[KtC Angel of Peace]

13:29:36.0093 0x0bd8 TDSS rootkit removing tool 3.0.0.17 Nov 12 2013 19:54:52
13:29:39.0828 0x0bd8 ============================================================
13:29:39.0828 0x0bd8 Current date / time: 2013/11/17 13:29:39.0828
13:29:39.0828 0x0bd8 SystemInfo:
13:29:39.0828 0x0bd8
13:29:39.0828 0x0bd8 OS Version: 5.1.2600 ServicePack: 3.0
13:29:39.0828 0x0bd8 Product type: Workstation
13:29:39.0828 0x0bd8 ComputerName: YOUR-27E1513D96
13:29:39.0828 0x0bd8 UserName: Compaq_Owner
13:29:39.0828 0x0bd8 Windows directory: C:\WINDOWS
13:29:39.0828 0x0bd8 System windows directory: C:\WINDOWS
13:29:39.0828 0x0bd8 Processor architecture: Intel x86
13:29:39.0828 0x0bd8 Number of processors: 1
13:29:39.0828 0x0bd8 Page size: 0x1000
13:29:39.0828 0x0bd8 Boot type: Normal boot
13:29:39.0828 0x0bd8 ============================================================
13:29:48.0046 0x0bd8 System UUID: {31E7D91F-19AF-1DF5-C3D7-EC12BEAF3062}
13:29:53.0515 0x0bd8 Drive \Device\Harddisk0\DR0 - Size: 0x12A1F16000 (74.53 Gb), SectorSize: 0x200, Cylinders: 0x2861, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xF0, Type 'K0', Flags 0x00000054
13:29:53.0625 0x0bd8 ============================================================
13:29:53.0625 0x0bd8 \Device\Harddisk0\DR0:
13:29:53.0625 0x0bd8 MBR partitions:
13:29:53.0625 0x0bd8 \Device\Harddisk0\DR0\Partition1: MBR, Type 0xC, StartLBA 0x3F, BlocksNum 0xD05531
13:29:53.0625 0x0bd8 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0xD05570, BlocksNum 0x8805090
13:29:53.0625 0x0bd8 ============================================================
13:29:53.0703 0x0bd8 C: <-> \Device\Harddisk0\DR0\Partition2
13:29:53.0703 0x0bd8 D: <-> \Device\Harddisk0\DR0\Partition1
13:29:53.0703 0x0bd8 ============================================================
13:29:53.0703 0x0bd8 Initialize success
13:29:53.0703 0x0bd8 ============================================================
13:30:13.0171 0x052c ============================================================
13:30:13.0171 0x052c Scan started
13:30:13.0171 0x052c Mode: Manual; SigCheck; TDLFS;
13:30:13.0171 0x052c ============================================================
13:30:13.0171 0x052c KSN ping started
13:30:13.0234 0x052c KSN ping finished: false
13:30:13.0609 0x052c ================ Scan system memory ========================
13:30:13.0609 0x052c System memory - ok
13:30:13.0625 0x052c ================ Scan services =============================
13:30:13.0812 0x052c [ 01E81C84AD1D0ACC61CF3CFD06632210, 1140756BA2F28CA8DFCFF8FD223654E6A78BA1B770A169CC557ECE0E01381B17 ] !SASCORE C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
13:30:14.0171 0x052c !SASCORE - detected UnsignedFile.Multi.Generic ( 1 )
13:30:15.0046 0x052c !SASCORE ( UnsignedFile.Multi.Generic ) - warning
13:30:15.0046 0x052c Force sending object to P2P due to detect: C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
13:30:15.0062 0x052c Object send P2P result: false
13:30:15.0875 0x052c Abiosdsk - ok
13:30:15.0906 0x052c abp480n5 - ok
13:30:16.0187 0x052c [ 8FD99680A539792A30E97944FDAECF17, 594F8E0C3695400B0C09A797AF6BDFAC6F750ECD67D0EE803914C572B1DCC43C ] ACPI C:\WINDOWS\system32\DRIVERS\ACPI.sys
13:30:16.0515 0x052c ACPI - ok
13:30:16.0562 0x052c [ 9859C0F6936E723E4892D7141B1327D5, 5E8F6A2FC4DF2E5E92A1D66ECC2810E08B42B64E9CD0DF4AD3F78EA8558B90AF ] ACPIEC C:\WINDOWS\system32\drivers\ACPIEC.sys
13:30:16.0734 0x052c ACPIEC - ok
13:30:17.0109 0x052c [ EA856F4A46320389D1899B2CAA7BF40F, C6ED82398481093B5EDF0D89D165AD1534139274239401414E0D59DBBA175686 ] AdobeFlashPlayerUpdateSvc C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
13:30:17.0140 0x052c AdobeFlashPlayerUpdateSvc - ok
13:30:17.0156 0x052c adpu160m - ok
13:30:17.0328 0x052c [ 8BED39E3C35D6A489438B8141717A557, 1B5796E56B0927360CE0759641B1151828BC0A9E45620D2B2D880491F5CE33D0 ] aec C:\WINDOWS\system32\drivers\aec.sys
13:30:17.0531 0x052c aec - ok
13:30:17.0703 0x052c [ 1E44BC1E83D8FD2305F8D452DB109CF9, CF5EC07E0B589FA2A4701C6CFD69E893FC3ABF274AD57AE3C13FFE49063B02C8 ] AFD C:\WINDOWS\System32\drivers\afd.sys
13:30:17.0765 0x052c AFD - ok
13:30:17.0828 0x052c [ 6416F9B6B220F0A890525C38235AFAD7, C2A643E1BA75CD00C1C7F62475A7122AA95530A835AE62CF0FD9EADFA07B7EBD ] AgereModemAudio C:\Program Files\LSI SoftModem\agrsmsvc.exe
13:30:17.0921 0x052c AgereModemAudio - ok
13:30:19.0109 0x052c [ 7560F465F1CE69C53BF17559EE195548, 18D134C393FBD4E28464F090BE7B32CC6B39BC8B835F06DBE689DDE38847AD6F ] AgereSoftModem C:\WINDOWS\system32\DRIVERS\AGRSM.sys
13:30:20.0171 0x052c AgereSoftModem - ok
13:30:20.0187 0x052c Aha154x - ok
13:30:20.0203 0x052c aic78u2 - ok
13:30:20.0218 0x052c aic78xx - ok
13:30:20.0500 0x052c [ 8B9CCDED592A52E9C27E862F11A29C4D, FB9FEAA4ECBA509BE4DF85511E84633BE405E479E66C7B4B476F20EA2936838C ] AIRPLUS C:\WINDOWS\system32\DRIVERS\airplus.sys
13:30:20.0562 0x052c AIRPLUS - ok
13:30:22.0671 0x052c [ 781C5EC517C53F5214B61253B20C13C4, 1B87F20A518E8A62691A61794D11C1D1264F8669C5B796BC102B45B2E8A05E1D ] ALCXWDM C:\WINDOWS\system32\drivers\ALCXWDM.SYS
13:30:24.0687 0x052c ALCXWDM - ok
13:30:24.0750 0x052c [ A9A3DAA780CA6C9671A19D52456705B4, 67C959144B57AE0BBF1D82DBED197F32CDB06FECD883A80C441A0202FE83FAB4 ] Alerter C:\WINDOWS\system32\alrsvc.dll
13:30:24.0937 0x052c Alerter - ok
13:30:25.0015 0x052c [ 8C515081584A38AA007909CD02020B3D, A5E13CA10F702928E0DE84C74D0EA8ACCB117FD76FBABC55220C75C4FFD596DC ] ALG C:\WINDOWS\System32\alg.exe
13:30:25.0109 0x052c ALG - ok
13:30:25.0125 0x052c AliIde - ok
13:30:25.0203 0x052c [ 59301936898AE62245A6F09C0ABA9475, 4A094C3DCF7E62A467D591ECE1A72D7BCE358DC58045CA156D0B89C6555A7D17 ] AmdK8 C:\WINDOWS\system32\DRIVERS\AmdK8.sys
13:30:25.0234 0x052c AmdK8 - ok
13:30:25.0250 0x052c amsint - ok
13:30:25.0406 0x052c [ D8E18021F91AD79CA8491CB5A5DA22D4, F44B5855BE8EF2D5FFED41E6E586071B0A90A8271FF79DF25F11C99C0B5481FF ] Apple Mobile Device C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
13:30:25.0500 0x052c Apple Mobile Device - ok
13:30:25.0500 0x052c AppMgmt - ok
13:30:25.0609 0x052c [ B5B8A80875C1DEDEDA8B02765642C32F, AD0C71D73B1B8225351FBF4FFB43001A32B4DAE69504C59970CD2428BB33D4EF ] Arp1394 C:\WINDOWS\system32\DRIVERS\arp1394.sys
13:30:25.0812 0x052c Arp1394 - ok
13:30:25.0828 0x052c asc - ok
13:30:25.0843 0x052c asc3350p - ok
13:30:25.0843 0x052c asc3550 - ok
13:30:26.0093 0x052c [ 0E5E4957549056E2BF2C49F4F6B601AD, F7F19FDC906B719A3516D30A9B4A2262C8CC5B36B94E3D4195C345EC4610FF2B ] aspnet_state C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
13:30:26.0156 0x052c aspnet_state - ok
13:30:26.0203 0x052c [ B153AFFAC761E7F5FCFA822B9C4E97BC, 7E60F572A6B3C6219E3C86225AA37243AFFD74337DB7F108B04778042E5CC959 ] AsyncMac C:\WINDOWS\system32\DRIVERS\asyncmac.sys
13:30:26.0406 0x052c AsyncMac - ok
13:30:26.0531 0x052c [ 9F3A2F5AA6875C72BF062C712CFA2674, B4DF1D2C56A593C6B54DE57395E3B51D288F547842893B32B0F59228A0CF70B9 ] atapi C:\WINDOWS\system32\DRIVERS\atapi.sys
13:30:26.0750 0x052c atapi - ok
13:30:26.0750 0x052c Atdisk - ok
13:30:27.0140 0x052c [ D33427F6C2B7814100B5BD315E23C12C, 4E1C451D3FF953E5DC66CB6CC11C97B92CD6AF4259D80FCA34F3D1B317A16253 ] Ati HotKey Poller C:\WINDOWS\system32\Ati2evxx.exe
13:30:27.0843 0x052c Ati HotKey Poller - ok
13:30:29.0062 0x052c [ B33A281DCDF455B069816790275050A7, 240B6510DF6291BEEE8371E36C54439BE6D9F883B9B251D13C63094BD2A254B8 ] ati2mtag C:\WINDOWS\system32\DRIVERS\ati2mtag.sys
13:30:30.0046 0x052c ati2mtag - ok
13:30:30.0140 0x052c [ 9916C1225104BA14794209CFA8012159, 5D6F05F715C52A16D05CAE15C3DFE77A139A7F27F7AE710EC9A10F9EE05115A1 ] Atmarpc C:\WINDOWS\system32\DRIVERS\atmarpc.sys
13:30:30.0421 0x052c Atmarpc - ok
13:30:30.0500 0x052c [ DEF7A7882BEC100FE0B2CE2549188F9D, 462C95B63D0A1058291A2DC8CBFCB13D7D74CCD1CA43B613A7EB43D49E3276F8 ] AudioSrv C:\WINDOWS\System32\audiosrv.dll
13:30:30.0765 0x052c AudioSrv - ok
13:30:30.0812 0x052c [ D9F724AA26C010A217C97606B160ED68, 329B5118F2409731D06FDAE85B6ADD64A048292801BCB3546651CEB303111695 ] audstub C:\WINDOWS\system32\DRIVERS\audstub.sys
13:30:31.0031 0x052c audstub - ok
13:30:31.0093 0x052c [ 7270D070173B20AC9487EA16BB08B45F, 4097AFCF91F1B3DCEFF388009605145ED2B319695BCEB85FF62ADA07087191D9 ] bb-run C:\WINDOWS\system32\DRIVERS\bb-run.sys
13:30:31.0140 0x052c bb-run - ok
13:30:31.0203 0x052c [ DA1F27D85E0D1525F6621372E7B685E9, 5A81A46A3BDD19DAFC6C87D277267A5D44F3A1B5302F2CC1111D84B7BAD5610D ] Beep C:\WINDOWS\system32\drivers\Beep.sys
13:30:31.0437 0x052c Beep - ok
13:30:31.0843 0x052c [ 574738F61FCA2935F5265DC4E5691314, 3C7CCF064397186C3A3863DD2370AB6414A61B330097DCA4F299CA7BBAA3D1B4 ] BITS C:\WINDOWS\system32\qmgr.dll
13:30:32.0750 0x052c BITS - ok
13:30:33.0156 0x052c [ DB5BEA73EDAF19AC68B2C0FAD0F92B1A, 10F21999FF6B1D410EBF280F7F27DEACA5289739CF12F4293B614B8FC6C88DCC ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
13:30:33.0781 0x052c Bonjour Service - ok
13:30:33.0890 0x052c [ CFD4E51402DA9838B5A04AE680AF54A0, 5378F42B195B5832B00A05AD64E00473A45FFB86AC25C57241F26EA82B149FE1 ] Browser C:\WINDOWS\System32\browser.dll
13:30:34.0078 0x052c Browser - ok
13:30:34.0078 0x052c catchme - ok
13:30:34.0156 0x052c [ 90A673FC8E12A79AFBED2576F6A7AAF9, BDE7858A3457DB979FEDD8577FA6321BF72848E4A7BF9F173C78A6A10CBB3EBE ] cbidf2k C:\WINDOWS\system32\drivers\cbidf2k.sys
13:30:34.0406 0x052c cbidf2k - ok
13:30:34.0453 0x052c [ 0BE5AEF125BE881C4F854C554F2B025C, 1770DD70B3F115A0EF460907DEDC1E4B7241C08615A98F194D61A49C3E2BAA54 ] CCDECODE C:\WINDOWS\system32\DRIVERS\CCDECODE.sys
13:30:34.0656 0x052c CCDECODE - ok
13:30:34.0671 0x052c cd20xrnt - ok
13:30:34.0750 0x052c [ C1B486A7658353D33A10CC15211A873B, AA4DD9E7AAE5AAB1146B360B17001F975D2F29A1281CF7B13E7136480410F347 ] Cdaudio C:\WINDOWS\system32\drivers\Cdaudio.sys
13:30:34.0968 0x052c Cdaudio - ok
13:30:35.0062 0x052c [ C885B02847F5D2FD45A24E219ED93B32, B26B2F8E3A831E2B65EB0C5195B0645CD50E22615CE79C9B0B391CD563B121DB ] Cdfs C:\WINDOWS\system32\drivers\Cdfs.sys
13:30:35.0375 0x052c Cdfs - ok
13:30:35.0468 0x052c [ 1F4260CC5B42272D71F79E570A27A4FE, B51C2A3ED3C309953D0EA45869C8E464C10F2533DADE9E0286AF674979098D1D ] Cdrom C:\WINDOWS\system32\DRIVERS\cdrom.sys
13:30:35.0703 0x052c Cdrom - ok
13:30:35.0718 0x052c Changer - ok
13:30:35.0781 0x052c [ 1CFE720EB8D93A7158A4EBC3AB178BDE, 65D2A9D9A88F38D4AF323134C151BA0F4B3CD0F6A134AF86E7AC9D07319F1726 ] CiSvc C:\WINDOWS\system32\cisvc.exe
13:30:36.0000 0x052c CiSvc - ok
13:30:36.0078 0x052c [ 34CBE729F38138217F9C80212A2A0C82, A9FD7A758D12E0818A11BEEF1CE772FEFA8373E92EF6C0DA8628CD4572CC9A43 ] ClipSrv C:\WINDOWS\system32\clipsrv.exe
13:30:36.0406 0x052c ClipSrv - ok
13:30:36.0500 0x052c [ D87ACAED61E417BBA546CED5E7E36D9C, 14AC6034A5BC0FB2A1AFDAD42BEF4DE641556E54AD30D0C46765660A4BE55462 ] clr_optimization_v2.0.50727_32 c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
13:30:36.0578 0x052c clr_optimization_v2.0.50727_32 - ok
13:30:36.0593 0x052c CmdIde - ok
13:30:36.0609 0x052c COMSysApp - ok
13:30:36.0625 0x052c Cpqarray - ok
13:30:36.0703 0x052c [ 097A0A4899B759A4F032BD464963B4BE, 648EC619562FFD1005063D7622991F6A09A09BFC637B3B492347936E03C25DA9 ] cpuz132 C:\WINDOWS\system32\drivers\cpuz132_x32.sys
13:30:36.0734 0x052c cpuz132 - detected UnsignedFile.Multi.Generic ( 1 )
13:30:36.0734 0x052c cpuz132 ( UnsignedFile.Multi.Generic ) - warning
13:30:36.0843 0x052c [ 3D4E199942E29207970E04315D02AD3B, 0825960894CF9C86CC8775BDD2A262948A09CA495AA7FE9F210FAF49E7086383 ] CryptSvc C:\WINDOWS\System32\cryptsvc.dll
13:30:37.0093 0x052c CryptSvc - ok
13:30:37.0109 0x052c dac2w2k - ok
13:30:37.0125 0x052c dac960nt - ok
13:30:37.0640 0x052c [ 6B27A5C03DFB94B4245739065431322C, 6AEAC16AB4E0DFD25123AAF4D4181FEE1B919B7B2793117006CE8CF30E826CFD ] DcomLaunch C:\WINDOWS\system32\rpcss.dll
13:30:38.0390 0x052c DcomLaunch - ok
13:30:38.0500 0x052c [ 1EC27A51A2F9DF052BC2B4C8376C8FEA, 6B903263C4E5A26FE161EF829FD5C597485DFE1E9DBADD60FBEECE9F6605E79F ] DgiVecp C:\WINDOWS\system32\Drivers\DgiVecp.sys
13:30:38.0546 0x052c DgiVecp - detected UnsignedFile.Multi.Generic ( 1 )
13:30:38.0546 0x052c DgiVecp ( UnsignedFile.Multi.Generic ) - warning
13:30:38.0703 0x052c [ 5E38D7684A49CACFB752B046357E0589, F192AD4190BCFB6939A5CBC91648FE63168AF79A5E227A111DEAD6A92E42AB8D ] Dhcp C:\WINDOWS\System32\dhcpcsvc.dll
13:30:38.0875 0x052c Dhcp - ok
13:30:39.0015 0x052c [ 044452051F3E02E7963599FC8F4F3E25, 584BDDB074618BE76454CF90E74829CFF588B5B5FAEB793E2F7AAD26352DD689 ] Disk C:\WINDOWS\system32\DRIVERS\disk.sys
13:30:39.0203 0x052c Disk - ok
13:30:39.0203 0x052c dmadmin - ok
13:30:39.0953 0x052c [ D992FE1274BDE0F84AD826ACAE022A41, C82BD6561A14F2932A761F5883A787B99031250EE5E9B7B5714AA045545C9B99 ] dmboot C:\WINDOWS\system32\drivers\dmboot.sys
13:30:40.0625 0x052c dmboot - ok
13:30:40.0781 0x052c [ 7C824CF7BBDE77D95C08005717A95F6F, A73CB323B7A6410C3D3F258BF204E716ADF8C84C9E4F6562C57AB73DAED8CCDE ] dmio C:\WINDOWS\system32\drivers\dmio.sys
13:30:40.0984 0x052c dmio - ok
13:30:41.0046 0x052c [ E9317282A63CA4D188C0DF5E09C6AC5F, D41E002F555FE9015EF620975255F58BB79198CA1FF0E09EC950CB450FF77CF7 ] dmload C:\WINDOWS\system32\drivers\dmload.sys
13:30:41.0218 0x052c dmload - ok
13:30:41.0281 0x052c [ 57EDEC2E5F59F0335E92F35184BC8631, 61F6F0DC2D1A6C61D5EF0D5CC4BE0FFC217F1E61FDA3EA9F704709293656600F ] dmserver C:\WINDOWS\System32\dmserver.dll
13:30:41.0546 0x052c dmserver - ok
13:30:41.0640 0x052c [ 8A208DFCF89792A484E76C40E5F50B45, 4E40E2EB38C6254E7CAA488200E89EE7DEBBBA773890BC6A84313CC68178D54F ] DMusic C:\WINDOWS\system32\drivers\DMusic.sys
13:30:41.0828 0x052c DMusic - ok
13:30:41.0921 0x052c [ 5F7E24FA9EAB896051FFB87F840730D2, 356EEFDCD54DECAD0170B34B993E4BF80DD039E2B2922D7A8D09B84031E9FC7A ] Dnscache C:\WINDOWS\System32\dnsrslvr.dll
13:30:42.0015 0x052c Dnscache - ok
13:30:42.0171 0x052c [ 0F0F6E687E5E15579EF4DA8DD6945814, 5C32D88119EB1465B2D719BEE2E05888D1A73454B5E33F2D4928DA710F8BFBA3 ] Dot3svc C:\WINDOWS\System32\dot3svc.dll
13:30:42.0546 0x052c Dot3svc - ok
13:30:42.0562 0x052c dpti2o - ok
13:30:42.0625 0x052c [ 8F5FCFF8E8848AFAC920905FBD9D33C8, C8C6FB97AB0871C8C88A2201525A5CF10D5131CB6980D32692ED7A8F58399AD5 ] drmkaud C:\WINDOWS\system32\drivers\drmkaud.sys
13:30:42.0765 0x052c drmkaud - ok
13:30:42.0843 0x052c [ 2187855A7703ADEF0CEF9EE4285182CC, 8233CC11F637866C0074043835A785EA2B616739B6B1181B143A253CF2508CFD ] EapHost C:\WINDOWS\System32\eapsvc.dll
13:30:43.0078 0x052c EapHost - ok
13:30:43.0156 0x052c [ BC93B4A066477954555966D77FEC9ECB, 27F5B780175EF46DA102EE33F7F33559C8B40C077EEA4405D579D9507F4B1C23 ] ERSvc C:\WINDOWS\System32\ersvc.dll
13:30:43.0359 0x052c ERSvc - ok
13:30:43.0515 0x052c [ 65DF52F5B8B6E9BBD183505225C37315, 59C606977DB40A3443DFF0BE2A4C761824881B22C9FDB3D23F6486DB580E92A4 ] Eventlog C:\WINDOWS\system32\services.exe
13:30:43.0562 0x052c Eventlog - ok
13:30:43.0828 0x052c [ D4991D98F2DB73C60D042F1AEF79EFAE, 58AF949EAEBF4FF3E3314DFB66CE4198BF65F0836B68CD27A6ED319742CCCCD2 ] EventSystem C:\WINDOWS\system32\es.dll
13:30:44.0203 0x052c EventSystem - ok
13:30:44.0359 0x052c [ 38D332A6D56AF32635675F132548343E, E6909DB836AF679B4F4D62C7396D6C82769CC7ABB8C919C2AABFE934FCE268F6 ] Fastfat C:\WINDOWS\system32\drivers\Fastfat.sys
13:30:44.0593 0x052c Fastfat - ok
13:30:44.0765 0x052c [ 99BC0B50F511924348BE19C7C7313BBF, A1006C687BD352F700B140DC741515A0CDD9E1352C0FBD1EE410D404E344444B ] FastUserSwitchingCompatibility C:\WINDOWS\System32\shsvcs.dll
13:30:44.0984 0x052c FastUserSwitchingCompatibility - ok
13:30:45.0281 0x052c [ E97D6A8684466DF94FF3BC24FB787A07, 89E5A6889E3C5AB9AD3E80FFC16DD608278F3ADC282048B40B60196336A5CBEB ] Fax C:\WINDOWS\system32\fxssvc.exe
13:30:45.0734 0x052c Fax - ok
13:30:45.0781 0x052c [ 92CDD60B6730B9F50F6A1A0C1F8CDC81, 8307A532AB4D05CBBCE206DC2759497708BF5AAA880BD00F0E4F281D8578A1F5 ] Fdc C:\WINDOWS\system32\drivers\Fdc.sys
13:30:46.0000 0x052c Fdc - ok
13:30:46.0078 0x052c [ D45926117EB9FA946A6AF572FBE1CAA3, 4C94EF009D778BE0BDF8F812F026B96F91F641BE30AA2531427A5E63DBD280DA ] Fips C:\WINDOWS\system32\drivers\Fips.sys
13:30:46.0312 0x052c Fips - ok
13:30:46.0359 0x052c [ 9D27E7B80BFCDF1CDD9B555862D5E7F0, 69C271AD5BCEBFD8AE5A769BDD7EC51256DA3A8ADAD5D12E5C0D13F4E82D8805 ] Flpydisk C:\WINDOWS\system32\drivers\Flpydisk.sys
13:30:46.0671 0x052c Flpydisk - ok
13:30:46.0843 0x052c [ B2CF4B0786F8212CB92ED2B50C6DB6B0, 280F5CF8A90F7BEDE73ADD0DD0F8952088133A7CA9A3D3B7041957E33B36845D ] FltMgr C:\WINDOWS\system32\drivers\fltmgr.sys
13:30:47.0031 0x052c FltMgr - ok
13:30:47.0171 0x052c [ 8BA7C024070F2B7FDD98ED8A4BA41789, 47585006F86B2C6016EC54250A416794792D1E4024FF229C120BC25B684AF66A ] FontCache3.0.0.0 c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
13:30:47.0234 0x052c FontCache3.0.0.0 - ok
13:30:47.0296 0x052c [ 3E1E2BD4F39B0E2B7DC4F4D2BCC2779A, EC635E071201A766845D48973772CBE0958942B4162F3F5F70660D114CC877E0 ] Fs_Rec C:\WINDOWS\system32\drivers\Fs_Rec.sys
13:30:47.0546 0x052c Fs_Rec - ok
13:30:47.0687 0x052c [ 6AC26732762483366C3969C9E4D2259D, FF2C9A23CC17F380093F0BEA955B1925794271C2FEA16B9B7639668E6999BAE3 ] Ftdisk C:\WINDOWS\system32\DRIVERS\ftdisk.sys
13:30:47.0906 0x052c Ftdisk - ok
13:30:48.0109 0x052c [ 92E8443C7BF5C0137671CDE080655DFC, 759032856687B1684073106D187608225A211C0058A43A17B42B699745F06546 ] ftsata2 C:\WINDOWS\system32\DRIVERS\ftsata2.sys
13:30:48.0156 0x052c ftsata2 - ok
13:30:48.0234 0x052c [ 8182FF89C65E4D38B2DE4BB0FB18564E, 2ACFA64D48BF7D25641EC5819C8722144284B8A8E071BF297C1881B07EEAFE88 ] GEARAspiWDM C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys
13:30:48.0250 0x052c GEARAspiWDM - ok
13:30:48.0343 0x052c [ 0A02C63C8B144BD8C86B103DEE7C86A2, 7A3235DD3E1995DD72B212FAEB3ECA2A974434DE9BF6D269EA11BA65A80E7E50 ] Gpc C:\WINDOWS\system32\DRIVERS\msgpc.sys
13:30:48.0562 0x052c Gpc - ok
13:30:48.0765 0x052c [ 506708142BC63DABA64F2D3AD1DCD5BF, 9C36A08D9E7932FF4DA7B5F24E6B42C92F28685B8ABE964C870E8D7670FD531A ] gupdate C:\Program Files\Google\Update\GoogleUpdate.exe
13:30:48.0796 0x052c gupdate - ok
13:30:48.0906 0x052c [ 506708142BC63DABA64F2D3AD1DCD5BF, 9C36A08D9E7932FF4DA7B5F24E6B42C92F28685B8ABE964C870E8D7670FD531A ] gupdatem C:\Program Files\Google\Update\GoogleUpdate.exe
13:30:48.0937 0x052c gupdatem - ok
13:30:49.0218 0x052c [ 5D4BC124FAAE6730AC002CDB67BF1A1C, 00294F4DC7D17F6DD2A22B9C3299BED40146BA45C972367154D20DB502472551 ] gusvc C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
13:30:49.0421 0x052c gusvc - ok
13:30:49.0578 0x052c [ 4FCCA060DFE0C51A09DD5C3843888BCD, D82417706B517F2610DDF7C86BE03A72EFA9A2A389DF5C8F8ADEAB8144E2C80A ] helpsvc C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
13:30:49.0781 0x052c helpsvc - ok
13:30:49.0796 0x052c HidServ - ok
13:30:49.0843 0x052c [ CCF82C5EC8A7326C3066DE870C06DAF1, 93395FA4C26B2E82DC8B7025ED3BCF583885E5D8C5F60CD6EEAA6335D6A126EC ] HidUsb C:\WINDOWS\system32\DRIVERS\hidusb.sys
13:30:50.0015 0x052c HidUsb - ok
13:30:50.0109 0x052c [ 8878BD685E490239777BFE51320B88E9, C5C3ECF6B049B6736E35B39518A8F830B45C45A88FFE8E3A6B7922AD946597E2 ] hkmsvc C:\WINDOWS\System32\kmsvc.dll
13:30:50.0343 0x052c hkmsvc - ok
13:30:50.0343 0x052c hpn - ok
13:30:50.0640 0x052c [ F80A415EF82CD06FFAF0D971528EAD38, 524D9E9201572929522F6805011783711B7C0F76308B924C89CF75F4B7A1FDF3 ] HTTP C:\WINDOWS\system32\Drivers\HTTP.sys
13:30:50.0718 0x052c HTTP - ok
13:30:50.0781 0x052c [ 6100A808600F44D999CEBDEF8841C7A3, 61A75118C327812C60622010985A2E80E79B6FD9030A5732390EE5426E4AF6C9 ] HTTPFilter C:\WINDOWS\System32\w3ssl.dll
13:30:50.0984 0x052c HTTPFilter - ok
13:30:51.0000 0x052c i2omgmt - ok
13:30:51.0015 0x052c i2omp - ok
13:30:51.0093 0x052c [ 4A0B06AA8943C1E332520F7440C0AA30, DB2452390CCFE67E0C5FEB4FD42CA24ABE2DDD40D0B22DD5F5B8F70416863918 ] i8042prt C:\WINDOWS\system32\DRIVERS\i8042prt.sys
13:30:51.0296 0x052c i8042prt - ok
13:30:52.0093 0x052c [ 79AE2A97C120F282845D854D0F070EA9, 5569785B034777D8A227377E0DC735DEEA6277A31FD60CA6E62AF01F49B3B8FF ] iaStor C:\WINDOWS\system32\DRIVERS\iaStor.sys
13:30:52.0875 0x052c iaStor - ok
13:30:53.0765 0x052c [ C01AC32DC5C03076CFB852CB5DA5229C, A4D7749220B5BC965D96A267F1E02FE8284A230BA249109207BD4B9EA8DFAC96 ] idsvc c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
13:30:55.0453 0x052c idsvc - ok
13:30:55.0531 0x052c [ 083A052659F5310DD8B6A6CB05EDCF8E, 48D39B03FFB6FAA1529B774443BA12618AE3982D9F65A7B9D18F2269F78B31F4 ] Imapi C:\WINDOWS\system32\DRIVERS\imapi.sys
13:30:55.0750 0x052c Imapi - ok
13:30:55.0921 0x052c [ 30DEAF54A9755BB8546168CFE8A6B5E1, 3936228CD3125C763ABFCB93E86E4B43838202BCC0913A28E84AC0263B43EE0D ] ImapiService C:\WINDOWS\system32\imapi.exe
13:30:56.0187 0x052c ImapiService - ok
13:30:56.0203 0x052c ini910u - ok
13:30:56.0265 0x052c [ B5466A9250342A7AA0CD1FBA13420678, 87E735C4E8924A883AB692D387A83BCBFAE6E165688336AE7AB488F7CA8D339E ] IntelIde C:\WINDOWS\system32\DRIVERS\intelide.sys
13:30:56.0437 0x052c IntelIde - ok
13:30:56.0515 0x052c [ 8C953733D8F36EB2133F5BB58808B66B, 555868F246D73652E998B0B1296476E42FCEDED30D646CC000F31ECE4EBC25E6 ] intelppm C:\WINDOWS\system32\DRIVERS\intelppm.sys
13:30:56.0718 0x052c intelppm - ok
13:30:56.0812 0x052c [ 3DC635B66DD7412E1C9C3A77B8D78F25, D3894065DA2D08744863ECC5EE9027A0E39711A6A56AAB599F1CAF4BB996F42A ] IntuitUpdateService C:\Program Files\Common Files\Intuit\Update Service\IntuitUpdateService.exe
13:30:56.0843 0x052c IntuitUpdateService - ok
13:30:56.0890 0x052c [ 3BB22519A194418D5FEC05D800A19AD0, F6662F440950596DC1382DD1DB5D7891CCEA30A6062BEA942C18445B5F0D8B16 ] Ip6Fw C:\WINDOWS\system32\drivers\ip6fw.sys
13:30:57.0093 0x052c Ip6Fw - ok
13:30:57.0156 0x052c [ 731F22BA402EE4B62748ADAF6363C182, 5C3BEBD008A5BE4DC2F92076FF41A10DDC01E10EC7E6552213CFA11970811848 ] IpFilterDriver C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
13:30:57.0328 0x052c IpFilterDriver - ok
13:30:57.0375 0x052c [ B87AB476DCF76E72010632B5550955F5, E6E74D3A86A7917A8BAED44F8E97CCD2EB171E4E4B27E9907F60D1523FAF319A ] IpInIp C:\WINDOWS\system32\DRIVERS\ipinip.sys
13:30:57.0593 0x052c IpInIp - ok
13:30:57.0765 0x052c [ CC748EA12C6EFFDE940EE98098BF96BB, AF523E21C25D9A1715EFEA573E4F52AF5D4FC9F28A2D613F5DB629C186C439E0 ] IpNat C:\WINDOWS\system32\DRIVERS\ipnat.sys
13:30:57.0968 0x052c IpNat - ok
13:30:58.0750 0x052c [ 33642C17C232AA272C68E446A2619899, F8DCFD81FBEF12A9F34D14314EA51BE35DF160E52F84754216DEBF23D8EF0B32 ] iPod Service C:\Program Files\iPod\bin\iPodService.exe
13:31:00.0125 0x052c iPod Service - ok
13:31:00.0234 0x052c [ 23C74D75E36E7158768DD63D92789A91, 394D296F38E7D8EFD91A6EEC301D9CE6AF910E35EB9819F1A9E3363863AEDFDC ] IPSec C:\WINDOWS\system32\DRIVERS\ipsec.sys
13:31:00.0437 0x052c IPSec - ok
13:31:00.0468 0x052c [ C93C9FF7B04D772627A3646D89F7BF89, 805FA48E7A46D4F10240BF880A2468F53DEA36E83004399228AB70DB7D20544A ] IRENUM C:\WINDOWS\system32\DRIVERS\irenum.sys
13:31:00.0578 0x052c IRENUM - ok
13:31:00.0703 0x052c [ 05A299EC56E52649B1CF2FC52D20F2D7, 2654619DB3E6D6C385B63AB02F87D4241C4F0250CC31383D1B3586917166C2DC ] isapnp C:\WINDOWS\system32\DRIVERS\isapnp.sys
13:31:00.0843 0x052c isapnp - ok
13:31:00.0906 0x052c [ 463C1EC80CD17420A542B7F36A36F128, E3B11BA26AFEAFB50B0FC168EA07F6049DA6B88BCDDEEE20310602D7FC27A3A7 ] Kbdclass C:\WINDOWS\system32\DRIVERS\kbdclass.sys
13:31:01.0125 0x052c Kbdclass - ok
13:31:01.0312 0x052c [ 692BCF44383D056AED41B045A323D378, 1A99DEE83FFAF64E73067FC049C0A4CE07D94E4AE31EFA17B38CEFA9E41D67DC ] kmixer C:\WINDOWS\system32\drivers\kmixer.sys
13:31:01.0484 0x052c kmixer - ok
13:31:01.0625 0x052c [ B467646C54CC746128904E1654C750C1, 3BD71BE3663EA23463D236D8A2A2E42DFA10C502BDB4B6E131FAF0FBA748219E ] KSecDD C:\WINDOWS\system32\drivers\KSecDD.sys
13:31:01.0796 0x052c KSecDD - ok
13:31:01.0921 0x052c [ 3A7C3CBE5D96B8AE96CE81F0B22FB527, 0044F03132596A494448CCE5F3D6ECC12617BB4CF6BAE348F79D4DC40ACD6EE0 ] lanmanserver C:\WINDOWS\System32\srvsvc.dll
13:31:02.0062 0x052c lanmanserver - ok
13:31:02.0234 0x052c [ A8888A5327621856C0CEC4E385F69309, B08B63300D824E35E31EEEA2C4C086DFA2C2A964CEDAE512E74D3D88AADAA2C1 ] lanmanworkstation C:\WINDOWS\System32\wkssvc.dll
13:31:02.0406 0x052c lanmanworkstation - ok
13:31:02.0421 0x052c lbrtfdc - ok
13:31:02.0484 0x052c [ A7DB739AE99A796D91580147E919CC59, EDF4E039BA277B0E6D66FEB0B28096E67D682C09DFC18ECECF062D9DCFB75ACF ] LmHosts C:\WINDOWS\System32\lmhsvc.dll
13:31:02.0750 0x052c LmHosts - ok
13:31:03.0125 0x052c [ 11F714F85530A2BD134074DC30E99FCA, BDB5FD3B2DF4ADD19B31965B3E789768B59E872B3EA85912B1FFB32B2AF9D5D8 ] MDM C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
13:31:03.0453 0x052c MDM - ok
13:31:03.0515 0x052c [ 986B1FF5814366D71E0AC5755C88F2D3, E6AF051174531C24B38E73987755D366ABEC595476C6D17793E8DCCC73F55340 ] Messenger C:\WINDOWS\System32\msgsvc.dll
13:31:03.0796 0x052c Messenger - ok
13:31:03.0859 0x052c [ 4AE068242760A1FB6E1A44BF4E16AFA6, 1FB771162B96AAF787AC24867B818DF8511F0780BB094FA9A38C11D8DBFE68BC ] mnmdd C:\WINDOWS\system32\drivers\mnmdd.sys
13:31:04.0031 0x052c mnmdd - ok
13:31:04.0093 0x052c [ D18F1F0C101D06A1C1ADF26EED16FCDD, BA0837C7780BD8262E143E2935AFA63BE59C3C39EF56CB8608EED0F50AF070D4 ] mnmsrvc C:\WINDOWS\system32\mnmsrvc.exe
13:31:04.0343 0x052c mnmsrvc - ok
13:31:04.0421 0x052c [ DFCBAD3CEC1C5F964962AE10E0BCC8E1, B342CC9EC3729AB1AB4B5E2E99F890C1E0CA649162DE91F6768AB857B719E97B ] Modem C:\WINDOWS\system32\drivers\Modem.sys
13:31:04.0609 0x052c Modem - ok
13:31:04.0687 0x052c [ 35C9E97194C8CFB8430125F8DBC34D04, 0C0FCE6B0A23FB0ECB92E1663E1C72D2DD5B177D82E04782957690B69530DB39 ] Mouclass C:\WINDOWS\system32\DRIVERS\mouclass.sys
13:31:04.0875 0x052c Mouclass - ok
13:31:04.0921 0x052c [ B1C303E17FB9D46E87A98E4BA6769685, 161A45488522055D0F0474ABEDA04DDD0B5DAC2411AF9154B15190BBD66E7153 ] mouhid C:\WINDOWS\system32\DRIVERS\mouhid.sys
13:31:05.0109 0x052c mouhid - ok
13:31:05.0171 0x052c [ A80B9A0BAD1B73637DBCBBA7DF72D3FD, 2A5E15ED2C24C6C65EF2F7E1FD93374774076C9D8D451E4422561F4D269C012F ] MountMgr C:\WINDOWS\system32\drivers\MountMgr.sys
13:31:05.0328 0x052c MountMgr - ok
13:31:05.0515 0x052c [ 5D494509432897338AFC19DB78A76DCB, 873F61F45D4A96096E17F9E266B1A20CCD65E4678DDB21DDE3DB98E831E524D3 ] MozillaMaintenance C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
13:31:05.0640 0x052c MozillaMaintenance - ok
13:31:05.0875 0x052c [ 24406D75B40F0F6B3C1AC7031D734565, B58AA80E9C3738CFD826D7C8129D5467166A4397CCFEEEF7F14542DEBB659A51 ] MpFilter C:\WINDOWS\system32\DRIVERS\MpFilter.sys
13:31:05.0921 0x052c MpFilter - ok
13:31:06.0156 0x052c [ 06D4F934E09C359B0EFBFB3146F1D910, 484F57CD6F8757137F3B3491B8AC8ECF6C6385A666CD1671833DDD9E962AAB4A ] MpKslc2b821c6 c:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{331A02AC-89A5-420B-8BFE-492ED3BA830C}\MpKslc2b821c6.sys
13:31:06.0187 0x052c MpKslc2b821c6 - ok
13:31:06.0203 0x052c mraid35x - ok
13:31:06.0390 0x052c [ 11D42BB6206F33FBB3BA0288D3EF81BD, 76ABCFB62C5AC549F58C231F72A99882CDEB74928104B77FE52554765C2B1A22 ] MRxDAV C:\WINDOWS\system32\DRIVERS\mrxdav.sys
13:31:06.0546 0x052c MRxDAV - ok
13:31:07.0000 0x052c [ 7D304A5EB4344EBEEAB53A2FE3FFB9F0, DB9B186F7076D7B94F45041AF7B77C1AD2CAB504D683B459C6CB1C22840ED170 ] MRxSmb C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
13:31:07.0296 0x052c MRxSmb - ok
13:31:07.0625 0x052c [ 641199534871783DD74138FE0BCFDAE7, 63F6BD6E5CF383D95917C544CF8EDB4F7DA961C7CA70FA7F960EA9C9FF48100A ] MSCamSvc C:\Program Files\Microsoft LifeCam\MSCamS32.exe
13:31:07.0906 0x052c MSCamSvc - ok
13:31:07.0968 0x052c [ A137F1470499A205ABBB9AAFB3B6F2B1, FB4951727543030D9E6ED74149C3FAACE2CA9DA8C1B5F616301B30B858C724E8 ] MSDTC C:\WINDOWS\system32\msdtc.exe
13:31:08.0140 0x052c MSDTC - ok
13:31:08.0203 0x052c [ C941EA2454BA8350021D774DAF0F1027, C940E978C7B66A713A0FDAB54B5F995DF59D089AFCD96221DD3222948CD49BBD ] Msfs C:\WINDOWS\system32\drivers\Msfs.sys
13:31:08.0390 0x052c Msfs - ok
13:31:08.0390 0x052c MSIServer - ok
13:31:08.0437 0x052c [ D1575E71568F4D9E14CA56B7B0453BF1, 4ABE0E24786C0D39FA2B885447E56204CA6942FB175E534DCE675D7BCF0B176A ] MSKSSRV C:\WINDOWS\system32\drivers\MSKSSRV.sys
13:31:08.0593 0x052c MSKSSRV - ok
13:31:08.0703 0x052c [ 0A7F86657755ADA92C57E597BF5151F7, E226DFF12C4930DF1D0F1D2E7CE7BFFDF62F6DC402200EEFE196D14172A59B63 ] MsMpSvc c:\Program Files\Microsoft Security Client\MsMpEng.exe
13:31:08.0718 0x052c MsMpSvc - ok
13:31:08.0906 0x052c [ 325BB26842FC7CCC1FCCE2C457317F3E, C07BE560513B1FB91D756494F0BA4AEEB2E1998DE0E1C21EE83DB1183B0CEE91 ] MSPCLOCK C:\WINDOWS\system32\drivers\MSPCLOCK.sys
13:31:09.0078 0x052c MSPCLOCK - ok
13:31:09.0125 0x052c [ BAD59648BA099DA4A17680B39730CB3D, 9AD4C7C94C186C8815D0BC75DCAFB962158DA6935A244BA243EDDDEB33F9816C ] MSPQM C:\WINDOWS\system32\drivers\MSPQM.sys
13:31:09.0359 0x052c MSPQM - ok
13:31:09.0421 0x052c [ AF5F4F3F14A8EA2C26DE30F7A1E17136, AC93A1E4ABB0D038B772E429015567E44CC2EDB66C54DBE23A5F98176FAC1520 ] mssmbios C:\WINDOWS\system32\DRIVERS\mssmbios.sys
13:31:09.0593 0x052c mssmbios - ok
13:31:09.0625 0x052c [ E53736A9E30C45FA9E7B5EAC55056D1D, 38602F280BF69EBA3706AD175AFC1AEB561A8302B4B61E3FECB3C27D7A9BDB41 ] MSTEE C:\WINDOWS\system32\drivers\MSTEE.sys
13:31:09.0828 0x052c MSTEE - ok
13:31:09.0968 0x052c [ DE6A75F5C270E756C5508D94B6CF68F5, FCC972DDC36C2C44D836913F10004C2C33B11C54DEFFF0C63E0FDF901D2F9261 ] Mup C:\WINDOWS\system32\drivers\Mup.sys
13:31:10.0046 0x052c Mup - ok
13:31:10.0171 0x052c [ 5B50F1B2A2ED47D560577B221DA734DB, C16A554B6E1A7F5F98C94DFA88163E0F7426506BF2F51FD351B1A05FC0DB3BC5 ] NABTSFEC C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys
13:31:10.0359 0x052c NABTSFEC - ok
13:31:10.0656 0x052c [ 0102140028FAD045756796E1C685D695, 5335B8278418CA200E2772124F0602C3E15A5CAF2D5CC59F6785DFAABF339B09 ] napagent C:\WINDOWS\System32\qagentrt.dll
13:31:11.0125 0x052c napagent - ok
13:31:11.0343 0x052c [ 1DF7F42665C94B825322FAE71721130D, FE0DCB728471465B39A42A7511F4133021FBA5DF88F88BCB5FE2FF34CFD713F9 ] NDIS C:\WINDOWS\system32\drivers\NDIS.sys
13:31:11.0515 0x052c NDIS - ok
13:31:11.0562 0x052c [ 7FF1F1FD8609C149AA432F95A8163D97, 18CD1FF5AC1EF8A38D1EC53014F2BADD28D9CDF4ECE2EBC2313D08903776F323 ] NdisIP C:\WINDOWS\system32\DRIVERS\NdisIP.sys
