<<Continued>>
FF:
64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_6_602_180.dll File not found
FF:
64bit: - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.17.2: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF:
64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.17.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF:
64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF:
64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_180.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre7\bin\new_plugin\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~4\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.69: C:\Program Files (x86)\Magic Video Converter\codec\real\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.69: C:\Program Files (x86)\Magic Video Converter\codec\real\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.1: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.3: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\{22C7F6C6-8D67-4534-92B5-529A0EC09405}: C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1505\6.6.1088\firefoxextension\
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\
fe_9.0@nokia.com: C:\Program Files (x86)\Nokia\Nokia Suite\Connectors\Bookmarks Connector\FirefoxExtension_9.0 [2012/04/11 04:28:32 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 16.0.2\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012/11/05 02:23:21 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 16.0.2\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\
te_9.0@nokia.com: C:\Program Files (x86)\Nokia\Nokia Suite\Connectors\Thunderbird Connector\ThunderbirdExtension_9.0 [2012/04/11 04:28:58 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\
wcapturex@deskperience.com: C:\Program Files (x86)\WordWeb\WCaptureMoz [2012/05/15 11:27:57 | 000,000,000 | ---D | M]
[2012/05/10 18:50:54 | 000,000,000 | ---D | M] (No name found) -- C:\Users\JavaBoy\AppData\Roaming\Mozilla\Extensions
[2012/04/27 04:19:11 | 000,000,000 | ---D | M] (No name found) -- C:\Users\JavaBoy\AppData\Roaming\Mozilla\Firefox\extensions
[2012/04/27 04:19:11 | 000,000,000 | ---D | M] (BitTorrentBar2 Community Toolbar) -- C:\Users\JavaBoy\AppData\Roaming\Mozilla\Firefox\extensions\{656461ef-40f6-4115-9ff1-bced9812ccbb}
[2012/04/27 04:12:43 | 000,000,000 | ---D | M] (uTorrentControl2 Community Toolbar) -- C:\Users\JavaBoy\AppData\Roaming\Mozilla\Firefox\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}
[2012/04/27 04:26:26 | 000,000,000 | ---D | M] (No name found) -- C:\Users\JavaBoy\AppData\Roaming\Mozilla\Firefox\Profiles\extensions
[2013/04/13 10:46:22 | 000,000,000 | ---D | M] (No name found) -- C:\Users\JavaBoy\AppData\Roaming\Mozilla\Firefox\Profiles\zupg45je.default\extensions
[2013/03/27 21:09:26 | 000,000,000 | ---D | M] (Afrikaans spell checker) -- C:\Users\JavaBoy\AppData\Roaming\Mozilla\Firefox\Profiles\zupg45je.default\extensions\
af-ZA@dictionaries.addons.mozilla.org
[2013/03/27 20:43:06 | 000,000,000 | ---D | M] (German Dictionary (de-DE), classical spelling standards) -- C:\Users\JavaBoy\AppData\Roaming\Mozilla\Firefox\Profiles\zupg45je.default\extensions\
alterechtschreibung@googlemail.com
[2013/03/27 20:43:44 | 000,000,000 | ---D | M] (Wörterbuch Deutsch (de-DE), Hunspell-unterstützt) -- C:\Users\JavaBoy\AppData\Roaming\Mozilla\Firefox\Profiles\zupg45je.default\extensions\
de_DE@dicts.j3e.de
[2012/05/18 08:59:06 | 000,000,000 | ---D | M] (Разпознаване на устройство Logitech) -- C:\Users\JavaBoy\AppData\Roaming\Mozilla\Firefox\Profiles\zupg45je.default\extensions\
DeviceDetection@logitech.com
[2013/02/05 23:51:37 | 000,000,000 | ---D | M] (LavaFox V2) -- C:\Users\JavaBoy\AppData\Roaming\Mozilla\Firefox\Profiles\zupg45je.default\extensions\
info@djzig.com
[2012/10/31 18:32:00 | 000,000,000 | ---D | M] ("NetVideoHunter") -- C:\Users\JavaBoy\AppData\Roaming\Mozilla\Firefox\Profiles\zupg45je.default\extensions\
netvideohunter@netvideohunter.com
[2013/04/12 00:54:05 | 000,000,000 | ---D | M] ("FVD Speed Dial with Full Online Sync") -- C:\Users\JavaBoy\AppData\Roaming\Mozilla\Firefox\Profiles\zupg45je.default\extensions\
pavel.sherbakov@gmail.com
[2013/03/27 21:09:26 | 000,000,000 | ---D | M] (Zulu (South Africa) spell checker) -- C:\Users\JavaBoy\AppData\Roaming\Mozilla\Firefox\Profiles\zupg45je.default\extensions\
zu-ZA@dictionaries.addons.mozilla.org
[2013/03/08 17:37:30 | 000,275,665 | ---- | M] () (No name found) -- C:\Users\JavaBoy\AppData\Roaming\Mozilla\Firefox\Profiles\zupg45je.default\extensions\
artur.dubovoy@gmail.com.xpi
[2012/11/30 09:58:07 | 002,307,149 | ---- | M] () (No name found) -- C:\Users\JavaBoy\AppData\Roaming\Mozilla\Firefox\Profiles\zupg45je.default\extensions\
nasanightlaunch@example.com.xpi
[2013/04/13 10:46:22 | 000,329,174 | ---- | M] () (No name found) -- C:\Users\JavaBoy\AppData\Roaming\Mozilla\Firefox\Profiles\zupg45je.default\extensions\
personas@christopher.beard.xpi
[2013/03/01 19:49:06 | 000,269,007 | ---- | M] () (No name found) -- C:\Users\JavaBoy\AppData\Roaming\Mozilla\Firefox\Profiles\zupg45je.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi
[2012/05/10 18:50:36 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions
[2012/05/15 11:27:57 | 000,000,000 | ---D | M] (WordWeb one-click lookup) -- C:\PROGRAM FILES (X86)\WORDWEB\WCAPTUREMOZ
[2012/11/05 02:23:21 | 000,261,600 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2012/11/05 02:23:08 | 000,002,465 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
[2012/11/05 02:23:08 | 000,002,058 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\twitter.xml
O1 HOSTS File: ([2013/04/12 08:58:35 | 000,000,027 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2:
64bit: - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2:
64bit: - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (CIESpeechBHO Class) - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O4:
64bit: - HKLM..\Run: [MSC] c:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-490547936-2984844144-489047830-1000..\Run: [DAEMON Tools Lite] C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLinkedConnections = 1
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-490547936-2984844144-489047830-1000\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-490547936-2984844144-489047830-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8:
64bit: - Extra context menu item: Search the Web - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\menuext.html File not found
O8 - Extra context menu item: Search the Web - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\menuext.html File not found
O9 - Extra 'Tools' menuitem : Send by Bluetooth to - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
O13 - gopher Prefix: missing
O16:
64bit: - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93}
http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Reg Error: Value error.)
O16:
64bit: - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16:
64bit: - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}
http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 10.17.2)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93}
http://java.sun.com/update/1.7.0/jinstall-1_7_0_02-windows-i586.cab (Java Plug-in 10.2.0)
O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-0017-0000-0002-ABCDEFFEDCBA}
http://java.sun.com/update/1.7.0/jinstall-1_7_0_02-windows-i586.cab (Java Plug-in 1.7.0_02)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}
http://java.sun.com/update/1.7.0/jinstall-1_7_0_02-windows-i586.cab (Java Plug-in 1.7.0_02)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.0.0.2
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{0DA1B791-C7D9-49DD-830F-3E90D32A94FA}: DhcpNameServer = 10.0.0.2
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{5BFBA68E-3AC0-4932-919E-59FB6EABB4B1}: DhcpNameServer = 192.168.1.1 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{5D397CD5-8A07-4B20-9190-EA1CA9C16B6D}: DhcpNameServer = 192.168.1.1 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{7683BEDF-52CB-41B4-9B57-AA3F050182E0}: DhcpNameServer = 192.168.1.1 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{DDD62DFA-8FE8-497B-8F6D-0400B4C67765}: DhcpNameServer = 192.168.1.1 192.168.1.1
O18:
64bit: - Protocol\Handler\livecall - No CLSID value found
O18:
64bit: - Protocol\Handler\ms-help - No CLSID value found
O18:
64bit: - Protocol\Handler\msnim - No CLSID value found
O18:
64bit: - Protocol\Handler\osf - No CLSID value found
O18:
64bit: - Protocol\Handler\skype4com - No CLSID value found
O18:
64bit: - Protocol\Handler\tmpx - No CLSID value found
O18:
64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18:
64bit: - Protocol\Handler\wlpg - No CLSID value found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\tmpx - No CLSID value found
O20:
64bit: - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:
64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
O21:
64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35:
64bit: - HKLM\..comfile [open] -- "%1" %*
O35:
64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:
64bit: - HKLM\...com [@ = ComFile] -- "%1" %*
O37:
64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
========== Files/Folders - Created Within 30 Days ==========
[2013/04/13 10:59:22 | 000,551,587 | ---- | C] (Oleg N. Scherbakov) -- C:\Users\JavaBoy\Desktop\JRT.exe
[2013/04/13 10:56:08 | 000,000,000 | ---D | C] -- C:\JRT
[2013/04/13 10:36:39 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\JavaBoy\Desktop\OTL.exe
[2013/04/12 09:05:26 | 000,000,000 | ---D | C] -- C:\Windows\temp
[2013/04/12 08:58:41 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN
[2013/04/12 08:46:46 | 000,518,144 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe
[2013/04/12 08:46:46 | 000,406,528 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe
[2013/04/12 08:46:46 | 000,060,416 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe
[2013/04/12 08:46:40 | 000,000,000 | ---D | C] -- C:\ComboFix
[2013/04/12 08:46:37 | 000,000,000 | ---D | C] -- C:\Qoobox
[2013/04/12 08:46:07 | 000,000,000 | ---D | C] -- C:\Windows\erdnt
[2013/04/12 08:25:46 | 005,052,052 | R--- | C] (Swearware) -- C:\Users\JavaBoy\Desktop\ComboFix.exe
[2013/04/12 01:06:41 | 000,000,000 | ---D | C] -- C:\Users\JavaBoy\Desktop\mbar-1.01.0.1022
[2013/04/11 07:32:41 | 000,000,000 | ---D | C] -- C:\Users\JavaBoy\Desktop\RK_Quarantine
[2013/04/10 19:28:30 | 000,000,000 | ---D | C] -- C:\Users\JavaBoy\AppData\Roaming\Malwarebytes
[2013/04/10 19:28:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2013/04/10 19:28:07 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2013/04/10 19:28:05 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2013/04/10 00:03:08 | 000,000,000 | R--D | C] -- C:\Users\JavaBoy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
[2013/04/09 06:25:40 | 000,000,000 | ---D | C] -- C:\Users\JavaBoy\AppData\Roaming\AVG2013
[2013/04/09 06:24:39 | 000,000,000 | ---D | C] -- C:\Users\JavaBoy\AppData\Roaming\TuneUp Software
[2013/04/09 06:24:15 | 000,000,000 | ---D | C] -- C:\ProgramData\AVG2013
[2013/04/09 06:03:31 | 000,000,000 | -H-D | C] -- C:\ProgramData\Common Files
[2013/04/09 06:03:30 | 000,000,000 | ---D | C] -- C:\Users\JavaBoy\AppData\Local\MFAData
[2013/04/09 06:03:30 | 000,000,000 | ---D | C] -- C:\ProgramData\MFAData
[2013/04/09 06:03:30 | 000,000,000 | ---D | C] -- C:\Users\JavaBoy\AppData\Local\Avg2013
[2013/04/08 19:59:49 | 000,000,000 | ---D | C] -- C:\ProgramData\ErrorEND64
[2013/04/08 19:59:43 | 000,000,000 | ---D | C] -- C:\Program Files\ErrorEND
[2013/04/08 02:33:31 | 000,000,000 | ---D | C] -- C:\Users\JavaBoy\AppData\Roaming\Toxic Biohazard
[2013/04/08 02:14:20 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Ffmpeg For Audacity
[2013/04/05 20:24:28 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Lame For Audacity
[2013/04/05 19:41:30 | 000,000,000 | ---D | C] -- C:\Users\JavaBoy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fruity Loops Plugin Pack Release 2
[2013/04/05 19:41:23 | 000,000,000 | ---D | C] -- C:\Audio
[2013/04/04 15:14:06 | 000,000,000 | ---D | C] -- C:\Users\JavaBoy\Documents\FBX Converter 2013.2
[2013/04/04 15:13:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk
[2013/04/04 15:13:04 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Autodesk
[2013/04/02 13:06:46 | 000,000,000 | ---D | C] -- C:\Program Files\MySQL
[2013/04/02 13:03:14 | 000,000,000 | ---D | C] -- C:\Users\JavaBoy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MySQL
[2013/04/02 13:03:09 | 000,000,000 | ---D | C] -- C:\ProgramData\MySQL
[2013/04/01 19:48:35 | 000,000,000 | ---D | C] -- C:\Users\JavaBoy\Documents\rcos2
[2013/04/01 11:32:08 | 000,000,000 | ---D | C] -- C:\rcos2
[2013/03/28 19:23:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MySQL
[2013/03/26 20:26:22 | 000,000,000 | --SD | C] -- C:\Users\JavaBoy\Documents\My Data Sources
[2013/03/26 14:04:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
[2013/03/25 18:45:41 | 000,000,000 | R--D | C] -- C:\Users\JavaBoy\Documents\Scanned Documents
[2013/03/25 18:45:40 | 000,000,000 | ---D | C] -- C:\Users\JavaBoy\Documents\Fax
[2013/03/14 20:37:25 | 000,000,000 | ---D | C] -- C:\Users\JavaBoy\AppData\Local\DOSBox
[2013/03/14 20:36:11 | 000,000,000 | ---D | C] -- C:\Users\JavaBoy\dosbox-c
[2013/03/14 20:32:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DOSBox-0.74
[2013/03/14 20:32:08 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\DOSBox-0.74
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2013/04/13 11:11:07 | 000,020,720 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013/04/13 11:11:07 | 000,020,720 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013/04/13 11:03:52 | 000,000,896 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2013/04/13 11:03:21 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013/04/13 11:03:14 | 3206,877,184 | -HS- | M] () -- C:\hiberfil.sys
[2013/04/13 11:01:00 | 000,000,830 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2013/04/13 11:00:38 | 000,551,587 | ---- | M] (Oleg N. Scherbakov) -- C:\Users\JavaBoy\Desktop\JRT.exe
[2013/04/13 10:42:30 | 639,170,797 | ---- | M] () -- C:\Windows\MEMORY.DMP
[2013/04/13 10:36:57 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\JavaBoy\Desktop\OTL.exe
[2013/04/13 10:34:15 | 000,613,083 | ---- | M] () -- C:\Users\JavaBoy\Desktop\adwcleaner.exe
[2013/04/13 10:32:53 | 001,092,448 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2013/04/13 10:32:53 | 000,886,058 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2013/04/13 10:32:53 | 000,209,790 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2013/04/13 10:30:42 | 000,000,900 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2013/04/12 08:58:35 | 000,000,027 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\hosts
[2013/04/12 08:26:33 | 005,052,052 | R--- | M] (Swearware) -- C:\Users\JavaBoy\Desktop\ComboFix.exe
[2013/04/12 02:42:36 | 000,051,971 | ---- | M] () -- C:\test.xml
[2013/04/12 01:02:44 | 012,894,739 | ---- | M] () -- C:\Users\JavaBoy\Desktop\mbar-1.01.0.1022.zip
[2013/04/10 01:01:41 | 005,048,392 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2013/04/05 18:42:00 | 024,680,698 | ---- | M] () -- C:\Users\JavaBoy\Documents\Magic in the kitchen.mp3
[2013/04/04 19:32:29 | 029,918,772 | ---- | M] () -- C:\Users\JavaBoy\Documents\fatigue.mp3
[2013/04/03 22:22:23 | 000,000,184 | ---- | M] () -- C:\Windows\AutoKMS.ini
[2013/04/02 16:01:28 | 000,044,686 | ---- | M] () -- C:\Users\JavaBoy\migration_script.sql
[2013/04/02 13:08:05 | 001,100,842 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2013/04/02 13:07:26 | 000,000,239 | ---- | M] () -- C:\Windows\ODBCINST.INI
[2013/03/28 15:57:50 | 000,002,890 | ---- | M] () -- C:\Users\JavaBoy\Documents\Area fifty-One Project.sql
[2013/03/27 10:41:05 | 015,886,275 | ---- | M] () -- C:\Users\JavaBoy\Documents\12 Chariot Of Fire (Contains Hidden Track 'Find My Way') () (2).mp3
[2013/03/27 10:41:00 | 015,886,275 | ---- | M] () -- C:\Users\JavaBoy\Documents\12 Chariot Of Fire (Contains Hidden Track 'Find My Way') ().mp3
[2013/03/27 10:34:29 | 000,033,143 | -HS- | M] () -- C:\Users\JavaBoy\Documents\Folder.jpg
[2013/03/27 10:34:29 | 000,033,143 | -HS- | M] () -- C:\Users\JavaBoy\Documents\AlbumArt_{1D9AA942-1B19-4A14-920A-DE12A06DE6AB}_Large.jpg
[2013/03/27 10:34:29 | 000,007,412 | -HS- | M] () -- C:\Users\JavaBoy\Documents\AlbumArtSmall.jpg
[2013/03/27 10:34:29 | 000,007,412 | -HS- | M] () -- C:\Users\JavaBoy\Documents\AlbumArt_{1D9AA942-1B19-4A14-920A-DE12A06DE6AB}_Small.jpg
[2013/03/26 20:25:11 | 000,020,480 | ---- | M] () -- C:\Users\JavaBoy\Documents\VisioTest.sdf
[2013/03/26 09:38:59 | 001,484,490 | ---- | M] () -- C:\Users\JavaBoy\Documents\Dawn Assgn 2.zip
[2013/03/25 19:02:23 | 000,000,028 | ---- | M] () -- C:\Windows\ODBC.INI
[2013/03/25 18:58:04 | 001,699,649 | ---- | M] () -- C:\Users\JavaBoy\Documents\Dawn Assgn 2.pdf
[2013/03/25 16:12:15 | 465,747,968 | ---- | M] () -- C:\Users\JavaBoy\Desktop\VisioProfessional_x64_en-us.img
[2013/03/23 01:19:03 | 081,537,776 | ---- | M] () -- C:\Users\JavaBoy\Documents\Happy Bday Sbosh.mp3
[2013/03/23 00:38:18 | 000,008,710 | ---- | M] () -- C:\Users\JavaBoy\Documents\Sbosh2.amr
[2013/03/23 00:38:08 | 000,014,854 | ---- | M] () -- C:\Users\JavaBoy\Documents\Sbosh.amr
[2013/03/17 14:48:41 | 050,993,946 | ---- | M] () -- C:\Users\JavaBoy\Documents\sunday wish .mp3
[2013/03/17 04:51:11 | 000,001,908 | ---- | M] () -- C:\Windows\diagwrn.xml
[2013/03/17 04:51:11 | 000,001,908 | ---- | M] () -- C:\Windows\diagerr.xml
[2013/03/17 04:49:25 | 095,392,496 | ---- | M] () -- C:\Users\JavaBoy\Documents\sunday Morning before the sun rises .mp3
[2013/03/15 07:38:39 | 000,071,954 | ---- | M] () -- C:\Users\JavaBoy\Documents\Vodacom_bursary_form.pdf
[2013/03/14 20:32:10 | 000,001,878 | ---- | M] () -- C:\Users\Public\Desktop\DOSBox 0.74.lnk
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
========== Files Created - No Company Name ==========
[2013/04/13 10:34:05 | 000,613,083 | ---- | C] () -- C:\Users\JavaBoy\Desktop\adwcleaner.exe
[2013/04/12 08:46:46 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe
[2013/04/12 08:46:46 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe
[2013/04/12 08:46:46 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe
[2013/04/12 08:46:46 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe
[2013/04/12 08:46:46 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe
[2013/04/12 00:59:23 | 012,894,739 | ---- | C] () -- C:\Users\JavaBoy\Desktop\mbar-1.01.0.1022.zip
[2013/04/08 19:16:29 | 639,170,797 | ---- | C] () -- C:\Windows\MEMORY.DMP
[2013/04/05 18:24:47 | 024,680,698 | ---- | C] () -- C:\Users\JavaBoy\Documents\Magic in the kitchen.mp3
[2013/04/03 19:10:29 | 029,918,772 | ---- | C] () -- C:\Users\JavaBoy\Documents\fatigue.mp3
[2013/04/02 16:01:28 | 000,044,686 | ---- | C] () -- C:\Users\JavaBoy\migration_script.sql
[2013/04/02 13:07:26 | 000,000,239 | ---- | C] () -- C:\Windows\ODBCINST.INI
[2013/03/28 15:57:48 | 000,002,890 | ---- | C] () -- C:\Users\JavaBoy\Documents\Area fifty-One Project.sql
[2013/03/27 10:34:29 | 000,033,143 | -HS- | C] () -- C:\Users\JavaBoy\Documents\AlbumArt_{1D9AA942-1B19-4A14-920A-DE12A06DE6AB}_Large.jpg
[2013/03/27 10:34:29 | 000,007,412 | -HS- | C] () -- C:\Users\JavaBoy\Documents\AlbumArt_{1D9AA942-1B19-4A14-920A-DE12A06DE6AB}_Small.jpg
[2013/03/26 20:25:09 | 000,020,480 | ---- | C] () -- C:\Users\JavaBoy\Documents\VisioTest.sdf
[2013/03/26 09:38:59 | 001,484,490 | ---- | C] () -- C:\Users\JavaBoy\Documents\Dawn Assgn 2.zip
[2013/03/25 18:58:02 | 001,699,649 | ---- | C] () -- C:\Users\JavaBoy\Documents\Dawn Assgn 2.pdf
[2013/03/25 15:50:24 | 465,747,968 | ---- | C] () -- C:\Users\JavaBoy\Desktop\VisioProfessional_x64_en-us.img
[2013/03/23 00:43:43 | 000,014,854 | ---- | C] () -- C:\Users\JavaBoy\Documents\Sbosh.amr
[2013/03/23 00:43:12 | 000,008,710 | ---- | C] () -- C:\Users\JavaBoy\Documents\Sbosh2.amr
[2013/03/23 00:22:24 | 081,537,776 | ---- | C] () -- C:\Users\JavaBoy\Documents\Happy Bday Sbosh.mp3
[2013/03/17 14:13:14 | 050,993,946 | ---- | C] () -- C:\Users\JavaBoy\Documents\sunday wish .mp3
[2013/03/17 03:34:58 | 095,392,496 | ---- | C] () -- C:\Users\JavaBoy\Documents\sunday Morning before the sun rises .mp3
[2013/03/17 03:30:34 | 000,071,954 | ---- | C] () -- C:\Users\JavaBoy\Documents\Vodacom_bursary_form.pdf
[2013/03/14 20:32:10 | 000,001,878 | ---- | C] () -- C:\Users\Public\Desktop\DOSBox 0.74.lnk
[2013/03/10 16:20:47 | 000,000,368 | ---- | C] () -- C:\Users\JavaBoy\AppData\Roaming\Digital Clock_Settings.ini
[2012/11/07 06:58:53 | 000,010,752 | ---- | C] () -- C:\Users\JavaBoy\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012/09/12 09:56:18 | 000,000,028 | ---- | C] () -- C:\Windows\ODBC.INI
[2012/07/12 17:03:05 | 000,000,624 | ---- | C] () -- C:\Users\JavaBoy\AppData\Roaming\.backup.dm
[2012/05/15 11:27:57 | 002,213,120 | ---- | C] () -- C:\Windows\wweb32.dll
[2012/05/10 18:10:03 | 000,075,776 | ---- | C] () -- C:\Windows\cadkasdeinst01e.exe
[2012/05/08 10:15:28 | 000,000,145 | ---- | C] () -- C:\Users\JavaBoy\.appletviewer
[2012/05/05 16:41:25 | 000,000,184 | ---- | C] () -- C:\Windows\AutoKMS.ini
[2012/04/11 22:35:56 | 000,007,619 | ---- | C] () -- C:\Users\JavaBoy\AppData\Local\Resmon.ResmonCfg
[2012/04/11 06:10:45 | 000,000,243 | ---- | C] () -- C:\ProgramData\MusicStation.xml
[2012/04/10 16:48:17 | 000,178,176 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll
[2012/04/10 16:48:17 | 000,000,038 | ---- | C] () -- C:\Windows\avisplitter.ini
[2012/04/10 16:48:13 | 000,881,664 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll
[2012/04/10 16:48:13 | 000,205,824 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll
[2012/04/10 16:48:11 | 000,084,480 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll
[2011/04/18 15:39:56 | 000,226,364 | R--- | C] () -- C:\ProgramData\DeviceManager.xml.rc4
========== ZeroAccess Check ==========
[2009/07/14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2012/06/09 07:43:10 | 014,172,672 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2012/06/09 06:41:00 | 012,873,728 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009/07/14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/21 05:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009/07/14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
========== LOP Check ==========
[2011/02/25 11:40:47 | 000,000,000 | ---D | M] -- C:\Users\Guest\AppData\Roaming\Nokia
[2011/02/25 11:39:46 | 000,000,000 | ---D | M] -- C:\Users\Guest\AppData\Roaming\PC Suite
[2013/03/16 16:50:40 | 000,000,000 | ---D | M] -- C:\Users\JavaBoy\AppData\Roaming\.oit
[2013/04/12 03:00:59 | 000,000,000 | ---D | M] -- C:\Users\JavaBoy\AppData\Roaming\Audacity
[2012/10/04 09:56:41 | 000,000,000 | ---D | M] -- C:\Users\JavaBoy\AppData\Roaming\AusLogics
[2013/04/09 06:25:40 | 000,000,000 | ---D | M] -- C:\Users\JavaBoy\AppData\Roaming\AVG2013
[2012/07/24 13:15:24 | 000,000,000 | ---D | M] -- C:\Users\JavaBoy\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2013/04/08 17:32:09 | 000,000,000 | ---D | M] -- C:\Users\JavaBoy\AppData\Roaming\DAEMON Tools Lite
[2013/03/10 05:05:10 | 000,000,000 | ---D | M] -- C:\Users\JavaBoy\AppData\Roaming\Deckadance19
[2013/03/10 15:27:17 | 000,000,000 | ---D | M] -- C:\Users\JavaBoy\AppData\Roaming\desksware
[2012/08/17 08:12:13 | 000,000,000 | ---D | M] -- C:\Users\JavaBoy\AppData\Roaming\Edraw Max
[2013/03/10 03:52:42 | 000,000,000 | ---D | M] -- C:\Users\JavaBoy\AppData\Roaming\Image-Line
[2012/04/28 19:03:01 | 000,000,000 | ---D | M] -- C:\Users\JavaBoy\AppData\Roaming\Leadertech
[2013/02/14 11:13:16 | 000,000,000 | ---D | M] -- C:\Users\JavaBoy\AppData\Roaming\MySQL
[2012/04/27 04:55:27 | 000,000,000 | ---D | M] -- C:\Users\JavaBoy\AppData\Roaming\Nokia
[2012/10/11 20:20:22 | 000,000,000 | ---D | M] -- C:\Users\JavaBoy\AppData\Roaming\PC Suite
[2012/08/17 05:59:10 | 000,000,000 | ---D | M] -- C:\Users\JavaBoy\AppData\Roaming\Rovio
[2012/07/25 21:55:59 | 000,000,000 | ---D | M] -- C:\Users\JavaBoy\AppData\Roaming\SanDisk
[2012/06/20 08:11:12 | 000,000,000 | ---D | M] -- C:\Users\JavaBoy\AppData\Roaming\SanDisk SecureAccess
[2012/05/20 11:09:02 | 000,000,000 | ---D | M] -- C:\Users\JavaBoy\AppData\Roaming\SmartDraw
[2013/03/23 11:24:47 | 000,000,000 | ---D | M] -- C:\Users\JavaBoy\AppData\Roaming\SongManager
[2012/07/21 22:53:21 | 000,000,000 | ---D | M] -- C:\Users\JavaBoy\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
[2013/04/08 02:33:31 | 000,000,000 | ---D | M] -- C:\Users\JavaBoy\AppData\Roaming\Toxic Biohazard
[2013/04/09 06:24:39 | 000,000,000 | ---D | M] -- C:\Users\JavaBoy\AppData\Roaming\TuneUp Software
[2013/03/10 10:18:42 | 000,000,000 | ---D | M] -- C:\Users\JavaBoy\AppData\Roaming\uTorrent
[2012/05/28 08:15:47 | 000,000,000 | ---D | M] -- C:\Users\JavaBoy\AppData\Roaming\Vodafone
[2012/05/20 15:00:21 | 000,000,000 | ---D | M] -- C:\Users\JavaBoy\AppData\Roaming\Windows Live Writer
[2012/06/13 18:01:15 | 000,000,000 | ---D | M] -- C:\Users\JavaBoy\AppData\Roaming\Wondershare
[2011/02/24 01:22:44 | 000,000,000 | ---D | M] -- C:\Users\Lindiwe Zimu.MZimu-PC\AppData\Roaming\Nokia
[2011/02/25 12:09:24 | 000,000,000 | ---D | M] -- C:\Users\Lindiwe Zimu.MZimu-PC\AppData\Roaming\OpenOffice.org
[2011/02/24 01:23:20 | 000,000,000 | ---D | M] -- C:\Users\Lindiwe Zimu.MZimu-PC\AppData\Roaming\PC Suite
[2010/12/30 11:49:28 | 000,000,000 | ---D | M] -- C:\Users\Lindiwe Zimu.MZimu-PC\AppData\Roaming\SoftGrid Client
[2011/04/12 20:42:28 | 000,000,000 | ---D | M] -- C:\Users\M.Zimu\AppData\Roaming\AVG9
[2010/12/27 18:31:52 | 000,000,000 | ---D | M] -- C:\Users\M.Zimu\AppData\Roaming\inkscape
[2011/03/02 20:16:57 | 000,000,000 | ---D | M] -- C:\Users\M.Zimu\AppData\Roaming\IObit
[2011/03/28 22:35:35 | 000,000,000 | ---D | M] -- C:\Users\M.Zimu\AppData\Roaming\Nokia
[2011/03/27 17:11:10 | 000,000,000 | ---D | M] -- C:\Users\M.Zimu\AppData\Roaming\Nokia Ovi Suite
[2011/02/20 08:16:47 | 000,000,000 | ---D | M] -- C:\Users\M.Zimu\AppData\Roaming\NSeries
[2011/02/20 08:38:00 | 000,000,000 | ---D | M] -- C:\Users\M.Zimu\AppData\Roaming\OpenOffice.org
[2011/03/27 17:11:18 | 000,000,000 | ---D | M] -- C:\Users\M.Zimu\AppData\Roaming\PC Suite
[2010/09/26 16:39:49 | 000,000,000 | ---D | M] -- C:\Users\M.Zimu\AppData\Roaming\PlayFirst
[2011/01/07 22:27:06 | 000,000,000 | ---D | M] -- C:\Users\M.Zimu\AppData\Roaming\Pro Cycling Manager 2008 - Demo
[2011/04/18 07:37:51 | 000,000,000 | ---D | M] -- C:\Users\M.Zimu\AppData\Roaming\SoftGrid Client
[2010/11/16 06:36:05 | 000,000,000 | ---D | M] -- C:\Users\M.Zimu\AppData\Roaming\TP
[2010/12/27 19:18:16 | 000,000,000 | ---D | M] -- C:\Users\M.Zimu\AppData\Roaming\Virtual Mechanics
[2011/03/04 21:23:38 | 000,000,000 | ---D | M] -- C:\Users\M.Zimu\AppData\Roaming\Windows Live Writer
========== Purity Check ==========
< End of report >