 - 0001235 ____A C:\Users\henry\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk
2012-02-14 01:09 - 2012-02-14 01:09 - 0001235 ____A C:\Users\henry\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk
2012-02-14 01:09 - 2012-02-14 01:09 - 0000000 ____D C:\Users\henry\AppData\Roaming\OpenOffice.org
2012-02-14 01:07 - 2012-02-14 01:07 - 0001120 ____A C:\Users\Public\Desktop\OpenOffice.org 3.3.lnk
2012-02-14 01:06 - 2012-02-14 01:06 - 0000000 ____D C:\Program Files (x86)\OpenOffice.org 3
2012-02-14 01:05 - 2011-02-03 02:12 - 0000000 ____D C:\Program Files (x86)\Java
2012-02-14 01:04 - 2012-02-14 01:04 - 0000000 ____D C:\Users\henry\Desktop\OpenOffice.org 3.3 (en-US) Installation Files
2012-02-13 21:51 - 2012-02-13 21:51 - 0002674 ____A C:\Users\henry\Desktop\gamje.rtf
2012-02-13 21:07 - 2012-02-13 21:04 - 158067944 ____A C:\Users\henry\Desktop\OOo_3.3.0_Win_x86_install-wJRE_en-US.exe
2012-02-13 19:41 - 2012-02-11 22:00 - 0001401 ____A C:\Users\henry\Desktop\game.rtf
2012-02-13 18:27 - 2012-02-13 18:27 - 0000000 ____D C:\Users\henry\AppData\Local\{C5BADF91-2511-4CAC-AB6C-4D3FAC1F6138}
2012-02-13 18:27 - 2012-02-13 18:27 - 0000000 ____D C:\Users\henry\AppData\Local\{90510189-B773-4718-A4CA-22F204BB142A}
2012-02-13 18:26 - 2012-02-05 12:07 - 0000000 __ASH C:\Windows\System32\dds_trash_log.cmd
2012-02-12 01:36 - 2012-02-12 01:36 - 0000000 ____D C:\Users\henry\AppData\Local\{00B1E53F-947D-4335-B72B-5F9DFD1E805E}
2012-02-12 01:36 - 2012-02-11 13:35 - 0000000 ____D C:\Users\henry\AppData\Local\{6FCDD234-CB51-4A38-923A-17C99FE76D40}
2012-02-11 13:35 - 2012-02-11 13:35 - 0000000 ____D C:\Users\henry\AppData\Local\{73F970D8-451B-4E85-924F-337B1497492E}
2012-02-11 01:35 - 2012-02-11 01:35 - 0000000 ____D C:\Users\henry\AppData\Local\{82472FAA-3036-4B5A-AEB8-CAD33BE75143}
2012-02-11 01:35 - 2012-02-10 13:34 - 0000000 ____D C:\Users\henry\AppData\Local\{A4FC1966-4216-4739-9E98-38A53F0A455D}
2012-02-10 17:41 - 2012-02-10 17:41 - 0000000 ____D C:\Users\henry\AppData\Local\Yahoo!
2012-02-10 17:41 - 2012-02-10 17:40 - 0000000 ____D C:\Users\henry\AppData\Roaming\Yahoo!
2012-02-10 17:40 - 2012-02-10 17:40 - 0000000 ____D C:\Users\All Users\Yahoo! Companion
2012-02-10 17:40 - 2012-02-10 17:40 - 0000000 ____D C:\Users\All Users\Yahoo!
2012-02-10 17:40 - 2012-02-10 17:40 - 0000000 ____D C:\ProgramData\Yahoo! Companion
2012-02-10 17:40 - 2012-02-10 17:40 - 0000000 ____D C:\ProgramData\Yahoo!
2012-02-10 17:40 - 2012-02-10 17:39 - 0000000 ____D C:\Program Files (x86)\Yahoo!
2012-02-10 17:40 - 2011-06-08 17:42 - 0414368 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2012-02-10 13:34 - 2012-02-10 13:34 - 0000000 ____D C:\Users\henry\AppData\Local\{F45171E0-2CD6-4B73-A2D7-5D60E8429C00}
2012-02-10 01:34 - 2012-02-10 01:34 - 0000000 ____D C:\Users\henry\AppData\Local\{06D3EC2F-0774-4456-B8C6-9BFC6E213463}
2012-02-10 01:34 - 2012-02-10 01:33 - 0000000 ____D C:\Users\henry\AppData\Local\{E0536CF3-6F3D-425A-87D0-922411A4A8BF}
2012-02-09 22:36 - 2012-03-24 20:54 - 1544192 ____A (Microsoft Corporation) C:\Windows\System32\DWrite.dll
2012-02-09 21:38 - 2012-03-24 20:54 - 1077248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2012-02-09 13:33 - 2012-02-09 13:33 - 0000000 ____D C:\Users\henry\AppData\Local\{D1CE17AC-B2DD-4892-B6A6-6FC8E8228F33}
2012-02-09 13:33 - 2012-02-09 13:33 - 0000000 ____D C:\Users\henry\AppData\Local\{8FEF66E6-73D0-466D-A37B-DC5A0BF7D8E2}
2012-02-09 01:32 - 2012-02-09 01:32 - 0000000 ____D C:\Users\henry\AppData\Local\{1930590C-E6F5-47A8-B289-1D2E391E5F5A}
2012-02-09 01:32 - 2012-02-08 13:32 - 0000000 ____D C:\Users\henry\AppData\Local\{E7728E4B-E2CB-4874-B7AF-F874D5349D5A}
2012-02-09 01:23 - 2012-02-09 01:23 - 0250401 ____A C:\Users\henry\Desktop\hamster.pdf
2012-02-08 18:42 - 2012-02-08 18:42 - 0183430 ____A C:\Users\henry\Desktop\Hamster.jpg
2012-02-08 14:32 - 2012-02-08 14:27 - 0064052 ____A C:\Users\henry\Desktop\6789035393879077612.jpg
2012-02-08 13:49 - 2011-05-20 19:04 - 0000000 ____D C:\Program Files (x86)\Google
2012-02-08 13:32 - 2012-02-08 13:32 - 0000000 ____D C:\Users\henry\AppData\Local\{4C89C6D7-CCBA-4780-8ED4-924F4AA9C961}
2012-02-08 01:31 - 2012-02-08 01:31 - 0000000 ____D C:\Users\henry\AppData\Local\{EEF13889-45EB-4E8C-B59E-176C3678D72A}
2012-02-08 01:31 - 2012-02-08 01:31 - 0000000 ____D C:\Users\henry\AppData\Local\{90D0F317-E7E1-4143-9682-D3F106678733}
2012-02-07 23:56 - 2012-02-07 23:56 - 0000917 ____A C:\Users\Public\Desktop\Steam.lnk
2012-02-07 16:12 - 2012-02-07 16:12 - 0001066 ____A C:\Users\Public\Desktop\VLC media player.lnk
2012-02-07 16:04 - 2012-02-07 16:04 - 21073936 ____A C:\Users\henry\Documents\vlc-1.1.11-win32.exe
2012-02-07 13:31 - 2012-02-07 13:31 - 0000000 ____D C:\Users\henry\AppData\Local\{88226A5E-950A-4CD4-ADC2-6BCEF5C6C8A3}
2012-02-07 13:31 - 2012-02-07 13:30 - 0000000 ____D C:\Users\henry\AppData\Local\{21E9B387-6B87-458F-B3DE-30D6B295DCA7}
2012-02-07 00:09 - 2012-02-07 00:09 - 0000000 ____D C:\Users\henry\AppData\Local\{C9B09461-90A4-4928-B96C-B565EDBC5434}
2012-02-07 00:09 - 2012-02-07 00:09 - 0000000 ____D C:\Users\henry\AppData\Local\{6914B2E4-9F10-4092-BCB9-C2FB2EA918D2}
2012-02-06 17:03 - 2012-02-06 17:02 - 0086432 ____A C:\Windows\SysWOW64\MlTy3E.com_
2012-02-06 13:51 - 2012-02-06 13:51 - 0001109 ____A C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2012-02-06 13:51 - 2011-05-14 20:40 - 0000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2012-02-06 12:09 - 2012-02-06 12:09 - 0000000 ____D C:\Users\henry\AppData\Local\{8BFE6BF3-E4E4-4764-8578-70BBE97D06BA}
2012-02-06 12:09 - 2012-02-06 12:08 - 0000000 ____D C:\Users\henry\AppData\Local\{22D2353D-54D4-4A96-9086-1C9DE25D0FA1}
2012-02-06 00:08 - 2012-02-06 00:08 - 0000000 ____D C:\Users\henry\AppData\Local\{FDC07DAE-4E79-4294-86FF-F8F6C0862D6A}
2012-02-06 00:08 - 2012-02-06 00:08 - 0000000 ____D C:\Users\henry\AppData\Local\{8D967ED0-44E8-4F6D-B165-9F39F950F741}
2012-02-05 23:20 - 2012-02-05 23:05 - 0000000 ____D C:\Users\henry\Desktop\me
2012-02-05 23:07 - 2012-02-05 23:07 - 0023365 ____A C:\Users\henry\Desktop\19354_301822571123_692166123_4808157_6737368_n.jpg
2012-02-05 12:08 - 2012-02-05 12:07 - 0000000 ____D C:\Users\henry\AppData\Local\{53C95817-6508-40C6-A55B-9E69A9AADD84}
2012-02-05 12:07 - 2012-02-05 12:07 - 0000000 ____D C:\Users\henry\AppData\Local\{C1BE8BB6-2AC0-4F38-A730-69D71A0D5BAD}
2012-02-04 21:02 - 2012-02-04 21:02 - 0000000 ____D C:\Users\henry\AppData\Local\{8231ED5A-AD37-4B2C-ADDD-5A83EB6ED23F}
2012-02-04 21:02 - 2012-02-04 21:02 - 0000000 ____D C:\Users\henry\AppData\Local\{2EFDD19F-BEE3-4B7E-84BC-356B8022A2AF}
2012-02-04 03:07 - 2012-02-04 03:07 - 0000000 ____D C:\Users\henry\AppData\Local\{51D2CD95-4114-4742-A059-4992B74023E5}
2012-02-04 03:07 - 2012-02-04 03:06 - 0000000 ____D C:\Users\henry\AppData\Local\{A0234533-CE64-4E6E-825A-76CD021CAC31}
2012-02-03 11:25 - 2012-02-03 11:25 - 0000000 ____D C:\Users\henry\AppData\Local\{821CE428-5D6A-43F6-9780-87C73DAE5A3D}
2012-02-03 11:25 - 2012-02-03 11:24 - 0000000 ____D C:\Users\henry\AppData\Local\{3F4F18AA-1DC8-4101-944B-F399B6BBABA3}
2012-02-03 00:21 - 2011-05-20 19:04 - 0000000 ____D C:\Users\henry\AppData\Local\Google
2012-02-03 00:20 - 2012-02-03 00:20 - 0606536 ____A (Google Inc.) C:\Users\henry\Desktop\GoogleEarthSetup.exe
2012-02-02 22:54 - 2012-02-02 22:53 - 0000000 ____D C:\Users\henry\AppData\Local\{10403399-7398-4B24-915B-067625B7CE63}
2012-02-02 22:53 - 2012-02-02 22:53 - 0000000 ____D C:\Users\henry\AppData\Local\{0167071C-DF9C-47E4-8A1C-FC4A7D569F09}
2012-02-02 20:34 - 2012-03-24 20:54 - 3145728 ____A (Microsoft Corporation) C:\Windows\System32\win32k.sys
2012-02-02 02:25 - 2012-02-02 02:25 - 0000000 ____D C:\Users\henry\AppData\Local\{D467A05C-B7AE-4AA3-8A21-E95F79BA41B6}
2012-02-02 02:25 - 2012-02-01 14:24 - 0000000 ____D C:\Users\henry\AppData\Local\{D35A9E7A-45C7-4BF5-90B2-472AB3A6AE73}
2012-02-01 14:25 - 2012-02-01 14:25 - 0000000 ____D C:\Users\henry\AppData\Local\{12C94DF2-F468-4F1A-890A-B10448CCA927}
2012-02-01 02:24 - 2012-02-01 02:24 - 0000000 ____D C:\Users\henry\AppData\Local\{EE0527D1-8A1D-40BE-9CAD-C8A0C0155A03}
2012-02-01 02:24 - 2012-02-01 02:24 - 0000000 ____D C:\Users\henry\AppData\Local\{BD3E4962-FA5D-4534-88FD-8C36A0659C97}
2012-01-31 14:23 - 2012-01-31 14:23 - 0000000 ____D C:\Users\henry\AppData\Local\{6577B562-DDDD-4042-B89A-162637D3C29D}
2012-01-31 14:23 - 2012-01-31 14:23 - 0000000 ____D C:\Users\henry\AppData\Local\{446AF6A5-92B9-42D8-B71F-DD0D7F1E05FB}
2012-01-31 02:23 - 2012-01-31 02:23 - 0000000 ____D C:\Users\henry\AppData\Local\{9854EF1D-36F8-4BAE-A03A-9BCFBA49E2B4}
2012-01-31 02:23 - 2012-01-30 14:22 - 0000000 ____D C:\Users\henry\AppData\Local\{CE98DAF8-DA18-4C25-AFD8-1589A0F21CF4}
2012-01-31 01:25 - 2012-01-31 01:25 - 0241179 ____A C:\Users\henry\Desktop\f5.jpg
2012-01-30 14:22 - 2012-01-30 14:22 - 0000000 ____D C:\Users\henry\AppData\Local\{E24CF0ED-123A-4258-82F2-0E5226B8F162}
2012-01-30 02:18 - 2012-01-30 02:18 - 0000252 ____A C:\Windows\Tasks\Spybot - Search & Destroy - Scheduled Task.job
2012-01-29 19:17 - 2012-01-29 19:17 - 0000000 ____D C:\Users\henry\AppData\Local\{7E541046-E135-483E-8465-93F5EA04A672}
2012-01-29 19:17 - 2012-01-29 19:17 - 0000000 ____D C:\Users\henry\AppData\Local\{451AA597-0315-4003-9E5B-083B5E744610}
2012-01-29 02:10 - 2012-01-29 02:09 - 0000000 ____D C:\Users\henry\AppData\Local\{0A6F146E-8947-46BF-8393-B13F322406F4}
2012-01-29 02:09 - 2012-01-28 14:08 - 0000000 ____D C:\Users\henry\AppData\Local\{D38B6B30-D334-48D7-9EA4-1A23E1DB49FF}
2012-01-28 14:09 - 2012-01-28 14:09 - 0000000 ____D C:\Users\henry\AppData\Local\{527962A1-2B8E-4B6E-B08E-888B49AD59F9}
2012-01-27 12:16 - 2012-01-27 12:16 - 0000000 ____D C:\Users\henry\AppData\Local\{77F148F5-40D5-4A2A-8FEB-A710EE9ABD95}
2012-01-27 12:16 - 2012-01-27 12:15 - 0000000 ____D C:\Users\henry\AppData\Local\{A0A1117D-475B-4940-8032-296BCEF35595}
2012-01-26 13:23 - 2012-01-26 13:23 - 0000000 ____D C:\Users\henry\AppData\Local\{CC4FEE6F-23CE-49CC-ADD7-F43E0BB2BB98}
2012-01-26 13:23 - 2012-01-26 13:23 - 0000000 ____D C:\Users\henry\AppData\Local\{592353AE-6B83-42B1-983D-3A2AEC7D0E31}
2012-01-25 22:58 - 2012-01-25 22:58 - 0000000 ____D C:\Users\henry\AppData\Local\{E5184E93-3C52-401B-AD2D-529782A3319A}
2012-01-25 22:58 - 2012-01-25 22:58 - 0000000 ____D C:\Users\henry\AppData\Local\{D07151E3-9A24-49B4-B54E-DEFC4B80BD91}
2012-01-25 02:10 - 2012-01-25 02:09 - 0000000 ____D C:\Users\henry\AppData\Local\{D2761134-DD84-41A1-A59F-987C56DF0671}
2012-01-25 02:09 - 2012-01-25 02:09 - 0000000 ____D C:\Users\henry\AppData\Local\{6AD18E66-C977-4374-AC11-01FE042A26DB}
2012-01-24 22:38 - 2012-03-24 20:54 - 0149504 ____A (Microsoft Corporation) C:\Windows\System32\rdpcorekmts.dll
2012-01-24 22:38 - 2012-03-24 20:54 - 0077312 ____A (Microsoft Corporation) C:\Windows\System32\rdpwsx.dll
2012-01-24 22:33 - 2012-03-24 20:54 - 0009216 ____A (Microsoft Corporation) C:\Windows\System32\rdrmemptylst.exe
2012-01-24 14:09 - 2012-01-24 14:09 - 0000000 ____D C:\Users\henry\AppData\Local\{EEA7CB4C-FADF-441E-BDDD-3D8045F2D990}
2012-01-24 14:09 - 2012-01-24 14:09 - 0000000 ____D C:\Users\henry\AppData\Local\{D4D95E07-C9A7-48C3-BDAE-8F2AE8CEEC5E}
2012-01-24 02:08 - 2012-01-24 02:08 - 0000000 ____D C:\Users\henry\AppData\Local\{0531A247-4C01-430F-8F7C-B3A2EF02A929}
2012-01-24 02:08 - 2012-01-23 14:08 - 0000000 ____D C:\Users\henry\AppData\Local\{D32DC6F5-5A6A-4F57-AD41-6FEAE329E0B2}
2012-01-23 16:07 - 2012-01-14 16:55 - 0000000 ____D C:\Users\henry\Desktop\monday
2012-01-23 14:08 - 2012-01-23 14:08 - 0000000 ____D C:\Users\henry\AppData\Local\{021B7D4B-0322-4C2E-B20F-08C93A9D4286}
2012-01-22 23:44 - 2012-01-22 23:44 - 0000931 ____A C:\Users\Public\Desktop\ZooskMessenger.lnk
2012-01-22 23:44 - 2012-01-22 23:44 - 0000000 ____D C:\Users\henry\AppData\Roaming\com.zoosk.Desktop.096E6A67431258A508A2446A847B240591D2C99B.1
2012-01-22 23:44 - 2012-01-22 23:44 - 0000000 ____D C:\Program Files (x86)\ZooskMessenger
2012-01-22 19:39 - 2012-01-22 19:39 - 0021082 ____A C:\Users\henry\Desktop\bowlign.jpg
2012-01-22 19:11 - 2012-01-22 19:11 - 0000000 ____D C:\Users\henry\AppData\Local\{E837D6EA-8546-4C0F-8FDB-40E0FFD6F93D}
2012-01-22 19:11 - 2012-01-22 19:11 - 0000000 ____D C:\Users\henry\AppData\Local\{972A93F9-15B0-435F-8F5F-27A8001A5F1B}
2012-01-22 01:54 - 2012-01-22 01:54 - 0000000 ____D C:\Users\henry\AppData\Local\{EA67E4DA-554C-4F9E-B874-555FE863880F}
2012-01-22 01:54 - 2012-01-22 01:54 - 0000000 ____D C:\Users\henry\AppData\Local\{73723E2A-CC41-4467-B3E4-121DFE212E2A}
2012-01-21 13:53 - 2012-01-21 13:53 - 0000000 ____D C:\Users\henry\AppData\Local\{E0A95C72-D48E-489F-8200-45F98867E859}
2012-01-21 13:53 - 2012-01-21 13:53 - 0000000 ____D C:\Users\henry\AppData\Local\{A4B30153-5D72-467E-A327-139E0F597969}
2012-01-21 01:53 - 2012-01-21 01:53 - 0000000 ____D C:\Users\henry\AppData\Local\{ACB091C6-86F9-441E-AAC7-0C7606B4A10F}
2012-01-21 01:53 - 2012-01-21 01:52 - 0000000 ____D C:\Users\henry\AppData\Local\{A66040E4-FF10-40BE-9CAE-9EE5627EE739}
2012-01-20 18:33 - 2012-01-20 18:33 - 0001205 ____A C:\Users\henry\Desktop\FixNCR.reg
2012-01-20 18:29 - 2012-01-20 18:29 - 0000012 ____A C:\Windows\srun.log
2012-01-20 18:29 - 2012-01-20 18:29 - 0000000 ____D C:\Windows\system64
2012-01-20 18:29 - 2009-07-13 19:20 - 0000000 ____D C:\Windows\Resources
2012-01-20 15:28 - 2010-12-01 19:34 - 0000000 ____D C:\Users\henry\AppData\Local\Adobe
2012-01-20 13:52 - 2012-01-20 13:52 - 0000000 ____D C:\Users\henry\AppData\Local\{FB7A5117-7308-4765-9C6F-6ED46CDC858C}
2012-01-20 13:52 - 2012-01-20 13:52 - 0000000 ____D C:\Users\henry\AppData\Local\{6195FBEC-2090-4E5C-ABE7-5B5522FB2FF7}
2012-01-20 03:22 - 2011-10-26 17:42 - 0000000 ____D C:\Users\henry\AppData\Roaming\Skype
2012-01-20 01:52 - 2012-01-20 01:51 - 0000000 ____D C:\Users\henry\AppData\Local\{261D44BC-CA6B-45C5-9281-A9C1277D2752}
2012-01-20 01:51 - 2012-01-19 13:50 - 0000000 ____D C:\Users\henry\AppData\Local\{EF2A7DBE-6431-478E-97A9-D8C97384DE80}
2012-01-19 13:51 - 2012-01-19 13:51 - 0000000 ____D C:\Users\henry\AppData\Local\{BEBA7A96-47E7-4FEE-8205-FB692FB2F511}
2012-01-19 00:28 - 2012-01-19 00:27 - 0000000 ____D C:\Users\henry\AppData\Local\{0309A09C-6D14-4691-A686-22C03AB3EFDA}
2012-01-19 00:27 - 2012-01-18 12:27 - 0000000 ____D C:\Users\henry\AppData\Local\{C26BE47B-90FF-430C-A1DA-13FF9AC167E3}
2012-01-18 12:27 - 2012-01-18 12:27 - 0000000 ____D C:\Users\henry\AppData\Local\{D80104C8-8361-4FA8-8FC3-41F2A7FC6877}
2012-01-18 00:27 - 2010-12-01 19:54 - 0000000 ____D C:\Users\All Users\regid.1986-12.com.adobe
2012-01-18 00:27 - 2010-12-01 19:54 - 0000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2012-01-17 20:44 - 2010-12-01 19:40 - 0000000 ____D C:\Program Files\Adobe
2012-01-17 20:44 - 2010-12-01 19:39 - 0000000 ____D C:\Program Files\Common Files\Adobe
2012-01-17 20:39 - 2010-12-01 19:36 - 0000000 ____D C:\Users\All Users\Adobe
2012-01-17 20:39 - 2010-12-01 19:36 - 0000000 ____D C:\ProgramData\Adobe
2012-01-17 20:30 - 2012-01-17 20:30 - 0000000 ____D C:\Users\henry\Adobe Flash Builder 4.5
2012-01-17 20:23 - 2012-01-17 20:23 - 0002026 ____A C:\Users\Public\Desktop\Adobe Acrobat X Pro.lnk
2012-01-17 20:20 - 2012-01-17 20:20 - 0001085 ____A C:\Users\Public\Desktop\Adobe Content Viewer.lnk
2012-01-17 20:19 - 2012-01-17 20:19 - 0000000 ____D C:\Program Files (x86)\Adobe Story
2012-01-17 20:17 - 2012-01-17 20:17 - 0000000 ____D C:\Program Files (x86)\My Company Name
2012-01-17 20:08 - 2012-01-17 18:42 - 0000000 ____D C:\Users\henry\Desktop\CS5.5 Master Collection
2012-01-17 19:45 - 2012-01-17 19:45 - 0000000 ____D C:\Users\henry\Documents\AIMLogger
2012-01-17 18:41 - 2012-01-17 18:41 - 2288128 ____A C:\Users\henry\Desktop\LeagueofLegends.exe
2012-01-17 17:48 - 2012-01-17 17:48 - 0000000 ____D C:\Users\henry\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant
2012-01-17 17:47 - 2012-01-17 17:47 - 0001031 ____A C:\Users\Public\Desktop\Adobe Download Assistant.lnk
2012-01-17 17:47 - 2012-01-17 17:47 - 0000000 ____D C:\Program Files (x86)\Adobe Download Assistant
2012-01-17 17:46 - 2012-01-17 17:46 - 0000000 ____D C:\Users\henry\Desktop\1325-1279-4409-9491-6280-5123
2012-01-17 16:32 - 2012-01-17 16:32 - 0000000 ___AD C:\Users\henry\Desktop\Loomis
2012-01-17 16:01 - 2012-01-17 16:01 - 0000000 ____D C:\Users\henry\AppData\Local\{8D0FEB72-BB7E-46A6-B9B3-7FB56D4B6E52}
2012-01-17 16:01 - 2012-01-17 16:01 - 0000000 ____D C:\Users\henry\AppData\Local\{83A49127-45FE-4108-8EE8-DE41CB3EB8BB}
2012-01-17 12:19 - 2012-01-17 12:19 - 0000000 ____D C:\Users\henry\AppData\Local\{A46937CE-5DE6-404F-B847-91FA41A3B7A5}
2012-01-17 12:19 - 2012-01-17 12:18 - 0000000 ____D C:\Users\henry\AppData\Local\{28F7D0F7-B6DF-4F27-82BC-BBE51E714DEB}
2012-01-16 21:41 - 2011-02-10 02:00 - 0000000 ____D C:\Users\henry\AppData\Local\Deployment
2012-01-16 17:25 - 2012-01-16 17:25 - 0000000 ____D C:\Users\henry\AppData\Local\{89AFB00C-7BF1-45C1-BB43-52D0E2E4FE2A}
2012-01-16 17:25 - 2012-01-16 17:25 - 0000000 ____D C:\Users\henry\AppData\Local\{78362BF3-B60B-41A6-8CA1-D224649E39C3}
2012-01-15 19:31 - 2012-01-15 19:30 - 0000000 ____D C:\Users\henry\AppData\Local\{0687E56E-8DD3-4A4F-AD99-CB6CEC59616F}
2012-01-15 19:30 - 2012-01-15 19:30 - 0000000 ____D C:\Users\henry\AppData\Local\{1E27CF8E-1F34-4CB5-98A9-E4EC9B4924AA}
2012-01-14 17:05 - 2012-01-14 17:04 - 0000000 ____D C:\Users\henry\AppData\Local\{A5975671-0DA4-4AD9-B057-F1AE6BD517E3}
2012-01-14 17:04 - 2012-01-14 17:04 - 0000000 ____D C:\Users\henry\AppData\Local\{F0516731-D776-4D15-AE35-8EB612714B0B}
2012-01-14 17:01 - 2011-01-10 14:20 - 0000000 ____D C:\Users\All Users\FLEXnet
2012-01-14 17:01 - 2011-01-10 14:20 - 0000000 ____D C:\ProgramData\FLEXnet
2012-01-14 13:09 - 2012-01-14 13:09 - 0000000 ____D C:\Users\henry\AppData\Local\{80E442E0-A8B1-4289-BD30-E443532E2EF3}
2012-01-14 13:09 - 2012-01-14 13:09 - 0000000 ____D C:\Users\henry\AppData\Local\{65E26C71-8A8C-4616-96FC-EDED6C804B74}
2012-01-14 01:08 - 2012-01-14 01:08 - 0000000 ____D C:\Users\henry\AppData\Local\{2AFCA2BB-508F-48C6-BBD5-D8719496CF38}
2012-01-14 01:08 - 2012-01-13 13:08 - 0000000 ____D C:\Users\henry\AppData\Local\{A908EBE2-E170-4317-A9E1-11C730164280}
2012-01-13 13:08 - 2012-01-13 13:08 - 0000000 ____D C:\Users\henry\AppData\Local\{F9BD8595-D5A1-4276-AD21-D4B58CC48B86}
2012-01-13 12:54 - 2012-01-13 12:54 - 0711412 ____A C:\Users\henry\Desktop\Henry_Ong_Resume_kabam.jpg
2012-01-13 01:07 - 2012-01-13 01:07 - 0000000 ____D C:\Users\henry\AppData\Local\{634C9105-DE8A-4CF0-9C3B-CDA99D39F910}
2012-01-13 01:07 - 2012-01-12 13:06 - 0000000 ____D C:\Users\henry\AppData\Local\{93B0058A-EBF0-418A-8472-9D282B775015}
2012-01-12 13:07 - 2012-01-12 13:07 - 0000000 ____D C:\Users\henry\AppData\Local\{ACB4D370-51F7-4579-BDA0-03A1A4158190}
2012-01-12 01:06 - 2012-01-12 01:06 - 0000000 ____D C:\Users\henry\AppData\Local\{87FB357F-7D2E-403D-AB30-4160C1A6A01C}
