Jump to content

Huge Infection


Jay1000
 Share

Recommended Posts

I just recently downloaded HijackThis after a scan with Malwarebytes (in Safe Mode), which detected a grand total of 1,839 infections. My computer seems to be working fine now in Normal Mode compared to the terrible conditions it suffered from earlier, yet I am still worried that this might be a problem just waiting to happen again. Right now the only thing in this post is the HijackThis scan but I still have the Malwarebytes scan log if needed.

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 6:10:18 PM, on 11/9/2011

Platform: Windows Vista SP2 (WinNT 6.00.1906)

MSIE: Internet Explorer v8.00 (8.00.6001.19154)

Boot mode: Normal

Running processes:

C:\Program Files (x86)\Mozilla Firefox\firefox.exe

C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe

C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=91&bd=Pavilion&pf=cnnb

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=91&bd=Pavilion&pf=cnnb

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=91&bd=Pavilion&pf=cnnb

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=91&bd=Pavilion&pf=cnnb

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

O1 - Hosts: ::1 localhost

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll

O2 - BHO: Increase performance and video formats for your HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll

O2 - BHO: StartNow Toolbar Helper - {6E13D095-45C3-4271-9475-F3B48227DD9F} - C:\Program Files (x86)\StartNow Toolbar\Toolbar32.dll

O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll

O3 - Toolbar: Microsoft Live Search Toolbar - {1E61ED7C-7CB8-49d6-B9E9-AB4C880C8414} - c:\Program Files (x86)\MSN\Toolbar\3.0.0541.0\msneshellx.dll

O3 - Toolbar: Ask Toolbar - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files (x86)\AskBarDis\bar\bin\askBar.dll

O3 - Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)

O3 - Toolbar: StartNow Toolbar - {5911488E-9D1E-40ec-8CBB-06B231CC153F} - C:\Program Files (x86)\StartNow Toolbar\Toolbar32.dll

O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')

O4 - Startup: OneNote Table Of Contents.onetoc2

O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000

O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll

O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL

O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll

O23 - Service: Andrea ST Filters Service (AESTFilters) - Unknown owner - C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_58be29c0\AESTSr64.exe (file missing)

O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)

O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

O23 - Service: ASP.NET State Service (aspnet_state) - Unknown owner - C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe (file missing)

O23 - Service: Com4QLBEx - Hewlett-Packard Development Company, L.P. - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe

O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe (file missing)

O23 - Service: @C:\Program Files (x86)\DigitalPersona\Bin\DpHostW.exe,-128 (DpHost) - DigitalPersona, Inc. - C:\Program Files (x86)\DigitalPersona\Bin\DpHostW.exe

O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe

O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe

O23 - Service: HP Service (hpsrv) - Unknown owner - C:\Windows\system32\Hpservice.exe (file missing)

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe

O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe

O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe

O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)

O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\Windows\system32\GameMon.des.exe (file missing)

O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)

O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe

O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: Recovery Service for Windows - Unknown owner - C:\Program Files (x86)\SMINST\BLService.exe

O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe

O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)

O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe (file missing)

O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)

O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)

O23 - Service: Audio Service (STacSV) - Unknown owner - C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_58be29c0\STacSV64.exe (file missing)

O23 - Service: Steam Client Service - Unknown owner - C:\Program Files (x86)\Common Files\Steam\SteamService.exe (file missing)

O23 - Service: TV Background Capture Service (TVBCS) (TVCapSvc) - Unknown owner - C:\Program Files (x86)\Hewlett-Packard\Media\TV\Kernel\TV\TVCapSvc.exe

O23 - Service: TV Task Scheduler (TVTS) (TVSched) - Unknown owner - C:\Program Files (x86)\Hewlett-Packard\Media\TV\Kernel\TV\TVSched.exe

O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)

O23 - Service: Updater Service for StartNow Toolbar - Unknown owner - C:\Program Files (x86)\StartNow Toolbar\ToolbarUpdaterService.exe

O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)

O23 - Service: Validity Fingerprint Service (vfsFPService) - Validity Sensors, Inc. - C:\Windows\system32\vfsFPService.exe

O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)

O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--

End of file - 9634 bytes

Link to post
Share on other sites

Hi and Welcome!

Go to the Control Panel - > Programs & Features and uninstall:

Ask Toolbar

StartNow Toolbar

If you use Firefox please also refer to these directions:

http://about.startnow.com/uninstall/

Please post the MBAM scan log with the "1839 infections" you referred to. You can attach it if it is too long but only attach that log and copy/paste all others.

Then Update MBAM, and run a scan in Normal Mode. Copy/paste that new MBAM log into your next reply.

Download DDS and save it to your desktop from HERE or HERE.

dds_scr.gif

Disable any script blocking programs you may have installed (such as Norton script blocking), and then double-click dds.scr to run the tool.

  • When done, DDS will open two (2) logs:
    • DDS.txt
    • Attach.txt

    [*]Save both reports to your desktop

    [*]Please copy and paste dds.txt into your next reply and hold on to attach.txt for now.

Link to post
Share on other sites

Thanks for responding! I've unistalled those two toolbars prior to my second scan in Malwarebytes in Normal Mode. The first Malwarebytes scan log used the latest version of the database since I updated it today once I came across the problem. The first scan was a quick scan that I did during Safe Mode and the second scan is a scan of my C and D drives during Normal Mode. I'm not sure why there is such a huge difference between those scan logs. Anyways, I have put both the Malwarebyte scan logs as attachments in order to separate them from the DDS report, which was too big to put in one post so I have divided it. Also, I don't have any script blocking programs. Is that a bad thing?

.

DDS (Ver_2011-08-26.01) - NTFSAMD64

Internet Explorer: 8.0.6001.19154 BrowserJavaVersion: 1.6.0_24

Run by -User- at 20:38:12 on 2011-11-09

Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.1.1033.18.3038.1433 [GMT -5:00]

.

AV: AntiVir Desktop *Disabled/Updated* {090F9C29-64CE-6C6F-379C-5901B49A85B7}

SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

SP: AntiVir Desktop *Disabled/Updated* {B26E7DCD-42F4-63E1-0D2C-6273CF1DCF0A}

.

============== Running Processes ===============

.

C:\Windows\system32\wininit.exe

C:\Windows\system32\lsm.exe

C:\Windows\system32\svchost.exe -k DcomLaunch

C:\Windows\system32\nvvsvc.exe

C:\Windows\system32\svchost.exe -k rpcss

C:\Windows\System32\svchost.exe -k secsvcs

C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted

C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted

C:\Windows\system32\svchost.exe -k netsvcs

C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_58be29c0\STacSV64.exe

C:\Windows\system32\svchost.exe -k GPSvcGroup

C:\Windows\system32\SLsvc.exe

C:\Windows\system32\svchost.exe -k LocalService

C:\Windows\system32\Hpservice.exe

C:\Windows\system32\vfsFPService.exe

C:\Windows\system32\svchost.exe -k NetworkService

C:\Windows\system32\nvvsvc.exe

C:\Windows\System32\spoolsv.exe

C:\Program Files (x86)\DigitalPersona\Bin\DpHostW.exe

C:\Windows\system32\taskeng.exe

C:\Windows\system32\Dwm.exe

C:\Windows\Explorer.EXE

C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork

C:\Windows\system32\taskeng.exe

C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_58be29c0\AESTSr64.exe

C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe

C:\Windows\SysWOW64\PnkBstrA.exe

C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted

C:\Program Files (x86)\SMINST\BLService.exe

C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe

C:\Windows\system32\svchost.exe -k imgsvc

C:\Program Files (x86)\Hewlett-Packard\Media\TV\Kernel\TV\TVCapSvc.exe

C:\Program Files (x86)\Hewlett-Packard\Media\TV\Kernel\TV\TVSched.exe

C:\Windows\System32\svchost.exe -k WerSvcGroup

C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

C:\Windows\system32\SearchIndexer.exe

C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation

c:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe

C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe

C:\Windows\system32\wuauclt.exe

C:\Windows\system32\SearchProtocolHost.exe

C:\Program Files (x86)\Mozilla Firefox\firefox.exe

C:\Windows\system32\NOTEPAD.EXE

C:\Windows\system32\SearchFilterHost.exe

C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe

C:\Windows\SysWOW64\cmd.exe

C:\Windows\SysWOW64\cscript.exe

C:\Windows\system32\wbem\wmiprvse.exe

.

============== Pseudo HJT Report ===============

.

uStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=91&bd=Pavilion&pf=cnnb

uDefault_Page_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=91&bd=Pavilion&pf=cnnb

mStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=91&bd=Pavilion&pf=cnnb

mDefault_Page_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=91&bd=Pavilion&pf=cnnb

uInternet Settings,ProxyOverride = <local>

BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

BHO: RealPlayer Download and Record Plugin for Internet Explorer: {3049c3e9-b461-4bc5-8870-4c09146192ca} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll

BHO: DivX Plus Web Player HTML5 <video>: {326e768d-4182-46fd-9c16-1449a49795f4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll

BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

BHO: Java Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll

TB: Microsoft Live Search Toolbar: {1e61ed7c-7cb8-49d6-b9e9-ab4c880c8414} - c:\Program Files (x86)\MSN\Toolbar\3.0.0541.0\msneshellx.dll

TB: {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No File

TB: {604BC32A-9680-40D1-9AC6-E06B23A1BA4C} - No File

TB: {472734EA-242A-422B-ADF8-83D1E48CC825} - No File

mRun: [<NO NAME>]

StartupFolder: C:\Users\Jia Lin Hong\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote Table Of Contents.onetoc2

mPolicies-explorer: NoActiveDesktop = 1 (0x1)

mPolicies-explorer: BindDirectlyToPropertySetStorage = 0 (0x0)

mPolicies-system: EnableLUA = 0 (0x0)

mPolicies-system: EnableUIADesktopToggle = 0 (0x0)

IE: E&xport to Microsoft Excel - C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000

IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll

IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL

DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab

DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab

DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab

TCP: DhcpNameServer = 167.206.254.1 167.206.254.2

TCP: Interfaces\{5C401F4A-C1C6-495A-B26B-E02841156AB4} : DhcpNameServer = 167.206.254.1 167.206.254.2

TCP: Interfaces\{F847764D-96A3-47C6-8E92-A0B734077863} : DhcpNameServer = 192.168.1.1 192.168.1.1

LSA: Notification Packages = scecli DPPWDFLT

mASetup: {10880D85-AAD9-4558-ABDC-2AB1552D831F} - "C:\Program Files (x86)\Common Files\LightScribe\LSRunOnce.exe"

BHO-X64: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

BHO-X64: AcroIEHelperStub - No File

BHO-X64: RealPlayer Download and Record Plugin for Internet Explorer: {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll

BHO-X64: DivX Plus Web Player HTML5 <video>: {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll

BHO-X64: Increase performance and video formats for your HTML5 <video> - No File

BHO-X64: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

BHO-X64: Java Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll

TB-X64: Microsoft Live Search Toolbar: {1E61ED7C-7CB8-49d6-B9E9-AB4C880C8414} - c:\Program Files (x86)\MSN\Toolbar\3.0.0541.0\msneshellx.dll

TB-X64: {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No File

TB-X64: {604BC32A-9680-40D1-9AC6-E06B23A1BA4C} - No File

TB-X64: {472734EA-242A-422B-ADF8-83D1E48CC825} - No File

mRun-x64: [(Default)]

.

================= FIREFOX ===================

.

FF - ProfilePath - C:\Users\Jia Lin Hong\AppData\Roaming\Mozilla\Firefox\Profiles\xt3ebp7e.default\

FF - prefs.js: browser.search.defaulturl - Bing

FF - prefs.js: browser.search.selectedEngine - Google

FF - prefs.js: browser.startup.homepage - hxxp://www.msn.com/?pc=Z192&install_date=20111008

FF - prefs.js: keyword.URL - hxxp://www.bing.com/search?pc=Z192&form=ZGAADF&install_date=20111008&q=

FF - prefs.js: network.proxy.type - 4

FF - component: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext\components\nprpffbrowserrecordext.dll

FF - component: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext\components\nprpffbrowserrecordlegacyext.dll

FF - component: C:\Users\Jia Lin Hong\AppData\Roaming\Mozilla\Firefox\Profiles\xt3ebp7e.default\extensions\{81BF1D23-5F17-408D-AC6B-BD6DF7CAF670}\components\imtcp_xpcom.dll

FF - component: C:\Users\Jia Lin Hong\AppData\Roaming\Mozilla\Firefox\Profiles\xt3ebp7e.default\extensions\optout@dubfire.net\lib\WINNT\ff3\AbineComponent.dll

FF - plugin: C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll

FF - plugin: C:\Program Files (x86)\BYOND\bin\npbyond.dll

FF - plugin: C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll

FF - plugin: C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll

FF - plugin: C:\Program Files (x86)\Google\Update\1.3.21.53\npGoogleUpdate3.dll

FF - plugin: C:\Program Files (x86)\Google\Update\1.3.21.57\npGoogleUpdate3.dll

FF - plugin: C:\Program Files (x86)\Google\Update\1.3.21.65\npGoogleUpdate3.dll

FF - plugin: C:\Program Files (x86)\Google\Update\1.3.21.69\npGoogleUpdate3.dll

FF - plugin: C:\Program Files (x86)\Google\Update\1.3.21.79\npGoogleUpdate3.dll

FF - plugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll

FF - plugin: c:\Program Files (x86)\Microsoft Silverlight\4.0.60831.0\npctrlui.dll

FF - plugin: C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll

FF - plugin: C:\Program Files (x86)\Mozilla Firefox\plugins\npdeployJava1.dll

FF - plugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll

FF - plugin: C:\ProgramData\NexonUS\NGM\npNxGameUS.dll

FF - plugin: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll

FF - plugin: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll

FF - plugin: C:\Users\Jia Lin Hong\AppData\Local\Google\Update\1.3.21.79\npGoogleUpdate3.dll

FF - plugin: C:\Users\Jia Lin Hong\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll

FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll

.

============= SERVICES / DRIVERS ===============

.

R2 {55662437-DA8C-40c0-AADA-2C816A897A49};Power Control [2009/05/16 02:56:05];C:\Program Files (x86)\Hewlett-Packard\Media\DVD\000.fcl [2008-11-28 146928]

R2 AESTFilters;Andrea ST Filters Service;C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_58be29c0\AESTSr64.exe --> C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_58be29c0\AESTSr64.exe [?]

R2 AntiVirSchedulerService;Avira AntiVir Scheduler;C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [2009-12-21 108289]

R2 AntiVirService;Avira AntiVir Guard;C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [2009-12-21 185089]

R2 avgntflt;avgntflt;C:\Windows\system32\DRIVERS\avgntflt.sys --> C:\Windows\system32\DRIVERS\avgntflt.sys [?]

R2 FontCache;Windows Font Cache Service;C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation [2008-1-20 21504]

R2 hpsrv;HP Service;C:\Windows\system32\Hpservice.exe --> C:\Windows\system32\Hpservice.exe [?]

R2 MBAMService;MBAMService;C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2010-2-18 366152]

R2 Recovery Service for Windows;Recovery Service for Windows;C:\Program Files (x86)\SMINST\BLService.exe [2009-2-6 365952]

R2 TVCapSvc;TV Background Capture Service (TVBCS);C:\Program Files (x86)\Hewlett-Packard\Media\TV\Kernel\TV\TVCapSvc.exe [2009-2-9 296320]

R2 TVSched;TV Task Scheduler (TVTS);C:\Program Files (x86)\Hewlett-Packard\Media\TV\Kernel\TV\TVSched.exe [2009-2-9 116096]

R2 vfsFPService;Validity Fingerprint Service;C:\Windows\System32\vfsFPService.exe [2008-11-18 599344]

R3 enecir;ENE CIR Receiver;C:\Windows\system32\DRIVERS\enecir.sys --> C:\Windows\system32\DRIVERS\enecir.sys [?]

R3 JMCR;JMCR;C:\Windows\system32\DRIVERS\jmcr.sys --> C:\Windows\system32\DRIVERS\jmcr.sys [?]

R3 MBAMProtector;MBAMProtector;\??\C:\Windows\system32\drivers\mbam.sys --> C:\Windows\system32\drivers\mbam.sys [?]

R3 NETw5v64;Intel® Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit;C:\Windows\system32\DRIVERS\NETw5v64.sys --> C:\Windows\system32\DRIVERS\NETw5v64.sys [?]

R3 NVHDA;Service for NVIDIA High Definition Audio Driver;C:\Windows\system32\drivers\nvhda64v.sys --> C:\Windows\system32\drivers\nvhda64v.sys [?]

S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]

S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]

S2 gupdate;Google Update Service (gupdate);C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-1-14 135664]

S3 Com4QLBEx;Com4QLBEx;C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [2009-2-6 193840]

S3 gupdatem;Google Update Service (gupdatem);C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-1-14 135664]

S3 NETw3v64;Intel® PRO/Wireless 3945ABG Adapter Driver for Windows Vista 64 Bit;C:\Windows\system32\DRIVERS\NETw3v64.sys --> C:\Windows\system32\DRIVERS\NETw3v64.sys [?]

S3 npggsvc;nProtect GameGuard Service;C:\Windows\system32\GameMon.des -service --> C:\Windows\system32\GameMon.des -service [?]

S3 PerfHost;Performance Counter DLL Host;C:\Windows\SysWOW64\perfhost.exe [2008-1-20 19968]

S3 TKFsAc;TKFsAc;C:\Windows\System32\TKFsAc2k64.sys [2009-11-28 107040]

S3 TKFsAv;TKFsAv;C:\Windows\System32\TKFsAv2k64.sys [2009-11-28 44064]

S3 TKFsFt;TKFsFt;\??\C:\Windows\system32\TKFsFt2k64.sys --> C:\Windows\system32\TKFsFt2k64.sys [?]

S3 TKRgAc;TKRgAc;C:\Windows\System32\TKRgAc2k64.sys [2009-11-28 60448]

S3 TKRgFt;TKRgFt;C:\Windows\System32\TKRgFtXp64.sys [2009-11-28 35872]

S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-3-18 1020768]

S3 yukonx64;NDIS6.0 Miniport Driver for Marvell Yukon Ethernet Controller;C:\Windows\system32\DRIVERS\yk60x64.sys --> C:\Windows\system32\DRIVERS\yk60x64.sys [?]

S4 clr_optimization_v2.0.50727_64;Microsoft .NET Framework NGEN v2.0.50727_X64;C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe [2009-12-3 89920]

.

=============== File Associations ===============

.

JSEFile=C:\Windows\SysWOW64\WScript.exe "%1" %*

.

=============== Created Last 30 ================

.

2011-11-09 23:06:37 388096 ----a-r- C:\Users\Jia Lin Hong\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe

2011-11-09 23:06:36 -------- d-----w- C:\Program Files (x86)\Trend Micro

2011-11-09 21:39:29 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\zodqtF9O29

2011-11-09 21:39:19 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\wdXli59Vu6Rlc5h

2011-11-09 21:39:16 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\wsLqkrbHEgVyFJX

2011-11-09 21:38:56 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\zmJNnm6ElN0yAyx

2011-11-09 21:38:54 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\D7bztY99LQp3ov

2011-11-09 21:38:42 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\Uk14dfgXHdZ

2011-11-09 21:38:42 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\e6kD8zsU6cyCIZK

2011-11-09 21:38:42 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\Ck14dfgXHdZ

2011-11-09 21:38:40 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\qpz8NWQrDH89hUW

2011-11-09 21:38:38 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\UCiEBpwH0q9

2011-11-09 21:38:30 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\ExsVoRNaOsU2f

2011-11-09 21:38:29 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\BiebXDZyQCi8vRN

2011-11-09 21:38:28 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\wcJzsrnZyQkHC

2011-11-09 21:38:14 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\a79gRZEQm3

2011-11-09 21:37:52 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\z2UiLBse2WX1h3C

2011-11-09 21:35:58 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\vpo2bcnJTI

2011-11-09 21:35:28 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\QpgIDJXNbdTBu3Q

2011-11-09 21:35:27 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\gHZBnEV159r

2011-11-09 21:35:25 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\oE19uKPaCbCb7VD

2011-11-09 21:35:09 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\rrVw9hLaDxwEpAI

2011-11-09 21:35:08 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\rVXZE5iVgaSU71X

2011-11-09 21:35:05 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\IJmSNeYZLEJJ6Dx

2011-11-09 21:35:01 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\psG2yVYTE

2011-11-09 21:34:36 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\EiafhlxiGJYByvp

2011-11-09 21:34:27 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\Ezr0p6mHEXVly

2011-11-09 21:34:21 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\arOxPzlpGG4mp3H

2011-11-09 21:34:20 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\XVtP0Au2b34LBAv

2011-11-09 21:34:17 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\nfw0FdRqIrtPx0A

2011-11-09 21:34:16 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\VEVPy1bQs7EKEzN

2011-11-09 21:34:16 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\LWht2QKgCklBPyN

2011-11-09 21:34:16 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\eHTl1G6RqYUeBzr

2011-11-09 21:34:13 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\bD5dRXt3dwNuFaH

2011-11-09 21:34:00 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\A3guWV3sE

2011-11-09 21:33:52 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\eo6hIPndXri

2011-11-09 21:33:51 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\vo6hIPndXr

2011-11-09 21:33:41 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\S7hBSmRzo6kca8B

2011-11-09 21:33:39 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\OF6TziswNF9r1

2011-11-09 21:33:35 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\a7kPo6ZOoE

2011-11-09 21:33:18 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\BtUZ6apiutBIBBI

2011-11-09 21:33:14 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\VKLZVtxbs

2011-11-09 21:33:12 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\jQ2NqWGuIZEH2yz

2011-11-09 21:33:11 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\QqQ2NqWGuIZEH2

2011-11-09 21:33:11 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\emsR9g8LEK8zubF

2011-11-09 21:32:59 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\oq4NZmOTa0q

2011-11-09 21:32:59 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\CT1ZDYoToqFqbZi

2011-11-09 21:32:58 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\ody8A8ARuR0

2011-11-09 21:32:58 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\hB6N7cC50YGxq6u

2011-11-09 21:32:56 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\hXv7VDElHOWzdNd

2011-11-09 21:22:57 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\CgYeyv3dEZwlyv

2011-11-09 21:21:59 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\g5ZBbsZwlPu

2011-11-09 21:21:58 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\SQgr1HZzis

2011-11-09 21:21:58 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\fFPTQcXsvr

2011-11-09 21:21:57 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\eQgr1HZzisL

2011-11-09 21:21:51 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\uOgFPg41CfDO

2011-11-09 21:21:46 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\ufTCetPOzrle

2011-11-09 21:21:03 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\gZl0Q8XexuGLU3

2011-11-09 21:20:59 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\J1FHEXiHZ

2011-11-09 21:20:59 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\HYUlzFWYeOuo59l

2011-11-09 21:20:18 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\RfBGXSJeiJqysRq

2011-11-09 21:20:10 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\uWwVBN0Au1uxOYs

2011-11-09 21:18:38 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\E8KWsW7JQddWWsJ

2011-11-09 21:18:34 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\GHG1tleCYjYwXTj

2011-11-09 21:18:29 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\DtZs1UdFutVqdQa

2011-11-09 21:18:21 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\wDJXN3RIbKC049b

2011-11-09 21:18:21 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\ADJXN3RIbKC049b

2011-11-09 21:18:19 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\XVoEeS6qyp

2011-11-09 21:18:18 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\nWC17lo80sdI4Rz

2011-11-09 21:18:18 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\n7V1WYyaglv7zbE

2011-11-09 21:18:17 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\HvdTV2WC17lo80s

2011-11-09 21:18:17 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\AaZxnEUAs

2011-11-09 21:18:16 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\cO2aRCt4j

2011-11-09 21:18:01 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\Tp5aQHa2ylTHSk7

2011-11-09 21:11:39 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\Fy6Aztw8Wn1POYT

2011-11-09 21:11:38 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\rUSl6eFZy5YiKc6

2011-11-09 21:09:17 69000 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{4A708CA4-8A96-4C06-8DCA-08A996069CC3}\offreg.dll

2011-11-09 04:24:21 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\OTTTXqqjUCekBrO

2011-11-09 04:24:03 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\NQQHH6dWWKf

2011-11-09 04:23:46 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\KhhYYXXwjU

2011-11-09 04:23:30 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\TJJJ7ffEL8gZqhC

2011-11-09 04:23:08 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\huvvSS2obF3p

2011-11-09 04:22:50 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\j99ggTXqjY

2011-11-09 04:22:34 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\B9hhTXXwjUClI

2011-11-09 04:22:15 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\R88ffRLL9hXqjC

2011-11-09 04:21:56 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\tKK88fRL9hTXjUe

2011-11-09 04:21:37 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\TWWWK77fRL9TXjY

2011-11-09 04:21:18 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\gGGG5aaQH6dW7fL

2011-11-09 04:20:58 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\tWWWK77fRL9gX

2011-11-09 04:20:38 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\cYYYCeekIVrO

2011-11-09 04:20:18 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\qyyxxA11uvSob3p

2011-11-09 04:19:59 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\AaaQHH6dWK7f

2011-11-09 04:19:39 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\UxxAA1uuvS2bFp

2011-11-09 04:19:18 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\tPPP0yycS1iD3

2011-11-09 04:18:58 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\EggTTZqhYC

2011-11-09 04:18:40 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\A444pmmH5sQJ

2011-11-09 04:18:23 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\I7ffEEL9g

2011-11-09 04:18:04 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\rVVrrlOOBtx0yS1

2011-11-09 04:17:44 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\OgggTZZqjYCkIrl

2011-11-09 04:17:29 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\pssWWK7ffE9g

2011-11-09 04:17:15 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\TggTTXqqjYCk

2011-11-09 04:17:00 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\vGGG4aaQH6

2011-11-09 04:16:45 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\TqjjYYCekIVrONx

2011-11-09 04:16:31 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\ksssWKK7fEL9TZ

2011-11-09 04:16:17 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\grrllONNtxPuc1i

2011-11-09 04:16:02 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\GqjjjYCwkIVrONx

2011-11-09 04:15:48 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\yccSS1iibDonGaH

2011-11-09 04:15:33 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\xNNNttxP0uc

2011-11-09 04:15:04 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\eWWWK77fEL9gZq

2011-11-09 04:14:47 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\wbFFF3pmG5

2011-11-09 04:14:31 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\PnFF44amH5sW7d

2011-11-09 04:14:18 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\b999hTXwjUC

2011-11-09 04:14:07 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\GwwwkUUVelOtz0y

2011-11-09 04:13:56 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\XTTZZqjjYCwIVlO

2011-11-09 04:13:44 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\KTTXXwjUUC

2011-11-09 04:13:32 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\HYYCCwwkUVrOBxP

2011-11-09 04:13:21 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\iqqjjYYCekIrzNt

2011-11-09 04:13:09 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\CIIBBtzPPNcA1v2

2011-11-09 04:12:57 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\LcccS22ibD3pG4Q

2011-11-09 04:12:48 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\TSSS1iibD3oG

2011-11-09 04:12:37 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\AkkIIBrrzOyxAuv

2011-11-09 04:12:26 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\zhYYXXwjUVelBtP

2011-11-09 04:12:15 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\uWWWJ77dEL8gZqY

2011-11-09 04:12:04 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\Y66ssWWK7fE9gZq

2011-11-09 04:11:53 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\H00uuvS22iF3pGa

2011-11-09 04:11:39 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\uLL99gTZq

2011-11-09 04:11:22 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\LQQJJ6ddEKf

2011-11-09 04:11:05 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\qDDD3ppnG4aH

2011-11-09 04:10:48 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\IggRRZ99hYXjUel

2011-11-09 04:10:27 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\upppnGG4a

2011-11-09 04:10:08 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\xnnFF4aamHsWJdE

2011-11-09 04:09:49 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\VRRRZqqhY

2011-11-09 04:09:31 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\OzPPNNyxA1uvS

2011-11-09 04:09:14 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\ESSS1iibD3on4

2011-11-09 04:08:56 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\ryyccA11ivDon4p

2011-11-09 04:08:39 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\cuuvvS2ibF3pn5Q

2011-11-09 04:08:19 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\jxAA00uvS2iF3nG

2011-11-09 04:08:02 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\HoonnF4aam5sW7E

2011-11-09 04:07:44 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\DTTXqqjUCek

2011-11-09 04:07:31 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\ZdWWKK7fR

2011-11-09 04:07:17 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\issWWK7ffL

2011-11-09 04:07:01 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\wfffRLL9hTXqUCk

2011-11-09 04:06:48 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\xGG44aaQH6sK7EL

2011-11-09 04:06:34 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\uvvvD33onFamHsW

2011-11-09 04:06:20 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\NqqhhYXwkUV

2011-11-09 04:06:06 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\AKK8ffRZ9

2011-11-09 04:05:51 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\HllOOBttz0ycAiD

2011-11-09 04:05:37 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\RJJ66dEEK8fZ9TX

2011-11-09 04:05:23 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\OwjjUUCelIBrPNx

2011-11-09 04:05:08 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\IJJ6dEKK8

2011-11-09 04:04:55 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\iKK88fRLLhTXq

2011-11-09 04:04:41 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\tCCeekIVrzONtAu

2011-11-09 04:04:28 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\JJJJ7ddEL8gZ

2011-11-09 04:04:15 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\fJJ66dEEK8

2011-11-09 04:04:01 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\Y55aaQH6dW

2011-11-09 04:03:48 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\FqqqjYYCwkIVlOt

2011-11-09 04:03:35 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\JsssQJJ7dEL8

2011-11-09 04:03:22 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\daaQQJ66d

2011-11-09 04:03:08 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\XGGG5aaQH6

2011-11-09 04:02:54 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\Z222ibbD3pnG

2011-11-09 04:02:39 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\AyyxxA0uuv2ib3n

2011-11-09 04:02:25 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\p3ppnnG4aQH6WKf

2011-11-09 04:02:11 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\UwwwkIIVrlONxPu

2011-11-09 04:01:57 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\UWWJJ7ddELgRZh

2011-11-09 04:01:42 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\SggTZZqhYCwkV

2011-11-09 04:01:28 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\l0yycAA1ivD2nFp

2011-11-09 04:01:14 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\VXXXwjjUV

2011-11-09 04:01:00 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\uzzzPNNycA1uD2b

2011-11-09 04:00:46 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\t11uuvSS2oF3pG5

2011-11-09 04:00:32 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\iTTXXqjjUCeIBzO

2011-11-09 04:00:18 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\dNNNttxA0ucSib3

2011-11-09 04:00:04 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\I222ibbF3pn5WK9

2011-11-09 03:59:50 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\cjYYYCwkIVrl

2011-11-09 03:59:36 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\C77ffEL88TZqhCk

2011-11-09 03:59:22 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\vFFF4ppmH5sQ7dK

2011-11-09 03:59:08 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\IyyccA11uvDob4p

2011-11-09 03:58:54 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\OsssQJJ6dEKfR9h

2011-11-09 03:58:41 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\mxxxA00ucS2bDpn

2011-11-09 03:58:28 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\e44aamH66sJ7fL

2011-11-09 03:58:14 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\uXXwwjUVVlIB

2011-11-09 03:58:01 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\S33ppmGG5aJ6d

2011-11-09 03:57:47 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\kkkkIBBrzONxA0v

2011-11-09 03:57:32 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\GwwwjjUCelIBzPy

2011-11-09 03:57:18 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\LxxAA0uvS2ib3p

2011-11-09 03:57:05 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\qkkkUVVrlOBtP0c

2011-11-09 03:56:54 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\P55aaQHH6dW7fL9

2011-11-09 03:56:43 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\ayyyxAA1uvS2bFp

2011-11-09 03:56:32 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\FBBBttzP0ycAiv2

2011-11-09 03:56:21 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\GbbDD3pnG4aQH

2011-11-09 03:56:09 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\oXXXqjUUCekBrON

2011-11-09 03:55:58 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\fOOBBtzzP0yA1

2011-11-09 03:55:48 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\zCCCwkkUVrlOtx0

2011-11-09 03:55:37 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\cmHHH6sWJ

2011-11-09 03:55:27 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\QXXXqjjYCekVrzN

2011-11-09 03:55:16 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\OzzzPNNyxA1vS

2011-11-09 03:55:05 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\wwwjjUVeel

2011-11-09 03:54:54 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\hTTTZqqhY

2011-11-09 03:54:44 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\m66ssWJ77fL8gZh

2011-11-09 03:54:31 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\YH55sQQJ7dEKg

2011-11-09 03:54:18 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\G888fRRL9hTqjUe

2011-11-09 03:54:06 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\vsssWJJ7dEL8RZh

2011-11-09 03:53:53 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\OeeelIIBrzPyx1u

2011-11-09 03:53:40 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\vaaamHH6sWJ7E

2011-11-09 03:53:28 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\v99hhYXXwjVelBz

2011-11-09 03:53:15 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\SddWWK88fR9hT

2011-11-09 03:53:01 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\eIIIVrrzONtx0u

2011-11-09 03:52:46 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\ATTXXqjYCekIrzN

2011-11-09 03:52:36 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\LrzzOONyxA0uS2b

2011-11-09 03:52:25 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\u1uuvvD2obF4mGs

2011-11-09 03:52:15 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\Xoonn4ppmH5QJdE

2011-11-09 03:52:06 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\t000uvvS2ibFp

2011-11-09 03:51:58 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\DkkkIVVrlONtP0c

2011-11-09 03:51:47 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\hxxAA0uvvSibFpn

2011-11-09 03:51:37 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\oF33ppmG5aQJdW8

2011-11-09 03:51:26 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\S444pmmG5sQ6dK8

2011-11-09 03:51:16 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\bDD22onFF4mH5QJ

2011-11-09 03:51:08 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\zQJJ66dEK8fR9

2011-11-09 03:50:56 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\RonnFF4amH5sJ7

2011-11-09 03:50:46 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\rvvDD3onnFamHsJ

2011-11-09 03:50:38 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\WEEKK8gRZ9hYXjV

2011-11-09 03:50:28 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\qRRZZ9hhYXwUVlI

2011-11-09 03:50:18 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\w99hhYXXwjVelBt

2011-11-09 03:50:10 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\BqqqjUUCekIBzOy

2011-11-09 03:50:02 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\JVrrllOBt

2011-11-09 03:49:54 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\zzzPPNyycAuvD

2011-11-09 03:49:46 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\wyyxxA0uuv2ib3n

2011-11-09 03:49:37 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\zjjYYCwwkI

2011-11-09 03:49:27 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\OSSS2iibD3pG4QH

2011-11-09 03:49:16 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\t222obbF3p

2011-11-09 03:49:07 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\ViiibFF3pnGaQ6d

2011-11-09 03:48:56 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\D222obbF3pmGaQ6

2011-11-09 03:48:46 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\AD22oobF4pmG5Q6

2011-11-09 03:48:36 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\TBBBtzzP0yc1iD2

2011-11-09 03:48:25 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\LRRRZqqhYXw

2011-11-09 03:48:15 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\U3oonnG4amH6WJ

2011-11-09 03:48:04 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\hrrrzOONtxA0cSi

2011-11-09 03:47:54 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\mTTTXqqjYC

2011-11-09 03:47:43 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\pxxxA11uvS2oF3m

2011-11-09 03:47:33 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\P000yycA1ivDon4

2011-11-09 03:47:22 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\vgRRZZqhYX

2011-11-09 03:47:10 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\yGG55aQQH6dK7RL

2011-11-09 03:46:58 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\fkkUUVrlOBtxPyS

2011-11-09 03:46:47 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\HxxPP0ucS1i

2011-11-09 03:46:36 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\VffRRL99gTqj

2011-11-09 03:46:26 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\CFFF3ppmG5aQ6dK

2011-11-09 03:46:16 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\e111uvvS2ob

2011-11-09 03:46:05 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\kdEEKK8gRZ9hXwU

2011-11-09 03:45:55 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\oaaamHH5sWJdE8g

2011-11-09 03:45:44 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\XOOOBttxP0yS1iD

2011-11-09 03:45:35 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\K000yccS1iv3oF4

2011-11-09 03:45:27 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\awjjUUVelI

2011-11-09 03:45:18 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\pbbbF33pnG5Q

2011-11-09 03:45:10 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\EgTTTZqjYCwkI

mbam-log-2011-11-09 (17-00-28).txt

mbam-log-2011-11-09 (23-42-13).txt

Link to post
Share on other sites

2011-11-09 03:45:01 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\XmmHH5ssWJ7ELgR

2011-11-09 03:44:53 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\NwjjUUVelIBtzNc

2011-11-09 03:44:42 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\NivvvD2onF4pm5Q

2011-11-09 03:44:31 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\WDD33ppnG4aH

2011-11-09 03:44:21 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\q999gTTXqjYCkIr

2011-11-09 03:44:12 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\wJJ77fEEL8gZqYC

2011-11-09 03:44:03 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\KnnFF4ammHsWJdL

2011-11-09 03:43:52 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\f1iibbD3onG4mHs

2011-11-09 03:43:42 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\xZZqqjYCCkIVrOt

2011-11-09 03:43:32 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\FGG55aQHHdWK7R9

2011-11-09 03:43:21 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\XIIIBrrzPNyx1uS

2011-11-09 03:43:09 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\saammH5ssW7dE8

2011-11-09 03:42:59 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\ZxPP00ucS1ibDoG

2011-11-09 03:42:49 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\ixxxA00ucS2iD3n

2011-11-09 03:42:40 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\znFF44amH5sWJ

2011-11-09 03:42:31 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\TVVVellIBtzNyc1

2011-11-09 03:42:23 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\yQQQJ66dWK8fL9T

2011-11-09 03:42:15 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\sPPP0uucS1ib3o

2011-11-09 03:42:06 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\mUVVeelOBt

2011-11-09 03:41:58 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\z99hhTXXwjUelBr

2011-11-09 03:41:50 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\I66ddWKK7fL9gXq

2011-11-09 03:41:41 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\AUVVVrlOBtxP0c1

2011-11-09 03:41:33 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\rKKK8ggRZ9hY

2011-11-09 03:41:24 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\fQQQJ66dWK

2011-11-09 03:41:16 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\gHH66sWKKfE

2011-11-09 03:41:08 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\ZOOBBtzPP0cA1vD

2011-11-09 03:40:59 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\xddEEK88fRZhTwj

2011-11-09 03:40:51 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\FrzzOONyxA0uv2b

2011-11-09 03:40:42 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\aEEELL9gTZqjC

2011-11-09 03:40:34 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\RzzPP0yycA1vDo

2011-11-09 03:40:26 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\EwjjUUCelI

2011-11-09 03:40:17 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\rGG55aQQH6WK7RL

2011-11-09 03:40:08 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\qonnGG4amH6sW7E

2011-11-09 03:40:00 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\tZZqqhYYXwkVeOB

2011-11-09 03:39:51 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\JmGG55sQJ6dE

2011-11-09 03:39:43 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\JWWWKK8fRL9hXqU

2011-11-09 03:39:32 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\VGGG5aaQJ6dW8fL

2011-11-09 03:39:22 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\FDD22oobF

2011-11-09 03:39:13 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\BBrrzzPNyxA1vSo

2011-11-09 03:39:03 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\yJJ66dEK8fRZ9Tw

2011-11-09 03:38:52 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\F11iivD22oF4

2011-11-09 03:38:42 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\vwwkkUVVrlOtx0y

2011-11-09 03:38:31 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\mHH66sWWJ7fL8TZ

2011-11-09 03:38:21 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\ZjjYYCeekIVzOtx

2011-11-09 03:38:10 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\LJJJ6ddWK8fR9hX

2011-11-09 03:38:00 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\XxxAA1uuvSobFpm

2011-11-09 03:37:49 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\W7ddEEK8gRZ9YXj

2011-11-09 03:37:39 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\Z111ivvD3

2011-11-09 03:37:27 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\aHHH6ssWK7fE9gZ

2011-11-09 03:37:17 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\vBBBrzzONyxAuv2

2011-11-09 03:37:07 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\tTTTXqqjUC

2011-11-09 03:36:59 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\K00uucS11i

2011-11-09 03:36:50 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\bLLL8ggRZqhXwU

2011-11-09 03:36:42 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\JPPNNycA1uvD2b4

2011-11-09 03:36:33 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\T555aQQJ6dWKfR9

2011-11-09 03:36:22 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\ullIIBrzzPyxAuS

2011-11-09 03:36:13 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\cbbFF3pmmGaQJdK

2011-11-09 03:36:03 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\AtttzzPNy

2011-11-09 03:35:52 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\DKK88gRRZ9Y

2011-11-09 03:35:42 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\ennnFF4amH5sJ7E

2011-11-09 03:35:32 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\FiiibDD3onG4

2011-11-09 03:35:21 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\JCCwwkkIVrlNtP0

2011-11-09 03:35:11 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\lpppnGG5aQHdWKf

2011-11-09 03:35:00 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\HlIIBBrzPNyxAuS

2011-11-09 03:34:49 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\hhhhYXXwkUVeOBz

2011-11-09 03:34:38 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\jwwwkIIVrlONxPu

2011-11-09 03:34:26 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\z666dWWK8fR9hXq

2011-11-09 03:34:14 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\zlllOBBtxP

2011-11-09 03:34:01 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\doonnF4ppm5sQ7E

2011-11-09 03:33:47 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\ClllIBBrzPNxAu

2011-11-09 03:33:31 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\SlOOBBtzP0yc1

2011-11-09 03:33:15 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\SWWJJ7fEL8gZqYC

2011-11-09 03:32:58 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\Y666dEK8fRZhTwU

2011-11-09 03:32:41 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\eLL88TZZqhCwkVl

2011-11-09 03:32:09 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\rJJ66dEEKfRZ9Tw

2011-11-09 03:31:52 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\eQQHH6ssWK7ELgT

2011-11-09 03:31:35 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\kyycAA1uvD2bFpG

2011-11-09 03:31:16 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\r444pmG5sQ6dE8R

2011-11-09 03:30:55 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\csssJdEE8gRqYXk

2011-11-09 03:30:36 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\ZellOBBtzP0cAiD

2011-11-09 03:30:17 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\TEEKK8ffR

2011-11-09 03:30:00 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\SGG4aaQH6s

2011-11-09 03:29:44 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\IeellIBrzPNyA1v

2011-11-09 03:29:24 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\QbFF44pmG5sQ6dK

2011-11-09 03:29:07 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\jWWWK77fELgTZjY

2011-11-09 03:28:50 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\PHH55sQJ7dEK8R9

2011-11-09 03:28:32 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\xTTXXqjjYCe

2011-11-09 03:28:12 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\lIIIBrrzONyA

2011-11-09 03:27:53 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\tFF33pnG5a

2011-11-09 03:27:36 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\jZZZqhhYXwkUelB

2011-11-09 03:27:18 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\HcccA11uvD2

2011-11-09 03:27:00 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\cjjjYCCwk

2011-11-09 03:26:44 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\DBBttzPPNyc1uD2

2011-11-09 03:26:26 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\ajjYYCwwkIrlOtP

2011-11-09 03:26:09 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\RpmmHH5sQJ7dK8R

2011-11-09 03:25:51 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\V0uuvvS2ibF3nGa

2011-11-09 03:25:35 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\fK88gRZ9hY

2011-11-09 03:25:18 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\hqqjjYCCekVrzNt

2011-11-09 03:25:00 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\bHH55sWW7dELgRq

2011-11-09 03:24:41 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\KlOOBttxP0yc1

2011-11-09 03:24:21 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\GHH66ssWJ7fL8TZ

2011-11-09 03:24:01 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\vqhhYYCwkUVrOBx

2011-11-09 03:23:43 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\fdEELL8gRZqhXwU

2011-11-09 03:23:25 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\uNyyxxA0u

2011-11-09 03:23:07 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\HggTXXqjYCekVr

2011-11-09 03:22:49 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\PxxPP0yycS1vDon

2011-11-09 03:22:30 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\JVVeelOBtzP0yAi

2011-11-09 03:22:12 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\fTTXXwjjUClIB

2011-11-09 03:21:55 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\CYXXwwkUVelOtz0

2011-11-09 03:21:33 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\moobbF3pmG5aQ6W

2011-11-09 03:21:04 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\NllIIBrzPNyx1v

2011-11-09 03:20:29 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\rBBtzP0yc1iD2n4

2011-11-09 03:19:54 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\gWJJ7dEL8gZ

2011-11-09 03:19:19 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\tPPP0uucS1ib3nG

2011-11-09 03:18:43 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\CdWWK8fRL9TXqUe

2011-11-09 03:18:07 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\L55ssQJ7dEK

2011-11-09 03:17:35 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\appnnG5aaQ

2011-11-09 03:16:59 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\GUUUVeelOBtP0cA

2011-11-09 03:16:15 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\b1bFp4mt0vDo5qV

2011-11-09 03:15:35 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\mjjYYwIrlN0cSiD

2011-11-09 03:14:57 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\D88ggZqhYXkUeOz

2011-11-09 03:14:21 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\dWWK7fL9g

2011-11-09 03:13:46 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\ollIBttzPycuDb

2011-11-09 03:13:10 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\ywkUVrrlOBtP0cS

2011-11-09 03:12:34 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\fOONNtxA0ucSib3

2011-11-09 03:12:00 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\bL9ggTXqjYCeIVz

2011-11-09 03:11:26 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\oTTTXqjYCekIrON

2011-11-09 03:10:53 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\msssWJJ7fE8gZqY

2011-11-09 03:10:21 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\xelIIBtzPNyA1v2

2011-11-09 03:09:48 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\cBrrzOONyxAu

2011-11-09 03:09:23 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\oIIBBtzzPNcA1v2

2011-11-09 03:08:59 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\nUUVellIBtzNyA1

2011-11-09 03:08:35 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\kEEKK8fRZ9hTwj

2011-11-09 03:08:12 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\cnnG44aQH6sK7E9

2011-11-09 03:07:48 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\HwwwkIVrlONtP0c

2011-11-09 03:07:28 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\yqqqjUUCekI

2011-11-09 03:07:10 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\QbDD33onG4am6sJ

2011-11-09 03:06:51 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\EAA11ivD2onF4m5

2011-11-09 03:06:33 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\ozzPPNyxA1u

2011-11-09 03:06:16 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\YggTTZqqjYwkI

2011-11-09 03:05:58 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\lZZZqhhYX

2011-11-09 03:05:39 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\B555sQQJ6dE8fZ9

2011-11-09 03:05:20 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\dQQJJ6dKK

2011-11-09 03:04:55 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\PEEEL88gRZqYwkV

2011-11-09 03:04:31 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\PbbFF4ppmGsQJdE

2011-11-09 03:04:08 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\hSS2obFFpmG5Q6W

2011-11-09 03:03:42 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\R8ggRZZ9hYXjUe

2011-11-09 03:03:19 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\IEEKK8ffR

2011-11-09 03:02:55 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\exxAA1uuv2o

2011-11-09 03:02:30 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\DtzzPNycA1uv2b4

2011-11-09 03:02:06 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\K33ppmG5aQ

2011-11-09 03:01:42 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\GrrzzPNyxA1uS2b

2011-11-09 03:01:19 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\GzzOONtxA0uc2

2011-11-09 03:00:55 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\l1iibbD3onG4mHs

2011-11-09 03:00:31 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\PYYCCwkUVrlOBx0

2011-11-09 03:00:06 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\lOOONttxP0cS1b3

2011-11-09 02:59:41 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\q66dWKK7fRLg

2011-11-09 02:59:16 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\YQQJJ6dWK8fR9hX

2011-11-09 02:58:52 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\OaaQQJ6dWK8fL9T

2011-11-09 02:58:28 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\VUCCekIBrzNyx0v

2011-11-09 02:58:03 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\lS22oobF3

2011-11-09 02:57:37 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\qVeelOOBt

2011-11-09 02:57:12 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\NNxP3oG4amHWfLg

2011-11-09 02:56:51 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\lCeekkIVrzONxAu

2011-11-09 02:56:33 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\dttxP00ycS1vDon

2011-11-09 02:56:15 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\I444pmmH5sQJ

2011-11-09 02:55:56 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\FJJ66dWWK8RL9Tq

2011-11-09 02:55:38 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\annGG5aaQH

2011-11-09 02:55:22 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\mAA11uvvD2oF4mG

2011-11-09 02:55:08 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\H66ddEKK8fR9hXw

2011-11-09 02:54:52 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\QellIIBtzPNyA1v

2011-11-09 02:54:37 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\QLL88gRZqhYXwUe

2011-11-09 02:54:20 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\a222ibbF3pn5aH6

2011-11-09 02:53:59 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\KEKKK8gRZ9

2011-11-09 02:53:32 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\LbbDD3ppnGaQHsW

2011-11-09 02:53:09 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\NffEEL8gTZq

2011-11-09 02:52:43 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\S7ffRRL9gTXjYek

2011-11-09 02:52:16 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\mYYXXwjjUVlIB

2011-11-09 02:51:53 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\asssQJJ6dEK8RZh

2011-11-09 02:51:31 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\cGG44aQHH6WK7E9

2011-11-09 02:51:08 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\pyyccA1iiv2on4m

2011-11-09 02:50:44 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\spmmH55QJ7dK8R9

2011-11-09 02:50:16 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\Fmmm5EhhYUNAD2b

2011-11-09 02:49:46 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\oHH5JdEK8gR9hYw

2011-11-09 02:49:18 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\jF33mG55aQ6dW8R

2011-11-09 02:48:49 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\ujjjUekkIBzONx0

2011-11-09 02:48:22 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\zHHH6ssWJ7fE8TZ

2011-11-09 02:47:54 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\VBBttzP00yA1

2011-11-09 02:47:25 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\OEEEK88gRZ9YX

2011-11-09 02:46:55 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\ovvD22onF4pm5sJ

2011-11-09 02:46:27 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\NddEEK88fZ9

2011-11-09 02:45:59 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\OWWKK7fRL9gTqjC

2011-11-09 02:45:32 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\diivDD3onF4mHsW

2011-11-09 02:45:01 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\NWWWK77fEL9gZqY

2011-11-09 02:44:33 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\jccSS2ibD3pnGaH

2011-11-09 02:44:04 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\jG44aamH6sWJfE8

2011-11-09 02:43:36 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\b777dEEK8gRZhYw

2011-11-09 02:43:08 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\Y5aaQJJ6dW

2011-11-09 02:42:41 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\JWKK77fEL9gTZjC

2011-11-09 02:42:08 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\yPP00ycS1ivD3n

2011-11-09 02:41:41 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\Q9hhXqqjUCeIBzN

2011-11-09 02:41:17 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\wCCCekkIBrzNy

2011-11-09 02:40:54 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\cL99ggTZqjYCkIr

2011-11-09 02:40:35 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\c1iibbD3onG4mHs

2011-11-09 02:40:15 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\GSS11ibD3onGa

2011-11-09 02:39:52 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\WaammH5ssW7dLRY

2011-11-09 02:39:30 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\mRLL99gTXq

2011-11-09 02:39:11 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\PXqjjYCCekVrzNx

2011-11-09 02:38:51 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\aXXwwjjUCelBrPN

2011-11-09 02:38:27 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\EkkIIBrrzONxAuS

2011-11-09 02:38:06 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\TvDD2oobF4pm

2011-11-09 02:37:44 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\k444ammH6sWJfE8

2011-11-09 02:37:23 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\cyyxxA1uuS2b

2011-11-09 02:37:00 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\YcSSS2ibD3

2011-11-09 02:36:39 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\WzPPPNyxA1uv2oF

2011-11-09 02:36:20 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\YwwjjUCClIBrPNx

2011-11-09 02:35:59 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\SUUVVellIBzPNc1

2011-11-09 02:35:38 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\ZsssWJJ7fELgTZh

2011-11-09 02:35:21 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\o8ggRRZ9hYXwUVl

2011-11-09 02:35:06 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\k9hhYYXwjUVeIBz

2011-11-09 02:34:50 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\xJJ77fELLgT

2011-11-09 02:34:37 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\R999hTTXwjUClI

2011-11-09 02:34:25 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\IDDD3ppnG4aQ

2011-11-09 02:34:12 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\BEEEL88gRZqhXwU

2011-11-09 02:34:00 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\errrzOONtxA0cSi

2011-11-09 02:33:49 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\c88ffRLL9hXq

2011-11-09 02:33:39 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\toobbF4pmG5sQ6E

2011-11-09 02:33:28 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\tggRRZ9hhYwjU

2011-11-09 02:33:18 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\zPPP0yycS1

2011-11-09 02:33:07 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\EpnnGG4aQH6sK7E

2011-11-09 02:32:57 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\FjjjYCCekIVrONx

2011-11-09 02:32:46 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\NbbFF3pmmGaQJdW

2011-11-09 02:32:35 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\NRRZZ9hYYXjUVl

2011-11-09 02:32:25 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\aAA11ivvD2oF4

2011-11-09 02:32:14 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\h66ssWJ77

2011-11-09 02:32:04 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\TkkIIVrzONtxAuS

2011-11-09 02:31:53 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\uGGG5aaQH6dW7fL

2011-11-09 02:31:43 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\vwwjjUCeelBrzNx

2011-11-09 02:31:32 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\mH55ssQJ7dEKgR9

2011-11-09 02:31:11 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\PfEELL8gTZq

2011-11-09 02:31:00 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\FIIIVrrlONtP0cS

2011-11-09 02:30:50 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\zppnnG5aQH6dW7R

2011-11-09 02:30:39 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\JlllIBBrzPNyA1v

2011-11-09 02:30:29 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\emGGG5sQJ6dEKfZ

2011-11-09 02:30:18 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\fUUVVellOBtP0cA

2011-11-09 02:30:08 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\k11iibD33oG4aH

2011-11-09 02:29:57 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\jkkkIVVrlONxPuc

2011-11-09 02:29:47 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\T7fffRL9g

2011-11-09 02:29:36 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\FUUCCelIBrzPNx1

2011-11-09 02:29:25 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\gJJJ77dEK8g

2011-11-09 02:29:14 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\ZlllOBBtx

2011-11-09 02:29:04 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\DSS22ibbD3pG4QH

2011-11-09 02:28:53 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\UAA00uvSS2bF3n5

2011-11-09 02:28:42 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\vccAA1uvD2ob4pG

2011-11-09 02:28:31 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\YP00yycS1ivDon4

2011-11-09 02:28:10 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\FgggTXXqj

2011-11-09 02:27:58 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\kOOOBttzP0y

2011-11-09 02:27:47 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\EHH55sWJJ7

2011-11-09 02:27:37 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\httxxP00ucSi

2011-11-09 02:27:26 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\PG55aaQH6dWKfR9

2011-11-09 02:27:15 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\bLLL9hhTXqjUekB

2011-11-09 02:27:05 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\zA11uuvD2obFpm5

2011-11-09 02:26:56 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\UxxxA11uvS2oF3m

2011-11-09 02:26:48 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\rZqqjjYCwkIV

2011-11-09 02:26:39 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\VdddELL8g

2011-11-09 02:26:31 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\oA11uuvD2obFpm

2011-11-09 02:26:23 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\XjjjUCCekIBrONx

2011-11-09 02:26:12 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\faaaQJJ6dW

2011-11-09 02:26:01 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\lYYYXwwjUVeIBzP

2011-11-09 02:25:51 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\caammH55s

2011-11-09 02:25:40 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\wCCCwkkUVrlOtx0

2011-11-09 02:25:30 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\AS22iibD3pnGaQ6

2011-11-09 02:25:19 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\KTXXqqjUCekIrzN

2011-11-09 02:25:09 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\smmGG5aaQJdWKfL

2011-11-09 02:24:58 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\TVVVellOBtz0

2011-11-09 02:24:47 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\uaaamHH6sWJf

2011-11-09 02:24:36 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\ujjjYCCwk

2011-11-09 02:24:26 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\naaaQHH6dWK7

2011-11-09 02:24:15 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\S888fRRZ9hTwjCe

2011-11-09 02:24:05 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\CmmGG5ssQJ6

2011-11-09 02:23:55 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\ayyycAA1ivDonFp

2011-11-09 02:23:44 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\k888gTTZqhYCkUr

2011-11-09 02:23:34 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\qoonnG4aaH6sW7E

2011-11-09 02:23:23 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\qgggTXXqjYCkIrz

2011-11-09 02:23:13 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\iiiibFF3pmG5QJd

2011-11-09 02:23:02 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\r9hhTTXwjUCeIBz

2011-11-09 02:22:52 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\RJJJ7ddEK8g

2011-11-09 02:22:41 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\w00yycA11iD2o

2011-11-09 02:22:31 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\yaaamHH6sWJ7ELg

2011-11-09 02:22:20 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\pTTXXqjjYCeIVzO

2011-11-09 02:22:09 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\UFF33pnnG5QH6WK

2011-11-09 02:21:59 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\PlllIIBrzPNyA1v

2011-11-09 02:21:48 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\r2oonnF4pmH5sJd

2011-11-09 02:21:38 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\vVVVellOBtzPyc1

2011-11-09 02:21:27 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\SoonnG44amHsW7f

2011-11-09 02:21:17 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\FiibbD3ppn4aQ6W

2011-11-09 02:21:07 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\YXXqqjYYCekVrON

2011-11-09 02:20:57 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\mH666sWK7fEL9

2011-11-09 02:20:47 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\l999hTTXqjUekBr

2011-11-09 02:20:36 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\slllIBBrzPNyA1

2011-11-09 02:20:25 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\NvvvD22onF4mHsQ

2011-11-09 02:20:10 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\yD33oonG4amHsW7

2011-11-09 02:19:58 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\GLLL99hTXqjUe

2011-11-09 02:19:48 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\IPPNNyxxA1vS2bF

2011-11-09 02:19:40 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\ciibbDD3pnGa

2011-11-09 02:19:32 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\ZmmmH55sQJ7EKgR

2011-11-09 02:19:24 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\eWWWK88fRL9hXqU

2011-11-09 02:19:14 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\XllIIBrrzPNxAuv

2011-11-09 02:19:04 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\EVVVeelIBtzPy

2011-11-09 02:18:54 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\DQQQJ66dEK8

2011-11-09 02:18:44 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\bRRZZ9hhYXwUVl

2011-11-09 02:18:33 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\y8gggRZqhYX

2011-11-09 02:18:22 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\AbbDD3oonGamHsW

2011-11-09 02:18:12 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\SccSS2ibD3pnG

2011-11-09 02:18:02 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\wgTTXXqjYC

2011-11-09 02:17:53 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\niibbDD3onGam6s

2011-11-09 02:17:42 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\m333pnnG5aQ6dK7

2011-11-09 02:17:34 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\Q6sssWK7fEL9gZj

2011-11-09 02:17:26 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\cjjUUVeelIBz

2011-11-09 02:17:17 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\HoobbF33pmGaQ6

2011-11-09 02:17:07 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\phhTTXwjU

2011-11-09 02:16:56 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\lRRZZ9hYY

2011-11-09 02:16:46 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\TBBttzPP0yA1iD2

2011-11-09 02:16:36 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\OHH55sWWJ7

2011-11-09 02:16:28 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\IeellIBttPNy

2011-11-09 02:16:18 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\aDD22obbF4pG5QJ

2011-11-09 02:16:08 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\gppmmH55sQJdE8g

2011-11-09 02:15:56 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\dDDD3ppnG5aQ

2011-11-09 02:15:43 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\fEELL8gRZqhXwUV

2011-11-09 02:15:30 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\HeellIBBtzNyc1

2011-11-09 02:15:16 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\AXqqjYYCe

2011-11-09 02:15:03 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\vELL99gTZqjYwkV

2011-11-09 02:14:49 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\HvvDD3onn4amHs

2011-11-09 02:14:36 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\xNNyycA11vD2bFp

2011-11-09 02:14:24 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\gtxxAA0ucS2iD3n

2011-11-09 02:14:09 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\HeekkIVVrzNtx0u

2011-11-09 02:13:55 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\DuuccS11ib3on4a

2011-11-09 02:13:43 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\KvvvS22obF3mG

2011-11-09 02:13:31 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\dfffELL8gTZhYwk

2011-11-09 02:13:19 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\LXXqqjUUCeIBrON

2011-11-09 02:13:05 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\zhhTTXqjUCekIrO

2011-11-09 02:12:49 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\X222obbF4pm5sJ6

2011-11-09 02:12:34 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\DOOOBttzP0y

2011-11-09 02:12:17 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\jVVrrzONNxA0uSi

2011-11-09 02:12:00 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\wpppmHH5sQJdE8g

2011-11-09 02:11:44 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\BZZZqhhYCwkUrlB

2011-11-09 02:11:24 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\D11iibDD3on4aH6

2011-11-09 02:11:06 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\DUUUVeelOBt

2011-11-09 02:10:50 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\pYYCCekIIVzO

2011-11-09 02:10:33 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\KUUllIBrzPxu2Fp

2011-11-09 02:10:17 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\i55ssWJJ7dE8gZq

2011-11-09 02:10:07 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\yHHH5ssWJ7dL8RZ

2011-11-09 02:09:56 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\uWWWK77fEL9TZjY

2011-11-09 02:09:45 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\jJJJ6ddWK8fL9hX

2011-11-09 02:09:34 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\BFFF4ppmG5sQ6dK

2011-11-09 02:09:24 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\uddEEL8gRZqh

2011-11-09 02:09:13 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\ccccSS2ibD3pG4Q

2011-11-09 02:09:00 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\wwjjUVVelIBzPyc

2011-11-09 02:08:49 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\DqjjYYCwkIVrlNx

2011-11-09 02:08:37 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\zyyxxA0uvS2ib3n

2011-11-09 02:08:25 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\W44amH55s

2011-11-09 02:08:13 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\O111uvvS2ob3p

2011-11-09 02:07:59 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\lHH66dWWK7fL

2011-11-09 02:07:45 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\pQ66dWWK7fR9gXq

2011-11-09 02:07:29 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\zibbF33pnG5aH6W

2011-11-09 02:07:15 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\t77fRRL9gTXqYCk

2011-11-09 02:07:00 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\kqjjUCCekIr

2011-11-09 02:06:46 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\S555aQQH6dW7fL9

2011-11-09 02:06:32 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\N44amHH6sWJ7ELg

2011-11-09 02:06:16 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\nhhTTXwwjUelIrz

2011-11-09 02:05:58 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\r7ffEEL9gTZq

2011-11-09 02:05:38 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\efRRLL9gTXqjCkI

2011-11-09 02:05:16 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\CXwUUeeOBzPc1iD

2011-11-09 02:04:57 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\NIPcu2o4pGsQJdK

2011-11-09 02:04:38 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\dNNyycAA1uD2b4p

2011-11-09 02:04:22 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\nqqhhYXwkUVeOBz

2011-11-09 02:04:04 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\nHHH5ssQJ7dK

2011-11-09 02:03:43 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\BqqqhYYXwkUelBt

2011-11-09 02:03:24 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\LgggRZ99hYXjUel

2011-11-09 02:03:05 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\DVeellIBtzP

2011-11-09 02:02:48 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\GIIIVrzzONtA0cS

2011-11-09 02:02:29 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\UfffRLL9gTXqYCk

2011-11-09 02:02:10 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\YH66ssWK7fELgTq

2011-11-09 02:01:50 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\FS11iibD3onG

2011-11-09 02:01:32 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\bwwkUVrllBtxPy1

2011-11-09 02:01:13 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\ZUUVeelOBtzPyc1

2011-11-09 02:00:54 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\IYYYXXwjUVelBtP

2011-11-09 02:00:35 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\XcAAA1uvD2ob4pG

2011-11-09 02:00:16 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\k111uvvS2obFpG5

2011-11-09 01:59:56 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\XmmmH55sQJ

2011-11-09 01:59:36 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\vD222onF4pmHs

2011-11-09 01:59:12 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\PhhTTXwwjUe

2011-11-09 01:58:40 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\LHH66sW77EL9TZj

2011-11-09 01:58:00 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\WmGG5aaJ6dW8fLh

2011-11-09 01:57:00 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\YaamH5WddLgZhXV

2011-11-09 01:56:07 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\Z88ggRZ9hYXw

2011-11-09 01:55:18 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\QnnF44pmH5Q7dKg

2011-11-09 01:54:18 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\CkkkIVrlNtxPuS1

2011-11-09 01:53:21 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\fgRRZZqhwU

2011-11-09 01:52:21 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\LqqjjYCekIV

2011-11-09 01:51:23 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\DamHH6ssW7f

2011-11-09 01:50:34 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\qTTTXqqjYCekVrO

2011-11-09 01:50:07 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\IHH55sQQJ

2011-11-09 01:49:38 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\EdEK8ggRZ9YXw

2011-11-09 01:49:11 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\ynnGG4aQQHsWKfL

2011-11-09 01:48:41 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\DNNyxxA0uv2ib3n

2011-11-09 01:48:12 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\luvvS22ib

2011-11-09 01:47:40 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\Z555sWJ7dE8gZqY

2011-11-09 01:47:04 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\aH6ddWK7fR9gT

2011-11-09 01:46:21 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\m5WRhqkOun6RqeO

2011-11-09 01:45:37 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\j3JRjru3dLjVx

2011-11-09 01:44:57 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\RoobbF4pmGsJ6E

2011-11-09 01:44:31 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\RPPP0yccSiD3nFa

2011-11-09 01:44:05 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\mAA0uS2iiD3pn

2011-11-09 01:43:43 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\cXXXwjjUV

2011-11-09 01:43:22 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\JiibbD33o

2011-11-09 01:42:39 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\xoonF4aamHsW7E

2011-11-09 01:42:18 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\fZZqjjYCwk

2011-11-09 01:42:01 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\IFFF4Gs6K8R9hXw

2011-11-09 01:41:46 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\E33oonF4amH5J7E

2011-11-09 01:41:30 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\lyyccS1iv

2011-11-09 01:41:17 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\wPP00ycA1i

2011-11-09 01:41:03 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\QAAA1uuvS2ob3p

2011-11-09 01:40:50 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\pkkIIVrrzOtxAuS

2011-11-09 01:40:37 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\lbbbD33onG4aH6W

2011-11-09 01:40:24 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\hFF44pmmG5sJ6EK

2011-11-09 01:40:11 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\YLLL9ggTXq

2011-11-09 01:39:59 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\LhhhYXXwkUV

2011-11-09 01:39:45 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\bYYYXwwjUVelBt

2011-11-09 01:39:31 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\XFF33pmG5aQJ6W8

2011-11-09 01:39:16 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\Y666dEEK8fR9hXw

2011-11-09 01:39:02 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\K11uuvD22bF4pGs

2011-11-09 01:38:48 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\Teelx11uvSob3mG

2011-11-09 01:38:32 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\EeellIBBtz

2011-11-09 01:38:18 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\cxxxA11uvS2bFpm

2011-11-09 01:38:07 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\N11iivDD3oF4aH

2011-11-09 01:37:55 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\sWKK77fEL9gTqj

2011-11-09 01:37:45 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\qUUCCekkI

2011-11-09 01:37:34 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\QJJ7dEEK8gR9hXj

2011-11-09 01:37:23 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\n44aamH55sJ7dL8

2011-11-09 01:37:12 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\zOOONttxA0uc2iD

2011-11-09 01:37:01 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\vfRRLL9hTX

2011-11-09 01:36:50 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\NjjjUCCelIBrPNx

2011-11-09 01:36:40 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\QF44ppmH5sQJdE8

2011-11-09 01:36:29 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\n11iibDDonG4mHs

2011-11-09 01:36:17 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\XA00uuvS2ibFpn5

2011-11-09 01:36:04 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\QLL99gTTZqjCwIV

2011-11-09 01:35:50 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\L77ddELL8gRqhXw

2011-11-09 01:35:37 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\HwjjUUVelIBtzN

2011-11-09 01:35:24 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\sqqqjUUCekI

2011-11-09 01:35:11 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\uL88gTTZqhYwkVr

2011-11-09 01:34:57 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\paammH66sWJfE8g

2011-11-09 01:34:43 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\IYYYXwwjUVeIBtP

2011-11-09 01:34:31 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\lyyxxA0uu

2011-11-09 01:34:17 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\GZZZqhhYCwkUr

2011-11-09 01:34:04 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\IPP00ycA1

2011-11-09 01:33:50 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\B5ssdhwUlz

2011-11-09 01:33:36 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\bZZ99hClx2omdKf

2011-11-09 01:33:21 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\H99hhYXwwjelBtP

2011-11-09 01:33:07 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\xppmmG55aQJ

2011-11-09 01:32:54 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\fsWWK77fEL9gZ

2011-11-09 01:32:42 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\Y77ddEKK8gZ9h

2011-11-09 01:32:28 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\CTTXXwjjUClIBzP

2011-11-09 01:32:15 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\bnnnG55aQH6dK7R

2011-11-09 01:32:02 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\o888gRRZqhYwkV

2011-11-09 01:31:49 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\YF44ppmG5sQJdE8

2011-11-09 01:31:35 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\bjjUUCekIBrONxA

2011-11-09 01:31:22 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\KbbbD33pnG4QHsW

2011-11-09 01:31:09 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\bYYXXwkUVelOBz0

2011-11-09 01:30:55 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\z4ppmGG5sQ

2011-11-09 01:30:42 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\w555aQQH6d

2011-11-09 01:30:27 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\BKKK8ffRL9hXq

2011-11-09 01:30:09 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\knGGG4amH6sWJfL

2011-11-09 01:29:52 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\WppmmG55s

2011-11-09 01:29:33 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\CPPNycA2GdEZwUl

2011-11-09 01:29:15 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\WXqjYVONtxA0c2b

2011-11-09 01:28:57 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\TL8gqCwkUVlBxy1

2011-11-09 01:28:40 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\x9hTXwjjCeI

2011-11-09 01:28:22 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\tsWK7fE9gTqjC1b

2011-11-09 01:28:04 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\gddE8ZYXweBtPyA

2011-11-09 01:27:46 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\exxA1uvSoF3

2011-11-09 01:27:28 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\U000uccS2ib

2011-11-09 01:27:09 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\qVVrrzONt

2011-11-09 01:26:51 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\acAAivvD2o

2011-11-09 01:26:33 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\OZZ99hYXwjUVl

2011-11-09 01:26:14 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\wfffRLL9Xq

2011-11-09 01:25:56 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\ZuccS2iibD3n

2011-11-09 01:25:38 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\HZZqqhYYCwk

2011-11-09 01:25:20 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\rzzzPPNycA1uD2b

2011-11-09 01:25:01 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\GGQd8ZhwUCeIBzP

2011-11-09 01:24:42 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\DdWfRL9hTqUCkBr

2011-11-09 01:24:24 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\LssWWJ77fELgTqh

2011-11-09 01:24:10 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\N9TZwlxP0cS1bn4

2011-11-09 01:23:55 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\qqqhYCCwk

2011-11-09 01:23:41 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\CnnGG4aamHsWJfL

2011-11-09 01:23:27 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\UgggTZZqhYCkUrl

2011-11-09 01:23:15 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\aXXqqjYCCeIVr

2011-11-09 01:23:03 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\TBBttzPNN

2011-11-09 01:22:52 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\F0yyccS1ivD3oFa

2011-11-09 01:22:41 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\TjjYCCkIVzNt

2011-11-09 01:22:29 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\aoonnF4ppH5sQ7E

2011-11-09 01:22:16 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\DKKK8ffRL9hTqj

2011-11-09 01:22:04 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\aiivvD33on

2011-11-09 01:21:52 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\zSSS22ob3pmG5Q6

2011-11-09 01:21:41 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\b66ddEKK8fZ9hX

2011-11-09 01:21:31 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\PttzzP00ycAiv2

2011-11-09 01:21:20 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\xiivvD33onFam5s

2011-11-09 01:21:10 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\lUUVVrllOBtP0cS

2011-11-09 01:21:01 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\YtttxPP0ycSiv3o

2011-11-09 01:20:52 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\PHH55sQQJ7dK8RZ

2011-11-09 01:20:44 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\rUUCCekkIBrONxA

2011-11-09 01:20:35 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\acccS22ibD3pG4Q

2011-11-09 01:20:26 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\ZjjYYCwwkIVlOtx

2011-11-09 01:20:17 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\uxxxP00ycS1v

2011-11-09 01:20:09 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\AddEEK88fRZhTwj

2011-11-09 01:20:00 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\eaaaQJJ6dWK8RLh

2011-11-09 01:19:52 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\zHHH6ssWK7fL9gZ

2011-11-09 01:19:43 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\dEEKK8ggR

2011-11-09 01:19:37 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\ZammHH6sW

2011-11-09 01:19:29 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\XmHH55sQJ7

2011-11-09 01:19:21 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\nSSS2oobF3pG5QJ

2011-11-09 01:19:13 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\knGG44amH6s

2011-11-09 01:19:05 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\YcccA11ivD2nF4m

2011-11-09 01:18:58 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\UxxAA0uucSibDp

2011-11-09 01:18:50 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\nFFF4ppmH5sQ7dK

2011-11-09 01:18:43 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\gttxxA00ucSib3p

2011-11-09 01:18:35 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\KSSS1iivD3on4

2011-11-09 01:18:27 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\PbbbF44pmG5QJ6E

2011-11-09 01:18:18 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\w3ppnnG5aQH6WKf

2011-11-09 01:18:12 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\bPNNyycA1uvDob4

2011-11-09 01:18:04 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\rGG44aQH6sWK

2011-11-09 01:17:56 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\PmmHH5sWWJdELg

2011-11-09 01:17:48 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\JCCCellIBrzP

2011-11-09 01:17:42 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\ZFF44ammH5sJ7EL

2011-11-09 01:17:34 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\WmmmG55aQJ6dK8R

2011-11-09 01:17:27 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\fccAA1iivD2nFpm

2011-11-09 01:17:19 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\w33ppmG5aQ

2011-11-09 01:17:11 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\pjjjYCCwk

2011-11-09 01:17:03 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\OgggRRZ9hYXwUVl

2011-11-09 01:16:57 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\RllOONtxxPucSiD

2011-11-09 01:16:48 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\CRZZZqhYXwkUVlB

2011-11-09 01:16:42 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\BHH66sWWK7fL9TZ

2011-11-09 01:16:34 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\XJJJ77dEK8gR9hX

2011-11-09 01:16:26 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\KKK88fRRL9TXqUC

2011-11-09 01:16:18 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\WwwwkIIVrlOtxPu

2011-11-09 01:16:11 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\buuvvS2oob3pm5Q

2011-11-09 01:16:03 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\ncccSS1ibD3oG4m

2011-11-09 01:15:57 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\TCCCekkIBrzOyx0

2011-11-09 01:15:49 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\TccSS1iib

2011-11-09 01:15:42 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\mXXqqjUUCeIBrON

2011-11-09 01:15:34 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\LBBBtxxP0yc

2011-11-09 01:15:27 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\RooobFF4pmGsQJd

2011-11-09 01:15:18 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\N222ibbF3pnGaQ6

2011-11-09 01:15:10 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\krllOONtxP0uS1

2011-11-09 01:15:00 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\qmmHH6ssW

2011-11-09 01:14:50 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\tkkkIVVrlONxP0c

2011-11-09 01:14:40 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\PQQQH66sWK7fL9T

2011-11-09 01:14:30 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\heekkIVrrzNtx0c

2011-11-09 01:14:19 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\TbbFF3ppmG5Q

2011-11-09 01:14:08 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\EnnFF4amH5sWJdL

2011-11-09 01:13:57 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\lcccS11ivD3o

2011-11-09 01:13:45 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\PFF33pmmG5a

2011-11-09 01:13:34 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\L22oonFF4pm

2011-11-09 01:13:23 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\rivvDD3onF4a

2011-11-09 01:13:13 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\fONNNtxP0ucS1b3

2011-11-09 01:13:02 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\WeekkIBrzONyA0v

2011-11-09 01:12:51 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\r22bbF4pmG5QJdE

2011-11-09 01:12:42 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\zaaaQJJ6dWKfR

2011-11-09 01:12:34 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\u00uucSS2iD3pG4

2011-11-09 01:12:26 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\OvDD22onF4

2011-11-09 01:12:18 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\q2oobFF3pmGa

2011-11-09 01:12:09 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\XqqqjjYCekIVzOt

2011-11-09 01:12:01 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\wTTTZqqhYCwUVlO

2011-11-09 01:11:52 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\O55ssQJJ6d

2011-11-09 01:11:44 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\FnnGG5aQH

2011-11-09 01:11:36 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\gbbDD3oonGamHsW

2011-11-09 01:11:28 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\UOOBBtzP0ycA1v2

2011-11-09 01:11:19 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\ThTTXXqjUCek

2011-11-09 01:11:11 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\q9ggTTZqjYCw

2011-11-09 01:11:03 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\KOOBBtxxP0

2011-11-09 01:10:54 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\cXXwwjUUCeIBrPN

2011-11-09 01:10:46 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\oQQHH6ddWKfRLg

2011-11-09 01:10:38 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\uiiibDD3o

2011-11-09 01:10:29 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\GOOBBtzzP0yA1vD

2011-11-09 01:10:19 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\d444pmmH5sQ7

2011-11-09 01:10:09 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\hOOBBtxxP0cS1vD

2011-11-09 01:09:59 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\BLLL9ggTZqjYwkV

2011-11-09 01:09:48 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\sLLL9ggTZqjCwkV

2011-11-09 01:09:38 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\gbbbF33pnG5aH6W

2011-11-09 01:09:27 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\keeelIIBrzPNxAu

2011-11-09 01:09:16 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\bKKK8ggRZ9hYwjV

2011-11-09 01:09:07 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\UwwjjUVeeIBtzNc

2011-11-09 01:08:56 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\GbDD33onG4am6sJ

2011-11-09 01:08:43 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\RssQQJ66dE8fR9h

2011-11-09 01:08:30 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\VIIIBBrzONyx0uS

2011-11-09 01:08:16 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\knGG44amH6sW7fL

2011-11-09 01:08:04 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\vEKK88gRZ9

2011-11-09 01:07:51 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\cSS22ibFF

2011-11-09 01:07:38 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\z333oonF4a

2011-11-09 01:07:25 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\eyvvbF4pmG5sQ6E

2011-11-09 01:07:11 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\QbFF33pmG5aQJd

2011-11-09 01:06:55 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\atttSiv3o4

