Part 02
[COLOR=#e56717]========== Files/Folders - Created Within 30 Days ==========[/COLOR]
[2010/01/12 12:53:33 | 00,544,256 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\xxxx xxxxxx\Desktop\OTL.exe
[2010/01/12 12:51:49 | 00,000,000 | ---D | C] -- C:\Documents and Settings\xxxx xxxxxx\Desktop\HostsXpert
[2010/01/12 10:21:43 | 00,060,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\USBAUDIO.sys
[2010/01/12 10:21:43 | 00,060,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\usbaudio.sys
[2010/01/12 09:52:17 | 00,000,000 | ---D | C] -- C:\Documents and Settings\xxxx xxxxxx\Application Data\Skype
[2010/01/12 09:52:05 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Skype
[2010/01/12 09:51:58 | 00,000,000 | R--D | C] -- C:\Program Files\Skype
[2010/01/12 09:39:17 | 00,000,000 | ---D | C] -- C:\Program Files\Kaspersky Lab
[2010/01/12 09:39:14 | 00,000,000 | ---D | C] -- C:\WINDOWS\LastGood
[2010/01/12 09:39:02 | 00,315,408 | ---- | C] (Kaspersky Lab) -- C:\WINDOWS\System32\drivers\klif.sys
[2010/01/12 09:24:40 | 00,000,000 | --SD | M] -- C:\Documents and Settings\NetworkService\Application Data\Microsoft
[2010/01/12 09:24:40 | 00,000,000 | --SD | M] -- C:\Documents and Settings\LocalService\Application Data\Microsoft
[2010/01/12 09:24:40 | 00,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft
[2010/01/12 09:24:40 | 00,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft
[2010/01/12 09:22:30 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Kaspersky Lab Setup Files
[2010/01/12 00:38:38 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Google
[2010/01/11 22:41:31 | 00,000,000 | RH-D | C] -- C:\Documents and Settings\xxxx xxxxxx\Recent
[2010/01/11 22:36:47 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Yahoo! Companion
[2010/01/11 22:36:47 | 00,000,000 | ---D | C] -- C:\Documents and Settings\xxxx xxxxxx\Application Data\Yahoo!
[2010/01/11 22:36:42 | 00,000,000 | ---D | C] -- C:\Program Files\Yahoo!
[2010/01/11 22:36:29 | 00,000,000 | ---D | C] -- C:\Program Files\CCleaner
[2010/01/11 10:18:44 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Kaspersky Lab
[2010/01/11 09:40:31 | 00,000,000 | -H-D | C] -- C:\WINDOWS\PIF
[2010/01/11 00:57:54 | 00,195,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MpSigStub.exe
[2010/01/11 00:56:02 | 00,000,000 | ---D | C] -- C:\Program Files\Microsoft Security Essentials
[2010/01/11 00:54:01 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com
[2010/01/11 00:53:25 | 00,000,000 | ---D | C] -- C:\Documents and Settings\xxxx xxxxxx\Application Data\SUPERAntiSpyware.com
[2010/01/11 00:53:25 | 00,000,000 | ---D | C] -- C:\Program Files\SUPERAntiSpyware
[2010/01/11 00:51:01 | 00,000,000 | ---D | C] -- C:\Program Files\Spybot - Search & Destroy
[2010/01/11 00:51:01 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
[2010/01/10 22:17:37 | 00,000,000 | ---D | C] -- C:\Documents and Settings\xxxx xxxxxx\Application Data\Malwarebytes
[2010/01/10 22:17:33 | 00,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2010/01/10 22:17:32 | 00,019,160 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2010/01/10 22:17:32 | 00,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2010/01/10 22:17:32 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Malwarebytes
[2010/01/10 00:04:01 | 00,000,000 | ---D | C] -- C:\Documents and Settings\xxxx xxxxxx\Local Settings\Application Data\{C0B133B8-33F7-401B-A331-5780D8F885A9}
[2010/01/09 21:19:09 | 00,000,000 | ---D | C] -- C:\Program Files\7-Zip
[2010/01/09 12:52:06 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\FLEXnet
[2010/01/09 11:55:10 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Macrovision Shared
[2010/01/08 20:51:52 | 00,000,000 | ---D | C] -- C:\Program Files\PowerISO
[2010/01/07 23:08:25 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\LogMeIn
[2010/01/07 23:08:25 | 00,000,000 | ---D | C] -- C:\Documents and Settings\xxxx xxxxxx\Local Settings\Application Data\LogMeIn
[2010/01/07 23:08:23 | 00,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Local Settings\Application Data\ICS
[2010/01/07 23:08:20 | 00,083,288 | ---- | C] (LogMeIn, Inc.) -- C:\WINDOWS\System32\LMIRfsClientNP.dll
[2010/01/07 23:08:20 | 00,028,984 | ---- | C] (LogMeIn, Inc.) -- C:\WINDOWS\System32\LMIport.dll
[2010/01/07 23:08:19 | 00,047,640 | ---- | C] (LogMeIn, Inc.) -- C:\WINDOWS\System32\drivers\LMIRfsDriver.sys
[2010/01/07 23:08:15 | 00,087,352 | ---- | C] (LogMeIn, Inc.) -- C:\WINDOWS\System32\LMIinit.dll
[2010/01/07 23:08:02 | 00,000,000 | ---D | C] -- C:\Program Files\LogMeIn
[2010/01/07 23:06:37 | 00,000,000 | ---D | C] -- C:\Documents and Settings\xxxx xxxxxx\Local Settings\Application Data\Deployment
[2010/01/04 08:55:53 | 00,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Application Data\Intel
[2010/01/02 12:59:06 | 00,872,192 | R--- | C] (DiBcom SA) -- C:\WINDOWS\System32\drivers\mod7700.sys
[2010/01/02 12:59:06 | 00,103,168 | R--- | C] (Huawei Technologies Co., Ltd.) -- C:\WINDOWS\System32\drivers\ewusbfake.sys
[2010/01/02 12:59:06 | 00,101,376 | R--- | C] (Huawei Technologies Co., Ltd.) -- C:\WINDOWS\System32\drivers\ewusbmdm.sys
[2010/01/02 12:59:06 | 00,100,992 | R--- | C] (Huawei Technologies Co., Ltd.) -- C:\WINDOWS\System32\drivers\ewusbnet.sys
[2010/01/02 12:59:06 | 00,024,448 | R--- | C] (Huawei Tech. Co., Ltd.) -- C:\WINDOWS\System32\drivers\ewdcsc.sys
[2009/12/26 21:35:36 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe
[2009/12/26 18:59:36 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\TomTom
[2009/12/26 18:59:24 | 00,000,000 | ---D | C] -- C:\Documents and Settings\xxxx xxxxxx\Application Data\AdobeUM
[2009/12/26 18:58:37 | 00,000,000 | ---D | C] -- C:\Documents and Settings\xxxx xxxxxx\Local Settings\Application Data\Adobe
[2009/12/26 16:37:14 | 00,000,000 | ---D | C] -- C:\Program Files\TomTom DesktopSuite
[2009/12/26 13:34:42 | 00,000,000 | ---D | C] -- C:\Documents and Settings\xxxx xxxxxx\Application Data\Birdstep Technology
[2009/12/26 13:34:36 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Birdstep Technology
[2009/12/26 13:32:12 | 00,000,000 | ---D | C] -- C:\Program Files\Huawei Modems
[2009/12/26 13:31:47 | 00,000,000 | ---D | C] -- C:\Program Files\3 Mobile Broadband