2012-01-12 01:06 - 2012-01-11 13:05 - 0000000 ____D C:\Users\henry\AppData\Local\{BC97A04C-C788-4767-9E7B-E5B1486B00FD}
2012-01-11 13:06 - 2012-01-11 13:06 - 0000000 ____D C:\Users\henry\AppData\Local\{FDCBFBD4-691F-4D21-B00D-418BE23B8068}
2012-01-11 01:04 - 2012-01-11 01:03 - 0000000 ____D C:\Users\henry\AppData\Local\{F0F9D0B6-32A7-478F-961C-1B75C4C9D10C}
2012-01-11 01:03 - 2012-01-10 13:03 - 0000000 ____D C:\Users\henry\AppData\Local\{1B925365-AF60-41A4-A789-5FD7A0B13AD0}
2012-01-10 21:25 - 2012-01-10 21:25 - 25972132 ____N C:\Users\henry\Desktop\MVI_2848.AVI
2012-01-10 13:03 - 2012-01-10 13:03 - 0000000 ____D C:\Users\henry\AppData\Local\{36ABFCC2-24EC-4EE8-98CD-10CEF19B752E}
2012-01-10 01:03 - 2012-01-10 01:02 - 0000000 ____D C:\Users\henry\AppData\Local\{52051B56-160B-4DB2-B4EE-90C9D2B462C8}
2012-01-10 01:02 - 2012-01-09 13:02 - 0000000 ____D C:\Users\henry\AppData\Local\{5E8E688F-D1A5-444F-A5D8-1178702833BD}
2012-01-09 21:29 - 2012-01-09 21:29 - 0025550 ____A C:\Users\henry\Desktop\21554_334319071123_692166123_4959032_6616784_n.jpg
2012-01-09 13:02 - 2012-01-09 13:02 - 0000000 ____D C:\Users\henry\AppData\Local\{99674EA8-28F7-43B6-AF1A-23BDA1E3CB5D}
2012-01-08 19:22 - 2012-01-08 19:22 - 0000000 ____D C:\Users\henry\AppData\Local\{2243523E-8705-48C8-AF8D-711C76B8E8B6}
2012-01-08 19:22 - 2012-01-08 19:22 - 0000000 ____D C:\Users\henry\AppData\Local\{0EAADB92-3AEF-4D8C-9BC1-23840313CC91}
2012-01-08 01:11 - 2012-01-08 01:11 - 0000000 ____D C:\Users\henry\AppData\Local\{7AFAE1B3-901C-4F53-AF70-76E7D17CA413}
2012-01-08 01:11 - 2012-01-07 13:11 - 0000000 ____D C:\Users\henry\AppData\Local\{2302C642-02F2-4DF8-A362-E536C0169523}
2012-01-07 13:11 - 2012-01-07 13:11 - 0000000 ____D C:\Users\henry\AppData\Local\{90004412-5311-41F4-AA77-0634FBB2E758}
2012-01-07 01:10 - 2012-01-07 01:10 - 0000000 ____D C:\Users\henry\AppData\Local\{9A5A71CB-6E24-45A1-9060-3FF012646EDE}
2012-01-07 01:10 - 2012-01-06 13:10 - 0000000 ____D C:\Users\henry\AppData\Local\{E71B4579-CBEA-401A-91BE-7DC9A06409E9}
2012-01-06 13:10 - 2012-01-06 13:10 - 0000000 ____D C:\Users\henry\AppData\Local\{7ADDF6C5-92D2-4DFF-9DA0-ACCA4F58F970}
2012-01-06 01:09 - 2012-01-06 01:09 - 0000000 ____D C:\Users\henry\AppData\Local\{21CC2EFB-27EC-4FEE-855E-9AD018FB3F12}
2012-01-06 01:09 - 2012-01-05 13:09 - 0000000 ____D C:\Users\henry\AppData\Local\{498730F2-1951-4599-8A4B-A9E90127C0FA}
2012-01-05 13:09 - 2012-01-05 13:09 - 0000000 ____D C:\Users\henry\AppData\Local\{45B971F1-EBA1-42CC-9305-666786252700}
2012-01-05 01:08 - 2012-01-05 01:08 - 0000000 ____D C:\Users\henry\AppData\Local\{F1DE812B-4D7D-499B-860E-15A3F23849F4}
2012-01-05 01:08 - 2012-01-05 01:08 - 0000000 ____D C:\Users\henry\AppData\Local\{455CB302-A28F-435A-AEA7-028629AD4080}
========================= Known DLLs (Whitelisted) ============
========================= Bamital & volsnap Check ============
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
========================= Memory info ======================
Percentage of memory in use: 9%
Total physical RAM: 8191.23 MB
Available physical RAM: 7389.16 MB
Total Pagefile: 8189.38 MB
Available Pagefile: 7366.62 MB
Total Virtual: 8192 MB
Available Virtual: 8191.9 MB
======================= Partitions =========================
1 Drive c: () (Fixed) (Total:465.66 GB) (Free:235.51 GB) NTFS
3 Drive f: (PATRIOT) (Removable) (Total:7.45 GB) (Free:2.17 GB) FAT32
4 Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS
5 Drive y: (System Reserved) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Disk ### Status Size Free Dyn Gpt
-------- ------------- ------- ------- --- ---
Disk 0 Online 465 GB 0 B
Disk 1 Online 7640 MB 0 B
Partitions of Disk 0:
===============
Partition ### Type Size Offset
------------- ---------------- ------- -------
Partition 1 Primary 100 MB 1024 KB
Partition 2 Primary 465 GB 101 MB
======================================================================================================
Disk: 0
Partition 1
Type : 07
Hidden: No
Active: Yes
Volume ### Ltr Label Fs Type Size Status Info
---------- --- ----------- ----- ---------- ------- --------- --------
* Volume 1 Y System Rese NTFS Partition 100 MB Healthy
======================================================================================================
Disk: 0
Partition 2
Type : 07
Hidden: No
Active: No
Volume ### Ltr Label Fs Type Size Status Info
---------- --- ----------- ----- ---------- ------- --------- --------
* Volume 2 C NTFS Partition 465 GB Healthy
======================================================================================================
Partitions of Disk 1:
===============
Partition ### Type Size Offset
------------- ---------------- ------- -------
Partition 1 Primary 7636 MB 4032 KB
======================================================================================================
Disk: 1
Partition 1
Type : 0C
Hidden: No
Active: No
Volume ### Ltr Label Fs Type Size Status Info
---------- --- ----------- ----- ---------- ------- --------- --------
* Volume 3 F PATRIOT FAT32 Removable 7636 MB Healthy
======================================================================================================
==========================================================
Last Boot: 2012-04-02 22:07
======================= End Of Log ==========================
Ran by SYSTEM at 03-04-2012 03:03:03
Running from F:\
Windows 7 Home Premium (X64) OS Language: English(US)
The current controlset is ControlSet001
========================== Registry (Whitelisted) =============
HKLM\...\Run: [AdobeAAMUpdater-1.0] "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [499608 2011-03-30] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [HDAudDeck] C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe -r [2439072 2010-05-24] (VIA)
HKLM-x32\...\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin [406992 2010-02-22] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS4ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin [611712 2008-08-14] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" [254696 2011-04-08] (Sun Microsystems, Inc.)
HKLM-x32\...\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [843712 2012-01-02] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun [98304 2010-09-30] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [Malwarebytes' Anti-Malware] "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray [460872 2012-01-13] (Malwarebytes Corporation)
HKLM-x32\...\Run: [AdobeCS5.5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe" -launchedbylogin [1523360 2011-01-12] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [] [x]
HKLM-x32\...\Run: [Adobe Acrobat Speed Launcher] "C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe" [36760 2010-10-25] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Acrobat Assistant 8.0] "C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe" [821144 2010-10-25] (Adobe Systems Inc.)
HKU\henry\...\Run: [EPSON Stylus Photo 1400 Series] C:\Windows\system32\spool\DRIVERS\x64\3\E_FATIBUA.EXE /FU "C:\Windows\TEMP\E_S6141.tmp" /EF "HKCU" [x]
HKU\henry\...\Run: [AdobeBridge] [x]
HKU\henry\...\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun [1305408 2011-01-05] (DT Soft Ltd)
HKU\henry\...\Run: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background [4283256 2011-05-13] (Microsoft Corporation)
HKU\henry\...\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /nosplash /minimized [19550344 2011-10-13] (Skype Technologies S.A.)
HKU\henry\...\Run: [Akamai NetSession Interface] "C:\Users\henry\AppData\Local\Akamai\netsession_win.exe" [3329824 2012-02-02] (Akamai Technologies, Inc)
HKU\henry\...\Run: [HydraVisionDesktopManager] "C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe" [393216 2010-09-30] (AMD)
HKU\henry\...\Run: [HydraVisionMDEngine] "C:\Program Files (x86)\ATI Technologies\HydraVision\HydraMD.exe" [569344 2010-09-30] (AMD)
HKU\henry\...\Run: [Steam] "C:\Program Files (x86)\Steam\Steam.exe" -silent [1242448 2012-02-07] (Valve Corporation)
HKU\henry\...\Run: [Messenger (Yahoo!)] "C:\PROGRA~2\Yahoo!\Messenger\YahooMessenger.exe" -quiet [6497592 2012-01-04] (Yahoo! Inc.)
HKU\henry\...\Run: [Aim] "C:\Program Files (x86)\AIM\aim.exe" /d locale=en-US [4321112 2012-02-29] (AOL Inc.)
Tcpip\Parameters: [DhcpNameServer] 76.14.0.8 76.14.0.9
==================== Services (Whitelisted) ======
2 EPSON_PM_RPCV4_01; C:\ProgramData\EPSON\EPW!3 SSRP\E_S30RP1.EXE [102400 2006-04-18] (SEIKO EPSON CORPORATION)
3 FLEXnet Licensing Service 64; "C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe" [1038088 2011-05-26] (Acresso Software Inc.)
2 Lavasoft Ad-Aware Service; "C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWService.exe" [2152152 2011-09-02] (Lavasoft Limited)
2 MBAMService; "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe" [652360 2012-01-13] (Malwarebytes Corporation)
2 TabletServicePen; C:\Windows\system32\Pen_Tablet.exe [5414184 2009-07-15] (Wacom Technology, Corp.)
2 WTouchService; C:\Program Files\WTouch\WTouchService.exe [127272 2009-07-15] (Wacom Technology, Corp.)
2 Akamai; c:\program files (x86)\common files\akamai/netsession_win_7de0ed9.dll [x]
========================== Drivers (Whitelisted) =============
2 adfs; C:\Windows\System32\Drivers\adfs.sys [88632 2008-06-27] (Adobe Systems, Inc.)
2 adfs; C:\Windows\SysWow64\Drivers\adfs.sys [74720 2008-08-14] (Adobe Systems, Inc.)
3 DrvAgent64; C:\Windows\SysWow64\Drivers\DrvAgent64.sys [21712 2011-12-04] (Phoenix Technologies)
1 dtsoftbus01; C:\Windows\System32\Drivers\dtsoftbus01.sys [254528 2011-01-19] (DT Soft Ltd)
3 Gun; \??\C:\Game\SoftnyxGame\GunBoundIS\Gun64.sys [45176 2011-06-24] ()
3 ivusb; C:\Windows\System32\Drivers\ivusb.sys [29720 2010-07-28] (Initio Corporation)
3 Lavasoft Kernexplorer; \??\C:\Program Files (x86)\Lavasoft\Ad-Aware\KernExplorer64.sys [17152 2011-08-09] ()
0 Lbd; C:\Windows\System32\Drivers\Lbd.sys [69376 2011-07-21] (Lavasoft AB)
3 MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [23152 2011-12-10] (Malwarebytes Corporation)
3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-07-15] ()
3 NVENETFD; C:\Windows\System32\DRIVERS\nvm62x64.sys [408960 2009-06-10] (NVIDIA Corporation)
0 nvstor64; C:\Windows\System32\Drivers\nvstor64.sys [244328 2010-04-08] (NVIDIA Corporation)
3 wacmoumonitor; C:\Windows\System32\Drivers\wacmoumonitor.sys [18216 2010-01-24] (Wacom Technology)
3 wacommousefilter; C:\Windows\System32\Drivers\wacommousefilter.sys [12848 2007-02-16] (Wacom Technology)
3 WacomVKHid; C:\Windows\System32\Drivers\WacomVKHid.sys [12976 2007-02-15] (Wacom Technology)
3 AODDriver4.0; [x]
2 AODDriver4.01; \??\C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [x]
4 nvlddmkm; C:\Windows\System32\DRIVERS\nvlddmkm.sys [x]
3 NVNET; C:\Windows\System32\DRIVERS\nvmf6264.sys [x]
3 wacomvhid; C:\Windows\System32\DRIVERS\wacomvhid.sys [x]
========================== NetSvcs (Whitelisted) ===========
NETSVC: tgsrvc_smartagent
============ One Month Created Files and Folders ==============
2012-04-03 00:52 - 2012-04-03 00:57 - 4453973 ____A (Swearware) C:\Users\henry\Downloads\ComboFix.exe
2012-04-03 00:35 - 2012-04-03 03:03 - 0000000 ____D C:\FRST
2012-04-02 22:23 - 2012-04-03 09:32 - 4453973 ____A (Swearware) C:\Users\henry\Desktop\svscsv.com
2012-04-02 21:47 - 2012-04-02 21:47 - 4453973 ____A (Swearware) C:\Users\henry\Desktop\svchostt.com
2012-04-02 12:21 - 2012-04-02 12:21 - 0000000 ____A C:\Files.txt
2012-04-02 12:19 - 2012-04-02 12:21 - 0000000 ____D C:\Users\henry\Desktop\FileLister Folder
2012-04-02 12:01 - 2012-04-02 23:48 - 0020359 ____A C:\Users\henry\Desktop\FileLister.zip
2012-04-01 19:39 - 2012-04-02 06:26 - 98077435 ____A (Igor Pavlov) C:\Users\henry\Desktop\OTLPEStd.exe
2012-04-01 19:36 - 2012-04-01 19:36 - 0274888 ____A C:\Windows\Minidump\040112-24538-01.dmp
2012-04-01 18:46 - 2012-03-29 13:54 - 0132597 ____A C:\Users\henry\Desktop\Flash_Disinfector.exe
2012-04-01 18:38 - 2012-04-02 06:26 - 98077435 ____A (Igor Pavlov) C:\Users\henry\Desktop\svchost.exe (2).exe
2012-03-29 01:56 - 2012-03-29 13:47 - 0294400 ____A C:\Users\henry\Desktop\exeHelper.com
2012-03-29 01:13 - 2012-03-29 01:14 - 0013365 ____A C:\Users\henry\Desktop\New Text Document.txt
2012-03-29 00:08 - 2012-03-29 00:08 - 44238026 ____A C:\Users\henry\Desktop\color4.psd
2012-03-28 23:58 - 2012-03-28 23:58 - 44007097 ____A C:\Users\henry\Desktop\color3.psd
2012-03-28 23:48 - 2012-03-28 23:50 - 44379196 ____A C:\Users\henry\Desktop\color2.psd
2012-03-28 22:51 - 2012-03-28 22:51 - 42427168 ____A C:\Users\henry\Desktop\color1.psd
2012-03-28 15:05 - 2012-03-28 15:05 - 0110590 ____A C:\Users\henry\Desktop\003[1].JPG
2012-03-28 12:07 - 2012-03-28 12:07 - 0751581 ____A (maliprog @ Geekstogo) C:\Users\henry\Desktop\TheKiller2.scr
2012-03-28 12:04 - 2012-03-28 12:04 - 0751581 ____A (maliprog @ Geekstogo) C:\Users\henry\Downloads\TheKiller.scr
2012-03-26 19:51 - 2012-03-28 19:05 - 54543243 ____A C:\Users\henry\Desktop\sssss (2).psd
2012-03-26 12:43 - 2012-03-26 12:43 - 10165440 ____A (Microsoft Corporation) C:\Users\henry\Desktop\mseinstall.exe
2012-03-26 12:40 - 2012-03-26 12:47 - 0002150 ____A C:\Windows\epplauncher.mif
2012-03-26 12:37 - 2012-03-26 12:37 - 10165440 ____A (Microsoft Corporation) C:\Users\henry\Downloads\mseinstall.exe
2012-03-25 22:30 - 2012-03-26 09:31 - 256982966 ____A C:\Users\henry\Desktop\kav_rescue_10.iso
2012-03-25 19:17 - 2012-03-25 19:21 - 178789312 ____A (Kaspersky Lab) C:\Users\henry\Downloads\kis2012_12.0.0.374aEN_2778.exe
2012-03-25 19:07 - 2012-03-25 19:08 - 18099082 ____A C:\Users\henry\Downloads\kav_rescue_10.iso.g19r5to.partial
2012-03-24 23:39 - 2012-03-24 23:39 - 0000129 ____A C:\Windows\System32\MRT.INI
2012-03-24 20:54 - 2012-02-09 22:36 - 1544192 ____A (Microsoft Corporation) C:\Windows\System32\DWrite.dll
2012-03-24 20:54 - 2012-02-09 21:38 - 1077248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2012-03-24 20:54 - 2012-02-02 20:34 - 3145728 ____A (Microsoft Corporation) C:\Windows\System32\win32k.sys
2012-03-24 20:54 - 2012-01-24 22:38 - 0149504 ____A (Microsoft Corporation) C:\Windows\System32\rdpcorekmts.dll
2012-03-24 20:54 - 2012-01-24 22:38 - 0077312 ____A (Microsoft Corporation) C:\Windows\System32\rdpwsx.dll
2012-03-24 20:54 - 2012-01-24 22:33 - 0009216 ____A (Microsoft Corporation) C:\Windows\System32\rdrmemptylst.exe
2012-03-24 20:45 - 2012-03-24 20:45 - 0274888 ____A C:\Windows\Minidump\032412-22027-01.dmp
2012-03-24 20:12 - 2012-02-16 22:38 - 1031680 ____A (Microsoft Corporation) C:\Windows\System32\rdpcore.dll
2012-03-24 20:12 - 2012-02-16 21:34 - 0826880 ____A (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll
2012-03-24 20:12 - 2012-02-16 20:58 - 0210944 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\rdpwd.sys
2012-03-24 20:12 - 2012-02-16 20:57 - 0023552 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tdtcp.sys
2012-03-21 20:39 - 2012-03-21 23:47 - 14082558 ____A C:\Users\henry\Desktop\sssss.psd
2012-03-21 20:30 - 2012-03-22 03:16 - 0063052 ____A C:\Users\henry\Desktop\Photo 99.jpg
2012-03-21 20:23 - 2012-03-22 08:14 - 0594432 ____A (OldTimer Tools) C:\Users\henry\Desktop\svchost.exe.exe
2012-03-21 20:02 - 2009-07-13 17:14 - 0020480 ____A (Microsoft Corporation) C:\Windows\svchost.exe
2012-03-21 16:24 - 2012-03-21 16:24 - 64784733 ____A C:\Users\henry\Desktop\progress of 3 weeks.psd
2012-03-21 14:02 - 2012-03-21 14:02 - 1977044 ____A C:\Users\henry\Desktop\final scne3.jpg
2012-03-21 13:01 - 2012-03-21 13:01 - 0000000 ____D C:\Users\henry\AppData\Local\{C025742C-FE8A-4939-ABA2-0E018F6821A5}
2012-03-21 13:00 - 2012-03-21 13:01 - 0000000 ____D C:\Users\henry\AppData\Local\{3B6DB259-A9FA-4CA7-B29B-6F1EFC819C94}
2012-03-21 00:42 - 2012-03-21 00:42 - 0000000 ____D C:\Users\henry\AppData\Local\{FEF4CBE1-6973-4D71-88F9-C7A656EFE5AC}
2012-03-20 12:42 - 2012-03-20 12:42 - 0000000 ____D C:\Users\henry\AppData\Local\{19DA093A-3CF8-4AF1-8400-A4C1CA4004EF}
2012-03-20 12:41 - 2012-03-21 00:42 - 0000000 ____D C:\Users\henry\AppData\Local\{374C5AC8-F957-4B0D-B00E-8E137F1EF1AB}
2012-03-19 21:05 - 2012-03-19 21:46 - 0022245 ____A C:\Users\henry\Desktop\pinball.odt
2012-03-19 15:08 - 2012-03-19 15:08 - 0000000 ____D C:\Users\henry\AppData\Local\{F959C390-FD7C-40A7-B7CE-2B716273A019}
2012-03-19 15:07 - 2012-03-19 15:08 - 0000000 ____D C:\Users\henry\AppData\Local\{70925E63-9DEF-493B-B2E0-9CF56444FCC7}
2012-03-17 20:57 - 2012-03-17 20:57 - 0000000 ____D C:\Users\henry\AppData\Local\{B309C81B-53D5-4529-96ED-A183AAB850CD}
2012-03-17 20:57 - 2012-03-17 20:57 - 0000000 ____D C:\Users\henry\AppData\Local\{543EEA10-5C4B-4C53-8B5B-EAC4B1204E49}
2012-03-17 11:07 - 2012-03-17 11:07 - 1712906 ____A C:\Users\henry\Desktop\girlandtheredumbrella.jpg
2012-03-17 01:39 - 2012-03-17 01:39 - 0000000 ____D C:\Users\henry\AppData\Local\{B4A96DEB-DEBB-4EDB-B3F8-5184EA92748F}
2012-03-16 19:49 - 2012-03-20 21:59 - 74955469 ____A C:\Users\henry\Desktop\final scne.psd
2012-03-16 13:48 - 2012-04-02 12:08 - 0000000 ____D C:\Users\henry\Desktop\desert final scene
2012-03-16 13:38 - 2012-03-17 01:39 - 0000000 ____D C:\Users\henry\AppData\Local\{52A8B52C-7ECA-41B5-9A82-F4669CA78101}
2012-03-16 13:38 - 2012-03-16 13:38 - 0000000 ____D C:\Users\henry\AppData\Local\{30E2248F-152C-41C3-9C50-FAE8418B43CE}
2012-03-16 01:37 - 2012-03-16 01:37 - 0000000 ____D C:\Users\henry\AppData\Local\{BD0BEE27-6E90-4170-89CF-E3F066B3195C}
2012-03-16 01:37 - 2012-03-16 01:37 - 0000000 ____D C:\Users\henry\AppData\Local\{762ED396-E7EE-4042-8774-37E282E6FFE6}
2012-03-15 01:10 - 2012-03-15 01:10 - 0000000 ____D C:\Users\henry\AppData\Local\{4AFF59CA-A3C8-4AE3-A574-CE16EBEF1880}
2012-03-14 13:09 - 2012-03-15 01:10 - 0000000 ____D C:\Users\henry\AppData\Local\{B7E9FCFF-7243-4E10-9AE1-0C2E8251B1E4}
2012-03-14 13:09 - 2012-03-14 13:09 - 0000000 ____D C:\Users\henry\AppData\Local\{55F57402-A538-493D-8663-7992040F8AFC}
2012-03-14 00:41 - 2012-03-14 00:41 - 0000000 ____D C:\Users\henry\AppData\Local\{E4BE028C-A095-46B9-B4BA-D48BEA97DD8D}
2012-03-13 13:59 - 2009-07-15 08:13 - 0392488 ____A (Wacom Technology, Corp.) C:\Windows\SysWOW64\Pen_Tablet.dln
2012-03-13 12:40 - 2012-03-14 00:41 - 0000000 ____D C:\Users\henry\AppData\Local\{96E20A9F-8A76-4500-B5F8-8ECC06E4084C}
2012-03-13 12:40 - 2012-03-13 12:40 - 0000000 ____D C:\Users\henry\AppData\Local\{B9CF85E9-91D6-476B-B75D-1A6293554775}
2012-03-12 23:57 - 2012-03-12 23:57 - 0000000 ____D C:\Users\henry\AppData\Local\{EA1916BE-FF27-40F9-9CE0-33A47746818C}
2012-03-12 23:57 - 2012-03-12 23:57 - 0000000 ____D C:\Users\henry\AppData\Local\{937E6033-B994-46DF-9C78-520A5F0CFE28}
2012-03-12 20:35 - 2012-03-12 20:35 - 0000225 ____A C:\Users\henry\Documents\hjiohoihio.rtf
2012-03-12 20:21 - 2012-03-12 20:22 - 0000000 ____D C:\Users\henry\Desktop\Pathfinder RPG