2011-11-09 01:06:38 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\lRRLL9ggTXqYCkV

2011-11-09 01:06:25 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\jfEL9ggZqYCwIVl

2011-11-09 01:06:11 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\ExxPP0yycS1vDon

2011-11-09 01:05:57 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\sqhhhYXwkUVeOB

2011-11-09 01:05:43 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\AlllIBBtzPNc

2011-11-09 01:05:28 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\Z111uvvD2

2011-11-09 01:05:16 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\OGGG5aaQH6dW7

2011-11-09 01:05:03 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\EvvDD3onnFam5sJ

2011-11-09 01:04:50 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\jlllIBBtzPNyA

2011-11-09 01:04:36 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\XffRR99hTXqjCeI

2011-11-09 01:04:22 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\eQQQH66dWK7fL9T

2011-11-09 01:04:09 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\erllOOBtxP0yS1v

2011-11-09 01:03:56 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\u444pmmH5sQJdE8

2011-11-09 01:03:42 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\IBBBrzzPNyx1uS2

2011-11-09 01:03:29 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\KggTTXqjjYekIrO

2011-11-09 01:03:11 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\vkkkUVVrlOBxPyS

2011-11-09 01:02:52 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\OWWJJ7ddEL

2011-11-09 01:02:34 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\RmmGGaaQJ6dK8R9

2011-11-09 01:02:17 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\wttxxP00yc

2011-11-09 01:01:58 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\f7LTCVOtDsJ8qXk

2011-11-09 01:01:38 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\d77ffEL99TZq

2011-11-09 01:01:20 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\H999hhYXwjU

2011-11-09 01:01:02 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\g5aaJ6WW8fR9hX

2011-11-09 01:00:45 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\AvDD33onF4am5sJ

2011-11-09 01:00:28 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\ippnGG5aQH

2011-11-09 01:00:11 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\maamHH6sWJ7fE8T

2011-11-09 00:59:49 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\WK88ffRL9hXqjCk

2011-11-09 00:59:31 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\Q444aQQH6sW7fLg

2011-11-09 00:59:13 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\QPP0yccSon4

2011-11-09 00:58:54 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\pzzzPNNyc

2011-11-09 00:58:37 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\dkIIVVrzONtx

2011-11-09 00:58:20 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\zRRRZ99hYXwUV

2011-11-09 00:58:04 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\bG44aaQH6sWKfE9

2011-11-09 00:57:46 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\rPPNyycA1uvD2b4

2011-11-09 00:57:29 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\uIIVVrzON

2011-11-09 00:57:12 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\HJJ77dEKKgRZhXj

2011-11-09 00:56:58 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\O99hhYXwwjVelBt

2011-11-09 00:56:44 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\PkkIIBrrzONxAuv

2011-11-09 00:56:31 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\rLLL9ggTZqjYwkV

2011-11-09 00:56:18 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\eH55ssQJ7dEKgR9

2011-11-09 00:56:05 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\s8fRL9hhTXj

2011-11-09 00:55:52 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\uccSS2ibb3pn

2011-11-09 00:55:36 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\TwwjjUCeelBrzNy

2011-11-09 00:55:15 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\sAAA1iivD2on4p

2011-11-09 00:54:58 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\tffRRL99hTXjUek

2011-11-09 00:54:40 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\rmmHH6sWJ7fE

2011-11-09 00:54:27 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\avvDD2oobF4mGsQ

2011-11-09 00:54:17 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\rHH55sWWJ

2011-11-09 00:54:06 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\joonnG44amHsW7f

2011-11-09 00:53:55 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\NuuuvvS2ibF3nGa

2011-11-09 00:53:44 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\HUUUCeelIBrPNx

2011-11-09 00:53:33 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\XUUUVeelOBtz0yA

2011-11-09 00:53:22 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\fgggTZZqjYCwI

2011-11-09 00:53:11 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\o333pnnG5aQHdW7

2011-11-09 00:53:00 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\ZmmGG5sQJ

2011-11-09 00:52:47 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\ntttxAA0u

2011-11-09 00:52:36 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\JCeeekIBrzONyAu

2011-11-09 00:52:26 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\oBBBtzzPNyc

2011-11-09 00:52:15 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\O8ggTZZqhYCwUVl

2011-11-09 00:52:04 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\jEELL8ggTZqYCkU

2011-11-09 00:51:55 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\g77ddELL8gRqhXw

2011-11-09 00:51:46 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\idEEKK8gRZ

2011-11-09 00:51:35 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\livvvD3onF4am5W

2011-11-09 00:51:25 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\BLL99gTTZqjCwIV

2011-11-09 00:51:14 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\ddddWWK8fRL9TXj

2011-11-09 00:51:03 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\mGGG5ssQJ6dK8

2011-11-09 00:50:52 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\hmmmHH5sWJ7dL8R

2011-11-09 00:50:41 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\BbbDD3ppnGaQH

2011-11-09 00:50:30 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\LeeekkIBrzONxAu

2011-11-09 00:50:21 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\L22iibF33pG5aHd

2011-11-09 00:50:12 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\gtxxAA0ucS2ib3n

2011-11-09 00:50:01 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\xyyxxA00uvS

2011-11-09 00:49:50 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\gtttzPPNycA

2011-11-09 00:49:39 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\jYCCwwkUVrlOBx0

2011-11-09 00:49:28 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\IIIIVrrlONtP

2011-11-09 00:49:17 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\JCCeekIIBrON

2011-11-09 00:49:06 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\AXXwwjUVVeIB

2011-11-09 00:48:57 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\fIIIBrrzPN

2011-11-09 00:48:46 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\iUUVVellOB

2011-11-09 00:48:35 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\XnnGG4aaQHsWK

2011-11-09 00:48:24 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\NUUCCekIIrzONx0

2011-11-09 00:48:12 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\AYXXwwkUVelOtz0

2011-11-09 00:48:00 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\SZqqjjYCwk

2011-11-09 00:47:49 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\lDD22obbF4pG5QJ

2011-11-09 00:47:36 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\uXXqjYYCekIrzNt

2011-11-09 00:47:24 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\jEEKK8ffRZ9TXjU

2011-11-09 00:47:13 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\gHH55sWJJ7EL8R

2011-11-09 00:47:02 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\kVVVrzzONtx0uc2

2011-11-09 00:46:49 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\POOOBttzP0yc1iD

2011-11-09 00:46:33 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\NXXXqjjYCekVrO

2011-11-09 00:46:19 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\Z66ssWJJ7

2011-11-09 00:46:04 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\ZNNttxPP0uc1iD3

2011-11-09 00:45:48 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\YrrrzOONyxA0vSi

2011-11-09 00:45:34 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\OeeekkIVrzONxAu

2011-11-09 00:45:19 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\gJJ66dWK8fRLhXq

2011-11-09 00:45:02 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\ltttzPP0y

2011-11-09 00:44:48 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\d000ycA11iDon4p

2011-11-09 00:44:33 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\OXXwwkUVelOBtPy

2011-11-09 00:44:19 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\wVVVellIBtzNy

2011-11-09 00:44:06 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\RONNyyxA0uvSib

2011-11-09 00:43:55 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\HpppmHH5sQJdE8

2011-11-09 00:43:44 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\ZkkUUVrrlOBxPyc

2011-11-09 00:43:33 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\utttxAA0u

2011-11-09 00:43:22 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\VTXXwwjUCelIrzN

2011-11-09 00:43:11 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\OwwwjjUVelIBzPy

2011-11-09 00:43:01 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\dZZZ9hYYXwjV

2011-11-09 00:42:50 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\mZZqqhYYCwkVrOB

2011-11-09 00:42:38 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\a11uuvSS2o

2011-11-09 00:42:27 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\EOOBBtzP0ycA1v2

2011-11-09 00:42:15 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\INNtxxA0ucS2bDp

2011-11-09 00:42:02 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\qhhhYYCwk

2011-11-09 00:41:50 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\dF33ppmG5aQJdW8

Link to post
Share on other sites

2011-11-09 00:41:39 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\NeeelIIBrzPyxAu

2011-11-09 00:41:28 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\raammH55s

2011-11-09 00:41:16 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\QgggTXXqjYC

2011-11-09 00:41:05 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\ohhhYXXwjUVlItz

2011-11-09 00:40:53 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\uqqjjYCCw

2011-11-09 00:40:41 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\lrrrzPPNy

2011-11-09 00:40:28 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\XaaQQH6sWK7fE9T

2011-11-09 00:40:15 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\RGG44amHH6WJ7E8

2011-11-09 00:39:59 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\THHH6ssWK7fE9gZ

2011-11-09 00:39:43 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\mbbbF33pmG5aJdE

2011-11-09 00:39:25 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\NssWWK77fE9gZqY

2011-11-09 00:39:08 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\UVeellIBtzP

2011-11-09 00:38:52 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\IS11ibbD3on4aHs

2011-11-09 00:38:35 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\O333pmmG5aQ6dK8

2011-11-09 00:38:21 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\IFF3ppnG5aHdW7f

2011-11-09 00:38:07 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\ILLgqYYCwkIrlNt

2011-11-09 00:37:54 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\tssWWJfEL8gTqYC

2011-11-09 00:37:40 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\J44aamH5sWJ7dLg

2011-11-09 00:37:28 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\BrrzzONtxA

2011-11-09 00:37:15 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\e4aammH6sWgThCk

2011-11-09 00:37:01 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\DZZqqhYXwkUVeOt

2011-11-09 00:36:52 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\tKKK8ggRZ9

2011-11-09 00:36:43 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\lEEEK88fRZ9TXwU

2011-11-09 00:36:33 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\UoobbF44pm5sQ6d

2011-11-09 00:36:23 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\HuuuvvD2obF

2011-11-09 00:36:14 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\zuvvvS2obF3pm5Q

2011-11-09 00:36:05 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\xpppnGG5aQH

2011-11-09 00:35:56 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\gtttxPP0ucSibDo

2011-11-09 00:35:47 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\HssWWJ7ffE8gTq

2011-11-09 00:35:39 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\YmmmH55sQJ7EK

2011-11-09 00:35:31 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\o666dWWK7fRLgTq

2011-11-09 00:35:21 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\iONNyyxA0uvSi

2011-11-09 00:35:09 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\aRRZZqhhYX

2011-11-09 00:34:58 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\LW777fEL8gTZhYw

2011-11-09 00:34:47 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\aRLL99gTXqjYe

2011-11-09 00:34:39 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\CoonnG44amHsW7f

2011-11-09 00:34:30 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\dgRRZqqhY

2011-11-09 00:34:22 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\mKK88fRRL9TXqUC

2011-11-09 00:34:13 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\DhTTXXqjUCekBrO

2011-11-09 00:34:05 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\lUVVrrlOBtxPyc1

2011-11-09 00:33:58 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\rrzzOONyxA0uv2b

2011-11-09 00:33:52 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\AXXwwjUVVeIBtPy

2011-11-09 00:33:45 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\QL99ggTZqjYCkIr

2011-11-09 00:33:38 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\ezzPPNyyxA1

2011-11-09 00:33:31 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\tCCCwkkIVrlNtP0

2011-11-09 00:33:23 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\CyyyxAA1uvS2bFp

2011-11-09 00:33:17 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\plllOBBtz

2011-11-09 00:33:11 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\ewkkIIVrlON

2011-11-09 00:33:04 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\fppmmG55sQJdE8f

2011-11-09 00:32:58 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\txxPP0yycS1vDon

2011-11-09 00:32:50 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\q222iibF3pnGaQ6

2011-11-09 00:32:42 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\iggTTZqqhYwkUrl

2011-11-09 00:32:36 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\CUUUCeekIBrzNyA

2011-11-09 00:32:29 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\wZZZqqhYXwkUelB

2011-11-09 00:32:23 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\OWWWJ77fEL8gZqY

2011-11-09 00:32:16 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\KQQHH6dWK7

2011-11-09 00:32:09 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\uiivvD22on4p

2011-11-09 00:32:03 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\LLL99gTZqjYCwIr

2011-11-09 00:31:56 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\RhhhYXXwjUVlIBz

2011-11-09 00:31:48 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\ylOONNtxP0uc1iD

2011-11-09 00:31:42 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\bXXqqjUCCeIBrON

2011-11-09 00:31:35 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\GqqqhYYXwkUVl

2011-11-09 00:31:29 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\jAAA00ucS2ib3pG

2011-11-09 00:31:21 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\Z999hhYXwjUVlIt

2011-11-09 00:31:14 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\uVVrrzONNtA0uSi

2011-11-09 00:31:07 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\V88ffRZ9hTXwjCl

2011-11-09 00:31:01 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\THH55sWWJ7dL8RZ

2011-11-09 00:30:54 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\lXXqqjUUC

2011-11-09 00:30:47 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\V444pmmG5sQJdE8

2011-11-09 00:30:41 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\jJJJ7ffEL8gTqhC

2011-11-09 00:30:34 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\Z88ffRLL9hXq

2011-11-09 00:30:26 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\lEELL8gTT

2011-11-09 00:30:19 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\xiiibbF3pnG5QHd

2011-11-09 00:30:13 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\CKKK8ggRZ9h

2011-11-09 00:30:06 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\GeekkIVrrzNtx0c

2011-11-09 00:29:58 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\ytttzPP0ycAiv2o

2011-11-09 00:29:52 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\Y99ggTZZqjYwk

2011-11-09 00:29:45 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\gNNNyxxA1uvSob3

2011-11-09 00:29:38 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\UkUUVVelOBtz0yA

2011-11-09 00:29:32 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\IEEEL99gTZqjCwI

2011-11-09 00:29:25 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\LAA11uvvD2oF4m

2011-11-09 00:29:18 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\VonnFF4amH5s

2011-11-09 00:29:11 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\NAA11uvvS2bF3mG

2011-11-09 00:29:03 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\OWWWJ77fEL8TZ

2011-11-09 00:28:57 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\IyyyxAA0uvSib3p

2011-11-09 00:28:50 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\SDD22oonF4pH5QJ

2011-11-09 00:28:43 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\iuuccS11ib

2011-11-09 00:28:37 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\GBBrrzOONy

2011-11-09 00:28:31 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\XggRRZ9hhYwjUel

2011-11-09 00:28:24 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\naaQQH66s

2011-11-09 00:28:18 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\auuvvS2obF3pm5Q

2011-11-09 00:28:11 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\qjjUUVVelIBzPyc

2011-11-09 00:28:04 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\DHH66sWWK7EL9TZ

2011-11-09 00:27:58 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\IyyyxxA1uvS2

2011-11-09 00:27:50 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\v000uucS1i

2011-11-09 00:27:43 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\hNNyyxAA1uv2oF3

2011-11-09 00:27:37 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\A000yccA1iv2

2011-11-09 00:27:30 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\mVVVrzzONtxAuc2

2011-11-09 00:27:23 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\OPPPNyycA1uv2

2011-11-09 00:27:15 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\y999hTTXqjUCkIr

2011-11-09 00:27:08 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\LjjUUVellItzPyA

2011-11-09 00:27:00 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\ByyxxA00uv

2011-11-09 00:26:53 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\EJJJ7ddEL8gRqhX

2011-11-09 00:26:45 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\r2oobbF3p

2011-11-09 00:26:38 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\boonnF44am5sW7d

2011-11-09 00:26:32 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\IVrrzzONtxA0cSi

2011-11-09 00:26:25 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\qKK88gRRZ9hXwUV

2011-11-09 00:26:18 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\KOOONttxP0uc1iD

2011-11-09 00:26:10 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\fTXXwwjUCelIB

2011-11-09 00:26:03 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\DqqqjjYCwkI

2011-11-09 00:25:57 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\w333pmmG5aQJdW8

2011-11-09 00:25:49 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\nrrrlOOBtxPycSi

2011-11-09 00:25:43 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\iQHHH6dWK7

2011-11-09 00:25:35 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\GnFF44pmH5sQ7dK

2011-11-09 00:25:28 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\GaaaQHH6dWK7RLg

2011-11-09 00:25:22 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\XA11uuvD2obFpm5

2011-11-09 00:25:15 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\GVrrllONtxP0uSi

2011-11-09 00:25:08 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\jbbFF33pnG5QHdW

2011-11-09 00:25:02 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\coobbF44pmGs

2011-11-09 00:24:56 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\OcccS11ivD3oF

2011-11-09 00:24:49 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\uaaaQJJ6dWK8RLh

2011-11-09 00:24:42 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\UyyycAA1ivD2nF

2011-11-09 00:24:36 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\EaammH66sW7fE8g

2011-11-09 00:24:29 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\pG55aaQJ6

2011-11-09 00:24:23 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\XAA11iivD2oF4mH

2011-11-09 00:24:15 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\xuvvSS2ibF3pG5Q

2011-11-09 00:24:08 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\RccSS1iivD3nFam

2011-11-09 00:24:01 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\mQQQHH6sWK7fL9T

2011-11-09 00:23:54 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\O22oobF44pG5sJd

2011-11-09 00:23:48 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\FDDD3oonF4am

2011-11-09 00:23:42 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\LbDDD3pnG4aQHsK

2011-11-09 00:23:35 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\cFF33pmmG5aJ

2011-11-09 00:23:28 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\RmmHH5sWWJdELgR

2011-11-09 00:23:21 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\CooobFF3pmG5QJd

2011-11-09 00:23:14 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\uhhYYCwwkUVl

2011-11-09 00:23:07 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\piiibFF3pnG5QHd

2011-11-09 00:23:00 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\EKKK88gRZ9

2011-11-09 00:22:53 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\S77ffRLL9gTqjCe

2011-11-09 00:22:46 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\lVVVeelIB

2011-11-09 00:22:39 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\VnnnG44aQH6sK7E

2011-11-09 00:22:33 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\Q222ibbF3pn5aQ6

2011-11-09 00:22:25 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\e555ssWJ7dELgRq

2011-11-09 00:22:18 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\gLLL9hhTXqj

2011-11-09 00:22:12 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\UssQQJ7ddE8

2011-11-09 00:22:05 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\J000uccS1ibDon4

2011-11-09 00:21:58 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\rFF33pmGG

2011-11-09 00:21:51 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\J555sWWJ7dELgRq

2011-11-09 00:21:44 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\wbbbF33pnG

2011-11-09 00:21:38 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\seeelIIBtzPycAu

2011-11-09 00:21:31 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\iiiibbD3onG4mHs

2011-11-09 00:21:23 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\tooobFF4pm

2011-11-09 00:21:15 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\lyyxxA0uuv2ib3n

2011-11-09 00:21:06 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\aG444aQH6sWK7E9

2011-11-09 00:20:58 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\fhhYYXwkUVelOtP

2011-11-09 00:20:49 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\jsssQJJ6dEKfR

2011-11-09 00:20:41 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\OvvvS22ibF3nGaQ

2011-11-09 00:20:33 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\ENNttxP0ucS1iDo

2011-11-09 00:20:24 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\oaammH55sW7dE8g

2011-11-09 00:20:12 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\xfffRLL9hTXqUCk

2011-11-09 00:20:02 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\ovvSS2ibF3pn5aH

2011-11-09 00:19:53 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\lIIVVrlONtxP0c1

2011-11-09 00:19:44 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\dEEEL88gTZqh

2011-11-09 00:19:34 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\KtxxAA0ucS

2011-11-09 00:19:23 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\xiibbF3ppn5ad9q

2011-11-09 00:19:12 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\GKKK8ffRZ9hXw

2011-11-09 00:19:04 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\VIIIBrrzONyA

2011-11-09 00:18:56 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\wcSS11ibD3on4aH

2011-11-09 00:18:48 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\H4ppmmG5sQJ

2011-11-09 00:18:39 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\NmmmG55aQJ6WK8R

2011-11-09 00:18:30 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\C333pnnG5aQHdW7

2011-11-09 00:18:23 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\FdddEKK8g

2011-11-09 00:18:16 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\WNNttxP00uS1iD3

2011-11-09 00:18:09 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\JsssQJJ6d

2011-11-09 00:18:02 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\TEELL8ggTZhYCkU

2011-11-09 00:17:55 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\odddEKK8fRZhTwj

2011-11-09 00:17:47 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\m444ammH6s

2011-11-09 00:17:40 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\e88ffRZZ9hTwjC

2011-11-09 00:17:32 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\tQHH66sWK7fE9gZ

2011-11-09 00:17:26 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\tZZZ9hhTXwjUelB

2011-11-09 00:17:20 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\y55ssQQJ7dE8gZ9

2011-11-09 00:17:13 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\uWJJ77fEL8gT

2011-11-09 00:17:07 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\q0uuvvS2ibF3pGa

2011-11-09 00:16:59 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\U666sWWJ7fELgTq

2011-11-09 00:16:51 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\WjjUUVeelIBz

2011-11-09 00:16:43 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\YtttxAA0ucS2bDp

2011-11-09 00:16:35 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\EyyccS1iiD3on4m

2011-11-09 00:16:27 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\wsssQJJ7dEK8RZh

2011-11-09 00:16:18 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\kH666dWK7fRL9Tq

2011-11-09 00:16:11 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\CyyycSS1ivD

2011-11-09 00:16:03 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\foobbF33pm5aQ

2011-11-09 00:15:56 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\T000uucS1ibDon4

2011-11-09 00:15:48 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\ywwwjUUVelI

2011-11-09 00:15:42 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\o33oonF44mH5sJd

2011-11-09 00:15:34 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\P66ddWK88RL9hXj

2011-11-09 00:15:28 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\PhhYYXwkUVelOtP

2011-11-09 00:15:21 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\Z444aQQH6sW7fL9

2011-11-09 00:15:14 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\jrrrzzPNyxA1v

2011-11-09 00:15:08 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\qWWWJJ7dEL8gZqY

2011-11-09 00:15:00 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\xKKK8ffRL9hXqjC

2011-11-09 00:14:53 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\oVrrllOBtxP

2011-11-09 00:14:47 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\h333ppnG5aQHdW7

2011-11-09 00:14:39 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\ThhhYXXwj

2011-11-09 00:14:31 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\y3ppmmG5aQJ6WK

2011-11-09 00:14:22 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\WuuvvS22ibFpn5a

2011-11-09 00:14:16 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\XgggRRZ9hYXwUVl

2011-11-09 00:14:08 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\CHH66sWWK7fL9T

2011-11-09 00:14:01 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\uxxAA1uvS

2011-11-09 00:13:54 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\OnnnG44amH6sJ

2011-11-09 00:13:47 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\t2oobbF3pmG5QJd

2011-11-09 00:13:40 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\AvvvD22onF4p

2011-11-09 00:13:32 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\J11uuvSS2ob3

2011-11-09 00:13:26 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\iyyyccS1ivD3nFa

2011-11-09 00:13:18 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\yzzzPPNyxA1uS2

2011-11-09 00:13:09 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\HuuucSS2ibD3nGa

2011-11-09 00:13:01 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\YxPP00ycS1ivDoF

2011-11-09 00:12:53 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\o111uvDD2ob

2011-11-09 00:12:46 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\P4aaQQH6sWK7EL

2011-11-09 00:12:38 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\VbFF44pmG

2011-11-09 00:12:32 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\FOOBBtxxP0yS1vD

2011-11-09 00:12:25 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\HfffRLL9hTXqUCk

2011-11-09 00:12:18 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\awwwkUUVelOBzPy

2011-11-09 00:12:11 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\heeekIIBrzOyx0u

2011-11-09 00:12:03 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\D11iivD22oF4pH5

2011-11-09 00:11:57 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\GrrllONttx0uc1i

2011-11-09 00:11:51 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\TfffRLL9hTXqUCk

2011-11-09 00:11:43 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\YqqqhYYCwkUVlOt

2011-11-09 00:11:36 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\RQQHH6ddWK7RLgT

2011-11-09 00:11:27 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\ouuccS22ibDpn4a

2011-11-09 00:11:19 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\eOOBBtxxP0cS1v

2011-11-09 00:11:11 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\aAAA1uuvD2ob4pG

2011-11-09 00:11:03 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\s000uccS2ib3pG4

2011-11-09 00:10:55 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\SwwkkUVVel

2011-11-09 00:10:48 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\ukkIIBrrz

2011-11-09 00:10:41 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\XPP00yccA1vD2nF

2011-11-09 00:10:34 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\WtttxPP0ucS1bDo

2011-11-09 00:10:28 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\yIIBBrzzONyA0vS

2011-11-09 00:10:22 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\OwwwjUUVelIBzPy

2011-11-09 00:10:16 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\jLL88gTTZqhCwUV

2011-11-09 00:10:09 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\BQQQH66dWK7fL9T

2011-11-09 00:10:03 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\XbbbF33pmG5QJdW

2011-11-09 00:09:57 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\LccAA11ivD2nFpm

2011-11-09 00:09:51 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\StttxPP0ucSibDo

2011-11-09 00:09:45 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\FjUUCCekIBrzOyA

2011-11-09 00:09:38 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\EXXXwjjUVe

2011-11-09 00:09:32 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\VXXwwkUUVeOBtP0

2011-11-09 00:09:26 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\QgggTZZqjYCkIVl

2011-11-09 00:09:20 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\tKK88fRRL9hXqUC

2011-11-09 00:09:12 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\pLL88gTTZqYCwUV

2011-11-09 00:09:06 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\Z9ggTTXqj

2011-11-09 00:08:59 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\pcccA11uvD2oF4m

2011-11-09 00:08:53 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\qsssWJJ7fEL8TZh

2011-11-09 00:08:45 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\fGG55sQQJ6EK8RZ

2011-11-09 00:08:39 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\uLLL8ggRZqhX

2011-11-09 00:08:33 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\z666sWWK7fELg

2011-11-09 00:08:27 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\L000uuvS2ibFpn5

2011-11-09 00:08:19 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\LmmmH66sWJ7ELgT

2011-11-09 00:08:11 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\mYXXwwjUVelIt

2011-11-09 00:08:03 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\BBBBrrzONyxAuv2

2011-11-09 00:07:55 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\QxxxPP0ycS1iD3n

2011-11-09 00:07:47 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\wKKK8fRRL9hXqUe

2011-11-09 00:07:39 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\TKK77fRRL

2011-11-09 00:07:32 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\aUUVVellIB

2011-11-09 00:07:26 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\OXXXwkkUVelOt

2011-11-09 00:07:20 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\njjjYCCwkIVlOtx

2011-11-09 00:07:14 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\EqqjjUCeekBrzNx

2011-11-09 00:07:07 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\TddEEKK8gRZhYwj

2011-11-09 00:07:01 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\w33oonG44mH6sJf

2011-11-09 00:06:54 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\E6ddWWK8fRL9TXj

2011-11-09 00:06:47 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\gHH55sWJJdEL8R

2011-11-09 00:06:40 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\DK77ffRL9gT

2011-11-09 00:06:33 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\ossQQJ77dEKgR9h

2011-11-09 00:06:25 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\R55aaQHH6dW7fL9

2011-11-09 00:06:18 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\ussQQJ77dE8g

2011-11-09 00:06:11 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\xxxAA0uuvSibFp

2011-11-09 00:06:03 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\noonnG4aaH6sW7E

2011-11-09 00:05:56 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\YeellIBrrzNyx1v

2011-11-09 00:05:49 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\AhhhYXXwk

2011-11-09 00:05:40 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\hEEEK88fRZ9hXwU

2011-11-09 00:05:31 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\EddWWK88fR

2011-11-09 00:05:23 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\xCCCwkkIVrlNtx0

2011-11-09 00:05:16 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\UCCeelIBBrPNyAu

2011-11-09 00:05:08 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\zWWWK77fRL

2011-11-09 00:05:01 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\XellIIBtzPNyA

2011-11-09 00:04:54 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\uaaQQH66s

2011-11-09 00:04:46 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\nccAA1ivv2onFpH

2011-11-09 00:04:38 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\dQQQH66dW

2011-11-09 00:04:31 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\QPP00ycSSiv

2011-11-09 00:04:24 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\UqqqjjYCekIVzOt

2011-11-09 00:04:18 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\ZfffRLL9h

2011-11-09 00:04:12 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\CmmmH55sQJ7dK8R

2011-11-09 00:04:06 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\dsssWJJ7fELgTqh

2011-11-09 00:03:59 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\YCeellIBrzPNxAu

2011-11-09 00:03:52 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\SqhhYYCwkUVrO

2011-11-09 00:03:44 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\kkkIIBrzzNyxAu

2011-11-09 00:03:38 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\F88ggRZZ9hXw

2011-11-09 00:03:31 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\nTTXXqjjYCeI

2011-11-09 00:03:23 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\mkkUUVellOtzP

2011-11-09 00:03:17 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\cwwwkIIVrlOtxPu

2011-11-09 00:03:09 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\PYYXXwjUUelIBzN

2011-11-09 00:03:01 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\IdddWKK8fRLh

2011-11-09 00:02:54 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\tccSS1ivvD

2011-11-09 00:02:47 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\SrrrzzONtx

2011-11-09 00:02:41 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\TPNNyyxA1uvSob3

2011-11-09 00:02:32 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\QbbFF3pnnGaQHdK

2011-11-09 00:02:25 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\chhhYYXwkUVe

2011-11-09 00:02:16 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\zZ9hhTXXwjUelBz

2011-11-09 00:02:07 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\iIIIBrrzPNyA1vS

2011-11-09 00:01:57 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\issQQJ6dEK8fR

2011-11-09 00:01:48 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\HkkkIBBrzONxAu

2011-11-09 00:01:40 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\PZZqqhYCCwU

2011-11-09 00:01:31 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\AVVeelOBBzP0yAi

2011-11-09 00:01:22 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\TKKK8ggRZ9hYwjV

2011-11-09 00:01:13 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\ypppmGG5aQJ6WKf

2011-11-09 00:01:05 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\lQHH66sWK7fE9gZ

2011-11-09 00:00:56 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\FQQHH6ssWK7ELgT

2011-11-09 00:00:47 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\FEELL8gTT

2011-11-09 00:00:37 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\SmmmH55sWJ7EL

2011-11-09 00:00:30 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\jNyyxxA1uvS2bFp

2011-11-09 00:00:22 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\PmmHH6sWWJfELgZ

2011-11-09 00:00:16 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\k555aQQJ6dK8RLh

2011-11-09 00:00:08 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\jwwkkUVVel

2011-11-09 00:00:02 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\nVVVrrzONtxAuc2

2011-11-08 23:59:54 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\ccccA11iv

2011-11-08 23:59:48 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\FEELL9gTTZjYCkV

2011-11-08 23:59:41 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\hrrzzPNNyxAuv2o

2011-11-08 23:59:35 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\gJJJ7ddEK8g

2011-11-08 23:59:28 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\INNNtxxP0ucSib3

2011-11-08 23:59:22 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\CKKK8ffRL9h

2011-11-08 23:59:15 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\OzPP00ycA1iv2oF

2011-11-08 23:59:09 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\BfffELL9gT

2011-11-08 23:59:03 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\C000uvvS2ibFpn5

2011-11-08 23:58:56 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\CpppmHH5sQJdEKg

2011-11-08 23:58:49 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\FqqjjYCCwkVrlNt

2011-11-08 23:58:43 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\Y1uuvvS2ob

2011-11-08 23:58:36 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\oiivvD2oon4pm5Q

2011-11-08 23:58:30 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\DjjYYCwkkIrlOt

2011-11-08 23:58:23 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\tKKK88fRL9hTq

2011-11-08 23:58:17 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\O111ivvD2on4pH5

2011-11-08 23:58:10 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\LzzOONttxA0

2011-11-08 23:58:03 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\nAA11uvDD2bF

2011-11-08 23:57:55 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\cpppnGG4aQHsW7f

2011-11-08 23:57:48 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\HmmHH5ssQJ7EKg

2011-11-08 23:57:41 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\wZZqqjYYCwkVrON

2011-11-08 23:57:34 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\xooobFF4pmGsQJd

2011-11-08 23:57:27 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\RPPP0uucS1ib3oG

2011-11-08 23:57:19 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\YeeellIBtzPNc

2011-11-08 23:57:12 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\a99ggTZqqjCwkVl

2011-11-08 23:57:05 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\zggRRZ99hYXjU

2011-11-08 23:56:58 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\L666ssWJ7fELgTq

2011-11-08 23:56:51 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\ebFF33pmG5aQ6dK

2011-11-08 23:56:44 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\P33oonnF4am5sJ

2011-11-08 23:56:37 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\C3ppnnG5aQH6WKf

2011-11-08 23:56:31 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\tGG55sQQJ6dK8RZ

2011-11-08 23:56:22 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\TFF33pnG5aQH6W7

2011-11-08 23:56:16 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\vpppmHH5sQJ7E

2011-11-08 23:56:08 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\t55aaQJJ6dK8fL9

2011-11-08 23:56:00 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\HzzPP0yccAivDo

2011-11-08 23:55:54 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\KzzzOONtxA0uS2b

2011-11-08 23:55:47 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\HZZ99hYXXwUVeIt

2011-11-08 23:55:39 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\KdWWKK7fRL9gTqY

2011-11-08 23:55:32 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\oQQQJJ7dEK8gZ9Y

2011-11-08 23:55:24 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\kRRRL99gTXqjCe

2011-11-08 23:55:17 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\Q55ssQJJ7dE8gZ9

2011-11-08 23:55:10 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\AbbDD3pnG4aQHsK

2011-11-08 23:55:02 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\SDDD3oonF4aH5sJ

2011-11-08 23:54:55 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\TppnnG4aQH6sW7E

2011-11-08 23:54:47 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\gELL88gRZqh

2011-11-08 23:54:41 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\TeekkIIVrzOt

2011-11-08 23:54:33 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\DttxxP0yyc1iv3n

2011-11-08 23:54:26 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\hxxAA0uucS2b

2011-11-08 23:54:18 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\PnnnF44amH5WJ7E

2011-11-08 23:54:11 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\KaaaQHH6dWKfR9g

2011-11-08 23:54:04 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\QBBBttxP0ycSiv3

2011-11-08 23:53:57 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\ozOOONtxA0u

2011-11-08 23:53:49 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\diiivDD3onF4mHs

2011-11-08 23:53:42 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\TeeekIIBrzONxAu

2011-11-08 23:53:34 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\UTZZZqhYCwk

2011-11-08 23:53:27 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\l3pppmG5a

2011-11-08 23:53:20 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\fXXwwkUUVelBtP0

2011-11-08 23:53:13 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\EiibbFF3pnGaQ

2011-11-08 23:53:06 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\GEKKK8gRZ9hYXjV

2011-11-08 23:53:00 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\dNtttxP0ucS1iDo

2011-11-08 23:52:53 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\i333pnnG5aQ6dK7

2011-11-08 23:52:46 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\GnnFF4ppmH5QJdK

2011-11-08 23:52:39 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\GaQQHH6dWK7fL9T

2011-11-08 23:52:30 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\LCCCwkkIVrlOtx0

2011-11-08 23:52:22 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\CvvvD22onF4mHsQ

2011-11-08 23:52:14 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\t666dWWK7fRLgTq

2011-11-08 23:52:05 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\uG44aaQH6

2011-11-08 23:51:58 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\CyyccAA1ivDon4

2011-11-08 23:51:49 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\T999hTTXw

2011-11-08 23:51:42 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\BP00uucS1ibDon4

2011-11-08 23:51:34 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\byyyccA1uvD2bF

2011-11-08 23:51:28 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\r444ammH6sW7fL8

2011-11-08 23:51:21 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\D777fRRL9hTXjU

2011-11-08 23:51:14 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\LsssQJJ7dEKgR9h

2011-11-08 23:51:07 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\suuucSS2ibD3nGa

2011-11-08 23:51:00 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\g888fRRZ9hT

2011-11-08 23:50:54 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\yBtttxP0ycS1iD

2011-11-08 23:50:47 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\d44aaQHH6sK7fL9

2011-11-08 23:50:41 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\izzzPNNyxA1uS

2011-11-08 23:50:35 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\IgggRZZqh

2011-11-08 23:50:28 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\dbbDD3pnG4aQHsK

2011-11-08 23:50:22 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\F88ffRZ99TXwjCl

2011-11-08 23:50:15 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\vccAA1ivD2onF

2011-11-08 23:50:08 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\FrzzOONyxA0uS2b

2011-11-08 23:50:01 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\OEEKK8gRRZhYXjU

Link to post
Share on other sites

2011-11-08 23:49:54 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\TqjjjYCekIVrONx

2011-11-08 23:49:47 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\x888fRRZ9hTwjVe

2011-11-08 23:49:38 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\edddWKK8fRL

2011-11-08 23:49:30 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\pONNttxP0

2011-11-08 23:49:24 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\K666ddWK8fRLhTq

2011-11-08 23:49:18 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\OiivvD22on4pm

2011-11-08 23:49:11 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\EYYYCwwkUVrlBtP

2011-11-08 23:49:05 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\WpppnGG5aQH6WKf

2011-11-08 23:48:58 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\VNNNyccA1uvD

2011-11-08 23:48:52 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\AWJJ77fEL8gTqhC

2011-11-08 23:48:46 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\uiiibbF3pnG5QHd

2011-11-08 23:48:39 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\p9hhTTXwjUCeIBz

2011-11-08 23:48:33 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\oDD33onnF4mH5W

2011-11-08 23:48:26 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\daaQQH6ddK7f

2011-11-08 23:48:19 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\ieellOBttz0yc1v

2011-11-08 23:48:12 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\D111iibD3onGam6

2011-11-08 23:48:05 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\yPPNNyccA1uD2bF

2011-11-08 23:47:58 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\hggTTZqhhYwk

2011-11-08 23:47:52 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\zCCCeekIBr

2011-11-08 23:47:44 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\hibbDD3onG4aH6W

2011-11-08 23:47:37 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\HTTTXqqjUCekBrO

2011-11-08 23:47:29 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\OkkkIVVrlONtP0c

2011-11-08 23:47:21 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\LddEEK8ggR9

2011-11-08 23:47:13 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\JQQQH66dWK7fL9T

2011-11-08 23:47:07 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\affRRZ99hTXjUel

2011-11-08 23:47:00 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\OhhYYCwkUVrlOtP

2011-11-08 23:46:53 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\CjjjUCCekIB

2011-11-08 23:46:47 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\teellOBBtz0yc1i

2011-11-08 23:46:38 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\EooobbF3pmG5QJd

2011-11-08 23:46:31 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\uttxxP0yc

2011-11-08 23:46:25 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\yKKK77fRL9gTqjC

2011-11-08 23:46:18 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\vmmHH5sWWJ

2011-11-08 23:46:09 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\xuuvvS2ooF3pm5Q

2011-11-08 23:46:03 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\xppmmG5sQJ6

2011-11-08 23:45:58 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\YwkkUUVelOBtP

2011-11-08 23:45:52 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\PllOOBttxP0cSiv

2011-11-08 23:45:47 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\JooonnG4amH6

2011-11-08 23:45:42 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\D77ffELL9gZqjCw

2011-11-08 23:45:33 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\L444ammH5sWJdE8

2011-11-08 23:45:28 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\t888gTTZqhYCk

2011-11-08 23:45:21 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\iFF33pmmG5QJ6

2011-11-08 23:45:14 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\SVVeelOOBtz0yA1

2011-11-08 23:45:07 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\BVVVrrzONtxAuc2

2011-11-08 23:44:46 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\jAAA1uuvD2

2011-11-08 23:44:39 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\PLLL8ggTZqhYwkV

