I have a Macbook running Windows 7 with boot camp. My computer basically slows to a halt from the time I log in. I'm currently running my computer on safe mode with networking. When I ran msconfig under safe mode and looked at the Startup programs, I noticed an unknown program called "vbkocntl". The name screams virus. The command line location is listed as "C:\Users\XXXX~1.XXX\AppData\Local\Temp\woykwbygy\xdahkoexsik.exe" The X's represent the four characters of my first name and the first three characters of my last name. It seems to be an alternative folder for my user profile. Anyway, I tried to navigate to this location to delete what seemed certain to be the virus in question. However, the woykwbygy folder doesn't exist. I have the "show hidden files, folders, and drivers option turned on in my Folder Options settings. I'm guessing the virus found a way to hide its existence. Doing a google search on the gibberish names brought up no results, so I'm guessing the virus randomizes the characters in its name.
Enough rambling. Is there any way I can find and delete this file?
Some contextual information: my computer first started having problems when I tried to install USB cable of a HP Photosmart printer so that my computer could recognize it. The drivers initially failed to install, but when I uninstalled the printer drivers and reinstalled the drivers, the installation of the USB cable was successful. I then downloaded the printer installation files so that I could print, instead of using the installation CD. I've spent a bit of time trying to update my drivers since the "System" process was running at high CPU (see below), and I believe that process handles at least some of the drivers.
In addition, the computer is running at 100% CPU and almost 100% memory. Two programs seemed to cause the problem: "System", described as the "NT Kernel and System"; and services.exe, which was using over 1GB of RAM. I downloaded Program Manager to try to uncover more details about these processes, but now my computer is so slow on normal mode that I can't even start Program Manager. I doubt these processes are the problem, but maybe this information could help.
Here is the information requested (Hijack This, etc.):
Hijack This:
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 6:26:35 AM, on 1/1/2001
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16457)
Boot mode: Safe mode with network support
Running processes:
C:\Windows\Explorer.EXE
C:\Windows\system32\ctfmon.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe
C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Users\eric.falley\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
C:\Users\eric.falley\Downloads\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://my.oc.edu
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton Internet Security\Engine\19.9.0.9\coIEPlg.dll
O2 - BHO: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton Internet Security\Engine\19.9.0.9\IPS\IPSBHO.DLL
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Internet Security\Engine\19.9.0.9\coIEPlg.dll
O4 - HKLM\..\Run: [Sophos AutoUpdate Monitor] C:\Program Files\Sophos\AutoUpdate\almon.exe
O4 - HKLM\..\Run: [Apple_KbdMgr] C:\Program Files\Boot Camp\KbdMgr.exe
O4 - HKCU\..\Run: [Google Update] "C:\Users\eric.falley\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: (no name) - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - (no file)
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: *.oc.edu
O15 - Trusted Zone: *.oc.edu (HKLM)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = oc.edu
O17 - HKLM\Software\..\Telephony: DomainName = oc.edu
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = oc.edu
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = oc.edu
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O20 - AppInit_DLLs: C:\PROGRA~1\Sophos\SOPHOS~1\SOPHOS~1.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Apple OS Switch Manager (AppleOSSMgr) - Unknown owner - C:\Windows\system32\AppleOSSMgr.exe
O23 - Service: Apple Time Service (AppleTimeSrv) - Apple Inc. - C:\Windows\system32\AppleTimeSrv.exe
O23 - Service: Bradford Persistent Agent Service (BNPagent) - Bradford Networks - C:\Program Files\Bradford Networks\Persistent Agent\bndaemon.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: Norton Internet Security (NIS) - Symantec Corporation - C:\Program Files\Norton Internet Security\Engine\19.9.0.9\ccSvcHst.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: Sophos Anti-Virus status reporter (SAVAdminService) - Sophos Limited - C:\Program Files\Sophos\Sophos Anti-Virus\SAVAdminService.exe
O23 - Service: Sophos Anti-Virus (SAVService) - Sophos Limited - C:\Program Files\Sophos\Sophos Anti-Virus\SavService.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: Sophos Agent - Sophos Limited - C:\Program Files\Sophos\Remote Management System\ManagementAgentNT.exe
O23 - Service: Sophos AutoUpdate Service - Sophos Limited - C:\Program Files\Sophos\AutoUpdate\ALsvc.exe
O23 - Service: Sophos Message Router - Sophos Limited - C:\Program Files\Sophos\Remote Management System\RouterNT.exe
O23 - Service: Sophos Web Control Service - Sophos Limited - C:\Program Files\Sophos\Sophos Anti-Virus\Web Control\swc_service.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: Sophos Web Intelligence Service (swi_service) - Sophos Limited - C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\swi_service.exe
O23 - Service: Sophos Web Intelligence Update (swi_update) - Sophos Limited - C:\ProgramData\Sophos\Web Intelligence\swi_update.exe
--
End of file - 7696 bytes
DDS.txt
DDS (Ver_2012-11-20.01) - NTFS_x86 NETWORK
Internet Explorer: 9.0.8112.16457
Run by eric.falley at 6:26:54 on 2001-01-01
Microsoft Windows 7 Enterprise 6.1.7601.1.1252.1.1033.18.1767.937 [GMT -7:00]
.
AV: Sophos Anti-Virus *Enabled/Updated* {65FBD860-96D8-75EF-C7ED-7BE27E6C498A}
AV: Norton Internet Security *Disabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Sophos Anti-Virus *Enabled/Updated* {DE9A3984-B0E2-7A61-FD5D-409005EB0337}
SP: Norton Internet Security *Disabled/Updated* {D8BEB080-B73A-17E3-1B37-B6B462689202}
FW: Norton Internet Security *Disabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}
.
============== Running Processes ================
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Program Files\Sophos\Sophos Anti-Virus\SavService.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\ctfmon.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe
C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Users\eric.falley\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Users\eric.falley\Downloads\HijackThis.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\conhost.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k secsvcs
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://my.oc.edu
uProxyOverride = <local>;*.local
BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: Norton Identity Protection: {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - c:\program files\norton internet security\engine\19.9.0.9\coieplg.dll
BHO: Norton Vulnerability Protection: {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - c:\program files\norton internet security\engine\19.9.0.9\ips\ipsbho.dll
BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - c:\program files\java\jre6\bin\jp2ssv.dll
TB: Norton Toolbar: {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - c:\program files\norton internet security\engine\19.9.0.9\coieplg.dll
uRun: [Google Update] "c:\users\eric.falley\appdata\local\google\update\GoogleUpdate.exe" /c
mRun: [Sophos AutoUpdate Monitor] c:\program files\sophos\autoupdate\almon.exe
mRun: [Apple_KbdMgr] c:\program files\boot camp\KbdMgr.exe
uPolicies-Explorer: NoDriveTypeAutoRun = dword:145
mPolicies-System: ConsentPromptBehaviorAdmin = dword:5
mPolicies-System: ConsentPromptBehaviorUser = dword:3
mPolicies-System: EnableUIADesktopToggle = dword:0
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\program files\microsoft office\office12\ONBttnIE.dll
Trusted Zone: oc.edu
Trusted Zone: oc.edu
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab
TCP: NameServer = 192.168.0.1 205.171.3.25
TCP: Interfaces\{440CAAB8-24A1-4381-8F00-24D740264C63} : DHCPNameServer = 192.168.0.1 205.171.3.25
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\program files\common files\skype\Skype4COM.dll
Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - c:\program files\windows live\photo gallery\AlbumDownloadProtocolHandler.dll
AppInit_DLLs= c:\progra~1\sophos\sophos~1\SOPHOS~1.DLL
SSODL: WebCheck - <orphaned>
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\users\eric.falley\appdata\roaming\mozilla\firefox\profiles\8bmvn7l7.defa ult\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - file:///C:/HTML/Home%20Timer.html
FF - prefs.js: network.proxy.type - 0
FF - component: c:\program files\avg\avg10\firefox4\components\avgssff4.dll
FF - component: c:\users\eric.falley\appdata\roaming\mozilla\firefox\profiles\8bmvn7l7.defa ult\extensions\engine@conduit.com\components\RadioWMPCoreGecko19.dll
FF - plugin: c:\progra~1\meadco~1\npmeadax.dll
FF - plugin: c:\program files\adobe\reader 10.0\reader\air\nppdf32.dll
FF - plugin: c:\program files\amazon\mp3 downloader\npAmazonMP3DownloaderPlugin.dll
FF - plugin: c:\program files\google\google earth\plugin\npgeplugin.dll
FF - plugin: c:\program files\google\update\1.3.21.123\npGoogleUpdate3.dll
FF - plugin: c:\program files\java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: c:\program files\microsoft silverlight\4.1.10329.0\npctrlui.dll
FF - plugin: c:\program files\microsoft\office live\npOLW.dll
FF - plugin: c:\program files\windows live\photo gallery\NPWLPG.dll
FF - plugin: c:\users\eric.falley\appdata\local\google\update\1.3.21.123\npGoogleUpdate3 .dll
FF - plugin: c:\users\eric.falley\appdata\roaming\mozilla\plugins\npgoogletalk.dll
FF - plugin: c:\users\eric.falley\appdata\roaming\mozilla\plugins\npgtpo3dautoplugin.dll
FF - plugin: c:\windows\system32\macromed\flash\NPSWF32_11_5_502_135.dll
FF - ExtSQL: 2010-12-16 02:04; engine@conduit.com; c:\users\eric.falley\appdata\roaming\mozilla\firefox\profiles\8bmvn7l7.defa ult\extensions\engine@conduit.com
FF - ExtSQL: 2011-05-24 23:06; {1280606b-2510-4fe0-97ef-9b5a22eafe30}; c:\users\eric.falley\appdata\roaming\mozilla\firefox\profiles\8bmvn7l7.defa ult\extensions\{1280606b-2510-4fe0-97ef-9b5a22eafe30}.xpi
FF - ExtSQL: 2012-03-31 20:26; firebug@software.joehewitt.com; c:\users\eric.falley\appdata\roaming\mozilla\firefox\profiles\8bmvn7l7.defa ult\extensions\firebug@software.joehewitt.com.xpi
FF - ExtSQL: 2012-06-23 19:51; {BBDA0591-3099-440a-AA10-41764D9DB4DB}; c:\programdata\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\nis_19.1.0.28\IPSFFPlgn
FF - ExtSQL: 2012-06-23 22:29; {2D3F3651-74B9-4795-BDEC-6DA2F431CB62}; c:\programdata\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\nis_19.1.0.28\coFFPlgn
.
============= SERVICES / DRIVERS ===============
.
R0 prl_pv32;prl_pv32;c:\windows\system32\drivers\prl_pv32.sys [2011-6-10 30024]
R0 SymDS;Symantec Data Store;c:\windows\system32\drivers\nis\1309000.009\symds.sys [2012-10-1 340088]
R0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\nis\1309000.009\symefa.sys [2012-10-1 924320]
R1 prl_boot;Parallels BootCamp Helper;c:\windows\system32\drivers\prl_boot.sys [2011-6-10 35016]
R2 SAVService;Sophos Anti-Virus;c:\program files\sophos\sophos anti-virus\SavService.exe [2012-7-29 139840]
R3 applemtm;Apple Multitouch Mouse;c:\windows\system32\drivers\applemtm.sys [2010-8-19 10496]
R3 applemtp;Apple Multitouch;c:\windows\system32\drivers\applemtp.sys [2010-8-19 29568]
R3 KeyMagic;USB Keyboard HID Filter;c:\windows\system32\drivers\KeyMagic.sys [2010-8-19 24064]
S1 BHDrvx86;BHDrvx86;c:\programdata\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\nis_19.1.0.28\definitions\bashdefs\20121130.005\BHDrvx86.sys [2012-12-3 995488]
S1 ccSet_NIS;Norton Internet Security Settings Manager;c:\windows\system32\drivers\nis\1309000.009\ccsetx86.sys [2012-10-1 132768]
S1 IDSVix86;IDSVix86;c:\programdata\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\nis_19.1.0.28\definitions\ipsdefs\20121215.001\IDSvix86.sys [2012-12-17 386720]
S1 SAVOnAccess;SAVOnAccess;c:\windows\system32\drivers\savonaccess.sys [2012-7-29 123680]
S1 SKMScan;SKMScan;c:\windows\system32\drivers\skmscan.sys [2012-7-29 31736]
S1 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\nis\1309000.009\ironx86.sys [2012-10-1 149624]
S1 SymNetS;Symantec Network Security WFP Driver;c:\windows\system32\drivers\nis\1309000.009\symnets.sys [2012-10-1 318584]
S2 AppleOSSMgr;Apple OS Switch Manager;c:\windows\system32\AppleOSSMgr.exe [2009-1-8 136496]
S2 AppleTimeSrv;Apple Time Service;c:\windows\system32\AppleTimeSrv.exe [2009-1-8 99632]
S2 BNPagent;Bradford Persistent Agent Service;c:\program files\bradford networks\persistent agent\bndaemon.exe [2009-11-1 3026656]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 KeyAgent;KeyAgent;c:\windows\system32\drivers\KeyAgent.sys [2009-1-8 5760]
S2 MacHALDriver;Mac HAL;c:\windows\system32\drivers\MacHALDriver.sys [2009-1-8 6784]
S2 NIS;Norton Internet Security;c:\program files\norton internet security\engine\19.9.0.9\ccsvchst.exe [2012-10-1 138272]
S2 SAVAdminService;Sophos Anti-Virus status reporter;c:\program files\sophos\sophos anti-virus\SAVAdminService.exe [2012-12-4 216640]
S2 SkypeUpdate;Skype Updater;c:\program files\skype\updater\Updater.exe [2012-7-13 160944]
S2 Sophos Agent;Sophos Agent;c:\program files\sophos\remote management system\ManagementAgentNT.exe [2012-9-17 289856]
S2 Sophos AutoUpdate Service;Sophos AutoUpdate Service;c:\program files\sophos\autoupdate\ALsvc.exe [2012-7-6 232512]
S2 Sophos Message Router;Sophos Message Router;c:\program files\sophos\remote management system\RouterNT.exe [2012-9-17 818240]
S2 Sophos Web Control Service;Sophos Web Control Service;c:\program files\sophos\sophos anti-virus\web control\swc_service.exe [2012-7-29 357400]
S2 swi_service;Sophos Web Intelligence Service;c:\program files\sophos\sophos anti-virus\web intelligence\swi_service.exe [2012-12-4 2869824]
S2 swi_update;Sophos Web Intelligence Update;c:\programdata\sophos\web intelligence\swi_update.exe [2012-7-29 1459264]
S3 AppleBtBc;Apple Broadcom Built-in Bluetooth;c:\windows\system32\drivers\AppleBtBc.sys [2010-8-19 18432]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2009-7-13 229888]
S3 CirrusFilter;CS420xLowerFilter;c:\windows\system32\drivers\CS420x86.sys [2010-8-19 13824]
S3 DrvAgent32;DrvAgent32;c:\windows\system32\drivers\DrvAgent32.sys [2000-12-31 23456]
S3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\common files\symantec shared\eengine\EraserUtilRebootDrv.sys [2012-9-19 106656]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2012-10-28 14848]
S3 SBFWIMCL;GFI Software Firewall NDIS IM Filter Service;c:\windows\system32\drivers\SbFwIm.sys [2012-6-23 94584]
S3 SBFWIMCLMP;GFI Software Firewall NDIS IM Filter Miniport;c:\windows\system32\drivers\SbFwIm.sys [2012-6-23 94584]
S3 sdcfilter;sdcfilter;c:\windows\system32\drivers\sdcfilter.sys [2012-7-29 33696]
S3 StorSvc;Storage Service;c:\windows\system32\svchost.exe -k LocalSystemNetworkRestricted [2009-7-13 20992]
S3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\TsUsbFlt.sys [2012-10-28 49664]
S4 SophosBootDriver;SophosBootDriver;c:\windows\system32\drivers\SophosBootDri ver.sys [2012-2-2 22536]
.
=============== File Associations ===============
.
FileExt: .txt: txtfile=c:\windows\system32\NOTEPAD.EXE %1 [UserChoice]
FileExt: .js: Applications\firefox.exe="c:\program files\mozilla firefox\firefox.exe" "%1" [UserChoice]
.
=============== Created Last 30 ================
.
2012-12-18 20:46:41 -------- d-----w- c:\users\eric.falley\appdata\roaming\HpUpdate
2012-12-18 20:44:45 -------- d-----w- c:\program files\HP
2012-12-18 20:35:34 -------- d-----w- c:\users\eric.falley\appdata\local\HP
2012-12-16 07:17:41 -------- d-----w- c:\program files\iPod
2012-12-16 07:17:30 -------- d-----w- c:\programdata\188F1432-103A-4ffb-80F1-36B633C5C9E1
2012-12-16 07:17:30 -------- d-----w- c:\program files\iTunes
2012-12-13 09:40:00 -------- d-----w- c:\windows\Migration
2012-12-13 09:19:53 2345984 ----a-w- c:\windows\system32\win32k.sys
2012-12-13 09:12:56 56320 ----a-w- c:\windows\system32\wbem\NCProv.dll
2012-12-13 09:11:15 34304 ----a-w- c:\windows\system32\atmlib.dll
2012-12-13 09:11:15 295424 ----a-w- c:\windows\system32\atmfd.dll
2012-12-13 09:09:00 2048 ----a-w- c:\windows\system32\tzres.dll
2012-12-12 20:54:18 6812136 ----a-w- c:\programdata\microsoft\windows defender\definition updates\{7a9408ab-8f5b-4309-82e9-064044d9265c}\mpengine.dll
2012-12-05 07:43:14 -------- d-----w- c:\users\eric.falley\.classicsonline
2012-12-05 07:42:43 -------- d-----w- c:\program files\ClassicsOnline
2012-12-04 14:26:55 -------- d-----w- c:\program files\common files\Sophos
2012-11-19 22:49:12 159744 ----a-w- c:\program files\internet explorer\plugins\npqtplugin7.dll
2012-11-19 22:49:12 159744 ----a-w- c:\program files\internet explorer\plugins\npqtplugin6.dll
2012-11-19 22:49:12 159744 ----a-w- c:\program files\internet explorer\plugins\npqtplugin5.dll
2012-11-19 22:49:12 159744 ----a-w- c:\program files\internet explorer\plugins\npqtplugin4.dll
2012-11-19 22:49:12 159744 ----a-w- c:\program files\internet explorer\plugins\npqtplugin3.dll
2012-11-19 22:49:12 159744 ----a-w- c:\program files\internet explorer\plugins\npqtplugin2.dll
2012-11-19 22:49:12 159744 ----a-w- c:\program files\internet explorer\plugins\npqtplugin.dll
2012-11-19 18:18:00 -------- d-----w- c:\users\eric.falley\appdata\local\{54DC3385-AD24-4F0E-94A7-746E00233CC3}
2012-11-18 08:12:33 -------- d-----w- c:\users\eric.falley\appdata\local\{DCD6F18E-C9B9-4898-9AA1-DD8775F02E13}
2012-11-17 19:51:38 -------- d-----w- c:\users\eric.falley\appdata\local\{69739972-F74B-4444-8C5D-A099207BF4A4}
2012-11-17 09:11:22 52224 ----a-w- c:\windows\system32\nlaapi.dll
2012-11-17 09:11:22 499712 ----a-w- c:\windows\system32\iphlpsvc.dll
2012-11-17 09:11:22 35328 ----a-w- c:\windows\system32\drivers\tcpipreg.sys
2012-11-17 09:11:22 242176 ----a-w- c:\windows\system32\nlasvc.dll
2012-11-17 09:11:22 18944 ----a-w- c:\windows\system32\netevent.dll
2012-11-17 09:11:22 175104 ----a-w- c:\windows\system32\netcorehc.dll
2012-11-17 09:11:22 156672 ----a-w- c:\windows\system32\ncsi.dll
2012-11-17 09:11:21 1293680 ----a-w- c:\windows\system32\drivers\tcpip.sys
2012-11-17 09:09:19 9728 ----a-w- c:\windows\system32\Wdfres.dll
2012-11-17 09:09:19 526952 ----a-w- c:\windows\system32\drivers\Wdf01000.sys
2012-11-17 09:09:19 47720 ----a-w- c:\windows\system32\drivers\WdfLdr.sys
2012-11-17 09:05:23 66560 ----a-w- c:\windows\system32\drivers\WUDFPf.sys
2012-11-17 09:05:23 155136 ----a-w- c:\windows\system32\drivers\WUDFRd.sys
2012-11-17 09:05:22 73216 ----a-w- c:\windows\system32\WUDFSvc.dll
2012-11-17 09:05:22 172032 ----a-w- c:\windows\system32\WUDFPlatform.dll
2012-11-17 09:05:21 613888 ----a-w- c:\windows\system32\WUDFx.dll
2012-11-17 09:05:21 38912 ----a-w- c:\windows\system32\WUDFCoinstaller.dll
2012-11-17 09:05:21 196608 ----a-w- c:\windows\system32\WUDFHost.exe
2012-11-17 09:05:07 78336 ----a-w- c:\windows\system32\synceng.dll
2012-11-17 09:03:50 44032 ----a-w- c:\windows\system32\dhcpcsvc6.dll
2012-11-17 09:03:50 193536 ----a-w- c:\windows\system32\dhcpcore6.dll
2012-11-17 02:11:36 -------- d-----w- c:\users\eric.falley\appdata\local\{A4CF1611-7572-491E-A36C-8871933102EC}
2012-11-16 14:11:25 -------- d-----w- c:\users\eric.falley\appdata\local\{8D075736-8031-4D3D-8ABF-FA0409CA1DB7}
2012-11-15 20:27:02 -------- d-----w- c:\users\eric.falley\appdata\local\{9273360D-6D1C-4412-A6D0-D7805F930AB5}
2012-11-14 17:46:23 -------- d-----w- c:\users\eric.falley\appdata\local\{3B974FE5-0C7C-42C8-A883-0612F358CF22}
2012-11-14 05:30:24 -------- d-----w- c:\users\eric.falley\appdata\local\{38211FDF-A419-4F5C-B46F-664D0BEFB6A8}
2012-11-10 15:54:22 -------- d-----w- c:\users\eric.falley\appdata\local\{DED16EF7-083C-4D33-A3BB-A8594D63362A}
2012-11-10 01:09:41 -------- d-----w- c:\users\eric.falley\appdata\local\{B7A8DE0C-440E-499D-91B0-C370B1E5341C}
2012-11-09 23:00:46 -------- d-----w- c:\users\eric.falley\appdata\local\{43B3AF28-24C1-44A6-AB3B-E272130571DC}
2012-11-09 19:51:06 -------- d-----w- c:\users\eric.falley\appdata\local\Apps
2012-11-08 13:31:09 -------- d-----w- c:\users\eric.falley\appdata\local\{CB5B3D39-2021-4CB8-B3BB-E930AB4F05B1}
2012-11-07 20:07:28 -------- d-----w- c:\users\eric.falley\appdata\local\{50ECEF58-79E6-47D6-98CD-4062AC3FFC7E}
2012-11-07 05:26:43 -------- d-----w- c:\users\eric.falley\appdata\local\{B8FE5BBA-622C-4022-83F4-2F041C3CEA15}
2012-11-04 03:05:22 -------- d-----w- c:\users\eric.falley\appdata\local\{772C2757-4314-4AAA-83A4-0AD71477CA7A}
2012-11-02 19:16:15 -------- d-----w- c:\users\eric.falley\appdata\local\{FB4D420D-3E66-4496-BAAD-84FB575E028D}
2012-11-01 17:25:22 -------- d-----w- c:\users\eric.falley\appdata\local\{1864E22A-DE34-4195-9C05-E484BACD1773}
2012-11-01 04:32:45 -------- d-----w- c:\users\eric.falley\appdata\local\{937AF2F6-1D74-4F62-BD59-F75BA42D00E6}
2012-10-31 16:32:28 -------- d-----w- c:\users\eric.falley\appdata\local\{0D1F595E-0A95-4AAF-A6D0-3C10381D7B27}
2012-10-31 03:28:05 -------- d-----w- c:\users\eric.falley\appdata\local\{8B9555A7-70FF-4C00-B793-45A529694F75}
2012-10-30 15:27:54 -------- d-----w- c:\users\eric.falley\appdata\local\{41A4C975-45D5-45C5-B47D-516A1370E636}
2012-10-30 03:27:40 -------- d-----w- c:\users\eric.falley\appdata\local\{F4368022-FDDB-4C9B-ACD7-553CE311A105}
2012-10-29 12:46:48 -------- d-----w- c:\users\eric.falley\appdata\local\{DD926AFF-2CED-46DD-B45F-3B0ED5C725EA}
2012-10-28 19:17:09 220160 ----a-w- c:\windows\system32\ncrypt.dll
2012-10-28 19:17:09 1039360 ----a-w- c:\windows\system32\lsasrv.dll
2012-10-28 19:17:05 369856 ----a-w- c:\windows\system32\drivers\cng.sys
2012-10-28 19:17:05 136560 ----a-w- c:\windows\system32\drivers\ksecpkg.sys
2012-10-28 19:17:03 247808 ----a-w- c:\windows\system32\schannel.dll
2012-10-28 19:15:00 -------- d-----w- c:\users\eric.falley\appdata\local\{C74358CE-9F4E-4A96-A7C2-775A9F66222C}
2012-10-28 05:24:36 -------- d-----w- c:\users\eric.falley\appdata\local\{1592BB8E-E968-45B2-8220-B78612257F5E}
2012-10-27 13:10:13 -------- d-----w- c:\users\eric.falley\appdata\local\{F76C70CA-D06A-4779-AD89-000571812A16}
2012-10-27 03:13:27 -------- d-----w- c:\users\eric.falley\appdata\local\Amazon
2012-10-25 09:12:26 94208 ----a-w- c:\windows\system32\QuickTimeVR.qtx
2012-10-25 09:12:26 69632 ----a-w- c:\windows\system32\QuickTime.qts
2012-10-24 05:22:24 -------- d-----w- c:\users\eric.falley\appdata\local\{71648364-D3B8-4F4C-922D-52A12557C33D}
2012-10-22 03:41:05 -------- d-----w- c:\users\eric.falley\appdata\local\{861F4FC0-A8A1-4AAF-9B20-6CA7171C0393}
2012-10-20 17:23:21 -------- d-----w- c:\users\eric.falley\appdata\local\{577DFB11-F4BC-41BC-AFDB-F6FE8BFA573D}
2012-10-20 01:52:07 -------- d-----w- c:\users\eric.falley\appdata\local\{B44C8D75-E9F7-4EC1-BB0D-65C088D2C91F}
2012-10-19 13:21:14 -------- d-----w- c:\users\eric.falley\appdata\local\{77DCFDA4-132E-442B-861E-580E6E339AEA}
2012-10-18 00:38:18 -------- d-----w- c:\users\eric.falley\appdata\local\{D63C1D7A-779C-408F-A936-92B3E887419E}
2012-10-17 12:37:50 -------- d-----w- c:\users\eric.falley\appdata\local\{DDC63698-9B40-4743-BB49-A161B9B0BC64}
2012-10-14 11:27:39 -------- d-----w- c:\users\eric.falley\appdata\local\{8E32792E-CBD6-4842-9063-8AD0A44FF996}
2012-10-13 23:19:09 -------- d-----w- c:\users\eric.falley\appdata\local\{9116085C-3CB3-4791-BAFF-2357AD05A4CB}
2012-10-13 19:05:56 172544 ----a-w- c:\windows\system32\wintrust.dll
2012-10-13 19:02:01 103936 ----a-w- c:\windows\system32\cryptnet.dll
2012-10-13 19:02:00 140288 ----a-w- c:\windows\system32\cryptsvc.dll
2012-10-13 19:02:00 1159680 ----a-w- c:\windows\system32\crypt32.dll
2012-10-13 19:01:26 1211760 ----a-w- c:\windows\system32\drivers\ntfs.sys
2012-10-13 18:55:34 542208 ----a-w- c:\windows\system32\kerberos.dll
2012-10-13 18:55:11 3968880 ----a-w- c:\windows\system32\ntkrnlpa.exe
2012-10-13 18:55:10 3914096 ----a-w- c:\windows\system32\ntoskrnl.exe
2012-10-13 18:44:31 -------- d-----w- c:\users\eric.falley\appdata\local\{FEA7039D-24C2-4A78-85D1-1A0202105D9C}
2012-10-11 16:08:14 -------- d-----w- c:\users\eric.falley\appdata\local\{2B14D9DC-DFE6-4D9B-9F09-2A3539731615}
2012-10-10 01:14:37 -------- d-----w- c:\users\eric.falley\appdata\local\{E584EE48-04EA-4B1D-88BF-78C22DFF9778}
2012-10-09 12:47:53 -------- d-----w- c:\users\eric.falley\appdata\local\{365784D2-C9A7-4426-8152-85C16AE77178}
2012-10-08 22:58:55 -------- d-----w- c:\users\eric.falley\appdata\local\{13E1D426-BE98-4DD5-B482-903EAAF1B93F}
2012-10-08 10:58:43 -------- d-----w- c:\users\eric.falley\appdata\local\{2904D33F-A35C-44C8-A50B-345820DF68E7}
2012-10-07 22:06:17 -------- d-----w- c:\users\eric.falley\appdata\local\{1E27E32D-8F04-4BDF-9157-A21C65D9B8F4}
2012-10-07 08:03:33 -------- d-----w- c:\users\eric.falley\appdata\local\{E7386D25-E895-497F-9653-5A86EEEF8FF3}
2012-10-06 20:19:06 -------- d-----w- C:\SP98
2012-10-06 19:58:21 209608 ----a-w- c:\windows\system32\TABCTL32.OCX
2012-10-06 19:57:43 212992 ----a-w- c:\program files\common files\installshield\engine\6\intel 32\ILog.dll
2012-10-06 19:09:30 -------- d-----w- c:\users\eric.falley\appdata\local\{98EB2C15-4BA9-4062-BE15-D0CCAD93F927}
2012-10-05 13:06:17 -------- d-----w- c:\users\eric.falley\appdata\local\{CB111915-742B-4A13-9C46-95328E89A368}
2012-10-04 23:05:48 -------- d-----w- c:\users\eric.falley\appdata\local\{28A93165-B8C4-4CF0-9E04-83BCCCA1A49B}
2012-10-04 08:45:12 -------- d-----w- c:\users\eric.falley\appdata\local\{6ECDA215-ED1F-4AD2-8355-E6F7EBC7EA8A}
2012-10-03 20:04:06 -------- d-----w- c:\users\eric.falley\appdata\local\{04AEF0FE-0B0C-47F8-90E2-4160B8697A19}
2012-10-03 05:46:28 -------- d-----w- c:\users\eric.falley\appdata\local\{F6D2D58C-DE82-4DEE-898C-45507D385002}
2012-10-02 02:44:59 924320 ----a-w- c:\windows\system32\drivers\nis\1309000.009\symefa.sys
2012-10-02 02:44:59 340088 ----a-r- c:\windows\system32\drivers\nis\1309000.009\symds.sys
2012-10-02 02:44:59 32928 ----a-w- c:\windows\system32\drivers\nis\1309000.009\srtspx.sys
2012-10-02 02:44:59 318584 ----a-w- c:\windows\system32\drivers\nis\1309000.009\symnets.sys
2012-10-02 02:44:58 574112 ----a-w- c:\windows\system32\drivers\nis\1309000.009\srtsp.sys
2012-10-02 02:44:58 149624 ----a-w- c:\windows\system32\drivers\nis\1309000.009\ironx86.sys
2012-10-02 02:44:58 132768 ----a-w- c:\windows\system32\drivers\nis\1309000.009\ccsetx86.sys
2012-10-02 02:44:29 8942 ----a-w- c:\windows\system32\drivers\nis\1309000.009\symvtcer.dat
2012-10-02 02:44:29 -------- d-----w- c:\windows\system32\drivers\nis\1309000.009
2012-10-02 01:50:58 -------- d-----w- c:\users\eric.falley\appdata\local\{1C66EB63-15F3-420A-8FFE-49EE96F156C3}
2012-10-02 01:41:44 -------- d-----w- c:\users\eric.falley\appdata\local\{0494EF0F-0BE1-4C9A-B6B4-2F0A953CDD97}
2012-09-30 14:59:13 -------- d-----w- c:\users\eric.falley\appdata\local\{90CBFBCB-67C0-47FA-8249-17B377AB2F3F}
2012-09-30 02:06:31 -------- d-----w- c:\users\eric.falley\appdata\local\{67EA79B6-3634-4697-92C2-AA69E68D3C9B}
2012-09-29 14:05:55 -------- d-----w- c:\users\eric.falley\appdata\local\{2860A9AA-8A25-46E3-9264-20F4F4F5EF9F}
2012-09-29 01:55:44 -------- d-----w- c:\users\eric.falley\appdata\local\{18D0D841-104F-4046-9421-85704D6FBD61}
2012-09-28 16:32:56 5989776 ----a-w- c:\windows\system32\usbaaplrc.dll
2012-09-28 16:32:56 44544 ----a-w- c:\windows\system32\drivers\usbaapl.sys
2012-09-28 13:08:15 -------- d-----w- c:\users\eric.falley\appdata\local\{B15E732B-1AEF-444A-A28D-26D8ECF177A7}
2012-09-28 01:03:46 -------- d-----w- c:\users\eric.falley\appdata\local\{679A4172-F47A-411D-89ED-FF6DD94FEF2E}
2012-09-27 22:45:02 2422272 ----a-w- c:\windows\system32\wucltux.dll
2012-09-27 22:44:45 88576 ----a-w- c:\windows\system32\wudriver.dll
2012-09-27 22:43:58 33792 ----a-w- c:\windows\system32\wuapp.exe
2012-09-27 22:43:58 171904 ----a-w- c:\windows\system32\wuwebv.dll
2012-09-27 12:27:24 -------- d-----w- c:\users\eric.falley\appdata\local\{6A46C718-F9F7-409B-A937-B2ACA9422C2F}
2012-09-27 08:12:42 712048 ----a-w- c:\windows\system32\drivers\ndis.sys
2012-09-27 08:12:42 33280 ----a-w- c:\windows\system32\drivers\RNDISMP.sys
2012-09-27 08:12:20 240496 ----a-w- c:\windows\system32\drivers\netio.sys
2012-09-27 08:12:20 187760 ----a-w- c:\windows\system32\drivers\FWPKCLNT.SYS
2012-09-27 08:11:51 245760 ----a-w- c:\windows\system32\OxpsConverter.exe
2012-09-27 08:02:53 490496 ----a-w- c:\windows\system32\d3d10level9.dll
2012-09-27 01:09:01 -------- d-----w- c:\users\eric.falley\appdata\local\{030753E2-63BE-45FB-A4C3-42AA6E6F3E5D}
2012-09-23 18:13:53 -------- d-----w- c:\users\eric.falley\appdata\local\{4106B345-C0BC-48D2-9565-20C4C6C5DBC7}
2012-09-22 18:13:12 -------- d-----w- c:\users\eric.falley\appdata\local\{A7346C83-7CC3-4F7F-B402-C155C049664E}
2012-09-22 06:12:42 -------- d-----w- c:\users\eric.falley\appdata\local\{E2A7C69B-DE3E-4D2D-B9B0-1EB23D76F823}
2012-09-21 19:27:41 -------- d-----w- C:\warmonger
2012-09-21 19:27:41 -------- d-----w- C:\fastranger
2012-09-21 18:12:16 -------- d-----w- c:\users\eric.falley\appdata\local\{5B785AC8-CA7F-4B5E-BB3E-B8229B13D3EA}
2012-09-20 23:11:01 -------- d-----w- c:\users\eric.falley\appdata\local\{57FFC422-477C-45D3-B67A-A562C7BAA8D3}
2012-09-20 22:54:10 -------- d-----w- c:\users\eric.falley\appdata\local\{9D03F030-54D9-40C7-8228-C91130F866B9}
2012-09-19 18:10:45 -------- d-----w- c:\users\eric.falley\appdata\local\{D24DD1CA-10D7-4138-968D-0894233C3234}
2012-09-18 16:43:13 -------- d-----w- c:\users\eric.falley\appdata\local\{84723A9C-C45E-4A75-9B3A-B195563B8C51}
2012-09-18 13:15:40 -------- d-----w- c:\users\eric.falley\appdata\local\{DECFBB2E-393F-4B87-81AD-22E127135787}
2012-09-17 13:02:05 -------- d-----w- c:\users\eric.falley\appdata\local\{3AB17999-7D48-4EB9-A70F-9F074CC5CD09}
2012-09-16 20:48:47 -------- d-----w- c:\users\eric.falley\appdata\local\{764B7D78-5501-49AF-A65A-C235CAFCBA68}
2012-09-16 18:22:34 -------- d-----w- c:\program files\Lame For Audacity
2012-09-15 18:14:00 -------- d-----w- c:\users\eric.falley\appdata\local\{AD2635B5-3A41-40BB-8998-92DEE1070DD2}
2012-09-14 20:23:00 -------- d-----w- c:\users\eric.falley\appdata\local\{E0E5F365-D365-47DD-A802-2CC4E3B1DB85}
2012-09-14 08:27:16 -------- d-----w- c:\users\eric.falley\appdata\local\{D0C78CA6-21AA-49A8-9127-39972EDA7F57}
2012-09-12 18:39:45 -------- d-----w- c:\users\eric.falley\appdata\local\{CC7795D1-DD64-4F0F-8D93-A20E72C77F62}
2012-09-12 13:54:47 428032 ----a-w- c:\windows\system32\spool\prtprocs\w32x86\hpcpp130.dll
2012-09-12 05:23:18 -------- d-----w- c:\users\eric.falley\appdata\local\{63187FD3-31B9-4352-9BDF-A9E0B360B60D}
2012-09-10 22:02:00 -------- d-----w- c:\users\eric.falley\appdata\local\{6F2AD4DB-D160-4A1E-9EC7-464F66C2BCDB}
2012-09-10 07:31:54 -------- d-----w- c:\users\eric.falley\appdata\local\{D3BF5DBD-5AE5-483B-9705-C396D211FF06}
2012-09-09 19:31:12 -------- d-----w- c:\users\eric.falley\appdata\local\{B860661F-E35D-4295-834B-43361DF75660}
2012-09-09 02:38:06 -------- d-----w- c:\users\eric.falley\appdata\local\{EEEF87F6-C516-4E58-9643-FD94DC4E304E}
2012-09-07 09:02:04 -------- d-----w- c:\users\eric.falley\appdata\local\{E8A4776C-81D7-43CC-B69C-3243EA544A6E}
2012-09-06 20:29:48 -------- d-----w- c:\users\eric.falley\appdata\local\{996102C6-6E2D-4ABC-BE35-BF3AD6B22894}
2012-09-06 04:08:13 -------- d-----w- c:\users\eric.falley\appdata\local\{B8A39572-9960-41B8-BC4E-5B7F2B92104D}
2012-09-05 13:49:13 -------- d-----w- c:\users\eric.falley\appdata\local\{AB0EAD56-534D-4E9E-9D27-C038ABFC2BA5}
2012-09-04 12:33:27 -------- d-----w- c:\users\eric.falley\appdata\local\{AD1B7F06-6B7E-4052-8239-C63F43116400}
2012-09-03 18:54:46 -------- d-----w- c:\users\eric.falley\appdata\local\{4A289D54-1436-41FB-8CC1-6B65B36975B8}
2012-09-03 06:41:30 -------- d-----w- c:\users\eric.falley\appdata\local\{DC961756-3112-425E-988D-B454FCBAE995}
2012-08-30 09:43:40 -------- d-----w- c:\users\eric.falley\appdata\local\{6EFC2E81-AF4E-4D35-8CAF-2D4EAC8D8DCA}
2012-08-27 07:16:34 -------- d-----w- c:\users\eric.falley\appdata\local\{43955B94-DAC8-42E2-83CC-1349E3E3F4AC}
2012-08-26 19:19:12 -------- d-----w- c:\program files\Mozilla Maintenance Service
2012-08-26 19:16:28 -------- d-----w- c:\users\eric.falley\appdata\local\{ACD67781-CCBA-4F4D-B4EC-0377FA23FCF4}
2012-08-26 07:16:00 -------- d-----w- c:\users\eric.falley\appdata\local\{A27DAA31-1DBD-447D-A56F-46A1D0B1F615}
2012-08-25 19:15:36 -------- d-----w- c:\users\eric.falley\appdata\local\{4FEFF7F2-3FBF-4A43-A9E5-541B32E91BB0}
2012-08-25 08:18:33 400896 ----a-w- c:\windows\system32\srcore.dll
2012-08-25 08:16:04 67440 ----a-w- c:\windows\system32\drivers\ksecdd.sys
2012-08-25 08:15:32 2048 ----a-w- c:\windows\system32\msxml3r.dll
2012-08-25 08:15:32 1390080 ----a-w- c:\windows\system32\msxml6.dll
2012-08-25 08:15:32 1236992 ----a-w- c:\windows\system32\msxml3.dll
2012-08-25 08:14:01 805376 ----a-w- c:\windows\system32\cdosys.dll
2012-08-25 08:14:01 212992 ----a-w- c:\program files\common files\system\msadc\msadco.dll
2012-08-25 08:14:01 1019904 ----a-w- c:\program files\common files\system\ado\msado15.dll
2012-08-25 08:13:59 57344 ----a-w- c:\program files\common files\system\ado\msador15.dll
2012-08-25 08:13:59 372736 ----a-w- c:\program files\common files\system\ado\msadox.dll
2012-08-25 08:13:59 352256 ----a-w- c:\program files\common files\system\ado\msadomd.dll
2012-08-25 08:13:59 143360 ----a-w- c:\program files\common files\system\ado\msjro.dll
2012-08-25 08:13:22 317440 ----a-w- c:\windows\system32\spoolsv.exe
2012-08-25 08:13:21 492032 ----a-w- c:\windows\system32\win32spl.dll
2012-08-25 08:10:19 41984 ----a-w- c:\windows\system32\browcli.dll
2012-08-25 08:10:19 102912 ----a-w- c:\windows\system32\browser.dll
2012-08-25 08:09:54 393728 ----a-w- c:\windows\system32\drivers\bthport.sys
2012-08-25 08:08:47 769024 ----a-w- c:\windows\system32\localspl.dll
2012-08-24 15:50:20 -------- d-----w- c:\users\eric.falley\appdata\local\{26E00A4A-0EC7-40EE-8806-807FE7F32DDE}
2012-08-23 22:10:03 -------- d-----w- c:\users\eric.falley\appdata\local\{B78762B8-E046-4526-99AC-6582CB6DE605}
2012-08-23 07:57:35 -------- d-----w- c:\users\eric.falley\appdata\local\{E93C79E1-4C02-4F0E-A56F-FE4A8557D854}
2012-08-22 07:43:55 -------- d-----w- c:\users\eric.falley\appdata\local\{EB55815B-38F1-46C7-BAC7-A342F0B84402}
2012-08-21 19:45:41 -------- d-----w- c:\users\eric.falley\appdata\local\{D28D22D7-A8F2-42C8-8BDD-EBA00429FED0}
2012-08-21 07:44:14 -------- d-----w- c:\users\eric.falley\appdata\local\{CAF068BC-4FDE-4651-9283-BD76AF9FCF35}
2012-08-20 19:44:56 -------- d-----w- c:\users\eric.falley\appdata\local\{D12A5A87-3187-4364-87AA-201AB155EAD7}
2012-08-18 11:41:12 -------- d-----w- c:\users\eric.falley\appdata\local\{8D04277B-D1CF-4754-965A-7AEB14E6102C}
2012-08-18 11:40:18 -------- d-----w- c:\users\eric.falley\appdata\local\{3D2B6818-F253-44FC-B1A1-ECEF8454624A}
2012-08-17 13:06:48 -------- d-----w- c:\users\eric.falley\appdata\local\{41F25CDF-537B-42A1-B434-F6A539A40EC2}
2012-08-17 13:05:04 -------- d-----w- c:\users\eric.falley\appdata\local\{21CFA052-F152-4964-BE63-55B6B15D8670}
2012-08-17 05:11:41 -------- d-----w- c:\users\eric.falley\appdata\local\{085AD711-1805-4D69-AC48-F78AF10A1362}
2012-08-15 01:40:16 -------- d-----w- c:\users\eric.falley\appdata\local\{0E2E00FA-88F1-4C36-BB94-47A7247AE8EF}
2012-08-15 01:40:01 -------- d-----w- c:\users\eric.falley\appdata\local\{7AECCBE0-74C3-403E-B9D1-4D6ED03BEDD2}
2012-08-11 18:22:42 -------- d-----w- c:\users\eric.falley\appdata\local\{2A83ABD5-9903-4D93-B844-41DEA4D3DC07}
2012-08-11 18:22:29 -------- d-----w- c:\users\eric.falley\appdata\local\{6AFA6B0E-59B0-4991-8758-501E45A81066}
2012-08-11 02:24:18 -------- d-----w- c:\users\eric.falley\appdata\local\{86D73001-5864-4060-8461-5F6205EBB101}
2012-08-11 02:24:05 -------- d-----w- c:\users\eric.falley\appdata\local\{FA11CC8F-77B6-4A50-9601-815B4CCF5579}
2012-08-08 23:28:02 73656 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-08-08 23:28:02 697272 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-08-08 08:27:42 -------- d-----w- c:\users\eric.falley\appdata\local\{B81AEA02-A688-4B29-8B58-E5CF5DBDCE01}
2012-08-08 08:27:13 -------- d-----w- c:\users\eric.falley\appdata\local\{DC265443-2644-47EC-8BAA-89FE6FE92B90}
2012-08-07 06:40:26 -------- d-----w- c:\users\eric.falley\appdata\local\{A048DD75-EEEB-4662-9298-CB99E8BF0F3A}
2012-08-07 06:40:12 -------- d-----w- c:\users\eric.falley\appdata\local\{F9D841A8-D212-4411-B7B7-20D8B4F9F014}
2012-08-06 18:39:34 -------- d-----w- c:\users\eric.falley\appdata\local\{E23DD382-32F9-4C2D-8601-E476D627149F}
2012-08-06 18:39:15 -------- d-----w- c:\users\eric.falley\appdata\local\{9DDD10E5-B844-4DE4-8B98-A5923CBF3742}
2012-08-06 06:37:38 -------- d-----w- c:\users\eric.falley\appdata\local\{125A9B25-9120-46EB-84F7-E5C1EFFA29F8}
2012-08-06 06:37:24 -------- d-----w- c:\users\eric.falley\appdata\local\{B60F8132-B1D9-4DAF-A583-7D2F4BD38E65}
2012-08-05 18:35:06 -------- d-----w- c:\users\eric.falley\appdata\local\{AD273534-BDBC-456D-9D72-EEB170E97046}
2012-08-05 18:34:55 -------- d-----w- c:\users\eric.falley\appdata\local\{3572D33F-3363-4341-B7C5-EA7AB1ABC30C}
2012-08-05 03:27:20 -------- d-----w- c:\users\eric.falley\appdata\local\{50ED87C7-5785-468C-A1BE-588F9E89DD16}
2012-08-05 03:26:59 -------- d-----w- c:\users\eric.falley\appdata\local\{9105041D-729B-4830-A3B7-30D77D7493FF}
2012-08-03 22:35:34 -------- d-----w- c:\users\eric.falley\appdata\local\{A2F6C02F-8BDC-4F9C-A017-6AFFD22536A2}
2012-08-03 22:35:15 -------- d-----w- c:\users\eric.falley\appdata\local\{88D2609E-7046-4A7A-BC4B-A9305020D16D}
2012-08-03 05:17:32 -------- d-----w- c:\users\eric.falley\appdata\local\{9485B48F-4A76-4F0D-A137-7F54C7067406}
2012-08-03 05:17:04 -------- d-----w- c:\users\eric.falley\appdata\local\{4A0ED660-D346-4C75-BC77-79A809BBC215}
2012-07-30 16:58:02 -------- d-----w- c:\users\eric.falley\appdata\local\{4866FBEF-CC19-479E-9EFF-C19B6EA00940}
2012-07-30 16:57:41 -------- d-----w- c:\users\eric.falley\appdata\local\{F2D441F3-42C2-4A3B-9CCB-D95F31516B1A}
2012-07-30 05:04:43 -------- d-----w- c:\program files\common files\Cisco Systems
2012-07-30 05:04:38 30744 ----a-w- c:\windows\system32\SophosBootTasks.exe
2012-07-30 04:58:24 33696 ----a-w- c:\windows\system32\drivers\sdcfilter.sys
2012-07-30 04:58:17 123680 ----a-w- c:\windows\system32\drivers\savonaccess.sys
2012-07-30 04:57:43 31736 ----a-w- c:\windows\system32\drivers\skmscan.sys
2012-07-30 04:57:33 131824 ----a-w- c:\windows\system32\sdccoinstaller.dll
2012-07-30 04:56:05 -------- d-----w- c:\users\eric.falley\appdata\local\{FDA0F69E-CB8A-476E-8061-825320B1C8F6}
2012-07-30 04:55:36 -------- d-----w- c:\users\eric.falley\appdata\local\{5E8BC7B8-76DD-4E76-92C3-C84B6BB303B4}
2012-07-27 20:51:30 184248 ----a-w- c:\program files\internet explorer\plugins\nppdf32.dll
2012-07-26 04:19:50 -------- d-----w- c:\users\eric.falley\appdata\local\{5487113D-58B8-4067-BF18-46452444CF8B}
2012-07-26 04:19:29 -------- d-----w- c:\users\eric.falley\appdata\local\{A3370A87-3C8E-47D5-BDB4-E5619455A6DA}
2012-07-25 05:28:40 -------- d-----w- c:\users\eric.falley\appdata\local\{B6EB1E79-1FE9-4979-AB33-192130783716}
2012-07-25 05:28:28 -------- d-----w- c:\users\eric.falley\appdata\local\{A30A51B9-2F6F-45CF-A010-299B3117BF9D}
2012-07-24 18:43:00 -------- d-----w- c:\users\eric.falley\appdata\local\{924C423B-EF31-45DE-8A6D-F8369C8696E1}
2012-07-24 04:50:50 -------- d-----w- c:\users\eric.falley\appdata\local\{58FF9261-2420-4961-BA2A-FB43E8672B6B}
2012-07-23 05:53:43 -------- d-----w- c:\users\eric.falley\appdata\local\{55C4221E-CF06-4CDD-B011-03ABEA64A4D8}
2012-07-23 05:53:30 -------- d-----w- c:\users\eric.falley\appdata\local\{25338AF3-4EE7-45EB-8A87-5734FD85CB0B}
2012-07-22 06:34:08 -------- d-----w- c:\users\eric.falley\appdata\local\{819413E2-D25C-4E78-A027-95CB33A9838A}
2012-07-22 06:33:53 -------- d-----w- c:\users\eric.falley\appdata\local\{CB3DEB47-11C2-4732-8CA8-1BC84E63EB0A}
2012-07-22 05:18:36 -------- d-----w- c:\users\eric.falley\appdata\local\{67E795E8-68A3-456E-9A50-9D9A1605CE09}
2012-07-22 05:18:23 -------- d-----w- c:\users\eric.falley\appdata\local\{3FA94A81-BD47-489D-8B0B-860976368D91}
2012-07-13 06:08:21 -------- d-----w- c:\users\eric.falley\appdata\local\{8FD35855-1A21-4282-870C-2847AD46F304}
2012-07-13 06:08:05 -------- d-----w- c:\users\eric.falley\appdata\local\{E34E9981-7808-4B20-8D68-F4B2F871A0C6}
2012-07-12 04:02:46 -------- d-----w- c:\users\eric.falley\appdata\local\{6BB5126F-8977-43A4-9098-D3461B4C02F6}
2012-07-12 04:02:31 -------- d-----w- c:\users\eric.falley\appdata\local\{AA040995-84EA-4A23-B6EB-53CB85321255}
2012-07-11 07:06:02 -------- d-----w- c:\users\eric.falley\appdata\local\{FF71D3A9-BC67-4C36-BF44-8D2F019FB84D}
2012-07-11 07:05:51 -------- d-----w- c:\users\eric.falley\appdata\local\{6CB139DB-6F08-49EA-B453-4CBB31F68041}
2012-07-10 07:29:55 -------- d-----w- c:\users\eric.falley\appdata\local\{6574EA2E-0FE4-484E-AE76-156B0BBDBA07}
2012-07-10 07:29:43 -------- d-----w- c:\users\eric.falley\appdata\local\{D27F0A49-0327-47A3-A19F-65F63E7D2D1E}
2012-07-08 20:21:48 -------- d-----w- c:\users\eric.falley\appdata\local\{DC44D839-24B1-470D-9000-3FA3305AA580}
2012-07-08 20:21:33 -------- d-----w- c:\users\eric.falley\appdata\local\{1CE9AB37-8782-442A-94E0-0989E59BB70A}
2012-07-08 07:31:40 -------- d-----w- c:\users\eric.falley\appdata\local\{D836A183-FC5C-4298-A4CA-0C01EBBFBA0D}
2012-07-08 07:31:26 -------- d-----w- c:\users\eric.falley\appdata\local\{7871FE18-5E04-4640-A073-EFB83276BED1}
2012-07-07 18:08:42 -------- d-----w- c:\users\eric.falley\appdata\local\{0B6AA3F6-BE1D-47D3-A148-2FEF36F73142}
2012-07-07 18:08:31 -------- d-----w- c:\users\eric.falley\appdata\local\{636DE6A8-FBC6-4ED2-B47A-16069C5F5977}
2012-07-07 04:29:53 -------- d-----w- c:\users\eric.falley\appdata\local\{A09724B3-ECE3-4C0F-9467-8E871CDA50D3}
2012-07-07 04:29:39 -------- d-----w- c:\users\eric.falley\appdata\local\{0A8B3503-12EE-4091-B03D-0C1922B9DB1B}
2012-07-07 02:48:03 -------- d-----w- c:\program files\WhoCrashed
2012-07-06 16:27:55 -------- d-----w- c:\users\eric.falley\appdata\local\{ACE27A2A-21AA-4E97-94EA-8FDF17AAEB45}
2012-07-06 16:27:36 -------- d-----w- c:\users\eric.falley\appdata\local\{9176DE47-73D5-489B-949D-8942826445B8}
2012-07-06 04:25:43 -------- d-----w- c:\users\eric.falley\appdata\local\{463FBD09-29E2-4E66-93D1-A9938AF2EF2E}
2012-07-06 04:25:30 -------- d-----w- c:\users\eric.falley\appdata\local\{5692E5E6-53F6-42DF-8C66-5A9FE6FD0D67}
2012-07-05 16:25:07 -------- d-----w- c:\users\eric.falley\appdata\local\{E861E093-394A-4FE7-904F-C2FDE827BFB1}
2012-07-05 16:24:54 -------- d-----w- c:\users\eric.falley\appdata\local\{C0979965-25C6-491A-BA0D-8B9F07B52F51}
2012-07-05 04:24:21 -------- d-----w- c:\users\eric.falley\appdata\local\{3CE78903-9697-4BA0-B7D0-CA28F38F0290}
2012-07-05 04:24:01 -------- d-----w- c:\users\eric.falley\appdata\local\{EE9D7A09-8C17-49E1-92B4-5C9EA5A55308}
2012-07-04 15:38:55 -------- d-----w- c:\users\eric.falley\appdata\local\{996275E4-0EDF-4036-84A8-65F87E22B220}
2012-07-04 15:38:40 -------- d-----w- c:\users\eric.falley\appdata\local\{5C220CD3-70A7-49DB-ABE8-F996259F0EC3}
2012-07-03 19:01:03 -------- d-----w- c:\users\eric.falley\appdata\local\{3EA68238-2B5C-48DC-B8EF-C3AE9919AA2D}
2012-07-03 19:00:50 -------- d-----w- c:\users\eric.falley\appdata\local\{977B2DBE-AB9A-453B-8934-9803069A979B}
2012-07-03 05:38:12 -------- d-----w- c:\users\eric.falley\appdata\local\{DF8E466E-1C59-414B-A587-7B23206638DD}
2012-07-03 05:37:57 -------- d-----w- c:\users\eric.falley\appdata\local\{86F02D82-968C-4E43-965E-A55886ACE2D3}
2012-07-02 17:37:34 -------- d-----w- c:\users\eric.falley\appdata\local\{71D3E43B-270F-4647-A9EA-608491393CD9}
2012-07-02 17:37:22 -------- d-----w- c:\users\eric.falley\appdata\local\{E17E302C-918A-4E71-A4D4-7432D8B1901C}
2012-06-30 08:31:29 -------- d-----w- c:\users\eric.falley\appdata\local\{3E615F81-0370-41C3-A805-02DC84B62F34}
2012-06-30 08:31:11 -------- d-----w- c:\users\eric.falley\appdata\local\{7D2D58CD-380F-450E-A7D9-4C02B667ED83}
2012-06-29 09:01:01 -------- d-----w- c:\users\eric.falley\appdata\local\{76B9E97F-D57E-41C1-AAA0-0385409FD826}
2012-06-29 09:00:47 -------- d-----w- c:\users\eric.falley\appdata\local\{69C34C15-C566-46F5-8C4F-50D9DF470E9C}
2012-06-29 06:23:06 -------- d-----w- c:\programdata\GFI Software
2012-06-28 20:44:21 -------- d-----w- c:\users\eric.falley\appdata\local\{B683DE5D-2D2B-4003-9C74-18650C2B58AB}
2012-06-28 20:43:09 -------- d-----w- c:\users\eric.falley\appdata\local\{BE85BDFC-E1E0-49BE-A983-8A2D427D8310}
2012-06-26 08:35:58 1375288 ----a-w- c:\program files\common files\microsoft shared\office11\msxml5.dll
2012-06-24 21:05:50 -------- d-----w- c:\users\eric.falley\appdata\local\{FFC58BA9-A285-4EA5-8EAD-ACC3FC25BE59}
2012-06-24 21:05:34 -------- d-----w- c:\users\eric.falley\appdata\local\{F67806DF-3847-4049-A339-1769B6CEC1F5}
2012-06-24 10:24:42 -------- d-----w- c:\users\eric.falley\appdata\local\CrashDumps
2012-06-24 07:11:34 35960 ----a-r- c:\windows\system32\drivers\SymIMV.sys
2012-06-24 04:34:25 -------- d-----w- c:\users\eric.falley\appdata\local\{AC061E5A-0C4F-4E96-83C2-FD175DF6131E}
2012-06-24 04:33:52 -------- d-----w- c:\users\eric.falley\appdata\local\{1855866B-1F39-4593-A0BE-21D62242441B}
2012-06-23 22:41:05 141944 ----a-w- c:\windows\system32\drivers\SYMEVENT.SYS
2012-06-23 22:41:04 -------- d-----w- c:\program files\Symantec
2012-06-23 22:41:04 -------- d-----w- c:\program files\common files\Symantec Shared
2012-06-23 21:34:44 -------- d-----w- c:\windows\system32\drivers\NIS
2012-06-23 21:34:13 -------- d-----w- c:\program files\Norton Internet Security
2012-06-23 20:51:29 -------- d-----w- c:\programdata\Norton
2012-06-23 20:48:20 -------- d-----w- c:\programdata\NortonInstaller
2012-06-23 20:48:20 -------- d-----w- c:\program files\NortonInstaller
2012-06-23 18:10:36 -------- d-----w- c:\users\eric.falley\appdata\local\{15D9776D-1F78-4224-97A7-82064E62F01A}
2012-06-23 18:10:09 -------- d-----w- c:\users\eric.falley\appdata\local\{EE657D04-C12E-4BA5-AAE1-78F126CFBBA0}
2012-06-23 08:57:42 -------- d-----w- c:\windows\pss
2012-06-23 07:54:24 94584 ----a-w- c:\windows\system32\drivers\SbFwIm.sys
2012-06-23 07:52:54 -------- d-----w- c:\program files\Ad-Aware Antivirus
2012-06-23 07:24:05 -------- d-----w- c:\users\eric.falley\appdata\roaming\JAM Software
2012-06-23 07:22:00 -------- d-----w- c:\program files\JAM Software
2012-06-23 07:06:41 -------- d-----w- c:\users\eric.falley\appdata\local\Macromedia
2012-06-23 06:47:51 -------- d-----w- c:\programdata\IObit
2012-06-23 06:43:37 -------- d-----w- c:\users\eric.falley\appdata\roaming\IObit
2012-06-23 06:43:12 -------- d-----w- c:\program files\IObit
2012-06-23 05:59:22 -------- d-----w- c:\users\eric.falley\appdata\local\{6CF3E4F0-6D0A-4472-B45B-21978043AA95}
2012-06-23 05:59:02 -------- d-----w- c:\users\eric.falley\appdata\local\{FA5433CE-030E-4DCB-BC3A-4DC083F67A96}
2012-06-23 05:37:45 -------- d-----w- c:\windows\en
2012-06-23 05:21:02 69464 ----a-w- c:\windows\system32\XAPOFX1_3.dll
2012-06-23 05:21:00 515416 ----a-w- c:\windows\system32\XAudio2_5.dll
2012-06-23 05:20:51 453456 ----a-w- c:\windows\system32\d3dx10_42.dll
2012-06-23 05:19:15 3426072 ----a-w- c:\windows\system32\d3dx9_32.dll
2012-06-23 05:11:46 537432 ----a-w- c:\program files\common files\windows live\.cache\ad7e40201cd50fe01\DXSETUP.exe
2012-06-23 05:11:43 89944 ----a-w- c:\program files\common files\windows live\.cache\ad7e40201cd50fe01\DSETUP.dll
2012-06-23 05:11:43 1801048 ----a-w- c:\program files\common files\windows live\.cache\ad7e40201cd50fe01\dsetup32.dll
2012-06-23 04:53:52 -------- d-----w- c:\users\eric.falley\appdata\local\{E8B51C22-2FB4-45DC-93F3-02E3B2A69F7F}
2012-06-23 04:48:27 -------- d-----w- c:\users\eric.falley\appdata\local\{42BC76A0-1614-45D5-9352-4B5EB9F051F4}
2012-06-23 04:48:11 -------- d-----w- c:\users\eric.falley\appdata\local\{113A3408-F79E-4EC4-8B41-1AE00F50FA6F}
2012-06-19 02:37:11 -------- d-----w- c:\users\eric.falley\appdata\local\{3374E403-41AC-43C1-999C-D45871B379FE}
2012-06-19 02:36:47 -------- d-----w- c:\users\eric.falley\appdata\local\{B1321CC9-8E74-4E4E-A861-4358032CEB4A}
2012-06-18 15:08:43 -------- d-----w- c:\users\eric.falley\appdata\local\{F537E0F8-F74C-49B2-B4BF-D3A8D5D7DCB4}
2012-06-18 15:08:28 -------- d-----w- c:\users\eric.falley\appdata\local\{48C1C7C9-8572-465B-8F64-43CDC68B89EC}
2012-06-18 04:35:33 -------- d-----w- c:\users\eric.falley\appdata\local\{1A6927C0-A3A6-4AD2-93AB-4DFE6F3BEF1C}
2012-06-18 04:35:15 -------- d-----w- c:\users\eric.falley\appdata\local\{06294C89-2B46-44CC-B97A-1BFBF219B906}
2012-06-17 10:55:22 -------- d-----w- c:\users\eric.falley\appdata\local\{B7622AEB-A395-4D2C-890C-9C79789F6433}
2012-06-17 10:55:12 -------- d-----w- c:\users\eric.falley\appdata\local\{9856FDBD-2C76-48CA-864A-A15E1CD64021}
2012-06-16 23:34:23 -------- d-----w- c:\users\eric.falley\appdata\local\{F3D36902-73E6-425D-A365-8CE14B0AAA68}
2012-06-16 23:34:11 -------- d-----w- c:\users\eric.falley\appdata\local\{FA8E0A97-5C33-4393-876B-BFBEA2488796}
2012-06-16 12:36:40 -------- d-----w- c:\users\eric.falley\appdata\local\{967D4D59-FA68-4F5A-9272-E1EB914F0E0E}
2012-06-16 12:36:29 -------- d-----w- c:\users\eric.falley\appdata\local\{6A742616-3FDD-4E37-AC9F-D5663BCF4622}
2012-06-16 01:30:30 -------- d-----w- c:\users\eric.falley\appdata\local\{4EC0073D-95DB-441D-AED6-F969FE357C35}
2012-06-16 01:30:17 -------- d-----w- c:\users\eric.falley\appdata\local\{8E08FE63-D0AD-4684-97C1-3BD5338554C1}
2012-06-16 00:14:08 -------- d-----w- c:\users\eric.falley\appdata\local\{B3D56C76-A269-466E-B410-62E002775DC8}
2012-06-16 00:12:21 -------- d-----w- c:\users\eric.falley\appdata\local\{7459389A-D3CB-42B8-A74F-AF8472693072}
2012-06-15 20:12:21 514560 ----a-w- c:\windows\system32\qdvd.dll
2012-06-15 19:40:28 183808 ----a-w- c:\windows\system32\drivers\rdpwd.sys
2012-06-15 19:40:02 2342400 ----a-w- c:\windows\system32\msi.dll
2012-06-15 19:37:41 8192 ----a-w- c:\windows\system32\rdrmemptylst.exe
2012-06-15 19:37:39 58880 ----a-w- c:\windows\system32\rdpwsx.dll
2012-06-15 19:37:39 129536 ----a-w- c:\windows\system32\rdpcorekmts.dll
2012-06-15 19:37:09 164352 ----a-w- c:\windows\system32\profsvc.dll
2012-06-14 15:54:03 -------- d-----w- c:\users\eric.falley\appdata\local\{E7738BF7-4BD6-487D-BC9D-5E186642C268}
2012-06-14 15:53:22 -------- d-----w- c:\users\eric.falley\appdata\local\{318E2359-4F8A-4A8C-9E42-07D8C62F0A3E}
2012-06-12 18:34:24 499088 ----a-w- c:\windows\system32\HPWia2_PS7520.dll
2012-06-12 18:34:24 1979280 ----a-w- c:\windows\system32\HPScanTRDrv_PS7520.dll
2012-06-12 17:59:54 2216336 ----a-w- c:\windows\system32\hpinkinsBC11.exe
2012-06-12 11:34:22 268688 ----a-w- c:\windows\system32\hpinkstsBC11LM.dll
2012-06-12 11:34:20 220560 ----a-w- c:\windows\system32\hpinkcoiBC11.dll
2012-06-12 04:33:20 17323640 ----a-w- c:\program files\common files\microsoft shared\office12\MSO.DLL
2012-06-12 00:31:19 -------- d-----w- c:\programdata\AVAST Software
2012-06-12 00:31:19 -------- d-----w- c:\program files\AVAST Software
2012-06-11 03:16:44 118384 ----a-w- c:\program files\common files\microsoft shared\textconv\MSCONV97.DLL
2012-06-08 06:36:46 -------- d-----w- c:\users\eric.falley\appdata\local\{3A28896F-D989-4CEE-823C-4D16FCF6DBF8}
2012-06-08 06:36:23 -------- d-----w- c:\users\eric.falley\appdata\local\{09322E73-7A32-4412-B44D-49FDD370F82A}
2012-06-07 06:36:59 -------- d-----w- c:\users\eric.falley\appdata\local\{2727D054-D9AF-42C2-825E-9CB8EBEBF60B}
2012-06-07 06:36:33 -------- d-----w- c:\users\eric.falley\appdata\local\{6CCAD17D-98AF-4EE4-B76E-5D12545F38C7}
2012-06-07 01:59:42 1070152 ----a-w- c:\windows\system32\MSCOMCTL.OCX
2012-06-06 16:06:51 -------- d-----w- c:\users\eric.falley\appdata\local\{5D8A59B7-938F-4599-BED5-14DF247D4BBF}
2012-06-06 16:06:23 -------- d-----w- c:\users\eric.falley\appdata\local\{14382453-A611-47EB-8241-B5812CECADFD}
2012-06-05 22:37:54 -------- d-----w- c:\users\eric.falley\appdata\local\{4B08055E-F1E5-4D11-91E1-B2B280E1CF68}
2012-06-05 22:37:26 -------- d-----w- c:\users\eric.falley\appdata\local\{AC20E81E-8C9D-4DC6-9AFD-FFF5208840A7}
2012-06-05 16:22:36 -------- d-----w- c:\users\eric.falley\appdata\local\{4CCDAF9B-F0BD-4E99-8D53-CC64F4016B3E}
2012-06-05 16:22:23 -------- d-----w- c:\users\eric.falley\appdata\local\{3C5AD089-E713-44AA-B8A3-FB182CF42809}
2012-06-05 06:38:45 -------- d-----w- c:\users\eric.falley\appdata\local\{58CA9CD8-32D2-49C1-8115-5149880346D3}