2012-03-12 12:22 - 2012-03-12 12:22 - 0000000 ____A C:\Users\henry\Desktop\install_flash_player_64bit.exe
2012-03-12 11:56 - 2012-03-12 11:56 - 0000000 ____D C:\Users\henry\AppData\Local\{E58D3ACD-CCFD-48BC-A9D1-42D295E23CB0}
2012-03-12 11:56 - 2012-03-12 11:56 - 0000000 ____D C:\Users\henry\AppData\Local\{7E293F7F-6AD9-40F8-BBFD-80C091D49DA7}
2012-03-12 01:44 - 2012-03-12 16:48 - 0027230 ____A C:\Users\henry\Desktop\bradly.odt
2012-03-12 00:20 - 2012-03-12 00:20 - 3784114 ____A C:\Users\henry\Desktop\figure.psd
2012-03-11 18:38 - 2012-03-11 18:39 - 0000000 ____D C:\Users\henry\AppData\Local\{CDCFCD60-F9F4-40F4-A466-EBED2757AABC}
2012-03-11 18:38 - 2012-03-11 18:38 - 0000000 ____D C:\Users\henry\AppData\Local\{B868F692-7A42-40A6-B8F0-29F0D0649688}
2012-03-10 16:09 - 2012-03-10 16:09 - 0000000 ____D C:\Users\henry\AppData\Local\{9AFEA366-0149-43CB-ABB9-15929029E251}
2012-03-10 16:09 - 2012-03-10 16:09 - 0000000 ____D C:\Users\henry\AppData\Local\{19D43604-FB12-4DBF-A165-DEBC1C30D647}
2012-03-09 11:26 - 2012-03-09 11:26 - 27578386 ____A C:\Users\henry\Desktop\character dull.psd
2012-03-09 10:38 - 2012-03-09 10:38 - 0000000 ____D C:\Users\henry\AppData\Roaming\Adobe Mini Bridge CS5.1
2012-03-09 00:22 - 2012-03-09 00:22 - 0000000 ____D C:\Users\henry\AppData\Local\{615FFADE-7433-477A-BC6F-A18E8B40396C}
2012-03-09 00:22 - 2012-03-09 00:22 - 0000000 ____D C:\Users\henry\AppData\Local\{5F4D5251-636A-4D00-AEBD-037BC00150EA}
2012-03-08 12:42 - 2012-03-08 12:42 - 0000000 ____D C:\Users\Default\AppData\Roaming\Macromedia
2012-03-08 12:42 - 2012-03-08 12:42 - 0000000 ____D C:\Users\Default User\AppData\Roaming\Macromedia
2012-03-08 12:21 - 2012-03-08 12:21 - 0000000 ____D C:\Users\henry\AppData\Local\{F2863DA3-3B36-4396-8F8C-DCCADB8F5702}
2012-03-08 12:21 - 2012-03-08 12:21 - 0000000 ____D C:\Users\henry\AppData\Local\{BE63C8E8-01F7-4C9B-A072-C1F2A8B3554B}
2012-03-08 03:00 - 2011-12-13 23:43 - 17790464 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2012-03-08 03:00 - 2011-12-13 23:16 - 10887168 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2012-03-08 03:00 - 2011-12-13 23:11 - 2308096 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2012-03-08 03:00 - 2011-12-13 23:04 - 1390080 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2012-03-08 03:00 - 2011-12-13 23:04 - 1345536 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2012-03-08 03:00 - 2011-12-13 23:03 - 1493504 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2012-03-08 03:00 - 2011-12-13 23:03 - 0237056 ____A (Microsoft Corporation) C:\Windows\System32\url.dll
2012-03-08 03:00 - 2011-12-13 23:01 - 0085504 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2012-03-08 03:00 - 2011-12-13 23:00 - 0818688 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2012-03-08 03:00 - 2011-12-13 22:59 - 2144256 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2012-03-08 03:00 - 2011-12-13 22:57 - 2382848 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2012-03-08 03:00 - 2011-12-13 22:57 - 0096256 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2012-03-08 03:00 - 2011-12-13 22:53 - 0248320 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2012-03-08 03:00 - 2011-12-13 19:30 - 12282368 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2012-03-08 03:00 - 2011-12-13 19:10 - 9705472 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2012-03-08 03:00 - 2011-12-13 19:04 - 1798656 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2012-03-08 03:00 - 2011-12-13 18:57 - 1127424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2012-03-08 03:00 - 2011-12-13 18:57 - 1103360 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2012-03-08 03:00 - 2011-12-13 18:56 - 1427456 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2012-03-08 03:00 - 2011-12-13 18:55 - 0231936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2012-03-08 03:00 - 2011-12-13 18:54 - 0065024 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2012-03-08 03:00 - 2011-12-13 18:53 - 0716800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2012-03-08 03:00 - 2011-12-13 18:52 - 1792000 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2012-03-08 03:00 - 2011-12-13 18:50 - 2382848 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2012-03-08 03:00 - 2011-12-13 18:50 - 0072704 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2012-03-08 03:00 - 2011-12-13 18:47 - 0176640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2012-03-07 20:39 - 2012-03-07 20:39 - 0001720 ____A C:\Users\Public\Desktop\Play League of Legends.lnk
2012-03-07 19:43 - 2012-03-07 19:43 - 0000000 ____D C:\Riot Games
2012-03-07 19:41 - 2012-03-07 19:42 - 0000854 ____A C:\Users\henry\Desktop\gc.log
2012-03-07 19:10 - 2012-03-07 19:40 - 0001911 ____A C:\Users\Public\Desktop\AIM.lnk
2012-03-07 19:10 - 2012-03-07 19:40 - 0000000 ____D C:\Program Files (x86)\AIM
2012-03-07 19:10 - 2012-03-07 19:38 - 0000000 ____D C:\Users\henry\AppData\Local\AIM
2012-03-07 19:10 - 2012-03-07 19:15 - 0000000 ____D C:\Users\henry\AppData\Roaming\acccore
2012-03-07 19:10 - 2012-03-07 19:10 - 0000000 ____D C:\Users\All Users\AIM
2012-03-07 19:10 - 2012-03-07 19:10 - 0000000 ____D C:\ProgramData\AIM
2012-03-07 19:07 - 2012-03-07 19:07 - 0463080 ____A (CNET Download.com) C:\Users\henry\Desktop\cnet2_Install_AIM_exe.exe
2012-03-07 19:03 - 2012-03-07 19:03 - 0000000 ____A C:\Users\henry\Desktop\AIM_Install.exe
2012-03-07 17:59 - 2012-01-04 02:44 - 14172672 ____A (Microsoft Corporation) C:\Windows\System32\shell32.dll
2012-03-07 17:59 - 2012-01-04 02:44 - 0509952 ____A (Microsoft Corporation) C:\Windows\System32\ntshrui.dll
2012-03-07 17:59 - 2012-01-04 00:59 - 12872704 ____A (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2012-03-07 17:59 - 2012-01-04 00:58 - 0442880 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ntshrui.dll
2012-03-07 17:59 - 2011-12-29 22:26 - 0515584 ____A (Microsoft Corporation) C:\Windows\System32\timedate.cpl
2012-03-07 17:59 - 2011-12-29 21:27 - 0478720 ____A (Microsoft Corporation) C:\Windows\SysWOW64\timedate.cpl
2012-03-07 17:59 - 2011-12-27 19:59 - 0498688 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\afd.sys
2012-03-07 17:59 - 2011-12-16 00:46 - 0634880 ____A (Microsoft Corporation) C:\Windows\System32\msvcrt.dll
2012-03-07 17:59 - 2011-12-15 23:52 - 0690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msvcrt.dll
2012-03-07 17:53 - 2012-03-07 17:53 - 0000000 ____D C:\Users\henry\AppData\Local\{A24E1888-7B91-47AA-86CE-4FE264919155}
2012-03-07 17:53 - 2012-03-07 17:53 - 0000000 ____D C:\Users\henry\AppData\Local\{515AF329-D58A-433E-95F5-6DCAB8B31B73}
2012-03-07 17:10 - 2012-03-07 17:46 - 0000000 ____D C:\Program Files (x86)\McAfee Security Scan
2012-03-07 14:37 - 2012-03-14 19:54 - 8375123 ____A C:\Users\henry\Desktop\onghenry.psd
2012-03-07 13:31 - 2012-03-07 13:31 - 0000000 ____D C:\Users\henry\AppData\Local\{A6C61CAA-E846-49AA-84C3-43478DB370C5}
2012-03-07 13:31 - 2012-03-07 13:31 - 0000000 ____D C:\Users\henry\AppData\Local\{42F826B1-7F03-4915-B6B4-C25614E3493D}
2012-03-07 02:02 - 2012-03-07 02:02 - 0000000 ____D C:\Users\henry\Desktop\portfolio final
2012-03-07 01:30 - 2012-03-07 01:31 - 0000000 ____D C:\Users\henry\AppData\Local\{FED365D3-EB1E-4B37-AA89-AA1D4B819569}
2012-03-07 01:30 - 2012-03-07 01:30 - 0000000 ____D C:\Users\henry\AppData\Local\{F0F3A29E-FE1D-46F2-B9AB-725B13287884}
2012-03-06 13:30 - 2012-03-06 13:30 - 0000000 ____D C:\Users\henry\AppData\Local\{8C1F5A68-BCC1-46E8-AE11-1894C4D3D6FF}
2012-03-06 13:30 - 2012-03-06 13:30 - 0000000 ____D C:\Users\henry\AppData\Local\{34362D3D-4C32-4A39-AA1C-4E9943083BE1}
2012-03-06 12:58 - 2012-03-07 00:46 - 0250554 ____A C:\Users\henry\Desktop\kris.pdf
2012-03-06 01:29 - 2012-03-06 01:29 - 0000000 ____D C:\Users\henry\AppData\Local\{D69BCD4A-AA4D-4FBB-8D50-0ACD2932E618}
2012-03-06 01:29 - 2012-03-06 01:29 - 0000000 ____D C:\Users\henry\AppData\Local\{559D1BE0-F725-4E5F-B1DE-9E298F400323}
2012-03-05 13:29 - 2012-03-05 13:29 - 0000000 ____D C:\Users\henry\AppData\Local\{D574F574-AFC3-478E-A710-C6F839DEBED2}
2012-03-05 13:28 - 2012-03-05 13:29 - 0000000 ____D C:\Users\henry\AppData\Local\{B3F5A0E9-370D-42E3-9FEA-AC30CEABB316}
2012-03-05 01:28 - 2012-03-05 01:28 - 0000000 ____D C:\Users\henry\AppData\Local\{9E610E66-9D4F-4D6C-8EFE-914AAD720CC4}
2012-03-04 19:43 - 2012-03-04 19:43 - 2228848 ____A C:\Users\henry\Desktop\Abandoned town.jpg
2012-03-04 19:31 - 2012-03-04 20:08 - 0000000 ____D C:\Users\henry\Desktop\Ong_Henry
2012-03-04 17:08 - 2012-03-04 22:27 - 0020153 ____A C:\Users\henry\Desktop\card.odt
2012-03-04 13:28 - 2012-03-04 13:28 - 0000000 ____D C:\Users\henry\AppData\Local\{279EF88E-A970-41D5-83F8-E90FB4224446}
2012-03-04 13:27 - 2012-03-05 01:28 - 0000000 ____D C:\Users\henry\AppData\Local\{208709C4-C72E-4BEB-BA58-B5785A45FED3}
2012-03-04 01:27 - 2012-03-04 01:27 - 0000000 ____D C:\Users\henry\AppData\Local\{D9BD6237-26A6-4008-B388-97E32E5EC499}
2012-03-04 01:27 - 2012-03-04 01:27 - 0000000 ____D C:\Users\henry\AppData\Local\{7A23DFE7-94F3-4366-93BE-06639FE0BC0E}
============ 3 Months Modified Files and Folders =============
2012-04-03 12:45 - 2012-04-03 01:03 - 4453973 ____A (Swearware) C:\Users\henry\Desktop\ComboFix.com.exe
2012-04-03 09:32 - 2012-04-02 22:23 - 4453973 ____A (Swearware) C:\Users\henry\Desktop\svscsv.com
2012-04-03 03:03 - 2012-04-03 00:35 - 0000000 ____D C:\FRST
2012-04-03 01:03 - 2009-07-13 21:13 - 0780156 ____A C:\Windows\System32\PerfStringBackup.INI
2012-04-03 01:02 - 2012-02-06 15:50 - 2304914 ____A C:\Windows\ntbtlog.txt
2012-04-03 00:59 - 2011-08-10 10:42 - 0102944 ____A C:\aaw7boot.log
2012-04-03 00:59 - 2010-11-05 22:25 - 2146873344 __ASH C:\hiberfil.sys
2012-04-03 00:58 - 2010-11-05 22:29 - 1985522 ____A C:\Windows\WindowsUpdate.log
2012-04-03 00:57 - 2012-04-03 00:52 - 4453973 ____A (Swearware) C:\Users\henry\Downloads\ComboFix.exe
2012-04-03 00:55 - 2009-07-13 20:45 - 0016720 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2012-04-03 00:55 - 2009-07-13 20:45 - 0016720 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2012-04-03 00:47 - 2011-06-01 13:43 - 0000000 ____D C:\Users\henry\AppData\Roaming\WTablet
2012-04-03 00:46 - 2012-02-06 15:52 - 0003818 ____A C:\Windows\setupact.log
2012-04-03 00:46 - 2012-02-03 00:20 - 0000892 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2012-04-03 00:46 - 2009-07-13 21:08 - 0032646 ____A C:\Windows\Tasks\SCHEDLGU.TXT
2012-04-03 00:46 - 2009-07-13 21:08 - 0000006 ___AH C:\Windows\Tasks\SA.DAT
2012-04-02 23:48 - 2012-04-02 12:01 - 0020359 ____A C:\Users\henry\Desktop\FileLister.zip
2012-04-02 21:47 - 2012-04-02 21:47 - 4453973 ____A (Swearware) C:\Users\henry\Desktop\svchostt.com
2012-04-02 12:21 - 2012-04-02 12:21 - 0000000 ____A C:\Files.txt
2012-04-02 12:21 - 2012-04-02 12:19 - 0000000 ____D C:\Users\henry\Desktop\FileLister Folder
2012-04-02 12:08 - 2012-03-16 13:48 - 0000000 ____D C:\Users\henry\Desktop\desert final scene
2012-04-02 06:26 - 2012-04-01 19:39 - 98077435 ____A (Igor Pavlov) C:\Users\henry\Desktop\OTLPEStd.exe
2012-04-02 06:26 - 2012-04-01 18:38 - 98077435 ____A (Igor Pavlov) C:\Users\henry\Desktop\svchost.exe (2).exe
2012-04-01 19:36 - 2012-04-01 19:36 - 0274888 ____A C:\Windows\Minidump\040112-24538-01.dmp
2012-04-01 19:36 - 2011-12-03 19:22 - 359864899 ____A C:\Windows\MEMORY.DMP
2012-04-01 19:36 - 2010-12-01 20:10 - 0000000 ____D C:\Windows\Minidump
2012-03-29 13:54 - 2012-04-01 18:46 - 0132597 ____A C:\Users\henry\Desktop\Flash_Disinfector.exe
2012-03-29 13:47 - 2012-03-29 01:56 - 0294400 ____A C:\Users\henry\Desktop\exeHelper.com
2012-03-29 01:45 - 2011-04-09 11:59 - 0000000 ____D C:\Users\henry\Desktop\movies
2012-03-29 01:14 - 2012-03-29 01:13 - 0013365 ____A C:\Users\henry\Desktop\New Text Document.txt
2012-03-29 00:36 - 2012-02-03 00:20 - 0000896 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2012-03-29 00:08 - 2012-03-29 00:08 - 44238026 ____A C:\Users\henry\Desktop\color4.psd
2012-03-28 23:58 - 2012-03-28 23:58 - 44007097 ____A C:\Users\henry\Desktop\color3.psd
2012-03-28 23:50 - 2012-03-28 23:48 - 44379196 ____A C:\Users\henry\Desktop\color2.psd
2012-03-28 22:51 - 2012-03-28 22:51 - 42427168 ____A C:\Users\henry\Desktop\color1.psd
2012-03-28 19:05 - 2012-03-26 19:51 - 54543243 ____A C:\Users\henry\Desktop\sssss (2).psd
2012-03-28 15:21 - 2011-12-09 18:35 - 0000000 ____D C:\Users\henry\AppData\Local\ElevatedDiagnostics
2012-03-28 15:05 - 2012-03-28 15:05 - 0110590 ____A C:\Users\henry\Desktop\003[1].JPG
2012-03-28 12:07 - 2012-03-28 12:07 - 0751581 ____A (maliprog @ Geekstogo) C:\Users\henry\Desktop\TheKiller2.scr
2012-03-28 12:04 - 2012-03-28 12:04 - 0751581 ____A (maliprog @ Geekstogo) C:\Users\henry\Downloads\TheKiller.scr
2012-03-26 12:47 - 2012-03-26 12:40 - 0002150 ____A C:\Windows\epplauncher.mif
2012-03-26 12:43 - 2012-03-26 12:43 - 10165440 ____A (Microsoft Corporation) C:\Users\henry\Desktop\mseinstall.exe
2012-03-26 12:37 - 2012-03-26 12:37 - 10165440 ____A (Microsoft Corporation) C:\Users\henry\Downloads\mseinstall.exe
2012-03-26 12:35 - 2009-07-13 19:20 - 0000000 ____D C:\Windows\System32\NDF
2012-03-26 09:31 - 2012-03-25 22:30 - 256982966 ____A C:\Users\henry\Desktop\kav_rescue_10.iso
2012-03-25 19:21 - 2012-03-25 19:17 - 178789312 ____A (Kaspersky Lab) C:\Users\henry\Downloads\kis2012_12.0.0.374aEN_2778.exe
2012-03-25 19:08 - 2012-03-25 19:07 - 18099082 ____A C:\Users\henry\Downloads\kav_rescue_10.iso.g19r5to.partial
2012-03-25 18:20 - 2009-07-13 20:45 - 4866976 ____A C:\Windows\System32\FNTCACHE.DAT
2012-03-24 23:39 - 2012-03-24 23:39 - 0000129 ____A C:\Windows\System32\MRT.INI
2012-03-24 23:38 - 2010-05-24 13:32 - 56297240 ____A (Microsoft Corporation) C:\Windows\System32\MRT.exe
2012-03-24 20:51 - 2009-07-13 19:20 - 0000000 ____D C:\Windows\System32\config\TxR
2012-03-24 20:45 - 2012-03-24 20:45 - 0274888 ____A C:\Windows\Minidump\032412-22027-01.dmp
2012-03-24 20:45 - 2011-10-26 11:57 - 0016924 ____A C:\Windows\PFRO.log
2012-03-24 20:42 - 2010-12-01 19:05 - 0000000 ____D C:\users\henry
2012-03-22 08:14 - 2012-03-21 20:23 - 0594432 ____A (OldTimer Tools) C:\Users\henry\Desktop\svchost.exe.exe
2012-03-22 03:16 - 2012-03-21 20:30 - 0063052 ____A C:\Users\henry\Desktop\Photo 99.jpg
2012-03-21 23:47 - 2012-03-21 20:39 - 14082558 ____A C:\Users\henry\Desktop\sssss.psd
2012-03-21 23:34 - 2011-01-07 02:55 - 0000000 ____D C:\Users\henry\AppData\Local\CrashDumps
2012-03-21 20:00 - 2012-02-07 23:55 - 0000000 ____D C:\Program Files (x86)\Steam
2012-03-21 20:00 - 2011-11-09 17:31 - 0000000 ____D C:\Users\henry\AppData\Local\Akamai
2012-03-21 20:00 - 2011-05-20 19:06 - 0000000 ____D C:\Users\All Users\PMB Files
2012-03-21 20:00 - 2011-05-20 19:06 - 0000000 ____D C:\ProgramData\PMB Files
2012-03-21 20:00 - 2010-12-03 15:40 - 0000000 ____D C:\Program Files\WTouch
2012-03-21 20:00 - 2010-12-03 15:38 - 0000000 ____D C:\Windows\System32\WTablet
2012-03-21 20:00 - 2010-12-03 15:38 - 0000000 ____D C:\Program Files (x86)\Tablet
2012-03-21 20:00 - 2010-12-02 01:16 - 0000000 ____D C:\Users\henry\AppData\Roaming\vlc
2012-03-21 20:00 - 2010-12-01 19:28 - 0000000 ____D C:\Program Files (x86)\Guild Wars
2012-03-21 20:00 - 2010-12-01 19:17 - 0000000 ____D C:\Program Files (x86)\Mozilla Firefox
2012-03-21 19:38 - 2011-05-20 19:06 - 0000000 ____D C:\Users\henry\AppData\Local\PMB Files
2012-03-21 17:34 - 2011-07-26 13:17 - 0000000 ____D C:\Users\henry\riotsGamesLogs
2012-03-21 16:24 - 2012-03-21 16:24 - 64784733 ____A C:\Users\henry\Desktop\progress of 3 weeks.psd
2012-03-21 14:02 - 2012-03-21 14:02 - 1977044 ____A C:\Users\henry\Desktop\final scne3.jpg
2012-03-21 13:01 - 2012-03-21 13:01 - 0000000 ____D C:\Users\henry\AppData\Local\{C025742C-FE8A-4939-ABA2-0E018F6821A5}
2012-03-21 13:01 - 2012-03-21 13:00 - 0000000 ____D C:\Users\henry\AppData\Local\{3B6DB259-A9FA-4CA7-B29B-6F1EFC819C94}
2012-03-21 13:01 - 2011-07-03 23:49 - 0000000 ____D C:\Users\henry\AppData\Local\Windows Live
2012-03-21 13:00 - 2011-07-04 01:06 - 0000000 ____D C:\Users\henry\Tracing
2012-03-21 00:42 - 2012-03-21 00:42 - 0000000 ____D C:\Users\henry\AppData\Local\{FEF4CBE1-6973-4D71-88F9-C7A656EFE5AC}
2012-03-21 00:42 - 2012-03-20 12:41 - 0000000 ____D C:\Users\henry\AppData\Local\{374C5AC8-F957-4B0D-B00E-8E137F1EF1AB}
2012-03-20 21:59 - 2012-03-16 19:49 - 74955469 ____A C:\Users\henry\Desktop\final scne.psd
2012-03-20 12:42 - 2012-03-20 12:42 - 0000000 ____D C:\Users\henry\AppData\Local\{19DA093A-3CF8-4AF1-8400-A4C1CA4004EF}
2012-03-19 21:46 - 2012-03-19 21:05 - 0022245 ____A C:\Users\henry\Desktop\pinball.odt
2012-03-19 15:08 - 2012-03-19 15:08 - 0000000 ____D C:\Users\henry\AppData\Local\{F959C390-FD7C-40A7-B7CE-2B716273A019}
2012-03-19 15:08 - 2012-03-19 15:07 - 0000000 ____D C:\Users\henry\AppData\Local\{70925E63-9DEF-493B-B2E0-9CF56444FCC7}
2012-03-17 20:57 - 2012-03-17 20:57 - 0000000 ____D C:\Users\henry\AppData\Local\{B309C81B-53D5-4529-96ED-A183AAB850CD}
2012-03-17 20:57 - 2012-03-17 20:57 - 0000000 ____D C:\Users\henry\AppData\Local\{543EEA10-5C4B-4C53-8B5B-EAC4B1204E49}
2012-03-17 11:07 - 2012-03-17 11:07 - 1712906 ____A C:\Users\henry\Desktop\girlandtheredumbrella.jpg
2012-03-17 01:39 - 2012-03-17 01:39 - 0000000 ____D C:\Users\henry\AppData\Local\{B4A96DEB-DEBB-4EDB-B3F8-5184EA92748F}
2012-03-17 01:39 - 2012-03-16 13:38 - 0000000 ____D C:\Users\henry\AppData\Local\{52A8B52C-7ECA-41B5-9A82-F4669CA78101}
2012-03-16 13:38 - 2012-03-16 13:38 - 0000000 ____D C:\Users\henry\AppData\Local\{30E2248F-152C-41C3-9C50-FAE8418B43CE}
2012-03-16 01:37 - 2012-03-16 01:37 - 0000000 ____D C:\Users\henry\AppData\Local\{BD0BEE27-6E90-4170-89CF-E3F066B3195C}
2012-03-16 01:37 - 2012-03-16 01:37 - 0000000 ____D C:\Users\henry\AppData\Local\{762ED396-E7EE-4042-8774-37E282E6FFE6}
2012-03-15 01:10 - 2012-03-15 01:10 - 0000000 ____D C:\Users\henry\AppData\Local\{4AFF59CA-A3C8-4AE3-A574-CE16EBEF1880}
2012-03-15 01:10 - 2012-03-14 13:09 - 0000000 ____D C:\Users\henry\AppData\Local\{B7E9FCFF-7243-4E10-9AE1-0C2E8251B1E4}
2012-03-14 19:54 - 2012-03-07 14:37 - 8375123 ____A C:\Users\henry\Desktop\onghenry.psd
2012-03-14 13:09 - 2012-03-14 13:09 - 0000000 ____D C:\Users\henry\AppData\Local\{55F57402-A538-493D-8663-7992040F8AFC}
2012-03-14 00:41 - 2012-03-14 00:41 - 0000000 ____D C:\Users\henry\AppData\Local\{E4BE028C-A095-46B9-B4BA-D48BEA97DD8D}
2012-03-14 00:41 - 2012-03-13 12:40 - 0000000 ____D C:\Users\henry\AppData\Local\{96E20A9F-8A76-4500-B5F8-8ECC06E4084C}
2012-03-13 22:33 - 2011-08-12 22:33 - 0000064 ____A C:\Windows\SysWOW64\rp_stats.dat
2012-03-13 22:33 - 2011-08-12 22:33 - 0000044 ____A C:\Windows\SysWOW64\rp_rules.dat
2012-03-13 12:40 - 2012-03-13 12:40 - 0000000 ____D C:\Users\henry\AppData\Local\{B9CF85E9-91D6-476B-B75D-1A6293554775}
2012-03-13 12:39 - 2012-01-22 23:44 - 0001039 ____A C:\Users\henry\Start Menu\Programs\Startup\ZooskMessenger.lnk