2011-11-08 23:44:33 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\luuccS22i

2011-11-08 23:44:27 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\b111uvvS2ob3pm

2011-11-08 23:44:20 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\neellOBBtzPy

2011-11-08 23:44:13 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\diiibFF3pnG5QHd

2011-11-08 23:44:07 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\EJJJ7ddEK8gR9hX

2011-11-08 23:43:58 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\R666dWWK7fRLgTq

2011-11-08 23:43:52 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\e88ggRZZ9hYwjVe

2011-11-08 23:43:44 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\FaaQQH66d

2011-11-08 23:43:38 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\OPPNNyccA1uD2bF

2011-11-08 23:43:31 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\POOOBttxP0y

2011-11-08 23:43:24 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\HWWKK8ffRLhTXjU

2011-11-08 23:43:18 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\KFF44pmmH5sJ7EK

2011-11-08 23:43:11 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\jHH66sWK7fEL9Tq

2011-11-08 23:43:04 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\fgggRZZ9hYXjUel

2011-11-08 23:42:57 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\u7ddEEL8g

2011-11-08 23:42:50 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\F55aaQJJ6dW8fL9

2011-11-08 23:42:43 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\kF44ammH5sWJdE8

2011-11-08 23:42:36 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\VHHH6ddWK7fL9TX

2011-11-08 23:42:30 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\F111uvvS2obFpm5

2011-11-08 23:42:24 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\FDDD22onF

2011-11-08 23:42:18 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\wPP00uccS1

2011-11-08 23:42:09 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\R4aammH5sWJ7dLg

2011-11-08 23:42:00 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\mKK88gRRZ9hXwUl

2011-11-08 23:41:52 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\yAAA0uuvS2ib3pG

2011-11-08 23:41:45 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\nsssWJJ7dEL8RZh

2011-11-08 23:41:38 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\HQQQH66dWK7fL9T

2011-11-08 23:41:32 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\vEEEK88fRZ9hXwU

2011-11-08 23:41:26 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\lZZ99hYXX

2011-11-08 23:41:19 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\LGGG4aamH6sW7fL

2011-11-08 23:41:13 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\yGG55aQQJ6dK8R

2011-11-08 23:41:06 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\HL888gRZqhYXwU

2011-11-08 23:40:58 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\FmQQJJ6dE

2011-11-08 23:40:48 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\lBBBrzzPNyxAuv2

2011-11-08 23:40:40 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\IKK77fELL

2011-11-08 23:40:31 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\wOOOBttxP0

2011-11-08 23:40:25 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\NssWWK77fELgTqj

2011-11-08 23:40:18 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\o88ffRZ99hXwjC

2011-11-08 23:40:12 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\s000yccS1ivDon4

2011-11-08 23:40:05 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\mL99ggTXqjYCe

2011-11-08 23:39:59 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\EAAA11uvD2ob4pG

2011-11-08 23:39:53 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\TVeellOBtzP0cAi

2011-11-08 23:39:47 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\CgggTZZqjYCwIVl

2011-11-08 23:39:39 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\robbbF4pmG5sQ6E

2011-11-08 23:39:32 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\mkkkIVVrlONtP

2011-11-08 23:39:26 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\mAA11uvvS2oF3

2011-11-08 23:39:17 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\WYCCwwkIVrlOtx0

2011-11-08 23:39:10 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\TssQQJ66dE8fR9h

2011-11-08 23:39:02 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\mYYCCekIIVzONx0

2011-11-08 23:38:54 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\FEELL8ggTZqY

2011-11-08 23:38:46 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\bPPPNNycA1uv2o

2011-11-08 23:38:38 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\dxxxAA0ucS2i

2011-11-08 23:38:30 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\ED33oonG4amHsJ8

2011-11-08 23:38:20 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\hOOBBtxxP

2011-11-08 23:38:11 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\ZgRRZZkVlOtzPyc

2011-11-08 23:38:03 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\eBBBrzONyxA

2011-11-08 23:37:56 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\AWJJJ7fEL8gT

2011-11-08 23:37:49 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\e33ppnGG4aH

2011-11-08 23:37:43 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\RRZZ99hTXwjUel

2011-11-08 23:37:35 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\vjjYYCeekIVzOtx

2011-11-08 23:37:27 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\dTZZqqhYCwkUrlB

2011-11-08 23:37:19 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\W11uuvS2obF3

2011-11-08 23:37:11 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\zQQQH6ss7f

2011-11-08 23:37:02 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\kPP00uccS1bD3nG

2011-11-08 23:36:53 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\DzPP00ycA1ivDoF

2011-11-08 23:36:45 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\PxvS22ibF3pn5aH

2011-11-08 23:36:37 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\W444aQQH6sW7fL9

2011-11-08 23:36:29 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\IAAA11ivD2on

2011-11-08 23:36:23 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\tkIIVVrlON

2011-11-08 23:36:14 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\O55ssQ7EhYwUV

2011-11-08 23:36:06 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\pobbbmmG5aQ6

2011-11-08 23:35:59 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\eiibbD33onGam6s

2011-11-08 23:35:48 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\nrrzzONyyx0uv2b

2011-11-08 23:35:39 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\klOONNtxP0uc1iD

2011-11-08 23:35:30 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\sXXwwkUUVelBtP0

2011-11-08 23:35:22 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\CyyxxA1uuv2ob3

2011-11-08 23:35:15 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\HZZZqjjYCwkIrlN

2011-11-08 23:35:08 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\jGGG55aQH6dW7

2011-11-08 23:35:02 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\j888gRRZ9hYXj

2011-11-08 23:34:55 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\vnGG44amH6

2011-11-08 23:34:47 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\XJJ77dEEK8gZ9YX

2011-11-08 23:34:39 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\Ummm5aQQJ6dK8RL

2011-11-08 23:34:30 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\accSS2iibpQ6W

2011-11-08 23:34:23 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\fwwwjjUVelIBz

2011-11-08 23:34:16 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\hHH66sWK7fEL

2011-11-08 23:34:07 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\FggTTZqqhYCk

2011-11-08 23:33:58 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\mJJ77dEEL8gZq

2011-11-08 23:33:51 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\xONNyyxA0uvS2b3

2011-11-08 23:33:43 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\CmmHH6ssWJ7ELgT

2011-11-08 23:33:35 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\offfRLL9hTXqUCk

2011-11-08 23:33:27 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\CvvFQfTXqjYCkIr

2011-11-08 23:33:17 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\diiibFF3pnG5

2011-11-08 23:33:08 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\faaamHH6sWJ7ELg

2011-11-08 23:33:00 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\q0yyycA1ivD2oFp

2011-11-08 23:32:51 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\jm6ZTTXwjU

2011-11-08 23:32:42 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\P99hhTXXqjC

2011-11-08 23:32:35 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\H22oonFF4pm5sJ7

2011-11-08 23:32:28 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\kLL99hTTXqjCeIB

2011-11-08 23:32:21 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\RtttzPP0ycA1vDo

2011-11-08 23:32:13 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\TzPPNNyxA

2011-11-08 23:32:05 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\IWWWJ77fE

2011-11-08 23:31:58 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\BRRRZ99hTX

2011-11-08 23:31:51 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\ewwwkUUVrlOBxPy

2011-11-08 23:31:43 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\AGG55sQQJ

2011-11-08 23:31:36 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\gnnGG4aQQ6sWKfL

2011-11-08 23:31:28 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\qnnnF44pmH5QJdE

2011-11-08 23:31:18 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\FdEKK8ggRZhYXjU

2011-11-08 23:31:09 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\f888fRRZ9hTXj

2011-11-08 23:31:02 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\QF44aamH5sWJ7E

2011-11-08 23:30:54 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\xuuvvD22ob4

2011-11-08 23:30:46 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\iCCeekIBBzONySi

2011-11-08 23:30:38 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\UZZqqjYCCwIVrOt

2011-11-08 23:30:31 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\mjjjUCCekIBrO

2011-11-08 23:30:22 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\ZVVVrzzONtx0uS2

2011-11-08 23:30:13 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\vibbDD3onG4aH6W

2011-11-08 23:30:05 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\xBBBtzzP0ycAiv

2011-11-08 23:29:57 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\SzzzONNyxA0vSib

2011-11-08 23:29:50 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\cvvvD22onF4pH5Q

2011-11-08 23:29:43 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\tIIVVrzOONxA0cS

2011-11-08 23:29:35 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\GUVVrrlOBtxPyc1

2011-11-08 23:29:27 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\QUUCCelIIBzPNxA

2011-11-08 23:29:20 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\P8gggTZqhYCwkVl

2011-11-08 23:29:12 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\ZJJ77dEKK8RZ9YX

2011-11-08 23:29:05 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\v7ffEEL9gTZqj

2011-11-08 23:28:56 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\czzzPP0ycA1iD2n

2011-11-08 23:28:48 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\bPPPNyyxA1uS2bF

2011-11-08 23:28:42 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\u777dEEL8

2011-11-08 23:28:36 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\U222ibbD3pn4aQ6

2011-11-08 23:28:29 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\AS222obF3

2011-11-08 23:28:22 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\VmmHH5ssWJ7E

2011-11-08 23:28:15 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\hoobbF33pmGaQ6d

2011-11-08 23:28:07 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\FDD33onnG4aH6WJ

2011-11-08 23:28:00 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\ByyyxAA1uvSobFp

2011-11-08 23:27:53 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\nEEELL8gRZqhXwU

2011-11-08 23:27:46 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\PVrrzzONtxA0cSi

2011-11-08 23:27:38 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\oyyccS1ivD3

2011-11-08 23:27:32 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\fFF33pnnG5

2011-11-08 23:27:25 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\ZooobbF4pmG5QJd

2011-11-08 23:27:18 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\J333onnG4amH

2011-11-08 23:27:10 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\xyyycvvD2onpm5Q

2011-11-08 23:27:01 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\bRZZ99hYXwjUelB

2011-11-08 23:26:52 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\tekkkIBrzONyx

2011-11-08 23:26:45 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\fRZZqqhYXwkUelB

2011-11-08 23:26:39 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\INNNtxxP0uc1ib3

2011-11-08 23:26:33 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\UGGG5aaQH6dW7L

2011-11-08 23:26:03 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\L55aaQJJ6dK8fL9

2011-11-08 23:25:57 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\SWWJJ7ddELgRZhY

2011-11-08 23:25:49 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\VggTTXXqjYCkIrz

2011-11-08 23:25:42 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\DqqqhYYXwkUVlOt

2011-11-08 23:25:35 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\uAAA0uuvS

2011-11-08 23:25:28 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\eH55ssQJ7dE

2011-11-08 23:25:20 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\J333pnnG5

2011-11-08 23:25:12 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\jnFF44amH5sW7dL

2011-11-08 23:25:03 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\SAA11ivvD2oF4mH

2011-11-08 23:24:57 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\WucccS1ibD3o

2011-11-08 23:24:51 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\dvvvS22ibF3pG5Q

2011-11-08 23:24:44 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\xAA11ivvD2oF4m

2011-11-08 23:24:37 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\wQHH66sWK7fE9gZ

2011-11-08 23:24:30 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\XDDD2oobF4pm5sJ

2011-11-08 23:24:24 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\FcSS11ivD3onFaH

2011-11-08 23:24:17 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\FG44aaQH6sWKfE9

2011-11-08 23:24:10 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\TXwwkkUVelOBzPy

2011-11-08 23:24:01 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\oXXwwjUUVelBtPN

2011-11-08 23:23:54 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\raaammH6sWJ7ELg

2011-11-08 23:23:48 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\RyyyxAA0uvS2bF

2011-11-08 23:23:39 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\IcccS11ibD3oG4m

2011-11-08 23:23:31 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\S777dEEL8gRqhXw

2011-11-08 23:23:24 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\t22iibF33pG5aHd

2011-11-08 23:23:16 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\HtttxPP0ycSiv3

2011-11-08 23:23:10 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\osWWKK7fEL9gZqY

2011-11-08 23:23:02 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\YBBBtzzP0ycAiv2

2011-11-08 23:22:54 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\jxxAA0uuvS2bFpn

2011-11-08 23:22:46 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\qKKK77fEL9TZjYw

2011-11-08 23:22:38 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\E888ggRZ9h

2011-11-08 23:22:31 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\u444aQQH6sWK

2011-11-08 23:22:22 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\pllOONttxP0cSib

2011-11-08 23:22:14 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\ApppmHH5sQJdE8g

2011-11-08 23:22:04 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\z11uuvDD2ob4pG5

2011-11-08 23:21:55 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\KSSS2oobF3pm5

2011-11-08 23:21:48 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\jJJJ7ffEL8gZqYC

2011-11-08 23:21:40 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\vAA11uvvD2

2011-11-08 23:21:33 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\DaammH6ssW7

2011-11-08 23:21:25 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\dooonFF4p

2011-11-08 23:21:16 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\o66ddEK8fRZ9hXj

2011-11-08 23:21:06 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\WrzzPPNyxA1uS2b

2011-11-08 23:20:57 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\KpppmGG5aQJdWKf

2011-11-08 23:20:47 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\gNNyyxA11vS2oFp

2011-11-08 23:20:34 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\NnnGG4amH6s

2011-11-08 23:20:22 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\IDDD2oobF4pG5QJ

2011-11-08 23:20:10 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\TQQQH66sWK7fL9T

2011-11-08 23:19:52 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\CgRZZqhhXwkUVlB

2011-11-08 23:19:39 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\bxAAA1uvS2obFpG

2011-11-08 23:19:28 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\tmmmHH5sQJ7dK8R

2011-11-08 23:19:18 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\Q3ooonF4amH

2011-11-08 23:19:08 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\krllOOBtxP0

2011-11-08 23:18:58 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\p333onnF4am5sJd

2011-11-08 23:18:47 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\BQHH66dWK7fR9

2011-11-08 23:18:32 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\PnnnG55aQH6WKfR

2011-11-08 23:18:20 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\xYYYXwwkUVe

2011-11-08 23:18:07 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\SBBBrzzONy

2011-11-08 23:17:58 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\yiibbD33pnG

2011-11-08 23:17:48 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\xBBrrzONNyA0vSi

2011-11-08 23:17:38 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\lXqqjjUCekIBrOy

2011-11-08 23:17:29 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\TkkkIVVrzONtA0c

2011-11-08 23:17:18 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\XFFF3ppmG5aJ6dK

2011-11-08 23:17:06 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\ZVVrrlOONtx0uS1

2011-11-08 23:16:53 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\CTXXwwjUCelIrPA

2011-11-08 23:16:44 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\vZ99hhTXwjUCl

2011-11-08 23:16:34 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\aIIBBrzzPNxA1

2011-11-08 23:16:26 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\oekkIIVrzONtA0c

2011-11-08 23:16:15 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\D88ffRRL9hTqjCe

2011-11-08 23:16:05 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\DjUUCCelIBr

2011-11-08 23:15:56 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\DuvvvS2ibF3pn5

2011-11-08 23:15:47 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\TRRRL99gTXqjCeI

2011-11-08 23:15:37 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\q66ddWK8fRL9Tqj

2011-11-08 23:15:27 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\Q000uvvS2ib3pn

2011-11-08 23:15:17 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\GrrrzOONyxA0vSi

2011-11-08 23:15:07 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\gkIIBrrzONy

2011-11-08 23:14:58 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\zvSS22ibF3pn5

2011-11-08 23:14:49 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\nuuucSS2ibDpnGa

2011-11-08 23:14:39 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\w333ppnG4aQHsW7

2011-11-08 23:14:29 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\KrrrzzONtxA0cSi

2011-11-08 23:14:20 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\IIIVVrllONxP

2011-11-08 23:14:10 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\lVVrrlONNxP0uSi

2011-11-08 23:13:58 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\ammsgRRZ9hYXl1G

2011-11-08 23:13:46 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\oaaamHH6sWJfE8g

2011-11-08 23:13:37 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\ZDDD3oonF

2011-11-08 23:13:26 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\CtttxAA0ucS2bDp

2011-11-08 23:13:16 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\vCCCekkIVrzNt

2011-11-08 23:13:05 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\ODDD2obbF4mG5

2011-11-08 23:12:54 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\NLL88gRZZqY

2011-11-08 23:12:44 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\d555sQQJ7dEKgR9

2011-11-08 23:12:35 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\j9hhYYXwjUVeIBz

2011-11-08 23:12:24 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\zJJJ7ffEL8gTq

2011-11-08 23:12:14 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\w66ssWJJ7f

2011-11-08 23:12:04 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\S99ggTZZqjCwk

2011-11-08 23:11:52 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\DwwwjUUVelI

2011-11-08 23:11:41 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\yLL88gRZZqYXkUe

2011-11-08 23:11:31 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\xSSS1iivD3on4aH

2011-11-08 23:11:22 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\z88ggRZZ9hYwjVe

2011-11-08 23:11:14 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\iYYCCekkIVzON

2011-11-08 23:11:06 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\cEEELL8gT

2011-11-08 23:10:52 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\B00yycSS1iD3o

2011-11-08 23:10:43 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\rPP00yccA1iD2nF

2011-11-08 23:10:33 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\nPPP0yycA1iv2oF

2011-11-08 23:10:22 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\jHsWWK7fEL9gZjY

2011-11-08 23:10:11 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\NFF3ppnG5aQH6K

2011-11-08 23:09:58 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\clOONttxP0uc1iD

2011-11-08 23:09:42 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\vGaHW7E9ZjCkV

2011-11-08 23:09:29 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\pP00yS3nF4aH5Lq

2011-11-08 23:09:16 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\BssQQJ7ddE8gR9Y

2011-11-08 23:09:04 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\PamH6sJEgqYkVrO

2011-11-08 23:08:49 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\vpppnGG4aQH6W

2011-11-08 23:08:36 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\ovo4msWWJ7E

2011-11-08 23:08:23 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\Ply2GssQJ6dE8f

2011-11-08 23:08:05 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\BIIVVrzOONxA0

2011-11-08 23:07:52 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\j888gTTZqhYwt1F

2011-11-08 23:07:30 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\shqUIzyu2Fna6KR

2011-11-08 23:07:16 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\vaQQHH6dWK7fL9T

2011-11-08 23:07:03 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\LaammH5sWJ7ELgZ

2011-11-08 23:06:52 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\J0uuuvS2ibF3pGa

2011-11-08 23:06:38 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\HVVVrllONtx0uc1

2011-11-08 23:06:23 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\IkOtAciDnG4aQ6W

2011-11-08 23:06:07 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\WYeNuvD2obFpG5Q

2011-11-08 23:05:50 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\nOOONtt0ucS1iDG

2011-11-08 23:05:33 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\hekkIIBrzONyA0v

2011-11-08 23:05:19 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\LyyxxA00uv2ib3

2011-11-08 23:05:09 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\t8ZTwwelIBrzN

2011-11-08 23:04:56 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\GCCCwkkIVrlNtPu

2011-11-08 23:04:44 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\BjjUUVeBzNc1v

2011-11-08 23:04:27 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\D11iibD33oG4aH

2011-11-08 23:04:14 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\NgZYwUllItzPyc1

2011-11-08 23:04:04 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\T1iiD2oonF4mHsQ

2011-11-08 23:03:54 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\VOBBtxxP0yc1iD3

2011-11-08 23:03:40 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\Hvo4msJd8RqXkV

2011-11-08 23:02:59 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\PSS22ibDD3nG4Q6

2011-11-08 23:02:39 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\CgggTXXqjYC

2011-11-08 23:02:22 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\cyyycAA1uvDo

2011-11-08 23:02:03 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\jBBttzy1D2ob4

2011-11-08 23:01:47 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\T0c1ivvD3on4am5

2011-11-08 23:01:31 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\TRRRL99gTXqYCeI

2011-11-08 23:01:14 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\NlBP0c11ivDon4p

2011-11-08 23:00:54 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\GDHsJd8RXwkVl

2011-11-08 23:00:35 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\sHHH5sQJ7dKgZ9Y

2011-11-08 23:00:23 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\oRRLXjCIrOtAuSi

2011-11-08 23:00:15 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\OzzPP0yycA1vD

2011-11-08 23:00:07 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\IwUeBzNx1

2011-11-08 22:59:59 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\EcSS22ibD3pn4aH

2011-11-08 22:59:50 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\TttxxP0yyS1iv3n

2011-11-08 22:59:42 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\teellIBBtzNyc1u

2011-11-08 22:59:33 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\NaQQQJ6dWK8fR9T

2011-11-08 22:59:25 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\L6dWWK7fRL9gTq

2011-11-08 22:59:16 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\rSS11ibbD3oG

2011-11-08 22:59:07 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\IZhXkVltPyAiDn4

2011-11-08 22:58:58 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\NVVVelIIBtz

2011-11-08 22:58:50 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\u2FF3pmmG

2011-11-08 22:58:40 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\zSS22obbF3mG5Q6

2011-11-08 22:58:25 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\nZZ99hTXXwUCeIB

2011-11-08 22:58:05 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\Uob4GsJdK8R

2011-11-08 22:57:51 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\gSSS22obF3p

2011-11-08 22:57:40 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\Lz0c1ivvD2n

2011-11-08 22:57:32 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\ymmmG55aQJ6dK8R

2011-11-08 22:57:23 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\deekIOyAuv2ib3n

2011-11-08 22:57:13 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\HTTXXqjYYCkIVzN

2011-11-08 22:57:04 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\qHHsKfLgZqYCwIV

2011-11-08 22:56:54 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\PrrrzOONtxA0cS

2011-11-08 22:56:42 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\RtNcu2bpmG5QJdK

2011-11-08 22:56:29 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\HS22oobF3pmGaQ6

2011-11-08 22:56:15 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\j00uucSS2ib3p

2011-11-08 22:56:05 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\F9ggTXXqjYCeIVz

2011-11-08 22:55:54 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\UllIIBrrzPNxAuv

2011-11-08 22:55:44 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\Hy1v22obF4pm5sJ

2011-11-08 22:55:33 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\VmmHH5sWW

2011-11-08 22:55:21 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\fIzNyxxA0uv2iF3

2011-11-08 22:55:10 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\EsssQJJ6dEK8R9h

2011-11-08 22:54:58 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\kssWWK77EL9gZqY

2011-11-08 22:54:41 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\BzzPPNyycAuvDob

2011-11-08 22:54:24 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\RggTTZqjYCwkVrO

2011-11-08 22:54:08 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\lvSSpnGG5aH6dKf

2011-11-08 22:53:55 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\whhhYCCwkUVlOtP

2011-11-08 22:53:44 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\rTTXCkBzy

2011-11-08 22:53:32 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\bccAA1iivD2nFp

2011-11-08 22:53:19 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\Y6KfZhwUel

2011-11-08 22:53:06 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\xCCwkkIVrlONxP

2011-11-08 22:52:49 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\T9hYUlBzNc1vD4m

2011-11-08 22:52:32 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\tUVVrllOBtxPy

2011-11-08 22:52:14 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\ALL88gRRZqhXwUV

2011-11-08 22:52:01 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\W222oobF3

2011-11-08 22:51:49 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\OwwwkkUVrlOBxPy

2011-11-08 22:51:37 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\RRLL99hTXqjUekB

2011-11-08 22:51:25 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\U111ivvD3on4aH5

2011-11-08 22:51:14 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\kE9TqjYYCwIVrO

2011-11-08 22:51:02 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\ZwwwjUVVelItzNy

2011-11-08 22:50:49 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\VddWKR9TqCkVzNx

2011-11-08 22:50:37 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\n00yycA11iD2oFp

2011-11-08 22:50:24 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\SNyyxxA1uvS2oFm

2011-11-08 22:50:04 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\ZjCClIIBrzPy

2011-11-08 22:49:49 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\wJJ77dEKK8RZ9YX

2011-11-08 22:49:33 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\QCCCwkkUVrl

2011-11-08 22:49:15 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\X11i4Jd8Rjt1FQf

2011-11-08 22:48:49 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\NboaHJ8qCUlxy13

2011-11-08 22:48:29 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\LDDD3ppnG4aH6W

2011-11-08 22:48:10 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\bsssWWJ7fEL8TqY

2011-11-08 22:47:47 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\mZZZ9hhYXw

2011-11-08 22:47:22 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\kEEKKggRZ9h

2011-11-08 22:46:43 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\P78Zrtcioa5

2011-11-08 22:46:02 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\E88fZ9hhTXwUBNq

2011-11-08 22:45:39 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\zYCCVOucSib3oGa

2011-11-08 22:45:16 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\XLLRYXVBtPcin

2011-11-08 22:44:56 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\F34m7ffE8

2011-11-08 22:44:33 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\Z6E8ZhXwj

2011-11-08 22:44:16 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\arrllONttx0uc

2011-11-08 22:44:00 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\FxuSb3G5aQH6WKf

2011-11-08 22:43:45 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\zwjjUUCelrzNyAu

2011-11-08 22:43:27 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\fCCeekIVrzONxuS

2011-11-08 22:43:07 1671168 ----a-w- C:\Windows\SysWow64\System Security 2012v121.exe

2011-11-08 22:43:06 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\WyyyxAA0u

2011-11-08 14:26:50 8570192 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{4A708CA4-8A96-4C06-8DCA-08A996069CC3}\mpengine.dll

2011-11-05 04:25:07 -------- d-----w- C:\Windows\.jagex_cache_32

2011-11-03 00:03:45 -------- d-----w- C:\Program Files\UFO Enemy Unknown

2011-11-02 00:02:43 90112 ------w- C:\Windows\unvise32.exe

2011-11-02 00:02:38 94208 ----a-w- C:\Windows\SysWow64\zmbv.dll

2011-11-02 00:01:55 -------- d-----w- C:\Program Files (x86)\XCOM-Total Pack

2011-10-27 11:46:27 -------- d-----w- C:\Program Files (x86)\Common Files\xing shared

2011-10-26 03:00:19 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Roaming\uqm

2011-10-26 03:00:16 -------- d-----w- C:\Program Files (x86)\The Ur-Quan Masters

2011-10-25 20:23:49 6144 ----a-w- C:\Program Files\Internet Explorer\iecompat.dll

2011-10-25 20:23:49 6144 ----a-w- C:\Program Files (x86)\Internet Explorer\iecompat.dll

2011-10-23 04:06:23 -------- d-----w- C:\Program Files (x86)\Bethesda Softworks

2011-10-23 03:27:49 -------- d-----w- C:\Program Files (x86)\DOSBox-0.74

2011-10-16 16:58:20 -------- d-----w- C:\Users\Jia Lin Hong\AppData\Local\Darksiders

2011-10-16 16:51:40 -------- d--h--w- C:\Windows\msdownld.tmp

2011-10-16 16:50:56 -------- d-----w- C:\Windows\SysWow64\directx

2011-10-16 16:50:26 -------- d-----w- C:\Program Files (x86)\THQ

2011-10-15 22:35:20 540688 ----a-w- C:\Windows\System32\d3dx10_39.dll

2011-10-15 22:35:20 1942552 ----a-w- C:\Windows\System32\D3DCompiler_39.dll

2011-10-15 22:35:15 4992520 ----a-w- C:\Windows\System32\D3DX9_39.dll

2011-10-13 11:34:42 -------- d-----w- C:\d3e03495cb65ee162c9fbd5e

2011-10-12 20:03:44 555520 ----a-w- C:\Windows\SysWow64\UIAutomationCore.dll

2011-10-12 20:03:44 332288 ----a-w- C:\Windows\System32\oleacc.dll

2011-10-12 20:03:44 238080 ----a-w- C:\Windows\SysWow64\oleacc.dll

2011-10-12 20:03:43 847360 ----a-w- C:\Windows\System32\oleaut32.dll

2011-10-12 20:03:43 735744 ----a-w- C:\Windows\System32\UIAutomationCore.dll

2011-10-12 20:03:43 563712 ----a-w- C:\Windows\SysWow64\oleaut32.dll

2011-10-12 20:03:43 4096 ----a-w- C:\Windows\SysWow64\oleaccrc.dll

2011-10-12 20:03:43 4096 ----a-w- C:\Windows\System32\oleaccrc.dll

2011-10-12 20:03:30 2409784 ----a-w- C:\Program Files\Windows Mail\OESpamFilter.dat

2011-10-12 20:03:30 2409784 ----a-w- C:\Program Files (x86)\Windows Mail\OESpamFilter.dat

2011-10-12 20:02:45 73216 ----a-w- C:\Windows\System32\MSDvbNP.ax

2011-10-12 20:02:45 69632 ----a-w- C:\Windows\SysWow64\Mpeg2Data.ax

2011-10-12 20:02:45 57856 ----a-w- C:\Windows\SysWow64\MSDvbNP.ax

2011-10-12 20:02:45 375808 ----a-w- C:\Windows\System32\psisdecd.dll

2011-10-12 20:02:45 293376 ----a-w- C:\Windows\SysWow64\psisdecd.dll

2011-10-12 20:02:45 289792 ----a-w- C:\Windows\System32\psisrndr.ax

2011-10-12 20:02:45 217088 ----a-w- C:\Windows\SysWow64\psisrndr.ax

2011-10-12 20:02:45 100352 ----a-w- C:\Windows\System32\Mpeg2Data.ax

.

==================== Find3M ====================

.

2011-11-10 01:37:00 41272 ----a-w- C:\Windows\SysWow64\drivers\mbamswissarmy.sys

2011-10-14 11:37:35 414368 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl

2011-09-30 23:25:35 1147904 ----a-w- C:\Windows\System32\wininet.dll

2011-09-30 23:21:20 56832 ----a-w- C:\Windows\System32\licmgr10.dll

2011-09-30 23:21:00 1538560 ----a-w- C:\Windows\System32\inetcpl.cpl

2011-09-30 23:20:40 132096 ----a-w- C:\Windows\System32\iesysprep.dll

2011-09-30 23:20:39 77312 ----a-w- C:\Windows\System32\iesetup.dll

2011-09-30 23:06:24 916480 ----a-w- C:\Windows\SysWow64\wininet.dll

2011-09-30 23:02:06 43520 ----a-w- C:\Windows\SysWow64\licmgr10.dll

2011-09-30 23:01:51 1469440 ----a-w- C:\Windows\SysWow64\inetcpl.cpl

2011-09-30 23:01:34 71680 ----a-w- C:\Windows\SysWow64\iesetup.dll

2011-09-30 23:01:34 109056 ----a-w- C:\Windows\SysWow64\iesysprep.dll

2011-09-30 22:29:23 479232 ----a-w- C:\Windows\System32\html.iec

2011-09-30 22:07:25 385024 ----a-w- C:\Windows\SysWow64\html.iec

2011-09-30 21:48:19 162816 ----a-w- C:\Windows\System32\ieUnatt.exe

2011-09-30 21:47:04 1638912 ----a-w- C:\Windows\System32\mshtml.tlb

2011-09-30 21:29:54 133632 ----a-w- C:\Windows\SysWow64\ieUnatt.exe

2011-09-30 21:28:36 1638912 ----a-w- C:\Windows\SysWow64\mshtml.tlb

2011-09-06 13:56:50 2764288 ----a-w- C:\Windows\System32\win32k.sys

2011-08-31 21:00:50 25416 ----a-w- C:\Windows\System32\drivers\mbam.sys

2011-08-27 01:23:10 43520 ----a-w- C:\Windows\SysWow64\CmdLineExt03.dll

.

============= FINISH: 20:39:20.32 ===============

Link to post
Share on other sites

Follow the directions that apply to Reset your Internet Browser Proxy Settings (as these are often altered by malware to enable browswer redirection)

http://forums.avg.com/us-en/avg-forums?sec=thread&act=show&id=166875

Please Run ComboFix by following the steps provided in exactly this sequence:

Here is a tutorial that describes how to download, install and run Combofix. Please thoroughly review it beofre proceeding:

http://www.bleepingcomputer.com/combofix/how-to-use-combofix

Very Important! BEFORE downloading Combofix, temporarily disable your antivirus and antimalware real-time protection and any script blocking components of them or your firewall before performing a scan. They can interfere with ComboFix and even remove onboard components so it is rendered ineffective:

http://www.bleepingcomputer.com/forums/topic114351.html

Note: The above tutorial does not tell you to rename Combofix as I am about to instruct you to do in the following instructions, so make sure you complete the renaming step before launching Combofix.

Using ComboFix ->

Please download Combofix from one of these locations:

HERE or HERE

I want you to rename Combofix.exe as you download it to iexplore.exe

Notes:

  • It is very important that save the newly renamed EXE file to your desktop.
  • You must rename Combofixe.exe as you download it and not after it is on your computer.
    You may have to modify your browser settings if you use Firefox, so you can rename Combofix.exe as you download it. To do that:
    • Open Firefox
    • Click Tools -> Options -> Main
    • Under the downloads section check the button that says "Always ask me where to save files".
    • Click OK

    [*]For Internet Explorer:

    • Choose to save, not open the file
    • When prompted - save the file to your desktop, and rename it iexplore.exe.

Running Combofix

In the event you already have Combofix, please delete it as this is a new version.

  • Close any open browsers and programs.
  • Close/disable all anti-virus and anti-malware programs so they do not interfere with the running of ComboFix.
  • If Combofix asks to update, please allow it to do so. If it renames itself back to Combofix.exe - this is normal!!

1. To Launch Combofix

Click Start --> Run, type cmd in the search box, right-click the cmd.exe option that appears at the top of the search results under "Programs" and select "Run as Administrator"

2. Type or copy/paste this command exactly as shown including the quotes (NOTE: combofix must be on your desktop for this to work):

"%userprofile%\desktop\iexplore.exe" /killall

3. Combofix should now be performing its scan. When finished, it will produce a logfile located at C:\ComboFix.txt

4. Post the contents of that log in your next reply.

Note: Do not mouseclick combofix's window while it is running. That may cause your system to stall/hang.

Please post C:\ComboFix.txt in your next reply.

If You have problems running Combofix then try running it in "Safe Mode with Networking" as follows:

  • Restart your computer
  • After hearing your computer beep once during startup, but before the Windows icon appears, tap the F8 key continually;
  • Instead of Windows loading normally, the Advanced Options Menu should appear;
  • Select the option, to run Windows in "Safe Mode with Networking", then press Enter.
  • Choose your usual account, and launch Combofix as directed above.

=============

NOTE: ComboFix may reset a number of Internet Explorer's settings, including making it the default browser.

Link to post
Share on other sites

ComboFix 11-11-10.03 - Jia Lin Hong 11/10/2011 16:32:44.1.2 - x64

Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.1.1033.18.3038.1329 [GMT -5:00]

Running from: c:\users\Jia Lin Hong\Desktop\ComboFix.exe

Command switches used :: /killall

AV: AntiVir Desktop *Disabled/Updated* {090F9C29-64CE-6C6F-379C-5901B49A85B7}

SP: AntiVir Desktop *Disabled/Updated* {B26E7DCD-42F4-63E1-0D2C-6273CF1DCF0A}

SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))

.

.

c:\program files (x86)\Avira\AntiVir Desktop\aerdl.dll

c:\program files (x86)\Avira\AntiVir Desktop\aesbx.dll

c:\program files (x86)\Avira\AntiVir Desktop\aescn.dll

c:\program files (x86)\Avira\AntiVir Desktop\FAILSAFE\aerdl.dll

c:\users\Jia Lin Hong\AppData\Local\Microsoft\Windows\Temporary Internet Files\AMbP000.jpg

c:\users\Jia Lin Hong\AppData\Local\Microsoft\Windows\Temporary Internet Files\m77m4548m.jpg

c:\users\Jia Lin Hong\AppData\Local\Microsoft\Windows\Temporary Internet Files\n26kL.jpg

c:\users\Jia Lin Hong\AppData\Local\Microsoft\Windows\Temporary Internet Files\PpamLnnaO.jpg

c:\windows\ST6UNST.000

c:\windows\SysWow64\404Fix.exe

c:\windows\SysWow64\Agent.OMZ.Fix.exe

c:\windows\SysWow64\dumphive.exe

c:\windows\SysWow64\IEDFix.C.exe

c:\windows\SysWow64\IEDFix.exe

c:\windows\SysWow64\o4Patch.exe

c:\windows\SysWow64\Process.exe

c:\windows\SysWow64\SrchSTS.exe

c:\windows\SysWow64\System Security 2012v121.exe

c:\windows\SysWow64\tmp.reg

c:\windows\SysWow64\VACFix.exe

c:\windows\SysWow64\VCCLSID.exe

c:\windows\SysWow64\WS2Fix.exe

c:\windows\XSxS

.

.

((((((((((((((((((((((((( Files Created from 2011-10-10 to 2011-11-10 )))))))))))))))))))))))))))))))

.

.

