OTL log part 1
OTL logfile created on: 11/27/2010 11:35:49 AM - Run 1
OTL by OldTimer - Version 3.2.17.3 Folder = C:\Users\Owner\Desktop
64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
6.00 Gb Total Physical Memory | 4.00 Gb Available Physical Memory | 75.00% Memory free
12.00 Gb Paging File | 10.00 Gb Available in Paging File | 86.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 453.35 Gb Total Space | 383.42 Gb Free Space | 84.57% Space Free | Partition Type: NTFS
Computer Name: OWNER-PC | User Name: Owner | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - File not found -- C:\windows\SysWow64\DRIVERS\o2flash.exe
PRC - File not found -- C:\windows\SysWow64\hasplms.exe
PRC - [2010/11/27 11:33:30 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Users\Owner\Desktop\OTL.exe
PRC - [2010/10/16 00:40:40 | 000,037,664 | ---- | M] (Apple Inc.) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
PRC - [2010/08/24 03:38:18 | 000,092,008 | ---- | M] (TomTom) -- C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe
PRC - [2010/04/29 15:59:14 | 005,248,312 | ---- | M] (Yahoo! Inc.) -- C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe
PRC - [2010/04/28 02:36:16 | 000,052,280 | ---- | M] (Fisher-Price) -- C:\Program Files (x86)\Fisher-Price\iXL\iXL.Middleware.exe
PRC - [2009/09/25 22:32:18 | 000,189,736 | ---- | M] (Seagate Technology LLC) -- C:\Program Files (x86)\Seagate\SeagateManager\Sync\FreeAgentService.exe
PRC - [2009/07/28 21:26:42 | 000,062,848 | ---- | M] (TOSHIBA CORPORATION) -- C:\Program Files (x86)\Toshiba\ConfigFree\CFSwMgr.exe
PRC - [2009/07/14 20:10:30 | 000,042,368 | ---- | M] (TOSHIBA CORPORATION) -- C:\Program Files (x86)\Toshiba\ConfigFree\CFProcSRVC.exe
PRC - [2009/07/13 16:24:00 | 000,304,496 | ---- | M] (TOSHIBA CORPORATION) -- C:\Program Files (x86)\Toshiba\ConfigFree\NDSTray.exe
PRC - [2009/03/10 19:51:20 | 000,046,448 | ---- | M] (TOSHIBA CORPORATION) -- C:\Program Files (x86)\Toshiba\ConfigFree\CFSvcs.exe
PRC - [2008/11/09 14:48:14 | 000,602,392 | ---- | M] (Yahoo! Inc.) -- C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe
========== Modules (SafeList) ==========
MOD - [2010/11/27 11:33:30 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Users\Owner\Desktop\OTL.exe
MOD - [2010/08/20 23:21:32 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\comctl32.dll
========== Win32 Services (SafeList) ==========
SRV:
64bit: - [2010/09/07 06:57:56 | 000,836,504 | ---- | M] (Trend Micro Inc.) [Auto | Running] -- C:\Program Files\Trend Micro\Internet Security\SfCtlCom.exe -- (SfCtlCom)
SRV:
64bit: - [2010/06/29 11:49:27 | 000,128,752 | ---- | M] (SUPERAntiSpyware.com) [Auto | Running] -- C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE -- (!SASCORE)
SRV:
64bit: - [2010/02/05 16:53:08 | 000,824,688 | ---- | M] (TOSHIBA Corporation) [On_Demand | Stopped] -- C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe -- (TPCHSrv)
SRV:
64bit: - [2010/02/05 16:44:48 | 000,137,560 | ---- | M] (TOSHIBA Corporation) [On_Demand | Stopped] -- C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe -- (TOSHIBA HDD SSD Alert Service)
SRV:
64bit: - [2009/12/17 07:10:38 | 003,750,400 | ---- | M] (SafeNet Inc.) [Auto | Running] -- C:\windows\SysNative\hasplms.exe -- (hasplms)
SRV:
64bit: - [2009/09/24 15:53:24 | 000,570,632 | ---- | M] (Trend Micro Inc.) [On_Demand | Running] -- C:\Program Files\Trend Micro\BM\TMBMSRV.exe -- (TMBMServer)
SRV:
64bit: - [2009/09/24 15:53:22 | 000,917,768 | ---- | M] (Trend Micro Inc.) [On_Demand | Running] -- C:\Program Files\Trend Micro\Internet Security\TmProxy.exe -- (TmProxy)
SRV:
64bit: - [2009/08/21 10:31:06 | 000,488,800 | ---- | M] (TOSHIBA Corporation) [Auto | Running] -- C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe -- (TosCoSrv)
SRV:
64bit: - [2009/08/11 17:10:48 | 000,252,272 | ---- | M] (TOSHIBA Corporation) [Auto | Running] -- C:\Program Files\TOSHIBA\TECO\TecoService.exe -- (TOSHIBA eco Utility Service)
SRV:
64bit: - [2009/07/28 16:48:06 | 000,140,632 | ---- | M] (TOSHIBA Corporation) [Auto | Running] -- C:\Windows\SysNative\TODDSrv.exe -- (TODDSrv)
SRV:
64bit: - [2009/07/13 19:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:
64bit: - [2009/07/08 08:41:02 | 000,531,520 | ---- | M] (TOSHIBA Corporation) [Auto | Running] -- C:\Windows\SysNative\ThpSrv.exe -- (Thpsrv)
SRV:
64bit: - [2007/02/12 17:43:00 | 000,065,536 | ---- | M] (O2Micro International) [Auto | Running] -- C:\Windows\SysNative\drivers\o2flash.exe -- (O2FLASH)
SRV - [2010/10/16 00:40:40 | 000,037,664 | ---- | M] (Apple Inc.) [Auto | Running] -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe -- (Apple Mobile Device)
SRV - [2010/08/24 03:38:18 | 000,092,008 | ---- | M] (TomTom) [Auto | Running] -- C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe -- (TomTomHOMEService)
SRV - [2009/09/25 22:32:18 | 000,189,736 | ---- | M] (Seagate Technology LLC) [Auto | Running] -- C:\Program Files (x86)\Seagate\SeagateManager\Sync\FreeAgentService.exe -- (FreeAgentGoNext Service)
SRV - [2009/08/17 11:48:42 | 000,051,512 | ---- | M] (TOSHIBA Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Toshiba\TOSHIBA Service Station\TMachInfo.exe -- (TMachInfo)
SRV - [2009/08/10 20:55:58 | 000,248,688 | ---- | M] (TOSHIBA CORPORATION) [Auto | Running] -- C:\Program Files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe -- (cfWiMAXService)
SRV - [2009/07/14 20:10:30 | 000,042,368 | ---- | M] (TOSHIBA CORPORATION) [Auto | Running] -- C:\Program Files (x86)\TOSHIBA\ConfigFree\CFProcSRVC.exe -- (ConfigFree Gadget Service)
SRV - [2009/06/10 15:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2009/03/10 19:51:20 | 000,046,448 | ---- | M] (TOSHIBA CORPORATION) [Auto | Running] -- C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe -- (ConfigFree Service)
SRV - [2008/11/09 14:48:14 | 000,602,392 | ---- | M] (Yahoo! Inc.) [Auto | Running] -- C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe -- (YahooAUService)
SRV - [2007/05/31 16:11:54 | 000,443,784 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\wcescomm.dll -- (WcesComm)
SRV - [2007/05/31 16:11:46 | 000,225,672 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\rapimgr.dll -- (RapiMgr)
========== Driver Services (SafeList) ==========
DRV:
64bit: - File not found [Kernel | On_Demand | Stopped] -- C:\windows\SysNative\drivers\pfc.sys -- (pfc)
DRV:
64bit: - [2010/09/28 15:44:52 | 000,051,712 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64)
DRV:
64bit: - [2010/07/30 11:30:26 | 000,309,840 | ---- | M] (Trend Micro Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\tmxpflt.sys -- (tmxpflt)
DRV:
64bit: - [2010/07/30 11:30:20 | 000,042,576 | ---- | M] (Trend Micro Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\tmpreflt.sys -- (tmpreflt)
DRV:
64bit: - [2010/07/30 11:24:14 | 001,988,176 | ---- | M] (Trend Micro Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\vsapint.sys -- (vsapint)
DRV:
64bit: - [2010/06/14 08:32:54 | 000,016,448 | ---- | M] (Teruten Inc) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TFsExDisk.sys -- (TFsExDisk)
DRV:
64bit: - [2010/04/26 20:25:22 | 000,161,280 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sscemdm.sys -- (sscemdm)
DRV:
64bit: - [2010/04/26 20:25:22 | 000,127,488 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sscebus.sys -- (sscebus) SAMSUNG USB Composite Device V2 driver (WDM)
DRV:
64bit: - [2010/04/26 20:25:22 | 000,018,944 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sscemdfl.sys -- (sscemdfl)
DRV:
64bit: - [2010/04/26 16:23:08 | 001,103,904 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\rtl8192se.sys -- (rtl8192se)
DRV:
64bit: - [2010/02/17 12:23:05 | 000,014,920 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\sasdifsv64.sys -- (SASDIFSV)
DRV:
64bit: - [2010/02/17 12:23:05 | 000,012,360 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\saskutil64.sys -- (SASKUTIL)
DRV:
64bit: - [2009/10/09 20:41:20 | 000,109,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus)
DRV:
64bit: - [2009/09/24 15:54:10 | 000,107,536 | ---- | M] (Trend Micro Inc.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\tmtdi.sys -- (tmtdi)
DRV:
64bit: - [2009/08/27 09:07:06 | 007,369,600 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
DRV:
64bit: - [2009/07/30 21:22:04 | 000,027,784 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\tdcmdpst.sys -- (tdcmdpst)
DRV:
64bit: - [2009/07/30 19:20:18 | 000,281,648 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP)
DRV:
64bit: - [2009/07/24 16:57:08 | 000,482,384 | ---- | M] (TOSHIBA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\tos_sps64.sys -- (tos_sps64)
DRV:
64bit: - [2009/07/21 11:43:30 | 000,072,352 | ---- | M] (O2Micro ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\o2mdgx64.sys -- (O2MDGRDR)
DRV:
64bit: - [2009/07/16 17:21:16 | 000,049,696 | ---- | M] (O2Micro ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\o2sdgx64.sys -- (O2SDGRDR)
DRV:
64bit: - [2009/07/14 16:31:18 | 000,026,840 | ---- | M] (TOSHIBA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\TVALZ_O.SYS -- (TVALZ)
DRV:
64bit: - [2009/07/13 19:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:
64bit: - [2009/07/13 15:59:33 | 005,020,672 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (atikmdag)
DRV:
64bit: - [2009/07/10 07:45:12 | 000,139,264 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\IntcHdmi.sys -- (IntcHdmiAddService) Intel(R)
DRV:
64bit: - [2009/06/29 17:16:20 | 000,014,784 | ---- | M] (TOSHIBA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\Thpevm.sys -- (Thpevm)
DRV:
64bit: - [2009/06/29 09:25:22 | 000,034,880 | ---- | M] (TOSHIBA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\thpdrv.sys -- (Thpdrv)
DRV:
64bit: - [2009/06/23 02:28:22 | 000,684,544 | ---- | M] (Conexant Systems Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\CHDRT64.sys -- (CnxtHdAudService)
DRV:
64bit: - [2009/06/22 18:06:38 | 000,035,008 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\PGEffect.sys -- (PGEffect)
DRV:
64bit: - [2009/06/19 20:15:22 | 000,014,472 | ---- | M] (TOSHIBA Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\TVALZFL.sys -- (TVALZFL)
DRV:
64bit: - [2009/06/15 14:58:50 | 000,012,800 | ---- | M] (TOSHIBA) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\QIOMem.sys -- (QIOMem)
DRV:
64bit: - [2009/06/10 14:38:56 | 000,000,308 | ---- | M] () [File_System | On_Demand | Running] -- C:\Windows\SysNative\wbem\ntfs.mof -- (Ntfs)
DRV:
64bit: - [2009/06/10 14:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:
64bit: - [2009/06/10 14:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:
64bit: - [2009/06/10 14:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:
64bit: - [2009/06/10 14:34:18 | 000,057,344 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\L1C62x64.sys -- (L1C) NDIS Miniport Driver for Atheros AR8131/AR8132 PCI-E Ethernet Controller (NDIS 6.20)
DRV:
64bit: - [2009/06/04 19:54:36 | 000,408,600 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)
DRV:
64bit: - [2009/05/18 14:17:08 | 000,034,152 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)
DRV - [2010/06/14 08:32:54 | 000,016,448 | ---- | M] (Teruten Inc) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\TFsExDisk.Sys -- (TFsExDisk)
DRV - [2008/07/16 11:10:54 | 000,010,368 | ---- | M] (Padus, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\pfc.sys -- (pfc)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://www.yahoo.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
http://www.yahoo.com
IE - HKLM\..\URLSearchHook: {7b13ec3e-999a-4b70-b9cb-2617b8323822} - C:\Program Files (x86)\Zynga\tbZyn0.dll (Conduit Ltd.)
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://www.google.com/ig/redirectdomain?brand=TSNA&bmod=TSNA
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page =
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
http://www.att.net/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Restore =
http://att.my.yahoo.com/
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
[2010/09/04 15:46:07 | 000,000,000 | ---D | M] -- C:\Users\Owner\AppData\Roaming\mozilla\Extensions
[2010/09/04 15:46:07 | 000,000,000 | ---D | M] -- C:\Users\Owner\AppData\Roaming\mozilla\Extensions\home2@tomtom.com
[2010/07/08 16:52:31 | 000,000,000 | ---D | M] -- C:\Users\Owner\AppData\Roaming\mozilla\Extensions\IMVUClientXUL@imvu.com
[2010/08/03 06:30:04 | 000,000,000 | ---D | M] -- C:\Users\Owner\AppData\Roaming\mozilla\Extensions\mozswing@mozswing.org
O1 HOSTS File: ([2009/06/10 15:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2 - BHO: (Zynga Toolbar) - {7b13ec3e-999a-4b70-b9cb-2617b8323822} - C:\Program Files (x86)\Zynga\tbZyn0.dll (Conduit Ltd.)
O2 - BHO: (no name) - {9D425283-D487-4337-BAB6-AB8354A81457} - No CLSID value found.
O2 - BHO: (Skype Plug-In) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (no name) - MRI_DISABLED - No CLSID value found.
O3 - HKLM\..\Toolbar: (Zynga Toolbar) - {7b13ec3e-999a-4b70-b9cb-2617b8323822} - C:\Program Files (x86)\Zynga\tbZyn0.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (no name) - {9D425283-D487-4337-BAB6-AB8354A81457} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {69D1A568-FFDF-4EF5-8919-7003582E0EE8} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (Zynga Toolbar) - {7B13EC3E-999A-4B70-B9CB-2617B8323822} - C:\Program Files (x86)\Zynga\tbZyn0.dll (Conduit Ltd.)
O4:
64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
O4:
64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
O4:
64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
O4:
64bit: - HKLM..\Run: [UfSeAgnt.exe] C:\Program Files\Trend Micro\Internet Security\UfSeAgnt.exe (Trend Micro Inc.)
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [AppleSyncNotifier] C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe (Apple Inc.)
O4 - HKLM..\Run: [iXL_MiddleWare] C:\Program Files (x86)\Fisher-Price\iXL\iXL.Middleware.exe (Fisher-Price)
O4 - HKLM..\Run: [NPSStartup] File not found
O4 - HKCU..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe (SUPERAntiSpyware.com)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDesktopCleanupWizard = 1
O9 - Extra Button: @C:\windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : @C:\windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation)
O9 - Extra Button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O10:
64bit: - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93}
http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}
http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968}
http://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab (Facebook Photo Uploader 5 Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93}
http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {9C23D886-43CB-43DE-B2DB-112A68D7E10A}
http://lads.myspace.com/upload/MySpaceUploader2.cab (MySpace Uploader Control)
O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}
http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7}
http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O16 - DPF: {E8F2FD65-4CA1-4E1E-BE81-A2D0A7C4D9CC}
https://esupport.trendmicro.com/_layouts/1033/GetVBInfo.cab (GetInfo Class)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1 205.152.150.23
O18:
64bit: - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:
64bit: - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - Reg Error: Key error. File not found
O18:
64bit: - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:
64bit: - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Reg Error: Key error. File not found
O18:
64bit: - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - Reg Error: Key error. File not found
O18:
64bit: - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - Reg Error: Key error. File not found
O18:
64bit: - Protocol\Handler\wlpg {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - Reg Error: Key error. File not found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20:
64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\windows\explorer.exe (Microsoft Corporation)
O20:
64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:
64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20:
64bit: - Winlogon\Notify\igfxcui: DllName - Reg Error: Key error. - C:\windows\SysNative\igfxdev.dll (Intel Corporation)
O21:
64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{801537bd-c320-11df-9772-00269e3edcdc}\Shell - "" = AutoRun
O33 - MountPoints2\{801537bd-c320-11df-9772-00269e3edcdc}\Shell\AutoRun\command - "" = E:\NPSAI.exe -- File not found
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35:
64bit: - HKLM\..comfile [open] -- "%1" %*
O35:
64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:
64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:
64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
Drivers32:
64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.dvacm - C:\Program Files (x86)\Common Files\Ulead Systems\vio\DVACM.acm (Ulead Systems, Inc.)
Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.mpegacm - C:\Program Files (x86)\Common Files\Ulead Systems\MPEG\MPEGACM.acm (Ulead Systems, Inc.)
Drivers32: msacm.ulmp3acm - C:\Program Files (x86)\Common Files\Ulead Systems\MPEG\ulmp3acm.acm (Ulead systems)
Drivers32: vidc.cvid - C:\windows\SysWow64\iccvid.dll (Radius Inc.)
CREATERESTOREPOINT
Restore point Set: OTL Restore Point
========== Files/Folders - Created Within 30 Days ==========
[2010/11/27 11:33:26 | 000,575,488 | ---- | C] (OldTimer Tools) -- C:\Users\Owner\Desktop\OTL.exe
[2010/11/27 11:09:13 | 000,000,000 | ---D | C] -- C:\windows\Minidump
[2010/11/27 09:51:45 | 000,189,520 | ---- | C] (Trend Micro Inc.) -- C:\windows\SysWow64\drivers\tmcomm.sys
[2010/11/27 09:48:21 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Trend Micro
[2010/11/27 09:46:31 | 000,000,000 | ---D | C] -- C:\Users\Owner\Desktop\SIC_5.5_build_1017
[2010/11/27 09:44:36 | 000,536,064 | ---- | C] (Igor Pavlov) -- C:\Users\Owner\AppData\Local\7za.exe
[2010/11/27 09:44:36 | 000,286,720 | ---- | C] (SteelWerX) -- C:\Users\Owner\AppData\Local\swreg.exe
[2010/11/27 09:44:36 | 000,163,840 | ---- | C] (Helge Klein) -- C:\Users\Owner\AppData\Local\setacl.exe
[2010/11/27 09:43:56 | 001,440,008 | ---- | C] (Trend Micro Incorporated) -- C:\Users\Owner\Desktop\TwinFix.exe
[2010/11/27 09:40:03 | 001,912,872 | ---- | C] (Trend Micro Inc.) -- C:\Users\Owner\Desktop\HousecallLauncher.exe
[2010/11/26 18:30:54 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\SUPERAntiSpyware.com
[2010/11/26 18:30:54 | 000,000,000 | ---D | C] -- C:\ProgramData\SUPERAntiSpyware.com
[2010/11/26 18:30:19 | 000,000,000 | ---D | C] -- C:\ProgramData\!SASCORE
[2010/11/26 18:30:17 | 000,000,000 | ---D | C] -- C:\Program Files\SUPERAntiSpyware
[2010/11/26 18:27:22 | 009,852,776 | ---- | C] (SUPERAntiSpyware.com) -- C:\Users\Owner\Desktop\SUPERAntiSpyware.exe
[2010/11/26 13:11:51 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\Malwarebytes
[2010/11/26 13:09:57 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\windows\SysWow64\drivers\mbamswissarmy.sys
[2010/11/26 13:09:56 | 000,024,664 | ---- | C] (Malwarebytes Corporation) -- C:\windows\SysNative\drivers\mbam.sys
[2010/11/26 13:09:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2010/11/26 13:09:56 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2010/11/26 13:08:26 | 006,153,352 | ---- | C] (Malwarebytes Corporation ) -- C:\Users\Owner\Desktop\mbam-setup-1.46.exe
[2010/11/26 01:54:49 | 000,000,000 | ---D | C] -- C:\Program Files\Java
[2010/11/26 01:41:50 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adobe
[2010/11/23 07:17:25 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\HamsterSoft
[2010/11/18 17:53:06 | 000,133,120 | ---- | C] (Trend Micro Incorporated) -- C:\windows\SysWow64\GetVBInfo.ocx
[2010/11/17 21:14:44 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\Windows Live Writer
[2010/11/17 21:14:44 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Local\Windows Live Writer
[2010/11/13 22:37:31 | 000,000,000 | ---D | C] -- C:\Program Files\iTunes
[2010/11/13 22:37:31 | 000,000,000 | ---D | C] -- C:\Program Files\iPod
[2010/11/13 08:35:33 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\NCH Software
[2010/11/13 08:33:01 | 000,000,000 | ---D | C] -- C:\ProgramData\NCH Swift Sound
[2010/11/13 08:32:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\NCH Swift Sound
[2010/11/13 08:32:49 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\NCH Swift Sound
[2010/11/05 14:49:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Skype
[2010/11/05 14:49:53 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\Skype
========== Files - Modified Within 30 Days ==========
[2010/11/27 11:37:15 | 000,000,824 | ---- | M] () -- C:\windows\SysNative\drivers\etc\tmvsthfud.bin
[2010/11/27 11:37:13 | 000,000,824 | ---- | M] () -- C:\windows\SysNative\drivers\etc\tmvsthfss.bin
[2010/11/27 11:33:30 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Users\Owner\Desktop\OTL.exe
[2010/11/27 11:17:01 | 000,015,792 | -H-- | M] () -- C:\windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2010/11/27 11:17:01 | 000,015,792 | -H-- | M] () -- C:\windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2010/11/27 11:09:32 | 000,000,258 | RHS- | M] () -- C:\ProgramData\ntuser.pol
[2010/11/27 11:09:12 | 000,067,584 | --S- | M] () -- C:\windows\bootstat.dat
[2010/11/27 11:09:05 | 603,298,293 | ---- | M] () -- C:\windows\MEMORY.DMP
[2010/11/27 11:09:00 | 408,633,343 | -HS- | M] () -- C:\hiberfil.sys
[2010/11/27 10:11:26 | 000,000,126 | ---- | M] () -- C:\Malwarebackup.zip
[2010/11/27 10:03:30 | 000,000,908 | ---- | M] () -- C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-636232035-4194440676-1943748027-1000UA.job
[2010/11/27 09:49:30 | 000,000,036 | ---- | M] () -- C:\Users\Owner\AppData\Local\housecall.guid.cache
[2010/11/27 09:48:22 | 000,002,975 | ---- | M] () -- C:\Users\Owner\Desktop\HiJackThis.lnk
[2010/11/27 09:44:36 | 000,536,064 | ---- | M] (Igor Pavlov) -- C:\Users\Owner\AppData\Local\7za.exe
[2010/11/27 09:44:36 | 000,286,720 | ---- | M] (SteelWerX) -- C:\Users\Owner\AppData\Local\swreg.exe
[2010/11/27 09:44:36 | 000,163,840 | ---- | M] (Helge Klein) -- C:\Users\Owner\AppData\Local\setacl.exe
[2010/11/27 09:44:09 | 001,440,008 | ---- | M] (Trend Micro Incorporated) -- C:\Users\Owner\Desktop\TwinFix.exe
[2010/11/27 09:40:08 | 001,912,872 | ---- | M] (Trend Micro Inc.) -- C:\Users\Owner\Desktop\HousecallLauncher.exe
[2010/11/27 09:38:51 | 001,074,232 | ---- | M] () -- C:\Users\Owner\Desktop\RootkitBuster_2.80.1077.zip
[2010/11/26 18:30:18 | 000,001,819 | ---- | M] () -- C:\Users\Public\Desktop\SUPERAntiSpyware Free Edition.lnk
[2010/11/26 18:27:22 | 009,852,776 | ---- | M] (SUPERAntiSpyware.com) -- C:\Users\Owner\Desktop\SUPERAntiSpyware.exe
[2010/11/26 18:20:05 | 000,080,384 | ---- | M] () -- C:\Users\Owner\Desktop\MBRCheck.exe
[2010/11/26 14:05:54 | 000,296,448 | ---- | M] () -- C:\Users\Owner\Desktop\d7n23qb2.exe
[2010/11/26 13:09:59 | 000,001,020 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2010/11/26 13:08:26 | 006,153,352 | ---- | M] (Malwarebytes Corporation ) -- C:\Users\Owner\Desktop\mbam-setup-1.46.exe
[2010/11/26 12:44:31 | 002,391,997 | ---- | M] () -- C:\Users\Owner\Documents\Aprils%20receipts[1].docm
[2010/11/26 10:31:17 | 000,720,488 | ---- | M] () -- C:\windows\SysNative\PerfStringBackup.INI
[2010/11/26 10:31:17 | 000,619,502 | ---- | M] () -- C:\windows\SysNative\perfh009.dat
[2010/11/26 10:31:17 | 000,105,646 | ---- | M] () -- C:\windows\SysNative\perfc009.dat
[2010/11/26 01:41:55 | 000,002,030 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Reader X.lnk
[2010/11/26 01:35:15 | 000,001,028 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2010/11/25 20:03:00 | 000,000,856 | ---- | M] () -- C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-636232035-4194440676-1943748027-1000Core.job
[2010/11/23 20:16:30 | 000,000,016 | ---- | M] () -- C:\windows\tpass
[2010/11/20 20:17:23 | 000,002,515 | ---- | M] () -- C:\Users\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Apple Safari.lnk
[2010/11/20 20:17:23 | 000,002,491 | ---- | M] () -- C:\Users\Public\Desktop\Safari.lnk
[2010/11/18 17:53:06 | 000,133,120 | ---- | M] (Trend Micro Incorporated) -- C:\windows\SysWow64\GetVBInfo.ocx
[2010/11/13 22:38:44 | 000,000,629 | ---- | M] () -- C:\windows\SysNative\mapisvc.inf
[2010/11/13 22:38:05 | 000,001,794 | ---- | M] () -- C:\Users\Public\Desktop\iTunes.lnk
[2010/11/13 08:32:55 | 000,001,148 | ---- | M] () -- C:\Users\Public\Desktop\Switch Sound File Converter.lnk
[2010/11/07 14:04:21 | 000,002,409 | ---- | M] () -- C:\Users\Owner\Desktop\Google Chrome.lnk
[2010/11/05 14:49:54 | 000,002,515 | ---- | M] () -- C:\Users\Public\Desktop\Skype.lnk
[2010/10/28 14:51:12 | 000,251,475 | ---- | M] () -- C:\Users\Owner\Documents\Army IG.mht
========== Files Created - No Company Name ==========
[2010/11/27 11:09:05 | 603,298,293 | ---- | C] () -- C:\windows\MEMORY.DMP
[2010/11/27 10:11:26 | 000,000,126 | ---- | C] () -- C:\Malwarebackup.zip
[2010/11/27 09:49:30 | 000,000,036 | ---- | C] () -- C:\Users\Owner\AppData\Local\housecall.guid.cache
[2010/11/27 09:48:22 | 000,002,975 | ---- | C] () -- C:\Users\Owner\Desktop\HiJackThis.lnk
[2010/11/27 09:38:46 | 001,074,232 | ---- | C] () -- C:\Users\Owner\Desktop\RootkitBuster_2.80.1077.zip
[2010/11/26 18:30:18 | 000,001,819 | ---- | C] () -- C:\Users\Public\Desktop\SUPERAntiSpyware Free Edition.lnk
[2010/11/26 18:20:04 | 000,080,384 | ---- | C] () -- C:\Users\Owner\Desktop\MBRCheck.exe
[2010/11/26 14:05:50 | 000,296,448 | ---- | C] () -- C:\Users\Owner\Desktop\d7n23qb2.exe
[2010/11/26 13:09:59 | 000,001,020 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2010/11/26 12:44:31 | 002,391,997 | ---- | C] () -- C:\Users\Owner\Documents\Aprils%20receipts[1].docm
[2010/11/26 01:41:55 | 000,002,030 | ---- | C] () -- C:\Users\Public\Desktop\Adobe Reader X.lnk
[2010/11/23 20:11:57 | 000,000,016 | ---- | C] () -- C:\windows\tpass
[2010/11/16 11:30:10 | 000,001,028 | ---- | C] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2010/11/13 22:38:05 | 000,001,794 | ---- | C] () -- C:\Users\Public\Desktop\iTunes.lnk
[2010/11/13 08:32:55 | 000,001,148 | ---- | C] () -- C:\Users\Public\Desktop\Switch Sound File Converter.lnk
[2010/11/05 14:49:54 | 000,002,515 | ---- | C] () -- C:\Users\Public\Desktop\Skype.lnk
[2010/10/28 14:51:10 | 000,251,475 | ---- | C] () -- C:\Users\Owner\Documents\Army IG.mht
[2010/09/16 07:25:28 | 000,000,258 | RHS- | C] () -- C:\ProgramData\ntuser.pol
[2010/06/06 08:37:53 | 000,032,784 | ---- | C] () -- C:\ProgramData\less fast fast.w1hd17
[2010/06/06 08:16:03 | 000,282,640 | ---- | C] () -- C:\ProgramData\less fast fast.b5fspgb
[2010/06/06 07:54:12 | 000,225,296 | ---- | C] () -- C:\ProgramData\less fast fast.7ed4d
[2010/06/06 07:32:22 | 000,368,656 | ---- | C] () -- C:\ProgramData\less fast fast.g4t19h
[2010/06/06 07:10:31 | 000,364,560 | ---- | C] () -- C:\ProgramData\less fast fast.gbdsnnu
[2010/06/06 06:48:40 | 000,213,008 | ---- | C] () -- C:\ProgramData\less fast fast.a22cya
[2010/06/06 06:26:49 | 000,139,280 | ---- | C] () -- C:\ProgramData\less fast fast.akg1py4
[2010/06/06 06:04:59 | 000,348,176 | ---- | C] () -- C:\ProgramData\less fast fast.ci1m5q7
[2010/06/06 05:43:08 | 000,098,320 | ---- | C] () -- C:\ProgramData\less fast fast.xjxu2
[2010/06/06 05:21:18 | 000,331,792 | ---- | C] () -- C:\ProgramData\less fast fast.s99d4al
[2010/06/06 04:59:27 | 000,180,240 | ---- | C] () -- C:\ProgramData\less fast fast.4n1yhr5
[2010/06/06 04:37:37 | 000,393,232 | ---- | C] () -- C:\ProgramData\less fast fast.rqit4
[2010/06/06 04:15:47 | 000,405,520 | ---- | C] () -- C:\ProgramData\less fast fast.53qz32
[2010/06/06 03:53:56 | 000,229,392 | ---- | C] () -- C:\ProgramData\less fast fast.wiek1vq
[2010/06/06 03:32:06 | 000,069,648 | ---- | C] () -- C:\ProgramData\less fast fast.uikbx
[2010/06/06 03:10:15 | 000,045,072 | ---- | C] () -- C:\ProgramData\less fast fast.qa514tp
[2010/06/06 02:48:25 | 000,176,144 | ---- | C] () -- C:\ProgramData\less fast fast.g4hsu
[2010/06/06 02:26:34 | 000,151,568 | ---- | C] () -- C:\ProgramData\less fast fast.5clgw2l
[2010/06/06 02:04:44 | 000,024,592 | ---- | C] () -- C:\ProgramData\less fast fast.ir5o2js
[2010/06/06 01:42:53 | 000,028,688 | ---- | C] () -- C:\ProgramData\less fast fast.kkxjq
[2010/06/06 01:21:03 | 000,102,416 | ---- | C] () -- C:\ProgramData\less fast fast.uy1zgw
[2010/06/06 00:59:13 | 000,122,896 | ---- | C] () -- C:\ProgramData\less fast fast.8dggph
[2010/06/06 00:37:22 | 000,151,568 | ---- | C] () -- C:\ProgramData\less fast fast.ya5ipf
[2010/06/06 00:15:32 | 000,335,888 | ---- | C] () -- C:\ProgramData\less fast fast.mfl5v
[2010/06/05 23:53:41 | 000,344,080 | ---- | C] () -- C:\ProgramData\less fast fast.ezhvf
[2010/06/05 23:31:50 | 000,176,144 | ---- | C] () -- C:\ProgramData\less fast fast.ah0k1tk
[2010/06/05 23:10:00 | 000,303,120 | ---- | C] () -- C:\ProgramData\less fast fast.kx8xmk
[2010/06/05 22:48:09 | 000,020,496 | ---- | C] () -- C:\ProgramData\less fast fast.ehc0hyc
[2010/06/05 22:26:15 | 000,045,072 | ---- | C] () -- C:\ProgramData\less fast fast.mokko
[2010/06/05 22:04:24 | 000,110,608 | ---- | C] () -- C:\ProgramData\less fast fast.jqwc6z
[2010/06/05 21:42:34 | 000,090,128 | ---- | C] () -- C:\ProgramData\less fast fast.bskldwa
[2010/06/05 21:20:43 | 000,262,160 | ---- | C] () -- C:\ProgramData\less fast fast.eae2w36
[2010/06/05 20:58:52 | 000,135,184 | ---- | C] () -- C:\ProgramData\less fast fast.q48q09a
[2010/06/05 20:36:57 | 000,389,136 | ---- | C] () -- C:\ProgramData\less fast fast.tjthcnt
[2010/06/05 20:15:03 | 000,016,400 | ---- | C] () -- C:\ProgramData\less fast fast.7fe3c1
[2010/06/05 19:53:11 | 000,393,232 | ---- | C] () -- C:\ProgramData\less fast fast.ueaxp
[2010/06/05 19:31:18 | 000,299,024 | ---- | C] () -- C:\ProgramData\less fast fast.eeoxer
[2010/06/05 19:09:27 | 000,090,128 | ---- | C] () -- C:\ProgramData\less fast fast.r8hspj
[2010/06/05 18:47:37 | 000,176,144 | ---- | C] () -- C:\ProgramData\less fast fast.mhwq3
[2010/06/05 18:25:46 | 000,385,040 | ---- | C] () -- C:\ProgramData\less fast fast.99glszn
[2010/06/05 18:03:55 | 000,262,160 | ---- | C] () -- C:\ProgramData\less fast fast.pw0hqz
[2010/06/05 17:42:05 | 000,028,688 | ---- | C] () -- C:\ProgramData\less fast fast.k8knv2n
[2010/06/05 17:20:14 | 000,299,024 | ---- | C] () -- C:\ProgramData\less fast fast.suaqa4
[2010/06/05 16:58:23 | 000,376,848 | ---- | C] () -- C:\ProgramData\less fast fast.8i7m4h
[2010/06/05 16:36:32 | 000,163,856 | ---- | C] () -- C:\ProgramData\less fast fast.gkmbdx
[2010/06/05 16:14:42 | 000,081,936 | ---- | C] () -- C:\ProgramData\less fast fast.acfnv
[2010/06/05 15:52:51 | 000,114,704 | ---- | C] () -- C:\ProgramData\less fast fast.1vh3hr
[2010/06/05 15:31:00 | 000,294,928 | ---- | C] () -- C:\ProgramData\less fast fast.qbv9b
[2010/06/05 15:09:10 | 000,229,392 | ---- | C] () -- C:\ProgramData\less fast fast.14dh6q
[2010/06/05 14:47:18 | 000,053,264 | ---- | C] () -- C:\ProgramData\less fast fast.1s50wua
[2010/06/05 14:25:27 | 000,274,448 | ---- | C] () -- C:\ProgramData\less fast fast.6cqml9
[2010/06/05 14:03:37 | 000,217,104 | ---- | C] () -- C:\ProgramData\less fast fast.jw35r
[2010/06/05 13:41:46 | 000,192,528 | ---- | C] () -- C:\ProgramData\less fast fast.1c6pp
[2010/06/05 13:19:56 | 000,110,608 | ---- | C] () -- C:\ProgramData\less fast fast.uvrpfrz
[2010/06/05 12:58:05 | 000,278,544 | ---- | C] () -- C:\ProgramData\less fast fast.3tri7
[2010/06/05 12:36:15 | 000,282,640 | ---- | C] () -- C:\ProgramData\less fast fast.4ccj3kb
[2010/06/05 12:14:24 | 000,401,424 | ---- | C] () -- C:\ProgramData\less fast fast.7khw5
[2010/06/05 11:52:33 | 000,053,264 | ---- | C] () -- C:\ProgramData\less fast fast.5lsbdr
[2010/06/05 11:30:42 | 000,065,552 | ---- | C] () -- C:\ProgramData\less fast fast.2qjnz95
[2010/06/05 11:08:52 | 000,102,416 | ---- | C] () -- C:\ProgramData\less fast fast.n6mae3
[2010/06/05 10:47:01 | 000,262,160 | ---- | C] () -- C:\ProgramData\less fast fast.qq9r0cj
[2010/06/05 10:25:11 | 000,274,448 | ---- | C] () -- C:\ProgramData\less fast fast.gbwg9q
[2010/06/05 10:03:20 | 000,045,072 | ---- | C] () -- C:\ProgramData\less fast fast.ldgr6
[2010/06/05 09:41:29 | 000,057,360 | ---- | C] () -- C:\ProgramData\less fast fast.nsi4ia7
[2010/06/05 09:19:39 | 000,036,880 | ---- | C] () -- C:\ProgramData\less fast fast.i3igrqd
[2010/06/05 08:57:48 | 000,245,776 | ---- | C] () -- C:\ProgramData\less fast fast.x76sxd
[2010/06/05 08:35:57 | 000,307,216 | ---- | C] () -- C:\ProgramData\less fast fast.238d7
[2010/06/05 08:14:06 | 000,364,560 | ---- | C] () -- C:\ProgramData\less fast fast.9lf7qhh
[2010/06/05 07:52:16 | 000,012,304 | ---- | C] () -- C:\ProgramData\less fast fast.pgh41ui
[2010/06/05 07:30:25 | 000,036,880 | ---- | C] () -- C:\ProgramData\less fast fast.67u9g
[2010/06/05 07:08:35 | 000,385,040 | ---- | C] () -- C:\ProgramData\less fast fast.etzvo
[2010/06/05 06:46:44 | 000,299,024 | ---- | C] () -- C:\ProgramData\less fast fast.6a0mgm
[2010/06/05 06:24:54 | 000,344,080 | ---- | C] () -- C:\ProgramData\less fast fast.tknm7
[2010/06/05 06:03:03 | 000,237,584 | ---- | C] () -- C:\ProgramData\less fast fast.33bxxio
[2010/06/05 05:41:13 | 000,299,024 | ---- | C] () -- C:\ProgramData\less fast fast.ly9ki1
[2010/06/05 05:19:22 | 000,393,232 | ---- | C] () -- C:\ProgramData\less fast fast.yu7tz
[2010/06/05 04:57:31 | 000,008,208 | ---- | C] () -- C:\ProgramData\less fast fast.4qjzy
[2010/06/05 04:35:41 | 000,258,064 | ---- | C] () -- C:\ProgramData\less fast fast.gs4hpu
[2010/06/05 04:13:51 | 000,020,496 | ---- | C] () -- C:\ProgramData\less fast fast.9rfgzl
[2010/06/05 03:52:00 | 000,106,512 | ---- | C] () -- C:\ProgramData\less fast fast.6l1shau
[2010/06/05 03:30:10 | 000,016,400 | ---- | C] () -- C:\ProgramData\less fast fast.tx3l4t5
[2010/06/05 03:08:19 | 000,213,008 | ---- | C] () -- C:\ProgramData\less fast fast.roijo15
[2010/06/05 02:46:29 | 000,221,200 | ---- | C] () -- C:\ProgramData\less fast fast.y5275p0
[2010/06/05 02:24:38 | 000,028,688 | ---- | C] () -- C:\ProgramData\less fast fast.cvre9ie
[2010/06/05 02:02:48 | 000,266,256 | ---- | C] () -- C:\ProgramData\less fast fast.kaqh145
[2010/06/05 01:40:57 | 000,213,008 | ---- | C] () -- C:\ProgramData\less fast fast.n2khgz7
[2010/06/05 01:19:07 | 000,368,656 | ---- | C] () -- C:\ProgramData\less fast fast.lic4fnl
[2010/06/05 00:57:16 | 000,376,848 | ---- | C] () -- C:\ProgramData\less fast fast.sb6kajb
[2010/06/05 00:35:26 | 000,270,352 | ---- | C] () -- C:\ProgramData\less fast fast.aup7u6
[2010/06/05 00:13:36 | 000,389,136 | ---- | C] () -- C:\ProgramData\less fast fast.ehq67bv
[2010/06/04 23:51:45 | 000,139,280 | ---- | C] () -- C:\ProgramData\less fast fast.5i1p7us
[2010/06/04 23:29:55 | 000,077,840 | ---- | C] () -- C:\ProgramData\less fast fast.dgg9qy
[2010/06/04 23:08:04 | 000,004,112 | ---- | C] () -- C:\ProgramData\less fast fast.9w0vpy
[2010/06/04 22:46:14 | 000,397,328 | ---- | C] () -- C:\ProgramData\less fast fast.dr95yb8
[2010/06/04 22:24:23 | 000,241,680 | ---- | C] () -- C:\ProgramData\less fast fast.fqqdvs
[2010/06/04 22:02:32 | 000,073,744 | ---- | C] () -- C:\ProgramData\less fast fast.ig97zu3
[2010/06/04 21:40:42 | 000,004,112 | ---- | C] () -- C:\ProgramData\less fast fast.uzhg7
[2010/06/04 21:18:51 | 000,266,256 | ---- | C] () -- C:\ProgramData\less fast fast.cbucaog
[2010/06/04 20:57:01 | 000,286,736 | ---- | C] () -- C:\ProgramData\less fast fast.7twd7c
[2010/06/04 20:35:10 | 000,237,584 | ---- | C] () -- C:\ProgramData\less fast fast.31c1tq
[2010/06/04 20:13:19 | 000,315,408 | ---- | C] () -- C:\ProgramData\less fast fast.2orr84
[2010/06/04 19:51:29 | 000,274,448 | ---- | C] () -- C:\ProgramData\less fast fast.g852e0
[2010/06/04 19:29:38 | 000,344,080 | ---- | C] () -- C:\ProgramData\less fast fast.dcp9i
[2010/06/04 19:07:46 | 000,135,184 | ---- | C] () -- C:\ProgramData\less fast fast.c0o19
[2010/06/04 18:45:55 | 000,221,200 | ---- | C] () -- C:\ProgramData\less fast fast.03aqohw
[2010/06/04 18:24:05 | 000,356,368 | ---- | C] () -- C:\ProgramData\less fast fast.1j3su8
[2010/06/04 18:02:14 | 000,290,832 | ---- | C] () -- C:\ProgramData\less fast fast.ljmq9
[2010/06/04 17:40:24 | 000,335,888 | ---- | C] () -- C:\ProgramData\less fast fast.f0euxy
[2010/06/04 17:18:34 | 000,213,008 | ---- | C] () -- C:\ProgramData\less fast fast.1xtzd6
[2010/06/04 16:56:43 | 000,069,648 | ---- | C] () -- C:\ProgramData\less fast fast.g19af89
[2010/06/04 16:34:53 | 000,114,704 | ---- | C] () -- C:\ProgramData\less fast fast.j9tz14