2012-03-13 12:39 - 2012-01-22 23:44 - 0001039 ____A C:\Users\henry\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ZooskMessenger.lnk
2012-03-12 23:57 - 2012-03-12 23:57 - 0000000 ____D C:\Users\henry\AppData\Local\{EA1916BE-FF27-40F9-9CE0-33A47746818C}
2012-03-12 23:57 - 2012-03-12 23:57 - 0000000 ____D C:\Users\henry\AppData\Local\{937E6033-B994-46DF-9C78-520A5F0CFE28}
2012-03-12 20:35 - 2012-03-12 20:35 - 0000225 ____A C:\Users\henry\Documents\hjiohoihio.rtf
2012-03-12 20:22 - 2012-03-12 20:21 - 0000000 ____D C:\Users\henry\Desktop\Pathfinder RPG
2012-03-12 17:54 - 2012-02-27 19:07 - 41357358 ____A C:\Users\henry\Desktop\olaas.psd
2012-03-12 16:48 - 2012-03-12 01:44 - 0027230 ____A C:\Users\henry\Desktop\bradly.odt
2012-03-12 12:22 - 2012-03-12 12:22 - 0000000 ____A C:\Users\henry\Desktop\install_flash_player_64bit.exe
2012-03-12 11:56 - 2012-03-12 11:56 - 0000000 ____D C:\Users\henry\AppData\Local\{E58D3ACD-CCFD-48BC-A9D1-42D295E23CB0}
2012-03-12 11:56 - 2012-03-12 11:56 - 0000000 ____D C:\Users\henry\AppData\Local\{7E293F7F-6AD9-40F8-BBFD-80C091D49DA7}
2012-03-12 00:20 - 2012-03-12 00:20 - 3784114 ____A C:\Users\henry\Desktop\figure.psd
2012-03-11 18:39 - 2012-03-11 18:38 - 0000000 ____D C:\Users\henry\AppData\Local\{CDCFCD60-F9F4-40F4-A466-EBED2757AABC}
2012-03-11 18:38 - 2012-03-11 18:38 - 0000000 ____D C:\Users\henry\AppData\Local\{B868F692-7A42-40A6-B8F0-29F0D0649688}
2012-03-10 16:09 - 2012-03-10 16:09 - 0000000 ____D C:\Users\henry\AppData\Local\{9AFEA366-0149-43CB-ABB9-15929029E251}
2012-03-10 16:09 - 2012-03-10 16:09 - 0000000 ____D C:\Users\henry\AppData\Local\{19D43604-FB12-4DBF-A165-DEBC1C30D647}
2012-03-09 11:26 - 2012-03-09 11:26 - 27578386 ____A C:\Users\henry\Desktop\character dull.psd
2012-03-09 10:38 - 2012-03-09 10:38 - 0000000 ____D C:\Users\henry\AppData\Roaming\Adobe Mini Bridge CS5.1
2012-03-09 00:22 - 2012-03-09 00:22 - 0000000 ____D C:\Users\henry\AppData\Local\{615FFADE-7433-477A-BC6F-A18E8B40396C}
2012-03-09 00:22 - 2012-03-09 00:22 - 0000000 ____D C:\Users\henry\AppData\Local\{5F4D5251-636A-4D00-AEBD-037BC00150EA}
2012-03-08 12:42 - 2012-03-08 12:42 - 0000000 ____D C:\Users\Default\AppData\Roaming\Macromedia
2012-03-08 12:42 - 2012-03-08 12:42 - 0000000 ____D C:\Users\Default User\AppData\Roaming\Macromedia
2012-03-08 12:42 - 2010-12-01 19:36 - 0000000 ____D C:\Program Files (x86)\Adobe
2012-03-08 12:21 - 2012-03-08 12:21 - 0000000 ____D C:\Users\henry\AppData\Local\{F2863DA3-3B36-4396-8F8C-DCCADB8F5702}
2012-03-08 12:21 - 2012-03-08 12:21 - 0000000 ____D C:\Users\henry\AppData\Local\{BE63C8E8-01F7-4C9B-A072-C1F2A8B3554B}
2012-03-08 03:25 - 2010-12-01 19:08 - 0000174 ___SH C:\Users\henry\Start Menu\Programs\Startup\desktop.ini
2012-03-08 03:25 - 2010-12-01 19:08 - 0000174 ___SH C:\Users\henry\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini
2012-03-08 03:24 - 2010-06-21 15:41 - 0000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2012-03-08 03:04 - 2011-02-08 11:41 - 0796360 ____A C:\Windows\SysWOW64\PerfStringBackup.INI
2012-03-08 03:04 - 2011-02-08 11:41 - 0000000 ____D C:\Program Files (x86)\Microsoft Application Virtualization Client
2012-03-07 20:39 - 2012-03-07 20:39 - 0001720 ____A C:\Users\Public\Desktop\Play League of Legends.lnk
2012-03-07 19:43 - 2012-03-07 19:43 - 0000000 ____D C:\Riot Games
2012-03-07 19:42 - 2012-03-07 19:41 - 0000854 ____A C:\Users\henry\Desktop\gc.log
2012-03-07 19:41 - 2010-12-01 19:18 - 0001107 ___AH C:\IPH.PH
2012-03-07 19:40 - 2012-03-07 19:10 - 0001911 ____A C:\Users\Public\Desktop\AIM.lnk
2012-03-07 19:40 - 2012-03-07 19:10 - 0000000 ____D C:\Program Files (x86)\AIM
2012-03-07 19:38 - 2012-03-07 19:10 - 0000000 ____D C:\Users\henry\AppData\Local\AIM
2012-03-07 19:15 - 2012-03-07 19:10 - 0000000 ____D C:\Users\henry\AppData\Roaming\acccore
2012-03-07 19:10 - 2012-03-07 19:10 - 0000000 ____D C:\Users\All Users\AIM
2012-03-07 19:10 - 2012-03-07 19:10 - 0000000 ____D C:\ProgramData\AIM
2012-03-07 19:09 - 2010-12-01 19:17 - 8239264 ____A (AOL Inc.) C:\Users\henry\Downloads\Install_AIM.exe
2012-03-07 19:09 - 2010-12-01 19:05 - 0000000 ____D C:\Users\henry\AppData\LocalLow
2012-03-07 19:07 - 2012-03-07 19:07 - 0463080 ____A (CNET Download.com) C:\Users\henry\Desktop\cnet2_Install_AIM_exe.exe
2012-03-07 19:03 - 2012-03-07 19:03 - 0000000 ____A C:\Users\henry\Desktop\AIM_Install.exe
2012-03-07 18:46 - 2010-12-04 01:00 - 0000000 ____D C:\Users\henry\AppData\Roaming\BitComet
2012-03-07 17:53 - 2012-03-07 17:53 - 0000000 ____D C:\Users\henry\AppData\Local\{A24E1888-7B91-47AA-86CE-4FE264919155}
2012-03-07 17:53 - 2012-03-07 17:53 - 0000000 ____D C:\Users\henry\AppData\Local\{515AF329-D58A-433E-95F5-6DCAB8B31B73}
2012-03-07 17:46 - 2012-03-07 17:10 - 0000000 ____D C:\Program Files (x86)\McAfee Security Scan
2012-03-07 17:46 - 2011-06-13 15:52 - 0000000 ____D C:\Users\All Users\Spybot - Search & Destroy
2012-03-07 17:46 - 2011-06-13 15:52 - 0000000 ____D C:\ProgramData\Spybot - Search & Destroy
2012-03-07 17:45 - 2012-02-27 02:12 - 0000000 ____D C:\Users\henry\Desktop\DesertCliff-tutorial
2012-03-07 17:42 - 2011-02-08 11:42 - 0000000 ____D C:\Users\henry\AppData\Roaming\SoftGrid Client
2012-03-07 17:42 - 2010-12-01 19:34 - 0000000 ____D C:\Users\henry\AppData\Roaming\Adobe
2012-03-07 13:31 - 2012-03-07 13:31 - 0000000 ____D C:\Users\henry\AppData\Local\{A6C61CAA-E846-49AA-84C3-43478DB370C5}
2012-03-07 13:31 - 2012-03-07 13:31 - 0000000 ____D C:\Users\henry\AppData\Local\{42F826B1-7F03-4915-B6B4-C25614E3493D}
2012-03-07 02:02 - 2012-03-07 02:02 - 0000000 ____D C:\Users\henry\Desktop\portfolio final
2012-03-07 01:31 - 2012-03-07 01:30 - 0000000 ____D C:\Users\henry\AppData\Local\{FED365D3-EB1E-4B37-AA89-AA1D4B819569}
2012-03-07 01:30 - 2012-03-07 01:30 - 0000000 ____D C:\Users\henry\AppData\Local\{F0F3A29E-FE1D-46F2-B9AB-725B13287884}
2012-03-07 00:46 - 2012-03-06 12:58 - 0250554 ____A C:\Users\henry\Desktop\kris.pdf
2012-03-06 13:30 - 2012-03-06 13:30 - 0000000 ____D C:\Users\henry\AppData\Local\{8C1F5A68-BCC1-46E8-AE11-1894C4D3D6FF}
2012-03-06 13:30 - 2012-03-06 13:30 - 0000000 ____D C:\Users\henry\AppData\Local\{34362D3D-4C32-4A39-AA1C-4E9943083BE1}
2012-03-06 01:29 - 2012-03-06 01:29 - 0000000 ____D C:\Users\henry\AppData\Local\{D69BCD4A-AA4D-4FBB-8D50-0ACD2932E618}
2012-03-06 01:29 - 2012-03-06 01:29 - 0000000 ____D C:\Users\henry\AppData\Local\{559D1BE0-F725-4E5F-B1DE-9E298F400323}
2012-03-05 13:29 - 2012-03-05 13:29 - 0000000 ____D C:\Users\henry\AppData\Local\{D574F574-AFC3-478E-A710-C6F839DEBED2}
2012-03-05 13:29 - 2012-03-05 13:28 - 0000000 ____D C:\Users\henry\AppData\Local\{B3F5A0E9-370D-42E3-9FEA-AC30CEABB316}
2012-03-05 01:28 - 2012-03-05 01:28 - 0000000 ____D C:\Users\henry\AppData\Local\{9E610E66-9D4F-4D6C-8EFE-914AAD720CC4}
2012-03-05 01:28 - 2012-03-04 13:27 - 0000000 ____D C:\Users\henry\AppData\Local\{208709C4-C72E-4BEB-BA58-B5785A45FED3}
2012-03-04 22:27 - 2012-03-04 17:08 - 0020153 ____A C:\Users\henry\Desktop\card.odt
2012-03-04 20:08 - 2012-03-04 19:31 - 0000000 ____D C:\Users\henry\Desktop\Ong_Henry
2012-03-04 20:01 - 2011-12-16 20:12 - 0000000 ____D C:\Users\henry\Desktop\real final
2012-03-04 19:43 - 2012-03-04 19:43 - 2228848 ____A C:\Users\henry\Desktop\Abandoned town.jpg
2012-03-04 19:30 - 2012-02-15 19:16 - 23747045 ____A C:\Users\henry\Desktop\red girl2.psd
2012-03-04 13:28 - 2012-03-04 13:28 - 0000000 ____D C:\Users\henry\AppData\Local\{279EF88E-A970-41D5-83F8-E90FB4224446}
2012-03-04 01:27 - 2012-03-04 01:27 - 0000000 ____D C:\Users\henry\AppData\Local\{D9BD6237-26A6-4008-B388-97E32E5EC499}
2012-03-04 01:27 - 2012-03-04 01:27 - 0000000 ____D C:\Users\henry\AppData\Local\{7A23DFE7-94F3-4366-93BE-06639FE0BC0E}
2012-03-03 13:27 - 2012-03-03 13:26 - 0000000 ____D C:\Users\henry\AppData\Local\{1EAE8B1C-2D2F-4A20-901D-52941288D79F}
2012-03-03 13:26 - 2012-03-03 13:26 - 0000000 ____D C:\Users\henry\AppData\Local\{E0A374B8-E62B-4E96-9619-668FD747EF8B}
2012-03-03 01:26 - 2012-03-03 01:26 - 0000000 ____D C:\Users\henry\AppData\Local\{6BD7D511-D165-4556-9A2D-1C8464AF522B}
2012-03-03 01:26 - 2012-03-03 01:26 - 0000000 ____D C:\Users\henry\AppData\Local\{0BDBF274-E424-4B49-9BE9-1A33D0664CEE}
2012-03-02 13:25 - 2012-03-02 13:25 - 0000000 ____D C:\Users\henry\AppData\Local\{7FB0131B-2005-4306-A7DD-5E7C1B867740}
2012-03-02 13:25 - 2012-03-02 13:25 - 0000000 ____D C:\Users\henry\AppData\Local\{452F73C8-29E7-4DC6-9CBF-D199319320F7}
2012-03-01 23:14 - 2012-03-01 23:14 - 0000000 ____D C:\Users\henry\AppData\Local\{CF969DD0-9DA3-4211-BE25-902B110EC4AC}
2012-03-01 23:14 - 2012-03-01 23:13 - 0000000 ____D C:\Users\henry\AppData\Local\{4AF96651-0D67-4F30-91D7-80A71A9D8515}
2012-02-29 21:05 - 2012-02-29 17:10 - 1307435 ____A C:\Users\henry\Desktop\newqguy.jpg
2012-02-29 15:49 - 2012-02-29 15:49 - 0059767 ____A C:\Users\henry\Desktop\GordorianFront_fg.jpg
2012-02-29 14:04 - 2012-02-29 14:04 - 0000000 ____D C:\Users\henry\AppData\Local\{4F01EDF1-A143-431A-A552-119588908A9C}
2012-02-29 14:04 - 2012-02-29 14:04 - 0000000 ____D C:\Users\henry\AppData\Local\{44DB2657-02F4-4316-A3E1-041A5B45BA47}
2012-02-29 03:29 - 2012-02-27 03:20 - 79587457 ____A C:\Users\henry\Desktop\gas station.psd
2012-02-29 02:04 - 2012-02-29 02:04 - 0000000 ____D C:\Users\henry\AppData\Local\{D446D861-C8A4-43FE-8F4B-8F2E03BCFD88}
2012-02-29 02:04 - 2012-02-29 02:03 - 0000000 ____D C:\Users\henry\AppData\Local\{FAEFD702-7BF5-4B5B-A656-73BD22BCB029}
2012-02-28 14:03 - 2012-02-28 14:03 - 0000000 ____D C:\Users\henry\AppData\Local\{949A6181-D1FA-47A8-B981-A2B2DBBDE03D}
2012-02-28 14:03 - 2012-02-28 14:03 - 0000000 ____D C:\Users\henry\AppData\Local\{605549EE-0AE0-471C-9439-0CB2CB1A31BB}
2012-02-28 02:03 - 2012-02-28 02:02 - 0000000 ____D C:\Users\henry\AppData\Local\{ED7980F5-8CA5-4C67-AC84-7D4D62BB91F7}
2012-02-28 02:02 - 2012-02-27 14:01 - 0000000 ____D C:\Users\henry\AppData\Local\{240EA13A-4AE5-46BF-9B7F-4CFF6400C4C5}
2012-02-27 21:00 - 2012-02-27 21:00 - 1361399 ____A C:\Users\henry\Desktop\olaas2.jpg
2012-02-27 16:13 - 2011-11-12 01:33 - 0000000 ____D C:\Users\henry\Desktop\redo
2012-02-27 14:02 - 2012-02-27 14:02 - 0000000 ____D C:\Users\henry\AppData\Local\{F00C992D-8F23-4B6B-975B-7080B553DA10}
2012-02-27 09:56 - 2012-02-26 22:10 - 0537894 ____A C:\Users\henry\Desktop\chris.pdf
2012-02-27 03:20 - 2012-02-27 03:19 - 15123376 ____A C:\Users\henry\Desktop\gas station.pdf
2012-02-26 22:14 - 2012-02-26 22:14 - 3254215 ____A C:\Users\henry\Desktop\cghris.jpg
2012-02-26 19:20 - 2012-02-26 19:20 - 0000000 ____D C:\Users\henry\AppData\Local\{BADAEC31-FD3B-4A81-96DB-C396DC54AFF0}
2012-02-26 19:20 - 2012-02-26 19:20 - 0000000 ____D C:\Users\henry\AppData\Local\{1D938DD8-6A4A-42EA-959B-D827B07BC98C}
2012-02-26 01:17 - 2012-02-26 01:17 - 0000000 ____D C:\Users\henry\AppData\Local\{1CCE0747-47F1-454F-8F70-95D8BE268A61}
2012-02-26 01:17 - 2012-02-25 13:16 - 0000000 ____D C:\Users\henry\AppData\Local\{764E1182-96E9-4D8F-9845-4A5D163FF63A}
2012-02-25 13:23 - 2012-02-25 13:21 - 144127603 ____A C:\Users\henry\Desktop\desertcliff-tutorial.zip
2012-02-25 13:16 - 2012-02-25 13:16 - 0000000 ____D C:\Users\henry\AppData\Local\{78D5BB10-EBCC-4A7D-9189-DF2467E84842}
2012-02-25 03:09 - 2012-02-25 03:09 - 0422885 ____A C:\Users\henry\Desktop\1722-1-1322380748.jpg
2012-02-24 22:22 - 2012-02-24 22:22 - 0000000 ____D C:\Users\henry\AppData\Local\{B58B0078-39FA-4EFE-AD9B-0D8842299B56}
2012-02-24 22:22 - 2012-02-24 22:22 - 0000000 ____D C:\Users\henry\AppData\Local\{92A89C9B-94E3-4970-A1AB-00DB7B3F4136}
2012-02-23 01:40 - 2012-02-23 01:40 - 3387220 ____A C:\Users\henry\Desktop\henry_ong_character.pdf
2012-02-23 01:40 - 2012-02-22 23:04 - 1316830 ____A C:\Users\henry\Desktop\Henry_Ong_Character.jpg
2012-02-23 01:39 - 2012-02-23 01:39 - 3204946 ____A C:\Users\henry\Desktop\henry_ong_character.psd
2012-02-23 01:20 - 2012-02-23 01:20 - 0735293 ____A C:\Users\henry\Desktop\sword2.psd
2012-02-22 21:55 - 2012-02-22 21:55 - 0000000 ____D C:\Users\henry\AppData\Local\{FF59D539-C61A-4F72-A5D7-9BC87890A14F}
2012-02-22 21:54 - 2012-02-22 21:54 - 0000000 ____D C:\Users\henry\AppData\Local\{A67476DE-C13B-48D1-97C6-D9AAB097DFDF}
2012-02-22 03:00 - 2012-02-22 03:00 - 0053760 ____A C:\Users\henry\Desktop\Copyright-Symbol-psd29676.png
2012-02-22 01:21 - 2012-02-22 01:21 - 0000000 ____D C:\Users\henry\AppData\Local\{F27F9EC9-8C69-4F86-9D75-C07D6B6B6D92}
2012-02-22 01:21 - 2012-02-22 01:21 - 0000000 ____D C:\Users\henry\AppData\Local\{3B1E5A94-51BB-4FD7-826E-899795BBAC89}
2012-02-21 13:21 - 2012-02-21 13:20 - 0000000 ____D C:\Users\henry\AppData\Local\{8887F20D-F8C5-449D-95CA-98AE662DAEE7}
2012-02-21 13:20 - 2012-02-21 13:20 - 0000000 ____D C:\Users\henry\AppData\Local\{6B476DA4-0B60-4FB3-B87F-BCD135666C69}
2012-02-21 01:07 - 2012-02-21 01:07 - 0000000 ____D C:\Users\henry\AppData\Local\{C90B6CFD-6E34-487D-8337-F9283D246839}
2012-02-21 01:07 - 2012-02-20 13:05 - 0000000 ____D C:\Users\henry\AppData\Local\{23D96AAC-5C62-4358-B238-4571FF4512AF}
2012-02-20 13:09 - 2012-02-20 13:09 - 0008443 ____A C:\Users\henry\Desktop\Henry Ong.pdf
2012-02-20 13:06 - 2012-02-20 13:06 - 0000000 ____D C:\Users\henry\AppData\Local\{FCF785AA-CA6F-4689-AFD2-7880B790BF51}
2012-02-20 02:11 - 2012-02-20 02:11 - 0156521 ____A C:\Users\henry\Desktop\Leg_Armor_by_yangfeili.png
2012-02-19 19:33 - 2012-02-19 19:33 - 0000000 ____D C:\Users\henry\AppData\Local\{A8BA8ECF-A59E-4741-BDF0-77D4195B56C0}
2012-02-19 19:33 - 2012-02-19 19:32 - 0000000 ____D C:\Users\henry\AppData\Local\{C7E768EF-F08A-4E76-8A52-50E5E0FD3F3A}
2012-02-19 19:30 - 2010-12-10 23:56 - 0000000 ____D C:\WTablet
2012-02-19 06:38 - 2012-02-18 18:58 - 0214622 ____A C:\Users\henry\Desktop\vcharater.pdf
2012-02-19 06:32 - 2012-02-18 18:58 - 0243552 ____A C:\Users\henry\Desktop\cjarcter.pdf
2012-02-19 02:09 - 2012-02-19 02:09 - 0000000 ____D C:\Users\henry\AppData\Local\{84CB3007-071B-4765-B79A-6C60C02B9ADB}
2012-02-19 02:09 - 2012-02-18 14:08 - 0000000 ____D C:\Users\henry\AppData\Local\{307F2228-690E-4872-893C-9A799FCA6720}
2012-02-18 14:29 - 2012-02-18 14:29 - 28414228 ____A C:\Users\henry\Desktop\canyon.psd
2012-02-18 14:09 - 2012-02-18 14:08 - 0000000 ____D C:\Users\henry\AppData\Local\{7978DE6F-51C2-4B22-89DC-B282BF9A7AF9}
2012-02-18 02:08 - 2012-02-18 02:08 - 0000000 ____D C:\Users\henry\AppData\Local\{EFBBE3F7-4F59-4A1D-AAAA-88539FB3A620}
2012-02-18 02:08 - 2012-02-18 02:08 - 0000000 ____D C:\Users\henry\AppData\Local\{1B9C6715-98CE-4748-A191-B93B69F24E86}
2012-02-17 14:07 - 2012-02-17 14:07 - 0000000 ____D C:\Users\henry\AppData\Local\{FE4667A8-CD5C-4516-85D3-B9DE9B9F3F3B}
2012-02-17 14:07 - 2012-02-17 14:07 - 0000000 ____D C:\Users\henry\AppData\Local\{956E4263-64EB-4D94-B4A0-0331997691CB}
2012-02-16 22:55 - 2012-02-16 22:54 - 0000000 ____D C:\Users\henry\AppData\Local\{F6F80A24-4C04-41F1-932C-6E57BE86D5E0}
2012-02-16 22:54 - 2012-02-16 22:54 - 0000000 ____D C:\Users\henry\AppData\Local\{CDCD482C-9E34-4377-A263-214EC9DF2171}
2012-02-16 22:38 - 2012-03-24 20:12 - 1031680 ____A (Microsoft Corporation) C:\Windows\System32\rdpcore.dll
2012-02-16 21:34 - 2012-03-24 20:12 - 0826880 ____A (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll
2012-02-16 20:58 - 2012-03-24 20:12 - 0210944 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\rdpwd.sys
2012-02-16 20:57 - 2012-03-24 20:12 - 0023552 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tdtcp.sys
2012-02-16 02:48 - 2012-02-16 02:39 - 23824716 ____A C:\Users\henry\Desktop\red girl221.psd
2012-02-16 02:26 - 2012-02-16 02:26 - 2227850 ____A C:\Users\henry\Desktop\red girl22.jpg
2012-02-16 01:32 - 2012-02-16 01:32 - 0000000 ____D C:\Users\henry\AppData\Local\{F96ACB2C-5447-470D-85D4-BCCC3AA574E1}
2012-02-16 01:32 - 2012-02-16 01:32 - 0000000 ____D C:\Users\henry\AppData\Local\{D4244FE5-9073-4896-B168-121E3715E42C}
2012-02-15 13:32 - 2012-02-15 13:31 - 0000000 ____D C:\Users\henry\AppData\Local\{AFD8B044-B5CC-4B8C-8D71-31CD291F8C6C}
2012-02-15 13:31 - 2012-02-15 13:31 - 0000000 ____D C:\Users\henry\AppData\Local\{D86933D8-27B5-4FB4-BD19-7131738D3A17}
2012-02-15 01:27 - 2012-02-15 01:27 - 0000000 ____D C:\Users\henry\AppData\Local\{D429B9FF-DD7F-4462-AB8D-337E726F7D77}
2012-02-15 01:27 - 2012-02-15 01:27 - 0000000 ____D C:\Users\henry\AppData\Local\{5B2511EE-7035-40E4-A92A-AC03E6F6FFB7}
2012-02-14 23:46 - 2012-02-14 23:46 - 0356397 ____A C:\Users\henry\Desktop\Henry_Ong_Gree.pdf
2012-02-14 13:26 - 2012-02-14 13:26 - 0000000 ____D C:\Users\henry\AppData\Local\{FCB51EFC-F66C-4B78-945B-1E1D035D46F8}
2012-02-14 13:26 - 2012-02-14 13:26 - 0000000 ____D C:\Users\henry\AppData\Local\{6A3AEA4A-4B1D-4E59-8153-049EDCC2D16F}
2012-02-14 13:25 - 2010-12-01 19:08 - 0066224 ____A C:\Users\henry\AppData\Local\GDIPFONTCACHEV1.DAT
2012-02-14 02:40 - 2012-02-11 02:19 - 13954197 ____A C:\Users\henry\Desktop\lol thumbvb.psd
2012-02-14 01:09 - 2012-02-14 01:09 - 0001235 ____A C:\Users\henry\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk
2012-02-14 01:09 - 2012-02-14 01:09 - 0001235 ____A C:\Users\henry\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk
2012-02-14 01:09 - 2012-02-14 01:09 - 0000000 ____D C:\Users\henry\AppData\Roaming\OpenOffice.org
2012-02-14 01:07 - 2012-02-14 01:07 - 0001120 ____A C:\Users\Public\Desktop\OpenOffice.org 3.3.lnk
2012-02-14 01:06 - 2012-02-14 01:06 - 0000000 ____D C:\Program Files (x86)\OpenOffice.org 3
2012-02-14 01:05 - 2011-02-03 02:12 - 0000000 ____D C:\Program Files (x86)\Java
2012-02-14 01:04 - 2012-02-14 01:04 - 0000000 ____D C:\Users\henry\Desktop\OpenOffice.org 3.3 (en-US) Installation Files
2012-02-13 21:51 - 2012-02-13 21:51 - 0002674 ____A C:\Users\henry\Desktop\gamje.rtf
2012-02-13 21:07 - 2012-02-13 21:04 - 158067944 ____A C:\Users\henry\Desktop\OOo_3.3.0_Win_x86_install-wJRE_en-US.exe
2012-02-13 19:41 - 2012-02-11 22:00 - 0001401 ____A C:\Users\henry\Desktop\game.rtf
2012-02-13 18:27 - 2012-02-13 18:27 - 0000000 ____D C:\Users\henry\AppData\Local\{C5BADF91-2511-4CAC-AB6C-4D3FAC1F6138}
2012-02-13 18:27 - 2012-02-13 18:27 - 0000000 ____D C:\Users\henry\AppData\Local\{90510189-B773-4718-A4CA-22F204BB142A}
2012-02-13 18:26 - 2012-02-05 12:07 - 0000000 __ASH C:\Windows\System32\dds_trash_log.cmd
2012-02-12 01:36 - 2012-02-12 01:36 - 0000000 ____D C:\Users\henry\AppData\Local\{00B1E53F-947D-4335-B72B-5F9DFD1E805E}
2012-02-12 01:36 - 2012-02-11 13:35 - 0000000 ____D C:\Users\henry\AppData\Local\{6FCDD234-CB51-4A38-923A-17C99FE76D40}
2012-02-11 13:35 - 2012-02-11 13:35 - 0000000 ____D C:\Users\henry\AppData\Local\{73F970D8-451B-4E85-924F-337B1497492E}
2012-02-11 01:35 - 2012-02-11 01:35 - 0000000 ____D C:\Users\henry\AppData\Local\{82472FAA-3036-4B5A-AEB8-CAD33BE75143}
2012-02-11 01:35 - 2012-02-10 13:34 - 0000000 ____D C:\Users\henry\AppData\Local\{A4FC1966-4216-4739-9E98-38A53F0A455D}
2012-02-10 17:41 - 2012-02-10 17:41 - 0000000 ____D C:\Users\henry\AppData\Local\Yahoo!