2011-11-10 21:50 . 2011-11-10 21:56 -------- d-----w- c:\users\Jia Lin Hong\AppData\Local\temp

2011-11-10 21:50 . 2011-11-10 21:50 -------- d-----w- c:\users\Default\AppData\Local\temp

2011-11-09 23:06 . 2011-11-09 23:06 388096 ----a-r- c:\users\Jia Lin Hong\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe

2011-11-09 23:06 . 2011-11-09 23:06 -------- d-----w- c:\program files (x86)\Trend Micro

2011-11-09 23:06 . 2011-10-17 11:41 2409784 ----a-w- c:\program files\Windows Mail\OESpamFilter.dat

2011-11-09 23:06 . 2011-10-17 11:41 2409784 ----a-w- c:\program files (x86)\Windows Mail\OESpamFilter.dat

2011-11-09 23:06 . 2011-09-30 16:16 893440 ----a-w- c:\program files\Common Files\System\wab32.dll

2011-11-09 23:06 . 2011-09-30 16:16 50688 ----a-w- c:\program files\Windows Mail\wabimp.dll

2011-11-09 23:06 . 2011-09-30 15:57 707584 ----a-w- c:\program files (x86)\Common Files\System\wab32.dll

2011-11-09 21:39 . 2011-11-09 21:39 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\zodqtF9O29

2011-11-09 21:39 . 2011-11-09 21:39 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\wdXli59Vu6Rlc5h

2011-11-09 21:39 . 2011-11-09 21:39 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\wsLqkrbHEgVyFJX

2011-11-09 21:38 . 2011-11-09 21:38 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\zmJNnm6ElN0yAyx

2011-11-09 21:38 . 2011-11-09 21:38 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\D7bztY99LQp3ov

2011-11-09 21:38 . 2011-11-09 21:38 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\Uk14dfgXHdZ

2011-11-09 21:38 . 2011-11-09 21:38 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\e6kD8zsU6cyCIZK

2011-11-09 21:38 . 2011-11-09 21:38 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\Ck14dfgXHdZ

2011-11-09 21:38 . 2011-11-09 21:38 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\qpz8NWQrDH89hUW

2011-11-09 21:38 . 2011-11-09 21:38 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\UCiEBpwH0q9

2011-11-09 21:38 . 2011-11-09 21:38 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\ExsVoRNaOsU2f

2011-11-09 21:38 . 2011-11-09 21:38 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\BiebXDZyQCi8vRN

2011-11-09 21:38 . 2011-11-09 21:38 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\wcJzsrnZyQkHC

2011-11-09 21:38 . 2011-11-09 21:38 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\a79gRZEQm3

2011-11-09 21:37 . 2011-11-09 21:37 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\z2UiLBse2WX1h3C

2011-11-09 21:35 . 2011-11-09 21:35 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\vpo2bcnJTI

2011-11-09 21:35 . 2011-11-09 21:35 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\QpgIDJXNbdTBu3Q

2011-11-09 21:35 . 2011-11-09 21:35 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\gHZBnEV159r

2011-11-09 21:35 . 2011-11-09 21:35 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\oE19uKPaCbCb7VD

2011-11-09 21:35 . 2011-11-09 21:35 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\rrVw9hLaDxwEpAI

2011-11-09 21:35 . 2011-11-09 21:35 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\rVXZE5iVgaSU71X

2011-11-09 21:35 . 2011-11-09 21:35 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\IJmSNeYZLEJJ6Dx

2011-11-09 21:35 . 2011-11-09 21:35 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\psG2yVYTE

2011-11-09 21:34 . 2011-11-09 21:34 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\EiafhlxiGJYByvp

2011-11-09 21:34 . 2011-11-09 21:34 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\Ezr0p6mHEXVly

2011-11-09 21:34 . 2011-11-09 21:34 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\arOxPzlpGG4mp3H

2011-11-09 21:34 . 2011-11-09 21:34 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\XVtP0Au2b34LBAv

2011-11-09 21:34 . 2011-11-09 21:34 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\nfw0FdRqIrtPx0A

2011-11-09 21:34 . 2011-11-09 21:34 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\VEVPy1bQs7EKEzN

2011-11-09 21:34 . 2011-11-09 21:34 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\LWht2QKgCklBPyN

2011-11-09 21:34 . 2011-11-09 21:34 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\eHTl1G6RqYUeBzr

2011-11-09 21:34 . 2011-11-09 21:34 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\bD5dRXt3dwNuFaH

2011-11-09 21:34 . 2011-11-09 21:34 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\A3guWV3sE

2011-11-09 21:33 . 2011-11-09 21:33 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\eo6hIPndXri

2011-11-09 21:33 . 2011-11-09 21:33 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\vo6hIPndXr

2011-11-09 21:33 . 2011-11-09 21:33 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\S7hBSmRzo6kca8B

2011-11-09 21:33 . 2011-11-09 21:33 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\OF6TziswNF9r1

2011-11-09 21:33 . 2011-11-09 21:33 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\a7kPo6ZOoE

2011-11-09 21:33 . 2011-11-09 21:33 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\BtUZ6apiutBIBBI

2011-11-09 21:33 . 2011-11-09 21:33 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\VKLZVtxbs

2011-11-09 21:33 . 2011-11-09 21:33 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\jQ2NqWGuIZEH2yz

2011-11-09 21:33 . 2011-11-09 21:33 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\QqQ2NqWGuIZEH2

2011-11-09 21:33 . 2011-11-09 21:33 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\emsR9g8LEK8zubF

2011-11-09 21:32 . 2011-11-09 21:32 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\oq4NZmOTa0q

2011-11-09 21:32 . 2011-11-09 21:32 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\CT1ZDYoToqFqbZi

2011-11-09 21:32 . 2011-11-09 21:32 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\ody8A8ARuR0

2011-11-09 21:32 . 2011-11-09 21:32 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\hB6N7cC50YGxq6u

2011-11-09 21:32 . 2011-11-09 21:32 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\hXv7VDElHOWzdNd

2011-11-09 21:22 . 2011-11-09 21:22 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\CgYeyv3dEZwlyv

2011-11-09 21:21 . 2011-11-09 21:21 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\g5ZBbsZwlPu

2011-11-09 21:21 . 2011-11-09 21:21 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\SQgr1HZzis

2011-11-09 21:21 . 2011-11-09 21:21 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\fFPTQcXsvr

2011-11-09 21:21 . 2011-11-09 21:21 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\eQgr1HZzisL

2011-11-09 21:21 . 2011-11-09 21:21 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\uOgFPg41CfDO

2011-11-09 21:21 . 2011-11-09 21:21 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\ufTCetPOzrle

2011-11-09 21:21 . 2011-11-09 21:21 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\gZl0Q8XexuGLU3

2011-11-09 21:20 . 2011-11-09 21:20 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\J1FHEXiHZ

2011-11-09 21:20 . 2011-11-09 21:20 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\HYUlzFWYeOuo59l

2011-11-09 21:20 . 2011-11-09 21:20 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\RfBGXSJeiJqysRq

2011-11-09 21:20 . 2011-11-09 21:20 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\uWwVBN0Au1uxOYs

2011-11-09 21:18 . 2011-11-09 21:18 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\E8KWsW7JQddWWsJ

2011-11-09 21:18 . 2011-11-09 21:18 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\GHG1tleCYjYwXTj

2011-11-09 21:18 . 2011-11-09 21:18 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\DtZs1UdFutVqdQa

2011-11-09 21:18 . 2011-11-09 21:18 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\wDJXN3RIbKC049b

2011-11-09 21:18 . 2011-11-09 21:18 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\ADJXN3RIbKC049b

2011-11-09 21:18 . 2011-11-09 21:18 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\XVoEeS6qyp

2011-11-09 21:18 . 2011-11-09 21:18 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\nWC17lo80sdI4Rz

2011-11-09 21:18 . 2011-11-09 21:18 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\n7V1WYyaglv7zbE

2011-11-09 21:18 . 2011-11-09 21:18 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\HvdTV2WC17lo80s

2011-11-09 21:18 . 2011-11-09 21:18 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\AaZxnEUAs

2011-11-09 21:18 . 2011-11-09 21:18 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\cO2aRCt4j

2011-11-09 21:18 . 2011-11-09 21:18 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\Tp5aQHa2ylTHSk7

2011-11-09 21:11 . 2011-11-09 21:11 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\Fy6Aztw8Wn1POYT

2011-11-09 21:11 . 2011-11-09 21:11 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\rUSl6eFZy5YiKc6

2011-11-09 04:24 . 2011-11-09 04:24 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\OTTTXqqjUCekBrO

2011-11-09 04:24 . 2011-11-09 04:24 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\NQQHH6dWWKf

2011-11-09 04:23 . 2011-11-09 04:23 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\KhhYYXXwjU

2011-11-09 04:23 . 2011-11-09 04:23 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\TJJJ7ffEL8gZqhC

2011-11-09 04:23 . 2011-11-09 04:23 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\huvvSS2obF3p

2011-11-09 04:22 . 2011-11-09 04:22 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\j99ggTXqjY

2011-11-09 04:22 . 2011-11-09 04:22 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\B9hhTXXwjUClI

2011-11-09 04:22 . 2011-11-09 04:22 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\R88ffRLL9hXqjC

2011-11-09 04:21 . 2011-11-09 04:21 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\tKK88fRL9hTXjUe

2011-11-09 04:21 . 2011-11-09 04:21 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\TWWWK77fRL9TXjY

2011-11-09 04:21 . 2011-11-09 04:21 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\gGGG5aaQH6dW7fL

2011-11-09 04:20 . 2011-11-09 04:20 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\tWWWK77fRL9gX

2011-11-09 04:20 . 2011-11-09 04:20 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\cYYYCeekIVrO

2011-11-09 04:20 . 2011-11-09 04:20 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\qyyxxA11uvSob3p

2011-11-09 04:19 . 2011-11-09 04:19 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\AaaQHH6dWK7f

2011-11-09 04:19 . 2011-11-09 04:19 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\UxxAA1uuvS2bFp

2011-11-09 04:19 . 2011-11-09 04:19 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\tPPP0yycS1iD3

2011-11-09 04:18 . 2011-11-09 04:18 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\EggTTZqhYC

2011-11-09 04:18 . 2011-11-09 04:18 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\A444pmmH5sQJ

2011-11-09 04:18 . 2011-11-09 04:18 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\I7ffEEL9g

2011-11-09 04:18 . 2011-11-09 04:18 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\rVVrrlOOBtx0yS1

2011-11-09 04:17 . 2011-11-09 04:17 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\OgggTZZqjYCkIrl

2011-11-09 04:17 . 2011-11-09 04:17 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\pssWWK7ffE9g

2011-11-09 04:17 . 2011-11-09 04:17 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\TggTTXqqjYCk

2011-11-09 04:17 . 2011-11-09 04:17 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\vGGG4aaQH6

2011-11-09 04:16 . 2011-11-09 04:16 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\TqjjYYCekIVrONx

2011-11-09 04:16 . 2011-11-09 04:16 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\ksssWKK7fEL9TZ

2011-11-09 04:16 . 2011-11-09 04:16 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\grrllONNtxPuc1i

2011-11-09 04:16 . 2011-11-09 04:16 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\GqjjjYCwkIVrONx

2011-11-09 04:15 . 2011-11-09 04:15 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\yccSS1iibDonGaH

2011-11-09 04:15 . 2011-11-09 04:15 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\xNNNttxP0uc

2011-11-09 04:15 . 2011-11-09 04:15 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\eWWWK77fEL9gZq

2011-11-09 04:14 . 2011-11-09 04:14 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\wbFFF3pmG5

2011-11-09 04:14 . 2011-11-09 04:14 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\PnFF44amH5sW7d

2011-11-09 04:14 . 2011-11-09 04:14 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\b999hTXwjUC

2011-11-09 04:14 . 2011-11-09 04:14 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\GwwwkUUVelOtz0y

2011-11-09 04:13 . 2011-11-09 04:13 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\XTTZZqjjYCwIVlO

2011-11-09 04:13 . 2011-11-09 04:13 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\KTTXXwjUUC

2011-11-09 04:13 . 2011-11-09 04:13 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\HYYCCwwkUVrOBxP

2011-11-09 04:13 . 2011-11-09 04:13 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\iqqjjYYCekIrzNt

2011-11-09 04:13 . 2011-11-09 04:13 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\CIIBBtzPPNcA1v2

2011-11-09 04:12 . 2011-11-09 04:12 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\LcccS22ibD3pG4Q

.

.

(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2011-10-15 22:40 . 2009-08-18 16:49 564632 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\wlidui.dll

2011-10-15 22:40 . 2009-08-18 15:24 18328 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll

2011-10-14 11:37 . 2011-05-13 10:53 414368 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl

2011-08-31 21:00 . 2010-02-19 03:52 25416 ----a-w- c:\windows\system32\drivers\mbam.sys

2011-08-27 01:23 . 2010-05-06 21:37 43520 ----a-w- c:\windows\SysWow64\CmdLineExt03.dll

.

.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))

.

.

*Note* empty entries & legit default entries are not shown

REGEDIT4

.

c:\users\Jia Lin Hong\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\

OneNote Table Of Contents.onetoc2 [2011-4-12 3656]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"EnableLUA"= 0 (0x0)

"EnableUIADesktopToggle"= 0 (0x0)

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]

"mixer"=wdmaud.drv

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

@="Driver"

.

R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]

R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]

R2 gupdate;Google Update Service (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-01-14 135664]

R3 Com4QLBEx;Com4QLBEx;c:\program files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [2008-04-03 193840]

R3 dump_wmimmc;dump_wmimmc;c:\program files (x86)\steam\steamapps\common\ava\Binaries\GameGuard\dump_wmimmc.sys [x]

R3 EagleX64;EagleX64;c:\windows\system32\drivers\EagleX64.sys [x]

R3 gupdatem;Google Update Service (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-01-14 135664]

R3 NETw3v64;Intel® PRO/Wireless 3945ABG Adapter Driver for Windows Vista 64 Bit;c:\windows\system32\DRIVERS\NETw3v64.sys [x]

R3 TKFsAc;TKFsAc;c:\windows\system32\TKFsAc2k64.sys [2009-04-21 107040]

R3 TKFsAv;TKFsAv;c:\windows\system32\TKFsAv2k64.sys [2009-08-28 44064]

R3 TKFsFt;TKFsFt;c:\windows\system32\TKFsFt2k64.sys [x]

R3 TKRgAc;TKRgAc;c:\windows\system32\TKRgAc2k64.sys [2009-05-13 60448]

R3 TKRgFt;TKRgFt;c:\windows\system32\TKRgFtXp64.sys [2009-05-27 35872]

R3 vtany;vtany;c:\windows\vtany.sys [x]

R3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework64\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 1020768]

R3 WPRO_40_1340;WinPcap Packet Driver (WPRO_40_1340);c:\windows\system32\drivers\WPRO_40_1340.sys [x]

R3 yukonx64;NDIS6.0 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk60x64.sys [x]

S2 {55662437-DA8C-40c0-AADA-2C816A897A49};Power Control [2009/05/16 02:56];c:\program files (x86)\Hewlett-Packard\Media\DVD\000.fcl [2008-11-29 01:04 146928]

S2 AESTFilters;Andrea ST Filters Service;c:\windows\System32\DriverStore\FileRepository\stwrt64.inf_58be29c0\AESTSr64.exe [x]

S2 AntiVirSchedulerService;Avira AntiVir Scheduler;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [2009-05-13 108289]

S2 hpsrv;HP Service;c:\windows\system32\Hpservice.exe [x]

S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2011-08-31 366152]

S2 Recovery Service for Windows;Recovery Service for Windows;c:\program files (x86)\SMINST\BLService.exe [2008-12-18 365952]

S2 TVCapSvc;TV Background Capture Service (TVBCS);c:\program files (x86)\Hewlett-Packard\Media\TV\Kernel\TV\TVCapSvc.exe [2009-02-09 296320]

S2 TVSched;TV Task Scheduler (TVTS);c:\program files (x86)\Hewlett-Packard\Media\TV\Kernel\TV\TVSched.exe [2009-02-09 116096]

S2 vfsFPService;Validity Fingerprint Service;c:\windows\system32\vfsFPService.exe [2008-11-18 721712]

S3 enecir;ENE CIR Receiver;c:\windows\system32\DRIVERS\enecir.sys [x]

S3 JMCR;JMCR;c:\windows\system32\DRIVERS\jmcr.sys [x]

S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [x]

S3 NETw5v64;Intel® Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit;c:\windows\system32\DRIVERS\NETw5v64.sys [x]

S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda64v.sys [x]

.

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]

2008-06-09 17:14 451872 ----a-w- c:\program files (x86)\Common Files\LightScribe\LSRunOnce.exe

.

Contents of the 'Scheduled Tasks' folder

.

2011-11-10 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-01-14 23:09]

.

2011-11-10 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-01-14 23:09]

.

2011-11-08 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3706164209-2383976941-905055343-1000Core.job

- c:\users\Jia Lin Hong\AppData\Local\Google\Update\GoogleUpdate.exe [2009-08-22 18:35]

.

2011-11-10 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3706164209-2383976941-905055343-1000UA.job

- c:\users\Jia Lin Hong\AppData\Local\Google\Update\GoogleUpdate.exe [2009-08-22 18:35]

.

2011-11-04 c:\windows\Tasks\HPCeeScheduleForJia Lin Hong.job

- c:\program files (x86)\hewlett-packard\sdp\ceement\HPCEE.exe [2009-02-06 19:34]

.

2011-11-09 c:\windows\Tasks\RealUpgradeScheduledTaskS-1-5-21-3706164209-2383976941-905055343-1000.job

- c:\program files (x86)\Real\RealUpgrade\realupgrade.exe [2011-09-27 17:40]

.

.

--------- x86-64 -----------

.

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"combofix"="c:\combofix\CF23091.3XE" [2008-01-21 363008]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]

"LoadAppInit_DLLs"=0x1

.

------- Supplementary Scan -------

.

uStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=91&bd=Pavilion&pf=cnnb

uLocal Page = c:\windows\system32\blank.htm

mStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=91&bd=Pavilion&pf=cnnb

mLocal Page = c:\windows\SysWOW64\blank.htm

uInternet Settings,ProxyOverride = <local>

IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000

TCP: DhcpNameServer = 167.206.254.1 167.206.254.2

CLSID: {603d3801-bd81-11d0-a3a5-00c04fd706ec} - %SystemRoot%\SysWow64\browseui.dll

FF - ProfilePath - c:\users\Jia Lin Hong\AppData\Roaming\Mozilla\Firefox\Profiles\xt3ebp7e.default\

FF - prefs.js: browser.search.defaulturl - Bing

FF - prefs.js: browser.search.selectedEngine - Google

FF - prefs.js: browser.startup.homepage - hxxp://www.msn.com/?pc=Z192&install_date=20111008

FF - prefs.js: keyword.URL - hxxp://www.bing.com/search?pc=Z192&form=ZGAADF&install_date=20111008&q=

FF - prefs.js: network.proxy.type - 0

.

- - - - ORPHANS REMOVED - - - -

.

Toolbar-{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)

WebBrowser-{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)

AddRemove-Adobe Shockwave Player - c:\windows\system32\Adobe\Shockwave 11\uninstaller.exe

AddRemove-Neopets - c:\program files (x86)\Neopets\uninst.exe

AddRemove-PunkBusterSvc - c:\windows\system32\pbsvc_heroes.exe

AddRemove-Rhye's of Civilization Expanded - c:\program files (x86)\Steam\steamapps\common\sid meier's civilization iii complete\uninstall.exe

.

.

.

[HKEY_LOCAL_MACHINE\system\ControlSet001\Services\npggsvc]

"ImagePath"="c:\windows\system32\GameMon.des -service"

.

[HKEY_LOCAL_MACHINE\system\ControlSet001\Services\{55662437-DA8C-40c0-AADA-2C816A897A49}]

"ImagePath"="\??\c:\program files (x86)\Hewlett-Packard\Media\DVD\000.fcl"

.

--------------------- LOCKED REGISTRY KEYS ---------------------

.

[HKEY_USERS\S-1-5-21-3706164209-2383976941-905055343-1000\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]

@Allowed: (Read) (RestrictedCode)

.

[HKEY_USERS\S-1-5-21-3706164209-2383976941-905055343-1000\Software\SecuROM\License information*]

@Allowed: (Read) (RestrictedCode)

"datasecu"=hex:37,af,d5,d0,be,20,fe,35,45,c1,82,2e,99,23,bf,b9,27,74,76,7c,c7,

38,0e,0d,0d,5d,d0,11,12,72,59,00,6e,c0,97,ca,42,f6,33,ec,b7,01,9a,c4,6e,e7,\

"rkeysecu"=hex:0d,9d,16,9c,e8,57,46,35,e0,6c,51,77,2e,7f,5d,c2

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10w_ActiveX.exe,-101"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10w_ActiveX.exe"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Shockwave Flash Object"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10w.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]

@="0"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]

@="ShockwaveFlash.ShockwaveFlash.10"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10w.ocx, 1"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="ShockwaveFlash.ShockwaveFlash"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Macromedia Flash Factory Object"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10w.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]

@="FlashFactory.FlashFactory.1"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10w.ocx, 1"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="FlashFactory.FlashFactory"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]

@Denied: (A 2) (Everyone)

@="IFlashBroker4"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\TypeLib\{D27CDB6B-AE6D-11CF-96B8-444553540000}]

@Denied: (A 2) (Everyone)

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\TypeLib\{D27CDB6B-AE6D-11CF-96B8-444553540000}\1.0]

@="Shockwave Flash"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\TypeLib\{FAB3E735-69C7-453B-A446-B6823C6DF1C9}]

@Denied: (A 2) (Everyone)

@=""

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\TypeLib\{FAB3E735-69C7-453B-A446-B6823C6DF1C9}\1.0]

@="FlashBroker"

.

[HKEY_LOCAL_MACHINE\software\Wow6432Node\Classes]

"SymbolicLinkValue"=hex(6):5c,00,52,00,45,00,47,00,49,00,53,00,54,00,52,00,59,

00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,4f,00,46,00,\

.

------------------------ Other Running Processes ------------------------

.

c:\program files (x86)\DigitalPersona\Bin\DpHostW.exe

c:\program files (x86)\Common Files\LightScribe\LSSrvc.exe

c:\windows\SysWOW64\PnkBstrA.exe

c:\program files (x86)\CyberLink\Shared files\RichVideo.exe

.

**************************************************************************

.

Completion time: 2011-11-10 17:03:40 - machine was rebooted

ComboFix-quarantined-files.txt 2011-11-10 22:03

.

Pre-Run: 15,829,475,328 bytes free

Post-Run: 18,809,475,072 bytes free

.

- - End Of File - - 2F7C2D8088F6B28AF66F70CBC978CF43

Link to post
Share on other sites

Now, we have to run Combofix again:

1. Open Notepad, and on the Notepad menu, choose "Format" and make sure that Word Wrap is UNchecked (disabled).

2. Copy/Paste the text in the code box below and save it to your desktop as CFScript.txt by using the File -> "Save as" function on the Notepad Menu.

3. Disable all anti-malware and antivirus active protection by referring to these directions HERE

4. Close All Open Windows and Browsers,



KillAll::

DDS::
TB: {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No File
TB: {604BC32A-9680-40D1-9AC6-E06B23A1BA4C} - No File
TB: {472734EA-242A-422B-ADF8-83D1E48CC825} - No File
mRun: [<NO NAME>] TB-X64: {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No File
TB-X64: {604BC32A-9680-40D1-9AC6-E06B23A1BA4C} - No File
TB-X64: {472734EA-242A-422B-ADF8-83D1E48CC825} - No File

DirLook::
C:\Program Files (x86)\THQ
c:\users\Jia Lin Hong\AppData\Roaming\zodqtF9O29
c:\users\Jia Lin Hong\AppData\Roaming\wdXli59Vu6Rlc5h
c:\users\Jia Lin Hong\AppData\Roaming\wsLqkrbHEgVyFJX
c:\users\Jia Lin Hong\AppData\Roaming\zmJNnm6ElN0yAyx

Registry::
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x0

CFScriptB-4.gif

Referring to the picture above, drag CFScript.txt into the renamed ComboFix.exe

This will cause ComboFix to run again.

If the run does not finish or You have problems, please launch Combofix in safe mode following the same directions as above.

If ComboFix prompts you to:

  • Update to a newer version, make sure you allow it to update.
  • Upload infected files for analysis, please allow it to do so.

Please copy/paste the log (C:\Combofix.txt) that opens when it finishes (Do NOT attach it).

===================

Some background information on what we're planning to do can be found HERE

Please read carefully and follow these steps.

  • Download TDSSKiller and save it to your Desktop.
  • Double-click on TDSSKiller.exe to run the application, then on Start Scan.
  • Click on "Change parameters" and place a checkmark next to Verify Driver Digital Signature and Detect TDLFS file system, then click OK
    tdss_2.jpg
  • If an infected file is detected, the default action will be Cure, click on Continue.
    TDSSKillerMal-1.png
  • If a suspicious file is detected, the default action will be Skip, click on Continue.
    TDSSKillerSuspicious-1.png
  • It may ask you to reboot the computer to complete the process. Click on Reboot Now.
    TDSSKillerCompleted.png
  • If no reboot is require, click on Report. A log file should appear. Please copy and paste the contents of that file here.
  • If a reboot is required, the report can also be found in your root directory, (usually C:\ folder) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt". Please copy and paste the contents of that file here.

Thanks!

Link to post
Share on other sites

I wasn't sure if I was supposed to run TDSSKiller after the scan so I've only got this log right now.

ComboFix 11-11-10.03 - Jia Lin Hong 11/10/2011 21:47:16.2.2 - x64

Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.1.1033.18.3038.1974 [GMT -5:00]

Running from: c:\users\Jia Lin Hong\Desktop\ComboFix.exe

Command switches used :: c:\users\Jia Lin Hong\Desktop\CFScript.txt

AV: AntiVir Desktop *Disabled/Updated* {090F9C29-64CE-6C6F-379C-5901B49A85B7}

SP: AntiVir Desktop *Disabled/Updated* {B26E7DCD-42F4-63E1-0D2C-6273CF1DCF0A}

SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

.

((((((((((((((((((((((((( Files Created from 2011-10-11 to 2011-11-11 )))))))))))))))))))))))))))))))

.

.

2011-11-11 03:00 . 2011-11-11 03:03 -------- d-----w- c:\users\Jia Lin Hong\AppData\Local\temp

2011-11-11 03:00 . 2011-11-11 03:00 -------- d-----w- c:\users\Default\AppData\Local\temp

2011-11-09 23:06 . 2011-11-09 23:06 388096 ----a-r- c:\users\Jia Lin Hong\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe

2011-11-09 23:06 . 2011-11-09 23:06 -------- d-----w- c:\program files (x86)\Trend Micro

2011-11-09 23:06 . 2011-10-17 11:41 2409784 ----a-w- c:\program files\Windows Mail\OESpamFilter.dat

2011-11-09 23:06 . 2011-10-17 11:41 2409784 ----a-w- c:\program files (x86)\Windows Mail\OESpamFilter.dat

2011-11-09 23:06 . 2011-09-30 16:16 893440 ----a-w- c:\program files\Common Files\System\wab32.dll

2011-11-09 23:06 . 2011-09-30 16:16 50688 ----a-w- c:\program files\Windows Mail\wabimp.dll

2011-11-09 23:06 . 2011-09-30 15:57 707584 ----a-w- c:\program files (x86)\Common Files\System\wab32.dll

2011-11-09 21:39 . 2011-11-09 21:39 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\zodqtF9O29

2011-11-09 21:39 . 2011-11-09 21:39 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\wdXli59Vu6Rlc5h

2011-11-09 21:39 . 2011-11-09 21:39 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\wsLqkrbHEgVyFJX

2011-11-09 21:38 . 2011-11-09 21:38 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\zmJNnm6ElN0yAyx

2011-11-09 21:38 . 2011-11-09 21:38 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\D7bztY99LQp3ov

2011-11-09 21:38 . 2011-11-09 21:38 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\Uk14dfgXHdZ

2011-11-09 21:38 . 2011-11-09 21:38 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\e6kD8zsU6cyCIZK

2011-11-09 21:38 . 2011-11-09 21:38 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\Ck14dfgXHdZ

2011-11-09 21:38 . 2011-11-09 21:38 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\qpz8NWQrDH89hUW

2011-11-09 21:38 . 2011-11-09 21:38 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\UCiEBpwH0q9

2011-11-09 21:38 . 2011-11-09 21:38 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\ExsVoRNaOsU2f

2011-11-09 21:38 . 2011-11-09 21:38 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\BiebXDZyQCi8vRN

2011-11-09 21:38 . 2011-11-09 21:38 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\wcJzsrnZyQkHC

2011-11-09 21:38 . 2011-11-09 21:38 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\a79gRZEQm3

2011-11-09 21:37 . 2011-11-09 21:37 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\z2UiLBse2WX1h3C

2011-11-09 21:35 . 2011-11-09 21:35 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\vpo2bcnJTI

2011-11-09 21:35 . 2011-11-09 21:35 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\QpgIDJXNbdTBu3Q

2011-11-09 21:35 . 2011-11-09 21:35 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\gHZBnEV159r

2011-11-09 21:35 . 2011-11-09 21:35 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\oE19uKPaCbCb7VD

2011-11-09 21:35 . 2011-11-09 21:35 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\rrVw9hLaDxwEpAI

2011-11-09 21:35 . 2011-11-09 21:35 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\rVXZE5iVgaSU71X

2011-11-09 21:35 . 2011-11-09 21:35 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\IJmSNeYZLEJJ6Dx

2011-11-09 21:35 . 2011-11-09 21:35 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\psG2yVYTE

2011-11-09 21:34 . 2011-11-09 21:34 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\EiafhlxiGJYByvp

2011-11-09 21:34 . 2011-11-09 21:34 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\Ezr0p6mHEXVly

2011-11-09 21:34 . 2011-11-09 21:34 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\arOxPzlpGG4mp3H

2011-11-09 21:34 . 2011-11-09 21:34 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\XVtP0Au2b34LBAv

2011-11-09 21:34 . 2011-11-09 21:34 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\nfw0FdRqIrtPx0A

2011-11-09 21:34 . 2011-11-09 21:34 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\VEVPy1bQs7EKEzN

2011-11-09 21:34 . 2011-11-09 21:34 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\LWht2QKgCklBPyN

2011-11-09 21:34 . 2011-11-09 21:34 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\eHTl1G6RqYUeBzr

2011-11-09 21:34 . 2011-11-09 21:34 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\bD5dRXt3dwNuFaH

2011-11-09 21:34 . 2011-11-09 21:34 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\A3guWV3sE

2011-11-09 21:33 . 2011-11-09 21:33 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\eo6hIPndXri

2011-11-09 21:33 . 2011-11-09 21:33 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\vo6hIPndXr

2011-11-09 21:33 . 2011-11-09 21:33 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\S7hBSmRzo6kca8B

2011-11-09 21:33 . 2011-11-09 21:33 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\OF6TziswNF9r1

2011-11-09 21:33 . 2011-11-09 21:33 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\a7kPo6ZOoE

2011-11-09 21:33 . 2011-11-09 21:33 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\BtUZ6apiutBIBBI

2011-11-09 21:33 . 2011-11-09 21:33 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\VKLZVtxbs

2011-11-09 21:33 . 2011-11-09 21:33 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\jQ2NqWGuIZEH2yz

2011-11-09 21:33 . 2011-11-09 21:33 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\QqQ2NqWGuIZEH2

2011-11-09 21:33 . 2011-11-09 21:33 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\emsR9g8LEK8zubF

2011-11-09 21:32 . 2011-11-09 21:32 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\oq4NZmOTa0q

2011-11-09 21:32 . 2011-11-09 21:32 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\CT1ZDYoToqFqbZi

2011-11-09 21:32 . 2011-11-09 21:32 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\ody8A8ARuR0

2011-11-09 21:32 . 2011-11-09 21:32 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\hB6N7cC50YGxq6u

2011-11-09 21:32 . 2011-11-09 21:32 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\hXv7VDElHOWzdNd

2011-11-09 21:22 . 2011-11-09 21:22 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\CgYeyv3dEZwlyv

2011-11-09 21:21 . 2011-11-09 21:21 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\g5ZBbsZwlPu

2011-11-09 21:21 . 2011-11-09 21:21 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\SQgr1HZzis

2011-11-09 21:21 . 2011-11-09 21:21 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\fFPTQcXsvr

2011-11-09 21:21 . 2011-11-09 21:21 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\eQgr1HZzisL

2011-11-09 21:21 . 2011-11-09 21:21 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\uOgFPg41CfDO

2011-11-09 21:21 . 2011-11-09 21:21 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\ufTCetPOzrle

2011-11-09 21:21 . 2011-11-09 21:21 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\gZl0Q8XexuGLU3

2011-11-09 21:20 . 2011-11-09 21:20 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\J1FHEXiHZ

2011-11-09 21:20 . 2011-11-09 21:20 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\HYUlzFWYeOuo59l

2011-11-09 21:20 . 2011-11-09 21:20 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\RfBGXSJeiJqysRq

2011-11-09 21:20 . 2011-11-09 21:20 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\uWwVBN0Au1uxOYs

2011-11-09 21:18 . 2011-11-09 21:18 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\E8KWsW7JQddWWsJ

2011-11-09 21:18 . 2011-11-09 21:18 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\GHG1tleCYjYwXTj

2011-11-09 21:18 . 2011-11-09 21:18 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\DtZs1UdFutVqdQa

2011-11-09 21:18 . 2011-11-09 21:18 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\wDJXN3RIbKC049b

2011-11-09 21:18 . 2011-11-09 21:18 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\ADJXN3RIbKC049b

2011-11-09 21:18 . 2011-11-09 21:18 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\XVoEeS6qyp

2011-11-09 21:18 . 2011-11-09 21:18 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\nWC17lo80sdI4Rz

2011-11-09 21:18 . 2011-11-09 21:18 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\n7V1WYyaglv7zbE

2011-11-09 21:18 . 2011-11-09 21:18 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\HvdTV2WC17lo80s

2011-11-09 21:18 . 2011-11-09 21:18 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\AaZxnEUAs

2011-11-09 21:18 . 2011-11-09 21:18 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\cO2aRCt4j

2011-11-09 21:18 . 2011-11-09 21:18 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\Tp5aQHa2ylTHSk7

2011-11-09 21:11 . 2011-11-09 21:11 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\Fy6Aztw8Wn1POYT

2011-11-09 21:11 . 2011-11-09 21:11 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\rUSl6eFZy5YiKc6

2011-11-09 04:24 . 2011-11-09 04:24 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\OTTTXqqjUCekBrO

2011-11-09 04:24 . 2011-11-09 04:24 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\NQQHH6dWWKf

2011-11-09 04:23 . 2011-11-09 04:23 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\KhhYYXXwjU

2011-11-09 04:23 . 2011-11-09 04:23 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\TJJJ7ffEL8gZqhC

2011-11-09 04:23 . 2011-11-09 04:23 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\huvvSS2obF3p

2011-11-09 04:22 . 2011-11-09 04:22 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\j99ggTXqjY

2011-11-09 04:22 . 2011-11-09 04:22 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\B9hhTXXwjUClI

2011-11-09 04:22 . 2011-11-09 04:22 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\R88ffRLL9hXqjC

2011-11-09 04:21 . 2011-11-09 04:21 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\tKK88fRL9hTXjUe

2011-11-09 04:21 . 2011-11-09 04:21 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\TWWWK77fRL9TXjY

2011-11-09 04:21 . 2011-11-09 04:21 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\gGGG5aaQH6dW7fL

2011-11-09 04:20 . 2011-11-09 04:20 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\tWWWK77fRL9gX

2011-11-09 04:20 . 2011-11-09 04:20 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\cYYYCeekIVrO

2011-11-09 04:20 . 2011-11-09 04:20 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\qyyxxA11uvSob3p

2011-11-09 04:19 . 2011-11-09 04:19 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\AaaQHH6dWK7f

2011-11-09 04:19 . 2011-11-09 04:19 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\UxxAA1uuvS2bFp

2011-11-09 04:19 . 2011-11-09 04:19 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\tPPP0yycS1iD3

2011-11-09 04:18 . 2011-11-09 04:18 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\EggTTZqhYC

2011-11-09 04:18 . 2011-11-09 04:18 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\A444pmmH5sQJ

2011-11-09 04:18 . 2011-11-09 04:18 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\I7ffEEL9g

2011-11-09 04:18 . 2011-11-09 04:18 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\rVVrrlOOBtx0yS1

2011-11-09 04:17 . 2011-11-09 04:17 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\OgggTZZqjYCkIrl

2011-11-09 04:17 . 2011-11-09 04:17 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\pssWWK7ffE9g

2011-11-09 04:17 . 2011-11-09 04:17 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\TggTTXqqjYCk

2011-11-09 04:17 . 2011-11-09 04:17 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\vGGG4aaQH6

2011-11-09 04:16 . 2011-11-09 04:16 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\TqjjYYCekIVrONx

2011-11-09 04:16 . 2011-11-09 04:16 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\ksssWKK7fEL9TZ

2011-11-09 04:16 . 2011-11-09 04:16 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\grrllONNtxPuc1i

2011-11-09 04:16 . 2011-11-09 04:16 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\GqjjjYCwkIVrONx

2011-11-09 04:15 . 2011-11-09 04:15 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\yccSS1iibDonGaH

2011-11-09 04:15 . 2011-11-09 04:15 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\xNNNttxP0uc

2011-11-09 04:15 . 2011-11-09 04:15 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\eWWWK77fEL9gZq

2011-11-09 04:14 . 2011-11-09 04:14 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\wbFFF3pmG5

2011-11-09 04:14 . 2011-11-09 04:14 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\PnFF44amH5sW7d

2011-11-09 04:14 . 2011-11-09 04:14 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\b999hTXwjUC

2011-11-09 04:14 . 2011-11-09 04:14 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\GwwwkUUVelOtz0y

2011-11-09 04:13 . 2011-11-09 04:13 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\XTTZZqjjYCwIVlO

2011-11-09 04:13 . 2011-11-09 04:13 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\KTTXXwjUUC

2011-11-09 04:13 . 2011-11-09 04:13 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\HYYCCwwkUVrOBxP

2011-11-09 04:13 . 2011-11-09 04:13 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\iqqjjYYCekIrzNt

2011-11-09 04:13 . 2011-11-09 04:13 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\CIIBBtzPPNcA1v2

2011-11-09 04:12 . 2011-11-09 04:12 -------- d-----w- c:\users\Jia Lin Hong\AppData\Roaming\LcccS22ibD3pG4Q

.

.

(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2011-10-15 22:40 . 2009-08-18 16:49 564632 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\wlidui.dll

2011-10-15 22:40 . 2009-08-18 15:24 18328 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll

2011-10-14 11:37 . 2011-05-13 10:53 414368 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl

2011-08-31 21:00 . 2010-02-19 03:52 25416 ----a-w- c:\windows\system32\drivers\mbam.sys

2011-08-27 01:23 . 2010-05-06 21:37 43520 ----a-w- c:\windows\SysWow64\CmdLineExt03.dll

.

.

(((((((((((((((((((((((((((((((((((((((((((( Look )))))))))))))))))))))))))))))))))))))))))))))))))))))))))

.

---- Directory of c:\program files (x86)\THQ ----

.

2010-09-02 18:33 . 2010-09-02 18:33 30660773 ----a-w- c:\program files (x86)\THQ\Darksiders\Darksiders_PC_Manual.pdf

2010-08-20 23:34 . 2010-08-20 23:34 3327000 ----a-w- c:\program files (x86)\THQ\Darksiders\WindowsXP-KB942288-v3-x86.exe

2010-06-08 22:52 . 2010-06-08 22:52 7820332 ----a-w- c:\program files (x86)\THQ\Darksiders\SoundTrack\23 End credits.mp3

2010-06-08 22:52 . 2010-06-08 22:52 2481322 ----a-w- c:\program files (x86)\THQ\Darksiders\SoundTrack\22 Uriel.mp3

2010-06-08 22:52 . 2010-06-08 22:52 2713707 ----a-w- c:\program files (x86)\THQ\Darksiders\SoundTrack\21 War's Theme.mp3

2010-06-08 22:52 . 2010-06-08 22:52 6817230 ----a-w- c:\program files (x86)\THQ\Darksiders\SoundTrack\20 Battle with Abaddon.mp3

2010-06-08 22:52 . 2010-06-08 22:52 3128323 ----a-w- c:\program files (x86)\THQ\Darksiders\SoundTrack\19 Vulgrim.mp3

2010-06-08 22:52 . 2010-06-08 22:52 4762543 ----a-w- c:\program files (x86)\THQ\Darksiders\SoundTrack\18 Rescue Ruin.mp3

2010-06-08 22:52 . 2010-06-08 22:52 4075418 ----a-w- c:\program files (x86)\THQ\Darksiders\SoundTrack\17 Prison break.mp3

2010-06-08 22:52 . 2010-06-08 22:52 2901789 ----a-w- c:\program files (x86)\THQ\Darksiders\SoundTrack\16 In Prophecy.mp3

2010-06-08 22:52 . 2010-06-08 22:52 3490275 ----a-w- c:\program files (x86)\THQ\Darksiders\SoundTrack\15 Flight Over Ruined Eden.mp3

2010-06-08 22:52 . 2010-06-08 22:52 3236992 ----a-w- c:\program files (x86)\THQ\Darksiders\SoundTrack\14 Light combat.mp3

2010-06-08 22:52 . 2010-06-08 22:52 2926030 ----a-w- c:\program files (x86)\THQ\Darksiders\SoundTrack\13 Chaos eater.mp3

2010-06-08 22:52 . 2010-06-08 22:52 4001021 ----a-w- c:\program files (x86)\THQ\Darksiders\SoundTrack\12 Battle with Tiamat.mp3

2010-06-08 22:52 . 2010-06-08 22:52 4650530 ----a-w- c:\program files (x86)\THQ\Darksiders\SoundTrack\11 Nex Sacramentum.mp3

2010-06-08 22:52 . 2010-06-08 22:52 6800512 ----a-w- c:\program files (x86)\THQ\Darksiders\SoundTrack\10 Empowered.mp3

2010-06-08 22:52 . 2010-06-08 22:52 3207735 ----a-w- c:\program files (x86)\THQ\Darksiders\SoundTrack\09 Epic Moment.mp3

2010-06-08 22:52 . 2010-06-08 22:52 3879813 ----a-w- c:\program files (x86)\THQ\Darksiders\SoundTrack\08 Battle with Greaver.mp3

2010-06-08 22:52 . 2010-06-08 22:52 4536009 ----a-w- c:\program files (x86)\THQ\Darksiders\SoundTrack\07 Keeping pace.mp3

2010-06-08 22:52 . 2010-06-08 22:52 5017498 ----a-w- c:\program files (x86)\THQ\Darksiders\SoundTrack\06 Flight path.mp3

2010-06-08 22:51 . 2010-06-08 22:51 3937492 ----a-w- c:\program files (x86)\THQ\Darksiders\SoundTrack\05 Eden.mp3

2010-06-08 22:51 . 2010-06-08 22:51 3843869 ----a-w- c:\program files (x86)\THQ\Darksiders\SoundTrack\04 Battle with Straga.mp3

2010-06-08 22:51 . 2010-06-08 22:51 2085932 ----a-w- c:\program files (x86)\THQ\Darksiders\SoundTrack\03 Strange Moment.mp3

2010-06-08 22:51 . 2010-06-08 22:51 3629038 ----a-w- c:\program files (x86)\THQ\Darksiders\SoundTrack\02 Battle with Silitha.mp3

2010-06-08 22:51 . 2010-06-08 22:51 7397358 ----a-w- c:\program files (x86)\THQ\Darksiders\SoundTrack\01 Darksiders theme.mp3

2010-05-26 23:00 . 2010-05-26 23:00 179503 ----a-r- c:\program files (x86)\THQ\Darksiders\Comic\icon.ico

2010-04-09 18:49 . 2010-04-09 18:49 17213904 ----a-w- c:\program files (x86)\THQ\Darksiders\Comic\Darksiders_Comic.pdf

2010-03-26 15:06 . 2010-03-26 15:06 2745256 ----a-r- c:\program files (x86)\THQ\Darksiders\vcredist_x86_sp1_atl_4053.exe

2010-03-11 04:05 . 2010-03-11 04:05 305672 ----a-r- c:\program files (x86)\THQ\Darksiders\dxwebsetup.exe

2010-01-28 15:19 . 2010-01-28 15:19 1649224 ----a-w- c:\program files (x86)\THQ\Darksiders\SoundTrack\darksiders_music_cover.jpg

.

---- Directory of c:\users\Jia Lin Hong\AppData\Roaming\wdXli59Vu6Rlc5h ----

.

.

---- Directory of c:\users\Jia Lin Hong\AppData\Roaming\wsLqkrbHEgVyFJX ----

.

.

---- Directory of c:\users\Jia Lin Hong\AppData\Roaming\zmJNnm6ElN0yAyx ----

.

.

---- Directory of c:\users\Jia Lin Hong\AppData\Roaming\zodqtF9O29 ----

.

.

.

((((((((((((((((((((((((((((( SnapShot@2011-11-10_21.56.16 )))))))))))))))))))))))))))))))))))))))))

.

- 2011-11-10 21:55 . 2011-11-10 21:55 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat

+ 2011-11-11 03:02 . 2011-11-11 03:02 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat

- 2011-11-10 21:55 . 2011-11-10 21:55 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat

+ 2011-11-11 03:02 . 2011-11-11 03:02 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat

+ 2006-11-02 12:46 . 2011-11-10 22:03 672792 c:\windows\system32\perfh009.dat

- 2006-11-02 12:46 . 2011-11-10 21:14 672792 c:\windows\system32\perfh009.dat

+ 2006-11-02 12:46 . 2011-11-10 22:03 132182 c:\windows\system32\perfc009.dat

- 2006-11-02 12:46 . 2011-11-10 21:14 132182 c:\windows\system32\perfc009.dat

- 2010-04-27 03:58 . 2011-11-10 21:52 316196 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat

+ 2010-04-27 03:58 . 2011-11-11 03:00 316196 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat

+ 2010-04-27 20:39 . 2011-11-11 03:00 4850416 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-3706164209-2383976941-905055343-1000-12288.dat

- 2010-04-27 20:39 . 2011-11-10 21:52 4850416 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-3706164209-2383976941-905055343-1000-12288.dat

.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))

.

.

*Note* empty entries & legit default entries are not shown

REGEDIT4

.

c:\users\Jia Lin Hong\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\

OneNote Table Of Contents.onetoc2 [2011-4-12 3656]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"EnableLUA"= 0 (0x0)

"EnableUIADesktopToggle"= 0 (0x0)

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]

"mixer"=wdmaud.drv

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

@="Driver"

.

R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]

R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]

R2 gupdate;Google Update Service (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-01-14 135664]

R3 Com4QLBEx;Com4QLBEx;c:\program files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [2008-04-03 193840]

R3 dump_wmimmc;dump_wmimmc;c:\program files (x86)\steam\steamapps\common\ava\Binaries\GameGuard\dump_wmimmc.sys [x]

R3 EagleX64;EagleX64;c:\windows\system32\drivers\EagleX64.sys [x]

R3 gupdatem;Google Update Service (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-01-14 135664]

R3 NETw3v64;Intel® PRO/Wireless 3945ABG Adapter Driver for Windows Vista 64 Bit;c:\windows\system32\DRIVERS\NETw3v64.sys [x]

R3 TKFsAc;TKFsAc;c:\windows\system32\TKFsAc2k64.sys [2009-04-21 107040]

R3 TKFsAv;TKFsAv;c:\windows\system32\TKFsAv2k64.sys [2009-08-28 44064]

R3 TKFsFt;TKFsFt;c:\windows\system32\TKFsFt2k64.sys [x]

R3 TKRgAc;TKRgAc;c:\windows\system32\TKRgAc2k64.sys [2009-05-13 60448]

R3 TKRgFt;TKRgFt;c:\windows\system32\TKRgFtXp64.sys [2009-05-27 35872]

R3 vtany;vtany;c:\windows\vtany.sys [x]

R3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework64\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 1020768]

R3 WPRO_40_1340;WinPcap Packet Driver (WPRO_40_1340);c:\windows\system32\drivers\WPRO_40_1340.sys [x]

R3 yukonx64;NDIS6.0 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk60x64.sys [x]

S2 {55662437-DA8C-40c0-AADA-2C816A897A49};Power Control [2009/05/16 02:56];c:\program files (x86)\Hewlett-Packard\Media\DVD\000.fcl [2008-11-29 01:04 146928]

S2 AESTFilters;Andrea ST Filters Service;c:\windows\System32\DriverStore\FileRepository\stwrt64.inf_58be29c0\AESTSr64.exe [x]

S2 AntiVirSchedulerService;Avira AntiVir Scheduler;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [2009-05-13 108289]

S2 hpsrv;HP Service;c:\windows\system32\Hpservice.exe [x]

S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2011-08-31 366152]

S2 Recovery Service for Windows;Recovery Service for Windows;c:\program files (x86)\SMINST\BLService.exe [2008-12-18 365952]

S2 TVCapSvc;TV Background Capture Service (TVBCS);c:\program files (x86)\Hewlett-Packard\Media\TV\Kernel\TV\TVCapSvc.exe [2009-02-09 296320]

S2 TVSched;TV Task Scheduler (TVTS);c:\program files (x86)\Hewlett-Packard\Media\TV\Kernel\TV\TVSched.exe [2009-02-09 116096]

S2 vfsFPService;Validity Fingerprint Service;c:\windows\system32\vfsFPService.exe [2008-11-18 721712]

S3 enecir;ENE CIR Receiver;c:\windows\system32\DRIVERS\enecir.sys [x]

S3 JMCR;JMCR;c:\windows\system32\DRIVERS\jmcr.sys [x]

S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [x]

S3 NETw5v64;Intel® Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit;c:\windows\system32\DRIVERS\NETw5v64.sys [x]

S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda64v.sys [x]

.

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]

2008-06-09 17:14 451872 ----a-w- c:\program files (x86)\Common Files\LightScribe\LSRunOnce.exe

.

Contents of the 'Scheduled Tasks' folder

.

2011-11-11 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-01-14 23:09]

.

2011-11-11 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-01-14 23:09]

.

2011-11-08 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3706164209-2383976941-905055343-1000Core.job

- c:\users\Jia Lin Hong\AppData\Local\Google\Update\GoogleUpdate.exe [2009-08-22 18:35]

.

2011-11-11 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3706164209-2383976941-905055343-1000UA.job

- c:\users\Jia Lin Hong\AppData\Local\Google\Update\GoogleUpdate.exe [2009-08-22 18:35]

.

2011-11-04 c:\windows\Tasks\HPCeeScheduleForJia Lin Hong.job

- c:\program files (x86)\hewlett-packard\sdp\ceement\HPCEE.exe [2009-02-06 19:34]

.

2011-11-09 c:\windows\Tasks\RealUpgradeScheduledTaskS-1-5-21-3706164209-2383976941-905055343-1000.job

- c:\program files (x86)\Real\RealUpgrade\realupgrade.exe [2011-09-27 17:40]

.

.

--------- x86-64 -----------

.

.

------- Supplementary Scan -------

.

uStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=91&bd=Pavilion&pf=cnnb

uLocal Page = c:\windows\system32\blank.htm

mStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=91&bd=Pavilion&pf=cnnb

mLocal Page = c:\windows\SysWOW64\blank.htm

uInternet Settings,ProxyOverride = <local>

IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000

TCP: DhcpNameServer = 167.206.254.1 167.206.254.2

CLSID: {603d3801-bd81-11d0-a3a5-00c04fd706ec} - %SystemRoot%\SysWow64\browseui.dll

FF - ProfilePath - c:\users\Jia Lin Hong\AppData\Roaming\Mozilla\Firefox\Profiles\xt3ebp7e.default\

FF - prefs.js: browser.search.defaulturl - Bing

FF - prefs.js: browser.search.selectedEngine - Google

FF - prefs.js: browser.startup.homepage - hxxp://www.msn.com/?pc=Z192&install_date=20111008

FF - prefs.js: keyword.URL - hxxp://www.bing.com/search?pc=Z192&form=ZGAADF&install_date=20111008&q=

FF - prefs.js: network.proxy.type - 0

.

.

[HKEY_LOCAL_MACHINE\system\ControlSet001\Services\npggsvc]

"ImagePath"="c:\windows\system32\GameMon.des -service"

.

[HKEY_LOCAL_MACHINE\system\ControlSet001\Services\{55662437-DA8C-40c0-AADA-2C816A897A49}]

"ImagePath"="\??\c:\program files (x86)\Hewlett-Packard\Media\DVD\000.fcl"

.

--------------------- LOCKED REGISTRY KEYS ---------------------

.

[HKEY_USERS\S-1-5-21-3706164209-2383976941-905055343-1000\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]

@Allowed: (Read) (RestrictedCode)

.

[HKEY_USERS\S-1-5-21-3706164209-2383976941-905055343-1000\Software\SecuROM\License information*]

@Allowed: (Read) (RestrictedCode)

"datasecu"=hex:37,af,d5,d0,be,20,fe,35,45,c1,82,2e,99,23,bf,b9,27,74,76,7c,c7,

38,0e,0d,0d,5d,d0,11,12,72,59,00,6e,c0,97,ca,42,f6,33,ec,b7,01,9a,c4,6e,e7,\

"rkeysecu"=hex:0d,9d,16,9c,e8,57,46,35,e0,6c,51,77,2e,7f,5d,c2

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10w_ActiveX.exe,-101"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10w_ActiveX.exe"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Shockwave Flash Object"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10w.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]

@="0"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]

@="ShockwaveFlash.ShockwaveFlash.10"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10w.ocx, 1"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="ShockwaveFlash.ShockwaveFlash"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Macromedia Flash Factory Object"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10w.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]

@="FlashFactory.FlashFactory.1"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10w.ocx, 1"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="FlashFactory.FlashFactory"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]

@Denied: (A 2) (Everyone)

@="IFlashBroker4"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\TypeLib\{D27CDB6B-AE6D-11CF-96B8-444553540000}]

@Denied: (A 2) (Everyone)

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\TypeLib\{D27CDB6B-AE6D-11CF-96B8-444553540000}\1.0]

@="Shockwave Flash"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\TypeLib\{FAB3E735-69C7-453B-A446-B6823C6DF1C9}]

@Denied: (A 2) (Everyone)

@=""

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\TypeLib\{FAB3E735-69C7-453B-A446-B6823C6DF1C9}\1.0]

@="FlashBroker"

.

[HKEY_LOCAL_MACHINE\software\Wow6432Node\Classes]

"SymbolicLinkValue"=hex(6):5c,00,52,00,45,00,47,00,49,00,53,00,54,00,52,00,59,

00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,4f,00,46,00,\

.

------------------------ Other Running Processes ------------------------

.

c:\program files (x86)\DigitalPersona\Bin\DpHostW.exe

c:\program files (x86)\Common Files\LightScribe\LSSrvc.exe

c:\windows\SysWOW64\PnkBstrA.exe

c:\program files (x86)\CyberLink\Shared files\RichVideo.exe

.

**************************************************************************

.

Completion time: 2011-11-10 22:10:23 - machine was rebooted

ComboFix-quarantined-files.txt 2011-11-11 03:10

ComboFix2.txt 2011-11-10 22:03

.

Pre-Run: 18,917,232,640 bytes free

Post-Run: 18,680,127,488 bytes free

.

- - End Of File - - 5D78BFCD0863BEB75AC63F32EF6F2E92

Link to post
Share on other sites

The scan found no threats in my laptop.

22:37:13.0037 3508 TDSS rootkit removing tool 2.6.17.0 Nov 9 2011 16:48:26

22:37:13.0223 3508 ============================================================

22:37:13.0223 3508 Current date / time: 2011/11/10 22:37:13.0223

22:37:13.0223 3508 SystemInfo:

22:37:13.0223 3508

22:37:13.0224 3508 OS Version: 6.0.6002 ServicePack: 2.0

22:37:13.0224 3508 Product type: Workstation

22:37:13.0224 3508 ComputerName: USER-PC

22:37:13.0224 3508 UserName: User

22:37:13.0224 3508 Windows directory: C:\Windows

22:37:13.0224 3508 System windows directory: C:\Windows

22:37:13.0224 3508 Running under WOW64

22:37:13.0224 3508 Processor architecture: Intel x64

22:37:13.0224 3508 Number of processors: 2

22:37:13.0224 3508 Page size: 0x1000

22:37:13.0224 3508 Boot type: Normal boot

22:37:13.0224 3508 ============================================================

22:37:14.0410 3508 Initialize success

22:37:16.0035 2316 ============================================================

22:37:16.0035 2316 Scan started

22:37:16.0035 2316 Mode: Manual;

22:37:16.0035 2316 ============================================================

22:37:16.0800 2316 Accelerometer (a768c6f605bc395d3b57fa0dc3ac3457) C:\Windows\system32\DRIVERS\Accelerometer.sys

22:37:16.0801 2316 Accelerometer - ok

22:37:16.0841 2316 ACPI (1965aaffab07e3fb03c77f81beba3547) C:\Windows\system32\drivers\acpi.sys

22:37:16.0846 2316 ACPI - ok

22:37:16.0916 2316 adp94xx (f14215e37cf124104575073f782111d2) C:\Windows\system32\drivers\adp94xx.sys

22:37:16.0925 2316 adp94xx - ok

22:37:16.0953 2316 adpahci (7d05a75e3066861a6610f7ee04ff085c) C:\Windows\system32\drivers\adpahci.sys

22:37:16.0961 2316 adpahci - ok

22:37:16.0974 2316 adpu160m (820a201fe08a0c345b3bedbc30e1a77c) C:\Windows\system32\drivers\adpu160m.sys

22:37:16.0978 2316 adpu160m - ok

22:37:16.0992 2316 adpu320 (9b4ab6854559dc168fbb4c24fc52e794) C:\Windows\system32\drivers\adpu320.sys

22:37:16.0996 2316 adpu320 - ok

22:37:17.0083 2316 AFD (0cc146c4addea45791b18b1e2659f4a9) C:\Windows\system32\drivers\afd.sys

22:37:17.0089 2316 AFD - ok

22:37:17.0113 2316 agp440 (f6f6793b7f17b550ecfdbd3b229173f7) C:\Windows\system32\drivers\agp440.sys

22:37:17.0115 2316 agp440 - ok

22:37:17.0128 2316 aic78xx (222cb641b4b8a1d1126f8033f9fd6a00) C:\Windows\system32\drivers\djsvs.sys

22:37:17.0132 2316 aic78xx - ok

22:37:17.0180 2316 aliide (e0ca5bb8e6c79533dc6b1da7361a201e) C:\Windows\system32\drivers\aliide.sys

22:37:17.0181 2316 aliide - ok

22:37:17.0193 2316 amdide (7034f8d1b9703d711d3f92c95deb377d) C:\Windows\system32\drivers\amdide.sys

22:37:17.0195 2316 amdide - ok

22:37:17.0226 2316 AmdK8 (cdc3632a3a5ea4dbb83e46076a3165a1) C:\Windows\system32\drivers\amdk8.sys

22:37:17.0227 2316 AmdK8 - ok

22:37:17.0277 2316 Amfilter (71aff825b960731e2ae366467bc0d1f3) C:\Windows\system32\DRIVERS\Amfltx64.sys

22:37:17.0279 2316 Amfilter - ok

22:37:17.0350 2316 Amusbprt (8f1db3d133197affa3a721953eb0988c) C:\Windows\system32\DRIVERS\Amusbx64.sys

22:37:17.0352 2316 Amusbprt - ok

22:37:17.0427 2316 arc (ba8417d4765f3988ff921f30f630e303) C:\Windows\system32\drivers\arc.sys

22:37:17.0431 2316 arc - ok

22:37:17.0444 2316 arcsas (9d41c435619733b34cc16a511e644b11) C:\Windows\system32\drivers\arcsas.sys

22:37:17.0447 2316 arcsas - ok

22:37:17.0515 2316 AsyncMac (22d13ff3dafec2a80634752b1eaa2de6) C:\Windows\system32\DRIVERS\asyncmac.sys

22:37:17.0517 2316 AsyncMac - ok

22:37:17.0544 2316 atapi (e68d9b3a3905619732f7fe039466a623) C:\Windows\system32\drivers\atapi.sys

22:37:17.0544 2316 atapi - ok

22:37:17.0603 2316 avgntflt (c30b5fc0adcdfba7668e99baf0cbf58e) C:\Windows\system32\DRIVERS\avgntflt.sys

22:37:17.0607 2316 avgntflt - ok

22:37:17.0794 2316 Beep - ok

22:37:17.0828 2316 blbdrive (79feeb40056683f8f61398d81dda65d2) C:\Windows\system32\drivers\blbdrive.sys

22:37:17.0829 2316 blbdrive - ok

22:37:17.0866 2316 bowser (2348447a80920b2493a9b582a23e81e1) C:\Windows\system32\DRIVERS\bowser.sys

22:37:17.0869 2316 bowser - ok

22:37:17.0892 2316 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\drivers\brfiltlo.sys

22:37:17.0893 2316 BrFiltLo - ok

22:37:17.0951 2316 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\drivers\brfiltup.sys

22:37:17.0952 2316 BrFiltUp - ok

22:37:18.0018 2316 Brserid (f0f0ba4d815be446aa6a4583ca3bca9b) C:\Windows\system32\drivers\brserid.sys

22:37:18.0021 2316 Brserid - ok

22:37:18.0042 2316 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\system32\drivers\brserwdm.sys

22:37:18.0044 2316 BrSerWdm - ok

22:37:18.0056 2316 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\system32\drivers\brusbmdm.sys

22:37:18.0057 2316 BrUsbMdm - ok

22:37:18.0072 2316 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\system32\drivers\brusbser.sys

22:37:18.0073 2316 BrUsbSer - ok

22:37:18.0125 2316 BTHMODEM (e0777b34e05f8a82a21856efc900c29f) C:\Windows\system32\drivers\bthmodem.sys

22:37:18.0126 2316 BTHMODEM - ok

22:37:18.0148 2316 catchme - ok

22:37:18.0181 2316 cdfs (b4d787db8d30793a4d4df9feed18f136) C:\Windows\system32\DRIVERS\cdfs.sys

22:37:18.0185 2316 cdfs - ok

22:37:18.0229 2316 cdrom (c025aa69be3d0d25c7a2e746ef6f94fc) C:\Windows\system32\DRIVERS\cdrom.sys

22:37:18.0231 2316 cdrom - ok

22:37:18.0276 2316 circlass (02ea568d498bbdd4ba55bf3fce34d456) C:\Windows\system32\DRIVERS\circlass.sys

22:37:18.0277 2316 circlass - ok

22:37:18.0311 2316 CLFS (3dca9a18b204939cfb24bea53e31eb48) C:\Windows\system32\CLFS.sys

22:37:18.0318 2316 CLFS - ok

22:37:18.0364 2316 CmBatt (b52d9a14ce4101577900a364ba86f3df) C:\Windows\system32\DRIVERS\CmBatt.sys

22:37:18.0365 2316 CmBatt - ok

22:37:18.0380 2316 cmdide (8c6aa24c1d7273a02284588426ab8ce3) C:\Windows\system32\drivers\cmdide.sys

22:37:18.0381 2316 cmdide - ok

22:37:18.0399 2316 Compbatt (7fb8ad01db0eabe60c8a861531a8f431) C:\Windows\system32\DRIVERS\compbatt.sys

22:37:18.0400 2316 Compbatt - ok

22:37:18.0419 2316 crcdisk (a8585b6412253803ce8efcbd6d6dc15c) C:\Windows\system32\drivers\crcdisk.sys

22:37:18.0422 2316 crcdisk - ok

22:37:18.0478 2316 DfsC (8b722ba35205c71e7951cdc4cdbade19) C:\Windows\system32\Drivers\dfsc.sys

22:37:18.0481 2316 DfsC - ok

22:37:18.0566 2316 disk (b0107e40ecdb5fa692ebf832f295d905) C:\Windows\system32\drivers\disk.sys

22:37:18.0569 2316 disk - ok

22:37:18.0657 2316 drmkaud (f1a78a98cfc2ee02144c6bec945447e6) C:\Windows\system32\drivers\drmkaud.sys

22:37:18.0658 2316 drmkaud - ok

22:37:18.0826 2316 dump_wmimmc - ok

22:37:18.0879 2316 DXGKrnl (b8e554e502d5123bc111f99d6a2181b4) C:\Windows\System32\drivers\dxgkrnl.sys

22:37:18.0892 2316 DXGKrnl - ok

22:37:18.0946 2316 E1G60 (264cee7b031a9d6c827f3d0cb031f2fe) C:\Windows\system32\DRIVERS\E1G6032E.sys

22:37:18.0949 2316 E1G60 - ok

22:37:18.0980 2316 EagleX64 - ok

22:37:19.0042 2316 Ecache (5f94962be5a62db6e447ff6470c4f48a) C:\Windows\system32\drivers\ecache.sys

22:37:19.0045 2316 Ecache - ok

22:37:19.0084 2316 elxstor (c4636d6e10469404ab5308d9fd45ed07) C:\Windows\system32\drivers\elxstor.sys

22:37:19.0093 2316 elxstor - ok

22:37:19.0144 2316 enecir (f218a3a27ed6592c0e22ec3595554447) C:\Windows\system32\DRIVERS\enecir.sys

22:37:19.0146 2316 enecir - ok

22:37:19.0165 2316 ErrDev (bc3a58e938bb277e46bf4b3003b01abd) C:\Windows\system32\drivers\errdev.sys

22:37:19.0167 2316 ErrDev - ok

22:37:19.0225 2316 exfat (486844f47b6636044a42454614ed4523) C:\Windows\system32\drivers\exfat.sys

22:37:19.0229 2316 exfat - ok

22:37:19.0269 2316 fastfat (1a4bee34277784619ddaf0422c0c6e23) C:\Windows\system32\drivers\fastfat.sys

22:37:19.0273 2316 fastfat - ok

22:37:19.0315 2316 fdc (81b79b6df71fa1d2c6d688d830616e39) C:\Windows\system32\DRIVERS\fdc.sys

22:37:19.0316 2316 fdc - ok

22:37:19.0371 2316 FileInfo (457b7d1d533e4bd62a99aed9c7bb4c59) C:\Windows\system32\drivers\fileinfo.sys

22:37:19.0374 2316 FileInfo - ok

22:37:19.0411 2316 Filetrace (d421327fd6efccaf884a54c58e1b0d7f) C:\Windows\system32\drivers\filetrace.sys

22:37:19.0413 2316 Filetrace - ok

22:37:19.0452 2316 flpydisk (230923ea2b80f79b0f88d90f87b87ebd) C:\Windows\system32\DRIVERS\flpydisk.sys

22:37:19.0453 2316 flpydisk - ok

22:37:19.0502 2316 FltMgr (e3041bc26d6930d61f42aedb79c91720) C:\Windows\system32\drivers\fltmgr.sys

22:37:19.0507 2316 FltMgr - ok

22:37:19.0531 2316 Fs_Rec (29d99e860a1ca0a03c6a733fdd0da703) C:\Windows\system32\drivers\Fs_Rec.sys

22:37:19.0532 2316 Fs_Rec - ok

22:37:19.0564 2316 gagp30kx (c8e416668d3dc2be3d4fe4c79224997f) C:\Windows\system32\drivers\gagp30kx.sys

22:37:19.0567 2316 gagp30kx - ok

22:37:19.0629 2316 HdAudAddService (df45f8142dc6df9d18c39b3effbd0409) C:\Windows\system32\drivers\HdAudio.sys

22:37:19.0634 2316 HdAudAddService - ok

22:37:19.0714 2316 HDAudBus (f942c5820205f2fb453243edfec82a3d) C:\Windows\system32\DRIVERS\HDAudBus.sys

22:37:19.0739 2316 HDAudBus - ok

22:37:19.0772 2316 HidBth (b4881c84a180e75b8c25dc1d726c375f) C:\Windows\system32\drivers\hidbth.sys

22:37:19.0774 2316 HidBth - ok

22:37:19.0807 2316 HidIr (5f47839455d01ff6403b008d481a6f5b) C:\Windows\system32\DRIVERS\hidir.sys

22:37:19.0809 2316 HidIr - ok

22:37:19.0865 2316 HidUsb (443bdd2d30bb4f00795c797e2cf99edf) C:\Windows\system32\DRIVERS\hidusb.sys

22:37:19.0867 2316 HidUsb - ok

22:37:19.0919 2316 HpCISSs (d7109a1e6bd2dfdbcba72a6bc626a13b) C:\Windows\system32\drivers\hpcisss.sys

22:37:19.0922 2316 HpCISSs - ok

22:37:19.0975 2316 hpdskflt (4bebf72764caa516119a9c1287eda930) C:\Windows\system32\DRIVERS\hpdskflt.sys

22:37:19.0977 2316 hpdskflt - ok

22:37:20.0002 2316 HpqKbFiltr (0ecc54fd34d6a089c300846b011e81d6) C:\Windows\system32\DRIVERS\HpqKbFiltr.sys

22:37:20.0003 2316 HpqKbFiltr - ok

22:37:20.0082 2316 HTTP (098f1e4e5c9cb5b0063a959063631610) C:\Windows\system32\drivers\HTTP.sys

22:37:20.0096 2316 HTTP - ok

22:37:20.0135 2316 i2omp (da94c854cea5fac549d4e1f6e88349e8) C:\Windows\system32\drivers\i2omp.sys

22:37:20.0137 2316 i2omp - ok

22:37:20.0196 2316 i8042prt (cbb597659a2713ce0c9cc20c88c7591f) C:\Windows\system32\DRIVERS\i8042prt.sys

22:37:20.0199 2316 i8042prt - ok

22:37:20.0227 2316 iaStorV (3e3bf3627d886736d0b4e90054f929f6) C:\Windows\system32\drivers\iastorv.sys

22:37:20.0236 2316 iaStorV - ok

22:37:20.0271 2316 iirsp (8c3951ad2fe886ef76c7b5027c3125d3) C:\Windows\system32\drivers\iirsp.sys

22:37:20.0277 2316 iirsp - ok

22:37:20.0333 2316 intelide (475490caf376e55e6e8b37bbdfeb2e81) C:\Windows\system32\drivers\intelide.sys

22:37:20.0335 2316 intelide - ok

22:37:20.0358 2316 intelppm (bfd84af32fa1bad6231c4585cb469630) C:\Windows\system32\DRIVERS\intelppm.sys

22:37:20.0359 2316 intelppm - ok

22:37:20.0404 2316 IpFilterDriver (d8aabc341311e4780d6fce8c73c0ad81) C:\Windows\system32\DRIVERS\ipfltdrv.sys

22:37:20.0407 2316 IpFilterDriver - ok

22:37:20.0422 2316 IpInIp - ok

22:37:20.0462 2316 IPMIDRV (9c2ee2e6e5a7203bfae15c299475ec67) C:\Windows\system32\drivers\ipmidrv.sys

22:37:20.0465 2316 IPMIDRV - ok

22:37:20.0480 2316 IPNAT (b7e6212f581ea5f6ab0c3a6ceeeb89be) C:\Windows\system32\DRIVERS\ipnat.sys

22:37:20.0483 2316 IPNAT - ok

22:37:20.0497 2316 IRENUM (8c42ca155343a2f11d29feca67faa88d) C:\Windows\system32\drivers\irenum.sys

22:37:20.0499 2316 IRENUM - ok

22:37:20.0530 2316 isapnp (0672bfcedc6fc468a2b0500d81437f4f) C:\Windows\system32\drivers\isapnp.sys

22:37:20.0531 2316 isapnp - ok

22:37:20.0574 2316 iScsiPrt (e4fdf99599f27ec25d2cf6d754243520) C:\Windows\system32\DRIVERS\msiscsi.sys

22:37:20.0578 2316 iScsiPrt - ok

22:37:20.0593 2316 iteatapi (63c766cdc609ff8206cb447a65abba4a) C:\Windows\system32\drivers\iteatapi.sys

22:37:20.0595 2316 iteatapi - ok

22:37:20.0628 2316 iteraid (1281fe73b17664631d12f643cbea3f59) C:\Windows\system32\drivers\iteraid.sys

22:37:20.0630 2316 iteraid - ok

22:37:20.0662 2316 JMCR (54df9eafb54a98e1a2ac3db69c16cf05) C:\Windows\system32\DRIVERS\jmcr.sys

22:37:20.0667 2316 JMCR - ok

22:37:20.0690 2316 kbdclass (423696f3ba6472dd17699209b933bc26) C:\Windows\system32\DRIVERS\kbdclass.sys

22:37:20.0692 2316 kbdclass - ok

22:37:20.0720 2316 kbdhid (dbdf75d51464fbc47d0104ec3d572c05) C:\Windows\system32\DRIVERS\kbdhid.sys

22:37:20.0721 2316 kbdhid - ok

22:37:20.0818 2316 KSecDD (476e2c1dcea45895994bef11c2a98715) C:\Windows\system32\Drivers\ksecdd.sys

22:37:20.0920 2316 KSecDD - ok

22:37:20.0948 2316 ksthunk (1d419cf43db29396ecd7113d129d94eb) C:\Windows\system32\drivers\ksthunk.sys

22:37:20.0950 2316 ksthunk - ok

22:37:21.0073 2316 lltdio (96ece2659b6654c10a0c310ae3a6d02c) C:\Windows\system32\DRIVERS\lltdio.sys

22:37:21.0077 2316 lltdio - ok

22:37:21.0105 2316 LSI_FC (acbe1af32d3123e330a07bfbc5ec4a9b) C:\Windows\system32\drivers\lsi_fc.sys

22:37:21.0109 2316 LSI_FC - ok

22:37:21.0174 2316 LSI_SAS (799ffb2fc4729fa46d2157c0065b3525) C:\Windows\system32\drivers\lsi_sas.sys

22:37:21.0176 2316 LSI_SAS - ok

22:37:21.0207 2316 LSI_SCSI (f445ff1daad8a226366bfaf42551226b) C:\Windows\system32\drivers\lsi_scsi.sys

22:37:21.0211 2316 LSI_SCSI - ok

22:37:21.0234 2316 luafv (52f87b9cc8932c2a7375c3b2a9be5e3e) C:\Windows\system32\drivers\luafv.sys

22:37:21.0238 2316 luafv - ok

22:37:21.0297 2316 MBAMProtector (23a854450dab5c9b7a42ab9be6f2e4bd) C:\Windows\system32\drivers\mbam.sys

22:37:21.0299 2316 MBAMProtector - ok

22:37:21.0322 2316 megasas (5c5cd6aaced32fb26c3fb34b3dcf972f) C:\Windows\system32\drivers\megasas.sys

22:37:21.0324 2316 megasas - ok

22:37:21.0358 2316 MegaSR (859bc2436b076c77c159ed694acfe8f8) C:\Windows\system32\drivers\megasr.sys

22:37:21.0367 2316 MegaSR - ok

22:37:21.0399 2316 Modem (59848d5cc74606f0ee7557983bb73c2e) C:\Windows\system32\drivers\modem.sys

22:37:21.0401 2316 Modem - ok

22:37:21.0421 2316 monitor (c247cc2a57e0a0c8c6dccf7807b3e9e5) C:\Windows\system32\DRIVERS\monitor.sys

22:37:21.0422 2316 monitor - ok

22:37:21.0442 2316 mouclass (9367304e5e412b120cf5f4ea14e4e4f1) C:\Windows\system32\DRIVERS\mouclass.sys

22:37:21.0445 2316 mouclass - ok

22:37:21.0464 2316 mouhid (c2c2bd5c5ce5aaf786ddd74b75d2ac69) C:\Windows\system32\DRIVERS\mouhid.sys

22:37:21.0465 2316 mouhid - ok

22:37:21.0479 2316 MountMgr (11bc9b1e8801b01f7f6adb9ead30019b) C:\Windows\system32\drivers\mountmgr.sys

22:37:21.0482 2316 MountMgr - ok

22:37:21.0496 2316 mpio (f8276eb8698142884498a528dfea8478) C:\Windows\system32\drivers\mpio.sys

22:37:21.0499 2316 mpio - ok

22:37:21.0523 2316 mpsdrv (c92b9abdb65a5991e00c28f13491dba2) C:\Windows\system32\drivers\mpsdrv.sys

22:37:21.0526 2316 mpsdrv - ok

22:37:21.0543 2316 Mraid35x (3c200630a89ef2c0864d515b7a75802e) C:\Windows\system32\drivers\mraid35x.sys

22:37:21.0544 2316 Mraid35x - ok

22:37:21.0570 2316 MRxDAV (7c1de4aa96dc0c071611f9e7de02a68d) C:\Windows\system32\drivers\mrxdav.sys

22:37:21.0574 2316 MRxDAV - ok

22:37:21.0603 2316 mrxsmb (1485811b320ff8c7edad1caebb1c6c2b) C:\Windows\system32\DRIVERS\mrxsmb.sys

22:37:21.0608 2316 mrxsmb - ok

22:37:21.0677 2316 mrxsmb10 (3b929a60c833fc615fd97fba82bc7632) C:\Windows\system32\DRIVERS\mrxsmb10.sys

22:37:21.0682 2316 mrxsmb10 - ok

22:37:21.0709 2316 mrxsmb20 (c64ab3e1f53b4f5b5bb6d796b2d7bec3) C:\Windows\system32\DRIVERS\mrxsmb20.sys

22:37:21.0713 2316 mrxsmb20 - ok

22:37:21.0809 2316 msahci (aa459f2ab3ab603c357ff117cae3d818) C:\Windows\system32\drivers\msahci.sys

22:37:21.0814 2316 msahci - ok

22:37:21.0877 2316 msdsm (264bbb4aaf312a485f0e44b65a6b7202) C:\Windows\system32\drivers\msdsm.sys

22:37:21.0881 2316 msdsm - ok

22:37:21.0934 2316 Msfs (704f59bfc4512d2bb0146aec31b10a7c) C:\Windows\system32\drivers\Msfs.sys

22:37:21.0935 2316 Msfs - ok

22:37:21.0986 2316 msisadrv (00ebc952961664780d43dca157e79b27) C:\Windows\system32\drivers\msisadrv.sys

22:37:21.0989 2316 msisadrv - ok

22:37:22.0075 2316 MSKSSRV (0ea73e498f53b96d83dbfca074ad4cf8) C:\Windows\system32\drivers\MSKSSRV.sys

22:37:22.0077 2316 MSKSSRV - ok

22:37:22.0091 2316 MSPCLOCK (52e59b7e992a58e740aa63f57edbae8b) C:\Windows\system32\drivers\MSPCLOCK.sys

22:37:22.0093 2316 MSPCLOCK - ok

22:37:22.0123 2316 MSPQM (49084a75bae043ae02d5b44d02991bb2) C:\Windows\system32\drivers\MSPQM.sys

22:37:22.0127 2316 MSPQM - ok

22:37:22.0168 2316 MsRPC (dc6ccf440cdede4293db41c37a5060a5) C:\Windows\system32\drivers\MsRPC.sys

22:37:22.0174 2316 MsRPC - ok

22:37:22.0195 2316 mssmbios (855796e59df77ea93af46f20155bf55b) C:\Windows\system32\DRIVERS\mssmbios.sys

22:37:22.0198 2316 mssmbios - ok

22:37:22.0217 2316 MSTEE (86d632d75d05d5b7c7c043fa3564ae86) C:\Windows\system32\drivers\MSTEE.sys

22:37:22.0219 2316 MSTEE - ok

22:37:22.0255 2316 Mup (0cc49f78d8aca0877d885f149084e543) C:\Windows\system32\Drivers\mup.sys

22:37:22.0257 2316 Mup - ok

22:37:22.0326 2316 NativeWifiP (2007b826c4acd94ae32232b41f0842b9) C:\Windows\system32\DRIVERS\nwifi.sys

22:37:22.0330 2316 NativeWifiP - ok

22:37:22.0410 2316 NDIS (65950e07329fcee8e6516b17c8d0abb6) C:\Windows\system32\drivers\ndis.sys

22:37:22.0418 2316 NDIS - ok

22:37:22.0451 2316 NdisTapi (64df698a425478e321981431ac171334) C:\Windows\system32\DRIVERS\ndistapi.sys

22:37:22.0452 2316 NdisTapi - ok

22:37:22.0493 2316 Ndisuio (8baa43196d7b5bb972c9a6b2bbf61a19) C:\Windows\system32\DRIVERS\ndisuio.sys

22:37:22.0495 2316 Ndisuio - ok

22:37:22.0536 2316 NdisWan (f8158771905260982ce724076419ef19) C:\Windows\system32\DRIVERS\ndiswan.sys

22:37:22.0539 2316 NdisWan - ok

22:37:22.0563 2316 NDProxy (9cb77ed7cb72850253e973a2d6afdf49) C:\Windows\system32\drivers\NDProxy.sys

22:37:22.0566 2316 NDProxy - ok

22:37:22.0587 2316 NetBIOS (a499294f5029a7862adc115bda7371ce) C:\Windows\system32\DRIVERS\netbios.sys

22:37:22.0589 2316 NetBIOS - ok

22:37:22.0630 2316 netbt (fc2c792ebddc8e28df939d6a92c83d61) C:\Windows\system32\DRIVERS\netbt.sys

22:37:22.0635 2316 netbt - ok

22:37:22.0774 2316 NETw3v64 (c86984aee87900c1eeb6942ede3bf4b6) C:\Windows\system32\DRIVERS\NETw3v64.sys

22:37:22.0998 2316 NETw3v64 - ok

22:37:24.0319 2316 NETw5v64 (bfbd278f8c9bcec693345759ac278e14) C:\Windows\system32\DRIVERS\NETw5v64.sys

22:37:24.0424 2316 NETw5v64 - ok

22:37:24.0488 2316 nfrd960 (4ac08bd6af2df42e0c3196d826c8aea7) C:\Windows\system32\drivers\nfrd960.sys

22:37:24.0490 2316 nfrd960 - ok

22:37:24.0517 2316 Npfs (b298874f8e0ea93f06ec40aa8d146478) C:\Windows\system32\drivers\Npfs.sys

22:37:24.0519 2316 Npfs - ok

22:37:24.0561 2316 NPPTNT2 - ok

22:37:24.0600 2316 nsiproxy (1523af19ee8b030ba682f7a53537eaeb) C:\Windows\system32\drivers\nsiproxy.sys

22:37:24.0602 2316 nsiproxy - ok

22:37:24.0667 2316 Ntfs (bac869dfb98e499ba4d9bb1fb43270e1) C:\Windows\system32\drivers\Ntfs.sys

22:37:24.0681 2316 Ntfs - ok

22:37:24.0696 2316 Null (dd5d684975352b85b52e3fd5347c20cb) C:\Windows\system32\drivers\Null.sys

22:37:24.0697 2316 Null - ok

22:37:24.0741 2316 NVHDA (ad37248bd442d41c9a896e53eb8a85ee) C:\Windows\system32\drivers\nvhda64v.sys

22:37:24.0744 2316 NVHDA - ok

22:37:25.0009 2316 nvlddmkm (fd39b98ff1bb8ed3848781497e9d02e0) C:\Windows\system32\DRIVERS\nvlddmkm.sys

22:37:25.0276 2316 nvlddmkm - ok

22:37:25.0291 2316 nvraid (2c040b7ada5b06f6facadac8514aa034) C:\Windows\system32\drivers\nvraid.sys

22:37:25.0294 2316 nvraid - ok

22:37:25.0307 2316 nvstor (f7ea0fe82842d05eda3efdd376dbfdba) C:\Windows\system32\drivers\nvstor.sys

22:37:25.0308 2316 nvstor - ok

22:37:25.0333 2316 nv_agp (19067ca93075ef4823e3938a686f532f) C:\Windows\system32\drivers\nv_agp.sys

22:37:25.0338 2316 nv_agp - ok

22:37:25.0348 2316 NwlnkFlt - ok

22:37:25.0361 2316 NwlnkFwd - ok

22:37:25.0399 2316 ohci1394 (b5b1ce65ac15bbd11c0619e3ef7cfc28) C:\Windows\system32\DRIVERS\ohci1394.sys

22:37:25.0402 2316 ohci1394 - ok

22:37:25.0434 2316 Parport (aecd57f94c887f58919f307c35498ea0) C:\Windows\system32\drivers\parport.sys

22:37:25.0437 2316 Parport - ok

22:37:25.0463 2316 partmgr (f9b5eda4c17a2be7663f064dbf0fe254) C:\Windows\system32\drivers\partmgr.sys

22:37:25.0466 2316 partmgr - ok

22:37:25.0493 2316 pci (47ab1e0fc9d0e12bb53ba246e3a0906d) C:\Windows\system32\drivers\pci.sys

22:37:25.0497 2316 pci - ok

22:37:25.0516 2316 pciide (15e5c3f89a3452efbda3b39816dbc4ee) C:\Windows\system32\drivers\pciide.sys

22:37:25.0517 2316 pciide - ok

22:37:25.0542 2316 pcmcia (037661f3d7c507c9993b7010ceee6288) C:\Windows\system32\drivers\pcmcia.sys

22:37:25.0545 2316 pcmcia - ok

22:37:25.0586 2316 PEAUTH (58865916f53592a61549b04941bfd80d) C:\Windows\system32\drivers\peauth.sys

22:37:25.0597 2316 PEAUTH - ok

22:37:25.0677 2316 PptpMiniport (23386e9952025f5f21c368971e2e7301) C:\Windows\system32\DRIVERS\raspptp.sys

22:37:25.0680 2316 PptpMiniport - ok

22:37:25.0715 2316 Processor (5080e59ecee0bc923f14018803aa7a01) C:\Windows\system32\drivers\processr.sys

22:37:25.0719 2316 Processor - ok

22:37:25.0785 2316 PSched (c5ab7f0809392d0da027f4a2a81bfa31) C:\Windows\system32\DRIVERS\pacer.sys

22:37:25.0788 2316 PSched - ok

22:37:25.0838 2316 ql2300 (0b83f4e681062f3839be2ec1d98fd94a) C:\Windows\system32\drivers\ql2300.sys

22:37:25.0872 2316 ql2300 - ok

22:37:25.0901 2316 ql40xx (e1c80f8d4d1e39ef9595809c1369bf2a) C:\Windows\system32\drivers\ql40xx.sys

22:37:25.0905 2316 ql40xx - ok

22:37:25.0926 2316 QWAVEdrv (e8d76edab77ec9c634c27b8eac33adc5) C:\Windows\system32\drivers\qwavedrv.sys

22:37:25.0928 2316 QWAVEdrv - ok

22:37:25.0941 2316 RasAcd (1013b3b663a56d3ddd784f581c1bd005) C:\Windows\system32\DRIVERS\rasacd.sys

22:37:25.0942 2316 RasAcd - ok

22:37:25.0982 2316 Rasl2tp (ac7bc4d42a7e558718dfdec599bbfc2c) C:\Windows\system32\DRIVERS\rasl2tp.sys

22:37:25.0986 2316 Rasl2tp - ok

22:37:26.0027 2316 RasPppoe (4517fbf8b42524afe4ede1de102aae3e) C:\Windows\system32\DRIVERS\raspppoe.sys

22:37:26.0029 2316 RasPppoe - ok

22:37:26.0048 2316 RasSstp (c6a593b51f34c33e5474539544072527) C:\Windows\system32\DRIVERS\rassstp.sys

22:37:26.0051 2316 RasSstp - ok

22:37:26.0080 2316 rdbss (322db5c6b55e8d8ee8d6f358b2aaabb1) C:\Windows\system32\DRIVERS\rdbss.sys

22:37:26.0085 2316 rdbss - ok

22:37:26.0098 2316 RDPCDD (603900cc05f6be65ccbf373800af3716) C:\Windows\system32\DRIVERS\RDPCDD.sys

22:37:26.0099 2316 RDPCDD - ok

22:37:26.0148 2316 rdpdr (c045d1fb111c28df0d1be8d4bda22c06) C:\Windows\system32\drivers\rdpdr.sys

22:37:26.0153 2316 rdpdr - ok

22:37:26.0166 2316 RDPENCDD (cab9421daf3d97b33d0d055858e2c3ab) C:\Windows\system32\drivers\rdpencdd.sys

22:37:26.0167 2316 RDPENCDD - ok

22:37:26.0225 2316 RDPWD (b1d741c87cea8d7282146366cc9c3f81) C:\Windows\system32\drivers\RDPWD.sys

22:37:26.0230 2316 RDPWD - ok

22:37:26.0313 2316 rspndr (22a9cb08b1a6707c1550c6bf099aae73) C:\Windows\system32\DRIVERS\rspndr.sys

22:37:26.0316 2316 rspndr - ok

22:37:26.0374 2316 RTL8169 (8b91737da75add21cb1554b38089196a) C:\Windows\system32\DRIVERS\Rtlh64.sys

22:37:26.0377 2316 RTL8169 - ok

22:37:26.0418 2316 sbp2port (cd9c693589c60ad59bbbcfb0e524e01b) C:\Windows\system32\drivers\sbp2port.sys

22:37:26.0421 2316 sbp2port - ok

22:37:26.0471 2316 sdbus (b42ee50f7d24f837f925332eb349eca5) C:\Windows\system32\DRIVERS\sdbus.sys

22:37:26.0475 2316 sdbus - ok

22:37:26.0500 2316 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys

22:37:26.0502 2316 secdrv - ok

22:37:26.0531 2316 Serenum (f71bfe7ac6c52273b7c82cbf1bb2a222) C:\Windows\system32\drivers\serenum.sys

22:37:26.0532 2316 Serenum - ok

22:37:26.0550 2316 Serial (e62fac91ee288db29a9696a9d279929c) C:\Windows\system32\drivers\serial.sys

22:37:26.0553 2316 Serial - ok

22:37:26.0566 2316 sermouse (a842f04833684bceea7336211be478df) C:\Windows\system32\drivers\sermouse.sys

22:37:26.0567 2316 sermouse - ok

22:37:26.0610 2316 sffdisk (14d4b4465193a87c127933978e8c4106) C:\Windows\system32\drivers\sffdisk.sys

22:37:26.0611 2316 sffdisk - ok

22:37:26.0624 2316 sffp_mmc (7073aee3f82f3d598e3825962aa98ab2) C:\Windows\system32\drivers\sffp_mmc.sys

22:37:26.0635 2316 sffp_mmc - ok

22:37:26.0648 2316 sffp_sd (35e59ebe4a01a0532ed67975161c7b82) C:\Windows\system32\drivers\sffp_sd.sys

22:37:26.0649 2316 sffp_sd - ok

22:37:26.0664 2316 sfloppy (6b7838c94135768bd455cbdc23e39e5f) C:\Windows\system32\drivers\sfloppy.sys

22:37:26.0666 2316 sfloppy - ok

22:37:26.0726 2316 SiSRaid2 (7a5de502aeb719d4594c6471060a78b3) C:\Windows\system32\drivers\sisraid2.sys

22:37:26.0728 2316 SiSRaid2 - ok

22:37:26.0742 2316 SiSRaid4 (3a2f769fab9582bc720e11ea1dfb184d) C:\Windows\system32\drivers\sisraid4.sys

22:37:26.0745 2316 SiSRaid4 - ok

22:37:26.0781 2316 Smb (290b6f6a0ec4fcdfc90f5cb6d7020473) C:\Windows\system32\DRIVERS\smb.sys

22:37:26.0784 2316 Smb - ok

22:37:26.0846 2316 spldr (386c3c63f00a7040c7ec5e384217e89d) C:\Windows\system32\drivers\spldr.sys

22:37:26.0849 2316 spldr - ok

22:37:26.0891 2316 srv (880a57fccb571ebd063d4dd50e93e46d) C:\Windows\system32\DRIVERS\srv.sys

22:37:26.0899 2316 srv - ok

22:37:26.0964 2316 srv2 (a1ad14a6d7a37891fffeca35ebbb0730) C:\Windows\system32\DRIVERS\srv2.sys

22:37:26.0968 2316 srv2 - ok

22:37:27.0008 2316 srvnet (4bed62f4fa4d8300973f1151f4c4d8a7) C:\Windows\system32\DRIVERS\srvnet.sys

22:37:27.0012 2316 srvnet - ok

22:37:27.0138 2316 STHDA (ed1722f43ce61409ef68340402d6267d) C:\Windows\system32\DRIVERS\stwrt64.sys

22:37:27.0147 2316 STHDA - ok

22:37:27.0167 2316 swenum (8a851ca908b8b974f89c50d2e18d4f0c) C:\Windows\system32\DRIVERS\swenum.sys

22:37:27.0168 2316 swenum - ok

22:37:27.0195 2316 Symc8xx (2f26a2c6fc96b29beff5d8ed74e6625b) C:\Windows\system32\drivers\symc8xx.sys

22:37:27.0197 2316 Symc8xx - ok

22:37:27.0211 2316 Sym_hi (a909667976d3bccd1df813fed517d837) C:\Windows\system32\drivers\sym_hi.sys

22:37:27.0212 2316 Sym_hi - ok

22:37:27.0236 2316 Sym_u3 (36887b56ec2d98b9c362f6ae4de5b7b0) C:\Windows\system32\drivers\sym_u3.sys

22:37:27.0238 2316 Sym_u3 - ok

22:37:27.0275 2316 SynTP (f1e453df1ccb8ac217b6efcc77466d65) C:\Windows\system32\DRIVERS\SynTP.sys

22:37:27.0279 2316 SynTP - ok

22:37:27.0372 2316 Tcpip (4dad14118fbcf7c609f2a4ce21fbcc5f) C:\Windows\system32\drivers\tcpip.sys

22:37:27.0386 2316 Tcpip - ok

22:37:27.0438 2316 Tcpip6 (4dad14118fbcf7c609f2a4ce21fbcc5f) C:\Windows\system32\DRIVERS\tcpip.sys

22:37:27.0452 2316 Tcpip6 - ok

22:37:27.0494 2316 tcpipreg (c7e72a4071ee0200e3c075dacfb2b334) C:\Windows\system32\drivers\tcpipreg.sys

22:37:27.0497 2316 tcpipreg - ok

22:37:27.0523 2316 TDPIPE (1d8bf4aaa5fb7a2761475781dc1195bc) C:\Windows\system32\drivers\tdpipe.sys

22:37:27.0525 2316 TDPIPE - ok

22:37:27.0539 2316 TDTCP (7f7e00cdf609df657f4cda02dd1c9bb1) C:\Windows\system32\drivers\tdtcp.sys

22:37:27.0541 2316 TDTCP - ok

22:37:27.0571 2316 tdx (458919c8c42e398dc4802178d5ffee27) C:\Windows\system32\DRIVERS\tdx.sys

22:37:27.0574 2316 tdx - ok

22:37:27.0603 2316 TermDD (8c19678d22649ec002ef2282eae92f98) C:\Windows\system32\DRIVERS\termdd.sys

22:37:27.0605 2316 TermDD - ok

22:37:27.0657 2316 TKFsAc (2b2e8687292486e7dc5821226cfc3868) C:\Windows\system32\TKFsAc2k64.sys

22:37:27.0663 2316 TKFsAc - ok

22:37:27.0693 2316 TKFsAv (e4edec8398000fc469e1de87036598a1) C:\Windows\system32\TKFsAv2k64.sys

22:37:27.0699 2316 TKFsAv - ok

22:37:27.0757 2316 TKFsFt (117b11f673ca1411ff62c8afe6d4695f) C:\Windows\system32\TKFsFt2k64.sys

22:37:27.0761 2316 TKFsFt - ok

22:37:27.0788 2316 TKRgAc (2a58d1f3701209c97370085b74243cb7) C:\Windows\system32\TKRgAc2k64.sys

22:37:27.0793 2316 TKRgAc - ok

22:37:27.0854 2316 TKRgFt (621b679dd0e6cbebf96fd87c49422272) C:\Windows\system32\TKRgFtXp64.sys

22:37:27.0858 2316 TKRgFt - ok

22:37:27.0912 2316 tssecsrv (9e5409cd17c8bef193aad498f3bc2cb8) C:\Windows\system32\DRIVERS\tssecsrv.sys

22:37:27.0914 2316 tssecsrv - ok

22:37:27.0943 2316 tunmp (89ec74a9e602d16a75a4170511029b3c) C:\Windows\system32\DRIVERS\tunmp.sys

22:37:27.0945 2316 tunmp - ok

22:37:27.0985 2316 tunnel (30a9b3f45ad081bffc3bcaa9c812b609) C:\Windows\system32\DRIVERS\tunnel.sys

22:37:27.0987 2316 tunnel - ok

22:37:28.0009 2316 uagp35 (fec266ef401966311744bd0f359f7f56) C:\Windows\system32\drivers\uagp35.sys

22:37:28.0014 2316 uagp35 - ok

22:37:28.0053 2316 udfs (faf2640a2a76ed03d449e443194c4c34) C:\Windows\system32\DRIVERS\udfs.sys

22:37:28.0059 2316 udfs - ok

22:37:28.0116 2316 uliagpkx (4ec9447ac3ab462647f60e547208ca00) C:\Windows\system32\drivers\uliagpkx.sys

22:37:28.0118 2316 uliagpkx - ok

22:37:28.0151 2316 uliahci (697f0446134cdc8f99e69306184fbbb4) C:\Windows\system32\drivers\uliahci.sys

22:37:28.0156 2316 uliahci - ok

22:37:28.0181 2316 UlSata (31707f09846056651ea2c37858f5ddb0) C:\Windows\system32\drivers\ulsata.sys

22:37:28.0185 2316 UlSata - ok

22:37:28.0210 2316 ulsata2 (85e5e43ed5b48c8376281bab519271b7) C:\Windows\system32\drivers\ulsata2.sys

22:37:28.0214 2316 ulsata2 - ok

22:37:28.0231 2316 umbus (46e9a994c4fed537dd951f60b86ad3f4) C:\Windows\system32\DRIVERS\umbus.sys

22:37:28.0234 2316 umbus - ok

22:37:28.0303 2316 usbaudio (c6ba890de6e41857fbe84175519cae7d) C:\Windows\system32\drivers\usbaudio.sys

22:37:28.0306 2316 usbaudio - ok

22:37:28.0353 2316 usbccgp (07e3498fc60834219d2356293da0fecc) C:\Windows\system32\DRIVERS\usbccgp.sys

22:37:28.0356 2316 usbccgp - ok

22:37:28.0377 2316 usbcir (9247f7e0b65852c1f6631480984d6ed2) C:\Windows\system32\drivers\usbcir.sys

22:37:28.0380 2316 usbcir - ok

22:37:28.0442 2316 usbehci (827e44de934a736ea31e91d353eb126f) C:\Windows\system32\DRIVERS\usbehci.sys

22:37:30.0309 2316 usbehci - ok

22:37:30.0386 2316 usbhub (bb35cd80a2ececfadc73569b3d70c7d1) C:\Windows\system32\DRIVERS\usbhub.sys

22:37:30.0392 2316 usbhub - ok

22:37:30.0419 2316 usbohci (eba14ef0c07cec233f1529c698d0d154) C:\Windows\system32\drivers\usbohci.sys

22:37:30.0421 2316 usbohci - ok

22:37:30.0456 2316 usbprint (28b693b6d31e7b9332c1bdcefef228c1) C:\Windows\system32\DRIVERS\usbprint.sys

22:37:30.0458 2316 usbprint - ok

22:37:30.0500 2316 USBSTOR (b854c1558fca0c269a38663e8b59b581) C:\Windows\system32\DRIVERS\USBSTOR.SYS

22:37:30.0504 2316 USBSTOR - ok

22:37:30.0541 2316 usbuhci (b2872cbf9f47316abd0e0c74a1aba507) C:\Windows\system32\DRIVERS\usbuhci.sys

22:37:30.0543 2316 usbuhci - ok

22:37:30.0593 2316 usbvideo (fc33099877790d51b0927b7039059855) C:\Windows\system32\Drivers\usbvideo.sys

22:37:30.0596 2316 usbvideo - ok

22:37:30.0631 2316 vga (916b94bcf1e09873fff2d5fb11767bbc) C:\Windows\system32\DRIVERS\vgapnp.sys

22:37:30.0633 2316 vga - ok

22:37:30.0653 2316 VgaSave (b83ab16b51feda65dd81b8c59d114d63) C:\Windows\System32\drivers\vga.sys

22:37:30.0655 2316 VgaSave - ok

22:37:30.0672 2316 viaide (4f964e6828156f0ef3fa8d3a9a7895de) C:\Windows\system32\drivers\viaide.sys

22:37:30.0674 2316 viaide - ok

22:37:30.0694 2316 volmgr (2b7e885ed951519a12c450d24535dfca) C:\Windows\system32\drivers\volmgr.sys

22:37:30.0697 2316 volmgr - ok

22:37:30.0730 2316 volmgrx (cec5ac15277d75d9e5dec2e1c6eaf877) C:\Windows\system32\drivers\volmgrx.sys

22:37:30.0736 2316 volmgrx - ok

22:37:30.0762 2316 volsnap (5280aada24ab36b01a84a6424c475c8d) C:\Windows\system32\drivers\volsnap.sys

22:37:30.0767 2316 volsnap - ok

22:37:30.0798 2316 vsmraid (a68f455ed2673835209318dd61bfbb0e) C:\Windows\system32\drivers\vsmraid.sys

22:37:30.0801 2316 vsmraid - ok

22:37:30.0821 2316 vtany - ok

22:37:30.0861 2316 WacomPen (fef8fe5923fead2cee4dfabfce3393a7) C:\Windows\system32\drivers\wacompen.sys

22:37:30.0863 2316 WacomPen - ok

22:37:30.0894 2316 Wanarp (b8e7049622300d20ba6d8be0c47c0cfd) C:\Windows\system32\DRIVERS\wanarp.sys

22:37:30.0897 2316 Wanarp - ok

22:37:30.0902 2316 Wanarpv6 (b8e7049622300d20ba6d8be0c47c0cfd) C:\Windows\system32\DRIVERS\wanarp.sys

22:37:30.0903 2316 Wanarpv6 - ok

22:37:30.0933 2316 Wd (0c17a0816f65b89e362e682ad5e7266e) C:\Windows\system32\drivers\wd.sys

22:37:30.0934 2316 Wd - ok

22:37:30.0971 2316 Wdf01000 (d02e7e4567da1e7582fbf6a91144b0df) C:\Windows\system32\drivers\Wdf01000.sys

22:37:30.0997 2316 Wdf01000 - ok

22:37:31.0095 2316 WinUSB (7f2f9e48566b2087f2aaad258cb2a8d4) C:\Windows\system32\DRIVERS\WinUSB.sys

22:37:31.0098 2316 WinUSB - ok

22:37:31.0137 2316 WmiAcpi (e18aebaaa5a773fe11aa2c70f65320f5) C:\Windows\system32\DRIVERS\wmiacpi.sys

22:37:31.0138 2316 WmiAcpi - ok

22:37:31.0183 2316 WPRO_40_1340 - ok

22:37:31.0211 2316 ws2ifsl (8a900348370e359b6bff6a550e4649e1) C:\Windows\system32\drivers\ws2ifsl.sys

22:37:31.0213 2316 ws2ifsl - ok

22:37:31.0277 2316 WUDFRd (501a65252617b495c0f1832f908d54d8) C:\Windows\system32\DRIVERS\WUDFRd.sys

22:37:31.0281 2316 WUDFRd - ok

22:37:31.0329 2316 yukonx64 (07f7285220307aafb755d890295f0f9a) C:\Windows\system32\DRIVERS\yk60x64.sys

22:37:31.0334 2316 yukonx64 - ok

22:37:31.0406 2316 {55662437-DA8C-40c0-AADA-2C816A897A49} (1cacfef9e5dd866c5b79a135ee729e18) C:\Program Files (x86)\Hewlett-Packard\Media\DVD\000.fcl

22:37:31.0408 2316 {55662437-DA8C-40c0-AADA-2C816A897A49} - ok

22:37:31.0453 2316 MBR (0x1B8) (588ae8f0c685c02ba11f30d9cd7e61a0) \Device\Harddisk0\DR0

22:37:31.0460 2316 \Device\Harddisk0\DR0 - ok

22:37:31.0472 2316 Boot (0x1200) (60df396ed5eed33c15dc936ae63e9549) \Device\Harddisk0\DR0\Partition0

22:37:31.0475 2316 \Device\Harddisk0\DR0\Partition0 - ok

22:37:31.0513 2316 Boot (0x1200) (65efc8cbab73fb5994e824da63784965) \Device\Harddisk0\DR0\Partition1

22:37:31.0516 2316 \Device\Harddisk0\DR0\Partition1 - ok

22:37:31.0517 2316 ============================================================

22:37:31.0517 2316 Scan finished

22:37:31.0517 2316 ============================================================

22:37:31.0535 1644 Detected object count: 0

22:37:31.0535 1644 Actual detected object count: 0

22:37:49.0330 3584 ============================================================

22:37:49.0330 3584 Scan started

22:37:49.0330 3584 Mode: Manual; SigCheck; TDLFS;

22:37:49.0330 3584 ============================================================

22:37:49.0735 3584 Accelerometer (a768c6f605bc395d3b57fa0dc3ac3457) C:\Windows\system32\DRIVERS\Accelerometer.sys

22:37:49.0900 3584 Accelerometer - ok

22:37:49.0976 3584 ACPI (1965aaffab07e3fb03c77f81beba3547) C:\Windows\system32\drivers\acpi.sys

22:37:49.0997 3584 ACPI - ok

22:37:50.0027 3584 adp94xx (f14215e37cf124104575073f782111d2) C:\Windows\system32\drivers\adp94xx.sys

22:37:50.0082 3584 adp94xx - ok

22:37:50.0122 3584 adpahci (7d05a75e3066861a6610f7ee04ff085c) C:\Windows\system32\drivers\adpahci.sys

22:37:50.0172 3584 adpahci - ok

22:37:50.0184 3584 adpu160m (820a201fe08a0c345b3bedbc30e1a77c) C:\Windows\system32\drivers\adpu160m.sys

22:37:50.0198 3584 adpu160m - ok

22:37:50.0213 3584 adpu320 (9b4ab6854559dc168fbb4c24fc52e794) C:\Windows\system32\drivers\adpu320.sys

22:37:50.0228 3584 adpu320 - ok

22:37:50.0311 3584 AFD (0cc146c4addea45791b18b1e2659f4a9) C:\Windows\system32\drivers\afd.sys

22:37:50.0366 3584 AFD - ok

22:37:50.0390 3584 agp440 (f6f6793b7f17b550ecfdbd3b229173f7) C:\Windows\system32\drivers\agp440.sys

22:37:50.0405 3584 agp440 - ok

22:37:50.0419 3584 aic78xx (222cb641b4b8a1d1126f8033f9fd6a00) C:\Windows\system32\drivers\djsvs.sys

22:37:50.0437 3584 aic78xx - ok

22:37:50.0466 3584 aliide (e0ca5bb8e6c79533dc6b1da7361a201e) C:\Windows\system32\drivers\aliide.sys

22:37:50.0482 3584 aliide - ok

22:37:50.0494 3584 amdide (7034f8d1b9703d711d3f92c95deb377d) C:\Windows\system32\drivers\amdide.sys

22:37:50.0509 3584 amdide - ok

22:37:50.0536 3584 AmdK8 (cdc3632a3a5ea4dbb83e46076a3165a1) C:\Windows\system32\drivers\amdk8.sys

22:37:50.0722 3584 AmdK8 - ok

22:37:50.0755 3584 Amfilter (71aff825b960731e2ae366467bc0d1f3) C:\Windows\system32\DRIVERS\Amfltx64.sys

22:37:50.0798 3584 Amfilter - ok

22:37:50.0836 3584 Amusbprt (8f1db3d133197affa3a721953eb0988c) C:\Windows\system32\DRIVERS\Amusbx64.sys

22:37:50.0875 3584 Amusbprt - ok

22:37:50.0913 3584 arc (ba8417d4765f3988ff921f30f630e303) C:\Windows\system32\drivers\arc.sys

22:37:50.0929 3584 arc - ok

22:37:50.0943 3584 arcsas (9d41c435619733b34cc16a511e644b11) C:\Windows\system32\drivers\arcsas.sys

22:37:50.0959 3584 arcsas - ok

22:37:51.0001 3584 AsyncMac (22d13ff3dafec2a80634752b1eaa2de6) C:\Windows\system32\DRIVERS\asyncmac.sys

22:37:51.0054 3584 AsyncMac - ok

22:37:51.0104 3584 atapi (e68d9b3a3905619732f7fe039466a623) C:\Windows\system32\drivers\atapi.sys

22:37:51.0117 3584 atapi - ok

22:37:51.0140 3584 avgntflt (c30b5fc0adcdfba7668e99baf0cbf58e) C:\Windows\system32\DRIVERS\avgntflt.sys

22:37:51.0150 3584 avgntflt - ok

22:37:51.0164 3584 Beep - ok

22:37:51.0197 3584 blbdrive (79feeb40056683f8f61398d81dda65d2) C:\Windows\system32\drivers\blbdrive.sys

22:37:51.0250 3584 blbdrive - ok

22:37:51.0276 3584 bowser (2348447a80920b2493a9b582a23e81e1) C:\Windows\system32\DRIVERS\bowser.sys

22:37:51.0326 3584 bowser - ok

22:37:51.0343 3584 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\drivers\brfiltlo.sys

22:37:51.0492 3584 BrFiltLo - ok

22:37:51.0504 3584 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\drivers\brfiltup.sys

22:37:51.0559 3584 BrFiltUp - ok

22:37:51.0587 3584 Brserid (f0f0ba4d815be446aa6a4583ca3bca9b) C:\Windows\system32\drivers\brserid.sys

22:37:51.0786 3584 Brserid - ok

22:37:51.0828 3584 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\system32\drivers\brserwdm.sys

22:37:51.0912 3584 BrSerWdm - ok

22:37:51.0951 3584 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\system32\drivers\brusbmdm.sys

22:37:52.0012 3584 BrUsbMdm - ok

22:37:52.0023 3584 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\system32\drivers\brusbser.sys

22:37:52.0082 3584 BrUsbSer - ok

22:37:52.0110 3584 BTHMODEM (e0777b34e05f8a82a21856efc900c29f) C:\Windows\system32\drivers\bthmodem.sys

22:37:52.0179 3584 BTHMODEM - ok

22:37:52.0185 3584 catchme - ok

22:37:52.0217 3584 cdfs (b4d787db8d30793a4d4df9feed18f136) C:\Windows\system32\DRIVERS\cdfs.sys

22:37:52.0263 3584 cdfs - ok

22:37:52.0289 3584 cdrom (c025aa69be3d0d25c7a2e746ef6f94fc) C:\Windows\system32\DRIVERS\cdrom.sys

22:37:52.0335 3584 cdrom - ok

22:37:52.0369 3584 circlass (02ea568d498bbdd4ba55bf3fce34d456) C:\Windows\system32\DRIVERS\circlass.sys

22:37:52.0410 3584 circlass - ok

22:37:52.0447 3584 CLFS (3dca9a18b204939cfb24bea53e31eb48) C:\Windows\system32\CLFS.sys

22:37:52.0496 3584 CLFS - ok

22:37:52.0521 3584 CmBatt (b52d9a14ce4101577900a364ba86f3df) C:\Windows\system32\DRIVERS\CmBatt.sys

22:37:52.0564 3584 CmBatt - ok

22:37:52.0575 3584 cmdide (8c6aa24c1d7273a02284588426ab8ce3) C:\Windows\system32\drivers\cmdide.sys

22:37:52.0585 3584 cmdide - ok

22:37:52.0600 3584 Compbatt (7fb8ad01db0eabe60c8a861531a8f431) C:\Windows\system32\DRIVERS\compbatt.sys

22:37:52.0608 3584 Compbatt - ok

22:37:52.0622 3584 crcdisk (a8585b6412253803ce8efcbd6d6dc15c) C:\Windows\system32\drivers\crcdisk.sys

22:37:52.0631 3584 crcdisk - ok

22:37:52.0689 3584 DfsC (8b722ba35205c71e7951cdc4cdbade19) C:\Windows\system32\Drivers\dfsc.sys

22:37:52.0720 3584 DfsC - ok

22:37:52.0760 3584 disk (b0107e40ecdb5fa692ebf832f295d905) C:\Windows\system32\drivers\disk.sys

22:37:52.0770 3584 disk - ok

22:37:52.0817 3584 drmkaud (f1a78a98cfc2ee02144c6bec945447e6) C:\Windows\system32\drivers\drmkaud.sys

22:37:52.0864 3584 drmkaud - ok

22:37:52.0994 3584 dump_wmimmc - ok

22:37:53.0047 3584 DXGKrnl (b8e554e502d5123bc111f99d6a2181b4) C:\Windows\System32\drivers\dxgkrnl.sys

22:37:53.0158 3584 DXGKrnl - ok

22:37:53.0223 3584 E1G60 (264cee7b031a9d6c827f3d0cb031f2fe) C:\Windows\system32\DRIVERS\E1G6032E.sys

22:37:53.0295 3584 E1G60 - ok

22:37:53.0307 3584 EagleX64 - ok

22:37:53.0344 3584 Ecache (5f94962be5a62db6e447ff6470c4f48a) C:\Windows\system32\drivers\ecache.sys

22:37:53.0364 3584 Ecache - ok

22:37:53.0394 3584 elxstor (c4636d6e10469404ab5308d9fd45ed07) C:\Windows\system32\drivers\elxstor.sys

22:37:53.0438 3584 elxstor - ok

22:37:53.0479 3584 enecir (f218a3a27ed6592c0e22ec3595554447) C:\Windows\system32\DRIVERS\enecir.sys

22:37:53.0525 3584 enecir - ok

22:37:53.0576 3584 ErrDev (bc3a58e938bb277e46bf4b3003b01abd) C:\Windows\system32\drivers\errdev.sys

22:37:53.0643 3584 ErrDev - ok

22:37:53.0703 3584 exfat (486844f47b6636044a42454614ed4523) C:\Windows\system32\drivers\exfat.sys

22:37:53.0772 3584 exfat - ok

22:37:53.0813 3584 fastfat (1a4bee34277784619ddaf0422c0c6e23) C:\Windows\system32\drivers\fastfat.sys

22:37:53.0865 3584 fastfat - ok

22:37:53.0884 3584 fdc (81b79b6df71fa1d2c6d688d830616e39) C:\Windows\system32\DRIVERS\fdc.sys

22:37:53.0950 3584 fdc - ok

22:37:53.0981 3584 FileInfo (457b7d1d533e4bd62a99aed9c7bb4c59) C:\Windows\system32\drivers\fileinfo.sys

22:37:54.0000 3584 FileInfo - ok

22:37:54.0038 3584 Filetrace (d421327fd6efccaf884a54c58e1b0d7f) C:\Windows\system32\drivers\filetrace.sys

22:37:54.0099 3584 Filetrace - ok

22:37:54.0120 3584 flpydisk (230923ea2b80f79b0f88d90f87b87ebd) C:\Windows\system32\DRIVERS\flpydisk.sys

22:37:54.0198 3584 flpydisk - ok

22:37:54.0228 3584 FltMgr (e3041bc26d6930d61f42aedb79c91720) C:\Windows\system32\drivers\fltmgr.sys

22:37:54.0245 3584 FltMgr - ok

22:37:54.0266 3584 Fs_Rec (29d99e860a1ca0a03c6a733fdd0da703) C:\Windows\system32\drivers\Fs_Rec.sys

22:37:54.0319 3584 Fs_Rec - ok

22:37:54.0341 3584 gagp30kx (c8e416668d3dc2be3d4fe4c79224997f) C:\Windows\system32\drivers\gagp30kx.sys

22:37:54.0353 3584 gagp30kx - ok

22:37:54.0388 3584 HdAudAddService (df45f8142dc6df9d18c39b3effbd0409) C:\Windows\system32\drivers\HdAudio.sys

22:37:54.0473 3584 HdAudAddService - ok

22:37:54.0522 3584 HDAudBus (f942c5820205f2fb453243edfec82a3d) C:\Windows\system32\DRIVERS\HDAudBus.sys

22:37:54.0623 3584 HDAudBus - ok

22:37:54.0698 3584 HidBth (b4881c84a180e75b8c25dc1d726c375f) C:\Windows\system32\drivers\hidbth.sys

22:37:54.0787 3584 HidBth - ok

22:37:54.0817 3584 HidIr (5f47839455d01ff6403b008d481a6f5b) C:\Windows\system32\DRIVERS\hidir.sys

22:37:54.0860 3584 HidIr - ok

22:37:54.0892 3584 HidUsb (443bdd2d30bb4f00795c797e2cf99edf) C:\Windows\system32\DRIVERS\hidusb.sys

22:37:54.0936 3584 HidUsb - ok

22:37:54.0962 3584 HpCISSs (d7109a1e6bd2dfdbcba72a6bc626a13b) C:\Windows\system32\drivers\hpcisss.sys

22:37:54.0974 3584 HpCISSs - ok

22:37:55.0001 3584 hpdskflt (4bebf72764caa516119a9c1287eda930) C:\Windows\system32\DRIVERS\hpdskflt.sys

22:37:55.0010 3584 hpdskflt - ok

22:37:55.0029 3584 HpqKbFiltr (0ecc54fd34d6a089c300846b011e81d6) C:\Windows\system32\DRIVERS\HpqKbFiltr.sys

22:37:55.0055 3584 HpqKbFiltr - ok

22:37:55.0124 3584 HTTP (098f1e4e5c9cb5b0063a959063631610) C:\Windows\system32\drivers\HTTP.sys

22:37:55.0218 3584 HTTP - ok

22:37:55.0233 3584 i2omp (da94c854cea5fac549d4e1f6e88349e8) C:\Windows\system32\drivers\i2omp.sys

22:37:55.0249 3584 i2omp - ok

22:37:55.0289 3584 i8042prt (cbb597659a2713ce0c9cc20c88c7591f) C:\Windows\system32\DRIVERS\i8042prt.sys

22:37:55.0329 3584 i8042prt - ok

22:37:55.0353 3584 iaStorV (3e3bf3627d886736d0b4e90054f929f6) C:\Windows\system32\drivers\iastorv.sys

22:37:55.0375 3584 iaStorV - ok

22:37:55.0406 3584 iirsp (8c3951ad2fe886ef76c7b5027c3125d3) C:\Windows\system32\drivers\iirsp.sys

22:37:55.0417 3584 iirsp - ok

22:37:55.0443 3584 intelide (475490caf376e55e6e8b37bbdfeb2e81) C:\Windows\system32\drivers\intelide.sys

22:37:55.0454 3584 intelide - ok

22:37:55.0468 3584 intelppm (bfd84af32fa1bad6231c4585cb469630) C:\Windows\system32\DRIVERS\intelppm.sys

22:37:55.0515 3584 intelppm - ok

22:37:55.0556 3584 IpFilterDriver (d8aabc341311e4780d6fce8c73c0ad81) C:\Windows\system32\DRIVERS\ipfltdrv.sys

22:37:55.0604 3584 IpFilterDriver - ok

22:37:55.0617 3584 IpInIp - ok

22:37:55.0639 3584 IPMIDRV (9c2ee2e6e5a7203bfae15c299475ec67) C:\Windows\system32\drivers\ipmidrv.sys

22:37:55.0713 3584 IPMIDRV - ok

22:37:55.0725 3584 IPNAT (b7e6212f581ea5f6ab0c3a6ceeeb89be) C:\Windows\system32\DRIVERS\ipnat.sys

22:37:55.0784 3584 IPNAT - ok

22:37:55.0798 3584 IRENUM (8c42ca155343a2f11d29feca67faa88d) C:\Windows\system32\drivers\irenum.sys

22:37:55.0847 3584 IRENUM - ok

22:37:55.0860 3584 isapnp (0672bfcedc6fc468a2b0500d81437f4f) C:\Windows\system32\drivers\isapnp.sys

22:37:55.0872 3584 isapnp - ok

22:37:55.0908 3584 iScsiPrt (e4fdf99599f27ec25d2cf6d754243520) C:\Windows\system32\DRIVERS\msiscsi.sys

22:37:55.0925 3584 iScsiPrt - ok

22:37:55.0940 3584 iteatapi (63c766cdc609ff8206cb447a65abba4a) C:\Windows\system32\drivers\iteatapi.sys

22:37:55.0951 3584 iteatapi - ok

22:37:55.0970 3584 iteraid (1281fe73b17664631d12f643cbea3f59) C:\Windows\system32\drivers\iteraid.sys

22:37:55.0981 3584 iteraid - ok

22:37:56.0005 3584 JMCR (54df9eafb54a98e1a2ac3db69c16cf05) C:\Windows\system32\DRIVERS\jmcr.sys

22:37:56.0044 3584 JMCR - ok

22:37:56.0083 3584 kbdclass (423696f3ba6472dd17699209b933bc26) C:\Windows\system32\DRIVERS\kbdclass.sys

22:37:56.0095 3584 kbdclass - ok

22:37:56.0129 3584 kbdhid (dbdf75d51464fbc47d0104ec3d572c05) C:\Windows\system32\DRIVERS\kbdhid.sys

22:37:56.0159 3584 kbdhid - ok

22:37:56.0201 3584 KSecDD (476e2c1dcea45895994bef11c2a98715) C:\Windows\system32\Drivers\ksecdd.sys

22:37:56.0226 3584 KSecDD - ok

22:37:56.0250 3584 ksthunk (1d419cf43db29396ecd7113d129d94eb) C:\Windows\system32\drivers\ksthunk.sys

22:37:56.0313 3584 ksthunk - ok

22:37:56.0349 3584 lltdio (96ece2659b6654c10a0c310ae3a6d02c) C:\Windows\system32\DRIVERS\lltdio.sys

22:37:56.0430 3584 lltdio - ok

22:37:56.0454 3584 LSI_FC (acbe1af32d3123e330a07bfbc5ec4a9b) C:\Windows\system32\drivers\lsi_fc.sys

22:37:56.0467 3584 LSI_FC - ok

22:37:56.0482 3584 LSI_SAS (799ffb2fc4729fa46d2157c0065b3525) C:\Windows\system32\drivers\lsi_sas.sys

22:37:56.0495 3584 LSI_SAS - ok

22:37:56.0517 3584 LSI_SCSI (f445ff1daad8a226366bfaf42551226b) C:\Windows\system32\drivers\lsi_scsi.sys

22:37:56.0530 3584 LSI_SCSI - ok

22:37:56.0542 3584 luafv (52f87b9cc8932c2a7375c3b2a9be5e3e) C:\Windows\system32\drivers\luafv.sys

22:37:56.0594 3584 luafv - ok

22:37:56.0623 3584 MBAMProtector (23a854450dab5c9b7a42ab9be6f2e4bd) C:\Windows\system32\drivers\mbam.sys

22:37:56.0636 3584 MBAMProtector - ok

22:37:56.0655 3584 megasas (5c5cd6aaced32fb26c3fb34b3dcf972f) C:\Windows\system32\drivers\megasas.sys

22:37:56.0666 3584 megasas - ok

22:37:56.0685 3584 MegaSR (859bc2436b076c77c159ed694acfe8f8) C:\Windows\system32\drivers\megasr.sys

22:37:56.0721 3584 MegaSR - ok

22:37:56.0750 3584 Modem (59848d5cc74606f0ee7557983bb73c2e) C:\Windows\system32\drivers\modem.sys

22:37:56.0804 3584 Modem - ok

22:37:56.0848 3584 monitor (c247cc2a57e0a0c8c6dccf7807b3e9e5) C:\Windows\system32\DRIVERS\monitor.sys

22:37:56.0893 3584 monitor - ok

22:37:56.0911 3584 mouclass (9367304e5e412b120cf5f4ea14e4e4f1) C:\Windows\system32\DRIVERS\mouclass.sys

22:37:56.0926 3584 mouclass - ok

22:37:56.0940 3584 mouhid (c2c2bd5c5ce5aaf786ddd74b75d2ac69) C:\Windows\system32\DRIVERS\mouhid.sys

22:37:57.0001 3584 mouhid - ok

22:37:57.0014 3584 MountMgr (11bc9b1e8801b01f7f6adb9ead30019b) C:\Windows\system32\drivers\mountmgr.sys

22:37:57.0032 3584 MountMgr - ok

22:37:57.0046 3584 mpio (f8276eb8698142884498a528dfea8478) C:\Windows\system32\drivers\mpio.sys

22:37:57.0063 3584 mpio - ok

22:37:57.0083 3584 mpsdrv (c92b9abdb65a5991e00c28f13491dba2) C:\Windows\system32\drivers\mpsdrv.sys

22:37:57.0131 3584 mpsdrv - ok

22:37:57.0148 3584 Mraid35x (3c200630a89ef2c0864d515b7a75802e) C:\Windows\system32\drivers\mraid35x.sys

22:37:57.0163 3584 Mraid35x - ok

22:37:57.0180 3584 MRxDAV (7c1de4aa96dc0c071611f9e7de02a68d) C:\Windows\system32\drivers\mrxdav.sys

22:37:57.0231 3584 MRxDAV - ok

22:37:57.0263 3584 mrxsmb (1485811b320ff8c7edad1caebb1c6c2b) C:\Windows\system32\DRIVERS\mrxsmb.sys

22:37:57.0297 3584 mrxsmb - ok

22:37:57.0337 3584 mrxsmb10 (3b929a60c833fc615fd97fba82bc7632) C:\Windows\system32\DRIVERS\mrxsmb10.sys

22:37:57.0372 3584 mrxsmb10 - ok

22:37:57.0393 3584 mrxsmb20 (c64ab3e1f53b4f5b5bb6d796b2d7bec3) C:\Windows\system32\DRIVERS\mrxsmb20.sys

22:37:57.0419 3584 mrxsmb20 - ok

22:37:57.0452 3584 msahci (aa459f2ab3ab603c357ff117cae3d818) C:\Windows\system32\drivers\msahci.sys

22:37:57.0471 3584 msahci - ok

22:37:57.0504 3584 msdsm (264bbb4aaf312a485f0e44b65a6b7202) C:\Windows\system32\drivers\msdsm.sys

22:37:57.0520 3584 msdsm - ok

22:37:57.0552 3584 Msfs (704f59bfc4512d2bb0146aec31b10a7c) C:\Windows\system32\drivers\Msfs.sys

22:37:57.0620 3584 Msfs - ok

22:37:57.0645 3584 msisadrv (00ebc952961664780d43dca157e79b27) C:\Windows\system32\drivers\msisadrv.sys

22:37:57.0660 3584 msisadrv - ok

22:37:57.0693 3584 MSKSSRV (0ea73e498f53b96d83dbfca074ad4cf8) C:\Windows\system32\drivers\MSKSSRV.sys

22:37:57.0747 3584 MSKSSRV - ok

22:37:57.0758 3584 MSPCLOCK (52e59b7e992a58e740aa63f57edbae8b) C:\Windows\system32\drivers\MSPCLOCK.sys

22:37:57.0812 3584 MSPCLOCK - ok

22:37:57.0832 3584 MSPQM (49084a75bae043ae02d5b44d02991bb2) C:\Windows\system32\drivers\MSPQM.sys

22:37:57.0882 3584 MSPQM - ok

22:37:57.0919 3584 MsRPC (dc6ccf440cdede4293db41c37a5060a5) C:\Windows\system32\drivers\MsRPC.sys

22:37:57.0932 3584 MsRPC - ok

22:37:57.0955 3584 mssmbios (855796e59df77ea93af46f20155bf55b) C:\Windows\system32\DRIVERS\mssmbios.sys

22:37:57.0963 3584 mssmbios - ok

22:37:57.0985 3584 MSTEE (86d632d75d05d5b7c7c043fa3564ae86) C:\Windows\system32\drivers\MSTEE.sys

22:37:58.0031 3584 MSTEE - ok

22:37:58.0065 3584 Mup (0cc49f78d8aca0877d885f149084e543) C:\Windows\system32\Drivers\mup.sys

22:37:58.0074 3584 Mup - ok

22:37:58.0110 3584 NativeWifiP (2007b826c4acd94ae32232b41f0842b9) C:\Windows\system32\DRIVERS\nwifi.sys

22:37:58.0132 3584 NativeWifiP - ok

22:37:58.0168 3584 NDIS (65950e07329fcee8e6516b17c8d0abb6) C:\Windows\system32\drivers\ndis.sys

22:37:58.0237 3584 NDIS - ok

22:37:58.0270 3584 NdisTapi (64df698a425478e321981431ac171334) C:\Windows\system32\DRIVERS\ndistapi.sys

22:37:58.0305 3584 NdisTapi - ok

22:37:58.0336 3584 Ndisuio (8baa43196d7b5bb972c9a6b2bbf61a19) C:\Windows\system32\DRIVERS\ndisuio.sys

22:37:58.0374 3584 Ndisuio - ok

22:37:58.0445 3584 NdisWan (f8158771905260982ce724076419ef19) C:\Windows\system32\DRIVERS\ndiswan.sys

22:37:58.0477 3584 NdisWan - ok

22:37:58.0498 3584 NDProxy (9cb77ed7cb72850253e973a2d6afdf49) C:\Windows\system32\drivers\NDProxy.sys

22:37:58.0528 3584 NDProxy - ok

22:37:58.0547 3584 NetBIOS (a499294f5029a7862adc115bda7371ce) C:\Windows\system32\DRIVERS\netbios.sys

22:37:58.0579 3584 NetBIOS - ok

22:37:58.0612 3584 netbt (fc2c792ebddc8e28df939d6a92c83d61) C:\Windows\system32\DRIVERS\netbt.sys

22:37:58.0648 3584 netbt - ok

22:37:58.0733 3584 NETw3v64 (c86984aee87900c1eeb6942ede3bf4b6) C:\Windows\system32\DRIVERS\NETw3v64.sys

22:37:58.0882 3584 NETw3v64 - ok

22:37:59.0026 3584 NETw5v64 (bfbd278f8c9bcec693345759ac278e14) C:\Windows\system32\DRIVERS\NETw5v64.sys

22:37:59.0234 3584 NETw5v64 - ok

22:37:59.0281 3584 nfrd960 (4ac08bd6af2df42e0c3196d826c8aea7) C:\Windows\system32\drivers\nfrd960.sys

22:37:59.0289 3584 nfrd960 - ok

22:37:59.0310 3584 Npfs (b298874f8e0ea93f06ec40aa8d146478) C:\Windows\system32\drivers\Npfs.sys

22:37:59.0346 3584 Npfs - ok

22:37:59.0357 3584 NPPTNT2 - ok

22:37:59.0385 3584 nsiproxy (1523af19ee8b030ba682f7a53537eaeb) C:\Windows\system32\drivers\nsiproxy.sys

22:37:59.0425 3584 nsiproxy - ok

22:37:59.0481 3584 Ntfs (bac869dfb98e499ba4d9bb1fb43270e1) C:\Windows\system32\drivers\Ntfs.sys

22:37:59.0544 3584 Ntfs - ok

22:37:59.0558 3584 Null (dd5d684975352b85b52e3fd5347c20cb) C:\Windows\system32\drivers\Null.sys

22:37:59.0633 3584 Null - ok

22:37:59.0659 3584 NVHDA (ad37248bd442d41c9a896e53eb8a85ee) C:\Windows\system32\drivers\nvhda64v.sys

22:37:59.0666 3584 NVHDA - ok

22:37:59.0915 3584 nvlddmkm (fd39b98ff1bb8ed3848781497e9d02e0) C:\Windows\system32\DRIVERS\nvlddmkm.sys

22:38:01.0017 3584 nvlddmkm - ok

22:38:01.0097 3584 nvraid (2c040b7ada5b06f6facadac8514aa034) C:\Windows\system32\drivers\nvraid.sys

22:38:01.0110 3584 nvraid - ok

22:38:01.0125 3584 nvstor (f7ea0fe82842d05eda3efdd376dbfdba) C:\Windows\system32\drivers\nvstor.sys

22:38:01.0137 3584 nvstor - ok

22:38:01.0185 3584 nv_agp (19067ca93075ef4823e3938a686f532f) C:\Windows\system32\drivers\nv_agp.sys

22:38:01.0198 3584 nv_agp - ok

22:38:01.0209 3584 NwlnkFlt - ok

22:38:01.0223 3584 NwlnkFwd - ok

22:38:01.0259 3584 ohci1394 (b5b1ce65ac15bbd11c0619e3ef7cfc28) C:\Windows\system32\DRIVERS\ohci1394.sys

22:38:01.0300 3584 ohci1394 - ok

22:38:01.0335 3584 Parport (aecd57f94c887f58919f307c35498ea0) C:\Windows\system32\drivers\parport.sys

22:38:01.0410 3584 Parport - ok

22:38:01.0431 3584 partmgr (f9b5eda4c17a2be7663f064dbf0fe254) C:\Windows\system32\drivers\partmgr.sys

22:38:01.0445 3584 partmgr - ok

22:38:01.0470 3584 pci (47ab1e0fc9d0e12bb53ba246e3a0906d) C:\Windows\system32\drivers\pci.sys

22:38:01.0484 3584 pci - ok

22:38:01.0500 3584 pciide (15e5c3f89a3452efbda3b39816dbc4ee) C:\Windows\system32\drivers\pciide.sys

22:38:01.0509 3584 pciide - ok

22:38:01.0535 3584 pcmcia (037661f3d7c507c9993b7010ceee6288) C:\Windows\system32\drivers\pcmcia.sys

22:38:01.0545 3584 pcmcia - ok

22:38:01.0578 3584 PEAUTH (58865916f53592a61549b04941bfd80d) C:\Windows\system32\drivers\peauth.sys

22:38:01.0677 3584 PEAUTH - ok

22:38:01.0745 3584 PptpMiniport (23386e9952025f5f21c368971e2e7301) C:\Windows\system32\DRIVERS\raspptp.sys

22:38:01.0775 3584 PptpMiniport - ok

22:38:01.0800 3584 Processor (5080e59ecee0bc923f14018803aa7a01) C:\Windows\system32\drivers\processr.sys

22:38:01.0839 3584 Processor - ok

22:38:01.0869 3584 PSched (c5ab7f0809392d0da027f4a2a81bfa31) C:\Windows\system32\DRIVERS\pacer.sys

22:38:01.0893 3584 PSched - ok

22:38:01.0928 3584 ql2300 (0b83f4e681062f3839be2ec1d98fd94a) C:\Windows\system32\drivers\ql2300.sys

22:38:02.0037 3584 ql2300 - ok

22:38:02.0086 3584 ql40xx (e1c80f8d4d1e39ef9595809c1369bf2a) C:\Windows\system32\drivers\ql40xx.sys

22:38:02.0098 3584 ql40xx - ok

22:38:02.0152 3584 QWAVEdrv (e8d76edab77ec9c634c27b8eac33adc5) C:\Windows\system32\drivers\qwavedrv.sys

22:38:02.0200 3584 QWAVEdrv - ok

22:38:02.0212 3584 RasAcd (1013b3b663a56d3ddd784f581c1bd005) C:\Windows\system32\DRIVERS\rasacd.sys

22:38:02.0272 3584 RasAcd - ok

22:38:02.0308 3584 Rasl2tp (ac7bc4d42a7e558718dfdec599bbfc2c) C:\Windows\system32\DRIVERS\rasl2tp.sys

22:38:02.0350 3584 Rasl2tp - ok

22:38:02.0394 3584 RasPppoe (4517fbf8b42524afe4ede1de102aae3e) C:\Windows\system32\DRIVERS\raspppoe.sys

22:38:02.0425 3584 RasPppoe - ok

22:38:02.0448 3584 RasSstp (c6a593b51f34c33e5474539544072527) C:\Windows\system32\DRIVERS\rassstp.sys

22:38:02.0465 3584 RasSstp - ok

22:38:02.0497 3584 rdbss (322db5c6b55e8d8ee8d6f358b2aaabb1) C:\Windows\system32\DRIVERS\rdbss.sys

22:38:02.0535 3584 rdbss - ok

22:38:02.0551 3584 RDPCDD (603900cc05f6be65ccbf373800af3716) C:\Windows\system32\DRIVERS\RDPCDD.sys

22:38:02.0582 3584 RDPCDD - ok

22:38:02.0615 3584 rdpdr (c045d1fb111c28df0d1be8d4bda22c06) C:\Windows\system32\drivers\rdpdr.sys

22:38:02.0648 3584 rdpdr - ok

22:38:02.0659 3584 RDPENCDD (cab9421daf3d97b33d0d055858e2c3ab) C:\Windows\system32\drivers\rdpencdd.sys

22:38:02.0703 3584 RDPENCDD - ok

22:38:02.0759 3584 RDPWD (b1d741c87cea8d7282146366cc9c3f81) C:\Windows\system32\drivers\RDPWD.sys

22:38:02.0808 3584 RDPWD - ok

22:38:02.0847 3584 rspndr (22a9cb08b1a6707c1550c6bf099aae73) C:\Windows\system32\DRIVERS\rspndr.sys

22:38:02.0878 3584 rspndr - ok

22:38:02.0908 3584 RTL8169 (8b91737da75add21cb1554b38089196a) C:\Windows\system32\DRIVERS\Rtlh64.sys

22:38:02.0952 3584 RTL8169 - ok

22:38:02.0978 3584 sbp2port (cd9c693589c60ad59bbbcfb0e524e01b) C:\Windows\system32\drivers\sbp2port.sys

22:38:02.0987 3584 sbp2port - ok

22:38:03.0021 3584 sdbus (b42ee50f7d24f837f925332eb349eca5) C:\Windows\system32\DRIVERS\sdbus.sys

22:38:03.0063 3584 sdbus - ok

22:38:03.0084 3584 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys

22:38:03.0141 3584 secdrv - ok

22:38:03.0158 3584 Serenum (f71bfe7ac6c52273b7c82cbf1bb2a222) C:\Windows\system32\drivers\serenum.sys

22:38:03.0217 3584 Serenum - ok

22:38:03.0229 3584 Serial (e62fac91ee288db29a9696a9d279929c) C:\Windows\system32\drivers\serial.sys

22:38:03.0283 3584 Serial - ok

22:38:03.0302 3584 sermouse (a842f04833684bceea7336211be478df) C:\Windows\system32\drivers\sermouse.sys

22:38:03.0346 3584 sermouse - ok

22:38:03.0367 3584 sffdisk (14d4b4465193a87c127933978e8c4106) C:\Windows\system32\drivers\sffdisk.sys

22:38:03.0404 3584 sffdisk - ok

22:38:03.0417 3584 sffp_mmc (7073aee3f82f3d598e3825962aa98ab2) C:\Windows\system32\drivers\sffp_mmc.sys

22:38:03.0461 3584 sffp_mmc - ok

22:38:03.0471 3584 sffp_sd (35e59ebe4a01a0532ed67975161c7b82) C:\Windows\system32\drivers\sffp_sd.sys

22:38:03.0507 3584 sffp_sd - ok

22:38:03.0517 3584 sfloppy (6b7838c94135768bd455cbdc23e39e5f) C:\Windows\system32\drivers\sfloppy.sys

22:38:03.0572 3584 sfloppy - ok

22:38:03.0602 3584 SiSRaid2 (7a5de502aeb719d4594c6471060a78b3) C:\Windows\system32\drivers\sisraid2.sys

22:38:03.0610 3584 SiSRaid2 - ok

22:38:03.0622 3584 SiSRaid4 (3a2f769fab9582bc720e11ea1dfb184d) C:\Windows\system32\drivers\sisraid4.sys

22:38:03.0632 3584 SiSRaid4 - ok

22:38:03.0665 3584 Smb (290b6f6a0ec4fcdfc90f5cb6d7020473) C:\Windows\system32\DRIVERS\smb.sys

22:38:03.0688 3584 Smb - ok

22:38:03.0722 3584 spldr (386c3c63f00a7040c7ec5e384217e89d) C:\Windows\system32\drivers\spldr.sys

22:38:03.0732 3584 spldr - ok

22:38:03.0766 3584 srv (880a57fccb571ebd063d4dd50e93e46d) C:\Windows\system32\DRIVERS\srv.sys

22:38:03.0802 3584 srv - ok

22:38:03.0848 3584 srv2 (a1ad14a6d7a37891fffeca35ebbb0730) C:\Windows\system32\DRIVERS\srv2.sys

22:38:03.0881 3584 srv2 - ok

22:38:03.0942 3584 srvnet (4bed62f4fa4d8300973f1151f4c4d8a7) C:\Windows\system32\DRIVERS\srvnet.sys

22:38:03.0966 3584 srvnet - ok

22:38:04.0013 3584 STHDA (ed1722f43ce61409ef68340402d6267d) C:\Windows\system32\DRIVERS\stwrt64.sys

22:38:04.0090 3584 STHDA - ok

22:38:04.0152 3584 swenum (8a851ca908b8b974f89c50d2e18d4f0c) C:\Windows\system32\DRIVERS\swenum.sys

22:38:04.0163 3584 swenum - ok

22:38:04.0196 3584 Symc8xx (2f26a2c6fc96b29beff5d8ed74e6625b) C:\Windows\system32\drivers\symc8xx.sys

22:38:04.0208 3584 Symc8xx - ok

22:38:04.0220 3584 Sym_hi (a909667976d3bccd1df813fed517d837) C:\Windows\system32\drivers\sym_hi.sys

22:38:04.0232 3584 Sym_hi - ok

22:38:04.0253 3584 Sym_u3 (36887b56ec2d98b9c362f6ae4de5b7b0) C:\Windows\system32\drivers\sym_u3.sys

22:38:04.0265 3584 Sym_u3 - ok

22:38:04.0300 3584 SynTP (f1e453df1ccb8ac217b6efcc77466d65) C:\Windows\system32\DRIVERS\SynTP.sys

22:38:04.0317 3584 SynTP - ok

22:38:04.0414 3584 Tcpip (4dad14118fbcf7c609f2a4ce21fbcc5f) C:\Windows\system32\drivers\tcpip.sys

22:38:04.0583 3584 Tcpip - ok

22:38:04.0689 3584 Tcpip6 (4dad14118fbcf7c609f2a4ce21fbcc5f) C:\Windows\system32\DRIVERS\tcpip.sys

22:38:04.0753 3584 Tcpip6 - ok

22:38:04.0820 3584 tcpipreg (c7e72a4071ee0200e3c075dacfb2b334) C:\Windows\system32\drivers\tcpipreg.sys

22:38:04.0847 3584 tcpipreg - ok

22:38:04.0873 3584 TDPIPE (1d8bf4aaa5fb7a2761475781dc1195bc) C:\Windows\system32\drivers\tdpipe.sys

22:38:04.0925 3584 TDPIPE - ok

22:38:04.0936 3584 TDTCP (7f7e00cdf609df657f4cda02dd1c9bb1) C:\Windows\system32\drivers\tdtcp.sys

22:38:05.0005 3584 TDTCP - ok

22:38:05.0047 3584 tdx (458919c8c42e398dc4802178d5ffee27) C:\Windows\system32\DRIVERS\tdx.sys

22:38:05.0085 3584 tdx - ok

22:38:05.0112 3584 TermDD (8c19678d22649ec002ef2282eae92f98) C:\Windows\system32\DRIVERS\termdd.sys

22:38:05.0126 3584 TermDD - ok

22:38:05.0174 3584 TKFsAc (2b2e8687292486e7dc5821226cfc3868) C:\Windows\system32\TKFsAc2k64.sys

22:38:05.0188 3584 TKFsAc - ok

22:38:05.0252 3584 TKFsAv (e4edec8398000fc469e1de87036598a1) C:\Windows\system32\TKFsAv2k64.sys

22:38:05.0265 3584 TKFsAv - ok

22:38:05.0324 3584 TKFsFt (117b11f673ca1411ff62c8afe6d4695f) C:\Windows\system32\TKFsFt2k64.sys

22:38:05.0337 3584 TKFsFt - ok

22:38:05.0364 3584 TKRgAc (2a58d1f3701209c97370085b74243cb7) C:\Windows\system32\TKRgAc2k64.sys

22:38:05.0377 3584 TKRgAc - ok

22:38:05.0438 3584 TKRgFt (621b679dd0e6cbebf96fd87c49422272) C:\Windows\system32\TKRgFtXp64.sys

22:38:05.0452 3584 TKRgFt - ok

22:38:05.0512 3584 tssecsrv (9e5409cd17c8bef193aad498f3bc2cb8) C:\Windows\system32\DRIVERS\tssecsrv.sys

22:38:05.0581 3584 tssecsrv - ok

22:38:05.0594 3584 tunmp (89ec74a9e602d16a75a4170511029b3c) C:\Windows\system32\DRIVERS\tunmp.sys

22:38:05.0638 3584 tunmp - ok

22:38:05.0677 3584 tunnel (30a9b3f45ad081bffc3bcaa9c812b609) C:\Windows\system32\DRIVERS\tunnel.sys

22:38:05.0706 3584 tunnel - ok

22:38:05.0728 3584 uagp35 (fec266ef401966311744bd0f359f7f56) C:\Windows\system32\drivers\uagp35.sys

22:38:05.0746 3584 uagp35 - ok

22:38:05.0779 3584 udfs (faf2640a2a76ed03d449e443194c4c34) C:\Windows\system32\DRIVERS\udfs.sys

22:38:05.0832 3584 udfs - ok

22:38:05.0866 3584 uliagpkx (4ec9447ac3ab462647f60e547208ca00) C:\Windows\system32\drivers\uliagpkx.sys

22:38:05.0879 3584 uliagpkx - ok

22:38:05.0909 3584 uliahci (697f0446134cdc8f99e69306184fbbb4) C:\Windows\system32\drivers\uliahci.sys

22:38:05.0925 3584 uliahci - ok

22:38:05.0948 3584 UlSata (31707f09846056651ea2c37858f5ddb0) C:\Windows\system32\drivers\ulsata.sys

22:38:05.0962 3584 UlSata - ok

22:38:05.0985 3584 ulsata2 (85e5e43ed5b48c8376281bab519271b7) C:\Windows\system32\drivers\ulsata2.sys

22:38:05.0999 3584 ulsata2 - ok

22:38:06.0015 3584 umbus (46e9a994c4fed537dd951f60b86ad3f4) C:\Windows\system32\DRIVERS\umbus.sys

22:38:06.0056 3584 umbus - ok

22:38:06.0103 3584 usbaudio (c6ba890de6e41857fbe84175519cae7d) C:\Windows\system32\drivers\usbaudio.sys

22:38:06.0149 3584 usbaudio - ok

22:38:06.0178 3584 usbccgp (07e3498fc60834219d2356293da0fecc) C:\Windows\system32\DRIVERS\usbccgp.sys

22:38:06.0210 3584 usbccgp - ok

22:38:06.0236 3584 usbcir (9247f7e0b65852c1f6631480984d6ed2) C:\Windows\system32\drivers\usbcir.sys

22:38:06.0299 3584 usbcir - ok

22:38:06.0334 3584 usbehci (827e44de934a736ea31e91d353eb126f) C:\Windows\system32\DRIVERS\usbehci.sys

22:38:06.0369 3584 usbehci - ok

22:38:06.0395 3584 usbhub (bb35cd80a2ececfadc73569b3d70c7d1) C:\Windows\system32\DRIVERS\usbhub.sys

22:38:06.0428 3584 usbhub - ok

22:38:06.0462 3584 usbohci (eba14ef0c07cec233f1529c698d0d154) C:\Windows\system32\drivers\usbohci.sys

22:38:06.0510 3584 usbohci - ok

22:38:06.0540 3584 usbprint (28b693b6d31e7b9332c1bdcefef228c1) C:\Windows\system32\DRIVERS\usbprint.sys

22:38:06.0571 3584 usbprint - ok

22:38:06.0618 3584 USBSTOR (b854c1558fca0c269a38663e8b59b581) C:\Windows\system32\DRIVERS\USBSTOR.SYS

22:38:06.0657 3584 USBSTOR - ok

22:38:06.0676 3584 usbuhci (b2872cbf9f47316abd0e0c74a1aba507) C:\Windows\system32\DRIVERS\usbuhci.sys

22:38:06.0706 3584 usbuhci - ok

22:38:06.0735 3584 usbvideo (fc33099877790d51b0927b7039059855) C:\Windows\system32\Drivers\usbvideo.sys

22:38:06.0774 3584 usbvideo - ok

22:38:06.0807 3584 vga (916b94bcf1e09873fff2d5fb11767bbc) C:\Windows\system32\DRIVERS\vgapnp.sys

22:38:06.0839 3584 vga - ok

22:38:06.0863 3584 VgaSave (b83ab16b51feda65dd81b8c59d114d63) C:\Windows\System32\drivers\vga.sys

22:38:06.0905 3584 VgaSave - ok

22:38:06.0923 3584 viaide (4f964e6828156f0ef3fa8d3a9a7895de) C:\Windows\system32\drivers\viaide.sys

22:38:06.0931 3584 viaide - ok

22:38:06.0961 3584 volmgr (2b7e885ed951519a12c450d24535dfca) C:\Windows\system32\drivers\volmgr.sys

22:38:06.0973 3584 volmgr - ok

22:38:07.0005 3584 volmgrx (cec5ac15277d75d9e5dec2e1c6eaf877) C:\Windows\system32\drivers\volmgrx.sys

22:38:07.0022 3584 volmgrx - ok

22:38:07.0071 3584 volsnap (5280aada24ab36b01a84a6424c475c8d) C:\Windows\system32\drivers\volsnap.sys

22:38:07.0084 3584 volsnap - ok

22:38:07.0124 3584 vsmraid (a68f455ed2673835209318dd61bfbb0e) C:\Windows\system32\drivers\vsmraid.sys

22:38:07.0135 3584 vsmraid - ok

22:38:07.0141 3584 vtany - ok

22:38:07.0171 3584 WacomPen (fef8fe5923fead2cee4dfabfce3393a7) C:\Windows\system32\drivers\wacompen.sys

22:38:07.0255 3584 WacomPen - ok

22:38:07.0295 3584 Wanarp (b8e7049622300d20ba6d8be0c47c0cfd) C:\Windows\system32\DRIVERS\wanarp.sys

22:38:07.0332 3584 Wanarp - ok

22:38:07.0337 3584 Wanarpv6 (b8e7049622300d20ba6d8be0c47c0cfd) C:\Windows\system32\DRIVERS\wanarp.sys

22:38:07.0368 3584 Wanarpv6 - ok

22:38:07.0392 3584 Wd (0c17a0816f65b89e362e682ad5e7266e) C:\Windows\system32\drivers\wd.sys

22:38:07.0404 3584 Wd - ok

22:38:07.0438 3584 Wdf01000 (d02e7e4567da1e7582fbf6a91144b0df) C:\Windows\system32\drivers\Wdf01000.sys

22:38:07.0470 3584 Wdf01000 - ok

22:38:07.0546 3584 WinUSB (7f2f9e48566b2087f2aaad258cb2a8d4) C:\Windows\system32\DRIVERS\WinUSB.sys

22:38:07.0592 3584 WinUSB - ok

22:38:07.0612 3584 WmiAcpi (e18aebaaa5a773fe11aa2c70f65320f5) C:\Windows\system32\DRIVERS\wmiacpi.sys

22:38:07.0656 3584 WmiAcpi - ok

22:38:07.0695 3584 WPRO_40_1340 - ok

22:38:07.0720 3584 ws2ifsl (8a900348370e359b6bff6a550e4649e1) C:\Windows\system32\drivers\ws2ifsl.sys

22:38:07.0768 3584 ws2ifsl - ok

22:38:07.0812 3584 WUDFRd (501a65252617b495c0f1832f908d54d8) C:\Windows\system32\DRIVERS\WUDFRd.sys

22:38:07.0868 3584 WUDFRd - ok

22:38:07.0907 3584 yukonx64 (07f7285220307aafb755d890295f0f9a) C:\Windows\system32\DRIVERS\yk60x64.sys

22:38:07.0985 3584 yukonx64 - ok

22:38:08.0049 3584 {55662437-DA8C-40c0-AADA-2C816A897A49} (1cacfef9e5dd866c5b79a135ee729e18) C:\Program Files (x86)\Hewlett-Packard\Media\DVD\000.fcl

22:38:08.0060 3584 {55662437-DA8C-40c0-AADA-2C816A897A49} - ok

22:38:08.0079 3584 MBR (0x1B8) (588ae8f0c685c02ba11f30d9cd7e61a0) \Device\Harddisk0\DR0

22:38:08.0221 3584 \Device\Harddisk0\DR0 - ok

22:38:08.0257 3584 Boot (0x1200) (60df396ed5eed33c15dc936ae63e9549) \Device\Harddisk0\DR0\Partition0

22:38:08.0258 3584 \Device\Harddisk0\DR0\Partition0 - ok

22:38:08.0298 3584 Boot (0x1200) (65efc8cbab73fb5994e824da63784965) \Device\Harddisk0\DR0\Partition1

22:38:08.0300 3584 \Device\Harddisk0\DR0\Partition1 - ok

22:38:08.0301 3584 ============================================================

22:38:08.0301 3584 Scan finished

22:38:08.0301 3584 ============================================================

22:38:08.0313 3100 Detected object count: 0

22:38:08.0313 3100 Actual detected object count: 0

Link to post
Share on other sites

Please perform a scan with the ESET online virus scanner.

You can expect some detections in Combofix's quarantine (Qoobox) and system volume information. They will not represent active malware so don't worry:

http://www.eset.com/onlinescan/index.php

  • ESET recommends disabling your resident antivirus's active protection component BEFORE scanning
  • You must use Internet Explorer to navigate to the scanner website because you must approve install an ActiveX add-on to complete the scan.
  • If you are using Vista or Windows 7, launch Internet Explorer by right-clicking its desktop Shortcut or Start Menu icon & selecting "Run as Administrator"
  • Check the "Yes, I accept the terms of use" box.
  • Click "Start"
  • Approve the installation of the ActiveX control that's required to enable scanning
  • Make sure the box to
    • Remove found threats. is CHECKED!!
    • Click "Start"

    [*]Allow the definition data base to install

    [*]Click "Scan"

When the scan is done:

  • Do NOT choose the option to uninstall the ESET Online Scanner with all its components because you need to retain the scan log for posting.
  • Please post the scan report in your next reply. It can be found in this location:
    C:\Program Files\EsetOnlineScanner\log.txt
  • You can remove the ESET Online Scanner using the Windows Control Panel - Add/Remove Programs feature

Important: Do NOT choose the option to automatically uninstall or the ESET Scan log will be deleted!!

Link to post
Share on other sites

It took me awhile, but I finally finished the scan. Also, it appears I've been infected with AV Security 2012 (it just happened a few minutes ago). Luckily it doesn't seem to be interfering too much since I surprisingly managed to close it with Task Manager.

ESETSmartInstaller@High as CAB hook log:

OnlineScanner64.ocx - registred OK

OnlineScanner.ocx - registred OK

# version=7

# iexplore.exe=8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339)

# OnlineScanner.ocx=1.0.0.6583

# api_version=3.0.2

# EOSSerial=c0f7dcbea5850a4c8af1c6e88c8abab9

# end=finished

# remove_checked=true

# archives_checked=false

# unwanted_checked=true

# unsafe_checked=false

# antistealth_checked=true

# utc_time=2011-11-12 06:27:40

# local_time=2011-11-12 01:27:40 (-0500, Eastern Standard Time)

# country="United States"

# lang=1033

# osver=6.0.6002 NT Service Pack 2

# compatibility_mode=512 16777215 100 0 97990 97990 0 0

# compatibility_mode=1024 16777215 100 0 60163690 60163690 0 0

# compatibility_mode=1792 16777215 100 0 59548891 59548891 0 0

# compatibility_mode=5892 16776573 100 56 0 157659492 0 0

# compatibility_mode=8192 67108863 100 0 0 0 0 0

# scanned=476232

# found=8

# cleaned=8

# scan_time=18474

C:\Qoobox\Quarantine\C\Windows\SysWOW64\System Security 2012v121.exe.vir a variant of Win32/Kryptik.VDP trojan (cleaned by deleting - quarantined) 00000000000000000000000000000000 C

C:\Users\User\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\46\3b816a6e-43bc533e Win32/Adware.SpywareProtect2009 application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C

C:\Users\User\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\47\2b37af-5e9b0d40 Win32/Adware.SpywareProtect2009 application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C

C:\Users\User\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\53\2f534435-37179547 Win32/Adware.SpywareProtect2009 application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C

C:\Users\User\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\62\73dc5d3e-45fcbc3c Win32/Adware.SpywareProtect2009 application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C

C:\Users\User\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\9\3a3f3049-21efb4ac Java/TrojanDownloader.OpenStream.NBL trojan (cleaned by deleting - quarantined) 00000000000000000000000000000000 C

C:\Users\User\Downloads\cnet_cwg2_exe.exe a variant of Win32/InstallCore.D application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C

C:\Users\User\Downloads\DriverRobot_Setup.exe Win32/Adware.DriverRobot application (deleted - quarantined) 00000000000000000000000000000000 C

Link to post
Share on other sites

Clear Java Cache:

Control Panel (using Classic View) and double-click the Java Icon. (looks like a coffee cup)

  • On the General tab, under Temporary Internet Files, click the Settings button.
  • Next, click on the Delete Files button
  • There are two options in the window to clear the cache - Leave BOTH Checked
    • Applications and Applets
    • Trace and Log Files

    [*]Click OK on Delete Temporary Files Window

    Note: This deletes ALL the Downloaded Applications and Applets from the CACHE.

    [*] Click OK to leave the Temporary Files Window

    [*]Click OK to leave the Java Control Panel.

As Java Cache can be an infection repository, You can quickly scan it periodically for infectious elements, by right-clicking the following folder and selecting the "Scan with <Your antivirus>" option:

The location of this folder In Vista and Windows 7 is:

C:\Users\<user_name>\AppData\LocalLow\Sun\Java\Deployment\cache\

Next, I want you to go to open Windows Explorer, navigate to your %appdata% folder (C:\Users\Jia Lin Hong\AppData\Roaming\), and delete all the randomly-named, empty folders in that folder that are left-over from the infection - some examples of the many folders that are present are:

c:\users\Jia Lin Hong\AppData\Roaming\zodqtF9O29

c:\users\Jia Lin Hong\AppData\Roaming\wdXli59Vu6Rlc5h

c:\users\Jia Lin Hong\AppData\Roaming\wsLqkrbHEgVyFJX

c:\users\Jia Lin Hong\AppData\Roaming\zmJNnm6ElN0yAyx

Note: Be careful to preserve any legitimate application folders that reside there (do not delete everything)

Perform an MBAM Quick Scan in Normal Mode

Open MBAM, Update it, Perform a "Quick Scan", Delete any threats found and copy/paste the MBAM log into your next reply.

Please let me know how your PC is running now?

Link to post
Share on other sites

  • 2 weeks later...
  • 2 weeks later...
  • Staff

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!

Link to post
Share on other sites

Guest
This topic is now closed to further replies.
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.