2012-06-05 06:38:32 -------- d-----w- c:\users\eric.falley\appdata\local\{11E40988-AF80-4EB6-A367-8F4C8DF962AE}
2012-06-04 06:36:01 -------- d-----w- c:\users\eric.falley\appdata\local\{72CA5DC9-B382-4F74-820E-66CBA57C9B8A}
2012-06-04 06:35:45 -------- d-----w- c:\users\eric.falley\appdata\local\{DF5B13F9-B620-4651-9743-FE9CC8EC4047}
2012-06-04 06:07:14 -------- d-----w- c:\users\eric.falley\appdata\local\{82E724F6-AECF-4649-BED5-438A833DB4C3}
2012-06-04 06:06:58 -------- d-----w- c:\users\eric.falley\appdata\local\{8ABE1663-7A98-4DC3-978E-A1A08248909A}
2012-05-28 06:41:00 -------- d-----w- c:\programdata\Age of Empires 3
2012-05-28 06:28:02 -------- d-----w- c:\users\eric.falley\appdata\local\{E7E84C4D-FD08-4AC4-8D95-919EB57992BA}
2012-05-28 06:27:33 -------- d-----w- c:\users\eric.falley\appdata\local\{B7309858-A6F8-413E-86B1-215151958149}
2012-05-28 04:24:34 -------- d-----w- c:\users\eric.falley\appdata\local\{719B3884-3ECD-452A-B106-598D9EAC6429}
2012-05-28 04:24:22 -------- d-----w- c:\users\eric.falley\appdata\local\{39982F8F-F089-4465-A1EC-B092C47CA64F}
2012-05-27 18:38:16 -------- d-----w- c:\users\eric.falley\appdata\local\{64D86EFE-AB68-49DE-8CC6-77B40AE89F95}
2012-05-27 18:37:59 -------- d-----w- c:\users\eric.falley\appdata\local\{78A25364-7555-4929-9210-98A1638F6999}
2012-05-26 23:35:59 -------- d-----w- c:\users\eric.falley\appdata\local\{B2B8B281-3E0E-40D6-B490-3D76A2A9D670}
2012-05-26 23:18:32 -------- d-----w- c:\users\eric.falley\appdata\local\{C992D350-AA0E-45F6-882F-1E474BA3587A}
2012-05-26 23:07:47 -------- d-----w- c:\users\eric.falley\appdata\local\{1B1D81C3-7B0C-4239-9868-5B812499165E}
2012-05-26 20:19:39 -------- d-----w- c:\users\eric.falley\appdata\local\{EB73FA44-DF28-4A9F-8152-A69AFEEB340F}
2012-05-26 09:01:13 -------- d-----w- c:\program files\MSXML 4.0
2012-05-25 06:33:45 2297552 ----a-w- c:\windows\system32\d3dx9_26.dll
2012-05-20 21:26:14 -------- d-----w- c:\users\eric.falley\appdata\local\{234C4BF5-562A-46C4-AEE1-F00B550E3C9A}
2012-05-20 21:25:59 -------- d-----w- c:\users\eric.falley\appdata\local\{B8FB99FA-9A48-4D7D-9750-2BEEA1AEBECD}
2012-05-20 09:28:56 936960 ----a-w- c:\program files\common files\microsoft shared\ink\journal.dll
2012-05-20 09:28:54 1221632 ----a-w- c:\program files\windows journal\NBDoc.DLL
2012-05-20 09:28:49 989184 ----a-w- c:\program files\windows journal\JNTFiltr.dll
2012-05-20 09:28:48 969216 ----a-w- c:\program files\windows journal\JNWDRV.dll
2012-05-20 09:08:30 56176 ----a-w- c:\windows\system32\drivers\partmgr.sys
2012-05-20 09:06:35 1077248 ----a-w- c:\windows\system32\DWrite.dll
2012-05-15 08:17:34 2594632 ----a-w- c:\program files\common files\microsoft shared\vba\vba6\VBE6.DLL
2012-05-10 14:22:42 -------- d-----w- c:\users\eric.falley\appdata\local\{DB1B1A1F-1324-406F-9769-3C003213B87A}
2012-05-10 14:20:21 -------- d-----w- c:\users\eric.falley\appdata\local\{05A18A4F-1A3E-4C24-AC86-C53CC39FCA67}
2012-05-07 05:28:06 -------- d-----w- c:\users\eric.falley\appdata\local\{F5EF9B23-AEF1-46AC-8126-1ED4E087D3B3}
2012-05-07 05:27:49 -------- d-----w- c:\users\eric.falley\appdata\local\{360A3D02-BE6D-467D-88B7-4E062BA4A906}
2012-05-05 00:32:37 -------- d-----w- c:\users\eric.falley\appdata\local\{ACE89587-258B-418F-9F01-8464225DD9B4}
2012-05-01 16:15:57 -------- d-----w- c:\users\eric.falley\appdata\local\Microsoft Games
2012-04-27 07:17:03 -------- d-----w- c:\users\eric.falley\appdata\local\{68A2F41D-3916-4E9B-B9FF-8DB7D0A69EC5}
2012-04-27 07:16:33 -------- d-----w- c:\users\eric.falley\appdata\local\{16052A2F-4E0D-4A82-8347-E0CD325940DE}
2012-04-27 06:41:17 -------- d-----w- c:\users\eric.falley\appdata\local\{D4DD82B3-9560-4EFE-A44D-E95F26E2DD3B}
2012-04-27 06:40:03 -------- d-----w- c:\users\eric.falley\appdata\local\{A3C3B47F-9AFC-4712-BF1F-76275FDF7C8B}
2012-04-27 02:30:22 -------- d-----w- c:\users\eric.falley\appdata\local\{87F5CC7A-993E-4E98-B275-A308855510A3}
2012-04-27 02:29:53 -------- d-----w- c:\users\eric.falley\appdata\local\{8C807102-FC92-4FCF-86DD-7C7C8C41471D}
2012-04-24 06:46:06 299008 ----a-w- c:\windows\system32\hpcpn130.dll
2012-04-24 06:41:50 189952 ----a-w- c:\windows\system32\hpmml130.dll
2012-04-24 06:41:50 151040 ----a-w- c:\windows\system32\hpmpm081.dll
2012-04-24 06:41:36 128512 ----a-w- c:\windows\system32\hpmtp130.dll
2012-04-24 06:41:34 56320 ----a-w- c:\windows\system32\hpmpw081.dll
2012-04-24 06:41:34 128000 ----a-w- c:\windows\system32\hpmja130.dll
2012-04-24 06:41:32 62976 ----a-w- c:\windows\system32\hpmco130.dll
2012-04-24 06:41:24 97280 ----a-w- c:\windows\system32\hpcjpm.dll
2012-04-23 07:04:43 -------- d-----w- c:\users\eric.falley\appdata\local\{2F3978D8-0C50-4181-8577-00870135245A}
2012-04-23 07:04:32 -------- d-----w- c:\users\eric.falley\appdata\local\{3BCE6732-B916-4D99-91C7-18D7E1E1985D}
2012-04-23 02:23:59 -------- d-----w- c:\users\eric.falley\appdata\local\{B9B39761-F0C5-4531-A091-002BD24647D3}
2012-04-23 02:23:49 -------- d-----w- c:\users\eric.falley\appdata\local\{8BB7E26F-9FA6-4CAE-BEFC-A700782E8FC5}
2012-04-22 14:24:03 -------- d-----w- c:\users\eric.falley\appdata\local\{CC9E7558-501F-4EDC-A95D-F80514BD064E}
2012-04-21 07:08:54 -------- d-----w- c:\users\eric.falley\appdata\local\{3AD5F561-C45A-4D8C-BCFA-79B2E9B984A2}
2012-04-21 07:08:42 -------- d-----w- c:\users\eric.falley\appdata\local\{4CF0A26D-5687-4725-BC83-8ED8402A98F4}
2012-04-20 13:27:37 -------- d-----w- c:\users\eric.falley\appdata\local\{594E45DB-F735-4FAD-B00A-F49158CCDA2D}
2012-04-20 13:27:26 -------- d-----w- c:\users\eric.falley\appdata\local\{D1462298-D41C-4EB1-821E-CA56A986B2EB}
2012-04-19 12:02:16 -------- d-----w- c:\users\eric.falley\appdata\local\{A82CFD09-BE27-4DF0-9099-DC6C14FF37C2}
2012-04-19 12:02:05 -------- d-----w- c:\users\eric.falley\appdata\local\{F516AE03-997B-4BFA-8F4C-04E1A34A9965}
2012-04-19 07:07:25 -------- d-----w- c:\users\eric.falley\appdata\local\{51F46870-7927-494E-BE48-119E6E6EFC2D}
2012-04-19 07:07:14 -------- d-----w- c:\users\eric.falley\appdata\local\{54A7E029-70DC-4107-8859-D42600309771}
2012-04-18 07:10:25 -------- d-----w- c:\users\eric.falley\appdata\local\{04005C79-1B08-4B42-9289-308D7D99A698}
2012-04-18 07:10:13 -------- d-----w- c:\users\eric.falley\appdata\local\{165E9902-E1F8-4D2D-B867-E11DD76879BB}
2012-04-17 07:06:49 -------- d-----w- c:\users\eric.falley\appdata\local\{2BD88F53-AEAE-4ACE-B82A-64E8AC29679B}
2012-04-17 07:06:39 -------- d-----w- c:\users\eric.falley\appdata\local\{0F58C80F-938E-4566-88CC-97BC2FA3CF8A}
2012-04-16 07:06:38 -------- d-----w- c:\users\eric.falley\appdata\local\{3B962DBD-02FB-4C33-98F0-98A14CA0C568}
2012-04-16 07:06:26 -------- d-----w- c:\users\eric.falley\appdata\local\{63DC4361-C7E5-43DC-B525-9F9D7E77EFBB}
2012-04-16 04:56:08 -------- d-----w- c:\users\eric.falley\appdata\local\{E537FA9A-1F5B-4C93-A9BF-C78D26F28612}
2012-04-16 04:55:53 -------- d-----w- c:\users\eric.falley\appdata\local\{A1257627-90A7-45DE-BBB0-40F21EFB5BA7}
2012-04-15 17:48:22 -------- d-----w- c:\users\eric.falley\appdata\local\{A855D7ED-FE21-4AF7-9DF3-EDBFB6AB7C8B}
2012-04-15 17:48:03 -------- d-----w- c:\users\eric.falley\appdata\local\{9DCC9725-51B0-4B6E-9E93-8AB2EB963A0F}
2012-04-15 09:00:30 -------- d-----w- c:\users\eric.falley\appdata\local\{066A79A3-C2A4-4DD8-AF91-7D2DF3927109}
2012-04-15 09:00:17 -------- d-----w- c:\users\eric.falley\appdata\local\{25CD3A00-ED43-4696-804E-0E31C47F96B2}
2012-04-15 07:07:19 -------- d-----w- c:\users\eric.falley\appdata\local\{60F44C4D-820D-4EE4-A965-734C9F9CEBC8}
2012-04-15 07:06:59 -------- d-----w- c:\users\eric.falley\appdata\local\{9ACE69EE-68CA-42C6-87B4-3FDD1284B45C}
2012-04-15 02:18:17 -------- d-----w- c:\program files\MeadCo Neptune
2012-04-14 03:27:40 -------- d-----w- c:\users\eric.falley\appdata\local\{ECB1592A-FF12-4090-B7E4-8D5188DADBB1}
2012-04-14 03:27:23 -------- d-----w- c:\users\eric.falley\appdata\local\{A29B7BD7-531D-47A5-8138-E0051BE802B3}
2012-04-13 19:30:58 -------- d-----w- c:\users\eric.falley\appdata\local\{016F0F7D-56C3-40C1-B918-8A964AE5B94E}
2012-04-13 19:30:39 -------- d-----w- c:\users\eric.falley\appdata\local\{58D4F0F5-1263-49F4-8BB3-9B374249C483}
2012-04-13 08:02:58 5120 ----a-w- c:\windows\system32\wmi.dll
2012-04-13 08:02:58 19824 ----a-w- c:\windows\system32\drivers\fs_rec.sys
2012-04-13 08:02:58 159232 ----a-w- c:\windows\system32\imagehlp.dll
2012-04-12 07:07:33 -------- d-----w- c:\users\eric.falley\appdata\local\{FC8DEF71-CF55-49E7-BFE9-AC6003062C84}
2012-04-12 07:07:13 -------- d-----w- c:\users\eric.falley\appdata\local\{EC712AEC-3283-4598-B11A-CF67365ACB59}
2012-04-03 05:11:57 -------- d-----w- c:\users\eric.falley\appdata\local\{31EFC535-B0EC-4D58-BCE3-37938FFBC570}
2012-04-02 17:12:14 -------- d-----w- c:\users\eric.falley\appdata\local\{B35732FF-E9BD-461A-89ED-29EF77786BF0}
2012-04-02 17:12:00 -------- d-----w- c:\users\eric.falley\appdata\local\{822FB9C2-DC33-4AEC-8D74-46954C0677F4}
2012-04-02 05:12:25 -------- d-----w- c:\users\eric.falley\appdata\local\{6DDB9F76-2608-42C8-9A16-D3F5B2FD7415}
2012-04-02 05:12:13 -------- d-----w- c:\users\eric.falley\appdata\local\{031F602F-2AAB-479E-A5D6-F93488D7FDE1}
2012-04-01 17:12:48 -------- d-----w- c:\users\eric.falley\appdata\local\{C8E2572F-0925-4E2A-B860-4E3B4E007715}
2012-04-01 17:12:38 -------- d-----w- c:\users\eric.falley\appdata\local\{9DCD5DE8-AF5A-40DE-9AE3-97E83CFFE675}
2012-04-01 04:43:42 -------- d-----w- c:\users\eric.falley\appdata\local\{F604CED0-09E9-4185-A7A3-03E5A843F46C}
2012-04-01 04:43:29 -------- d-----w- c:\users\eric.falley\appdata\local\{15B191BB-FA0F-4439-8FDA-1CEC330934EE}
2012-03-31 16:43:55 -------- d-----w- c:\users\eric.falley\appdata\local\{4828976E-B1C4-4D59-A9B4-409341E6BAAD}
2012-03-31 16:43:43 -------- d-----w- c:\users\eric.falley\appdata\local\{3A42CFFE-1F4A-46B2-808B-CF27A0759893}
2012-03-31 02:24:55 -------- d-----w- c:\users\eric.falley\appdata\local\{A6605E30-2233-4BCD-9307-9E4CFDF87484}
2012-03-31 02:24:43 -------- d-----w- c:\users\eric.falley\appdata\local\{08B12182-E8A3-489A-991B-9AF52ED8AD22}
2012-03-31 02:08:28 -------- d-----w- c:\users\eric.falley\appdata\local\{2E078407-9366-401B-8CDF-965511F83536}
2012-03-31 02:07:59 -------- d-----w- c:\users\eric.falley\appdata\local\{D9C26704-CF19-4074-9C4F-007991835751}
2012-03-31 01:41:41 -------- d-----w- c:\users\eric.falley\appdata\local\{BA4B56EC-C1C5-4100-8EBD-F83B91F03E58}
2012-03-31 01:41:22 -------- d-----w- c:\users\eric.falley\appdata\local\{AA8606AF-78A0-41CE-B9F9-C376EDBE166F}
2012-03-30 13:48:15 -------- d-----w- c:\users\eric.falley\appdata\local\{D8898BDA-EF8D-4C1B-94EC-E5519E897463}
2012-03-30 13:48:03 -------- d-----w- c:\users\eric.falley\appdata\local\{18CEB55B-BD69-449E-80D4-E2B8BC1C2A2C}
2012-03-30 01:04:44 -------- d-----w- c:\users\eric.falley\appdata\local\{7D6D2FF9-D097-49B7-A752-6F981174E6E0}
2012-03-30 01:04:18 -------- d-----w- c:\users\eric.falley\appdata\local\{948B2AA4-369D-4FB4-8254-5A10846A7B3E}
2012-03-29 12:49:04 -------- d-----w- c:\users\eric.falley\appdata\local\{43BCF16D-2CD4-42FB-91AA-E3753838FC7B}
2012-03-29 00:35:30 -------- d-----w- c:\users\eric.falley\appdata\local\{95ABD9ED-B9D2-40DB-AB98-2535EA54DDB6}
2012-03-28 17:44:04 372736 ----a-w- c:\windows\system32\hpmprein.dll
2012-03-28 08:46:09 -------- d-----w- c:\users\eric.falley\appdata\local\{CD64A8AF-6219-4E58-8ABE-87226DC91329}
2012-03-28 08:45:57 -------- d-----w- c:\users\eric.falley\appdata\local\{E0312C37-9F48-45BA-B8DB-9A9ED162B189}
2012-03-27 08:45:49 -------- d-----w- c:\users\eric.falley\appdata\local\{8FE10666-F964-472D-9A8D-2FA5D6B3A39A}
2012-03-27 08:45:40 -------- d-----w- c:\users\eric.falley\appdata\local\{8C0D3D6F-5F2F-4A53-BBA0-F15B5DE49303}
2012-03-26 19:33:09 -------- d-----w- c:\users\eric.falley\appdata\local\{CB4EDF6F-C9C4-4B82-A2D7-E3E42F058EA0}
2012-03-26 19:32:56 -------- d-----w- c:\users\eric.falley\appdata\local\{297672B8-4133-4FC6-A828-68C8D95830F2}
2012-03-26 07:11:37 -------- d-----w- c:\users\eric.falley\appdata\local\{2D22A9FA-4082-4944-A768-0CF0FADE6707}
2012-03-26 07:11:24 -------- d-----w- c:\users\eric.falley\appdata\local\{B566C045-D309-4C86-AC3C-4344318EDAFA}
2012-03-25 19:11:03 -------- d-----w- c:\users\eric.falley\appdata\local\{87FA26A4-BE7A-42DA-8239-3D129D8B4DC8}
2012-03-25 19:10:51 -------- d-----w- c:\users\eric.falley\appdata\local\{8E6CB097-1FB0-445E-B619-BE4F29616FB6}
2012-03-25 07:10:33 -------- d-----w- c:\users\eric.falley\appdata\local\{2884555B-47AF-40D5-B248-E6C36FDB40A3}
2012-03-25 07:10:22 -------- d-----w- c:\users\eric.falley\appdata\local\{9B034C62-7F87-4CD4-B7E5-AED4BDF9B774}
2012-03-24 19:08:25 -------- d-----w- c:\users\eric.falley\appdata\local\{270A31AD-34B3-45E7-B0AD-DEE39E58DE04}
2012-03-24 19:08:14 -------- d-----w- c:\users\eric.falley\appdata\local\{DACAC467-EF80-4988-A770-E85BC52B9B99}
2012-03-24 07:07:55 -------- d-----w- c:\users\eric.falley\appdata\local\{A3562519-F446-43A0-8468-240E2FA71900}
2012-03-24 07:07:44 -------- d-----w- c:\users\eric.falley\appdata\local\{53240457-7991-4200-B88E-993EF801FB0D}
2012-03-23 19:08:24 -------- d-----w- c:\users\eric.falley\appdata\local\{8051AAF6-874C-4B98-B1EF-07761C3C1DFF}
2012-03-23 02:50:48 -------- d-----w- c:\users\eric.falley\appdata\local\{C91F8F11-D60A-404E-9A2E-2B41EB865894}
2012-03-20 15:10:39 -------- d-----w- c:\users\eric.falley\appdata\local\{81718643-5527-417D-BFEA-ABED41CE4BC5}
2012-03-20 05:10:14 -------- d-----w- c:\users\eric.falley\appdata\local\{CBAA8510-99DF-4722-A778-26362A239574}
2012-03-18 22:40:41 -------- d-----w- c:\users\eric.falley\appdata\local\{C410318D-AFF8-4556-A1F3-98A472C443A2}
2012-03-17 05:24:22 -------- d-----w- c:\users\eric.falley\appdata\local\{6DB4D4A3-5AE0-47DE-BEBA-F6E01ACD7271}
2012-03-16 23:51:39 -------- d-----w- c:\users\eric.falley\appdata\local\{158240E1-18B3-46C1-8751-D027A85C8D59}
2012-03-15 22:30:26 -------- d-----w- c:\users\eric.falley\appdata\local\{2870728D-5A6F-486F-8646-A600C1ABB49D}
2012-03-15 22:30:14 -------- d-----w- c:\users\eric.falley\appdata\local\{E4CD12B6-3F49-40C2-9C3D-7DBD29D57E21}
2012-03-15 08:02:49 826880 ----a-w- c:\windows\system32\rdpcore.dll
2012-03-15 08:02:48 24576 ----a-w- c:\windows\system32\drivers\tdtcp.sys
2012-03-15 07:26:45 -------- d-----w- c:\users\eric.falley\appdata\local\{7FDADBDE-355D-4B8A-B2A6-8FB2C3F918DE}
2012-03-15 07:26:34 -------- d-----w- c:\users\eric.falley\appdata\local\{A3D174F7-0DE7-4788-9E61-327327EEE956}
2012-03-14 19:25:02 -------- d-----w- c:\users\eric.falley\appdata\local\{007EC161-9799-4994-A19D-705590B6EBD4}
2012-03-14 19:24:44 -------- d-----w- c:\users\eric.falley\appdata\local\{FAB92831-93C1-451C-BAC2-E774213D5C92}
2012-03-14 03:05:19 -------- d-----w- c:\users\eric.falley\appdata\local\{165CDB18-4536-40E1-AD34-FE84B04A34A1}
2012-03-14 03:05:07 -------- d-----w- c:\users\eric.falley\appdata\local\{0B5F1A63-92D2-417F-ACB6-E70C1518AF1B}
2012-03-13 15:04:41 -------- d-----w- c:\users\eric.falley\appdata\local\{CC955373-B877-4CFB-8C17-965BB15E6202}
2012-03-13 15:04:30 -------- d-----w- c:\users\eric.falley\appdata\local\{13266688-F33B-48AB-80EA-2421A3E05019}
2012-03-12 22:07:16 -------- d-----w- c:\users\eric.falley\appdata\local\{5C14E518-2BA1-4D3A-941E-CAB917F20500}
2012-03-12 22:07:04 -------- d-----w- c:\users\eric.falley\appdata\local\{98082B79-4852-47CC-8499-55B83104DF86}
2012-03-12 10:06:33 -------- d-----w- c:\users\eric.falley\appdata\local\{5C5F91CA-46B2-407E-9F60-81C76995FA5D}
2012-03-12 10:06:22 -------- d-----w- c:\users\eric.falley\appdata\local\{DB696DD1-2891-43A7-8E71-59E2590AFF4B}
2012-03-11 21:15:20 -------- d-----w- c:\users\eric.falley\appdata\local\{EEFBA5A9-D51C-418D-927C-B305CBCD2DA1}
2012-03-11 21:15:09 -------- d-----w- c:\users\eric.falley\appdata\local\{B2182569-B772-44EF-B73F-B4C024DF75CD}
2012-03-11 09:14:49 -------- d-----w- c:\users\eric.falley\appdata\local\{48614F00-B818-4E0F-B2D4-C5CC43859ECC}
2012-03-11 09:14:38 -------- d-----w- c:\users\eric.falley\appdata\local\{C204E182-17CD-4AFD-AA71-BC647CBBEFE1}
2012-03-10 21:14:19 -------- d-----w- c:\users\eric.falley\appdata\local\{42A3DE16-ED91-44B9-AD1F-6FF666147914}
2012-03-10 21:14:04 -------- d-----w- c:\users\eric.falley\appdata\local\{93D3C17B-30B0-414E-9DAE-1F2A53BFCFC3}
2012-03-10 09:12:34 -------- d-----w- c:\users\eric.falley\appdata\local\{8BB23263-AC69-4245-BFA0-FD3096922F4A}
2012-03-10 09:11:51 -------- d-----w- c:\users\eric.falley\appdata\local\{4DDF85DA-298A-4318-959B-5C07D779D2C9}
2012-03-09 15:23:56 -------- d-----w- c:\users\eric.falley\appdata\local\{B248E8B6-C725-4C9D-957C-55761DB5CB52}
2012-03-09 15:23:29 -------- d-----w- c:\users\eric.falley\appdata\local\{4DA8C289-6177-410A-9D9D-730AE59AA496}
2012-03-09 00:50:28 49016 ----a-w- c:\windows\system32\sirenacm.dll
2012-03-09 00:37:20 302448 ----a-w- c:\windows\WLXPGSS.SCR
2012-03-08 21:22:32 -------- d-----w- c:\users\eric.falley\appdata\local\{D3519C1E-FA1B-406D-B80E-6CDB415EF73D}
2012-03-08 21:22:03 -------- d-----w- c:\users\eric.falley\appdata\local\{D05C01C9-3CC7-4EE4-9B43-F4BD9B88D139}
2012-03-08 08:26:35 -------- d-----w- c:\users\eric.falley\appdata\local\{31633572-C6A3-4D35-B57A-BA841E039B80}
2012-03-08 08:26:25 -------- d-----w- c:\users\eric.falley\appdata\local\{7607B11F-105D-406B-9F46-18D26B0FF4D2}
2012-03-07 20:25:59 -------- d-----w- c:\users\eric.falley\appdata\local\{F26D8F36-F4A7-4814-B797-D89A585FE2A1}
2012-03-07 20:25:48 -------- d-----w- c:\users\eric.falley\appdata\local\{6727E564-1920-4ACB-82CB-CFE339B93286}
2012-03-07 06:17:47 -------- d-----w- c:\users\eric.falley\appdata\local\{6A75F441-873D-4768-88CA-0F2BC0972C58}
2012-03-07 06:17:36 -------- d-----w- c:\users\eric.falley\appdata\local\{E1DD924D-6F8E-4C77-AA7A-71CD02FD9C14}
2012-03-06 18:17:19 -------- d-----w- c:\users\eric.falley\appdata\local\{70E04109-16A9-4900-9328-36DD7622C21F}
2012-03-06 18:17:08 -------- d-----w- c:\users\eric.falley\appdata\local\{C249ACE4-8F38-4BF2-8DA0-D6A0A2557416}
2012-03-06 06:16:48 -------- d-----w- c:\users\eric.falley\appdata\local\{73F36B84-6E34-4F80-BEDE-32B6DA1A4B5F}
2012-03-06 06:16:36 -------- d-----w- c:\users\eric.falley\appdata\local\{48D0EC1F-2477-4732-9031-6B4D994CCE9B}
2012-03-05 18:16:09 -------- d-----w- c:\users\eric.falley\appdata\local\{CDB774A5-9E62-44B5-AFE1-D52288DC9CD0}
2012-03-05 18:15:54 -------- d-----w- c:\users\eric.falley\appdata\local\{94C98371-8B67-4E95-8AA2-BE9D8B5B961B}
2012-03-05 06:13:26 -------- d-----w- c:\users\eric.falley\appdata\local\{A9ECFD7E-E4A8-411C-BC56-BEBCA8F699C6}
2012-03-04 18:13:07 -------- d-----w- c:\users\eric.falley\appdata\local\{57B59E71-196C-4890-AC55-E3F75EAD5A22}
2012-03-04 06:12:49 -------- d-----w- c:\users\eric.falley\appdata\local\{941FB71D-90FC-44EF-9208-62038D58BF12}
2012-03-04 06:12:37 -------- d-----w- c:\users\eric.falley\appdata\local\{E0958B21-B907-489B-8CF7-A386085FC8D5}
2012-03-03 18:12:02 -------- d-----w- c:\users\eric.falley\appdata\local\{54DBACEA-7AA1-4234-AFB0-716B4AA59B80}
2012-03-03 18:11:51 -------- d-----w- c:\users\eric.falley\appdata\local\{437183C1-0C16-45DF-822F-142F97384074}
2012-03-03 06:11:18 -------- d-----w- c:\users\eric.falley\appdata\local\{594BF4D7-2FA1-45A0-B75F-2364E5AC4DEC}
2012-03-03 06:11:07 -------- d-----w- c:\users\eric.falley\appdata\local\{493DBD75-968B-41B3-B63C-2B03934F80C1}
2012-03-02 18:10:38 -------- d-----w- c:\users\eric.falley\appdata\local\{A03612E4-54BB-43CB-B95A-F3A7CE5EAF3F}
2012-03-02 18:10:27 -------- d-----w- c:\users\eric.falley\appdata\local\{7507ADEB-AAA9-4696-9773-9A570CA47A76}
2012-03-01 19:08:48 -------- d-----w- c:\users\eric.falley\appdata\local\{FAAFF3F1-4444-4CA0-8908-C4C132A740A0}
2012-03-01 19:08:38 -------- d-----w- c:\users\eric.falley\appdata\local\{672AB13E-AB0B-4925-AA01-CA3B18DBCD71}
2012-03-01 07:07:38 -------- d-----w- c:\users\eric.falley\appdata\local\{B3A528EC-D512-48AA-BCAD-74D624512682}
2012-03-01 07:07:26 -------- d-----w- c:\users\eric.falley\appdata\local\{D05039A6-7DD4-4402-A588-8BFD67A0191E}
2012-02-29 18:24:25 -------- d-----w- c:\users\eric.falley\appdata\local\{7C3D269F-B585-4625-8591-61AE42694629}
2012-02-29 18:23:55 -------- d-----w- c:\users\eric.falley\appdata\local\{A6BB3F27-0F77-4607-9406-F135DE5039A0}
2012-02-29 05:00:46 -------- d-----w- c:\users\eric.falley\appdata\local\{139CCF01-233E-49E8-AD41-E27C5BB067BF}
2012-02-28 16:53:32 -------- d-----w- c:\users\eric.falley\appdata\local\{C9C82B04-CF97-49FC-8408-64756FB8963F}
2012-02-28 16:53:20 -------- d-----w- c:\users\eric.falley\appdata\local\{870557B5-8B54-4D07-AEAA-E982A4432F85}
2012-02-27 20:41:56 -------- d-----w- c:\users\eric.falley\appdata\local\{5510C6EC-C602-48B9-951E-EB6F97E58E05}
2012-02-27 20:41:44 -------- d-----w- c:\users\eric.falley\appdata\local\{1D3866D7-4018-4002-802C-1376DD61820E}
2012-02-27 07:55:21 -------- d-----w- c:\users\eric.falley\appdata\local\{10C76E36-6046-4F2C-8489-26042123CA76}
2012-02-27 07:55:11 -------- d-----w- c:\users\eric.falley\appdata\local\{55C8B087-7B13-404F-8CCA-2E8CB0434B6E}
2012-02-26 19:54:54 -------- d-----w- c:\users\eric.falley\appdata\local\{0F41584F-D106-44F1-95FB-40F9855E0A73}
2012-02-26 19:54:43 -------- d-----w- c:\users\eric.falley\appdata\local\{A15EBE86-006F-4335-BA3E-5570B736A350}
2012-02-26 07:54:26 -------- d-----w- c:\users\eric.falley\appdata\local\{CD8318A4-801A-4B1B-84ED-2F29385007B9}
2012-02-26 07:54:14 -------- d-----w- c:\users\eric.falley\appdata\local\{397A6761-30A5-443F-BA28-9EE1CAED83DF}
2012-02-25 19:53:33 -------- d-----w- c:\users\eric.falley\appdata\local\{EC6C022F-49DC-4350-A588-440AB8309D6B}
2012-02-25 19:53:16 -------- d-----w- c:\users\eric.falley\appdata\local\{1252A2CC-71C5-4039-8587-87772FCCBE1A}
2012-02-25 07:52:48 -------- d-----w- c:\users\eric.falley\appdata\local\{BE8F9FCA-DAC5-40C3-BFF2-296B7F2C7ECD}
2012-02-25 07:52:37 -------- d-----w- c:\users\eric.falley\appdata\local\{86A7A432-4409-4661-A4C4-FCA6663A6EF4}
2012-02-24 19:25:59 -------- d-----w- c:\users\eric.falley\appdata\local\{EB9F8B18-DBE1-4219-ACAC-7D146E199D9C}
2012-02-24 19:25:48 -------- d-----w- c:\users\eric.falley\appdata\local\{5B2DF75C-760A-4ECC-B2E4-4D60CB015F70}
2012-02-24 08:30:48 1618216 ----a-w- c:\program files\common files\microsoft shared\office12\OGL.DLL
2012-02-24 07:25:29 -------- d-----w- c:\users\eric.falley\appdata\local\{A5DAD999-3919-4F9F-B3A8-F04551B40341}
2012-02-24 07:25:18 -------- d-----w- c:\users\eric.falley\appdata\local\{2E881D66-7658-474B-BFBB-979FC8AB13A0}
2012-02-23 19:22:41 -------- d-----w- c:\users\eric.falley\appdata\local\{A3D0D698-9F20-486D-9578-5B8B964C1074}
2012-02-23 19:22:20 -------- d-----w- c:\users\eric.falley\appdata\local\{47C77D96-E7C2-4AD4-A413-D964D5C83AFA}
2012-02-23 06:14:21 -------- d-----w- c:\users\eric.falley\appdata\local\{4C674B03-48EA-4C7B-A454-A29B935D2F27}
2012-02-23 06:14:09 -------- d-----w- c:\users\eric.falley\appdata\local\{09A633DC-F9D4-47F9-ADC5-ADA3916095BE}
2012-02-22 15:05:51 -------- d-----w- c:\users\eric.falley\appdata\local\{BC226D26-B701-4204-9D4D-077B903FE41A}
2012-02-22 15:05:33 -------- d-----w- c:\users\eric.falley\appdata\local\{B7BE73C6-2809-470A-997C-FDACC981E697}
2012-02-22 08:06:50 -------- d-----w- c:\users\eric.falley\appdata\local\{2D546C45-4483-44B5-B9BB-9D7E89FC1C9F}
2012-02-22 08:06:17 -------- d-----w- c:\users\eric.falley\appdata\local\{D79E8033-D9B2-4F0D-9806-E4B25D79F52A}
2012-02-20 20:32:31 -------- d-----w- c:\users\eric.falley\appdata\local\{256E9FA6-3A21-4057-AB6E-057F55D65BF0}
2012-02-20 20:32:19 -------- d-----w- c:\users\eric.falley\appdata\local\{8B5753B9-634C-4A30-81A2-CF2A9EC96A46}
2012-02-20 00:15:19 -------- d-----w- C:\symbols
2012-02-19 23:32:07 -------- d-----w- c:\program files\Microsoft Windows Performance Toolkit
2012-02-19 23:31:41 -------- d-----w- c:\program files\Microsoft Help Viewer
2012-02-19 23:30:43 -------- d-----w- c:\program files\Debugging Tools for Windows (x86)
2012-02-19 23:30:18 -------- d-----w- c:\program files\Application Verifier
2012-02-19 23:27:32 -------- d-----w- c:\program files\Microsoft Visual Studio 10.0
2012-02-19 22:50:54 -------- d-----w- c:\users\eric.falley\appdata\local\{4922D074-B44D-499B-9FA6-29306546D453}
2012-02-19 22:50:43 -------- d-----w- c:\users\eric.falley\appdata\local\{6CC16E40-47A5-46CF-9FB9-512BF4EAE1F5}
2012-02-18 20:17:52 -------- d-----w- c:\users\eric.falley\appdata\local\{A7B7B2A5-4B5C-456A-B57A-E2167E304962}
2012-02-18 08:17:12 -------- d-----w- c:\users\eric.falley\appdata\local\{698E029C-E89A-42ED-AB81-058A49785410}
2012-02-18 08:16:52 -------- d-----w- c:\users\eric.falley\appdata\local\{9F02AC78-D80E-459A-8BA2-BD418D6F1B6C}
2012-02-18 08:11:56 -------- d-----w- c:\users\eric.falley\appdata\local\{C71762D9-E31E-4996-94A6-B7E923E0EBB8}
2012-02-18 08:11:29 -------- d-----w- c:\users\eric.falley\appdata\local\{B07613BC-0F21-4236-BA90-65AE15036B4F}
2012-02-17 16:57:06 -------- d-----w- c:\users\eric.falley\appdata\local\{31DB8D87-05DC-4DC2-8B06-7D968F1329B6}
2012-02-17 16:56:47 -------- d-----w- c:\users\eric.falley\appdata\local\{2B19A59E-3DAA-4DB4-B8BE-BC4B9C55A480}
2012-02-17 04:51:35 -------- d-----w- c:\users\eric.falley\appdata\local\{78CE999F-C3D3-4922-878E-8BC7D561989E}
2012-02-16 16:13:47 -------- d-----w- c:\users\eric.falley\appdata\local\{B1B8655D-70AA-4714-96F5-1E5A2E2D055E}
2012-02-16 16:13:31 -------- d-----w- c:\users\eric.falley\appdata\local\{71728624-3A6F-47A5-8360-023338B088FD}
2012-02-16 09:25:02 1288472 ----a-w- c:\windows\system32\ntdll.dll
2012-02-16 09:20:52 478720 ----a-w- c:\windows\system32\timedate.cpl
2012-02-16 09:19:47 67072 ----a-w- c:\windows\system32\packager.dll
2012-02-16 09:19:21 534528 ----a-w- c:\windows\system32\EncDec.dll
2012-02-16 09:18:58 38912 ----a-w- c:\windows\system32\csrsrv.dll
2012-02-16 09:17:56 1328128 ----a-w- c:\windows\system32\quartz.dll
2012-02-16 09:16:06 314880 ----a-w- c:\windows\system32\webio.dll
2012-02-16 09:16:06 22528 ----a-w- c:\windows\system32\lsass.exe
2012-02-16 09:16:06 22016 ----a-w- c:\windows\system32\secur32.dll
2012-02-16 09:16:06 15872 ----a-w- c:\windows\system32\sspisrv.dll
2012-02-16 09:16:06 100352 ----a-w- c:\windows\system32\sspicli.dll
2012-02-16 09:15:32 690688 ----a-w- c:\windows\system32\msvcrt.dll
2012-02-16 09:13:39 442880 ----a-w- c:\windows\system32\ntshrui.dll
2012-02-16 01:21:09 -------- d-----w- c:\users\eric.falley\appdata\local\{EF95AA39-75C7-4EF9-9DCF-65D2E9E540F2}
2012-02-16 01:20:56 -------- d-----w- c:\users\eric.falley\appdata\local\{3E88AC5C-896A-407E-99FC-C5566C31AC18}
2012-02-15 03:27:38 -------- d-----w- c:\users\eric.falley\appdata\local\{25153071-57FF-4CB1-AC0F-FCB6D3623E0F}
2012-02-15 03:27:26 -------- d-----w- c:\users\eric.falley\appdata\local\{0226AD39-3429-4D04-8931-89CE43657B15}
2012-02-14 15:26:42 -------- d-----w- c:\users\eric.falley\appdata\local\{7B54F4E2-DCD3-4DF5-A2E9-3D98A5B395BD}
2012-02-14 15:26:30 -------- d-----w- c:\users\eric.falley\appdata\local\{B0936F1D-ECDE-4127-84A3-F533531CF38F}
2012-02-14 02:57:27 -------- d-----w- c:\users\eric.falley\appdata\local\{2E703477-FC68-46E3-966F-877DE0CE7686}
2012-02-14 02:57:09 -------- d-----w- c:\users\eric.falley\appdata\local\{F7550076-2D05-480A-BEAE-AAC238795412}
2012-02-13 06:22:45 -------- d-----w- c:\users\eric.falley\appdata\local\{ADE941B2-F22D-42DB-85B4-DCB46CAD6D63}
2012-02-13 06:22:30 -------- d-----w- c:\users\eric.falley\appdata\local\{D7F79684-D59C-40AC-9FE7-CDC2AA66B4A5}
2012-02-13 04:19:43 -------- d-----w- c:\program files\common files\Avid
2012-02-13 04:18:14 -------- d-----w- c:\users\eric.falley\appdata\roaming\Avid
2012-02-13 04:18:14 -------- d-----w- c:\programdata\Avid
2012-02-13 04:18:14 -------- d-----w- c:\program files\Avid
2012-02-12 18:20:46 -------- d-----w- c:\users\eric.falley\appdata\local\{4C8F3ABA-FF27-4D2C-BEE8-777EEDF17117}
2012-02-12 18:20:25 -------- d-----w- c:\users\eric.falley\appdata\local\{5DC5F278-39A3-4158-A5D3-05F3C689CD26}
2012-02-11 21:41:09 -------- d-----w- c:\users\eric.falley\appdata\local\{7EA6EAFE-7108-4ABA-9BD2-8A9C48FEB659}
2012-02-11 21:40:47 -------- d-----w- c:\users\eric.falley\appdata\local\{0546EEAC-1F8F-4990-AF63-870CC192DCC1}
2012-02-11 21:34:12 -------- d-----w- c:\users\eric.falley\appdata\local\{AA311EAA-E3AC-4523-9494-4581D8C5E8E7}
2012-02-10 23:15:50 67584 ----a-w- c:\windows\system32\hpbpro.dll
2012-02-10 23:15:50 47104 ----a-w- c:\windows\system32\hpboid.dll
2012-02-10 23:15:50 46080 ----a-w- c:\windows\system32\hpbmiapi.dll
2012-02-10 23:15:50 12288 ----a-w- c:\windows\system32\hpbprops.dll
2012-02-10 23:15:50 12288 ----a-w- c:\windows\system32\hpboidps.dll
2012-02-10 16:14:08 -------- d-----w- c:\users\eric.falley\appdata\local\{E4F1BDBC-E2DB-43B3-8C90-483C5B0A0FAC}
2012-02-10 04:12:27 -------- d-----w- c:\users\eric.falley\appdata\local\{F74310AB-CEA2-43CF-B8EA-B3F855E0F157}
2012-02-10 04:12:09 -------- d-----w- c:\users\eric.falley\appdata\local\{B816EE33-952C-49D2-BD98-D24BFFA136D6}
2012-02-09 17:30:24 49976 ----a-w- c:\program files\common files\system\msmapi\1033\MSMAPI32.DLL
2012-02-09 06:12:01 -------- d-----w- c:\users\eric.falley\appdata\local\{D2D17371-19A2-418D-9656-CCF7E47ECEC4}
2012-02-09 06:11:49 -------- d-----w- c:\users\eric.falley\appdata\local\{7A65208D-44CA-47AD-BBB7-A0CD4FAD0AE5}
2012-02-08 23:53:06 55808 ----a-w- c:\windows\system32\HPZipm12.dll
2012-02-08 23:53:06 54784 ----a-w- c:\windows\system32\HPZidr12.dll
2012-02-08 23:53:06 45568 ----a-w- c:\windows\system32\HPZinw12.dll
2012-02-08 23:53:06 39424 ----a-w- c:\windows\system32\HPZipr12.dll
2012-02-08 23:53:06 34304 ----a-w- c:\windows\system32\hpzipt12.dll
2012-02-08 23:53:06 21504 ----a-w- c:\windows\system32\hpzisn12.dll
2012-02-08 18:10:22 -------- d-----w- c:\users\eric.falley\appdata\local\{2C5BEA19-956D-4C32-9AAD-6D757FD807CB}
2012-02-08 18:09:55 -------- d-----w- c:\users\eric.falley\appdata\local\{C9DAB977-2B94-4FA6-85A3-C55DABC546D3}
2012-02-08 04:19:13 -------- d-----w- c:\users\eric.falley\appdata\local\{06592616-CEDA-435F-86FC-5D6157278387}
2012-02-08 04:19:01 -------- d-----w- c:\users\eric.falley\appdata\local\{A0C72CA6-D24D-480C-997B-F9F4133FED46}
2012-02-07 16:18:14 -------- d-----w- c:\users\eric.falley\appdata\local\{BE07F2D4-2464-4774-9A85-02BE33C9C0A0}
2012-02-07 16:17:51 -------- d-----w- c:\users\eric.falley\appdata\local\{6006213F-D7D9-4741-BF59-CBEEE3DD4C9B}
2012-02-06 20:21:12 -------- d-----w- c:\users\eric.falley\appdata\local\{DF0273CB-AE09-4F1E-BAC6-AD17A2554BF5}
2012-02-06 20:20:46 -------- d-----w- c:\users\eric.falley\appdata\local\{E09D5BB2-7825-43FF-91B6-E371FD4170CD}
2012-02-05 04:48:13 -------- d-----w- c:\users\eric.falley\appdata\local\{4213863D-5ECB-408E-B59F-5B5DA837AED3}
2012-02-05 04:48:01 -------- d-----w- c:\users\eric.falley\appdata\local\{F1F318DA-F9DE-4D5D-B9AD-020F3D804DBC}
2012-02-04 16:46:40 -------- d-----w- c:\users\eric.falley\appdata\local\{88EDEB2F-8D06-4C0D-8601-859B32D4FCA5}
2012-02-04 16:46:26 -------- d-----w- c:\users\eric.falley\appdata\local\{C1D00EAA-6A1A-48D2-B0EC-89564CE493FB}
2012-02-03 05:29:42 -------- d-----w- c:\users\eric.falley\appdata\local\{01E3DDC2-0DA3-4EA3-A3F9-6CF2B020F09D}
2012-02-02 17:27:41 -------- d-----w- c:\users\eric.falley\appdata\local\{5CB8AB4F-A078-4F76-8491-42B0748BC387}
2012-02-02 17:25:52 -------- d-----w- c:\users\eric.falley\appdata\local\{F90CDC21-0F4E-44B7-9943-DFC739B67D43}
2012-02-02 13:02:01 22536 ----a-w- c:\windows\system32\drivers\SophosBootDriver.sys
2012-02-02 02:26:45 -------- d-----w- c:\users\eric.falley\appdata\local\{2BCBB74D-C7E2-4D2E-B81D-02C753E157A3}
2012-02-02 02:26:23 -------- d-----w- c:\users\eric.falley\appdata\local\{64CFE016-8DAC-40D9-898C-BD09B41999C1}
2012-02-01 13:25:55 -------- d-----w- c:\users\eric.falley\appdata\local\{B7A36666-9D34-411C-AFB3-6F4FD121AA2F}
2012-02-01 13:25:43 -------- d-----w- c:\users\eric.falley\appdata\local\{46773620-0797-4D76-83DF-133BD2BC7B96}
2012-02-01 01:25:19 -------- d-----w- c:\users\eric.falley\appdata\local\{31322CAF-BD3F-4C15-B056-E18DE17EE9C6}
2012-02-01 01:25:07 -------- d-----w- c:\users\eric.falley\appdata\local\{EA91EF88-7C5B-45B3-9E71-66406370E874}
2012-01-31 13:24:49 -------- d-----w- c:\users\eric.falley\appdata\local\{48BD50AC-304A-46BE-A09C-DE7549A137F8}
2012-01-31 13:24:35 -------- d-----w- c:\users\eric.falley\appdata\local\{A77D350A-6C24-471B-85F3-501871AF38AF}
2012-01-31 01:22:32 -------- d-----w- c:\users\eric.falley\appdata\local\{9B380CEC-1C5A-4374-BBB1-AA00C0AE9400}
2012-01-31 01:22:14 -------- d-----w- c:\users\eric.falley\appdata\local\{F0EFCC9F-78A2-4632-8935-3D39846B0898}
2012-01-30 11:30:51 -------- d-----w- c:\users\eric.falley\appdata\local\{93F010C6-420B-40EC-AE6A-1551ED45BC3D}
2012-01-30 11:30:38 -------- d-----w- c:\users\eric.falley\appdata\local\{FB718FA6-4A33-4F64-8FAD-8CEC24EEEE5A}
2012-01-29 23:30:00 -------- d-----w- c:\users\eric.falley\appdata\local\{2B39C8A5-D68C-4295-957B-4F8CBB0C3340}
2012-01-29 23:29:45 -------- d-----w- c:\users\eric.falley\appdata\local\{D0BF7FFF-91D8-4E9D-83D6-3847EBA4711E}
2012-01-29 07:58:02 -------- d-----w- c:\users\eric.falley\appdata\local\{2DF317CF-2E50-451E-98BB-65DD95D76407}
2012-01-29 07:57:48 -------- d-----w- c:\users\eric.falley\appdata\local\{57051D9A-300C-47A3-991A-3FE6702DB607}
2012-01-28 19:56:30 -------- d-----w- c:\users\eric.falley\appdata\local\{3C82D9AF-6EC2-4B2B-AE6B-EAE3A4C1C996}
2012-01-28 19:56:16 -------- d-----w- c:\users\eric.falley\appdata\local\{62C2EF8E-9E47-4107-B726-92D3486A7440}
2012-01-28 03:24:03 -------- d-----w- c:\users\eric.falley\appdata\local\{463BCC73-63EE-4FA3-B7D5-F421955ECBCF}
2012-01-28 03:23:51 -------- d-----w- c:\users\eric.falley\appdata\local\{F0A8FF57-BE36-4607-A239-6AB435921AD1}
2012-01-27 15:23:03 -------- d-----w- c:\users\eric.falley\appdata\local\{0B95041D-5E35-473A-A904-F6AFE4FA8D51}
2012-01-27 15:22:49 -------- d-----w- c:\users\eric.falley\appdata\local\{670395B1-2BC5-4B80-9D05-38F209B7B600}
2012-01-26 21:34:56 -------- d-----w- c:\users\eric.falley\appdata\local\{49963447-E486-455B-9286-5F5049C442B2}
2012-01-26 21:34:31 -------- d-----w- c:\users\eric.falley\appdata\local\{EA6FBD29-63D3-43D5-8726-2435D9336962}
2012-01-25 20:53:30 -------- d-----w- c:\users\eric.falley\appdata\local\{138FB889-5C25-4C05-A6DB-23D2F8C8E7CE}
2012-01-25 20:53:12 -------- d-----w- c:\users\eric.falley\appdata\local\{E925FCBF-299C-441A-8EC2-2EA5008EAF23}
2012-01-25 04:45:08 -------- d-----w- c:\users\eric.falley\appdata\local\{E28B4A56-D112-4335-AF46-62D20B69A547}
2012-01-25 04:44:56 -------- d-----w- c:\users\eric.falley\appdata\local\{47D0AC0F-235E-4362-B2B3-2AA24FAC65DC}
2012-01-24 16:42:37 -------- d-----w- c:\users\eric.falley\appdata\local\{55BE6678-8A93-4B64-9694-9F2A4D756543}
2012-01-24 16:42:17 -------- d-----w- c:\users\eric.falley\appdata\local\{40622B50-1B8E-426B-91A4-6E56B91C1A1E}
2012-01-24 01:17:33 -------- d-----w- c:\users\eric.falley\appdata\local\{95102E67-B964-437E-ADD2-2212A091ABF7}
2012-01-24 01:17:14 -------- d-----w- c:\users\eric.falley\appdata\local\{882BE0F8-A284-4492-8FAD-5B528F6F1C82}
2012-01-23 09:01:59 -------- d-----w- c:\users\eric.falley\appdata\local\{335EAF25-5977-49AF-84EC-672E7BD32949}
2012-01-23 09:01:44 -------- d-----w- c:\users\eric.falley\appdata\local\{1BAB6747-8C04-4145-9EB0-F9D555E6FAA5}
2012-01-22 21:01:22 -------- d-----w- c:\users\eric.falley\appdata\local\{7DDF8AD3-DE7D-47C7-B3BC-D2886DA2B483}
2012-01-22 09:00:51 -------- d-----w- c:\users\eric.falley\appdata\local\{871771B7-F9AB-4AFB-BD39-7EB5474605E0}
2012-01-22 09:00:39 -------- d-----w- c:\users\eric.falley\appdata\local\{B5C844FB-0413-4C05-A796-ED0A3E91E2AE}
2012-01-21 20:59:46 -------- d-----w- c:\users\eric.falley\appdata\local\{9805C97D-E470-473E-AF6D-DA13E033098A}
2012-01-21 08:38:20 -------- d-----w- c:\users\eric.falley\appdata\local\{ABF22A1B-6188-459C-9B0B-B5C14763AF76}
2012-01-21 08:38:01 -------- d-----w- c:\users\eric.falley\appdata\local\{34C9E90A-E0D6-4302-B590-14A6E6FC3A65}
2012-01-20 22:27:18 -------- d-----w- c:\users\eric.falley\appdata\local\{9A02770A-E763-477F-97D5-F133C8A2D861}
2012-01-20 04:21:00 -------- d-----w- c:\users\eric.falley\appdata\local\{4B4F1F0F-B8FC-4483-B8C6-A6F636BFE8BD}
2012-01-20 04:20:48 -------- d-----w- c:\users\eric.falley\appdata\local\{930E18E7-322F-4D98-8A4E-E1FF60891C91}
2012-01-19 16:19:32 -------- d-----w- c:\users\eric.falley\appdata\local\{CAE54F29-46D5-47D8-9F66-AD2E6E4DF3C4}
2012-01-19 16:19:18 -------- d-----w- c:\users\eric.falley\appdata\local\{36042F18-240C-4D48-90DD-FC49C22498F2}
2012-01-18 23:41:14 -------- d-----w- c:\users\eric.falley\appdata\local\{590219D1-98D6-4172-9D20-EB336BC0EC36}
2012-01-18 23:40:35 -------- d-----w- c:\users\eric.falley\appdata\local\{82D45BCC-F8F2-4E01-A4B0-EDF157C6F91D}
2012-01-18 09:41:07 -------- d-----w- c:\users\eric.falley\appdata\local\{08E88548-FE54-4FE4-B77C-3E44B8C9B71F}
2012-01-18 09:40:53 -------- d-----w- c:\users\eric.falley\appdata\local\{11CE3ADB-B9AE-43F8-8437-CE2F58CE1614}
2012-01-17 21:40:29 -------- d-----w- c:\users\eric.falley\appdata\local\{95F84B66-676B-4AB7-AA39-A12E2DF4B8FD}
2012-01-17 21:40:12 -------- d-----w- c:\users\eric.falley\appdata\local\{668E5FFB-C131-4FB1-AFD4-55CAE07908B1}
2012-01-17 09:28:41 -------- d-----w- c:\users\eric.falley\appdata\local\{2C95478F-3BDE-4586-88C7-AF41A37CF818}
2012-01-17 09:28:28 -------- d-----w- c:\users\eric.falley\appdata\local\{A657B37C-F7E1-4E5E-8F47-32864546873C}
2012-01-16 21:28:09 -------- d-----w- c:\users\eric.falley\appdata\local\{AE7CE209-5D09-4231-ABC3-4D171DCBC6EF}
2012-01-16 21:27:57 -------- d-----w- c:\users\eric.falley\appdata\local\{C272E790-4734-4FB1-90DB-34741175F1DA}
2012-01-16 09:27:36 -------- d-----w- c:\users\eric.falley\appdata\local\{9D91BCAD-632E-4429-810B-13AD24BB481E}
2012-01-16 09:27:23 -------- d-----w- c:\users\eric.falley\appdata\local\{4C034F68-F00D-4410-B17D-3296DE9EF816}
2012-01-14 21:04:15 -------- d-----w- c:\users\eric.falley\appdata\local\{B43B4868-0C7E-4749-9D7B-3DFE52A2B065}
2012-01-14 21:04:01 -------- d-----w- c:\users\eric.falley\appdata\local\{DDC9A1B3-AB59-4DC2-A6F1-AD86C5751278}
2012-01-14 20:50:01 -------- d-----w- c:\users\eric.falley\appdata\local\{A7C10C80-135C-4A02-828F-3109FB8DE509}
2012-01-14 20:48:37 -------- d-----w- c:\users\eric.falley\appdata\local\{A23496B9-3AF7-4292-9EC8-4C3203A87B2F}
2012-01-14 03:03:36 -------- d-----w- c:\users\eric.falley\appdata\local\{03B1D5BD-CB0F-4FC3-8261-B562D88926C9}
2012-01-14 03:03:21 -------- d-----w- c:\users\eric.falley\appdata\local\{FC6888B8-94D0-4D80-A9D9-5FE216B89BA0}
2012-01-13 15:02:38 -------- d-----w- c:\users\eric.falley\appdata\local\{45594928-D420-46F4-A2EE-FA1E62E67105}
2012-01-13 15:01:04 -------- d-----w- c:\users\eric.falley\appdata\local\{925858C5-6D0C-43F8-9018-27DEE3D05D2B}
2012-01-12 23:43:51 -------- d-----w- c:\users\eric.falley\appdata\local\{C963E433-4AE0-4492-8D9D-453442A37818}
2012-01-12 23:43:25 -------- d-----w- c:\users\eric.falley\appdata\local\{55ADBE56-F6A4-4934-93CF-211CDDD558A3}
2012-01-12 00:39:36 -------- d-----w- c:\users\eric.falley\appdata\local\{2E3D5205-8F67-4534-B79B-240BDA5C6429}
2012-01-12 00:39:19 -------- d-----w- c:\users\eric.falley\appdata\local\{F464B046-31D0-4759-8643-520C92036437}
2012-01-10 21:11:32 -------- d-----w- c:\users\eric.falley\appdata\local\{6F5F8B62-9CA5-4B3F-B323-F6AA9C54C4CC}
2012-01-10 21:11:16 -------- d-----w- c:\users\eric.falley\appdata\local\{E9947ECB-EC54-443B-9C15-B76C64774A02}
2012-01-10 05:45:23 -------- d-----w- c:\users\eric.falley\appdata\local\{90EA1F69-701E-4FC1-92D1-9E361D3B5308}
2012-01-10 05:45:12 -------- d-----w- c:\users\eric.falley\appdata\local\{652139D0-AB38-4108-BEE2-C8B1E4876ED9}
2012-01-09 17:46:02 -------- d-----w- c:\users\eric.falley\appdata\local\{A1C766DC-23BA-4B51-80BB-CB8BFD4DC5FA}
2012-01-09 06:35:42 25808 ----a-w- c:\windows\ctl3dv2.dll
2012-01-09 06:35:42 -------- d-----w- C:\Animagic
2012-01-09 04:58:15 -------- d-----w- c:\users\eric.falley\appdata\local\{742FA0B2-6E83-4E1B-A7AB-4AA626FEEEFF}
2012-01-09 04:58:01 -------- d-----w- c:\users\eric.falley\appdata\local\{DA8EBB6A-5AA3-46AA-B7C5-7AD77F272183}
2012-01-08 16:03:38 -------- d-----w- c:\users\eric.falley\appdata\local\{BE4834AF-F815-4532-921A-C89E57F19294}
2012-01-08 16:03:22 -------- d-----w- c:\users\eric.falley\appdata\local\{E1B616E4-E065-4481-B05B-1362B86995ED}
2012-01-08 02:32:47 -------- d-----w- c:\users\eric.falley\appdata\local\{3C41E2A4-8CC4-4296-8858-C4B500C439B6}
2012-01-08 02:31:57 -------- d-----w- c:\users\eric.falley\appdata\local\{26A1A2F2-F2CB-4CE0-B026-940620625EB4}
2012-01-07 18:16:49 -------- d-----w- c:\users\eric.falley\appdata\local\{A6947766-47B0-4EBF-9F16-5B9500750F4F}
2012-01-07 18:08:43 -------- d-----w- c:\users\eric.falley\appdata\local\{B854A3CD-91DE-4725-9EBE-744AD5BEB957}
2012-01-07 18:08:23 -------- d-----w- c:\users\eric.falley\appdata\local\{697C40CE-D854-4D63-917E-3BB1FC5CDAF8}
2012-01-07 05:57:58 -------- d-----w- c:\users\eric.falley\appdata\local\{626BFD4C-302D-40F5-8246-4A808B3B80F8}
2012-01-06 16:06:57 -------- d-----w- c:\users\eric.falley\appdata\local\{BBA99D4A-F493-4AB0-9610-0EFAAD3ACE94}
2012-01-06 16:06:39 -------- d-----w- c:\users\eric.falley\appdata\local\{065D7CC0-87BB-452C-810F-7977DE1E0A5B}
2012-01-05 21:56:51 -------- d-----w- c:\users\eric.falley\appdata\local\{3C4A3377-D7C9-4728-A4AA-300A8593958E}
2012-01-05 21:56:33 -------- d-----w- c:\users\eric.falley\appdata\local\{0F641630-21A4-44E8-AC7E-9915EA8225F5}
2012-01-05 09:56:14 -------- d-----w- c:\users\eric.falley\appdata\local\{16F33035-A34C-47B8-BE4E-EB46BE628D59}
2012-01-05 09:55:56 -------- d-----w- c:\users\eric.falley\appdata\local\{F010EF8C-CCA7-4B16-A1ED-0E77975323DB}
2012-01-04 21:55:37 -------- d-----w- c:\users\eric.falley\appdata\local\{EBED997F-FD1A-4C6D-8D5E-56531FA42055}
2012-01-04 21:55:21 -------- d-----w- c:\users\eric.falley\appdata\local\{5A3E3AA5-1BD1-4C57-B4C2-4A3ECD8A91FB}
2012-01-04 09:54:47 -------- d-----w- c:\users\eric.falley\appdata\local\{50D6A82D-6753-4F16-A8DD-2F8FE2C3F69E}
2012-01-04 09:54:25 -------- d-----w- c:\users\eric.falley\appdata\local\{10046C2F-E59B-4970-8A6D-5870D8AD34A3}
2012-01-03 21:53:41 -------- d-----w- c:\users\eric.falley\appdata\local\{26708EA8-CAAE-40EF-8245-B61C9EACBF88}
2012-01-03 21:53:21 -------- d-----w- c:\users\eric.falley\appdata\local\{CC0FD025-3FE5-4AB0-A866-31DB80F1B774}
2012-01-03 19:37:48 -------- d-----w- c:\users\eric.falley\appdata\roaming\GameRanger
2011-12-31 19:25:58 -------- d-----w- c:\users\eric.falley\appdata\local\{F87C0D49-256D-4B11-AA46-072DC7A6F7B8}
2011-12-31 19:25:04 -------- d-----w- c:\users\eric.falley\appdata\local\{3DE6D971-4787-40D8-999A-DF73AC26030D}
2011-12-31 07:01:27 -------- d-----w- c:\users\eric.falley\appdata\local\{3A0DB1FE-4268-46B6-974A-9963636F34DC}
2011-12-31 07:00:55 -------- d-----w- c:\users\eric.falley\appdata\local\{84651E1A-571D-4252-B8DF-81E4AC45A3A7}
2011-12-30 18:57:49 -------- d-----w- c:\users\eric.falley\appdata\local\{CF7874B7-1A4F-4C56-97DA-6B975A7F0ABC}
2011-12-30 18:56:59 -------- d-----w- c:\users\eric.falley\appdata\local\{913D77C3-AE6B-40AC-A529-25A1DE25BF65}
2011-12-30 06:43:31 -------- d-----w- C:\PIXEL
2011-12-30 06:15:11 -------- d-----w- c:\users\eric.falley\appdata\local\{0B91D072-C07C-436F-9045-14A24740C0AB}
2011-12-30 06:14:50 -------- d-----w- c:\users\eric.falley\appdata\local\{85C5EF68-DCEB-4CF1-B12D-CE489A700CF4}
2011-12-29 18:10:26 -------- d-----w- c:\users\eric.falley\appdata\local\{1677CD22-FF0D-49DA-B841-75994849511E}
2011-12-29 18:09:51 -------- d-----w- c:\users\eric.falley\appdata\local\{D91BC683-5F3F-43B3-A981-6DE615AE2803}
2011-12-29 04:44:51 -------- d-----w- c:\program files\eRightSoft
2011-12-29 04:39:53 142336 ----a-w- c:\program files\internet explorer\plugins\Npindeo.dll
2011-12-29 04:39:48 -------- d-----w- c:\program files\Ligos
2011-12-29 04:10:56 -------- d-----w- c:\users\eric.falley\appdata\local\{91E091BD-656D-4F65-86D1-A5F8718812A7}
2011-12-29 04:10:42 -------- d-----w- c:\users\eric.falley\appdata\local\{DE23306A-67CA-4D4D-9168-533C94524FA1}
2011-12-28 16:08:22 -------- d-----w- c:\users\eric.falley\appdata\local\{9867D0C9-A0B5-498C-9741-8448B6C78618}
2011-12-28 16:07:51 -------- d-----w- c:\users\eric.falley\appdata\local\{F1283BC2-C0A7-4A01-8344-306AE14C1648}
2011-12-28 01:40:17 -------- d-----w- c:\users\eric.falley\appdata\local\{0B07FBF2-18F8-4ED6-868B-F2EE85098A7E}
2011-12-28 01:39:38 -------- d-----w- c:\users\eric.falley\appdata\local\{F0389C96-92F5-4597-B41A-E3C423489AFF}
2011-12-27 09:13:03 -------- d-----w- c:\users\eric.falley\appdata\local\{14B145A1-5441-47C9-9E58-A76A64AF21F8}
2011-12-27 09:12:35 -------- d-----w- c:\users\eric.falley\appdata\local\{92959617-57EB-4D66-8111-89F0B784A2EB}
2011-12-26 21:15:03 -------- d-----w- c:\users\eric.falley\appdata\local\{F1660332-E654-4CA0-AE61-4C3EDADA3F95}
2011-12-26 07:04:25 -------- d-----w- c:\users\eric.falley\appdata\local\{CB47208B-2BE1-44C9-B850-6F504AC3ACF4}
2011-12-26 07:04:03 -------- d-----w- c:\users\eric.falley\appdata\local\{D501FF36-FEBA-4ADF-8DD2-610BDCED0466}
2011-12-25 19:03:42 -------- d-----w- c:\users\eric.falley\appdata\local\{F1B5DBA5-42B6-48BA-9E4E-75D6B84F88B9}
2011-12-25 19:03:25 -------- d-----w- c:\users\eric.falley\appdata\local\{9E143C64-A878-48BE-9F31-9C0AA070BF17}
2011-12-25 07:03:05 -------- d-----w- c:\users\eric.falley\appdata\local\{B311F34B-9980-4557-AFA4-6E453BE46A4E}
2011-12-25 07:02:45 -------- d-----w- c:\users\eric.falley\appdata\local\{2854996D-7267-4996-A1B9-F01726EC57AD}
2011-12-24 19:02:27 -------- d-----w- c:\users\eric.falley\appdata\local\{430ADA50-C4E7-4A64-946E-4D85ADA68E0B}
2011-12-24 19:02:09 -------- d-----w- c:\users\eric.falley\appdata\local\{6DA37765-52C0-4376-8ABD-0F4C4C3811C6}
2011-12-24 05:55:31 -------- d-----w- c:\users\eric.falley\appdata\local\{D4F74532-82BD-4A1B-8E25-072BE6088EC1}
2011-12-24 05:55:12 -------- d-----w- c:\users\eric.falley\appdata\local\{DFE16D7B-E44F-42E7-A6DF-93F940C5A39C}
2011-12-23 17:54:40 -------- d-----w- c:\users\eric.falley\appdata\local\{F8F3136F-E87D-4F50-ACC6-CD8D7BE440C2}
2011-12-23 17:54:26 -------- d-----w- c:\users\eric.falley\appdata\local\{9D9A1959-1E80-40B4-B644-3BC04ECDF584}
2011-12-23 05:53:56 -------- d-----w- c:\users\eric.falley\appdata\local\{6D53C1D2-C344-409C-8158-161197B13A01}
2011-12-23 05:53:36 -------- d-----w- c:\users\eric.falley\appdata\local\{26735BE2-7BC7-4613-AF31-34521CFB81A2}
2011-12-22 17:52:46 -------- d-----w- c:\users\eric.falley\appdata\local\{E210F157-1BCC-480A-8A3E-11F47FF7A386}
2011-12-22 17:52:25 -------- d-----w- c:\users\eric.falley\appdata\local\{EBB2DEBD-13FB-4A28-A972-0055AB63A045}
2011-12-22 05:51:52 -------- d-----w- c:\users\eric.falley\appdata\local\{DD6C9E73-F55B-47E6-84CB-95D655F47998}
2011-12-22 05:51:30 -------- d-----w- c:\users\eric.falley\appdata\local\{CA5EA60C-E4ED-40E2-99DD-61908057CDC6}
2011-12-21 17:49:08 -------- d-----w- c:\users\eric.falley\appdata\local\{2259FDE2-5173-4993-980A-B660EF438B0E}
2011-12-21 17:48:43 -------- d-----w- c:\users\eric.falley\appdata\local\{796230F3-ED5E-432D-8A14-8AC913FE37B6}
2011-12-20 23:56:54 -------- d-----w- c:\users\eric.falley\appdata\local\{9AE055D4-2F72-406C-AD19-1385C9643235}
2011-12-20 23:56:29 -------- d-----w- c:\users\eric.falley\appdata\local\{118D1418-C454-4481-8844-8F646E5FB555}
2011-12-20 03:42:04 -------- d-----w- c:\users\eric.falley\appdata\local\{EEC83EBF-2039-4B7D-891B-BB97B3D620AC}
2011-12-20 03:41:37 -------- d-----w- c:\users\eric.falley\appdata\local\{E497C4B2-1FA1-4EF9-BD5B-636FFC9513E9}
2011-12-19 06:30:31 -------- d-----w- c:\users\eric.falley\appdata\local\{A3A5F5A3-FC36-40ED-B18C-AA699928AFCF}
2011-12-19 06:30:09 -------- d-----w- c:\users\eric.falley\appdata\local\{1B76D854-BB22-4921-A5AA-9168BF435185}
2011-12-18 15:07:54 -------- d-----w- c:\users\eric.falley\appdata\local\{C3D4829E-6472-45EC-B6DB-1CD3DED044E0}
2011-12-18 15:07:42 -------- d-----w- c:\users\eric.falley\appdata\local\{4D93410B-4485-4FE0-953A-2A926CF09066}
2011-12-18 03:07:28 -------- d-----w- c:\users\eric.falley\appdata\local\{B0D628E9-A8A0-4E67-8F8B-00D8E9860E35}
2011-12-17 09:13:41 -------- d-----w- c:\users\eric.falley\appdata\local\{6B60ED1E-99BC-4092-A37B-B9B47512418D}
2011-12-17 09:13:18 -------- d-----w- c:\users\eric.falley\appdata\local\{FA527F88-891D-44AC-8BFF-560992E34C9C}
2011-12-16 21:10:41 -------- d-----w- c:\users\eric.falley\appdata\local\{666B1C0A-1305-47DF-B3D9-7182EE3A9C2A}
2011-12-16 21:10:15 -------- d-----w- c:\users\eric.falley\appdata\local\{0B9D533D-D01D-47C0-8A9A-DAD8C445BAA8}
2011-12-16 01:23:18 -------- d-----w- c:\users\eric.falley\appdata\local\{5BF9C01F-7CA8-4FDA-AEC7-18A99A3EB226}
2011-12-16 01:22:56 -------- d-----w- c:\users\eric.falley\appdata\local\{4433CB00-0838-47FB-9803-EDF32A0C94FB}
2011-12-14 04:21:44 -------- d-----w- c:\users\eric.falley\appdata\local\{8D900411-07B2-422F-9699-2087FA4F0B44}
2011-12-14 04:21:25 -------- d-----w- c:\users\eric.falley\appdata\local\{33CF30AA-97E5-49F1-A7B8-2816D6377F99}
2011-12-13 17:42:54 87552 ----a-w- c:\windows\system32\hpmlm121.dll
2011-12-13 15:43:55 -------- d-----w- c:\users\eric.falley\appdata\local\{4707F413-EE42-4DB2-B9C3-A4149DA9FEA3}
2011-12-13 15:43:39 -------- d-----w- c:\users\eric.falley\appdata\local\{601FC620-BC9E-4C84-8B88-87BB2AD134E7}
2011-12-12 14:22:20 -------- d-----w- c:\users\eric.falley\appdata\local\{8400FB86-A2CD-4C66-8AC8-D04E04263319}
2011-12-12 14:21:35 -------- d-----w- c:\users\eric.falley\appdata\local\{47569DC6-B0B2-4310-8604-7B3AFDD0BC95}
2011-12-11 20:39:18 -------- d-----w- c:\users\eric.falley\appdata\local\{3833DB8E-E8C2-4A53-BE18-576F0018DA07}
2011-12-11 20:39:06 -------- d-----w- c:\users\eric.falley\appdata\local\{24362636-60DA-44CD-9476-966CF07224A6}
2011-12-11 08:38:46 -------- d-----w- c:\users\eric.falley\appdata\local\{C78A79D1-0D66-4B5C-899C-4F71616C1F33}
2011-12-11 08:38:33 -------- d-----w- c:\users\eric.falley\appdata\local\{75FE359E-FABD-4CBC-9D57-A771CFC69A17}
2011-12-10 20:38:13 -------- d-----w- c:\users\eric.falley\appdata\local\{95B22FA7-47B5-4781-91E8-7BD10501FE86}
2011-12-10 08:37:45 -------- d-----w- c:\users\eric.falley\appdata\local\{B35A9E84-AF7C-4C61-8EF8-D110B5761118}
2011-12-10 08:37:24 -------- d-----w- c:\users\eric.falley\appdata\local\{6E082E0C-0873-4A7A-8BDE-DA1A4BCA87E1}
2011-12-09 20:03:07 -------- d-----w- c:\users\eric.falley\appdata\local\{8618735F-D422-4E94-AB79-1FFB3C0D92CF}
2011-12-09 06:39:25 -------- d-----w- c:\users\eric.falley\appdata\local\{DDA7147F-C993-49B5-A133-5EBA36D8D09D}
2011-12-08 06:39:49 -------- d-----w- c:\users\eric.falley\appdata\local\{D64A22F8-6E1E-4DB3-9AF6-528799DC7A38}
2011-12-08 06:39:32 -------- d-----w- c:\users\eric.falley\appdata\local\{03BDDDB3-0FD0-4846-B9C0-D49D85E8EA76}
2011-12-07 15:41:24 -------- d-----w- c:\users\eric.falley\appdata\local\{BB5964D2-A8F5-4835-844E-E617F6F4F531}
2011-12-07 15:41:10 -------- d-----w- c:\users\eric.falley\appdata\local\{BEF6A74C-447A-4C83-81C4-45808437AE25}
2011-12-07 08:20:32 -------- d-----w- c:\users\eric.falley\appdata\local\Opera
2011-12-07 03:40:21 -------- d-----w- c:\users\eric.falley\appdata\local\{A0A45E64-4CAC-4834-A572-C768AF5FE717}
2011-12-07 03:40:04 -------- d-----w- c:\users\eric.falley\appdata\local\{D29C2DDC-9D80-4CD8-B1A2-EF6338B6D8CC}
2011-12-06 15:28:29 -------- d-----w- c:\users\eric.falley\appdata\local\{A9B659BA-D5DE-4537-98AC-AAE39021CBF2}
2011-12-06 15:28:03 -------- d-----w- c:\users\eric.falley\appdata\local\{C15E8571-67A4-412D-920F-9BC39960E638}
2011-12-05 22:14:23 -------- d-----w- c:\users\eric.falley\appdata\local\{59B17325-5D92-43ED-BA31-384097AF56D5}
2011-12-05 22:14:07 -------- d-----w- c:\users\eric.falley\appdata\local\{02F6BD85-2583-49DB-862C-35ADF020B361}
2011-12-05 09:31:14 -------- d-----w- c:\users\eric.falley\appdata\local\{961C102C-71C3-4BFC-93C1-267215D1C31B}
2011-12-04 21:30:27 -------- d-----w- c:\users\eric.falley\appdata\local\{1E133584-54F6-406B-9AF6-4DB35CEECE6E}
2011-12-04 21:30:09 -------- d-----w- c:\users\eric.falley\appdata\local\{CCAD5080-2842-4C61-AF82-DE95B34BBC67}
2011-12-04 20:46:55 -------- d-----w- c:\users\eric.falley\appdata\roaming\NUnit
2011-12-04 20:33:55 5632 ----a-r- c:\users\eric.falley\appdata\roaming\microsoft\installer\{3ad32ec5-806e-43a8-8757-76d05ad4677a}\nunit_icon.exe
2011-12-04 20:33:40 -------- d-----w- c:\program files\NUnit 2.5.2
2011-12-04 09:29:47 -------- d-----w- c:\users\eric.falley\appdata\local\{78ACF977-EEA6-4301-8DCA-0BEC71E45679}
2011-12-04 08:58:43 -------- d-----w- c:\users\eric.falley\appdata\roaming\NuGet
2011-12-04 08:41:01 -------- d-----w- c:\users\eric.falley\appdata\roaming\ICSharpCode
2011-12-04 08:39:19 -------- d-----w- c:\program files\SharpDevelop
2011-12-03 21:28:53 -------- d-----w- c:\users\eric.falley\appdata\local\{EA98DB2D-484F-429B-83A3-F74F56612543}
2011-12-03 21:28:34 -------- d-----w- c:\users\eric.falley\appdata\local\{73A3F55F-6345-46C5-B6EA-A904E68E126F}
2011-12-03 05:55:56 -------- d-----w- c:\users\eric.falley\appdata\local\Chromium
2011-12-03 05:49:01 452440 ----a-w- c:\windows\system32\d3dx10_40.dll
2011-12-03 05:49:01 2036576 ----a-w- c:\windows\system32\D3DCompiler_40.dll
2011-12-03 05:48:57 4379984 ----a-w- c:\windows\system32\D3DX9_40.dll
2011-12-03 05:48:55 81768 ----a-w- c:\windows\system32\xinput1_3.dll
2011-12-03 05:46:24 -------- d-----w- c:\program files\Heroes of Newerth
2011-12-02 21:20:57 -------- d-----w- c:\users\eric.falley\appdata\local\{10BFE4D6-496F-4D50-8CAA-388A71CF15FF}
2011-12-02 15:46:15 -------- d-----w- c:\users\eric.falley\appdata\local\{FE7E6659-12CE-45A2-830C-38EA475D95BB}
2011-12-01 21:32:14 -------- d-----w- c:\users\eric.falley\appdata\local\{F88A59C8-FDA6-4484-BC5F-C9BAE4FDE3C6}
2011-12-01 21:31:24 -------- d-----w- c:\users\eric.falley\appdata\local\{317A78A3-0433-4FD5-B12E-9EAE09B0CFC0}
2011-11-30 22:22:00 -------- d-----w- c:\users\eric.falley\appdata\local\{4DF3DC1E-DD05-4662-BDAC-A3A03FBA56F7}
2011-11-30 22:21:35 -------- d-----w- c:\users\eric.falley\appdata\local\{C8DA6E5B-89C4-4DDC-971D-F26113B89D72}
2011-11-30 02:13:51 -------- d-----w- c:\users\eric.falley\appdata\local\{98AA9CBF-9CF9-4C27-A373-B3DFE72F2BA8}
2011-11-30 02:12:34 -------- d-----w- c:\users\eric.falley\appdata\local\{EDA446BD-3EE7-43BC-86C0-C38CEADBD387}
2011-11-29 00:23:25 -------- d-----w- c:\users\eric.falley\appdata\local\{4F039C9F-20A7-45DF-914E-26284E709E55}
2011-11-29 00:22:37 -------- d-----w- c:\users\eric.falley\appdata\local\{D90F36E3-7933-4EC7-BF76-9E7AAA1EE147}
2011-11-27 19:40:38 -------- d-----w- c:\users\eric.falley\appdata\local\{5BD21350-E384-40EA-AFE1-CB2B686C6DF6}
2011-11-27 19:40:33 -------- d-----w- c:\users\eric.falley\appdata\local\{223F69DE-E30E-4542-B3FB-60192C505E4C}
2011-11-27 06:43:40 -------- d-----w- c:\users\eric.falley\appdata\local\{A079072F-A7CC-4B0D-BD1B-A5215C4C9DE1}
2011-11-27 06:43:28 -------- d-----w- c:\users\eric.falley\appdata\local\{150654FC-4B4F-48E5-AAAC-ADE224180FD9}
2011-11-26 18:43:10 -------- d-----w- c:\users\eric.falley\appdata\local\{3626FC83-4CA7-4ADC-B264-19155668995F}
2011-11-26 18:42:54 -------- d-----w- c:\users\eric.falley\appdata\local\{F21D3892-2850-4BCB-A405-79C4DA0F8FA6}
2011-11-26 06:42:34 -------- d-----w- c:\users\eric.falley\appdata\local\{39CF1C66-A072-404D-B8F0-D484DFFC943F}
2011-11-26 06:42:05 -------- d-----w- c:\users\eric.falley\appdata\local\{847B6063-039E-46AE-B5E5-3B0D5EEA2640}
2011-11-25 06:44:16 -------- d-----w- c:\users\eric.falley\appdata\local\{C216BEEF-6274-4034-B1B3-6FBFCA90503B}
2011-11-25 06:44:01 -------- d-----w- c:\users\eric.falley\appdata\local\{48B1A5A3-1D16-4C46-9835-6607F7426B27}
2011-11-24 18:43:33 -------- d-----w- c:\users\eric.falley\appdata\local\{40C47775-9564-4E38-A50C-1D4FAF88278F}
2011-11-24 18:43:11 -------- d-----w- c:\users\eric.falley\appdata\local\{D2D81E4A-7F4B-418C-B05A-87210C45F12E}
2011-11-24 06:41:22 -------- d-----w- c:\users\eric.falley\appdata\local\{AA20D6B8-32D4-4F84-9D7E-613CA5A5309A}
2011-11-24 06:40:51 -------- d-----w- c:\users\eric.falley\appdata\local\{75CC5094-ECDE-44AA-B364-FD76D1753114}
2011-11-23 18:31:26 -------- d-----w- c:\users\eric.falley\appdata\local\{AB6F30DD-BA3F-4D5F-BD38-97CA10F1FB01}
2011-11-23 18:31:04 -------- d-----w- c:\users\eric.falley\appdata\local\{E6FC5520-8D98-4416-AF45-AC79E7767155}
2011-11-22 21:54:45 -------- d-----w- c:\users\eric.falley\appdata\local\{6CDD4E2E-010E-48FF-B787-4B7EEC6AB5B7}
2011-11-22 21:54:28 -------- d-----w- c:\users\eric.falley\appdata\local\{8728E740-E109-4D55-AF53-A1468568AD80}
2011-11-22 09:39:42 -------- d-----w- c:\users\eric.falley\appdata\local\{149E7765-FCDB-45D5-B775-412B8F0E1DC0}
2011-11-22 09:39:30 -------- d-----w- c:\users\eric.falley\appdata\local\{D20ABA9B-C622-4CD1-9F6D-83E1C6A4F2F6}
2011-11-21 21:38:35 -------- d-----w- c:\users\eric.falley\appdata\local\{96A4E54C-9BA3-4EE1-B68A-3D706A838E66}
2011-11-21 21:38:12 -------- d-----w- c:\users\eric.falley\appdata\local\{D545E720-C385-4AD3-81B3-4C667AED43AB}
2011-11-21 08:40:59 -------- d-----w- c:\users\eric.falley\appdata\local\{691B79AF-8994-4E91-B81A-7365D4DE9258}
2011-11-21 08:40:47 -------- d-----w- c:\users\eric.falley\appdata\local\{50F547DE-352B-484E-BD20-5CCE65BA6F9E}
2011-11-20 20:39:59 -------- d-----w- c:\users\eric.falley\appdata\local\{6F09041F-CA96-41E5-8E02-B9ABB939208A}
2011-11-20 20:39:45 -------- d-----w- c:\users\eric.falley\appdata\local\{0E2F03B4-878F-47AB-A415-A89A68766942}
2011-11-20 06:42:39 -------- d-----w- c:\users\eric.falley\appdata\local\{A0EBFA6E-EBB4-41D6-A8D0-0A2EB36D22E9}
2011-11-20 06:42:27 -------- d-----w- c:\users\eric.falley\appdata\local\{70D6E0CE-005A-4864-A165-C628DCF88771}
2011-11-19 18:38:52 -------- d-----w- c:\users\eric.falley\appdata\local\{BA22A838-3090-4F60-A512-288C1DF7043E}
2011-11-19 18:38:11 -------- d-----w- c:\users\eric.falley\appdata\local\{303B661C-1DF9-4CEE-A272-79CE32C6B1A1}
2011-11-19 02:23:18 -------- d-----w- c:\users\eric.falley\appdata\local\{3DEF0AE2-D623-407E-A6F1-F1029E7634C0}
2011-11-19 02:23:05 -------- d-----w- c:\users\eric.falley\appdata\local\{2574D26B-849C-4C5F-8E21-08917F4DB1AB}
2011-11-18 14:22:17 -------- d-----w- c:\users\eric.falley\appdata\local\{C69D5755-ECC4-49B7-8FD4-E50FDAB9C675}
2011-11-18 14:21:54 -------- d-----w- c:\users\eric.falley\appdata\local\{FB34BFE5-D36F-4B74-88DC-44BB98D838D7}
2011-11-17 23:54:22 -------- d-----w- c:\users\eric.falley\appdata\local\{E7FC1682-7AC4-4830-9CE0-70EC5225A062}
2011-11-17 23:54:10 -------- d-----w- c:\users\eric.falley\appdata\local\{BC82BE82-DD25-412A-A06B-89569498EE34}
2011-11-17 02:29:43 -------- d-----w- c:\users\eric.falley\appdata\local\{A2D567CA-FAD7-4CED-9E0C-70AB745CA50B}
2011-11-17 02:29:28 -------- d-----w- c:\users\eric.falley\appdata\local\{D5AA06B6-2117-4F74-99C6-3C30AB2BA0C6}
2011-11-16 09:40:54 -------- d-----w- c:\users\eric.falley\appdata\local\{C230E529-110B-43AB-9677-690F15288858}
2011-11-15 21:38:41 -------- d-----w- c:\users\eric.falley\appdata\local\{AB724902-757A-4799-96B0-205D5E57859D}
2011-11-15 21:37:54 -------- d-----w- c:\users\eric.falley\appdata\local\{AC682A5D-A6FB-4D03-8144-E0D7EEDE4B48}
2011-11-15 07:06:05 -------- d-----w- c:\program files\Amazon
2011-11-15 06:40:35 -------- d-----w- c:\users\eric.falley\appdata\local\{668F2DCE-4732-4FA9-AB85-93DA8CC92D72}
2011-11-15 06:40:11 -------- d-----w- c:\users\eric.falley\appdata\local\{6C59ED72-814C-4074-9AED-B7206A512AF8}
2011-11-14 18:12:36 -------- d-----w- c:\users\eric.falley\appdata\local\{9653A173-229B-4D6E-A765-E86389438474}
2011-11-14 18:11:57 -------- d-----w- c:\users\eric.falley\appdata\local\{FAB765A3-4077-4F68-BE69-C0ADA792607A}
2011-11-14 02:58:17 -------- d-----w- c:\users\eric.falley\appdata\local\{A368F97D-6073-4423-88CE-CF5ECBFFC47F}
2011-11-14 02:57:58 -------- d-----w- c:\users\eric.falley\appdata\local\{417E00D4-1FA2-4D24-A244-20AAFC9EF0C8}
2011-11-13 14:49:19 -------- d-----w- c:\users\eric.falley\appdata\local\{0EF05E14-E3A6-424B-8C02-A9860CB6B22F}
2011-11-13 14:48:48 -------- d-----w- c:\users\eric.falley\appdata\local\{5ECA9802-B93B-4B3A-BC7A-C338A3F26B79}
2011-11-12 20:58:12 -------- d-----w- c:\users\eric.falley\appdata\local\{7E7B44A9-BCA3-4204-A43E-EE9DCE359F52}
2011-11-12 20:58:00 -------- d-----w- c:\users\eric.falley\appdata\local\{8C938E3B-F919-4817-8BA3-785F7FDAEEAA}
2011-11-12 08:57:40 -------- d-----w- c:\users\eric.falley\appdata\local\{615902A7-9B28-4940-8FC3-0AD4A5F8B021}
2011-11-12 08:57:26 -------- d-----w- c:\users\eric.falley\appdata\local\{9658E34E-5214-4ED4-883D-B2D2158E2DC7}
2011-11-11 20:55:52 -------- d-----w- c:\users\eric.falley\appdata\local\{27FAE736-9924-41A5-B6D8-45F976CE434E}
2011-11-11 20:55:34 -------- d-----w- c:\users\eric.falley\appdata\local\{DCAF2FF7-FB9C-40BC-9037-17595E866BDB}
2011-11-11 09:06:18 708608 ----a-w- c:\program files\common files\system\wab32.dll
2011-11-11 01:07:24 -------- d-----w- c:\users\eric.falley\appdata\local\{B3CCC750-FDE4-4451-A80E-2EB5114050D9}
2011-11-11 01:06:50 -------- d-----w- c:\users\eric.falley\appdata\local\{C84A15E2-B88B-4EB0-B72D-42E00EA15576}
2011-11-10 03:02:11 -------- d-----w- c:\users\eric.falley\appdata\local\{6AD0488A-E245-4BED-8F4F-333D82DF77A0}
2011-11-10 03:01:57 -------- d-----w- c:\users\eric.falley\appdata\local\{BF630D12-3FE1-4095-957E-C56280DFF766}
2011-11-09 12:56:04 -------- d-----w- c:\users\eric.falley\appdata\local\{4CD7B396-2323-436D-85F2-08329EDF570D}
2011-11-09 12:55:36 -------- d-----w- c:\users\eric.falley\appdata\local\{778194BA-420A-432A-9E69-CB9A31BF8E60}
2011-11-08 15:27:40 -------- d-----w- c:\users\eric.falley\appdata\local\{1769AB96-F0A4-4978-9313-3338320E6D2B}
2011-11-08 15:27:24 -------- d-----w- c:\users\eric.falley\appdata\local\{2A6312CF-ED9C-465E-92E1-9448ECD6243F}
2011-11-07 21:17:53 -------- d-----w- c:\users\eric.falley\appdata\local\{2DD3385E-7BB3-4639-9D8B-2EFEC474B95F}
2011-11-07 21:17:32 -------- d-----w- c:\users\eric.falley\appdata\local\{3BB8FC8C-2BD8-4D48-9419-00C3D4DB4772}
2011-11-07 07:58:32 -------- d-----w- c:\users\eric.falley\appdata\local\{96BE3C09-568B-4586-8251-C4DC7CD56766}
2011-11-07 07:58:19 -------- d-----w- c:\users\eric.falley\appdata\local\{CFC8605D-DBC7-4F7B-B6B1-75EE162DE5C9}
2011-11-06 19:57:47 -------- d-----w- c:\users\eric.falley\appdata\local\{12693B88-0305-462B-B034-21018C50C5AA}
2011-11-06 07:57:20 -------- d-----w- c:\users\eric.falley\appdata\local\{7FDA50E5-21FA-4467-9FA7-F6D80736AFA8}
2011-11-06 07:57:03 -------- d-----w- c:\users\eric.falley\appdata\local\{9F7871E4-E851-474C-BD2A-91E7DD4CC674}
2011-11-05 19:56:45 -------- d-----w- c:\users\eric.falley\appdata\local\{1750CBC9-7CEA-4584-9EBB-D2BEEF6FC5FC}
2011-11-05 19:56:33 -------- d-----w- c:\users\eric.falley\appdata\local\{E5BC8AD1-A1B7-465D-99A2-40DB7947591E}
2011-11-05 07:52:19 -------- d-----w- c:\users\eric.falley\appdata\local\{94129EBB-36B3-4479-85F7-1C70D1C3EF06}
2011-11-05 07:52:07 -------- d-----w- c:\users\eric.falley\appdata\local\{290FC400-5FFC-44C5-A17C-B6BFB246BAF1}
2011-11-04 19:49:50 -------- d-----w- c:\users\eric.falley\appdata\local\{51084A92-66E3-483F-81BE-E29B781B515A}
2011-11-04 19:49:25 -------- d-----w- c:\users\eric.falley\appdata\local\{4700F4F9-23E4-495F-A8E3-96E2D8E12D76}
2011-11-03 20:30:40 -------- d-----w- c:\users\eric.falley\appdata\local\{5A51BBC8-8BCF-4955-9A46-9193538E2731}
2011-11-03 20:30:26 -------- d-----w- c:\users\eric.falley\appdata\local\{7B1BD2FB-1DED-4375-AAB0-2B6684C8FC63}
2011-11-03 16:51:53 -------- d-----w- c:\users\eric.falley\appdata\local\{042A906E-AF1F-4046-935B-3EA462FB5323}
2011-11-03 16:51:33 -------- d-----w- c:\users\eric.falley\appdata\local\{00213C20-52B0-44C8-99E6-209A3D801E98}
2011-11-02 19:53:19 -------- d-----w- c:\users\eric.falley\appdata\local\{C9811B0C-F4AC-493E-839B-8E33F9DF8B04}
2011-11-02 19:53:06 -------- d-----w- c:\users\eric.falley\appdata\local\{0D576655-AA52-4FFC-B9EE-EA8CA80E7F03}
2011-11-02 06:05:28 -------- d-----w- c:\users\eric.falley\appdata\local\{12CB5D28-403A-456F-A2E2-50F678C81217}
2011-11-02 06:05:15 -------- d-----w- c:\users\eric.falley\appdata\local\{CF473089-EF72-4429-8736-5A432EFA559F}
2011-11-01 14:26:05 -------- d-----w- c:\users\eric.falley\appdata\local\{67567503-DBC9-4B77-8CA4-7DEBFDCF0293}
2011-11-01 14:25:12 -------- d-----w- c:\users\eric.falley\appdata\local\{6FE02567-C6CE-456F-B0E6-DFB13AF0929E}
2011-11-01 02:15:56 -------- d-----w- c:\users\eric.falley\appdata\local\{774AC17F-1731-4E18-BE02-287B064D1256}
2011-11-01 02:15:32 -------- d-----w- c:\users\eric.falley\appdata\local\{ECA21150-479F-4DB1-8E93-6BCDB9F1513A}
2011-10-31 07:17:39 -------- d-----w- c:\users\eric.falley\appdata\local\{ACBE72BA-526C-4B52-B5D1-BA475CB9A813}
2011-10-31 07:17:18 -------- d-----w- c:\users\eric.falley\appdata\local\{60905EF0-9626-435D-AEF8-E2E06FD9A728}
2011-10-30 19:16:39 -------- d-----w- c:\users\eric.falley\appdata\local\{7BD60A74-B722-47B1-9726-6ADA1CF64B34}
2011-10-30 19:16:12 -------- d-----w- c:\users\eric.falley\appdata\local\{EE8E3683-E7DC-4E23-91AF-4AA7CDDCF364}
2011-10-30 07:14:17 -------- d-----w- c:\users\eric.falley\appdata\local\{70FE460C-978F-4E07-A2FB-60F892335BD5}
2011-10-30 07:14:02 -------- d-----w- c:\users\eric.falley\appdata\local\{400EC283-8648-4CC5-AB8B-0491B2B2E23E}
2011-10-30 04:53:35 -------- d-----w- c:\program files\SmartFTP Client
2011-10-30 04:52:15 -------- d-----w- c:\program files\SmartFTP Client 4.0 Setup Files
2011-10-29 19:12:12 -------- d-----w- c:\users\eric.falley\appdata\local\{7458EA37-285C-404C-BBB4-B2278CE44687}
2011-10-29 19:11:48 -------- d-----w- c:\users\eric.falley\appdata\local\{602723E2-2878-40E6-B922-38879BD43C92}
2011-10-29 01:12:35 -------- d-----w- c:\program files\Bonjour
2011-10-29 00:36:34 -------- d-----w- c:\users\eric.falley\appdata\local\{633E068E-4214-4952-9F70-1BE684B9BBEF}
2011-10-29 00:36:10 -------- d-----w- c:\users\eric.falley\appdata\local\{E9EC4227-AB76-4114-839A-8A4BB936E14F}
2011-10-28 09:14:55 -------- d-----w- c:\users\eric.falley\appdata\local\{A47F174B-DC7B-437E-9A3A-F988E6EF4352}
2011-10-28 09:14:29 -------- d-----w- c:\users\eric.falley\appdata\local\{26679AA4-C7C2-4DE5-9707-95FB4D79674E}
2011-10-27 21:00:04 -------- d-----w- c:\users\eric.falley\appdata\local\{F4A5FB96-89D5-43B2-B1A1-8CC3DFD90E0E}
2011-10-27 20:59:14 -------- d-----w- c:\users\eric.falley\appdata\local\{135A20EE-E4C0-42A9-8CAA-35C7C549A0B3}
2011-10-27 08:58:23 -------- d-----w- c:\users\eric.falley\appdata\local\{3E99B7BA-0A97-442B-A79D-70B8FC65AAF1}
2011-10-27 08:58:11 -------- d-----w- c:\users\eric.falley\appdata\local\{FAC2ABB2-5C99-416F-8C86-463657B853BD}
2011-10-26 19:52:04 -------- d-----w- c:\users\eric.falley\appdata\local\{5172E03B-6B29-4A14-989C-C9547983E3DA}
2011-10-26 19:51:41 -------- d-----w- c:\users\eric.falley\appdata\local\{4C7E7D69-FAE4-493B-90DE-85D475E66486}
2011-10-26 06:04:45 -------- d-----w- c:\users\eric.falley\appdata\local\{53D22A3E-87D1-4F63-BA19-1E2BE64AF2A0}
2011-10-26 06:04:34 -------- d-----w- c:\users\eric.falley\appdata\local\{932A10E6-982C-416D-901A-34AE8F9B49CC}
2011-10-25 18:03:38 -------- d-----w- c:\users\eric.falley\appdata\local\{F109F8EE-07AE-49B5-B33C-50397EC7E394}
2011-10-25 18:03:25 -------- d-----w- c:\users\eric.falley\appdata\local\{84B3BAE0-2903-4838-94A5-E8DDD4AA815E}
2011-10-25 02:45:34 -------- d-----w- c:\users\eric.falley\appdata\local\{D48E837D-48CF-4C31-A8E3-E3074B675783}
2011-10-25 02:45:02 -------- d-----w- c:\users\eric.falley\appdata\local\{6CB8992B-9A94-4428-947C-9430460E05D9}
2011-10-24 09:02:08 -------- d-----w- c:\users\eric.falley\appdata\local\{7F31FF5F-854E-4734-AF0F-BE4AD75DE709}
2011-10-24 09:01:45 -------- d-----w- c:\users\eric.falley\appdata\local\{9E0602A4-0EB9-4D5D-81B3-A9E7F2A96DE6}
2011-10-23 21:00:00 -------- d-----w- c:\users\eric.falley\appdata\local\{78D0D079-85C6-49E1-A8A7-A5F910266607}
2011-10-23 05:58:30 -------- d-----w- c:\users\eric.falley\appdata\local\{497D3FD6-2A25-439F-B224-E650651B51E2}
2011-10-22 17:58:25 -------- d-----w- c:\users\eric.falley\appdata\local\{2B139D0C-60E1-4BE6-AFA2-6070E08F4CBC}
2011-10-22 01:53:30 -------- d-----w- c:\users\eric.falley\appdata\local\{F297C771-30AA-48E7-B776-50DA7636B7C3}
2011-10-21 11:23:48 -------- d-----w- c:\users\eric.falley\appdata\local\{842DC970-752A-4E2F-AFC6-A314C080D4E1}
2011-10-21 11:23:25 -------- d-----w- c:\users\eric.falley\appdata\local\{0BA79390-17DF-47DC-BBE9-46744BA6DF03}
2011-10-20 23:18:53 -------- d-----w- c:\users\eric.falley\appdata\local\{F90513A4-DAD5-4536-B842-A82E6D7D53EE}
2011-10-20 23:18:17 -------- d-----w- c:\users\eric.falley\appdata\local\{D40A04BB-8165-47F4-A4B6-3DBEB6B9DEDE}
2011-10-20 02:57:15 -------- d-----w- c:\users\eric.falley\appdata\local\{A4CAF956-AF9D-4052-853D-A4709134BBB4}
2011-10-19 23:15:29 -------- d-----w- c:\users\eric.falley\appdata\local\{D41A6812-0B62-48B2-B277-1CC1D6CCC7A2}
2011-10-19 06:10:50 -------- d-----w- c:\users\eric.falley\appdata\local\{2AAEEC32-836A-4442-9E9E-C7E4EFDD55C2}
2011-10-19 06:10:39 -------- d-----w- c:\users\eric.falley\appdata\local\{0D00F1B9-E09F-419F-9211-3C26C24B439C}
2011-10-18 17:14:10 -------- d-----w- c:\users\eric.falley\appdata\local\{D75B7A5E-694A-437D-AA14-C6434A0806CD}
2011-10-18 17:13:57 -------- d-----w- c:\users\eric.falley\appdata\local\{83535918-5279-4F2C-B9D0-A1932062C40D}
2011-10-18 00:19:50 -------- d-----w- c:\users\eric.falley\appdata\local\{1ABDEE9A-7F22-4CD1-9D47-9BE773A05E3B}
2011-10-18 00:19:35 -------- d-----w- c:\users\eric.falley\appdata\local\{8366F9F8-5D7F-4A9D-8DA1-19C939177D04}
2011-10-17 12:19:13 -------- d-----w- c:\users\eric.falley\appdata\local\{FB243FFB-F5BA-41BF-8149-6D0445A68339}
2011-10-17 12:19:01 -------- d-----w- c:\users\eric.falley\appdata\local\{030D059F-495F-443D-A7C3-D4217B5F5526}
2011-10-16 23:56:13 -------- d-----w- c:\users\eric.falley\appdata\local\{41877C00-074F-401E-8CC8-D096CB21E97B}
2011-10-16 23:55:40 -------- d-----w- c:\users\eric.falley\appdata\local\{E551E3AA-AE59-4DD5-9503-8153399701AB}
2011-10-16 11:10:50 -------- d-----w- c:\users\eric.falley\appdata\local\{82CD156E-0DC2-4C1C-A1C4-529B743B9927}
2011-10-16 11:10:39 -------- d-----w- c:\users\eric.falley\appdata\local\{9B11783F-9132-4190-85E8-A927E10DB6E5}
2011-10-15 22:15:26 -------- d-----w- c:\users\eric.falley\appdata\local\{BDB4808C-AFE8-45CA-B53C-29DD10A589AE}
2011-10-15 07:47:23 -------- d-----w- c:\users\eric.falley\appdata\local\{9E89B112-2B7D-4558-8505-3CA740D22FAA}
2011-10-14 19:44:43 -------- d-----w- c:\users\eric.falley\appdata\local\{FFC02550-E5B5-421E-B63F-4E9021CA0A73}
2011-10-14 06:12:02 -------- d-----w- c:\users\eric.falley\appdata\local\{43DCF7E5-BB2E-4127-A067-D0BABE192230}
2011-10-14 06:11:43 -------- d-----w- c:\users\eric.falley\appdata\local\{3D40661A-F57C-400E-A418-8EAD14238765}
2011-10-13 13:09:55 465408 ----a-w- c:\windows\system32\psisdecd.dll
2011-10-13 13:09:54 75776 ----a-w- c:\windows\system32\psisrndr.ax
2011-10-13 13:09:37 571904 ----a-w- c:\windows\system32\oleaut32.dll
2011-10-13 13:09:37 233472 ----a-w- c:\windows\system32\oleacc.dll
2011-10-11 13:11:25 -------- d-----w- c:\users\eric.falley\appdata\local\{8CFE1B3B-9D6E-44A9-BB1B-F437A009CB92}
2011-10-10 22:00:26 -------- d-----w- c:\users\eric.falley\appdata\local\{09B9832C-3016-4826-875C-A647987F1AAE}
2011-10-10 09:59:50 -------- d-----w- c:\users\eric.falley\appdata\local\{F14C70F0-1AA8-46C5-9CFA-922518129922}
2011-10-10 09:59:36 -------- d-----w- c:\users\eric.falley\appdata\local\{37AB9EDB-4792-4756-B05A-FDD7720FE01B}
2011-10-09 21:57:45 -------- d-----w- c:\users\eric.falley\appdata\local\{5A8D336D-DD57-442D-AE2C-72B76C8D2D43}
2011-10-09 21:57:23 -------- d-----w- c:\users\eric.falley\appdata\local\{4026D07E-88CF-4384-A3C4-DD68247D1719}
2011-10-09 02:49:49 -------- d-----w- c:\users\eric.falley\appdata\local\{7376C3B3-E499-46AF-A366-DF4EA37C9835}
2011-10-09 02:49:37 -------- d-----w- c:\users\eric.falley\appdata\local\{BD56D9B9-D88A-44E2-A891-AB78AA4107FD}
2011-10-08 14:48:24 -------- d-----w- c:\users\eric.falley\appdata\local\{1847665C-95D2-441B-9EA5-8440576FF3C0}
2011-10-07 23:23:35 -------- d-----w- c:\users\eric.falley\appdata\local\{CC39BAC2-0B02-42B5-9103-9386DC225986}
2011-10-07 23:23:17 -------- d-----w- c:\users\eric.falley\appdata\local\{FE763220-5FA4-4862-AB79-BA339462CA7A}
2011-10-07 11:17:55 -------- d-----w- c:\users\eric.falley\appdata\local\{D798B741-0610-46FF-B98A-B5B97EDA4022}
2011-10-07 11:17:36 -------- d-----w- c:\users\eric.falley\appdata\local\{D8895BD2-3025-4920-8630-EC4FDD04BE19}
2011-10-06 20:09:04 -------- d-----w- c:\users\eric.falley\appdata\local\{C9A01183-253B-4F2C-B572-204809B31211}
2011-10-06 20:08:48 -------- d-----w- c:\users\eric.falley\appdata\local\{AFACBF8C-B143-4D7D-8563-4769A883C220}
2011-10-05 09:52:30 756048 ----a-w- c:\program files\common files\microsoft shared\office12\MSPTLS.DLL
2011-10-01 23:31:54 18328 ----a-w- c:\programdata\microsoft\identitycrl\production\ppcrlconfig600.dll
2011-10-01 23:24:57 -------- d-----w- c:\users\eric.falley\appdata\local\{18C825D4-9891-441E-A4CB-69E31DCDF54E}
2011-10-01 23:24:30 -------- d-----w- c:\users\eric.falley\appdata\local\{F4E1BBA7-BB64-4DE1-9F96-BF15BFC720A8}
2011-10-01 20:10:46 -------- d-----w- c:\users\eric.falley\appdata\local\{8964FA86-DD4D-439D-8CD4-E01995B23D6C}
2011-10-01 20:10:35 -------- d-----w- c:\users\eric.falley\appdata\local\{B46D850E-A5E0-4463-9BC2-0851A8DDC197}
2011-10-01 18:56:06 -------- d-----w- c:\users\eric.falley\appdata\local\{7C52083E-A505-43CF-80E4-B4B1979E940E}
2011-10-01 18:55:54 -------- d-----w- c:\users\eric.falley\appdata\local\{B732FCA5-C932-4EB3-A64D-22857EC3CE78}
2011-10-01 06:16:11 -------- d-----w- c:\users\eric.falley\appdata\local\{941BE390-ECBC-42A6-A521-C38EE7EEC260}
2011-10-01 06:15:52 -------- d-----w- c:\users\eric.falley\appdata\local\{A3C4839E-4963-45C0-85FE-62C213A39B4C}
2011-10-01 04:22:31 -------- d-----w- c:\users\eric.falley\appdata\local\{EF26F751-DC62-4E7E-B7DE-CE0CF228EC16}
2011-10-01 04:22:16 -------- d-----w- c:\users\eric.falley\appdata\local\{3999EB3B-E601-4B26-826A-766D1AD4D4D8}
2011-09-26 20:53:06 -------- d-----w- c:\users\eric.falley\appdata\local\{523139A0-9241-43C8-A0C4-B6F8ED9229D2}
2011-09-26 20:52:51 -------- d-----w- c:\users\eric.falley\appdata\local\{7DE1F52C-8DED-40D1-9B50-DBC86E04B207}
2011-09-26 17:06:56 -------- d-----w- c:\programdata\AVG2012
2011-09-26 13:09:35 -------- d-----w- c:\users\eric.falley\appdata\local\{ADE5120C-ED46-4A46-8F98-52FEB6FD2489}
2011-09-22 22:23:38 -------- d-----w- c:\users\eric.falley\appdata\local\{8E696A74-CF48-4910-B7D4-75C0DC01C55A}
2011-09-22 22:23:01 -------- d-----w- c:\users\eric.falley\appdata\local\{3BC38879-D7FF-4143-B078-C9184717D05D}
2011-09-22 02:04:42 -------- d-----w- c:\users\eric.falley\appdata\local\{8A678A7E-E3D0-47FA-8D50-E1899EBD5601}
2011-09-22 02:04:18 -------- d-----w- c:\users\eric.falley\appdata\local\{99968A88-0A54-4FAB-AB64-319BE73AF4C7}
2011-09-21 15:18:07 -------- d-----w- c:\users\eric.falley\appdata\local\{F1DC46B5-C993-4470-A024-45FCC3339363}
2011-09-21 15:17:48 -------- d-----w- c:\users\eric.falley\appdata\local\{CE37704C-FC36-4E63-BE87-F8F427164ACC}
2011-09-16 10:06:17 272896 ----a-w- c:\windows\system32\spool\prtprocs\w32x86\hpcpp5r1.DLL
2011-09-16 09:09:28 -------- d-----w- c:\users\eric.falley\appdata\local\{7832513D-BF08-40BC-8E99-DBD23382C850}
2011-09-16 09:09:15 -------- d-----w- c:\users\eric.falley\appdata\local\{4941E4C8-72DD-4622-91E8-207D94AF2491}
2011-09-12 21:55:54 -------- d-----w- c:\users\eric.falley\appdata\local\{5F6FC908-ECB5-4624-841A-A63AB0B03929}
2011-09-12 21:53:31 -------- d-----w- c:\users\eric.falley\appdata\local\{C78E74BB-84DD-4EDF-A0E7-3A3577C93726}
2011-09-10 14:41:59 -------- d-----w- c:\users\eric.falley\appdata\local\{F58E756E-4B93-4DC4-BB11-0958503F9B51}
2011-09-10 14:41:37 -------- d-----w- c:\users\eric.falley\appdata\local\{36690BC3-B0B4-481F-88E6-9CA20F0145DD}
2011-09-03 01:19:52 -------- d-----w- c:\users\eric.falley\appdata\local\{4DE7609A-759B-4195-AD87-107D7322A7DA}
2011-09-03 01:19:40 -------- d-----w- c:\users\eric.falley\appdata\local\{8CB1275C-4305-4041-A28F-A2716A39EBF2}
2011-08-31 04:05:04 83816 ----a-w- c:\windows\system32\dns-sd.exe
2011-08-31 04:05:04 73064 ----a-w- c:\windows\system32\dnssd.dll
2011-08-31 04:05:04 50536 ----a-w- c:\windows\system32\jdns_sd.dll
2011-08-31 04:05:04 178536 ----a-w- c:\windows\system32\dnssdX.dll
2011-08-29 22:33:42 314368 ----a-w- c:\windows\system32\spool\prtprocs\w32x86\hpcpp109.dll
2011-08-29 21:56:39 -------- d-----w- c:\users\eric.falley\appdata\local\{5A21FB15-4950-415F-BA5B-D3BD2717BEF9}
2011-08-29 21:56:28 -------- d-----w- c:\users\eric.falley\appdata\local\{1AB81519-1A1D-4185-A12B-662C2AB80B77}
2011-08-29 13:55:07 -------- d-----w- c:\users\eric.falley\appdata\local\{FE39F581-A6B3-4A7E-A70A-2FAC5E541AD1}
2011-08-29 13:54:43 -------- d-----w- c:\users\eric.falley\appdata\local\{58DC83BB-B095-4E34-97AE-C21BD83AF313}
2011-08-27 05:08:33 -------- d-----w- c:\users\eric.falley\appdata\local\{CE631697-B03F-440C-94DD-744C161601BD}
2011-08-27 05:08:12 -------- d-----w- c:\users\eric.falley\appdata\local\{81C0CCD5-77CF-463B-90C2-B4B8EE38931A}
2011-08-26 19:43:03 -------- d-----w- c:\program files\common files\Steam
2011-08-26 19:42:59 -------- d-----w- c:\program files\Steam
2011-08-26 18:08:00 -------- d-----w- c:\users\eric.falley\appdata\local\{53B29A42-368F-412A-A846-A273CCA3CA81}
2011-08-26 18:07:49 -------- d-----w- c:\users\eric.falley\appdata\local\{EF6ADC3E-0A85-4F77-9E5A-6615E9B8878F}
2011-08-25 20:10:38 -------- d-----w- c:\users\eric.falley\appdata\local\{8634F0C5-FB64-49AA-AE7D-BEFDFD561E3E}
2011-08-25 20:10:27 -------- d-----w- c:\users\eric.falley\appdata\local\{CCA4950C-E78B-4208-9787-47164CFC8656}
2011-08-21 03:30:45 -------- d-----w- c:\users\eric.falley\appdata\local\{E8DC873C-0581-4654-83B6-D7AFF539848B}
2011-08-20 05:04:33 -------- d-----w- c:\users\eric.falley\appdata\local\{09F3130E-CFFA-4437-889C-1CA78A62FECA}
2011-08-19 08:03:18 -------- d-----w- c:\users\eric.falley\appdata\local\{38CCD6AA-C33A-4FA5-A568-CB9D565EAF60}
2011-08-19 08:03:03 -------- d-----w- c:\users\eric.falley\appdata\local\{C2110B6B-A796-4AA0-97D6-BED0325DFB04}
2011-08-17 04:29:59 -------- d-----w- c:\users\eric.falley\appdata\local\{02111656-026E-45B3-9DD2-0F47C5A3B685}
2011-08-17 04:29:45 -------- d-----w- c:\users\eric.falley\appdata\local\{B6A0E48D-1D45-4062-B613-0C27A1266411}
2011-08-16 01:13:14 -------- d-----w- c:\programdata\GoldWave
2011-08-15 22:29:30 -------- d-----w- c:\programdata\Media Center Programs
2011-08-15 17:01:11 -------- d-----w- c:\users\eric.falley\appdata\local\{9132A72C-30A1-4228-B3B4-64E7E2CFEC0D}
2011-08-15 17:00:26 -------- d-----w- c:\users\eric.falley\appdata\local\{4A01CE8E-D36E-4922-987A-4B6767BB3C0E}
2011-08-11 08:39:24 223744 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys
2011-08-11 08:32:24 94208 ----a-w- c:\program files\common files\system\ole db\msdaosp.dll
2011-08-11 08:32:24 86016 ----a-w- c:\windows\system32\odbccu32.dll
2011-08-11 08:32:24 81920 ----a-w- c:\windows\system32\odbccr32.dll
2011-08-11 08:32:24 319488 ----a-w- c:\windows\system32\odbcjt32.dll
2011-08-11 08:32:24 163840 ----a-w- c:\windows\system32\odbctrac.dll
2011-08-11 08:32:24 122880 ----a-w- c:\windows\system32\odbccp32.dll
2011-08-10 22:33:42 -------- d-----w- c:\users\eric.falley\appdata\local\{605C5243-4795-413D-B42D-356152C908EE}
2011-08-10 22:33:23 -------- d-----w- c:\users\eric.falley\appdata\local\{8046D1B2-58D5-42E9-9457-04664BDB4CB8}
2011-08-09 19:41:33 -------- d-----w- c:\users\eric.falley\appdata\local\{CF8731AF-A38D-40D0-B1E4-07948E0CB884}
2011-08-09 19:41:18 -------- d-----w- c:\users\eric.falley\appdata\local\{F229B4F7-A80C-49BA-BEDD-5F4D73117CC4}
2011-08-09 05:46:42 -------- d-----w- c:\users\eric.falley\appdata\local\{64C3585B-C463-44FF-9FD9-E7B8D9549F27}
2011-08-09 05:46:24 -------- d-----w- c:\users\eric.falley\appdata\local\{DD3FA156-B78F-4F14-88DF-A2F3A09CF571}
2011-08-08 03:27:19 -------- d-----w- c:\users\eric.falley\appdata\local\{4D2B8BC0-F26D-4F59-8D36-1C8D4FBD7CB0}
2011-08-08 03:25:19 -------- d-----w- c:\users\eric.falley\appdata\local\{AA6AC0A3-6881-46C9-A0DB-5433CE51C726}
2011-08-04 18:34:17 -------- d-----w- c:\users\eric.falley\appdata\local\{47B81D93-01ED-4555-910D-D3B509E580B9}
2011-08-04 18:34:02 -------- d-----w- c:\users\eric.falley\appdata\local\{F1D3A07A-16B8-46F0-9007-2914FF26F70A}
2011-08-04 17:03:43 -------- d-----w- c:\users\eric.falley\appdata\local\{84C8E7F7-A4C6-447F-ACF0-24D7434B7B7C}
2011-08-04 17:03:15 -------- d-----w- c:\users\eric.falley\appdata\local\{334C6246-6EFC-48EC-A708-D948B0156D51}
2011-08-03 23:27:26 1415072 ----a-w- c:\program files\common files\microsoft shared\office12\ACECORE.DLL
2011-08-02 18:20:48 -------- d-----w- c:\users\eric.falley\appdata\local\{47F034AC-DFB3-4D6C-A7E3-71FEB92D3999}
2011-08-02 18:20:32 -------- d-----w- c:\users\eric.falley\appdata\local\{693274DC-C82B-4BE3-9315-9ADB7E9E98DF}
2011-08-02 15:59:12 -------- d-----w- c:\users\eric.falley\appdata\local\{B816AB27-D884-4483-832D-C399A24EE013}
2011-08-02 15:58:42 -------- d-----w- c:\users\eric.falley\appdata\local\{930140C1-A38B-486D-B9B3-6B0DAF4A1AEE}
2011-07-31 04:31:07 -------- d-----w- c:\users\eric.falley\appdata\local\{AF832ABD-A3D4-48A2-A406-DF0DB038FC09}
2011-07-27 22:49:22 95608 ----a-w- c:\program files\common files\microsoft shared\office12\EXP_PDF.DLL
2011-07-27 22:49:22 56696 ----a-w- c:\program files\common files\microsoft shared\office12\EXP_XPS.DLL
2011-07-27 22:49:22 177536 ----a-w- c:\program files\common files\microsoft shared\smart tag\IETAG.DLL
2011-07-27 10:33:08 1064296 ----a-w- c:\program files\common files\microsoft shared\office12\RICHED20.DLL
2011-07-27 10:13:08 434080 ----a-w- c:\program files\common files\microsoft shared\dw\DWTRIG20.EXE
2011-07-27 10:13:06 813960 ----a-w- c:\program files\common files\microsoft shared\dw\DW20.EXE
2011-07-27 09:59:00 6540136 ----a-w- c:\program files\common files\microsoft shared\office12\office setup controller\OSETUP.DLL
2011-07-27 09:58:56 439160 ----a-w- c:\program files\common files\microsoft shared\office12\office setup controller\SETUP.EXE
2011-07-27 09:36:06 481640 ----a-w- c:\program files\common files\microsoft shared\portal\PortalConnectCore.dll
2011-07-23 06:38:39 -------- d-----w- c:\users\eric.falley\appdata\local\{0D401B13-95D7-48CC-8E83-C8856558DDFF}
2011-07-22 18:38:23 -------- d-----w- c:\users\eric.falley\appdata\local\{C1D2AA93-5665-49C4-825C-FCD8A8A41AA2}
2011-07-21 20:04:52 -------- d-----w- c:\users\eric.falley\appdata\local\{149EC14B-BF8B-450F-874D-FDAD42817B5C}
2011-07-21 07:37:43 -------- d-----w- c:\users\eric.falley\appdata\local\{D5B3F425-7A58-458F-8707-C79137061946}
2011-07-20 19:36:59 -------- d-----w- c:\users\eric.falley\appdata\local\{D7F1CE81-FB9C-4BAD-8132-58733F0FE3A7}
2011-07-20 10:18:26 2872184 ----a-w- c:\program files\common files\microsoft shared\office12\OFFDIAG.EXE
2011-07-20 10:18:24 440696 ----a-w- c:\program files\common files\microsoft shared\office12\ODSERV.EXE
2011-07-20 01:45:15 -------- d-----w- c:\users\eric.falley\appdata\local\{CD3FD1EB-CA05-4415-B8C2-5C369AAA8244}
2011-07-19 13:44:43 -------- d-----w- c:\users\eric.falley\appdata\local\{F6EB6A17-9404-4936-A996-5D989DF75887}
2011-07-19 01:29:22 -------- d-----w- c:\users\eric.falley\appdata\local\{FA1484C5-0F00-4F3D-A9E2-8C38376CF65A}
2011-07-18 13:29:05 -------- d-----w- c:\users\eric.falley\appdata\local\{C2C33867-48EF-4AFB-A4B1-1B731D1934EF}
2011-07-18 01:28:48 -------- d-----w- c:\users\eric.falley\appdata\local\{A1242FF6-EC17-4D70-B57C-4E1597C95684}
2011-07-17 08:00:59 -------- d-----w- c:\users\eric.falley\appdata\local\{3762A87A-289A-4861-8B21-30BF33E35888}
2011-07-16 20:00:37 -------- d-----w- c:\users\eric.falley\appdata\local\{9967EC69-5C7C-457F-9A53-54EB30280975}
2011-07-16 08:00:18 -------- d-----w- c:\users\eric.falley\appdata\local\{8EE73242-5687-4FAD-8E00-9D1B67529172}
2011-07-15 19:59:56 -------- d-----w- c:\users\eric.falley\appdata\local\{3FA2592B-C029-4D20-9F17-2774952A1A5E}
2011-07-15 07:59:41 -------- d-----w- c:\users\eric.falley\appdata\local\{5F0DC24E-B2DA-4EAD-84C9-B513D51475E2}
2011-07-14 19:59:22 -------- d-----w- c:\users\eric.falley\appdata\local\{C78879E6-0576-430F-9AE3-2D5BEBD0B97A}
2011-07-14 08:08:38 60416 ----a-w- c:\windows\system32\drivers\BTHUSB.SYS
2011-07-14 03:46:39 -------- d-----w- c:\users\eric.falley\appdata\local\{451BB37D-4844-4130-9AB4-7BC5041C84BC}
2011-07-14 02:34:36 1117584 ----a-w- c:\program files\common files\microsoft shared\filters\offfiltx.dll
2011-07-13 15:32:36 -------- d-----w- c:\users\eric.falley\appdata\local\{1F1F0A3D-B6E3-4BF9-88EF-E091BEB108CA}
2011-07-12 22:48:09 -------- d-----w- c:\users\eric.falley\appdata\local\{855C651A-E7E6-4B20-9036-3CDEFD720096}
2011-07-11 07:25:05 -------- d-----w- c:\users\eric.falley\appdata\local\{91183882-751C-4D06-89D7-66112EA66A99}
2011-07-10 19:24:48 -------- d-----w- c:\users\eric.falley\appdata\local\{1F975C0D-BF12-4E22-9FC2-471814A22D41}
2011-07-10 07:24:31 -------- d-----w- c:\users\eric.falley\appdata\local\{166E98E7-ED85-4311-BC56-357BE31979E4}
2011-07-09 19:24:16 -------- d-----w- c:\users\eric.falley\appdata\local\{B8758DD2-C7F4-4CF6-99C7-393FC8DE1ADD}
2011-07-09 07:23:55 -------- d-----w- c:\users\eric.falley\appdata\local\{0BB03E3F-3169-490C-AF5A-382B726F2F7E}
2011-07-08 19:23:36 -------- d-----w- c:\users\eric.falley\appdata\local\{CEE7CA0A-420C-457A-95C9-E9A5EDC5BBEF}
2011-07-08 07:23:16 -------- d-----w- c:\users\eric.falley\appdata\local\{1B80FF4F-4033-4D21-AA16-21C7468DD28A}
2011-07-07 19:22:55 -------- d-----w- c:\users\eric.falley\appdata\local\{A4BE79AA-0757-4B71-A466-3A6235E0CF32}
2011-07-07 07:28:22 1193320 ----a-w- c:\windows\system32\FM20.DLL
2011-07-07 07:22:39 -------- d-----w- c:\users\eric.falley\appdata\local\{7DF8BB0C-3D1B-49CD-9A43-A947CB85D609}
2011-07-06 19:22:18 -------- d-----w- c:\users\eric.falley\appdata\local\{05D9624A-892F-4DA0-9951-78D0827BF938}
2011-07-06 06:26:30 -------- d-----w- c:\users\eric.falley\appdata\local\{207056D3-874D-43CB-A9A6-53CE7B19E0C7}
2011-07-05 18:26:11 -------- d-----w- c:\users\eric.falley\appdata\local\{914619BC-325A-4133-8E80-918064160E0E}
2011-07-04 19:24:44 -------- d-----w- c:\users\eric.falley\appdata\local\{49998548-12F7-4EA2-BE3F-440579B655BC}
2011-07-04 06:59:17 -------- d-----w- c:\users\eric.falley\appdata\local\{C44FFB21-80BA-473A-8F05-AF15D1637E0C}
2011-07-02 18:51:19 -------- d-----w- c:\users\eric.falley\appdata\local\{8428F863-7302-4EDC-9E2F-ABFF9B3C6F7D}
2011-07-02 06:50:50 -------- d-----w- c:\users\eric.falley\appdata\local\{C191E612-ABBA-4809-94E7-2EBDA27FA48F}
2011-07-01 18:50:16 -------- d-----w- c:\users\eric.falley\appdata\local\{7D71CA14-E3B2-458B-9168-D8F0D9654E89}
2011-07-01 06:49:46 -------- d-----w- c:\users\eric.falley\appdata\local\{A00AB401-BACE-4A5E-A8F5-52866FCDDAB3}
2011-06-30 18:49:15 -------- d-----w- c:\users\eric.falley\appdata\local\{9F948F75-5AAA-4007-AFAF-602E01460D29}
2011-06-30 18:11:28 -------- d-----w- c:\users\eric.falley\appdata\local\{EEC8068B-EA2F-4C5A-A62F-C9E67C68CA77}
2011-06-30 16:21:27 293376 ----a-w- c:\windows\system32\umpnpmgr.dll
2011-06-30 08:01:56 59392 ----a-w- c:\windows\system32\msscntrs.dll
2011-06-30 08:01:55 86528 ----a-w- c:\windows\system32\SearchFilterHost.exe
2011-06-30 08:01:55 666624 ----a-w- c:\windows\system32\mssvp.dll
2011-06-30 08:01:55 427520 ----a-w- c:\windows\system32\SearchIndexer.exe
2011-06-30 08:01:55 337408 ----a-w- c:\windows\system32\mssph.dll
2011-06-30 08:01:55 197120 ----a-w- c:\windows\system32\mssphtb.dll
2011-06-30 08:01:55 164352 ----a-w- c:\windows\system32\SearchProtocolHost.exe
2011-06-30 08:01:52 1549312 ----a-w- c:\windows\system32\tquery.dll
2011-06-30 08:01:52 1401344 ----a-w- c:\windows\system32\mssrch.dll
2011-06-30 06:10:43 -------- d-----w- c:\users\eric.falley\appdata\local\{55EAD73F-54A6-450E-8D3F-263533B71FFD}
2011-06-29 04:29:55 -------- d-----w- c:\users\eric.falley\appdata\local\{C8882721-866E-42E2-ADD6-14597B2042A5}
2011-06-28 16:28:45 -------- d-----w- c:\users\eric.falley\appdata\local\{A60F75EE-95F7-4DD6-8171-2137E4881F6A}
2011-06-27 22:30:46 -------- d-----w- c:\users\eric.falley\appdata\local\{F57847DB-267E-40D6-B736-5B415737919B}
2011-06-27 03:04:19 -------- d-----w- c:\users\eric.falley\appdata\local\{D6F29C46-3973-4057-A73D-3555FEA979CB}
2011-06-27 01:23:23 -------- d-----w- c:\users\eric.falley\appdata\local\{9649064D-7D33-4368-BF93-5D8F2E63B80F}
2011-06-26 06:34:56 -------- d-----w- c:\users\eric.falley\appdata\local\{FCB70B14-DFDC-4808-9618-62FC2446A3A6}
2011-06-26 06:25:38 311808 ----a-w- c:\windows\system32\drivers\srv.sys
2011-06-26 06:25:38 310272 ----a-w- c:\windows\system32\drivers\srv2.sys
2011-06-26 06:25:38 114688 ----a-w- c:\windows\system32\drivers\srvnet.sys
2011-06-26 06:25:20 338944 ----a-w- c:\windows\system32\drivers\afd.sys
2011-06-26 06:20:35 741376 ----a-w- c:\windows\system32\inetcomm.dll
2011-06-26 06:09:14 96768 ----a-w- c:\windows\system32\drivers\mrxsmb20.sys
2011-06-26 06:09:13 123904 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2011-06-26 06:05:22 -------- d-----w- c:\users\eric.falley\appdata\local\{FD24C9D8-CC5C-48DB-BA6A-A71536C3E985}
2011-06-23 08:32:05 -------- d-----w- c:\users\eric.falley\appdata\local\{8A51618B-8857-49B5-B045-4F1F685A1F70}
2011-06-22 20:31:35 -------- d-----w- c:\users\eric.falley\appdata\local\{429D578B-8246-4A1F-BA37-4A98729E51B1}
2011-06-22 13:16:34 1681784 ----a-w- c:\program files\common files\microsoft shared\web server extensions\12\bin\FPSRVUTL.DLL
2011-06-22 08:31:05 -------- d-----w- c:\users\eric.falley\appdata\local\{693948EE-BA2F-40B0-9021-4F9DB6E3F0EB}
2011-06-22 01:02:40 341888 ----a-w- c:\program files\common files\microsoft shared\proof\MSTH3ES.DLL
2011-06-21 20:30:34 -------- d-----w- c:\users\eric.falley\appdata\local\{765D3D2B-BADF-40C8-A122-D071A11A5FA2}
2011-06-21 14:53:38 -------- d-----w- c:\users\eric.falley\appdata\local\{D92356E0-655C-4EB0-9A46-9BEE6BECF3F4}
2011-06-21 07:36:44 341888 ----a-w- c:\program files\common files\microsoft shared\proof\MSTH3FR.DLL
2011-06-20 21:32:29 -------- d-----w- c:\users\eric.falley\appdata\local\{C29CF885-EC35-4898-B25B-C571A0ADC807}
2011-06-20 09:32:12 -------- d-----w- c:\users\eric.falley\appdata\local\{C32A2841-E542-41B0-B53F-814DB2CECD3A}
2011-06-19 21:31:44 -------- d-----w- c:\users\eric.falley\appdata\local\{FBC5F690-ECF4-4C5B-A7C5-03C5BE6ADB9A}
2011-06-18 16:15:48 -------- d-----w- c:\users\eric.falley\appdata\local\{FE0AEDB2-3C9D-4FAC-AA36-66C5D477CFFF}
2011-06-17 19:36:54 -------- d-----w- c:\users\eric.falley\appdata\local\{61EB4E7D-821A-4781-9702-CD977737AF13}
2011-06-17 07:36:22 -------- d-----w- c:\users\eric.falley\appdata\local\{9143B803-D172-4DDE-91B9-518EB676954C}
2011-06-16 19:32:15 -------- d-----w- c:\users\eric.falley\appdata\local\{43067AA8-CECA-42A1-9A03-1A91B8FBDA48}
2011-06-16 06:32:46 -------- d-----r- c:\users\eric.falley\Dropbox
2011-06-16 06:29:08 -------- d-----w- c:\users\eric.falley\appdata\local\{FCB5E0C5-A6FA-4D2E-A210-12FEA14264AC}
2011-06-16 06:24:12 -------- d-----w- c:\users\eric.falley\appdata\roaming\Dropbox
2011-06-15 18:28:38 -------- d-----w- c:\users\eric.falley\appdata\local\{F84F4C47-84A1-4241-A275-8EE24E2BE099}
2011-06-15 04:18:11 -------- d-----w- c:\users\eric.falley\appdata\local\{88A135C2-3C96-4156-A5F6-974BAE689B60}
2011-06-14 16:17:38 -------- d-----w- c:\users\eric.falley\appdata\local\{F8ECB55A-B997-4CF3-8CB6-0E20C0023FA2}
2011-06-13 20:46:01 -------- d-----w- c:\users\eric.falley\appdata\local\{4D125631-83DA-46AA-B26B-B034CFE63B7A}
2011-06-13 06:24:03 -------- d-----w- c:\users\eric.falley\appdata\local\DOSBox
2011-06-13 06:23:07 -------- d-----w- c:\program files\Arkanoid2
2011-06-13 05:27:13 -------- d-----w- c:\users\eric.falley\appdata\local\{05DA8CF7-1C5F-4D96-9735-C115606A5181}
2011-06-12 17:26:52 -------- d-----w- c:\users\eric.falley\appdata\local\{49ED51D1-202E-4C85-8B45-C0255EC1AB92}
2011-06-12 05:26:32 -------- d-----w- c:\users\eric.falley\appdata\local\{632F570C-E1B9-4EA3-9266-66896ED3D351}
2011-06-11 21:03:25 306688 ----a-w- c:\windows\IsUninst.exe
2011-06-11 05:11:09 -------- d-----w- c:\users\eric.falley\appdata\local\{A700932C-87BA-462D-8838-B89AFFAD3ABD}
2011-06-10 22:43:55 -------- d-----w- C:\TEMP_PARALLELS_TOOLS
2011-06-10 22:43:54 30024 ------w- c:\windows\system32\drivers\prl_pv32.sys
2011-06-10 22:43:50 35016 ------w- c:\windows\system32\drivers\prl_boot.sys
2011-06-10 17:10:38 -------- d-----w- c:\users\eric.falley\appdata\local\{58377D55-1877-4206-A7EC-5FD977D780D6}
2011-06-10 05:10:23 -------- d-----w- c:\users\eric.falley\appdata\local\{4AF1E6E4-72B4-4D7C-97F3-6001D46ECA12}
2011-06-10 01:18:47 -------- d-----w- c:\program files\Voobly
2011-06-09 17:10:02 -------- d-----w- c:\users\eric.falley\appdata\local\{4CEF8B3B-8700-4CA8-9527-BEFC10BBD33A}
2011-06-09 02:07:14 -------- d-----w- c:\users\eric.falley\appdata\local\{77083598-95B4-42A5-97D1-9FA04700A655}
2011-06-08 14:06:57 -------- d-----w- c:\users\eric.falley\appdata\local\{7285F542-6053-452F-8643-801356786E25}
2011-06-07 20:35:39 -------- d-----w- c:\users\eric.falley\appdata\local\{83E92D95-7BFE-479C-985C-63F6B328BC1A}
2011-06-07 08:35:22 -------- d-----w- c:\users\eric.falley\appdata\local\{10EC1AFA-5809-4EB2-B2D3-D9CC3BDAB981}
2011-06-06 20:35:08 -------- d-----w- c:\users\eric.falley\appdata\local\{3C0E2CFC-8F8F-4915-B298-180A255BD97F}
2011-06-06 08:34:51 -------- d-----w- c:\users\eric.falley\appdata\local\{98A6774F-0FB2-4C43-A339-93E845C0F0EE}
2011-06-05 20:34:18 -------- d-----w- c:\users\eric.falley\appdata\local\{2678814C-5852-4A5C-8566-CF73683E8245}
2011-06-05 05:03:21 -------- d-----w- c:\users\eric.falley\appdata\local\{A1986C7E-2FDF-4266-B3D5-88F8CED06205}
2011-06-04 18:23:38 -------- d-----w- c:\program files\Cheat Engine 6.1
2011-06-04 17:03:07 -------- d-----w- c:\users\eric.falley\appdata\local\{0D22AAEE-D101-4F81-B04A-550495FB53BE}
2011-06-04 05:02:44 -------- d-----w- c:\users\eric.falley\appdata\local\{72B672FB-886E-43CA-A4F7-CCC31CCBC8BE}
2011-06-03 17:02:14 -------- d-----w- c:\users\eric.falley\appdata\local\{67760583-E45B-4E2B-A2F5-C7B39E285E7B}
2011-06-02 20:51:00 -------- d-----w- c:\users\eric.falley\appdata\local\{1EAA4C81-2021-4336-8A2C-9B32C831420C}
2011-06-02 07:04:53 -------- d-----w- c:\users\eric.falley\appdata\local\{4FC1F4DF-AEA9-476F-8763-CC206162C44E}
2011-06-01 19:04:39 -------- d-----w- c:\users\eric.falley\appdata\local\{4098DB0D-FD10-40FF-82CD-9B4F1E61CF83}
2011-06-01 06:55:53 -------- d-----w- c:\users\eric.falley\appdata\local\{1D728B29-2542-44FF-B839-93E3216CC0EF}
2011-05-31 22:23:32 289616 ----a-w- c:\program files\common files\microsoft shared\msclientdatamgr\MSCDM.DLL
2011-05-31 21:26:54 986000 ----a-w- c:\program files\common files\microsoft shared\office12\msoshext.dll
2011-05-31 18:55:24 -------- d-----w- c:\users\eric.falley\appdata\local\{6A04106B-E9CC-4AD6-BBAD-67DA7174EDCF}
2011-05-31 06:12:54 -------- d-----w- c:\users\eric.falley\appdata\local\{8E85C54C-8B91-430B-A855-1ED592BBB672}
2011-05-30 18:12:21 -------- d-----w- c:\users\eric.falley\appdata\local\{55D057FE-AB97-4A4D-B4C5-4DA693565359}
2011-05-29 20:08:36 -------- d-----w- c:\users\eric.falley\appdata\local\{8E494093-FC24-4F09-BD6B-D5BF062E9E30}
2011-05-29 09:01:09 -------- d-----w- c:\windows\system32\SPReview
2011-05-29 08:27:59 988160 ----a-w- c:\windows\system32\propsys.dll
2011-05-29 08:26:59 316416 ----a-w- c:\windows\system32\sharemediacpl.dll
2011-05-29 08:24:25 -------- d-----w- c:\windows\system32\EventProviders
2011-05-29 05:26:00 -------- d-----w- c:\users\eric.falley\appdata\local\{6A0B3D18-AB93-4473-954D-9A245EA92A4A}
2011-05-28 17:25:35 -------- d-----w- c:\users\eric.falley\appdata\local\{0A1FC941-FDE3-48E3-AC68-1714074CE8DB}
2011-05-28 04:18:08 -------- d-----w- c:\users\eric.falley\appdata\roaming\go
2011-05-28 04:18:03 -------- d-----w- c:\programdata\Easybits GO
2011-05-27 23:44:42 -------- d-----w- c:\users\eric.falley\appdata\local\{44E55DA1-9F8B-424A-9342-7417AB54845B}
2011-05-27 11:44:26 -------- d-----w- c:\users\eric.falley\appdata\local\{6A49A7D6-D68F-412A-ADCE-20FED34F606B}
2011-05-27 08:00:39 27008 ----a-w- c:\windows\system32\drivers\Diskdump.sys
2011-05-27 00:28:06 6637952 ----a-w- c:\program files\common files\microsoft shared\office12\MSORES.DLL
2011-05-26 23:41:03 -------- d-----w- c:\users\eric.falley\appdata\local\{EBC9EDA9-D327-43EB-A7D2-A73AE715E97B}
2011-05-26 04:53:48 -------- d-----w- c:\users\eric.falley\appdata\local\{C01AF4CB-F31F-4179-8560-F5E432B12590}
2011-05-25 16:53:16 -------- d-----w- c:\users\eric.falley\appdata\local\{48A86984-C912-4DC1-9CEC-A44AF563A4C8}
2011-05-25 04:52:40 -------- d-----w- c:\users\eric.falley\appdata\local\{9C7C8A70-30A7-41D8-98F9-3D7173E6090C}
2011-05-24 16:52:12 -------- d-----w- c:\users\eric.falley\appdata\local\{577F7C88-5A48-473A-A5E5-D3B126E4C4C3}
2011-05-23 21:50:43 -------- d-----w- c:\users\eric.falley\appdata\local\{611493F0-F00F-4307-8921-263D75B652C7}
2011-05-23 09:50:16 -------- d-----w- c:\users\eric.falley\appdata\local\{251C6964-C07A-48BC-8F9B-7626BDBE9ED9}
2011-05-22 21:49:54 -------- d-----w- c:\users\eric.falley\appdata\local\{238D8FB6-496A-48AE-A702-A38A1424A6DF}
2011-05-22 06:19:00 -------- d-----w- c:\users\eric.falley\appdata\local\{4275C437-9E38-47CA-BBF2-BBF91A96BA06}
2011-05-21 08:01:11 123904 ----a-w- c:\windows\system32\poqexec.exe
2011-05-19 19:27:33 -------- d-----w- c:\users\eric.falley\appdata\local\{9F4A9D22-0029-41BA-944B-3078D7551C67}
2011-05-19 08:09:39 31232 ----a-w- c:\windows\system32\prevhost.exe
2011-05-19 08:09:28 75776 ----a-w- c:\windows\system32\drivers\usbccgp.sys
2011-05-19 08:09:28 5888 ----a-w- c:\windows\system32\drivers\usbd.sys
2011-05-19 08:09:28 43008 ----a-w- c:\windows\system32\drivers\usbehci.sys
2011-05-19 08:09:28 284672 ----a-w- c:\windows\system32\drivers\usbport.sys
2011-05-19 08:09:28 258560 ----a-w- c:\windows\system32\drivers\usbhub.sys
2011-05-19 08:09:28 24064 ----a-w- c:\windows\system32\drivers\usbuhci.sys
2011-05-19 08:09:28 20480 ----a-w- c:\windows\system32\drivers\usbohci.sys
2011-05-19 08:05:19 80256 ----a-w- c:\windows\system32\drivers\amdsata.sys
2011-05-19 08:05:19 74240 ----a-w- c:\windows\system32\fsutil.exe
2011-05-19 08:05:19 22400 ----a-w- c:\windows\system32\drivers\amdxata.sys
2011-05-19 08:05:19 1699328 ----a-w- c:\windows\system32\esent.dll
2011-05-19 08:05:18 332160 ----a-w- c:\windows\system32\drivers\iaStorV.sys
2011-05-19 08:05:18 148864 ----a-w- c:\windows\system32\drivers\storport.sys
2011-05-19 08:05:18 143744 ----a-w- c:\windows\system32\drivers\nvstor.sys
2011-05-19 08:05:18 117120 ----a-w- c:\windows\system32\drivers\nvraid.sys
2011-05-19 08:02:16 2616320 ----a-w- c:\windows\explorer.exe
2011-05-19 05:41:11 -------- d-----w- c:\users\eric.falley\appdata\local\{C6C82299-29AE-46FB-9D62-0124221F62E7}
2011-05-19 05:38:26 -------- d-----w- c:\users\eric.falley\appdata\local\{20B83327-011F-4F53-A2FB-8D386F49EB46}
2011-05-18 17:40:51 -------- d-----w- c:\users\eric.falley\appdata\local\{0D803257-803C-4DB1-9C75-AF015C2D3E29}
2011-05-18 06:47:47 -------- d-----w- c:\programdata\Skype Extras
2011-05-18 06:45:53 -------- d-----r- c:\program files\Skype
2011-05-18 05:24:55 -------- d-----w- c:\users\eric.falley\appdata\local\{549552DC-6FAE-4945-9CD4-1718C5D98AA6}
2011-05-17 17:24:40 -------- d-----w- c:\users\eric.falley\appdata\local\{09379ACA-C895-40B9-A2D8-F3CA07BF4945}
2011-05-16 22:49:13 -------- d-----w- c:\users\eric.falley\appdata\local\{AAEB7715-6E23-498F-8615-ADB2421859C6}
2011-05-16 21:52:09 94040 ----a-w- c:\program files\common files\windows live\.cache\800c8cb01cc141303\DSETUP.dll
2011-05-16 21:52:09 525656 ----a-w- c:\program files\common files\windows live\.cache\800c8cb01cc141303\DXSETUP.exe
2011-05-16 21:52:09 1691480 ----a-w- c:\program files\common files\windows live\.cache\800c8cb01cc141303\dsetup32.dll
2011-05-16 21:46:39 -------- d-----w- c:\users\eric.falley\appdata\local\Windows Live
2011-05-14 02:11:54 641536 ----a-w- c:\program files\common files\microsoft shared\vc\msdia80.dll
2011-05-08 01:52:56 307200 ----a-w- c:\windows\system32\spool\prtprocs\w32x86\hpzppw72.dll
2011-04-28 22:46:15 -------- d-----w- c:\users\eric.falley\.thumbnails
2011-04-28 15:22:37 870912 ----a-w- c:\windows\system32\XpsPrint.dll
2011-04-23 23:33:54 -------- d-----w- c:\users\eric.falley\appdata\local\Sophos
2011-04-19 09:47:04 670032 ----a-w- c:\program files\common files\microsoft shared\vc\msdia90.dll
2011-04-18 14:29:14 229208 ----a-w- c:\windows\system32\drivers\VMM.sys
2011-04-17 03:05:13 165232 ---ha-w- c:\users\eric.falley\appdata\roaming\microsoft\virtual pc\VPCKeyboard.dll
2011-04-17 02:06:51 -------- d-----w- c:\program files\Microsoft Virtual PC
2011-04-14 17:06:44 28672 ----a-w- c:\windows\system32\dnscacheugc.exe
2011-04-14 17:06:44 132608 ----a-w- c:\windows\system32\dnsrslvr.dll
2011-04-14 17:03:22 191488 ----a-w- c:\windows\system32\FXSCOVER.exe
2011-04-14 17:03:21 802304 ----a-w- c:\windows\system32\WFS.exe
2011-04-14 17:03:14 288256 ----a-w- c:\windows\system32\XpsGdiConverter.dll
2011-04-14 16:54:20 1164288 ----a-w- c:\windows\system32\mfc42u.dll
2011-04-14 16:54:20 1137664 ----a-w- c:\windows\system32\mfc42.dll
2011-04-14 15:49:48 69632 ----a-w- c:\windows\system32\drivers\bowser.sys
2011-04-06 06:21:20 242704 ----a-w- c:\program files\common files\system\ole db\MSMDCB80.DLL
2011-04-04 04:00:08 -------- d-----w- c:\users\eric.falley\.gimp-2.6
2011-04-04 03:57:42 -------- d-----w- c:\program files\GIMP-2.0
2011-03-29 01:39:16 1568168 ----a-w- c:\program files\common files\microsoft shared\windows live\WLIDRES.DLL
2011-03-29 01:35:06 441216 ----a-w- c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
2011-03-29 01:33:28 856984 ----a-w- c:\program files\common files\microsoft shared\windows live\wlidcli.dll
2011-03-29 01:33:28 57752 ----a-w- c:\program files\common files\microsoft shared\windows live\msidcrl40.dll
2011-03-29 01:31:16 193920 ----a-w- c:\program files\common files\microsoft shared\windows live\WLIDSVCM.EXE
2011-03-29 01:31:14 332672 ----a-w- c:\program files\common files\microsoft shared\windows live\WLIDCREDPROV.DLL
2011-03-29 01:31:14 238464 ----a-w- c:\program files\common files\microsoft shared\windows live\WLIDPROV.DLL
2011-03-29 01:31:14 209280 ----a-w- c:\windows\system32\LIVESSP.DLL
2011-03-29 01:31:14 1713536 ----a-w- c:\program files\common files\microsoft shared\windows live\WLIDSVC.EXE
2011-03-29 01:31:14 145280 ----a-w- c:\program files\common files\microsoft shared\windows live\WLIDNSP.DLL
2011-03-28 23:36:46 196416 ----a-w- c:\program files\common files\microsoft shared\windows live\SQMAPI.DLL
2011-03-17 16:19:44 805376 ----a-w- c:\windows\system32\FntCache.dll
2011-03-17 16:19:44 739840 ----a-w- c:\windows\system32\d2d1.dll
2011-03-17 16:17:22 642048 ----a-w- c:\windows\system32\CPFilters.dll
2011-03-17 16:17:21 850944 ----a-w- c:\windows\system32\sbe.dll
2011-03-17 16:17:21 199680 ----a-w- c:\windows\system32\mpg2splt.ax
2011-03-16 23:55:58 -------- d-----w- c:\program files\Slawdog
2011-02-24 09:04:52 70656 ----a-w- c:\windows\system32\fontsub.dll
2011-02-24 09:04:40 219136 ----a-w- c:\windows\system32\d3d10_1core.dll
2011-02-24 09:04:40 161792 ----a-w- c:\windows\system32\d3d10_1.dll
2011-02-24 09:01:23 219008 ----a-w- c:\windows\system32\drivers\dxgmms1.sys
2011-02-24 09:01:23 107520 ----a-w- c:\windows\system32\cdd.dll
2011-02-24 09:01:22 728448 ----a-w- c:\windows\system32\drivers\dxgkrnl.sys
2011-02-20 20:10:31 -------- d-----w- c:\users\eric.falley\appdata\local\WinZip
2011-02-11 15:23:06 167480 ----a-w- c:\windows\system32\hppccompio.dll
2011-01-24 20:30:29 90624 ----a-w- c:\windows\system32\spool\prtprocs\w32x86\HPZPPWN7.DLL
2011-01-17 02:11:29 1776178 ----a-w- c:\program files\microsoft games\age of empires\rord\RoRd.exe
2011-01-17 02:11:29 1776085 ----a-w- c:\program files\microsoft games\age of empires\rord\AoEd.exe
2011-01-07 21:39:22 51024 ----a-w- c:\windows\system32\vcomp100.dll
2011-01-07 21:39:22 137544 ----a-w- c:\windows\system32\atl100.dll
2011-01-01 08:51:04 -------- d-----w- c:\program files\GoldWave
2010-12-31 23:01:52 81920 ----a-w- c:\windows\system32\JCRegEx.dll
2010-12-31 23:01:52 28672 ----a-w- c:\windows\system32\JCSortEx.dll
2010-12-31 23:01:51 244232 ----a-w- c:\windows\system32\MSFLXGRD.OCX
2010-12-31 23:01:51 215880 ----a-w- c:\windows\system32\MCI32.OCX
2010-12-31 23:01:51 155984 ------w- c:\windows\system32\COMDLG32.OCX
2010-12-31 23:01:51 131072 ----a-w- c:\windows\system32\JCDtEx.dll
2010-12-31 23:01:50 659264 ----a-w- c:\windows\system32\mscomct2.ocx
2010-12-31 23:01:50 414944 ----a-w- c:\windows\system32\comct332.ocx
2010-12-31 23:01:50 203976 ----a-w- c:\windows\system32\RICHTX32.OCX
2010-12-31 22:53:14 299520 ----a-w- c:\windows\uninst.exe
2010-12-22 23:19:56 -------- d-----w- c:\users\eric.falley\Age of Chivalry
2010-11-30 07:43:06 -------- d-----w- c:\program files\Audacity 1.3 Beta (Unicode)
2010-10-29 10:16:34 287232 ----a-w- c:\windows\system32\hpcpn109.dll
2010-10-29 10:01:52 328704 ----a-w- c:\windows\system32\hpmml109.dll
2010-10-29 10:01:40 278528 ----a-w- c:\windows\system32\hpmja109.dll
2010-10-29 10:01:16 223232 ----a-w- c:\windows\system32\hpmtp109.dll
2010-10-29 09:01:14 111104 ----a-w- c:\windows\system32\hpmco109.dll
2010-10-28 22:57:24 89600 ----a-w- c:\windows\system32\spool\prtprocs\w32x86\HPZPPLHN.DLL
2010-10-22 04:06:30 -------- d-----w- c:\users\eric.falley\appdata\roaming\AVG
2010-10-22 03:44:19 -------- d--h--w- c:\programdata\Common Files
2010-10-22 03:43:10 -------- d-----w- c:\windows\system32\drivers\AVG
2010-10-22 03:42:33 -------- d-----w- c:\program files\AVG
2010-10-22 03:35:53 -------- d-----w- c:\programdata\MFAData
2010-10-06 18:22:10 6812136 ----a-w- c:\programdata\microsoft\windows defender\definition updates\backup\mpengine.dll
2010-10-04 05:18:30 49252 ----a-w- c:\windows\system32\hpmnque.dll
2010-10-04 05:18:30 49250 ----a-w- c:\windows\system32\hpmnndps.dll
2010-09-22 07:33:52 -------- d-----w- C:\HTML
2010-09-12 01:51:39 -------- d-----w- c:\users\eric.falley\Tracing
2010-09-12 01:24:05 -------- d-----w- c:\program files\Microsoft SQL Server Compact Edition
2010-09-12 01:23:10 -------- d-----w- c:\program files\Microsoft
2010-09-12 01:13:44 -------- d-----w- c:\program files\common files\Windows Live
2010-09-09 05:22:28 737072 ----a-w- c:\programdata\microsoft\ehome\packages\sportsv2\sportstemplatecore\Microso ft.MediaCenter.Sports.UI.dll
2010-09-09 05:21:26 4277016 ----a-w- c:\programdata\microsoft\ehome\packages\mceclientux\updateablemarkup\markup .dll
2010-09-09 05:19:30 42776 ----a-w- c:\programdata\microsoft\ehome\packages\mceclientux\dsm\StartResources.dll
2010-09-09 05:19:26 588096 ----a-w- c:\programdata\microsoft\ehome\packages\mcespotlight\mcespotlight\Spotlight Resources.dll
2010-09-01 01:23:08 -------- d-----w- c:\users\eric.falley\appdata\local\ElevatedDiagnostics
2010-08-30 06:30:15 67969 ----a-w- c:\program files\microsoft games\age of chivalry\Uninstall Age of Chivalry.exe
2010-08-30 06:29:36 499712 ----a-w- c:\program files\microsoft games\age of chivalry\backup\language.dll
2010-08-30 06:29:36 339968 ----a-w- c:\program files\microsoft games\age of chivalry\backup\language_x1_p1.dll
2010-08-30 06:29:36 339968 ----a-w- c:\program files\microsoft games\age of chivalry\backup\language_x1.dll
2010-08-30 05:17:14 881664 ----a-w- c:\program files\microsoft games\age of empires ii -old\resource hacker\ResHacker.exe
2010-08-30 05:17:04 1779585 ----a-w- c:\program files\microsoft games\age of empires ii -old\genied\genied.exe
2010-08-30 05:17:04 1069056 ----a-w- c:\program files\microsoft games\age of empires ii -old\genied\Genied 3.0.exe
2010-08-30 05:17:03 1011712 ----a-w- c:\program files\microsoft games\age of empires ii -old\genied\Genied 2.0.exe
2010-08-26 13:54:05 53248 ----a-w- c:\windows\system32\CSVer.dll
2010-08-26 13:53:37 -------- d-----w- c:\program files\Boot Camp
2010-08-26 13:53:10 319456 ----a-w- c:\windows\DIFxAPI.dll
2010-08-26 13:46:51 -------- d-----w- c:\windows\system32\appmgmt
2010-08-26 03:54:07 679936 ----a-w- c:\windows\system32\D3DX81ab.dll
2010-08-26 03:54:07 1970176 ----a-w- c:\windows\system32\d3dx9.dll
2010-08-26 03:54:06 -------- d-----w- c:\program files\Cheat Engine
2010-08-25 06:02:51 -------- d-----w- c:\programdata\Sibelius Software
2010-08-25 06:01:45 -------- d-----w- c:\users\eric.falley\appdata\roaming\Sibelius Software
2010-08-25 05:46:33 61440 ----a-w- c:\windows\system32\NI_DFD_1_5.dll
2010-08-25 05:46:33 393216 ----a-w- c:\windows\system32\NI_IRC_1_2.dll
2010-08-25 05:46:33 -------- d-----w- c:\program files\Native Instruments
2010-08-25 05:44:37 -------- d-----w- c:\program files\Sibelius Software
2010-08-24 22:53:58 1622016 ------w- c:\program files\microsoft games\age of empires\EMPIRES.EXE
2010-08-24 22:53:57 1513984 ------w- c:\program files\microsoft games\age of empires\EMPIRESX.EXE
2010-08-24 22:53:55 319553 ------w- c:\program files\microsoft games\age of empires\Uninstal.Exe
2010-08-24 22:53:55 2744320 ------w- c:\program files\microsoft games\age of empires\SETUPENU.DLL
2010-08-24 22:53:49 174080 ------w- c:\program files\microsoft games\age of empires\language.dll
2010-08-24 22:53:49 160256 ------w- c:\program files\microsoft games\age of empires\languagex.dll
2010-08-24 22:53:31 29184 ------w- c:\program files\microsoft games\age of empires\data2\closedpw.exe
2010-08-24 22:53:07 29184 ------w- c:\program files\microsoft games\age of empires\data\closedpw.exe
2010-08-24 22:51:59 32768 ------w- c:\program files\microsoft games\age of empires\AoEHlp.dll
2010-08-24 22:51:58 32768 ------w- c:\program files\microsoft games\age of empires\aelaunch.dll
2010-08-24 22:51:54 -------- d-----w- c:\program files\Microsoft Games
2010-08-24 06:09:15 1779585 ----a-w- c:\program files\microsoft games\age of chivalry\genied\genied.exe
2010-08-24 06:09:15 1069056 ----a-w- c:\program files\microsoft games\age of chivalry\genied\Genied 3.0.exe
2010-08-24 06:09:13 1011712 ----a-w- c:\program files\microsoft games\age of chivalry\genied\Genied 2.0.exe
2010-08-24 06:09:12 881664 ----a-w- c:\program files\microsoft games\age of chivalry\resource hacker\ResHacker.exe
2010-08-24 03:31:06 -------- d-----w- c:\users\eric.falley\appdata\local\Google
2010-08-23 23:18:15 -------- d-----w- c:\users\eric.falley\appdata\local\Mozilla
2010-08-23 20:26:54 -------- d-----w- c:\users\eric.falley\appdata\local\Diagnostics
2010-08-23 18:27:24 -------- d-----w- c:\users\eric.falley\appdata\local\VirtualStore
2010-08-23 14:33:33 -------- d-----w- c:\program files\Bradford Networks
2010-08-19 19:33:17 -------- d-----w- c:\programdata\Sophos
2010-08-19 19:32:46 -------- d-----w- c:\program files\Sophos
2010-08-19 19:29:06 -------- d-----w- c:\windows\wlansvc
2010-08-19 19:24:37 18432 ----a-w- c:\windows\system32\drivers\AppleBtBc.sys
2010-08-19 19:24:14 215656 ----a-w- c:\windows\system32\NVCOSMU.DLL
2010-08-19 19:24:14 18944 ----a-w- c:\windows\system32\drivers\nvsmu.sys
2010-08-19 19:24:13 959776 ----a-w- c:\windows\system32\fdco2.dll
2010-08-19 19:24:13 521128 ----a-w- c:\windows\system32\DPInst.exe
2010-08-19 19:24:13 296936 ----a-w- c:\windows\system32\drivers\nvmf6232.sys
2010-08-19 19:24:13 219752 ----a-w- c:\windows\system32\nvconrm.dll
2010-08-19 19:22:30 29568 ----a-w- c:\windows\system32\drivers\applemtp.sys
2010-08-19 19:22:30 10496 ----a-w- c:\windows\system32\drivers\applemtm.sys
2010-08-19 19:22:15 65824 ----a-w- c:\windows\system32\CirrusAPO_x86.dll
2010-08-19 19:22:15 13824 ----a-w- c:\windows\system32\drivers\CS420x86.sys
2010-08-19 19:22:15 -------- d-----w- c:\program files\Motorola
2010-08-19 19:22:00 836896 ----a-w- c:\windows\RtlExUpd.dll
2010-08-19 19:22:00 -------- d--h--w- c:\program files\Temp
2010-08-19 19:22:00 -------- d-----w- c:\program files\Realtek
2010-08-19 19:21:59 757760 ----a-w- c:\program files\common files\installshield\professional\runtime\11\50\intel32\iKernel.dll
2010-08-19 19:21:59 69715 ----a-w- c:\program files\common files\installshield\professional\runtime\11\50\intel32\ctor.dll
2010-08-19 19:21:59 5632 ----a-w- c:\program files\common files\installshield\professional\runtime\11\50\intel32\DotNetInstaller.exe
2010-08-19 19:21:59 32768 ----a-w- c:\program files\common files\installshield\professional\runtime\Objectps.dll
2010-08-19 19:21:59 274432 ----a-w- c:\program files\common files\installshield\professional\runtime\11\50\intel32\iscript.dll
2010-08-19 19:21:59 204800 ----a-w- c:\program files\common files\installshield\professional\runtime\11\50\intel32\iuser.dll
2010-08-19 19:21:58 331908 ----a-w- c:\program files\common files\installshield\professional\runtime\11\50\intel32\setup.dll
2010-08-19 19:21:58 200836 ----a-w- c:\program files\common files\installshield\professional\runtime\11\50\intel32\iGdi.dll
2010-08-19 19:21:18 -------- d-----w- c:\program files\IDT
2010-08-19 19:20:57 -------- d-----w- C:\Intel
2010-08-19 19:20:24 91376 ----a-w- c:\windows\system32\bcmwlcoi.dll
2010-08-19 19:20:24 3867936 ----a-w- c:\windows\system32\bcmihvsrv.dll
2010-08-19 19:20:24 3556640 ----a-w- c:\windows\system32\bcmihvui.dll
2010-08-19 19:20:24 2661368 ----a-w- c:\windows\system32\drivers\BCMWL6.SYS
2010-08-19 19:19:49 24064 ----a-w- c:\windows\system32\drivers\KeyMagic.sys
2010-08-19 19:19:49 1419232 ----a-w- c:\windows\system32\WdfCoInstaller01005.dll
2010-08-19 19:19:01 -------- d-----w- c:\program files\NVIDIA Corporation
2010-08-16 09:03:37 -------- d-----w- c:\windows\Panther
2010-08-16 09:03:23 -------- d-sh--w- C:\Boot
2010-08-16 06:09:36 -------- d-sh--w- C:\Recovery
2010-08-16 03:22:02 304289 ----a-w- c:\windows\system32\FirstLogon.exe
2010-08-16 03:21:52 88168 ----a-w- c:\windows\system32\nvinit.dll
2010-08-16 03:21:52 316008 ----a-w- c:\windows\system32\nvdecodemft.dll
2010-08-16 03:21:52 223848 ----a-w- c:\windows\system32\nvumdshim.dll
2010-08-16 03:21:51 56424 ----a-w- c:\windows\system32\OpenCL.dll
2010-08-16 03:21:51 227944 ----a-w- c:\windows\system32\nvcod1913.dll
2010-08-16 03:21:51 227944 ----a-w- c:\windows\system32\nvcod.dll
2010-08-16 03:21:30 -------- d-----w- C:\Boot Camp
2010-08-16 01:41:30 293376 ----a-w- c:\windows\system32\browserchoice.exe
2010-08-16 01:27:05 237072 ------w- c:\windows\system32\MpSigStub.exe
2010-08-16 01:25:56 -------- d--h--w- c:\windows\msdownld.tmp
2010-08-16 01:22:04 33104 ----a-w- c:\windows\system32\spool\prtprocs\w32x86\msonpppr.dll
2010-08-16 01:22:04 31640 ----a-w- c:\windows\system32\msonpmon.dll
2010-08-16 01:21:13 -------- d-----w- c:\windows\PCHEALTH
2010-08-16 01:19:01 729161 ----a-w- c:\windows\system32\fpimage.dll
2010-08-16 01:19:01 1410704 ----a-w- c:\windows\system32\FPSPR70.ocx
2010-08-16 01:19:01 -------- d-----w- c:\program files\Respondus LockDown Browser
2010-08-16 01:18:44 423656 ----a-w- c:\windows\system32\deployJava1.dll
2010-08-16 01:13:51 -------- d-----w- c:\windows\system32\wbem\Performance
2010-08-16 01:13:44 26600 ----a-w- c:\windows\system32\drivers\GEARAspiWDM.sys
2010-08-16 01:13:44 107368 ----a-w- c:\windows\system32\GEARAspi.dll
2010-08-16 01:13:31 -------- d-----w- c:\programdata\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
2010-08-16 01:11:25 -------- d-sh--w- c:\windows\Installer
2010-07-11 20:47:40 453456 ----a-w- c:\windows\system32\d3dx10_41.dll
2010-07-11 20:47:40 1846632 ----a-w- c:\windows\system32\D3DCompiler_41.dll
2010-06-29 13:24:00 2182536 ----a-w- c:\program files\common files\system\msmapi\MSNCON32.DLL
2010-05-06 20:19:02 162816 ----a-w- c:\windows\system32\hplbddrv.dll
2010-04-01 09:57:44 95994 ----a-w- c:\windows\system32\nvcoproc.bin
2010-04-01 09:57:00 82024 ----a-w- c:\windows\system32\nv3dappshextr.dll
2010-04-01 09:57:00 645480 ----a-w- c:\windows\system32\nvvsvc.exe
2010-04-01 09:57:00 62312 ----a-w- c:\windows\system32\nvshext.dll
2010-04-01 09:57:00 3984744 ----a-w- c:\windows\system32\nvcpl.dll
2010-04-01 09:57:00 2869608 ----a-w- c:\windows\system32\nvsvc.dll
2010-04-01 09:57:00 2557288 ----a-w- c:\windows\system32\nvsvcr.dll
2010-04-01 09:57:00 149608 ----a-w- c:\windows\system32\nv3dappshext.dll
2010-04-01 09:57:00 108392 ----a-w- c:\windows\system32\nvmctray.dll
2010-03-23 02:29:54 19336 ----a-w- c:\program files\common files\system\msmapi\1033\MSNCON32.DLL
2010-03-23 02:29:54 155496 ----a-w- c:\program files\common files\system\msmapi\1033\MSNCONR.DLL
2010-03-19 20:02:22 143224 ----a-w- c:\program files\msbuild\microsoft.cpp\v4.0\platforms\win32\Microsoft.Build.CPPTasks.W in32.dll
2010-03-19 20:02:22 140160 ----a-w- c:\program files\msbuild\microsoft.cpp\v4.0\platforms\itanium\Microsoft.Build.CPPTasks .Itanium.dll
2010-03-19 15:55:26 154496 ----a-w- c:\program files\msbuild\microsoft.cpp\v4.0\Microsoft.Build.CPPTasks.Common.dll
2010-03-19 15:55:26 142712 ----a-w- c:\program files\msbuild\microsoft.cpp\v4.0\platforms\x64\Microsoft.Build.CPPTasks.x64 .dll
2010-03-19 05:21:56 799568 ----a-w- c:\program files\common files\microsoft shared\vc\msdia100.dll
2010-03-18 21:47:22 17760 ----a-w- c:\windows\system32\aspnet_counters.dll
2010-03-18 18:16:28 771424 ----a-w- c:\windows\system32\msvcr100_clr0400.dll
2010-03-18 15:15:26 743248 ----a-w- c:\windows\system32\msvcp100d.dll
2010-03-18 15:15:26 1498960 ----a-w- c:\windows\system32\msvcr100d.dll
2010-02-08 13:33:04 359320 ----a-w- c:\windows\system32\vfprintpthelper.dll
2010-02-08 13:33:02 337304 ----a-w- c:\windows\system32\vfbasics.dll
2010-02-08 13:33:02 30616 ----a-w- c:\windows\system32\vfntlmless.dll
2010-02-08 13:33:02 288664 ----a-w- c:\windows\system32\vfprint.dll
2010-02-08 13:33:02 230296 ----a-w- c:\windows\system32\vfLuaPriv.dll
2010-02-08 13:33:02 165272 ----a-w- c:\windows\system32\appverif.exe
2010-02-08 13:33:02 161176 ----a-w- c:\windows\system32\vfcompat.dll
2010-02-08 13:33:02 138768 ----a-w- c:\windows\system32\vrfcore.dll
2010-01-19 20:10:44 63488 ----a-w- c:\windows\system32\HPBWSDR.DLL
2009-09-30 18:01:58 20040 ----a-w- c:\programdata\microsoft\identitycrl\production\ppcrlconfig.dll
2009-09-30 17:40:02 1141640 ----a-w- c:\program files\common files\system\msmapi\msidcrl40.dll
2009-07-21 06:05:40 1348432 ----a-w- c:\windows\system32\msxml4.dll
2009-07-14 07:20:38 -------- d-----w- c:\program files\Windows Journal
2009-07-14 07:20:31 -------- d-----w- c:\windows\ShellNew
2009-07-14 07:20:31 -------- d-----w- c:\windows\ehome
2009-07-14 07:20:30 -------- d-sh--w- c:\windows\BitLockerDiscoveryVolumeContents
2009-07-14 07:20:30 -------- d-----w- c:\windows\RemotePackages
2009-07-14 07:19:51 47616 ----a-w- c:\windows\system32\vmictimeprovider.dll
2009-07-14 04:56:48 -------- d-----w- c:\windows\system32\winrm
2009-07-14 04:56:48 -------- d-----w- c:\windows\system32\WCN
2009-07-14 04:56:48 -------- d-----w- c:\windows\system32\slmgr
2009-07-14 04:56:48 -------- d-----w- c:\windows\system32\en
2009-07-14 04:56:48 -------- d-----w- c:\windows\system32\drivers\umdf\en-US
2009-07-14 04:56:48 -------- d-----w- c:\windows\system32\drivers\en-US
2009-07-14 04:56:48 -------- d-----w- c:\windows\system32\0409
2009-07-14 04:56:48 -------- d-----w- c:\windows\en-US
2009-07-14 04:56:48 -------- d-----w- c:\windows\DigitalLocker
2009-07-14 04:56:47 -------- d-----w- c:\windows\system32\wbem\en-US
2009-07-14 04:56:47 -------- d-----w- c:\windows\system32\Printing_Admin_Scripts
2009-07-14 04:55:08 3584 ----a-w- c:\windows\system32\spool\prtprocs\w32x86\en-us\LXKPTPRC.DLL.mui
2009-07-14 04:53:55 -------- d-sh--we C:\Documents and Settings
2009-07-14 04:53:50 -------- d-----w- c:\windows\system32\wbem\mof\good
2009-07-14 04:53:50 -------- d-----w- c:\windows\system32\wbem\mof\bad
2009-07-14 04:41:11 -------- d-----w- c:\windows\system32\wbem\MOF
2009-07-14 04:34:16 -------- d-----w- c:\windows\Setup
2009-07-14 04:34:13 -------- d-----w- c:\windows\ServiceProfiles
2009-07-14 04:34:06 -------- d-s---w- c:\windows\system32\Microsoft
.
==================== Find3M ====================
.
2012-12-03 15:39:40 9373032 ----a-w- c:\windows\system32\drivers\nvlddmkm.sys
2012-12-03 15:39:40 889192 ----a-w- c:\windows\system32\nvdispgenco32.dll
2012-12-03 15:39:40 7819016 ----a-w- c:\windows\system32\nvcuda.dll
2012-12-03 15:39:40 6149904 ----a-w- c:\windows\system32\nvopencl.dll
2012-12-03 15:39:40 2606440 ----a-w- c:\windows\system32\nvcuvid.dll
2012-12-03 15:39:40 2496976 ----a-w- c:\windows\system32\nvapi.dll
2012-12-03 15:39:40 20335976 ----a-w- c:\windows\system32\nvoglv32.dll
2012-12-03 15:39:40 1874280 ----a-w- c:\windows\system32\nvcuvenc.dll
2012-12-03 15:39:40 17559912 ----a-w- c:\windows\system32\nvcompiler.dll
2012-12-03 15:39:40 15122280 ----a-w- c:\windows\system32\nvd3dum.dll
2012-12-03 15:39:40 12603960 ----a-w- c:\windows\system32\nvwgf2um.dll
2012-12-03 15:39:40 1011048 ----a-w- c:\windows\system32\nvdispco32.dll
2012-11-14 02:09:22 1800704 ----a-w- c:\windows\system32\jscript9.dll
2012-11-14 01:58:15 1427968 ----a-w- c:\windows\system32\inetcpl.cpl
2012-11-14 01:57:37 1129472 ----a-w- c:\windows\system32\wininet.dll
2012-11-14 01:49:25 142848 ----a-w- c:\windows\system32\ieUnatt.exe
2012-11-14 01:48:27 420864 ----a-w- c:\windows\system32\vbscript.dll
2012-11-14 01:44:42 2382848 ----a-w- c:\windows\system32\mshtml.tlb
2012-11-02 05:11:31 376832 ----a-w- c:\windows\system32\dpnet.dll
2012-10-16 07:39:52 561664 ----a-w- c:\windows\apppatch\AcLayers.dll
2012-10-04 16:47:18 169984 ----a-w- c:\windows\system32\winsrv.dll
2012-10-04 16:43:05 293376 ----a-w- c:\windows\system32\KernelBase.dll
2012-10-04 14:57:58 271360 ----a-w- c:\windows\system32\conhost.exe
2012-10-04 14:41:50 6144 ---ha-w- c:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2012-10-04 14:41:50 4608 ---ha-w- c:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2012-10-04 14:41:50 3584 ---ha-w- c:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2012-10-04 14:41:50 3072 ---ha-w- c:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2012-08-23 15:52:09 3072 ----a-w- c:\windows\system32\drivers\en-us\tsusbflt.sys.mui
2012-08-23 14:48:14 221184 ----a-w- c:\windows\system32\rdpudd.dll
2012-08-23 14:44:32 14848 ----a-w- c:\windows\system32\drivers\rdpvideominiport.sys
2012-08-23 14:40:25 49664 ----a-w- c:\windows\system32\drivers\TsUsbFlt.sys
2012-08-23 14:10:40 12288 ----a-w- c:\windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2012-08-23 14:10:04 13312 ----a-w- c:\windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2012-08-23 13:52:25 12800 ----a-w- c:\windows\system32\RdpGroupPolicyExtension.dll
2012-08-23 13:47:20 46592 ----a-w- c:\windows\system32\MsRdpWebAccess.dll
2012-08-23 13:46:20 16896 ----a-w- c:\windows\system32\wksprtPS.dll
2012-08-23 13:32:59 32768 ----a-w- c:\windows\system32\TsUsbGDCoInstaller.dll
2012-08-23 13:18:14 37376 ----a-w- c:\windows\system32\tsgqec.dll
2012-08-23 11:40:43 56320 ----a-w- c:\windows\system32\TSWbPrxy.exe
2012-08-23 11:32:48 317440 ----a-w- c:\windows\system32\wksprt.exe
2012-08-23 11:15:57 269312 ----a-w- c:\windows\system32\aaclient.dll
2012-08-23 11:12:17 192000 ----a-w- c:\windows\system32\rdpendp_winip.dll
2012-08-23 10:39:24 1048064 ----a-w- c:\windows\system32\mstsc.exe
2012-08-23 10:08:49 2739712 ----a-w- c:\windows\system32\rdpcorets.dll
2012-08-23 08:19:01 4916224 ----a-w- c:\windows\system32\mstscax.dll
2012-08-21 14:59:16 2048 ----a-w- c:\windows\system32\wbem\WmiApRes.dll
2012-08-21 14:59:15 1536 ----a-w- c:\windows\system32\winrsmgr.dll
2012-08-21 14:58:22 328704 ----a-w- c:\windows\system32\wbem\WmiPrvSE.exe
2012-08-21 14:58:00 123904 ----a-w- c:\windows\system32\wbem\WMIADAP.exe
2012-08-21 14:57:41 31744 ----a-w- c:\windows\system32\wbem\WinMgmtR.dll
2012-08-21 14:56:55 60416 ----a-w- c:\windows\system32\WsmRes.dll
2012-08-21 14:29:39 9728 ----a-w- c:\windows\system32\winrssrv.dll
2012-08-21 14:28:12 10240 ----a-w- c:\windows\system32\wsmplpxy.dll
2012-08-21 14:20:26 46080 ----a-w- c:\windows\system32\ncobjapi.dll
2012-08-21 14:18:42 89088 ----a-w- c:\windows\system32\mi.dll
2012-08-21 14:14:57 61440 ----a-w- c:\windows\system32\wecapi.dll
2012-08-21 14:10:57 283136 ----a-w- c:\windows\system32\wbem\esscli.dll
2012-08-21 14:08:59 83456 ----a-w- c:\windows\system32\wevtfwd.dll
2012-08-21 14:06:13 49664 ----a-w- c:\windows\system32\wbem\wbemsvc.dll
2012-08-21 14:01:18 12800 ----a-w- c:\windows\system32\Register-CimProvider.exe
2012-08-21 13:56:35 78336 ----a-w- c:\windows\system32\wecutil.exe
2012-08-21 13:54:17 155648 ----a-w- c:\windows\system32\wecsvc.dll
2012-08-21 13:46:44 72192 ----a-w- c:\windows\system32\wbem\WMICOOKR.dll
2012-08-21 13:44:32 59904 ----a-w- c:\windows\system32\prvdmofcomp.dll
2012-08-21 13:44:27 63488 ----a-w- c:\windows\system32\wbem\xml\wmi2xml.dll
2012-08-21 13:44:01 36864 ----a-w- c:\windows\system32\wbem\unsecapp.exe
2012-08-21 13:43:59 61440 ----a-w- c:\windows\system32\wbem\mofinstall.dll
2012-08-21 13:43:33 287232 ----a-w- c:\windows\system32\wbem\repdrvfs.dll
2012-08-21 13:43:27 154112 ----a-w- c:\windows\system32\wmitomi.dll
2012-08-21 13:42:18 43520 ----a-w- c:\windows\system32\wbem\wmitimep.dll
2012-08-21 13:41:23 18944 ----a-w- c:\windows\system32\wbem\mofcomp.exe
2012-08-21 13:39:15 93184 ----a-w- c:\windows\system32\wbem\WmiApRpl.dll
2012-08-21 13:38:03 129536 ----a-w- c:\windows\system32\wbem\WmiDcPrv.dll
2012-08-21 13:37:44 636928 ----a-w- c:\windows\system32\wbem\fastprox.dll
2012-08-21 13:37:13 195072 ----a-w- c:\windows\system32\wbem\mofd.dll
2012-08-21 13:37:13 180224 ----a-w- c:\windows\system32\wbem\wbemtest.exe
2012-08-21 13:36:10 139776 ----a-w- c:\windows\system32\wbem\WmiApSrv.exe
2012-08-21 13:36:08 124416 ----a-w- c:\windows\system32\wmidcom.dll
2012-08-21 13:35:39 163840 ----a-w- c:\windows\system32\wbem\WMIsvc.dll
2012-08-21 13:34:35 91136 ----a-w- c:\windows\system32\wbem\wmiutils.dll
2012-08-21 13:34:24 351744 ----a-w- c:\windows\system32\wbem\wbemess.dll
2012-08-21 13:34:05 382464 ----a-w- c:\windows\system32\wbemcomn2.dll
2012-08-21 13:33:55 105472 ----a-w- c:\windows\system32\wbem\stdprov.dll
2012-08-21 13:33:23 172544 ----a-w- c:\windows\system32\miutils.dll
2012-08-21 13:33:22 29184 ----a-w- c:\windows\system32\wbem\wbemprox.dll
2012-08-21 13:32:57 21504 ----a-w- c:\windows\system32\WsmAgent.dll
2012-08-21 13:32:44 909824 ----a-w- c:\windows\system32\wbem\wbemcore.dll
2012-08-21 13:32:33 57344 ----a-w- c:\windows\system32\wbem\wbemcons.dll
2012-08-21 13:31:21 529408 ----a-w- c:\windows\system32\wbem\WmiPrvSD.dll
2012-08-21 13:29:41 192512 ----a-w- c:\windows\system32\framedynos.dll
2012-08-21 13:27:19 189952 ----a-w- c:\windows\system32\framedyn.dll
2012-08-21 13:13:15 20480 ----a-w- c:\windows\system32\winrshost.exe
2012-08-21 13:04:35 39936 ----a-w- c:\windows\system32\winrs.exe
2012-08-21 13:03:34 35840 ----a-w- c:\windows\system32\wsmprovhost.exe
2012-08-21 13:02:45 138752 ----a-w- c:\windows\system32\WsmAuto.dll
2012-08-21 13:02:39 92160 ----a-w- c:\windows\system32\winrscmd.dll
2012-08-21 13:02:26 227328 ----a-w- c:\windows\system32\WsmWmiPl.dll
2012-08-21 12:56:02 526848 ----a-w- c:\windows\system32\WsmGCDeps.dll
2012-08-21 12:52:14 2039296 ----a-w- c:\windows\system32\WsmSvc.dll
2012-08-21 12:50:19 36352 ----a-w- c:\windows\system32\PSModuleDiscoveryProvider.dll
.
============= FINISH: 6:29:31.82 ===============
Attach.txt
.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2012-11-20.01)
.
Microsoft Windows 7 Enterprise
Boot Device: \Device\HarddiskVolume3
Install Date: 8/19/2010 1:17:34 PM
System Uptime: 1/1/2001 6:01:48 AM (0 hours ago)
.
Motherboard: Apple Inc. | | Mac-F22C8AC8
Processor: Intel(R) Core(TM)2 Duo CPU P7550 @ 2.26GHz | U2E1 | 2255/266mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 116 GiB total, 24.593 GiB free.
D: is CDROM ()
.
==== Disabled Device Manager Items =============
.
Class GUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Description: SBRE
Device ID: ROOT\LEGACY_SBRE\0000
Manufacturer:
Name: SBRE
PNP Device ID: ROOT\LEGACY_SBRE\0000
Service: SBRE
.
==== System Restore Points ===================
.
No restore point in system.
.
==== Installed Programs ======================
.
Update for Microsoft Office 2007 (KB2508958)
32 Bit HP CIO Components Installer
7-Zip 9.20
Adobe AIR
Adobe Flash Player 11 Plugin
Adobe Reader X (10.1.4)
Age of Chivalry: Hegemony 1.75
Age of Empires III
Amazon Kindle
Amazon MP3 Downloader 1.0.14
AOK Mod Pack Studio
Apple Application Support
Apple Mobile Device Support
Apple Software Update
Application Verifier
Audacity 1.3.12 (Unicode)
AVG PC Tuneup 2011
Avid License Control
Bonjour
Boot Camp Services
Bradford Persistent Agent
Cheat Engine 5.6.1
Cheat Engine 6.1
Chessmaster Grandmaster Edition
ClassicsOnline
D3DX10
Debugging Tools for Windows (x86)
DriverAgent by eSupport.com
Dropbox
DRS Explorer v1.1.98
FileZilla Client 3.5.3
GameRanger
GIMP 2.6.11
GoldWave v5.58
Google Chrome
Google Earth
Google Talk Plugin
Google Update Helper
Heroes of Newerth
iCloud
Indeo Compressor
Indeo® Software
iTunes
Java Auto Updater
Java(TM) 6 Update 21
Junk Mail filter update
LAME v3.99.3 (for Windows)
Microsoft .NET Framework 4 Client Profile
Microsoft .NET Framework 4 Extended
Microsoft .NET Framework 4 Multi-Targeting Pack
Microsoft Age of Empires Gold
Microsoft Age of Empires II
Microsoft Age of Empires II Trial Version
Microsoft Age of Empires II: The Conquerors Expansion
Microsoft Age of Empires II: The Conquerors Expansion Trial
Microsoft Application Error Reporting
Microsoft Help Viewer 1.0
Microsoft Office 2007 Service Pack 3 (SP3)
Microsoft Office Access MUI (English) 2007
Microsoft Office Access Setup Metadata MUI (English) 2007
Microsoft Office Enterprise 2007
Microsoft Office Excel MUI (English) 2007
Microsoft Office File Validation Add-In
Microsoft Office Groove MUI (English) 2007
Microsoft Office Groove Setup Metadata MUI (English) 2007
Microsoft Office InfoPath MUI (English) 2007
Microsoft Office Live Add-in 1.3
Microsoft Office OneNote MUI (English) 2007
Microsoft Office Outlook Connector
Microsoft Office Outlook MUI (English) 2007
Microsoft Office PowerPoint MUI (English) 2007
Microsoft Office Proof (English) 2007
Microsoft Office Proof (French) 2007
Microsoft Office Proof (Spanish) 2007
Microsoft Office Proofing (English) 2007
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
Microsoft Office Publisher MUI (English) 2007
Microsoft Office Shared MUI (English) 2007
Microsoft Office Shared Setup Metadata MUI (English) 2007
Microsoft Office Word MUI (English) 2007
Microsoft Silverlight
Microsoft SQL Server 2005 Compact Edition [ENU]
Microsoft Virtual PC 2007
Microsoft Visual C++ Compilers 2010 Standard - enu - x86
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319
Microsoft Windows Performance Toolkit
Microsoft Windows SDK .NET Framework Tools (30514)
Microsoft Windows SDK for Visual Studio .NET 4.0 Framework Tools
Microsoft Windows SDK for Windows 7 (7.1)
Microsoft Windows SDK for Windows 7 Common Utilities (30514)
Microsoft Windows SDK for Windows 7 Headers and Libraries (30514)
Microsoft Windows SDK for Windows 7 Samples (30514)
Microsoft Windows SDK for Windows 7 Utilities for Win32 Development (30514)
Microsoft Windows SDK Intellisense and Reference Assemblies (30514)
Microsoft Windows SDK MSHelp (30514)
Microsoft Windows SDK Net Fx Interop Headers And Libraries (30514)
Mozilla Firefox 17.0.1 (x86 en-US)
Mozilla Maintenance Service
MSVCRT
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
Norton Internet Security
Notepad++
NUnit 2.5.2
NVIDIA Control Panel 310.70
NVIDIA Display Control Panel
NVIDIA Graphics Driver 310.70
NVIDIA Install Application
NVIDIA Stereoscopic 3D Driver
Opera 12.02
QuickTime
Realtek High Definition Audio Driver
Respondus LockDown Browser
Safari
Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2729449)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2737019)
Security Update for Microsoft .NET Framework 4 Extended (KB2416472)
Security Update for Microsoft .NET Framework 4 Extended (KB2487367)
Security Update for Microsoft .NET Framework 4 Extended (KB2656351)
Security Update for Microsoft Office 2007 suites (KB2596615) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596672) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596744) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596754) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596785) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596792) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596856) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596871) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2597969) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2687311) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2687439) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2687441) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2760416) 32-Bit Edition
Security Update for Microsoft Office Excel 2007 (KB2687307) 32-Bit Edition
Security Update for Microsoft Office InfoPath 2007 (KB2687440) 32-Bit Edition
Security Update for Microsoft Office PowerPoint 2007 (KB2596764) 32-Bit Edition
Security Update for Microsoft Office PowerPoint 2007 (KB2596912) 32-Bit Edition
Security Update for Microsoft Office Publisher 2007 (KB2596705) 32-Bit Edition
Security Update for Microsoft Office Word 2007 (KB2760421) 32-Bit Edition
SharpDevelop 4.1
Sibelius 5
Sibelius 7 OpenType Fonts
Sibelius 7.1.0.54
Sibelius Scorch (all browsers)
Sibelius Scorch (Firefox, Opera, Netscape only)
Sibelius Sounds Choral
Sibelius Sounds Essentials
Skype 5.10
SmartFTP Client
SmartFTP Client 4.0 Setup Files (remove only)
Sophos Anti-Virus
Sophos AutoUpdate
Sophos Remote Management System
Steam
SUPER © v2011.build.49 (July 1st, 2011) version v2011.build.49
Team Fortress 2
TreeSize Free V2.7
Update for 2007 Microsoft Office System (KB967642)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217)
Update for Microsoft .NET Framework 4 Extended (KB2468871)
Update for Microsoft .NET Framework 4 Extended (KB2533523)
Update for Microsoft .NET Framework 4 Extended (KB2600217)
Update for Microsoft Office 2007 Help for Common Features (KB963673)
Update for Microsoft Office 2007 suites (KB2596660) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2596848) 32-Bit Edition
Update for Microsoft Office Access 2007 Help (KB963663)
Update for Microsoft Office Excel 2007 Help (KB963678)
Update for Microsoft Office Infopath 2007 Help (KB963662)
Update for Microsoft Office OneNote 2007 Help (KB963670)
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition
Update for Microsoft Office Outlook 2007 Help (KB963677)
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2760573) 32-Bit Edition
Update for Microsoft Office Powerpoint 2007 Help (KB963669)
Update for Microsoft Office Publisher 2007 Help (KB963667)
Update for Microsoft Office Script Editor Help (KB963671)
Update for Microsoft Office Word 2007 Help (KB963665)
Version 3.1
Voobly
WhoCrashed 3.05
Windows Driver Package - Apple Inc. (applebt) Bluetooth (09/15/2008 2.1.2.0)
Windows Driver Package - Apple Inc. (AppleUSBEthernet) Net (01/11/2008 3.4.3.18)
Windows Driver Package - Apple Inc. Apple Bluetooth Enabler (06/27/2007 2.0.0.1)
Windows Driver Package - Apple Inc. Apple Broadcom Bluetooth (03/01/2010 3.1.0.3)
Windows Driver Package - Apple Inc. Apple Built-in iSight (10/25/2007 2.0.1.0)
Windows Driver Package - Apple Inc. Apple Display (01/23/2009 3.0.0.0)
Windows Driver Package - Apple Inc. Apple Display (12/19/2007 2.0.2.0)
Windows Driver Package - Apple Inc. Apple IR Receiver (02/21/2008 2.0.4.0)
Windows Driver Package - Apple Inc. Apple Keyboard (03/24/2010 3.1.0.3)
Windows Driver Package - Apple Inc. Apple Keyboard (09/15/2008 2.1.2.0)
Windows Driver Package - Apple Inc. Apple Multitouch (02/11/2010 3.1.0.0)
Windows Driver Package - Apple Inc. Apple Multitouch (12/04/2008 2.1.2.100)
Windows Driver Package - Apple Inc. Apple Multitouch Mouse (02/11/2010 3.1.0.0)
Windows Driver Package - Apple Inc. Apple Multitouch Mouse (12/04/2008 2.1.2.100)
Windows Driver Package - Apple Inc. Apple ODD (01/17/2008 2.0.2.2)
Windows Driver Package - Apple Inc. Apple Trackpad (07/13/2009 3.0.0.1)
Windows Driver Package - Apple Inc. Apple Trackpad (10/09/2007 2.0.1.5)
Windows Driver Package - Apple Inc. Apple Trackpad Enabler (07/13/2009 3.0.0.1)
Windows Driver Package - Apple Inc. Apple Trackpad Enabler (10/09/2007 2.0.1.5)
Windows Driver Package - Apple Inc. Apple Wireless Mouse (11/30/2009 3.0.0.6)
Windows Driver Package - Apple Inc. Bluetooth (03/01/2010 3.0.0.5)
Windows Driver Package - Apple Inc. System (08/22/2008 2.1.1.1)
Windows Driver Package - Atheros Communications Inc. (athr) Net (09/18/2008 7.6.1.122)
Windows Driver Package - Atheros Communications Inc. (athr) Net (11/18/2009 8.0.0.258)
Windows Driver Package - Atheros Communications Inc. Net (09/18/2008 7.6.1.122)
Windows Driver Package - Broadcom (b57nd60x) Net (05/28/2009 12.2.0.3)
Windows Driver Package - Broadcom (BCM43XX) Net (08/21/2009 5.60.18.8)
Windows Driver Package - Cirrus Logic, Inc. (CirrusFilter) MEDIA (03/12/2010 6.6001.1.23)
Windows Driver Package - Cirrus Logic, Inc. (CirrusFilter) MEDIA (03/24/2010 6.6001.1.24)
Windows Driver Package - Intel (e1express) Net (02/06/2008 9.12.17.0)
Windows Driver Package - Intel (E1G60) Net (01/08/2008 8.3.9.0)
Windows Driver Package - Intel (e1kexpress) Net (07/22/2008 10.3.45.0)
Windows Driver Package - Intel (e1qexpress) Net (08/05/2008 10.3.49.0)
Windows Driver Package - Intel (e1yexpress) Net (07/16/2008 9.52.10.0)
Windows Driver Package - Intel Net (02/06/2008 9.12.18.0)
Windows Driver Package - Intel Net (06/13/2008 9.52.9.0)
Windows Driver Package - Intel Net (07/22/2008 10.3.45.0)
Windows Driver Package - Intel Net (08/05/2008 10.3.49.0)
Windows Driver Package - Intel Net (11/07/2007 8.10.1.0)
Windows Driver Package - Intel System (07/20/2007 1.2.76.0)
Windows Driver Package - Marvell (yukonwlh) Net (03/23/2007 10.12.7.3)
Windows Live Communications Platform
Windows Live Essentials
Windows Live ID Sign-in Assistant
Windows Live Installer
Windows Live Mail
Windows Live Messenger
Windows Live MIME IFilter
Windows Live Movie Maker
Windows Live Photo Common
Windows Live Photo Gallery
Windows Live PIMT Platform
Windows Live SOXE
Windows Live SOXE Definitions
Windows Live Sync
Windows Live UX Platform
Windows Live UX Platform Language Pack
Windows Live Writer
Windows Live Writer Resources
Windows SDK IntellisenseNFX
WinRAR archiver
WinZip 15.0
.
==== Event Viewer Messages From Past Week ========
.
1/1/2001 6:26:45 AM, Error: Service Control Manager [7001] - The Computer Browser service depends on the Server service which failed to start because of the following error: The dependency service or group failed to start.
1/1/2001 6:03:10 AM, Error: Service Control Manager [7001] - The HomeGroup Provider service depends on the Function Discovery Provider Host service which failed to start because of the following error: The dependency service or group failed to start.
1/1/2001 6:03:10 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server: {9E175B6D-F52A-11D8-B9A5-505054503030}
1/1/2001 6:03:09 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server: {7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}
1/1/2001 6:03:02 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service EventSystem with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}
1/1/2001 6:02:59 AM, Error: Microsoft-Windows-WLAN-AutoConfig [10000] - WLAN Extensibility Module has failed to start. Module Path: C:\Windows\System32\bcmihvsrv.dll Error Code: 21
1/1/2001 6:02:52 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service ShellHWDetection with arguments "" in order to run the server: {DD522ACC-F821-461A-A407-50B198B896DC}
1/1/2001 6:02:41 AM, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: BHDrvx86 ccSet_NIS discache eeCtrl IDSVix86 SAVOnAccess SBRE SKMScan spldr SRTSPX SymIRON SymNetS vmm Wanarpv6
1/1/2001 6:02:40 AM, Error: NETLOGON [5719] - This computer was not able to set up a secure session with a domain controller in domain OC due to the following: There are currently no logon servers available to service the logon request. This may lead to authentication problems. Make sure that this computer is connected to the network. If the problem persists, please contact your domain administrator. ADDITIONAL INFO If this computer is a domain controller for the specified domain, it sets up the secure session to the primary domain controller emulator in the specified domain. Otherwise, this computer sets up the secure session to any domain controller in the specified domain.
.
==== End Of File ===========================
ark.txt
GMER 1.0.15.15641 - http://www.gmer.net
Rootkit scan 2001-01-01 07:44:55
Windows 6.1.7601 Service Pack 1 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 Hitachi_HTS545025B9SA02 rev.PB2AC60W
Running: efg1pgph.exe; Driver: C:\Users\ERIC~1.FAL\AppData\Local\Temp\axliafow.sys
---- Kernel code sections - GMER 1.0.15 ----
.text ntkrnlpa.exe!ZwRollbackEnlistment + 140D 8227AA49 1 Byte [06]
.text ntkrnlpa.exe!KiDispatchInterrupt + 5A2 822B44D2 19 Bytes [E0, 0F, BA, F0, 07, 73, 09, ...] {LOOPNZ 0x11; MOV EDX, 0x97307f0; MOV CR4, EAX; OR AL, 0x80; MOV CR4, EAX; RET ; MOV ECX, CR3}
---- User code sections - GMER 1.0.15 ----
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ntdll.dll!NtCreateFile + 6 771555CE 4 Bytes [28, 00, 07, 00]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ntdll.dll!NtCreateFile + B 771555D3 1 Byte [E2]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ntdll.dll!NtCreateKey + 6 7715560E 4 Bytes [68, 01, 07, 00]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ntdll.dll!NtCreateKey + B 77155613 1 Byte [E2]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ntdll.dll!NtCreateMutant + 6 7715564E 4 Bytes [68, 02, 07, 00]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ntdll.dll!NtCreateMutant + B 77155653 1 Byte [E2]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ntdll.dll!NtCreateSection + 6 771556EE 4 Bytes [A8, 02, 07, 00]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ntdll.dll!NtCreateSection + B 771556F3 1 Byte [E2]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ntdll.dll!NtMapViewOfSection + B 77155C33 1 Byte [E2]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ntdll.dll!NtOpenFile + 6 77155CDE 4 Bytes [68, 00, 07, 00]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ntdll.dll!NtOpenFile + B 77155CE3 1 Byte [E2]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ntdll.dll!NtOpenKey + 6 77155D0E 4 Bytes [A8, 01, 07, 00]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ntdll.dll!NtOpenKey + B 77155D13 1 Byte [E2]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ntdll.dll!NtOpenKeyEx + B 77155D23 1 Byte [E2]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ntdll.dll!NtOpenMutant + 6 77155D5E 4 Bytes [28, 02, 07, 00]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ntdll.dll!NtOpenMutant + B 77155D63 1 Byte [E2]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ntdll.dll!NtOpenProcess + 6 77155D8E 1 Byte [68]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ntdll.dll!NtOpenProcess + 6 77155D8E 4 Bytes [68, 03, 07, 00]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ntdll.dll!NtOpenProcess + B 77155D93 1 Byte [E2]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ntdll.dll!NtOpenProcessToken + 6 77155D9E 1 Byte [A8]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ntdll.dll!NtOpenProcessToken + 6 77155D9E 4 Bytes [A8, 03, 07, 00]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ntdll.dll!NtOpenProcessToken + B 77155DA3 1 Byte [E2]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ntdll.dll!NtOpenProcessTokenEx + 6 77155DAE 4 Bytes [68, 04, 07, 00]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ntdll.dll!NtOpenProcessTokenEx + B 77155DB3 1 Byte [E2]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ntdll.dll!NtOpenSection + B 77155DD3 1 Byte [E2]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ntdll.dll!NtOpenThread + 6 77155E0E 1 Byte [28]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ntdll.dll!NtOpenThread + 6 77155E0E 4 Bytes [28, 03, 07, 00]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ntdll.dll!NtOpenThread + B 77155E13 1 Byte [E2]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ntdll.dll!NtOpenThreadToken + 6 77155E1E 4 Bytes [28, 04, 07, 00]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ntdll.dll!NtOpenThreadToken + B 77155E23 1 Byte [E2]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ntdll.dll!NtOpenThreadTokenEx + 6 77155E2E 4 Bytes [A8, 04, 07, 00]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ntdll.dll!NtOpenThreadTokenEx + B 77155E33 1 Byte [E2]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ntdll.dll!NtQueryAttributesFile + 6 77155F3E 4 Bytes [A8, 00, 07, 00]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ntdll.dll!NtQueryAttributesFile + B 77155F43 1 Byte [E2]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ntdll.dll!NtQueryFullAttributesFile + B 77155FF3 1 Byte [E2]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ntdll.dll!NtSetInformationFile + 6 7715663E 4 Bytes [28, 01, 07, 00]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ntdll.dll!NtSetInformationFile + B 77156643 1 Byte [E2]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ntdll.dll!NtSetInformationThread + 6 7715669E 1 Byte [E8]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ntdll.dll!NtSetInformationThread + B 771566A3 1 Byte [E2]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ntdll.dll!NtUnmapViewOfSection + 6 771569BE 4 Bytes [28, 05, 07, 00]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ntdll.dll!NtUnmapViewOfSection + B 771569C3 1 Byte [E2]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] kernel32.dll!CreateProcessW 756B204D 5 Bytes JMP 00010030
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] kernel32.dll!CreateProcessA 756B2082 5 Bytes JMP 00010070
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!DeleteObject 75665F14 5 Bytes JMP 001101B0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!SelectObject 75666640 5 Bytes JMP 001105F0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!SetTextColor 75666906 5 Bytes JMP 00110A30
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!SetBkMode 756669B1 5 Bytes JMP 001108F0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!DeleteDC 75666EAA 5 Bytes JMP 00110170
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!GetDeviceCaps 75666F7F 5 Bytes JMP 001103B0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!ExtSelectClipRgn 75667114 5 Bytes JMP 001102F0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!SelectClipRgn 75667242 5 Bytes JMP 001105B0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!SetStretchBltMode 75667705 5 Bytes JMP 001106B0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!GetCurrentObject 75667917 5 Bytes JMP 00110370
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!GetTextMetricsW 75667B8F 5 Bytes JMP 00110E30
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!GetTextAlign 75667DAF 5 Bytes JMP 00110D70
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!IntersectClipRect 75667DFE 5 Bytes JMP 001103F0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!ExtTextOutW 75668192 5 Bytes JMP 00110970
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!SetTextAlign 7566828E 5 Bytes JMP 001109F0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!GetClipBox 75668525 5 Bytes JMP 00110330
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!MoveToEx 75668C21 5 Bytes JMP 00110470
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!StretchDIBits 7566A53E 5 Bytes JMP 00110770
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!RestoreDC 7566A67B 5 Bytes JMP 00110530
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!SaveDC 7566A74B 5 Bytes JMP 00110570
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!GetTextExtentPoint32W 7566B4B5 5 Bytes JMP 00110670
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!GetTextFaceW 7566B73A 2 Bytes JMP 00110D30
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!GetTextFaceW + 3 7566B73D 2 Bytes [AA, 8A]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!GetFontData 7566BCC4 5 Bytes JMP 00110C70
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!SetWorldTransform 7566C90A 5 Bytes JMP 001106F0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!CreateDCA 7566CCA9 5 Bytes JMP 001100B0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!CreateDCW 7566CF79 5 Bytes JMP 001100F0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!CreateICW 7566CFD0 5 Bytes JMP 00110130
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!GetTextMetricsA 7566D0F2 5 Bytes JMP 00110DF0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!Rectangle 7566F1FF 5 Bytes JMP 001109B0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!LineTo 7566F59B 5 Bytes JMP 00110430
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!SetICMMode 7566FAA4 5 Bytes JMP 00110DB0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!ExtTextOutA 756703F9 5 Bytes JMP 00110930
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!GetTextExtentPoint32A 756707B0 5 Bytes JMP 00110630
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!ExtEscape 75672949 5 Bytes JMP 001102B0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!Escape 75673939 5 Bytes JMP 00110270
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!GetTextFaceA 75673E6A 5 Bytes JMP 00110CF0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!SetPolyFillMode 7567D851 5 Bytes JMP 00110B30
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!SetMiterLimit 7567DA0D 5 Bytes JMP 00110B70
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!EndPage 756800D7 5 Bytes JMP 00110230
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!ResetDCW 7568050D 5 Bytes JMP 00110AB0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!GetGlyphOutlineW 7568C1BA 5 Bytes JMP 00110CB0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!CreateScalableFontResourceW 7568E817 5 Bytes JMP 00110BB0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!AddFontResourceW 7568EC13 5 Bytes JMP 00110BF0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!RemoveFontResourceW 7568F109 5 Bytes JMP 00110C30
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!AbortDoc 75694C63 5 Bytes JMP 00110030
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!EndDoc 756950AA 5 Bytes JMP 001101F0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!StartPage 75695195 5 Bytes JMP 00110730
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!StartDocW 75695BB0 5 Bytes JMP 001107F0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!BeginPath 7569635D 5 Bytes JMP 00110830
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!SelectClipPath 756963B4 5 Bytes JMP 00110AF0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!CloseFigure 7569640F 5 Bytes JMP 00110070
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!EndPath 75696466 5 Bytes JMP 00110A70
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!StrokePath 75696699 5 Bytes JMP 001107B0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!FillPath 75696726 5 Bytes JMP 00110870
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!PolylineTo 75696B94 5 Bytes JMP 001104F0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!PolyBezierTo 75696C25 5 Bytes JMP 001104B0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!PolyDraw 75696CD7 5 Bytes JMP 001108B0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] USER32.dll!ActivateKeyboardLayout 76F28203 5 Bytes JMP 001204F0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] USER32.dll!ScreenToClient 76F2A506 7 Bytes JMP 00120670
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] USER32.dll!RegisterClipboardFormatA 76F2C091 5 Bytes JMP 001202F0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] USER32.dll!RegisterClipboardFormatW 76F2DF8D 5 Bytes JMP 001202B0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] USER32.dll!SetCursor 76F33075 5 Bytes JMP 00120530
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] USER32.dll!MonitorFromWindow 76F33622 7 Bytes JMP 00120630
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] USER32.dll!PostMessageW 76F3447B 5 Bytes JMP 001205F0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] USER32.dll!IsWindowVisible 76F34D69 7 Bytes JMP 001206B0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] USER32.dll!GetClientRect 76F354DD 7 Bytes JMP 001205B0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] USER32.dll!MapWindowPoints 76F35CAA 5 Bytes JMP 00120570
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] USER32.dll!GetParent 76F36029 7 Bytes JMP 001206F0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] USER32.dll!EmptyClipboard 76F4290C 5 Bytes JMP 00120130
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] USER32.dll!SetClipboardData 76F42962 5 Bytes JMP 00120170
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] USER32.dll!GetClipboardData 76F42BA7 5 Bytes JMP 00120030
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] USER32.dll!GetClipboardFormatNameW 76F45FD2 5 Bytes JMP 00120230
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] USER32.dll!SetClipboardViewer 76F46FF6 5 Bytes JMP 001204B0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] USER32.dll!GetClipboardFormatNameA 76F4700A 5 Bytes JMP 00120270
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] USER32.dll!ChangeClipboardChain 76F5147C 5 Bytes JMP 00120430
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] USER32.dll!GetTopWindow 76F524D9 7 Bytes JMP 00120730
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] USER32.dll!CloseClipboard 76F5446C 5 Bytes JMP 001200B0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] USER32.dll!OpenClipboard 76F5447E 5 Bytes JMP 00120070
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] USER32.dll!IsClipboardFormatAvailable 76F544FF 5 Bytes JMP 001200F0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] USER32.dll!GetClipboardSequenceNumber 76F54513 5 Bytes JMP 00120330
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] USER32.dll!GetClipboardOwner 76F54525 5 Bytes JMP 00120370
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] USER32.dll!CountClipboardFormats 76F5470A 5 Bytes JMP 001201F0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] USER32.dll!EnumClipboardFormats 76F547EC 5 Bytes JMP 001201B0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] USER32.dll!GetOpenClipboardWindow 76F5480B 5 Bytes JMP 001203F0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] USER32.dll!SetCursorPos 76F6C1B0 5 Bytes JMP 00120770
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] USER32.dll!GetClipboardViewer 76F84AF7 5 Bytes JMP 00120470
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] USER32.dll!GetPriorityClipboardFormat 76F84BF9 5 Bytes JMP 001203B0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ole32.dll!OleSetClipboard 76D90045 5 Bytes JMP 00130030
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ole32.dll!OleIsCurrentClipboard 76D936B2 5 Bytes JMP 00130070
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ole32.dll!OleGetClipboard 76DBFDCD 5 Bytes JMP 001300B0
.text C:\Program Files\Mozilla Firefox\plugin-container.exe[1604] USER32.dll!RegisterMessagePumpHook + 2F1 76F28B9E 7 Bytes JMP 6BFC32C0 C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text C:\Program Files\Mozilla Firefox\plugin-container.exe[1604] USER32.dll!IsDialogMessageW + 340 76F34444 7 Bytes JMP 6BFC324F C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text C:\Program Files\Mozilla Firefox\plugin-container.exe[1604] USER32.dll!GetWindowInfo 76F34B5E 5 Bytes JMP 6BE0A8A3 C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text C:\Program Files\Mozilla Firefox\plugin-container.exe[1604] USER32.dll!ToUnicodeEx + 71 76F42223 7 Bytes JMP 6BE0AED5 C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text C:\Program Files\Mozilla Firefox\firefox.exe[1988] ntdll.dll!LdrGetProcedureAddress + 26 77172239 7 Bytes JMP 6BCA4470 C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text C:\Program Files\Mozilla Firefox\firefox.exe[1988] kernel32.dll!K32GetDeviceDriverBaseNameW + 5D 756F941E 7 Bytes JMP 6BEF0459 C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text C:\Program Files\Mozilla Firefox\firefox.exe[1988] kernel32.dll!QueryPerformanceCounter + 13 756FC435 7 Bytes JMP 6BEF047C C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text C:\Program Files\Mozilla Firefox\firefox.exe[1988] kernel32.dll!LoadAppInitDlls + 355 756FF4F6 7 Bytes JMP 6BCAF972 C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text C:\Program Files\Mozilla Firefox\firefox.exe[1988] USER32.dll!GetWindowInfo 76F34B5E 5 Bytes JMP 6BE12157 C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text C:\Program Files\Mozilla Firefox\firefox.exe[1988] GDI32.dll!GetViewportOrgEx + 26C 7566884B 7 Bytes JMP 6BEF03DA C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
---- Devices - GMER 1.0.15 ----
AttachedDevice \Driver\volmgr \Device\HarddiskVolume1 fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation)
AttachedDevice \Driver\volmgr \Device\HarddiskVolume1 rdyboost.sys (ReadyBoost Driver/Microsoft Corporation)
AttachedDevice \Driver\volmgr \Device\HarddiskVolume2 fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation)
AttachedDevice \Driver\volmgr \Device\HarddiskVolume2 rdyboost.sys (ReadyBoost Driver/Microsoft Corporation)
AttachedDevice \Driver\volmgr \Device\HarddiskVolume3 fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation)
AttachedDevice \Driver\volmgr \Device\HarddiskVolume3 rdyboost.sys (ReadyBoost Driver/Microsoft Corporation)
Device \Driver\ACPI_HAL \Device\0000005d halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation)
---- Registry - GMER 1.0.15 ----
Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\58b0357a94c5
Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\58b0357a94c5 (not active ControlSet)
Reg HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartPage\NewShortc uts@C:\Users\eric.falley\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SUPER \xa9 - by eRightSoft\SUPER \xa9.lnk 1
Reg HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartPage\NewShortc uts@C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPER \xa9 - by eRightSoft\SUPER \xa9.lnk 1
---- EOF - GMER 1.0.15 ----
Enough rambling. Is there any way I can find and delete this file?
Some contextual information: my computer first started having problems when I tried to install USB cable of a HP Photosmart printer so that my computer could recognize it. The drivers initially failed to install, but when I uninstalled the printer drivers and reinstalled the drivers, the installation of the USB cable was successful. I then downloaded the printer installation files so that I could print, instead of using the installation CD. I've spent a bit of time trying to update my drivers since the "System" process was running at high CPU (see below), and I believe that process handles at least some of the drivers.
In addition, the computer is running at 100% CPU and almost 100% memory. Two programs seemed to cause the problem: "System", described as the "NT Kernel and System"; and services.exe, which was using over 1GB of RAM. I downloaded Program Manager to try to uncover more details about these processes, but now my computer is so slow on normal mode that I can't even start Program Manager. I doubt these processes are the problem, but maybe this information could help.
Here is the information requested (Hijack This, etc.):
Hijack This:
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 6:26:35 AM, on 1/1/2001
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16457)
Boot mode: Safe mode with network support
Running processes:
C:\Windows\Explorer.EXE
C:\Windows\system32\ctfmon.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe
C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Users\eric.falley\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
C:\Users\eric.falley\Downloads\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://my.oc.edu
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton Internet Security\Engine\19.9.0.9\coIEPlg.dll
O2 - BHO: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton Internet Security\Engine\19.9.0.9\IPS\IPSBHO.DLL
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Internet Security\Engine\19.9.0.9\coIEPlg.dll
O4 - HKLM\..\Run: [Sophos AutoUpdate Monitor] C:\Program Files\Sophos\AutoUpdate\almon.exe
O4 - HKLM\..\Run: [Apple_KbdMgr] C:\Program Files\Boot Camp\KbdMgr.exe
O4 - HKCU\..\Run: [Google Update] "C:\Users\eric.falley\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: (no name) - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - (no file)
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: *.oc.edu
O15 - Trusted Zone: *.oc.edu (HKLM)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = oc.edu
O17 - HKLM\Software\..\Telephony: DomainName = oc.edu
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = oc.edu
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = oc.edu
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O20 - AppInit_DLLs: C:\PROGRA~1\Sophos\SOPHOS~1\SOPHOS~1.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Apple OS Switch Manager (AppleOSSMgr) - Unknown owner - C:\Windows\system32\AppleOSSMgr.exe
O23 - Service: Apple Time Service (AppleTimeSrv) - Apple Inc. - C:\Windows\system32\AppleTimeSrv.exe
O23 - Service: Bradford Persistent Agent Service (BNPagent) - Bradford Networks - C:\Program Files\Bradford Networks\Persistent Agent\bndaemon.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: Norton Internet Security (NIS) - Symantec Corporation - C:\Program Files\Norton Internet Security\Engine\19.9.0.9\ccSvcHst.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: Sophos Anti-Virus status reporter (SAVAdminService) - Sophos Limited - C:\Program Files\Sophos\Sophos Anti-Virus\SAVAdminService.exe
O23 - Service: Sophos Anti-Virus (SAVService) - Sophos Limited - C:\Program Files\Sophos\Sophos Anti-Virus\SavService.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: Sophos Agent - Sophos Limited - C:\Program Files\Sophos\Remote Management System\ManagementAgentNT.exe
O23 - Service: Sophos AutoUpdate Service - Sophos Limited - C:\Program Files\Sophos\AutoUpdate\ALsvc.exe
O23 - Service: Sophos Message Router - Sophos Limited - C:\Program Files\Sophos\Remote Management System\RouterNT.exe
O23 - Service: Sophos Web Control Service - Sophos Limited - C:\Program Files\Sophos\Sophos Anti-Virus\Web Control\swc_service.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: Sophos Web Intelligence Service (swi_service) - Sophos Limited - C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\swi_service.exe
O23 - Service: Sophos Web Intelligence Update (swi_update) - Sophos Limited - C:\ProgramData\Sophos\Web Intelligence\swi_update.exe
--
End of file - 7696 bytes
DDS.txt
DDS (Ver_2012-11-20.01) - NTFS_x86 NETWORK
Internet Explorer: 9.0.8112.16457
Run by eric.falley at 6:26:54 on 2001-01-01
Microsoft Windows 7 Enterprise 6.1.7601.1.1252.1.1033.18.1767.937 [GMT -7:00]
.
AV: Sophos Anti-Virus *Enabled/Updated* {65FBD860-96D8-75EF-C7ED-7BE27E6C498A}
AV: Norton Internet Security *Disabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Sophos Anti-Virus *Enabled/Updated* {DE9A3984-B0E2-7A61-FD5D-409005EB0337}
SP: Norton Internet Security *Disabled/Updated* {D8BEB080-B73A-17E3-1B37-B6B462689202}
FW: Norton Internet Security *Disabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}
.
============== Running Processes ================
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Program Files\Sophos\Sophos Anti-Virus\SavService.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\ctfmon.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe
C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Users\eric.falley\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Users\eric.falley\Downloads\HijackThis.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\conhost.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k secsvcs
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://my.oc.edu
uProxyOverride = <local>;*.local
BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: Norton Identity Protection: {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - c:\program files\norton internet security\engine\19.9.0.9\coieplg.dll
BHO: Norton Vulnerability Protection: {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - c:\program files\norton internet security\engine\19.9.0.9\ips\ipsbho.dll
BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - c:\program files\java\jre6\bin\jp2ssv.dll
TB: Norton Toolbar: {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - c:\program files\norton internet security\engine\19.9.0.9\coieplg.dll
uRun: [Google Update] "c:\users\eric.falley\appdata\local\google\update\GoogleUpdate.exe" /c
mRun: [Sophos AutoUpdate Monitor] c:\program files\sophos\autoupdate\almon.exe
mRun: [Apple_KbdMgr] c:\program files\boot camp\KbdMgr.exe
uPolicies-Explorer: NoDriveTypeAutoRun = dword:145
mPolicies-System: ConsentPromptBehaviorAdmin = dword:5
mPolicies-System: ConsentPromptBehaviorUser = dword:3
mPolicies-System: EnableUIADesktopToggle = dword:0
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\program files\microsoft office\office12\ONBttnIE.dll
Trusted Zone: oc.edu
Trusted Zone: oc.edu
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab
TCP: NameServer = 192.168.0.1 205.171.3.25
TCP: Interfaces\{440CAAB8-24A1-4381-8F00-24D740264C63} : DHCPNameServer = 192.168.0.1 205.171.3.25
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\program files\common files\skype\Skype4COM.dll
Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - c:\program files\windows live\photo gallery\AlbumDownloadProtocolHandler.dll
AppInit_DLLs= c:\progra~1\sophos\sophos~1\SOPHOS~1.DLL
SSODL: WebCheck - <orphaned>
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\users\eric.falley\appdata\roaming\mozilla\firefox\profiles\8bmvn7l7.defa ult\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - file:///C:/HTML/Home%20Timer.html
FF - prefs.js: network.proxy.type - 0
FF - component: c:\program files\avg\avg10\firefox4\components\avgssff4.dll
FF - component: c:\users\eric.falley\appdata\roaming\mozilla\firefox\profiles\8bmvn7l7.defa ult\extensions\engine@conduit.com\components\RadioWMPCoreGecko19.dll
FF - plugin: c:\progra~1\meadco~1\npmeadax.dll
FF - plugin: c:\program files\adobe\reader 10.0\reader\air\nppdf32.dll
FF - plugin: c:\program files\amazon\mp3 downloader\npAmazonMP3DownloaderPlugin.dll
FF - plugin: c:\program files\google\google earth\plugin\npgeplugin.dll
FF - plugin: c:\program files\google\update\1.3.21.123\npGoogleUpdate3.dll
FF - plugin: c:\program files\java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: c:\program files\microsoft silverlight\4.1.10329.0\npctrlui.dll
FF - plugin: c:\program files\microsoft\office live\npOLW.dll
FF - plugin: c:\program files\windows live\photo gallery\NPWLPG.dll
FF - plugin: c:\users\eric.falley\appdata\local\google\update\1.3.21.123\npGoogleUpdate3 .dll
FF - plugin: c:\users\eric.falley\appdata\roaming\mozilla\plugins\npgoogletalk.dll
FF - plugin: c:\users\eric.falley\appdata\roaming\mozilla\plugins\npgtpo3dautoplugin.dll
FF - plugin: c:\windows\system32\macromed\flash\NPSWF32_11_5_502_135.dll
FF - ExtSQL: 2010-12-16 02:04; engine@conduit.com; c:\users\eric.falley\appdata\roaming\mozilla\firefox\profiles\8bmvn7l7.defa ult\extensions\engine@conduit.com
FF - ExtSQL: 2011-05-24 23:06; {1280606b-2510-4fe0-97ef-9b5a22eafe30}; c:\users\eric.falley\appdata\roaming\mozilla\firefox\profiles\8bmvn7l7.defa ult\extensions\{1280606b-2510-4fe0-97ef-9b5a22eafe30}.xpi
FF - ExtSQL: 2012-03-31 20:26; firebug@software.joehewitt.com; c:\users\eric.falley\appdata\roaming\mozilla\firefox\profiles\8bmvn7l7.defa ult\extensions\firebug@software.joehewitt.com.xpi
FF - ExtSQL: 2012-06-23 19:51; {BBDA0591-3099-440a-AA10-41764D9DB4DB}; c:\programdata\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\nis_19.1.0.28\IPSFFPlgn
FF - ExtSQL: 2012-06-23 22:29; {2D3F3651-74B9-4795-BDEC-6DA2F431CB62}; c:\programdata\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\nis_19.1.0.28\coFFPlgn
.
============= SERVICES / DRIVERS ===============
.
R0 prl_pv32;prl_pv32;c:\windows\system32\drivers\prl_pv32.sys [2011-6-10 30024]
R0 SymDS;Symantec Data Store;c:\windows\system32\drivers\nis\1309000.009\symds.sys [2012-10-1 340088]
R0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\nis\1309000.009\symefa.sys [2012-10-1 924320]
R1 prl_boot;Parallels BootCamp Helper;c:\windows\system32\drivers\prl_boot.sys [2011-6-10 35016]
R2 SAVService;Sophos Anti-Virus;c:\program files\sophos\sophos anti-virus\SavService.exe [2012-7-29 139840]
R3 applemtm;Apple Multitouch Mouse;c:\windows\system32\drivers\applemtm.sys [2010-8-19 10496]
R3 applemtp;Apple Multitouch;c:\windows\system32\drivers\applemtp.sys [2010-8-19 29568]
R3 KeyMagic;USB Keyboard HID Filter;c:\windows\system32\drivers\KeyMagic.sys [2010-8-19 24064]
S1 BHDrvx86;BHDrvx86;c:\programdata\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\nis_19.1.0.28\definitions\bashdefs\20121130.005\BHDrvx86.sys [2012-12-3 995488]
S1 ccSet_NIS;Norton Internet Security Settings Manager;c:\windows\system32\drivers\nis\1309000.009\ccsetx86.sys [2012-10-1 132768]
S1 IDSVix86;IDSVix86;c:\programdata\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\nis_19.1.0.28\definitions\ipsdefs\20121215.001\IDSvix86.sys [2012-12-17 386720]
S1 SAVOnAccess;SAVOnAccess;c:\windows\system32\drivers\savonaccess.sys [2012-7-29 123680]
S1 SKMScan;SKMScan;c:\windows\system32\drivers\skmscan.sys [2012-7-29 31736]
S1 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\nis\1309000.009\ironx86.sys [2012-10-1 149624]
S1 SymNetS;Symantec Network Security WFP Driver;c:\windows\system32\drivers\nis\1309000.009\symnets.sys [2012-10-1 318584]
S2 AppleOSSMgr;Apple OS Switch Manager;c:\windows\system32\AppleOSSMgr.exe [2009-1-8 136496]
S2 AppleTimeSrv;Apple Time Service;c:\windows\system32\AppleTimeSrv.exe [2009-1-8 99632]
S2 BNPagent;Bradford Persistent Agent Service;c:\program files\bradford networks\persistent agent\bndaemon.exe [2009-11-1 3026656]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 KeyAgent;KeyAgent;c:\windows\system32\drivers\KeyAgent.sys [2009-1-8 5760]
S2 MacHALDriver;Mac HAL;c:\windows\system32\drivers\MacHALDriver.sys [2009-1-8 6784]
S2 NIS;Norton Internet Security;c:\program files\norton internet security\engine\19.9.0.9\ccsvchst.exe [2012-10-1 138272]
S2 SAVAdminService;Sophos Anti-Virus status reporter;c:\program files\sophos\sophos anti-virus\SAVAdminService.exe [2012-12-4 216640]
S2 SkypeUpdate;Skype Updater;c:\program files\skype\updater\Updater.exe [2012-7-13 160944]
S2 Sophos Agent;Sophos Agent;c:\program files\sophos\remote management system\ManagementAgentNT.exe [2012-9-17 289856]
S2 Sophos AutoUpdate Service;Sophos AutoUpdate Service;c:\program files\sophos\autoupdate\ALsvc.exe [2012-7-6 232512]
S2 Sophos Message Router;Sophos Message Router;c:\program files\sophos\remote management system\RouterNT.exe [2012-9-17 818240]
S2 Sophos Web Control Service;Sophos Web Control Service;c:\program files\sophos\sophos anti-virus\web control\swc_service.exe [2012-7-29 357400]
S2 swi_service;Sophos Web Intelligence Service;c:\program files\sophos\sophos anti-virus\web intelligence\swi_service.exe [2012-12-4 2869824]
S2 swi_update;Sophos Web Intelligence Update;c:\programdata\sophos\web intelligence\swi_update.exe [2012-7-29 1459264]
S3 AppleBtBc;Apple Broadcom Built-in Bluetooth;c:\windows\system32\drivers\AppleBtBc.sys [2010-8-19 18432]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2009-7-13 229888]
S3 CirrusFilter;CS420xLowerFilter;c:\windows\system32\drivers\CS420x86.sys [2010-8-19 13824]
S3 DrvAgent32;DrvAgent32;c:\windows\system32\drivers\DrvAgent32.sys [2000-12-31 23456]
S3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\common files\symantec shared\eengine\EraserUtilRebootDrv.sys [2012-9-19 106656]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2012-10-28 14848]
S3 SBFWIMCL;GFI Software Firewall NDIS IM Filter Service;c:\windows\system32\drivers\SbFwIm.sys [2012-6-23 94584]
S3 SBFWIMCLMP;GFI Software Firewall NDIS IM Filter Miniport;c:\windows\system32\drivers\SbFwIm.sys [2012-6-23 94584]
S3 sdcfilter;sdcfilter;c:\windows\system32\drivers\sdcfilter.sys [2012-7-29 33696]
S3 StorSvc;Storage Service;c:\windows\system32\svchost.exe -k LocalSystemNetworkRestricted [2009-7-13 20992]
S3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\TsUsbFlt.sys [2012-10-28 49664]
S4 SophosBootDriver;SophosBootDriver;c:\windows\system32\drivers\SophosBootDri ver.sys [2012-2-2 22536]
.
=============== File Associations ===============
.
FileExt: .txt: txtfile=c:\windows\system32\NOTEPAD.EXE %1 [UserChoice]
FileExt: .js: Applications\firefox.exe="c:\program files\mozilla firefox\firefox.exe" "%1" [UserChoice]
.
=============== Created Last 30 ================
.
2012-12-18 20:46:41 -------- d-----w- c:\users\eric.falley\appdata\roaming\HpUpdate
2012-12-18 20:44:45 -------- d-----w- c:\program files\HP
2012-12-18 20:35:34 -------- d-----w- c:\users\eric.falley\appdata\local\HP
2012-12-16 07:17:41 -------- d-----w- c:\program files\iPod
2012-12-16 07:17:30 -------- d-----w- c:\programdata\188F1432-103A-4ffb-80F1-36B633C5C9E1
2012-12-16 07:17:30 -------- d-----w- c:\program files\iTunes
2012-12-13 09:40:00 -------- d-----w- c:\windows\Migration
2012-12-13 09:19:53 2345984 ----a-w- c:\windows\system32\win32k.sys
2012-12-13 09:12:56 56320 ----a-w- c:\windows\system32\wbem\NCProv.dll
2012-12-13 09:11:15 34304 ----a-w- c:\windows\system32\atmlib.dll
2012-12-13 09:11:15 295424 ----a-w- c:\windows\system32\atmfd.dll
2012-12-13 09:09:00 2048 ----a-w- c:\windows\system32\tzres.dll
2012-12-12 20:54:18 6812136 ----a-w- c:\programdata\microsoft\windows defender\definition updates\{7a9408ab-8f5b-4309-82e9-064044d9265c}\mpengine.dll
2012-12-05 07:43:14 -------- d-----w- c:\users\eric.falley\.classicsonline
2012-12-05 07:42:43 -------- d-----w- c:\program files\ClassicsOnline
2012-12-04 14:26:55 -------- d-----w- c:\program files\common files\Sophos
2012-11-19 22:49:12 159744 ----a-w- c:\program files\internet explorer\plugins\npqtplugin7.dll
2012-11-19 22:49:12 159744 ----a-w- c:\program files\internet explorer\plugins\npqtplugin6.dll
2012-11-19 22:49:12 159744 ----a-w- c:\program files\internet explorer\plugins\npqtplugin5.dll
2012-11-19 22:49:12 159744 ----a-w- c:\program files\internet explorer\plugins\npqtplugin4.dll
2012-11-19 22:49:12 159744 ----a-w- c:\program files\internet explorer\plugins\npqtplugin3.dll
2012-11-19 22:49:12 159744 ----a-w- c:\program files\internet explorer\plugins\npqtplugin2.dll
2012-11-19 22:49:12 159744 ----a-w- c:\program files\internet explorer\plugins\npqtplugin.dll
2012-11-19 18:18:00 -------- d-----w- c:\users\eric.falley\appdata\local\{54DC3385-AD24-4F0E-94A7-746E00233CC3}
2012-11-18 08:12:33 -------- d-----w- c:\users\eric.falley\appdata\local\{DCD6F18E-C9B9-4898-9AA1-DD8775F02E13}
2012-11-17 19:51:38 -------- d-----w- c:\users\eric.falley\appdata\local\{69739972-F74B-4444-8C5D-A099207BF4A4}
2012-11-17 09:11:22 52224 ----a-w- c:\windows\system32\nlaapi.dll
2012-11-17 09:11:22 499712 ----a-w- c:\windows\system32\iphlpsvc.dll
2012-11-17 09:11:22 35328 ----a-w- c:\windows\system32\drivers\tcpipreg.sys
2012-11-17 09:11:22 242176 ----a-w- c:\windows\system32\nlasvc.dll
2012-11-17 09:11:22 18944 ----a-w- c:\windows\system32\netevent.dll
2012-11-17 09:11:22 175104 ----a-w- c:\windows\system32\netcorehc.dll
2012-11-17 09:11:22 156672 ----a-w- c:\windows\system32\ncsi.dll
2012-11-17 09:11:21 1293680 ----a-w- c:\windows\system32\drivers\tcpip.sys
2012-11-17 09:09:19 9728 ----a-w- c:\windows\system32\Wdfres.dll
2012-11-17 09:09:19 526952 ----a-w- c:\windows\system32\drivers\Wdf01000.sys
2012-11-17 09:09:19 47720 ----a-w- c:\windows\system32\drivers\WdfLdr.sys
2012-11-17 09:05:23 66560 ----a-w- c:\windows\system32\drivers\WUDFPf.sys
2012-11-17 09:05:23 155136 ----a-w- c:\windows\system32\drivers\WUDFRd.sys
2012-11-17 09:05:22 73216 ----a-w- c:\windows\system32\WUDFSvc.dll
2012-11-17 09:05:22 172032 ----a-w- c:\windows\system32\WUDFPlatform.dll
2012-11-17 09:05:21 613888 ----a-w- c:\windows\system32\WUDFx.dll
2012-11-17 09:05:21 38912 ----a-w- c:\windows\system32\WUDFCoinstaller.dll
2012-11-17 09:05:21 196608 ----a-w- c:\windows\system32\WUDFHost.exe
2012-11-17 09:05:07 78336 ----a-w- c:\windows\system32\synceng.dll
2012-11-17 09:03:50 44032 ----a-w- c:\windows\system32\dhcpcsvc6.dll
2012-11-17 09:03:50 193536 ----a-w- c:\windows\system32\dhcpcore6.dll
2012-11-17 02:11:36 -------- d-----w- c:\users\eric.falley\appdata\local\{A4CF1611-7572-491E-A36C-8871933102EC}
2012-11-16 14:11:25 -------- d-----w- c:\users\eric.falley\appdata\local\{8D075736-8031-4D3D-8ABF-FA0409CA1DB7}
2012-11-15 20:27:02 -------- d-----w- c:\users\eric.falley\appdata\local\{9273360D-6D1C-4412-A6D0-D7805F930AB5}
2012-11-14 17:46:23 -------- d-----w- c:\users\eric.falley\appdata\local\{3B974FE5-0C7C-42C8-A883-0612F358CF22}
2012-11-14 05:30:24 -------- d-----w- c:\users\eric.falley\appdata\local\{38211FDF-A419-4F5C-B46F-664D0BEFB6A8}
2012-11-10 15:54:22 -------- d-----w- c:\users\eric.falley\appdata\local\{DED16EF7-083C-4D33-A3BB-A8594D63362A}
2012-11-10 01:09:41 -------- d-----w- c:\users\eric.falley\appdata\local\{B7A8DE0C-440E-499D-91B0-C370B1E5341C}
2012-11-09 23:00:46 -------- d-----w- c:\users\eric.falley\appdata\local\{43B3AF28-24C1-44A6-AB3B-E272130571DC}
2012-11-09 19:51:06 -------- d-----w- c:\users\eric.falley\appdata\local\Apps
2012-11-08 13:31:09 -------- d-----w- c:\users\eric.falley\appdata\local\{CB5B3D39-2021-4CB8-B3BB-E930AB4F05B1}
2012-11-07 20:07:28 -------- d-----w- c:\users\eric.falley\appdata\local\{50ECEF58-79E6-47D6-98CD-4062AC3FFC7E}
2012-11-07 05:26:43 -------- d-----w- c:\users\eric.falley\appdata\local\{B8FE5BBA-622C-4022-83F4-2F041C3CEA15}
2012-11-04 03:05:22 -------- d-----w- c:\users\eric.falley\appdata\local\{772C2757-4314-4AAA-83A4-0AD71477CA7A}
2012-11-02 19:16:15 -------- d-----w- c:\users\eric.falley\appdata\local\{FB4D420D-3E66-4496-BAAD-84FB575E028D}
2012-11-01 17:25:22 -------- d-----w- c:\users\eric.falley\appdata\local\{1864E22A-DE34-4195-9C05-E484BACD1773}
2012-11-01 04:32:45 -------- d-----w- c:\users\eric.falley\appdata\local\{937AF2F6-1D74-4F62-BD59-F75BA42D00E6}
2012-10-31 16:32:28 -------- d-----w- c:\users\eric.falley\appdata\local\{0D1F595E-0A95-4AAF-A6D0-3C10381D7B27}
2012-10-31 03:28:05 -------- d-----w- c:\users\eric.falley\appdata\local\{8B9555A7-70FF-4C00-B793-45A529694F75}
2012-10-30 15:27:54 -------- d-----w- c:\users\eric.falley\appdata\local\{41A4C975-45D5-45C5-B47D-516A1370E636}
2012-10-30 03:27:40 -------- d-----w- c:\users\eric.falley\appdata\local\{F4368022-FDDB-4C9B-ACD7-553CE311A105}
2012-10-29 12:46:48 -------- d-----w- c:\users\eric.falley\appdata\local\{DD926AFF-2CED-46DD-B45F-3B0ED5C725EA}
2012-10-28 19:17:09 220160 ----a-w- c:\windows\system32\ncrypt.dll
2012-10-28 19:17:09 1039360 ----a-w- c:\windows\system32\lsasrv.dll
2012-10-28 19:17:05 369856 ----a-w- c:\windows\system32\drivers\cng.sys
2012-10-28 19:17:05 136560 ----a-w- c:\windows\system32\drivers\ksecpkg.sys
2012-10-28 19:17:03 247808 ----a-w- c:\windows\system32\schannel.dll
2012-10-28 19:15:00 -------- d-----w- c:\users\eric.falley\appdata\local\{C74358CE-9F4E-4A96-A7C2-775A9F66222C}
2012-10-28 05:24:36 -------- d-----w- c:\users\eric.falley\appdata\local\{1592BB8E-E968-45B2-8220-B78612257F5E}
2012-10-27 13:10:13 -------- d-----w- c:\users\eric.falley\appdata\local\{F76C70CA-D06A-4779-AD89-000571812A16}
2012-10-27 03:13:27 -------- d-----w- c:\users\eric.falley\appdata\local\Amazon
2012-10-25 09:12:26 94208 ----a-w- c:\windows\system32\QuickTimeVR.qtx
2012-10-25 09:12:26 69632 ----a-w- c:\windows\system32\QuickTime.qts
2012-10-24 05:22:24 -------- d-----w- c:\users\eric.falley\appdata\local\{71648364-D3B8-4F4C-922D-52A12557C33D}
2012-10-22 03:41:05 -------- d-----w- c:\users\eric.falley\appdata\local\{861F4FC0-A8A1-4AAF-9B20-6CA7171C0393}
2012-10-20 17:23:21 -------- d-----w- c:\users\eric.falley\appdata\local\{577DFB11-F4BC-41BC-AFDB-F6FE8BFA573D}
2012-10-20 01:52:07 -------- d-----w- c:\users\eric.falley\appdata\local\{B44C8D75-E9F7-4EC1-BB0D-65C088D2C91F}
2012-10-19 13:21:14 -------- d-----w- c:\users\eric.falley\appdata\local\{77DCFDA4-132E-442B-861E-580E6E339AEA}
2012-10-18 00:38:18 -------- d-----w- c:\users\eric.falley\appdata\local\{D63C1D7A-779C-408F-A936-92B3E887419E}
2012-10-17 12:37:50 -------- d-----w- c:\users\eric.falley\appdata\local\{DDC63698-9B40-4743-BB49-A161B9B0BC64}
2012-10-14 11:27:39 -------- d-----w- c:\users\eric.falley\appdata\local\{8E32792E-CBD6-4842-9063-8AD0A44FF996}
2012-10-13 23:19:09 -------- d-----w- c:\users\eric.falley\appdata\local\{9116085C-3CB3-4791-BAFF-2357AD05A4CB}
2012-10-13 19:05:56 172544 ----a-w- c:\windows\system32\wintrust.dll
2012-10-13 19:02:01 103936 ----a-w- c:\windows\system32\cryptnet.dll
2012-10-13 19:02:00 140288 ----a-w- c:\windows\system32\cryptsvc.dll
2012-10-13 19:02:00 1159680 ----a-w- c:\windows\system32\crypt32.dll
2012-10-13 19:01:26 1211760 ----a-w- c:\windows\system32\drivers\ntfs.sys
2012-10-13 18:55:34 542208 ----a-w- c:\windows\system32\kerberos.dll
2012-10-13 18:55:11 3968880 ----a-w- c:\windows\system32\ntkrnlpa.exe
2012-10-13 18:55:10 3914096 ----a-w- c:\windows\system32\ntoskrnl.exe
2012-10-13 18:44:31 -------- d-----w- c:\users\eric.falley\appdata\local\{FEA7039D-24C2-4A78-85D1-1A0202105D9C}
2012-10-11 16:08:14 -------- d-----w- c:\users\eric.falley\appdata\local\{2B14D9DC-DFE6-4D9B-9F09-2A3539731615}
2012-10-10 01:14:37 -------- d-----w- c:\users\eric.falley\appdata\local\{E584EE48-04EA-4B1D-88BF-78C22DFF9778}
2012-10-09 12:47:53 -------- d-----w- c:\users\eric.falley\appdata\local\{365784D2-C9A7-4426-8152-85C16AE77178}
2012-10-08 22:58:55 -------- d-----w- c:\users\eric.falley\appdata\local\{13E1D426-BE98-4DD5-B482-903EAAF1B93F}
2012-10-08 10:58:43 -------- d-----w- c:\users\eric.falley\appdata\local\{2904D33F-A35C-44C8-A50B-345820DF68E7}
2012-10-07 22:06:17 -------- d-----w- c:\users\eric.falley\appdata\local\{1E27E32D-8F04-4BDF-9157-A21C65D9B8F4}
2012-10-07 08:03:33 -------- d-----w- c:\users\eric.falley\appdata\local\{E7386D25-E895-497F-9653-5A86EEEF8FF3}
2012-10-06 20:19:06 -------- d-----w- C:\SP98
2012-10-06 19:58:21 209608 ----a-w- c:\windows\system32\TABCTL32.OCX
2012-10-06 19:57:43 212992 ----a-w- c:\program files\common files\installshield\engine\6\intel 32\ILog.dll
2012-10-06 19:09:30 -------- d-----w- c:\users\eric.falley\appdata\local\{98EB2C15-4BA9-4062-BE15-D0CCAD93F927}
2012-10-05 13:06:17 -------- d-----w- c:\users\eric.falley\appdata\local\{CB111915-742B-4A13-9C46-95328E89A368}
2012-10-04 23:05:48 -------- d-----w- c:\users\eric.falley\appdata\local\{28A93165-B8C4-4CF0-9E04-83BCCCA1A49B}
2012-10-04 08:45:12 -------- d-----w- c:\users\eric.falley\appdata\local\{6ECDA215-ED1F-4AD2-8355-E6F7EBC7EA8A}
2012-10-03 20:04:06 -------- d-----w- c:\users\eric.falley\appdata\local\{04AEF0FE-0B0C-47F8-90E2-4160B8697A19}
2012-10-03 05:46:28 -------- d-----w- c:\users\eric.falley\appdata\local\{F6D2D58C-DE82-4DEE-898C-45507D385002}
2012-10-02 02:44:59 924320 ----a-w- c:\windows\system32\drivers\nis\1309000.009\symefa.sys
2012-10-02 02:44:59 340088 ----a-r- c:\windows\system32\drivers\nis\1309000.009\symds.sys
2012-10-02 02:44:59 32928 ----a-w- c:\windows\system32\drivers\nis\1309000.009\srtspx.sys
2012-10-02 02:44:59 318584 ----a-w- c:\windows\system32\drivers\nis\1309000.009\symnets.sys
2012-10-02 02:44:58 574112 ----a-w- c:\windows\system32\drivers\nis\1309000.009\srtsp.sys
2012-10-02 02:44:58 149624 ----a-w- c:\windows\system32\drivers\nis\1309000.009\ironx86.sys
2012-10-02 02:44:58 132768 ----a-w- c:\windows\system32\drivers\nis\1309000.009\ccsetx86.sys
2012-10-02 02:44:29 8942 ----a-w- c:\windows\system32\drivers\nis\1309000.009\symvtcer.dat
2012-10-02 02:44:29 -------- d-----w- c:\windows\system32\drivers\nis\1309000.009
2012-10-02 01:50:58 -------- d-----w- c:\users\eric.falley\appdata\local\{1C66EB63-15F3-420A-8FFE-49EE96F156C3}
2012-10-02 01:41:44 -------- d-----w- c:\users\eric.falley\appdata\local\{0494EF0F-0BE1-4C9A-B6B4-2F0A953CDD97}
2012-09-30 14:59:13 -------- d-----w- c:\users\eric.falley\appdata\local\{90CBFBCB-67C0-47FA-8249-17B377AB2F3F}
2012-09-30 02:06:31 -------- d-----w- c:\users\eric.falley\appdata\local\{67EA79B6-3634-4697-92C2-AA69E68D3C9B}
2012-09-29 14:05:55 -------- d-----w- c:\users\eric.falley\appdata\local\{2860A9AA-8A25-46E3-9264-20F4F4F5EF9F}
2012-09-29 01:55:44 -------- d-----w- c:\users\eric.falley\appdata\local\{18D0D841-104F-4046-9421-85704D6FBD61}
2012-09-28 16:32:56 5989776 ----a-w- c:\windows\system32\usbaaplrc.dll
2012-09-28 16:32:56 44544 ----a-w- c:\windows\system32\drivers\usbaapl.sys
2012-09-28 13:08:15 -------- d-----w- c:\users\eric.falley\appdata\local\{B15E732B-1AEF-444A-A28D-26D8ECF177A7}
2012-09-28 01:03:46 -------- d-----w- c:\users\eric.falley\appdata\local\{679A4172-F47A-411D-89ED-FF6DD94FEF2E}
2012-09-27 22:45:02 2422272 ----a-w- c:\windows\system32\wucltux.dll
2012-09-27 22:44:45 88576 ----a-w- c:\windows\system32\wudriver.dll
2012-09-27 22:43:58 33792 ----a-w- c:\windows\system32\wuapp.exe
2012-09-27 22:43:58 171904 ----a-w- c:\windows\system32\wuwebv.dll
2012-09-27 12:27:24 -------- d-----w- c:\users\eric.falley\appdata\local\{6A46C718-F9F7-409B-A937-B2ACA9422C2F}
2012-09-27 08:12:42 712048 ----a-w- c:\windows\system32\drivers\ndis.sys
2012-09-27 08:12:42 33280 ----a-w- c:\windows\system32\drivers\RNDISMP.sys
2012-09-27 08:12:20 240496 ----a-w- c:\windows\system32\drivers\netio.sys
2012-09-27 08:12:20 187760 ----a-w- c:\windows\system32\drivers\FWPKCLNT.SYS
2012-09-27 08:11:51 245760 ----a-w- c:\windows\system32\OxpsConverter.exe
2012-09-27 08:02:53 490496 ----a-w- c:\windows\system32\d3d10level9.dll
2012-09-27 01:09:01 -------- d-----w- c:\users\eric.falley\appdata\local\{030753E2-63BE-45FB-A4C3-42AA6E6F3E5D}
2012-09-23 18:13:53 -------- d-----w- c:\users\eric.falley\appdata\local\{4106B345-C0BC-48D2-9565-20C4C6C5DBC7}
2012-09-22 18:13:12 -------- d-----w- c:\users\eric.falley\appdata\local\{A7346C83-7CC3-4F7F-B402-C155C049664E}
2012-09-22 06:12:42 -------- d-----w- c:\users\eric.falley\appdata\local\{E2A7C69B-DE3E-4D2D-B9B0-1EB23D76F823}
2012-09-21 19:27:41 -------- d-----w- C:\warmonger
2012-09-21 19:27:41 -------- d-----w- C:\fastranger
2012-09-21 18:12:16 -------- d-----w- c:\users\eric.falley\appdata\local\{5B785AC8-CA7F-4B5E-BB3E-B8229B13D3EA}
2012-09-20 23:11:01 -------- d-----w- c:\users\eric.falley\appdata\local\{57FFC422-477C-45D3-B67A-A562C7BAA8D3}
2012-09-20 22:54:10 -------- d-----w- c:\users\eric.falley\appdata\local\{9D03F030-54D9-40C7-8228-C91130F866B9}
2012-09-19 18:10:45 -------- d-----w- c:\users\eric.falley\appdata\local\{D24DD1CA-10D7-4138-968D-0894233C3234}
2012-09-18 16:43:13 -------- d-----w- c:\users\eric.falley\appdata\local\{84723A9C-C45E-4A75-9B3A-B195563B8C51}
2012-09-18 13:15:40 -------- d-----w- c:\users\eric.falley\appdata\local\{DECFBB2E-393F-4B87-81AD-22E127135787}
2012-09-17 13:02:05 -------- d-----w- c:\users\eric.falley\appdata\local\{3AB17999-7D48-4EB9-A70F-9F074CC5CD09}
2012-09-16 20:48:47 -------- d-----w- c:\users\eric.falley\appdata\local\{764B7D78-5501-49AF-A65A-C235CAFCBA68}
2012-09-16 18:22:34 -------- d-----w- c:\program files\Lame For Audacity
2012-09-15 18:14:00 -------- d-----w- c:\users\eric.falley\appdata\local\{AD2635B5-3A41-40BB-8998-92DEE1070DD2}
2012-09-14 20:23:00 -------- d-----w- c:\users\eric.falley\appdata\local\{E0E5F365-D365-47DD-A802-2CC4E3B1DB85}
2012-09-14 08:27:16 -------- d-----w- c:\users\eric.falley\appdata\local\{D0C78CA6-21AA-49A8-9127-39972EDA7F57}
2012-09-12 18:39:45 -------- d-----w- c:\users\eric.falley\appdata\local\{CC7795D1-DD64-4F0F-8D93-A20E72C77F62}
2012-09-12 13:54:47 428032 ----a-w- c:\windows\system32\spool\prtprocs\w32x86\hpcpp130.dll
2012-09-12 05:23:18 -------- d-----w- c:\users\eric.falley\appdata\local\{63187FD3-31B9-4352-9BDF-A9E0B360B60D}
2012-09-10 22:02:00 -------- d-----w- c:\users\eric.falley\appdata\local\{6F2AD4DB-D160-4A1E-9EC7-464F66C2BCDB}
2012-09-10 07:31:54 -------- d-----w- c:\users\eric.falley\appdata\local\{D3BF5DBD-5AE5-483B-9705-C396D211FF06}
2012-09-09 19:31:12 -------- d-----w- c:\users\eric.falley\appdata\local\{B860661F-E35D-4295-834B-43361DF75660}
2012-09-09 02:38:06 -------- d-----w- c:\users\eric.falley\appdata\local\{EEEF87F6-C516-4E58-9643-FD94DC4E304E}
2012-09-07 09:02:04 -------- d-----w- c:\users\eric.falley\appdata\local\{E8A4776C-81D7-43CC-B69C-3243EA544A6E}
2012-09-06 20:29:48 -------- d-----w- c:\users\eric.falley\appdata\local\{996102C6-6E2D-4ABC-BE35-BF3AD6B22894}
2012-09-06 04:08:13 -------- d-----w- c:\users\eric.falley\appdata\local\{B8A39572-9960-41B8-BC4E-5B7F2B92104D}
2012-09-05 13:49:13 -------- d-----w- c:\users\eric.falley\appdata\local\{AB0EAD56-534D-4E9E-9D27-C038ABFC2BA5}
2012-09-04 12:33:27 -------- d-----w- c:\users\eric.falley\appdata\local\{AD1B7F06-6B7E-4052-8239-C63F43116400}
2012-09-03 18:54:46 -------- d-----w- c:\users\eric.falley\appdata\local\{4A289D54-1436-41FB-8CC1-6B65B36975B8}
2012-09-03 06:41:30 -------- d-----w- c:\users\eric.falley\appdata\local\{DC961756-3112-425E-988D-B454FCBAE995}
2012-08-30 09:43:40 -------- d-----w- c:\users\eric.falley\appdata\local\{6EFC2E81-AF4E-4D35-8CAF-2D4EAC8D8DCA}
2012-08-27 07:16:34 -------- d-----w- c:\users\eric.falley\appdata\local\{43955B94-DAC8-42E2-83CC-1349E3E3F4AC}
2012-08-26 19:19:12 -------- d-----w- c:\program files\Mozilla Maintenance Service
2012-08-26 19:16:28 -------- d-----w- c:\users\eric.falley\appdata\local\{ACD67781-CCBA-4F4D-B4EC-0377FA23FCF4}
2012-08-26 07:16:00 -------- d-----w- c:\users\eric.falley\appdata\local\{A27DAA31-1DBD-447D-A56F-46A1D0B1F615}
2012-08-25 19:15:36 -------- d-----w- c:\users\eric.falley\appdata\local\{4FEFF7F2-3FBF-4A43-A9E5-541B32E91BB0}
2012-08-25 08:18:33 400896 ----a-w- c:\windows\system32\srcore.dll
2012-08-25 08:16:04 67440 ----a-w- c:\windows\system32\drivers\ksecdd.sys
2012-08-25 08:15:32 2048 ----a-w- c:\windows\system32\msxml3r.dll
2012-08-25 08:15:32 1390080 ----a-w- c:\windows\system32\msxml6.dll
2012-08-25 08:15:32 1236992 ----a-w- c:\windows\system32\msxml3.dll
2012-08-25 08:14:01 805376 ----a-w- c:\windows\system32\cdosys.dll
2012-08-25 08:14:01 212992 ----a-w- c:\program files\common files\system\msadc\msadco.dll
2012-08-25 08:14:01 1019904 ----a-w- c:\program files\common files\system\ado\msado15.dll
2012-08-25 08:13:59 57344 ----a-w- c:\program files\common files\system\ado\msador15.dll
2012-08-25 08:13:59 372736 ----a-w- c:\program files\common files\system\ado\msadox.dll
2012-08-25 08:13:59 352256 ----a-w- c:\program files\common files\system\ado\msadomd.dll
2012-08-25 08:13:59 143360 ----a-w- c:\program files\common files\system\ado\msjro.dll
2012-08-25 08:13:22 317440 ----a-w- c:\windows\system32\spoolsv.exe
2012-08-25 08:13:21 492032 ----a-w- c:\windows\system32\win32spl.dll
2012-08-25 08:10:19 41984 ----a-w- c:\windows\system32\browcli.dll
2012-08-25 08:10:19 102912 ----a-w- c:\windows\system32\browser.dll
2012-08-25 08:09:54 393728 ----a-w- c:\windows\system32\drivers\bthport.sys
2012-08-25 08:08:47 769024 ----a-w- c:\windows\system32\localspl.dll
2012-08-24 15:50:20 -------- d-----w- c:\users\eric.falley\appdata\local\{26E00A4A-0EC7-40EE-8806-807FE7F32DDE}
2012-08-23 22:10:03 -------- d-----w- c:\users\eric.falley\appdata\local\{B78762B8-E046-4526-99AC-6582CB6DE605}
2012-08-23 07:57:35 -------- d-----w- c:\users\eric.falley\appdata\local\{E93C79E1-4C02-4F0E-A56F-FE4A8557D854}
2012-08-22 07:43:55 -------- d-----w- c:\users\eric.falley\appdata\local\{EB55815B-38F1-46C7-BAC7-A342F0B84402}
2012-08-21 19:45:41 -------- d-----w- c:\users\eric.falley\appdata\local\{D28D22D7-A8F2-42C8-8BDD-EBA00429FED0}
2012-08-21 07:44:14 -------- d-----w- c:\users\eric.falley\appdata\local\{CAF068BC-4FDE-4651-9283-BD76AF9FCF35}
2012-08-20 19:44:56 -------- d-----w- c:\users\eric.falley\appdata\local\{D12A5A87-3187-4364-87AA-201AB155EAD7}
2012-08-18 11:41:12 -------- d-----w- c:\users\eric.falley\appdata\local\{8D04277B-D1CF-4754-965A-7AEB14E6102C}
2012-08-18 11:40:18 -------- d-----w- c:\users\eric.falley\appdata\local\{3D2B6818-F253-44FC-B1A1-ECEF8454624A}
2012-08-17 13:06:48 -------- d-----w- c:\users\eric.falley\appdata\local\{41F25CDF-537B-42A1-B434-F6A539A40EC2}
2012-08-17 13:05:04 -------- d-----w- c:\users\eric.falley\appdata\local\{21CFA052-F152-4964-BE63-55B6B15D8670}
2012-08-17 05:11:41 -------- d-----w- c:\users\eric.falley\appdata\local\{085AD711-1805-4D69-AC48-F78AF10A1362}
2012-08-15 01:40:16 -------- d-----w- c:\users\eric.falley\appdata\local\{0E2E00FA-88F1-4C36-BB94-47A7247AE8EF}
2012-08-15 01:40:01 -------- d-----w- c:\users\eric.falley\appdata\local\{7AECCBE0-74C3-403E-B9D1-4D6ED03BEDD2}
2012-08-11 18:22:42 -------- d-----w- c:\users\eric.falley\appdata\local\{2A83ABD5-9903-4D93-B844-41DEA4D3DC07}
2012-08-11 18:22:29 -------- d-----w- c:\users\eric.falley\appdata\local\{6AFA6B0E-59B0-4991-8758-501E45A81066}
2012-08-11 02:24:18 -------- d-----w- c:\users\eric.falley\appdata\local\{86D73001-5864-4060-8461-5F6205EBB101}
2012-08-11 02:24:05 -------- d-----w- c:\users\eric.falley\appdata\local\{FA11CC8F-77B6-4A50-9601-815B4CCF5579}
2012-08-08 23:28:02 73656 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-08-08 23:28:02 697272 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-08-08 08:27:42 -------- d-----w- c:\users\eric.falley\appdata\local\{B81AEA02-A688-4B29-8B58-E5CF5DBDCE01}
2012-08-08 08:27:13 -------- d-----w- c:\users\eric.falley\appdata\local\{DC265443-2644-47EC-8BAA-89FE6FE92B90}
2012-08-07 06:40:26 -------- d-----w- c:\users\eric.falley\appdata\local\{A048DD75-EEEB-4662-9298-CB99E8BF0F3A}
2012-08-07 06:40:12 -------- d-----w- c:\users\eric.falley\appdata\local\{F9D841A8-D212-4411-B7B7-20D8B4F9F014}
2012-08-06 18:39:34 -------- d-----w- c:\users\eric.falley\appdata\local\{E23DD382-32F9-4C2D-8601-E476D627149F}
2012-08-06 18:39:15 -------- d-----w- c:\users\eric.falley\appdata\local\{9DDD10E5-B844-4DE4-8B98-A5923CBF3742}
2012-08-06 06:37:38 -------- d-----w- c:\users\eric.falley\appdata\local\{125A9B25-9120-46EB-84F7-E5C1EFFA29F8}
2012-08-06 06:37:24 -------- d-----w- c:\users\eric.falley\appdata\local\{B60F8132-B1D9-4DAF-A583-7D2F4BD38E65}
2012-08-05 18:35:06 -------- d-----w- c:\users\eric.falley\appdata\local\{AD273534-BDBC-456D-9D72-EEB170E97046}
2012-08-05 18:34:55 -------- d-----w- c:\users\eric.falley\appdata\local\{3572D33F-3363-4341-B7C5-EA7AB1ABC30C}
2012-08-05 03:27:20 -------- d-----w- c:\users\eric.falley\appdata\local\{50ED87C7-5785-468C-A1BE-588F9E89DD16}
2012-08-05 03:26:59 -------- d-----w- c:\users\eric.falley\appdata\local\{9105041D-729B-4830-A3B7-30D77D7493FF}
2012-08-03 22:35:34 -------- d-----w- c:\users\eric.falley\appdata\local\{A2F6C02F-8BDC-4F9C-A017-6AFFD22536A2}
2012-08-03 22:35:15 -------- d-----w- c:\users\eric.falley\appdata\local\{88D2609E-7046-4A7A-BC4B-A9305020D16D}
2012-08-03 05:17:32 -------- d-----w- c:\users\eric.falley\appdata\local\{9485B48F-4A76-4F0D-A137-7F54C7067406}
2012-08-03 05:17:04 -------- d-----w- c:\users\eric.falley\appdata\local\{4A0ED660-D346-4C75-BC77-79A809BBC215}
2012-07-30 16:58:02 -------- d-----w- c:\users\eric.falley\appdata\local\{4866FBEF-CC19-479E-9EFF-C19B6EA00940}
2012-07-30 16:57:41 -------- d-----w- c:\users\eric.falley\appdata\local\{F2D441F3-42C2-4A3B-9CCB-D95F31516B1A}
2012-07-30 05:04:43 -------- d-----w- c:\program files\common files\Cisco Systems
2012-07-30 05:04:38 30744 ----a-w- c:\windows\system32\SophosBootTasks.exe
2012-07-30 04:58:24 33696 ----a-w- c:\windows\system32\drivers\sdcfilter.sys
2012-07-30 04:58:17 123680 ----a-w- c:\windows\system32\drivers\savonaccess.sys
2012-07-30 04:57:43 31736 ----a-w- c:\windows\system32\drivers\skmscan.sys
2012-07-30 04:57:33 131824 ----a-w- c:\windows\system32\sdccoinstaller.dll
2012-07-30 04:56:05 -------- d-----w- c:\users\eric.falley\appdata\local\{FDA0F69E-CB8A-476E-8061-825320B1C8F6}
2012-07-30 04:55:36 -------- d-----w- c:\users\eric.falley\appdata\local\{5E8BC7B8-76DD-4E76-92C3-C84B6BB303B4}
2012-07-27 20:51:30 184248 ----a-w- c:\program files\internet explorer\plugins\nppdf32.dll
2012-07-26 04:19:50 -------- d-----w- c:\users\eric.falley\appdata\local\{5487113D-58B8-4067-BF18-46452444CF8B}
2012-07-26 04:19:29 -------- d-----w- c:\users\eric.falley\appdata\local\{A3370A87-3C8E-47D5-BDB4-E5619455A6DA}
2012-07-25 05:28:40 -------- d-----w- c:\users\eric.falley\appdata\local\{B6EB1E79-1FE9-4979-AB33-192130783716}
2012-07-25 05:28:28 -------- d-----w- c:\users\eric.falley\appdata\local\{A30A51B9-2F6F-45CF-A010-299B3117BF9D}
2012-07-24 18:43:00 -------- d-----w- c:\users\eric.falley\appdata\local\{924C423B-EF31-45DE-8A6D-F8369C8696E1}
2012-07-24 04:50:50 -------- d-----w- c:\users\eric.falley\appdata\local\{58FF9261-2420-4961-BA2A-FB43E8672B6B}
2012-07-23 05:53:43 -------- d-----w- c:\users\eric.falley\appdata\local\{55C4221E-CF06-4CDD-B011-03ABEA64A4D8}
2012-07-23 05:53:30 -------- d-----w- c:\users\eric.falley\appdata\local\{25338AF3-4EE7-45EB-8A87-5734FD85CB0B}
2012-07-22 06:34:08 -------- d-----w- c:\users\eric.falley\appdata\local\{819413E2-D25C-4E78-A027-95CB33A9838A}
2012-07-22 06:33:53 -------- d-----w- c:\users\eric.falley\appdata\local\{CB3DEB47-11C2-4732-8CA8-1BC84E63EB0A}
2012-07-22 05:18:36 -------- d-----w- c:\users\eric.falley\appdata\local\{67E795E8-68A3-456E-9A50-9D9A1605CE09}
2012-07-22 05:18:23 -------- d-----w- c:\users\eric.falley\appdata\local\{3FA94A81-BD47-489D-8B0B-860976368D91}
2012-07-13 06:08:21 -------- d-----w- c:\users\eric.falley\appdata\local\{8FD35855-1A21-4282-870C-2847AD46F304}
2012-07-13 06:08:05 -------- d-----w- c:\users\eric.falley\appdata\local\{E34E9981-7808-4B20-8D68-F4B2F871A0C6}
2012-07-12 04:02:46 -------- d-----w- c:\users\eric.falley\appdata\local\{6BB5126F-8977-43A4-9098-D3461B4C02F6}
2012-07-12 04:02:31 -------- d-----w- c:\users\eric.falley\appdata\local\{AA040995-84EA-4A23-B6EB-53CB85321255}
2012-07-11 07:06:02 -------- d-----w- c:\users\eric.falley\appdata\local\{FF71D3A9-BC67-4C36-BF44-8D2F019FB84D}
2012-07-11 07:05:51 -------- d-----w- c:\users\eric.falley\appdata\local\{6CB139DB-6F08-49EA-B453-4CBB31F68041}
2012-07-10 07:29:55 -------- d-----w- c:\users\eric.falley\appdata\local\{6574EA2E-0FE4-484E-AE76-156B0BBDBA07}
2012-07-10 07:29:43 -------- d-----w- c:\users\eric.falley\appdata\local\{D27F0A49-0327-47A3-A19F-65F63E7D2D1E}
2012-07-08 20:21:48 -------- d-----w- c:\users\eric.falley\appdata\local\{DC44D839-24B1-470D-9000-3FA3305AA580}
2012-07-08 20:21:33 -------- d-----w- c:\users\eric.falley\appdata\local\{1CE9AB37-8782-442A-94E0-0989E59BB70A}
2012-07-08 07:31:40 -------- d-----w- c:\users\eric.falley\appdata\local\{D836A183-FC5C-4298-A4CA-0C01EBBFBA0D}
2012-07-08 07:31:26 -------- d-----w- c:\users\eric.falley\appdata\local\{7871FE18-5E04-4640-A073-EFB83276BED1}
2012-07-07 18:08:42 -------- d-----w- c:\users\eric.falley\appdata\local\{0B6AA3F6-BE1D-47D3-A148-2FEF36F73142}
2012-07-07 18:08:31 -------- d-----w- c:\users\eric.falley\appdata\local\{636DE6A8-FBC6-4ED2-B47A-16069C5F5977}
2012-07-07 04:29:53 -------- d-----w- c:\users\eric.falley\appdata\local\{A09724B3-ECE3-4C0F-9467-8E871CDA50D3}
2012-07-07 04:29:39 -------- d-----w- c:\users\eric.falley\appdata\local\{0A8B3503-12EE-4091-B03D-0C1922B9DB1B}
2012-07-07 02:48:03 -------- d-----w- c:\program files\WhoCrashed
2012-07-06 16:27:55 -------- d-----w- c:\users\eric.falley\appdata\local\{ACE27A2A-21AA-4E97-94EA-8FDF17AAEB45}
2012-07-06 16:27:36 -------- d-----w- c:\users\eric.falley\appdata\local\{9176DE47-73D5-489B-949D-8942826445B8}
2012-07-06 04:25:43 -------- d-----w- c:\users\eric.falley\appdata\local\{463FBD09-29E2-4E66-93D1-A9938AF2EF2E}
2012-07-06 04:25:30 -------- d-----w- c:\users\eric.falley\appdata\local\{5692E5E6-53F6-42DF-8C66-5A9FE6FD0D67}
2012-07-05 16:25:07 -------- d-----w- c:\users\eric.falley\appdata\local\{E861E093-394A-4FE7-904F-C2FDE827BFB1}
2012-07-05 16:24:54 -------- d-----w- c:\users\eric.falley\appdata\local\{C0979965-25C6-491A-BA0D-8B9F07B52F51}
2012-07-05 04:24:21 -------- d-----w- c:\users\eric.falley\appdata\local\{3CE78903-9697-4BA0-B7D0-CA28F38F0290}
2012-07-05 04:24:01 -------- d-----w- c:\users\eric.falley\appdata\local\{EE9D7A09-8C17-49E1-92B4-5C9EA5A55308}
2012-07-04 15:38:55 -------- d-----w- c:\users\eric.falley\appdata\local\{996275E4-0EDF-4036-84A8-65F87E22B220}
2012-07-04 15:38:40 -------- d-----w- c:\users\eric.falley\appdata\local\{5C220CD3-70A7-49DB-ABE8-F996259F0EC3}
2012-07-03 19:01:03 -------- d-----w- c:\users\eric.falley\appdata\local\{3EA68238-2B5C-48DC-B8EF-C3AE9919AA2D}
2012-07-03 19:00:50 -------- d-----w- c:\users\eric.falley\appdata\local\{977B2DBE-AB9A-453B-8934-9803069A979B}
2012-07-03 05:38:12 -------- d-----w- c:\users\eric.falley\appdata\local\{DF8E466E-1C59-414B-A587-7B23206638DD}
2012-07-03 05:37:57 -------- d-----w- c:\users\eric.falley\appdata\local\{86F02D82-968C-4E43-965E-A55886ACE2D3}
2012-07-02 17:37:34 -------- d-----w- c:\users\eric.falley\appdata\local\{71D3E43B-270F-4647-A9EA-608491393CD9}
2012-07-02 17:37:22 -------- d-----w- c:\users\eric.falley\appdata\local\{E17E302C-918A-4E71-A4D4-7432D8B1901C}
2012-06-30 08:31:29 -------- d-----w- c:\users\eric.falley\appdata\local\{3E615F81-0370-41C3-A805-02DC84B62F34}
2012-06-30 08:31:11 -------- d-----w- c:\users\eric.falley\appdata\local\{7D2D58CD-380F-450E-A7D9-4C02B667ED83}
2012-06-29 09:01:01 -------- d-----w- c:\users\eric.falley\appdata\local\{76B9E97F-D57E-41C1-AAA0-0385409FD826}
2012-06-29 09:00:47 -------- d-----w- c:\users\eric.falley\appdata\local\{69C34C15-C566-46F5-8C4F-50D9DF470E9C}
2012-06-29 06:23:06 -------- d-----w- c:\programdata\GFI Software
2012-06-28 20:44:21 -------- d-----w- c:\users\eric.falley\appdata\local\{B683DE5D-2D2B-4003-9C74-18650C2B58AB}
2012-06-28 20:43:09 -------- d-----w- c:\users\eric.falley\appdata\local\{BE85BDFC-E1E0-49BE-A983-8A2D427D8310}
2012-06-26 08:35:58 1375288 ----a-w- c:\program files\common files\microsoft shared\office11\msxml5.dll
2012-06-24 21:05:50 -------- d-----w- c:\users\eric.falley\appdata\local\{FFC58BA9-A285-4EA5-8EAD-ACC3FC25BE59}
2012-06-24 21:05:34 -------- d-----w- c:\users\eric.falley\appdata\local\{F67806DF-3847-4049-A339-1769B6CEC1F5}
2012-06-24 10:24:42 -------- d-----w- c:\users\eric.falley\appdata\local\CrashDumps
2012-06-24 07:11:34 35960 ----a-r- c:\windows\system32\drivers\SymIMV.sys
2012-06-24 04:34:25 -------- d-----w- c:\users\eric.falley\appdata\local\{AC061E5A-0C4F-4E96-83C2-FD175DF6131E}
2012-06-24 04:33:52 -------- d-----w- c:\users\eric.falley\appdata\local\{1855866B-1F39-4593-A0BE-21D62242441B}
2012-06-23 22:41:05 141944 ----a-w- c:\windows\system32\drivers\SYMEVENT.SYS
2012-06-23 22:41:04 -------- d-----w- c:\program files\Symantec
2012-06-23 22:41:04 -------- d-----w- c:\program files\common files\Symantec Shared
2012-06-23 21:34:44 -------- d-----w- c:\windows\system32\drivers\NIS
2012-06-23 21:34:13 -------- d-----w- c:\program files\Norton Internet Security
2012-06-23 20:51:29 -------- d-----w- c:\programdata\Norton
2012-06-23 20:48:20 -------- d-----w- c:\programdata\NortonInstaller
2012-06-23 20:48:20 -------- d-----w- c:\program files\NortonInstaller
2012-06-23 18:10:36 -------- d-----w- c:\users\eric.falley\appdata\local\{15D9776D-1F78-4224-97A7-82064E62F01A}
2012-06-23 18:10:09 -------- d-----w- c:\users\eric.falley\appdata\local\{EE657D04-C12E-4BA5-AAE1-78F126CFBBA0}
2012-06-23 08:57:42 -------- d-----w- c:\windows\pss
2012-06-23 07:54:24 94584 ----a-w- c:\windows\system32\drivers\SbFwIm.sys
2012-06-23 07:52:54 -------- d-----w- c:\program files\Ad-Aware Antivirus
2012-06-23 07:24:05 -------- d-----w- c:\users\eric.falley\appdata\roaming\JAM Software
2012-06-23 07:22:00 -------- d-----w- c:\program files\JAM Software
2012-06-23 07:06:41 -------- d-----w- c:\users\eric.falley\appdata\local\Macromedia
2012-06-23 06:47:51 -------- d-----w- c:\programdata\IObit
2012-06-23 06:43:37 -------- d-----w- c:\users\eric.falley\appdata\roaming\IObit
2012-06-23 06:43:12 -------- d-----w- c:\program files\IObit
2012-06-23 05:59:22 -------- d-----w- c:\users\eric.falley\appdata\local\{6CF3E4F0-6D0A-4472-B45B-21978043AA95}
2012-06-23 05:59:02 -------- d-----w- c:\users\eric.falley\appdata\local\{FA5433CE-030E-4DCB-BC3A-4DC083F67A96}
2012-06-23 05:37:45 -------- d-----w- c:\windows\en
2012-06-23 05:21:02 69464 ----a-w- c:\windows\system32\XAPOFX1_3.dll
2012-06-23 05:21:00 515416 ----a-w- c:\windows\system32\XAudio2_5.dll
2012-06-23 05:20:51 453456 ----a-w- c:\windows\system32\d3dx10_42.dll
2012-06-23 05:19:15 3426072 ----a-w- c:\windows\system32\d3dx9_32.dll
2012-06-23 05:11:46 537432 ----a-w- c:\program files\common files\windows live\.cache\ad7e40201cd50fe01\DXSETUP.exe
2012-06-23 05:11:43 89944 ----a-w- c:\program files\common files\windows live\.cache\ad7e40201cd50fe01\DSETUP.dll
2012-06-23 05:11:43 1801048 ----a-w- c:\program files\common files\windows live\.cache\ad7e40201cd50fe01\dsetup32.dll
2012-06-23 04:53:52 -------- d-----w- c:\users\eric.falley\appdata\local\{E8B51C22-2FB4-45DC-93F3-02E3B2A69F7F}
2012-06-23 04:48:27 -------- d-----w- c:\users\eric.falley\appdata\local\{42BC76A0-1614-45D5-9352-4B5EB9F051F4}
2012-06-23 04:48:11 -------- d-----w- c:\users\eric.falley\appdata\local\{113A3408-F79E-4EC4-8B41-1AE00F50FA6F}
2012-06-19 02:37:11 -------- d-----w- c:\users\eric.falley\appdata\local\{3374E403-41AC-43C1-999C-D45871B379FE}
2012-06-19 02:36:47 -------- d-----w- c:\users\eric.falley\appdata\local\{B1321CC9-8E74-4E4E-A861-4358032CEB4A}
2012-06-18 15:08:43 -------- d-----w- c:\users\eric.falley\appdata\local\{F537E0F8-F74C-49B2-B4BF-D3A8D5D7DCB4}
2012-06-18 15:08:28 -------- d-----w- c:\users\eric.falley\appdata\local\{48C1C7C9-8572-465B-8F64-43CDC68B89EC}
2012-06-18 04:35:33 -------- d-----w- c:\users\eric.falley\appdata\local\{1A6927C0-A3A6-4AD2-93AB-4DFE6F3BEF1C}
2012-06-18 04:35:15 -------- d-----w- c:\users\eric.falley\appdata\local\{06294C89-2B46-44CC-B97A-1BFBF219B906}
2012-06-17 10:55:22 -------- d-----w- c:\users\eric.falley\appdata\local\{B7622AEB-A395-4D2C-890C-9C79789F6433}
2012-06-17 10:55:12 -------- d-----w- c:\users\eric.falley\appdata\local\{9856FDBD-2C76-48CA-864A-A15E1CD64021}
2012-06-16 23:34:23 -------- d-----w- c:\users\eric.falley\appdata\local\{F3D36902-73E6-425D-A365-8CE14B0AAA68}
2012-06-16 23:34:11 -------- d-----w- c:\users\eric.falley\appdata\local\{FA8E0A97-5C33-4393-876B-BFBEA2488796}
2012-06-16 12:36:40 -------- d-----w- c:\users\eric.falley\appdata\local\{967D4D59-FA68-4F5A-9272-E1EB914F0E0E}
2012-06-16 12:36:29 -------- d-----w- c:\users\eric.falley\appdata\local\{6A742616-3FDD-4E37-AC9F-D5663BCF4622}
2012-06-16 01:30:30 -------- d-----w- c:\users\eric.falley\appdata\local\{4EC0073D-95DB-441D-AED6-F969FE357C35}
2012-06-16 01:30:17 -------- d-----w- c:\users\eric.falley\appdata\local\{8E08FE63-D0AD-4684-97C1-3BD5338554C1}
2012-06-16 00:14:08 -------- d-----w- c:\users\eric.falley\appdata\local\{B3D56C76-A269-466E-B410-62E002775DC8}
2012-06-16 00:12:21 -------- d-----w- c:\users\eric.falley\appdata\local\{7459389A-D3CB-42B8-A74F-AF8472693072}
2012-06-15 20:12:21 514560 ----a-w- c:\windows\system32\qdvd.dll
2012-06-15 19:40:28 183808 ----a-w- c:\windows\system32\drivers\rdpwd.sys
2012-06-15 19:40:02 2342400 ----a-w- c:\windows\system32\msi.dll
2012-06-15 19:37:41 8192 ----a-w- c:\windows\system32\rdrmemptylst.exe
2012-06-15 19:37:39 58880 ----a-w- c:\windows\system32\rdpwsx.dll
2012-06-15 19:37:39 129536 ----a-w- c:\windows\system32\rdpcorekmts.dll
2012-06-15 19:37:09 164352 ----a-w- c:\windows\system32\profsvc.dll
2012-06-14 15:54:03 -------- d-----w- c:\users\eric.falley\appdata\local\{E7738BF7-4BD6-487D-BC9D-5E186642C268}
2012-06-14 15:53:22 -------- d-----w- c:\users\eric.falley\appdata\local\{318E2359-4F8A-4A8C-9E42-07D8C62F0A3E}
2012-06-12 18:34:24 499088 ----a-w- c:\windows\system32\HPWia2_PS7520.dll
2012-06-12 18:34:24 1979280 ----a-w- c:\windows\system32\HPScanTRDrv_PS7520.dll
2012-06-12 17:59:54 2216336 ----a-w- c:\windows\system32\hpinkinsBC11.exe
2012-06-12 11:34:22 268688 ----a-w- c:\windows\system32\hpinkstsBC11LM.dll
2012-06-12 11:34:20 220560 ----a-w- c:\windows\system32\hpinkcoiBC11.dll
2012-06-12 04:33:20 17323640 ----a-w- c:\program files\common files\microsoft shared\office12\MSO.DLL
2012-06-12 00:31:19 -------- d-----w- c:\programdata\AVAST Software
2012-06-12 00:31:19 -------- d-----w- c:\program files\AVAST Software
2012-06-11 03:16:44 118384 ----a-w- c:\program files\common files\microsoft shared\textconv\MSCONV97.DLL
2012-06-08 06:36:46 -------- d-----w- c:\users\eric.falley\appdata\local\{3A28896F-D989-4CEE-823C-4D16FCF6DBF8}
2012-06-08 06:36:23 -------- d-----w- c:\users\eric.falley\appdata\local\{09322E73-7A32-4412-B44D-49FDD370F82A}
2012-06-07 06:36:59 -------- d-----w- c:\users\eric.falley\appdata\local\{2727D054-D9AF-42C2-825E-9CB8EBEBF60B}
2012-06-07 06:36:33 -------- d-----w- c:\users\eric.falley\appdata\local\{6CCAD17D-98AF-4EE4-B76E-5D12545F38C7}
2012-06-07 01:59:42 1070152 ----a-w- c:\windows\system32\MSCOMCTL.OCX
2012-06-06 16:06:51 -------- d-----w- c:\users\eric.falley\appdata\local\{5D8A59B7-938F-4599-BED5-14DF247D4BBF}
2012-06-06 16:06:23 -------- d-----w- c:\users\eric.falley\appdata\local\{14382453-A611-47EB-8241-B5812CECADFD}
2012-06-05 22:37:54 -------- d-----w- c:\users\eric.falley\appdata\local\{4B08055E-F1E5-4D11-91E1-B2B280E1CF68}
2012-06-05 22:37:26 -------- d-----w- c:\users\eric.falley\appdata\local\{AC20E81E-8C9D-4DC6-9AFD-FFF5208840A7}
2012-06-05 16:22:36 -------- d-----w- c:\users\eric.falley\appdata\local\{4CCDAF9B-F0BD-4E99-8D53-CC64F4016B3E}
2012-06-05 16:22:23 -------- d-----w- c:\users\eric.falley\appdata\local\{3C5AD089-E713-44AA-B8A3-FB182CF42809}
2012-06-05 06:38:45 -------- d-----w- c:\users\eric.falley\appdata\local\{58CA9CD8-32D2-49C1-8115-5149880346D3}
2012-06-05 06:38:32 -------- d-----w- c:\users\eric.falley\appdata\local\{11E40988-AF80-4EB6-A367-8F4C8DF962AE}
2012-06-04 06:36:01 -------- d-----w- c:\users\eric.falley\appdata\local\{72CA5DC9-B382-4F74-820E-66CBA57C9B8A}
2012-06-04 06:35:45 -------- d-----w- c:\users\eric.falley\appdata\local\{DF5B13F9-B620-4651-9743-FE9CC8EC4047}
2012-06-04 06:07:14 -------- d-----w- c:\users\eric.falley\appdata\local\{82E724F6-AECF-4649-BED5-438A833DB4C3}
2012-06-04 06:06:58 -------- d-----w- c:\users\eric.falley\appdata\local\{8ABE1663-7A98-4DC3-978E-A1A08248909A}
2012-05-28 06:41:00 -------- d-----w- c:\programdata\Age of Empires 3
2012-05-28 06:28:02 -------- d-----w- c:\users\eric.falley\appdata\local\{E7E84C4D-FD08-4AC4-8D95-919EB57992BA}