2012-02-10 17:41 - 2012-02-10 17:40 - 0000000 ____D C:\Users\henry\AppData\Roaming\Yahoo!
2012-02-10 17:40 - 2012-02-10 17:40 - 0000000 ____D C:\Users\All Users\Yahoo! Companion
2012-02-10 17:40 - 2012-02-10 17:40 - 0000000 ____D C:\Users\All Users\Yahoo!
2012-02-10 17:40 - 2012-02-10 17:40 - 0000000 ____D C:\ProgramData\Yahoo! Companion
2012-02-10 17:40 - 2012-02-10 17:40 - 0000000 ____D C:\ProgramData\Yahoo!
2012-02-10 17:40 - 2012-02-10 17:39 - 0000000 ____D C:\Program Files (x86)\Yahoo!
2012-02-10 17:40 - 2011-06-08 17:42 - 0414368 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2012-02-10 13:34 - 2012-02-10 13:34 - 0000000 ____D C:\Users\henry\AppData\Local\{F45171E0-2CD6-4B73-A2D7-5D60E8429C00}
2012-02-10 01:34 - 2012-02-10 01:34 - 0000000 ____D C:\Users\henry\AppData\Local\{06D3EC2F-0774-4456-B8C6-9BFC6E213463}
2012-02-10 01:34 - 2012-02-10 01:33 - 0000000 ____D C:\Users\henry\AppData\Local\{E0536CF3-6F3D-425A-87D0-922411A4A8BF}
2012-02-09 22:36 - 2012-03-24 20:54 - 1544192 ____A (Microsoft Corporation) C:\Windows\System32\DWrite.dll
2012-02-09 21:38 - 2012-03-24 20:54 - 1077248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2012-02-09 13:33 - 2012-02-09 13:33 - 0000000 ____D C:\Users\henry\AppData\Local\{D1CE17AC-B2DD-4892-B6A6-6FC8E8228F33}
2012-02-09 13:33 - 2012-02-09 13:33 - 0000000 ____D C:\Users\henry\AppData\Local\{8FEF66E6-73D0-466D-A37B-DC5A0BF7D8E2}
2012-02-09 01:32 - 2012-02-09 01:32 - 0000000 ____D C:\Users\henry\AppData\Local\{1930590C-E6F5-47A8-B289-1D2E391E5F5A}
2012-02-09 01:32 - 2012-02-08 13:32 - 0000000 ____D C:\Users\henry\AppData\Local\{E7728E4B-E2CB-4874-B7AF-F874D5349D5A}
2012-02-09 01:23 - 2012-02-09 01:23 - 0250401 ____A C:\Users\henry\Desktop\hamster.pdf
2012-02-08 18:42 - 2012-02-08 18:42 - 0183430 ____A C:\Users\henry\Desktop\Hamster.jpg
2012-02-08 14:32 - 2012-02-08 14:27 - 0064052 ____A C:\Users\henry\Desktop\6789035393879077612.jpg
2012-02-08 13:49 - 2011-05-20 19:04 - 0000000 ____D C:\Program Files (x86)\Google
2012-02-08 13:32 - 2012-02-08 13:32 - 0000000 ____D C:\Users\henry\AppData\Local\{4C89C6D7-CCBA-4780-8ED4-924F4AA9C961}
2012-02-08 01:31 - 2012-02-08 01:31 - 0000000 ____D C:\Users\henry\AppData\Local\{EEF13889-45EB-4E8C-B59E-176C3678D72A}
2012-02-08 01:31 - 2012-02-08 01:31 - 0000000 ____D C:\Users\henry\AppData\Local\{90D0F317-E7E1-4143-9682-D3F106678733}
2012-02-07 23:56 - 2012-02-07 23:56 - 0000917 ____A C:\Users\Public\Desktop\Steam.lnk
2012-02-07 16:12 - 2012-02-07 16:12 - 0001066 ____A C:\Users\Public\Desktop\VLC media player.lnk
2012-02-07 16:04 - 2012-02-07 16:04 - 21073936 ____A C:\Users\henry\Documents\vlc-1.1.11-win32.exe
2012-02-07 13:31 - 2012-02-07 13:31 - 0000000 ____D C:\Users\henry\AppData\Local\{88226A5E-950A-4CD4-ADC2-6BCEF5C6C8A3}
2012-02-07 13:31 - 2012-02-07 13:30 - 0000000 ____D C:\Users\henry\AppData\Local\{21E9B387-6B87-458F-B3DE-30D6B295DCA7}
2012-02-07 00:09 - 2012-02-07 00:09 - 0000000 ____D C:\Users\henry\AppData\Local\{C9B09461-90A4-4928-B96C-B565EDBC5434}
2012-02-07 00:09 - 2012-02-07 00:09 - 0000000 ____D C:\Users\henry\AppData\Local\{6914B2E4-9F10-4092-BCB9-C2FB2EA918D2}
2012-02-06 17:03 - 2012-02-06 17:02 - 0086432 ____A C:\Windows\SysWOW64\MlTy3E.com_
2012-02-06 13:51 - 2012-02-06 13:51 - 0001109 ____A C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2012-02-06 13:51 - 2011-05-14 20:40 - 0000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2012-02-06 12:09 - 2012-02-06 12:09 - 0000000 ____D C:\Users\henry\AppData\Local\{8BFE6BF3-E4E4-4764-8578-70BBE97D06BA}
2012-02-06 12:09 - 2012-02-06 12:08 - 0000000 ____D C:\Users\henry\AppData\Local\{22D2353D-54D4-4A96-9086-1C9DE25D0FA1}
2012-02-06 00:08 - 2012-02-06 00:08 - 0000000 ____D C:\Users\henry\AppData\Local\{FDC07DAE-4E79-4294-86FF-F8F6C0862D6A}
2012-02-06 00:08 - 2012-02-06 00:08 - 0000000 ____D C:\Users\henry\AppData\Local\{8D967ED0-44E8-4F6D-B165-9F39F950F741}
2012-02-05 23:20 - 2012-02-05 23:05 - 0000000 ____D C:\Users\henry\Desktop\me
2012-02-05 23:07 - 2012-02-05 23:07 - 0023365 ____A C:\Users\henry\Desktop\19354_301822571123_692166123_4808157_6737368_n.jpg
2012-02-05 12:08 - 2012-02-05 12:07 - 0000000 ____D C:\Users\henry\AppData\Local\{53C95817-6508-40C6-A55B-9E69A9AADD84}
2012-02-05 12:07 - 2012-02-05 12:07 - 0000000 ____D C:\Users\henry\AppData\Local\{C1BE8BB6-2AC0-4F38-A730-69D71A0D5BAD}
2012-02-04 21:02 - 2012-02-04 21:02 - 0000000 ____D C:\Users\henry\AppData\Local\{8231ED5A-AD37-4B2C-ADDD-5A83EB6ED23F}
2012-02-04 21:02 - 2012-02-04 21:02 - 0000000 ____D C:\Users\henry\AppData\Local\{2EFDD19F-BEE3-4B7E-84BC-356B8022A2AF}
2012-02-04 03:07 - 2012-02-04 03:07 - 0000000 ____D C:\Users\henry\AppData\Local\{51D2CD95-4114-4742-A059-4992B74023E5}
2012-02-04 03:07 - 2012-02-04 03:06 - 0000000 ____D C:\Users\henry\AppData\Local\{A0234533-CE64-4E6E-825A-76CD021CAC31}
2012-02-03 11:25 - 2012-02-03 11:25 - 0000000 ____D C:\Users\henry\AppData\Local\{821CE428-5D6A-43F6-9780-87C73DAE5A3D}
2012-02-03 11:25 - 2012-02-03 11:24 - 0000000 ____D C:\Users\henry\AppData\Local\{3F4F18AA-1DC8-4101-944B-F399B6BBABA3}
2012-02-03 00:21 - 2011-05-20 19:04 - 0000000 ____D C:\Users\henry\AppData\Local\Google
2012-02-03 00:20 - 2012-02-03 00:20 - 0606536 ____A (Google Inc.) C:\Users\henry\Desktop\GoogleEarthSetup.exe
2012-02-02 22:54 - 2012-02-02 22:53 - 0000000 ____D C:\Users\henry\AppData\Local\{10403399-7398-4B24-915B-067625B7CE63}
2012-02-02 22:53 - 2012-02-02 22:53 - 0000000 ____D C:\Users\henry\AppData\Local\{0167071C-DF9C-47E4-8A1C-FC4A7D569F09}
2012-02-02 20:34 - 2012-03-24 20:54 - 3145728 ____A (Microsoft Corporation) C:\Windows\System32\win32k.sys
2012-02-02 02:25 - 2012-02-02 02:25 - 0000000 ____D C:\Users\henry\AppData\Local\{D467A05C-B7AE-4AA3-8A21-E95F79BA41B6}
2012-02-02 02:25 - 2012-02-01 14:24 - 0000000 ____D C:\Users\henry\AppData\Local\{D35A9E7A-45C7-4BF5-90B2-472AB3A6AE73}
2012-02-01 14:25 - 2012-02-01 14:25 - 0000000 ____D C:\Users\henry\AppData\Local\{12C94DF2-F468-4F1A-890A-B10448CCA927}
2012-02-01 02:24 - 2012-02-01 02:24 - 0000000 ____D C:\Users\henry\AppData\Local\{EE0527D1-8A1D-40BE-9CAD-C8A0C0155A03}
2012-02-01 02:24 - 2012-02-01 02:24 - 0000000 ____D C:\Users\henry\AppData\Local\{BD3E4962-FA5D-4534-88FD-8C36A0659C97}
2012-01-31 14:23 - 2012-01-31 14:23 - 0000000 ____D C:\Users\henry\AppData\Local\{6577B562-DDDD-4042-B89A-162637D3C29D}
2012-01-31 14:23 - 2012-01-31 14:23 - 0000000 ____D C:\Users\henry\AppData\Local\{446AF6A5-92B9-42D8-B71F-DD0D7F1E05FB}
2012-01-31 02:23 - 2012-01-31 02:23 - 0000000 ____D C:\Users\henry\AppData\Local\{9854EF1D-36F8-4BAE-A03A-9BCFBA49E2B4}
2012-01-31 02:23 - 2012-01-30 14:22 - 0000000 ____D C:\Users\henry\AppData\Local\{CE98DAF8-DA18-4C25-AFD8-1589A0F21CF4}
2012-01-31 01:25 - 2012-01-31 01:25 - 0241179 ____A C:\Users\henry\Desktop\f5.jpg
2012-01-30 14:22 - 2012-01-30 14:22 - 0000000 ____D C:\Users\henry\AppData\Local\{E24CF0ED-123A-4258-82F2-0E5226B8F162}
2012-01-30 02:18 - 2012-01-30 02:18 - 0000252 ____A C:\Windows\Tasks\Spybot - Search & Destroy - Scheduled Task.job
2012-01-29 19:17 - 2012-01-29 19:17 - 0000000 ____D C:\Users\henry\AppData\Local\{7E541046-E135-483E-8465-93F5EA04A672}
2012-01-29 19:17 - 2012-01-29 19:17 - 0000000 ____D C:\Users\henry\AppData\Local\{451AA597-0315-4003-9E5B-083B5E744610}
2012-01-29 02:10 - 2012-01-29 02:09 - 0000000 ____D C:\Users\henry\AppData\Local\{0A6F146E-8947-46BF-8393-B13F322406F4}
2012-01-29 02:09 - 2012-01-28 14:08 - 0000000 ____D C:\Users\henry\AppData\Local\{D38B6B30-D334-48D7-9EA4-1A23E1DB49FF}
2012-01-28 14:09 - 2012-01-28 14:09 - 0000000 ____D C:\Users\henry\AppData\Local\{527962A1-2B8E-4B6E-B08E-888B49AD59F9}
2012-01-27 12:16 - 2012-01-27 12:16 - 0000000 ____D C:\Users\henry\AppData\Local\{77F148F5-40D5-4A2A-8FEB-A710EE9ABD95}
2012-01-27 12:16 - 2012-01-27 12:15 - 0000000 ____D C:\Users\henry\AppData\Local\{A0A1117D-475B-4940-8032-296BCEF35595}
2012-01-26 13:23 - 2012-01-26 13:23 - 0000000 ____D C:\Users\henry\AppData\Local\{CC4FEE6F-23CE-49CC-ADD7-F43E0BB2BB98}
2012-01-26 13:23 - 2012-01-26 13:23 - 0000000 ____D C:\Users\henry\AppData\Local\{592353AE-6B83-42B1-983D-3A2AEC7D0E31}
2012-01-25 22:58 - 2012-01-25 22:58 - 0000000 ____D C:\Users\henry\AppData\Local\{E5184E93-3C52-401B-AD2D-529782A3319A}
2012-01-25 22:58 - 2012-01-25 22:58 - 0000000 ____D C:\Users\henry\AppData\Local\{D07151E3-9A24-49B4-B54E-DEFC4B80BD91}
2012-01-25 02:10 - 2012-01-25 02:09 - 0000000 ____D C:\Users\henry\AppData\Local\{D2761134-DD84-41A1-A59F-987C56DF0671}
2012-01-25 02:09 - 2012-01-25 02:09 - 0000000 ____D C:\Users\henry\AppData\Local\{6AD18E66-C977-4374-AC11-01FE042A26DB}
2012-01-24 22:38 - 2012-03-24 20:54 - 0149504 ____A (Microsoft Corporation) C:\Windows\System32\rdpcorekmts.dll
2012-01-24 22:38 - 2012-03-24 20:54 - 0077312 ____A (Microsoft Corporation) C:\Windows\System32\rdpwsx.dll
2012-01-24 22:33 - 2012-03-24 20:54 - 0009216 ____A (Microsoft Corporation) C:\Windows\System32\rdrmemptylst.exe
2012-01-24 14:09 - 2012-01-24 14:09 - 0000000 ____D C:\Users\henry\AppData\Local\{EEA7CB4C-FADF-441E-BDDD-3D8045F2D990}
2012-01-24 14:09 - 2012-01-24 14:09 - 0000000 ____D C:\Users\henry\AppData\Local\{D4D95E07-C9A7-48C3-BDAE-8F2AE8CEEC5E}
2012-01-24 02:08 - 2012-01-24 02:08 - 0000000 ____D C:\Users\henry\AppData\Local\{0531A247-4C01-430F-8F7C-B3A2EF02A929}
2012-01-24 02:08 - 2012-01-23 14:08 - 0000000 ____D C:\Users\henry\AppData\Local\{D32DC6F5-5A6A-4F57-AD41-6FEAE329E0B2}
2012-01-23 16:07 - 2012-01-14 16:55 - 0000000 ____D C:\Users\henry\Desktop\monday
2012-01-23 14:08 - 2012-01-23 14:08 - 0000000 ____D C:\Users\henry\AppData\Local\{021B7D4B-0322-4C2E-B20F-08C93A9D4286}
2012-01-22 23:44 - 2012-01-22 23:44 - 0000931 ____A C:\Users\Public\Desktop\ZooskMessenger.lnk
2012-01-22 23:44 - 2012-01-22 23:44 - 0000000 ____D C:\Users\henry\AppData\Roaming\com.zoosk.Desktop.096E6A67431258A508A2446A847B240591D2C99B.1
2012-01-22 23:44 - 2012-01-22 23:44 - 0000000 ____D C:\Program Files (x86)\ZooskMessenger
2012-01-22 19:39 - 2012-01-22 19:39 - 0021082 ____A C:\Users\henry\Desktop\bowlign.jpg
2012-01-22 19:11 - 2012-01-22 19:11 - 0000000 ____D C:\Users\henry\AppData\Local\{E837D6EA-8546-4C0F-8FDB-40E0FFD6F93D}
2012-01-22 19:11 - 2012-01-22 19:11 - 0000000 ____D C:\Users\henry\AppData\Local\{972A93F9-15B0-435F-8F5F-27A8001A5F1B}
2012-01-22 01:54 - 2012-01-22 01:54 - 0000000 ____D C:\Users\henry\AppData\Local\{EA67E4DA-554C-4F9E-B874-555FE863880F}
2012-01-22 01:54 - 2012-01-22 01:54 - 0000000 ____D C:\Users\henry\AppData\Local\{73723E2A-CC41-4467-B3E4-121DFE212E2A}
2012-01-21 13:53 - 2012-01-21 13:53 - 0000000 ____D C:\Users\henry\AppData\Local\{E0A95C72-D48E-489F-8200-45F98867E859}
2012-01-21 13:53 - 2012-01-21 13:53 - 0000000 ____D C:\Users\henry\AppData\Local\{A4B30153-5D72-467E-A327-139E0F597969}
2012-01-21 01:53 - 2012-01-21 01:53 - 0000000 ____D C:\Users\henry\AppData\Local\{ACB091C6-86F9-441E-AAC7-0C7606B4A10F}
2012-01-21 01:53 - 2012-01-21 01:52 - 0000000 ____D C:\Users\henry\AppData\Local\{A66040E4-FF10-40BE-9CAE-9EE5627EE739}
2012-01-20 18:33 - 2012-01-20 18:33 - 0001205 ____A C:\Users\henry\Desktop\FixNCR.reg
2012-01-20 18:29 - 2012-01-20 18:29 - 0000012 ____A C:\Windows\srun.log
2012-01-20 18:29 - 2012-01-20 18:29 - 0000000 ____D C:\Windows\system64
2012-01-20 18:29 - 2009-07-13 19:20 - 0000000 ____D C:\Windows\Resources
2012-01-20 15:28 - 2010-12-01 19:34 - 0000000 ____D C:\Users\henry\AppData\Local\Adobe
2012-01-20 13:52 - 2012-01-20 13:52 - 0000000 ____D C:\Users\henry\AppData\Local\{FB7A5117-7308-4765-9C6F-6ED46CDC858C}
2012-01-20 13:52 - 2012-01-20 13:52 - 0000000 ____D C:\Users\henry\AppData\Local\{6195FBEC-2090-4E5C-ABE7-5B5522FB2FF7}
2012-01-20 03:22 - 2011-10-26 17:42 - 0000000 ____D C:\Users\henry\AppData\Roaming\Skype
2012-01-20 01:52 - 2012-01-20 01:51 - 0000000 ____D C:\Users\henry\AppData\Local\{261D44BC-CA6B-45C5-9281-A9C1277D2752}
2012-01-20 01:51 - 2012-01-19 13:50 - 0000000 ____D C:\Users\henry\AppData\Local\{EF2A7DBE-6431-478E-97A9-D8C97384DE80}
2012-01-19 13:51 - 2012-01-19 13:51 - 0000000 ____D C:\Users\henry\AppData\Local\{BEBA7A96-47E7-4FEE-8205-FB692FB2F511}
2012-01-19 00:28 - 2012-01-19 00:27 - 0000000 ____D C:\Users\henry\AppData\Local\{0309A09C-6D14-4691-A686-22C03AB3EFDA}
2012-01-19 00:27 - 2012-01-18 12:27 - 0000000 ____D C:\Users\henry\AppData\Local\{C26BE47B-90FF-430C-A1DA-13FF9AC167E3}
2012-01-18 12:27 - 2012-01-18 12:27 - 0000000 ____D C:\Users\henry\AppData\Local\{D80104C8-8361-4FA8-8FC3-41F2A7FC6877}
2012-01-18 00:27 - 2010-12-01 19:54 - 0000000 ____D C:\Users\All Users\regid.1986-12.com.adobe
2012-01-18 00:27 - 2010-12-01 19:54 - 0000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2012-01-17 20:44 - 2010-12-01 19:40 - 0000000 ____D C:\Program Files\Adobe
2012-01-17 20:44 - 2010-12-01 19:39 - 0000000 ____D C:\Program Files\Common Files\Adobe
2012-01-17 20:39 - 2010-12-01 19:36 - 0000000 ____D C:\Users\All Users\Adobe
2012-01-17 20:39 - 2010-12-01 19:36 - 0000000 ____D C:\ProgramData\Adobe
2012-01-17 20:30 - 2012-01-17 20:30 - 0000000 ____D C:\Users\henry\Adobe Flash Builder 4.5
2012-01-17 20:23 - 2012-01-17 20:23 - 0002026 ____A C:\Users\Public\Desktop\Adobe Acrobat X Pro.lnk
2012-01-17 20:20 - 2012-01-17 20:20 - 0001085 ____A C:\Users\Public\Desktop\Adobe Content Viewer.lnk
2012-01-17 20:19 - 2012-01-17 20:19 - 0000000 ____D C:\Program Files (x86)\Adobe Story
2012-01-17 20:17 - 2012-01-17 20:17 - 0000000 ____D C:\Program Files (x86)\My Company Name
2012-01-17 20:08 - 2012-01-17 18:42 - 0000000 ____D C:\Users\henry\Desktop\CS5.5 Master Collection
2012-01-17 19:45 - 2012-01-17 19:45 - 0000000 ____D C:\Users\henry\Documents\AIMLogger
2012-01-17 18:41 - 2012-01-17 18:41 - 2288128 ____A C:\Users\henry\Desktop\LeagueofLegends.exe
2012-01-17 17:48 - 2012-01-17 17:48 - 0000000 ____D C:\Users\henry\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant
2012-01-17 17:47 - 2012-01-17 17:47 - 0001031 ____A C:\Users\Public\Desktop\Adobe Download Assistant.lnk
2012-01-17 17:47 - 2012-01-17 17:47 - 0000000 ____D C:\Program Files (x86)\Adobe Download Assistant
2012-01-17 17:46 - 2012-01-17 17:46 - 0000000 ____D C:\Users\henry\Desktop\1325-1279-4409-9491-6280-5123
2012-01-17 16:32 - 2012-01-17 16:32 - 0000000 ___AD C:\Users\henry\Desktop\Loomis
2012-01-17 16:01 - 2012-01-17 16:01 - 0000000 ____D C:\Users\henry\AppData\Local\{8D0FEB72-BB7E-46A6-B9B3-7FB56D4B6E52}
2012-01-17 16:01 - 2012-01-17 16:01 - 0000000 ____D C:\Users\henry\AppData\Local\{83A49127-45FE-4108-8EE8-DE41CB3EB8BB}
2012-01-17 12:19 - 2012-01-17 12:19 - 0000000 ____D C:\Users\henry\AppData\Local\{A46937CE-5DE6-404F-B847-91FA41A3B7A5}
2012-01-17 12:19 - 2012-01-17 12:18 - 0000000 ____D C:\Users\henry\AppData\Local\{28F7D0F7-B6DF-4F27-82BC-BBE51E714DEB}
2012-01-16 21:41 - 2011-02-10 02:00 - 0000000 ____D C:\Users\henry\AppData\Local\Deployment
2012-01-16 17:25 - 2012-01-16 17:25 - 0000000 ____D C:\Users\henry\AppData\Local\{89AFB00C-7BF1-45C1-BB43-52D0E2E4FE2A}
2012-01-16 17:25 - 2012-01-16 17:25 - 0000000 ____D C:\Users\henry\AppData\Local\{78362BF3-B60B-41A6-8CA1-D224649E39C3}
2012-01-15 19:31 - 2012-01-15 19:30 - 0000000 ____D C:\Users\henry\AppData\Local\{0687E56E-8DD3-4A4F-AD99-CB6CEC59616F}
2012-01-15 19:30 - 2012-01-15 19:30 - 0000000 ____D C:\Users\henry\AppData\Local\{1E27CF8E-1F34-4CB5-98A9-E4EC9B4924AA}
2012-01-14 17:05 - 2012-01-14 17:04 - 0000000 ____D C:\Users\henry\AppData\Local\{A5975671-0DA4-4AD9-B057-F1AE6BD517E3}
2012-01-14 17:04 - 2012-01-14 17:04 - 0000000 ____D C:\Users\henry\AppData\Local\{F0516731-D776-4D15-AE35-8EB612714B0B}
2012-01-14 17:01 - 2011-01-10 14:20 - 0000000 ____D C:\Users\All Users\FLEXnet
2012-01-14 17:01 - 2011-01-10 14:20 - 0000000 ____D C:\ProgramData\FLEXnet
2012-01-14 13:09 - 2012-01-14 13:09 - 0000000 ____D C:\Users\henry\AppData\Local\{80E442E0-A8B1-4289-BD30-E443532E2EF3}
2012-01-14 13:09 - 2012-01-14 13:09 - 0000000 ____D C:\Users\henry\AppData\Local\{65E26C71-8A8C-4616-96FC-EDED6C804B74}
2012-01-14 01:08 - 2012-01-14 01:08 - 0000000 ____D C:\Users\henry\AppData\Local\{2AFCA2BB-508F-48C6-BBD5-D8719496CF38}
2012-01-14 01:08 - 2012-01-13 13:08 - 0000000 ____D C:\Users\henry\AppData\Local\{A908EBE2-E170-4317-A9E1-11C730164280}
2012-01-13 13:08 - 2012-01-13 13:08 - 0000000 ____D C:\Users\henry\AppData\Local\{F9BD8595-D5A1-4276-AD21-D4B58CC48B86}
2012-01-13 12:54 - 2012-01-13 12:54 - 0711412 ____A C:\Users\henry\Desktop\Henry_Ong_Resume_kabam.jpg
2012-01-13 01:07 - 2012-01-13 01:07 - 0000000 ____D C:\Users\henry\AppData\Local\{634C9105-DE8A-4CF0-9C3B-CDA99D39F910}
2012-01-13 01:07 - 2012-01-12 13:06 - 0000000 ____D C:\Users\henry\AppData\Local\{93B0058A-EBF0-418A-8472-9D282B775015}
2012-01-12 13:07 - 2012-01-12 13:07 - 0000000 ____D C:\Users\henry\AppData\Local\{ACB4D370-51F7-4579-BDA0-03A1A4158190}
2012-01-12 01:06 - 2012-01-12 01:06 - 0000000 ____D C:\Users\henry\AppData\Local\{87FB357F-7D2E-403D-AB30-4160C1A6A01C}
2012-01-12 01:06 - 2012-01-11 13:05 - 0000000 ____D C:\Users\henry\AppData\Local\{BC97A04C-C788-4767-9E7B-E5B1486B00FD}
2012-01-11 13:06 - 2012-01-11 13:06 - 0000000 ____D C:\Users\henry\AppData\Local\{FDCBFBD4-691F-4D21-B00D-418BE23B8068}
2012-01-11 01:04 - 2012-01-11 01:03 - 0000000 ____D C:\Users\henry\AppData\Local\{F0F9D0B6-32A7-478F-961C-1B75C4C9D10C}
2012-01-11 01:03 - 2012-01-10 13:03 - 0000000 ____D C:\Users\henry\AppData\Local\{1B925365-AF60-41A4-A789-5FD7A0B13AD0}
2012-01-10 21:25 - 2012-01-10 21:25 - 25972132 ____N C:\Users\henry\Desktop\MVI_2848.AVI
2012-01-10 13:03 - 2012-01-10 13:03 - 0000000 ____D C:\Users\henry\AppData\Local\{36ABFCC2-24EC-4EE8-98CD-10CEF19B752E}
2012-01-10 01:03 - 2012-01-10 01:02 - 0000000 ____D C:\Users\henry\AppData\Local\{52051B56-160B-4DB2-B4EE-90C9D2B462C8}