[2009/12/25 22:29:16 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Adobe
[2009/12/25 22:27:43 | 00,000,000 | ---D | C] -- C:\Program Files\Adobe
[2009/12/25 19:10:51 | 00,000,000 | ---D | C] -- C:\WINDOWS\pss
[2009/12/25 18:45:37 | 00,000,000 | R--D | C] -- C:\Documents and Settings\xxxx xxxxxx\My Documents\My Videos
[2009/12/24 11:08:28 | 00,000,000 | ---D | C] -- C:\Documents and Settings\xxxx xxxxxx\Application Data\Adobe
[2009/12/24 11:07:30 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\NOS
[2009/12/24 07:50:28 | 00,000,000 | ---D | C] -- C:\Program Files\AVG
[2009/12/24 00:59:52 | 00,000,000 | ---D | C] -- C:\Documents and Settings\xxxx xxxxxx\My Documents\My Google Gadgets
[2009/12/24 00:33:08 | 00,000,000 | ---D | C] -- C:\zz_AMSS_Photos
[2009/12/24 00:07:34 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Sonic
[2009/12/24 00:05:51 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Roxio
[2009/12/24 00:00:05 | 00,000,000 | ---D | C] -- C:\Documents and Settings\xxxx xxxxxx\Application Data\.oit
[2009/12/23 23:20:48 | 00,027,136 | R--- | C] (Research in Motion Ltd) -- C:\WINDOWS\System32\drivers\RimSerial.sys
[2009/12/23 21:38:18 | 00,000,000 | ---D | C] -- C:\WINDOWS\IBM
[2009/12/23 20:47:07 | 00,000,000 | ---D | C] -- C:\Documents and Settings\xxxx xxxxxx\My Documents\TomTom
[2009/12/23 20:46:39 | 00,000,000 | ---D | C] -- C:\Documents and Settings\xxxx xxxxxx\Local Settings\Application Data\TomTom
[2009/12/23 20:46:39 | 00,000,000 | ---D | C] -- C:\Documents and Settings\xxxx xxxxxx\Application Data\TomTom
[2009/12/23 20:46:34 | 00,000,000 | ---D | C] -- C:\Program Files\TomTom International B.V
[2009/12/23 20:46:21 | 00,000,000 | ---D | C] -- C:\Program Files\TomTom HOME 2
[2009/12/23 20:44:10 | 20,299,200 | ---- | C] (TomTom International B.V.) -- C:\Documents and Settings\xxxx xxxxxx\Desktop\TomTomHOME2winlatest.exe
[2009/12/23 18:51:09 | 00,000,000 | ---D | C] -- C:\Documents and Settings\xxxx xxxxxx\Application Data\Avaya
[2009/12/23 18:21:32 | 00,000,000 | ---D | C] -- C:\Documents and Settings\xxxx xxxxxx\Application Data\Van Dyke Technologies
[2009/12/23 18:20:30 | 00,000,000 | ---D | C] -- C:\Program Files\AbsoluteFTP
[2009/12/23 18:07:02 | 00,000,000 | ---D | C] -- C:\Documents and Settings\xxxx xxxxxx\Application Data\TeamViewer
[2009/12/23 18:06:10 | 00,000,000 | ---D | C] -- C:\Program Files\TeamViewer
[2009/12/23 18:05:50 | 00,000,000 | ---D | C] -- C:\Documents and Settings\xxxx xxxxxx\temp
[2009/12/23 18:03:06 | 00,000,000 | ---D | C] -- C:\Documents and Settings\xxxx xxxxxx\Application Data\skypePM
[2009/12/23 18:00:36 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Skype
[2009/12/23 17:53:50 | 00,000,000 | ---D | C] -- C:\Program Files\uTorrent
[2009/12/23 17:53:25 | 00,000,000 | ---D | C] -- C:\Documents and Settings\xxxx xxxxxx\Application Data\uTorrent
[2009/12/23 17:47:02 | 00,000,000 | ---D | C] -- C:\Program Files\Edraw Max
[2009/12/23 17:17:58 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\ATI
[2009/12/23 17:02:22 | 00,290,816 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\atiok3x2.dll
[2009/12/23 17:02:21 | 00,126,976 | ---- | C] (Advanced Micro Devices, Inc.) -- C:\WINDOWS\System32\atiadlxx.dll
[2009/12/23 17:02:21 | 00,118,784 | ---- | C] (Advanced Micro Devices, Inc.) -- C:\WINDOWS\System32\atibrtmon.exe
[2009/12/23 17:02:20 | 00,049,664 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\WINDOWS\System32\amdpcom32.dll
[2009/12/23 17:00:30 | 00,014,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spmsgXP_2k3.dll
[2009/12/23 17:00:07 | 01,112,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WdfCoInstaller01007.dll
[2009/12/23 16:52:50 | 00,000,000 | ---D | C] -- C:\Program Files\Digital Line Detect
[2009/12/23 16:52:37 | 00,000,000 | ---D | C] -- C:\Program Files\NetWaiting
[2009/12/23 16:52:36 | 00,000,000 | ---D | C] -- C:\Documents and Settings\xxxx xxxxxx\Application Data\InstallShield
[2009/12/23 16:51:20 | 00,028,272 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\NicCo2.dll
[2009/12/23 16:39:33 | 00,000,000 | ---D | C] -- C:\Documents and Settings\xxxx xxxxxx\Application Data\Lenovo
[2009/12/23 16:33:36 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Lenovo
[2009/12/23 16:22:12 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\(null)
[2009/12/23 15:49:03 | 00,030,144 | ---- | C] (Lenovo (United States) Inc.) -- C:\WINDOWS\System32\drivers\psadd.sys
[2009/12/23 15:46:33 | 00,000,000 | ---D | C] -- C:\SWTOOLS
[2009/12/23 15:39:42 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\PCDr
[2009/12/23 15:38:37 | 00,000,000 | ---D | C] -- C:\Program Files\PC-Doctor
[2009/12/23 15:28:37 | 00,094,208 | ---- | C] (Lenovo Group Limited) -- C:\WINDOWS\System32\PWMCPl.cpl
[2009/12/23 15:25:28 | 00,000,000 | ---D | C] -- C:\Documents and Settings\xxxx xxxxxx\Application Data\Intel
[2009/12/23 15:25:04 | 05,977,216 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\drivers\NETw5x32.sys
[2009/12/23 15:25:04 | 02,756,608 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\NETw5r32.dll
[2009/12/23 15:25:04 | 00,675,840 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\NETw5c32.dll
[2009/12/23 15:24:53 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Intel
[2009/12/23 15:24:53 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Intel
[2009/12/23 12:32:33 | 00,032,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\usbccgp.sys
[2009/12/23 12:31:19 | 00,000,000 | ---D | C] -- C:\Program Files\Orange Mobile Partner
[2009/12/23 12:30:59 | 00,026,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\usbstor.sys
[2009/12/23 12:30:26 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Macromedia
[2009/12/23 12:30:11 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Macromedia
[2009/12/23 12:30:10 | 00,000,000 | ---D | C] -- C:\Program Files\Macromedia
[2009/12/23 11:02:17 | 00,000,000 | ---D | C] -- C:\Documents and Settings\xxxx xxxxxx\Application Data\TrueCrypt
[2009/12/23 10:54:31 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\TrueCrypt
[2009/12/23 10:54:30 | 00,223,440 | ---- | C] (TrueCrypt Foundation) -- C:\WINDOWS\System32\drivers\truecrypt.sys
[2009/12/23 10:54:28 | 00,000,000 | ---D | C] -- C:\Program Files\TrueCrypt
[2009/12/23 10:41:23 | 00,055,656 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avgntflt.sys
[2009/12/23 10:06:00 | 00,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Google
[2009/12/23 10:04:32 | 00,000,000 | ---D | C] -- C:\Documents and Settings\xxxx xxxxxx\Local Settings\Application Data\Salty Brine
[2009/12/23 10:04:21 | 00,874,248 | ---- | C] (Xceed Software Inc (450) 442-2626 [EMAIL="[email protected]"][email protected][/EMAIL] [URL="http://www.xceedsoft.com"]Xceed Home[/URL]) -- C:\WINDOWS\System32\SmartUI2.ocx
[2009/12/23 10:04:21 | 00,659,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MSCOMCT2.OCX
[2009/12/23 10:04:21 | 00,599,800 | ---- | C] (Software FX, Inc.) -- C:\WINDOWS\System32\Cfx4032.ocx
[2009/12/23 10:04:21 | 00,396,960 | ---- | C] (Namtuk.com) -- C:\WINDOWS\System32\MyCommandButton.ocx
[2009/12/23 10:04:21 | 00,319,488 | ---- | C] (Seekford Solutions, Inc.) -- C:\WINDOWS\System32\SNTP Wizard2.ocx
[2009/12/23 10:04:21 | 00,258,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Msflxgrd.ocx
[2009/12/23 10:04:21 | 00,218,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\RICHTX32.OCX
[2009/12/23 10:04:21 | 00,159,744 | ---- | C] (MicroDexterity, Inc.) -- C:\WINDOWS\System32\stamin32.dll
[2009/12/23 10:04:21 | 00,155,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Comdlg32.ocx
[2009/12/23 10:04:21 | 00,136,976 | ---- | C] (Software FX, Inc.) -- C:\WINDOWS\System32\SfxBar.dll
[2009/12/23 10:04:20 | 00,000,000 | ---D | C] -- C:\Program Files\FolderMatch
[2009/12/23 10:01:04 | 00,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Local Settings\Application Data\Google
[2009/12/23 09:44:47 | 00,000,000 | ---D | C] -- C:\Program Files\TextPad
[2009/12/23 09:41:18 | 00,000,000 | ---D | C] -- C:\Documents and Settings\xxxx xxxxxx\Local Settings\Application Data\Mindjet
[2009/12/23 09:34:08 | 00,258,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\unicows.dll
[2009/12/23 09:34:08 | 00,005,632 | ---- | C] (Tracker Software) -- C:\WINDOWS\System32\pxc25pm.dll
[2009/12/23 09:33:56 | 00,000,000 | ---D | C] -- C:\Documents and Settings\xxxx xxxxxx\My Documents\My Maps
[2009/12/23 09:33:28 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Mindjet
[2009/12/23 09:33:27 | 00,000,000 | ---D | C] -- C:\Program Files\Mindjet
[2009/12/23 09:21:43 | 00,000,000 | ---D | C] -- C:\Documents and Settings\xxxx xxxxxx\Local Settings\Application Data\{7C480F86-91B2-4DE0-9E83-A05DD0140F5C}
[2009/12/23 08:38:19 | 00,000,000 | ---D | C] -- C:\Documents and Settings\xxxx xxxxxx\My Documents\Xara_Xara Xtreme Pro 5
[2009/12/23 08:38:19 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Magix
[2009/12/23 08:38:09 | 00,000,000 | ---D | C] -- C:\Documents and Settings\xxxx xxxxxx\Application Data\MAGIX
[2009/12/23 08:38:08 | 00,000,000 | ---D | C] -- C:\Documents and Settings\xxxx xxxxxx\Local Settings\Application Data\Xara
[2009/12/23 08:37:42 | 00,000,000 | ---D | C] -- C:\Program Files\Xara
[2009/12/23 08:37:42 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Xara
[2009/12/23 01:29:02 | 00,000,000 | ---D | C] -- C:\DRIVERS
[2009/12/23 01:27:10 | 00,017,844 | ---- | C] (Lenovo Group Limited) -- C:\WINDOWS\System32\drivers\TPHKDRV.sys
[2009/12/23 01:24:45 | 00,108,080 | ---- | C] (Lenovo Group Limited) -- C:\WINDOWS\System32\PROCHLP.DLL
[2009/12/23 01:24:45 | 00,108,080 | ---- | C] (Lenovo Group Limited) -- C:\WINDOWS\System32\IPSSVC.EXE
[2009/12/23 01:24:45 | 00,012,080 | ---- | C] (Lenovo Group Limited) -- C:\WINDOWS\System32\drivers\PROCDD.SYS
[2009/12/23 01:23:36 | 00,000,000 | ---D | C] -- C:\IBMTOOLS
[2009/12/23 01:10:50 | 00,000,000 | ---D | C] -- C:\zz_downloads-all
[2009/12/23 01:08:11 | 00,000,000 | ---D | C] -- C:\Documents and Settings\xxxx xxxxxx\Tracing
[2009/12/23 01:06:38 | 03,426,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_32.dll
[2009/12/23 01:05:51 | 00,000,000 | ---D | C] -- C:\Program Files\Microsoft
[2009/12/23 01:05:42 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Documents\microsoft
[2009/12/23 01:05:14 | 00,000,000 | ---D | C] -- C:\Program Files\Windows Live
[2009/12/23 00:42:13 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Windows Live
[2009/12/23 00:41:56 | 00,000,000 | ---D | C] -- C:\Program Files\Microsoft Silverlight
[2009/12/23 00:41:31 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\windowspowershell
[2009/12/23 00:40:57 | 00,017,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spmsg.dll
[2009/12/23 00:40:44 | 00,000,000 | ---D | C] -- C:\Program Files\Windows Media Connect 2
[2009/12/23 00:39:33 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\UMDF
[2009/12/23 00:32:39 | 00,014,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\battc.sys
[2009/12/23 00:32:26 | 00,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\hccoin.dll
[2009/12/23 00:32:06 | 00,151,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\irftp.exe
[2009/12/23 00:32:06 | 00,028,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\irmon.dll
[2009/12/23 00:32:06 | 00,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wshirda.dll
[2009/12/23 00:32:05 | 00,028,672 | ---- | C] (National Semiconductor Corporation) -- C:\WINDOWS\System32\drivers\nscirda.sys
[2009/12/23 00:32:03 | 00,000,000 | ---D | C] -- C:\Program Files\Synaptics
[2009/12/23 00:21:54 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\XPSViewer
[2009/12/23 00:21:50 | 00,000,000 | ---D | C] -- C:\Program Files\MSBuild
[2009/12/23 00:21:42 | 00,000,000 | ---D | C] -- C:\Program Files\Reference Assemblies
[2009/12/23 00:21:25 | 00,597,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\printfilterpipelinesvc.exe
[2009/12/23 00:21:25 | 00,575,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\xpsshhdr.dll
[2009/12/23 00:21:25 | 00,117,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\prntvpt.dll
[2009/12/23 00:21:25 | 00,089,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\filterpipelineprintproc.dll
[2009/12/23 00:21:24 | 01,676,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xpssvcs.dll
[2009/12/23 00:21:24 | 01,676,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\xpssvcs.dll
[2009/12/22 23:38:12 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Office Genuine Advantage
[2009/12/22 23:35:33 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\zh-TW
[2009/12/22 23:35:33 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\zh-HK
[2009/12/22 23:35:33 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\tr-TR
[2009/12/22 23:35:33 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\sv-SE
[2009/12/22 23:35:33 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\pt-BR
[2009/12/22 23:35:33 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\nl-NL
[2009/12/22 23:35:33 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\nb-NO
[2009/12/22 23:35:33 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\ko-KR
[2009/12/22 23:35:33 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\it-IT
[2009/12/22 23:35:33 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\he-IL
[2009/12/22 23:35:33 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\fr-FR
[2009/12/22 23:35:33 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\fi-FI
[2009/12/22 23:35:33 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\es-ES
[2009/12/22 23:35:33 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\el-GR
[2009/12/22 23:35:33 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\de-DE
[2009/12/22 23:35:33 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\da-DK
[2009/12/22 23:35:33 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\ar-SA
[2009/12/22 23:17:14 | 00,000,000 | ---D | C] -- C:\Documents and Settings\xxxx xxxxxx\Application Data\Macromedia
[2009/12/22 23:10:51 | 00,000,000 | ---D | C] -- C:\Program Files\Microsoft CAPICOM 2.1.0.2
[2009/12/22 23:10:39 | 00,274,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mucltui.dll
[2009/12/22 23:10:39 | 00,016,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mucltui.dll.mui
[2009/12/22 22:54:01 | 00,471,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\aclayers.dll
[2009/12/22 22:34:33 | 00,000,000 | ---D | C] -- C:\Docs
[2009/12/22 22:32:47 | 00,000,000 | ---D | C] -- C:\PSTs
[2009/12/22 22:21:39 | 00,000,000 | -HSD | C] -- C:\Documents and Settings\xxxx xxxxxx\IECompatCache
[2009/12/22 22:20:47 | 00,000,000 | -HSD | C] -- C:\Documents and Settings\xxxx xxxxxx\PrivacIE
[2009/12/22 22:19:25 | 00,028,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mdimon.dll
[2009/12/22 22:18:35 | 00,000,000 | ---D | C] -- C:\Program Files\Microsoft ActiveSync
[2009/12/22 22:18:11 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\DESIGNER
[2009/12/22 22:17:58 | 00,000,000 | ---D | C] -- C:\WINDOWS\SHELLNEW
[2009/12/22 22:17:56 | 00,000,000 | ---D | C] -- C:\Program Files\Microsoft.NET
[2009/12/22 22:17:56 | 00,000,000 | ---D | C] -- C:\Program Files\Microsoft Office
[2009/12/22 22:08:54 | 00,000,000 | RH-D | C] -- C:\MSOCache
[2009/12/22 22:03:07 | 00,000,000 | -HSD | C] -- C:\RECYCLER
[2009/12/22 21:57:34 | 00,000,000 | -HSD | C] -- C:\Documents and Settings\xxxx xxxxxx\IETldCache
[2009/12/22 21:55:51 | 00,000,000 | ---D | C] -- C:\Documents and Settings\xxxx xxxxxx\My Documents\Downloads
[2009/12/22 21:49:02 | 11,069,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ieframe.dll
[2009/12/22 21:49:02 | 01,985,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iertutil.dll
[2009/12/22 21:49:02 | 00,594,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msfeeds.dll
[2009/12/22 21:49:02 | 00,055,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msfeedsbs.dll
[2009/12/22 21:48:58 | 00,000,000 | ---D | C] -- C:\WINDOWS\ie8updates
[2009/12/22 21:48:47 | 00,000,000 | ---D | C] -- C:\WINDOWS\WBEM
[2009/12/22 21:48:30 | 00,000,000 | -H-D | C] -- C:\WINDOWS\ie8
[2009/12/22 21:47:26 | 00,000,000 | ---D | C] -- C:\Documents and Settings\xxxx xxxxxx\Local Settings\Application Data\Temp
[2009/12/22 21:20:09 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\appmgmt
[2009/12/22 21:16:47 | 00,000,000 | ---D | C] -- C:\Program Files\MSXML 4.0
[2009/12/22 21:06:02 | 00,000,000 | ---D | C] -- C:\WINDOWS\Prefetch
[2009/12/22 20:59:39 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\en-us
[2009/12/22 20:59:38 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\scripting
[2009/12/22 20:59:38 | 00,000,000 | ---D | C] -- C:\WINDOWS\l2schemas
[2009/12/22 20:59:38 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\en
[2009/12/22 20:59:38 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\bits
[2009/12/22 20:57:33 | 00,000,000 | ---D | C] -- C:\WINDOWS\ServicePackFiles
[2009/12/22 20:55:56 | 00,000,000 | ---D | C] -- C:\WINDOWS\network diagnostic
[2009/12/22 20:53:33 | 00,000,000 | -H-D | C] -- C:\WINDOWS\$NtServicePackUninstall$
[2009/12/22 19:25:34 | 00,272,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\bthport.sys
[2009/12/22 19:15:17 | 00,203,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rmcast.sys
[2009/12/22 19:15:11 | 00,455,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mrxsmb.sys
[2009/12/22 19:15:04 | 00,333,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\srv.sys
[2009/12/22 19:14:57 | 00,331,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msadce.dll
[2009/12/22 19:14:26 | 00,691,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\inetcomm.dll
[2009/12/22 19:11:50 | 02,145,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ntkrnlmp.exe
[2009/12/22 19:11:48 | 02,066,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ntkrnlpa.exe
[2009/12/22 19:11:48 | 02,023,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ntkrpamp.exe
[2009/12/22 19:09:51 | 00,025,471 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\watv10nt.sys
[2009/12/22 19:09:51 | 00,022,271 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\watv06nt.sys
[2009/12/22 19:09:51 | 00,011,935 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\wadv11nt.sys
[2009/12/22 19:09:51 | 00,011,871 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\wadv09nt.sys
[2009/12/22 19:09:51 | 00,011,807 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\wadv07nt.sys
[2009/12/22 19:09:51 | 00,011,295 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\wadv08nt.sys
[2009/12/22 19:09:50 | 00,404,990 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\slntamr.sys
[2009/12/22 19:09:50 | 00,129,535 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\slnt7554.sys
[2009/12/22 19:09:50 | 00,095,424 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\slnthal.sys
[2009/12/22 19:09:50 | 00,013,240 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\slwdmsup.sys
[2009/12/22 19:09:49 | 00,180,360 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\ntmtlfax.sys
[2009/12/22 19:09:49 | 00,166,912 | ---- | C] (S3 Graphics, Inc.) -- C:\WINDOWS\System32\drivers\s3gnbm.sys
[2009/12/22 19:09:49 | 00,013,776 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\recagent.sys
[2009/12/22 19:09:48 | 01,309,184 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\mtlstrm.sys
[2009/12/22 19:09:48 | 00,452,736 | ---- | C] (Matrox Graphics Inc.) -- C:\WINDOWS\System32\drivers\mtxparhm.sys
[2009/12/22 19:09:48 | 00,126,686 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\mtlmnt5.sys
[2009/12/22 19:09:44 | 01,041,536 | ---- | C] (Conexant Systems, Inc.) -- C:\WINDOWS\System32\drivers\hsfdpsp2.sys
[2009/12/22 19:09:44 | 00,685,056 | ---- | C] (Conexant Systems, Inc.) -- C:\WINDOWS\System32\drivers\hsfcxts2.sys
[2009/12/22 19:09:44 | 00,220,032 | ---- | C] (Conexant Systems, Inc.) -- C:\WINDOWS\System32\drivers\hsfbs2s2.sys
[2009/12/22 19:08:59 | 00,327,040 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati2mtaa.sys
[2009/12/22 19:08:59 | 00,104,960 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinrvxx.sys
[2009/12/22 19:08:59 | 00,073,216 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atintuxx.sys
[2009/12/22 19:08:59 | 00,063,663 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1rvxx.sys
[2009/12/22 19:08:59 | 00,063,488 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinxsxx.sys
[2009/12/22 19:08:59 | 00,057,856 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinbtxx.sys
[2009/12/22 19:08:59 | 00,056,623 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1btxx.sys
[2009/12/22 19:08:59 | 00,052,224 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinraxx.sys
[2009/12/22 19:08:59 | 00,036,463 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1tuxx.sys
[2009/12/22 19:08:59 | 00,034,735 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1xsxx.sys
[2009/12/22 19:08:59 | 00,031,744 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinxbxx.sys
[2009/12/22 19:08:59 | 00,030,671 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1raxx.sys
[2009/12/22 19:08:59 | 00,029,455 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1xbxx.sys
[2009/12/22 19:08:59 | 00,028,672 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinsnxx.sys
[2009/12/22 19:08:59 | 00,026,367 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1snxx.sys
[2009/12/22 19:08:59 | 00,021,343 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1ttxx.sys
[2009/12/22 19:08:59 | 00,014,336 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinpdxx.sys
[2009/12/22 19:08:59 | 00,013,824 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinttxx.sys
[2009/12/22 19:08:59 | 00,013,824 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinmdxx.sys
[2009/12/22 19:08:59 | 00,012,047 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1pdxx.sys
[2009/12/22 19:08:59 | 00,011,615 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1mdxx.sys
[2009/12/22 18:57:13 | 00,337,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\netapi32.dll
[2009/12/22 18:57:05 | 01,172,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msxml3.dll
[2009/12/22 18:56:58 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
[2009/12/22 18:48:55 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\PreInstall
[2009/12/22 18:48:26 | 00,000,000 | -H-D | C] -- C:\WINDOWS\$MSI31Uninstall_KB893803v2$
[2009/12/22 18:46:04 | 00,000,000 | ---D | C] -- C:\Documents and Settings\xxxx xxxxxx\Local Settings\Application Data\Mozilla
[2009/12/22 18:46:04 | 00,000,000 | ---D | C] -- C:\Documents and Settings\xxxx xxxxxx\Application Data\Mozilla
[2009/12/22 18:45:56 | 00,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[2009/12/22 18:34:31 | 00,044,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wups2.dll
[2009/12/22 18:34:31 | 00,021,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wucltui.dll.mui
[2009/12/22 18:34:31 | 00,017,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wuaueng.dll.mui
[2009/12/22 18:34:31 | 00,015,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wuaucpl.cpl.mui
[2009/12/22 18:34:31 | 00,015,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wuapi.dll.mui
[2009/12/22 18:34:31 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\SoftwareDistribution
[2009/12/22 18:20:18 | 00,000,000 | --SD | C] -- C:\Documents and Settings\xxxx xxxxxx\Application Data\Microsoft
[2009/12/22 18:20:18 | 00,000,000 | RH-D | C] -- C:\Documents and Settings\xxxx xxxxxx\SendTo
[2009/12/22 18:20:18 | 00,000,000 | RH-D | C] -- C:\Documents and Settings\xxxx xxxxxx\Application Data
[2009/12/22 18:20:18 | 00,000,000 | R--D | C] -- C:\Documents and Settings\xxxx xxxxxx\Start Menu
[2009/12/22 18:20:18 | 00,000,000 | R--D | C] -- C:\Documents and Settings\xxxx xxxxxx\My Documents\My Pictures
[2009/12/22 18:20:18 | 00,000,000 | R--D | C] -- C:\Documents and Settings\xxxx xxxxxx\My Documents\My Music
[2009/12/22 18:20:18 | 00,000,000 | R--D | C] -- C:\Documents and Settings\xxxx xxxxxx\My Documents
[2009/12/22 18:20:18 | 00,000,000 | R--D | C] -- C:\Documents and Settings\xxxx xxxxxx\Favorites
[2009/12/22 18:20:18 | 00,000,000 | -HSD | C] -- C:\Documents and Settings\xxxx xxxxxx\UserData
[2009/12/22 18:20:18 | 00,000,000 | -HSD | C] -- C:\Documents and Settings\xxxx xxxxxx\Cookies
[2009/12/22 18:20:18 | 00,000,000 | -H-D | C] -- C:\Documents and Settings\xxxx xxxxxx\Templates
[2009/12/22 18:20:18 | 00,000,000 | -H-D | C] -- C:\Documents and Settings\xxxx xxxxxx\PrintHood
[2009/12/22 18:20:18 | 00,000,000 | -H-D | C] -- C:\Documents and Settings\xxxx xxxxxx\NetHood
[2009/12/22 18:20:18 | 00,000,000 | -H-D | C] -- C:\Documents and Settings\xxxx xxxxxx\Local Settings
[2009/12/22 18:20:18 | 00,000,000 | ---D | C] -- C:\Documents and Settings\xxxx xxxxxx\Local Settings\Application Data\Symantec
[2009/12/22 18:20:18 | 00,000,000 | ---D | C] -- C:\Documents and Settings\xxxx xxxxxx\Application Data\Symantec
[2009/12/22 18:20:18 | 00,000,000 | ---D | C] -- C:\Documents and Settings\xxxx xxxxxx\Local Settings\Application Data\Microsoft
[2009/12/22 18:20:18 | 00,000,000 | ---D | C] -- C:\Documents and Settings\xxxx xxxxxx\Application Data\Identities
[2009/12/22 18:20:18 | 00,000,000 | ---D | C] -- C:\Documents and Settings\xxxx xxxxxx\Application Data\IBM
[2009/12/22 18:20:18 | 00,000,000 | ---D | C] -- C:\Documents and Settings\xxxx xxxxxx\Local Settings\Application Data\Google
[2009/12/22 18:20:18 | 00,000,000 | ---D | C] -- C:\Documents and Settings\xxxx xxxxxx\Application Data\Google
[2009/12/22 18:20:18 | 00,000,000 | ---D | C] -- C:\Documents and Settings\xxxx xxxxxx\Desktop
[2009/12/22 18:20:18 | 00,000,000 | ---D | C] -- C:\Documents and Settings\xxxx xxxxxx\Local Settings\Application Data\BVRP Software
[2009/12/22 18:20:18 | 00,000,000 | ---D | C] -- C:\Documents and Settings\xxxx xxxxxx\Local Settings\Application Data\ATI
[2009/12/22 18:20:18 | 00,000,000 | ---D | C] -- C:\Documents and Settings\xxxx xxxxxx\Application Data\ATI
[2009/12/22 18:20:18 | 00,000,000 | ---D | C] -- C:\Documents and Settings\xxxx xxxxxx\Local Settings\Application Data\ApplicationHistory
[2009/12/22 18:20:18 | 00,000,000 | ---D | C] -- C:\Documents and Settings\xxxx xxxxxx\My Documents\Access Connections
[2009/12/22 18:10:22 | 00,000,000 | -HSD | C] -- C:\Recycled
[2009/12/22 18:10:14 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\LogFiles
[2009/12/22 18:09:39 | 00,582,968 | ---- | C] (Lenovo) -- C:\WINDOWS\System32\tvt_gina.dll
[2009/12/22 18:09:39 | 00,292,152 | ---- | C] (Lenovo) -- C:\WINDOWS\System32\tvt_gina_api.dll
[2009/12/22 18:09:39 | 00,011,520 | ---- | C] (IBM Corp.) -- C:\WINDOWS\System32\drivers\ANC.sys
[2009/12/22 18:09:00 | 00,000,000 | ---D | C] -- C:\WINDOWS\Downloaded Installations
[2009/12/22 18:08:40 | 00,000,000 | ---D | C] -- C:\Program Files\Google
[2009/12/22 18:07:32 | 00,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Application Data\Lenovo
[2009/12/22 18:04:59 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Desktop\Symantec Client Security
[2009/12/22 18:02:58 | 00,516,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\capicom.dll
[2009/12/22 18:02:58 | 00,000,000 | ---D | C] -- C:\Program Files\Symantec
[2009/12/22 18:02:52 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Symantec Shared
[2009/12/22 18:02:52 | 00,000,000 | ---D | C] -- C:\Program Files\Symantec Client Security
[2009/12/22 18:02:52 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Symantec
[2009/12/22 18:01:25 | 00,000,000 | ---D | C] -- C:\Program Files\IBM ThinkVantage
[2009/12/22 18:01:01 | 00,021,060 | ---- | C] (InterVideo, Inc.) -- C:\WINDOWS\System32\drivers\iviaspi.sys
[2009/12/22 18:00:40 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\InterVideo
[2009/12/22 18:00:37 | 00,000,000 | ---D | C] -- C:\Program Files\IBMTOOLS
[2009/12/22 18:00:14 | 00,013,440 | ---- | C] (Windows (R) 2000 DDK provider) -- C:\WINDOWS\System32\drivers\pcdrndisuio.sys
[2009/12/22 17:59:59 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\InstallShield
[2009/12/22 17:59:57 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\SureThing Shared
[2009/12/22 17:59:56 | 00,000,000 | ---D | C] -- C:\Program Files\Sonic
[2009/12/22 17:59:55 | 00,094,263 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\DLA.EXE
[2009/12/22 17:59:55 | 00,088,704 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\drivers\DRVMCDB.SYS
[2009/12/22 17:59:55 | 00,061,500 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\DLAAPI_W.DLL
[2009/12/22 17:59:55 | 00,040,544 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\drivers\DRVNDDM.SYS
[2009/12/22 17:59:55 | 00,022,684 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\drivers\DLARTL_N.SYS
[2009/12/22 17:59:55 | 00,005,628 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\drivers\DLACDBHM.SYS
[2009/12/22 17:59:55 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\DLA
[2009/12/22 17:59:54 | 00,000,000 | ---D | C] -- C:\Program Files\Multimedia Center for Think Offerings
[2009/12/22 17:59:34 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Sonic Shared
[2009/12/22 17:59:10 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Lenovo
[2009/12/22 17:59:00 | 00,044,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msxml4a.dll
[2009/12/22 17:58:36 | 00,922,920 | ---- | C] (LENOVO) -- C:\WINDOWS\System32\ahlprun.exe
[2009/12/22 17:58:28 | 01,056,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MFC71.dll
[2009/12/22 17:58:28 | 01,049,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MFC71u.dll
[2009/12/22 17:57:52 | 00,061,440 | ---- | C] (IBM) -- C:\WINDOWS\System32\IBMJavaPlugin142.cpl
[2009/12/22 17:57:52 | 00,042,032 | ---- | C] (IBM) -- C:\WINDOWS\System32\javaw.exe
[2009/12/22 17:57:52 | 00,042,032 | ---- | C] (IBM) -- C:\WINDOWS\System32\java.exe
[2009/12/22 17:57:45 | 00,000,000 | ---D | C] -- C:\Program Files\IBM
[2009/12/22 17:56:59 | 00,000,000 | ---D | C] -- C:\Program Files\ThinkVantage
[2009/12/22 17:55:17 | 00,000,000 | ---D | C] -- C:\Program Files\Windows Media Connect
[2009/12/22 17:50:44 | 00,000,000 | ---D | C] -- C:\Program Files\ATI Technologies
[2009/12/22 17:50:04 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\ReinstallBackups
[2009/12/22 17:50:02 | 00,000,000 | ---D | C] -- C:\Program Files\CONEXANT
[2009/12/22 17:49:34 | 01,285,632 | ---- | C] (Analog Devices) -- C:\WINDOWS\System32\SMMedia.dll
[2009/12/22 17:49:34 | 00,053,248 | ---- | C] (Analog Devices Inc.) -- C:\WINDOWS\System32\wdmioctl.dll
[2009/12/22 17:49:34 | 00,049,152 | ---- | C] (Analog Devices Inc.) -- C:\WINDOWS\System32\DSndUp.exe
[2009/12/22 17:49:34 | 00,045,056 | ---- | C] (adi) -- C:\WINDOWS\System32\CleanUp.exe
[2009/12/22 17:48:10 | 00,065,536 | ---- | C] (Lenovo Group Limited) -- C:\WINDOWS\System32\TP4EX.exe
[2009/12/22 17:48:10 | 00,049,152 | ---- | C] (Lenovo Group Limited) -- C:\WINDOWS\System32\tp4ex.cpl
[2009/12/22 17:48:10 | 00,040,960 | ---- | C] (Lenovo Group Limited) -- C:\WINDOWS\System32\TP4HOOK.dll
[2009/12/22 17:48:10 | 00,040,960 | ---- | C] (Lenovo Group Limited) -- C:\WINDOWS\System32\tp4cross.exe
[2009/12/22 17:47:40 | 00,000,000 | ---D | C] -- C:\Program Files\ThinkVantage Fingerprint Software
[2009/12/22 17:47:39 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Wise Installation Wizard
[2009/12/22 17:47:25 | 00,055,296 | ---- | C] (Lenovo Group Limited) -- C:\WINDOWS\System32\TP98.CPL
[2009/12/22 17:47:25 | 00,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\SMAPINT.SYS
[2009/12/22 17:46:51 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\DRVSTORE
[2009/12/22 17:46:50 | 00,000,000 | ---D | C] -- C:\Program Files\Intel
[2009/12/22 17:45:54 | 00,000,000 | ---D | C] -- C:\Program Files\Lenovo
[2009/12/22 17:45:33 | 00,000,000 | -H-D | C] -- C:\Program Files\InstallShield Installation Information
[2009/12/22 17:45:30 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\InstallShield
[2009/12/22 17:45:11 | 00,000,000 | ---D | C] -- C:\Program Files\ThinkPad
[2009/12/22 17:40:47 | 00,026,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spupdsvc.exe
[2009/12/22 17:38:41 | 00,000,000 | R-SD | C] -- C:\WINDOWS\assembly
[2009/12/22 17:38:41 | 00,000,000 | ---D | C] -- C:\WINDOWS\Microsoft.NET
[2009/12/22 17:38:40 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\URTTemp
[2009/12/22 17:37:33 | 00,000,000 | -H-D | C] -- C:\WINDOWS\$hf_mig$
[2009/12/22 17:37:02 | 00,000,000 | ---D | C] -- C:\WINDOWS\RegisteredPackages
[2009/12/22 17:34:31 | 00,689,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xpsp3res.dll
[2009/12/22 17:33:02 | 00,000,000 | ---D | C] -- C:\Program Files\Analog Devices
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[COLOR=#e56717]========== Files - Modified Within 30 Days ==========[/COLOR]
[2010/01/12 13:01:39 | 00,000,340 | ---- | M] () -- C:\WINDOWS\tasks\SystemToolsDailyTest.job
[2010/01/12 12:53:36 | 00,544,256 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\xxxx xxxxxx\Desktop\OTL.exe
[2010/01/12 12:52:48 | 00,000,698 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2010/01/12 12:52:00 | 00,001,006 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1197846292-3383628571-2451298793-1005UA.job
[2010/01/12 12:06:00 | 00,000,896 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2010/01/12 10:06:01 | 00,000,892 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2010/01/12 09:52:05 | 00,001,878 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Skype.lnk
[2010/01/12 09:41:45 | 00,000,408 | -H-- | M] () -- C:\WINDOWS\tasks\MP Scheduled Scan.job
[2010/01/12 09:41:08 | 00,000,314 | ---- | M] () -- C:\WINDOWS\tasks\PMTask.job
[2010/01/12 09:40:32 | 00,108,059 | ---- | M] () -- C:\WINDOWS\System32\drivers\klin.dat
[2010/01/12 09:40:32 | 00,095,259 | ---- | M] () -- C:\WINDOWS\System32\drivers\klick.dat
[2010/01/12 09:39:02 | 00,315,408 | ---- | M] (Kaspersky Lab) -- C:\WINDOWS\System32\drivers\klif.sys
[2010/01/12 09:37:26 | 00,002,278 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010/01/12 09:37:10 | 00,000,374 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts.ics
[2010/01/12 09:37:06 | 00,025,224 | ---- | M] () -- C:\WINDOWS\System32\PROCDB.INI
[2010/01/12 09:36:42 | 00,000,380 | ---- | M] () -- C:\WINDOWS\System32\IPSCtrl.INI
[2010/01/12 09:36:34 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2010/01/12 09:36:32 | 00,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010/01/12 09:36:29 | 32,195,74784 | -HS- | M] () -- C:\hiberfil.sys
[2010/01/12 09:35:41 | 04,194,304 | -H-- | M] () -- C:\Documents and Settings\xxxx xxxxxx\NTUSER.DAT
[2010/01/12 09:35:19 | 00,000,278 | -HS- | M] () -- C:\Documents and Settings\xxxx xxxxxx\ntuser.ini
[2010/01/12 09:19:12 | 00,000,436 | -H-- | M] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{F9310CAE-CC84-4595-AFF0-72A1DBB42BE2}.job
[2010/01/11 23:45:09 | 00,044,024 | ---- | M] () -- C:\Documents and Settings\xxxx xxxxxx\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
[2010/01/11 23:44:52 | 00,316,640 | ---- | M] () -- C:\WINDOWS\WMSysPr9.prx
[2010/01/11 23:44:00 | 00,000,603 | ---- | M] () -- C:\WINDOWS\win.ini
[2010/01/11 23:43:56 | 00,023,392 | ---- | M] () -- C:\WINDOWS\System32\nscompat.tlb
[2010/01/11 23:43:56 | 00,016,832 | ---- | M] () -- C:\WINDOWS\System32\amcompat.tlb
[2010/01/11 23:43:20 | 02,068,520 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2010/01/11 22:36:30 | 00,001,620 | ---- | M] () -- C:\Documents and Settings\xxxx xxxxxx\Desktop\CCleaner.lnk
[2010/01/11 10:08:11 | 11,258,6752 | ---- | M] () -- C:\Documents and Settings\xxxx xxxxxx\Desktop\minDrWebLiveCD-5.0.1.iso
[2010/01/11 09:40:23 | 27,276,0832 | ---- | M] () -- C:\Documents and Settings\xxxx xxxxxx\Desktop\BitDefenderRescueCD_v2.0.0_3_08_2009.iso
[2010/01/11 00:56:03 | 00,000,892 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Microsoft Security Essentials.lnk
[2010/01/11 00:51:10 | 00,001,005 | ---- | M] () -- C:\Documents and Settings\xxxx xxxxxx\Desktop\Spybot - Search & Destroy.lnk
[2010/01/10 22:17:36 | 00,000,768 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2010/01/10 21:52:00 | 00,000,954 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1197846292-3383628571-2451298793-1005Core.job
[2010/01/10 19:34:34 | 02,097,152 | ---- | M] () -- C:\Documents and Settings\xxxx xxxxxx\Desktop\bubblegums_9-1-2010
[2010/01/10 17:26:45 | 00,000,870 | ---- | M] () -- C:\Documents and Settings\xxxx xxxxxx\Desktop\Shortcut to TpKmapAp.exe.lnk
[2010/01/10 00:12:33 | 00,000,928 | ---- | M] () -- C:\Documents and Settings\xxxx xxxxxx\Desktop\Adobe Photoshop CS4.lnk
[2010/01/10 00:12:12 | 00,000,952 | ---- | M] () -- C:\Documents and Settings\xxxx xxxxxx\Desktop\Adobe Dreamweaver CS4.lnk
[2010/01/10 00:06:32 | 00,000,848 | ---- | M] () -- C:\Documents and Settings\xxxx xxxxxx\Start Menu\Programs\Startup\306313.lnk
[2010/01/10 00:05:38 | 00,001,972 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Mindjet MindManager 8.lnk
[2010/01/09 21:21:54 | 00,000,717 | ---- | M] () -- C:\Documents and Settings\xxxx xxxxxx\Desktop\7-Zip File Manager.lnk
[2010/01/09 17:48:15 | 00,001,087 | ---- | M] () -- C:\Documents and Settings\xxxx xxxxxx\My Documents\Untitled-1.gif
[2010/01/09 13:10:15 | 00,016,896 | ---- | M] () -- C:\Documents and Settings\xxxx xxxxxx\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/01/08 20:51:56 | 00,000,754 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\PowerISO.lnk
[2010/01/07 23:08:14 | 00,001,024 | ---- | M] () -- C:\.rnd
[2010/01/07 19:54:01 | 00,000,664 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat
[2010/01/07 16:07:14 | 00,038,224 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2010/01/07 16:07:04 | 00,019,160 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2010/01/02 12:59:17 | 00,000,910 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Orange Mobile Partner.lnk
[2009/12/28 23:18:36 | 00,000,256 | ---- | M] () -- C:\WINDOWS\System32\pool.bin
[2009/12/28 22:53:08 | 04,315,988 | -H-- | M] () -- C:\Documents and Settings\xxxx xxxxxx\Local Settings\Application Data\IconCache.db
[2009/12/28 08:40:53 | 00,318,233 | ---- | M] () -- C:\x1supportfiles.zip
[2009/12/26 21:07:26 | 00,506,068 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI
[2009/12/26 21:07:26 | 00,444,596 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2009/12/26 21:07:26 | 00,072,306 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2009/12/26 13:34:36 | 00,001,812 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\3Connect.lnk
[2009/12/26 13:32:12 | 00,070,667 | ---- | M] () -- C:\WINDOWS\Huawei ModemsUninstall.exe
[2009/12/25 20:04:31 | 00,002,495 | ---- | M] () -- C:\Documents and Settings\xxxx xxxxxx\Desktop\Excel2003.lnk
[2009/12/25 19:17:40 | 00,000,227 | ---- | M] () -- C:\WINDOWS\system.ini
[2009/12/25 19:17:40 | 00,000,194 | RHS- | M] () -- C:\BOOT.INI
[2009/12/25 18:43:45 | 00,000,757 | ---- | M] () -- C:\Documents and Settings\xxxx xxxxxx\Desktop\Shortcut to Control_Alt_W__batch_file.bat.lnk
[2009/12/23 22:52:53 | 00,001,026 | ---- | M] () -- C:\Documents and Settings\xxxx xxxxxx\Desktop\Shortcut to SCANPST.EXE.lnk
[2009/12/23 22:07:27 | 00,001,034 | ---- | M] () -- C:\Documents and Settings\xxxx xxxxxx\Desktop\Shortcut to Traigh_NYE_2009-10.xls.lnk
[2009/12/23 20:46:13 | 20,299,200 | ---- | M] (TomTom International B.V.) -- C:\Documents and Settings\xxxx xxxxxx\Desktop\TomTomHOME2winlatest.exe
[2009/12/23 18:20:30 | 00,000,762 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\AbsoluteFTP.lnk
[2009/12/23 18:03:06 | 00,000,056 | -H-- | M] () -- C:\WINDOWS\System32\ezsidmv.dat
[2009/12/23 17:53:51 | 00,000,690 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\µTorrent.lnk
[2009/12/23 17:47:30 | 00,000,730 | ---- | M] () -- C:\Documents and Settings\xxxx xxxxxx\Desktop\Edraw Max.lnk
[2009/12/23 17:16:24 | 00,000,000 | ---- | M] () -- C:\WINDOWS\ativpsrm.bin
[2009/12/23 17:00:41 | 00,000,000 | -H-- | M] () -- C:\WINDOWS\System32\drivers\Msft_Kernel_SynTP_01007.Wdf
[2009/12/23 17:00:35 | 00,000,000 | -H-- | M] () -- C:\WINDOWS\System32\drivers\MsftWdf_Kernel_01007_Coinstaller_Critical.Wdf
[2009/12/23 16:57:09 | 00,000,188 | ---- | M] () -- C:\WINDOWS\x
[2009/12/23 16:53:34 | 00,001,701 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\ThinkVantage Productivity Center.lnk
[2009/12/23 15:49:03 | 00,030,144 | ---- | M] (Lenovo (United States) Inc.) -- C:\WINDOWS\System32\drivers\psadd.sys
[2009/12/23 15:39:48 | 00,000,528 | ---- | M] () -- C:\WINDOWS\tasks\PCDoctorBackgroundMonitorTask.job
[2009/12/23 12:31:55 | 00,001,867 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Macromedia Dreamweaver 8.lnk
[2009/12/23 10:54:31 | 00,000,700 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\TrueCrypt.lnk
[2009/12/23 10:54:30 | 00,223,440 | ---- | M] (TrueCrypt Foundation) -- C:\WINDOWS\System32\drivers\truecrypt.sys
[2009/12/23 10:39:45 | 00,000,790 | ---- | M] () -- C:\Documents and Settings\xxxx xxxxxx\Desktop\FolderMatch v3.5.6.lnk
[2009/12/23 09:44:37 | 00,000,000 | RHS- | M] () -- C:\MSDOS.SYS
[2009/12/23 09:43:16 | 00,000,808 | ---- | M] () -- C:\Documents and Settings\xxxx xxxxxx\Desktop\Xara Xtreme Pro 5.lnk
[2009/12/23 01:30:14 | 00,002,481 | ---- | M] () -- C:\WINDOWS\System32\OEMINFO.INI
[2009/12/23 00:41:09 | 00,000,765 | ---- | M] () -- C:\Documents and Settings\xxxx xxxxxx\Desktop\Shortcut to Control_Alt_A__batch_file.bat.lnk
[2009/12/23 00:39:36 | 00,000,000 | -H-- | M] () -- C:\WINDOWS\System32\drivers\UMDF\MsftWdf_user_01_00_00.Wdf
[2009/12/23 00:39:07 | 00,000,920 | ---- | M] () -- C:\WINDOWS\System32\InstallUtil.InstallLog
[2009/12/22 22:42:47 | 00,002,036 | ---- | M] () -- C:\Documents and Settings\xxxx xxxxxx\Desktop\Word 2003.lnk
[2009/12/22 22:42:42 | 00,002,016 | ---- | M] () -- C:\Documents and Settings\xxxx xxxxxx\Desktop\PowerPoint 2003.lnk
[2009/12/22 22:42:34 | 00,002,060 | ---- | M] () -- C:\Documents and Settings\xxxx xxxxxx\Desktop\Outlook 2003.lnk
[2009/12/22 22:42:15 | 00,002,004 | ---- | M] () -- C:\Documents and Settings\xxxx xxxxxx\Desktop\Microsoft Office Access 2003.lnk
[2009/12/22 22:19:31 | 00,000,376 | ---- | M] () -- C:\WINDOWS\ODBC.INI
[2009/12/22 21:49:41 | 00,002,348 | ---- | M] () -- C:\Documents and Settings\xxxx xxxxxx\Desktop\Google Chrome.lnk
[2009/12/22 21:19:21 | 00,000,040 | ---- | M] () -- C:\WINDOWS\System32\profile.dat
[2009/12/22 21:08:28 | 00,001,613 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Mozilla Firefox.lnk
[2009/12/22 20:55:45 | 00,250,048 | RHS- | M] () -- C:\ntldr
[2009/12/22 18:46:07 | 00,000,000 | ---- | M] () -- C:\WINDOWS\nsreg.dat
[2009/12/22 18:21:06 | 00,000,135 | ---- | M] () -- C:\Documents and Settings\xxxx xxxxxx\Local Settings\Application Data\fusioncache.dat
[2009/12/22 18:20:27 | 00,000,100 | ---- | M] () -- C:\WINDOWS\System32\drivers\LENOVO_2007_F4G.MRK
[2009/12/22 18:20:26 | 00,000,000 | -H-- | M] () -- C:\IO.SYS
[2009/12/22 18:20:26 | 00,000,000 | -H-- | M] () -- C:\CONFIG.SYS
[2009/12/22 18:20:26 | 00,000,000 | -H-- | M] () -- C:\AUTOEXEC.BAT
[2009/12/22 18:20:23 | 00,000,010 | ---- | M] () -- C:\WINDOWS\System32\firstboot.ibm
[2009/12/22 18:20:01 | 00,002,359 | ---- | M] () -- C:\WINDOWS\System32\$winnt$.inf
[2009/12/22 18:20:00 | 00,262,144 | ---- | M] () -- C:\Documents and Settings\All Users\NTUSER.DAT
[2009/12/22 18:10:22 | 00,000,061 | ---- | M] () -- C:\WINDOWS\smscfg.ini
[2009/12/22 18:10:16 | 00,000,333 | ---- | M] () -- C:\WINDOWS\System32\$ncsp$.inf
[2009/12/22 18:09:40 | 00,000,000 | ---- | M] () -- C:\WINDOWS\System32\AccConnAdvanced.html
[2009/12/22 18:06:24 | 00,000,000 | -H-- | M] () -- C:\BOOTLOG.PRV
[2009/12/22 18:03:28 | 00,008,192 | ---- | M] () -- C:\WINDOWS\REGLOCS.OLD
[2009/12/22 18:00:02 | 00,000,148 | ---- | M] () -- C:\WINDOWS\wininit.ini
[2009/12/22 17:58:02 | 00,001,472 | ---- | M] () -- C:\SYSLEVEL.IBM
[2009/12/22 17:49:40 | 00,000,000 | RH-- | M] () -- C:\WINDOWS\System32\drivers\IBM_2007_F4G_TP.MRK
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]