2012-05-28 06:27:33 -------- d-----w- c:\users\eric.falley\appdata\local\{B7309858-A6F8-413E-86B1-215151958149}
2012-05-28 04:24:34 -------- d-----w- c:\users\eric.falley\appdata\local\{719B3884-3ECD-452A-B106-598D9EAC6429}
2012-05-28 04:24:22 -------- d-----w- c:\users\eric.falley\appdata\local\{39982F8F-F089-4465-A1EC-B092C47CA64F}
2012-05-27 18:38:16 -------- d-----w- c:\users\eric.falley\appdata\local\{64D86EFE-AB68-49DE-8CC6-77B40AE89F95}
2012-05-27 18:37:59 -------- d-----w- c:\users\eric.falley\appdata\local\{78A25364-7555-4929-9210-98A1638F6999}
2012-05-26 23:35:59 -------- d-----w- c:\users\eric.falley\appdata\local\{B2B8B281-3E0E-40D6-B490-3D76A2A9D670}
2012-05-26 23:18:32 -------- d-----w- c:\users\eric.falley\appdata\local\{C992D350-AA0E-45F6-882F-1E474BA3587A}
2012-05-26 23:07:47 -------- d-----w- c:\users\eric.falley\appdata\local\{1B1D81C3-7B0C-4239-9868-5B812499165E}
2012-05-26 20:19:39 -------- d-----w- c:\users\eric.falley\appdata\local\{EB73FA44-DF28-4A9F-8152-A69AFEEB340F}
2012-05-26 09:01:13 -------- d-----w- c:\program files\MSXML 4.0
2012-05-25 06:33:45 2297552 ----a-w- c:\windows\system32\d3dx9_26.dll
2012-05-20 21:26:14 -------- d-----w- c:\users\eric.falley\appdata\local\{234C4BF5-562A-46C4-AEE1-F00B550E3C9A}
2012-05-20 21:25:59 -------- d-----w- c:\users\eric.falley\appdata\local\{B8FB99FA-9A48-4D7D-9750-2BEEA1AEBECD}
2012-05-20 09:28:56 936960 ----a-w- c:\program files\common files\microsoft shared\ink\journal.dll
2012-05-20 09:28:54 1221632 ----a-w- c:\program files\windows journal\NBDoc.DLL
2012-05-20 09:28:49 989184 ----a-w- c:\program files\windows journal\JNTFiltr.dll
2012-05-20 09:28:48 969216 ----a-w- c:\program files\windows journal\JNWDRV.dll
2012-05-20 09:08:30 56176 ----a-w- c:\windows\system32\drivers\partmgr.sys
2012-05-20 09:06:35 1077248 ----a-w- c:\windows\system32\DWrite.dll
2012-05-15 08:17:34 2594632 ----a-w- c:\program files\common files\microsoft shared\vba\vba6\VBE6.DLL
2012-05-10 14:22:42 -------- d-----w- c:\users\eric.falley\appdata\local\{DB1B1A1F-1324-406F-9769-3C003213B87A}
2012-05-10 14:20:21 -------- d-----w- c:\users\eric.falley\appdata\local\{05A18A4F-1A3E-4C24-AC86-C53CC39FCA67}
2012-05-07 05:28:06 -------- d-----w- c:\users\eric.falley\appdata\local\{F5EF9B23-AEF1-46AC-8126-1ED4E087D3B3}
2012-05-07 05:27:49 -------- d-----w- c:\users\eric.falley\appdata\local\{360A3D02-BE6D-467D-88B7-4E062BA4A906}
2012-05-05 00:32:37 -------- d-----w- c:\users\eric.falley\appdata\local\{ACE89587-258B-418F-9F01-8464225DD9B4}
2012-05-01 16:15:57 -------- d-----w- c:\users\eric.falley\appdata\local\Microsoft Games
2012-04-27 07:17:03 -------- d-----w- c:\users\eric.falley\appdata\local\{68A2F41D-3916-4E9B-B9FF-8DB7D0A69EC5}
2012-04-27 07:16:33 -------- d-----w- c:\users\eric.falley\appdata\local\{16052A2F-4E0D-4A82-8347-E0CD325940DE}
2012-04-27 06:41:17 -------- d-----w- c:\users\eric.falley\appdata\local\{D4DD82B3-9560-4EFE-A44D-E95F26E2DD3B}
2012-04-27 06:40:03 -------- d-----w- c:\users\eric.falley\appdata\local\{A3C3B47F-9AFC-4712-BF1F-76275FDF7C8B}
2012-04-27 02:30:22 -------- d-----w- c:\users\eric.falley\appdata\local\{87F5CC7A-993E-4E98-B275-A308855510A3}
2012-04-27 02:29:53 -------- d-----w- c:\users\eric.falley\appdata\local\{8C807102-FC92-4FCF-86DD-7C7C8C41471D}
2012-04-24 06:46:06 299008 ----a-w- c:\windows\system32\hpcpn130.dll
2012-04-24 06:41:50 189952 ----a-w- c:\windows\system32\hpmml130.dll
2012-04-24 06:41:50 151040 ----a-w- c:\windows\system32\hpmpm081.dll
2012-04-24 06:41:36 128512 ----a-w- c:\windows\system32\hpmtp130.dll
2012-04-24 06:41:34 56320 ----a-w- c:\windows\system32\hpmpw081.dll
2012-04-24 06:41:34 128000 ----a-w- c:\windows\system32\hpmja130.dll
2012-04-24 06:41:32 62976 ----a-w- c:\windows\system32\hpmco130.dll
2012-04-24 06:41:24 97280 ----a-w- c:\windows\system32\hpcjpm.dll
2012-04-23 07:04:43 -------- d-----w- c:\users\eric.falley\appdata\local\{2F3978D8-0C50-4181-8577-00870135245A}
2012-04-23 07:04:32 -------- d-----w- c:\users\eric.falley\appdata\local\{3BCE6732-B916-4D99-91C7-18D7E1E1985D}
2012-04-23 02:23:59 -------- d-----w- c:\users\eric.falley\appdata\local\{B9B39761-F0C5-4531-A091-002BD24647D3}
2012-04-23 02:23:49 -------- d-----w- c:\users\eric.falley\appdata\local\{8BB7E26F-9FA6-4CAE-BEFC-A700782E8FC5}
2012-04-22 14:24:03 -------- d-----w- c:\users\eric.falley\appdata\local\{CC9E7558-501F-4EDC-A95D-F80514BD064E}
2012-04-21 07:08:54 -------- d-----w- c:\users\eric.falley\appdata\local\{3AD5F561-C45A-4D8C-BCFA-79B2E9B984A2}
2012-04-21 07:08:42 -------- d-----w- c:\users\eric.falley\appdata\local\{4CF0A26D-5687-4725-BC83-8ED8402A98F4}
2012-04-20 13:27:37 -------- d-----w- c:\users\eric.falley\appdata\local\{594E45DB-F735-4FAD-B00A-F49158CCDA2D}
2012-04-20 13:27:26 -------- d-----w- c:\users\eric.falley\appdata\local\{D1462298-D41C-4EB1-821E-CA56A986B2EB}
2012-04-19 12:02:16 -------- d-----w- c:\users\eric.falley\appdata\local\{A82CFD09-BE27-4DF0-9099-DC6C14FF37C2}
2012-04-19 12:02:05 -------- d-----w- c:\users\eric.falley\appdata\local\{F516AE03-997B-4BFA-8F4C-04E1A34A9965}
2012-04-19 07:07:25 -------- d-----w- c:\users\eric.falley\appdata\local\{51F46870-7927-494E-BE48-119E6E6EFC2D}
2012-04-19 07:07:14 -------- d-----w- c:\users\eric.falley\appdata\local\{54A7E029-70DC-4107-8859-D42600309771}
2012-04-18 07:10:25 -------- d-----w- c:\users\eric.falley\appdata\local\{04005C79-1B08-4B42-9289-308D7D99A698}
2012-04-18 07:10:13 -------- d-----w- c:\users\eric.falley\appdata\local\{165E9902-E1F8-4D2D-B867-E11DD76879BB}
2012-04-17 07:06:49 -------- d-----w- c:\users\eric.falley\appdata\local\{2BD88F53-AEAE-4ACE-B82A-64E8AC29679B}
2012-04-17 07:06:39 -------- d-----w- c:\users\eric.falley\appdata\local\{0F58C80F-938E-4566-88CC-97BC2FA3CF8A}
2012-04-16 07:06:38 -------- d-----w- c:\users\eric.falley\appdata\local\{3B962DBD-02FB-4C33-98F0-98A14CA0C568}
2012-04-16 07:06:26 -------- d-----w- c:\users\eric.falley\appdata\local\{63DC4361-C7E5-43DC-B525-9F9D7E77EFBB}
2012-04-16 04:56:08 -------- d-----w- c:\users\eric.falley\appdata\local\{E537FA9A-1F5B-4C93-A9BF-C78D26F28612}
2012-04-16 04:55:53 -------- d-----w- c:\users\eric.falley\appdata\local\{A1257627-90A7-45DE-BBB0-40F21EFB5BA7}
2012-04-15 17:48:22 -------- d-----w- c:\users\eric.falley\appdata\local\{A855D7ED-FE21-4AF7-9DF3-EDBFB6AB7C8B}
2012-04-15 17:48:03 -------- d-----w- c:\users\eric.falley\appdata\local\{9DCC9725-51B0-4B6E-9E93-8AB2EB963A0F}
2012-04-15 09:00:30 -------- d-----w- c:\users\eric.falley\appdata\local\{066A79A3-C2A4-4DD8-AF91-7D2DF3927109}
2012-04-15 09:00:17 -------- d-----w- c:\users\eric.falley\appdata\local\{25CD3A00-ED43-4696-804E-0E31C47F96B2}
2012-04-15 07:07:19 -------- d-----w- c:\users\eric.falley\appdata\local\{60F44C4D-820D-4EE4-A965-734C9F9CEBC8}
2012-04-15 07:06:59 -------- d-----w- c:\users\eric.falley\appdata\local\{9ACE69EE-68CA-42C6-87B4-3FDD1284B45C}
2012-04-15 02:18:17 -------- d-----w- c:\program files\MeadCo Neptune
2012-04-14 03:27:40 -------- d-----w- c:\users\eric.falley\appdata\local\{ECB1592A-FF12-4090-B7E4-8D5188DADBB1}
2012-04-14 03:27:23 -------- d-----w- c:\users\eric.falley\appdata\local\{A29B7BD7-531D-47A5-8138-E0051BE802B3}
2012-04-13 19:30:58 -------- d-----w- c:\users\eric.falley\appdata\local\{016F0F7D-56C3-40C1-B918-8A964AE5B94E}
2012-04-13 19:30:39 -------- d-----w- c:\users\eric.falley\appdata\local\{58D4F0F5-1263-49F4-8BB3-9B374249C483}
2012-04-13 08:02:58 5120 ----a-w- c:\windows\system32\wmi.dll
2012-04-13 08:02:58 19824 ----a-w- c:\windows\system32\drivers\fs_rec.sys
2012-04-13 08:02:58 159232 ----a-w- c:\windows\system32\imagehlp.dll
2012-04-12 07:07:33 -------- d-----w- c:\users\eric.falley\appdata\local\{FC8DEF71-CF55-49E7-BFE9-AC6003062C84}
2012-04-12 07:07:13 -------- d-----w- c:\users\eric.falley\appdata\local\{EC712AEC-3283-4598-B11A-CF67365ACB59}
2012-04-03 05:11:57 -------- d-----w- c:\users\eric.falley\appdata\local\{31EFC535-B0EC-4D58-BCE3-37938FFBC570}
2012-04-02 17:12:14 -------- d-----w- c:\users\eric.falley\appdata\local\{B35732FF-E9BD-461A-89ED-29EF77786BF0}
2012-04-02 17:12:00 -------- d-----w- c:\users\eric.falley\appdata\local\{822FB9C2-DC33-4AEC-8D74-46954C0677F4}
2012-04-02 05:12:25 -------- d-----w- c:\users\eric.falley\appdata\local\{6DDB9F76-2608-42C8-9A16-D3F5B2FD7415}
2012-04-02 05:12:13 -------- d-----w- c:\users\eric.falley\appdata\local\{031F602F-2AAB-479E-A5D6-F93488D7FDE1}
2012-04-01 17:12:48 -------- d-----w- c:\users\eric.falley\appdata\local\{C8E2572F-0925-4E2A-B860-4E3B4E007715}
2012-04-01 17:12:38 -------- d-----w- c:\users\eric.falley\appdata\local\{9DCD5DE8-AF5A-40DE-9AE3-97E83CFFE675}
2012-04-01 04:43:42 -------- d-----w- c:\users\eric.falley\appdata\local\{F604CED0-09E9-4185-A7A3-03E5A843F46C}
2012-04-01 04:43:29 -------- d-----w- c:\users\eric.falley\appdata\local\{15B191BB-FA0F-4439-8FDA-1CEC330934EE}
2012-03-31 16:43:55 -------- d-----w- c:\users\eric.falley\appdata\local\{4828976E-B1C4-4D59-A9B4-409341E6BAAD}
2012-03-31 16:43:43 -------- d-----w- c:\users\eric.falley\appdata\local\{3A42CFFE-1F4A-46B2-808B-CF27A0759893}
2012-03-31 02:24:55 -------- d-----w- c:\users\eric.falley\appdata\local\{A6605E30-2233-4BCD-9307-9E4CFDF87484}
2012-03-31 02:24:43 -------- d-----w- c:\users\eric.falley\appdata\local\{08B12182-E8A3-489A-991B-9AF52ED8AD22}
2012-03-31 02:08:28 -------- d-----w- c:\users\eric.falley\appdata\local\{2E078407-9366-401B-8CDF-965511F83536}
2012-03-31 02:07:59 -------- d-----w- c:\users\eric.falley\appdata\local\{D9C26704-CF19-4074-9C4F-007991835751}
2012-03-31 01:41:41 -------- d-----w- c:\users\eric.falley\appdata\local\{BA4B56EC-C1C5-4100-8EBD-F83B91F03E58}
2012-03-31 01:41:22 -------- d-----w- c:\users\eric.falley\appdata\local\{AA8606AF-78A0-41CE-B9F9-C376EDBE166F}
2012-03-30 13:48:15 -------- d-----w- c:\users\eric.falley\appdata\local\{D8898BDA-EF8D-4C1B-94EC-E5519E897463}
2012-03-30 13:48:03 -------- d-----w- c:\users\eric.falley\appdata\local\{18CEB55B-BD69-449E-80D4-E2B8BC1C2A2C}
2012-03-30 01:04:44 -------- d-----w- c:\users\eric.falley\appdata\local\{7D6D2FF9-D097-49B7-A752-6F981174E6E0}
2012-03-30 01:04:18 -------- d-----w- c:\users\eric.falley\appdata\local\{948B2AA4-369D-4FB4-8254-5A10846A7B3E}
2012-03-29 12:49:04 -------- d-----w- c:\users\eric.falley\appdata\local\{43BCF16D-2CD4-42FB-91AA-E3753838FC7B}
2012-03-29 00:35:30 -------- d-----w- c:\users\eric.falley\appdata\local\{95ABD9ED-B9D2-40DB-AB98-2535EA54DDB6}
2012-03-28 17:44:04 372736 ----a-w- c:\windows\system32\hpmprein.dll
2012-03-28 08:46:09 -------- d-----w- c:\users\eric.falley\appdata\local\{CD64A8AF-6219-4E58-8ABE-87226DC91329}
2012-03-28 08:45:57 -------- d-----w- c:\users\eric.falley\appdata\local\{E0312C37-9F48-45BA-B8DB-9A9ED162B189}
2012-03-27 08:45:49 -------- d-----w- c:\users\eric.falley\appdata\local\{8FE10666-F964-472D-9A8D-2FA5D6B3A39A}
2012-03-27 08:45:40 -------- d-----w- c:\users\eric.falley\appdata\local\{8C0D3D6F-5F2F-4A53-BBA0-F15B5DE49303}
2012-03-26 19:33:09 -------- d-----w- c:\users\eric.falley\appdata\local\{CB4EDF6F-C9C4-4B82-A2D7-E3E42F058EA0}
2012-03-26 19:32:56 -------- d-----w- c:\users\eric.falley\appdata\local\{297672B8-4133-4FC6-A828-68C8D95830F2}
2012-03-26 07:11:37 -------- d-----w- c:\users\eric.falley\appdata\local\{2D22A9FA-4082-4944-A768-0CF0FADE6707}
2012-03-26 07:11:24 -------- d-----w- c:\users\eric.falley\appdata\local\{B566C045-D309-4C86-AC3C-4344318EDAFA}
2012-03-25 19:11:03 -------- d-----w- c:\users\eric.falley\appdata\local\{87FA26A4-BE7A-42DA-8239-3D129D8B4DC8}
2012-03-25 19:10:51 -------- d-----w- c:\users\eric.falley\appdata\local\{8E6CB097-1FB0-445E-B619-BE4F29616FB6}
2012-03-25 07:10:33 -------- d-----w- c:\users\eric.falley\appdata\local\{2884555B-47AF-40D5-B248-E6C36FDB40A3}
2012-03-25 07:10:22 -------- d-----w- c:\users\eric.falley\appdata\local\{9B034C62-7F87-4CD4-B7E5-AED4BDF9B774}
2012-03-24 19:08:25 -------- d-----w- c:\users\eric.falley\appdata\local\{270A31AD-34B3-45E7-B0AD-DEE39E58DE04}
2012-03-24 19:08:14 -------- d-----w- c:\users\eric.falley\appdata\local\{DACAC467-EF80-4988-A770-E85BC52B9B99}
2012-03-24 07:07:55 -------- d-----w- c:\users\eric.falley\appdata\local\{A3562519-F446-43A0-8468-240E2FA71900}
2012-03-24 07:07:44 -------- d-----w- c:\users\eric.falley\appdata\local\{53240457-7991-4200-B88E-993EF801FB0D}
2012-03-23 19:08:24 -------- d-----w- c:\users\eric.falley\appdata\local\{8051AAF6-874C-4B98-B1EF-07761C3C1DFF}
2012-03-23 02:50:48 -------- d-----w- c:\users\eric.falley\appdata\local\{C91F8F11-D60A-404E-9A2E-2B41EB865894}
2012-03-20 15:10:39 -------- d-----w- c:\users\eric.falley\appdata\local\{81718643-5527-417D-BFEA-ABED41CE4BC5}
2012-03-20 05:10:14 -------- d-----w- c:\users\eric.falley\appdata\local\{CBAA8510-99DF-4722-A778-26362A239574}
2012-03-18 22:40:41 -------- d-----w- c:\users\eric.falley\appdata\local\{C410318D-AFF8-4556-A1F3-98A472C443A2}
2012-03-17 05:24:22 -------- d-----w- c:\users\eric.falley\appdata\local\{6DB4D4A3-5AE0-47DE-BEBA-F6E01ACD7271}
2012-03-16 23:51:39 -------- d-----w- c:\users\eric.falley\appdata\local\{158240E1-18B3-46C1-8751-D027A85C8D59}
2012-03-15 22:30:26 -------- d-----w- c:\users\eric.falley\appdata\local\{2870728D-5A6F-486F-8646-A600C1ABB49D}
2012-03-15 22:30:14 -------- d-----w- c:\users\eric.falley\appdata\local\{E4CD12B6-3F49-40C2-9C3D-7DBD29D57E21}
2012-03-15 08:02:49 826880 ----a-w- c:\windows\system32\rdpcore.dll
2012-03-15 08:02:48 24576 ----a-w- c:\windows\system32\drivers\tdtcp.sys
2012-03-15 07:26:45 -------- d-----w- c:\users\eric.falley\appdata\local\{7FDADBDE-355D-4B8A-B2A6-8FB2C3F918DE}
2012-03-15 07:26:34 -------- d-----w- c:\users\eric.falley\appdata\local\{A3D174F7-0DE7-4788-9E61-327327EEE956}
2012-03-14 19:25:02 -------- d-----w- c:\users\eric.falley\appdata\local\{007EC161-9799-4994-A19D-705590B6EBD4}
2012-03-14 19:24:44 -------- d-----w- c:\users\eric.falley\appdata\local\{FAB92831-93C1-451C-BAC2-E774213D5C92}
2012-03-14 03:05:19 -------- d-----w- c:\users\eric.falley\appdata\local\{165CDB18-4536-40E1-AD34-FE84B04A34A1}
2012-03-14 03:05:07 -------- d-----w- c:\users\eric.falley\appdata\local\{0B5F1A63-92D2-417F-ACB6-E70C1518AF1B}
2012-03-13 15:04:41 -------- d-----w- c:\users\eric.falley\appdata\local\{CC955373-B877-4CFB-8C17-965BB15E6202}
2012-03-13 15:04:30 -------- d-----w- c:\users\eric.falley\appdata\local\{13266688-F33B-48AB-80EA-2421A3E05019}
2012-03-12 22:07:16 -------- d-----w- c:\users\eric.falley\appdata\local\{5C14E518-2BA1-4D3A-941E-CAB917F20500}
2012-03-12 22:07:04 -------- d-----w- c:\users\eric.falley\appdata\local\{98082B79-4852-47CC-8499-55B83104DF86}
2012-03-12 10:06:33 -------- d-----w- c:\users\eric.falley\appdata\local\{5C5F91CA-46B2-407E-9F60-81C76995FA5D}
2012-03-12 10:06:22 -------- d-----w- c:\users\eric.falley\appdata\local\{DB696DD1-2891-43A7-8E71-59E2590AFF4B}
2012-03-11 21:15:20 -------- d-----w- c:\users\eric.falley\appdata\local\{EEFBA5A9-D51C-418D-927C-B305CBCD2DA1}
2012-03-11 21:15:09 -------- d-----w- c:\users\eric.falley\appdata\local\{B2182569-B772-44EF-B73F-B4C024DF75CD}
2012-03-11 09:14:49 -------- d-----w- c:\users\eric.falley\appdata\local\{48614F00-B818-4E0F-B2D4-C5CC43859ECC}
2012-03-11 09:14:38 -------- d-----w- c:\users\eric.falley\appdata\local\{C204E182-17CD-4AFD-AA71-BC647CBBEFE1}
2012-03-10 21:14:19 -------- d-----w- c:\users\eric.falley\appdata\local\{42A3DE16-ED91-44B9-AD1F-6FF666147914}
2012-03-10 21:14:04 -------- d-----w- c:\users\eric.falley\appdata\local\{93D3C17B-30B0-414E-9DAE-1F2A53BFCFC3}
2012-03-10 09:12:34 -------- d-----w- c:\users\eric.falley\appdata\local\{8BB23263-AC69-4245-BFA0-FD3096922F4A}
2012-03-10 09:11:51 -------- d-----w- c:\users\eric.falley\appdata\local\{4DDF85DA-298A-4318-959B-5C07D779D2C9}
2012-03-09 15:23:56 -------- d-----w- c:\users\eric.falley\appdata\local\{B248E8B6-C725-4C9D-957C-55761DB5CB52}
2012-03-09 15:23:29 -------- d-----w- c:\users\eric.falley\appdata\local\{4DA8C289-6177-410A-9D9D-730AE59AA496}
2012-03-09 00:50:28 49016 ----a-w- c:\windows\system32\sirenacm.dll
2012-03-09 00:37:20 302448 ----a-w- c:\windows\WLXPGSS.SCR
2012-03-08 21:22:32 -------- d-----w- c:\users\eric.falley\appdata\local\{D3519C1E-FA1B-406D-B80E-6CDB415EF73D}
2012-03-08 21:22:03 -------- d-----w- c:\users\eric.falley\appdata\local\{D05C01C9-3CC7-4EE4-9B43-F4BD9B88D139}
2012-03-08 08:26:35 -------- d-----w- c:\users\eric.falley\appdata\local\{31633572-C6A3-4D35-B57A-BA841E039B80}
2012-03-08 08:26:25 -------- d-----w- c:\users\eric.falley\appdata\local\{7607B11F-105D-406B-9F46-18D26B0FF4D2}
2012-03-07 20:25:59 -------- d-----w- c:\users\eric.falley\appdata\local\{F26D8F36-F4A7-4814-B797-D89A585FE2A1}
2012-03-07 20:25:48 -------- d-----w- c:\users\eric.falley\appdata\local\{6727E564-1920-4ACB-82CB-CFE339B93286}
2012-03-07 06:17:47 -------- d-----w- c:\users\eric.falley\appdata\local\{6A75F441-873D-4768-88CA-0F2BC0972C58}
2012-03-07 06:17:36 -------- d-----w- c:\users\eric.falley\appdata\local\{E1DD924D-6F8E-4C77-AA7A-71CD02FD9C14}
2012-03-06 18:17:19 -------- d-----w- c:\users\eric.falley\appdata\local\{70E04109-16A9-4900-9328-36DD7622C21F}
2012-03-06 18:17:08 -------- d-----w- c:\users\eric.falley\appdata\local\{C249ACE4-8F38-4BF2-8DA0-D6A0A2557416}
2012-03-06 06:16:48 -------- d-----w- c:\users\eric.falley\appdata\local\{73F36B84-6E34-4F80-BEDE-32B6DA1A4B5F}
2012-03-06 06:16:36 -------- d-----w- c:\users\eric.falley\appdata\local\{48D0EC1F-2477-4732-9031-6B4D994CCE9B}
2012-03-05 18:16:09 -------- d-----w- c:\users\eric.falley\appdata\local\{CDB774A5-9E62-44B5-AFE1-D52288DC9CD0}
2012-03-05 18:15:54 -------- d-----w- c:\users\eric.falley\appdata\local\{94C98371-8B67-4E95-8AA2-BE9D8B5B961B}
2012-03-05 06:13:26 -------- d-----w- c:\users\eric.falley\appdata\local\{A9ECFD7E-E4A8-411C-BC56-BEBCA8F699C6}
2012-03-04 18:13:07 -------- d-----w- c:\users\eric.falley\appdata\local\{57B59E71-196C-4890-AC55-E3F75EAD5A22}
2012-03-04 06:12:49 -------- d-----w- c:\users\eric.falley\appdata\local\{941FB71D-90FC-44EF-9208-62038D58BF12}
2012-03-04 06:12:37 -------- d-----w- c:\users\eric.falley\appdata\local\{E0958B21-B907-489B-8CF7-A386085FC8D5}
2012-03-03 18:12:02 -------- d-----w- c:\users\eric.falley\appdata\local\{54DBACEA-7AA1-4234-AFB0-716B4AA59B80}
2012-03-03 18:11:51 -------- d-----w- c:\users\eric.falley\appdata\local\{437183C1-0C16-45DF-822F-142F97384074}
2012-03-03 06:11:18 -------- d-----w- c:\users\eric.falley\appdata\local\{594BF4D7-2FA1-45A0-B75F-2364E5AC4DEC}
2012-03-03 06:11:07 -------- d-----w- c:\users\eric.falley\appdata\local\{493DBD75-968B-41B3-B63C-2B03934F80C1}
2012-03-02 18:10:38 -------- d-----w- c:\users\eric.falley\appdata\local\{A03612E4-54BB-43CB-B95A-F3A7CE5EAF3F}
2012-03-02 18:10:27 -------- d-----w- c:\users\eric.falley\appdata\local\{7507ADEB-AAA9-4696-9773-9A570CA47A76}
2012-03-01 19:08:48 -------- d-----w- c:\users\eric.falley\appdata\local\{FAAFF3F1-4444-4CA0-8908-C4C132A740A0}
2012-03-01 19:08:38 -------- d-----w- c:\users\eric.falley\appdata\local\{672AB13E-AB0B-4925-AA01-CA3B18DBCD71}
2012-03-01 07:07:38 -------- d-----w- c:\users\eric.falley\appdata\local\{B3A528EC-D512-48AA-BCAD-74D624512682}
2012-03-01 07:07:26 -------- d-----w- c:\users\eric.falley\appdata\local\{D05039A6-7DD4-4402-A588-8BFD67A0191E}
2012-02-29 18:24:25 -------- d-----w- c:\users\eric.falley\appdata\local\{7C3D269F-B585-4625-8591-61AE42694629}
2012-02-29 18:23:55 -------- d-----w- c:\users\eric.falley\appdata\local\{A6BB3F27-0F77-4607-9406-F135DE5039A0}
2012-02-29 05:00:46 -------- d-----w- c:\users\eric.falley\appdata\local\{139CCF01-233E-49E8-AD41-E27C5BB067BF}
2012-02-28 16:53:32 -------- d-----w- c:\users\eric.falley\appdata\local\{C9C82B04-CF97-49FC-8408-64756FB8963F}
2012-02-28 16:53:20 -------- d-----w- c:\users\eric.falley\appdata\local\{870557B5-8B54-4D07-AEAA-E982A4432F85}
2012-02-27 20:41:56 -------- d-----w- c:\users\eric.falley\appdata\local\{5510C6EC-C602-48B9-951E-EB6F97E58E05}
2012-02-27 20:41:44 -------- d-----w- c:\users\eric.falley\appdata\local\{1D3866D7-4018-4002-802C-1376DD61820E}
2012-02-27 07:55:21 -------- d-----w- c:\users\eric.falley\appdata\local\{10C76E36-6046-4F2C-8489-26042123CA76}
2012-02-27 07:55:11 -------- d-----w- c:\users\eric.falley\appdata\local\{55C8B087-7B13-404F-8CCA-2E8CB0434B6E}
2012-02-26 19:54:54 -------- d-----w- c:\users\eric.falley\appdata\local\{0F41584F-D106-44F1-95FB-40F9855E0A73}
2012-02-26 19:54:43 -------- d-----w- c:\users\eric.falley\appdata\local\{A15EBE86-006F-4335-BA3E-5570B736A350}
2012-02-26 07:54:26 -------- d-----w- c:\users\eric.falley\appdata\local\{CD8318A4-801A-4B1B-84ED-2F29385007B9}
2012-02-26 07:54:14 -------- d-----w- c:\users\eric.falley\appdata\local\{397A6761-30A5-443F-BA28-9EE1CAED83DF}
2012-02-25 19:53:33 -------- d-----w- c:\users\eric.falley\appdata\local\{EC6C022F-49DC-4350-A588-440AB8309D6B}
2012-02-25 19:53:16 -------- d-----w- c:\users\eric.falley\appdata\local\{1252A2CC-71C5-4039-8587-87772FCCBE1A}
2012-02-25 07:52:48 -------- d-----w- c:\users\eric.falley\appdata\local\{BE8F9FCA-DAC5-40C3-BFF2-296B7F2C7ECD}
2012-02-25 07:52:37 -------- d-----w- c:\users\eric.falley\appdata\local\{86A7A432-4409-4661-A4C4-FCA6663A6EF4}
2012-02-24 19:25:59 -------- d-----w- c:\users\eric.falley\appdata\local\{EB9F8B18-DBE1-4219-ACAC-7D146E199D9C}
2012-02-24 19:25:48 -------- d-----w- c:\users\eric.falley\appdata\local\{5B2DF75C-760A-4ECC-B2E4-4D60CB015F70}
2012-02-24 08:30:48 1618216 ----a-w- c:\program files\common files\microsoft shared\office12\OGL.DLL
2012-02-24 07:25:29 -------- d-----w- c:\users\eric.falley\appdata\local\{A5DAD999-3919-4F9F-B3A8-F04551B40341}
2012-02-24 07:25:18 -------- d-----w- c:\users\eric.falley\appdata\local\{2E881D66-7658-474B-BFBB-979FC8AB13A0}
2012-02-23 19:22:41 -------- d-----w- c:\users\eric.falley\appdata\local\{A3D0D698-9F20-486D-9578-5B8B964C1074}
2012-02-23 19:22:20 -------- d-----w- c:\users\eric.falley\appdata\local\{47C77D96-E7C2-4AD4-A413-D964D5C83AFA}
2012-02-23 06:14:21 -------- d-----w- c:\users\eric.falley\appdata\local\{4C674B03-48EA-4C7B-A454-A29B935D2F27}
2012-02-23 06:14:09 -------- d-----w- c:\users\eric.falley\appdata\local\{09A633DC-F9D4-47F9-ADC5-ADA3916095BE}
2012-02-22 15:05:51 -------- d-----w- c:\users\eric.falley\appdata\local\{BC226D26-B701-4204-9D4D-077B903FE41A}
2012-02-22 15:05:33 -------- d-----w- c:\users\eric.falley\appdata\local\{B7BE73C6-2809-470A-997C-FDACC981E697}
2012-02-22 08:06:50 -------- d-----w- c:\users\eric.falley\appdata\local\{2D546C45-4483-44B5-B9BB-9D7E89FC1C9F}
2012-02-22 08:06:17 -------- d-----w- c:\users\eric.falley\appdata\local\{D79E8033-D9B2-4F0D-9806-E4B25D79F52A}
2012-02-20 20:32:31 -------- d-----w- c:\users\eric.falley\appdata\local\{256E9FA6-3A21-4057-AB6E-057F55D65BF0}
2012-02-20 20:32:19 -------- d-----w- c:\users\eric.falley\appdata\local\{8B5753B9-634C-4A30-81A2-CF2A9EC96A46}
2012-02-20 00:15:19 -------- d-----w- C:\symbols
2012-02-19 23:32:07 -------- d-----w- c:\program files\Microsoft Windows Performance Toolkit
2012-02-19 23:31:41 -------- d-----w- c:\program files\Microsoft Help Viewer
2012-02-19 23:30:43 -------- d-----w- c:\program files\Debugging Tools for Windows (x86)
2012-02-19 23:30:18 -------- d-----w- c:\program files\Application Verifier
2012-02-19 23:27:32 -------- d-----w- c:\program files\Microsoft Visual Studio 10.0
2012-02-19 22:50:54 -------- d-----w- c:\users\eric.falley\appdata\local\{4922D074-B44D-499B-9FA6-29306546D453}
2012-02-19 22:50:43 -------- d-----w- c:\users\eric.falley\appdata\local\{6CC16E40-47A5-46CF-9FB9-512BF4EAE1F5}
2012-02-18 20:17:52 -------- d-----w- c:\users\eric.falley\appdata\local\{A7B7B2A5-4B5C-456A-B57A-E2167E304962}
2012-02-18 08:17:12 -------- d-----w- c:\users\eric.falley\appdata\local\{698E029C-E89A-42ED-AB81-058A49785410}
2012-02-18 08:16:52 -------- d-----w- c:\users\eric.falley\appdata\local\{9F02AC78-D80E-459A-8BA2-BD418D6F1B6C}
2012-02-18 08:11:56 -------- d-----w- c:\users\eric.falley\appdata\local\{C71762D9-E31E-4996-94A6-B7E923E0EBB8}
2012-02-18 08:11:29 -------- d-----w- c:\users\eric.falley\appdata\local\{B07613BC-0F21-4236-BA90-65AE15036B4F}
2012-02-17 16:57:06 -------- d-----w- c:\users\eric.falley\appdata\local\{31DB8D87-05DC-4DC2-8B06-7D968F1329B6}
2012-02-17 16:56:47 -------- d-----w- c:\users\eric.falley\appdata\local\{2B19A59E-3DAA-4DB4-B8BE-BC4B9C55A480}
2012-02-17 04:51:35 -------- d-----w- c:\users\eric.falley\appdata\local\{78CE999F-C3D3-4922-878E-8BC7D561989E}
2012-02-16 16:13:47 -------- d-----w- c:\users\eric.falley\appdata\local\{B1B8655D-70AA-4714-96F5-1E5A2E2D055E}
2012-02-16 16:13:31 -------- d-----w- c:\users\eric.falley\appdata\local\{71728624-3A6F-47A5-8360-023338B088FD}
2012-02-16 09:25:02 1288472 ----a-w- c:\windows\system32\ntdll.dll
2012-02-16 09:20:52 478720 ----a-w- c:\windows\system32\timedate.cpl
2012-02-16 09:19:47 67072 ----a-w- c:\windows\system32\packager.dll
2012-02-16 09:19:21 534528 ----a-w- c:\windows\system32\EncDec.dll
2012-02-16 09:18:58 38912 ----a-w- c:\windows\system32\csrsrv.dll
2012-02-16 09:17:56 1328128 ----a-w- c:\windows\system32\quartz.dll
2012-02-16 09:16:06 314880 ----a-w- c:\windows\system32\webio.dll
2012-02-16 09:16:06 22528 ----a-w- c:\windows\system32\lsass.exe
2012-02-16 09:16:06 22016 ----a-w- c:\windows\system32\secur32.dll
2012-02-16 09:16:06 15872 ----a-w- c:\windows\system32\sspisrv.dll
2012-02-16 09:16:06 100352 ----a-w- c:\windows\system32\sspicli.dll
2012-02-16 09:15:32 690688 ----a-w- c:\windows\system32\msvcrt.dll
2012-02-16 09:13:39 442880 ----a-w- c:\windows\system32\ntshrui.dll
2012-02-16 01:21:09 -------- d-----w- c:\users\eric.falley\appdata\local\{EF95AA39-75C7-4EF9-9DCF-65D2E9E540F2}
2012-02-16 01:20:56 -------- d-----w- c:\users\eric.falley\appdata\local\{3E88AC5C-896A-407E-99FC-C5566C31AC18}
2012-02-15 03:27:38 -------- d-----w- c:\users\eric.falley\appdata\local\{25153071-57FF-4CB1-AC0F-FCB6D3623E0F}
2012-02-15 03:27:26 -------- d-----w- c:\users\eric.falley\appdata\local\{0226AD39-3429-4D04-8931-89CE43657B15}
2012-02-14 15:26:42 -------- d-----w- c:\users\eric.falley\appdata\local\{7B54F4E2-DCD3-4DF5-A2E9-3D98A5B395BD}
2012-02-14 15:26:30 -------- d-----w- c:\users\eric.falley\appdata\local\{B0936F1D-ECDE-4127-84A3-F533531CF38F}
2012-02-14 02:57:27 -------- d-----w- c:\users\eric.falley\appdata\local\{2E703477-FC68-46E3-966F-877DE0CE7686}
2012-02-14 02:57:09 -------- d-----w- c:\users\eric.falley\appdata\local\{F7550076-2D05-480A-BEAE-AAC238795412}
2012-02-13 06:22:45 -------- d-----w- c:\users\eric.falley\appdata\local\{ADE941B2-F22D-42DB-85B4-DCB46CAD6D63}
2012-02-13 06:22:30 -------- d-----w- c:\users\eric.falley\appdata\local\{D7F79684-D59C-40AC-9FE7-CDC2AA66B4A5}
2012-02-13 04:19:43 -------- d-----w- c:\program files\common files\Avid
2012-02-13 04:18:14 -------- d-----w- c:\users\eric.falley\appdata\roaming\Avid
2012-02-13 04:18:14 -------- d-----w- c:\programdata\Avid
2012-02-13 04:18:14 -------- d-----w- c:\program files\Avid
2012-02-12 18:20:46 -------- d-----w- c:\users\eric.falley\appdata\local\{4C8F3ABA-FF27-4D2C-BEE8-777EEDF17117}
2012-02-12 18:20:25 -------- d-----w- c:\users\eric.falley\appdata\local\{5DC5F278-39A3-4158-A5D3-05F3C689CD26}
2012-02-11 21:41:09 -------- d-----w- c:\users\eric.falley\appdata\local\{7EA6EAFE-7108-4ABA-9BD2-8A9C48FEB659}
2012-02-11 21:40:47 -------- d-----w- c:\users\eric.falley\appdata\local\{0546EEAC-1F8F-4990-AF63-870CC192DCC1}
2012-02-11 21:34:12 -------- d-----w- c:\users\eric.falley\appdata\local\{AA311EAA-E3AC-4523-9494-4581D8C5E8E7}
2012-02-10 23:15:50 67584 ----a-w- c:\windows\system32\hpbpro.dll
2012-02-10 23:15:50 47104 ----a-w- c:\windows\system32\hpboid.dll
2012-02-10 23:15:50 46080 ----a-w- c:\windows\system32\hpbmiapi.dll
2012-02-10 23:15:50 12288 ----a-w- c:\windows\system32\hpbprops.dll
2012-02-10 23:15:50 12288 ----a-w- c:\windows\system32\hpboidps.dll
2012-02-10 16:14:08 -------- d-----w- c:\users\eric.falley\appdata\local\{E4F1BDBC-E2DB-43B3-8C90-483C5B0A0FAC}
2012-02-10 04:12:27 -------- d-----w- c:\users\eric.falley\appdata\local\{F74310AB-CEA2-43CF-B8EA-B3F855E0F157}
2012-02-10 04:12:09 -------- d-----w- c:\users\eric.falley\appdata\local\{B816EE33-952C-49D2-BD98-D24BFFA136D6}
2012-02-09 17:30:24 49976 ----a-w- c:\program files\common files\system\msmapi\1033\MSMAPI32.DLL
2012-02-09 06:12:01 -------- d-----w- c:\users\eric.falley\appdata\local\{D2D17371-19A2-418D-9656-CCF7E47ECEC4}
2012-02-09 06:11:49 -------- d-----w- c:\users\eric.falley\appdata\local\{7A65208D-44CA-47AD-BBB7-A0CD4FAD0AE5}
2012-02-08 23:53:06 55808 ----a-w- c:\windows\system32\HPZipm12.dll
2012-02-08 23:53:06 54784 ----a-w- c:\windows\system32\HPZidr12.dll
2012-02-08 23:53:06 45568 ----a-w- c:\windows\system32\HPZinw12.dll
2012-02-08 23:53:06 39424 ----a-w- c:\windows\system32\HPZipr12.dll
2012-02-08 23:53:06 34304 ----a-w- c:\windows\system32\hpzipt12.dll
2012-02-08 23:53:06 21504 ----a-w- c:\windows\system32\hpzisn12.dll
2012-02-08 18:10:22 -------- d-----w- c:\users\eric.falley\appdata\local\{2C5BEA19-956D-4C32-9AAD-6D757FD807CB}
2012-02-08 18:09:55 -------- d-----w- c:\users\eric.falley\appdata\local\{C9DAB977-2B94-4FA6-85A3-C55DABC546D3}
2012-02-08 04:19:13 -------- d-----w- c:\users\eric.falley\appdata\local\{06592616-CEDA-435F-86FC-5D6157278387}
2012-02-08 04:19:01 -------- d-----w- c:\users\eric.falley\appdata\local\{A0C72CA6-D24D-480C-997B-F9F4133FED46}
2012-02-07 16:18:14 -------- d-----w- c:\users\eric.falley\appdata\local\{BE07F2D4-2464-4774-9A85-02BE33C9C0A0}
2012-02-07 16:17:51 -------- d-----w- c:\users\eric.falley\appdata\local\{6006213F-D7D9-4741-BF59-CBEEE3DD4C9B}
2012-02-06 20:21:12 -------- d-----w- c:\users\eric.falley\appdata\local\{DF0273CB-AE09-4F1E-BAC6-AD17A2554BF5}
2012-02-06 20:20:46 -------- d-----w- c:\users\eric.falley\appdata\local\{E09D5BB2-7825-43FF-91B6-E371FD4170CD}
2012-02-05 04:48:13 -------- d-----w- c:\users\eric.falley\appdata\local\{4213863D-5ECB-408E-B59F-5B5DA837AED3}
2012-02-05 04:48:01 -------- d-----w- c:\users\eric.falley\appdata\local\{F1F318DA-F9DE-4D5D-B9AD-020F3D804DBC}
2012-02-04 16:46:40 -------- d-----w- c:\users\eric.falley\appdata\local\{88EDEB2F-8D06-4C0D-8601-859B32D4FCA5}
2012-02-04 16:46:26 -------- d-----w- c:\users\eric.falley\appdata\local\{C1D00EAA-6A1A-48D2-B0EC-89564CE493FB}
2012-02-03 05:29:42 -------- d-----w- c:\users\eric.falley\appdata\local\{01E3DDC2-0DA3-4EA3-A3F9-6CF2B020F09D}
2012-02-02 17:27:41 -------- d-----w- c:\users\eric.falley\appdata\local\{5CB8AB4F-A078-4F76-8491-42B0748BC387}
2012-02-02 17:25:52 -------- d-----w- c:\users\eric.falley\appdata\local\{F90CDC21-0F4E-44B7-9943-DFC739B67D43}
2012-02-02 13:02:01 22536 ----a-w- c:\windows\system32\drivers\SophosBootDriver.sys
2012-02-02 02:26:45 -------- d-----w- c:\users\eric.falley\appdata\local\{2BCBB74D-C7E2-4D2E-B81D-02C753E157A3}
2012-02-02 02:26:23 -------- d-----w- c:\users\eric.falley\appdata\local\{64CFE016-8DAC-40D9-898C-BD09B41999C1}
2012-02-01 13:25:55 -------- d-----w- c:\users\eric.falley\appdata\local\{B7A36666-9D34-411C-AFB3-6F4FD121AA2F}
2012-02-01 13:25:43 -------- d-----w- c:\users\eric.falley\appdata\local\{46773620-0797-4D76-83DF-133BD2BC7B96}
2012-02-01 01:25:19 -------- d-----w- c:\users\eric.falley\appdata\local\{31322CAF-BD3F-4C15-B056-E18DE17EE9C6}
2012-02-01 01:25:07 -------- d-----w- c:\users\eric.falley\appdata\local\{EA91EF88-7C5B-45B3-9E71-66406370E874}
2012-01-31 13:24:49 -------- d-----w- c:\users\eric.falley\appdata\local\{48BD50AC-304A-46BE-A09C-DE7549A137F8}
2012-01-31 13:24:35 -------- d-----w- c:\users\eric.falley\appdata\local\{A77D350A-6C24-471B-85F3-501871AF38AF}
2012-01-31 01:22:32 -------- d-----w- c:\users\eric.falley\appdata\local\{9B380CEC-1C5A-4374-BBB1-AA00C0AE9400}
2012-01-31 01:22:14 -------- d-----w- c:\users\eric.falley\appdata\local\{F0EFCC9F-78A2-4632-8935-3D39846B0898}
2012-01-30 11:30:51 -------- d-----w- c:\users\eric.falley\appdata\local\{93F010C6-420B-40EC-AE6A-1551ED45BC3D}
2012-01-30 11:30:38 -------- d-----w- c:\users\eric.falley\appdata\local\{FB718FA6-4A33-4F64-8FAD-8CEC24EEEE5A}
2012-01-29 23:30:00 -------- d-----w- c:\users\eric.falley\appdata\local\{2B39C8A5-D68C-4295-957B-4F8CBB0C3340}
2012-01-29 23:29:45 -------- d-----w- c:\users\eric.falley\appdata\local\{D0BF7FFF-91D8-4E9D-83D6-3847EBA4711E}
2012-01-29 07:58:02 -------- d-----w- c:\users\eric.falley\appdata\local\{2DF317CF-2E50-451E-98BB-65DD95D76407}
2012-01-29 07:57:48 -------- d-----w- c:\users\eric.falley\appdata\local\{57051D9A-300C-47A3-991A-3FE6702DB607}
2012-01-28 19:56:30 -------- d-----w- c:\users\eric.falley\appdata\local\{3C82D9AF-6EC2-4B2B-AE6B-EAE3A4C1C996}
2012-01-28 19:56:16 -------- d-----w- c:\users\eric.falley\appdata\local\{62C2EF8E-9E47-4107-B726-92D3486A7440}
2012-01-28 03:24:03 -------- d-----w- c:\users\eric.falley\appdata\local\{463BCC73-63EE-4FA3-B7D5-F421955ECBCF}
2012-01-28 03:23:51 -------- d-----w- c:\users\eric.falley\appdata\local\{F0A8FF57-BE36-4607-A239-6AB435921AD1}
2012-01-27 15:23:03 -------- d-----w- c:\users\eric.falley\appdata\local\{0B95041D-5E35-473A-A904-F6AFE4FA8D51}
2012-01-27 15:22:49 -------- d-----w- c:\users\eric.falley\appdata\local\{670395B1-2BC5-4B80-9D05-38F209B7B600}
2012-01-26 21:34:56 -------- d-----w- c:\users\eric.falley\appdata\local\{49963447-E486-455B-9286-5F5049C442B2}
2012-01-26 21:34:31 -------- d-----w- c:\users\eric.falley\appdata\local\{EA6FBD29-63D3-43D5-8726-2435D9336962}
2012-01-25 20:53:30 -------- d-----w- c:\users\eric.falley\appdata\local\{138FB889-5C25-4C05-A6DB-23D2F8C8E7CE}
2012-01-25 20:53:12 -------- d-----w- c:\users\eric.falley\appdata\local\{E925FCBF-299C-441A-8EC2-2EA5008EAF23}
2012-01-25 04:45:08 -------- d-----w- c:\users\eric.falley\appdata\local\{E28B4A56-D112-4335-AF46-62D20B69A547}
2012-01-25 04:44:56 -------- d-----w- c:\users\eric.falley\appdata\local\{47D0AC0F-235E-4362-B2B3-2AA24FAC65DC}
2012-01-24 16:42:37 -------- d-----w- c:\users\eric.falley\appdata\local\{55BE6678-8A93-4B64-9694-9F2A4D756543}
2012-01-24 16:42:17 -------- d-----w- c:\users\eric.falley\appdata\local\{40622B50-1B8E-426B-91A4-6E56B91C1A1E}
2012-01-24 01:17:33 -------- d-----w- c:\users\eric.falley\appdata\local\{95102E67-B964-437E-ADD2-2212A091ABF7}
2012-01-24 01:17:14 -------- d-----w- c:\users\eric.falley\appdata\local\{882BE0F8-A284-4492-8FAD-5B528F6F1C82}
2012-01-23 09:01:59 -------- d-----w- c:\users\eric.falley\appdata\local\{335EAF25-5977-49AF-84EC-672E7BD32949}
2012-01-23 09:01:44 -------- d-----w- c:\users\eric.falley\appdata\local\{1BAB6747-8C04-4145-9EB0-F9D555E6FAA5}
2012-01-22 21:01:22 -------- d-----w- c:\users\eric.falley\appdata\local\{7DDF8AD3-DE7D-47C7-B3BC-D2886DA2B483}
2012-01-22 09:00:51 -------- d-----w- c:\users\eric.falley\appdata\local\{871771B7-F9AB-4AFB-BD39-7EB5474605E0}
2012-01-22 09:00:39 -------- d-----w- c:\users\eric.falley\appdata\local\{B5C844FB-0413-4C05-A796-ED0A3E91E2AE}
2012-01-21 20:59:46 -------- d-----w- c:\users\eric.falley\appdata\local\{9805C97D-E470-473E-AF6D-DA13E033098A}
2012-01-21 08:38:20 -------- d-----w- c:\users\eric.falley\appdata\local\{ABF22A1B-6188-459C-9B0B-B5C14763AF76}
2012-01-21 08:38:01 -------- d-----w- c:\users\eric.falley\appdata\local\{34C9E90A-E0D6-4302-B590-14A6E6FC3A65}
2012-01-20 22:27:18 -------- d-----w- c:\users\eric.falley\appdata\local\{9A02770A-E763-477F-97D5-F133C8A2D861}
2012-01-20 04:21:00 -------- d-----w- c:\users\eric.falley\appdata\local\{4B4F1F0F-B8FC-4483-B8C6-A6F636BFE8BD}
2012-01-20 04:20:48 -------- d-----w- c:\users\eric.falley\appdata\local\{930E18E7-322F-4D98-8A4E-E1FF60891C91}
2012-01-19 16:19:32 -------- d-----w- c:\users\eric.falley\appdata\local\{CAE54F29-46D5-47D8-9F66-AD2E6E4DF3C4}
2012-01-19 16:19:18 -------- d-----w- c:\users\eric.falley\appdata\local\{36042F18-240C-4D48-90DD-FC49C22498F2}
2012-01-18 23:41:14 -------- d-----w- c:\users\eric.falley\appdata\local\{590219D1-98D6-4172-9D20-EB336BC0EC36}
2012-01-18 23:40:35 -------- d-----w- c:\users\eric.falley\appdata\local\{82D45BCC-F8F2-4E01-A4B0-EDF157C6F91D}
2012-01-18 09:41:07 -------- d-----w- c:\users\eric.falley\appdata\local\{08E88548-FE54-4FE4-B77C-3E44B8C9B71F}
2012-01-18 09:40:53 -------- d-----w- c:\users\eric.falley\appdata\local\{11CE3ADB-B9AE-43F8-8437-CE2F58CE1614}
2012-01-17 21:40:29 -------- d-----w- c:\users\eric.falley\appdata\local\{95F84B66-676B-4AB7-AA39-A12E2DF4B8FD}
2012-01-17 21:40:12 -------- d-----w- c:\users\eric.falley\appdata\local\{668E5FFB-C131-4FB1-AFD4-55CAE07908B1}
2012-01-17 09:28:41 -------- d-----w- c:\users\eric.falley\appdata\local\{2C95478F-3BDE-4586-88C7-AF41A37CF818}
2012-01-17 09:28:28 -------- d-----w- c:\users\eric.falley\appdata\local\{A657B37C-F7E1-4E5E-8F47-32864546873C}
2012-01-16 21:28:09 -------- d-----w- c:\users\eric.falley\appdata\local\{AE7CE209-5D09-4231-ABC3-4D171DCBC6EF}
2012-01-16 21:27:57 -------- d-----w- c:\users\eric.falley\appdata\local\{C272E790-4734-4FB1-90DB-34741175F1DA}
2012-01-16 09:27:36 -------- d-----w- c:\users\eric.falley\appdata\local\{9D91BCAD-632E-4429-810B-13AD24BB481E}
2012-01-16 09:27:23 -------- d-----w- c:\users\eric.falley\appdata\local\{4C034F68-F00D-4410-B17D-3296DE9EF816}
2012-01-14 21:04:15 -------- d-----w- c:\users\eric.falley\appdata\local\{B43B4868-0C7E-4749-9D7B-3DFE52A2B065}
2012-01-14 21:04:01 -------- d-----w- c:\users\eric.falley\appdata\local\{DDC9A1B3-AB59-4DC2-A6F1-AD86C5751278}
2012-01-14 20:50:01 -------- d-----w- c:\users\eric.falley\appdata\local\{A7C10C80-135C-4A02-828F-3109FB8DE509}
2012-01-14 20:48:37 -------- d-----w- c:\users\eric.falley\appdata\local\{A23496B9-3AF7-4292-9EC8-4C3203A87B2F}
2012-01-14 03:03:36 -------- d-----w- c:\users\eric.falley\appdata\local\{03B1D5BD-CB0F-4FC3-8261-B562D88926C9}
2012-01-14 03:03:21 -------- d-----w- c:\users\eric.falley\appdata\local\{FC6888B8-94D0-4D80-A9D9-5FE216B89BA0}
2012-01-13 15:02:38 -------- d-----w- c:\users\eric.falley\appdata\local\{45594928-D420-46F4-A2EE-FA1E62E67105}
2012-01-13 15:01:04 -------- d-----w- c:\users\eric.falley\appdata\local\{925858C5-6D0C-43F8-9018-27DEE3D05D2B}
2012-01-12 23:43:51 -------- d-----w- c:\users\eric.falley\appdata\local\{C963E433-4AE0-4492-8D9D-453442A37818}
2012-01-12 23:43:25 -------- d-----w- c:\users\eric.falley\appdata\local\{55ADBE56-F6A4-4934-93CF-211CDDD558A3}
2012-01-12 00:39:36 -------- d-----w- c:\users\eric.falley\appdata\local\{2E3D5205-8F67-4534-B79B-240BDA5C6429}
2012-01-12 00:39:19 -------- d-----w- c:\users\eric.falley\appdata\local\{F464B046-31D0-4759-8643-520C92036437}
2012-01-10 21:11:32 -------- d-----w- c:\users\eric.falley\appdata\local\{6F5F8B62-9CA5-4B3F-B323-F6AA9C54C4CC}
2012-01-10 21:11:16 -------- d-----w- c:\users\eric.falley\appdata\local\{E9947ECB-EC54-443B-9C15-B76C64774A02}
2012-01-10 05:45:23 -------- d-----w- c:\users\eric.falley\appdata\local\{90EA1F69-701E-4FC1-92D1-9E361D3B5308}
2012-01-10 05:45:12 -------- d-----w- c:\users\eric.falley\appdata\local\{652139D0-AB38-4108-BEE2-C8B1E4876ED9}
2012-01-09 17:46:02 -------- d-----w- c:\users\eric.falley\appdata\local\{A1C766DC-23BA-4B51-80BB-CB8BFD4DC5FA}
2012-01-09 06:35:42 25808 ----a-w- c:\windows\ctl3dv2.dll
2012-01-09 06:35:42 -------- d-----w- C:\Animagic
2012-01-09 04:58:15 -------- d-----w- c:\users\eric.falley\appdata\local\{742FA0B2-6E83-4E1B-A7AB-4AA626FEEEFF}
2012-01-09 04:58:01 -------- d-----w- c:\users\eric.falley\appdata\local\{DA8EBB6A-5AA3-46AA-B7C5-7AD77F272183}
2012-01-08 16:03:38 -------- d-----w- c:\users\eric.falley\appdata\local\{BE4834AF-F815-4532-921A-C89E57F19294}
2012-01-08 16:03:22 -------- d-----w- c:\users\eric.falley\appdata\local\{E1B616E4-E065-4481-B05B-1362B86995ED}
2012-01-08 02:32:47 -------- d-----w- c:\users\eric.falley\appdata\local\{3C41E2A4-8CC4-4296-8858-C4B500C439B6}
2012-01-08 02:31:57 -------- d-----w- c:\users\eric.falley\appdata\local\{26A1A2F2-F2CB-4CE0-B026-940620625EB4}
2012-01-07 18:16:49 -------- d-----w- c:\users\eric.falley\appdata\local\{A6947766-47B0-4EBF-9F16-5B9500750F4F}
2012-01-07 18:08:43 -------- d-----w- c:\users\eric.falley\appdata\local\{B854A3CD-91DE-4725-9EBE-744AD5BEB957}
2012-01-07 18:08:23 -------- d-----w- c:\users\eric.falley\appdata\local\{697C40CE-D854-4D63-917E-3BB1FC5CDAF8}
2012-01-07 05:57:58 -------- d-----w- c:\users\eric.falley\appdata\local\{626BFD4C-302D-40F5-8246-4A808B3B80F8}
2012-01-06 16:06:57 -------- d-----w- c:\users\eric.falley\appdata\local\{BBA99D4A-F493-4AB0-9610-0EFAAD3ACE94}
2012-01-06 16:06:39 -------- d-----w- c:\users\eric.falley\appdata\local\{065D7CC0-87BB-452C-810F-7977DE1E0A5B}
2012-01-05 21:56:51 -------- d-----w- c:\users\eric.falley\appdata\local\{3C4A3377-D7C9-4728-A4AA-300A8593958E}
2012-01-05 21:56:33 -------- d-----w- c:\users\eric.falley\appdata\local\{0F641630-21A4-44E8-AC7E-9915EA8225F5}
2012-01-05 09:56:14 -------- d-----w- c:\users\eric.falley\appdata\local\{16F33035-A34C-47B8-BE4E-EB46BE628D59}
2012-01-05 09:55:56 -------- d-----w- c:\users\eric.falley\appdata\local\{F010EF8C-CCA7-4B16-A1ED-0E77975323DB}
2012-01-04 21:55:37 -------- d-----w- c:\users\eric.falley\appdata\local\{EBED997F-FD1A-4C6D-8D5E-56531FA42055}
2012-01-04 21:55:21 -------- d-----w- c:\users\eric.falley\appdata\local\{5A3E3AA5-1BD1-4C57-B4C2-4A3ECD8A91FB}
2012-01-04 09:54:47 -------- d-----w- c:\users\eric.falley\appdata\local\{50D6A82D-6753-4F16-A8DD-2F8FE2C3F69E}
2012-01-04 09:54:25 -------- d-----w- c:\users\eric.falley\appdata\local\{10046C2F-E59B-4970-8A6D-5870D8AD34A3}
2012-01-03 21:53:41 -------- d-----w- c:\users\eric.falley\appdata\local\{26708EA8-CAAE-40EF-8245-B61C9EACBF88}
2012-01-03 21:53:21 -------- d-----w- c:\users\eric.falley\appdata\local\{CC0FD025-3FE5-4AB0-A866-31DB80F1B774}
2012-01-03 19:37:48 -------- d-----w- c:\users\eric.falley\appdata\roaming\GameRanger
2011-12-31 19:25:58 -------- d-----w- c:\users\eric.falley\appdata\local\{F87C0D49-256D-4B11-AA46-072DC7A6F7B8}
2011-12-31 19:25:04 -------- d-----w- c:\users\eric.falley\appdata\local\{3DE6D971-4787-40D8-999A-DF73AC26030D}
2011-12-31 07:01:27 -------- d-----w- c:\users\eric.falley\appdata\local\{3A0DB1FE-4268-46B6-974A-9963636F34DC}
2011-12-31 07:00:55 -------- d-----w- c:\users\eric.falley\appdata\local\{84651E1A-571D-4252-B8DF-81E4AC45A3A7}
2011-12-30 18:57:49 -------- d-----w- c:\users\eric.falley\appdata\local\{CF7874B7-1A4F-4C56-97DA-6B975A7F0ABC}
2011-12-30 18:56:59 -------- d-----w- c:\users\eric.falley\appdata\local\{913D77C3-AE6B-40AC-A529-25A1DE25BF65}
2011-12-30 06:43:31 -------- d-----w- C:\PIXEL
2011-12-30 06:15:11 -------- d-----w- c:\users\eric.falley\appdata\local\{0B91D072-C07C-436F-9045-14A24740C0AB}
2011-12-30 06:14:50 -------- d-----w- c:\users\eric.falley\appdata\local\{85C5EF68-DCEB-4CF1-B12D-CE489A700CF4}
2011-12-29 18:10:26 -------- d-----w- c:\users\eric.falley\appdata\local\{1677CD22-FF0D-49DA-B841-75994849511E}
2011-12-29 18:09:51 -------- d-----w- c:\users\eric.falley\appdata\local\{D91BC683-5F3F-43B3-A981-6DE615AE2803}
2011-12-29 04:44:51 -------- d-----w- c:\program files\eRightSoft
2011-12-29 04:39:53 142336 ----a-w- c:\program files\internet explorer\plugins\Npindeo.dll
2011-12-29 04:39:48 -------- d-----w- c:\program files\Ligos
2011-12-29 04:10:56 -------- d-----w- c:\users\eric.falley\appdata\local\{91E091BD-656D-4F65-86D1-A5F8718812A7}
2011-12-29 04:10:42 -------- d-----w- c:\users\eric.falley\appdata\local\{DE23306A-67CA-4D4D-9168-533C94524FA1}
2011-12-28 16:08:22 -------- d-----w- c:\users\eric.falley\appdata\local\{9867D0C9-A0B5-498C-9741-8448B6C78618}
2011-12-28 16:07:51 -------- d-----w- c:\users\eric.falley\appdata\local\{F1283BC2-C0A7-4A01-8344-306AE14C1648}
2011-12-28 01:40:17 -------- d-----w- c:\users\eric.falley\appdata\local\{0B07FBF2-18F8-4ED6-868B-F2EE85098A7E}
2011-12-28 01:39:38 -------- d-----w- c:\users\eric.falley\appdata\local\{F0389C96-92F5-4597-B41A-E3C423489AFF}
2011-12-27 09:13:03 -------- d-----w- c:\users\eric.falley\appdata\local\{14B145A1-5441-47C9-9E58-A76A64AF21F8}
2011-12-27 09:12:35 -------- d-----w- c:\users\eric.falley\appdata\local\{92959617-57EB-4D66-8111-89F0B784A2EB}
2011-12-26 21:15:03 -------- d-----w- c:\users\eric.falley\appdata\local\{F1660332-E654-4CA0-AE61-4C3EDADA3F95}
2011-12-26 07:04:25 -------- d-----w- c:\users\eric.falley\appdata\local\{CB47208B-2BE1-44C9-B850-6F504AC3ACF4}
2011-12-26 07:04:03 -------- d-----w- c:\users\eric.falley\appdata\local\{D501FF36-FEBA-4ADF-8DD2-610BDCED0466}
2011-12-25 19:03:42 -------- d-----w- c:\users\eric.falley\appdata\local\{F1B5DBA5-42B6-48BA-9E4E-75D6B84F88B9}
2011-12-25 19:03:25 -------- d-----w- c:\users\eric.falley\appdata\local\{9E143C64-A878-48BE-9F31-9C0AA070BF17}
2011-12-25 07:03:05 -------- d-----w- c:\users\eric.falley\appdata\local\{B311F34B-9980-4557-AFA4-6E453BE46A4E}
2011-12-25 07:02:45 -------- d-----w- c:\users\eric.falley\appdata\local\{2854996D-7267-4996-A1B9-F01726EC57AD}
2011-12-24 19:02:27 -------- d-----w- c:\users\eric.falley\appdata\local\{430ADA50-C4E7-4A64-946E-4D85ADA68E0B}
2011-12-24 19:02:09 -------- d-----w- c:\users\eric.falley\appdata\local\{6DA37765-52C0-4376-8ABD-0F4C4C3811C6}
2011-12-24 05:55:31 -------- d-----w- c:\users\eric.falley\appdata\local\{D4F74532-82BD-4A1B-8E25-072BE6088EC1}
2011-12-24 05:55:12 -------- d-----w- c:\users\eric.falley\appdata\local\{DFE16D7B-E44F-42E7-A6DF-93F940C5A39C}
2011-12-23 17:54:40 -------- d-----w- c:\users\eric.falley\appdata\local\{F8F3136F-E87D-4F50-ACC6-CD8D7BE440C2}
2011-12-23 17:54:26 -------- d-----w- c:\users\eric.falley\appdata\local\{9D9A1959-1E80-40B4-B644-3BC04ECDF584}
2011-12-23 05:53:56 -------- d-----w- c:\users\eric.falley\appdata\local\{6D53C1D2-C344-409C-8158-161197B13A01}
2011-12-23 05:53:36 -------- d-----w- c:\users\eric.falley\appdata\local\{26735BE2-7BC7-4613-AF31-34521CFB81A2}
2011-12-22 17:52:46 -------- d-----w- c:\users\eric.falley\appdata\local\{E210F157-1BCC-480A-8A3E-11F47FF7A386}
2011-12-22 17:52:25 -------- d-----w- c:\users\eric.falley\appdata\local\{EBB2DEBD-13FB-4A28-A972-0055AB63A045}
2011-12-22 05:51:52 -------- d-----w- c:\users\eric.falley\appdata\local\{DD6C9E73-F55B-47E6-84CB-95D655F47998}
2011-12-22 05:51:30 -------- d-----w- c:\users\eric.falley\appdata\local\{CA5EA60C-E4ED-40E2-99DD-61908057CDC6}
2011-12-21 17:49:08 -------- d-----w- c:\users\eric.falley\appdata\local\{2259FDE2-5173-4993-980A-B660EF438B0E}
2011-12-21 17:48:43 -------- d-----w- c:\users\eric.falley\appdata\local\{796230F3-ED5E-432D-8A14-8AC913FE37B6}
2011-12-20 23:56:54 -------- d-----w- c:\users\eric.falley\appdata\local\{9AE055D4-2F72-406C-AD19-1385C9643235}
2011-12-20 23:56:29 -------- d-----w- c:\users\eric.falley\appdata\local\{118D1418-C454-4481-8844-8F646E5FB555}
2011-12-20 03:42:04 -------- d-----w- c:\users\eric.falley\appdata\local\{EEC83EBF-2039-4B7D-891B-BB97B3D620AC}
2011-12-20 03:41:37 -------- d-----w- c:\users\eric.falley\appdata\local\{E497C4B2-1FA1-4EF9-BD5B-636FFC9513E9}
2011-12-19 06:30:31 -------- d-----w- c:\users\eric.falley\appdata\local\{A3A5F5A3-FC36-40ED-B18C-AA699928AFCF}
2011-12-19 06:30:09 -------- d-----w- c:\users\eric.falley\appdata\local\{1B76D854-BB22-4921-A5AA-9168BF435185}
2011-12-18 15:07:54 -------- d-----w- c:\users\eric.falley\appdata\local\{C3D4829E-6472-45EC-B6DB-1CD3DED044E0}
2011-12-18 15:07:42 -------- d-----w- c:\users\eric.falley\appdata\local\{4D93410B-4485-4FE0-953A-2A926CF09066}
2011-12-18 03:07:28 -------- d-----w- c:\users\eric.falley\appdata\local\{B0D628E9-A8A0-4E67-8F8B-00D8E9860E35}
2011-12-17 09:13:41 -------- d-----w- c:\users\eric.falley\appdata\local\{6B60ED1E-99BC-4092-A37B-B9B47512418D}
2011-12-17 09:13:18 -------- d-----w- c:\users\eric.falley\appdata\local\{FA527F88-891D-44AC-8BFF-560992E34C9C}
2011-12-16 21:10:41 -------- d-----w- c:\users\eric.falley\appdata\local\{666B1C0A-1305-47DF-B3D9-7182EE3A9C2A}
2011-12-16 21:10:15 -------- d-----w- c:\users\eric.falley\appdata\local\{0B9D533D-D01D-47C0-8A9A-DAD8C445BAA8}
2011-12-16 01:23:18 -------- d-----w- c:\users\eric.falley\appdata\local\{5BF9C01F-7CA8-4FDA-AEC7-18A99A3EB226}
2011-12-16 01:22:56 -------- d-----w- c:\users\eric.falley\appdata\local\{4433CB00-0838-47FB-9803-EDF32A0C94FB}
2011-12-14 04:21:44 -------- d-----w- c:\users\eric.falley\appdata\local\{8D900411-07B2-422F-9699-2087FA4F0B44}
2011-12-14 04:21:25 -------- d-----w- c:\users\eric.falley\appdata\local\{33CF30AA-97E5-49F1-A7B8-2816D6377F99}
2011-12-13 17:42:54 87552 ----a-w- c:\windows\system32\hpmlm121.dll
2011-12-13 15:43:55 -------- d-----w- c:\users\eric.falley\appdata\local\{4707F413-EE42-4DB2-B9C3-A4149DA9FEA3}
2011-12-13 15:43:39 -------- d-----w- c:\users\eric.falley\appdata\local\{601FC620-BC9E-4C84-8B88-87BB2AD134E7}
2011-12-12 14:22:20 -------- d-----w- c:\users\eric.falley\appdata\local\{8400FB86-A2CD-4C66-8AC8-D04E04263319}
2011-12-12 14:21:35 -------- d-----w- c:\users\eric.falley\appdata\local\{47569DC6-B0B2-4310-8604-7B3AFDD0BC95}
2011-12-11 20:39:18 -------- d-----w- c:\users\eric.falley\appdata\local\{3833DB8E-E8C2-4A53-BE18-576F0018DA07}
2011-12-11 20:39:06 -------- d-----w- c:\users\eric.falley\appdata\local\{24362636-60DA-44CD-9476-966CF07224A6}
2011-12-11 08:38:46 -------- d-----w- c:\users\eric.falley\appdata\local\{C78A79D1-0D66-4B5C-899C-4F71616C1F33}
2011-12-11 08:38:33 -------- d-----w- c:\users\eric.falley\appdata\local\{75FE359E-FABD-4CBC-9D57-A771CFC69A17}
2011-12-10 20:38:13 -------- d-----w- c:\users\eric.falley\appdata\local\{95B22FA7-47B5-4781-91E8-7BD10501FE86}
2011-12-10 08:37:45 -------- d-----w- c:\users\eric.falley\appdata\local\{B35A9E84-AF7C-4C61-8EF8-D110B5761118}
2011-12-10 08:37:24 -------- d-----w- c:\users\eric.falley\appdata\local\{6E082E0C-0873-4A7A-8BDE-DA1A4BCA87E1}
2011-12-09 20:03:07 -------- d-----w- c:\users\eric.falley\appdata\local\{8618735F-D422-4E94-AB79-1FFB3C0D92CF}
2011-12-09 06:39:25 -------- d-----w- c:\users\eric.falley\appdata\local\{DDA7147F-C993-49B5-A133-5EBA36D8D09D}
2011-12-08 06:39:49 -------- d-----w- c:\users\eric.falley\appdata\local\{D64A22F8-6E1E-4DB3-9AF6-528799DC7A38}
2011-12-08 06:39:32 -------- d-----w- c:\users\eric.falley\appdata\local\{03BDDDB3-0FD0-4846-B9C0-D49D85E8EA76}
2011-12-07 15:41:24 -------- d-----w- c:\users\eric.falley\appdata\local\{BB5964D2-A8F5-4835-844E-E617F6F4F531}
2011-12-07 15:41:10 -------- d-----w- c:\users\eric.falley\appdata\local\{BEF6A74C-447A-4C83-81C4-45808437AE25}
2011-12-07 08:20:32 -------- d-----w- c:\users\eric.falley\appdata\local\Opera
2011-12-07 03:40:21 -------- d-----w- c:\users\eric.falley\appdata\local\{A0A45E64-4CAC-4834-A572-C768AF5FE717}
2011-12-07 03:40:04 -------- d-----w- c:\users\eric.falley\appdata\local\{D29C2DDC-9D80-4CD8-B1A2-EF6338B6D8CC}
2011-12-06 15:28:29 -------- d-----w- c:\users\eric.falley\appdata\local\{A9B659BA-D5DE-4537-98AC-AAE39021CBF2}
2011-12-06 15:28:03 -------- d-----w- c:\users\eric.falley\appdata\local\{C15E8571-67A4-412D-920F-9BC39960E638}
2011-12-05 22:14:23 -------- d-----w- c:\users\eric.falley\appdata\local\{59B17325-5D92-43ED-BA31-384097AF56D5}
2011-12-05 22:14:07 -------- d-----w- c:\users\eric.falley\appdata\local\{02F6BD85-2583-49DB-862C-35ADF020B361}
2011-12-05 09:31:14 -------- d-----w- c:\users\eric.falley\appdata\local\{961C102C-71C3-4BFC-93C1-267215D1C31B}
2011-12-04 21:30:27 -------- d-----w- c:\users\eric.falley\appdata\local\{1E133584-54F6-406B-9AF6-4DB35CEECE6E}
2011-12-04 21:30:09 -------- d-----w- c:\users\eric.falley\appdata\local\{CCAD5080-2842-4C61-AF82-DE95B34BBC67}
2011-12-04 20:46:55 -------- d-----w- c:\users\eric.falley\appdata\roaming\NUnit
2011-12-04 20:33:55 5632 ----a-r- c:\users\eric.falley\appdata\roaming\microsoft\installer\{3ad32ec5-806e-43a8-8757-76d05ad4677a}\nunit_icon.exe
2011-12-04 20:33:40 -------- d-----w- c:\program files\NUnit 2.5.2
2011-12-04 09:29:47 -------- d-----w- c:\users\eric.falley\appdata\local\{78ACF977-EEA6-4301-8DCA-0BEC71E45679}
2011-12-04 08:58:43 -------- d-----w- c:\users\eric.falley\appdata\roaming\NuGet
2011-12-04 08:41:01 -------- d-----w- c:\users\eric.falley\appdata\roaming\ICSharpCode
2011-12-04 08:39:19 -------- d-----w- c:\program files\SharpDevelop
2011-12-03 21:28:53 -------- d-----w- c:\users\eric.falley\appdata\local\{EA98DB2D-484F-429B-83A3-F74F56612543}
2011-12-03 21:28:34 -------- d-----w- c:\users\eric.falley\appdata\local\{73A3F55F-6345-46C5-B6EA-A904E68E126F}
2011-12-03 05:55:56 -------- d-----w- c:\users\eric.falley\appdata\local\Chromium
2011-12-03 05:49:01 452440 ----a-w- c:\windows\system32\d3dx10_40.dll
2011-12-03 05:49:01 2036576 ----a-w- c:\windows\system32\D3DCompiler_40.dll
2011-12-03 05:48:57 4379984 ----a-w- c:\windows\system32\D3DX9_40.dll
2011-12-03 05:48:55 81768 ----a-w- c:\windows\system32\xinput1_3.dll
2011-12-03 05:46:24 -------- d-----w- c:\program files\Heroes of Newerth
2011-12-02 21:20:57 -------- d-----w- c:\users\eric.falley\appdata\local\{10BFE4D6-496F-4D50-8CAA-388A71CF15FF}
2011-12-02 15:46:15 -------- d-----w- c:\users\eric.falley\appdata\local\{FE7E6659-12CE-45A2-830C-38EA475D95BB}
2011-12-01 21:32:14 -------- d-----w- c:\users\eric.falley\appdata\local\{F88A59C8-FDA6-4484-BC5F-C9BAE4FDE3C6}
2011-12-01 21:31:24 -------- d-----w- c:\users\eric.falley\appdata\local\{317A78A3-0433-4FD5-B12E-9EAE09B0CFC0}
2011-11-30 22:22:00 -------- d-----w- c:\users\eric.falley\appdata\local\{4DF3DC1E-DD05-4662-BDAC-A3A03FBA56F7}
2011-11-30 22:21:35 -------- d-----w- c:\users\eric.falley\appdata\local\{C8DA6E5B-89C4-4DDC-971D-F26113B89D72}
2011-11-30 02:13:51 -------- d-----w- c:\users\eric.falley\appdata\local\{98AA9CBF-9CF9-4C27-A373-B3DFE72F2BA8}
2011-11-30 02:12:34 -------- d-----w- c:\users\eric.falley\appdata\local\{EDA446BD-3EE7-43BC-86C0-C38CEADBD387}
2011-11-29 00:23:25 -------- d-----w- c:\users\eric.falley\appdata\local\{4F039C9F-20A7-45DF-914E-26284E709E55}
2011-11-29 00:22:37 -------- d-----w- c:\users\eric.falley\appdata\local\{D90F36E3-7933-4EC7-BF76-9E7AAA1EE147}
2011-11-27 19:40:38 -------- d-----w- c:\users\eric.falley\appdata\local\{5BD21350-E384-40EA-AFE1-CB2B686C6DF6}
2011-11-27 19:40:33 -------- d-----w- c:\users\eric.falley\appdata\local\{223F69DE-E30E-4542-B3FB-60192C505E4C}
2011-11-27 06:43:40 -------- d-----w- c:\users\eric.falley\appdata\local\{A079072F-A7CC-4B0D-BD1B-A5215C4C9DE1}
2011-11-27 06:43:28 -------- d-----w- c:\users\eric.falley\appdata\local\{150654FC-4B4F-48E5-AAAC-ADE224180FD9}
2011-11-26 18:43:10 -------- d-----w- c:\users\eric.falley\appdata\local\{3626FC83-4CA7-4ADC-B264-19155668995F}
2011-11-26 18:42:54 -------- d-----w- c:\users\eric.falley\appdata\local\{F21D3892-2850-4BCB-A405-79C4DA0F8FA6}
2011-11-26 06:42:34 -------- d-----w- c:\users\eric.falley\appdata\local\{39CF1C66-A072-404D-B8F0-D484DFFC943F}
2011-11-26 06:42:05 -------- d-----w- c:\users\eric.falley\appdata\local\{847B6063-039E-46AE-B5E5-3B0D5EEA2640}
2011-11-25 06:44:16 -------- d-----w- c:\users\eric.falley\appdata\local\{C216BEEF-6274-4034-B1B3-6FBFCA90503B}
2011-11-25 06:44:01 -------- d-----w- c:\users\eric.falley\appdata\local\{48B1A5A3-1D16-4C46-9835-6607F7426B27}
2011-11-24 18:43:33 -------- d-----w- c:\users\eric.falley\appdata\local\{40C47775-9564-4E38-A50C-1D4FAF88278F}
2011-11-24 18:43:11 -------- d-----w- c:\users\eric.falley\appdata\local\{D2D81E4A-7F4B-418C-B05A-87210C45F12E}
2011-11-24 06:41:22 -------- d-----w- c:\users\eric.falley\appdata\local\{AA20D6B8-32D4-4F84-9D7E-613CA5A5309A}
2011-11-24 06:40:51 -------- d-----w- c:\users\eric.falley\appdata\local\{75CC5094-ECDE-44AA-B364-FD76D1753114}
2011-11-23 18:31:26 -------- d-----w- c:\users\eric.falley\appdata\local\{AB6F30DD-BA3F-4D5F-BD38-97CA10F1FB01}
2011-11-23 18:31:04 -------- d-----w- c:\users\eric.falley\appdata\local\{E6FC5520-8D98-4416-AF45-AC79E7767155}
2011-11-22 21:54:45 -------- d-----w- c:\users\eric.falley\appdata\local\{6CDD4E2E-010E-48FF-B787-4B7EEC6AB5B7}
2011-11-22 21:54:28 -------- d-----w- c:\users\eric.falley\appdata\local\{8728E740-E109-4D55-AF53-A1468568AD80}
2011-11-22 09:39:42 -------- d-----w- c:\users\eric.falley\appdata\local\{149E7765-FCDB-45D5-B775-412B8F0E1DC0}
2011-11-22 09:39:30 -------- d-----w- c:\users\eric.falley\appdata\local\{D20ABA9B-C622-4CD1-9F6D-83E1C6A4F2F6}
2011-11-21 21:38:35 -------- d-----w- c:\users\eric.falley\appdata\local\{96A4E54C-9BA3-4EE1-B68A-3D706A838E66}
2011-11-21 21:38:12 -------- d-----w- c:\users\eric.falley\appdata\local\{D545E720-C385-4AD3-81B3-4C667AED43AB}
2011-11-21 08:40:59 -------- d-----w- c:\users\eric.falley\appdata\local\{691B79AF-8994-4E91-B81A-7365D4DE9258}
2011-11-21 08:40:47 -------- d-----w- c:\users\eric.falley\appdata\local\{50F547DE-352B-484E-BD20-5CCE65BA6F9E}
2011-11-20 20:39:59 -------- d-----w- c:\users\eric.falley\appdata\local\{6F09041F-CA96-41E5-8E02-B9ABB939208A}
2011-11-20 20:39:45 -------- d-----w- c:\users\eric.falley\appdata\local\{0E2F03B4-878F-47AB-A415-A89A68766942}
2011-11-20 06:42:39 -------- d-----w- c:\users\eric.falley\appdata\local\{A0EBFA6E-EBB4-41D6-A8D0-0A2EB36D22E9}
2011-11-20 06:42:27 -------- d-----w- c:\users\eric.falley\appdata\local\{70D6E0CE-005A-4864-A165-C628DCF88771}
2011-11-19 18:38:52 -------- d-----w- c:\users\eric.falley\appdata\local\{BA22A838-3090-4F60-A512-288C1DF7043E}
2011-11-19 18:38:11 -------- d-----w- c:\users\eric.falley\appdata\local\{303B661C-1DF9-4CEE-A272-79CE32C6B1A1}
2011-11-19 02:23:18 -------- d-----w- c:\users\eric.falley\appdata\local\{3DEF0AE2-D623-407E-A6F1-F1029E7634C0}
2011-11-19 02:23:05 -------- d-----w- c:\users\eric.falley\appdata\local\{2574D26B-849C-4C5F-8E21-08917F4DB1AB}
2011-11-18 14:22:17 -------- d-----w- c:\users\eric.falley\appdata\local\{C69D5755-ECC4-49B7-8FD4-E50FDAB9C675}
2011-11-18 14:21:54 -------- d-----w- c:\users\eric.falley\appdata\local\{FB34BFE5-D36F-4B74-88DC-44BB98D838D7}
2011-11-17 23:54:22 -------- d-----w- c:\users\eric.falley\appdata\local\{E7FC1682-7AC4-4830-9CE0-70EC5225A062}
2011-11-17 23:54:10 -------- d-----w- c:\users\eric.falley\appdata\local\{BC82BE82-DD25-412A-A06B-89569498EE34}
2011-11-17 02:29:43 -------- d-----w- c:\users\eric.falley\appdata\local\{A2D567CA-FAD7-4CED-9E0C-70AB745CA50B}
2011-11-17 02:29:28 -------- d-----w- c:\users\eric.falley\appdata\local\{D5AA06B6-2117-4F74-99C6-3C30AB2BA0C6}
2011-11-16 09:40:54 -------- d-----w- c:\users\eric.falley\appdata\local\{C230E529-110B-43AB-9677-690F15288858}
2011-11-15 21:38:41 -------- d-----w- c:\users\eric.falley\appdata\local\{AB724902-757A-4799-96B0-205D5E57859D}
2011-11-15 21:37:54 -------- d-----w- c:\users\eric.falley\appdata\local\{AC682A5D-A6FB-4D03-8144-E0D7EEDE4B48}
2011-11-15 07:06:05 -------- d-----w- c:\program files\Amazon
2011-11-15 06:40:35 -------- d-----w- c:\users\eric.falley\appdata\local\{668F2DCE-4732-4FA9-AB85-93DA8CC92D72}
2011-11-15 06:40:11 -------- d-----w- c:\users\eric.falley\appdata\local\{6C59ED72-814C-4074-9AED-B7206A512AF8}
2011-11-14 18:12:36 -------- d-----w- c:\users\eric.falley\appdata\local\{9653A173-229B-4D6E-A765-E86389438474}
2011-11-14 18:11:57 -------- d-----w- c:\users\eric.falley\appdata\local\{FAB765A3-4077-4F68-BE69-C0ADA792607A}
2011-11-14 02:58:17 -------- d-----w- c:\users\eric.falley\appdata\local\{A368F97D-6073-4423-88CE-CF5ECBFFC47F}
2011-11-14 02:57:58 -------- d-----w- c:\users\eric.falley\appdata\local\{417E00D4-1FA2-4D24-A244-20AAFC9EF0C8}
2011-11-13 14:49:19 -------- d-----w- c:\users\eric.falley\appdata\local\{0EF05E14-E3A6-424B-8C02-A9860CB6B22F}
2011-11-13 14:48:48 -------- d-----w- c:\users\eric.falley\appdata\local\{5ECA9802-B93B-4B3A-BC7A-C338A3F26B79}
2011-11-12 20:58:12 -------- d-----w- c:\users\eric.falley\appdata\local\{7E7B44A9-BCA3-4204-A43E-EE9DCE359F52}
2011-11-12 20:58:00 -------- d-----w- c:\users\eric.falley\appdata\local\{8C938E3B-F919-4817-8BA3-785F7FDAEEAA}
2011-11-12 08:57:40 -------- d-----w- c:\users\eric.falley\appdata\local\{615902A7-9B28-4940-8FC3-0AD4A5F8B021}
2011-11-12 08:57:26 -------- d-----w- c:\users\eric.falley\appdata\local\{9658E34E-5214-4ED4-883D-B2D2158E2DC7}
2011-11-11 20:55:52 -------- d-----w- c:\users\eric.falley\appdata\local\{27FAE736-9924-41A5-B6D8-45F976CE434E}
2011-11-11 20:55:34 -------- d-----w- c:\users\eric.falley\appdata\local\{DCAF2FF7-FB9C-40BC-9037-17595E866BDB}
2011-11-11 09:06:18 708608 ----a-w- c:\program files\common files\system\wab32.dll
2011-11-11 01:07:24 -------- d-----w- c:\users\eric.falley\appdata\local\{B3CCC750-FDE4-4451-A80E-2EB5114050D9}
2011-11-11 01:06:50 -------- d-----w- c:\users\eric.falley\appdata\local\{C84A15E2-B88B-4EB0-B72D-42E00EA15576}
2011-11-10 03:02:11 -------- d-----w- c:\users\eric.falley\appdata\local\{6AD0488A-E245-4BED-8F4F-333D82DF77A0}
2011-11-10 03:01:57 -------- d-----w- c:\users\eric.falley\appdata\local\{BF630D12-3FE1-4095-957E-C56280DFF766}
2011-11-09 12:56:04 -------- d-----w- c:\users\eric.falley\appdata\local\{4CD7B396-2323-436D-85F2-08329EDF570D}
2011-11-09 12:55:36 -------- d-----w- c:\users\eric.falley\appdata\local\{778194BA-420A-432A-9E69-CB9A31BF8E60}
2011-11-08 15:27:40 -------- d-----w- c:\users\eric.falley\appdata\local\{1769AB96-F0A4-4978-9313-3338320E6D2B}
2011-11-08 15:27:24 -------- d-----w- c:\users\eric.falley\appdata\local\{2A6312CF-ED9C-465E-92E1-9448ECD6243F}
2011-11-07 21:17:53 -------- d-----w- c:\users\eric.falley\appdata\local\{2DD3385E-7BB3-4639-9D8B-2EFEC474B95F}
2011-11-07 21:17:32 -------- d-----w- c:\users\eric.falley\appdata\local\{3BB8FC8C-2BD8-4D48-9419-00C3D4DB4772}
2011-11-07 07:58:32 -------- d-----w- c:\users\eric.falley\appdata\local\{96BE3C09-568B-4586-8251-C4DC7CD56766}
2011-11-07 07:58:19 -------- d-----w- c:\users\eric.falley\appdata\local\{CFC8605D-DBC7-4F7B-B6B1-75EE162DE5C9}
2011-11-06 19:57:47 -------- d-----w- c:\users\eric.falley\appdata\local\{12693B88-0305-462B-B034-21018C50C5AA}
2011-11-06 07:57:20 -------- d-----w- c:\users\eric.falley\appdata\local\{7FDA50E5-21FA-4467-9FA7-F6D80736AFA8}
2011-11-06 07:57:03 -------- d-----w- c:\users\eric.falley\appdata\local\{9F7871E4-E851-474C-BD2A-91E7DD4CC674}
2011-11-05 19:56:45 -------- d-----w- c:\users\eric.falley\appdata\local\{1750CBC9-7CEA-4584-9EBB-D2BEEF6FC5FC}
2011-11-05 19:56:33 -------- d-----w- c:\users\eric.falley\appdata\local\{E5BC8AD1-A1B7-465D-99A2-40DB7947591E}
2011-11-05 07:52:19 -------- d-----w- c:\users\eric.falley\appdata\local\{94129EBB-36B3-4479-85F7-1C70D1C3EF06}
2011-11-05 07:52:07 -------- d-----w- c:\users\eric.falley\appdata\local\{290FC400-5FFC-44C5-A17C-B6BFB246BAF1}
2011-11-04 19:49:50 -------- d-----w- c:\users\eric.falley\appdata\local\{51084A92-66E3-483F-81BE-E29B781B515A}
2011-11-04 19:49:25 -------- d-----w- c:\users\eric.falley\appdata\local\{4700F4F9-23E4-495F-A8E3-96E2D8E12D76}
2011-11-03 20:30:40 -------- d-----w- c:\users\eric.falley\appdata\local\{5A51BBC8-8BCF-4955-9A46-9193538E2731}
2011-11-03 20:30:26 -------- d-----w- c:\users\eric.falley\appdata\local\{7B1BD2FB-1DED-4375-AAB0-2B6684C8FC63}
2011-11-03 16:51:53 -------- d-----w- c:\users\eric.falley\appdata\local\{042A906E-AF1F-4046-935B-3EA462FB5323}
2011-11-03 16:51:33 -------- d-----w- c:\users\eric.falley\appdata\local\{00213C20-52B0-44C8-99E6-209A3D801E98}
2011-11-02 19:53:19 -------- d-----w- c:\users\eric.falley\appdata\local\{C9811B0C-F4AC-493E-839B-8E33F9DF8B04}
2011-11-02 19:53:06 -------- d-----w- c:\users\eric.falley\appdata\local\{0D576655-AA52-4FFC-B9EE-EA8CA80E7F03}
2011-11-02 06:05:28 -------- d-----w- c:\users\eric.falley\appdata\local\{12CB5D28-403A-456F-A2E2-50F678C81217}
2011-11-02 06:05:15 -------- d-----w- c:\users\eric.falley\appdata\local\{CF473089-EF72-4429-8736-5A432EFA559F}
2011-11-01 14:26:05 -------- d-----w- c:\users\eric.falley\appdata\local\{67567503-DBC9-4B77-8CA4-7DEBFDCF0293}
2011-11-01 14:25:12 -------- d-----w- c:\users\eric.falley\appdata\local\{6FE02567-C6CE-456F-B0E6-DFB13AF0929E}
2011-11-01 02:15:56 -------- d-----w- c:\users\eric.falley\appdata\local\{774AC17F-1731-4E18-BE02-287B064D1256}
2011-11-01 02:15:32 -------- d-----w- c:\users\eric.falley\appdata\local\{ECA21150-479F-4DB1-8E93-6BCDB9F1513A}
2011-10-31 07:17:39 -------- d-----w- c:\users\eric.falley\appdata\local\{ACBE72BA-526C-4B52-B5D1-BA475CB9A813}
2011-10-31 07:17:18 -------- d-----w- c:\users\eric.falley\appdata\local\{60905EF0-9626-435D-AEF8-E2E06FD9A728}
2011-10-30 19:16:39 -------- d-----w- c:\users\eric.falley\appdata\local\{7BD60A74-B722-47B1-9726-6ADA1CF64B34}
2011-10-30 19:16:12 -------- d-----w- c:\users\eric.falley\appdata\local\{EE8E3683-E7DC-4E23-91AF-4AA7CDDCF364}
2011-10-30 07:14:17 -------- d-----w- c:\users\eric.falley\appdata\local\{70FE460C-978F-4E07-A2FB-60F892335BD5}
2011-10-30 07:14:02 -------- d-----w- c:\users\eric.falley\appdata\local\{400EC283-8648-4CC5-AB8B-0491B2B2E23E}
2011-10-30 04:53:35 -------- d-----w- c:\program files\SmartFTP Client
2011-10-30 04:52:15 -------- d-----w- c:\program files\SmartFTP Client 4.0 Setup Files
2011-10-29 19:12:12 -------- d-----w- c:\users\eric.falley\appdata\local\{7458EA37-285C-404C-BBB4-B2278CE44687}
2011-10-29 19:11:48 -------- d-----w- c:\users\eric.falley\appdata\local\{602723E2-2878-40E6-B922-38879BD43C92}
2011-10-29 01:12:35 -------- d-----w- c:\program files\Bonjour
2011-10-29 00:36:34 -------- d-----w- c:\users\eric.falley\appdata\local\{633E068E-4214-4952-9F70-1BE684B9BBEF}
2011-10-29 00:36:10 -------- d-----w- c:\users\eric.falley\appdata\local\{E9EC4227-AB76-4114-839A-8A4BB936E14F}
2011-10-28 09:14:55 -------- d-----w- c:\users\eric.falley\appdata\local\{A47F174B-DC7B-437E-9A3A-F988E6EF4352}
2011-10-28 09:14:29 -------- d-----w- c:\users\eric.falley\appdata\local\{26679AA4-C7C2-4DE5-9707-95FB4D79674E}
2011-10-27 21:00:04 -------- d-----w- c:\users\eric.falley\appdata\local\{F4A5FB96-89D5-43B2-B1A1-8CC3DFD90E0E}
2011-10-27 20:59:14 -------- d-----w- c:\users\eric.falley\appdata\local\{135A20EE-E4C0-42A9-8CAA-35C7C549A0B3}
2011-10-27 08:58:23 -------- d-----w- c:\users\eric.falley\appdata\local\{3E99B7BA-0A97-442B-A79D-70B8FC65AAF1}
2011-10-27 08:58:11 -------- d-----w- c:\users\eric.falley\appdata\local\{FAC2ABB2-5C99-416F-8C86-463657B853BD}
2011-10-26 19:52:04 -------- d-----w- c:\users\eric.falley\appdata\local\{5172E03B-6B29-4A14-989C-C9547983E3DA}
2011-10-26 19:51:41 -------- d-----w- c:\users\eric.falley\appdata\local\{4C7E7D69-FAE4-493B-90DE-85D475E66486}
2011-10-26 06:04:45 -------- d-----w- c:\users\eric.falley\appdata\local\{53D22A3E-87D1-4F63-BA19-1E2BE64AF2A0}
2011-10-26 06:04:34 -------- d-----w- c:\users\eric.falley\appdata\local\{932A10E6-982C-416D-901A-34AE8F9B49CC}
2011-10-25 18:03:38 -------- d-----w- c:\users\eric.falley\appdata\local\{F109F8EE-07AE-49B5-B33C-50397EC7E394}
2011-10-25 18:03:25 -------- d-----w- c:\users\eric.falley\appdata\local\{84B3BAE0-2903-4838-94A5-E8DDD4AA815E}
2011-10-25 02:45:34 -------- d-----w- c:\users\eric.falley\appdata\local\{D48E837D-48CF-4C31-A8E3-E3074B675783}
2011-10-25 02:45:02 -------- d-----w- c:\users\eric.falley\appdata\local\{6CB8992B-9A94-4428-947C-9430460E05D9}
2011-10-24 09:02:08 -------- d-----w- c:\users\eric.falley\appdata\local\{7F31FF5F-854E-4734-AF0F-BE4AD75DE709}
2011-10-24 09:01:45 -------- d-----w- c:\users\eric.falley\appdata\local\{9E0602A4-0EB9-4D5D-81B3-A9E7F2A96DE6}
2011-10-23 21:00:00 -------- d-----w- c:\users\eric.falley\appdata\local\{78D0D079-85C6-49E1-A8A7-A5F910266607}
2011-10-23 05:58:30 -------- d-----w- c:\users\eric.falley\appdata\local\{497D3FD6-2A25-439F-B224-E650651B51E2}
2011-10-22 17:58:25 -------- d-----w- c:\users\eric.falley\appdata\local\{2B139D0C-60E1-4BE6-AFA2-6070E08F4CBC}
2011-10-22 01:53:30 -------- d-----w- c:\users\eric.falley\appdata\local\{F297C771-30AA-48E7-B776-50DA7636B7C3}
2011-10-21 11:23:48 -------- d-----w- c:\users\eric.falley\appdata\local\{842DC970-752A-4E2F-AFC6-A314C080D4E1}
2011-10-21 11:23:25 -------- d-----w- c:\users\eric.falley\appdata\local\{0BA79390-17DF-47DC-BBE9-46744BA6DF03}
2011-10-20 23:18:53 -------- d-----w- c:\users\eric.falley\appdata\local\{F90513A4-DAD5-4536-B842-A82E6D7D53EE}
2011-10-20 23:18:17 -------- d-----w- c:\users\eric.falley\appdata\local\{D40A04BB-8165-47F4-A4B6-3DBEB6B9DEDE}
2011-10-20 02:57:15 -------- d-----w- c:\users\eric.falley\appdata\local\{A4CAF956-AF9D-4052-853D-A4709134BBB4}
2011-10-19 23:15:29 -------- d-----w- c:\users\eric.falley\appdata\local\{D41A6812-0B62-48B2-B277-1CC1D6CCC7A2}
2011-10-19 06:10:50 -------- d-----w- c:\users\eric.falley\appdata\local\{2AAEEC32-836A-4442-9E9E-C7E4EFDD55C2}
2011-10-19 06:10:39 -------- d-----w- c:\users\eric.falley\appdata\local\{0D00F1B9-E09F-419F-9211-3C26C24B439C}
2011-10-18 17:14:10 -------- d-----w- c:\users\eric.falley\appdata\local\{D75B7A5E-694A-437D-AA14-C6434A0806CD}
2011-10-18 17:13:57 -------- d-----w- c:\users\eric.falley\appdata\local\{83535918-5279-4F2C-B9D0-A1932062C40D}
2011-10-18 00:19:50 -------- d-----w- c:\users\eric.falley\appdata\local\{1ABDEE9A-7F22-4CD1-9D47-9BE773A05E3B}
2011-10-18 00:19:35 -------- d-----w- c:\users\eric.falley\appdata\local\{8366F9F8-5D7F-4A9D-8DA1-19C939177D04}
2011-10-17 12:19:13 -------- d-----w- c:\users\eric.falley\appdata\local\{FB243FFB-F5BA-41BF-8149-6D0445A68339}
2011-10-17 12:19:01 -------- d-----w- c:\users\eric.falley\appdata\local\{030D059F-495F-443D-A7C3-D4217B5F5526}
2011-10-16 23:56:13 -------- d-----w- c:\users\eric.falley\appdata\local\{41877C00-074F-401E-8CC8-D096CB21E97B}
2011-10-16 23:55:40 -------- d-----w- c:\users\eric.falley\appdata\local\{E551E3AA-AE59-4DD5-9503-8153399701AB}
2011-10-16 11:10:50 -------- d-----w- c:\users\eric.falley\appdata\local\{82CD156E-0DC2-4C1C-A1C4-529B743B9927}
2011-10-16 11:10:39 -------- d-----w- c:\users\eric.falley\appdata\local\{9B11783F-9132-4190-85E8-A927E10DB6E5}
2011-10-15 22:15:26 -------- d-----w- c:\users\eric.falley\appdata\local\{BDB4808C-AFE8-45CA-B53C-29DD10A589AE}
2011-10-15 07:47:23 -------- d-----w- c:\users\eric.falley\appdata\local\{9E89B112-2B7D-4558-8505-3CA740D22FAA}
2011-10-14 19:44:43 -------- d-----w- c:\users\eric.falley\appdata\local\{FFC02550-E5B5-421E-B63F-4E9021CA0A73}
2011-10-14 06:12:02 -------- d-----w- c:\users\eric.falley\appdata\local\{43DCF7E5-BB2E-4127-A067-D0BABE192230}
2011-10-14 06:11:43 -------- d-----w- c:\users\eric.falley\appdata\local\{3D40661A-F57C-400E-A418-8EAD14238765}
2011-10-13 13:09:55 465408 ----a-w- c:\windows\system32\psisdecd.dll
2011-10-13 13:09:54 75776 ----a-w- c:\windows\system32\psisrndr.ax
2011-10-13 13:09:37 571904 ----a-w- c:\windows\system32\oleaut32.dll
2011-10-13 13:09:37 233472 ----a-w- c:\windows\system32\oleacc.dll
2011-10-11 13:11:25 -------- d-----w- c:\users\eric.falley\appdata\local\{8CFE1B3B-9D6E-44A9-BB1B-F437A009CB92}
2011-10-10 22:00:26 -------- d-----w- c:\users\eric.falley\appdata\local\{09B9832C-3016-4826-875C-A647987F1AAE}
2011-10-10 09:59:50 -------- d-----w- c:\users\eric.falley\appdata\local\{F14C70F0-1AA8-46C5-9CFA-922518129922}
2011-10-10 09:59:36 -------- d-----w- c:\users\eric.falley\appdata\local\{37AB9EDB-4792-4756-B05A-FDD7720FE01B}
2011-10-09 21:57:45 -------- d-----w- c:\users\eric.falley\appdata\local\{5A8D336D-DD57-442D-AE2C-72B76C8D2D43}
2011-10-09 21:57:23 -------- d-----w- c:\users\eric.falley\appdata\local\{4026D07E-88CF-4384-A3C4-DD68247D1719}
2011-10-09 02:49:49 -------- d-----w- c:\users\eric.falley\appdata\local\{7376C3B3-E499-46AF-A366-DF4EA37C9835}
2011-10-09 02:49:37 -------- d-----w- c:\users\eric.falley\appdata\local\{BD56D9B9-D88A-44E2-A891-AB78AA4107FD}
2011-10-08 14:48:24 -------- d-----w- c:\users\eric.falley\appdata\local\{1847665C-95D2-441B-9EA5-8440576FF3C0}
2011-10-07 23:23:35 -------- d-----w- c:\users\eric.falley\appdata\local\{CC39BAC2-0B02-42B5-9103-9386DC225986}
2011-10-07 23:23:17 -------- d-----w- c:\users\eric.falley\appdata\local\{FE763220-5FA4-4862-AB79-BA339462CA7A}
2011-10-07 11:17:55 -------- d-----w- c:\users\eric.falley\appdata\local\{D798B741-0610-46FF-B98A-B5B97EDA4022}
2011-10-07 11:17:36 -------- d-----w- c:\users\eric.falley\appdata\local\{D8895BD2-3025-4920-8630-EC4FDD04BE19}
2011-10-06 20:09:04 -------- d-----w- c:\users\eric.falley\appdata\local\{C9A01183-253B-4F2C-B572-204809B31211}
2011-10-06 20:08:48 -------- d-----w- c:\users\eric.falley\appdata\local\{AFACBF8C-B143-4D7D-8563-4769A883C220}
2011-10-05 09:52:30 756048 ----a-w- c:\program files\common files\microsoft shared\office12\MSPTLS.DLL
2011-10-01 23:31:54 18328 ----a-w- c:\programdata\microsoft\identitycrl\production\ppcrlconfig600.dll
2011-10-01 23:24:57 -------- d-----w- c:\users\eric.falley\appdata\local\{18C825D4-9891-441E-A4CB-69E31DCDF54E}
2011-10-01 23:24:30 -------- d-----w- c:\users\eric.falley\appdata\local\{F4E1BBA7-BB64-4DE1-9F96-BF15BFC720A8}
2011-10-01 20:10:46 -------- d-----w- c:\users\eric.falley\appdata\local\{8964FA86-DD4D-439D-8CD4-E01995B23D6C}
2011-10-01 20:10:35 -------- d-----w- c:\users\eric.falley\appdata\local\{B46D850E-A5E0-4463-9BC2-0851A8DDC197}
2011-10-01 18:56:06 -------- d-----w- c:\users\eric.falley\appdata\local\{7C52083E-A505-43CF-80E4-B4B1979E940E}
2011-10-01 18:55:54 -------- d-----w- c:\users\eric.falley\appdata\local\{B732FCA5-C932-4EB3-A64D-22857EC3CE78}
2011-10-01 06:16:11 -------- d-----w- c:\users\eric.falley\appdata\local\{941BE390-ECBC-42A6-A521-C38EE7EEC260}
2011-10-01 06:15:52 -------- d-----w- c:\users\eric.falley\appdata\local\{A3C4839E-4963-45C0-85FE-62C213A39B4C}
2011-10-01 04:22:31 -------- d-----w- c:\users\eric.falley\appdata\local\{EF26F751-DC62-4E7E-B7DE-CE0CF228EC16}
2011-10-01 04:22:16 -------- d-----w- c:\users\eric.falley\appdata\local\{3999EB3B-E601-4B26-826A-766D1AD4D4D8}
2011-09-26 20:53:06 -------- d-----w- c:\users\eric.falley\appdata\local\{523139A0-9241-43C8-A0C4-B6F8ED9229D2}
2011-09-26 20:52:51 -------- d-----w- c:\users\eric.falley\appdata\local\{7DE1F52C-8DED-40D1-9B50-DBC86E04B207}
2011-09-26 17:06:56 -------- d-----w- c:\programdata\AVG2012
2011-09-26 13:09:35 -------- d-----w- c:\users\eric.falley\appdata\local\{ADE5120C-ED46-4A46-8F98-52FEB6FD2489}
2011-09-22 22:23:38 -------- d-----w- c:\users\eric.falley\appdata\local\{8E696A74-CF48-4910-B7D4-75C0DC01C55A}
2011-09-22 22:23:01 -------- d-----w- c:\users\eric.falley\appdata\local\{3BC38879-D7FF-4143-B078-C9184717D05D}
2011-09-22 02:04:42 -------- d-----w- c:\users\eric.falley\appdata\local\{8A678A7E-E3D0-47FA-8D50-E1899EBD5601}
2011-09-22 02:04:18 -------- d-----w- c:\users\eric.falley\appdata\local\{99968A88-0A54-4FAB-AB64-319BE73AF4C7}
2011-09-21 15:18:07 -------- d-----w- c:\users\eric.falley\appdata\local\{F1DC46B5-C993-4470-A024-45FCC3339363}
2011-09-21 15:17:48 -------- d-----w- c:\users\eric.falley\appdata\local\{CE37704C-FC36-4E63-BE87-F8F427164ACC}
2011-09-16 10:06:17 272896 ----a-w- c:\windows\system32\spool\prtprocs\w32x86\hpcpp5r1.DLL
2011-09-16 09:09:28 -------- d-----w- c:\users\eric.falley\appdata\local\{7832513D-BF08-40BC-8E99-DBD23382C850}
2011-09-16 09:09:15 -------- d-----w- c:\users\eric.falley\appdata\local\{4941E4C8-72DD-4622-91E8-207D94AF2491}
2011-09-12 21:55:54 -------- d-----w- c:\users\eric.falley\appdata\local\{5F6FC908-ECB5-4624-841A-A63AB0B03929}
2011-09-12 21:53:31 -------- d-----w- c:\users\eric.falley\appdata\local\{C78E74BB-84DD-4EDF-A0E7-3A3577C93726}
2011-09-10 14:41:59 -------- d-----w- c:\users\eric.falley\appdata\local\{F58E756E-4B93-4DC4-BB11-0958503F9B51}
2011-09-10 14:41:37 -------- d-----w- c:\users\eric.falley\appdata\local\{36690BC3-B0B4-481F-88E6-9CA20F0145DD}
2011-09-03 01:19:52 -------- d-----w- c:\users\eric.falley\appdata\local\{4DE7609A-759B-4195-AD87-107D7322A7DA}
2011-09-03 01:19:40 -------- d-----w- c:\users\eric.falley\appdata\local\{8CB1275C-4305-4041-A28F-A2716A39EBF2}
2011-08-31 04:05:04 83816 ----a-w- c:\windows\system32\dns-sd.exe
2011-08-31 04:05:04 73064 ----a-w- c:\windows\system32\dnssd.dll
2011-08-31 04:05:04 50536 ----a-w- c:\windows\system32\jdns_sd.dll
2011-08-31 04:05:04 178536 ----a-w- c:\windows\system32\dnssdX.dll
2011-08-29 22:33:42 314368 ----a-w- c:\windows\system32\spool\prtprocs\w32x86\hpcpp109.dll
2011-08-29 21:56:39 -------- d-----w- c:\users\eric.falley\appdata\local\{5A21FB15-4950-415F-BA5B-D3BD2717BEF9}
2011-08-29 21:56:28 -------- d-----w- c:\users\eric.falley\appdata\local\{1AB81519-1A1D-4185-A12B-662C2AB80B77}
2011-08-29 13:55:07 -------- d-----w- c:\users\eric.falley\appdata\local\{FE39F581-A6B3-4A7E-A70A-2FAC5E541AD1}
2011-08-29 13:54:43 -------- d-----w- c:\users\eric.falley\appdata\local\{58DC83BB-B095-4E34-97AE-C21BD83AF313}
2011-08-27 05:08:33 -------- d-----w- c:\users\eric.falley\appdata\local\{CE631697-B03F-440C-94DD-744C161601BD}
2011-08-27 05:08:12 -------- d-----w- c:\users\eric.falley\appdata\local\{81C0CCD5-77CF-463B-90C2-B4B8EE38931A}
2011-08-26 19:43:03 -------- d-----w- c:\program files\common files\Steam
2011-08-26 19:42:59 -------- d-----w- c:\program files\Steam
2011-08-26 18:08:00 -------- d-----w- c:\users\eric.falley\appdata\local\{53B29A42-368F-412A-A846-A273CCA3CA81}
2011-08-26 18:07:49 -------- d-----w- c:\users\eric.falley\appdata\local\{EF6ADC3E-0A85-4F77-9E5A-6615E9B8878F}
2011-08-25 20:10:38 -------- d-----w- c:\users\eric.falley\appdata\local\{8634F0C5-FB64-49AA-AE7D-BEFDFD561E3E}
2011-08-25 20:10:27 -------- d-----w- c:\users\eric.falley\appdata\local\{CCA4950C-E78B-4208-9787-47164CFC8656}
2011-08-21 03:30:45 -------- d-----w- c:\users\eric.falley\appdata\local\{E8DC873C-0581-4654-83B6-D7AFF539848B}
2011-08-20 05:04:33 -------- d-----w- c:\users\eric.falley\appdata\local\{09F3130E-CFFA-4437-889C-1CA78A62FECA}
2011-08-19 08:03:18 -------- d-----w- c:\users\eric.falley\appdata\local\{38CCD6AA-C33A-4FA5-A568-CB9D565EAF60}
2011-08-19 08:03:03 -------- d-----w- c:\users\eric.falley\appdata\local\{C2110B6B-A796-4AA0-97D6-BED0325DFB04}
2011-08-17 04:29:59 -------- d-----w- c:\users\eric.falley\appdata\local\{02111656-026E-45B3-9DD2-0F47C5A3B685}
2011-08-17 04:29:45 -------- d-----w- c:\users\eric.falley\appdata\local\{B6A0E48D-1D45-4062-B613-0C27A1266411}
2011-08-16 01:13:14 -------- d-----w- c:\programdata\GoldWave
2011-08-15 22:29:30 -------- d-----w- c:\programdata\Media Center Programs
2011-08-15 17:01:11 -------- d-----w- c:\users\eric.falley\appdata\local\{9132A72C-30A1-4228-B3B4-64E7E2CFEC0D}
2011-08-15 17:00:26 -------- d-----w- c:\users\eric.falley\appdata\local\{4A01CE8E-D36E-4922-987A-4B6767BB3C0E}
2011-08-11 08:39:24 223744 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys
2011-08-11 08:32:24 94208 ----a-w- c:\program files\common files\system\ole db\msdaosp.dll
2011-08-11 08:32:24 86016 ----a-w- c:\windows\system32\odbccu32.dll
2011-08-11 08:32:24 81920 ----a-w- c:\windows\system32\odbccr32.dll
2011-08-11 08:32:24 319488 ----a-w- c:\windows\system32\odbcjt32.dll
2011-08-11 08:32:24 163840 ----a-w- c:\windows\system32\odbctrac.dll
2011-08-11 08:32:24 122880 ----a-w- c:\windows\system32\odbccp32.dll
2011-08-10 22:33:42 -------- d-----w- c:\users\eric.falley\appdata\local\{605C5243-4795-413D-B42D-356152C908EE}
2011-08-10 22:33:23 -------- d-----w- c:\users\eric.falley\appdata\local\{8046D1B2-58D5-42E9-9457-04664BDB4CB8}
2011-08-09 19:41:33 -------- d-----w- c:\users\eric.falley\appdata\local\{CF8731AF-A38D-40D0-B1E4-07948E0CB884}
2011-08-09 19:41:18 -------- d-----w- c:\users\eric.falley\appdata\local\{F229B4F7-A80C-49BA-BEDD-5F4D73117CC4}
2011-08-09 05:46:42 -------- d-----w- c:\users\eric.falley\appdata\local\{64C3585B-C463-44FF-9FD9-E7B8D9549F27}
2011-08-09 05:46:24 -------- d-----w- c:\users\eric.falley\appdata\local\{DD3FA156-B78F-4F14-88DF-A2F3A09CF571}
2011-08-08 03:27:19 -------- d-----w- c:\users\eric.falley\appdata\local\{4D2B8BC0-F26D-4F59-8D36-1C8D4FBD7CB0}
2011-08-08 03:25:19 -------- d-----w- c:\users\eric.falley\appdata\local\{AA6AC0A3-6881-46C9-A0DB-5433CE51C726}
2011-08-04 18:34:17 -------- d-----w- c:\users\eric.falley\appdata\local\{47B81D93-01ED-4555-910D-D3B509E580B9}
2011-08-04 18:34:02 -------- d-----w- c:\users\eric.falley\appdata\local\{F1D3A07A-16B8-46F0-9007-2914FF26F70A}
2011-08-04 17:03:43 -------- d-----w- c:\users\eric.falley\appdata\local\{84C8E7F7-A4C6-447F-ACF0-24D7434B7B7C}
2011-08-04 17:03:15 -------- d-----w- c:\users\eric.falley\appdata\local\{334C6246-6EFC-48EC-A708-D948B0156D51}
2011-08-03 23:27:26 1415072 ----a-w- c:\program files\common files\microsoft shared\office12\ACECORE.DLL
2011-08-02 18:20:48 -------- d-----w- c:\users\eric.falley\appdata\local\{47F034AC-DFB3-4D6C-A7E3-71FEB92D3999}
2011-08-02 18:20:32 -------- d-----w- c:\users\eric.falley\appdata\local\{693274DC-C82B-4BE3-9315-9ADB7E9E98DF}
2011-08-02 15:59:12 -------- d-----w- c:\users\eric.falley\appdata\local\{B816AB27-D884-4483-832D-C399A24EE013}
2011-08-02 15:58:42 -------- d-----w- c:\users\eric.falley\appdata\local\{930140C1-A38B-486D-B9B3-6B0DAF4A1AEE}
2011-07-31 04:31:07 -------- d-----w- c:\users\eric.falley\appdata\local\{AF832ABD-A3D4-48A2-A406-DF0DB038FC09}
2011-07-27 22:49:22 95608 ----a-w- c:\program files\common files\microsoft shared\office12\EXP_PDF.DLL
2011-07-27 22:49:22 56696 ----a-w- c:\program files\common files\microsoft shared\office12\EXP_XPS.DLL
2011-07-27 22:49:22 177536 ----a-w- c:\program files\common files\microsoft shared\smart tag\IETAG.DLL
2011-07-27 10:33:08 1064296 ----a-w- c:\program files\common files\microsoft shared\office12\RICHED20.DLL
2011-07-27 10:13:08 434080 ----a-w- c:\program files\common files\microsoft shared\dw\DWTRIG20.EXE
2011-07-27 10:13:06 813960 ----a-w- c:\program files\common files\microsoft shared\dw\DW20.EXE
2011-07-27 09:59:00 6540136 ----a-w- c:\program files\common files\microsoft shared\office12\office setup controller\OSETUP.DLL
2011-07-27 09:58:56 439160 ----a-w- c:\program files\common files\microsoft shared\office12\office setup controller\SETUP.EXE
2011-07-27 09:36:06 481640 ----a-w- c:\program files\common files\microsoft shared\portal\PortalConnectCore.dll
2011-07-23 06:38:39 -------- d-----w- c:\users\eric.falley\appdata\local\{0D401B13-95D7-48CC-8E83-C8856558DDFF}
2011-07-22 18:38:23 -------- d-----w- c:\users\eric.falley\appdata\local\{C1D2AA93-5665-49C4-825C-FCD8A8A41AA2}
2011-07-21 20:04:52 -------- d-----w- c:\users\eric.falley\appdata\local\{149EC14B-BF8B-450F-874D-FDAD42817B5C}
2011-07-21 07:37:43 -------- d-----w- c:\users\eric.falley\appdata\local\{D5B3F425-7A58-458F-8707-C79137061946}
2011-07-20 19:36:59 -------- d-----w- c:\users\eric.falley\appdata\local\{D7F1CE81-FB9C-4BAD-8132-58733F0FE3A7}
2011-07-20 10:18:26 2872184 ----a-w- c:\program files\common files\microsoft shared\office12\OFFDIAG.EXE
2011-07-20 10:18:24 440696 ----a-w- c:\program files\common files\microsoft shared\office12\ODSERV.EXE
2011-07-20 01:45:15 -------- d-----w- c:\users\eric.falley\appdata\local\{CD3FD1EB-CA05-4415-B8C2-5C369AAA8244}
2011-07-19 13:44:43 -------- d-----w- c:\users\eric.falley\appdata\local\{F6EB6A17-9404-4936-A996-5D989DF75887}
2011-07-19 01:29:22 -------- d-----w- c:\users\eric.falley\appdata\local\{FA1484C5-0F00-4F3D-A9E2-8C38376CF65A}
2011-07-18 13:29:05 -------- d-----w- c:\users\eric.falley\appdata\local\{C2C33867-48EF-4AFB-A4B1-1B731D1934EF}
2011-07-18 01:28:48 -------- d-----w- c:\users\eric.falley\appdata\local\{A1242FF6-EC17-4D70-B57C-4E1597C95684}
2011-07-17 08:00:59 -------- d-----w- c:\users\eric.falley\appdata\local\{3762A87A-289A-4861-8B21-30BF33E35888}
2011-07-16 20:00:37 -------- d-----w- c:\users\eric.falley\appdata\local\{9967EC69-5C7C-457F-9A53-54EB30280975}
2011-07-16 08:00:18 -------- d-----w- c:\users\eric.falley\appdata\local\{8EE73242-5687-4FAD-8E00-9D1B67529172}
2011-07-15 19:59:56 -------- d-----w- c:\users\eric.falley\appdata\local\{3FA2592B-C029-4D20-9F17-2774952A1A5E}
2011-07-15 07:59:41 -------- d-----w- c:\users\eric.falley\appdata\local\{5F0DC24E-B2DA-4EAD-84C9-B513D51475E2}
2011-07-14 19:59:22 -------- d-----w- c:\users\eric.falley\appdata\local\{C78879E6-0576-430F-9AE3-2D5BEBD0B97A}
2011-07-14 08:08:38 60416 ----a-w- c:\windows\system32\drivers\BTHUSB.SYS
2011-07-14 03:46:39 -------- d-----w- c:\users\eric.falley\appdata\local\{451BB37D-4844-4130-9AB4-7BC5041C84BC}
2011-07-14 02:34:36 1117584 ----a-w- c:\program files\common files\microsoft shared\filters\offfiltx.dll
2011-07-13 15:32:36 -------- d-----w- c:\users\eric.falley\appdata\local\{1F1F0A3D-B6E3-4BF9-88EF-E091BEB108CA}
2011-07-12 22:48:09 -------- d-----w- c:\users\eric.falley\appdata\local\{855C651A-E7E6-4B20-9036-3CDEFD720096}
2011-07-11 07:25:05 -------- d-----w- c:\users\eric.falley\appdata\local\{91183882-751C-4D06-89D7-66112EA66A99}
2011-07-10 19:24:48 -------- d-----w- c:\users\eric.falley\appdata\local\{1F975C0D-BF12-4E22-9FC2-471814A22D41}
2011-07-10 07:24:31 -------- d-----w- c:\users\eric.falley\appdata\local\{166E98E7-ED85-4311-BC56-357BE31979E4}
2011-07-09 19:24:16 -------- d-----w- c:\users\eric.falley\appdata\local\{B8758DD2-C7F4-4CF6-99C7-393FC8DE1ADD}
2011-07-09 07:23:55 -------- d-----w- c:\users\eric.falley\appdata\local\{0BB03E3F-3169-490C-AF5A-382B726F2F7E}
2011-07-08 19:23:36 -------- d-----w- c:\users\eric.falley\appdata\local\{CEE7CA0A-420C-457A-95C9-E9A5EDC5BBEF}
2011-07-08 07:23:16 -------- d-----w- c:\users\eric.falley\appdata\local\{1B80FF4F-4033-4D21-AA16-21C7468DD28A}
2011-07-07 19:22:55 -------- d-----w- c:\users\eric.falley\appdata\local\{A4BE79AA-0757-4B71-A466-3A6235E0CF32}
2011-07-07 07:28:22 1193320 ----a-w- c:\windows\system32\FM20.DLL
2011-07-07 07:22:39 -------- d-----w- c:\users\eric.falley\appdata\local\{7DF8BB0C-3D1B-49CD-9A43-A947CB85D609}
2011-07-06 19:22:18 -------- d-----w- c:\users\eric.falley\appdata\local\{05D9624A-892F-4DA0-9951-78D0827BF938}
2011-07-06 06:26:30 -------- d-----w- c:\users\eric.falley\appdata\local\{207056D3-874D-43CB-A9A6-53CE7B19E0C7}
2011-07-05 18:26:11 -------- d-----w- c:\users\eric.falley\appdata\local\{914619BC-325A-4133-8E80-918064160E0E}
2011-07-04 19:24:44 -------- d-----w- c:\users\eric.falley\appdata\local\{49998548-12F7-4EA2-BE3F-440579B655BC}
2011-07-04 06:59:17 -------- d-----w- c:\users\eric.falley\appdata\local\{C44FFB21-80BA-473A-8F05-AF15D1637E0C}
2011-07-02 18:51:19 -------- d-----w- c:\users\eric.falley\appdata\local\{8428F863-7302-4EDC-9E2F-ABFF9B3C6F7D}
2011-07-02 06:50:50 -------- d-----w- c:\users\eric.falley\appdata\local\{C191E612-ABBA-4809-94E7-2EBDA27FA48F}
2011-07-01 18:50:16 -------- d-----w- c:\users\eric.falley\appdata\local\{7D71CA14-E3B2-458B-9168-D8F0D9654E89}
2011-07-01 06:49:46 -------- d-----w- c:\users\eric.falley\appdata\local\{A00AB401-BACE-4A5E-A8F5-52866FCDDAB3}
2011-06-30 18:49:15 -------- d-----w- c:\users\eric.falley\appdata\local\{9F948F75-5AAA-4007-AFAF-602E01460D29}
2011-06-30 18:11:28 -------- d-----w- c:\users\eric.falley\appdata\local\{EEC8068B-EA2F-4C5A-A62F-C9E67C68CA77}
2011-06-30 16:21:27 293376 ----a-w- c:\windows\system32\umpnpmgr.dll
2011-06-30 08:01:56 59392 ----a-w- c:\windows\system32\msscntrs.dll
2011-06-30 08:01:55 86528 ----a-w- c:\windows\system32\SearchFilterHost.exe
2011-06-30 08:01:55 666624 ----a-w- c:\windows\system32\mssvp.dll
2011-06-30 08:01:55 427520 ----a-w- c:\windows\system32\SearchIndexer.exe
2011-06-30 08:01:55 337408 ----a-w- c:\windows\system32\mssph.dll
2011-06-30 08:01:55 197120 ----a-w- c:\windows\system32\mssphtb.dll
2011-06-30 08:01:55 164352 ----a-w- c:\windows\system32\SearchProtocolHost.exe
2011-06-30 08:01:52 1549312 ----a-w- c:\windows\system32\tquery.dll
2011-06-30 08:01:52 1401344 ----a-w- c:\windows\system32\mssrch.dll
2011-06-30 06:10:43 -------- d-----w- c:\users\eric.falley\appdata\local\{55EAD73F-54A6-450E-8D3F-263533B71FFD}
2011-06-29 04:29:55 -------- d-----w- c:\users\eric.falley\appdata\local\{C8882721-866E-42E2-ADD6-14597B2042A5}
2011-06-28 16:28:45 -------- d-----w- c:\users\eric.falley\appdata\local\{A60F75EE-95F7-4DD6-8171-2137E4881F6A}
2011-06-27 22:30:46 -------- d-----w- c:\users\eric.falley\appdata\local\{F57847DB-267E-40D6-B736-5B415737919B}
2011-06-27 03:04:19 -------- d-----w- c:\users\eric.falley\appdata\local\{D6F29C46-3973-4057-A73D-3555FEA979CB}
2011-06-27 01:23:23 -------- d-----w- c:\users\eric.falley\appdata\local\{9649064D-7D33-4368-BF93-5D8F2E63B80F}
2011-06-26 06:34:56 -------- d-----w- c:\users\eric.falley\appdata\local\{FCB70B14-DFDC-4808-9618-62FC2446A3A6}
2011-06-26 06:25:38 311808 ----a-w- c:\windows\system32\drivers\srv.sys
2011-06-26 06:25:38 310272 ----a-w- c:\windows\system32\drivers\srv2.sys
2011-06-26 06:25:38 114688 ----a-w- c:\windows\system32\drivers\srvnet.sys
2011-06-26 06:25:20 338944 ----a-w- c:\windows\system32\drivers\afd.sys
2011-06-26 06:20:35 741376 ----a-w- c:\windows\system32\inetcomm.dll
2011-06-26 06:09:14 96768 ----a-w- c:\windows\system32\drivers\mrxsmb20.sys
2011-06-26 06:09:13 123904 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2011-06-26 06:05:22 -------- d-----w- c:\users\eric.falley\appdata\local\{FD24C9D8-CC5C-48DB-BA6A-A71536C3E985}
2011-06-23 08:32:05 -------- d-----w- c:\users\eric.falley\appdata\local\{8A51618B-8857-49B5-B045-4F1F685A1F70}
2011-06-22 20:31:35 -------- d-----w- c:\users\eric.falley\appdata\local\{429D578B-8246-4A1F-BA37-4A98729E51B1}
2011-06-22 13:16:34 1681784 ----a-w- c:\program files\common files\microsoft shared\web server extensions\12\bin\FPSRVUTL.DLL
2011-06-22 08:31:05 -------- d-----w- c:\users\eric.falley\appdata\local\{693948EE-BA2F-40B0-9021-4F9DB6E3F0EB}
2011-06-22 01:02:40 341888 ----a-w- c:\program files\common files\microsoft shared\proof\MSTH3ES.DLL
2011-06-21 20:30:34 -------- d-----w- c:\users\eric.falley\appdata\local\{765D3D2B-BADF-40C8-A122-D071A11A5FA2}
2011-06-21 14:53:38 -------- d-----w- c:\users\eric.falley\appdata\local\{D92356E0-655C-4EB0-9A46-9BEE6BECF3F4}
2011-06-21 07:36:44 341888 ----a-w- c:\program files\common files\microsoft shared\proof\MSTH3FR.DLL
2011-06-20 21:32:29 -------- d-----w- c:\users\eric.falley\appdata\local\{C29CF885-EC35-4898-B25B-C571A0ADC807}
2011-06-20 09:32:12 -------- d-----w- c:\users\eric.falley\appdata\local\{C32A2841-E542-41B0-B53F-814DB2CECD3A}
2011-06-19 21:31:44 -------- d-----w- c:\users\eric.falley\appdata\local\{FBC5F690-ECF4-4C5B-A7C5-03C5BE6ADB9A}
2011-06-18 16:15:48 -------- d-----w- c:\users\eric.falley\appdata\local\{FE0AEDB2-3C9D-4FAC-AA36-66C5D477CFFF}
2011-06-17 19:36:54 -------- d-----w- c:\users\eric.falley\appdata\local\{61EB4E7D-821A-4781-9702-CD977737AF13}
2011-06-17 07:36:22 -------- d-----w- c:\users\eric.falley\appdata\local\{9143B803-D172-4DDE-91B9-518EB676954C}
2011-06-16 19:32:15 -------- d-----w- c:\users\eric.falley\appdata\local\{43067AA8-CECA-42A1-9A03-1A91B8FBDA48}
2011-06-16 06:32:46 -------- d-----r- c:\users\eric.falley\Dropbox
2011-06-16 06:29:08 -------- d-----w- c:\users\eric.falley\appdata\local\{FCB5E0C5-A6FA-4D2E-A210-12FEA14264AC}
2011-06-16 06:24:12 -------- d-----w- c:\users\eric.falley\appdata\roaming\Dropbox
2011-06-15 18:28:38 -------- d-----w- c:\users\eric.falley\appdata\local\{F84F4C47-84A1-4241-A275-8EE24E2BE099}
2011-06-15 04:18:11 -------- d-----w- c:\users\eric.falley\appdata\local\{88A135C2-3C96-4156-A5F6-974BAE689B60}
2011-06-14 16:17:38 -------- d-----w- c:\users\eric.falley\appdata\local\{F8ECB55A-B997-4CF3-8CB6-0E20C0023FA2}
2011-06-13 20:46:01 -------- d-----w- c:\users\eric.falley\appdata\local\{4D125631-83DA-46AA-B26B-B034CFE63B7A}
2011-06-13 06:24:03 -------- d-----w- c:\users\eric.falley\appdata\local\DOSBox
2011-06-13 06:23:07 -------- d-----w- c:\program files\Arkanoid2
2011-06-13 05:27:13 -------- d-----w- c:\users\eric.falley\appdata\local\{05DA8CF7-1C5F-4D96-9735-C115606A5181}
2011-06-12 17:26:52 -------- d-----w- c:\users\eric.falley\appdata\local\{49ED51D1-202E-4C85-8B45-C0255EC1AB92}
2011-06-12 05:26:32 -------- d-----w- c:\users\eric.falley\appdata\local\{632F570C-E1B9-4EA3-9266-66896ED3D351}
2011-06-11 21:03:25 306688 ----a-w- c:\windows\IsUninst.exe
2011-06-11 05:11:09 -------- d-----w- c:\users\eric.falley\appdata\local\{A700932C-87BA-462D-8838-B89AFFAD3ABD}
2011-06-10 22:43:55 -------- d-----w- C:\TEMP_PARALLELS_TOOLS
2011-06-10 22:43:54 30024 ------w- c:\windows\system32\drivers\prl_pv32.sys
2011-06-10 22:43:50 35016 ------w- c:\windows\system32\drivers\prl_boot.sys
2011-06-10 17:10:38 -------- d-----w- c:\users\eric.falley\appdata\local\{58377D55-1877-4206-A7EC-5FD977D780D6}
2011-06-10 05:10:23 -------- d-----w- c:\users\eric.falley\appdata\local\{4AF1E6E4-72B4-4D7C-97F3-6001D46ECA12}
2011-06-10 01:18:47 -------- d-----w- c:\program files\Voobly
2011-06-09 17:10:02 -------- d-----w- c:\users\eric.falley\appdata\local\{4CEF8B3B-8700-4CA8-9527-BEFC10BBD33A}
2011-06-09 02:07:14 -------- d-----w- c:\users\eric.falley\appdata\local\{77083598-95B4-42A5-97D1-9FA04700A655}
2011-06-08 14:06:57 -------- d-----w- c:\users\eric.falley\appdata\local\{7285F542-6053-452F-8643-801356786E25}
2011-06-07 20:35:39 -------- d-----w- c:\users\eric.falley\appdata\local\{83E92D95-7BFE-479C-985C-63F6B328BC1A}
2011-06-07 08:35:22 -------- d-----w- c:\users\eric.falley\appdata\local\{10EC1AFA-5809-4EB2-B2D3-D9CC3BDAB981}
2011-06-06 20:35:08 -------- d-----w- c:\users\eric.falley\appdata\local\{3C0E2CFC-8F8F-4915-B298-180A255BD97F}
2011-06-06 08:34:51 -------- d-----w- c:\users\eric.falley\appdata\local\{98A6774F-0FB2-4C43-A339-93E845C0F0EE}
2011-06-05 20:34:18 -------- d-----w- c:\users\eric.falley\appdata\local\{2678814C-5852-4A5C-8566-CF73683E8245}
2011-06-05 05:03:21 -------- d-----w- c:\users\eric.falley\appdata\local\{A1986C7E-2FDF-4266-B3D5-88F8CED06205}
2011-06-04 18:23:38 -------- d-----w- c:\program files\Cheat Engine 6.1
2011-06-04 17:03:07 -------- d-----w- c:\users\eric.falley\appdata\local\{0D22AAEE-D101-4F81-B04A-550495FB53BE}
2011-06-04 05:02:44 -------- d-----w- c:\users\eric.falley\appdata\local\{72B672FB-886E-43CA-A4F7-CCC31CCBC8BE}
2011-06-03 17:02:14 -------- d-----w- c:\users\eric.falley\appdata\local\{67760583-E45B-4E2B-A2F5-C7B39E285E7B}
2011-06-02 20:51:00 -------- d-----w- c:\users\eric.falley\appdata\local\{1EAA4C81-2021-4336-8A2C-9B32C831420C}
2011-06-02 07:04:53 -------- d-----w- c:\users\eric.falley\appdata\local\{4FC1F4DF-AEA9-476F-8763-CC206162C44E}
2011-06-01 19:04:39 -------- d-----w- c:\users\eric.falley\appdata\local\{4098DB0D-FD10-40FF-82CD-9B4F1E61CF83}
2011-06-01 06:55:53 -------- d-----w- c:\users\eric.falley\appdata\local\{1D728B29-2542-44FF-B839-93E3216CC0EF}
2011-05-31 22:23:32 289616 ----a-w- c:\program files\common files\microsoft shared\msclientdatamgr\MSCDM.DLL
2011-05-31 21:26:54 986000 ----a-w- c:\program files\common files\microsoft shared\office12\msoshext.dll
2011-05-31 18:55:24 -------- d-----w- c:\users\eric.falley\appdata\local\{6A04106B-E9CC-4AD6-BBAD-67DA7174EDCF}
2011-05-31 06:12:54 -------- d-----w- c:\users\eric.falley\appdata\local\{8E85C54C-8B91-430B-A855-1ED592BBB672}
2011-05-30 18:12:21 -------- d-----w- c:\users\eric.falley\appdata\local\{55D057FE-AB97-4A4D-B4C5-4DA693565359}
2011-05-29 20:08:36 -------- d-----w- c:\users\eric.falley\appdata\local\{8E494093-FC24-4F09-BD6B-D5BF062E9E30}
2011-05-29 09:01:09 -------- d-----w- c:\windows\system32\SPReview
2011-05-29 08:27:59 988160 ----a-w- c:\windows\system32\propsys.dll
2011-05-29 08:26:59 316416 ----a-w- c:\windows\system32\sharemediacpl.dll
2011-05-29 08:24:25 -------- d-----w- c:\windows\system32\EventProviders
2011-05-29 05:26:00 -------- d-----w- c:\users\eric.falley\appdata\local\{6A0B3D18-AB93-4473-954D-9A245EA92A4A}
2011-05-28 17:25:35 -------- d-----w- c:\users\eric.falley\appdata\local\{0A1FC941-FDE3-48E3-AC68-1714074CE8DB}
2011-05-28 04:18:08 -------- d-----w- c:\users\eric.falley\appdata\roaming\go
2011-05-28 04:18:03 -------- d-----w- c:\programdata\Easybits GO
2011-05-27 23:44:42 -------- d-----w- c:\users\eric.falley\appdata\local\{44E55DA1-9F8B-424A-9342-7417AB54845B}
2011-05-27 11:44:26 -------- d-----w- c:\users\eric.falley\appdata\local\{6A49A7D6-D68F-412A-ADCE-20FED34F606B}
2011-05-27 08:00:39 27008 ----a-w- c:\windows\system32\drivers\Diskdump.sys
2011-05-27 00:28:06 6637952 ----a-w- c:\program files\common files\microsoft shared\office12\MSORES.DLL
2011-05-26 23:41:03 -------- d-----w- c:\users\eric.falley\appdata\local\{EBC9EDA9-D327-43EB-A7D2-A73AE715E97B}
2011-05-26 04:53:48 -------- d-----w- c:\users\eric.falley\appdata\local\{C01AF4CB-F31F-4179-8560-F5E432B12590}
2011-05-25 16:53:16 -------- d-----w- c:\users\eric.falley\appdata\local\{48A86984-C912-4DC1-9CEC-A44AF563A4C8}
2011-05-25 04:52:40 -------- d-----w- c:\users\eric.falley\appdata\local\{9C7C8A70-30A7-41D8-98F9-3D7173E6090C}
2011-05-24 16:52:12 -------- d-----w- c:\users\eric.falley\appdata\local\{577F7C88-5A48-473A-A5E5-D3B126E4C4C3}
2011-05-23 21:50:43 -------- d-----w- c:\users\eric.falley\appdata\local\{611493F0-F00F-4307-8921-263D75B652C7}
2011-05-23 09:50:16 -------- d-----w- c:\users\eric.falley\appdata\local\{251C6964-C07A-48BC-8F9B-7626BDBE9ED9}
2011-05-22 21:49:54 -------- d-----w- c:\users\eric.falley\appdata\local\{238D8FB6-496A-48AE-A702-A38A1424A6DF}
2011-05-22 06:19:00 -------- d-----w- c:\users\eric.falley\appdata\local\{4275C437-9E38-47CA-BBF2-BBF91A96BA06}
2011-05-21 08:01:11 123904 ----a-w- c:\windows\system32\poqexec.exe
2011-05-19 19:27:33 -------- d-----w- c:\users\eric.falley\appdata\local\{9F4A9D22-0029-41BA-944B-3078D7551C67}
2011-05-19 08:09:39 31232 ----a-w- c:\windows\system32\prevhost.exe
2011-05-19 08:09:28 75776 ----a-w- c:\windows\system32\drivers\usbccgp.sys
2011-05-19 08:09:28 5888 ----a-w- c:\windows\system32\drivers\usbd.sys
2011-05-19 08:09:28 43008 ----a-w- c:\windows\system32\drivers\usbehci.sys
2011-05-19 08:09:28 284672 ----a-w- c:\windows\system32\drivers\usbport.sys
2011-05-19 08:09:28 258560 ----a-w- c:\windows\system32\drivers\usbhub.sys
2011-05-19 08:09:28 24064 ----a-w- c:\windows\system32\drivers\usbuhci.sys
2011-05-19 08:09:28 20480 ----a-w- c:\windows\system32\drivers\usbohci.sys
2011-05-19 08:05:19 80256 ----a-w- c:\windows\system32\drivers\amdsata.sys
2011-05-19 08:05:19 74240 ----a-w- c:\windows\system32\fsutil.exe
2011-05-19 08:05:19 22400 ----a-w- c:\windows\system32\drivers\amdxata.sys
2011-05-19 08:05:19 1699328 ----a-w- c:\windows\system32\esent.dll
2011-05-19 08:05:18 332160 ----a-w- c:\windows\system32\drivers\iaStorV.sys
2011-05-19 08:05:18 148864 ----a-w- c:\windows\system32\drivers\storport.sys
2011-05-19 08:05:18 143744 ----a-w- c:\windows\system32\drivers\nvstor.sys
2011-05-19 08:05:18 117120 ----a-w- c:\windows\system32\drivers\nvraid.sys
2011-05-19 08:02:16 2616320 ----a-w- c:\windows\explorer.exe
2011-05-19 05:41:11 -------- d-----w- c:\users\eric.falley\appdata\local\{C6C82299-29AE-46FB-9D62-0124221F62E7}
2011-05-19 05:38:26 -------- d-----w- c:\users\eric.falley\appdata\local\{20B83327-011F-4F53-A2FB-8D386F49EB46}
2011-05-18 17:40:51 -------- d-----w- c:\users\eric.falley\appdata\local\{0D803257-803C-4DB1-9C75-AF015C2D3E29}
2011-05-18 06:47:47 -------- d-----w- c:\programdata\Skype Extras
2011-05-18 06:45:53 -------- d-----r- c:\program files\Skype
2011-05-18 05:24:55 -------- d-----w- c:\users\eric.falley\appdata\local\{549552DC-6FAE-4945-9CD4-1718C5D98AA6}
2011-05-17 17:24:40 -------- d-----w- c:\users\eric.falley\appdata\local\{09379ACA-C895-40B9-A2D8-F3CA07BF4945}
2011-05-16 22:49:13 -------- d-----w- c:\users\eric.falley\appdata\local\{AAEB7715-6E23-498F-8615-ADB2421859C6}
2011-05-16 21:52:09 94040 ----a-w- c:\program files\common files\windows live\.cache\800c8cb01cc141303\DSETUP.dll
2011-05-16 21:52:09 525656 ----a-w- c:\program files\common files\windows live\.cache\800c8cb01cc141303\DXSETUP.exe
2011-05-16 21:52:09 1691480 ----a-w- c:\program files\common files\windows live\.cache\800c8cb01cc141303\dsetup32.dll
2011-05-16 21:46:39 -------- d-----w- c:\users\eric.falley\appdata\local\Windows Live
2011-05-14 02:11:54 641536 ----a-w- c:\program files\common files\microsoft shared\vc\msdia80.dll
2011-05-08 01:52:56 307200 ----a-w- c:\windows\system32\spool\prtprocs\w32x86\hpzppw72.dll
2011-04-28 22:46:15 -------- d-----w- c:\users\eric.falley\.thumbnails
2011-04-28 15:22:37 870912 ----a-w- c:\windows\system32\XpsPrint.dll
2011-04-23 23:33:54 -------- d-----w- c:\users\eric.falley\appdata\local\Sophos
2011-04-19 09:47:04 670032 ----a-w- c:\program files\common files\microsoft shared\vc\msdia90.dll
2011-04-18 14:29:14 229208 ----a-w- c:\windows\system32\drivers\VMM.sys
2011-04-17 03:05:13 165232 ---ha-w- c:\users\eric.falley\appdata\roaming\microsoft\virtual pc\VPCKeyboard.dll
2011-04-17 02:06:51 -------- d-----w- c:\program files\Microsoft Virtual PC
2011-04-14 17:06:44 28672 ----a-w- c:\windows\system32\dnscacheugc.exe
2011-04-14 17:06:44 132608 ----a-w- c:\windows\system32\dnsrslvr.dll
2011-04-14 17:03:22 191488 ----a-w- c:\windows\system32\FXSCOVER.exe
2011-04-14 17:03:21 802304 ----a-w- c:\windows\system32\WFS.exe
2011-04-14 17:03:14 288256 ----a-w- c:\windows\system32\XpsGdiConverter.dll
2011-04-14 16:54:20 1164288 ----a-w- c:\windows\system32\mfc42u.dll
2011-04-14 16:54:20 1137664 ----a-w- c:\windows\system32\mfc42.dll
2011-04-14 15:49:48 69632 ----a-w- c:\windows\system32\drivers\bowser.sys
2011-04-06 06:21:20 242704 ----a-w- c:\program files\common files\system\ole db\MSMDCB80.DLL
2011-04-04 04:00:08 -------- d-----w- c:\users\eric.falley\.gimp-2.6
2011-04-04 03:57:42 -------- d-----w- c:\program files\GIMP-2.0
2011-03-29 01:39:16 1568168 ----a-w- c:\program files\common files\microsoft shared\windows live\WLIDRES.DLL
2011-03-29 01:35:06 441216 ----a-w- c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
2011-03-29 01:33:28 856984 ----a-w- c:\program files\common files\microsoft shared\windows live\wlidcli.dll
2011-03-29 01:33:28 57752 ----a-w- c:\program files\common files\microsoft shared\windows live\msidcrl40.dll
2011-03-29 01:31:16 193920 ----a-w- c:\program files\common files\microsoft shared\windows live\WLIDSVCM.EXE
2011-03-29 01:31:14 332672 ----a-w- c:\program files\common files\microsoft shared\windows live\WLIDCREDPROV.DLL
2011-03-29 01:31:14 238464 ----a-w- c:\program files\common files\microsoft shared\windows live\WLIDPROV.DLL
2011-03-29 01:31:14 209280 ----a-w- c:\windows\system32\LIVESSP.DLL
2011-03-29 01:31:14 1713536 ----a-w- c:\program files\common files\microsoft shared\windows live\WLIDSVC.EXE
2011-03-29 01:31:14 145280 ----a-w- c:\program files\common files\microsoft shared\windows live\WLIDNSP.DLL
2011-03-28 23:36:46 196416 ----a-w- c:\program files\common files\microsoft shared\windows live\SQMAPI.DLL
2011-03-17 16:19:44 805376 ----a-w- c:\windows\system32\FntCache.dll
2011-03-17 16:19:44 739840 ----a-w- c:\windows\system32\d2d1.dll
2011-03-17 16:17:22 642048 ----a-w- c:\windows\system32\CPFilters.dll
2011-03-17 16:17:21 850944 ----a-w- c:\windows\system32\sbe.dll
2011-03-17 16:17:21 199680 ----a-w- c:\windows\system32\mpg2splt.ax
2011-03-16 23:55:58 -------- d-----w- c:\program files\Slawdog
2011-02-24 09:04:52 70656 ----a-w- c:\windows\system32\fontsub.dll
2011-02-24 09:04:40 219136 ----a-w- c:\windows\system32\d3d10_1core.dll
2011-02-24 09:04:40 161792 ----a-w- c:\windows\system32\d3d10_1.dll
2011-02-24 09:01:23 219008 ----a-w- c:\windows\system32\drivers\dxgmms1.sys
2011-02-24 09:01:23 107520 ----a-w- c:\windows\system32\cdd.dll
2011-02-24 09:01:22 728448 ----a-w- c:\windows\system32\drivers\dxgkrnl.sys
2011-02-20 20:10:31 -------- d-----w- c:\users\eric.falley\appdata\local\WinZip
2011-02-11 15:23:06 167480 ----a-w- c:\windows\system32\hppccompio.dll
2011-01-24 20:30:29 90624 ----a-w- c:\windows\system32\spool\prtprocs\w32x86\HPZPPWN7.DLL
2011-01-17 02:11:29 1776178 ----a-w- c:\program files\microsoft games\age of empires\rord\RoRd.exe
2011-01-17 02:11:29 1776085 ----a-w- c:\program files\microsoft games\age of empires\rord\AoEd.exe
2011-01-07 21:39:22 51024 ----a-w- c:\windows\system32\vcomp100.dll
2011-01-07 21:39:22 137544 ----a-w- c:\windows\system32\atl100.dll
2011-01-01 08:51:04 -------- d-----w- c:\program files\GoldWave
2010-12-31 23:01:52 81920 ----a-w- c:\windows\system32\JCRegEx.dll
2010-12-31 23:01:52 28672 ----a-w- c:\windows\system32\JCSortEx.dll
2010-12-31 23:01:51 244232 ----a-w- c:\windows\system32\MSFLXGRD.OCX
2010-12-31 23:01:51 215880 ----a-w- c:\windows\system32\MCI32.OCX
2010-12-31 23:01:51 155984 ------w- c:\windows\system32\COMDLG32.OCX
2010-12-31 23:01:51 131072 ----a-w- c:\windows\system32\JCDtEx.dll
2010-12-31 23:01:50 659264 ----a-w- c:\windows\system32\mscomct2.ocx
2010-12-31 23:01:50 414944 ----a-w- c:\windows\system32\comct332.ocx
2010-12-31 23:01:50 203976 ----a-w- c:\windows\system32\RICHTX32.OCX
2010-12-31 22:53:14 299520 ----a-w- c:\windows\uninst.exe
2010-12-22 23:19:56 -------- d-----w- c:\users\eric.falley\Age of Chivalry
2010-11-30 07:43:06 -------- d-----w- c:\program files\Audacity 1.3 Beta (Unicode)
2010-10-29 10:16:34 287232 ----a-w- c:\windows\system32\hpcpn109.dll
2010-10-29 10:01:52 328704 ----a-w- c:\windows\system32\hpmml109.dll
2010-10-29 10:01:40 278528 ----a-w- c:\windows\system32\hpmja109.dll
2010-10-29 10:01:16 223232 ----a-w- c:\windows\system32\hpmtp109.dll
2010-10-29 09:01:14 111104 ----a-w- c:\windows\system32\hpmco109.dll
2010-10-28 22:57:24 89600 ----a-w- c:\windows\system32\spool\prtprocs\w32x86\HPZPPLHN.DLL
2010-10-22 04:06:30 -------- d-----w- c:\users\eric.falley\appdata\roaming\AVG
2010-10-22 03:44:19 -------- d--h--w- c:\programdata\Common Files
2010-10-22 03:43:10 -------- d-----w- c:\windows\system32\drivers\AVG
2010-10-22 03:42:33 -------- d-----w- c:\program files\AVG
2010-10-22 03:35:53 -------- d-----w- c:\programdata\MFAData
2010-10-06 18:22:10 6812136 ----a-w- c:\programdata\microsoft\windows defender\definition updates\backup\mpengine.dll
2010-10-04 05:18:30 49252 ----a-w- c:\windows\system32\hpmnque.dll
2010-10-04 05:18:30 49250 ----a-w- c:\windows\system32\hpmnndps.dll
2010-09-22 07:33:52 -------- d-----w- C:\HTML
2010-09-12 01:51:39 -------- d-----w- c:\users\eric.falley\Tracing
2010-09-12 01:24:05 -------- d-----w- c:\program files\Microsoft SQL Server Compact Edition
2010-09-12 01:23:10 -------- d-----w- c:\program files\Microsoft
2010-09-12 01:13:44 -------- d-----w- c:\program files\common files\Windows Live
2010-09-09 05:22:28 737072 ----a-w- c:\programdata\microsoft\ehome\packages\sportsv2\sportstemplatecore\Microso ft.MediaCenter.Sports.UI.dll
2010-09-09 05:21:26 4277016 ----a-w- c:\programdata\microsoft\ehome\packages\mceclientux\updateablemarkup\markup .dll
2010-09-09 05:19:30 42776 ----a-w- c:\programdata\microsoft\ehome\packages\mceclientux\dsm\StartResources.dll
2010-09-09 05:19:26 588096 ----a-w- c:\programdata\microsoft\ehome\packages\mcespotlight\mcespotlight\Spotlight Resources.dll
2010-09-01 01:23:08 -------- d-----w- c:\users\eric.falley\appdata\local\ElevatedDiagnostics
2010-08-30 06:30:15 67969 ----a-w- c:\program files\microsoft games\age of chivalry\Uninstall Age of Chivalry.exe
2010-08-30 06:29:36 499712 ----a-w- c:\program files\microsoft games\age of chivalry\backup\language.dll
2010-08-30 06:29:36 339968 ----a-w- c:\program files\microsoft games\age of chivalry\backup\language_x1_p1.dll
2010-08-30 06:29:36 339968 ----a-w- c:\program files\microsoft games\age of chivalry\backup\language_x1.dll
2010-08-30 05:17:14 881664 ----a-w- c:\program files\microsoft games\age of empires ii -old\resource hacker\ResHacker.exe
2010-08-30 05:17:04 1779585 ----a-w- c:\program files\microsoft games\age of empires ii -old\genied\genied.exe
2010-08-30 05:17:04 1069056 ----a-w- c:\program files\microsoft games\age of empires ii -old\genied\Genied 3.0.exe
2010-08-30 05:17:03 1011712 ----a-w- c:\program files\microsoft games\age of empires ii -old\genied\Genied 2.0.exe
2010-08-26 13:54:05 53248 ----a-w- c:\windows\system32\CSVer.dll
2010-08-26 13:53:37 -------- d-----w- c:\program files\Boot Camp
2010-08-26 13:53:10 319456 ----a-w- c:\windows\DIFxAPI.dll
2010-08-26 13:46:51 -------- d-----w- c:\windows\system32\appmgmt
2010-08-26 03:54:07 679936 ----a-w- c:\windows\system32\D3DX81ab.dll
2010-08-26 03:54:07 1970176 ----a-w- c:\windows\system32\d3dx9.dll
2010-08-26 03:54:06 -------- d-----w- c:\program files\Cheat Engine
2010-08-25 06:02:51 -------- d-----w- c:\programdata\Sibelius Software
2010-08-25 06:01:45 -------- d-----w- c:\users\eric.falley\appdata\roaming\Sibelius Software
2010-08-25 05:46:33 61440 ----a-w- c:\windows\system32\NI_DFD_1_5.dll
2010-08-25 05:46:33 393216 ----a-w- c:\windows\system32\NI_IRC_1_2.dll
2010-08-25 05:46:33 -------- d-----w- c:\program files\Native Instruments
2010-08-25 05:44:37 -------- d-----w- c:\program files\Sibelius Software
2010-08-24 22:53:58 1622016 ------w- c:\program files\microsoft games\age of empires\EMPIRES.EXE
2010-08-24 22:53:57 1513984 ------w- c:\program files\microsoft games\age of empires\EMPIRESX.EXE
2010-08-24 22:53:55 319553 ------w- c:\program files\microsoft games\age of empires\Uninstal.Exe
2010-08-24 22:53:55 2744320 ------w- c:\program files\microsoft games\age of empires\SETUPENU.DLL
2010-08-24 22:53:49 174080 ------w- c:\program files\microsoft games\age of empires\language.dll
2010-08-24 22:53:49 160256 ------w- c:\program files\microsoft games\age of empires\languagex.dll
2010-08-24 22:53:31 29184 ------w- c:\program files\microsoft games\age of empires\data2\closedpw.exe
2010-08-24 22:53:07 29184 ------w- c:\program files\microsoft games\age of empires\data\closedpw.exe
2010-08-24 22:51:59 32768 ------w- c:\program files\microsoft games\age of empires\AoEHlp.dll
2010-08-24 22:51:58 32768 ------w- c:\program files\microsoft games\age of empires\aelaunch.dll
2010-08-24 22:51:54 -------- d-----w- c:\program files\Microsoft Games
2010-08-24 06:09:15 1779585 ----a-w- c:\program files\microsoft games\age of chivalry\genied\genied.exe
2010-08-24 06:09:15 1069056 ----a-w- c:\program files\microsoft games\age of chivalry\genied\Genied 3.0.exe
2010-08-24 06:09:13 1011712 ----a-w- c:\program files\microsoft games\age of chivalry\genied\Genied 2.0.exe
2010-08-24 06:09:12 881664 ----a-w- c:\program files\microsoft games\age of chivalry\resource hacker\ResHacker.exe
2010-08-24 03:31:06 -------- d-----w- c:\users\eric.falley\appdata\local\Google
2010-08-23 23:18:15 -------- d-----w- c:\users\eric.falley\appdata\local\Mozilla
2010-08-23 20:26:54 -------- d-----w- c:\users\eric.falley\appdata\local\Diagnostics
2010-08-23 18:27:24 -------- d-----w- c:\users\eric.falley\appdata\local\VirtualStore
2010-08-23 14:33:33 -------- d-----w- c:\program files\Bradford Networks
2010-08-19 19:33:17 -------- d-----w- c:\programdata\Sophos
2010-08-19 19:32:46 -------- d-----w- c:\program files\Sophos
2010-08-19 19:29:06 -------- d-----w- c:\windows\wlansvc
2010-08-19 19:24:37 18432 ----a-w- c:\windows\system32\drivers\AppleBtBc.sys
2010-08-19 19:24:14 215656 ----a-w- c:\windows\system32\NVCOSMU.DLL
2010-08-19 19:24:14 18944 ----a-w- c:\windows\system32\drivers\nvsmu.sys
2010-08-19 19:24:13 959776 ----a-w- c:\windows\system32\fdco2.dll
2010-08-19 19:24:13 521128 ----a-w- c:\windows\system32\DPInst.exe
2010-08-19 19:24:13 296936 ----a-w- c:\windows\system32\drivers\nvmf6232.sys
2010-08-19 19:24:13 219752 ----a-w- c:\windows\system32\nvconrm.dll
2010-08-19 19:22:30 29568 ----a-w- c:\windows\system32\drivers\applemtp.sys
2010-08-19 19:22:30 10496 ----a-w- c:\windows\system32\drivers\applemtm.sys
2010-08-19 19:22:15 65824 ----a-w- c:\windows\system32\CirrusAPO_x86.dll
2010-08-19 19:22:15 13824 ----a-w- c:\windows\system32\drivers\CS420x86.sys
2010-08-19 19:22:15 -------- d-----w- c:\program files\Motorola
2010-08-19 19:22:00 836896 ----a-w- c:\windows\RtlExUpd.dll
2010-08-19 19:22:00 -------- d--h--w- c:\program files\Temp
2010-08-19 19:22:00 -------- d-----w- c:\program files\Realtek
2010-08-19 19:21:59 757760 ----a-w- c:\program files\common files\installshield\professional\runtime\11\50\intel32\iKernel.dll
2010-08-19 19:21:59 69715 ----a-w- c:\program files\common files\installshield\professional\runtime\11\50\intel32\ctor.dll
2010-08-19 19:21:59 5632 ----a-w- c:\program files\common files\installshield\professional\runtime\11\50\intel32\DotNetInstaller.exe
2010-08-19 19:21:59 32768 ----a-w- c:\program files\common files\installshield\professional\runtime\Objectps.dll
2010-08-19 19:21:59 274432 ----a-w- c:\program files\common files\installshield\professional\runtime\11\50\intel32\iscript.dll
2010-08-19 19:21:59 204800 ----a-w- c:\program files\common files\installshield\professional\runtime\11\50\intel32\iuser.dll
2010-08-19 19:21:58 331908 ----a-w- c:\program files\common files\installshield\professional\runtime\11\50\intel32\setup.dll
2010-08-19 19:21:58 200836 ----a-w- c:\program files\common files\installshield\professional\runtime\11\50\intel32\iGdi.dll
2010-08-19 19:21:18 -------- d-----w- c:\program files\IDT
2010-08-19 19:20:57 -------- d-----w- C:\Intel
2010-08-19 19:20:24 91376 ----a-w- c:\windows\system32\bcmwlcoi.dll
2010-08-19 19:20:24 3867936 ----a-w- c:\windows\system32\bcmihvsrv.dll
2010-08-19 19:20:24 3556640 ----a-w- c:\windows\system32\bcmihvui.dll
2010-08-19 19:20:24 2661368 ----a-w- c:\windows\system32\drivers\BCMWL6.SYS
2010-08-19 19:19:49 24064 ----a-w- c:\windows\system32\drivers\KeyMagic.sys
2010-08-19 19:19:49 1419232 ----a-w- c:\windows\system32\WdfCoInstaller01005.dll
2010-08-19 19:19:01 -------- d-----w- c:\program files\NVIDIA Corporation
2010-08-16 09:03:37 -------- d-----w- c:\windows\Panther
2010-08-16 09:03:23 -------- d-sh--w- C:\Boot
2010-08-16 06:09:36 -------- d-sh--w- C:\Recovery
2010-08-16 03:22:02 304289 ----a-w- c:\windows\system32\FirstLogon.exe
2010-08-16 03:21:52 88168 ----a-w- c:\windows\system32\nvinit.dll
2010-08-16 03:21:52 316008 ----a-w- c:\windows\system32\nvdecodemft.dll
2010-08-16 03:21:52 223848 ----a-w- c:\windows\system32\nvumdshim.dll
2010-08-16 03:21:51 56424 ----a-w- c:\windows\system32\OpenCL.dll
2010-08-16 03:21:51 227944 ----a-w- c:\windows\system32\nvcod1913.dll
2010-08-16 03:21:51 227944 ----a-w- c:\windows\system32\nvcod.dll
2010-08-16 03:21:30 -------- d-----w- C:\Boot Camp
2010-08-16 01:41:30 293376 ----a-w- c:\windows\system32\browserchoice.exe
2010-08-16 01:27:05 237072 ------w- c:\windows\system32\MpSigStub.exe
2010-08-16 01:25:56 -------- d--h--w- c:\windows\msdownld.tmp
2010-08-16 01:22:04 33104 ----a-w- c:\windows\system32\spool\prtprocs\w32x86\msonpppr.dll
2010-08-16 01:22:04 31640 ----a-w- c:\windows\system32\msonpmon.dll
2010-08-16 01:21:13 -------- d-----w- c:\windows\PCHEALTH
2010-08-16 01:19:01 729161 ----a-w- c:\windows\system32\fpimage.dll
2010-08-16 01:19:01 1410704 ----a-w- c:\windows\system32\FPSPR70.ocx
2010-08-16 01:19:01 -------- d-----w- c:\program files\Respondus LockDown Browser
2010-08-16 01:18:44 423656 ----a-w- c:\windows\system32\deployJava1.dll
2010-08-16 01:13:51 -------- d-----w- c:\windows\system32\wbem\Performance
2010-08-16 01:13:44 26600 ----a-w- c:\windows\system32\drivers\GEARAspiWDM.sys
2010-08-16 01:13:44 107368 ----a-w- c:\windows\system32\GEARAspi.dll
2010-08-16 01:13:31 -------- d-----w- c:\programdata\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
2010-08-16 01:11:25 -------- d-sh--w- c:\windows\Installer
2010-07-11 20:47:40 453456 ----a-w- c:\windows\system32\d3dx10_41.dll
2010-07-11 20:47:40 1846632 ----a-w- c:\windows\system32\D3DCompiler_41.dll
2010-06-29 13:24:00 2182536 ----a-w- c:\program files\common files\system\msmapi\MSNCON32.DLL
2010-05-06 20:19:02 162816 ----a-w- c:\windows\system32\hplbddrv.dll
2010-04-01 09:57:44 95994 ----a-w- c:\windows\system32\nvcoproc.bin
2010-04-01 09:57:00 82024 ----a-w- c:\windows\system32\nv3dappshextr.dll
2010-04-01 09:57:00 645480 ----a-w- c:\windows\system32\nvvsvc.exe
2010-04-01 09:57:00 62312 ----a-w- c:\windows\system32\nvshext.dll
2010-04-01 09:57:00 3984744 ----a-w- c:\windows\system32\nvcpl.dll
2010-04-01 09:57:00 2869608 ----a-w- c:\windows\system32\nvsvc.dll
2010-04-01 09:57:00 2557288 ----a-w- c:\windows\system32\nvsvcr.dll
2010-04-01 09:57:00 149608 ----a-w- c:\windows\system32\nv3dappshext.dll
2010-04-01 09:57:00 108392 ----a-w- c:\windows\system32\nvmctray.dll
2010-03-23 02:29:54 19336 ----a-w- c:\program files\common files\system\msmapi\1033\MSNCON32.DLL
2010-03-23 02:29:54 155496 ----a-w- c:\program files\common files\system\msmapi\1033\MSNCONR.DLL
2010-03-19 20:02:22 143224 ----a-w- c:\program files\msbuild\microsoft.cpp\v4.0\platforms\win32\Microsoft.Build.CPPTasks.W in32.dll
2010-03-19 20:02:22 140160 ----a-w- c:\program files\msbuild\microsoft.cpp\v4.0\platforms\itanium\Microsoft.Build.CPPTasks .Itanium.dll
2010-03-19 15:55:26 154496 ----a-w- c:\program files\msbuild\microsoft.cpp\v4.0\Microsoft.Build.CPPTasks.Common.dll
2010-03-19 15:55:26 142712 ----a-w- c:\program files\msbuild\microsoft.cpp\v4.0\platforms\x64\Microsoft.Build.CPPTasks.x64 .dll
2010-03-19 05:21:56 799568 ----a-w- c:\program files\common files\microsoft shared\vc\msdia100.dll
2010-03-18 21:47:22 17760 ----a-w- c:\windows\system32\aspnet_counters.dll
2010-03-18 18:16:28 771424 ----a-w- c:\windows\system32\msvcr100_clr0400.dll
2010-03-18 15:15:26 743248 ----a-w- c:\windows\system32\msvcp100d.dll
2010-03-18 15:15:26 1498960 ----a-w- c:\windows\system32\msvcr100d.dll
2010-02-08 13:33:04 359320 ----a-w- c:\windows\system32\vfprintpthelper.dll
2010-02-08 13:33:02 337304 ----a-w- c:\windows\system32\vfbasics.dll
2010-02-08 13:33:02 30616 ----a-w- c:\windows\system32\vfntlmless.dll
2010-02-08 13:33:02 288664 ----a-w- c:\windows\system32\vfprint.dll
2010-02-08 13:33:02 230296 ----a-w- c:\windows\system32\vfLuaPriv.dll
2010-02-08 13:33:02 165272 ----a-w- c:\windows\system32\appverif.exe
2010-02-08 13:33:02 161176 ----a-w- c:\windows\system32\vfcompat.dll
2010-02-08 13:33:02 138768 ----a-w- c:\windows\system32\vrfcore.dll
2010-01-19 20:10:44 63488 ----a-w- c:\windows\system32\HPBWSDR.DLL
2009-09-30 18:01:58 20040 ----a-w- c:\programdata\microsoft\identitycrl\production\ppcrlconfig.dll
2009-09-30 17:40:02 1141640 ----a-w- c:\program files\common files\system\msmapi\msidcrl40.dll
2009-07-21 06:05:40 1348432 ----a-w- c:\windows\system32\msxml4.dll
2009-07-14 07:20:38 -------- d-----w- c:\program files\Windows Journal
2009-07-14 07:20:31 -------- d-----w- c:\windows\ShellNew
2009-07-14 07:20:31 -------- d-----w- c:\windows\ehome
2009-07-14 07:20:30 -------- d-sh--w- c:\windows\BitLockerDiscoveryVolumeContents
2009-07-14 07:20:30 -------- d-----w- c:\windows\RemotePackages
2009-07-14 07:19:51 47616 ----a-w- c:\windows\system32\vmictimeprovider.dll
2009-07-14 04:56:48 -------- d-----w- c:\windows\system32\winrm
2009-07-14 04:56:48 -------- d-----w- c:\windows\system32\WCN
2009-07-14 04:56:48 -------- d-----w- c:\windows\system32\slmgr
2009-07-14 04:56:48 -------- d-----w- c:\windows\system32\en
2009-07-14 04:56:48 -------- d-----w- c:\windows\system32\drivers\umdf\en-US
2009-07-14 04:56:48 -------- d-----w- c:\windows\system32\drivers\en-US
2009-07-14 04:56:48 -------- d-----w- c:\windows\system32\0409
2009-07-14 04:56:48 -------- d-----w- c:\windows\en-US
2009-07-14 04:56:48 -------- d-----w- c:\windows\DigitalLocker
2009-07-14 04:56:47 -------- d-----w- c:\windows\system32\wbem\en-US
2009-07-14 04:56:47 -------- d-----w- c:\windows\system32\Printing_Admin_Scripts
2009-07-14 04:55:08 3584 ----a-w- c:\windows\system32\spool\prtprocs\w32x86\en-us\LXKPTPRC.DLL.mui
2009-07-14 04:53:55 -------- d-sh--we C:\Documents and Settings
2009-07-14 04:53:50 -------- d-----w- c:\windows\system32\wbem\mof\good
2009-07-14 04:53:50 -------- d-----w- c:\windows\system32\wbem\mof\bad
2009-07-14 04:41:11 -------- d-----w- c:\windows\system32\wbem\MOF
2009-07-14 04:34:16 -------- d-----w- c:\windows\Setup
2009-07-14 04:34:13 -------- d-----w- c:\windows\ServiceProfiles
2009-07-14 04:34:06 -------- d-s---w- c:\windows\system32\Microsoft
.
==================== Find3M ====================
.
2012-12-03 15:39:40 9373032 ----a-w- c:\windows\system32\drivers\nvlddmkm.sys
2012-12-03 15:39:40 889192 ----a-w- c:\windows\system32\nvdispgenco32.dll
2012-12-03 15:39:40 7819016 ----a-w- c:\windows\system32\nvcuda.dll
2012-12-03 15:39:40 6149904 ----a-w- c:\windows\system32\nvopencl.dll
2012-12-03 15:39:40 2606440 ----a-w- c:\windows\system32\nvcuvid.dll
2012-12-03 15:39:40 2496976 ----a-w- c:\windows\system32\nvapi.dll
2012-12-03 15:39:40 20335976 ----a-w- c:\windows\system32\nvoglv32.dll
2012-12-03 15:39:40 1874280 ----a-w- c:\windows\system32\nvcuvenc.dll
2012-12-03 15:39:40 17559912 ----a-w- c:\windows\system32\nvcompiler.dll
2012-12-03 15:39:40 15122280 ----a-w- c:\windows\system32\nvd3dum.dll
2012-12-03 15:39:40 12603960 ----a-w- c:\windows\system32\nvwgf2um.dll
2012-12-03 15:39:40 1011048 ----a-w- c:\windows\system32\nvdispco32.dll
2012-11-14 02:09:22 1800704 ----a-w- c:\windows\system32\jscript9.dll
2012-11-14 01:58:15 1427968 ----a-w- c:\windows\system32\inetcpl.cpl
2012-11-14 01:57:37 1129472 ----a-w- c:\windows\system32\wininet.dll
2012-11-14 01:49:25 142848 ----a-w- c:\windows\system32\ieUnatt.exe
2012-11-14 01:48:27 420864 ----a-w- c:\windows\system32\vbscript.dll
2012-11-14 01:44:42 2382848 ----a-w- c:\windows\system32\mshtml.tlb
2012-11-02 05:11:31 376832 ----a-w- c:\windows\system32\dpnet.dll
2012-10-16 07:39:52 561664 ----a-w- c:\windows\apppatch\AcLayers.dll
2012-10-04 16:47:18 169984 ----a-w- c:\windows\system32\winsrv.dll
2012-10-04 16:43:05 293376 ----a-w- c:\windows\system32\KernelBase.dll
2012-10-04 14:57:58 271360 ----a-w- c:\windows\system32\conhost.exe
2012-10-04 14:41:50 6144 ---ha-w- c:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2012-10-04 14:41:50 4608 ---ha-w- c:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2012-10-04 14:41:50 3584 ---ha-w- c:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2012-10-04 14:41:50 3072 ---ha-w- c:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2012-08-23 15:52:09 3072 ----a-w- c:\windows\system32\drivers\en-us\tsusbflt.sys.mui
2012-08-23 14:48:14 221184 ----a-w- c:\windows\system32\rdpudd.dll
2012-08-23 14:44:32 14848 ----a-w- c:\windows\system32\drivers\rdpvideominiport.sys
2012-08-23 14:40:25 49664 ----a-w- c:\windows\system32\drivers\TsUsbFlt.sys
2012-08-23 14:10:40 12288 ----a-w- c:\windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2012-08-23 14:10:04 13312 ----a-w- c:\windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2012-08-23 13:52:25 12800 ----a-w- c:\windows\system32\RdpGroupPolicyExtension.dll
2012-08-23 13:47:20 46592 ----a-w- c:\windows\system32\MsRdpWebAccess.dll
2012-08-23 13:46:20 16896 ----a-w- c:\windows\system32\wksprtPS.dll
2012-08-23 13:32:59 32768 ----a-w- c:\windows\system32\TsUsbGDCoInstaller.dll
2012-08-23 13:18:14 37376 ----a-w- c:\windows\system32\tsgqec.dll
2012-08-23 11:40:43 56320 ----a-w- c:\windows\system32\TSWbPrxy.exe
2012-08-23 11:32:48 317440 ----a-w- c:\windows\system32\wksprt.exe
2012-08-23 11:15:57 269312 ----a-w- c:\windows\system32\aaclient.dll
2012-08-23 11:12:17 192000 ----a-w- c:\windows\system32\rdpendp_winip.dll
2012-08-23 10:39:24 1048064 ----a-w- c:\windows\system32\mstsc.exe
2012-08-23 10:08:49 2739712 ----a-w- c:\windows\system32\rdpcorets.dll
2012-08-23 08:19:01 4916224 ----a-w- c:\windows\system32\mstscax.dll
2012-08-21 14:59:16 2048 ----a-w- c:\windows\system32\wbem\WmiApRes.dll
2012-08-21 14:59:15 1536 ----a-w- c:\windows\system32\winrsmgr.dll
2012-08-21 14:58:22 328704 ----a-w- c:\windows\system32\wbem\WmiPrvSE.exe
2012-08-21 14:58:00 123904 ----a-w- c:\windows\system32\wbem\WMIADAP.exe
2012-08-21 14:57:41 31744 ----a-w- c:\windows\system32\wbem\WinMgmtR.dll
2012-08-21 14:56:55 60416 ----a-w- c:\windows\system32\WsmRes.dll
2012-08-21 14:29:39 9728 ----a-w- c:\windows\system32\winrssrv.dll
2012-08-21 14:28:12 10240 ----a-w- c:\windows\system32\wsmplpxy.dll
2012-08-21 14:20:26 46080 ----a-w- c:\windows\system32\ncobjapi.dll
2012-08-21 14:18:42 89088 ----a-w- c:\windows\system32\mi.dll
2012-08-21 14:14:57 61440 ----a-w- c:\windows\system32\wecapi.dll
2012-08-21 14:10:57 283136 ----a-w- c:\windows\system32\wbem\esscli.dll
2012-08-21 14:08:59 83456 ----a-w- c:\windows\system32\wevtfwd.dll
2012-08-21 14:06:13 49664 ----a-w- c:\windows\system32\wbem\wbemsvc.dll
2012-08-21 14:01:18 12800 ----a-w- c:\windows\system32\Register-CimProvider.exe
2012-08-21 13:56:35 78336 ----a-w- c:\windows\system32\wecutil.exe
2012-08-21 13:54:17 155648 ----a-w- c:\windows\system32\wecsvc.dll
2012-08-21 13:46:44 72192 ----a-w- c:\windows\system32\wbem\WMICOOKR.dll
2012-08-21 13:44:32 59904 ----a-w- c:\windows\system32\prvdmofcomp.dll
2012-08-21 13:44:27 63488 ----a-w- c:\windows\system32\wbem\xml\wmi2xml.dll
2012-08-21 13:44:01 36864 ----a-w- c:\windows\system32\wbem\unsecapp.exe
2012-08-21 13:43:59 61440 ----a-w- c:\windows\system32\wbem\mofinstall.dll
2012-08-21 13:43:33 287232 ----a-w- c:\windows\system32\wbem\repdrvfs.dll
2012-08-21 13:43:27 154112 ----a-w- c:\windows\system32\wmitomi.dll
2012-08-21 13:42:18 43520 ----a-w- c:\windows\system32\wbem\wmitimep.dll
2012-08-21 13:41:23 18944 ----a-w- c:\windows\system32\wbem\mofcomp.exe
2012-08-21 13:39:15 93184 ----a-w- c:\windows\system32\wbem\WmiApRpl.dll
2012-08-21 13:38:03 129536 ----a-w- c:\windows\system32\wbem\WmiDcPrv.dll
2012-08-21 13:37:44 636928 ----a-w- c:\windows\system32\wbem\fastprox.dll
2012-08-21 13:37:13 195072 ----a-w- c:\windows\system32\wbem\mofd.dll
2012-08-21 13:37:13 180224 ----a-w- c:\windows\system32\wbem\wbemtest.exe
2012-08-21 13:36:10 139776 ----a-w- c:\windows\system32\wbem\WmiApSrv.exe
2012-08-21 13:36:08 124416 ----a-w- c:\windows\system32\wmidcom.dll
2012-08-21 13:35:39 163840 ----a-w- c:\windows\system32\wbem\WMIsvc.dll
2012-08-21 13:34:35 91136 ----a-w- c:\windows\system32\wbem\wmiutils.dll
2012-08-21 13:34:24 351744 ----a-w- c:\windows\system32\wbem\wbemess.dll
2012-08-21 13:34:05 382464 ----a-w- c:\windows\system32\wbemcomn2.dll
2012-08-21 13:33:55 105472 ----a-w- c:\windows\system32\wbem\stdprov.dll
2012-08-21 13:33:23 172544 ----a-w- c:\windows\system32\miutils.dll
2012-08-21 13:33:22 29184 ----a-w- c:\windows\system32\wbem\wbemprox.dll
2012-08-21 13:32:57 21504 ----a-w- c:\windows\system32\WsmAgent.dll
2012-08-21 13:32:44 909824 ----a-w- c:\windows\system32\wbem\wbemcore.dll
2012-08-21 13:32:33 57344 ----a-w- c:\windows\system32\wbem\wbemcons.dll
2012-08-21 13:31:21 529408 ----a-w- c:\windows\system32\wbem\WmiPrvSD.dll
2012-08-21 13:29:41 192512 ----a-w- c:\windows\system32\framedynos.dll
2012-08-21 13:27:19 189952 ----a-w- c:\windows\system32\framedyn.dll
2012-08-21 13:13:15 20480 ----a-w- c:\windows\system32\winrshost.exe
2012-08-21 13:04:35 39936 ----a-w- c:\windows\system32\winrs.exe
2012-08-21 13:03:34 35840 ----a-w- c:\windows\system32\wsmprovhost.exe
2012-08-21 13:02:45 138752 ----a-w- c:\windows\system32\WsmAuto.dll
2012-08-21 13:02:39 92160 ----a-w- c:\windows\system32\winrscmd.dll
2012-08-21 13:02:26 227328 ----a-w- c:\windows\system32\WsmWmiPl.dll
2012-08-21 12:56:02 526848 ----a-w- c:\windows\system32\WsmGCDeps.dll
2012-08-21 12:52:14 2039296 ----a-w- c:\windows\system32\WsmSvc.dll
2012-08-21 12:50:19 36352 ----a-w- c:\windows\system32\PSModuleDiscoveryProvider.dll
.
============= FINISH: 6:29:31.82 ===============
Attach.txt
.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2012-11-20.01)
.
Microsoft Windows 7 Enterprise
Boot Device: \Device\HarddiskVolume3
Install Date: 8/19/2010 1:17:34 PM
System Uptime: 1/1/2001 6:01:48 AM (0 hours ago)
.
Motherboard: Apple Inc. | | Mac-F22C8AC8
Processor: Intel(R) Core(TM)2 Duo CPU P7550 @ 2.26GHz | U2E1 | 2255/266mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 116 GiB total, 24.593 GiB free.
D: is CDROM ()
.
==== Disabled Device Manager Items =============
.
Class GUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Description: SBRE
Device ID: ROOT\LEGACY_SBRE\0000
Manufacturer:
Name: SBRE
PNP Device ID: ROOT\LEGACY_SBRE\0000
Service: SBRE
.
==== System Restore Points ===================
.
No restore point in system.
.
==== Installed Programs ======================
.
Update for Microsoft Office 2007 (KB2508958)
32 Bit HP CIO Components Installer
7-Zip 9.20
Adobe AIR
Adobe Flash Player 11 Plugin
Adobe Reader X (10.1.4)
Age of Chivalry: Hegemony 1.75
Age of Empires III
Amazon Kindle
Amazon MP3 Downloader 1.0.14
AOK Mod Pack Studio
Apple Application Support
Apple Mobile Device Support
Apple Software Update
Application Verifier
Audacity 1.3.12 (Unicode)
AVG PC Tuneup 2011
Avid License Control
Bonjour
Boot Camp Services
Bradford Persistent Agent
Cheat Engine 5.6.1
Cheat Engine 6.1
Chessmaster Grandmaster Edition
ClassicsOnline
D3DX10
Debugging Tools for Windows (x86)
DriverAgent by eSupport.com
Dropbox
DRS Explorer v1.1.98
FileZilla Client 3.5.3
GameRanger
GIMP 2.6.11
GoldWave v5.58
Google Chrome
Google Earth
Google Talk Plugin
Google Update Helper
Heroes of Newerth
iCloud
Indeo Compressor
Indeo® Software
iTunes
Java Auto Updater
Java(TM) 6 Update 21
Junk Mail filter update
LAME v3.99.3 (for Windows)
Microsoft .NET Framework 4 Client Profile
Microsoft .NET Framework 4 Extended
Microsoft .NET Framework 4 Multi-Targeting Pack
Microsoft Age of Empires Gold
Microsoft Age of Empires II
Microsoft Age of Empires II Trial Version
Microsoft Age of Empires II: The Conquerors Expansion
Microsoft Age of Empires II: The Conquerors Expansion Trial
Microsoft Application Error Reporting
Microsoft Help Viewer 1.0
Microsoft Office 2007 Service Pack 3 (SP3)
Microsoft Office Access MUI (English) 2007
Microsoft Office Access Setup Metadata MUI (English) 2007
Microsoft Office Enterprise 2007
Microsoft Office Excel MUI (English) 2007
Microsoft Office File Validation Add-In
Microsoft Office Groove MUI (English) 2007
Microsoft Office Groove Setup Metadata MUI (English) 2007
Microsoft Office InfoPath MUI (English) 2007
Microsoft Office Live Add-in 1.3
Microsoft Office OneNote MUI (English) 2007
Microsoft Office Outlook Connector
Microsoft Office Outlook MUI (English) 2007
Microsoft Office PowerPoint MUI (English) 2007
Microsoft Office Proof (English) 2007
Microsoft Office Proof (French) 2007
Microsoft Office Proof (Spanish) 2007
Microsoft Office Proofing (English) 2007
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
Microsoft Office Publisher MUI (English) 2007
Microsoft Office Shared MUI (English) 2007
Microsoft Office Shared Setup Metadata MUI (English) 2007
Microsoft Office Word MUI (English) 2007
Microsoft Silverlight
Microsoft SQL Server 2005 Compact Edition [ENU]
Microsoft Virtual PC 2007
Microsoft Visual C++ Compilers 2010 Standard - enu - x86
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319
Microsoft Windows Performance Toolkit
Microsoft Windows SDK .NET Framework Tools (30514)
Microsoft Windows SDK for Visual Studio .NET 4.0 Framework Tools
Microsoft Windows SDK for Windows 7 (7.1)
Microsoft Windows SDK for Windows 7 Common Utilities (30514)
Microsoft Windows SDK for Windows 7 Headers and Libraries (30514)
Microsoft Windows SDK for Windows 7 Samples (30514)
Microsoft Windows SDK for Windows 7 Utilities for Win32 Development (30514)
Microsoft Windows SDK Intellisense and Reference Assemblies (30514)
Microsoft Windows SDK MSHelp (30514)
Microsoft Windows SDK Net Fx Interop Headers And Libraries (30514)
Mozilla Firefox 17.0.1 (x86 en-US)
Mozilla Maintenance Service
MSVCRT
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
Norton Internet Security
Notepad++
NUnit 2.5.2
NVIDIA Control Panel 310.70
NVIDIA Display Control Panel
NVIDIA Graphics Driver 310.70
NVIDIA Install Application
NVIDIA Stereoscopic 3D Driver
Opera 12.02
QuickTime
Realtek High Definition Audio Driver
Respondus LockDown Browser
Safari
Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2729449)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2737019)
Security Update for Microsoft .NET Framework 4 Extended (KB2416472)
Security Update for Microsoft .NET Framework 4 Extended (KB2487367)
Security Update for Microsoft .NET Framework 4 Extended (KB2656351)
Security Update for Microsoft Office 2007 suites (KB2596615) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596672) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596744) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596754) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596785) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596792) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596856) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596871) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2597969) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2687311) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2687439) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2687441) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2760416) 32-Bit Edition
Security Update for Microsoft Office Excel 2007 (KB2687307) 32-Bit Edition
Security Update for Microsoft Office InfoPath 2007 (KB2687440) 32-Bit Edition
Security Update for Microsoft Office PowerPoint 2007 (KB2596764) 32-Bit Edition
Security Update for Microsoft Office PowerPoint 2007 (KB2596912) 32-Bit Edition
Security Update for Microsoft Office Publisher 2007 (KB2596705) 32-Bit Edition
Security Update for Microsoft Office Word 2007 (KB2760421) 32-Bit Edition
SharpDevelop 4.1
Sibelius 5
Sibelius 7 OpenType Fonts
Sibelius 7.1.0.54
Sibelius Scorch (all browsers)
Sibelius Scorch (Firefox, Opera, Netscape only)
Sibelius Sounds Choral
Sibelius Sounds Essentials
Skype 5.10
SmartFTP Client
SmartFTP Client 4.0 Setup Files (remove only)
Sophos Anti-Virus
Sophos AutoUpdate
Sophos Remote Management System
Steam
SUPER © v2011.build.49 (July 1st, 2011) version v2011.build.49
Team Fortress 2
TreeSize Free V2.7
Update for 2007 Microsoft Office System (KB967642)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217)
Update for Microsoft .NET Framework 4 Extended (KB2468871)
Update for Microsoft .NET Framework 4 Extended (KB2533523)
Update for Microsoft .NET Framework 4 Extended (KB2600217)
Update for Microsoft Office 2007 Help for Common Features (KB963673)
Update for Microsoft Office 2007 suites (KB2596660) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2596848) 32-Bit Edition
Update for Microsoft Office Access 2007 Help (KB963663)
Update for Microsoft Office Excel 2007 Help (KB963678)
Update for Microsoft Office Infopath 2007 Help (KB963662)
Update for Microsoft Office OneNote 2007 Help (KB963670)
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition
Update for Microsoft Office Outlook 2007 Help (KB963677)
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2760573) 32-Bit Edition
Update for Microsoft Office Powerpoint 2007 Help (KB963669)
Update for Microsoft Office Publisher 2007 Help (KB963667)
Update for Microsoft Office Script Editor Help (KB963671)
Update for Microsoft Office Word 2007 Help (KB963665)
Version 3.1
Voobly
WhoCrashed 3.05
Windows Driver Package - Apple Inc. (applebt) Bluetooth (09/15/2008 2.1.2.0)
Windows Driver Package - Apple Inc. (AppleUSBEthernet) Net (01/11/2008 3.4.3.18)
Windows Driver Package - Apple Inc. Apple Bluetooth Enabler (06/27/2007 2.0.0.1)
Windows Driver Package - Apple Inc. Apple Broadcom Bluetooth (03/01/2010 3.1.0.3)
Windows Driver Package - Apple Inc. Apple Built-in iSight (10/25/2007 2.0.1.0)
Windows Driver Package - Apple Inc. Apple Display (01/23/2009 3.0.0.0)
Windows Driver Package - Apple Inc. Apple Display (12/19/2007 2.0.2.0)
Windows Driver Package - Apple Inc. Apple IR Receiver (02/21/2008 2.0.4.0)
Windows Driver Package - Apple Inc. Apple Keyboard (03/24/2010 3.1.0.3)
Windows Driver Package - Apple Inc. Apple Keyboard (09/15/2008 2.1.2.0)
Windows Driver Package - Apple Inc. Apple Multitouch (02/11/2010 3.1.0.0)
Windows Driver Package - Apple Inc. Apple Multitouch (12/04/2008 2.1.2.100)
Windows Driver Package - Apple Inc. Apple Multitouch Mouse (02/11/2010 3.1.0.0)
Windows Driver Package - Apple Inc. Apple Multitouch Mouse (12/04/2008 2.1.2.100)
Windows Driver Package - Apple Inc. Apple ODD (01/17/2008 2.0.2.2)
Windows Driver Package - Apple Inc. Apple Trackpad (07/13/2009 3.0.0.1)
Windows Driver Package - Apple Inc. Apple Trackpad (10/09/2007 2.0.1.5)
Windows Driver Package - Apple Inc. Apple Trackpad Enabler (07/13/2009 3.0.0.1)
Windows Driver Package - Apple Inc. Apple Trackpad Enabler (10/09/2007 2.0.1.5)
Windows Driver Package - Apple Inc. Apple Wireless Mouse (11/30/2009 3.0.0.6)
Windows Driver Package - Apple Inc. Bluetooth (03/01/2010 3.0.0.5)
Windows Driver Package - Apple Inc. System (08/22/2008 2.1.1.1)
Windows Driver Package - Atheros Communications Inc. (athr) Net (09/18/2008 7.6.1.122)
Windows Driver Package - Atheros Communications Inc. (athr) Net (11/18/2009 8.0.0.258)
Windows Driver Package - Atheros Communications Inc. Net (09/18/2008 7.6.1.122)
Windows Driver Package - Broadcom (b57nd60x) Net (05/28/2009 12.2.0.3)
Windows Driver Package - Broadcom (BCM43XX) Net (08/21/2009 5.60.18.8)
Windows Driver Package - Cirrus Logic, Inc. (CirrusFilter) MEDIA (03/12/2010 6.6001.1.23)
Windows Driver Package - Cirrus Logic, Inc. (CirrusFilter) MEDIA (03/24/2010 6.6001.1.24)
Windows Driver Package - Intel (e1express) Net (02/06/2008 9.12.17.0)
Windows Driver Package - Intel (E1G60) Net (01/08/2008 8.3.9.0)
Windows Driver Package - Intel (e1kexpress) Net (07/22/2008 10.3.45.0)
Windows Driver Package - Intel (e1qexpress) Net (08/05/2008 10.3.49.0)
Windows Driver Package - Intel (e1yexpress) Net (07/16/2008 9.52.10.0)
Windows Driver Package - Intel Net (02/06/2008 9.12.18.0)
Windows Driver Package - Intel Net (06/13/2008 9.52.9.0)
Windows Driver Package - Intel Net (07/22/2008 10.3.45.0)
Windows Driver Package - Intel Net (08/05/2008 10.3.49.0)
Windows Driver Package - Intel Net (11/07/2007 8.10.1.0)
Windows Driver Package - Intel System (07/20/2007 1.2.76.0)
Windows Driver Package - Marvell (yukonwlh) Net (03/23/2007 10.12.7.3)
Windows Live Communications Platform
Windows Live Essentials
Windows Live ID Sign-in Assistant
Windows Live Installer
Windows Live Mail
Windows Live Messenger
Windows Live MIME IFilter
Windows Live Movie Maker
Windows Live Photo Common
Windows Live Photo Gallery
Windows Live PIMT Platform
Windows Live SOXE
Windows Live SOXE Definitions
Windows Live Sync
Windows Live UX Platform
Windows Live UX Platform Language Pack
Windows Live Writer
Windows Live Writer Resources
Windows SDK IntellisenseNFX
WinRAR archiver
WinZip 15.0
.
==== Event Viewer Messages From Past Week ========
.
1/1/2001 6:26:45 AM, Error: Service Control Manager [7001] - The Computer Browser service depends on the Server service which failed to start because of the following error: The dependency service or group failed to start.
1/1/2001 6:03:10 AM, Error: Service Control Manager [7001] - The HomeGroup Provider service depends on the Function Discovery Provider Host service which failed to start because of the following error: The dependency service or group failed to start.
1/1/2001 6:03:10 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server: {9E175B6D-F52A-11D8-B9A5-505054503030}
1/1/2001 6:03:09 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server: {7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}
1/1/2001 6:03:02 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service EventSystem with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}
1/1/2001 6:02:59 AM, Error: Microsoft-Windows-WLAN-AutoConfig [10000] - WLAN Extensibility Module has failed to start. Module Path: C:\Windows\System32\bcmihvsrv.dll Error Code: 21
1/1/2001 6:02:52 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service ShellHWDetection with arguments "" in order to run the server: {DD522ACC-F821-461A-A407-50B198B896DC}
1/1/2001 6:02:41 AM, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: BHDrvx86 ccSet_NIS discache eeCtrl IDSVix86 SAVOnAccess SBRE SKMScan spldr SRTSPX SymIRON SymNetS vmm Wanarpv6
1/1/2001 6:02:40 AM, Error: NETLOGON [5719] - This computer was not able to set up a secure session with a domain controller in domain OC due to the following: There are currently no logon servers available to service the logon request. This may lead to authentication problems. Make sure that this computer is connected to the network. If the problem persists, please contact your domain administrator. ADDITIONAL INFO If this computer is a domain controller for the specified domain, it sets up the secure session to the primary domain controller emulator in the specified domain. Otherwise, this computer sets up the secure session to any domain controller in the specified domain.
.
==== End Of File ===========================
ark.txt
GMER 1.0.15.15641 - http://www.gmer.net
Rootkit scan 2001-01-01 07:44:55
Windows 6.1.7601 Service Pack 1 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 Hitachi_HTS545025B9SA02 rev.PB2AC60W
Running: efg1pgph.exe; Driver: C:\Users\ERIC~1.FAL\AppData\Local\Temp\axliafow.sys
---- Kernel code sections - GMER 1.0.15 ----
.text ntkrnlpa.exe!ZwRollbackEnlistment + 140D 8227AA49 1 Byte [06]
.text ntkrnlpa.exe!KiDispatchInterrupt + 5A2 822B44D2 19 Bytes [E0, 0F, BA, F0, 07, 73, 09, ...] {LOOPNZ 0x11; MOV EDX, 0x97307f0; MOV CR4, EAX; OR AL, 0x80; MOV CR4, EAX; RET ; MOV ECX, CR3}
---- User code sections - GMER 1.0.15 ----
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ntdll.dll!NtCreateFile + 6 771555CE 4 Bytes [28, 00, 07, 00]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ntdll.dll!NtCreateFile + B 771555D3 1 Byte [E2]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ntdll.dll!NtCreateKey + 6 7715560E 4 Bytes [68, 01, 07, 00]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ntdll.dll!NtCreateKey + B 77155613 1 Byte [E2]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ntdll.dll!NtCreateMutant + 6 7715564E 4 Bytes [68, 02, 07, 00]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ntdll.dll!NtCreateMutant + B 77155653 1 Byte [E2]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ntdll.dll!NtCreateSection + 6 771556EE 4 Bytes [A8, 02, 07, 00]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ntdll.dll!NtCreateSection + B 771556F3 1 Byte [E2]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ntdll.dll!NtMapViewOfSection + B 77155C33 1 Byte [E2]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ntdll.dll!NtOpenFile + 6 77155CDE 4 Bytes [68, 00, 07, 00]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ntdll.dll!NtOpenFile + B 77155CE3 1 Byte [E2]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ntdll.dll!NtOpenKey + 6 77155D0E 4 Bytes [A8, 01, 07, 00]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ntdll.dll!NtOpenKey + B 77155D13 1 Byte [E2]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ntdll.dll!NtOpenKeyEx + B 77155D23 1 Byte [E2]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ntdll.dll!NtOpenMutant + 6 77155D5E 4 Bytes [28, 02, 07, 00]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ntdll.dll!NtOpenMutant + B 77155D63 1 Byte [E2]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ntdll.dll!NtOpenProcess + 6 77155D8E 1 Byte [68]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ntdll.dll!NtOpenProcess + 6 77155D8E 4 Bytes [68, 03, 07, 00]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ntdll.dll!NtOpenProcess + B 77155D93 1 Byte [E2]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ntdll.dll!NtOpenProcessToken + 6 77155D9E 1 Byte [A8]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ntdll.dll!NtOpenProcessToken + 6 77155D9E 4 Bytes [A8, 03, 07, 00]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ntdll.dll!NtOpenProcessToken + B 77155DA3 1 Byte [E2]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ntdll.dll!NtOpenProcessTokenEx + 6 77155DAE 4 Bytes [68, 04, 07, 00]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ntdll.dll!NtOpenProcessTokenEx + B 77155DB3 1 Byte [E2]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ntdll.dll!NtOpenSection + B 77155DD3 1 Byte [E2]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ntdll.dll!NtOpenThread + 6 77155E0E 1 Byte [28]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ntdll.dll!NtOpenThread + 6 77155E0E 4 Bytes [28, 03, 07, 00]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ntdll.dll!NtOpenThread + B 77155E13 1 Byte [E2]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ntdll.dll!NtOpenThreadToken + 6 77155E1E 4 Bytes [28, 04, 07, 00]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ntdll.dll!NtOpenThreadToken + B 77155E23 1 Byte [E2]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ntdll.dll!NtOpenThreadTokenEx + 6 77155E2E 4 Bytes [A8, 04, 07, 00]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ntdll.dll!NtOpenThreadTokenEx + B 77155E33 1 Byte [E2]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ntdll.dll!NtQueryAttributesFile + 6 77155F3E 4 Bytes [A8, 00, 07, 00]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ntdll.dll!NtQueryAttributesFile + B 77155F43 1 Byte [E2]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ntdll.dll!NtQueryFullAttributesFile + B 77155FF3 1 Byte [E2]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ntdll.dll!NtSetInformationFile + 6 7715663E 4 Bytes [28, 01, 07, 00]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ntdll.dll!NtSetInformationFile + B 77156643 1 Byte [E2]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ntdll.dll!NtSetInformationThread + 6 7715669E 1 Byte [E8]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ntdll.dll!NtSetInformationThread + B 771566A3 1 Byte [E2]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ntdll.dll!NtUnmapViewOfSection + 6 771569BE 4 Bytes [28, 05, 07, 00]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ntdll.dll!NtUnmapViewOfSection + B 771569C3 1 Byte [E2]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] kernel32.dll!CreateProcessW 756B204D 5 Bytes JMP 00010030
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] kernel32.dll!CreateProcessA 756B2082 5 Bytes JMP 00010070
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!DeleteObject 75665F14 5 Bytes JMP 001101B0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!SelectObject 75666640 5 Bytes JMP 001105F0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!SetTextColor 75666906 5 Bytes JMP 00110A30
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!SetBkMode 756669B1 5 Bytes JMP 001108F0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!DeleteDC 75666EAA 5 Bytes JMP 00110170
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!GetDeviceCaps 75666F7F 5 Bytes JMP 001103B0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!ExtSelectClipRgn 75667114 5 Bytes JMP 001102F0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!SelectClipRgn 75667242 5 Bytes JMP 001105B0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!SetStretchBltMode 75667705 5 Bytes JMP 001106B0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!GetCurrentObject 75667917 5 Bytes JMP 00110370
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!GetTextMetricsW 75667B8F 5 Bytes JMP 00110E30
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!GetTextAlign 75667DAF 5 Bytes JMP 00110D70
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!IntersectClipRect 75667DFE 5 Bytes JMP 001103F0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!ExtTextOutW 75668192 5 Bytes JMP 00110970
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!SetTextAlign 7566828E 5 Bytes JMP 001109F0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!GetClipBox 75668525 5 Bytes JMP 00110330
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!MoveToEx 75668C21 5 Bytes JMP 00110470
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!StretchDIBits 7566A53E 5 Bytes JMP 00110770
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!RestoreDC 7566A67B 5 Bytes JMP 00110530
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!SaveDC 7566A74B 5 Bytes JMP 00110570
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!GetTextExtentPoint32W 7566B4B5 5 Bytes JMP 00110670
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!GetTextFaceW 7566B73A 2 Bytes JMP 00110D30
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!GetTextFaceW + 3 7566B73D 2 Bytes [AA, 8A]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!GetFontData 7566BCC4 5 Bytes JMP 00110C70
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!SetWorldTransform 7566C90A 5 Bytes JMP 001106F0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!CreateDCA 7566CCA9 5 Bytes JMP 001100B0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!CreateDCW 7566CF79 5 Bytes JMP 001100F0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!CreateICW 7566CFD0 5 Bytes JMP 00110130
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!GetTextMetricsA 7566D0F2 5 Bytes JMP 00110DF0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!Rectangle 7566F1FF 5 Bytes JMP 001109B0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!LineTo 7566F59B 5 Bytes JMP 00110430
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!SetICMMode 7566FAA4 5 Bytes JMP 00110DB0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!ExtTextOutA 756703F9 5 Bytes JMP 00110930
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!GetTextExtentPoint32A 756707B0 5 Bytes JMP 00110630
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!ExtEscape 75672949 5 Bytes JMP 001102B0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!Escape 75673939 5 Bytes JMP 00110270
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!GetTextFaceA 75673E6A 5 Bytes JMP 00110CF0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!SetPolyFillMode 7567D851 5 Bytes JMP 00110B30
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!SetMiterLimit 7567DA0D 5 Bytes JMP 00110B70
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!EndPage 756800D7 5 Bytes JMP 00110230
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!ResetDCW 7568050D 5 Bytes JMP 00110AB0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!GetGlyphOutlineW 7568C1BA 5 Bytes JMP 00110CB0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!CreateScalableFontResourceW 7568E817 5 Bytes JMP 00110BB0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!AddFontResourceW 7568EC13 5 Bytes JMP 00110BF0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!RemoveFontResourceW 7568F109 5 Bytes JMP 00110C30
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!AbortDoc 75694C63 5 Bytes JMP 00110030
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!EndDoc 756950AA 5 Bytes JMP 001101F0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!StartPage 75695195 5 Bytes JMP 00110730
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!StartDocW 75695BB0 5 Bytes JMP 001107F0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!BeginPath 7569635D 5 Bytes JMP 00110830
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!SelectClipPath 756963B4 5 Bytes JMP 00110AF0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!CloseFigure 7569640F 5 Bytes JMP 00110070
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!EndPath 75696466 5 Bytes JMP 00110A70
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!StrokePath 75696699 5 Bytes JMP 001107B0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!FillPath 75696726 5 Bytes JMP 00110870
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!PolylineTo 75696B94 5 Bytes JMP 001104F0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!PolyBezierTo 75696C25 5 Bytes JMP 001104B0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] GDI32.dll!PolyDraw 75696CD7 5 Bytes JMP 001108B0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] USER32.dll!ActivateKeyboardLayout 76F28203 5 Bytes JMP 001204F0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] USER32.dll!ScreenToClient 76F2A506 7 Bytes JMP 00120670
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] USER32.dll!RegisterClipboardFormatA 76F2C091 5 Bytes JMP 001202F0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] USER32.dll!RegisterClipboardFormatW 76F2DF8D 5 Bytes JMP 001202B0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] USER32.dll!SetCursor 76F33075 5 Bytes JMP 00120530
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] USER32.dll!MonitorFromWindow 76F33622 7 Bytes JMP 00120630
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] USER32.dll!PostMessageW 76F3447B 5 Bytes JMP 001205F0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] USER32.dll!IsWindowVisible 76F34D69 7 Bytes JMP 001206B0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] USER32.dll!GetClientRect 76F354DD 7 Bytes JMP 001205B0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] USER32.dll!MapWindowPoints 76F35CAA 5 Bytes JMP 00120570
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] USER32.dll!GetParent 76F36029 7 Bytes JMP 001206F0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] USER32.dll!EmptyClipboard 76F4290C 5 Bytes JMP 00120130
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] USER32.dll!SetClipboardData 76F42962 5 Bytes JMP 00120170
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] USER32.dll!GetClipboardData 76F42BA7 5 Bytes JMP 00120030
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] USER32.dll!GetClipboardFormatNameW 76F45FD2 5 Bytes JMP 00120230
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] USER32.dll!SetClipboardViewer 76F46FF6 5 Bytes JMP 001204B0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] USER32.dll!GetClipboardFormatNameA 76F4700A 5 Bytes JMP 00120270
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] USER32.dll!ChangeClipboardChain 76F5147C 5 Bytes JMP 00120430
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] USER32.dll!GetTopWindow 76F524D9 7 Bytes JMP 00120730
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] USER32.dll!CloseClipboard 76F5446C 5 Bytes JMP 001200B0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] USER32.dll!OpenClipboard 76F5447E 5 Bytes JMP 00120070
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] USER32.dll!IsClipboardFormatAvailable 76F544FF 5 Bytes JMP 001200F0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] USER32.dll!GetClipboardSequenceNumber 76F54513 5 Bytes JMP 00120330
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] USER32.dll!GetClipboardOwner 76F54525 5 Bytes JMP 00120370
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] USER32.dll!CountClipboardFormats 76F5470A 5 Bytes JMP 001201F0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] USER32.dll!EnumClipboardFormats 76F547EC 5 Bytes JMP 001201B0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] USER32.dll!GetOpenClipboardWindow 76F5480B 5 Bytes JMP 001203F0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] USER32.dll!SetCursorPos 76F6C1B0 5 Bytes JMP 00120770
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] USER32.dll!GetClipboardViewer 76F84AF7 5 Bytes JMP 00120470
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] USER32.dll!GetPriorityClipboardFormat 76F84BF9 5 Bytes JMP 001203B0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ole32.dll!OleSetClipboard 76D90045 5 Bytes JMP 00130030
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ole32.dll!OleIsCurrentClipboard 76D936B2 5 Bytes JMP 00130070
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe[1204] ole32.dll!OleGetClipboard 76DBFDCD 5 Bytes JMP 001300B0
.text C:\Program Files\Mozilla Firefox\plugin-container.exe[1604] USER32.dll!RegisterMessagePumpHook + 2F1 76F28B9E 7 Bytes JMP 6BFC32C0 C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text C:\Program Files\Mozilla Firefox\plugin-container.exe[1604] USER32.dll!IsDialogMessageW + 340 76F34444 7 Bytes JMP 6BFC324F C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text C:\Program Files\Mozilla Firefox\plugin-container.exe[1604] USER32.dll!GetWindowInfo 76F34B5E 5 Bytes JMP 6BE0A8A3 C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text C:\Program Files\Mozilla Firefox\plugin-container.exe[1604] USER32.dll!ToUnicodeEx + 71 76F42223 7 Bytes JMP 6BE0AED5 C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text C:\Program Files\Mozilla Firefox\firefox.exe[1988] ntdll.dll!LdrGetProcedureAddress + 26 77172239 7 Bytes JMP 6BCA4470 C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text C:\Program Files\Mozilla Firefox\firefox.exe[1988] kernel32.dll!K32GetDeviceDriverBaseNameW + 5D 756F941E 7 Bytes JMP 6BEF0459 C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text C:\Program Files\Mozilla Firefox\firefox.exe[1988] kernel32.dll!QueryPerformanceCounter + 13 756FC435 7 Bytes JMP 6BEF047C C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text C:\Program Files\Mozilla Firefox\firefox.exe[1988] kernel32.dll!LoadAppInitDlls + 355 756FF4F6 7 Bytes JMP 6BCAF972 C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text C:\Program Files\Mozilla Firefox\firefox.exe[1988] USER32.dll!GetWindowInfo 76F34B5E 5 Bytes JMP 6BE12157 C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text C:\Program Files\Mozilla Firefox\firefox.exe[1988] GDI32.dll!GetViewportOrgEx + 26C 7566884B 7 Bytes JMP 6BEF03DA C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
---- Devices - GMER 1.0.15 ----
AttachedDevice \Driver\volmgr \Device\HarddiskVolume1 fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation)
AttachedDevice \Driver\volmgr \Device\HarddiskVolume1 rdyboost.sys (ReadyBoost Driver/Microsoft Corporation)
AttachedDevice \Driver\volmgr \Device\HarddiskVolume2 fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation)
AttachedDevice \Driver\volmgr \Device\HarddiskVolume2 rdyboost.sys (ReadyBoost Driver/Microsoft Corporation)
AttachedDevice \Driver\volmgr \Device\HarddiskVolume3 fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation)
AttachedDevice \Driver\volmgr \Device\HarddiskVolume3 rdyboost.sys (ReadyBoost Driver/Microsoft Corporation)
Device \Driver\ACPI_HAL \Device\0000005d halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation)
---- Registry - GMER 1.0.15 ----
Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\58b0357a94c5
Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\58b0357a94c5 (not active ControlSet)
Reg HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartPage\NewShortc uts@C:\Users\eric.falley\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SUPER \xa9 - by eRightSoft\SUPER \xa9.lnk 1
Reg HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartPage\NewShortc uts@C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPER \xa9 - by eRightSoft\SUPER \xa9.lnk 1
---- EOF - GMER 1.0.15 ----