cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

ÿþOTL logfile created on: 18/04/2013 17:45:14 - Run 2
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\farouketnathalie\Desktop
64bit- An unknown product (Version = 6.2.9200) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16540)
Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy

3,89 Gb Total Physical Memory | 2,34 Gb Available Physical Memory | 60,14% Memory free
4,58 Gb Paging File | 2,96 Gb Available in Paging File | 64,53% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 677,92 Gb Total Space | 622,18 Gb Free Space | 91,78% Space Free | Partition Type: NTFS
Drive D: | 19,94 Gb Total Space | 2,46 Gb Free Space | 12,31% Space Free | Partition Type: NTFS

Computer Name: PCPORTABLE | User Name: farouketnathalie | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

[color=#E56717]========== Processes (SafeList) ==========[/color]

PRC - File not found --
PRC - [2013/04/18 16:12:57 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\farouketnathalie\Desktop\OTL.exe
PRC - [2013/04/16 20:02:03 | 000,141,312 | ---- | M] () -- C:\ProgramData\Promo-détective\DFService.exe
PRC - [2013/04/16 20:02:02 | 003,534,336 | ---- | M] () -- C:\ProgramData\Promo-détective\Main.exe
PRC - [2013/04/04 14:50:32 | 000,701,512 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
PRC - [2013/04/04 14:50:32 | 000,532,040 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
PRC - [2013/04/04 14:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
PRC - [2013/03/07 01:32:44 | 004,767,304 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
PRC - [2013/03/07 01:32:44 | 000,045,248 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe
PRC - [2013/02/08 12:07:04 | 003,453,144 | ---- | M] () -- C:\Users\farouketnathalie\AppData\Local\WahOO\Wahoo.exe
PRC - [2013/01/10 11:02:16 | 000,844,144 | ---- | M] (Samsung) -- C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
PRC - [2013/01/10 11:02:12 | 000,310,128 | ---- | M] (Samsung Electronics Co., Ltd.) -- C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
PRC - [2013/01/10 11:02:08 | 001,475,952 | ---- | M] (Samsung) -- C:\Program Files (x86)\Samsung\Kies\Kies.exe
PRC - [2012/12/27 18:34:18 | 000,308,368 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbarUser_32.exe
PRC - [2012/07/27 18:21:26 | 000,136,488 | ---- | M] (CyberLink) -- C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
PRC - [2012/07/18 03:10:32 | 000,364,416 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
PRC - [2012/07/18 03:10:30 | 000,276,864 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
PRC - [2012/07/18 03:10:24 | 000,128,896 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
PRC - [2012/07/18 03:10:16 | 000,165,760 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
PRC - [2012/07/09 13:40:02 | 000,580,512 | ---- | M] (Hewlett-Packard Development Company, L.P.) -- C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
PRC - [2012/07/09 13:40:02 | 000,035,232 | ---- | M] (Hewlett-Packard Development Company, L.P.) -- C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
PRC - [2012/06/08 05:34:06 | 000,111,120 | ---- | M] (CyberLink) -- C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
PRC - [2012/03/28 18:34:30 | 000,091,432 | ---- | M] (CyberLink Corp.) -- C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
PRC - [2011/08/26 14:37:18 | 001,342,008 | ---- | M] (Hewlett-Packard Development Company, L.P.) -- C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe


[color=#E56717]========== Modules (No Company Name) ==========[/color]

MOD - [2013/04/16 20:02:02 | 003,534,336 | ---- | M] () -- C:\ProgramData\Promo-détective\Main.exe
MOD - [2013/03/21 17:08:08 | 000,098,304 | ---- | M] () -- C:\ProgramData\Promo-détective\DFLib.dll
MOD - [2013/03/21 17:08:08 | 000,095,744 | ---- | M] () -- C:\ProgramData\Promo-détective\DFwcf.dll
MOD - [2013/03/21 17:08:07 | 000,262,656 | ---- | M] () -- C:\ProgramData\Promo-détective\IEToolbar.dll
MOD - [2013/02/19 16:52:12 | 000,212,992 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\d9b1eab5c18e51eaf4acc4894df0f223\System.ServiceProcess.ni.dll
MOD - [2013/02/19 16:51:48 | 011,843,584 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web\514763136e7ea4730f5fb8120b6bbb30\System.Web.ni.dll
MOD - [2013/02/15 18:26:21 | 012,436,480 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\65220f0f32ec84454f9a811fba883c2e\System.Windows.Forms.ni.dll
MOD - [2013/02/15 18:26:01 | 000,220,160 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Serv759bfb78#\1f3dbc5b0a874bf49a4559e71274f8ba\System.ServiceProcess.ni.dll
MOD - [2013/02/11 16:12:03 | 007,561,216 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\e1ec8b9a6d4f9af9d6065c4187fb1b5f\System.Xml.ni.dll
MOD - [2013/02/11 16:11:58 | 001,880,576 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xaml\f641b786d36d1cc5a5531a746c96ce1b\System.Xaml.ni.dll
MOD - [2013/02/11 16:11:31 | 000,786,432 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Runt73a1fc9d#\bbebe831e3b0761ad47dcc09231cbc29\System.Runtime.Remoting.ni.dll
MOD - [2013/02/11 16:11:18 | 000,958,464 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\05cc6faa6704d01e78700561b22937e3\System.Configuration.ni.dll
MOD - [2013/02/11 16:11:16 | 018,542,592 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Presentatio5ae0f00f#\8347ac8367f91309fa888d79a54c7450\PresentationFramework.ni.dll
MOD - [2013/02/11 16:11:04 | 010,926,592 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationCore\1c7f4533b2b24c10a628793a8b93e1a7\PresentationCore.ni.dll
MOD - [2013/02/11 16:10:56 | 003,910,144 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\WindowsBase\15cc4fff434f274c1f6ab56a385dcb54\WindowsBase.ni.dll
MOD - [2013/02/11 16:10:51 | 006,998,016 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\0247de206c1c48ac4f8b55df16468405\System.Core.ni.dll
MOD - [2013/02/11 16:10:46 | 009,937,408 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System\a7811936e59aaee26b1d9d467174d6d4\System.ni.dll
MOD - [2013/02/11 16:10:38 | 016,544,768 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\374a0cc6603f58864831897ef723bd4a\mscorlib.ni.dll
MOD - [2013/02/08 12:07:04 | 003,453,144 | ---- | M] () -- C:\Users\farouketnathalie\AppData\Local\WahOO\Wahoo.exe
MOD - [2013/01/14 23:46:45 | 002,297,856 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Core\fb048f69c5b71baf063604bd1724b078\System.Core.ni.dll
MOD - [2013/01/14 23:29:14 | 000,627,200 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\fe30f9017b763714b1372d77204cd3d0\System.Transactions.ni.dll
MOD - [2013/01/14 23:28:51 | 000,971,264 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\cf561d65486360afb324d26c80b9aac2\System.Configuration.ni.dll
MOD - [2013/01/11 22:33:48 | 005,453,312 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ae31f7dc9817e359d05c9c8efdd5f359\System.Xml.ni.dll
MOD - [2013/01/11 22:33:39 | 001,593,344 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\7e6b074d3f3e3cc8e0270a3552c47aaa\System.Drawing.ni.dll
MOD - [2013/01/11 22:33:38 | 006,656,512 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Data\644cb8dc7b37a1eec15f542da9846d0c\System.Data.ni.dll
MOD - [2013/01/11 22:33:10 | 007,988,736 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\28c2c6e7f48ff80c680a97b08df66a72\System.ni.dll
MOD - [2013/01/11 22:33:05 | 011,494,912 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\8d2929ad589e1092eb62a43424361465\mscorlib.ni.dll
MOD - [2012/11/28 14:13:52 | 000,087,952 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
MOD - [2012/11/28 14:13:30 | 001,242,512 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
MOD - [2012/10/10 03:35:25 | 005,992,448 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.ServiceModel\3.0.0.0__b77a5c561934e089\System.ServiceModel.dll
MOD - [2012/10/10 03:35:25 | 000,970,752 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.Runtime.Serialization\3.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
MOD - [2012/10/10 03:35:25 | 000,446,464 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.IdentityModel\3.0.0.0__b77a5c561934e089\System.IdentityModel.dll
MOD - [2012/10/10 03:35:25 | 000,110,592 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\SMDiagnostics\3.0.0.0__b77a5c561934e089\SMDiagnostics.dll
MOD - [2012/09/28 23:41:49 | 000,102,400 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.Runtime.Serialization.resources\3.0.0.0_fr_b77a5c561934e089\System.Runtime.Serialization.resources.dll
MOD - [2012/09/14 00:04:07 | 000,311,296 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_fr_b77a5c561934e089\mscorlib.resources.dll
MOD - [2012/09/14 00:04:07 | 000,212,992 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.resources\2.0.0.0_fr_b77a5c561934e089\System.resources.dll
MOD - [2012/09/04 14:25:46 | 000,043,008 | ---- | M] () -- C:\Users\farouketnathalie\AppData\Local\WahOO\libgcc_s_dw2-1.dll
MOD - [2012/09/04 14:25:46 | 000,011,362 | ---- | M] () -- C:\Users\farouketnathalie\AppData\Local\WahOO\mingwm10.dll
MOD - [2012/07/27 01:08:38 | 002,972,672 | ---- | M] () -- C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
MOD - [2012/07/27 01:08:38 | 001,282,048 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.Web.Extensions\3.5.0.0__31bf3856ad364e35\System.Web.Extensions.dll
MOD - [2012/07/27 01:08:38 | 000,569,344 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.ServiceModel.Web\3.5.0.0__31bf3856ad364e35\System.ServiceModel.Web.dll
MOD - [2012/07/27 01:08:38 | 000,261,632 | ---- | M] () -- C:\Windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
MOD - [2012/07/27 01:08:38 | 000,139,264 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.Xml.Linq\3.5.0.0__b77a5c561934e089\System.Xml.Linq.dll
MOD - [2012/07/27 01:08:38 | 000,057,344 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\3.5.0.0__31bf3856ad364e35\System.ComponentModel.DataAnnotations.dll
MOD - [2012/06/08 11:34:06 | 000,016,400 | ---- | M] () -- C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvcPS.dll
MOD - [2012/06/08 05:34:06 | 000,627,216 | ---- | M] () -- C:\Program Files (x86)\CyberLink\Power2Go8\CLMediaLibrary.dll


[color=#E56717]========== Services (SafeList) ==========[/color]

SRV:[b]64bit:[/b] - [2013/03/07 01:32:44 | 000,045,248 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
SRV:[b]64bit:[/b] - [2013/03/02 04:45:07 | 000,171,008 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\TimeBrokerServer.dll -- (TimeBroker)
SRV:[b]64bit:[/b] - [2013/03/02 04:45:05 | 000,180,224 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\SystemEventsBrokerServer.dll -- (SystemEventsBroker)
SRV:[b]64bit:[/b] - [2013/02/02 10:21:45 | 000,467,456 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\netprofmsvc.dll -- (netprofm)
SRV:[b]64bit:[/b] - [2013/01/29 03:57:14 | 000,014,920 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MsMpEng.exe -- (WinDefend)
SRV:[b]64bit:[/b] - [2013/01/10 01:23:16 | 001,964,544 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wlidsvc.dll -- (wlidsvc)
SRV:[b]64bit:[/b] - [2013/01/10 01:22:35 | 000,438,272 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\lsm.dll -- (LSM)
SRV:[b]64bit:[/b] - [2012/11/06 06:36:55 | 002,675,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify)
SRV:[b]64bit:[/b] - [2012/11/06 06:17:41 | 000,169,472 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\AudioEndpointBuilder.dll -- (AudioEndpointBuilder)
SRV:[b]64bit:[/b] - [2012/09/20 11:10:47 | 002,367,528 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\WSService.dll -- (WSService)
SRV:[b]64bit:[/b] - [2012/09/20 08:31:18 | 000,116,736 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\fhsvc.dll -- (fhsvc)
SRV:[b]64bit:[/b] - [2012/09/20 08:30:41 | 000,179,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\bisrv.dll -- (BrokerInfrastructure)
SRV:[b]64bit:[/b] - [2012/08/23 10:45:42 | 000,029,600 | ---- | M] (Hewlett-Packard Company) [Auto | Running] -- C:\Windows\SysNative\hpservice.exe -- (hpsrv)
SRV:[b]64bit:[/b] - [2012/08/02 11:06:02 | 000,239,616 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
SRV:[b]64bit:[/b] - [2012/07/26 05:07:47 | 000,065,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wiarpc.dll -- (WiaRpc)
SRV:[b]64bit:[/b] - [2012/07/26 05:07:42 | 000,263,680 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wcmsvc.dll -- (Wcmsvc)
SRV:[b]64bit:[/b] - [2012/07/26 05:07:40 | 000,283,648 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\vaultsvc.dll -- (VaultSvc)
SRV:[b]64bit:[/b] - [2012/07/26 05:07:25 | 000,012,800 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svsvc.dll -- (svsvc)
SRV:[b]64bit:[/b] - [2012/07/26 05:06:34 | 000,743,936 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\netlogon.dll -- (Netlogon)
SRV:[b]64bit:[/b] - [2012/07/26 05:06:33 | 000,161,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NcaSvc.dll -- (NcaSvc)
SRV:[b]64bit:[/b] - [2012/07/26 05:06:33 | 000,073,728 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\NcdAutoSetup.dll -- (NcdAutoSetup)
SRV:[b]64bit:[/b] - [2012/07/26 05:05:55 | 000,059,904 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\keyiso.dll -- (KeyIso)
SRV:[b]64bit:[/b] - [2012/07/26 05:05:34 | 000,037,376 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\efssvc.dll -- (EFS)
SRV:[b]64bit:[/b] - [2012/07/26 05:05:28 | 000,207,872 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\DeviceSetupManager.dll -- (DsmSvc)
SRV:[b]64bit:[/b] - [2012/07/26 05:05:24 | 000,342,016 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\das.dll -- (DeviceAssociationService)
SRV:[b]64bit:[/b] - [2012/07/26 05:05:08 | 000,122,368 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AUInstallAgent.dll -- (AllUserInstallAgent)
SRV:[b]64bit:[/b] - [2012/07/26 02:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicvss)
SRV:[b]64bit:[/b] - [2012/07/26 02:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmictimesync)
SRV:[b]64bit:[/b] - [2012/07/26 02:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicshutdown)
SRV:[b]64bit:[/b] - [2012/07/26 02:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicrdv)
SRV:[b]64bit:[/b] - [2012/07/26 02:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmickvpexchange)
SRV:[b]64bit:[/b] - [2012/07/26 02:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicheartbeat)
SRV:[b]64bit:[/b] - [2012/07/22 09:30:36 | 000,321,536 | ---- | M] (IDT, Inc.) [Auto | Running] -- C:\Program Files\IDT\WDM\STacSV64.exe -- (STacSV)
SRV:[b]64bit:[/b] - [2012/04/20 14:16:12 | 000,635,104 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Intel\iCLS Client\HeciServer.exe -- (Intel(R)
SRV - [2013/04/16 20:02:03 | 000,141,312 | ---- | M] () [Auto | Running] -- C:\ProgramData\Promo-détective\DFService.exe -- (DiscountfinderService)
SRV - [2013/04/04 14:50:32 | 000,701,512 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2013/04/04 14:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)
SRV - [2013/03/18 12:12:22 | 000,253,656 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2013/02/28 18:45:16 | 000,161,384 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2012/11/06 06:36:55 | 002,675,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\system32\spool\DRIVERS\x64\3\PrintConfig.dll -- (PrintNotify)
SRV - [2012/08/10 17:53:44 | 000,085,504 | ---- | M] (Hewlett-Packard Company) [Auto | Running] -- C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe -- (HP Support Assistant Service)
SRV - [2012/07/26 05:20:04 | 000,018,432 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\StorSvc.dll -- (StorSvc)
SRV - [2012/07/26 05:18:41 | 000,408,064 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\inetsrv\iisw3adm.dll -- (WAS)
SRV - [2012/07/26 05:17:52 | 000,060,416 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\inetsrv\apphostsvc.dll -- (AppHostSvc)
SRV - [2012/07/25 22:09:00 | 000,276,288 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\IntelCpHeciSvc.exe -- (cphs)
SRV - [2012/07/18 03:10:32 | 000,364,416 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS)
SRV - [2012/07/18 03:10:30 | 000,276,864 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS)
SRV - [2012/07/18 03:10:24 | 000,128,896 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe -- (Intel(R)
SRV - [2012/07/18 03:10:16 | 000,165,760 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe -- (jhi_service)
SRV - [2012/07/14 18:02:16 | 002,451,456 | ---- | M] (Realsil Microelectronics Inc.) [Auto | Running] -- C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe -- (IconMan_R)
SRV - [2012/07/09 13:40:02 | 000,035,232 | ---- | M] (Hewlett-Packard Development Company, L.P.) [Auto | Running] -- C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe -- (HPWMISVC)
SRV - [2010/10/12 19:59:12 | 000,206,072 | ---- | M] (WildTangent, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe -- (GamesAppService)


[color=#E56717]========== Driver Services (SafeList) ==========[/color]

DRV:[b]64bit:[/b] - File not found [Kernel | On_Demand | Stopped] -- C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys -- (esgiguard)
DRV:[b]64bit:[/b] - [2013/04/04 14:50:32 | 000,025,928 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\Drivers\mbam.sys -- (MBAMProtector)
DRV:[b]64bit:[/b] - [2013/03/07 01:33:21 | 001,025,808 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\SysNative\drivers\aswSnx.sys -- (aswSnx)
DRV:[b]64bit:[/b] - [2013/03/07 01:33:21 | 000,377,920 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswSP.sys -- (aswSP)
DRV:[b]64bit:[/b] - [2013/03/07 01:33:21 | 000,178,624 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\aswVmm.sys -- (aswVmm)
DRV:[b]64bit:[/b] - [2013/03/07 01:33:21 | 000,065,336 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\aswRvrt.sys -- (aswRvrt)
DRV:[b]64bit:[/b] - [2013/03/07 01:33:20 | 000,080,816 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\Drivers\aswMonFlt.sys -- (aswMonFlt)
DRV:[b]64bit:[/b] - [2013/03/07 01:33:20 | 000,033,400 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV:[b]64bit:[/b] - [2013/03/02 12:57:48 | 000,337,128 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\USBXHCI.SYS -- (USBXHCI)
DRV:[b]64bit:[/b] - [2013/03/02 12:57:46 | 000,283,880 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\spaceport.sys -- (spaceport)
DRV:[b]64bit:[/b] - [2013/03/02 12:57:46 | 000,077,544 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\storahci.sys -- (storahci)
DRV:[b]64bit:[/b] - [2013/03/02 12:45:20 | 000,148,712 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\tpm.sys -- (TPM)
DRV:[b]64bit:[/b] - [2013/03/02 12:45:19 | 000,194,792 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\sdbus.sys -- (sdbus)
DRV:[b]64bit:[/b] - [2013/03/02 12:39:38 | 000,069,864 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\pdc.sys -- (pdc)
DRV:[b]64bit:[/b] - [2013/02/02 13:19:44 | 000,446,184 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\USBHUB3.SYS -- (USBHUB3)
DRV:[b]64bit:[/b] - [2013/02/02 09:25:23 | 000,037,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\BthAvrcpTg.sys -- (BthAvrcpTg)
DRV:[b]64bit:[/b] - [2013/01/29 03:57:05 | 000,035,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\WdBoot.sys -- (WdBoot)
DRV:[b]64bit:[/b] - [2013/01/29 01:08:22 | 000,230,904 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\WdFilter.sys -- (WdFilter)
DRV:[b]64bit:[/b] - [2013/01/10 03:53:32 | 000,028,904 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\msgpiowin32.sys -- (msgpiowin32)
DRV:[b]64bit:[/b] - [2012/12/19 09:42:10 | 000,006,144 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\t_mouse.sys -- (t_mouse.sys)
DRV:[b]64bit:[/b] - [2012/11/27 05:55:44 | 000,029,952 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\BthhfHid.sys -- (bthhfhid)
DRV:[b]64bit:[/b] - [2012/11/20 06:54:31 | 000,039,936 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\hidi2c.sys -- (hidi2c)
DRV:[b]64bit:[/b] - [2012/11/06 05:55:44 | 000,022,528 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\fxppm.sys -- (FxPPM)
DRV:[b]64bit:[/b] - [2012/10/12 10:08:01 | 000,027,880 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV:[b]64bit:[/b] - [2012/10/11 09:25:48 | 000,056,552 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\sdstor.sys -- (sdstor)
DRV:[b]64bit:[/b] - [2012/10/11 09:13:49 | 000,058,088 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- C:\Windows\SysNative\Drivers\dam.sys -- (dam)
DRV:[b]64bit:[/b] - [2012/10/11 07:19:44 | 000,023,552 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\WSDScan.sys -- (WSDScan)
DRV:[b]64bit:[/b] - [2012/10/11 05:51:49 | 000,012,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\serscan.sys -- (StillCam)
DRV:[b]64bit:[/b] - [2012/09/28 10:32:56 | 000,053,760 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\usbaapl64.sys -- (USBAAPL64)
DRV:[b]64bit:[/b] - [2012/09/20 09:55:33 | 000,212,200 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\UCX01000.SYS -- (UCX01000)
DRV:[b]64bit:[/b] - [2012/09/20 09:55:30 | 000,120,040 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\msgpioclx.sys -- (GPIOClx0101)
DRV:[b]64bit:[/b] - [2012/09/20 09:55:27 | 003,265,256 | ---- | M] (Broadcom Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\evbda.sys -- (ebdrv)
DRV:[b]64bit:[/b] - [2012/09/20 09:55:24 | 000,533,224 | ---- | M] (Broadcom Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\bxvbda.sys -- (b06bdrv)
DRV:[b]64bit:[/b] - [2012/08/31 10:40:24 | 000,020,800 | ---- | M] (Hewlett-Packard Development Company, L.P.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\WirelessButtonDriver64.sys -- (WirelessButtonDriver)
DRV:[b]64bit:[/b] - [2012/08/24 11:38:28 | 000,448,312 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\SynTP.sys -- (SynTP)
DRV:[b]64bit:[/b] - [2012/08/24 11:38:28 | 000,043,832 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\Smb_driver_Intel.sys -- (SmbDrvI)
DRV:[b]64bit:[/b] - [2012/08/24 11:38:26 | 000,041,272 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\Smb_driver_AMDASF.sys -- (SmbDrv)
DRV:[b]64bit:[/b] - [2012/08/23 10:45:42 | 000,042,400 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\Accelerometer.sys -- (Accelerometer)
DRV:[b]64bit:[/b] - [2012/08/23 10:45:42 | 000,029,600 | ---- | M] (Hewlett-Packard Company) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\hpdskflt.sys -- (hpdskflt)
DRV:[b]64bit:[/b] - [2012/08/21 13:01:20 | 000,033,240 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\GEARAspiWDM.sys -- (GEARAspiWDM)
DRV:[b]64bit:[/b] - [2012/08/08 22:28:38 | 001,958,984 | ---- | M] (Ralink Technology, Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\netr28x.sys -- (netr28x)
DRV:[b]64bit:[/b] - [2012/08/02 12:54:18 | 010,280,960 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\atikmdag.sys -- (amdkmdag)
DRV:[b]64bit:[/b] - [2012/08/02 10:09:30 | 000,368,640 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\atikmpag.sys -- (amdkmdap)
DRV:[b]64bit:[/b] - [2012/07/31 21:22:00 | 000,645,952 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\iaStorA.sys -- (iaStorA)
DRV:[b]64bit:[/b] - [2012/07/31 10:04:12 | 000,690,832 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\Rt630x64.sys -- (RTL8168)
DRV:[b]64bit:[/b] - [2012/07/26 07:26:46 | 000,025,328 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:[b]64bit:[/b] - [2012/07/26 07:26:45 | 000,033,792 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\condrv.sys -- (condrv)
DRV:[b]64bit:[/b] - [2012/07/26 07:00:58 | 000,322,800 | ---- | M] (VIA Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\VSTXRAID.SYS -- (VSTXRAID)
DRV:[b]64bit:[/b] - [2012/07/26 07:00:58 | 000,106,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\VerifierExt.sys -- (VerifierExt)
DRV:[b]64bit:[/b] - [2012/07/26 07:00:58 | 000,097,008 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\uaspstor.sys -- (UASPStor)
DRV:[b]64bit:[/b] - [2012/07/26 07:00:57 | 000,077,040 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\acpiex.sys -- (acpiex)
DRV:[b]64bit:[/b] - [2012/07/26 07:00:55 | 000,064,240 | ---- | M] (Marvell Semiconductor, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\mvumis.sys -- (mvumis)
DRV:[b]64bit:[/b] - [2012/07/26 07:00:55 | 000,030,960 | ---- | M] (Promise Technology, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\stexstor.sys -- (stexstor)
DRV:[b]64bit:[/b] - [2012/07/26 07:00:52 | 000,092,400 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:[b]64bit:[/b] - [2012/07/26 07:00:52 | 000,081,136 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\lsi_sss.sys -- (LSI_SSS)
DRV:[b]64bit:[/b] - [2012/07/26 07:00:52 | 000,064,752 | ---- | M] (Hewlett-Packard Company) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\HpSAMD.sys -- (HpSAMD)
DRV:[b]64bit:[/b] - [2012/07/26 07:00:51 | 000,113,904 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\EhStorTcgDrv.sys -- (EhStorTcgDrv)
DRV:[b]64bit:[/b] - [2012/07/26 07:00:51 | 000,081,136 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\EhStorClass.sys -- (EhStorClass)
DRV:[b]64bit:[/b] - [2012/07/26 07:00:49 | 000,258,288 | ---- | M] (AMD Technologies Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\amdsbs.sys -- (amdsbs)
DRV:[b]64bit:[/b] - [2012/07/26 07:00:49 | 000,106,736 | ---- | M] (LSI) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\3ware.sys -- (3ware)
DRV:[b]64bit:[/b] - [2012/07/26 07:00:49 | 000,076,016 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\amdsata.sys -- (amdsata)
DRV:[b]64bit:[/b] - [2012/07/26 07:00:48 | 000,026,352 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\amdxata.sys -- (amdxata)
DRV:[b]64bit:[/b] - [2012/07/26 06:57:54 | 000,361,200 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\clfs.sys -- (CLFS)
DRV:[b]64bit:[/b] - [2012/07/26 06:54:34 | 000,096,496 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\wfplwfs.sys -- (WFPLWFS)
DRV:[b]64bit:[/b] - [2012/07/26 06:53:16 | 000,067,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\vpci.sys -- (vpci)
DRV:[b]64bit:[/b] - [2012/07/26 05:17:38 | 000,036,592 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\terminpt.sys -- (terminpt)
DRV:[b]64bit:[/b] - [2012/07/26 04:29:47 | 000,021,504 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\WSDPrint.sys -- (WSDPrintDevice)
DRV:[b]64bit:[/b] - [2012/07/26 04:29:14 | 000,010,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\mshidumdf.sys -- (mshidumdf)
DRV:[b]64bit:[/b] - [2012/07/26 04:29:08 | 000,048,640 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\BasicDisplay.sys -- (BasicDisplay)
DRV:[b]64bit:[/b] - [2012/07/26 04:29:03 | 000,024,576 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\HyperVideo.sys -- (HyperVideo)
DRV:[b]64bit:[/b] - [2012/07/26 04:28:52 | 000,029,696 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\BasicRender.sys -- (BasicRender)
DRV:[b]64bit:[/b] - [2012/07/26 04:27:58 | 000,012,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\vmgencounter.sys -- (gencounter)
DRV:[b]64bit:[/b] - [2012/07/26 04:27:41 | 000,018,432 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\kdnic.sys -- (kdnic)
DRV:[b]64bit:[/b] - [2012/07/26 04:27:37 | 000,010,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\acpitime.sys -- (acpitime)
DRV:[b]64bit:[/b] - [2012/07/26 04:27:33 | 000,023,552 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\npsvctrig.sys -- (npsvctrig)
DRV:[b]64bit:[/b] - [2012/07/26 04:27:29 | 000,019,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\WpdUpFltr.sys -- (WpdUpFltr)
DRV:[b]64bit:[/b] - [2012/07/26 04:27:16 | 000,010,240 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\acpipagr.sys -- (acpipagr)
DRV:[b]64bit:[/b] - [2012/07/26 04:27:01 | 000,011,776 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\hyperkbd.sys -- (hyperkbd)
DRV:[b]64bit:[/b] - [2012/07/26 04:26:46 | 000,062,976 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\SerCx.sys -- (SerCx)
DRV:[b]64bit:[/b] - [2012/07/26 04:26:43 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\SpbCx.sys -- (SpbCx)
DRV:[b]64bit:[/b] - [2012/07/26 04:26:34 | 000,030,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\TsUsbGD.sys -- (TsUsbGD)
DRV:[b]64bit:[/b] - [2012/07/26 04:26:13 | 000,051,200 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\bthhfenum.sys -- (BthHFEnum)
DRV:[b]64bit:[/b] - [2012/07/26 04:25:57 | 000,033,280 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\dmvsc.sys -- (dmvsc)
DRV:[b]64bit:[/b] - [2012/07/26 04:25:56 | 000,057,344 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:[b]64bit:[/b] - [2012/07/26 04:25:13 | 000,045,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\wpcfltr.sys -- (wpcfltr)
DRV:[b]64bit:[/b] - [2012/07/26 04:25:01 | 000,126,464 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\NdisImPlatform.sys -- (NdisImPlatform)
DRV:[b]64bit:[/b] - [2012/07/26 04:23:53 | 000,068,608 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\mslldp.sys -- (MsLldp)
DRV:[b]64bit:[/b] - [2012/07/26 04:23:42 | 000,097,792 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\Drivers\Ndu.sys -- (Ndu)
DRV:[b]64bit:[/b] - [2012/07/25 22:08:30 | 008,982,208 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\igdpmd64.sys -- (intelkmd)
DRV:[b]64bit:[/b] - [2012/07/25 22:08:30 | 008,982,208 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\igdkmd64.sys -- (igfx)
DRV:[b]64bit:[/b] - [2012/07/22 09:30:36 | 000,540,160 | ---- | M] (IDT, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\stwrt64.sys -- (STHDA)
DRV:[b]64bit:[/b] - [2012/07/10 06:19:26 | 000,035,496 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\amdkmpfd.sys -- (amdkmpfd)
DRV:[b]64bit:[/b] - [2012/07/04 15:09:08 | 000,269,968 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\RtsP2Stor.sys -- (RSP2STOR)
DRV:[b]64bit:[/b] - [2012/07/03 01:16:02 | 000,062,784 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\HECIx64.sys -- (MEIx64)
DRV:[b]64bit:[/b] - [2012/06/25 10:24:50 | 000,092,536 | ---- | M] (CyberLink) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\CLVirtualDrive.sys -- (CLVirtualDrive)
DRV:[b]64bit:[/b] - [2012/06/19 17:40:50 | 000,342,528 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\IntcDAud.sys -- (IntcDAud)
DRV:[b]64bit:[/b] - [2011/02/11 23:23:34 | 000,035,344 | ---- | M] (CACE Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\npf.sys -- (NPF)
DRV:[b]64bit:[/b] - [2010/05/25 08:45:38 | 000,020,568 | ---- | M] (Devguru Co., Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\dgderdrv.sys -- (dgderdrv)
DRV:[b]64bit:[/b] - [2008/04/04 14:48:30 | 000,031,744 | ---- | M] (OPTO ELECTRONICS CO.,LTD.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\optovcm.sys -- (optovcm)
DRV:[b]64bit:[/b] - [2008/04/04 14:48:30 | 000,022,656 | ---- | M] (OPTO ELECTRONICS CO.,LTD.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\optousb.sys -- (optousb)

[color=#E56717]========== Standard Registry (SafeList) ==========[/color]


[color=#E56717]========== Internet Explorer ==========[/color]

IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.portaldosites.com/?utm_source=b&utm_medium=slbnew&from=slbnew&uid=ST750LM022XHN-M750MBB_S2SUJ9AC612340&ts=1366218350
IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.portaldosites.com/?utm_source=b&utm_medium=slbnew&from=slbnew&uid=ST750LM022XHN-M750MBB_S2SUJ9AC612340&ts=1366218350
IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope =
IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=HPNTDFJS
IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{b7fca997-d0fb-4fe0-8afd-255e89cf9671}: "URL" = http://fr.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF
IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{C1A3FC1A-AD57-4781-9D62-908810E292F1}: "URL" = http://www.amazon.fr/s/ref=azs_osd_ieafr?ie=UTF-8&tag=hp-fr2-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{D944BB61-2E34-4DBF-A683-47E505C587DC}: "URL" = http://rover.ebay.com/rover/1/709-29563-11896-9/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.portaldosites.com/?utm_source=b&utm_medium=slbnew&from=slbnew&uid=ST750LM022XHN-M750MBB_S2SUJ9AC612340&ts=1366218350
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.portaldosites.com/?utm_source=b&utm_medium=slbnew&from=slbnew&uid=ST750LM022XHN-M750MBB_S2SUJ9AC612340&ts=1366218350
IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=HPNTDFJS
IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
IE - HKLM\..\SearchScopes\{b7fca997-d0fb-4fe0-8afd-255e89cf9671}: "URL" = http://fr.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF
IE - HKLM\..\SearchScopes\{C1A3FC1A-AD57-4781-9D62-908810E292F1}: "URL" = http://www.amazon.fr/s/ref=azs_osd_ieafr?ie=UTF-8&tag=hp-fr2-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
IE - HKLM\..\SearchScopes\{D944BB61-2E34-4DBF-A683-47E505C587DC}: "URL" = http://rover.ebay.com/rover/1/709-29563-11896-9/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}


IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope =
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-21-3415397648-856074723-2709772848-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.portaldosites.com/?utm_source=b&utm_medium=slbnew&from=slbnew&uid=ST750LM022XHN-M750MBB_S2SUJ9AC612340&ts=1366218350
IE - HKU\S-1-5-21-3415397648-856074723-2709772848-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
IE - HKU\S-1-5-21-3415397648-856074723-2709772848-1003\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE - HKU\S-1-5-21-3415397648-856074723-2709772848-1003\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=HPNTDFJS
IE - HKU\S-1-5-21-3415397648-856074723-2709772848-1003\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7GGNI_frFR516
IE - HKU\S-1-5-21-3415397648-856074723-2709772848-1003\..\SearchScopes\{b7fca997-d0fb-4fe0-8afd-255e89cf9671}: "URL" = http://fr.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF
IE - HKU\S-1-5-21-3415397648-856074723-2709772848-1003\..\SearchScopes\{C1A3FC1A-AD57-4781-9D62-908810E292F1}: "URL" = http://www.amazon.fr/s/ref=azs_osd_ieafr?ie=UTF-8&tag=hp-fr2-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
IE - HKU\S-1-5-21-3415397648-856074723-2709772848-1003\..\SearchScopes\{D944BB61-2E34-4DBF-A683-47E505C587DC}: "URL" = http://rover.ebay.com/rover/1/709-29563-11896-9/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
IE - HKU\S-1-5-21-3415397648-856074723-2709772848-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0


[color=#E56717]========== FireFox ==========[/color]

FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_6_602_180.dll File not found
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_180.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\windows\SysWOW64\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3555.0308: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@MoneyMillionaire/npdf: C:\ProgramData\Promo-détective\FFExtension20130321160807\plugins\npdf.dll ( )
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@WildTangent.com/GamesAppPresenceDetector,Version=1.0: C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\2\NP_wtapp.dll ()

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\discountfinder@moneymillionaire.com: C:\ProgramData\Promo-détective\FFExtension20130321160807 [2013/03/21 17:08:07 | 000,000,000 | -H-D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\happylyrics@hpyproductions.net: C:\Program Files (x86)\HappyLyrics\FF\ [2013/04/17 19:19:59 | 000,000,000 | ---D | M]

[2013/04/17 18:53:57 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions

[color=#E56717]========== Chrome ==========[/color]

CHR - homepage: http://www.holasearch.com/?affID=121962&babsrc=HP_ss&mntrId=DA28083E8E1611A6
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\26.0.1410.64\PepperFlash\pepflashplayer.dll
CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\26.0.1410.64\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\26.0.1410.64\pdf.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll
CHR - plugin: Intel\u00AE Identity Protection Technology (Enabled) = C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll
CHR - plugin: Intel\u00AE Identity Protection Technology (Enabled) = C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll
CHR - plugin: Software Update (Enabled) = C:\Program Files (x86)\Software\Update\1.2.201.0\npSoftwareOneClick8.dll
CHR - plugin: WildTangent Games App V2 Presence Detector (Enabled) = C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\2\NP_wtapp.dll
CHR - plugin: Windows Live\u0099 Photo Gallery (Enabled) = C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll
CHR - plugin: MoneyMillionaire plugin (Enabled) = C:\ProgramData\Promo-d\u00E9tective\FFExtension20130321160807\plugins\npdf.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_180.dll
CHR - plugin: Shockwave for Director (Enabled) = C:\windows\SysWOW64\Adobe\Director\np32dsw.dll
CHR - Extension: Tiger Savings = C:\Users\farouketnathalie\AppData\Local\Google\Chrome\User Data\Default\Extensions\akdojefgphalhhkagafpcoakgboeokdl\1.23.62_0\crossrider
CHR - Extension: Tiger Savings = C:\Users\farouketnathalie\AppData\Local\Google\Chrome\User Data\Default\Extensions\akdojefgphalhhkagafpcoakgboeokdl\1.23.62_0\
CHR - Extension: Happy Lyrics = C:\Users\farouketnathalie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ealchnonpofjocgofjpopjdoegbbkofj\1.110_0\
CHR - Extension: avast! WebRep = C:\Users\farouketnathalie\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_1\

O1 HOSTS File: ([2012/07/26 07:26:49 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\Drivers\etc\hosts
O2:[b]64bit:[/b] - BHO: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
O2:[b]64bit:[/b] - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O2 - BHO: (Happy Lyrics) - {59C0C5BD-2579-433A-BBB8-AFFD59642BAF} - C:\Program Files (x86)\HappyLyrics\hppylrc.dll (Happy Productions)
O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O2 - BHO: (HP Network Check Helper) - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)
O3:[b]64bit:[/b] - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O3:[b]64bit:[/b] - HKLM\..\Toolbar: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O3:[b]64bit:[/b] - HKU\S-1-5-21-3415397648-856074723-2709772848-1003\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O4:[b]64bit:[/b] - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [MouseDriver] C:\Windows\SysNative\TiltWheelMouse.exe (Pixart Imaging Inc)
O4:[b]64bit:[/b] - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe (IDT, Inc.)
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [CLVirtualDrive] C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe (CyberLink Corp.)
O4 - HKLM..\Run: [HP CoolSense] C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe (Hewlett-Packard Development Company, L.P.)
O4 - HKLM..\Run: [HP Quick Launch] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe (Hewlett-Packard Development Company, L.P.)
O4 - HKLM..\Run: [RemoteControl10] C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe (CyberLink Corp.)
O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKU\S-1-5-21-3415397648-856074723-2709772848-1003..\Run: [] C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe (Samsung)
O4 - HKU\S-1-5-21-3415397648-856074723-2709772848-1003..\Run: [HP Photosmart 5520 series (NET)] C:\Program Files\HP\HP Photosmart 5520 series\Bin\ScanToPCActivationApp.exe (Hewlett-Packard Co.)
O4 - HKU\S-1-5-21-3415397648-856074723-2709772848-1003..\Run: [KiesPDLR] C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe (Samsung)
O4 - HKU\S-1-5-21-3415397648-856074723-2709772848-1003..\Run: [KiesPreload] C:\Program Files (x86)\Samsung\Kies\Kies.exe (Samsung)
O4 - HKU\S-1-5-21-3415397648-856074723-2709772848-1003..\Run: [KiesTrayAgent] C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe (Samsung Electronics Co., Ltd.)
O4 - HKU\S-1-5-21-3415397648-856074723-2709772848-1003..\Run: [Wahoo] C:\Users\farouketnathalie\AppData\Local\WahOO\Wahoo.exe ()
O4 - HKU\S-1-5-21-3415397648-856074723-2709772848-1003..\Run: [Yontoo Desktop] "C:\Users\farouketnathalie\AppData\Roaming\Yontoo\YontooDesktop.exe" File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableCursorSuppression = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O9 - Extra Button: HP Smart Print - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\Smart Print 2.0\smartprintsetup.exe (Hewlett-Packard)
O9 - Extra 'Tools' menuitem : HP Smart Print - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\Smart Print 2.0\smartprintsetup.exe (Hewlett-Packard)
O9 - Extra Button: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-103 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe (Hewlett-Packard)
O9 - Extra 'Tools' menuitem : @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-102 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe (Hewlett-Packard)
O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O13[b]64bit:[/b] - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {3A226D85-574D-4272-B73C-DBCAECF709B3} http://www.consoclicker.com/TNSClickrb.CAB (TNSClickerb.Clicker)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{10FB443C-1330-41FF-A8FE-7BF2AF73CEFE}: DhcpNameServer = 192.168.1.1 192.168.1.1
O18:[b]64bit:[/b] - Protocol\Handler\skype4com - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\wlpg - No CLSID value found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O30 - LSA: Security Packages - (livessp) - File not found
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2013/04/18 00:17:26 | 000,000,000 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O34 - HKLM BootExecute: (MACHINE BootExecut)
O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

NetSvcs:[b]64bit:[/b] wlidsvc - C:\Windows\SysNative\wlidsvc.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] DsmSvc - C:\Windows\SysNative\DeviceSetupManager.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] NcaSvc - C:\Windows\SysNative\NcaSvc.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] SystemEventsBroker - C:\Windows\SysNative\SystemEventsBrokerServer.dll (Microsoft Corporation)


SafeBootMin:[b]64bit:[/b] AppMgmt - Service
SafeBootMin:[b]64bit:[/b] Base - Driver Group
SafeBootMin:[b]64bit:[/b] BasicDisplay.sys - C:\Windows\SysNative\Drivers\BasicDisplay.sys (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] BasicRender.sys - C:\Windows\SysNative\Drivers\BasicRender.sys (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] Boot Bus Extender - Driver Group
SafeBootMin:[b]64bit:[/b] Boot file system - Driver Group
SafeBootMin:[b]64bit:[/b] BrokerInfrastructure - C:\Windows\SysNative\bisrv.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] EFS - C:\Windows\SysNative\efssvc.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] File system - Driver Group
SafeBootMin:[b]64bit:[/b] Filter - Driver Group
SafeBootMin:[b]64bit:[/b] HelpSvc - Service
SafeBootMin:[b]64bit:[/b] KeyIso - C:\Windows\SysNative\keyiso.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] LSM - C:\Windows\SysNative\lsm.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] Netlogon - C:\Windows\SysNative\netlogon.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] PCI Configuration - Driver Group
SafeBootMin:[b]64bit:[/b] PNP Filter - Driver Group
SafeBootMin:[b]64bit:[/b] Primary disk - Driver Group
SafeBootMin:[b]64bit:[/b] sacsvr - Service
SafeBootMin:[b]64bit:[/b] SCSI Class - Driver Group
SafeBootMin:[b]64bit:[/b] System Bus Extender - Driver Group
SafeBootMin:[b]64bit:[/b] TBS - Service
SafeBootMin:[b]64bit:[/b] vmms - Service
SafeBootMin:[b]64bit:[/b] WinDefend - C:\Program Files\Windows Defender\MsMpEng.exe (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin:[b]64bit:[/b] {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin:[b]64bit:[/b] {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin:[b]64bit:[/b] {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin:[b]64bit:[/b] {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin:[b]64bit:[/b] {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin:[b]64bit:[/b] {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin:[b]64bit:[/b] {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin:[b]64bit:[/b] {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin:[b]64bit:[/b] {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin:[b]64bit:[/b] {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin:[b]64bit:[/b] {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin:[b]64bit:[/b] {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin:[b]64bit:[/b] {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin:[b]64bit:[/b] {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin:[b]64bit:[/b] {9DA2B80F-F89F-4A49-A5C2-511B085B9E8A} - Enhanced Storage Devices
SafeBootMin:[b]64bit:[/b] {A0A588A4-C46F-4B37-B7EA-C82FE89870C6} - SDA Standard Compliant SD Host Controller
SafeBootMin:[b]64bit:[/b] {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin:[b]64bit:[/b] {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootMin: AppMgmt - Service
SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: HelpSvc - Service
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Primary disk - Driver Group
SafeBootMin: sacsvr - Service
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: TBS - Service
SafeBootMin: vmms - Service
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin: {9DA2B80F-F89F-4A49-A5C2-511B085B9E8A} - Enhanced Storage Devices
SafeBootMin: {A0A588A4-C46F-4B37-B7EA-C82FE89870C6} - SDA Standard Compliant SD Host Controller
SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

SafeBootNet:[b]64bit:[/b] AppMgmt - Service
SafeBootNet:[b]64bit:[/b] Base - Driver Group
SafeBootNet:[b]64bit:[/b] BasicDisplay.sys - C:\Windows\SysNative\Drivers\BasicDisplay.sys (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] BasicRender.sys - C:\Windows\SysNative\Drivers\BasicRender.sys (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] Boot Bus Extender - Driver Group
SafeBootNet:[b]64bit:[/b] Boot file system - Driver Group
SafeBootNet:[b]64bit:[/b] BrokerInfrastructure - C:\Windows\SysNative\bisrv.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] EFS - C:\Windows\SysNative\efssvc.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] File system - Driver Group
SafeBootNet:[b]64bit:[/b] Filter - Driver Group
SafeBootNet:[b]64bit:[/b] HelpSvc - Service
SafeBootNet:[b]64bit:[/b] KeyIso - C:\Windows\SysNative\keyiso.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] LSM - C:\Windows\SysNative\lsm.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] Messenger - Service
SafeBootNet:[b]64bit:[/b] NDIS Wrapper - Driver Group
SafeBootNet:[b]64bit:[/b] NetBIOSGroup - Driver Group
SafeBootNet:[b]64bit:[/b] NetDDEGroup - Driver Group
SafeBootNet:[b]64bit:[/b] Netlogon - C:\Windows\SysNative\netlogon.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] netprofm - C:\Windows\SysNative\netprofmsvc.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] Network - Driver Group
SafeBootNet:[b]64bit:[/b] NetworkProvider - Driver Group
SafeBootNet:[b]64bit:[/b] PCI Configuration - Driver Group
SafeBootNet:[b]64bit:[/b] PNP Filter - Driver Group
SafeBootNet:[b]64bit:[/b] PNP_TDI - Driver Group
SafeBootNet:[b]64bit:[/b] Primary disk - Driver Group
SafeBootNet:[b]64bit:[/b] rdpencdd.sys - Driver
SafeBootNet:[b]64bit:[/b] rdsessmgr - Service
SafeBootNet:[b]64bit:[/b] sacsvr - Service
SafeBootNet:[b]64bit:[/b] SCSI Class - Driver Group
SafeBootNet:[b]64bit:[/b] SmartcardSimulator - Driver
SafeBootNet:[b]64bit:[/b] Streams Drivers - Driver Group
SafeBootNet:[b]64bit:[/b] System Bus Extender - Driver Group
SafeBootNet:[b]64bit:[/b] TBS - Service
SafeBootNet:[b]64bit:[/b] TDI - Driver Group
SafeBootNet:[b]64bit:[/b] VaultSvc - C:\Windows\SysNative\vaultsvc.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] VirtualSmartcardReader - Driver
SafeBootNet:[b]64bit:[/b] vmms - Service
SafeBootNet:[b]64bit:[/b] Wcmsvc - C:\Windows\SysNative\wcmsvc.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] WinDefend - C:\Program Files\Windows Defender\MsMpEng.exe (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] WudfUsbccidDriver - Driver
SafeBootNet:[b]64bit:[/b] {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet:[b]64bit:[/b] {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet:[b]64bit:[/b] {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet:[b]64bit:[/b] {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet:[b]64bit:[/b] {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet:[b]64bit:[/b] {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet:[b]64bit:[/b] {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet:[b]64bit:[/b] {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet:[b]64bit:[/b] {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet:[b]64bit:[/b] {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet:[b]64bit:[/b] {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet:[b]64bit:[/b] {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet:[b]64bit:[/b] {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet:[b]64bit:[/b] {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet:[b]64bit:[/b] {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet:[b]64bit:[/b] {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet:[b]64bit:[/b] {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet:[b]64bit:[/b] {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet:[b]64bit:[/b] {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet:[b]64bit:[/b] {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet:[b]64bit:[/b] {9DA2B80F-F89F-4A49-A5C2-511B085B9E8A} - Enhanced Storage Devices
SafeBootNet:[b]64bit:[/b] {A0A588A4-C46F-4B37-B7EA-C82FE89870C6} - SDA Standard Compliant SD Host Controller
SafeBootNet:[b]64bit:[/b] {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet:[b]64bit:[/b] {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootNet: AppMgmt - Service
SafeBootNet: Base - Driver Group
SafeBootNet: Boot Bus Extender - Driver Group
SafeBootNet: Boot file system - Driver Group
SafeBootNet: File system - Driver Group
SafeBootNet: Filter - Driver Group
SafeBootNet: HelpSvc - Service
SafeBootNet: Messenger - Service
SafeBootNet: NDIS Wrapper - Driver Group
SafeBootNet: NetBIOSGroup - Driver Group
SafeBootNet: NetDDEGroup - Driver Group
SafeBootNet: Network - Driver Group
SafeBootNet: NetworkProvider - Driver Group
SafeBootNet: PCI Configuration - Driver Group
SafeBootNet: PNP Filter - Driver Group
SafeBootNet: PNP_TDI - Driver Group
SafeBootNet: Primary disk - Driver Group
SafeBootNet: rdpencdd.sys - Driver
SafeBootNet: rdsessmgr - Service
SafeBootNet: sacsvr - Service
SafeBootNet: SCSI Class - Driver Group
SafeBootNet: SmartcardSimulator - Driver
SafeBootNet: Streams Drivers - Driver Group
SafeBootNet: System Bus Extender - Driver Group
SafeBootNet: TBS - Service
SafeBootNet: TDI - Driver Group
SafeBootNet: VirtualSmartcardReader - Driver
SafeBootNet: vmms - Service
SafeBootNet: WudfUsbccidDriver - Driver
SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet: {9DA2B80F-F89F-4A49-A5C2-511B085B9E8A} - Enhanced Storage Devices
SafeBootNet: {A0A588A4-C46F-4B37-B7EA-C82FE89870C6} - SDA Standard Compliant SD Host Controller
SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

ActiveX:[b]64bit:[/b] {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX:[b]64bit:[/b] {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX:[b]64bit:[/b] {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX:[b]64bit:[/b] {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX:[b]64bit:[/b] {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX:[b]64bit:[/b] {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX:[b]64bit:[/b] {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX:[b]64bit:[/b] {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX:[b]64bit:[/b] {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX:[b]64bit:[/b] {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX:[b]64bit:[/b] {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX:[b]64bit:[/b] {74166507-F39E-305E-A972-2C3478E47350} - .NET Framework
ActiveX:[b]64bit:[/b] {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX:[b]64bit:[/b] {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U %SystemRoot%\System32\shell32.dll
ActiveX:[b]64bit:[/b] {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -UserConfig
ActiveX:[b]64bit:[/b] {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\System32\Rundll32.exe C:\Windows\System32\mscories.dll,Install
ActiveX:[b]64bit:[/b] {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX:[b]64bit:[/b] {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX:[b]64bit:[/b] {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX:[b]64bit:[/b] {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX:[b]64bit:[/b] {FEBEF00C-046D-438D-8A88-BF94A6C9E703} - .NET Framework
ActiveX:[b]64bit:[/b] >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX: {3A8403F3-90B5-35DC-8926-EB9B907209F9} - .NET Framework
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} -
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\SysWOW64\Rundll32.exe C:\Windows\SysWOW64\mscories.dll,Install
ActiveX: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "C:\Program Files (x86)\Google\Chrome\Application\26.0.1410.64\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {C6BAF60B-6E91-453F-BFF9-D3789CFEFCDD} - .NET Framework
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP

Drivers32:[b]64bit:[/b] msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin

[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]

[2013/04/18 16:12:57 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\farouketnathalie\Desktop\OTL.exe
[2013/04/18 14:09:50 | 000,000,000 | ---D | C] -- C:\Users\farouketnathalie\Desktop\ANTIVIRUS
[2013/04/18 14:06:13 | 000,000,000 | ---D | C] -- C:\Users\farouketnathalie\AppData\Roaming\Systweak
[2013/04/18 14:05:40 | 000,018,832 | ---- | C] (Systweak Inc., (www.systweak.com)) -- C:\Windows\SysNative\roboot64.exe
[2013/04/18 14:04:37 | 000,000,000 | ---D | C] -- C:\Users\farouketnathalie\AppData\Roaming\Malwarebytes
[2013/04/18 14:04:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2013/04/18 14:04:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2013/04/18 14:04:29 | 000,025,928 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2013/04/18 14:04:29 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2013/04/18 14:03:50 | 000,000,000 | -HSD | C] -- C:\Config.Msi
[2013/04/18 14:02:21 | 000,000,000 | ---D | C] -- C:\Users\farouketnathalie\AppData\Local\Programs
[2013/04/18 00:17:08 | 000,000,000 | ---D | C] -- C:\Program Files\Enigma Software Group
[2013/04/18 00:16:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Wise Installation Wizard
[2013/04/17 19:46:42 | 001,161,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sppobjs.dll
[2013/04/17 19:46:37 | 001,627,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WindowsCodecs.dll
[2013/04/17 19:46:35 | 010,116,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\twinui.dll
[2013/04/17 19:46:34 | 008,857,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\twinui.dll
[2013/04/17 19:46:27 | 001,048,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfasfsrcsnk.dll
[2013/04/17 19:46:26 | 005,978,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mstscax.dll
[2013/04/17 19:46:26 | 000,850,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfasfsrcsnk.dll
[2013/04/17 19:46:26 | 000,328,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ubpm.dll
[2013/04/17 19:46:25 | 001,101,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmpmde.dll
[2013/04/17 19:46:25 | 000,389,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\BCP47Langs.dll
[2013/04/17 19:46:25 | 000,327,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\Classpnp.sys
[2013/04/17 19:46:23 | 001,149,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winmde.dll
[2013/04/17 19:46:23 | 000,951,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.Globalization.dll
[2013/04/17 19:46:23 | 000,246,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ubpm.dll
[2013/04/17 19:46:22 | 000,760,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuapi.dll
[2013/04/17 19:46:22 | 000,309,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\BCP47Langs.dll
[2013/04/17 19:46:21 | 000,645,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.Security.Authentication.OnlineId.dll
[2013/04/17 19:46:20 | 005,091,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mstscax.dll
[2013/04/17 19:46:20 | 002,302,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\authui.dll
[2013/04/17 19:46:20 | 000,357,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netcfgx.dll
[2013/04/17 19:46:20 | 000,180,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SystemEventsBrokerServer.dll
[2013/04/17 19:46:19 | 000,411,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\FWPKCLNT.SYS
[2013/04/17 19:46:19 | 000,332,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\storport.sys
[2013/04/17 19:46:19 | 000,171,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\TimeBrokerServer.dll
[2013/04/17 19:46:17 | 000,893,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\winmde.dll
[2013/04/17 19:46:17 | 000,601,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.Globalization.dll
[2013/04/17 19:46:17 | 000,455,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netcfgx.dll
[2013/04/17 19:46:17 | 000,448,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SettingSync.dll
[2013/04/17 19:46:16 | 000,245,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\usbmon.dll
[2013/04/17 19:46:15 | 000,550,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\drvstore.dll
[2013/04/17 19:46:15 | 000,504,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.Security.Authentication.OnlineId.dll
[2013/04/17 19:46:14 | 002,146,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\actxprxy.dll
[2013/04/17 19:46:14 | 002,033,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\authui.dll
[2013/04/17 19:46:14 | 000,621,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wuapi.dll
[2013/04/17 19:46:11 | 000,703,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drvstore.dll
[2013/04/17 19:46:06 | 000,356,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SettingSync.dll
[2013/04/17 19:46:06 | 000,150,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\discan.dll
[2013/04/17 19:46:06 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wups.dll
[2013/04/17 19:46:05 | 001,619,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wucltux.dll
[2013/04/17 19:46:05 | 000,283,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\spaceport.sys
[2013/04/17 19:46:05 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskhost.exe
[2013/04/17 19:46:04 | 000,337,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\USBXHCI.SYS
[2013/04/17 19:46:04 | 000,194,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\sdbus.sys
[2013/04/17 19:46:04 | 000,156,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\powercfg.cpl
[2013/04/17 19:46:04 | 000,148,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\tpm.sys
[2013/04/17 19:46:04 | 000,125,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\dumpsd.sys
[2013/04/17 19:46:04 | 000,117,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\NdisImPlatform.dll
[2013/04/17 19:46:04 | 000,077,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\storahci.sys
[2013/04/17 19:46:04 | 000,069,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\pdc.sys
[2013/04/17 19:46:04 | 000,058,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuauclt.exe
[2013/04/17 19:46:03 | 000,251,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WUSettingsProvider.dll
[2013/04/17 19:46:03 | 000,145,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\powercfg.cpl
[2013/04/17 19:46:03 | 000,072,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskhostex.exe
[2013/04/17 19:46:02 | 000,100,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SettingSyncInfo.dll
[2013/04/17 19:46:02 | 000,071,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WSDPrintProxy.DLL
[2013/04/17 19:46:02 | 000,049,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DevDispItemProvider.dll
[2013/04/17 19:46:01 | 000,173,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\storewuauth.dll
[2013/04/17 19:46:01 | 000,141,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuwebv.dll
[2013/04/17 19:46:01 | 000,128,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SettingSyncInfo.dll
[2013/04/17 19:46:01 | 000,125,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wuwebv.dll
[2013/04/17 19:46:01 | 000,083,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wudriver.dll
[2013/04/17 19:46:00 | 000,098,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wudriver.dll
[2013/04/17 19:46:00 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wuapp.exe
[2013/04/17 19:45:59 | 000,039,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuapp.exe
[2013/04/17 19:45:59 | 000,036,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\DevDispItemProvider.dll
[2013/04/17 19:23:50 | 000,000,000 | ---D | C] -- C:\Users\farouketnathalie\AppData\Roaming\Apple Computer
[2013/04/17 19:23:50 | 000,000,000 | ---D | C] -- C:\Users\farouketnathalie\AppData\Local\Apple Computer
[2013/04/17 19:23:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
[2013/04/17 19:23:41 | 000,033,240 | ---- | C] (GEAR Software Inc.) -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys
[2013/04/17 19:23:01 | 000,000,000 | ---D | C] -- C:\Program Files\iPod
[2013/04/17 19:22:58 | 000,000,000 | ---D | C] -- C:\Program Files\iTunes
[2013/04/17 19:22:58 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\iTunes
[2013/04/17 19:22:58 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple Computer
[2013/04/17 19:22:58 | 000,000,000 | ---D | C] -- C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
[2013/04/17 19:22:15 | 000,000,000 | ---D | C] -- C:\Users\farouketnathalie\AppData\Local\Apple
[2013/04/17 19:22:14 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Apple Software Update
[2013/04/17 19:21:43 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Apple
[2013/04/17 19:21:31 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Apple
[2013/04/17 19:20:00 | 088,840,600 | ---- | C] (Apple Inc.) -- C:\Users\farouketnathalie\Desktop\iTunes64Setup.exe
[2013/04/17 19:19:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\HappyLyrics
[2013/04/17 19:05:48 | 000,000,000 | ---D | C] -- C:\Users\farouketnathalie\AppData\Local\Updater12767
[2013/04/17 19:05:40 | 000,000,000 | ---D | C] -- C:\Users\farouketnathalie\AppData\Local\Tiger Savings
[2013/04/17 19:05:37 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Tiger Savings
[2013/04/17 19:05:27 | 000,000,000 | ---D | C] -- C:\Users\farouketnathalie\AppData\Local\Software
[2013/04/17 19:05:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Software
[2013/04/17 18:54:32 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\searchplugins
[2013/04/17 18:54:32 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Extensions
[2013/04/17 18:53:57 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
[2013/04/11 10:04:13 | 003,958,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
[2013/04/11 10:04:09 | 000,915,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\uxtheme.dll
[2013/04/11 10:04:08 | 000,855,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
[2013/04/11 10:04:08 | 000,690,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
[2013/04/11 10:04:07 | 000,603,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
[2013/04/11 10:04:07 | 000,136,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesysprep.dll
[2013/04/11 10:04:07 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesysprep.dll
[2013/04/11 10:04:07 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll
[2013/04/11 10:04:07 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe
[2013/04/11 10:04:07 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iernonce.dll
[2013/04/11 10:03:43 | 006,991,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe
[2013/04/11 10:03:40 | 001,011,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\reseteng.dll
[2013/04/11 10:03:40 | 000,375,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ReAgent.dll
[2013/04/05 22:10:00 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Skype
[2013/03/21 17:07:54 | 000,000,000 | ---D | C] -- C:\Program Files\WinPcap
[2013/03/21 17:07:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Promo-détective
[2013/03/21 17:07:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Promo-détective
[2013/03/20 23:33:25 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\usb8023.sys
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]

[2013/04/18 17:46:30 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2013/04/18 17:44:00 | 000,001,110 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2013/04/18 17:39:39 | 000,001,996 | ---- | M] () -- C:\Users\farouketnathalie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Alertes de surveillance de l'encre - HP Photosmart 5520 series (réseau).lnk
[2013/04/18 17:39:17 | 000,000,432 | ---- | M] () -- C:\Windows\tasks\Happy Lyrics Update.job
[2013/04/18 17:39:12 | 000,001,106 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2013/04/18 17:38:33 | 268,435,456 | -HS- | M] () -- C:\swapfile.sys
[2013/04/18 17:38:30 | 3343,925,248 | -HS- | M] () -- C:\hiberfil.sys
[2013/04/18 17:12:00 | 000,001,002 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2013/04/18 16:12:57 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\farouketnathalie\Desktop\OTL.exe
[2013/04/18 15:56:49 | 001,994,298 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2013/04/18 15:56:49 | 000,874,848 | ---- | M] () -- C:\Windows\SysNative\perfh00C.dat
[2013/04/18 15:56:49 | 000,774,720 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2013/04/18 15:56:49 | 000,188,148 | ---- | M] () -- C:\Windows\SysNative\perfc00C.dat
[2013/04/18 15:56:49 | 000,158,234 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2013/04/18 15:35:36 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013/04/18 15:35:36 | 000,001,700 | ---- | M] () -- C:\Windows\SysNative\ASOROSet.bin
[2013/04/18 14:04:30 | 000,001,109 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2013/04/18 00:17:26 | 000,000,000 | ---- | M] () -- C:\autoexec.bat
[2013/04/17 19:23:49 | 000,001,783 | ---- | M] () -- C:\Users\Public\Desktop\iTunes.lnk
[2013/04/17 19:21:04 | 088,840,600 | ---- | M] (Apple Inc.) -- C:\Users\farouketnathalie\Desktop\iTunes64Setup.exe
[2013/04/17 19:12:08 | 000,000,954 | ---- | M] () -- C:\Windows\SysWow64\InstallUtil.InstallLog
[2013/04/17 19:05:57 | 000,002,439 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
[2013/04/17 19:05:50 | 000,002,535 | ---- | M] () -- C:\Users\farouketnathalie\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2013/04/17 19:05:50 | 000,001,708 | ---- | M] () -- C:\Users\farouketnathalie\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2013/04/15 16:17:48 | 000,315,928 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2013/04/04 14:50:32 | 000,025,928 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2013/04/03 00:08:01 | 000,692,576 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe
[2013/04/03 00:08:01 | 000,078,176 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2013/03/27 15:24:12 | 000,000,398 | ---- | M] () -- C:\Windows\tasks\HPCeeScheduleForfarouketnathalie.job
[2013/03/21 17:07:37 | 000,001,737 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Promo-détective.lnk
[2013/03/21 17:07:37 | 000,001,685 | ---- | M] () -- C:\Users\Public\Desktop\Promo-détective.lnk
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

[color=#E56717]========== Files Created - No Company Name ==========[/color]

[2013/04/18 17:46:30 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
[2013/04/18 15:40:02 | 000,000,311 | ---- | C] () -- C:\Users\farouketnathalie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Groupe résidentiel.lnk
[2013/04/18 14:13:46 | 000,001,700 | ---- | C] () -- C:\Windows\SysNative\ASOROSet.bin
[2013/04/18 14:04:30 | 000,001,109 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2013/04/18 00:17:26 | 000,000,000 | ---- | C] () -- C:\autoexec.bat
[2013/04/17 19:45:59 | 000,387,867 | ---- | C] () -- C:\Windows\SysNative\ApnDatabase.xml
[2013/04/17 19:23:49 | 000,001,783 | ---- | C] () -- C:\Users\Public\Desktop\iTunes.lnk
[2013/04/17 19:22:14 | 000,002,519 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
[2013/04/17 19:19:59 | 000,000,432 | ---- | C] () -- C:\Windows\tasks\Happy Lyrics Update.job
[2013/04/17 19:00:05 | 000,000,954 | ---- | C] () -- C:\Windows\SysWow64\InstallUtil.InstallLog
[2013/04/15 16:17:39 | 000,315,928 | ---- | C] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2013/03/21 17:07:37 | 000,001,737 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Promo-détective.lnk
[2013/03/21 17:07:37 | 000,001,685 | ---- | C] () -- C:\Users\Public\Desktop\Promo-détective.lnk
[2013/02/19 14:26:12 | 000,169,984 | ---- | C] () -- C:\Windows\SysWow64\glut.dll
[2013/02/19 14:25:47 | 000,221,184 | --S- | C] () -- C:\Windows\SysWow64\glut32.dll
[2013/01/28 20:07:09 | 000,000,057 | ---- | C] () -- C:\ProgramData\Ament.ini
[2013/01/10 17:59:41 | 000,021,504 | ---- | C] () -- C:\Users\farouketnathalie\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2013/01/10 17:55:56 | 000,083,968 | ---- | C] () -- C:\Windows\SysWow64\OEMLicense.dll
[2012/09/08 05:17:52 | 000,003,917 | ---- | C] () -- C:\Windows\SysWow64\atipblup.dat
[2012/09/08 05:17:44 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2012/08/04 00:40:09 | 000,916,510 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2012/08/02 10:53:50 | 000,204,952 | ---- | C] () -- C:\Windows\SysWow64\ativvsvl.dat
[2012/08/02 10:53:50 | 000,157,144 | ---- | C] () -- C:\Windows\SysWow64\ativvsva.dat
[2012/07/26 10:13:10 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat
[2012/07/26 10:13:09 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT
[2012/07/26 09:21:26 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2012/07/26 03:17:42 | 000,043,520 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
[2012/07/25 22:37:29 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2012/07/25 22:28:31 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
[2012/07/25 22:22:56 | 000,733,840 | ---- | C] () -- C:\Windows\SysWow64\igcodeckrng700.bin
[2012/07/25 22:22:56 | 000,492,340 | ---- | C] () -- C:\Windows\SysWow64\igvpkrng700.bin
[2012/07/25 22:22:54 | 000,982,240 | ---- | C] () -- C:\Windows\SysWow64\igkrng500.bin
[2012/07/25 22:22:54 | 000,439,308 | ---- | C] () -- C:\Windows\SysWow64\igcompkrng500.bin
[2012/07/25 22:22:54 | 000,092,356 | ---- | C] () -- C:\Windows\SysWow64\igfcg500m.bin
[2012/07/25 22:09:00 | 000,272,928 | ---- | C] () -- C:\Windows\SysWow64\igvpkrng600.bin
[2012/07/25 22:08:14 | 000,064,512 | ---- | C] () -- C:\Windows\SysWow64\igdde32.dll
[2012/07/25 22:08:08 | 000,963,388 | ---- | C] () -- C:\Windows\SysWow64\igcodeckrng600.bin
[2012/06/02 16:31:19 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat
[2012/04/20 13:59:44 | 000,001,536 | ---- | C] () -- C:\Windows\SysWow64\IusEventLog.dll
[2011/09/13 04:06:18 | 000,003,917 | ---- | C] () -- C:\Windows\SysWow64\atipblag.dat
[2011/06/07 12:13:38 | 000,974,848 | ---- | C] () -- C:\Windows\SysWow64\cis-2.4.dll
[2011/06/07 12:13:38 | 000,081,920 | ---- | C] () -- C:\Windows\SysWow64\issacapi_bs-2.3.dll
[2011/06/07 12:13:38 | 000,065,536 | ---- | C] () -- C:\Windows\SysWow64\issacapi_pe-2.3.dll
[2011/06/07 12:13:38 | 000,057,344 | ---- | C] () -- C:\Windows\SysWow64\issacapi_se-2.3.dll
[2011/06/07 12:13:38 | 000,030,568 | ---- | C] () -- C:\Windows\MusiccityDownload.exe

[color=#E56717]========== ZeroAccess Check ==========[/color]

[2012/08/17 10:43:51 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2013/03/02 04:45:01 | 019,748,864 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2013/03/02 10:23:07 | 017,560,576 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2012/07/26 05:05:38 | 001,004,544 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2012/07/26 05:18:27 | 000,784,896 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2012/07/26 05:07:41 | 000,455,680 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

[color=#E56717]========== LOP Check ==========[/color]

[2013/01/30 21:38:09 | 000,000,000 | ---D | M] -- C:\Users\farouketnathalie\AppData\Roaming\Samsung
[2012/12/25 14:20:55 | 000,000,000 | ---D | M] -- C:\Users\farouketnathalie\AppData\Roaming\Synaptics
[2013/04/18 15:42:42 | 000,000,000 | ---D | M] -- C:\Users\farouketnathalie\AppData\Roaming\Systweak
[2013/02/25 22:29:39 | 000,000,000 | ---D | M] -- C:\Users\farouketnathalie\AppData\Roaming\WebApp
[2012/12/25 14:28:32 | 000,000,000 | ---D | M] -- C:\Users\farouketnathalie\AppData\Roaming\WildTangent
[2013/01/29 22:28:19 | 000,000,000 | ---D | M] -- C:\Users\farouketnathalie\AppData\Roaming\Windows Live Writer

[color=#E56717]========== Purity Check ==========[/color]



[color=#E56717]========== Custom Scans ==========[/color]

[color=#A23BEC]< %SYSTEMDRIVE%\*.* >[/color]
[2013/04/17 23:17:48 | 000,025,518 | ---- | M] () -- C:\AdwCleaner[R1].txt
[2013/04/17 23:18:21 | 000,000,562 | ---- | M] () -- C:\AdwCleaner[S1].txt
[2013/04/17 23:19:23 | 000,025,248 | ---- | M] () -- C:\AdwCleaner[S2].txt
[2013/04/18 15:50:33 | 000,002,135 | ---- | M] () -- C:\AdwCleaner[S3].txt
[2013/04/18 17:36:58 | 000,000,425 | ---- | M] () -- C:\AdwCleaner[S4].txt
[2013/04/18 17:37:47 | 000,001,270 | ---- | M] () -- C:\AdwCleaner[S5].txt
[2013/01/30 21:26:05 | 000,002,006 | ---- | M] () -- C:\aqua_bitmap.cpp
[2013/04/18 00:17:26 | 000,000,000 | ---- | M] () -- C:\autoexec.bat
[2012/07/26 05:44:30 | 000,398,156 | RHS- | M] () -- C:\bootmgr
[2012/06/02 16:30:55 | 000,000,001 | -HS- | M] () -- C:\BOOTNXT
[2012/08/04 01:21:37 | 000,008,192 | RHS- | M] () -- C:\BOOTSECT.BAK
[2013/04/18 17:38:30 | 3343,925,248 | -HS- | M] () -- C:\hiberfil.sys
[2013/04/18 17:38:33 | 738,197,504 | -HS- | M] () -- C:\pagefile.sys
[2013/04/18 17:46:30 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2013/04/18 17:38:33 | 268,435,456 | -HS- | M] () -- C:\swapfile.sys

[color=#A23BEC]< %SYSTEMDRIVE%\*.exe >[/color]

[color=#A23BEC]< %PROGRAMFILES%\*.* >[/color]
[2012/07/26 10:11:35 | 000,000,174 | -HS- | M] () -- C:\Program Files (x86)\desktop.ini

[color=#A23BEC]< %PROGRAMFILES%\*. >[/color]
[2012/09/08 05:18:12 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\AMD APP
[2013/04/17 19:22:14 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Apple Software Update
[2012/09/08 05:18:04 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\ATI Technologies
[2012/09/08 05:23:39 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Bonjour
[2013/04/18 00:16:41 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Common Files
[2012/08/17 10:53:46 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Connected Music powered by Universal Music Group
[2013/02/19 14:26:12 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Cuisine Delinia
[2012/09/08 05:43:36 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\CyberLink
[2013/01/25 23:19:38 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Google
[2013/04/17 19:19:59 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\HappyLyrics
[2013/02/02 00:41:04 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Hewlett-Packard
[2013/01/28 20:07:37 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\HP
[2012/08/17 11:03:15 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\HP Games
[2013/01/28 20:07:46 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\HP Photo Creations
[2012/08/17 10:53:39 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\HPConnectedMusic
[2013/01/30 21:38:37 | 000,000,000 | -H-D | M] -- C:\Program Files (x86)\InstallShield Installation Information
[2012/09/08 05:20:32 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Intel
[2013/04/11 10:32:15 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Internet Explorer
[2013/04/17 19:23:29 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\iTunes
[2013/04/18 14:04:31 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2013/01/10 17:40:34 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\MarkAny
[2012/08/17 10:45:10 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Office
[2012/08/17 10:49:48 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft SQL Server Compact Edition
[2012/07/26 10:12:59 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft.NET
[2013/04/17 18:53:57 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Mozilla Firefox
[2012/08/04 00:37:58 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\MSBuild
[2013/01/10 18:14:41 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\MyFree Codec
[2012/12/25 14:22:46 | 000,000,000 | R--D | M] -- C:\Program Files (x86)\Online Services
[2013/01/30 21:37:57 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\PC Connectivity Solution
[2012/09/08 05:22:36 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Realtek
[2012/08/04 00:37:58 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Reference Assemblies
[2013/01/30 23:02:30 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Samsung
[2013/04/05 22:10:00 | 000,000,000 | R--D | M] -- C:\Program Files (x86)\Skype
[2013/04/17 19:05:27 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Software
[2012/09/08 05:49:58 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\SymSilent
[2013/04/17 19:05:59 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Tiger Savings
[2012/08/17 11:03:07 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\WildGames
[2013/01/21 12:06:15 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\WildTangent Games
[2013/03/19 17:37:18 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Defender
[2012/08/17 10:50:09 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Live
[2012/12/28 18:08:46 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Mail
[2013/01/11 22:10:09 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Media Player
[2012/07/26 10:13:01 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Multimedia Platform
[2012/07/26 10:12:59 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows NT
[2012/12/28 18:08:44 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Photo Viewer
[2012/07/26 10:13:01 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Portable Devices
[2012/07/26 10:12:59 | 000,000,000 | -HSD | M] -- C:\Program Files (x86)\Windows Sidebar

[color=#A23BEC]< MD5 for: AGP440.SYS >[/color]
[2012/07/26 07:00:49 | 000,063,216 | ---- | M] (Microsoft Corporation) MD5=01590377A5AB19E792528C628A2A68F9 -- C:\Windows\SysNative\drivers\AGP440.sys
[2012/07/26 07:00:49 | 000,063,216 | ---- | M] (Microsoft Corporation) MD5=01590377A5AB19E792528C628A2A68F9 -- C:\Windows\SysNative\DriverStore\FileRepository\machine.inf_amd64_81a4c6c9cc9d86a0\AGP440.sys
[2012/07/26 07:00:49 | 000,063,216 | ---- | M] (Microsoft Corporation) MD5=01590377A5AB19E792528C628A2A68F9 -- C:\Windows\WinSxS\amd64_machine.inf_31bf3856ad364e35_6.2.9200.16384_none_12dc94a048750f71\AGP440.sys

[color=#A23BEC]< MD5 for: APPMGMTS.DLL >[/color]
[2012/07/26 05:05:04 | 000,187,392 | ---- | M] (Microsoft Corporation) MD5=2D14788C5D0836292BEB27BBE109BE56 -- C:\Windows\WinSxS\amd64_microsoft-windows-g..oftwareinstallation_31bf3856ad364e35_6.2.9200.16384_none_da988fc8e5cdd730\appmgmts.dll
[2012/07/26 05:17:52 | 000,152,064 | ---- | M] (Microsoft Corporation) MD5=8F0F777B167CADDF9D206180B8558433 -- C:\Windows\WinSxS\wow64_microsoft-windows-g..oftwareinstallation_31bf3856ad364e35_6.2.9200.16384_none_e4ed3a1b1a2e992b\appmgmts.dll

[color=#A23BEC]< MD5 for: ATAPI.SYS >[/color]
[2012/07/26 07:00:48 | 000,025,840 | ---- | M] (Microsoft Corporation) MD5=A721FF570C2387E383BDDEA9632863C9 -- C:\Windows\SysNative\drivers\atapi.sys
[2012/07/26 07:00:48 | 000,025,840 | ---- | M] (Microsoft Corporation) MD5=A721FF570C2387E383BDDEA9632863C9 -- C:\Windows\SysNative\DriverStore\FileRepository\mshdc.inf_amd64_69660e2be041f47b\atapi.sys
[2012/07/26 07:00:48 | 000,025,840 | ---- | M] (Microsoft Corporation) MD5=A721FF570C2387E383BDDEA9632863C9 -- C:\Windows\SysNative\DriverStore\FileRepository\mshdc.inf_amd64_b733d17ea1e7f604\atapi.sys
[2012/07/26 07:00:48 | 000,025,840 | ---- | M] (Microsoft Corporation) MD5=A721FF570C2387E383BDDEA9632863C9 -- C:\Windows\WinSxS\amd64_mshdc.inf_31bf3856ad364e35_6.2.9200.16384_none_3601cf7eab4e0493\atapi.sys
[2012/07/26 07:00:48 | 000,025,840 | ---- | M] (Microsoft Corporation) MD5=A721FF570C2387E383BDDEA9632863C9 -- C:\Windows\WinSxS\amd64_mshdc.inf_31bf3856ad364e35_6.2.9200.16548_none_36311422ab29f479\atapi.sys
[2012/07/26 07:00:48 | 000,025,840 | ---- | M] (Microsoft Corporation) MD5=A721FF570C2387E383BDDEA9632863C9 -- C:\Windows\WinSxS\amd64_mshdc.inf_31bf3856ad364e35_6.2.9200.20652_none_36a9df45c455182a\atapi.sys

[color=#A23BEC]< MD5 for: AUTOCHK.EXE >[/color]
[2012/07/26 05:08:17 | 000,887,296 | ---- | M] (Microsoft Corporation) MD5=490B7921C6DC58022FAA908E6310CF24 -- C:\Windows\SysNative\autochk.exe
[2012/07/26 05:08:17 | 000,887,296 | ---- | M] (Microsoft Corporation) MD5=490B7921C6DC58022FAA908E6310CF24 -- C:\Windows\WinSxS\amd64_microsoft-windows-autochk_31bf3856ad364e35_6.2.9200.16384_none_3abd94ae4b8558e6\autochk.exe
[2012/07/26 05:20:43 | 000,792,064 | ---- | M] (Microsoft Corporation) MD5=55653D86D712641DB6930FAB64F452FF -- C:\Windows\SysWOW64\autochk.exe
[2012/07/26 05:20:43 | 000,792,064 | ---- | M] (Microsoft Corporation) MD5=55653D86D712641DB6930FAB64F452FF -- C:\Windows\WinSxS\x86_microsoft-windows-autochk_31bf3856ad364e35_6.2.9200.16384_none_de9ef92a9327e7b0\autochk.exe

[color=#A23BEC]< MD5 for: BEEP.SYS >[/color]
[2012/07/26 04:30:19 | 000,007,680 | ---- | M] (Microsoft Corporation) MD5=9E7AEA59776D904607985AFFE7E5E183 -- C:\Windows\SysNative\drivers\beep.sys
[2012/07/26 04:30:19 | 000,007,680 | ---- | M] (Microsoft Corporation) MD5=9E7AEA59776D904607985AFFE7E5E183 -- C:\Windows\WinSxS\amd64_microsoft-windows-beepsys_31bf3856ad364e35_6.2.9200.16384_none_1cea48b791617e52\beep.sys

[color=#A23BEC]< MD5 for: EVENTLOG.DLL >[/color]
[2012/01/31 12:22:06 | 000,006,952 | ---- | M] () MD5=D9A27F35D231BAC3AD58E922C7644E8B -- C:\Program Files (x86)\CyberLink\PowerDirector10\EventLog.dll

[color=#A23BEC]< MD5 for: EXPLORER.EXE >[/color]
[2012/10/11 07:53:24 | 002,115,952 | ---- | M] (Microsoft Corporation) MD5=0AD19A3CA61271BA872AD90771BA47DC -- C:\Windows\WinSxS\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.2.9200.20534_none_b592a71650d677ed\explorer.exe
[2012/10/11 10:09:58 | 002,380,944 | ---- | M] (Microsoft Corporation) MD5=0DDFEAA2AA18D4295EF220EB666B2312 -- C:\Windows\WinSxS\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.2.9200.20534_none_ab3dfcc41c75b5f2\explorer.exe
[2012/07/26 05:50:01 | 002,114,936 | ---- | M] (Microsoft Corporation) MD5=5B6ED1B57DBFF18D405A0260559B571E -- C:\Windows\WinSxS\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.2.9200.16384_none_b4d2f8c937e166b1\explorer.exe
[2012/07/26 06:49:13 | 002,380,440 | ---- | M] (Microsoft Corporation) MD5=928791755FDDEA721B053535EF84FA17 -- C:\Windows\WinSxS\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.2.9200.16384_none_aa7e4e770380a4b6\explorer.exe
[2012/10/11 07:56:41 | 002,115,952 | ---- | M] (Microsoft Corporation) MD5=953ADECFF08202A01EFC6110214FDE02 -- C:\Windows\SysWOW64\explorer.exe
[2012/10/11 07:56:41 | 002,115,952 | ---- | M] (Microsoft Corporation) MD5=953ADECFF08202A01EFC6110214FDE02 -- C:\Windows\WinSxS\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.2.9200.16433_none_b5080a0137b9becc\explorer.exe
[2012/10/11 09:35:16 | 002,380,944 | ---- | M] (Microsoft Corporation) MD5=E13A31D5254C25406A7946BDD9B06364 -- C:\Windows\explorer.exe
[2012/10/11 09:35:16 | 002,380,944 | ---- | M] (Microsoft Corporation) MD5=E13A31D5254C25406A7946BDD9B06364 -- C:\Windows\WinSxS\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.2.9200.16433_none_aab35faf0358fcd1\explorer.exe

[color=#A23BEC]< MD5 for: HIDSERV.DLL >[/color]
[2012/07/26 05:18:34 | 000,049,152 | ---- | M] (Microsoft Corporation) MD5=C0A9999E5B4C1953C6B07CD9105B41FD -- C:\Windows\SysWOW64\hidserv.dll
[2012/07/26 05:18:34 | 000,049,152 | ---- | M] (Microsoft Corporation) MD5=C0A9999E5B4C1953C6B07CD9105B41FD -- C:\Windows\WinSxS\wow64_microsoft-windows-hid-user_31bf3856ad364e35_6.2.9200.16384_none_39ca9a244593a029\hidserv.dll
[2012/07/26 05:05:46 | 000,036,352 | ---- | M] (Microsoft Corporation) MD5=FAC37D7B3D6354A5A5E19A45B50B4008 -- C:\Windows\SysNative\hidserv.dll
[2012/07/26 05:05:46 | 000,036,352 | ---- | M] (Microsoft Corporation) MD5=FAC37D7B3D6354A5A5E19A45B50B4008 -- C:\Windows\WinSxS\amd64_microsoft-windows-hid-user_31bf3856ad364e35_6.2.9200.16384_none_2f75efd21132de2e\hidserv.dll

[color=#A23BEC]< MD5 for: IASTORV.SYS >[/color]
[2012/07/26 07:00:52 | 000,411,888 | ---- | M] (Intel Corporation) MD5=5E394EBD26FD68AA9300332C46BEDD62 -- C:\Windows\SysNative\drivers\iaStorV.sys
[2012/07/26 07:00:52 | 000,411,888 | ---- | M] (Intel Corporation) MD5=5E394EBD26FD68AA9300332C46BEDD62 -- C:\Windows\SysNative\DriverStore\FileRepository\iastorv.inf_amd64_819876bbe5c3b25f\iaStorV.sys
[2012/07/26 07:00:52 | 000,411,888 | ---- | M] (Intel Corporation) MD5=5E394EBD26FD68AA9300332C46BEDD62 -- C:\Windows\WinSxS\amd64_iastorv.inf_31bf3856ad364e35_6.2.9200.16384_none_07daf9dd118c3086\iaStorV.sys

[color=#A23BEC]< MD5 for: IMM32.DLL >[/color]
[2012/07/26 04:27:28 | 000,121,344 | ---- | M] (Microsoft Corporation) MD5=51E886381803D55926A6D50643B9436C -- C:\Windows\SysWOW64\imm32.dll
[2012/07/26 04:27:28 | 000,121,344 | ---- | M] (Microsoft Corporation) MD5=51E886381803D55926A6D50643B9436C -- C:\Windows\WinSxS\wow64_microsoft-windows-imm32_31bf3856ad364e35_6.2.9200.16384_none_bf746fcd388ff4f4\imm32.dll
[2012/07/26 05:05:49 | 000,213,504 | ---- | M] (Microsoft Corporation) MD5=DA66D6D4A0B77D57F5CF449B1231010F -- C:\Windows\SysNative\imm32.dll
[2012/07/26 05:05:49 | 000,213,504 | ---- | M] (Microsoft Corporation) MD5=DA66D6D4A0B77D57F5CF449B1231010F -- C:\Windows\WinSxS\amd64_microsoft-windows-imm32_31bf3856ad364e35_6.2.9200.16384_none_b51fc57b042f32f9\imm32.dll

[color=#A23BEC]< MD5 for: KERNEL32.DLL >[/color]
[2012/07/26 04:19:21 | 000,974,848 | ---- | M] (Microsoft Corporation) MD5=1C5F50F98291B7545391BB57C406E615 -- C:\Windows\SysWOW64\kernel32.dll
[2012/07/26 04:19:21 | 000,974,848 | ---- | M] (Microsoft Corporation) MD5=1C5F50F98291B7545391BB57C406E615 -- C:\Windows\WinSxS\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.2.9200.16384_none_f6dc36f8147080a0\kernel32.dll
[2012/07/26 05:05:55 | 001,256,960 | ---- | M] (Microsoft Corporation) MD5=3C6933B638BB812F4084CF44AE698704 -- C:\Windows\SysNative\kernel32.dll
[2012/07/26 05:05:55 | 001,256,960 | ---- | M] (Microsoft Corporation) MD5=3C6933B638BB812F4084CF44AE698704 -- C:\Windows\WinSxS\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.2.9200.16384_none_ec878ca5e00fbea5\kernel32.dll

[color=#A23BEC]< MD5 for: MSWSOCK.DLL >[/color]
[2012/10/11 07:11:55 | 000,289,280 | ---- | M] (Microsoft Corporation) MD5=17988BDD212CCC2075A39EBC277A801C -- C:\Windows\WinSxS\x86_microsoft-windows-w..-infrastructure-bsp_31bf3856ad364e35_6.2.9200.20534_none_b5be113417a7948b\mswsock.dll
[2012/10/11 07:44:51 | 000,355,328 | ---- | M] (Microsoft Corporation) MD5=1AC307A2F7317007BC382046B3835202 -- C:\Windows\SysNative\mswsock.dll
[2012/10/11 07:44:51 | 000,355,328 | ---- | M] (Microsoft Corporation) MD5=1AC307A2F7317007BC382046B3835202 -- C:\Windows\WinSxS\amd64_microsoft-windows-w..-infrastructure-bsp_31bf3856ad364e35_6.2.9200.16433_none_11520fa2b6e84ca0\mswsock.dll
[2012/07/26 05:19:18 | 000,289,280 | ---- | M] (Microsoft Corporation) MD5=91A885DCA0639D555AB26132BFFC0785 -- C:\Windows\WinSxS\x86_microsoft-windows-w..-infrastructure-bsp_31bf3856ad364e35_6.2.9200.16384_none_b4fe62e6feb2834f\mswsock.dll
[2012/10/11 07:43:46 | 000,355,328 | ---- | M] (Microsoft Corporation) MD5=977D8DD9280B714A4BD7C03B77474372 -- C:\Windows\WinSxS\amd64_microsoft-windows-w..-infrastructure-bsp_31bf3856ad364e35_6.2.9200.20534_none_11dcacb7d00505c1\mswsock.dll
[2012/10/11 07:06:45 | 000,289,280 | ---- | M] (Microsoft Corporation) MD5=C317E72447B437F99CC750BD876DF30E -- C:\Windows\SysWOW64\mswsock.dll
[2012/10/11 07:06:45 | 000,289,280 | ---- | M] (Microsoft Corporation) MD5=C317E72447B437F99CC750BD876DF30E -- C:\Windows\WinSxS\x86_microsoft-windows-w..-infrastructure-bsp_31bf3856ad364e35_6.2.9200.16433_none_b533741efe8adb6a\mswsock.dll
[2012/07/26 05:06:30 | 000,355,328 | ---- | M] (Microsoft Corporation) MD5=F4948E3A3CC52364B6583B74A4239A38 -- C:\Windows\WinSxS\amd64_microsoft-windows-w..-infrastructure-bsp_31bf3856ad364e35_6.2.9200.16384_none_111cfe6ab70ff485\mswsock.dll

[color=#A23BEC]< MD5 for: NDIS.SYS >[/color]
[2013/02/02 12:28:54 | 000,993,512 | ---- | M] (Microsoft Corporation) MD5=03CFE4108D1DE16D6C59455B5C73319C -- C:\Windows\SysNative\drivers\ndis.sys
[2013/02/02 12:28:54 | 000,993,512 | ---- | M] (Microsoft Corporation) MD5=03CFE4108D1DE16D6C59455B5C73319C -- C:\Windows\WinSxS\amd64_microsoft-windows-ndis-minwin_31bf3856ad364e35_6.2.9200.16518_none_b26eda01b193ddc7\ndis.sys
[2012/10/11 09:23:33 | 001,001,192 | ---- | M] (Microsoft Corporation) MD5=0F89AE618DBA5D8AB7A2DFCC375F4159 -- C:\Windows\WinSxS\amd64_microsoft-windows-ndis-minwin_31bf3856ad364e35_6.2.9200.16433_none_b25436d1b1a899cf\ndis.sys
[2013/02/02 11:03:26 | 000,993,512 | ---- | M] (Microsoft Corporation) MD5=4EC55BDEFA21F85A8D411055ED114C2F -- C:\Windows\WinSxS\amd64_microsoft-windows-ndis-minwin_31bf3856ad364e35_6.2.9200.20623_none_b2e8a56ecabe1acf\ndis.sys
[2012/09/20 08:41:48 | 001,001,192 | ---- | M] (Microsoft Corporation) MD5=865A110A0F7BE89063BE82245A9F2706 -- C:\Windows\WinSxS\amd64_microsoft-windows-ndis-minwin_31bf3856ad364e35_6.2.9200.20521_none_b2e6a2f4cabfeafa\ndis.sys
[2012/10/11 09:05:17 | 001,001,192 | ---- | M] (Microsoft Corporation) MD5=9C2E0B7D5C656AC1FDA7ECB5AF672769 -- C:\Windows\WinSxS\amd64_microsoft-windows-ndis-minwin_31bf3856ad364e35_6.2.9200.20534_none_b2ded3e6cac552f0\ndis.sys
[2012/07/26 07:26:47 | 001,000,688 | ---- | M] (Microsoft Corporation) MD5=EAB473DFB958489D3145FE4DD5F5E77B -- C:\Windows\WinSxS\amd64_microsoft-windows-ndis-minwin_31bf3856ad364e35_6.2.9200.16384_none_b21f2599b1d041b4\ndis.sys
[2012/09/20 10:04:35 | 001,001,192 | ---- | M] (Microsoft Corporation) MD5=FE6463C1574610E26ED8DE2054DF59A4 -- C:\Windows\WinSxS\amd64_microsoft-windows-ndis-minwin_31bf3856ad364e35_6.2.9200.16420_none_b25c05dfb1a331d9\ndis.sys

[color=#A23BEC]< MD5 for: NETLOGON.DLL >[/color]
[2012/07/26 05:19:22 | 000,634,368 | ---- | M] (Microsoft Corporation) MD5=EEF9DA64D7B1DD51FB8AB9EFCC560E3E -- C:\Windows\SysWOW64\netlogon.dll
[2012/07/26 05:19:22 | 000,634,368 | ---- | M] (Microsoft Corporation) MD5=EEF9DA64D7B1DD51FB8AB9EFCC560E3E -- C:\Windows\WinSxS\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.2.9200.16384_none_60d608f9f61ee049\netlogon.dll
[2012/07/26 05:06:34 | 000,743,936 | ---- | M] (Microsoft Corporation) MD5=FDC70965F0FC9DFEBC919627DED5DDFF -- C:\Windows\SysNative\netlogon.dll
[2012/07/26 05:06:34 | 000,743,936 | ---- | M] (Microsoft Corporation) MD5=FDC70965F0FC9DFEBC919627DED5DDFF -- C:\Windows\WinSxS\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.2.9200.16384_none_56815ea7c1be1e4e\netlogon.dll

[color=#A23BEC]< MD5 for: NTFS.SYS >[/color]
[2013/01/10 03:29:54 | 001,934,056 | ---- | M] (Microsoft Corporation) MD5=11D7A4A4A1DA60F394F53B413DCDF0DE -- C:\Windows\WinSxS\amd64_microsoft-windows-ntfs_31bf3856ad364e35_6.2.9200.16497_none_ff3303f9a6b534a7\ntfs.sys
[2012/07/26 07:26:46 | 001,934,064 | ---- | M] (Microsoft Corporation) MD5=4A7EEA9C4AD5CBFDA3C0E5B821C99CAD -- C:\Windows\WinSxS\amd64_microsoft-windows-ntfs_31bf3856ad364e35_6.2.9200.16384_none_ff3ad121a6afcf8a\ntfs.sys
[2013/01/10 07:17:01 | 001,934,056 | ---- | M] (Microsoft Corporation) MD5=5590A304885F53A106ED614B6E2F1B11 -- C:\Windows\WinSxS\amd64_microsoft-windows-ntfs_31bf3856ad364e35_6.2.9200.20604_none_001af118bf8c8a1a\ntfs.sys
[2013/02/02 12:54:54 | 001,933,544 | ---- | M] (Microsoft Corporation) MD5=76929F4A69E425911A63B407E26C2589 -- C:\Windows\SysNative\drivers\ntfs.sys
[2013/02/02 12:54:54 | 001,933,544 | ---- | M] (Microsoft Corporation) MD5=76929F4A69E425911A63B407E26C2589 -- C:\Windows\WinSxS\amd64_microsoft-windows-ntfs_31bf3856ad364e35_6.2.9200.16518_none_ff8a8589a6736b9d\ntfs.sys
[2013/02/02 10:59:29 | 001,933,544 | ---- | M] (Microsoft Corporation) MD5=88F61F0162AA21ED2B75E6D1AE6A5DB7 -- C:\Windows\WinSxS\amd64_microsoft-windows-ntfs_31bf3856ad364e35_6.2.9200.20623_none_000450f6bf9da8a5\ntfs.sys

[color=#A23BEC]< MD5 for: NVSTOR.SYS >[/color]
[2012/07/26 07:00:55 | 000,168,176 | ---- | M] (NVIDIA Corporation) MD5=27AFC428D1D32ABD04A86763A4EDDEA9 -- C:\Windows\SysNative\drivers\nvstor.sys
[2012/07/26 07:00:55 | 000,168,176 | ---- | M] (NVIDIA Corporation) MD5=27AFC428D1D32ABD04A86763A4EDDEA9 -- C:\Windows\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_7ba65ba4b222e751\nvstor.sys
[2012/07/26 07:00:55 | 000,168,176 | ---- | M] (NVIDIA Corporation) MD5=27AFC428D1D32ABD04A86763A4EDDEA9 -- C:\Windows\WinSxS\amd64_nvraid.inf_31bf3856ad364e35_6.2.9200.16384_none_92a46a8c48c2da5e\nvstor.sys

[color=#A23BEC]< MD5 for: PROQUOTA.EXE >[/color]
[2012/07/26 05:08:36 | 000,032,256 | ---- | M] (Microsoft Corporation) MD5=5E3A61CE8F1CE3A166FFD76425CB6340 -- C:\Windows\SysNative\proquota.exe
[2012/07/26 05:08:36 | 000,032,256 | ---- | M] (Microsoft Corporation) MD5=5E3A61CE8F1CE3A166FFD76425CB6340 -- C:\Windows\WinSxS\amd64_microsoft-windows-proquota_31bf3856ad364e35_6.2.9200.16384_none_80909f3c1c295de0\proquota.exe
[2012/07/26 05:20:53 | 000,030,208 | ---- | M] (Microsoft Corporation) MD5=B7D1E1915AA8A55E2FAF56BC3B524C48 -- C:\Windows\SysWOW64\proquota.exe
[2012/07/26 05:20:53 | 000,030,208 | ---- | M] (Microsoft Corporation) MD5=B7D1E1915AA8A55E2FAF56BC3B524C48 -- C:\Windows\WinSxS\x86_microsoft-windows-proquota_31bf3856ad364e35_6.2.9200.16384_none_247203b863cbecaa\proquota.exe

[color=#A23BEC]< MD5 for: QMGR.DLL >[/color]
[2012/07/26 05:07:01 | 000,826,368 | ---- | M] (Microsoft Corporation) MD5=D598C44A7072D3108D8D8102EC5E07F7 -- C:\Windows\SysNative\qmgr.dll
[2012/07/26 05:07:01 | 000,826,368 | ---- | M] (Microsoft Corporation) MD5=D598C44A7072D3108D8D8102EC5E07F7 -- C:\Windows\WinSxS\amd64_microsoft-windows-bits-client_31bf3856ad364e35_6.2.9200.16384_none_7c5a6c5183364183\qmgr.dll

[color=#A23BEC]< MD5 for: SCECLI.DLL >[/color]
[2012/07/26 05:07:07 | 000,224,768 | ---- | M] (Microsoft Corporation) MD5=4F6E1CA672370A9BCAC049CE3AB7F666 -- C:\Windows\SysNative\scecli.dll
[2012/07/26 05:07:07 | 000,224,768 | ---- | M] (Microsoft Corporation) MD5=4F6E1CA672370A9BCAC049CE3AB7F666 -- C:\Windows\WinSxS\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.2.9200.16384_none_90d789c062dfa509\scecli.dll
[2012/07/26 05:19:52 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=B95DC83FF580DD92F487C2F4D0854B6A -- C:\Windows\SysWOW64\scecli.dll
[2012/07/26 05:19:52 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=B95DC83FF580DD92F487C2F4D0854B6A -- C:\Windows\WinSxS\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.2.9200.16384_none_9b2c341297406704\scecli.dll

[color=#A23BEC]< MD5 for: SPOOLSV.EXE >[/color]
[2012/07/26 05:08:47 | 000,769,024 | ---- | M] (Microsoft Corporation) MD5=3F215BF2D4D8D6756298B25B579772C2 -- C:\Windows\SysNative\spoolsv.exe
[2012/07/26 05:08:47 | 000,769,024 | ---- | M] (Microsoft Corporation) MD5=3F215BF2D4D8D6756298B25B579772C2 -- C:\Windows\WinSxS\amd64_microsoft-windows-printing-spooler-core_31bf3856ad364e35_6.2.9200.16384_none_2f154a864b4cfb0d\spoolsv.exe

[color=#A23BEC]< MD5 for: SVCHOST.EXE >[/color]
[2012/07/26 05:20:58 | 000,023,040 | ---- | M] (Microsoft Corporation) MD5=0A175AF8B65797BD22C11903A8BFEB2D -- C:\Windows\WinSxS\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.2.9200.16384_none_b2666581d6b482a6\svchost.exe
[2012/07/26 05:08:47 | 000,030,208 | ---- | M] (Microsoft Corporation) MD5=57350BEDE3834915B6145B67C71C7BDA -- C:\Windows\WinSxS\amd64_microsoft-windows-services-svchost_31bf3856ad364e35_6.2.9200.16384_none_0e8501058f11f3dc\svchost.exe
[2012/09/20 08:33:14 | 000,029,696 | ---- | M] (Microsoft Corporation) MD5=607F7CB143783A8F9BA058D2FC4F2D36 -- C:\Windows\WinSxS\amd64_microsoft-windows-services-svchost_31bf3856ad364e35_6.2.9200.20521_none_0f4c7e60a8019d22\svchost.exe
[2012/09/20 07:55:26 | 000,023,040 | ---- | M] (Microsoft Corporation) MD5=A46DC432F81473F526E3994AA483E366 -- C:\Windows\SysWOW64\svchost.exe
[2012/09/20 07:55:26 | 000,023,040 | ---- | M] (Microsoft Corporation) MD5=A46DC432F81473F526E3994AA483E366 -- C:\Windows\WinSxS\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.2.9200.16420_none_b2a345c7d68772cb\svchost.exe
[2013/04/04 14:50:32 | 000,218,184 | ---- | M] () MD5=B4C6E3889BB310CA7E974A04EC6E46AC -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\Chameleon\svchost.exe
[2012/09/20 08:33:52 | 000,029,696 | ---- | M] (Microsoft Corporation) MD5=EDE27EACE742EE2888C5DD36400A2EC0 -- C:\Windows\SysNative\svchost.exe
[2012/09/20 08:33:52 | 000,029,696 | ---- | M] (Microsoft Corporation) MD5=EDE27EACE742EE2888C5DD36400A2EC0 -- C:\Windows\WinSxS\amd64_microsoft-windows-services-svchost_31bf3856ad364e35_6.2.9200.16420_none_0ec1e14b8ee4e401\svchost.exe
[2012/09/20 07:56:27 | 000,023,040 | ---- | M] (Microsoft Corporation) MD5=EEF5E64822C3E21B186EA53463BE92DA -- C:\Windows\WinSxS\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.2.9200.20521_none_b32de2dcefa42bec\svchost.exe

[color=#A23BEC]< MD5 for: TERMSRV.DLL >[/color]
[2012/07/26 05:07:29 | 000,723,968 | ---- | M] (Microsoft Corporation) MD5=541EE228D0DEF392F7B2DFD885DD021B -- C:\Windows\SysNative\termsrv.dll
[2012/07/26 05:07:29 | 000,723,968 | ---- | M] (Microsoft Corporation) MD5=541EE228D0DEF392F7B2DFD885DD021B -- C:\Windows\WinSxS\amd64_microsoft-windows-t..teconnectionmanager_31bf3856ad364e35_6.2.9200.16384_none_e768e92cde084d59\termsrv.dll

[color=#A23BEC]< MD5 for: USERINIT.EXE >[/color]
[2012/07/26 05:08:49 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=0E925F7BA032920D58DD284B6181A247 -- C:\Windows\SysNative\userinit.exe
[2012/07/26 05:08:49 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=0E925F7BA032920D58DD284B6181A247 -- C:\Windows\WinSxS\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.2.9200.16384_none_34f2617a5b742e02\userinit.exe
[2012/07/26 05:21:00 | 000,021,504 | ---- | M] (Microsoft Corporation) MD5=9F6289D194A04A09671FEED4B6CB6EF7 -- C:\Windows\SysWOW64\userinit.exe
[2012/07/26 05:21:00 | 000,021,504 | ---- | M] (Microsoft Corporation) MD5=9F6289D194A04A09671FEED4B6CB6EF7 -- C:\Windows\WinSxS\x86_microsoft-windows-userinit_31bf3856ad364e35_6.2.9200.16384_none_d8d3c5f6a316bccc\userinit.exe

[color=#A23BEC]< MD5 for: VOLSNAP.SYS >[/color]
[2012/07/26 06:57:09 | 000,332,016 | ---- | M] (Microsoft Corporation) MD5=2FB3CDFD5EAF4CD9D4AFAF96877D13AE -- C:\Windows\SysNative\drivers\volsnap.sys
[2012/07/26 06:57:09 | 000,332,016 | ---- | M] (Microsoft Corporation) MD5=2FB3CDFD5EAF4CD9D4AFAF96877D13AE -- C:\Windows\SysNative\DriverStore\FileRepository\volume.inf_amd64_9d78abd6ac3df11c\volsnap.sys
[2012/07/26 06:57:09 | 000,332,016 | ---- | M] (Microsoft Corporation) MD5=2FB3CDFD5EAF4CD9D4AFAF96877D13AE -- C:\Windows\WinSxS\amd64_volume.inf_31bf3856ad364e35_6.2.9200.16384_none_6e805ee585d930c4\volsnap.sys

[color=#A23BEC]< MD5 for: WININET.DLL >[/color]
[2013/02/05 00:39:47 | 002,246,656 | ---- | M] (Microsoft Corporation) MD5=2769AF459DDA7140B73227C31DCE61BD -- C:\Windows\WinSxS\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.0.9200.16519_none_a11df8bee03cb00c\wininet.dll
[2012/11/08 06:25:35 | 001,775,104 | ---- | M] (Microsoft Corporation) MD5=314E662DD78AF3F7766BA25162BEEEDA -- C:\Windows\WinSxS\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.0.9200.16453_none_450eb6ff27d2ee7b\wininet.dll
[2013/02/21 14:48:01 | 002,247,168 | ---- | M] (Microsoft Corporation) MD5=32D39C8BA5940DA0EB6E7993F3190F92 -- C:\Windows\WinSxS\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.0.9200.20644_none_8a48f4fcf9e8f792\wininet.dll
[2012/07/26 05:07:56 | 002,246,656 | ---- | M] (Microsoft Corporation) MD5=3DA7E6053DB9BE3EADC70CE20B1FB92B -- C:\Windows\WinSxS\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.0.9200.16384_none_a13b0c84e025a966\wininet.dll
[2012/12/20 02:31:25 | 001,775,616 | ---- | M] (Microsoft Corporation) MD5=3F12C9EA3E3821065C544943132B188F -- C:\Windows\WinSxS\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.0.9200.20589_none_2e38b8a541804fec\wininet.dll
[2012/09/20 07:56:01 | 001,775,616 | ---- | M] (Microsoft Corporation) MD5=3F9494D8D4B8A2FAB574F9EC63848E41 -- C:\Windows\WinSxS\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.0.9200.20521_none_2e336d294184eada\wininet.dll
[2013/02/05 06:58:01 | 001,766,912 | ---- | M] (Microsoft Corporation) MD5=4FF6180429DA389E4154B10450E7C0B8 -- C:\Windows\WinSxS\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.0.9200.16519_none_44ff5d3b27df3ed6\wininet.dll
[2012/10/11 07:12:54 | 001,775,616 | ---- | M] (Microsoft Corporation) MD5=60C3E80CC1E2FE3F2F78366A597ACEAF -- C:\Windows\WinSxS\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.0.9200.20534_none_2e34291b41845114\wininet.dll
[2012/10/11 07:07:55 | 001,775,616 | ---- | M] (Microsoft Corporation) MD5=6579ADCC0E4251635B21D07B883325B5 -- C:\Windows\WinSxS\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.0.9200.16433_none_450cb66b27d4bbcd\wininet.dll
[2012/09/20 08:32:42 | 002,246,656 | ---- | M] (Microsoft Corporation) MD5=74044D78CEF55EAEA8493AF48DC2A608 -- C:\Windows\WinSxS\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.0.9200.20521_none_8a5208acf9e25c10\wininet.dll
[2013/02/21 12:15:07 | 002,240,512 | ---- | M] (Microsoft Corporation) MD5=753C0848AE7872A3F59663078A517293 -- C:\Windows\SysNative\wininet.dll
[2013/02/21 12:15:07 | 002,240,512 | ---- | M] (Microsoft Corporation) MD5=753C0848AE7872A3F59663078A517293 -- C:\Windows\WinSxS\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.0.9200.16540_none_a121c6a4e0391568\wininet.dll
[2012/11/08 06:25:33 | 001,775,104 | ---- | M] (Microsoft Corporation) MD5=7B51707073DE6128FC8ED3C60D855D6D -- C:\Windows\WinSxS\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.0.9200.20557_none_2e35e5574182d0a5\wininet.dll
[2012/09/20 07:55:02 | 001,775,616 | ---- | M] (Microsoft Corporation) MD5=892AD406F3C57897E6015A959ACF447C -- C:\Windows\WinSxS\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.0.9200.16420_none_450bfa7927d55593\wininet.dll
[2012/10/11 07:46:09 | 002,246,656 | ---- | M] (Microsoft Corporation) MD5=8B209DC70FC7147351BF14F30303033E -- C:\Windows\WinSxS\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.0.9200.16433_none_a12b51eee0322d03\wininet.dll
[2012/12/20 02:20:03 | 002,246,656 | ---- | M] (Microsoft Corporation) MD5=932B20855A5A66639FEA5C72B149DE6B -- C:\Windows\WinSxS\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.0.9200.20589_none_8a575428f9ddc122\wininet.dll
[2012/11/08 06:22:19 | 002,246,656 | ---- | M] (Microsoft Corporation) MD5=AAEF73606F58ADE710208F4B1B988FBF -- C:\Windows\WinSxS\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.0.9200.16453_none_a12d5282e0305fb1\wininet.dll
[2012/10/11 07:44:56 | 002,246,656 | ---- | M] (Microsoft Corporation) MD5=B4AFAB1199266C403FAD16925733D484 -- C:\Windows\WinSxS\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.0.9200.20534_none_8a52c49ef9e1c24a\wininet.dll
[2013/02/21 12:43:03 | 001,775,616 | ---- | M] (Microsoft Corporation) MD5=B9A72493B83C77E78FE6213F4B01DB5D -- C:\Windows\WinSxS\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.0.9200.20644_none_2e2a5979418b865c\wininet.dll
[2012/12/20 02:29:16 | 002,246,656 | ---- | M] (Microsoft Corporation) MD5=BDE820861D8107C67E182DF66A27074F -- C:\Windows\WinSxS\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.0.9200.16484_none_a1303c98e02dc557\wininet.dll
[2013/02/05 01:00:19 | 002,246,656 | ---- | M] (Microsoft Corporation) MD5=BE189D85CE34D85FBADC3F4A3606D35D -- C:\Windows\WinSxS\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.0.9200.20624_none_8a46f468f9eac4e4\wininet.dll
[2012/07/26 05:20:25 | 001,775,104 | ---- | M] (Microsoft Corporation) MD5=C024001390FBA48FD77605E90E42FBE7 -- C:\Windows\WinSxS\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.0.9200.16384_none_451c710127c83830\wininet.dll
[2013/02/05 07:00:27 | 001,775,616 | ---- | M] (Microsoft Corporation) MD5=C67171F7C8FABD0B33628DB80FF27B5D -- C:\Windows\WinSxS\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.0.9200.20624_none_2e2858e5418d53ae\wininet.dll
[2013/02/21 12:30:16 | 001,766,912 | ---- | M] (Microsoft Corporation) MD5=CFE0CEE587F9CEA4C29DEEC6D85FC91C -- C:\Windows\SysWOW64\wininet.dll
[2013/02/21 12:30:16 | 001,766,912 | ---- | M] (Microsoft Corporation) MD5=CFE0CEE587F9CEA4C29DEEC6D85FC91C -- C:\Windows\WinSxS\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.0.9200.16540_none_45032b2127dba432\wininet.dll
[2012/12/20 02:37:37 | 001,775,616 | ---- | M] (Microsoft Corporation) MD5=E4ED4BC8759829BCEB9CE9CA88A64784 -- C:\Windows\WinSxS\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.0.9200.16484_none_4511a11527d05421\wininet.dll
[2012/11/08 06:26:56 | 002,246,656 | ---- | M] (Microsoft Corporation) MD5=F597C8DFDF2AB23076D884BD8D8BFB97 -- C:\Windows\WinSxS\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.0.9200.20557_none_8a5480daf9e041db\wininet.dll
[2012/09/20 08:33:18 | 002,246,656 | ---- | M] (Microsoft Corporation) MD5=FD0F320A1C7C16A1A20F78BCA4F9D730 -- C:\Windows\WinSxS\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.0.9200.16420_none_a12a95fce032c6c9\wininet.dll

[color=#A23BEC]< MD5 for: WININIT.EXE >[/color]
[2012/07/26 05:08:50 | 000,132,608 | ---- | M] (Microsoft Corporation) MD5=FE9AB232B56A12224E8A3F3F9878C9A3 -- C:\Windows\SysNative\wininit.exe
[2012/07/26 05:08:50 | 000,132,608 | ---- | M] (Microsoft Corporation) MD5=FE9AB232B56A12224E8A3F3F9878C9A3 -- C:\Windows\WinSxS\amd64_microsoft-windows-wininit_31bf3856ad364e35_6.2.9200.16384_none_89bc60338e14dc99\wininit.exe

[color=#A23BEC]< MD5 for: WINLOGON.EXE >[/color]
[2012/09/20 08:33:55 | 000,516,608 | ---- | M] (Microsoft Corporation) MD5=1F84B5F8DBDFFD36DF143C61CE25F12A -- C:\Windows\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.2.9200.16420_none_c8c988c15e88a211\winlogon.exe
[2012/09/20 08:33:55 | 000,516,608 | ---- | M] (Microsoft Corporation) MD5=1F84B5F8DBDFFD36DF143C61CE25F12A -- C:\Windows\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.2.9200.16420_none_c8c988c15e88a211\winlogon.exe
[2012/09/20 08:33:17 | 000,516,608 | ---- | M] (Microsoft Corporation) MD5=6522E98C94A2A81AE11EB66D2AF5743A -- C:\Windows\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.2.9200.20521_none_c95425d677a55b32\winlogon.exe
[2012/09/20 08:33:17 | 000,516,608 | ---- | M] (Microsoft Corporation) MD5=6522E98C94A2A81AE11EB66D2AF5743A -- C:\Windows\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.2.9200.20521_none_c95425d677a55b32\winlogon.exe
[2012/07/26 05:08:50 | 000,516,608 | ---- | M] (Microsoft Corporation) MD5=93AB226C07A9789B2EC7B41F73602F76 -- C:\Windows\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.2.9200.16384_none_c88ca87b5eb5b1ec\winlogon.exe
[2012/07/26 05:08:50 | 000,516,608 | ---- | M] (Microsoft Corporation) MD5=93AB226C07A9789B2EC7B41F73602F76 -- C:\Windows\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.2.9200.16384_none_c88ca87b5eb5b1ec\winlogon.exe
[2013/04/04 14:50:32 | 000,218,184 | ---- | M] () MD5=B4C6E3889BB310CA7E974A04EC6E46AC -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\Chameleon\winlogon.exe
[2013/04/04 14:50:32 | 000,218,184 | ---- | M] () MD5=B4C6E3889BB310CA7E974A04EC6E46AC -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\Chameleon\winlogon.exe
[2012/10/11 07:46:58 | 000,517,120 | ---- | M] (Microsoft Corporation) MD5=BCF2036A0DD579E47C008C133550283E -- C:\Windows\SysNative\winlogon.exe
[2012/10/11 07:46:58 | 000,517,120 | ---- | M] (Microsoft Corporation) MD5=BCF2036A0DD579E47C008C133550283E -- C:\Windows\SysNative\winlogon.exe
[2012/10/11 07:46:58 | 000,517,120 | ---- | M] (Microsoft Corporation) MD5=BCF2036A0DD579E47C008C133550283E -- C:\Windows\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.2.9200.16433_none_c8c1b9b35e8e0a07\winlogon.exe
[2012/10/11 07:46:58 | 000,517,120 | ---- | M] (Microsoft Corporation) MD5=BCF2036A0DD579E47C008C133550283E -- C:\Windows\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.2.9200.16433_none_c8c1b9b35e8e0a07\winlogon.exe
[2012/10/11 07:45:27 | 000,517,120 | ---- | M] (Microsoft Corporation) MD5=CBFD56B4EC07CB056A6ABD55DD33671F -- C:\Windows\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.2.9200.20534_none_c94c56c877aac328\winlogon.exe
[2012/10/11 07:45:27 | 000,517,120 | ---- | M] (Microsoft Corporation) MD5=CBFD56B4EC07CB056A6ABD55DD33671F -- C:\Windows\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.2.9200.20534_none_c94c56c877aac328\winlogon.exe

[color=#A23BEC]< MD5 for: WS2_32.DLL >[/color]
[2012/07/26 07:26:48 | 000,345,088 | ---- | M] (Microsoft Corporation) MD5=2E5B349ACDA36C20612795754DB93312 -- C:\Windows\SysNative\ws2_32.dll
[2012/07/26 07:26:48 | 000,345,088 | ---- | M] (Microsoft Corporation) MD5=2E5B349ACDA36C20612795754DB93312 -- C:\Windows\WinSxS\amd64_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.2.9200.16384_none_4b815827581a3bbb\ws2_32.dll
[2012/07/26 05:20:38 | 000,310,784 | ---- | M] (Microsoft Corporation) MD5=B3CC9EDFD97F7087013A9A47089DF571 -- C:\Windows\SysWOW64\ws2_32.dll
[2012/07/26 05:20:38 | 000,310,784 | ---- | M] (Microsoft Corporation) MD5=B3CC9EDFD97F7087013A9A47089DF571 -- C:\Windows\WinSxS\x86_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.2.9200.16384_none_ef62bca39fbcca85\ws2_32.dll

[color=#A23BEC]< HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems /s >[/color]
"" = mnmsrvc
"Required" = DebugWindows [binary data]
"Debug" =
"Posix" = %SystemRoot%\system32\psxss.exe
"Kmode" = \SystemRoot\System32\win32k.sys
"Optional" = Posix [binary data]
"Windows" = %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16

[color=#A23BEC]< %systemroot%\*. /mp /s >[/color]

[color=#A23BEC]< %systemroot%\system32\*.dll /lockedfiles >[/color]
[2013/02/21 12:29:37 | 013,761,024 | ---- | M] (Microsoft Corporation)[b] Unable to obtain MD5[/b] -- C:\Windows\system32\ieframe.dll
[2012/07/26 05:18:40 | 000,117,248 | ---- | M] (Microsoft Corporation)[b] Unable to obtain MD5[/b] -- C:\Windows\system32\iepeers.dll

[color=#A23BEC]< %systemroot%\Tasks\*.job /lockedfiles >[/color]

[color=#A23BEC]< %systemroot%\system32\drivers\*.sys /lockedfiles >[/color]

[color=#A23BEC]< %systemroot%\System32\config\*.sav >[/color]

[color=#A23BEC]< c:\$recycle.bin\*.* /s >[/color]
[2013/02/24 16:42:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I06OZ1L.jpg
[2013/02/24 16:42:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I0B33K4.jpg
[2013/02/24 16:43:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I0H0TFL.JPG
[2013/02/24 16:41:20 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I0KKYEJ.jpg
[2013/02/24 16:43:16 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I0LI3WC.lnk
[2013/02/24 16:42:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I0QI9P1.jpg
[2013/02/24 16:40:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I0X4OZ7.jpg
[2013/02/24 16:40:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I1A5S7A.jpg
[2013/02/24 16:39:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I1DZHO1.jpg
[2013/02/24 16:42:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I1IFD59.jpg
[2013/02/24 16:42:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I1JSFTQ.jpg
[2013/02/24 16:43:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I1M0BO7.lnk
[2013/02/08 10:49:21 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I1M1J30.lnk
[2013/02/24 16:43:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I1TY2RA.JPG
[2013/02/24 16:40:59 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I1ZFKSH.jpg
[2013/02/24 16:37:26 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I2A3V5N.jpg
[2013/02/24 16:40:59 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I2JJ7WQ.jpg
[2013/02/24 16:40:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I2SN6FI.jpg
[2013/02/24 16:41:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I2YG2LR.jpg
[2013/02/24 16:41:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I30BFYC.jpg
[2013/02/24 16:40:59 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I36LNTY.jpg
[2013/02/24 16:43:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I3CVI29.JPG
[2013/02/24 16:37:26 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I3H065Y.jpg
[2013/02/24 16:42:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I3I8RBU.jpg
[2013/02/24 15:44:02 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I3LR4GI.lnk
[2013/02/24 16:43:16 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I3NWF8B.lnk
[2013/02/24 16:40:59 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I3O536G.jpg
[2013/02/24 16:42:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I3P4SUM.jpg
[2013/02/24 16:19:05 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I3U54GM.jpg
[2013/02/24 16:37:26 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I3UOSX2.jpg
[2013/02/24 16:42:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I3UW0HM.jpg
[2013/02/24 16:38:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I3Y6EV4
[2013/02/24 16:40:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I3YL96E.jpg
[2013/02/24 16:42:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I3ZRO8Q.jpg
[2013/02/24 16:39:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I41S8HB.jpg
[2013/02/24 16:42:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I42X430.jpg
[2013/02/24 16:43:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I4620J2.lnk
[2013/02/24 15:44:08 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I47S95U.lnk
[2013/02/24 16:42:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I4JCUY5.jpg
[2013/02/24 16:43:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I4L0SGU.JPG
[2013/02/24 16:37:26 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I4P2XHK.jpg
[2013/02/24 16:37:26 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I4RBN0A.android_secure
[2013/02/24 16:43:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I4VQ0US.lnk
[2013/02/24 16:42:23 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I53EU0M.jpg
[2013/02/24 16:40:59 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I5507HM.jpg
[2013/02/24 16:42:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I57VMD1.jpg
[2013/02/24 16:42:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I58WHEQ.jpg
[2013/02/24 16:43:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I59YZSQ.lnk
[2013/02/24 16:42:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I5MSAFD.jpg
[2013/02/24 16:39:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I5Z52JS.jpg
[2013/02/24 15:44:33 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I66D7Z6.lnk
[2013/02/24 16:41:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I67FA6D.jpg
[2013/02/24 15:44:52 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I6IX4ZO.lnk
[2013/02/24 16:56:02 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I6S47DE
[2013/02/24 16:43:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I6S8Q3G.lnk
[2013/02/24 16:42:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I6T229O.jpg
[2013/02/24 16:42:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I6U1YZ6.jpg
[2013/02/24 16:39:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I6WB8V3.jpg
[2013/02/24 16:42:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I6WE5M9.jpg
[2013/02/24 16:41:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I720B5M.jpg
[2013/02/24 16:42:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I7573HQ.jpg
[2013/02/24 16:42:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I795ALE.jpg
[2013/02/24 15:44:45 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I79IK51.JPG
[2013/02/24 16:43:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I7E044N.lnk
[2013/02/24 15:44:40 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I7F9GQA.lnk
[2013/02/24 16:42:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I7FRC7F.jpg
[2013/02/24 16:42:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I7JRVDF.jpg
[2013/02/24 15:44:37 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I7LYWFY.lnk
[2013/02/24 16:42:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I7OWUMM.jpg
[2013/02/24 16:39:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I7P4YTI.jpg
[2013/02/24 16:42:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I7TFYV1.jpg
[2013/02/24 15:44:25 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I7W9UD9.lnk
[2013/02/24 16:42:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I846ZK6.jpg
[2013/02/24 16:37:26 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I8AS4KG.jpg
[2013/02/24 16:42:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I8D2VW8.jpg
[2013/02/24 16:42:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I8GJK5C.jpg
[2013/02/24 16:43:16 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I8JG5O5.lnk
[2013/02/24 16:42:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I8JQ9IX.jpg
[2013/02/24 16:41:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I8N8ZR2.jpg
[2013/02/24 16:42:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I8P5J8P.jpg
[2013/02/24 16:38:08 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I8XR2SN.jpg
[2013/02/24 16:42:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I8XV4LC.jpg
[2013/02/24 16:41:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I93E8Y2.jpg
[2013/02/24 16:42:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I947392.jpg
[2013/02/24 16:39:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I95SVPW.jpg
[2013/02/24 16:37:26 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I97MSP8.jpg
[2013/02/24 16:43:25 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I9DMBBF.lnk
[2013/02/24 16:37:26 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I9WU8PI.jpg
[2013/02/24 16:43:16 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$I9YTDV5.lnk
[2013/02/24 16:43:25 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IA1MN5E.JPG
[2013/02/24 16:38:08 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IA6G6IZ.jpg
[2013/02/24 16:43:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IAAVW9M.lnk
[2013/02/24 16:42:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IADRH4N.jpg
[2013/02/24 16:42:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IAFZNNE.jpg
[2013/02/24 16:42:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IAJNMIZ.jpg
[2013/02/24 16:41:20 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IAKLEIS.jpg
[2013/02/24 15:43:59 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IAL0ETU.lnk
[2013/02/24 16:42:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IAPVC5H.jpg
[2013/02/24 16:42:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IBBJP5H.jpg
[2013/02/24 16:42:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IBEQ40H.jpg
[2013/02/24 16:39:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IBIXTIS.jpg
[2013/02/24 15:45:10 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IBJN79L.lnk
[2013/02/24 16:41:20 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IBJVDKR.jpg
[2013/02/24 16:41:20 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IBNGTGH.jpg
[2013/02/24 16:42:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IBNSQ4A.jpg
[2013/02/24 16:40:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IBS71QQ.jpg
[2013/02/24 16:40:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IBS76JK.jpg
[2013/02/24 16:19:05 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IBS9XXP.jpg
[2013/02/24 16:42:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IBT4WDJ.jpg
[2013/02/24 16:39:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IBUUSZR.jpg
[2013/02/24 16:43:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IBWWGGH.lnk
[2013/02/24 16:42:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IBX02ZD.jpg
[2013/02/24 16:41:20 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IC44ZJ2.jpg
[2013/02/24 16:39:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$ICA56NM.jpg
[2013/02/24 16:43:25 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$ICFL1CU.jpg
[2013/02/24 16:42:23 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$ICJG5EC.jpg
[2013/02/24 16:42:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$ICKIJ2U.jpg
[2013/02/24 16:40:59 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$ICV9V35.jpg
[2013/04/18 17:45:54 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$ICZX0MQ.ini
[2013/02/24 16:40:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$ID2WUSA.jpg
[2013/02/24 16:42:23 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IDADS1B.jpg
[2013/02/24 16:42:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IDF8IVQ.jpg
[2013/02/24 16:42:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IDJK73R.jpg
[2013/02/24 16:42:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IDJX3LB.jpg
[2013/02/24 16:42:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IDKQ3G7.jpg
[2013/02/24 16:42:23 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IDKV9X1
[2013/02/24 16:43:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IDL9TXO.lnk
[2013/02/24 16:41:20 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IDQ4AOD.jpg
[2013/02/24 16:43:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IDREGKA.lnk
[2013/02/24 15:44:16 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IDTLZCE.lnk
[2013/02/24 16:42:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IDXGPZF.jpg
[2013/02/24 16:38:08 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IDXPFDX.jpg
[2013/02/24 16:42:23 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IDXVC37.jpg
[2013/02/24 15:45:08 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IDYY7PG.lnk
[2013/02/24 16:42:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IE3GWWB.jpg
[2013/02/24 16:41:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IE4GHU7.jpg
[2013/02/24 16:42:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IE4LANS.jpg
[2013/02/24 16:43:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IECQI50.lnk
[2013/02/24 16:40:59 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IEP2641.jpg
[2013/02/24 16:41:20 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IEQVWNK.jpg
[2013/02/24 16:42:23 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IETA5YD.jpg
[2013/02/24 16:42:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IEYW3GS.jpg
[2013/02/24 16:37:26 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IF4OIRU.jpg
[2013/02/24 16:43:16 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IF5T949.JPG
[2013/02/24 15:44:20 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IF78DY1.lnk
[2013/02/24 16:43:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IF7ZZE8.JPG
[2013/02/24 16:37:26 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IFB47FQ.jpg
[2013/02/24 16:42:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IFC5RXW.jpg
[2013/02/24 16:38:08 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IFHTJIQ.jpg
[2013/02/24 16:40:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IFI88DH.jpg
[2013/02/24 16:40:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IFL46X1.jpg
[2013/02/24 16:41:20 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IFOYG2Y.jpg
[2013/02/24 16:39:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IFPLAZF.jpg
[2013/02/24 16:39:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IFVZABV.jpg
[2013/02/24 15:44:23 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IG0E20E.lnk
[2013/02/24 16:42:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IG88QLX.jpg
[2013/02/24 16:42:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IGARR6R.jpg
[2013/02/24 16:39:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IGB0NJ2.jpg
[2013/02/24 16:37:26 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IGBDVJ2.jpg
[2013/02/24 16:42:23 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IGCJPQ5.jpg
[2013/02/24 16:42:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IGIA1OE.jpg
[2013/02/24 16:43:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IGLRPZG.lnk
[2013/02/24 16:42:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IGMS60F.jpg
[2013/02/24 16:43:16 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IGPM6EZ.JPG
[2013/02/24 16:40:59 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IGV8FDW.jpg
[2013/02/24 16:42:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IGVWMT0.jpg
[2013/02/24 16:42:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IGYYV9T.jpg
[2013/02/24 16:43:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IH05XJ3.lnk
[2013/02/24 16:42:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IH652YB.jpg
[2013/02/24 16:46:09 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IH6GFCZ
[2013/02/24 16:43:25 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IHACGBH.lnk
[2013/02/24 16:43:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IHCMJMX.JPG
[2013/02/24 16:37:26 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IHDJASS.jpg
[2013/02/24 16:42:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IHE6IPR.jpg
[2013/02/24 16:43:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IHGY2SB.JPG
[2013/02/24 16:42:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IHKFRH7.jpg
[2013/02/24 16:43:16 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IHKKF5W.JPG
[2013/02/24 16:42:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IHKL3Y8.jpg
[2013/02/24 15:44:42 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$II0527L.lnk
[2013/02/24 16:40:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$II3VJD3.jpg
[2013/02/24 16:42:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$II742GX.jpg
[2013/02/24 16:41:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IIBESOI.jpg
[2013/02/24 16:42:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IICFIPI.jpg
[2013/02/24 16:43:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IIGEHQT.lnk
[2013/02/24 15:44:05 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IIJ766Z.lnk
[2013/02/24 16:39:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IIR09JN.jpg
[2013/02/24 16:41:20 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IIR4JLD.jpg
[2013/02/24 16:40:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IIS63I7.jpg
[2013/02/24 16:43:25 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IISFWZ3.JPG
[2013/02/24 16:42:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IJ0AH17.jpg
[2013/02/24 16:42:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IJ0GTU4.jpg
[2013/02/24 16:42:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IJ1W0B8.jpg
[2013/02/24 16:42:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IJ3GVHB.jpg
[2013/02/24 16:42:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IJ5SFL5.jpg
[2013/02/24 16:42:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IJ7OB00.jpg
[2013/02/24 16:40:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IJA48C5.jpg
[2013/02/24 16:42:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IJAUD52.jpg
[2013/02/24 16:42:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IJBL99L.jpg
[2013/02/24 16:42:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IJGB02B.jpg
[2013/02/24 16:38:08 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IJGEQTP.jpg
[2013/02/24 16:40:59 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IJKW8FU.jpg
[2013/02/24 16:41:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IJP6W0G.jpg
[2013/02/24 16:40:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IJPU5B5.jpg
[2013/02/24 16:42:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IJQ7NNH.jpg
[2013/02/24 16:43:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IJVWN91.JPG
[2013/02/24 16:42:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IJVX45L.jpg
[2013/04/18 15:39:42 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IJWG8OE.exe
[2013/02/24 16:41:20 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IK0F810.jpg
[2013/02/24 16:40:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IK1TJ5C.jpg
[2013/02/24 16:41:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IK6MWQ2.jpg
[2013/02/24 16:42:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IK98NOE.jpg
[2013/02/24 16:42:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IKB5PU6.jpg
[2013/02/24 16:42:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IKCRPUG.jpg
[2013/04/17 18:51:51 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IKHWR6G.exe
[2013/02/24 16:41:20 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IKIFA0H.jpg
[2013/02/24 16:42:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IKQDBW2.jpg
[2013/02/24 16:40:59 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IKQDX9J.jpg
[2013/02/24 16:41:20 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IKU18RV.jpg
[2013/02/24 16:41:20 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IKW7JNQ.jpg
[2013/02/24 16:37:26 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IKX4Y8I.jpg
[2013/02/24 15:44:12 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IL55PKN.lnk
[2013/02/24 15:44:14 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IL5X9B4.lnk
[2013/02/24 16:41:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$ILKH0RS.jpg
[2013/02/24 16:42:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$ILXDDWD.jpg
[2013/02/24 16:37:26 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IM06X10.jpg
[2013/02/24 15:44:54 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IM1IXGA.lnk
[2013/02/24 16:37:26 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IM4RWCZ.jpg
[2013/02/24 16:42:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IM5V87A.jpg
[2013/02/24 16:42:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IM6VANY.jpg
[2013/02/24 16:32:27 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IMAZ7V3.jpg
[2013/02/24 16:42:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IMFXOEY.jpg
[2013/02/24 16:42:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IMLRCHX.jpg
[2013/02/24 16:43:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IMOVALQ.JPG
[2013/03/09 14:56:10 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IMS4DRI
[2013/02/24 15:45:04 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IMSM9YF.lnk
[2013/02/24 16:42:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IN0TSGB.jpg
[2013/02/24 16:43:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IN1QOFI.lnk
[2013/02/24 16:42:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IN3T5S7.jpg
[2013/02/24 16:42:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IN5XQYF.jpg
[2013/04/18 17:45:30 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$INBV1IH.Txt
[2013/02/24 16:36:20 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$INCX1BN.jpg
[2013/02/24 16:41:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IND6NJV.jpg
[2013/02/24 15:44:35 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$INO3LEJ.lnk
[2013/02/24 16:40:59 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$INV08CN.jpg
[2013/02/24 16:37:26 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$INW0FVT.jpg
[2013/02/24 16:43:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IO2BVAO.JPG
[2013/02/24 16:37:26 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IO8HHV1.jpg
[2013/02/24 16:40:59 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IOEV4DV.jpg
[2013/02/24 16:40:59 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IOHSJAQ.jpg
[2013/02/24 16:42:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IOHW2BH.jpg
[2013/02/24 16:42:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$ION6B90.jpg
[2013/02/24 16:42:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IOOTABK.jpg
[2013/04/17 18:56:58 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IOS4XXE.lnk
[2013/02/24 16:41:20 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IOXWOZ2.jpg
[2013/02/24 16:42:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IP9UB7C.jpg
[2013/02/24 16:42:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IPF7175.jpg
[2013/04/18 15:18:38 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IPKCJEB.lnk
[2013/02/24 16:42:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IPKMP8Z.jpg
[2013/02/24 16:42:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IPL8C5K.jpg
[2013/02/24 16:43:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IPO1L6O.JPG
[2013/02/24 16:43:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IPZSFWT.JPG
[2013/02/24 16:43:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IQ9Z9F8.lnk
[2013/02/24 16:42:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IQGEVI4.jpg
[2013/02/24 16:41:20 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IQK3C6W.jpg
[2013/02/24 16:39:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IQUBOI3.jpg
[2013/02/24 16:41:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IQVLPMD.jpg
[2013/02/24 16:40:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IQVYYEM.jpg
[2013/04/18 15:18:30 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IR3AGRU.lnk
[2013/02/24 16:42:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IR8BOVA.jpg
[2013/02/24 16:43:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IRASV72.jpg
[2013/02/24 16:42:23 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IRFYKWD.jpg
[2013/02/24 16:42:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IRJIM7E.jpg
[2013/02/24 16:42:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IRKHLE6.jpg
[2013/02/24 16:42:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IRN5Z7F.jpg
[2013/02/24 16:42:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IRPNN0F.jpg
[2013/02/24 16:41:20 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IRQ9KU1.jpg
[2013/02/24 16:42:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IRUAREP.jpg
[2013/02/24 16:37:26 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$ISB6PGE.jpg
[2013/02/24 16:42:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$ISBFB33.jpg
[2013/02/24 16:42:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$ISE9JBW.jpg
[2013/04/18 15:18:28 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$ISGDA30.lnk
[2013/02/24 16:42:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$ISJX5KU.jpg
[2013/02/24 16:37:26 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$ISK968U.jpg
[2013/02/24 16:39:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$ISLS5BR.jpg
[2013/02/24 16:42:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$ISU9AMZ.jpg
[2013/02/24 16:42:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$ISY2RCM.jpg
[2013/02/24 16:43:16 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IT00F5S.JPG
[2013/02/24 16:43:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IT48N3A.jpg
[2013/02/24 16:37:26 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IT84YNR.jpg
[2013/02/24 16:39:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$ITAL3MY.jpg
[2013/02/24 16:41:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$ITJ8FTB.jpg
[2013/02/24 16:42:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$ITK573K.jpg
[2013/02/24 16:42:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$ITKAF1O.jpg
[2013/02/24 16:42:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$ITRUX6D.jpg
[2013/02/24 16:39:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$ITS30CL.jpg
[2013/02/24 16:43:16 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$ITSOGHA.JPG
[2013/02/24 16:42:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$ITUAKEQ.jpg
[2013/04/18 17:45:54 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$ITUFP8E.ini
[2013/02/24 15:45:00 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$ITXFUD0.lnk
[2013/02/24 16:43:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IU1B55S.JPG
[2013/02/24 16:39:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IU26W73.jpg
[2013/02/24 16:36:20 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IU33M41.jpg
[2013/02/24 16:42:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IU3R1UQ.jpg
[2013/02/24 16:37:26 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IU3WJTB.jpg
[2013/02/24 16:42:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IU6PMMJ.jpg
[2013/02/24 16:43:16 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IUAJHSM.JPG
[2013/02/24 16:37:26 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IUAKSYV.jpg
[2013/02/24 16:43:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IUDAJG7.txt
[2013/02/24 16:43:16 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IUHN1AF.lnk
[2013/02/24 16:43:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IUIBG4N.JPG
[2013/02/24 16:42:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IUK64QT.jpg
[2013/02/24 15:44:57 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IUKGIPU.lnk
[2013/02/24 16:43:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IUQMB73.jpg
[2013/02/24 16:42:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IUY7TBW.jpg
[2013/02/24 16:43:16 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IUYTHG8.lnk
[2013/02/24 16:42:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IV0J1HI.jpg
[2013/02/24 16:37:26 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IV120UE.jpg
[2013/02/24 16:41:20 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IV3S1U7.jpg
[2013/02/24 16:40:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IVC7TVX.jpg
[2013/02/24 16:37:26 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IVDAEL4.jpg
[2013/02/24 16:37:26 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IVDUF9R.jpg
[2013/02/24 16:42:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IVFBNZU.jpg
[2013/02/24 16:43:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IVIAMDV.JPG
[2013/02/24 16:38:08 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IVJLDMK.jpg
[2013/02/24 16:42:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IVODXSN
[2013/02/24 16:39:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IVPKLLH.jpg
[2013/02/24 16:40:59 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IVWRRLJ.jpg
[2013/02/24 16:37:26 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IVYTKCN.jpg
[2013/02/24 16:41:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IVZH8YA.jpg
[2013/02/24 16:42:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IW42GOC.jpg
[2013/02/24 16:42:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IWF8BKK.jpg
[2013/02/24 16:42:23 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IWIB46O.jpg
[2013/02/24 15:44:28 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IWKS6PT.lnk
[2013/02/24 16:38:08 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IWLHDM3.jpg
[2013/02/24 16:39:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IWLSWEW.jpg
[2013/02/24 16:26:53 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IWRKI8V.jpeg
[2013/02/24 16:42:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IWWU4RB.jpg
[2013/02/03 22:32:08 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IWZGUES.lnk
[2013/02/24 16:42:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IX0ULPG.jpg
[2013/02/24 15:44:31 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IX5ZALU.lnk
[2013/02/24 16:42:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IX60NTS.jpg
[2013/02/24 16:42:23 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IX857AP.jpg
[2013/02/24 16:40:59 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IX9VLQK.jpg
[2013/02/24 16:42:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IXCTKNO.jpg
[2013/02/24 16:41:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IXDARPO.jpg
[2013/04/18 17:45:54 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IXFTK3L.db
[2013/02/24 16:41:20 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IXJMISO.jpg
[2013/02/24 16:43:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IXNQA0W.lnk
[2013/02/24 16:37:26 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IXPV3EQ.jpg
[2013/02/24 16:42:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IXUUN5W.jpg
[2013/02/24 16:42:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IXY02GL.jpg
[2013/02/24 16:40:59 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IY35JDL.jpg
[2013/02/24 16:42:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IY5GT7C.jpg
[2013/02/24 16:42:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IY6PHJO.jpg
[2013/02/24 16:42:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IYD4LUO.jpg
[2013/02/24 16:42:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IYI2687.jpg
[2013/02/24 16:40:59 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IYIY5LF.jpg
[2013/02/24 16:42:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IYM4Y2C.jpg
[2013/04/18 17:45:30 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IYOBVR5.Txt
[2013/02/24 16:42:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IYON8AK.jpg
[2013/04/17 18:58:14 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IYQXHM4.exe
[2013/02/24 16:42:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IYRAA7O.jpg
[2013/02/24 16:40:59 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IYUXOIF.jpg
[2013/02/24 16:42:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IYVP1X3.jpg
[2013/02/24 16:42:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IZ3EWL6.jpg
[2013/02/24 16:42:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IZ420Q4.jpg
[2013/02/24 16:40:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IZ64CAB.jpg
[2013/02/24 16:40:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IZ93CL7.jpg
[2013/02/24 16:42:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IZC8105.jpg
[2013/02/24 16:41:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IZCJRHZ.jpg
[2013/02/24 16:41:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IZCU1UF.jpg
[2013/02/24 16:39:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IZHW3H7.jpg
[2013/02/24 16:37:26 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IZLS1OH.jpg
[2013/02/24 16:42:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$IZRJH4K.jpg
[2012/06/27 20:29:04 | 001,604,168 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R06OZ1L.jpg
[2011/01/18 11:41:00 | 000,018,644 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R0B33K4.jpg
[2010/01/05 05:08:20 | 000,988,033 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R0H0TFL.JPG
[2011/07/06 23:18:14 | 001,614,326 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R0KKYEJ.jpg
[2013/04/18 00:20:25 | 000,002,515 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R0LI3WC.lnk
[2012/06/16 18:45:48 | 001,614,326 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R0QI9P1.jpg
[2011/03/10 10:52:42 | 001,515,441 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R0X4OZ7.jpg
[2011/03/09 15:33:22 | 001,638,306 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R1A5S7A.jpg
[2011/06/12 17:42:36 | 001,667,678 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R1DZHO1.jpg
[2011/01/18 11:40:54 | 000,019,525 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R1IFD59.jpg
[2011/01/18 11:41:00 | 000,012,808 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R1JSFTQ.jpg
[2013/04/18 00:20:25 | 000,002,619 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R1M0BO7.lnk
[2013/01/17 22:02:37 | 000,002,255 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R1M1J30.lnk
[2010/01/05 03:08:24 | 000,863,746 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R1TY2RA.JPG
[2011/03/12 12:44:02 | 001,597,724 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R1ZFKSH.jpg
[2011/01/11 21:02:14 | 001,378,605 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R2A3V5N.jpg
[2011/03/12 12:45:12 | 001,663,044 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R2JJ7WQ.jpg
[2011/03/11 13:55:30 | 001,306,833 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R2SN6FI.jpg
[2011/04/21 17:49:54 | 001,548,093 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R2YG2LR.jpg
[2011/06/12 17:42:58 | 001,533,888 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R30BFYC.jpg
[2011/03/11 14:57:18 | 001,647,581 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R36LNTY.jpg
[2010/01/05 04:08:30 | 001,111,384 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R3CVI29.JPG
[2010/12/25 14:38:08 | 001,411,523 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R3H065Y.jpg
[2012/02/26 20:45:20 | 001,512,393 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R3I8RBU.jpg
[2013/04/18 00:20:25 | 000,002,349 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R3LR4GI.lnk
[2013/04/18 00:20:26 | 000,002,515 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R3NWF8B.lnk
[2011/05/15 00:43:38 | 001,486,710 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R3O536G.jpg
[2011/12/24 21:41:24 | 001,387,187 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R3P4SUM.jpg
[2012/09/25 20:36:56 | 000,014,721 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R3U54GM.jpg
[2010/09/23 21:58:58 | 001,497,685 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R3UOSX2.jpg
[2012/09/25 20:36:54 | 001,610,771 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R3UW0HM.jpg
[2011/03/11 13:55:18 | 001,259,381 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R3YL96E.jpg
[2012/04/21 19:05:28 | 001,549,252 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R3ZRO8Q.jpg
[2011/06/12 17:39:48 | 001,395,981 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R41S8HB.jpg
[2011/01/18 11:40:58 | 000,013,848 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R42X430.jpg
[2013/04/18 00:20:26 | 000,002,515 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R4620J2.lnk
[2013/04/18 00:20:26 | 000,002,515 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R47S95U.lnk
[2011/01/18 11:40:56 | 000,015,469 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R4JCUY5.jpg
[2010/01/05 04:08:30 | 000,772,481 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R4L0SGU.JPG
[2010/12/17 16:36:08 | 001,645,497 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R4P2XHK.jpg
[2013/04/18 00:20:26 | 000,002,515 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R4VQ0US.lnk
[2011/07/07 18:48:02 | 001,471,598 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R53EU0M.jpg
[2011/05/07 16:15:50 | 001,163,502 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R5507HM.jpg
[2012/06/25 14:10:56 | 001,633,487 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R57VMD1.jpg
[2012/06/25 14:36:00 | 001,642,329 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R58WHEQ.jpg
[2013/04/18 00:20:26 | 000,002,515 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R59YZSQ.lnk
[2012/06/25 14:10:24 | 001,612,058 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R5MSAFD.jpg
[2011/06/12 17:41:02 | 001,649,688 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R5Z52JS.jpg
[2013/04/18 00:20:26 | 000,002,515 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R66D7Z6.lnk
[2011/05/07 16:10:54 | 000,934,126 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R67FA6D.jpg
[2013/04/18 00:20:26 | 000,002,515 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R6IX4ZO.lnk
[2013/04/18 00:20:27 | 000,002,515 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R6S8Q3G.lnk
[2011/12/24 21:39:52 | 001,509,256 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R6T229O.jpg
[2011/08/26 14:12:10 | 001,469,690 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R6U1YZ6.jpg
[2011/06/12 17:40:56 | 001,423,683 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R6WB8V3.jpg
[2011/11/12 00:49:22 | 001,660,833 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R6WE5M9.jpg
[2011/06/12 19:09:36 | 001,622,777 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R720B5M.jpg
[2012/02/19 17:02:44 | 001,407,883 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R7573HQ.jpg
[2011/01/18 11:40:58 | 000,014,517 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R795ALE.jpg
[2010/01/05 05:08:16 | 000,947,227 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R79IK51.JPG
[2013/04/18 00:20:27 | 000,002,349 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R7E044N.lnk
[2013/04/18 00:20:27 | 000,002,515 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R7F9GQA.lnk
[2012/06/27 20:30:00 | 001,558,148 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R7FRC7F.jpg
[2012/01/22 18:42:16 | 001,501,758 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R7JRVDF.jpg
[2013/04/18 00:20:27 | 000,002,515 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R7LYWFY.lnk
[2012/11/02 17:25:50 | 001,393,824 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R7OWUMM.jpg
[2011/06/12 17:40:22 | 001,334,423 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R7P4YTI.jpg
[2011/11/19 16:52:42 | 001,245,012 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R7TFYV1.jpg
[2013/04/18 00:20:27 | 000,002,515 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R7W9UD9.lnk
[2012/02/19 17:02:26 | 001,492,572 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R846ZK6.jpg
[2010/12/17 16:35:40 | 001,618,255 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R8AS4KG.jpg
[2011/01/18 11:41:00 | 000,015,083 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R8D2VW8.jpg
[2011/12/02 21:09:14 | 001,409,196 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R8GJK5C.jpg
[2013/04/18 00:20:27 | 000,002,515 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R8JG5O5.lnk
[2012/09/25 20:37:28 | 001,560,016 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R8JQ9IX.jpg
[2011/06/12 19:09:18 | 001,478,061 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R8N8ZR2.jpg
[2012/06/16 18:49:48 | 001,657,707 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R8P5J8P.jpg
[2011/01/13 11:50:06 | 001,521,966 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R8XR2SN.jpg
[2012/11/01 16:41:12 | 001,638,837 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R8XV4LC.jpg
[2011/06/25 17:22:30 | 001,636,185 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R93E8Y2.jpg
[2012/06/25 14:37:00 | 001,476,472 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R947392.jpg
[2011/05/29 22:39:46 | 001,600,563 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R95SVPW.jpg
[2010/09/01 22:31:40 | 001,538,790 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R97MSP8.jpg
[2013/04/18 00:20:27 | 000,002,369 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R9DMBBF.lnk
[2010/10/26 16:26:46 | 001,631,221 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R9WU8PI.jpg
[2013/04/18 00:20:27 | 000,002,515 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R9YTDV5.lnk
[2010/01/05 07:08:08 | 001,007,100 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RA1MN5E.JPG
[2011/01/25 19:58:18 | 001,552,748 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RA6G6IZ.jpg
[2013/04/18 00:20:27 | 000,002,515 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RAAVW9M.lnk
[2012/06/27 20:28:26 | 001,583,412 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RADRH4N.jpg
[2012/01/08 12:37:04 | 001,547,763 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RAFZNNE.jpg
[2011/12/02 21:08:10 | 001,337,169 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RAJNMIZ.jpg
[2011/07/06 18:23:14 | 001,487,929 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RAKLEIS.jpg
[2013/04/18 00:20:27 | 000,002,515 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RAL0ETU.lnk
[2011/11/12 00:49:58 | 001,396,608 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RAPVC5H.jpg
[2011/12/26 14:30:42 | 001,510,722 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RBBJP5H.jpg
[2011/07/11 22:10:46 | 001,430,179 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RBEQ40H.jpg
[2011/06/12 17:39:10 | 001,425,719 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RBIXTIS.jpg
[2013/04/18 00:20:27 | 000,002,515 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RBJN79L.lnk
[2011/06/12 17:43:56 | 001,669,397 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RBJVDKR.jpg
[2011/07/06 18:26:30 | 001,567,317 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RBNGTGH.jpg
[2011/12/26 14:30:32 | 001,612,294 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RBNSQ4A.jpg
[2011/03/03 22:22:48 | 001,516,878 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RBS71QQ.jpg
[2011/03/10 02:02:36 | 001,625,127 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RBS76JK.jpg
[2012/09/25 20:37:28 | 000,012,094 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RBS9XXP.jpg
[2012/11/02 17:24:48 | 001,585,816 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RBT4WDJ.jpg
[2011/06/12 17:42:48 | 001,612,651 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RBUUSZR.jpg
[2013/04/18 00:20:27 | 000,002,515 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RBWWGGH.lnk
[2012/06/16 18:51:04 | 001,575,091 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RBX02ZD.jpg
[2011/07/06 18:22:12 | 001,477,043 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RC44ZJ2.jpg
[2011/06/12 17:39:30 | 001,363,992 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RCA56NM.jpg
[2010/09/10 19:59:34 | 000,040,418 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RCFL1CU.jpg
[2011/07/07 18:47:52 | 001,394,803 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RCJG5EC.jpg
[2011/07/07 18:49:14 | 001,565,502 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RCKIJ2U.jpg
[2011/05/07 16:07:18 | 000,098,542 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RCV9V35.jpg
[2013/01/25 23:21:01 | 000,000,544 | -HS- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RCZX0MQ.ini
[2011/03/11 17:00:18 | 001,631,091 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RD2WUSA.jpg
[2011/07/07 18:45:46 | 001,532,726 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RDADS1B.jpg
[2012/07/22 21:52:24 | 001,516,741 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RDF8IVQ.jpg
[2012/11/02 17:27:24 | 001,547,616 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RDJK73R.jpg
[2012/03/26 11:27:06 | 001,633,128 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RDJX3LB.jpg
[2012/06/27 20:29:26 | 001,535,350 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RDKQ3G7.jpg
[2013/04/18 00:20:28 | 000,002,515 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RDL9TXO.lnk
[2011/07/07 18:44:04 | 001,537,058 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RDQ4AOD.jpg
[2013/04/18 00:20:28 | 000,002,515 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RDREGKA.lnk
[2013/04/18 00:20:28 | 000,002,515 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RDTLZCE.lnk
[2012/11/02 17:26:26 | 001,427,101 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RDXGPZF.jpg
[2011/01/25 19:56:32 | 001,513,446 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RDXPFDX.jpg
[2011/07/06 18:26:48 | 001,546,969 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RDXVC37.jpg
[2013/04/18 00:20:28 | 000,002,369 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RDYY7PG.lnk
[2011/07/07 21:29:14 | 001,490,546 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RE3GWWB.jpg
[2011/06/12 17:44:52 | 001,406,241 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RE4GHU7.jpg
[2011/12/24 21:39:30 | 001,547,699 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RE4LANS.jpg
[2013/04/18 00:20:28 | 000,002,515 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RECQI50.lnk
[2011/04/21 17:49:24 | 001,651,553 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$REP2641.jpg
[2011/07/06 18:22:40 | 001,337,675 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$REQVWNK.jpg
[2011/07/07 18:48:10 | 001,456,922 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RETA5YD.jpg
[2012/06/25 14:10:34 | 001,671,106 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$REYW3GS.jpg
[2010/12/03 20:53:14 | 001,523,103 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RF4OIRU.jpg
[2010/01/05 05:08:14 | 001,162,573 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RF5T949.JPG
[2013/04/18 00:20:28 | 000,002,515 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RF78DY1.lnk
[2010/01/05 04:08:26 | 000,555,729 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RF7ZZE8.JPG
[2010/09/01 21:32:48 | 001,513,484 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RFB47FQ.jpg
[2012/01/08 12:45:40 | 001,658,922 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RFC5RXW.jpg
[2011/02/05 13:17:30 | 001,611,175 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RFHTJIQ.jpg
[2011/03/11 17:03:04 | 000,571,309 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RFI88DH.jpg
[2011/03/11 16:57:56 | 001,613,868 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RFL46X1.jpg
[2011/07/06 18:21:46 | 001,352,748 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RFOYG2Y.jpg
[2011/06/12 17:39:18 | 001,386,554 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RFPLAZF.jpg
[2011/05/29 23:53:04 | 001,651,694 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RFVZABV.jpg
[2013/04/18 00:20:28 | 000,002,515 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RG0E20E.lnk
[2011/12/24 21:40:40 | 001,333,634 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RG88QLX.jpg
[2011/10/30 19:03:42 | 001,440,339 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RGARR6R.jpg
[2011/06/12 17:41:28 | 001,610,431 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RGB0NJ2.jpg
[2010/09/01 22:41:36 | 001,544,616 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RGBDVJ2.jpg
[2011/07/07 18:45:32 | 001,658,612 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RGCJPQ5.jpg
[2012/02/19 17:02:56 | 001,599,488 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RGIA1OE.jpg
[2013/04/18 00:20:28 | 000,002,515 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RGLRPZG.lnk
[2012/09/16 11:59:42 | 001,607,447 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RGMS60F.jpg
[2010/01/05 05:08:16 | 001,049,962 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RGPM6EZ.JPG
[2011/05/07 16:09:54 | 000,966,894 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RGV8FDW.jpg
[2012/06/27 20:30:40 | 001,501,903 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RGVWMT0.jpg
[2012/11/02 17:21:16 | 001,467,931 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RGYYV9T.jpg
[2013/04/18 00:20:29 | 000,002,515 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RH05XJ3.lnk
[2012/11/02 17:24:26 | 001,587,172 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RH652YB.jpg
[2013/04/18 00:20:29 | 000,002,515 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RHACGBH.lnk
[2010/01/05 03:08:24 | 000,714,803 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RHCMJMX.JPG
[2010/12/03 20:51:24 | 001,584,951 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RHDJASS.jpg
[2011/07/11 00:44:06 | 001,438,966 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RHE6IPR.jpg
[2010/01/05 04:08:26 | 000,486,957 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RHGY2SB.JPG
[2011/07/07 21:23:06 | 001,474,571 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RHKFRH7.jpg
[2010/01/05 06:08:12 | 001,035,945 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RHKKF5W.JPG
[2012/06/16 18:48:40 | 001,644,337 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RHKL3Y8.jpg
[2013/04/18 00:20:29 | 000,002,515 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RI0527L.lnk
[2011/03/11 17:02:50 | 001,643,474 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RI3VJD3.jpg
[2012/06/16 18:47:58 | 001,614,828 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RI742GX.jpg
[2011/06/12 19:09:26 | 001,460,137 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RIBESOI.jpg
[2011/12/02 20:57:18 | 001,539,950 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RICFIPI.jpg
[2013/04/18 00:20:29 | 000,002,515 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RIGEHQT.lnk
[2013/04/18 00:20:29 | 000,002,515 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RIJ766Z.lnk
[2011/06/12 17:38:46 | 001,663,072 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RIR09JN.jpg
[2011/07/06 23:23:34 | 001,618,214 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RIR4JLD.jpg
[2011/03/09 18:23:44 | 001,449,808 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RIS63I7.jpg
[2010/01/05 07:08:10 | 001,249,589 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RISFWZ3.JPG
[2012/06/16 18:50:52 | 001,640,756 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RJ0AH17.jpg
[2012/11/01 16:39:36 | 001,571,585 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RJ0GTU4.jpg
[2011/09/01 16:41:50 | 000,754,016 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RJ1W0B8.jpg
[2012/01/08 12:45:54 | 001,502,020 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RJ3GVHB.jpg
[2012/01/15 15:42:58 | 001,460,566 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RJ5SFL5.jpg
[2011/07/10 22:50:44 | 001,625,007 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RJ7OB00.jpg
[2011/03/11 13:56:08 | 001,450,064 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RJA48C5.jpg
[2011/10/06 18:19:50 | 001,605,325 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RJAUD52.jpg
[2011/10/30 19:02:48 | 001,515,351 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RJBL99L.jpg
[2011/07/11 22:10:30 | 001,651,424 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RJGB02B.jpg
[2011/01/25 19:56:02 | 001,526,258 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RJGEQTP.jpg
[2011/05/07 16:15:18 | 001,425,646 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RJKW8FU.jpg
[2011/07/06 18:16:48 | 001,515,865 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RJP6W0G.jpg
[2011/03/11 17:00:30 | 001,647,813 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RJPU5B5.jpg
[2011/12/24 21:39:06 | 001,516,909 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RJQ7NNH.jpg
[2010/01/05 03:08:22 | 000,760,599 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RJVWN91.JPG
[2011/07/10 22:51:18 | 001,406,995 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RJVX45L.jpg
[2013/04/18 14:02:01 | 000,592,120 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RJWG8OE.exe
[2011/07/06 18:20:00 | 001,444,126 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RK0F810.jpg
[2011/03/11 14:17:26 | 001,549,559 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RK1TJ5C.jpg
[2011/05/18 00:15:48 | 001,399,713 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RK6MWQ2.jpg
[2011/01/18 11:40:54 | 000,025,408 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RK98NOE.jpg
[2010/10/19 00:26:22 | 000,047,147 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RKB5PU6.jpg
[2011/07/08 15:19:44 | 001,660,704 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RKCRPUG.jpg
[2013/04/17 18:50:19 | 088,323,920 | ---- | M] (Apple Inc.) -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RKHWR6G.exe
[2011/07/06 18:19:44 | 001,365,409 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RKIFA0H.jpg
[2011/01/18 11:40:58 | 000,013,609 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RKQDBW2.jpg
[2011/05/07 16:07:14 | 000,098,542 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RKQDX9J.jpg
[2011/07/06 18:19:10 | 001,529,853 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RKU18RV.jpg
[2011/07/06 23:23:24 | 001,568,962 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RKW7JNQ.jpg
[2010/10/16 17:47:38 | 001,643,916 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RKX4Y8I.jpg
[2013/04/18 00:20:30 | 000,002,515 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RL55PKN.lnk
[2013/04/18 00:20:30 | 000,002,515 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RL5X9B4.lnk
[2011/06/25 17:21:20 | 001,556,533 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RLKH0RS.jpg
[2012/11/02 17:25:26 | 001,509,417 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RLXDDWD.jpg
[2010/10/26 16:27:34 | 001,566,395 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RM06X10.jpg
[2013/04/18 00:20:30 | 000,002,515 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RM1IXGA.lnk
[2010/10/26 16:25:58 | 001,419,253 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RM4RWCZ.jpg
[2012/11/20 20:50:20 | 001,575,279 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RM5V87A.jpg
[2011/01/18 11:40:54 | 000,018,731 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RM6VANY.jpg
[2011/09/06 15:35:30 | 000,014,858 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RMAZ7V3.jpg
[2012/11/02 17:24:36 | 001,477,811 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RMFXOEY.jpg
[2012/10/09 19:51:34 | 001,381,344 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RMLRCHX.jpg
[2010/01/05 02:08:36 | 000,654,043 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RMOVALQ.JPG
[2013/04/18 00:20:30 | 000,002,515 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RMSM9YF.lnk
[2011/01/18 11:40:52 | 000,016,488 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RN0TSGB.jpg
[2013/04/18 00:20:30 | 000,002,515 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RN1QOFI.lnk
[2012/11/01 16:42:10 | 001,617,983 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RN3T5S7.jpg
[2012/06/27 20:36:24 | 001,503,700 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RN5XQYF.jpg
[2013/04/18 16:22:01 | 000,127,166 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RNBV1IH.Txt
[2011/12/29 15:25:08 | 000,017,400 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RNCX1BN.jpg
[2011/07/06 18:16:58 | 001,473,665 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RND6NJV.jpg
[2013/04/18 00:20:30 | 000,002,515 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RNO3LEJ.lnk
[2011/03/10 12:09:24 | 001,642,641 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RNV08CN.jpg
[2011/01/11 20:59:22 | 001,513,289 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RNW0FVT.jpg
[2010/01/05 05:08:20 | 000,622,519 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RO2BVAO.JPG
[2010/10/26 16:25:36 | 001,518,427 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RO8HHV1.jpg
[2011/05/07 16:09:04 | 001,468,193 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$ROEV4DV.jpg
[2011/05/18 00:15:30 | 001,422,374 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$ROHSJAQ.jpg
[2012/06/16 18:47:18 | 001,582,213 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$ROHW2BH.jpg
[2011/07/10 22:50:24 | 001,651,942 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RON6B90.jpg
[2011/11/12 00:48:44 | 001,480,268 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$ROOTABK.jpg
[2013/04/17 18:54:53 | 000,002,073 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$ROS4XXE.lnk
[2011/07/06 23:20:46 | 001,572,078 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$ROXWOZ2.jpg
[2012/06/27 20:29:16 | 001,666,445 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RP9UB7C.jpg
[2012/01/22 17:59:50 | 001,562,629 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RPF7175.jpg
[2013/04/18 14:06:10 | 000,001,050 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RPKCJEB.lnk
[2012/11/02 17:25:00 | 001,493,241 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RPKMP8Z.jpg
[2012/06/16 18:46:34 | 001,567,533 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RPL8C5K.jpg
[2010/01/05 04:08:26 | 000,856,252 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RPO1L6O.JPG
[2010/01/05 04:08:36 | 000,579,359 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RPZSFWT.JPG
[2013/04/18 00:20:30 | 000,002,515 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RQ9Z9F8.lnk
[2012/02/22 20:29:50 | 001,561,022 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RQGEVI4.jpg
[2011/07/06 23:22:28 | 001,507,231 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RQK3C6W.jpg
[2011/06/12 17:42:30 | 001,638,073 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RQUBOI3.jpg
[2011/05/18 00:16:16 | 001,595,924 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RQVLPMD.jpg
[2011/03/11 14:56:36 | 001,654,670 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RQVYYEM.jpg
[2013/04/18 14:05:40 | 000,001,050 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RR3AGRU.lnk
[2011/07/07 21:24:50 | 001,632,189 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RR8BOVA.jpg
[2011/01/18 11:40:34 | 000,017,295 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RRASV72.jpg
[2011/07/07 18:46:02 | 001,613,958 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RRFYKWD.jpg
[2011/01/18 11:40:58 | 000,015,879 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RRJIM7E.jpg
[2012/06/27 20:28:54 | 001,642,076 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RRKHLE6.jpg
[2011/07/11 00:45:10 | 001,661,167 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RRN5Z7F.jpg
[2011/01/18 11:40:54 | 000,023,704 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RRPNN0F.jpg
[2011/07/06 18:21:36 | 001,449,166 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RRQ9KU1.jpg
[2011/07/07 18:48:38 | 001,590,300 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RRUAREP.jpg
[2010/12/03 20:52:26 | 001,550,207 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RSB6PGE.jpg
[2011/07/11 00:40:36 | 001,561,397 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RSBFB33.jpg
[2011/01/18 11:40:56 | 000,020,403 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RSE9JBW.jpg
[2013/04/18 14:07:15 | 000,001,201 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RSGDA30.lnk
[2012/01/22 18:01:00 | 001,584,683 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RSJX5KU.jpg
[2010/12/05 21:23:06 | 001,488,294 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RSK968U.jpg
[2011/06/12 17:40:46 | 001,504,267 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RSLS5BR.jpg
[2011/07/07 18:48:46 | 001,447,481 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RSU9AMZ.jpg
[2011/01/18 11:41:00 | 000,013,435 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RSY2RCM.jpg
[2010/01/05 05:08:16 | 000,947,227 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RT00F5S.JPG
[2012/11/02 17:23:54 | 001,500,124 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RT48N3A.jpg
[2010/10/26 16:26:32 | 001,670,961 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RT84YNR.jpg
[2011/06/12 17:39:42 | 001,461,926 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RTAL3MY.jpg
[2011/06/13 19:41:30 | 001,543,791 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RTJ8FTB.jpg
[2011/01/18 11:40:36 | 000,016,983 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RTK573K.jpg
[2011/07/11 00:41:48 | 001,483,126 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RTKAF1O.jpg
[2012/11/02 15:10:52 | 001,518,538 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RTRUX6D.jpg
[2011/06/02 21:05:46 | 001,551,165 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RTS30CL.jpg
[2010/01/05 05:08:18 | 001,144,801 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RTSOGHA.JPG
[2012/06/27 20:28:48 | 001,560,228 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RTUAKEQ.jpg
[2013/04/18 17:39:50 | 000,000,282 | -HS- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RTUFP8E.ini
[2013/04/18 00:20:31 | 000,002,515 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RTXFUD0.lnk
[2010/01/05 05:08:18 | 000,816,672 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RU1B55S.JPG
[2011/05/28 22:01:42 | 001,587,985 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RU26W73.jpg
[2011/12/29 15:25:08 | 000,016,856 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RU33M41.jpg
[2011/12/24 21:43:08 | 001,581,505 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RU3R1UQ.jpg
[2010/12/25 14:37:18 | 001,425,125 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RU3WJTB.jpg
[2012/01/22 18:42:40 | 001,548,010 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RU6PMMJ.jpg
[2010/01/05 04:08:30 | 000,678,687 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RUAJHSM.JPG
[2010/12/03 20:51:58 | 001,569,724 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RUAKSYV.jpg
[2010/11/10 15:01:20 | 000,000,008 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RUDAJG7.txt
[2013/04/18 00:20:31 | 000,002,515 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RUHN1AF.lnk
[2010/01/05 04:08:28 | 001,032,400 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RUIBG4N.JPG
[2011/07/07 21:29:36 | 001,444,083 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RUK64QT.jpg
[2013/04/18 00:20:31 | 000,002,515 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RUKGIPU.lnk
[2011/01/18 11:40:56 | 000,013,813 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RUQMB73.jpg
[2011/12/02 20:56:34 | 001,535,203 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RUY7TBW.jpg
[2013/04/18 00:20:31 | 000,002,515 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RUYTHG8.lnk
[2011/01/18 11:40:58 | 000,016,420 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RV0J1HI.jpg
[2010/12/06 20:34:16 | 001,532,643 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RV120UE.jpg
[2011/06/12 22:46:02 | 001,507,120 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RV3S1U7.jpg
[2011/03/11 14:57:40 | 001,635,629 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RVC7TVX.jpg
[2010/10/17 18:28:10 | 001,518,575 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RVDAEL4.jpg
[2011/01/11 20:57:56 | 001,520,122 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RVDUF9R.jpg
[2012/02/19 17:00:24 | 001,608,785 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RVFBNZU.jpg
[2010/01/05 02:08:36 | 000,021,632 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RVIAMDV.JPG
[2011/01/11 21:04:30 | 001,659,048 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RVJLDMK.jpg
[2011/06/12 17:40:40 | 001,451,855 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RVPKLLH.jpg
[2011/04/21 17:49:02 | 001,564,620 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RVWRRLJ.jpg
[2010/10/17 18:28:26 | 001,515,229 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RVYTKCN.jpg
[2011/05/18 00:16:34 | 001,433,797 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RVZH8YA.jpg
[2011/10/30 19:03:14 | 001,651,284 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RW42GOC.jpg
[2011/12/02 20:57:40 | 001,460,427 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RWF8BKK.jpg
[2011/07/07 18:45:00 | 001,572,735 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RWIB46O.jpg
[2013/04/18 00:20:32 | 000,002,515 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RWKS6PT.lnk
[2011/01/13 11:51:38 | 001,501,591 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RWLHDM3.jpg
[2011/05/29 22:39:56 | 001,517,714 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RWLSWEW.jpg
[2011/06/16 11:46:26 | 000,019,189 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RWRKI8V.jpeg
[2011/01/18 11:41:00 | 000,014,311 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RWWU4RB.jpg
[2012/08/17 11:03:16 | 000,002,096 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RWZGUES.lnk
[2012/11/01 16:38:44 | 001,509,205 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RX0ULPG.jpg
[2013/04/18 00:20:32 | 000,002,515 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RX5ZALU.lnk
[2012/01/08 12:45:26 | 001,501,621 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RX60NTS.jpg
[2011/07/06 18:20:28 | 001,503,308 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RX857AP.jpg
[2011/05/15 00:41:36 | 001,645,626 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RX9VLQK.jpg
[2011/01/18 11:40:56 | 000,016,429 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RXCTKNO.jpg
[2011/06/13 19:41:54 | 001,568,694 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RXDARPO.jpg
[2013/02/24 16:35:51 | 003,379,200 | -HS- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RXFTK3L.db
[2011/07/06 18:17:22 | 001,436,191 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RXJMISO.jpg
[2013/04/18 00:20:32 | 000,002,515 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RXNQA0W.lnk
[2010/12/06 20:35:00 | 001,382,536 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RXPV3EQ.jpg
[2012/11/02 17:23:16 | 001,574,505 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RXUUN5W.jpg
[2012/01/16 19:54:16 | 000,136,288 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RXY02GL.jpg
[2011/05/07 16:08:24 | 001,405,656 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RY35JDL.jpg
[2012/11/02 15:11:00 | 001,643,648 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RY5GT7C.jpg
[2011/01/18 11:40:54 | 000,022,361 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RY6PHJO.jpg
[2012/12/12 17:07:34 | 001,588,719 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RYD4LUO.jpg
[2011/01/18 11:41:00 | 000,018,062 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RYI2687.jpg
[2011/04/21 17:50:34 | 001,656,119 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RYIY5LF.jpg
[2012/02/19 17:01:00 | 001,484,594 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RYM4Y2C.jpg
[2013/04/18 16:22:47 | 000,073,508 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RYOBVR5.Txt
[2011/09/01 16:42:26 | 001,065,312 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RYON8AK.jpg
[2012/11/02 17:23:36 | 001,475,662 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RYRAA7O.jpg
[2011/05/15 00:43:14 | 001,543,819 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RYUXOIF.jpg
[2011/01/18 11:40:56 | 000,018,159 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RYVP1X3.jpg
[2011/07/07 21:29:26 | 001,554,748 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RZ3EWL6.jpg
[2012/06/27 20:31:02 | 001,564,459 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RZ420Q4.jpg
[2011/03/11 12:49:20 | 001,253,023 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RZ64CAB.jpg
[2011/03/05 18:58:10 | 001,393,432 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RZ93CL7.jpg
[2011/01/18 11:40:56 | 000,010,881 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RZC8105.jpg
[2011/06/12 19:08:38 | 001,502,795 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RZCJRHZ.jpg
[2011/06/12 17:44:46 | 001,519,885 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RZCU1UF.jpg
[2011/06/12 17:38:40 | 001,615,100 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RZHW3H7.jpg
[2010/12/03 20:52:42 | 001,649,427 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RZLS1OH.jpg
[2012/11/02 17:26:32 | 001,546,421 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RZRJH4K.jpg
[2012/12/25 14:26:09 | 000,000,129 | -HS- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\desktop.ini
[2013/02/24 16:38:26 | 001,805,312 | -HS- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R3Y6EV4\Thumbs.db
[2011/06/14 16:10:56 | 005,355,008 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R4RBN0A.android_secure\com.feelingtouch.bocce-1.asec
[2011/06/16 13:20:56 | 003,226,112 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R4RBN0A.android_secure\com.forthblue.pool-1.asec
[2011/08/08 00:26:48 | 010,677,248 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R4RBN0A.android_secure\com.guidedways.iQuran-1.asec
[2011/09/13 12:46:30 | 007,483,904 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R4RBN0A.android_secure\com.photo.picsineffects-1.asec
[2011/07/20 23:52:10 | 005,355,008 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R4RBN0A.android_secure\com.piviandco.fatbooth-1.asec
[2011/08/08 00:19:52 | 006,419,456 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R4RBN0A.android_secure\com.sancron.ringtones.sb.androidfunsb-2.asec
[2010/01/05 02:08:36 | 000,654,043 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R6S47DE\P081209_12.270001.JPG
[2010/01/05 02:08:36 | 000,021,632 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R6S47DE\P081209_12.280001.JPG
[2010/01/05 04:08:36 | 000,579,359 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R6S47DE\P081209_12.280002.JPG
[2010/01/05 04:08:30 | 000,678,687 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R6S47DE\P241209_19.220001.JPG
[2010/01/05 04:08:30 | 000,772,481 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R6S47DE\P241209_19.220002.JPG
[2010/01/05 04:08:30 | 001,111,384 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R6S47DE\P241209_19.230001.JPG
[2010/01/05 04:08:28 | 001,032,400 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R6S47DE\P241209_19.250001.JPG
[2010/01/05 04:08:26 | 000,555,729 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R6S47DE\P241209_20.410001.JPG
[2010/01/05 04:08:26 | 000,486,957 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R6S47DE\P241209_20.420001.JPG
[2010/01/05 04:08:26 | 000,856,252 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R6S47DE\P251209_00.560001.JPG
[2010/01/05 03:08:24 | 000,863,746 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R6S47DE\P251209_00.580001.JPG
[2010/01/05 03:08:24 | 000,714,803 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R6S47DE\P251209_01.030001.JPG
[2010/01/05 03:08:22 | 000,760,599 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R6S47DE\P251209_01.040001.JPG
[2010/01/05 05:08:20 | 000,622,519 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R6S47DE\P251209_01.070002.JPG
[2010/01/05 05:08:20 | 000,988,033 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R6S47DE\P311209_10.290001.JPG
[2010/01/05 05:08:18 | 000,816,672 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R6S47DE\P311209_20.300001.JPG
[2010/01/05 05:08:18 | 001,144,801 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R6S47DE\P311209_20.310001.JPG
[2010/01/05 05:08:16 | 001,049,962 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R6S47DE\P311209_20.320001.JPG
[2010/01/05 05:08:14 | 001,162,573 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R6S47DE\P311209_20.330001.JPG
[2010/01/05 06:08:12 | 001,035,945 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R6S47DE\P311209_20.340001.JPG
[2010/01/05 07:08:10 | 001,249,589 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R6S47DE\P311209_20.350001.JPG
[2010/09/10 19:59:34 | 000,040,418 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R6S47DE\P311209_20.370001-1.jpg
[2010/01/05 07:08:08 | 001,007,100 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R6S47DE\P311209_20.370001.JPG
[2013/02/24 15:47:38 | 000,181,248 | -HS- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$R6S47DE\Thumbs.db
[2011/09/06 15:29:42 | 000,015,905 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RDKV9X1\1315312182747.jpg
[2011/09/06 15:29:46 | 000,019,229 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RDKV9X1\1315312187434.jpg
[2011/09/06 15:29:48 | 000,021,164 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RDKV9X1\1315312188753.jpg
[2010/01/05 02:08:36 | 000,654,043 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RH6GFCZ\P081209_12.270001.JPG
[2010/01/05 02:08:36 | 000,021,632 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RH6GFCZ\P081209_12.280001.JPG
[2010/01/05 04:08:36 | 000,579,359 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RH6GFCZ\P081209_12.280002.JPG
[2010/01/05 04:08:30 | 000,678,687 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RH6GFCZ\P241209_19.220001.JPG
[2010/01/05 04:08:30 | 000,772,481 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RH6GFCZ\P241209_19.220002.JPG
[2010/01/05 04:08:30 | 001,111,384 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RH6GFCZ\P241209_19.230001.JPG
[2010/01/05 04:08:28 | 001,032,400 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RH6GFCZ\P241209_19.250001.JPG
[2010/01/05 04:08:26 | 000,555,729 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RH6GFCZ\P241209_20.410001.JPG
[2010/01/05 04:08:26 | 000,486,957 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RH6GFCZ\P241209_20.420001.JPG
[2010/01/05 04:08:26 | 000,856,252 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RH6GFCZ\P251209_00.560001.JPG
[2010/01/05 03:08:24 | 000,863,746 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RH6GFCZ\P251209_00.580001.JPG
[2010/01/05 03:08:24 | 000,714,803 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RH6GFCZ\P251209_01.030001.JPG
[2010/01/05 03:08:22 | 000,760,599 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RH6GFCZ\P251209_01.040001.JPG
[2010/01/05 05:08:20 | 000,622,519 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RH6GFCZ\P251209_01.070002.JPG
[2010/01/05 05:08:20 | 000,988,033 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RH6GFCZ\P311209_10.290001.JPG
[2010/01/05 05:08:18 | 000,816,672 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RH6GFCZ\P311209_20.300001.JPG
[2010/01/05 05:08:18 | 001,144,801 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RH6GFCZ\P311209_20.310001.JPG
[2010/01/05 05:08:16 | 000,947,227 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RH6GFCZ\P311209_20.310002.JPG
[2010/01/05 05:08:16 | 001,049,962 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RH6GFCZ\P311209_20.320001.JPG
[2010/01/05 05:08:14 | 001,162,573 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RH6GFCZ\P311209_20.330001.JPG
[2010/01/05 06:08:12 | 001,035,945 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RH6GFCZ\P311209_20.340001.JPG
[2010/01/05 07:08:10 | 001,249,589 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RH6GFCZ\P311209_20.350001.JPG
[2010/09/10 19:59:34 | 000,040,418 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RH6GFCZ\P311209_20.370001-1.jpg
[2010/01/05 07:08:08 | 001,007,100 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RH6GFCZ\P311209_20.370001.JPG
[2013/02/24 15:47:38 | 000,140,288 | -HS- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RH6GFCZ\Thumbs.db
[2011/09/06 15:29:18 | 000,015,831 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RVODXSN\1315312158467.jpg
[2011/09/06 15:29:18 | 000,014,613 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RVODXSN\1315312159810.jpg
[2011/09/06 15:29:20 | 000,020,028 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RVODXSN\1315312161070.jpg
[2011/09/06 15:29:20 | 000,013,638 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RVODXSN\1315312161888.jpg
[2011/09/06 15:29:22 | 000,016,515 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RVODXSN\1315312162295.jpg
[2011/09/06 15:29:24 | 000,016,949 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RVODXSN\1315312163392.jpg
[2011/09/06 15:29:24 | 000,017,040 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RVODXSN\1315312164758.jpg
[2011/09/06 15:29:24 | 000,012,097 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RVODXSN\1315312165069.jpg
[2011/09/06 15:29:24 | 000,011,302 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RVODXSN\1315312165750.jpg
[2011/09/06 15:29:26 | 000,013,136 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RVODXSN\1315312166298.jpg
[2011/09/06 15:29:26 | 000,012,003 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RVODXSN\1315312166897.jpg
[2011/09/06 15:29:32 | 000,022,118 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RVODXSN\1315312172795.jpg
[2011/09/06 15:29:34 | 000,027,855 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RVODXSN\1315312174817.jpg
[2011/09/06 15:29:34 | 000,031,531 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RVODXSN\1315312175496.jpg
[2011/09/06 15:29:36 | 000,029,172 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RVODXSN\1315312175999.jpg
[2011/09/06 15:29:36 | 000,026,990 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RVODXSN\1315312176360.jpg
[2011/09/06 15:29:36 | 000,029,119 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RVODXSN\1315312176733.jpg
[2011/09/06 15:29:36 | 000,024,702 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RVODXSN\1315312177283.jpg
[2011/09/06 15:29:36 | 000,017,486 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RVODXSN\1315312177681.jpg
[2011/09/06 15:29:38 | 000,006,924 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RVODXSN\1315312178438.jpg
[2011/09/06 15:29:40 | 000,017,549 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RVODXSN\1315312180041.jpg
[2011/09/06 15:29:40 | 000,019,740 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RVODXSN\1315312181832.jpg
[2012/01/08 12:37:06 | 000,019,694 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RVODXSN\1326019024579.jpg
[2012/01/08 12:45:26 | 000,014,769 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RVODXSN\1326019527364.jpg
[2012/01/08 12:45:40 | 000,015,787 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RVODXSN\1326019541137.jpg
[2012/01/08 12:45:54 | 000,014,185 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3415397648-856074723-2709772848-1003\$RVODXSN\1326019555439.jpg
[2012/09/08 06:00:56 | 000,000,129 | -HS- | M] () -- c:\$recycle.bin\S-1-5-21-4218114364-65245570-438109958-500\desktop.ini
[2012/08/17 10:35:36 | 000,000,129 | -HS- | M] () -- c:\$recycle.bin\S-1-5-21-938401061-1020335973-684465270-500\desktop.ini
[2012/07/26 09:22:10 | 000,000,006 | -H-- | C] () -- C:\Windows\Tasks\SA.DAT
[2012/12/27 18:34:08 | 000,001,106 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
[2012/12/27 18:34:10 | 000,001,110 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
[2013/01/10 20:26:23 | 000,000,398 | ---- | C] () -- C:\Windows\Tasks\HPCeeScheduleForfarouketnathalie.job
[2013/01/28 17:04:37 | 000,001,002 | ---- | C] () -- C:\Windows\Tasks\Adobe Flash Player Updater.job
[2013/04/17 19:19:59 | 000,000,432 | ---- | C] () -- C:\Windows\Tasks\Happy Lyrics Update.job

[color=#E56717]========== Alternate Data Streams ==========[/color]

@Alternate Data Stream - 144 bytes -> C:\ProgramData\Temp:373E1720

< End of report >

Publicité


Signaler le contenu de ce document

Publicité