[rforexdad]

Hi Guys
Please comment on my otl records...
I had the DomaIQ spyware which I removed with the following steps
regedit...remove all occurences of DomaIQ
reboot start in safe mode
remove the folder under Program files\DomaIQ
reboot

my current OTL after DomaIQ removal is posted below


OTL logfile created on: 7/23/2013 1:45:15 AM - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\rforex1_7\Downloads\Programs
64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16635)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

3.75 Gb Total Physical Memory | 0.89 Gb Available Physical Memory | 23.81% Memory free
7.50 Gb Paging File | 5.00 Gb Available in Paging File | 66.66% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 55.89 Gb Total Space | 17.64 Gb Free Space | 31.56% Space Free | Partition Type: NTFS
Drive E: | 1863.01 Gb Total Space | 1019.43 Gb Free Space | 54.72% Space Free | Partition Type: NTFS
Drive F: | 1861.87 Gb Total Space | 786.75 Gb Free Space | 42.26% Space Free | Partition Type: NTFS
Drive G: | 1863.01 Gb Total Space | 1840.16 Gb Free Space | 98.77% Space Free | Partition Type: NTFS
Drive H: | 2794.51 Gb Total Space | 1686.07 Gb Free Space | 60.33% Space Free | Partition Type: NTFS
Drive J: | 2794.51 Gb Total Space | 1059.37 Gb Free Space | 37.91% Space Free | Partition Type: NTFS
Drive K: | 2794.51 Gb Total Space | 1427.33 Gb Free Space | 51.08% Space Free | Partition Type: NTFS

Computer Name: RFOREX1_WIN7 | User Name: rforex1_7 | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2013/07/23 01:41:56 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\rforex1_7\Downloads\Programs\OTL.exe
PRC - [2013/07/12 11:49:47 | 000,846,288 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
PRC - [2013/07/08 04:09:10 | 011,596,128 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe
PRC - [2013/07/08 04:09:10 | 004,153,184 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
PRC - [2013/07/08 03:59:02 | 000,195,936 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version8\tv_w32.exe
PRC - [2013/06/26 06:11:32 | 006,249,880 | ---- | M] (MetaQuotes Software Corp.) -- C:\Program Files (x86)\MetaTrader 4 Terminal\terminal.exe
PRC - [2013/05/16 16:45:46 | 006,726,144 | ---- | M] (MB Trading, Inc.) -- C:\Program Files (x86)\MBTrading\MBT Desktop Pro\MbtDesktopPro.exe
PRC - [2013/05/11 03:37:26 | 000,065,640 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2013/04/08 18:57:08 | 003,573,624 | ---- | M] (Tonec Inc.) -- C:\Program Files (x86)\Internet Download Manager\IDMan.exe
PRC - [2013/02/19 22:32:20 | 001,259,296 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
PRC - [2012/12/12 06:44:48 | 000,268,248 | ---- | M] (Tonec Inc.) -- C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe
PRC - [2012/08/23 12:37:16 | 000,013,672 | ---- | M] (Intuit Inc.) -- C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe
PRC - [2009/07/21 11:50:02 | 000,084,464 | ---- | M] () -- E:\roxio\Roxio 2010\5.0\CPMonitor.exe
PRC - [2009/06/23 17:40:12 | 000,127,352 | ---- | M] (CinemaNow, Inc.) -- C:\Program Files (x86)\CinemaNow\CinemaNow Media Manager\CinemaNowSvc.exe
PRC - [2009/06/23 01:18:52 | 000,494,064 | ---- | M] () -- E:\roxio\Roxio 2010\Roxio Burn\RoxioBurnLauncher.exe
PRC - [2009/06/02 19:05:58 | 000,457,200 | ---- | M] () -- C:\Program Files (x86)\Roxio\BackOnTrack\Disaster Recovery\SaibSVC.exe
PRC - [2009/03/24 01:01:00 | 000,113,136 | ---- | M] (Sonic Solutions) -- C:\Program Files (x86)\Common Files\PX Storage Engine\VxBlockServer.exe


========== Modules (No Company Name) ==========

MOD - [2013/07/12 11:49:44 | 000,396,240 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.72\ppgooglenaclpluginchrome.dll
MOD - [2013/07/12 11:49:43 | 013,599,184 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.72\PepperFlash\pepflashplayer.dll
MOD - [2013/07/12 11:49:42 | 004,052,944 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.72\pdf.dll
MOD - [2013/07/12 11:48:52 | 000,601,552 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.72\libglesv2.dll
MOD - [2013/07/12 11:48:51 | 000,123,344 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.72\libegl.dll
MOD - [2013/07/12 11:48:49 | 001,597,392 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.72\ffmpegsumo.dll
MOD - [2013/05/16 16:27:10 | 000,059,904 | ---- | M] () -- C:\Program Files (x86)\MBTrading\MBT Desktop Pro\MbtWin7Tools.dll
MOD - [2013/05/16 15:49:54 | 000,209,408 | ---- | M] () -- C:\Program Files (x86)\MBTrading\MBT Desktop Pro\MbtDesktopPro_res.dll
MOD - [2013/01/28 14:08:56 | 000,087,952 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
MOD - [2013/01/28 14:08:28 | 001,242,512 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
MOD - [2011/03/17 00:11:16 | 004,297,568 | ---- | M] () -- C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
MOD - [2010/10/20 15:45:26 | 008,801,120 | ---- | M] () -- C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveIntlResource.dll
MOD - [2009/07/21 11:50:02 | 000,084,464 | ---- | M] () -- E:\roxio\Roxio 2010\5.0\CPMonitor.exe
MOD - [2009/06/23 01:18:52 | 000,494,064 | ---- | M] () -- E:\roxio\Roxio 2010\Roxio Burn\RoxioBurnLauncher.exe


========== Services (SafeList) ==========

SRV:64bit: - [2013/05/26 22:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:64bit: - [2012/04/03 13:25:06 | 000,287,016 | ---- | M] (SonicWALL, Inc.) [Auto | Running] -- C:\Program Files\SonicWALL\SonicWALL Global VPN Client\SWGVCSvc.exe -- (SWGVCSvc)
SRV:64bit: - [2011/04/20 02:04:20 | 000,203,776 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
SRV:64bit: - [2009/07/13 18:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
SRV - [2013/07/08 04:09:10 | 004,153,184 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe -- (TeamViewer8)
SRV - [2013/06/07 17:22:57 | 000,226,640 | ---- | M] (LogMeIn, Inc.) [Auto | Running] -- C:\Program Files (x86)\LogMeIn\x64\ramaint.exe -- (LMIMaint)
SRV - [2013/06/07 17:22:55 | 000,376,144 | ---- | M] (LogMeIn, Inc.) [Auto | Running] -- C:\Program Files (x86)\LogMeIn\x64\LMIGuardianSvc.exe -- (LMIGuardianSvc)
SRV - [2013/05/11 03:37:26 | 000,065,640 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2013/02/28 19:25:34 | 000,161,384 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2013/02/19 22:32:20 | 001,259,296 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService)
SRV - [2012/11/29 12:56:50 | 000,407,424 | ---- | M] (LogMeIn, Inc.) [Auto | Running] -- C:\Program Files (x86)\LogMeIn\x64\LogMeIn.exe -- (LogMeIn)
SRV - [2012/08/23 12:37:16 | 000,013,672 | ---- | M] (Intuit Inc.) [Auto | Running] -- C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe -- (IntuitUpdateServiceV4)
SRV - [2010/03/18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2009/07/24 08:33:34 | 000,219,632 | ---- | M] (Sonic Solutions) [Auto | Stopped] -- C:\Program Files (x86)\Common Files\Roxio Shared\12.0\SharedCOM\RoxWatch12.exe -- (RoxWatch12)
SRV - [2009/07/24 08:33:10 | 001,116,656 | ---- | M] (Sonic Solutions) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Roxio Shared\12.0\SharedCOM\RoxMediaDB12.exe -- (RoxMediaDB12)
SRV - [2009/06/23 17:40:12 | 000,127,352 | ---- | M] (CinemaNow, Inc.) [Auto | Running] -- C:\Program Files (x86)\CinemaNow\CinemaNow Media Manager\CinemaNowSvc.exe -- (CinemaNow Service)
SRV - [2009/06/10 14:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2009/06/02 19:05:58 | 000,457,200 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Roxio\BackOnTrack\Disaster Recovery\SaibSVC.exe -- (9734BF6A-2DCD-40f0-BAB0-5AAFEEBE1269)


========== Driver Services (SafeList) ==========

DRV:64bit: - [2013/06/07 17:22:55 | 000,107,368 | ---- | M] (LogMeIn, Inc.) [File_System | Disabled | Stopped] -- C:\Windows\SysNative\LMIRfsClientNP.dll -- (LMIRfsClientNP)
DRV:64bit: - [2013/04/05 04:32:40 | 000,166,576 | ---- | M] (Tonec Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\idmwfp.sys -- (IDMWFP)
DRV:64bit: - [2013/03/10 09:00:15 | 000,834,544 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd)
DRV:64bit: - [2012/12/13 14:50:36 | 000,054,784 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64)
DRV:64bit: - [2012/11/29 12:56:50 | 000,072,216 | ---- | M] (LogMeIn, Inc.) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\LMIRfsDriver.sys -- (LMIRfsDriver)
DRV:64bit: - [2012/11/29 12:56:30 | 000,011,552 | ---- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\lmimirr.sys -- (lmimirr)
DRV:64bit: - [2012/08/23 07:12:16 | 000,029,696 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\terminpt.sys -- (terminpt)
DRV:64bit: - [2012/08/23 07:10:20 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV:64bit: - [2012/08/23 07:08:26 | 000,030,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV:64bit: - [2012/08/23 07:07:35 | 000,057,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2012/08/21 14:01:20 | 000,033,240 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)
DRV:64bit: - [2012/04/03 13:24:48 | 000,100,128 | ---- | M] (SonicWALL, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\SWIPsec.sys -- (SWIPsec)
DRV:64bit: - [2012/02/29 23:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2012/02/07 11:51:52 | 000,024,600 | ---- | M] (SonicWALL, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SWVNIC.sys -- (SWVNIC)
DRV:64bit: - [2011/08/04 00:10:56 | 000,132,184 | ---- | M] (Citrix Systems, Inc.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\dnelwf64.sys -- (DNE)
DRV:64bit: - [2011/06/10 06:34:52 | 000,539,240 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:64bit: - [2011/04/20 02:44:50 | 009,319,936 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag)
DRV:64bit: - [2011/04/20 01:22:34 | 000,306,176 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)
DRV:64bit: - [2011/03/10 23:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011/03/10 23:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2010/11/20 20:23:48 | 000,117,248 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tsusbhub.sys -- (tsusbhub)
DRV:64bit: - [2010/11/20 20:23:48 | 000,088,960 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Synth3dVsc.sys -- (Synth3dVsc)
DRV:64bit: - [2010/11/20 20:23:48 | 000,071,168 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dmvsc.sys -- (dmvsc)
DRV:64bit: - [2010/11/20 20:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2009/07/13 18:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009/07/13 18:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009/07/13 18:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009/07/09 03:00:00 | 000,055,280 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\PxHlpa64.sys -- (PxHlpa64)
DRV:64bit: - [2009/06/10 13:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009/06/10 13:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009/06/10 13:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009/06/10 13:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2009/06/02 01:00:00 | 000,027,632 | ---- | M] (Sonic Solutions) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\SaibVdAd64.sys -- (SaibVdAd64)
DRV:64bit: - [2009/06/02 01:00:00 | 000,027,120 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\Sahdad64.sys -- (Sahdad64)
DRV:64bit: - [2009/06/02 01:00:00 | 000,019,952 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\Saibad64.sys -- (Saibad64)
DRV - [2013/05/31 17:22:56 | 000,016,056 | ---- | M] (LogMeIn, Inc.) [Kernel | Auto | Running] -- C:\Program Files (x86)\LogMeIn\x64\rainfo.sys -- (LMIInfo)
DRV - [2009/07/13 18:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...ms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...ms}&FORM=IE8SRC

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = file:///C:/Data/bookmark2.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = C4 0C FD 2F C3 1C CE 01 [binary data]
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...Box&FORM=IE10SR
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local


========== FireFox ==========

FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF - HKEY_CURRENT_USER\software\mozilla\SeaMonkey\Extensions\\[email protected]: C:\Users\rforex1_7\AppData\Roaming\IDM\idmmzcc5 [2013/04/08 18:59:51 | 000,000,000 | ---D | M]


========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter},
CHR - homepage: http://www.google.com/
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.72\PepperFlash\pepflashplayer.dll
CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.72\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.72\pdf.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll
CHR - Extension: Google Docs = C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\
CHR - Extension: Google Drive = C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
CHR - Extension: YouTube = C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\
CHR - Extension: Google Search = C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\
CHR - Extension: IDM Integration = C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmolcgpienlcieaajfkkdamlngancncm\6.15.12.2_0\
CHR - Extension: Gmail = C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\

O1 HOSTS File: ([2009/06/10 14:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:64bit: - BHO: (IDM integration (IDMIEHlprObj Class)) - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll (Internet Download Manager, Tonec Inc.)
O2 - BHO: (IDM integration (IDMIEHlprObj Class)) - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll (Internet Download Manager, Tonec Inc.)
O2 - BHO: (no name) - {EF3CB363-38C4-4DA3-B398-DE6184A7819B} - No CLSID value found.
O4:64bit: - HKLM..\Run: [LogMeIn GUI] C:\Program Files (x86)\LogMeIn\x64\LogMeInSystray.exe (LogMeIn, Inc.)
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [CPMonitor] E:\roxio\Roxio 2010\5.0\CPMonitor.exe ()
O4 - HKLM..\Run: [Desktop Disc Tool] E:\roxio\Roxio 2010\Roxio Burn\RoxioBurnLauncher.exe ()
O4 - HKLM..\Run: [RoxWatchTray] C:\Program Files (x86)\Common Files\Roxio Shared\12.0\SharedCOM\RoxWatchTray12.exe (Sonic Solutions)
O4 - HKCU..\Run: [IDMan] C:\Program Files (x86)\Internet Download Manager\IDMan.exe (Tonec Inc.)
O4 - Startup: C:\Users\rforex1_7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\SonicWALL Global VPN Client.lnk = File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O8:64bit: - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200 File not found
O8:64bit: - Extra context menu item: Download all links with IDM - C:\Program Files (x86)\Internet Download Manager\IEGetAll.htm ()
O8:64bit: - Extra context menu item: Download with IDM - C:\Program Files (x86)\Internet Download Manager\IEExt.htm ()
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\SysWow64\GPhotos.scr (Google Inc.)
O8 - Extra context menu item: Download all links with IDM - C:\Program Files (x86)\Internet Download Manager\IEGetAll.htm ()
O8 - Extra context menu item: Download with IDM - C:\Program Files (x86)\Internet Download Manager\IEExt.htm ()
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O15 - HKCU\..Trusted Domains: cinemanow.com ([]http in Trusted sites)
O15 - HKCU\..Trusted Domains: cinemanow.com ([]https in Trusted sites)
O15 - HKCU\..Trusted Domains: qflix.com ([]http in Trusted sites)
O15 - HKCU\..Trusted Domains: roxio.com ([]http in Trusted sites)
O15 - HKCU\..Trusted Domains: sonic.com ([redirect] http in Trusted sites)
O15 - HKCU\..Trusted Domains: sonic.com ([redirect2] http in Trusted sites)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.m...ash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{F7076AB2-1776-47F1-A75C-7661BA7656BE}: DhcpNameServer = 192.168.1.1
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2011/09/29 16:16:43 | 000,000,000 | ---- | M] () - G:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2010/07/09 18:06:04 | 000,000,000 | RH-D | M] - G:\autorun -- [ NTFS ]
O32 - AutoRun File - [2002/10/16 05:56:50 | 000,000,036 | RH-- | M] () - G:\autorun.inf -- [ NTFS ]
O32 - AutoRun File - [2012/07/16 00:33:32 | 000,000,040 | -H-- | M] () - H:\Autorun.inf -- [ NTFS ]
O32 - AutoRun File - [2010/01/10 18:54:52 | 000,000,170 | ---- | M] () - J:\Autorun.inf -- [ NTFS ]
O32 - AutoRun File - [2012/07/16 00:33:32 | 000,000,040 | -H-- | M] () - K:\Autorun.inf -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

========== Files/Folders - Created Within 30 Days ==========

[2013/07/19 10:39:23 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\appmgmt
[2013/07/13 14:03:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Office Genuine Advantage
[2013/07/13 08:47:37 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\MRT
[2013/07/11 02:10:34 | 000,000,000 | ---D | C] -- C:\Windows\AutoKMS
[2013/06/30 10:14:57 | 000,000,000 | ---D | C] -- C:\Users\rforex1_7\Documents\Roxio
[2013/06/29 11:04:58 | 000,000,000 | ---D | C] -- C:\Users\rforex1_7\AppData\Local\ElevatedDiagnostics
[2013/06/26 01:16:21 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MSXML 4.0

========== Files - Modified Within 30 Days ==========

[2013/07/23 01:21:00 | 000,000,904 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2013/07/22 16:21:00 | 000,000,900 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2013/07/22 00:52:22 | 000,778,834 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2013/07/22 00:52:22 | 000,660,068 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2013/07/22 00:52:22 | 000,120,996 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2013/07/20 22:47:00 | 000,026,576 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013/07/20 22:47:00 | 000,026,576 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013/07/20 22:39:20 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013/07/20 22:39:17 | 3019,247,616 | -HS- | M] () -- C:\hiberfil.sys
[2013/07/20 21:32:38 | 000,001,945 | ---- | M] () -- C:\Windows\epplauncher.mif
[2013/07/15 02:01:35 | 000,002,274 | -H-- | M] () -- C:\Users\rforex1_7\Documents\Default.rdp
[2013/07/13 09:50:35 | 000,001,014 | ---- | M] () -- C:\Users\rforex1_7\Desktop\CdSoftwareLibrary.lnk
[2013/07/13 06:14:08 | 000,001,090 | ---- | M] () -- C:\Users\Public\Desktop\TeamViewer 8.lnk
[2013/07/13 02:10:00 | 000,151,552 | ---- | M] () -- C:\Windows\KMSEmulator.exe
[2013/07/12 21:24:35 | 000,002,183 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
[2013/07/11 00:58:00 | 000,465,008 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2013/07/11 00:44:29 | 000,772,558 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2013/07/07 17:24:34 | 000,000,000 | ---- | M] () -- C:\END
[2013/07/02 01:11:31 | 000,000,600 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\PUTTY.RND
[2013/06/30 10:14:57 | 000,018,972 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\rx_audio.Cache
[2013/06/30 10:14:57 | 000,000,648 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\rx_image32.Cache

========== Files Created - No Company Name ==========

[2013/07/13 09:50:06 | 000,001,014 | ---- | C] () -- C:\Users\rforex1_7\Desktop\CdSoftwareLibrary.lnk
[2013/07/13 08:54:23 | 000,001,945 | ---- | C] () -- C:\Windows\epplauncher.mif
[2013/07/11 02:10:16 | 000,151,552 | ---- | C] () -- C:\Windows\KMSEmulator.exe
[2013/06/30 17:24:23 | 000,000,000 | ---- | C] () -- C:\END
[2013/06/30 10:14:56 | 000,018,972 | ---- | C] () -- C:\Users\rforex1_7\AppData\Local\rx_audio.Cache
[2013/06/30 10:10:07 | 000,000,648 | ---- | C] () -- C:\Users\rforex1_7\AppData\Local\rx_image32.Cache
[2013/05/11 12:52:36 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2013/04/01 03:11:02 | 000,772,558 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2013/03/31 17:20:00 | 000,000,469 | ---- | C] () -- C:\ProgramData\Microsoft.SqlServer.Compact.400.32.bc
[2013/03/26 00:44:59 | 000,000,600 | ---- | C] () -- C:\Users\rforex1_7\AppData\Local\PUTTY.RND

========== ZeroAccess Check ==========

[2009/07/13 21:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2013/02/26 22:52:56 | 014,172,672 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2013/02/26 21:55:05 | 012,872,704 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009/07/13 18:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/20 20:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009/07/13 18:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

========== LOP Check ==========

[2013/07/20 22:38:36 | 000,000,000 | ---D | M] -- C:\Users\rforex1_7\AppData\Roaming\DMCache
[2013/03/12 23:41:01 | 000,000,000 | ---D | M] -- C:\Users\rforex1_7\AppData\Roaming\FXTS2
[2013/07/17 06:04:36 | 000,000,000 | ---D | M] -- C:\Users\rforex1_7\AppData\Roaming\IDM
[2013/05/27 12:35:06 | 000,000,000 | ---D | M] -- C:\Users\rforex1_7\AppData\Roaming\IrfanView
[2013/03/11 00:07:13 | 000,000,000 | ---D | M] -- C:\Users\rforex1_7\AppData\Roaming\MBTrading
[2013/07/20 21:27:07 | 000,000,000 | ---D | M] -- C:\Users\rforex1_7\AppData\Roaming\player
[2013/06/15 07:54:57 | 000,000,000 | ---D | M] -- C:\Users\rforex1_7\AppData\Roaming\Simple Star
[2013/04/10 18:05:54 | 000,000,000 | ---D | M] -- C:\Users\rforex1_7\AppData\Roaming\TeamViewer

========== Purity Check ==========



< End of report >
=============

OTL Extras report



OTL Extras logfile created on: 7/23/2013 1:45:15 AM - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\rforex1_7\Downloads\Programs
64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16635)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

3.75 Gb Total Physical Memory | 0.89 Gb Available Physical Memory | 23.81% Memory free
7.50 Gb Paging File | 5.00 Gb Available in Paging File | 66.66% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 55.89 Gb Total Space | 17.64 Gb Free Space | 31.56% Space Free | Partition Type: NTFS
Drive E: | 1863.01 Gb Total Space | 1019.43 Gb Free Space | 54.72% Space Free | Partition Type: NTFS
Drive F: | 1861.87 Gb Total Space | 786.75 Gb Free Space | 42.26% Space Free | Partition Type: NTFS
Drive G: | 1863.01 Gb Total Space | 1840.16 Gb Free Space | 98.77% Space Free | Partition Type: NTFS
Drive H: | 2794.51 Gb Total Space | 1686.07 Gb Free Space | 60.33% Space Free | Partition Type: NTFS
Drive J: | 2794.51 Gb Total Space | 1059.37 Gb Free Space | 37.91% Space Free | Partition Type: NTFS
Drive K: | 2794.51 Gb Total Space | 1427.33 Gb Free Space | 51.08% Space Free | Partition Type: NTFS

Computer Name: RFOREX1_WIN7 | User Name: rforex1_7 | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html[@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
.html [@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [Browse with &IrfanView] -- "C:\Program Files (x86)\IrfanView\i_view32.exe" "%1 /thumbs" (Irfan Skiljan)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [Browse with &IrfanView] -- "C:\Program Files (x86)\IrfanView\i_view32.exe" "%1 /thumbs" (Irfan Skiljan)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error.