2012-01-10 01:02 - 2012-01-09 13:02 - 0000000 ____D C:\Users\henry\AppData\Local\{5E8E688F-D1A5-444F-A5D8-1178702833BD}
2012-01-09 21:29 - 2012-01-09 21:29 - 0025550 ____A C:\Users\henry\Desktop\21554_334319071123_692166123_4959032_6616784_n.jpg
2012-01-09 13:02 - 2012-01-09 13:02 - 0000000 ____D C:\Users\henry\AppData\Local\{99674EA8-28F7-43B6-AF1A-23BDA1E3CB5D}
2012-01-08 19:22 - 2012-01-08 19:22 - 0000000 ____D C:\Users\henry\AppData\Local\{2243523E-8705-48C8-AF8D-711C76B8E8B6}
2012-01-08 19:22 - 2012-01-08 19:22 - 0000000 ____D C:\Users\henry\AppData\Local\{0EAADB92-3AEF-4D8C-9BC1-23840313CC91}
2012-01-08 01:11 - 2012-01-08 01:11 - 0000000 ____D C:\Users\henry\AppData\Local\{7AFAE1B3-901C-4F53-AF70-76E7D17CA413}
2012-01-08 01:11 - 2012-01-07 13:11 - 0000000 ____D C:\Users\henry\AppData\Local\{2302C642-02F2-4DF8-A362-E536C0169523}
2012-01-07 13:11 - 2012-01-07 13:11 - 0000000 ____D C:\Users\henry\AppData\Local\{90004412-5311-41F4-AA77-0634FBB2E758}
2012-01-07 01:10 - 2012-01-07 01:10 - 0000000 ____D C:\Users\henry\AppData\Local\{9A5A71CB-6E24-45A1-9060-3FF012646EDE}
2012-01-07 01:10 - 2012-01-06 13:10 - 0000000 ____D C:\Users\henry\AppData\Local\{E71B4579-CBEA-401A-91BE-7DC9A06409E9}
2012-01-06 13:10 - 2012-01-06 13:10 - 0000000 ____D C:\Users\henry\AppData\Local\{7ADDF6C5-92D2-4DFF-9DA0-ACCA4F58F970}
2012-01-06 01:09 - 2012-01-06 01:09 - 0000000 ____D C:\Users\henry\AppData\Local\{21CC2EFB-27EC-4FEE-855E-9AD018FB3F12}
2012-01-06 01:09 - 2012-01-05 13:09 - 0000000 ____D C:\Users\henry\AppData\Local\{498730F2-1951-4599-8A4B-A9E90127C0FA}
2012-01-05 13:09 - 2012-01-05 13:09 - 0000000 ____D C:\Users\henry\AppData\Local\{45B971F1-EBA1-42CC-9305-666786252700}
2012-01-05 01:08 - 2012-01-05 01:08 - 0000000 ____D C:\Users\henry\AppData\Local\{F1DE812B-4D7D-499B-860E-15A3F23849F4}
2012-01-05 01:08 - 2012-01-05 01:08 - 0000000 ____D C:\Users\henry\AppData\Local\{455CB302-A28F-435A-AEA7-028629AD4080}
========================= Known DLLs (Whitelisted) ============
========================= Bamital & volsnap Check ============
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
========================= Memory info ======================
Percentage of memory in use: 9%
Total physical RAM: 8191.23 MB
Available physical RAM: 7389.16 MB
Total Pagefile: 8189.38 MB
Available Pagefile: 7366.62 MB
Total Virtual: 8192 MB
Available Virtual: 8191.9 MB
======================= Partitions =========================
1 Drive c: () (Fixed) (Total:465.66 GB) (Free:235.51 GB) NTFS
3 Drive f: (PATRIOT) (Removable) (Total:7.45 GB) (Free:2.17 GB) FAT32
4 Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS
5 Drive y: (System Reserved) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Disk ### Status Size Free Dyn Gpt
-------- ------------- ------- ------- --- ---
Disk 0 Online 465 GB 0 B
Disk 1 Online 7640 MB 0 B
Partitions of Disk 0:
===============
Partition ### Type Size Offset
------------- ---------------- ------- -------
Partition 1 Primary 100 MB 1024 KB
Partition 2 Primary 465 GB 101 MB
======================================================================================================
Disk: 0
Partition 1
Type : 07
Hidden: No
Active: Yes
Volume ### Ltr Label Fs Type Size Status Info
---------- --- ----------- ----- ---------- ------- --------- --------
* Volume 1 Y System Rese NTFS Partition 100 MB Healthy
======================================================================================================
Disk: 0
Partition 2
Type : 07
Hidden: No
Active: No
Volume ### Ltr Label Fs Type Size Status Info
---------- --- ----------- ----- ---------- ------- --------- --------
* Volume 2 C NTFS Partition 465 GB Healthy
======================================================================================================
Partitions of Disk 1:
===============
Partition ### Type Size Offset
------------- ---------------- ------- -------
Partition 1 Primary 7636 MB 4032 KB
======================================================================================================
Disk: 1
Partition 1
Type : 0C
Hidden: No
Active: No
Volume ### Ltr Label Fs Type Size Status Info
---------- --- ----------- ----- ---------- ------- --------- --------
* Volume 3 F PATRIOT FAT32 Removable 7636 MB Healthy
======================================================================================================
==========================================================
Last Boot: 2012-04-02 22:07
======================= End Of Log ==========================
#70
Posted 03 April 2012 - 05:34 AM

OK. I'll try to reset EXE file association manually.
Step 1
Download
fixlist.txt 32.13KB
238 downloads
And run FRST64.exe FIX as you did last time. Post result after the fix.
Step 2
After that try to run Combofix. If you fail then try this software:
Download the latest version of TDSSKiller from here and save it to your Desktop.
Step 1
Download

And run FRST64.exe FIX as you did last time. Post result after the fix.
Step 2
After that try to run Combofix. If you fail then try this software:
Download the latest version of TDSSKiller from here and save it to your Desktop.
- Doubleclick on TDSSKiller.exe to run the application, then click on Change parameters.
- Check the boxes beside:
- Verify Driver Digital Signature
- Detect TDLFS file system
- then click OK.
- Click the Start Scan button to start the scan.
- If a suspicious object is detected, the default action will be Skip
- If malicious objects are found, they will show in the Scan results and offer three (3) options.
- Ensure Cure is selected for malicious objects
- Click Continue then Reboot now to finish the cleaning process.
- Note: If Cure is not available, please choose Skip instead, do not choose Delete unless instructed.
#71
Posted 03 April 2012 - 02:10 PM

Fix result of Farbar Recovery Scan Tool (FRST written by farbar) Version: 15-03-2012
Ran by SYSTEM at 2012-04-03 13:04:23 R:2
Running from F:\
==============================================
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost\\netsvcs tgsrvc_smartagent Deleted successfully.
========= reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.exe /f =========
The operation completed successfully.
========= End of Reg: =========
========= reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.exe\OpenWithList /f =========
The operation completed successfully.
========= End of Reg: =========
========= reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.exe\OpenWithProgids /v exefile /t REG_NONE /d 0x0 /f =========
The operation completed successfully.
========= End of Reg: =========
C:\Users\henry\AppData\Local\{C025742C-FE8A-4939-ABA2-0E018F6821A5} moved successfully.
C:\Users\henry\AppData\Local\{3B6DB259-A9FA-4CA7-B29B-6F1EFC819C94} moved successfully.
C:\Users\henry\AppData\Local\{FEF4CBE1-6973-4D71-88F9-C7A656EFE5AC} moved successfully.
C:\Users\henry\AppData\Local\{19DA093A-3CF8-4AF1-8400-A4C1CA4004EF} moved successfully.
C:\Users\henry\AppData\Local\{374C5AC8-F957-4B0D-B00E-8E137F1EF1AB} moved successfully.
C:\Users\henry\AppData\Local\{F959C390-FD7C-40A7-B7CE-2B716273A019} moved successfully.
C:\Users\henry\AppData\Local\{70925E63-9DEF-493B-B2E0-9CF56444FCC7} moved successfully.
C:\Users\henry\AppData\Local\{B309C81B-53D5-4529-96ED-A183AAB850CD} moved successfully.
C:\Users\henry\AppData\Local\{543EEA10-5C4B-4C53-8B5B-EAC4B1204E49} moved successfully.
C:\Users\henry\AppData\Local\{B4A96DEB-DEBB-4EDB-B3F8-5184EA92748F} moved successfully.
C:\Users\henry\AppData\Local\{52A8B52C-7ECA-41B5-9A82-F4669CA78101} moved successfully.
C:\Users\henry\AppData\Local\{30E2248F-152C-41C3-9C50-FAE8418B43CE} moved successfully.
C:\Users\henry\AppData\Local\{BD0BEE27-6E90-4170-89CF-E3F066B3195C} moved successfully.
C:\Users\henry\AppData\Local\{762ED396-E7EE-4042-8774-37E282E6FFE6} moved successfully.
C:\Users\henry\AppData\Local\{4AFF59CA-A3C8-4AE3-A574-CE16EBEF1880} moved successfully.
C:\Users\henry\AppData\Local\{B7E9FCFF-7243-4E10-9AE1-0C2E8251B1E4} moved successfully.
C:\Users\henry\AppData\Local\{55F57402-A538-493D-8663-7992040F8AFC} moved successfully.
C:\Users\henry\AppData\Local\{E4BE028C-A095-46B9-B4BA-D48BEA97DD8D} moved successfully.
C:\Users\henry\AppData\Local\{96E20A9F-8A76-4500-B5F8-8ECC06E4084C} moved successfully.
C:\Users\henry\AppData\Local\{B9CF85E9-91D6-476B-B75D-1A6293554775} moved successfully.
C:\Users\henry\AppData\Local\{EA1916BE-FF27-40F9-9CE0-33A47746818C} moved successfully.
C:\Users\henry\AppData\Local\{937E6033-B994-46DF-9C78-520A5F0CFE28} moved successfully.
C:\Users\henry\AppData\Local\{E58D3ACD-CCFD-48BC-A9D1-42D295E23CB0} moved successfully.
C:\Users\henry\AppData\Local\{7E293F7F-6AD9-40F8-BBFD-80C091D49DA7} moved successfully.
C:\Users\henry\AppData\Local\{CDCFCD60-F9F4-40F4-A466-EBED2757AABC} moved successfully.
C:\Users\henry\AppData\Local\{B868F692-7A42-40A6-B8F0-29F0D0649688} moved successfully.
C:\Users\henry\AppData\Local\{9AFEA366-0149-43CB-ABB9-15929029E251} moved successfully.
C:\Users\henry\AppData\Local\{19D43604-FB12-4DBF-A165-DEBC1C30D647} moved successfully.
C:\Users\henry\AppData\Local\{615FFADE-7433-477A-BC6F-A18E8B40396C} moved successfully.
C:\Users\henry\AppData\Local\{5F4D5251-636A-4D00-AEBD-037BC00150EA} moved successfully.
C:\Users\henry\AppData\Local\{F2863DA3-3B36-4396-8F8C-DCCADB8F5702} moved successfully.
C:\Users\henry\AppData\Local\{BE63C8E8-01F7-4C9B-A072-C1F2A8B3554B} moved successfully.
C:\Users\henry\AppData\Local\{A24E1888-7B91-47AA-86CE-4FE264919155} moved successfully.
C:\Users\henry\AppData\Local\{515AF329-D58A-433E-95F5-6DCAB8B31B73} moved successfully.
C:\Users\henry\AppData\Local\{A6C61CAA-E846-49AA-84C3-43478DB370C5} moved successfully.
C:\Users\henry\AppData\Local\{42F826B1-7F03-4915-B6B4-C25614E3493D} moved successfully.
C:\Users\henry\AppData\Local\{FED365D3-EB1E-4B37-AA89-AA1D4B819569} moved successfully.
C:\Users\henry\AppData\Local\{F0F3A29E-FE1D-46F2-B9AB-725B13287884} moved successfully.
C:\Users\henry\AppData\Local\{8C1F5A68-BCC1-46E8-AE11-1894C4D3D6FF} moved successfully.
C:\Users\henry\AppData\Local\{34362D3D-4C32-4A39-AA1C-4E9943083BE1} moved successfully.
C:\Users\henry\AppData\Local\{D69BCD4A-AA4D-4FBB-8D50-0ACD2932E618} moved successfully.
C:\Users\henry\AppData\Local\{559D1BE0-F725-4E5F-B1DE-9E298F400323} moved successfully.
C:\Users\henry\AppData\Local\{D574F574-AFC3-478E-A710-C6F839DEBED2} moved successfully.
C:\Users\henry\AppData\Local\{B3F5A0E9-370D-42E3-9FEA-AC30CEABB316} moved successfully.
C:\Users\henry\AppData\Local\{9E610E66-9D4F-4D6C-8EFE-914AAD720CC4} moved successfully.
C:\Users\henry\AppData\Local\{279EF88E-A970-41D5-83F8-E90FB4224446} moved successfully.
C:\Users\henry\AppData\Local\{208709C4-C72E-4BEB-BA58-B5785A45FED3} moved successfully.
C:\Users\henry\AppData\Local\{D9BD6237-26A6-4008-B388-97E32E5EC499} moved successfully.
C:\Users\henry\AppData\Local\{7A23DFE7-94F3-4366-93BE-06639FE0BC0E} moved successfully.
C:\Users\henry\AppData\Local\{C025742C-FE8A-4939-ABA2-0E018F6821A5} not found.
C:\Users\henry\AppData\Local\{3B6DB259-A9FA-4CA7-B29B-6F1EFC819C94} not found.
C:\Users\henry\AppData\Local\{FEF4CBE1-6973-4D71-88F9-C7A656EFE5AC} not found.
C:\Users\henry\AppData\Local\{374C5AC8-F957-4B0D-B00E-8E137F1EF1AB} not found.
C:\Users\henry\AppData\Local\{19DA093A-3CF8-4AF1-8400-A4C1CA4004EF} not found.
C:\Users\henry\AppData\Local\{F959C390-FD7C-40A7-B7CE-2B716273A019} not found.
C:\Users\henry\AppData\Local\{70925E63-9DEF-493B-B2E0-9CF56444FCC7} not found.
C:\Users\henry\AppData\Local\{B309C81B-53D5-4529-96ED-A183AAB850CD} not found.
C:\Users\henry\AppData\Local\{543EEA10-5C4B-4C53-8B5B-EAC4B1204E49} not found.
C:\Users\henry\AppData\Local\{B4A96DEB-DEBB-4EDB-B3F8-5184EA92748F} not found.
C:\Users\henry\AppData\Local\{52A8B52C-7ECA-41B5-9A82-F4669CA78101} not found.
C:\Users\henry\AppData\Local\{30E2248F-152C-41C3-9C50-FAE8418B43CE} not found.
C:\Users\henry\AppData\Local\{BD0BEE27-6E90-4170-89CF-E3F066B3195C} not found.
C:\Users\henry\AppData\Local\{762ED396-E7EE-4042-8774-37E282E6FFE6} not found.
C:\Users\henry\AppData\Local\{4AFF59CA-A3C8-4AE3-A574-CE16EBEF1880} not found.
C:\Users\henry\AppData\Local\{B7E9FCFF-7243-4E10-9AE1-0C2E8251B1E4} not found.
C:\Users\henry\AppData\Local\{55F57402-A538-493D-8663-7992040F8AFC} not found.
C:\Users\henry\AppData\Local\{E4BE028C-A095-46B9-B4BA-D48BEA97DD8D} not found.
C:\Users\henry\AppData\Local\{96E20A9F-8A76-4500-B5F8-8ECC06E4084C} not found.
C:\Users\henry\AppData\Local\{B9CF85E9-91D6-476B-B75D-1A6293554775} not found.
C:\Users\henry\AppData\Local\{EA1916BE-FF27-40F9-9CE0-33A47746818C} not found.
C:\Users\henry\AppData\Local\{937E6033-B994-46DF-9C78-520A5F0CFE28} not found.
C:\Users\henry\AppData\Local\{E58D3ACD-CCFD-48BC-A9D1-42D295E23CB0} not found.
C:\Users\henry\AppData\Local\{7E293F7F-6AD9-40F8-BBFD-80C091D49DA7} not found.
C:\Users\henry\AppData\Local\{CDCFCD60-F9F4-40F4-A466-EBED2757AABC} not found.
C:\Users\henry\AppData\Local\{B868F692-7A42-40A6-B8F0-29F0D0649688} not found.
C:\Users\henry\AppData\Local\{9AFEA366-0149-43CB-ABB9-15929029E251} not found.
C:\Users\henry\AppData\Local\{19D43604-FB12-4DBF-A165-DEBC1C30D647} not found.
C:\Users\henry\AppData\Local\{615FFADE-7433-477A-BC6F-A18E8B40396C} not found.
C:\Users\henry\AppData\Local\{5F4D5251-636A-4D00-AEBD-037BC00150EA} not found.
C:\Users\henry\AppData\Local\{F2863DA3-3B36-4396-8F8C-DCCADB8F5702} not found.
C:\Users\henry\AppData\Local\{BE63C8E8-01F7-4C9B-A072-C1F2A8B3554B} not found.
C:\Users\henry\AppData\Local\{A24E1888-7B91-47AA-86CE-4FE264919155} not found.
C:\Users\henry\AppData\Local\{515AF329-D58A-433E-95F5-6DCAB8B31B73} not found.
C:\Users\henry\AppData\Local\{A6C61CAA-E846-49AA-84C3-43478DB370C5} not found.
C:\Users\henry\AppData\Local\{42F826B1-7F03-4915-B6B4-C25614E3493D} not found.
C:\Users\henry\AppData\Local\{FED365D3-EB1E-4B37-AA89-AA1D4B819569} not found.
C:\Users\henry\AppData\Local\{F0F3A29E-FE1D-46F2-B9AB-725B13287884} not found.
C:\Users\henry\AppData\Local\{8C1F5A68-BCC1-46E8-AE11-1894C4D3D6FF} not found.
C:\Users\henry\AppData\Local\{34362D3D-4C32-4A39-AA1C-4E9943083BE1} not found.
C:\Users\henry\AppData\Local\{D69BCD4A-AA4D-4FBB-8D50-0ACD2932E618} not found.
C:\Users\henry\AppData\Local\{559D1BE0-F725-4E5F-B1DE-9E298F400323} not found.
C:\Users\henry\AppData\Local\{D574F574-AFC3-478E-A710-C6F839DEBED2} not found.
C:\Users\henry\AppData\Local\{B3F5A0E9-370D-42E3-9FEA-AC30CEABB316} not found.
C:\Users\henry\AppData\Local\{9E610E66-9D4F-4D6C-8EFE-914AAD720CC4} not found.
C:\Users\henry\AppData\Local\{208709C4-C72E-4BEB-BA58-B5785A45FED3} not found.
C:\Users\henry\AppData\Local\{279EF88E-A970-41D5-83F8-E90FB4224446} not found.
C:\Users\henry\AppData\Local\{D9BD6237-26A6-4008-B388-97E32E5EC499} not found.
C:\Users\henry\AppData\Local\{7A23DFE7-94F3-4366-93BE-06639FE0BC0E} not found.
C:\Users\henry\AppData\Local\{1EAE8B1C-2D2F-4A20-901D-52941288D79F} moved successfully.
C:\Users\henry\AppData\Local\{E0A374B8-E62B-4E96-9619-668FD747EF8B} moved successfully.
C:\Users\henry\AppData\Local\{6BD7D511-D165-4556-9A2D-1C8464AF522B} moved successfully.
C:\Users\henry\AppData\Local\{0BDBF274-E424-4B49-9BE9-1A33D0664CEE} moved successfully.
C:\Users\henry\AppData\Local\{7FB0131B-2005-4306-A7DD-5E7C1B867740} moved successfully.
C:\Users\henry\AppData\Local\{452F73C8-29E7-4DC6-9CBF-D199319320F7} moved successfully.
C:\Users\henry\AppData\Local\{CF969DD0-9DA3-4211-BE25-902B110EC4AC} moved successfully.
C:\Users\henry\AppData\Local\{4AF96651-0D67-4F30-91D7-80A71A9D8515} moved successfully.
C:\Users\henry\AppData\Local\{4F01EDF1-A143-431A-A552-119588908A9C} moved successfully.
C:\Users\henry\AppData\Local\{44DB2657-02F4-4316-A3E1-041A5B45BA47} moved successfully.
C:\Users\henry\AppData\Local\{D446D861-C8A4-43FE-8F4B-8F2E03BCFD88} moved successfully.
C:\Users\henry\AppData\Local\{FAEFD702-7BF5-4B5B-A656-73BD22BCB029} moved successfully.
C:\Users\henry\AppData\Local\{949A6181-D1FA-47A8-B981-A2B2DBBDE03D} moved successfully.
C:\Users\henry\AppData\Local\{605549EE-0AE0-471C-9439-0CB2CB1A31BB} moved successfully.
C:\Users\henry\AppData\Local\{ED7980F5-8CA5-4C67-AC84-7D4D62BB91F7} moved successfully.
C:\Users\henry\AppData\Local\{240EA13A-4AE5-46BF-9B7F-4CFF6400C4C5} moved successfully.
C:\Users\henry\AppData\Local\{F00C992D-8F23-4B6B-975B-7080B553DA10} moved successfully.
C:\Users\henry\AppData\Local\{BADAEC31-FD3B-4A81-96DB-C396DC54AFF0} moved successfully.
C:\Users\henry\AppData\Local\{1D938DD8-6A4A-42EA-959B-D827B07BC98C} moved successfully.
C:\Users\henry\AppData\Local\{1CCE0747-47F1-454F-8F70-95D8BE268A61} moved successfully.
C:\Users\henry\AppData\Local\{764E1182-96E9-4D8F-9845-4A5D163FF63A} moved successfully.
C:\Users\henry\AppData\Local\{78D5BB10-EBCC-4A7D-9189-DF2467E84842} moved successfully.
C:\Users\henry\AppData\Local\{B58B0078-39FA-4EFE-AD9B-0D8842299B56} moved successfully.
C:\Users\henry\AppData\Local\{92A89C9B-94E3-4970-A1AB-00DB7B3F4136} moved successfully.
C:\Users\henry\AppData\Local\{FF59D539-C61A-4F72-A5D7-9BC87890A14F} moved successfully.
C:\Users\henry\AppData\Local\{A67476DE-C13B-48D1-97C6-D9AAB097DFDF} moved successfully.
C:\Users\henry\AppData\Local\{F27F9EC9-8C69-4F86-9D75-C07D6B6B6D92} moved successfully.
C:\Users\henry\AppData\Local\{3B1E5A94-51BB-4FD7-826E-899795BBAC89} moved successfully.
C:\Users\henry\AppData\Local\{8887F20D-F8C5-449D-95CA-98AE662DAEE7} moved successfully.
C:\Users\henry\AppData\Local\{6B476DA4-0B60-4FB3-B87F-BCD135666C69} moved successfully.
C:\Users\henry\AppData\Local\{C90B6CFD-6E34-487D-8337-F9283D246839} moved successfully.
C:\Users\henry\AppData\Local\{23D96AAC-5C62-4358-B238-4571FF4512AF} moved successfully.
C:\Users\henry\AppData\Local\{FCF785AA-CA6F-4689-AFD2-7880B790BF51} moved successfully.
C:\Users\henry\AppData\Local\{A8BA8ECF-A59E-4741-BDF0-77D4195B56C0} moved successfully.
C:\Users\henry\AppData\Local\{C7E768EF-F08A-4E76-8A52-50E5E0FD3F3A} moved successfully.
C:\Users\henry\AppData\Local\{84CB3007-071B-4765-B79A-6C60C02B9ADB} moved successfully.
C:\Users\henry\AppData\Local\{307F2228-690E-4872-893C-9A799FCA6720} moved successfully.
C:\Users\henry\AppData\Local\{7978DE6F-51C2-4B22-89DC-B282BF9A7AF9} moved successfully.
C:\Users\henry\AppData\Local\{EFBBE3F7-4F59-4A1D-AAAA-88539FB3A620} moved successfully.
C:\Users\henry\AppData\Local\{1B9C6715-98CE-4748-A191-B93B69F24E86} moved successfully.
C:\Users\henry\AppData\Local\{FE4667A8-CD5C-4516-85D3-B9DE9B9F3F3B} moved successfully.
C:\Users\henry\AppData\Local\{956E4263-64EB-4D94-B4A0-0331997691CB} moved successfully.
C:\Users\henry\AppData\Local\{F6F80A24-4C04-41F1-932C-6E57BE86D5E0} moved successfully.
C:\Users\henry\AppData\Local\{CDCD482C-9E34-4377-A263-214EC9DF2171} moved successfully.
C:\Users\henry\AppData\Local\{F96ACB2C-5447-470D-85D4-BCCC3AA574E1} moved successfully.
C:\Users\henry\AppData\Local\{D4244FE5-9073-4896-B168-121E3715E42C} moved successfully.
C:\Users\henry\AppData\Local\{AFD8B044-B5CC-4B8C-8D71-31CD291F8C6C} moved successfully.
C:\Users\henry\AppData\Local\{D86933D8-27B5-4FB4-BD19-7131738D3A17} moved successfully.
C:\Users\henry\AppData\Local\{D429B9FF-DD7F-4462-AB8D-337E726F7D77} moved successfully.
C:\Users\henry\AppData\Local\{5B2511EE-7035-40E4-A92A-AC03E6F6FFB7} moved successfully.
C:\Users\henry\AppData\Local\{FCB51EFC-F66C-4B78-945B-1E1D035D46F8} moved successfully.
C:\Users\henry\AppData\Local\{6A3AEA4A-4B1D-4E59-8153-049EDCC2D16F} moved successfully.
C:\Users\henry\AppData\Local\{C5BADF91-2511-4CAC-AB6C-4D3FAC1F6138} moved successfully.
C:\Users\henry\AppData\Local\{90510189-B773-4718-A4CA-22F204BB142A} moved successfully.
C:\Users\henry\AppData\Local\{00B1E53F-947D-4335-B72B-5F9DFD1E805E} moved successfully.
C:\Users\henry\AppData\Local\{6FCDD234-CB51-4A38-923A-17C99FE76D40} moved successfully.
C:\Users\henry\AppData\Local\{73F970D8-451B-4E85-924F-337B1497492E} moved successfully.
C:\Users\henry\AppData\Local\{82472FAA-3036-4B5A-AEB8-CAD33BE75143} moved successfully.
C:\Users\henry\AppData\Local\{A4FC1966-4216-4739-9E98-38A53F0A455D} moved successfully.
C:\Users\henry\AppData\Local\{F45171E0-2CD6-4B73-A2D7-5D60E8429C00} moved successfully.
C:\Users\henry\AppData\Local\{06D3EC2F-0774-4456-B8C6-9BFC6E213463} moved successfully.
C:\Users\henry\AppData\Local\{E0536CF3-6F3D-425A-87D0-922411A4A8BF} moved successfully.
C:\Users\henry\AppData\Local\{D1CE17AC-B2DD-4892-B6A6-6FC8E8228F33} moved successfully.
C:\Users\henry\AppData\Local\{8FEF66E6-73D0-466D-A37B-DC5A0BF7D8E2} moved successfully.
C:\Users\henry\AppData\Local\{1930590C-E6F5-47A8-B289-1D2E391E5F5A} moved successfully.
C:\Users\henry\AppData\Local\{E7728E4B-E2CB-4874-B7AF-F874D5349D5A} moved successfully.
C:\Users\henry\AppData\Local\{4C89C6D7-CCBA-4780-8ED4-924F4AA9C961} moved successfully.
C:\Users\henry\AppData\Local\{EEF13889-45EB-4E8C-B59E-176C3678D72A} moved successfully.
C:\Users\henry\AppData\Local\{90D0F317-E7E1-4143-9682-D3F106678733} moved successfully.
C:\Users\henry\AppData\Local\{88226A5E-950A-4CD4-ADC2-6BCEF5C6C8A3} moved successfully.
C:\Users\henry\AppData\Local\{21E9B387-6B87-458F-B3DE-30D6B295DCA7} moved successfully.
C:\Users\henry\AppData\Local\{C9B09461-90A4-4928-B96C-B565EDBC5434} moved successfully.
C:\Users\henry\AppData\Local\{6914B2E4-9F10-4092-BCB9-C2FB2EA918D2} moved successfully.
C:\Users\henry\AppData\Local\{8BFE6BF3-E4E4-4764-8578-70BBE97D06BA} moved successfully.
C:\Users\henry\AppData\Local\{22D2353D-54D4-4A96-9086-1C9DE25D0FA1} moved successfully.
C:\Users\henry\AppData\Local\{FDC07DAE-4E79-4294-86FF-F8F6C0862D6A} moved successfully.
C:\Users\henry\AppData\Local\{8D967ED0-44E8-4F6D-B165-9F39F950F741} moved successfully.
C:\Users\henry\AppData\Local\{53C95817-6508-40C6-A55B-9E69A9AADD84} moved successfully.
C:\Users\henry\AppData\Local\{C1BE8BB6-2AC0-4F38-A730-69D71A0D5BAD} moved successfully.
C:\Users\henry\AppData\Local\{8231ED5A-AD37-4B2C-ADDD-5A83EB6ED23F} moved successfully.
C:\Users\henry\AppData\Local\{2EFDD19F-BEE3-4B7E-84BC-356B8022A2AF} moved successfully.
C:\Users\henry\AppData\Local\{51D2CD95-4114-4742-A059-4992B74023E5} moved successfully.
C:\Users\henry\AppData\Local\{A0234533-CE64-4E6E-825A-76CD021CAC31} moved successfully.
C:\Users\henry\AppData\Local\{821CE428-5D6A-43F6-9780-87C73DAE5A3D} moved successfully.
C:\Users\henry\AppData\Local\{3F4F18AA-1DC8-4101-944B-F399B6BBABA3} moved successfully.
C:\Users\henry\AppData\Local\{10403399-7398-4B24-915B-067625B7CE63} moved successfully.
C:\Users\henry\AppData\Local\{0167071C-DF9C-47E4-8A1C-FC4A7D569F09} moved successfully.
C:\Users\henry\AppData\Local\{D467A05C-B7AE-4AA3-8A21-E95F79BA41B6} moved successfully.
C:\Users\henry\AppData\Local\{D35A9E7A-45C7-4BF5-90B2-472AB3A6AE73} moved successfully.
C:\Users\henry\AppData\Local\{12C94DF2-F468-4F1A-890A-B10448CCA927} moved successfully.
C:\Users\henry\AppData\Local\{EE0527D1-8A1D-40BE-9CAD-C8A0C0155A03} moved successfully.
C:\Users\henry\AppData\Local\{BD3E4962-FA5D-4534-88FD-8C36A0659C97} moved successfully.
C:\Users\henry\AppData\Local\{6577B562-DDDD-4042-B89A-162637D3C29D} moved successfully.
C:\Users\henry\AppData\Local\{446AF6A5-92B9-42D8-B71F-DD0D7F1E05FB} moved successfully.
C:\Users\henry\AppData\Local\{9854EF1D-36F8-4BAE-A03A-9BCFBA49E2B4} moved successfully.
C:\Users\henry\AppData\Local\{CE98DAF8-DA18-4C25-AFD8-1589A0F21CF4} moved successfully.
C:\Users\henry\AppData\Local\{E24CF0ED-123A-4258-82F2-0E5226B8F162} moved successfully.
C:\Users\henry\AppData\Local\{7E541046-E135-483E-8465-93F5EA04A672} moved successfully.
C:\Users\henry\AppData\Local\{451AA597-0315-4003-9E5B-083B5E744610} moved successfully.
C:\Users\henry\AppData\Local\{0A6F146E-8947-46BF-8393-B13F322406F4} moved successfully.
C:\Users\henry\AppData\Local\{D38B6B30-D334-48D7-9EA4-1A23E1DB49FF} moved successfully.
C:\Users\henry\AppData\Local\{527962A1-2B8E-4B6E-B08E-888B49AD59F9} moved successfully.
C:\Users\henry\AppData\Local\{77F148F5-40D5-4A2A-8FEB-A710EE9ABD95} moved successfully.
C:\Users\henry\AppData\Local\{A0A1117D-475B-4940-8032-296BCEF35595} moved successfully.
C:\Users\henry\AppData\Local\{CC4FEE6F-23CE-49CC-ADD7-F43E0BB2BB98} moved successfully.
C:\Users\henry\AppData\Local\{592353AE-6B83-42B1-983D-3A2AEC7D0E31} moved successfully.
C:\Users\henry\AppData\Local\{E5184E93-3C52-401B-AD2D-529782A3319A} moved successfully.
C:\Users\henry\AppData\Local\{D07151E3-9A24-49B4-B54E-DEFC4B80BD91} moved successfully.
C:\Users\henry\AppData\Local\{D2761134-DD84-41A1-A59F-987C56DF0671} moved successfully.
C:\Users\henry\AppData\Local\{6AD18E66-C977-4374-AC11-01FE042A26DB} moved successfully.
C:\Users\henry\AppData\Local\{EEA7CB4C-FADF-441E-BDDD-3D8045F2D990} moved successfully.
C:\Users\henry\AppData\Local\{D4D95E07-C9A7-48C3-BDAE-8F2AE8CEEC5E} moved successfully.
C:\Users\henry\AppData\Local\{0531A247-4C01-430F-8F7C-B3A2EF02A929} moved successfully.
C:\Users\henry\AppData\Local\{D32DC6F5-5A6A-4F57-AD41-6FEAE329E0B2} moved successfully.
C:\Users\henry\AppData\Local\{021B7D4B-0322-4C2E-B20F-08C93A9D4286} moved successfully.
C:\Users\henry\AppData\Local\{E837D6EA-8546-4C0F-8FDB-40E0FFD6F93D} moved successfully.
C:\Users\henry\AppData\Local\{972A93F9-15B0-435F-8F5F-27A8001A5F1B} moved successfully.
C:\Users\henry\AppData\Local\{EA67E4DA-554C-4F9E-B874-555FE863880F} moved successfully.
C:\Users\henry\AppData\Local\{73723E2A-CC41-4467-B3E4-121DFE212E2A} moved successfully.
C:\Users\henry\AppData\Local\{E0A95C72-D48E-489F-8200-45F98867E859} moved successfully.
C:\Users\henry\AppData\Local\{A4B30153-5D72-467E-A327-139E0F597969} moved successfully.
C:\Users\henry\AppData\Local\{ACB091C6-86F9-441E-AAC7-0C7606B4A10F} moved successfully.
C:\Users\henry\AppData\Local\{A66040E4-FF10-40BE-9CAE-9EE5627EE739} moved successfully.
C:\Users\henry\AppData\Local\{FB7A5117-7308-4765-9C6F-6ED46CDC858C} moved successfully.
C:\Users\henry\AppData\Local\{6195FBEC-2090-4E5C-ABE7-5B5522FB2FF7} moved successfully.
C:\Users\henry\AppData\Local\{261D44BC-CA6B-45C5-9281-A9C1277D2752} moved successfully.
C:\Users\henry\AppData\Local\{EF2A7DBE-6431-478E-97A9-D8C97384DE80} moved successfully.
C:\Users\henry\AppData\Local\{BEBA7A96-47E7-4FEE-8205-FB692FB2F511} moved successfully.
C:\Users\henry\AppData\Local\{0309A09C-6D14-4691-A686-22C03AB3EFDA} moved successfully.
C:\Users\henry\AppData\Local\{C26BE47B-90FF-430C-A1DA-13FF9AC167E3} moved successfully.
C:\Users\henry\AppData\Local\{D80104C8-8361-4FA8-8FC3-41F2A7FC6877} moved successfully.
C:\Users\henry\AppData\Local\{8D0FEB72-BB7E-46A6-B9B3-7FB56D4B6E52} moved successfully.
C:\Users\henry\AppData\Local\{83A49127-45FE-4108-8EE8-DE41CB3EB8BB} moved successfully.
C:\Users\henry\AppData\Local\{A46937CE-5DE6-404F-B847-91FA41A3B7A5} moved successfully.
C:\Users\henry\AppData\Local\{28F7D0F7-B6DF-4F27-82BC-BBE51E714DEB} moved successfully.
C:\Users\henry\AppData\Local\{89AFB00C-7BF1-45C1-BB43-52D0E2E4FE2A} moved successfully.
C:\Users\henry\AppData\Local\{78362BF3-B60B-41A6-8CA1-D224649E39C3} moved successfully.
C:\Users\henry\AppData\Local\{0687E56E-8DD3-4A4F-AD99-CB6CEC59616F} moved successfully.
C:\Users\henry\AppData\Local\{1E27CF8E-1F34-4CB5-98A9-E4EC9B4924AA} moved successfully.
C:\Users\henry\AppData\Local\{A5975671-0DA4-4AD9-B057-F1AE6BD517E3} moved successfully.
C:\Users\henry\AppData\Local\{F0516731-D776-4D15-AE35-8EB612714B0B} moved successfully.
C:\Users\henry\AppData\Local\{80E442E0-A8B1-4289-BD30-E443532E2EF3} moved successfully.
C:\Users\henry\AppData\Local\{65E26C71-8A8C-4616-96FC-EDED6C804B74} moved successfully.
C:\Users\henry\AppData\Local\{2AFCA2BB-508F-48C6-BBD5-D8719496CF38} moved successfully.
C:\Users\henry\AppData\Local\{A908EBE2-E170-4317-A9E1-11C730164280} moved successfully.
C:\Users\henry\AppData\Local\{F9BD8595-D5A1-4276-AD21-D4B58CC48B86} moved successfully.
C:\Users\henry\AppData\Local\{634C9105-DE8A-4CF0-9C3B-CDA99D39F910} moved successfully.
C:\Users\henry\AppData\Local\{93B0058A-EBF0-418A-8472-9D282B775015} moved successfully.
C:\Users\henry\AppData\Local\{ACB4D370-51F7-4579-BDA0-03A1A4158190} moved successfully.
C:\Users\henry\AppData\Local\{87FB357F-7D2E-403D-AB30-4160C1A6A01C} moved successfully.
C:\Users\henry\AppData\Local\{BC97A04C-C788-4767-9E7B-E5B1486B00FD} moved successfully.
C:\Users\henry\AppData\Local\{FDCBFBD4-691F-4D21-B00D-418BE23B8068} moved successfully.
C:\Users\henry\AppData\Local\{F0F9D0B6-32A7-478F-961C-1B75C4C9D10C} moved successfully.
C:\Users\henry\AppData\Local\{1B925365-AF60-41A4-A789-5FD7A0B13AD0} moved successfully.
C:\Users\henry\AppData\Local\{36ABFCC2-24EC-4EE8-98CD-10CEF19B752E} moved successfully.
C:\Users\henry\AppData\Local\{52051B56-160B-4DB2-B4EE-90C9D2B462C8} moved successfully.
C:\Users\henry\AppData\Local\{5E8E688F-D1A5-444F-A5D8-1178702833BD} moved successfully.
C:\Users\henry\AppData\Local\{99674EA8-28F7-43B6-AF1A-23BDA1E3CB5D} moved successfully.
C:\Users\henry\AppData\Local\{2243523E-8705-48C8-AF8D-711C76B8E8B6} moved successfully.
C:\Users\henry\AppData\Local\{0EAADB92-3AEF-4D8C-9BC1-23840313CC91} moved successfully.
C:\Users\henry\AppData\Local\{7AFAE1B3-901C-4F53-AF70-76E7D17CA413} moved successfully.
C:\Users\henry\AppData\Local\{2302C642-02F2-4DF8-A362-E536C0169523} moved successfully.
C:\Users\henry\AppData\Local\{90004412-5311-41F4-AA77-0634FBB2E758} moved successfully.
C:\Users\henry\AppData\Local\{9A5A71CB-6E24-45A1-9060-3FF012646EDE} moved successfully.
C:\Users\henry\AppData\Local\{E71B4579-CBEA-401A-91BE-7DC9A06409E9} moved successfully.
C:\Users\henry\AppData\Local\{7ADDF6C5-92D2-4DFF-9DA0-ACCA4F58F970} moved successfully.
C:\Users\henry\AppData\Local\{21CC2EFB-27EC-4FEE-855E-9AD018FB3F12} moved successfully.
C:\Users\henry\AppData\Local\{498730F2-1951-4599-8A4B-A9E90127C0FA} moved successfully.
C:\Users\henry\AppData\Local\{45B971F1-EBA1-42CC-9305-666786252700} moved successfully.
C:\Users\henry\AppData\Local\{F1DE812B-4D7D-499B-860E-15A3F23849F4} moved successfully.
C:\Users\henry\AppData\Local\{455CB302-A28F-435A-AEA7-028629AD4080} moved successfully.
==== End of Fixlog ====
Ran by SYSTEM at 2012-04-03 13:04:23 R:2
Running from F:\
==============================================
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost\\netsvcs tgsrvc_smartagent Deleted successfully.
========= reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.exe /f =========
The operation completed successfully.
========= End of Reg: =========
========= reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.exe\OpenWithList /f =========
The operation completed successfully.
========= End of Reg: =========
========= reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.exe\OpenWithProgids /v exefile /t REG_NONE /d 0x0 /f =========
The operation completed successfully.
========= End of Reg: =========
C:\Users\henry\AppData\Local\{C025742C-FE8A-4939-ABA2-0E018F6821A5} moved successfully.
C:\Users\henry\AppData\Local\{3B6DB259-A9FA-4CA7-B29B-6F1EFC819C94} moved successfully.
C:\Users\henry\AppData\Local\{FEF4CBE1-6973-4D71-88F9-C7A656EFE5AC} moved successfully.
C:\Users\henry\AppData\Local\{19DA093A-3CF8-4AF1-8400-A4C1CA4004EF} moved successfully.
C:\Users\henry\AppData\Local\{374C5AC8-F957-4B0D-B00E-8E137F1EF1AB} moved successfully.
C:\Users\henry\AppData\Local\{F959C390-FD7C-40A7-B7CE-2B716273A019} moved successfully.
C:\Users\henry\AppData\Local\{70925E63-9DEF-493B-B2E0-9CF56444FCC7} moved successfully.
C:\Users\henry\AppData\Local\{B309C81B-53D5-4529-96ED-A183AAB850CD} moved successfully.
C:\Users\henry\AppData\Local\{543EEA10-5C4B-4C53-8B5B-EAC4B1204E49} moved successfully.
C:\Users\henry\AppData\Local\{B4A96DEB-DEBB-4EDB-B3F8-5184EA92748F} moved successfully.
C:\Users\henry\AppData\Local\{52A8B52C-7ECA-41B5-9A82-F4669CA78101} moved successfully.
C:\Users\henry\AppData\Local\{30E2248F-152C-41C3-9C50-FAE8418B43CE} moved successfully.
C:\Users\henry\AppData\Local\{BD0BEE27-6E90-4170-89CF-E3F066B3195C} moved successfully.
C:\Users\henry\AppData\Local\{762ED396-E7EE-4042-8774-37E282E6FFE6} moved successfully.
C:\Users\henry\AppData\Local\{4AFF59CA-A3C8-4AE3-A574-CE16EBEF1880} moved successfully.
C:\Users\henry\AppData\Local\{B7E9FCFF-7243-4E10-9AE1-0C2E8251B1E4} moved successfully.
C:\Users\henry\AppData\Local\{55F57402-A538-493D-8663-7992040F8AFC} moved successfully.
C:\Users\henry\AppData\Local\{E4BE028C-A095-46B9-B4BA-D48BEA97DD8D} moved successfully.
C:\Users\henry\AppData\Local\{96E20A9F-8A76-4500-B5F8-8ECC06E4084C} moved successfully.
C:\Users\henry\AppData\Local\{B9CF85E9-91D6-476B-B75D-1A6293554775} moved successfully.
C:\Users\henry\AppData\Local\{EA1916BE-FF27-40F9-9CE0-33A47746818C} moved successfully.
C:\Users\henry\AppData\Local\{937E6033-B994-46DF-9C78-520A5F0CFE28} moved successfully.
C:\Users\henry\AppData\Local\{E58D3ACD-CCFD-48BC-A9D1-42D295E23CB0} moved successfully.
C:\Users\henry\AppData\Local\{7E293F7F-6AD9-40F8-BBFD-80C091D49DA7} moved successfully.
C:\Users\henry\AppData\Local\{CDCFCD60-F9F4-40F4-A466-EBED2757AABC} moved successfully.
C:\Users\henry\AppData\Local\{B868F692-7A42-40A6-B8F0-29F0D0649688} moved successfully.
C:\Users\henry\AppData\Local\{9AFEA366-0149-43CB-ABB9-15929029E251} moved successfully.
C:\Users\henry\AppData\Local\{19D43604-FB12-4DBF-A165-DEBC1C30D647} moved successfully.
C:\Users\henry\AppData\Local\{615FFADE-7433-477A-BC6F-A18E8B40396C} moved successfully.
C:\Users\henry\AppData\Local\{5F4D5251-636A-4D00-AEBD-037BC00150EA} moved successfully.
C:\Users\henry\AppData\Local\{F2863DA3-3B36-4396-8F8C-DCCADB8F5702} moved successfully.
C:\Users\henry\AppData\Local\{BE63C8E8-01F7-4C9B-A072-C1F2A8B3554B} moved successfully.
C:\Users\henry\AppData\Local\{A24E1888-7B91-47AA-86CE-4FE264919155} moved successfully.
C:\Users\henry\AppData\Local\{515AF329-D58A-433E-95F5-6DCAB8B31B73} moved successfully.
C:\Users\henry\AppData\Local\{A6C61CAA-E846-49AA-84C3-43478DB370C5} moved successfully.
C:\Users\henry\AppData\Local\{42F826B1-7F03-4915-B6B4-C25614E3493D} moved successfully.
C:\Users\henry\AppData\Local\{FED365D3-EB1E-4B37-AA89-AA1D4B819569} moved successfully.
C:\Users\henry\AppData\Local\{F0F3A29E-FE1D-46F2-B9AB-725B13287884} moved successfully.
C:\Users\henry\AppData\Local\{8C1F5A68-BCC1-46E8-AE11-1894C4D3D6FF} moved successfully.
C:\Users\henry\AppData\Local\{34362D3D-4C32-4A39-AA1C-4E9943083BE1} moved successfully.
C:\Users\henry\AppData\Local\{D69BCD4A-AA4D-4FBB-8D50-0ACD2932E618} moved successfully.
C:\Users\henry\AppData\Local\{559D1BE0-F725-4E5F-B1DE-9E298F400323} moved successfully.
C:\Users\henry\AppData\Local\{D574F574-AFC3-478E-A710-C6F839DEBED2} moved successfully.
C:\Users\henry\AppData\Local\{B3F5A0E9-370D-42E3-9FEA-AC30CEABB316} moved successfully.
C:\Users\henry\AppData\Local\{9E610E66-9D4F-4D6C-8EFE-914AAD720CC4} moved successfully.
C:\Users\henry\AppData\Local\{279EF88E-A970-41D5-83F8-E90FB4224446} moved successfully.
C:\Users\henry\AppData\Local\{208709C4-C72E-4BEB-BA58-B5785A45FED3} moved successfully.
C:\Users\henry\AppData\Local\{D9BD6237-26A6-4008-B388-97E32E5EC499} moved successfully.
C:\Users\henry\AppData\Local\{7A23DFE7-94F3-4366-93BE-06639FE0BC0E} moved successfully.
C:\Users\henry\AppData\Local\{C025742C-FE8A-4939-ABA2-0E018F6821A5} not found.
C:\Users\henry\AppData\Local\{3B6DB259-A9FA-4CA7-B29B-6F1EFC819C94} not found.
C:\Users\henry\AppData\Local\{FEF4CBE1-6973-4D71-88F9-C7A656EFE5AC} not found.
C:\Users\henry\AppData\Local\{374C5AC8-F957-4B0D-B00E-8E137F1EF1AB} not found.
C:\Users\henry\AppData\Local\{19DA093A-3CF8-4AF1-8400-A4C1CA4004EF} not found.
C:\Users\henry\AppData\Local\{F959C390-FD7C-40A7-B7CE-2B716273A019} not found.
C:\Users\henry\AppData\Local\{70925E63-9DEF-493B-B2E0-9CF56444FCC7} not found.
C:\Users\henry\AppData\Local\{B309C81B-53D5-4529-96ED-A183AAB850CD} not found.
C:\Users\henry\AppData\Local\{543EEA10-5C4B-4C53-8B5B-EAC4B1204E49} not found.
C:\Users\henry\AppData\Local\{B4A96DEB-DEBB-4EDB-B3F8-5184EA92748F} not found.
C:\Users\henry\AppData\Local\{52A8B52C-7ECA-41B5-9A82-F4669CA78101} not found.
C:\Users\henry\AppData\Local\{30E2248F-152C-41C3-9C50-FAE8418B43CE} not found.
C:\Users\henry\AppData\Local\{BD0BEE27-6E90-4170-89CF-E3F066B3195C} not found.
C:\Users\henry\AppData\Local\{762ED396-E7EE-4042-8774-37E282E6FFE6} not found.
C:\Users\henry\AppData\Local\{4AFF59CA-A3C8-4AE3-A574-CE16EBEF1880} not found.
C:\Users\henry\AppData\Local\{B7E9FCFF-7243-4E10-9AE1-0C2E8251B1E4} not found.
C:\Users\henry\AppData\Local\{55F57402-A538-493D-8663-7992040F8AFC} not found.
C:\Users\henry\AppData\Local\{E4BE028C-A095-46B9-B4BA-D48BEA97DD8D} not found.
C:\Users\henry\AppData\Local\{96E20A9F-8A76-4500-B5F8-8ECC06E4084C} not found.
C:\Users\henry\AppData\Local\{B9CF85E9-91D6-476B-B75D-1A6293554775} not found.
C:\Users\henry\AppData\Local\{EA1916BE-FF27-40F9-9CE0-33A47746818C} not found.
C:\Users\henry\AppData\Local\{937E6033-B994-46DF-9C78-520A5F0CFE28} not found.
C:\Users\henry\AppData\Local\{E58D3ACD-CCFD-48BC-A9D1-42D295E23CB0} not found.
C:\Users\henry\AppData\Local\{7E293F7F-6AD9-40F8-BBFD-80C091D49DA7} not found.
C:\Users\henry\AppData\Local\{CDCFCD60-F9F4-40F4-A466-EBED2757AABC} not found.
C:\Users\henry\AppData\Local\{B868F692-7A42-40A6-B8F0-29F0D0649688} not found.
C:\Users\henry\AppData\Local\{9AFEA366-0149-43CB-ABB9-15929029E251} not found.
C:\Users\henry\AppData\Local\{19D43604-FB12-4DBF-A165-DEBC1C30D647} not found.
C:\Users\henry\AppData\Local\{615FFADE-7433-477A-BC6F-A18E8B40396C} not found.
C:\Users\henry\AppData\Local\{5F4D5251-636A-4D00-AEBD-037BC00150EA} not found.
C:\Users\henry\AppData\Local\{F2863DA3-3B36-4396-8F8C-DCCADB8F5702} not found.
C:\Users\henry\AppData\Local\{BE63C8E8-01F7-4C9B-A072-C1F2A8B3554B} not found.
C:\Users\henry\AppData\Local\{A24E1888-7B91-47AA-86CE-4FE264919155} not found.
C:\Users\henry\AppData\Local\{515AF329-D58A-433E-95F5-6DCAB8B31B73} not found.
C:\Users\henry\AppData\Local\{A6C61CAA-E846-49AA-84C3-43478DB370C5} not found.
C:\Users\henry\AppData\Local\{42F826B1-7F03-4915-B6B4-C25614E3493D} not found.
C:\Users\henry\AppData\Local\{FED365D3-EB1E-4B37-AA89-AA1D4B819569} not found.
C:\Users\henry\AppData\Local\{F0F3A29E-FE1D-46F2-B9AB-725B13287884} not found.
C:\Users\henry\AppData\Local\{8C1F5A68-BCC1-46E8-AE11-1894C4D3D6FF} not found.
C:\Users\henry\AppData\Local\{34362D3D-4C32-4A39-AA1C-4E9943083BE1} not found.
C:\Users\henry\AppData\Local\{D69BCD4A-AA4D-4FBB-8D50-0ACD2932E618} not found.
C:\Users\henry\AppData\Local\{559D1BE0-F725-4E5F-B1DE-9E298F400323} not found.
C:\Users\henry\AppData\Local\{D574F574-AFC3-478E-A710-C6F839DEBED2} not found.
C:\Users\henry\AppData\Local\{B3F5A0E9-370D-42E3-9FEA-AC30CEABB316} not found.
C:\Users\henry\AppData\Local\{9E610E66-9D4F-4D6C-8EFE-914AAD720CC4} not found.
C:\Users\henry\AppData\Local\{208709C4-C72E-4BEB-BA58-B5785A45FED3} not found.
C:\Users\henry\AppData\Local\{279EF88E-A970-41D5-83F8-E90FB4224446} not found.
C:\Users\henry\AppData\Local\{D9BD6237-26A6-4008-B388-97E32E5EC499} not found.
C:\Users\henry\AppData\Local\{7A23DFE7-94F3-4366-93BE-06639FE0BC0E} not found.
C:\Users\henry\AppData\Local\{1EAE8B1C-2D2F-4A20-901D-52941288D79F} moved successfully.
C:\Users\henry\AppData\Local\{E0A374B8-E62B-4E96-9619-668FD747EF8B} moved successfully.
C:\Users\henry\AppData\Local\{6BD7D511-D165-4556-9A2D-1C8464AF522B} moved successfully.
C:\Users\henry\AppData\Local\{0BDBF274-E424-4B49-9BE9-1A33D0664CEE} moved successfully.
C:\Users\henry\AppData\Local\{7FB0131B-2005-4306-A7DD-5E7C1B867740} moved successfully.
C:\Users\henry\AppData\Local\{452F73C8-29E7-4DC6-9CBF-D199319320F7} moved successfully.
C:\Users\henry\AppData\Local\{CF969DD0-9DA3-4211-BE25-902B110EC4AC} moved successfully.
C:\Users\henry\AppData\Local\{4AF96651-0D67-4F30-91D7-80A71A9D8515} moved successfully.
C:\Users\henry\AppData\Local\{4F01EDF1-A143-431A-A552-119588908A9C} moved successfully.
C:\Users\henry\AppData\Local\{44DB2657-02F4-4316-A3E1-041A5B45BA47} moved successfully.
C:\Users\henry\AppData\Local\{D446D861-C8A4-43FE-8F4B-8F2E03BCFD88} moved successfully.
C:\Users\henry\AppData\Local\{FAEFD702-7BF5-4B5B-A656-73BD22BCB029} moved successfully.
C:\Users\henry\AppData\Local\{949A6181-D1FA-47A8-B981-A2B2DBBDE03D} moved successfully.
C:\Users\henry\AppData\Local\{605549EE-0AE0-471C-9439-0CB2CB1A31BB} moved successfully.
C:\Users\henry\AppData\Local\{ED7980F5-8CA5-4C67-AC84-7D4D62BB91F7} moved successfully.
C:\Users\henry\AppData\Local\{240EA13A-4AE5-46BF-9B7F-4CFF6400C4C5} moved successfully.
C:\Users\henry\AppData\Local\{F00C992D-8F23-4B6B-975B-7080B553DA10} moved successfully.
C:\Users\henry\AppData\Local\{BADAEC31-FD3B-4A81-96DB-C396DC54AFF0} moved successfully.
C:\Users\henry\AppData\Local\{1D938DD8-6A4A-42EA-959B-D827B07BC98C} moved successfully.
C:\Users\henry\AppData\Local\{1CCE0747-47F1-454F-8F70-95D8BE268A61} moved successfully.
C:\Users\henry\AppData\Local\{764E1182-96E9-4D8F-9845-4A5D163FF63A} moved successfully.
C:\Users\henry\AppData\Local\{78D5BB10-EBCC-4A7D-9189-DF2467E84842} moved successfully.
C:\Users\henry\AppData\Local\{B58B0078-39FA-4EFE-AD9B-0D8842299B56} moved successfully.
C:\Users\henry\AppData\Local\{92A89C9B-94E3-4970-A1AB-00DB7B3F4136} moved successfully.
C:\Users\henry\AppData\Local\{FF59D539-C61A-4F72-A5D7-9BC87890A14F} moved successfully.
C:\Users\henry\AppData\Local\{A67476DE-C13B-48D1-97C6-D9AAB097DFDF} moved successfully.
C:\Users\henry\AppData\Local\{F27F9EC9-8C69-4F86-9D75-C07D6B6B6D92} moved successfully.
C:\Users\henry\AppData\Local\{3B1E5A94-51BB-4FD7-826E-899795BBAC89} moved successfully.
C:\Users\henry\AppData\Local\{8887F20D-F8C5-449D-95CA-98AE662DAEE7} moved successfully.
C:\Users\henry\AppData\Local\{6B476DA4-0B60-4FB3-B87F-BCD135666C69} moved successfully.
C:\Users\henry\AppData\Local\{C90B6CFD-6E34-487D-8337-F9283D246839} moved successfully.
C:\Users\henry\AppData\Local\{23D96AAC-5C62-4358-B238-4571FF4512AF} moved successfully.
C:\Users\henry\AppData\Local\{FCF785AA-CA6F-4689-AFD2-7880B790BF51} moved successfully.
C:\Users\henry\AppData\Local\{A8BA8ECF-A59E-4741-BDF0-77D4195B56C0} moved successfully.
C:\Users\henry\AppData\Local\{C7E768EF-F08A-4E76-8A52-50E5E0FD3F3A} moved successfully.
C:\Users\henry\AppData\Local\{84CB3007-071B-4765-B79A-6C60C02B9ADB} moved successfully.
C:\Users\henry\AppData\Local\{307F2228-690E-4872-893C-9A799FCA6720} moved successfully.
C:\Users\henry\AppData\Local\{7978DE6F-51C2-4B22-89DC-B282BF9A7AF9} moved successfully.
C:\Users\henry\AppData\Local\{EFBBE3F7-4F59-4A1D-AAAA-88539FB3A620} moved successfully.
C:\Users\henry\AppData\Local\{1B9C6715-98CE-4748-A191-B93B69F24E86} moved successfully.
C:\Users\henry\AppData\Local\{FE4667A8-CD5C-4516-85D3-B9DE9B9F3F3B} moved successfully.
C:\Users\henry\AppData\Local\{956E4263-64EB-4D94-B4A0-0331997691CB} moved successfully.
C:\Users\henry\AppData\Local\{F6F80A24-4C04-41F1-932C-6E57BE86D5E0} moved successfully.
C:\Users\henry\AppData\Local\{CDCD482C-9E34-4377-A263-214EC9DF2171} moved successfully.
C:\Users\henry\AppData\Local\{F96ACB2C-5447-470D-85D4-BCCC3AA574E1} moved successfully.
C:\Users\henry\AppData\Local\{D4244FE5-9073-4896-B168-121E3715E42C} moved successfully.
C:\Users\henry\AppData\Local\{AFD8B044-B5CC-4B8C-8D71-31CD291F8C6C} moved successfully.
C:\Users\henry\AppData\Local\{D86933D8-27B5-4FB4-BD19-7131738D3A17} moved successfully.
C:\Users\henry\AppData\Local\{D429B9FF-DD7F-4462-AB8D-337E726F7D77} moved successfully.
C:\Users\henry\AppData\Local\{5B2511EE-7035-40E4-A92A-AC03E6F6FFB7} moved successfully.
C:\Users\henry\AppData\Local\{FCB51EFC-F66C-4B78-945B-1E1D035D46F8} moved successfully.
C:\Users\henry\AppData\Local\{6A3AEA4A-4B1D-4E59-8153-049EDCC2D16F} moved successfully.
C:\Users\henry\AppData\Local\{C5BADF91-2511-4CAC-AB6C-4D3FAC1F6138} moved successfully.
C:\Users\henry\AppData\Local\{90510189-B773-4718-A4CA-22F204BB142A} moved successfully.
C:\Users\henry\AppData\Local\{00B1E53F-947D-4335-B72B-5F9DFD1E805E} moved successfully.
C:\Users\henry\AppData\Local\{6FCDD234-CB51-4A38-923A-17C99FE76D40} moved successfully.
C:\Users\henry\AppData\Local\{73F970D8-451B-4E85-924F-337B1497492E} moved successfully.
C:\Users\henry\AppData\Local\{82472FAA-3036-4B5A-AEB8-CAD33BE75143} moved successfully.
C:\Users\henry\AppData\Local\{A4FC1966-4216-4739-9E98-38A53F0A455D} moved successfully.
C:\Users\henry\AppData\Local\{F45171E0-2CD6-4B73-A2D7-5D60E8429C00} moved successfully.
C:\Users\henry\AppData\Local\{06D3EC2F-0774-4456-B8C6-9BFC6E213463} moved successfully.
C:\Users\henry\AppData\Local\{E0536CF3-6F3D-425A-87D0-922411A4A8BF} moved successfully.
C:\Users\henry\AppData\Local\{D1CE17AC-B2DD-4892-B6A6-6FC8E8228F33} moved successfully.
C:\Users\henry\AppData\Local\{8FEF66E6-73D0-466D-A37B-DC5A0BF7D8E2} moved successfully.
C:\Users\henry\AppData\Local\{1930590C-E6F5-47A8-B289-1D2E391E5F5A} moved successfully.
C:\Users\henry\AppData\Local\{E7728E4B-E2CB-4874-B7AF-F874D5349D5A} moved successfully.
C:\Users\henry\AppData\Local\{4C89C6D7-CCBA-4780-8ED4-924F4AA9C961} moved successfully.
C:\Users\henry\AppData\Local\{EEF13889-45EB-4E8C-B59E-176C3678D72A} moved successfully.
C:\Users\henry\AppData\Local\{90D0F317-E7E1-4143-9682-D3F106678733} moved successfully.
C:\Users\henry\AppData\Local\{88226A5E-950A-4CD4-ADC2-6BCEF5C6C8A3} moved successfully.
C:\Users\henry\AppData\Local\{21E9B387-6B87-458F-B3DE-30D6B295DCA7} moved successfully.
C:\Users\henry\AppData\Local\{C9B09461-90A4-4928-B96C-B565EDBC5434} moved successfully.
C:\Users\henry\AppData\Local\{6914B2E4-9F10-4092-BCB9-C2FB2EA918D2} moved successfully.
C:\Users\henry\AppData\Local\{8BFE6BF3-E4E4-4764-8578-70BBE97D06BA} moved successfully.
C:\Users\henry\AppData\Local\{22D2353D-54D4-4A96-9086-1C9DE25D0FA1} moved successfully.
C:\Users\henry\AppData\Local\{FDC07DAE-4E79-4294-86FF-F8F6C0862D6A} moved successfully.
C:\Users\henry\AppData\Local\{8D967ED0-44E8-4F6D-B165-9F39F950F741} moved successfully.
C:\Users\henry\AppData\Local\{53C95817-6508-40C6-A55B-9E69A9AADD84} moved successfully.
C:\Users\henry\AppData\Local\{C1BE8BB6-2AC0-4F38-A730-69D71A0D5BAD} moved successfully.
C:\Users\henry\AppData\Local\{8231ED5A-AD37-4B2C-ADDD-5A83EB6ED23F} moved successfully.
C:\Users\henry\AppData\Local\{2EFDD19F-BEE3-4B7E-84BC-356B8022A2AF} moved successfully.
C:\Users\henry\AppData\Local\{51D2CD95-4114-4742-A059-4992B74023E5} moved successfully.
C:\Users\henry\AppData\Local\{A0234533-CE64-4E6E-825A-76CD021CAC31} moved successfully.
C:\Users\henry\AppData\Local\{821CE428-5D6A-43F6-9780-87C73DAE5A3D} moved successfully.
C:\Users\henry\AppData\Local\{3F4F18AA-1DC8-4101-944B-F399B6BBABA3} moved successfully.
C:\Users\henry\AppData\Local\{10403399-7398-4B24-915B-067625B7CE63} moved successfully.
C:\Users\henry\AppData\Local\{0167071C-DF9C-47E4-8A1C-FC4A7D569F09} moved successfully.
C:\Users\henry\AppData\Local\{D467A05C-B7AE-4AA3-8A21-E95F79BA41B6} moved successfully.
C:\Users\henry\AppData\Local\{D35A9E7A-45C7-4BF5-90B2-472AB3A6AE73} moved successfully.
C:\Users\henry\AppData\Local\{12C94DF2-F468-4F1A-890A-B10448CCA927} moved successfully.
C:\Users\henry\AppData\Local\{EE0527D1-8A1D-40BE-9CAD-C8A0C0155A03} moved successfully.
C:\Users\henry\AppData\Local\{BD3E4962-FA5D-4534-88FD-8C36A0659C97} moved successfully.
C:\Users\henry\AppData\Local\{6577B562-DDDD-4042-B89A-162637D3C29D} moved successfully.
C:\Users\henry\AppData\Local\{446AF6A5-92B9-42D8-B71F-DD0D7F1E05FB} moved successfully.
C:\Users\henry\AppData\Local\{9854EF1D-36F8-4BAE-A03A-9BCFBA49E2B4} moved successfully.
C:\Users\henry\AppData\Local\{CE98DAF8-DA18-4C25-AFD8-1589A0F21CF4} moved successfully.
C:\Users\henry\AppData\Local\{E24CF0ED-123A-4258-82F2-0E5226B8F162} moved successfully.
C:\Users\henry\AppData\Local\{7E541046-E135-483E-8465-93F5EA04A672} moved successfully.
C:\Users\henry\AppData\Local\{451AA597-0315-4003-9E5B-083B5E744610} moved successfully.
C:\Users\henry\AppData\Local\{0A6F146E-8947-46BF-8393-B13F322406F4} moved successfully.
C:\Users\henry\AppData\Local\{D38B6B30-D334-48D7-9EA4-1A23E1DB49FF} moved successfully.
C:\Users\henry\AppData\Local\{527962A1-2B8E-4B6E-B08E-888B49AD59F9} moved successfully.
C:\Users\henry\AppData\Local\{77F148F5-40D5-4A2A-8FEB-A710EE9ABD95} moved successfully.
C:\Users\henry\AppData\Local\{A0A1117D-475B-4940-8032-296BCEF35595} moved successfully.
C:\Users\henry\AppData\Local\{CC4FEE6F-23CE-49CC-ADD7-F43E0BB2BB98} moved successfully.
C:\Users\henry\AppData\Local\{592353AE-6B83-42B1-983D-3A2AEC7D0E31} moved successfully.
C:\Users\henry\AppData\Local\{E5184E93-3C52-401B-AD2D-529782A3319A} moved successfully.
C:\Users\henry\AppData\Local\{D07151E3-9A24-49B4-B54E-DEFC4B80BD91} moved successfully.
C:\Users\henry\AppData\Local\{D2761134-DD84-41A1-A59F-987C56DF0671} moved successfully.
C:\Users\henry\AppData\Local\{6AD18E66-C977-4374-AC11-01FE042A26DB} moved successfully.
C:\Users\henry\AppData\Local\{EEA7CB4C-FADF-441E-BDDD-3D8045F2D990} moved successfully.
C:\Users\henry\AppData\Local\{D4D95E07-C9A7-48C3-BDAE-8F2AE8CEEC5E} moved successfully.
C:\Users\henry\AppData\Local\{0531A247-4C01-430F-8F7C-B3A2EF02A929} moved successfully.
C:\Users\henry\AppData\Local\{D32DC6F5-5A6A-4F57-AD41-6FEAE329E0B2} moved successfully.
C:\Users\henry\AppData\Local\{021B7D4B-0322-4C2E-B20F-08C93A9D4286} moved successfully.
C:\Users\henry\AppData\Local\{E837D6EA-8546-4C0F-8FDB-40E0FFD6F93D} moved successfully.
C:\Users\henry\AppData\Local\{972A93F9-15B0-435F-8F5F-27A8001A5F1B} moved successfully.
C:\Users\henry\AppData\Local\{EA67E4DA-554C-4F9E-B874-555FE863880F} moved successfully.
C:\Users\henry\AppData\Local\{73723E2A-CC41-4467-B3E4-121DFE212E2A} moved successfully.
C:\Users\henry\AppData\Local\{E0A95C72-D48E-489F-8200-45F98867E859} moved successfully.
C:\Users\henry\AppData\Local\{A4B30153-5D72-467E-A327-139E0F597969} moved successfully.
C:\Users\henry\AppData\Local\{ACB091C6-86F9-441E-AAC7-0C7606B4A10F} moved successfully.
C:\Users\henry\AppData\Local\{A66040E4-FF10-40BE-9CAE-9EE5627EE739} moved successfully.
C:\Users\henry\AppData\Local\{FB7A5117-7308-4765-9C6F-6ED46CDC858C} moved successfully.
C:\Users\henry\AppData\Local\{6195FBEC-2090-4E5C-ABE7-5B5522FB2FF7} moved successfully.
C:\Users\henry\AppData\Local\{261D44BC-CA6B-45C5-9281-A9C1277D2752} moved successfully.
C:\Users\henry\AppData\Local\{EF2A7DBE-6431-478E-97A9-D8C97384DE80} moved successfully.
C:\Users\henry\AppData\Local\{BEBA7A96-47E7-4FEE-8205-FB692FB2F511} moved successfully.
C:\Users\henry\AppData\Local\{0309A09C-6D14-4691-A686-22C03AB3EFDA} moved successfully.
C:\Users\henry\AppData\Local\{C26BE47B-90FF-430C-A1DA-13FF9AC167E3} moved successfully.
C:\Users\henry\AppData\Local\{D80104C8-8361-4FA8-8FC3-41F2A7FC6877} moved successfully.
C:\Users\henry\AppData\Local\{8D0FEB72-BB7E-46A6-B9B3-7FB56D4B6E52} moved successfully.
C:\Users\henry\AppData\Local\{83A49127-45FE-4108-8EE8-DE41CB3EB8BB} moved successfully.
C:\Users\henry\AppData\Local\{A46937CE-5DE6-404F-B847-91FA41A3B7A5} moved successfully.
C:\Users\henry\AppData\Local\{28F7D0F7-B6DF-4F27-82BC-BBE51E714DEB} moved successfully.
C:\Users\henry\AppData\Local\{89AFB00C-7BF1-45C1-BB43-52D0E2E4FE2A} moved successfully.
C:\Users\henry\AppData\Local\{78362BF3-B60B-41A6-8CA1-D224649E39C3} moved successfully.
C:\Users\henry\AppData\Local\{0687E56E-8DD3-4A4F-AD99-CB6CEC59616F} moved successfully.
C:\Users\henry\AppData\Local\{1E27CF8E-1F34-4CB5-98A9-E4EC9B4924AA} moved successfully.
C:\Users\henry\AppData\Local\{A5975671-0DA4-4AD9-B057-F1AE6BD517E3} moved successfully.
C:\Users\henry\AppData\Local\{F0516731-D776-4D15-AE35-8EB612714B0B} moved successfully.
C:\Users\henry\AppData\Local\{80E442E0-A8B1-4289-BD30-E443532E2EF3} moved successfully.
C:\Users\henry\AppData\Local\{65E26C71-8A8C-4616-96FC-EDED6C804B74} moved successfully.
C:\Users\henry\AppData\Local\{2AFCA2BB-508F-48C6-BBD5-D8719496CF38} moved successfully.
C:\Users\henry\AppData\Local\{A908EBE2-E170-4317-A9E1-11C730164280} moved successfully.
C:\Users\henry\AppData\Local\{F9BD8595-D5A1-4276-AD21-D4B58CC48B86} moved successfully.
C:\Users\henry\AppData\Local\{634C9105-DE8A-4CF0-9C3B-CDA99D39F910} moved successfully.
C:\Users\henry\AppData\Local\{93B0058A-EBF0-418A-8472-9D282B775015} moved successfully.
C:\Users\henry\AppData\Local\{ACB4D370-51F7-4579-BDA0-03A1A4158190} moved successfully.
C:\Users\henry\AppData\Local\{87FB357F-7D2E-403D-AB30-4160C1A6A01C} moved successfully.
C:\Users\henry\AppData\Local\{BC97A04C-C788-4767-9E7B-E5B1486B00FD} moved successfully.
C:\Users\henry\AppData\Local\{FDCBFBD4-691F-4D21-B00D-418BE23B8068} moved successfully.
C:\Users\henry\AppData\Local\{F0F9D0B6-32A7-478F-961C-1B75C4C9D10C} moved successfully.
C:\Users\henry\AppData\Local\{1B925365-AF60-41A4-A789-5FD7A0B13AD0} moved successfully.
C:\Users\henry\AppData\Local\{36ABFCC2-24EC-4EE8-98CD-10CEF19B752E} moved successfully.
C:\Users\henry\AppData\Local\{52051B56-160B-4DB2-B4EE-90C9D2B462C8} moved successfully.
C:\Users\henry\AppData\Local\{5E8E688F-D1A5-444F-A5D8-1178702833BD} moved successfully.
C:\Users\henry\AppData\Local\{99674EA8-28F7-43B6-AF1A-23BDA1E3CB5D} moved successfully.
C:\Users\henry\AppData\Local\{2243523E-8705-48C8-AF8D-711C76B8E8B6} moved successfully.
C:\Users\henry\AppData\Local\{0EAADB92-3AEF-4D8C-9BC1-23840313CC91} moved successfully.
C:\Users\henry\AppData\Local\{7AFAE1B3-901C-4F53-AF70-76E7D17CA413} moved successfully.
C:\Users\henry\AppData\Local\{2302C642-02F2-4DF8-A362-E536C0169523} moved successfully.
C:\Users\henry\AppData\Local\{90004412-5311-41F4-AA77-0634FBB2E758} moved successfully.
C:\Users\henry\AppData\Local\{9A5A71CB-6E24-45A1-9060-3FF012646EDE} moved successfully.
C:\Users\henry\AppData\Local\{E71B4579-CBEA-401A-91BE-7DC9A06409E9} moved successfully.
C:\Users\henry\AppData\Local\{7ADDF6C5-92D2-4DFF-9DA0-ACCA4F58F970} moved successfully.
C:\Users\henry\AppData\Local\{21CC2EFB-27EC-4FEE-855E-9AD018FB3F12} moved successfully.
C:\Users\henry\AppData\Local\{498730F2-1951-4599-8A4B-A9E90127C0FA} moved successfully.
C:\Users\henry\AppData\Local\{45B971F1-EBA1-42CC-9305-666786252700} moved successfully.
C:\Users\henry\AppData\Local\{F1DE812B-4D7D-499B-860E-15A3F23849F4} moved successfully.
C:\Users\henry\AppData\Local\{455CB302-A28F-435A-AEA7-028629AD4080} moved successfully.
==== End of Fixlog ====
#72
Posted 03 April 2012 - 02:10 PM

but none of the programs were still able to be open
#73
Posted 03 April 2012 - 11:42 PM

Do you have any other user account on this system? Maybe Administrator or any other user account that we can use?
#74
Posted 04 April 2012 - 01:16 AM

I suppose I do, you mean try to run programs run as administrator because I've tried that a few times. Should I just try to reinstall windows, though I don't know how much of a hassle that would be compared to what we're doing now.
#75
Posted 04 April 2012 - 01:21 AM

That is always a option but I would like to try cleaning first. If we run out of ideas we can format your system then.
I mean can you log in as another user for example Administartor. Then we can try to run tools from that account.
I mean can you log in as another user for example Administartor. Then we can try to run tools from that account.
Similar Topics
0 user(s) are reading this topic
0 members, 0 guests, 0 anonymous users
As Featured On:






