Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

Can't remove a program properly, can't open program webpage, p


  • Please log in to reply

#1
cherrycake

cherrycake

    New Member

  • Member
  • Pip
  • 1 posts
The day before yesterday I downloaded IMVU to my laptop. I have Kaspersky security as well as ad-aware which was included with my hard drive.
Yesterday I noticed that I couldn't open any pages from the IMVU main website, ex. when I was on the chat program I clicked 'profile' link and no page came up, my internet was acting up at that time, so I figured that it was just to do with that, then later on I tried again to open the pages, profile - nothing, account - nothing, so I try the main imvu webpage - again, nothing.
I left it thinking that my internet was still acting up (with the wheather, and yesterday the internet shut off temporarily so we had to reset it) but today I tried running it just to check, and the program opens to the log in screen.. but once I log in it disappears. At first it would disappear, and then let me reopen it, and log in again - just for it to disappear again, now it wont open after it's disappeared.
I tried uninstalling it via ad/remove programmes.. it says that it's uninstalled, I can't find it when I start to type it into the start search, but when I click "show hidden icons" and select customise, imvu is still an option to include or not. Also when I uninstalled it the imvu icon that was on my taskbar, hadn't removed properly.
I have had imvu before and I know that this is not normal software behaviour... though I also know that imvu is riddled with virus' (not impressed with my security right now:/)
I tried to use system restore as my computer made a restore point a few days ago, and it says that it can not restore because I have an anti virus software.. and that I should disable it, I tried disabling Kaspersky, and then tried to use system restore again only for it to give me the same error message, I think it's misidentifying something (related to the imvu issue) as an antivirus program getting in the way - as I've had no problems using system restore until now.
I found a thread on here about imvu and whether it's a virus, someone was having problems uninstalling it, and downloading things.. which lead me to this part of the forum and to down load OTL, my issue is different to hers though.
I can't find any info about this problem online.

Please help in anyway you can, I am saving up for a brace scrimping and scraping :/ I can't afford to buy another flimsy laptop for over 500 pound again:/

Also wondering if it's safe to put my pictures, documents and recieved files onto disc - or would the virus/hack/whatever it is go onto the disc and transfer to another computer when I use the disc there? Just want to be sure

I've run a full scan by OTL and this was the result

OTL. txt :
OTL logfile created on: 26/05/2012 05:38:30 - Run 1
OTL by OldTimer - Version 3.2.43.1 Folder = C:\Users\pip\Downloads
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000809 | Country: United Kingdom | Language: ENG | Date Format: dd/MM/yyyy

2.75 Gb Total Physical Memory | 1.24 Gb Available Physical Memory | 45.32% Memory free
5.49 Gb Paging File | 3.66 Gb Available in Paging File | 66.69% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 297.99 Gb Total Space | 245.84 Gb Free Space | 82.50% Space Free | Partition Type: NTFS
Drive D: | 100.00 Mb Total Space | 70.37 Mb Free Space | 70.37% Space Free | Partition Type: NTFS

Computer Name: BELLA | User Name: pip | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2012/05/26 05:26:27 | 000,595,968 | ---- | M] (OldTimer Tools) -- C:\Users\pip\Downloads\OTL.exe
PRC - [2012/05/22 15:16:47 | 000,663,360 | ---- | M] () -- C:\Program Files (x86)\Lavasoft\Ad-Aware\AutoLaunch.exe
PRC - [2012/05/22 15:16:42 | 001,187,072 | ---- | M] (Lavasoft Limited) -- C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWTray.exe
PRC - [2012/05/22 15:16:41 | 002,152,720 | ---- | M] (Lavasoft Limited) -- C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWService.exe
PRC - [2012/04/26 16:12:29 | 000,924,600 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
PRC - [2012/04/12 03:45:14 | 000,296,056 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe
PRC - [2011/04/24 23:15:02 | 000,202,296 | ---- | M] (Kaspersky Lab ZAO) -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\avp.exe
PRC - [2011/03/28 11:21:16 | 000,249,648 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
PRC - [2010/03/11 10:32:50 | 001,541,472 | ---- | M] (Suyin) -- C:\Program Files (x86)\VideoWebCamera\VideoWebCamera.exe
PRC - [2010/03/09 00:58:24 | 000,250,368 | ---- | M] (NewTech Infosystems, Inc.) -- C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\IScheduleSvc.exe
PRC - [2010/03/09 00:56:08 | 000,258,560 | ---- | M] (NewTech Infosystems, Inc.) -- C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\BackupManagerTray.exe
PRC - [2010/03/03 14:21:16 | 001,300,560 | ---- | M] (Dritek System Inc.) -- C:\Program Files (x86)\Launch Manager\LManager.exe
PRC - [2010/03/03 14:21:16 | 000,325,200 | ---- | M] (Dritek System Inc.) -- C:\Program Files (x86)\Launch Manager\dsiwmis.exe
PRC - [2010/03/03 14:21:16 | 000,297,040 | ---- | M] (Dritek System Inc.) -- C:\Program Files (x86)\Launch Manager\LMworker.exe
PRC - [2010/01/29 00:27:36 | 000,243,232 | ---- | M] (Acer Group) -- C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe
PRC - [2010/01/08 14:21:22 | 000,023,584 | ---- | M] (Acer Incorporated) -- C:\Program Files (x86)\Packard Bell\Registration\GREGsvc.exe
PRC - [2009/12/16 15:16:06 | 000,206,208 | ---- | M] () -- C:\Windows\PLFSetI.exe
PRC - [2009/10/09 06:45:56 | 000,169,312 | ---- | M] (Adobe Systems Incorporated) -- c:\Program Files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe


========== Modules (No Company Name) ==========

MOD - [2012/05/22 15:16:47 | 000,663,360 | ---- | M] () -- C:\Program Files (x86)\Lavasoft\Ad-Aware\AutoLaunch.exe
MOD - [2012/05/06 21:42:25 | 008,797,856 | ---- | M] () -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_2_202_235.dll
MOD - [2012/04/26 16:12:29 | 001,952,696 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
MOD - [2011/04/24 23:13:30 | 007,008,656 | ---- | M] () -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\qtgui4.dll
MOD - [2011/04/24 23:13:28 | 000,192,912 | ---- | M] () -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\qtsql4.dll
MOD - [2011/04/24 23:13:26 | 001,270,160 | ---- | M] () -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\qtscript4.dll
MOD - [2011/04/24 23:13:26 | 000,758,160 | ---- | M] () -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\qtnetwork4.dll
MOD - [2011/04/24 23:13:24 | 002,118,032 | ---- | M] () -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\qtcore4.dll
MOD - [2011/04/24 23:13:24 | 002,089,360 | ---- | M] () -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\qtdeclarative4.dll
MOD - [2011/04/20 19:56:28 | 000,025,088 | ---- | M] () -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\imageformats\qgif4.dll
MOD - [2010/03/11 10:32:54 | 000,038,136 | ---- | M] () -- C:\Program Files (x86)\VideoWebCamera\VWC_ENG.dll
MOD - [2010/03/11 10:32:42 | 000,046,328 | ---- | M] () -- C:\Program Files (x86)\VideoWebCamera\sy_Utility.dll
MOD - [2010/03/11 10:32:28 | 000,632,056 | ---- | M] () -- C:\Program Files (x86)\VideoWebCamera\Image.dll
MOD - [2010/03/09 01:18:10 | 000,465,576 | ---- | M] () -- C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\sqlite3.dll
MOD - [2009/12/16 15:16:06 | 000,206,208 | ---- | M] () -- C:\Windows\PLFSetI.exe
MOD - [2009/05/20 07:02:04 | 000,072,200 | ---- | M] () -- C:\Program Files (x86)\Launch Manager\CdDirIo.dll


========== Win32 Services (SafeList) ==========

SRV:64bit: - [2010/09/22 18:10:10 | 000,057,184 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Live\Mesh\wlcrasvc.exe -- (wlcrasvc)
SRV:64bit: - [2010/03/29 01:41:36 | 000,202,752 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
SRV:64bit: - [2010/03/17 11:56:12 | 000,866,336 | ---- | M] (Acer Incorporated) [Auto | Running] -- C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe -- (ePowerSvc)
SRV:64bit: - [2010/01/29 00:27:36 | 000,243,232 | ---- | M] (Acer Group) [Auto | Running] -- C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe -- (Updater Service)
SRV:64bit: - [2009/07/14 02:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2012/05/22 15:16:41 | 002,152,720 | ---- | M] (Lavasoft Limited) [Auto | Running] -- C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWService.exe -- (Lavasoft Ad-Aware Service)
SRV - [2012/05/06 21:42:26 | 000,257,696 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012/04/26 16:12:29 | 000,129,976 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2012/03/08 23:21:07 | 000,867,080 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2012/02/29 08:50:48 | 000,158,856 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2011/04/24 23:15:02 | 000,202,296 | ---- | M] (Kaspersky Lab ZAO) [Auto | Running] -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\avp.exe -- (AVP)
SRV - [2011/04/01 11:14:30 | 000,183,560 | ---- | M] (Microsoft Corporation.) [On_Demand | Stopped] -- C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE -- (BBSvc)
SRV - [2011/03/28 11:21:16 | 000,249,648 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE -- (SeaPort)
SRV - [2010/03/18 14:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2010/03/09 00:58:24 | 000,250,368 | ---- | M] (NewTech Infosystems, Inc.) [Auto | Running] -- C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\IScheduleSvc.exe -- (NTI IScheduleSvc)
SRV - [2010/03/03 14:21:16 | 000,325,200 | ---- | M] (Dritek System Inc.) [Auto | Running] -- C:\Program Files (x86)\Launch Manager\dsiwmis.exe -- (DsiWMIService)
SRV - [2010/01/15 22:08:38 | 000,935,208 | ---- | M] (Nero AG) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe -- (Nero BackItUp Scheduler 4.0)
SRV - [2010/01/08 14:21:22 | 000,023,584 | ---- | M] (Acer Incorporated) [Auto | Running] -- C:\Program Files (x86)\Packard Bell\Registration\GREGsvc.exe -- (GREGService)
SRV - [2009/10/10 03:59:08 | 000,238,328 | ---- | M] (WildTangent, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\Packard Bell Games\Packard Bell Game Console\GameConsoleService.exe -- (GameConsoleService)
SRV - [2009/10/09 06:45:56 | 000,169,312 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- c:\Program Files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe -- (AdobeActiveFileMonitor8.0)
SRV - [2009/06/10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)


========== Driver Services (SafeList) ==========

DRV:64bit: - [2012/05/16 17:16:29 | 000,615,728 | ---- | M] (Kaspersky Lab) [File_System | System | Running] -- C:\Windows\SysNative\drivers\klif.sys -- (KLIF)
DRV:64bit: - [2012/03/08 18:40:52 | 000,048,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\fssfltr.sys -- (fssfltr)
DRV:64bit: - [2012/03/01 07:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2011/11/03 13:06:56 | 000,069,376 | ---- | M] (Lavasoft AB) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\Lbd.sys -- (Lbd)
DRV:64bit: - [2011/03/11 07:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011/03/11 07:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2011/03/10 18:36:24 | 000,029,488 | ---- | M] (Kaspersky Lab ZAO) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\klim6.sys -- (KLIM6)
DRV:64bit: - [2011/03/04 13:23:28 | 000,011,864 | ---- | M] (Kaspersky Lab ZAO) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\kl2.sys -- (kl2)
DRV:64bit: - [2011/03/04 13:23:24 | 000,460,888 | ---- | M] (Kaspersky Lab ZAO) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\kl1.sys -- (KL1)
DRV:64bit: - [2010/11/20 14:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010/11/20 12:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2010/04/07 03:04:22 | 002,216,960 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr)
DRV:64bit: - [2010/03/29 01:51:38 | 006,405,632 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atipmdag.sys -- (amdkmdag)
DRV:64bit: - [2010/03/29 00:46:28 | 000,188,928 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)
DRV:64bit: - [2010/03/20 19:59:08 | 000,321,064 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\k57nd60a.sys -- (k57nd60a) Broadcom NetLink ™
DRV:64bit: - [2010/02/08 14:57:22 | 000,239,136 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RtsUStor.sys -- (RSUSBSTOR)
DRV:64bit: - [2009/12/22 03:26:36 | 000,038,456 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\usbfilter.sys -- (usbfilter)
DRV:64bit: - [2009/12/10 12:25:10 | 000,301,104 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP)
DRV:64bit: - [2009/12/02 08:01:24 | 000,213,280 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RtHDMIVX.sys -- (RTHDMIAzAudService)
DRV:64bit: - [2009/11/02 20:27:10 | 000,022,544 | ---- | M] (Kaspersky Lab) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\klmouflt.sys -- (klmouflt)
DRV:64bit: - [2009/08/23 10:55:32 | 000,016,440 | ---- | M] (Advanced Micro Devices Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\AtiPcie.sys -- (AtiPcie) AMD PCI Express (3GIO)
DRV:64bit: - [2009/07/14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009/07/14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009/07/14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009/06/10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009/06/10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009/06/10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009/06/10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2009/05/06 00:46:08 | 000,018,432 | ---- | M] (NewTech Infosystems, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NTIDrvr.sys -- (NTIDrvr)
DRV:64bit: - [2009/05/06 00:46:08 | 000,016,896 | ---- | M] (NewTech Infosystems Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\UBHelper.sys -- (UBHelper)
DRV:64bit: - [2008/06/16 04:00:00 | 000,055,024 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\PxHlpa64.sys -- (PxHlpa64)
DRV - [2012/03/17 16:16:03 | 000,017,152 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Program Files (x86)\Lavasoft\Ad-Aware\kernexplorer64.sys -- (Lavasoft Kernexplorer)
DRV - [2009/07/14 02:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.pack...14z165f4692d309
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://homepage.pack...14z165f4692d309
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...ms}&FORM=IE8SRC
IE:64bit: - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.co...g}&sourceid=ie7
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.pack...14z165f4692d309
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://homepage.pack...14z165f4692d309
IE - HKLM\..\SearchScopes,DefaultScope = {67A2568C-7A0A-4EED-AECC-B5405DE63B64}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...ms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: "URL" = http://www.google.co...ng}&rlz=1I7ACPW
IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.co...g}&sourceid=ie7

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.pack...14z165f4692d309
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/webhp?hl=en
IE - HKCU\..\SearchScopes,DefaultScope = {67A2568C-7A0A-4EED-AECC-B5405DE63B64}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...Box&FORM=IE8SRC
IE - HKCU\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: "URL" = http://www.google.co...PW_enGB475GB475
IE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.co...g}&sourceid=ie7
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..network.proxy.type: 0
FF - user.js - File not found

FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_2_202_235.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_2_202_235.dll ()
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3555.0308: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=15.0.2.72: C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=15.0.2.72: C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpchromebrowserrecordext;version=15.0.2.72: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprphtml5videoshim;version=15.0.2.72: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=15.0.2.72: C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2012/05/26 04:54:04 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\[email protected] [2012/05/16 17:37:39 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\[email protected] [2012/05/16 17:37:39 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\[email protected] [2012/05/16 17:37:38 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 12.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012/04/26 16:12:29 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 12.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins

[2012/03/18 22:27:38 | 000,000,000 | ---D | M] (No name found) -- C:\Users\pip\AppData\Roaming\Mozilla\Extensions
[2012/05/02 02:58:22 | 000,000,000 | ---D | M] (No name found) -- C:\Users\pip\AppData\Roaming\Mozilla\Firefox\Profiles\yal8gosr.default\extensions
[2012/03/29 03:21:17 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions
[2012/03/29 03:21:18 | 000,000,000 | ---D | M] (Skype Click to Call) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2012/04/26 16:12:29 | 000,097,208 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2012/04/26 16:12:28 | 000,001,525 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazon-en-GB.xml
[2012/03/13 06:06:36 | 000,002,252 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
[2012/04/26 16:12:28 | 000,000,935 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\chambers-en-GB.xml
[2012/04/26 16:12:28 | 000,001,166 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-en-GB.xml
[2012/04/26 16:12:29 | 000,002,040 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\twitter.xml
[2012/04/26 16:12:28 | 000,001,121 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-en-GB.xml