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

========== Authorized Applications List ==========


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0616B80B-6698-4F44-8533-660DB1C2A910}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{0D3AD6BB-A860-4006-8216-9643B486366F}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{221FB23C-B950-4D31-B48D-C3E1199C8BE7}" = lport=10243 | protocol=6 | dir=in | app=system |
"{236D558C-FF16-45C9-9F74-DE586848B643}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{2574EB89-0031-4198-8C17-71B47190029A}" = lport=445 | protocol=6 | dir=in | app=system |
"{2AF0D0A4-6CAD-4201-A16A-B42FB56A543D}" = rport=80 | protocol=6 | dir=out | app=c:\program files (x86)\common files\intuit\update service v4\intuitupdateservice.exe |
"{2B19E392-613D-4E45-AC91-76BFC2EB6D59}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{2F0468E6-7766-4D43-9436-177F23B5C8D7}" = lport=6004 | protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office14\outlook.exe |
"{3F274C78-709D-49AB-996C-D9ED19729550}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | [email protected],-28539 |
"{4EE4F1AA-0115-4D4A-903E-962A64A8C081}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{550E4DE4-4DB3-40F8-A537-B5B31485B7BD}" = rport=138 | protocol=17 | dir=out | app=system |
"{5DCA83C3-7BB3-4EDF-9000-8951D9AD8E75}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{677079B6-F28B-4BE1-8CA2-0EB458324096}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{7186B9B2-5E97-4A71-A6BE-1EA2766D05A5}" = lport=2869 | protocol=6 | dir=in | app=system |
"{81A17981-D57B-4A77-863A-53DDA84F3581}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{8573BDB9-635F-471B-8065-F23C98F3ECEB}" = rport=139 | protocol=6 | dir=out | app=system |
"{945883CE-AB30-4CFE-BA53-5B5D86860AB0}" = lport=139 | protocol=6 | dir=in | app=system |
"{9B16DFCB-40FE-41CB-AD0B-4C41938247F4}" = rport=137 | protocol=17 | dir=out | app=system |
"{B924A0C7-DF26-453C-A1FD-39F6528E9CE5}" = rport=10243 | protocol=6 | dir=out | app=system |
"{BA0F7468-D850-4267-96E2-253D48ADC1BE}" = lport=137 | protocol=17 | dir=in | app=system |
"{C68057DC-3FC4-4E6E-B9A5-5C7E28AF8E5E}" = rport=80 | protocol=6 | dir=out | app=c:\program files (x86)\common files\intuit\update service v4\intuitupdater.exe |
"{DC78B03C-7DC0-4009-875B-4913100FC060}" = lport=138 | protocol=17 | dir=in | app=system |
"{ECC03769-EB73-43D1-BF6E-E815FD89F024}" = rport=445 | protocol=6 | dir=out | app=system |
"{EDDE9035-6AB2-4413-938A-5F55BEB19668}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{087260FF-675E-4F81-B8A5-9CE8CC8978ED}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{099E2F35-3A8A-403F-BF82-291D74FF6126}" = protocol=17 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |
"{11BC2331-91AE-4287-BE98-8A80B9DD8211}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{26C51F88-50F5-4351-89D5-0F860D9D560D}" = protocol=17 | dir=in | app=c:\program files (x86)\cinemanow\cinemanow media manager\cinemanowshell.exe |
"{300B2777-D262-430C-BA2E-85C0D78CEDD9}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\version8\teamviewer_service.exe |
"{306AFEAE-C301-4A8E-89A7-85AF9EB8E520}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{3C680A38-167B-4A94-A0F6-E24CF8BDD664}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\version8\teamviewer.exe |
"{44047B52-B5EA-4988-BDA9-3401C09966BF}" = dir=in | app=c:\program files (x86)\common files\apple\apple application support\webkit2webprocess.exe |
"{47C0043A-58BA-43BB-B4D5-1CDED2E21CD8}" = dir=in | app=c:\program files (x86)\itunes\itunes.exe |
"{4AA9FDD3-BC3C-4A72-9314-88B7DD9FD483}" = protocol=6 | dir=out | app=system |
"{4C3ABE4E-EFA3-4385-8FE6-959D83EB72DA}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\version8\teamviewer_service.exe |
"{4EA386BB-3187-4857-A0C3-F74648675F1A}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{53A4EF39-D413-4218-A42E-0A31A68D656A}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{5583F475-BA39-41BF-82DF-20B05E6B12A7}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office14\onenote.exe |
"{593EF0BA-9985-46B6-9481-60000201FB16}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\version8\teamviewer.exe |
"{61D4C6CA-0D34-4936-94C3-8A66553C9DFA}" = protocol=6 | dir=in | app=c:\program files (x86)\peerinator\peerinator.exe |
"{62774054-F474-4779-82FB-C7334E1D2604}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{62D106F3-9B0B-49A4-8380-3487101E96C6}" = protocol=1 | dir=in | [email protected],-28543 |
"{640B685C-86CD-46C6-8E43-0736BF8408D2}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{6790B62D-818F-4613-AA8B-2F294796770D}" = protocol=58 | dir=out | [email protected],-28546 |
"{68814CEB-B2FE-42B2-BBA5-9684BF9304F1}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\version8\teamviewer.exe |
"{6D34C7E7-8A0D-4CD3-81E8-BFBC996DDB52}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{77F751BE-5A0C-44B8-99AF-A00AE015BD5E}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{82F07207-5A53-42D2-B6FA-76028E4F9F9B}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{9B19E39F-A84E-4584-9D09-93F8BE39C923}" = protocol=6 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |
"{9B4531DC-3E58-407A-B407-0BDB6C77953B}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office14\onenote.exe |
"{A25554BA-772A-4717-AEF6-B605D9A1B5B4}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\version8\teamviewer_service.exe |
"{AA5C62B0-5FDD-447E-8267-D606AEA2AC73}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\version8\teamviewer.exe |
"{AAE476D2-EF33-40E8-BBF3-7423FBDFD033}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{AAEDECA3-3CC9-4F4C-8CF8-1BBB8E141A7E}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{AC1F7984-E194-4920-9CF3-A44D8CE091EA}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{B0C94358-52F3-4FF6-807D-0F4711A204CD}" = protocol=58 | dir=in | [email protected],-28545 |
"{B9191C61-F5DD-42E3-9350-D723CDC2661C}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{BF856E9E-BAC2-4A22-89CF-D49E432E9F05}" = protocol=17 | dir=in | app=e:\roxio\roxio 2010\venue\venue.exe |
"{C42D9F51-4923-4BD8-A29D-4B0497FB4886}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{C8F0853E-9382-4327-8A6E-3DD9D4AA6AAA}" = protocol=1 | dir=out | [email protected],-28544 |
"{C9270723-B538-497D-BE4D-45FD176F55A5}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office14\groove.exe |
"{CD7AE545-498A-4037-98E2-8874372A8696}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{D9CCEF4D-1864-4BC5-AEC0-F167500018F9}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office14\groove.exe |
"{DD12808F-38EE-4F9B-A2E0-01D98708FDB9}" = protocol=6 | dir=in | app=e:\roxio\roxio 2010\venue\venue.exe |
"{E279ECDC-0655-449E-8DD0-7C88540221C9}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{E2D2000C-189D-4207-A428-A8F631DF60C7}" = protocol=6 | dir=in | app=c:\program files (x86)\cinemanow\cinemanow media manager\cinemanowshell.exe |
"{F10F9991-3877-4A4F-9816-F2DB652A51D4}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\version8\teamviewer_service.exe |
"{F9A2B5E9-23D9-46CA-BA29-CE9CC1E94048}" = protocol=17 | dir=in | app=c:\program files (x86)\peerinator\peerinator.exe |
"TCP Query User{153F7DD3-C199-4511-B19B-5ECA44B7E70D}C:\windows\kmsemulator.exe" = protocol=6 | dir=in | app=c:\windows\kmsemulator.exe |
"TCP Query User{8AD158BA-1350-409D-B28B-9EC15D8E6548}C:\program files\sonicwall\sonicwall global vpn client\swgvc.exe" = protocol=6 | dir=in | app=c:\program files\sonicwall\sonicwall global vpn client\swgvc.exe |
"TCP Query User{FDD5EE4E-C089-48AF-952A-022B9505F8C9}C:\program files\sonicwall\sonicwall global vpn client\swgvc.exe" = protocol=6 | dir=in | app=c:\program files\sonicwall\sonicwall global vpn client\swgvc.exe |
"UDP Query User{410D6CE1-BD9F-48BA-A267-8B6533F50289}C:\program files\sonicwall\sonicwall global vpn client\swgvc.exe" = protocol=17 | dir=in | app=c:\program files\sonicwall\sonicwall global vpn client\swgvc.exe |
"UDP Query User{7944EF04-CA8F-4026-8B2E-1E412EA1ACEB}C:\windows\kmsemulator.exe" = protocol=17 | dir=in | app=c:\windows\kmsemulator.exe |
"UDP Query User{F0D93C12-AE8F-4635-B279-0AAD215C8824}C:\program files\sonicwall\sonicwall global vpn client\swgvc.exe" = protocol=17 | dir=in | app=c:\program files\sonicwall\sonicwall global vpn client\swgvc.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{2B0BD3DD-EF7E-43EE-AC58-061E412BFFEF}" = SonicWALL Global VPN Client
"{2F72F540-1F60-4266-9506-952B21D6640D}" = Apple Mobile Device Support
"{60B2315F-680F-4EB3-B8DD-CCDC86A7CCAB}" = Roxio File Backup
"{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}" = Bonjour
"{704C0303-D20C-45AF-BD2B-556EAF31BE09}" = iCloud
"{76FF0F03-B707-4332-B5D1-A56C8303514E}" = iTunes
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8E34682C-8118-31F1-BC4C-98CD9675E1C2}" = Microsoft .NET Framework 4 Extended
"{90140000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2010
"{90140000-002A-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (English) 2010
"{90140000-0116-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2010
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = NVIDIA Control Panel 307.83
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Graphics Driver 307.83
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = NVIDIA Update 1.10.8
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components
"{DB9C43F7-0B0F-4E43-9E6B-F945C71C469E}" = VD64Inst
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"Agent Ransack (64-bit)_is1" = Agent Ransack 2010 (64-bit)
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{14C76057-E495-47E1-BDF0-1A1CC1752ADF}" = ExtraPutty 0.22
"{36E0F777-19FE-4454-BB2D-84206758EA85}" = LogMeIn
"{3CD1180C-B583-49E8-9726-6835F7095921}" = TurboTax 2012 wnmiper
"{46578609-AD6D-4E69-AC8F-28B89C090F3B}" = Roxio Creator 2010 Pro
"{494367EC-82A9-4C0D-A788-74A967998E8C}" = FXCM Trading Station
"{4A7FDA4D-F4D7-4A49-934A-066D59A43C7E}" = SmartSound Quicktracks Plugin
"{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}" = Skype™ 6.3
"{5491453D-8C3E-4785-AC5C-E9A4DABF378A}" = Roxio Venue
"{5A06423A-210C-49FB-950E-CB0EB8C5CEC7}" = Roxio BackOnTrack
"{5D09C772-ECB3-442B-9CC6-B4341C78FDC2}" = Apple Application Support
"{5FE59D73-7C62-43CE-B4EB-508C7D4FAC72}" = calibre
"{65A79175-3C4C-41F4-92AF-BA1DDDBA0626}" = Roxio Burn Manager CDB
"{6C122441-1861-4CD7-B1C5-A163A6984E12}" = CinemaNow Media Manager
"{733CDF24-0A93-426E-AA89-DF281EB54793}" = Roxio CinePlayer
"{74DC8A26-4E05-40B6-AD11-C9428A1AE150}" = Roxio Creator 2010 Pro
"{7694E0B1-2332-448B-9235-929F84B41E3F}" = Active@ ISO Burner
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{86DDDAAD-AEB9-42E5-BE01-0E8FABD2BB29}" = Roxio Video Capture USB
"{87A83C6F-F53C-448A-B078-FF00E3EAEB29}" = Roxio Disaster Recovery
"{89A15676-78AE-4D51-BF5B-DEE3E0D46C94}" = Roxio Creator 2010 Pro
"{89EC099E-958D-462E-972C-385591946978}" = TurboTax 2012 WinPerFedFormset
"{90140000-0011-0000-0000-0000000FF1CE}" = Microsoft Office Professional Plus 2010
"{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{047B0968-E622-4FAA-9B4B-121FA109EDDE}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2010
"{90140000-0015-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2010
"{90140000-0016-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2010
"{90140000-0018-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2010
"{90140000-0019-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2010
"{90140000-001A-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2010
"{90140000-001B-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2010
"{90140000-001F-0409-0000-0000000FF1CE}_Office14.PROPLUS_{99ACCA38-6DD3-48A8-96AE-A283C9759279}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2010
"{90140000-001F-040C-0000-0000000FF1CE}_Office14.PROPLUS_{46298F6A-1E7E-4D4A-B5F5-106A4F0E48C6}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2010
"{90140000-001F-0C0A-0000-0000000FF1CE}_Office14.PROPLUS_{DEA87BE2-FFCC-4F33-9946-FCBE55A1E998}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{967EF02C-5C7E-4718-8FCB-BDC050190CCF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-002A-0409-1000-0000000FF1CE}_Office14.PROPLUS_{D6C6B46A-6CE1-4561-84A0-EFD58B8AB979}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2010
"{90140000-002C-0409-0000-0000000FF1CE}_Office14.PROPLUS_{7CA93DF4-8902-449E-A42E-4C5923CFBDE3}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0044-0409-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (English) 2010
"{90140000-0044-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2010
"{90140000-006E-0409-0000-0000000FF1CE}_Office14.PROPLUS_{4560037C-E356-444A-A015-D21F487D809E}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2010
"{90140000-00A1-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-00BA-0409-0000-0000000FF1CE}" = Microsoft Office Groove MUI (English) 2010
"{90140000-00BA-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2010
"{90140000-0115-0409-0000-0000000FF1CE}_Office14.PROPLUS_{4560037C-E356-444A-A015-D21F487D809E}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0116-0409-1000-0000000FF1CE}_Office14.PROPLUS_{D6C6B46A-6CE1-4561-84A0-EFD58B8AB979}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2010
"{90140000-0117-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{906C01EE-B242-4197-AE85-6C506E1B869B}" = Roxio Burn Manager
"{9A00EC4E-27E1-42C4-98DD-662F32AC8870}" = Roxio CinePlayer Decoder Pack
"{A121EEDE-C68F-461D-91AA-D48BA226AF1C}" = Roxio Activation Module
"{A33E7B0C-B99C-4EC9-B702-8A328B161AF9}" = Roxio Burn
"{A8B1F076-965D-4663-A9D4-C2FB58A42AE4}" = TurboTax 2012 WinPerTaxSupport
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC76BA86-7AD7-1033-7B44-AB0000000001}" = Adobe Reader XI (11.0.03)
"{AF9E97C1-7431-426D-A8D5-ABE40995C0B1}" = DirectX 9 Runtime
"{B67BAFBA-4C9F-48FA-9496-933E3B255044}" = QuickTime
"{E83F5F27-43F3-4163-ABE5-F68C989286ED}" = TurboTax 2012 wrapper
"{EFD2807A-C66B-4C13-8FB8-42FCA6DEF171}" = TurboTax 2012 wcaiper
"{F014B696-28C5-4554-802F-A15380418F53}" = TurboTax 2012 WinPerReleaseEngine
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"FXCM Trading Station" = FXCM Trading Station
"GOM Player" = GOM Player
"Google Chrome" = Google Chrome
"InstallShield_{4A7FDA4D-F4D7-4A49-934A-066D59A43C7E}" = SmartSound Quicktracks Plugin
"Internet Download Manager" = Internet Download Manager
"IrfanView" = IrfanView (remove only)
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware version 1.75.0.1300
"MBT Desktop Pro" = MBT Desktop Pro
"MetaTrader 4 Terminal" = MetaTrader 4 Terminal
"Office14.PROPLUS" = Microsoft Office Professional Plus 2010
"Picasa 3" = Picasa 3
"Roxio PhotoShow" = Roxio PhotoShow
"SevenZip" = SevenZip
"TeamViewer 8" = TeamViewer 8
"TurboTax 2012" = TurboTax 2012

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Amazon Kindle" = Amazon Kindle

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 7/13/2013 4:49:36 PM | Computer Name = rforex1_win7 | Source = WinMgmt | ID = 10
Description =

Error - 7/15/2013 8:29:26 PM | Computer Name = rforex1_win7 | Source = WinMgmt | ID = 10
Description =

Error - 7/17/2013 4:02:35 AM | Computer Name = rforex1_win7 | Source = Application Hang | ID = 1002
Description = The program GOM.EXE version 2.1.47.5133 stopped interacting with Windows
and was closed. To see if more information about the problem is available, check
the problem history in the Action Center control panel. Process ID: 134 Start Time:
01ce82c3d134242e Termination Time: 14 Application Path: C:\Program Files (x86)\GRETECH\GomPlayer\GOM.EXE

Report
Id: 3bc233c4-eeb7-11e2-8204-00607363cf4e

Error - 7/18/2013 10:20:28 PM | Computer Name = rforex1_win7 | Source = WinMgmt | ID = 10
Description =

Error - 7/19/2013 4:39:25 AM | Computer Name = rforex1_win7 | Source = WinMgmt | ID = 10
Description =

Error - 7/19/2013 11:32:43 AM | Computer Name = rforex1_win7 | Source = WinMgmt | ID = 10
Description =

Error - 7/21/2013 12:24:47 AM | Computer Name = rforex1_win7 | Source = WinMgmt | ID = 10
Description =

Error - 7/21/2013 12:27:53 AM | Computer Name = rforex1_win7 | Source = WinMgmt | ID = 10
Description =

Error - 7/21/2013 12:31:33 AM | Computer Name = rforex1_win7 | Source = WinMgmt | ID = 10
Description =

Error - 7/21/2013 1:41:08 AM | Computer Name = rforex1_win7 | Source = WinMgmt | ID = 10
Description =

[ Media Center Events ]
Error - 6/14/2013 12:22:28 PM | Computer Name = rforex1_win7 | Source = MCUpdate | ID = 0
Description = 9:22:28 AM - Failed to retrieve Directory (Error: The request failed
with HTTP status 403: Forbidden.)

Error - 6/14/2013 12:22:29 PM | Computer Name = rforex1_win7 | Source = MCUpdate | ID = 0
Description = 9:22:29 AM - Failed to retrieve MCESpotlight (Error: The request failed
with HTTP status 403: Forbidden.)

Error - 6/14/2013 12:22:29 PM | Computer Name = rforex1_win7 | Source = MCUpdate | ID = 0
Description = 9:22:29 AM - Failed to retrieve MCEClientUX (Error: The request failed
with HTTP status 403: Forbidden.)

Error - 6/26/2013 6:47:59 AM | Computer Name = rforex1_win7 | Source = MCUpdate | ID = 0
Description = 3:47:58 AM - Error connecting to the internet. 3:47:58 AM - Unable
to contact server..

Error - 6/26/2013 7:48:04 AM | Computer Name = rforex1_win7 | Source = MCUpdate | ID = 0
Description = 4:48:04 AM - Error connecting to the internet. 4:48:04 AM - Unable
to contact server..

Error - 6/26/2013 8:48:09 AM | Computer Name = rforex1_win7 | Source = MCUpdate | ID = 0
Description = 5:48:09 AM - Error connecting to the internet. 5:48:09 AM - Unable
to contact server..

Error - 6/30/2013 12:39:20 AM | Computer Name = rforex1_win7 | Source = MCUpdate | ID = 0
Description = 9:39:17 PM - Error connecting to the internet. 9:39:17 PM - Unable
to contact server..

Error - 6/30/2013 1:40:03 AM | Computer Name = rforex1_win7 | Source = MCUpdate | ID = 0
Description = 10:40:03 PM - Error connecting to the internet. 10:40:03 PM - Unable
to contact server..

Error - 6/30/2013 2:40:17 AM | Computer Name = rforex1_win7 | Source = MCUpdate | ID = 0
Description = 11:40:14 PM - Error connecting to the internet. 11:40:14 PM - Unable
to contact server..

Error - 6/30/2013 3:40:25 AM | Computer Name = rforex1_win7 | Source = MCUpdate | ID = 0
Description = 12:40:24 AM - Error connecting to the internet. 12:40:24 AM - Unable
to contact server..

[ System Events ]
Error - 7/21/2013 12:23:48 AM | Computer Name = rforex1_win7 | Source = Service Control Manager | ID = 7001
Description = The Network List Service service depends on the Network Location Awareness
service which failed to start because of the following error: %%1068

Error - 7/21/2013 12:25:13 AM | Computer Name = rforex1_win7 | Source = DCOM | ID = 10005
Description =

Error - 7/21/2013 12:26:42 AM | Computer Name = rforex1_win7 | Source = Service Control Manager | ID = 7009
Description = A timeout was reached (30000 milliseconds) while waiting for the Roxio
Hard Drive Watcher 12 service to connect.

Error - 7/21/2013 12:28:22 AM | Computer Name = rforex1_win7 | Source = DCOM | ID = 10010
Description =

Error - 7/21/2013 12:29:03 AM | Computer Name = rforex1_win7 | Source = Service Control Manager | ID = 7043
Description = The Windows Update service did not shut down properly after receiving
a preshutdown control.

Error - 7/21/2013 12:30:21 AM | Computer Name = rforex1_win7 | Source = Service Control Manager | ID = 7009
Description = A timeout was reached (30000 milliseconds) while waiting for the Roxio
Hard Drive Watcher 12 service to connect.

Error - 7/21/2013 12:46:26 AM | Computer Name = rforex1_win7 | Source = BROWSER | ID = 8032
Description =

Error - 7/21/2013 1:38:36 AM | Computer Name = rforex1_win7 | Source = DCOM | ID = 10010
Description =

Error - 7/21/2013 1:39:53 AM | Computer Name = rforex1_win7 | Source = Service Control Manager | ID = 7009
Description = A timeout was reached (30000 milliseconds) while waiting for the Roxio
Hard Drive Watcher 12 service to connect.

Error - 7/21/2013 1:55:59 AM | Computer Name = rforex1_win7 | Source = BROWSER | ID = 8032
Description =


< End of report >

[Advertisements]

Hello and welcome to the forums!

My secret agent name on the forums is SweetTech (you can call me ST for short), it's a pleasure to meet you.

I'll be addressing you by your username, if you'd like me to address you by something else, please let me know!

I would be glad to take a look at your log and help you with solving any malware problems.

If you have since resolved the issues you were originally experiencing, or have received help elsewhere, please inform me so that this topic can be closed.

If you have not, please adhere to the guidelines below and then follow instructions as outlined further below:

• Logs from malware removal programs (OTL is one of them) can take some time to analyze. I need you to be patient while I analyze any logs you post. Please remember, I am a volunteer, and I do have a life outside of these forums.
  
• Please make sure to carefully read any instruction that I give you. Attention to detail is important! Since I cannot see or directly interact with your computer I am dependent on you to "be my eyes" and provide as much information as you can regarding the current state of your computer.
  
• If you're not sure, or if something unexpected happens, do NOT continue! Stop and ask!
  
• In Windows Vista and Windows 7, all tools need to be started by right clicking and selecting Run as Administrator!
  
• If I instruct you to download a specific tool in which you already have, please delete the copy that you have and re-download the tool. The reason I ask you to do this is because these tools are updated fairly regularly.
  
• Do not do things I do not ask for, such as running a spyware scan on your computer. The one thing that you should always do, is to make sure sure that your anti-virus definitions are up-to-date!
  
• Please do not use the Attachment feature for any log file. Do a Copy/Paste of the entire contents of the log file and submit it inside your post.
  
• I am going to stick with you until ALL malware is gone from your system. I would appreciate it if you would do the same. From this point, we're in this together
  
  
  • Because of this, you must reply within 3 days failure to reply will result in the topic being closed! I like chocolate chip cookies.
• Lastly, I am no magician. I will try very hard to fix your issues, but no promises can be made. Also be aware that some infections are so severe that you might need to resort to reformatting and reinstalling your operating system or even taking your computer into a repair shop.
  
  
  • Don't worry, this only happens in severe cases, but it sadly does happen. Be prepared to back up your data and have means of backing up your data available.

____________________________________________________


Running aswMBR.exe

Download aswMBR.exe ( 1.8mb ) to your desktop.
Double click the aswMBR.exe to run it Click the "Scan" button to start scan



On completion of the scan click save log, save it to your desktop and post in your next reply





NEXT:




Please download Junkware Removal Tool to your desktop.

• Shut down your protection software now to avoid potential conflicts.
• Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
• The tool will open and start scanning your system.
• Please be patient as this can take a while to complete depending on your system's specifications.
• On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
• Post the contents of JRT.txt into your next message.

[SweetTech]

Hello and welcome to the forums!

My secret agent name on the forums is SweetTech (you can call me ST for short), it's a pleasure to meet you.

I'll be addressing you by your username, if you'd like me to address you by something else, please let me know!

I would be glad to take a look at your log and help you with solving any malware problems.

If you have since resolved the issues you were originally experiencing, or have received help elsewhere, please inform me so that this topic can be closed.

If you have not, please adhere to the guidelines below and then follow instructions as outlined further below:

• Logs from malware removal programs (OTL is one of them) can take some time to analyze. I need you to be patient while I analyze any logs you post. Please remember, I am a volunteer, and I do have a life outside of these forums.
  
• Please make sure to carefully read any instruction that I give you. Attention to detail is important! Since I cannot see or directly interact with your computer I am dependent on you to "be my eyes" and provide as much information as you can regarding the current state of your computer.
  
• If you're not sure, or if something unexpected happens, do NOT continue! Stop and ask!
  
• In Windows Vista and Windows 7, all tools need to be started by right clicking and selecting Run as Administrator!
  
• If I instruct you to download a specific tool in which you already have, please delete the copy that you have and re-download the tool. The reason I ask you to do this is because these tools are updated fairly regularly.
  
• Do not do things I do not ask for, such as running a spyware scan on your computer. The one thing that you should always do, is to make sure sure that your anti-virus definitions are up-to-date!
  
• Please do not use the Attachment feature for any log file. Do a Copy/Paste of the entire contents of the log file and submit it inside your post.
  
• I am going to stick with you until ALL malware is gone from your system. I would appreciate it if you would do the same. From this point, we're in this together
  
  
  • Because of this, you must reply within 3 days failure to reply will result in the topic being closed! I like chocolate chip cookies.
• Lastly, I am no magician. I will try very hard to fix your issues, but no promises can be made. Also be aware that some infections are so severe that you might need to resort to reformatting and reinstalling your operating system or even taking your computer into a repair shop.
  
  
  • Don't worry, this only happens in severe cases, but it sadly does happen. Be prepared to back up your data and have means of backing up your data available.

____________________________________________________


Running aswMBR.exe

Download aswMBR.exe ( 1.8mb ) to your desktop.
Double click the aswMBR.exe to run it Click the "Scan" button to start scan



On completion of the scan click save log, save it to your desktop and post in your next reply





NEXT:




Please download Junkware Removal Tool to your desktop.

• Shut down your protection software now to avoid potential conflicts.
• Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
• The tool will open and start scanning your system.
• Please be patient as this can take a while to complete depending on your system's specifications.
• On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
• Post the contents of JRT.txt into your next message.

[rforexdad]

here is the copy of aswmbr.txt
===============================
aswMBR version 0.9.9.1771 Copyright© 2011 AVAST Software
Run date: 2013-07-23 18:53:27
-----------------------------
18:53:27.753 OS Version: Windows x64 6.1.7601 Service Pack 1
18:53:27.753 Number of processors: 4 586 0x402
18:53:27.754 ComputerName: RFOREX1_WIN7 UserName: rforex1_7
18:53:27.904 Initialize success
18:53:42.983 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP3T0L0-3
18:53:42.987 Disk 0 Vendor: OCZ-SOLID3 2.11 Size: 57241MB BusType: 3
18:53:42.991 Disk 1 \Device\Harddisk1\DR1 -> \Device\Ide\IdeDeviceP5T1L0-a
18:53:42.995 Disk 1 Vendor: WDC_WD20EARX-32PASB0 51.0AB51 Size: 1907729MB BusType: 3
18:53:42.999 Disk 2 \Device\Harddisk2\DR2 -> \Device\Ide\IdeDeviceP6T0L0-c
18:53:43.004 Disk 2 Vendor: MARVELL_Raid_VD_0 MV.R00-0 Size: 1906688MB BusType: 11
18:53:43.010 Disk 0 MBR read successfully
18:53:43.016 Disk 0 MBR scan
18:53:43.023 Disk 0 Windows 7 default MBR code
18:53:43.030 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 57231 MB offset 63
18:53:43.038 Disk 0 scanning C:\Windows\system32\drivers
18:53:46.042 Service scanning
18:53:50.441 Service sptd C:\Windows\System32\Drivers\sptd.sys **LOCKED** 32
18:53:52.562 Modules scanning
18:53:52.994 Disk 0 trace - called modules:
18:53:53.004 ntoskrnl.exe CLASSPNP.SYS disk.sys Sahdad64.sys ACPI.sys >>UNKNOWN [0xfffffa80037942c0]<<spkk.sys ataport.SYS pciide.sys PCIIDEX.SYS hal.dll atapi.sys
18:53:53.013 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa8004016060]
18:53:53.024 3 CLASSPNP.SYS[fffff8800198d43f] -> nt!IofCallDriver -> [0xfffffa8003f0ea20]
18:53:53.035 5 Sahdad64.sys[fffff88001918e25] -> nt!IofCallDriver -> [0xfffffa8003d61520]
18:53:53.044 7 ACPI.sys[fffff8800119b7a1] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP3T0L0-3[0xfffffa8003d50060]
18:53:53.057 \Driver\atapi[0xfffffa80037f2060] -> IRP_MJ_CREATE -> 0xfffffa80037942c0
18:53:53.078 Scan finished successfully
18:54:13.968 Disk 0 MBR has been saved successfully to "C:\Users\rforex1_7\Desktop\MBR.dat"
18:54:13.988 The log file has been saved successfully to "C:\Users\rforex1_7\Desktop\aswMBR.txt"

[rforexdad]

here is a copy of the JRT.txt
==============================
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 5.2.2 (07.22.2013:2)
OS: Windows 7 Ultimate x64
Ran by rforex1_7 on Tue 07/23/2013 at 18:58:11.34
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Failed to delete: [Registry Key] HKEY_CLASSES_ROOT\clsid\{80922ee0-8a76-46ae-95d5-bd3c3fe0708d}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\interface\{10de7085-6a1e-4d41-a7bf-9af93e351401}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\interface\{1ad27395-1659-4dff-a319-2cfa243861a5}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\interface\{79fb5fc8-44b9-4af5-badd-cce547f953e5}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\clsid\{80922ee0-8a76-46ae-95d5-bd3c3fe0708d}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\ilivid
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\supreme savings
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\crossrider
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\windows\currentversion\ext\stats\{df7770f7-832f-4bdf-b144-100eddd0c3ae}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{AFBCB7E0-F91A-4951-9F31-58FEE57A25C4}



~~~ Files

Successfully deleted: [File] "C:\end"



~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\tarma installer"
Successfully deleted: [Folder] "C:\Users\rforex1_7\appdata\local\supreme savings"
Successfully deleted: [Folder] "C:\Users\rforex1_7\appdata\local\swvupdater"
Successfully deleted: [Folder] "C:\Program Files (x86)\oapps"



~~~ Chrome

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\extensioninstallforcelist [Blacklisted Policy]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Tue 07/23/2013 at 19:02:48.96
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

[rforexdad]

I did the following
I started task manager and in the processes tab I also added the column I/O reads and sorted the output descending
I found that I have a process called csrss.exe which has no description
I googled the term csrss.exe and found a number of hits relating to this mentioning that this is a virus...
However I have taken no action to clean up the offending csrss.exe

I would rather wait for instructions from you.
I feel that many websites exists for the sole purposes of infecting computers and or trying to sell you products (No Offence - Geeks to Go is not included in the infecting/selling group..IMHO)
I do have Norton anti virus which I turned off before starting the JRT process
I have turned on the Norton anti-virus after the JRT scan
I am surprised that csrss.exe has not been caught by Norton but I definitely am aware that Norton/macafee and other anti-virus are really not able to catch ALL trojans/spyware/malware/viruses

I shall regularly read this thread to catch your messages

Edited by rforexdad, 24 July 2013 - 02:37 AM.

[rforexdad]

I found out that csrss.exe stands for
Client/Server Run-Time Subsystem, and is an essential subsystem that must be running at all times. This is an essential microsoft OS process.

so...that is good news that this is not a virus

but I am sure that I still have some other malware stuff in the computer
I hate the techie terms ...adware/ virus/ trojan/ spyware/ bot/ BHO/ hijack etc etc
to me all of them are not what the user wants...and hence I refer to all of them as

MALWARE

[SweetTech]

Hi!

Apologies for not responding sooner.

Yes, you are correct, in your statement that csrss.exe is a critical task that is needed to be run.

Lets have you run a new OTL report so I can see an updated log of what your computer is showing.

OTL Custom Scan

We need to run an OTL Custom Scan

• Please reopen on your desktop.
• Copy and Paste the following code into the textbox.
  
  

  
  CREATERESTOREPOINT
  msconfig
  safebootminimal
  activex
  drivers32
  netsvcs
  "%WinDir%\$NtUninstallKB*$."
  %systemroot%\*. /rp /s
  C:\Program Files\Common Files\ComObjects\*.* /s
  hklm\software\clients\startmenuinternet|command /rs
  hklm\software\clients\startmenuinternet|command /64 /rs
  %USERPROFILE%\AppData\Local\Google\Chrome\User Data\*.* /s
  HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU
  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs
  

• Push the Quick Scan button.
• A report will open. Copy and Paste that report in your next reply.

[rforexdad]

Here are the records with the custom scan
=========================================
OTL logfile created on: 7/29/2013 3:48:35 AM - Run 2
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\rforex1_7\Desktop
64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16635)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

3.75 Gb Total Physical Memory | 1.88 Gb Available Physical Memory | 50.06% Memory free
7.50 Gb Paging File | 5.47 Gb Available in Paging File | 72.95% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 55.89 Gb Total Space | 17.68 Gb Free Space | 31.62% Space Free | Partition Type: NTFS
Drive E: | 1863.01 Gb Total Space | 1016.68 Gb Free Space | 54.57% Space Free | Partition Type: NTFS
Drive F: | 1861.87 Gb Total Space | 780.35 Gb Free Space | 41.91% Space Free | Partition Type: NTFS
Drive G: | 1863.01 Gb Total Space | 1840.16 Gb Free Space | 98.77% Space Free | Partition Type: NTFS
Drive H: | 2794.51 Gb Total Space | 1686.09 Gb Free Space | 60.34% Space Free | Partition Type: NTFS
Drive J: | 2794.51 Gb Total Space | 1059.37 Gb Free Space | 37.91% Space Free | Partition Type: NTFS
Drive K: | 2794.51 Gb Total Space | 1423.79 Gb Free Space | 50.95% Space Free | Partition Type: NTFS

Computer Name: RFOREX1_WIN7 | User Name: rforex1_7 | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2013/07/23 01:41:56 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\rforex1_7\Desktop\OTL.exe
PRC - [2013/07/12 11:49:47 | 000,846,288 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
PRC - [2013/07/08 04:09:10 | 011,596,128 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe
PRC - [2013/07/08 04:09:10 | 004,153,184 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
PRC - [2013/07/08 03:59:02 | 000,195,936 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version8\tv_w32.exe
PRC - [2013/05/20 21:44:22 | 000,144,368 | R--- | M] (Symantec Corporation) -- C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccsvchst.exe
PRC - [2013/05/11 03:37:26 | 000,065,640 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2013/04/08 18:57:08 | 003,573,624 | ---- | M] (Tonec Inc.) -- C:\Program Files (x86)\Internet Download Manager\IDMan.exe
PRC - [2013/02/19 22:32:20 | 001,259,296 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
PRC - [2012/12/12 06:44:48 | 000,268,248 | ---- | M] (Tonec Inc.) -- C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe
PRC - [2012/08/23 12:37:16 | 000,013,672 | ---- | M] (Intuit Inc.) -- C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe
PRC - [2009/07/21 11:50:02 | 000,084,464 | ---- | M] () -- E:\roxio\Roxio 2010\5.0\CPMonitor.exe
PRC - [2009/06/23 17:40:12 | 000,127,352 | ---- | M] (CinemaNow, Inc.) -- C:\Program Files (x86)\CinemaNow\CinemaNow Media Manager\CinemaNowSvc.exe
PRC - [2009/06/23 01:18:52 | 000,494,064 | ---- | M] () -- E:\roxio\Roxio 2010\Roxio Burn\RoxioBurnLauncher.exe
PRC - [2009/06/02 19:05:58 | 000,457,200 | ---- | M] () -- C:\Program Files (x86)\Roxio\BackOnTrack\Disaster Recovery\SaibSVC.exe
PRC - [2009/03/24 01:01:00 | 000,113,136 | ---- | M] (Sonic Solutions) -- C:\Program Files (x86)\Common Files\PX Storage Engine\VxBlockServer.exe


========== Modules (No Company Name) ==========

MOD - [2013/07/12 11:49:44 | 000,396,240 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.72\ppgooglenaclpluginchrome.dll
MOD - [2013/07/12 11:49:43 | 013,599,184 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.72\PepperFlash\pepflashplayer.dll
MOD - [2013/07/12 11:49:42 | 004,052,944 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.72\pdf.dll
MOD - [2013/07/12 11:48:52 | 000,601,552 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.72\libglesv2.dll
MOD - [2013/07/12 11:48:51 | 000,123,344 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.72\libegl.dll
MOD - [2013/07/12 11:48:49 | 001,597,392 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.72\ffmpegsumo.dll
MOD - [2013/01/28 14:08:56 | 000,087,952 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
MOD - [2013/01/28 14:08:28 | 001,242,512 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
MOD - [2012/05/30 07:51:08 | 000,699,280 | R--- | M] () -- C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\wincfi39.dll
MOD - [2011/03/17 00:11:16 | 004,297,568 | ---- | M] () -- C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
MOD - [2010/10/20 15:45:26 | 008,801,120 | ---- | M] () -- C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveIntlResource.dll
MOD - [2009/07/21 11:50:02 | 000,084,464 | ---- | M] () -- E:\roxio\Roxio 2010\5.0\CPMonitor.exe
MOD - [2009/06/23 01:18:52 | 000,494,064 | ---- | M] () -- E:\roxio\Roxio 2010\Roxio Burn\RoxioBurnLauncher.exe
MOD - [2007/10/26 10:04:40 | 000,068,080 | ---- | M] () -- C:\Program Files (x86)\Common Files\Roxio Shared\9.0\DLLShared\dlaapi_w.dll


========== Services (SafeList) ==========

SRV:64bit: - [2013/05/26 22:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:64bit: - [2012/04/03 13:25:06 | 000,287,016 | ---- | M] (SonicWALL, Inc.) [Auto | Running] -- C:\Program Files\SonicWALL\SonicWALL Global VPN Client\SWGVCSvc.exe -- (SWGVCSvc)
SRV:64bit: - [2011/04/20 02:04:20 | 000,203,776 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
SRV:64bit: - [2009/07/13 18:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
SRV - [2013/07/08 04:09:10 | 004,153,184 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe -- (TeamViewer8)
SRV - [2013/06/07 17:22:57 | 000,226,640 | ---- | M] (LogMeIn, Inc.) [Auto | Running] -- C:\Program Files (x86)\LogMeIn\x64\ramaint.exe -- (LMIMaint)
SRV - [2013/06/07 17:22:55 | 000,376,144 | ---- | M] (LogMeIn, Inc.) [Auto | Running] -- C:\Program Files (x86)\LogMeIn\x64\LMIGuardianSvc.exe -- (LMIGuardianSvc)
SRV - [2013/05/20 21:44:22 | 000,144,368 | R--- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe -- (NIS)
SRV - [2013/05/11 03:37:26 | 000,065,640 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2013/02/28 19:25:34 | 000,161,384 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2013/02/19 22:32:20 | 001,259,296 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService)
SRV - [2012/11/29 12:56:50 | 000,407,424 | ---- | M] (LogMeIn, Inc.) [Auto | Running] -- C:\Program Files (x86)\LogMeIn\x64\LogMeIn.exe -- (LogMeIn)
SRV - [2012/08/23 12:37:16 | 000,013,672 | ---- | M] (Intuit Inc.) [Auto | Running] -- C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe -- (IntuitUpdateServiceV4)
SRV - [2010/03/18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2009/07/24 08:33:34 | 000,219,632 | ---- | M] (Sonic Solutions) [Auto | Stopped] -- C:\Program Files (x86)\Common Files\Roxio Shared\12.0\SharedCOM\RoxWatch12.exe -- (RoxWatch12)
SRV - [2009/07/24 08:33:10 | 001,116,656 | ---- | M] (Sonic Solutions) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Roxio Shared\12.0\SharedCOM\RoxMediaDB12.exe -- (RoxMediaDB12)
SRV - [2009/06/23 17:40:12 | 000,127,352 | ---- | M] (CinemaNow, Inc.) [Auto | Running] -- C:\Program Files (x86)\CinemaNow\CinemaNow Media Manager\CinemaNowSvc.exe -- (CinemaNow Service)
SRV - [2009/06/10 14:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2009/06/02 19:05:58 | 000,457,200 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Roxio\BackOnTrack\Disaster Recovery\SaibSVC.exe -- (9734BF6A-2DCD-40f0-BAB0-5AAFEEBE1269)


========== Driver Services (SafeList) ==========

DRV:64bit: - [2013/07/23 02:29:52 | 000,177,312 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SYMEVENT64x86.SYS -- (SymEvent)
DRV:64bit: - [2013/06/07 17:22:55 | 000,107,368 | ---- | M] (LogMeIn, Inc.) [File_System | Disabled | Stopped] -- C:\Windows\SysNative\LMIRfsClientNP.dll -- (LMIRfsClientNP)
DRV:64bit: - [2013/05/22 22:25:28 | 001,139,800 | ---- | M] (Symantec Corporation) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\NISx64\1404000.028\symefa64.sys -- (SymEFA)
DRV:64bit: - [2013/05/20 22:02:00 | 000,493,656 | ---- | M] (Symantec Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\NISx64\1404000.028\symds64.sys -- (SymDS)
DRV:64bit: - [2013/05/15 22:02:14 | 000,796,760 | ---- | M] (Symantec Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\NISx64\1404000.028\srtsp64.sys -- (SRTSP)
DRV:64bit: - [2013/04/24 17:43:56 | 000,433,752 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\NISx64\1404000.028\symnets.sys -- (SymNetS)
DRV:64bit: - [2013/04/15 19:41:14 | 000,169,048 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\NISx64\1404000.028\ccsetx64.sys -- (ccSet_NIS)
DRV:64bit: - [2013/04/05 04:32:40 | 000,166,576 | ---- | M] (Tonec Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\idmwfp.sys -- (IDMWFP)
DRV:64bit: - [2013/03/10 09:00:15 | 000,834,544 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd)
DRV:64bit: - [2013/03/04 18:21:35 | 000,036,952 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\NISx64\1404000.028\srtspx64.sys -- (SRTSPX)
DRV:64bit: - [2012/12/13 14:50:36 | 000,054,784 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64)
DRV:64bit: - [2012/11/29 12:56:50 | 000,072,216 | ---- | M] (LogMeIn, Inc.) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\LMIRfsDriver.sys -- (LMIRfsDriver)
DRV:64bit: - [2012/11/29 12:56:30 | 000,011,552 | ---- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\lmimirr.sys -- (lmimirr)
DRV:64bit: - [2012/09/06 18:48:08 | 000,224,416 | R--- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\NISx64\1404000.028\ironx64.sys -- (SymIRON)
DRV:64bit: - [2012/08/23 07:12:16 | 000,029,696 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\terminpt.sys -- (terminpt)
DRV:64bit: - [2012/08/23 07:10:20 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV:64bit: - [2012/08/23 07:08:26 | 000,030,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV:64bit: - [2012/08/23 07:07:35 | 000,057,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2012/08/21 14:01:20 | 000,033,240 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)
DRV:64bit: - [2012/04/03 13:24:48 | 000,100,128 | ---- | M] (SonicWALL, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\SWIPsec.sys -- (SWIPsec)
DRV:64bit: - [2012/02/29 23:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2012/02/07 11:51:52 | 000,024,600 | ---- | M] (SonicWALL, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SWVNIC.sys -- (SWVNIC)
DRV:64bit: - [2011/08/04 00:10:56 | 000,132,184 | ---- | M] (Citrix Systems, Inc.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\dnelwf64.sys -- (DNE)
DRV:64bit: - [2011/06/10 06:34:52 | 000,539,240 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:64bit: - [2011/04/20 02:44:50 | 009,319,936 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag)
DRV:64bit: - [2011/04/20 01:22:34 | 000,306,176 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)
DRV:64bit: - [2011/03/10 23:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011/03/10 23:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2010/11/20 20:23:48 | 000,117,248 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tsusbhub.sys -- (tsusbhub)
DRV:64bit: - [2010/11/20 20:23:48 | 000,088,960 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Synth3dVsc.sys -- (Synth3dVsc)
DRV:64bit: - [2010/11/20 20:23:48 | 000,071,168 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dmvsc.sys -- (dmvsc)
DRV:64bit: - [2010/11/20 20:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2009/07/13 18:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009/07/13 18:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009/07/13 18:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009/07/09 03:00:00 | 000,055,280 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\PxHlpa64.sys -- (PxHlpa64)
DRV:64bit: - [2009/06/10 13:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009/06/10 13:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009/06/10 13:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009/06/10 13:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2009/06/02 01:00:00 | 000,027,632 | ---- | M] (Sonic Solutions) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\SaibVdAd64.sys -- (SaibVdAd64)
DRV:64bit: - [2009/06/02 01:00:00 | 000,027,120 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\Sahdad64.sys -- (Sahdad64)
DRV:64bit: - [2009/06/02 01:00:00 | 000,019,952 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\Saibad64.sys -- (Saibad64)
DRV - [2013/07/22 17:25:51 | 002,098,776 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.2.0.19\Definitions\VirusDefs\20130728.020\ex64.sys -- (NAVEX15)
DRV - [2013/07/22 17:25:51 | 000,484,512 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys -- (eeCtrl)
DRV - [2013/07/22 17:25:51 | 000,138,912 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys -- (EraserUtilRebootDrv)
DRV - [2013/07/22 17:25:51 | 000,126,040 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.2.0.19\Definitions\VirusDefs\20130728.020\eng64.sys -- (NAVENG)
DRV - [2013/07/20 06:02:34 | 000,513,184 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.2.0.19\Definitions\IPSDefs\20130726.001\IDSviA64.sys -- (IDSVia64)
DRV - [2013/05/31 17:22:56 | 000,016,056 | ---- | M] (LogMeIn, Inc.) [Kernel | Auto | Running] -- C:\Program Files (x86)\LogMeIn\x64\rainfo.sys -- (LMIInfo)
DRV - [2013/05/20 21:41:34 | 001,393,240 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.2.0.19\Definitions\BASHDefs\20130715.001\BHDrvx64.sys -- (BHDrvx64)
DRV - [2009/07/13 18:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...ms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...ms}&FORM=IE8SRC

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = file:///C:/Data/bookmark2.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = C4 0C FD 2F C3 1C CE 01 [binary data]
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...Box&FORM=IE10SR
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local


========== FireFox ==========

FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{BBDA0591-3099-440a-AA10-41764D9DB4DB}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.2.0.19\IPSFFPlgn\ [2013/07/23 02:30:12 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.2.0.19\coFFPlgn\ [2013/07/28 19:42:53 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\SeaMonkey\Extensions\\[email protected]: C:\Users\rforex1_7\AppData\Roaming\IDM\idmmzcc5 [2013/04/08 18:59:51 | 000,000,000 | ---D | M]


========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter},
CHR - homepage: http://www.google.com/
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.72\PepperFlash\pepflashplayer.dll
CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.72\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.72\pdf.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll
CHR - Extension: Google Docs = C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\
CHR - Extension: Google Drive = C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
CHR - Extension: YouTube = C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\
CHR - Extension: Google Search = C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\
CHR - Extension: avast! Online Security = C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\
CHR - Extension: IDM Integration = C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmolcgpienlcieaajfkkdamlngancncm\6.15.12.2_0\
CHR - Extension: Norton Identity Protection = C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\
CHR - Extension: Gmail = C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\

O1 HOSTS File: ([2009/06/10 14:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:64bit: - BHO: (IDM integration (IDMIEHlprObj Class)) - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll (Internet Download Manager, Tonec Inc.)
O2 - BHO: (IDM integration (IDMIEHlprObj Class)) - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll (Internet Download Manager, Tonec Inc.)
O2 - BHO: (Norton Identity Protection) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\coieplg.dll (Symantec Corporation)
O2 - BHO: (Norton Vulnerability Protection) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ips\ipsbho.dll (Symantec Corporation)
O2 - BHO: (no name) - {EF3CB363-38C4-4DA3-B398-DE6184A7819B} - No CLSID value found.
O3 - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\coieplg.dll (Symantec Corporation)
O3 - HKCU\..\Toolbar\WebBrowser: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\coieplg.dll (Symantec Corporation)
O4:64bit: - HKLM..\Run: [LogMeIn GUI] C:\Program Files (x86)\LogMeIn\x64\LogMeInSystray.exe (LogMeIn, Inc.)
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [CPMonitor] E:\roxio\Roxio 2010\5.0\CPMonitor.exe ()
O4 - HKLM..\Run: [Desktop Disc Tool] E:\roxio\Roxio 2010\Roxio Burn\RoxioBurnLauncher.exe ()
O4 - HKLM..\Run: [RoxWatchTray] C:\Program Files (x86)\Common Files\Roxio Shared\12.0\SharedCOM\RoxWatchTray12.exe (Sonic Solutions)
O4 - HKCU..\Run: [IDMan] C:\Program Files (x86)\Internet Download Manager\IDMan.exe (Tonec Inc.)
O4 - Startup: C:\Users\rforex1_7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\SonicWALL Global VPN Client.lnk = File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O8:64bit: - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200 File not found
O8:64bit: - Extra context menu item: Download all links with IDM - C:\Program Files (x86)\Internet Download Manager\IEGetAll.htm ()
O8:64bit: - Extra context menu item: Download with IDM - C:\Program Files (x86)\Internet Download Manager\IEExt.htm ()
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\SysWow64\GPhotos.scr (Google Inc.)
O8 - Extra context menu item: Download all links with IDM - C:\Program Files (x86)\Internet Download Manager\IEGetAll.htm ()
O8 - Extra context menu item: Download with IDM - C:\Program Files (x86)\Internet Download Manager\IEExt.htm ()
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O15 - HKCU\..Trusted Domains: cinemanow.com ([]http in Trusted sites)
O15 - HKCU\..Trusted Domains: cinemanow.com ([]https in Trusted sites)
O15 - HKCU\..Trusted Domains: qflix.com ([]http in Trusted sites)
O15 - HKCU\..Trusted Domains: roxio.com ([]http in Trusted sites)
O15 - HKCU\..Trusted Domains: sonic.com ([redirect] http in Trusted sites)
O15 - HKCU\..Trusted Domains: sonic.com ([redirect2] http in Trusted sites)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.m...ash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.1.1.21 10.1.2.10
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{122FDF90-8913-4137-85A0-B71D3C594F6A}: DhcpNameServer = 10.1.1.21 10.1.2.10
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{F7076AB2-1776-47F1-A75C-7661BA7656BE}: DhcpNameServer = 192.168.1.1
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2011/09/29 16:16:43 | 000,000,000 | ---- | M] () - G:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2010/07/09 18:06:04 | 000,000,000 | RH-D | M] - G:\autorun -- [ NTFS ]
O32 - AutoRun File - [2002/10/16 05:56:50 | 000,000,036 | RH-- | M] () - G:\autorun.inf -- [ NTFS ]
O32 - AutoRun File - [2012/07/16 00:33:32 | 000,000,040 | -H-- | M] () - H:\Autorun.inf -- [ NTFS ]
O32 - AutoRun File - [2010/01/10 18:54:52 | 000,000,170 | ---- | M] () - J:\Autorun.inf -- [ NTFS ]
O32 - AutoRun File - [2012/07/16 00:33:32 | 000,000,040 | -H-- | M] () - K:\Autorun.inf -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point


SafeBootMin:64bit: AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
SafeBootMin:64bit: Base - Driver Group
SafeBootMin:64bit: Boot Bus Extender - Driver Group
SafeBootMin:64bit: Boot file system - Driver Group
SafeBootMin:64bit: File system - Driver Group
SafeBootMin:64bit: Filter - Driver Group
SafeBootMin:64bit: HelpSvc - Service
SafeBootMin:64bit: PCI Configuration - Driver Group
SafeBootMin:64bit: PNP Filter - Driver Group
SafeBootMin:64bit: Primary disk - Driver Group
SafeBootMin:64bit: sacsvr - Service
SafeBootMin:64bit: SCSI Class - Driver Group
SafeBootMin:64bit: System Bus Extender - Driver Group
SafeBootMin:64bit: vmms - Service
SafeBootMin:64bit: WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SafeBootMin:64bit: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin:64bit: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin:64bit: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin:64bit: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin:64bit: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin:64bit: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin:64bit: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin:64bit: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin:64bit: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin:64bit: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin:64bit: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin:64bit: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin:64bit: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin:64bit: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin:64bit: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin:64bit: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin:64bit: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: HelpSvc - Service
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Primary disk - Driver Group
SafeBootMin: sacsvr - Service
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: vmms - Service
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

ActiveX:64bit: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX:64bit: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX:64bit: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX:64bit: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX:64bit: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX:64bit: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX:64bit: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX:64bit: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX:64bit: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX:64bit: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX:64bit: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX:64bit: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX:64bit: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX:64bit: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -UserConfig
ActiveX:64bit: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
ActiveX:64bit: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX:64bit: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX:64bit: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX:64bit: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX:64bit: {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework
ActiveX:64bit: {FEBEF00C-046D-438D-8A88-BF94A6C9E703} - .NET Framework
ActiveX:64bit: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles(x86)%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} -
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\SysWOW64\Rundll32.exe C:\Windows\SysWOW64\mscories.dll,Install
ActiveX: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.72\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP

Drivers32:64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.divxa32 - C:\Windows\SysWow64\msaud32_divx.acm (Microsoft Corporation)
Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)

NetSvcs:64bit: AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)

========== Files/Folders - Created Within 30 Days ==========

[2013/07/29 03:47:37 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\rforex1_7\Desktop\OTL.exe
[2013/07/24 10:17:06 | 000,000,000 | ---D | C] -- C:\Users\rforex1_7\AppData\Local\CrashDumps
[2013/07/23 18:58:08 | 000,000,000 | ---D | C] -- C:\Windows\ERUNT
[2013/07/23 18:56:08 | 000,560,934 | ---- | C] (Oleg N. Scherbakov) -- C:\Users\rforex1_7\Desktop\JRT.exe
[2013/07/23 02:46:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Symantec Shared
[2013/07/23 02:31:12 | 000,000,000 | ---D | C] -- C:\Users\rforex1_7\Documents\Symantec
[2013/07/23 02:29:52 | 000,177,312 | ---- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\SYMEVENT64x86.SYS
[2013/07/23 02:29:52 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Symantec Shared
[2013/07/23 02:29:45 | 001,139,800 | ---- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\NISx64\1404000.028\symefa64.sys
[2013/07/23 02:29:45 | 000,493,656 | ---- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\NISx64\1404000.028\symds64.sys
[2013/07/23 02:29:45 | 000,433,752 | ---- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\NISx64\1404000.028\symnets.sys
[2013/07/23 02:29:45 | 000,023,448 | R--- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\NISx64\1404000.028\symelam.sys
[2013/07/23 02:29:44 | 000,796,760 | ---- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\NISx64\1404000.028\srtsp64.sys
[2013/07/23 02:29:44 | 000,224,416 | R--- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\NISx64\1404000.028\ironx64.sys
[2013/07/23 02:29:44 | 000,169,048 | ---- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\NISx64\1404000.028\ccsetx64.sys
[2013/07/23 02:29:44 | 000,036,952 | ---- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\NISx64\1404000.028\srtspx64.sys
[2013/07/23 02:29:22 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\NISx64\1404000.028
[2013/07/23 02:29:05 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\NISx64
[2013/07/23 02:29:03 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Internet Security
[2013/07/23 02:29:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Norton Internet Security
[2013/07/23 02:27:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Norton
[2013/07/23 02:26:27 | 000,000,000 | ---D | C] -- C:\ProgramData\NortonInstaller
[2013/07/23 02:26:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\NortonInstaller
[2013/07/19 10:39:23 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\appmgmt
[2013/07/13 14:03:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Office Genuine Advantage
[2013/07/13 08:47:37 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\MRT
[2013/07/11 02:10:34 | 000,000,000 | ---D | C] -- C:\Windows\AutoKMS
[2013/06/30 10:14:57 | 000,000,000 | ---D | C] -- C:\Users\rforex1_7\Documents\Roxio
[2013/06/29 11:04:58 | 000,000,000 | ---D | C] -- C:\Users\rforex1_7\AppData\Local\ElevatedDiagnostics

========== Files - Modified Within 30 Days ==========

[2013/07/29 03:44:40 | 000,002,276 | -H-- | M] () -- C:\Users\rforex1_7\Documents\Default.rdp
[2013/07/29 03:21:01 | 000,000,904 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2013/07/28 19:49:02 | 000,026,576 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013/07/28 19:49:02 | 000,026,576 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013/07/28 19:48:50 | 000,778,834 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2013/07/28 19:48:50 | 000,660,068 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2013/07/28 19:48:50 | 000,120,996 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2013/07/28 19:41:35 | 000,000,900 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2013/07/28 19:41:22 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013/07/28 19:40:50 | 3019,247,616 | -HS- | M] () -- C:\hiberfil.sys
[2013/07/23 18:55:38 | 000,560,934 | ---- | M] (Oleg N. Scherbakov) -- C:\Users\rforex1_7\Desktop\JRT.exe
[2013/07/23 18:54:13 | 000,000,512 | ---- | M] () -- C:\Users\rforex1_7\Desktop\MBR.dat
[2013/07/23 02:29:58 | 001,682,239 | ---- | M] () -- C:\Windows\SysNative\drivers\NISx64\1404000.028\Cat.DB
[2013/07/23 02:29:52 | 000,177,312 | ---- | M] (Symantec Corporation) -- C:\Windows\SysNative\drivers\SYMEVENT64x86.SYS
[2013/07/23 02:29:52 | 000,007,631 | ---- | M] () -- C:\Windows\SysNative\drivers\SYMEVENT64x86.CAT
[2013/07/23 02:29:52 | 000,000,854 | ---- | M] () -- C:\Windows\SysNative\drivers\SYMEVENT64x86.INF
[2013/07/23 02:29:51 | 000,002,569 | ---- | M] () -- C:\Users\Public\Desktop\Norton Internet Security.lnk
[2013/07/23 01:41:56 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\rforex1_7\Desktop\OTL.exe
[2013/07/20 21:32:38 | 000,001,945 | ---- | M] () -- C:\Windows\epplauncher.mif
[2013/07/13 09:50:35 | 000,001,014 | ---- | M] () -- C:\Users\rforex1_7\Desktop\CdSoftwareLibrary.lnk
[2013/07/13 06:14:08 | 000,001,090 | ---- | M] () -- C:\Users\Public\Desktop\TeamViewer 8.lnk
[2013/07/12 21:24:35 | 000,002,183 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
[2013/07/11 00:58:00 | 000,465,008 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2013/07/11 00:44:29 | 000,772,558 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2013/07/02 01:11:31 | 000,000,600 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\PUTTY.RND
[2013/06/30 10:14:57 | 000,018,972 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\rx_audio.Cache
[2013/06/30 10:14:57 | 000,000,648 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\rx_image32.Cache

========== Files Created - No Company Name ==========

[2013/07/23 18:54:13 | 000,000,512 | ---- | C] () -- C:\Users\rforex1_7\Desktop\MBR.dat
[2013/07/23 02:35:52 | 000,014,818 | ---- | C] () -- C:\Windows\SysNative\drivers\NISx64\1404000.028\VT20130115.021
[2013/07/23 02:29:52 | 001,682,239 | ---- | C] () -- C:\Windows\SysNative\drivers\NISx64\1404000.028\Cat.DB
[2013/07/23 02:29:52 | 000,007,631 | ---- | C] () -- C:\Windows\SysNative\drivers\SYMEVENT64x86.CAT
[2013/07/23 02:29:52 | 000,000,854 | ---- | C] () -- C:\Windows\SysNative\drivers\SYMEVENT64x86.INF
[2013/07/23 02:29:51 | 000,002,569 | ---- | C] () -- C:\Users\Public\Desktop\Norton Internet Security.lnk
[2013/07/23 02:29:45 | 000,009,670 | R--- | C] () -- C:\Windows\SysNative\drivers\NISx64\1404000.028\symelam64.cat
[2013/07/23 02:29:45 | 000,008,067 | ---- | C] () -- C:\Windows\SysNative\drivers\NISx64\1404000.028\symnet64.cat
[2013/07/23 02:29:45 | 000,008,063 | ---- | C] () -- C:\Windows\SysNative\drivers\NISx64\1404000.028\symds64.cat
[2013/07/23 02:29:45 | 000,007,587 | ---- | C] () -- C:\Windows\SysNative\drivers\NISx64\1404000.028\symefa64.cat
[2013/07/23 02:29:45 | 000,003,434 | ---- | C] () -- C:\Windows\SysNative\drivers\NISx64\1404000.028\symefa.inf
[2013/07/23 02:29:45 | 000,002,852 | ---- | C] () -- C:\Windows\SysNative\drivers\NISx64\1404000.028\symds.inf
[2013/07/23 02:29:45 | 000,001,440 | ---- | C] () -- C:\Windows\SysNative\drivers\NISx64\1404000.028\symnet.inf
[2013/07/23 02:29:45 | 000,000,996 | R--- | C] () -- C:\Windows\SysNative\drivers\NISx64\1404000.028\symelam.inf
[2013/07/23 02:29:44 | 000,008,067 | ---- | C] () -- C:\Windows\SysNative\drivers\NISx64\1404000.028\srtsp64.cat
[2013/07/23 02:29:44 | 000,007,667 | ---- | C] () -- C:\Windows\SysNative\drivers\NISx64\1404000.028\ccsetx64.cat
[2013/07/23 02:29:44 | 000,007,593 | R--- | C] () -- C:\Windows\SysNative\drivers\NISx64\1404000.028\iron.cat
[2013/07/23 02:29:44 | 000,007,589 | ---- | C] () -- C:\Windows\SysNative\drivers\NISx64\1404000.028\srtspx64.cat
[2013/07/23 02:29:44 | 000,001,437 | ---- | C] () -- C:\Windows\SysNative\drivers\NISx64\1404000.028\srtsp64.inf
[2013/07/23 02:29:44 | 000,001,420 | ---- | C] () -- C:\Windows\SysNative\drivers\NISx64\1404000.028\srtspx64.inf
[2013/07/23 02:29:44 | 000,000,853 | ---- | C] () -- C:\Windows\SysNative\drivers\NISx64\1404000.028\ccsetx64.inf
[2013/07/23 02:29:44 | 000,000,767 | R--- | C] () -- C:\Windows\SysNative\drivers\NISx64\1404000.028\iron.inf
[2013/07/23 02:29:44 | 000,000,172 | ---- | C] () -- C:\Windows\SysNative\drivers\NISx64\1404000.028\isolate.ini
[2013/07/13 09:50:06 | 000,001,014 | ---- | C] () -- C:\Users\rforex1_7\Desktop\CdSoftwareLibrary.lnk
[2013/07/13 08:54:23 | 000,001,945 | ---- | C] () -- C:\Windows\epplauncher.mif
[2013/06/30 10:14:56 | 000,018,972 | ---- | C] () -- C:\Users\rforex1_7\AppData\Local\rx_audio.Cache
[2013/06/30 10:10:07 | 000,000,648 | ---- | C] () -- C:\Users\rforex1_7\AppData\Local\rx_image32.Cache
[2013/05/11 12:52:36 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2013/04/01 03:11:02 | 000,772,558 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2013/03/31 17:20:00 | 000,000,469 | ---- | C] () -- C:\ProgramData\Microsoft.SqlServer.Compact.400.32.bc
[2013/03/26 00:44:59 | 000,000,600 | ---- | C] () -- C:\Users\rforex1_7\AppData\Local\PUTTY.RND

========== ZeroAccess Check ==========

[rforexdad]

========== ZeroAccess Check ==========

[2009/07/13 21:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2013/02/26 22:52:56 | 014,172,672 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2013/02/26 21:55:05 | 012,872,704 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009/07/13 18:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/20 20:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009/07/13 18:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

========== LOP Check ==========

[2013/07/29 03:47:41 | 000,000,000 | ---D | M] -- C:\Users\rforex1_7\AppData\Roaming\DMCache
[2013/03/12 23:41:01 | 000,000,000 | ---D | M] -- C:\Users\rforex1_7\AppData\Roaming\FXTS2
[2013/07/17 06:04:36 | 000,000,000 | ---D | M] -- C:\Users\rforex1_7\AppData\Roaming\IDM
[2013/05/27 12:35:06 | 000,000,000 | ---D | M] -- C:\Users\rforex1_7\AppData\Roaming\IrfanView
[2013/03/11 00:07:13 | 000,000,000 | ---D | M] -- C:\Users\rforex1_7\AppData\Roaming\MBTrading
[2013/07/20 21:27:07 | 000,000,000 | ---D | M] -- C:\Users\rforex1_7\AppData\Roaming\player
[2013/06/15 07:54:57 | 000,000,000 | ---D | M] -- C:\Users\rforex1_7\AppData\Roaming\Simple Star
[2013/04/10 18:05:54 | 000,000,000 | ---D | M] -- C:\Users\rforex1_7\AppData\Roaming\TeamViewer

========== Purity Check ==========



========== Custom Scans ==========

< "%WinDir%\$NtUninstallKB*$." >

< %systemroot%\*. /rp /s >

< C:\Program Files\Common Files\ComObjects\*.* /s >
[2009/07/13 22:08:49 | 000,000,006 | -H-- | C] () -- C:\Windows\Tasks\SA.DAT
[2009/07/13 22:08:49 | 000,019,370 | ---- | C] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2013/03/09 06:01:45 | 000,000,900 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
[2013/03/09 06:01:46 | 000,000,904 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

< hklm\software\clients\startmenuinternet|command /rs >
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\InstallInfo\\ReinstallCommand: "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --make-default-browser [2013/07/12 11:49:47 | 000,846,288 | ---- | M] (Google Inc.)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\InstallInfo\\HideIconsCommand: "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --hide-icons [2013/07/12 11:49:47 | 000,846,288 | ---- | M] (Google Inc.)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\InstallInfo\\ShowIconsCommand: "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --show-icons [2013/07/12 11:49:47 | 000,846,288 | ---- | M] (Google Inc.)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\shell\open\command\\: "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" [2013/07/12 11:49:47 | 000,846,288 | ---- | M] (Google Inc.)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\ShowIconsCommand: "C:\Windows\System32\ie4uinit.exe" -show
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\ReinstallCommand: "C:\Windows\System32\ie4uinit.exe" -reinstall
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\HideIconsCommand: "C:\Windows\System32\ie4uinit.exe" -hide
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\shell\naom\command\\: "C:\Program Files\Internet Explorer\iexplore.exe" -extoff [2013/06/11 19:28:00 | 000,775,256 | ---- | M] (Microsoft Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\shell\open\command\\: C:\Program Files\Internet Explorer\iexplore.exe [2013/06/11 19:28:00 | 000,775,256 | ---- | M] (Microsoft Corporation)

< hklm\software\clients\startmenuinternet|command /64 /rs >
64bit-HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\InstallInfo\\ReinstallCommand: "C:\PROGRAM FILES (X86)\GOOGLE\CHROME\APPLICATION\CHROME.EXE" --MAKE-DEFAULT-BROWSER [2013/07/12 11:49:47 | 000,846,288 | ---- | M] (Google Inc.)
64bit-HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\InstallInfo\\HideIconsCommand: "C:\PROGRAM FILES (X86)\GOOGLE\CHROME\APPLICATION\CHROME.EXE" --HIDE-ICONS [2013/07/12 11:49:47 | 000,846,288 | ---- | M] (Google Inc.)
64bit-HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\InstallInfo\\ShowIconsCommand: "C:\PROGRAM FILES (X86)\GOOGLE\CHROME\APPLICATION\CHROME.EXE" --SHOW-ICONS [2013/07/12 11:49:47 | 000,846,288 | ---- | M] (Google Inc.)
64bit-HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\shell\open\command\\: "C:\PROGRAM FILES (X86)\GOOGLE\CHROME\APPLICATION\CHROME.EXE" [2013/07/12 11:49:47 | 000,846,288 | ---- | M] (Google Inc.)
64bit-HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\ShowIconsCommand: "C:\WINDOWS\SYSTEM32\IE4UINIT.EXE" -SHOW [2013/06/11 16:26:36 | 000,051,712 | ---- | M] (Microsoft Corporation)
64bit-HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\ReinstallCommand: "C:\WINDOWS\SYSTEM32\IE4UINIT.EXE" -REINSTALL [2013/06/11 16:26:36 | 000,051,712 | ---- | M] (Microsoft Corporation)
64bit-HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\HideIconsCommand: "C:\WINDOWS\SYSTEM32\IE4UINIT.EXE" -HIDE [2013/06/11 16:26:36 | 000,051,712 | ---- | M] (Microsoft Corporation)
64bit-HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\shell\naom\command\\: "C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE" -EXTOFF [2013/06/11 19:28:00 | 000,775,256 | ---- | M] (Microsoft Corporation)
64bit-HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\shell\open\command\\: C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE [2013/06/11 19:28:00 | 000,775,256 | ---- | M] (Microsoft Corporation)

< %USERPROFILE%\AppData\Local\Google\Chrome\User Data\*.* /s >
[2013/07/29 02:23:41 | 000,262,045 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Certificate Revocation Lists
[2013/03/09 09:59:15 | 000,440,949 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\en-US-2-4.bdic
[2013/03/30 15:40:06 | 000,440,949 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\en-US-3-0.bdic
[2013/03/09 06:02:24 | 000,000,000 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\First Run
[2013/07/29 03:53:52 | 000,035,770 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Local State
[2013/07/29 03:44:51 | 000,000,000 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\lockfile
[2013/07/29 03:47:04 | 010,367,568 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Safe Browsing Bloom
[2013/07/29 03:47:04 | 002,034,270 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Safe Browsing Bloom Prefix Set
[2013/07/29 03:47:32 | 000,006,144 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Safe Browsing Cookies
[2013/07/29 03:47:32 | 000,004,640 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Safe Browsing Cookies-journal
[2013/07/29 03:47:04 | 000,135,184 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Safe Browsing Csd Whitelist
[2013/07/29 03:47:03 | 000,725,556 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Safe Browsing Download
[2013/07/29 03:47:04 | 000,019,668 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Safe Browsing Download Whitelist
[2013/07/29 03:47:04 | 000,005,880 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Safe Browsing Extension Blacklist
[2013/04/29 21:13:03 | 000,000,055 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Service State
[4 C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\*.tmp files -> C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\*.tmp -> ]
[2013/07/29 02:58:40 | 000,565,248 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Archived History
[2013/07/29 02:58:40 | 000,016,384 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Archived History-journal
[2013/07/13 09:00:15 | 000,005,869 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Bookmarks
[2013/07/13 09:00:15 | 000,005,869 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Bookmarks.bak
[2013/07/29 03:53:48 | 001,032,192 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cookies
[2013/07/29 03:53:48 | 000,016,384 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cookies-journal
[2013/07/29 03:44:51 | 000,000,000 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Current Session
[2013/07/29 03:53:29 | 000,000,000 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Current Tabs
[2013/07/11 12:58:50 | 000,006,144 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extension Cookies
[2013/07/11 12:58:50 | 000,003,608 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extension Cookies-journal
[2013/07/29 03:46:18 | 000,919,552 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Favicons
[2013/07/29 03:46:18 | 000,016,384 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Favicons-journal
[2013/07/29 03:46:18 | 001,679,360 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\History
[2013/07/29 02:58:40 | 004,837,376 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\History Index 2013-04
[2013/07/25 02:10:24 | 002,297,856 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\History Index 2013-05
[2013/07/28 16:29:05 | 000,716,800 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\History Index 2013-06
[2013/07/29 03:46:18 | 003,969,024 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\History Index 2013-07
[2013/07/29 03:46:18 | 000,016,384 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\History Index 2013-07-journal
[2013/07/29 02:58:40 | 000,238,092 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\History Provider Cache
[2013/07/29 03:46:18 | 000,029,240 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\History-journal
[2013/07/29 02:58:40 | 000,093,130 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Last Session
[2013/07/29 02:58:40 | 000,061,027 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Last Tabs
[2013/07/29 03:44:51 | 000,020,480 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Login Data
[2013/07/29 03:44:51 | 000,008,736 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Login Data-journal
[2013/07/11 00:58:58 | 000,000,008 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Managed Mode Settings
[2013/07/28 16:52:17 | 000,178,176 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Network Action Predictor
[2013/07/28 16:52:17 | 000,016,384 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Network Action Predictor-journal
[2013/07/27 11:48:18 | 000,020,480 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Origin Bound Certs
[2013/07/27 11:48:18 | 000,003,608 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Origin Bound Certs-journal
[2013/07/29 03:53:48 | 000,112,256 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Preferences
[2013/07/20 22:42:38 | 000,013,312 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\QuotaManager
[2013/07/20 22:42:38 | 000,008,768 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\QuotaManager-journal
[2013/03/09 06:03:23 | 000,000,180 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\README
[2013/07/28 16:37:10 | 000,024,576 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Shortcuts
[2013/07/28 16:37:10 | 000,012,824 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Shortcuts-journal
[2013/07/29 02:17:52 | 000,188,416 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Top Sites
[2013/07/29 02:17:52 | 000,016,384 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Top Sites-journal
[2013/07/29 03:46:17 | 000,001,657 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\TransportSecurity
[2013/07/29 02:58:40 | 000,131,072 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Visited Links
[2013/07/29 03:53:38 | 000,106,496 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Web Data
[2013/07/29 03:53:38 | 000,010,792 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Web Data-journal
[2013/07/29 02:58:40 | 000,745,472 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\data_0
[2013/07/29 02:58:40 | 016,523,264 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\data_1
[2013/07/29 02:58:40 | 019,931,136 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\data_2
[2013/07/29 02:58:40 | 033,562,624 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\data_3
[2013/07/15 23:55:36 | 000,061,311 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00000b
[2013/07/15 23:55:36 | 000,093,065 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00000f
[2013/07/16 00:18:36 | 000,082,765 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000020
[2013/07/16 00:18:37 | 000,071,493 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000024
[2013/07/16 00:18:37 | 000,024,728 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000025
[2013/07/16 00:18:38 | 000,034,479 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000026
[2013/07/16 00:18:38 | 000,033,186 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000027
[2013/07/16 00:18:38 | 000,165,803 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000028
[2013/07/16 00:18:38 | 000,159,924 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000029
[2013/07/16 00:18:39 | 000,028,789 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00002b
[2013/07/16 00:18:39 | 000,100,881 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00002c
[2013/07/16 00:19:37 | 000,037,334 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00002d
[2013/07/16 00:19:37 | 000,048,476 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00002e
[2013/07/16 00:19:38 | 000,036,161 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00002f
[2013/07/16 00:21:38 | 000,049,054 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000037
[2013/07/16 00:21:38 | 000,033,471 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000038
[2013/07/16 00:21:41 | 000,017,429 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000039
[2013/07/16 00:21:41 | 000,032,819 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00003b
[2013/07/16 00:23:42 | 000,032,819 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000061
[2013/07/16 01:14:17 | 000,024,847 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0000ab
[2013/07/16 01:14:17 | 000,016,426 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0000ac
[2013/07/16 01:14:17 | 000,018,050 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0000af
[2013/07/16 01:14:19 | 000,028,781 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0000b1
[2013/07/16 01:14:20 | 000,017,766 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0000b4
[2013/07/16 01:14:21 | 000,079,381 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0000b5
[2013/07/16 01:14:21 | 000,049,194 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0000b6
[2013/07/16 01:14:21 | 000,029,830 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0000b7
[2013/07/16 01:14:21 | 000,016,750 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0000b8
[2013/07/16 01:14:21 | 000,043,438 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0000b9
[2013/07/16 01:14:21 | 000,024,701 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0000ba
[2013/07/16 01:15:46 | 000,072,174 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0000ca
[2013/07/16 01:15:46 | 000,048,708 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0000cb
[2013/07/16 01:15:48 | 000,041,632 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0000cc
[2013/07/16 01:16:24 | 000,031,522 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0000d6
[2013/07/16 01:16:35 | 000,018,946 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0000dc
[2013/07/16 01:16:36 | 000,034,479 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0000e1
[2013/07/16 01:16:36 | 000,033,186 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0000e3
[2013/07/16 01:16:37 | 000,165,803 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0000e4
[2013/07/16 01:16:37 | 000,035,126 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0000e6
[2013/07/16 01:16:50 | 000,021,999 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0000f0
[2013/07/16 01:16:51 | 000,073,029 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0000f2
[2013/07/16 01:23:00 | 000,039,505 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000149
[2013/07/16 01:23:00 | 000,040,840 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00014a
[2013/07/16 01:23:00 | 000,065,741 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00014d
[2013/07/16 01:23:00 | 000,016,426 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00014f
[2013/07/16 01:23:01 | 000,029,052 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000150
[2013/07/16 01:23:01 | 000,050,164 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000151
[2013/07/16 01:23:01 | 000,051,082 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000152
[2013/07/16 01:23:01 | 000,034,547 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000153
[2013/07/16 01:23:01 | 000,073,892 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000154
[2013/07/16 01:23:01 | 000,036,190 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000155
[2013/07/16 01:23:14 | 000,020,276 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000159
[2013/07/16 01:25:03 | 000,017,949 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000161
[2013/07/16 01:25:05 | 000,040,375 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000164
[2013/07/16 01:26:55 | 000,017,523 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000166
[2013/07/16 06:10:21 | 000,071,497 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000177
[2013/07/16 06:10:21 | 000,024,728 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000178
[2013/07/16 23:58:31 | 000,037,151 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00017d
[2013/07/16 23:58:32 | 000,027,300 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00017f
[2013/07/17 01:50:14 | 000,021,399 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0001a9
[2013/07/17 01:50:14 | 000,043,520 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0001ad
[2013/07/17 01:50:14 | 000,027,588 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0001ae
[2013/07/17 01:50:16 | 000,024,496 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0001b8
[2013/07/17 01:50:18 | 000,160,199 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0001be
[2013/07/17 01:50:31 | 000,023,686 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0001c2
[2013/07/17 01:50:43 | 000,018,273 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0001d8
[2013/07/17 01:51:30 | 000,061,867 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0001d9
[2013/07/17 02:40:43 | 000,028,781 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0001e2
[2013/07/17 02:40:43 | 000,027,761 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0001e3
[2013/07/17 02:40:43 | 000,099,731 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0001e4
[2013/07/17 02:40:45 | 000,079,782 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0001e5
[2013/07/17 02:43:39 | 000,071,063 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000204
[2013/07/17 02:44:55 | 000,032,025 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00021d
[2013/07/17 02:44:55 | 000,016,972 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00021f
[2013/07/17 02:44:55 | 000,024,083 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000220
[2013/07/17 02:44:56 | 000,016,439 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000222
[2013/07/17 03:08:50 | 000,046,712 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0002d2
[2013/07/17 03:32:25 | 000,016,772 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0002ee
[2013/07/17 03:38:44 | 000,033,341 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000317
[2013/07/17 03:38:46 | 000,030,681 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000319
[2013/07/17 03:38:51 | 010,170,511 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00031a
[2013/07/17 03:41:28 | 000,072,326 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000320
[2013/07/17 03:41:28 | 000,161,073 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000321
[2013/07/17 03:41:28 | 000,178,132 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000322
[2013/07/17 03:41:28 | 000,171,111 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000323
[2013/07/17 03:44:37 | 000,050,322 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000329
[2013/07/17 04:01:09 | 000,143,521 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00037e
[2013/07/17 04:12:00 | 000,033,673 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0003ac
[2013/07/18 00:44:43 | 000,032,035 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000567
[2013/07/18 00:45:58 | 000,071,498 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00057a
[2013/07/18 00:45:58 | 000,024,728 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00057b
[2013/07/18 00:47:02 | 000,161,938 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000581
[2013/07/18 00:59:50 | 000,124,181 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0005b2
[2013/07/18 01:05:34 | 000,074,544 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0005ce
[2013/07/18 01:16:31 | 000,025,399 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000605
[2013/07/18 01:30:03 | 000,074,444 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00063a
[2013/07/18 01:31:28 | 000,025,881 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000640
[2013/07/18 01:31:29 | 000,076,862 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000644
[2013/07/18 01:31:29 | 000,029,856 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000645
[2013/07/18 01:31:29 | 000,028,679 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000646
[2013/07/18 01:31:29 | 000,026,133 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000647
[2013/07/18 01:31:29 | 000,020,055 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000648
[2013/07/18 01:31:29 | 000,035,239 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000649
[2013/07/18 01:31:30 | 000,022,398 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00064a
[2013/07/18 01:31:30 | 000,027,200 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00064b
[2013/07/18 01:31:30 | 000,110,882 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00064c
[2013/07/18 01:31:33 | 000,028,781 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00064e
[2013/07/18 01:31:34 | 000,099,785 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00064f
[2013/07/18 01:31:34 | 000,017,869 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000651
[2013/07/18 01:31:34 | 000,029,972 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000652
[2013/07/18 01:31:34 | 000,030,587 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000653
[2013/07/18 01:31:34 | 000,021,995 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000654
[2013/07/18 01:31:34 | 000,022,554 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000656
[2013/07/18 01:31:34 | 000,025,886 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000658
[2013/07/18 01:31:35 | 000,016,944 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000659
[2013/07/18 01:31:35 | 000,035,789 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00065b
[2013/07/18 01:31:35 | 000,018,088 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00065d
[2013/07/18 01:31:35 | 000,032,381 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00065e
[2013/07/18 01:31:35 | 000,031,600 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00065f
[2013/07/18 01:31:35 | 000,021,573 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000660
[2013/07/18 01:31:35 | 000,030,839 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000661
[2013/07/18 01:31:35 | 000,018,231 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000664
[2013/07/18 01:31:35 | 000,033,795 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000665
[2013/07/18 01:31:35 | 000,029,827 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000666
[2013/07/18 01:31:35 | 000,028,515 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000667
[2013/07/18 01:31:35 | 000,029,115 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000668
[2013/07/18 01:31:35 | 000,028,725 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000669
[2013/07/18 01:31:35 | 000,018,796 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00066a
[2013/07/18 01:31:35 | 000,049,467 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00066c
[2013/07/18 01:31:35 | 000,019,064 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00066d
[2013/07/18 01:31:35 | 000,022,086 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00066e
[2013/07/18 01:31:35 | 000,028,614 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000670
[2013/07/18 01:31:35 | 000,022,036 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000671
[2013/07/18 01:31:35 | 000,026,707 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000672
[2013/07/18 19:22:19 | 000,031,618 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0006f2
[2013/07/18 19:22:23 | 000,051,210 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0006f7
[2013/07/18 19:22:23 | 000,016,743 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0006f8
[2013/07/18 19:22:23 | 000,026,131 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0006f9
[2013/07/18 19:22:23 | 000,028,645 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0006fa
[2013/07/18 19:22:23 | 000,032,097 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0006fb
[2013/07/18 19:22:23 | 000,035,596 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0006fc
[2013/07/18 19:22:23 | 000,024,460 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0006fd
[2013/07/18 19:22:23 | 000,023,344 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0006fe
[2013/07/18 19:22:23 | 000,031,235 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0006ff
[2013/07/18 19:22:23 | 000,027,211 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000700
[2013/07/18 19:22:23 | 000,022,834 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000702
[2013/07/18 19:22:23 | 000,036,184 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000703
[2013/07/18 19:22:23 | 000,027,933 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000704
[2013/07/18 19:22:23 | 000,067,928 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000707
[2013/07/18 19:22:23 | 000,020,661 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000708
[2013/07/18 19:22:24 | 000,021,277 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00070b
[2013/07/18 19:22:24 | 000,027,402 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00070c
[2013/07/18 19:22:24 | 000,074,892 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00070d
[2013/07/18 19:22:24 | 000,077,517 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00070e
[2013/07/18 19:22:24 | 000,028,013 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000710
[2013/07/18 19:22:26 | 000,071,497 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000711
[2013/07/18 19:22:26 | 000,024,728 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000712
[2013/07/18 19:22:27 | 000,028,785 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000713
[2013/07/18 19:22:27 | 000,099,746 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000714
[2013/07/18 19:23:24 | 000,034,896 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000730
[2013/07/18 19:23:24 | 000,022,772 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000731
[2013/07/18 20:01:48 | 000,025,406 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000759
[2013/07/18 23:38:41 | 000,032,103 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000764
[2013/07/18 23:38:46 | 000,043,460 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000769
[2013/07/18 23:39:04 | 000,023,686 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00076c
[2013/07/18 23:39:26 | 000,041,379 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000770
[2013/07/18 23:40:00 | 000,021,950 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000777
[2013/07/19 06:11:31 | 000,020,379 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00079b
[2013/07/20 09:18:14 | 000,051,210 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0007cb
[2013/07/20 09:18:15 | 000,026,131 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0007cc
[2013/07/20 09:18:15 | 000,016,743 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0007cd
[2013/07/20 09:18:15 | 000,022,834 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0007ce
[2013/07/20 09:18:15 | 000,028,645 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0007cf
[2013/07/20 09:18:15 | 000,035,596 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0007d0
[2013/07/20 09:18:15 | 000,023,344 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0007d1
[2013/07/20 09:18:15 | 000,024,460 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0007d2
[2013/07/20 09:18:15 | 000,031,235 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0007d3
[2013/07/20 09:18:15 | 000,027,211 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0007d4
[2013/07/20 09:18:15 | 000,036,184 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0007d5
[2013/07/20 09:18:15 | 000,032,097 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0007d6
[2013/07/20 09:18:15 | 000,027,933 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0007d7
[2013/07/20 09:18:17 | 000,087,426 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0007d8
[2013/07/20 09:18:27 | 000,087,426 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0007da
[2013/07/20 09:19:39 | 000,017,269 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0007e1
[2013/07/20 09:19:39 | 000,072,481 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0007e3
[2013/07/20 09:19:39 | 000,090,225 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0007e4
[2013/07/20 09:19:40 | 000,020,914 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0007e5
[2013/07/20 09:19:40 | 000,021,642 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0007e6
[2013/07/20 20:38:34 | 000,115,764 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0007f4
[2013/07/20 21:11:15 | 000,022,510 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0007f7
[2013/07/20 21:11:15 | 000,115,764 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0007f8
[2013/07/20 21:11:28 | 000,025,574 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0007fc
[2013/07/20 21:12:53 | 000,019,691 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000809
[2013/07/20 22:42:57 | 000,023,724 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000812
[2013/07/20 22:42:57 | 000,035,225 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000814
[2013/07/22 00:22:20 | 000,036,431 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00082a
[2013/07/23 01:19:35 | 000,099,281 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00083c
[2013/07/23 01:23:27 | 000,089,089 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000841
[2013/07/23 01:26:28 | 000,128,832 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000843
[2013/07/23 01:26:28 | 000,111,794 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000844
[2013/07/23 01:26:49 | 000,032,555 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000850
[2013/07/23 01:26:49 | 000,105,138 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000851
[2013/07/23 01:26:49 | 000,270,497 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000852
[2013/07/23 01:26:49 | 000,330,930 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000854
[2013/07/23 01:27:20 | 000,035,075 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00085b
[2013/07/23 01:27:20 | 000,038,133 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00085e
[2013/07/23 01:27:21 | 000,022,909 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00085f
[2013/07/23 01:32:19 | 000,076,863 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00086b
[2013/07/23 01:32:21 | 000,040,201 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00086f
[2013/07/23 01:32:27 | 000,017,838 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000871
[2013/07/23 01:35:06 | 000,045,334 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00087e
[2013/07/23 01:35:06 | 000,022,874 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00087f
[2013/07/23 01:35:09 | 000,028,376 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000881
[2013/07/23 01:35:09 | 000,034,191 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000882
[2013/07/23 01:35:10 | 000,016,552 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000886
[2013/07/23 01:35:10 | 000,029,496 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000887
[2013/07/23 01:37:35 | 000,020,125 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00088a
[2013/07/23 01:41:41 | 000,042,221 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0008a4
[2013/07/23 01:41:42 | 000,018,344 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0008a5
[2013/07/23 01:41:42 | 000,041,391 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0008a6
[2013/07/23 01:41:42 | 000,018,631 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0008a7
[2013/07/23 01:41:42 | 000,019,364 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0008a8
[2013/07/23 01:41:42 | 000,043,136 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0008a9
[2013/07/23 01:41:43 | 000,024,169 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0008ac
[2013/07/23 01:41:43 | 000,025,122 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0008ad
[2013/07/23 02:06:13 | 000,052,697 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0008b8
[2013/07/23 02:06:14 | 000,018,366 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0008b9
[2013/07/23 02:06:15 | 000,018,404 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0008bc
[2013/07/23 02:06:15 | 000,044,967 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0008bd
[2013/07/23 03:25:28 | 000,488,786 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0008be
[2013/07/23 18:49:25 | 000,102,022 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0008bf
[2013/07/23 18:49:25 | 000,102,004 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0008c0
[2013/07/23 18:49:25 | 000,017,414 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0008c1
[2013/07/23 18:49:26 | 000,034,733 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0008c2
[2013/07/23 18:49:26 | 000,102,024 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0008c3
[2013/07/23 18:49:26 | 000,022,331 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0008c4
[2013/07/23 18:49:26 | 000,017,481 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0008c5
[2013/07/23 18:49:27 | 000,128,265 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0008c6
[2013/07/23 18:49:27 | 000,147,795 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0008c7
[2013/07/23 18:49:27 | 000,149,068 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0008c8
[2013/07/23 18:49:27 | 000,037,115 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0008c9
[2013/07/23 18:49:42 | 000,064,620 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0008ca
[2013/07/23 18:50:29 | 000,025,805 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0008cb
[2013/07/23 18:50:30 | 000,043,222 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0008ce
[2013/07/23 18:54:27 | 000,041,317 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0008d7
[2013/07/23 18:54:27 | 000,402,624 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0008d8
[2013/07/23 18:54:28 | 000,021,747 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0008d9
[2013/07/23 18:54:28 | 000,080,804 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0008da
[2013/07/23 18:54:33 | 000,031,987 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0008db
[2013/07/23 18:54:33 | 000,044,076 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0008dc
[2013/07/23 19:17:25 | 000,220,641 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0008e6
[2013/07/23 19:57:02 | 000,089,126 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0008ea
[2013/07/23 23:58:21 | 000,022,774 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0008ee
[2013/07/23 23:59:51 | 000,017,269 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0008f9
[2013/07/23 23:59:52 | 000,018,230 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0008fa
[2013/07/23 23:59:52 | 000,111,269 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0008fb
[2013/07/24 01:30:42 | 000,042,021 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0008ff
[2013/07/24 01:30:42 | 000,403,088 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000900
[2013/07/24 01:30:42 | 000,021,758 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000901
[2013/07/24 01:30:42 | 000,080,839 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000902
[2013/07/24 06:23:21 | 000,026,867 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000904
[2013/07/24 06:23:21 | 000,021,118 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000905
[2013/07/24 06:23:21 | 000,033,676 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000906
[2013/07/24 19:33:42 | 000,042,181 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000909
[2013/07/24 19:33:43 | 000,027,300 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00090a
[2013/07/24 19:33:44 | 000,099,344 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00090b
[2013/07/24 19:33:44 | 000,022,358 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00090c
[2013/07/24 19:35:31 | 000,032,044 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00090d
[2013/07/24 21:10:01 | 000,020,369 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00090f
[2013/07/24 21:10:01 | 000,084,246 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000910
[2013/07/24 21:10:02 | 000,030,008 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000911
[2013/07/24 21:10:04 | 000,028,037 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000912
[2013/07/24 21:10:04 | 000,030,098 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000913
[2013/07/25 03:26:09 | 000,091,417 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00093d
[2013/07/25 03:26:14 | 000,090,087 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00093e
[2013/07/25 03:29:38 | 000,091,209 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000941
[2013/07/25 05:57:53 | 000,048,654 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000964
[2013/07/26 05:31:27 | 000,044,120 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000972
[2013/07/26 06:02:55 | 000,086,571 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000974
[2013/07/26 06:03:22 | 000,086,574 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000976
[2013/07/26 06:07:12 | 000,041,370 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000977
[2013/07/26 06:07:12 | 000,400,627 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000978
[2013/07/26 06:07:12 | 000,022,060 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000979
[2013/07/26 06:07:12 | 000,080,845 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00097a
[2013/07/26 09:14:33 | 000,574,383 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00097b
[2013/07/26 17:21:42 | 000,034,750 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00097c
[2013/07/26 17:21:42 | 000,022,244 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00097d
[2013/07/26 17:21:42 | 000,099,525 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00097e
[2013/07/26 17:21:45 | 000,089,281 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00097f
[2013/07/26 21:06:08 | 000,487,782 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000992
[2013/07/26 23:00:43 | 000,101,138 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000993
[2013/07/26 23:00:45 | 000,101,111 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000994
[2013/07/26 23:00:45 | 000,017,392 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000995
[2013/07/26 23:00:45 | 000,101,135 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000996
[2013/07/26 23:00:45 | 000,017,435 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000997
[2013/07/26 23:00:45 | 000,128,753 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000998
[2013/07/26 23:00:45 | 000,148,683 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000999
[2013/07/26 23:00:46 | 000,148,905 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00099a
[2013/07/26 23:00:46 | 000,037,154 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00099b
[2013/07/27 11:46:56 | 000,128,996 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0009a3
[2013/07/27 11:46:56 | 000,121,060 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0009a4
[2013/07/27 11:46:56 | 000,022,735 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0009a5
[2013/07/27 11:46:57 | 000,022,394 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0009a6
[2013/07/27 11:47:47 | 000,037,270 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0009c3
[2013/07/27 11:47:47 | 000,039,515 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0009c4
[2013/07/27 11:47:47 | 000,040,082 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0009c5
[2013/07/27 11:47:47 | 000,045,765 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0009c6
[2013/07/27 11:47:47 | 000,034,522 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0009c7
[2013/07/27 11:47:47 | 000,043,660 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0009c8
[2013/07/27 11:47:48 | 000,044,298 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0009c9
[2013/07/27 11:47:48 | 000,047,516 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0009ca
[2013/07/27 11:47:48 | 000,042,842 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0009cb
[2013/07/27 11:47:48 | 000,031,977 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0009ce
[2013/07/27 11:47:49 | 000,028,205 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0009cf
[2013/07/27 11:47:49 | 000,038,074 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0009d0
[2013/07/27 11:48:12 | 000,026,871 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0009d8
[2013/07/27 11:48:12 | 000,021,682 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0009d9
[2013/07/27 11:48:12 | 000,037,215 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0009da
[2013/07/27 11:48:12 | 000,034,516 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0009db
[2013/07/27 11:48:12 | 000,030,730 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0009dc
[2013/07/27 11:48:12 | 000,024,856 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0009dd
[2013/07/27 11:48:12 | 000,031,959 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0009de
[2013/07/27 11:48:12 | 000,028,687 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0009df

[rforexdad]

[2013/07/27 11:48:12 | 000,038,223 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0009e0
[2013/07/27 11:48:12 | 000,025,909 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0009e1
[2013/07/27 11:48:12 | 000,025,862 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0009e2
[2013/07/27 11:48:12 | 000,027,789 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0009e3
[2013/07/27 11:48:12 | 000,040,098 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0009e4
[2013/07/27 11:48:12 | 000,031,726 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0009e5
[2013/07/27 11:48:12 | 000,027,920 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0009e6
[2013/07/27 11:48:12 | 000,024,153 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0009e7
[2013/07/27 11:49:04 | 000,019,818 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000a08
[2013/07/27 15:24:32 | 000,030,065 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000a32
[2013/07/27 15:24:32 | 000,033,433 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000a33
[2013/07/27 15:24:32 | 000,018,954 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000a34
[2013/07/27 15:24:32 | 000,148,834 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000a35
[2013/07/27 15:24:32 | 000,070,580 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000a36
[2013/07/27 15:24:32 | 000,056,734 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000a37
[2013/07/27 15:24:33 | 000,078,662 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000a38
[2013/07/27 15:24:33 | 000,075,243 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000a39
[2013/07/27 15:24:33 | 000,069,291 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000a3a
[2013/07/27 15:24:33 | 000,072,375 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000a3b
[2013/07/27 15:24:33 | 000,151,358 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000a3c
[2013/07/27 15:57:55 | 000,064,612 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000a3d
[2013/07/27 16:00:33 | 000,063,988 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000a3e
[2013/07/27 16:00:34 | 000,076,872 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000a42
[2013/07/27 16:00:34 | 000,046,400 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000a44
[2013/07/27 16:00:34 | 000,028,721 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000a45
[2013/07/27 16:00:40 | 000,049,899 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000a4a
[2013/07/27 16:00:40 | 000,029,985 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000a4c
[2013/07/27 16:00:50 | 000,066,667 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000a50
[2013/07/27 16:01:04 | 000,056,099 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000a51
[2013/07/27 16:02:03 | 000,017,564 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000a58
[2013/07/27 16:02:25 | 000,090,641 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000a5b
[2013/07/27 16:02:25 | 000,063,483 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000a5c
[2013/07/27 16:05:21 | 000,032,920 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000a64
[2013/07/27 16:05:21 | 000,033,249 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000a65
[2013/07/27 16:05:21 | 000,021,943 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000a66
[2013/07/27 16:05:21 | 000,040,035 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000a67
[2013/07/27 16:05:21 | 000,031,327 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000a68
[2013/07/27 16:05:21 | 000,036,270 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000a69
[2013/07/27 16:05:21 | 000,031,892 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000a6a
[2013/07/27 16:05:21 | 000,033,567 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000a6b
[2013/07/27 16:05:21 | 000,034,277 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000a6c
[2013/07/27 16:05:21 | 000,035,433 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000a6d
[2013/07/27 16:05:21 | 000,034,126 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000a6e
[2013/07/27 16:05:21 | 000,041,916 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000a6f
[2013/07/27 16:05:21 | 000,073,627 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000a70
[2013/07/27 16:05:22 | 000,085,979 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000a71
[2013/07/27 16:05:22 | 000,064,102 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000a72
[2013/07/27 16:05:22 | 000,038,245 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000a73
[2013/07/27 16:05:22 | 000,068,451 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000a74
[2013/07/27 16:05:35 | 000,033,229 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000a75
[2013/07/27 16:05:36 | 000,034,323 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000a77
[2013/07/27 16:05:39 | 000,017,351 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000a85
[2013/07/27 16:06:14 | 000,034,519 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000a89
[2013/07/27 16:06:14 | 000,034,928 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000a8a
[2013/07/27 16:06:14 | 000,037,970 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000a8c
[2013/07/27 16:06:14 | 000,022,771 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000a8d
[2013/07/27 16:06:15 | 000,027,724 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000a8e
[2013/07/27 16:06:15 | 000,025,003 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000a8f
[2013/07/27 16:06:47 | 000,033,717 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000a92
[2013/07/27 16:07:56 | 000,034,126 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000a94
[2013/07/27 16:14:02 | 000,020,584 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000a9c
[2013/07/27 16:14:02 | 000,022,851 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000a9d
[2013/07/27 22:20:47 | 000,029,941 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000aa1
[2013/07/27 22:20:48 | 000,051,345 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000aa2
[2013/07/27 22:20:48 | 000,104,905 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000aa3
[2013/07/27 22:20:48 | 000,032,292 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000aa4
[2013/07/27 22:20:49 | 000,019,670 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000aa5
[2013/07/27 22:20:49 | 000,029,619 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000aa6
[2013/07/27 22:59:10 | 000,021,460 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000ac7
[2013/07/27 22:59:10 | 000,041,941 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000ac8
[2013/07/27 22:59:10 | 000,024,898 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000ac9
[2013/07/27 22:59:10 | 000,033,708 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000acb
[2013/07/27 22:59:10 | 000,027,807 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000acc
[2013/07/27 22:59:10 | 000,019,768 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000acd
[2013/07/27 22:59:10 | 000,086,049 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000ace
[2013/07/27 22:59:10 | 000,035,638 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000acf
[2013/07/27 22:59:18 | 000,305,357 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000ad6
[2013/07/27 22:59:18 | 000,136,912 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000ad7
[2013/07/27 22:59:18 | 000,304,568 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000ad8
[2013/07/27 22:59:19 | 000,024,310 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000ad9
[2013/07/27 22:59:19 | 000,027,077 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000adb
[2013/07/27 22:59:19 | 000,027,080 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000adc
[2013/07/27 22:59:20 | 000,017,010 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000add
[2013/07/27 22:59:21 | 000,024,551 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000ade
[2013/07/27 22:59:21 | 000,079,360 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000adf
[2013/07/27 22:59:24 | 002,026,746 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000ae0
[2013/07/27 23:00:38 | 000,479,232 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000af3
[2013/07/27 23:00:39 | 000,479,232 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000af5
[2013/07/27 23:00:40 | 000,479,232 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000af7
[2013/07/27 23:00:41 | 000,479,232 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000af9
[2013/07/27 23:01:18 | 004,255,744 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000afe
[2013/07/27 23:08:12 | 000,024,136 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000b31
[2013/07/28 06:00:05 | 000,034,371 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000b32
[2013/07/28 06:00:06 | 000,023,547 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000b33
[2013/07/28 06:00:06 | 000,025,593 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000b34
[2013/07/28 06:00:10 | 000,026,999 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000b39
[2013/07/28 06:00:13 | 000,028,156 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000b3c
[2013/07/28 06:01:07 | 000,020,811 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000b41
[2013/07/28 06:01:07 | 000,075,028 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000b42
[2013/07/28 10:03:44 | 000,057,618 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000b4f
[2013/07/28 10:40:31 | 000,030,766 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000b51
[2013/07/28 10:41:15 | 000,126,325 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000b61
[2013/07/28 10:41:15 | 000,106,585 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000b62
[2013/07/28 10:41:15 | 000,122,937 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000b64
[2013/07/28 10:41:15 | 000,137,453 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000b66
[2013/07/28 10:41:15 | 000,128,084 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000b68
[2013/07/28 10:41:15 | 000,140,389 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000b70
[2013/07/28 10:41:30 | 000,016,879 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000bd3
[2013/07/28 10:41:31 | 000,039,228 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000bd4
[2013/07/28 10:41:32 | 000,029,830 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000bd5
[2013/07/28 10:41:32 | 000,039,575 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000bd6
[2013/07/28 10:42:31 | 000,303,899 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000bda
[2013/07/28 16:28:59 | 000,022,399 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000bdf
[2013/07/28 16:29:08 | 000,023,788 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000be1
[2013/07/28 16:29:14 | 000,049,758 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000be4
[2013/07/28 16:29:37 | 000,479,232 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000be9
[2013/07/28 16:29:38 | 000,479,232 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000beb
[2013/07/28 16:29:40 | 000,479,232 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000bed
[2013/07/28 16:29:55 | 000,479,232 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000bef
[2013/07/28 16:33:19 | 000,017,510 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c0a
[2013/07/28 16:33:19 | 000,017,194 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c0b
[2013/07/28 16:37:11 | 000,021,062 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c0c
[2013/07/28 16:37:12 | 000,020,648 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c0e
[2013/07/28 16:37:19 | 000,018,612 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c0f
[2013/07/28 16:37:19 | 000,017,258 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c10
[2013/07/28 16:38:40 | 000,029,277 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c24
[2013/07/28 16:38:40 | 000,037,283 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c25
[2013/07/28 16:38:47 | 000,017,358 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c2b
[2013/07/28 16:38:47 | 000,018,717 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c2d
[2013/07/28 16:38:47 | 000,032,345 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c2e
[2013/07/28 16:38:50 | 000,479,232 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c34
[2013/07/28 16:38:56 | 000,479,232 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c36
[2013/07/28 16:39:18 | 000,078,215 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c3e
[2013/07/28 16:39:20 | 000,479,232 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c3f
[2013/07/28 16:39:23 | 000,192,512 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c40
[2013/07/28 16:39:23 | 000,237,568 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c41
[2013/07/28 16:39:23 | 000,192,512 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c42
[2013/07/28 16:39:23 | 000,237,568 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c43
[2013/07/28 16:39:23 | 000,237,568 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c44
[2013/07/28 16:39:23 | 000,192,512 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c45
[2013/07/28 16:39:23 | 000,237,568 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c46
[2013/07/28 16:39:23 | 000,192,512 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c47
[2013/07/28 16:39:49 | 000,034,591 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c49
[2013/07/28 16:39:49 | 000,078,800 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c4a
[2013/07/28 16:39:50 | 000,054,342 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c4b
[2013/07/28 16:39:51 | 002,457,587 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c4c
[2013/07/28 16:39:52 | 002,457,600 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c4d
[2013/07/28 16:39:54 | 002,457,600 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c4e
[2013/07/28 16:39:53 | 000,109,263 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c4f
[2013/07/28 16:39:54 | 000,026,062 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c50
[2013/07/28 16:39:54 | 001,280,420 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c51
[2013/07/28 16:39:55 | 000,345,453 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c52
[2013/07/28 16:39:56 | 000,096,206 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c53
[2013/07/28 16:40:00 | 006,127,616 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c54
[2013/07/28 16:40:04 | 006,127,616 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c55
[2013/07/28 16:40:08 | 006,127,616 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c56
[2013/07/28 16:40:12 | 006,127,616 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c57
[2013/07/28 16:40:17 | 006,127,616 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c58
[2013/07/28 16:40:30 | 001,543,475 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c59
[2013/07/28 16:40:32 | 002,457,600 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c5a
[2013/07/28 16:40:32 | 000,348,384 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c5b
[2013/07/28 16:52:30 | 000,024,756 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c5c
[2013/07/28 16:52:44 | 000,018,121 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c5d
[2013/07/28 16:53:07 | 000,022,482 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c5f
[2013/07/28 16:53:07 | 000,154,784 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c60
[2013/07/28 16:53:07 | 000,025,858 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c61
[2013/07/28 16:53:08 | 000,065,536 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c62
[2013/07/28 16:53:08 | 000,131,072 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c63
[2013/07/28 16:53:08 | 000,283,181 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c64
[2013/07/28 16:53:08 | 000,131,072 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c65
[2013/07/28 16:53:08 | 000,131,072 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c66
[2013/07/28 16:53:09 | 000,131,072 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c67
[2013/07/28 16:53:09 | 000,163,282 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c68
[2013/07/28 16:53:09 | 000,240,293 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c69
[2013/07/28 16:53:09 | 000,240,293 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c6a
[2013/07/28 16:53:09 | 000,391,630 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c6b
[2013/07/28 16:53:09 | 000,779,505 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c6c
[2013/07/28 16:53:10 | 001,506,198 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c6d
[2013/07/28 16:53:12 | 002,097,152 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c6e
[2013/07/28 16:53:13 | 002,097,152 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c6f
[2013/07/28 16:53:13 | 000,141,263 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c70
[2013/07/28 16:53:22 | 000,240,293 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c71
[2013/07/28 16:53:24 | 002,097,152 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c72
[2013/07/28 16:53:26 | 002,097,152 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c73
[2013/07/28 16:53:26 | 002,097,152 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c74
[2013/07/28 16:53:33 | 002,097,152 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c75
[2013/07/28 16:53:37 | 000,240,293 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c76
[2013/07/28 16:53:40 | 002,097,152 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c77
[2013/07/28 16:53:48 | 002,097,152 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c78
[2013/07/28 16:53:53 | 000,240,293 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c79
[2013/07/28 16:53:55 | 002,097,152 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c7a
[2013/07/28 16:54:02 | 002,097,152 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c7b
[2013/07/28 16:54:07 | 000,240,293 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c7c
[2013/07/28 16:54:11 | 002,097,152 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c7d
[2013/07/28 16:54:18 | 002,097,152 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c7e
[2013/07/28 16:54:23 | 000,240,293 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c7f
[2013/07/28 16:54:25 | 002,097,152 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c80
[2013/07/28 16:54:34 | 002,097,152 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c81
[2013/07/28 16:54:37 | 000,240,293 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c82
[2013/07/28 16:54:41 | 002,097,152 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c83
[2013/07/28 16:54:48 | 002,097,152 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c84
[2013/07/28 16:54:53 | 000,240,293 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c85
[2013/07/28 16:54:56 | 002,097,152 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c86
[2013/07/28 16:55:03 | 002,097,152 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c87
[2013/07/28 16:55:08 | 000,240,293 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c88
[2013/07/28 16:55:11 | 002,097,152 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c89
[2013/07/28 16:55:19 | 002,097,152 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c8a
[2013/07/28 16:55:23 | 000,240,293 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c8b
[2013/07/28 16:55:26 | 002,097,152 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c8c
[2013/07/28 16:55:34 | 002,097,152 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c8d
[2013/07/28 16:55:39 | 000,240,293 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c8e
[2013/07/28 16:55:42 | 002,097,152 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c8f
[2013/07/28 16:55:49 | 002,097,152 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c90
[2013/07/28 16:55:53 | 000,240,293 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c91
[2013/07/28 16:55:56 | 002,097,152 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c92
[2013/07/28 16:56:05 | 002,097,152 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c93
[2013/07/28 16:56:09 | 000,240,293 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c94
[2013/07/28 16:56:12 | 002,097,152 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c95
[2013/07/28 16:56:19 | 002,097,152 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c96
[2013/07/28 16:56:24 | 000,240,293 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c97
[2013/07/28 16:56:26 | 002,097,152 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c98
[2013/07/28 16:56:35 | 002,097,152 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c99
[2013/07/28 16:56:39 | 000,240,293 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c9a
[2013/07/28 16:56:42 | 002,097,152 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c9b
[2013/07/28 16:56:50 | 002,097,152 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c9c
[2013/07/28 16:56:54 | 000,240,293 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c9d
[2013/07/28 16:56:57 | 002,097,152 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c9e
[2013/07/28 16:57:05 | 002,097,152 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000c9f
[2013/07/28 16:57:09 | 000,240,293 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000ca0
[2013/07/28 16:57:13 | 002,097,152 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000ca1
[2013/07/28 16:57:20 | 002,097,152 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000ca2
[2013/07/28 16:57:24 | 000,240,293 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000ca3
[2013/07/28 16:57:29 | 002,097,152 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000ca4
[2013/07/28 16:57:36 | 002,097,152 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000ca5
[2013/07/28 16:57:39 | 000,240,293 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000ca6
[2013/07/28 16:57:43 | 002,097,152 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000ca7
[2013/07/28 16:57:51 | 002,097,152 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000ca8
[2013/07/28 16:57:54 | 000,240,293 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000ca9
[2013/07/28 16:57:59 | 002,097,152 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000caa
[2013/07/28 16:58:07 | 002,097,152 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000cab
[2013/07/28 16:58:09 | 000,191,261 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000cac
[2013/07/28 16:58:10 | 000,400,655 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000cad
[2013/07/28 16:58:10 | 000,022,065 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000cae
[2013/07/28 16:58:10 | 000,080,849 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000caf
[2013/07/28 16:58:15 | 002,097,152 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000cb0
[2013/07/28 16:58:20 | 000,292,723 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000cb1
[2013/07/28 16:59:02 | 000,019,125 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000cb2
[2013/07/29 02:17:28 | 000,035,141 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000cb3
[2013/07/29 02:17:29 | 000,065,536 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000cb4
[2013/07/29 02:17:29 | 000,131,072 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000cb5
[2013/07/29 02:17:29 | 000,283,181 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000cb6
[2013/07/29 02:17:29 | 000,131,072 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000cb7
[2013/07/29 02:17:29 | 000,131,072 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000cb8
[2013/07/29 02:17:30 | 000,131,072 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000cb9
[2013/07/29 02:17:30 | 000,240,293 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000cba
[2013/07/29 02:17:30 | 000,160,905 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000cbb
[2013/07/29 02:17:30 | 000,240,293 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000cbc
[2013/07/29 02:17:30 | 000,370,620 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000cbd
[2013/07/29 02:17:31 | 000,740,220 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000cbe
[2013/07/29 02:17:42 | 000,030,713 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000cbf
[2013/07/29 03:45:58 | 000,038,770 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000cc0
[2013/07/29 03:46:02 | 000,023,862 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000cc1
[2013/07/29 03:46:04 | 000,025,923 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000cc2
[2013/07/29 03:46:06 | 000,043,267 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000cc3
[2013/07/29 03:46:08 | 000,036,092 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000cc4
[2013/07/29 03:46:08 | 000,063,336 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000cc5
[2013/07/29 03:46:08 | 000,496,713 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000cc6
[2013/07/15 23:55:33 | 000,262,512 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Cache\index
[2013/07/11 12:58:50 | 000,007,168 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\databases\Databases.db
[2013/07/11 12:58:50 | 000,005,672 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\databases\Databases.db-journal
[2013/04/08 17:32:14 | 000,004,096 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\databases\http_download.cnet.com_0\5
[2013/07/02 18:32:00 | 000,005,120 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\databases\https_login.skype.com_0\7
[2013/04/27 19:05:27 | 000,005,120 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\databases\https_secure.skype.com_0\6
[2013/04/12 21:08:04 | 000,000,231 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\000005.sst
[2013/04/14 19:48:59 | 000,000,231 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\000008.sst
[2013/05/11 17:41:34 | 000,000,231 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\000039.sst
[2013/05/26 05:10:45 | 000,000,231 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\000054.sst
[2013/07/13 09:10:38 | 000,000,253 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\000105.sst
[2013/07/20 21:26:24 | 000,000,231 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\000122.sst
[2013/07/26 23:00:38 | 000,000,231 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\000152.sst
[2013/07/26 23:00:38 | 000,000,231 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\000154.sst
[2013/07/27 11:45:50 | 000,000,231 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\000159.sst
[2013/07/29 03:47:07 | 000,000,038 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\000175.log
[2013/07/29 03:44:51 | 000,000,016 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\CURRENT
[2013/04/08 19:12:38 | 000,000,000 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\LOCK
[2013/07/29 03:44:53 | 000,000,267 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\LOG
[2013/07/29 02:17:47 | 000,000,267 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\LOG.old
[2013/07/29 03:44:51 | 000,001,840 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\MANIFEST-000173
[2013/03/10 09:19:56 | 000,000,291 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extension State\000005.sst
[2013/03/30 15:40:06 | 000,000,196 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extension State\000016.sst
[2013/07/24 01:25:26 | 000,000,285 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extension State\000153.sst
[2013/07/27 11:45:51 | 000,000,307 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extension State\000171.sst
[2013/07/29 03:53:59 | 000,001,862 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extension State\000187.log
[2013/07/29 03:44:52 | 000,000,016 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extension State\CURRENT
[2013/03/09 10:27:54 | 000,000,000 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOCK
[2013/07/29 03:44:53 | 000,000,267 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG
[2013/07/29 02:17:49 | 000,000,267 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG.old
[2013/07/29 03:44:52 | 000,000,755 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extension State\MANIFEST-000185
[2013/03/09 15:35:47 | 000,003,009 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\icon_128.png
[2013/03/09 15:35:47 | 000,000,143 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\icon_16.png
[2013/03/09 15:35:47 | 000,000,092 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\main.html
[2013/03/09 15:35:47 | 000,000,098 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\main.js
[2013/03/09 15:35:47 | 000,000,724 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\manifest.json
[2013/03/09 15:35:47 | 000,000,374 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\ar\messages.json
[2013/03/09 15:35:47 | 000,000,428 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\bg\messages.json
[2013/03/09 15:35:47 | 000,000,207 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\ca\messages.json
[2013/03/09 15:35:47 | 000,000,230 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\cs\messages.json
[2013/03/09 15:35:47 | 000,000,216 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\da\messages.json
[2013/03/09 15:35:47 | 000,000,217 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\de\messages.json
[2013/03/09 15:35:47 | 000,000,416 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\el\messages.json
[2013/03/09 15:35:47 | 000,000,208 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\en_GB\messages.json
[2013/03/09 15:35:47 | 000,000,209 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\en_US\messages.json
[2013/03/09 15:35:47 | 000,000,206 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\es\messages.json
[2013/03/09 15:35:47 | 000,000,206 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\es_419\messages.json
[2013/03/09 15:35:47 | 000,000,216 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\et\messages.json
[2013/03/09 15:35:47 | 000,000,216 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\fi\messages.json
[2013/03/09 15:35:47 | 000,000,219 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\fil\messages.json
[2013/03/09 15:35:47 | 000,000,224 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\fr\messages.json
[2013/03/09 15:35:47 | 000,000,293 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\he\messages.json
[2013/03/09 15:35:47 | 000,000,375 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\hi\messages.json
[2013/03/09 15:35:47 | 000,000,251 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\hu\messages.json
[2013/03/09 15:35:47 | 000,000,209 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\id\messages.json
[2013/03/09 15:35:47 | 000,000,213 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\it\messages.json
[2013/03/09 15:35:47 | 000,000,263 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\ja\messages.json
[2013/03/09 15:35:47 | 000,000,254 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\ko\messages.json
[2013/03/09 15:35:47 | 000,000,234 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\lt\messages.json
[2013/03/09 15:35:47 | 000,000,232 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\lv\messages.json
[2013/03/09 15:35:47 | 000,000,207 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\ms\messages.json
[2013/03/09 15:35:47 | 000,000,217 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\nl\messages.json
[2013/03/09 15:35:47 | 000,000,195 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\no\messages.json
[2013/03/09 15:35:47 | 000,000,217 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\pl\messages.json
[2013/03/09 15:35:47 | 000,000,206 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\pt_BR\messages.json
[2013/03/09 15:35:47 | 000,000,208 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\pt_PT\messages.json
[2013/03/09 15:35:47 | 000,000,225 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\ro\messages.json
[2013/03/09 15:35:47 | 000,000,434 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\ru\messages.json
[2013/03/09 15:35:47 | 000,000,225 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\sk\messages.json
[2013/03/09 15:35:47 | 000,000,218 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\sl\messages.json
[2013/03/09 15:35:47 | 000,000,380 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\sr\messages.json
[2013/03/09 15:35:47 | 000,000,214 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\sv\messages.json
[2013/03/09 15:35:47 | 000,000,329 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\th\messages.json
[2013/03/09 15:35:47 | 000,000,243 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\tr\messages.json
[2013/03/09 15:35:47 | 000,000,428 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\uk\messages.json
[2013/03/09 15:35:47 | 000,000,252 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\vi\messages.json
[2013/03/09 15:35:47 | 000,000,233 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\zh_CN\messages.json
[2013/03/09 15:35:47 | 000,000,233 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\zh_TW\messages.json
[2013/03/09 15:35:47 | 000,007,654 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\128.png
[2013/03/09 15:35:47 | 000,000,996 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\manifest.json
[2013/03/09 15:35:47 | 000,000,422 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\ar\messages.json
[2013/03/09 15:35:47 | 000,000,559 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\bg\messages.json
[2013/03/09 15:35:47 | 000,000,265 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\ca\messages.json
[2013/03/09 15:35:47 | 000,000,283 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\cs\messages.json
[2013/03/09 15:35:47 | 000,000,251 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\da\messages.json
[2013/03/09 15:35:47 | 000,000,256 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\de\messages.json
[2013/03/09 15:35:47 | 000,000,565 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\el\messages.json
[2013/03/09 15:35:47 | 000,000,249 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\en_GB\messages.json
[2013/03/09 15:35:47 | 000,000,249 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\en_US\messages.json
[2013/03/09 15:35:47 | 000,000,259 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\es\messages.json
[2013/03/09 15:35:47 | 000,000,259 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\es_419\messages.json
[2013/03/09 15:35:47 | 000,000,259 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\et\messages.json
[2013/03/09 15:35:47 | 000,000,243 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\eu\messages.json
[2013/03/09 15:35:47 | 000,000,277 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\fi\messages.json
[2013/03/09 15:35:47 | 000,000,260 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\fil\messages.json
[2013/03/09 15:35:47 | 000,000,260 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\fr\messages.json
[2013/03/09 15:35:47 | 000,000,438 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\he\messages.json
[2013/03/09 15:35:47 | 000,000,492 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\hi\messages.json
[2013/03/09 15:35:47 | 000,000,263 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\hr\messages.json
[2013/03/09 15:35:47 | 000,000,276 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\hu\messages.json
[2013/03/09 15:35:47 | 000,000,261 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\id\messages.json
[2013/03/09 15:35:47 | 000,000,258 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\it\messages.json
[2013/03/09 15:35:47 | 000,000,395 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\ja\messages.json
[2013/03/09 15:35:47 | 000,000,365 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\ko\messages.json
[2013/03/09 15:35:47 | 000,000,309 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\lt\messages.json
[2013/03/09 15:35:47 | 000,000,262 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\lv\messages.json
[2013/03/09 15:35:47 | 000,000,254 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\ms\messages.json
[2013/03/09 15:35:47 | 000,000,250 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\nl\messages.json
[2013/03/09 15:35:47 | 000,000,218 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\no\messages.json
[2013/03/09 15:35:47 | 000,000,261 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\pl\messages.json
[2013/03/09 15:35:47 | 000,000,250 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\pt_BR\messages.json
[2013/03/09 15:35:47 | 000,000,272 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\pt_PT\messages.json
[2013/03/09 15:35:47 | 000,000,309 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\ro\messages.json
[2013/03/09 15:35:47 | 000,000,614 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\ru\messages.json
[2013/03/09 15:35:47 | 000,000,293 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\sk\messages.json
[2013/03/09 15:35:47 | 000,000,268 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\sl\messages.json
[2013/03/09 15:35:47 | 000,000,467 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\sr\messages.json
[2013/03/09 15:35:47 | 000,000,261 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\sv\messages.json
[2013/03/09 15:35:47 | 000,000,521 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\th\messages.json
[2013/03/09 15:35:47 | 000,000,302 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\tr\messages.json
[2013/03/09 15:35:47 | 000,000,657 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\uk\messages.json
[2013/03/09 15:35:47 | 000,000,321 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\vi\messages.json
[2013/03/09 15:35:47 | 000,000,360 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\zh_CN\messages.json
[2013/03/09 15:35:47 | 000,000,348 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\zh_TW\messages.json
[2013/04/10 15:14:50 | 000,003,524 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\128.png
[2013/04/10 15:14:50 | 000,000,785 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\manifest.json
[2013/04/10 15:14:50 | 000,000,401 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\ar\messages.json
[2013/04/10 15:14:50 | 000,000,427 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\bg\messages.json
[2013/04/10 15:14:50 | 000,000,250 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\ca\messages.json
[2013/04/10 15:14:50 | 000,000,255 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\cs\messages.json
[2013/04/10 15:14:50 | 000,000,242 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\da\messages.json
[2013/04/10 15:14:50 | 000,000,226 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\de\messages.json
[2013/04/10 15:14:50 | 000,000,475 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\el\messages.json
[2013/04/10 15:14:50 | 000,000,227 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\en\messages.json
[2013/04/10 15:14:50 | 000,000,240 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\es\messages.json
[2013/04/10 15:14:50 | 000,000,222 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\fi\messages.json
[2013/04/10 15:14:50 | 000,000,236 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\fil\messages.json
[2013/04/10 15:14:50 | 000,000,249 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\fr\messages.json
[2013/04/10 15:14:50 | 000,000,419 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\he\messages.json
[2013/04/10 15:14:50 | 000,000,408 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\hi\messages.json
[2013/04/10 15:14:50 | 000,000,220 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\hr\messages.json
[2013/04/10 15:14:50 | 000,000,253 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\hu\messages.json
[2013/04/10 15:14:50 | 000,000,231 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\id\messages.json
[2013/04/10 15:14:50 | 000,000,224 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\it\messages.json
[2013/04/10 15:14:50 | 000,000,349 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\ja\messages.json
[2013/04/10 15:14:50 | 000,000,323 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\ko\messages.json
[2013/04/10 15:14:50 | 000,000,266 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\lt\messages.json
[2013/04/10 15:14:50 | 000,000,245 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\lv\messages.json
[2013/04/10 15:14:50 | 000,000,225 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\nl\messages.json
[2013/04/10 15:14:50 | 000,000,216 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\no\messages.json
[2013/04/10 15:14:50 | 000,000,274 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\pl\messages.json
[2013/04/10 15:14:50 | 000,000,237 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\pt_BR\messages.json
[2013/04/10 15:14:50 | 000,000,236 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\pt_PT\messages.json
[2013/04/10 15:14:50 | 000,000,248 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\ro\messages.json
[2013/04/10 15:14:50 | 000,000,394 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\ru\messages.json
[2013/04/10 15:14:50 | 000,000,241 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\sk\messages.json
[2013/04/10 15:14:50 | 000,000,245 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\sl\messages.json
[2013/04/10 15:14:50 | 000,000,437 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\sr\messages.json
[2013/04/10 15:14:50 | 000,000,238 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\sv\messages.json
[2013/04/10 15:14:50 | 000,000,365 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\th\messages.json
[2013/04/10 15:14:50 | 000,000,255 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\tr\messages.json
[2013/04/10 15:14:50 | 000,000,442 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\uk\messages.json
[2013/04/10 15:14:50 | 000,000,310 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\vi\messages.json
[2013/04/10 15:14:50 | 000,000,257 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\zh_CN\messages.json
[2013/04/10 15:14:50 | 000,000,269 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\_locales\zh_TW\messages.json
[2013/03/27 17:49:49 | 000,005,367 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\128.png
[2013/03/27 17:49:49 | 000,000,499 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\16.png
[2013/03/27 17:49:49 | 000,001,154 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\32.png
[2013/03/27 17:49:49 | 000,001,872 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\48.png
[2013/03/27 17:49:49 | 000,000,817 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\manifest.json
[2013/03/27 17:49:49 | 000,000,423 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\ar\messages.json
[2013/03/27 17:49:49 | 000,000,515 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\bg\messages.json
[2013/03/27 17:49:49 | 000,000,330 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\ca\messages.json
[2013/03/27 17:49:49 | 000,000,355 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\cs\messages.json
[2013/03/27 17:49:49 | 000,000,328 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\da\messages.json
[2013/03/27 17:49:49 | 000,000,307 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\de\messages.json
[2013/03/27 17:49:49 | 000,000,569 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\el\messages.json
[2013/03/27 17:49:49 | 000,000,314 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\en\messages.json
[2013/03/27 17:49:49 | 000,000,314 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\en_GB\messages.json
[2013/03/27 17:49:49 | 000,000,314 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\en_US\messages.json
[2013/03/27 17:49:49 | 000,000,340 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\es\messages.json
[2013/03/27 17:49:49 | 000,000,341 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\es_419\messages.json
[2013/03/27 17:49:49 | 000,000,314 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\et\messages.json
[2013/03/27 17:49:49 | 000,000,305 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\fi\messages.json
[2013/03/27 17:49:49 | 000,000,337 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\fil\messages.json
[2013/03/27 17:49:49 | 000,000,329 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\fr\messages.json
[2013/03/27 17:49:49 | 000,000,471 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\he\messages.json
[2013/03/27 17:49:49 | 000,000,326 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\hi\messages.json
[2013/03/27 17:49:49 | 000,000,340 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\hr\messages.json
[2013/03/27 17:49:49 | 000,000,336 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\hu\messages.json
[2013/03/27 17:49:49 | 000,000,319 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\id\messages.json
[2013/03/27 17:49:49 | 000,000,324 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\it\messages.json
[2013/03/27 17:49:49 | 000,000,388 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\ja\messages.json
[2013/03/27 17:49:49 | 000,000,380 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\ko\messages.json
[2013/03/27 17:49:49 | 000,000,359 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\lt\messages.json
[2013/03/27 17:49:49 | 000,000,360 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\lv\messages.json
[2013/03/27 17:49:49 | 000,000,323 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\nl\messages.json
[2013/03/27 17:49:49 | 000,000,300 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\no\messages.json
[2013/03/27 17:49:49 | 000,000,336 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\pl\messages.json
[2013/03/27 17:49:49 | 000,000,332 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\pt_BR\messages.json
[2013/03/27 17:49:49 | 000,000,331 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\pt_PT\messages.json
[2013/03/27 17:49:49 | 000,000,332 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\ro\messages.json
[2013/03/27 17:49:49 | 000,000,471 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\ru\messages.json
[2013/03/27 17:49:49 | 000,000,338 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\sk\messages.json
[2013/03/27 17:49:49 | 000,000,329 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\sl\messages.json
[2013/03/27 17:49:49 | 000,000,483 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\sr\messages.json
[2013/03/27 17:49:49 | 000,000,333 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\sv\messages.json
[2013/03/27 17:49:49 | 000,000,472 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\th\messages.json
[2013/03/27 17:49:49 | 000,000,330 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\tr\messages.json
[2013/03/27 17:49:49 | 000,000,501 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\uk\messages.json
[2013/03/27 17:49:49 | 000,000,363 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\vi\messages.json
[2013/03/27 17:49:49 | 000,000,346 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\zh_CN\messages.json
[2013/03/27 17:49:49 | 000,000,346 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\zh_TW\messages.json
[2013/07/27 08:38:57 | 000,000,041 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\detect.js
[2013/07/27 08:38:58 | 000,005,390 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\manifest.json
[2013/07/27 08:38:57 | 000,005,461 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\popup.html
[2013/07/27 08:38:58 | 000,011,013 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\_locales\ar\messages.json
[2013/07/27 08:38:57 | 000,005,857 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\_locales\be\messages.json
[2013/07/27 08:38:58 | 000,011,057 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\_locales\bg\messages.json
[2013/07/27 08:38:58 | 000,011,644 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\_locales\bn\messages.json
[2013/07/27 08:38:58 | 000,005,054 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\_locales\ca\messages.json
[2013/07/27 08:38:58 | 000,005,733 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\_locales\cs\messages.json
[2013/07/27 08:38:58 | 000,004,917 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\_locales\da\messages.json
[2013/07/27 08:38:58 | 000,005,063 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\_locales\de\messages.json
[2013/07/27 08:38:58 | 000,011,793 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\_locales\el\messages.json
[2013/07/27 08:38:58 | 000,005,007 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\_locales\en\messages.json
[2013/07/27 08:38:58 | 000,004,607 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\_locales\en_GB\messages.json
[2013/07/27 08:38:58 | 000,005,079 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\_locales\es\messages.json
[2013/07/27 08:38:58 | 000,004,944 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\_locales\et\messages.json
[2013/07/27 08:38:58 | 000,008,948 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\_locales\fa\messages.json
[2013/07/27 08:38:58 | 000,005,282 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\_locales\fi\messages.json
[2013/07/27 08:38:58 | 000,005,270 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\_locales\fr\messages.json
[2013/07/27 08:38:58 | 000,009,517 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\_locales\he\messages.json
[2013/07/27 08:38:58 | 000,011,000 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\_locales\hi\messages.json
[2013/07/27 08:38:58 | 000,004,895 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\_locales\hr\messages.json
[2013/07/27 08:38:58 | 000,005,767 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\_locales\hu\messages.json
[2013/07/27 08:38:58 | 000,004,848 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\_locales\id\messages.json
[2013/07/27 08:38:58 | 000,004,816 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\_locales\it\messages.json
[2013/07/27 08:38:58 | 000,008,312 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\_locales\ja\messages.json
[2013/07/27 08:38:58 | 000,006,845 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\_locales\ko\messages.json
[2013/07/27 08:38:58 | 000,005,522 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\_locales\lv\messages.json
[2013/07/27 08:38:58 | 000,004,789 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\_locales\ms\messages.json
[2013/07/27 08:38:58 | 000,004,919 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\_locales\nb\messages.json
[2013/07/27 08:38:58 | 000,004,855 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\_locales\nl\messages.json
[2013/07/27 08:38:58 | 000,005,376 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\_locales\pl\messages.json
[2013/07/27 08:38:58 | 000,005,152 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\_locales\pt_BR\messages.json
[2013/07/27 08:38:58 | 000,004,943 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\_locales\pt_PT\messages.json
[2013/07/27 08:38:58 | 000,005,272 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\_locales\ro\messages.json
[2013/07/27 08:38:58 | 000,012,406 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\_locales\ru\messages.json
[2013/07/27 08:38:58 | 000,005,538 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\_locales\sk\messages.json
[2013/07/27 08:38:58 | 000,004,858 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\_locales\sl\messages.json
[2013/07/27 08:38:58 | 000,004,898 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\_locales\sr\messages.json
[2013/07/27 08:38:58 | 000,005,135 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\_locales\sv\messages.json
[2013/07/27 08:38:58 | 000,010,781 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\_locales\th\messages.json
[2013/07/27 08:38:58 | 000,005,296 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\_locales\tr\messages.json
[2013/07/27 08:38:58 | 000,012,232 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\_locales\uk\messages.json
[2013/07/27 08:38:57 | 000,005,339 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\_locales\ur\messages.json
[2013/07/27 08:38:58 | 000,006,838 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\_locales\vi\messages.json
[2013/07/27 08:38:58 | 000,005,840 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\_locales\zh_CN\messages.json
[2013/07/27 08:38:58 | 000,006,189 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\_locales\zh_TW\messages.json
[2013/07/27 08:38:57 | 000,062,494 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\libs\avastwrc.js
[2013/07/27 08:38:57 | 000,003,751 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\libs\dateFormat.js
[2013/07/27 08:38:57 | 000,219,227 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\libs\jquery-1.5.2.js
[2013/07/27 08:38:57 | 000,092,556 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\libs\jquery.1.8.js
[2013/07/27 08:38:57 | 000,190,963 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\libs\jquery.js
[2013/07/27 08:38:57 | 000,008,166 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\libs\pbj.js
[2013/07/27 08:38:57 | 000,059,697 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\libs\protobuf.js
[2013/07/27 08:38:57 | 000,048,779 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\libs\query.js
[2013/07/27 08:38:57 | 000,018,112 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\libs\wrc_gpb.js
[2013/07/27 08:38:57 | 000,022,705 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\scripts\anchor.js
[2013/07/27 08:38:57 | 000,036,142 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\scripts\background.js
[2013/07/27 08:38:57 | 000,008,161 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\scripts\dialogs.js
[2013/07/27 08:38:57 | 000,010,996 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\scripts\popup.js
[2013/07/27 08:38:57 | 000,007,179 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\scripts\popup.new.js
[2013/07/27 08:38:57 | 000,020,567 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\scripts\ratings.js
[2013/07/27 08:38:57 | 000,010,189 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\scripts\test_rules.js
[2013/07/27 08:38:57 | 000,026,475 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\scripts\warnDlg.js
[2013/07/27 08:38:57 | 000,001,093 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\dialog.html
[2013/07/27 08:38:57 | 000,000,139 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\css\anchor.css
[2013/07/27 08:38:57 | 000,007,986 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\css\dialogs.css
[2013/07/27 08:38:57 | 000,010,292 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\css\popup.css
[2013/07/27 08:38:57 | 000,023,808 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\css\popup.new.css
[2013/07/27 08:38:57 | 000,001,796 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\avast_logo.png
[2013/07/27 08:38:57 | 000,000,523 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\background-body.jpg
[2013/07/27 08:38:57 | 000,000,637 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\background-right-bottom.jpg
[2013/07/27 08:38:57 | 000,000,634 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\background-right-top.jpg
[2013/07/27 08:38:57 | 000,054,751 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\background-sitecorrect.png
[2013/07/27 08:38:57 | 000,001,156 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\close.png
[2013/07/27 08:38:57 | 000,000,626 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\disabled.png
[2013/07/27 08:38:57 | 000,001,763 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\grey.png
[2013/07/27 08:38:57 | 000,000,743 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\horizontal-line-white.jpg
[2013/07/27 08:38:57 | 000,001,032 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\horizontal-line.jpg
[2013/07/27 08:38:58 | 000,007,703 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icon128.png
[2013/07/27 08:38:58 | 000,012,797 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icon256.png
[2013/07/27 08:38:58 | 000,002,123 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icon48.png
[2013/07/27 08:38:57 | 000,004,006 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icon64.png
[2013/07/27 08:38:57 | 000,004,733 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icon_incorrect.png
[2013/07/27 08:38:58 | 000,004,975 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\logo.jpg
[2013/07/27 08:38:58 | 000,000,504 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\vertical-line.jpg
[2013/07/27 08:38:57 | 000,002,087 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\corporate-small-disable.png
[2013/07/27 08:38:57 | 000,001,939 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\corporate-small-selected.png
[2013/07/27 08:38:57 | 000,003,215 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\corporate.png
[2013/07/27 08:38:57 | 000,002,265 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\drugs-small-disable.png
[2013/07/27 08:38:57 | 000,002,263 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\drugs-small-selected.png
[2013/07/27 08:38:57 | 000,005,828 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\drugs.png
[2013/07/27 08:38:57 | 000,002,303 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\gambling-small-disable.png
[2013/07/27 08:38:57 | 000,002,155 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\gambling-small-selected.png
[2013/07/27 08:38:57 | 000,004,773 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\gambling.png
[2013/07/27 08:38:57 | 000,003,829 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\green-1.png
[2013/07/27 08:38:57 | 000,003,549 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\green-2.png
[2013/07/27 08:38:57 | 000,003,075 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\green-3.png
[2013/07/27 08:38:57 | 000,001,593 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\green-hover.png
[2013/07/27 08:38:57 | 000,002,977 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\green-selected.png
[2013/07/27 08:38:57 | 000,001,590 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\green.png
[2013/07/27 08:38:57 | 000,001,416 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\green1-16.png
[2013/07/27 08:38:57 | 000,001,408 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\green1-small.png
[2013/07/27 08:38:57 | 000,001,430 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\green2-16.png
[2013/07/27 08:38:57 | 000,001,426 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\green2-small.png
[2013/07/27 08:38:57 | 000,001,406 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\green3-16.png
[2013/07/27 08:38:57 | 000,001,611 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\green3-24.png
[2013/07/27 08:38:57 | 000,001,396 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\green3-small.png
[2013/07/27 08:38:57 | 000,003,955 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\grey-0.png
[2013/07/27 08:38:57 | 000,003,110 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\grey-3.png
[2013/07/27 08:38:57 | 000,001,433 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\grey-small.png
[2013/07/27 08:38:57 | 000,001,441 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\grey0-16.png
[2013/07/27 08:38:57 | 000,001,451 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\grey3-16.png
[2013/07/27 08:38:57 | 000,002,318 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\illegal-small-disable.png
[2013/07/27 08:38:57 | 000,002,320 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\illegal-small-selected.png
[2013/07/27 08:38:57 | 000,006,501 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\illegal.png
[2013/07/27 08:38:57 | 000,002,139 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\it-small-disable.png
[2013/07/27 08:38:57 | 000,001,957 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\it-small-selected.png
[2013/07/27 08:38:57 | 000,003,884 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\it.png
[2013/07/27 08:38:57 | 000,001,300 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\limet-hover.png
[2013/07/27 08:38:57 | 000,002,791 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\limet-selected.png
[2013/07/27 08:38:57 | 000,001,298 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\limet.png
[2013/07/27 08:38:57 | 000,001,810 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\line-dark-horizontal.png
[2013/07/27 08:38:57 | 000,001,787 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\line-light-horizontal.png
[2013/07/27 08:38:57 | 000,003,601 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\logo128.jpg
[2013/07/27 08:38:57 | 000,008,456 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\logo256.jpg
[2013/07/27 08:38:57 | 000,001,391 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\logo48.jpg
[2013/07/27 08:38:57 | 000,001,769 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\logo64.jpg
[2013/07/27 08:38:57 | 000,002,057 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\news-small-disable.png
[2013/07/27 08:38:57 | 000,001,961 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\news-small-selected.png
[2013/07/27 08:38:57 | 000,003,762 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\news.png
[2013/07/27 08:38:57 | 000,001,303 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\orange-hover.png
[2013/07/27 08:38:57 | 000,002,788 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\orange-selected.png
[2013/07/27 08:38:57 | 000,001,304 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\orange.png
[2013/07/27 08:38:57 | 000,001,389 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\orange1-16.png
[2013/07/27 08:38:57 | 000,001,406 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\orange2-16.png
[2013/07/27 08:38:57 | 000,001,363 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\orange3-16.png
[2013/07/27 08:38:57 | 000,002,124 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\pornography-small-disable.png
[2013/07/27 08:38:57 | 000,001,984 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\pornography-small-selected.png
[2013/07/27 08:38:57 | 000,004,104 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\pornography.png
[2013/07/27 08:38:57 | 000,003,741 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\red-1.png
[2013/07/27 08:38:57 | 000,003,479 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\red-2.png
[2013/07/27 08:38:57 | 000,002,716 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\red-3.png
[2013/07/27 08:38:58 | 000,001,549 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\red-hover.png
[2013/07/27 08:38:58 | 000,002,939 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\red-selected.png
[2013/07/27 08:38:57 | 000,001,552 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\red.png
[2013/07/27 08:38:57 | 000,001,376 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\red1-16.png
[2013/07/27 08:38:57 | 000,001,367 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\red1-small.png
[2013/07/27 08:38:57 | 000,001,386 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\red2-16.png
[2013/07/27 08:38:57 | 000,001,377 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\red2-small.png
[2013/07/27 08:38:57 | 000,001,361 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\red3-16.png
[2013/07/27 08:38:58 | 000,001,352 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\red3-small.png
[2013/07/27 08:38:58 | 000,002,122 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\shopping-small-disable.png
[2013/07/27 08:38:58 | 000,002,075 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\shopping-small-selected.png
[2013/07/27 08:38:58 | 000,005,208 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\shopping.png
[2013/07/27 08:38:58 | 000,002,235 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\social-small-disable.png
[2013/07/27 08:38:58 | 000,002,147 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\social-small-selected.png
[2013/07/27 08:38:58 | 000,005,147 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\social.png
[2013/07/27 08:38:58 | 000,002,245 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\violence-small-disable.png
[2013/07/27 08:38:58 | 000,002,109 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\violence-small-selected.png
[2013/07/27 08:38:58 | 000,004,866 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\violence.png
[2013/07/27 08:38:58 | 000,002,245 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\weapons-small-disable.png
[2013/07/27 08:38:58 | 000,002,109 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\weapons-small-selected.png
[2013/07/27 08:38:58 | 000,006,701 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\weapons.png
[2013/07/27 08:38:58 | 000,003,818 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\yellow-1.png
[2013/07/27 08:38:58 | 000,003,525 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\yellow-2.png
[2013/07/27 08:38:58 | 000,002,697 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\yellow-3.png
[2013/07/27 08:38:58 | 000,001,304 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\yellow-hover.png
[2013/07/27 08:38:58 | 000,002,782 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\yellow-selected.png
[2013/07/27 08:38:58 | 000,001,304 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\yellow.png
[2013/07/27 08:38:58 | 000,001,337 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\yellow1-16.png
[2013/07/27 08:38:58 | 000,001,379 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\yellow1-small.png
[2013/07/27 08:38:58 | 000,001,345 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\yellow2-16.png
[2013/07/27 08:38:58 | 000,001,395 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\yellow2-small.png
[2013/07/27 08:38:58 | 000,001,302 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\yellow3-16.png
[2013/07/27 08:38:58 | 000,001,363 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\images\icons\yellow3-small.png
[2013/07/27 08:38:58 | 000,001,124 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\imgs\close.png
[2013/07/27 08:38:58 | 000,001,999 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\imgs\green1-16.png
[2013/07/27 08:38:58 | 000,001,999 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\imgs\green2-16.png
[2013/07/27 08:38:58 | 000,001,999 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\imgs\green3-16.png
[2013/07/27 08:38:58 | 000,001,046 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\imgs\grey0-16.png
[2013/07/27 08:38:58 | 000,001,571 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\imgs\icon-corporate.png
[2013/07/27 08:38:58 | 000,002,247 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\imgs\icon-drugs.png
[2013/07/27 08:38:58 | 000,002,024 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\imgs\icon-gambling.png
[2013/07/27 08:38:58 | 000,002,352 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\imgs\icon-illegal.png
[2013/07/27 08:38:58 | 000,001,699 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\imgs\icon-it.png
[2013/07/27 08:38:58 | 000,001,581 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\imgs\icon-news.png
[2013/07/27 08:38:58 | 000,001,640 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\imgs\icon-pornography.png
[2013/07/27 08:38:58 | 000,002,008 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\imgs\icon-shopping.png
[2013/07/27 08:38:58 | 000,002,105 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\imgs\icon-social.png
[2013/07/27 08:38:58 | 000,002,052 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\imgs\icon-violence.png
[2013/07/27 08:38:58 | 000,002,130 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\imgs\logo.png
[2013/07/27 08:38:58 | 000,001,998 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\imgs\red1-16.png
[2013/07/27 08:38:58 | 000,001,998 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\imgs\red2-16.png
[2013/07/27 08:38:58 | 000,001,998 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\imgs\red3-16.png
[2013/07/27 08:38:58 | 000,002,003 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\imgs\yellow1-16.png
[2013/07/27 08:38:58 | 000,003,898 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\imgs\yellow2-16.png
[2013/07/27 08:38:58 | 000,003,898 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\skin\imgs\yellow3-16.png
[2013/05/21 16:01:49 | 000,000,153 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmolcgpienlcieaajfkkdamlngancncm\6.15.12.2_0\background.html
[2013/05/21 16:01:49 | 000,000,786 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmolcgpienlcieaajfkkdamlngancncm\6.15.12.2_0\background.js
[2013/05/21 16:01:49 | 000,001,047 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmolcgpienlcieaajfkkdamlngancncm\6.15.12.2_0\captured.html
[2013/05/21 16:01:49 | 000,001,614 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmolcgpienlcieaajfkkdamlngancncm\6.15.12.2_0\contentscript.js
[2013/05/21 16:01:49 | 000,097,536 | ---- | M] (Tonec Inc.) -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmolcgpienlcieaajfkkdamlngancncm\6.15.12.2_0\IDMGCExt.dll
[2013/05/21 16:01:49 | 000,001,370 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmolcgpienlcieaajfkkdamlngancncm\6.15.12.2_0\manifest.json
[2013/05/21 16:01:49 | 000,003,584 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmolcgpienlcieaajfkkdamlngancncm\6.15.12.2_0\welcome.html
[2013/05/21 16:01:49 | 000,001,928 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmolcgpienlcieaajfkkdamlngancncm\6.15.12.2_0\welcome.js
[2013/05/21 16:01:49 | 000,000,763 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmolcgpienlcieaajfkkdamlngancncm\6.15.12.2_0\_locales\en\messages.json
[2013/05/21 16:01:49 | 000,000,929 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmolcgpienlcieaajfkkdamlngancncm\6.15.12.2_0\images\dwnlAll.png
[2013/05/21 16:01:49 | 000,000,854 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmolcgpienlcieaajfkkdamlngancncm\6.15.12.2_0\images\dwnlLink.png
[2013/05/21 16:01:49 | 000,000,909 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmolcgpienlcieaajfkkdamlngancncm\6.15.12.2_0\images\headBkgd.gif
[2013/05/21 16:01:49 | 000,015,554 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmolcgpienlcieaajfkkdamlngancncm\6.15.12.2_0\images\headTitle.gif
[2013/05/21 16:01:49 | 000,020,003 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmolcgpienlcieaajfkkdamlngancncm\6.15.12.2_0\images\logoBig.png
[2013/05/21 16:01:49 | 000,004,616 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmolcgpienlcieaajfkkdamlngancncm\6.15.12.2_0\images\logoSmall.png
[2013/05/21 16:01:49 | 000,001,406 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmolcgpienlcieaajfkkdamlngancncm\6.15.12.2_0\images\logoTonec.gif
[2013/07/23 18:49:15 | 000,007,021 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\background.html
[2013/07/23 18:49:15 | 000,000,315 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\docend.js
[2013/07/23 18:49:15 | 000,003,943 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\docstart.js
[2013/07/23 18:49:15 | 000,000,085 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\isolate.ini
[2013/07/23 18:49:15 | 000,001,152 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\manifest.json
[2013/07/23 18:49:15 | 000,982,352 | ---- | M] (Symantec Corporation) -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\npcoplgn.dll
[2013/07/23 18:49:15 | 000,015,600 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\wax.js
[2013/07/23 18:49:15 | 000,009,109 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\wcid.js
[2013/07/23 18:49:15 | 000,000,104 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\_locales\en\messages.json
[2013/07/23 18:49:15 | 000,001,511 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\add_cards.png
[2013/07/23 18:49:15 | 000,002,578 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\add_logins.png
[2013/07/23 18:49:15 | 000,001,141 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\Add_New.png
[2013/07/23 18:49:15 | 000,001,483 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\Add_notes.png
[2013/07/23 18:49:15 | 000,027,083 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\Amex_Card.png
[2013/07/23 18:49:15 | 000,002,936 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\arrow_down.png
[2013/07/23 18:49:15 | 000,002,935 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\arrow_right.png
[2013/07/23 18:49:15 | 000,000,209 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\bg_buttonDisabled.png
[2013/07/23 18:49:15 | 000,000,234 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\bg_buttonHover.png
[2013/07/23 18:49:15 | 000,000,223 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\bg_button_click.png
[2013/07/23 18:49:15 | 000,000,265 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\bg_button_normal.png
[2013/07/23 18:49:15 | 000,003,971 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\BOOKMARK_ADD_CARDS.PNG
[2013/07/23 18:49:15 | 000,006,944 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\BOOKMARK_ADD_LOGINS.PNG
[2013/07/23 18:49:15 | 000,003,596 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\BOOKMARK_ADD_NOTES.PNG
[2013/07/23 18:49:15 | 000,011,637 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\BOOKMARK_AMAZON.PNG
[2013/07/23 18:49:15 | 000,008,710 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\BOOKMARK_EBAY.PNG
[2013/07/23 18:49:15 | 000,016,734 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\BOOKMARK_FACEBOOK.PNG
[2013/07/23 18:49:15 | 000,008,033 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\BOOKMARK_GMAIL.PNG
[2013/07/23 18:49:15 | 000,006,766 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\BOOKMARK_LINKEDIN.PNG
[2013/07/23 18:49:15 | 000,012,797 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\BOOKMARK_NETFLIX.PNG
[2013/07/23 18:49:15 | 000,006,725 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\BOOKMARK_TWITTER.PNG
[2013/07/23 18:49:15 | 000,007,661 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\BOOKMARK_YMAIL.PNG
[2013/07/23 18:49:15 | 000,014,102 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\BOOKMARK_YOUTUBE.PNG
[2013/07/23 18:49:15 | 000,000,595 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\border_left.png
[2013/07/23 18:49:15 | 000,000,614 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\border_right.png
[2013/07/23 18:49:15 | 000,007,878 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\bot_440.png
[2013/07/23 18:49:15 | 000,004,717 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\bot_600.png
[2013/07/23 18:49:15 | 000,025,695 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\Browse_the_net.png
[2013/07/23 18:49:15 | 000,005,220 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\Btt_up.png
[2013/07/23 18:49:15 | 000,003,776 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\Cards.png
[2013/07/23 18:49:15 | 000,000,455 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\Cards_icon.png
[2013/07/23 18:49:15 | 000,003,163 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\cards_icon_generic.png
[2013/07/23 18:49:15 | 000,000,613 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\CLOSE_CLICK_HOMEPAGE.PNG
[2013/07/23 18:49:15 | 000,000,691 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\CLOSE_CLICK_HOVER.PNG
[2013/07/23 18:49:15 | 000,000,675 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\CLOSE_CLICK_NORMAL.PNG
[2013/07/23 18:49:15 | 000,001,572 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\edit_icon.png
[2013/07/23 18:49:15 | 000,003,184 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\edit_icon_big.png
[2013/07/23 18:49:15 | 000,003,119 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\FAVICON_FACEBOOK.PNG
[2013/07/23 18:49:15 | 000,003,264 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\FAVICON_GMAIL.PNG
[2013/07/23 18:49:15 | 000,003,533 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\FAVICON_LINKEDIN.PNG
[2013/07/23 18:49:15 | 000,003,317 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\FAVICON_TWITTER.PNG
[2013/07/23 18:49:15 | 000,003,463 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\FAVICON_YAHOO.PNG
[2013/07/23 18:49:15 | 000,002,295 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\FooterSymantecLogo.png
[2013/07/23 18:49:15 | 000,004,530 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\gradient.png
[2013/07/23 18:49:15 | 000,003,497 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\green_tick.png
[2013/07/23 18:49:15 | 000,000,999 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\Grid_view.png
[2013/07/23 18:49:15 | 000,002,876 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\grid_view_click.png
[2013/07/23 18:49:15 | 000,002,814 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\grid_view_hover.png
[2013/07/23 18:49:15 | 000,002,831 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\grid_view_normal.png
[2013/07/23 18:49:15 | 000,001,003 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\home.png
[2013/07/23 18:49:15 | 000,003,539 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\icon_android.png
[2013/07/23 18:49:15 | 000,000,517 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\icon_home.png
[2013/07/23 18:49:15 | 000,004,677 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\icon_ios.png
[2013/07/23 18:49:15 | 000,022,145 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\ID-Safe.png
[2013/07/23 18:49:15 | 000,033,325 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\IdentitySafe.css
[2013/07/23 18:49:15 | 000,074,753 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\IdentitySafe.html
[2013/07/23 18:49:15 | 000,006,968 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\IdentitySafeTutorial.css
[2013/07/23 18:49:15 | 000,014,152 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\IdentitySafeTutorial.html
[2013/07/23 18:49:15 | 000,001,291 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\IDSafePage.js
[2013/07/23 18:49:15 | 000,020,977 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\ids_sprite.png
[2013/07/23 18:49:15 | 000,007,370 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\ID_SAfe_logo.png
[2013/07/23 18:49:15 | 000,006,483 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\ID_Safe_Logo_Big.png
[2013/07/23 18:49:15 | 000,004,098 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\ID_Safe_logo_small.png
[2013/07/23 18:49:15 | 000,007,844 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\img_bannerGrafic.png
[2013/07/23 18:49:15 | 000,002,926 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\left_arrow.png
[2013/07/23 18:49:15 | 000,001,278 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\List_view.png
[2013/07/23 18:49:15 | 000,002,865 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\list_view_click.png
[2013/07/23 18:49:15 | 000,002,816 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\list_view_hover.png
[2013/07/23 18:49:15 | 000,002,821 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\list_view_normal.png
[2013/07/23 18:49:15 | 000,011,840 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\logged_out.png
[2013/07/23 18:49:15 | 000,017,530 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\Logged_out_image.png
[2013/07/23 18:49:15 | 000,000,683 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\Login_icon.png
[2013/07/23 18:49:15 | 000,028,473 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\Master_card.png
[2013/07/23 18:49:15 | 000,002,844 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\mid_440.png
[2013/07/23 18:49:15 | 000,002,851 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\mid_600.png
[2013/07/23 18:49:15 | 000,008,465 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\My_Card.png
[2013/07/23 18:49:15 | 000,008,361 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\My_Notes.png
[2013/07/23 18:49:15 | 000,003,888 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\Norton_brand_line.png
[2013/07/23 18:49:15 | 000,006,910 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\norton_secured_logo.png
[2013/07/23 18:49:15 | 000,003,743 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\Notes.png
[2013/07/23 18:49:15 | 000,016,424 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\notesicon.png
[2013/07/23 18:49:15 | 000,000,614 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\Notes_icon.png
[2013/07/23 18:49:15 | 000,002,990 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\notes_icon_generic.png
[2013/07/23 18:49:15 | 000,004,729 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\N_logo_big.png
[2013/07/23 18:49:15 | 000,027,452 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\Open_Your_vault.png
[2013/07/23 18:49:15 | 000,004,882 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\Password.png
[2013/07/23 18:49:15 | 000,005,645 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\preview_not_available.png
[2013/07/23 18:49:15 | 000,002,939 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\right_arrow.png
[2013/07/23 18:49:15 | 000,003,664 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\Safe.png
[2013/07/23 18:49:15 | 000,002,102 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\Safe_search_icon.png
[2013/07/23 18:49:15 | 000,026,516 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\safe_search_safe_web.png
[2013/07/23 18:49:15 | 000,005,038 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\Safe_Web.png
[2013/07/23 18:49:15 | 000,003,166 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\search_login_click.png
[2013/07/23 18:49:15 | 000,003,031 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\search_login_hover.png
[2013/07/23 18:49:15 | 000,003,139 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\search_login_normal.png
[2013/07/23 18:49:15 | 000,039,285 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\search_web_bg.png
[2013/07/23 18:49:15 | 000,034,922 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\Share-Quickly.png
[2013/07/23 18:49:15 | 000,000,991 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\Showall_drop_down_arrow.png
[2013/07/23 18:49:15 | 000,000,973 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\show_all_arrow.png
[2013/07/23 18:49:15 | 000,004,864 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\sprite_arrows.png
[2013/07/23 18:49:15 | 000,012,898 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\sprite_icons.png
[2013/07/23 18:49:15 | 000,030,021 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\Symantec_card.png
[2013/07/23 18:49:15 | 000,016,030 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\toolbar.png
[2013/07/23 18:49:15 | 000,003,571 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\top_440.png
[2013/07/23 18:49:15 | 000,000,934 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\top_600.png
[2013/07/23 18:49:15 | 000,002,913 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\top_head_divider_grad.png
[2013/07/23 18:49:15 | 000,001,206 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\trash_icon.png
[2013/07/23 18:49:15 | 000,011,840 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\vault_open.png
[2013/07/23 18:49:15 | 000,031,223 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\Visa_Card.png
[2013/07/23 18:49:15 | 000,008,611 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\Visit_Your_Site.png
[2013/07/23 18:49:15 | 000,003,733 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\Warning.png
[2013/07/23 18:49:15 | 000,001,670 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\IdentitySafe\WebPageNotFound-FAV.png
[2013/07/23 18:49:15 | 000,002,480 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\images\48_Norton_Ext_Icon.png
[2013/07/23 18:49:15 | 000,001,361 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\images\SafeBrowse\sb_nortoncertified.png
[2013/07/23 18:49:15 | 000,003,392 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\images\SafeBrowse\sb_safeAnnotation.png
[2013/07/23 18:49:15 | 000,003,942 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\images\SafeBrowse\sb_safeshopAnnotation.png
[2013/07/23 18:49:15 | 000,001,452 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\images\SafeBrowse\sb_unknownAnnotation.png
[2013/07/23 18:49:15 | 000,001,478 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\images\SafeBrowse\sb_unsafeAnnotation.png
[2013/07/23 18:49:15 | 000,002,527 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\images\SafeBrowse\sb_unsafeshopAnnotation.png
[2013/07/23 18:49:15 | 000,002,037 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\images\SafeBrowse\sb_unsafeshoppagebadAnnotation.png
[2013/07/23 18:49:15 | 000,001,445 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\images\SafeBrowse\sb_webnuisanceAnnotation.png
[2013/07/23 18:49:15 | 000,000,999 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\images\StatusButton\coBA_dangerous.png
[2013/07/23 18:49:15 | 000,000,946 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\images\StatusButton\coBA_Safe.png
[2013/07/23 18:49:15 | 000,000,920 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\images\StatusButton\coBA_suspicious.png
[2013/07/23 18:49:15 | 000,000,977 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\images\StatusButton\coBA_unknown.png
[2013/07/23 18:49:15 | 000,003,420 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\images\Widgets\norton_tb_mm_logo_watermark.png
[2013/07/23 18:49:15 | 000,007,123 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\RedirectPages\blocked-norton-logo.png
[2013/07/23 18:49:15 | 000,004,032 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\RedirectPages\blocked-piiformrisk.png
[2013/07/23 18:49:15 | 000,001,666 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\RedirectPages\blocked-redx.png
[2013/07/23 18:49:15 | 000,000,213 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\RedirectPages\blocked_btn_click.png
[2013/07/23 18:49:15 | 000,000,213 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\RedirectPages\blocked_btn_default.png
[2013/07/23 18:49:15 | 000,000,205 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\RedirectPages\blocked_btn_hover.png
[2013/07/23 18:49:15 | 000,001,182 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\RedirectPages\BrowserBadRedirect.html
[2013/07/23 18:49:15 | 000,002,741 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\RedirectPages\KBRedirect.css
[2013/07/23 18:49:15 | 000,001,189 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\RedirectPages\KnownBadRedirect.html
[2013/07/23 18:49:15 | 000,001,192 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\RedirectPages\PageBadRedirect.html
[2013/07/23 18:49:15 | 000,001,196 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\RedirectPages\PIIFormSuspRedirect.html
[2013/07/23 18:49:15 | 000,008,093 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\RedirectPages\PIIRedirect.css
[2013/07/23 18:49:15 | 000,001,479 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\RedirectPages\RedirectPages.js
[2013/07/23 18:49:15 | 000,005,653 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\RedirectPages\SiteAge_New.png
[2013/07/23 18:49:15 | 000,005,261 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\RedirectPages\SiteAge_Young.png
[2013/07/23 18:49:15 | 000,004,717 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\RedirectPages\SitePop_Low.png
[2013/07/23 18:49:15 | 000,004,756 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\RedirectPages\SitePop_None.png
[2013/07/23 18:49:15 | 000,001,184 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0\RedirectPages\SuspiciousRedirect.html
[2013/03/09 06:02:24 | 000,005,920 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\128.png
[2013/03/09 06:02:24 | 000,000,755 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\manifest.json
[2013/03/09 06:02:24 | 000,000,556 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\ar\messages.json
[2013/03/09 06:02:24 | 000,000,492 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\bg\messages.json
[2013/03/09 06:02:24 | 000,000,262 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\ca\messages.json
[2013/03/09 06:02:24 | 000,000,289 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\cs\messages.json
[2013/03/09 06:02:24 | 000,000,240 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\da\messages.json
[2013/03/09 06:02:24 | 000,000,239 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\de\messages.json
[2013/03/09 06:02:24 | 000,000,624 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\el\messages.json
[2013/03/09 06:02:24 | 000,000,215 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\en\messages.json
[2013/03/09 06:02:24 | 000,000,281 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\es\messages.json
[2013/03/09 06:02:24 | 000,000,284 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\fi\messages.json
[2013/03/09 06:02:24 | 000,000,234 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\fil\messages.json
[2013/03/09 06:02:24 | 000,000,272 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\fr\messages.json
[2013/03/09 06:02:24 | 000,000,391 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\hi\messages.json
[2013/03/09 06:02:24 | 000,000,246 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\hr\messages.json
[2013/03/09 06:02:24 | 000,000,234 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\hu\messages.json
[2013/03/09 06:02:24 | 000,000,242 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\id\messages.json
[2013/03/09 06:02:24 | 000,000,260 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\it\messages.json
[2013/03/09 06:02:24 | 000,000,364 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\ja\messages.json
[2013/03/09 06:02:24 | 000,000,328 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\ko\messages.json
[2013/03/09 06:02:24 | 000,000,269 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\lt\messages.json
[2013/03/09 06:02:24 | 000,000,262 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\lv\messages.json
[2013/03/09 06:02:24 | 000,000,232 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\nl\messages.json
[2013/03/09 06:02:24 | 000,000,210 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\no\messages.json
[2013/03/09 06:02:24 | 000,000,292 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\pl\messages.json
[2013/03/09 06:02:24 | 000,000,230 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\pt_BR\messages.json
[2013/03/09 06:02:24 | 000,000,231 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\pt_PT\messages.json
[2013/03/09 06:02:24 | 000,000,281 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\ro\messages.json
[2013/03/09 06:02:24 | 000,000,482 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\ru\messages.json
[2013/03/09 06:02:24 | 000,000,210 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\se\messages.json