13:31:11.0781 0x052c NdisIP - ok
13:31:11.0843 0x052c [ 0109C4F3850DFBAB279542515386AE22, 4F6DB1E499AC853FD36FD603FBB6D3AC9BDCEB298C7FE1FB59A9236CB46729B2 ] NdisTapi C:\WINDOWS\system32\DRIVERS\ndistapi.sys
13:31:11.0953 0x052c NdisTapi - ok
13:31:12.0015 0x052c [ F927A4434C5028758A842943EF1A3849, B1AA3AF150C05307461774925901789456B0CCCD03A5E71ADA4AB58455962BEE ] Ndisuio C:\WINDOWS\system32\DRIVERS\ndisuio.sys
13:31:12.0203 0x052c Ndisuio - ok
13:31:12.0312 0x052c [ EDC1531A49C80614B2CFDA43CA8659AB, 494042F790F33721328B4451E79842E21919681CC421A4F9633EC4D383E06097 ] NdisWan C:\WINDOWS\system32\DRIVERS\ndiswan.sys
13:31:12.0484 0x052c NdisWan - ok
13:31:12.0578 0x052c [ 9282BD12DFB069D3889EB3FCC1000A9B, 09A46F1712BD9165068D8E153585FE3E6E5CBF4F1DDEC142115555D3A91AEC09 ] NDProxy C:\WINDOWS\system32\drivers\NDProxy.sys
13:31:12.0687 0x052c NDProxy - ok
13:31:12.0781 0x052c [ 5D81CF9A2F1A3A756B66CF684911CDF0, 7989C36607CAEA17AFA2C1C9904145CA0714A54B9F712D9D4C1AB140D0B2CC0C ] NetBIOS C:\WINDOWS\system32\DRIVERS\netbios.sys
13:31:12.0984 0x052c NetBIOS - ok
13:31:13.0156 0x052c [ 74B2B2F5BEA5E9A3DC021D685551BD3D, 7932B71F98B4122BE88F576BF6D745A757AE378A48924B7F4358837B75640A82 ] NetBT C:\WINDOWS\system32\DRIVERS\netbt.sys
13:31:13.0343 0x052c NetBT - ok
13:31:13.0500 0x052c [ B857BA82860D7FF85AE29B095645563B, 86FF0E4CDD9C394E8BABD93A4D57E73FF9A779261717DEC6E9CDE99F1C6B0F4C ] NetDDE C:\WINDOWS\system32\netdde.exe
13:31:13.0859 0x052c NetDDE - ok
13:31:13.0968 0x052c [ B857BA82860D7FF85AE29B095645563B, 86FF0E4CDD9C394E8BABD93A4D57E73FF9A779261717DEC6E9CDE99F1C6B0F4C ] NetDDEdsdm C:\WINDOWS\system32\netdde.exe
13:31:14.0140 0x052c NetDDEdsdm - ok
13:31:14.0218 0x052c [ BF2466B3E18E970D8A976FB95FC1CA85, F7794B5D12DC5D820A162850F4388E2AA80426AD07CB221799CF941C682AB501 ] Netlogon C:\WINDOWS\system32\lsass.exe
13:31:14.0437 0x052c Netlogon - ok
13:31:14.0656 0x052c [ 13E67B55B3ABD7BF3FE7AAE5A0F9A9DE, 4E0A67B3CC897E80D4B342FFE8B7B4CC4F6CA2EF2D34C136027A098B2E1C6166 ] Netman C:\WINDOWS\System32\netman.dll
13:31:14.0890 0x052c Netman - ok
13:31:15.0062 0x052c [ D34612C5D02D026535B3095D620626AE, 1BBCCCBF49EB8807240A77DCB43C25C21682073CC5356594E2C4F53EF36BF657 ] NetTcpPortSharing c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
13:31:15.0203 0x052c NetTcpPortSharing - ok
13:31:15.0312 0x052c [ E9E47CFB2D461FA0FC75B7A74C6383EA, 544136F5BFD4DC23D45E90F12FA48B82FD9EAEA9EAF3E0F5F0BD27E23D672C3E ] NIC1394 C:\WINDOWS\system32\DRIVERS\nic1394.sys
13:31:15.0468 0x052c NIC1394 - ok
13:31:15.0750 0x052c [ 943337D786A56729263071623BBB9DE5, B631B47C869FE4ACF46E4AA272435D9A9CA536E3349E3FFBB8602636FEE7AFD4 ] Nla C:\WINDOWS\System32\mswsock.dll
13:31:15.0984 0x052c Nla - ok
13:31:16.0062 0x052c [ 3182D64AE053D6FB034F44B6DEF8034A, 4ADFC76965BA2A5F488E71789A4E4EA702A74AF42725F72130D1CA919406CF19 ] Npfs C:\WINDOWS\system32\drivers\Npfs.sys
13:31:16.0234 0x052c Npfs - ok
13:31:16.0906 0x052c [ 78A08DD6A8D65E697C18E1DB01C5CDCA, E0E6F3ED05068E32F1D5C2D2B38CDEF4536B8656DB6756C66CF6B40B60C8F3DA ] Ntfs C:\WINDOWS\system32\drivers\Ntfs.sys
13:31:17.0312 0x052c Ntfs - ok
13:31:17.0343 0x052c [ BF2466B3E18E970D8A976FB95FC1CA85, F7794B5D12DC5D820A162850F4388E2AA80426AD07CB221799CF941C682AB501 ] NtLmSsp C:\WINDOWS\system32\lsass.exe
13:31:17.0500 0x052c NtLmSsp - ok
13:31:17.0968 0x052c [ 156F64A3345BD23C600655FB4D10BC08, 9611BE411586E068D9297D77102DB3BE48AA67F1BAD6F61A84F83FC3043FA9CD ] NtmsSvc C:\WINDOWS\system32\ntmssvc.dll
13:31:18.0781 0x052c NtmsSvc - ok
13:31:18.0828 0x052c [ 73C1E1F395918BC2C6DD67AF7591A3AD, B21133A75253EC15E2DFF66D3B480AB1A7E1A2360476C810E7AA55D0F0EB08D4 ] Null C:\WINDOWS\system32\drivers\Null.sys
13:31:19.0031 0x052c Null - ok
13:31:19.0078 0x052c [ B305F3FAD35083837EF46A0BBCE2FC57, 9D0E0E666D652D0FC9EAB97280A5D67AAF61D6B21929DF7CF8ED72A367720464 ] NwlnkFlt C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
13:31:19.0234 0x052c NwlnkFlt - ok
13:31:19.0296 0x052c [ C99B3415198D1AAB7227F2C88FD664B9, DD8DA4B5E804F134AB9233859544C025062902DFC3E8FB8A09A67337A4E73F55 ] NwlnkFwd C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
13:31:19.0500 0x052c NwlnkFwd - ok
13:31:19.0609 0x052c [ CA33832DF41AFB202EE7AEB05145922F, 9DD0089C2E13C7F81214C3B5A4A61276292052F9BBFEA7FCD0F6AA27815D5F95 ] ohci1394 C:\WINDOWS\system32\DRIVERS\ohci1394.sys
13:31:19.0765 0x052c ohci1394 - ok
13:31:19.0906 0x052c [ 7A56CF3E3F12E8AF599963B16F50FB6A, 882C82BAE96D263138D4C0D6C425458B770B7B9C8E9C1D28AC918BF6BE94A5C2 ] ose C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
13:31:20.0000 0x052c ose - ok
13:31:20.0140 0x052c [ 5575FAF8F97CE5E713D108C2A58D7C7C, 96D4595D19A78CCBE8B325A08780AC077AE5CC99642ACD72FB47AEAE8D344D3B ] Parport C:\WINDOWS\system32\DRIVERS\parport.sys
13:31:20.0328 0x052c Parport - ok
13:31:20.0375 0x052c [ BEB3BA25197665D82EC7065B724171C6, 7E71C13BA30CD95CEE8A9CC85E6F48A01F30EDEAADEE69D80AE828BF97E5A5CA ] PartMgr C:\WINDOWS\system32\drivers\PartMgr.sys
13:31:20.0546 0x052c PartMgr - ok
13:31:20.0593 0x052c [ 70E98B3FD8E963A6A46A2E6247E0BEA1, 6771313EC41B3B5BFD398F60706E40BE71617046880CC352DD110B001AFC22A1 ] ParVdm C:\WINDOWS\system32\drivers\ParVdm.sys
13:31:20.0750 0x052c ParVdm - ok
13:31:20.0843 0x052c [ A219903CCF74233761D92BEF471A07B1, D4E6C360A1D2FCA4D17C991B834D68BF20F5111DD06B1FAB8B22984804CEC269 ] PCI C:\WINDOWS\system32\DRIVERS\pci.sys
13:31:21.0171 0x052c PCI - ok
13:31:21.0171 0x052c PCIDump - ok
13:31:21.0203 0x052c [ CCF5F451BB1A5A2A522A76E670000FF0, D63F7E5A39653EC9CCE94B7D84B2D3EBD4F54533BD65701020198724042C9257 ] PCIIde C:\WINDOWS\system32\DRIVERS\pciide.sys
13:31:21.0375 0x052c PCIIde - ok
13:31:21.0515 0x052c [ 9E89EF60E9EE05E3F2EEF2DA7397F1C1, 0BA3DB21DC7C641C181E2635B5C9B73965FDCDCD3EBBBE48FCFEC1C8C987F617 ] Pcmcia C:\WINDOWS\system32\drivers\Pcmcia.sys
13:31:21.0671 0x052c Pcmcia - ok
13:31:21.0671 0x052c PDCOMP - ok
13:31:21.0687 0x052c PDFRAME - ok
13:31:21.0703 0x052c PDRELI - ok
13:31:21.0718 0x052c PDRFRAME - ok
13:31:21.0734 0x052c perc2 - ok
13:31:21.0734 0x052c perc2hib - ok
13:31:21.0906 0x052c [ 65DF52F5B8B6E9BBD183505225C37315, 59C606977DB40A3443DFF0BE2A4C761824881B22C9FDB3D23F6486DB580E92A4 ] PlugPlay C:\WINDOWS\system32\services.exe
13:31:21.0937 0x052c PlugPlay - ok
13:31:21.0968 0x052c [ BF2466B3E18E970D8A976FB95FC1CA85, F7794B5D12DC5D820A162850F4388E2AA80426AD07CB221799CF941C682AB501 ] PolicyAgent C:\WINDOWS\system32\lsass.exe
13:31:22.0125 0x052c PolicyAgent - ok
13:31:22.0203 0x052c [ EFEEC01B1D3CF84F16DDD24D9D9D8F99, C5F0C8C66A3AF7E7BB04CEDE4AC5306F8387AB384A2107DC5BE413AAE968EFF1 ] PptpMiniport C:\WINDOWS\system32\DRIVERS\raspptp.sys
13:31:22.0359 0x052c PptpMiniport - ok
13:31:22.0421 0x052c [ A32BEBAF723557681BFC6BD93E98BD26, 35039BA72A29F87B2CA37DCDE4EFDAABBDEAD8CE3EB8652ACC665994118145A6 ] Processor C:\WINDOWS\system32\DRIVERS\processr.sys
13:31:22.0593 0x052c Processor - ok
13:31:22.0640 0x052c [ BF2466B3E18E970D8A976FB95FC1CA85, F7794B5D12DC5D820A162850F4388E2AA80426AD07CB221799CF941C682AB501 ] ProtectedStorage C:\WINDOWS\system32\lsass.exe
13:31:22.0765 0x052c ProtectedStorage - ok
13:31:22.0843 0x052c [ 80D317BD1C3DBC5D4FE7B1678C60CADD, DA76804B55D0CAB3DDD01EFC06673764AE4860693375C658B6063FB14AF7F12C ] Ptilink C:\WINDOWS\system32\DRIVERS\ptilink.sys
13:31:23.0078 0x052c Ptilink - ok
13:31:23.0171 0x052c [ 49452BFCEC22F36A7A9B9C2181BC3042, C01A2005E9897B142FF9BC6155770F70C19725C425E48D14239195E81E2E42D0 ] PxHelp20 C:\WINDOWS\system32\Drivers\PxHelp20.sys
13:31:23.0187 0x052c PxHelp20 - ok
13:31:23.0203 0x052c ql1080 - ok
13:31:23.0218 0x052c Ql10wnt - ok
13:31:23.0234 0x052c ql12160 - ok
13:31:23.0250 0x052c ql1240 - ok
13:31:23.0265 0x052c ql1280 - ok
13:31:23.0296 0x052c [ FE0D99D6F31E4FAD8159F690D68DED9C, 998685622ABE631984B7E4DBF91AB3594B1F574378D75EB9F6265F4650470692 ] RasAcd C:\WINDOWS\system32\DRIVERS\rasacd.sys
13:31:23.0437 0x052c RasAcd - ok
13:31:23.0578 0x052c [ AD188BE7BDF94E8DF4CA0A55C00A5073, C7D76CB579FAEBCCC2873499441BACDD6BD6668ACF5ED7F31862656E96E2B20C ] RasAuto C:\WINDOWS\System32\rasauto.dll
13:31:23.0843 0x052c RasAuto - ok
13:31:23.0953 0x052c [ 11B4A627BC9614B885C4969BFA5FF8A6, EAE0A412A2B0F68919C32A96B3A08CC1A06585E4998819F5C9051745F63FF5AD ] Rasl2tp C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
13:31:24.0109 0x052c Rasl2tp - ok
13:31:24.0328 0x052c [ 76A9A3CBEADD68CC57CDA5E1D7448235, 4AFD048C5D2306AB8DE46F3AA60AC0213333DDA3B09A9E91F7585DB6EB978EC8 ] RasMan C:\WINDOWS\System32\rasmans.dll
13:31:24.0703 0x052c RasMan - ok
13:31:24.0781 0x052c [ 5BC962F2654137C9909C3D4603587DEE, A5CE5653D0105240F5E86CFAAB89E7917D42D939E2F27A5A7D6979289CA651B8 ] RasPppoe C:\WINDOWS\system32\DRIVERS\raspppoe.sys
13:31:24.0984 0x052c RasPppoe - ok
13:31:25.0031 0x052c [ FDBB1D60066FCFBB7452FD8F9829B242, 10A2DACF944BD000032EBA8C095CB3D879CC55B28C377ADF6E52E508E47444DB ] Raspti C:\WINDOWS\system32\DRIVERS\raspti.sys
13:31:25.0203 0x052c Raspti - ok
13:31:25.0406 0x052c [ 7AD224AD1A1437FE28D89CF22B17780A, 6645235CA27D671954E3557FA37082881C3D7D47492C71264CD8CB8D108EC801 ] Rdbss C:\WINDOWS\system32\DRIVERS\rdbss.sys
13:31:25.0578 0x052c Rdbss - ok
13:31:25.0625 0x052c [ 4912D5B403614CE99C28420F75353332, 975341ECD660209987B5E5171B8315E032439E408CBE8A5986E67AF767F373BB ] RDPCDD C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
13:31:25.0765 0x052c RDPCDD - ok
13:31:25.0968 0x052c [ 43AF5212BD8FB5BA6EED9754358BD8F7, AF330F61CECA4AFA359CEABC5EB3227E6B56A9A2DCE50701381D665122D7356D ] RDPWD C:\WINDOWS\system32\drivers\RDPWD.sys
13:31:26.0093 0x052c RDPWD - ok
13:31:26.0265 0x052c [ 3C37BF86641BDA977C3BF8A840F3B7FA, AB9A6E54DBA3F4561CD4837372BECCE0D73943D02E3288F944333039375AC08C ] RDSessMgr C:\WINDOWS\system32\sessmgr.exe
13:31:26.0546 0x052c RDSessMgr - ok
13:31:26.0656 0x052c [ F828DD7E1419B6653894A8F97A0094C5, E6150E1F598BA4CFEDB8FF075BC0D576518C331B864388F1CAE8812EFF106ECF ] redbook C:\WINDOWS\system32\DRIVERS\redbook.sys
13:31:26.0828 0x052c redbook - ok
13:31:26.0906 0x052c [ 7E699FF5F59B5D9DE5390E3C34C67CF5, 3FCF0442D80AB181FED4303E570378736AA1F8718C0B8B70F689A1E45200FFE4 ] RemoteAccess C:\WINDOWS\System32\mprdim.dll
13:31:27.0156 0x052c RemoteAccess - ok
13:31:27.0265 0x052c [ AAED593F84AFA419BBAE8572AF87CF6A, CC0FFC5A69394C8830DC66320DA01A820BBF41AD7E57D0FC343561DC5EF9A360 ] RpcLocator C:\WINDOWS\system32\locator.exe
13:31:27.0468 0x052c RpcLocator - ok
13:31:27.0843 0x052c [ 6B27A5C03DFB94B4245739065431322C, 6AEAC16AB4E0DFD25123AAF4D4181FEE1B919B7B2793117006CE8CF30E826CFD ] RpcSs C:\WINDOWS\System32\rpcss.dll
13:31:28.0109 0x052c RpcSs - ok
13:31:28.0281 0x052c [ 471B3F9741D762ABE75E9DEEA4787E47, D9ADE42965EC22AEB4B2AD21D429C3C8232A60AA9853DEFDA7AED86A13FE8623 ] RSVP C:\WINDOWS\system32\rsvp.exe
13:31:28.0546 0x052c RSVP - ok
13:31:28.0703 0x052c [ CF84B1F0E8B14D4120AAF9CF35CBB265, 3F9B0E70DFD96B822A21A3D5E0438DCB3E08EF6A516756CE58CBDB2F52D09604 ] RTL8023xp C:\WINDOWS\system32\DRIVERS\Rtnicxp.sys
13:31:29.0265 0x052c RTL8023xp - ok
13:31:29.0343 0x052c [ D507C1400284176573224903819FFDA3, DD0BDB2AB39A8A0A300B6D60FB6A7F5BA08C4DB8F59E0A784FB763EA8AD72AB2 ] rtl8139 C:\WINDOWS\system32\DRIVERS\RTL8139.SYS
13:31:29.0578 0x052c rtl8139 - ok
13:31:29.0625 0x052c [ BF2466B3E18E970D8A976FB95FC1CA85, F7794B5D12DC5D820A162850F4388E2AA80426AD07CB221799CF941C682AB501 ] SamSs C:\WINDOWS\system32\lsass.exe
13:31:29.0765 0x052c SamSs - ok
13:31:29.0828 0x052c [ 39763504067962108505BFF25F024345, 73C9710B61EDC7FBEDE1D7A767AA3D3A169E7AD012494D05CB5EE7E5C5752BB9 ] SASDIFSV C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS
13:31:29.0859 0x052c SASDIFSV - ok
13:31:29.0968 0x052c [ 77B9FC20084B48408AD3E87570EB4A85, B5BC5FEC1356DECB66A7A671DB67112BDAC8F942BF1C4B986B1805B41EF362B1 ] SASKUTIL C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS
13:31:30.0046 0x052c SASKUTIL - ok
13:31:30.0171 0x052c [ 86D007E7A654B9A71D1D7D856B104353, 7B1DE53D637A5FC9619D5D07C48927AFEC89D959207F6F2E2F45DD054EEA04C7 ] SCardSvr C:\WINDOWS\System32\SCardSvr.exe
13:31:30.0453 0x052c SCardSvr - ok
13:31:30.0671 0x052c [ 0A9A7365A1CA4319AA7C1D6CD8E4EAFA, 0B582F47BD70732BAC48B8B86E5D06CE7F299A20E8177F3F2E6F28217C3FB605 ] Schedule C:\WINDOWS\system32\schedsvc.dll
13:31:31.0078 0x052c Schedule - ok
13:31:31.0156 0x052c [ 90A3935D05B494A5A39D37E71F09A677, F72733A69BC6E1A2BB91D7632FF3463C12563F60FDCC00A2CDD67FF20D479952 ] Secdrv C:\WINDOWS\system32\DRIVERS\secdrv.sys
13:31:31.0250 0x052c Secdrv - ok
13:31:31.0312 0x052c [ CBE612E2BB6A10E3563336191EDA1250, C331797DC3569F0E715766561DE2562F60B924378842246C35D2B1CF867E9D96 ] seclogon C:\WINDOWS\System32\seclogon.dll
13:31:31.0500 0x052c seclogon - ok
13:31:31.0593 0x052c [ 7FDD5D0684ECA8C1F68B4D99D124DCD0, 7105B026F966A992430F86C3698ABE15EC73E4772F1A3E362E29FD5247A5DCA6 ] SENS C:\WINDOWS\system32\sens.dll
13:31:31.0781 0x052c SENS - ok
13:31:31.0890 0x052c [ CCA207A8896D4C6A0C9CE29A4AE411A7, 5999B39242283CD803319AADCA171CCCC6E2A40FB2FAFA51B1D29F3FF2DD8D6C ] Serial C:\WINDOWS\system32\drivers\Serial.sys
13:31:32.0156 0x052c Serial - ok
13:31:32.0250 0x052c [ 8E6B8C671615D126FDC553D1E2DE5562, CEEC0067514555D5CA489F50E3D7562FCA8DB8E952C3C878604C9277FC77959F ] Sfloppy C:\WINDOWS\system32\drivers\Sfloppy.sys
13:31:32.0406 0x052c Sfloppy - ok
13:31:32.0750 0x052c [ 83F41D0D89645D7235C051AB1D9523AC, B681F33EEAA511D6A2DCB9FBAA407B739184C9FF6067C6B7E51F1FC37E9D4DD7 ] SharedAccess C:\WINDOWS\System32\ipnathlp.dll
13:31:33.0437 0x052c SharedAccess - ok
13:31:33.0593 0x052c [ 99BC0B50F511924348BE19C7C7313BBF, A1006C687BD352F700B140DC741515A0CDD9E1352C0FBD1EE410D404E344444B ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll
13:31:33.0609 0x052c ShellHWDetection - ok
13:31:33.0625 0x052c Simbad - ok
13:31:33.0843 0x052c [ 7C15061CD0372487903B07B9BB03AFAD, FB96CDA29C7C1E8A315BA89E8B150918E59F32CE749D3EF43FCBEB3FB57BF1C6 ] SkypeUpdate C:\Program Files\Skype\Updater\Updater.exe
13:31:34.0015 0x052c SkypeUpdate - ok
13:31:34.0062 0x052c [ 866D538EBE33709A5C9F5C62B73B7D14, BC94BEB7C17B4FCAC8B5D0D5006A203BC209E0504EECE149651D8691935696CD ] SLIP C:\WINDOWS\system32\DRIVERS\SLIP.sys
13:31:34.0218 0x052c SLIP - ok
13:31:34.0312 0x052c [ 60C377BE6B3CC83F6A8584934B181D2E, 58F94CAD0149F634BE2F630A39561073F9399A904E3E3143C0D0BEC348A0C3B2 ] SNMP C:\WINDOWS\System32\snmp.exe
13:31:34.0546 0x052c SNMP - ok
13:31:34.0593 0x052c [ 80A050795A107A76C2B1CD4CFBE010E6, DA5BFB0E8E990BE998F1ED5991CA3318A99E0F252669CE9FAE2EF67C535140B8 ] SNMPTRAP C:\WINDOWS\System32\snmptrap.exe
13:31:34.0781 0x052c SNMPTRAP - ok
13:31:34.0828 0x052c [ A1ECEEAA5C5E74B2499EB51D38185B84, BB866DDA4D1F85A68A652204DAC7378456793E096A15F88B9C153BECD3D18C27 ] SONYPVU1 C:\WINDOWS\system32\DRIVERS\SONYPVU1.SYS
13:31:35.0015 0x052c SONYPVU1 - ok
13:31:35.0031 0x052c Sparrow - ok
13:31:35.0093 0x052c [ AB8B92451ECB048A4D1DE7C3FFCB4A9F, DD17733CBB370FCA08F0296704D7CBEACA3C8F76D0ABE4761C3B1FFDF7481D9E ] splitter C:\WINDOWS\system32\drivers\splitter.sys
13:31:35.0281 0x052c splitter - ok
13:31:35.0390 0x052c [ 60784F891563FB1B767F70117FC2428F, E0B07F08E60FFBAD36C2E58180F4B2A16DCA47716044CBE0213DF7B74D742F1F ] Spooler C:\WINDOWS\system32\spoolsv.exe
13:31:35.0406 0x052c Spooler - ok
13:31:35.0531 0x052c [ 76BB022C2FB6902FD5BDD4F78FC13A5D, 6031CB2344D7277FC703480EB43CF856A0F8F818EA98FF26A2CA532336CD2DFA ] sr C:\WINDOWS\system32\DRIVERS\sr.sys
13:31:35.0625 0x052c sr - ok
13:31:35.0843 0x052c [ 3805DF0AC4296A34BA4BF93B346CC378, B57A14F1B7B0997E619DDD62B73157AA2399A9852166FB58139CBB358A88F6F3 ] srservice C:\WINDOWS\system32\srsvc.dll
13:31:36.0093 0x052c srservice - ok
13:31:36.0468 0x052c [ 47DDFC2F003F7F9F0592C6874962A2E7, 17C643BD4EB09B5666FE41817DC785BE04A6E491CE79E8E5A702CDBD98E1BDD7 ] Srv C:\WINDOWS\system32\DRIVERS\srv.sys
13:31:36.0796 0x052c Srv - ok
13:31:36.0921 0x052c [ 0A5679B3714EDAB99E357057EE88FCA6, 01E1A101FFF48402C77E385A78FEF27876E04533B60EB1C18558A737E57E5FA8 ] SSDPSRV C:\WINDOWS\System32\ssdpsrv.dll
13:31:37.0140 0x052c SSDPSRV - ok
13:31:37.0171 0x052c Steam Client Service - ok
13:31:37.0515 0x052c [ 8BAD69CBAC032D4BBACFCE0306174C30, 2AA0DA710FCBFF38FE8DA91EE02E7A4503269347E61F8D3246FCA3384BBA2305 ] stisvc C:\WINDOWS\system32\wiaservc.dll
13:31:38.0281 0x052c stisvc - ok
13:31:38.0328 0x052c [ 77813007BA6265C4B6098187E6ED79D2, 93939120E803C46FBFD577C8FC2E6C7E71C0460E01D25CB29579490640AB50C7 ] streamip C:\WINDOWS\system32\DRIVERS\StreamIP.sys
13:31:38.0515 0x052c streamip - ok
13:31:38.0578 0x052c [ 3941D127AEF12E93ADDF6FE6EE027E0F, EA1F0E32E1C5E90FA4AAC421DEBBE086512340758D3217A6334E886BCE638B51 ] swenum C:\WINDOWS\system32\DRIVERS\swenum.sys
13:31:38.0750 0x052c swenum - ok
13:31:38.0828 0x052c [ 8CE882BCC6CF8A62F2B2323D95CB3D01, B408550A581F3DA222355964AFA4E976AD8471F0AA37573C42C4948AE5A23A3B ] swmidi C:\WINDOWS\system32\drivers\swmidi.sys
13:31:39.0062 0x052c swmidi - ok
13:31:39.0078 0x052c SwPrv - ok
13:31:39.0093 0x052c symc810 - ok
13:31:39.0109 0x052c symc8xx - ok
13:31:39.0125 0x052c sym_hi - ok
13:31:39.0140 0x052c sym_u3 - ok
13:31:39.0250 0x052c [ 8B83F3ED0F1688B4958F77CD6D2BF290, 546D3602183702B4F53E84413CFA2C933D64C8540378E54A8DCD148F3F36A2DA ] sysaudio C:\WINDOWS\system32\drivers\sysaudio.sys
13:31:39.0421 0x052c sysaudio - ok
13:31:39.0531 0x052c [ C7ABBC59B43274B1109DF6B24D617051, 4384CA0AA6CE9B603CF7DB775A3C721E46715D5B120B94FB57DEADAADE18535B ] SysmonLog C:\WINDOWS\system32\smlogsvc.exe
13:31:39.0812 0x052c SysmonLog - ok
13:31:40.0078 0x052c [ 3CB78C17BB664637787C9A1C98F79C38, F35C31F6B7F366CB949D1044B357C76DEC9170441C5E559802794F62B72FD255 ] TapiSrv C:\WINDOWS\System32\tapisrv.dll
13:31:40.0484 0x052c TapiSrv - ok
13:31:40.0843 0x052c [ 9AEFA14BD6B182D61E3119FA5F436D3D, EA29E49434585409272E7901AF89771FE9D6E911A7DC44AB3C7020CFF8A44552 ] Tcpip C:\WINDOWS\system32\DRIVERS\tcpip.sys
13:31:41.0140 0x052c Tcpip - ok
13:31:41.0203 0x052c [ 6471A66807F5E104E4885F5B67349397, F35CBFFB8BB235CCE30EF94A5273333900DD49FD506BF9D55D99A320B8A53A5A ] TDPIPE C:\WINDOWS\system32\drivers\TDPIPE.sys
13:31:41.0375 0x052c TDPIPE - ok
13:31:41.0437 0x052c [ C56B6D0402371CF3700EB322EF3AAF61, 7743FA4C734BCE38EFB1CA69BC17364D8421E2CD172F856F7E38E7AE1EE93F2F ] TDTCP C:\WINDOWS\system32\drivers\TDTCP.sys
13:31:41.0593 0x052c TDTCP - ok
13:31:41.0656 0x052c [ 88155247177638048422893737429D9E, B6D4E8691917946332C2208D01F8C8281978C1AD1E9951C5D99DF0D49AC34B3B ] TermDD C:\WINDOWS\system32\DRIVERS\termdd.sys
13:31:41.0812 0x052c TermDD - ok
13:31:42.0125 0x052c [ FF3477C03BE7201C294C35F684B3479F, D6246521539BA4ACD022D26983182F5E323D2EF1EA7C54265A248C43A1CE5202 ] TermService C:\WINDOWS\System32\termsrv.dll
13:31:42.0296 0x052c TermService - ok
13:31:42.0453 0x052c [ 99BC0B50F511924348BE19C7C7313BBF, A1006C687BD352F700B140DC741515A0CDD9E1352C0FBD1EE410D404E344444B ] Themes C:\WINDOWS\System32\shsvcs.dll
13:31:42.0500 0x052c Themes - ok
13:31:42.0640 0x052c [ 7BC118435392E58579CDA2E6617F2658, F0F656DDED3AA300119E5923E006FB67710E3FF6F805931A86BCD39154F8D41A ] tmcomm C:\WINDOWS\system32\drivers\tmcomm.sys
13:31:42.0656 0x052c tmcomm - ok
13:31:42.0671 0x052c TosIde - ok
13:31:42.0812 0x052c [ 55BCA12F7F523D35CA3CB833C725F54E, 849FB1AE31B143B14B298BBC0D91230693D41DEB95F46516878F53A7F4186C38 ] TrkWks C:\WINDOWS\system32\trkwks.dll
13:31:43.0031 0x052c TrkWks - ok
13:31:43.0296 0x052c [ 5787B80C2E3C5E2F56C2A233D91FA2C9, 3774905CF77954DFCECDA5BCC7CDE3D0ED72712BFAAD85ADAE5246306447E46C ] Udfs C:\WINDOWS\system32\drivers\Udfs.sys
13:31:43.0468 0x052c Udfs - ok
13:31:43.0484 0x052c ultra - ok
13:31:43.0875 0x052c [ 402DDC88356B1BAC0EE3DD1580C76A31, 32A686595710336A6BFD54C03F552AE39439611662F84EF5D24193AE5665C6F3 ] Update C:\WINDOWS\system32\DRIVERS\update.sys
13:31:44.0328 0x052c Update - ok
13:31:44.0546 0x052c [ 1EBAFEB9A3FBDC41B8D9C7F0F687AD91, 7746916DB48E3F5B243B63C066596AD9037A494BF1AD935946DD04AC85D983DF ] upnphost C:\WINDOWS\System32\upnphost.dll
13:31:44.0843 0x052c upnphost - ok
13:31:44.0890 0x052c [ 05365FB38FCA1E98F7A566AAAF5D1815, 16843048CEEC3DAA3B953A12FF1EE339E86783A08F2A56DA7F94AD9F9717D77D ] UPS C:\WINDOWS\System32\ups.exe
13:31:45.0062 0x052c UPS - ok
13:31:45.0156 0x052c [ 83CAFCB53201BBAC04D822F32438E244, E3F6FDE4D429FB630B19417DD9752A2CE9F6C9FD58918D714B5438A3D4136853 ] USBAAPL C:\WINDOWS\system32\Drivers\usbaapl.sys
13:31:45.0250 0x052c USBAAPL - ok
13:31:45.0343 0x052c [ 65898A183FBF1D1F7759D5CCB364DCD4, 85E823123FDB4CA5F8255064E22A444627999055EC3419DFD001371893F36AB9 ] usbaudio C:\WINDOWS\system32\drivers\usbaudio.sys
13:31:45.0406 0x052c usbaudio - ok
13:31:45.0484 0x052c [ 1B611611C28D2DF25BC057D79C6F13FC, B0D86F63E44B40413BBAE6402CC088046CFAE082D41BBC2ED5A916293356B846 ] usbccgp C:\WINDOWS\system32\DRIVERS\usbccgp.sys
13:31:45.0546 0x052c usbccgp - ok
13:31:45.0609 0x052c [ 4BAC8DF07F1D8434FC640E677A62204E, 76C1351AF6752224BF59DEEE0F8665FE699F3DFD679F5BCD01C7D9383E6402A4 ] usbehci C:\WINDOWS\system32\DRIVERS\usbehci.sys
13:31:45.0656 0x052c usbehci - ok
13:31:45.0765 0x052c [ 1AB3CDDE553B6E064D2E754EFE20285C, A99C4528C4227B1E96847614745AAFACD3C5F1BDFE435214DBF78740FFB300FE ] usbhub C:\WINDOWS\system32\DRIVERS\usbhub.sys
13:31:45.0937 0x052c usbhub - ok
13:31:45.0984 0x052c [ 0DAECCE65366EA32B162F85F07C6753B, 3C33AC2FC95E876933F2016CF0CDA2745491679728684DA8DF95A515CE4804BD ] usbohci C:\WINDOWS\system32\DRIVERS\usbohci.sys
13:31:46.0203 0x052c usbohci - ok
13:31:46.0281 0x052c [ F8EDE2B6928970DCE3D5614C27D9E7F6, 6E5EBBC8B70C1D593634DAF0C190DEADFDA18C3CBC8F552A76F156F3869EF05B ] usbscan C:\WINDOWS\system32\DRIVERS\usbscan.sys
13:31:46.0343 0x052c usbscan - ok
13:31:46.0421 0x052c [ A32426D9B14A089EAA1D922E0C5801A9, ED1DC52EE45F8EAD3AEC4B1F817BB25634141CF48295494C5947DCE6CF7A9817 ] usbstor C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
13:31:46.0578 0x052c usbstor - ok
13:31:46.0656 0x052c [ 26496F9DEE2D787FC3E61AD54821FFE6, 8BE7FF647470B9A951CBB478FAF83D657A15CC78037F42348A6B738F21D523DA ] usbuhci C:\WINDOWS\system32\DRIVERS\usbuhci.sys
13:31:46.0812 0x052c usbuhci - ok
13:31:46.0875 0x052c [ 0D3A8FAFCEACD8B7625CD549757A7DF1, B9CFDEFCD66AA139F3DC2F967B184669532922563AD5A71769BABDC4370D065E ] VgaSave C:\WINDOWS\System32\drivers\vga.sys
13:31:47.0046 0x052c VgaSave - ok
13:31:47.0250 0x052c [ 3B3EFCDA263B8AC14FDF9CBDD0791B2E, FC7FFD53FCC0F81587EFF26A43C141D25C43DBC68311520CE2BCDD739CA58CA9 ] ViaIde C:\WINDOWS\system32\DRIVERS\viaide.sys
13:31:47.0406 0x052c ViaIde - ok
13:31:47.0484 0x052c [ 4C8FCB5CC53AAB716D810740FE59D025, 010EAC43DBED700B73E4FC908FAAF9F6A0168EBBD5D86751E49BC33AAA18BFA4 ] VolSnap C:\WINDOWS\system32\drivers\VolSnap.sys
13:31:47.0656 0x052c VolSnap - ok
13:31:47.0953 0x052c [ 7A9DB3A67C333BF0BD42E42B8596854B, D31A9A3B1AAAB373EDD73B674102395212FCB616F829E938B7B2B7BE7D4752C5 ] VSS C:\WINDOWS\System32\vssvc.exe
13:31:48.0343 0x052c VSS - ok
13:31:50.0156 0x052c [ 42870675B4D84ACD81A9DA69B83F14C5, 591A4E43555501CC145E2384051EE3645E064208627011D7AEF821D587BFE7BA ] VX3000 C:\WINDOWS\system32\DRIVERS\VX3000.sys
13:31:52.0109 0x052c VX3000 - ok
13:31:52.0328 0x052c [ 54AF4B1D5459500EF0937F6D33B1914F, FA1876888BCB9C72A92369DBED4FF1A8666784523FB41E618FA0919490FCDDB9 ] W32Time C:\WINDOWS\system32\w32time.dll
13:31:52.0656 0x052c W32Time - ok
13:31:52.0750 0x052c [ E20B95BAEDB550F32DD489265C1DA1F6, 5589B2067E6C9FBA290D8C5EADDC198EBAF39C50C3CD7D2BC5CDA7CBFBC445E5 ] Wanarp C:\WINDOWS\system32\DRIVERS\wanarp.sys
13:31:52.0906 0x052c Wanarp - ok
13:31:52.0984 0x052c [ 0A716C08CB13C3A8F4F51E882DBF7416, 66FFDC9151CB3676B5DF073431DE055E7F2CDA5722F7EAAC6EC45F2CF9910882 ] wanatw C:\WINDOWS\system32\DRIVERS\wanatw4.sys
13:31:53.0046 0x052c wanatw - ok
13:31:53.0062 0x052c WDICA - ok
13:31:53.0187 0x052c [ 6768ACF64B18196494413695F0C3A00F, 3A8F8586F1D997D19A8478345338D2AECD785AEABDB61531DD3F92003D3230A5 ] wdmaud C:\WINDOWS\system32\drivers\wdmaud.sys
13:31:53.0343 0x052c wdmaud - ok
13:31:53.0453 0x052c [ 77A354E28153AD2D5E120A5A8687BC06, 8B2D37A4443501C0A8E70BC2079BE27F0A36FD07B561E6F68B40A72EABBC2DFE ] WebClient C:\WINDOWS\System32\webclnt.dll
13:31:53.0671 0x052c WebClient - ok
13:31:53.0937 0x052c [ 2D0E4ED081963804CCC196A0929275B5, E1D75C7D7233D81DFDE13160B0C80138DF8B35230D04FB79B367A52FACF69BF8 ] winmgmt C:\WINDOWS\system32\wbem\WMIsvc.dll
13:31:54.0078 0x052c winmgmt - ok
13:31:55.0171 0x052c [ 18F347402DA544A780949B8FDF83351B, D1AD972D438A51A4998FEF68670395DAE3353240AD2A17F35794287AF0826FFB ] WinRM C:\WINDOWS\system32\WsmSvc.dll
13:31:57.0000 0x052c WinRM - ok
13:31:57.0093 0x052c [ C51B4A5C05A5475708E3C81C7765B71D, F776D2680BD3407307B7072626F78460361FC5BC38623C9E16F394D300AB25DE ] WmdmPmSN C:\WINDOWS\system32\MsPMSNSv.dll
13:31:57.0328 0x052c WmdmPmSN - ok
13:31:57.0515 0x052c [ E0673F1106E62A68D2257E376079F821, 12992F18C9653050B10DC61D12988067933FCFDF02123D3A7EF5DE607A785DDC ] WmiApSrv C:\WINDOWS\system32\wbem\wmiapsrv.exe
13:31:57.0781 0x052c WmiApSrv - ok
13:31:58.0656 0x052c [ F74E3D9A7FA9556C3BBB14D4E5E63D3B, C71FAAC752F6D58BF8556661252DBF8C5DDD090CAE002A2C7E09C9A014526066 ] WMPNetworkSvc C:\Program Files\Windows Media Player\WMPNetwk.exe
13:32:00.0359 0x052c WMPNetworkSvc - ok
13:32:00.0421 0x052c [ 6ABE6E225ADB5A751622A9CC3BC19CE8, 4061C5D0F051DFF1730E2A3BFC1CCA97B29602FC50F10F6B44D93B0D28F42024 ] WS2IFSL C:\WINDOWS\System32\drivers\ws2ifsl.sys
13:32:00.0562 0x052c WS2IFSL - ok
13:32:00.0687 0x052c [ 7C278E6408D1DCE642230C0585A854D5, DA46079A04F6E8E3441E4AE454AEAC02B3E935DE29CE7F6D4476F57867FCC12A ] wscsvc C:\WINDOWS\system32\wscsvc.dll
13:32:00.0906 0x052c wscsvc - ok
13:32:00.0968 0x052c [ C98B39829C2BBD34E454150633C62C78, 71B60EA3AD0E2637917D528C6A9E7ECF2949E3E5E91036AA5BBADA95BD725511 ] WSTCODEC C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS
13:32:01.0125 0x052c WSTCODEC - ok
13:32:01.0187 0x052c [ 35321FB577CDC98CE3EB3A3EB9E4610A, C9A6F5CF282D8FCB3CDFCC4B306013480E78E1B664E1A60A4E27B161F9FFD4CD ] wuauserv C:\WINDOWS\system32\wuauserv.dll
13:32:01.0375 0x052c wuauserv - ok
13:32:01.0859 0x052c [ 81DC3F549F44B1C1FFF022DEC9ECF30B, 3D14BFEA539F9CEB16555BD56C5E3C7C8F6692FC62C2789F8AAEA1C042E63940 ] WZCSVC C:\WINDOWS\System32\wzcsvc.dll
13:32:02.0265 0x052c WZCSVC - ok
13:32:02.0437 0x052c [ 295D21F14C335B53CB8154E5B1F892B9, 9418477C2E3EA93E93D931A4EDD4500DA568FAD6040204B5201D1080203B0BBC ] xmlprov C:\WINDOWS\System32\xmlprov.dll
13:32:02.0687 0x052c xmlprov - ok
13:32:02.0718 0x052c ================ Scan global ===============================
13:32:02.0812 0x052c [ 42F1F4C0AFB08410E5F02D4B13EBB623, 924C30587C51C0D1E1F47991969AF492A644552E15F2480EA991DCB74A3E68D5 ] C:\WINDOWS\system32\basesrv.dll
13:32:03.0171 0x052c [ 69AE2B2E6968C316536E5B10B9702E63, D9C5DA7A20DDE69D91E72400C3F06F3CB099DEF42EA6C53FCE076258A0C22391 ] C:\WINDOWS\system32\winsrv.dll
13:32:03.0531 0x052c [ 69AE2B2E6968C316536E5B10B9702E63, D9C5DA7A20DDE69D91E72400C3F06F3CB099DEF42EA6C53FCE076258A0C22391 ] C:\WINDOWS\system32\winsrv.dll
13:32:03.0640 0x052c [ 65DF52F5B8B6E9BBD183505225C37315, 59C606977DB40A3443DFF0BE2A4C761824881B22C9FDB3D23F6486DB580E92A4 ] C:\WINDOWS\system32\services.exe
13:32:03.0656 0x052c [ Global ] - ok
13:32:03.0656 0x052c ================ Scan MBR ==================================
13:32:03.0718 0x052c [ 0AC6D996BCE152AED9600E6D6B797E2E ] \Device\Harddisk0\DR0
13:32:04.0359 0x052c \Device\Harddisk0\DR0 - detected TDSS File System ( 1 )
13:32:04.0359 0x052c \Device\Harddisk0\DR0 ( TDSS File System ) - warning
13:32:04.0359 0x052c ================ Scan VBR ==================================
13:32:04.0484 0x052c [ 01341E56A0FAC3E836D016A9FD53D86F ] \Device\Harddisk0\DR0\Partition1
13:32:04.0484 0x052c \Device\Harddisk0\DR0\Partition1 - ok
13:32:04.0515 0x052c [ 8A2C9CFF84E0DD7B8097B2740D424510 ] \Device\Harddisk0\DR0\Partition2
13:32:04.0515 0x052c \Device\Harddisk0\DR0\Partition2 - ok
13:32:04.0640 0x052c AV detected via SS1: Microsoft Security Essentials, 4.3.0219.0, enabled, updated
13:32:04.0640 0x052c AV detected via SS1: Microsoft Security Essentials, 2.1.6805.0, disabled, updated
13:32:04.0656 0x052c Win FW state via NFM: enabled
13:32:04.0656 0x052c ============================================================
13:32:04.0656 0x052c Scan finished
13:32:04.0656 0x052c ============================================================
13:32:04.0687 0x0c38 Detected object count: 4
13:32:04.0687 0x0c38 Actual detected object count: 4
13:32:27.0437 0x0c38 !SASCORE ( UnsignedFile.Multi.Generic ) - skipped by user
13:32:27.0437 0x0c38 !SASCORE ( UnsignedFile.Multi.Generic ) - User select action: Skip
13:32:27.0437 0x0c38 cpuz132 ( UnsignedFile.Multi.Generic ) - skipped by user
13:32:27.0437 0x0c38 cpuz132 ( UnsignedFile.Multi.Generic ) - User select action: Skip
13:32:27.0437 0x0c38 DgiVecp ( UnsignedFile.Multi.Generic ) - skipped by user
13:32:27.0437 0x0c38 DgiVecp ( UnsignedFile.Multi.Generic ) - User select action: Skip
13:32:27.0468 0x0c38 \Device\Harddisk0\DR0\TDLFS\ldrm - copied to quarantine
13:32:27.0656 0x0c38 \Device\Harddisk0\DR0\TDLFS\cmd32.dll - copied to quarantine
13:32:27.0718 0x0c38 \Device\Harddisk0\DR0\TDLFS\cmd64.dll - copied to quarantine
13:32:27.0796 0x0c38 \Device\Harddisk0\DR0\TDLFS\drv32 - copied to quarantine
13:32:27.0968 0x0c38 \Device\Harddisk0\DR0\TDLFS\drv64 - copied to quarantine
13:32:28.0046 0x0c38 \Device\Harddisk0\DR0\TDLFS\config.ini - copied to quarantine
13:32:28.0125 0x0c38 \Device\Harddisk0\DR0\TDLFS\ldr16 - copied to quarantine
13:32:28.0671 0x0c38 \Device\Harddisk0\DR0\TDLFS\ldr32 - copied to quarantine
13:32:28.0828 0x0c38 \Device\Harddisk0\DR0\TDLFS\ldr64 - copied to quarantine
13:32:28.0984 0x0c38 \Device\Harddisk0\DR0\TDLFS\s - copied to quarantine
13:32:29.0015 0x0c38 \Device\Harddisk0\DR0\TDLFS\ns - copied to quarantine
13:32:29.0125 0x0c38 \Device\Harddisk0\DR0\TDLFS\cmd.dll - copied to quarantine
13:32:29.0203 0x0c38 \Device\Harddisk0\DR0\TDLFS\x - copied to quarantine
13:32:29.0218 0x0c38 \Device\Harddisk0\DR0\TDLFS - deleted
13:32:29.0218 0x0c38 \Device\Harddisk0\DR0 ( TDSS File System ) - User select action: Delete
13:32:54.0156 0x0fb0 Deinitialize success