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms}
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\19.0.1084.52\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\19.0.1084.52\pdf.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\19.0.1084.52\gcswf32.dll
CHR - plugin: Shockwave Flash (Disabled) = C:\Users\pip\AppData\Local\Google\Chrome\User Data\PepperFlash\11.2.31.144\pepflashplayer.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_2_202_235.dll
CHR - plugin: Kaspersky Anti-Virus (Enabled) = C:\Users\pip\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj\12.0.0.477_0\plugin/npUrlAdvisor.dll
CHR - plugin: Kaspersky Anti-Virus (Enabled) = C:\Users\pip\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh\12.0.0.477_0\plugin/npVKPlugin.dll
CHR - plugin: Kaspersky Anti-Virus (Enabled) = C:\Users\pip\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman\12.0.0.374_0\plugin/npABPlugin.dll
CHR - plugin: Skype Click to Call (Enabled) = C:\Users\pip\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.10.0.9560_0\npSkypeChromePlugin.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll
CHR - plugin: RealPlayer™ G2 LiveConnect-Enabled Plug-In (32-bit) (Enabled) = C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll
CHR - plugin: RealPlayer Version Plugin (Enabled) = C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpjplug.dll
CHR - plugin: RealPlayer™ HTML5VideoShim Plug-In (32-bit) (Enabled) = C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll
CHR - plugin: RealJukebox NS Plugin (Enabled) = C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprjplug.dll
CHR - plugin: Windows Live\u0099 Photo Gallery (Enabled) = C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
CHR - plugin: RealNetworks™ Chrome Background Extension Plug-In (32-bit) (Enabled) = C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll
CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll
CHR - Extension: YouTube = C:\Users\pip\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\
CHR - Extension: Google Search = C:\Users\pip\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\
CHR - Extension: Kaspersky URL Advisor = C:\Users\pip\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj\12.0.0.477_0\
CHR - Extension: Virtual Keyboard = C:\Users\pip\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh\12.0.0.477_0\
CHR - Extension: RealPlayer HTML5Video Downloader Extension = C:\Users\pip\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk\1.5_0\
CHR - Extension: Skype Click to Call = C:\Users\pip\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.10.0.9560_0\
CHR - Extension: Gmail = C:\Users\pip\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\
CHR - Extension: Anti-Banner = C:\Users\pip\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman\12.0.0.374_0\

O1 HOSTS File: ([2009/06/10 22:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:64bit: - BHO: (IEVkbdBHO Class) - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\x64\ievkbd.dll (Kaspersky Lab ZAO)
O2:64bit: - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O2:64bit: - BHO: (FilterBHO Class) - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\x64\klwtbbho.dll (Kaspersky Lab ZAO)
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
O2 - BHO: (IEVkbdBHO Class) - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\ievkbd.dll (Kaspersky Lab ZAO)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O2 - BHO: (FilterBHO Class) - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\klwtbbho.dll (Kaspersky Lab ZAO)
O3:64bit: - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3:64bit: - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O4:64bit: - HKLM..\Run: [Acer ePower Management] C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe (Acer Incorporated)
O4:64bit: - HKLM..\Run: [PLFSetI] C:\Windows\PLFSetI.exe ()
O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [AVP] C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\avp.exe (Kaspersky Lab ZAO)
O4 - HKLM..\Run: [BackupManagerTray] C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\BackupManagerTray.exe (NewTech Infosystems, Inc.)
O4 - HKLM..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe (Dritek System Inc.)
O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [TkBellExe] C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe (RealNetworks, Inc.)
O4 - HKLM..\Run: [VideoWebCamera] C:\Program Files (x86)\VideoWebCamera\VideoWebCamera.exe (Suyin)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O8:64bit: - Extra context menu item: Add to Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\ie_banner_deny.htm ()
O8 - Extra context menu item: Add to Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\ie_banner_deny.htm ()
O9:64bit: - Extra Button: &Virtual Keyboard - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\x64\ievkbd.dll (Kaspersky Lab ZAO)
O9:64bit: - Extra Button: URLs c&heck - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\x64\klwtbbho.dll (Kaspersky Lab ZAO)
O9 - Extra Button: &Virtual Keyboard - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\ievkbd.dll (Kaspersky Lab ZAO)
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra Button: URLs c&heck - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\klwtbbho.dll (Kaspersky Lab ZAO)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{3DBBBC30-11AF-4ABE-89D0-55C8431E07F3}: DhcpNameServer = 192.168.5.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{673A1C52-0326-4C09-95AC-AE319431E012}: DhcpNameServer = 192.168.1.1
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O18:64bit: - Protocol\Handler\ms-itss - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18:64bit: - Protocol\Handler\skype-ie-addon-data - No CLSID value found
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18:64bit: - Protocol\Handler\wlpg - No CLSID value found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20:64bit: - Winlogon\Notify\klogon: DllName - (%SystemRoot%\System32\klogon.dll) - C:\Windows\SysNative\klogon.dll (Kaspersky Lab ZAO)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O34 - HKLM BootExecute: (lsdelete)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

========== Files/Folders - Created Within 30 Days ==========

[2012/05/25 22:42:48 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{8921F141-A7B1-4E4B-B0B9-E7E552AF0EE6}
[2012/05/25 22:42:36 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{DFEF50DE-8364-4B9B-B395-82ABAFD69275}
[2012/05/25 10:42:20 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{EC73BD0A-B9A7-47E7-B648-A90F98AD8009}
[2012/05/25 10:42:09 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{E67DBEF7-477C-49EF-883B-C31A014A9A89}
[2012/05/24 22:05:18 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{51D434D0-9BFC-49C6-94C9-C1D771FE7192}
[2012/05/24 22:05:05 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{39C6E707-DEEC-48CF-991F-AFCED1D2D8FC}
[2012/05/24 10:04:27 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{970F7349-7037-4AF7-869D-27859B57DA7B}
[2012/05/24 10:03:33 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{B15A7173-7FFB-4ED9-9B2D-539C5C289BA8}
[2012/05/23 18:26:10 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{7DFE013E-6A68-48C6-8C98-A12820866321}
[2012/05/23 18:25:57 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{4E25DEA9-471D-45A8-BB36-62926A8449AF}
[2012/05/23 17:56:42 | 000,000,000 | ---D | C] -- C:\ProgramData\CyberLink
[2012/05/23 17:56:39 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Roaming\SNS
[2012/05/23 14:18:37 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{408FFDA9-2163-4D57-883D-59D3CBE0F303}
[2012/05/23 14:18:25 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{787E7A74-1DDC-4F8F-8B21-2046052F246E}
[2012/05/23 02:17:57 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{637FA60E-2A78-46DA-A531-631C6E1927AE}
[2012/05/23 02:17:45 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{F28C2311-0D99-4D14-8F0B-5EEF67919502}
[2012/05/22 14:17:15 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{8014F0A3-6333-4F57-864B-F1BD39214D53}
[2012/05/22 14:17:02 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{C5D4993E-3ABB-4D45-B47F-202B08FA1A8C}
[2012/05/22 02:16:45 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{6FA1950C-309E-485B-8B7C-59DCE7B30237}
[2012/05/22 02:16:33 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{CCF62A55-6FA7-4422-908C-FE73A5DE96D3}
[2012/05/21 14:16:17 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{F34E7CFD-FA4A-4409-9F9C-0775CCB0F022}
[2012/05/21 14:16:05 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{ABE005D3-F306-4552-92AD-3EC2F00EA3FB}
[2012/05/21 02:15:51 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{A7E88C5A-594D-4318-AC21-FB9735EFFA7C}
[2012/05/21 02:15:39 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{8BC933D0-9FC3-4E16-B938-FAF673C39389}
[2012/05/20 14:15:25 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{6E5D58C9-E3B2-4569-856D-F708BF86E184}
[2012/05/20 14:15:13 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{77997FC4-312B-40E2-8337-7EB870D44CEB}
[2012/05/20 02:14:59 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{3E12C20C-7238-4D25-AE82-0187D05A8494}
[2012/05/20 02:14:48 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{877B2F8D-AF9A-428E-A20E-C8201181F537}
[2012/05/19 14:14:34 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{B899D977-F5F3-4AAB-B968-F7C19B993C2E}
[2012/05/19 14:14:22 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{45B7A93C-47C7-40B3-AB33-2978BFF96E62}
[2012/05/19 02:14:08 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{965709AF-4C22-4830-BE7B-A135EE51C031}
[2012/05/19 02:13:56 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{07B629CD-EB01-48D9-9B8F-71846133FBCA}
[2012/05/18 14:13:39 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{8B711E83-72C9-4C6E-AF01-DBAF37554C26}
[2012/05/18 14:13:27 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{3841B194-D579-4673-AA56-F48BBD7F55EE}
[2012/05/18 02:13:13 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{DE130B52-0871-4C93-9CC0-7F2A81CBA849}
[2012/05/18 02:13:01 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{9CA2E627-19E9-4564-9AFD-73F52CE10BD5}
[2012/05/17 14:12:33 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{D2056EE0-11E6-4D9C-80C7-FFA156715914}
[2012/05/17 14:12:20 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{BDD03192-F4A8-4E29-953F-5E3E5F26369F}
[2012/05/17 02:11:52 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{0C406B70-D6AE-4520-BDF3-F297A325A45F}
[2012/05/17 02:11:39 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{96BE5649-B6EC-4815-9F8E-77CEADC21D6D}
[2012/05/16 17:17:48 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Internet Security 2012
[2012/05/16 17:16:44 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Kaspersky Lab
[2012/05/16 17:16:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Kaspersky Lab
[2012/05/16 17:16:29 | 000,615,728 | ---- | C] (Kaspersky Lab) -- C:\Windows\SysNative\drivers\klif.sys
[2012/05/16 17:01:35 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\ElevatedDiagnostics
[2012/05/16 14:11:06 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{D91ED704-3F20-4E42-9674-5F1FEC070DF3}
[2012/05/16 14:10:54 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{4F22D32D-2FA0-48F0-A699-F58557B9031B}
[2012/05/16 02:10:23 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{7099F58E-FCE4-498A-8D63-9E796FDB246A}
[2012/05/16 02:10:11 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{E1CDF16C-E276-4AF4-A948-022C16DD3A15}
[2012/05/15 14:09:54 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{BDAD67D8-B936-481A-B929-E2DF8A2C515D}
[2012/05/15 14:09:42 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{B1A3772A-8F0E-472C-9370-1B7B8F9D6202}
[2012/05/15 01:12:51 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{206BA7AA-611B-40E9-86D1-7DEFFA13EB69}
[2012/05/15 01:12:39 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{2ACB77DE-E936-404C-87F9-7F1F0CA2501F}
[2012/05/14 14:58:23 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{03E2A65D-8911-414E-B0E8-856FB8368B20}
[2012/05/14 02:41:55 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{DC93A621-1B05-4124-9DDA-5D9FBF8CE72B}
[2012/05/14 02:41:43 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{1F026EDD-BA7B-4191-BB41-F30842470A60}
[2012/05/13 14:41:28 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{3AEDC038-95DA-4E16-A763-359F489ABE59}
[2012/05/13 14:41:17 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{56D95DCE-1D86-4E9F-88F0-F78AB1964803}
[2012/05/12 23:29:01 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{8AB70104-7F85-4BF5-8AB2-094D287B96DE}
[2012/05/12 23:28:49 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{3945A595-C701-4C34-A49C-11327D082C82}
[2012/05/12 11:28:33 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{974C6CEB-B946-40CF-A160-C98698327C02}
[2012/05/12 11:28:21 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{EFFBC671-2D61-4CA4-86DA-AF87CA3D4B42}
[2012/05/11 18:51:06 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{20F66723-3BEF-4651-A3DC-92698E5DE321}
[2012/05/11 18:50:54 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{B960B8C1-912D-442F-9A91-3B70FF21106F}
[2012/05/11 04:44:35 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{D257C7CA-76C4-4BB6-984E-0E6DE08BDBA0}
[2012/05/11 04:44:23 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{D1728C50-C972-4DCD-87B0-87DE255D110C}
[2012/05/10 16:43:39 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{8ABF0D36-D462-4B0D-AF78-3CFB1F7A0F00}
[2012/05/10 16:43:27 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{C8975F88-53D1-44A1-816D-C2238A790BDC}
[2012/05/10 04:43:00 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{69BDE7CB-F0C5-4EF4-A46D-425C319DC3AD}
[2012/05/10 04:42:48 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{B3C79858-4493-4771-ACF7-597E6D067A09}
[2012/05/09 16:49:26 | 001,544,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DWrite.dll
[2012/05/09 16:49:23 | 005,559,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe
[2012/05/09 16:49:21 | 003,968,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntkrnlpa.exe
[2012/05/09 16:49:21 | 003,913,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntoskrnl.exe
[2012/05/09 16:42:33 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{4EB8295E-6B95-428D-AEEB-B3837F17D125}
[2012/05/09 16:42:21 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{F13DB05E-63B5-46BD-B4FE-B9C251BDB56D}
[2012/05/09 03:56:55 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{68FB9C5A-82DD-4022-A12F-4D2877B2E923}
[2012/05/09 03:56:43 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{A7647E8D-5FE7-43D1-B6B3-81D7A12E181A}
[2012/05/08 15:56:28 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{5C02636D-89BD-47BE-8B9E-71F684EF7618}
[2012/05/08 15:56:15 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{E65DF98A-7C80-4639-839E-E324F9C87F86}
[2012/05/08 03:56:01 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{F3BF6483-701F-485A-A08B-31B362C54C66}
[2012/05/08 03:55:49 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{B77F0EAD-D051-4741-806D-CF9F5147633A}
[2012/05/07 15:55:31 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{5D2B134F-A632-426D-BB0C-FBE7979E8501}
[2012/05/07 15:55:17 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{ACF80C95-B0D1-43F1-A779-8524E76EC2D1}
[2012/05/07 03:27:22 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{DD4972AB-D70B-489B-9EF6-3A9166227DA0}
[2012/05/07 03:27:11 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{33F22599-DCA9-4CF3-8B39-CCFFA280A8EB}
[2012/05/06 15:13:16 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{CA437E6C-FAA0-46F7-A1F2-39C1AC56B80B}
[2012/05/06 15:13:04 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{4CA9E2A7-BB49-46F4-A258-760A52716154}
[2012/05/06 03:12:37 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{263553E3-EBEF-4BC9-B010-EC437B5439EA}
[2012/05/06 03:12:25 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{05241497-E5D4-42F6-A5DB-E2BA260C2709}
[2012/05/05 15:23:14 | 008,744,608 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerInstaller.exe
[2012/05/05 15:12:11 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{876778A7-5C5C-470E-B8C1-006507A25A87}
[2012/05/05 15:11:58 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{C979C9F0-D707-4F2A-A0E5-8FBEDAD5D126}
[2012/05/05 03:11:43 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{A0AC8332-1E15-4D91-BB47-D6D269DBE812}
[2012/05/05 03:11:31 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{4A8C4261-6688-45B5-9194-7DA833116FA5}
[2012/05/04 15:09:27 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{8EC7A3E9-1BD5-4325-B452-60C20197992C}
[2012/05/04 15:09:16 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{E5235C32-5124-40F2-ACF6-48F3C0495425}
[2012/05/04 02:59:29 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{54732475-A2BB-496A-B350-D265807B041B}
[2012/05/04 02:59:17 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{9BE73FCE-F199-42AF-B4BA-2B1A393FE282}
[2012/05/03 14:59:01 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{AF1B5821-9AC1-4858-B3D5-5C3D57D08200}
[2012/05/03 14:58:49 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{31ED64CC-BF24-4572-851C-6C35E669DB39}
[2012/05/03 02:11:11 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{2595C10A-37C0-4E20-A550-AB9839937E2F}
[2012/05/03 02:10:59 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{8F4A87AC-E56C-460D-8D5C-363F04653117}
[2012/05/02 14:10:42 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{4A471ED2-3517-4B4B-8A53-C785EC8713C4}
[2012/05/02 14:10:30 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{771CA4DC-8425-41ED-B9EC-5ADF036A9EFD}
[2012/05/02 02:10:03 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{88E6FCDE-0572-48F7-959B-68B9E6AC3BE2}
[2012/05/02 02:09:51 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{1CA22ECB-C92A-4C8E-99EA-7EE5DF9483D8}
[2012/05/01 14:09:37 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{423DAB9C-4E50-4226-9439-D6FEE52194E3}
[2012/05/01 14:09:25 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{EDE9E407-DAD4-4CFD-B25C-BD5A9DAE6B63}
[2012/05/01 00:48:55 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{699D25D2-1CE5-453A-B7CF-F3F5F25510C6}
[2012/05/01 00:48:44 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{33F974B7-49B9-40E5-B9C5-7B82EBE59FF0}
[2012/04/29 14:53:02 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{DEFC441E-5AB8-4AB0-BE28-E19397D63087}
[2012/04/29 14:52:50 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{9D0AC245-A86C-4946-88AA-083E10DA11A1}
[2012/04/29 01:53:37 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{B4434720-C7A3-474B-9394-19374282F8EC}
[2012/04/29 01:53:25 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{7D8DEF29-A2ED-4B18-8C1F-4D24F84BE9FB}
[2012/04/28 13:53:11 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{3A3D6AE8-0569-4E6E-AC61-8103B74EAB9B}
[2012/04/28 13:52:59 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{621DB391-C792-4BE2-AC7F-C2FA363E3BAB}
[2012/04/27 20:32:00 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{B000A80E-A2A7-4990-AB8D-52AEB7C58762}
[2012/04/27 20:31:48 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{B6BC857B-6BA2-4056-8E1B-3101FC99A33B}
[2012/04/27 08:14:18 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{4F7CBC22-0678-48A9-B919-190DC15CCE38}
[2012/04/27 08:14:07 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{770261E4-75F0-4A5C-A7B9-7CCF8D5D8A0D}
[2012/04/26 18:59:20 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{DBE325B7-06D1-47C2-91A1-68FD2CB4A949}
[2012/04/26 18:59:07 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{34EA4C9B-E250-42CC-8251-CCFAD34DDF60}
[2012/04/26 16:12:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Maintenance Service
[2012/04/26 16:12:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Mozilla
[2012/04/26 06:58:40 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{2F833549-48ED-4C9C-A160-4AED40B358FF}
[2012/04/26 06:58:28 | 000,000,000 | ---D | C] -- C:\Users\pip\AppData\Local\{8AD19FBF-D558-44CE-951E-F897C8ABD3F0}

========== Files - Modified Within 30 Days ==========

[2012/05/26 05:33:17 | 000,000,210 | ---- | M] () -- C:\Windows\wininit.ini
[2012/05/26 05:30:01 | 000,000,414 | ---- | M] () -- C:\Windows\tasks\Packard Bell Registration - Data Sending task.job
[2012/05/26 05:23:00 | 000,000,830 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2012/05/26 05:21:43 | 000,009,920 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012/05/26 05:21:43 | 000,009,920 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012/05/26 05:14:32 | 000,000,894 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012/05/26 05:14:21 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012/05/26 05:14:17 | 2210,578,432 | -HS- | M] () -- C:\hiberfil.sys
[2012/05/26 04:44:00 | 000,000,898 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012/05/26 04:28:16 | 000,000,064 | ---- | M] () -- C:\Windows\SysWow64\rp_stats.dat
[2012/05/26 04:28:16 | 000,000,044 | ---- | M] () -- C:\Windows\SysWow64\rp_rules.dat
[2012/05/26 04:23:19 | 000,001,841 | ---- | M] () -- C:\Users\pip\Documents\mezac.rtf
[2012/05/25 02:35:41 | 000,031,401 | ---- | M] () -- C:\Users\pip\Documents\DSCN3643.JPG
[2012/05/25 02:34:50 | 002,417,664 | -H-- | M] () -- C:\Users\pip\Documents\photothumb.db
[2012/05/25 02:28:18 | 000,123,092 | ---- | M] () -- C:\Users\pip\Documents\freckles.JPG
[2012/05/25 02:25:20 | 001,108,063 | ---- | M] () -- C:\Users\pip\Documents\DSCN3644.JPG
[2012/05/25 02:19:16 | 000,832,367 | ---- | M] () -- C:\Users\pip\Documents\DSCN3642.JPG
[2012/05/25 02:18:51 | 000,435,737 | ---- | M] () -- C:\Users\pip\Documents\DSCN3640.JPG
[2012/05/25 02:18:31 | 001,114,582 | ---- | M] () -- C:\Users\pip\Documents\DSCN3638.JPG
[2012/05/25 02:17:22 | 001,227,281 | ---- | M] () -- C:\Users\pip\Documents\DSCN3636.JPG
[2012/05/25 02:17:12 | 001,050,909 | ---- | M] () -- C:\Users\pip\Documents\DSCN3634.JPG
[2012/05/24 21:24:54 | 006,605,496 | ---- | M] () -- C:\Users\pip\Documents\DSCN3632.MOV
[2012/05/24 18:54:52 | 001,174,465 | ---- | M] () -- C:\Users\pip\Documents\DSCN3630.JPG
[2012/05/24 18:54:00 | 001,189,126 | ---- | M] () -- C:\Users\pip\Documents\DSCN3628.JPG
[2012/05/24 18:53:48 | 001,114,284 | ---- | M] () -- C:\Users\pip\Documents\DSCN3627.JPG
[2012/05/24 17:59:38 | 000,054,133 | ---- | M] () -- C:\Users\pip\Documents\lati.jpg
[2012/05/24 10:06:58 | 000,002,356 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
[2012/05/22 15:17:01 | 000,016,432 | ---- | M] () -- C:\Windows\SysNative\lsdelete.exe
[2012/05/22 12:58:47 | 002,201,642 | ---- | M] () -- C:\Users\pip\Documents\sweetness.JPG
[2012/05/22 12:39:38 | 001,145,276 | ---- | M] () -- C:\Users\pip\Documents\DSCN3626.JPG
[2012/05/22 12:39:20 | 001,153,402 | ---- | M] () -- C:\Users\pip\Documents\DSCN3625.JPG
[2012/05/22 12:39:02 | 001,134,754 | ---- | M] () -- C:\Users\pip\Documents\DSCN3624.JPG
[2012/05/22 12:38:56 | 001,147,437 | ---- | M] () -- C:\Users\pip\Documents\DSCN3623.JPG
[2012/05/22 12:38:52 | 001,208,258 | ---- | M] () -- C:\Users\pip\Documents\DSCN3622.JPG
[2012/05/22 12:38:44 | 001,196,581 | ---- | M] () -- C:\Users\pip\Documents\DSCN3621.JPG
[2012/05/22 12:38:38 | 001,211,476 | ---- | M] () -- C:\Users\pip\Documents\DSCN3620.JPG
[2012/05/22 12:38:34 | 001,174,426 | ---- | M] () -- C:\Users\pip\Documents\DSCN3619.JPG
[2012/05/22 12:38:26 | 001,226,590 | ---- | M] () -- C:\Users\pip\Documents\DSCN3618.JPG
[2012/05/22 12:38:18 | 001,112,948 | ---- | M] () -- C:\Users\pip\Documents\DSCN3617.JPG
[2012/05/22 12:38:14 | 001,166,745 | ---- | M] () -- C:\Users\pip\Documents\DSCN3616.JPG
[2012/05/22 12:38:02 | 001,164,762 | ---- | M] () -- C:\Users\pip\Documents\DSCN3615.JPG
[2012/05/22 12:37:54 | 001,143,126 | ---- | M] () -- C:\Users\pip\Documents\DSCN3614.JPG
[2012/05/22 12:37:46 | 001,238,292 | ---- | M] () -- C:\Users\pip\Documents\DSCN3613.JPG
[2012/05/22 12:37:38 | 001,160,123 | ---- | M] () -- C:\Users\pip\Documents\DSCN3612.JPG
[2012/05/22 12:37:34 | 001,215,704 | ---- | M] () -- C:\Users\pip\Documents\DSCN3611.JPG
[2012/05/22 12:37:26 | 001,183,412 | ---- | M] () -- C:\Users\pip\Documents\DSCN3610.JPG
[2012/05/22 12:37:08 | 001,116,662 | ---- | M] () -- C:\Users\pip\Documents\DSCN3609.JPG
[2012/05/22 12:37:02 | 001,092,547 | ---- | M] () -- C:\Users\pip\Documents\DSCN3608.JPG
[2012/05/22 12:36:48 | 001,132,923 | ---- | M] () -- C:\Users\pip\Documents\DSCN3607.JPG
[2012/05/22 12:36:38 | 001,158,506 | ---- | M] () -- C:\Users\pip\Documents\DSCN3606.JPG
[2012/05/22 12:36:26 | 001,196,671 | ---- | M] () -- C:\Users\pip\Documents\DSCN3605.JPG
[2012/05/22 12:36:14 | 001,186,569 | ---- | M] () -- C:\Users\pip\Documents\DSCN3604.JPG
[2012/05/22 12:36:06 | 001,180,863 | ---- | M] () -- C:\Users\pip\Documents\DSCN3603.JPG
[2012/05/22 12:35:48 | 001,119,956 | ---- | M] () -- C:\Users\pip\Documents\DSCN3602.JPG
[2012/05/22 12:35:40 | 001,191,382 | ---- | M] () -- C:\Users\pip\Documents\DSCN3601.JPG
[2012/05/22 09:51:28 | 001,181,979 | ---- | M] () -- C:\Users\pip\Documents\DSCN3600.JPG
[2012/05/22 09:51:20 | 001,156,998 | ---- | M] () -- C:\Users\pip\Documents\DSCN3599.JPG
[2012/05/22 09:51:16 | 001,161,095 | ---- | M] () -- C:\Users\pip\Documents\DSCN3598.JPG
[2012/05/22 09:51:06 | 001,100,990 | ---- | M] () -- C:\Users\pip\Documents\DSCN3597.JPG
[2012/05/22 09:50:44 | 001,114,224 | ---- | M] () -- C:\Users\pip\Documents\DSCN3596.JPG
[2012/05/22 09:50:22 | 001,126,615 | ---- | M] () -- C:\Users\pip\Documents\DSCN3595.JPG
[2012/05/22 09:50:16 | 001,174,801 | ---- | M] () -- C:\Users\pip\Documents\DSCN3594.JPG
[2012/05/22 09:50:06 | 001,187,841 | ---- | M] () -- C:\Users\pip\Documents\DSCN3593.JPG
[2012/05/22 09:44:54 | 001,170,057 | ---- | M] () -- C:\Users\pip\Documents\DSCN3592.JPG
[2012/05/22 09:44:40 | 001,105,170 | ---- | M] () -- C:\Users\pip\Documents\DSCN3591.JPG
[2012/05/22 09:44:34 | 001,125,803 | ---- | M] () -- C:\Users\pip\Documents\DSCN3590.JPG
[2012/05/22 09:43:28 | 001,209,190 | ---- | M] () -- C:\Users\pip\Documents\DSCN3589.JPG
[2012/05/22 09:43:24 | 001,177,845 | ---- | M] () -- C:\Users\pip\Documents\DSCN3588.JPG
[2012/05/22 09:43:18 | 001,119,383 | ---- | M] () -- C:\Users\pip\Documents\DSCN3587.JPG
[2012/05/22 09:43:12 | 001,213,206 | ---- | M] () -- C:\Users\pip\Documents\DSCN3586.JPG
[2012/05/22 09:41:48 | 001,085,324 | ---- | M] () -- C:\Users\pip\Documents\DSCN3585.JPG
[2012/05/22 09:41:40 | 001,186,927 | ---- | M] () -- C:\Users\pip\Documents\DSCN3584.JPG
[2012/05/22 09:41:34 | 001,207,068 | ---- | M] () -- C:\Users\pip\Documents\DSCN3583.JPG
[2012/05/18 20:57:06 | 002,283,690 | ---- | M] () -- C:\Users\pip\Documents\DSCN3582.JPG
[2012/05/16 17:52:12 | 000,002,515 | ---- | M] () -- C:\Users\Public\Desktop\Skype.lnk
[2012/05/16 17:22:47 | 000,017,408 | ---- | M] () -- C:\Users\pip\AppData\Local\WebpageIcons.db
[2012/05/16 17:17:55 | 000,152,233 | ---- | M] () -- C:\Windows\SysNative\drivers\klin.dat
[2012/05/16 17:17:55 | 000,107,177 | ---- | M] () -- C:\Windows\SysNative\drivers\klick.dat
[2012/05/16 17:16:29 | 000,615,728 | ---- | M] (Kaspersky Lab) -- C:\Windows\SysNative\drivers\klif.sys
[2012/05/16 05:48:58 | 001,292,425 | ---- | M] () -- C:\Users\pip\Documents\DSCN3580.JPG
[2012/05/16 05:40:50 | 001,130,539 | ---- | M] () -- C:\Users\pip\Documents\DSCN3579.JPG
[2012/05/16 05:40:44 | 001,185,478 | ---- | M] () -- C:\Users\pip\Documents\DSCN3578.JPG
[2012/05/16 05:40:38 | 001,163,397 | ---- | M] () -- C:\Users\pip\Documents\DSCN3577.JPG
[2012/05/16 05:40:32 | 001,224,112 | ---- | M] () -- C:\Users\pip\Documents\DSCN3576.JPG
[2012/05/16 05:40:26 | 001,196,962 | ---- | M] () -- C:\Users\pip\Documents\DSCN3575.JPG
[2012/05/16 04:50:28 | 000,005,255 | ---- | M] () -- C:\Users\pip\Documents\tozac2.rtf
[2012/05/14 14:23:45 | 000,001,104 | ---- | M] () -- C:\Users\pip\Documents\tozac=c.rtf
[2012/05/13 15:52:29 | 000,004,557 | ---- | M] () -- C:\Users\pip\Documents\sarafreak.rtf
[2012/05/13 04:19:07 | 000,023,269 | ---- | M] () -- C:\Users\pip\Documents\imvu.JPG
[2012/05/11 14:11:53 | 001,095,408 | ---- | M] () -- C:\Users\pip\Documents\cc.JPG
[2012/05/11 14:06:44 | 003,081,801 | ---- | M] () -- C:\Users\pip\Documents\DSCN3555.JPG
[2012/05/11 14:05:18 | 001,885,130 | ---- | M] () -- C:\Users\pip\Documents\DSCN3554.JPG
[2012/05/11 06:13:19 | 001,398,458 | ---- | M] () -- C:\Users\pip\Documents\DSCN3550.JPG
[2012/05/11 06:10:18 | 001,194,106 | ---- | M] () -- C:\Users\pip\Documents\DSCN3560.JPG
[2012/05/11 06:09:56 | 001,232,307 | ---- | M] () -- C:\Users\pip\Documents\DSCN3559.JPG
[2012/05/11 06:09:48 | 001,227,380 | ---- | M] () -- C:\Users\pip\Documents\DSCN3558.JPG
[2012/05/11 06:09:24 | 001,201,082 | ---- | M] () -- C:\Users\pip\Documents\DSCN3557.JPG
[2012/05/11 06:09:14 | 001,125,968 | ---- | M] () -- C:\Users\pip\Documents\DSCN3556.JPG
[2012/05/11 06:07:58 | 001,077,861 | ---- | M] () -- C:\Users\pip\Documents\DSCN3553.JPG
[2012/05/11 06:07:22 | 001,068,868 | ---- | M] () -- C:\Users\pip\Documents\DSCN3549.JPG
[2012/05/10 09:00:21 | 000,362,312 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2012/05/10 03:13:11 | 000,732,070 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2012/05/10 03:13:11 | 000,616,008 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2012/05/10 03:13:11 | 000,106,388 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2012/05/09 07:31:44 | 000,906,371 | ---- | M] () -- C:\Users\pip\Documents\DSCN3441.JPG
[2012/05/08 02:56:18 | 000,003,140 | ---- | M] () -- C:\Users\pip\Documents\yourloss.wlmp
[2012/05/07 04:53:30 | 000,075,843 | ---- | M] () -- C:\Users\pip\Documents\k.jpg
[2012/05/06 21:42:25 | 000,419,488 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe
[2012/05/06 21:42:25 | 000,070,304 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2012/05/05 23:27:24 | 001,098,756 | ---- | M] () -- C:\Users\pip\Documents\DSCN3531.JPG
[2012/05/05 23:27:08 | 001,078,483 | ---- | M] () -- C:\Users\pip\Documents\11.JPG
[2012/05/05 23:06:09 | 001,540,406 | ---- | M] () -- C:\Users\pip\Documents\1.JPG
[2012/05/05 23:05:28 | 002,208,757 | ---- | M] () -- C:\Users\pip\Documents\DSCN3537.JPG
[2012/05/05 22:23:38 | 001,096,679 | ---- | M] () -- C:\Users\pip\Documents\DSCN3542.JPG
[2012/05/05 22:23:28 | 001,094,989 | ---- | M] () -- C:\Users\pip\Documents\DSCN3541.JPG
[2012/05/05 22:22:56 | 001,186,728 | ---- | M] () -- C:\Users\pip\Documents\DSCN3540.JPG
[2012/05/05 22:22:48 | 001,198,700 | ---- | M] () -- C:\Users\pip\Documents\DSCN3539.JPG
[2012/05/05 22:22:36 | 001,225,968 | ---- | M] () -- C:\Users\pip\Documents\DSCN3538.JPG
[2012/05/05 22:21:38 | 001,201,502 | ---- | M] () -- C:\Users\pip\Documents\DSCN3536.JPG
[2012/05/05 22:21:22 | 001,175,525 | ---- | M] () -- C:\Users\pip\Documents\DSCN3535.JPG
[2012/05/05 22:21:14 | 001,214,117 | ---- | M] () -- C:\Users\pip\Documents\DSCN3534.JPG
[2012/05/05 22:21:04 | 001,099,144 | ---- | M] () -- C:\Users\pip\Documents\DSCN3533.JPG
[2012/05/05 22:20:56 | 001,191,984 | ---- | M] () -- C:\Users\pip\Documents\DSCN3532.JPG
[2012/05/05 15:23:14 | 008,744,608 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerInstaller.exe
[2012/05/05 14:15:43 | 001,988,108 | ---- | M] () -- C:\Users\pip\Documents\DSCN3529.JPG
[2012/05/05 14:13:34 | 002,599,292 | ---- | M] () -- C:\Users\pip\Documents\DSCN3530.JPG
[2012/05/04 23:05:25 | 002,193,384 | ---- | M] () -- C:\Users\pip\Documents\DSCN3528.JPG
[2012/05/04 21:29:38 | 001,438,726 | ---- | M] () -- C:\Users\pip\Documents\DSCN3524.JPG
[2012/05/04 21:26:16 | 001,922,196 | ---- | M] () -- C:\Users\pip\Documents\DSCN3517.JPG
[2012/05/04 21:25:12 | 002,064,869 | ---- | M] () -- C:\Users\pip\Documents\DSCN3509.JPG
[2012/05/04 21:24:31 | 001,520,444 | ---- | M] () -- C:\Users\pip\Documents\DSCN3508.JPG
[2012/05/04 21:15:54 | 001,152,892 | ---- | M] () -- C:\Users\pip\Documents\DSCN3515.JPG
[2012/05/04 20:14:57 | 002,273,143 | ---- | M] () -- C:\Users\pip\Documents\DSCN3473.JPG
[2012/05/04 20:13:49 | 002,003,992 | ---- | M] () -- C:\Users\pip\Documents\DSCN3476.JPG
[2012/05/04 20:13:07 | 002,065,366 | ---- | M] () -- C:\Users\pip\Documents\DSCN3477.JPG
[2012/05/04 20:11:50 | 001,986,652 | ---- | M] () -- C:\Users\pip\Documents\DSCN3483.JPG
[2012/05/04 20:10:37 | 001,956,729 | ---- | M] () -- C:\Users\pip\Documents\DSCN3484.JPG
[2012/05/04 20:10:21 | 002,205,268 | ---- | M] () -- C:\Users\pip\Documents\DSCN3485.JPG
[2012/05/04 20:08:31 | 001,915,981 | ---- | M] () -- C:\Users\pip\Documents\DSCN3488.JPG
[2012/05/04 20:08:03 | 002,851,815 | ---- | M] () -- C:\Users\pip\Documents\DSCN3493.JPG
[2012/05/04 20:07:41 | 002,464,466 | ---- | M] () -- C:\Users\pip\Documents\DSCN3494.JPG
[2012/05/04 20:07:25 | 002,324,481 | ---- | M] () -- C:\Users\pip\Documents\DSCN3495.JPG
[2012/05/04 20:06:40 | 002,006,673 | ---- | M] () -- C:\Users\pip\Documents\DSCN3497.JPG
[2012/05/04 20:06:00 | 002,117,755 | ---- | M] () -- C:\Users\pip\Documents\DSCN3498.JPG
[2012/05/04 20:04:59 | 002,190,246 | ---- | M] () -- C:\Users\pip\Documents\DSCN3499.JPG
[2012/05/04 20:02:32 | 002,160,833 | ---- | M] () -- C:\Users\pip\Documents\DSCN3500.JPG
[2012/05/04 20:01:39 | 001,894,094 | ---- | M] () -- C:\Users\pip\Documents\DSCN3501.JPG
[2012/05/04 20:00:29 | 001,093,885 | ---- | M] () -- C:\Users\pip\Documents\DSCN3504.JPG
[2012/05/04 19:59:20 | 001,571,956 | ---- | M] () -- C:\Users\pip\Documents\DSCN3507.JPG
[2012/05/04 19:57:06 | 001,414,290 | ---- | M] () -- C:\Users\pip\Documents\DSCN3506.JPG
[2012/05/04 19:53:20 | 001,528,482 | ---- | M] () -- C:\Users\pip\Documents\DSCN3505.JPG
[2012/05/04 19:38:44 | 001,185,536 | ---- | M] () -- C:\Users\pip\Documents\DSCN3478.JPG
[2012/05/04 19:38:08 | 001,098,211 | ---- | M] () -- C:\Users\pip\Documents\DSCN3474.JPG
[2012/05/04 19:37:46 | 001,184,122 | ---- | M] () -- C:\Users\pip\Documents\DSCN3472.JPG
[2012/05/04 07:43:16 | 000,228,342 | ---- | M] () -- C:\Users\pip\Documents\DSCN3471.JPG
[2012/05/04 07:22:36 | 002,388,523 | ---- | M] () -- C:\Users\pip\Documents\222.jpg
[2012/05/04 07:22:18 | 002,400,252 | ---- | M] () -- C:\Users\pip\Documents\22.jpg
[2012/05/04 07:18:55 | 001,986,010 | ---- | M] () -- C:\Users\pip\Documents\DSCN3457.JPG
[2012/05/04 07:18:15 | 002,174,454 | ---- | M] () -- C:\Users\pip\Documents\DSCN3456.JPG
[2012/05/04 07:15:42 | 001,026,918 | ---- | M] () -- C:\Users\pip\Documents\DSCN3470.JPG
[2012/05/04 07:15:18 | 001,135,392 | ---- | M] () -- C:\Users\pip\Documents\DSCN3469.JPG
[2012/05/04 07:14:30 | 001,121,024 | ---- | M] () -- C:\Users\pip\Documents\DSCN3466.JPG
[2012/05/03 08:19:32 | 001,830,809 | ---- | M] () -- C:\Users\pip\Documents\DSCN3460.JPG
[2012/05/03 08:17:59 | 001,612,563 | ---- | M] () -- C:\Users\pip\Documents\DSCN3444.JPG
[2012/05/02 19:47:12 | 001,087,577 | ---- | M] () -- C:\Users\pip\Documents\DSCN3461.JPG
[2012/05/02 19:46:24 | 001,079,354 | ---- | M] () -- C:\Users\pip\Documents\DSCN3459.JPG
[2012/05/02 19:46:02 | 001,211,073 | ---- | M] () -- C:\Users\pip\Documents\DSCN3458.JPG
[2012/05/01 23:28:58 | 002,934,474 | ---- | M] () -- C:\Users\pip\Documents\o.JPG
[2012/05/01 22:59:06 | 001,086,416 | ---- | M] () -- C:\Users\pip\Documents\DSCN3454.JPG
[2012/05/01 22:58:50 | 001,123,995 | ---- | M] () -- C:\Users\pip\Documents\DSCN3453.JPG
[2012/05/01 22:55:52 | 001,032,952 | ---- | M] () -- C:\Users\pip\Documents\DSCN3450.JPG
[2012/05/01 22:55:12 | 001,162,777 | ---- | M] () -- C:\Users\pip\Documents\DSCN3447.JPG
[2012/05/01 22:22:32 | 001,056,333 | ---- | M] () -- C:\Users\pip\Documents\DSCN3446.JPG
[2012/05/01 22:22:24 | 001,120,611 | ---- | M] () -- C:\Users\pip\Documents\DSCN3445.JPG
[2012/05/01 22:18:48 | 001,138,454 | ---- | M] () -- C:\Users\pip\Documents\DSCN3443.JPG
[2012/05/01 22:18:40 | 001,115,816 | ---- | M] () -- C:\Users\pip\Documents\DSCN3442.JPG
[2012/05/01 22:18:26 | 001,163,626 | ---- | M] () -- C:\Users\pip\Documents\DSCN3440.JPG
[2012/05/01 02:48:07 | 000,361,755 | ---- | M] () -- C:\Users\pip\Documents\DSCN3217.JPG
[2012/04/30 12:53:21 | 002,596,537 | ---- | M] () -- C:\Users\pip\Documents\boatandbirds.JPG
[2012/04/30 12:36:04 | 001,764,473 | ---- | M] () -- C:\Users\pip\Documents\DSCN3439.JPG
[2012/04/30 05:41:42 | 001,157,262 | ---- | M] () -- C:\Users\pip\Documents\DSCN3438.JPG
[2012/04/30 02:17:40 | 000,002,257 | ---- | M] () -- C:\Users\pip\Documents\oooooo.rtf
[2012/04/30 02:13:56 | 001,207,994 | ---- | M] () -- C:\Users\pip\Documents\DSCN3437.JPG
[2012/04/29 20:28:06 | 001,102,293 | ---- | M] () -- C:\Users\pip\Documents\DSCN3436.JPG
[2012/04/29 20:27:56 | 001,098,449 | ---- | M] () -- C:\Users\pip\Documents\DSCN3435.JPG
[2012/04/29 20:27:50 | 001,109,637 | ---- | M] () -- C:\Users\pip\Documents\DSCN3434.JPG
[2012/04/29 20:27:46 | 001,138,370 | ---- | M] () -- C:\Users\pip\Documents\DSCN3433.JPG
[2012/04/29 20:27:42 | 001,113,903 | ---- | M] () -- C:\Users\pip\Documents\DSCN3432.JPG
[2012/04/29 20:27:38 | 001,129,072 | ---- | M] () -- C:\Users\pip\Documents\DSCN3431.JPG
[2012/04/29 19:09:58 | 001,144,880 | ---- | M] () -- C:\Users\pip\Documents\DSCN3430.JPG
[2012/04/29 19:09:54 | 001,158,065 | ---- | M] () -- C:\Users\pip\Documents\DSCN3429.JPG
[2012/04/29 19:05:40 | 001,114,145 | ---- | M] () -- C:\Users\pip\Documents\DSCN3428.JPG
[2012/04/29 19:05:30 | 001,153,033 | ---- | M] () -- C:\Users\pip\Documents\DSCN3427.JPG
[2012/04/29 19:05:22 | 001,210,968 | ---- | M] () -- C:\Users\pip\Documents\DSCN3426.JPG
[2012/04/29 19:05:16 | 001,144,571 | ---- | M] () -- C:\Users\pip\Documents\DSCN3425.JPG
[2012/04/29 19:05:12 | 001,137,793 | ---- | M] () -- C:\Users\pip\Documents\DSCN3424.JPG
[2012/04/29 19:05:08 | 001,151,734 | ---- | M] () -- C:\Users\pip\Documents\DSCN3423.JPG
[2012/04/29 19:05:02 | 001,187,622 | ---- | M] () -- C:\Users\pip\Documents\DSCN3422.JPG
[2012/04/29 19:04:56 | 001,180,965 | ---- | M] () -- C:\Users\pip\Documents\DSCN3421.JPG
[2012/04/29 19:04:50 | 001,088,297 | ---- | M] () -- C:\Users\pip\Documents\DSCN3420.JPG
[2012/04/29 19:04:44 | 001,126,117 | ---- | M] () -- C:\Users\pip\Documents\DSCN3419.JPG
[2012/04/29 19:04:38 | 001,151,573 | ---- | M] () -- C:\Users\pip\Documents\DSCN3418.JPG
[2012/04/29 19:04:32 | 001,190,579 | ---- | M] () -- C:\Users\pip\Documents\DSCN3417.JPG
[2012/04/29 19:02:10 | 001,188,967 | ---- | M] () -- C:\Users\pip\Documents\DSCN3416.JPG
[2012/04/29 19:02:06 | 001,159,339 | ---- | M] () -- C:\Users\pip\Documents\DSCN3415.JPG
[2012/04/29 19:01:54 | 001,208,461 | ---- | M] () -- C:\Users\pip\Documents\DSCN3414.JPG
[2012/04/29 19:01:46 | 001,106,545 | ---- | M] () -- C:\Users\pip\Documents\DSCN3413.JPG
[2012/04/29 18:47:02 | 001,166,740 | ---- | M] () -- C:\Users\pip\Documents\DSCN3412.JPG
[2012/04/29 18:46:42 | 001,132,190 | ---- | M] () -- C:\Users\pip\Documents\DSCN3411.JPG
[2012/04/29 18:46:34 | 001,179,697 | ---- | M] () -- C:\Users\pip\Documents\DSCN3410.JPG
[2012/04/29 18:46:26 | 001,117,215 | ---- | M] () -- C:\Users\pip\Documents\DSCN3409.JPG
[2012/04/29 18:45:20 | 001,107,322 | ---- | M] () -- C:\Users\pip\Documents\DSCN3407.JPG
[2012/04/29 18:45:12 | 001,183,132 | ---- | M] () -- C:\Users\pip\Documents\DSCN3406.JPG
[2012/04/29 18:44:38 | 001,175,780 | ---- | M] () -- C:\Users\pip\Documents\DSCN3405.JPG
[2012/04/29 18:44:24 | 001,146,121 | ---- | M] () -- C:\Users\pip\Documents\DSCN3404.JPG
[2012/04/29 18:44:20 | 001,181,644 | ---- | M] () -- C:\Users\pip\Documents\DSCN3403.JPG
[2012/04/29 18:44:08 | 001,136,995 | ---- | M] () -- C:\Users\pip\Documents\DSCN3402.JPG
[2012/04/29 18:43:52 | 001,196,994 | ---- | M] () -- C:\Users\pip\Documents\DSCN3401.JPG
[2012/04/29 18:43:46 | 001,125,734 | ---- | M] () -- C:\Users\pip\Documents\DSCN3400.JPG
[2012/04/29 18:43:36 | 001,187,771 | ---- | M] () -- C:\Users\pip\Documents\DSCN3399.JPG
[2012/04/29 18:43:30 | 001,086,378 | ---- | M] () -- C:\Users\pip\Documents\DSCN3398.JPG
[2012/04/29 18:43:24 | 001,156,986 | ---- | M] () -- C:\Users\pip\Documents\DSCN3397.JPG
[2012/04/29 18:43:10 | 001,085,802 | ---- | M] () -- C:\Users\pip\Documents\DSCN3396.JPG
[2012/04/29 18:43:04 | 001,124,928 | ---- | M] () -- C:\Users\pip\Documents\DSCN3395.JPG
[2012/04/29 18:42:56 | 001,113,718 | ---- | M] () -- C:\Users\pip\Documents\DSCN3394.JPG
[2012/04/29 18:42:50 | 001,157,831 | ---- | M] () -- C:\Users\pip\Documents\DSCN3393.JPG
[2012/04/29 18:42:46 | 001,179,719 | ---- | M] () -- C:\Users\pip\Documents\DSCN3392.JPG
[2012/04/29 18:42:34 | 001,140,101 | ---- | M] () -- C:\Users\pip\Documents\DSCN3391.JPG
[2012/04/29 18:42:28 | 001,142,830 | ---- | M] () -- C:\Users\pip\Documents\DSCN3390.JPG
[2012/04/29 04:11:49 | 000,455,867 | ---- | M] () -- C:\Users\pip\Documents\cats.jpg
[2012/04/28 19:56:55 | 001,289,635 | ---- | M] () -- C:\Users\pip\Documents\DSCN3379.JPG
[2012/04/28 19:54:39 | 001,106,447 | ---- | M] () -- C:\Users\pip\Documents\DSCN3380.JPG
[2012/04/28 19:54:37 | 001,157,089 | ---- | M] () -- C:\Users\pip\Documents\DSCN3381.JPG
[2012/04/28 19:54:27 | 001,124,863 | ---- | M] () -- C:\Users\pip\Documents\DSCN3384.JPG
[2012/04/28 19:54:24 | 001,042,183 | ---- | M] () -- C:\Users\pip\Documents\DSCN3385.JPG
[2012/04/28 19:54:19 | 001,081,846 | ---- | M] () -- C:\Users\pip\Documents\DSCN3386.JPG
[2012/04/28 19:54:15 | 001,071,832 | ---- | M] () -- C:\Users\pip\Documents\DSCN3387.JPG
[2012/04/28 19:54:10 | 001,104,630 | ---- | M] () -- C:\Users\pip\Documents\DSCN3388.JPG
[2012/04/28 19:37:24 | 001,193,965 | ---- | M] () -- C:\Users\pip\Documents\DSCN3383.JPG
[2012/04/28 19:35:24 | 001,150,016 | ---- | M] () -- C:\Users\pip\Documents\DSCN3382.JPG
[2012/04/28 19:34:52 | 001,176,685 | ---- | M] () -- C:\Users\pip\Documents\DSCN3378.JPG
[2012/04/28 19:34:44 | 001,186,947 | ---- | M] () -- C:\Users\pip\Documents\DSCN3377.JPG
[2012/04/28 19:26:44 | 001,190,683 | ---- | M] () -- C:\Users\pip\Documents\DSCN3376.JPG
[2012/04/28 19:26:26 | 001,204,383 | ---- | M] () -- C:\Users\pip\Documents\DSCN3375.JPG
[2012/04/28 19:26:18 | 001,163,375 | ---- | M] () -- C:\Users\pip\Documents\DSCN3374.JPG
[2012/04/28 19:26:10 | 001,176,244 | ---- | M] () -- C:\Users\pip\Documents\DSCN3373.JPG
[2012/04/28 19:25:58 | 001,161,660 | ---- | M] () -- C:\Users\pip\Documents\DSCN3372.JPG
[2012/04/28 19:25:54 | 001,182,398 | ---- | M] () -- C:\Users\pip\Documents\DSCN3371.JPG
[2012/04/28 19:25:46 | 001,185,876 | ---- | M] () -- C:\Users\pip\Documents\DSCN3370.JPG
[2012/04/28 19:25:38 | 001,188,161 | ---- | M] () -- C:\Users\pip\Documents\DSCN3369.JPG
[2012/04/28 19:25:30 | 001,105,580 | ---- | M] () -- C:\Users\pip\Documents\DSCN3368.JPG
[2012/04/28 19:24:00 | 001,178,538 | ---- | M] () -- C:\Users\pip\Documents\DSCN3367.JPG
[2012/04/28 19:23:54 | 001,090,634 | ---- | M] () -- C:\Users\pip\Documents\DSCN3366.JPG
[2012/04/28 19:23:48 | 001,234,038 | ---- | M] () -- C:\Users\pip\Documents\DSCN3365.JPG
[2012/04/28 19:23:42 | 001,206,956 | ---- | M] () -- C:\Users\pip\Documents\DSCN3364.JPG
[2012/04/28 19:22:00 | 001,163,509 | ---- | M] () -- C:\Users\pip\Documents\DSCN3363.JPG
[2012/04/28 19:21:56 | 001,161,363 | ---- | M] () -- C:\Users\pip\Documents\DSCN3362.JPG
[2012/04/26 20:12:15 | 000,330,378 | ---- | M] () -- C:\Users\pip\Documents\heart.JPG
[2012/04/26 19:53:11 | 002,233,690 | ---- | M] () -- C:\Users\pip\Documents\DSCN3301.JPG
[2012/04/26 19:52:21 | 002,442,694 | ---- | M] () -- C:\Users\pip\Documents\DSCN3300.JPG
[2012/04/26 19:51:31 | 001,518,794 | ---- | M] () -- C:\Users\pip\Documents\DSCN3299.JPG
[2012/04/26 19:50:47 | 001,752,845 | ---- | M] () -- C:\Users\pip\Documents\DSCN3296.JPG
[2012/04/26 19:50:34 | 001,354,965 | ---- | M] () -- C:\Users\pip\Documents\DSCN3295.JPG
[2012/04/26 19:50:09 | 001,522,205 | ---- | M] () -- C:\Users\pip\Documents\DSCN3294.JPG
[2012/04/26 19:49:20 | 002,665,156 | ---- | M] () -- C:\Users\pip\Documents\DSCN3293.JPG
[2012/04/26 18:02:59 | 001,752,594 | ---- | M] () -- C:\Users\pip\Documents\eck.jpg
[2012/04/26 17:55:13 | 002,846,937 | ---- | M] () -- C:\Users\pip\Documents\DSCN3327.JPG
[2012/04/26 17:54:39 | 002,396,174 | ---- | M] () -- C:\Users\pip\Documents\DSCN3322.JPG
[2012/04/26 17:54:19 | 001,292,938 | ---- | M] () -- C:\Users\pip\Documents\DSCN3321.JPG
[2012/04/26 17:54:01 | 002,120,289 | ---- | M] () -- C:\Users\pip\Documents\DSCN3329.JPG
[2012/04/26 17:52:24 | 002,936,711 | ---- | M] () -- C:\Users\pip\Documents\DSCN3326.JPG
[2012/04/26 17:52:15 | 002,454,350 | ---- | M] () -- C:\Users\pip\Documents\DSCN3325.JPG
[2012/04/26 17:52:08 | 002,471,857 | ---- | M] () -- C:\Users\pip\Documents\DSCN3324.JPG
[2012/04/26 17:51:42 | 002,329,957 | ---- | M] () -- C:\Users\pip\Documents\DSCN3320.JPG
[2012/04/26 17:51:18 | 002,760,242 | ---- | M] () -- C:\Users\pip\Documents\DSCN3335.JPG
[2012/04/26 17:51:10 | 002,958,401 | ---- | M] () -- C:\Users\pip\Documents\DSCN3339.JPG
[2012/04/26 17:50:58 | 002,914,734 | ---- | M] () -- C:\Users\pip\Documents\DSCN3340.JPG
[2012/04/26 17:47:38 | 001,141,107 | ---- | M] () -- C:\Users\pip\Documents\DSCN3341.JPG
[2012/04/26 17:46:36 | 001,218,982 | ---- | M] () -- C:\Users\pip\Documents\DSCN3338.JPG
[2012/04/26 17:46:22 | 001,157,773 | ---- | M] () -- C:\Users\pip\Documents\DSCN3337.JPG
[2012/04/26 17:46:02 | 001,163,665 | ---- | M] () -- C:\Users\pip\Documents\DSCN3336.JPG
[2012/04/26 17:45:20 | 001,174,922 | ---- | M] () -- C:\Users\pip\Documents\DSCN3334.JPG
[2012/04/26 17:45:14 | 001,214,105 | ---- | M] () -- C:\Users\pip\Documents\DSCN3333.JPG
[2012/04/26 17:45:06 | 001,217,385 | ---- | M] () -- C:\Users\pip\Documents\DSCN3332.JPG
[2012/04/26 17:44:56 | 001,151,113 | ---- | M] () -- C:\Users\pip\Documents\DSCN3331.JPG
[2012/04/26 17:44:50 | 001,211,318 | ---- | M] () -- C:\Users\pip\Documents\DSCN3330.JPG
[2012/04/26 17:44:36 | 001,201,774 | ---- | M] () -- C:\Users\pip\Documents\DSCN3328.JPG
[2012/04/26 17:43:46 | 001,178,798 | ---- | M] () -- C:\Users\pip\Documents\DSCN3323.JPG
[2012/04/26 14:42:22 | 001,179,146 | ---- | M] () -- C:\Users\pip\Documents\DSCN3316.JPG
[2012/04/26 14:42:12 | 001,184,358 | ---- | M] () -- C:\Users\pip\Documents\DSCN3314.JPG
[2012/04/26 14:41:14 | 001,086,584 | ---- | M] () -- C:\Users\pip\Documents\DSCN3307.JPG
[2012/04/26 14:40:18 | 001,169,017 | ---- | M] () -- C:\Users\pip\Documents\DSCN3303.JPG
[2012/04/26 06:08:56 | 001,205,627 | ---- | M] () -- C:\Users\pip\Documents\DSCN3298.JPG
[2012/04/26 06:08:40 | 001,074,720 | ---- | M] () -- C:\Users\pip\Documents\DSCN3297.JPG

========== Files Created - No Company Name ==========

[2012/05/26 04:31:12 | 000,000,210 | ---- | C] () -- C:\Windows\wininit.ini
[2012/05/26 04:23:19 | 000,001,841 | ---- | C] () -- C:\Users\pip\Documents\mezac.rtf
[2012/05/25 11:07:49 | 001,147,437 | ---- | C] () -- C:\Users\pip\Documents\DSCN3623.JPG
[2012/05/25 11:07:49 | 001,134,754 | ---- | C] () -- C:\Users\pip\Documents\DSCN3624.JPG
[2012/05/25 11:07:48 | 001,226,590 | ---- | C] () -- C:\Users\pip\Documents\DSCN3618.JPG
[2012/05/25 11:07:48 | 001,211,476 | ---- | C] () -- C:\Users\pip\Documents\DSCN3620.JPG
[2012/05/25 11:07:48 | 001,208,258 | ---- | C] () -- C:\Users\pip\Documents\DSCN3622.JPG
[2012/05/25 11:07:48 | 001,196,581 | ---- | C] () -- C:\Users\pip\Documents\DSCN3621.JPG
[2012/05/25 11:07:48 | 001,174,426 | ---- | C] () -- C:\Users\pip\Documents\DSCN3619.JPG
[2012/05/25 11:07:47 | 001,238,292 | ---- | C] () -- C:\Users\pip\Documents\DSCN3613.JPG
[2012/05/25 11:07:47 | 001,166,745 | ---- | C] () -- C:\Users\pip\Documents\DSCN3616.JPG
[2012/05/25 11:07:47 | 001,164,762 | ---- | C] () -- C:\Users\pip\Documents\DSCN3615.JPG
[2012/05/25 11:07:47 | 001,143,126 | ---- | C] () -- C:\Users\pip\Documents\DSCN3614.JPG
[2012/05/25 11:07:47 | 001,112,948 | ---- | C] () -- C:\Users\pip\Documents\DSCN3617.JPG
[2012/05/25 11:07:46 | 001,215,704 | ---- | C] () -- C:\Users\pip\Documents\DSCN3611.JPG
[2012/05/25 11:07:46 | 001,183,412 | ---- | C] () -- C:\Users\pip\Documents\DSCN3610.JPG
[2012/05/25 11:07:46 | 001,160,123 | ---- | C] () -- C:\Users\pip\Documents\DSCN3612.JPG
[2012/05/25 11:07:46 | 001,116,662 | ---- | C] () -- C:\Users\pip\Documents\DSCN3609.JPG
[2012/05/25 11:07:45 | 001,196,671 | ---- | C] () -- C:\Users\pip\Documents\DSCN3605.JPG
[2012/05/25 11:07:45 | 001,186,569 | ---- | C] () -- C:\Users\pip\Documents\DSCN3604.JPG
[2012/05/25 11:07:45 | 001,158,506 | ---- | C] () -- C:\Users\pip\Documents\DSCN3606.JPG
[2012/05/25 11:07:45 | 001,132,923 | ---- | C] () -- C:\Users\pip\Documents\DSCN3607.JPG
[2012/05/25 11:07:45 | 001,092,547 | ---- | C] () -- C:\Users\pip\Documents\DSCN3608.JPG
[2012/05/25 11:07:44 | 001,191,382 | ---- | C] () -- C:\Users\pip\Documents\DSCN3601.JPG
[2012/05/25 11:07:44 | 001,180,863 | ---- | C] () -- C:\Users\pip\Documents\DSCN3603.JPG
[2012/05/25 11:07:44 | 001,119,956 | ---- | C] () -- C:\Users\pip\Documents\DSCN3602.JPG
[2012/05/25 11:07:43 | 006,605,496 | ---- | C] () -- C:\Users\pip\Documents\DSCN3632.MOV
[2012/05/25 11:07:42 | 001,189,126 | ---- | C] () -- C:\Users\pip\Documents\DSCN3628.JPG
[2012/05/25 11:07:42 | 001,174,465 | ---- | C] () -- C:\Users\pip\Documents\DSCN3630.JPG
[2012/05/25 11:07:42 | 001,145,276 | ---- | C] () -- C:\Users\pip\Documents\DSCN3626.JPG
[2012/05/25 11:07:42 | 001,114,284 | ---- | C] () -- C:\Users\pip\Documents\DSCN3627.JPG
[2012/05/25 11:07:41 | 001,153,402 | ---- | C] () -- C:\Users\pip\Documents\DSCN3625.JPG
[2012/05/25 02:28:18 | 000,123,092 | ---- | C] () -- C:\Users\pip\Documents\freckles.JPG
[2012/05/25 02:15:26 | 001,108,063 | ---- | C] () -- C:\Users\pip\Documents\DSCN3644.JPG
[2012/05/25 02:15:26 | 000,031,401 | ---- | C] () -- C:\Users\pip\Documents\DSCN3643.JPG
[2012/05/25 02:15:25 | 001,227,281 | ---- | C] () -- C:\Users\pip\Documents\DSCN3636.JPG
[2012/05/25 02:15:25 | 001,114,582 | ---- | C] () -- C:\Users\pip\Documents\DSCN3638.JPG
[2012/05/25 02:15:25 | 001,050,909 | ---- | C] () -- C:\Users\pip\Documents\DSCN3634.JPG
[2012/05/25 02:15:25 | 000,832,367 | ---- | C] () -- C:\Users\pip\Documents\DSCN3642.JPG
[2012/05/25 02:15:25 | 000,435,737 | ---- | C] () -- C:\Users\pip\Documents\DSCN3640.JPG
[2012/05/24 17:59:26 | 000,054,133 | ---- | C] () -- C:\Users\pip\Documents\lati.jpg
[2012/05/22 10:01:38 | 002,201,642 | ---- | C] () -- C:\Users\pip\Documents\sweetness.JPG
[2012/05/22 09:58:59 | 001,209,190 | ---- | C] () -- C:\Users\pip\Documents\DSCN3589.JPG
[2012/05/22 09:58:59 | 001,125,803 | ---- | C] () -- C:\Users\pip\Documents\DSCN3590.JPG
[2012/05/22 09:58:58 | 001,213,206 | ---- | C] () -- C:\Users\pip\Documents\DSCN3586.JPG
[2012/05/22 09:58:58 | 001,186,927 | ---- | C] () -- C:\Users\pip\Documents\DSCN3584.JPG
[2012/05/22 09:58:58 | 001,177,845 | ---- | C] () -- C:\Users\pip\Documents\DSCN3588.JPG
[2012/05/22 09:58:58 | 001,119,383 | ---- | C] () -- C:\Users\pip\Documents\DSCN3587.JPG
[2012/05/22 09:58:58 | 001,085,324 | ---- | C] () -- C:\Users\pip\Documents\DSCN3585.JPG
[2012/05/22 09:58:57 | 001,207,068 | ---- | C] () -- C:\Users\pip\Documents\DSCN3583.JPG
[2012/05/22 09:58:57 | 001,181,979 | ---- | C] () -- C:\Users\pip\Documents\DSCN3600.JPG
[2012/05/22 09:58:57 | 001,161,095 | ---- | C] () -- C:\Users\pip\Documents\DSCN3598.JPG
[2012/05/22 09:58:57 | 001,156,998 | ---- | C] () -- C:\Users\pip\Documents\DSCN3599.JPG
[2012/05/22 09:58:56 | 001,174,801 | ---- | C] () -- C:\Users\pip\Documents\DSCN3594.JPG
[2012/05/22 09:58:56 | 001,126,615 | ---- | C] () -- C:\Users\pip\Documents\DSCN3595.JPG
[2012/05/22 09:58:56 | 001,114,224 | ---- | C] () -- C:\Users\pip\Documents\DSCN3596.JPG
[2012/05/22 09:58:56 | 001,100,990 | ---- | C] () -- C:\Users\pip\Documents\DSCN3597.JPG
[2012/05/22 09:58:55 | 001,187,841 | ---- | C] () -- C:\Users\pip\Documents\DSCN3593.JPG
[2012/05/22 09:58:55 | 001,170,057 | ---- | C] () -- C:\Users\pip\Documents\DSCN3592.JPG
[2012/05/22 09:58:55 | 001,105,170 | ---- | C] () -- C:\Users\pip\Documents\DSCN3591.JPG
[2012/05/18 09:51:38 | 002,283,690 | ---- | C] () -- C:\Users\pip\Documents\DSCN3582.JPG
[2012/05/16 17:22:43 | 000,017,408 | ---- | C] () -- C:\Users\pip\AppData\Local\WebpageIcons.db
[2012/05/16 17:17:55 | 000,152,233 | ---- | C] () -- C:\Windows\SysNative\drivers\klin.dat
[2012/05/16 17:17:55 | 000,107,177 | ---- | C] () -- C:\Windows\SysNative\drivers\klick.dat
[2012/05/16 05:39:17 | 001,292,425 | ---- | C] () -- C:\Users\pip\Documents\DSCN3580.JPG
[2012/05/16 05:39:16 | 001,224,112 | ---- | C] () -- C:\Users\pip\Documents\DSCN3576.JPG
[2012/05/16 05:39:16 | 001,185,478 | ---- | C] () -- C:\Users\pip\Documents\DSCN3578.JPG
[2012/05/16 05:39:16 | 001,163,397 | ---- | C] () -- C:\Users\pip\Documents\DSCN3577.JPG
[2012/05/16 05:39:16 | 001,130,539 | ---- | C] () -- C:\Users\pip\Documents\DSCN3579.JPG
[2012/05/16 05:39:15 | 001,196,962 | ---- | C] () -- C:\Users\pip\Documents\DSCN3575.JPG
[2012/05/16 04:50:27 | 000,005,255 | ---- | C] () -- C:\Users\pip\Documents\tozac2.rtf
[2012/05/14 14:23:45 | 000,001,104 | ---- | C] () -- C:\Users\pip\Documents\tozac=c.rtf
[2012/05/13 15:52:29 | 000,004,557 | ---- | C] () -- C:\Users\pip\Documents\sarafreak.rtf
[2012/05/13 04:18:08 | 000,023,269 | ---- | C] () -- C:\Users\pip\Documents\imvu.JPG
[2012/05/11 13:57:50 | 001,095,408 | ---- | C] () -- C:\Users\pip\Documents\cc.JPG
[2012/05/11 06:11:03 | 001,077,861 | ---- | C] () -- C:\Users\pip\Documents\DSCN3553.JPG
[2012/05/11 06:11:02 | 001,398,458 | ---- | C] () -- C:\Users\pip\Documents\DSCN3550.JPG
[2012/05/11 06:10:57 | 001,068,868 | ---- | C] () -- C:\Users\pip\Documents\DSCN3549.JPG
[2012/05/11 06:10:52 | 001,232,307 | ---- | C] () -- C:\Users\pip\Documents\DSCN3559.JPG
[2012/05/11 06:10:52 | 001,194,106 | ---- | C] () -- C:\Users\pip\Documents\DSCN3560.JPG
[2012/05/11 06:10:51 | 003,081,801 | ---- | C] () -- C:\Users\pip\Documents\DSCN3555.JPG
[2012/05/11 06:10:51 | 001,885,130 | ---- | C] () -- C:\Users\pip\Documents\DSCN3554.JPG
[2012/05/11 06:10:51 | 001,227,380 | ---- | C] () -- C:\Users\pip\Documents\DSCN3558.JPG
[2012/05/11 06:10:51 | 001,201,082 | ---- | C] () -- C:\Users\pip\Documents\DSCN3557.JPG
[2012/05/11 06:10:51 | 001,125,968 | ---- | C] () -- C:\Users\pip\Documents\DSCN3556.JPG
[2012/05/08 02:56:18 | 000,003,140 | ---- | C] () -- C:\Users\pip\Documents\yourloss.wlmp
[2012/05/05 23:27:08 | 001,078,483 | ---- | C] () -- C:\Users\pip\Documents\11.JPG
[2012/05/05 23:01:46 | 001,191,984 | ---- | C] () -- C:\Users\pip\Documents\DSCN3532.JPG
[2012/05/05 23:01:46 | 001,098,756 | ---- | C] () -- C:\Users\pip\Documents\DSCN3531.JPG
[2012/05/05 23:01:40 | 001,198,700 | ---- | C] () -- C:\Users\pip\Documents\DSCN3539.JPG
[2012/05/05 23:01:40 | 001,186,728 | ---- | C] () -- C:\Users\pip\Documents\DSCN3540.JPG
[2012/05/05 23:01:40 | 001,096,679 | ---- | C] () -- C:\Users\pip\Documents\DSCN3542.JPG
[2012/05/05 23:01:40 | 001,094,989 | ---- | C] () -- C:\Users\pip\Documents\DSCN3541.JPG
[2012/05/05 23:01:39 | 002,208,757 | ---- | C] () -- C:\Users\pip\Documents\DSCN3537.JPG
[2012/05/05 23:01:39 | 001,225,968 | ---- | C] () -- C:\Users\pip\Documents\DSCN3538.JPG
[2012/05/05 23:01:39 | 001,201,502 | ---- | C] () -- C:\Users\pip\Documents\DSCN3536.JPG
[2012/05/05 23:01:39 | 001,175,525 | ---- | C] () -- C:\Users\pip\Documents\DSCN3535.JPG
[2012/05/05 23:01:38 | 001,214,117 | ---- | C] () -- C:\Users\pip\Documents\DSCN3534.JPG
[2012/05/05 23:01:38 | 001,099,144 | ---- | C] () -- C:\Users\pip\Documents\DSCN3533.JPG
[2012/05/05 14:10:16 | 002,599,292 | ---- | C] () -- C:\Users\pip\Documents\DSCN3530.JPG
[2012/05/05 14:10:15 | 001,988,108 | ---- | C] () -- C:\Users\pip\Documents\DSCN3529.JPG
[2012/05/04 23:00:56 | 002,193,384 | ---- | C] () -- C:\Users\pip\Documents\DSCN3528.JPG
[2012/05/04 21:18:07 | 001,438,726 | ---- | C] () -- C:\Users\pip\Documents\DSCN3524.JPG
[2012/05/04 21:18:06 | 001,922,196 | ---- | C] () -- C:\Users\pip\Documents\DSCN3517.JPG
[2012/05/04 21:18:05 | 001,152,892 | ---- | C] () -- C:\Users\pip\Documents\DSCN3515.JPG
[2012/05/04 21:18:04 | 002,064,869 | ---- | C] () -- C:\Users\pip\Documents\DSCN3509.JPG
[2012/05/04 21:18:03 | 001,520,444 | ---- | C] () -- C:\Users\pip\Documents\DSCN3508.JPG
[2012/05/04 20:40:29 | 000,075,843 | ---- | C] () -- C:\Users\pip\Documents\k.jpg
[2012/05/04 19:48:46 | 002,205,268 | ---- | C] () -- C:\Users\pip\Documents\DSCN3485.JPG
[2012/05/04 19:48:46 | 001,915,981 | ---- | C] () -- C:\Users\pip\Documents\DSCN3488.JPG
[2012/05/04 19:48:45 | 001,986,652 | ---- | C] () -- C:\Users\pip\Documents\DSCN3483.JPG
[2012/05/04 19:48:45 | 001,956,729 | ---- | C] () -- C:\Users\pip\Documents\DSCN3484.JPG
[2012/05/04 19:48:44 | 002,065,366 | ---- | C] () -- C:\Users\pip\Documents\DSCN3477.JPG
[2012/05/04 19:48:44 | 002,003,992 | ---- | C] () -- C:\Users\pip\Documents\DSCN3476.JPG
[2012/05/04 19:48:44 | 001,185,536 | ---- | C] () -- C:\Users\pip\Documents\DSCN3478.JPG
[2012/05/04 19:48:43 | 002,273,143 | ---- | C] () -- C:\Users\pip\Documents\DSCN3473.JPG
[2012/05/04 19:48:43 | 001,184,122 | ---- | C] () -- C:\Users\pip\Documents\DSCN3472.JPG
[2012/05/04 19:48:43 | 001,098,211 | ---- | C] () -- C:\Users\pip\Documents\DSCN3474.JPG
[2012/05/04 19:48:40 | 001,571,956 | ---- | C] () -- C:\Users\pip\Documents\DSCN3507.JPG
[2012/05/04 19:48:39 | 001,528,482 | ---- | C] () -- C:\Users\pip\Documents\DSCN3505.JPG
[2012/05/04 19:48:39 | 001,414,290 | ---- | C] () -- C:\Users\pip\Documents\DSCN3506.JPG
[2012/05/04 19:48:39 | 001,093,885 | ---- | C] () -- C:\Users\pip\Documents\DSCN3504.JPG
[2012/05/04 19:48:38 | 002,190,246 | ---- | C] () -- C:\Users\pip\Documents\DSCN3499.JPG
[2012/05/04 19:48:38 | 002,160,833 | ---- | C] () -- C:\Users\pip\Documents\DSCN3500.JPG
[2012/05/04 19:48:38 | 002,117,755 | ---- | C] () -- C:\Users\pip\Documents\DSCN3498.JPG
[2012/05/04 19:48:38 | 001,894,094 | ---- | C] () -- C:\Users\pip\Documents\DSCN3501.JPG
[2012/05/04 19:48:37 | 002,464,466 | ---- | C] () -- C:\Users\pip\Documents\DSCN3494.JPG
[2012/05/04 19:48:37 | 002,324,481 | ---- | C] () -- C:\Users\pip\Documents\DSCN3495.JPG
[2012/05/04 19:48:37 | 002,006,673 | ---- | C] () -- C:\Users\pip\Documents\DSCN3497.JPG
[2012/05/04 19:48:36 | 002,851,815 | ---- | C] () -- C:\Users\pip\Documents\DSCN3493.JPG
[2012/05/04 07:22:35 | 002,388,523 | ---- | C] () -- C:\Users\pip\Documents\222.jpg
[2012/05/04 07:22:18 | 002,400,252 | ---- | C] () -- C:\Users\pip\Documents\22.jpg
[2012/05/04 07:14:54 | 001,986,010 | ---- | C] () -- C:\Users\pip\Documents\DSCN3457.JPG
[2012/05/04 07:14:50 | 002,174,454 | ---- | C] () -- C:\Users\pip\Documents\DSCN3456.JPG
[2012/05/04 07:14:46 | 001,135,392 | ---- | C] () -- C:\Users\pip\Documents\DSCN3469.JPG
[2012/05/04 07:14:46 | 001,121,024 | ---- | C] () -- C:\Users\pip\Documents\DSCN3466.JPG
[2012/05/04 07:14:46 | 001,026,918 | ---- | C] () -- C:\Users\pip\Documents\DSCN3470.JPG
[2012/05/04 07:14:42 | 000,228,342 | ---- | C] () -- C:\Users\pip\Documents\DSCN3471.JPG
[2012/05/02 19:47:00 | 001,830,809 | ---- | C] () -- C:\Users\pip\Documents\DSCN3460.JPG
[2012/05/02 19:47:00 | 001,087,577 | ---- | C] () -- C:\Users\pip\Documents\DSCN3461.JPG
[2012/05/02 19:46:59 | 001,079,354 | ---- | C] () -- C:\Users\pip\Documents\DSCN3459.JPG
[2012/05/02 19:46:53 | 001,211,073 | ---- | C] () -- C:\Users\pip\Documents\DSCN3458.JPG
[2012/05/01 23:22:25 | 001,163,626 | ---- | C] () -- C:\Users\pip\Documents\DSCN3440.JPG
[2012/05/01 23:22:25 | 001,115,816 | ---- | C] () -- C:\Users\pip\Documents\DSCN3442.JPG
[2012/05/01 23:22:25 | 000,906,371 | ---- | C] () -- C:\Users\pip\Documents\DSCN3441.JPG
[2012/05/01 23:22:22 | 001,123,995 | ---- | C] () -- C:\Users\pip\Documents\DSCN3453.JPG
[2012/05/01 23:22:22 | 001,086,416 | ---- | C] () -- C:\Users\pip\Documents\DSCN3454.JPG
[2012/05/01 23:22:21 | 001,612,563 | ---- | C] () -- C:\Users\pip\Documents\DSCN3444.JPG
[2012/05/01 23:22:21 | 001,162,777 | ---- | C] () -- C:\Users\pip\Documents\DSCN3447.JPG
[2012/05/01 23:22:21 | 001,120,611 | ---- | C] () -- C:\Users\pip\Documents\DSCN3445.JPG
[2012/05/01 23:22:21 | 001,056,333 | ---- | C] () -- C:\Users\pip\Documents\DSCN3446.JPG
[2012/05/01 23:22:21 | 001,032,952 | ---- | C] () -- C:\Users\pip\Documents\DSCN3450.JPG
[2012/05/01 23:22:20 | 001,138,454 | ---- | C] () -- C:\Users\pip\Documents\DSCN3443.JPG
[2012/04/30 12:48:56 | 002,596,537 | ---- | C] () -- C:\Users\pip\Documents\boatandbirds.JPG
[2012/04/30 12:32:15 | 001,764,473 | ---- | C] () -- C:\Users\pip\Documents\DSCN3439.JPG
[2012/04/30 12:32:15 | 001,157,262 | ---- | C] () -- C:\Users\pip\Documents\DSCN3438.JPG
[2012/04/30 12:32:14 | 001,207,994 | ---- | C] () -- C:\Users\pip\Documents\DSCN3437.JPG
[2012/04/30 02:17:40 | 000,002,257 | ---- | C] () -- C:\Users\pip\Documents\oooooo.rtf
[2012/04/30 01:08:09 | 001,175,780 | ---- | C] () -- C:\Users\pip\Documents\DSCN3405.JPG
[2012/04/30 01:08:09 | 001,146,121 | ---- | C] () -- C:\Users\pip\Documents\DSCN3404.JPG
[2012/04/30 01:08:08 | 001,196,994 | ---- | C] () -- C:\Users\pip\Documents\DSCN3401.JPG
[2012/04/30 01:08:08 | 001,187,771 | ---- | C] () -- C:\Users\pip\Documents\DSCN3399.JPG
[2012/04/30 01:08:08 | 001,181,644 | ---- | C] () -- C:\Users\pip\Documents\DSCN3403.JPG
[2012/04/30 01:08:08 | 001,136,995 | ---- | C] () -- C:\Users\pip\Documents\DSCN3402.JPG
[2012/04/30 01:08:08 | 001,125,734 | ---- | C] () -- C:\Users\pip\Documents\DSCN3400.JPG
[2012/04/30 01:08:07 | 001,156,986 | ---- | C] () -- C:\Users\pip\Documents\DSCN3397.JPG
[2012/04/30 01:08:07 | 001,124,928 | ---- | C] () -- C:\Users\pip\Documents\DSCN3395.JPG
[2012/04/30 01:08:07 | 001,086,378 | ---- | C] () -- C:\Users\pip\Documents\DSCN3398.JPG
[2012/04/30 01:08:07 | 001,085,802 | ---- | C] () -- C:\Users\pip\Documents\DSCN3396.JPG
[2012/04/30 01:08:06 | 001,179,719 | ---- | C] () -- C:\Users\pip\Documents\DSCN3392.JPG
[2012/04/30 01:08:06 | 001,157,831 | ---- | C] () -- C:\Users\pip\Documents\DSCN3393.JPG
[2012/04/30 01:08:06 | 001,142,830 | ---- | C] () -- C:\Users\pip\Documents\DSCN3390.JPG
[2012/04/30 01:08:06 | 001,140,101 | ---- | C] () -- C:\Users\pip\Documents\DSCN3391.JPG
[2012/04/30 01:08:06 | 001,113,718 | ---- | C] () -- C:\Users\pip\Documents\DSCN3394.JPG
[2012/04/30 01:08:05 | 001,138,370 | ---- | C] () -- C:\Users\pip\Documents\DSCN3433.JPG
[2012/04/30 01:08:05 | 001,113,903 | ---- | C] () -- C:\Users\pip\Documents\DSCN3432.JPG
[2012/04/30 01:08:05 | 001,109,637 | ---- | C] () -- C:\Users\pip\Documents\DSCN3434.JPG
[2012/04/30 01:08:05 | 001,102,293 | ---- | C] () -- C:\Users\pip\Documents\DSCN3436.JPG
[2012/04/30 01:08:05 | 001,098,449 | ---- | C] () -- C:\Users\pip\Documents\DSCN3435.JPG
[2012/04/30 01:08:04 | 001,158,065 | ---- | C] () -- C:\Users\pip\Documents\DSCN3429.JPG
[2012/04/30 01:08:04 | 001,153,033 | ---- | C] () -- C:\Users\pip\Documents\DSCN3427.JPG
[2012/04/30 01:08:04 | 001,144,880 | ---- | C] () -- C:\Users\pip\Documents\DSCN3430.JPG
[2012/04/30 01:08:04 | 001,129,072 | ---- | C] () -- C:\Users\pip\Documents\DSCN3431.JPG
[2012/04/30 01:08:04 | 001,114,145 | ---- | C] () -- C:\Users\pip\Documents\DSCN3428.JPG
[2012/04/30 01:08:03 | 001,210,968 | ---- | C] () -- C:\Users\pip\Documents\DSCN3426.JPG
[2012/04/30 01:08:03 | 001,151,734 | ---- | C] () -- C:\Users\pip\Documents\DSCN3423.JPG
[2012/04/30 01:08:03 | 001,144,571 | ---- | C] () -- C:\Users\pip\Documents\DSCN3425.JPG
[2012/04/30 01:08:03 | 001,137,793 | ---- | C] () -- C:\Users\pip\Documents\DSCN3424.JPG
[2012/04/30 01:08:02 | 001,187,622 | ---- | C] () -- C:\Users\pip\Documents\DSCN3422.JPG
[2012/04/30 01:08:02 | 001,180,965 | ---- | C] () -- C:\Users\pip\Documents\DSCN3421.JPG
[2012/04/30 01:08:02 | 001,126,117 | ---- | C] () -- C:\Users\pip\Documents\DSCN3419.JPG
[2012/04/30 01:08:02 | 001,088,297 | ---- | C] () -- C:\Users\pip\Documents\DSCN3420.JPG
[2012/04/30 01:08:01 | 001,208,461 | ---- | C] () -- C:\Users\pip\Documents\DSCN3414.JPG
[2012/04/30 01:08:01 | 001,190,579 | ---- | C] () -- C:\Users\pip\Documents\DSCN3417.JPG
[2012/04/30 01:08:01 | 001,188,967 | ---- | C] () -- C:\Users\pip\Documents\DSCN3416.JPG
[2012/04/30 01:08:01 | 001,159,339 | ---- | C] () -- C:\Users\pip\Documents\DSCN3415.JPG
[2012/04/30 01:08:01 | 001,151,573 | ---- | C] () -- C:\Users\pip\Documents\DSCN3418.JPG
[2012/04/30 01:08:00 | 001,166,740 | ---- | C] () -- C:\Users\pip\Documents\DSCN3412.JPG
[2012/04/30 01:08:00 | 001,132,190 | ---- | C] () -- C:\Users\pip\Documents\DSCN3411.JPG
[2012/04/30 01:08:00 | 001,106,545 | ---- | C] () -- C:\Users\pip\Documents\DSCN3413.JPG
[2012/04/30 01:07:59 | 001,183,132 | ---- | C] () -- C:\Users\pip\Documents\DSCN3406.JPG
[2012/04/30 01:07:59 | 001,179,697 | ---- | C] () -- C:\Users\pip\Documents\DSCN3410.JPG
[2012/04/30 01:07:59 | 001,117,215 | ---- | C] () -- C:\Users\pip\Documents\DSCN3409.JPG
[2012/04/30 01:07:59 | 001,107,322 | ---- | C] () -- C:\Users\pip\Documents\DSCN3407.JPG
[2012/04/28 19:52:56 | 001,124,863 | ---- | C] () -- C:\Users\pip\Documents\DSCN3384.JPG
[2012/04/28 19:52:56 | 001,104,630 | ---- | C] () -- C:\Users\pip\Documents\DSCN3388.JPG
[2012/04/28 19:52:56 | 001,081,846 | ---- | C] () -- C:\Users\pip\Documents\DSCN3386.JPG
[2012/04/28 19:52:56 | 001,071,832 | ---- | C] () -- C:\Users\pip\Documents\DSCN3387.JPG
[2012/04/28 19:52:56 | 001,042,183 | ---- | C] () -- C:\Users\pip\Documents\DSCN3385.JPG
[2012/04/28 19:52:55 | 001,289,635 | ---- | C] () -- C:\Users\pip\Documents\DSCN3379.JPG
[2012/04/28 19:52:55 | 001,193,965 | ---- | C] () -- C:\Users\pip\Documents\DSCN3383.JPG
[2012/04/28 19:52:55 | 001,157,089 | ---- | C] () -- C:\Users\pip\Documents\DSCN3381.JPG
[2012/04/28 19:52:55 | 001,150,016 | ---- | C] () -- C:\Users\pip\Documents\DSCN3382.JPG
[2012/04/28 19:52:55 | 001,106,447 | ---- | C] () -- C:\Users\pip\Documents\DSCN3380.JPG
[2012/04/28 19:52:54 | 001,186,947 | ---- | C] () -- C:\Users\pip\Documents\DSCN3377.JPG
[2012/04/28 19:52:54 | 001,176,685 | ---- | C] () -- C:\Users\pip\Documents\DSCN3378.JPG
[2012/04/28 19:25:31 | 001,204,383 | ---- | C] () -- C:\Users\pip\Documents\DSCN3375.JPG
[2012/04/28 19:25:31 | 001,190,683 | ---- | C] () -- C:\Users\pip\Documents\DSCN3376.JPG
[2012/04/28 19:25:30 | 001,185,876 | ---- | C] () -- C:\Users\pip\Documents\DSCN3370.JPG
[2012/04/28 19:25:30 | 001,182,398 | ---- | C] () -- C:\Users\pip\Documents\DSCN3371.JPG
[2012/04/28 19:25:30 | 001,176,244 | ---- | C] () -- C:\Users\pip\Documents\DSCN3373.JPG
[2012/04/28 19:25:30 | 001,163,375 | ---- | C] () -- C:\Users\pip\Documents\DSCN3374.JPG
[2012/04/28 19:25:30 | 001,161,660 | ---- | C] () -- C:\Users\pip\Documents\DSCN3372.JPG
[2012/04/28 19:25:29 | 001,188,161 | ---- | C] () -- C:\Users\pip\Documents\DSCN3369.JPG
[2012/04/28 19:25:29 | 001,178,538 | ---- | C] () -- C:\Users\pip\Documents\DSCN3367.JPG
[2012/04/28 19:25:29 | 001,105,580 | ---- | C] () -- C:\Users\pip\Documents\DSCN3368.JPG
[2012/04/28 19:25:29 | 001,090,634 | ---- | C] () -- C:\Users\pip\Documents\DSCN3366.JPG
[2012/04/28 19:25:28 | 001,234,038 | ---- | C] () -- C:\Users\pip\Documents\DSCN3365.JPG
[2012/04/28 19:25:28 | 001,206,956 | ---- | C] () -- C:\Users\pip\Documents\DSCN3364.JPG
[2012/04/28 19:25:28 | 001,163,509 | ---- | C] () -- C:\Users\pip\Documents\DSCN3363.JPG
[2012/04/28 19:25:28 | 001,161,363 | ---- | C] () -- C:\Users\pip\Documents\DSCN3362.JPG
[2012/04/26 20:08:17 | 000,330,378 | ---- | C] () -- C:\Users\pip\Documents\heart.JPG
[2012/04/26 18:02:59 | 001,752,594 | ---- | C] () -- C:\Users\pip\Documents\eck.jpg
[2012/04/26 17:46:51 | 002,442,694 | ---- | C] () -- C:\Users\pip\Documents\DSCN3300.JPG
[2012/04/26 17:46:50 | 001,752,845 | ---- | C] () -- C:\Users\pip\Documents\DSCN3296.JPG
[2012/04/26 17:46:50 | 001,518,794 | ---- | C] () -- C:\Users\pip\Documents\DSCN3299.JPG
[2012/04/26 17:46:50 | 001,205,627 | ---- | C] () -- C:\Users\pip\Documents\DSCN3298.JPG
[2012/04/26 17:46:50 | 001,074,720 | ---- | C] () -- C:\Users\pip\Documents\DSCN3297.JPG
[2012/04/26 17:46:49 | 002,665,156 | ---- | C] () -- C:\Users\pip\Documents\DSCN3293.JPG
[2012/04/26 17:46:49 | 001,522,205 | ---- | C] () -- C:\Users\pip\Documents\DSCN3294.JPG
[2012/04/26 17:46:49 | 001,354,965 | ---- | C] () -- C:\Users\pip\Documents\DSCN3295.JPG
[2012/04/26 17:46:49 | 001,167,419 | ---- | C] () -- C:\Users\pip\Documents\DSCN3287.JPG
[2012/04/26 17:46:49 | 001,116,451 | ---- | C] () -- C:\Users\pip\Documents\DSCN3292.JPG
[2012/04/26 17:46:48 | 001,111,331 | ---- | C] () -- C:\Users\pip\Documents\DSCN3285.JPG
[2012/04/26 17:46:44 | 001,236,867 | ---- | C] () -- C:\Users\pip\Documents\DSCN3244.JPG
[2012/04/26 17:46:43 | 001,217,244 | ---- | C] () -- C:\Users\pip\Documents\DSCN3242.JPG
[2012/04/26 17:46:43 | 001,186,550 | ---- | C] () -- C:\Users\pip\Documents\DSCN3243.JPG
[2012/04/26 17:46:43 | 001,103,931 | ---- | C] () -- C:\Users\pip\Documents\DSCN3237.JPG
[2012/04/26 17:46:43 | 001,095,908 | ---- | C] () -- C:\Users\pip\Documents\DSCN3240.JPG
[2012/04/26 17:46:42 | 002,958,401 | ---- | C] () -- C:\Users\pip\Documents\DSCN3339.JPG
[2012/04/26 17:46:42 | 002,914,734 | ---- | C] () -- C:\Users\pip\Documents\DSCN3340.JPG
[2012/04/26 17:46:42 | 001,218,982 | ---- | C] () -- C:\Users\pip\Documents\DSCN3338.JPG
[2012/04/26 17:46:42 | 001,157,773 | ---- | C] () -- C:\Users\pip\Documents\DSCN3337.JPG
[2012/04/26 17:46:42 | 001,141,107 | ---- | C] () -- C:\Users\pip\Documents\DSCN3341.JPG
[2012/04/26 17:46:41 | 002,760,242 | ---- | C] () -- C:\Users\pip\Documents\DSCN3335.JPG
[2012/04/26 17:46:41 | 001,214,105 | ---- | C] () -- C:\Users\pip\Documents\DSCN3333.JPG
[2012/04/26 17:46:41 | 001,174,922 | ---- | C] () -- C:\Users\pip\Documents\DSCN3334.JPG
[2012/04/26 17:46:41 | 001,163,665 | ---- | C] () -- C:\Users\pip\Documents\DSCN3336.JPG
[2012/04/26 17:46:40 | 002,120,289 | ---- | C] () -- C:\Users\pip\Documents\DSCN3329.JPG
[2012/04/26 17:46:40 | 001,217,385 | ---- | C] () -- C:\Users\pip\Documents\DSCN3332.JPG
[2012/04/26 17:46:40 | 001,211,318 | ---- | C] () -- C:\Users\pip\Documents\DSCN3330.JPG
[2012/04/26 17:46:40 | 001,201,774 | ---- | C] () -- C:\Users\pip\Documents\DSCN3328.JPG
[2012/04/26 17:46:40 | 001,151,113 | ---- | C] () -- C:\Users\pip\Documents\DSCN3331.JPG
[2012/04/26 17:46:39 | 002,936,711 | ---- | C] () -- C:\Users\pip\Documents\DSCN3326.JPG
[2012/04/26 17:46:39 | 002,846,937 | ---- | C] () -- C:\Users\pip\Documents\DSCN3327.JPG
[2012/04/26 17:46:39 | 002,471,857 | ---- | C] () -- C:\Users\pip\Documents\DSCN3324.JPG
[2012/04/26 17:46:39 | 002,454,350 | ---- | C] () -- C:\Users\pip\Documents\DSCN3325.JPG
[2012/04/26 17:46:38 | 002,396,174 | ---- | C] () -- C:\Users\pip\Documents\DSCN3322.JPG
[2012/04/26 17:46:38 | 002,329,957 | ---- | C] () -- C:\Users\pip\Documents\DSCN3320.JPG
[2012/04/26 17:46:38 | 001,292,938 | ---- | C] () -- C:\Users\pip\Documents\DSCN3321.JPG
[2012/04/26 17:46:38 | 001,178,798 | ---- | C] () -- C:\Users\pip\Documents\DSCN3323.JPG
[2012/04/26 17:46:37 | 001,184,358 | ---- | C] () -- C:\Users\pip\Documents\DSCN3314.JPG
[2012/04/26 17:46:37 | 001,179,146 | ---- | C] () -- C:\Users\pip\Documents\DSCN3316.JPG
[2012/04/26 17:46:37 | 001,169,017 | ---- | C] () -- C:\Users\pip\Documents\DSCN3303.JPG
[2012/04/26 17:46:37 | 001,086,584 | ---- | C] () -- C:\Users\pip\Documents\DSCN3307.JPG
[2012/04/26 17:46:36 | 002,233,690 | ---- | C] () -- C:\Users\pip\Documents\DSCN3301.JPG
[2012/04/26 17:46:26 | 001,182,775 | ---- | C] () -- C:\Users\pip\Documents\DSCN3235.JPG
[2012/04/26 17:46:26 | 001,148,772 | ---- | C] () -- C:\Users\pip\Documents\DSCN3236.JPG
[2012/03/20 04:20:20 | 000,000,064 | ---- | C] () -- C:\Windows\SysWow64\rp_stats.dat
[2012/03/20 04:20:20 | 000,000,044 | ---- | C] () -- C:\Windows\SysWow64\rp_rules.dat
[2012/03/08 23:15:45 | 000,206,208 | ---- | C] () -- C:\Windows\PLFSetI.exe
[2012/03/08 23:15:45 | 000,054,520 | ---- | C] () -- C:\Windows\AutosetFrequency.exe
[2012/03/08 23:15:45 | 000,000,637 | ---- | C] () -- C:\Windows\AutoSetFrequency.ini
[2012/03/08 23:15:45 | 000,000,378 | ---- | C] () -- C:\Windows\PidList.ini
[2012/03/08 23:05:19 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin

< End of report >


extras. txt :
OTL Extras logfile created on: 26/05/2012 05:38:30 - Run 1
OTL by OldTimer - Version 3.2.43.1 Folder = C:\Users\pip\Downloads
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000809 | Country: United Kingdom | Language: ENG | Date Format: dd/MM/yyyy

2.75 Gb Total Physical Memory | 1.24 Gb Available Physical Memory | 45.32% Memory free
5.49 Gb Paging File | 3.66 Gb Available in Paging File | 66.69% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 297.99 Gb Total Space | 245.84 Gb Free Space | 82.50% Space Free | Partition Type: NTFS
Drive D: | 100.00 Mb Total Space | 70.37 Mb Free Space | 70.37% Space Free | Partition Type: NTFS

Computer Name: BELLA | User Name: pip | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)

[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0

========== Authorized Applications List ==========


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{077E5905-7D46-4466-9CC3-F78143A5FFD4}" = lport=2869 | protocol=6 | dir=in | app=system |
"{73F5C86E-8CE2-4534-AD5F-B82679794018}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) |
"{C9598FD8-6039-45D8-87A7-3C158563AF17}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) |
"{DFB6E3DB-6C92-4ED6-9DAF-2E81A9622892}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{18435F69-B11A-46BD-AAC8-8265DAC5DEC4}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\onenote.exe |
"{40356E91-909A-4D64-AB9C-6F846DD2BF63}" = dir=in | app=c:\program files (x86)\windows live\messenger\msnmsgr.exe |
"{4DCA47DF-4C0A-4524-9B48-D2215E983923}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office12\onenote.exe |
"{6C7AEBEE-3E2B-4BA4-AB3D-5CEF5A9A2F32}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{CB0D3247-7457-4A28-871C-693AD35D80B4}" = dir=in | app=c:\program files (x86)\windows live\sync\windowslivesync.exe |
"{F5BC663C-D580-4342-AD88-80F2916D7B18}" = dir=in | app=c:\program files (x86)\windows live\mesh\moe.exe |
"{F8623984-5A59-4B31-A5E9-1D14F7008E84}" = dir=in | app=c:\program files (x86)\windows live\contacts\wlcomm.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{027E5FAB-1476-4C59-AAB4-32EF28520399}" = Windows Live Language Selector
"{02A5BD31-16AC-45DF-BE9F-A3167BC4AFB2}" = Windows Live Family Safety
"{0D87AE67-14EB-4C10-88A5-DA6C3181EB18}" = Windows Live Family Safety
"{1ACC8FFB-9D84-4C05-A4DE-D28A9BC91698}" = Windows Live ID Sign-in Assistant
"{3B20226B-63ED-B863-B224-FE40401B21CA}" = ATI Catalyst Install Manager
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{656DEEDE-F6AC-47CA-A568-A1B4E34B5760}" = Windows Live Remote Service Resources
"{847B0532-55E3-4AAF-8D7B-E3A1A7CD17E5}" = Windows Live Remote Client Resources
"{90120000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2007
"{90120000-002A-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (English) 2007
"{90120000-0116-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2007
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{DA54F80E-261C-41A2-A855-549A144F2F59}" = Windows Live MIME IFilter
"{DF6D988A-EEA0-4277-AAB8-158E086E439B}" = Windows Live Remote Client
"{E02A6548-6FDE-40E2-8ED9-119D7D7E641F}" = Windows Live Remote Service
"{EEB06ECB-38F0-68CD-B215-94D50914C0F8}" = ccc-utility64
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin 64-bit
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"SynTPDeinstKey" = Synaptics Pointing Device Driver