[2013/03/09 06:02:24 | 000,000,238 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\sk\messages.json
[2013/03/09 06:02:24 | 000,000,249 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\sl\messages.json
[2013/03/09 06:02:24 | 000,000,511 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\sr\messages.json
[2013/03/09 06:02:24 | 000,000,471 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\th\messages.json
[2013/03/09 06:02:24 | 000,000,250 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\tr\messages.json
[2013/03/09 06:02:24 | 000,000,536 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\uk\messages.json
[2013/03/09 06:02:24 | 000,000,257 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\vi\messages.json
[2013/03/09 06:02:24 | 000,000,339 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\zh_CN\messages.json
[2013/03/09 06:02:24 | 000,000,321 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\zh_TW\messages.json
[2013/07/29 02:58:40 | 000,045,056 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_0
[2013/07/29 02:58:40 | 000,270,336 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_1
[2013/07/28 16:59:06 | 001,056,768 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_2
[2013/07/11 23:52:43 | 000,008,192 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_3
[2013/07/11 23:52:43 | 000,262,512 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\GPUCache\index
[21 C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\*.tmp files -> C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\*.tmp -> ]
[20 C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\*.tmp files -> C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\*.tmp -> ]
[2013/07/29 03:54:01 | 000,124,928 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_gomekmidlodglbbmalcneegieacbdmki_0.localstorage
[2013/07/29 03:54:01 | 000,016,384 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_gomekmidlodglbbmalcneegieacbdmki_0.localstorage-journal
[2013/06/19 00:54:07 | 000,003,072 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_accounts.google.com_0.localstorage
[2013/06/19 00:54:07 | 000,003,608 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_accounts.google.com_0.localstorage-journal
[2013/07/04 08:46:48 | 000,003,072 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_connexity.net_0.localstorage
[2013/07/04 08:46:48 | 000,003,608 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_connexity.net_0.localstorage-journal
[2013/07/27 16:08:57 | 000,003,072 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_h.online-metrix.net_0.localstorage
[2013/07/27 16:08:57 | 000,003,608 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_h.online-metrix.net_0.localstorage-journal
[2013/07/02 18:33:55 | 000,003,072 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_login.skype.com_0.localstorage
[2013/07/02 18:33:55 | 000,003,608 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_login.skype.com_0.localstorage-journal
[2013/03/09 06:07:55 | 000,003,072 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_login.teamviewer.com_0.localstorage
[2013/03/09 06:07:55 | 000,003,608 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_login.teamviewer.com_0.localstorage-journal
[2013/04/12 20:45:20 | 000,143,360 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_mail.google.com_0.localstorage
[2013/04/12 20:45:20 | 000,003,608 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_mail.google.com_0.localstorage-journal
[2013/07/17 01:50:08 | 000,003,072 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_news.google.com_0.localstorage
[2013/07/17 01:50:08 | 000,003,608 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_news.google.com_0.localstorage-journal
[2013/07/29 03:53:28 | 000,003,072 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_plus.google.com_0.localstorage
[2013/07/29 03:53:28 | 000,003,608 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_plus.google.com_0.localstorage-journal
[2013/05/27 16:07:37 | 000,003,072 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_post.craigslist.org_0.localstorage
[2013/05/27 16:07:37 | 000,003,608 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_post.craigslist.org_0.localstorage-journal
[2013/03/09 10:27:52 | 000,003,072 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_secure.logmein.com_0.localstorage
[2013/03/09 10:27:52 | 000,003,608 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_secure.logmein.com_0.localstorage-journal
[2013/04/27 19:05:28 | 000,003,072 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_secure.skype.com_0.localstorage
[2013/04/27 19:05:28 | 000,003,608 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_secure.skype.com_0.localstorage-journal
[2013/04/23 19:59:08 | 000,005,120 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_secure1.store.apple.com_0.localstorage
[2013/04/23 19:59:08 | 000,004,640 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_secure1.store.apple.com_0.localstorage-journal
[2013/07/28 10:41:25 | 000,003,072 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_sso.fox.com_0.localstorage
[2013/07/28 10:41:25 | 000,003,608 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_sso.fox.com_0.localstorage-journal
[2013/04/14 09:49:01 | 000,009,216 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.olark.com_0.localstorage
[2013/04/14 09:49:01 | 000,009,800 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.olark.com_0.localstorage-journal
[2013/07/17 02:43:45 | 000,003,072 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_www.amazon.com_0.localstorage
[2013/07/17 02:43:45 | 000,003,608 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_www.amazon.com_0.localstorage-journal
[2013/06/12 19:23:43 | 000,003,072 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_www.google.com_0.localstorage
[2013/06/12 19:23:43 | 000,003,608 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_www.google.com_0.localstorage-journal
[2013/04/28 10:57:38 | 000,003,072 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_www.tradingview.com_0.localstorage
[2013/04/28 10:57:38 | 000,003,608 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_www.tradingview.com_0.localstorage-journal
[2013/05/20 20:02:37 | 000,003,072 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_www.youtube.com_0.localstorage
[2013/05/20 20:02:37 | 000,003,608 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_www.youtube.com_0.localstorage-journal
[2013/05/24 02:08:04 | 000,003,072 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_abcnews.go.com_0.localstorage
[2013/05/24 02:08:04 | 000,003,608 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_abcnews.go.com_0.localstorage-journal
[2013/07/17 03:19:37 | 000,003,072 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_bh.contextweb.com_0.localstorage
[2013/07/17 03:19:37 | 000,003,608 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_bh.contextweb.com_0.localstorage-journal
[2013/07/17 01:50:32 | 000,293,888 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_c.betrad.com_0.localstorage
[2013/07/17 01:50:32 | 000,003,608 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_c.betrad.com_0.localstorage-journal
[2013/07/04 08:46:50 | 000,003,072 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_connexity.net_0.localstorage
[2013/07/04 08:46:50 | 000,003,608 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_connexity.net_0.localstorage-journal
[2013/07/20 21:12:47 | 000,173,056 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_content.peepsrv.com_0.localstorage
[2013/07/20 21:12:47 | 000,016,384 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_content.peepsrv.com_0.localstorage-journal
[2013/06/30 22:11:00 | 000,003,072 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_disqus.com_0.localstorage
[2013/06/30 22:11:00 | 000,003,608 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_disqus.com_0.localstorage-journal
[2013/07/04 08:46:43 | 000,003,072 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_download.cnet.com_0.localstorage
[2013/07/04 08:46:43 | 000,003,608 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_download.cnet.com_0.localstorage-journal
[2013/07/27 22:20:52 | 000,003,072 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_en.wikipedia.org_0.localstorage
[2013/07/27 22:20:52 | 000,003,608 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_en.wikipedia.org_0.localstorage-journal
[2013/07/17 02:44:36 | 000,040,960 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_f.selectionlinksjs.info_0.localstorage
[2013/07/17 02:44:36 | 000,016,384 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_f.selectionlinksjs.info_0.localstorage-journal
[2013/05/20 18:06:13 | 000,003,072 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_forexsocialsignals.com_0.localstorage
[2013/05/20 18:06:13 | 000,003,608 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_forexsocialsignals.com_0.localstorage-journal
[2013/06/06 19:51:23 | 000,003,072 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_franchise.7-eleven.com_0.localstorage
[2013/06/06 19:51:23 | 000,003,608 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_franchise.7-eleven.com_0.localstorage-journal
[2013/04/08 18:52:30 | 000,003,072 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_h33t.com_0.localstorage
[2013/04/08 18:52:30 | 000,003,608 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_h33t.com_0.localstorage-journal
[2013/05/27 16:06:43 | 000,003,072 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_losangeles.craigslist.org_0.localstorage
[2013/05/27 16:06:43 | 000,003,608 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_losangeles.craigslist.org_0.localstorage-journal
[2013/05/23 20:14:28 | 000,003,072 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_mediacdn.disqus.com_0.localstorage
[2013/05/23 20:14:28 | 000,000,512 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_mediacdn.disqus.com_0.localstorage-journal
[2013/06/02 03:55:23 | 000,003,072 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_ox-social.bidsystem.com_0.localstorage
[2013/06/02 03:55:23 | 000,003,608 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_ox-social.bidsystem.com_0.localstorage-journal
[2013/07/13 14:02:32 | 000,003,072 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_social.microsoft.com_0.localstorage
[2013/07/13 14:02:32 | 000,000,512 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_social.microsoft.com_0.localstorage-journal
[2013/06/15 16:24:44 | 000,003,072 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_stackoverflow.com_0.localstorage
[2013/06/15 16:24:44 | 000,003,608 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_stackoverflow.com_0.localstorage-journal
[2013/04/23 19:23:21 | 000,007,168 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_store.apple.com_0.localstorage
[2013/04/23 19:23:21 | 000,007,736 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_store.apple.com_0.localstorage-journal
[2013/04/08 18:52:49 | 000,003,072 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_thepiratebay.se_0.localstorage
[2013/04/08 18:52:49 | 000,003,608 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_thepiratebay.se_0.localstorage-journal
[2013/04/08 23:35:39 | 000,003,072 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_vtc.com_0.localstorage
[2013/04/08 23:35:39 | 000,003,608 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_vtc.com_0.localstorage-journal
[2013/04/01 03:10:27 | 001,192,960 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_wwtv.2yu.in_0.localstorage
[2013/04/01 03:10:27 | 000,006,704 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_wwtv.2yu.in_0.localstorage-journal
[2013/04/23 19:15:44 | 000,003,072 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.apple.com_0.localstorage
[2013/04/23 19:15:44 | 000,003,608 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.apple.com_0.localstorage-journal
[2013/05/11 21:56:55 | 000,003,072 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.booking.com_0.localstorage
[2013/05/11 21:56:55 | 000,003,608 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.booking.com_0.localstorage-journal
[2013/05/25 09:03:40 | 000,003,072 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.carsdirect.com_0.localstorage
[2013/05/25 09:03:40 | 000,003,608 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.carsdirect.com_0.localstorage-journal
[2013/06/29 15:06:39 | 000,003,072 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.costco.com_0.localstorage
[2013/06/29 15:06:39 | 000,003,608 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.costco.com_0.localstorage-journal
[2013/03/16 04:56:30 | 000,003,072 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.cybercoders.com_0.localstorage
[2013/03/16 04:56:30 | 000,000,512 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.cybercoders.com_0.localstorage-journal
[2013/06/28 01:46:19 | 000,003,072 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.dice.com_0.localstorage
[2013/06/28 01:46:19 | 000,003,608 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.dice.com_0.localstorage-journal
[2013/06/30 22:10:54 | 000,003,072 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.dummies.com_0.localstorage
[2013/06/30 22:10:54 | 000,000,512 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.dummies.com_0.localstorage-journal
[2013/05/11 22:23:29 | 000,003,072 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.expedia.com_0.localstorage
[2013/05/11 22:23:29 | 000,000,512 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.expedia.com_0.localstorage-journal
[2013/05/02 23:56:56 | 000,003,072 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.forexfactory.com_0.localstorage
[2013/05/02 23:56:56 | 000,000,512 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.forexfactory.com_0.localstorage-journal
[2013/07/18 01:32:21 | 000,481,280 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.forexstreet.net_0.localstorage
[2013/07/18 01:32:21 | 000,016,384 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.forexstreet.net_0.localstorage-journal
[2013/07/28 16:37:12 | 000,003,072 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.fox.com_0.localstorage
[2013/07/28 16:37:12 | 000,003,608 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.fox.com_0.localstorage-journal
[2013/07/18 01:33:10 | 000,003,072 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.fredericks.com_0.localstorage
[2013/07/18 01:33:10 | 000,003,608 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.fredericks.com_0.localstorage-journal
[2013/05/18 21:50:18 | 000,003,072 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.frys.com_0.localstorage
[2013/05/18 21:50:18 | 000,003,608 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.frys.com_0.localstorage-journal
[2013/06/05 00:55:15 | 000,003,072 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.homedepot.com_0.localstorage
[2013/06/05 00:55:15 | 000,003,608 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.homedepot.com_0.localstorage-journal
[2013/07/11 23:52:45 | 000,003,072 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.jambajuice.com_0.localstorage
[2013/07/11 23:52:45 | 000,000,512 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.jambajuice.com_0.localstorage-journal
[2013/07/17 02:39:43 | 000,005,120 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.latimes.com_0.localstorage
[2013/07/17 02:39:43 | 000,005,672 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.latimes.com_0.localstorage-journal
[2013/07/17 02:50:33 | 000,012,288 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.lingerienyc.com_0.localstorage
[2013/07/17 02:50:33 | 000,003,608 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.lingerienyc.com_0.localstorage-journal
[2013/07/26 17:22:11 | 000,037,888 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.mediafire.com_0.localstorage
[2013/07/26 17:22:11 | 000,016,384 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.mediafire.com_0.localstorage-journal
[2013/06/17 23:57:31 | 000,003,072 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.myfxbook.com_0.localstorage
[2013/06/17 23:57:31 | 000,003,608 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.myfxbook.com_0.localstorage-journal
[2013/05/27 13:45:28 | 000,003,072 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.reuters.com_0.localstorage
[2013/05/27 13:45:28 | 000,000,512 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.reuters.com_0.localstorage-journal
[2013/07/06 18:22:35 | 000,003,072 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.sanjeevkapoor.com_0.localstorage
[2013/07/06 18:22:35 | 000,003,608 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.sanjeevkapoor.com_0.localstorage-journal
[2013/05/26 05:24:48 | 000,003,072 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.scion.com_0.localstorage
[2013/05/26 05:24:48 | 000,003,608 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.scion.com_0.localstorage-journal
[2013/04/08 17:21:27 | 000,003,072 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.scribd.com_0.localstorage
[2013/04/08 17:21:27 | 000,003,608 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.scribd.com_0.localstorage-journal
[2013/05/11 21:57:33 | 000,003,072 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.suncadiaresort.com_0.localstorage
[2013/05/11 21:57:33 | 000,000,512 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.suncadiaresort.com_0.localstorage-journal
[2013/05/05 17:01:28 | 000,003,072 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.thegatewaypundit.com_0.localstorage
[2013/05/05 17:01:28 | 000,003,608 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.thegatewaypundit.com_0.localstorage-journal
[2013/07/18 23:39:59 | 000,003,072 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.tigerdirect.com_0.localstorage
[2013/07/18 23:39:59 | 000,003,608 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.tigerdirect.com_0.localstorage-journal
[2013/05/18 16:23:02 | 000,003,072 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.traderslaboratory.com_0.localstorage
[2013/05/18 16:23:02 | 000,003,608 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.traderslaboratory.com_0.localstorage-journal
[2013/07/17 01:50:34 | 000,003,072 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.tribdss.com_0.localstorage
[2013/07/17 01:50:34 | 000,003,608 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.tribdss.com_0.localstorage-journal
[2013/07/14 07:43:40 | 000,003,072 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.upi.com_0.localstorage
[2013/07/14 07:43:40 | 000,003,608 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.upi.com_0.localstorage-journal
[2013/07/16 00:31:26 | 000,003,072 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.victoriassecret.com_0.localstorage
[2013/07/16 00:31:26 | 000,003,608 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.victoriassecret.com_0.localstorage-journal
[2013/07/14 07:45:44 | 000,003,072 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.vitruvianleads.com_0.localstorage
[2013/07/14 07:45:44 | 000,003,608 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.vitruvianleads.com_0.localstorage-journal
[2013/04/08 19:12:54 | 000,003,072 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.vtc.com.vn_0.localstorage
[2013/04/08 19:12:54 | 000,003,608 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.vtc.com.vn_0.localstorage-journal
[2013/04/08 23:39:40 | 000,008,192 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.vtc.com_0.localstorage
[2013/04/08 23:39:40 | 000,006,704 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.vtc.com_0.localstorage-journal
[2013/04/01 19:34:33 | 000,004,096 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.yahoo.com_0.localstorage
[2013/04/01 19:34:33 | 000,003,608 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.yahoo.com_0.localstorage-journal
[2013/06/01 11:14:18 | 000,003,072 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.yellowpages.com_0.localstorage
[2013/06/01 11:14:18 | 000,003,608 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.yellowpages.com_0.localstorage-journal
[2013/07/29 02:17:30 | 000,024,576 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.youtube.com_0.localstorage
[2013/07/29 02:17:30 | 000,016,384 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.youtube.com_0.localstorage-journal
[2013/07/29 02:58:40 | 000,045,056 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Media Cache\data_0
[2013/07/29 02:58:40 | 000,270,336 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Media Cache\data_1
[2013/07/29 02:58:40 | 001,056,768 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Media Cache\data_2
[2013/07/11 00:56:04 | 004,202,496 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Media Cache\data_3
[2013/07/01 03:11:57 | 000,195,375 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Media Cache\f_000001
[2013/07/06 04:37:46 | 000,195,375 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Media Cache\f_000002
[2013/06/29 17:37:19 | 000,262,512 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Media Cache\index
[2013/06/01 21:39:11 | 000,000,151 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\64JU7U24\33D9983BC427DD69DF151E816FB0AB02C0B8D5CF.heu
[2013/06/01 21:38:58 | 000,317,992 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\64JU7U24\33D9983BC427DD69DF151E816FB0AB02C0B8D5CF.swz
[2013/06/02 00:02:37 | 000,000,150 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\64JU7U24\381814F6F5270FFBB27E244D6138BC023AF911D5.heu
[2013/06/01 21:38:55 | 000,157,002 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\64JU7U24\381814F6F5270FFBB27E244D6138BC023AF911D5.swz
[2013/06/02 00:02:40 | 000,000,150 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\64JU7U24\440AE73B017A477382DEFF7C0DBE4896FED21079.heu
[2013/06/01 21:38:56 | 000,054,532 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\64JU7U24\440AE73B017A477382DEFF7C0DBE4896FED21079.swz
[2013/06/02 00:02:39 | 000,000,150 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\64JU7U24\6344DCC80A9A6A3676DCEA0C92C8C45EFD2F3220.heu
[2013/06/01 21:38:56 | 000,319,300 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\64JU7U24\6344DCC80A9A6A3676DCEA0C92C8C45EFD2F3220.swz
[2013/06/01 21:39:11 | 000,000,151 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\64JU7U24\67BA9F962EEC4D8B413432AFAD5C88BB810426B9.heu
[2013/06/01 21:38:58 | 000,054,494 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\64JU7U24\67BA9F962EEC4D8B413432AFAD5C88BB810426B9.swz
[2013/06/02 00:02:40 | 000,000,150 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\64JU7U24\6DDB94AE3365798230849FA0F931AC132FE417D1.heu
[2013/06/01 21:38:57 | 000,131,925 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\64JU7U24\6DDB94AE3365798230849FA0F931AC132FE417D1.swz
[2013/06/01 21:39:09 | 000,000,151 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\64JU7U24\7421C71F94DB4F028E7528B2D278F3FE4DC21273.heu
[2013/06/01 21:38:56 | 000,156,308 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\64JU7U24\7421C71F94DB4F028E7528B2D278F3FE4DC21273.swz
[2013/06/02 00:02:38 | 000,000,150 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\64JU7U24\C3306B26751D6A80EB1FCB651912469AE18819AB.heu
[2013/06/01 21:38:55 | 000,098,077 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\64JU7U24\C3306B26751D6A80EB1FCB651912469AE18819AB.swz
[2013/06/01 21:38:58 | 000,000,008 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\64JU7U24\cacheSize.txt
[2013/06/01 21:39:10 | 000,000,151 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\64JU7U24\D796AC95BD6E16151B6D3C0019A52E648CED1FE1.heu
[2013/06/01 21:38:57 | 000,131,911 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\64JU7U24\D796AC95BD6E16151B6D3C0019A52E648CED1FE1.swz
[2013/06/01 21:39:08 | 000,000,151 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\64JU7U24\F74FCD943BAC79E6DADBF0307B55B0697C5907E4.heu
[2013/06/01 21:38:56 | 000,621,999 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\64JU7U24\F74FCD943BAC79E6DADBF0307B55B0697C5907E4.swz
[2013/06/02 00:02:38 | 000,000,150 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\64JU7U24\F78F74378B1552FF9A1725155D1B43BA54BE9094.heu
[2013/06/01 21:38:56 | 000,627,143 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\64JU7U24\F78F74378B1552FF9A1725155D1B43BA54BE9094.swz
[2013/06/02 00:02:39 | 000,000,119 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\174.139.64.10\255_sid_flash.sol
[2013/07/27 16:08:58 | 000,000,076 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\aa.online-metrix.net\fpc.swf\session.sol
[2013/07/18 01:36:08 | 000,000,443 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\art.aim4media.com\analytics.sol
[2013/07/14 07:40:55 | 000,000,224 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\assets.newsinc.com\com.conviva.livePass.sol
[2013/07/17 03:32:30 | 000,000,046 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\cdn.adnxs.com\avazu.sol
[2013/07/17 06:04:19 | 000,000,175 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\cdn.innovid.com\InnovidExtension.sol
[2013/07/18 01:34:37 | 000,000,085 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\cdn.optimatic.com\alfy_shell.sol
[2013/04/22 02:35:04 | 000,000,042 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\cdn.widgetserver.com\wbx_cookie.sol
[2013/07/17 05:31:01 | 000,000,495 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\cdn2.baronsmedia.com\analytics.sol
[2013/07/17 04:35:39 | 000,000,051 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\cdn4.telemetryverification.net\dbg.sol
[2013/07/18 01:36:00 | 000,000,055 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\cdn4.telemetryverification.net\mb.sol
[2013/07/20 21:12:58 | 000,003,301 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\cdncache3-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol
[2013/07/05 17:52:52 | 000,000,936 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\cdncache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol
[2013/05/13 19:27:11 | 000,001,866 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\dealvaut-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol
[2013/05/05 11:10:38 | 000,000,100 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\effectivemeasure.net\EM_APP.sol
[2013/07/28 10:41:19 | 000,000,061 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\entitlement.auth.adobe.com\authorization_access.sol
[2013/07/28 10:41:19 | 000,000,048 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\entitlement.auth.adobe.com\social_data.sol
[2013/04/08 17:32:38 | 000,000,040 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\i.d.com.com\av\video\cnettv\6\20130305\player.swf\cnettv.sol
[2013/04/27 10:08:55 | 000,000,063 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\ia.media-imdb.com\IMDBTEST.sol
[2013/04/07 08:09:00 | 000,000,069 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\images-na.ssl-images-amazon.com\mercury.sol
[2013/06/30 17:05:37 | 000,000,056 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\login.mql5.com\swf\permanent.swf\mql5-cookie.sol
[2013/07/17 04:35:39 | 000,000,192 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\macromedia.com\##327625F292F396E6\00000001.sol
[2013/04/07 08:09:00 | 000,000,194 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\macromedia.com\##45EC4C9792AE2268\00000001.sol
[2013/07/28 10:41:27 | 000,001,667 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\macromedia.com\support\flashplayer\sys\settings.sol
[2013/06/01 22:04:30 | 000,000,083 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\macromedia.com\support\flashplayer\sys\#174.139.64.10\settings.sol
[2013/07/27 16:08:58 | 000,000,090 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\macromedia.com\support\flashplayer\sys\#aa.online-metrix.net\settings.sol
[2013/07/17 04:35:34 | 000,000,087 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\macromedia.com\support\flashplayer\sys\#art.aim4media.com\settings.sol
[2013/07/14 07:40:51 | 000,000,088 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\macromedia.com\support\flashplayer\sys\#assets.newsinc.com\settings.sol
[2013/05/28 01:22:56 | 000,000,085 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\macromedia.com\support\flashplayer\sys\#cache.btrll.com\settings.sol
[2013/05/11 22:00:42 | 000,000,083 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\macromedia.com\support\flashplayer\sys\#cdn.adnxs.com\settings.sol
[2013/06/01 21:39:29 | 000,000,085 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\macromedia.com\support\flashplayer\sys\#cdn.innovid.com\settings.sol
[2013/07/14 07:40:58 | 000,000,087 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\macromedia.com\support\flashplayer\sys\#cdn.optimatic.com\settings.sol
[2013/04/22 02:35:04 | 000,000,090 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\macromedia.com\support\flashplayer\sys\#cdn.widgetserver.com\settings.sol
[2013/07/17 05:30:08 | 000,000,090 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\macromedia.com\support\flashplayer\sys\#cdn2.baronsmedia.com\settings.sol
[2013/05/28 01:21:57 | 000,000,094 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\macromedia.com\support\flashplayer\sys\#cdncache3-a.akamaihd.net\settings.sol
[2013/07/05 17:52:52 | 000,000,093 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net\settings.sol
[2013/04/13 14:56:00 | 000,000,095 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\macromedia.com\support\flashplayer\sys\#core.insightexpressai.com\settings.sol
[2013/04/01 19:27:26 | 000,000,093 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\macromedia.com\support\flashplayer\sys\#dealvaut-a.akamaihd.net\settings.sol
[2013/05/11 22:23:34 | 000,000,088 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\macromedia.com\support\flashplayer\sys\#ds.serving-sys.com\settings.sol
[2013/05/05 11:10:38 | 000,000,090 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\macromedia.com\support\flashplayer\sys\#effectivemeasure.net\settings.sol
[2013/07/28 10:41:19 | 000,000,096 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\macromedia.com\support\flashplayer\sys\#entitlement.auth.adobe.com\settings.sol
[2013/03/26 18:26:04 | 000,000,091 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\macromedia.com\support\flashplayer\sys\#ezs3.s3.amazonaws.com\settings.sol
[2013/04/08 17:32:22 | 000,000,081 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\macromedia.com\support\flashplayer\sys\#i.d.com.com\settings.sol
[2013/04/01 01:23:17 | 000,000,080 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\macromedia.com\support\flashplayer\sys\#i0.poll.fm\settings.sol
[2013/04/07 18:14:07 | 000,000,087 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\macromedia.com\support\flashplayer\sys\#ia.media-imdb.com\settings.sol
[2013/07/18 01:16:32 | 000,000,092 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\macromedia.com\support\flashplayer\sys\#mediabrix.hs.llnwd.net\settings.sol
[2013/04/27 19:05:27 | 000,000,089 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\macromedia.com\support\flashplayer\sys\#mpsnare.iesnare.com\settings.sol
[2013/07/28 10:41:24 | 000,000,087 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\macromedia.com\support\flashplayer\sys\#player.foxfdm.com\settings.sol
[2013/04/01 03:09:23 | 000,000,094 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\macromedia.com\support\flashplayer\sys\#player.longtailvideo.com\settings.sol
[2013/04/22 02:35:05 | 000,000,087 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\macromedia.com\support\flashplayer\sys\#pub.widgetbox.com\settings.sol
[2013/04/12 20:45:20 | 000,000,082 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\macromedia.com\support\flashplayer\sys\#s.nsdsvc.com\settings.sol
[2013/03/14 00:26:11 | 000,000,081 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\macromedia.com\support\flashplayer\sys\#s.ytimg.com\settings.sol
[2013/07/28 10:41:27 | 000,000,096 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\macromedia.com\support\flashplayer\sys\#secure-us.imrworldwide.com\settings.sol
[2013/04/27 19:05:46 | 000,000,079 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\macromedia.com\support\flashplayer\sys\#skype.com\settings.sol
[2013/06/29 15:03:07 | 000,000,086 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\macromedia.com\support\flashplayer\sys\#software.hiro.tv\settings.sol
[2013/04/02 19:13:27 | 000,000,095 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\macromedia.com\support\flashplayer\sys\#static.cdn-ec.viddler.com\settings.sol
[2013/05/15 02:18:12 | 000,000,094 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\macromedia.com\support\flashplayer\sys\#supremesa-a.akamaihd.net\settings.sol
[2013/06/29 15:04:47 | 000,000,088 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\macromedia.com\support\flashplayer\sys\#synd.travelplus.tv\settings.sol
[2013/04/29 23:53:02 | 000,000,078 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\macromedia.com\support\flashplayer\sys\#t.cxt.ms\settings.sol
[2013/06/29 15:03:06 | 000,000,092 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\macromedia.com\support\flashplayer\sys\#tag.audiencetv.hiro.tv\settings.sol
[2013/07/18 00:58:56 | 000,000,093 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\macromedia.com\support\flashplayer\sys\#tag.coffeetable.hiro.tv\settings.sol
[2013/07/17 03:57:07 | 000,000,096 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\macromedia.com\support\flashplayer\sys\#tag.dramatichealth.hiro.tv\settings.sol
[2013/07/17 05:33:24 | 000,000,088 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\macromedia.com\support\flashplayer\sys\#tag.fameup.hiro.tv\settings.sol
[2013/07/18 01:34:14 | 000,000,088 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\macromedia.com\support\flashplayer\sys\#tag.kineto.hiro.tv\settings.sol
[2013/07/17 06:17:07 | 000,000,094 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\macromedia.com\support\flashplayer\sys\#tag.mediashakers.hiro.tv\settings.sol
[2013/07/07 10:26:38 | 000,000,088 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\macromedia.com\support\flashplayer\sys\#tag.vidtur.hiro.tv\settings.sol
[2013/03/28 01:20:19 | 000,000,081 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\macromedia.com\support\flashplayer\sys\#twitter.com\settings.sol
[2013/05/27 16:06:12 | 000,000,085 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\macromedia.com\support\flashplayer\sys\#www.ajaxcdn.org\settings.sol
[2013/05/20 17:59:17 | 000,000,094 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\macromedia.com\support\flashplayer\sys\#www.onlinemeetingnow.com\settings.sol
[2013/05/25 09:06:01 | 000,000,083 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\macromedia.com\support\flashplayer\sys\#www.scion.com\settings.sol
[2013/07/17 04:07:41 | 000,000,093 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\macromedia.com\support\flashplayer\sys\#www.sportlifevideos.com\settings.sol
[2013/05/27 13:45:31 | 000,000,087 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\macromedia.com\support\flashplayer\sys\#www.superfish.com\settings.sol
[2013/04/08 19:13:25 | 000,000,081 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\macromedia.com\support\flashplayer\sys\#www.vtc.com\settings.sol
[2013/07/10 00:17:44 | 000,000,088 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\macromedia.com\support\flashplayer\sys\#www.yorbamedia.com\settings.sol
[2013/04/01 03:10:02 | 000,000,084 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\macromedia.com\support\flashplayer\sys\#www.zstream.eu\settings.sol
[2013/07/23 23:59:52 | 000,000,085 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\macromedia.com\support\flashplayer\sys\#wwwapps.ups.com\settings.sol
[2013/07/18 01:21:12 | 000,000,419 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\mediabrix.hs.llnwd.net\analytics.sol
[2013/07/18 01:20:58 | 000,000,641 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\mediabrix.hs.llnwd.net\o38\v1_4\swfstore.swf\DataStore_.sol
[2013/04/27 19:05:27 | 000,000,079 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\mpsnare.iesnare.com\stm.sol
[2013/07/28 10:41:26 | 000,000,223 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\player.foxfdm.com\com.conviva.livePass.sol
[2013/07/28 10:41:31 | 000,000,225 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\player.foxfdm.com\##AA66F256C99E65DB\00000001.sol
[2013/07/28 16:37:11 | 000,000,043 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\player.foxfdm.com\shared\1.4.522\pdk\swf\akamaiHD.swf\HDCore.sol
[2013/07/28 16:37:11 | 000,000,132 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\player.foxfdm.com\shared\1.4.522\pdk\swf\flvPlayer.swf\tpPdk.sol
[2013/04/22 02:35:05 | 000,000,042 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\pub.widgetbox.com\wbx_cookie.sol
[2013/04/12 20:45:20 | 000,000,206 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\s.nsdsvc.com\dropdowndeals.sol
[2013/06/11 00:47:43 | 000,000,275 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\s.ytimg.com\videostats.sol
[2013/07/18 19:29:32 | 000,000,071 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\software.hiro.tv\HIRO_REPO.sol
[2013/07/11 11:53:15 | 000,002,810 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\supremesa-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol
[2013/07/17 03:35:05 | 000,000,051 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\synd.travelplus.tv\dbg.sol
[2013/07/17 03:35:37 | 000,000,106 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\synd.travelplus.tv\hiro_companion_cookie.sol
[2013/07/17 03:35:36 | 000,014,312 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\synd.travelplus.tv\HIRO_NETWORK_CAPPING_COOKIE.sol
[2013/07/17 03:35:37 | 000,000,055 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\synd.travelplus.tv\mb.sol
[2013/06/29 15:05:07 | 000,000,166 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\synd.travelplus.tv\##1DEB81C7465786CC\00000001.sol
[2013/07/17 03:35:36 | 000,000,163 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\synd.travelplus.tv\US_FARM#\__STREMING_CLIENT_ID_COOKIE.sol
[2013/07/17 03:35:05 | 000,000,181 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\synd.travelplus.tv\US_FARM_AudienceTV.hiro.t#\v_STREMING_CLIENT_ID_COOKIE.sol
[2013/04/29 23:53:02 | 000,000,082 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\t.cxt.ms\lso.swf\u.sol
[2013/06/29 15:04:16 | 000,000,341 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\tag.audiencetv.hiro.tv\hiro_companion_cookie.sol
[2013/06/29 15:04:18 | 000,001,488 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\tag.audiencetv.hiro.tv\HIRO_NETWORK_CAPPING_COOKIE.sol
[2013/06/29 15:03:45 | 000,000,170 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\tag.audiencetv.hiro.tv\##441A80D3F6243E45\00000001.sol
[2013/06/29 15:03:43 | 000,000,110 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\tag.audiencetv.hiro.tv\US_FARM#\__STREMING_CLIENT_ID_COOKIE.sol
[2013/06/29 15:04:18 | 000,000,182 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\tag.audiencetv.hiro.tv\US_FARM_AudienceTV.hiro.t#\v_STREMING_CLIENT_ID_COOKIE.sol
[2013/07/18 01:20:31 | 000,000,051 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\tag.coffeetable.hiro.tv\dbg.sol
[2013/07/18 01:32:36 | 000,000,106 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\tag.coffeetable.hiro.tv\hiro_companion_cookie.sol
[2013/07/18 01:32:49 | 000,010,536 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\tag.coffeetable.hiro.tv\HIRO_NETWORK_CAPPING_COOKIE.sol
[2013/07/18 01:21:05 | 000,000,055 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\tag.coffeetable.hiro.tv\mb.sol
[2013/07/18 01:32:32 | 000,000,273 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\tag.coffeetable.hiro.tv\##4562FB3747255F2C\00000001.sol
[2013/07/18 01:02:38 | 000,000,171 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\tag.coffeetable.hiro.tv\##7132C5890FD85915\00000001.sol
[2013/07/18 01:32:39 | 000,000,110 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\tag.coffeetable.hiro.tv\US_FARM#\__STREMING_CLIENT_ID_COOKIE.sol
[2013/07/18 01:21:22 | 000,000,106 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\tag.dramatichealth.hiro.tv\hiro_companion_cookie.sol
[2013/07/18 01:21:23 | 000,001,501 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\tag.dramatichealth.hiro.tv\HIRO_NETWORK_CAPPING_COOKIE.sol
[2013/07/18 01:21:23 | 000,000,282 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\tag.dramatichealth.hiro.tv\##129C93A351080F04\00000001.sol
[2013/07/17 03:57:32 | 000,000,174 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\tag.dramatichealth.hiro.tv\##96D4DF22390AE027\00000001.sol
[2013/07/17 04:16:25 | 000,000,164 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\tag.dramatichealth.hiro.tv\US_FARM#\__STREMING_CLIENT_ID_COOKIE.sol
[2013/07/17 05:33:43 | 000,000,106 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\tag.fameup.hiro.tv\hiro_companion_cookie.sol
[2013/07/17 05:33:44 | 000,000,538 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\tag.fameup.hiro.tv\HIRO_NETWORK_CAPPING_COOKIE.sol
[2013/07/17 05:33:44 | 000,000,124 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\tag.fameup.hiro.tv\US_FARM_fameup.hiro.t#\v_STREMING_CLIENT_ID_COOKIE.sol
[2013/07/18 01:34:34 | 000,001,009 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\tag.kineto.hiro.tv\HIRO_NETWORK_CAPPING_COOKIE.sol
[2013/07/18 01:34:33 | 000,000,124 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\tag.kineto.hiro.tv\US_FARM_kineto.hiro.t#\v_STREMING_CLIENT_ID_COOKIE.sol
[2013/07/17 06:19:25 | 000,000,106 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\tag.mediashakers.hiro.tv\hiro_companion_cookie.sol
[2013/07/17 06:19:26 | 000,002,922 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\tag.mediashakers.hiro.tv\HIRO_NETWORK_CAPPING_COOKIE.sol
[2013/07/17 06:18:45 | 000,000,222 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\tag.mediashakers.hiro.tv\##209FB6427C8CBB57\00000001.sol
[2013/07/17 06:17:31 | 000,000,172 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\tag.mediashakers.hiro.tv\##4424DA16ED14BFAF\00000001.sol
[2013/07/17 06:19:26 | 000,000,110 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\tag.mediashakers.hiro.tv\US_FARM#\__STREMING_CLIENT_ID_COOKIE.sol
[2013/07/18 19:29:32 | 000,000,106 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\tag.vidtur.hiro.tv\hiro_companion_cookie.sol
[2013/07/18 19:29:36 | 000,001,006 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\tag.vidtur.hiro.tv\HIRO_NETWORK_CAPPING_COOKIE.sol
[2013/07/07 10:27:20 | 000,000,166 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\tag.vidtur.hiro.tv\##3F919F0A42C7D43A\00000001.sol
[2013/07/18 19:29:35 | 000,000,110 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\tag.vidtur.hiro.tv\US_FARM#\__STREMING_CLIENT_ID_COOKIE.sol
[2013/07/18 19:29:15 | 000,000,178 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\tag.vidtur.hiro.tv\US_FARM_vidtur.hiro.t#\v_STREMING_CLIENT_ID_COOKIE.sol
[2013/03/28 01:20:19 | 000,000,060 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\twitter.com\flash\twitter_badge.swf\OdeoPodcastPlayerColors.sol
[2013/07/20 09:21:28 | 000,000,415 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\www.ajaxcdn.org\swf.swf\dm_cookie.sol
[2013/06/30 17:05:37 | 000,000,056 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\www.mql4.com\swf\permanent.swf\mql4-cookie.sol
[2013/05/20 18:06:46 | 000,000,419 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\www.onlinemeetingnow.com\analytics.sol
[2013/05/20 17:59:17 | 000,000,159 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\www.onlinemeetingnow.com\##39F23C6F0BCCDD3E\00000001.sol
[2013/05/26 05:24:58 | 000,000,163 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\www.scion.com\scion_omni.sol
[2013/07/20 21:11:52 | 000,000,897 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\www.superfish.com\ws\cookie\storage_v4.swf\superfish.sol
[2013/04/01 03:12:00 | 000,000,054 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6TGCURNL\www.zstream.eu\com.jeroenwijering.sol
[2013/07/29 02:17:43 | 000,000,252 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000269.sst
[2013/07/29 03:45:07 | 000,062,612 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000271.sst
[2013/07/29 03:46:03 | 000,005,158 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000272.log
[2013/07/29 03:45:07 | 000,000,016 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Session Storage\CURRENT
[2013/03/09 06:03:24 | 000,000,000 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOCK
[2013/07/29 03:45:11 | 000,000,271 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG
[2013/07/29 02:17:51 | 000,000,777 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG.old
[2013/07/29 03:45:07 | 000,000,162 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Session Storage\MANIFEST-000270
[2013/07/29 03:54:02 | 001,011,712 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Sync Data\SyncData.sqlite3
[2013/07/29 03:54:02 | 000,016,384 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\Sync Data\SyncData.sqlite3-journal
[2013/03/09 06:02:24 | 000,000,000 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\Default\User StyleSheets\Custom.css
[2013/07/11 13:04:56 | 000,002,053 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\PepperFlash\11.8.800.97\manifest.json
[2013/07/11 13:04:56 | 013,599,624 | ---- | M] () -- C:\Users\rforex1_7\AppData\Local\Google\Chrome\User Data\PepperFlash\11.8.800.97\pepflashplayer.dll

< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >

< End of report >

[SweetTech]

Hi!

How are things running?

Malwarebytes' Anti-Malware

I see that you have Malwarebytes' Anti-Malware installed on your computer could you please do a scan using these settings:

• Open Malwarebytes' Anti-Malware
• Select the Update tab
• Click Check for Updates
• After the update have been completed, Select the Scanner tab.
• Select Perform quick scan, then click on Scan
• Leave the default options as it is and click on Start Scan
• When done, you will be prompted. Click OK, then click on Show Results
• Checked (ticked) all items and click on Remove Selected
• After it has removed the items, Notepad will open. Please post this log in your next reply. You can also find the log in the Logs tab. The bottom most log is the latest

Extra Note: If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts, click OK to either and let MBAM proceed with the disinfection process, if asked to restart the computer, please do so immediately.

[rforexdad]

Things are running faster. Here is the log of malware bytes.
=============================================================

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Database version: v2013.07.30.04

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 10.0.9200.16635
rforex1_7 :: RFOREX1_WIN7 [administrator]

7/30/2013 1:53:06 AM
mbam-log-2013-07-30 (01-53-06).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 242321
Time elapsed: 2 minute(s), 44 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 1
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{11111111-1111-1111-1111-110111991162} (PUP.Optional.Crossrider) -> Quarantined and deleted successfully.

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 2
C:\Users\rforex1_7\AppData\Local\Temp\DNS.exe (Adware.OneStep) -> Quarantined and deleted successfully.
C:\Users\rforex1_7\AppData\Local\Temp\is1971879534\Setup-D502DD2B71B5.exe (PUP.Optional.WebCake.A) -> Quarantined and deleted successfully.

(end)

[SweetTech]

Hi!

That log looks good.

Lets run an online scanner and one other tool.

ESET Online Scanner
I'd like us to scan your machine with ESET Online Scan

Note: It is recommended to disable on-board anti-virus program and anti-spyware programs while performing scans so there are no conflicts and it will speed up scan time.
Please don't go surfing while your resident protection is disabled!
Once the scan is finished remember to re-enable your anti-virus along with your anti-spyware programs.

• Hold down Control and click on the following link to open ESET OnlineScan in a new window.
  ESET OnlineScan
• Click the button.
• For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
  • Click on to download the ESET Smart Installer. Save it to your desktop.
  • Double click on the icon on your desktop.
• Check
• Click the button.
• Accept any security warnings from your browser.
• Check
• Make sure that the option "Remove found threats" is Unchecked
• When the Computer scan settings display shows, click the Advanced option, the place a check next to the following (if it is not already checked):
  
  • Enable Anti-Stealth technology
• Push the Start button.
• ESET will then download updates for itself, install itself, and begin
  scanning your computer. Please be patient as this can take some time.
• When the scan completes, push
• Push , and save the file to your desktop using a unique name, such as
  ESETScan. Include the contents of this report in your next reply.
• Push the button.
• Push

NEXT:



Security Check
Download Security Check by screen317 from here.

• Save it to your Desktop.
• Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
• A Notepad document should open automatically called checkup.txt; please post the contents of that document.

[rforexdad]

Hi SweetTech
The eset scanner is 50 percent complete approx and has processed 262496 files
I shall update this posting when the process is completed

[SweetTech]

Okay. Thanks for the update.