ComboFix 13-11-16.01 - Compaq_Owner 11/17/2013 13:43:44.2.1 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.2238.1708 [GMT -8:00]
Running from: c:\documents and settings\Compaq_Owner\Desktop\ComboFix.exe
AV: Microsoft Security Essentials *Disabled/Updated* {BCF43643-A118-4432-AEDE-D861FCBCFCDF}
AV: Microsoft Security Essentials *Disabled/Updated* {EDB4FA23-53B8-4AFA-8C5D-99752CCA7095}
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\All Users\Application Data\nud0repor.pad
c:\documents and settings\Compaq_Owner\Application Data\result.db
c:\windows\system32\FlashPlayerApp.exe
.
.
((((((((((((((((((((((((( Files Created from 2013-10-17 to 2013-11-17 )))))))))))))))))))))))))))))))
.
.
2013-11-17 09:56 . 2013-11-17 09:56 40392 ----a-w- c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{331A02AC-89A5-420B-8BFE-492ED3BA830C}\MpKslc2b821c6.sys
2013-11-17 07:14 . 2013-11-17 07:14 62576 ----a-w- c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{331A02AC-89A5-420B-8BFE-492ED3BA830C}\offreg.dll
2013-11-17 06:57 . 2013-10-14 07:39 7796464 ----a-w- c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{331A02AC-89A5-420B-8BFE-492ED3BA830C}\mpengine.dll
2013-11-16 01:37 . 2013-11-17 21:32 -------- d-----w- C:\TDSSKiller_Quarantine
2013-11-13 19:49 . 2013-10-14 07:39 7796464 ------w- c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2013-11-06 12:43 . 2013-11-14 20:17 -------- d-----w- c:\windows\system32\MRT
2013-11-05 22:28 . 2013-07-03 02:12 25088 ------w- c:\windows\system32\dllcache\hidparse.sys
2013-11-05 22:28 . 2013-07-03 01:59 14976 ------w- c:\windows\system32\dllcache\usbscan.sys
2013-11-05 22:09 . 2013-02-12 00:32 12928 ------w- c:\windows\system32\dllcache\usb8023x.sys
2013-11-05 22:09 . 2013-02-12 00:32 12928 ------w- c:\windows\system32\dllcache\usb8023.sys
2013-11-05 22:08 . 2013-07-17 00:58 60160 ------w- c:\windows\system32\dllcache\usbaudio.sys
2013-11-05 22:08 . 2013-07-17 00:58 123008 ------w- c:\windows\system32\dllcache\usbvideo.sys
2013-11-05 22:02 . 2013-08-09 00:55 32384 ------w- c:\windows\system32\dllcache\usbccgp.sys
2013-11-05 22:02 . 2013-08-09 00:55 5376 ------w- c:\windows\system32\dllcache\usbd.sys
2013-11-05 22:02 . 2009-03-18 11:02 30336 ------w- c:\windows\system32\dllcache\usbehci.sys
2013-11-05 22:02 . 2013-08-09 00:55 144128 ------w- c:\windows\system32\dllcache\usbport.sys
2013-11-01 21:46 . 2013-11-02 07:59 -------- d-----w- C:\AdwCleaner
2013-11-01 21:30 . 2013-11-01 21:30 -------- d-----w- C:\_OTL
2013-10-30 22:39 . 2013-10-31 09:55 -------- d-----w- C:\FRST
2013-10-30 22:23 . 2013-10-30 22:23 -------- d-----w- c:\windows\system32\wbem\Repository
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-10-13 07:25 . 2004-08-04 12:00 920064 ----a-w- c:\windows\system32\wininet.dll
2013-10-13 07:25 . 2004-08-04 12:00 43520 ----a-w- c:\windows\system32\licmgr10.dll
2013-10-13 07:25 . 2004-08-04 12:00 1469440 ----a-w- c:\windows\system32\inetcpl.cpl
2013-10-13 07:24 . 2004-08-04 12:00 18944 ----a-w- c:\windows\system32\corpol.dll
2013-10-13 06:57 . 2004-08-04 12:00 385024 ----a-w- c:\windows\system32\html.iec
2013-10-12 15:56 . 2004-08-04 12:00 278528 ----a-w- c:\windows\system32\oakley.dll
2013-10-09 13:12 . 2004-08-04 12:00 287744 ----a-w- c:\windows\system32\gdi32.dll
2013-10-07 10:59 . 2004-08-04 12:00 603136 ----a-w- c:\windows\system32\crypt32.dll
2013-10-05 01:14 . 2009-04-15 18:28 7168 ----a-w- c:\windows\system32\xpsp4res.dll
2013-09-03 21:35 . 2009-11-29 19:38 238872 ------w- c:\windows\system32\MpSigStub.exe
2013-08-29 01:31 . 2004-08-04 12:00 1878656 ----a-w- c:\windows\system32\win32k.sys
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2013-05-15 39408]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2012-10-25 421888]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2013-08-12 995176]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"DWQueuedReporting"="c:\progra~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" [2007-02-26 437160]
.
c:\documents and settings\All Users\Start Menu\Programs\Startup\
D-Link AirPlus.lnk - c:\program files\D-Link AirPlus\AirPlus.exe [2013-8-22 262144]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 0 (0x0)
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2011-07-19 113024]
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
[HKLM\~\startupfolder\C:^Documents and Settings^Compaq_Owner^Start Menu^Programs^Startup^ERUNT AutoBackup.lnk]
backup=c:\windows\pss\ERUNT AutoBackup.lnkStartup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2013-05-11 10:37 958576 ----a-w- c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\APSDaemon]
2012-10-12 05:56 59280 ----a-w- c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe]
2008-04-14 00:12 15360 ----a-w- c:\windows\system32\ctfmon.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
2009-04-20 01:52 133104 ----atw- c:\documents and settings\Compaq_Owner\Local Settings\Application Data\Google\Update\GoogleUpdate.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\googletalk]
2007-01-01 21:22 3739648 ----a-w- c:\program files\Google\Google Talk\googletalk.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HPBootOp]
2005-02-26 05:34 245760 ----a-w- c:\program files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
2011-10-10 02:06 421736 ----a-w- c:\program files\iTunes\iTunesHelper.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LifeCam]
2007-05-17 21:45 279912 ----a-w- c:\program files\Microsoft LifeCam\LifeExp.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
2008-04-14 00:12 1695232 ----a-w- c:\program files\Messenger\msmsgs.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2012-10-25 11:12 421888 ----a-w- c:\program files\QuickTime\QTTask.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
2013-08-28 21:47 1811880 ----a-w- c:\program files\Steam\Steam.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2009-06-22 05:53 148888 ----a-w- c:\program files\Java\jre6\bin\jusched.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SUPERAntiSpyware]
2013-08-30 07:50 5703920 ----a-w- c:\program files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
2013-05-15 03:57 39408 ----a-w- c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VX3000]
2009-06-27 01:21 757248 ----a-w- c:\windows\vVX3000.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"Application Updater"=2 (0x2)
"AdvancedSystemCareService"=2 (0x2)
"SvcOnlineArmor"=2 (0x2)
"OAcat"=2 (0x2)
"AOL ACS"=2 (0x2)
"TuneUp.UtilitiesSvc"=2 (0x2)
"MBAMService"=2 (0x2)
"MBAMScheduler"=2 (0x2)
"wuauserv"=2 (0x2)
"WMPNetworkSvc"=3 (0x3)
"ose"=3 (0x3)
"MSCamSvc"=2 (0x2)
"MozillaMaintenance"=3 (0x3)
"MDM"=2 (0x2)
"JavaQuickStarterService"=2 (0x2)
"iPod Service"=3 (0x3)
"IntuitUpdateService"=2 (0x2)
"idsvc"=3 (0x3)
"gusvc"=3 (0x3)
"Bonjour Service"=2 (0x2)
"Ati HotKey Poller"=2 (0x2)
"Apple Mobile Device"=2 (0x2)
"AgereModemAudio"=2 (0x2)
"AdvancedSystemCareService5"=2 (0x2)
"AdobeFlashPlayerUpdateSvc"=3 (0x3)
"!SASCORE"=2 (0x2)
"gupdatem"=3 (0x3)
"AdvancedSystemCareService6"=2 (0x2)
"ASCAntivirusSrv"=2 (0x2)
"gupdate"=2 (0x2)
"BrowserProtect"=2 (0x2)
"SkypeUpdate"=2 (0x2)
"bonanzadealslivem"=3 (0x3)
"bonanzadealslive"=2 (0x2)
"Steam Client Service"=3 (0x3)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
.
R1 MpKslc2b821c6;MpKslc2b821c6;c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{331A02AC-89A5-420B-8BFE-492ED3BA830C}\MpKslc2b821c6.sys [11/17/2013 1:56 AM 40392]
R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\sasdifsv.sys [7/22/2011 8:27 AM 12880]
R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [7/12/2011 1:55 PM 67664]
S4 !SASCORE;SAS Core Service;c:\program files\SUPERAntiSpyware\SASCore.exe [7/11/2012 10:54 AM 116608]
S4 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [2/28/2013 5:45 PM 161384]
.
--- Other Services/Drivers In Memory ---
.
*NewlyCreated* - 66714048
*NewlyCreated* - MPKSLC2B821C6
*NewlyCreated* - TRUESIGHT
*Deregistered* - 66714048
*Deregistered* - TrueSight
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-11-16 05:00 1210320 ----a-w- c:\program files\Google\Chrome\Application\31.0.1650.57\Installer\chrmstp.exe
.
Contents of the 'Scheduled Tasks' folder
.
2013-11-17 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-09-21 02:30]
.
2013-11-12 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2011-06-02 01:57]
.
2013-11-17 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2013-03-24 19:58]
.
2013-11-17 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2013-03-24 19:58]
.
2013-11-17 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1380244137-392426934-3096447715-1009Core.job
- c:\documents and settings\Compaq_Owner\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2009-04-20 01:52]
.
2013-11-17 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1380244137-392426934-3096447715-1009UA.job
- c:\documents and settings\Compaq_Owner\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2009-04-20 01:52]
.
2013-11-17 c:\windows\Tasks\Microsoft Antimalware Scheduled Scan.job
- c:\program files\Microsoft Security Client\MpCmdRun.exe [2013-08-12 18:12]
.
2013-11-17 c:\windows\Tasks\User_Feed_Synchronization-{0698E0CD-E2C7-4082-A0A9-67A5B9C13408}.job
- c:\windows\system32\msfeedssync.exe [2006-10-17 11:31]
.
2013-11-17 c:\windows\Tasks\User_Feed_Synchronization-{C5695E00-1FBC-4D03-B0B0-1F000C5D1108}.job
- c:\windows\system32\msfeedssync.exe [2006-10-17 11:31]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://hotmail.com/
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
uInternet Settings,ProxyOverride = <local>;*.local
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
Trusted Zone: clonewarsadventures.com
Trusted Zone: freerealms.com
Trusted Zone: intuit.com\ttlc
Trusted Zone: soe.com
Trusted Zone: sony.com
DPF: {FA5369ED-D19A-434C-8F59-EE90D690D36C} - hxxps://secure.logmein.com/activex/RACtrl.cab
FF - ProfilePath - c:\documents and settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\ahl565id.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.tonthat-tonnu.blogspot.com/
.
- - - - ORPHANS REMOVED - - - -
.
SafeBoot-70357343.sys
MSConfigStartUp-Advanced SystemCare 6 - c:\program files\IObit\Advanced SystemCare 6\ASCTray.exe
MSConfigStartUp-SpybotSD TeaTimer - c:\program files\Spybot - Search & Destroy\TeaTimer.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2013-11-17 14:09
Windows 5.1.2600 Service Pack 3 NTFS
.
scanning hidden processes ...
.
scanning hidden autostart entries ...
.
scanning hidden files ...
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil32_11_5_502_135_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil32_11_5_502_135_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
--------------------- DLLs Loaded Under Running Processes ---------------------
.
- - - - - - - > 'winlogon.exe'(588)
c:\windows\system32\Ati2evxx.dll
.
Completion time: 2013-11-17 14:15:18
ComboFix-quarantined-files.txt 2013-11-17 22:15
ComboFix2.txt 2013-10-31 20:39
.
Pre-Run: 38,877,016,064 bytes free
Post-Run: 39,759,773,696 bytes free
.
- - End Of File - - 156DBBAFB2D48F66E6B1DD3396EE0528
0AC6D996BCE152AED9600E6D6B797E2E

Edited by KtC Angel of Peace, 17 November 2013 - 04:18 PM.

[Advertisements]

Logs attached. Icons are still present on the desktop so that is a yay.

I have noticed something else though. The computer seems to be running fine when offline, but as soon as I connect it to the internet, it starts to become a little choppy. Also, the CPU Usage always seems to be maxed, even now, as I am typing this, the CPU usage is at 100%.

[KtC Angel of Peace]

Logs attached. Icons are still present on the desktop so that is a yay.

I have noticed something else though. The computer seems to be running fine when offline, but as soon as I connect it to the internet, it starts to become a little choppy. Also, the CPU Usage always seems to be maxed, even now, as I am typing this, the CPU usage is at 100%.

[godawgs]

Now that we have hopefully killed all of the rootkits let's get some fresh OTL and FRST scans.


Step-1.

OTL Scan

Please re-open on the desktop. To do that:

• XP users: Double click the OTL icon.
• You will see a console like the one below:
  
  
  
  
• At the top of the console, click the box beside Scan All Users
• Make sure the Output box at the top is set to Standard Output.
• In the Extra Registry section click the circle beside Use Safelist.<---Very Important
• Click the box beside LOP Check and Purity Check
• Click the button. Do not change any settings unless otherwise told to do so.
• Let the scan run uninterrupted.
• When the scan completes, it will open two notepad windows, OTL.Txt will open on the desktop and Extras.Txt will be minimized on the taskbar. These are saved in the same location as OTL.
• Please copy the contents of these files, one at a time, and paste them into your reply. To do that:
• On the .txt file Menu Bar click Edit then click Select All. This will highlight the contents of the file. Then click Copy.
• Right-click inside the forum post window then click Paste. This will paste the contents of the .txt file in the in the post window.

Repeat for the Extras.txt file


Step-2.

Fabar Recovery Scan

Close all open Windows and browsers

• Double-click the FRST.exe file to run it.
• When the tool opens click Yes to disclaimer.
• Under the Optional Scan section click the box next to Addition.txt<---Very Important
• Press Scan button.
• It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
• It will also make another log (Addition.txt). Please copy and paste it into your reply.

Step-3.

Things For Your Next Post:
Please post the logs in the order requested. Do Not attach the logs unless I request it.
1. The new OTL.txt log
2. The Extras.txt log
3. The FRST.txt log
4. The Addition.txt log

[KtC Angel of Peace]

OTL logfile created on: 11/17/2013 5:01:01 PM - Run 6
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Documents and Settings\Compaq_Owner\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

2.19 Gb Total Physical Memory | 1.66 Gb Available Physical Memory | 76.13% Memory free
4.22 Gb Paging File | 3.94 Gb Available in Paging File | 93.35% Paging File free
Paging file location(s): C:\pagefile.sys 0 0 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 68.01 Gb Total Space | 37.04 Gb Free Space | 54.47% Space Free | Partition Type: NTFS
Drive D: | 6.50 Gb Total Space | 1.45 Gb Free Space | 22.29% Space Free | Partition Type: FAT32

Computer Name: YOUR-27E1513D96 | User Name: Compaq_Owner | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2013/10/30 09:39:06 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Compaq_Owner\Desktop\OTL.exe
PRC - [2013/08/12 10:12:38 | 000,022,208 | ---- | M] (Microsoft Corporation) -- c:\Program Files\Microsoft Security Client\MsMpEng.exe
PRC - [2013/08/12 10:11:20 | 000,995,176 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Security Client\msseces.exe
PRC - [2008/04/13 16:12:19 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe


========== Modules (No Company Name) ==========


========== Services (SafeList) ==========

SRV - File not found [Disabled | Stopped] -- %SystemRoot%\System32\hidserv.dll -- (HidServ)
SRV - File not found [On_Demand | Stopped] -- %SystemRoot%\System32\appmgmts.dll -- (AppMgmt)
SRV - [2013/11/07 20:40:49 | 000,119,408 | ---- | M] (Mozilla Foundation) [Disabled | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2013/08/12 10:12:38 | 000,022,208 | ---- | M] (Microsoft Corporation) [Auto | Running] -- c:\Program Files\Microsoft Security Client\MsMpEng.exe -- (MsMpSvc)
SRV - [2013/03/28 18:30:00 | 000,253,656 | ---- | M] (Adobe Systems Incorporated) [Disabled | Stopped] -- C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2013/02/28 17:45:16 | 000,161,384 | R--- | M] (Skype Technologies) [Disabled | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2012/11/19 16:03:24 | 000,489,256 | ---- | M] (Valve Corporation) [Disabled | Stopped] -- C:\Program Files\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2012/07/11 10:54:49 | 000,116,608 | ---- | M] (SUPERAntiSpyware.com) [Disabled | Stopped] -- C:\Program Files\SUPERAntiSpyware\SASCore.exe -- (!SASCORE)
SRV - [2010/08/23 20:21:40 | 000,013,672 | ---- | M] (Intuit Inc.) [Disabled | Stopped] -- C:\Program Files\Common Files\Intuit\Update Service\IntuitUpdateService.exe -- (IntuitUpdateService)
SRV - [2009/03/27 21:10:56 | 000,014,336 | ---- | M] (LSI Corporation) [Disabled | Stopped] -- C:\Program Files\LSI SoftModem\agrsmsvc.exe -- (AgereModemAudio)
SRV - [2007/05/17 13:45:33 | 000,271,720 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Microsoft LifeCam\MSCamS32.exe -- (MSCamSvc)


========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump)
DRV - File not found [Kernel | On_Demand | Unknown] -- C:\ComboFix\mbr.sys -- (mbr)
DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt)
DRV - File not found [Kernel | System | Stopped] -- -- (Changer)
DRV - File not found [Kernel | On_Demand | Running] -- C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\catchme.sys -- (catchme)
DRV - [2013/11/17 14:25:50 | 000,040,392 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- c:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{44B1BC31-9123-4499-BC21-80C6BD6FF320}\MpKsl0d651710.sys -- (MpKsl0d651710)
DRV - [2011/07/22 08:27:02 | 000,012,880 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\sasdifsv.sys -- (SASDIFSV)
DRV - [2011/07/12 13:55:22 | 000,067,664 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS -- (SASKUTIL)
DRV - [2009/08/13 14:07:12 | 001,163,328 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AGRSM.sys -- (AgereSoftModem)
DRV - [2009/06/26 17:21:02 | 001,956,352 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\VX3000.sys -- (VX3000)
DRV - [2009/03/27 00:16:28 | 000,012,672 | ---- | M] (Windows ® Codename Longhorn DDK provider) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\cpuz132_x32.sys -- (cpuz132)
DRV - [2009/03/25 06:29:52 | 000,130,432 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtnicxp.sys -- (RTL8023xp)
DRV - [2006/11/28 15:30:40 | 000,094,480 | ---- | M] (Trend Micro Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\tmcomm.sys -- (tmcomm)
DRV - [2005/06/07 21:44:36 | 001,235,968 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag)
DRV - [2005/04/20 10:00:56 | 002,317,696 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ALCXWDM.SYS -- (ALCXWDM)
DRV - [2005/04/14 20:12:12 | 000,175,616 | ---- | M] (Promise Technology, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\ftsata2.sys -- (ftsata2)
DRV - [2005/03/09 13:53:00 | 000,036,352 | ---- | M] (Advanced Micro Devices) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\AmdK8.sys -- (AmdK8)
DRV - [2004/08/03 21:31:34 | 000,020,992 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\RTL8139.sys -- (rtl8139)
DRV - [2003/11/05 14:45:12 | 000,017,408 | ---- | M] (Promise Technology, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\bb-run.sys -- (bb-run)
DRV - [2003/09/08 15:06:36 | 000,255,360 | ---- | M] (D-Link) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\AIRPLUS.sys -- (AIRPLUS)
DRV - [2003/07/29 15:57:20 | 000,040,448 | ---- | M] (DeviceGuys, Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\DGIVECP.SYS -- (DgiVecp)
DRV - [2003/01/10 13:13:04 | 000,033,588 | ---- | M] (America Online, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\wanatw4.sys -- (wanatw)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...ms}&FORM=IE8SRC


IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.h...arm1=seconduser
IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.h...arm1=seconduser
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.h...arm1=seconduser
IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.h...arm1=seconduser
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-1380244137-392426934-3096447715-1009\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1
IE - HKU\S-1-5-21-1380244137-392426934-3096447715-1009\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = Google
IE - HKU\S-1-5-21-1380244137-392426934-3096447715-1009\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = http://www.google.co...ie=utf8&oe=utf8
IE - HKU\S-1-5-21-1380244137-392426934-3096447715-1009\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://hotmail.com/
IE - HKU\S-1-5-21-1380244137-392426934-3096447715-1009\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us
IE - HKU\S-1-5-21-1380244137-392426934-3096447715-1009\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKU\S-1-5-21-1380244137-392426934-3096447715-1009\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKU\S-1-5-21-1380244137-392426934-3096447715-1009\..\SearchScopes,DefaultScope = Yahoo!
IE - HKU\S-1-5-21-1380244137-392426934-3096447715-1009\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...rc=IE-SearchBox
IE - HKU\S-1-5-21-1380244137-392426934-3096447715-1009\..\SearchScopes\{50ACC877-B37C-4AE4-9077-409A9678BCDB}: "URL" = http://www.bing.com/...rc=IE-SearchBox
IE - HKU\S-1-5-21-1380244137-392426934-3096447715-1009\..\SearchScopes\Yahoo!: "URL" = http://search.yahoo....p={searchTerms}
IE - HKU\S-1-5-21-1380244137-392426934-3096447715-1009\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-1380244137-392426934-3096447715-1009\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>;*.local

========== FireFox ==========

FF - prefs.js..browser.search.param.yahoo-fr: ""
FF - prefs.js..browser.startup.homepage: "http://www.tonthat-t....blogspot.com/"
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:25.0
FF - user.js - File not found

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_6_602_180.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/GoogleTalkPlugin: C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\plugins\npgoogletalk.dll (Google)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/O1DPlugin: C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\plugins\npo1d.dll (Google)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/O3DPlugin: C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\plugins\npgtpo3dautoplugin.dll ()
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 25.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2013/11/07 20:35:58 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 25.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2013/11/07 20:36:51 | 000,000,000 | ---D | M]

[2011/05/20 17:37:05 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Extensions
[2013/11/07 12:45:52 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\ahl565id.default\extensions
[2006/01/28 19:28:07 | 000,000,000 | ---D | M] ("Adblock") -- C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\ahl565id.default\extensions\{34274bf4-1d97-a289-e984-17e546307e4f}
[2006/01/28 19:28:07 | 000,000,000 | ---D | M] ("Adblock Filterset.G Updater") -- C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\ahl565id.default\extensions\filtersetg@updater
[2013/11/07 20:36:09 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\Extensions
[2013/11/07 20:35:48 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\browser\extensions
[2013/11/07 20:40:58 | 000,000,000 | ---D | M] (Default) -- C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter},
CHR - homepage: http://www.google.com
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files\Google\Chrome\Application\31.0.1650.57\PepperFlash\pepflashplayer.dll
CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files\Google\Chrome\Application\31.0.1650.57\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files\Google\Chrome\Application\31.0.1650.57\pdf.dll
CHR - plugin: Google Talk Plugin (Enabled) = C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\plugins\npgoogletalk.dll
CHR - plugin: Google Talk Plugin Video Accelerator (Enabled) = C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\plugins\npgtpo3dautoplugin.dll
CHR - plugin: Google Talk Plugin Video Renderer (Enabled) = C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\plugins\npo1d.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll
CHR - plugin: Java™ Platform SE 6 U13 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npdeploytk.dll
CHR - plugin: Java™ Platform SE 6 U13 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
CHR - plugin: DivX Web Player (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npdivx32.dll
CHR - plugin: DivX Player Netscape Plugin (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npDivxPlayerPlugin.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin7.dll
CHR - plugin: Microsoft DRM (Enabled) = C:\Program Files\Windows Media Player\npdrmv2.dll
CHR - plugin: Windows Media Player Plug-in Dynamic Link Library (Enabled) = C:\Program Files\Windows Media Player\npdsplay.dll
CHR - plugin: Microsoft DRM (Enabled) = C:\Program Files\Windows Media Player\npwmsdrm.dll
CHR - plugin: Google Update (Enabled) = C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Google\Update\1.3.21.135\npGoogleUpdate3.dll
CHR - plugin: Picasa (Enabled) = C:\Program Files\Google\Picasa3\npPicasa3.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_4_402_278.dll
CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll
CHR - plugin: Windows Presentation Foundation (Enabled) = c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
CHR - Extension: Google Wallet = C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\

O1 HOSTS File: ([2013/11/17 14:09:32 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.9012.1008\swg.dll (Google Inc.)
O4 - HKLM..\Run: [MSC] c:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\D-Link AirPlus.lnk = C:\Program Files\D-Link AirPlus\AIRPLUS.EXE (D-Link)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-1380244137-392426934-3096447715-1009\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-1380244137-392426934-3096447715-1009\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-21-1380244137-392426934-3096447715-1009\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 0
O7 - HKU\S-1-5-21-1380244137-392426934-3096447715-1009\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1
O7 - HKU\S-1-5-21-1380244137-392426934-3096447715-1009\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-21-1380244137-392426934-3096447715-1009\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\WINDOWS\system32\nwprovau.dll (Microsoft Corporation)
O15 - HKU\.DEFAULT\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites)
O15 - HKU\.DEFAULT\..Trusted Domains: freerealms.com ([]* in Trusted sites)
O15 - HKU\.DEFAULT\..Trusted Domains: soe.com ([]* in Trusted sites)
O15 - HKU\.DEFAULT\..Trusted Domains: sony.com ([]* in Trusted sites)
O15 - HKU\S-1-5-18\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites)
O15 - HKU\S-1-5-18\..Trusted Domains: freerealms.com ([]* in Trusted sites)
O15 - HKU\S-1-5-18\..Trusted Domains: soe.com ([]* in Trusted sites)
O15 - HKU\S-1-5-18\..Trusted Domains: sony.com ([]* in Trusted sites)
O15 - HKU\S-1-5-19\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites)
O15 - HKU\S-1-5-19\..Trusted Domains: freerealms.com ([]* in Trusted sites)
O15 - HKU\S-1-5-19\..Trusted Domains: soe.com ([]* in Trusted sites)
O15 - HKU\S-1-5-19\..Trusted Domains: sony.com ([]* in Trusted sites)
O15 - HKU\S-1-5-20\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites)
O15 - HKU\S-1-5-20\..Trusted Domains: freerealms.com ([]* in Trusted sites)
O15 - HKU\S-1-5-20\..Trusted Domains: soe.com ([]* in Trusted sites)
O15 - HKU\S-1-5-20\..Trusted Domains: sony.com ([]* in Trusted sites)
O15 - HKU\S-1-5-21-1380244137-392426934-3096447715-1009\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites)
O15 - HKU\S-1-5-21-1380244137-392426934-3096447715-1009\..Trusted Domains: freerealms.com ([]* in Trusted sites)
O15 - HKU\S-1-5-21-1380244137-392426934-3096447715-1009\..Trusted Domains: intuit.com ([ttlc] https in Trusted sites)
O15 - HKU\S-1-5-21-1380244137-392426934-3096447715-1009\..Trusted Domains: soe.com ([]* in Trusted sites)
O15 - HKU\S-1-5-21-1380244137-392426934-3096447715-1009\..Trusted Domains: sony.com ([]* in Trusted sites)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://www.update.mi...b?1347249211515 (WUWebControl Class)
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://www.update.mi...b?1342583561093 (MUWebControl Class)
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset...lineScanner.cab (Reg Error: Key error.)
O16 - DPF: {CB97291A-6603-466A-AA11-80C2EB74CB10} https://install.cox....InstallAx10.ocx (CoxSelfInstallAx10 Control)
O16 - DPF: {FA5369ED-D19A-434C-8F59-EE90D690D36C} https://secure.logme...ivex/RACtrl.cab (Chat Activex Control)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - (Ati2evxx.dll) - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2005/06/24 21:32:00 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2001/07/28 07:07:38 | 000,000,000 | -HS- | M] () - D:\AUTOEXEC.BAT -- [ FAT32 ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

========== Files/Folders - Created Within 30 Days ==========

[2013/11/17 13:34:52 | 005,146,587 | R--- | C] (Swearware) -- C:\Documents and Settings\Compaq_Owner\Desktop\ComboFix.exe
[2013/11/17 12:48:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Compaq_Owner\Desktop\RK_Quarantine
[2013/11/16 23:07:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Compaq_Owner\Desktop\New Folder (3)
[2013/11/15 17:37:20 | 000,000,000 | ---D | C] -- C:\TDSSKiller_Quarantine
[2013/11/15 17:29:30 | 004,121,440 | ---- | C] (Kaspersky Lab ZAO) -- C:\Documents and Settings\Compaq_Owner\Desktop\tdsskiller.exe
[2013/11/07 20:36:21 | 000,110,080 | ---- | C] (Thomas Hoen - T-Tools) -- C:\Documents and Settings\Compaq_Owner\Desktop\BitRemover.exe
[2013/11/07 20:35:43 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[2013/11/07 12:42:51 | 001,034,531 | ---- | C] (Thisisu) -- C:\Documents and Settings\Compaq_Owner\Desktop\JRT.exe
[2013/11/07 12:38:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Compaq_Owner\Desktop\SS Storage
[2013/11/07 01:00:19 | 011,227,472 | ---- | C] (Microsoft Corporation) -- C:\Documents and Settings\Compaq_Owner\Desktop\mseinstall.exe
[2013/11/06 04:43:35 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\MRT
[2013/11/05 14:28:13 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hidparse.sys
[2013/11/05 14:28:13 | 000,014,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\usbscan.sys
[2013/11/05 14:09:28 | 000,012,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\usb8023x.sys
[2013/11/05 14:09:28 | 000,012,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\usb8023.sys
[2013/11/05 14:08:11 | 000,060,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\usbaudio.sys
[2013/11/05 14:08:10 | 000,123,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\usbvideo.sys
[2013/11/05 14:02:03 | 000,032,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\usbccgp.sys
[2013/11/05 14:02:03 | 000,030,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\usbehci.sys
[2013/11/05 14:02:03 | 000,005,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\usbd.sys
[2013/11/05 14:02:02 | 000,144,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\usbport.sys
[2013/11/05 12:31:04 | 000,359,085 | ---- | C] (Farbar) -- C:\Documents and Settings\Compaq_Owner\Desktop\FSS.exe
[2013/11/03 21:28:42 | 010,285,040 | ---- | C] (Malwarebytes Corporation ) -- C:\Documents and Settings\Compaq_Owner\Desktop\mbam-setup-1.75.0.1300.exe
[2013/11/01 13:46:23 | 000,000,000 | ---D | C] -- C:\AdwCleaner
[2013/11/01 13:30:56 | 000,000,000 | ---D | C] -- C:\_OTL
[2013/10/31 10:48:11 | 000,000,000 | RHSD | C] -- C:\cmdcons
[2013/10/31 10:39:11 | 000,518,144 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe
[2013/10/31 10:39:11 | 000,406,528 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe
[2013/10/31 10:39:11 | 000,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe
[2013/10/31 10:39:11 | 000,060,416 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe
[2013/10/31 10:34:40 | 000,000,000 | ---D | C] -- C:\Qoobox
[2013/10/30 14:42:37 | 004,745,728 | ---- | C] (AVAST Software) -- C:\Documents and Settings\Compaq_Owner\Desktop\iexplore.exe
[2013/10/30 14:39:06 | 000,000,000 | ---D | C] -- C:\FRST
[2013/10/30 14:38:54 | 001,089,275 | ---- | C] (Farbar) -- C:\Documents and Settings\Compaq_Owner\Desktop\FRST.exe
[2013/10/30 09:39:04 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Compaq_Owner\Desktop\OTL.exe

========== Files - Modified Within 30 Days ==========

[2013/11/17 17:06:01 | 000,001,006 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1380244137-392426934-3096447715-1009UA.job
[2013/11/17 17:05:00 | 000,000,438 | -H-- | M] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{C5695E00-1FBC-4D03-B0B0-1F000C5D1108}.job
[2013/11/17 16:53:00 | 000,000,886 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2013/11/17 16:47:00 | 000,000,830 | ---- | M] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job
[2013/11/17 14:17:59 | 000,000,436 | -H-- | M] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{0698E0CD-E2C7-4082-A0A9-67A5B9C13408}.job
[2013/11/17 14:15:26 | 000,000,896 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2013/11/17 14:09:32 | 000,000,027 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2013/11/17 13:35:16 | 005,146,587 | R--- | M] (Swearware) -- C:\Documents and Settings\Compaq_Owner\Desktop\ComboFix.exe
[2013/11/17 12:47:55 | 003,679,744 | ---- | M] () -- C:\Documents and Settings\Compaq_Owner\Desktop\RogueKiller.exe
[2013/11/17 10:06:00 | 000,000,954 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1380244137-392426934-3096447715-1009Core.job
[2013/11/17 06:48:32 | 000,439,942 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2013/11/17 06:48:32 | 000,071,076 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2013/11/17 03:01:45 | 000,001,919 | ---- | M] () -- C:\WINDOWS\epplauncher.mif
[2013/11/17 01:52:31 | 000,000,384 | -H-- | M] () -- C:\WINDOWS\tasks\Microsoft Antimalware Scheduled Scan.job
[2013/11/16 23:10:20 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2013/11/16 22:56:06 | 000,001,158 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2013/11/15 22:23:44 | 000,150,899 | ---- | M] () -- C:\Documents and Settings\Compaq_Owner\Desktop\Report.JPG
[2013/11/15 21:29:53 | 000,001,821 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Google Chrome.lnk
[2013/11/15 17:29:47 | 004,121,440 | ---- | M] (Kaspersky Lab ZAO) -- C:\Documents and Settings\Compaq_Owner\Desktop\tdsskiller.exe
[2013/11/15 15:38:27 | 000,001,324 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat
[2013/11/14 12:17:53 | 000,170,241 | ---- | M] () -- C:\Documents and Settings\Compaq_Owner\Desktop\Noted.JPG
[2013/11/13 23:27:29 | 000,001,393 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2013/11/12 12:31:02 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2013/11/12 07:43:17 | 000,208,725 | ---- | M] () -- C:\Documents and Settings\Compaq_Owner\Desktop\Again.JPG
[2013/11/12 07:38:23 | 000,981,532 | ---- | M] () -- C:\Documents and Settings\Compaq_Owner\Desktop\JRT.zip
[2013/11/10 14:51:46 | 001,034,531 | ---- | M] (Thisisu) -- C:\Documents and Settings\Compaq_Owner\Desktop\JRT.exe
[2013/11/07 20:36:12 | 000,110,080 | ---- | M] (Thomas Hoen - T-Tools) -- C:\Documents and Settings\Compaq_Owner\Desktop\BitRemover.exe
[2013/11/07 12:31:30 | 001,590,168 | ---- | M] () -- C:\Documents and Settings\Compaq_Owner\My Documents\Hà nam-2.jpg
[2013/11/07 12:26:20 | 002,227,475 | ---- | M] () -- C:\Documents and Settings\Compaq_Owner\My Documents\Ha nam - 1.jpg
[2013/11/07 01:01:13 | 011,227,472 | ---- | M] (Microsoft Corporation) -- C:\Documents and Settings\Compaq_Owner\Desktop\mseinstall.exe
[2013/11/07 00:59:21 | 000,023,596 | ---- | M] () -- C:\Documents and Settings\Compaq_Owner\Desktop\RemoteAccess.reg
[2013/11/06 10:35:43 | 000,243,128 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2013/11/05 12:31:52 | 000,891,184 | ---- | M] () -- C:\Documents and Settings\Compaq_Owner\Desktop\SecurityCheck.exe
[2013/11/05 12:31:09 | 000,359,085 | ---- | M] (Farbar) -- C:\Documents and Settings\Compaq_Owner\Desktop\FSS.exe
[2013/11/03 21:47:39 | 000,000,792 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Malwarebytes Anti-Malware.lnk
[2013/11/03 21:30:12 | 010,285,040 | ---- | M] (Malwarebytes Corporation ) -- C:\Documents and Settings\Compaq_Owner\Desktop\mbam-setup-1.75.0.1300.exe
[2013/11/01 14:12:08 | 000,000,512 | ---- | M] () -- C:\Documents and Settings\Compaq_Owner\Desktop\MBR.dat
[2013/11/01 13:29:30 | 001,060,070 | ---- | M] () -- C:\Documents and Settings\Compaq_Owner\Desktop\AdwCleaner.exe
[2013/10/31 11:45:59 | 000,000,027 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts.20131107-011505.backup
[2013/10/31 10:48:49 | 000,000,354 | RHS- | M] () -- C:\boot.ini
[2013/10/31 10:24:48 | 000,002,497 | ---- | M] () -- C:\Documents and Settings\Compaq_Owner\Desktop\Microsoft Office Word 2003.lnk
[2013/10/31 09:53:52 | 000,000,309 | ---- | M] () -- C:\Boot.bak
[2013/10/30 14:43:52 | 004,745,728 | ---- | M] (AVAST Software) -- C:\Documents and Settings\Compaq_Owner\Desktop\iexplore.exe
[2013/10/30 14:38:54 | 001,089,275 | ---- | M] (Farbar) -- C:\Documents and Settings\Compaq_Owner\Desktop\FRST.exe
[2013/10/30 09:39:06 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Compaq_Owner\Desktop\OTL.exe
[2013/10/27 18:14:49 | 000,686,112 | ---- | M] () -- C:\Documents and Settings\Compaq_Owner\Desktop\8 cong viec-1.jpg
[2013/10/26 10:34:04 | 000,002,187 | ---- | M] () -- C:\Documents and Settings\Compaq_Owner\Desktop\Safari.lnk
[2013/10/24 15:15:49 | 001,835,727 | ---- | M] () -- C:\Documents and Settings\Compaq_Owner\My Documents\lam ban.mht
[2013/10/23 16:34:57 | 010,519,118 | ---- | M] () -- C:\Documents and Settings\Compaq_Owner\My Documents\Untitled-Scanned-01.jpg

========== Files Created - No Company Name ==========

[2013/11/17 12:47:56 | 003,679,744 | ---- | C] () -- C:\Documents and Settings\Compaq_Owner\Desktop\RogueKiller.exe
[2013/11/15 22:23:44 | 000,150,899 | ---- | C] () -- C:\Documents and Settings\Compaq_Owner\Desktop\Report.JPG
[2013/11/14 12:17:52 | 000,170,241 | ---- | C] () -- C:\Documents and Settings\Compaq_Owner\Desktop\Noted.JPG
[2013/11/12 07:43:15 | 000,208,725 | ---- | C] () -- C:\Documents and Settings\Compaq_Owner\Desktop\Again.JPG
[2013/11/12 07:38:30 | 000,981,532 | ---- | C] () -- C:\Documents and Settings\Compaq_Owner\Desktop\JRT.zip
[2013/11/07 12:31:30 | 001,590,168 | ---- | C] () -- C:\Documents and Settings\Compaq_Owner\My Documents\Hà nam-2.jpg
[2013/11/07 12:26:19 | 002,227,475 | ---- | C] () -- C:\Documents and Settings\Compaq_Owner\My Documents\Ha nam - 1.jpg
[2013/11/07 02:13:04 | 000,001,706 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Microsoft Security Essentials.lnk
[2013/11/07 00:59:23 | 000,023,596 | ---- | C] () -- C:\Documents and Settings\Compaq_Owner\Desktop\RemoteAccess.reg
[2013/11/06 03:39:36 | 000,001,393 | ---- | C] () -- C:\WINDOWS\imsins.BAK
[2013/11/05 12:31:49 | 000,891,184 | ---- | C] () -- C:\Documents and Settings\Compaq_Owner\Desktop\SecurityCheck.exe
[2013/11/03 21:47:38 | 000,000,792 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Malwarebytes Anti-Malware.lnk
[2013/11/01 13:29:19 | 001,060,070 | ---- | C] () -- C:\Documents and Settings\Compaq_Owner\Desktop\AdwCleaner.exe
[2013/10/31 10:39:11 | 000,256,000 | ---- | C] () -- C:\WINDOWS\PEV.exe
[2013/10/31 10:39:11 | 000,208,896 | ---- | C] () -- C:\WINDOWS\MBR.exe
[2013/10/31 10:39:11 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe
[2013/10/31 10:39:11 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe
[2013/10/31 10:39:11 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe
[2013/10/30 15:12:04 | 000,000,512 | ---- | C] () -- C:\Documents and Settings\Compaq_Owner\Desktop\MBR.dat
[2013/10/27 18:14:49 | 000,686,112 | ---- | C] () -- C:\Documents and Settings\Compaq_Owner\Desktop\8 cong viec-1.jpg
[2013/10/24 15:15:43 | 001,835,727 | ---- | C] () -- C:\Documents and Settings\Compaq_Owner\My Documents\lam ban.mht
[2013/08/22 16:46:05 | 000,040,636 | ---- | C] () -- C:\WINDOWS\System32\drivers\WLANGEN.bin
[2013/08/22 16:46:05 | 000,000,964 | ---- | C] () -- C:\WINDOWS\System32\drivers\RADIO11.bin
[2013/08/22 16:46:05 | 000,000,936 | ---- | C] () -- C:\WINDOWS\System32\drivers\RADIO0d.bin
[2013/05/19 14:49:14 | 000,243,128 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2013/03/27 22:33:46 | 000,000,262 | ---- | C] () -- C:\WINDOWS\{789289CA-F73A-4A16-A331-54D498CE069F}_WiseFW.ini
[2012/09/05 14:11:13 | 000,001,324 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2012/02/15 10:00:29 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll
[2010/05/20 18:14:30 | 000,000,931 | ---- | C] () -- C:\Documents and Settings\Compaq_Owner\CourseGrade.java
[2010/05/20 18:14:30 | 000,000,896 | ---- | C] () -- C:\Documents and Settings\Compaq_Owner\FileThing.java
[2010/05/20 18:14:30 | 000,000,607 | ---- | C] () -- C:\Documents and Settings\Compaq_Owner\Allstars.java
[2010/05/20 18:14:30 | 000,000,485 | ---- | C] () -- C:\Documents and Settings\Compaq_Owner\Restaurant.java
[2010/05/20 18:14:30 | 000,000,485 | ---- | C] () -- C:\Documents and Settings\Compaq_Owner\RandomInt.java
[2010/05/20 18:14:30 | 000,000,457 | ---- | C] () -- C:\Documents and Settings\Compaq_Owner\CGClient.java
[2010/05/20 18:14:30 | 000,000,343 | ---- | C] () -- C:\Documents and Settings\Compaq_Owner\Store.java
[2010/05/20 18:14:30 | 000,000,201 | ---- | C] () -- C:\Documents and Settings\Compaq_Owner\RestClient.java
[2006/10/02 20:12:56 | 006,553,600 | ---- | C] () -- C:\Documents and Settings\Compaq_Owner\NTUSER.bak
[2006/08/18 08:46:48 | 000,018,432 | ---- | C] () -- C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

========== ZeroAccess Check ==========

[2005/10/09 06:12:38 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shdocvw.dll -- [2008/04/13 16:12:05 | 001,499,136 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2009/02/09 04:10:48 | 000,473,600 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2008/04/13 16:12:08 | 000,273,920 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

========== LOP Check ==========

[2013/03/24 11:50:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\IObit
[2005/10/09 06:53:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\SampleView
[2013/03/24 11:33:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\1788674CF4E96A4E000017884FCD731C
[2013/08/22 15:37:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Cisco Systems
[2013/09/25 17:45:45 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Application Data\Common Files
[2013/03/24 11:51:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\IObit
[2006/01/05 16:04:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\MSScanAppDataDir
[2011/04/14 10:01:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Trusteer
[2011/11/18 20:40:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TuneUp Software
[2011/11/18 20:38:42 | 000,000,000 | -HSD | M] -- C:\Documents and Settings\All Users\Application Data\{32364CEA-7855-4A3C-B674-53D8E9B97936}
[2011/11/08 10:11:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2013/03/24 12:44:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{5A85B23A-4B58-47D1-9B9C-DFBD7866099F}
[2010/02/09 19:21:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{755AC846-7372-4AC8-8550-C52491DAA8BD}
[2013/03/24 11:50:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{CED89F1A-945F-46EC-B23C-5EAF6D2DB12A}
[2013/03/24 12:44:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{D76294E6-03B8-4971-AF2E-3F846161A690}
[2012/09/16 12:28:59 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\541CB68B
[2009/09/04 16:26:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\Aim
[2013/11/07 12:31:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\Canon
[2007/09/16 20:34:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\Costco Photo Viewer
[2007/11/01 21:01:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\CoxFastConnect20
[2011/11/18 21:09:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\ElevatedDiagnostics
[2011/05/02 11:00:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\FixCleaner
[2010/07/24 06:37:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\Graphic.lyAir.524A3AB5801B9AE08DEEB1BA295EDE84BDC333F2.1
[2007/11/28 09:47:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\Image Zone Express
[2011/10/14 17:57:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\InterVideo
[2013/03/24 12:44:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\IObit
[2006/01/18 09:20:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\MSNInstaller
[2005/10/09 06:53:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\SampleView
[2013/03/26 03:55:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\Sony Online Entertainment
[2011/11/18 20:39:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\TuneUp Software
[2012/07/10 11:59:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\wtxpcom
[2005/10/09 06:53:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Default User\Application Data\SampleView
[2011/11/26 09:55:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Application Data\TuneUp Software

========== Purity Check ==========



========== Files - Unicode (All) ==========
[2013/11/15 18:35:47 | 000,134,144 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\C? hi?u bi?t thêm Trung Qu?c.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Cố hiểu biết thêm Trung Quốc.doc
[2013/11/12 09:59:18 | 000,000,162 | -H-- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\~$ phê , 20 di?u .....doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\~$ phê , 20 diều .....doc
[2013/11/12 09:59:18 | 000,000,162 | -H-- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\~$ phê , 20 di?u .....doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\~$ phê , 20 diều .....doc
[2013/11/12 09:59:15 | 000,000,162 | -H-- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\~$ phê Viêt Nam và thê gi?i.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\~$ phê Viêt Nam và thê giới.doc
[2013/11/12 09:59:15 | 000,000,162 | -H-- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\~$ phê Viêt Nam và thê gi?i.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\~$ phê Viêt Nam và thê giới.doc
[2013/11/12 09:59:14 | 000,000,162 | -H-- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\~$i gì m?i l? ? ngành compute qua dám mây.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\~$i gì mới lạ ở ngành compute qua đám mây.doc
[2013/11/12 09:59:14 | 000,000,162 | -H-- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\~$i gì m?i l? ? ngành compute qua dám mây.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\~$i gì mới lạ ở ngành compute qua đám mây.doc
[2013/11/12 09:59:06 | 000,000,162 | -H-- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\~$o+B?ng[1].doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\~$o+Bằng[1].doc
[2013/11/12 09:59:06 | 000,000,162 | -H-- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\~$o+B?ng[1].doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\~$o+Bằng[1].doc
[2013/11/12 09:59:04 | 000,000,162 | -H-- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\~$p nh?t vài hi?u bi?t ti?n b? Khoa h?c.doc -2.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\~$p nhật vài hiểu biết tiến bộ Khoa học.doc -2.doc
[2013/11/12 09:59:04 | 000,000,162 | -H-- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\~$p nh?t vài hi?u bi?t ti?n b? Khoa h?c.doc -2.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\~$p nhật vài hiểu biết tiến bộ Khoa học.doc -2.doc
[2013/11/12 09:59:01 | 000,000,162 | -H-- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\~$p nh?t cho nam 2010 v? tài nang son tr? sáng chói khoa h?c k? thu?t Hoa K?.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\~$p nhật cho năm 2010 về tài năng son trẻ sáng chói khoa học kỷ thuật Hoa Kỳ.doc
[2013/11/12 09:59:01 | 000,000,162 | -H-- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\~$p nh?t cho nam 2010 v? tài nang son tr? sáng chói khoa h?c k? thu?t Hoa K?.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\~$p nhật cho năm 2010 về tài năng son trẻ sáng chói khoa học kỷ thuật Hoa Kỳ.doc
[2013/11/12 09:58:59 | 000,000,162 | -H-- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\~$P NHAT CONG NGHE SINH H?C vn.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\~$P NHAT CONG NGHE SINH HỌC vn.doc
[2013/11/12 09:58:59 | 000,000,162 | -H-- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\~$P NHAT CONG NGHE SINH H?C vn.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\~$P NHAT CONG NGHE SINH HỌC vn.doc
[2013/11/12 09:58:58 | 000,000,162 | -H-- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\~$p nh?t hi?u bi?t Khoa h?c k? thu?t.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\~$p nhật hiểu biết Khoa học kỷ thuật.doc
[2013/11/12 09:58:58 | 000,000,162 | -H-- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\~$p nh?t hi?u bi?t Khoa h?c k? thu?t.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\~$p nhật hiểu biết Khoa học kỷ thuật.doc
[2013/11/12 09:58:55 | 000,000,162 | -H-- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\~$p nh?t hi?u bi?t v? khoa h?c th?n kinh.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\~$p nhật hiểu biết về khoa học thần kinh.doc
[2013/11/12 09:58:55 | 000,000,162 | -H-- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\~$p nh?t hi?u bi?t v? khoa h?c th?n kinh.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\~$p nhật hiểu biết về khoa học thần kinh.doc
[2013/11/12 09:58:50 | 000,000,162 | -H-- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\~$p nh?t hi?u bi?t v? k? thu?t nanô.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\~$p nhật hiểu biết về kỷ thuật nanô.doc
[2013/11/12 09:58:50 | 000,000,162 | -H-- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\~$p nh?t hi?u bi?t v? k? thu?t nanô.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\~$p nhật hiểu biết về kỷ thuật nanô.doc
[2013/11/12 09:58:48 | 000,000,162 | -H-- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\~$p nh?t hi?u bi?t v? phát tri?n ? Nh?t B?n ngày nay.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\~$p nhật hiểu biết về phát triễn ở Nhật Bổn ngày nay.doc
[2013/11/12 09:58:48 | 000,000,162 | -H-- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\~$p nh?t hi?u bi?t v? phát tri?n ? Nh?t B?n ngày nay.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\~$p nhật hiểu biết về phát triễn ở Nhật Bổn ngày nay.doc
[2013/11/12 09:58:47 | 000,000,162 | -H-- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\~$p nh?t moi hi?u bi?t khoa hoc ph? thông.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\~$p nhật moi hiểu biết khoa hoc phổ thông.doc
[2013/11/12 09:58:47 | 000,000,162 | -H-- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\~$p nh?t moi hi?u bi?t khoa hoc ph? thông.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\~$p nhật moi hiểu biết khoa hoc phổ thông.doc
[2013/11/12 09:58:46 | 000,000,162 | -H-- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\~$p nh?t quan di?m m?i v? di?n h?t nhân.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\~$p nhật quan điểm mới về điện hạt nhân.doc
[2013/11/12 09:58:46 | 000,000,162 | -H-- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\~$p nh?t quan di?m m?i v? di?n h?t nhân.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\~$p nhật quan điểm mới về điện hạt nhân.doc
[2013/11/12 09:58:41 | 000,000,162 | -H-- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\~$p nh?t ti?n b? khoa h?c Hoa K?.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\~$p nhật tiến bộ khoa học Hoa Kỳ.doc
[2013/11/12 09:58:41 | 000,000,162 | -H-- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\~$p nh?t ti?n b? khoa h?c Hoa K?.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\~$p nhật tiến bộ khoa học Hoa Kỳ.doc
[2013/11/12 09:58:39 | 000,000,162 | -H-- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\~$p nh?t vài hi?u bi?t ph? thông ti?n b? khoa h?c k? thuât th? gi?i.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\~$p nhật vài hiểu biết phổ thông tiến bộ khoa học kỷ thuât thế giới.doc
[2013/11/12 09:58:39 | 000,000,162 | -H-- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\~$p nh?t vài hi?u bi?t ph? thông ti?n b? khoa h?c k? thuât th? gi?i.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\~$p nhật vài hiểu biết phổ thông tiến bộ khoa học kỷ thuât thế giới.doc
[2013/11/12 09:58:36 | 000,000,162 | -H-- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\~$p nh?t v? nh?ng gi?ng dua gang tây.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\~$p nhật về những giống dưa gang tây.doc
[2013/11/12 09:58:36 | 000,000,162 | -H-- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\~$p nh?t v? nh?ng gi?ng dua gang tây.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\~$p nhật về những giống dưa gang tây.doc
[2013/11/12 09:58:31 | 000,000,162 | -H-- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\~$u l?c B? Rome.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\~$u lạc Bộ Rome.doc
[2013/11/12 09:58:31 | 000,000,162 | -H-- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\~$u l?c B? Rome.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\~$u lạc Bộ Rome.doc
[2013/11/12 09:58:24 | 000,000,162 | -H-- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\~$y c?i S?a d?i di truy?n.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\~$y cối Sửa đổi di truyền.doc
[2013/11/12 09:58:24 | 000,000,162 | -H-- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\~$y c?i S?a d?i di truy?n.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\~$y cối Sửa đổi di truyền.doc
[2013/11/12 09:58:09 | 000,000,162 | -H-- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\~$ât du?ng , ch?t ng?t.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\~$ât đường , chất ngọt.doc
[2013/11/12 09:58:09 | 000,000,162 | -H-- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\~$ât du?ng , ch?t ng?t.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\~$ât đường , chất ngọt.doc
[2013/11/12 09:58:07 | 000,000,162 | -H-- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\~$âu+M?+L...doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\~$âu+Mỹ+L...doc
[2013/11/12 09:58:07 | 000,000,162 | -H-- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\~$âu+M?+L...doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\~$âu+Mỹ+L...doc
[2013/11/12 09:58:05 | 000,000,162 | -H-- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\~$i?n tranh di?n t? E.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\~$iến tranh điện tử E.doc
[2013/11/12 09:58:05 | 000,000,162 | -H-- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\~$i?n tranh di?n t? E.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\~$iến tranh điện tử E.doc
[2013/11/12 09:58:03 | 000,000,162 | -H-- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\~$i?n tranh di?u khi?n h?c.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\~$iến tranh điều khiển học.doc
[2013/11/12 09:58:03 | 000,000,162 | -H-- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\~$i?n tranh di?u khi?n h?c.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\~$iến tranh điều khiển học.doc
[2013/11/12 09:58:02 | 000,000,162 | -H-- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\~$i?n tranh ngày mai.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\~$iến tranh ngày mai.doc
[2013/11/12 09:58:02 | 000,000,162 | -H-- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\~$i?n tranh ngày mai.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\~$iến tranh ngày mai.doc
[2013/11/12 09:57:29 | 000,000,162 | -H-- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\~$ cái gì l? gi?a nam 2013 ? ngành Khoa h?c K? thu?t Hoa K?.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\~$ cái gì lạ giữa năm 2013 ở ngành Khoa học Kỷ thuật Hoa Kỳ.doc
[2013/11/12 09:57:29 | 000,000,162 | -H-- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\~$ cái gì l? gi?a nam 2013 ? ngành Khoa h?c K? thu?t Hoa K?.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\~$ cái gì lạ giữa năm 2013 ở ngành Khoa học Kỷ thuật Hoa Kỳ.doc
[2013/11/12 09:57:28 | 000,000,162 | -H-- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\~$ cái gì m?i nam 2009 v? ti?n b? Khoa h?c.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\~$ cái gì mới năm 2009 về tiến bộ Khoa học.doc
[2013/11/12 09:57:28 | 000,000,162 | -H-- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\~$ cái gì m?i nam 2009 v? ti?n b? Khoa h?c.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\~$ cái gì mới năm 2009 về tiến bộ Khoa học.doc
[2013/11/12 09:57:26 | 000,000,162 | -H-- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\~$ gì dáng nói thêm v? nông nghi?p Hoa K? và Ca li nam 2013.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\~$ gì đáng nói thêm về nông nghiệp Hoa Kỳ và Ca li năm 2013.doc
[2013/11/12 09:57:26 | 000,000,162 | -H-- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\~$ gì dáng nói thêm v? nông nghi?p Hoa K? và Ca li nam 2013.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\~$ gì đáng nói thêm về nông nghiệp Hoa Kỳ và Ca li năm 2013.doc
[2013/11/12 09:57:24 | 000,000,162 | -H-- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\~$ hi?u bi?t thêm Trung Qu?c.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\~$ hiểu biết thêm Trung Quốc.doc
[2013/11/12 09:57:24 | 000,000,162 | -H-- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\~$ hi?u bi?t thêm Trung Qu?c.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\~$ hiểu biết thêm Trung Quốc.doc
[2013/11/07 17:07:01 | 000,141,824 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Trung Qu?c c?t cámh.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Trung Quốc cất cámh.doc
[2013/11/07 17:06:32 | 000,134,144 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\C? hi?u bi?t thêm Trung Qu?c.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Cố hiểu biết thêm Trung Quốc.doc
[2013/11/04 10:06:03 | 001,182,208 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Lich su - van hoa Nh?t.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Lich su - van hoa Nhật.doc
[2013/10/28 12:32:51 | 000,086,528 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\8 công an vi?c làm t? h?i nh?t và 3 vi d?i nh?t.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\8 công ăn việc làm tệ hại nhất và 3 vĩ đại nhất.doc
[2013/10/26 15:54:13 | 000,356,864 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Ph?n VI.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Phần VI.doc
[2013/10/26 15:44:40 | 000,199,680 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Phan V . Lich s?.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Phan V . Lich sủ.doc
[2013/10/25 15:59:57 | 000,050,176 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Vài b? m?t k? thu?t thay d?i hàng ngày ? Hoa K? t? 30 nam nay.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Vài bộ mặt kỷ thuật thay đổi hàng ngày ở Hoa Kỳ từ 30 năm nay.doc
[2013/10/25 15:59:46 | 000,086,528 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\8 công an vi?c làm t? h?i nh?t và 3 vi d?i nh?t.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\8 công ăn việc làm tệ hại nhất và 3 vĩ đại nhất.doc
[2013/10/24 10:00:06 | 000,159,232 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Th?t la bô.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Thịt la bô.doc
[2013/10/18 15:32:01 | 000,159,232 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Th?t la bô.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Thịt la bô.doc
[2013/10/18 15:29:51 | 000,116,224 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Th?c ph?m chi?u b?c x?.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Thực phẩm chiếu bức xạ.doc
[2013/10/17 10:11:10 | 000,078,848 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Nhà van Canada Alice Munro d?at gi?i Nobel van chuong 2013.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Nhà văn Canada Alice Munro đọat giải Nobel văn chương 2013.doc
[2013/10/16 15:35:00 | 000,053,760 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Ðe d?a kinh kh?ng cho vùng nhi?t d?i.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Đe dọa kinh khủng cho vùng nhiệt đới.doc
[2013/10/15 17:42:33 | 000,763,904 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Lich su van hóa Trung qu?c phan 1.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Lich su van hóa Trung quốc phan 1.doc
[2013/10/15 15:46:09 | 000,053,760 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Tuong lai môi sinh khi khí h?u thay d?i.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Tương lai môi sinh khi khí hậu thay đổi.doc
[2013/10/15 15:45:41 | 000,053,760 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Ðe d?a kinh kh?ng cho vùng nhi?t d?i.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Đe dọa kinh khủng cho vùng nhiệt đới.doc
[2013/10/15 13:03:36 | 000,058,880 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Gi?i thu?ng ki?n trúc Pritzker.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Giải thưởng kiến trúc Pritzker.doc
[2013/10/13 10:51:18 | 000,078,848 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Nhà van Canada Alice Munro d?at gi?i Nobel van chuong 2013.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Nhà văn Canada Alice Munro đọat giải Nobel văn chương 2013.doc
[2013/10/12 16:43:36 | 000,113,664 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Truy?n great Gastby.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Truyện great Gastby.doc
[2013/09/19 13:05:34 | 000,081,408 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\10 nhà khoa h?c và k? su l?i l?c Hoa K? nam 2013.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\10 nhà khoa học và kỷ sư lỗi lạc Hoa Kỳ năm 2013.doc
[2013/09/16 16:08:25 | 000,108,032 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\10 nhà kh?o c?u khoa h?c xu?t s?c.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\10 nhà khảo cứu khoa học xuất sắc.doc
[2013/09/16 16:08:12 | 000,081,408 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\10 nhà khoa h?c và k? su l?i l?c Hoa K? nam 2013.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\10 nhà khoa học và kỷ sư lỗi lạc Hoa Kỳ năm 2013.doc
[2013/09/15 16:20:48 | 000,046,080 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Cái gì m?i l? ? ngành compute qua dám mây.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Cái gì mới lạ ở ngành compute qua đám mây.doc
[2013/09/14 15:59:58 | 000,046,080 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Cái gì m?i l? ? ngành compute qua dám mây.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Cái gì mới lạ ở ngành compute qua đám mây.doc
[2013/09/14 15:56:23 | 000,080,896 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\D?i h?c tr?c tuy?n - on line.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Dại học trực tuyến - on line.doc
[2013/09/14 11:07:39 | 000,090,624 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Korea ( South ), Han Qu?c.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Korea ( South ), Han Quốc.doc
[2013/09/14 10:37:46 | 000,049,152 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Apple iPhone c?p nh?t b? túc.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Apple iPhone cập nhật bổ túc.doc
[2013/09/14 10:25:01 | 000,057,856 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Apple th? h? 5G Wi - Fi.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Apple thế hệ 5G Wi - Fi.doc
[2013/09/13 14:03:18 | 000,049,152 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Apple iPhone c?p nh?t b? túc.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Apple iPhone cập nhật bổ túc.doc
[2013/09/12 12:39:54 | 000,072,704 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Có gì dáng nói thêm v? nông nghi?p Hoa K? và Ca li nam 2013.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Có gì đáng nói thêm về nông nghiệp Hoa Kỳ và Ca li năm 2013.doc
[2013/09/11 15:18:36 | 000,057,856 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Apple th? h? 5G Wi - Fi.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Apple thế hệ 5G Wi - Fi.doc
[2013/09/09 10:57:41 | 000,102,400 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Có cái gì l? gi?a nam 2013 ? ngành Khoa h?c K? thu?t Hoa K?.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Có cái gì lạ giữa năm 2013 ở ngành Khoa học Kỷ thuật Hoa Kỳ.doc
[2013/09/08 11:17:21 | 000,072,704 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Có gì dáng nói thêm v? nông nghi?p Hoa K? và Ca li nam 2013.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Có gì đáng nói thêm về nông nghiệp Hoa Kỳ và Ca li năm 2013.doc
[2013/09/07 17:50:12 | 000,054,272 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Bang t?n r?ng u dot Hoa K?.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Băng tần rộng u dot Hoa Kỳ.doc
[2013/09/06 16:09:30 | 000,082,944 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\CAP NHAT CONG NGHE SINH H?C vn.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\CAP NHAT CONG NGHE SINH HỌC vn.doc
[2013/09/06 16:08:37 | 000,054,272 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Bang t?n r?ng u dot Hoa K?.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Băng tần rộng u dot Hoa Kỳ.doc
[2013/09/04 15:34:11 | 000,047,616 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\20 di?u b?n chua bi?t v? mê tín.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\20 điều bạn chưa biết về mê tín.doc
[2013/09/03 16:08:36 | 000,050,688 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\20 di?u vê xe hoi.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\20 điều vê xe hơi.doc
[2013/09/03 16:08:12 | 000,047,616 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\20 di?u b?n chua bi?t v? mê tín.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\20 điều bạn chưa biết về mê tín.doc
[2013/08/30 10:32:27 | 000,082,944 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\CAP NHAT CONG NGHE SINH H?C vn.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\CAP NHAT CONG NGHE SINH HỌC vn.doc
[2013/08/25 16:32:22 | 000,086,528 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\N?m tuyên ngôn ...doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Nấm tuyên ngôn ...doc
[2013/08/25 16:15:35 | 000,090,624 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Korea ( South ), Han Qu?c.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Korea ( South ), Han Quốc.doc
[2013/08/07 13:09:05 | 000,128,512 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\C?p nh?t hi?u bi?t v? phát tri?n ? Nh?t B?n ngày nay.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Cập nhật hiểu biết về phát triễn ở Nhật Bổn ngày nay.doc
[2013/08/07 11:03:11 | 000,046,080 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Giáo d?c khoa h?c k? thu?t Hoa K?.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Giáo dục khoa học kỷ thuật Hoa Kỳ.doc
[2013/08/07 10:59:47 | 000,080,896 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\D?i h?c tr?c tuy?n - on line.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Dại học trực tuyến - on line.doc
[2013/08/06 14:37:17 | 000,071,168 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\May in 3-D chê tao vat th? ....doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\May in 3-D chê tao vat thể ....doc
[2013/08/03 16:23:07 | 000,071,168 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\May in 3-D chê tao vat th? ....doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\May in 3-D chê tao vat thể ....doc
[2013/07/31 17:57:55 | 000,188,928 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Banh truong Trung Qu?c.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Banh truong Trung Quốc.doc
[2013/07/31 17:57:41 | 000,128,512 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\C?p nh?t hi?u bi?t v? phát tri?n ? Nh?t B?n ngày nay.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Cập nhật hiểu biết về phát triễn ở Nhật Bổn ngày nay.doc
[2013/07/29 11:13:48 | 000,073,728 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\trái k? dieu g?i gôji.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\trái kỳ dieu gồi gôji.doc
[2013/07/24 15:38:04 | 000,136,192 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Có cái gì m?i nam 2009 v? ti?n b? Khoa h?c.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Có cái gì mới năm 2009 về tiến bộ Khoa học.doc
[2013/07/24 15:37:54 | 000,102,400 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Có cái gì l? gi?a nam 2013 ? ngành Khoa h?c K? thu?t Hoa K?.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Có cái gì lạ giữa năm 2013 ở ngành Khoa học Kỷ thuật Hoa Kỳ.doc
[2013/07/08 17:59:51 | 000,404,992 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Qu?ng Bình.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Quảng Bình.doc
[2013/07/07 11:35:53 | 000,049,152 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\20 di?u b?n không bi?t v? tr?ng l?c.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\20 điều bạn không biết về trọng lực.doc
[2013/07/05 17:26:27 | 000,236,032 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Có tin tu?ng n?i các tuyên b? c?a d?i s? m?i Trung Qu?c và th? tu?ng Nh?t co làm Vn tin duoc không dây.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Có tin tưởng nổi các tuyên bố của đại sứ mới Trung Quốc và thủ tướng Nhật co làm Vn tin đuoc không đây.doc
[2013/07/05 17:00:12 | 000,094,720 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\C?p nh?t hi?u bi?t v? k? thu?t nanô.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Cập nhật hiểu biết về kỷ thuật nanô.doc
[2013/07/04 16:44:11 | 000,086,528 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\N?m tuyên ngôn ...doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Nấm tuyên ngôn ...doc
[2013/07/03 09:26:44 | 000,094,720 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\C?p nh?t hi?u bi?t v? k? thu?t nanô.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Cập nhật hiểu biết về kỷ thuật nanô.doc
[2013/07/01 15:30:41 | 000,184,832 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\25 nam cách mang khoa h?c.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\25 nam cách mang khoa học.doc
[2013/07/01 15:30:23 | 000,049,152 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\20 di?u b?n không bi?t v? tr?ng l?c.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\20 điều bạn không biết về trọng lực.doc
[2013/06/25 16:26:57 | 000,225,280 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Ng?ai Giao Trung Qu?c.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Ngọai Giao Trung Quốc.doc
[2013/06/25 16:26:39 | 000,236,032 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Có tin tu?ng n?i các tuyên b? c?a d?i s? m?i Trung Qu?c và th? tu?ng Nh?t co làm Vn tin duoc không dây.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Có tin tưởng nổi các tuyên bố của đại sứ mới Trung Quốc và thủ tướng Nhật co làm Vn tin đuoc không đây.doc
[2013/06/22 11:32:53 | 000,136,192 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\C?p nh?t hi?u bi?t v? khoa h?c th?n kinh.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Cập nhật hiểu biết về khoa học thần kinh.doc
[2013/06/07 10:12:57 | 000,404,992 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Qu?ng Bình.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Quảng Bình.doc
[2013/06/07 08:36:31 | 000,080,384 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Th?y diên day biên, di?n gió , diê,n mat tr?i m?i.....doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Thỷy điên đay biên, điện gió , điê,n măt trời mới.....doc
[2013/06/02 16:20:42 | 000,080,384 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Th?y diên day biên, di?n gió , diê,n mat tr?i m?i.....doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Thỷy điên đay biên, điện gió , điê,n măt trời mới.....doc
[2013/05/24 11:11:04 | 000,113,664 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Truy?n great Gastby.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Truyện great Gastby.doc
[2013/05/01 13:03:17 | 000,227,328 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Bac k?n.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Bac kạn.doc
[2013/04/28 09:44:17 | 000,145,408 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Mu?i sáng ch? t?o b?o cho tuong lai.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Mười sáng chế tạo bạo cho tương lai.doc
[2013/04/27 09:40:18 | 000,136,192 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\C?p nh?t hi?u bi?t v? khoa h?c th?n kinh.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Cập nhật hiểu biết về khoa học thần kinh.doc
[2013/04/26 13:55:44 | 000,044,032 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Lông v?i tóc là g?c con ngu?i.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Lông với tóc là gốc con người.doc
[2013/04/22 09:28:52 | 000,145,408 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Mu?i sáng ch? t?o b?o cho tuong lai.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Mười sáng chế tạo bạo cho tương lai.doc
[2013/04/19 09:54:38 | 000,053,760 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Ti?n b? y khoa nao bo doc.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Tiến bộ y khoa nao bo doc.doc
[2013/04/14 16:28:28 | 000,227,328 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Bac k?n.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Bac kạn.doc
[2013/04/11 16:27:02 | 000,053,760 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Ti?n b? y khoa nao bo doc.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Tiến bộ y khoa nao bo doc.doc
[2013/04/10 16:15:22 | 000,044,032 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Lông v?i tóc là g?c con ngu?i.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Lông với tóc là gốc con người.doc
[2013/04/07 09:43:56 | 000,052,224 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Nam Ca Li có gì l? không em.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Nam Ca Li có gì lạ không em.doc
[2013/04/04 15:48:47 | 000,057,344 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Rau d?u Nam Ca Li.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Rau đậu Nam Ca Li.doc
[2013/04/01 16:27:28 | 000,057,344 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Rau d?u Nam Ca Li.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Rau đậu Nam Ca Li.doc
[2013/03/30 13:22:21 | 000,082,432 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\NHÌN XA V? TH?I TRANG X? VÀNG KIM.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\NHÌN XA VỀ THỜI TRANG XỨ VÀNG KIM.doc
[2013/03/30 13:21:54 | 000,052,224 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Nam Ca Li có gì l? không em.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Nam Ca Li có gì lạ không em.doc
[2013/03/09 18:03:26 | 000,058,880 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\cà phê , 20 di?u .....doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\cà phê , 20 diều .....doc
[2013/03/09 13:12:24 | 000,058,880 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Ca phê Viêt Nam và thê gi?i.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Ca phê Viêt Nam và thê giới.doc
[2013/03/09 13:12:00 | 000,058,880 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\cà phê , 20 di?u .....doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\cà phê , 20 diều .....doc
[2013/03/05 17:51:42 | 000,124,928 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Trung Qu?c- Hoa K? theo Kevin Rudd.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Trung Quốc- Hoa Kỳ theo Kevin Rudd.doc
[2013/03/05 16:46:49 | 000,103,936 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\y?u t? th?i trang c?n d?i c?a d?t hi?m.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\yếu tố thời trang cận đại của đất hiếm.doc
[2013/03/05 16:46:31 | 000,082,432 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\NHÌN XA V? TH?I TRANG X? VÀNG KIM.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\NHÌN XA VỀ THỜI TRANG XỨ VÀNG KIM.doc
[2013/03/01 16:10:02 | 000,124,928 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Trung Qu?c- Hoa K? theo Kevin Rudd.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Trung Quốc- Hoa Kỳ theo Kevin Rudd.doc
[2013/03/01 15:59:58 | 000,265,728 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\DaNg cong s?n Trung Qu?c.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\DaNg cong sản Trung Quốc.doc
[2013/02/25 18:55:37 | 000,110,592 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\nhàchoc tr?i sieu cao.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\nhàchoc trời sieu cao.doc
[2013/02/21 17:23:59 | 000,110,592 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\nhàchoc tr?i sieu cao.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\nhàchoc trời sieu cao.doc
[2013/02/21 10:19:14 | 000,050,688 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Nông nghi?p dô thành.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Nông nghiệp đô thành.doc
[2013/02/20 10:24:10 | 000,050,688 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Nông nghi?p dô thành.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Nông nghiệp đô thành.doc
[2013/02/11 16:50:01 | 000,190,464 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Tuong lai l?ch s?.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Tương lai lịch sử.doc
[2013/02/11 16:41:32 | 000,265,728 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\DaNg cong s?n Trung Qu?c.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\DaNg cong sản Trung Quốc.doc
[2013/02/11 15:24:02 | 000,061,440 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\tien trào b? mat kh?.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\tien trào bộ măt khỉ.doc
[2013/02/09 10:51:52 | 000,061,440 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\tien trào b? mat kh?.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\tien trào bộ măt khỉ.doc
[2013/01/06 11:56:47 | 000,176,128 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Vài câu chuy?n ti?n b? khoa h?c.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Vài câu chuyện tiến bộ khoa học.doc
[2013/01/03 17:23:12 | 000,037,376 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\T?i sao Ðà L?t l?i không xu?t c?nh n?i hoa sang Los Angeles.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Tại sao Đà Lạt lại không xuất cảnh nổi hoa sang Los Angeles.doc
[2012/12/15 18:31:56 | 000,176,128 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Vài câu chuy?n ti?n b? khoa h?c.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Vài câu chuyện tiến bộ khoa học.doc
[2012/11/30 13:22:25 | 000,062,464 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Cu?n s? tay.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Cuốn sổ tay.doc
[2012/11/20 11:02:35 | 000,184,832 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\25 nam cách mang khoa h?c.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\25 nam cách mang khoa học.doc
[2012/11/15 10:44:13 | 000,122,880 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\BRIC ( Ba tây ,Nga , ?n,Tàu).doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\BRIC ( Ba tây ,Nga , Ấn,Tàu).doc
[2012/11/13 11:48:23 | 000,089,088 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Chi?n tranh ngày mai.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Chiến tranh ngày mai.doc
[2012/11/09 16:42:19 | 000,207,872 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Câu l?c B? Rome.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Câu lạc Bộ Rome.doc
[2012/11/09 16:02:11 | 000,122,880 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\BRIC ( Ba tây ,Nga , ?n,Tàu).doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\BRIC ( Ba tây ,Nga , Ấn,Tàu).doc
[2012/10/23 15:10:40 | 000,105,984 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Th? gi?i v?t li?u.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Thế giới vật liệu.doc
[2012/10/19 09:38:35 | 000,098,816 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\C?p nh?t ti?n b? khoa h?c Hoa K?.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Cập nhật tiến bộ khoa học Hoa Kỳ.doc
[2012/10/19 09:38:13 | 000,105,984 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Th? gi?i v?t li?u.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Thế giới vật liệu.doc
[2012/10/18 14:16:19 | 000,113,152 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Cây c?i S?a d?i di truy?n.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Cây cối Sửa đổi di truyền.doc
[2012/10/15 11:27:05 | 000,033,792 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\công ngh? s?a d?i di truy?n.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\công nghệ sửa đổi di truyền.doc
[2012/10/15 11:26:18 | 000,113,152 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Cây c?i S?a d?i di truy?n.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Cây cối Sửa đổi di truyền.doc
[2012/10/05 16:40:48 | 000,062,464 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Ngành nuôi cá và nuôi dê s?a.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Ngành nuôi cá và nuôi dê sửa.doc
[2012/10/04 14:51:53 | 000,062,464 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Ngành nuôi cá và nuôi dê s?a.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Ngành nuôi cá và nuôi dê sửa.doc
[2012/09/17 08:45:37 | 000,162,816 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\V?n d? giáo d?c.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Vấn đề giáo dục.doc
[2012/09/17 08:42:26 | 000,046,080 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Giáo d?c khoa h?c k? thu?t Hoa K?.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Giáo dục khoa học kỷ thuật Hoa Kỳ.doc
[2012/09/15 15:09:40 | 000,121,344 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Th? nhìn xem 10 nhà klhoa hoc nam 2012 làm gì cho Phát tri?n tuong lai Hoa K?.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Thử nhìn xem 10 nhà klhoa hoc nam 2012 làm gì cho Phát triễn tương lai Hoa Kỳ.doc
[2012/09/12 10:03:34 | 000,121,344 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Th? nhìn xem 10 nhà klhoa hoc nam 2012 làm gì cho Phát tri?n tuong lai Hoa K?.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Thử nhìn xem 10 nhà klhoa hoc nam 2012 làm gì cho Phát triễn tương lai Hoa Kỳ.doc
[2012/09/08 15:47:46 | 000,050,688 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\20 di?u vê xe hoi.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\20 điều vê xe hơi.doc
[2012/08/31 09:43:17 | 000,082,944 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Vài bài tóan phát tri?n có l? Vi?t Nam nên h?c ? ba nu?c.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Vài bài tóan phát triễn có lẽ Việt Nam nên học ở ba nước.doc
[2012/08/31 09:37:34 | 000,068,096 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\la bo giao duc tuong lai HoA K?.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\la bo giao duc tuong lai HoA KỲ.doc
[2012/08/30 15:52:45 | 000,225,280 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Ng?ai Giao Trung Qu?c.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Ngọai Giao Trung Quốc.doc
[2012/08/27 09:30:23 | 000,058,880 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Ca phê Viêt Nam và thê gi?i.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Ca phê Viêt Nam và thê giới.doc
[2012/08/22 16:16:28 | 000,068,096 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\la bo giao duc tuong lai HoA K?.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\la bo giao duc tuong lai HoA KỲ.doc
[2012/08/19 16:11:38 | 000,082,944 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Vài bài tóan phát tri?n có l? Vi?t Nam nên h?c ? ba nu?c.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Vài bài tóan phát triễn có lẽ Việt Nam nên học ở ba nước.doc
[2012/08/18 15:31:47 | 000,041,472 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Ti?n b? ? ngành k? thu?t sinh h?c.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Tiến bộ ở ngành kỷ thuật sinh học.doc
[2012/08/18 10:49:58 | 000,064,512 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\trinh tu he gen chu?i.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\trinh tu he gen chuối.doc
[2012/08/18 10:47:05 | 000,041,472 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Ti?n b? ? ngành k? thu?t sinh h?c.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Tiến bộ ở ngành kỷ thuật sinh học.doc
[2012/08/12 12:50:11 | 000,098,304 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\khoa h?c vat lieu.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\khoa học vat lieu.doc
[2012/08/11 10:00:16 | 000,070,656 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Nh?t 12.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Nhật 12.doc
[2012/08/07 09:39:08 | 000,098,304 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\khoa h?c vat lieu.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\khoa học vat lieu.doc
[2012/07/20 16:02:10 | 000,141,824 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\dien than dá c?p nhât hi?u bi?t .doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\dien than đá cập nhât hiểu biết .doc
[2012/07/16 16:07:29 | 000,141,824 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\dien than dá c?p nhât hi?u bi?t .doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\dien than đá cập nhât hiểu biết .doc
[2012/07/12 15:47:05 | 000,064,512 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\trinh tu he gen chu?i.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\trinh tu he gen chuối.doc
[2012/07/07 10:41:28 | 000,207,872 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Câu l?c B? Rome.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Câu lạc Bộ Rome.doc
[2012/07/03 10:53:53 | 000,053,760 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Tuong lai môi sinh khi khí h?u thay d?i.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Tương lai môi sinh khi khí hậu thay đổi.doc
[2012/07/01 16:14:58 | 000,072,192 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Chi?n tranh di?u khi?n h?c.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Chiến tranh điều khiển học.doc
[2012/06/19 08:59:56 | 000,079,360 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\khí d?u thiên nhiên.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\khí dầu thiên nhiên.doc
[2012/06/18 09:56:19 | 000,085,504 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\C?p nh?t vài hi?u bi?t ti?n b? Khoa h?c.doc -2.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Cập nhật vài hiểu biết tiến bộ Khoa học.doc -2.doc
[2012/06/15 17:20:03 | 000,065,536 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\C?p nh?t vài hi?u bi?t ph? thông ti?n b? khoa h?c k? thuât th? gi?i.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Cập nhật vài hiểu biết phổ thông tiến bộ khoa học kỷ thuât thế giới.doc
[2012/06/15 17:18:44 | 000,085,504 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\C?p nh?t vài hi?u bi?t ti?n b? Khoa h?c.doc -2.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Cập nhật vài hiểu biết tiến bộ Khoa học.doc -2.doc
[2012/06/13 15:59:31 | 000,079,360 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\khí d?u thiên nhiên.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\khí dầu thiên nhiên.doc
[2012/06/10 12:00:29 | 000,141,312 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\H?a+h?n+t...doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Hứa+hẹn+t...doc
[2012/06/10 12:00:27 | 000,141,312 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\H?a+h?n+t...doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Hứa+hẹn+t...doc
[2012/06/10 12:00:22 | 000,090,112 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Châu+M?+L...doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Châu+Mỹ+L...doc
[2012/06/10 12:00:20 | 000,090,112 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Châu+M?+L...doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Châu+Mỹ+L...doc
[2012/05/05 18:19:38 | 000,075,776 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Hóa h?c tình yêu.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Hóa học tình yêu.doc
[2012/05/05 18:18:30 | 000,036,864 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Tình d?c.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Tình dục.doc
[2012/05/05 16:52:46 | 000,036,864 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Tình d?c.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Tình dục.doc
[2012/04/28 09:07:24 | 000,053,760 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\chât du?ng , ch?t ng?t.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\chât đường , chất ngọt.doc
[2012/04/21 13:12:55 | 000,053,760 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\chât du?ng , ch?t ng?t.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\chât đường , chất ngọt.doc
[2012/04/16 15:02:19 | 000,132,608 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Trò di?u khiênjh?c TQ nam 2012.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Trò điều khiênjhọc TQ nam 2012.doc
[2012/04/16 15:01:17 | 000,141,824 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Trung Qu?c c?t cámh.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Trung Quốc cất cámh.doc
[2012/04/13 16:07:18 | 000,041,984 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\D? ?ng.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Dị ứng.doc
[2012/04/12 15:33:01 | 000,041,984 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\D? ?ng.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Dị ứng.doc
[2012/04/12 11:04:50 | 000,067,072 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\tien bo tuyen chon di truy?n nong nghi?p.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\tien bo tuyen chon di truyền nong nghiệp.doc
[2012/04/10 11:06:46 | 000,067,072 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\tien bo tuyen chon di truy?n nong nghi?p.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\tien bo tuyen chon di truyền nong nghiệp.doc
[2012/04/09 10:22:16 | 000,033,280 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Ti?n b? ? ngành ch?a tr? ung thu.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Tiến bộ ở ngành chửa trị ung thư.doc
[2012/04/07 15:58:34 | 000,427,520 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Ninh Thu?n.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Ninh Thuận.doc
[2012/04/04 16:49:08 | 000,047,616 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Vat lý h?c h?t tu.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Vat lý học hạt tư.doc
[2012/03/31 12:34:24 | 000,038,912 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\nông nghi?p the ky 21.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\nông nghiệp the ky 21.doc
[2012/03/29 17:47:55 | 000,094,208 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Tình Tha thi?t ? van hóa Hoa K? ngày nay.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Tình Tha thiết ở văn hóa Hoa Kỳ ngày nay.doc
[2012/03/25 11:59:11 | 000,094,208 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Tình Tha thi?t ? van hóa Hoa K? ngày nay.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Tình Tha thiết ở văn hóa Hoa Kỳ ngày nay.doc
[2012/03/23 13:12:33 | 000,022,016 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Quang Mgãi dinh hi?u thêm phan II.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Quang Mgãi dinh hiệu thêm phan II.doc
[2012/03/22 11:47:46 | 000,075,776 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Hóa h?c tình yêu.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Hóa học tình yêu.doc
[2012/03/21 09:15:15 | 000,022,016 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Quang Mgãi dinh hi?u thêm phan II.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Quang Mgãi dinh hiệu thêm phan II.doc
[2012/03/01 11:53:09 | 000,132,608 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Trò di?u khiênjh?c TQ nam 2012.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Trò điều khiênjhọc TQ nam 2012.doc
[2012/03/01 11:18:57 | 000,169,984 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\hoa h?c ngjh?ch lý.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\hoa học ngjhịch lý.doc
[2012/02/23 18:03:17 | 000,050,688 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\generic thu?c sinh h?c.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\generic thuốc sinh học.doc
[2012/02/23 16:48:09 | 000,169,984 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\hoa h?c ngjh?ch lý.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\hoa học ngjhịch lý.doc
[2012/02/14 13:21:19 | 000,192,000 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Vài hi?u bi?t khoa h?c.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Vài hiểu biết khoa học.doc
[2012/02/14 12:46:11 | 000,045,056 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Toan h?c.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Toan học.doc
[2012/02/12 10:38:54 | 000,038,912 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Tiên bô làm trinh t? DNA.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Tiên bô làm trinh tự DNA.doc
[2012/02/12 10:34:26 | 000,045,056 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Toan h?c.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Toan học.doc
[2012/01/23 10:59:42 | 000,190,464 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Tuong lai l?ch s?.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Tương lai lịch sử.doc
[2012/01/15 14:35:05 | 000,093,696 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\L àm sao du?i k?p xu?t kh?u hoa lan Thái Lan.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\L àm sao đuổi kịp xuất khẩu hoa lan Thái Lan.doc
[2012/01/14 16:26:54 | 000,072,704 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Nu?c thom thiên nhiên.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Nước thơm thiên nhiên.doc
[2012/01/10 17:23:35 | 000,050,176 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Vui thú di?n viên.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Vui thú điền viên.doc
[2012/01/10 16:13:23 | 000,093,696 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\L àm sao du?i k?p xu?t kh?u hoa lan Thái Lan.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\L àm sao đuổi kịp xuất khẩu hoa lan Thái Lan.doc
[2012/01/10 11:02:49 | 000,156,160 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Hai quan ni?m.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Hai quan niệm.doc
[2012/01/06 11:23:50 | 000,156,160 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Hai quan ni?m.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Hai quan niệm.doc
[2012/01/04 10:46:10 | 000,037,376 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\T?i sao Ðà L?t l?i không xu?t c?nh n?i hoa sang Los Angeles.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Tại sao Đà Lạt lại không xuất cảnh nổi hoa sang Los Angeles.doc
[2012/01/03 17:04:50 | 000,185,856 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Trong m?t tram câu chuy?n khoa h?c n? r? trên th? gi?i nam 2011.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Trong một trăm câu chuyện khoa học nở rộ trên thế giới năm 2011.doc
[2011/12/26 17:05:44 | 000,082,944 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\C?p nh?t hi?u bi?t Khoa h?c k? thu?t.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Cập nhật hiểu biết Khoa học kỷ thuật.doc
[2011/12/26 16:41:27 | 000,185,856 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Trong m?t tram câu chuy?n khoa h?c n? r? trên th? gi?i nam 2011.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Trong một trăm câu chuyện khoa học nở rộ trên thế giới năm 2011.doc
[2011/12/26 11:56:34 | 000,068,608 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Khoa h?c tàng hình ph?n II.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Khoa học tàng hình phần II.doc
[2011/12/24 09:51:30 | 000,068,608 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Khoa h?c tàng hình ph?n II.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Khoa học tàng hình phần II.doc
[2011/12/21 16:40:32 | 000,045,056 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Theo dõi ti?n b? khoa h?c.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Theo dõi tiến bộ khoa học.doc
[2011/12/21 10:30:36 | 000,040,960 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Ru?u Còn - alcohol.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Ruợu Còn - alcohol.doc
[2011/12/19 15:44:49 | 000,056,320 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\B?n chua biet.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Bạn chua biet.doc
[2011/12/19 15:44:23 | 000,040,960 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Ru?u Còn - alcohol.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Ruợu Còn - alcohol.doc
[2011/12/06 18:49:16 | 000,079,360 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Vài di?m có l? b?n c?n bi?t r? chang.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Vài điểm có lẽ bạn cần biết rỏ chăng.doc
[2011/12/01 17:19:14 | 000,074,752 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Vài d? li?u khoa h?c k? thu?t có l? b?n nên bi?t chang.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Vài dữ liệu khoa học kỷ thuật có lẽ bạn nên biết chăng.doc
[2011/12/01 16:22:25 | 000,079,360 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Vài di?m có l? b?n c?n bi?t r? chang.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Vài điểm có lẽ bạn cần biết rỏ chăng.doc
[2011/11/28 17:03:23 | 000,072,704 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Nu?c thom thiên nhiên.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Nước thơm thiên nhiên.doc
[2011/11/10 17:56:23 | 000,072,704 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Ru?u d? Agao.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Rượu đế Agao.doc
[2011/11/09 17:17:58 | 000,157,696 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Di?n H?t nhân.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Diện Hạt nhân.doc
[2011/11/03 16:00:24 | 000,048,128 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Ð?p th?y di?n.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Đập thủy điện.doc
[2011/11/03 16:00:01 | 000,157,696 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Di?n H?t nhân.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Diện Hạt nhân.doc
[2011/11/03 11:14:47 | 000,041,472 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\L?a cháy.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Lữa cháy.doc
[2011/11/02 16:10:27 | 000,060,928 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\B?n có th? chua bi?t r?.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Bạn có thể chưa biết rỏ.doc
[2011/11/02 16:10:08 | 000,041,472 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\L?a cháy.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Lữa cháy.doc
[2011/10/21 12:07:30 | 000,203,264 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Bình Phu?c.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Bình Phước.doc
[2011/10/11 16:15:42 | 000,108,032 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\10 nhà kh?o c?u khoa h?c xu?t s?c.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\10 nhà khảo cứu khoa học xuất sắc.doc
[2011/10/05 15:18:16 | 000,052,224 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Binh di?n ion - lithium.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Binh điện ion - lithium.doc
[2011/10/04 10:25:48 | 000,262,144 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Ði?u tr? , sua ch?a.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Điều trị , sưa chửa.doc
[2011/10/04 10:02:35 | 000,061,952 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Tr?m huong , K? nam.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Trầm hương , Kỳ nam.doc
[2011/10/02 17:17:59 | 000,061,952 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Tr?m huong , K? nam.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Trầm hương , Kỳ nam.doc
[2011/09/22 14:31:47 | 000,262,144 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Ði?u tr? , sua ch?a.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Điều trị , sưa chửa.doc
[2011/09/13 16:42:30 | 000,065,024 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Ru?u nho hay ru?u.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Rượu nho hay rượu.doc
[2011/09/13 15:24:16 | 000,072,704 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Ru?u d? Agao.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Rượu đế Agao.doc
[2011/08/27 10:19:18 | 000,427,520 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Ninh Thu?n.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Ninh Thuận.doc
[2011/08/21 10:29:38 | 000,162,816 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\V?n d? giáo d?c.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Vấn đề giáo dục.doc
[2011/08/19 13:19:17 | 000,338,432 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Hi?u r? hon v? m?t t?nh núi trung du Ðông B?c Vi?t Nam.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Hiểu rỏ hơn về một tỉnh núi trung du Đông Bắc Việt Nam.doc
[2011/08/15 09:20:39 | 000,033,280 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Ti?n b? ? ngành ch?a tr? ung thu.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Tiến bộ ở ngành chửa trị ung thư.doc
[2011/08/06 16:25:12 | 000,047,616 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Vat lý h?c h?t tu.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Vat lý học hạt tư.doc
[2011/07/19 17:37:57 | 000,046,080 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\mon ann dac s?n d?a phuong.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\mon ann đac sạn địa phuong.doc
[2011/07/19 16:18:56 | 000,065,024 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\B?p núc.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Bếp núc.doc
[2011/07/19 15:36:05 | 000,046,080 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\mon ann dac s?n d?a phuong.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\mon ann đac sạn địa phuong.doc
[2011/07/13 16:03:03 | 000,116,224 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Th?c ph?m chi?u b?c x?.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Thực phẩm chiếu bức xạ.doc
[2011/07/12 16:05:41 | 000,065,536 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Chi?n tranh di?n t? E.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Chiến tranh điện tử E.doc
[2011/07/11 15:52:33 | 000,065,536 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Chi?n tranh di?n t? E.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Chiến tranh điện tử E.doc
[2011/07/06 09:18:25 | 000,084,992 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\T? tính và ?t cay nhat.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Từ tính và ớt cay nhat.doc
[2011/07/05 15:35:14 | 000,103,424 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Nang luong xanh , d?u l?a biên sau.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Năng lương xanh , dầu lữa biên sau.doc
[2011/07/03 16:45:57 | 000,084,992 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\T? tính và ?t cay nhat.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Từ tính và ớt cay nhat.doc
[2011/06/26 09:35:14 | 000,073,216 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Bông v?i huu co.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Bông vải hưu cơ.doc
[2011/06/23 10:56:54 | 000,103,936 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\y?u t? th?i trang c?n d?i c?a d?t hi?m.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\yếu tố thời trang cận đại của đất hiếm.doc
[2011/06/20 11:46:04 | 000,073,216 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Bông v?i huu co.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Bông vải hưu cơ.doc
[2011/06/19 14:51:06 | 000,045,056 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Theo dõi ti?n b? khoa h?c.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Theo dõi tiến bộ khoa học.doc
[2011/06/19 10:24:31 | 000,094,208 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Nhà máy di?n h?t nhân. 2 doc.doc..doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Nhà máy điện hạt nhân. 2 doc.doc..doc
[2011/06/17 15:50:28 | 000,094,208 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Nhà máy di?n h?t nhân. 2 doc.doc..doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Nhà máy điện hạt nhân. 2 doc.doc..doc
[2011/06/15 13:01:12 | 000,090,624 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Công ngh? thông tin th? gi?i ti?n t?i dâu r?i.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Công nghệ thông tin thế giới tiến tới đâu rồi.doc
[2011/06/13 11:45:23 | 000,088,576 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Công ngh? di?n t?.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Công nghệ điện tử.doc
[2011/06/13 11:45:06 | 000,090,624 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Công ngh? thông tin th? gi?i ti?n t?i dâu r?i.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Công nghệ thông tin thế giới tiến tới đâu rồi.doc
[2011/05/09 13:02:33 | 000,141,312 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Cuu song Bi?n.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Cuu song Biển.doc
[2011/05/02 16:32:43 | 000,141,312 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Cuu song Bi?n.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Cuu song Biển.doc
[2011/04/28 15:11:43 | 000,065,024 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\B?p núc.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Bếp núc.doc
[2011/04/08 15:47:37 | 000,059,392 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Phóng x? diiên h?t nhân y trên S?c kh?e và y t?.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Phóng xạ diiên hạt nhân y trên Sức khỏe và y tế.doc
[2011/04/06 15:20:36 | 000,059,392 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Phóng x? diiên h?t nhân y trên S?c kh?e và y t?.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Phóng xạ diiên hạt nhân y trên Sức khỏe và y tế.doc
[2011/04/03 15:35:35 | 000,116,224 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\An ninh Du li?u.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\An ninh Dư liệu.doc
[2011/03/30 15:00:10 | 000,116,224 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\An ninh Du li?u.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\An ninh Dư liệu.doc
[2011/03/18 15:20:25 | 000,356,864 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Ph?n VI.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Phần VI.doc
[2011/03/11 11:06:58 | 000,199,680 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Phan V . Lich s?.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Phan V . Lich sủ.doc
[2011/03/06 15:41:07 | 000,436,736 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Phan III Lich s? Trung Quoc.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Phan III Lich sủ Trung Quoc.doc
[2011/02/28 11:33:49 | 000,031,232 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Sieu co d?i.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Sieu co dại.doc
[2011/02/27 18:20:14 | 000,031,232 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Sieu co d?i.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Sieu co dại.doc
[2011/02/27 16:40:50 | 000,049,664 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\B?o tôn c?p nh?t.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Bảo tôn cập nhật.doc
[2011/02/27 16:17:35 | 000,049,664 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\B?o tôn c?p nh?t.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Bảo tôn cập nhật.doc
[2011/02/21 18:05:08 | 000,436,736 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Phan III Lich s? Trung Quoc.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Phan III Lich sủ Trung Quoc.doc
[2011/02/13 11:47:30 | 000,194,048 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Lich su van hoa Ph?n II.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Lich su van hoa Phần II.doc
[2011/02/11 12:06:12 | 000,194,048 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Lich su van hoa Ph?n II.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Lich su van hoa Phần II.doc
[2011/01/29 11:24:40 | 000,763,904 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Lich su van hóa Trung qu?c phan 1.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Lich su van hóa Trung quốc phan 1.doc
[2011/01/28 12:28:05 | 000,061,952 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Khám phá m?t vì sao bí m?t trên tr?i.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Khám phá một vì sao bí mật trên trời.doc
[2011/01/25 16:25:43 | 000,061,952 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Khám phá m?t vì sao bí m?t trên tr?i.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Khám phá một vì sao bí mật trên trời.doc
[2011/01/24 18:57:49 | 000,098,816 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Ði?n tê bào nhiên li?u.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Điện tê bào nhiên liệu.doc
[2011/01/22 15:09:11 | 000,098,816 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Ði?n tê bào nhiên li?u.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Điện tê bào nhiên liệu.doc
[2011/01/21 18:08:04 | 000,169,984 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\B? sung ph?n Xu?t kh?u Nh?t trong th? k? 20.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Bổ sung phần Xuất khẩu Nhật trong thế kỷ 20.doc
[2011/01/09 18:55:39 | 000,169,984 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\B? sung ph?n Xu?t kh?u Nh?t trong th? k? 20.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Bổ sung phần Xuất khẩu Nhật trong thế kỷ 20.doc
[2010/12/12 10:58:23 | 000,103,424 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Nang luong xanh , d?u l?a biên sau.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Năng lương xanh , dầu lữa biên sau.doc
[2010/12/06 10:54:37 | 000,070,656 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Nh?t 12.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Nhật 12.doc
[2010/11/06 15:32:56 | 001,182,208 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Lich su - van hoa Nh?t.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Lich su - van hoa Nhật.doc
[2010/11/05 15:02:05 | 000,063,488 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Do tin c?y o ô tô.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Do tin cậy ơ ô tô.doc
[2010/11/03 12:13:45 | 000,063,488 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Do tin c?y o ô tô.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Do tin cậy ơ ô tô.doc
[2010/11/02 14:26:26 | 000,187,904 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\C?p nh?t cho nam 2010 v? tài nang son tr? sáng chói khoa h?c k? thu?t Hoa K?.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Cập nhật cho năm 2010 về tài năng son trẻ sáng chói khoa học kỷ thuật Hoa Kỳ.doc
[2010/11/01 14:58:47 | 000,038,912 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Tiên bô làm trinh t? DNA.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Tiên bô làm trinh tự DNA.doc
[2010/10/23 11:03:44 | 000,187,904 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\C?p nh?t cho nam 2010 v? tài nang son tr? sáng chói khoa h?c k? thu?t Hoa K?.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Cập nhật cho năm 2010 về tài năng son trẻ sáng chói khoa học kỷ thuật Hoa Kỳ.doc
[2010/09/26 11:36:24 | 000,087,040 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Câp nh?t v? nh?ng gi?ng dua gang tây.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Câp nhật về những giống dưa gang tây.doc
[2010/09/23 17:49:28 | 000,087,040 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Câp nh?t v? nh?ng gi?ng dua gang tây.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Câp nhật về những giống dưa gang tây.doc
[2010/09/17 10:47:12 | 000,098,816 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\C?p nh?t ti?n b? khoa h?c Hoa K?.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Cập nhật tiến bộ khoa học Hoa Kỳ.doc
[2010/09/12 10:10:26 | 000,089,088 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Chi?n tranh ngày mai.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Chiến tranh ngày mai.doc
[2010/09/10 12:12:54 | 000,050,176 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Vài b? m?t k? thu?t thay d?i hàng ngày ? Hoa K? t? 30 nam nay.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Vài bộ mặt kỷ thuật thay đổi hàng ngày ở Hoa Kỳ từ 30 năm nay.doc
[2010/09/07 09:49:56 | 000,054,784 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\cong nghe vua cap b?ng vua vui nhon.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\cong nghe vua cap bằng vua vui nhon.doc
[2010/09/07 09:39:35 | 000,074,240 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Cong ngh? nao o tuong lai.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Cong nghệ nao o tuong lai.doc
[2010/09/06 16:12:33 | 000,065,024 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Ru?u nho hay ru?u.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Rượu nho hay rượu.doc
[2010/09/03 14:33:40 | 000,054,784 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\cong nghe vua cap b?ng vua vui nhon.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\cong nghe vua cap bằng vua vui nhon.doc
[2010/08/19 11:02:54 | 000,074,240 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Cong ngh? nao o tuong lai.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Cong nghệ nao o tuong lai.doc
[2010/08/17 11:33:58 | 000,072,192 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Chi?n tranh di?u khi?n h?c.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Chiến tranh điều khiển học.doc
[2010/08/12 15:21:06 | 000,074,752 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Vài d? li?u khoa h?c k? thu?t có l? b?n nên bi?t chang.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Vài dữ liệu khoa học kỷ thuật có lẽ bạn nên biết chăng.doc
[2010/07/31 09:30:55 | 000,070,144 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Ti?n b? ? ngành tuy?n ch?n mo mai.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Tiến bộ ở ngành tuyễn chọn mơ mai.doc
[2010/07/28 16:32:20 | 000,070,144 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Ti?n b? ? ngành tuy?n ch?n mo mai.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Tiến bộ ở ngành tuyễn chọn mơ mai.doc
[2010/07/28 14:07:00 | 000,104,960 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\vien h?c Ca Li.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\vien học Ca Li.doc
[2010/06/30 09:23:04 | 000,056,832 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Ði?n m?t tr?i.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Điện mặt trời.doc
[2010/06/28 15:50:25 | 000,056,832 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Ði?n m?t tr?i.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Điện mặt trời.doc
[2010/06/25 09:55:19 | 000,053,760 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Ki?n trúc tuong lai.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Kiến trúc tương lai.doc
[2010/06/22 15:59:28 | 000,053,760 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Ki?n trúc tuong lai.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Kiến trúc tương lai.doc
[2010/06/19 09:36:11 | 000,145,920 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Hi?p U?c An Ninh Hoa K? Nh?t B?n dã 50 tu?i.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Hiệp Ước An Ninh Hoa Kỳ Nhật Bổn đã 50 tuổi.doc
[2010/06/12 15:42:51 | 000,145,920 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Hi?p U?c An Ninh Hoa K? Nh?t B?n dã 50 tu?i.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Hiệp Ước An Ninh Hoa Kỳ Nhật Bổn đã 50 tuổi.doc
[2010/06/08 17:36:23 | 000,073,216 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Di truy?n hoc bi?u sinh.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Di truyền hoc biểu sinh.doc
[2010/06/06 11:41:48 | 000,073,216 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Di truy?n hoc bi?u sinh.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Di truyền hoc biểu sinh.doc
[2010/06/02 16:13:28 | 000,037,888 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\kim lo?i b?ng tuan hoan.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\kim loại bảng tuan hoan.doc
[2010/05/31 15:05:24 | 000,050,176 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Kim loai c?n dai.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Kim loai cận đai.doc
[2010/05/31 15:03:31 | 000,037,888 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\kim lo?i b?ng tuan hoan.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\kim loại bảng tuan hoan.doc
[2010/05/15 10:24:51 | 000,088,576 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Công ngh? di?n t?.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Công nghệ điện tử.doc
[2010/05/13 16:07:54 | 000,053,248 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\S?ng d?i s?ng Hoa K? th?i xua.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Sống đời sống Hoa Kỳ thời xưa.doc
[2010/05/11 15:36:28 | 000,053,248 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\S?ng d?i s?ng Hoa K? th?i xua.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Sống đời sống Hoa Kỳ thời xưa.doc
[2010/04/30 10:19:00 | 000,188,928 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Banh truong Trung Qu?c.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Banh truong Trung Quốc.doc
[2010/04/27 15:52:01 | 000,100,352 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\binh di?n vanadium.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\binh điện vanadium.doc
[2010/04/27 15:51:27 | 000,052,224 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Binh di?n ion - lithium.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Binh điện ion - lithium.doc
[2010/04/25 11:51:18 | 000,062,464 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Cu?n s? tay.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Cuốn sổ tay.doc
[2010/04/24 09:44:50 | 000,086,016 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\DÐông co n?.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\DĐông cơ nổ.doc
[2010/04/20 15:03:30 | 000,086,016 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\DÐông co n?.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\DĐông cơ nổ.doc
[2010/04/04 10:18:58 | 000,375,808 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Cao+B?ng[1].doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Cao+Bằng[1].doc
[2010/04/01 11:26:19 | 000,058,880 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Gi?i thu?ng ki?n trúc Pritzker.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Giải thưởng kiến trúc Pritzker.doc
[2010/03/30 15:38:31 | 000,086,528 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Khi nào ngành thu?c tây.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Khi nào ngành thuốc tây.doc
[2010/03/25 15:57:13 | 000,107,008 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\diên thoai t? bao.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\diên thoai tế bao.doc
[2010/03/22 17:40:55 | 000,153,088 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\H a t?ng co s?.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\H a tầng co sỏ.doc
[2010/03/22 17:40:40 | 000,107,008 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\diên thoai t? bao.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\diên thoai tế bao.doc
[2010/03/02 21:20:27 | 000,375,808 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Cao+B?ng[1].doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Cao+Bằng[1].doc
[2010/02/19 17:56:14 | 000,096,256 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Th? xem Hoa K? dang làm gì c?n d?i hóa h?.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Thử xem Hoa Kỳ đang làm gì cận đại hóa hạ.doc
[2010/02/17 16:52:13 | 000,056,320 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\B?n chua biet.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Bạn chua biet.doc
[2010/02/14 10:48:26 | 000,113,152 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\xe l?a.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\xe lữa.doc
[2010/02/11 11:18:52 | 000,096,256 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Th? xem Hoa K? dang làm gì c?n d?i hóa h?.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Thử xem Hoa Kỳ đang làm gì cận đại hóa hạ.doc
[2010/02/01 19:28:07 | 000,097,792 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Cu?c Cách M?ng 3.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Cuộc Cách Mạng 3.doc
[2010/02/01 16:40:19 | 000,153,088 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\H a t?ng co s?.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\H a tầng co sỏ.doc
[2010/01/12 14:13:51 | 000,338,432 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Hi?u r? hon v? m?t t?nh núi trung du Ðông B?c Vi?t Nam.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Hiểu rỏ hơn về một tỉnh núi trung du Đông Bắc Việt Nam.doc
[2010/01/10 17:04:13 | 000,095,744 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Tình tr?ng h?n lo?n h?t nhân th? Hon loan vo khi hat nhan nguyên t? ngày nay.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Tình trạng hổn loạn hạt nhân thế Hon loan vo khi hat nhan nguyên tử ngày nay.doc
[2010/01/07 11:04:04 | 000,097,792 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Cu?c Cách M?ng 3.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Cuộc Cách Mạng 3.doc
[2010/01/04 11:56:10 | 000,095,744 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Tình tr?ng h?n lo?n h?t nhân th? Hon loan vo khi hat nhan nguyên t? ngày nay.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Tình trạng hổn loạn hạt nhân thế Hon loan vo khi hat nhan nguyên tử ngày nay.doc
[2009/12/30 10:25:37 | 000,096,768 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\h?t d? , s?i.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\hột dẽ , sồi.doc
[2009/12/27 12:20:11 | 000,136,192 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Có cái gì m?i nam 2009 v? ti?n b? Khoa h?c.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Có cái gì mới năm 2009 về tiến bộ Khoa học.doc
[2009/11/28 15:09:12 | 000,055,808 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Vài lòai gi?ng hoa m?i Nam Ca Li tô di?m công viên.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Vài lòai giống hoa mới Nam Ca Li tô điểm công viên.doc
[2009/11/28 15:01:37 | 000,115,200 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\S?a gì dây.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Sửa gì đây.doc
[2009/11/14 16:50:17 | 000,115,200 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\S?a gì dây.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Sửa gì đây.doc
[2009/11/08 12:36:58 | 000,169,984 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Mu?i nhà khoa h?c tr? tu?i Hoa K?.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Mười nhà khoa học trẻ tuổi Hoa Kỳ.doc
[2009/10/24 16:20:17 | 000,169,984 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Mu?i nhà khoa h?c tr? tu?i Hoa K?.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Mười nhà khoa học trẻ tuổi Hoa Kỳ.doc
[2009/09/29 12:50:41 | 000,055,296 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Nhà máy di?n than dá.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Nhà máy điện than đá.doc
[2009/09/29 11:56:27 | 000,073,728 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\trái k? dieu g?i gôji.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\trái kỳ dieu gồi gôji.doc
[2009/09/28 10:19:24 | 000,055,296 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Nhà máy di?n than dá.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Nhà máy điện than đá.doc
[2009/09/25 12:07:05 | 000,136,192 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\RNA, hóa hoc d?i s?ng.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\RNA, hóa hoc đời sống.doc
[2009/09/25 10:20:49 | 000,056,832 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Nang lu?ng s?ch Trung QuoC.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Nang lượng sạch Trung QuoC.doc
[2009/09/22 17:31:06 | 000,084,992 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\t?o - algae.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\tảo - algae.doc
[2009/09/22 15:00:16 | 000,056,832 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Nang lu?ng s?ch Trung QuoC.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Nang lượng sạch Trung QuoC.doc
[2009/09/18 15:42:25 | 000,084,992 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\t?o - algae.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\tảo - algae.doc
[2009/09/14 12:02:22 | 000,136,192 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\RNA, hóa hoc d?i s?ng.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\RNA, hóa hoc đời sống.doc
[2009/08/20 14:59:33 | 000,109,056 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Tranh dua khí th?.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Tranh đua khí thế.doc
[2009/08/19 16:28:40 | 000,254,464 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\C?p nh?t moi hi?u bi?t khoa hoc ph? thông.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Cập nhật moi hiểu biết khoa hoc phổ thông.doc
[2009/08/07 11:23:52 | 000,128,512 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Nông nghi?p tuong lai nuoi 9 t? nguoi.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Nông nghiệp tương lai nuoi 9 tỉ ngưoi.doc
[2009/08/06 11:26:29 | 000,254,464 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\C?p nh?t moi hi?u bi?t khoa hoc ph? thông.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Cập nhật moi hiểu biết khoa hoc phổ thông.doc
[2009/07/24 12:55:07 | 000,024,576 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Dinh hi?u.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Dinh hiệu.doc
[2009/07/24 12:43:56 | 000,024,576 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Dinh hi?u.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Dinh hiệu.doc
[2009/07/13 11:40:00 | 000,128,512 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Nông nghi?p tuong lai nuoi 9 t? nguoi.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Nông nghiệp tương lai nuoi 9 tỉ ngưoi.doc
[2009/06/19 15:47:48 | 000,050,176 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Kim loai c?n dai.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Kim loai cận đai.doc
[2009/05/14 15:27:11 | 000,096,768 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\h?t d? , s?i.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\hột dẽ , sồi.doc
[2009/05/14 09:36:19 | 000,158,720 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Ôn c? tri tân hay.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Ôn cố tri tân hay.doc
[2009/05/10 16:27:30 | 000,109,056 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Tranh dua khí th?.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Tranh đua khí thế.doc
[2009/05/07 10:04:02 | 000,050,176 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Vui thú di?n viên.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Vui thú điền viên.doc
[2009/05/05 14:45:42 | 000,055,808 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Vài lòai gi?ng hoa m?i Nam Ca Li tô di?m công viên.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Vài lòai giống hoa mới Nam Ca Li tô điểm công viên.doc
[2009/04/29 11:35:41 | 000,158,720 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Ôn c? tri tân hay.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Ôn cố tri tân hay.doc
[2009/04/23 15:25:11 | 000,057,856 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\H?a ti?n.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Hỏa tiễn.doc
[2009/04/01 09:54:23 | 000,086,528 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Khi nào ngành thu?c tây.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Khi nào ngành thuốc tây.doc
[2009/03/28 10:52:49 | 000,065,536 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\C?p nh?t vài hi?u bi?t ph? thông ti?n b? khoa h?c k? thuât th? gi?i.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Cập nhật vài hiểu biết phổ thông tiến bộ khoa học kỷ thuât thế giới.doc
[2009/03/12 13:50:36 | 000,203,264 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Bình Phu?c.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Bình Phước.doc
[2009/03/09 10:22:31 | 000,060,928 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\B?n có th? chua bi?t r?.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Bạn có thể chưa biết rỏ.doc
[2009/03/07 10:13:49 | 000,088,064 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Hành lang Ðông Tây Xuyên Á n?i Ðà N?ng.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Hành lang Đông Tây Xuyên Á nối Đà Nẳng.doc
[2009/02/07 16:23:15 | 000,048,128 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Ð?p th?y di?n.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Đập thủy điện.doc
[2009/02/06 10:55:24 | 000,105,472 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\L?ng Son ph?n II, ti?p theo và h?t.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Lạng Son phần II, tiếp theo và hết.doc
[2009/02/02 12:21:04 | 000,105,472 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\L?ng Son ph?n II, ti?p theo và h?t.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Lạng Son phần II, tiếp theo và hết.doc
[2009/01/18 12:58:32 | 000,088,576 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Vài hi?u bi?t.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Vài hiểu biết.doc
[2009/01/17 16:56:07 | 000,088,576 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Vài hi?u bi?t.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Vài hiểu biết.doc
[2009/01/14 15:39:54 | 000,099,840 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Xây dung hanh lang Xuyên dông Tây th? hai.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Xây dung hanh lang Xuyên dông Tây thứ hai.doc
[2009/01/10 16:01:34 | 000,192,000 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Vài hi?u bi?t khoa h?c.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Vài hiểu biết khoa học.doc
[2008/11/16 10:35:28 | 000,099,840 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Xây dung hanh lang Xuyên dông Tây th? hai.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Xây dung hanh lang Xuyên dông Tây thứ hai.doc
[2008/11/02 16:29:14 | 000,062,976 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\C?p nh?t quan di?m m?i v? di?n h?t nhân.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Cập nhật quan điểm mới về điện hạt nhân.doc
[2008/10/16 16:04:25 | 000,100,352 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\binh di?n vanadium.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\binh điện vanadium.doc
[2008/10/04 17:04:22 | 000,104,960 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\vien h?c Ca Li.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\vien học Ca Li.doc
[2008/09/30 09:19:38 | 000,095,232 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\hoa ch?t xanh - 2.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\hoa chất xanh - 2.doc
[2008/09/25 15:44:04 | 000,095,232 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\hoa ch?t xanh - 2.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\hoa chất xanh - 2.doc
[2008/09/08 09:54:53 | 000,038,912 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\nông nghi?p the ky 21.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\nông nghiệp the ky 21.doc
[2008/09/05 18:27:59 | 000,057,856 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\H?a ti?n.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Hỏa tiễn.doc
[2008/09/03 15:32:00 | 000,033,792 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\công ngh? s?a d?i di truy?n.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\công nghệ sửa đổi di truyền.doc
[2008/07/18 14:50:17 | 000,088,064 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Hành lang Ðông Tây Xuyên Á n?i Ðà N?ng.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Hành lang Đông Tây Xuyên Á nối Đà Nẳng.doc
[2008/07/12 15:33:31 | 000,082,944 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\C?p nh?t hi?u bi?t Khoa h?c k? thu?t.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Cập nhật hiểu biết Khoa học kỷ thuật.doc
[2008/06/29 14:41:03 | 000,074,240 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Attardi ( ty the ) và Knowles ( ph?n ung trong t? bào ).doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Attardi ( ty the ) và Knowles ( phản ưng trong tế bào ).doc
[2008/06/27 17:02:20 | 000,074,240 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Attardi ( ty the ) và Knowles ( ph?n ung trong t? bào ).doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Attardi ( ty the ) và Knowles ( phản ưng trong tế bào ).doc
[2008/06/23 17:14:08 | 000,053,760 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Thu?c du?c.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Thược dược.doc
[2008/05/28 09:56:56 | 000,062,976 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\C?p nh?t quan di?m m?i v? di?n h?t nhân.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Cập nhật quan điểm mới về điện hạt nhân.doc
[2008/05/07 15:32:15 | 000,050,688 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\generic thu?c sinh h?c.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\generic thuốc sinh học.doc
[2008/04/21 09:32:27 | 000,138,752 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Nghi?n d?u l?a.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Nghiện dầu lữa.doc
[2008/04/16 15:11:13 | 000,078,336 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\?I L?nh v?c y khoa.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\ỊI Lảnh vực y khoa.doc
[2008/04/12 10:54:21 | 000,138,752 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Nghi?n d?u l?a.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Nghiện dầu lữa.doc
[2007/12/25 12:34:03 | 000,078,336 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\?I L?nh v?c y khoa.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\ỊI Lảnh vực y khoa.doc
[2007/12/06 11:30:28 | 000,081,920 | ---- | M] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Theo dõi vài ti?n b? linh v?c.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Theo dõi vài tiến bộ lĩnh vực.doc
[2007/12/05 15:44:45 | 000,081,920 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Theo dõi vài ti?n b? linh v?c.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Theo dõi vài tiến bộ lĩnh vực.doc
[2007/11/23 12:26:17 | 000,053,760 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\Thu?c du?c.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\Thược dược.doc
[2007/11/10 16:18:34 | 000,113,152 | ---- | C] ()(C:\Documents and Settings\Compaq_Owner\My Documents\xe l?a.doc) -- C:\Documents and Settings\Compaq_Owner\My Documents\xe lữa.doc

< End of report >



OTL Extras logfile created on: 11/17/2013 5:01:01 PM - Run 6
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Documents and Settings\Compaq_Owner\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

2.19 Gb Total Physical Memory | 1.66 Gb Available Physical Memory | 76.13% Memory free
4.22 Gb Paging File | 3.94 Gb Available in Paging File | 93.35% Paging File free
Paging file location(s): C:\pagefile.sys 0 0 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 68.01 Gb Total Space | 37.04 Gb Free Space | 54.47% Space Free | Partition Type: NTFS
Drive D: | 6.50 Gb Total Space | 1.45 Gb Free Space | 22.29% Space Free | Partition Type: FAT32

Computer Name: YOUR-27E1513D96 | User Name: Compaq_Owner | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.html [@ = ChromeHTML] -- C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.)
.url [@ = InternetShortcut] -- rundll32.exe ieframe.dll,OpenURL %l

[HKEY_USERS\S-1-5-21-1380244137-392426934-3096447715-1009\SOFTWARE\Classes\<extension>]
.html [@ = htmlfile] -- Reg Error: Key error. File not found

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
https [open] -- "C:\Program Files\Google\Chrome\Application\chrome.exe" -- "%1" (Google Inc.)
InternetShortcut [open] -- rundll32.exe ieframe.dll,OpenURL %l
InternetShortcut [print] -- Reg Error: Value error.
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PrivaZer] -- C:\Program Files\PrivaZer\contextmenuExe.exe (Goversoft LLC)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusOverride" = 0
"FirewallOverride" = 0
"ANTIVIRUSDISABLENOTIFY" = 0
"FIREWALLDISABLENOTIFY" = 0
"UPDATESDISABLENOTIFY" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation)


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{03640419-0C0E-8A37-2BD4-A8191E65ACF3}" = Graphic.ly
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{05BDC796-3451-4F81-B91D-E98F7ADA76C2}" = TurboTax 2010 WinPerTaxSupport
"{0BEDBD4E-2D34-47B5-9973-57E62B29307C}" = ATI Control Panel
"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live Upload Tool
"{226b64e8-dc75-4eea-a6c8-abcb496320f2}-Google Talk" = Google Talk (remove only)
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{29ED20C9-5E15-4969-9279-25BF3727A3DA}" = iTunes
"{33C8C01E-4787-482B-9D2C-AB8221FCC01D}" = IObit Toolbar v6.0
"{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{3782EC09-4000-475E-8A59-9CABD6F03B4C}" = TurboTax 2010 WinPerFedFormset
"{43AC7CBC-1D6A-3B5B-81B1-A0C166FE48F4}" = Google Talk Plugin
"{45338B07-A236-4270-9A77-EBB4115517B5}" = Windows Live Sign-in Assistant
"{4D24F198-A2CB-46B5-BB16-41B69C644B6C}" = Microsoft Security Client
"{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}" = Skype™ 6.3
"{4F2FCCCF-29F3-44B9-886F-6D16F8417522}" = TurboTax 2010 wrapper
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{5E453519-60F6-4A4D-A0BF-16663F9B3536}" = Safari
"{63AFACBC-4795-4A1B-8037-5085DC03FC54}" = Microsoft LifeCam
"{789289CA-F73A-4A16-A331-54D498CE069F}" = Ventrilo Client
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{79155F2B-9895-49D7-8612-D92580E0DE5B}" = Bonjour
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{90110409-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003
"{90120000-0020-0409-0000-0000000FF1CE}" = Compatibility Pack for the 2007 Office system
"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
"{91810AFC-A4F8-4EBA-A5AA-B198BBC81144}" = InterVideo WinDVD Player
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{A00B9A50-3090-4CFF-9CDA-82DA0BEDAA21}" = Apple Mobile Device Support
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A525E00B-6609-442E-9DCD-64453C233E8D}" = TurboTax 2010 WinPerReleaseEngine
"{A8F2089B-1F79-4BF6-B385-A2C2B0B9A74D}" = ImagXpress
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC76BA86-7AD7-1033-7B44-AB0000000001}" = Adobe Reader XI (11.0.03)
"{AC76BA86-7AD7-5760-0000-900000000003}" = Japanese Fonts Support For Adobe Reader 9
"{AF0CE7C0-A3E4-4D73-988B-B29187EC6E9A}" = QuickTime
"{B194272D-1F92-46DF-99EB-8D5CE91CB4EC}" = Adobe AIR
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CDC74FE6-5224-11D6-B27F-00E0181A6FA8}" = D-Link AirPlus
"{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}" = SUPERAntiSpyware
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{DB518BA6-CB74-4EB6-9ABD-880B6D6E1F38}" = HpSdpAppCoreApp
"{E371C150-A9F1-49CE-ACC1-51AEFD01C1D4}_is1" = Turbo Tax Audit Support Center 2.0
"{F5266D28-E0B2-4130-BFC5-EE155AD514DC}" = Apple Application Support
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Agere Systems Soft Modem" = Agere Systems PCI Soft Modem
"America Online us" = America Online (Choose which version to remove)
"ATI Display Driver" = ATI Display Driver
"CCleaner" = CCleaner
"CPUID CPU-Z_is1" = CPUID CPU-Z 1.52.2
"ERUNT_is1" = ERUNT 1.1j
"Google Chrome" = Google Chrome
"Graphic.lyAir.524A3AB5801B9AE08DEEB1BA295EDE84BDC333F2.1" = Graphic.ly
"HijackThis" = HijackThis 2.0.2
"ie8" = Windows Internet Explorer 8
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware version 1.75.0.1300
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft Security Client" = Microsoft Security Essentials
"Mozilla Firefox 25.0 (x86 en-US)" = Mozilla Firefox 25.0 (x86 en-US)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"MSNINST" = MSN
"Picasa 3" = Picasa 3
"Samsung ML-1740 Series" = Samsung ML-1740 Series
"TurboTax 2010" = TurboTax 2010
"UniKey" = UniKey 3.63
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"WinRAR archiver" = WinRAR archiver

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-1380244137-392426934-3096447715-1009\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"PrivaZer" = PrivaZer
"soe-PoxNora" = Poxnora
"WinDirStat" = WinDirStat 1.1.2

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 11/8/2013 12:41:27 AM | Computer Name = YOUR-27E1513D96 | Source = MPSampleSubmission | ID = 5000
Description = EventType mptelemetry, P1 unspecified, P2 hardeningtelemetry, P3 hardeningtelemetrydisablertp,
P4 4.3.219.0, P5 unspecified, P6 unspecified, P7 unspecified, P8 NIL, P9 NIL, P10
NIL.

Error - 11/8/2013 11:55:15 AM | Computer Name = YOUR-27E1513D96 | Source = Application Error | ID = 1000
Description = Faulting application explorer.exe, version 6.0.2900.5512, faulting
module ntdll.dll, version 5.1.2600.6055, fault address 0x000673be.

Error - 11/9/2013 1:04:02 AM | Computer Name = YOUR-27E1513D96 | Source = MPSampleSubmission | ID = 5000
Description = EventType mptelemetry, P1 unspecified, P2 hardeningtelemetry, P3 hardeningtelemetrydisablertp,
P4 4.3.219.0, P5 unspecified, P6 unspecified, P7 unspecified, P8 NIL, P9 NIL, P10
NIL.

Error - 11/9/2013 12:56:57 PM | Computer Name = YOUR-27E1513D96 | Source = Application Error | ID = 1000
Description = Faulting application explorer.exe, version 6.0.2900.5512, faulting
module unknown, version 0.0.0.0, fault address 0x00000000.

Error - 11/12/2013 11:40:12 AM | Computer Name = YOUR-27E1513D96 | Source = MPSampleSubmission | ID = 5000
Description = EventType mptelemetry, P1 unspecified, P2 hardeningtelemetry, P3 hardeningtelemetrydisablertp,
P4 4.3.219.0, P5 unspecified, P6 unspecified, P7 unspecified, P8 NIL, P9 NIL, P10
NIL.

Error - 11/12/2013 11:44:26 AM | Computer Name = YOUR-27E1513D96 | Source = MPSampleSubmission | ID = 5000
Description = EventType mptelemetry, P1 unspecified, P2 hardeningtelemetry, P3 hardeningtelemetrydisablertp,
P4 4.3.219.0, P5 unspecified, P6 unspecified, P7 unspecified, P8 NIL, P9 NIL, P10
NIL.

Error - 11/12/2013 1:03:22 PM | Computer Name = YOUR-27E1513D96 | Source = Application Error | ID = 1000
Description = Faulting application explorer.exe, version 6.0.2900.5512, faulting
module unknown, version 0.0.0.0, fault address 0x00000000.

Error - 11/13/2013 3:35:41 PM | Computer Name = YOUR-27E1513D96 | Source = Application Error | ID = 1000
Description = Faulting application explorer.exe, version 6.0.2900.5512, faulting
module mshtml.dll, version 8.0.6001.23532, fault address 0x00088cc7.

Error - 11/17/2013 7:01:43 AM | Computer Name = YOUR-27E1513D96 | Source = MsiInstaller | ID = 10005
Description = Product: Microsoft Security Client -- A reboot is needed to clean
an active threat. Setup cannot continue until the threat has been cleaned.

Error - 11/17/2013 5:34:46 PM | Computer Name = YOUR-27E1513D96 | Source = MPSampleSubmission | ID = 5000
Description = EventType mptelemetry, P1 unspecified, P2 hardeningtelemetry, P3 hardeningtelemetrydisablertp,
P4 4.3.219.0, P5 unspecified, P6 unspecified, P7 unspecified, P8 NIL, P9 NIL, P10
NIL.

[ System Events ]
Error - 11/17/2013 8:53:00 AM | Computer Name = YOUR-27E1513D96 | Source = DCOM | ID = 10005
Description = DCOM got error "%1058" attempting to start the service gupdate with
arguments "/comsvc" in order to run the server: {4EB61BAC-A3B6-4760-9581-655041EF4D69}

Error - 11/17/2013 9:53:57 AM | Computer Name = YOUR-27E1513D96 | Source = DCOM | ID = 10005
Description = DCOM got error "%1058" attempting to start the service gupdate with
arguments "/comsvc" in order to run the server: {4EB61BAC-A3B6-4760-9581-655041EF4D69}

Error - 11/17/2013 10:53:46 AM | Computer Name = YOUR-27E1513D96 | Source = DCOM | ID = 10005
Description = DCOM got error "%1058" attempting to start the service gupdate with
arguments "/comsvc" in order to run the server: {4EB61BAC-A3B6-4760-9581-655041EF4D69}

Error - 11/17/2013 11:53:27 AM | Computer Name = YOUR-27E1513D96 | Source = DCOM | ID = 10005
Description = DCOM got error "%1058" attempting to start the service gupdate with
arguments "/comsvc" in order to run the server: {4EB61BAC-A3B6-4760-9581-655041EF4D69}

Error - 11/17/2013 12:53:15 PM | Computer Name = YOUR-27E1513D96 | Source = DCOM | ID = 10005
Description = DCOM got error "%1058" attempting to start the service gupdate with
arguments "/comsvc" in order to run the server: {4EB61BAC-A3B6-4760-9581-655041EF4D69}

Error - 11/17/2013 1:53:59 PM | Computer Name = YOUR-27E1513D96 | Source = DCOM | ID = 10005
Description = DCOM got error "%1058" attempting to start the service gupdate with
arguments "/comsvc" in order to run the server: {4EB61BAC-A3B6-4760-9581-655041EF4D69}

Error - 11/17/2013 2:53:14 PM | Computer Name = YOUR-27E1513D96 | Source = DCOM | ID = 10005
Description = DCOM got error "%1058" attempting to start the service gupdate with
arguments "/comsvc" in order to run the server: {4EB61BAC-A3B6-4760-9581-655041EF4D69}

Error - 11/17/2013 3:53:07 PM | Computer Name = YOUR-27E1513D96 | Source = DCOM | ID = 10005
Description = DCOM got error "%1058" attempting to start the service gupdate with
arguments "/comsvc" in order to run the server: {4EB61BAC-A3B6-4760-9581-655041EF4D69}

Error - 11/17/2013 4:53:12 PM | Computer Name = YOUR-27E1513D96 | Source = DCOM | ID = 10005
Description = DCOM got error "%1058" attempting to start the service gupdate with
arguments "/comsvc" in order to run the server: {4EB61BAC-A3B6-4760-9581-655041EF4D69}

Error - 11/17/2013 6:22:46 PM | Computer Name = YOUR-27E1513D96 | Source = Microsoft Antimalware | ID = 2001
Description = %%860 has encountered an error trying to update signatures. New Signature
Version: Previous Signature Version: 1.161.2051.0 Update Source: %%859 Update Stage:
%%852 Source Path: http://www.microsoft.com Signature Type: %%800 Update Type: %%803

User:
NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.10003.0

Error
code: 0x8024402c Error description: An unexpected problem occurred while checking
for updates. For information on installing or troubleshooting updates, see Help
and Support.


< End of report >



Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 30-10-2013
Ran by Compaq_Owner (administrator) on YOUR-27E1513D96 on 18-11-2013 14:14:55
Running from C:\Documents and Settings\Compaq_Owner\Desktop
Microsoft Windows XP Home Edition Service Pack 3 (X86) OS Language: English(US)
Internet Explorer Version 8
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(Microsoft Corporation) c:\Program Files\Microsoft Security Client\MsMpEng.exe
(Microsoft Corporation) C:\WINDOWS\System32\snmp.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(OldTimer Tools) C:\Documents and Settings\Compaq_Owner\Desktop\OTL.exe
(Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [QuickTime Task] - C:\Program Files\QuickTime\QTTask.exe [421888 2012-10-25] (Apple Inc.)
HKLM\...\Run: [MSC] - C:\Program Files\Microsoft Security Client\msseces.exe [995176 2013-08-12] (Microsoft Corporation)
Winlogon\Notify\AtiExtEvent: C:\Windows\system32\Ati2evxx.dll (ATI Technologies Inc.)
HKLM\...\Policies\Explorer: [LinkResolveIgnoreLinkInfo] 0
HKLM\...\Policies\Explorer: [NoResolveSearch] 1
HKCU\...\Run: [swg] - C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2013-05-14] (Google Inc.)
HKCU\...\Policies\Explorer: [LinkResolveIgnoreLinkInfo] 0
HKCU\...\Policies\Explorer: [NoInstrumentation] 1
HKCU\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\Administrator\...\RunOnce: [FlashPlayerUpdate] - C:\WINDOWS\system32\Macromed\Flash\FlashUtil32_11_5_502_135_ActiveX.exe [ 2012-12-26] (Adobe Systems Incorporated)
Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\D-Link AirPlus.lnk
ShortcutTarget: D-Link AirPlus.lnk -> C:\Program Files\D-Link AirPlus\AirPlus.exe (D-Link)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://hotmail.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft...=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = http://www.google.co...ie=utf8&oe=utf8
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - DefaultScope Yahoo! URL = http://search.yahoo....p={searchTerms}
SearchScopes: HKCU - Yahoo! URL = http://search.yahoo....p={searchTerms}
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/...rc=IE-SearchBox
SearchScopes: HKCU - {50ACC877-B37C-4AE4-9077-409A9678BCDB} URL = http://www.bing.com/...rc=IE-SearchBox
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.9012.1008\swg.dll (Google Inc.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - &Address - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\system32\browseui.dll (Microsoft Corporation)
Toolbar: HKCU - &Links - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\WINDOWS\system32\shell32.dll (Microsoft Corporation)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset...lineScanner.cab
DPF: {CB97291A-6603-466A-AA11-80C2EB74CB10} https://install.cox....InstallAx10.ocx
DPF: {FA5369ED-D19A-434C-8F59-EE90D690D36C} https://secure.logme...ivex/RACtrl.cab
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
ShellExecuteHooks: SABShellExecuteHook Class - {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [113024 2011-07-18] (SuperAdBlocker.com)

FireFox:
========
FF ProfilePath: C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\ahl565id.default
FF Homepage: hxxp://www.tonthat-tonnu.blogspot.com/
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_6_602_180.dll ()
FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @google.com/npPicasa3,version=3.0.0 - C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin - C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKCU: @talk.google.com/O1DPlugin - C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKCU: @talk.google.com/O3DPlugin - C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\plugins\npgtpo3dautoplugin.dll ()
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Extension: Adblock Filterset.G Updater - C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\ahl565id.default\Extensions\filtersetg@updater
FF Extension: Adblock - C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\ahl565id.default\Extensions\{34274bf4-1d97-a289-e984-17e546307e4f}
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

Chrome:
=======
CHR HomePage: hxxp://www.google.com
CHR RestoreOnStartup: "hxxp://www.tonthat-tonnu.blogspot.com/"
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\31.0.1650.57\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\31.0.1650.57\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\31.0.1650.57\pdf.dll ()
CHR Plugin: (Google Talk Plugin) - C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\plugins\npgoogletalk.dll (Google)
CHR Plugin: (Google Talk Plugin Video Accelerator) - C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\plugins\npgtpo3dautoplugin.dll ()
CHR Plugin: (Google Talk Plugin Video Renderer) - C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\plugins\npo1d.dll (Google)
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll No File
CHR Plugin: (Java™ Platform SE 6 U13) - C:\Program Files\Java\jre6\bin\new_plugin\npdeploytk.dll (Sun Microsystems, Inc.)
CHR Plugin: (Java™ Platform SE 6 U13) - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
CHR Plugin: (DivX Web Player) - C:\Program Files\Mozilla Firefox\plugins\npdivx32.dll (DivX,Inc.)
CHR Plugin: (DivX Player Netscape Plugin) - C:\Program Files\Mozilla Firefox\plugins\npDivxPlayerPlugin.dll (DivX, Inc)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin6.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin7.dll (Apple Inc.)
CHR Plugin: (Microsoft DRM) - C:\Program Files\Windows Media Player\npdrmv2.dll (Microsoft Corporation)
CHR Plugin: (Windows Media Player Plug-in Dynamic Link Library) - C:\Program Files\Windows Media Player\npdsplay.dll (Microsoft Corporation (written by Digital Renaissance Inc.))
CHR Plugin: (Microsoft DRM) - C:\Program Files\Windows Media Player\npwmsdrm.dll (Microsoft Corporation)
CHR Plugin: (Google Update) - C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Google\Update\1.3.21.135\npGoogleUpdate3.dll No File
CHR Plugin: (Picasa) - C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
CHR Plugin: (iTunes Application Detector) - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Plugin: (Shockwave Flash) - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_4_402_278.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll No File
CHR Plugin: (Windows Presentation Foundation) - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
CHR Extension: (Google Wallet) - C:\DOCUME~1\COMPAQ~1\LOCALS~1\Application Data\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0
CHR HKLM\...\Chrome\Extension: [cdjbnddbclciabnckgeahmneohjlahdm] - C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\chromeupdate.crx

========================== Services (Whitelisted) =================

S4 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE [116608 2012-07-11] (SUPERAntiSpyware.com)
S4 AgereModemAudio; C:\Program Files\LSI SoftModem\agrsmsvc.exe [14336 2009-03-27] (LSI Corporation)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [22208 2013-08-12] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

S3 AIRPLUS; C:\Windows\System32\DRIVERS\airplus.sys [255360 2003-09-08] (D-Link)
R3 ALCXWDM; C:\Windows\System32\drivers\ALCXWDM.SYS [2317696 2005-04-20] (Realtek Semiconductor Corp.)
R1 AmdK8; C:\Windows\System32\DRIVERS\AmdK8.sys [36352 2005-03-09] (Advanced Micro Devices)
R0 bb-run; C:\Windows\System32\DRIVERS\bb-run.sys [17408 2003-11-05] (Promise Technology, Inc.)
S3 CCDECODE; C:\Windows\System32\DRIVERS\CCDECODE.sys [17024 2008-04-13] (Microsoft Corporation)
R2 cpuz132; C:\WINDOWS\system32\drivers\cpuz132_x32.sys [12672 2009-03-27] (Windows ® Codename Longhorn DDK provider)
R2 DgiVecp; C:\Windows\System32\Drivers\DgiVecp.sys [40448 2003-07-29] (DeviceGuys, Inc.)
R0 ftsata2; C:\Windows\System32\DRIVERS\ftsata2.sys [175616 2005-04-14] (Promise Technology, Inc.)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [211560 2013-06-18] (Microsoft Corporation)
R1 MpKsl0d651710; c:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{44B1BC31-9123-4499-BC21-80C6BD6FF320}\MpKsl0d651710.sys [40392 2013-11-17] (Microsoft Corporation)
S3 NdisIP; C:\Windows\System32\DRIVERS\NdisIP.sys [10880 2008-04-13] (Microsoft Corporation)
S3 rtl8139; C:\Windows\System32\DRIVERS\RTL8139.SYS [20992 2004-08-03] (Realtek Semiconductor Corporation)
R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS [12880 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS [67664 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
S3 SONYPVU1; C:\Windows\System32\DRIVERS\SONYPVU1.SYS [7552 2001-08-17] (Sony Corporation)
R2 tmcomm; C:\WINDOWS\system32\drivers\tmcomm.sys [94480 2006-11-28] (Trend Micro Inc.)
S3 wanatw; C:\Windows\System32\DRIVERS\wanatw4.sys [33588 2003-01-10] (America Online, Inc.)
R3 catchme; \??\C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\catchme.sys [x]
U5 P3; C:\Windows\System32\Drivers\P3.sys [42752 2008-04-13] (Microsoft Corporation)
U5 Psched; C:\Windows\System32\Drivers\Psched.sys [69120 2008-04-13] (Microsoft Corporation)
U5 ScsiPort; C:\Windows\system32\drivers\scsiport.sys [96384 2008-04-13] (Microsoft Corporation)
U3 TlntSvr;
U3 mbr; \??\C:\ComboFix\mbr.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-11-17 14:15 - 2013-11-17 14:15 - 00015175 _____ C:\ComboFix.txt
2013-11-17 13:34 - 2013-11-17 13:35 - 05146587 ____R (Swearware) C:\Documents and Settings\Compaq_Owner\Desktop\ComboFix.exe
2013-11-17 12:56 - 2013-11-17 12:56 - 00001647 _____ C:\Documents and Settings\Compaq_Owner\Desktop\RKreport[0]_S_11172013_125624.txt
2013-11-17 12:48 - 2013-11-17 13:29 - 00000000 ____D C:\Documents and Settings\Compaq_Owner\Desktop\RK_Quarantine
2013-11-17 12:47 - 2013-11-17 12:47 - 03679744 _____ C:\Documents and Settings\Compaq_Owner\Desktop\RogueKiller.exe
2013-11-16 23:07 - 2013-11-16 23:07 - 00000000 ____D C:\Documents and Settings\Compaq_Owner\Desktop\New Folder (3)
2013-11-15 17:37 - 2013-11-17 13:32 - 00000000 ____D C:\TDSSKiller_Quarantine
2013-11-15 17:29 - 2013-11-15 17:29 - 04121440 _____ (Kaspersky Lab ZAO) C:\Documents and Settings\Compaq_Owner\Desktop\tdsskiller.exe
2013-11-13 23:28 - 2013-11-13 23:28 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2868626$
2013-11-13 23:27 - 2013-11-13 23:27 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2900986$
2013-11-13 23:26 - 2013-11-13 23:27 - 00009092 _____ C:\WINDOWS\KB2900986.log
2013-11-13 23:25 - 2013-11-13 23:25 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2862152$
2013-11-13 23:22 - 2013-11-13 23:22 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2876331$
2013-11-13 23:16 - 2013-11-13 23:22 - 00022226 _____ C:\WINDOWS\KB2888505-IE8.log
2013-11-13 11:46 - 2013-11-13 23:28 - 00015636 _____ C:\WINDOWS\KB2868626.log
2013-11-13 11:43 - 2013-11-13 23:25 - 00014338 _____ C:\WINDOWS\KB2862152.log
2013-11-13 11:41 - 2013-11-13 23:23 - 00013878 _____ C:\WINDOWS\KB2876331.log
2013-11-12 07:38 - 2013-11-12 07:38 - 00981532 _____ C:\Documents and Settings\Compaq_Owner\Desktop\JRT.zip
2013-11-09 09:40 - 2013-11-09 09:40 - 00249072 _____ C:\Documents and Settings\Compaq_Owner\Desktop\OTLnewest.Txt
2013-11-07 20:36 - 2013-11-07 20:36 - 00110080 _____ (Thomas Hoen - T-Tools) C:\Documents and Settings\Compaq_Owner\Desktop\BitRemover.exe
2013-11-07 20:35 - 2013-11-07 21:57 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-11-07 12:42 - 2013-11-10 14:51 - 01034531 _____ (Thisisu) C:\Documents and Settings\Compaq_Owner\Desktop\JRT.exe
2013-11-07 12:38 - 2013-11-07 12:39 - 00000000 ____D C:\Documents and Settings\Compaq_Owner\Desktop\SS Storage
2013-11-07 02:13 - 2013-11-07 02:13 - 00001706 _____ C:\Documents and Settings\All Users\Start Menu\Programs\Microsoft Security Essentials.lnk
2013-11-07 02:04 - 2013-11-07 02:04 - 00253698 _____ C:\Documents and Settings\Compaq_Owner\Desktop\OTL2.Txt
2013-11-07 01:29 - 2013-11-07 01:29 - 00000789 _____ C:\Documents and Settings\Compaq_Owner\Desktop\Stored.txt
2013-11-07 01:15 - 2013-10-31 11:45 - 00000027 _____ C:\WINDOWS\system32\Drivers\etc\hosts.20131107-011505.backup
2013-11-07 01:00 - 2013-11-07 01:01 - 11227472 _____ (Microsoft Corporation) C:\Documents and Settings\Compaq_Owner\Desktop\mseinstall.exe
2013-11-07 00:59 - 2013-11-07 00:59 - 00023596 _____ C:\Documents and Settings\Compaq_Owner\Desktop\RemoteAccess.reg
2013-11-06 05:23 - 2013-11-06 05:23 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2758857$
2013-11-06 05:22 - 2013-11-06 05:22 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2834886$
2013-11-06 05:21 - 2013-11-06 05:22 - 00135101 _____ C:\WINDOWS\KB2834886.log
2013-11-06 05:20 - 2013-11-06 05:20 - 00135455 _____ C:\WINDOWS\KB923723.log
2013-11-06 05:06 - 2013-11-06 05:06 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2847311$
2013-11-06 05:05 - 2013-11-06 05:05 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2802968$
2013-11-06 05:01 - 2013-11-06 05:02 - 00136707 _____ C:\WINDOWS\KB2862335.log
2013-11-06 05:01 - 2013-11-06 05:01 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2862335$
2013-11-06 04:59 - 2013-11-06 04:59 - 00134536 _____ C:\WINDOWS\KB2834904-v2.log
2013-11-06 04:59 - 2013-11-06 04:59 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2834904-v2_WM11$
2013-11-06 04:59 - 2013-11-06 04:59 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2780091$
2013-11-06 04:58 - 2013-11-06 04:58 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2845187$
2013-11-06 04:57 - 2013-11-06 04:57 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2876217$
2013-11-06 04:54 - 2013-11-06 04:54 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2864063$
2013-11-06 04:43 - 2013-11-14 12:17 - 00000000 ____D C:\WINDOWS\system32\MRT
2013-11-06 04:30 - 2013-11-06 04:30 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2770660$
2013-11-06 04:29 - 2013-11-06 04:29 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2850869$
2013-11-06 04:10 - 2013-11-06 04:11 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2859537$
2013-11-06 04:09 - 2013-11-06 04:09 - 00018487 _____ C:\WINDOWS\KB2807986.log
2013-11-06 04:09 - 2013-11-06 04:09 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2807986$
2013-11-06 04:07 - 2013-11-06 04:07 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2868038$
2013-11-06 04:05 - 2013-11-06 04:07 - 00016758 _____ C:\WINDOWS\KB2868038.log
2013-11-06 04:05 - 2013-11-06 04:05 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2820917$
2013-11-06 04:03 - 2013-11-06 04:03 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2757638$
2013-11-06 03:53 - 2013-11-06 03:53 - 00014888 _____ C:\WINDOWS\KB2820197.log
2013-11-06 03:53 - 2013-11-06 03:53 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2820197$
2013-11-06 03:52 - 2013-11-06 03:52 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2749655$
2013-11-06 03:51 - 2013-11-06 03:52 - 00012825 _____ C:\WINDOWS\KB2863058.log
2013-11-06 03:51 - 2013-11-06 03:52 - 00006086 _____ C:\WINDOWS\system32\TZLog.log
2013-11-06 03:51 - 2013-11-06 03:51 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2863058$
2013-11-06 03:49 - 2013-11-06 03:49 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2849470$
2013-11-06 03:48 - 2013-11-06 03:48 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2727528$
2013-11-06 03:43 - 2013-11-06 03:48 - 00026102 _____ C:\WINDOWS\KB2879017-IE8.log
2013-11-06 03:43 - 2013-11-06 03:43 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2883150$
2013-11-06 03:42 - 2013-11-13 23:28 - 00009112 _____ C:\WINDOWS\updspapi.log
2013-11-06 03:42 - 2013-11-06 03:42 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2661254-v2$
2013-11-06 03:41 - 2013-11-06 03:41 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2862330$
2013-11-06 03:39 - 2013-11-13 23:28 - 00197087 _____ C:\WINDOWS\FaxSetup.log
2013-11-06 03:39 - 2013-11-13 23:28 - 00094592 _____ C:\WINDOWS\ocgen.log
2013-11-06 03:39 - 2013-11-13 23:28 - 00075488 _____ C:\WINDOWS\tsoc.log
2013-11-06 03:39 - 2013-11-13 23:28 - 00065616 _____ C:\WINDOWS\comsetup.log
2013-11-06 03:39 - 2013-11-13 23:28 - 00039789 _____ C:\WINDOWS\ntdtcsetup.log
2013-11-06 03:39 - 2013-11-13 23:28 - 00031264 _____ C:\WINDOWS\iis6.log
2013-11-06 03:39 - 2013-11-13 23:28 - 00010944 _____ C:\WINDOWS\ocmsn.log
2013-11-06 03:39 - 2013-11-13 23:28 - 00009888 _____ C:\WINDOWS\msgsocm.log
2013-11-06 03:39 - 2013-11-13 23:28 - 00001393 _____ C:\WINDOWS\imsins.log
2013-11-06 03:39 - 2013-11-13 23:27 - 00001393 _____ C:\WINDOWS\imsins.BAK
2013-11-06 03:39 - 2013-11-06 03:39 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2813345$
2013-11-06 03:39 - 2013-11-06 03:39 - 00000000 _____ C:\WINDOWS\setuperr.log
2013-11-06 03:39 - 2013-11-06 03:39 - 00000000 _____ C:\WINDOWS\setupact.log
2013-11-06 02:31 - 2013-11-06 02:31 - 00002195 _____ C:\Documents and Settings\Compaq_Owner\Desktop\FSS.txt
2013-11-06 02:28 - 2013-11-06 02:28 - 00000496 _____ C:\Documents and Settings\Compaq_Owner\Desktop\EST Scan.txt
2013-11-05 14:33 - 2013-11-06 05:23 - 00143620 _____ C:\WINDOWS\KB2758857.log
2013-11-05 14:31 - 2013-11-06 05:06 - 00140948 _____ C:\WINDOWS\KB2847311.log
2013-11-05 14:30 - 2013-11-06 05:05 - 00142764 _____ C:\WINDOWS\KB2802968.log
2013-11-05 14:28 - 2013-07-02 18:12 - 00025088 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hidparse.sys
2013-11-05 14:28 - 2013-07-02 17:59 - 00014976 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbscan.sys
2013-11-05 14:27 - 2013-11-06 04:59 - 00143010 _____ C:\WINDOWS\KB2780091.log
2013-11-05 14:26 - 2013-11-06 04:58 - 00139722 _____ C:\WINDOWS\KB2845187.log
2013-11-05 14:25 - 2013-11-06 04:57 - 00140083 _____ C:\WINDOWS\KB2876217.log
2013-11-05 14:24 - 2013-11-06 04:54 - 00139987 _____ C:\WINDOWS\KB2864063.log
2013-11-05 14:14 - 2013-11-06 04:29 - 00019621 _____ C:\WINDOWS\KB2850869.log
2013-11-05 14:09 - 2013-11-06 04:12 - 00023074 _____ C:\WINDOWS\KB2859537.log
2013-11-05 14:09 - 2013-02-11 16:32 - 00012928 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usb8023x.sys
2013-11-05 14:09 - 2013-02-11 16:32 - 00012928 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usb8023.sys
2013-11-05 14:08 - 2013-07-16 16:58 - 00123008 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbvideo.sys
2013-11-05 14:08 - 2013-07-16 16:58 - 00060160 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbaudio.sys
2013-11-05 14:07 - 2013-11-06 04:05 - 00022081 _____ C:\WINDOWS\KB2820917.log
2013-11-05 14:06 - 2013-11-06 04:03 - 00021250 _____ C:\WINDOWS\KB2757638.log
2013-11-05 14:05 - 2013-11-06 03:52 - 00020585 _____ C:\WINDOWS\KB2749655.log
2013-11-05 14:04 - 2013-11-06 03:49 - 00018681 _____ C:\WINDOWS\KB2727528.log
2013-11-05 14:02 - 2013-11-06 03:42 - 00014482 _____ C:\WINDOWS\KB2661254-v2.log
2013-11-05 14:02 - 2013-08-08 16:55 - 00144128 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbport.sys
2013-11-05 14:02 - 2013-08-08 16:55 - 00032384 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbccgp.sys
2013-11-05 14:02 - 2013-08-08 16:55 - 00005376 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbd.sys
2013-11-05 14:02 - 2009-03-18 03:02 - 00030336 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbehci.sys
2013-11-05 13:59 - 2013-11-06 03:39 - 00015822 _____ C:\WINDOWS\KB2813345.log
2013-11-05 12:31 - 2013-11-05 12:31 - 00891184 _____ C:\Documents and Settings\Compaq_Owner\Desktop\SecurityCheck.exe
2013-11-05 12:31 - 2013-11-05 12:31 - 00359085 _____ (Farbar) C:\Documents and Settings\Compaq_Owner\Desktop\FSS.exe
2013-11-03 21:47 - 2013-11-03 21:47 - 00000792 _____ C:\Documents and Settings\All Users\Desktop\Malwarebytes Anti-Malware.lnk
2013-11-03 21:28 - 2013-11-03 21:30 - 10285040 _____ (Malwarebytes Corporation ) C:\Documents and Settings\Compaq_Owner\Desktop\mbam-setup-1.75.0.1300.exe
2013-11-02 01:11 - 2013-11-17 17:09 - 00288448 _____ C:\Documents and Settings\Compaq_Owner\Desktop\OTL.Txt
2013-11-02 01:11 - 2013-11-17 17:09 - 00035854 _____ C:\Documents and Settings\Compaq_Owner\Desktop\Extras.Txt
2013-11-01 14:12 - 2013-11-01 14:12 - 00001910 _____ C:\Documents and Settings\Compaq_Owner\Desktop\aswMBR2.txt
2013-11-01 14:01 - 2013-11-01 14:01 - 00007858 _____ C:\Documents and Settings\Compaq_Owner\Desktop\AdwCleaner[R0].txt
2013-11-01 13:46 - 2013-11-01 23:59 - 00000000 ____D C:\AdwCleaner
2013-11-01 13:30 - 2013-11-01 13:30 - 00000000 ____D C:\_OTL
2013-11-01 13:29 - 2013-11-01 13:29 - 01060070 _____ C:\Documents and Settings\Compaq_Owner\Desktop\AdwCleaner.exe
2013-10-31 11:40 - 2013-10-31 11:40 - 00000000 ____H C:\WINDOWS\system32\config\SAM.tmp.LOG
2013-10-31 11:40 - 2013-10-31 11:40 - 00000000 ____H C:\WINDOWS\system32\config\default.tmp.LOG
2013-10-31 11:39 - 2013-10-31 11:39 - 00000000 ____H C:\WINDOWS\system32\config\system.tmp.LOG
2013-10-31 11:39 - 2013-10-31 11:39 - 00000000 ____H C:\WINDOWS\system32\config\software.tmp.LOG
2013-10-31 11:38 - 2013-10-31 11:38 - 00008192 ____H C:\WINDOWS\system32\config\SECURITY.tmp.LOG
2013-10-31 10:48 - 2013-10-31 10:48 - 00000000 _RSHD C:\cmdcons
2013-10-31 10:39 - 2011-06-25 22:45 - 00256000 _____ C:\WINDOWS\PEV.exe
2013-10-31 10:39 - 2010-11-07 09:20 - 00208896 _____ C:\WINDOWS\MBR.exe
2013-10-31 10:39 - 2009-04-19 20:56 - 00060416 _____ (NirSoft) C:\WINDOWS\NIRCMD.exe
2013-10-31 10:39 - 2000-08-30 16:00 - 00518144 _____ (SteelWerX) C:\WINDOWS\SWREG.exe
2013-10-31 10:39 - 2000-08-30 16:00 - 00406528 _____ (SteelWerX) C:\WINDOWS\SWSC.exe
2013-10-31 10:39 - 2000-08-30 16:00 - 00212480 _____ (SteelWerX) C:\WINDOWS\SWXCACLS.exe
2013-10-31 10:39 - 2000-08-30 16:00 - 00098816 _____ C:\WINDOWS\sed.exe
2013-10-31 10:39 - 2000-08-30 16:00 - 00080412 _____ C:\WINDOWS\grep.exe
2013-10-31 10:39 - 2000-08-30 16:00 - 00068096 _____ C:\WINDOWS\zip.exe
2013-10-31 10:34 - 2013-11-17 14:15 - 00000000 ____D C:\Qoobox
2013-10-30 15:12 - 2013-11-01 14:12 - 00000512 _____ C:\Documents and Settings\Compaq_Owner\Desktop\MBR.dat
2013-10-30 15:12 - 2013-10-30 15:12 - 00002645 _____ C:\Documents and Settings\Compaq_Owner\Desktop\aswMBR.txt
2013-10-30 14:42 - 2013-10-30 14:43 - 04745728 _____ (AVAST Software) C:\Documents and Settings\Compaq_Owner\Desktop\iexplore.exe
2013-10-30 14:40 - 2013-10-30 14:41 - 00018405 _____ C:\Documents and Settings\Compaq_Owner\Desktop\Addition.txt
2013-10-30 14:39 - 2013-10-31 01:55 - 00000000 ____D C:\FRST
2013-10-30 14:38 - 2013-10-30 14:38 - 01089275 _____ (Farbar) C:\Documents and Settings\Compaq_Owner\Desktop\FRST.exe
2013-10-30 13:09 - 2013-10-30 13:17 - 313393112 _____ C:\avenger.txt
2013-10-30 09:39 - 2013-10-30 09:39 - 00602112 _____ (OldTimer Tools) C:\Documents and Settings\Compaq_Owner\Desktop\OTL.exe
2013-10-24 15:15 - 2013-10-24 15:15 - 01835727 _____ C:\Documents and Settings\Compaq_Owner\My Documents\lam ban.mht

==================== One Month Modified Files and Folders =======

2013-11-18 14:15 - 2013-03-24 11:09 - 00000438 ____H C:\WINDOWS\Tasks\User_Feed_Synchronization-{C5695E00-1FBC-4D03-B0B0-1F000C5D1108}.job
2013-11-18 14:06 - 2009-07-01 10:21 - 00001006 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1380244137-392426934-3096447715-1009UA.job
2013-11-18 13:53 - 2013-03-24 12:28 - 00000886 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2013-11-18 13:47 - 2012-09-21 07:31 - 00000830 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2013-11-18 13:20 - 2013-09-23 08:28 - 00032618 _____ C:\WINDOWS\SchedLgU.Txt
2013-11-18 10:06 - 2009-07-01 10:21 - 00000954 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1380244137-392426934-3096447715-1009Core.job
2013-11-18 08:14 - 2012-09-24 09:33 - 00000436 ____H C:\WINDOWS\Tasks\User_Feed_Synchronization-{0698E0CD-E2C7-4082-A0A9-67A5B9C13408}.job
2013-11-18 03:09 - 2013-05-16 17:54 - 01356478 _____ C:\WINDOWS\WindowsUpdate.log
2013-11-18 03:01 - 2011-04-01 11:27 - 00001919 ____C C:\WINDOWS\epplauncher.mif
2013-11-17 20:53 - 2013-03-24 11:58 - 00000896 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2013-11-17 20:15 - 2005-10-09 06:08 - 00000000 __SHD C:\Documents and Settings\NetworkService
2013-11-17 17:09 - 2013-11-02 01:11 - 00288448 _____ C:\Documents and Settings\Compaq_Owner\Desktop\OTL.Txt
2013-11-17 17:09 - 2013-11-02 01:11 - 00035854 _____ C:\Documents and Settings\Compaq_Owner\Desktop\Extras.Txt
2013-11-17 14:20 - 2013-09-23 08:56 - 00087817 _____ C:\WINDOWS\setupapi.log
2013-11-17 14:15 - 2013-11-17 14:15 - 00015175 _____ C:\ComboFix.txt
2013-11-17 14:15 - 2013-10-31 10:34 - 00000000 ____D C:\Qoobox
2013-11-17 14:15 - 2005-06-24 22:29 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2013-11-17 14:09 - 2005-06-24 14:26 - 00000327 _____ C:\WINDOWS\system.ini
2013-11-17 13:35 - 2013-11-17 13:34 - 05146587 ____R (Swearware) C:\Documents and Settings\Compaq_Owner\Desktop\ComboFix.exe
2013-11-17 13:32 - 2013-11-15 17:37 - 00000000 ____D C:\TDSSKiller_Quarantine
2013-11-17 13:29 - 2013-11-17 12:48 - 00000000 ____D C:\Documents and Settings\Compaq_Owner\Desktop\RK_Quarantine
2013-11-17 12:56 - 2013-11-17 12:56 - 00001647 _____ C:\Documents and Settings\Compaq_Owner\Desktop\RKreport[0]_S_11172013_125624.txt
2013-11-17 12:47 - 2013-11-17 12:47 - 03679744 _____ C:\Documents and Settings\Compaq_Owner\Desktop\RogueKiller.exe
2013-11-17 06:48 - 2005-06-24 21:43 - 00520256 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2013-11-17 01:52 - 2012-09-09 18:17 - 00000384 ____H C:\WINDOWS\Tasks\Microsoft Antimalware Scheduled Scan.job
2013-11-16 23:11 - 2013-09-23 08:28 - 00000159 _____ C:\WINDOWS\wiadebug.log
2013-11-16 23:10 - 2013-09-23 08:28 - 00000050 _____ C:\WINDOWS\wiaservc.log
2013-11-16 23:07 - 2013-11-16 23:07 - 00000000 ____D C:\Documents and Settings\Compaq_Owner\Desktop\New Folder (3)
2013-11-16 22:56 - 2005-06-24 21:42 - 00001158 _____ C:\WINDOWS\system32\wpa.dbl
2013-11-16 21:59 - 2006-10-02 20:12 - 00000278 ___SH C:\Documents and Settings\Compaq_Owner\ntuser.ini
2013-11-15 21:29 - 2013-03-24 12:02 - 00001821 _____ C:\Documents and Settings\All Users\Desktop\Google Chrome.lnk
2013-11-15 17:29 - 2013-11-15 17:29 - 04121440 _____ (Kaspersky Lab ZAO) C:\Documents and Settings\Compaq_Owner\Desktop\tdsskiller.exe
2013-11-15 15:38 - 2012-09-05 14:11 - 00001324 _____ C:\WINDOWS\system32\d3d9caps.dat
2013-11-14 12:17 - 2013-11-06 04:43 - 00000000 ____D C:\WINDOWS\system32\MRT
2013-11-13 23:28 - 2013-11-13 23:28 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2868626$
2013-11-13 23:28 - 2013-11-13 11:46 - 00015636 _____ C:\WINDOWS\KB2868626.log
2013-11-13 23:28 - 2013-11-06 03:42 - 00009112 _____ C:\WINDOWS\updspapi.log
2013-11-13 23:28 - 2013-11-06 03:39 - 00197087 _____ C:\WINDOWS\FaxSetup.log
2013-11-13 23:28 - 2013-11-06 03:39 - 00094592 _____ C:\WINDOWS\ocgen.log
2013-11-13 23:28 - 2013-11-06 03:39 - 00075488 _____ C:\WINDOWS\tsoc.log
2013-11-13 23:28 - 2013-11-06 03:39 - 00065616 _____ C:\WINDOWS\comsetup.log
2013-11-13 23:28 - 2013-11-06 03:39 - 00039789 _____ C:\WINDOWS\ntdtcsetup.log
2013-11-13 23:28 - 2013-11-06 03:39 - 00031264 _____ C:\WINDOWS\iis6.log
2013-11-13 23:28 - 2013-11-06 03:39 - 00010944 _____ C:\WINDOWS\ocmsn.log
2013-11-13 23:28 - 2013-11-06 03:39 - 00009888 _____ C:\WINDOWS\msgsocm.log
2013-11-13 23:28 - 2013-11-06 03:39 - 00001393 _____ C:\WINDOWS\imsins.log
2013-11-13 23:27 - 2013-11-13 23:27 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2900986$
2013-11-13 23:27 - 2013-11-13 23:26 - 00009092 _____ C:\WINDOWS\KB2900986.log
2013-11-13 23:27 - 2013-11-06 03:39 - 00001393 _____ C:\WINDOWS\imsins.BAK
2013-11-13 23:25 - 2013-11-13 23:25 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2862152$
2013-11-13 23:25 - 2013-11-13 11:43 - 00014338 _____ C:\WINDOWS\KB2862152.log
2013-11-13 23:23 - 2013-11-13 11:41 - 00013878 _____ C:\WINDOWS\KB2876331.log
2013-11-13 23:22 - 2013-11-13 23:22 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2876331$
2013-11-13 23:22 - 2013-11-13 23:16 - 00022226 _____ C:\WINDOWS\KB2888505-IE8.log
2013-11-13 23:05 - 2006-10-14 21:05 - 80340640 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2013-11-12 12:31 - 2010-02-09 19:17 - 00000284 _____ C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
2013-11-12 08:42 - 2005-10-09 06:08 - 00000178 ___SH C:\Documents and Settings\LocalService\ntuser.ini
2013-11-12 07:38 - 2013-11-12 07:38 - 00981532 _____ C:\Documents and Settings\Compaq_Owner\Desktop\JRT.zip
2013-11-10 14:51 - 2013-11-07 12:42 - 01034531 _____ (Thisisu) C:\Documents and Settings\Compaq_Owner\Desktop\JRT.exe
2013-11-09 09:40 - 2013-11-09 09:40 - 00249072 _____ C:\Documents and Settings\Compaq_Owner\Desktop\OTLnewest.Txt
2013-11-07 21:57 - 2013-11-07 20:35 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-11-07 21:55 - 2012-07-17 20:05 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2013-11-07 20:36 - 2013-11-07 20:36 - 00110080 _____ (Thomas Hoen - T-Tools) C:\Documents and Settings\Compaq_Owner\Desktop\BitRemover.exe
2013-11-07 12:39 - 2013-11-07 12:38 - 00000000 ____D C:\Documents and Settings\Compaq_Owner\Desktop\SS Storage
2013-11-07 12:31 - 2006-01-02 20:56 - 00000000 ____D C:\Documents and Settings\Compaq_Owner\Application Data\Canon
2013-11-07 02:13 - 2013-11-07 02:13 - 00001706 _____ C:\Documents and Settings\All Users\Start Menu\Programs\Microsoft Security Essentials.lnk
2013-11-07 02:13 - 2012-09-09 18:06 - 00000000 ____D C:\Program Files\Microsoft Security Client
2013-11-07 02:04 - 2013-11-07 02:04 - 00253698 _____ C:\Documents and Settings\Compaq_Owner\Desktop\OTL2.Txt
2013-11-07 01:29 - 2013-11-07 01:29 - 00000789 _____ C:\Documents and Settings\Compaq_Owner\Desktop\Stored.txt
2013-11-07 01:26 - 2009-05-24 15:29 - 00000000 ____D C:\Program Files\Spybot - Search & Destroy
2013-11-07 01:26 - 2009-05-24 15:29 - 00000000 ____D C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2013-11-07 01:05 - 2009-05-30 18:43 - 00000000 ____D C:\WINDOWS\ERDNT
2013-11-07 01:01 - 2013-11-07 01:00 - 11227472 _____ (Microsoft Corporation) C:\Documents and Settings\Compaq_Owner\Desktop\mseinstall.exe
2013-11-07 00:59 - 2013-11-07 00:59 - 00023596 _____ C:\Documents and Settings\Compaq_Owner\Desktop\RemoteAccess.reg
2013-11-06 13:24 - 2005-10-09 06:12 - 00000000 ____D C:\WINDOWS\Microsoft.NET
2013-11-06 10:40 - 2005-10-09 06:08 - 00000000 __SHD C:\Documents and Settings\LocalService
2013-11-06 10:35 - 2013-05-19 14:49 - 00243128 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2013-11-06 10:35 - 2010-10-24 20:50 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-11-06 05:23 - 2013-11-06 05:23 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2758857$
2013-11-06 05:23 - 2013-11-05 14:33 - 00143620 _____ C:\WINDOWS\KB2758857.log
2013-11-06 05:22 - 2013-11-06 05:22 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2834886$
2013-11-06 05:22 - 2013-11-06 05:21 - 00135101 _____ C:\WINDOWS\KB2834886.log
2013-11-06 05:20 - 2013-11-06 05:20 - 00135455 _____ C:\WINDOWS\KB923723.log
2013-11-06 05:06 - 2013-11-06 05:06 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2847311$
2013-11-06 05:06 - 2013-11-05 14:31 - 00140948 _____ C:\WINDOWS\KB2847311.log
2013-11-06 05:05 - 2013-11-06 05:05 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2802968$
2013-11-06 05:05 - 2013-11-05 14:30 - 00142764 _____ C:\WINDOWS\KB2802968.log
2013-11-06 05:02 - 2013-11-06 05:01 - 00136707 _____ C:\WINDOWS\KB2862335.log
2013-11-06 05:01 - 2013-11-06 05:01 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2862335$
2013-11-06 04:59 - 2013-11-06 04:59 - 00134536 _____ C:\WINDOWS\KB2834904-v2.log
2013-11-06 04:59 - 2013-11-06 04:59 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2834904-v2_WM11$
2013-11-06 04:59 - 2013-11-06 04:59 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2780091$
2013-11-06 04:59 - 2013-11-05 14:27 - 00143010 _____ C:\WINDOWS\KB2780091.log
2013-11-06 04:58 - 2013-11-06 04:58 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2845187$
2013-11-06 04:58 - 2013-11-05 14:26 - 00139722 _____ C:\WINDOWS\KB2845187.log
2013-11-06 04:57 - 2013-11-06 04:57 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2876217$
2013-11-06 04:57 - 2013-11-05 14:25 - 00140083 _____ C:\WINDOWS\KB2876217.log
2013-11-06 04:54 - 2013-11-06 04:54 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2864063$
2013-11-06 04:54 - 2013-11-05 14:24 - 00139987 _____ C:\WINDOWS\KB2864063.log
2013-11-06 04:37 - 2010-10-24 20:50 - 00000000 ____D C:\Documents and Settings\All Users\Start Menu\Programs\Microsoft Silverlight
2013-11-06 04:30 - 2013-11-06 04:30 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2770660$
2013-11-06 04:29 - 2013-11-06 04:29 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2850869$
2013-11-06 04:29 - 2013-11-05 14:14 - 00019621 _____ C:\WINDOWS\KB2850869.log
2013-11-06 04:12 - 2013-11-05 14:09 - 00023074 _____ C:\WINDOWS\KB2859537.log
2013-11-06 04:11 - 2013-11-06 04:10 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2859537$
2013-11-06 04:09 - 2013-11-06 04:09 - 00018487 _____ C:\WINDOWS\KB2807986.log
2013-11-06 04:09 - 2013-11-06 04:09 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2807986$
2013-11-06 04:09 - 2005-10-09 06:22 - 00000000 ___HD C:\WINDOWS\$hf_mig$
2013-11-06 04:07 - 2013-11-06 04:07 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2868038$
2013-11-06 04:07 - 2013-11-06 04:05 - 00016758 _____ C:\WINDOWS\KB2868038.log
2013-11-06 04:05 - 2013-11-06 04:05 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2820917$
2013-11-06 04:05 - 2013-11-05 14:07 - 00022081 _____ C:\WINDOWS\KB2820917.log
2013-11-06 04:03 - 2013-11-06 04:03 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2757638$
2013-11-06 04:03 - 2013-11-05 14:06 - 00021250 _____ C:\WINDOWS\KB2757638.log
2013-11-06 04:00 - 2005-06-24 21:32 - 00002107 _____ C:\WINDOWS\win.ini
2013-11-06 03:53 - 2013-11-06 03:53 - 00014888 _____ C:\WINDOWS\KB2820197.log
2013-11-06 03:53 - 2013-11-06 03:53 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2820197$
2013-11-06 03:52 - 2013-11-06 03:52 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2749655$
2013-11-06 03:52 - 2013-11-06 03:51 - 00012825 _____ C:\WINDOWS\KB2863058.log
2013-11-06 03:52 - 2013-11-06 03:51 - 00006086 _____ C:\WINDOWS\system32\TZLog.log
2013-11-06 03:52 - 2013-11-05 14:05 - 00020585 _____ C:\WINDOWS\KB2749655.log
2013-11-06 03:51 - 2013-11-06 03:51 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2863058$
2013-11-06 03:49 - 2013-11-06 03:49 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2849470$
2013-11-06 03:49 - 2013-11-05 14:04 - 00018681 _____ C:\WINDOWS\KB2727528.log
2013-11-06 03:48 - 2013-11-06 03:48 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2727528$
2013-11-06 03:48 - 2013-11-06 03:43 - 00026102 _____ C:\WINDOWS\KB2879017-IE8.log
2013-11-06 03:43 - 2013-11-06 03:43 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2883150$
2013-11-06 03:42 - 2013-11-06 03:42 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2661254-v2$
2013-11-06 03:42 - 2013-11-05 14:02 - 00014482 _____ C:\WINDOWS\KB2661254-v2.log
2013-11-06 03:41 - 2013-11-06 03:41 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2862330$
2013-11-06 03:39 - 2013-11-06 03:39 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2813345$
2013-11-06 03:39 - 2013-11-06 03:39 - 00000000 _____ C:\WINDOWS\setuperr.log
2013-11-06 03:39 - 2013-11-06 03:39 - 00000000 _____ C:\WINDOWS\setupact.log
2013-11-06 03:39 - 2013-11-05 13:59 - 00015822 _____ C:\WINDOWS\KB2813345.log
2013-11-06 03:19 - 2011-02-28 12:42 - 00000000 ____D C:\WINDOWS\system32\XPSViewer
2013-11-06 02:31 - 2013-11-06 02:31 - 00002195 _____ C:\Documents and Settings\Compaq_Owner\Desktop\FSS.txt
2013-11-06 02:28 - 2013-11-06 02:28 - 00000496 _____ C:\Documents and Settings\Compaq_Owner\Desktop\EST Scan.txt
2013-11-05 12:31 - 2013-11-05 12:31 - 00891184 _____ C:\Documents and Settings\Compaq_Owner\Desktop\SecurityCheck.exe
2013-11-05 12:31 - 2013-11-05 12:31 - 00359085 _____ (Farbar) C:\Documents and Settings\Compaq_Owner\Desktop\FSS.exe
2013-11-03 21:47 - 2013-11-03 21:47 - 00000792 _____ C:\Documents and Settings\All Users\Desktop\Malwarebytes Anti-Malware.lnk
2013-11-03 21:47 - 2013-09-23 17:10 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2013-11-03 21:30 - 2013-11-03 21:28 - 10285040 _____ (Malwarebytes Corporation ) C:\Documents and Settings\Compaq_Owner\Desktop\mbam-setup-1.75.0.1300.exe
2013-11-01 23:59 - 2013-11-01 13:46 - 00000000 ____D C:\AdwCleaner
2013-11-01 14:12 - 2013-11-01 14:12 - 00001910 _____ C:\Documents and Settings\Compaq_Owner\Desktop\aswMBR2.txt
2013-11-01 14:12 - 2013-10-30 15:12 - 00000512 _____ C:\Documents and Settings\Compaq_Owner\Desktop\MBR.dat
2013-11-01 14:01 - 2013-11-01 14:01 - 00007858 _____ C:\Documents and Settings\Compaq_Owner\Desktop\AdwCleaner[R0].txt
2013-11-01 13:30 - 2013-11-01 13:30 - 00000000 ____D C:\_OTL
2013-11-01 13:29 - 2013-11-01 13:29 - 01060070 _____ C:\Documents and Settings\Compaq_Owner\Desktop\AdwCleaner.exe
2013-11-01 13:18 - 2012-07-10 09:43 - 00000000 ____D C:\Program Files\IObit Toolbar
2013-10-31 11:45 - 2013-11-07 01:15 - 00000027 _____ C:\WINDOWS\system32\Drivers\etc\hosts.20131107-011505.backup
2013-10-31 11:40 - 2013-10-31 11:40 - 00000000 ____H C:\WINDOWS\system32\config\SAM.tmp.LOG
2013-10-31 11:40 - 2013-10-31 11:40 - 00000000 ____H C:\WINDOWS\system32\config\default.tmp.LOG
2013-10-31 11:40 - 2005-06-24 22:29 - 34406400 _____ C:\WINDOWS\system32\config\software.bak
2013-10-31 11:40 - 2005-06-24 22:29 - 05767168 _____ C:\WINDOWS\system32\config\system.bak
2013-10-31 11:40 - 2005-06-24 22:29 - 00352256 _____ C:\WINDOWS\system32\config\default.bak
2013-10-31 11:40 - 2005-06-24 22:29 - 00057344 _____ C:\WINDOWS\system32\config\SECURITY.bak
2013-10-31 11:40 - 2005-06-24 22:29 - 00024576 _____ C:\WINDOWS\system32\config\SAM.bak
2013-10-31 11:39 - 2013-10-31 11:39 - 00000000 ____H C:\WINDOWS\system32\config\system.tmp.LOG
2013-10-31 11:39 - 2013-10-31 11:39 - 00000000 ____H C:\WINDOWS\system32\config\software.tmp.LOG
2013-10-31 11:38 - 2013-10-31 11:38 - 00008192 ____H C:\WINDOWS\system32\config\SECURITY.tmp.LOG
2013-10-31 11:12 - 2006-10-02 20:12 - 00000000 ____D C:\Documents and Settings\Compaq_Owner
2013-10-31 10:48 - 2013-10-31 10:48 - 00000000 _RSHD C:\cmdcons
2013-10-31 10:48 - 2005-06-25 19:39 - 00000354 __RSH C:\boot.ini
2013-10-31 10:24 - 2012-09-24 09:08 - 00002497 _____ C:\Documents and Settings\Compaq_Owner\Desktop\Microsoft Office Word 2003.lnk
2013-10-31 09:53 - 2006-01-02 19:23 - 00000309 _____ C:\Boot.bak
2013-10-31 01:55 - 2013-10-30 14:39 - 00000000 ____D C:\FRST
2013-10-30 15:12 - 2013-10-30 15:12 - 00002645 _____ C:\Documents and Settings\Compaq_Owner\Desktop\aswMBR.txt
2013-10-30 14:43 - 2013-10-30 14:42 - 04745728 _____ (AVAST Software) C:\Documents and Settings\Compaq_Owner\Desktop\iexplore.exe
2013-10-30 14:41 - 2013-10-30 14:40 - 00018405 _____ C:\Documents and Settings\Compaq_Owner\Desktop\Addition.txt
2013-10-30 14:38 - 2013-10-30 14:38 - 01089275 _____ (Farbar) C:\Documents and Settings\Compaq_Owner\Desktop\FRST.exe
2013-10-30 14:25 - 2010-06-20 15:12 - 00000000 ____D C:\Documents and Settings\Administrator
2013-10-30 14:23 - 2005-07-13 09:04 - 00000000 ____D C:\WINDOWS\Registration
2013-10-30 13:17 - 2013-10-30 13:09 - 313393112 _____ C:\avenger.txt
2013-10-30 13:10 - 2006-07-01 20:54 - 00000000 ____D C:\WINDOWS\Sun
2013-10-30 10:25 - 2012-09-25 14:14 - 00000000 ____D C:\Documents and Settings\Compaq_Owner\Desktop\SYSTEM-CARE
2013-10-30 09:39 - 2013-10-30 09:39 - 00602112 _____ (OldTimer Tools) C:\Documents and Settings\Compaq_Owner\Desktop\OTL.exe
2013-10-29 09:37 - 2010-02-18 09:46 - 00000000 __SHD C:\Documents and Settings\LocalService\IETldCache
2013-10-29 09:24 - 2006-10-02 20:12 - 00000000 ____D C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Google
2013-10-29 09:24 - 2005-10-09 07:04 - 00000000 ____D C:\Program Files\Google
2013-10-26 10:34 - 2011-11-08 19:48 - 00002187 _____ C:\Documents and Settings\Compaq_Owner\Desktop\Safari.lnk
2013-10-25 10:08 - 2006-01-28 19:25 - 00000000 ____D C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla
2013-10-24 15:15 - 2013-10-24 15:15 - 01835727 _____ C:\Documents and Settings\Compaq_Owner\My Documents\lam ban.mht

==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== End Of Log ============================



Additional scan result of Farbar Recovery Scan Tool (x86) Version: 30-10-2013
Ran by Compaq_Owner at 2013-11-18 14:16:10
Running from C:\Documents and Settings\Compaq_Owner\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Microsoft Security Essentials (Disabled - Up to date) {EDB4FA23-53B8-4AFA-8C5D-99752CCA7095}
AV: Microsoft Security Essentials (Disabled - Up to date) {BCF43643-A118-4432-AEDE-D861FCBCFCDF}
Could not list Security Center items. Check WMI.


==================== Installed Programs ======================

Adobe AIR (Version: 2.0.2.12610)
Adobe Flash Player 11 ActiveX (Version: 11.5.502.135)
Adobe Flash Player 11 Plugin (Version: 11.6.602.180)
Adobe Reader XI (11.0.03) (Version: 11.0.03)
Agere Systems PCI Soft Modem
America Online (Choose which version to remove)
Apple Application Support (Version: 2.3)
Apple Mobile Device Support (Version: 4.0.0.96)
Apple Software Update (Version: 2.1.3.127)
ATI Control Panel (Version: 6.14.10.5157)
ATI Display Driver (Version: 8.15-050607a-024880C-HP)
Bonjour (Version: 3.0.0.10)
CCleaner (Version: 3.24)
Compatibility Pack for the 2007 Office system (Version: 12.0.6612.1000)
CPUID CPU-Z 1.52.2
D-Link AirPlus
ERUNT 1.1j
Google Chrome (Version: 31.0.1650.57)
Google Talk (remove only)
Google Talk Plugin (Version: 4.8.2.15856)
Google Toolbar for Internet Explorer (Version: 1.0.0)
Google Toolbar for Internet Explorer (Version: 7.5.4601.54)
Google Update Helper (Version: 1.3.21.165)
Graphic.ly (Version: 0.8.5)
HijackThis 2.0.2 (Version: 2.0.2)
HpSdpAppCoreApp (Version: 3.00.0000)
ImagXpress (Version: 7.0.74.0)
InterVideo WinDVD Player (Version: 5.0-B11.789)
IObit Toolbar v6.0 (Version: 6.0)
iTunes (Version: 10.5.0.142)
Japanese Fonts Support For Adobe Reader 9 (Version: 9.0.0)
Malwarebytes Anti-Malware version 1.75.0.1300 (Version: 1.75.0.1300)
Microsoft .NET Framework 1.1 (Version: 1.1.4322)
Microsoft .NET Framework 1.1 Security Update (KB2833941)
Microsoft .NET Framework 1.1 Security Update (KB979906)
Microsoft .NET Framework 2.0 Service Pack 2 (Version: 2.2.30729)
Microsoft .NET Framework 3.0 Service Pack 2 (Version: 3.2.30729)
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729)
Microsoft Application Error Reporting (Version: 12.0.6012.5000)
Microsoft LifeCam (Version: 1.40.164.0)
Microsoft Office File Validation Add-In (Version: 14.0.5130.5003)
Microsoft Office Professional Edition 2003 (Version: 11.0.8173.0)
Microsoft Security Client (Version: 4.3.0219.0)
Microsoft Security Essentials (Version: 4.3.219.0)
Microsoft Silverlight (Version: 5.1.20913.0)
Mozilla Firefox 25.0 (x86 en-US) (Version: 25.0)
Mozilla Maintenance Service (Version: 25.0)
MSN
MSXML 4.0 SP2 (KB925672) (Version: 4.20.9839.0)
MSXML 4.0 SP2 (KB927978) (Version: 4.20.9841.0)
MSXML 4.0 SP2 (KB936181) (Version: 4.20.9848.0)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
neroxml (Version: 1.0.0)
Picasa 3 (Version: 3.8)
Poxnora (HKCU Version: 1.0.3.183)
PrivaZer (HKCU Version: 1.10.0.0)
QuickTime (Version: 7.73.80.64)
Safari (Version: 5.34.51.22)
Samsung ML-1740 Series
Skype™ 6.3 (Version: 6.3.105)
Steam (Version: 1.0.0.0)
SUPERAntiSpyware (Version: 5.6.1014)
Turbo Tax Audit Support Center 2.0
TurboTax 2010
TurboTax 2010 WinPerFedFormset (Version: 010.000.3610)
TurboTax 2010 WinPerReleaseEngine (Version: 010.000.0431)
TurboTax 2010 WinPerTaxSupport (Version: 010.000.0202)
TurboTax 2010 wrapper (Version: 010.000.0157)
UniKey 3.63 (Version: 3.63)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (Version: 1)
Update for Windows XP (KB2661254-v2) (Version: 2)
Update for Windows XP (KB2749655) (Version: 1)
Update for Windows XP (KB2863058) (Version: 1)
Ventrilo Client (Version: 3.0.8)
WebFldrs XP (Version: 9.50.7523)
WinDirStat 1.1.2
Windows Internet Explorer 8 (Version: 20090308.140743)
Windows Live Sign-in Assistant (Version: 5.000.818.5)
Windows Live Upload Tool (Version: 14.0.8014.1029)
Windows Management Framework Core
Windows Media Format 11 runtime
Windows Media Player 11
WinRAR archiver

==================== Restore Points =========================

21-08-2013 02:40:59 System Checkpoint
22-08-2013 02:48:16 System Checkpoint
23-08-2013 00:46:28 Removed D-Link AirPlus
23-08-2013 00:46:48 Installed D-Link AirPlus
23-08-2013 00:55:50 Removed D-Link AirPlus
23-08-2013 00:58:10 Installed D-Link AirPlus
23-08-2013 01:02:10 Removed D-Link AirPlus
23-08-2013 01:02:31 Installed D-Link AirPlus
24-08-2013 02:06:34 System Checkpoint
25-08-2013 16:35:49 System Checkpoint
26-08-2013 16:36:02 System Checkpoint
27-08-2013 17:21:35 System Checkpoint
28-08-2013 19:48:00 System Checkpoint
29-08-2013 20:00:59 System Checkpoint
30-08-2013 07:46:31 Installed Steam
02-09-2013 23:08:43 System Checkpoint
04-09-2013 00:25:45 System Checkpoint
05-09-2013 02:51:10 System Checkpoint
06-09-2013 03:12:30 System Checkpoint
07-09-2013 17:44:27 System Checkpoint
08-09-2013 20:11:21 System Checkpoint
10-09-2013 02:20:13 System Checkpoint
11-09-2013 02:46:28 System Checkpoint
12-09-2013 16:51:43 System Checkpoint
13-09-2013 18:04:14 System Checkpoint
14-09-2013 20:14:04 System Checkpoint
15-09-2013 20:52:39 System Checkpoint
16-09-2013 21:19:14 System Checkpoint
17-09-2013 21:20:21 System Checkpoint
18-09-2013 21:32:54 System Checkpoint
19-09-2013 22:00:18 System Checkpoint
20-09-2013 23:27:27 System Checkpoint
22-09-2013 02:35:13 System Checkpoint
23-09-2013 02:40:08 System Checkpoint
24-09-2013 01:09:02 Restore Operation
25-09-2013 02:24:56 System Checkpoint
26-09-2013 03:33:37 System Checkpoint
27-09-2013 04:06:02 System Checkpoint
28-09-2013 04:19:19 System Checkpoint
29-09-2013 05:10:50 System Checkpoint
30-09-2013 16:08:21 System Checkpoint
01-10-2013 17:01:35 System Checkpoint
02-10-2013 20:41:26 System Checkpoint
03-10-2013 21:12:44 System Checkpoint
04-10-2013 22:30:39 System Checkpoint
06-10-2013 02:51:58 System Checkpoint
07-10-2013 03:00:17 System Checkpoint
08-10-2013 03:29:15 System Checkpoint
09-10-2013 04:22:57 System Checkpoint
10-10-2013 04:35:10 System Checkpoint
11-10-2013 17:21:35 System Checkpoint
12-10-2013 20:43:07 System Checkpoint
13-10-2013 21:34:12 System Checkpoint
14-10-2013 21:55:31 System Checkpoint
16-10-2013 02:07:26 System Checkpoint
17-10-2013 02:09:01 System Checkpoint
18-10-2013 02:16:57 System Checkpoint
19-10-2013 02:19:26 System Checkpoint
20-10-2013 02:28:30 System Checkpoint
21-10-2013 03:00:14 System Checkpoint
22-10-2013 03:51:02 System Checkpoint
23-10-2013 04:19:56 System Checkpoint
24-10-2013 05:03:48 System Checkpoint
25-10-2013 17:25:17 System Checkpoint
26-10-2013 19:05:13 System Checkpoint
27-10-2013 19:16:49 System Checkpoint
28-10-2013 19:54:18 System Checkpoint
29-10-2013 21:06:54 System Checkpoint
30-10-2013 22:20:10 Restore Operation
31-10-2013 19:48:23 Software Distribution Service 3.0
31-10-2013 21:01:54 Software Distribution Service 3.0
31-10-2013 21:15:01 OTL Restore Point - 10/31/2013 2:14:09 PM
01-11-2013 21:16:44 Removed IObit Toolbar v6.0.
01-11-2013 21:18:07 Removed IObit Toolbar v6.0.
01-11-2013 21:19:39 Removed Java™ 6 Update 13
01-11-2013 23:22:04 Software Distribution Service 3.0
02-11-2013 10:00:54 Software Distribution Service 3.0
03-11-2013 10:00:52 Software Distribution Service 3.0
03-11-2013 11:00:54 Software Distribution Service 3.0
04-11-2013 11:02:19 Software Distribution Service 3.0
05-11-2013 11:00:54 Software Distribution Service 3.0
05-11-2013 22:52:18 Software Distribution Service 3.0
06-11-2013 10:43:42 Software Distribution Service 3.0
07-11-2013 09:39:07 OTL Restore Point - 11/7/2013 1:37:16 AM
07-11-2013 10:36:58 Software Distribution Service 3.0
08-11-2013 10:00:44 Software Distribution Service 3.0
11-11-2013 03:34:03 System Checkpoint
12-11-2013 04:30:43 System Checkpoint
12-11-2013 15:53:42 Software Distribution Service 3.0
13-11-2013 19:47:25 Software Distribution Service 3.0
14-11-2013 07:03:04 Software Distribution Service 3.0
15-11-2013 19:54:34 Software Distribution Service 3.0
16-11-2013 20:05:02 System Checkpoint
17-11-2013 06:38:16 Just in case
17-11-2013 06:40:00 Software Distribution Service 3.0
17-11-2013 06:56:19 Restore Operation
17-11-2013 07:13:20 Restore Operation
17-11-2013 11:00:56 Software Distribution Service 3.0
18-11-2013 11:00:55 Software Distribution Service 3.0

==================== Hosts content: ==========================

2004-08-04 11:00 - 2013-11-17 14:09 - 00000027 ____A C:\WINDOWS\system32\Drivers\etc\hosts
127.0.0.1 localhost

==================== Scheduled Tasks (whitelisted) =============

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\AppleSoftwareUpdate.job => C:\Program Files\Apple Software Update\SoftwareUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1380244137-392426934-3096447715-1009Core.job => C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1380244137-392426934-3096447715-1009UA.job => C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\Microsoft Antimalware Scheduled Scan.job => c:\Program Files\Microsoft Security Client\MpCmdRun.exe
Task: C:\WINDOWS\Tasks\User_Feed_Synchronization-{0698E0CD-E2C7-4082-A0A9-67A5B9C13408}.job => C:\WINDOWS\system32\msfeedssync.exe
Task: C:\WINDOWS\Tasks\User_Feed_Synchronization-{C5695E00-1FBC-4D03-B0B0-1F000C5D1108}.job => C:\WINDOWS\system32\msfeedssync.exe

==================== Loaded Modules (whitelisted) =============


==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============

Name: D-Link AirPlus DWL-520+ Wireless PCI Adapter
Description: D-Link AirPlus DWL-520+ Wireless PCI Adapter
Class Guid: {4D36E972-E325-11CE-BFC1-08002BE10318}
Manufacturer: D-Link
Service: AIRPLUS
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (11/18/2013 03:01:36 AM) (Source: MsiInstaller) (User: NT AUTHORITY)
Description: Product: Microsoft Security Client -- A reboot is needed to clean an active threat. Setup cannot continue until the threat has been cleaned.

Error: (11/17/2013 01:34:46 PM) (Source: MPSampleSubmission) (User: )
Description: EventType mptelemetry, P1 unspecified, P2 hardeningtelemetry, P3 hardeningtelemetrydisablertp, P4 4.3.219.0, P5 unspecified, P6 unspecified, P7 unspecified, P8 NIL, P9 mptelemetry0, P10 mptelemetry1.

Error: (11/17/2013 03:01:43 AM) (Source: MsiInstaller) (User: NT AUTHORITY)
Description: Product: Microsoft Security Client -- A reboot is needed to clean an active threat. Setup cannot continue until the threat has been cleaned.

Error: (11/13/2013 11:35:41 AM) (Source: Application Error) (User: )
Description: Faulting application explorer.exe, version 6.0.2900.5512, faulting module mshtml.dll, version 8.0.6001.23532, fault address 0x00088cc7.
Processing media-specific event for [explorer.exe!ws!]

Error: (11/12/2013 09:03:22 AM) (Source: Application Error) (User: )
Description: Faulting application explorer.exe, version 6.0.2900.5512, faulting module unknown, version 0.0.0.0, fault address 0x00000000.
Processing media-specific event for [explorer.exe!ws!]

Error: (11/12/2013 07:44:26 AM) (Source: MPSampleSubmission) (User: )
Description: EventType mptelemetry, P1 unspecified, P2 hardeningtelemetry, P3 hardeningtelemetrydisablertp, P4 4.3.219.0, P5 unspecified, P6 unspecified, P7 unspecified, P8 NIL, P9 mptelemetry0, P10 mptelemetry1.

Error: (11/12/2013 07:40:12 AM) (Source: MPSampleSubmission) (User: )
Description: EventType mptelemetry, P1 unspecified, P2 hardeningtelemetry, P3 hardeningtelemetrydisablertp, P4 4.3.219.0, P5 unspecified, P6 unspecified, P7 unspecified, P8 NIL, P9 mptelemetry0, P10 mptelemetry1.

Error: (11/09/2013 08:56:57 AM) (Source: Application Error) (User: )
Description: Faulting application explorer.exe, version 6.0.2900.5512, faulting module unknown, version 0.0.0.0, fault address 0x00000000.
Processing media-specific event for [explorer.exe!ws!]

Error: (11/08/2013 09:04:02 PM) (Source: MPSampleSubmission) (User: )
Description: EventType mptelemetry, P1 unspecified, P2 hardeningtelemetry, P3 hardeningtelemetrydisablertp, P4 4.3.219.0, P5 unspecified, P6 unspecified, P7 unspecified, P8 NIL, P9 mptelemetry0, P10 mptelemetry1.

Error: (11/08/2013 07:55:15 AM) (Source: Application Error) (User: )
Description: Faulting application explorer.exe, version 6.0.2900.5512, faulting module ntdll.dll, version 5.1.2600.6055, fault address 0x000673be.
Processing media-specific event for [explorer.exe!ws!]


System errors:
=============
Error: (11/18/2013 01:53:39 PM) (Source: DCOM) (User: NT AUTHORITY)
Description: DCOM got error "%%1058" attempting to start the service gupdate with arguments "/comsvc"
in order to run the server:
{4EB61BAC-A3B6-4760-9581-655041EF4D69}

Error: (11/18/2013 00:53:55 PM) (Source: DCOM) (User: NT AUTHORITY)
Description: DCOM got error "%%1058" attempting to start the service gupdate with arguments "/comsvc"
in order to run the server:
{4EB61BAC-A3B6-4760-9581-655041EF4D69}

Error: (11/18/2013 11:53:53 AM) (Source: DCOM) (User: NT AUTHORITY)
Description: DCOM got error "%%1058" attempting to start the service gupdate with arguments "/comsvc"
in order to run the server:
{4EB61BAC-A3B6-4760-9581-655041EF4D69}

Error: (11/18/2013 10:53:34 AM) (Source: DCOM) (User: NT AUTHORITY)
Description: DCOM got error "%%1058" attempting to start the service gupdate with arguments "/comsvc"
in order to run the server:
{4EB61BAC-A3B6-4760-9581-655041EF4D69}

Error: (11/18/2013 09:53:28 AM) (Source: DCOM) (User: NT AUTHORITY)
Description: DCOM got error "%%1058" attempting to start the service gupdate with arguments "/comsvc"
in order to run the server:
{4EB61BAC-A3B6-4760-9581-655041EF4D69}

Error: (11/18/2013 08:53:56 AM) (Source: DCOM) (User: NT AUTHORITY)
Description: DCOM got error "%%1058" attempting to start the service gupdate with arguments "/comsvc"
in order to run the server:
{4EB61BAC-A3B6-4760-9581-655041EF4D69}

Error: (11/18/2013 07:53:08 AM) (Source: DCOM) (User: NT AUTHORITY)
Description: DCOM got error "%%1058" attempting to start the service gupdate with arguments "/comsvc"
in order to run the server:
{4EB61BAC-A3B6-4760-9581-655041EF4D69}

Error: (11/18/2013 06:53:31 AM) (Source: DCOM) (User: NT AUTHORITY)
Description: DCOM got error "%%1058" attempting to start the service gupdate with arguments "/comsvc"
in order to run the server:
{4EB61BAC-A3B6-4760-9581-655041EF4D69}

Error: (11/18/2013 05:53:02 AM) (Source: DCOM) (User: NT AUTHORITY)
Description: DCOM got error "%%1058" attempting to start the service gupdate with arguments "/comsvc"
in order to run the server:
{4EB61BAC-A3B6-4760-9581-655041EF4D69}

Error: (11/18/2013 04:53:18 AM) (Source: DCOM) (User: NT AUTHORITY)
Description: DCOM got error "%%1058" attempting to start the service gupdate with arguments "/comsvc"
in order to run the server:
{4EB61BAC-A3B6-4760-9581-655041EF4D69}


Microsoft Office Sessions:
=========================
Error: (11/18/2013 03:01:36 AM) (Source: MsiInstaller)(User: NT AUTHORITY)
Description: Product: Microsoft Security Client -- A reboot is needed to clean an active threat. Setup cannot continue until the threat has been cleaned.(NULL)(NULL)(NULL)

Error: (11/17/2013 01:34:46 PM) (Source: MPSampleSubmission)(User: )
Description: mptelemetryunspecifiedhardeningtelemetryhardeningtelemetrydisablertp4.3.219.0unspecifiedunspecifiedunspecifiedNILNILNIL

Error: (11/17/2013 03:01:43 AM) (Source: MsiInstaller)(User: NT AUTHORITY)
Description: Product: Microsoft Security Client -- A reboot is needed to clean an active threat. Setup cannot continue until the threat has been cleaned.(NULL)(NULL)(NULL)

Error: (11/13/2013 11:35:41 AM) (Source: Application Error)(User: )
Description: explorer.exe6.0.2900.5512mshtml.dll8.0.6001.2353200088cc7

Error: (11/12/2013 09:03:22 AM) (Source: Application Error)(User: )
Description: explorer.exe6.0.2900.5512unknown0.0.0.000000000

Error: (11/12/2013 07:44:26 AM) (Source: MPSampleSubmission)(User: )
Description: mptelemetryunspecifiedhardeningtelemetryhardeningtelemetrydisablertp4.3.219.0unspecifiedunspecifiedunspecifiedNILNILNIL

Error: (11/12/2013 07:40:12 AM) (Source: MPSampleSubmission)(User: )
Description: mptelemetryunspecifiedhardeningtelemetryhardeningtelemetrydisablertp4.3.219.0unspecifiedunspecifiedunspecifiedNILNILNIL

Error: (11/09/2013 08:56:57 AM) (Source: Application Error)(User: )
Description: explorer.exe6.0.2900.5512unknown0.0.0.000000000

Error: (11/08/2013 09:04:02 PM) (Source: MPSampleSubmission)(User: )
Description: mptelemetryunspecifiedhardeningtelemetryhardeningtelemetrydisablertp4.3.219.0unspecifiedunspecifiedunspecifiedNILNILNIL

Error: (11/08/2013 07:55:15 AM) (Source: Application Error)(User: )
Description: explorer.exe6.0.2900.5512ntdll.dll5.1.2600.6055000673be


==================== Memory info ===========================

Percentage of memory in use: 27%
Total physical RAM: 2238.48 MB
Available physical RAM: 1623.62 MB
Total Pagefile: 4321.34 MB
Available Pagefile: 3976.43 MB
Total Virtual: 2047.88 MB
Available Virtual: 1955.93 MB

==================== Drives ================================

Drive c: (PRESARIO) (Fixed) (Total:68.01 GB) (Free:37.09 GB) NTFS ==>[Drive with boot components (Windows XP)]
Drive d: (PRESARIO_RP) (Fixed) (Total:6.5 GB) (Free:1.45 GB) FAT32 ==>[Drive with boot components (Windows XP)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 75 GB) (Disk ID: 1549F232)
Partition 00: (Not Active) - (Size=0) - (Type=00) ATTENTION ===> 0 byte partition bootkit.
Partition 1: (Not Active) - (Size=7 GB) - (Type=0C)
Partition 2: (Active) - (Size=68 GB) - (Type=07 NTFS)

==================== End Of Log ============================

[godawgs]

I have noticed something else though. The computer seems to be running fine when offline, but as soon as I connect it to the internet, it starts to become a little choppy. Also, the CPU Usage always seems to be maxed, even now, as I am typing this, the CPU usage is at 100%.

Acknowledged. Which browser are you using when you go the internet? Could you try the other browsers and see if if the issue is present on them also.

Are there any other issues you notice? I ask because the event log still shows a problem with MSE:

Error - 11/17/2013 7:01:43 AM | Computer Name = YOUR-27E1513D96 | Source = MsiInstaller | ID = 10005
Description = Product: Microsoft Security Client -- A reboot is needed to clean
an active threat. Setup cannot continue until the threat has been cleaned.

Is MSE working OK? Are you still getting the popup in MSE?

Step-1.

I want you to see if you can uninstall the Iobit Toolbar in Add/Remove programs again.

Uninstall Programs

1. Please click Start > Control Panel > Add/Remove Programs
2. In the list of programs installed, locate the following program(s):

IObit Toolbar v6.0

3. Click on each program to highlight it and click Change/Remove.
4. After the programs have been uninstalled, close the Installed Programs window and the Control Panel.
5. Reboot the computer.


Step-2.

Now that we have killed all of the rootkits please see it the JRT tool will run now.

Scan with JRT:



NOTE: Temporarily shut down your protection software now to avoid potential conflicts, how to do so can be read here.

• Doube-click the JRT icon to launch the application.
• The tool will open and start scanning your system.
• Please be patient as this can take a while to complete depending on your system's specifications.
• On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
• Post the contents of JRT.txt into your next message.

NOTE: Reboot the machine and ensure that all security software is now enabled.


Step-3

The new scans don't show a great deal but we'll clean them up and see if that impacts the CPU usage.

OTL Fix

Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot

1. Please copy all of the text in the quote box below (Do Not copy the word Quote. To do this, highlight everything
inside the quote box (except the word Quote) , right click and click Copy.

:COMMANDS
[createrestorepoint]

:OTL
SRV - File not found [On_Demand | Stopped] -- %SystemRoot%\System32\appmgmts.dll -- (AppMgmt)
DRV - [2013/11/17 14:25:50 | 000,040,392 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- c:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{44B1BC31-9123-4499-BC21-80C6BD6FF320}\MpKsl0d651710.sys -- (MpKsl0d651710)
DRV - [2006/11/28 15:30:40 | 000,094,480 | ---- | M] (Trend Micro Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\tmcomm.sys -- (tmcomm)
[2006/01/28 19:28:07 | 000,000,000 | ---D | M] ("Adblock Filterset.G Updater") -- C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\ahl565id.default\extensions\filtersetg@updater
[2013/03/24 11:50:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\IObit
[2013/03/24 11:51:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\IObit
[2011/11/18 20:40:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TuneUp Software
[2013/03/24 12:44:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\IObit
[2011/11/26 09:55:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Application Data\TuneUp Software

:FILES
ipconfig /flushdns /c

:COMMANDS
[emptytemp]

Warning: This fix is relevant for this system and no other. If you are not this user, DO NOT follow these directions as they could damage the workings of your system.

2. Please re-open on your desktop. To do that:

• XP users: Double click the icon.

3. Place the mouse pointer inside the textbox, right click and click Paste. This will put the above script inside the textbox.
4. Click the button.
5. Let the program run unhindered.
6. OTL may ask to reboot the machine. Please do so if asked.
7. Click the button.
8. A report will open. Copy and Paste that report in your next reply.
9. If the machine reboots, the log will be located at C:\_OTL\MovedFiles\mmddyyyy_hhmmss.log, (where mmddyyyy_hhmmss is the date of the tool run).


Step-4.

I want to check a couple of registry keys. We are gonna run a OTL Custom scan, so the settings will be changed. The log produced will be an abbreviated one that should just have the registry info in it.

OTL Custom Scan

1. Please copy the text in the Quote box below, (Do Not copy the word Quote), and paste it in the box in OTL. To do that:

• Highlight everything inside the quote box, (except the word Quote), right click the mouse and click Copy.

createrestorepoint
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList /s
HKLM\software\microsoft\shared tools\msconfig\startupreg\Application Updater
HKLM\software\microsoft\shared tools\msconfig\startupreg\AdvancedSystemCareService
HKLM\software\microsoft\shared tools\msconfig\startupreg\SvcOnlineArmor
HKLM\software\microsoft\shared tools\msconfig\startupreg\TuneUp.UtilitiesSvc
HKLM\software\microsoft\shared tools\msconfig\startupreg\AdvancedSystemCareService5
HKLM\software\microsoft\shared tools\msconfig\startupreg\AdvancedSystemCareService6
HKLM\software\microsoft\shared tools\msconfig\startupreg\BrowserProtect
HKLM\software\microsoft\shared tools\msconfig\startupreg\bonanzadealslivem
HKLM\software\microsoft\shared tools\msconfig\startupreg\bonanzadealslive

2. Re-open on the desktop. To do that:

• XP users: Double click on the OTL icon.

Make sure all other windows are closed.

• You will see a console like the one below:
  
  
  
• Click the greyed out None button at the top of the console.<---Very Important
  Don't check any other boxes except the ones below.
• Make sure the Output box at the top is set to Standard Output.
• Check the boxes beside LOP Check and Purity Check.
• Place the mouse pointer inside the box, right click and click Paste. This will put the above script inside OTL
• Click the button. Do not change any settings unless otherwise told to do so.
• Let the scan run uninterrupted.
• When the scan completes, it will open OTL.Txt. This file is also saved in the same location as OTL (it should be on your desktop).
• Please copy the contents of this file and paste it into your reply. To do that:
• On the OTL.txt file Menu Bar click Edit then click Select All. This will highlight the contents of the file. Then click Copy.
• Right click inside the forum post window then click Paste. This will paste the contents of the OTL.txt file in the in the post window.

Step-5

Things For Your Next Post:
Please post the logs in the order requested. Do Not attach the logs unless I request it.
1. Answer my questions above.
2. Let me know if your were able to uninstall the Iobit Toolbar
3. The JRT.txt log
4. The OTL fixes log
5. The new OTL.txt log

[KtC Angel of Peace]

I have noticed something else though. The computer seems to be running fine when offline, but as soon as I connect it to the internet, it starts to become a little choppy. Also, the CPU Usage always seems to be maxed, even now, as I am typing this, the CPU usage is at 100%.

Acknowledged. Which browser are you using when you go the internet? Could you try the other browsers and see if if the issue is present on them also.

Are there any other issues you notice? I ask because the event log still shows a problem with MSE:

Error - 11/17/2013 7:01:43 AM | Computer Name = YOUR-27E1513D96 | Source = MsiInstaller | ID = 10005
Description = Product: Microsoft Security Client -- A reboot is needed to clean
an active threat. Setup cannot continue until the threat has been cleaned.

Is MSE working OK? Are you still getting the popup in MSE?

Going backwards, the pop up is still there. It hasn't gone away.

To the first point.

Historically it happens with IE which is the primary browser that my Grandfather feels comfortable with. However, even with Firefox or Chrome, the CPU usage seems to be maxed as soon as internet connection is turned on, when I post here, I usually use Chrome, but it's more noticeable when I use IE.

I'll start running through the stepsand will make a new post once I have completed all of them.

Thank you again as always =)


Edit 1 - Was unable to uninstall Orbit. Will attach screenshots in the next post, but the error reads "Error 1316. A network error occurred while attempting to read from the file C:\Windows\Installer\iorbitToolbar.msi"


Edit 2 - JRT is now working however =).

Edited by KtC Angel of Peace, 19 November 2013 - 01:56 PM.

[KtC Angel of Peace]

iOrbit Errors






~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.8 (11.05.2013:1)
OS: Microsoft Windows XP x86
Ran by Compaq_Owner on Tue 11/19/2013 at 11:56:40.90
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values

Successfully deleted [Registry Value] HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs\\bProtectTabs



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\fixcleaner
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-1380244137-392426934-3096447715-1009\Software\sweetim
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\fixcleaner
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{50ACC877-B37C-4AE4-9077-409A9678BCDB}



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\Documents and Settings\Compaq_Owner\Application Data\fixcleaner"
Successfully deleted: [Folder] "C:\Program Files\fixcleaner"
Successfully deleted: [Folder] "C:\Documents and Settings\All Users\start menu\programs\hot deals"



~~~ FireFox

Successfully deleted: [File] C:\Documents and Settings\Compaq_Owner\Application Data\mozilla\firefox\profiles\ahl565id.default\invalidprefs.js



~~~ Chrome

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Google\Chrome\Extensions\cdjbnddbclciabnckgeahmneohjlahdm





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Tue 11/19/2013 at 12:02:34.70
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


All processes killed
========== COMMANDS ==========
Restore point Set: OTL Restore Point
========== OTL ==========
Service AppMgmt stopped successfully!
Service AppMgmt deleted successfully!
File %SystemRoot%\System32\appmgmts.dll not found.
Error: No service named MpKsl0d651710 was found to stop!
Service\Driver key MpKsl0d651710 not found.
File c:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{44B1BC31-9123-4499-BC21-80C6BD6FF320}\MpKsl0d651710.sys not found.
Service tmcomm stopped successfully!
Service tmcomm deleted successfully!
C:\WINDOWS\system32\drivers\tmcomm.sys moved successfully.
C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\ahl565id.default\extensions\filtersetg@updater\defaults\preferences folder moved successfully.
C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\ahl565id.default\extensions\filtersetg@updater\defaults folder moved successfully.
C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\ahl565id.default\extensions\filtersetg@updater\chrome folder moved successfully.
C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\ahl565id.default\extensions\filtersetg@updater folder moved successfully.
C:\Documents and Settings\Administrator\Application Data\IObit\Advanced SystemCare V6\Log folder moved successfully.
C:\Documents and Settings\Administrator\Application Data\IObit\Advanced SystemCare V6\Internet Booster folder moved successfully.
C:\Documents and Settings\Administrator\Application Data\IObit\Advanced SystemCare V6\Backup folder moved successfully.
C:\Documents and Settings\Administrator\Application Data\IObit\Advanced SystemCare V6 folder moved successfully.
C:\Documents and Settings\Administrator\Application Data\IObit\Advanced SystemCare V5\Toolbox folder moved successfully.
C:\Documents and Settings\Administrator\Application Data\IObit\Advanced SystemCare V5\Log folder moved successfully.
C:\Documents and Settings\Administrator\Application Data\IObit\Advanced SystemCare V5\Backup folder moved successfully.
C:\Documents and Settings\Administrator\Application Data\IObit\Advanced SystemCare V5 folder moved successfully.
C:\Documents and Settings\Administrator\Application Data\IObit folder moved successfully.
C:\Documents and Settings\All Users\Application Data\IObit\Advanced SystemCare V6\Log folder moved successfully.
C:\Documents and Settings\All Users\Application Data\IObit\Advanced SystemCare V6 folder moved successfully.
C:\Documents and Settings\All Users\Application Data\IObit\Advanced SystemCare V5 folder moved successfully.
C:\Documents and Settings\All Users\Application Data\IObit folder moved successfully.
C:\Documents and Settings\All Users\Application Data\TuneUp Software\TuneUp Utilities 2012 folder moved successfully.
C:\Documents and Settings\All Users\Application Data\TuneUp Software\TuneUp Utilities\Program Statistics folder moved successfully.
C:\Documents and Settings\All Users\Application Data\TuneUp Software\TuneUp Utilities folder moved successfully.
C:\Documents and Settings\All Users\Application Data\TuneUp Software\TU2012 folder moved successfully.
C:\Documents and Settings\All Users\Application Data\TuneUp Software folder moved successfully.
C:\Documents and Settings\Compaq_Owner\Application Data\IObit\temp folder moved successfully.
C:\Documents and Settings\Compaq_Owner\Application Data\IObit\Smart Defrag 2 folder moved successfully.
C:\Documents and Settings\Compaq_Owner\Application Data\IObit\res folder moved successfully.
C:\Documents and Settings\Compaq_Owner\Application Data\IObit\Advanced SystemCare V6\Log folder moved successfully.
C:\Documents and Settings\Compaq_Owner\Application Data\IObit\Advanced SystemCare V6\Internet Booster folder moved successfully.
C:\Documents and Settings\Compaq_Owner\Application Data\IObit\Advanced SystemCare V6\Boottime folder moved successfully.
C:\Documents and Settings\Compaq_Owner\Application Data\IObit\Advanced SystemCare V6\Backup folder moved successfully.
C:\Documents and Settings\Compaq_Owner\Application Data\IObit\Advanced SystemCare V6 folder moved successfully.
C:\Documents and Settings\Compaq_Owner\Application Data\IObit\Advanced SystemCare V5\Toolbox folder moved successfully.
C:\Documents and Settings\Compaq_Owner\Application Data\IObit\Advanced SystemCare V5\Log folder moved successfully.
C:\Documents and Settings\Compaq_Owner\Application Data\IObit\Advanced SystemCare V5\Boottime folder moved successfully.
C:\Documents and Settings\Compaq_Owner\Application Data\IObit\Advanced SystemCare V5\Backup folder moved successfully.
C:\Documents and Settings\Compaq_Owner\Application Data\IObit\Advanced SystemCare V5 folder moved successfully.
C:\Documents and Settings\Compaq_Owner\Application Data\IObit\Advanced SystemCare V4\Log folder moved successfully.
C:\Documents and Settings\Compaq_Owner\Application Data\IObit\Advanced SystemCare V4\Backup folder moved successfully.
C:\Documents and Settings\Compaq_Owner\Application Data\IObit\Advanced SystemCare V4 folder moved successfully.
C:\Documents and Settings\Compaq_Owner\Application Data\IObit folder moved successfully.
C:\Documents and Settings\NetworkService\Application Data\TuneUp Software\TU2012\Backups folder moved successfully.
C:\Documents and Settings\NetworkService\Application Data\TuneUp Software\TU2012 folder moved successfully.
C:\Documents and Settings\NetworkService\Application Data\TuneUp Software folder moved successfully.
========== FILES ==========
< ipconfig /flushdns /c >
Windows IP Configuration
Successfully flushed the DNS Resolver Cache.
C:\Documents and Settings\Compaq_Owner\Desktop\cmd.bat deleted successfully.
C:\Documents and Settings\Compaq_Owner\Desktop\cmd.txt deleted successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: Administrator
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->FireFox cache emptied: 0 bytes
->Google Chrome cache emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: All Users

User: Compaq_Owner
->Temp folder emptied: 1747521 bytes
->Temporary Internet Files folder emptied: 370939 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 24147703 bytes
->Google Chrome cache emptied: 24872426 bytes
->Apple Safari cache emptied: 0 bytes
->Flash cache emptied: 108724 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: NetworkService
->Temp folder emptied: 18592 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Java cache emptied: 0 bytes
->Flash cache emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 49702 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 49.00 mb


OTL by OldTimer - Version 3.2.69.0 log created on 11192013_121325

Files\Folders moved on Reboot...
C:\Documents and Settings\NetworkService\Local Settings\Temp\MpCmdRun.log moved successfully.
C:\WINDOWS\temp\Perflib_Perfdata_664.dat moved successfully.

PendingFileRenameOperations files...

Registry entries deleted on Reboot...



OTL logfile created on: 11/19/2013 12:27:45 PM - Run 7
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Documents and Settings\Compaq_Owner\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

2.19 Gb Total Physical Memory | 1.67 Gb Available Physical Memory | 76.36% Memory free
4.22 Gb Paging File | 3.89 Gb Available in Paging File | 92.08% Paging File free
Paging file location(s): C:\pagefile.sys 0 0 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 68.01 Gb Total Space | 37.24 Gb Free Space | 54.76% Space Free | Partition Type: NTFS
Drive D: | 6.50 Gb Total Space | 1.45 Gb Free Space | 22.29% Space Free | Partition Type: FAT32

Computer Name: YOUR-27E1513D96 | User Name: Compaq_Owner | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: Off | File Age = 30 Days

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

========== LOP Check ==========

[2013/03/24 11:33:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\1788674CF4E96A4E000017884FCD731C
[2013/08/22 15:37:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Cisco Systems
[2013/09/25 17:45:45 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Application Data\Common Files
[2006/01/05 16:04:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\MSScanAppDataDir
[2011/04/14 10:01:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Trusteer
[2011/11/18 20:38:42 | 000,000,000 | -HSD | M] -- C:\Documents and Settings\All Users\Application Data\{32364CEA-7855-4A3C-B674-53D8E9B97936}
[2011/11/08 10:11:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2013/03/24 12:44:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{5A85B23A-4B58-47D1-9B9C-DFBD7866099F}
[2010/02/09 19:21:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{755AC846-7372-4AC8-8550-C52491DAA8BD}
[2013/03/24 11:50:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{CED89F1A-945F-46EC-B23C-5EAF6D2DB12A}
[2013/03/24 12:44:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{D76294E6-03B8-4971-AF2E-3F846161A690}
[2012/09/16 12:28:59 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\541CB68B
[2009/09/04 16:26:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\Aim
[2013/11/07 12:31:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\Canon
[2007/09/16 20:34:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\Costco Photo Viewer
[2007/11/01 21:01:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\CoxFastConnect20
[2011/11/18 21:09:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\ElevatedDiagnostics
[2010/07/24 06:37:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\Graphic.lyAir.524A3AB5801B9AE08DEEB1BA295EDE84BDC333F2.1
[2007/11/28 09:47:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\Image Zone Express
[2011/10/14 17:57:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\InterVideo
[2006/01/18 09:20:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\MSNInstaller
[2005/10/09 06:53:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\SampleView
[2013/03/26 03:55:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\Sony Online Entertainment
[2011/11/18 20:39:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\TuneUp Software
[2012/07/10 11:59:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\wtxpcom
[2013/11/19 09:41:12 | 000,000,436 | -H-- | M] () -- C:\WINDOWS\Tasks\User_Feed_Synchronization-{0698E0CD-E2C7-4082-A0A9-67A5B9C13408}.job
[2013/11/19 12:30:00 | 000,000,438 | -H-- | M] () -- C:\WINDOWS\Tasks\User_Feed_Synchronization-{C5695E00-1FBC-4D03-B0B0-1F000C5D1108}.job

========== Purity Check ==========



========== Custom Scans ==========

< HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList /s >
"ProfilesDirectory" = %SystemDrive%\Documents and Settings -- [2010/06/20 15:12:30 | 000,000,000 | ---D | M]
"DefaultUserProfile" = Default User
"AllUsersProfile" = All Users
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-18]
"Flags" = 12
"State" = 0
"RefCount" = 1
"Sid" = 01 01 00 00 00 00 00 05 12 00 00 00 [binary data]
"ProfileImagePath" = %systemroot%\system32\config\systemprofile -- [2013/10/31 12:41:41 | 000,000,000 | ---D | M]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19]
"ProfileImagePath" = %SystemDrive%\Documents and Settings\LocalService -- [2013/11/06 10:40:29 | 000,000,000 | -HSD | M]
"Sid" = 01 01 00 00 00 00 00 05 13 00 00 00 [binary data]
"Flags" = 9
"State" = 0
"CentralProfile" =
"ProfileLoadTimeLow" = 1836781828
"ProfileLoadTimeHigh" = 30336357
"RefCount" = 2
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-20]
"ProfileImagePath" = %SystemDrive%\Documents and Settings\NetworkService -- [2013/11/17 20:15:24 | 000,000,000 | -HSD | M]
"Sid" = 01 01 00 00 00 00 00 05 14 00 00 00 [binary data]
"Flags" = 9
"State" = 0
"CentralProfile" =
"ProfileLoadTimeLow" = -162905672
"ProfileLoadTimeHigh" = 30336356
"RefCount" = 2
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-1380244137-392426934-3096447715-1009]
"ProfileImagePath" = %SystemDrive%\Documents and Settings\Compaq_Owner -- [2013/10/31 11:12:50 | 000,000,000 | ---D | M]
"Sid" = 01 05 00 00 00 00 00 05 15 00 00 00 A9 DA 44 52 B6 F5 63 17 E3 0A 90 B8 F1 03 00 00 [binary data]
"Flags" = 0
"State" = 256
"CentralProfile" =
"ProfileLoadTimeLow" = -133374422
"ProfileLoadTimeHigh" = 30336356
"RefCount" = 1
"RunLogonScriptSync" = 0
"OptimizedLogonStatus" = 11
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-1380244137-392426934-3096447715-500]
"ProfileImagePath" = %SystemDrive%\Documents and Settings\Administrator -- [2013/10/30 14:25:19 | 000,000,000 | ---D | M]
"Sid" = 01 05 00 00 00 00 00 05 15 00 00 00 A9 DA 44 52 B6 F5 63 17 E3 0A 90 B8 F4 01 00 00 [binary data]
"Flags" = 0
"State" = 256
"CentralProfile" =
"ProfileLoadTimeLow" = -250463082
"ProfileLoadTimeHigh" = 30288066
"RefCount" = 0
"RunLogonScriptSync" = 0
"OptimizedLogonStatus" = 11

< HKLM\software\microsoft\shared tools\msconfig\startupreg\Application Updater >

< HKLM\software\microsoft\shared tools\msconfig\startupreg\AdvancedSystemCareService >

< HKLM\software\microsoft\shared tools\msconfig\startupreg\SvcOnlineArmor >

< HKLM\software\microsoft\shared tools\msconfig\startupreg\TuneUp.UtilitiesSvc >

< HKLM\software\microsoft\shared tools\msconfig\startupreg\AdvancedSystemCareService5 >

< HKLM\software\microsoft\shared tools\msconfig\startupreg\AdvancedSystemCareService6 >

< HKLM\software\microsoft\shared tools\msconfig\startupreg\BrowserProtect >

< HKLM\software\microsoft\shared tools\msconfig\startupreg\bonanzadealslivem >

< HKLM\software\microsoft\shared tools\msconfig\startupreg\bonanzadealslive >

< End of report >

[godawgs]

Hello,

You are welcome. Let's use another program to uninstall the Iobit Toolbar. Then I want to get a couple of screen shots of settings.
The last OTL fix and JRT removed more rubbish. Has the CPU usage dropped?


Step-1.

Run Revo Uninstaller

Download Revo Uninstaller to the desktop.

• Double click the revosetup.exe file on the desktop to run the installer.
• Let it install to the default location.
• Double click the new Revo Uninstaller Icon on the desktop to start the program.
  
  
  You will now see a list of installed programs that Revo Uninstaller can remove.
  
• Locate the program you are uninstalling---IObit Toolbar v6.0
• Right Click the program Icon then choose Uninstall.
• Click yes to the warning and choose the Uninstall Mode
• Choose the Moderate option and then click Next or Scan.
• This will launch the programs built in uninstaller. Be patient it can take several seconds.
• Once the Uninstaller is done click Next.
• Revo Uninstaller will now scan for leftover information. Be patient it can take several seconds.
• Once this scan is done click Next.
• You will then be presented with the leftover entries found by Revo Uninstaller
• Look at ALL of the entries to ensure they relate to the uninstall.
• Next click the box beside ALL items in Bold then click the Delete button to remove the entries.
  NOTE: If you aren't sure which boxes to check, post a screen shot and I will look at it. Be sure to post enough shots to show all of the leftover entries.
• Click Next.
• If there are any program file folders left over you will be presented with a list to be removed.
• Again look at ALL of the entries to ensure they are related to the uninstall.
• Click the box beside ALL entries in Bold and click the Delete button to remove the entries.
  NOTE: Again, if you aren't sure post the screen shots(s) and I will look at them.
• Click Finish to go back to the uninstall list.
• Close the program

Step-2.

Check Internet Explorer settings

• Open Internet Explorer.
• On the Tools menu, click Internet Options.
  Click the Connections tab, click LAN Settings
• Post a screen shot of that page. To do that:

Capture a Screen Shot

• When you have the screen up that you want to capture...click on the ALT key + PRT SCR key. This will put the screen shot in the clipboard.
• Click on Start>> All Programs>> Accessories>> Paint. A Paint window will open up.
• Left click in the white area and press the CTRL + V keys. This will paste the screen shot from the clipboard into the Paint window.
• On the Menu bar at the top of the Paint window, click on File, click on Save and save it to your desktop.
• In the File Name box, name it something related to the screen your capturing.
• In the Save as type: box, BE SURE TO SAVE IT AS A .JPG ...otherwise it may be to big to upload.

Upload a file or Screen Shot and put it in a post:

• Click the Add Reply button an the bottom of this post. That will load the Full Editor.
  • Type or copy and past any text you need in the post. When you get to the point where you want to attach a file:
• Scroll down and click the Browse button. A new window will open where you can browse your computer for the file to upload..

  a. Select the file. This will put the file in the File Name box on the Choose File to Upload window.
  b. Click Open. This will put the file name and path in the Attachments section of the post editor.

• Click the Attach This File button. This will open a new box under the Attachments section that has the file name.
• To the right of the file name you will see Add to Post | Delete
• Click on Add to Post. This will attach the file to the post.
• Once you have completed your post and are ready to submit it, click the Add Reply button.

Some screen shots of the process can be seen here


Step-3.

Check Network Adapter settings

• Click Start, Control Panel, Network and Internet, Internet Connections
• IF you have a Local Area Connection connected with an Ethernet cable, Right click on the Local Area Connection and click Properties. The Local Area Connections page will open.
  IF you don't have a Local Area Connection connected skip to number 5.
• Find the Internet Protocol (TCP/IP) OR the Internet Protocol Version 4(TCP/IPv4). Click it to highlight it and then click the Properties button. The Properties page will open. Take a screen shot using the instructions above to post in your next reply.
• Click the Cancel button to close the TCI/IP Properties page and click the Cancel button again to close the Local Area Connection page.
• Right click the Wireless Network Connection page and click Properties.
• Click the Internet Protocol Version 4(TCP/IPv4) entry and click the Properties button. Take a screen shot of this page to post in your next reply.
• Click the Cancel button to close the Version4 TCP/IP page.
• Repeat the above for the Internet Protocol Version 6(TCP/IPv6) entry.
• Click the Cancel button twice and you should be back to the Netwotk Connections page. Close it.

Things For Your Next Post:
Please post the logs in the order requested. Do Not attach the logs unless I request it.
1. The screen shots I asked for.

[KtC Angel of Peace]

Performance is much better, even though CPU usage is still hitting 100%, I am not experiencing nearly as much choppiness as I used to when I connected to the internet. Should I attempt to clean the MSSE thing again or will we try to tackle that later (you can see in the screenshots that it still is red with an X). Also, this svchost32.exe window still keeps popping up randomlỵ



I ran Revo and the error still came up, however, it did push forward



I was unsure what to remove from Revo and stopped at

You will then be presented with the leftover entries found by Revo Uninstaller
Look at ALL of the entries to ensure they relate to the uninstall.
Next click the box beside ALL items in Bold then click the Delete button to remove the entries.
NOTE: If you aren't sure which boxes to check, post a screen shot and I will look at it. Be sure to post enough shots to show all of the leftover entries.
Click Next





As for the setting screenshots that you requested:




This computer is only connected via wireless, the 1394 connection I believe is the USB connection to the Canon scanner that we use



For the wireless internet settings, there was only one Internet Protocol (TCP/IP), with no numbers next to it, Screenshot requested is attached




As always, thank you so mcuh for all of your help! Let me know what I should do for Revo, I will leave it up for now!

[godawgs]

HI,

Thanks for the images. As for the left over registry items in Revo, click the box beside ALL of the items in bold print and then click the Delete button. Remember, once you have deleted the registry items, Revo will list any left over files and folders in bold type. Look them over and make sure they are related to Iobit then put a check mark in the box beside each item in bold and click the Delete button. If you aren't sure about those you can post a screen shot and I'll look at them.

I am convinced that the problem with the red icon for MSE is due to a conflict with another antivirus program that left remnants on the system after it was uninstalled. It is not uncommon for antivirus uninstallers to do this. After all, if you aren't gonna use them anymore why should they care if they you can't properly install another AV program?

Most antivirus programs have dedicated removal tools because so many people have screamed about this. I'm gonna look back thru this thread and find the post where you listed the antivirus programs that have been installed on the computer. But I think you said that someone installed a program but you didn't know what it was. So could you please come up with all of the antivirus programs that have been installed and post it.

Please run the FSS tool again and post the FSS.txt log

[godawgs]

Due to lack of feedback, this topic has been closed.

If you need this topic reopened, please contact a staff member. This applies only to the original topic starter. Everyone else please begin a New Topic.

[godawgs]

User Returned.

[KtC Angel of Peace]

Farbar Service Scanner Version: 24-10-2013
Ran by Compaq_Owner (administrator) on 29-11-2013 at 02:56:01
Running from "C:\Documents and Settings\Compaq_Owner\Desktop"
Microsoft Windows XP Home Edition Service Pack 3 (X86)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Yahoo.com is accessible.


Windows Firewall:
=============

Firewall Disabled Policy:
==================


System Restore:
============

System Restore Disabled Policy:
========================


Security Center:
============


Windows Update:
============

Windows Autoupdate Disabled Policy:
============================


Other Services:
==============


File Check:
========
C:\WINDOWS\system32\dhcpcsvc.dll => MD5 is legit
C:\WINDOWS\system32\Drivers\afd.sys => MD5 is legit
C:\WINDOWS\system32\Drivers\netbt.sys => MD5 is legit
C:\WINDOWS\system32\Drivers\tcpip.sys => MD5 is legit
C:\WINDOWS\system32\Drivers\ipsec.sys => MD5 is legit
C:\WINDOWS\system32\dnsrslvr.dll => MD5 is legit
C:\WINDOWS\system32\ipnathlp.dll => MD5 is legit
C:\WINDOWS\system32\netman.dll => MD5 is legit
C:\WINDOWS\system32\wbem\WMIsvc.dll => MD5 is legit
C:\WINDOWS\system32\srsvc.dll => MD5 is legit
C:\WINDOWS\system32\Drivers\sr.sys => MD5 is legit
C:\WINDOWS\system32\wscsvc.dll => MD5 is legit
C:\WINDOWS\system32\wbem\WMIsvc.dll => MD5 is legit
C:\WINDOWS\system32\wuauserv.dll => MD5 is legit
C:\WINDOWS\system32\qmgr.dll => MD5 is legit
C:\WINDOWS\system32\es.dll => MD5 is legit
C:\WINDOWS\system32\cryptsvc.dll => MD5 is legit
C:\WINDOWS\system32\svchost.exe => MD5 is legit
C:\WINDOWS\system32\rpcss.dll => MD5 is legit
C:\WINDOWS\system32\services.exe => MD5 is legit

Extra List:
=======
Gpc(6) IPSec(4) NetBT(5) Tcpip(3)
0x050000000400000003000000050000000600000007000000
IpSec Tag value is correct.

**** End of log ****

[KtC Angel of Peace]

Also, as requested, the list of Antivirus have been McAfee, Avast, AVG, Norton, and MSSE. I was also told that before I created this topic, that they tried to run Malwarebytes and tried to perform their own cleaning.

So sorry for the delay and thank you so much for your continued work and patience!

Hope you had a wonderful Thanksgiving!

[godawgs]

Thanksgiving was great. Hope yours was too. Let's see if we can find any remnants of those:

Please download SystemLook from one of the links below and save it to your Desktop.
Download Mirror #1
Download Mirror #2

• Right click SystemLook.exe, click Run as Administrator and OK any UAC prompts to run it.
• Copy the content of the following quote box into the main textfield (DO NOT copy the word quote):
  
  

  :folderfind
  *mcafee*
  *avast*
  *avg*
  *norton*
  *symantic*
  
  :regfind
  mcafee
  avast
  avg
  norton
  symantic

• Click the Look button to start the scan.
• When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.

Note: The log can also be found on your Desktop entitled SystemLook.txt