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{01868E82-DA4F-BFF8-45CF-9B1CAE8810D9}" = Catalyst Control Center Core Implementation
"{01CC7DB7-909B-E630-A44A-8118036CAF3C}" = CCC Help Korean
"{07367450-E3E6-B4A1-E19C-A07429026680}" = CCC Help Swedish
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{17DFE37C-064E-4834-AD8F-A4B2B4DF68F8}" = Adobe Photoshop Elements 8.0
"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer
"{19BA08F7-C728-469C-8A35-BFBD3633BE08}" = Windows Live Movie Maker
"{1C42AA63-B354-56AF-69CA-FA73285368BE}" = CCC Help German
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update
"{1FFDACFC-898C-FC99-0140-AE2FC18B710E}" = Catalyst Control Center Graphics Full New
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{20400DBD-E6DB-45B8-9B6B-1DD7033818EC}" = Nero InfoTool Help
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{2348B586-C9AE-46CE-936C-A68E9426E214}" = Nero StartSmart Help
"{268E2A87-470B-118B-B3AD-6F2615B86623}" = CCC Help Greek
"{287ECFA4-719A-2143-A09B-D6A12DE54E40}" = Acrobat.com
"{28C2DED6-325B-4CC7-983A-1777C8F7FBAB}" = RealUpgrade 1.1
"{2902F983-B4C1-44BA-B85D-5C6D52E2C441}" = Windows Live Mesh ActiveX Control for Remote Connections
"{2A3FC24C-6EC0-4519-A52B-FDA4EA9B2D24}" = Windows Live Messenger
"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
"{33CF58F5-48D8-4575-83D6-96F574E4D83A}" = Nero DriveSpeed
"{34F4D9A4-42C2-4348-BEF4-E553C84549E7}" = Windows Live Photo Gallery
"{3601754A-C72B-E4B3-CE39-78CCD0B58DC9}" = CCC Help Russian
"{3A69B28B-6E44-E512-C395-EEDCB5BCB485}" = CCC Help Danish
"{3BA616F8-F969-4DE7-0C85-35BE954DDB8A}" = CCC Help Hungarian
"{3DB0448D-AD82-4923-B305-D001E521A964}" = Packard Bell Power Management
"{3EED6569-D845-F8D1-9648-84729711590E}" = CCC Help Italian
"{449CE12D-E2C7-4B97-B19E-55D163EA9435}" = Bing Bar
"{45E557D6-2271-4F13-8101-C620B4285AB0}" = Kaspersky Internet Security 2012
"{4A41156A-0669-F7B5-B24C-5E25C69F1E68}" = CCC Help Turkish
"{4D43D635-6FDA-4FA5-AA9B-23CF73D058EA}" = Nero StartSmart OEM
"{50816F92-1652-4A7C-B9BC-48F682742C4B}" = Messenger Companion
"{5449FB4F-1802-4D5B-A6D8-087DB1142147}" = Realtek HDMI Audio Driver for ATI
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{579684A4-DDD5-4CA3-9EA8-7BE7D9593DB4}" = Windows Live UX Platform Language Pack
"{595A3116-40BB-4E0F-A2E8-D7951DA56270}" = NeroExpress
"{63ADFC07-D92A-670C-3826-BB0C9CC41D8A}" = CCC Help Polish
"{6488561D-83C8-6987-6163-744E60680139}" = CCC Help Japanese
"{64EF903E-D00A-414C-94A4-FBA368FFCDC9}" = Packard Bell Social Networks
"{67E03279-F703-408F-B4BF-46B5FC8D70CD}" = Microsoft Works
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{69CA5A5F-7541-5216-6433-DE69E4245116}" = Catalyst Control Center Graphics Light
"{69F214C9-507D-7EB5-FF08-926CFD0D5EC6}" = Catalyst Control Center Localization All
"{6D9021DC-CF1B-4148-8C80-6D8E8A8A33EB}" = Video Web Camera
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{72B776E5-4530-4C4B-9453-751DF87D9D93}" = Backup Manager Basic
"{762CB899-DF14-EB84-78F5-888C83AA7DC3}" = Catalyst Control Center Graphics Previews Common
"{7748AC8C-18E3-43BB-959B-088FAEA16FB2}" = Nero StartSmart
"{7770E71B-2D43-4800-9CB3-5B6CAAEBEBEA}" = RealNetworks - Microsoft Visual C++ 2008 Runtime
"{78A96B4C-A643-4D0F-98C2-A8E16A6669F9}" = Windows Live Messenger Companion Core
"{7F811A54-5A09-4579-90E1-C93498E230D9}" = Packard Bell Recovery Management
"{83202942-84B3-4C50-8622-B8C0AA2D2885}" = Nero Express Help
"{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform
"{83E4C065-91B9-20DD-74DA-90A71242CE18}" = CCC Help Norwegian
"{869200DB-287A-4DC0-B02B-2B6787FBCD4C}" = Nero DiscSpeed
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8AEAE107-B186-4EA8-5F84-3AAA3158FEB1}" = CCC Help Chinese Standard
"{8C6D6116-B724-4810-8F2D-D047E6B7D68E}" = Mesh Runtime
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{8ee45d5d-1457-4038-92ac-099af5b2ea86}" = Nero 9 Essentials
"{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007
"{90120000-0016-0409-0000-0000000FF1CE}_HOMESTUDENTR_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007
"{90120000-0018-0409-0000-0000000FF1CE}_HOMESTUDENTR_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007
"{90120000-001B-0409-0000-0000000FF1CE}_HOMESTUDENTR_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_HOMESTUDENTR_{71F055E8-E2C6-4214-BB3D-BFE03561B89E}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}_HOMESTUDENTR_{2314F9A1-126F-45CC-8A5E-DFAF866F3FBC}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-0020-0409-0000-0000000FF1CE}" = Compatibility Pack for the 2007 Office system
"{90120000-002A-0000-1000-0000000FF1CE}_HOMESTUDENTR_{664655D8-B9BB-455D-8A58-7EAF7B0B2862}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-002A-0409-1000-0000000FF1CE}_HOMESTUDENTR_{98333358-268C-4164-B6D4-C96DF5153727}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}_HOMESTUDENTR_{98333358-268C-4164-B6D4-C96DF5153727}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2007
"{90120000-00A1-0409-0000-0000000FF1CE}_HOMESTUDENTR_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007
"{90120000-0115-0409-0000-0000000FF1CE}_HOMESTUDENTR_{98333358-268C-4164-B6D4-C96DF5153727}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0116-0409-1000-0000000FF1CE}_HOMESTUDENTR_{98333358-268C-4164-B6D4-C96DF5153727}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
"{91120000-002F-0000-0000-0000000FF1CE}" = Microsoft Office Home and Student 2007
"{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
"{932D0FC7-6DF1-4136-A2EC-166E8DEFD6A4}" = Ad-Aware
"{95120000-00AF-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint Viewer 2007 (English)
"{96AE7E41-E34E-47D0-AC07-1091A8127911}" = Realtek USB 2.0 Card Reader
"{975B24AC-8CB7-B4E1-E666-37964657576E}" = CCC Help Chinese Traditional
"{987B04C4-B5AC-4AD6-A7E9-8D681085B850}" = AMD USB Filter Driver
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
"{A0C91188-C88F-4E86-93E6-CD7C9A266649}" = Windows Live Mesh
"{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR
"{A45B7A40-694C-BAB8-EE69-4240ADFEA1FF}" = CCC Help Finnish
"{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer
"{A8F2089B-1F79-4BF6-B385-A2C2B0B9A74D}" = ImagXpress
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
"{AAF454FC-82CA-4F29-AB31-6A109485E76E}" = Windows Live Writer
"{AC76BA86-7AD7-FFFF-7B44-A91000000001}" = Adobe Reader 9.5.1 MUI
"{AD768FF7-E329-886C-D88E-585F26BB8738}" = CCC Help Dutch
"{B10914FD-8812-47A4-85A1-50FCDE7F1F33}" = Windows Live Sync
"{B2EC4A38-B545-4A00-8214-13FE0E915E6D}" = Advertising Center
"{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Skype Click to Call
"{B8F5BACE-194E-0203-023E-2FFEF68EE290}" = CCC Help English
"{BD5CA0DA-71AD-43DA-B19E-6EEE0C9ADC9A}" = Nero ControlCenter
"{C450D07C-3914-5481-A068-29975DA5C596}" = CCC Help French
"{C57BCDE1-7CB9-467D-B3BA-7E119916CDC1}" = Norton Online Backup
"{C66824E4-CBB3-4851-BB3F-E8CFD6350923}" = Windows Live Mail
"{C81A2FE0-3574-00A9-CED4-BDAA334CBE8E}" = Nero Online Upgrade
"{C9165CF3-A14D-A281-B62E-37312AA9E63D}" = CCC Help Spanish
"{CC019E3F-59D2-4486-8D4B-878105B62A71}" = Nero DiscSpeed Help
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{D0B44725-3666-492D-BEF6-587A14BD9BD9}" = MSVCRT_amd64
"{D436F577-1695-4D2F-8B44-AC76C99E0002}" = Windows Live Photo Common
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{D4E16961-E6FA-4689-AD09-3DB7E5770167}" = Catalyst Control Center InstallProxy
"{D6B1E149-790E-3B60-07F9-07A40ECAFBA0}" = Catalyst Control Center Graphics Full Existing
"{DBF91CC3-41F6-0D99-3D2D-686C59865652}" = ccc-core-static
"{DD49AC0F-E08A-F77D-AB38-2EE9CD5D8F0B}" = CCC Help Thai
"{DDC8BDEE-DCAC-404D-8257-3E8D4B782467}" = Windows Live Writer Resources
"{DECDCB7C-58CC-4865-91AF-627F9798FE48}" = Windows Live Mesh
"{DECEFADB-0486-6252-C312-49DDAC71DF33}" = CCC Help Portuguese
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E0B19DF7-B1C7-4937-82C4-0E4B1E346965}" = eBay Worldwide
"{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}" = Microsoft Office Suite Activation Assistant
"{E5B21F11-6933-4E0B-A25C-7963E3C07D11}" = Windows Live Messenger
"{E5C7D048-F9B4-4219-B323-8BDB01A2563D}" = Nero DriveSpeed Help
"{E8A80433-302B-4FF1-815D-FCC8EAC482FF}" = Nero Installer
"{EE171732-BEB4-4576-887D-CB62727F01CA}" = Packard Bell Updater
"{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}" = Skype™ 5.8
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F4041DCE-3FE1-4E18-8A9E-9DE65231EE36}" = Nero ControlCenter
"{F7425F93-2071-A946-008A-6ACA60B43FB2}" = CCC Help Czech
"{FBCDFD61-7DCF-4E71-9226-873BA0053139}" = Nero InfoTool
"{FC635D8E-FFBA-4B2C-BE68-A37D56BDFB74}" = Catalyst Control Center - Branding
"{FE044230-9CA5-43F7-9B58-5AC5A28A1F33}" = Windows Live Essentials
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Adobe Photoshop Elements 8.0" = Adobe Photoshop Elements 8.0
"Google Chrome" = Google Chrome
"HOMESTUDENTR" = Microsoft Office Home and Student 2007
"Identity Card" = Identity Card
"InstallShield_{64EF903E-D00A-414C-94A4-FBA368FFCDC9}" = Packard Bell Social Networks
"InstallShield_{72B776E5-4530-4C4B-9453-751DF87D9D93}" = Packard Bell MyBackup
"InstallWIX_{45E557D6-2271-4F13-8101-C620B4285AB0}" = Kaspersky Internet Security 2012
"LManager" = Launch Manager
"Metaboli" = Metaboli
"Mozilla Firefox 12.0 (x86 en-GB)" = Mozilla Firefox 12.0 (x86 en-GB)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"Packard Bell Game Console" = Packard Bell Game Console
"Packard Bell InfoCentre" = Packard Bell InfoCentre
"Packard Bell Registration" = Packard Bell Registration
"Packard Bell Screensaver" = Packard Bell ScreenSaver
"Packard Bell Welcome Center" = Welcome Center
"PhotoScape" = PhotoScape
"RealPlayer 15.0" = RealPlayer
"WildTangent packardbell Master Uninstall" = Packard Bell Games
"WinLiveSuite" = Windows Live Essentials
"WT078791" = Bejeweled 2 Deluxe
"WT078806" = Insaniquarium Deluxe
"WT078833" = Zuma Deluxe
"WT078960" = Blasterball 3
"WT078964" = Bob the Builder Can-Do-Zoo
"WT079020" = Faerie Solitaire
"WT079024" = FATE - The Traitor Soul
"WT079064" = Jewel Quest
"WT079068" = Jewel Quest Solitaire 3
"WT079108" = Penguins!
"WT079116" = Polar Bowler
"WT079120" = Polar Golfer
"WT079124" = Polar Pool
"WT079177" = Virtual Villagers - A New Home
"WT079184" = Yahtzee
"WT079363" = Build-a-lot 2
"WT079366" = Chicken Invaders 3 - Revenge of the Yolk
"WT079395" = Escape Rosecliff Island
"WT079397" = Mahjongg Artifacts
"WT079421" = Virtual Families

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 03/05/2012 04:47:39 | Computer Name = bella | Source = SideBySide | ID = 16842785
Description = Activation context generation failed for "C:\Windows\Installer\{67E03279-F703-408F-B4BF-46B5FC8D70CD}\wksss.exe".
Dependent
Assembly msadctls,processorArchitecture="x86",type="win32",version="1.0.1801.0"
could not be found. Please use sxstrace.exe for detailed diagnosis.

Error - 03/05/2012 04:47:39 | Computer Name = bella | Source = SideBySide | ID = 16842785
Description = Activation context generation failed for "c:\Windows\Installer\{67E03279-F703-408F-B4BF-46B5FC8D70CD}\WksWP.exe".
Dependent
Assembly msadctls,processorArchitecture="x86",type="win32",version="1.0.1801.0"
could not be found. Please use sxstrace.exe for detailed diagnosis.

Error - 03/05/2012 19:30:29 | Computer Name = bella | Source = Application Error | ID = 1000
Description = Faulting application name: GREG.exe, version: 1.3.3002.0, time stamp:
0x4b67e06e Faulting module name: KERNELBASE.dll, version: 6.1.7601.17651, time stamp:
0x4e211319 Exception code: 0xe0434f4d Fault offset: 0x0000b9bc Faulting process id:
0x1480 Faulting application start time: 0x01cd2984a86f0fff Faulting application path:
C:\Program Files (x86)\Packard Bell\Registration\GREG.exe Faulting module path:
C:\Windows\syswow64\KERNELBASE.dll Report Id: f7a4c0e3-9577-11e1-aba3-88ae1d633576

Error - 06/05/2012 11:27:30 | Computer Name = bella | Source = SideBySide | ID = 16842815
Description = Activation context generation failed for "c:\Program Files (x86)\Common
Files\Adobe AIR\Versions\1.0\Adobe AIR.dll".Error in manifest or policy file "c:\Program
Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll" on line 3. The value
"MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" of attribute
"version" in element "assemblyIdentity" is invalid.

Error - 06/05/2012 11:28:42 | Computer Name = bella | Source = SideBySide | ID = 16842785
Description = Activation context generation failed for "c:\Windows\Installer\{67E03279-F703-408F-B4BF-46B5FC8D70CD}\WksCal.exe".
Dependent
Assembly msadctls,processorArchitecture="x86",type="win32",version="1.0.1801.0"
could not be found. Please use sxstrace.exe for detailed diagnosis.

Error - 06/05/2012 11:28:42 | Computer Name = bella | Source = SideBySide | ID = 16842785
Description = Activation context generation failed for "c:\Windows\Installer\{67E03279-F703-408F-B4BF-46B5FC8D70CD}\wksdb.exe".
Dependent
Assembly msadctls,processorArchitecture="x86",type="win32",version="1.0.1801.0"
could not be found. Please use sxstrace.exe for detailed diagnosis.

Error - 06/05/2012 11:28:42 | Computer Name = bella | Source = SideBySide | ID = 16842785
Description = Activation context generation failed for "C:\Windows\Installer\{67E03279-F703-408F-B4BF-46B5FC8D70CD}\wksss.exe".
Dependent
Assembly msadctls,processorArchitecture="x86",type="win32",version="1.0.1801.0"
could not be found. Please use sxstrace.exe for detailed diagnosis.

Error - 06/05/2012 11:28:42 | Computer Name = bella | Source = SideBySide | ID = 16842785
Description = Activation context generation failed for "c:\Windows\Installer\{67E03279-F703-408F-B4BF-46B5FC8D70CD}\WksWP.exe".
Dependent
Assembly msadctls,processorArchitecture="x86",type="win32",version="1.0.1801.0"
could not be found. Please use sxstrace.exe for detailed diagnosis.

Error - 06/05/2012 20:00:24 | Computer Name = bella | Source = Application Error | ID = 1000
Description = Faulting application name: GREG.exe, version: 1.3.3002.0, time stamp:
0x4b67e06e Faulting module name: KERNELBASE.dll, version: 6.1.7601.17651, time stamp:
0x4e211319 Exception code: 0xe0434f4d Fault offset: 0x0000b9bc Faulting process id:
0x1034 Faulting application start time: 0x01cd2be45887d31d Faulting application path:
C:\Program Files (x86)\Packard Bell\Registration\GREG.exe Faulting module path:
C:\Windows\syswow64\KERNELBASE.dll Report Id: a4de380a-97d7-11e1-a977-88ae1d633576

Error - 09/05/2012 19:00:28 | Computer Name = bella | Source = Application Error | ID = 1000
Description = Faulting application name: GREG.exe, version: 1.3.3002.0, time stamp:
0x4b67e06e Faulting module name: KERNELBASE.dll, version: 6.1.7601.17651, time stamp:
0x4e211319 Exception code: 0xe0434f4d Fault offset: 0x0000b9bc Faulting process id:
0x201c Faulting application start time: 0x01cd2e37760749e6 Faulting application path:
C:\Program Files (x86)\Packard Bell\Registration\GREG.exe Faulting module path:
C:\Windows\syswow64\KERNELBASE.dll Report Id: c48eb6dd-9a2a-11e1-a977-88ae1d633576

[ System Events ]
Error - 06/05/2012 05:07:51 | Computer Name = bella | Source = Service Control Manager | ID = 7011
Description = A timeout (30000 milliseconds) was reached while waiting for a transaction
response from the ShellHWDetection service.

Error - 08/05/2012 05:42:07 | Computer Name = bella | Source = DCOM | ID = 10005
Description =

Error - 08/05/2012 05:42:07 | Computer Name = bella | Source = Service Control Manager | ID = 7000
Description = The Google Update Service (gupdate) service failed to start due to
the following error: %%109

Error - 08/05/2012 10:16:15 | Computer Name = bella | Source = Service Control Manager | ID = 7009
Description = A timeout was reached (30000 milliseconds) while waiting for the Lavasoft
Ad-Aware Service service to connect.

Error - 08/05/2012 10:16:15 | Computer Name = bella | Source = Service Control Manager | ID = 7000
Description = The Lavasoft Ad-Aware Service service failed to start due to the following
error: %%1053

Error - 08/05/2012 13:50:36 | Computer Name = bella | Source = ACPI | ID = 327693
Description = : The embedded controller (EC) did not respond within the specified
timeout period. This may indicate that there is an error in the EC hardware or
firmware or that the BIOS is accessing the EC incorrectly. You should check with
your computer manufacturer for an upgraded BIOS. In some situations, this error
may cause the computer to function incorrectly.

Error - 09/05/2012 22:16:50 | Computer Name = bella | Source = Service Control Manager | ID = 7009
Description = A timeout was reached (30000 milliseconds) while waiting for the Windows
Search service to connect.

Error - 09/05/2012 22:16:50 | Computer Name = bella | Source = Service Control Manager | ID = 7000
Description = The Windows Search service failed to start due to the following error:
%%1053

Error - 10/05/2012 04:00:32 | Computer Name = bella | Source = Microsoft-Windows-WLAN-AutoConfig | ID = 10000
Description = WLAN Extensibility Module has failed to start. Module Path: C:\Windows\system32\athExt.dll
Error
Code: 126

Error - 10/05/2012 18:51:22 | Computer Name = bella | Source = ACPI | ID = 327693
Description = : The embedded controller (EC) did not respond within the specified
timeout period. This may indicate that there is an error in the EC hardware or
firmware or that the BIOS is accessing the EC incorrectly. You should check with
your computer manufacturer for an upgraded BIOS. In some situations, this error
may cause the computer to function incorrectly.


< End of report >

Edited by cherrycake, 25 May 2012 - 11:02 PM.

  • 0

Advertisements


#2
Gammo

Gammo

    Member 2k

  • Malware Removal
  • 2,299 posts
Hello and welcome to Geekstogo!

We apologize for the delay in responding to your request for help.
If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine.

Please include a clear description of the problems you're having, along with any steps you may have performed so far.

Please refrain from running tools or applying updates other than those we suggest while we are cleaning up your computer. The reason for this is so we know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.

If you haven't done so yet, please go to Malware and Spyware Cleaning Guide and follow the steps instructed there. If you have already done this, we still need a new log to see what has changed since you originally posted your problem.

We need to create an OTL Report
Download OTL to your Desktop
  • Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
  • Check the box that says Scan All Users.
  • Click the Quick Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
  • When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
  • Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time and post them in your topic.

In the upper right hand corner of the topic you will see a button called Options. If you click on this in the drop-down menu you can choose Track this topic. I suggest you do this and select Immediate E-Mail notification and click on Proceed. This way you will be advised when we respond to your topic and facilitate the cleaning of your machine.

After 5 days if a topic is not replied to we assume it has been abandoned and it is closed.
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP